Function at 0x40c920
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x429089
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x150
push ebx
push esi
push edi
mov esi, ecx
xor ebx, ebx
lea ecx, [esp + 0x10]
mov dword [esp + 0x164], ebx
call fcn.00401040
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 1
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0xc]
mov byte [esp + 0x164], 2
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 3
call sub.MFC42.DLL_CString::CString_4
push str.f0110510434e0015
lea ecx, [esp + 0x20]
mov byte [esp + 0x168], 4
call sub.MFC42.DLL_CString::CString_2
push str.112233445566778899aabbcc
lea ecx, [esp + 0x18]
mov byte [esp + 0x168], 5
call sub.MFC42.DLL_CString::CString_2
push str.300D0A48656164657246696C653D746F6E6778696E2E680D0A496D706C656D65
lea ecx, [esp + 0x28]
mov byte [esp + 0x168], 6
call sub.MFC42.DLL_CString::CString_2
push str.6D65
lea ecx, [esp + 0x24]
mov byte [esp + 0x168], 7
call sub.MFC42.DLL_CString::CString_2
lea eax, [esi + 0x170]
push 8
lea ecx, [esp + 0x20]
push eax
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x170], 8
call fcn.00401080
lea edx, [esi + 0x190]
push 0x80
lea eax, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x1c]
call fcn.00401080
lea ecx, [esi + 0x184]
push 0xc
lea edx, [esp + 0x18]
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.00401080
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CString::CString_4
lea eax, [esi + 0x178]
push 0xc
lea ecx, [esp + 0x30]
push eax
push ecx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x170], 9
call fcn.00401080
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x14]
push edx
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CString::MakeLower
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::MakeLower
lea edi, [esi + 0x2e0]
lea eax, [esp + 0x5c]
push 1
push eax
mov ecx, edi
call fcn.00420110
cmp eax, ebx
jne 0x40cb67
push 1
push 9
mov ecx, esi
call fcn.00406e80
lea ecx, [esp + 0x2c]
mov byte [esp + 0x164], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x164], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x164], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x164], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov byte [esp + 0x164], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x164], bl
call fcn.00401070
lea ecx, [esp + 0x16c]
mov dword [esp + 0x164], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
mov ecx, dword [esp + 0x15c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x15c
ret 4
lea ecx, [esp + 0x5c]
push 0x20
lea edx, [esp + 0x28]
push ecx
push edx
lea ecx, [esp + 0x1c]
call fcn.00401080
mov eax, dword [esi + 0x168]
dec eax
cmp eax, 6
ja case.0x40cb8c.6
jmp dword [eax*4 + 0x40ceb4]
push str.shengji_shengji.jsp
jmp 0x40cbbb
push str.shengji_shouquan.jsp
jmp 0x40cbbb
push str.shengji_jihuo.jsp
jmp 0x40cbbb
push str.shengji_gujian.jsp
jmp 0x40cbbb
push str.shengji_zhuce.jsp
jmp 0x40cbbb
push str.shengji_keytest.jsp
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator_1
lea eax, [esp + 0xc]
push str._id
lea ecx, [esp + 0x50]
push eax
push ecx
call sub.MFC42.DLL_operator_1
lea edx, [esp + 0x1c]
mov byte [esp + 0x164], 0xa
push edx
push eax
lea eax, [esp + 0x4c]
push eax
call sub.MFC42.DLL_operator
push str.sn
lea ecx, [esp + 0x40]
push eax
push ecx
mov byte [esp + 0x170], 0xb
call sub.MFC42.DLL_operator_1
lea edx, [esp + 0x14]
mov byte [esp + 0x164], 0xc
push edx
push eax
lea eax, [esp + 0x40]
push eax
call sub.MFC42.DLL_operator
push str.ran
lea ecx, [esp + 0x4c]
push eax
push ecx
mov byte [esp + 0x170], 0xd
call sub.MFC42.DLL_operator_1
lea edx, [esp + 0x24]
mov byte [esp + 0x164], 0xe
push edx
push eax
lea eax, [esp + 0x58]
push eax
call sub.MFC42.DLL_operator
push str.flag
lea ecx, [esp + 0x44]
push eax
push ecx
mov byte [esp + 0x170], 0xf
call sub.MFC42.DLL_operator_1
lea edx, [esp + 0x16c]
mov byte [esp + 0x164], 0x10
push edx
push eax
lea eax, [esp + 0x60]
push eax
call sub.MFC42.DLL_operator
push str.badblock
lea ecx, [esp + 0x38]
push eax
push ecx
mov byte [esp + 0x170], 0x11
call sub.MFC42.DLL_operator_1
lea edx, [esp + 0x20]
mov byte [esp + 0x164], 0x12
push edx
push eax
lea eax, [esp + 0x5c]
push eax
call sub.MFC42.DLL_operator
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x168], 0x13
call fcn.00426e04
lea ecx, [esp + 0x54]
mov byte [esp + 0x164], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x34]
mov byte [esp + 0x164], 0x11
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x58]
mov byte [esp + 0x164], 0x10
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x40]
mov byte [esp + 0x164], 0xf
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x50]
mov byte [esp + 0x164], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x48]
mov byte [esp + 0x164], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x38]
mov byte [esp + 0x164], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x3c]
mov byte [esp + 0x164], 0xb
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x44]
mov byte [esp + 0x164], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x4c]
mov byte [esp + 0x164], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
lea edx, [esp + 0x18]
push ecx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push edx
call sub.MFC42.DLL_CString::CString_3
mov ecx, esi
call fcn.00407000
and eax, 0xff
mov dword [esp + 0x30], eax
jne 0x40cdb5
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call sub.MFC42.DLL_CString::CString_3
mov ecx, esi
call fcn.00417200
jmp case.0x40cb8c.6
lea ecx, [esp + 0x5c]
push 0x80
push ecx
push ecx
mov edx, esp
mov dword [esp + 0x3c], esp
push 0x100
push edx
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CString::Left
lea ecx, [esp + 0x1c]
call fcn.00401120
lea eax, [esp + 0x5c]
push 1
push eax
mov ecx, edi
call fcn.004201a0
cmp eax, ebx
jne 0x40cdf9
push 1
push 0xa
jmp 0x40ca95
lea ecx, [esp + 0x2c]
mov byte [esp + 0x164], 8
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x164], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0x164], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x164], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x164], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x164], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov byte [esp + 0x164], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov byte [esp + 0x164], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x164], bl
call fcn.00401070
lea ecx, [esp + 0x16c]
mov dword [esp + 0x164], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 1
jmp 0x40cb4d