; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : BAC4CC6EEC5BBDA11A33DA1FF01631A3 ; File Name : u:\work\bac4cc6eec5bbda11a33da1ff01631a3_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 000041DF ( 16863.) ; Section size in file : 000041DF ( 16863.) ; Offset to raw data for section: 00001000 ; Flags 60000020: Text Executable Readable ; Alignment : default ; OS type : MS Windows ; Application type: Executable 32bit include uni.inc ; see unicode subdir of ida for info on unicode .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 401000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401000 proc near ; DATA XREF: .data:00407004o push ebp mov ebp, esp call sub_40100A pop ebp retn sub_401000 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40100A proc near ; CODE XREF: sub_401000+3p push ebp mov ebp, esp push 0Ch push offset dword_4071B4 call sub_401D4B add esp, 8 mov dword_408090, eax pop ebp retn sub_40100A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401023 proc near ; DATA XREF: .data:00407008o push ebp mov ebp, esp call sub_40102D pop ebp retn sub_401023 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40102D proc near ; CODE XREF: sub_401023+3p push ebp mov ebp, esp push 0Eh push offset dword_4071C4 call sub_401D4B add esp, 8 mov dword_407E6C, eax pop ebp retn sub_40102D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401046 proc near ; DATA XREF: .data:0040700Co push ebp mov ebp, esp call sub_401050 pop ebp retn sub_401046 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401050 proc near ; CODE XREF: sub_401046+3p push ebp mov ebp, esp push 0Eh push offset aJyMiy ; "\bݾ\"٦Y߽~y" call sub_401D4B add esp, 8 mov dword_407E58, eax pop ebp retn sub_401050 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401069 proc near ; DATA XREF: .data:00407010o push ebp mov ebp, esp call sub_401073 pop ebp retn sub_401069 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401073 proc near ; CODE XREF: sub_401069+3p push ebp mov ebp, esp push 14h push offset dword_4071E4 call sub_401D4B add esp, 8 mov dword_40815C, eax pop ebp retn sub_401073 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40108C proc near ; DATA XREF: .data:00407014o push ebp mov ebp, esp call sub_401096 pop ebp retn sub_40108C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401096 proc near ; CODE XREF: sub_40108C+3p push ebp mov ebp, esp push 0Ch push offset a5VuoI ; "\x1B5ڢuӈ" call sub_401D4B add esp, 8 mov dword_4081C0, eax pop ebp retn sub_401096 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010AF proc near ; DATA XREF: .data:00407018o push ebp mov ebp, esp call sub_4010B9 pop ebp retn sub_4010AF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010B9 proc near ; CODE XREF: sub_4010AF+3p push ebp mov ebp, esp push 0Eh push offset a5VuoIM ; "\x1B5ڢuӈm" call sub_401D4B add esp, 8 mov dword_4081C4, eax pop ebp retn sub_4010B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010D2 proc near ; DATA XREF: .data:0040701Co push ebp mov ebp, esp call sub_4010DC pop ebp retn sub_4010D2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010DC proc near ; CODE XREF: sub_4010D2+3p push ebp mov ebp, esp push 10h push offset a5VuNulmyr ; "\x1B5ڢu֍Y" call sub_401D4B add esp, 8 mov dword_408114, eax pop ebp retn sub_4010DC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010F5 proc near ; DATA XREF: .data:00407020o push ebp mov ebp, esp call sub_4010FF pop ebp retn sub_4010F5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010FF proc near ; CODE XREF: sub_4010F5+3p push ebp mov ebp, esp push 0Eh push offset a5VuLM ; "\x1B5ڢűm" call sub_401D4B add esp, 8 mov dword_407E64, eax pop ebp retn sub_4010FF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401118 proc near ; DATA XREF: .data:00407024o push ebp mov ebp, esp call sub_401122 pop ebp retn sub_401118 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401122 proc near ; CODE XREF: sub_401118+3p push ebp mov ebp, esp push 12h push offset dword_407240 call sub_401D4B add esp, 8 mov dword_408144, eax pop ebp retn sub_401122 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40113B proc near ; DATA XREF: .data:00407028o push ebp mov ebp, esp call sub_401145 pop ebp retn sub_40113B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401145 proc near ; CODE XREF: sub_40113B+3p push ebp mov ebp, esp push 11h push offset dword_407254 call sub_401D4B add esp, 8 mov dword_40813C, eax pop ebp retn sub_401145 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40115E proc near ; DATA XREF: .data:0040702Co push ebp mov ebp, esp call sub_401168 pop ebp retn sub_40115E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401168 proc near ; CODE XREF: sub_40115E+3p push ebp mov ebp, esp push 10h push offset dword_407268 call sub_401D4B add esp, 8 mov dword_407E80, eax pop ebp retn sub_401168 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401181 proc near ; DATA XREF: .data:00407030o push ebp mov ebp, esp call sub_40118B pop ebp retn sub_401181 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40118B proc near ; CODE XREF: sub_401181+3p push ebp mov ebp, esp push 10h push offset dword_40727C call sub_401D4B add esp, 8 mov dword_408174, eax pop ebp retn sub_40118B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011A4 proc near ; DATA XREF: .data:00407034o push ebp mov ebp, esp call sub_4011AE pop ebp retn sub_4011A4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011AE proc near ; CODE XREF: sub_4011A4+3p push ebp mov ebp, esp push 0Ch push offset dword_407290 call sub_401D4B add esp, 8 mov dword_4082C8, eax pop ebp retn sub_4011AE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011C7 proc near ; DATA XREF: .data:00407038o push ebp mov ebp, esp call sub_4011D1 pop ebp retn sub_4011C7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011D1 proc near ; CODE XREF: sub_4011C7+3p push ebp mov ebp, esp push 12h push offset dword_4072A0 call sub_401D4B add esp, 8 mov dword_408138, eax pop ebp retn sub_4011D1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011EA proc near ; DATA XREF: .data:0040703Co push ebp mov ebp, esp call sub_4011F4 pop ebp retn sub_4011EA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4011F4 proc near ; CODE XREF: sub_4011EA+3p push ebp mov ebp, esp push 11h push offset dword_4072B4 call sub_401D4B add esp, 8 mov dword_407E5C, eax pop ebp retn sub_4011F4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40120D proc near ; DATA XREF: .data:00407040o push ebp mov ebp, esp call sub_401217 pop ebp retn sub_40120D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401217 proc near ; CODE XREF: sub_40120D+3p push ebp mov ebp, esp push 0Ch push offset dword_4072C8 call sub_401D4B add esp, 8 mov dword_4082DC, eax pop ebp retn sub_401217 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401230 proc near ; DATA XREF: .data:00407044o push ebp mov ebp, esp call sub_40123A pop ebp retn sub_401230 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40123A proc near ; CODE XREF: sub_401230+3p push ebp mov ebp, esp push 0Dh push offset aJUi ; "\v%||i" call sub_401D4B add esp, 8 mov dword_407F1C, eax pop ebp retn sub_40123A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401253 proc near ; DATA XREF: .data:00407048o push ebp mov ebp, esp call sub_40125D pop ebp retn sub_401253 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40125D proc near ; CODE XREF: sub_401253+3p push ebp mov ebp, esp push 0Ch push offset dword_4072E8 call sub_401D4B add esp, 8 mov dword_407F24, eax pop ebp retn sub_40125D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401276 proc near ; DATA XREF: .data:0040704Co push ebp mov ebp, esp call sub_401280 pop ebp retn sub_401276 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401280 proc near ; CODE XREF: sub_401276+3p push ebp mov ebp, esp push 0Eh push offset dword_4072F8 call sub_401D4B add esp, 8 mov dword_408134, eax pop ebp retn sub_401280 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401299 proc near ; DATA XREF: .data:00407050o push ebp mov ebp, esp call sub_4012A3 pop ebp retn sub_401299 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4012A3 proc near ; CODE XREF: sub_401299+3p push ebp mov ebp, esp push 0Bh push offset aJoZ ; "\bݾ\"٦OֺZ" call sub_401D4B add esp, 8 mov dword_408078, eax pop ebp retn sub_4012A3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4012BC proc near ; DATA XREF: .data:00407054o push ebp mov ebp, esp call sub_4012C6 pop ebp retn sub_4012BC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4012C6 proc near ; CODE XREF: sub_4012BC+3p push ebp mov ebp, esp push 0Eh push offset dword_407314 call sub_401D4B add esp, 8 mov dword_4081BC, eax pop ebp retn sub_4012C6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4012DF proc near ; DATA XREF: .data:00407058o push ebp mov ebp, esp call sub_4012E9 pop ebp retn sub_4012DF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4012E9 proc near ; CODE XREF: sub_4012DF+3p push ebp mov ebp, esp push 9 push offset dword_407324 call sub_401D4B add esp, 8 mov dword_4080FC, eax pop ebp retn sub_4012E9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401302 proc near ; DATA XREF: .data:0040705Co push ebp mov ebp, esp call sub_40130C pop ebp retn sub_401302 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40130C proc near ; CODE XREF: sub_401302+3p push ebp mov ebp, esp push 0Bh push offset a4Ij ; "\b4ʉj۲~" call sub_401D4B add esp, 8 mov dword_408094, eax pop ebp retn sub_40130C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401325 proc near ; DATA XREF: .data:00407060o push ebp mov ebp, esp call sub_40132F pop ebp retn sub_401325 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40132F proc near ; CODE XREF: sub_401325+3p push ebp mov ebp, esp push 0Dh push offset dword_40733C call sub_401D4B add esp, 8 mov dword_4082CC, eax pop ebp retn sub_40132F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401348 proc near ; DATA XREF: .data:00407064o push ebp mov ebp, esp call sub_401352 pop ebp retn sub_401348 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401352 proc near ; CODE XREF: sub_401348+3p push ebp mov ebp, esp push 0Bh push offset dword_40734C call sub_401D4B add esp, 8 mov dword_407F10, eax pop ebp retn sub_401352 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40136B proc near ; DATA XREF: .data:00407068o push ebp mov ebp, esp call sub_401375 pop ebp retn sub_40136B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401375 proc near ; CODE XREF: sub_40136B+3p push ebp mov ebp, esp push 17h push offset dword_407358 call sub_401D4B add esp, 8 mov dword_408128, eax pop ebp retn sub_401375 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40138E proc near ; DATA XREF: .data:0040706Co push ebp mov ebp, esp call sub_401398 pop ebp retn sub_40138E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401398 proc near ; CODE XREF: sub_40138E+3p push ebp mov ebp, esp push 14h push offset dword_407370 call sub_401D4B add esp, 8 mov dword_407F14, eax pop ebp retn sub_401398 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4013B1 proc near ; DATA XREF: .data:00407070o push ebp mov ebp, esp call sub_4013BB pop ebp retn sub_4013B1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4013BB proc near ; CODE XREF: sub_4013B1+3p push ebp mov ebp, esp push 12h push offset dword_407388 call sub_401D4B add esp, 8 mov dword_4082B0, eax pop ebp retn sub_4013BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4013D4 proc near ; DATA XREF: .data:00407074o push ebp mov ebp, esp call sub_4013DE pop ebp retn sub_4013D4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4013DE proc near ; CODE XREF: sub_4013D4+3p push ebp mov ebp, esp push 0Ch push offset dword_40739C call sub_401D4B add esp, 8 mov dword_407E74, eax pop ebp retn sub_4013DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4013F7 proc near ; DATA XREF: .data:00407078o push ebp mov ebp, esp call sub_401401 pop ebp retn sub_4013F7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401401 proc near ; CODE XREF: sub_4013F7+3p push ebp mov ebp, esp push 0Bh push offset aKwZ ; "\v%wѽZ" call sub_401D4B add esp, 8 mov dword_4082D8, eax pop ebp retn sub_401401 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40141A proc near ; DATA XREF: .data:0040707Co push ebp mov ebp, esp call sub_401424 pop ebp retn sub_40141A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401424 proc near ; CODE XREF: sub_40141A+3p push ebp mov ebp, esp push 0Fh push offset dword_4073B8 call sub_401D4B add esp, 8 mov dword_4082A8, eax pop ebp retn sub_401424 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40143D proc near ; DATA XREF: .data:00407080o push ebp mov ebp, esp call sub_401447 pop ebp retn sub_40143D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401447 proc near ; CODE XREF: sub_40143D+3p push ebp mov ebp, esp push 0Bh push offset dword_4073C8 call sub_401D4B add esp, 8 mov dword_40808C, eax pop ebp retn sub_401447 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401460 proc near ; DATA XREF: .data:00407084o push ebp mov ebp, esp call sub_40146A pop ebp retn sub_401460 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40146A proc near ; CODE XREF: sub_401460+3p push ebp mov ebp, esp push 0Eh push offset dword_4073D4 call sub_401D4B add esp, 8 mov dword_40819C, eax pop ebp retn sub_40146A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401483 proc near ; DATA XREF: .data:00407088o push ebp mov ebp, esp call sub_40148D pop ebp retn sub_401483 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40148D proc near ; CODE XREF: sub_401483+3p push ebp mov ebp, esp push 0Ch push offset a0NQEe ; "0/ʭ<|˅" call sub_401D4B add esp, 8 mov dword_4082C4, eax pop ebp retn sub_40148D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014A6 proc near ; DATA XREF: .data:0040708Co push ebp mov ebp, esp call sub_4014B0 pop ebp retn sub_4014A6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014B0 proc near ; CODE XREF: sub_4014A6+3p push ebp mov ebp, esp push 9 push offset a3Om ; "3߽-omٺ" call sub_401D4B add esp, 8 mov dword_40812C, eax pop ebp retn sub_4014B0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014C9 proc near ; DATA XREF: .data:00407090o push ebp mov ebp, esp call sub_4014D3 pop ebp retn sub_4014C9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014D3 proc near ; CODE XREF: sub_4014C9+3p push ebp mov ebp, esp push 0Bh push offset a88RiE ; "88ƱrӅ" call sub_401D4B add esp, 8 mov dword_407F30, eax pop ebp retn sub_4014D3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014EC proc near ; DATA XREF: .data:00407094o push ebp mov ebp, esp call sub_4014F6 pop ebp retn sub_4014EC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4014F6 proc near ; CODE XREF: sub_4014EC+3p push ebp mov ebp, esp push 0Ch push offset aKQEe ; "&\"ժ<|˅" call sub_401D4B add esp, 8 mov dword_407F04, eax pop ebp retn sub_4014F6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40150F proc near ; DATA XREF: .data:00407098o push ebp mov ebp, esp call sub_401519 pop ebp retn sub_40150F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401519 proc near ; CODE XREF: sub_40150F+3p push ebp mov ebp, esp push 0Bh push offset a8TIE ; "8Ӿ-t;Ӆ" call sub_401D4B add esp, 8 mov dword_408104, eax pop ebp retn sub_401519 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401532 proc near ; DATA XREF: .data:0040709Co push ebp mov ebp, esp call sub_40153C pop ebp retn sub_401532 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40153C proc near ; CODE XREF: sub_401532+3p push ebp mov ebp, esp push 0Bh push offset aJIE ; "<*Ӧ}Ӆ" call sub_401D4B add esp, 8 mov dword_407F00, eax pop ebp retn sub_40153C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401555 proc near ; DATA XREF: .data:004070A0o push ebp mov ebp, esp call sub_40155F pop ebp retn sub_401555 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40155F proc near ; CODE XREF: sub_401555+3p push ebp mov ebp, esp push 0Ah push offset a_P7 ; ":.ԯ7Ѻ" call sub_401D4B add esp, 8 mov dword_40807C, eax pop ebp retn sub_40155F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401578 proc near ; DATA XREF: .data:004070A4o push ebp mov ebp, esp call sub_401582 pop ebp retn sub_401578 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401582 proc near ; CODE XREF: sub_401578+3p push ebp mov ebp, esp push 0Ah push offset a3ss7 ; ":3s7Ѻ" call sub_401D4B add esp, 8 mov dword_4081B8, eax pop ebp retn sub_401582 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40159B proc near ; DATA XREF: .data:004070A8o push ebp mov ebp, esp call sub_4015A5 pop ebp retn sub_40159B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015A5 proc near ; CODE XREF: sub_40159B+3p push ebp mov ebp, esp push 5 push offset dword_40744C call sub_401D4B add esp, 8 mov dword_408110, eax pop ebp retn sub_4015A5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015BE proc near ; DATA XREF: .data:004070ACo push ebp mov ebp, esp call sub_4015C8 pop ebp retn sub_4015BE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015C8 proc near ; CODE XREF: sub_4015BE+3p push ebp mov ebp, esp push 4 push offset dword_407454 call sub_401D4B add esp, 8 mov dword_4082D0, eax pop ebp retn sub_4015C8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015E1 proc near ; DATA XREF: .data:004070B0o push ebp mov ebp, esp call sub_4015EB pop ebp retn sub_4015E1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015EB proc near ; CODE XREF: sub_4015E1+3p push ebp mov ebp, esp push 4 push offset dword_40745C call sub_401D4B add esp, 8 mov dword_408198, eax pop ebp retn sub_4015EB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401604 proc near ; DATA XREF: .data:004070B4o push ebp mov ebp, esp call sub_40160E pop ebp retn sub_401604 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40160E proc near ; CODE XREF: sub_401604+3p push ebp mov ebp, esp push 4Ah push offset dword_407464 call sub_401D4B add esp, 8 mov dword_408154, eax pop ebp retn sub_40160E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401627 proc near ; DATA XREF: .data:004070B8o push ebp mov ebp, esp call sub_401631 pop ebp retn sub_401627 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401631 proc near ; CODE XREF: sub_401627+3p push ebp mov ebp, esp push 7 push offset dword_4074B0 call sub_401D4B add esp, 8 mov dword_4081D0, eax pop ebp retn sub_401631 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40164A proc near ; DATA XREF: .data:004070BCo push ebp mov ebp, esp call sub_401654 pop ebp retn sub_40164A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401654 proc near ; CODE XREF: sub_40164A+3p push ebp mov ebp, esp push 0Bh push offset dword_4074B8 call sub_401D4B add esp, 8 mov dword_40818C, eax pop ebp retn sub_401654 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40166D proc near ; DATA XREF: .data:004070C0o push ebp mov ebp, esp call sub_401677 pop ebp retn sub_40166D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401677 proc near ; CODE XREF: sub_40166D+3p push ebp mov ebp, esp push 1Eh push offset dword_4074C4 call sub_401D4B add esp, 8 mov dword_408160, eax pop ebp retn sub_401677 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401690 proc near ; DATA XREF: .data:004070C4o push ebp mov ebp, esp call sub_40169A pop ebp retn sub_401690 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40169A proc near ; CODE XREF: sub_401690+3p push ebp mov ebp, esp push 0Dh push offset aE4OyXN ; "\b4Ʈyٳ~" call sub_401D4B add esp, 8 mov dword_4080F8, eax pop ebp retn sub_40169A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4016B3 proc near ; DATA XREF: .data:004070C8o push ebp mov ebp, esp call sub_4016BD pop ebp retn sub_4016B3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4016BD proc near ; CODE XREF: sub_4016B3+3p push ebp mov ebp, esp push 20h push offset aE8PmUmbliNx7j ; "\b8ίmuͭX=7j" call sub_401D4B add esp, 8 mov dword_408124, eax pop ebp retn sub_4016BD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4016D6 proc near ; DATA XREF: .data:004070CCo push ebp mov ebp, esp call sub_4016E0 pop ebp retn sub_4016D6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4016E0 proc near ; CODE XREF: sub_4016D6+3p push ebp mov ebp, esp push 0Bh push offset aR3PTL ; "(3ʯ}̋" call sub_401D4B add esp, 8 mov dword_408190, eax pop ebp retn sub_4016E0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4016F9 proc near ; DATA XREF: .data:004070D0o push ebp mov ebp, esp call sub_401703 pop ebp retn sub_4016F9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401703 proc near ; CODE XREF: sub_4016F9+3p push ebp mov ebp, esp push 34h push offset dword_407524 call sub_401D4B add esp, 8 mov dword_407F0C, eax pop ebp retn sub_401703 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40171C proc near ; DATA XREF: .data:004070D4o push ebp mov ebp, esp call sub_401726 pop ebp retn sub_40171C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401726 proc near ; CODE XREF: sub_40171C+3p push ebp mov ebp, esp push 31h push offset dword_40755C call sub_401D4B add esp, 8 mov dword_407F20, eax pop ebp retn sub_401726 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40173F proc near ; DATA XREF: .data:004070D8o push ebp mov ebp, esp call sub_401749 pop ebp retn sub_40173F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401749 proc near ; CODE XREF: sub_40173F+3p push ebp mov ebp, esp push 35h push offset dword_407590 call sub_401D4B add esp, 8 mov dword_407F18, eax pop ebp retn sub_401749 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401762 proc near ; DATA XREF: .data:004070DCo push ebp mov ebp, esp call sub_40176C pop ebp retn sub_401762 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40176C proc near ; CODE XREF: sub_401762+3p push ebp mov ebp, esp push 9 push offset dword_4075C8 call sub_401D4B add esp, 8 mov dword_408100, eax pop ebp retn sub_40176C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401785 proc near ; DATA XREF: .data:004070E0o push ebp mov ebp, esp call sub_40178F pop ebp retn sub_401785 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40178F proc near ; CODE XREF: sub_401785+3p push ebp mov ebp, esp push 0Eh push offset a0JFEui ; "0̳jڔЅ]" call sub_401D4B add esp, 8 mov dword_40816C, eax pop ebp retn sub_40178F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017A8 proc near ; DATA XREF: .data:004070E4o push ebp mov ebp, esp call sub_4017B2 pop ebp retn sub_4017A8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017B2 proc near ; CODE XREF: sub_4017A8+3p push ebp mov ebp, esp push 0Dh push offset a4JvPum ; "4٦vЏM" call sub_401D4B add esp, 8 mov dword_408148, eax pop ebp retn sub_4017B2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017CB proc near ; DATA XREF: .data:004070E8o push ebp mov ebp, esp call sub_4017D5 pop ebp retn sub_4017CB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017D5 proc near ; CODE XREF: sub_4017CB+3p push ebp mov ebp, esp push 0Ch push offset a4JvN ; "4٦v֍^" call sub_401D4B add esp, 8 mov dword_408118, eax pop ebp retn sub_4017D5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017EE proc near ; DATA XREF: .data:004070ECo push ebp mov ebp, esp call sub_4017F8 pop ebp retn sub_4017EE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4017F8 proc near ; CODE XREF: sub_4017EE+3p push ebp mov ebp, esp push 6 push offset dword_407604 call sub_401D4B add esp, 8 mov dword_408074, eax pop ebp retn sub_4017F8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401811 proc near ; DATA XREF: .data:004070F0o push ebp mov ebp, esp call sub_40181B pop ebp retn sub_401811 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40181B proc near ; CODE XREF: sub_401811+3p push ebp mov ebp, esp push 33h push offset dword_40760C call sub_401D4B add esp, 8 mov dword_407F28, eax pop ebp retn sub_40181B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401834 proc near ; CODE XREF: sub_401A5E+4Fp ; .text:00401AFAp ... var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch mov eax, [ebp+arg_0] push eax call ds:dword_4060E8 mov [ebp+var_8], eax push 48h push 5Ah mov ecx, [ebp+var_8] push ecx call ds:dword_406000 push eax mov edx, [ebp+arg_4] push edx call ds:dword_406018 neg eax mov [ebp+var_C], eax mov esp, ebp pop ebp retn sub_401834 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401869 proc near ; CODE XREF: .text:00401B02p ; WinMain(x,x,x,x):loc_404A83p ... push ebp mov ebp, esp mov dword_407EF8, 1 jmp short loc_401885 ; --------------------------------------------------------------------------- loc_401878: ; CODE XREF: sub_401869:loc_401927j mov eax, dword_407EF8 add eax, 1 mov dword_407EF8, eax loc_401885: ; CODE XREF: sub_401869+Dj cmp dword_407EF8, 3 jg loc_40192C mov ecx, dword_407EF8 and ecx, 80000001h jns short loc_4018A5 dec ecx or ecx, 0FFFFFFFEh inc ecx loc_4018A5: ; CODE XREF: sub_401869+35j test ecx, ecx jz short loc_401927 mov dword_407EF0, 1 jmp short loc_4018C4 ; --------------------------------------------------------------------------- loc_4018B5: ; CODE XREF: sub_401869:loc_401925j mov edx, dword_407EF0 add edx, 1 mov dword_407EF0, edx loc_4018C4: ; CODE XREF: sub_401869+4Aj cmp dword_407EF0, 8 jg short loc_401927 mov eax, dword_407EF0 and eax, 80000001h jns short loc_4018DE dec eax or eax, 0FFFFFFFEh inc eax loc_4018DE: ; CODE XREF: sub_401869+6Ej test eax, eax jnz short loc_4018F9 mov ecx, dword_407EF0 imul ecx, 9 mov edx, dword_407EF8 mov byte_408098[ecx+edx], 78h loc_4018F9: ; CODE XREF: sub_401869+77j mov eax, dword_407EF0 and eax, 80000001h jns short loc_40190A dec eax or eax, 0FFFFFFFEh inc eax loc_40190A: ; CODE XREF: sub_401869+9Aj test eax, eax jz short loc_401925 mov ecx, dword_407EF0 imul ecx, 9 mov edx, dword_407EF8 mov byte_408098[ecx+edx], 5Fh loc_401925: ; CODE XREF: sub_401869+A3j jmp short loc_4018B5 ; --------------------------------------------------------------------------- loc_401927: ; CODE XREF: sub_401869+3Ej ; sub_401869+62j jmp loc_401878 ; --------------------------------------------------------------------------- loc_40192C: ; CODE XREF: sub_401869+23j pop ebp retn sub_401869 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40192E proc near ; CODE XREF: .text:00401B11p ; WinMain(x,x,x,x)+691p push ebp mov ebp, esp mov dword_407EF8, 1 jmp short loc_40194A ; --------------------------------------------------------------------------- loc_40193D: ; CODE XREF: sub_40192E:loc_401A41j mov eax, dword_407EF8 add eax, 1 mov dword_407EF8, eax loc_40194A: ; CODE XREF: sub_40192E+Dj cmp dword_407EF8, 8 jg loc_401A46 mov dword_407EF0, 1 jmp short loc_401972 ; --------------------------------------------------------------------------- loc_401963: ; CODE XREF: sub_40192E+10Ej mov ecx, dword_407EF0 add ecx, 1 mov dword_407EF0, ecx loc_401972: ; CODE XREF: sub_40192E+33j cmp dword_407EF0, 8 jg loc_401A41 mov edx, dword_407EF0 imul edx, 9 mov eax, dword_407EF8 movsx ecx, byte_408098[edx+eax] cmp ecx, 78h jz short loc_4019FD mov edx, dword_407EF0 imul edx, 9 mov eax, dword_407EF8 movsx ecx, byte_408098[edx+eax] cmp ecx, 6Fh jz short loc_4019FD mov edx, dword_407EF0 imul edx, 9 mov eax, dword_407EF8 movsx ecx, byte_408098[edx+eax] cmp ecx, 58h jz short loc_4019FD mov edx, dword_407EF0 imul edx, 9 mov eax, dword_407EF8 movsx ecx, byte_408098[edx+eax] cmp ecx, 4Fh jz short loc_4019FD push offset dword_407640 push offset byte_407F3C call sub_404FB4 add esp, 8 loc_4019FD: ; CODE XREF: sub_40192E+6Aj ; sub_40192E+85j ... mov edx, dword_407EF0 imul edx, 9 mov eax, dword_407EF8 movsx ecx, byte_408098[edx+eax] cmp ecx, 78h jnz short loc_401A2A push offset dword_407644 push offset byte_407F3C call sub_404FB4 add esp, 8 loc_401A2A: ; CODE XREF: sub_40192E+E8j push offset dword_407648 push offset byte_407F3C call sub_404FB4 add esp, 8 jmp loc_401963 ; --------------------------------------------------------------------------- loc_401A41: ; CODE XREF: sub_40192E+4Bj jmp loc_40193D ; --------------------------------------------------------------------------- loc_401A46: ; CODE XREF: sub_40192E+23j push offset byte_407F3C push 0 push 0Ch mov edx, dword_4081A0 push edx call ds:dword_4060B8 pop ebp retn sub_40192E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401A5E proc near ; CODE XREF: .text:00401AE7p push ebp mov ebp, esp mov dword_407EF8, 1 jmp short loc_401A7A ; --------------------------------------------------------------------------- loc_401A6D: ; CODE XREF: sub_401A5E:loc_401ABFj mov eax, dword_407EF8 add eax, 1 mov dword_407EF8, eax loc_401A7A: ; CODE XREF: sub_401A5E+Dj cmp dword_407EF8, 12Bh jg short loc_401AC1 mov ecx, dword_407EF8 mov byte_407F3C[ecx], 0 cmp dword_407EF8, 122h jnz short loc_401ABF push offset aTimesNewRoma_1 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch mov dword_40806C, 0 loc_401ABF: ; CODE XREF: sub_401A5E+3Fj jmp short loc_401A6D ; --------------------------------------------------------------------------- loc_401AC1: ; CODE XREF: sub_401A5E+26j pop ebp retn sub_401A5E endp ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx mov dword ptr [ebp-4], 0 cmp dword ptr [ebp-4], 0 jnz short loc_401B2C push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC call sub_401A5E push offset aMsSansSerif_8 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch call sub_401869 mov dword_40806C, 0 call sub_40192E push offset aTimesNewRoma_2 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch loc_401B2C: ; CODE XREF: .text:00401AD2j mov esp, ebp pop ebp retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401B30 proc near ; CODE XREF: sub_401D4B+81p ; sub_402CFF+826p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push esi mov [ebp+var_C], 0 mov [ebp+var_4], 0 mov [ebp+var_8], 0 jmp short loc_401B57 ; --------------------------------------------------------------------------- loc_401B4E: ; CODE XREF: sub_401B30+10Aj mov eax, [ebp+var_8] add eax, 1 mov [ebp+var_8], eax loc_401B57: ; CODE XREF: sub_401B30+1Cj mov ecx, [ebp+var_8] cmp ecx, [ebp+arg_8] jnb loc_401C3F mov edx, [ebp+var_C] cmp edx, [ebp+arg_C] jb short loc_401B72 mov [ebp+var_C], 0 loc_401B72: ; CODE XREF: sub_401B30+39j mov eax, [ebp+arg_0] add eax, [ebp+var_8] xor ecx, ecx mov cl, [eax] mov edx, [ebp+arg_4] add edx, [ebp+var_C] xor eax, eax mov al, [edx] mov edx, [ebp+var_8] imul edx, 9 add eax, edx xor edx, edx mov esi, 3E8h div esi sub ecx, edx mov [ebp+var_4], ecx cmp [ebp+var_C], 2B74h jbe short loc_401BD2 mov eax, dword_407E7C push eax call ds:dword_4060C4 mov ecx, dword_407E7C push ecx call ds:dword_4060C4 push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC loc_401BD2: ; CODE XREF: sub_401B30+73j ; sub_401B30+B3j cmp [ebp+var_4], 0 jge short loc_401BE5 mov eax, [ebp+var_4] add eax, 100h mov [ebp+var_4], eax jmp short loc_401BD2 ; --------------------------------------------------------------------------- loc_401BE5: ; CODE XREF: sub_401B30+A6j mov ecx, [ebp+arg_0] add ecx, [ebp+var_8] mov dl, byte ptr [ebp+var_4] mov [ecx], dl cmp [ebp+var_C], 1031Dh jbe short loc_401C31 push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082E4 push offset aEdit_2 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax loc_401C31: ; CODE XREF: sub_401B30+C7j mov edx, [ebp+var_C] add edx, 1 mov [ebp+var_C], edx jmp loc_401B4E ; --------------------------------------------------------------------------- loc_401C3F: ; CODE XREF: sub_401B30+2Dj mov eax, [ebp+arg_0] pop esi mov esp, ebp pop ebp retn sub_401B30 endp ; --------------------------------------------------------------------------- push ebp mov ebp, esp mov eax, dword_407E7C push eax call ds:dword_4060C4 mov dword_407EF8, 1 jmp short loc_401C71 ; --------------------------------------------------------------------------- loc_401C62: ; CODE XREF: .text:loc_401CD4j mov ecx, dword_407EF8 add ecx, 1 mov dword_407EF8, ecx loc_401C71: ; CODE XREF: .text:00401C60j cmp dword_407EF8, 8 jg short loc_401CD6 mov edx, dword_407EF8 imul edx, 9 movsx eax, byte_408099[edx] cmp eax, 6Fh jnz short loc_401CD4 push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_2 ; "Quit" push offset aButton_3 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov eax, dword_407EF8 imul eax, 9 mov byte_408099[eax], 4Fh loc_401CD4: ; CODE XREF: .text:00401C8Dj jmp short loc_401C62 ; --------------------------------------------------------------------------- loc_401CD6: ; CODE XREF: .text:00401C78j push 3 push offset dword_4081A4 mov ecx, dword_407E7C push ecx call ds:dword_4060BC mov dword_407EF8, 1 jmp short loc_401D05 ; --------------------------------------------------------------------------- loc_401CF6: ; CODE XREF: .text:loc_401D47j mov edx, dword_407EF8 add edx, 1 mov dword_407EF8, edx loc_401D05: ; CODE XREF: .text:00401CF4j cmp dword_407EF8, 8 jg short loc_401D49 mov eax, dword_407EF8 imul eax, 9 movsx ecx, byte_4080A0[eax] cmp ecx, 78h jnz short loc_401D47 push offset aMsSansSerif_9 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch mov eax, dword_407EF8 imul eax, 9 mov byte_4080A0[eax], 58h loc_401D47: ; CODE XREF: .text:00401D20j jmp short loc_401CF6 ; --------------------------------------------------------------------------- loc_401D49: ; CODE XREF: .text:00401D0Cj pop ebp retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401D4B proc near ; CODE XREF: sub_40100A+Ap ; sub_40102D+Ap ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082E8 push offset aEdit_3 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push offset aMsSansSerif_10 ; "MS Sans Serif" push 0Ch mov edx, dword_4082A4 push edx call sub_401834 add esp, 0Ch push offset aTimesNewRoma_3 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch push offset dword_407100 call sub_404FBA add esp, 4 push eax mov ecx, [ebp+arg_4] push ecx push offset dword_407100 mov edx, [ebp+arg_0] push edx call sub_401B30 add esp, 10h pop ebp retn sub_401D4B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401DD6 proc near ; CODE XREF: sub_401FCA+E2p push ebp mov ebp, esp push offset aMsSansSerif_11 ; "MS Sans Serif" push 0Ch mov eax, dword_407E70 push eax call sub_401834 add esp, 0Ch push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_3 ; "Quit" push offset aButton_4 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC mov eax, 1 pop ebp retn sub_401DD6 endp ; --------------------------------------------------------------------------- loc_401E3E: ; CODE XREF: sub_402CFF+8D6p push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_406108 push offset sub_404FC0 mov eax, large fs:0 push eax mov large fs:0, esp add esp, 0FFFFFFE8h push ebx push esi push edi mov [ebp-18h], esp push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC push 3 push offset dword_4081A4 mov ecx, dword_407E70 push ecx call ds:dword_4060BC push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082EC push offset aEdit_4 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push offset aTimesNewRoma_4 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch mov dword ptr [ebp-4], 0 ; --------------------------------------------------------------------------- dd 8B80Fh, 73F0000h, 12E445C7h, 0BA4EAC8h, 0E045C7C7h dd 21D3236Ch, 0E445C745h, 0EDEAEF4Ah, 0E045C7FCh, 37AEC898h dd 0E445C7FFh, 0D640F485h, 0E045C7FFh, 0F32412C6h, 0E045C7FFh dd 0E2142F73h, 0E445C7FFh, 21377197h, 0FFFC45C7h, 0E9FFFFFFh dd 83h, 8BEC558Bh, 89088B02h, 558BDC4Dh, 458B52ECh, 8BE850DCh dd 83FFFFFEh, 8BC308C4h, 468E865h, 6A004077h, 880D8B0Eh dd 51004081h, 0FFF8CFE8h, 0CC483FFh, 40771468h, 8B0C6A00h dd 4082A415h, 0B9E85200h, 83FFFFF8h, 24680CC4h, 6A004077h dd 82A4A10Ch, 0E8500040h, 0FFFFF8A4h, 6A0CC483h, 81A46803h dd 0D8B0040h, 407E70h, 0BC15FF51h, 0C6004060h, 0C700DB45h dd 0FFFFFC45h, 458AFFFFh, 0B002EBDBh, 0F04D8B01h, 0D8964h dd 5F000000h, 0E58B5B5Eh ; --------------------------------------------------------------------------- pop ebp retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401FCA proc near ; CODE XREF: sub_402CFF+8C8p var_29 = byte ptr -29h var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_4 = dword ptr -4 push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_406118 push offset sub_404FC0 mov eax, large fs:0 push eax mov large fs:0, esp add esp, 0FFFFFFE4h push ebx push esi push edi mov [ebp+var_18], esp mov dword_40806C, 0 push offset aMsSansSerif_12 ; "MS Sans Serif" push 0Ch mov eax, dword_4082A4 push eax call sub_401834 add esp, 0Ch mov [ebp+var_20], 40h push offset aTimesNewRoma_5 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC mov [ebp+var_4], 0 mov [ebp+var_20], 30CEAAD5h push ebx mov [ebp+var_1C], 0D6C5964Ch mov eax, 564D5868h mov [ebp+var_20], 33CBAh mov ebx, 8685D465h mov [ebp+var_1C], 1842D536h mov ecx, 0Ah mov dx, 5658h mov [ebp+var_1C], 31149707h in eax, dx mov [ebp+var_20], 673F21D5h mov [ebp+var_24], ebx pop ebx mov [ebp+var_1C], 0FB7E9EE8h mov [ebp+var_4], 0FFFFFFFFh jmp short loc_402111 ; --------------------------------------------------------------------------- mov eax, [ebp+var_14] mov ecx, [eax] mov edx, [ecx] mov [ebp+var_28], edx mov eax, [ebp+var_14] push eax mov ecx, [ebp+var_28] push ecx call sub_401DD6 add esp, 8 retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_21 ; "Quit" push offset aButton_22 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov [ebp+var_29], 0 mov [ebp+var_4], 0FFFFFFFFh mov al, [ebp+var_29] jmp short loc_40211D ; --------------------------------------------------------------------------- loc_402111: ; CODE XREF: sub_401FCA+CEj xor eax, eax cmp [ebp+var_24], 564D5868h setz al loc_40211D: ; CODE XREF: sub_401FCA+145j mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_401FCA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40212E proc near ; CODE XREF: sub_402CFF+13B2p var_374 = dword ptr -374h var_370 = dword ptr -370h var_36C = byte ptr -36Ch var_368 = dword ptr -368h var_364 = dword ptr -364h var_360 = byte ptr -360h var_354 = dword ptr -354h var_350 = dword ptr -350h var_344 = dword ptr -344h var_340 = byte ptr -340h var_300 = dword ptr -300h var_2FC = dword ptr -2FCh var_2F8 = dword ptr -2F8h var_2F4 = dword ptr -2F4h var_2F0 = dword ptr -2F0h var_2EC = dword ptr -2ECh var_2E8 = dword ptr -2E8h var_2E4 = dword ptr -2E4h var_2E0 = dword ptr -2E0h var_2DC = dword ptr -2DCh var_2D8 = dword ptr -2D8h var_2CC = dword ptr -2CCh var_228 = dword ptr -228h var_21C = dword ptr -21Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 374h push esi push edi mov [ebp+var_344], 0 mov ecx, 10h xor eax, eax lea edi, [ebp+var_340] rep stosd push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_4082F0 push offset aStatic_4 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push offset aTimesNewRoma_6 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+arg_4] mov [ebp+var_2F0], eax push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082F4 push offset aEdit_5 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov eax, [ebp+var_2F0] mov ecx, [ebp+arg_4] add ecx, [eax+3Ch] mov [ebp+var_2E0], ecx push offset aMsSansSerif_13 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_4 ; "Quit" push offset aButton_5 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 40h push 1000h mov edx, [ebp+var_2E0] mov eax, [edx+50h] push eax push 0 call dword_407F08 mov [ebp+var_300], eax push offset aMsSansSerif_14 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_5 ; "Quit" push offset aButton_6 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov ecx, [ebp+var_300] mov [ebp+var_2FC], ecx push offset aMsSansSerif_15 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_2E0] mov ecx, [eax+50h] push ecx push 0 mov edx, [ebp+var_2FC] push edx call sub_404FCC add esp, 0Ch push offset aMsSansSerif_16 ; "MS Sans Serif" push 0Ch mov eax, dword_407E7C push eax call sub_401834 add esp, 0Ch mov ecx, [ebp+var_2E0] mov edx, [ecx+54h] push edx mov eax, [ebp+arg_4] push eax mov ecx, [ebp+var_2FC] push ecx call sub_404FC6 add esp, 0Ch mov edx, [ebp+var_2E0] mov ecx, [ebp+var_2E0] mov eax, [edx+54h] xor edx, edx div dword ptr [ecx+38h] test edx, edx jnz short loc_402341 mov edx, [ebp+var_2E0] mov eax, [edx+54h] mov [ebp+var_370], eax jmp short loc_402368 ; --------------------------------------------------------------------------- loc_402341: ; CODE XREF: sub_40212E+200j mov ecx, [ebp+var_2E0] mov esi, [ebp+var_2E0] mov eax, [ecx+54h] xor edx, edx div dword ptr [esi+38h] add eax, 1 mov edx, [ebp+var_2E0] imul eax, [edx+38h] mov [ebp+var_370], eax loc_402368: ; CODE XREF: sub_40212E+211j mov eax, [ebp+var_2FC] add eax, [ebp+var_370] mov [ebp+var_2FC], eax mov [ebp+var_2F4], 0 jmp short loc_402395 ; --------------------------------------------------------------------------- loc_402386: ; CODE XREF: sub_40212E+3C6j mov ecx, [ebp+var_2F4] add ecx, 1 mov [ebp+var_2F4], ecx loc_402395: ; CODE XREF: sub_40212E+256j mov edx, [ebp+var_2E0] xor eax, eax mov ax, [edx+6] cmp [ebp+var_2F4], eax jge loc_4024F9 mov ecx, [ebp+var_2F0] mov edx, [ecx+3Ch] mov eax, [ebp+var_2F4] imul eax, 28h add eax, [ebp+arg_4] lea ecx, [eax+edx+0F8h] mov [ebp+var_364], ecx push offset aMsSansSerif_17 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_364] cmp dword ptr [eax+10h], 0 jbe loc_402485 mov ecx, [ebp+var_364] mov edx, [ecx+10h] mov [ebp+var_368], edx push offset aMsSansSerif_18 ; "MS Sans Serif" push 0Ch mov eax, dword_4082A4 push eax call sub_401834 add esp, 0Ch mov ecx, [ebp+var_364] mov edx, [ebp+var_368] cmp edx, [ecx+8] jbe short loc_40244F mov eax, [ebp+var_364] mov ecx, [eax+8] mov [ebp+var_368], ecx push offset aMsSansSerif_19 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch loc_40244F: ; CODE XREF: sub_40212E+2FAj push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC mov ecx, [ebp+var_368] push ecx mov edx, [ebp+var_364] mov eax, [ebp+arg_4] add eax, [edx+14h] push eax mov ecx, [ebp+var_2FC] push ecx call sub_404FC6 add esp, 0Ch loc_402485: ; CODE XREF: sub_40212E+2C1j mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, [ebp+var_364] mov ecx, [ebp+var_2E0] mov eax, [eax+8] xor edx, edx div dword ptr [ecx+38h] test edx, edx jnz short loc_4024BB mov edx, [ebp+var_364] mov eax, [edx+8] mov [ebp+var_374], eax jmp short loc_4024E2 ; --------------------------------------------------------------------------- loc_4024BB: ; CODE XREF: sub_40212E+37Aj mov ecx, [ebp+var_364] mov esi, [ebp+var_2E0] mov eax, [ecx+8] xor edx, edx div dword ptr [esi+38h] add eax, 1 mov edx, [ebp+var_2E0] imul eax, [edx+38h] mov [ebp+var_374], eax loc_4024E2: ; CODE XREF: sub_40212E+38Bj mov eax, [ebp+var_2FC] add eax, [ebp+var_374] mov [ebp+var_2FC], eax jmp loc_402386 ; --------------------------------------------------------------------------- loc_4024F9: ; CODE XREF: sub_40212E+279j push offset aMsSansSerif_20 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch lea edx, [ebp+var_2DC] push edx lea eax, [ebp+var_344] push eax push 0 push 0 push 4 push 0 push 0 push 0 mov ecx, [ebp+arg_0] push ecx push 0 call dword_40817C push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC mov [ebp+var_2CC], 10007h push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC lea ecx, [ebp+var_2CC] push ecx mov edx, [ebp+var_2D8] push edx call dword_40810C push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_6 ; "Quit" push offset aButton_7 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, [ebp+var_2E0] mov ecx, [eax+34h] mov [ebp+var_2F8], ecx mov dword_40806C, 0 mov edx, [ebp+var_2F8] mov [ebp+var_2E4], edx push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC loc_4025F4: ; CODE XREF: sub_40212E+531j push 1Ch lea ecx, [ebp+var_360] push ecx mov edx, [ebp+var_2E4] push edx mov eax, [ebp+var_2DC] push eax call dword_4082B4 test eax, eax jz short loc_402661 cmp [ebp+var_350], 10000h jnz short loc_402639 push offset aMsSansSerif_21 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch jmp short loc_402661 ; --------------------------------------------------------------------------- loc_402639: ; CODE XREF: sub_40212E+4F1j push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC mov eax, [ebp+var_2E4] add eax, [ebp+var_354] mov [ebp+var_2E4], eax jmp short loc_4025F4 ; --------------------------------------------------------------------------- loc_402661: ; CODE XREF: sub_40212E+4E5j ; sub_40212E+509j mov ecx, [ebp+var_2E4] sub ecx, [ebp+var_2F8] mov [ebp+var_2E8], ecx push offset aMsSansSerif_22 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_2E0] mov ecx, [eax+34h] cmp ecx, [ebp+var_2F8] jnz loc_40275E mov edx, [ebp+var_2E0] mov eax, [edx+50h] cmp eax, [ebp+var_2E8] ja loc_40275E push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_7 ; "Quit" push offset aButton_8 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov eax, [ebp+var_2F8] mov [ebp+var_2EC], eax push 3 push offset dword_4081A4 mov ecx, dword_407E7C push ecx call ds:dword_4060BC push offset asc_407864 ; " " push 0 push 0Ch mov edx, dword_408070 push edx call ds:dword_4060B8 lea eax, [ebp+var_36C] push eax push 40h mov ecx, [ebp+var_2E8] push ecx mov edx, [ebp+var_2F8] push edx mov eax, [ebp+var_2DC] push eax call dword_408170 push offset aMsSansSerif_23 ; "MS Sans Serif" push 0Ch mov ecx, dword_4082A4 push ecx call sub_401834 add esp, 0Ch jmp loc_4027EB ; --------------------------------------------------------------------------- loc_40275E: ; CODE XREF: sub_40212E+56Aj ; sub_40212E+57Fj push offset aMsSansSerif_24 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_2F8] push eax mov ecx, [ebp+var_2DC] push ecx call dword_407F38 push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_8 ; "Quit" push offset aButton_9 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 40h push 3000h mov ecx, [ebp+var_2E0] mov edx, [ecx+50h] push edx mov eax, [ebp+var_2E0] mov ecx, [eax+34h] push ecx mov edx, [ebp+var_2DC] push edx call dword_408168 mov [ebp+var_2EC], eax loc_4027EB: ; CODE XREF: sub_40212E+62Bj push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_9 ; "Quit" push offset aButton_10 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 0 push 4 lea edx, [ebp+var_2EC] push edx mov eax, [ebp+var_228] add eax, 8 push eax mov ecx, [ebp+var_2DC] push ecx call dword_4082BC push 0 mov edx, [ebp+var_2E0] mov eax, [edx+50h] push eax mov ecx, [ebp+var_300] push ecx mov edx, [ebp+var_2EC] push edx mov eax, [ebp+var_2DC] push eax call dword_4082BC push offset asc_4078A8 ; " " push 0 push 0Ch mov ecx, dword_408070 push ecx call ds:dword_4060B8 mov [ebp+var_2CC], 10007h push offset aMsSansSerif_25 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_2EC] cmp eax, [ebp+var_2F8] jnz short loc_4028D4 mov ecx, dword_407E7C push ecx call ds:dword_4060C4 mov edx, [ebp+var_2E0] mov eax, [edx+34h] mov ecx, [ebp+var_2E0] add eax, [ecx+28h] mov [ebp+var_21C], eax jmp short loc_4028F6 ; --------------------------------------------------------------------------- loc_4028D4: ; CODE XREF: sub_40212E+77Dj mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, [ebp+var_2E0] mov ecx, [ebp+var_2EC] add ecx, [eax+28h] mov [ebp+var_21C], ecx loc_4028F6: ; CODE XREF: sub_40212E+7A4j push offset aTimesNewRoma_7 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch lea eax, [ebp+var_2CC] push eax mov ecx, [ebp+var_2D8] push ecx call dword_408120 push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC mov eax, [ebp+var_2D8] push eax call dword_408164 push offset aTimesNewRoma_8 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch pop edi pop esi mov esp, ebp pop ebp retn sub_40212E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40295D proc near ; DATA XREF: sub_402CFF+165Eo ; sub_402CFF+191Co var_208 = byte ptr -208h var_204 = dword ptr -204h var_200 = byte ptr -200h var_100 = byte ptr -100h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 208h push esi push edi push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC mov esi, [ebp+arg_0] mov ecx, 82h lea edi, [ebp+var_208] rep movsd mov dword_40806C, 0 mov ecx, [ebp+var_204] imul ecx, 3E8h push ecx call ds:dword_406014 mov edx, dword_407E7C push edx call ds:dword_4060C4 lea eax, [ebp+var_100] push eax call sub_404FBA add esp, 4 test eax, eax jz loc_402A74 push 0 call ds:dword_4060FC push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082F8 push offset aEdit_6 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax lea eax, [ebp+var_100] push eax call dword_408158 push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_10 ; "Quit" push offset aButton_11 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 0 push 0 lea eax, [ebp+var_200] push eax lea ecx, [ebp+var_100] push ecx push 0 call dword_407E88 mov dword_40806C, 0 loc_402A74: ; CODE XREF: sub_40295D+69j push 1 push 0 push 0 lea edx, [ebp+var_200] push edx push 0 push 0 call dword_408088 mov eax, dword_4080F0 sub eax, 1 mov dword_4080F0, eax push offset aTimesNewRoma_9 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch xor eax, eax pop edi pop esi mov esp, ebp pop ebp retn 4 sub_40295D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402AB8 proc near ; CODE XREF: sub_402CFF+89Dp ; sub_402CFF+C34p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_16 = dword ptr 1Eh arg_1A = byte ptr 22h arg_9A = byte ptr 0A2h push ebp mov ebp, esp sub esp, 10h mov eax, [ebp+arg_16] and eax, 0FFFFh mov [ebp+var_C], eax mov ecx, [ebp+var_C] sub ecx, 1 mov [ebp+var_C], ecx cmp [ebp+var_C], 3 ja loc_402BA6 mov edx, [ebp+var_C] jmp ds:off_402CD7[edx*4] loc_402AE6: ; DATA XREF: .text:off_402CD7o push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_4082FC push offset aEdit_7 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov [ebp+var_8], 10h jmp loc_402BAD ; --------------------------------------------------------------------------- loc_402B2A: ; CODE XREF: sub_402AB8+27j ; DATA XREF: .text:00402CDBo push offset aMsSansSerif_26 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov [ebp+var_8], 20h jmp short loc_402BAD ; --------------------------------------------------------------------------- loc_402B49: ; CODE XREF: sub_402AB8+27j ; DATA XREF: .text:00402CDFo push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC mov [ebp+var_8], 30h push offset aMsSansSerif_27 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch jmp short loc_402BAD ; --------------------------------------------------------------------------- loc_402B7B: ; CODE XREF: sub_402AB8+27j ; DATA XREF: .text:00402CE3o mov edx, dword_407E7C push edx call ds:dword_4060C4 mov [ebp+var_8], 40h push offset aMsSansSerif_28 ; "MS Sans Serif" push 0Ch mov eax, dword_407E7C push eax call sub_401834 add esp, 0Ch jmp short loc_402BAD ; --------------------------------------------------------------------------- loc_402BA6: ; CODE XREF: sub_402AB8+1Ej mov [ebp+var_8], 0 loc_402BAD: ; CODE XREF: sub_402AB8+6Dj ; sub_402AB8+8Fj ... mov ecx, [ebp+arg_16+2] and ecx, 0FFFFh mov [ebp+var_10], ecx mov edx, [ebp+var_10] sub edx, 1 mov [ebp+var_10], edx cmp [ebp+var_10], 5 ja loc_402C6E mov eax, [ebp+var_10] jmp ds:off_402CE7[eax*4] loc_402BD6: ; CODE XREF: sub_402AB8+27j ; DATA XREF: .text:off_402CE7o push offset asc_40793C ; " " push 0 push 0Ch mov ecx, dword_408070 push ecx call ds:dword_4060B8 mov [ebp+var_4], 0 jmp short loc_402C6E ; --------------------------------------------------------------------------- loc_402BF5: ; CODE XREF: sub_402AB8+27j ; sub_402AB8+117j ; DATA XREF: ... push offset aMsSansSerif_29 ; "MS Sans Serif" push 0Ch mov edx, dword_4082A4 push edx call sub_401834 add esp, 0Ch mov [ebp+var_4], 1 jmp short loc_402C6E ; --------------------------------------------------------------------------- loc_402C14: ; CODE XREF: sub_402AB8+27j ; sub_402AB8+117j ; DATA XREF: ... mov [ebp+var_4], 5 jmp short loc_402C6E ; --------------------------------------------------------------------------- loc_402C1D: ; CODE XREF: sub_402AB8+27j ; sub_402AB8+117j ; DATA XREF: ... mov [ebp+var_4], 4 jmp short loc_402C6E ; --------------------------------------------------------------------------- loc_402C26: ; CODE XREF: sub_402AB8+27j ; sub_402AB8+117j ; DATA XREF: ... mov [ebp+var_4], 3 jmp short loc_402C6E ; --------------------------------------------------------------------------- loc_402C2F: ; CODE XREF: sub_402AB8+27j ; sub_402AB8+117j ; DATA XREF: ... push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408300 push offset aStatic_5 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov [ebp+var_4], 6 loc_402C6E: ; CODE XREF: sub_402AB8+10Ej ; sub_402AB8+13Bj ... push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_11 ; "Quit" push offset aButton_12 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov ecx, [ebp+var_8] or ecx, [ebp+var_4] push ecx lea edx, [ebp+arg_1A] push edx lea eax, [ebp+arg_9A] push eax push 0 call ds:dword_4060C8 push offset aMsSansSerif_30 ; "MS Sans Serif" push 0Eh mov ecx, dword_408188 push ecx call sub_401834 add esp, 0Ch mov esp, ebp pop ebp retn sub_402AB8 endp ; --------------------------------------------------------------------------- off_402CD7 dd offset loc_402AE6 ; DATA XREF: sub_402AB8+27r dd offset loc_402B2A dd offset loc_402B49 dd offset loc_402B7B off_402CE7 dd offset loc_402BD6 ; DATA XREF: sub_402AB8+117r dd offset loc_402BF5 dd offset loc_402C14 dd offset loc_402C1D dd offset loc_402C26 dd offset loc_402C2F ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402CFF proc near ; CODE XREF: sub_4047AA:loc_404890p var_B58 = dword ptr -0B58h var_B54 = dword ptr -0B54h var_B50 = dword ptr -0B50h var_B4C = dword ptr -0B4Ch var_B48 = dword ptr -0B48h var_B44 = dword ptr -0B44h var_B40 = dword ptr -0B40h var_B3C = dword ptr -0B3Ch var_B38 = byte ptr -0B38h var_B28 = byte ptr -0B28h var_B24 = byte ptr -0B24h var_B20 = byte ptr -0B20h var_B1C = byte ptr -0B1Ch var_B18 = byte ptr -0B18h var_B14 = byte ptr -0B14h var_B10 = byte ptr -0B10h var_B0C = byte ptr -0B0Ch var_A08 = byte ptr -0A08h var_904 = dword ptr -904h var_900 = dword ptr -900h var_8FC = dword ptr -8FCh var_8F8 = dword ptr -8F8h var_8F4 = dword ptr -8F4h var_8F0 = dword ptr -8F0h var_8EC = dword ptr -8ECh var_8E8 = dword ptr -8E8h var_8E4 = dword ptr -8E4h var_8E0 = byte ptr -8E0h var_7E0 = byte ptr -7E0h var_6E0 = dword ptr -6E0h var_6DC = dword ptr -6DCh var_6D8 = dword ptr -6D8h var_6D4 = dword ptr -6D4h var_6D0 = dword ptr -6D0h var_6CC = dword ptr -6CCh var_6C8 = byte ptr -6C8h var_5C4 = dword ptr -5C4h var_5C0 = byte ptr -5C0h var_5B0 = byte ptr -5B0h var_5A0 = byte ptr -5A0h var_590 = byte ptr -590h var_580 = byte ptr -580h var_570 = dword ptr -570h var_56C = byte ptr -56Ch var_55C = dword ptr -55Ch var_558 = byte ptr -558h var_4D8 = byte ptr -4D8h var_3D4 = dword ptr -3D4h var_3D0 = dword ptr -3D0h var_3CC = dword ptr -3CCh var_3C8 = dword ptr -3C8h var_3C4 = dword ptr -3C4h var_3C0 = dword ptr -3C0h var_3BC = dword ptr -3BCh var_3B8 = dword ptr -3B8h var_3B4 = dword ptr -3B4h var_3B0 = dword ptr -3B0h var_3AC = dword ptr -3ACh var_3A8 = dword ptr -3A8h var_3A2 = dword ptr -3A2h var_39C = dword ptr -39Ch var_398 = dword ptr -398h var_394 = dword ptr -394h var_10E = dword ptr -10Eh var_10A = byte ptr -10Ah var_CA = byte ptr -0CAh var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = byte ptr -34h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_4 = dword ptr -4 push ebp mov ebp, esp push 0FFFFFFFFh push offset SEH_402CFF mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0B4Ch push ebx push esi push edi push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC mov [ebp+var_20], 5CE6152Ah xor ebx, ebx mov [ebp+var_38], 4B7ED5DBh mov ebx, large fs:30h mov [ebp+var_38], 2652518Fh mov ebx, [ebx+0Ch] mov ebx, [ebx+14h] mov [ebp+var_20], 0D919BA43h mov ebx, [ebx] mov ebx, [ebx] mov ebx, [ebx+10h] mov [ebp+var_20], 0FE12D4A0h mov [ebp+var_24], ebx mov [ebp+var_20], 9618F4ACh mov ecx, [ebp+var_24] mov edx, [ecx+3Ch] mov eax, [ebp+var_24] mov ecx, [ebp+var_24] add ecx, [eax+edx+78h] mov [ebp+var_3C4], ecx push offset aMsSansSerif_31 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_3C4] mov ecx, [ebp+var_24] add ecx, [eax+20h] mov [ebp+var_3D0], ecx push offset aMsSansSerif_32 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_3C4] mov ecx, [ebp+var_24] add ecx, [eax+24h] mov [ebp+var_3C0], ecx mov edx, [ebp+var_3C4] mov eax, [ebp+var_24] add eax, [edx+1Ch] mov [ebp+var_48], eax mov [ebp+var_44], 0 jmp short loc_402DFD ; --------------------------------------------------------------------------- loc_402DF4: ; CODE XREF: sub_402CFF:loc_402EEBj mov ecx, [ebp+var_44] add ecx, 1 mov [ebp+var_44], ecx loc_402DFD: ; CODE XREF: sub_402CFF+F3j mov edx, [ebp+var_3C4] mov eax, [ebp+var_44] cmp eax, [edx+18h] jnb loc_402EF0 mov ecx, dword_408090 push ecx mov edx, [ebp+var_44] mov eax, [ebp+var_3D0] mov ecx, [eax+edx*4] add ecx, [ebp+var_24] push ecx call sub_404FD8 add esp, 8 test eax, eax jnz short loc_402E66 push offset aMsSansSerif_33 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_44] mov ecx, [ebp+var_3C0] xor edx, edx mov dx, [ecx+eax*2] mov eax, [ebp+var_48] mov ecx, [eax+edx*4] add ecx, [ebp+var_24] mov dword_408178, ecx loc_402E66: ; CODE XREF: sub_402CFF+131j mov edx, dword_407E6C push edx mov eax, [ebp+var_44] mov ecx, [ebp+var_3D0] mov edx, [ecx+eax*4] add edx, [ebp+var_24] push edx call sub_404FD8 add esp, 8 test eax, eax jnz short loc_402EEB push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408304 push offset aEdit_8 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov edx, [ebp+var_44] mov eax, [ebp+var_3C0] xor ecx, ecx mov cx, [eax+edx*2] mov edx, [ebp+var_48] mov eax, [edx+ecx*4] add eax, [ebp+var_24] mov dword_408184, eax mov ecx, dword_407E7C push ecx call ds:dword_4060C4 loc_402EEB: ; CODE XREF: sub_402CFF+188j jmp loc_402DF4 ; --------------------------------------------------------------------------- loc_402EF0: ; CODE XREF: sub_402CFF+10Aj push offset aMsSansSerif_34 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch mov eax, dword_40812C push eax call dword_408178 mov [ebp+var_3D4], eax mov ecx, dword_407E7C push ecx call ds:dword_4060C4 mov edx, dword_407F04 push edx call dword_408178 mov [ebp+var_3BC], eax push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC mov ecx, dword_407F30 push ecx call dword_408178 mov [ebp+var_14], eax push offset aMsSansSerif_35 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch mov eax, dword_408104 push eax call dword_408178 mov [ebp+var_3B4], eax mov ecx, dword_407F00 push ecx call dword_408178 mov [ebp+var_3B8], eax push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_12 ; "Quit" push offset aButton_13 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov ecx, dword_40807C push ecx call dword_408178 mov [ebp+var_10], eax mov edx, dword_4081B8 push edx call dword_408178 mov [ebp+var_1C], eax mov eax, dword_4082DC push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_408068, eax mov edx, dword_407F1C push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_407F34, eax push offset aMsSansSerif_36 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch mov edx, dword_407F24 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_4082D4, eax push offset aMsSansSerif_37 ; "MS Sans Serif" push 0Eh mov ecx, dword_408188 push ecx call sub_401834 add esp, 0Ch mov edx, dword_407E58 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_40817C, eax mov ecx, dword_40815C push ecx mov edx, [ebp+var_3D4] push edx call dword_408184 mov dword_407F38, eax mov eax, dword_4081C0 push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_407F08, eax mov edx, dword_4081C4 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_408168, eax push 3 push offset dword_4081A4 mov ecx, dword_407E7C push ecx call ds:dword_4060BC mov edx, dword_408114 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_408170, eax mov ecx, dword_407E64 push ecx mov edx, [ebp+var_24] push edx call dword_408184 mov dword_4082B4, eax mov eax, dword_408144 push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_4082BC, eax mov edx, dword_40813C push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_407EF4, eax push offset aMsSansSerif_38 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E7C push ecx call sub_401834 add esp, 0Ch mov edx, dword_407E80 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_40810C, eax mov ecx, dword_408174 push ecx mov edx, [ebp+var_24] push edx call dword_408184 mov dword_408120, eax mov eax, dword_4082C8 push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_408164, eax mov edx, dword_408138 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_408130, eax push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408308 push offset aStatic_6 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov eax, dword_407E5C push eax mov ecx, [ebp+var_14] push ecx call dword_408184 mov dword_4081C8, eax mov edx, dword_408078 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_408084, eax mov ecx, dword_4081BC push ecx mov edx, [ebp+var_24] push edx call dword_408184 mov dword_408180, eax mov eax, dword_4080FC push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_408080, eax mov edx, dword_408094 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_407E78, eax mov ecx, dword_4082CC push ecx mov edx, [ebp+var_3B4] push edx call dword_408184 mov dword_408088, eax mov eax, dword_407F10 push eax mov ecx, [ebp+var_24] push ecx call dword_408184 mov dword_40811C, eax mov edx, dword_408128 push edx mov eax, [ebp+var_24] push eax call dword_408184 mov dword_4082E0, eax push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_13 ; "Quit" push offset aButton_14 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov eax, dword_407F14 push eax mov ecx, [ebp+var_3B8] push ecx call dword_408184 mov dword_408158, eax mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, dword_4082B0 push eax mov ecx, [ebp+var_10] push ecx call dword_408184 mov dword_407E88, eax mov edx, dword_407E74 push edx mov eax, [ebp+var_3BC] push eax call dword_408184 mov dword_407E54, eax push offset asc_407A28 ; " " push 0 push 0Ch mov ecx, dword_408070 push ecx call ds:dword_4060B8 mov edx, dword_4082D8 push edx mov eax, [ebp+var_1C] push eax call dword_408184 mov dword_4082B8, eax mov ecx, dword_4082A8 push ecx mov edx, [ebp+var_3BC] push edx call dword_408184 mov dword_4081D4, eax push offset aMsSansSerif_39 ; "MS Sans Serif" push 0Eh mov eax, dword_408188 push eax call sub_401834 add esp, 0Ch mov ecx, dword_40808C push ecx mov edx, [ebp+var_3BC] push edx call dword_408184 mov dword_407EFC, eax mov eax, dword_40819C push eax mov ecx, [ebp+var_3BC] push ecx call dword_408184 mov dword_4081CC, eax mov [ebp+var_3AC], 1 loc_403391: ; CODE XREF: sub_402CFF+734j cmp [ebp+var_3AC], 2710h jge loc_403438 push 0Ah mov edx, [ebp+var_3AC] and edx, 0FFFFh push edx push 0 call dword_407F34 mov [ebp+var_18], eax cmp [ebp+var_18], 0 jz short loc_403424 push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_40830C push offset aStatic_7 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC push offset aTimesNewRom_10 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch jmp short loc_403438 ; --------------------------------------------------------------------------- loc_403424: ; CODE XREF: sub_402CFF+6C0j mov ecx, [ebp+var_3AC] add ecx, 1 mov [ebp+var_3AC], ecx jmp loc_403391 ; --------------------------------------------------------------------------- loc_403438: ; CODE XREF: sub_402CFF+69Cj ; sub_402CFF+723j push offset aTimesNewRom_11 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch cmp [ebp+var_18], 0 jnz short loc_40345B xor eax, eax jmp loc_404799 ; --------------------------------------------------------------------------- loc_40345B: ; CODE XREF: sub_402CFF+753j mov eax, [ebp+var_18] push eax push 0 call dword_408068 mov [ebp+var_40], eax push offset aTimesNewRom_12 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch mov edx, [ebp+var_40] push edx call dword_4082D4 mov [ebp+var_3C], eax push offset aTimesNewRom_13 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch cmp [ebp+var_3C], 0 jnz short loc_4034AF xor eax, eax jmp loc_404799 ; --------------------------------------------------------------------------- loc_4034AF: ; CODE XREF: sub_402CFF+7A7j mov ecx, [ebp+var_3C] mov [ebp+var_3CC], ecx push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408310 push offset aStatic_8 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push offset aMsSansSerif_40 ; "MS Sans Serif" push 0Eh mov ecx, dword_408188 push ecx call sub_401834 add esp, 0Ch push 360h push 55Fh push 360h mov edx, [ebp+var_3CC] push edx mov eax, [ebp+var_3C] add eax, 55Fh push eax call sub_401B30 add esp, 10h push eax lea ecx, [ebp+var_3A8] push ecx call ds:dword_4060B0 add esp, 0Ch push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408314 push offset aEdit_9 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov ecx, [ebp+var_394] and ecx, 0FFFFh cmp ecx, 1 jnz short loc_4035A7 sub esp, 360h mov ecx, 0D8h lea esi, [ebp+var_3A8] mov edi, esp rep movsd call sub_402AB8 add esp, 360h loc_4035A7: ; CODE XREF: sub_402CFF+886j mov [ebp+var_3B0], 0 push offset aMsSansSerif_41 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch call sub_401FCA and eax, 0FFh test eax, eax jnz short loc_4035EF call loc_401E3E and eax, 0FFh test eax, eax jnz short loc_4035EF mov [ebp+var_B4C], 0 jmp short loc_4035F9 ; --------------------------------------------------------------------------- loc_4035EF: ; CODE XREF: sub_402CFF+8D4j ; sub_402CFF+8E2j mov [ebp+var_B4C], 1 loc_4035F9: ; CODE XREF: sub_402CFF+8EEj mov eax, [ebp+var_3A8+2] and eax, 0FFFFh and eax, [ebp+var_B4C] test eax, eax jz short loc_403636 push offset aMsSansSerif_42 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch mov edx, [ebp+var_3A8+2] and edx, 0FFFFh mov [ebp+var_3B0], edx loc_403636: ; CODE XREF: sub_402CFF+90Dj mov eax, [ebp-3A4h] and eax, 0FFFFh test eax, eax jz loc_4037A8 push offset aTimesNewRom_14 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch mov edx, dword_40818C push edx call ds:dword_406008 test eax, eax jz short loc_403681 mov eax, [ebp-3A4h] and eax, 0FFFFh mov [ebp+var_3B0], eax loc_403681: ; CODE XREF: sub_402CFF+96Fj push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_14 ; "Quit" push offset aButton_15 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 104h lea eax, [ebp+var_4D8] push eax push 0 call dword_408130 mov ecx, dword_4080F8 push ecx lea edx, [ebp+var_4D8] push edx call ds:dword_4060A0 add esp, 8 test eax, eax jnz short loc_4036F7 mov eax, [ebp-3A4h] and eax, 0FFFFh mov [ebp+var_3B0], eax loc_4036F7: ; CODE XREF: sub_402CFF+9E5j push offset aTimesNewRom_15 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch mov edx, dword_408124 push edx lea eax, [ebp+var_4D8] push eax call ds:dword_4060A0 add esp, 8 test eax, eax jnz short loc_40373A mov ecx, [ebp-3A4h] and ecx, 0FFFFh mov [ebp+var_3B0], ecx loc_40373A: ; CODE XREF: sub_402CFF+A27j push offset aMsSansSerif_43 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov [ebp+var_55C], 80h lea eax, [ebp+var_55C] push eax lea ecx, [ebp+var_558] push ecx call dword_407E54 mov edx, dword_408190 push edx lea eax, [ebp+var_558] push eax call ds:dword_4060A0 add esp, 8 test eax, eax jnz short loc_40379B mov ecx, [ebp-3A4h] and ecx, 0FFFFh mov [ebp+var_3B0], ecx loc_40379B: ; CODE XREF: sub_402CFF+A88j mov edx, dword_407E7C push edx call ds:dword_4060C4 loc_4037A8: ; CODE XREF: sub_402CFF+944j mov eax, [ebp+var_3A2] and eax, 0FFFFh test eax, eax jz loc_4038D3 push offset aMsSansSerif_44 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch mov edx, dword_408160 push edx push 0 call dword_4082B8 test eax, eax jz short loc_4037F5 mov eax, [ebp+var_3A2] and eax, 0FFFFh mov [ebp+var_3B0], eax loc_4037F5: ; CODE XREF: sub_402CFF+AE3j mov ecx, dword_407F0C push ecx push 0 call dword_4082B8 test eax, eax jz short loc_40381A mov edx, [ebp+var_3A2] and edx, 0FFFFh mov [ebp+var_3B0], edx loc_40381A: ; CODE XREF: sub_402CFF+B07j mov eax, dword_407F20 push eax push 0 call dword_4082B8 test eax, eax jz short loc_40383E mov ecx, [ebp+var_3A2] and ecx, 0FFFFh mov [ebp+var_3B0], ecx loc_40383E: ; CODE XREF: sub_402CFF+B2Bj push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408318 push offset aStatic_9 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov ecx, dword_407F18 push ecx push 0 call dword_4082B8 test eax, eax jz short loc_40389B mov edx, [ebp+var_3A2] and edx, 0FFFFh mov [ebp+var_3B0], edx loc_40389B: ; CODE XREF: sub_402CFF+B88j push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_40831C push offset aEdit_10 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax loc_4038D3: ; CODE XREF: sub_402CFF+AB6j cmp [ebp+var_3B0], 0 jz loc_4039BF push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_15 ; "Quit" push offset aButton_16 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax cmp [ebp+var_3B0], 2 jnz short loc_40393E sub esp, 360h mov ecx, 0D8h lea esi, [ebp+var_3A8] mov edi, esp rep movsd call sub_402AB8 add esp, 360h loc_40393E: ; CODE XREF: sub_402CFF+C1Dj push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_16 ; "Quit" push offset aButton_17 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax cmp [ebp+var_3B0], 3 jnz short loc_403983 call dword_407F2C loc_403983: ; CODE XREF: sub_402CFF+C7Cj push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_17 ; "Quit" push offset aButton_18 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax xor eax, eax jmp loc_404799 ; --------------------------------------------------------------------------- loc_4039BF: ; CODE XREF: sub_402CFF+BDBj lea edx, [ebp+var_B10] push edx lea eax, [ebp+var_CA] push eax lea ecx, [ebp+var_34] call ds:dword_406028 mov [ebp+var_4], 0 mov [ebp+var_3C8], 0 mov ecx, [ebp+var_10E] and ecx, 0FFFFh test ecx, ecx jnz short loc_403A0B mov edx, [ebp+var_10E+2] and edx, 0FFFFh test edx, edx jz loc_403CE3 loc_403A0B: ; CODE XREF: sub_402CFF+CF6j push offset aTimesNewRom_16 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch lea ecx, [ebp+var_B14] push ecx mov edx, dword_408100 push edx lea ecx, [ebp+var_5C0] call ds:dword_406028 mov byte ptr [ebp+var_4], 1 lea eax, [ebp+var_B18] push eax mov ecx, dword_40816C push ecx lea ecx, [ebp+var_5B0] call ds:dword_406028 mov byte ptr [ebp+var_4], 2 lea edx, [ebp+var_B1C] push edx mov eax, dword_408148 push eax lea ecx, [ebp+var_5A0] call ds:dword_406028 mov byte ptr [ebp+var_4], 3 lea ecx, [ebp+var_B20] push ecx mov edx, dword_408118 push edx lea ecx, [ebp+var_590] call ds:dword_406028 mov byte ptr [ebp+var_4], 4 lea eax, [ebp+var_B24] push eax mov ecx, dword_408074 push ecx lea ecx, [ebp+var_580] call ds:dword_406028 mov byte ptr [ebp+var_4], 5 mov edx, dword_407E7C push edx call ds:dword_4060C4 lea eax, [ebp+var_B28] push eax lea ecx, [ebp+var_56C] call ds:dword_406020 mov byte ptr [ebp+var_4], 6 mov [ebp+var_570], 0 loc_403AE3: ; CODE XREF: sub_402CFF+F7Fj cmp [ebp+var_570], 5 jge loc_403C83 push offset aMsSansSerif_45 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E70 push ecx call sub_401834 add esp, 0Ch mov [ebp+var_5C4], 0 push offset aMsSansSerif_46 ; "MS Sans Serif" push 0Ch mov edx, dword_4082A4 push edx call sub_401834 add esp, 0Ch loc_403B26: ; CODE XREF: sub_402CFF+F6Bj mov eax, [ebp+var_5C4] push eax mov ecx, [ebp+var_570] shl ecx, 4 lea edx, [ebp+ecx+var_5C0] push edx lea ecx, [ebp+var_34] call ds:dword_406024 mov [ebp+var_5C4], eax mov eax, ds:dword_406048 mov ecx, [ebp+var_5C4] cmp ecx, [eax] jz loc_403C6F mov edx, [ebp+var_570] shl edx, 4 lea ecx, [ebp+edx+var_5C0] call ds:dword_40602C sub eax, 2 push eax push 1 lea eax, [ebp+var_B38] push eax mov ecx, [ebp+var_570] shl ecx, 4 lea ecx, [ebp+ecx+var_5C0] call ds:dword_406030 mov [ebp+var_B50], eax mov edx, [ebp+var_B50] mov [ebp+var_B54], edx mov byte ptr [ebp+var_4], 7 mov ecx, [ebp+var_B54] call ds:dword_406034 push eax call ds:dword_4060AC add esp, 4 push eax lea ecx, [ebp+var_56C] call ds:dword_406038 mov byte ptr [ebp+var_4], 6 lea ecx, [ebp+var_B38] call ds:dword_40603C push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_18 ; "Quit" push offset aButton_19 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax lea edx, [ebp+var_56C] push edx mov eax, [ebp+var_570] shl eax, 4 lea ecx, [ebp+eax+var_5C0] call ds:dword_406040 push eax mov ecx, [ebp+var_5C4] push ecx lea ecx, [ebp+var_34] call ds:dword_406044 push offset aTimesNewRom_17 ; "Times New Roman" push 8 mov edx, dword_40814C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_5C4] add eax, 1 mov [ebp+var_5C4], eax jmp loc_403B26 ; --------------------------------------------------------------------------- loc_403C6F: ; CODE XREF: sub_402CFF+E5Bj mov ecx, [ebp+var_570] add ecx, 1 mov [ebp+var_570], ecx jmp loc_403AE3 ; --------------------------------------------------------------------------- loc_403C83: ; CODE XREF: sub_402CFF+DEBj mov byte ptr [ebp+var_4], 5 lea ecx, [ebp+var_56C] call ds:dword_40603C mov byte ptr [ebp+var_4], 4 lea ecx, [ebp+var_580] call ds:dword_40603C mov byte ptr [ebp+var_4], 3 lea ecx, [ebp+var_590] call ds:dword_40603C mov byte ptr [ebp+var_4], 2 lea ecx, [ebp+var_5A0] call ds:dword_40603C mov byte ptr [ebp+var_4], 1 lea ecx, [ebp+var_5B0] call ds:dword_40603C mov byte ptr [ebp+var_4], 0 lea ecx, [ebp+var_5C0] call ds:dword_40603C loc_403CE3: ; CODE XREF: sub_402CFF+D06j mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, [ebp+var_10E] and eax, 0FFFFh test eax, eax jz loc_403DFC push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408320 push offset aEdit_11 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push 0 lea eax, [ebp+var_3C8] push eax push 0 push 0F003Fh push 0 push 0 push 0 mov ecx, dword_407F28 push ecx push 80000001h call dword_4081D4 push offset aMsSansSerif_47 ; "MS Sans Serif" push 0Ch mov edx, dword_4082A4 push edx call sub_401834 add esp, 0Ch lea ecx, [ebp+var_34] call ds:dword_40602C add eax, 1 push eax lea ecx, [ebp+var_34] call ds:dword_406034 push eax push 1 push 0 lea eax, [ebp+var_10A] push eax mov ecx, [ebp+var_3C8] push ecx call dword_4081CC mov edx, dword_407E7C push edx call ds:dword_4060C4 mov eax, [ebp+var_3C8] push eax call dword_407EFC push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408324 push offset aStatic_10 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax loc_403DFC: ; CODE XREF: sub_402CFF+FFEj mov eax, [ebp+var_10E+2] and eax, 0FFFFh test eax, eax jz loc_403E9D push offset aMsSansSerif_48 ; "MS Sans Serif" push 0Ch mov ecx, dword_407E7C push ecx call sub_401834 add esp, 0Ch push 0 lea edx, [ebp+var_3C8] push edx push 0 push 0F003Fh push 0 push 0 push 0 mov eax, dword_407F28 push eax push 80000002h call dword_4081D4 lea ecx, [ebp+var_34] call ds:dword_40602C add eax, 1 push eax lea ecx, [ebp+var_34] call ds:dword_406034 push eax push 1 push 0 lea ecx, [ebp+var_10A] push ecx mov edx, [ebp+var_3C8] push edx call dword_4081CC push offset aMsSansSerif_49 ; "MS Sans Serif" push 0Ch mov eax, dword_407E7C push eax call sub_401834 add esp, 0Ch mov ecx, [ebp+var_3C8] push ecx call dword_407EFC loc_403E9D: ; CODE XREF: sub_402CFF+110Aj mov edx, [ebp+var_3A8] and edx, 0FFFFh cmp edx, 1 jnz loc_4040BE push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408328 push offset aStatic_11 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov edx, [ebp+var_3C] add edx, 8BFh mov [ebp+var_6D0], edx push 55Fh mov eax, [ebp+var_398] push eax mov ecx, [ebp+var_3CC] push ecx mov edx, [ebp+var_6D0] push edx call sub_401B30 add esp, 10h push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC push 104h push 0 lea ecx, [ebp+var_6C8] push ecx call sub_404FCC add esp, 0Ch push offset aMsSansSerif_50 ; "MS Sans Serif" push 0Ch mov edx, dword_4082A4 push edx call sub_401834 add esp, 0Ch mov eax, [ebp+var_3A2+2] and eax, 0FFFFh test eax, eax jz short loc_403FA8 mov ecx, dword_407E7C push ecx call ds:dword_4060C4 mov [ebp+var_6D4], 104h lea edx, [ebp+var_6D4] push edx lea eax, [ebp+var_6C8] push eax mov ecx, dword_408198 push ecx mov edx, dword_408110 push edx push 2 push 0 call dword_4081C8 jmp short loc_403FE5 ; --------------------------------------------------------------------------- loc_403FA8: ; CODE XREF: sub_402CFF+1268j push offset aTimesNewRom_18 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch push 104h lea ecx, [ebp+var_6C8] push ecx push 0 call dword_408130 push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC loc_403FE5: ; CODE XREF: sub_402CFF+12A7j push offset aMsSansSerif_51 ; "MS Sans Serif" push 0Ch mov eax, dword_407E7C push eax call sub_401834 add esp, 0Ch push 104h call ds:dword_4060A8 add esp, 4 mov [ebp+var_6CC], eax mov ecx, dword_407E7C push ecx call ds:dword_4060C4 mov edx, dword_407E84 push edx call sub_404FBA add esp, 4 test eax, eax jbe short loc_404066 push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC mov ecx, dword_407E84 push ecx lea edx, [ebp+var_6C8] push edx push offset aSS ; "\"%s\" %s" mov eax, [ebp+var_6CC] push eax call ds:dword_4060A4 add esp, 10h jmp short loc_4040A3 ; --------------------------------------------------------------------------- loc_404066: ; CODE XREF: sub_402CFF+132Dj push 3 push offset dword_4081A4 mov ecx, dword_407E7C push ecx call ds:dword_4060BC lea edx, [ebp+var_6C8] push edx push offset aS ; "\"%s\"" mov eax, [ebp+var_6CC] push eax call ds:dword_4060A4 add esp, 0Ch mov ecx, dword_407E7C push ecx call ds:dword_4060C4 loc_4040A3: ; CODE XREF: sub_402CFF+1365j mov edx, [ebp+var_6D0] push edx mov eax, [ebp+var_6CC] push eax call sub_40212E add esp, 8 jmp loc_4046C2 ; --------------------------------------------------------------------------- loc_4040BE: ; CODE XREF: sub_402CFF+11ADj mov ecx, [ebp+var_3A8] and ecx, 0FFFFh cmp ecx, 2 jz short loc_4040E4 mov edx, [ebp+var_3A8] and edx, 0FFFFh cmp edx, 3 jnz loc_40469D loc_4040E4: ; CODE XREF: sub_402CFF+13CEj mov [ebp+var_6D8], offset dword_40832C mov [ebp+var_8F8], 0 mov [ebp+var_6E0], 0 mov [ebp+var_8FC], 0 mov [ebp+var_8F0], 0 push offset aMsSansSerif_52 ; "MS Sans Serif" push 0Ch mov eax, dword_407E70 push eax call sub_401834 add esp, 0Ch mov ecx, [ebp+var_3C] add ecx, 8BFh mov [ebp+var_6DC], ecx push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC push 55Fh mov eax, [ebp+var_398] push eax mov ecx, [ebp+var_3CC] push ecx mov edx, [ebp+var_6DC] push edx call sub_401B30 add esp, 10h push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408330 push offset aStatic_12 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov edx, [ebp+var_6DC] add edx, [ebp+var_398] mov [ebp+var_8EC], edx mov eax, dword_4082D0 push eax call ds:dword_4060AC add esp, 4 mov [ebp+var_8F4], eax push offset asc_407C44 ; " " push 0 push 0Ch mov ecx, dword_408070 push ecx call ds:dword_4060B8 loc_4041E5: ; CODE XREF: sub_402CFF+195Fj mov edx, [ebp+var_8F0] imul edx, 208h cmp [ebp+var_398], edx jbe loc_404663 push offset aMsSansSerif_53 ; "MS Sans Serif" push 0Eh mov eax, dword_408188 push eax call sub_401834 add esp, 0Ch push 208h mov ecx, [ebp+var_8F0] imul ecx, 208h mov edx, [ebp+var_6DC] add edx, ecx push edx lea eax, [ebp+var_8E8] push eax call ds:dword_4060B0 add esp, 0Ch push 3 push offset dword_4081A4 mov ecx, dword_407E70 push ecx call ds:dword_4060BC lea edx, [ebp+var_8E0] push edx mov eax, [ebp+var_8F4] push eax push offset aSS_0 ; "%s\\%s" mov ecx, [ebp+var_6D8] push ecx call ds:dword_4060A4 add esp, 10h push offset aMsSansSerif_54 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch lea eax, [ebp+var_7E0] push eax call sub_404FBA add esp, 4 test eax, eax jz loc_404371 push 208h call sub_404FD2 add esp, 4 mov [ebp+var_B3C], eax mov ecx, [ebp+var_B3C] mov [ebp+var_900], ecx push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408334 push offset aStatic_13 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push 208h lea ecx, [ebp+var_8E8] push ecx mov edx, [ebp+var_900] push edx call sub_404FC6 add esp, 0Ch push 100h mov eax, [ebp+var_6D8] push eax mov ecx, [ebp+var_900] add ecx, 8 push ecx call sub_404FC6 add esp, 0Ch mov edx, dword_4080F0 add edx, 1 mov dword_4080F0, edx push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC push 0 push 0 mov ecx, [ebp+var_900] push ecx push offset sub_40295D push 0 push 0 call ds:dword_406010 jmp loc_404643 ; --------------------------------------------------------------------------- loc_404371: ; CODE XREF: sub_402CFF+159Bj push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408338 push offset aEdit_12 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push 0 push 80h push 2 push 0 push 2 push 40000000h mov ecx, [ebp+var_6D8] push ecx call dword_408084 mov [ebp+var_8F8], eax push offset asc_407C80 ; " " push 0 push 0Ch mov edx, dword_408070 push edx call ds:dword_4060B8 cmp [ebp+var_8F8], 0 jz loc_404643 cmp [ebp+var_8F8], 0FFFFFFFFh jz loc_404643 push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_19 ; "Quit" push offset aButton_20 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov edx, [ebp+var_8E8] sub edx, [ebp+var_8FC] cmp edx, 1000h jle short loc_404463 mov eax, [ebp+var_3A8] and eax, 0FFFFh cmp eax, 3 jz short loc_404463 mov [ebp+var_B58], 1000h jmp short loc_404475 ; --------------------------------------------------------------------------- loc_404463: ; CODE XREF: sub_402CFF+1746j ; sub_402CFF+1756j mov ecx, [ebp+var_8E8] sub ecx, [ebp+var_8FC] mov [ebp+var_B58], ecx loc_404475: ; CODE XREF: sub_402CFF+1762j push 55Fh mov edx, [ebp+var_B58] push edx mov eax, [ebp+var_3CC] push eax mov ecx, [ebp+var_8EC] add ecx, [ebp+var_8FC] push ecx call sub_401B30 add esp, 10h push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_20 ; "Quit" push offset aButton_21 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax push 0 push 0 push 0 mov ecx, [ebp+var_8F8] push ecx call dword_408180 push 0 lea edx, [ebp+var_6E0] push edx mov eax, [ebp+var_8E8] sub eax, [ebp+var_8FC] push eax mov ecx, [ebp+var_8EC] add ecx, [ebp+var_8FC] push ecx mov edx, [ebp+var_8F8] push edx call dword_408080 mov eax, dword_407E7C push eax call ds:dword_4060C4 mov ecx, [ebp+var_8F8] push ecx call dword_407E78 mov edx, [ebp+var_39C] and edx, 0FFFFh cmp edx, 1 jnz short loc_404550 push 4 push 0 mov eax, [ebp+var_6D8] push eax call dword_40811C loc_404550: ; CODE XREF: sub_402CFF+183Ej cmp [ebp+var_8E4], 0 jle loc_40462C push 0 mov ecx, dword_4082C0 push ecx push 0 mov edx, dword_407E60 push edx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_40833C push offset aEdit_13 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push 208h call sub_404FD2 add esp, 4 mov [ebp+var_B40], eax mov eax, [ebp+var_B40] mov [ebp+var_904], eax push 208h lea ecx, [ebp+var_8E8] push ecx mov edx, [ebp+var_904] push edx call sub_404FC6 add esp, 0Ch push 100h mov eax, [ebp+var_6D8] push eax mov ecx, [ebp+var_904] add ecx, 8 push ecx call sub_404FC6 add esp, 0Ch mov edx, dword_4080F0 add edx, 1 mov dword_4080F0, edx push 3 push offset dword_4081A4 mov eax, dword_407E7C push eax call ds:dword_4060BC push 0 push 0 mov ecx, [ebp+var_904] push ecx push offset sub_40295D push 0 push 0 call ds:dword_406010 jmp short loc_404643 ; --------------------------------------------------------------------------- loc_40462C: ; CODE XREF: sub_402CFF+1858j push 1 push 0 push 0 mov edx, [ebp+var_6D8] push edx push 0 push 0 call dword_408088 loc_404643: ; CODE XREF: sub_402CFF+166Dj ; sub_402CFF+16ECj ... mov eax, [ebp+var_8E8] mov [ebp+var_8FC], eax mov ecx, [ebp+var_8F0] add ecx, 1 mov [ebp+var_8F0], ecx jmp loc_4041E5 ; --------------------------------------------------------------------------- loc_404663: ; CODE XREF: sub_402CFF+14F8j ; sub_402CFF+199Aj cmp dword_4080F0, 0 jz short loc_40469B mov edx, dword_407E7C push edx call ds:dword_4060C4 push 7D0h call ds:dword_406014 push offset aMsSansSerif_55 ; "MS Sans Serif" push 0Ch mov eax, dword_4082A4 push eax call sub_401834 add esp, 0Ch jmp short loc_404663 ; --------------------------------------------------------------------------- loc_40469B: ; CODE XREF: sub_402CFF+196Bj jmp short loc_4046C2 ; --------------------------------------------------------------------------- loc_40469D: ; CODE XREF: sub_402CFF+13DFj mov [ebp+var_B44], 0 mov [ebp+var_4], 0FFFFFFFFh lea ecx, [ebp+var_34] call ds:dword_40603C mov eax, [ebp+var_B44] jmp loc_404799 ; --------------------------------------------------------------------------- loc_4046C2: ; CODE XREF: sub_402CFF+13BAj ; sub_402CFF:loc_40469Bj mov ecx, [ebp-39Eh] and ecx, 0FFFFh cmp ecx, 1 jnz loc_404779 push 104h lea edx, [ebp+var_B0C] push edx push 0 call dword_408130 push offset aTimesNewRom_19 ; "Times New Roman" push 8 mov eax, dword_40814C push eax call sub_401834 add esp, 0Ch lea ecx, [ebp+var_B0C] push ecx lea edx, [ebp+var_B0C] push edx mov eax, dword_408154 push eax lea ecx, [ebp+var_A08] push ecx call ds:dword_4060A4 add esp, 10h push 104h lea edx, [ebp+var_B0C] push edx mov eax, dword_4081D0 push eax call dword_4082E0 push 3 push offset dword_4081A4 mov ecx, dword_407E70 push ecx call ds:dword_4060BC push 0 push 0 lea edx, [ebp+var_A08] push edx lea eax, [ebp+var_B0C] push eax push 0 push 0 call dword_408088 mov ecx, dword_407E7C push ecx call ds:dword_4060C4 loc_404779: ; CODE XREF: sub_402CFF+19D2j mov [ebp+var_B48], 0 mov [ebp+var_4], 0FFFFFFFFh lea ecx, [ebp+var_34] call ds:dword_40603C mov eax, [ebp+var_B48] loc_404799: ; CODE XREF: sub_402CFF+757j ; sub_402CFF+7ABj ... mov ecx, [ebp+var_C] mov large fs:0, ecx pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_402CFF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4047AA proc near ; CODE XREF: WinMain(x,x,x,x)+399p ; DATA XREF: WinMain(x,x,x,x)+2Ao ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx push 0 mov eax, dword_4082C0 push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408340 push offset aStatic_14 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408344 push offset aEdit_14 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov ecx, [ebp+arg_4] mov [ebp+var_4], ecx cmp [ebp+var_4], 2 jz short loc_404884 cmp [ebp+var_4], 10h jz short loc_40483B cmp [ebp+var_4], 272Ch jz short loc_404890 jmp short loc_404895 ; --------------------------------------------------------------------------- loc_40483B: ; CODE XREF: sub_4047AA+84j push 0 mov edx, dword_4082C0 push edx push 0 mov eax, dword_407E60 push eax push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408348 push offset aEdit_15 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax mov ecx, dword_407E60 push ecx call ds:dword_4060D4 xor eax, eax jmp short loc_4048AB ; --------------------------------------------------------------------------- loc_404884: ; CODE XREF: sub_4047AA+7Ej push 0 call ds:dword_4060D0 xor eax, eax jmp short loc_4048AB ; --------------------------------------------------------------------------- loc_404890: ; CODE XREF: sub_4047AA+8Dj call sub_402CFF loc_404895: ; CODE XREF: sub_4047AA+8Fj mov edx, [ebp+arg_C] push edx mov eax, [ebp+arg_8] push eax mov ecx, [ebp+arg_4] push ecx mov edx, [ebp+arg_0] push edx call ds:dword_4060CC loc_4048AB: ; CODE XREF: sub_4047AA+D8j ; sub_4047AA+E4j mov esp, ebp pop ebp retn 10h sub_4047AA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nShowCmd) _WinMain@16 proc near ; CODE XREF: start+12Fp var_80 = dword ptr -80h var_7C = byte ptr -7Ch var_4C = byte ptr -4Ch var_44 = dword ptr -44h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 hInstance = dword ptr 8 hPrevInstance = dword ptr 0Ch lpCmdLine = dword ptr 10h nShowCmd = dword ptr 14h push ebp mov ebp, esp sub esp, 80h push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC mov [ebp+var_30], 30h mov [ebp+var_2C], 0 mov [ebp+var_28], offset sub_4047AA mov [ebp+var_24], 0 push offset aMsSansSerif ; "MS Sans Serif" push 0Ch mov ecx, dword_4082A4 push ecx call sub_401834 add esp, 0Ch mov [ebp+var_20], 0 push offset aMsSansSerif_0 ; "MS Sans Serif" push 0Ch mov edx, dword_407E7C push edx call sub_401834 add esp, 0Ch mov eax, [ebp+hInstance] mov [ebp+var_1C], eax push 3 push offset dword_4081A4 mov ecx, dword_407E7C push ecx call ds:dword_4060BC mov [ebp+var_18], 0 push 7F00h push 0 call ds:dword_4060F4 mov [ebp+var_14], eax push 3 push offset dword_4081A4 mov edx, dword_407E7C push edx call ds:dword_4060BC mov [ebp+var_10], 10h push offset aMsSansSerif_1 ; "MS Sans Serif" push 0Ch mov eax, dword_407E70 push eax call sub_401834 add esp, 0Ch mov [ebp+var_C], 0 push 0 mov ecx, [ebp+hInstance] push ecx push 0 mov edx, dword_407E60 push edx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_40834C push offset aStatic ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov [ebp+var_8], offset aWinclass ; "WinClass" push offset asc_407D28 ; " " push 0 push 0Ch mov eax, dword_408070 push eax call ds:dword_4060B8 mov [ebp+var_4], 0 lea ecx, [ebp+var_30] push ecx call ds:dword_4060F0 mov edx, dword_407E7C push edx call ds:dword_4060C4 cmp dword_407E68, 0 jz loc_404C01 push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC loc_404A14: ; CODE XREF: WinMain(x,x,x,x)+296j mov ecx, 1 test ecx, ecx jz loc_404B4C push offset asc_407D2C ; " " push 0 push 0Ch mov edx, dword_408070 push edx call ds:dword_4060B8 mov [ebp+var_80], 0 push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC loc_404A51: ; CODE XREF: WinMain(x,x,x,x)+1F6j cmp [ebp+var_80], 1869Fh jge short loc_404AA9 cmp [ebp+var_80], 536D4h jnz short loc_404A83 mov dword_40806C, 0 push offset aMsSansSerif_2 ; "MS Sans Serif" push 0Eh mov ecx, dword_408188 push ecx call sub_401834 add esp, 0Ch loc_404A83: ; CODE XREF: WinMain(x,x,x,x)+1B0j call sub_401869 cmp [ebp+var_80], 2FA8D8h jnz short loc_404A9E mov edx, dword_407E7C push edx call ds:dword_4060C4 loc_404A9E: ; CODE XREF: WinMain(x,x,x,x)+1DEj mov eax, [ebp+var_80] add eax, 1 mov [ebp+var_80], eax jmp short loc_404A51 ; --------------------------------------------------------------------------- loc_404AA9: ; CODE XREF: WinMain(x,x,x,x)+1A7j push 0 mov ecx, [ebp+hInstance] push ecx push 0 mov edx, dword_407E60 push edx push 0Ah push 37h push 1Eh push 0Ah push 50000000h push offset dword_408350 push offset aEdit ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax cmp dword_407E68, 0 jz short loc_404B00 mov dword_40806C, 0 mov eax, dword_407E7C push eax call ds:dword_4060C4 jmp short loc_404B4C ; --------------------------------------------------------------------------- loc_404B00: ; CODE XREF: WinMain(x,x,x,x)+235j mov dword_40806C, 0 cmp dword_407E68, 0 jnz short loc_404B33 push offset aMsSansSerif_3 ; "MS Sans Serif" push 0Eh mov ecx, dword_408188 push ecx call sub_401834 add esp, 0Ch push 64h call ds:dword_406014 jmp short loc_404B4C ; --------------------------------------------------------------------------- loc_404B33: ; CODE XREF: WinMain(x,x,x,x)+260j push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC jmp loc_404A14 ; --------------------------------------------------------------------------- loc_404B4C: ; CODE XREF: WinMain(x,x,x,x)+16Aj ; WinMain(x,x,x,x)+24Dj ... push 0 mov eax, [ebp+hInstance] push eax push 0 mov ecx, dword_407E68 push ecx push 0C8h push 0F0h push 2 push 0 push 50000000h push offset a1 ; "1" push offset aStatic_0 ; "Static" push 0 call ds:dword_4060C0 mov dword_408194, eax push 0 mov edx, [ebp+hInstance] push edx push 0 mov eax, dword_407E68 push eax push 1Eh push 4Bh push 0C8h push 0 push 50000000h push offset aQuit ; "Quit" push offset aButton ; "Button" push 0 call ds:dword_4060C0 mov dword_4082AC, eax push 0 mov ecx, [ebp+hInstance] push ecx push 0 mov edx, dword_407E68 push edx push 1Eh push 4Bh push 0C8h push 0A7h push 50000000h push offset asc_407D74 ; ">>" push offset aButton_0 ; "Button" push 0 call ds:dword_4060C0 mov dword_4080F4, eax push 0 mov eax, dword_407E68 push eax call ds:dword_4060EC loc_404C01: ; CODE XREF: WinMain(x,x,x,x)+14Aj mov ecx, [ebp+lpCmdLine] mov dword_407E84, ecx push 0 mov edx, [ebp+hInstance] push edx push 0 mov eax, dword_407E60 push eax push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408354 push offset aStatic_1 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push 0 push 0 push 272Ch push 0 call sub_4047AA test eax, eax jnz short loc_404C70 push offset aTimesNewRoman ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch xor eax, eax jmp loc_404FAE ; --------------------------------------------------------------------------- loc_404C70: ; CODE XREF: WinMain(x,x,x,x)+3A0j push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC mov dword_40806C, 1 mov [ebp+var_30], 30h push 3 push offset dword_4081A4 mov eax, dword_407E70 push eax call ds:dword_4060BC mov [ebp+var_2C], 0 mov [ebp+var_28], offset sub_4047AA push 0 mov ecx, [ebp+hInstance] push ecx push 0 mov edx, dword_407E60 push edx push 7Fh push 26h push 0 push 69h push 50000000h push offset aQuit_0 ; "Quit" push offset aButton_1 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov [ebp+var_24], 0 mov [ebp+var_20], 0 mov eax, dword_407E7C push eax call ds:dword_4060C4 mov ecx, [ebp+hInstance] mov [ebp+var_1C], ecx push offset aMsSansSerif_4 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch mov [ebp+var_18], 0 push 7F00h push 0 call ds:dword_4060F4 mov [ebp+var_14], eax push 0 mov eax, [ebp+hInstance] push eax push 0 mov ecx, dword_407E60 push ecx push 32h push 12Ch push 0 push 0 push 50000000h push offset dword_408358 push offset aStatic_2 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax mov [ebp+var_10], 10h mov [ebp+var_C], 0 mov edx, dword_407E7C push edx call ds:dword_4060C4 mov [ebp+var_8], offset aWndclass ; "WndClass" mov [ebp+var_4], 0 mov eax, dword_407E7C push eax call ds:dword_4060C4 lea ecx, [ebp+var_7C] push ecx call ds:dword_4060F0 push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC push 0 mov eax, [ebp+hInstance] push eax push 0 push 0 push 0D5h push 11Dh push 64h push 64h push 0CF0000h push offset dword_40835C push offset aWndclass_0 ; "WndClass" push 0 call ds:dword_4060C0 mov dword_407E60, eax mov dword_40806C, 0 cmp dword_407E60, 0 jz loc_404F27 push 0 mov ecx, [ebp+hInstance] push ecx push 0 mov edx, dword_407E60 push edx push 32h push 0C8h push 0 push 0 push 50000000h push offset dword_408360 push offset aStatic_3 ; "Static" push 0 call ds:dword_4060C0 mov dword_40814C, eax push 0 mov eax, [ebp+hInstance] push eax push 0 mov ecx, dword_407E60 push ecx push 1Bh push 44h push 0 push 0CDh push 50000000h push offset aQuit_1 ; "Quit" push offset aButton_2 ; "Button" push 0 call ds:dword_4060C0 mov dword_408188, eax mov edx, dword_407E7C push edx call ds:dword_4060C4 push 0 mov eax, [ebp+hInstance] push eax push 0 mov ecx, dword_407E60 push ecx push 14h push 32h push 28h push 0Ah push 50000000h push offset dword_408364 push offset aEdit_0 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E7C, eax push 3 push offset dword_4081A4 mov edx, dword_407E70 push edx call ds:dword_4060BC push 0 mov eax, [ebp+hInstance] push eax push 0 mov ecx, dword_407E60 push ecx push 14h push 32h push 28h push 3Ch push 50000000h push offset dword_408368 push offset aEdit_1 ; "Edit" push 200h call ds:dword_4060C0 mov dword_407E70, eax push offset aMsSansSerif_5 ; "MS Sans Serif" push 0Eh mov edx, dword_408188 push edx call sub_401834 add esp, 0Ch push 0 mov eax, dword_407E60 push eax call ds:dword_4060EC loc_404F27: ; CODE XREF: WinMain(x,x,x,x)+553j push offset aTimesNewRoma_0 ; "Times New Roman" push 8 mov ecx, dword_40814C push ecx call sub_401834 add esp, 0Ch call sub_401869 call sub_40192E push offset aMsSansSerif_6 ; "MS Sans Serif" push 0Ch mov edx, dword_407E70 push edx call sub_401834 add esp, 0Ch loc_404F5D: ; CODE XREF: WinMain(x,x,x,x)+6D4j push 0 push 0 push 0 lea eax, [ebp+var_4C] push eax call ds:dword_4060E4 test eax, eax jz short loc_404F87 lea ecx, [ebp+var_4C] push ecx call ds:dword_4060E0 lea edx, [ebp+var_4C] push edx call ds:dword_4060DC jmp short loc_404F5D ; --------------------------------------------------------------------------- loc_404F87: ; CODE XREF: WinMain(x,x,x,x)+6BEj push offset aMsSansSerif_7 ; "MS Sans Serif" push 0Ch mov eax, dword_4082A4 push eax call sub_401834 add esp, 0Ch mov ecx, [ebp+hInstance] push ecx push offset aWinclass_0 ; "WinClass" call ds:dword_4060D8 mov eax, [ebp+var_44] loc_404FAE: ; CODE XREF: WinMain(x,x,x,x)+3BAj mov esp, ebp pop ebp retn 10h _WinMain@16 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FB4 proc near ; CODE XREF: sub_40192E+C7p ; sub_40192E+F4p ... jmp ds:dword_40608C sub_404FB4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FBA proc near ; CODE XREF: sub_401D4B+6Bp ; sub_40295D+5Fp ... jmp ds:dword_406090 sub_404FBA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FC0 proc near ; DATA XREF: .text:00401E48o ; sub_401FCA+Ao ... jmp ds:dword_406094 sub_404FC0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FC6 proc near ; CODE XREF: sub_40212E+1E2p ; sub_40212E+34Fp ... jmp ds:dword_406098 sub_404FC6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FCC proc near ; CODE XREF: sub_40212E+1B0p ; sub_402CFF+123Dp jmp ds:dword_40609C sub_404FCC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FD2 proc near ; CODE XREF: sub_402CFF+15A6p ; sub_402CFF+189Cp jmp ds:dword_406050 sub_404FD2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FD8 proc near ; CODE XREF: sub_402CFF+127p ; sub_402CFF+17Ep jmp ds:dword_406088 sub_404FD8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_404FDE proc near ; CODE XREF: SEH_402CFF+5j jmp ds:dword_406084 sub_404FDE endp ; [00000152 BYTES: COLLAPSED FUNCTION start. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov esp, [ebp-18h] push dword ptr [ebp-78h] call ds:dword_406080 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_405142 proc near ; CODE XREF: start+14Ap jmp ds:dword_40607C sub_405142 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_405148 proc near ; CODE XREF: start+92p start+C5p jmp ds:dword_40606C sub_405148 endp ; [00000012 BYTES: COLLAPSED FUNCTION __setdefaultprecision. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_405160 proc near ; DATA XREF: start+77o xor eax, eax retn sub_405160 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_405164 proc near ; CODE XREF: __setdefaultprecision+Ap jmp ds:dword_406054 sub_405164 endp ; --------------------------------------------------------------------------- align 10h lea ecx, [ebp-34h] call ds:dword_40603C retn ; =============== S U B R O U T I N E ======================================= sub_40517A proc near ; DATA XREF: .rdata:00406164o lea ecx, [ebp-5C0h] call ds:dword_40603C retn sub_40517A endp ; --------------------------------------------------------------------------- lea ecx, [ebp-5B0h] call ds:dword_40603C retn ; --------------------------------------------------------------------------- lea ecx, [ebp-5A0h] call ds:dword_40603C retn ; --------------------------------------------------------------------------- lea ecx, [ebp-590h] call ds:dword_40603C retn ; --------------------------------------------------------------------------- lea ecx, [ebp-580h] call ds:dword_40603C retn ; --------------------------------------------------------------------------- lea ecx, [ebp-56Ch] call ds:dword_40603C retn ; --------------------------------------------------------------------------- lea ecx, [ebp-0B38h] call ds:dword_40603C retn ; =============== S U B R O U T I N E ======================================= SEH_402CFF proc near ; DATA XREF: sub_402CFF+5o mov eax, offset dword_406138 jmp sub_404FDE SEH_402CFF endp ; --------------------------------------------------------------------------- db ? dd 8 dup(?) _text ends ; Section 2. (virtual address 00006000) ; Virtual size : 000009B0 ( 2480.) ; Section size in file : 000009B0 ( 2480.) ; Offset to raw data for section: 00006000 ; Flags 40000040: Data Readable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read _rdata segment para public 'DATA' use32 assume cs:_rdata ;org 406000h dword_406000 dd 647Ch align 8 dword_406008 dd 634Ah ; start+128r dword_40600C dd 6992h dword_406010 dd 633Ah ; sub_402CFF+1925r dword_406014 dd 6332h ; sub_402CFF+197Fr ... dword_406018 dd 6328h align 10h dword_406020 dd 6786h dword_406024 dd 6732h dword_406028 dd 67E2h ; sub_402CFF+D35r ... dword_40602C dd 669Ah ; sub_402CFF+107Er ... dword_406030 dd 6644h dword_406034 dd 65F4h ; sub_402CFF+108Br ... dword_406038 dd 65A2h dword_40603C dd 6558h ; sub_402CFF+F8Er ... dword_406040 dd 650Ch dword_406044 dd 64B0h dword_406048 dd 66E8h align 10h dword_406050 dd 688Ah dword_406054 dd 6984h dword_406058 dd 6972h dword_40605C dd 6964h dword_406060 dd 6954h dword_406064 dd 6944h dword_406068 dd 6930h dword_40606C dd 6924h dword_406070 dd 6914h dword_406074 dd 690Ah dword_406078 dd 6902h dword_40607C dd 68F4h dword_406080 dd 68ECh dword_406084 dd 68CCh dword_406088 dd 68C2h dword_40608C dd 684Eh dword_406090 dd 6858h dword_406094 dd 6862h dword_406098 dd 6876h dword_40609C dd 6880h dword_4060A0 dd 69A4h ; sub_402CFF+A1Cr ... dword_4060A4 dd 689Ah ; sub_402CFF+138Er ... dword_4060A8 dd 68A4h dword_4060AC dd 68AEh ; sub_402CFF+14C1r dword_4060B0 dd 68B8h ; sub_402CFF+1534r align 8 dword_4060B8 dd 6374h ; sub_40212E+5EBr ... dword_4060BC dd 6384h ; sub_401B30+9Cr ... dword_4060C0 dd 6396h ; .text:00401CBAr ... dword_4060C4 dd 63A8h ; sub_401B30+88r ... dword_4060C8 dd 63B4h dword_4060CC dd 63C2h dword_4060D0 dd 63D4h dword_4060D4 dd 63E6h dword_4060D8 dd 63F6h dword_4060DC dd 640Ah dword_4060E0 dd 641Eh dword_4060E4 dd 6432h dword_4060E8 dd 636Ch dword_4060EC dd 6440h ; WinMain(x,x,x,x)+670r dword_4060F0 dd 644Eh ; WinMain(x,x,x,x)+4F4r dword_4060F4 dd 6462h ; WinMain(x,x,x,x)+47Cr dd 0 dword_4060FC dd 6496h dd 2 dup(0) dword_406108 dd 0FFFFFFFFh, 401F34h, 401F4Fh, 0dword_406118 dd 0FFFFFFFFh, 40209Ah, 4020B5h, 0dword_406128 dd 0FFFFFFFFh, 405122h, 405136h, 0dword_406138 dd 19930520h, 8, 406158h, 5 dup(0) dd 0FFFFFFFFh, 405170h, 0 dd offset sub_40517A dd 1, 405187h, 2, 405194h, 3, 4051A1h, 4, 4051AEh, 5, 4051BBh dd 6, 4051C8h, 622Ch, 2 dup(0) dd 635Eh, 6008h, 62DCh, 2 dup(0) dd 6470h, 60B8h, 6224h, 2 dup(0) dd 648Ch, 6000h, 6320h, 2 dup(0) dd 64A6h, 60FCh, 6244h, 2 dup(0) dd 6842h, 6020h, 6274h, 2 dup(0) dd 68E0h, 6050h, 5 dup(0) dd 647Ch, 0 dd 634Ah, 6992h, 633Ah, 6332h, 6328h, 0 dd 6786h, 6732h, 67E2h, 669Ah, 6644h, 65F4h, 65A2h, 6558h dd 650Ch, 64B0h, 66E8h, 0 dd 688Ah, 6984h, 6972h, 6964h, 6954h, 6944h, 6930h, 6924h dd 6914h, 690Ah, 6902h, 68F4h, 68ECh, 68CCh, 68C2h, 684Eh dd 6858h, 6862h, 6876h, 6880h, 69A4h, 689Ah, 68A4h, 68AEh dd 68B8h, 0 dd 6374h, 6384h, 6396h, 63A8h, 63B4h, 63C2h, 63D4h, 63E6h dd 63F6h, 640Ah, 641Eh, 6432h, 636Ch, 6440h, 644Eh, 6462h dd 0 dd 6496h, 0 dd 754D0274h, 7669446Ch, 3560000h, 65656C53h, 6F0070h dd 61657243h, 68546574h, 64616572h, 17F0000h, 4D746547h dd 6C75646Fh, 6E614865h, 41656C64h, 454B0000h, 4C454E52h dd 642E3233h, 6C6Ch, 6547010Ch, 434474h, 6553023Bh, 654D646Eh dd 67617373h, 4165h, 65470177h, 6E695774h, 54776F64h, 41747865h dd 600000h, 61657243h, 69576574h, 776F646Eh, 417845h, 65530256h dd 636F4674h, 7375h, 654D01DFh, 67617373h, 786F4265h, 8E0041h dd 57666544h, 6F646E69h, 6F725077h, 4163h, 6F500204h, 75517473h dd 654D7469h, 67617373h, 990065h, 74736544h, 57796F72h dd 6F646E69h, 2B30077h, 65726E55h, 74736967h, 6C437265h dd 41737361h, 0A10000h, 70736944h, 68637461h, 7373654Dh dd 41656761h, 2AA0000h, 6E617254h, 74616C73h, 73654D65h dd 65676173h, 13A0000h, 4D746547h, 61737365h, 416567h dd 68530292h, 6957776Fh, 776F646Eh, 2170000h, 69676552h dd 72657473h, 73616C43h, 41784573h, 1BA0000h, 64616F4Ch dd 73727543h, 41726Fh, 52455355h, 642E3233h, 6C6Ch, 6547016Bh dd 76654474h, 43656369h, 737061h, 33494447h, 6C642E32h dd 3B006Ch, 6E496F43h, 61697469h, 657A696Ch, 6C6F0000h dd 2E323365h, 6C6C64h a?replace@?Basi db 7,7,'?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2' db '@@std@@QAEAAV12@IIABV12@@Z',0 aE?size@?Basic_ db '',7,'?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2' db '@@std@@QBEIXZ',0 aS_0 db '',0 a??1?Basic_stri db '??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Q' db 'AE@XZ',0 align 2 dw 146h a??4?Basic_stri db '??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Q' db 'AEAAV01@PBD@Z',0 align 4 db 37h ; 7 db 4, 3Fh, 63h a_str@?Basic_st db '_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@' db '@QBEPBDXZ',0 align 4 aZ?substr@?Basi db '',7,'?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D' db '@2@@std@@QBE?AV12@II@Z',0 align 2 dw 620h a?length@?Basic db '?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@s' db 'td@@QBEIXZ',0 db 61h ; a db 6, 3Fh, 6Eh aPos@?Basic_str db 'pos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@' db '2IB',0 align 2 dw 53Fh a?find@?Basic_s db '?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std' db '@@QBEIABV12@I@Z',0 align 2 aI db 'I',0 a??0?Basic_stri db '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Q' db 'AE@ABV?$allocator@D@1@@Z',0 db 'L',0 a??0?Basic_st_0 db '??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@Q' db 'AE@PBDABV?$allocator@D@1@@Z',0 align 2 aMsvcp60_dll db 'MSVCP60.dll',0 dw 2B6h aStrcat db 'strcat',0 align 4 db 0BEh ; db 2, 73h, 74h aRlen db 'rlen',0 align 2 db '',0 a_except_handle db '_except_handler3',0 align 2 dw 297h aMemcpy db 'memcpy',0 align 10h db 99h ; db 2, 6Dh, 65h aMset db 'mset',0 align 2 dw 0Fh a??2@yapaxi@z db '??2@YAPAXI@Z',0 align 2 dw 2B2h aSprintf db 'sprintf',0 db 91h ; db 2, 6Dh, 61h aLloc db 'lloc',0 align 2 dw 26Ah aGetenv db 'getenv',0 align 4 db 98h ; db 2, 6Dh, 65h aMmove db 'mmove',0 dw 2B8h aStrcmp db 'strcmp',0 align 4 aI_0 db 'I',0 a__cxxframehand db '__CxxFrameHandler',0 aMsvcrt_dll db 'MSVCRT.dll',0 align 4 db '',0 a_exit db '_exit',0 db 'H',0 a_xcptfilter db '_XcptFilter',0 dw 249h aExit db 'exit',0 align 2 aP db '',0 a_acmdln db '_acmdln',0 db 'X',0 a__getmainargs db '__getmainargs',0 dd 695F010Fh, 7474696Eh, 6D7265h, 5F5F0083h, 75746573h dd 6D726573h, 65687461h, 7272h, 615F009Dh, 73756A64h, 64665F74h dd 7669h, 5F5F006Ah, 635F5F70h, 6F6D6D6Fh, 6564h, 5F5F006Fh dd 665F5F70h, 65646F6Dh, 810000h, 65735F5Fh, 70615F74h dd 79745F70h, 6570h, 635F00B7h, 72746E6Fh, 70666C6Fh, 1B70000h dd 53746547h, 74726174h, 6E497075h, 416F66h, 735F01C1h dd 63697274h, 706Dh align 80h _rdata ends ; Section 3. (virtual address 00007000) ; Virtual size : 00001388 ( 5000.) ; Section size in file : 00001388 ( 5000.) ; Offset to raw data for section: 00007000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _data segment para public 'DATA' use32 assume cs:_data ;org 407000h dword_407000 dd 0 dd offset sub_401000 dd offset sub_401023 dd offset sub_401046 dd offset sub_401069 dd offset sub_40108C dd offset sub_4010AF dd offset sub_4010D2 dd offset sub_4010F5 dd offset sub_401118 dd offset sub_40113B dd offset sub_40115E dd offset sub_401181 dd offset sub_4011A4 dd offset sub_4011C7 dd offset sub_4011EA dd offset sub_40120D dd offset sub_401230 dd offset sub_401253 dd offset sub_401276 dd offset sub_401299 dd offset sub_4012BC dd offset sub_4012DF dd offset sub_401302 dd offset sub_401325 dd offset sub_401348 dd offset sub_40136B dd offset sub_40138E dd offset sub_4013B1 dd offset sub_4013D4 dd offset sub_4013F7 dd offset sub_40141A dd offset sub_40143D dd offset sub_401460 dd offset sub_401483 dd offset sub_4014A6 dd offset sub_4014C9 dd offset sub_4014EC dd offset sub_40150F dd offset sub_401532 dd offset sub_401555 dd offset sub_401578 dd offset sub_40159B dd offset sub_4015BE dd offset sub_4015E1 dd offset sub_401604 dd offset sub_401627 dd offset sub_40164A dd offset sub_40166D dd offset sub_401690 dd offset sub_4016B3 dd offset sub_4016D6 dd offset sub_4016F9 dd offset sub_40171C dd offset sub_40173F dd offset sub_401762 dd offset sub_401785 dd offset sub_4017A8 dd offset sub_4017CB dd offset sub_4017EE dd offset sub_401811 dword_4070F4 dd 0 dword_4070F8 dd 0 dword_4070FC dd 0 dword_407100 dd 0A64762C5h, 2ED31441h, 0D6BF1606h, 0E196C3BCh, 30698CB0h ; DATA XREF: sub_401D4B+66o ; sub_401D4B+78o dd 6BE6E243h, 0F6AAEBFBh, 0BE640C7Dh, 9D688B92h, 72046BB9h dd 0A8608C65h, 3837681Fh, 0D4217725h, 8ABF5C5Bh, 409F1B4Ah dd 74076D0Ch, 0C2736ACBh, 6D358FC7h, 67AF8E71h, 60D5A2ADh dd 0F95D19B9h, 0D626A9B8h, 0C08D487Bh, 3FEE2C90h, 4E1C7E09h dd 3E1CB117h, 79FCC107h, 50E26382h, 754576DAh, 5A84BD21h dd 0FBB321C4h, 72C07BB5h, 159FBA18h, 0B25B82BCh, 0A266C3AAh dd 0DB83AA8Bh, 377F8BAFh, 0A815F653h, 5C0B3B37h, 4AB56DD5h dd 46FF2624h, 43BF0E71h, 99496640h, 54275907h, 3F8C43h dword_4071B4 dd 25BADA11h, 0DF6BAAB1h, 7A92D9AFh, 0dword_4071C4 dd 11CDD00Ch, 0AE6CB0D7h, 9E8BCBB2h, 0AB9BhaJyMiy db 8,'ݾ"٦Y߽~y',0 ; DATA XREF: sub_401050+5o align 4 dword_4071E4 dd 2FAEDF13h, 0C379A2D2h, 8890CCB7h, 0CB798B8Eh, 497A8EB4h ; DATA XREF: sub_401073+5o dd 0 a5VuoI db 1Bh,'5ڢuӈ',0 ; DATA XREF: sub_401096+5o align 4 a5VuoIM db 1Bh,'5ڢuӈm',0 ; DATA XREF: sub_4010B9+5o align 4 a5VuNulmyr db 1Bh,'5ڢu֍Y',0 ; DATA XREF: sub_4010DC+5o align 10h a5VuLM db 1Bh,'5ڢűm',0 ; DATA XREF: sub_4010FF+5o align 10h dword_407240 dd 35C2DD1Ch, 0DC7B91CAh, 0AC8CCCB1h, 0D7819D75h, 9EB2h ; DATA XREF: sub_401122+5o dword_407254 dd 25BAD017h, 0D078B3B5h, 868CDAB3h, 0DA83A58Dh, 0B9h ; DATA XREF: sub_401145+5o dword_407268 dd 15CDD00Ch, 0CE6EB3CDh, 0A788AAB2h, 0DC8C9D9Ch, 0 ; DATA XREF: sub_401168+5o dword_40727C dd 15CDD018h, 0CE6EB3CDh, 0A788AAB2h, 0DC8C9D9Ch, 0 ; DATA XREF: sub_40118B+5o dword_407290 dd 36CCD017h, 0D55DA6D2h, 9D7ACCC0h, 0dword_4072A0 dd 0ECDD00Ch, 0D97EA5D4h, 0A582ADB3h, 0D575868Dh, 66A5h ; DATA XREF: sub_4011D1+5o dword_4072B4 dd 30CCDE06h, 0D27E92C8h, 0AD6CE0C0h, 0CF82A19Ah, 81h ; DATA XREF: sub_4011F4+5o dword_4072C8 dd 25BADA11h, 0DC7CA6B7h, 9E7CD9C3h, 0aJUi db 0Bh,'%||i',0 ; DATA XREF: sub_40123A+5o align 4 dword_4072E8 dd 2CBCDA11h, 0DC7CA6B7h, 9E7CD9C3h, 0dword_4072F8 dd 26D3D418h, 0D25BA7D4h, 0AB8ED6C1h, 9D8BhaJoZ db 8,'ݾ"٦OֺZ',0 ; DATA XREF: sub_4012A3+5o dword_407314 dd 7CDD018h, 0BD6EADCEh, 0AD87D0BDh, 0AA8Dhdword_407324 dd 35C2DD1Ch, 0D97287CAh, 0B3ha4Ij db 8,'4ʉj۲~',0 ; DATA XREF: sub_40130C+5o dword_40733C dd 2DBED318h, 0D28186D1h, 9E8DDCB1h, 69hdword_40734C dd 26CFDA12h, 0D275AAABh, 5ADF93hdword_407358 dd 6CDD00Ch, 0DF72B7D3h, 9E86D5BDh, 0C96AAC96h, 3D6C8EB2h ; DATA XREF: sub_401375+5o dd 0ED0463h dword_407370 dd 26C5D009h, 0DF5EA6D9h, 9C7AAABAh, 0D6599D90h, 1C8497B4h ; DATA XREF: sub_401398+5o dd 0 dword_407388 dd 5A5BD1Ah, 0D977B8D4h, 8D7DC8BDh, 0D47D7E97h, 66A5h ; DATA XREF: sub_4013BB+5o dword_40739C dd 16CDD00Ch, 0BB7BA6D8h, 7A7ED4AFh, 0aKwZ db 0Bh,'%wѽZ',0 ; DATA XREF: sub_401401+5o dword_4073B8 dd 4C0D017h, 0E16AA6D7h, 0B27EB2B3h, 55B06Dhdword_4073C8 dd 4C0D017h, 0D27CB0D1h, 92CC99hdword_4073D4 dd 14C0D017h, 0CE5FB5CAh, 7E7EDCBAh, 79A0ha0NQEe db '0/ʭ<|˅',0 ; DATA XREF: sub_40148D+5o align 4 a3Om db '3߽-omٺ',0 ; DATA XREF: sub_4014B0+5o align 10h a88RiE db '88ƱrӅ',0 ; DATA XREF: sub_4014D3+5o aKQEe db '&"ժ<|˅',0 ; DATA XREF: sub_4014F6+5o align 4 a8TIE db '8Ӿ-t;Ӆ',0 ; DATA XREF: sub_401519+5o aJIE db '<*Ӧ}Ӆ',0 ; DATA XREF: sub_40153C+5o a_P7 db ':.ԯ7Ѻ',0 ; DATA XREF: sub_40155F+5o align 10h a3ss7 db ':3s7Ѻ',0 ; DATA XREF: sub_401582+5o align 4 dword_40744C dd 2ECDD3F3h, 0D1hdword_407454 dd 31C6D019h, 0 dword_40745C dd 2FBEDB14h, 0 dword_407464 dd 0E379CEF4h, 8D7BB0CBh, 5E39B37Dh, 0D134994Dh, 0C3345AEh ; DATA XREF: sub_40160E+5o dd 6DD8D023h, 4DB4F503h, 3AD631E8h, 0FDBCD41Eh, 0F77ADA70h dd 91431DF3h, 484D62CBh, 0C103A448h, 99C7AC54h, 0BA1785B2h dd 0CBA3BF48h, 4BF5D33Dh, 1ADB2A5Bh, 4129h dword_4074B0 dd 14C6DA08h, 6CA6D5hdword_4074B8 dd 26C2CD18h, 9B75ADA9h, 85D3B2hdword_4074C4 dd 0E1BED319h, 0D27BAABCh, 0AB7ACFC1h, 0CD625893h, 4D7A9CB4h ; DATA XREF: sub_401677+5o dd 0A8EDBF62h, 630D3834h, 83DEh aE4OyXN db 8,'4Ʈyٳ~',0 ; DATA XREF: sub_40169A+5o align 4 aE8PmUmbliNx7j db 8,'8ίmuͭX=7j',0 ; DATA XREF: sub_4016BD+5o dw 0AA19h dd 1AF3313Fh, 3AEA76A7h, 0 aR3PTL db '(3ʯ}̋',0 ; DATA XREF: sub_4016E0+5o dword_407524 dd 24C8DD15h, 8D7CB4CAh, 0A287D69Bh, 8886A79Ch, 545E456Dh ; DATA XREF: sub_401703+5o dd 0AE1A086Ah, 4A023E38h, 0F5AC84E5h, 6112B29h, 3ACD3170h dd 9D3F713Bh, 52415E19h, 0C529303h, 0 dword_40755C dd 26C5D40Bh, 0DB788E85h, 0AB88DBB7h, 0BB346548h, 497498B9h ; DATA XREF: sub_401726+5o dd 0A81E046Bh, 23073834h, 4CE98899h, 4B1327E0h, 36CE2666h dd 973B6B3Fh, 4E382B1Eh, 42h dword_407590 dd 2AC0D017h, 0E67BB5D8h, 0A788B46Eh, 0DA83AC91h, 2E2B5260h ; DATA XREF: sub_401749+5o dd 0A8151270h, 57063147h, 0FE57DDAh, 4F112BD2h, 44D32B2Bh dd 904E6B36h, 4B366B1Dh, 0E465E48h, 9Ch dword_4075C8 dd 11A9ACEAh, 0AE5D82A9h, 73ha0JFEui db '0̳jڔЅ]',0 ; DATA XREF: sub_40178F+5o align 4 a4JvPum db '4٦vЏM',0 ; DATA XREF: sub_4017B2+5o align 4 a4JvN db '4٦v֍^',0 ; DATA XREF: sub_4017D5+5o align 4 dword_407604 dd 0E9EBFEAh, 66B5hdword_40760C dd 159FBA18h, 0B25B82BCh, 0A266C3AAh, 0DB83AA8Bh, 377F8BAFh ; DATA XREF: sub_40181B+5o dd 0A815F653h, 5C0B3B37h, 4AB56DD5h, 46FF2624h, 43BF0E71h dd 99496640h, 54275907h, 3F8C43h dword_407640 dd 5Fh dword_407644 dd 78h dword_407648 dd 2020h aTimesNewRoma_1 db 'Times New Roman',0 ; DATA XREF: sub_401A5E+41o aMsSansSerif_8 db 'MS Sans Serif',0 ; DATA XREF: .text:00401AECo align 4 aTimesNewRoma_2 db 'Times New Roman',0 ; DATA XREF: .text:00401B16o aEdit_2 db 'Edit',0 ; DATA XREF: sub_401B30+ECo align 4 aQuit_2 db 'Quit',0 ; DATA XREF: .text:00401CAEo align 4 aButton_3 db 'Button',0 ; DATA XREF: .text:00401CB3o align 4 aMsSansSerif_9 db 'MS Sans Serif',0 ; DATA XREF: .text:00401D22o align 4 aEdit_3 db 'Edit',0 ; DATA XREF: sub_401D4B+26o align 4 aMsSansSerif_10 db 'MS Sans Serif',0 ; DATA XREF: sub_401D4B+3Bo align 4 aTimesNewRoma_3 db 'Times New Roman',0 ; DATA XREF: sub_401D4B+51o aMsSansSerif_11 db 'MS Sans Serif',0 ; DATA XREF: sub_401DD6+3o align 4 aQuit_3 db 'Quit',0 ; DATA XREF: sub_401DD6+37o align 4 aButton_4 db 'Button',0 ; DATA XREF: sub_401DD6+3Co align 4 aEdit_4 db 'Edit',0 ; DATA XREF: .text:00401EAEo align 4 aTimesNewRoma_4 db 'Times New Roman',0 ; DATA XREF: .text:00401EC3o aMsSansSerif_56 db 'MS Sans Serif',0 align 4 aMsSansSerif_57 db 'MS Sans Serif',0 align 4 aMsSansSerif_58 db 'MS Sans Serif',0 align 4 aMsSansSerif_12 db 'MS Sans Serif',0 ; DATA XREF: sub_401FCA+30o align 4 aTimesNewRoma_5 db 'Times New Roman',0 ; DATA XREF: sub_401FCA+4Co aQuit_21 db 'Quit',0 ; DATA XREF: sub_401FCA+120o align 4 aButton_22 db 'Button',0 ; DATA XREF: sub_401FCA+125o align 4 aStatic_4 db 'Static',0 ; DATA XREF: sub_40212E+4Ao align 4 aTimesNewRoma_6 db 'Times New Roman',0 ; DATA XREF: sub_40212E+5Co aEdit_5 db 'Edit',0 ; DATA XREF: sub_40212E+9Fo align 4 aMsSansSerif_13 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+C6o align 4 aQuit_4 db 'Quit',0 ; DATA XREF: sub_40212E+FAo align 4 aButton_5 db 'Button',0 ; DATA XREF: sub_40212E+FFo align 4 aMsSansSerif_14 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+130o align 4 aQuit_5 db 'Quit',0 ; DATA XREF: sub_40212E+164o align 4 aButton_6 db 'Button',0 ; DATA XREF: sub_40212E+169o align 4 aMsSansSerif_15 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+187o align 4 aMsSansSerif_16 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+1B8o align 4 aMsSansSerif_17 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+2A1o align 4 aMsSansSerif_18 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+2D6o align 4 aMsSansSerif_19 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+30Bo align 4 aMsSansSerif_20 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E:loc_4024F9o align 4 aQuit_6 db 'Quit',0 ; DATA XREF: sub_40212E+46Ao align 4 aButton_7 db 'Button',0 ; DATA XREF: sub_40212E+46Fo align 4 aMsSansSerif_21 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+4F3o align 4 aMsSansSerif_22 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+545o align 4 aQuit_7 db 'Quit',0 ; DATA XREF: sub_40212E+5A4o align 4 aButton_8 db 'Button',0 ; DATA XREF: sub_40212E+5A9o align 4 asc_407864: ; DATA XREF: sub_40212E+5DBo unicode 0, < >,0 aMsSansSerif_23 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+615o align 4 aMsSansSerif_24 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E:loc_40275Eo align 4 aQuit_8 db 'Quit',0 ; DATA XREF: sub_40212E+678o align 10h aButton_9 db 'Button',0 ; DATA XREF: sub_40212E+67Do align 4 aQuit_9 db 'Quit',0 ; DATA XREF: sub_40212E+6DBo align 10h aButton_10 db 'Button',0 ; DATA XREF: sub_40212E+6E0o align 4 asc_4078A8: ; DATA XREF: sub_40212E+73Bo unicode 0, < >,0 aMsSansSerif_25 db 'MS Sans Serif',0 ; DATA XREF: sub_40212E+75Bo align 4 aTimesNewRoma_7 db 'Times New Roman',0 ; DATA XREF: sub_40212E:loc_4028F6o aTimesNewRoma_8 db 'Times New Roman',0 ; DATA XREF: sub_40212E+813o aEdit_6 db 'Edit',0 ; DATA XREF: sub_40295D+9Bo align 4 aQuit_10 db 'Quit',0 ; DATA XREF: sub_40295D+DCo align 4 aButton_11 db 'Button',0 ; DATA XREF: sub_40295D+E1o align 4 aTimesNewRoma_9 db 'Times New Roman',0 ; DATA XREF: sub_40295D+13Bo aEdit_7 db 'Edit',0 ; DATA XREF: sub_402AB8+51o align 4 aMsSansSerif_26 db 'MS Sans Serif',0 ; DATA XREF: sub_402AB8:loc_402B2Ao align 4 aMsSansSerif_27 db 'MS Sans Serif',0 ; DATA XREF: sub_402AB8+ABo align 4 aMsSansSerif_28 db 'MS Sans Serif',0 ; DATA XREF: sub_402AB8+D7o align 4 asc_40793C: ; DATA XREF: sub_402AB8:loc_402BD6o unicode 0, < >,0 aMsSansSerif_29 db 'MS Sans Serif',0 ; DATA XREF: sub_402AB8:loc_402BF5o align 10h aStatic_5 db 'Static',0 ; DATA XREF: sub_402AB8+19Do align 4 aQuit_11 db 'Quit',0 ; DATA XREF: sub_402AB8+1D4o align 10h aButton_12 db 'Button',0 ; DATA XREF: sub_402AB8+1D9o align 4 aMsSansSerif_30 db 'MS Sans Serif',0 ; DATA XREF: sub_402AB8+205o align 4 aMsSansSerif_31 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+8Do align 4 aMsSansSerif_32 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+B5o align 4 aMsSansSerif_33 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+133o align 4 aEdit_8 db 'Edit',0 ; DATA XREF: sub_402CFF+1ADo align 10h aMsSansSerif_34 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF:loc_402EF0o align 10h aMsSansSerif_35 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+25Co align 10h aQuit_12 db 'Quit',0 ; DATA XREF: sub_402CFF+2B5o align 4 aButton_13 db 'Button',0 ; DATA XREF: sub_402CFF+2BAo align 10h aMsSansSerif_36 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+317o align 10h aMsSansSerif_37 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+343o align 10h aMsSansSerif_38 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+41Eo align 10h aStatic_6 db 'Static',0 ; DATA XREF: sub_402CFF+4B2o align 4 aQuit_13 db 'Quit',0 ; DATA XREF: sub_402CFF+593o align 10h aButton_14 db 'Button',0 ; DATA XREF: sub_402CFF+598o align 4 asc_407A28: ; DATA XREF: sub_402CFF+5FDo unicode 0, < >,0 aMsSansSerif_39 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+642o align 4 aStatic_7 db 'Static',0 ; DATA XREF: sub_402CFF+6E8o align 4 aTimesNewRom_10 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+70Eo aTimesNewRom_11 db 'Times New Roman',0 ; DATA XREF: sub_402CFF:loc_403438o aTimesNewRom_12 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+76Bo aTimesNewRom_13 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+78Eo aStatic_8 db 'Static',0 ; DATA XREF: sub_402CFF+7DFo align 4 aMsSansSerif_40 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+7F1o align 4 aEdit_9 db 'Edit',0 ; DATA XREF: sub_402CFF+862o align 4 aMsSansSerif_41 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+8B2o align 4 aMsSansSerif_42 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+90Fo align 4 aTimesNewRom_14 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+94Ao aQuit_14 db 'Quit',0 ; DATA XREF: sub_402CFF+9A1o align 4 aButton_15 db 'Button',0 ; DATA XREF: sub_402CFF+9A6o align 4 aTimesNewRom_15 db 'Times New Roman',0 ; DATA XREF: sub_402CFF:loc_4036F7o aMsSansSerif_43 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF:loc_40373Ao align 4 aMsSansSerif_44 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+ABCo align 4 aStatic_9 db 'Static',0 ; DATA XREF: sub_402CFF+B65o align 4 aEdit_10 db 'Edit',0 ; DATA XREF: sub_402CFF+BBFo align 4 aQuit_15 db 'Quit',0 ; DATA XREF: sub_402CFF+BFFo align 4 aButton_16 db 'Button',0 ; DATA XREF: sub_402CFF+C04o align 4 aQuit_16 db 'Quit',0 ; DATA XREF: sub_402CFF+C5Eo align 4 aButton_17 db 'Button',0 ; DATA XREF: sub_402CFF+C63o align 4 aQuit_17 db 'Quit',0 ; DATA XREF: sub_402CFF+CA2o align 4 aButton_18 db 'Button',0 ; DATA XREF: sub_402CFF+CA7o align 4 aTimesNewRom_16 db 'Times New Roman',0 ; DATA XREF: sub_402CFF:loc_403A0Bo aMsSansSerif_45 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+DF1o align 4 aMsSansSerif_46 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+E11o align 4 aQuit_18 db 'Quit',0 ; DATA XREF: sub_402CFF+F01o align 4 aButton_19 db 'Button',0 ; DATA XREF: sub_402CFF+F06o align 4 aTimesNewRom_17 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+F46o aEdit_11 db 'Edit',0 ; DATA XREF: sub_402CFF+1028o align 4 aMsSansSerif_47 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1065o align 4 aStatic_10 db 'Static',0 ; DATA XREF: sub_402CFF+10EBo align 4 aMsSansSerif_48 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1110o align 4 aMsSansSerif_49 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+117Co align 4 aStatic_11 db 'Static',0 ; DATA XREF: sub_402CFF+11D9o align 4 aMsSansSerif_50 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1245o align 4 aTimesNewRom_18 db 'Times New Roman',0 ; DATA XREF: sub_402CFF:loc_403FA8o aMsSansSerif_51 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF:loc_403FE5o align 4 aSS db '"%s" %s',0 ; DATA XREF: sub_402CFF+1350o aS db '"%s"',0 ; DATA XREF: sub_402CFF+1382o align 4 aMsSansSerif_52 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1417o align 4 aStatic_12 db 'Static',0 ; DATA XREF: sub_402CFF+1497o align 4 asc_407C44: ; DATA XREF: sub_402CFF+14D0o unicode 0, < >,0 aMsSansSerif_53 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+14FEo align 4 aSS_0 db '%s\%s',0 ; DATA XREF: sub_402CFF+155Fo align 10h aMsSansSerif_54 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1574o align 10h aStatic_13 db 'Static',0 ; DATA XREF: sub_402CFF+15E6o align 4 aEdit_12 db 'Edit',0 ; DATA XREF: sub_402CFF+1695o align 10h asc_407C80: ; DATA XREF: sub_402CFF+16CFo unicode 0, < >,0 aQuit_19 db 'Quit',0 ; DATA XREF: sub_402CFF+171Do align 4 aButton_20 db 'Button',0 ; DATA XREF: sub_402CFF+1722o align 4 aQuit_20 db 'Quit',0 ; DATA XREF: sub_402CFF+17BCo align 4 aButton_21 db 'Button',0 ; DATA XREF: sub_402CFF+17C1o align 4 aEdit_13 db 'Edit',0 ; DATA XREF: sub_402CFF+1882o align 4 aMsSansSerif_55 db 'MS Sans Serif',0 ; DATA XREF: sub_402CFF+1985o align 4 aTimesNewRom_19 db 'Times New Roman',0 ; DATA XREF: sub_402CFF+19ECo aStatic_14 db 'Static',0 ; DATA XREF: sub_4047AA+2Ao align 4 aEdit_14 db 'Edit',0 ; DATA XREF: sub_4047AA+5Fo align 4 aEdit_15 db 'Edit',0 ; DATA XREF: sub_4047AA+B4o align 4 aMsSansSerif db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+38o align 4 aMsSansSerif_0 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+55o align 4 aMsSansSerif_1 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+B7o align 4 aStatic db 'Static',0 ; DATA XREF: WinMain(x,x,x,x)+F7o align 4 aWinclass db 'WinClass',0 ; DATA XREF: WinMain(x,x,x,x)+109o align 4 asc_407D28: ; DATA XREF: WinMain(x,x,x,x)+110o unicode 0, < >,0 asc_407D2C: ; DATA XREF: WinMain(x,x,x,x)+170o unicode 0, < >,0 aMsSansSerif_2 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+1BCo align 10h aEdit db 'Edit',0 ; DATA XREF: WinMain(x,x,x,x)+219o align 4 aMsSansSerif_3 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+262o align 4 a1: ; DATA XREF: WinMain(x,x,x,x)+2BDo unicode 0, <1>,0 aStatic_0 db 'Static',0 ; DATA XREF: WinMain(x,x,x,x)+2C2o align 4 aQuit db 'Quit',0 ; DATA XREF: WinMain(x,x,x,x)+2F2o align 4 aButton db 'Button',0 ; DATA XREF: WinMain(x,x,x,x)+2F7o align 4 asc_407D74 db '>>',0 ; DATA XREF: WinMain(x,x,x,x)+32Bo align 4 aButton_0 db 'Button',0 ; DATA XREF: WinMain(x,x,x,x)+330o align 10h aStatic_1 db 'Static',0 ; DATA XREF: WinMain(x,x,x,x)+37Co align 4 aTimesNewRoman db 'Times New Roman',0 ; DATA XREF: WinMain(x,x,x,x)+3A2o aQuit_0 db 'Quit',0 ; DATA XREF: WinMain(x,x,x,x)+421o align 10h aButton_1 db 'Button',0 ; DATA XREF: WinMain(x,x,x,x)+426o align 4 aMsSansSerif_4 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+458o align 4 aStatic_2 db 'Static',0 ; DATA XREF: WinMain(x,x,x,x)+4A9o align 10h aWndclass db 'WndClass',0 ; DATA XREF: WinMain(x,x,x,x)+4D6o align 4 aWndclass_0 db 'WndClass',0 ; DATA XREF: WinMain(x,x,x,x)+530o align 4 aStatic_3 db 'Static',0 ; DATA XREF: WinMain(x,x,x,x)+57Do align 10h aQuit_1 db 'Quit',0 ; DATA XREF: WinMain(x,x,x,x)+5AEo align 4 aButton_2 db 'Button',0 ; DATA XREF: WinMain(x,x,x,x)+5B3o align 10h aEdit_0 db 'Edit',0 ; DATA XREF: WinMain(x,x,x,x)+5F3o align 4 aEdit_1 db 'Edit',0 ; DATA XREF: WinMain(x,x,x,x)+63Do align 10h aMsSansSerif_5 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+652o align 10h aTimesNewRoma_0 db 'Times New Roman',0 ; DATA XREF: WinMain(x,x,x,x):loc_404F27o aMsSansSerif_6 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x)+696o align 10h aMsSansSerif_7 db 'MS Sans Serif',0 ; DATA XREF: WinMain(x,x,x,x):loc_404F87o align 10h aWinclass_0 db 'WinClass',0 ; DATA XREF: WinMain(x,x,x,x)+6EFo align 10h dword_407E50 dd 1 dword_407E54 dd 0 ; sub_402CFF+A69r dword_407E58 dd 0 ; sub_402CFF+359r dword_407E5C dd 0 ; sub_402CFF+4C4r dword_407E60 dd 0 ; .text:00401C9Ar ... dword_407E64 dd 0 ; sub_402CFF+3DDr dword_407E68 dd 0 ; WinMain(x,x,x,x)+22Er ... dword_407E6C dd 0 ; sub_402CFF:loc_402E66r dword_407E70 dd 0 ; .text:00401AF3r ... dword_407E74 dd 0 ; sub_402CFF+5E4r dword_407E78 dd 0 ; sub_402CFF+1829r dword_407E7C dd 0 ; sub_401B30+81r ... dword_407E80 dd 0 ; sub_402CFF+434r dword_407E84 dd 0 ; sub_402CFF+1342r ... dword_407E88 dd 0 ; sub_402CFF+5DFw dd 19h dup(0) dword_407EF0 dd 0 ; sub_401869:loc_4018B5r ... dword_407EF4 dd 0 dword_407EF8 dd 0 ; sub_401869:loc_401878r ... dword_407EFC dd 0 ; sub_402CFF+10BEr ... dword_407F00 dd 0 ; sub_402CFF+284r dword_407F04 dd 0 ; sub_402CFF+226r dword_407F08 dd 0 ; sub_402CFF+398w dword_407F0C dd 0 ; sub_402CFF:loc_4037F5r dword_407F10 dd 0 ; sub_402CFF+549r dword_407F14 dd 0 ; sub_402CFF+5AAr dword_407F18 dd 0 ; sub_402CFF+B77r dword_407F1C dd 0 ; sub_402CFF+301r dword_407F20 dd 0 ; sub_402CFF:loc_40381Ar dword_407F24 dd 0 ; sub_402CFF+32Dr dword_407F28 dd 0 ; sub_402CFF+1053r ... dword_407F2C dd 0 dword_407F30 dd 0 ; sub_402CFF+24Cr dword_407F34 dd 0 ; sub_402CFF+6B3r dword_407F38 dd 0 ; sub_402CFF+383w byte_407F3C db 0 ; DATA XREF: sub_40192E+C2o ; sub_40192E+EFo ... align 10h dd 4Ah dup(0) dword_408068 dd 0 ; sub_402CFF+762r dword_40806C dd 0 ; .text:00401B07w ... dword_408070 dd 0 ; sub_40212E+744r ... dword_408074 dd 0 ; sub_402CFF+D9Fr dword_408078 dd 0 ; sub_402CFF+4D9r dword_40807C dd 0 ; sub_402CFF+2CCr dword_408080 dd 0 ; sub_402CFF+1810r dword_408084 dd 0 ; sub_402CFF+16C3r dword_408088 dd 0 ; sub_402CFF+544w ... dword_40808C dd 0 ; sub_402CFF+657r dword_408090 dd 0 ; sub_402CFF+110r dword_408094 dd 0 ; sub_402CFF+51Ar byte_408098 db 0 ; DATA XREF: sub_401869+88w ; sub_401869+B4w ... byte_408099 db 0 ; DATA XREF: .text:00401C83r ; .text:00401CCDw align 10h byte_4080A0 db 0 ; DATA XREF: .text:00401D16r ; .text:00401D40w align 4 dd 13h dup(0) dword_4080F0 dd 0 ; sub_40295D+136w ... dword_4080F4 dd 0 dword_4080F8 dd 0 ; sub_402CFF+9CCr dword_4080FC dd 0 ; sub_402CFF+505r dword_408100 dd 0 ; sub_402CFF+D28r dword_408104 dd 0 ; sub_402CFF+272r dd 0 dword_40810C dd 0 ; sub_402CFF+445w dword_408110 dd 0 ; sub_402CFF+1296r dword_408114 dd 0 ; sub_402CFF+3C7r dword_408118 dd 0 ; sub_402CFF+D81r dword_40811C dd 0 ; sub_402CFF+184Br dword_408120 dd 0 ; sub_402CFF+45Bw dword_408124 dd 0 ; sub_402CFF+A0Er dword_408128 dd 0 ; sub_402CFF+55Er dword_40812C dd 0 ; sub_402CFF+207r dword_408130 dd 0 ; sub_402CFF+9C6r ... dword_408134 dd 0 dword_408138 dd 0 ; sub_402CFF+475r dword_40813C dd 0 ; sub_402CFF+408r dd 0 dword_408144 dd 0 ; sub_402CFF+3F3r dword_408148 dd 0 ; sub_402CFF+D64r dword_40814C dd 0 ; .text:00401B1Dr ... dd 0 dword_408154 dd 0 ; sub_402CFF+1A0Fr dword_408158 dd 0 ; sub_402CFF+5BDw dword_40815C dd 0 ; sub_402CFF+36Fr dword_408160 dd 0 ; sub_402CFF+AD2r dword_408164 dd 0 ; sub_402CFF+470w dword_408168 dd 0 ; sub_402CFF+3AEw dword_40816C dd 0 ; sub_402CFF+D46r dword_408170 dd 0 ; sub_402CFF+3D8w dword_408174 dd 0 ; sub_402CFF+44Ar dword_408178 dd 0 ; sub_402CFF+20Dr ... dword_40817C dd 0 ; sub_402CFF+36Aw dword_408180 dd 0 ; sub_402CFF+17E0r dword_408184 dd 0 ; sub_402CFF+2F6r ... dword_408188 dd 0 ; .text:00401D29r ... dword_40818C dd 0 ; sub_402CFF+960r dword_408190 dd 0 ; sub_402CFF+A6Fr dword_408194 dd 0 dword_408198 dd 0 ; sub_402CFF+128Fr dword_40819C dd 0 ; sub_402CFF+670r dword_4081A0 dd 0 dword_4081A4 dd 5 dup(0) ; sub_401B30+90o ... dword_4081B8 dd 0 ; sub_402CFF+2DCr dword_4081BC dd 0 ; sub_402CFF+4EFr dword_4081C0 dd 0 ; sub_402CFF+388r dword_4081C4 dd 0 ; sub_402CFF+39Dr dword_4081C8 dd 0 ; sub_402CFF+12A1r dword_4081CC dd 0 ; sub_402CFF+10A4r ... dword_4081D0 dd 0 ; sub_402CFF+1A31r dword_4081D4 dd 0 ; sub_402CFF+105Fr ... dd 33h dup(0) dword_4082A4 dd 0 ; sub_401FCA+37r ... dword_4082A8 dd 0 ; sub_402CFF+629r dword_4082AC dd 0 dword_4082B0 dd 0 ; sub_402CFF+5CFr dword_4082B4 dd 0 ; sub_402CFF+3EEw dword_4082B8 dd 0 ; sub_402CFF+ADBr ... dword_4082BC dd 0 ; sub_40212E+735r ... dword_4082C0 dd 0 ; .text:00401C91r ... dword_4082C4 dd 0 dword_4082C8 dd 0 ; sub_402CFF+460r dword_4082CC dd 0 ; sub_402CFF+530r dword_4082D0 dd 0 ; sub_402CFF+14BBr dword_4082D4 dd 0 ; sub_402CFF+785r dword_4082D8 dd 0 ; sub_402CFF+613r dword_4082DC dd 0 ; sub_402CFF+2ECr dword_4082E0 dd 0 ; sub_402CFF+1A37r dword_4082E4 dd 0 dword_4082E8 dd 0 dword_4082EC dd 0 dword_4082F0 dd 0 dword_4082F4 dd 0 dword_4082F8 dd 0 dword_4082FC dd 0 dword_408300 dd 0 dword_408304 dd 0 dword_408308 dd 0 dword_40830C dd 0 dword_408310 dd 0 dword_408314 dd 0 dword_408318 dd 0 dword_40831C dd 0 dword_408320 dd 0 dword_408324 dd 0 dword_408328 dd 0 dword_40832C dd 0 dword_408330 dd 0 dword_408334 dd 0 dword_408338 dd 0 dword_40833C dd 0 dword_408340 dd 0 dword_408344 dd 0 dword_408348 dd 0 dword_40834C dd 0 dword_408350 dd 0 dword_408354 dd 0 dword_408358 dd 0 dword_40835C dd 0 dword_408360 dd 0 dword_408364 dd 0 dword_408368 dd 0 dword_40836C dd 0 dword_408370 dd 0 dword_408374 dd 0 dword_408378 dd 0 dword_40837C dd 0 dword_408380 dd 0 dword_408384 dd 0 align 80h _data ends ; Section 5. (virtual address 0002A000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00029C00 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 42A000h dd 80h dup(0) align 1000h _idata2 ends end start