Function at 0x4010c0
Capabilities:
Contain obfuscated stackstrings
Rebuild import table

Disassembly:
sub esp, 0x85c
push ebx
push esi
push edi
xor ebx, ebx
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x469]
mov byte [esp + 0x468], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov ecx, 0x3f
mov dword [esp + 0x31], eax
lea edi, [esp + 0x369]
mov byte [esp + 0x35], al
mov al, 0x8a
mov byte [esp + 0x46], al
mov byte [esp + 0x4a], al
mov al, 0x9b
mov byte [esp + 0x368], bl
mov byte [esp + 0x57], al
mov byte [esp + 0x5b], al
xor eax, eax
mov byte [esp + 0x268], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x269]
mov byte [esp + 0x30], bl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, 0x280000
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], 0x13
mov byte [esp + 0xe], 0xd4
mov byte [esp + 0xf], 0x16
mov byte [esp + 0x10], 0xee
mov byte [esp + 0x11], 0x7c
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], 0x97
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], 0xc
mov byte [esp + 0x16], 8
mov byte [esp + 0x17], 0x86
mov byte [esp + 0x18], 0x39
mov byte [esp + 0x19], 0x86
mov byte [esp + 0x1a], 0x14
mov byte [esp + 0x1b], 0x10
mov byte [esp + 0x3c], 1
mov byte [esp + 0x3d], 0xd5
mov byte [esp + 0x3e], 6
mov byte [esp + 0x3f], bl
mov byte [esp + 0x40], 0xe9
mov byte [esp + 0x41], 0xbb
mov byte [esp + 0x42], 0xc9
mov byte [esp + 0x43], 0x6b
mov byte [esp + 0x44], 0xc8
mov byte [esp + 0x45], 0xdc
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], 0x68
mov byte [esp + 0x49], 0xdd
mov byte [esp + 0x4b], bl
mov byte [esp + 0x4c], 0x20
mov byte [esp + 0x4d], bl
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], bl
mov byte [esp + 0x50], 0x80
mov byte [esp + 0x51], bl
mov byte [esp + 0x52], bl
mov byte [esp + 0x53], bl
mov byte [esp + 0x54], 0x6f
mov byte [esp + 0x55], 0xb8
mov byte [esp + 0x56], 0x3c
mov byte [esp + 0x58], 0xf2
mov byte [esp + 0x59], 0xb0
mov byte [esp + 0x5a], 0xec
mov dword [esp + 0x98], eax
mov esi, 0x80
mov ecx, 0x77f82528
mov dword [esp + 0x9c], esi
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xe4], esi
mov dword [esp + 0xec], ecx
mov ecx, 0x8af980
mov esi, 0x6d4ec
mov dword [esp + 0x104], ecx
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x144], esi
mov dword [esp + 0x164], esi
or edi, 0xffffffff
mov edx, 0x6d5f8
mov ecx, 0x780035b0
mov esi, 0x8af928
mov dword [esp + 0xa0], 0x36366430
mov dword [esp + 0xa4], 0x37316437
mov dword [esp + 0xa8], 0x30386530
mov dword [esp + 0xac], 0x63323035
mov dword [esp + 0xb0], 0x66653033
mov dword [esp + 0xb4], 0x36643432
mov dword [esp + 0xb8], 0x35333466
mov dword [esp + 0xbc], 0x34666466
mov dword [esp + 0xc0], 0x6d21c
mov dword [esp + 0xc4], 0x77f81f00
mov dword [esp + 0xcc], edi
mov dword [esp + 0xd0], 0x6d22c
mov dword [esp + 0xd4], 0x78001d01
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], 0x6d174
mov dword [esp + 0xe0], edx
mov dword [esp + 0xe8], 0xf4300e0d
mov dword [esp + 0xf0], 0x35ef8066
mov dword [esp + 0xf4], 0x6d250
mov dword [esp + 0xf8], 0xfd24507d
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], 0xf4d62c17
mov dword [esp + 0x108], 0x50a4949a
mov dword [esp + 0x110], 0x685db232
mov dword [esp + 0x114], edi
mov dword [esp + 0x118], 0x4bb692c2
mov dword [esp + 0x11c], 0x7800b2de
mov dword [esp + 0x120], 0xa65284a8
mov dword [esp + 0x124], 0x780a1c2a
mov dword [esp + 0x128], 0xbded49dd
mov dword [esp + 0x12c], edx
mov dword [esp + 0x130], 0x66e3381
mov dword [esp + 0x134], 0x780332a0
mov dword [esp + 0x138], 0x89c274e6
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], 0x8b2d7ffb
mov dword [esp + 0x148], 0xaf12ffb6
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], 0x7d7b1526
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], 0xe46dafdb
mov dword [esp + 0x15c], 0x6d48b
mov dword [esp + 0x160], 0x58d3fe81
mov dword [esp + 0x168], 0x3acbe41
mov dword [esp + 0x16c], 0x6d550
mov dword [esp + 0x170], 0x5c215a4f
mov dword [esp + 0x174], 0xe
mov dword [esp + 0x178], 0x97731eb1
mov dword [esp + 0x17c], 0x6d5c4
mov dword [esp + 0x180], 0x8dd506f8
mov dword [esp + 0x184], 0x780a1b57
mov dword [esp + 0x188], 0xa09a51b
mov dword [esp + 0x18c], 0x10013cec
mov dword [esp + 0x190], 0xe0bc9dc7
mov dword [esp + 0x194], 0x8aeff8
mov dword [esp + 0x198], 0x1681f2ec
mov dword [esp + 0x19c], 0xfeeefeee
mov dword [esp + 0x1a0], 0xdd508583
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x1a8], 0x7c767fda
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], 0x41a11d80
mov dword [esp + 0x1b4], ebx
mov dword [esp + 0x1b8], 0x485edf2d
mov dword [esp + 0x1bc], eax
mov eax, 0x6d584
push str.EWALicMgr.dll
mov dword [esp + 0x1c4], 0xec3161e4
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], 0x6c106619
mov dword [esp + 0x1d0], 0x8af930
mov dword [esp + 0x1d4], 0x2f6ecfd2
mov dword [esp + 0x1d8], ecx
mov dword [esp + 0x1dc], 0x2a623ce3
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x1e4], 0x48a495f4
mov dword [esp + 0x1e8], ebx
mov dword [esp + 0x1ec], 0x96faea8c
mov dword [esp + 0x1f0], ebx
mov dword [esp + 0x1f4], 0xb996f837
mov dword [esp + 0x1f8], 0x6d521
mov dword [esp + 0x1fc], 0xc5ef8db1
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], 0xdd9531a4
mov dword [esp + 0x208], 0x28
mov dword [esp + 0x20c], 0x47d12bc1
mov dword [esp + 0x210], 0x283c
mov dword [esp + 0x214], 0x46ff6991
mov dword [esp + 0x218], ebx
mov dword [esp + 0x21c], 0xd712fd70
mov dword [esp + 0x220], 0x6d418
mov dword [esp + 0x224], 0x4d900534
mov dword [esp + 0x228], ebx
mov dword [esp + 0x22c], 0x105786ad
mov dword [esp + 0x230], 0x2021e
mov dword [esp + 0x234], 0x4f09f69f
mov dword [esp + 0x238], 7
mov dword [esp + 0x23c], 0xab7c6e93
mov dword [esp + 0x240], 0x6d8bc
mov dword [esp + 0x244], 0x4c019194
mov dword [esp + 0x248], 0x94007c
mov dword [esp + 0x24c], 2
mov dword [esp + 0x250], 0x274
mov dword [esp + 0x254], 0x490
mov dword [esp + 0x258], 0x1374e
mov dword [esp + 0x25c], ebx
mov dword [esp + 0x260], edx
mov dword [esp + 0x264], ecx
mov dword [esp + 0x268], 0x47
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
cmp eax, ebx
mov dword [esp + 0x94], eax
jne 0x4016d5
mov eax, edi
pop edi
pop esi
pop ebx
add esp, 0x85c
ret
push ebp
push str.CreateObj
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.Keygen_of_HP_EWA__EPCnet_and_WISnet___n
sub esi, 0x116c
mov dword [esp + 0x98], esi
push str.Now_input_the_ID:_n
lea ecx, [esp + 0x474]
push ecx
push 0x10
push 0x4042c0
push ecx
call sub.MSVCR71.dll_memcpy
add esp, 0xc
add esp, 0xc
xor edi, edi
lea ebp, [esp + 0x46c]
lea edx, [esp + edi + 0x34]
push edx
push str._02X
push ebp
call sub.MSVCR71.dll_sscanf
add esp, 0xc
inc edi
add ebp, 2
cmp edi, 6
jl 0x40171f
push str.Now_input_the_expiration_year:_n
lea eax, [esp + 0x470]
push eax
lea ecx, [esp + 0x88]
lea edx, [esp + 0x474]
mov eax, dword [0x4042d0]
mov dword [ecx], eax
push ecx
push 0x404234
push edx
push str.Now_input_the_expiration_day:_n
lea eax, [esp + 0x484]
push eax
lea ecx, [esp + 0xa4]
lea edx, [esp + 0x488]
mov eax, dword [0x4042d8]
mov dword [ecx], eax
push ecx
push 0x404234
push edx
push str.Now_input_the_expiration_month:_n
lea eax, [esp + 0x498]
push eax
lea ecx, [esp + 0x98]
lea edx, [esp + 0x49c]
mov eax, dword [0x4042d4]
mov dword [ecx], eax
push ecx
push 0x404234
push edx
push str.Now_input_Number_of_Users:_n
add esp, 0x40
lea eax, [esp + 0x46c]
push eax
lea ecx, [esp + 0x94]
lea edx, [esp + 0x470]
mov eax, dword [0x4042dc]
mov dword [ecx], eax
push ecx
push 0x404234
push edx
mov eax, dword [esp + 0x49]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x47]
and eax, 0xff
and ecx, 0xff
push eax
mov eax, dword [esp + 0x4a]
and edx, 0xff
push ecx
mov ecx, dword [esp + 0x4d]
push edx
mov edx, dword [esp + 0x50]
and eax, 0xff
and ecx, 0xff
push eax
and edx, 0xff
push ecx
push edx
push str._nID:0x_02X_02X_02X_02X_02X_02X_n
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0x94]
mov edx, dword [esp + 0xb4]
and eax, 0xffff
and ecx, 0xffff
push eax
and edx, 0xffff
push ecx
push edx
push str._nExpiration_Date:__d._d._d_n
mov eax, dword [esp + 0xcc]
and eax, 0xffff
push eax
push str._nNumber_of_Users:__d_n
mov byte [esp + 0x70], bl
mov byte [esp + 0x71], 0xc
mov byte [esp + 0x72], 8
mov byte [esp + 0x73], 0x86
mov eax, dword [esp + 0x70]
mov byte [esp + 0x68], bl
mov byte [esp + 0x69], 0x12
mov byte [esp + 0x6a], 0xd4
mov byte [esp + 0x6b], 0x16
mov ecx, dword [esp + 0x68]
mov byte [esp + 0x6c], 0x1e
mov byte [esp + 0x6d], 0x1c
mov byte [esp + 0x6e], bl
mov byte [esp + 0x6f], 0x97
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x5c], eax
mov ax, word [esp + 0x7c]
mov byte [esp + 0x74], 0x39
mov byte [esp + 0x75], 0x86
mov byte [esp + 0x76], 0x14
mov byte [esp + 0x77], 0x10
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x78]
mov word [esp + 0x58], ax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x60], ecx
mov ecx, eax
add esp, 0x44
and ecx, 0xffff
mov dword [esp + 0x10], edx
and ecx, 0x80000001
jns 0x401905
dec ecx
or ecx, 0xfffffffe
inc ecx
mov dl, byte [esp + 0x80]
shl cl, 7
add cl, dl
mov dl, byte [esp + 0x88]
shr eax, 1
shl dl, 3
add cl, 0x30
add al, dl
mov byte [esp + 0x1d], cl
mov byte [esp + 0x1c], al
mov al, byte [esp + 0x90]
lea ecx, [esp + 0x10]
mov byte [esp + 0x19], al
push ecx
lea edx, [esp + 0x14]
push 0x80
lea eax, [esp + 0xa4]
push edx
lea ecx, [esp + 0x4c]
push eax
push ecx
call esi
mov ebp, dword [esp + 0x29]
mov eax, dword [esp + 0x24]
and ebp, 0xff
mov ecx, dword [esp + 0x25]
mov dword [esp + 0x90], ebp
mov ebp, dword [esp + 0x2a]
and ebp, 0xff
mov edx, dword [esp + 0x26]
mov dword [esp + 0x8c], ebp
mov ebp, dword [esp + 0x2b]
and ebp, 0xff
mov esi, dword [esp + 0x27]
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x2c]
and ebp, 0xff
mov edi, dword [esp + 0x28]
mov dword [esp + 0xa0], ebp
mov ebp, dword [esp + 0x2d]
and ebp, 0xff
and eax, 0xff
mov dword [esp + 0x88], ebp
mov ebp, dword [esp + 0x2e]
and ebp, 0xff
and ecx, 0xff
mov dword [esp + 0x98], ebp
mov ebp, dword [esp + 0x2f]
and ebp, 0xff
and edx, 0xff
mov dword [esp + 0x78], ebp
mov ebp, dword [esp + 0x30]
and ebp, 0xff
and esi, 0xff
mov dword [esp + 0x74], ebp
mov ebp, dword [esp + 0x31]
and ebp, 0xff
and edi, 0xff
mov dword [esp + 0x84], ebp
mov ebp, eax
shr ebp, 4
and eax, 0x8000000f
push ebp
jns 0x401a29
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, ecx
shr eax, 4
and ecx, 0x8000000f
push eax
jns 0x401a3d
dec ecx
or ecx, 0xfffffff0
inc ecx
push ecx
mov ecx, edx
shr ecx, 4
and edx, 0x8000000f
push ecx
jns 0x401a51
dec edx
or edx, 0xfffffff0
inc edx
push edx
mov edx, esi
shr edx, 4
and esi, 0x8000000f
push edx
jns 0x401a65
dec esi
or esi, 0xfffffff0
inc esi
mov eax, edi
push esi
shr eax, 4
and edi, 0x8000000f
push eax
jns 0x401a79
dec edi
or edi, 0xfffffff0
inc edi
mov eax, dword [esp + 0xb4]
push edi
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x401a93
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xbc]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x401aad
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xb8]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x401ac7
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xe0]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x401ae1
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xd0]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x401afb
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xe8]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x401b15
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xd0]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x401b2f
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xd4]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x401b49
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xec]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x401b63
dec eax
or eax, 0xfffffff0
inc eax
push eax
lea edx, [esp + 0x3f0]
push str._01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x
push edx
call sub.MSVCR71.dll_sprintf
mov eax, dword [esp + 0xab]
add esp, 0x8c
and eax, 0xff
mov byte [esp + 0x24], bl
and eax, 0x8000000f
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], 0x2c
mov byte [esp + 0x2e], 0xa7
mov byte [esp + 0x2f], 0xfe
mov byte [esp + 0x30], 0xfd
mov byte [esp + 0x31], 0x71
mov word [esp + 0x32], bx
jns 0x401bd6
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [esp + 0x1f]
mov edx, dword [esp + 0x1e]
shl al, 4
shr cl, 4
and edx, 0xff
add al, cl
and edx, 0x8000000f
mov byte [esp + 0x32], al
jns 0x401bfd
dec edx
or edx, 0xfffffff0
inc edx
mov al, byte [esp + 0x1e]
mov ecx, dword [esp + 0x24]
shl dl, 4
shr al, 4
add dl, al
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x33], dl
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x94]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
push edx
lea eax, [esp + 0x14]
push 0x80
lea ecx, [esp + 0xa4]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
call esi
mov ecx, dword [esp + 0x33]
mov edx, dword [esp + 0x32]
lea eax, [esp + 0x380]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x35]
push ecx
mov ecx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x3b]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x3e]
push ecx
mov ecx, dword [esp + 0x41]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x44]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x47]
push ecx
mov ecx, dword [esp + 0x4a]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x4d]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x53]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x56]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x59]
push ecx
mov ecx, dword [esp + 0x5c]
and edx, 0xff
and eax, 0xff
push edx
and ecx, 0xff
push eax
push ecx
lea edx, [esp + 0x2c4]
push str._02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_s
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x60
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x36c]
rep stosd dword es:[edi], eax
xor edi, edi
mov al, byte [esp + edi + 0x26c]
push eax
call fcn.00401030
lea ecx, [esp + 0x370]
push eax
push ecx
lea edx, [esp + 0x378]
push str._s_s
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x14
inc edi
cmp edi, 0x3c
jl 0x401d2c
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x26c]
mov ebp, 0x30
rep stosd dword es:[edi], eax
lea edi, [esp + 0x36c]
push edi
call fcn.00401050
movsx eax, al
lea ecx, [esp + 0x270]
push eax
push ecx
lea edx, [esp + 0x278]
push str._s_01c
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x14
add edi, 5
dec ebp
jne 0x401d79
lea eax, [esp + 0x26c]
push eax
push str.EPCnet:__s_r_n
push 0x4042e0
call sub.MSVCR71.dll_sprintf
add esp, 4
mov byte [esp + 0x34], bl
mov byte [esp + 0x35], 0xc
mov byte [esp + 0x36], 8
mov byte [esp + 0x37], 0x86
mov eax, dword [esp + 0x34]
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], 0x12
mov byte [esp + 0x2e], 0xd4
mov byte [esp + 0x2f], 0x16
mov ecx, dword [esp + 0x2c]
mov byte [esp + 0x30], 0x1e
mov byte [esp + 0x31], 0x1c
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], 0x33
mov edx, dword [esp + 0x30]
mov dword [esp + 0x20], eax
mov ax, word [esp + 0x40]
mov byte [esp + 0x38], 0x39
mov byte [esp + 0x39], 0x86
mov byte [esp + 0x3a], 0x14
mov byte [esp + 0x3b], 0x10
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x3c]
mov word [esp + 0x1c], ax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x24], ecx
mov ecx, eax
mov dword [esp + 0x18], edx
and ecx, 0xffff
and ecx, 0x80000001
jns 0x401e58
dec ecx
or ecx, 0xfffffffe
inc ecx
mov dl, byte [esp + 0x88]
shl cl, 7
add cl, dl
mov dl, byte [esp + 0x90]
shr eax, 1
shl dl, 3
add cl, 0x30
add al, dl
mov byte [esp + 0x25], cl
mov byte [esp + 0x24], al
mov al, byte [esp + 0x98]
lea ecx, [esp + 0x18]
mov byte [esp + 0x21], al
push ecx
lea edx, [esp + 0x1c]
push 0x80
lea eax, [esp + 0xac]
push edx
lea ecx, [esp + 0x54]
push eax
push ecx
call esi
mov ebp, dword [esp + 0x31]
mov ecx, 0x40
and ebp, 0xff
xor eax, eax
mov dword [esp + 0x98], ebp
mov ebp, dword [esp + 0x32]
and ebp, 0xff
lea edi, [esp + 0x288]
mov dword [esp + 0x94], ebp
mov ebp, dword [esp + 0x33]
and ebp, 0xff
mov edx, dword [esp + 0x2e]
mov dword [esp + 0x88], ebp
mov ebp, dword [esp + 0x34]
and ebp, 0xff
mov esi, dword [esp + 0x2f]
mov dword [esp + 0xa8], ebp
mov ebp, dword [esp + 0x35]
and ebp, 0xff
and edx, 0xff
mov dword [esp + 0x90], ebp
mov ebp, dword [esp + 0x36]
and ebp, 0xff
and esi, 0xff
mov dword [esp + 0xa0], ebp
mov ebp, dword [esp + 0x37]
and ebp, 0xff
mov dword [esp + 0x80], ebp
mov ebp, dword [esp + 0x38]
rep stosd dword es:[edi], eax
and ebp, 0xff
mov ecx, 0x40
lea edi, [esp + 0x388]
mov dword [esp + 0x7c], ebp
mov ebp, dword [esp + 0x39]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2d]
mov edi, dword [esp + 0x30]
and ebp, 0xff
and eax, 0xff
mov dword [esp + 0x8c], ebp
mov ebp, eax
and ecx, 0xff
and edi, 0xff
shr ebp, 4
and eax, 0x8000000f
push ebp
jns 0x401f9d
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, ecx
shr eax, 4
and ecx, 0x8000000f
push eax
jns 0x401fb1
dec ecx
or ecx, 0xfffffff0
inc ecx
push ecx
mov ecx, edx
shr ecx, 4
and edx, 0x8000000f
push ecx
jns 0x401fc5
dec edx
or edx, 0xfffffff0
inc edx
push edx
mov edx, esi
shr edx, 4
and esi, 0x8000000f
push edx
jns 0x401fd9
dec esi
or esi, 0xfffffff0
inc esi
mov eax, edi
push esi
shr eax, 4
and edi, 0x8000000f
push eax
jns 0x401fed
dec edi
or edi, 0xfffffff0
inc edi
mov eax, dword [esp + 0xbc]
push edi
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x402007
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xc4]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x402021
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xc0]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x40203b
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xe8]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x402055
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xd8]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x40206f
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xf0]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x402089
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xd8]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x4020a3
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xdc]
mov edx, eax
shr edx, 4
and eax, 0x8000000f
push edx
jns 0x4020bd
dec eax
or eax, 0xfffffff0
inc eax
push eax
mov eax, dword [esp + 0xf4]
mov ecx, eax
shr ecx, 4
and eax, 0x8000000f
push ecx
jns 0x4020d7
dec eax
or eax, 0xfffffff0
inc eax
push eax
lea edx, [esp + 0x3f8]
push str._01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x_01x
push edx
call sub.MSVCR71.dll_sprintf
mov eax, dword [esp + 0xb3]
add esp, 0x94
and eax, 0xff
mov byte [esp + 0x24], bl
and eax, 0x8000000f
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], 0x44
mov byte [esp + 0x2c], 0x2c
mov byte [esp + 0x2d], 0x7e
mov byte [esp + 0x2e], 0xf7
mov byte [esp + 0x2f], 0x97
mov byte [esp + 0x30], 0xd4
mov byte [esp + 0x31], 0x31
mov word [esp + 0x32], bx
jns 0x40214c
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [esp + 0x1f]
mov edx, dword [esp + 0x1e]
shl al, 4
shr cl, 4
and edx, 0xff
add al, cl
and edx, 0x8000000f
mov byte [esp + 0x32], al
jns 0x402173
dec edx
or edx, 0xfffffff0
inc edx
mov al, byte [esp + 0x1e]
mov ecx, dword [esp + 0x24]
shl dl, 4
shr al, 4
add dl, al
mov eax, dword [esp + 0x2c]
mov byte [esp + 0x33], dl
mov edx, dword [esp + 0x28]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x14], edx
lea edx, [esp + 0x10]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
push edx
lea eax, [esp + 0x14]
push 0x80
lea ecx, [esp + 0xa4]
push eax
lea edx, [esp + 0x4c]
push ecx
push edx
call dword [esp + 0xa8]
mov ecx, dword [esp + 0x33]
mov edx, dword [esp + 0x32]
lea eax, [esp + 0x380]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x35]
push ecx
mov ecx, dword [esp + 0x38]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x3b]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x3e]
push ecx
mov ecx, dword [esp + 0x41]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x44]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x47]
push ecx
mov ecx, dword [esp + 0x4a]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x4d]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x53]
and edx, 0xff
and eax, 0xff
push edx
mov edx, dword [esp + 0x56]
and ecx, 0xff
push eax
mov eax, dword [esp + 0x59]
push ecx
mov ecx, dword [esp + 0x5c]
and edx, 0xff
and eax, 0xff
push edx
and ecx, 0xff
push eax
push ecx
lea edx, [esp + 0x2c4]
push str._02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_s
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x60
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x36c]
rep stosd dword es:[edi], eax
pop ebp
mov al, byte [esp + ebx + 0x268]
push eax
call fcn.00401030
lea ecx, [esp + 0x36c]
push eax
push ecx
lea edx, [esp + 0x374]
push str._s_s
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x14
inc ebx
cmp ebx, 0x3c
jl 0x40229f
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x268]
lea esi, [esp + 0x368]
rep stosd dword es:[edi], eax
mov edi, 0x30
push esi
call fcn.00401050
movsx eax, al
lea ecx, [esp + 0x26c]
push eax
push ecx
lea edx, [esp + 0x274]
push str._s_01c
push edx
call sub.MSVCR71.dll_sprintf
add esp, 0x14
add esi, 5
dec edi
jne 0x4022ec
lea eax, [esp + 0x268]
push eax
push str.WISnet:__s_r_n_r_n
push 0x4043e0
call sub.MSVCR71.dll_sprintf
add esp, 4
mov ecx, dword [esp + 0x9c]
add esp, 8
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push str.Press_any_key_to_continue_n
call sub.MSVCR71.dll_printf
add esp, 4
call sub.MSVCR71.dll__getch
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x85c
ret