; --------------------------------------------------------------------------- _SCOPETABLE_ENTRY struc ; (sizeof=0xC, align=0x4, copyof_1) ; XREF: .text:stru_7F8010A8/r ; .text:stru_7F8010B8/r ... EnclosingLevel dd ? FilterFunc dd ? ; offset HandlerFunc dd ? ; offset _SCOPETABLE_ENTRY ends ; --------------------------------------------------------------------------- CPPEH_RECORD struc ; (sizeof=0x18, align=0x4, copyof_6) ; XREF: ScMMFVerify@16/r ; ScMMFMigrateToMDB@48/r ... old_esp dd ? ; XREF: ScMMFVerify@16+25/w ; ScMMFVerify@16+122/r ... exc_ptr dd ? ; offset registration _EH3_EXCEPTION_REGISTRATION ? ; XREF: ScMMFVerify@16+35/w ; ScMMFVerify@16:loc_7F80206F/w ... CPPEH_RECORD ends ; --------------------------------------------------------------------------- _EH3_EXCEPTION_REGISTRATION struc ; (sizeof=0x10, align=0x4, copyof_3) ; XREF: CPPEH_RECORD/r Next dd ? ; XREF: ScMMFVerify@16:loc_7F8020AF/r ; ScMMFMigrateToMDB@48:loc_7F8023DE/r ... ; offset ExceptionHandler dd ? ; offset ScopeTable dd ? ; offset TryLevel dd ? ; XREF: ScMMFVerify@16+35/w ; ScMMFVerify@16:loc_7F80206F/w ... _EH3_EXCEPTION_REGISTRATION ends ; --------------------------------------------------------------------------- _SYSTEM_INFO struc ; (sizeof=0x24, align=0x4, copyof_7) ; XREF: sub_7F802962/r anonymous_0 _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F ? dwPageSize dd ? lpMinimumApplicationAddress dd ? ; offset lpMaximumApplicationAddress dd ? ; offset dwActiveProcessorMask dd ? dwNumberOfProcessors dd ? dwProcessorType dd ? dwAllocationGranularity dd ? wProcessorLevel dw ? wProcessorRevision dw ? _SYSTEM_INFO ends ; --------------------------------------------------------------------------- _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F union ; (sizeof=0x4, align=0x4, copyof_8) ; XREF: _SYSTEM_INFO/r dwOemId dd ? anonymous_0 _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F::$AA04DEB0C6383F89F13D312A174572A9 ? _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F ends ; --------------------------------------------------------------------------- _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F::$AA04DEB0C6383F89F13D312A174572A9 struc ; (sizeof=0x4, align=0x2, copyof_10) ; XREF: _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F/r wProcessorArchitecture dw ? wReserved dw ? _SYSTEM_INFO::$A707B71C060B6D10F73A71917EA8473F::$AA04DEB0C6383F89F13D312A174572A9 ends ; --------------------------------------------------------------------------- tagMSG struc ; (sizeof=0x1C, align=0x4, copyof_13) ; XREF: sub_7F8035B3/r ; sub_7F803A19/r ... hwnd dd ? ; offset message dd ? wParam dd ? lParam dd ? time dd ? pt POINT ? tagMSG ends ; --------------------------------------------------------------------------- POINT struc ; (sizeof=0x8, align=0x4, copyof_20) ; XREF: tagMSG/r x dd ? y dd ? POINT ends ; --------------------------------------------------------------------------- GUID struc ; (sizeof=0x10, align=0x4, copyof_22) ; XREF: sub_7F8045B6/r Data1 dd ? Data2 dw ? Data3 dw ? Data4 db 8 dup(?) GUID ends ; --------------------------------------------------------------------------- tagRECT struc ; (sizeof=0x10, align=0x4, copyof_25) ; XREF: sub_7F805851/r ; sub_7F8061C8/r ... left dd ? top dd ? right dd ? bottom dd ? tagRECT ends ; --------------------------------------------------------------------------- tagPOINT struc ; (sizeof=0x8, align=0x4) ; XREF: sub_7F80725C/r ; sub_7F807D9C/r ... x dd ? y dd ? tagPOINT ends ; --------------------------------------------------------------------------- _SYSTEMTIME struc ; (sizeof=0x10, align=0x2, copyof_26) ; XREF: sub_7F807D9C/r ; sub_7F817717/r wYear dw ? wMonth dw ? wDayOfWeek dw ? wDay dw ? wHour dw ? wMinute dw ? wSecond dw ? wMilliseconds dw ? _SYSTEMTIME ends ; --------------------------------------------------------------------------- _WIN32_FIND_DATAA struc ; (sizeof=0x140, align=0x4, copyof_27) ; XREF: sub_7F8083A0/r ; sub_7F808498/r ... dwFileAttributes dd ? ftCreationTime FILETIME ? ftLastAccessTime FILETIME ? ftLastWriteTime FILETIME ? nFileSizeHigh dd ? nFileSizeLow dd ? dwReserved0 dd ? dwReserved1 dd ? cFileName db 260 dup(?) cAlternateFileName db 14 dup(?) db ? ; undefined db ? ; undefined _WIN32_FIND_DATAA ends ; --------------------------------------------------------------------------- FILETIME struc ; (sizeof=0x8, align=0x4, copyof_28) ; XREF: sub_7F809DFE/r ; _WIN32_FIND_DATAA/r ... dwLowDateTime dd ? dwHighDateTime dd ? FILETIME ends ; --------------------------------------------------------------------------- tagOFNA struc ; (sizeof=0x4C, copyof_31) ; XREF: sub_7F808498/r lStructSize dd ? hwndOwner dd ? ; offset hInstance dd ? ; offset lpstrFilter dd ? ; offset lpstrCustomFilter dd ? ; offset nMaxCustFilter dd ? nFilterIndex dd ? lpstrFile dd ? ; offset nMaxFile dd ? lpstrFileTitle dd ? ; offset nMaxFileTitle dd ? lpstrInitialDir dd ? ; offset lpstrTitle dd ? ; offset Flags dd ? nFileOffset dw ? nFileExtension dw ? lpstrDefExt dd ? ; offset lCustData dd ? lpfnHook dd ? ; offset lpTemplateName dd ? ; offset tagOFNA ends ; --------------------------------------------------------------------------- tagPAINTSTRUCT struc ; (sizeof=0x40, align=0x4, copyof_37) ; XREF: sub_7F8097B9/r ; sub_7F80C4B4/r ... hdc dd ? ; offset fErase dd ? rcPaint RECT ? fRestore dd ? fIncUpdate dd ? rgbReserved db 32 dup(?) tagPAINTSTRUCT ends ; --------------------------------------------------------------------------- RECT struc ; (sizeof=0x10, align=0x4, copyof_41) ; XREF: .data:rc/r ; .data:stru_7F833BE8/r ... left dd ? top dd ? right dd ? bottom dd ? RECT ends ; --------------------------------------------------------------------------- _FILETIME struc ; (sizeof=0x8, align=0x4) ; XREF: sub_7F809DFE/r ; sub_7F809DFE/r ... dwLowDateTime dd ? dwHighDateTime dd ? _FILETIME ends ; --------------------------------------------------------------------------- _OSVERSIONINFOA struc ; (sizeof=0x94, align=0x4, copyof_42) ; XREF: .data:VersionInformation/r dwOSVersionInfoSize dd ? dwMajorVersion dd ? dwMinorVersion dd ? dwBuildNumber dd ? dwPlatformId dd ? szCSDVersion db 128 dup(?) _OSVERSIONINFOA ends ; --------------------------------------------------------------------------- tagWNDCLASSA struc ; (sizeof=0x28, align=0x4, copyof_43) ; XREF: sub_7F8171B7/r style dd ? lpfnWndProc dd ? ; offset cbClsExtra dd ? cbWndExtra dd ? hInstance dd ? ; offset hIcon dd ? ; offset hCursor dd ? ; offset hbrBackground dd ? ; offset lpszMenuName dd ? ; offset lpszClassName dd ? ; offset tagWNDCLASSA ends ; --------------------------------------------------------------------------- WNDCLASSA struc ; (sizeof=0x28, align=0x4, copyof_51) ; XREF: sub_7F82AF85/r style dd ? lpfnWndProc dd ? ; offset cbClsExtra dd ? cbWndExtra dd ? hInstance dd ? ; offset hIcon dd ? ; offset hCursor dd ? ; offset hbrBackground dd ? ; offset lpszMenuName dd ? ; offset lpszClassName dd ? ; offset WNDCLASSA ends ; --------------------------------------------------------------------------- tagTEXTMETRICA struc ; (sizeof=0x38, align=0x4, copyof_52) ; XREF: sub_7F82B14A/r tmHeight dd ? tmAscent dd ? tmDescent dd ? tmInternalLeading dd ? tmExternalLeading dd ? tmAveCharWidth dd ? tmMaxCharWidth dd ? tmWeight dd ? tmOverhang dd ? tmDigitizedAspectX dd ? tmDigitizedAspectY dd ? tmFirstChar db ? tmLastChar db ? tmDefaultChar db ? tmBreakChar db ? tmItalic db ? tmUnderlined db ? tmStruckOut db ? tmPitchAndFamily db ? tmCharSet db ? db ? ; undefined db ? ; undefined db ? ; undefined tagTEXTMETRICA ends ; --------------------------------------------------------------------------- _SECURITY_ATTRIBUTES struc ; (sizeof=0xC, align=0x4, copyof_53) ; XREF: sub_7F82F462/r nLength dd ? lpSecurityDescriptor dd ? ; offset bInheritHandle dd ? _SECURITY_ATTRIBUTES ends ; --------------------------------------------------------------------------- _MEMORY_BASIC_INFORMATION struc ; (sizeof=0x1C, align=0x4, copyof_54) ; XREF: sub_7F82F462/r BaseAddress dd ? ; offset AllocationBase dd ? ; offset AllocationProtect dd ? RegionSize dd ? State dd ? Protect dd ? Type dd ? _MEMORY_BASIC_INFORMATION ends ; --------------------------------------------------------------------------- _STARTUPINFOA struc ; (sizeof=0x44, align=0x4, copyof_58) ; XREF: sub_7F830CE0/r cb dd ? lpReserved dd ? ; offset lpDesktop dd ? ; offset lpTitle dd ? ; offset dwX dd ? dwY dd ? dwXSize dd ? dwYSize dd ? dwXCountChars dd ? dwYCountChars dd ? dwFillAttribute dd ? dwFlags dd ? wShowWindow dw ? cbReserved2 dw ? lpReserved2 dd ? ; offset hStdInput dd ? ; offset hStdOutput dd ? ; offset hStdError dd ? ; offset _STARTUPINFOA ends ; --------------------------------------------------------------------------- _cpinfo struc ; (sizeof=0x14, align=0x4, copyof_61) ; XREF: sub_7F831280/r MaxCharSize dd ? DefaultChar db 2 dup(?) LeadByte db 12 dup(?) db ? ; undefined db ? ; undefined _cpinfo ends ; --------------------------------------------------------------------------- SYSTEMTIME struc ; (sizeof=0x10, align=0x2, copyof_62) ; XREF: sub_7F807D9C/r ; sub_7F80E471/r wYear dw ? wMonth dw ? wDayOfWeek dw ? wDay dw ? wHour dw ? wMinute dw ? wSecond dw ? wMilliseconds dw ? SYSTEMTIME ends ; Input MD5 : D63D1DD16C674901B35420BCA7F8E1F3 ; Input CRC32 : 2E9141D1 ; File Name : C:\Documents and Settings\Jeff\My Documents\Downloads\MMFMIG32.DLL ; Format : Portable executable for 80386 (PE) ; Imagebase : 7F800000 ; Section 1. (virtual address 00001000) ; Virtual size : 000317A5 ( 202661.) ; Section size in file : 00031800 ( 202752.) ; Offset to raw data for section: 00000400 ; Flags 60000020: Text Executable Readable ; Alignment : default ; Debug Directory entries include uni.inc ; see unicode subdir of ida for info on unicode .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 7F801000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing dd 0 ; Characteristics dd 319D07D5h ; TimeDateStamp: Fri May 17 23:12:21 1996 dw 0 ; MajorVersion dw 0 ; MinorVersion dd 4 ; Type: IMAGE_DEBUG_TYPE_MISC dd 110h ; SizeOfData dd 0 ; AddressOfRawData dd 41600h ; PointerToRawData dd 0 ; Characteristics dd 319D07D5h ; TimeDateStamp: Fri May 17 23:12:21 1996 dw 0 ; MajorVersion dw 0 ; MinorVersion dd 3 ; Type: IMAGE_DEBUG_TYPE_FPO dd 1AC0h ; SizeOfData dd 0 ; AddressOfRawData dd 41710h ; PointerToRawData dd 0 dd 319D07D5h, 0 dd 6, 19DC4h, 0 dd 431D0h, 0 dd 319D07D5h, 0 dd 2, 13AE24h, 0 dd 5CF94h dword_7F801070 dd 20300h, 0 ; DATA XREF: HPProviderInit+39o dd 0C0h, 46000000h dword_7F801080 dd 20320h, 0 ; DATA XREF: sub_7F801A60+34o dd 0C0h, 46000000h off_7F801090 dd offset sub_7F801A60 ; DATA XREF: HPProviderInit+5Ao dd offset sub_7F801AD5 dd offset sub_7F801AF7 dd offset sub_7F801B61 dd offset sub_7F801C6A align 8 stru_7F8010A8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80207B> ; DATA XREF: ScMMFVerify@16+Bo ; SEH scope table for function 7F801F87 align 8 stru_7F8010B8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F802350> ; DATA XREF: ScMMFMigrateToMDB@48+Bo ; SEH scope table for function 7F8020C2 align 8 stru_7F8010C8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F8026D8> ; DATA XREF: sub_7F8025E7+Bo ; SEH scope table for function 7F8025E7 align 8 stru_7F8010D8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F802875> ; DATA XREF: sub_7F8026ED+Bo ; SEH scope table for function 7F8026ED align 8 stru_7F8010E8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F802949> ; DATA XREF: sub_7F8028D4+Bo ; SEH scope table for function 7F8028D4 align 8 stru_7F8010F8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F802B02> ; DATA XREF: sub_7F802962+Bo ; SEH scope table for function 7F802962 align 8 stru_7F801108 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F802C44> ; DATA XREF: sub_7F802B1B+Bo ; SEH scope table for function 7F802B1B align 8 stru_7F801118 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F803380> ; DATA XREF: sub_7F802DB7+Bo ; SEH scope table for function 7F802DB7 align 8 stru_7F801128 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80359A> ; DATA XREF: sub_7F8034ED+Bo ; SEH scope table for function 7F8034ED align 8 stru_7F801138 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F803B9F> ; DATA XREF: sub_7F803AA5+Bo ; SEH scope table for function 7F803AA5 align 8 stru_7F801148 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F803D20> ; DATA XREF: StartAddress+Bo ; SEH scope table for function 7F803C21 align 8 stru_7F801158 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F803E8A> ; DATA XREF: sub_7F803DCD+Bo ; SEH scope table for function 7F803DCD align 8 stru_7F801168 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804000> ; DATA XREF: sub_7F803EAC+Bo ; SEH scope table for function 7F803EAC align 8 stru_7F801178 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80428A> ; DATA XREF: sub_7F804058+Bo ; SEH scope table for function 7F804058 align 8 stru_7F801188 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804555> ; DATA XREF: sub_7F8042DA+Bo ; SEH scope table for function 7F8042DA align 8 stru_7F801198 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F8048EF> ; DATA XREF: sub_7F8045B6+Bo ; SEH scope table for function 7F8045B6 align 8 stru_7F8011A8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804A61> ; DATA XREF: sub_7F80493B+Bo ; SEH scope table for function 7F80493B align 8 stru_7F8011B8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804C0A> ; DATA XREF: sub_7F804A93+Bo ; SEH scope table for function 7F804A93 align 8 stru_7F8011C8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804CF3> ; DATA XREF: sub_7F804C4A+Bo ; SEH scope table for function 7F804C4A align 8 stru_7F8011D8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F804EAE> ; DATA XREF: sub_7F804E37+Bo ; SEH scope table for function 7F804E37 align 8 stru_7F8011E8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F8053EA> ; DATA XREF: sub_7F80530D+Bo ; SEH scope table for function 7F80530D align 8 stru_7F8011F8 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80546F> ; DATA XREF: sub_7F805403+Bo ; SEH scope table for function 7F805403 align 8 stru_7F801208 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F805566> ; DATA XREF: sub_7F80549A+Bo ; SEH scope table for function 7F80549A align 8 stru_7F801218 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80571B> ; DATA XREF: sub_7F80560A+Bo ; SEH scope table for function 7F80560A align 8 stru_7F801228 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F80582D> ; DATA XREF: sub_7F80577A+Bo ; SEH scope table for function 7F80577A align 8 stru_7F801238 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F808A56> ; DATA XREF: sub_7F808A02+Bo ; SEH scope table for function 7F808A02 align 8 stru_7F801248 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F808B96> ; DATA XREF: sub_7F808A6D+Bo ; SEH scope table for function 7F808A6D align 8 stru_7F801258 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F808EF2> ; DATA XREF: sub_7F808C12+Bo ; SEH scope table for function 7F808C12 align 8 stru_7F801268 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F809165> ; DATA XREF: sub_7F8090D8+Bo ; SEH scope table for function 7F8090D8 align 8 stru_7F801278 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F8095F5> ; DATA XREF: sub_7F8091A3+Bo ; SEH scope table for function 7F8091A3 align 8 stru_7F801288 _SCOPETABLE_ENTRY <0FFFFFFFFh, 0, offset loc_7F809E7B> ; DATA XREF: sub_7F809DFE+Bo ; SEH scope table for function 7F809DFE align 8 dd 20D10h, 0 dd 0C0h, 46000000h, 20D11h, 0 dd 0C0h, 46000000h, 20D12h, 0 dd 0C0h, 46000000h, 20D13h, 0 dd 0C0h, 46000000h, 20D14h, 0 dd 0C0h, 46000000h, 20D15h, 0 dd 0C0h, 46000000h, 20D16h, 0 dd 0C0h, 46000000h, 20D17h, 0 dd 0C0h, 46000000h, 20D18h, 0 dd 0C0h, 46000000h, 20D19h, 0 dd 0C0h, 46000000h, 20D1Ah, 0 dd 0C0h, 46000000h dword_7F801348 dd 2030Dh, 0 ; DATA XREF: sub_7F80AB5D+B0o ; sub_7F80B0EB+23o dd 0C0h, 46000000h, 2030Eh, 0 dd 0C0h, 46000000h a0123456789abcd db '0123456789ABCDEF',0 ; DATA XREF: sub_7F80FCA0+11o align 10h a0123456789ab_0 db '0123456789abcdef',0 ; DATA XREF: sub_7F80FCA0+18o align 8 dword_7F801398 dd 68007h ; DATA XREF: sub_7F80E226+2Fo ; sub_7F80F533+1Fo ... dword_7F80139C dd 0E070003h ; DATA XREF: sub_7F80E226:loc_7F80E24Er dd offset loc_7F80E5C4 dd 68007h, 0E1B000Bh dd offset loc_7F80E626 dd 6800Fh, 37010102h dd offset sub_7F80E6B9 dd 68011h, 37090102h dd offset sub_7F80E6B9 dd 18010h, 3704001Eh dd offset sub_7F80E64B dd 38012h, 30070040h dd offset sub_7F80E471 dd 38013h, 30080040h dd offset sub_7F80E471 dd 8003h, 0E02001Eh dd offset sub_7F80EA57 dd 2800Ch, 1000001Eh dd offset sub_7F80E64B dd 1800Bh, 0B0102h dd offset sub_7F80E722 dd 38006h, 0E060040h dd offset sub_7F80E471 dd 38005h, 390040h dd offset sub_7F80E471 dd 8000h, 0C1A001Eh dd offset sub_7F80EC41 dd 8000h, 0C1E001Eh dd offset sub_7F80EBCF dd 8000h, 0C1F001Eh dd offset sub_7F80EB5D dd 8000h, 0C1D0102h dd offset sub_7F80EF21 dd 8000h, 0C190102h dd offset sub_7F80EE72 dd 8000h, 42001Eh dd offset sub_7F80EC41 dd 8000h, 64001Eh dd offset sub_7F80EBCF dd 8000h, 65001Eh dd offset sub_7F80EB5D dd 8000h, 3B0102h dd offset sub_7F80EF21 dd 8000h, 410102h dd offset sub_7F80EE72 dd 18009h, 300B0102h dd offset sub_7F80E722 dd 1800Ah, 250102h dd offset sub_7F80E722 dd 4800Dh, 260003h dd offset sub_7F80E51A dd 4800Dh, 170003h dd offset sub_7F80E56F dd 18004h, 37001Eh dd offset sub_7F80E64B dd 30006h, 600040h dd offset sub_7F80E471 dd 30007h, 610040h dd offset sub_7F80E471 dd 38020h, 30080040h dd offset sub_7F80E471 dd 70006h, 4B001Eh dd offset sub_7F80E439 dd 40009h, 63000Bh dd offset loc_7F80F510 dd 50008h, 620003h dd offset loc_7F80F4F3 dd 3 dup(0) dword_7F801530 dd 60000h, 430102h ; DATA XREF: .text:7F801834o ; .text:7F801838o ... dd offset sub_7F80F339 dd 60000h, 44001Eh dd offset sub_7F80F1DB dd 60000h, 77001Eh dd offset sub_7F80F2C3 dd 60000h, 78001Eh dd offset sub_7F80F24D dd 60000h, 520102h dd offset sub_7F80F3F1 dd 60001h, 410102h dd offset sub_7F80F339 dd 60001h, 42001Eh dd offset sub_7F80F1DB dd 60001h, 64001Eh dd offset sub_7F80F2C3 dd 60001h, 65001Eh dd offset sub_7F80F24D dd 60001h, 3B0102h dd offset sub_7F80F3F1 dd 4 dup(0) dword_7F8015B8 dd 60000h, 410102h ; DATA XREF: .text:7F801840o ; .text:7F801844o dd offset sub_7F80F339 dd 60000h, 42001Eh dd offset sub_7F80F1DB dd 60000h, 64001Eh dd offset sub_7F80F2C3 dd 60000h, 65001Eh dd offset sub_7F80F24D dd 60000h, 3B0102h dd offset sub_7F80F3F1 align 10h dword_7F801600 dd 2, 74001Eh ; DATA XREF: .text:7F80182Co dd offset sub_7F80EA57 dd 30003h, 4E0040h dd offset sub_7F80E471 dd 10004h, 49001Eh dd offset sub_7F80E64B dd 30007h, 320040h dd offset sub_7F80E471 align 20h dword_7F801640 dd 1, 5A001Eh ; DATA XREF: .text:7F801830o dd offset sub_7F80EC41 dd 1, 66001Eh dd offset sub_7F80EBCF dd 1, 67001Eh dd offset sub_7F80EB5D dd 1, 5C0102h dd offset sub_7F80EF21 dd 1, 5B0102h dd offset sub_7F80EE72 dd 8001h, 430102h dd offset sub_7F80EE72 dd 8001h, 44001Eh dd offset sub_7F80EC41 dd 8001h, 77001Eh dd offset sub_7F80EBCF dd 8001h, 78001Eh dd offset sub_7F80EB5D dd 8001h, 520102h dd offset sub_7F80EF21 dd 30003h, 4E0040h dd offset sub_7F80E471 dd 10004h, 49001Eh dd offset sub_7F80E64B dd 4 dup(0) dword_7F8016E0 dd 8000h, 5A001Eh ; DATA XREF: .text:7F801848o dd offset sub_7F80EC41 dd 8000h, 66001Eh dd offset sub_7F80EBCF dd 8000h, 67001Eh dd offset sub_7F80EB5D dd 8000h, 5C0102h dd offset sub_7F80EF21 dd 1, 0C1A001Eh dd offset sub_7F80EC41 dd 1, 0C1E001Eh dd offset sub_7F80EBCF dd 1, 0C1F001Eh dd offset sub_7F80EB5D dd 1, 0C1D0102h dd offset sub_7F80EF21 dd 1, 0C190102h dd offset sub_7F80EE72 dd 1, 42001Eh dd offset sub_7F80EC41 dd 1, 64001Eh dd offset sub_7F80EBCF dd 1, 65001Eh dd offset sub_7F80EB5D dd 1, 3B0102h dd offset sub_7F80EF21 dd 1, 410102h dd offset sub_7F80EE72 dd 30003h, 390040h dd offset sub_7F80E471 dd 10004h, 37001Eh dd offset sub_7F80E64B dd 70006h, 1A001Eh dd offset sub_7F80E439 dd 18004h, 1001001Eh dd offset sub_7F80E64B dd 8000h, 5A001Eh dd offset sub_7F80EC41 dd 38005h, 4E0040h dd offset sub_7F80E471 align 20h off_7F8017E0 dd offset String2 ; DATA XREF: sub_7F80E354+11o ; sub_7F80E39F:loc_7F80E3DCr ; "IPM.Note" dd offset aIpm_microsoftM ; "IPM.Microsoft Mail.Note" dd offset aReport_ipm_not ; "Report.IPM.Note.IPNRN" dd offset aIpm_microsof_0 ; "IPM.Microsoft Mail.Read Receipt" dd offset aReport_ipm_n_0 ; "Report.IPM.Note.NDR" dd offset aIpm_microsof_1 ; "IPM.Microsoft Mail.Non-Delivery" dd offset aIpm_schedule_m ; "IPM.Schedule.Meeting.Resp.Pos" dd offset aIpm_microsoftS ; "IPM.Microsoft Schedule.MtgRespP" dd offset aIpm_schedule_0 ; "IPM.Schedule.Meeting.Resp.Neg" dd offset aIpm_microsof_2 ; "IPM.Microsoft Schedule.MtgRespN" dd offset aIpm_schedule_1 ; "IPM.Schedule.Meeting.Resp.Tent" dd offset aIpm_microsof_3 ; "IPM.Microsoft Schedule.MtgRespA" dd offset aIpm_schedule_2 ; "IPM.Schedule.Meeting.Request" dd offset aIpm_microsof_4 ; "IPM.Microsoft Schedule.MtgReq" dd offset aIpm_schedule_3 ; "IPM.Schedule.Meeting.Canceled" dd offset aIpm_microsof_5 ; "IPM.Microsoft Schedule.MtgCncl" dd offset aPlaceHolderNdr ; "Place holder NDR Original Msg" dd offset Default dword_7F801828 dd 0 ; DATA XREF: sub_7F80E226+7r ; sub_7F80E354+39o ... dd offset dword_7F801600 dd offset dword_7F801640 dd offset dword_7F801530 dd offset dword_7F801530 dd offset dword_7F801530 dd offset dword_7F8015B8 dd offset dword_7F8015B8 dd offset dword_7F8016E0 dd 0 dd 80040600h, 80040201h, 80040400h, 80040301h, 2 dup(8004010Fh) dd 80040108h, 80004005h, 2 dup(8004010Fh), 80040604h, 80040600h dd 2 dup(80040110h), 80004005h, 80040604h, 4 dup(80004005h) dd 80040400h, 80040302h, 80040112h, 5 dup(80004005h), 80040111h dd 0 dd 80040501h, 0 aXabNsp db 'XAB NSP',0 ; DATA XREF: sub_7F80E7F6+C9o dword_7F8018D8 dd 3A50544Dh ; DATA XREF: sub_7F80E7F6+16Ar align 10h aSmtp_0 db 'SMTP',0 ; DATA XREF: sub_7F80E7F6+E3o ; sub_7F80E7F6+174o align 10h dword_7F8018F0 dd 20301h, 0 ; DATA XREF: sub_7F80B0EB+49o dd 0C0h, 46000000h, 2031Bh, 0 dd 0C0h, 46000000h dword_7F801910 dd 20303h, 0 ; DATA XREF: sub_7F80AEC7+CAo ; sub_7F80B081+36o dd 0C0h, 46000000h, 20306h, 0 dd 0C0h, 46000000h dword_7F801930 dd 20307h, 0 ; DATA XREF: sub_7F804058+C2o dd 0C0h, 46000000h, 20308h, 0 dd 0C0h, 46000000h, 2030Ch, 0 dd 0C0h, 46000000h, 20310h, 0 dd 0C0h, 46000000h, 20313h, 0 dd 0C0h, 46000000h dword_7F801980 dd 20316h, 0 ; DATA XREF: sub_7F80D6D8+8Bo ; sub_7F80DB1E+39o dd 0C0h, 46000000h dword_7F801990 dd 2031Ah, 0 ; DATA XREF: sub_7F80B80E+A5o dd 0C0h, 46000000h dword_7F8019A0 dd 2 dup(0) ; DATA XREF: sub_7F801A60+45o dd 0C0h, 46000000h dword_7F8019B0 dd 0Ch, 0 ; DATA XREF: sub_7F80493B+55o ; sub_7F80493B+8Bo ... dd 0C0h, 46000000h dword_7F8019C0 dd 8648862Ah, 0A0314F7h, 10103h, 0 ; DATA XREF: sub_7F80DDB5+142o stru_7F8019D0 _SCOPETABLE_ENTRY <0FFFFFFFFh, offset loc_7F815B24, \ ; DATA XREF: sub_7F815A66+Bo offset loc_7F815B2A> ; SEH scope table for function 7F815A66 align 10h aMmfMigrationLi db 'MMF Migration Library',0 align 4 dd 6000006h, 100h, 6030010h, 10020600h, 45454504h, 5050505h dd 303505h, 50h, 38282000h, 8075850h, 30303700h, 75057h dd 8202000h, 0 db 8,'``````',0 dd 78707000h, 8787878h, 807h, 8080007h, 8000008h, 800h dd 8, 3 dup(0) ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F801A60(LPVOID lp, void *, LPVOID) sub_7F801A60 proc near ; DATA XREF: .text:off_7F801090o lp = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push esi push edi push 48h ; ucb mov ebx, [ebp+lp] push ebx ; lp call ds:IsBadWritePtr test eax, eax jnz short loc_7F801AC9 push 10h ; ucb push [ebp+arg_4] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F801AC9 push 4 ; ucb push [ebp+arg_8] ; lp call ds:IsBadWritePtr test eax, eax jnz short loc_7F801AC9 mov edi, offset dword_7F801080 mov ecx, 10h mov esi, [ebp+arg_4] repe cmpsb jz short loc_7F801ABD mov edi, offset dword_7F8019A0 mov ecx, 10h mov esi, [ebp+arg_4] repe cmpsb jz short loc_7F801ABD mov eax, 80004002h jmp short loc_7F801ACE ; --------------------------------------------------------------------------- loc_7F801ABD: ; CODE XREF: sub_7F801A60+43j ; sub_7F801A60+54j mov eax, [ebp+arg_8] mov [eax], ebx xor eax, eax inc dword ptr [ebx+4] jmp short loc_7F801ACE ; --------------------------------------------------------------------------- loc_7F801AC9: ; CODE XREF: sub_7F801A60+14j ; sub_7F801A60+23j ... mov eax, 80070057h loc_7F801ACE: ; CODE XREF: sub_7F801A60+5Bj ; sub_7F801A60+67j pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F801A60 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F801AD5(LPVOID lp) sub_7F801AD5 proc near ; DATA XREF: .text:7F801094o lp = dword ptr 4 push esi push 48h ; ucb mov esi, [esp+8+lp] push esi ; lp call ds:IsBadWritePtr test eax, eax mov eax, 0 jnz short loc_7F801AF3 mov eax, [esi+4] inc eax mov [esi+4], eax loc_7F801AF3: ; CODE XREF: sub_7F801AD5+15j pop esi retn 4 sub_7F801AD5 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F801AF7(LPVOID lp) sub_7F801AF7 proc near ; DATA XREF: .text:7F801098o lp = dword ptr 4 push ebx push esi mov esi, [esp+8+lp] push edi push 48h ; ucb push esi ; lp call ds:IsBadWritePtr test eax, eax jnz short loc_7F801B59 mov eax, [esi+4] dec eax mov [esi+4], eax jnz short loc_7F801B5B lea edi, [esi+2Ch] mov dword ptr [esi], 0 push dword ptr [esi+0Ch] call UlRelease@4 mov eax, [edi] test eax, eax jz short loc_7F801B55 push 0FFFFFFFFh ; dwMilliseconds push dword ptr [eax+4] ; hHandle call sub_7F82F3F3 test eax, eax jz short loc_7F801B55 mov ecx, [esi+30h] mov eax, [edi] mov edx, [eax] dec dword ptr [ecx+edx] mov eax, [edi] push dword ptr [eax+4] ; hMutex call ds:ReleaseMutex push dword ptr [edi] call sub_7F82F729 loc_7F801B55: ; CODE XREF: sub_7F801AF7+32j ; sub_7F801AF7+40j push esi call dword ptr [esi+18h] loc_7F801B59: ; CODE XREF: sub_7F801AF7+12j xor eax, eax loc_7F801B5B: ; CODE XREF: sub_7F801AF7+1Bj pop edi pop esi pop ebx retn 4 sub_7F801AF7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F801B61(LPVOID lp, int, int, int, LPVOID, LPVOID, LPVOID) sub_7F801B61 proc near ; DATA XREF: .text:7F80109Co var_14 = dword ptr -14h var_C = word ptr -0Ch var_4 = dword ptr -4 lp = dword ptr 8 arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi mov ebx, ds:IsBadWritePtr push 48h ; ucb mov edi, [ebp+lp] push edi ; lp call ebx ; IsBadWritePtr test eax, eax jnz loc_7F801C5C push 4 ; ucb mov esi, [ebp+arg_10] push esi ; lp call ebx ; IsBadWritePtr test eax, eax jnz loc_7F801C5C push 4 ; ucb push [ebp+arg_14] ; lp call ebx ; IsBadWritePtr test eax, eax jnz loc_7F801C5C push 4 ; ucb push [ebp+arg_18] ; lp call ebx ; IsBadWritePtr test eax, eax jnz loc_7F801C5C mov eax, [ebp+arg_14] mov edx, [ebp+arg_18] push dword ptr [eax] ; ucb push dword ptr [edx] ; lp call ebx ; IsBadWritePtr test eax, eax jnz loc_7F801C5C xor ebx, ebx mov [esi], ebx cmp [edi+34h], ebx jz short loc_7F801C1E lea eax, [ebp+var_4] mov [ebp+var_4], ebx push eax push 0E060040h push [ebp+arg_4] call HrGetOneProp@12 test eax, eax jl short loc_7F801C18 lea eax, [edi+40h] lea ecx, [edi+38h] push eax ; FILETIME * push ecx ; lpFileTime2 mov eax, [ebp+var_4] add eax, 8 push eax ; lpFileTime1 call FOutsideDateRange@12 test eax, eax jz short loc_7F801C18 mov [ebp+var_C], bx lea eax, [ebp+var_14] mov [ebp+var_14], 29000Bh push eax push [ebp+arg_4] call HrSetOneProp@8 mov dword ptr [esi], 3 loc_7F801C18: ; CODE XREF: sub_7F801B61+80j ; sub_7F801B61+98j push [ebp+var_4] call dword ptr [edi+18h] loc_7F801C1E: ; CODE XREF: sub_7F801B61+68j cmp dword ptr [esi], 0 jnz short loc_7F801C58 lea esi, [edi+2Ch] push [ebp+arg_4] call HrModifyNamesInMsg@4 mov eax, [esi] test eax, eax jz short loc_7F801C58 push 0FFFFFFFFh ; dwMilliseconds push dword ptr [eax+4] ; hHandle call sub_7F82F3F3 test eax, eax jz short loc_7F801C58 mov ecx, [edi+30h] mov eax, [esi] mov edx, [eax] inc dword ptr [ecx+edx+18h] mov eax, [esi] push dword ptr [eax+4] ; hMutex call ds:ReleaseMutex loc_7F801C58: ; CODE XREF: sub_7F801B61+C0j ; sub_7F801B61+D1j ... xor eax, eax jmp short loc_7F801C61 ; --------------------------------------------------------------------------- loc_7F801C5C: ; CODE XREF: sub_7F801B61+19j ; sub_7F801B61+29j ... mov eax, 80070057h loc_7F801C61: ; CODE XREF: sub_7F801B61+F9j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch sub_7F801B61 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F801C6A(LPVOID lp, int, int, int, int, LPVOID, LPVOID) sub_7F801C6A proc near ; DATA XREF: .text:7F8010A0o lp = dword ptr 4 arg_14 = dword ptr 18h arg_18 = dword ptr 1Ch push ebx push esi push edi push 48h ; ucb push [esp+10h+lp] ; lp mov edi, ds:IsBadWritePtr call edi ; IsBadWritePtr test eax, eax jnz short loc_7F801CA8 mov esi, [esp+0Ch+arg_14] push 4 ; ucb push esi ; lp call edi ; IsBadWritePtr test eax, eax jnz short loc_7F801CA8 mov ebx, [esp+0Ch+arg_18] push 4 ; ucb push ebx ; lp call edi ; IsBadWritePtr test eax, eax jnz short loc_7F801CA8 push dword ptr [esi] ; ucb push dword ptr [ebx] ; lp call edi ; IsBadWritePtr test eax, eax mov eax, 0 jz short loc_7F801CAD loc_7F801CA8: ; CODE XREF: sub_7F801C6A+13j ; sub_7F801C6A+20j ... mov eax, 80070057h loc_7F801CAD: ; CODE XREF: sub_7F801C6A+3Cj pop edi pop esi pop ebx retn 1Ch sub_7F801C6A endp ; Exported entry 2. HPProviderInit ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame public HPProviderInit HPProviderInit proc near ; DATA XREF: .text:off_7F8326A8o var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] mov [ebp+var_4], 0 push esi push edi push eax push 48h call [ebp+arg_8] test eax, eax jl loc_7F801D71 mov edi, [ebp+var_4] xor eax, eax mov ecx, 12h rep stosd mov eax, [ebp+var_4] mov esi, [ebp+arg_0] add eax, 0Ch xor edi, edi push eax push offset dword_7F801070 push esi mov eax, [esi] call dword ptr [eax] mov ebx, eax test ebx, ebx jge short loc_7F801D07 push [ebp+var_4] call [ebp+arg_10] mov [ebp+var_4], edi jmp short loc_7F801D59 ; --------------------------------------------------------------------------- loc_7F801D07: ; CODE XREF: HPProviderInit+47j mov eax, [ebp+var_4] mov edx, [ebp+arg_4] mov dword ptr [eax], offset off_7F801090 mov eax, [ebp+var_4] mov dword ptr [eax+4], 1 mov ecx, [ebp+var_4] mov [ecx+8], edx mov edx, [ebp+arg_8] mov eax, [ebp+var_4] mov [eax+0Ch], esi mov eax, [ebp+arg_C] mov ecx, [ebp+var_4] mov [ecx+10h], edx mov ecx, [ebp+var_4] mov [ecx+14h], eax mov ecx, [ebp+var_4] mov edx, [ebp+arg_10] mov esi, [ebp+arg_14] mov [ecx+18h], edx mov edi, [ebp+var_4] add edi, 1Ch movsd movsd movsd movsd push [ebp+var_4] call sub_7F801D78 loc_7F801D59: ; CODE XREF: HPProviderInit+52j test ebx, ebx jge short loc_7F801D67 push [ebp+var_4] call UlRelease@4 jmp short loc_7F801D6F ; --------------------------------------------------------------------------- loc_7F801D67: ; CODE XREF: HPProviderInit+A8j mov ecx, [ebp+var_4] mov eax, [ebp+arg_1C] mov [eax], ecx loc_7F801D6F: ; CODE XREF: HPProviderInit+B2j mov eax, ebx loc_7F801D71: ; CODE XREF: HPProviderInit+1Bj pop edi pop esi pop ebx mov esp, ebp pop ebp retn HPProviderInit endp ; =============== S U B R O U T I N E ======================================= sub_7F801D78 proc near ; CODE XREF: HPProviderInit+A1p arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi xor ebx, ebx lea edi, [esi+2Ch] push ebx ; dwMaximumSizeLow mov [esi+34h], ebx push 45586D67h ; int push ebx ; int call sub_7F82F6AD mov edx, eax mov [edi], eax test edx, edx jz short loc_7F801DE3 mov eax, [edx] mov ecx, [eax+0Ch] mov [esi+30h], ecx test ecx, ecx jnz short loc_7F801DAC push dword ptr [edx+4] jmp short loc_7F801DDD ; --------------------------------------------------------------------------- loc_7F801DAC: ; CODE XREF: sub_7F801D78+2Dj mov edx, [edx] add edx, ecx lea eax, [edx+8] inc dword ptr [edx] mov ecx, [edx+4] add edx, 10h mov [esi+34h], ecx lea ecx, [esi+38h] mov ebx, [eax] add esi, 40h mov eax, [eax+4] mov [ecx], ebx mov [ecx+4], eax mov eax, [edx+4] mov ebx, [edx] mov ecx, [edi] mov [esi], ebx mov [esi+4], eax push dword ptr [ecx+4] ; hMutex loc_7F801DDD: ; CODE XREF: sub_7F801D78+32j call ds:ReleaseMutex loc_7F801DE3: ; CODE XREF: sub_7F801D78+21j pop edi pop esi pop ebx retn 4 sub_7F801D78 endp ; Exported entry 4. HrModifyNamesInMsg@4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame public HrModifyNamesInMsg@4 HrModifyNamesInMsg@4 proc near ; CODE XREF: sub_7F801B61+C8p ; DATA XREF: .text:off_7F8326A8o var_14 = byte ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor esi, esi lea eax, [ebp+var_4] lea ecx, [ebp+var_14] push eax mov [ebp+var_C], esi push ecx mov edi, [ebp+arg_0] push esi mov [ebp+var_8], esi push offset unk_7F835190 mov eax, [edi] push edi mov [ebp+var_4], esi call dword ptr [eax+14h] mov ebx, eax test ebx, ebx jl loc_7F801F2F mov eax, [ebp+var_4] cmp dword ptr [eax], 1A001Eh jnz loc_7F801F2D push offset String2 ; "IPM.Note" push dword ptr [eax+8] ; lpString1 call ds:lstrcmpiA test eax, eax jnz loc_7F801F2D mov eax, [ebp+var_4] cmp dword ptr [eax+10h], 0C1E001Eh jnz short loc_7F801E8C push offset aSmtp ; "SMTP" push dword ptr [eax+18h] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F801E8C push offset aX400 ; "X400" mov eax, [ebp+var_4] push dword ptr [eax+18h] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F801E8C push esi mov eax, [edi] push offset unk_7F835140 push edi call dword ptr [eax+24h] mov ebx, eax test ebx, ebx jl loc_7F801F2F loc_7F801E8C: ; CODE XREF: HrModifyNamesInMsg@4+64j ; HrModifyNamesInMsg@4+76j ... lea eax, [ebp+var_C] xor esi, esi push eax push esi push edi mov eax, [edi] call dword ptr [eax+48h] mov ebx, eax test ebx, ebx jl loc_7F801F2F lea eax, [ebp+var_8] push eax push esi push esi push esi push offset unk_7F835178 push [ebp+var_C] call HrQueryAllRows@24 mov ebx, eax test ebx, ebx jl short loc_7F801F2F mov esi, [ebp+var_8] mov eax, [ebp+var_8] add esi, 4 mov eax, [eax] imul eax, 0Ch add eax, esi mov [ebp+var_10], eax cmp eax, esi jbe short loc_7F801F1E loc_7F801ED4: ; CODE XREF: HrModifyNamesInMsg@4+133j mov ebx, [esi+8] add ebx, 30h cmp dword ptr [ebx], 3002001Eh jnz short loc_7F801F16 push offset aSmtp ; "SMTP" push dword ptr [ebx+8] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F801F16 push offset aX400 ; "X400" push dword ptr [ebx+8] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F801F16 mov dword ptr [ebx], 1 mov eax, [esi+8] mov dword ptr [eax+40h], 1 loc_7F801F16: ; CODE XREF: HrModifyNamesInMsg@4+F7j ; HrModifyNamesInMsg@4+109j ... add esi, 0Ch cmp [ebp+var_10], esi ja short loc_7F801ED4 loc_7F801F1E: ; CODE XREF: HrModifyNamesInMsg@4+E9j push [ebp+var_8] push 0 push edi mov ebx, [edi] call dword ptr [ebx+4Ch] mov ebx, eax jmp short loc_7F801F2F ; --------------------------------------------------------------------------- loc_7F801F2D: ; CODE XREF: HrModifyNamesInMsg@4+3Ej ; HrModifyNamesInMsg@4+54j xor ebx, ebx loc_7F801F2F: ; CODE XREF: HrModifyNamesInMsg@4+2Fj ; HrModifyNamesInMsg@4+9Dj ... push [ebp+var_8] call FreeProws@4 push [ebp+var_C] call UlRelease@4 push [ebp+var_4] call MAPIFreeBuffer@4 mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 HrModifyNamesInMsg@4 endp ; Exported entry 3. FOutsideDateRange@12 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall FOutsideDateRange(FILETIME *lpFileTime1, FILETIME *lpFileTime2, FILETIME *) public FOutsideDateRange@12 FOutsideDateRange@12 proc near ; CODE XREF: sub_7F801B61+91p ; DATA XREF: .text:off_7F8326A8o lpFileTime1 = dword ptr 8 lpFileTime2 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push esi push [ebp+lpFileTime2] ; lpFileTime2 push [ebp+lpFileTime1] ; lpFileTime1 call ds:CompareFileTime push [ebp+arg_8] ; lpFileTime2 push [ebp+lpFileTime1] ; lpFileTime1 mov esi, eax call ds:CompareFileTime test esi, esi jl short loc_7F801F7D test eax, eax mov eax, 0 jl short loc_7F801F82 loc_7F801F7D: ; CODE XREF: FOutsideDateRange@12+20j mov eax, 1 loc_7F801F82: ; CODE XREF: FOutsideDateRange@12+29j pop esi pop ebp retn 0Ch FOutsideDateRange@12 endp ; Exported entry 7. ScMMFVerify@16 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame public ScMMFVerify@16 ScMMFVerify@16 proc near ; CODE XREF: sub_7F805FDE+C3p ; DATA XREF: .text:off_7F8326A8o var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h lpString = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010A8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 1Ch push ebx push esi push edi xor ebx, ebx mov [ebp+ms_exc.old_esp], esp mov [ebp+var_20], ebx mov [ebp+var_1C], 80004005h mov [ebp+var_24], ebx mov [ebp+ms_exc.registration.TryLevel], ebx push ebx call MAPIInitialize@4 mov esi, [ebp+arg_8] cmp esi, ebx jz short loc_7F801FCE mov [esi], ebx loc_7F801FCE: ; CODE XREF: ScMMFVerify@16+43j call MAPIGetDefaultMalloc@0 push eax push offset MAPIFreeBuffer@4 push offset MAPIAllocateMore@12 push offset MAPIAllocateBuffer@8 xor edi, edi push edi lea eax, [ebp+var_20] push eax call sub_7F8026ED mov [ebp+var_1C], eax cmp eax, edi jnz short loc_7F80206F call sub_7F802896 mov [ebp+var_1C], eax cmp eax, edi jl short loc_7F80206F lea eax, [ebp+var_24] push eax ; int push [ebp+arg_4] ; int push [ebp+lpString] ; lpString mov eax, [ebp+var_20] add eax, 58h push eax ; int mov eax, [ebp+var_20] add eax, 54h push eax ; int mov eax, [ebp+var_20] add eax, 50h push eax ; int call sub_7F8028D4 mov [ebp+var_1C], eax cmp eax, edi jnz short loc_7F80206F test esi, esi jz short loc_7F80206F mov ebx, offset unk_7F8351C8 cmp [ebx], edi jz short loc_7F802064 mov edi, [ebp+var_2C] loc_7F80203D: ; CODE XREF: ScMMFVerify@16+DBj push [ebp+var_20] push ebx call sub_7F802C9E mov [ebp+var_1C], eax test eax, eax jl short loc_7F80206F mov edi, [ebp+var_20] add edi, 4D0h movzx eax, word ptr [ebx+0Ah] add [edi], eax add ebx, 10h cmp dword ptr [ebx], 0 jnz short loc_7F80203D loc_7F802064: ; CODE XREF: ScMMFVerify@16+B1j mov eax, [ebp+var_20] mov eax, [eax+4D0h] mov [esi], eax loc_7F80206F: ; CODE XREF: ScMMFVerify@16+6Dj ; ScMMFVerify@16+79j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8020AF loc_7F80207B: ; DATA XREF: .text:stru_7F8010A8o mov eax, [ebp+var_20] ; Finally handler 0 for function 7F801F87 mov eax, [eax+54h] test eax, eax jz short loc_7F80208B push eax call sub_7F80CB32 loc_7F80208B: ; CODE XREF: ScMMFVerify@16+FCj call sub_7F81762E mov eax, [ebp+arg_C] test eax, eax jz short loc_7F80209C mov ecx, [ebp+var_24] mov [eax], ecx loc_7F80209C: ; CODE XREF: ScMMFVerify@16+10Ej push [ebp+var_20] call MAPIFreeBuffer@4 call MAPIUninitialize@0 mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_1C] loc_7F8020AF: ; DATA XREF: ScMMFVerify@16+EFo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 10h ScMMFVerify@16 endp ; Exported entry 6. ScMMFMigrateToMDB@48 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall ScMMFMigrateToMDB(HWND hWnd, int, int, int, int, int, int, int, int, int, int, int) public ScMMFMigrateToMDB@48 ScMMFMigrateToMDB@48 proc near ; CODE XREF: sub_7F8081B3+78p ; DATA XREF: .text:off_7F8326A8o var_B0 = byte ptr -0B0h Buffer = byte ptr -70h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h hWnd = dword ptr 8 arg_4 = dword ptr 0Ch lpString = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch arg_28 = dword ptr 30h arg_2C = dword ptr 34h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010B8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 0A0h mov [ebp+var_20], 80004005h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_1C], esi mov [ebp+var_28], esi mov [ebp+var_2C], esi mov [ebp+ms_exc.registration.TryLevel], esi cmp [ebp+arg_2C], esi jz short loc_7F80210A mov eax, [ebp+arg_2C] mov [eax], esi loc_7F80210A: ; CODE XREF: ScMMFMigrateToMDB@48+41j mov ebx, [ebp+arg_4] and ebx, 8 jz short loc_7F802126 push [ebp+hWnd] ; hWnd call ds:IsWindow test eax, eax jz short loc_7F802126 mov [ebp+var_28], 1 loc_7F802126: ; CODE XREF: ScMMFMigrateToMDB@48+4Ej ; ScMMFMigrateToMDB@48+5Bj cmp dword_7F835290, 0 jnz short loc_7F802153 push offset dword_7F835290 push 178h call [ebp+arg_1C] test eax, eax jnz short loc_7F802153 mov ecx, dword_7F835290 mov eax, [ebp+lpString] mov [ecx+8], eax mov [ebp+var_2C], 1 loc_7F802153: ; CODE XREF: ScMMFMigrateToMDB@48+6Bj ; ScMMFMigrateToMDB@48+7Cj push [ebp+arg_28] push [ebp+arg_24] push [ebp+arg_20] push [ebp+arg_1C] push [ebp+hWnd] lea eax, [ebp+var_1C] push eax call sub_7F8026ED mov [ebp+var_20], eax xor edi, edi cmp eax, edi jnz loc_7F802344 push 40h ; cchBufferMax push offset Caption ; lpBuffer push 1513h ; uID mov eax, [ebp+var_1C] push dword ptr [eax+8] ; hInstance call ds:LoadStringA mov ecx, [ebp+var_1C] mov eax, [ebp+arg_10] mov [ecx+84h], eax mov eax, [ebp+arg_4] mov ecx, [ebp+var_1C] mov [ecx+9Ch], eax mov ecx, [ebp+var_1C] mov eax, [ebp+arg_14] mov [ecx+0A0h], eax mov ecx, [ebp+var_1C] mov eax, [ebp+arg_18] mov [ecx+0A4h], eax test ebx, ebx jz short loc_7F8021E3 push [ebp+hWnd] ; hWnd call ds:IsWindow test eax, eax jnz short loc_7F8021E3 mov eax, [ebp+var_1C] mov [eax+4], edi mov [ebp+var_20], 80070057h jmp loc_7F802344 ; --------------------------------------------------------------------------- loc_7F8021E3: ; CODE XREF: ScMMFMigrateToMDB@48+100j ; ScMMFMigrateToMDB@48+10Dj test byte ptr [ebp+arg_4+3], 10h mov eax, [ebp+var_1C] jz short loc_7F8021F8 mov dword ptr [eax+88h], 1 jmp short loc_7F80221E ; --------------------------------------------------------------------------- loc_7F8021F8: ; CODE XREF: ScMMFMigrateToMDB@48+128j mov eax, [eax+9Ch] and eax, 20000000h shr eax, 1Dh push eax ; int mov eax, [ebp+var_1C] push dword ptr [eax+8] ; hInstance push [ebp+lpString] ; int call sub_7F80530D mov ecx, [ebp+var_1C] mov [ecx+88h], eax loc_7F80221E: ; CODE XREF: ScMMFMigrateToMDB@48+134j call sub_7F802896 mov [ebp+var_20], eax xor edi, edi cmp eax, edi jl loc_7F802344 mov eax, [ebp+var_1C] add eax, 4B4h push eax ; int push [ebp+arg_C] ; int push [ebp+lpString] ; lpString mov eax, [ebp+var_1C] add eax, 58h push eax ; int mov eax, [ebp+var_1C] add eax, 54h push eax ; int mov eax, [ebp+var_1C] add eax, 50h push eax ; int call sub_7F8028D4 mov [ebp+var_20], eax cmp eax, edi jnz loc_7F802344 push [ebp+var_1C] call sub_7F802962 mov esi, offset unk_7F8351C8 cmp [esi], edi jz short loc_7F8022A3 mov edi, [ebp+var_30] loc_7F802278: ; CODE XREF: ScMMFMigrateToMDB@48+1DFj push [ebp+var_1C] push esi call sub_7F802C9E mov [ebp+var_20], eax test eax, eax jl loc_7F802344 mov edi, [ebp+var_1C] add edi, 4D0h movzx eax, word ptr [esi+0Ah] add [edi], eax add esi, 10h cmp dword ptr [esi], 0 jnz short loc_7F802278 loc_7F8022A3: ; CODE XREF: ScMMFMigrateToMDB@48+1B1j xor edi, edi cmp [ebp+var_28], edi jz short loc_7F80230B push 40h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1515h ; uID mov eax, [ebp+var_1C] push dword ptr [eax+8] ; hInstance call ds:LoadStringA push 40h ; cchBufferMax lea eax, [ebp+var_B0] push eax ; lpBuffer push 1003h ; uID mov eax, [ebp+var_1C] push dword ptr [eax+8] ; hInstance call ds:LoadStringA mov eax, [ebp+var_1C] push dword ptr [eax+4D0h] ; int lea eax, [ebp+var_B0] push eax ; int lea eax, [ebp+Buffer] push eax ; int mov eax, [ebp+var_1C] push dword ptr [eax+4] ; hWndParent add eax, 14h push eax ; dwInitParam mov eax, [ebp+var_1C] push dword ptr [eax+8] ; int call sub_7F80C5C0 test eax, eax jnz short loc_7F80230B mov [ebp+var_28], edi loc_7F80230B: ; CODE XREF: ScMMFMigrateToMDB@48+1E6j ; ScMMFMigrateToMDB@48+244j mov ecx, [ebp+var_1C] mov eax, [ebp+var_28] mov [ecx+10h], eax mov esi, offset unk_7F8351C8 cmp dword ptr [esi], 0 jz short loc_7F802334 loc_7F80231E: ; CODE XREF: ScMMFMigrateToMDB@48+270j push [ebp+var_1C] push esi call dword ptr [esi+0Ch] mov [ebp+var_20], eax test eax, eax jl short loc_7F802334 add esi, 10h cmp dword ptr [esi], 0 jnz short loc_7F80231E loc_7F802334: ; CODE XREF: ScMMFMigrateToMDB@48+25Aj ; ScMMFMigrateToMDB@48+268j cmp [ebp+var_20], 0 jl short loc_7F802344 mov eax, [ebp+var_1C] mov dword ptr [eax+0Ch], 1 loc_7F802344: ; CODE XREF: ScMMFMigrateToMDB@48+B0j ; ScMMFMigrateToMDB@48+11Cj ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8023DE loc_7F802350: ; DATA XREF: .text:stru_7F8010B8o push [ebp+var_1C] ; Finally handler 0 for function 7F8020C2 call sub_7F802B1B mov eax, [ebp+var_1C] mov eax, [eax+54h] test eax, eax jz short loc_7F802368 push eax call sub_7F80CB32 loc_7F802368: ; CODE XREF: ScMMFMigrateToMDB@48+29Ej call sub_7F81762E mov eax, [ebp+var_1C] cmp dword ptr [eax+10h], 0 jz short loc_7F80237F add eax, 14h push eax call sub_7F80C75D loc_7F80237F: ; CODE XREF: ScMMFMigrateToMDB@48+2B2j mov eax, [ebp+var_1C] test byte ptr [eax+0Ch], 2 jz short loc_7F80238F mov [ebp+var_20], 80040113h loc_7F80238F: ; CODE XREF: ScMMFMigrateToMDB@48+2C4j push [ebp+var_1C] push [ebp+arg_4] push [ebp+arg_2C] call sub_7F8025E7 test byte ptr [ebp+arg_4+3], 10h jnz short loc_7F8023BA mov eax, [ebp+var_1C] mov eax, [eax+9Ch] and eax, 20000000h shr eax, 1Dh push eax call sub_7F805403 loc_7F8023BA: ; CODE XREF: ScMMFMigrateToMDB@48+2DFj xor esi, esi cmp [ebp+var_2C], esi jz short loc_7F8023D0 mov eax, dword_7F835290 push eax call [ebp+arg_24] mov dword_7F835290, esi loc_7F8023D0: ; CODE XREF: ScMMFMigrateToMDB@48+2FDj push [ebp+var_1C] call MAPIFreeBuffer@4 mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_20] loc_7F8023DE: ; DATA XREF: ScMMFMigrateToMDB@48+289o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 30h ScMMFMigrateToMDB@48 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8023F1(void *lp, int, int) sub_7F8023F1 proc near ; DATA XREF: ScMigrateMMFPAB@32+57o Text = byte ptr -140h Buffer = byte ptr -40h lp = dword ptr 8 arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 140h push ebx push esi push edi mov esi, [ebp+lp] xor edi, edi push 538h ; ucb push esi ; lp call ds:IsBadReadPtr test eax, eax jz short loc_7F802419 mov edi, 80004005h jmp short loc_7F802489 ; --------------------------------------------------------------------------- loc_7F802419: ; CODE XREF: sub_7F8023F1+1Fj cmp dword ptr [esi+10h], 0 jz short loc_7F802489 mov eax, [ebp+arg_8] lea ebx, [esi+14h] push ebx mov [esi+24h], eax call sub_7F80C62C test eax, eax jnz short loc_7F802489 push 40h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1513h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA push 0FFh ; cchBufferMax lea ecx, [ebp+Text] push ecx ; lpBuffer push 1001h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA push 2024h ; uType lea ecx, [ebp+Buffer] push ecx ; lpCaption lea edx, [ebp+Text] push edx ; lpText push dword ptr [ebx] ; hWnd call ds:MessageBoxA cmp eax, 6 jnz short loc_7F802489 mov dword ptr [esi+0Ch], 2 mov edi, 80040113h loc_7F802489: ; CODE XREF: sub_7F8023F1+26j ; sub_7F8023F1+2Cj ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8023F1 endp ; Exported entry 8. ScMigrateMMFPAB@32 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall ScMigrateMMFPAB(HWND hWnd, int, int, int, int, int, int, int) public ScMigrateMMFPAB@32 ScMigrateMMFPAB@32 proc near ; DATA XREF: .text:off_7F8326A8o var_8C = byte ptr -8Ch Buffer = byte ptr -4Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h lpFileName = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 8Ch push ebx push esi push edi xor edi, edi mov [ebp+var_4], edi mov [ebp+var_8], edi test byte ptr [ebp+arg_4], 8 mov [ebp+var_C], edi jz short loc_7F8024C3 push [ebp+hWnd] ; hWnd call ds:IsWindow test eax, eax jz short loc_7F8024C3 mov edi, 1 loc_7F8024C3: ; CODE XREF: ScMigrateMMFPAB@32+1Bj ; ScMigrateMMFPAB@32+28j push 0FFFFFFFFh lea ecx, [ebp+var_4] push [ebp+arg_1C] push [ebp+arg_18] push [ebp+arg_14] push [ebp+hWnd] push ecx call sub_7F8026ED mov esi, eax test esi, esi jnz loc_7F8025AA lea eax, [ebp+var_8] push eax ; int push [ebp+var_4] ; int push offset sub_7F8023F1 ; int push 0 ; int push 0 ; int push [ebp+arg_1C] ; int push [ebp+arg_18] ; int push [ebp+arg_14] ; int push [ebp+arg_8] ; int mov ecx, [ebp+var_4] push [ebp+hWnd] ; int push dword ptr [ecx+8] ; int push [ebp+arg_10] ; int push [ebp+lpFileName] ; lpFileName call ScGetPABMigrationContext@52 mov esi, eax test esi, esi jnz loc_7F8025AA lea eax, [ebp+var_C] mov ebx, [ebp+var_8] push eax push [ebp+var_8] call dword ptr [ebx+4] mov esi, eax test esi, esi jnz short loc_7F8025AA test edi, edi jz short loc_7F80258E push 40h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer mov ecx, [ebp+var_4] push 1516h ; uID push dword ptr [ecx+8] ; hInstance call ds:LoadStringA push 40h ; cchBufferMax lea ecx, [ebp+var_8C] push ecx ; lpBuffer mov edx, [ebp+var_4] push 100Ah ; uID push dword ptr [edx+8] ; hInstance call ds:LoadStringA push 0 ; int lea ecx, [ebp+var_8C] push ecx ; int lea edx, [ebp+Buffer] push edx ; int mov eax, [ebp+var_4] push dword ptr [eax+4] ; hWndParent add eax, 14h push eax ; dwInitParam mov eax, [ebp+var_4] push dword ptr [eax+8] ; int call sub_7F80C5C0 test eax, eax jnz short loc_7F80258E xor edi, edi loc_7F80258E: ; CODE XREF: ScMigrateMMFPAB@32+9Fj ; ScMigrateMMFPAB@32+F6j mov eax, [ebp+var_4] push [ebp+arg_4] mov [eax+10h], edi mov eax, [ebp+var_8] mov edx, [ebp+var_C] push dword ptr [edx+8] push dword ptr [edx] push [ebp+var_8] call dword ptr [eax+8] mov esi, eax loc_7F8025AA: ; CODE XREF: ScMigrateMMFPAB@32+4Aj ; ScMigrateMMFPAB@32+84j ... mov eax, [ebp+var_4] cmp dword ptr [eax+10h], 0 jz short loc_7F8025BC add eax, 14h push eax call sub_7F80C75D loc_7F8025BC: ; CODE XREF: ScMigrateMMFPAB@32+11Dj xor edi, edi cmp [ebp+var_8], edi jz short loc_7F8025CE mov eax, [ebp+var_8] push [ebp+var_8] call dword ptr [eax] mov [ebp+var_8], edi loc_7F8025CE: ; CODE XREF: ScMigrateMMFPAB@32+12Dj push [ebp+var_C] call [ebp+arg_1C] push [ebp+var_4] call MAPIFreeBuffer@4 mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h ScMigrateMMFPAB@32 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8025E7 proc near ; CODE XREF: ScMMFMigrateToMDB@48+2D6p var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_7 = byte ptr 0Fh arg_8 = dword ptr 10h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010C8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 10h push ebx push esi push edi xor ebx, ebx mov [ebp+ms_exc.old_esp], esp mov [ebp+var_1C], ebx mov [ebp+ms_exc.registration.TryLevel], ebx mov edi, [ebp+arg_0] cmp edi, ebx jz loc_7F8026CC mov esi, [ebp+arg_8] cmp esi, ebx jz loc_7F8026CC mov eax, [esi+90h] test eax, eax jz loc_7F8026CC cmp [esi+94h], ebx jz loc_7F8026CC cmp [esi+4B0h], ebx jnz short loc_7F802653 test [ebp+arg_7], 80h jz short loc_7F8026CC loc_7F802653: ; CODE XREF: sub_7F8025E7+64j push edi push 14h call eax test eax, eax jl short loc_7F8026CC mov ebx, [edi] mov edi, ebx xor eax, eax stosd stosd stosd stosd stosd mov eax, [esi+4B4h] mov [ebx+0Ch], eax test eax, eax jz short loc_7F80269F lea eax, [ebx+4] push eax push ebx mov edi, 100h push edi call dword ptr [esi+94h] test eax, eax jl short loc_7F80269F push edi ; cchBufferMax push dword ptr [ebx+4] ; lpBuffer mov eax, [ebx+0Ch] add eax, 1100h push eax ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA loc_7F80269F: ; CODE XREF: sub_7F8025E7+8Bj ; sub_7F8025E7+A0j test [ebp+arg_7], 80h jz short loc_7F8026CC lea eax, [ebp+var_1C] push eax push ebx push 3Ch call dword ptr [esi+94h] test eax, eax jl short loc_7F8026CC add esi, 4B8h mov edi, [ebp+var_1C] mov ecx, 0Fh rep movsd mov eax, [ebp+var_1C] mov [ebx+10h], eax loc_7F8026CC: ; CODE XREF: sub_7F8025E7+33j ; sub_7F8025E7+3Ej ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8026DB loc_7F8026D8: ; DATA XREF: .text:stru_7F8010C8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F8025E7 loc_7F8026DB: ; DATA XREF: sub_7F8025E7+ECo mov eax, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, eax pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8025E7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8026ED proc near ; CODE XREF: ScMMFVerify@16+63p ; ScMMFMigrateToMDB@48+A4p ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010D8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 14h mov [ebp+var_1C], eax mov [ebp+var_20], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax lea eax, [ebp+var_1C] push eax push 538h call MAPIAllocateBuffer@8 test eax, eax jz short loc_7F80273C mov [ebp+var_20], 8007000Eh jmp loc_7F802869 ; --------------------------------------------------------------------------- loc_7F80273C: ; CODE XREF: sub_7F8026ED+41j mov edi, [ebp+var_1C] xor eax, eax mov ecx, 14Eh rep stosd mov eax, [ebp+var_1C] xor ecx, ecx mov [eax], ecx mov eax, [ebp+var_1C] mov [eax+50h], ecx mov eax, [ebp+var_1C] mov [eax+54h], ecx mov eax, [ebp+var_1C] mov [eax+88h], ecx mov eax, [ebp+arg_8] cmp eax, ecx jz short loc_7F802773 mov ecx, [ebp+var_1C] mov [ecx+58h], eax jmp short loc_7F80277D ; --------------------------------------------------------------------------- loc_7F802773: ; CODE XREF: sub_7F8026ED+7Cj mov eax, [ebp+var_1C] mov dword ptr [eax+58h], offset MAPIAllocateBuffer@8 loc_7F80277D: ; CODE XREF: sub_7F8026ED+84j mov eax, [ebp+arg_C] test eax, eax jz short loc_7F80278C mov ecx, [ebp+var_1C] mov [ecx+5Ch], eax jmp short loc_7F802796 ; --------------------------------------------------------------------------- loc_7F80278C: ; CODE XREF: sub_7F8026ED+95j mov eax, [ebp+var_1C] mov dword ptr [eax+5Ch], offset MAPIAllocateMore@12 loc_7F802796: ; CODE XREF: sub_7F8026ED+9Dj mov eax, [ebp+arg_10] test eax, eax jz short loc_7F8027A5 mov ecx, [ebp+var_1C] mov [ecx+60h], eax jmp short loc_7F8027AF ; --------------------------------------------------------------------------- loc_7F8027A5: ; CODE XREF: sub_7F8026ED+AEj mov eax, [ebp+var_1C] mov dword ptr [eax+60h], offset MAPIFreeBuffer@4 loc_7F8027AF: ; CODE XREF: sub_7F8026ED+B6j mov eax, [ebp+arg_14] test eax, eax jnz short loc_7F8027BB call MAPIGetDefaultMalloc@0 loc_7F8027BB: ; CODE XREF: sub_7F8026ED+C7j mov ecx, [ebp+var_1C] mov [ecx+64h], eax mov esi, [ebp+arg_4] mov eax, [ebp+var_1C] mov [eax+68h], esi mov eax, [ebp+var_1C] mov eax, [eax+58h] mov ecx, [ebp+var_1C] mov [ecx+90h], eax mov eax, [ebp+var_1C] mov ecx, [eax+5Ch] mov [eax+94h], ecx mov eax, [ebp+var_1C] mov eax, [eax+60h] mov ecx, [ebp+var_1C] mov [ecx+98h], eax push offset ModuleName ; "mmfmig32.dll" call ds:GetModuleHandleA mov ecx, [ebp+var_1C] mov [ecx+8], eax mov eax, [ebp+var_1C] add eax, 8 cmp dword ptr [eax], 0 jnz short loc_7F802821 cmp hInstance, 0 jz short loc_7F802821 mov ecx, hInstance mov [eax], ecx loc_7F802821: ; CODE XREF: sub_7F8026ED+121j ; sub_7F8026ED+12Aj mov eax, [ebp+var_1C] mov [eax+4], esi mov eax, [ebp+var_1C] mov dword ptr [eax+4FCh], offset sub_7F80397D mov eax, [ebp+var_1C] add eax, 0ACh mov ecx, [ebp+var_1C] mov [ecx+0A8h], eax xor eax, eax cmp eax, 100h jnb short loc_7F802869 shl eax, 2 loc_7F802851: ; CODE XREF: sub_7F8026ED+17Aj mov ecx, [ebp+var_1C] mov dword ptr [ecx+eax+0ACh], 0F00h add eax, 4 cmp eax, 400h jb short loc_7F802851 loc_7F802869: ; CODE XREF: sub_7F8026ED+4Aj ; sub_7F8026ED+15Fj mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F802883 loc_7F802875: ; DATA XREF: .text:stru_7F8010D8o mov ecx, [ebp+var_1C] ; Finally handler 0 for function 7F8026ED mov eax, [ebp+arg_0] mov [eax], ecx mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_20] loc_7F802883: ; DATA XREF: sub_7F8026ED+183o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F8026ED endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F802896 proc near ; CODE XREF: ScMMFVerify@16+6Fp ; ScMMFMigrateToMDB@48:loc_7F80221Ep var_3C = byte ptr -3Ch var_24 = byte ptr -24h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 3Ch lea eax, [ebp+var_3C] push eax call sub_7F80FD0E lea eax, [ebp+var_24] push eax call sub_7F80FCE4 lea eax, [ebp+var_3C] lea ecx, [ebp+var_24] lea edx, [ebp+var_C] mov [ebp+var_C], eax push edx mov [ebp+var_8], ecx mov [ebp+var_4], 0 call sub_7F8173E6 push eax call sub_7F80F8B4 mov esp, ebp pop ebp retn sub_7F802896 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8028D4(int, int, int, LPCSTR lpString, int, int) sub_7F8028D4 proc near ; CODE XREF: ScMMFVerify@16+9Ap ; ScMMFMigrateToMDB@48+192p var_20 = byte ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h lpString = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010E8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 10h mov [ebp+var_1C], 80004005h push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp xor edi, edi mov [ebp+ms_exc.registration.TryLevel], edi mov esi, [ebp+arg_0] push esi lea eax, [ebp+var_20] push eax push [ebp+arg_14] push 20h push [ebp+arg_10] push edi push [ebp+lpString] call sub_7F80F91C mov [ebp+var_1C], eax cmp eax, edi jl short loc_7F80293D push [ebp+arg_4] ; int push edi ; int push edi ; int push edi ; int push edi ; int push [ebp+lpString] ; lpString push dword ptr [esi] ; int push [ebp+arg_8] ; int call sub_7F80C96E mov [ebp+var_1C], eax loc_7F80293D: ; CODE XREF: sub_7F8028D4+50j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F80294F loc_7F802949: ; DATA XREF: .text:stru_7F8010E8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F8028D4 mov eax, [ebp+var_1C] loc_7F80294F: ; DATA XREF: sub_7F8028D4+70o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F8028D4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F802962 proc near ; CODE XREF: ScMMFMigrateToMDB@48+1A5p SystemInfo = _SYSTEM_INFO ptr -60h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8010F8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 50h mov [ebp+var_1C], eax mov [ebp+var_20], eax mov [ebp+var_24], 80004005h push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax mov esi, [ebp+arg_0] test byte ptr [esi+9Fh], 40h jnz short loc_7F8029AE mov [ebp+var_24], eax jmp loc_7F802AF6 ; --------------------------------------------------------------------------- loc_7F8029AE: ; CODE XREF: sub_7F802962+42j lea eax, [ebp+SystemInfo] push eax ; lpSystemInfo call ds:GetSystemInfo mov eax, [ebp+SystemInfo.dwNumberOfProcessors] shl eax, 2 mov [ebp+var_20], eax lea eax, [esi+510h] push eax ; lpCriticalSection call ds:InitializeCriticalSection xor ebx, ebx push ebx ; lpName push 1 ; bInitialState push 1 ; bManualReset push ebx ; lpEventAttributes call ds:CreateEventA mov [esi+50Ch], eax cmp eax, ebx jz loc_7F802AF6 test esi, esi lea eax, [esi+504h] push eax jnz short loc_7F802A04 mov eax, [ebp+var_20] inc eax shl eax, 4 push eax call MAPIAllocateBuffer@8 jmp short loc_7F802A12 ; --------------------------------------------------------------------------- loc_7F802A04: ; CODE XREF: sub_7F802962+91j push esi mov eax, [ebp+var_20] inc eax shl eax, 4 push eax call MAPIAllocateMore@12 loc_7F802A12: ; CODE XREF: sub_7F802962+A0j mov [ebp+var_34], eax cmp [ebp+var_34], 0 jnz loc_7F802AF6 mov eax, [ebp+var_20] inc eax mov [ebp+var_28], eax mov ecx, eax shl ecx, 4 mov edi, [esi+504h] xor eax, eax shr ecx, 2 rep stosd test esi, esi lea ebx, [esi+508h] push ebx jnz short loc_7F802A51 mov eax, [ebp+var_28] shl eax, 2 push eax call MAPIAllocateBuffer@8 jmp short loc_7F802A5E ; --------------------------------------------------------------------------- loc_7F802A51: ; CODE XREF: sub_7F802962+DFj push esi mov eax, [ebp+var_28] shl eax, 2 push eax call MAPIAllocateMore@12 loc_7F802A5E: ; CODE XREF: sub_7F802962+EDj mov [ebp+var_30], eax xor edx, edx cmp [ebp+var_30], edx jnz loc_7F802AF6 mov ecx, [ebp+var_28] shl ecx, 2 mov edi, [ebx] xor eax, eax shr ecx, 2 rep stosd mov [ebp+var_1C], edx mov edi, [esi+504h] mov ecx, [ebx] mov [ebp+var_2C], ecx cmp edx, [ebp+var_20] jnb short loc_7F802AD0 loc_7F802A8E: ; CODE XREF: sub_7F802962+16Cj mov [edi+0Ch], esi xor ebx, ebx push ebx ; lpName push ebx ; bInitialState push 1 ; bManualReset push ebx ; lpEventAttributes call ds:CreateEventA mov [edi+4], eax cmp eax, ebx jz short loc_7F802AD0 push edi ; lpThreadId push ebx ; dwCreationFlags push edi ; lpParameter push offset StartAddress ; lpStartAddress push ebx ; dwStackSize push ebx ; lpThreadAttributes call ds:CreateThread mov ecx, [ebp+var_2C] mov [ecx], eax cmp eax, ebx jz short loc_7F802AD0 inc [ebp+var_1C] add edi, 10h add [ebp+var_2C], 4 mov eax, [ebp+var_1C] cmp eax, [ebp+var_20] jb short loc_7F802A8E loc_7F802AD0: ; CODE XREF: sub_7F802962+12Aj ; sub_7F802962+141j ... xor eax, eax cmp [ebp+var_1C], eax jnz short loc_7F802ADC mov [ebp+var_24], eax jmp short loc_7F802AF6 ; --------------------------------------------------------------------------- loc_7F802ADC: ; CODE XREF: sub_7F802962+173j mov eax, [ebp+var_1C] mov [esi+500h], eax mov dword ptr [esi+4FCh], offset sub_7F803AA5 mov [ebp+var_24], 0 loc_7F802AF6: ; CODE XREF: sub_7F802962+47j ; sub_7F802962+82j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F802B08 loc_7F802B02: ; DATA XREF: .text:stru_7F8010F8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F802962 mov eax, [ebp+var_24] loc_7F802B08: ; DATA XREF: sub_7F802962+19Bo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F802962 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F802B1B proc near ; CODE XREF: ScMMFMigrateToMDB@48+291p var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801108 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 20h mov [ebp+var_24], 80004005h push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp xor eax, eax mov [ebp+ms_exc.registration.TryLevel], eax mov esi, [ebp+arg_0] test byte ptr [esi+9Fh], 40h jnz short loc_7F802B61 mov [ebp+var_24], eax jmp loc_7F802C38 ; --------------------------------------------------------------------------- loc_7F802B61: ; CODE XREF: sub_7F802B1B+3Cj cmp dword ptr [esi+0Ch], 0 jnz short loc_7F802B6E mov dword ptr [esi+0Ch], 4 loc_7F802B6E: ; CODE XREF: sub_7F802B1B+4Aj mov eax, [esi+504h] test eax, eax jz loc_7F802C1A xor edi, edi mov [ebp+var_1C], eax lea ebx, [esi+500h] cmp [ebx], edi jbe short loc_7F802BA5 loc_7F802B8B: ; CODE XREF: sub_7F802B1B+88j mov eax, [ebp+var_1C] mov eax, [eax+4] test eax, eax jz short loc_7F802B9C push eax ; hEvent call ds:SetEvent loc_7F802B9C: ; CODE XREF: sub_7F802B1B+78j inc edi add [ebp+var_1C], 10h cmp [ebx], edi ja short loc_7F802B8B loc_7F802BA5: ; CODE XREF: sub_7F802B1B+6Ej mov ecx, [esi+508h] test ecx, ecx jz short loc_7F802BC6 mov eax, [ebx] test eax, eax jz short loc_7F802BC6 push 0FFh ; dwWakeMask push 0FFFFFFFFh ; dwMilliseconds push 1 ; fWaitAll push ecx ; pHandles push eax ; nCount push esi ; int call sub_7F803A19 loc_7F802BC6: ; CODE XREF: sub_7F802B1B+92j ; sub_7F802B1B+98j xor edi, edi cmp [ebx], edi jbe short loc_7F802BF1 lea eax, ds:0[edi*4] mov [ebp+var_2C], eax loc_7F802BD6: ; CODE XREF: sub_7F802B1B+D4j mov ecx, [esi+508h] mov eax, [ebp+var_2C] push dword ptr [ecx+eax] ; hObject call ds:CloseHandle add [ebp+var_2C], 4 inc edi cmp [ebx], edi ja short loc_7F802BD6 loc_7F802BF1: ; CODE XREF: sub_7F802B1B+AFj xor edi, edi mov eax, [esi+504h] mov [ebp+var_1C], eax cmp [ebx], edi jbe short loc_7F802C1A loc_7F802C00: ; CODE XREF: sub_7F802B1B+FDj mov eax, [ebp+var_1C] mov eax, [eax+4] test eax, eax jz short loc_7F802C11 push eax ; hObject call ds:CloseHandle loc_7F802C11: ; CODE XREF: sub_7F802B1B+EDj inc edi add [ebp+var_1C], 10h cmp [ebx], edi ja short loc_7F802C00 loc_7F802C1A: ; CODE XREF: sub_7F802B1B+5Bj ; sub_7F802B1B+E3j mov eax, [esi+50Ch] test eax, eax jz short loc_7F802C2B push eax ; hObject call ds:CloseHandle loc_7F802C2B: ; CODE XREF: sub_7F802B1B+107j add esi, 510h push esi ; lpCriticalSection call ds:DeleteCriticalSection loc_7F802C38: ; CODE XREF: sub_7F802B1B+41j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F802C4A loc_7F802C44: ; DATA XREF: .text:stru_7F801108o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F802B1B mov eax, [ebp+var_24] loc_7F802C4A: ; DATA XREF: sub_7F802B1B+124o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F802B1B endp ; =============== S U B R O U T I N E ======================================= sub_7F802C5D proc near ; CODE XREF: sub_7F802DB7+570p ; sub_7F8035B3+1E5p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, 8004010Dh jl short loc_7F802C92 cmp eax, 8004010Eh jle short loc_7F802C96 cmp eax, 80040115h jl short loc_7F802C92 cmp eax, 80040116h jle short loc_7F802C96 cmp eax, 80040119h jz short loc_7F802C96 cmp eax, 80040600h jz short loc_7F802C96 cmp eax, 8007000Eh jz short loc_7F802C96 loc_7F802C92: ; CODE XREF: sub_7F802C5D+9j ; sub_7F802C5D+17j xor eax, eax jmp short locret_7F802C9B ; --------------------------------------------------------------------------- loc_7F802C96: ; CODE XREF: sub_7F802C5D+10j ; sub_7F802C5D+1Ej ... mov eax, 1 locret_7F802C9B: ; CODE XREF: sub_7F802C5D+37j retn 4 sub_7F802C5D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F802C9E proc near ; CODE XREF: ScMMFVerify@16+BAp ; ScMMFMigrateToMDB@48+1BAp var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor ebx, ebx mov edi, [ebp+arg_0] push ebx mov [edi+0Ah], bx push ebx lea eax, [ebp+var_8] mov [ebp+var_10], ebx push eax mov ecx, [ebp+arg_4] push ebx mov [ebp+var_C], ebx push edi mov [ebp+var_8], ebx push dword ptr [ecx+50h] call sub_7F81197C push eax call sub_7F80F8B4 mov esi, eax test esi, esi jl loc_7F802D95 lea eax, [edi+8] push eax push ebx push [ebp+var_8] call sub_7F811C6F mov [ebp+var_2], bx cmp [edi+8], bx jbe loc_7F802D93 xor esi, esi loc_7F802CF9: ; CODE XREF: sub_7F802C9E+EFj mov [ebp+var_4], si lea eax, [ebp+var_10] push eax mov [ebp+var_14], esi push [ebp+var_8] call sub_7F811C96 cmp ebx, [ebp+var_10] jnb short loc_7F802D2C push [ebp+var_C] call MAPIFreeBuffer@4 lea eax, [ebp+var_C] push eax push [ebp+var_10] call MAPIAllocateBuffer@8 test eax, eax jnz short loc_7F802D73 mov ebx, [ebp+var_10] loc_7F802D2C: ; CODE XREF: sub_7F802C9E+71j lea eax, [ebp+var_10] push eax push [ebp+var_C] push [ebp+var_8] call sub_7F811CD9 push eax call sub_7F80F8B4 test eax, eax jl short loc_7F802D73 push esi lea eax, [ebp+var_14] push esi mov edx, [ebp+arg_4] push eax push esi push [ebp+var_C] push dword ptr [edx+50h] call sub_7F81197C test eax, eax jnz short loc_7F802D73 lea eax, [ebp+var_4] push eax push esi push [ebp+var_14] call sub_7F811C6F mov cx, [ebp+var_4] add [edi+0Ah], cx loc_7F802D73: ; CODE XREF: sub_7F802C9E+89j ; sub_7F802C9E+A5j ... cmp [ebp+var_14], esi jz short loc_7F802D81 lea eax, [ebp+var_14] push eax call sub_7F811B7E loc_7F802D81: ; CODE XREF: sub_7F802C9E+D8j inc [ebp+var_2] mov ax, [ebp+var_2] cmp [edi+8], ax ja loc_7F802CF9 loc_7F802D93: ; CODE XREF: sub_7F802C9E+53j xor esi, esi loc_7F802D95: ; CODE XREF: sub_7F802C9E+38j push [ebp+var_C] call MAPIFreeBuffer@4 cmp [ebp+var_8], 0 jz short loc_7F802DAC lea eax, [ebp+var_8] push eax call sub_7F811B7E loc_7F802DAC: ; CODE XREF: sub_7F802C9E+103j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F802C9E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F802DB7 proc near ; CODE XREF: sub_7F8034C3+21p var_C4 = dword ptr -0C4h var_C0 = dword ptr -0C0h var_BC = dword ptr -0BCh var_B8 = dword ptr -0B8h var_B4 = dword ptr -0B4h var_B0 = dword ptr -0B0h var_A8 = dword ptr -0A8h var_A4 = byte ptr -0A4h var_98 = dword ptr -98h var_90 = dword ptr -90h var_88 = dword ptr -88h var_84 = dword ptr -84h var_80 = dword ptr -80h var_70 = dword ptr -70h var_6C = dword ptr -6Ch var_64 = dword ptr -64h var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch dwInitParam = dword ptr -38h var_34 = dword ptr -34h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = word ptr -20h var_1E = dword ptr -1Eh var_1A = word ptr -1Ah ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801118 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 0B4h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_58], esi mov [ebp+var_40], esi mov [ebp+var_2C], esi mov [ebp+var_20], si mov [ebp+var_28], esi mov word ptr [ebp+var_1E], si mov [ebp+var_54], esi mov word ptr [ebp+var_1E+2], si mov eax, [ebp+arg_4] mov [ebp+var_1A], si mov [ebp+var_34], esi mov ebx, [eax+84h] mov ecx, [eax+54h] mov [ebp+var_24], 80004005h mov [ebp+var_A8], ecx mov [ebp+ms_exc.registration.TryLevel], esi add eax, 0A8h mov [ebp+var_44], eax add dword ptr [eax], 4 mov eax, [ebp+arg_4] inc dword ptr [eax+4ACh] mov eax, [ebp+var_44] mov eax, [eax] mov dword ptr [eax], 0F03h mov eax, [ebp+arg_4] add eax, 50h mov [ebp+var_80], eax push esi push esi lea eax, [ebp+var_40] push eax push esi push [ebp+arg_0] mov eax, [ebp+var_80] push dword ptr [eax] call sub_7F81197C push eax call sub_7F80F8B4 mov [ebp+var_24], eax cmp eax, esi jl loc_7F803374 lea eax, [ebp+var_20] push eax push esi push [ebp+var_40] call sub_7F811C6F mov dword_7F8351C0, esi loc_7F802E80: ; CODE XREF: sub_7F802DB7+F6j lea eax, [ebp+var_58] push eax mov eax, [ebp+arg_0] push dword ptr [eax+4] push ebx call HrGetOneProp@12 test eax, eax jge short loc_7F802EAF mov [ebp+var_24], eax push eax ; dwInitParam push ebx ; int mov eax, [ebp+arg_4] push dword ptr [eax+8] ; hInstance push eax ; int call sub_7F805168 test eax, eax jz loc_7F803374 jmp short loc_7F802E80 ; --------------------------------------------------------------------------- loc_7F802EAF: ; CODE XREF: sub_7F802DB7+DBj mov dword_7F8351C0, 0 loc_7F802EB9: ; CODE XREF: sub_7F802DB7+13Dj lea eax, [ebp+var_28] push eax lea eax, [ebp+var_B4] push eax push 1 push 0 mov eax, [ebp+var_58] push dword ptr [eax+0Ch] push dword ptr [eax+8] push ebx mov eax, [ebx] call dword ptr [eax+44h] test eax, eax jge short loc_7F802EF6 mov [ebp+var_24], eax push eax ; dwInitParam push ebx ; int mov eax, [ebp+arg_4] push dword ptr [eax+8] ; hInstance push eax ; int call sub_7F805168 test eax, eax jz loc_7F803374 jmp short loc_7F802EB9 ; --------------------------------------------------------------------------- loc_7F802EF6: ; CODE XREF: sub_7F802DB7+122j cmp [ebp+var_B4], 3 jz short loc_7F802F0B mov [ebp+var_24], 80040600h jmp loc_7F803374 ; --------------------------------------------------------------------------- loc_7F802F0B: ; CODE XREF: sub_7F802DB7+146j lea eax, [ebp+var_2C] push eax mov eax, [ebp+arg_0] movzx eax, word ptr [eax+8] lea eax, ds:8[eax*8] push eax call MAPIAllocateBuffer@8 test eax, eax jz short loc_7F802F33 mov [ebp+var_24], 8007000Eh jmp loc_7F803374 ; --------------------------------------------------------------------------- loc_7F802F33: ; CODE XREF: sub_7F802DB7+16Ej mov eax, [ebp+arg_0] movzx eax, word ptr [eax+8] lea ecx, ds:8[eax*8] mov edi, [ebp+var_2C] xor eax, eax shr ecx, 2 rep stosd mov word ptr [ebp+var_1E+2], ax mov cx, ax mov eax, [ebp+arg_0] cmp [eax+8], cx jbe loc_7F80336D mov eax, [ebp+arg_4] add eax, 0Ch mov [ebp+var_B0], eax loc_7F802F6B: ; CODE XREF: sub_7F802DB7+5B0j xor ecx, ecx mov eax, [ebp+var_B0] cmp [eax], ecx jnz loc_7F80336D mov [ebp+var_88], ecx mov [ebp+var_50], ecx mov [ebp+var_4C], ecx mov [ebp+var_3C], ecx mov [ebp+var_48], ecx mov [ebp+var_24], 80004005h mov edx, [ebp+arg_4] add edx, 4F8h mov [ebp+var_6C], edx mov [edx], ecx lea eax, [ebp+var_54] push eax push [ebp+var_40] call sub_7F811C96 cmp esi, [ebp+var_54] jnb short loc_7F802FDA push [ebp+var_34] call MAPIFreeBuffer@4 lea eax, [ebp+var_34] push eax push [ebp+var_54] call MAPIAllocateBuffer@8 test eax, eax jz short loc_7F802FD7 mov [ebp+var_24], 8007000Eh jmp loc_7F803337 ; --------------------------------------------------------------------------- loc_7F802FD7: ; CODE XREF: sub_7F802DB7+212j mov esi, [ebp+var_54] loc_7F802FDA: ; CODE XREF: sub_7F802DB7+1FAj lea eax, [ebp+var_54] push eax push [ebp+var_34] push [ebp+var_40] call sub_7F811CD9 test eax, eax jnz loc_7F803358 mov eax, [ebp+var_34] lea ecx, [eax+8] mov [ebp+var_50], ecx mov ax, [ebp+var_1A] cmp [ecx], ax jbe short loc_7F803067 movzx eax, ax lea edx, ds:0[eax*8] mov [ebp+var_98], edx mov eax, [ebp+var_2C] mov eax, [edx+eax] test eax, eax jz short loc_7F803023 push eax mov eax, [eax] call dword ptr [eax+8] loc_7F803023: ; CODE XREF: sub_7F802DB7+264j mov ecx, [ebp+var_2C] mov edx, [ebp+var_98] mov dword ptr [edx+ecx], 0 inc [ebp+var_1A] movzx eax, [ebp+var_1A] shl eax, 3 mov ecx, [ebp+var_28] mov edx, [ebp+var_2C] mov [eax+edx+4], ecx push offset unk_7F83D080 push 8 push [ebp+var_28] add eax, [ebp+var_2C] push eax push [ebp+arg_4] call sub_7F804C4A test eax, eax jnz short loc_7F8030DF jmp loc_7F803337 ; --------------------------------------------------------------------------- loc_7F803067: ; CODE XREF: sub_7F802DB7+24Aj cmp [ebp+var_28], 0 jz short loc_7F803078 push [ebp+var_28] mov eax, [ebp+var_28] mov eax, [eax] call dword ptr [eax+8] loc_7F803078: ; CODE XREF: sub_7F802DB7+2B4j mov [ebp+var_28], 0 mov ax, [ebp+var_1A] mov ecx, [ebp+var_50] cmp [ecx], ax jnb short loc_7F8030DF loc_7F80308B: ; CODE XREF: sub_7F802DB7+326j movzx eax, [ebp+var_1A] lea ecx, ds:0[eax*8] mov [ebp+var_64], ecx mov eax, [ebp+var_2C] mov eax, [ecx+eax] test eax, eax jz short loc_7F8030A9 push eax mov eax, [eax] call dword ptr [eax+8] loc_7F8030A9: ; CODE XREF: sub_7F802DB7+2EAj mov eax, [ebp+var_2C] mov ecx, [ebp+var_64] mov eax, [ecx+eax+4] test eax, eax jz short loc_7F8030BD push eax mov eax, [eax] call dword ptr [eax+8] loc_7F8030BD: ; CODE XREF: sub_7F802DB7+2FEj mov eax, [ebp+var_2C] xor edx, edx mov ecx, [ebp+var_64] mov [ecx+eax], edx mov eax, [ebp+var_2C] mov [ecx+eax+4], edx dec [ebp+var_1A] mov ax, [ebp+var_1A] mov ecx, [ebp+var_50] cmp [ecx], ax jb short loc_7F80308B loc_7F8030DF: ; CODE XREF: sub_7F802DB7+2A9j ; sub_7F802DB7+2D2j mov dword_7F8351C0, 0 loc_7F8030E9: ; CODE XREF: sub_7F802DB7+378j lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_88] push eax push offset unk_7F83D040 push [ebp+var_A8] push 0 push [ebp+var_50] mov eax, [ebp+var_34] push dword ptr [eax] call sub_7F80CBB5 test eax, eax jge short loc_7F803131 mov [ebp+var_24], eax push eax ; dwInitParam push 1106h ; uID mov eax, [ebp+arg_4] push dword ptr [eax+8] ; hInstance push eax ; int call sub_7F80504F test eax, eax jz loc_7F803337 jmp short loc_7F8030E9 ; --------------------------------------------------------------------------- loc_7F803131: ; CODE XREF: sub_7F802DB7+359j mov eax, [ebp+var_4C] cmp dword ptr [eax], 3001001Eh jnz short loc_7F803144 mov eax, [eax+8] mov edx, [ebp+var_6C] mov [edx], eax loc_7F803144: ; CODE XREF: sub_7F802DB7+383j xor ecx, ecx mov [ebp+var_28], ecx mov eax, [ebp+var_34] mov eax, [eax] cmp eax, 626E4982h jz short loc_7F80316F cmp eax, 74685382h jz short loc_7F803178 cmp eax, 74735782h jz short loc_7F803181 cmp eax, 74754F82h jz short loc_7F80318A mov [ebp+var_3C], ecx jmp short loc_7F803191 ; --------------------------------------------------------------------------- loc_7F80316F: ; CODE XREF: sub_7F802DB7+39Cj mov [ebp+var_3C], 0FFFFFFFFh jmp short loc_7F803191 ; --------------------------------------------------------------------------- loc_7F803178: ; CODE XREF: sub_7F802DB7+3A3j mov [ebp+var_3C], 35E40102h jmp short loc_7F803191 ; --------------------------------------------------------------------------- loc_7F803181: ; CODE XREF: sub_7F802DB7+3AAj mov [ebp+var_3C], 35E30102h jmp short loc_7F803191 ; --------------------------------------------------------------------------- loc_7F80318A: ; CODE XREF: sub_7F802DB7+3B1j mov [ebp+var_3C], 35E20102h loc_7F803191: ; CODE XREF: sub_7F802DB7+3B6j ; sub_7F802DB7+3BFj ... xor eax, eax cmp [ebp+var_3C], eax jz loc_7F803262 mov dword_7F8351C0, eax loc_7F8031A1: ; CODE XREF: sub_7F802DB7+4A6j cmp [ebp+var_3C], 0FFFFFFFFh jnz short loc_7F8031F6 xor edi, edi mov [ebp+var_90], edi mov [ebp+var_70], edi push edi lea eax, [ebp+var_70] push eax lea eax, [ebp+var_90] push eax push edi push offset unk_7F835204 push ebx mov eax, [ebx] call dword ptr [eax+4Ch] mov [ebp+dwInitParam], eax cmp eax, edi jl short loc_7F8031F1 lea eax, [ebp+var_28] push eax lea eax, [ebp+var_A4] push eax push 1 push edi push [ebp+var_70] push [ebp+var_90] push ebx mov eax, [ebx] call dword ptr [eax+44h] mov [ebp+dwInitParam], eax loc_7F8031F1: ; CODE XREF: sub_7F802DB7+418j push [ebp+var_70] jmp short loc_7F803232 ; --------------------------------------------------------------------------- loc_7F8031F6: ; CODE XREF: sub_7F802DB7+3EEj xor edi, edi mov [ebp+var_5C], edi lea eax, [ebp+var_5C] push eax push [ebp+var_3C] push ebx call HrGetOneProp@12 mov [ebp+dwInitParam], eax cmp eax, edi jl short loc_7F80322F lea eax, [ebp+var_28] push eax lea eax, [ebp+var_A4] push eax push 1 push edi mov eax, [ebp+var_5C] push dword ptr [eax+0Ch] push dword ptr [eax+8] push ebx mov eax, [ebx] call dword ptr [eax+44h] mov [ebp+dwInitParam], eax loc_7F80322F: ; CODE XREF: sub_7F802DB7+456j push [ebp+var_5C] loc_7F803232: ; CODE XREF: sub_7F802DB7+43Dj mov eax, [ebp+arg_4] call dword ptr [eax+98h] cmp [ebp+dwInitParam], 0 jge short loc_7F803262 mov eax, [ebp+dwInitParam] mov [ebp+var_24], eax push eax ; dwInitParam push ebx ; int mov eax, [ebp+arg_4] push dword ptr [eax+8] ; hInstance push eax ; int call sub_7F805168 test eax, eax jz loc_7F803337 jmp loc_7F8031A1 ; --------------------------------------------------------------------------- loc_7F803262: ; CODE XREF: sub_7F802DB7+3DFj ; sub_7F802DB7+488j cmp [ebp+var_28], 0 jnz short loc_7F8032DE movzx eax, [ebp+var_1A] lea ecx, ds:0[eax*8] mov [ebp+var_84], ecx mov eax, [ebp+var_2C] add eax, ecx push 1 ; int mov edx, [ebp+var_6C] push dword ptr [edx] ; lpString1 push dword ptr [eax+4] ; int push dword ptr [eax] ; int lea eax, [ebp+var_28] push eax ; int push [ebp+arg_4] ; int call sub_7F804A93 test eax, eax jz loc_7F803337 cmp [ebp+var_28], 0 jnz short loc_7F8032D5 push [ebp+var_4C] push [ebp+var_88] mov eax, [ebp+var_2C] mov ecx, [ebp+var_84] push dword ptr [ecx+eax+4] lea eax, [ebp+var_28] push eax push [ebp+arg_4] call sub_7F8034ED test eax, eax jz short loc_7F803337 mov eax, [ebp+arg_4] inc dword ptr [eax+4CCh] jmp short loc_7F8032DE ; --------------------------------------------------------------------------- loc_7F8032D5: ; CODE XREF: sub_7F802DB7+4EBj mov eax, [ebp+arg_4] inc dword ptr [eax+4C8h] loc_7F8032DE: ; CODE XREF: sub_7F802DB7+4AFj ; sub_7F802DB7+51Cj xor edi, edi push edi push edi lea eax, [ebp+var_48] push eax push edi push [ebp+var_34] mov eax, [ebp+var_80] push dword ptr [eax] call sub_7F81197C test eax, eax jnz short loc_7F803337 lea eax, [ebp+var_1E] push eax push edi push [ebp+var_48] call sub_7F811C6F cmp word ptr [ebp+var_1E], di jz short loc_7F803330 push [ebp+var_1E] push [ebp+var_48] push [ebp+var_28] push [ebp+arg_4] call sub_7F8035B3 mov [ebp+var_24], eax cmp eax, 80040113h jz short loc_7F803337 push eax call sub_7F802C5D test eax, eax jnz short loc_7F803337 loc_7F803330: ; CODE XREF: sub_7F802DB7+552j mov [ebp+var_24], 0 loc_7F803337: ; CODE XREF: sub_7F802DB7+21Bj ; sub_7F802DB7+2ABj ... push [ebp+var_4C] mov eax, [ebp+arg_4] call dword ptr [eax+98h] cmp [ebp+var_48], 0 jz short loc_7F803352 lea eax, [ebp+var_48] push eax call sub_7F811B7E loc_7F803352: ; CODE XREF: sub_7F802DB7+590j cmp [ebp+var_24], 0 jnz short loc_7F803374 loc_7F803358: ; CODE XREF: sub_7F802DB7+234j inc word ptr [ebp+var_1E+2] mov cx, word ptr [ebp+var_1E+2] mov eax, [ebp+arg_0] cmp [eax+8], cx ja loc_7F802F6B loc_7F80336D: ; CODE XREF: sub_7F802DB7+1A2j ; sub_7F802DB7+1BEj mov [ebp+var_24], 0 loc_7F803374: ; CODE XREF: sub_7F802DB7+B0j ; sub_7F802DB7+F0j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8034B0 loc_7F803380: ; DATA XREF: .text:stru_7F801118o mov eax, [ebp+arg_4] ; Finally handler 0 for function 7F802DB7 cmp dword ptr [eax+500h], 0 jz short loc_7F8033FB lea ebx, [eax+510h] lea esi, [eax+528h] mov edi, [ebp+var_B8] loc_7F80339E: ; CODE XREF: sub_7F802DB7+642j push ebx ; lpCriticalSection call ds:EnterCriticalSection cmp dword ptr [esi], 0 jnz short loc_7F8033BB mov eax, [ebp+arg_4] cmp dword ptr [eax+52Ch], 0 mov edi, 1 jz short loc_7F8033BD loc_7F8033BB: ; CODE XREF: sub_7F802DB7+5F1j xor edi, edi loc_7F8033BD: ; CODE XREF: sub_7F802DB7+602j test edi, edi jnz short loc_7F8033D0 mov eax, [ebp+arg_4] push dword ptr [eax+50Ch] ; hEvent call ds:ResetEvent loc_7F8033D0: ; CODE XREF: sub_7F802DB7+608j push ebx ; lpCriticalSection call ds:LeaveCriticalSection test edi, edi jnz short loc_7F8033FB push 0FFh ; dwWakeMask push 0FFFFFFFFh ; dwMilliseconds push 0 ; fWaitAll mov eax, [ebp+arg_4] add eax, 50Ch push eax ; pHandles push 1 ; nCount push [ebp+arg_4] ; int call sub_7F803A19 test edi, edi jz short loc_7F80339E loc_7F8033FB: ; CODE XREF: sub_7F802DB7+5D3j ; sub_7F802DB7+622j cmp [ebp+var_28], 0 jz short loc_7F80340C push [ebp+var_28] mov eax, [ebp+var_28] mov eax, [eax] call dword ptr [eax+8] loc_7F80340C: ; CODE XREF: sub_7F802DB7+648j cmp [ebp+var_2C], 0 jz short loc_7F803465 cmp [ebp+var_1A], 0 jz short loc_7F80345D mov edi, [ebp+var_BC] mov esi, [ebp+var_C0] mov ebx, [ebp+var_C4] loc_7F80342B: ; CODE XREF: sub_7F802DB7+6A4j movzx eax, [ebp+var_1A] lea edi, ds:0[eax*8] mov eax, [ebp+var_2C] mov ebx, [edi+eax] test ebx, ebx jz short loc_7F803446 push ebx mov eax, [ebx] call dword ptr [eax+8] loc_7F803446: ; CODE XREF: sub_7F802DB7+687j mov eax, [ebp+var_2C] mov esi, [edi+eax+4] test esi, esi jz short loc_7F803457 push esi mov eax, [esi] call dword ptr [eax+8] loc_7F803457: ; CODE XREF: sub_7F802DB7+698j dec [ebp+var_1A] jnz short loc_7F80342B loc_7F80345D: ; CODE XREF: sub_7F802DB7+660j push [ebp+var_2C] call MAPIFreeBuffer@4 loc_7F803465: ; CODE XREF: sub_7F802DB7+659j cmp [ebp+var_40], 0 jz short loc_7F803474 lea eax, [ebp+var_40] push eax call sub_7F811B7E loc_7F803474: ; CODE XREF: sub_7F802DB7+6B2j push [ebp+var_34] call MAPIFreeBuffer@4 push [ebp+var_58] mov eax, [ebp+arg_4] call dword ptr [eax+98h] mov eax, [ebp+arg_4] add eax, 0A8h mov [ebp+var_44], eax mov eax, [eax] mov dword ptr [eax], 0F00h mov eax, [ebp+var_44] sub dword ptr [eax], 4 mov eax, [ebp+arg_4] dec dword ptr [eax+4ACh] mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_24] loc_7F8034B0: ; DATA XREF: sub_7F802DB7+5C4o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F802DB7 endp ; =============== S U B R O U T I N E ======================================= sub_7F8034C3 proc near ; DATA XREF: .data:7F8351D4o arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push 0 mov esi, [esp+8+arg_4] push 0 push 0 push 3 push dword ptr [esi+84h] call HrValidateIPMSubtree@20 test eax, eax jnz short loc_7F8034E9 push esi push [esp+8+arg_0] call sub_7F802DB7 loc_7F8034E9: ; CODE XREF: sub_7F8034C3+1Aj pop esi retn 8 sub_7F8034C3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8034ED proc near ; CODE XREF: sub_7F802DB7+50Ap var_20 = dword ptr -20h ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801128 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 10h mov [ebp+var_20], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax mov dword_7F8351C0, eax mov ebx, [ebp+arg_10] mov esi, [ebp+arg_0] mov edi, [ebp+arg_4] loc_7F803529: ; CODE XREF: sub_7F8034ED+69j push edi push 8 push 0 push 0 push dword ptr [ebx+8] push dword ptr [ebx+28h] push [ebp+arg_8] mov eax, [ebp+arg_8] mov eax, [eax] call dword ptr [eax+58h] test eax, eax jge short loc_7F803558 push eax ; dwInitParam push [ebp+arg_8] ; int push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F805168 test eax, eax jz short loc_7F80358E jmp short loc_7F803529 ; --------------------------------------------------------------------------- loc_7F803558: ; CODE XREF: sub_7F8034ED+56j mov dword_7F8351C0, 0 loc_7F803562: ; CODE XREF: sub_7F8034ED+98j push 0 push ebx push [ebp+arg_C] push dword ptr [edi] mov eax, [edi] mov eax, [eax] call dword ptr [eax+20h] test eax, eax jge short loc_7F803587 push eax ; dwInitParam push dword ptr [edi] ; int push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F805168 test eax, eax jz short loc_7F80358E jmp short loc_7F803562 ; --------------------------------------------------------------------------- loc_7F803587: ; CODE XREF: sub_7F8034ED+86j mov [ebp+var_20], 1 loc_7F80358E: ; CODE XREF: sub_7F8034ED+67j ; sub_7F8034ED+96j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8035A0 loc_7F80359A: ; DATA XREF: .text:stru_7F801128o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F8034ED mov eax, [ebp+var_20] loc_7F8035A0: ; DATA XREF: sub_7F8034ED+A8o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8034ED endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8035B3 proc near ; CODE XREF: sub_7F802DB7+560p Buffer = byte ptr -130h Msg = tagMSG ptr -30h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp xor ecx, ecx mov ebp, esp sub esp, 130h push ebx mov [ebp+var_14], ecx push esi push edi mov dx, [ebp+arg_C] mov esi, [ebp+arg_0] dec [ebp+arg_C] mov eax, [esi+0A8h] add eax, 4 inc dword ptr [esi+4ACh] test dx, dx mov [esi+0A8h], eax mov dword ptr [eax], 0F04h jz loc_7F803880 xor ebx, ebx loc_7F8035F5: ; CODE XREF: sub_7F8035B3+2C7j test ecx, ecx jnz loc_7F803880 lea eax, [ebp+var_4] mov [ebp+var_4], ebx push eax mov [ebp+var_10], ebx push 28h mov [ebp+var_C], ebx mov [ebp+var_8], ebx call MAPIAllocateBuffer@8 test eax, eax jnz loc_7F8038A6 mov edi, [ebp+var_4] xor eax, eax mov ecx, 0Ah rep stosd mov eax, [ebp+var_4] mov ecx, [ebp+arg_4] lea edx, [ebp+var_10] mov dword ptr [eax], 1 mov eax, [ebp+var_4] push edx mov [eax+0Ch], esi mov eax, [ebp+var_4] push [ebp+arg_8] mov [eax+10h], ecx call sub_7F811C96 lea eax, [ebp+var_C] cmp [ebp+var_4], ebx push eax jnz short loc_7F80365F push [ebp+var_10] call MAPIAllocateBuffer@8 jmp short loc_7F80366A ; --------------------------------------------------------------------------- loc_7F80365F: ; CODE XREF: sub_7F8035B3+A0j push [ebp+var_4] push [ebp+var_10] call MAPIAllocateMore@12 loc_7F80366A: ; CODE XREF: sub_7F8035B3+AAj test eax, eax jz short loc_7F803678 mov edi, 8007000Eh jmp loc_7F803781 ; --------------------------------------------------------------------------- loc_7F803678: ; CODE XREF: sub_7F8035B3+B9j mov dword_7F8351C0, ebx loc_7F80367E: ; CODE XREF: sub_7F8035B3+FDj lea eax, [ebp+var_10] push eax push [ebp+var_C] push [ebp+arg_8] call sub_7F811CD9 push eax call sub_7F80F8B4 mov edi, eax test edi, edi jz short loc_7F8036B2 push edi ; dwInitParam push 1101h ; uID push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F80504F test eax, eax jz loc_7F803781 jmp short loc_7F80367E ; --------------------------------------------------------------------------- loc_7F8036B2: ; CODE XREF: sub_7F8035B3+E4j mov dword_7F8351C0, ebx loc_7F8036B8: ; CODE XREF: sub_7F8035B3+138j mov eax, [ebp+var_4] mov ecx, [ebp+var_C] add eax, 18h push eax push 0 push dword ptr [ecx] push dword ptr [esi+54h] call sub_7F80D08D mov edi, eax test edi, edi jge short loc_7F8036ED push edi ; dwInitParam push 1101h ; uID push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F80504F test eax, eax jz loc_7F803781 jmp short loc_7F8036B8 ; --------------------------------------------------------------------------- loc_7F8036ED: ; CODE XREF: sub_7F8035B3+11Fj mov dword_7F8351C0, ebx loc_7F8036F3: ; CODE XREF: sub_7F8035B3+171j lea eax, [ebp+var_8] lea ecx, [ebp+var_14] push eax mov edx, [ebp+var_4] push ecx push offset unk_7F83D058 push dword ptr [edx+18h] call sub_7F80D1F3 mov edi, eax test edi, edi jge short loc_7F803726 push edi ; dwInitParam push 1101h ; uID push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F80504F test eax, eax jz short loc_7F803781 jmp short loc_7F8036F3 ; --------------------------------------------------------------------------- loc_7F803726: ; CODE XREF: sub_7F8035B3+15Cj mov eax, [ebp+var_8] mov ecx, [ebp+var_4] mov [ecx+1Ch], eax mov eax, [ebp+var_8] cmp dword ptr [eax], 37001Eh jnz short loc_7F803743 mov edx, [eax+8] mov ecx, [ebp+var_4] mov [ecx+20h], edx loc_7F803743: ; CODE XREF: sub_7F8035B3+185j mov dword_7F8351C0, ebx loc_7F803749: ; CODE XREF: sub_7F8035B3+1C1j mov eax, [ebp+var_4] mov ecx, [ebp+arg_4] add eax, 14h push eax push 8 push 0 mov eax, [ecx] push [ebp+arg_4] call dword ptr [eax+4Ch] test eax, eax jge short loc_7F803776 push eax ; dwInitParam push [ebp+arg_4] ; int push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F805168 test eax, eax jz short loc_7F803781 jmp short loc_7F803749 ; --------------------------------------------------------------------------- loc_7F803776: ; CODE XREF: sub_7F8035B3+1AEj push [ebp+var_4] push esi call sub_7F8038C2 mov edi, eax loc_7F803781: ; CODE XREF: sub_7F8035B3+C0j ; sub_7F8035B3+F7j ... cmp [ebp+var_4], ebx jz short loc_7F803797 mov eax, [ebp+var_4] push dword ptr [eax+18h] call sub_7F80D19A mov ecx, [ebp+var_4] mov [ecx+18h], ebx loc_7F803797: ; CODE XREF: sub_7F8035B3+1D1j push edi call sub_7F802C5D test eax, eax jnz loc_7F803882 push dword ptr [esi+8] push [ebp+var_4] call dword ptr [esi+4FCh] cmp eax, 80040113h mov edi, eax mov [ebp+var_4], ebx jz loc_7F803882 push edi call sub_7F802C5D test eax, eax jnz loc_7F803882 test byte ptr [esi+0Ch], 2 jnz loc_7F8038AD push ebx ; wRemoveMsg lea eax, [ebp+Msg] push ebx ; wMsgFilterMax push ebx ; wMsgFilterMin push ebx ; hWnd push eax ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F80381E loc_7F8037EB: ; CODE XREF: sub_7F8035B3+269j push ebx ; wMsgFilterMax lea eax, [ebp+Msg] push ebx ; wMsgFilterMin push ebx ; hWnd push eax ; lpMsg call ds:GetMessageA lea eax, [ebp+Msg] push eax ; lpMsg call ds:TranslateMessage lea eax, [ebp+Msg] push eax ; lpMsg call ds:DispatchMessageA push ebx ; wRemoveMsg lea eax, [ebp+Msg] push ebx ; wMsgFilterMax push ebx ; wMsgFilterMin push ebx ; hWnd push eax ; lpMsg call ds:PeekMessageA test eax, eax jnz short loc_7F8037EB loc_7F80381E: ; CODE XREF: sub_7F8035B3+236j cmp [esi+10h], ebx jz short loc_7F803868 lea edi, [esi+14h] push edi call sub_7F80C62C test eax, eax jnz short loc_7F803868 push 0FFh ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1001h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA push 2024h ; uType lea ecx, [ebp+Buffer] push offset Caption ; lpCaption push ecx ; lpText push dword ptr [edi] ; hWnd call ds:MessageBoxA cmp eax, 6 jz short loc_7F8038B4 loc_7F803868: ; CODE XREF: sub_7F8035B3+26Ej ; sub_7F8035B3+27Bj cmp dword ptr [esi+0Ch], 1 mov ax, [ebp+arg_C] sbb ecx, ecx dec [ebp+arg_C] inc ecx test ax, ax jnz loc_7F8035F5 loc_7F803880: ; CODE XREF: sub_7F8035B3+3Aj ; sub_7F8035B3+44j xor edi, edi loc_7F803882: ; CODE XREF: sub_7F8035B3+1ECj ; sub_7F8035B3+208j ... mov eax, [esi+0A8h] mov dword ptr [eax], 0F00h mov eax, edi pop edi dec dword ptr [esi+4ACh] sub dword ptr [esi+0A8h], 4 pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F8038A6: ; CODE XREF: sub_7F8035B3+63j mov edi, 8007000Eh jmp short loc_7F803882 ; --------------------------------------------------------------------------- loc_7F8038AD: ; CODE XREF: sub_7F8035B3+220j mov edi, 80040113h jmp short loc_7F803882 ; --------------------------------------------------------------------------- loc_7F8038B4: ; CODE XREF: sub_7F8035B3+2B3j mov dword ptr [esi+0Ch], 2 mov edi, 80040113h jmp short loc_7F803882 sub_7F8035B3 endp ; =============== S U B R O U T I N E ======================================= sub_7F8038C2 proc near ; CODE XREF: sub_7F8035B3+1C7p ; sub_7F804058+11Fp var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 sub esp, 4 push ebx push esi mov esi, [esp+0Ch+arg_4] push edi mov eax, [esp+10h+arg_0] push ebp mov edi, [esi+1Ch] mov ebx, [esi+14h] add eax, 8 push 5 ; int push dword ptr [esi+18h] ; int push ebx ; int push dword ptr [eax] ; hInstance push esi ; int mov [esp+28h+var_4], eax call sub_7F8045B6 mov ebp, eax test ebp, ebp jnz short loc_7F803971 mov eax, [esp+14h+var_4] push dword ptr [eax] ; hInstance push esi ; int call sub_7F803EAC mov ebp, eax test ebp, ebp jl short loc_7F803971 mov eax, [esi+18h] cmp dword ptr [eax+54h], 2 jnz short loc_7F80391F push esi push [esp+18h+arg_0] call sub_7F804058 mov ebp, eax test ebp, ebp jge short loc_7F803937 jmp short loc_7F803971 ; --------------------------------------------------------------------------- loc_7F80391F: ; CODE XREF: sub_7F8038C2+49j test byte ptr [edi+18h], 10h jz short loc_7F803937 mov eax, [esp+14h+var_4] push dword ptr [eax] ; hInstance push esi ; int call sub_7F8042DA mov ebp, eax test ebp, ebp jl short loc_7F803971 loc_7F803937: ; CODE XREF: sub_7F8038C2+59j ; sub_7F8038C2+61j test byte ptr [edi+18h], 1 jz short loc_7F80396A mov dword_7F8351C0, 0 loc_7F803947: ; CODE XREF: sub_7F8038C2+A6j push 9 mov eax, [ebx] push ebx call dword ptr [eax+54h] test eax, eax jge short loc_7F80396A mov ecx, [esp+14h+var_4] push eax ; dwInitParam push ebx ; int push dword ptr [ecx] ; hInstance push [esp+20h+arg_0] ; int call sub_7F805168 test eax, eax jz short loc_7F803971 jmp short loc_7F803947 ; --------------------------------------------------------------------------- loc_7F80396A: ; CODE XREF: sub_7F8038C2+79j ; sub_7F8038C2+8Fj mov dword ptr [esi+24h], 1 loc_7F803971: ; CODE XREF: sub_7F8038C2+2Ej ; sub_7F8038C2+40j ... mov eax, ebp pop ebp pop edi pop esi pop ebx add esp, 4 retn 8 sub_7F8038C2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80397D(int, HINSTANCE hInstance) sub_7F80397D proc near ; CODE XREF: StartAddress+12Ep ; DATA XREF: sub_7F8026ED+13Do var_4 = dword ptr -4 arg_0 = dword ptr 8 hInstance = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 push esi push edi mov esi, [eax+0Ch] mov edi, 1 mov ecx, [esi+0A0h] test ecx, ecx jz short loc_7F8039E6 cmp dword ptr [eax+24h], 0 jz short loc_7F8039E6 push dword ptr [esi+64h] push dword ptr [esi+98h] push dword ptr [esi+94h] push dword ptr [esi+90h] push dword ptr [esi+0A4h] push dword ptr [eax+14h] push dword ptr [esi+9Ch] push dword ptr [esi+4] call ecx mov [ebp+var_4], eax cmp eax, 80040113h jnz short loc_7F8039DB mov dword ptr [esi+0Ch], 2 loc_7F8039DB: ; CODE XREF: sub_7F80397D+55j cmp [ebp+var_4], 40580h jnz short loc_7F8039E6 xor edi, edi loc_7F8039E6: ; CODE XREF: sub_7F80397D+1Cj ; sub_7F80397D+22j ... push edi ; int lea ecx, [ebp+arg_0] push [ebp+hInstance] ; hInstance push ecx ; int call sub_7F804D6B test eax, eax jge short loc_7F8039FA mov [ebp+var_4], eax loc_7F8039FA: ; CODE XREF: sub_7F80397D+78j cmp [ebp+var_4], 0 jge short loc_7F803A08 inc dword ptr [esi+4E0h] jmp short loc_7F803A0E ; --------------------------------------------------------------------------- loc_7F803A08: ; CODE XREF: sub_7F80397D+81j inc dword ptr [esi+4D4h] loc_7F803A0E: ; CODE XREF: sub_7F80397D+89j mov eax, [ebp+var_4] pop edi pop esi mov esp, ebp pop ebp retn 8 sub_7F80397D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F803A19(int, DWORD nCount, HANDLE *pHandles, BOOL fWaitAll, DWORD dwMilliseconds, DWORD dwWakeMask) sub_7F803A19 proc near ; CODE XREF: sub_7F802B1B+A6p ; sub_7F802DB7+63Bp ... Msg = tagMSG ptr -1Ch arg_0 = dword ptr 8 nCount = dword ptr 0Ch pHandles = dword ptr 10h fWaitAll = dword ptr 14h dwMilliseconds = dword ptr 18h dwWakeMask = dword ptr 1Ch push ebp mov ebp, esp sub esp, 1Ch push ebx push esi push edi xor esi, esi xor edi, edi loc_7F803A26: ; CODE XREF: sub_7F803A19+7Fj push [ebp+dwWakeMask] ; dwWakeMask push [ebp+dwMilliseconds] ; dwMilliseconds push [ebp+fWaitAll] ; fWaitAll push [ebp+pHandles] ; pHandles push [ebp+nCount] ; nCount call ds:MsgWaitForMultipleObjects cmp eax, [ebp+nCount] mov ebx, eax jz short loc_7F803A49 mov esi, 1 jmp short loc_7F803A8E ; --------------------------------------------------------------------------- loc_7F803A49: ; CODE XREF: sub_7F803A19+27j push edi ; wRemoveMsg lea eax, [ebp+Msg] push edi ; wMsgFilterMax push edi ; wMsgFilterMin push edi ; hWnd push eax ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F803A8E loc_7F803A5B: ; CODE XREF: sub_7F803A19+73j push edi ; wMsgFilterMax lea eax, [ebp+Msg] push edi ; wMsgFilterMin push edi ; hWnd push eax ; lpMsg call ds:GetMessageA lea eax, [ebp+Msg] push eax ; lpMsg call ds:TranslateMessage lea eax, [ebp+Msg] push eax ; lpMsg call ds:DispatchMessageA push edi ; wRemoveMsg lea eax, [ebp+Msg] push edi ; wMsgFilterMax push edi ; wMsgFilterMin push edi ; hWnd push eax ; lpMsg call ds:PeekMessageA test eax, eax jnz short loc_7F803A5B loc_7F803A8E: ; CODE XREF: sub_7F803A19+2Ej ; sub_7F803A19+40j test esi, esi jnz short loc_7F803A9A mov eax, [ebp+arg_0] cmp [eax+0Ch], edi jz short loc_7F803A26 loc_7F803A9A: ; CODE XREF: sub_7F803A19+77j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F803A19 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F803AA5(int, HINSTANCE hInstance) sub_7F803AA5 proc near ; DATA XREF: sub_7F802962+183o var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801138 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 1Ch push ebx push esi push edi mov esi, [ebp+arg_0] mov [ebp+ms_exc.old_esp], esp mov eax, [esi+0Ch] xor edi, edi mov [ebp+var_1C], eax add eax, 500h mov [ebp+var_24], edi mov [ebp+var_2C], 80004005h mov ecx, [eax] mov [ebp+var_28], eax mov [ebp+var_20], ecx mov [ebp+ms_exc.registration.TryLevel], edi mov eax, [ebp+var_1C] add eax, 510h push eax ; lpCriticalSection call ds:EnterCriticalSection mov ecx, [ebp+var_1C] add ecx, 528h cmp [ecx], edi jnz short loc_7F803B1D mov eax, [ebp+var_1C] mov [eax+530h], esi mov [eax+534h], esi jmp short loc_7F803B32 ; --------------------------------------------------------------------------- loc_7F803B1D: ; CODE XREF: sub_7F803AA5+65j mov edx, [ebp+var_1C] add edx, 534h mov eax, [edx] mov [esi+8], eax mov eax, [edx] mov [eax+4], esi mov [edx], esi loc_7F803B32: ; CODE XREF: sub_7F803AA5+76j inc dword ptr [ecx] mov eax, [ebp+var_28] mov edx, [eax] mov ecx, [ecx] cmp edx, ecx jb short loc_7F803B6E mov [ebp+var_20], 0 cmp [ebp+var_20], edx jnb short loc_7F803B6E mov esi, [ebp+var_20] shl esi, 4 mov eax, [ebp+var_1C] mov eax, [eax+504h] lea eax, [esi+eax+8] loc_7F803B5E: ; CODE XREF: sub_7F803AA5+C7j cmp dword ptr [eax], 0 jz short loc_7F803B6E add eax, 10h inc [ebp+var_20] cmp [ebp+var_20], edx jb short loc_7F803B5E loc_7F803B6E: ; CODE XREF: sub_7F803AA5+98j ; sub_7F803AA5+A4j ... lea eax, ds:0[edx*2] cmp eax, ecx mov eax, 1 adc eax, 0FFFFFFFFh mov [ebp+var_24], eax jz short loc_7F803B93 mov eax, [ebp+var_1C] push dword ptr [eax+50Ch] ; hEvent call ds:ResetEvent loc_7F803B93: ; CODE XREF: sub_7F803AA5+DDj mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F803C0E loc_7F803B9F: ; DATA XREF: .text:stru_7F801138o mov eax, [ebp+var_1C] ; Finally handler 0 for function 7F803AA5 add eax, 510h push eax ; lpCriticalSection call ds:LeaveCriticalSection mov eax, [ebp+var_28] mov ecx, [ebp+var_20] cmp [eax], ecx jbe short loc_7F803BCE shl ecx, 4 mov eax, [ebp+var_1C] mov eax, [eax+504h] push dword ptr [ecx+eax+4] ; hEvent call ds:SetEvent loc_7F803BCE: ; CODE XREF: sub_7F803AA5+111j xor esi, esi cmp [ebp+var_24], esi jz short loc_7F803C01 push 0FFh ; dwWakeMask push 0FFFFFFFFh ; dwMilliseconds push esi ; fWaitAll mov eax, [ebp+var_1C] add eax, 50Ch push eax ; pHandles push 1 ; nCount push [ebp+var_1C] ; int call sub_7F803A19 mov eax, [ebp+var_1C] cmp [eax+0Ch], esi jz short loc_7F803C01 push [ebp+hInstance] ; hInstance push eax ; int call sub_7F803DCD loc_7F803C01: ; CODE XREF: sub_7F803AA5+12Ej ; sub_7F803AA5+151j mov [ebp+var_2C], 0 mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_2C] loc_7F803C0E: ; DATA XREF: sub_7F803AA5+F5o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F803AA5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; DWORD __stdcall StartAddress(LPVOID lpThreadParameter) StartAddress proc near ; DATA XREF: sub_7F802962+146o var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h lpCriticalSection= dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h lpThreadParameter= dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801148 push offset sub_7F82FBD0 push eax mov eax, [ebp+lpThreadParameter] mov large fs:0, esp mov ecx, [eax+0Ch] sub esp, 2Ch lea eax, [ecx+510h] mov [ebp+var_1C], ecx mov [ebp+lpCriticalSection], eax push ebx push esi push edi loc_7F803C56: ; CODE XREF: StartAddress+191j xor esi, esi mov [ebp+var_38], esi mov [ebp+ms_exc.registration.TryLevel], esi push [ebp+lpCriticalSection] ; lpCriticalSection call ds:EnterCriticalSection mov eax, [ebp+var_1C] add eax, 528h mov [ebp+var_30], eax mov eax, [eax] mov [ebp+var_3C], eax cmp eax, 1 jnz short loc_7F803CB4 mov eax, [ebp+var_1C] add eax, 534h mov [ebp+var_28], eax mov eax, [eax] mov [ebp+var_34], eax mov eax, [ebp+var_1C] mov [eax+530h], esi mov eax, [ebp+var_28] mov [eax], esi mov eax, [ebp+var_30] mov [eax], esi mov eax, [ebp+var_1C] add eax, 52Ch mov [ebp+var_20], eax inc dword ptr [eax] mov eax, [ebp+var_34] mov [ebp+var_24], eax jmp short loc_7F803CF3 ; --------------------------------------------------------------------------- loc_7F803CB4: ; CODE XREF: StartAddress+59j cmp [ebp+var_3C], 1 jbe short loc_7F803CEC mov eax, [ebp+var_1C] add eax, 534h mov [ebp+var_28], eax mov eax, [eax] mov [ebp+var_34], eax mov eax, [eax+8] mov ecx, [ebp+var_28] mov [ecx], eax mov eax, [ebp+var_30] dec dword ptr [eax] mov eax, [ebp+var_1C] add eax, 52Ch mov [ebp+var_20], eax inc dword ptr [eax] mov eax, [ebp+var_34] mov [ebp+var_24], eax jmp short loc_7F803CF3 ; --------------------------------------------------------------------------- loc_7F803CEC: ; CODE XREF: StartAddress+97j mov [ebp+var_24], 0 loc_7F803CF3: ; CODE XREF: StartAddress+91j ; StartAddress+C9j mov eax, [ebp+var_24] mov ecx, [ebp+lpThreadParameter] mov [ecx+8], eax mov eax, [ebp+var_1C] mov eax, [eax+500h] mov ecx, [ebp+var_30] sub eax, [ecx] cmp eax, 1 sbb eax, eax neg eax mov [ebp+var_38], eax mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F803D3F loc_7F803D20: ; DATA XREF: .text:stru_7F801148o push [ebp+lpCriticalSection] ; Finally handler 0 for function 7F803C21 call ds:LeaveCriticalSection cmp [ebp+var_38], 0 jz short locret_7F803D3E mov eax, [ebp+var_1C] push dword ptr [eax+50Ch] ; hEvent call ds:SetEvent locret_7F803D3E: ; CODE XREF: StartAddress+10Cj retn ; --------------------------------------------------------------------------- loc_7F803D3F: ; DATA XREF: StartAddress+FAo xor esi, esi cmp [ebp+var_24], esi jz short loc_7F803D93 mov eax, [ebp+var_1C] push dword ptr [eax+8] ; hInstance push [ebp+var_24] ; int call sub_7F80397D push [ebp+lpCriticalSection] ; lpCriticalSection mov [ebp+var_24], esi call ds:EnterCriticalSection mov eax, [ebp+var_1C] add eax, 52Ch mov [ebp+var_20], eax mov edi, [eax] mov ecx, [ebp+var_20] lea eax, [edi-1] push [ebp+lpCriticalSection] ; lpCriticalSection mov [ecx], eax call ds:LeaveCriticalSection test edi, edi jnz short loc_7F803DAB mov eax, [ebp+var_1C] push dword ptr [eax+50Ch] ; hEvent call ds:SetEvent jmp short loc_7F803DAB ; --------------------------------------------------------------------------- loc_7F803D93: ; CODE XREF: StartAddress+123j mov esi, [ebp+lpThreadParameter] add esi, 4 push dword ptr [esi] ; hEvent call ds:ResetEvent push 0FFFFFFFFh ; dwMilliseconds push dword ptr [esi] ; hHandle call ds:WaitForSingleObject loc_7F803DAB: ; CODE XREF: StartAddress+15Fj ; StartAddress+170j mov eax, [ebp+var_1C] cmp dword ptr [eax+0Ch], 0 jz loc_7F803C56 xor eax, eax mov ecx, [ebp+ms_exc.registration.Next] mov large fs:0, ecx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 StartAddress endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_7F803DCD(int, HINSTANCE hInstance) sub_7F803DCD proc near ; CODE XREF: sub_7F803AA5+157p var_28 = dword ptr -28h var_24 = dword ptr -24h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801158 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 18h push ebx push esi push edi mov [ebp+ms_exc.registration.TryLevel], 0 mov eax, [ebp+arg_0] add eax, 510h push eax ; lpCriticalSection call ds:EnterCriticalSection mov edi, [ebp+arg_0] add edi, 528h mov esi, [ebp+var_24] mov ebx, [ebp+var_28] loc_7F803E15: ; CODE XREF: sub_7F803DCD+AFj cmp dword ptr [edi], 1 jnz short loc_7F803E3F mov esi, [ebp+arg_0] add esi, 534h mov ebx, [esi] mov ecx, [ebp+arg_0] xor eax, eax mov [ecx+530h], eax mov [esi], eax mov [edi], eax inc dword ptr [ecx+52Ch] mov [ebp+var_1C], ebx jmp short loc_7F803E68 ; --------------------------------------------------------------------------- loc_7F803E3F: ; CODE XREF: sub_7F803DCD+4Bj jbe short loc_7F803E61 mov esi, [ebp+arg_0] add esi, 534h mov ebx, [esi] mov eax, [ebx+8] mov [esi], eax dec dword ptr [edi] mov eax, [ebp+arg_0] inc dword ptr [eax+52Ch] mov [ebp+var_1C], ebx jmp short loc_7F803E68 ; --------------------------------------------------------------------------- loc_7F803E61: ; CODE XREF: sub_7F803DCD:loc_7F803E3Fj mov [ebp+var_1C], 0 loc_7F803E68: ; CODE XREF: sub_7F803DCD+70j ; sub_7F803DCD+92j cmp [ebp+var_1C], 0 jz short loc_7F803E7E push 1 ; int push [ebp+hInstance] ; hInstance lea eax, [ebp+var_1C] push eax ; int call sub_7F804D6B jmp short loc_7F803E15 ; --------------------------------------------------------------------------- loc_7F803E7E: ; CODE XREF: sub_7F803DCD+9Fj mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F803E9A loc_7F803E8A: ; DATA XREF: .text:stru_7F801158o mov eax, [ebp+arg_0] ; Finally handler 0 for function 7F803DCD add eax, 510h push eax ; lpCriticalSection call ds:LeaveCriticalSection retn ; --------------------------------------------------------------------------- loc_7F803E9A: ; DATA XREF: sub_7F803DCD+B8o mov eax, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, eax pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F803DCD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F803EAC(int, HINSTANCE hInstance) sub_7F803EAC proc near ; CODE XREF: sub_7F8038C2+37p var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h dwInitParam = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801168 push offset sub_7F82FBD0 push eax xor ecx, ecx mov large fs:0, esp sub esp, 1Ch mov eax, [ebp+arg_0] mov [ebp+var_24], ecx mov [ebp+var_2C], 80004005h push ebx push esi push edi mov esi, [eax+14h] mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], ecx add eax, 0Ch mov [ebp+var_1C], eax mov eax, [eax] add dword ptr [eax+0A8h], 4 mov eax, [ebp+var_1C] mov eax, [eax] inc dword ptr [eax+4ACh] mov eax, [ebp+var_1C] mov eax, [eax] mov eax, [eax+0A8h] mov dword ptr [eax], 0F05h mov dword_7F8351C0, ecx mov ebx, [ebp+arg_0] add ebx, 18h mov edi, [ebp+hInstance] loc_7F803F21: ; CODE XREF: sub_7F803EAC+A3j lea eax, [ebp+var_24] push eax push 0 push dword ptr [ebx] call sub_7F80DB1E mov [ebp+dwInitParam], eax test eax, eax jge short loc_7F803F51 mov [ebp+var_2C], eax push eax ; dwInitParam push 1103h ; uID push edi ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F803FF4 jmp short loc_7F803F21 ; --------------------------------------------------------------------------- loc_7F803F51: ; CODE XREF: sub_7F803EAC+87j ; sub_7F803EAC+12Aj xor eax, eax mov [ebp+var_28], eax mov dword_7F8351C0, eax loc_7F803F5B: ; CODE XREF: sub_7F803EAC+DAj lea eax, [ebp+var_28] push eax push 0 push 32h push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+4Ch] mov [ebp+dwInitParam], eax test eax, eax jge short loc_7F803F88 push eax ; dwInitParam push [ebp+var_24] ; int push edi ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz short loc_7F803FF4 jmp short loc_7F803F5B ; --------------------------------------------------------------------------- loc_7F803F88: ; CODE XREF: sub_7F803EAC+C7j mov eax, [ebp+var_28] cmp dword ptr [eax], 0 jz short loc_7F803FDE mov dword_7F8351C0, 0 loc_7F803F9A: ; CODE XREF: sub_7F803EAC+11Fj push [ebp+var_28] push 2 push esi mov eax, [esi] call dword ptr [eax+4Ch] mov [ebp+dwInitParam], eax push [ebp+var_28] call FreeProws@4 xor eax, eax mov [ebp+var_28], eax cmp [ebp+dwInitParam], eax jge short loc_7F803FCD push [ebp+dwInitParam] ; dwInitParam push esi ; int push edi ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz short loc_7F803FF4 jmp short loc_7F803F9A ; --------------------------------------------------------------------------- loc_7F803FCD: ; CODE XREF: sub_7F803EAC+10Cj mov eax, [ebp+var_1C] mov eax, [eax] cmp dword ptr [eax+0Ch], 0 jz loc_7F803F51 jmp short loc_7F803FED ; --------------------------------------------------------------------------- loc_7F803FDE: ; CODE XREF: sub_7F803EAC+E2j push [ebp+var_28] call FreeProws@4 mov [ebp+var_28], 0 loc_7F803FED: ; CODE XREF: sub_7F803EAC+130j mov [ebp+var_2C], 0 loc_7F803FF4: ; CODE XREF: sub_7F803EAC+9Dj ; sub_7F803EAC+D8j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804045 loc_7F804000: ; DATA XREF: .text:stru_7F801168o cmp [ebp+var_24], 0 ; Finally handler 0 for function 7F803EAC jz short loc_7F804011 push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+8] loc_7F804011: ; CODE XREF: sub_7F803EAC+158j mov eax, [ebp+arg_0] add eax, 0Ch mov [ebp+var_1C], eax mov eax, [eax] mov eax, [eax+0A8h] mov dword ptr [eax], 0F00h mov eax, [ebp+var_1C] mov eax, [eax] sub dword ptr [eax+0A8h], 4 mov eax, [ebp+var_1C] mov eax, [eax] dec dword ptr [eax+4ACh] mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_2C] loc_7F804045: ; DATA XREF: sub_7F803EAC+14Fo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F803EAC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F804058 proc near ; CODE XREF: sub_7F8038C2+50p var_70 = dword ptr -70h var_6C = byte ptr -6Ch var_68 = dword ptr -68h var_60 = dword ptr -60h var_58 = dword ptr -58h var_50 = dword ptr -50h var_48 = dword ptr -48h var_40 = byte ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h hInstance = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801178 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 60h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_1C], esi mov eax, [ebp+arg_0] mov [ebp+var_28], esi mov [ebp+var_24], esi mov [ebp+var_20], esi mov ecx, [eax+8] mov [ebp+hInstance], ecx mov [ebp+ms_exc.registration.TryLevel], esi mov eax, [ebp+arg_4] add eax, 0Ch mov [ebp+var_2C], eax mov eax, [eax] add dword ptr [eax+0A8h], 4 mov eax, [ebp+var_2C] mov eax, [eax] inc dword ptr [eax+4ACh] mov eax, [ebp+var_2C] mov eax, [eax] mov eax, [eax+0A8h] mov dword ptr [eax], 0F06h mov dword_7F8351C0, esi mov edi, [ebp+arg_4] add edi, 14h loc_7F8040D2: ; CODE XREF: sub_7F804058+AEj lea eax, [ebp+var_24] push eax lea eax, [ebp+var_40] push eax push 8 push 0 push dword ptr [edi] mov eax, [edi] mov eax, [eax] call dword ptr [eax+40h] mov esi, eax test esi, esi jge short loc_7F804108 mov [ebp+var_28], esi push esi ; dwInitParam push dword ptr [edi] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_4] ; int call sub_7F805168 test eax, eax jz loc_7F8041DC jmp short loc_7F8040D2 ; --------------------------------------------------------------------------- loc_7F804108: ; CODE XREF: sub_7F804058+93j mov dword_7F8351C0, 0 loc_7F804112: ; CODE XREF: sub_7F804058+F7j lea eax, [ebp+var_20] push eax push 3 push 0 push offset dword_7F801930 push 3701000Dh push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+1Ch] mov esi, eax test esi, esi jge short loc_7F804151 mov [ebp+var_28], esi push esi ; dwInitParam push [ebp+var_24] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_4] ; int call sub_7F805168 test eax, eax jz loc_7F8041DC jmp short loc_7F804112 ; --------------------------------------------------------------------------- loc_7F804151: ; CODE XREF: sub_7F804058+DBj mov ebx, [ebp+arg_4] add ebx, 18h mov eax, [ebx] add eax, 54h mov ecx, [eax] mov [ebp+var_38], ecx mov dword ptr [eax], 8 mov eax, [edi] mov [ebp+var_3C], eax mov eax, [ebp+var_20] mov [edi], eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F8038C2 mov [ebp+var_28], eax mov eax, [ebp+var_3C] mov [edi], eax mov eax, [ebx] mov ecx, [ebp+var_38] mov [eax+54h], ecx cmp [ebp+var_28], 0 mov eax, 1 jge short loc_7F804199 xor eax, eax loc_7F804199: ; CODE XREF: sub_7F804058+13Dj mov [ebp+var_1C], eax xor eax, eax cmp [ebp+var_1C], eax jz short loc_7F8041DC mov dword_7F8351C0, eax loc_7F8041A8: ; CODE XREF: sub_7F804058+174j push 0 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+10h] mov esi, eax test esi, esi jge short loc_7F8041D0 push esi ; dwInitParam push [ebp+var_20] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_4] ; int call sub_7F805168 test eax, eax jnz short loc_7F8041A8 test esi, esi loc_7F8041D0: ; CODE XREF: sub_7F804058+161j mov eax, 1 jge short loc_7F8041D9 xor eax, eax loc_7F8041D9: ; CODE XREF: sub_7F804058+17Dj mov [ebp+var_1C], eax loc_7F8041DC: ; CODE XREF: sub_7F804058+A8j ; sub_7F804058+F1j ... cmp [ebp+var_20], 0 jz short loc_7F8041ED push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+8] loc_7F8041ED: ; CODE XREF: sub_7F804058+188j xor ebx, ebx cmp [ebp+var_1C], ebx jz short loc_7F804249 mov [ebp+var_70], ebx lea edi, [ebp+var_6C] xor eax, eax mov ecx, 0Bh rep stosd mov [ebp+var_70], 37050003h mov [ebp+var_68], 5 mov [ebp+var_60], 370B0003h mov [ebp+var_58], ebx mov [ebp+var_50], 3704001Eh mov [ebp+var_48], offset Default push ebx lea eax, [ebp+var_70] push eax push 3 push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+20h] test eax, eax mov eax, 1 jge short loc_7F804246 xor eax, eax loc_7F804246: ; CODE XREF: sub_7F804058+1EAj mov [ebp+var_1C], eax loc_7F804249: ; CODE XREF: sub_7F804058+19Aj push [ebp+var_1C] ; int push [ebp+var_24] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_4] ; int call sub_7F804E37 cmp [ebp+var_1C], 0 jz short loc_7F80426D mov eax, [ebp+var_2C] mov eax, [eax] inc dword ptr [eax+4DCh] jmp short loc_7F80427E ; --------------------------------------------------------------------------- loc_7F80426D: ; CODE XREF: sub_7F804058+206j cmp [ebp+var_28], 0 jge short loc_7F80427E mov eax, [ebp+var_2C] mov eax, [eax] inc dword ptr [eax+4ECh] loc_7F80427E: ; CODE XREF: sub_7F804058+213j ; sub_7F804058+219j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8042C7 loc_7F80428A: ; DATA XREF: .text:stru_7F801178o cmp [ebp+var_1C], 0 ; Finally handler 0 for function 7F804058 jz short loc_7F80429C mov eax, [ebp+arg_4] mov eax, [eax+0Ch] inc dword ptr [eax+4D8h] loc_7F80429C: ; CODE XREF: sub_7F804058+236j mov ecx, [ebp+arg_4] add ecx, 0Ch mov eax, [ecx] mov eax, [eax+0A8h] mov dword ptr [eax], 0F00h mov eax, [ecx] sub dword ptr [eax+0A8h], 4 mov eax, [ecx] dec dword ptr [eax+4ACh] mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_28] loc_7F8042C7: ; DATA XREF: sub_7F804058+22Do mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F804058 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8042DA(int, HINSTANCE hInstance) sub_7F8042DA proc near ; CODE XREF: sub_7F8038C2+6Ap var_4C = byte ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801188 push offset sub_7F82FBD0 push eax xor ecx, ecx mov large fs:0, esp sub esp, 3Ch mov [ebp+var_20], ecx mov [ebp+var_24], ecx push ebx mov [ebp+var_40], ecx push esi mov [ebp+var_1C], ecx push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], ecx mov esi, [ebp+arg_0] add esi, 0Ch mov eax, [esi] add dword ptr [eax+0A8h], 4 mov eax, [esi] inc dword ptr [eax+4ACh] mov eax, [esi] mov eax, [eax+0A8h] mov dword ptr [eax], 0F06h mov dword_7F8351C0, ecx mov eax, [ebp+arg_0] add eax, 18h mov [ebp+var_44], eax mov ebx, eax mov edi, [ebp+var_2C] loc_7F80434A: ; CODE XREF: sub_7F8042DA+A2j lea eax, [ebp+var_20] push eax push 0 push dword ptr [ebx] call sub_7F80D6D8 mov edi, eax mov [ebp+var_2C], edi test edi, edi jge short loc_7F80437E mov [ebp+var_1C], edi push edi ; dwInitParam push 1104h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F804549 jmp short loc_7F80434A ; --------------------------------------------------------------------------- loc_7F80437E: ; CODE XREF: sub_7F8042DA+84j xor eax, eax cmp [ebp+var_20], eax jz loc_7F804549 mov dword_7F8351C0, eax loc_7F80438E: ; CODE XREF: sub_7F8042DA+E9j push 0 push offset unk_7F8351F8 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+1Ch] mov edi, eax mov [ebp+var_2C], edi test edi, edi jge short loc_7F8043C5 mov [ebp+var_1C], edi push edi ; dwInitParam push [ebp+var_20] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz loc_7F804549 jmp short loc_7F80438E ; --------------------------------------------------------------------------- loc_7F8043C5: ; CODE XREF: sub_7F8042DA+CDj mov ebx, [ebp+var_48] loc_7F8043C8: ; CODE XREF: sub_7F8042DA+269j xor eax, eax mov [ebp+var_38], eax mov [ebp+var_34], eax mov [ebp+var_28], eax mov [ebp+var_30], eax mov dword_7F8351C0, eax loc_7F8043DB: ; CODE XREF: sub_7F8042DA+131j lea eax, [ebp+var_28] push eax push 0 push 1 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+4Ch] mov edi, eax mov [ebp+var_2C], edi test edi, edi jge short loc_7F804419 mov [ebp+var_1C], edi push edi ; dwInitParam push [ebp+var_20] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jnz short loc_7F8043DB mov [ebp+var_24], 1 jmp loc_7F8044EA ; --------------------------------------------------------------------------- loc_7F804419: ; CODE XREF: sub_7F8042DA+11Bj mov eax, [ebp+var_28] cmp dword ptr [eax], 0 jnz short loc_7F80442D mov [ebp+var_24], 1 jmp loc_7F8044EA ; --------------------------------------------------------------------------- loc_7F80442D: ; CODE XREF: sub_7F8042DA+145j mov dword_7F8351C0, 0 loc_7F804437: ; CODE XREF: sub_7F8042DA+19Ej lea eax, [ebp+var_38] push eax push 0 mov eax, [ebp+var_28] mov eax, [eax+0Ch] push dword ptr [eax+8] mov eax, [ebp+var_44] push dword ptr [eax] call sub_7F80DC30 mov edi, eax mov [ebp+var_2C], edi test edi, edi jge short loc_7F80447A mov [ebp+var_24], 1 mov [ebp+var_1C], edi push edi ; dwInitParam push 1105h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz short loc_7F8044EA jmp short loc_7F804437 ; --------------------------------------------------------------------------- loc_7F80447A: ; CODE XREF: sub_7F8042DA+17Dj mov dword_7F8351C0, 0 mov ebx, [ebp+arg_0] add ebx, 14h loc_7F80448A: ; CODE XREF: sub_7F8042DA+1E1j lea eax, [ebp+var_34] push eax lea eax, [ebp+var_4C] push eax push 8 push 0 push dword ptr [ebx] mov eax, [ebx] mov eax, [eax] call dword ptr [eax+40h] mov edi, eax mov [ebp+var_2C], edi test edi, edi jge short loc_7F8044C6 mov [ebp+var_1C], edi push edi ; dwInitParam push dword ptr [ebx] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jnz short loc_7F80448A mov [ebp+var_24], 1 jmp short loc_7F8044EA ; --------------------------------------------------------------------------- loc_7F8044C6: ; CODE XREF: sub_7F8042DA+1CCj push 7 ; int push [ebp+var_38] ; int push [ebp+var_34] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F8045B6 mov [ebp+var_1C], eax test eax, eax mov eax, 1 jge short loc_7F8044E7 xor eax, eax loc_7F8044E7: ; CODE XREF: sub_7F8042DA+209j mov [ebp+var_30], eax loc_7F8044EA: ; CODE XREF: sub_7F8042DA+13Aj ; sub_7F8042DA+14Ej ... push [ebp+var_28] call FreeProws@4 mov [ebp+var_28], 0 push [ebp+var_38] call sub_7F80DD88 push [ebp+var_30] ; int push [ebp+var_34] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F804E37 cmp [ebp+var_30], 0 jz short loc_7F804529 mov [ebp+var_40], 1 mov eax, [esi] inc dword ptr [eax+4DCh] jmp short loc_7F804537 ; --------------------------------------------------------------------------- loc_7F804529: ; CODE XREF: sub_7F8042DA+23Cj cmp [ebp+var_1C], 0 jge short loc_7F804537 mov eax, [esi] inc dword ptr [eax+4ECh] loc_7F804537: ; CODE XREF: sub_7F8042DA+24Dj ; sub_7F8042DA+253j cmp [ebp+var_24], 0 jnz short loc_7F804549 mov eax, [esi] cmp dword ptr [eax+0Ch], 0 jz loc_7F8043C8 loc_7F804549: ; CODE XREF: sub_7F8042DA+9Cj ; sub_7F8042DA+A9j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8045A3 loc_7F804555: ; DATA XREF: .text:stru_7F801188o cmp [ebp+var_40], 0 ; Finally handler 0 for function 7F8042DA jz short loc_7F804567 mov eax, [ebp+arg_0] mov eax, [eax+0Ch] inc dword ptr [eax+4D8h] loc_7F804567: ; CODE XREF: sub_7F8042DA+27Fj cmp [ebp+var_20], 0 jz short loc_7F804578 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+8] loc_7F804578: ; CODE XREF: sub_7F8042DA+291j mov ecx, [ebp+arg_0] add ecx, 0Ch mov eax, [ecx] mov eax, [eax+0A8h] mov dword ptr [eax], 0F00h mov eax, [ecx] sub dword ptr [eax+0A8h], 4 mov eax, [ecx] dec dword ptr [eax+4ACh] mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_1C] loc_7F8045A3: ; DATA XREF: sub_7F8042DA+276o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8042DA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8045B6(int, HINSTANCE hInstance, int, int, int) sub_7F8045B6 proc near ; CODE XREF: sub_7F8038C2+25p ; sub_7F8042DA+1FAp pguid = GUID ptr -88h var_78 = dword ptr -78h var_70 = dword ptr -70h var_6C = dword ptr -6Ch var_68 = dword ptr -68h var_60 = dword ptr -60h var_5C = dword ptr -5Ch var_40 = dword ptr -40h var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801198 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 78h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_2C], esi mov [ebp+var_28], esi mov [ebp+var_20], esi mov [ebp+var_1C], 80004005h mov [ebp+var_30], esi mov [ebp+ms_exc.registration.TryLevel], esi mov eax, [ebp+arg_10] cmp eax, 5 jz short loc_7F80464F cmp eax, 7 jz loc_7F804752 mov [ebp+var_1C], 80040302h loc_7F80460C: ; CODE XREF: sub_7F8045B6+13Cj ; sub_7F8045B6+17Aj ... mov dword_7F8351C0, 0 loc_7F804616: ; CODE XREF: sub_7F8045B6+97j lea eax, [ebp+var_30] push eax push [ebp+var_20] push [ebp+var_28] push [ebp+arg_8] mov eax, [ebp+arg_8] mov eax, [eax] call dword ptr [eax+20h] test eax, eax jge loc_7F8047D8 mov [ebp+var_1C], eax push eax ; dwInitParam push [ebp+arg_8] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz loc_7F8048E3 jmp short loc_7F804616 ; --------------------------------------------------------------------------- loc_7F80464F: ; CODE XREF: sub_7F8045B6+44j mov edi, [ebp+arg_C] mov dword_7F8351C0, 0 loc_7F80465C: ; CODE XREF: sub_7F8045B6+DDj lea eax, [ebp+var_2C] push eax push offset unk_7F83D090 push dword ptr [edi+44h] push dword ptr [edi+54h] push dword ptr [edi+48h] call sub_7F80F674 mov [ebp+var_1C], eax test eax, eax jge short loc_7F804695 push eax ; dwInitParam push 1102h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F8048E3 jmp short loc_7F80465C ; --------------------------------------------------------------------------- loc_7F804695: ; CODE XREF: sub_7F8045B6+C2j push offset unk_7F83D078 push [ebp+var_2C] call sub_7F804D0C mov dword_7F8351C0, 0 loc_7F8046AC: ; CODE XREF: sub_7F8045B6+127j lea eax, [ebp+var_20] push eax lea eax, [ebp+var_28] push eax push [ebp+var_2C] push edi call sub_7F80D1F3 mov [ebp+var_1C], eax test eax, eax jge short loc_7F8046DF push eax ; dwInitParam push 1102h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F8048E3 jmp short loc_7F8046AC ; --------------------------------------------------------------------------- loc_7F8046DF: ; CODE XREF: sub_7F8045B6+10Cj mov edi, 300B0102h push edi push [ebp+var_28] push [ebp+var_20] call PpropFindProp@12 test eax, eax jnz loc_7F80460C lea eax, [ebp+pguid] push eax ; pguid call ds:CoCreateGuid mov [ebp+var_78], edi mov [ebp+var_70], 10h lea eax, [ebp+pguid] mov [ebp+var_6C], eax mov dword_7F8351C0, 0 loc_7F804722: ; CODE XREF: sub_7F8045B6+19Aj lea eax, [ebp+var_78] push eax push [ebp+arg_8] call HrSetOneProp@8 test eax, eax jge loc_7F80460C mov [ebp+var_1C], eax push eax ; dwInitParam push [ebp+arg_8] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz loc_7F8048E3 jmp short loc_7F804722 ; --------------------------------------------------------------------------- loc_7F804752: ; CODE XREF: sub_7F8045B6+49j mov edi, [ebp+arg_C] mov dword_7F8351C0, 0 loc_7F80475F: ; CODE XREF: sub_7F8045B6+1DFj lea eax, [ebp+var_2C] push eax push offset unk_7F83D068 push dword ptr [edi+44h] push 0 push dword ptr [edi+48h] call sub_7F80F674 mov [ebp+var_1C], eax test eax, eax jge short loc_7F804797 push eax ; dwInitParam push 1105h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F8048E3 jmp short loc_7F80475F ; --------------------------------------------------------------------------- loc_7F804797: ; CODE XREF: sub_7F8045B6+1C4j mov dword_7F8351C0, 0 loc_7F8047A1: ; CODE XREF: sub_7F8045B6+220j lea eax, [ebp+var_20] push eax lea eax, [ebp+var_28] push eax push [ebp+var_2C] push edi call sub_7F80DDB5 mov [ebp+var_1C], eax test eax, eax jge loc_7F80460C push eax ; dwInitParam push 1105h ; uID push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80504F test eax, eax jz loc_7F8048E3 jmp short loc_7F8047A1 ; --------------------------------------------------------------------------- loc_7F8047D8: ; CODE XREF: sub_7F8045B6+77j cmp [ebp+var_30], 0 jz short loc_7F804829 mov eax, [ebp+var_30] mov eax, [eax] mov [ebp+var_38], eax mov edi, eax dec [ebp+var_38] test edi, edi jz short loc_7F804829 mov ebx, [ebp+var_38] imul ebx, 0Ch loc_7F8047F5: ; CODE XREF: sub_7F8045B6+271j mov eax, [ebp+var_30] lea eax, [eax+ebx+4] cmp dword ptr [eax+8], 8007000Eh jnz short loc_7F80481C push dword ptr [eax+4] ; int push [ebp+arg_C] ; int push [ebp+arg_8] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80493B mov [ebp+var_1C], eax loc_7F80481C: ; CODE XREF: sub_7F8045B6+24Dj mov edi, [ebp+var_38] sub ebx, 0Ch dec [ebp+var_38] test edi, edi jnz short loc_7F8047F5 loc_7F804829: ; CODE XREF: sub_7F8045B6+226j ; sub_7F8045B6+237j mov [ebp+var_34], 0 mov eax, [ebp+var_34] cmp eax, [ebp+var_28] jnb short loc_7F804890 lea ebx, ds:0[eax*4] mov edi, eax shl edi, 4 loc_7F804844: ; CODE XREF: sub_7F8045B6+2D8j mov eax, [ebp+var_20] add eax, edi mov [ebp+var_40], eax mov eax, [eax] and eax, 0FFFFh cmp eax, 0Ah jnz short loc_7F80487F mov eax, [ebp+var_40] cmp dword ptr [eax+8], 8007000Eh jnz short loc_7F80487F mov eax, [ebp+var_2C] push dword ptr [eax+ebx+4] ; int push [ebp+arg_C] ; int push [ebp+arg_8] ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F80493B mov [ebp+var_1C], eax loc_7F80487F: ; CODE XREF: sub_7F8045B6+2A0j ; sub_7F8045B6+2ACj add ebx, 4 add edi, 10h inc [ebp+var_34] mov eax, [ebp+var_34] cmp eax, [ebp+var_28] jb short loc_7F804844 loc_7F804890: ; CODE XREF: sub_7F8045B6+280j cmp [ebp+arg_10], 5 jnz short loc_7F8048DC push 390040h push [ebp+var_28] push [ebp+var_20] call PpropFindProp@12 mov esi, eax test esi, esi jz short loc_7F8048DC mov edi, 0E060040h push edi push [ebp+var_28] push [ebp+var_20] call PpropFindProp@12 test eax, eax jnz short loc_7F8048DC mov [ebp+var_68], edi mov eax, [esi+8] mov [ebp+var_60], eax mov eax, [esi+0Ch] mov [ebp+var_5C], eax lea eax, [ebp+var_68] push eax push [ebp+arg_8] call HrSetOneProp@8 loc_7F8048DC: ; CODE XREF: sub_7F8045B6+2DEj ; sub_7F8045B6+2F4j ... mov [ebp+var_1C], 0 loc_7F8048E3: ; CODE XREF: sub_7F8045B6+91j ; sub_7F8045B6+D7j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804928 loc_7F8048EF: ; DATA XREF: .text:stru_7F801198o mov esi, [ebp+arg_0] ; Finally handler 0 for function 7F8045B6 add esi, 0Ch push [ebp+var_2C] mov eax, [esi] call dword ptr [eax+98h] cmp [ebp+var_30], 0 jz short loc_7F804911 push [ebp+var_30] mov eax, [esi] call dword ptr [eax+98h] loc_7F804911: ; CODE XREF: sub_7F8045B6+34Ej cmp [ebp+var_20], 0 jz short loc_7F804922 push [ebp+var_20] mov eax, [esi] call dword ptr [eax+98h] loc_7F804922: ; CODE XREF: sub_7F8045B6+35Fj mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_1C] loc_7F804928: ; DATA XREF: sub_7F8045B6+334o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8045B6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80493B(int, HINSTANCE hInstance, int, int, int) sub_7F80493B proc near ; CODE XREF: sub_7F8045B6+25Ep ; sub_7F8045B6+2C1p var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_20 = dword ptr -20h dwInitParam = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011A8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 30h push ebx push esi push edi mov eax, 0FFFFFFFFh xor edi, edi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_24], edi mov [ebp+var_20], edi mov [ebp+var_30], eax mov [ebp+var_2C], eax mov [ebp+var_38], edi mov [ebp+var_34], edi mov [ebp+var_40], edi mov [ebp+var_3C], edi mov [ebp+dwInitParam], 80004005h mov [ebp+ms_exc.registration.TryLevel], edi lea eax, [ebp+var_24] push eax push edi push edi push offset dword_7F8019B0 push edi push [ebp+arg_10] push [ebp+arg_C] call sub_7F80F805 mov esi, eax mov [ebp+dwInitParam], esi cmp esi, edi jl loc_7F804A55 mov dword_7F8351C0, 0 mov edi, [ebp+arg_0] mov ebx, [ebp+arg_8] loc_7F8049BE: ; CODE XREF: sub_7F80493B+B1j lea eax, [ebp+var_20] push eax push 0Bh push 0 push offset dword_7F8019B0 push [ebp+arg_10] push ebx mov eax, [ebx] call dword ptr [eax+1Ch] mov esi, eax test esi, esi jz short loc_7F8049EE mov [ebp+dwInitParam], esi push esi ; dwInitParam push ebx ; int push [ebp+hInstance] ; hInstance push edi ; int call sub_7F805168 test eax, eax jz short loc_7F804A55 jmp short loc_7F8049BE ; --------------------------------------------------------------------------- loc_7F8049EE: ; CODE XREF: sub_7F80493B+9Dj mov dword_7F8351C0, 0 loc_7F8049F8: ; CODE XREF: sub_7F80493B+103j ; sub_7F80493B+118j lea eax, [ebp+var_40] push eax lea eax, [ebp+var_38] push eax push [ebp+var_2C] push [ebp+var_30] push [ebp+var_20] push [ebp+var_24] call sub_7F80E04F mov esi, eax mov [ebp+dwInitParam], esi test esi, esi jge short loc_7F804A55 mov eax, [edi+0Ch] mov eax, [eax+0A8h] cmp dword ptr [eax], 0F06h jnz short loc_7F804A40 push esi ; dwInitParam push 1105h ; uID push [ebp+hInstance] ; hInstance push edi ; int call sub_7F80504F test eax, eax jz short loc_7F804A55 jmp short loc_7F8049F8 ; --------------------------------------------------------------------------- loc_7F804A40: ; CODE XREF: sub_7F80493B+EEj push [ebp+dwInitParam] ; dwInitParam push 1102h ; uID push [ebp+hInstance] ; hInstance push edi ; int call sub_7F80504F test eax, eax jnz short loc_7F8049F8 loc_7F804A55: ; CODE XREF: sub_7F80493B+6Dj ; sub_7F80493B+AFj ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804A80 loc_7F804A61: ; DATA XREF: .text:stru_7F8011A8o push [ebp+var_24] ; Finally handler 0 for function 7F80493B call sub_7F80E024 cmp [ebp+var_20], 0 jz short loc_7F804A7A push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+8] loc_7F804A7A: ; CODE XREF: sub_7F80493B+132j mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+dwInitParam] loc_7F804A80: ; DATA XREF: sub_7F80493B+121o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80493B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F804A93(int, int, int, int, LPCSTR lpString1, int) sub_7F804A93 proc near ; CODE XREF: sub_7F802DB7+4DAp var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h lpString1 = dword ptr 18h arg_14 = dword ptr 1Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011B8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 24h mov [ebp+var_24], eax mov [ebp+var_1C], eax push ebx mov [ebp+var_2C], eax push esi mov [ebp+var_28], eax push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax cmp [ebp+arg_8], eax jnz short loc_7F804AF7 push offset unk_7F83D080 push eax mov esi, [ebp+arg_C] push esi lea eax, [ebp+arg_8] push eax mov edi, [ebp+arg_0] push edi call sub_7F804C4A test eax, eax jz loc_7F804BFE mov [ebp+var_2C], 1 jmp short loc_7F804AFD ; --------------------------------------------------------------------------- loc_7F804AF7: ; CODE XREF: sub_7F804A93+3Aj mov edi, [ebp+arg_0] mov esi, [ebp+arg_C] loc_7F804AFD: ; CODE XREF: sub_7F804A93+62j mov dword_7F8351C0, 0 loc_7F804B07: ; CODE XREF: sub_7F804A93+9Dj xor ebx, ebx push ebx push ebx push ebx push [ebp+arg_8] mov eax, [ebp+arg_8] mov eax, [eax] call dword ptr [eax+28h] cmp eax, ebx jge short loc_7F804B59 push eax ; dwInitParam push [ebp+arg_8] ; int push dword ptr [edi+8] ; hInstance push edi ; int call sub_7F805168 test eax, eax jz loc_7F804BFE jmp short loc_7F804B07 ; --------------------------------------------------------------------------- loc_7F804B32: ; CODE XREF: sub_7F804A93+E5j mov eax, [ebp+var_1C] xor ebx, ebx cmp [eax], ebx jz short loc_7F804B8D mov eax, [eax+0Ch] push dword ptr [eax+18h] ; lpString2 push [ebp+lpString1] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F804B8D push [ebp+var_1C] call FreeProws@4 mov [ebp+var_1C], ebx loc_7F804B59: ; CODE XREF: sub_7F804A93+86j mov dword_7F8351C0, 0 loc_7F804B63: ; CODE XREF: sub_7F804A93+F8j lea eax, [ebp+var_1C] push eax push 0 push 1 push [ebp+arg_8] mov eax, [ebp+arg_8] mov eax, [eax] call dword ptr [eax+4Ch] test eax, eax jge short loc_7F804B32 push eax ; dwInitParam push [ebp+arg_8] ; int push dword ptr [edi+8] ; hInstance push edi ; int call sub_7F805168 test eax, eax jz short loc_7F804BFE jmp short loc_7F804B63 ; --------------------------------------------------------------------------- loc_7F804B8D: ; CODE XREF: sub_7F804A93+A6j ; sub_7F804A93+B9j xor eax, eax cmp [ebp+var_1C], eax jz short loc_7F804BF7 mov ecx, [ebp+var_1C] cmp [ecx], eax jz short loc_7F804BF7 mov dword_7F8351C0, eax mov ebx, [ebp+var_34] loc_7F804BA3: ; CODE XREF: sub_7F804A93+142j mov eax, [ebp+var_1C] mov ebx, [eax+0Ch] lea eax, [ebp+var_24] push eax lea eax, [ebp+var_30] push eax push [ebp+arg_14] push 0 push dword ptr [ebx+0Ch] push dword ptr [ebx+8] push esi mov eax, [esi] call dword ptr [eax+40h] test eax, eax jge short loc_7F804BD7 push eax ; dwInitParam push esi ; int push dword ptr [edi+8] ; hInstance push edi ; int call sub_7F805168 test eax, eax jz short loc_7F804BFE jmp short loc_7F804BA3 ; --------------------------------------------------------------------------- loc_7F804BD7: ; CODE XREF: sub_7F804A93+131j cmp [ebp+var_30], 3 jz short loc_7F804BF7 cmp [ebp+var_24], 0 jz short loc_7F804BEE push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+8] loc_7F804BEE: ; CODE XREF: sub_7F804A93+14Ej mov [ebp+var_24], 0 jmp short loc_7F804BFE ; --------------------------------------------------------------------------- loc_7F804BF7: ; CODE XREF: sub_7F804A93+FFj ; sub_7F804A93+106j ... mov [ebp+var_28], 1 loc_7F804BFE: ; CODE XREF: sub_7F804A93+55j ; sub_7F804A93+97j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804C37 loc_7F804C0A: ; DATA XREF: .text:stru_7F8011B8o mov ecx, [ebp+var_24] ; Finally handler 0 for function 7F804A93 mov eax, [ebp+arg_4] mov [eax], ecx cmp [ebp+var_2C], 0 jz short loc_7F804C29 cmp [ebp+arg_8], 0 jz short loc_7F804C29 push [ebp+arg_8] mov eax, [ebp+arg_8] mov eax, [eax] call dword ptr [eax+8] loc_7F804C29: ; CODE XREF: sub_7F804A93+183j ; sub_7F804A93+189j push [ebp+var_1C] call FreeProws@4 mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_28] loc_7F804C37: ; DATA XREF: sub_7F804A93+172o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F804A93 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F804C4A proc near ; CODE XREF: sub_7F802DB7+2A2p ; sub_7F804A93+4Ep var_20 = dword ptr -20h ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011C8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 10h mov [ebp+var_20], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax mov dword_7F8351C0, eax mov esi, [ebp+arg_0] mov edi, [ebp+arg_4] mov ebx, [ebp+arg_8] loc_7F804C86: ; CODE XREF: sub_7F804C4A+60j push edi push [ebp+arg_C] push ebx mov eax, [ebx] call dword ptr [eax+3Ch] test eax, eax jz short loc_7F804CB2 cmp eax, 80040102h jz short loc_7F804CAC push eax ; dwInitParam push ebx ; int push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F805168 test eax, eax jz short loc_7F804CE7 jmp short loc_7F804C86 ; --------------------------------------------------------------------------- loc_7F804CAC: ; CODE XREF: sub_7F804C4A+4Fj mov dword ptr [edi], 0 loc_7F804CB2: ; CODE XREF: sub_7F804C4A+48j mov dword_7F8351C0, 0 loc_7F804CBC: ; CODE XREF: sub_7F804C4A+94j push 0 push [ebp+arg_10] push dword ptr [edi] mov eax, [edi] mov eax, [eax] call dword ptr [eax+1Ch] test eax, eax jge short loc_7F804CE0 push eax ; dwInitParam push dword ptr [edi] ; int push dword ptr [esi+8] ; hInstance push esi ; int call sub_7F805168 test eax, eax jz short loc_7F804CE7 jmp short loc_7F804CBC ; --------------------------------------------------------------------------- loc_7F804CE0: ; CODE XREF: sub_7F804C4A+82j mov [ebp+var_20], 1 loc_7F804CE7: ; CODE XREF: sub_7F804C4A+5Ej ; sub_7F804C4A+92j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804CF9 loc_7F804CF3: ; DATA XREF: .text:stru_7F8011C8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F804C4A mov eax, [ebp+var_20] loc_7F804CF9: ; DATA XREF: sub_7F804C4A+A4o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F804C4A endp ; =============== S U B R O U T I N E ======================================= sub_7F804D0C proc near ; CODE XREF: sub_7F8045B6+E7p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push ebx mov edx, [esp+4+arg_0] push esi push edi mov eax, [eax] push ebp cmp [edx], eax jnb short loc_7F804D22 xor eax, eax jmp short loc_7F804D64 ; --------------------------------------------------------------------------- loc_7F804D22: ; CODE XREF: sub_7F804D0C+10j xor esi, esi test eax, eax jz short loc_7F804D62 mov edi, [esp+10h+arg_4] add edi, 4 loc_7F804D2F: ; CODE XREF: sub_7F804D0C+54j xor ebx, ebx mov eax, [edx] cmp eax, ebx jz short loc_7F804D56 lea ebp, [edx+4] loc_7F804D3A: ; CODE XREF: sub_7F804D0C+3Bj mov ecx, [edi] cmp [ebp+0], ecx jz short loc_7F804D4B add ebp, 4 inc ebx cmp eax, ebx ja short loc_7F804D3A jmp short loc_7F804D56 ; --------------------------------------------------------------------------- loc_7F804D4B: ; CODE XREF: sub_7F804D0C+33j dec eax mov [edx], eax mov ecx, [edx+eax*4+4] mov [edx+ebx*4+4], ecx loc_7F804D56: ; CODE XREF: sub_7F804D0C+29j ; sub_7F804D0C+3Dj mov eax, [esp+10h+arg_4] add edi, 4 inc esi cmp [eax], esi ja short loc_7F804D2F loc_7F804D62: ; CODE XREF: sub_7F804D0C+1Aj mov eax, [edx] loc_7F804D64: ; CODE XREF: sub_7F804D0C+14j pop ebp pop edi pop esi pop ebx retn 8 sub_7F804D0C endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F804D6B(int, HINSTANCE hInstance, int) sub_7F804D6B proc near ; CODE XREF: sub_7F80397D+71p ; sub_7F803DCD+AAp arg_0 = dword ptr 4 hInstance = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi push edi mov esi, 80004005h mov edi, [esp+0Ch+arg_0] push ebp mov ebx, [edi] test ebx, ebx jz loc_7F804E2E lea ebp, [ebx+0Ch] mov eax, [ebp+0] add dword ptr [eax+0A8h], 4 mov eax, [ebp+0] inc dword ptr [eax+4ACh] xor eax, eax mov ecx, [ebp+0] mov edx, [ecx+0A8h] mov dword ptr [edx], 0F07h cmp [ebx+24h], eax jz short loc_7F804DDE cmp [esp+10h+arg_8], eax jz short loc_7F804DDE mov dword_7F8351C0, eax loc_7F804DB9: ; CODE XREF: sub_7F804D6B+6Fj mov eax, [ebx+14h] push 0 push eax mov esi, [eax] call dword ptr [esi+10h] mov esi, eax test esi, esi jge short loc_7F804DE7 push esi ; dwInitParam push dword ptr [ebx+14h] ; int push [esp+18h+hInstance] ; hInstance push ebx ; int call sub_7F805168 test eax, eax jnz short loc_7F804DB9 jmp short loc_7F804DE7 ; --------------------------------------------------------------------------- loc_7F804DDE: ; CODE XREF: sub_7F804D6B+41j ; sub_7F804D6B+47j cmp [esp+10h+arg_8], 0 jnz short loc_7F804DE7 xor esi, esi loc_7F804DE7: ; CODE XREF: sub_7F804D6B+5Dj ; sub_7F804D6B+71j ... mov eax, [ebx+14h] test eax, eax jz short loc_7F804DF4 push eax mov eax, [eax] call dword ptr [eax+8] loc_7F804DF4: ; CODE XREF: sub_7F804D6B+81j mov eax, [ebp+0] push dword ptr [ebx+1Ch] call dword ptr [eax+98h] mov ecx, [ebp+0] push ebx mov edx, [ecx+0A8h] mov dword ptr [edx], 0F00h mov ecx, [ebp+0] sub dword ptr [ecx+0A8h], 4 mov eax, [ebp+0] dec dword ptr [eax+4ACh] call MAPIFreeBuffer@4 mov dword ptr [edi], 0 loc_7F804E2E: ; CODE XREF: sub_7F804D6B+11j mov eax, esi pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F804D6B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F804E37(int, HINSTANCE hInstance, int, int) sub_7F804E37 proc near ; CODE XREF: sub_7F804058+1FDp ; sub_7F8042DA+233p var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011D8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 10h mov [ebp+var_1C], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax mov esi, [ebp+arg_8] cmp esi, eax jz short loc_7F804E9B cmp [ebp+arg_C], eax jz short loc_7F804E95 mov dword_7F8351C0, eax loc_7F804E76: ; CODE XREF: sub_7F804E37+5Cj push 0 push esi mov eax, [esi] call dword ptr [eax+10h] test eax, eax jz short loc_7F804E95 push eax ; dwInitParam push esi ; int push [ebp+hInstance] ; hInstance push [ebp+arg_0] ; int call sub_7F805168 test eax, eax jz short loc_7F804EA2 jmp short loc_7F804E76 ; --------------------------------------------------------------------------- loc_7F804E95: ; CODE XREF: sub_7F804E37+38j ; sub_7F804E37+49j push esi mov eax, [esi] call dword ptr [eax+8] loc_7F804E9B: ; CODE XREF: sub_7F804E37+33j mov [ebp+var_1C], 1 loc_7F804EA2: ; CODE XREF: sub_7F804E37+5Aj mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F804EB4 loc_7F804EAE: ; DATA XREF: .text:stru_7F8011D8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F804E37 mov eax, [ebp+var_1C] loc_7F804EB4: ; DATA XREF: sub_7F804E37+72o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F804E37 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F804EC7 proc near ; CODE XREF: sub_7F80504F+68p ; sub_7F805168+CDp String2 = byte ptr -580h String1 = byte ptr -480h Buffer = byte ptr -80h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp xor ecx, ecx mov ebp, esp sub esp, 580h cmp dword_7F835290, ecx push esi push edi mov [ebp+String1], cl jz short loc_7F804F29 mov eax, dword_7F835290 cmp [eax+8], ecx jz short loc_7F804F29 push 80h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer mov esi, [ebp+arg_0] push 1534h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA mov eax, dword_7F835290 lea edx, [ebp+Buffer] push dword ptr [eax+8] push edx push offset aSS ; "%s: %s\r\n" lea eax, [ebp+String1] push eax ; LPSTR call ds:wsprintfA add esp, 10h jmp short loc_7F804F2C ; --------------------------------------------------------------------------- loc_7F804F29: ; CODE XREF: sub_7F804EC7+19j ; sub_7F804EC7+23j mov esi, [ebp+arg_0] loc_7F804F2C: ; CODE XREF: sub_7F804EC7+60j lea edi, [esi+4F8h] cmp dword ptr [edi], 0 jz short loc_7F804F6A push 80h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 152Fh ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA lea edx, [ebp+Buffer] lea eax, [ebp+String1] push dword ptr [edi] push edx push eax push offset aSSS ; "%s%s: %s\r\n" push eax ; LPSTR call ds:wsprintfA add esp, 14h loc_7F804F6A: ; CODE XREF: sub_7F804EC7+6Ej mov edi, [ebp+arg_8] test edi, edi jz short loc_7F804FA3 push 80h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1530h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA push edi lea ecx, [ebp+Buffer] push ecx lea eax, [ebp+String1] push eax push offset aSSS_0 ; "%s%s: %s\r\n" push eax ; LPSTR call ds:wsprintfA add esp, 14h loc_7F804FA3: ; CODE XREF: sub_7F804EC7+A8j push [ebp+arg_4] lea ecx, [ebp+String1] push ecx push offset aSS_0 ; "%s%s\r\n" push ecx ; LPSTR call ds:wsprintfA add esp, 10h cmp dword ptr [esi+88h], 0 jz short loc_7F804FED cmp dword ptr [esi+8Ch], 0 jnz short loc_7F804FED mov eax, [esi+9Ch] lea ecx, [ebp+String1] and eax, 20000000h shr eax, 1Dh push eax ; int push ecx ; lpString call sub_7F80549A test eax, eax jnz short loc_7F805041 loc_7F804FED: ; CODE XREF: sub_7F804EC7+FCj ; sub_7F804EC7+105j push 100h ; cchBufferMax lea eax, [ebp+String2] push eax ; lpBuffer push 1005h ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA lea ecx, [ebp+String2] lea edx, [ebp+String1] push ecx ; lpString2 push edx ; lpString1 call ds:lstrcatA push 2001h ; uType lea ecx, [ebp+String1] push offset Caption ; lpCaption push ecx ; lpText push dword ptr [esi+4] ; hWnd call ds:MessageBoxA cmp eax, 2 jnz short loc_7F805041 mov dword ptr [esi+0Ch], 2 loc_7F805041: ; CODE XREF: sub_7F804EC7+124j ; sub_7F804EC7+171j pop edi inc dword_7F833FB0 pop esi mov esp, ebp pop ebp retn 10h sub_7F804EC7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80504F(int, HINSTANCE hInstance, UINT uID, LPARAM dwInitParam) sub_7F80504F proc near ; CODE XREF: sub_7F802DB7+36Bp ; sub_7F8035B3+F0p ... var_400 = byte ptr -400h Buffer = byte ptr -200h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch uID = dword ptr 10h dwInitParam = dword ptr 14h push ebp mov ebp, esp sub esp, 400h push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_0] cmp [esi], ebx jz short loc_7F80506A mov ebx, [esi+20h] mov esi, [esi+0Ch] loc_7F80506A: ; CODE XREF: sub_7F80504F+13j lea edi, [ebp+Buffer] xor eax, eax mov ecx, 80h push 200h ; cchBufferMax rep stosd lea eax, [ebp+Buffer] push eax ; lpBuffer push [ebp+uID] ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA mov edi, [ebp+dwInitParam] lea eax, [ebp+Buffer] push edi lea ecx, [ebp+var_400] push eax ; LPCSTR push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+var_400] push 0 push ebx push ecx push esi call sub_7F804EC7 test byte ptr [esi+0Ch], 2 jnz loc_7F80515D cmp edi, 80040115h jz short loc_7F8050DE cmp edi, 80040116h jz short loc_7F8050DE cmp edi, 8004010Dh jnz short loc_7F80515D loc_7F8050DE: ; CODE XREF: sub_7F80504F+7Dj ; sub_7F80504F+85j cmp dword_7F8351C0, 5 jnb short loc_7F80511D push 1F4h ; dwMilliseconds call ds:Sleep cmp dword ptr [esi+88h], 0 jz short loc_7F805110 test byte ptr [esi+9Fh], 20h jz short loc_7F805110 push 0 ; int push 40000003h ; dwEventID call sub_7F805583 loc_7F805110: ; CODE XREF: sub_7F80504F+AAj ; sub_7F80504F+B3j mov eax, 1 inc dword_7F8351C0 jmp short loc_7F80515F ; --------------------------------------------------------------------------- loc_7F80511D: ; CODE XREF: sub_7F80504F+96j push edi ; dwInitParam push offset DialogFunc ; lpDialogFunc push dword ptr [esi+4] ; hWndParent push 41Ah ; lpTemplateName push [ebp+hInstance] ; hInstance call ds:DialogBoxParamA test eax, eax jz short loc_7F80515D cmp dword ptr [esi+88h], 0 jz short loc_7F805156 test byte ptr [esi+9Fh], 20h jz short loc_7F805156 push 0 ; int push 40000003h ; dwEventID call sub_7F805583 loc_7F805156: ; CODE XREF: sub_7F80504F+F0j ; sub_7F80504F+F9j mov eax, 1 jmp short loc_7F80515F ; --------------------------------------------------------------------------- loc_7F80515D: ; CODE XREF: sub_7F80504F+71j ; sub_7F80504F+8Dj ... xor eax, eax loc_7F80515F: ; CODE XREF: sub_7F80504F+CCj ; sub_7F80504F+10Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80504F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F805168(int, HINSTANCE hInstance, int, LPARAM dwInitParam) sub_7F805168 proc near ; CODE XREF: sub_7F802DB7+E9p ; sub_7F802DB7+130p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 lpBuffer = dword ptr -4 arg_0 = dword ptr 8 hInstance = dword ptr 0Ch arg_8 = dword ptr 10h dwInitParam = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx xor edi, edi mov esi, [ebp+arg_0] mov [ebp+lpBuffer], ebx mov [ebp+var_8], ebx mov [ebp+var_C], ebx cmp [esi], ebx jz short loc_7F80518B mov edi, [esi+20h] mov esi, [esi+0Ch] loc_7F80518B: ; CODE XREF: sub_7F805168+1Bj lea eax, [ebp+var_8] push eax push 0 push [ebp+dwInitParam] mov eax, [ebp+arg_8] push eax mov eax, [eax] call dword ptr [eax+0Ch] cmp [ebp+var_8], 0 jz short loc_7F8051CA mov eax, [ebp+var_8] mov ecx, [eax+4] mov [ebp+lpBuffer], ecx test ecx, ecx mov ebx, [eax+8] jz short loc_7F8051B8 cmp byte ptr [ecx], 0 jnz short loc_7F8051BF loc_7F8051B8: ; CODE XREF: sub_7F805168+49j mov [ebp+lpBuffer], 0 loc_7F8051BF: ; CODE XREF: sub_7F805168+4Ej test ebx, ebx jz short loc_7F8051C8 cmp byte ptr [ebx], 0 jnz short loc_7F8051CA loc_7F8051C8: ; CODE XREF: sub_7F805168+59j xor ebx, ebx loc_7F8051CA: ; CODE XREF: sub_7F805168+39j ; sub_7F805168+5Ej cmp [ebp+lpBuffer], 0 jnz short loc_7F805221 lea eax, [ebp+lpBuffer] push eax push 100h call dword ptr [esi+90h] test eax, eax jnz short loc_7F805221 push 100h ; cchBufferMax mov eax, [ebp+dwInitParam] push [ebp+lpBuffer] ; lpBuffer and eax, 0FFFh add eax, 1300h push eax ; uID push dword ptr [esi+8] ; hInstance call ds:LoadStringA test eax, eax jnz short loc_7F80521A push [ebp+dwInitParam] push offset aMapiError08lx ; "MAPI Error: %08lX" push [ebp+lpBuffer] ; LPSTR call ds:wsprintfA add esp, 0Ch loc_7F80521A: ; CODE XREF: sub_7F805168+9Cj mov [ebp+var_C], 1 loc_7F805221: ; CODE XREF: sub_7F805168+66j ; sub_7F805168+79j push [ebp+dwInitParam] call sub_7F802C5D push ebx mov [esi+8Ch], eax push edi push [ebp+lpBuffer] push esi call sub_7F804EC7 cmp [ebp+var_8], 0 jz short loc_7F805249 push [ebp+var_8] call dword ptr [esi+98h] loc_7F805249: ; CODE XREF: sub_7F805168+D6j cmp [ebp+var_C], 0 jz short loc_7F805258 push [ebp+lpBuffer] call dword ptr [esi+98h] loc_7F805258: ; CODE XREF: sub_7F805168+E5j test byte ptr [esi+0Ch], 2 jnz loc_7F805302 cmp [ebp+dwInitParam], 80040115h jz short loc_7F805281 cmp [ebp+dwInitParam], 80040116h jz short loc_7F805281 cmp [ebp+dwInitParam], 8004010Dh jnz loc_7F805302 loc_7F805281: ; CODE XREF: sub_7F805168+101j ; sub_7F805168+10Aj cmp dword_7F8351C0, 5 jnb short loc_7F8052C0 push 1F4h ; dwMilliseconds call ds:Sleep cmp dword ptr [esi+88h], 0 jz short loc_7F8052B3 test byte ptr [esi+9Fh], 20h jz short loc_7F8052B3 push 0 ; int push 40000003h ; dwEventID call sub_7F805583 loc_7F8052B3: ; CODE XREF: sub_7F805168+134j ; sub_7F805168+13Dj mov eax, 1 inc dword_7F8351C0 jmp short loc_7F805304 ; --------------------------------------------------------------------------- loc_7F8052C0: ; CODE XREF: sub_7F805168+120j push [ebp+dwInitParam] ; dwInitParam push offset DialogFunc ; lpDialogFunc push dword ptr [esi+4] ; hWndParent push 41Ah ; lpTemplateName push [ebp+hInstance] ; hInstance call ds:DialogBoxParamA test eax, eax jz short loc_7F805302 cmp dword ptr [esi+88h], 0 jz short loc_7F8052FB test byte ptr [esi+9Fh], 20h jz short loc_7F8052FB push 0 ; int push 40000003h ; dwEventID call sub_7F805583 loc_7F8052FB: ; CODE XREF: sub_7F805168+17Cj ; sub_7F805168+185j mov eax, 1 jmp short loc_7F805304 ; --------------------------------------------------------------------------- loc_7F805302: ; CODE XREF: sub_7F805168+F4j ; sub_7F805168+113j ... xor eax, eax loc_7F805304: ; CODE XREF: sub_7F805168+156j ; sub_7F805168+198j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F805168 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80530D(int, HINSTANCE hInstance, int) sub_7F80530D proc near ; CODE XREF: ScMMFMigrateToMDB@48+14Ep ; sub_7F807D9C+257p ... var_20 = dword ptr -20h lpString2 = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 hInstance = dword ptr 0Ch arg_8 = dword ptr 10h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011E8 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 10h mov [ebp+lpString2], eax mov [ebp+var_20], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax cmp [ebp+arg_8], eax jz short loc_7F805353 push [ebp+hInstance] ; hInstance call sub_7F80560A mov [ebp+var_20], eax jmp loc_7F8053DE ; --------------------------------------------------------------------------- loc_7F805353: ; CODE XREF: sub_7F80530D+34j push 5Ch push [ebp+arg_0] call sub_7F82FCB0 add esp, 8 mov [ebp+lpString2], eax test eax, eax jz short loc_7F80536C inc [ebp+lpString2] jmp short loc_7F805372 ; --------------------------------------------------------------------------- loc_7F80536C: ; CODE XREF: sub_7F80530D+58j mov eax, [ebp+arg_0] mov [ebp+lpString2], eax loc_7F805372: ; CODE XREF: sub_7F80530D+5Dj push [ebp+lpString2] ; lpString2 mov esi, offset FileName push esi ; lpString1 call ds:lstrcpyA push 2Eh push esi call sub_7F82FCB0 add esp, 8 mov [ebp+lpString2], eax test eax, eax jz short loc_7F8053A1 push offset a_log ; ".log" push eax ; lpString1 call ds:lstrcpyA jmp short loc_7F8053B1 ; --------------------------------------------------------------------------- loc_7F8053A1: ; CODE XREF: sub_7F80530D+84j push offset a_log_0 ; ".LOG" push offset FileName ; lpString1 call ds:lstrcatA loc_7F8053B1: ; CODE XREF: sub_7F80530D+92j xor eax, eax push eax ; hTemplateFile push 8000080h ; dwFlagsAndAttributes push 2 ; dwCreationDisposition push eax ; lpSecurityAttributes push eax ; dwShareMode push 0C0000000h ; dwDesiredAccess push offset FileName ; lpFileName call ds:CreateFileA mov hFile, eax cmp eax, 0FFFFFFFFh jz short loc_7F8053DE mov [ebp+var_20], 1 loc_7F8053DE: ; CODE XREF: sub_7F80530D+41j ; sub_7F80530D+C8j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F8053F0 loc_7F8053EA: ; DATA XREF: .text:stru_7F8011E8o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F80530D mov eax, [ebp+var_20] loc_7F8053F0: ; DATA XREF: sub_7F80530D+D8o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80530D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F805403 proc near ; CODE XREF: ScMMFMigrateToMDB@48+2F3p ; sub_7F807D9C+332p ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8011F8 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 0Ch push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.registration.TryLevel], esi cmp [ebp+arg_0], esi jnz short loc_7F805463 cmp hFile, 0FFFFFFFFh jz short loc_7F805463 push esi ; lpFileSizeHigh mov eax, hFile push eax ; hFile call ds:GetFileSize mov edi, eax mov eax, hFile push eax ; hObject call ds:CloseHandle test edi, edi jnz short loc_7F805463 push offset FileName ; lpFileName call ds:DeleteFileA loc_7F805463: ; CODE XREF: sub_7F805403+2Bj ; sub_7F805403+34j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F805488 loc_7F80546F: ; DATA XREF: .text:stru_7F8011F8o mov hFile, 0FFFFFFFFh ; Finally handler 0 for function 7F805403 mov edi, offset FileName xor eax, eax mov ecx, 41h rep stosd retn ; --------------------------------------------------------------------------- loc_7F805488: ; DATA XREF: sub_7F805403+67o mov eax, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, eax pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F805403 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80549A(LPCSTR lpString, int) sub_7F80549A proc near ; CODE XREF: sub_7F804EC7+11Dp ; sub_7F80B343+2Ep NumberOfBytesWritten= dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h lpString = dword ptr 8 arg_4 = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801208 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 14h mov [ebp+NumberOfBytesWritten], eax mov [ebp+var_1C], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax cmp [ebp+arg_4], eax push [ebp+lpString] ; int jz short loc_7F8054E2 push 0C0000001h ; dwEventID call sub_7F805583 mov [ebp+var_1C], eax jmp short loc_7F80555A ; --------------------------------------------------------------------------- loc_7F8054E2: ; CODE XREF: sub_7F80549A+37j call ds:lstrlenA mov esi, eax push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesWritten] push eax ; lpNumberOfBytesWritten push esi ; nNumberOfBytesToWrite push [ebp+lpString] ; lpBuffer mov eax, hFile push eax ; hFile call ds:WriteFile test eax, eax jz short loc_7F805512 cmp esi, [ebp+NumberOfBytesWritten] jnz short loc_7F805512 mov [ebp+var_1C], 1 jmp short loc_7F805519 ; --------------------------------------------------------------------------- loc_7F805512: ; CODE XREF: sub_7F80549A+68j ; sub_7F80549A+6Dj mov [ebp+var_1C], 0 loc_7F805519: ; CODE XREF: sub_7F80549A+76j mov edi, offset Buffer ; "\r\n\r\n" push edi ; lpString call ds:lstrlenA mov esi, eax cmp [ebp+var_1C], 0 jz short loc_7F805553 push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesWritten] push eax ; lpNumberOfBytesWritten push esi ; nNumberOfBytesToWrite push edi ; lpBuffer mov eax, hFile push eax ; hFile call ds:WriteFile test eax, eax jz short loc_7F805553 cmp esi, [ebp+NumberOfBytesWritten] jnz short loc_7F805553 mov [ebp+var_1C], 1 jmp short loc_7F80555A ; --------------------------------------------------------------------------- loc_7F805553: ; CODE XREF: sub_7F80549A+91j ; sub_7F80549A+A9j ... mov [ebp+var_1C], 0 loc_7F80555A: ; CODE XREF: sub_7F80549A+46j ; sub_7F80549A+B7j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F805570 loc_7F805566: ; DATA XREF: .text:stru_7F801208o cmp [ebp+arg_4], 0 ; Finally handler 0 for function 7F80549A mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_1C] loc_7F805570: ; DATA XREF: sub_7F80549A+C7o mov ecx, [ebp+ms_exc.registration.Next] mov large fs:0, ecx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80549A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F805583(DWORD dwEventID, int) sub_7F805583 proc near ; CODE XREF: sub_7F80504F+BCp ; sub_7F80504F+102p ... Strings = dword ptr -10h hEventLog = dword ptr -8 wNumStrings = word ptr -2 dwEventID = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 10h push ebx push esi push edi xor esi, esi cmp eax, esi jz short loc_7F8055A1 mov [ebp+wNumStrings], 1 mov [ebp+Strings], eax jmp short loc_7F8055A7 ; --------------------------------------------------------------------------- loc_7F8055A1: ; CODE XREF: sub_7F805583+11j mov [ebp+wNumStrings], 0 loc_7F8055A7: ; CODE XREF: sub_7F805583+1Cj mov eax, [ebp+dwEventID] shr eax, 1Eh cmp eax, 1 jbe short loc_7F8055BD cmp eax, 2 jz short loc_7F8055C3 mov di, 1 jmp short loc_7F8055C7 ; --------------------------------------------------------------------------- loc_7F8055BD: ; CODE XREF: sub_7F805583+2Dj mov di, 4 jmp short loc_7F8055C7 ; --------------------------------------------------------------------------- loc_7F8055C3: ; CODE XREF: sub_7F805583+32j mov di, 2 loc_7F8055C7: ; CODE XREF: sub_7F805583+38j ; sub_7F805583+3Ej push offset SourceName ; lpSourceName xor ebx, ebx push ebx ; lpUNCServerName call ds:RegisterEventSourceA mov [ebp+hEventLog], eax cmp eax, ebx jz short loc_7F8055FF push ebx ; lpRawData lea eax, [ebp+Strings] push eax ; lpStrings push ebx ; dwDataSize push dword ptr [ebp+wNumStrings] ; wNumStrings push ebx ; lpUserSid push [ebp+dwEventID] ; dwEventID push ebx ; wCategory push edi ; wType push [ebp+hEventLog] ; hEventLog call ds:ReportEventA push [ebp+hEventLog] ; hEventLog mov esi, eax call ds:DeregisterEventSource loc_7F8055FF: ; CODE XREF: sub_7F805583+57j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F805583 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80560A(HINSTANCE hInstance) sub_7F80560A proc near ; CODE XREF: sub_7F80530D+39p Buffer = byte ptr -12Ch Data = byte ptr -28h var_24 = dword ptr -24h phkResult = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h hInstance = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801218 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 11Ch mov [ebp+var_24], 1 push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+phkResult], esi mov [ebp+var_1C], esi mov [ebp+ms_exc.registration.TryLevel], esi mov edi, 104h push edi ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1008h ; uID push [ebp+hInstance] ; hInstance call ds:LoadStringA push 20h ; cchBufferMax mov ebx, offset SourceName push ebx ; lpBuffer push 1009h ; uID push [ebp+hInstance] ; hInstance call ds:LoadStringA push ebx ; lpString2 lea eax, [ebp+Buffer] push eax ; lpString1 call ds:lstrcatA lea eax, [ebp+phkResult] push eax ; phkResult lea eax, [ebp+Buffer] push eax ; lpSubKey push 80000002h ; hKey call ds:RegCreateKeyA mov [ebp+var_1C], eax cmp eax, esi jnz short loc_7F80570F push edi ; nSize lea eax, [ebp+Buffer] push eax ; lpFilename push [ebp+hInstance] ; hModule call ds:GetModuleFileNameA test eax, eax jnz short loc_7F8056BE call ds:GetLastError jmp short loc_7F80570C ; --------------------------------------------------------------------------- loc_7F8056BE: ; CODE XREF: sub_7F80560A+AAj lea eax, [ebp+Buffer] push eax ; lpString call ds:lstrlenA inc eax push eax ; cbData lea eax, [ebp+Buffer] push eax ; lpData push 1 ; dwType xor esi, esi push esi ; Reserved push offset ValueName ; "EventMessageFile" push [ebp+phkResult] ; hKey call ds:RegSetValueExA mov [ebp+var_1C], eax cmp eax, esi jnz short loc_7F80570F mov dword ptr [ebp+Data], 7 push 4 ; cbData lea eax, [ebp+Data] push eax ; lpData push 4 ; dwType push esi ; Reserved push offset aTypessupported ; "TypesSupported" push [ebp+phkResult] ; hKey call ds:RegSetValueExA loc_7F80570C: ; CODE XREF: sub_7F80560A+B2j mov [ebp+var_1C], eax loc_7F80570F: ; CODE XREF: sub_7F80560A+95j ; sub_7F80560A+E2j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F80573A loc_7F80571B: ; DATA XREF: .text:stru_7F801218o xor eax, eax ; Finally handler 0 for function 7F80560A cmp [ebp+var_1C], eax jz short loc_7F805725 mov [ebp+var_24], eax loc_7F805725: ; CODE XREF: sub_7F80560A+116j cmp [ebp+phkResult], 0 jz short loc_7F805734 push [ebp+phkResult] ; hKey call ds:RegCloseKey loc_7F805734: ; CODE XREF: sub_7F80560A+11Fj mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_24] loc_7F80573A: ; DATA XREF: sub_7F80560A+10Co mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F80560A endp ; Exported entry 1. MMFMIG_ProcessMMF@4 ; =============== S U B R O U T I N E ======================================= ; int __stdcall MMFMIG_ProcessMMF(LPARAM dwInitParam) public MMFMIG_ProcessMMF@4 MMFMIG_ProcessMMF@4 proc near ; DATA XREF: .text:off_7F8326A8o dwInitParam = dword ptr 4 push esi push offset ModuleName ; "mmfmig32.dll" call ds:GetModuleHandleA mov esi, [esp+4+dwInitParam] mov hInstance, eax push esi mov eax, [esi] call dword ptr [eax+4] push esi ; dwInitParam mov eax, hInstance push eax ; hInstance call sub_7F80577A xor eax, eax pop esi retn 4 MMFMIG_ProcessMMF@4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80577A(HINSTANCE hInstance, LPARAM dwInitParam) sub_7F80577A proc near ; CODE XREF: MMFMIG_ProcessMMF@4+22p var_44 = byte ptr -44h hWnd = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h hInstance = dword ptr 8 dwInitParam = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801228 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 34h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_1C], esi mov [ebp+var_20], esi mov [ebp+ms_exc.registration.TryLevel], esi mov edi, [ebp+dwInitParam] cmp edi, esi jnz short loc_7F8057BE call sub_7F808A02 mov [ebp+var_1C], eax cmp eax, esi jz short loc_7F805821 loc_7F8057BE: ; CODE XREF: sub_7F80577A+36j mov esi, [ebp+hInstance] push esi lea eax, [ebp+var_44] push eax call sub_7F80C828 lea eax, [ebp+var_44] push eax call sub_7F80C955 push 80h ; cchBufferMax push offset byte_7F833F30 ; lpBuffer push 1513h ; uID push esi ; hInstance call ds:LoadStringA call ds:GetFocus mov [ebp+hWnd], eax push edi ; dwInitParam push offset sub_7F805851 ; lpDialogFunc call ds:GetActiveWindow push eax ; hWndParent push 258h ; lpTemplateName push esi ; hInstance call ds:DialogBoxParamA mov [ebp+var_20], eax push [ebp+hWnd] ; hWnd call ds:SetFocus lea eax, [ebp+var_44] push eax call sub_7F80C933 loc_7F805821: ; CODE XREF: sub_7F80577A+42j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F80583E loc_7F80582D: ; DATA XREF: .text:stru_7F801228o cmp [ebp+var_1C], 0 ; Finally handler 0 for function 7F80577A jz short loc_7F805838 call MAPIUninitialize@0 loc_7F805838: ; CODE XREF: sub_7F80577A+B7j mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_20] loc_7F80583E: ; DATA XREF: sub_7F80577A+AEo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80577A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; BOOL __stdcall sub_7F805851(HWND, UINT, WPARAM, LPARAM) sub_7F805851 proc near ; DATA XREF: sub_7F80577A+7Ao Buffer = byte ptr -58h var_18 = dword ptr -18h var_14 = dword ptr -14h Rect = tagRECT ptr -10h hDlg = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 58h push ebx push esi push edi mov esi, [ebp+arg_8] mov eax, esi mov edx, [ebp+arg_4] shr eax, 10h cmp edx, 0Fh movzx edi, si movzx ecx, ax jz short loc_7F8058C2 cmp edx, 10h jz short loc_7F8058CC cmp edx, 53h jz short loc_7F8058DE cmp edx, 110h jz short loc_7F8058EF mov eax, 111h cmp edx, eax jz loc_7F805B78 cmp edx, 112h jz loc_7F805E6F cmp edx, dword_7F8352A0 jnz short loc_7F8058B7 push 0 ; lParam push 387h ; wParam push eax ; Msg mov eax, hDlg push eax ; hWnd loc_7F8058B1: ; CODE XREF: sub_7F805851+9Cj ; sub_7F805851+2F8j ... call ds:PostMessageA loc_7F8058B7: ; CODE XREF: sub_7F805851+50j ; sub_7F805851+79j ... xor eax, eax loc_7F8058B9: ; CODE XREF: sub_7F805851+8Bj ; sub_7F805851+E2j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F8058C2: ; CODE XREF: sub_7F805851+1Dj push [ebp+hDlg] ; hWnd call sub_7F8097B9 jmp short loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F8058CC: ; CODE XREF: sub_7F805851+22j push 0 ; nResult push [ebp+hDlg] ; hDlg call ds:EndDialog mov eax, 1 jmp short loc_7F8058B9 ; --------------------------------------------------------------------------- loc_7F8058DE: ; CODE XREF: sub_7F805851+27j push 0 push 387h push 111h push [ebp+hDlg] jmp short loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F8058EF: ; CODE XREF: sub_7F805851+2Fj mov eax, [ebp+hDlg] mov hDlg, eax call sub_7F8088BB mov dword_7F835290, eax test eax, eax jnz short loc_7F805935 push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1007h ; uID push [ebp+hDlg] ; hWnd call sub_7F808359 push 0 ; lParam push 0D0h ; wParam push 111h ; Msg push [ebp+hDlg] ; hWnd call ds:PostMessageA mov eax, 1 jmp short loc_7F8058B9 ; --------------------------------------------------------------------------- loc_7F805935: ; CODE XREF: sub_7F805851+B2j cmp [ebp+arg_C], 0 mov eax, dword_7F835290 jz loc_7F805B2B mov edx, [ebp+arg_C] or byte ptr [eax], 8 mov ecx, dword_7F835290 mov [ecx+24h], edx loc_7F805953: ; CODE XREF: sub_7F805851+30Dj xor esi, esi mov ebx, 0F1h push [ebp+hDlg] ; hDlg call sub_7F808C12 push esi ; lParam mov edi, ds:SendDlgItemMessageA push 1 ; wParam push ebx ; Msg push 268h ; nIDDlgItem push [ebp+hDlg] ; hDlg call edi ; SendDlgItemMessageA push esi ; lParam push 1 ; wParam push ebx ; Msg push 270h ; nIDDlgItem push [ebp+hDlg] ; hDlg call edi ; SendDlgItemMessageA push esi ; lParam push 1 ; wParam push ebx ; Msg push 271h ; nIDDlgItem push [ebp+hDlg] ; hDlg call edi ; SendDlgItemMessageA push 4 ; nIndex mov ebx, ds:GetSystemMetrics mov dword_7F833268, esi call ebx ; GetSystemMetrics push 20h ; nIndex mov [ebp+var_14], eax call ebx ; GetSystemMetrics mov edi, eax push 21h ; nIndex call ebx ; GetSystemMetrics mov [ebp+var_18], eax mov [ebp+Rect.left], esi lea eax, [ebp+Rect] mov [ebp+Rect.top], esi push eax ; lpRect add edi, edi push [ebp+hDlg] ; hDlg mov [ebp+Rect.right], 100h mov [ebp+Rect.bottom], 0A4h call ds:MapDialogRect mov eax, [ebp+Rect.right] mov ebx, [ebp+var_18] add eax, edi add ebx, ebx mov dword_7F833150, eax mov dword_7F8338A8, esi mov eax, [ebp+Rect.bottom] mov dword_7F8338AC, esi add eax, ebx lea ecx, [ebp+Rect] add eax, [ebp+var_14] push ecx ; lpRect push [ebp+hDlg] ; hDlg mov [ebp+Rect.right], 0C0h mov [ebp+Rect.bottom], 60h mov dword_7F833154, eax call ds:MapDialogRect mov eax, [ebp+Rect.right] mov [ebp+Rect.right], 100h add eax, edi lea ecx, [ebp+Rect] push ecx ; lpRect mov dword_7F8338B0, eax push [ebp+hDlg] ; hDlg mov eax, [ebp+Rect.bottom] mov [ebp+Rect.bottom], 65h add eax, ebx add eax, [ebp+var_14] mov dword_7F8338B4, eax call ds:MapDialogRect mov eax, [ebp+Rect.right] mov [ebp+Rect.right], 100h add eax, edi lea ecx, [ebp+Rect] push ecx ; lpRect mov dword_7F833270, eax push [ebp+hDlg] ; hDlg mov eax, [ebp+Rect.bottom] mov [ebp+Rect.bottom], 87h add eax, ebx add eax, [ebp+var_14] mov dword_7F833274, eax call ds:MapDialogRect mov eax, [ebp+Rect.right] mov [ebp+Rect.right], 100h add eax, edi lea ecx, [ebp+Rect] push ecx ; lpRect mov dword_7F833278, eax push [ebp+hDlg] ; hDlg mov eax, [ebp+Rect.bottom] mov [ebp+Rect.bottom], 5Ah add eax, ebx add eax, [ebp+var_14] mov dword_7F83327C, eax call ds:MapDialogRect mov eax, [ebp+Rect.right] mov [ebp+Rect.right], 0C0h add eax, edi lea ecx, [ebp+Rect] push ecx ; lpRect mov dword_7F8339C8, eax push [ebp+hDlg] ; hDlg mov eax, [ebp+Rect.bottom] mov [ebp+Rect.bottom], 57h add eax, ebx add eax, [ebp+var_14] mov dword_7F8339CC, eax call ds:MapDialogRect mov eax, [ebp+Rect.right] add eax, edi mov dword_7F833688, eax mov eax, [ebp+Rect.bottom] add eax, ebx add eax, [ebp+var_14] mov dword_7F83368C, eax cmp dword_7F8352A0, esi jnz short loc_7F805B0F push offset String ; "commdlg_help" call ds:RegisterWindowMessageA mov dword_7F8352A0, eax loc_7F805B0F: ; CODE XREF: sub_7F805851+2ACj push [ebp+hDlg] ; hDlg call sub_7F805EBF push 0 ; int push [ebp+hDlg] ; hWnd call sub_7F809758 mov eax, 1 jmp loc_7F8058B9 ; --------------------------------------------------------------------------- loc_7F805B2B: ; CODE XREF: sub_7F805851+EDj push [ebp+hDlg] ; hWnd and byte ptr [eax], 0F7h call sub_7F808A6D test eax, eax jnz short loc_7F805B4E push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805B4E: ; CODE XREF: sub_7F805851+2E7j mov eax, dword_7F835290 push eax push [ebp+hDlg] call sub_7F808BE2 test eax, eax jnz loc_7F805953 push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805B78: ; CODE XREF: sub_7F805851+38j cmp edi, 0C8h jg short loc_7F805B94 jz loc_7F805D9A cmp edi, 0BEh jz loc_7F805C26 jmp short loc_7F805C04 ; --------------------------------------------------------------------------- loc_7F805B94: ; CODE XREF: sub_7F805851+32Dj cmp edi, 339h jg short loc_7F805BF8 jz loc_7F805E28 cmp edi, 0C9h jz loc_7F805DA7 cmp edi, 0CAh jz loc_7F805DB4 cmp edi, 0CCh jz loc_7F805DC1 cmp edi, 0CDh jz loc_7F805DCE cmp edi, 0CEh jz loc_7F805DDB cmp edi, 0CFh jz loc_7F805DE8 cmp edi, 0D0h jz loc_7F805DF5 jmp short loc_7F805C04 ; --------------------------------------------------------------------------- loc_7F805BF8: ; CODE XREF: sub_7F805851+349j cmp edi, 387h jz loc_7F805E35 loc_7F805C04: ; CODE XREF: sub_7F805851+341j ; sub_7F805851+3A5j cmp dword_7F835294, 0 jz loc_7F8058B7 push ecx push edi push [ebp+arg_C] push esi push edx push [ebp+hDlg] call dword_7F835294 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805C26: ; CODE XREF: sub_7F805851+33Bj push 40h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1513h ; uID push hInstance ; hInstance call ds:LoadStringA lea ecx, [ebp+Buffer] push ecx ; lpString push [ebp+hDlg] ; hWnd call ds:SetWindowTextA mov eax, [ebp+arg_C] cmp eax, 1 jz short loc_7F805C69 cmp eax, 2 jz loc_7F805CF6 cmp eax, 3 jz loc_7F805D86 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805C69: ; CODE XREF: sub_7F805851+3FFj cmp dword_7F8353C8, 0 jnz short loc_7F805C86 push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805C86: ; CODE XREF: sub_7F805851+41Fj mov eax, dword_7F8353C8 dec eax mov dword_7F8338B8, eax js short loc_7F805CB0 shl eax, 4 add eax, offset unk_7F83534C loc_7F805C9B: ; CODE XREF: sub_7F805851+45Dj cmp dword ptr [eax], 0 jnz short loc_7F805CC4 sub eax, 10h dec dword_7F8338B8 cmp eax, offset unk_7F83534C jnb short loc_7F805C9B loc_7F805CB0: ; CODE XREF: sub_7F805851+440j push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805CC4: ; CODE XREF: sub_7F805851+44Dj mov eax, dword_7F8338B8 push 0 ; lParam mov dword_7F8353C8, eax shl eax, 4 push dword_7F835348[eax] ; wParam push 111h ; Msg push [ebp+hDlg] ; hWnd call ds:PostMessageA mov dword_7F8352D8, 1 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805CF6: ; CODE XREF: sub_7F805851+404j cmp dword_7F8353C8, 7 jnz short loc_7F805D13 push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805D13: ; CODE XREF: sub_7F805851+4ACj mov eax, dword_7F8353C8 inc eax mov dword_7F8338B8, eax cmp eax, 7 jg short loc_7F805D40 shl eax, 4 add eax, offset unk_7F83534C loc_7F805D2B: ; CODE XREF: sub_7F805851+4EDj cmp dword ptr [eax], 0 jnz short loc_7F805D54 add eax, 10h inc dword_7F8338B8 cmp eax, offset dword_7F8353BC jbe short loc_7F805D2B loc_7F805D40: ; CODE XREF: sub_7F805851+4D0j push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805D54: ; CODE XREF: sub_7F805851+4DDj mov eax, dword_7F8338B8 push 0 ; lParam mov dword_7F8353C8, eax shl eax, 4 push dword_7F835348[eax] ; wParam push 111h ; Msg push [ebp+hDlg] ; hWnd call ds:PostMessageA mov dword_7F8352D8, 2 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805D86: ; CODE XREF: sub_7F805851+40Dj push 0 push 0D0h push 111h push [ebp+hDlg] jmp loc_7F8058B1 ; --------------------------------------------------------------------------- loc_7F805D9A: ; CODE XREF: sub_7F805851+32Fj push [ebp+hDlg] ; hDlg call sub_7F805EBF jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DA7: ; CODE XREF: sub_7F805851+357j push [ebp+hDlg] ; hWnd call sub_7F8065A0 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DB4: ; CODE XREF: sub_7F805851+363j push [ebp+hDlg] ; hDlg call sub_7F8061C8 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DC1: ; CODE XREF: sub_7F805851+36Fj push [ebp+hDlg] ; hDlg call sub_7F806FF2 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DCE: ; CODE XREF: sub_7F805851+37Bj push [ebp+hDlg] ; hWnd call sub_7F80725C jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DDB: ; CODE XREF: sub_7F805851+387j push [ebp+hDlg] ; hWnd call sub_7F807D9C jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DE8: ; CODE XREF: sub_7F805851+393j push [ebp+hDlg] ; hDlg call sub_7F80795B jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805DF5: ; CODE XREF: sub_7F805851+39Fj xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F805E0D mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F805E0D: ; CODE XREF: sub_7F805851+5ACj mov eax, dword_7F835290 push eax call sub_7F808949 push 1 ; nResult push [ebp+hDlg] ; hDlg call ds:EndDialog jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805E28: ; CODE XREF: sub_7F805851+34Bj push [ebp+hDlg] ; hWnd call sub_7F80A3C3 jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805E35: ; CODE XREF: sub_7F805851+3ADj cmp dword_7F8352E8, 0 mov eax, 0BBEh jnz short loc_7F805E51 mov eax, dword_7F8353C8 shl eax, 4 mov eax, dword_7F835354[eax] loc_7F805E51: ; CODE XREF: sub_7F805851+5F0j test eax, eax jz loc_7F8058B7 push eax ; dwData push 1 ; uCommand push offset szHelp ; "EXCHNG.HLP" push [ebp+hDlg] ; hWndMain call ds:WinHelpA jmp loc_7F8058B7 ; --------------------------------------------------------------------------- loc_7F805E6F: ; CODE XREF: sub_7F805851+44j and esi, 0FFF0h cmp esi, 0F060h jnz loc_7F8058B7 cmp dword_7F835294, 0 jnz short loc_7F805E90 push 0 push 10h jmp short loc_7F805EA7 ; --------------------------------------------------------------------------- loc_7F805E90: ; CODE XREF: sub_7F805851+637j cmp dword_7F835298, 0 push 0 ; lParam jz short loc_7F805EA2 push 339h jmp short loc_7F805EA7 ; --------------------------------------------------------------------------- loc_7F805EA2: ; CODE XREF: sub_7F805851+648j push 385h ; wParam loc_7F805EA7: ; CODE XREF: sub_7F805851+63Dj ; sub_7F805851+64Fj push 111h ; Msg push [ebp+hDlg] ; hWnd call ds:PostMessageA mov eax, 1 jmp loc_7F8058B9 sub_7F805851 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F805EBF(HWND hDlg) sub_7F805EBF proc near ; CODE XREF: sub_7F805851+2C1p ; sub_7F805851+54Cp Buf = byte ptr -104h hDlg = dword ptr 4 sub esp, 104h push ebx push esi push edi mov ebx, 386h xor edi, edi mov esi, [esp+110h+hDlg] push edi ; nCmdShow mov dword_7F835298, edi push ebx ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:ShowWindow push edi ; bEnable push ebx ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push edi ; nCmdShow push esi ; hWnd call ds:ShowWindow push 0FFFFFFFFh ; int push esi ; hWnd call sub_7F8087A7 mov eax, dword_7F8353C8 push 6 ; uFlags shl eax, 4 mov eax, off_7F835350[eax] push dword ptr [eax+4] ; cy push dword ptr [eax] ; cx push edi ; Y push edi ; X push edi ; hWndInsertAfter push esi ; hWnd call ds:SetWindowPos mov eax, offset dword_7F83535C loc_7F805F30: ; CODE XREF: sub_7F805EBF+7Bj mov [eax], edi add eax, 10h cmp eax, offset dword_7F8353BC jbe short loc_7F805F30 xor eax, eax push offset sub_7F809A3F ; int mov ecx, dword_7F835290 mov dword_7F8353C8, eax add ecx, 8 push ecx ; int push 1 ; int push 1 ; int push 1 ; int push 1502h ; uID push eax ; nIDDlgItem push esi ; hDlg call sub_7F808498 test eax, eax mov eax, dword_7F835290 jnz short loc_7F805F7E push eax call sub_7F808949 push 1 ; nResult push esi ; hDlg call ds:EndDialog jmp short loc_7F805FD2 ; --------------------------------------------------------------------------- loc_7F805F7E: ; CODE XREF: sub_7F805EBF+ACj push dword ptr [eax+8] ; lpString2 mov esi, offset String1 push esi ; lpString1 call ds:lstrcpyA lea ecx, [esp+110h+Buf] push 104h ; cchSize push ecx ; Buf push esi ; LPCSTR call GetFileTitleA push esi ; lpString call ds:lstrlenA mov esi, eax lea eax, [esp+110h+Buf] push eax ; lpString call ds:lstrlenA sub esi, eax push 2 ; lParam push 0BEh ; wParam mov eax, hDlg mov String1[esi], 0 push 111h ; Msg push eax ; hWnd call ds:PostMessageA loc_7F805FD2: ; CODE XREF: sub_7F805EBF+BDj pop edi pop esi pop ebx add esp, 104h retn 4 sub_7F805EBF endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F805FDE(int, LPCSTR lpString, int, int, int) sub_7F805FDE proc near ; CODE XREF: sub_7F806352+151p ; sub_7F809A3F+1A8p String1 = byte ptr -104h lpString = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h sub esp, 104h push ebx push esi mov ebx, [esp+10Ch+arg_10] push edi mov edi, [esp+110h+arg_C] push ebp xor ebp, ebp push 80h ; dwFlagsAndAttributes mov esi, [esp+118h+lpString] push 0C0000000h ; __int16 push esi ; lpFileName mov [edi], ebp mov [ebx], ebp call sub_7F8083A0 mov [ebx], eax test eax, eax jz short loc_7F806093 cmp eax, 2 jz short loc_7F80602A cmp eax, 12h jz short loc_7F80602A xor eax, eax jmp loc_7F8060B4 ; --------------------------------------------------------------------------- loc_7F80602A: ; CODE XREF: sub_7F805FDE+3Ej ; sub_7F805FDE+43j push esi ; lpString call ds:lstrlenA cmp eax, 4 mov ebp, eax jbe short loc_7F806046 push esi ; lpString call ds:lstrlenA cmp byte ptr [esi+eax-4], 2Eh jz short loc_7F80608F loc_7F806046: ; CODE XREF: sub_7F805FDE+58j add ebp, 4 cmp ebp, 104h jnb short loc_7F80608F lea eax, [esp+114h+String1] push esi ; lpString2 push eax ; lpString1 call ds:lstrcpyA push offset a_mmf ; ".MMF" push esi ; lpString1 call ds:lstrcatA push 80h ; dwFlagsAndAttributes push 0C0000000h ; __int16 push esi ; lpFileName call sub_7F8083A0 mov [ebx], eax test eax, eax jz short loc_7F806093 lea eax, [esp+114h+String1] push eax ; lpString2 push esi ; lpString1 call ds:lstrcpyA xor eax, eax jmp short loc_7F8060B4 ; --------------------------------------------------------------------------- loc_7F80608F: ; CODE XREF: sub_7F805FDE+66j ; sub_7F805FDE+71j xor eax, eax jmp short loc_7F8060B4 ; --------------------------------------------------------------------------- loc_7F806093: ; CODE XREF: sub_7F805FDE+39j ; sub_7F805FDE+9Fj push edi push offset dword_7F833264 push [esp+11Ch+arg_8] push esi call ScMMFVerify@16 test eax, eax mov eax, 0 jl short loc_7F8060B4 mov eax, 1 loc_7F8060B4: ; CODE XREF: sub_7F805FDE+47j ; sub_7F805FDE+AFj ... pop ebp pop edi pop esi pop ebx add esp, 104h retn 14h sub_7F805FDE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8060C1(int, LPCSTR lpString, int) sub_7F8060C1 proc near ; CODE XREF: sub_7F809A3F+1ECp ; sub_7F809A3F+265p ... String1 = byte ptr -10Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 lpString = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10Ch mov [ebp+var_8], 8004010Fh push ebx push esi push edi mov esi, [ebp+lpString] push 80h ; dwFlagsAndAttributes push 0C0000000h ; __int16 push esi ; lpFileName call sub_7F8083A0 mov edi, [ebp+arg_8] test eax, eax mov [edi], eax jz short loc_7F80616D cmp eax, 2 jz short loc_7F8060FE cmp eax, 12h jnz loc_7F8061BD loc_7F8060FE: ; CODE XREF: sub_7F8060C1+32j push esi ; lpString call ds:lstrlenA cmp eax, 4 mov ebx, eax jbe short loc_7F80611E push esi ; lpString call ds:lstrlenA cmp byte ptr [esi+eax-4], 2Eh jz loc_7F8061BD loc_7F80611E: ; CODE XREF: sub_7F8060C1+49j add ebx, 4 cmp ebx, 104h jnb loc_7F8061BD push esi ; lpString2 lea eax, [ebp+String1] push eax ; lpString1 call ds:lstrcpyA push offset a_pab ; ".PAB" push esi ; lpString1 call ds:lstrcatA push 80h ; dwFlagsAndAttributes push 0C0000000h ; __int16 push esi ; lpFileName call sub_7F8083A0 mov [edi], eax test eax, eax jz short loc_7F80616D lea eax, [ebp+String1] push eax ; lpString2 push esi ; lpString1 call ds:lstrcpyA jmp short loc_7F8061BD ; --------------------------------------------------------------------------- loc_7F80616D: ; CODE XREF: sub_7F8060C1+2Dj ; sub_7F8060C1+9Aj push offset LibFileName ; "mspst32.dll" call ds:LoadLibraryA mov edi, eax test edi, edi jz short loc_7F8061BD push offset ProcName ; "NDBGetFileInfo" push edi ; hModule call ds:GetProcAddress test eax, eax jz short loc_7F80619C lea ecx, [ebp+var_2] lea edx, [ebp+var_4] push ecx push edx push esi call eax mov [ebp+var_8], eax loc_7F80619C: ; CODE XREF: sub_7F8060C1+CBj push edi ; hLibModule call ds:FreeLibrary cmp [ebp+var_8], 0 jnz short loc_7F8061BD cmp [ebp+var_4], 4142h jnz short loc_7F8061BD cmp [ebp+var_2], 16h mov eax, 1 jnb short loc_7F8061BF loc_7F8061BD: ; CODE XREF: sub_7F8060C1+37j ; sub_7F8060C1+57j ... xor eax, eax loc_7F8061BF: ; CODE XREF: sub_7F8060C1+FAj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8060C1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8061C8(HWND hDlg) sub_7F8061C8 proc near ; CODE XREF: sub_7F805851+566p var_28 = tagRECT ptr -28h Rect = tagRECT ptr -18h var_8 = dword ptr -8 nHeight = dword ptr -4 hDlg = dword ptr 8 push ebp mov ebp, esp sub esp, 28h mov dword_7F835294, offset sub_7F806352 push ebx push esi push edi mov esi, ds:GetDlgItem push 1 ; bEnable mov edi, [ebp+hDlg] push 385h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 384h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; int push edi ; hWnd call sub_7F8087A7 lea eax, [ebp+Rect] push eax ; lpRect push edi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_28] push ecx ; lpRect push 385h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:GetWindowRect mov ebx, [ebp+var_28.right] mov eax, [ebp+var_28.bottom] sub ebx, [ebp+var_28.left] sub eax, [ebp+var_28.top] push 1 ; bRepaint mov [ebp+nHeight], eax imul eax, 3 cdq push [ebp+nHeight] ; nHeight push ebx ; nWidth sub eax, edx mov ecx, [ebp+Rect.right] sar eax, 1 mov [ebp+var_8], eax mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] push eax ; Y mov eax, ebx imul eax, 6 cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] mov ecx, [ebp+Rect.right] push [ebp+nHeight] ; nHeight push ebx ; nWidth push eax ; Y mov eax, ebx imul eax, 0Bh cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 385h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] mov ecx, [ebp+Rect.right] push [ebp+nHeight] ; nHeight push ebx ; nWidth push eax ; Y mov eax, ebx shl eax, 4 cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 384h ; nIDDlgItem push edi ; hDlg mov ebx, 272h call esi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 0 ; nCmdShow push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 273h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; bEnable push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 273h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push edi ; hWnd call ds:ShowWindow push 26Fh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:SetFocus pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F8061C8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F806352(HWND hDlg, int, int, int, int, int) sub_7F806352 proc near ; DATA XREF: sub_7F8061C8+6o var_8 = dword ptr -8 var_4 = dword ptr -4 hDlg = dword ptr 8 arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 8 cmp [ebp+arg_4], 111h push esi push edi jnz loc_7F806593 mov eax, [ebp+arg_10] cmp eax, 2 jz short loc_7F8063A3 cmp eax, 270h jl loc_7F806593 cmp eax, 271h jle short loc_7F8063D6 cmp eax, 384h jz loc_7F80641A cmp eax, 385h jz short loc_7F8063A3 cmp eax, 386h jz loc_7F80657E jmp loc_7F806593 ; --------------------------------------------------------------------------- loc_7F8063A3: ; CODE XREF: sub_7F806352+1Bj ; sub_7F806352+3Fj push 131h ; uType mov esi, [ebp+hDlg] push offset byte_7F833F30 ; lpCaption push 1527h ; uID push esi ; hWnd call sub_7F808359 cmp eax, 1 jnz loc_7F806593 push 0 push 0D0h push 111h push esi jmp loc_7F80658D ; --------------------------------------------------------------------------- loc_7F8063D6: ; CODE XREF: sub_7F806352+2Dj push 270h ; nIDButton mov esi, [ebp+hDlg] push esi ; hDlg mov edi, ds:IsDlgButtonChecked call edi ; IsDlgButtonChecked test eax, eax jnz short loc_7F8063FC push 271h ; nIDButton push esi ; hDlg call edi ; IsDlgButtonChecked test eax, eax mov eax, 0 jz short loc_7F806401 loc_7F8063FC: ; CODE XREF: sub_7F806352+97j mov eax, 1 loc_7F806401: ; CODE XREF: sub_7F806352+A8j push eax ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow jmp loc_7F806593 ; --------------------------------------------------------------------------- loc_7F80641A: ; CODE XREF: sub_7F806352+34j push 270h ; nIDButton mov esi, [ebp+hDlg] push esi ; hDlg mov edi, ds:IsDlgButtonChecked call edi ; IsDlgButtonChecked test eax, eax jnz short loc_7F80644D push 271h ; nIDButton push esi ; hDlg call edi ; IsDlgButtonChecked test eax, eax jnz short loc_7F80644D push 0 push 0D0h push 111h push esi jmp loc_7F80658D ; --------------------------------------------------------------------------- loc_7F80644D: ; CODE XREF: sub_7F806352+DBj ; sub_7F806352+E7j mov eax, dword_7F835290 add eax, 0Ch push eax ; int push 26Fh ; nIDDlgItem push esi ; hDlg call sub_7F80993C mov ecx, dword_7F835290 push dword ptr [ecx+0Ch] ; lpString call ds:lstrlenA cmp eax, 0Fh jle short loc_7F806481 mov eax, dword_7F835290 mov ecx, [eax+0Ch] mov byte ptr [ecx+0Fh], 0 loc_7F806481: ; CODE XREF: sub_7F806352+121j mov eax, dword_7F835290 push dword ptr [eax+0Ch] ; lpsz call ds:CharUpperA lea ecx, [ebp+var_4] lea edx, [ebp+var_8] push ecx ; int mov eax, dword_7F835290 push edx ; int push dword ptr [eax+0Ch] ; int push dword ptr [eax+8] ; lpString push esi ; int call sub_7F805FDE test eax, eax jz short loc_7F8064E8 mov dword_7F83535C, 1 push 270h ; nIDButton push esi ; hDlg call edi ; IsDlgButtonChecked push 271h ; nIDButton mov bEnable, eax push esi ; hDlg call edi ; IsDlgButtonChecked push 2 ; lParam mov dword_7F83538C, eax push 0BEh ; wParam push 111h ; Msg push esi ; hWnd call ds:PostMessageA jmp loc_7F806569 ; --------------------------------------------------------------------------- loc_7F8064E8: ; CODE XREF: sub_7F806352+158j cmp [ebp+var_8], 81h jnz short loc_7F806513 push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1151h ; uID push esi ; hWnd call sub_7F808359 push 0 ; lpString push 26Fh ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA jmp short loc_7F806569 ; --------------------------------------------------------------------------- loc_7F806513: ; CODE XREF: sub_7F806352+19Dj cmp [ebp+var_4], 0 jz short loc_7F806569 push [ebp+var_4] call sub_7F80998B test ax, ax jz short loc_7F806569 push 200h ; cchBufferMax mov edi, offset byte_7F8336A8 movzx eax, ax push edi ; lpBuffer push eax ; uID push hInstance ; hInstance call ds:LoadStringA mov ecx, dword_7F835290 push dword ptr [ecx+8] push edi ; LPCSTR mov edi, offset Text push edi ; LPSTR call ds:wsprintfA add esp, 0Ch push 30h ; uType push offset byte_7F833F30 ; lpCaption push edi ; lpText push esi ; hWnd call ds:MessageBoxA loc_7F806569: ; CODE XREF: sub_7F806352+191j ; sub_7F806352+1BFj ... push 26Fh ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus jmp short loc_7F806593 ; --------------------------------------------------------------------------- loc_7F80657E: ; CODE XREF: sub_7F806352+46j push 1 ; lParam push 0BEh ; wParam push 111h ; Msg push [ebp+hDlg] ; hWnd loc_7F80658D: ; CODE XREF: sub_7F806352+7Fj ; sub_7F806352+F6j call ds:PostMessageA loc_7F806593: ; CODE XREF: sub_7F806352+Fj ; sub_7F806352+22j ... mov eax, 1 pop edi pop esi mov esp, ebp pop ebp retn 18h sub_7F806352 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8065A0(HWND hWnd) sub_7F8065A0 proc near ; CODE XREF: sub_7F805851+559p var_28 = tagRECT ptr -28h Rect = tagRECT ptr -18h var_8 = dword ptr -8 nHeight = dword ptr -4 hWnd = dword ptr 8 push ebp mov ebp, esp sub esp, 28h push ebx push esi push edi mov esi, [ebp+hWnd] push 5 ; int push esi ; hWnd call sub_7F8087A7 lea eax, [ebp+Rect] push eax ; lpRect push esi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_28] mov edi, ds:GetDlgItem push ecx ; lpRect push 385h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:GetWindowRect mov ebx, [ebp+var_28.right] mov eax, [ebp+var_28.bottom] sub ebx, [ebp+var_28.left] sub eax, [ebp+var_28.top] push 1 ; bRepaint mov [ebp+nHeight], eax imul eax, 3 cdq push [ebp+nHeight] ; nHeight push ebx ; nWidth sub eax, edx mov ecx, [ebp+Rect.right] sar eax, 1 mov [ebp+var_8], eax mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] push eax ; Y mov eax, ebx imul eax, 6 cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 387h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] mov ecx, [ebp+Rect.right] push [ebp+nHeight] ; nHeight push ebx ; nWidth push eax ; Y mov eax, ebx imul eax, 0Bh cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 385h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_8] mov ecx, [ebp+Rect.right] push [ebp+nHeight] ; nHeight push ebx ; nWidth shl ebx, 4 push eax ; Y mov eax, ebx cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 384h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 5 ; nCmdShow push esi ; hWnd call ds:ShowWindow mov dword_7F835294, offset sub_7F806861 push 1 ; bEnable push 385h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd mov ebx, ds:EnableWindow call ebx ; EnableWindow push 1 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 387h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; lParam push 0 ; wParam push 146h ; Msg push 269h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA mov [ebp+nHeight], eax test eax, eax jnz short loc_7F8066F4 push 0 ; bEnable push 264h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow loc_7F8066F4: ; CODE XREF: sub_7F8065A0+145j cmp [ebp+nHeight], 0 push 0 ; lParam push 1 ; wParam push 0F1h ; Msg jnz loc_7F8067E7 push 265h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push 0 ; lParam push 0 ; wParam push 0F1h ; Msg push 264h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push 0 ; bEnable push 269h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 266h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 268h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 267h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 263h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; lParam push 0 ; wParam push 0C1h ; Msg push 266h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jnz short loc_7F80678F push 0 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow loc_7F80678F: ; CODE XREF: sub_7F8065A0+1E0j push 267h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:SetFocus push 0 ; lParam push 0 ; wParam push 0C1h ; Msg push 266h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jnz short loc_7F8067E0 push 0 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 266h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:SetFocus push 267h ; __int16 push esi ; hWnd call sub_7F806F59 jmp short loc_7F806858 ; --------------------------------------------------------------------------- loc_7F8067E0: ; CODE XREF: sub_7F8065A0+215j push 384h jmp short loc_7F80684E ; --------------------------------------------------------------------------- loc_7F8067E7: ; CODE XREF: sub_7F8065A0+161j push 264h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push 0 ; lParam push 0 ; wParam push 0F1h ; Msg push 265h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push 1 ; bEnable push 269h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; bEnable push 266h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; bEnable push 268h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; bEnable push 267h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 0 ; bEnable push 263h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 269h ; nIDDlgItem loc_7F80684E: ; CODE XREF: sub_7F8065A0+245j push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:SetFocus loc_7F806858: ; CODE XREF: sub_7F8065A0+23Ej pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F8065A0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F806861(HWND hDlg, int, int, int, int nIDDlgItem, int) sub_7F806861 proc near ; DATA XREF: sub_7F8065A0+F4o String1 = byte ptr -110h var_C = dword ptr -0Ch hCursor = dword ptr -8 var_4 = dword ptr -4 hDlg = dword ptr 8 arg_4 = dword ptr 0Ch nIDDlgItem = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 110h push ebx mov [ebp+var_C], eax push esi mov [ebp+var_4], eax cmp [ebp+arg_4], 111h push edi jnz loc_7F806F4B mov eax, [ebp+nIDDlgItem] cmp eax, 264h jg short loc_7F80689C jz loc_7F806935 cmp eax, 2 jz short loc_7F8068EA jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F80689C: ; CODE XREF: sub_7F806861+29j cmp eax, 265h jz loc_7F806A1A cmp eax, 266h jz loc_7F806B17 cmp eax, 267h jz loc_7F806B85 cmp eax, 269h jz loc_7F806F4B cmp eax, 384h jz loc_7F806BD8 cmp eax, 385h jz short loc_7F8068EA cmp eax, 386h jz loc_7F806F1E jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F8068EA: ; CODE XREF: sub_7F806861+34j ; sub_7F806861+77j push 131h ; uType mov esi, [ebp+hDlg] push offset byte_7F833F30 ; lpCaption push 1527h ; uID push esi ; hWnd call sub_7F808359 cmp eax, 1 jnz loc_7F806F4B xor edi, edi cmp dword_7F8352DC, edi jz short loc_7F806923 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, edi loc_7F806923: ; CODE XREF: sub_7F806861+B2j push 0 push 0D0h push 111h push esi jmp loc_7F806F45 ; --------------------------------------------------------------------------- loc_7F806935: ; CODE XREF: sub_7F806861+2Bj push 1 ; bEnable mov edi, 269h push edi ; nIDDlgItem mov esi, [ebp+hDlg] push esi ; hDlg xor ebx, ebx call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 266h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 268h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 267h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 263h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 384h ; __int16 push esi ; hWnd call sub_7F806F59 push ebx ; lParam push ebx ; wParam push 147h ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA cmp eax, 0FFFFFFFFh jnz loc_7F806F4B cmp wParam, 0FFFFFFFFh jnz short loc_7F8069FC push ebx ; lParam mov eax, dword_7F835290 push dword ptr [eax+18h] ; wParam push 14Eh ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F8069FC: ; CODE XREF: sub_7F806861+17Ej push 0 ; lParam mov eax, wParam push eax ; wParam push 14Eh ; Msg push 269h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806A1A: ; CODE XREF: sub_7F806861+40j xor edi, edi mov esi, [ebp+hDlg] push edi ; bEnable push 269h ; nIDDlgItem push esi ; hDlg mov ebx, 266h call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push ebx ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 268h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 267h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push 263h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push edi ; lParam push edi ; wParam push 0C1h ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jz short loc_7F806AB4 push 1 ; bEnable mov edi, 384h push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push edi jmp short loc_7F806ACE ; --------------------------------------------------------------------------- loc_7F806AB4: ; CODE XREF: sub_7F806861+238j push 0 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 267h ; __int16 loc_7F806ACE: ; CODE XREF: sub_7F806861+251j push esi ; hWnd call sub_7F806F59 push 266h ; nIDDlgItem xor edi, edi push esi ; hDlg call ds:GetDlgItem push eax ; hWnd mov ebx, 269h call ds:SetFocus push edi ; lParam push edi ; wParam push 147h ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push edi ; lParam mov wParam, eax push 0FFFFFFFFh ; wParam push 14Eh ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806B17: ; CODE XREF: sub_7F806861+4Bj cmp [ebp+arg_14], 300h jnz loc_7F806F4B push 0 ; lParam mov esi, [ebp+hDlg] push 0 ; wParam push 0C1h ; Msg push [ebp+nIDDlgItem] ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jz short loc_7F806B60 push 1 ; bEnable mov edi, 384h push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push edi ; __int16 push esi ; hWnd call sub_7F806F59 jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806B60: ; CODE XREF: sub_7F806861+2DBj push 0 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 267h ; __int16 push esi ; hWnd call sub_7F806F59 jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806B85: ; CODE XREF: sub_7F806861+56j xor eax, eax mov ecx, dword_7F835290 push eax ; int add ecx, 30h mov dword_7F8352E8, 1 push ecx ; int mov esi, [ebp+hDlg] push eax ; int push eax ; int push eax ; int push 1505h ; uID push 266h ; nIDDlgItem push esi ; hDlg call sub_7F808498 test eax, eax jz short loc_7F806BC9 push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus loc_7F806BC9: ; CODE XREF: sub_7F806861+353j mov dword_7F8352E8, 0 jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806BD8: ; CODE XREF: sub_7F806861+6Cj xor edi, edi mov esi, [ebp+hDlg] push edi ; bEnable push esi ; hWnd call ds:EnableWindow push 7F02h ; lpCursorName push edi ; hInstance call ds:LoadCursorA push eax ; hCursor call ds:SetCursor push edi ; lParam mov [ebp+hCursor], eax push edi ; wParam push 0F0h ; Msg push 264h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax mov eax, dword_7F835290 jz loc_7F806CD0 push edi ; lParam mov ebx, 269h push edi ; wParam mov [eax+14h], edi push 147h ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA movzx eax, ax push edi ; lParam push eax ; wParam push 150h ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push dword ptr [eax+0Ch] ; int mov [ebp+var_C], eax add eax, 8 push dword ptr [eax] ; int push esi ; hWnd call sub_7F808F4D mov ecx, dword_7F835290 mov [ecx+2Ch], eax mov ecx, dword_7F835290 cmp [ecx+2Ch], edi jz short loc_7F806CBE mov ebx, [ebp+var_C] lea eax, [ecx+30h] add ebx, 4 push eax push edi push dword ptr [ebx] ; lpString call ds:lstrlenA inc eax push eax call sub_7F80A757 test eax, eax jz loc_7F806F4B mov ecx, dword_7F835290 push dword ptr [ebx] ; lpString2 push dword ptr [ecx+30h] ; lpString1 call ds:lstrcpyA mov dword_7F8353AC, 1 push 2 ; lParam push 0BEh ; wParam push 111h ; Msg push esi ; hWnd call ds:PostMessageA jmp loc_7F806EDE ; --------------------------------------------------------------------------- loc_7F806CBE: ; CODE XREF: sub_7F806861+406j push 0 push 0D0h push 111h push esi jmp loc_7F806F45 ; --------------------------------------------------------------------------- loc_7F806CD0: ; CODE XREF: sub_7F806861+3B4j push 0 ; lParam mov edi, 266h mov dword ptr [eax+14h], 1 push 0 ; wParam push 0C1h ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jz loc_7F806EDE mov eax, dword_7F835290 add eax, 30h push eax ; int push edi ; nIDDlgItem push esi ; hDlg call sub_7F80993C test eax, eax jz loc_7F806EDE xor edi, edi mov eax, dword_7F835290 mov eax, [eax+30h] cmp byte ptr [eax], 20h jnz short loc_7F806D29 loc_7F806D1C: ; CODE XREF: sub_7F806861+4C6j cmp byte ptr [eax+edi], 0 jz short loc_7F806D29 inc edi cmp byte ptr [eax+edi], 20h jz short loc_7F806D1C loc_7F806D29: ; CODE XREF: sub_7F806861+4B9j ; sub_7F806861+4BFj push eax ; lpString call ds:lstrlenA lea ebx, [eax-1] mov eax, ebx sub eax, edi cmp eax, 0FFFFFFFFh jnz short loc_7F806D66 push 1 ; bEnable push esi ; hWnd call ds:EnableWindow push 266h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus push [ebp+hCursor] ; hCursor call ds:SetCursor jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806D66: ; CODE XREF: sub_7F806861+4D9j mov eax, dword_7F835290 mov eax, [eax+30h] cmp byte ptr [eax+ebx], 20h jnz short loc_7F806D7F loc_7F806D74: ; CODE XREF: sub_7F806861+51Cj cmp ebx, edi jle short loc_7F806D7F dec ebx cmp byte ptr [eax+ebx], 20h jz short loc_7F806D74 loc_7F806D7F: ; CODE XREF: sub_7F806861+511j ; sub_7F806861+515j test edi, edi jle short loc_7F806DA9 add eax, edi lea ecx, [ebp+String1] push eax ; lpString2 push ecx ; lpString1 call ds:lstrcpyA lea ecx, [ebp+String1] mov edx, dword_7F835290 push ecx ; lpString2 push dword ptr [edx+30h] ; lpString1 call ds:lstrcpyA loc_7F806DA9: ; CODE XREF: sub_7F806861+520j mov eax, dword_7F835290 mov eax, [eax+30h] sub eax, edi mov byte ptr [eax+ebx+1], 0 mov ecx, dword_7F835290 push dword ptr [ecx+30h] ; lpFileName call ds:GetFileAttributesA cmp eax, 0FFFFFFFFh jz short loc_7F806DFA test al, 10h jz short loc_7F806DFA push 1 ; bEnable push esi ; hWnd call ds:EnableWindow push [ebp+hCursor] ; hCursor call ds:SetCursor push 266h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus jmp loc_7F806F4B ; --------------------------------------------------------------------------- loc_7F806DFA: ; CODE XREF: sub_7F806861+569j ; sub_7F806861+56Dj xor edi, edi mov eax, dword_7F835290 mov eax, [eax+30h] cmp byte ptr [eax], 0 jz short loc_7F806E16 loc_7F806E09: ; CODE XREF: sub_7F806861+5B3j cmp byte ptr [eax+edi], 2Eh jz short loc_7F806E16 inc edi cmp byte ptr [eax+edi], 0 jnz short loc_7F806E09 loc_7F806E16: ; CODE XREF: sub_7F806861+5A6j ; sub_7F806861+5ACj add eax, edi push eax ; lpString call ds:lstrlenA cmp eax, 1 jg short loc_7F806E43 mov eax, dword_7F835290 push offset a_pst ; ".pst" mov ecx, [eax+30h] mov byte ptr [ecx+edi], 0 mov eax, dword_7F835290 push dword ptr [eax+30h] ; lpString1 call ds:lstrcatA loc_7F806E43: ; CODE XREF: sub_7F806861+5C1j lea eax, [ebp+var_4] mov ecx, dword_7F835290 push eax ; int xor edi, edi push dword ptr [ecx+30h] ; lpFileName call sub_7F806FAC cmp [ebp+var_4], edi jnz short loc_7F806E9A push edi ; lParam push edi ; wParam push 0F0h ; Msg push 268h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA test eax, eax jnz short loc_7F806E7B mov eax, dword_7F835290 mov [eax+10h], edi loc_7F806E7B: ; CODE XREF: sub_7F806861+610j mov dword_7F8353AC, 1 push 2 ; lParam push 0BEh ; wParam push 111h ; Msg push esi ; hWnd call ds:PostMessageA jmp short loc_7F806EDE ; --------------------------------------------------------------------------- loc_7F806E9A: ; CODE XREF: sub_7F806861+5F9j cmp [ebp+var_4], 50h jz short loc_7F806ECB cmp [ebp+var_4], 0B7h jz short loc_7F806ECB cmp [ebp+var_4], 3 jnz short loc_7F806EB6 mov eax, 151Fh jmp short loc_7F806ED0 ; --------------------------------------------------------------------------- loc_7F806EB6: ; CODE XREF: sub_7F806861+64Cj mov eax, [ebp+var_4] sub eax, 13h cmp eax, 1 sbb eax, eax and eax, 20h add eax, 150Dh jmp short loc_7F806ED0 ; --------------------------------------------------------------------------- loc_7F806ECB: ; CODE XREF: sub_7F806861+63Dj ; sub_7F806861+646j mov eax, 150Ch loc_7F806ED0: ; CODE XREF: sub_7F806861+653j ; sub_7F806861+668j push 30h ; uType push offset byte_7F833F30 ; lpCaption push eax ; uID push esi ; hWnd call sub_7F808359 loc_7F806EDE: ; CODE XREF: sub_7F806861+458j ; sub_7F806861+48Ej ... push 1 ; bEnable push esi ; hWnd call ds:EnableWindow push [ebp+hCursor] ; hCursor call ds:SetCursor cmp [ebp+var_4], 0 jz short loc_7F806F4B mov edi, 266h push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus push 0FFFFFFFFh push 0 push 0B1h push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax jmp short loc_7F806F45 ; --------------------------------------------------------------------------- loc_7F806F1E: ; CODE XREF: sub_7F806861+7Ej xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F806F36 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F806F36: ; CODE XREF: sub_7F806861+6C5j push 1 ; lParam push 0BEh ; wParam push 111h ; Msg push [ebp+hDlg] ; hWnd loc_7F806F45: ; CODE XREF: sub_7F806861+CFj ; sub_7F806861+46Aj ... call ds:PostMessageA loc_7F806F4B: ; CODE XREF: sub_7F806861+1Bj ; sub_7F806861+36j ... mov eax, 1 pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F806861 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F806F59(HWND hWnd, __int16) sub_7F806F59 proc near ; CODE XREF: sub_7F8065A0+239p ; sub_7F806861+15Ap ... hWnd = dword ptr 4 arg_4 = word ptr 8 push ebx push esi mov esi, [esp+8+hWnd] push edi push ebp xor edi, edi push edi ; lParam push edi ; wParam push 400h ; Msg mov ebx, 0F4h push esi ; hWnd call ds:SendMessageA movzx eax, ax push 1 ; lParam push edi ; wParam push ebx ; Msg push eax ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA movzx ebp, [esp+10h+arg_4] push edi ; lParam push ebp ; wParam push 401h ; Msg push esi ; hWnd call ds:SendMessageA push 1 ; lParam push 1 ; wParam push ebx ; Msg push ebp ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA pop ebp pop edi pop esi pop ebx retn 8 sub_7F806F59 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F806FAC(LPCSTR lpFileName, int) sub_7F806FAC proc near ; CODE XREF: sub_7F806861+5F1p lpFileName = dword ptr 4 arg_4 = dword ptr 8 push esi xor eax, eax mov esi, [esp+4+arg_4] push eax ; hTemplateFile push 80h ; dwFlagsAndAttributes push 1 ; dwCreationDisposition push eax ; lpSecurityAttributes mov [esi], eax push eax ; dwShareMode push 0C0000000h ; dwDesiredAccess push [esp+1Ch+lpFileName] ; lpFileName call ds:CreateFileA cmp eax, 0FFFFFFFFh jnz short loc_7F806FDD call ds:GetLastError mov [esi], eax jmp short loc_7F806FEE ; --------------------------------------------------------------------------- loc_7F806FDD: ; CODE XREF: sub_7F806FAC+25j push eax ; hObject call ds:CloseHandle push [esp+4+lpFileName] ; lpFileName call ds:DeleteFileA loc_7F806FEE: ; CODE XREF: sub_7F806FAC+2Fj pop esi retn 8 sub_7F806FAC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F806FF2(HWND hDlg) sub_7F806FF2 proc near ; CODE XREF: sub_7F805851+573p var_2C = tagRECT ptr -2Ch Rect = tagRECT ptr -1Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 lpString1 = dword ptr -4 hDlg = dword ptr 8 push ebp mov eax, dword_7F835290 mov ebp, esp sub esp, 2Ch mov dword_7F835294, offset sub_7F8071B1 push ebx push esi push edi push 2Eh push dword ptr [eax+8] call SzFindCh@8 test eax, eax jnz short loc_7F807077 xor eax, eax lea ecx, [ebp+lpString1] push ecx mov edx, dword_7F835290 push eax mov [ebp+lpString1], eax push dword ptr [edx+8] ; lpString call ds:lstrlenA add eax, 2 push eax call sub_7F80A6DD test eax, eax jz short loc_7F807077 mov eax, dword_7F835290 push dword ptr [eax+8] ; lpString2 push [ebp+lpString1] ; lpString1 call ds:lstrcpyA push offset a_ ; "." push [ebp+lpString1] ; lpString1 call ds:lstrcatA mov eax, dword_7F835290 add eax, 8 push eax call sub_7F80A72A mov ecx, [ebp+lpString1] mov edx, dword_7F835290 mov [edx+8], ecx loc_7F807077: ; CODE XREF: sub_7F806FF2+24j ; sub_7F806FF2+4Aj mov eax, dword_7F835290 mov esi, [ebp+hDlg] push dword ptr [eax+8] ; lpString push 2C7h ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push 1 ; bEnable push 384h ; nIDDlgItem push esi ; hDlg mov edi, 385h call ds:GetDlgItem push eax ; hWnd mov ebx, ds:EnableWindow call ebx ; EnableWindow push 1 ; bEnable push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 1 ; bEnable push 387h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ebx ; EnableWindow push 3 ; int push esi ; hWnd call sub_7F8087A7 lea eax, [ebp+Rect] push eax ; lpRect push esi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_2C] push ecx ; lpRect push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowRect mov ebx, [ebp+var_2C.right] mov eax, [ebp+var_2C.bottom] sub ebx, [ebp+var_2C.left] sub eax, [ebp+var_2C.top] mov ecx, ebx mov [ebp+lpString1], eax imul ecx, 3 mov eax, [ebp+Rect.right] sub eax, ecx sub eax, [ebp+Rect.left] cdq and edx, 3 add eax, edx sar eax, 2 mov [ebp+var_8], eax mov eax, [ebp+lpString1] imul eax, 3 cdq sub eax, edx sar eax, 1 mov [ebp+var_C], eax push 1 ; bRepaint mov eax, [ebp+Rect.bottom] push [ebp+lpString1] ; nHeight push ebx ; nWidth sub eax, [ebp+var_C] push eax ; Y mov eax, [ebp+var_8] imul eax, 3 lea eax, [eax+ebx*2] add eax, [ebp+Rect.left] push eax ; X push 387h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] push [ebp+lpString1] ; nHeight push ebx ; nWidth sub eax, [ebp+var_C] push eax ; Y mov eax, [ebp+var_8] add eax, eax add eax, [ebp+Rect.left] add eax, ebx push eax ; X push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] push [ebp+lpString1] ; nHeight push ebx ; nWidth sub eax, [ebp+var_C] push eax ; Y mov eax, [ebp+Rect.left] add eax, [ebp+var_8] push eax ; X push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 5 ; nCmdShow push esi ; hWnd call ds:ShowWindow pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F806FF2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8071B1(HWND hWnd, int, int, int, int, int) sub_7F8071B1 proc near ; DATA XREF: sub_7F806FF2+Bo hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov ebp, esp cmp [esp+arg_4], 111h jnz short loc_7F807225 mov eax, [ebp+arg_10] cmp eax, 2 jz short loc_7F8071DD cmp eax, 384h jz short loc_7F807202 cmp eax, 385h jz short loc_7F8071DD cmp eax, 386h jz short loc_7F807210 jmp short loc_7F807225 ; --------------------------------------------------------------------------- loc_7F8071DD: ; CODE XREF: sub_7F8071B1+13j ; sub_7F8071B1+21j push 131h ; uType push offset byte_7F833F30 ; lpCaption push 1527h ; uID push [ebp+hWnd] ; hWnd call sub_7F808359 cmp eax, 1 jnz short loc_7F807225 push 0 push 0D0h jmp short loc_7F807217 ; --------------------------------------------------------------------------- loc_7F807202: ; CODE XREF: sub_7F8071B1+1Aj mov dword_7F83538C, 1 push 2 jmp short loc_7F807212 ; --------------------------------------------------------------------------- loc_7F807210: ; CODE XREF: sub_7F8071B1+28j push 1 ; lParam loc_7F807212: ; CODE XREF: sub_7F8071B1+5Dj push 0BEh ; wParam loc_7F807217: ; CODE XREF: sub_7F8071B1+4Fj push 111h ; Msg push [ebp+hWnd] ; hWnd call ds:PostMessageA loc_7F807225: ; CODE XREF: sub_7F8071B1+Bj ; sub_7F8071B1+2Aj ... mov eax, 1 pop ebp retn 18h sub_7F8071B1 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80722E(int, UINT uValue, int) sub_7F80722E proc near ; DATA XREF: sub_7F80725C+72o uValue = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+uValue] push 338h ; int push [esp+4+arg_8] ; int push [esp+8+uValue] ; uValue push hDlg ; hDlg mov dword_7F833698, eax call sub_7F80A47A cmp eax, 1 sbb eax, eax and eax, 80040113h retn 0Ch sub_7F80722E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80725C(HWND hWnd) sub_7F80725C proc near ; CODE XREF: sub_7F805851+580p Buffer = byte ptr -74h Rect = tagRECT ptr -34h var_24 = tagRECT ptr -24h Points = tagPOINT ptr -14h var_C = dword ptr -0Ch nWidth = dword ptr -8 hCursor = dword ptr -4 hWnd = dword ptr 8 push ebp mov ebp, esp sub esp, 74h push ebx push esi push edi xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F80727D mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F80727D: ; CODE XREF: sub_7F80725C+11j cmp dword_7F8352D8, 1 jnz short loc_7F8072B0 push offset dword_7F8352E4 call sub_7F80A72A xor eax, eax push 1 push 0BEh mov dword_7F8352E4, eax push 111h mov dword_7F8353AC, eax push [ebp+hWnd] jmp loc_7F8076CE ; --------------------------------------------------------------------------- loc_7F8072B0: ; CODE XREF: sub_7F80725C+28j push 7F02h ; lpCursorName xor edi, edi push edi ; hInstance call ds:LoadCursorA push eax ; hCursor call ds:SetCursor push offset dword_7F8352DC ; int mov [ebp+hCursor], eax push edi ; int push offset sub_7F80722E ; int push edi ; int mov eax, dword_7F835290 push edi ; int mov esi, [ebp+hWnd] push offset MAPIFreeBuffer@4 ; int push offset MAPIAllocateMore@12 ; int push offset MAPIAllocateBuffer@8 ; int mov ecx, dword_7F835290 push dword ptr [eax+24h] ; int push esi ; int mov eax, hInstance push eax ; int push dword ptr [ecx+0Ch] ; int push dword ptr [ecx+8] ; lpFileName call ScGetPABMigrationContext@52 mov ebx, eax test ebx, ebx jnz short loc_7F80731D push offset dword_7F8352E0 mov eax, dword_7F8352DC push eax call dword ptr [eax+4] mov ebx, eax loc_7F80731D: ; CODE XREF: sub_7F80725C+AFj push [ebp+hCursor] ; hCursor call ds:SetCursor xor edi, edi test ebx, ebx jnz loc_7F8073E5 mov eax, dword_7F8352E0 mov eax, [eax] cmp eax, 2 jnb loc_7F8073E5 push offset dword_7F8352E4 test eax, eax jnz short loc_7F807356 call sub_7F80A72A mov dword_7F8352E4, edi jmp short loc_7F8073A8 ; --------------------------------------------------------------------------- loc_7F807356: ; CODE XREF: sub_7F80725C+EBj push 0 push 0Ch call sub_7F80A757 test eax, eax jz loc_7F8076D4 mov eax, dword_7F8352E4 add eax, 8 push eax mov eax, dword_7F8352E4 push eax push 4 call sub_7F80A757 test eax, eax jz loc_7F8076D4 mov eax, dword_7F8352E0 mov ecx, dword_7F8352E4 mov edx, [eax] mov [ecx], edx mov eax, dword_7F8352E0 mov edx, [eax+8] mov eax, dword_7F8352E4 mov ecx, [edx] mov edx, [eax+8] mov [edx], ecx loc_7F8073A8: ; CODE XREF: sub_7F80725C+F8j mov edi, 1 push 2 ; lParam push 0BEh ; wParam mov dword_7F8353AC, edi push 111h ; Msg push esi ; hWnd call ds:PostMessageA push 270h ; nIDButton push esi ; hDlg call ds:IsDlgButtonChecked test eax, eax jnz loc_7F8076D4 mov dword_7F833268, edi jmp loc_7F8076D4 ; --------------------------------------------------------------------------- loc_7F8073E5: ; CODE XREF: sub_7F80725C+CEj ; sub_7F80725C+DEj push 4 ; int push esi ; hWnd call sub_7F8087A7 push 40h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1526h ; uID push hInstance ; hInstance call ds:LoadStringA lea ecx, [ebp+Buffer] push ecx ; lpString push esi ; hWnd call ds:SetWindowTextA lea ecx, [ebp+Rect] push ecx ; lpRect push esi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_24] push ecx ; lpRect push 385h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowRect mov eax, [ebp+var_24.right] xor edi, edi sub eax, [ebp+var_24.left] mov [ebp+Points.y], edi push 1 ; cPoints lea ecx, [ebp+Points] push ecx ; lpPoints mov [ebp+nWidth], eax mov eax, [ebp+var_24.bottom] push esi ; hWndTo sub eax, [ebp+var_24.top] push 2D2h ; nIDDlgItem push esi ; hDlg mov [ebp+hCursor], eax mov [ebp+Points.x], edi call ds:GetDlgItem push eax ; hWndFrom call ds:MapWindowPoints mov eax, [ebp+nWidth] push 1 ; bRepaint imul eax, 6 cdq push [ebp+hCursor] ; nHeight push [ebp+nWidth] ; nWidth push [ebp+Points.y] ; Y and edx, 3 add eax, edx sar eax, 2 mov [ebp+var_C], eax mov eax, [ebp+Rect.right] sub eax, [ebp+var_C] sub eax, 2 push eax ; X push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+hCursor] push [ebp+hCursor] ; nHeight push [ebp+nWidth] ; nWidth imul eax, 3 cdq sub eax, edx mov ecx, [ebp+Points.y] sar eax, 1 add ecx, eax mov eax, [ebp+Rect.right] push ecx ; Y sub eax, [ebp+var_C] sub eax, 2 push eax ; X push 385h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+hCursor] push [ebp+hCursor] ; nHeight push [ebp+nWidth] ; nWidth imul eax, 6 cdq sub eax, edx mov ecx, [ebp+Points.y] sar eax, 1 add ecx, eax mov eax, [ebp+Rect.right] push ecx ; Y sub eax, [ebp+var_C] sub eax, 2 push eax ; X push 387h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow mov dword_7F835294, offset sub_7F8076DD test ebx, ebx jnz loc_7F8075BD push 5 ; nCmdShow push esi ; hWnd call ds:ShowWindow push edi ; lParam push edi ; wParam push 184h ; Msg push 2D2h ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA mov eax, dword_7F8352E0 mov [ebp+hCursor], edi cmp [eax], edi jbe short loc_7F807593 xor ebx, ebx mov edi, 2D2h loc_7F80754C: ; CODE XREF: sub_7F80725C+335j mov eax, dword_7F8352E0 mov ecx, [eax+4] push dword ptr [ecx+ebx] ; lParam push 0 ; wParam push 180h ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA mov ecx, dword_7F8352E0 mov edx, [ecx+8] push dword ptr [edx+ebx] ; lParam push eax ; wParam push 19Ah ; Msg add ebx, 4 push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA mov ecx, dword_7F8352E0 inc [ebp+hCursor] mov eax, [ebp+hCursor] cmp [ecx], eax ja short loc_7F80754C loc_7F807593: ; CODE XREF: sub_7F80725C+2E7j push 0 ; lParam mov edi, 2D2h push 1 ; wParam push 185h ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus jmp loc_7F8076D4 ; --------------------------------------------------------------------------- loc_7F8075BD: ; CODE XREF: sub_7F80725C+2BBj cmp ebx, 8004010Fh jnz short loc_7F8075DC push 30h ; uType push offset byte_7F833F30 ; lpCaption push 150Eh ; uID push esi ; hWnd call sub_7F808359 jmp loc_7F807691 ; --------------------------------------------------------------------------- loc_7F8075DC: ; CODE XREF: sub_7F80725C+367j cmp ebx, 80070005h jnz short loc_7F80761A push 200h ; cchBufferMax mov edi, offset byte_7F8336A8 push edi ; lpBuffer mov eax, hInstance push 1518h ; uID push eax ; hInstance call ds:LoadStringA mov eax, dword_7F835290 push dword ptr [eax+8] push edi ; LPCSTR mov edi, offset Text push edi ; LPSTR call ds:wsprintfA add esp, 0Ch jmp short loc_7F807682 ; --------------------------------------------------------------------------- loc_7F80761A: ; CODE XREF: sub_7F80725C+386j push 200h ; cchBufferMax mov edi, offset byte_7F8336A8 push edi ; lpBuffer cmp ebx, 80040600h jnz short loc_7F807658 push 151Ch ; uID mov eax, hInstance push eax ; hInstance call ds:LoadStringA mov eax, dword_7F835290 push dword ptr [eax+8] push edi ; LPCSTR mov edi, offset Text push edi ; LPSTR call ds:wsprintfA add esp, 0Ch jmp short loc_7F807682 ; --------------------------------------------------------------------------- loc_7F807658: ; CODE XREF: sub_7F80725C+3CFj push 150Fh ; uID mov eax, hInstance push eax ; hInstance call ds:LoadStringA push ebx mov eax, dword_7F835290 push dword ptr [eax+8] push edi ; LPCSTR mov edi, offset Text push edi ; LPSTR call ds:wsprintfA add esp, 10h loc_7F807682: ; CODE XREF: sub_7F80725C+3BCj ; sub_7F80725C+3FAj push 30h ; uType push offset byte_7F833F30 ; lpCaption push edi ; lpText push esi ; hWnd call ds:MessageBoxA loc_7F807691: ; CODE XREF: sub_7F80725C+37Bj xor edi, edi cmp dword_7F8352DC, edi jz short loc_7F8076A9 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, edi loc_7F8076A9: ; CODE XREF: sub_7F80725C+43Dj xor eax, eax mov dword_7F83538C, eax cmp bEnable, eax jz short loc_7F8076C1 push 2 push 0BEh jmp short loc_7F8076C8 ; --------------------------------------------------------------------------- loc_7F8076C1: ; CODE XREF: sub_7F80725C+45Aj push 0 ; lParam push 0D0h ; wParam loc_7F8076C8: ; CODE XREF: sub_7F80725C+463j push 111h ; Msg push esi ; hWnd loc_7F8076CE: ; CODE XREF: sub_7F80725C+4Fj call ds:PostMessageA loc_7F8076D4: ; CODE XREF: sub_7F80725C+105j ; sub_7F80725C+123j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F80725C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8076DD(HWND hDlg, int, int, int, int, int) sub_7F8076DD proc near ; DATA XREF: sub_7F80725C+2AFo lParam = dword ptr -4 hDlg = dword ptr 8 arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 mov [ebp+lParam], 0 cmp [ebp+arg_4], 111h push ebx push esi push edi jnz loc_7F80794D mov eax, [ebp+arg_10] cmp eax, 2 jz short loc_7F80772B cmp eax, 2D2h jz short loc_7F80776F cmp eax, 384h jz loc_7F8077C2 cmp eax, 385h jz short loc_7F80772B cmp eax, 386h jz loc_7F807920 jmp loc_7F80794D ; --------------------------------------------------------------------------- loc_7F80772B: ; CODE XREF: sub_7F8076DD+23j ; sub_7F8076DD+3Cj push 131h ; uType push offset byte_7F833F30 ; lpCaption push 1527h ; uID push [ebp+hDlg] ; hWnd call sub_7F808359 cmp eax, 1 jnz loc_7F80794D xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F807763 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F807763: ; CODE XREF: sub_7F8076DD+76j push 0 push 0D0h jmp loc_7F80793F ; --------------------------------------------------------------------------- loc_7F80776F: ; CODE XREF: sub_7F8076DD+2Aj push 0 ; lParam push 0 ; wParam push 190h ; Msg push 2D2h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA test eax, eax jz short loc_7F8077A6 push 1 ; bEnable push 384h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow jmp loc_7F80794D ; --------------------------------------------------------------------------- loc_7F8077A6: ; CODE XREF: sub_7F8076DD+ABj push 0 ; bEnable push 384h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow jmp loc_7F80794D ; --------------------------------------------------------------------------- loc_7F8077C2: ; CODE XREF: sub_7F8076DD+31j xor esi, esi push esi ; lParam push esi ; wParam push 190h ; Msg push 2D2h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA cmp eax, esi mov edi, eax jz loc_7F80794D lea ebx, ds:0[edi*4] lea eax, [ebp+lParam] push eax push esi push ebx call sub_7F80A757 test eax, eax jz loc_7F80794D push [ebp+lParam] ; lParam push edi ; wParam push 191h ; Msg push 2D2h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA cmp eax, edi jnz loc_7F80794D push offset dword_7F8352E4 push esi push 0Ch call sub_7F80A757 test eax, eax jz loc_7F80794D mov eax, dword_7F8352E4 add eax, 8 push eax mov eax, dword_7F8352E4 push eax push ebx call sub_7F80A757 test eax, eax jz loc_7F80794D mov eax, dword_7F8352E4 test edi, edi mov [eax], edi jz short loc_7F807888 xor ebx, ebx loc_7F80785B: ; CODE XREF: sub_7F8076DD+1A9j push 0 ; lParam mov eax, [ebp+lParam] push dword ptr [eax+ebx] ; wParam push 199h ; Msg push 2D2h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA mov ecx, dword_7F8352E4 mov edx, [ecx+8] mov [edx+ebx], eax add ebx, 4 dec edi jnz short loc_7F80785B loc_7F807888: ; CODE XREF: sub_7F8076DD+17Aj lea eax, [ebp+lParam] mov esi, 384h push eax call sub_7F80A72A mov dword_7F8353AC, 1 push 5 ; nCmdShow push esi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd mov ebx, 385h call ds:ShowWindow push 5 ; nCmdShow push ebx ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd mov edi, 387h call ds:ShowWindow push 5 ; nCmdShow push edi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:ShowWindow push 1 ; bEnable push esi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push ebx ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 1 ; bEnable push edi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push 2 jmp short loc_7F80793A ; --------------------------------------------------------------------------- loc_7F807920: ; CODE XREF: sub_7F8076DD+43j xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F807938 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F807938: ; CODE XREF: sub_7F8076DD+24Bj push 1 ; lParam loc_7F80793A: ; CODE XREF: sub_7F8076DD+241j push 0BEh ; wParam loc_7F80793F: ; CODE XREF: sub_7F8076DD+8Dj push 111h ; Msg push [ebp+hDlg] ; hWnd call ds:PostMessageA loc_7F80794D: ; CODE XREF: sub_7F8076DD+17j ; sub_7F8076DD+49j ... mov eax, 1 pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F8076DD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80795B(HWND hDlg) sub_7F80795B proc near ; CODE XREF: sub_7F805851+59Ap String = byte ptr -13Ch Buffer = byte ptr -0BCh var_3C = byte ptr -3Ch var_2C = tagRECT ptr -2Ch Rect = tagRECT ptr -1Ch var_C = dword ptr -0Ch nHeight = dword ptr -8 nWidth = dword ptr -4 hDlg = dword ptr 8 push ebp mov ebp, esp sub esp, 13Ch push ebx push esi push edi xor esi, esi cmp dword_7F8352DC, esi jz short loc_7F80797F mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, esi loc_7F80797F: ; CODE XREF: sub_7F80795B+14j mov esi, 80h lea eax, [ebp+Buffer] push esi ; cchBufferMax mov ecx, dword_7F835290 push eax ; lpBuffer mov eax, [ecx] and eax, 1 cmp eax, 1 sbb eax, eax add eax, 1525h push eax ; uID push hInstance ; hInstance call ds:LoadStringA lea ecx, [ebp+Buffer] mov edi, [ebp+hDlg] push ecx ; lpString push 33Eh ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push esi ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1528h ; uID push hInstance ; hInstance call ds:LoadStringA mov ecx, dword_7F835290 lea eax, [ebp+Buffer] mov ebx, offset aSLu ; "%s %lu" push dword ptr [ecx+54h] push eax push ebx ; LPCSTR lea ecx, [ebp+String] push ecx ; LPSTR call ds:wsprintfA add esp, 10h lea eax, [ebp+String] push eax ; lpString push 33Fh ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push esi ; cchBufferMax lea ecx, [ebp+Buffer] push ecx ; lpBuffer mov eax, hInstance push 1529h ; uID push eax ; hInstance call ds:LoadStringA lea edx, [ebp+Buffer] lea eax, [ebp+String] push dword_7F8336A0 push edx push ebx ; LPCSTR push eax ; LPSTR call ds:wsprintfA add esp, 10h lea ecx, [ebp+String] push ecx ; lpString push 340h ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push esi ; cchBufferMax lea ecx, [ebp+Buffer] mov eax, hInstance push ecx ; lpBuffer push 152Ah ; uID push eax ; hInstance call ds:LoadStringA lea edx, [ebp+Buffer] lea eax, [ebp+String] push dword_7F833FB0 push edx push ebx ; LPCSTR push eax ; LPSTR call ds:wsprintfA add esp, 10h lea ecx, [ebp+String] push ecx ; lpString push 341h ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push esi ; cchTime lea ecx, [ebp+Buffer] push ecx ; lpTimeStr mov eax, dword_7F835290 push 0 ; lpFormat add eax, 38h mov [ebp+Buffer], 0 push eax ; lpTime push 0Ch ; dwFlags push 0 ; Locale call ds:GetTimeFormatA push esi ; cchBufferMax lea ecx, [ebp+String] push ecx ; lpBuffer push 152Bh ; uID push hInstance ; hInstance call ds:LoadStringA push offset asc_7F8353EC ; " " lea ecx, [ebp+String] push ecx ; lpString1 call ds:lstrcatA lea ecx, [ebp+Buffer] lea edx, [ebp+String] push ecx ; lpString2 push edx ; lpString1 call ds:lstrcatA lea ecx, [ebp+String] push ecx ; lpString push 342h ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push 7 ; int push edi ; hWnd call sub_7F8087A7 push 5 ; nCmdShow mov esi, ds:GetDlgItem push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 1 ; bEnable push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow lea eax, [ebp+Rect] mov ebx, 385h push eax ; lpRect push edi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_2C] push ecx ; lpRect push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:GetWindowRect mov eax, [ebp+var_2C.right] sub eax, [ebp+var_2C.left] mov [ebp+nWidth], eax mov eax, [ebp+var_2C.bottom] sub eax, [ebp+var_2C.top] push 1 ; bRepaint mov [ebp+nHeight], eax imul eax, 3 cdq push [ebp+nHeight] ; nHeight push [ebp+nWidth] ; nWidth sub eax, edx mov ecx, [ebp+Rect.right] sar eax, 1 mov [ebp+var_C], eax mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_C] push eax ; Y mov eax, [ebp+nWidth] imul eax, 6 cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bRepaint mov eax, [ebp+Rect.bottom] sub eax, [ebp+var_C] mov ecx, [ebp+Rect.right] push [ebp+nHeight] ; nHeight push [ebp+nWidth] ; nWidth push eax ; Y mov eax, [ebp+nWidth] imul eax, 0Bh cdq and edx, 3 add eax, edx sar eax, 2 sub ecx, eax sub ecx, 2 push ecx ; X push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:MoveWindow push 10h ; cchMax lea eax, [ebp+var_3C] push eax ; lpString push 384h ; nIDDlgItem push edi ; hDlg call ds:GetDlgItemTextA lea ecx, [ebp+var_3C] push ecx ; lpString push ebx ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push 0 ; nCmdShow push 384h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; bEnable push 384h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 1 ; bEnable push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 1 ; bEnable push 387h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 32Bh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 32Ch ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 32Dh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 335h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 336h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; bEnable push 337h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 0 ; nCmdShow push 32Bh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 32Ch ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 32Dh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 335h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 336h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 0 ; nCmdShow push 337h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 5 ; nCmdShow push edi ; hWnd call ds:ShowWindow mov dword_7F835294, offset sub_7F807D63 push ebx ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:SetFocus pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F80795B endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F807D63(HWND hDlg, int, int, int, int, int) sub_7F807D63 proc near ; DATA XREF: sub_7F80795B+3EAo hDlg = dword ptr 4 arg_4 = dword ptr 8 arg_10 = dword ptr 14h cmp [esp+arg_4], 111h jnz short loc_7F807D94 mov eax, [esp+arg_10] cmp eax, 2 jz short loc_7F807D7D cmp eax, 385h jnz short loc_7F807D94 loc_7F807D7D: ; CODE XREF: sub_7F807D63+11j mov eax, dword_7F835290 push eax call sub_7F808949 push 1 ; nResult push [esp+4+hDlg] ; hDlg call ds:EndDialog loc_7F807D94: ; CODE XREF: sub_7F807D63+8j ; sub_7F807D63+18j mov eax, 1 retn 18h sub_7F807D63 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F807D9C(HWND hWnd) sub_7F807D9C proc near ; CODE XREF: sub_7F805851+58Dp var_160 = byte ptr -160h Buffer = byte ptr -0E0h Rect = tagRECT ptr -60h var_50 = SYSTEMTIME ptr -50h SystemTime = _SYSTEMTIME ptr -40h var_30 = tagRECT ptr -30h var_20 = tagRECT ptr -20h Points = tagPOINT ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 hWnd = dword ptr 8 push ebp mov ebp, esp sub esp, 160h cmp dword_7F833268, 0 mov [ebp+var_4], 1 push ebx push esi push edi mov esi, [ebp+hWnd] push esi ; hDlg jz short loc_7F807DC3 call sub_7F809E94 jmp short loc_7F807DC8 ; --------------------------------------------------------------------------- loc_7F807DC3: ; CODE XREF: sub_7F807D9C+1Ej call sub_7F80887D loc_7F807DC8: ; CODE XREF: sub_7F807D9C+25j mov edi, bEnable xor eax, eax cmp dword_7F83538C, eax jnz short loc_7F807DE5 cmp dword_7F83537C, eax jnz short loc_7F807DE5 mov [ebp+var_8], eax jmp short loc_7F807DEC ; --------------------------------------------------------------------------- loc_7F807DE5: ; CODE XREF: sub_7F807D9C+3Aj ; sub_7F807D9C+42j mov [ebp+var_8], 1 loc_7F807DEC: ; CODE XREF: sub_7F807D9C+47j mov ebx, 80h lea eax, [ebp+Buffer] push ebx ; cchBufferMax push eax ; lpBuffer push 1515h ; uID push hInstance ; hInstance call ds:LoadStringA push ebx ; cchBufferMax lea ecx, [ebp+var_160] push ecx ; lpBuffer push 1516h ; uID push hInstance ; hInstance call ds:LoadStringA mov eax, dword_7F8353C8 push 6 ; uFlags shl eax, 4 xor ebx, ebx mov eax, off_7F835350[eax] push dword ptr [eax+4] ; cy push dword ptr [eax] ; cx push ebx ; Y push ebx ; X push ebx ; hWndInsertAfter push esi ; hWnd call ds:SetWindowPos push 5 ; nCmdShow push esi ; hWnd call ds:ShowWindow lea eax, [ebp+var_160] lea edx, [ebp+Buffer] push [ebp+var_8] ; BOOL push edi ; bEnable push dword_7F833264 ; int push eax ; LPCSTR push edx ; lpString push esi ; hDlg call sub_7F80A115 lea ecx, [ebp+Rect] mov edi, 339h push ecx ; lpRect push esi ; hWnd call ds:GetClientRect lea ecx, [ebp+var_20] push ecx ; lpRect push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowRect lea eax, [ebp+var_30] push eax ; lpRect push 32Ch ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetClientRect mov eax, [ebp+var_30.right] mov ecx, [ebp+var_30.bottom] mov [ebp+Points.x], eax mov [ebp+Points.y], ecx push 1 ; cPoints lea eax, [ebp+Points] push eax ; lpPoints push esi ; hWndTo push 32Ch ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWndFrom call ds:MapWindowPoints mov eax, [ebp+var_20.right] mov ecx, [ebp+var_20.bottom] sub eax, [ebp+var_20.left] sub ecx, [ebp+var_20.top] push ebx ; bRepaint push ecx ; nHeight push eax ; nWidth mov ecx, [ebp+Points.y] imul eax, 6 cdq inc ecx and edx, 3 push ecx ; Y add eax, edx sar eax, 2 mov ecx, [ebp+Rect.right] sub ecx, eax sub ecx, 2 push ecx ; X push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:MoveWindow push 1 ; bEnable push esi ; hWnd call ds:EnableWindow push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus push ebx ; bEnable push 384h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 385h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 387h ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow mov dword_7F835298, 1 push ebx ; bErase push ebx ; lpRect push esi ; hWnd call ds:InvalidateRect push esi ; hWnd call ds:UpdateWindow push 0FFFFFFFCh ; nIndex push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowLongA push offset sub_7F809FA2 ; dwNewLong mov lpPrevWndFunc, eax push 0FFFFFFFCh ; nIndex push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetWindowLongA push ebx ; lParam push edi ; wParam push 401h ; Msg push esi ; hWnd call ds:SendMessageA push 1 ; lParam push 1 ; wParam push 0F4h ; Msg push edi ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:UpdateWindow push ebx ; int mov uValue, ebx mov eax, hInstance mov ecx, dword_7F835290 push eax ; hInstance mov dword_7F833698, ebx mov dword_7F8336A0, ebx mov dword_7F833FB0, ebx push dword ptr [ecx+8] ; int call sub_7F80530D mov edi, eax cmp dword_7F8352DC, ebx jz short loc_7F80800A mov eax, dword_7F8352DC mov [eax+5Ch], edi loc_7F80800A: ; CODE XREF: sub_7F807D9C+264j lea eax, [ebp+SystemTime] push eax ; lpSystemTime call ds:GetSystemTime mov eax, dword_7F835290 test byte ptr [eax], 1 jnz short loc_7F808099 xor ebx, ebx cmp bEnable, ebx jz short loc_7F808099 cmp dword ptr [eax+14h], 1 jnz short loc_7F808066 push eax ; int push esi ; hWnd call sub_7F8091A3 mov ecx, dword_7F835290 mov [ecx+2Ch], eax mov ecx, dword_7F835290 cmp [ecx+2Ch], ebx jnz short loc_7F808066 push ebx ; lParam push 0D0h ; wParam push 111h ; Msg push esi ; hWnd call ds:PostMessageA mov dword_7F835298, ebx jmp loc_7F80817B ; --------------------------------------------------------------------------- loc_7F808066: ; CODE XREF: sub_7F807D9C+290j ; sub_7F807D9C+2ABj mov eax, 0 cmp edi, 1 adc eax, 0FFFFFFFFh and eax, 10000000h push eax ; int push esi ; hWnd call sub_7F8081B3 mov ecx, dword_7F835290 mov [ebp+var_4], eax cmp dword ptr [ecx+14h], 1 jnz short loc_7F808099 cmp dword ptr [ecx+10h], 0 jnz short loc_7F808099 push ecx push esi call sub_7F8096A8 loc_7F808099: ; CODE XREF: sub_7F807D9C+280j ; sub_7F807D9C+28Aj ... mov eax, dword_7F835290 test byte ptr [eax], 1 jnz short loc_7F8080C8 xor eax, eax cmp [ebp+var_4], eax jz short loc_7F8080C8 cmp dword_7F8352E4, eax jz short loc_7F8080C8 cmp dword_7F83538C, eax jnz short loc_7F8080C2 cmp dword_7F83537C, eax jz short loc_7F8080C8 loc_7F8080C2: ; CODE XREF: sub_7F807D9C+31Cj push esi call sub_7F8082C7 loc_7F8080C8: ; CODE XREF: sub_7F807D9C+305j ; sub_7F807D9C+30Cj ... test edi, edi jz short loc_7F8080D3 push 0 call sub_7F805403 loc_7F8080D3: ; CODE XREF: sub_7F807D9C+32Ej mov eax, lpPrevWndFunc mov edi, 339h push eax ; dwNewLong push 0FFFFFFFCh ; nIndex push edi ; nIDDlgItem mov ebx, 385h push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetWindowLongA mov dword_7F835298, 0 push ebx ; dwNewLong push 0FFFFFFF4h ; nIndex push edi ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetWindowLongA push ebx ; nIDDlgItem push esi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:SetFocus push 0 ; lParam mov edi, 1 push ebx ; wParam push 401h ; Msg push esi ; hWnd call ds:SendMessageA push edi ; lParam push edi ; wParam push 0F4h ; Msg push ebx ; nIDDlgItem push esi ; hDlg call ds:SendDlgItemMessageA lea eax, [ebp+var_50] push eax ; lpSystemTime call ds:GetSystemTime lea eax, [ebp+var_50] lea ecx, [ebp+SystemTime] push eax ; SYSTEMTIME * push ecx ; lpSystemTime mov eax, dword_7F835290 add eax, 38h push eax ; LPSYSTEMTIME call sub_7F809DFE push 2 ; lParam mov dword_7F8353BC, edi push 0BEh ; wParam push 111h ; Msg push esi ; hWnd call ds:PostMessageA loc_7F80817B: ; CODE XREF: sub_7F807D9C+2C5j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F807D9C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7F808184 proc near ; DATA XREF: sub_7F8081B3+66o push 32Eh ; int mov eax, dword_7F833264 push eax ; int inc uValue push uValue ; uValue push hDlg ; hDlg call sub_7F80A47A cmp eax, 1 sbb eax, eax and eax, 80040113h retn 20h sub_7F808184 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8081B3(HWND hWnd, int) sub_7F8081B3 proc near ; CODE XREF: sub_7F807D9C+2DCp uMode = dword ptr -8 var_4 = dword ptr -4 hWnd = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [ebp+arg_4] xor edi, edi or esi, 80000000h push 8001h ; uMode mov [ebp+var_4], edi call ds:SetErrorMode mov [ebp+uMode], eax cmp dword_7F8353CC, edi jnz short loc_7F8081E6 or esi, 40000000h loc_7F8081E6: ; CODE XREF: sub_7F8081B3+2Bj mov edi, dword_7F835290 xor eax, eax add edi, 38h mov ecx, 0Fh rep stosd lea eax, [ebp+var_4] push eax ; int call MAPIGetDefaultMalloc@0 push eax ; int mov ecx, dword_7F835290 push offset MAPIFreeBuffer@4 ; int push offset MAPIAllocateMore@12 ; int push offset MAPIAllocateBuffer@8 ; int push 0 ; int push offset sub_7F808184 ; int push dword ptr [ecx+2Ch] ; int push dword ptr [ecx+0Ch] ; int push dword ptr [ecx+8] ; int push esi ; int push [ebp+hWnd] ; hWnd call ScMMFMigrateToMDB@48 cmp [ebp+var_4], 0 mov ebx, eax jz short loc_7F808252 mov eax, [ebp+var_4] mov esi, [eax+10h] test esi, esi jz short loc_7F808252 mov edi, dword_7F835290 mov ecx, 0Fh add edi, 38h rep movsd loc_7F808252: ; CODE XREF: sub_7F8081B3+83j ; sub_7F8081B3+8Dj push [ebp+var_4] call MAPIFreeBuffer@4 push [ebp+uMode] ; uMode call ds:SetErrorMode test ebx, ebx jge short loc_7F8082B9 cmp ebx, 80040113h jz short loc_7F8082B5 push 200h ; cchBufferMax mov esi, offset byte_7F8336A8 push esi ; lpBuffer mov eax, hInstance push 1501h ; uID push eax ; hInstance call ds:LoadStringA push ebx mov eax, dword_7F835290 push dword ptr [eax+8] push esi ; LPCSTR mov esi, offset Text push esi ; LPSTR call ds:wsprintfA add esp, 10h push 30h ; uType push offset byte_7F833F30 ; lpCaption push esi ; lpText push [ebp+hWnd] ; hWnd call ds:MessageBoxA loc_7F8082B5: ; CODE XREF: sub_7F8081B3+BAj xor eax, eax jmp short loc_7F8082BE ; --------------------------------------------------------------------------- loc_7F8082B9: ; CODE XREF: sub_7F8081B3+B2j mov eax, 1 loc_7F8082BE: ; CODE XREF: sub_7F8081B3+104j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8081B3 endp ; =============== S U B R O U T I N E ======================================= sub_7F8082C7 proc near ; CODE XREF: sub_7F807D9C+327p push ebx push esi push edi mov esi, ds:SetErrorMode push 8001h ; uMode call esi ; SetErrorMode cmp dword_7F8352DC, 0 mov edi, eax jnz short loc_7F8082E9 push edi ; uMode call esi ; SetErrorMode xor eax, eax jmp short loc_7F808353 ; --------------------------------------------------------------------------- loc_7F8082E9: ; CODE XREF: sub_7F8082C7+19j push 80000000h mov eax, dword_7F8352E4 push dword ptr [eax+8] push dword ptr [eax] mov eax, dword_7F8352DC push dword_7F8352DC call dword ptr [eax+8] mov ecx, dword_7F8352DC push offset dword_7F8352E4 xor ebx, ebx mov edx, [ecx+54h] mov dword_7F8336A0, edx call sub_7F80A72A push offset dword_7F8352E0 call sub_7F80A775 cmp dword_7F8352DC, ebx jz short loc_7F808341 mov eax, dword_7F8352DC push eax call dword ptr [eax] mov dword_7F8352DC, ebx loc_7F808341: ; CODE XREF: sub_7F8082C7+6Aj push offset dword_7F8352E0 call sub_7F80A72A push edi ; uMode call esi ; SetErrorMode mov eax, 1 loc_7F808353: ; CODE XREF: sub_7F8082C7+20j pop edi pop esi pop ebx retn 4 sub_7F8082C7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808359(HWND hWnd, UINT uID, LPCSTR lpCaption, UINT uType) sub_7F808359 proc near ; CODE XREF: sub_7F805851+C3p ; sub_7F806352+64p ... hWnd = dword ptr 8 uID = dword ptr 0Ch lpCaption = dword ptr 10h uType = dword ptr 14h push ebp mov ebp, esp push esi push 400h ; cchBufferMax mov esi, offset byte_7F833288 push esi ; lpBuffer push [ebp+uID] ; uID push hInstance ; hInstance call ds:LoadStringA test eax, eax jnz short loc_7F808387 push offset aCouldNotFindSt ; "Could not find string resource in file." push esi ; lpString1 call ds:lstrcpyA loc_7F808387: ; CODE XREF: sub_7F808359+20j push [ebp+uType] ; uType push [ebp+lpCaption] ; lpCaption push offset byte_7F833288 ; lpText push [ebp+hWnd] ; hWnd call ds:MessageBoxA pop esi pop ebp retn 10h sub_7F808359 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8083A0(LPCSTR lpFileName, __int16, DWORD dwFlagsAndAttributes) sub_7F8083A0 proc near ; CODE XREF: sub_7F805FDE+30p ; sub_7F805FDE+96p ... FindFileData = _WIN32_FIND_DATAA ptr -144h NumberOfBytesRead= dword ptr -4 lpFileName = dword ptr 8 arg_7 = byte ptr 0Fh dwFlagsAndAttributes= dword ptr 10h push ebp mov ebp, esp sub esp, 144h push esi push edi mov edi, 0FFFFFFFFh xor esi, esi test [ebp+arg_7], 40h jnz short loc_7F8083E5 lea eax, [ebp+FindFileData] push eax ; lpFindFileData push [ebp+lpFileName] ; lpFileName call ds:FindFirstFileA cmp eax, edi jnz short loc_7F8083D9 call ds:GetLastError mov esi, eax jmp loc_7F808482 ; --------------------------------------------------------------------------- loc_7F8083D9: ; CODE XREF: sub_7F8083A0+2Aj push eax ; hFindFile call ds:FindClose jmp loc_7F808482 ; --------------------------------------------------------------------------- loc_7F8083E5: ; CODE XREF: sub_7F8083A0+16j xor eax, eax push eax ; hTemplateFile push [ebp+dwFlagsAndAttributes] ; dwFlagsAndAttributes push 3 ; dwCreationDisposition push eax ; lpSecurityAttributes push eax ; dwShareMode push dword ptr [ebp+0Ch] ; dwDesiredAccess push [ebp+lpFileName] ; lpFileName call ds:CreateFileA cmp eax, 0FFFFFFFFh mov edi, eax jnz short loc_7F80840C call ds:GetLastError mov esi, eax jmp short loc_7F808482 ; --------------------------------------------------------------------------- loc_7F80840C: ; CODE XREF: sub_7F8083A0+60j push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesRead] push eax ; lpNumberOfBytesRead lea ecx, [ebp+FindFileData+13Fh] mov byte ptr [ebp+FindFileData+13Fh], 0 push 1 ; nNumberOfBytesToRead push ecx ; lpBuffer push edi ; hFile call ds:ReadFile test eax, eax jnz short loc_7F808431 call ds:GetLastError mov esi, eax jmp short loc_7F808482 ; --------------------------------------------------------------------------- loc_7F808431: ; CODE XREF: sub_7F8083A0+85j cmp [ebp+NumberOfBytesRead], 1 jnz short loc_7F808482 xor eax, eax push eax ; dwMoveMethod push eax ; lpDistanceToMoveHigh push eax ; lDistanceToMove push edi ; hFile call ds:SetFilePointer mov [ebp+NumberOfBytesRead], eax cmp eax, 0FFFFFFFFh jnz short loc_7F808455 call ds:GetLastError mov esi, eax jmp short loc_7F808482 ; --------------------------------------------------------------------------- loc_7F808455: ; CODE XREF: sub_7F8083A0+A9j cmp [ebp+NumberOfBytesRead], 0 jnz short loc_7F808482 push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesRead] push eax ; lpNumberOfBytesWritten lea ecx, [ebp+FindFileData+13Fh] push 1 ; nNumberOfBytesToWrite push ecx ; lpBuffer push edi ; hFile call ds:WriteFile test eax, eax jz short loc_7F80847D push edi ; hFile call ds:FlushFileBuffers test eax, eax jnz short loc_7F808482 loc_7F80847D: ; CODE XREF: sub_7F8083A0+D0j mov esi, 5 loc_7F808482: ; CODE XREF: sub_7F8083A0+34j ; sub_7F8083A0+40j ... cmp edi, 0FFFFFFFFh jz short loc_7F80848E push edi ; hObject call ds:CloseHandle loc_7F80848E: ; CODE XREF: sub_7F8083A0+E5j mov eax, esi pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F8083A0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808498(HWND hDlg, int nIDDlgItem, UINT uID, int, int, int, int, int) sub_7F808498 proc near ; CODE XREF: sub_7F805EBF+A0p ; sub_7F806861+34Cp FindFileData = _WIN32_FIND_DATAA ptr -3FCh String = byte ptr -2BCh String1 = byte ptr -1B8h Buffer = byte ptr -0B8h String2 = byte ptr -7Ch var_5C = byte ptr -5Ch var_4C = tagOFNA ptr -4Ch hDlg = dword ptr 8 nIDDlgItem = dword ptr 0Ch uID = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp xor eax, eax mov ebp, esp mov ecx, 40h sub esp, 3FCh push ebx push esi push edi lea edi, [ebp+String1] rep stosd lea edi, [ebp+var_5C] mov ecx, 13h stosd stosd stosd stosd lea edi, [ebp+var_4C] push 3Ch ; cchBufferMax rep stosd lea eax, [ebp+Buffer] mov edi, [ebp+uID] push eax ; lpBuffer mov esi, ds:LoadStringA push edi ; uID mov eax, hInstance push eax ; hInstance call esi ; LoadStringA push 0F6h ; cchBufferMax lea ecx, [ebp+String1] push ecx ; lpBuffer lea eax, [edi+1] push eax ; uID add edi, 2 push hInstance ; hInstance call esi ; LoadStringA push 10h ; cchBufferMax lea ecx, [ebp+var_5C] push ecx ; lpBuffer mov eax, hInstance push edi ; uID push eax ; hInstance call esi ; LoadStringA cmp [ebp+nIDDlgItem], 0 jz short loc_7F808542 push 104h ; cchMax lea eax, [ebp+String] push eax ; lpString push [ebp+nIDDlgItem] ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItemTextA cmp [ebp+String], 0 jz short loc_7F808542 lea eax, [ebp+String] push eax ; lpString2 push offset String1 ; lpString1 call ds:lstrcpyA loc_7F808542: ; CODE XREF: sub_7F808498+75j ; sub_7F808498+96j push 80h ; dwFlagsAndAttributes mov edi, offset String1 mov Buf, 0 push 0C0000000h ; __int16 push edi ; lpFileName call sub_7F8083A0 test eax, eax jnz loc_7F80864C push 104h ; cchSize mov ebx, offset Buf push ebx ; Buf push edi ; LPCSTR call GetFileTitleA push edi ; lpString call ds:lstrlenA mov edi, eax push ebx ; lpString call ds:lstrlenA sub edi, eax mov String1[edi], 0 loc_7F808590: ; CODE XREF: sub_7F808498+1E1j ; sub_7F808498+1F0j ... cmp [ebp+arg_10], 0 jz short loc_7F8085CC push 20h ; cchBufferMax lea eax, [ebp+String2] push eax ; lpBuffer push 1508h ; uID push hInstance ; hInstance call esi ; LoadStringA push offset a@ ; "@" lea ecx, [ebp+String1] push ecx ; lpString1 call ds:lstrcatA lea ecx, [ebp+String2] lea edx, [ebp+String1] push ecx ; lpString2 push edx ; lpString1 call ds:lstrcatA loc_7F8085CC: ; CODE XREF: sub_7F808498+FCj xor ecx, ecx cmp [ebp+String1], cl jz short loc_7F8085F0 loc_7F8085D6: ; CODE XREF: sub_7F808498+156j lea eax, [ebp+ecx+String1] cmp byte ptr [eax], 40h jnz short loc_7F8085E5 mov byte ptr [eax], 0 loc_7F8085E5: ; CODE XREF: sub_7F808498+148j inc ecx cmp [ebp+ecx+String1], 0 jnz short loc_7F8085D6 loc_7F8085F0: ; CODE XREF: sub_7F808498+13Cj mov eax, [ebp+hDlg] lea ecx, [ebp+String1] mov [ebp+var_4C.hwndOwner], eax mov [ebp+var_4C.lpstrFilter], ecx mov [ebp+var_4C.lStructSize], 4Ch mov [ebp+var_4C.lpstrCustomFilter], 0 mov [ebp+var_4C.nFilterIndex], 1 mov [ebp+var_4C.lpstrFile], offset Buf mov [ebp+var_4C.nMaxFile], 104h mov [ebp+var_4C.lpstrInitialDir], offset String1 lea eax, [ebp+Buffer] push eax ; lpString call ds:lstrlenA test eax, eax jz loc_7F8086D7 lea eax, [ebp+Buffer] mov [ebp+var_4C.lpstrTitle], eax jmp loc_7F8086DE ; --------------------------------------------------------------------------- loc_7F80864C: ; CODE XREF: sub_7F808498+C8j mov edi, offset String1 loc_7F808651: ; CODE XREF: sub_7F808498+23Aj lea eax, [ebp+FindFileData] push eax ; lpFindFileData push edi ; lpFileName call ds:FindFirstFileA cmp eax, 0FFFFFFFFh mov ebx, eax jz short loc_7F80867F push ebx ; hFindFile call ds:FindClose cmp ebx, 0FFFFFFFFh jz short loc_7F80867F test byte ptr [ebp+FindFileData.dwFileAttributes], 10h jnz loc_7F808590 loc_7F80867F: ; CODE XREF: sub_7F808498+1CCj ; sub_7F808498+1D8j push edi ; lpString call ds:lstrlenA test eax, eax jz loc_7F808590 loc_7F80868E: ; CODE XREF: sub_7F808498+207j mov cl, String1[eax] cmp cl, 5Ch jz short loc_7F8086A1 cmp cl, 3Ah jz short loc_7F8086A1 dec eax jnz short loc_7F80868E loc_7F8086A1: ; CODE XREF: sub_7F808498+1FFj ; sub_7F808498+204j test eax, eax jz loc_7F808590 lea ebx, String1[eax] cmp byte ptr [ebx], 3Ah jz loc_7F808590 cmp [ebp+arg_C], 0 jnz short loc_7F8086CF add eax, offset unk_7F8338C1 push eax ; lpString2 push offset Buf ; lpString1 call ds:lstrcpyA loc_7F8086CF: ; CODE XREF: sub_7F808498+224j mov byte ptr [ebx], 0 jmp loc_7F808651 ; --------------------------------------------------------------------------- loc_7F8086D7: ; CODE XREF: sub_7F808498+1A0j mov [ebp+var_4C.lpstrTitle], 0 loc_7F8086DE: ; CODE XREF: sub_7F808498+1AFj cmp [ebp+arg_C], 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 1000h or eax, 1081Ch mov [ebp+var_4C.Flags], eax call sub_7F80C7CE cmp eax, 4 jb short loc_7F808705 or byte ptr [ebp+var_4C.Flags+2], 8 loc_7F808705: ; CODE XREF: sub_7F808498+267j lea eax, [ebp+var_5C] push eax ; lpString call ds:lstrlenA test eax, eax jz short loc_7F80871B lea eax, [ebp+var_5C] mov [ebp+var_4C.lpstrDefExt], eax jmp short loc_7F808722 ; --------------------------------------------------------------------------- loc_7F80871B: ; CODE XREF: sub_7F808498+279j mov [ebp+var_4C.lpstrDefExt], 0 loc_7F808722: ; CODE XREF: sub_7F808498+281j mov eax, [ebp+arg_1C] mov [ebp+var_4C.lpfnHook], eax test eax, eax jz short loc_7F808730 or byte ptr [ebp+var_4C.Flags], 20h loc_7F808730: ; CODE XREF: sub_7F808498+292j cmp [ebp+arg_14], 0 lea eax, [ebp+var_4C] push eax ; LPOPENFILENAMEA jz short loc_7F808741 call GetOpenFileNameA jmp short loc_7F808746 ; --------------------------------------------------------------------------- loc_7F808741: ; CODE XREF: sub_7F808498+2A0j call GetSaveFileNameA loc_7F808746: ; CODE XREF: sub_7F808498+2A7j test eax, eax jz short loc_7F80879C mov esi, [ebp+arg_18] push esi push 0 push [ebp+var_4C.lpstrFile] ; lpString call ds:lstrlenA inc eax push eax call sub_7F80A757 test eax, eax jz short loc_7F80879C push [ebp+var_4C.lpstrFile] ; lpString2 push dword ptr [esi] ; lpString1 call ds:lstrcpyA push [ebp+var_4C.lpstrFile] ; lpString push [ebp+nIDDlgItem] ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SetDlgItemTextA push 1 ; bEnable push 384h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:EnableWindow mov eax, 1 jmp short loc_7F80879E ; --------------------------------------------------------------------------- loc_7F80879C: ; CODE XREF: sub_7F808498+2B0j ; sub_7F808498+2CAj xor eax, eax loc_7F80879E: ; CODE XREF: sub_7F808498+302j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F808498 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8087A7(HWND hWnd, int) sub_7F8087A7 proc near ; CODE XREF: sub_7F805EBF+48p ; sub_7F8061C8+52p ... var_4 = dword ptr -4 hWnd = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi push [ebp+hWnd] ; hWnd call ds:GetParent push eax ; hWnd call ds:SetActiveWindow push 0 ; nCmdShow push [ebp+hWnd] ; hWnd call ds:ShowWindow mov eax, dword_7F8353C8 push 6 ; uFlags shl eax, 4 mov eax, off_7F835350[eax] push dword ptr [eax+4] ; cy push dword ptr [eax] ; cx push 0 ; Y push 0 ; X xor esi, esi push 0 ; hWndInsertAfter push [ebp+hWnd] ; hWnd call ds:SetWindowPos cmp dword_7F8352F0, esi jz short loc_7F808874 mov ebx, offset unk_7F8352F4 loc_7F8087FE: ; CODE XREF: sub_7F8087A7+CBj mov edi, [ebx-4] cmp esi, [ebp+arg_4] jnz short loc_7F80883C cmp [ebx], edi jl short loc_7F808834 loc_7F80880A: ; CODE XREF: sub_7F8087A7+8Bj push edi ; nIDDlgItem push [ebp+hWnd] ; hDlg call ds:GetDlgItem mov [ebp+var_4], eax test eax, eax jz short loc_7F80882F push 5 ; nCmdShow push eax ; hWnd call ds:ShowWindow push 1 ; bEnable push [ebp+var_4] ; hWnd call ds:EnableWindow loc_7F80882F: ; CODE XREF: sub_7F8087A7+72j inc edi cmp [ebx], edi jge short loc_7F80880A loc_7F808834: ; CODE XREF: sub_7F8087A7+61j cmp [ebp+arg_4], 7 jnz short loc_7F80886A jmp short loc_7F808874 ; --------------------------------------------------------------------------- loc_7F80883C: ; CODE XREF: sub_7F8087A7+5Dj cmp [ebx], edi jl short loc_7F80886A loc_7F808840: ; CODE XREF: sub_7F8087A7+C1j push edi ; nIDDlgItem push [ebp+hWnd] ; hDlg call ds:GetDlgItem mov [ebp+var_4], eax test eax, eax jz short loc_7F808865 push 0 ; nCmdShow push eax ; hWnd call ds:ShowWindow push 0 ; bEnable push [ebp+var_4] ; hWnd call ds:EnableWindow loc_7F808865: ; CODE XREF: sub_7F8087A7+A8j inc edi cmp [ebx], edi jge short loc_7F808840 loc_7F80886A: ; CODE XREF: sub_7F8087A7+91j ; sub_7F8087A7+97j add ebx, 8 inc esi cmp dword ptr [ebx-4], 0 jnz short loc_7F8087FE loc_7F808874: ; CODE XREF: sub_7F8087A7+50j ; sub_7F8087A7+93j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8087A7 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80887D(HWND hDlg) sub_7F80887D proc near ; CODE XREF: sub_7F807D9C:loc_7F807DC3p hDlg = dword ptr 4 cmp dword_7F8352F0, 0 push esi push edi jz short loc_7F8088B6 mov esi, offset dword_7F8352F0 loc_7F80888D: ; CODE XREF: sub_7F80887D+37j mov edi, [esi] cmp [esi+4], edi jl short loc_7F8088AE loc_7F808894: ; CODE XREF: sub_7F80887D+2Fj push 0 ; bEnable push edi ; nIDDlgItem push [esp+10h+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd inc edi call ds:EnableWindow cmp [esi+4], edi jge short loc_7F808894 loc_7F8088AE: ; CODE XREF: sub_7F80887D+15j add esi, 8 cmp dword ptr [esi], 0 jnz short loc_7F80888D loc_7F8088B6: ; CODE XREF: sub_7F80887D+9j pop edi pop esi retn 4 sub_7F80887D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8088BB proc near ; CODE XREF: sub_7F805851+A6p var_4 = dword ptr -4 push ebp xor eax, eax mov ebp, esp sub esp, 4 lea ecx, [ebp+var_4] mov [ebp+var_4], eax push ecx push eax push 178h call sub_7F80A757 test eax, eax mov eax, 0 jz short loc_7F808945 mov eax, [ebp+var_4] xor ecx, ecx mov [eax], ecx mov eax, [ebp+var_4] mov edx, 1 mov [eax+4], ecx mov eax, [ebp+var_4] mov [eax+8], ecx mov eax, [ebp+var_4] mov [eax+0Ch], ecx mov eax, [ebp+var_4] mov [eax+10h], edx mov eax, [ebp+var_4] mov [eax+30h], ecx mov eax, [ebp+var_4] mov [eax+14h], edx mov eax, [ebp+var_4] mov dword ptr [eax+18h], 0FFFFFFFFh mov eax, [ebp+var_4] mov [eax+1Ch], ecx mov eax, [ebp+var_4] mov [eax+20h], ecx mov eax, [ebp+var_4] mov [eax+24h], ecx mov eax, [ebp+var_4] mov [eax+28h], ecx mov eax, [ebp+var_4] mov [eax+34h], ecx mov eax, [ebp+var_4] mov [eax+2Ch], ecx mov eax, [ebp+var_4] mov [eax+74h], cl mov eax, [ebp+var_4] loc_7F808945: ; CODE XREF: sub_7F8088BB+21j mov esp, ebp pop ebp retn sub_7F8088BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F808949 proc near ; CODE XREF: sub_7F805851+5C2p ; sub_7F805EBF+AFp ... arg_0 = dword ptr 8 push ebp mov ebp, esp push esi cmp [ebp+arg_0], 0 jz loc_7F8089FD mov eax, [ebp+arg_0] add eax, 8 cmp dword ptr [eax], 0 jz short loc_7F808968 push eax call sub_7F80A72A loc_7F808968: ; CODE XREF: sub_7F808949+17j mov eax, [ebp+arg_0] add eax, 0Ch cmp dword ptr [eax], 0 jz short loc_7F808979 push eax call sub_7F80A72A loc_7F808979: ; CODE XREF: sub_7F808949+28j mov eax, [ebp+arg_0] add eax, 30h cmp dword ptr [eax], 0 jz short loc_7F80898A push eax call sub_7F80A72A loc_7F80898A: ; CODE XREF: sub_7F808949+39j mov eax, [ebp+arg_0] push dword ptr [eax+2Ch] call UlRelease@4 mov ecx, [ebp+arg_0] push dword ptr [ecx+28h] call UlRelease@4 mov eax, [ebp+arg_0] add eax, 34h cmp dword ptr [eax], 0 jz short loc_7F8089B1 push eax call sub_7F80A72A loc_7F8089B1: ; CODE XREF: sub_7F808949+60j mov eax, [ebp+arg_0] xor ecx, ecx mov eax, [eax+24h] test eax, eax jz short loc_7F8089D9 mov edx, [ebp+arg_0] test byte ptr [edx], 8 jnz short loc_7F8089CE push ecx mov esi, [eax] push ecx push ecx push eax call dword ptr [esi+44h] loc_7F8089CE: ; CODE XREF: sub_7F808949+7Aj mov eax, [ebp+arg_0] push dword ptr [eax+24h] call UlRelease@4 loc_7F8089D9: ; CODE XREF: sub_7F808949+72j lea eax, [ebp+arg_0] xor esi, esi push eax call sub_7F80A72A cmp dword_7F83529C, esi jz short loc_7F8089FD mov eax, dword_7F83529C push eax call FreeProws@4 mov dword_7F83529C, esi loc_7F8089FD: ; CODE XREF: sub_7F808949+8j ; sub_7F808949+A1j pop esi pop ebp retn 4 sub_7F808949 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F808A02 proc near ; CODE XREF: sub_7F80577A+38p var_28 = dword ptr -28h var_24 = dword ptr -24h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801238 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 18h push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_1C], esi mov [ebp+ms_exc.registration.TryLevel], esi mov [ebp+var_28], esi mov [ebp+var_24], esi lea eax, [ebp+var_28] push eax call MAPIInitialize@4 cmp eax, esi jl short loc_7F808A4A mov [ebp+var_1C], 1 loc_7F808A4A: ; CODE XREF: sub_7F808A02+3Fj mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F808A5C loc_7F808A56: ; DATA XREF: .text:stru_7F801238o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F808A02 mov eax, [ebp+var_1C] loc_7F808A5C: ; DATA XREF: sub_7F808A02+4Fo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn sub_7F808A02 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808A6D(HWND hWnd) sub_7F808A6D proc near ; CODE XREF: sub_7F805851+2E0p var_3C = dword ptr -3Ch var_38 = dword ptr -38h uID = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h ms_exc = CPPEH_RECORD ptr -18h hWnd = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801248 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 2Ch push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_24], esi mov [ebp+var_28], esi mov [ebp+var_30], esi mov [ebp+uID], 1509h mov [ebp+ms_exc.registration.TryLevel], esi lea eax, [ebp+var_24] push eax push esi call MAPIAdminProfiles@8 cmp eax, esi jl loc_7F808B8A lea eax, [ebp+var_20] push eax push esi push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+10h] cmp eax, esi jl loc_7F808B8A push [ebp+var_20] call sub_7F80970F mov [ebp+var_38], eax cmp eax, esi jz loc_7F808B8A push esi push offset unk_7F8352C8 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+1Ch] cmp eax, esi jl loc_7F808B8A lea eax, [ebp+var_28] push eax push esi push [ebp+var_38] push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+4Ch] cmp eax, esi jl short loc_7F808B8A mov eax, [ebp+var_28] mov edx, [eax] cmp edx, esi jz short loc_7F808B8A mov [ebp+uID], 150Ah mov [ebp+var_2C], esi cmp esi, edx jnb short loc_7F808B8A mov eax, esi imul eax, 0Ch mov ecx, [ebp+var_28] lea eax, [eax+ecx+0Ch] mov esi, [ebp+var_3C] loc_7F808B3B: ; CODE XREF: sub_7F808A6D+E3j mov esi, [eax] mov [ebp+var_3C], esi cmp word ptr [esi+8], 1 jz short loc_7F808B54 add eax, 0Ch inc [ebp+var_2C] cmp [ebp+var_2C], edx jb short loc_7F808B3B jmp short loc_7F808B8A ; --------------------------------------------------------------------------- loc_7F808B54: ; CODE XREF: sub_7F808A6D+D8j mov eax, dword_7F835290 add eax, 20h push eax push 0 push dword ptr [esi+18h] ; lpString call ds:lstrlenA push eax call sub_7F80A757 test eax, eax jz short loc_7F808B8A push dword ptr [esi+18h] ; lpString2 mov eax, dword_7F835290 push dword ptr [eax+20h] ; lpString1 call ds:lstrcpyA mov [ebp+var_30], 1 loc_7F808B8A: ; CODE XREF: sub_7F808A6D+47j ; sub_7F808A6D+5Fj ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F808BCF loc_7F808B96: ; DATA XREF: .text:stru_7F801248o push [ebp+var_28] ; Finally handler 0 for function 7F808A6D call FreeProws@4 push [ebp+var_20] call UlRelease@4 push [ebp+var_24] call UlRelease@4 cmp [ebp+var_30], 0 jnz short loc_7F808BC9 push 2010h ; uType push offset byte_7F833F30 ; lpCaption push [ebp+uID] ; uID push [ebp+hWnd] ; hWnd call sub_7F808359 loc_7F808BC9: ; CODE XREF: sub_7F808A6D+145j mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_30] loc_7F808BCF: ; DATA XREF: sub_7F808A6D+124o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F808A6D endp ; =============== S U B R O U T I N E ======================================= sub_7F808BE2 proc near ; CODE XREF: sub_7F805851+306p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push esi push edi lea esi, [eax+24h] push esi xor edi, edi push 8021h push edi push dword ptr [eax+20h] push [esp+18h+arg_0] call MAPILogonEx@20 test eax, eax mov eax, 1 jz short loc_7F808C0D xor eax, eax mov [esi], edi loc_7F808C0D: ; CODE XREF: sub_7F808BE2+25j pop edi pop esi retn 8 sub_7F808BE2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808C12(HWND hDlg) sub_7F808C12 proc near ; CODE XREF: sub_7F805851+10Cp var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h lParam = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h hDlg = dword ptr 8 mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801258 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 44h mov eax, dword_7F835290 push ebx push esi push edi xor esi, esi mov edi, [eax+24h] mov [ebp+ms_exc.old_esp], esp mov [ebp+var_34], esi mov [ebp+lParam], esi mov [ebp+ms_exc.registration.TryLevel], esi add eax, 28h cmp [eax], esi jnz short loc_7F808C6D push eax push esi push edi mov eax, [edi] call dword ptr [eax+10h] cmp eax, esi jge short loc_7F808C6D push eax ; int push edi ; int push [ebp+hDlg] ; hWnd call sub_7F808F95 jmp loc_7F808EE6 ; --------------------------------------------------------------------------- loc_7F808C6D: ; CODE XREF: sub_7F808C12+3Ej ; sub_7F808C12+4Aj mov eax, dword_7F835290 mov esi, [eax+28h] push esi call sub_7F80970F mov edi, eax test edi, edi jz loc_7F808EE6 push 0 push offset unk_7F8352A8 push esi mov eax, [esi] call dword ptr [eax+1Ch] test eax, eax jge short loc_7F808CA5 push eax ; int push esi ; int push [ebp+hDlg] ; hWnd call sub_7F808F95 jmp loc_7F808EE6 ; --------------------------------------------------------------------------- loc_7F808CA5: ; CODE XREF: sub_7F808C12+82j xor ebx, ebx cmp dword_7F83529C, ebx jz short loc_7F808CC0 mov eax, dword_7F83529C push eax call FreeProws@4 mov dword_7F83529C, ebx loc_7F808CC0: ; CODE XREF: sub_7F808C12+9Bj push offset dword_7F83529C push 0 push edi push esi mov eax, [esi] call dword ptr [eax+4Ch] test eax, eax jge short loc_7F808CE1 push eax ; int push esi ; int push [ebp+hDlg] ; hWnd call sub_7F808F95 jmp loc_7F808EE6 ; --------------------------------------------------------------------------- loc_7F808CE1: ; CODE XREF: sub_7F808C12+BEj mov eax, dword_7F83529C xor esi, esi cmp [eax], esi jz loc_7F808EE6 push esi ; lParam push esi ; wParam push 14Bh ; Msg push 269h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA mov [ebp+var_24], esi mov [ebp+var_3C], esi mov eax, dword_7F83529C cmp [eax], esi jbe loc_7F808EAD mov eax, esi imul eax, 0Ch mov [ebp+var_38], eax mov ebx, [ebp+var_28] loc_7F808D23: ; CODE XREF: sub_7F808C12+295j mov ecx, dword_7F83529C mov eax, [ebp+var_38] lea eax, [ecx+eax+4] add eax, 8 mov [ebp+var_2C], eax mov eax, [eax] mov ebx, eax add ebx, 10h mov [ebp+var_28], ebx jz loc_7F808E93 cmp dword ptr [ebx], 3001001Eh jnz loc_7F808E93 add eax, 30h jz short loc_7F808D69 cmp dword ptr [eax], 30090003h jnz short loc_7F808D69 test byte ptr [eax+8], 40h jnz loc_7F808E96 loc_7F808D69: ; CODE XREF: sub_7F808C12+143j ; sub_7F808C12+14Bj mov eax, dword_7F835290 mov eax, [eax+34h] mov [ebp+var_40], eax test eax, eax jnz short loc_7F808D9C mov eax, dword_7F835290 add eax, 34h push eax push 0 push 10h call sub_7F80A757 test eax, eax jz loc_7F808F0B mov eax, dword_7F835290 mov eax, [eax+34h] jmp short loc_7F808DB6 ; --------------------------------------------------------------------------- loc_7F808D9C: ; CODE XREF: sub_7F808C12+164j push [ebp+lParam] push [ebp+var_40] push 10h call sub_7F80A757 test eax, eax jz loc_7F808F37 mov eax, [ebp+lParam] mov eax, [eax] loc_7F808DB6: ; CODE XREF: sub_7F808C12+188j mov [ebp+lParam], eax push dword ptr [ebx+8] ; lParam push 0 ; wParam push 143h ; Msg mov esi, 269h push esi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA push [ebp+lParam] ; lParam movzx eax, ax push eax ; wParam push 151h ; Msg push esi ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA mov eax, [ebp+lParam] add eax, 4 push eax mov eax, dword_7F835290 push dword ptr [eax+34h] push dword ptr [ebx+8] ; lpString call ds:lstrlenA push eax call sub_7F80A757 test eax, eax jz short loc_7F808E19 push dword ptr [ebx+8] ; lpString2 mov eax, [ebp+lParam] push dword ptr [eax+4] ; lpString1 call ds:lstrcpyA loc_7F808E19: ; CODE XREF: sub_7F808C12+1F6j mov eax, [ebp+var_2C] mov ebx, [eax] mov [ebp+var_28], ebx test ebx, ebx jz short loc_7F808E6F cmp dword ptr [ebx], 0FFF0102h jnz short loc_7F808E6F mov eax, [ebp+lParam] add eax, 0Ch push eax mov eax, dword_7F835290 push dword ptr [eax+34h] push dword ptr [ebx+8] call sub_7F80A757 test eax, eax jz loc_7F808F21 mov edx, [ebx+8] mov eax, [ebp+lParam] mov edi, [eax+0Ch] mov esi, [ebx+0Ch] mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb mov ecx, [ebx+8] mov eax, [ebp+lParam] mov [eax+8], ecx loc_7F808E6F: ; CODE XREF: sub_7F808C12+211j ; sub_7F808C12+219j mov eax, [ebp+var_2C] mov ebx, [eax] add ebx, 20h mov [ebp+var_28], ebx jz short loc_7F808E93 cmp dword ptr [ebx], 3400000Bh jnz short loc_7F808E93 cmp word ptr [ebx+8], 1 jnz short loc_7F808E93 mov eax, [ebp+var_3C] mov dword_7F8352D4, eax loc_7F808E93: ; CODE XREF: sub_7F808C12+12Ej ; sub_7F808C12+13Aj ... inc [ebp+var_3C] loc_7F808E96: ; CODE XREF: sub_7F808C12+151j add [ebp+var_38], 0Ch inc [ebp+var_24] mov eax, dword_7F83529C mov ecx, [ebp+var_24] cmp [eax], ecx ja loc_7F808D23 loc_7F808EAD: ; CODE XREF: sub_7F808C12+100j mov eax, dword_7F835290 add eax, 18h cmp dword ptr [eax], 0FFFFFFFFh jnz short loc_7F808EC2 mov ecx, dword_7F8352D4 mov [eax], ecx loc_7F808EC2: ; CODE XREF: sub_7F808C12+2A6j push 0 ; lParam mov eax, dword_7F835290 push dword ptr [eax+18h] ; wParam push 14Eh ; Msg push 269h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA mov [ebp+var_34], 1 loc_7F808EE6: ; CODE XREF: sub_7F808C12+56j ; sub_7F808C12+6Dj ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F808EF8 loc_7F808EF2: ; DATA XREF: .text:stru_7F801258o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F808C12 mov eax, [ebp+var_34] loc_7F808EF8: ; DATA XREF: sub_7F808C12+2DBo mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 4 ; --------------------------------------------------------------------------- loc_7F808F0B: ; CODE XREF: sub_7F808C12+17Aj push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1007h ; uID push [ebp+hDlg] ; hWnd call sub_7F808359 jmp short loc_7F808EE6 ; --------------------------------------------------------------------------- loc_7F808F21: ; CODE XREF: sub_7F808C12+234j push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1007h ; uID push [ebp+hDlg] ; hWnd call sub_7F808359 jmp short loc_7F808EE6 ; --------------------------------------------------------------------------- loc_7F808F37: ; CODE XREF: sub_7F808C12+199j push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1007h ; uID push [ebp+hDlg] ; hWnd call sub_7F808359 jmp short loc_7F808EE6 sub_7F808C12 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808F4D(HWND hWnd, int, int) sub_7F808F4D proc near ; CODE XREF: sub_7F806861+3EFp var_4 = dword ptr -4 hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, dword_7F835290 mov ebp, esp sub esp, 4 push esi push edi mov esi, [eax+24h] xor edi, edi lea eax, [ebp+var_4] mov [ebp+var_4], edi push eax push 4 push edi mov eax, [esi] push [ebp+arg_8] push [ebp+arg_4] push [ebp+hWnd] push esi call dword ptr [eax+14h] test eax, eax jge short loc_7F808F8A push eax ; int push esi ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 xor eax, eax jmp short loc_7F808F8D ; --------------------------------------------------------------------------- loc_7F808F8A: ; CODE XREF: sub_7F808F4D+2Dj mov eax, [ebp+var_4] loc_7F808F8D: ; CODE XREF: sub_7F808F4D+3Bj pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F808F4D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F808F95(HWND hWnd, int, int) sub_7F808F95 proc near ; CODE XREF: sub_7F808C12+51p ; sub_7F808C12+89p ... Text = byte ptr -488h Buffer = byte ptr -88h var_8 = dword ptr -8 lpBuffer = dword ptr -4 hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 488h push ebx push esi push edi xor ebx, ebx xor edi, edi lea eax, [ebp+var_8] push eax mov [ebp+lpBuffer], ebx push ebx mov eax, [ebp+arg_4] mov esi, [eax] mov [ebp+var_8], ebx push [ebp+arg_8] push eax call dword ptr [esi+0Ch] mov esi, eax cmp [ebp+var_8], ebx jz short loc_7F808FE0 mov eax, [ebp+var_8] mov ecx, [eax+4] mov [ebp+lpBuffer], ecx cmp ecx, ebx mov edi, [eax+8] jz short loc_7F808FE0 cmp [ecx], bl jnz short loc_7F808FE0 push ecx call MAPIFreeBuffer@4 mov [ebp+lpBuffer], ebx loc_7F808FE0: ; CODE XREF: sub_7F808F95+2Cj ; sub_7F808F95+3Cj ... cmp [ebp+lpBuffer], 0 jnz short loc_7F809040 lea eax, [ebp+lpBuffer] push eax push 100h call MAPIAllocateBuffer@8 test eax, eax jnz short loc_7F809040 cmp [ebp+arg_8], 80040111h jz short loc_7F809025 cmp [ebp+arg_8], 8004011Ch jz short loc_7F809025 push [ebp+arg_8] push offset aMapiError08lx ; "MAPI Error: %08lX" push [ebp+lpBuffer] ; LPSTR call ds:wsprintfA add esp, 0Ch mov ebx, 1 jmp short loc_7F809040 ; --------------------------------------------------------------------------- loc_7F809025: ; CODE XREF: sub_7F808F95+6Aj ; sub_7F808F95+73j push 100h ; cchBufferMax xor edi, edi push [ebp+lpBuffer] ; lpBuffer push 152Ch ; uID push hInstance ; hInstance call ds:LoadStringA loc_7F809040: ; CODE XREF: sub_7F808F95+4Fj ; sub_7F808F95+61j ... push [ebp+lpBuffer] push offset aS ; "%s\r\n" lea ecx, [ebp+Text] push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch test edi, edi jz short loc_7F809097 push 80h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1531h ; uID push hInstance ; hInstance call ds:LoadStringA push edi lea ecx, [ebp+Buffer] push ecx lea eax, [ebp+Text] push eax push offset aSSS ; "%s%s: %s\r\n" push eax ; LPSTR call ds:wsprintfA add esp, 14h loc_7F809097: ; CODE XREF: sub_7F808F95+C5j push 30h ; uType lea eax, [ebp+Text] push offset byte_7F833F30 ; lpCaption push eax ; lpText push [ebp+hWnd] ; hWnd call ds:MessageBoxA test ebx, ebx jz short loc_7F8090BA push [ebp+lpBuffer] call MAPIFreeBuffer@4 loc_7F8090BA: ; CODE XREF: sub_7F808F95+11Bj cmp [ebp+var_8], 0 jz short loc_7F8090C8 push [ebp+var_8] call MAPIFreeBuffer@4 loc_7F8090C8: ; CODE XREF: sub_7F808F95+129j pop edi cmp esi, 1 sbb eax, eax pop esi pop ebx mov esp, ebp neg eax pop ebp retn 0Ch sub_7F808F95 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8090D8 proc near ; DATA XREF: sub_7F8091A3+159o ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 arg_8 = dword ptr 10h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801268 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 10h push ebx push esi push edi xor esi, esi xor ebx, ebx mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], ebx mov ecx, [ebp+arg_8] cmp dword ptr [ecx], 100h jnz short loc_7F809159 cmp dword ptr [ecx+8], 3 jnz short loc_7F809159 mov edi, [ebp+arg_0] push dword ptr [edi] push dword ptr [ecx+34h] push dword ptr [ecx+38h] call PpropFindProp@12 mov ebx, eax test ebx, ebx jz short loc_7F809159 lea esi, [edi+8] lea edi, [esi+4] push edi push 0 push dword ptr [ebx+8] call sub_7F80A757 test eax, eax jz short loc_7F809159 mov eax, [ebx+8] mov [esi], eax mov edi, [edi] mov esi, [ebx+0Ch] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb loc_7F809159: ; CODE XREF: sub_7F8090D8+36j ; sub_7F8090D8+3Cj ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F80916A loc_7F809165: ; DATA XREF: .text:stru_7F801268o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F8090D8 xor eax, eax loc_7F80916A: ; DATA XREF: sub_7F8090D8+88o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8090D8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80917D proc near ; CODE XREF: sub_7F8091A3+1E4p ; sub_7F8091A3+4E7p var_8 = byte ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 8 lea eax, [ebp+var_4] lea ecx, [ebp+var_8] push eax push ecx mov eax, [ebp+arg_0] push eax mov eax, [eax] call dword ptr [eax+40h] lea ecx, [ebp+var_4] push ecx call sub_7F80A775 mov esp, ebp pop ebp retn 4 sub_7F80917D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8091A3(HWND hWnd, int) sub_7F8091A3 proc near ; CODE XREF: sub_7F807D9C+294p var_D0 = dword ptr -0D0h var_C8 = dword ptr -0C8h Msg = tagMSG ptr -0A0h var_84 = dword ptr -84h var_7C = dword ptr -7Ch var_78 = dword ptr -78h var_74 = dword ptr -74h var_70 = dword ptr -70h var_68 = dword ptr -68h var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h ms_exc = CPPEH_RECORD ptr -18h hWnd = dword ptr 8 arg_4 = dword ptr 0Ch mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801278 push offset sub_7F82FBD0 push eax mov eax, [ebp+arg_4] mov large fs:0, esp mov ecx, [eax+24h] sub esp, 0C0h mov [ebp+var_28], ecx push ebx push esi push edi xor esi, esi mov [ebp+ms_exc.old_esp], esp mov [ebp+var_24], esi mov [ebp+var_20], esi mov [ebp+var_34], esi mov [ebp+var_2C], esi mov [ebp+var_50], esi mov [ebp+var_54], esi mov [ebp+var_30], esi mov [ebp+var_3C], esi mov [ebp+var_38], esi mov [ebp+var_40], esi mov [ebp+ms_exc.registration.TryLevel], esi mov [ebp+var_78], esi lea eax, [ebp+var_24] push eax push esi push ecx mov eax, [ecx] call dword ptr [eax+4Ch] cmp eax, esi jge short loc_7F80921B push eax ; int push [ebp+var_28] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F80921B: ; CODE XREF: sub_7F8091A3+65j lea eax, [ebp+var_20] push eax push 0 push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+10h] test eax, eax jge short loc_7F809241 push eax ; int push [ebp+var_24] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809241: ; CODE XREF: sub_7F8091A3+8Bj push 0 push offset unk_7F8352C0 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+1Ch] test eax, eax jge short loc_7F809268 push eax ; int push [ebp+var_20] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809268: ; CODE XREF: sub_7F8091A3+B2j push [ebp+var_20] call sub_7F80970F mov [ebp+var_30], eax xor esi, esi cmp eax, esi jz short loc_7F8092A1 lea eax, [ebp+var_38] push eax push esi push [ebp+var_30] push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+4Ch] cmp eax, esi jge short loc_7F8092A1 push eax ; int push [ebp+var_20] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F8092A1: ; CODE XREF: sub_7F8091A3+D4j ; sub_7F8091A3+EBj push [ebp+var_20] call UlRelease@4 xor esi, esi mov [ebp+var_20], esi mov edi, [ebp+arg_4] add edi, 28h cmp [edi], esi jnz short loc_7F8092DA push edi push esi push [ebp+var_28] mov eax, [ebp+var_28] mov eax, [eax] call dword ptr [eax+10h] cmp eax, esi jge short loc_7F8092DA push eax ; int push [ebp+var_28] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F8092DA: ; CODE XREF: sub_7F8091A3+113j ; sub_7F8091A3+124j mov eax, [edi] mov [ebp+var_34], eax mov [ebp+var_84], 0FFF0102h xor esi, esi mov [ebp+var_7C], esi mov [ebp+var_78], esi lea eax, [ebp+var_68] push eax lea eax, [ebp+var_84] push eax push offset sub_7F8090D8 call HrAllocAdviseSink@12 cmp eax, esi jge short loc_7F809323 push 30h ; uType push offset byte_7F833F30 ; lpCaption push 1007h ; uID push [ebp+hWnd] ; hWnd call sub_7F808359 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809323: ; CODE XREF: sub_7F8091A3+165j lea eax, [ebp+var_5C] push eax push [ebp+var_68] push 100h push [ebp+var_34] mov eax, [ebp+var_34] mov eax, [eax] call dword ptr [eax+10h] test eax, eax jge short loc_7F80934F push eax ; int push [ebp+var_34] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F80934F: ; CODE XREF: sub_7F8091A3+199j mov [ebp+var_54], 1 xor esi, esi push esi push esi push offset aMmfMigrationTa ; "MMF MIGRATION Target Store" push offset aMspstMs ; "MSPST MS" push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+14h] cmp eax, esi jge short loc_7F809384 push eax ; int push [ebp+var_24] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809384: ; CODE XREF: sub_7F8091A3+1CEj push [ebp+var_28] call sub_7F80917D mov esi, ds:GetTickCount call esi ; GetTickCount mov edi, eax call esi ; GetTickCount sub eax, edi cmp eax, 2710h jnb short loc_7F809409 loc_7F8093A1: ; CODE XREF: sub_7F8091A3+264j xor eax, eax cmp [ebp+var_7C], eax jnz short loc_7F809409 push eax ; wRemoveMsg push eax ; wMsgFilterMax push eax ; wMsgFilterMin push eax ; hWnd lea eax, [ebp+Msg] push eax ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F8093FE loc_7F8093BD: ; CODE XREF: sub_7F8091A3+259j xor ebx, ebx push ebx ; wMsgFilterMax push ebx ; wMsgFilterMin push ebx ; hWnd lea eax, [ebp+Msg] push eax ; lpMsg call ds:GetMessageA lea eax, [ebp+Msg] push eax ; lpMsg call ds:TranslateMessage lea eax, [ebp+Msg] push eax ; lpMsg call ds:DispatchMessageA push ebx ; wRemoveMsg push ebx ; wMsgFilterMax push ebx ; wMsgFilterMin push ebx ; hWnd lea eax, [ebp+Msg] push eax ; lpMsg call ds:PeekMessageA test eax, eax jnz short loc_7F8093BD loc_7F8093FE: ; CODE XREF: sub_7F8091A3+218j call esi ; GetTickCount sub eax, edi cmp eax, 2710h jb short loc_7F8093A1 loc_7F809409: ; CODE XREF: sub_7F8091A3+1FCj ; sub_7F8091A3+203j xor esi, esi cmp [ebp+var_7C], esi jz loc_7F8095E9 lea eax, [ebp+var_20] push eax push esi push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+10h] cmp eax, esi jge short loc_7F809439 push eax ; int push [ebp+var_24] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809439: ; CODE XREF: sub_7F8091A3+283j push 0 push offset unk_7F8352C0 push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+1Ch] test eax, eax jge short loc_7F809460 push eax ; int push [ebp+var_20] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809460: ; CODE XREF: sub_7F8091A3+2AAj push [ebp+var_20] call sub_7F80970F mov [ebp+var_30], eax lea eax, [ebp+var_3C] push eax push 0 push [ebp+var_30] push [ebp+var_20] mov eax, [ebp+var_20] mov eax, [eax] call dword ptr [eax+4Ch] test eax, eax jge short loc_7F809494 push eax ; int push [ebp+var_20] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809494: ; CODE XREF: sub_7F8091A3+2DEj mov eax, [ebp+var_3C] mov ecx, [eax] test ecx, ecx jz loc_7F8095E9 cmp [ebp+var_38], 0 jnz loc_7F809534 mov eax, [eax+0Ch] add eax, 8 mov [ebp+var_2C], eax loc_7F8094B4: ; CODE XREF: sub_7F8091A3+434j xor esi, esi mov [ebp+var_48], esi mov ecx, esi shl ecx, 4 mov [ebp+ecx+var_D0], 6700001Eh mov eax, [ebp+arg_4] mov eax, [eax+30h] mov [ebp+ecx+var_C8], eax inc [ebp+var_48] mov edi, [ebp+hWnd] lea eax, [ebp+var_D0] push eax push [ebp+var_48] push 2 push edi mov eax, [ebp+var_2C] push dword ptr [eax+4] push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+24h] cmp eax, esi jl loc_7F8095E9 lea eax, [ebp+var_50] push eax push 4 push esi push [ebp+var_78] push [ebp+var_7C] push edi push [ebp+var_28] mov eax, [ebp+var_28] mov eax, [eax] call dword ptr [eax+14h] cmp eax, esi jge loc_7F8095E2 push eax ; int push [ebp+var_28] ; int push [ebp+hWnd] ; hWnd call sub_7F808F95 jmp loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F809534: ; CODE XREF: sub_7F8091A3+302j mov [ebp+var_44], 0 lea eax, [ecx-1] mov [ebp+var_30], eax imul eax, 0Ch mov edx, [ebp+var_70] mov ebx, [ebp+var_74] loc_7F80954A: ; CODE XREF: sub_7F8091A3+429j mov ecx, [ebp+var_38] mov ecx, [ecx] dec ecx mov [ebp+var_4C], ecx mov ecx, [ebp+var_3C] mov ecx, [ecx+eax+0Ch] add ecx, 8 mov [ebp+var_2C], ecx mov ecx, [ebp+var_4C] imul ecx, 0Ch mov [ebp+var_58], ecx loc_7F809569: ; CODE XREF: sub_7F8091A3+416j mov esi, [ebp+var_38] mov ecx, [ebp+var_58] mov ebx, [esi+ecx+0Ch] mov ecx, [ebp+var_2C] mov edx, [ecx] cmp [ebx+8], edx jnz short loc_7F8095A0 mov esi, ecx mov ecx, edx shr ecx, 2 mov esi, [esi+4] mov edi, [ebx+0Ch] repe cmpsd jnz short loc_7F8095A0 mov ecx, edx and ecx, 3 repe cmpsb jnz short loc_7F8095A0 mov [ebp+var_44], 1 jmp short loc_7F8095A7 ; --------------------------------------------------------------------------- loc_7F8095A0: ; CODE XREF: sub_7F8091A3+3D8j ; sub_7F8091A3+3E9j ... mov [ebp+var_44], 0 loc_7F8095A7: ; CODE XREF: sub_7F8091A3+3FBj mov ecx, [ebp+var_4C] sub [ebp+var_58], 0Ch dec [ebp+var_4C] test ecx, ecx jz short loc_7F8095BB cmp [ebp+var_44], 0 jz short loc_7F809569 loc_7F8095BB: ; CODE XREF: sub_7F8091A3+410j mov ecx, [ebp+var_30] sub eax, 0Ch dec [ebp+var_30] test ecx, ecx jz short loc_7F8095D2 cmp [ebp+var_44], 0 jnz loc_7F80954A loc_7F8095D2: ; CODE XREF: sub_7F8091A3+423j xor eax, eax cmp [ebp+var_44], eax jz loc_7F8094B4 mov [ebp+var_2C], eax jmp short loc_7F8095E9 ; --------------------------------------------------------------------------- loc_7F8095E2: ; CODE XREF: sub_7F8091A3+37Aj mov [ebp+var_40], 1 loc_7F8095E9: ; CODE XREF: sub_7F8091A3+73j ; sub_7F8091A3+99j ... mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F809695 loc_7F8095F5: ; DATA XREF: .text:stru_7F801278o xor edi, edi ; Finally handler 0 for function 7F8091A3 cmp [ebp+var_40], edi jz short loc_7F80962D mov esi, [ebp+arg_4] add esi, 1Ch push esi push edi mov eax, [ebp+var_2C] push dword ptr [eax] call sub_7F80A757 mov [ebp+var_40], eax cmp eax, edi jz short loc_7F80962D mov eax, [ebp+var_2C] mov edx, [eax] mov edi, [esi] mov esi, [eax+4] mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb loc_7F80962D: ; CODE XREF: sub_7F8091A3+457j ; sub_7F8091A3+470j cmp [ebp+var_40], 0 jnz short loc_7F80964A cmp [ebp+var_2C], 0 jz short loc_7F80964A mov eax, [ebp+var_2C] push dword ptr [eax+4] push [ebp+var_24] mov eax, [ebp+var_24] mov eax, [eax] call dword ptr [eax+18h] loc_7F80964A: ; CODE XREF: sub_7F8091A3+48Ej ; sub_7F8091A3+494j lea eax, [ebp+var_78] push eax call sub_7F80A72A cmp [ebp+var_54], 0 jz short loc_7F809667 push [ebp+var_5C] push [ebp+var_34] mov eax, [ebp+var_34] mov eax, [eax] call dword ptr [eax+14h] loc_7F809667: ; CODE XREF: sub_7F8091A3+4B4j push [ebp+var_3C] call FreeProws@4 push [ebp+var_38] call FreeProws@4 push [ebp+var_20] call UlRelease@4 push [ebp+var_24] call UlRelease@4 push [ebp+var_28] call sub_7F80917D mov esp, [ebp+ms_exc.old_esp] mov eax, [ebp+var_50] loc_7F809695: ; DATA XREF: sub_7F8091A3+44Do mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8091A3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8096A8 proc near ; CODE XREF: sub_7F807D9C+2F8p var_4 = dword ptr -4 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx mov eax, [ebp+arg_4] push esi xor ebx, ebx push edi lea esi, [eax+1Ch] xor edi, edi mov [ebp+var_4], ebx cmp [esi], ebx jz short loc_7F8096F0 mov eax, [eax+24h] lea ecx, [ebp+var_4] push ecx push ebx push eax mov edi, [eax] call dword ptr [edi+4Ch] mov edi, eax test edi, edi jl short loc_7F8096F0 mov eax, [esi] test eax, eax jz short loc_7F8096F0 push eax mov ecx, [ebp+var_4] mov eax, [ecx] push [ebp+var_4] call dword ptr [eax+18h] mov edi, eax test edi, edi jl short loc_7F8096F0 mov [esi], ebx loc_7F8096F0: ; CODE XREF: sub_7F8096A8+18j ; sub_7F8096A8+2Cj ... push [ebp+var_4] call UlRelease@4 mov eax, 0 test edi, edi jl short loc_7F809706 mov eax, 1 loc_7F809706: ; CODE XREF: sub_7F8096A8+57j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8096A8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80970F proc near ; CODE XREF: sub_7F808A6D+68p ; sub_7F808C12+64p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 4 push esi lea eax, [ebp+var_4] push edi xor esi, esi push eax mov edi, [ebp+arg_0] push esi mov [ebp+var_4], esi push edi mov eax, [edi] call dword ptr [eax+24h] test eax, eax jge short loc_7F80974D push esi mov eax, [edi] push esi push esi push edi call dword ptr [eax+28h] lea eax, [ebp+var_4] push eax push esi push 2 mov eax, [edi] push edi call dword ptr [eax+28h] push esi mov eax, [edi] push esi push esi push edi call dword ptr [eax+28h] loc_7F80974D: ; CODE XREF: sub_7F80970F+1Dj mov eax, [ebp+var_4] pop edi pop esi mov esp, ebp pop ebp retn 4 sub_7F80970F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F809758(HWND hWnd, int) sub_7F809758 proc near ; CODE XREF: sub_7F805851+2CBp ; DialogFunc+BBp Rect = tagRECT ptr -10h hWnd = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx lea eax, [ebp+Rect] push esi push edi push eax ; lpRect xor edi, edi push [ebp+hWnd] ; hWnd call ds:GetWindowRect mov esi, [ebp+Rect.right] mov ebx, [ebp+Rect.bottom] sub esi, [ebp+Rect.left] sub ebx, [ebp+Rect.top] push edi ; nIndex call ds:GetSystemMetrics sub eax, esi push 1 ; nIndex cdq sub eax, edx sar eax, 1 mov esi, eax call ds:GetSystemMetrics sub eax, ebx mov ecx, [ebp+arg_4] cdq sub eax, edx or cl, 4 sar eax, 1 push ecx ; uFlags push edi ; cy push edi ; cx push eax ; Y push esi ; X push edi ; hWndInsertAfter push [ebp+hWnd] ; hWnd call ds:SetWindowPos pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F809758 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F8097B9(HWND hWnd) sub_7F8097B9 proc near ; CODE XREF: sub_7F805851+74p Paint = tagPAINTSTRUCT ptr -40h hWnd = dword ptr 4 sub esp, 40h lea eax, [esp+40h+Paint] push esi push edi push eax ; lpPaint mov edi, [esp+4Ch+hWnd] push edi ; hWnd call ds:BeginPaint mov esi, eax test esi, esi jz short loc_7F8097F7 cmp dword_7F835298, 0 jz short loc_7F8097E4 push esi ; hdc push edi ; hDlg call sub_7F8097FF loc_7F8097E4: ; CODE XREF: sub_7F8097B9+22j push esi ; hDC push edi ; int call sub_7F80A689 lea eax, [esp+48h+Paint] push eax ; lpPaint push edi ; hWnd call ds:EndPaint loc_7F8097F7: ; CODE XREF: sub_7F8097B9+19j pop edi pop esi add esp, 40h retn 4 sub_7F8097B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8097FF(HWND hDlg, HDC hdc) sub_7F8097FF proc near ; CODE XREF: sub_7F8097B9+26p Rect = tagRECT ptr -34h var_24 = tagRECT ptr -24h var_14 = dword ptr -14h Point = tagPOINT ptr -10h h = dword ptr -8 ho = dword ptr -4 hDlg = dword ptr 8 hdc = dword ptr 0Ch push ebp mov ebp, esp sub esp, 34h push ebx push esi push edi call ds:GetDialogBaseUnits call ds:GetDialogBaseUnits shr eax, 10h push 385h ; nIDDlgItem movzx esi, ax mov edi, [ebp+hDlg] push edi ; hDlg call ds:GetDlgItem test eax, eax jnz short loc_7F809841 push 339h ; nIDDlgItem push edi ; hDlg call ds:GetDlgItem test eax, eax jz loc_7F809933 loc_7F809841: ; CODE XREF: sub_7F8097FF+2Cj lea ecx, [ebp+Rect] push ecx ; lpRect push eax ; hWnd call ds:GetWindowRect mov ecx, [ebp+Rect.left] mov edx, [ebp+Rect.top] mov [ebp+Point.x], ecx mov [ebp+Point.y], edx lea ecx, [ebp+Point] push ecx ; lpPoint push edi ; hWnd call ds:ScreenToClient lea ecx, [ebp+var_24] push ecx ; lpRect push edi ; hWnd call ds:GetClientRect mov edi, [ebp+Point.y] lea eax, ds:0[esi*8] cdq and edx, 7 push 14h ; nIndex add eax, edx sar eax, 3 sub di, ax call ds:GetSysColor sub di, 5 push eax ; color push 1 ; cWidth push 0 ; iStyle call ds:CreatePen push 10h ; nIndex mov [ebp+h], eax call ds:GetSysColor push eax ; color push 1 ; cWidth push 0 ; iStyle call ds:CreatePen movsx edi, di push eax ; h mov esi, [ebp+hdc] push esi ; hdc mov [ebp+ho], eax call ds:SelectObject push 0 ; lppt mov [ebp+var_14], eax push edi ; y push 4 ; x push esi ; hdc call ds:MoveToEx push edi ; y mov eax, [ebp+var_24.right] sub eax, 4 lea ebx, [edi+1] push eax ; x push esi ; hdc call ds:LineTo push [ebp+h] ; h push esi ; hdc call ds:SelectObject push 0 ; lppt push ebx ; y push 4 ; x push esi ; hdc call ds:MoveToEx push ebx ; y mov eax, [ebp+var_24.right] sub eax, 4 push eax ; x push esi ; hdc call ds:LineTo push edi ; y mov eax, [ebp+var_24.right] sub eax, 4 push eax ; x push esi ; hdc call ds:LineTo push [ebp+var_14] ; h push esi ; hdc call ds:SelectObject push [ebp+h] ; ho call ds:DeleteObject push [ebp+ho] ; ho call ds:DeleteObject loc_7F809933: ; CODE XREF: sub_7F8097FF+3Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8097FF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80993C(HWND hDlg, int nIDDlgItem, int) sub_7F80993C proc near ; CODE XREF: sub_7F806352+10Ap ; sub_7F806861+49Fp hDlg = dword ptr 8 nIDDlgItem = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push edi push 0 ; lParam push 0 ; wParam push 0C1h ; Msg push [ebp+nIDDlgItem] ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SendDlgItemMessageA lea ebx, [eax+0Ch] mov edi, [ebp+arg_8] push edi push 0 push ebx call sub_7F80A757 test eax, eax mov eax, 0 jz short loc_7F809985 movzx eax, bx push eax ; cchMax push dword ptr [edi] ; lpString push [ebp+nIDDlgItem] ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItemTextA mov eax, 1 loc_7F809985: ; CODE XREF: sub_7F80993C+30j pop edi pop ebx pop ebp retn 0Ch sub_7F80993C endp ; =============== S U B R O U T I N E ======================================= sub_7F80998B proc near ; CODE XREF: sub_7F806352+1CAp ; sub_7F809A3F+316p arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, 12h ja short loc_7F8099AF jz short loc_7F8099CA test eax, eax jz short loc_7F8099C5 cmp eax, 2 jz short loc_7F8099CA cmp eax, 3 jz short loc_7F8099D0 cmp eax, 5 jz short loc_7F8099D6 loc_7F8099A9: ; CODE XREF: sub_7F80998B+2Aj ; sub_7F80998B+33j ; DATA XREF: ... mov ax, 151Eh ; jumptable 7F8099BE default case jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099AF: ; CODE XREF: sub_7F80998B+7j sub eax, 20h ; switch 36 cases cmp eax, 23h ja short loc_7F8099A9 ; jumptable 7F8099BE default case movzx ecx, ds:byte_7F809A1B[eax] jmp ds:off_7F8099FB[ecx*4] ; switch jump ; --------------------------------------------------------------------------- loc_7F8099C5: ; CODE XREF: sub_7F80998B+Dj xor ax, ax jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099CA: ; CODE XREF: sub_7F80998B+9j ; sub_7F80998B+12j mov ax, 1517h jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099D0: ; CODE XREF: sub_7F80998B+17j mov ax, 151Fh jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099D6: ; CODE XREF: sub_7F80998B+1Cj mov ax, 1519h jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099DC: ; CODE XREF: sub_7F80998B+33j ; DATA XREF: .text:off_7F8099FBo mov ax, 1518h ; jumptable 7F8099BE case 32 jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099E2: ; CODE XREF: sub_7F80998B+33j ; DATA XREF: .text:off_7F8099FBo mov ax, 1522h ; jumptable 7F8099BE cases 53,55,66,67 jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099E8: ; CODE XREF: sub_7F80998B+33j ; DATA XREF: .text:off_7F8099FBo mov ax, 1521h ; jumptable 7F8099BE case 54 jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099EE: ; CODE XREF: sub_7F80998B+33j ; DATA XREF: .text:off_7F8099FBo mov ax, 1523h ; jumptable 7F8099BE cases 58,59 jmp short locret_7F8099F8 ; --------------------------------------------------------------------------- loc_7F8099F4: ; CODE XREF: sub_7F80998B+33j ; DATA XREF: .text:off_7F8099FBo mov ax, 1520h ; jumptable 7F8099BE case 65 locret_7F8099F8: ; CODE XREF: sub_7F80998B+22j ; sub_7F80998B+3Dj ... retn 4 sub_7F80998B endp ; --------------------------------------------------------------------------- off_7F8099FB dd offset loc_7F8099DC ; DATA XREF: sub_7F80998B+33r dd offset loc_7F8099E2 ; jump table for switch statement dd offset loc_7F8099E8 dd offset loc_7F8099E2 dd offset loc_7F8099EE dd offset loc_7F8099F4 dd offset loc_7F8099E2 dd offset loc_7F8099A9 byte_7F809A1B db 0, 7, 7, 7 ; DATA XREF: sub_7F80998B+2Cr db 7, 7, 7, 7 ; indirect table for switch statement db 7, 7, 7, 7 db 7, 7, 7, 7 db 7, 7, 7, 7 db 7, 1, 2, 3 db 7, 7, 4, 4 db 7, 7, 7, 7 db 7, 5, 6, 6 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F809A3F(HWND hDlg, int, __int16, int) sub_7F809A3F proc near ; DATA XREF: sub_7F805EBF+7Fo var_218 = byte ptr -218h String1 = byte ptr -118h String = byte ptr -114h var_113 = byte ptr -113h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 hDlg = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 218h cmp eax, 4Eh push ebx push esi push edi jz short loc_7F809A5F cmp eax, 111h jnz loc_7F809D42 loc_7F809A5F: ; CODE XREF: sub_7F809A3F+13j cmp [ebp+arg_4], 111h jnz short loc_7F809AAA cmp [ebp+arg_8], 1 jnz loc_7F809D42 mov [ebp+String], 0 lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA test eax, eax jnz short loc_7F809AA5 push 104h ; cchMax lea eax, [ebp+String] push eax ; lpString push 480h ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItemTextA loc_7F809AA5: ; CODE XREF: sub_7F809A3F+4Aj mov eax, [ebp+hDlg] jmp short loc_7F809AE4 ; --------------------------------------------------------------------------- loc_7F809AAA: ; CODE XREF: sub_7F809A3F+27j mov eax, [ebp+arg_C] cmp dword ptr [eax+8], 0FFFFFDA2h jnz loc_7F809D42 lea eax, [ebp+String] push eax ; lParam push 104h ; wParam push 464h ; Msg push [ebp+hDlg] ; hWnd call ds:GetParent push eax ; hWnd call ds:SendMessageA push [ebp+hDlg] ; hWnd call ds:GetParent loc_7F809AE4: ; CODE XREF: sub_7F809A3F+69j mov [ebp+var_8], eax lea eax, [ebp+String] push eax ; lpFileName call ds:GetFileAttributesA cmp eax, 0FFFFFFFFh jz short loc_7F809B01 test al, 10h jnz loc_7F809D42 loc_7F809B01: ; CODE XREF: sub_7F809A3F+B8j lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA cmp eax, 2 jnz short loc_7F809B20 cmp [ebp+var_113], 3Ah jz loc_7F809D42 loc_7F809B20: ; CODE XREF: sub_7F809A3F+D2j xor esi, esi lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA test eax, eax jle short loc_7F809B53 loc_7F809B33: ; CODE XREF: sub_7F809A3F+112j cmp [ebp+esi+String], 2Ah jz loc_7F809D42 inc esi lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA cmp eax, esi jg short loc_7F809B33 loc_7F809B53: ; CODE XREF: sub_7F809A3F+F2j lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA test eax, eax jz loc_7F809D42 xor si, si xor edi, edi mov [ebp+var_C], 0 lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA cmp eax, 4 jle short loc_7F809BBB lea ebx, [ebp+eax+String1] push offset a_mmf ; ".MMF" push ebx ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F809BA4 mov edi, 1 jmp short loc_7F809BBB ; --------------------------------------------------------------------------- loc_7F809BA4: ; CODE XREF: sub_7F809A3F+15Cj push offset a_pab ; ".PAB" push ebx ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F809BBB mov [ebp+var_C], 1 loc_7F809BBB: ; CODE XREF: sub_7F809A3F+145j ; sub_7F809A3F+163j ... test edi, edi jnz short loc_7F809BD3 lea eax, [ebp+String] lea ecx, [ebp+var_218] push eax ; lpString2 push ecx ; lpString1 call ds:lstrcpyA loc_7F809BD3: ; CODE XREF: sub_7F809A3F+17Ej lea eax, [ebp+var_4] lea ecx, [ebp+var_10] push eax ; int lea edx, [ebp+String] push ecx ; int push 0 ; int push edx ; lpString push [ebp+hDlg] ; int call sub_7F805FDE test eax, eax jz short loc_7F809C60 test edi, edi jnz short loc_7F809C40 lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA cmp eax, 4 jle short loc_7F809C40 lea edi, [ebp+eax+String1] push offset a_mmf ; ".MMF" push edi ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F809C40 lea eax, [ebp+var_4] lea ecx, [ebp+var_218] push eax ; int push ecx ; lpString push [ebp+hDlg] ; int call sub_7F8060C1 test eax, eax jz short loc_7F809C40 mov si, 152Eh mov byte ptr [edi], 0 jmp loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809C40: ; CODE XREF: sub_7F809A3F+1B3j ; sub_7F809A3F+1C5j ... mov [ebp+var_4], 0 mov eax, 1 mov dword_7F83535C, eax mov bEnable, eax mov dword_7F83538C, eax jmp loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809C60: ; CODE XREF: sub_7F809A3F+1AFj cmp [ebp+var_10], 81h jnz short loc_7F809CD3 test edi, edi jnz short loc_7F809CB6 lea eax, [ebp+String] push eax ; lpString call ds:lstrlenA cmp eax, 4 jle short loc_7F809CB6 lea edi, [ebp+eax+String1] push offset a_mmf ; ".MMF" push edi ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F809CB6 lea eax, [ebp+var_4] lea ecx, [ebp+var_218] push eax ; int push ecx ; lpString push [ebp+hDlg] ; int call sub_7F8060C1 test eax, eax jz short loc_7F809CB6 mov si, 152Eh mov byte ptr [edi], 0 jmp short loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809CB6: ; CODE XREF: sub_7F809A3F+22Cj ; sub_7F809A3F+23Ej ... mov [ebp+var_4], 0 mov eax, 1 mov dword_7F83535C, eax mov bEnable, eax mov dword_7F83538C, eax jmp short loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809CD3: ; CODE XREF: sub_7F809A3F+228j test edi, edi jz short loc_7F809CE3 cmp [ebp+var_4], 0 jnz short loc_7F809D22 mov si, 151Ah jmp short loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809CE3: ; CODE XREF: sub_7F809A3F+296j lea eax, [ebp+var_4] lea ecx, [ebp+String] push eax ; int push ecx ; lpString push [ebp+hDlg] ; int call sub_7F8060C1 test eax, eax jz short loc_7F809D06 mov dword_7F83537C, 1 jmp short loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809D06: ; CODE XREF: sub_7F809A3F+2B9j cmp [ebp+var_C], 0 jz short loc_7F809D18 cmp [ebp+var_4], 0 jnz short loc_7F809D22 mov si, 151Ch jmp short loc_7F809D22 ; --------------------------------------------------------------------------- loc_7F809D18: ; CODE XREF: sub_7F809A3F+2CBj cmp [ebp+var_4], 0 jnz short loc_7F809D22 mov si, 151Dh loc_7F809D22: ; CODE XREF: sub_7F809A3F+1FCj ; sub_7F809A3F+21Cj ... test si, si jnz short loc_7F809D5D cmp [ebp+var_4], 0 jnz short loc_7F809D4D lea eax, [ebp+String] push eax ; lpString push 480h ; nIDDlgItem push [ebp+var_8] ; hDlg call ds:SetDlgItemTextA loc_7F809D42: ; CODE XREF: sub_7F809A3F+1Aj ; sub_7F809A3F+2Ej ... xor eax, eax loc_7F809D44: ; CODE XREF: sub_7F809A3F+380j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F809D4D: ; CODE XREF: sub_7F809A3F+2ECj test si, si jnz short loc_7F809D62 push [ebp+var_4] call sub_7F80998B mov si, ax loc_7F809D5D: ; CODE XREF: sub_7F809A3F+2E6j test si, si jz short loc_7F809DA5 loc_7F809D62: ; CODE XREF: sub_7F809A3F+311j push 200h ; cchBufferMax mov edi, offset byte_7F8336A8 movzx eax, si push edi ; lpBuffer push eax ; uID push hInstance ; hInstance call ds:LoadStringA lea ecx, [ebp+String] push ecx push edi ; LPCSTR mov edi, offset Text push edi ; LPSTR call ds:wsprintfA add esp, 0Ch push 30h ; uType push offset byte_7F833F30 ; lpCaption push edi ; lpText push [ebp+hDlg] ; hWnd call ds:MessageBoxA loc_7F809DA5: ; CODE XREF: sub_7F809A3F+321j cmp [ebp+arg_4], 4Eh jnz short loc_7F809DBA movzx eax, si push eax ; dwNewLong push 0 ; nIndex push [ebp+hDlg] ; hWnd call ds:SetWindowLongA loc_7F809DBA: ; CODE XREF: sub_7F809A3F+36Aj mov eax, 1 jmp short loc_7F809D44 sub_7F809A3F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F809DC1 proc near ; CODE XREF: sub_7F809DFE+5Cp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov edx, [esp+arg_4] mov ebp, esp push esi push edi xor esi, esi mov edi, [ebp+arg_8] mov eax, [edx] mov ecx, [edi] cmp ecx, eax jnb short loc_7F809DE6 sub ecx, eax mov esi, 0FFFFFFFFh dec ecx mov eax, [ebp+arg_0] mov [eax], ecx jmp short loc_7F809DED ; --------------------------------------------------------------------------- loc_7F809DE6: ; CODE XREF: sub_7F809DC1+14j sub ecx, eax mov eax, [ebp+arg_0] mov [eax], ecx loc_7F809DED: ; CODE XREF: sub_7F809DC1+23j mov ecx, [edi+4] pop edi sub ecx, [edx+4] add ecx, esi pop esi pop ebp mov [eax+4], ecx retn 0Ch sub_7F809DC1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F809DFE(LPSYSTEMTIME, SYSTEMTIME *lpSystemTime, SYSTEMTIME *) sub_7F809DFE proc near ; CODE XREF: sub_7F807D9C+3C1p var_34 = _FILETIME ptr -34h FileTime = _FILETIME ptr -2Ch var_24 = FILETIME ptr -24h var_1C = dword ptr -1Ch ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 lpSystemTime = dword ptr 0Ch arg_8 = dword ptr 10h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F801288 push offset sub_7F82FBD0 push eax xor eax, eax mov large fs:0, esp sub esp, 24h mov [ebp+var_1C], eax push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp mov [ebp+ms_exc.registration.TryLevel], eax lea eax, [ebp+FileTime] push eax ; lpFileTime push [ebp+lpSystemTime] ; lpSystemTime call ds:SystemTimeToFileTime test eax, eax jz short loc_7F809E6F lea eax, [ebp+var_34] push eax ; lpFileTime push [ebp+arg_8] ; lpSystemTime call ds:SystemTimeToFileTime test eax, eax jz short loc_7F809E6F lea eax, [ebp+var_34] push eax lea eax, [ebp+FileTime] push eax lea eax, [ebp+var_24] push eax call sub_7F809DC1 push [ebp+arg_0] ; lpSystemTime lea eax, [ebp+var_24] push eax ; lpFileTime call ds:FileTimeToSystemTime mov [ebp+var_1C], eax loc_7F809E6F: ; CODE XREF: sub_7F809DFE+3Dj ; sub_7F809DFE+4Ej mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push offset loc_7F809E81 loc_7F809E7B: ; DATA XREF: .text:stru_7F801288o mov esp, [ebp+ms_exc.old_esp] ; Finally handler 0 for function 7F809DFE mov eax, [ebp+var_1C] loc_7F809E81: ; DATA XREF: sub_7F809DFE+78o mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F809DFE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F809E94(HWND hDlg) sub_7F809E94 proc near ; CODE XREF: sub_7F807D9C+20p hDlg = dword ptr 8 push ebp mov eax, dword_7F835290 mov ebp, esp push ebx push esi push edi mov edi, [ebp+hDlg] xor ebx, ebx push dword ptr [eax+8] ; lpString push 273h ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push ebx ; nCmdShow mov esi, ds:GetDlgItem push 26Ch ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; nCmdShow push 26Dh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; nCmdShow push 26Eh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; nCmdShow push 26Fh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; nCmdShow push 270h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; nCmdShow push 271h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push ebx ; bEnable push 26Ch ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 26Dh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 26Eh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 26Fh ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 270h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push ebx ; bEnable push 271h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push 272h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow push 5 ; nCmdShow push 273h ; nIDDlgItem push edi ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:ShowWindow pop edi pop esi pop ebx pop ebp retn 4 sub_7F809E94 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F809FA2(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) sub_7F809FA2 proc near ; DATA XREF: sub_7F807D9C+1E6o hWnd = dword ptr 8 Msg = dword ptr 0Ch wParam = dword ptr 10h lParam = dword ptr 14h push ebp mov ebp, esp cmp [esp+Msg], 100h jnz short loc_7F809FD3 cmp [ebp+wParam], 0Dh jz short loc_7F809FBB cmp [ebp+wParam], 1Bh jnz short loc_7F809FD3 loc_7F809FBB: ; CODE XREF: sub_7F809FA2+11j push 0 ; lParam mov eax, hDlg push 339h ; wParam push 111h ; Msg push eax ; hWnd call ds:PostMessageA loc_7F809FD3: ; CODE XREF: sub_7F809FA2+Bj ; sub_7F809FA2+17j push [ebp+lParam] ; lParam push [ebp+wParam] ; wParam push [ebp+Msg] ; Msg push [ebp+hWnd] ; hWnd push lpPrevWndFunc ; lpPrevWndFunc call ds:CallWindowProcA pop ebp retn 10h sub_7F809FA2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; BOOL __stdcall DialogFunc(HWND, UINT, WPARAM, LPARAM) DialogFunc proc near ; DATA XREF: sub_7F80504F+CFo ; sub_7F805168+15Bo ... hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, 1415h movzx edx, word ptr [esp+arg_8] mov ecx, [esp+arg_4] mov ebp, esp push esi cmp ecx, 2 jz short loc_7F80A039 cmp ecx, 110h jz short loc_7F80A056 cmp ecx, 111h jz loc_7F80A0B9 cmp ecx, 112h jz loc_7F80A0EE cmp ecx, 113h jz loc_7F80A105 loc_7F80A032: ; CODE XREF: DialogFunc+53j ; DialogFunc+65j ... xor eax, eax loc_7F80A034: ; CODE XREF: DialogFunc+C5j pop esi pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F80A039: ; CODE XREF: DialogFunc+15j mov eax, uIDEvent xor esi, esi test eax, eax jz short loc_7F80A032 push eax ; uIDEvent push [ebp+hWnd] ; hWnd call ds:KillTimer mov uIDEvent, esi jmp short loc_7F80A032 ; --------------------------------------------------------------------------- loc_7F80A056: ; CODE XREF: DialogFunc+1Dj cmp [ebp+arg_C], 8004010Dh jnz short loc_7F80A064 mov eax, 140Dh loc_7F80A064: ; CODE XREF: DialogFunc+6Ej push 200h ; cchBufferMax mov esi, offset Text push esi ; lpBuffer push eax ; uID push hInstance ; hInstance call ds:LoadStringA push esi ; lpString push 41Bh ; nIDDlgItem push [ebp+hWnd] ; hDlg call ds:SetDlgItemTextA push 0 ; lpTimerFunc push 927C0h ; uElapse push 2EBh ; nIDEvent push [ebp+hWnd] ; hWnd call ds:SetTimer push 1 ; int mov uIDEvent, eax push [ebp+hWnd] ; hWnd call sub_7F809758 mov eax, 1 jmp loc_7F80A034 ; --------------------------------------------------------------------------- loc_7F80A0B9: ; CODE XREF: DialogFunc+25j cmp edx, 422h jz short loc_7F80A0CE cmp edx, 423h jz short loc_7F80A0DE jmp loc_7F80A032 ; --------------------------------------------------------------------------- loc_7F80A0CE: ; CODE XREF: DialogFunc+D0j push 1 ; nResult push [ebp+hWnd] ; hDlg call ds:EndDialog jmp loc_7F80A032 ; --------------------------------------------------------------------------- loc_7F80A0DE: ; CODE XREF: DialogFunc+D8j push 0 ; nResult push [ebp+hWnd] ; hDlg call ds:EndDialog jmp loc_7F80A032 ; --------------------------------------------------------------------------- loc_7F80A0EE: ; CODE XREF: DialogFunc+31j mov eax, [ebp+arg_8] and eax, 0FFF0h cmp eax, 0F060h jnz loc_7F80A032 push 0 jmp short loc_7F80A107 ; --------------------------------------------------------------------------- loc_7F80A105: ; CODE XREF: DialogFunc+3Dj push 1 ; nResult loc_7F80A107: ; CODE XREF: DialogFunc+114j push [ebp+hWnd] ; hDlg call ds:EndDialog jmp loc_7F80A032 DialogFunc endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80A115(HWND hDlg, LPCSTR lpString, LPCSTR, int, BOOL bEnable, BOOL) sub_7F80A115 proc near ; CODE XREF: sub_7F807D9C+CAp String = byte ptr -50h var_30 = tagRECT ptr -30h Rect = tagRECT ptr -20h var_10 = tagRECT ptr -10h hDlg = dword ptr 8 lpString = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h bEnable = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 50h push ebx push esi push edi mov ebx, 384h push 0FFFFFFF0h ; nIndex mov esi, [ebp+hDlg] push ebx ; nIDDlgItem mov edi, ds:GetDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:GetWindowLongA mov dword_7F833BF8, eax test eax, 10000000h jz short loc_7F80A152 push 0 ; nCmdShow push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:ShowWindow loc_7F80A152: ; CODE XREF: sub_7F80A115+2Ej push 0FFFFFFF0h ; nIndex mov ebx, 386h push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:GetWindowLongA mov dword_7F833BD0, eax test eax, 10000000h jz short loc_7F80A17D push 0 ; nCmdShow push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:ShowWindow loc_7F80A17D: ; CODE XREF: sub_7F80A115+59j push 0 ; nCmdShow mov ebx, 32Bh push 387h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:ShowWindow loc_7F80A193: ; CODE XREF: sub_7F80A115+A0j push [ebp+bEnable] ; bEnable push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push ebx ; nIDDlgItem push esi ; hDlg inc ebx call edi ; GetDlgItem push eax ; hWnd call ds:ShowWindow cmp ebx, 32Eh jle short loc_7F80A193 mov ebx, 335h loc_7F80A1BC: ; CODE XREF: sub_7F80A115+C9j push [ebp+arg_14] ; bEnable push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push 5 ; nCmdShow push ebx ; nIDDlgItem push esi ; hDlg inc ebx call edi ; GetDlgItem push eax ; hWnd call ds:ShowWindow cmp ebx, 338h jle short loc_7F80A1BC mov ebx, 339h push ebx ; dwNewLong push 0FFFFFFF4h ; nIndex push 385h ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:SetWindowLongA push 1 ; bEnable push ebx ; nIDDlgItem push esi ; hDlg call edi ; GetDlgItem push eax ; hWnd call ds:EnableWindow push [ebp+lpString] ; lpString push 32Bh ; nIDDlgItem push esi ; hDlg xor ebx, ebx call ds:SetDlgItemTextA push [ebp+arg_8] ; lpString push 335h ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push ebx ; lpString push 32Dh ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push ebx ; lpString push 337h ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA cmp [ebp+bEnable], ebx jz short loc_7F80A29E push ebx ; bSigned push ebx ; uValue push 32Ch ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemInt cmp [ebp+arg_C], ebx jz short loc_7F80A29E push 104h ; cchBufferMax mov eax, dword_7F835290 add eax, 74h push eax ; lpBuffer push 1006h ; uID push hInstance ; hInstance call ds:LoadStringA mov eax, dword_7F835290 lea ecx, [ebp+String] push [ebp+arg_C] add eax, 74h push eax ; LPCSTR push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+String] push ecx ; lpString push 32Dh ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA loc_7F80A29E: ; CODE XREF: sub_7F80A115+12Cj ; sub_7F80A115+13Fj mov eax, dword_7F835290 mov edx, [ebp+arg_C] xor ebx, ebx and byte ptr [eax], 0FEh mov ecx, dword_7F835290 lea eax, [ebp+Rect] push eax ; lpRect push 32Eh ; nIDDlgItem push esi ; hDlg mov [ecx+4], edx mov rc.bottom, ebx mov rc.top, ebx mov rc.left, ebx mov rc.right, ebx call edi ; GetDlgItem push eax ; hWnd call ds:GetWindowRect lea eax, [ebp+var_10] push eax ; lpRect push esi ; hWnd call ds:GetWindowRect lea ecx, [ebp+var_30] push ecx ; lpRect push esi ; hWnd call ds:GetClientRect mov eax, [ebp+var_10.right] mov ecx, [ebp+var_10.bottom] sub eax, [ebp+var_30.right] sub eax, [ebp+var_10.left] cdq sub eax, edx mov edx, [ebp+var_10.left] sar eax, 1 sub ecx, eax add edx, eax sub ecx, [ebp+var_30.bottom] add eax, [ebp+var_10.left] sub ecx, [ebp+var_10.top] sub [ebp+Rect.right], edx push 1 ; bErase sub [ebp+Rect.left], eax mov eax, [ebp+var_10.top] add eax, ecx add ecx, [ebp+var_10.top] sub [ebp+Rect.bottom], eax sub [ebp+Rect.top], ecx lea eax, [ebp+Rect] push eax ; lpRect push esi ; hWnd call ds:InvalidateRect lea ecx, [ebp+Rect] mov stru_7F833BE8.bottom, ebx push ecx ; lpRect mov stru_7F833BE8.top, ebx push 338h ; nIDDlgItem mov stru_7F833BE8.left, ebx push esi ; hDlg mov stru_7F833BE8.right, ebx call edi ; GetDlgItem push eax ; hWnd call ds:GetWindowRect lea eax, [ebp+var_10] push eax ; lpRect push esi ; hWnd call ds:GetWindowRect lea ecx, [ebp+var_30] push ecx ; lpRect push esi ; hWnd call ds:GetClientRect mov eax, [ebp+var_10.right] sub eax, [ebp+var_30.right] sub eax, [ebp+var_10.left] cdq sub eax, edx mov ecx, [ebp+var_10.left] sar eax, 1 mov edx, [ebp+var_10.bottom] sub edx, eax add ecx, eax sub edx, [ebp+var_30.bottom] add eax, [ebp+var_10.left] sub edx, [ebp+var_10.top] sub [ebp+Rect.right], ecx push 1 ; bErase sub [ebp+Rect.left], eax mov eax, [ebp+var_10.top] add eax, edx add edx, [ebp+var_10.top] sub [ebp+Rect.bottom], eax sub [ebp+Rect.top], edx lea eax, [ebp+Rect] push eax ; lpRect push esi ; hWnd call ds:InvalidateRect pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80A115 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80A3C3(HWND hWnd) sub_7F80A3C3 proc near ; CODE XREF: sub_7F805851+5DAp Buffer = byte ptr -100h hWnd = dword ptr 4 sub esp, 100h mov eax, dword_7F835290 test byte ptr [eax], 1 jnz short loc_7F80A417 lea eax, [esp+100h+Buffer] push 100h ; cchBufferMax push eax ; lpBuffer push 1527h ; uID push hInstance ; hInstance call ds:LoadStringA lea ecx, [esp+100h+Buffer] push 131h ; uType push offset byte_7F833F30 ; lpCaption push ecx ; lpText push [esp+10Ch+hWnd] ; hWnd call ds:MessageBoxA cmp eax, 1 jnz short loc_7F80A417 mov eax, dword_7F835290 or byte ptr [eax], 1 loc_7F80A417: ; CODE XREF: sub_7F80A3C3+Ej ; sub_7F80A3C3+4Aj add esp, 100h retn 4 sub_7F80A3C3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80A420(HWND hWnd) sub_7F80A420 proc near ; CODE XREF: sub_7F80A47A+Cp Msg = tagMSG ptr -1Ch hWnd = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch push 1 ; wRemoveMsg lea ecx, [ebp+Msg] push 0 ; wMsgFilterMax push 0 ; wMsgFilterMin push [ebp+hWnd] ; hWnd push ecx ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F80A468 loc_7F80A43D: ; CODE XREF: sub_7F80A420+46j lea eax, [ebp+Msg] push eax ; lpMsg call ds:TranslateMessage lea eax, [ebp+Msg] push eax ; lpMsg call ds:DispatchMessageA push 1 ; wRemoveMsg lea ecx, [ebp+Msg] push 0 ; wMsgFilterMax push 0 ; wMsgFilterMin push [ebp+hWnd] ; hWnd push ecx ; lpMsg call ds:PeekMessageA test eax, eax jnz short loc_7F80A43D loc_7F80A468: ; CODE XREF: sub_7F80A420+1Bj mov eax, dword_7F835290 mov eax, [eax] mov esp, ebp not eax and eax, 1 pop ebp retn 4 sub_7F80A420 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80A47A(HWND hDlg, UINT uValue, int, int) sub_7F80A47A proc near ; CODE XREF: sub_7F80722E+1Cp ; sub_7F808184+1Dp String = byte ptr -50h var_30 = tagRECT ptr -30h var_20 = tagRECT ptr -20h Rect = tagRECT ptr -10h hDlg = dword ptr 8 uValue = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 50h push ebx push esi push edi push [ebp+hDlg] ; hWnd call sub_7F80A420 test eax, eax jnz short loc_7F80A496 xor eax, eax jmp loc_7F80A680 ; --------------------------------------------------------------------------- loc_7F80A496: ; CODE XREF: sub_7F80A47A+13j mov ebx, [ebp+arg_8] test ebx, ebx jnz short loc_7F80A4D6 mov eax, dword_7F835290 cmp [eax+4], ebx jz short loc_7F80A4D0 push 0 ; lpString mov eax, [ebp+arg_C] sub eax, 32Eh cmp eax, 1 sbb eax, eax and al, 0F6h add eax, 337h push eax ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SetDlgItemTextA mov ecx, dword_7F835290 mov [ecx+4], ebx loc_7F80A4D0: ; CODE XREF: sub_7F80A47A+2Bj mov ebx, [ebp+uValue] inc ebx jmp short loc_7F80A53F ; --------------------------------------------------------------------------- loc_7F80A4D6: ; CODE XREF: sub_7F80A47A+21j mov eax, dword_7F835290 add eax, 4 cmp [eax], ebx jz short loc_7F80A53F push 104h ; cchBufferMax mov [eax], ebx mov eax, dword_7F835290 add eax, 74h push eax ; lpBuffer push 1006h ; uID push hInstance ; hInstance call ds:LoadStringA mov ecx, dword_7F835290 push dword ptr [ecx+4] lea eax, [ecx+74h] lea ecx, [ebp+String] push eax ; LPCSTR push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+String] mov eax, [ebp+arg_C] push ecx ; lpString sub eax, 32Eh cmp eax, 1 sbb eax, eax and al, 0F6h add eax, 337h push eax ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SetDlgItemTextA loc_7F80A53F: ; CODE XREF: sub_7F80A47A+5Aj ; sub_7F80A47A+66j cmp ebx, [ebp+uValue] jnb short loc_7F80A547 mov [ebp+uValue], ebx loc_7F80A547: ; CODE XREF: sub_7F80A47A+C8j mov eax, dword_7F835290 push 0 ; bSigned push [ebp+uValue] ; uValue or byte ptr [eax], 2 mov eax, [ebp+arg_C] sub eax, 32Eh cmp eax, 1 sbb eax, eax and al, 0F6h add eax, 336h push eax ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:SetDlgItemInt cmp [ebp+arg_C], 32Eh jnz short loc_7F80A582 mov esi, offset rc jmp short loc_7F80A587 ; --------------------------------------------------------------------------- loc_7F80A582: ; CODE XREF: sub_7F80A47A+FFj mov esi, offset stru_7F833BE8 loc_7F80A587: ; CODE XREF: sub_7F80A47A+106j lea edi, [ebp+Rect] lea eax, [ebp+Rect] movsd movsd movsd movsd push eax ; lpRect mov eax, [ebp+arg_C] sub eax, 32Eh cmp eax, 1 sbb eax, eax and al, 0F6h add eax, 338h push eax ; nIDDlgItem push [ebp+hDlg] ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowRect lea ecx, [ebp+var_20] push ecx ; lpRect push [ebp+hDlg] ; hWnd call ds:GetWindowRect lea ecx, [ebp+var_30] push ecx ; lpRect push [ebp+hDlg] ; hWnd call ds:GetClientRect mov eax, [ebp+var_20.right] mov ecx, [ebp+var_20.bottom] sub eax, [ebp+var_30.right] sub eax, [ebp+var_20.left] cdq sub eax, edx sar eax, 1 sub ecx, eax mov esi, eax sub ecx, [ebp+var_30.bottom] sub ecx, [ebp+var_20.top] mov eax, [ebp+Rect.right] sub eax, [ebp+Rect.left] sub edx, edx imul eax, [ebp+uValue] div ebx sub eax, esi sub eax, [ebp+var_20.left] add eax, [ebp+Rect.left] mov [ebp+Rect.right], eax mov eax, 3 sub eax, esi sub eax, [ebp+var_20.left] add [ebp+Rect.left], eax mov edx, [ebp+Rect.left] cmp [ebp+Rect.right], edx jge short loc_7F80A61D mov [ebp+Rect.right], edx loc_7F80A61D: ; CODE XREF: sub_7F80A47A+19Ej mov eax, [ebp+var_20.top] add eax, ecx push 0 ; bErase inc eax sub [ebp+Rect.bottom], eax mov eax, 7 sub eax, ecx lea ecx, [ebp+Rect] sub eax, [ebp+var_20.top] push ecx ; lpRect lea esi, [ebp+Rect] add [ebp+Rect.top], eax push [ebp+hDlg] ; hWnd call ds:InvalidateRect cmp [ebp+arg_C], 32Eh jnz short loc_7F80A659 mov edi, offset rc movsd movsd movsd movsd jmp short loc_7F80A662 ; --------------------------------------------------------------------------- loc_7F80A659: ; CODE XREF: sub_7F80A47A+1D2j mov edi, offset stru_7F833BE8 movsd movsd movsd movsd loc_7F80A662: ; CODE XREF: sub_7F80A47A+1DDj push [ebp+hDlg] ; hWnd call ds:UpdateWindow push [ebp+hDlg] ; hWnd call ds:GetParent push eax ; hWnd call ds:UpdateWindow mov eax, 1 loc_7F80A680: ; CODE XREF: sub_7F80A47A+17j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80A47A endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80A689(int, HDC hDC) sub_7F80A689 proc near ; CODE XREF: sub_7F8097B9+2Dp hDC = dword ptr 8 cmp dword_7F835290, 0 push esi jz short loc_7F80A6D9 mov eax, dword_7F835290 test byte ptr [eax], 2 jz short loc_7F80A6D9 push 2 ; nIndex call ds:GetSysColor push eax ; color call ds:CreateSolidBrush mov esi, eax test esi, esi jz short loc_7F80A6D9 push esi ; hbr push offset rc ; lprc push [esp+0Ch+hDC] ; hDC call ds:FillRect push esi ; hbr push offset stru_7F833BE8 ; lprc push [esp+0Ch+hDC] ; hDC call ds:FillRect push esi ; ho call ds:DeleteObject loc_7F80A6D9: ; CODE XREF: sub_7F80A689+8j ; sub_7F80A689+12j ... pop esi retn 8 sub_7F80A689 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80A6DD proc near ; CODE XREF: sub_7F806FF2+43p ; sub_7F80A757+15p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_4] mov ebp, esp push esi push edi mov esi, [ebp+arg_0] add esi, 2 test eax, eax jz short loc_7F80A6F9 push eax push esi call sub_7F80C373 jmp short loc_7F80A6FF ; --------------------------------------------------------------------------- loc_7F80A6F9: ; CODE XREF: sub_7F80A6DD+11j push esi call sub_7F80C351 loc_7F80A6FF: ; CODE XREF: sub_7F80A6DD+1Aj mov ecx, [ebp+arg_8] mov [ecx], eax mov eax, 0 mov edi, [ecx] test edi, edi jz short loc_7F80A724 xor eax, eax mov ecx, esi shr ecx, 2 rep stosd mov ecx, esi and ecx, 3 rep stosb mov eax, 1 loc_7F80A724: ; CODE XREF: sub_7F80A6DD+30j pop edi pop esi pop ebp retn 0Ch sub_7F80A6DD endp ; =============== S U B R O U T I N E ======================================= sub_7F80A72A proc near ; CODE XREF: sub_7F806FF2+74p ; sub_7F80725C+2Fp ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi] test eax, eax jnz short loc_7F80A739 xor eax, eax jmp short loc_7F80A753 ; --------------------------------------------------------------------------- loc_7F80A739: ; CODE XREF: sub_7F80A72A+9j push eax call sub_7F80C398 test eax, eax mov eax, 0 jnz short loc_7F80A753 mov eax, 1 mov dword ptr [esi], 0 loc_7F80A753: ; CODE XREF: sub_7F80A72A+Dj ; sub_7F80A72A+1Cj pop esi retn 4 sub_7F80A72A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80A757 proc near ; CODE XREF: sub_7F806861+41Dp ; sub_7F80725C+FEp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push [esp+arg_8] call sub_7F80A72A push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F80A6DD pop ebp retn 0Ch sub_7F80A757 endp ; =============== S U B R O U T I N E ======================================= sub_7F80A775 proc near ; CODE XREF: sub_7F8082C7+5Fp ; sub_7F80917D+1Bp arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi] test eax, eax jnz short loc_7F80A784 xor eax, eax jmp short loc_7F80A795 ; --------------------------------------------------------------------------- loc_7F80A784: ; CODE XREF: sub_7F80A775+9j push eax call MAPIFreeBuffer@4 mov eax, 1 mov dword ptr [esi], 0 loc_7F80A795: ; CODE XREF: sub_7F80A775+Dj pop esi retn 4 sub_7F80A775 endp ; Exported entry 5. ScGetPABMigrationContext@52 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall ScGetPABMigrationContext(LPCSTR lpFileName, int, int, int, int, int, int, int, int, int, int, int, int) public ScGetPABMigrationContext@52 ScGetPABMigrationContext@52 proc near ; CODE XREF: ScMigrateMMFPAB@32+7Bp ; sub_7F80725C+A6p ; DATA XREF: ... Buffer = dword ptr -8 var_4 = dword ptr -4 lpFileName = dword ptr 8 arg_4 = dword ptr 0Ch arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch arg_28 = dword ptr 30h arg_2C = dword ptr 34h arg_30 = dword ptr 38h push ebp mov ebp, esp sub esp, 8 push ebx lea eax, [ebp+var_4] push esi xor ebx, ebx push edi mov [ebp+var_4], ebx push eax push 64h call [ebp+arg_14] mov edi, eax test edi, edi jnz loc_7F80A882 mov edi, [ebp+var_4] xor eax, eax mov ecx, 19h rep stosd mov eax, [ebp+var_4] mov esi, [ebp+lpFileName] mov dword ptr [eax+4Ch], 0FFFFFFFFh mov eax, [ebp+var_4] mov [eax+5Ch], ebx mov eax, [ebp+var_4] mov [eax+60h], esi mov eax, [ebp+var_4] push offset ModuleName ; "mmfmig32.dll" mov dword ptr [eax], offset sub_7F80A95F mov eax, [ebp+var_4] mov dword ptr [eax+4], offset sub_7F80A9A4 mov eax, [ebp+var_4] mov dword ptr [eax+8], offset sub_7F80A9B6 call ds:GetModuleHandleA mov ecx, [ebp+var_4] mov edx, [ebp+arg_14] mov [ecx+0Ch], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_C] mov [ecx+10h], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_18] mov [ecx+18h], edx mov ecx, [ebp+var_4] mov edx, [ebp+arg_1C] mov [ecx+1Ch], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_20] mov [ecx+20h], edx mov ecx, [ebp+var_4] mov edx, [ebp+arg_24] mov [ecx+24h], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_28] mov [ecx+28h], edx mov ecx, [ebp+var_4] mov edx, [ebp+arg_2C] mov [ecx+2Ch], eax mov ecx, [ebp+var_4] lea eax, [ebp+Buffer] mov [ecx+30h], edx push eax ; lpBuffer push esi ; lpFileName call sub_7F80AA5A mov edi, eax test edi, edi jnz short loc_7F80A882 mov eax, [ebp+Buffer] cmp eax, 1AFDEADh jz short loc_7F80A895 cmp eax, 214244E4h jz short loc_7F80A8B0 cmp eax, 4E444221h jz short loc_7F80A8B0 mov edi, 80040119h loc_7F80A882: ; CODE XREF: ScGetPABMigrationContext@52+1Bj ; ScGetPABMigrationContext@52+CAj ... push [ebp+var_4] call sub_7F80A95F loc_7F80A88A: ; CODE XREF: ScGetPABMigrationContext@52+1C1j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 34h ; --------------------------------------------------------------------------- loc_7F80A895: ; CODE XREF: ScGetPABMigrationContext@52+D4j mov eax, [ebp+var_4] add eax, 50h push eax push [ebp+arg_4] push esi push [ebp+var_4] call sub_7F80B4E1 mov edi, eax test edi, edi jz short loc_7F80A8CD jmp short loc_7F80A882 ; --------------------------------------------------------------------------- loc_7F80A8B0: ; CODE XREF: ScGetPABMigrationContext@52+DBj ; ScGetPABMigrationContext@52+E2j mov eax, [ebp+var_4] add eax, 50h push eax mov eax, [ebp+var_4] add eax, 4Ch push eax push esi push [ebp+var_4] call sub_7F80C275 mov edi, eax test edi, edi jnz short loc_7F80A882 loc_7F80A8CD: ; CODE XREF: ScGetPABMigrationContext@52+113j mov eax, [ebp+var_4] add eax, 14h push eax push 0 push 0 mov eax, [ebp+arg_10] mov ebx, [eax] push [ebp+arg_C] push eax call dword ptr [ebx+18h] mov edi, eax test edi, edi jl short loc_7F80A882 mov eax, [ebp+var_4] add eax, 38h push eax mov ecx, [eax-24h] mov eax, [ebp+var_4] mov ebx, [ecx] add eax, 34h push eax push ecx call dword ptr [ebx+64h] mov edi, eax test edi, edi jnz loc_7F80A882 mov eax, [ebp+var_4] mov ecx, [eax+34h] test ecx, ecx jnz short loc_7F80A91F mov edi, 8004010Fh jmp loc_7F80A882 ; --------------------------------------------------------------------------- loc_7F80A91F: ; CODE XREF: ScGetPABMigrationContext@52+17Aj mov eax, [ebp+var_4] add eax, 48h push eax mov eax, [ebp+var_4] add eax, 44h push eax mov eax, [ebp+var_4] add eax, 40h push eax mov eax, [ebp+var_4] add eax, 3Ch push eax mov eax, [ebp+var_4] push dword ptr [eax+38h] push ecx push eax call sub_7F80B0EB mov edi, eax test edi, edi jnz loc_7F80A882 mov ecx, [ebp+var_4] mov eax, [ebp+arg_30] mov [eax], ecx jmp loc_7F80A88A ScGetPABMigrationContext@52 endp ; =============== S U B R O U T I N E ======================================= sub_7F80A95F proc near ; CODE XREF: ScGetPABMigrationContext@52+ECp ; DATA XREF: ScGetPABMigrationContext@52+4Eo arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] test esi, esi jz short loc_7F80A99F lea edi, [esi+20h] push dword ptr [esi+40h] call dword ptr [edi] push dword ptr [esi+48h] call dword ptr [edi] push dword ptr [esi+38h] call dword ptr [edi] push dword ptr [esi+14h] call UlRelease@4 mov eax, [esi+50h] test eax, eax jz short loc_7F80A98D push eax call dword ptr [eax] loc_7F80A98D: ; CODE XREF: sub_7F80A95F+29j mov eax, [esi+4Ch] cmp eax, 0FFFFFFFFh jz short loc_7F80A99C push eax ; hLibModule call ds:FreeLibrary loc_7F80A99C: ; CODE XREF: sub_7F80A95F+34j push esi call dword ptr [edi] loc_7F80A99F: ; CODE XREF: sub_7F80A95F+8j pop edi pop esi retn 4 sub_7F80A95F endp ; =============== S U B R O U T I N E ======================================= sub_7F80A9A4 proc near ; DATA XREF: ScGetPABMigrationContext@52+57o arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push [esp+arg_4] mov eax, [eax+50h] push eax call dword ptr [eax+4] retn 8 sub_7F80A9A4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80A9B6 proc near ; DATA XREF: ScGetPABMigrationContext@52+61o var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [ebp+arg_0] cmp dword ptr [esi+5Ch], 0 jnz short loc_7F80A9E2 mov eax, dword ptr [ebp+arg_C] and eax, 20000000h shr eax, 1Dh push eax ; int push dword ptr [esi+0Ch] ; hInstance push dword ptr [esi+60h] ; int call sub_7F80530D mov [esi+5Ch], eax loc_7F80A9E2: ; CODE XREF: sub_7F80A9B6+10j lea edi, [esi+58h] loc_7F80A9E5: ; CODE XREF: sub_7F80A9B6+55j mov ecx, [esi+50h] push edi push [ebp+arg_8] push [ebp+arg_4] push ecx call dword ptr [ecx+8] mov [ebp+var_4], eax test eax, eax jz short loc_7F80AA12 push dword ptr [ebp+arg_C] ; __int16 push eax ; dwInitParam push esi ; int call sub_7F80B3E3 test eax, eax jz short loc_7F80AA4E cmp eax, 1 jz short loc_7F80A9E5 cmp eax, 2 jz short loc_7F80AA4E loc_7F80AA12: ; CODE XREF: sub_7F80A9B6+42j mov dword ptr [esi+54h], 0 xor ebx, ebx cmp [ebp+arg_4], ebx jz short loc_7F80AA4E mov edi, [ebp+arg_8] loc_7F80AA23: ; CODE XREF: sub_7F80A9B6+91j push dword ptr [ebp+arg_C] push dword ptr [edi] push esi call sub_7F80AAD1 test eax, eax jz short loc_7F80AA40 cmp eax, 80040113h jz short loc_7F80AA4B mov [ebp+var_4], 40680h loc_7F80AA40: ; CODE XREF: sub_7F80A9B6+7Aj add edi, 4 inc ebx cmp ebx, [ebp+arg_4] jb short loc_7F80AA23 jmp short loc_7F80AA4E ; --------------------------------------------------------------------------- loc_7F80AA4B: ; CODE XREF: sub_7F80A9B6+81j mov [ebp+var_4], eax loc_7F80AA4E: ; CODE XREF: sub_7F80A9B6+50j ; sub_7F80A9B6+5Aj ... mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80A9B6 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80AA5A(LPCSTR lpFileName, LPVOID lpBuffer) sub_7F80AA5A proc near ; CODE XREF: ScGetPABMigrationContext@52+C1p NumberOfBytesRead= dword ptr -4 lpFileName = dword ptr 4 lpBuffer = dword ptr 8 sub esp, 4 push esi push edi xor esi, esi push esi ; hTemplateFile push 8000080h ; dwFlagsAndAttributes push 3 ; dwCreationDisposition push esi ; lpSecurityAttributes push esi ; dwShareMode push 80000000h ; dwDesiredAccess push [esp+24h+lpFileName] ; lpFileName call ds:CreateFileA cmp eax, 0FFFFFFFFh mov edi, eax jnz short loc_7F80AA9D call ds:GetLastError sub eax, 20h cmp eax, 1 sbb esi, esi and esi, 2FEEFh sub esi, 7FFBFEEAh jmp short loc_7F80AAC0 ; --------------------------------------------------------------------------- loc_7F80AA9D: ; CODE XREF: sub_7F80AA5A+25j lea eax, [esp+0Ch+NumberOfBytesRead] push 0 ; lpOverlapped push eax ; lpNumberOfBytesRead push 4 ; nNumberOfBytesToRead push [esp+18h+lpBuffer] ; lpBuffer push edi ; hFile call ds:ReadFile test eax, eax jnz short loc_7F80AAC0 mov esi, 80004005h call ds:GetLastError loc_7F80AAC0: ; CODE XREF: sub_7F80AA5A+41j ; sub_7F80AA5A+59j push edi ; hObject call ds:CloseHandle mov eax, esi pop edi pop esi add esp, 4 retn 8 sub_7F80AA5A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80AAD1 proc near ; CODE XREF: sub_7F80A9B6+73p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h push ebp xor eax, eax mov ebp, esp sub esp, 8 push ebx mov [ebp+var_4], eax push esi push edi mov esi, [ebp+arg_0] loc_7F80AAE2: ; CODE XREF: sub_7F80AAD1+3Dj lea eax, [ebp+var_4] push eax push dword ptr [esi+38h] push dword ptr [esi+34h] push [ebp+arg_4] push 0 push esi call sub_7F80B28E mov edi, eax test edi, edi jz short loc_7F80AB15 push dword ptr [ebp+arg_8] ; __int16 push edi ; dwInitParam push esi ; int call sub_7F80B3E3 test eax, eax jz short loc_7F80AB4C cmp eax, 1 jz short loc_7F80AAE2 cmp eax, 2 jz short loc_7F80AB4C loc_7F80AB15: ; CODE XREF: sub_7F80AAD1+2Aj mov eax, [ebp+var_4] mov ebx, eax mov [ebp+var_8], eax test eax, eax jz short loc_7F80AB4C loc_7F80AB21: ; CODE XREF: sub_7F80AAD1+75j push dword ptr [ebp+arg_8] lea ecx, [ebp+var_8] push ecx push ebx push [ebp+var_4] push esi call sub_7F80AB5D test eax, eax jz short loc_7F80AB42 cmp eax, 80040113h jz short loc_7F80AB4A mov edi, 40680h loc_7F80AB42: ; CODE XREF: sub_7F80AAD1+63j mov ebx, [ebx] test ebx, ebx jnz short loc_7F80AB21 jmp short loc_7F80AB4C ; --------------------------------------------------------------------------- loc_7F80AB4A: ; CODE XREF: sub_7F80AAD1+6Aj mov edi, eax loc_7F80AB4C: ; CODE XREF: sub_7F80AAD1+38j ; sub_7F80AAD1+42j ... push [ebp+var_4] call dword ptr [esi+20h] mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80AAD1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80AB5D proc near ; CODE XREF: sub_7F80AAD1+5Cp var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = word ptr 18h push ebp mov ebp, esp sub esp, 20h push ebx mov eax, [ebp+arg_8] push esi add eax, 14h push edi xor esi, esi mov [ebp+var_18], esi mov [ebp+var_10], eax mov eax, [ebp+arg_8] add eax, 10h mov [ebp+var_8], eax loc_7F80AB7D: ; CODE XREF: sub_7F80AB5D+57j mov ecx, [ebp+arg_0] mov ebx, [ebp+arg_8] push [ebp+var_10] push [ebp+var_8] push dword ptr [ebx+4] push [ebp+arg_4] mov ecx, [ecx+50h] push ecx call dword ptr [ecx+0Ch] mov [ebp+var_4], eax test eax, eax jz short loc_7F80ABBF push dword ptr [ebp+arg_10] ; __int16 push eax ; dwInitParam push [ebp+arg_0] ; int call sub_7F80B3E3 test eax, eax jz loc_7F80AE0E cmp eax, 1 jz short loc_7F80AB7D cmp eax, 2 jz loc_7F80AE0E loc_7F80ABBF: ; CODE XREF: sub_7F80AB5D+3Ej mov eax, [ebp+arg_8] mov edx, [ebp+var_8] add eax, 18h mov ecx, [ebp+arg_0] push eax mov [ebp+var_14], eax push [ebp+arg_4] mov eax, [edx] shl eax, 3 push eax call dword ptr [ecx+1Ch] mov [ebp+var_4], eax test eax, eax jnz loc_7F80AE0E mov eax, [ebp+var_8] mov edx, [ebp+var_14] mov ecx, [eax] mov edi, [edx] shl ecx, 3 xor eax, eax shr ecx, 2 rep stosd mov ecx, [ebp+arg_0] lea eax, [ebp+var_18] push eax lea edx, [ebp+var_4] mov ecx, [ecx+14h] push edx push 1 mov ebx, [ebp+arg_8] push offset dword_7F801348 mov eax, [ecx] push dword ptr [ebx+0Ch] push dword ptr [ebx+8] push ecx call dword ptr [eax+38h] mov [ebp+var_4], eax test eax, eax jnz loc_7F80AE0E mov eax, [ebp+arg_8] cmp eax, [ebp+arg_4] jz loc_7F80AD25 mov eax, [ebp+var_8] mov esi, [eax] mov ecx, esi dec esi test ecx, ecx jz short loc_7F80ACA8 lea eax, ds:0[esi*8] lea ebx, ds:0[esi*4] mov [ebp+var_4], eax loc_7F80AC52: ; CODE XREF: sub_7F80AB5D+149j mov edi, [ebp+arg_4] cmp [ebp+arg_8], edi jz short loc_7F80AC9A loc_7F80AC5A: ; CODE XREF: sub_7F80AB5D+11Dj lea eax, [ebp+var_C] push eax mov eax, [ebp+var_10] push dword ptr [edi+14h] mov ecx, [eax] push dword ptr [edi+10h] push dword ptr [ecx+ebx] call sub_7F80B2F6 test eax, eax jnz short loc_7F80AC7E mov edi, [edi] cmp [ebp+arg_8], edi jnz short loc_7F80AC5A jmp short loc_7F80AC9A ; --------------------------------------------------------------------------- loc_7F80AC7E: ; CODE XREF: sub_7F80AB5D+116j mov eax, [edi+18h] mov ecx, [ebp+var_C] mov edx, [eax+ecx*8+4] lea eax, [eax+ecx*8] mov edi, [eax] mov eax, [ebp+var_14] mov eax, [eax] add eax, [ebp+var_4] mov [eax], edi mov [eax+4], edx loc_7F80AC9A: ; CODE XREF: sub_7F80AB5D+FBj ; sub_7F80AB5D+11Fj mov eax, esi sub ebx, 4 sub [ebp+var_4], 8 dec esi test eax, eax jnz short loc_7F80AC52 loc_7F80ACA8: ; CODE XREF: sub_7F80AB5D+E2j push [ebp+arg_8] push [ebp+var_18] push [ebp+arg_0] call sub_7F80AE22 mov [ebp+var_4], eax test eax, eax jnz loc_7F80AE0E xor ecx, ecx mov eax, [ebp+var_8] cmp [eax], ecx jbe short loc_7F80AD25 xor esi, esi xor edx, edx loc_7F80ACCE: ; CODE XREF: sub_7F80AB5D+1C6j mov eax, [ebp+var_14] mov ebx, [eax] lea edi, [edx+ebx] mov [ebp+var_C], edi cmp dword ptr [edi], 0 jnz short loc_7F80ACE7 add esi, 4 add edx, 8 inc ecx jmp short loc_7F80AD1E ; --------------------------------------------------------------------------- loc_7F80ACE7: ; CODE XREF: sub_7F80AB5D+17Fj mov eax, [ebp+var_8] mov edi, [eax] dec edi mov [eax], edi lea eax, [ebx+edi*8] mov ebx, [eax] mov eax, [eax+4] mov [ebp+var_20], ebx mov [ebp+var_1C], eax mov ebx, [ebp+var_C] mov eax, ebx mov [ebp+var_C], ebx mov ebx, [ebp+var_20] mov [eax], ebx mov eax, [ebp+var_C] mov ebx, [ebp+var_1C] mov [eax+4], ebx mov eax, [ebp+var_10] mov ebx, [eax] mov edi, [ebx+edi*4] mov [esi+ebx], edi loc_7F80AD1E: ; CODE XREF: sub_7F80AB5D+188j mov eax, [ebp+var_8] cmp [eax], ecx ja short loc_7F80ACCE loc_7F80AD25: ; CODE XREF: sub_7F80AB5D+D2j ; sub_7F80AB5D+16Bj mov eax, [ebp+var_10] xor edi, edi mov esi, [eax] mov eax, [ebp+var_8] cmp [eax], edi jbe short loc_7F80AD71 loc_7F80AD33: ; CODE XREF: sub_7F80AB5D+212j mov eax, [ebp+var_10] mov ecx, [eax] lea eax, [ebp+var_C] push eax push esi mov ebx, [ecx+edi*4] push edi push ebx call sub_7F80B2F6 mov eax, [ebp+var_C] mov ecx, edi sub ecx, [ebp+var_C] inc edi shl ecx, 2 lea eax, [esi+eax*4] push ecx push eax add eax, 4 push eax call sub_7F82FCE0 add esp, 0Ch mov ecx, [ebp+var_C] mov eax, [ebp+var_8] mov [esi+ecx*4], ebx cmp [eax], edi ja short loc_7F80AD33 loc_7F80AD71: ; CODE XREF: sub_7F80AB5D+1D4j mov eax, [ebp+arg_C] mov ecx, [ebp+var_8] mov esi, [eax] mov edi, [ecx] lea eax, ds:0[edi*4] lea ebx, ds:0[edi*8] mov [ebp+var_8], eax loc_7F80AD8C: ; CODE XREF: sub_7F80AB5D+285j ; sub_7F80AB5D+2A8j mov eax, edi sub ebx, 8 sub [ebp+var_8], 4 dec edi test eax, eax jz short loc_7F80AE09 loc_7F80AD9A: ; CODE XREF: sub_7F80AB5D+280j mov eax, [ebp+var_14] push esi mov edx, [ebp+var_10] mov eax, [eax] add eax, ebx lea ecx, [eax+4] push ecx push eax mov ecx, [edx] mov eax, [ebp+var_8] push dword ptr [ecx+eax] mov ecx, [ebp+arg_8] push dword ptr [ecx+4] push [ebp+var_18] push [ebp+arg_4] push [ebp+arg_0] call sub_7F80AEC7 test eax, eax jz short loc_7F80ADE4 push dword ptr [ebp+arg_10] ; __int16 push eax ; dwInitParam push [ebp+arg_0] ; int call sub_7F80B3E3 test eax, eax jz short loc_7F80AE0E cmp eax, 1 jz short loc_7F80AD9A cmp eax, 2 jz short loc_7F80AD8C loc_7F80ADE4: ; CODE XREF: sub_7F80AB5D+26Bj mov eax, [esi] test eax, eax jz short loc_7F80ADEC mov esi, eax loc_7F80ADEC: ; CODE XREF: sub_7F80AB5D+28Bj mov ecx, [ebp+arg_0] push dword ptr [ecx+58h] mov eax, [ecx+54h] inc eax push eax mov [ecx+54h], eax push dword ptr [ecx+30h] call dword ptr [ecx+2Ch] mov [ebp+var_4], eax test eax, eax jz short loc_7F80AD8C jmp short loc_7F80AE0E ; --------------------------------------------------------------------------- loc_7F80AE09: ; CODE XREF: sub_7F80AB5D+23Bj mov eax, [ebp+arg_C] mov [eax], esi loc_7F80AE0E: ; CODE XREF: sub_7F80AB5D+4Ej ; sub_7F80AB5D+5Cj ... push [ebp+var_18] call UlRelease@4 mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80AB5D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80AE22 proc near ; CODE XREF: sub_7F80AB5D+154p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_4] push esi mov ecx, [ebp+arg_8] push edi mov ebx, [ebp+arg_0] mov [ebp+var_4], 0 push eax mov eax, [ecx+10h] shl eax, 3 push eax call dword ptr [ebx+18h] mov esi, eax test esi, esi jnz short loc_7F80AEB3 xor edx, edx mov eax, [ebp+arg_8] mov ecx, [eax+10h] mov ebx, ecx dec ecx test ebx, ebx jz short loc_7F80AE91 lea esi, ds:0[ecx*8] mov [ebp+var_8], edx loc_7F80AE65: ; CODE XREF: sub_7F80AE22+6Dj mov eax, [ebp+arg_8] mov eax, [eax+18h] add eax, esi cmp dword ptr [eax], 0 jz short loc_7F80AE87 mov edi, [eax] mov ebx, [ebp+var_4] mov eax, [eax+4] add ebx, [ebp+var_8] add [ebp+var_8], 8 inc edx mov [ebx], edi mov [ebx+4], eax loc_7F80AE87: ; CODE XREF: sub_7F80AE22+4Ej mov eax, ecx sub esi, 8 dec ecx test eax, eax jnz short loc_7F80AE65 loc_7F80AE91: ; CODE XREF: sub_7F80AE22+37j mov eax, [ebp+var_4] push 0 push 0 mov ecx, [ebp+arg_0] mov [ebp+var_C], edx push dword ptr [ecx+10h] mov [ebp+var_8], eax lea eax, [ebp+var_C] push eax mov eax, [ebp+arg_4] push eax mov ebx, [eax] call dword ptr [ebx+50h] mov esi, eax loc_7F80AEB3: ; CODE XREF: sub_7F80AE22+28j mov ebx, [ebp+arg_0] push [ebp+var_4] call dword ptr [ebx+20h] mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80AE22 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80AEC7 proc near ; CODE XREF: sub_7F80AB5D+264p var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 28h push ebx push esi push edi xor edi, edi mov ebx, [ebp+arg_0] mov [ebp+var_C], edi mov [ebp+var_10], edi mov [ebp+var_18], edi mov ecx, [ebx+50h] lea eax, [ebp+var_14] push eax lea edx, [ebp+var_C] push edx lea esi, [ebp+var_28] push esi lea eax, [ebp+var_18] push eax lea edx, [ebp+var_10] push edx mov esi, [ebp+arg_8] mov [ebp+var_8], edi mov [ebp+var_14], edi push [ebp+arg_10] push [ebp+arg_C] push esi push ecx call dword ptr [ecx+10h] mov [ebp+var_4], eax cmp eax, edi jnz loc_7F80B057 cmp [ebp+var_14], edi jnz short loc_7F80AF3B mov ecx, [ebx+24h] test ecx, ecx jz short loc_7F80AF3B lea eax, [ebp+var_C] lea edx, [ebp+var_28] push eax push edx push [ebp+var_10] push dword ptr [ebx+28h] call ecx mov [ebp+var_4], eax cmp eax, edi jnz loc_7F80B057 loc_7F80AF3B: ; CODE XREF: sub_7F80AEC7+50j ; sub_7F80AEC7+57j cmp [ebp+var_C], 0 jz short loc_7F80AF55 lea eax, [ebp+var_8] push eax push [ebp+var_C] push [ebp+var_28] push [ebp+var_10] push esi push ebx call sub_7F80B081 loc_7F80AF55: ; CODE XREF: sub_7F80AEC7+78j cmp [ebp+var_8], 0 jnz short loc_7F80AF8A cmp [ebp+var_14], 0 jnz short loc_7F80AF69 mov eax, [ebx+3Ch] mov ecx, [ebx+40h] jmp short loc_7F80AF6F ; --------------------------------------------------------------------------- loc_7F80AF69: ; CODE XREF: sub_7F80AEC7+98j mov eax, [ebx+44h] mov ecx, [ebx+48h] loc_7F80AF6F: ; CODE XREF: sub_7F80AEC7+A0j lea edx, [ebp+var_8] push edx push ecx push eax push [ebp+var_10] push esi push ebx call sub_7F80B081 mov [ebp+var_4], eax test eax, eax jnz loc_7F80B057 loc_7F80AF8A: ; CODE XREF: sub_7F80AEC7+92j xor esi, esi push esi push esi push [ebp+var_8] push offset dword_7F801910 push esi mov edx, [ebp+var_18] push dword ptr [ebx+10h] push esi push esi mov eax, [edx] push esi push [ebp+var_18] call dword ptr [eax+28h] mov [ebp+var_4], eax cmp eax, esi jnz loc_7F80B057 push esi mov eax, [ebp+var_8] mov edi, [eax] push [ebp+var_8] call dword ptr [edi+10h] mov [ebp+var_4], eax cmp eax, esi jnz loc_7F80B057 lea eax, [ebp+var_20] push eax push 0FFF0102h push [ebp+var_8] call HrGetOneProp@12 mov [ebp+var_4], eax cmp eax, esi jnz short loc_7F80B057 mov eax, [ebp+var_20] lea edx, [ebp+var_24] push edx mov ecx, [eax+8] push [ebp+arg_4] push ecx mov [ebp+var_1C], ecx call dword ptr [ebx+1Ch] mov [ebp+var_4], eax cmp eax, esi jz short loc_7F80B005 push [ebp+var_20] call dword ptr [ebx+20h] jmp short loc_7F80B057 ; --------------------------------------------------------------------------- loc_7F80B005: ; CODE XREF: sub_7F80AEC7+134j mov edx, [ebp+var_1C] mov eax, [ebp+var_20] mov edi, [ebp+var_24] mov ecx, edx shr ecx, 2 mov esi, [eax+0Ch] rep movsd mov ecx, edx and ecx, 3 rep movsb push [ebp+var_20] call dword ptr [ebx+20h] cmp [ebp+var_14], 0 jz short loc_7F80B047 push [ebp+arg_1C] push [ebp+var_24] push [ebp+var_1C] push [ebp+var_14] push [ebp+arg_4] push ebx call sub_7F80B28E mov [ebp+var_4], eax test eax, eax jnz short loc_7F80B057 loc_7F80B047: ; CODE XREF: sub_7F80AEC7+162j mov eax, [ebp+arg_14] mov ecx, [ebp+var_1C] mov edx, [ebp+var_24] mov [eax], ecx mov eax, [ebp+arg_18] mov [eax], edx loc_7F80B057: ; CODE XREF: sub_7F80AEC7+47j ; sub_7F80AEC7+6Ej ... push [ebp+var_10] call UlRelease@4 push [ebp+var_18] call UlRelease@4 push [ebp+var_8] call UlRelease@4 push [ebp+var_C] call dword ptr [ebx+20h] mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F80AEC7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B081 proc near ; CODE XREF: sub_7F80AEC7+89p ; sub_7F80AEC7+B3p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 4 push esi lea eax, [ebp+var_4] push edi xor esi, esi push eax mov [ebp+var_4], esi push esi mov eax, [ebp+arg_4] push [ebp+arg_10] mov edi, [eax] push [ebp+arg_C] push eax call dword ptr [edi+4Ch] mov edi, eax test edi, edi jnz short loc_7F80B0D9 mov ecx, [ebp+arg_8] cmp ecx, esi jz short loc_7F80B0CF push esi mov edx, [ebp+arg_0] push esi push [ebp+var_4] push offset dword_7F801910 push esi mov eax, [ecx] push dword ptr [edx+10h] push esi push esi push esi push ecx call dword ptr [eax+28h] mov edi, eax test edi, edi jl short loc_7F80B0D9 loc_7F80B0CF: ; CODE XREF: sub_7F80B081+2Cj mov ecx, [ebp+var_4] mov eax, [ebp+arg_14] mov [eax], ecx jmp short loc_7F80B0E1 ; --------------------------------------------------------------------------- loc_7F80B0D9: ; CODE XREF: sub_7F80B081+25j ; sub_7F80B081+4Cj push [ebp+var_4] call UlRelease@4 loc_7F80B0E1: ; CODE XREF: sub_7F80B081+56j mov eax, edi pop edi pop esi mov esp, ebp pop ebp retn 18h sub_7F80B081 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B0EB proc near ; CODE XREF: ScGetPABMigrationContext@52+1AAp var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 1Ch push ebx push esi push edi xor ebx, ebx mov edi, [ebp+arg_0] lea eax, [ebp+var_10] push eax mov [ebp+var_4], ebx mov ecx, [edi+14h] lea edx, [ebp+var_1C] push edx mov [ebp+var_C], ebx push ebx mov [ebp+var_8], ebx push offset dword_7F801348 mov esi, [ecx] push [ebp+arg_8] push [ebp+arg_4] push ecx call dword ptr [esi+38h] mov esi, eax test esi, esi jnz loc_7F80B1AC lea eax, [ebp+var_4] mov ecx, [ebp+var_10] push eax push ebx push ebx mov eax, [ecx] push offset dword_7F8018F0 push 3604000Dh push [ebp+var_10] call dword ptr [eax+1Ch] push [ebp+var_10] mov esi, eax call UlRelease@4 test esi, esi jnz short loc_7F80B1AC lea eax, [ebp+var_C] lea ecx, [ebp+var_18] push eax push ecx push offset Default push [ebp+var_4] push edi call sub_7F80B1CB mov esi, eax test esi, esi jnz short loc_7F80B1AC lea eax, [ebp+var_8] lea ecx, [ebp+var_14] push eax push ecx push offset aMapipdl ; "MAPIPDL" push [ebp+var_4] push edi call sub_7F80B1CB mov esi, eax test esi, esi jnz short loc_7F80B1AC mov ecx, [ebp+var_18] mov eax, [ebp+arg_C] mov edx, [ebp+var_C] mov ebx, [ebp+var_14] mov [eax], ecx mov ecx, [ebp+arg_10] mov eax, [ebp+arg_14] mov [ecx], edx mov ecx, [ebp+var_8] mov edx, [ebp+arg_18] mov [eax], ebx mov [edx], ecx jmp short loc_7F80B1B8 ; --------------------------------------------------------------------------- loc_7F80B1AC: ; CODE XREF: sub_7F80B0EB+38j ; sub_7F80B0EB+65j ... push [ebp+var_C] call dword ptr [edi+20h] push [ebp+var_8] call dword ptr [edi+20h] loc_7F80B1B8: ; CODE XREF: sub_7F80B0EB+BFj push [ebp+var_4] call UlRelease@4 mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch sub_7F80B0EB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B1CB proc near ; CODE XREF: sub_7F80B0EB+78p ; sub_7F80B0EB+94p var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 24h mov eax, 4 push ebx push esi mov ecx, 3002001Eh push edi xor esi, esi lea edx, [ebp+var_24] mov [ebp+var_4], esi mov [ebp+var_14], eax mov [ebp+var_24], ecx push esi mov [ebp+var_C], ecx push esi lea ecx, [ebp+var_14] push ecx mov edi, [ebp+arg_4] push edi mov [ebp+var_10], eax mov eax, [ebp+arg_8] mov [ebp+var_8], edx mov [ebp+var_1C], eax mov eax, [edi] call dword ptr [eax+34h] mov [ebp+var_8], eax cmp eax, esi jnz short loc_7F80B27A push esi mov eax, [edi] push offset unk_7F835438 push edi call dword ptr [eax+1Ch] mov [ebp+var_8], eax cmp eax, esi jnz short loc_7F80B27A lea eax, [ebp+var_4] mov ebx, [edi] push eax push esi push 1 push edi call dword ptr [ebx+4Ch] mov [ebp+var_8], eax cmp eax, esi jnz short loc_7F80B27A mov eax, [ebp+var_4] mov edi, [ebp+arg_0] mov ecx, [eax+0Ch] lea eax, [ebp+var_18] push eax mov ebx, [ecx+8] push ebx call dword ptr [edi+18h] mov [ebp+var_8], eax cmp eax, esi jnz short loc_7F80B27A mov eax, [ebp+var_4] mov edi, [ebp+var_18] mov ecx, [eax+0Ch] mov esi, [ecx+0Ch] mov ecx, ebx shr ecx, 2 rep movsd mov ecx, ebx and ecx, 3 rep movsb mov edx, [ebp+arg_C] mov eax, [ebp+arg_10] mov [edx], ebx mov ebx, [ebp+var_18] mov [eax], ebx loc_7F80B27A: ; CODE XREF: sub_7F80B1CB+44j ; sub_7F80B1CB+57j ... push [ebp+var_4] call FreeProws@4 mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80B1CB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B28E proc near ; CODE XREF: sub_7F80AAD1+21p ; sub_7F80AEC7+174p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 4 test eax, eax push edi jnz short loc_7F80B2AB lea eax, [ebp+var_4] push eax push 1Ch mov eax, [ebp+arg_0] call dword ptr [eax+18h] jmp short loc_7F80B2B8 ; --------------------------------------------------------------------------- loc_7F80B2AB: ; CODE XREF: sub_7F80B28E+Dj lea ecx, [ebp+var_4] push ecx push eax push 1Ch mov eax, [ebp+arg_0] call dword ptr [eax+1Ch] loc_7F80B2B8: ; CODE XREF: sub_7F80B28E+1Bj mov edx, eax test edx, edx jnz short loc_7F80B2ED mov edi, [ebp+var_4] xor eax, eax mov ecx, 7 rep stosd mov ecx, [ebp+var_4] mov eax, [ebp+arg_8] mov [ecx+4], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_C] mov [ecx+8], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_10] mov [ecx+0Ch], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_14] mov [eax], ecx loc_7F80B2ED: ; CODE XREF: sub_7F80B28E+2Ej mov eax, edx pop edi mov esp, ebp pop ebp retn 18h sub_7F80B28E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B2F6 proc near ; CODE XREF: sub_7F80AB5D+10Fp ; sub_7F80AB5D+1E5p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov edx, [esp+arg_4] mov ebp, esp mov eax, edx push ebx push esi push edi mov ecx, [ebp+arg_0] xor edi, edi mov esi, [ebp+arg_8] test edx, edx jz short loc_7F80B323 loc_7F80B30E: ; CODE XREF: sub_7F80B2F6+2Bj lea ebx, [eax+edi] shr ebx, 1 cmp [esi+ebx*4], ecx jnb short loc_7F80B31D lea edi, [ebx+1] jmp short loc_7F80B31F ; --------------------------------------------------------------------------- loc_7F80B31D: ; CODE XREF: sub_7F80B2F6+20j mov eax, ebx loc_7F80B31F: ; CODE XREF: sub_7F80B2F6+25j cmp edi, eax jb short loc_7F80B30E loc_7F80B323: ; CODE XREF: sub_7F80B2F6+16j mov eax, [ebp+arg_C] test eax, eax jz short loc_7F80B32C mov [eax], edi loc_7F80B32C: ; CODE XREF: sub_7F80B2F6+32j cmp edx, edi jbe short loc_7F80B33A mov eax, 1 cmp [esi+edi*4], ecx jz short loc_7F80B33C loc_7F80B33A: ; CODE XREF: sub_7F80B2F6+38j xor eax, eax loc_7F80B33C: ; CODE XREF: sub_7F80B2F6+42j pop edi pop esi pop ebx pop ebp retn 10h sub_7F80B2F6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80B343(int, LPCSTR lpString, __int16) sub_7F80B343 proc near ; CODE XREF: sub_7F80B3E3+B1p Text = byte ptr -500h Buffer = byte ptr -100h arg_0 = dword ptr 8 lpString = dword ptr 0Ch arg_B = byte ptr 13h push ebp inc dword_7F833FB0 mov ebp, esp sub esp, 500h push esi mov esi, [ebp+arg_0] cmp dword ptr [esi+5Ch], 0 jz short loc_7F80B37A test [ebp+arg_B], 80h jz short loc_7F80B37A mov eax, [ebp+10h] and eax, 20000000h shr eax, 1Dh push eax ; int push [ebp+lpString] ; lpString call sub_7F80549A test eax, eax jnz short loc_7F80B3D7 loc_7F80B37A: ; CODE XREF: sub_7F80B343+17j ; sub_7F80B343+1Dj push 100h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1005h ; uID push dword ptr [esi+0Ch] ; hInstance call ds:LoadStringA lea ecx, [ebp+Buffer] lea eax, [ebp+Text] push ecx push [ebp+lpString] push offset aSS_0 ; "%s%s\r\n" push eax ; LPSTR call ds:wsprintfA add esp, 10h lea ecx, [ebp+Text] push 2001h ; uType push offset Caption ; lpCaption push ecx ; lpText push dword ptr [esi+10h] ; hWnd call ds:MessageBoxA cmp eax, 2 mov eax, 0 jz short loc_7F80B3DC loc_7F80B3D7: ; CODE XREF: sub_7F80B343+35j mov eax, 1 loc_7F80B3DC: ; CODE XREF: sub_7F80B343+92j pop esi mov esp, ebp pop ebp retn 0Ch sub_7F80B343 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80B3E3(int, LPARAM dwInitParam, __int16) sub_7F80B3E3 proc near ; CODE XREF: sub_7F80A9B6+49p ; sub_7F80AAD1+31p ... String = byte ptr -680h Buffer = byte ptr -280h var_80 = byte ptr -80h arg_0 = dword ptr 8 dwInitParam = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov ebp, esp sub esp, 680h mov [ebp+String], 0 push ebx push esi push edi mov esi, [ebp+arg_0] mov edi, 2 cmp dword ptr [esi+60h], 0 jz short loc_7F80B43D push 200h ; cchBufferMax lea eax, [ebp+Buffer] push eax ; lpBuffer push 1534h ; uID push dword ptr [esi+0Ch] ; hInstance call ds:LoadStringA lea edx, [ebp+Buffer] lea eax, [ebp+String] push dword ptr [esi+60h] push edx push offset aSS_1 ; "%s: %s\r\n" push eax ; LPSTR call ds:wsprintfA add esp, 10h loc_7F80B43D: ; CODE XREF: sub_7F80B3E3+1Fj push 80h ; cchBufferMax lea eax, [ebp+var_80] push eax ; lpBuffer push 1107h ; uID push dword ptr [esi+0Ch] ; hInstance call ds:LoadStringA mov ebx, [ebp+dwInitParam] lea eax, [ebp+var_80] push ebx lea ecx, [ebp+Buffer] push eax ; LPCSTR push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+Buffer] lea edx, [ebp+String] push ecx push edx push offset aSS_0 ; "%s%s\r\n" push edx ; LPSTR call ds:wsprintfA add esp, 10h lea edx, [ebp+String] push dword ptr [ebp+arg_8] ; __int16 push edx ; lpString push esi ; int call sub_7F80B343 test eax, eax jnz short loc_7F80B4A1 xor edi, edi jmp short loc_7F80B4D6 ; --------------------------------------------------------------------------- loc_7F80B4A1: ; CODE XREF: sub_7F80B3E3+B8j cmp ebx, 80040115h jz short loc_7F80B4B9 cmp ebx, 80040116h jz short loc_7F80B4B9 cmp ebx, 8004010Dh jnz short loc_7F80B4D6 loc_7F80B4B9: ; CODE XREF: sub_7F80B3E3+C4j ; sub_7F80B3E3+CCj push ebx ; dwInitParam push offset DialogFunc ; lpDialogFunc push dword ptr [esi+10h] ; hWndParent push 41Ah ; lpTemplateName push dword ptr [esi+0Ch] ; hInstance call ds:DialogBoxParamA cmp eax, 1 sbb edi, edi inc edi loc_7F80B4D6: ; CODE XREF: sub_7F80B3E3+BCj ; sub_7F80B3E3+D4j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80B3E3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B4E1 proc near ; CODE XREF: ScGetPABMigrationContext@52+10Ap var_48 = byte ptr -48h var_30 = byte ptr -30h var_18 = byte ptr -18h var_14 = byte ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 48h push ebx lea eax, [ebp+var_4] push esi xor ebx, ebx push edi mov esi, [ebp+arg_0] push eax mov [ebp+var_4], ebx push 28h call dword ptr [esi+18h] mov edi, eax test edi, edi jnz loc_7F80B593 mov edi, [ebp+var_4] xor eax, eax mov ecx, 0Ah rep stosd mov eax, [ebp+var_4] mov dword ptr [eax], offset sub_7F80B5DE mov eax, [ebp+var_4] mov dword ptr [eax+4], offset sub_7F80B608 mov eax, [ebp+var_4] mov dword ptr [eax+8], offset sub_7F80B6E7 mov eax, [ebp+var_4] mov dword ptr [eax+0Ch], offset sub_7F80B766 mov eax, [ebp+var_4] mov dword ptr [eax+10h], offset sub_7F80B80E mov edx, [esi+18h] mov eax, [ebp+var_4] mov [eax+14h], edx mov eax, [ebp+var_4] mov edi, [esi+1Ch] lea ecx, [ebp+var_48] push ecx mov [eax+18h], edi mov edx, [esi+20h] mov eax, [ebp+var_4] mov [eax+1Ch], edx call sub_7F80FD0E lea ecx, [ebp+var_30] push ecx call sub_7F80FCE4 lea ecx, [ebp+var_48] lea edx, [ebp+var_30] mov [ebp+var_10], ecx mov [ebp+var_C], edx lea ecx, [ebp+var_10] mov [ebp+var_8], ebx push ecx call sub_7F8173E6 test eax, eax jz short loc_7F80B5A6 push eax call sub_7F80F8B4 mov edi, eax loc_7F80B593: ; CODE XREF: sub_7F80B4E1+1Ej ; sub_7F80B4E1+F1j push [ebp+var_4] call sub_7F80B5DE loc_7F80B59B: ; CODE XREF: sub_7F80B4E1+FBj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F80B5A6: ; CODE XREF: sub_7F80B4E1+A8j mov eax, [ebp+var_4] lea ecx, [ebp+var_14] lea edx, [ebp+var_18] mov dword ptr [eax+20h], 1 mov eax, [ebp+var_4] add eax, 24h push eax push ecx push edx push 20h push [ebp+arg_8] push 0 push [ebp+arg_4] call sub_7F80F91C mov edi, eax test edi, edi jnz short loc_7F80B593 mov ecx, [ebp+var_4] mov eax, [ebp+arg_C] mov [eax], ecx jmp short loc_7F80B59B sub_7F80B4E1 endp ; =============== S U B R O U T I N E ======================================= sub_7F80B5DE proc near ; CODE XREF: sub_7F80B4E1+B5p ; DATA XREF: sub_7F80B4E1+33o arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_7F80B604 lea eax, [esi+24h] cmp dword ptr [eax], 0 jz short loc_7F80B5F5 push eax call sub_7F820C0E loc_7F80B5F5: ; CODE XREF: sub_7F80B5DE+Fj cmp dword ptr [esi+20h], 0 jz short loc_7F80B600 call sub_7F81762E loc_7F80B600: ; CODE XREF: sub_7F80B5DE+1Bj push esi call dword ptr [esi+1Ch] loc_7F80B604: ; CODE XREF: sub_7F80B5DE+7j pop esi retn 4 sub_7F80B5DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B608 proc near ; DATA XREF: sub_7F80B4E1+3Co var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi xor ebx, ebx push edi mov esi, [ebp+arg_0] push eax mov [ebp+var_4], ebx push 0Ch call dword ptr [esi+14h] mov edi, eax test edi, edi jnz loc_7F80B6D6 mov eax, [ebp+var_4] add eax, 8 push eax push [ebp+var_4] push 64694881h push [ebp+var_4] push esi call sub_7F80B766 mov edi, eax test edi, edi jnz loc_7F80B6D6 mov eax, [ebp+var_4] cmp [eax], ebx jbe short loc_7F80B680 xor ecx, ecx loc_7F80B657: ; CODE XREF: sub_7F80B608+76j mov eax, [ebp+var_4] mov edx, [eax+8] cmp byte ptr [edx+ecx], 70h jz short loc_7F80B675 dec dword ptr [eax] mov eax, [ebp+var_4] mov edx, [eax+8] mov edi, [eax] mov eax, [edx+edi*4] mov [edx+ecx], eax jmp short loc_7F80B679 ; --------------------------------------------------------------------------- loc_7F80B675: ; CODE XREF: sub_7F80B608+59j add ecx, 4 inc ebx loc_7F80B679: ; CODE XREF: sub_7F80B608+6Bj mov eax, [ebp+var_4] cmp [eax], ebx ja short loc_7F80B657 loc_7F80B680: ; CODE XREF: sub_7F80B608+4Bj mov eax, [ebp+var_4] add eax, 4 push eax mov eax, [ebp+var_4] push [ebp+var_4] mov eax, [eax] shl eax, 2 push eax call dword ptr [esi+18h] mov edi, eax test edi, edi jnz short loc_7F80B6D6 mov eax, [ebp+var_4] mov ecx, [eax] mov edi, [eax+4] shl ecx, 2 xor eax, eax shr ecx, 2 rep stosd push [ebp+var_4] push esi call sub_7F80BBF6 mov edi, eax test edi, edi jnz short loc_7F80B6D6 push [ebp+var_4] push esi call sub_7F80BD6C mov edi, eax test edi, edi jnz short loc_7F80B6D6 mov ecx, [ebp+var_4] mov eax, [ebp+arg_4] mov [eax], ecx jmp short loc_7F80B6DC ; --------------------------------------------------------------------------- loc_7F80B6D6: ; CODE XREF: sub_7F80B608+1Ej ; sub_7F80B608+40j ... push [ebp+var_4] call dword ptr [esi+1Ch] loc_7F80B6DC: ; CODE XREF: sub_7F80B608+CCj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80B608 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B6E7 proc near ; DATA XREF: sub_7F80B4E1+46o var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx mov eax, [ebp+arg_4] mov [ebp+var_8], 0 push esi push edi xor esi, esi lea edi, [eax-1] test eax, eax jz short loc_7F80B74A mov eax, [ebp+arg_8] lea ebx, [eax+edi*4] loc_7F80B709: ; CODE XREF: sub_7F80B6E7+61j push 0 lea eax, [ebp+var_C] push 0 mov ecx, [ebp+arg_0] push eax push 0 push ebx push dword ptr [ecx+24h] call sub_7F81197C test eax, eax jnz short loc_7F80B75B lea eax, [ebp+var_2] sub ebx, 4 push eax push 0 push [ebp+var_C] call sub_7F811C6F lea ecx, [ebp+var_C] push ecx call sub_7F811B7E movsx ecx, [ebp+var_2] add esi, ecx mov eax, edi dec edi test eax, eax jnz short loc_7F80B709 loc_7F80B74A: ; CODE XREF: sub_7F80B6E7+1Aj mov eax, [ebp+arg_C] mov [eax], esi loc_7F80B74F: ; CODE XREF: sub_7F80B6E7+7Dj mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F80B75B: ; CODE XREF: sub_7F80B6E7+3Aj push eax call sub_7F80F8B4 mov [ebp+var_8], eax jmp short loc_7F80B74F sub_7F80B6E7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B766 proc near ; CODE XREF: sub_7F80B608+37p ; DATA XREF: sub_7F80B4E1+50o var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi xor esi, esi lea eax, [ebp+var_8] push esi lea ecx, [ebp+arg_8] push esi mov ebx, [ebp+arg_0] push eax mov [ebp+var_8], esi push esi mov [ebp+var_C], esi push ecx push dword ptr [ebx+24h] call sub_7F81197C test eax, eax jz short loc_7F80B79A push eax call sub_7F80F8B4 mov esi, eax jmp short loc_7F80B7F5 ; --------------------------------------------------------------------------- loc_7F80B79A: ; CODE XREF: sub_7F80B766+28j lea eax, [ebp+var_2] push eax push 0 push [ebp+var_8] call sub_7F811C6F cmp [ebp+var_2], 0 jle short loc_7F80B7E4 lea eax, [ebp+var_C] push eax push [ebp+arg_4] movsx eax, [ebp+var_2] shl eax, 2 push eax call dword ptr [ebx+18h] mov esi, eax test esi, esi jnz short loc_7F80B7F5 lea eax, [ebp+var_2] push eax push [ebp+var_C] push [ebp+var_8] call sub_7F811EA7 test eax, eax jz short loc_7F80B7E4 push eax call sub_7F80F8B4 mov esi, eax jmp short loc_7F80B7F5 ; --------------------------------------------------------------------------- loc_7F80B7E4: ; CODE XREF: sub_7F80B766+47j ; sub_7F80B766+72j mov eax, [ebp+arg_C] mov edx, [ebp+var_C] movsx ecx, [ebp+var_2] mov [eax], ecx mov ecx, [ebp+arg_10] mov [ecx], edx loc_7F80B7F5: ; CODE XREF: sub_7F80B766+32j ; sub_7F80B766+5Fj ... cmp [ebp+var_8], 0 jz short loc_7F80B804 lea eax, [ebp+var_8] push eax call sub_7F811B7E loc_7F80B804: ; CODE XREF: sub_7F80B766+93j mov eax, esi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80B766 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80B80E proc near ; DATA XREF: sub_7F80B4E1+5Ao var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_8 = dword ptr 10h arg_C = byte ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h push ebp mov ebp, esp sub esp, 2Ch push ebx push esi push edi xor edi, edi mov [ebp+var_14], edi mov [ebp+var_1C], edi push edi mov [ebp+var_20], edi push edi lea eax, [ebp+var_18] push eax lea ecx, [ebp+arg_C] push edi mov esi, [ebp+arg_0] push ecx mov [ebp+var_18], edi mov [ebp+var_10], edi mov [ebp+var_4], edi push [ebp+arg_8] push dword ptr [esi+24h] call sub_7F81028C test eax, eax jz short loc_7F80B855 push eax call sub_7F80F8B4 mov edi, eax jmp loc_7F80B9B0 ; --------------------------------------------------------------------------- loc_7F80B855: ; CODE XREF: sub_7F80B80E+38j lea eax, [ebp+var_8] push eax push 2800Ch push [ebp+var_18] call sub_7F810E3F test eax, eax jz short loc_7F80B877 push eax call sub_7F80F8B4 mov edi, eax jmp loc_7F80B9B0 ; --------------------------------------------------------------------------- loc_7F80B877: ; CODE XREF: sub_7F80B80E+5Aj lea eax, [ebp+var_10] push eax push [ebp+var_8] call dword ptr [esi+14h] mov edi, eax test edi, edi jnz loc_7F80B9B0 lea eax, [ebp+var_8] push eax push [ebp+var_10] push 2800Ch push [ebp+var_18] call sub_7F810E8D test eax, eax jz short loc_7F80B8B0 push eax call sub_7F80F8B4 mov edi, eax jmp loc_7F80B9B0 ; --------------------------------------------------------------------------- loc_7F80B8B0: ; CODE XREF: sub_7F80B80E+93j lea eax, [ebp+var_14] mov ebx, offset dword_7F801990 push eax push 0 push dword ptr [esi+1Ch] push dword ptr [esi+18h] push dword ptr [esi+14h] push ebx call CreateIProp@24 mov edi, eax test edi, edi jnz loc_7F80B9A0 lea eax, [ebp+var_1C] push eax push 0 push dword ptr [esi+1Ch] push dword ptr [esi+18h] push dword ptr [esi+14h] push ebx call CreateIProp@24 mov edi, eax test edi, edi jnz loc_7F80B9A0 push [ebp+var_10] call sub_7F80C1B6 lea ecx, [ebp+var_4] mov [ebp+var_8], eax shl eax, 4 push ecx push eax mov [ebp+var_24], eax call dword ptr [esi+14h] mov edi, eax test edi, edi jnz loc_7F80B9A0 mov eax, [ebp+var_8] dec eax cmp [ebp+var_8], 0 mov [ebp+var_C], eax jz loc_7F80BA97 shl eax, 4 mov [ebp+var_28], eax loc_7F80B92D: ; CODE XREF: sub_7F80B80E+283j push [ebp+var_C] push [ebp+var_10] mov ebx, [ebp+var_4] add ebx, [ebp+var_28] call sub_7F80C1C4 mov ecx, [eax] test ecx, ecx jz short loc_7F80B982 cmp ecx, 4 jz loc_7F80B9D8 cmp ecx, 5 jz loc_7F80B9E0 cmp ecx, 0Ah jz loc_7F80BA13 cmp ecx, 3000h jz loc_7F80BA1E cmp ecx, 0C001h jz loc_7F80BA57 mov dword ptr [ebx], 1 jmp loc_7F80BA85 ; --------------------------------------------------------------------------- loc_7F80B982: ; CODE XREF: sub_7F80B80E+134j mov dword ptr [ebx], 3001001Eh loc_7F80B988: ; CODE XREF: sub_7F80B80E+1D0j ; sub_7F80B80E+20Bj add ebx, 8 push ebx push eax push [ebp+var_4] push esi call sub_7F80BB96 mov edi, eax test edi, edi jz loc_7F80BA85 loc_7F80B9A0: ; CODE XREF: sub_7F80B80E+C0j ; sub_7F80B80E+DFj ... push [ebp+var_1C] call UlRelease@4 push [ebp+var_14] call UlRelease@4 loc_7F80B9B0: ; CODE XREF: sub_7F80B80E+42j ; sub_7F80B80E+64j ... push [ebp+var_4] call dword ptr [esi+1Ch] push [ebp+var_10] call dword ptr [esi+1Ch] cmp [ebp+var_18], 0 jz short loc_7F80B9CD push 0 lea eax, [ebp+var_18] push eax call sub_7F810922 loc_7F80B9CD: ; CODE XREF: sub_7F80B80E+1B2j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 24h ; --------------------------------------------------------------------------- loc_7F80B9D8: ; CODE XREF: sub_7F80B80E+139j mov dword ptr [ebx], 3003001Eh jmp short loc_7F80B988 ; --------------------------------------------------------------------------- loc_7F80B9E0: ; CODE XREF: sub_7F80B80E+142j mov dword ptr [ebx], 3002001Eh add ebx, 8 push ebx push eax push [ebp+var_4] push esi call sub_7F80BB96 mov edi, eax test edi, edi jnz short loc_7F80B9A0 push offset aMtp ; "MTP" push dword ptr [ebx] ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F80BA85 mov dword ptr [ebx], offset aSmtp ; "SMTP" jmp short loc_7F80BA85 ; --------------------------------------------------------------------------- loc_7F80BA13: ; CODE XREF: sub_7F80B80E+14Bj mov dword ptr [ebx], 3A20001Eh jmp loc_7F80B988 ; --------------------------------------------------------------------------- loc_7F80BA1E: ; CODE XREF: sub_7F80B80E+157j mov dword ptr [ebx], 1 cmp dword ptr [eax+1Ch], 4 jnz short loc_7F80BA85 lea eax, [ebp+var_2C] lea ecx, [ebp+var_20] mov [ebp+var_2C], 4 push eax push ecx push 80000h push [ebp+var_18] call sub_7F810E8D test eax, eax jz short loc_7F80BA85 push eax call sub_7F80F8B4 mov edi, eax jmp loc_7F80B9A0 ; --------------------------------------------------------------------------- loc_7F80BA57: ; CODE XREF: sub_7F80B80E+163j mov dword ptr [ebx], 3003001Eh add ebx, 8 push ebx push [ebp+var_4] push 1000h call dword ptr [esi+18h] mov edi, eax test edi, edi jnz loc_7F80B9A0 push 1000h push dword ptr [ebx] push [ebp+var_10] call sub_7F80BFB5 loc_7F80BA85: ; CODE XREF: sub_7F80B80E+16Fj ; sub_7F80B80E+18Cj ... sub [ebp+var_28], 10h mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jnz loc_7F80B92D loc_7F80BA97: ; CODE XREF: sub_7F80B80E+113j push [ebp+var_4] push [ebp+var_8] push [ebp+var_14] call sub_7F80BE69 mov edi, eax test edi, edi jnz loc_7F80B9A0 push [ebp+var_4] push [ebp+var_8] push [ebp+var_14] call sub_7F80BF60 push 0 mov eax, [ebp+var_14] push [ebp+var_4] push [ebp+var_8] mov ebx, [eax] push [ebp+var_14] call dword ptr [ebx+20h] mov edi, eax test edi, edi jnz loc_7F80B9A0 mov eax, [ebp+var_8] mov ebx, [ebp+var_24] mov [ebp+var_C], eax loc_7F80BAE3: ; CODE XREF: sub_7F80B80E+303j ; sub_7F80B80E+31Dj ... mov eax, [ebp+var_C] sub ebx, 10h dec [ebp+var_C] test eax, eax jz short loc_7F80BB51 push [ebp+var_C] push [ebp+var_10] mov edi, [ebp+var_4] call sub_7F80C1C4 add edi, ebx mov ecx, [eax] test ecx, ecx jz short loc_7F80BB13 cmp ecx, 9 jz short loc_7F80BB32 mov dword ptr [edi], 1 jmp short loc_7F80BAE3 ; --------------------------------------------------------------------------- loc_7F80BB13: ; CODE XREF: sub_7F80B80E+2F6j mov dword ptr [edi], 3001001Eh add edi, 8 push edi push eax push [ebp+var_4] push esi call sub_7F80BB96 mov edi, eax test edi, edi jz short loc_7F80BAE3 jmp loc_7F80B9A0 ; --------------------------------------------------------------------------- loc_7F80BB32: ; CODE XREF: sub_7F80B80E+2FBj mov dword ptr [edi], 3004001Eh add edi, 8 push edi push eax push [ebp+var_4] push esi call sub_7F80BB96 mov edi, eax test edi, edi jz short loc_7F80BAE3 jmp loc_7F80B9A0 ; --------------------------------------------------------------------------- loc_7F80BB51: ; CODE XREF: sub_7F80B80E+2E0j xor ebx, ebx mov edx, [ebp+var_1C] push ebx mov eax, [edx] push [ebp+var_4] push [ebp+var_8] push [ebp+var_1C] call dword ptr [eax+20h] mov edi, eax test edi, edi jnz loc_7F80B9A0 mov ecx, [ebp+var_14] mov eax, [ebp+arg_10] mov edx, [ebp+var_1C] mov [eax], ecx mov ecx, [ebp+arg_14] mov eax, [ebp+arg_18] mov [ecx], edx mov edx, [ebp+arg_1C] mov ecx, [ebp+var_20] mov [eax], ebx mov eax, [ebp+arg_20] mov [edx], ebx mov [eax], ecx jmp loc_7F80B9B0 sub_7F80B80E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BB96 proc near ; CODE XREF: sub_7F80B80E+183p ; sub_7F80B80E+1E1p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp push ebx push esi push edi mov ebx, [ebp+arg_8] mov ecx, [ebx+4] test ecx, ecx jz short loc_7F80BBB8 cmp [ecx+ebx+7], al jnz short loc_7F80BBB8 add ebx, 8 mov ecx, [ebp+arg_C] mov [ecx], ebx jmp short loc_7F80BBEF ; --------------------------------------------------------------------------- loc_7F80BBB8: ; CODE XREF: sub_7F80BB96+10j ; sub_7F80BB96+16j inc ecx mov eax, [ebp+arg_0] push [ebp+arg_C] push [ebp+arg_4] push ecx call dword ptr [eax+18h] test eax, eax jnz short loc_7F80BBEF mov ecx, [ebp+arg_C] mov edx, [ebx+4] lea esi, [ebx+8] mov edi, [ecx] mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb mov ecx, [ebp+arg_C] mov ebx, [ebx+4] mov edx, [ecx] mov byte ptr [edx+ebx], 0 loc_7F80BBEF: ; CODE XREF: sub_7F80BB96+20j ; sub_7F80BB96+32j pop edi pop esi pop ebx pop ebp retn 10h sub_7F80BB96 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BBF6 proc near ; CODE XREF: sub_7F80B608+AAp nSize = dword ptr -18h lpReturnedString= dword ptr -14h ReturnedString = byte ptr -10h var_F = byte ptr -0Fh var_E = byte ptr -0Eh var_C = dword ptr -0Ch var_8 = dword ptr -8 lpBuffer = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 18h push ebx lea eax, [ebp+lpBuffer] push esi push edi xor esi, esi push eax mov edi, 104h mov ebx, [ebp+arg_0] push edi mov [ebp+lpBuffer], esi call dword ptr [ebx+14h] mov [ebp+var_8], eax cmp eax, esi jnz loc_7F80BD57 push edi ; uSize push [ebp+lpBuffer] ; lpBuffer call ds:GetWindowsDirectoryA mov [ebp+var_C], eax cmp eax, esi jnz short loc_7F80BC42 call ds:GetLastError mov [ebp+var_8], 8004010Eh jmp loc_7F80BD57 ; --------------------------------------------------------------------------- loc_7F80BC42: ; CODE XREF: sub_7F80BBF6+38j mov eax, [ebp+var_C] add eax, [ebp+lpBuffer] cmp byte ptr [eax-1], 5Ch jz short loc_7F80BC54 mov byte ptr [eax], 5Ch inc [ebp+var_C] loc_7F80BC54: ; CODE XREF: sub_7F80BBF6+56j push offset aMsmailpv_ini ; "MSMAILPV.INI" mov eax, [ebp+lpBuffer] add eax, [ebp+var_C] push eax ; lpString1 call ds:lstrcpyA lea ecx, [ebp+nSize] push ecx ; int push [ebp+lpBuffer] ; lpFileName call sub_7F80BE17 test eax, eax jnz loc_7F80BD50 lea eax, [ebp+lpReturnedString] mov esi, [ebp+arg_4] push eax mov ebx, [ebp+arg_0] push esi push [ebp+nSize] call dword ptr [ebx+18h] mov [ebp+var_8], eax test eax, eax jnz loc_7F80BD57 push [ebp+lpBuffer] ; lpFileName push [ebp+nSize] ; nSize push [ebp+lpReturnedString] ; lpReturnedString push offset AppName ; "Transport" call ds:GetPrivateProfileSectionA mov ebx, [ebp+lpReturnedString] cmp byte ptr [ebx], 0 jz loc_7F80BD57 loc_7F80BCB6: ; CODE XREF: sub_7F80BBF6+152j lea edi, [ebp+ReturnedString] xor eax, eax stosd push 3Dh push ebx call SzFindCh@8 mov byte ptr [eax], 0 mov edi, eax inc edi push ebx push offset aMsmailSFiles_i ; "MSMAIL\\%s\\FILES.INI" mov eax, [ebp+lpBuffer] add eax, [ebp+var_C] push eax ; LPSTR call ds:wsprintfA add esp, 0Ch lea edx, [ebp+ReturnedString] push [ebp+lpBuffer] ; lpFileName push 4 ; nSize push edx ; lpReturnedString push offset Default ; lpDefault push offset KeyName ; "PABID" push offset AppName ; "Transport" call ds:GetPrivateProfileStringA movzx ecx, [ebp+var_E] movzx eax, [ebp+ReturnedString] shl ecx, 10h or ecx, eax mov edx, [esi] movzx eax, [ebp+var_F] shl ecx, 8 shl eax, 10h or ecx, eax and cl, 70h or cl, 70h loc_7F80BD1F: ; CODE XREF: sub_7F80BBF6+136j ; sub_7F80BBF6+13Fj mov eax, edx dec edx test eax, eax jz short loc_7F80BD3A mov eax, [esi+8] cmp [eax+edx*4], ecx jnz short loc_7F80BD1F mov eax, [esi+4] cmp dword ptr [eax+edx*4], 0 jnz short loc_7F80BD1F mov [eax+edx*4], edi loc_7F80BD3A: ; CODE XREF: sub_7F80BBF6+12Ej push edi ; lpString call ds:lstrlenA lea ebx, [edi+eax+1] cmp byte ptr [ebx], 0 jnz loc_7F80BCB6 jmp short loc_7F80BD57 ; --------------------------------------------------------------------------- loc_7F80BD50: ; CODE XREF: sub_7F80BBF6+7Ej mov [ebp+var_8], 0 loc_7F80BD57: ; CODE XREF: sub_7F80BBF6+23j ; sub_7F80BBF6+47j ... mov ebx, [ebp+arg_0] push [ebp+lpBuffer] call dword ptr [ebx+1Ch] mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80BBF6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BD6C proc near ; CODE XREF: sub_7F80B608+B9p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx lea eax, [ebp+var_C] push esi push edi push eax mov esi, [ebp+arg_4] push esi mov ebx, [ebp+arg_0] mov eax, [esi] imul eax, 82h push eax call dword ptr [ebx+18h] mov [ebp+var_4], eax test eax, eax jnz short loc_7F80BE0B mov edi, [esi] mov eax, edi dec edi test eax, eax jz short loc_7F80BE0B mov eax, edi lea ebx, ds:0[edi*4] imul eax, 82h mov [ebp+var_8], eax loc_7F80BDAE: ; CODE XREF: sub_7F80BD6C+92j mov eax, [esi+4] cmp dword ptr [eax+ebx], 0 jnz short loc_7F80BDEF push 0 lea eax, [ebp+var_10] push eax mov ecx, [esi+8] mov [ebp+var_10], 82h mov eax, [ebp+var_C] add eax, [ebp+var_8] push eax mov eax, [ebp+arg_0] push dword ptr [ecx+ebx] push dword ptr [eax+24h] call sub_7F81B3E4 test eax, eax jnz short loc_7F80BE02 mov eax, [ebp+var_C] mov ecx, [esi+4] add eax, [ebp+var_8] add eax, 2 mov [ecx+ebx], eax loc_7F80BDEF: ; CODE XREF: sub_7F80BD6C+49j mov eax, edi sub ebx, 4 sub [ebp+var_8], 82h dec edi test eax, eax jnz short loc_7F80BDAE jmp short loc_7F80BE0B ; --------------------------------------------------------------------------- loc_7F80BE02: ; CODE XREF: sub_7F80BD6C+72j push eax call sub_7F80F8B4 mov [ebp+var_4], eax loc_7F80BE0B: ; CODE XREF: sub_7F80BD6C+25j ; sub_7F80BD6C+2Ej ... mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80BD6C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80BE17(LPCSTR lpFileName, int) sub_7F80BE17 proc near ; CODE XREF: sub_7F80BBF6+77p FindFileData = _WIN32_FIND_DATAA ptr -140h lpFileName = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 140h push esi lea eax, [ebp+FindFileData] xor esi, esi push eax ; lpFindFileData push [ebp+lpFileName] ; lpFileName call ds:FindFirstFileA cmp eax, 0FFFFFFFFh jnz short loc_7F80BE4E mov esi, 8004010Fh call ds:GetLastError sub eax, 2 cmp eax, 1 adc esi, 0FFFFFFFFh jmp short loc_7F80BE60 ; --------------------------------------------------------------------------- loc_7F80BE4E: ; CODE XREF: sub_7F80BE17+1Fj push eax ; hFindFile call ds:FindClose mov ecx, [ebp+FindFileData.nFileSizeLow] mov eax, [ebp+arg_4] mov [eax], ecx loc_7F80BE60: ; CODE XREF: sub_7F80BE17+35j mov eax, esi pop esi mov esp, ebp pop ebp retn 8 sub_7F80BE17 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BE69 proc near ; CODE XREF: sub_7F80B80E+292p var_34 = dword ptr -34h var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_14 = dword ptr -14h var_C = dword ptr -0Ch var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 34h push ebx push esi push edi xor ebx, ebx push 3002001Eh push [ebp+arg_4] push [ebp+arg_8] call PpropFindProp@12 test eax, eax jz loc_7F80BF55 push offset aFax ; "FAX" push dword ptr [eax+8] ; lpString1 call ds:lstrcmpiA test eax, eax jnz loc_7F80BF55 push 3003001Eh push [ebp+arg_4] push [ebp+arg_8] call PpropFindProp@12 mov esi, eax test esi, esi jz loc_7F80BF55 push 0Dh push dword ptr [esi+8] call SzFindCh@8 test eax, eax jz loc_7F80BF55 inc eax push 0Dh push eax mov [ebp+var_2C], eax call SzFindCh@8 test eax, eax jz short loc_7F80BF55 mov edi, eax push 0Dh inc eax push eax mov [ebp+var_1C], eax call SzFindCh@8 test eax, eax jz short loc_7F80BF55 push 0Dh mov [ebp+var_4], eax inc eax push eax mov [ebp+var_C], eax call SzFindCh@8 test eax, eax jz short loc_7F80BF55 mov [eax], bl mov eax, [ebp+var_4] mov [eax], bl mov [edi], bl mov ecx, [ebp+var_C] mov [esi+8], ecx mov ecx, [ebp+var_1C] mov edx, [ebp+var_2C] cmp byte ptr [edx], 1 sbb eax, eax and eax, 0C5E6FFE3h add eax, 3A19001Eh mov [ebp+var_34], eax push ebx cmp byte ptr [ecx], 1 lea ecx, [ebp+var_34] sbb eax, eax push ecx and eax, 0C5E9FFE3h push 3 add eax, 3A16001Eh mov [ebp+var_24], eax mov eax, [ebp+arg_0] push eax mov ebx, [eax] mov [ebp+var_14], 3A23001Eh call dword ptr [ebx+20h] mov ebx, eax loc_7F80BF55: ; CODE XREF: sub_7F80BE69+1Dj ; sub_7F80BE69+33j ... mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80BE69 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BF60 proc near ; CODE XREF: sub_7F80B80E+2AAp var_10 = dword ptr -10h var_8 = word ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h push esi push 3002001Eh push [ebp+arg_4] push [ebp+arg_8] call PpropFindProp@12 xor esi, esi test eax, eax jz short loc_7F80BFAC push offset aMs ; "MS" push dword ptr [eax+8] ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F80BFAC mov [ebp+var_8], si push esi lea eax, [ebp+var_10] push eax push 1 mov eax, [ebp+arg_0] push eax mov esi, [eax] mov [ebp+var_10], 3A40000Bh call dword ptr [esi+20h] mov esi, eax loc_7F80BFAC: ; CODE XREF: sub_7F80BF60+1Bj ; sub_7F80BF60+2Dj mov eax, esi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F80BF60 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80BFB5 proc near ; CODE XREF: sub_7F80B80E+272p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi push [ebp+arg_0] push 0C001h call sub_7F80C239 push eax push [ebp+arg_0] call sub_7F80C1C4 push eax xor esi, esi mov [ebp+var_4], eax call sub_7F80C1B6 mov [ebp+var_8], eax dec [ebp+arg_8] cmp eax, esi jle loc_7F80C098 loc_7F80BFED: ; CODE XREF: sub_7F80BFB5+DDj push esi push [ebp+var_4] call sub_7F80C1C4 push eax push [ebp+arg_0] call sub_7F80C0A9 test eax, eax jz loc_7F80C08C lea eax, [esi+1] push eax push [ebp+var_4] call sub_7F80C1C4 mov edi, eax lea ecx, [esi+2] push ecx add edi, 8 push [ebp+var_4] call sub_7F80C1C4 lea ebx, [eax+8] loc_7F80C027: ; CODE XREF: sub_7F80BFB5+D3j mov al, [ebx] inc ebx test al, al jz short loc_7F80C08C cmp al, 25h jz short loc_7F80C03F mov ecx, [ebp+arg_4] dec [ebp+arg_8] inc [ebp+arg_4] mov [ecx], al jmp short loc_7F80C084 ; --------------------------------------------------------------------------- loc_7F80C03F: ; CODE XREF: sub_7F80BFB5+7Bj mov al, [ebx] inc ebx movzx eax, al cmp eax, 25h jz short loc_7F80C051 cmp eax, 73h jz short loc_7F80C05F jmp short loc_7F80C084 ; --------------------------------------------------------------------------- loc_7F80C051: ; CODE XREF: sub_7F80BFB5+93j mov ecx, [ebp+arg_4] dec [ebp+arg_8] inc [ebp+arg_4] mov byte ptr [ecx], 25h jmp short loc_7F80C084 ; --------------------------------------------------------------------------- loc_7F80C05F: ; CODE XREF: sub_7F80BFB5+98j push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] push dword ptr [edi] call sub_7F80C1F7 push eax add edi, 4 call sub_7F80C18A mov ecx, [ebp+arg_4] sub [ebp+arg_8], eax add [ebp+arg_8], ecx mov [ebp+arg_4], eax loc_7F80C084: ; CODE XREF: sub_7F80BFB5+88j ; sub_7F80BFB5+9Aj ... cmp [ebp+arg_8], 0 jnz short loc_7F80C027 jmp short loc_7F80C098 ; --------------------------------------------------------------------------- loc_7F80C08C: ; CODE XREF: sub_7F80BFB5+4Cj ; sub_7F80BFB5+77j add esi, 3 cmp esi, [ebp+var_8] jl loc_7F80BFED loc_7F80C098: ; CODE XREF: sub_7F80BFB5+32j ; sub_7F80BFB5+D5j mov ecx, [ebp+arg_4] pop edi mov eax, ecx pop esi pop ebx mov byte ptr [ecx], 0 mov esp, ebp pop ebp retn 0Ch sub_7F80BFB5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C0A9 proc near ; CODE XREF: sub_7F80BFB5+45p ; sub_7F80C0A9+67p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ebx push esi push edi mov esi, [ebp+arg_4] mov eax, [esi] cmp eax, 0F003h jz short loc_7F80C0DC cmp eax, 0F005h jz short loc_7F80C109 cmp eax, 0F008h jz short loc_7F80C11E cmp eax, 0F009h jz short loc_7F80C125 cmp eax, 0F00Ah jz short loc_7F80C153 jmp loc_7F80C17A ; --------------------------------------------------------------------------- loc_7F80C0DC: ; CODE XREF: sub_7F80C0A9+10j push [ebp+arg_0] push dword ptr [esi+8] call sub_7F80C239 inc eax cmp eax, 1 sbb eax, eax neg eax test eax, eax jnz loc_7F80C17A push eax push [ebp+arg_0] call sub_7F80C1C4 cmp byte ptr [eax+8], 1 sbb eax, eax inc eax jmp short loc_7F80C17C ; --------------------------------------------------------------------------- loc_7F80C109: ; CODE XREF: sub_7F80C0A9+17j add esi, 8 push esi push [ebp+arg_0] call sub_7F80C0A9 cmp eax, 1 sbb eax, eax neg eax jmp short loc_7F80C17C ; --------------------------------------------------------------------------- loc_7F80C11E: ; CODE XREF: sub_7F80C0A9+1Ej mov eax, 1 jmp short loc_7F80C17C ; --------------------------------------------------------------------------- loc_7F80C125: ; CODE XREF: sub_7F80C0A9+25j push esi xor ebx, ebx call sub_7F80C1B6 mov edi, eax test edi, edi jle short loc_7F80C14C loc_7F80C133: ; CODE XREF: sub_7F80C0A9+A1j push ebx push esi call sub_7F80C1C4 push eax push [ebp+arg_0] call sub_7F80C0A9 test eax, eax jz short loc_7F80C17A inc ebx cmp ebx, edi jl short loc_7F80C133 loc_7F80C14C: ; CODE XREF: sub_7F80C0A9+88j mov eax, 1 jmp short loc_7F80C17C ; --------------------------------------------------------------------------- loc_7F80C153: ; CODE XREF: sub_7F80C0A9+2Cj push esi xor ebx, ebx call sub_7F80C1B6 mov edi, eax test edi, edi jle short loc_7F80C17A loc_7F80C161: ; CODE XREF: sub_7F80C0A9+CFj push ebx push esi call sub_7F80C1C4 push eax push [ebp+arg_0] call sub_7F80C0A9 test eax, eax jnz short loc_7F80C183 inc ebx cmp ebx, edi jl short loc_7F80C161 loc_7F80C17A: ; CODE XREF: sub_7F80C0A9+2Ej ; sub_7F80C0A9+48j ... xor eax, eax loc_7F80C17C: ; CODE XREF: sub_7F80C0A9+5Ej ; sub_7F80C0A9+73j ... pop edi pop esi pop ebx pop ebp retn 8 ; --------------------------------------------------------------------------- loc_7F80C183: ; CODE XREF: sub_7F80C0A9+CAj mov eax, 1 jmp short loc_7F80C17C sub_7F80C0A9 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C18A proc near ; CODE XREF: sub_7F80BFB5+BEp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov edx, [esp+arg_0] push ebx mov eax, [esp+4+arg_4] loc_7F80C193: ; CODE XREF: sub_7F80C18A+20j mov ecx, [esp+4+arg_8] dec [esp+4+arg_8] cmp ecx, 1 jbe short loc_7F80C1AF mov ecx, eax mov bl, [edx] inc eax inc edx mov [ecx], bl test bl, bl jnz short loc_7F80C193 dec eax jmp short loc_7F80C1B2 ; --------------------------------------------------------------------------- loc_7F80C1AF: ; CODE XREF: sub_7F80C18A+14j mov byte ptr [eax], 0 loc_7F80C1B2: ; CODE XREF: sub_7F80C18A+23j pop ebx retn 0Ch sub_7F80C18A endp ; =============== S U B R O U T I N E ======================================= sub_7F80C1B6 proc near ; CODE XREF: sub_7F80B80E+E8p ; sub_7F80BFB5+25p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax+8] mov eax, [ecx+eax+8] retn 4 sub_7F80C1B6 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C1C4 proc near ; CODE XREF: sub_7F80B80E+12Bp ; sub_7F80B80E+2EBp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] mov edx, [esp+arg_4] add eax, 8 imul edx, 0Ch mov ecx, [eax] add ecx, eax add eax, [ecx+edx+0Ch] retn 8 sub_7F80C1C4 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C1DD proc near ; CODE XREF: sub_7F80C1F7+38p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] mov eax, [esp+arg_0] imul ecx, 0Ch mov edx, [ecx+eax+0Ch] mov ecx, [esp+arg_4] lea eax, [ecx+edx+8] retn 0Ch sub_7F80C1DD endp ; =============== S U B R O U T I N E ======================================= sub_7F80C1F7 proc near ; CODE XREF: sub_7F80BFB5+B5p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_4] push edi push esi call sub_7F80C1B6 mov ecx, [esi+8] lea ebx, [ecx+esi+8] xor ecx, ecx test eax, eax jle short loc_7F80C224 lea edx, [ebx+4] mov edi, [esp+0Ch+arg_0] loc_7F80C218: ; CODE XREF: sub_7F80C1F7+2Bj cmp [edx], edi jz short loc_7F80C22C add edx, 0Ch inc ecx cmp eax, ecx jg short loc_7F80C218 loc_7F80C224: ; CODE XREF: sub_7F80C1F7+18j xor eax, eax loc_7F80C226: ; CODE XREF: sub_7F80C1F7+40j pop edi pop esi pop ebx retn 8 ; --------------------------------------------------------------------------- loc_7F80C22C: ; CODE XREF: sub_7F80C1F7+23j push ecx push esi push ebx call sub_7F80C1DD add eax, 8 jmp short loc_7F80C226 sub_7F80C1F7 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C239 proc near ; CODE XREF: sub_7F80BFB5+11p ; sub_7F80C0A9+39p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov esi, [esp+8+arg_4] test esi, esi jz short loc_7F80C26B push esi call sub_7F80C1B6 mov edi, eax mov eax, [esi+8] lea edx, [eax+esi+8] xor eax, eax test edi, edi jle short loc_7F80C26B add edx, 4 mov ecx, [esp+8+arg_0] loc_7F80C25F: ; CODE XREF: sub_7F80C239+30j cmp [edx], ecx jz short loc_7F80C270 add edx, 0Ch inc eax cmp eax, edi jl short loc_7F80C25F loc_7F80C26B: ; CODE XREF: sub_7F80C239+8j ; sub_7F80C239+1Dj mov eax, 0FFFFFFFFh loc_7F80C270: ; CODE XREF: sub_7F80C239+28j pop edi pop esi retn 8 sub_7F80C239 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C275 proc near ; CODE XREF: ScGetPABMigrationContext@52+129p var_C = dword ptr -0Ch hLibModule = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push esi lea ecx, [ebp+hLibModule] mov [ebp+hLibModule], 0FFFFFFFFh mov [ebp+var_C], 0 push ecx ; int push offset aMspst32_dll_0 ; "MSPST32.DLL" call sub_7F80C30F test eax, eax jz short loc_7F80C2C1 loc_7F80C29C: ; CODE XREF: sub_7F80C275+64j mov esi, 80040119h loc_7F80C2A1: ; CODE XREF: sub_7F80C275+86j cmp [ebp+var_C], 0 jz short loc_7F80C2AF mov eax, [ebp+var_C] push [ebp+var_C] call dword ptr [eax] loc_7F80C2AF: ; CODE XREF: sub_7F80C275+30j push [ebp+hLibModule] ; hLibModule call ds:FreeLibrary loc_7F80C2B8: ; CODE XREF: sub_7F80C275+98j mov eax, esi pop esi mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F80C2C1: ; CODE XREF: sub_7F80C275+25j push offset aScgetpabimport ; "ScGetPABImporter" push [ebp+hLibModule] ; hModule call ds:GetProcAddress test eax, eax jnz short loc_7F80C2DB call ds:GetLastError jmp short loc_7F80C29C ; --------------------------------------------------------------------------- loc_7F80C2DB: ; CODE XREF: sub_7F80C275+5Cj lea ecx, [ebp+var_2] lea edx, [ebp+var_C] push ecx push edx mov edx, [ebp+arg_0] push [ebp+arg_4] push dword ptr [edx+20h] push dword ptr [edx+1Ch] push dword ptr [edx+18h] push [ebp+hLibModule] call eax mov esi, eax test esi, esi jnz short loc_7F80C2A1 mov ecx, [ebp+hLibModule] mov eax, [ebp+arg_8] mov edx, [ebp+var_C] mov [eax], ecx mov ecx, [ebp+arg_C] mov [ecx], edx jmp short loc_7F80C2B8 sub_7F80C275 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80C30F(LPCSTR lpLibFileName, int) sub_7F80C30F proc near ; CODE XREF: sub_7F80C275+1Ep lpLibFileName = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi push ebp push 8000h ; uMode call ds:SetErrorMode mov edi, eax mov esi, [esp+10h+arg_4] push [esp+10h+lpLibFileName] ; lpLibFileName mov dword ptr [esi], 0 call ds:LoadLibraryA mov ebp, eax push edi ; uMode call ds:SetErrorMode mov eax, 80004005h test ebp, ebp jz short loc_7F80C34A xor eax, eax mov [esi], ebp loc_7F80C34A: ; CODE XREF: sub_7F80C30F+35j pop ebp pop edi pop esi pop ebx retn 8 sub_7F80C30F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C351 proc near ; CODE XREF: sub_7F80A6DD+1Dp var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 4 mov [ebp+var_4], 0 lea eax, [ebp+var_4] push eax push [ebp+arg_0] call MAPIAllocateBuffer@8 mov eax, [ebp+var_4] mov esp, ebp pop ebp retn 4 sub_7F80C351 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C373 proc near ; CODE XREF: sub_7F80A6DD+15p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 mov [ebp+var_4], 0 lea eax, [ebp+var_4] push eax push [ebp+arg_4] push [ebp+arg_0] call MAPIAllocateMore@12 mov eax, [ebp+var_4] mov esp, ebp pop ebp retn 8 sub_7F80C373 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C398 proc near ; CODE XREF: sub_7F80A72A+10p arg_0 = dword ptr 4 push [esp+arg_0] call MAPIFreeBuffer@4 xor eax, eax retn 4 sub_7F80C398 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C3A6 proc near ; CODE XREF: sub_7F80C62C+11Cp Msg = tagMSG ptr -1Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch push esi mov esi, [ebp+arg_0] test esi, esi jnz short loc_7F80C3BB mov eax, 1 jmp short loc_7F80C405 ; --------------------------------------------------------------------------- loc_7F80C3BB: ; CODE XREF: sub_7F80C3A6+Cj push 1 ; wRemoveMsg lea ecx, [ebp+Msg] push 0 ; wMsgFilterMax push 0 ; wMsgFilterMin push dword ptr [esi] ; hWnd push ecx ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F80C3FB loc_7F80C3D1: ; CODE XREF: sub_7F80C3A6+53j lea eax, [ebp+Msg] push eax ; lpMsg call ds:TranslateMessage lea eax, [ebp+Msg] push eax ; lpMsg call ds:DispatchMessageA push 1 ; wRemoveMsg lea ecx, [ebp+Msg] push 0 ; wMsgFilterMax push 0 ; wMsgFilterMin push dword ptr [esi] ; hWnd push ecx ; lpMsg call ds:PeekMessageA test eax, eax jnz short loc_7F80C3D1 loc_7F80C3FB: ; CODE XREF: sub_7F80C3A6+29j mov eax, [esi+30h] mov dword ptr [esi+30h], 0 loc_7F80C405: ; CODE XREF: sub_7F80C3A6+13j pop esi mov esp, ebp pop ebp retn 4 sub_7F80C3A6 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80C40C(HWND hWnd) sub_7F80C40C proc near ; CODE XREF: sub_7F80C519+99p hWnd = dword ptr 4 push 8 ; nIndex push [esp+4+hWnd] ; hWnd call ds:GetWindowLongA test eax, eax jz short locret_7F80C423 mov dword ptr [eax+30h], 1 locret_7F80C423: ; CODE XREF: sub_7F80C40C+Ej retn 4 sub_7F80C40C endp ; =============== S U B R O U T I N E ======================================= sub_7F80C426 proc near ; CODE XREF: sub_7F80C519+80p arg_0 = dword ptr 4 push ebx push esi push edi mov ebx, 32Bh mov edi, [esp+0Ch+arg_0] mov esi, ds:GetDlgItem loc_7F80C438: ; CODE XREF: sub_7F80C426+27j push 1 ; bEnable push ebx ; nIDDlgItem push dword ptr [edi] ; hDlg call esi ; GetDlgItem push eax ; hWnd inc ebx call ds:EnableWindow cmp ebx, 32Eh jle short loc_7F80C438 mov ebx, 3ECh push ebx ; nIDDlgItem push dword ptr [edi] ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:SetFocus push 7F00h ; lpCursorName mov eax, dword_7F833C00 push eax ; hInstance call ds:LoadCursorA push eax ; hCursor call ds:SetCursor push dword ptr [edi+8] ; lpString push dword ptr [edi] ; hWnd mov [edi+28h], eax call ds:SetWindowTextA push 0FFFFFFFCh ; nIndex push ebx ; nIDDlgItem push dword ptr [edi] ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:GetWindowLongA push offset sub_7F80C77D ; dwNewLong mov dword_7F833BFC, eax push 0FFFFFFFCh ; nIndex push ebx ; nIDDlgItem push dword ptr [edi] ; hDlg call esi ; GetDlgItem push eax ; hWnd call ds:SetWindowLongA xor eax, eax pop edi pop esi pop ebx retn 4 sub_7F80C426 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C4B4 proc near ; CODE XREF: sub_7F80C519+6Cp Paint = tagPAINTSTRUCT ptr -44h hDC = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 44h push ebx lea eax, [ebp+Paint] push esi mov ebx, [ebp+arg_0] push edi push eax ; lpPaint mov esi, [ebx] xor edi, edi push esi ; hWnd call ds:BeginPaint mov [ebp+hDC], eax cmp [ebx+10h], edi jz short loc_7F80C4FA push 2 ; nIndex call ds:GetSysColor push eax ; color call ds:CreateSolidBrush mov edi, eax test edi, edi jz short loc_7F80C505 push edi ; hbr add ebx, 18h push ebx ; lprc push [ebp+hDC] ; hDC call ds:FillRect loc_7F80C4FA: ; CODE XREF: sub_7F80C4B4+21j test edi, edi jz short loc_7F80C505 push edi ; ho call ds:DeleteObject loc_7F80C505: ; CODE XREF: sub_7F80C4B4+36j ; sub_7F80C4B4+48j lea eax, [ebp+Paint] push eax ; lpPaint push esi ; hWnd call ds:EndPaint pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F80C4B4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; BOOL __stdcall sub_7F80C519(HWND, UINT, WPARAM, LPARAM) sub_7F80C519 proc near ; DATA XREF: sub_7F80C5C0+37o hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h dwNewLong = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi cmp [ebp+arg_4], 110h mov esi, 1 jnz short loc_7F80C535 mov ebx, [ebp+dwNewLong] mov edi, [ebp+hWnd] jmp short loc_7F80C543 ; --------------------------------------------------------------------------- loc_7F80C535: ; CODE XREF: sub_7F80C519+12j push 8 ; nIndex mov edi, [ebp+hWnd] push edi ; hWnd call ds:GetWindowLongA mov ebx, eax loc_7F80C543: ; CODE XREF: sub_7F80C519+1Aj mov eax, [ebp+arg_4] cmp eax, 2 jz short loc_7F80C567 cmp eax, 6 jz short loc_7F80C572 cmp eax, 0Fh jz short loc_7F80C582 cmp eax, 110h jz short loc_7F80C58C cmp eax, 111h jz short loc_7F80C5A2 xor esi, esi jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C567: ; CODE XREF: sub_7F80C519+30j push dword ptr [ebx+28h] ; hCursor call ds:SetCursor jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C572: ; CODE XREF: sub_7F80C519+35j cmp word ptr [ebp+arg_8], 0 jz short loc_7F80C5B7 push edi ; hWnd call ds:BringWindowToTop jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C582: ; CODE XREF: sub_7F80C519+3Aj push ebx xor esi, esi call sub_7F80C4B4 jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C58C: ; CODE XREF: sub_7F80C519+41j push ebx ; dwNewLong push 8 ; nIndex push edi ; hWnd call ds:SetWindowLongA push ebx mov [ebx], edi call sub_7F80C426 mov esi, eax jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C5A2: ; CODE XREF: sub_7F80C519+48j movzx eax, word ptr [ebp+arg_8] cmp eax, 3ECh jz short loc_7F80C5B1 xor esi, esi jmp short loc_7F80C5B7 ; --------------------------------------------------------------------------- loc_7F80C5B1: ; CODE XREF: sub_7F80C519+92j push edi ; hWnd call sub_7F80C40C loc_7F80C5B7: ; CODE XREF: sub_7F80C519+4Cj ; sub_7F80C519+57j ... mov eax, esi pop edi pop esi pop ebx pop ebp retn 10h sub_7F80C519 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80C5C0(int, LPARAM dwInitParam, HWND hWndParent, int, int, int) sub_7F80C5C0 proc near ; CODE XREF: ScMMFMigrateToMDB@48+23Dp ; ScMigrateMMFPAB@32+EFp arg_0 = dword ptr 8 dwInitParam = dword ptr 0Ch hWndParent = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, [esp+arg_0] mov ebp, esp mov dword_7F833C00, eax push esi xor eax, eax push edi mov esi, [ebp+dwInitParam] mov edi, esi stosd mov edi, [ebp+hWndParent] mov eax, [ebp+arg_14] mov [esi+4], edi test eax, eax mov [esi+10h], eax jnz short loc_7F80C5ED mov dword ptr [esi+10h], 1 loc_7F80C5ED: ; CODE XREF: sub_7F80C5C0+24j mov eax, [ebp+arg_C] mov ecx, [ebp+arg_10] push esi ; dwInitParam mov [esi+8], eax push offset sub_7F80C519 ; lpDialogFunc mov [esi+0Ch], ecx push edi ; hWndParent mov eax, dword_7F833C00 push 3E8h ; lpTemplateName push eax ; hInstance call ds:CreateDialogParamA mov [esi], eax cmp eax, 1 sbb esi, esi inc esi jz short loc_7F80C624 push 0 ; bEnable push edi ; hWnd call ds:EnableWindow loc_7F80C624: ; CODE XREF: sub_7F80C5C0+59j mov eax, esi pop edi pop esi pop ebp retn 18h sub_7F80C5C0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C62C proc near ; CODE XREF: sub_7F8023F1+38p ; sub_7F8035B3+274p String = byte ptr -64h var_24 = tagRECT ptr -24h Rect = tagRECT ptr -14h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 64h push ebx push esi push edi mov esi, [ebp+arg_0] test esi, esi lea ebx, [esi+18h] jnz short loc_7F80C649 mov eax, 1 jmp loc_7F80C754 ; --------------------------------------------------------------------------- loc_7F80C649: ; CODE XREF: sub_7F80C62C+11j mov edi, [esi] mov eax, [esi+14h] inc eax cmp dword ptr [esi+10h], 0 mov [esi+14h], eax jnz short loc_7F80C65E lea ecx, [eax+1] mov [esi+10h], ecx loc_7F80C65E: ; CODE XREF: sub_7F80C62C+2Aj sub edx, edx lea ecx, [ebp+String] imul eax, 64h div dword ptr [esi+10h] push eax push offset aD ; "%d%%" push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+String] push ecx ; lpString push 3EAh ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push dword ptr [esi+14h] push dword ptr [esi+0Ch] ; LPCSTR lea edx, [ebp+String] push edx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+String] push ecx ; lpString push 3E9h ; nIDDlgItem push edi ; hDlg call ds:SetDlgItemTextA push ebx ; lpRect push 3EBh ; nIDDlgItem push edi ; hDlg call ds:GetDlgItem push eax ; hWnd call ds:GetWindowRect lea eax, [ebp+Rect] push eax ; lpRect push edi ; hWnd call ds:GetWindowRect lea ecx, [ebp+var_24] push ecx ; lpRect push edi ; hWnd call ds:GetClientRect mov eax, [ebp+Rect.right] sub eax, [ebp+var_24.right] sub eax, [ebp+Rect.left] cdq sub eax, edx sar eax, 1 mov ecx, eax mov eax, [ebp+Rect.bottom] sub eax, ecx sub edx, edx sub eax, [ebp+var_24.bottom] sub eax, [ebp+Rect.top] mov [ebp+var_4], eax mov eax, [ebx+8] sub eax, [ebx] imul eax, [esi+14h] div dword ptr [esi+10h] sub eax, ecx sub eax, [ebp+Rect.left] add eax, [ebx] mov [ebx+8], eax mov eax, [ebx] sub eax, ecx sub eax, [ebp+Rect.left] inc eax mov [ebx], eax cmp [ebx+8], eax jge short loc_7F80C71E mov [ebx+8], eax loc_7F80C71E: ; CODE XREF: sub_7F80C62C+EDj mov eax, [ebp+var_4] add eax, [ebp+Rect.top] push 0 ; bErase inc eax push ebx ; lpRect push edi ; hWnd sub [ebx+0Ch], eax mov eax, 8 sub eax, [ebp+var_4] sub eax, [ebp+Rect.top] add [ebx+4], eax call ds:InvalidateRect push edi ; hWnd call ds:UpdateWindow push esi call sub_7F80C3A6 cmp eax, 1 sbb eax, eax neg eax loc_7F80C754: ; CODE XREF: sub_7F80C62C+18j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F80C62C endp ; =============== S U B R O U T I N E ======================================= sub_7F80C75D proc near ; CODE XREF: ScMMFMigrateToMDB@48+2B8p ; ScMigrateMMFPAB@32+123p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_7F80C779 push 1 ; bEnable push dword ptr [esi+4] ; hWnd call ds:EnableWindow push dword ptr [esi] ; hWnd call ds:DestroyWindow loc_7F80C779: ; CODE XREF: sub_7F80C75D+7j pop esi retn 4 sub_7F80C75D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80C77D(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) sub_7F80C77D proc near ; DATA XREF: sub_7F80C426+6Eo hWnd = dword ptr 8 Msg = dword ptr 0Ch wParam = dword ptr 10h lParam = dword ptr 14h push ebp mov ebp, esp cmp [esp+Msg], 100h jnz short loc_7F80C7B2 cmp [ebp+wParam], 0Dh jz short loc_7F80C796 cmp [ebp+wParam], 1Bh jnz short loc_7F80C7B2 loc_7F80C796: ; CODE XREF: sub_7F80C77D+11j push 0 ; lParam push 3ECh ; wParam push 111h ; Msg push [ebp+hWnd] ; hWnd call ds:GetParent push eax ; hWnd call ds:PostMessageA loc_7F80C7B2: ; CODE XREF: sub_7F80C77D+Bj ; sub_7F80C77D+17j push [ebp+lParam] ; lParam push [ebp+wParam] ; wParam push [ebp+Msg] ; Msg push [ebp+hWnd] ; hWnd push dword_7F833BFC ; lpPrevWndFunc call ds:CallWindowProcA pop ebp retn 10h sub_7F80C77D endp ; =============== S U B R O U T I N E ======================================= sub_7F80C7CE proc near ; CODE XREF: sub_7F808498+25Fp ; sub_7F80C828+9p mov eax, dword_7F835554 test al, 1 jnz short loc_7F80C7EB test eax, eax jnz short loc_7F80C7E4 call sub_7F80C7F1 test eax, eax jnz short loc_7F80C7EB loc_7F80C7E4: ; CODE XREF: sub_7F80C7CE+Bj mov eax, 3 jmp short locret_7F80C7F0 ; --------------------------------------------------------------------------- loc_7F80C7EB: ; CODE XREF: sub_7F80C7CE+7j ; sub_7F80C7CE+14j mov eax, VersionInformation.dwMajorVersion locret_7F80C7F0: ; CODE XREF: sub_7F80C7CE+1Bj retn sub_7F80C7CE endp ; =============== S U B R O U T I N E ======================================= sub_7F80C7F1 proc near ; CODE XREF: sub_7F80C7CE+Dp mov VersionInformation.dwOSVersionInfoSize, 94h push esi push offset VersionInformation ; lpVersionInformation xor esi, esi call ds:GetVersionExA test eax, eax jz short loc_7F80C81A mov esi, 1 mov dword_7F835554, esi jmp short loc_7F80C824 ; --------------------------------------------------------------------------- loc_7F80C81A: ; CODE XREF: sub_7F80C7F1+1Aj mov dword_7F835554, 80000000h loc_7F80C824: ; CODE XREF: sub_7F80C7F1+27j mov eax, esi pop esi retn sub_7F80C7F1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80C828 proc near ; CODE XREF: sub_7F80577A+4Cp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi call sub_7F80C7CE mov esi, [ebp+arg_0] cmp eax, 4 jb short loc_7F80C84A xor eax, eax mov [esi+4], eax mov [esi], eax jmp loc_7F80C92A ; --------------------------------------------------------------------------- loc_7F80C84A: ; CODE XREF: sub_7F80C828+14j mov edi, esi xor eax, eax mov ecx, 8 push offset aCtl3d32_dll ; "ctl3d32.dll" rep stosd call ds:LoadLibraryA mov edi, eax test edi, edi jz loc_7F80C91A push offset aCtl3dgetver ; "Ctl3dGetVer" mov ebx, ds:GetProcAddress push edi ; hModule call ebx ; GetProcAddress call eax cmp eax, 220h jl loc_7F80C91A mov eax, [ebp+arg_4] push offset aCtl3denabled ; "Ctl3dEnabled" push edi ; hModule mov [esi+4], eax call ebx ; GetProcAddress push offset aCtl3dregister ; "Ctl3dRegister" mov [ebp+var_8], eax push edi ; hModule call ebx ; GetProcAddress push offset aCtl3dautosubcl ; "Ctl3dAutoSubclass" mov [ebp+var_4], eax push edi ; hModule call ebx ; GetProcAddress push offset aCtl3dunautosub ; "Ctl3dUnAutoSubclass" mov [esi+0Ch], eax push edi ; hModule call ebx ; GetProcAddress push offset aCtl3dsubclassd ; "Ctl3dSubclassDlgEx" mov [esi+10h], eax push edi ; hModule call ebx ; GetProcAddress push offset aCtl3dunregiste ; "Ctl3dUnregister" mov [esi+14h], eax push edi ; hModule call ebx ; GetProcAddress push offset aCtl3dcolorchan ; "Ctl3dColorChange" mov [esi+18h], eax push edi ; hModule call ebx ; GetProcAddress cmp [ebp+var_8], 0 mov [esi+1Ch], eax jz short loc_7F80C91A cmp [ebp+var_4], 0 jz short loc_7F80C91A cmp dword ptr [esi+18h], 0 jz short loc_7F80C91A cmp dword ptr [esi+0Ch], 0 jz short loc_7F80C91A cmp dword ptr [esi+10h], 0 jz short loc_7F80C91A cmp dword ptr [esi+14h], 0 jz short loc_7F80C91A test eax, eax jz short loc_7F80C91A call [ebp+var_8] test eax, eax jnz short loc_7F80C918 push dword ptr [esi+4] call [ebp+var_4] test eax, eax jz short loc_7F80C91A mov dword ptr [esi+8], 1 loc_7F80C918: ; CODE XREF: sub_7F80C828+DDj mov [esi], edi loc_7F80C91A: ; CODE XREF: sub_7F80C828+3Cj ; sub_7F80C828+57j ... cmp dword ptr [esi], 0 jnz short loc_7F80C92A test edi, edi jz short loc_7F80C92A push edi ; hLibModule call ds:FreeLibrary loc_7F80C92A: ; CODE XREF: sub_7F80C828+1Dj ; sub_7F80C828+F5j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F80C828 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C933 proc near ; CODE XREF: sub_7F80577A+A2p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] cmp dword ptr [esi], 0 jz short loc_7F80C951 cmp dword ptr [esi+8], 0 jz short loc_7F80C949 push dword ptr [esi+4] call dword ptr [esi+18h] loc_7F80C949: ; CODE XREF: sub_7F80C933+Ej push dword ptr [esi] ; hLibModule call ds:FreeLibrary loc_7F80C951: ; CODE XREF: sub_7F80C933+8j pop esi retn 4 sub_7F80C933 endp ; =============== S U B R O U T I N E ======================================= sub_7F80C955 proc near ; CODE XREF: sub_7F80577A+55p arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp dword ptr [eax], 0 jz short loc_7F80C966 push dword ptr [eax+4] call dword ptr [eax+0Ch] jmp short locret_7F80C96B ; --------------------------------------------------------------------------- loc_7F80C966: ; CODE XREF: sub_7F80C955+7j mov eax, 1 locret_7F80C96B: ; CODE XREF: sub_7F80C955+Fj retn 4 sub_7F80C955 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80C96E(int, int, LPCSTR lpString, int, int, int, int, int) sub_7F80C96E proc near ; CODE XREF: sub_7F8028D4+61p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpString = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 0Ch push ebx mov ecx, [ebp+arg_1C] push esi lea eax, [ebp+var_4] push edi xor esi, esi push eax mov ebx, [ebp+arg_0] push 64h mov [ebp+var_4], esi mov [ecx], esi call dword ptr [ebx] mov [ebp+var_8], eax cmp eax, esi jl loc_7F80CAF5 mov edi, [ebp+var_4] xor eax, eax mov ecx, 19h rep stosd mov ecx, [ebp+var_4] mov edx, [ebp+arg_0] mov [ecx], esi mov eax, [ebp+arg_18] mov [ecx+4], esi mov [ecx+8], esi mov [ecx+0Ch], esi mov [ecx+10h], esi mov [ecx+2Ch], edx mov ecx, [ebp+var_4] mov edx, [ebp+arg_14] mov [ecx+48h], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_4] mov [ecx+40h], edx mov ecx, [ebp+var_4] mov [ecx+44h], eax mov ecx, [ebp+arg_10] mov edx, [ebp+var_4] mov [edx+4Ch], ecx mov edx, [ebp+var_4] cmp [edx+4Ch], esi jz loc_7F80CAEB mov eax, 1 cmp [ebp+lpString], esi jz short loc_7F80C9FE push [ebp+lpString] ; lpString call ds:lstrlenA inc eax loc_7F80C9FE: ; CODE XREF: sub_7F80C96E+84j add eax, 1Ch mov [ebp+var_C], eax mov eax, [ebp+var_4] add eax, 58h push eax push [ebp+var_C] push [ebp+var_4] call sub_7F80FD38 mov [ebp+var_8], eax test eax, eax jl loc_7F80CAF5 mov ebx, [ebp+arg_C] mov eax, [ebp+var_4] test ebx, ebx jnz short loc_7F80CA67 mov ebx, [eax+58h] mov byte ptr [ebx+3], 0 lea ecx, [ebx+4] mov edx, [ebp+arg_10] mov byte ptr [ebx+2], 0 mov byte ptr [ebx+1], 0 push ecx mov byte ptr [ebx], 0 mov esi, [edx] push [ebp+arg_10] call dword ptr [esi+2Ch] mov [ebp+var_8], eax test eax, eax jl loc_7F80CAF5 mov dword ptr [ebx+14h], 1 mov dword ptr [ebx+18h], 64694881h jmp short loc_7F80CA73 ; --------------------------------------------------------------------------- loc_7F80CA67: ; CODE XREF: sub_7F80C96E+BBj mov edi, [eax+58h] mov esi, ebx mov ecx, 7 rep movsd loc_7F80CA73: ; CODE XREF: sub_7F80C96E+F7j mov eax, [ebp+var_4] mov ecx, [ebp+var_4] mov eax, [eax+58h] add eax, 1Ch cmp [ebp+lpString], 0 mov [ecx+54h], eax jz short loc_7F80CAB0 mov edi, [ebp+lpString] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov edx, ecx mov eax, [ebp+var_4] shr ecx, 2 mov esi, edi mov edi, [eax+54h] rep movsd mov ecx, edx and ecx, 3 rep movsb jmp short loc_7F80CAB9 ; --------------------------------------------------------------------------- loc_7F80CAB0: ; CODE XREF: sub_7F80C96E+118j mov eax, [ebp+var_4] mov ecx, [eax+54h] mov byte ptr [ecx], 0 loc_7F80CAB9: ; CODE XREF: sub_7F80C96E+140j mov eax, [ebp+var_4] add eax, 60h push eax mov eax, [ebp+var_4] add eax, 5Ch mov edx, [ebp+arg_10] push eax push ebx push [ebp+var_C] mov ebx, [edx] push [ebp+arg_10] call dword ptr [ebx+0A0h] mov [ebp+var_8], eax test eax, eax jl short loc_7F80CAF5 mov ecx, [ebp+arg_10] push [ebp+arg_10] mov ebx, [ecx] call dword ptr [ebx+4] loc_7F80CAEB: ; CODE XREF: sub_7F80C96E+76j mov eax, [ebp+var_4] mov ecx, [ebp+arg_1C] mov [ecx], eax jmp short loc_7F80CB26 ; --------------------------------------------------------------------------- loc_7F80CAF5: ; CODE XREF: sub_7F80C96E+23j ; sub_7F80C96E+ADj ... cmp [ebp+var_4], 0 jz short loc_7F80CB26 mov eax, [ebp+var_4] mov eax, [eax+58h] test eax, eax jz short loc_7F80CB0C push eax mov ebx, [ebp+arg_0] call dword ptr [ebx+8] loc_7F80CB0C: ; CODE XREF: sub_7F80C96E+195j mov eax, [ebp+var_4] mov eax, [eax+60h] test eax, eax jz short loc_7F80CB1D push eax mov ebx, [ebp+arg_0] call dword ptr [ebx+8] loc_7F80CB1D: ; CODE XREF: sub_7F80C96E+1A6j mov ebx, [ebp+arg_0] push [ebp+var_4] call dword ptr [ebx+8] loc_7F80CB26: ; CODE XREF: sub_7F80C96E+185j ; sub_7F80C96E+18Bj mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F80C96E endp ; =============== S U B R O U T I N E ======================================= sub_7F80CB32 proc near ; CODE XREF: ScMMFVerify@16+FFp ; ScMMFMigrateToMDB@48+2A1p var_4 = dword ptr -4 arg_0 = dword ptr 4 sub esp, 4 push ebx push esi mov esi, [esp+0Ch+arg_0] push edi push ebp xor ebp, ebp test esi, esi jz short loc_7F80CBAB mov edi, [esi+4Ch] lea ebx, [esi+44h] cmp [ebx], ebp jz short loc_7F80CB55 push ebx call sub_7F820C0E mov [ebx], ebp loc_7F80CB55: ; CODE XREF: sub_7F80CB32+19j test byte ptr [esi+48h], 20h jnz short loc_7F80CB77 test edi, edi jz short loc_7F80CB77 mov [esp+14h+var_4], 8 lea eax, [esp+14h+var_4] mov ebx, [edi] push eax push dword ptr [esi+4Ch] call dword ptr [ebx+98h] loc_7F80CB77: ; CODE XREF: sub_7F80CB32+27j ; sub_7F80CB32+2Bj push dword ptr [esi+60h] push esi call sub_7F80FD78 push dword ptr [esi+58h] push esi call sub_7F80FD78 mov eax, [esi+40h] xor ecx, ecx test eax, eax jz short loc_7F80CB95 mov [eax+48h], ecx loc_7F80CB95: ; CODE XREF: sub_7F80CB32+5Ej xor eax, eax mov [esi], eax cmp [esi+8], eax jnz short loc_7F80CBA5 push esi push esi call sub_7F80FD78 loc_7F80CBA5: ; CODE XREF: sub_7F80CB32+6Aj push edi call UlRelease@4 loc_7F80CBAB: ; CODE XREF: sub_7F80CB32+Fj pop ebp pop edi pop esi pop ebx add esp, 4 retn 4 sub_7F80CB32 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80CBB5 proc near ; CODE XREF: sub_7F802DB7+352p var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h lpString = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp xor eax, eax mov ebp, esp sub esp, 1Ch mov [ebp+var_2], ax push ebx push esi mov ecx, [ebp+arg_14] push edi mov [ebp+var_C], eax mov edx, [ebp+arg_18] mov [ebp+lpString], eax mov [ebp+var_1C], eax mov [ecx], eax mov [edx], eax cmp [ebp+arg_4], eax jz short loc_7F80CBFA mov eax, [ebp+arg_4] mov ecx, 0FFFFFFFFh add eax, 2 mov edi, eax mov [ebp+lpString], eax sub eax, eax repne scasb not ecx mov eax, [ebp+lpString] add eax, ecx mov [ebp+var_1C], eax loc_7F80CBFA: ; CODE XREF: sub_7F80CBB5+25j mov eax, [ebp+arg_10] xor esi, esi push [ebp+arg_18] push esi mov ecx, [eax] shl ecx, 4 push ecx push [ebp+arg_C] call sub_7F80FD4C mov [ebp+var_8], eax cmp eax, esi jl loc_7F80CD51 mov ecx, [ebp+arg_18] mov eax, [ebp+arg_10] mov ebx, [ecx] mov ecx, [eax] add eax, 4 mov [ebp+var_14], ecx mov [ebp+var_18], eax cmp ecx, esi jz loc_7F80D06D loc_7F80CC37: ; CODE XREF: sub_7F80CBB5+4B2j mov eax, [ebp+var_18] mov ecx, [eax] mov [ebx], ecx mov eax, [eax] shr eax, 10h cmp eax, 0FF7h ja short loc_7F80CC60 jz loc_7F80CD8D cmp eax, 0E09h jz loc_7F80CD02 jmp loc_7F80CCE8 ; --------------------------------------------------------------------------- loc_7F80CC60: ; CODE XREF: sub_7F80CBB5+93j cmp eax, 3001h ja short loc_7F80CCA6 jz loc_7F80CEBE cmp eax, 0FF9h jz loc_7F80CDA4 cmp eax, 0FFAh jz loc_7F80CDE8 cmp eax, 0FFBh jz loc_7F80CE32 cmp eax, 0FFEh jz loc_7F80CEA7 cmp eax, 0FFFh jz loc_7F80CDA4 jmp short loc_7F80CCE8 ; --------------------------------------------------------------------------- loc_7F80CCA6: ; CODE XREF: sub_7F80CBB5+B0j cmp eax, 3004h jz loc_7F80CF35 cmp eax, 3005h jz loc_7F80CFAC cmp eax, 3601h jz loc_7F80CFC3 cmp eax, 3603h jz loc_7F80CFE3 cmp eax, 360Ah jz loc_7F80D026 cmp eax, 360Bh jz loc_7F80D047 loc_7F80CCE8: ; CODE XREF: sub_7F80CBB5+A6j ; sub_7F80CBB5+EFj and ecx, 0FFFF000Ah inc [ebp+var_C] or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CD02: ; CODE XREF: sub_7F80CBB5+A0j xor eax, eax cmp [ebp+arg_4], eax jz short loc_7F80CD73 mov edx, [ebp+arg_C] cmp [edx+58h], eax jz short loc_7F80CD73 cmp [ebp+arg_8], eax jnz short loc_7F80CD1D mov [ebp+arg_8], 4D504981h loc_7F80CD1D: ; CODE XREF: sub_7F80CBB5+15Fj and ecx, 0FFFF0102h lea eax, [ebx+0Ch] or ecx, 102h push eax push [ebp+arg_8] mov [ebx], ecx mov dword ptr [ebx+8], 1Ch loc_7F80CD39: ; CODE XREF: sub_7F80CBB5+22Ej ; sub_7F80CBB5+278j mov edx, [ebp+arg_18] push dword ptr [edx] push [ebp+arg_C] call sub_7F80F869 mov [ebp+var_8], eax test eax, eax jge loc_7F80D059 loc_7F80CD51: ; CODE XREF: sub_7F80CBB5+61j ; sub_7F80CBB5+2CEj ... mov ecx, [ebp+arg_18] push dword ptr [ecx] push [ebp+arg_C] call sub_7F80FD78 mov ecx, [ebp+arg_18] mov dword ptr [ecx], 0 loc_7F80CD67: ; CODE XREF: sub_7F80CBB5+4C6j ; sub_7F80CBB5+4D3j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch ; --------------------------------------------------------------------------- loc_7F80CD73: ; CODE XREF: sub_7F80CBB5+152j ; sub_7F80CBB5+15Aj and ecx, 0FFFF000Ah inc [ebp+var_C] or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CD8D: ; CODE XREF: sub_7F80CBB5+95j and ecx, 0FFFF0003h or cl, 3 mov [ebx], ecx mov dword ptr [ebx+8], 1 jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CDA4: ; CODE XREF: sub_7F80CBB5+BDj ; sub_7F80CBB5+E9j mov edx, [ebp+arg_C] cmp dword ptr [edx+58h], 0 jnz short loc_7F80CDC7 and ecx, 0FFFF000Ah inc [ebp+var_C] or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CDC7: ; CODE XREF: sub_7F80CBB5+1F6j and ecx, 0FFFF0102h lea eax, [ebx+0Ch] or ecx, 102h push eax push [ebp+arg_0] mov [ebx], ecx mov dword ptr [ebx+8], 1Ch jmp loc_7F80CD39 ; --------------------------------------------------------------------------- loc_7F80CDE8: ; CODE XREF: sub_7F80CBB5+C8j mov edx, [ebp+arg_C] cmp dword ptr [edx+58h], 0 jnz short loc_7F80CE0B and ecx, 0FFFF000Ah inc [ebp+var_C] or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CE0B: ; CODE XREF: sub_7F80CBB5+23Aj and ecx, 0FFFF0102h lea eax, [ebx+0Ch] or ecx, 102h push eax mov edx, [ebp+arg_C] mov [ebx], ecx mov dword ptr [ebx+8], 1Ch mov ecx, [edx+58h] push dword ptr [ecx+18h] jmp loc_7F80CD39 ; --------------------------------------------------------------------------- loc_7F80CE32: ; CODE XREF: sub_7F80CBB5+D3j mov edx, [ebp+arg_C] cmp dword ptr [edx+60h], 0 jnz short loc_7F80CE55 and ecx, 0FFFF000Ah inc [ebp+var_C] or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CE55: ; CODE XREF: sub_7F80CBB5+284j and ecx, 0FFFF0102h mov edx, [ebp+arg_C] or ecx, 102h lea esi, [ebx+0Ch] push esi mov [ebx], ecx mov edx, [edx+5Ch] mov ecx, [ebp+arg_18] mov [ebx+8], edx push dword ptr [ecx] push edx push [ebp+arg_C] call sub_7F80FD4C mov [ebp+var_8], eax test eax, eax jl loc_7F80CD51 mov eax, [ebx+8] mov edi, [esi] mov edx, [ebp+arg_C] mov ecx, eax shr ecx, 2 mov esi, [edx+60h] rep movsd mov ecx, eax and ecx, 3 rep movsb jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CEA7: ; CODE XREF: sub_7F80CBB5+DEj and ecx, 0FFFF0003h or cl, 3 mov [ebx], ecx mov dword ptr [ebx+8], 3 jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CEBE: ; CODE XREF: sub_7F80CBB5+B2j and ecx, 0FFFF001Eh or cl, 1Eh cmp [ebp+arg_4], 0 mov [ebx], ecx jnz short loc_7F80CEE6 and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CEE6: ; CODE XREF: sub_7F80CBB5+318j lea eax, [ebx+8] mov ecx, [ebp+arg_18] push eax push dword ptr [ecx] push [ebp+lpString] ; lpString call ds:lstrlenA inc eax push eax push [ebp+arg_C] call sub_7F80FD4C mov [ebp+var_8], eax test eax, eax jl loc_7F80CD51 mov edi, [ebp+lpString] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov eax, ecx shr ecx, 2 mov esi, edi mov edi, [ebx+8] rep movsd mov ecx, eax and ecx, 3 rep movsb jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CF35: ; CODE XREF: sub_7F80CBB5+F6j and ecx, 0FFFF001Eh or cl, 1Eh cmp [ebp+arg_4], 0 mov [ebx], ecx jnz short loc_7F80CF5D and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CF5D: ; CODE XREF: sub_7F80CBB5+38Fj lea eax, [ebx+8] mov ecx, [ebp+arg_18] push eax push dword ptr [ecx] push [ebp+var_1C] ; lpString call ds:lstrlenA inc eax push eax push [ebp+arg_C] call sub_7F80FD4C mov [ebp+var_8], eax test eax, eax jl loc_7F80CD51 mov edi, [ebp+var_1C] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov eax, ecx shr ecx, 2 mov esi, edi mov edi, [ebx+8] rep movsd mov ecx, eax and ecx, 3 rep movsb jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CFAC: ; CODE XREF: sub_7F80CBB5+101j and ecx, 0FFFF0003h or cl, 3 mov [ebx], ecx mov dword ptr [ebx+8], 1 jmp loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CFC3: ; CODE XREF: sub_7F80CBB5+10Cj and ecx, 0FFFF0003h xor eax, eax or cl, 3 cmp [ebp+arg_4], eax mov [ebx], ecx jnz short loc_7F80CFDA mov [ebx+8], eax jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CFDA: ; CODE XREF: sub_7F80CBB5+41Ej mov dword ptr [ebx+8], 1 jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CFE3: ; CODE XREF: sub_7F80CBB5+117j and ecx, 0FFFF0003h xor eax, eax or cl, 3 cmp [ebp+arg_4], eax mov [ebx], ecx jnz short loc_7F80CFFA mov [ebx+8], eax jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80CFFA: ; CODE XREF: sub_7F80CBB5+43Ej lea eax, [ebp+var_2] mov edx, [ebp+arg_C] push eax push [ebp+arg_0] push dword ptr [edx+44h] call sub_7F82C3A8 push eax call sub_7F80F8B4 mov [ebp+var_8], eax test eax, eax jnz loc_7F80CD51 movsx eax, [ebp+var_2] mov [ebx+8], eax jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80D026: ; CODE XREF: sub_7F80CBB5+122j and ecx, 0FFFF000Bh or cl, 0Bh cmp [ebp+arg_4], 0 mov [ebx], ecx jnz short loc_7F80D03F mov word ptr [ebx+8], 1 jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80D03F: ; CODE XREF: sub_7F80CBB5+480j mov word ptr [ebx+8], 0 jmp short loc_7F80D059 ; --------------------------------------------------------------------------- loc_7F80D047: ; CODE XREF: sub_7F80CBB5+12Dj and ecx, 0FFFF0003h or cl, 3 mov [ebx], ecx mov dword ptr [ebx+8], 0 loc_7F80D059: ; CODE XREF: sub_7F80CBB5+148j ; sub_7F80CBB5+196j ... add ebx, 10h dec [ebp+var_14] add [ebp+var_18], 4 cmp [ebp+var_14], 0 jnz loc_7F80CC37 loc_7F80D06D: ; CODE XREF: sub_7F80CBB5+7Cj mov eax, [ebp+arg_10] mov ecx, [ebp+arg_14] cmp [ebp+var_C], 0 mov edx, [eax] mov [ecx], edx jz loc_7F80CD67 mov [ebp+var_8], 40380h jmp loc_7F80CD67 sub_7F80CBB5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D08D proc near ; CODE XREF: sub_7F8035B3+116p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h push ebx mov ecx, [ebp+arg_C] push esi xor ebx, ebx push edi mov esi, [ebp+arg_0] lea eax, [ebp+var_10] mov [ebp+var_C], ebx push eax mov [ebp+var_4], ebx push [ebp+arg_4] mov [ecx], ebx push dword ptr [esi+44h] call sub_7F82D073 push eax call sub_7F80F8B4 mov [ebp+var_8], eax cmp eax, ebx jl loc_7F80D174 push ebx lea eax, [ebp+var_C] push ebx lea ecx, [ebp+arg_4] push eax push ebx push ecx push [ebp+var_10] push dword ptr [esi+44h] call sub_7F81028C push eax call sub_7F80F8B4 mov [ebp+var_8], eax cmp eax, ebx jl loc_7F80D174 lea eax, [ebp+var_4] push eax push ebx push 68h push esi call sub_7F80FD4C mov [ebp+var_8], eax cmp eax, ebx jl short loc_7F80D174 mov edi, [ebp+var_4] xor eax, eax mov ecx, 1Ah rep stosd mov ecx, [ebp+var_4] mov eax, [esi+2Ch] mov [ecx], ebx mov [ecx+4], ebx mov [ecx+8], ebx mov [ecx+0Ch], ebx mov [ecx+10h], ebx mov [ecx+2Ch], eax mov ecx, [ebp+var_4] mov [ecx+40h], esi mov ecx, [ebp+var_4] mov [ecx+44h], esi mov ecx, [ebp+var_4] mov eax, [ebp+var_C] mov [ecx+48h], eax mov ecx, [ebp+var_4] mov [ecx+58h], ebx mov ecx, [ebp+var_4] mov eax, [ebp+arg_8] mov [ecx+5Ch], ebx mov ecx, [ebp+var_4] push ebx push esi mov [ecx+60h], ebx mov ecx, [ebp+var_4] mov [ecx+64h], ebx mov ecx, [ebp+var_4] mov [ecx+50h], eax push [ebp+var_4] call sub_7F80E354 mov ecx, [ebp+var_4] mov edx, [ebp+arg_C] mov [ecx+54h], eax mov eax, [ebp+var_4] mov [edx], eax jmp short loc_7F80D18E ; --------------------------------------------------------------------------- loc_7F80D174: ; CODE XREF: sub_7F80D08D+33j ; sub_7F80D08D+5Aj ... push [ebp+var_4] push esi call sub_7F80FD78 cmp [ebp+var_C], 0 jz short loc_7F80D18E push 0 lea eax, [ebp+var_C] push eax call sub_7F810922 loc_7F80D18E: ; CODE XREF: sub_7F80D08D+E5j ; sub_7F80D08D+F4j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80D08D endp ; =============== S U B R O U T I N E ======================================= sub_7F80D19A proc near ; CODE XREF: sub_7F8035B3+1D9p arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] xor edi, edi test esi, esi jz short loc_7F80D1EE mov eax, [esi+60h] test eax, eax jz short loc_7F80D1B9 push eax mov eax, [eax] call dword ptr [eax+8] mov [esi+64h], edi mov [esi+60h], edi loc_7F80D1B9: ; CODE XREF: sub_7F80D19A+11j mov eax, [esi+58h] xor edi, edi test eax, eax jz short loc_7F80D1CE push eax mov eax, [eax] call dword ptr [eax+8] mov [esi+5Ch], edi mov [esi+58h], edi loc_7F80D1CE: ; CODE XREF: sub_7F80D19A+26j lea eax, [esi+48h] cmp dword ptr [eax], 0 jz short loc_7F80D1DE push 0 push eax call sub_7F810922 loc_7F80D1DE: ; CODE XREF: sub_7F80D19A+3Aj xor eax, eax mov [esi], eax cmp [esi+8], eax jnz short loc_7F80D1EE push esi push esi call sub_7F80FD78 loc_7F80D1EE: ; CODE XREF: sub_7F80D19A+Aj ; sub_7F80D19A+4Bj pop edi pop esi retn 4 sub_7F80D19A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D1F3 proc near ; CODE XREF: sub_7F8035B3+153p ; sub_7F8045B6+102p var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 18h mov ecx, [eax+44h] push ebx push esi mov edx, [ebp+arg_4] push edi mov [ebp+var_8], ecx push [ebp+arg_C] push 0 mov [ebp+var_C], 0 mov eax, [edx] shl eax, 4 push eax push ecx call sub_7F80FD4C mov [ebp+var_4], eax test eax, eax jl loc_7F80D391 mov ecx, [ebp+arg_C] mov eax, [ebp+arg_4] mov ebx, [ecx] mov ecx, [eax] add eax, 4 mov [ebp+var_14], ecx mov [ebp+var_10], eax test ecx, ecx jz short loc_7F80D2A9 loc_7F80D243: ; CODE XREF: sub_7F80D1F3+B4j mov eax, [ebp+var_10] mov edx, [eax] mov [ebx], edx mov eax, [eax] shr eax, 10h cmp eax, 0E09h ja short loc_7F80D2C5 jz loc_7F80D334 cmp eax, 1Ah jz loc_7F80D30C loc_7F80D265: ; CODE XREF: sub_7F80D1F3+114j ; sub_7F80D1F3+122j push ebx mov ecx, [ebp+arg_C] push [ebp+var_10] push dword ptr [ecx] mov ecx, [ebp+arg_0] push [ebp+var_8] push dword ptr [ecx+54h] push dword ptr [ecx+48h] call sub_7F80F533 loc_7F80D27F: ; CODE XREF: sub_7F80D1F3+13Cj mov [ebp+var_4], eax test eax, eax jl loc_7F80D391 mov eax, [ebx] and eax, 0FFFFh cmp eax, 0Ah jnz short loc_7F80D299 loc_7F80D296: ; CODE XREF: sub_7F80D1F3+1D2j ; sub_7F80D1F3+209j ... inc [ebp+var_C] loc_7F80D299: ; CODE XREF: sub_7F80D1F3+A1j ; sub_7F80D1F3+198j ... add ebx, 10h dec [ebp+var_14] add [ebp+var_10], 4 cmp [ebp+var_14], 0 jnz short loc_7F80D243 loc_7F80D2A9: ; CODE XREF: sub_7F80D1F3+4Ej cmp [ebp+var_C], 0 jz short loc_7F80D2B6 mov [ebp+var_4], 40380h loc_7F80D2B6: ; CODE XREF: sub_7F80D1F3+BAj mov eax, [ebp+arg_4] mov edx, [ebp+arg_8] mov ecx, [eax] mov [edx], ecx jmp loc_7F80D3A7 ; --------------------------------------------------------------------------- loc_7F80D2C5: ; CODE XREF: sub_7F80D1F3+61j cmp eax, 0FF7h jz loc_7F80D3CA cmp eax, 0FF9h jz loc_7F80D3E1 cmp eax, 0FFAh jz loc_7F80D42D cmp eax, 0FFBh jz loc_7F80D47C cmp eax, 0FFEh jz loc_7F80D4EE cmp eax, 0FFFh jz loc_7F80D3E1 jmp loc_7F80D265 ; --------------------------------------------------------------------------- loc_7F80D30C: ; CODE XREF: sub_7F80D1F3+6Cj mov eax, [ebp+arg_0] mov eax, [eax+54h] cmp eax, 8 jz loc_7F80D265 push ebx mov ecx, [ebp+arg_C] push dword ptr [ecx] push eax push 0 push [ebp+var_8] push [ebp+arg_0] call sub_7F80E39F jmp loc_7F80D27F ; --------------------------------------------------------------------------- loc_7F80D334: ; CODE XREF: sub_7F80D1F3+63j lea eax, [ebp+var_18] mov ecx, [ebp+arg_0] push eax mov esi, [ebp+var_8] push dword ptr [ecx+4Ch] push dword ptr [esi+44h] call sub_7F82D073 push eax call sub_7F80F8B4 mov [ebp+var_4], eax test eax, eax jl short loc_7F80D3B3 mov ecx, [ebp+var_8] cmp dword ptr [ecx+58h], 0 jz short loc_7F80D3B3 mov eax, [ebx] mov edx, [ebp+arg_C] and eax, 0FFFF0102h or eax, 102h mov [ebx], eax lea eax, [ebx+0Ch] mov dword ptr [ebx+8], 1Ch push eax push [ebp+var_18] push dword ptr [edx] push ecx loc_7F80D381: ; CODE XREF: sub_7F80D1F3+235j ; sub_7F80D1F3+284j call sub_7F80F869 mov [ebp+var_4], eax test eax, eax jge loc_7F80D299 loc_7F80D391: ; CODE XREF: sub_7F80D1F3+33j ; sub_7F80D1F3+91j ... mov ecx, [ebp+arg_C] push dword ptr [ecx] push [ebp+var_8] call sub_7F80FD78 mov ecx, [ebp+arg_C] mov dword ptr [ecx], 0 loc_7F80D3A7: ; CODE XREF: sub_7F80D1F3+CDj mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F80D3B3: ; CODE XREF: sub_7F80D1F3+161j ; sub_7F80D1F3+16Aj mov eax, [ebx] and eax, 0FFFF000Ah or al, 0Ah mov [ebx], eax mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D296 ; --------------------------------------------------------------------------- loc_7F80D3CA: ; CODE XREF: sub_7F80D1F3+D7j and edx, 0FFFF0003h or dl, 3 mov [ebx], edx mov dword ptr [ebx+8], 0 jmp loc_7F80D299 ; --------------------------------------------------------------------------- loc_7F80D3E1: ; CODE XREF: sub_7F80D1F3+E2j ; sub_7F80D1F3+10Ej mov ecx, [ebp+var_8] cmp dword ptr [ecx+58h], 0 jnz short loc_7F80D401 and edx, 0FFFF000Ah or dl, 0Ah mov [ebx], edx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D296 ; --------------------------------------------------------------------------- loc_7F80D401: ; CODE XREF: sub_7F80D1F3+1F5j and edx, 0FFFF0102h lea eax, [ebx+0Ch] or edx, 102h push eax mov ecx, [ebp+arg_0] mov esi, [ebp+arg_C] mov [ebx], edx mov dword ptr [ebx+8], 1Ch push dword ptr [ecx+4Ch] push dword ptr [esi] push [ebp+var_8] jmp loc_7F80D381 ; --------------------------------------------------------------------------- loc_7F80D42D: ; CODE XREF: sub_7F80D1F3+EDj mov ecx, [ebp+var_8] cmp dword ptr [ecx+58h], 0 jnz short loc_7F80D44D and edx, 0FFFF000Ah or dl, 0Ah mov [ebx], edx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D296 ; --------------------------------------------------------------------------- loc_7F80D44D: ; CODE XREF: sub_7F80D1F3+241j and edx, 0FFFF0102h lea eax, [ebx+0Ch] or edx, 102h push eax mov ecx, [ebp+var_8] mov [ebx], edx mov dword ptr [ebx+8], 1Ch mov edx, [ecx+58h] mov ecx, [ebp+arg_C] push dword ptr [edx+18h] push dword ptr [ecx] push [ebp+var_8] jmp loc_7F80D381 ; --------------------------------------------------------------------------- loc_7F80D47C: ; CODE XREF: sub_7F80D1F3+F8j mov ecx, [ebp+var_8] cmp dword ptr [ecx+60h], 0 jnz short loc_7F80D49C and edx, 0FFFF000Ah or dl, 0Ah mov [ebx], edx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D296 ; --------------------------------------------------------------------------- loc_7F80D49C: ; CODE XREF: sub_7F80D1F3+290j and edx, 0FFFF0102h mov ecx, [ebp+var_8] or edx, 102h lea esi, [ebx+0Ch] push esi mov [ebx], edx mov eax, [ecx+5Ch] mov ecx, [ebp+arg_C] mov [ebx+8], eax push dword ptr [ecx] push eax push [ebp+var_8] call sub_7F80FD4C mov [ebp+var_4], eax test eax, eax jl loc_7F80D391 mov ecx, [ebp+var_8] mov eax, [ebx+8] mov edi, [esi] mov esi, [ecx+60h] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb jmp loc_7F80D299 ; --------------------------------------------------------------------------- loc_7F80D4EE: ; CODE XREF: sub_7F80D1F3+103j and edx, 0FFFF0003h or dl, 3 mov [ebx], edx mov dword ptr [ebx+8], 5 jmp loc_7F80D299 sub_7F80D1F3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D505 proc near ; CODE XREF: sub_7F80D5D7+9Fp var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp add eax, 8 sub esp, 10h mov [ebp+var_10], eax push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_C] mov eax, [ebp+arg_8] lea ecx, [ebp+var_8] mov [ebp+var_8], ebx push ecx mov [esi+4], ebx push ebx mov [esi+8], ebx mov edi, [eax] mov eax, edi shl eax, 4 push eax push [ebp+arg_4] call sub_7F80FD4C mov [ebp+var_4], eax cmp eax, ebx jl short loc_7F80D5C0 mov ecx, [ebp+var_8] mov edx, [ebp+arg_8] add edx, 4 test edi, edi jz short loc_7F80D5B0 loc_7F80D552: ; CODE XREF: sub_7F80D505+A9j mov eax, [edx] mov [ecx], eax mov ebx, [edx] shr ebx, 10h cmp ebx, 0E21h jz short loc_7F80D57D cmp ebx, 370Bh jz short loc_7F80D58D and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax mov dword ptr [ecx+8], 8004010Fh jmp short loc_7F80D59F ; --------------------------------------------------------------------------- loc_7F80D57D: ; CODE XREF: sub_7F80D505+5Cj and eax, 0FFFF0003h mov ebx, [ebp+arg_0] or al, 3 mov [ecx], eax mov eax, [ebx] jmp short loc_7F80D59C ; --------------------------------------------------------------------------- loc_7F80D58D: ; CODE XREF: sub_7F80D505+64j and eax, 0FFFF0003h mov ebx, [ebp+var_10] or al, 3 mov [ecx], eax mov eax, [ebx+2] loc_7F80D59C: ; CODE XREF: sub_7F80D505+86j mov [ecx+8], eax loc_7F80D59F: ; CODE XREF: sub_7F80D505+76j cmp [ebp+var_4], 0 jl short loc_7F80D5C0 dec edi add ecx, 10h add edx, 4 test edi, edi jnz short loc_7F80D552 loc_7F80D5B0: ; CODE XREF: sub_7F80D505+4Bj mov eax, [ebp+arg_8] mov edx, [ebp+var_8] mov ecx, [eax] mov [esi+4], ecx mov [esi+8], edx jmp short loc_7F80D5CB ; --------------------------------------------------------------------------- loc_7F80D5C0: ; CODE XREF: sub_7F80D505+3Ej ; sub_7F80D505+9Ej push [ebp+var_8] push [ebp+arg_4] call sub_7F80FD78 loc_7F80D5CB: ; CODE XREF: sub_7F80D505+B9j mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80D505 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D5D7 proc near ; CODE XREF: sub_7F80D6D8+A0p var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi xor esi, esi xor ebx, ebx mov [ebp+var_8], esi mov [ebp+var_4], esi mov [ebp+var_18], esi mov [ebp+var_14], esi mov [ebp+var_10], esi mov [ebp+var_C], 16h cmp [ebp+arg_4], esi jz loc_7F80D6B8 lea eax, [ebp+var_4] mov edi, [ebp+arg_0] push eax push esi push 16h push edi call sub_7F80FD4C cmp eax, esi mov ebx, eax jl loc_7F80D6BB loc_7F80D61D: ; CODE XREF: sub_7F80D5D7+77j ; sub_7F80D5D7+CBj lea eax, [ebp+var_C] push eax push [ebp+var_4] push [ebp+arg_4] call sub_7F811CD9 test eax, eax jnz short loc_7F80D6A7 lea eax, [ebp+var_8] mov ecx, [ebp+var_4] mov [ebp+var_C], 16h push eax push esi push dword ptr [ecx] push dword ptr [edi+48h] call sub_7F81121A cmp eax, 1001h jz short loc_7F80D61D push eax call sub_7F80F8B4 mov ebx, eax test ebx, ebx jl short loc_7F80D6BB push esi lea eax, [ebp+var_8] push eax call sub_7F810922 lea eax, [ebp+var_18] mov [ebp+var_8], esi push eax push offset unk_7F835610 push edi push [ebp+var_4] call sub_7F80D505 mov ebx, eax test ebx, ebx jl short loc_7F80D6BB lea eax, [ebp+var_18] mov ecx, [ebp+arg_8] push eax mov eax, [ecx] push [ebp+arg_8] call dword ptr [eax+10h] mov ebx, eax test ebx, ebx jl short loc_7F80D6BB push [ebp+var_10] push edi call sub_7F80FD78 mov [ebp+var_10], esi jmp loc_7F80D61D ; --------------------------------------------------------------------------- loc_7F80D6A7: ; CODE XREF: sub_7F80D5D7+57j cmp eax, 1005h jz short loc_7F80D6BB push eax call sub_7F80F8B4 mov ebx, eax jmp short loc_7F80D6BB ; --------------------------------------------------------------------------- loc_7F80D6B8: ; CODE XREF: sub_7F80D5D7+26j mov edi, [ebp+arg_0] loc_7F80D6BB: ; CODE XREF: sub_7F80D5D7+40j ; sub_7F80D5D7+83j ... push [ebp+var_10] push edi call sub_7F80FD78 push [ebp+var_4] push edi call sub_7F80FD78 mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F80D5D7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D6D8 proc near ; CODE XREF: sub_7F8042DA+78p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [ebp+arg_0] xor edi, edi mov [ebp+var_4], edi mov [ebp+var_8], edi cmp [esi+58h], edi jnz loc_7F80D789 lea eax, [ebp+var_8] push eax push dword ptr [esi+48h] call sub_7F8111EE test eax, eax jz short loc_7F80D746 cmp eax, 1001h jz short loc_7F80D746 push eax call sub_7F80F8B4 loc_7F80D712: ; CODE XREF: sub_7F80D6D8+97j mov edi, eax loc_7F80D714: ; CODE XREF: sub_7F80D6D8+A9j ; sub_7F80D6D8+C8j xor ebx, ebx cmp [ebp+var_4], ebx jz short loc_7F80D72C mov eax, [ebp+var_4] push [ebp+var_4] mov eax, [eax] call dword ptr [eax+8] mov [esi+58h], ebx mov [esi+64h], ebx loc_7F80D72C: ; CODE XREF: sub_7F80D6D8+41j ; sub_7F80D6D8+D1j cmp [ebp+var_8], 0 jz short loc_7F80D73B lea eax, [ebp+var_8] push eax call sub_7F811B7E loc_7F80D73B: ; CODE XREF: sub_7F80D6D8+58j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F80D746: ; CODE XREF: sub_7F80D6D8+2Bj ; sub_7F80D6D8+32j mov ecx, [esi+2Ch] lea eax, [ebp+var_4] push eax push offset unk_7F835610 push 0E210003h push 2 push 0 push dword ptr [ecx+8] push dword ptr [ecx+4] push dword ptr [ecx] push offset dword_7F801980 call CreateTable@36 test eax, eax jl short loc_7F80D712 push [ebp+var_4] push [ebp+var_8] push esi call sub_7F80D5D7 mov edi, eax test edi, edi jl short loc_7F80D714 mov eax, [ebp+var_4] mov [esi+58h], eax loc_7F80D789: ; CODE XREF: sub_7F80D6D8+17j push [ebp+arg_8] push esi push 0 mov ecx, [ebp+var_4] push 0 mov eax, [ecx] push [ebp+var_4] call dword ptr [eax+0Ch] mov edi, eax test edi, edi jl loc_7F80D714 inc dword ptr [esi+5Ch] jmp short loc_7F80D72C sub_7F80D6D8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80D7AB(void *lp, int, int, int, int, int, int) sub_7F80D7AB proc near ; CODE XREF: sub_7F80D991+EDp var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 lp = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp xor eax, eax mov ebp, esp sub esp, 14h push ebx mov ecx, [ebp+arg_14] push esi mov edx, [ebp+arg_18] push edi mov [ebp+var_14], eax mov [ebp+var_10], eax mov [ecx], eax mov [edx], eax cmp [ebp+lp], eax jnz short loc_7F80D7F4 mov [ebp+var_4], 80004005h loc_7F80D7D2: ; CODE XREF: sub_7F80D7AB+64j ; sub_7F80D7AB+127j ... mov ecx, [ebp+arg_18] push dword ptr [ecx] push [ebp+arg_C] call sub_7F80FD78 mov ecx, [ebp+arg_18] mov dword ptr [ecx], 0 loc_7F80D7E8: ; CODE XREF: sub_7F80D7AB+1E1j mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch ; --------------------------------------------------------------------------- loc_7F80D7F4: ; CODE XREF: sub_7F80D7AB+1Ej mov eax, [ebp+arg_10] push [ebp+arg_18] push 0 mov eax, [eax] shl eax, 4 push eax push [ebp+arg_C] call sub_7F80FD4C mov [ebp+var_4], eax test eax, eax jl short loc_7F80D7D2 mov ecx, [ebp+arg_18] mov eax, [ebp+arg_10] mov ebx, [ecx] mov ecx, [eax] add eax, 4 mov [ebp+var_C], ecx mov [ebp+var_8], eax test ecx, ecx jz loc_7F80D975 loc_7F80D82C: ; CODE XREF: sub_7F80D7AB+1C4j mov eax, [ebp+var_8] mov ecx, [eax] mov [ebx], ecx mov eax, [eax] shr eax, 10h cmp eax, 0C15h jz short loc_7F80D889 cmp eax, 0FFFh jz short loc_7F80D89F cmp eax, 3000h jz loc_7F80D8DD cmp eax, 3001h jz loc_7F80D8F6 cmp eax, 3002h jz loc_7F80D915 cmp eax, 3003h jz loc_7F80D934 and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp loc_7F80D952 ; --------------------------------------------------------------------------- loc_7F80D889: ; CODE XREF: sub_7F80D7AB+92j and ecx, 0FFFF0003h mov eax, [ebp+arg_4] or cl, 3 mov [ebx], ecx mov [ebx+8], eax jmp loc_7F80D952 ; --------------------------------------------------------------------------- loc_7F80D89F: ; CODE XREF: sub_7F80D7AB+99j cmp [ebp+var_10], 0 jz short loc_7F80D8BA mov edi, ebx mov esi, [ebp+var_10] movsd movsd movsd movsd mov eax, [ebp+var_8] mov ecx, [eax] mov [ebx], ecx jmp loc_7F80D952 ; --------------------------------------------------------------------------- loc_7F80D8BA: ; CODE XREF: sub_7F80D7AB+F8j push ebx ; int mov ecx, [ebp+arg_18] push dword ptr [ecx] ; int push [ebp+arg_C] ; int push [ebp+lp] ; lp push 0 ; int call sub_7F80EE72 mov [ebp+var_4], eax test eax, eax jl loc_7F80D7D2 mov [ebp+var_10], ebx jmp short loc_7F80D952 ; --------------------------------------------------------------------------- loc_7F80D8DD: ; CODE XREF: sub_7F80D7AB+A0j and ecx, 0FFFF0003h mov eax, [ebp+arg_4] shl eax, 10h or cl, 3 add eax, [ebp+arg_8] mov [ebx], ecx mov [ebx+8], eax jmp short loc_7F80D952 ; --------------------------------------------------------------------------- loc_7F80D8F6: ; CODE XREF: sub_7F80D7AB+ABj push ebx ; int mov ecx, [ebp+arg_18] push dword ptr [ecx] ; int push [ebp+arg_C] ; int push [ebp+lp] ; lp push 0 ; int call sub_7F80EC41 mov [ebp+var_4], eax test eax, eax jge short loc_7F80D952 jmp loc_7F80D7D2 ; --------------------------------------------------------------------------- loc_7F80D915: ; CODE XREF: sub_7F80D7AB+B6j push ebx ; int mov ecx, [ebp+arg_18] push dword ptr [ecx] ; int push [ebp+arg_C] ; int push [ebp+lp] ; lp push 0 ; int call sub_7F80EBCF mov [ebp+var_4], eax test eax, eax jge short loc_7F80D952 jmp loc_7F80D7D2 ; --------------------------------------------------------------------------- loc_7F80D934: ; CODE XREF: sub_7F80D7AB+C1j push ebx ; int mov ecx, [ebp+arg_18] push dword ptr [ecx] ; int push [ebp+arg_C] ; int push [ebp+lp] ; lp push 0 ; int call sub_7F80EB5D mov [ebp+var_4], eax test eax, eax jl loc_7F80D7D2 loc_7F80D952: ; CODE XREF: sub_7F80D7AB+D9j ; sub_7F80D7AB+EFj ... mov eax, [ebx] and eax, 0FFFFh cmp eax, 0Ah jnz short loc_7F80D961 inc [ebp+var_14] loc_7F80D961: ; CODE XREF: sub_7F80D7AB+1B1j add ebx, 10h dec [ebp+var_C] add [ebp+var_8], 4 cmp [ebp+var_C], 0 jnz loc_7F80D82C loc_7F80D975: ; CODE XREF: sub_7F80D7AB+7Bj cmp [ebp+var_14], 0 jz short loc_7F80D982 mov [ebp+var_4], 40380h loc_7F80D982: ; CODE XREF: sub_7F80D7AB+1CEj mov eax, [ebp+arg_10] mov ecx, [ebp+arg_14] mov edx, [eax] mov [ecx], edx jmp loc_7F80D7E8 sub_7F80D7AB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80D991 proc near ; CODE XREF: sub_7F80DB1E+ABp ; sub_7F80DB1E+C6p ... var_1C = dword ptr -1Ch ucb = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 lp = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 1Ch push ebx push esi push edi xor ebx, ebx mov [ebp+lp], ebx mov [ebp+var_14], ebx mov esi, [ebp+arg_0] lea eax, [ebp+ucb] push eax mov edi, [ebp+arg_4] push edi mov [ebp+var_10], ebx mov [ebp+var_C], ebx mov [ebp+var_8], ebx push dword ptr [esi+48h] call sub_7F810E3F cmp eax, 1004h jz loc_7F80DAF2 test eax, eax jz short loc_7F80D9DA push eax call sub_7F80F8B4 mov ebx, eax jmp loc_7F80DAF2 ; --------------------------------------------------------------------------- loc_7F80D9DA: ; CODE XREF: sub_7F80D991+3Aj lea eax, [ebp+lp] push eax push 0 push [ebp+ucb] push dword ptr [esi+44h] call sub_7F80FD4C mov ebx, eax test ebx, ebx jl loc_7F80DAF4 lea eax, [ebp+ucb] push eax push [ebp+lp] push edi push dword ptr [esi+48h] call sub_7F810E8D push eax call sub_7F80F8B4 mov ebx, eax test ebx, ebx jl loc_7F80DAF4 push [ebp+ucb] ; ucb push [ebp+lp] ; lp push edi ; int call sub_7F80FC77 test eax, eax jnz short loc_7F80DA2F mov ebx, 80004005h jmp loc_7F80DAF2 ; --------------------------------------------------------------------------- loc_7F80DA2F: ; CODE XREF: sub_7F80D991+92j mov [ebp+var_1C], 0 mov edi, [ebp+lp] push edi ; lp call sub_7F80FAC3 test eax, eax jz loc_7F80DAF2 loc_7F80DA47: ; CODE XREF: sub_7F80D991+15Bj cmp word ptr [edi], 0 jz loc_7F80DAF2 cmp [ebp+var_8], 0 jz short loc_7F80DA67 push [ebp+var_8] push esi call sub_7F80FD78 mov [ebp+var_8], 0 loc_7F80DA67: ; CODE XREF: sub_7F80D991+C4j lea eax, [ebp+var_8] lea ecx, [ebp+var_C] push eax ; int push ecx ; int push offset unk_7F8355F0 ; int push dword ptr [esi+44h] ; int push [ebp+var_1C] ; int push [ebp+arg_8] ; int push edi ; lp call sub_7F80D7AB mov ebx, eax test ebx, ebx jge short loc_7F80DA8E inc [ebp+var_14] jmp short loc_7F80DAD2 ; --------------------------------------------------------------------------- loc_7F80DA8E: ; CODE XREF: sub_7F80D991+F6j jz short loc_7F80DABD push 3001001Eh push [ebp+var_C] push [ebp+var_8] call PpropFindProp@12 test eax, eax jz short loc_7F80DAB8 push 0C150003h push [ebp+var_C] push [ebp+var_8] call PpropFindProp@12 test eax, eax jnz short loc_7F80DABD loc_7F80DAB8: ; CODE XREF: sub_7F80D991+111j inc [ebp+var_14] jmp short loc_7F80DAD2 ; --------------------------------------------------------------------------- loc_7F80DABD: ; CODE XREF: sub_7F80D991:loc_7F80DA8Ej ; sub_7F80D991+125j lea eax, [ebp+var_10] mov ecx, [ebp+arg_C] push eax mov eax, [ecx] push [ebp+arg_C] call dword ptr [eax+10h] mov ebx, eax test ebx, ebx jl short loc_7F80DAF4 loc_7F80DAD2: ; CODE XREF: sub_7F80D991+FBj ; sub_7F80D991+12Aj movzx ecx, word ptr [edi+4] movzx eax, word ptr [edi+6] add ecx, eax inc [ebp+var_1C] add ecx, 8 add edi, ecx push edi ; lp call sub_7F80FAC3 test eax, eax jnz loc_7F80DA47 loc_7F80DAF2: ; CODE XREF: sub_7F80D991+32j ; sub_7F80D991+44j ... test ebx, ebx loc_7F80DAF4: ; CODE XREF: sub_7F80D991+5Ej ; sub_7F80D991+7Ej ... jnz short loc_7F80DB01 cmp [ebp+var_14], 0 jz short loc_7F80DB01 mov ebx, 40380h loc_7F80DB01: ; CODE XREF: sub_7F80D991:loc_7F80DAF4j ; sub_7F80D991+169j push [ebp+lp] push esi call sub_7F80FD78 push [ebp+var_8] push esi call sub_7F80FD78 mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80D991 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80DB1E proc near ; CODE XREF: sub_7F803EAC+7Dp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [ebp+arg_0] xor edi, edi mov [ebp+var_8], edi mov [ebp+var_4], edi cmp [esi+60h], edi jnz loc_7F80DC0D mov ecx, [esi+2Ch] lea eax, [ebp+var_4] push eax push offset unk_7F8355F0 push 30000003h push 2 push edi push dword ptr [ecx+8] push dword ptr [ecx+4] push dword ptr [ecx] push offset dword_7F801980 call CreateTable@36 test eax, eax jge short loc_7F80DB99 mov ebx, eax loc_7F80DB67: ; CODE XREF: sub_7F80DB1E+104j xor edi, edi cmp [ebp+var_4], edi jz short loc_7F80DB7F mov eax, [ebp+var_4] push [ebp+var_4] mov eax, [eax] call dword ptr [eax+8] mov [esi+60h], edi mov [esi+64h], edi loc_7F80DB7F: ; CODE XREF: sub_7F80DB1E+4Ej ; sub_7F80DB1E+10Dj test ebx, ebx jl short loc_7F80DB8E cmp [ebp+var_8], 0 jz short loc_7F80DB8E mov ebx, 40380h loc_7F80DB8E: ; CODE XREF: sub_7F80DB1E+63j ; sub_7F80DB1E+69j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F80DB99: ; CODE XREF: sub_7F80DB1E+45j mov ecx, 8001h mov ebx, 8002h mov edi, 8003h mov eax, [esi+54h] cmp eax, 2 jz short loc_7F80DBB5 cmp eax, 8 jnz short loc_7F80DBBE loc_7F80DBB5: ; CODE XREF: sub_7F80DB1E+90j mov ecx, 2 xor ebx, ebx xor edi, edi loc_7F80DBBE: ; CODE XREF: sub_7F80DB1E+95j test ecx, ecx jz short loc_7F80DBD9 push [ebp+var_4] push 1 push ecx push esi call sub_7F80D991 test eax, eax jge short loc_7F80DBD9 mov [ebp+var_8], 1 loc_7F80DBD9: ; CODE XREF: sub_7F80DB1E+A2j ; sub_7F80DB1E+B2j test ebx, ebx jz short loc_7F80DBF0 push [ebp+var_4] push 2 push ebx push esi call sub_7F80D991 test eax, eax jge short loc_7F80DBF0 inc [ebp+var_8] loc_7F80DBF0: ; CODE XREF: sub_7F80DB1E+BDj ; sub_7F80DB1E+CDj test edi, edi jz short loc_7F80DC07 push [ebp+var_4] push 3 push edi push esi call sub_7F80D991 test eax, eax jge short loc_7F80DC07 inc [ebp+var_8] loc_7F80DC07: ; CODE XREF: sub_7F80DB1E+D4j ; sub_7F80DB1E+E4j mov eax, [ebp+var_4] mov [esi+60h], eax loc_7F80DC0D: ; CODE XREF: sub_7F80DB1E+17j push [ebp+arg_8] push esi mov ecx, [esi+60h] push 0 mov eax, [ecx] push 0 push ecx call dword ptr [eax+0Ch] mov ebx, eax test ebx, ebx jl loc_7F80DB67 inc dword ptr [esi+64h] jmp loc_7F80DB7F sub_7F80DB1E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80DC30 proc near ; CODE XREF: sub_7F8042DA+171p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_10], 16h push ebx push esi push edi xor ebx, ebx mov ecx, [ebp+arg_C] mov esi, [ebp+arg_0] lea eax, [ebp+var_8] mov [ebp+var_8], ebx push eax mov [ebp+var_C], ebx mov [ebp+var_4], ebx mov [ecx], ebx push dword ptr [esi+48h] call sub_7F8111EE push eax call sub_7F80F8B4 cmp eax, ebx mov edi, eax jl loc_7F80DD54 push 1 push [ebp+arg_4] push [ebp+var_8] call sub_7F811C27 push eax call sub_7F80F8B4 cmp eax, ebx mov edi, eax jl loc_7F80DD54 lea eax, [ebp+var_4] push eax push ebx push 5Ch push dword ptr [esi+44h] call sub_7F80FD4C cmp eax, ebx mov edi, eax jl loc_7F80DD54 mov edi, [ebp+var_4] xor eax, eax mov ecx, 17h rep stosd mov ecx, [ebp+var_4] mov eax, [esi+2Ch] mov [ecx], ebx mov [ecx+4], ebx mov [ecx+8], ebx mov [ecx+0Ch], ebx mov [ecx+10h], ebx mov [ecx+2Ch], eax mov eax, [ebp+var_4] add eax, 54h push eax push [ebp+var_4] push [ebp+var_10] push dword ptr [esi+44h] call sub_7F80FD4C cmp eax, ebx mov edi, eax jl short loc_7F80DD54 lea eax, [ebp+var_10] mov ecx, [ebp+var_4] push eax push dword ptr [ecx+54h] push [ebp+var_8] call sub_7F811CD9 push eax call sub_7F80F8B4 cmp eax, ebx mov edi, eax jl short loc_7F80DD54 mov eax, [esi+44h] mov ecx, [ebp+var_4] mov [ecx+44h], eax mov ecx, [ebp+var_4] mov [ecx+40h], esi mov ecx, [ebp+var_4] lea edx, [ebp+var_C] mov eax, [ecx+54h] add eax, 8 push edx push ebx mov [ecx+58h], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_8] push [ebp+arg_4] mov [ecx+50h], eax push dword ptr [esi+48h] call sub_7F81121A push eax call sub_7F80F8B4 cmp eax, ebx mov edi, eax jl short loc_7F80DD54 mov eax, [ebp+var_C] mov ecx, [ebp+var_4] mov [ecx+48h], eax mov eax, [ebp+arg_C] mov edx, [ebp+var_4] mov [eax], edx jmp short loc_7F80DD6E ; --------------------------------------------------------------------------- loc_7F80DD54: ; CODE XREF: sub_7F80DC30+39j ; sub_7F80DC30+56j ... push [ebp+var_4] push esi call sub_7F80FD78 cmp [ebp+var_C], 0 jz short loc_7F80DD6E push 0 lea eax, [ebp+var_C] push eax call sub_7F810922 loc_7F80DD6E: ; CODE XREF: sub_7F80DC30+122j ; sub_7F80DC30+131j cmp [ebp+var_8], 0 jz short loc_7F80DD7D lea eax, [ebp+var_8] push eax call sub_7F811B7E loc_7F80DD7D: ; CODE XREF: sub_7F80DC30+142j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80DC30 endp ; =============== S U B R O U T I N E ======================================= sub_7F80DD88 proc near ; CODE XREF: sub_7F8042DA+222p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_7F80DDB1 lea eax, [esi+48h] cmp dword ptr [eax], 0 jz short loc_7F80DDA1 push 0 push eax call sub_7F810922 loc_7F80DDA1: ; CODE XREF: sub_7F80DD88+Fj xor eax, eax mov [esi], eax cmp [esi+8], eax jnz short loc_7F80DDB1 push esi push esi call sub_7F80FD78 loc_7F80DDB1: ; CODE XREF: sub_7F80DD88+7j ; sub_7F80DD88+20j pop esi retn 4 sub_7F80DD88 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80DDB5 proc near ; CODE XREF: sub_7F8045B6+1F7p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 14h mov ecx, [eax+44h] push ebx push esi mov edx, [ebp+arg_4] push edi mov [ebp+var_8], ecx push [ebp+arg_C] push 0 mov [ebp+var_14], 0 mov eax, [edx] shl eax, 4 push eax push ecx call sub_7F80FD4C mov [ebp+var_4], eax test eax, eax jl loc_7F80DF45 mov ecx, [ebp+arg_C] mov eax, [ebp+arg_4] mov ebx, [ecx] mov ecx, [eax] add eax, 4 mov [ebp+var_10], ecx mov [ebp+var_C], eax test ecx, ecx jz loc_7F80DF2C loc_7F80DE09: ; CODE XREF: sub_7F80DDB5+171j mov eax, [ebp+var_C] mov ecx, [eax] mov [ebx], ecx mov eax, [eax] cmp eax, 0FF70003h jz short loc_7F80DE79 cmp eax, 0FFE0003h jz short loc_7F80DE85 cmp eax, 37050003h jz short loc_7F80DE91 cmp eax, 370A0102h jz loc_7F80DEB6 cmp eax, 370B0003h jz loc_7F80DF0C push ebx mov ecx, [ebp+arg_C] push [ebp+var_C] push dword ptr [ecx] mov ecx, [ebp+arg_0] push [ebp+var_8] push 0 push dword ptr [ecx+48h] call sub_7F80F533 mov [ebp+var_4], eax test eax, eax jl loc_7F80DF45 mov eax, [ebx] and eax, 0FFFFh cmp eax, 0Ah jnz loc_7F80DF18 inc [ebp+var_14] jmp loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DE79: ; CODE XREF: sub_7F80DDB5+62j mov dword ptr [ebx+8], 0 jmp loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DE85: ; CODE XREF: sub_7F80DDB5+69j mov dword ptr [ebx+8], 7 jmp loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DE91: ; CODE XREF: sub_7F80DDB5+70j mov eax, [ebp+arg_0] mov ecx, [eax+58h] movzx eax, word ptr [ecx] cmp eax, 2 jl short loc_7F80DEA4 cmp eax, 3 jle short loc_7F80DEAD loc_7F80DEA4: ; CODE XREF: sub_7F80DDB5+E8j mov dword ptr [ebx+8], 1 jmp short loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DEAD: ; CODE XREF: sub_7F80DDB5+EDj mov dword ptr [ebx+8], 6 jmp short loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DEB6: ; CODE XREF: sub_7F80DDB5+77j mov eax, [ebp+arg_0] mov edx, [eax+58h] movzx eax, word ptr [edx] cmp eax, 2 jl short loc_7F80DEC9 cmp eax, 3 jle short loc_7F80DEDD loc_7F80DEC9: ; CODE XREF: sub_7F80DDB5+10Dj and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx mov dword ptr [ebx+8], 8004010Fh jmp short loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DEDD: ; CODE XREF: sub_7F80DDB5+112j lea edi, [ebx+0Ch] mov ecx, [ebp+arg_C] push edi push dword ptr [ecx] push 0Bh push [ebp+var_8] call sub_7F80FD4C mov [ebp+var_4], eax test eax, eax jl short loc_7F80DF45 mov esi, offset dword_7F8019C0 mov edi, [edi] movsd movsd movsw movsb mov dword ptr [ebx+8], 0Bh jmp short loc_7F80DF18 ; --------------------------------------------------------------------------- loc_7F80DF0C: ; CODE XREF: sub_7F80DDB5+82j mov eax, [ebp+arg_0] mov ecx, [eax+58h] mov edx, [ecx+2] mov [ebx+8], edx loc_7F80DF18: ; CODE XREF: sub_7F80DDB5+B6j ; sub_7F80DDB5+BFj ... add ebx, 10h dec [ebp+var_10] add [ebp+var_C], 4 cmp [ebp+var_10], 0 jnz loc_7F80DE09 loc_7F80DF2C: ; CODE XREF: sub_7F80DDB5+4Ej cmp [ebp+var_14], 0 jz short loc_7F80DF39 mov [ebp+var_4], 40380h loc_7F80DF39: ; CODE XREF: sub_7F80DDB5+17Bj mov eax, [ebp+arg_4] mov edx, [ebp+arg_8] mov ecx, [eax] mov [edx], ecx jmp short loc_7F80DF5B ; --------------------------------------------------------------------------- loc_7F80DF45: ; CODE XREF: sub_7F80DDB5+33j ; sub_7F80DDB5+A6j ... mov ecx, [ebp+arg_C] push dword ptr [ecx] push [ebp+var_8] call sub_7F80FD78 mov ecx, [ebp+arg_C] mov dword ptr [ecx], 0 loc_7F80DF5B: ; CODE XREF: sub_7F80DDB5+18Ej mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80DDB5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80DF67 proc near ; CODE XREF: sub_7F80F805+52p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx mov ecx, [ebp+arg_C] push esi lea eax, [ebp+var_C] push edi xor esi, esi push eax mov [ebp+var_4], esi push esi mov ebx, [ebp+arg_0] push esi mov [ebp+var_C], esi push [ebp+arg_4] mov [ecx], esi push dword ptr [ebx+48h] call sub_7F810FCE push eax call sub_7F80F8B4 mov [ebp+var_8], eax cmp eax, esi jl short loc_7F80E000 lea eax, [ebp+var_4] push eax push esi push 54h push ebx call sub_7F80FD4C mov [ebp+var_8], eax cmp eax, esi jl short loc_7F80E000 mov edi, [ebp+var_4] xor eax, eax mov ecx, 15h rep stosd mov eax, [ebx+2Ch] mov ecx, [ebp+var_4] mov [ecx], esi mov [ecx+4], esi mov [ecx+8], esi mov [ecx+0Ch], esi mov [ecx+10h], esi mov [ecx+2Ch], eax mov eax, [ebx+44h] mov ecx, [ebp+var_4] mov [ecx+44h], eax mov ecx, [ebp+var_4] mov [ecx+40h], ebx mov ecx, [ebp+var_4] mov eax, [ebp+var_C] mov [ecx+48h], eax mov ecx, [ebp+var_4] mov eax, [ebp+arg_8] mov [ecx+50h], eax mov ecx, [ebp+arg_C] mov edx, [ebp+var_4] mov [ecx], edx jmp short loc_7F80E018 ; --------------------------------------------------------------------------- loc_7F80E000: ; CODE XREF: sub_7F80DF67+35j ; sub_7F80DF67+49j push [ebp+var_4] push ebx call sub_7F80FD78 cmp [ebp+var_C], 0 jz short loc_7F80E018 lea eax, [ebp+var_C] push eax call sub_7F811095 loc_7F80E018: ; CODE XREF: sub_7F80DF67+97j ; sub_7F80DF67+A6j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80DF67 endp ; =============== S U B R O U T I N E ======================================= sub_7F80E024 proc near ; CODE XREF: sub_7F80493B+129p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_7F80E04B lea eax, [esi+48h] cmp dword ptr [eax], 0 jz short loc_7F80E03B push eax call sub_7F811095 loc_7F80E03B: ; CODE XREF: sub_7F80E024+Fj xor eax, eax mov [esi], eax cmp [esi+8], eax jnz short loc_7F80E04B push esi push esi call sub_7F80FD78 loc_7F80E04B: ; CODE XREF: sub_7F80E024+7j ; sub_7F80E024+1Ej pop esi retn 4 sub_7F80E024 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E04F proc near ; CODE XREF: sub_7F80493B+D1p var_10 = dword ptr -10h ucb = dword ptr -0Ch lp = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi xor esi, esi mov [ebp+lp], esi mov [ebp+var_10], esi cmp [ebp+arg_14], esi jz short loc_7F80E06D mov eax, [ebp+arg_14] mov [eax], esi mov [eax+4], esi loc_7F80E06D: ; CODE XREF: sub_7F80E04F+14j xor eax, eax cmp [ebp+arg_10], eax jz short loc_7F80E07C mov ecx, [ebp+arg_10] mov [ecx], eax mov [ecx+4], eax loc_7F80E07C: ; CODE XREF: sub_7F80E04F+23j cmp [ebp+arg_C], 0 jz short loc_7F80E089 mov [ebp+arg_8], 0FFFFFFFFh loc_7F80E089: ; CODE XREF: sub_7F80E04F+31j mov [ebp+ucb], 4000h loc_7F80E090: ; CODE XREF: sub_7F80E04F+68j lea eax, [ebp+lp] mov edx, [ebp+arg_0] push eax push 0 push [ebp+ucb] push dword ptr [edx+44h] call sub_7F80FD4C cmp eax, 8007000Eh mov edi, eax jnz short loc_7F80E0B9 shr [ebp+ucb], 1 cmp [ebp+ucb], 80h jnb short loc_7F80E090 loc_7F80E0B9: ; CODE XREF: sub_7F80E04F+5Cj test edi, edi jl loc_7F80E14E mov [ebp+var_4], 0 xor ebx, ebx cmp [ebp+arg_8], ebx jz short loc_7F80E131 loc_7F80E0CF: ; CODE XREF: sub_7F80E04F+E0j cmp [ebp+var_4], ebx jnz short loc_7F80E131 test edi, edi jl short loc_7F80E14E mov ebx, [ebp+ucb] mov eax, [ebp+arg_8] cmp ebx, eax jb short loc_7F80E0E4 mov ebx, eax loc_7F80E0E4: ; CODE XREF: sub_7F80E04F+91j lea eax, [ebp+var_4] push eax ; LPVOID push ebx ; ucb push [ebp+lp] ; lp push [ebp+arg_0] ; void * call sub_7F80E173 mov edi, eax add esi, [ebp+var_4] cmp [ebp+var_4], 0 jz short loc_7F80E126 lea eax, [ebp+var_4] push eax mov eax, [ebp+arg_4] push [ebp+var_4] push [ebp+lp] mov eax, [eax] push [ebp+arg_4] call dword ptr [eax+10h] test eax, eax jz short loc_7F80E126 test edi, edi jz short loc_7F80E124 test eax, eax jge short loc_7F80E126 test edi, edi jl short loc_7F80E126 loc_7F80E124: ; CODE XREF: sub_7F80E04F+CBj mov edi, eax loc_7F80E126: ; CODE XREF: sub_7F80E04F+AEj ; sub_7F80E04F+C7j ... mov ecx, [ebp+var_4] add [ebp+var_10], ecx sub [ebp+arg_8], ecx jnz short loc_7F80E0CF loc_7F80E131: ; CODE XREF: sub_7F80E04F+7Ej ; sub_7F80E04F+83j test edi, edi jl short loc_7F80E14E cmp [ebp+arg_14], 0 jz short loc_7F80E143 mov eax, [ebp+arg_14] mov ecx, [ebp+var_10] mov [eax], ecx loc_7F80E143: ; CODE XREF: sub_7F80E04F+EAj cmp [ebp+arg_10], 0 jz short loc_7F80E14E mov ecx, [ebp+arg_10] mov [ecx], esi loc_7F80E14E: ; CODE XREF: sub_7F80E04F+6Cj ; sub_7F80E04F+87j ... push [ebp+lp] push [ebp+arg_0] call sub_7F80FD78 mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80E04F endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80E164(void *lp) sub_7F80E164 proc near ; CODE XREF: sub_7F80E173+16p lp = dword ptr 4 push 4 ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr retn 4 sub_7F80E164 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80E173(void *, void *lp, UINT_PTR ucb, LPVOID) sub_7F80E173 proc near ; CODE XREF: sub_7F80E04F+A0p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 lp = dword ptr 0Ch ucb = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor ebx, ebx push [ebp+arg_0] ; lp xor edi, edi mov [ebp+var_8], edi mov [ebp+var_4], edi call sub_7F80E164 test eax, eax jnz loc_7F80E216 mov esi, [ebp+ucb] push esi ; ucb push [ebp+lp] ; lp call ds:IsBadHugeReadPtr test eax, eax jnz short loc_7F80E216 cmp [ebp+arg_C], edi jz short loc_7F80E1BB push 4 ; ucb push [ebp+arg_C] ; lp call ds:IsBadWritePtr test eax, eax jnz short loc_7F80E216 loc_7F80E1BB: ; CODE XREF: sub_7F80E173+37j mov eax, [ebp+arg_C] test esi, esi mov dword ptr [eax], 0 jz short loc_7F80E200 loc_7F80E1C8: ; CODE XREF: sub_7F80E173+8Bj test ebx, ebx jnz short loc_7F80E204 mov eax, [ebp+var_8] cmp [ebp+var_4], eax jnz short loc_7F80E200 lea eax, [ebp+var_4] mov edx, [ebp+arg_0] push eax mov [ebp+var_8], esi push [ebp+lp] push dword ptr [edx+48h] mov [ebp+var_4], esi call sub_7F8110DD mov ebx, eax sub esi, [ebp+var_4] mov ecx, [ebp+var_4] mov eax, [ebp+arg_C] add [ebp+lp], ecx add [eax], ecx test esi, esi jnz short loc_7F80E1C8 loc_7F80E200: ; CODE XREF: sub_7F80E173+53j ; sub_7F80E173+5Fj test ebx, ebx jz short loc_7F80E21B loc_7F80E204: ; CODE XREF: sub_7F80E173+57j cmp ebx, 1014h jz short loc_7F80E21B push ebx call sub_7F80F8B4 mov edi, eax jmp short loc_7F80E21B ; --------------------------------------------------------------------------- loc_7F80E216: ; CODE XREF: sub_7F80E173+1Dj ; sub_7F80E173+32j ... mov edi, 80070057h loc_7F80E21B: ; CODE XREF: sub_7F80E173+8Fj ; sub_7F80E173+97j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80E173 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E226 proc near ; CODE XREF: sub_7F80F674+121p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_4] mov ebp, esp mov eax, ds:dword_7F801828[eax*4] test eax, eax jz short loc_7F80E24E cmp dword ptr [eax+4], 0 jz short loc_7F80E24E loc_7F80E23E: ; CODE XREF: sub_7F80E226+26j mov ecx, [ebp+arg_0] cmp [eax], ecx jz short loc_7F80E26E add eax, 0Ch cmp dword ptr [eax+4], 0 jnz short loc_7F80E23E loc_7F80E24E: ; CODE XREF: sub_7F80E226+10j ; sub_7F80E226+16j cmp ds:dword_7F80139C, 0 mov eax, offset dword_7F801398 jz short loc_7F80E26C loc_7F80E25C: ; CODE XREF: sub_7F80E226+44j mov ecx, [ebp+arg_0] cmp [eax], ecx jz short loc_7F80E26E add eax, 0Ch cmp dword ptr [eax+4], 0 jnz short loc_7F80E25C loc_7F80E26C: ; CODE XREF: sub_7F80E226+34j xor eax, eax loc_7F80E26E: ; CODE XREF: sub_7F80E226+1Dj ; sub_7F80E226+3Bj pop ebp retn 8 sub_7F80E226 endp ; =============== S U B R O U T I N E ======================================= sub_7F80E272 proc near ; CODE XREF: sub_7F80F533+30p ; sub_7F80F533+4Ep ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] cmp dword ptr [eax+4], 0 jz short loc_7F80E294 loc_7F80E27C: ; CODE XREF: sub_7F80E272+20j mov ecx, [eax+4] xor ecx, [esp+arg_4] test ecx, 0FFFF0000h jz short locret_7F80E296 add eax, 0Ch cmp dword ptr [eax+4], 0 jnz short loc_7F80E27C loc_7F80E294: ; CODE XREF: sub_7F80E272+8j xor eax, eax locret_7F80E296: ; CODE XREF: sub_7F80E272+17j retn 8 sub_7F80E272 endp ; =============== S U B R O U T I N E ======================================= sub_7F80E299 proc near ; CODE XREF: sub_7F80F674+92p ; sub_7F80F674+A2p arg_0 = dword ptr 4 arg_4 = dword ptr 8 xor eax, eax mov ecx, [esp+arg_0] cmp [ecx+4], eax jz short locret_7F80E2BC mov edx, [esp+arg_4] loc_7F80E2A8: ; CODE XREF: sub_7F80E299+21j cmp [ecx], edx jnz short loc_7F80E2AF inc eax jmp short loc_7F80E2B3 ; --------------------------------------------------------------------------- loc_7F80E2AF: ; CODE XREF: sub_7F80E299+11j test eax, eax jnz short locret_7F80E2BC loc_7F80E2B3: ; CODE XREF: sub_7F80E299+14j add ecx, 0Ch cmp dword ptr [ecx+4], 0 jnz short loc_7F80E2A8 locret_7F80E2BC: ; CODE XREF: sub_7F80E299+9j ; sub_7F80E299+18j retn 8 sub_7F80E299 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E2BF proc near ; CODE XREF: sub_7F80E354+1Fp ; sub_7F80E39F+36p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch mov [ebp+var_C], 80h push esi push edi mov esi, [ebp+arg_0] test esi, esi jz short loc_7F80E314 lea eax, [ebp+var_8] mov edi, 78008h push eax push edi push dword ptr [esi+48h] call sub_7F810E3F push eax call sub_7F80F8B4 test eax, eax jl short loc_7F80E33D cmp [ebp+var_8], 2 jnz short loc_7F80E33D lea eax, [ebp+var_8] lea ecx, [ebp+var_2] push eax push ecx push edi push dword ptr [esi+48h] call sub_7F810E8D push eax call sub_7F80F8B4 test eax, eax jge short loc_7F80E31C jmp short loc_7F80E33D ; --------------------------------------------------------------------------- loc_7F80E314: ; CODE XREF: sub_7F80E2BF+14j mov ax, [ebp+arg_8] mov [ebp+var_2], ax loc_7F80E31C: ; CODE XREF: sub_7F80E2BF+51j push 0 lea eax, [ebp+var_C] push eax mov edx, [ebp+arg_4] push [ebp+arg_C] push dword ptr [ebp+var_2] push dword ptr [edx+44h] call sub_7F82CB67 push eax call sub_7F80F8B4 test eax, eax jge short loc_7F80E34C loc_7F80E33D: ; CODE XREF: sub_7F80E2BF+30j ; sub_7F80E2BF+36j ... mov esi, offset aIpm_microsoftM ; "IPM.Microsoft Mail.Note" mov edi, [ebp+arg_C] mov ecx, 6 rep movsd loc_7F80E34C: ; CODE XREF: sub_7F80E2BF+7Cj pop edi pop esi mov esp, ebp pop ebp retn 10h sub_7F80E2BF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E354 proc near ; CODE XREF: sub_7F80D08D+D2p ; sub_7F80E439+18p String1 = byte ptr -80h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 80h push esi lea eax, [ebp+String1] push edi xor esi, esi push eax mov edi, offset off_7F8017E0 push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F80E2BF loc_7F80E378: ; CODE XREF: sub_7F80E354+3Fj push dword ptr [edi+4] ; lpString2 lea ecx, [ebp+String1] push ecx ; lpString1 call ds:lstrcmpiA test eax, eax jz short loc_7F80E395 inc esi add edi, 8 cmp edi, offset dword_7F801828 jb short loc_7F80E378 loc_7F80E395: ; CODE XREF: sub_7F80E354+33j mov eax, esi pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F80E354 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E39F proc near ; CODE XREF: sub_7F80D1F3+137p ; sub_7F80E439+2Ep String = byte ptr -84h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 84h push ebx mov eax, [ebp+arg_C] push esi mov ebx, [ebp+arg_14] push edi cmp eax, 9 lea edi, [ebx+8] mov dword ptr [edi], 0 jb short loc_7F80E3DC lea eax, [ebp+String] lea esi, [ebp+String] push eax push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F80E2BF jmp short loc_7F80E3E3 ; --------------------------------------------------------------------------- loc_7F80E3DC: ; CODE XREF: sub_7F80E39F+1Ej mov esi, ds:off_7F8017E0[eax*8] loc_7F80E3E3: ; CODE XREF: sub_7F80E39F+3Bj push esi ; lpString call ds:lstrlenA inc eax push edi push [ebp+arg_10] push eax push [ebp+arg_4] mov [ebp+var_4], eax call sub_7F80FD4C test eax, eax jge short loc_7F80E410 mov ecx, [ebx] mov [edi], eax and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx jmp short loc_7F80E430 ; --------------------------------------------------------------------------- loc_7F80E410: ; CODE XREF: sub_7F80E39F+5Ej mov edx, [ebp+var_4] mov edi, [edi] mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb mov ecx, [ebx] and ecx, 0FFFF001Eh or cl, 1Eh mov [ebx], ecx loc_7F80E430: ; CODE XREF: sub_7F80E39F+6Fj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80E39F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E439 proc near ; DATA XREF: .text:7F801508o ; .text:7F8017A8o arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp xor eax, eax mov ebp, esp push esi cmp [ebp+arg_0], 2 mov esi, [ebp+arg_4] jnz short loc_7F80E456 mov ax, [esi] push eax push [ebp+arg_8] push 0 call sub_7F80E354 loc_7F80E456: ; CODE XREF: sub_7F80E439+Dj mov ecx, [ebp+arg_10] push ecx push [ebp+arg_C] push eax mov cx, [esi] push ecx push [ebp+arg_8] push 0 call sub_7F80E39F pop esi pop ebp retn 14h sub_7F80E439 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E471 proc near ; DATA XREF: .text:7F8013DCo ; .text:7F8013E8o ... FileTime = _FILETIME ptr -18h SystemTime = SYSTEMTIME ptr -10h arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov ecx, [esp+arg_4] mov ax, [ecx+0Ah] mov ebp, esp mov dx, [ecx+8] sub esp, 18h mov [ebp+SystemTime.wSecond], ax push esi mov [ebp+SystemTime.wMilliseconds], 0 mov si, [ecx+6] mov ax, [ecx+4] mov [ebp+SystemTime.wMinute], dx mov dx, [ecx+2] mov [ebp+SystemTime.wHour], si mov si, [ecx] mov [ebp+SystemTime.wDay], ax mov ax, [ecx+0Ch] lea ecx, [ebp+FileTime] mov [ebp+SystemTime.wMonth], dx push ecx ; lpFileTime mov [ebp+SystemTime.wYear], si lea esi, [ebp+SystemTime] mov [ebp+SystemTime.wDayOfWeek], ax push esi ; lpSystemTime call ds:SystemTimeToFileTime mov esi, [ebp+arg_10] test eax, eax jz short loc_7F80E4E0 lea eax, [esi+8] lea ecx, [ebp+FileTime] push eax ; lpFileTime push ecx ; lpLocalFileTime call ds:LocalFileTimeToFileTime test eax, eax jnz short loc_7F80E506 loc_7F80E4E0: ; CODE XREF: sub_7F80E471+5Bj lea eax, [ebp+SystemTime] push eax ; lpSystemTime call ds:GetSystemTime lea eax, [ebp+FileTime] lea ecx, [ebp+SystemTime] push eax ; lpFileTime push ecx ; lpSystemTime call ds:SystemTimeToFileTime lea ecx, [esi+8] lea edx, [ebp+FileTime] push ecx ; lpFileTime push edx ; lpLocalFileTime call ds:LocalFileTimeToFileTime loc_7F80E506: ; CODE XREF: sub_7F80E471+6Dj mov eax, [esi] and eax, 0FFFF0040h or al, 40h mov [esi], eax xor eax, eax pop esi mov esp, ebp pop ebp retn 14h sub_7F80E471 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E51A proc near ; DATA XREF: .text:7F8014C0o arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_4] movsx eax, word ptr [eax] mov ebp, esp cmp eax, 1 jz short loc_7F80E53F cmp eax, 2 jz short loc_7F80E54B mov ecx, [ebp+arg_10] cmp eax, 3 jz short loc_7F80E557 mov dword ptr [ecx+8], 0 jmp short loc_7F80E55E ; --------------------------------------------------------------------------- loc_7F80E53F: ; CODE XREF: sub_7F80E51A+Dj mov ecx, [ebp+arg_10] mov dword ptr [ecx+8], 1 jmp short loc_7F80E55E ; --------------------------------------------------------------------------- loc_7F80E54B: ; CODE XREF: sub_7F80E51A+12j mov ecx, [ebp+arg_10] mov dword ptr [ecx+8], 0 jmp short loc_7F80E55E ; --------------------------------------------------------------------------- loc_7F80E557: ; CODE XREF: sub_7F80E51A+1Aj mov dword ptr [ecx+8], 0FFFFFFFFh loc_7F80E55E: ; CODE XREF: sub_7F80E51A+23j ; sub_7F80E51A+2Fj ... mov eax, [ecx] pop ebp and eax, 0FFFF0003h or al, 3 mov [ecx], eax xor eax, eax retn 14h sub_7F80E51A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E56F proc near ; DATA XREF: .text:7F8014CCo arg_4 = dword ptr 0Ch arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_4] movsx eax, word ptr [eax] mov ebp, esp cmp eax, 1 jz short loc_7F80E594 cmp eax, 2 jz short loc_7F80E5A0 mov ecx, [ebp+arg_10] cmp eax, 3 jz short loc_7F80E5AC mov dword ptr [ecx+8], 1 jmp short loc_7F80E5B3 ; --------------------------------------------------------------------------- loc_7F80E594: ; CODE XREF: sub_7F80E56F+Dj mov ecx, [ebp+arg_10] mov dword ptr [ecx+8], 2 jmp short loc_7F80E5B3 ; --------------------------------------------------------------------------- loc_7F80E5A0: ; CODE XREF: sub_7F80E56F+12j mov ecx, [ebp+arg_10] mov dword ptr [ecx+8], 1 jmp short loc_7F80E5B3 ; --------------------------------------------------------------------------- loc_7F80E5AC: ; CODE XREF: sub_7F80E56F+1Aj mov dword ptr [ecx+8], 0 loc_7F80E5B3: ; CODE XREF: sub_7F80E56F+23j ; sub_7F80E56F+2Fj ... mov eax, [ecx] pop ebp and eax, 0FFFF0003h or al, 3 mov [ecx], eax xor eax, eax retn 14h sub_7F80E56F endp ; --------------------------------------------------------------------------- loc_7F80E5C4: ; DATA XREF: .text:7F8013A0o mov eax, [esp+8] xor ecx, ecx mov dl, [eax] mov cl, dl mov al, dl and ecx, 4 and al, 80h cmp al, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 10h or ecx, eax mov al, dl and al, 2 cmp al, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 8 or ecx, eax mov al, dl and al, 20h cmp al, 1 sbb eax, eax and dl, 1 inc eax or ecx, eax cmp dl, 1 sbb eax, eax mov edx, [esp+14h] and eax, 2 or ecx, eax mov eax, [edx] and eax, 0FFFF0003h mov [edx+8], ecx or al, 3 mov [edx], eax xor eax, eax retn 14h ; --------------------------------------------------------------------------- loc_7F80E626: ; DATA XREF: .text:7F8013ACo mov eax, [esp+8] mov ecx, [esp+14h] mov al, [eax] and al, 80h cmp al, 1 sbb eax, eax inc eax mov [ecx+8], ax mov eax, [ecx] and eax, 0FFFF000Bh or al, 0Bh mov [ecx], eax xor eax, eax retn 14h ; =============== S U B R O U T I N E ======================================= sub_7F80E64B proc near ; DATA XREF: .text:7F8013D0o ; .text:7F801400o ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h push ebx push esi mov ebx, [esp+8+arg_10] push edi push ebp lea eax, [ebx+8] mov ebp, [esp+10h+arg_0] push eax push [esp+14h+arg_C] mov dword ptr [ebx+8], 0 lea eax, [ebp+1] push eax push [esp+1Ch+arg_8] call sub_7F80FD4C test eax, eax jge short loc_7F80E689 mov ecx, [ebx] mov [ebx+8], eax and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx jmp short loc_7F80E6B2 ; --------------------------------------------------------------------------- loc_7F80E689: ; CODE XREF: sub_7F80E64B+2Aj mov edi, [ebx+8] mov esi, [esp+10h+arg_4] mov ecx, ebp shr ecx, 2 rep movsd mov ecx, ebp and ecx, 3 rep movsb mov ecx, [ebx+8] mov byte ptr [ecx+ebp], 0 mov ecx, [ebx] and ecx, 0FFFF001Eh or cl, 1Eh mov [ebx], ecx loc_7F80E6B2: ; CODE XREF: sub_7F80E64B+3Cj pop ebp pop edi pop esi pop ebx retn 14h sub_7F80E64B endp ; =============== S U B R O U T I N E ======================================= sub_7F80E6B9 proc near ; DATA XREF: .text:7F8013B8o ; .text:7F8013C4o arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h push ebx push esi mov ebx, [esp+8+arg_10] push edi push ebp xor edi, edi lea esi, [ebx+0Ch] mov ebp, [esp+10h+arg_0] push esi mov [ebx+8], edi push [esp+14h+arg_C] push ebp push [esp+1Ch+arg_8] mov [esi], edi call sub_7F80FD4C test eax, eax jge short loc_7F80E6F4 mov ecx, [ebx] mov [ebx+8], eax and ecx, 0FFFF000Ah or cl, 0Ah mov [ebx], ecx jmp short loc_7F80E71B ; --------------------------------------------------------------------------- loc_7F80E6F4: ; CODE XREF: sub_7F80E6B9+27j mov edi, [esi] mov ecx, ebp shr ecx, 2 mov esi, [esp+10h+arg_4] rep movsd mov ecx, ebp and ecx, 3 rep movsb mov ecx, [ebx] mov [ebx+8], ebp and ecx, 0FFFF0102h or ecx, 102h mov [ebx], ecx loc_7F80E71B: ; CODE XREF: sub_7F80E6B9+39j pop ebp pop edi pop esi pop ebx retn 14h sub_7F80E6B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80E722 proc near ; DATA XREF: .text:7F80140Co ; .text:7F8014A8o ... var_C = byte ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_10] lea eax, [esi+0Ch] mov [esi+8], ebx push eax mov [esi+0Ch], ebx push [ebp+arg_C] push 10h push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_4], eax cmp eax, ebx jge short loc_7F80E766 mov eax, [esi] mov ecx, [ebp+var_4] and eax, 0FFFF000Ah mov [esi+8], ecx or al, 0Ah mov [esi], eax mov eax, ecx jmp loc_7F80E7ED ; --------------------------------------------------------------------------- loc_7F80E766: ; CODE XREF: sub_7F80E722+2Aj mov edx, 10h mov eax, [ebp+arg_0] shr eax, 1 mov edi, [esi+0Ch] sub edx, eax test edx, edx jle short loc_7F80E797 xor eax, eax mov ecx, edx shr ecx, 2 rep stosd mov ecx, edx and ecx, 3 rep stosb mov eax, 10h mov edi, [esi+0Ch] add edi, edx sub eax, edx jmp short loc_7F80E79C ; --------------------------------------------------------------------------- loc_7F80E797: ; CODE XREF: sub_7F80E722+55j mov eax, 10h loc_7F80E79C: ; CODE XREF: sub_7F80E722+73j add eax, eax mov [ebp+var_8], eax test eax, eax jz short loc_7F80E7D5 loc_7F80E7A5: ; CODE XREF: sub_7F80E722+B1j mov eax, [ebp+arg_4] mov al, [eax+ebx+1] push eax ; CHAR call sub_7F80FCA0 mov ecx, [ebp+arg_4] mov [ebp+var_C], al mov dl, [ecx+ebx] add ebx, 2 push edx ; CHAR call sub_7F80FCA0 shl al, 4 add [ebp+var_C], al mov cl, [ebp+var_C] mov [edi], cl inc edi cmp [ebp+var_8], ebx ja short loc_7F80E7A5 loc_7F80E7D5: ; CODE XREF: sub_7F80E722+81j mov dword ptr [esi+8], 10h mov eax, [esi] and eax, 0FFFF0102h or eax, 102h mov [esi], eax mov eax, [ebp+var_4] loc_7F80E7ED: ; CODE XREF: sub_7F80E722+3Fj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80E722 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80E7F6(int, int, void *lp, int, int, int) sub_7F80E7F6 proc near ; CODE XREF: sub_7F80EB5D+1Ap ; sub_7F80EBCF+1Ap ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch cchLength = dword ptr -8 lpString = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lp = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 14h push ebx mov [ebp+var_C], eax push esi mov [ebp+var_10], eax push edi mov [ebp+lpString], eax cmp [ebp+arg_14], eax jz short loc_7F80E814 mov ecx, [ebp+arg_14] mov [ecx], eax loc_7F80E814: ; CODE XREF: sub_7F80E7F6+17j mov edi, [ebp+arg_C] xor eax, eax test edi, edi jz short loc_7F80E81F mov [edi], eax loc_7F80E81F: ; CODE XREF: sub_7F80E7F6+25j xor eax, eax cmp [ebp+arg_10], eax jz short loc_7F80E82B mov ecx, [ebp+arg_10] mov [ecx], eax loc_7F80E82B: ; CODE XREF: sub_7F80E7F6+2Ej mov ebx, [ebp+lp] push ebx ; lp call sub_7F80FAC3 test eax, eax jz loc_7F80EA4B test edi, edi jz short loc_7F80E896 cmp word ptr [ebx+4], 0 jz short loc_7F80E896 lea esi, [ebx+8] test esi, esi jz short loc_7F80E896 loc_7F80E84E: ; CODE XREF: sub_7F80E7F6+63j mov al, [esi] cmp al, 20h jz short loc_7F80E858 cmp al, 9 jnz short loc_7F80E85B loc_7F80E858: ; CODE XREF: sub_7F80E7F6+5Cj inc esi jmp short loc_7F80E84E ; --------------------------------------------------------------------------- loc_7F80E85B: ; CODE XREF: sub_7F80E7F6+60j cmp byte ptr [esi], 0 jz short loc_7F80E896 push esi ; lpString call ds:lstrlenA inc eax push edi push [ebp+arg_4] push eax push [ebp+arg_0] mov [ebp+cchLength], eax call sub_7F80FD4C mov [ebp+var_C], eax test eax, eax jl loc_7F80EA4B mov eax, [ebp+cchLength] mov edi, [edi] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb loc_7F80E896: ; CODE XREF: sub_7F80E7F6+48j ; sub_7F80E7F6+4Fj ... movzx eax, word ptr [ebx] cmp eax, 2 jz short loc_7F80E8BB cmp eax, 3 jl loc_7F80E978 cmp eax, 4 jle short loc_7F80E907 cmp eax, 5 jz short loc_7F80E8BB cmp eax, 9 jz short loc_7F80E907 jmp loc_7F80E978 ; --------------------------------------------------------------------------- loc_7F80E8BB: ; CODE XREF: sub_7F80E7F6+A6j ; sub_7F80E7F6+B9j movzx eax, word ptr [ebx+4] mov edi, offset aXabNsp ; "XAB NSP" mov ecx, 8 lea esi, [eax+ebx+0Ch] lea eax, [eax+ebx+8] repe cmpsb jnz loc_7F80E978 mov [ebp+var_10], offset aSmtp_0 ; "SMTP" mov [ebp+cchLength], 5 cmp dword ptr [eax+14h], 6 jnz short loc_7F80E8F2 add eax, 1Ch jmp short loc_7F80E8F5 ; --------------------------------------------------------------------------- loc_7F80E8F2: ; CODE XREF: sub_7F80E7F6+F5j add eax, 45h loc_7F80E8F5: ; CODE XREF: sub_7F80E7F6+FAj mov [ebp+lpString], eax push [ebp+lpString] ; lpString call ds:lstrlenA inc eax mov [ebp+var_14], eax jmp short loc_7F80E978 ; --------------------------------------------------------------------------- loc_7F80E907: ; CODE XREF: sub_7F80E7F6+B4j ; sub_7F80E7F6+BEj cmp word ptr [ebx+6], 0 jz short loc_7F80E978 movzx eax, word ptr [ebx+4] push 3Ah lea esi, [eax+ebx+8] push esi mov [ebp+var_10], esi call sub_7F82FE30 add esp, 8 mov [ebp+lpString], eax test eax, eax jz short loc_7F80E945 inc [ebp+lpString] push [ebp+lpString] ; lpString mov eax, [ebp+lpString] sub eax, esi mov [ebp+cchLength], eax call ds:lstrlenA inc eax mov [ebp+var_14], eax jmp short loc_7F80E950 ; --------------------------------------------------------------------------- loc_7F80E945: ; CODE XREF: sub_7F80E7F6+133j push esi ; lpString call ds:lstrlenA inc eax mov [ebp+cchLength], eax loc_7F80E950: ; CODE XREF: sub_7F80E7F6+14Dj cmp [ebp+cchLength], 4 jnz short loc_7F80E978 push [ebp+cchLength] ; cchLength push esi ; lpsz call ds:CharUpperBuffA mov ecx, ds:dword_7F8018D8 cmp [esi], ecx jnz short loc_7F80E978 mov [ebp+var_10], offset aSmtp_0 ; "SMTP" mov [ebp+cchLength], 5 loc_7F80E978: ; CODE XREF: sub_7F80E7F6+ABj ; sub_7F80E7F6+C0j ... xor ebx, ebx cmp [ebp+arg_10], ebx jz short loc_7F80E9CE cmp [ebp+var_10], ebx jz short loc_7F80E9CE mov eax, [ebp+var_10] cmp [eax], bl jz short loc_7F80E9CE push [ebp+arg_10] push [ebp+arg_4] push [ebp+cchLength] push [ebp+arg_0] call sub_7F80FD4C mov [ebp+var_C], eax cmp eax, ebx jl loc_7F80EA4B mov eax, [ebp+cchLength] mov ecx, [ebp+arg_10] mov esi, [ebp+var_10] mov edi, [ecx] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb mov ecx, [ebp+arg_10] mov eax, [ebp+cchLength] mov edx, [ecx] mov [edx+eax-1], bl jmp short loc_7F80E9DA ; --------------------------------------------------------------------------- loc_7F80E9CE: ; CODE XREF: sub_7F80E7F6+187j ; sub_7F80E7F6+18Cj ... xor eax, eax cmp [ebp+arg_10], eax jz short loc_7F80E9DA mov ecx, [ebp+arg_10] mov [ecx], eax loc_7F80E9DA: ; CODE XREF: sub_7F80E7F6+1D6j ; sub_7F80E7F6+1DDj cmp [ebp+arg_14], 0 jz short loc_7F80EA3F cmp [ebp+lpString], 0 jz short loc_7F80EA3F mov eax, [ebp+lpString] mov al, [eax] test al, al jz short loc_7F80EA3F cmp [ebp+lpString], 0 jz short loc_7F80E9F9 test al, al jnz short loc_7F80EA0C loc_7F80E9F9: ; CODE XREF: sub_7F80E7F6+1FDj mov eax, offset aInvalid ; "Invalid" push eax ; lpString mov [ebp+lpString], eax call ds:lstrlenA inc eax mov [ebp+var_14], eax loc_7F80EA0C: ; CODE XREF: sub_7F80E7F6+201j push [ebp+arg_14] push [ebp+arg_4] push [ebp+var_14] push [ebp+arg_0] call sub_7F80FD4C mov [ebp+var_C], eax test eax, eax jl short loc_7F80EA4B mov eax, [ebp+var_14] mov ecx, [ebp+arg_14] mov esi, [ebp+lpString] mov edi, [ecx] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb jmp short loc_7F80EA4B ; --------------------------------------------------------------------------- loc_7F80EA3F: ; CODE XREF: sub_7F80E7F6+1E8j ; sub_7F80E7F6+1EEj ... xor eax, eax cmp [ebp+arg_14], eax jz short loc_7F80EA4B mov ecx, [ebp+arg_14] mov [ecx], eax loc_7F80EA4B: ; CODE XREF: sub_7F80E7F6+40j ; sub_7F80E7F6+87j ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80E7F6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EA57(int, void *lp, int, int, int) sub_7F80EA57 proc near ; DATA XREF: .text:7F8013F4o ; .text:7F801608o var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx mov edi, [ebp+lp] mov esi, 1 cmp [edi], bx mov [ebp+var_4], ebx jz short loc_7F80EAAD loc_7F80EA72: ; CODE XREF: sub_7F80EA57+54j push edi ; lp call sub_7F80FAC3 test eax, eax jz short loc_7F80EAAD cmp [ebp+arg_0], ebx jb short loc_7F80EAAD lea ecx, [edi+8] inc [ebp+var_4] movzx eax, word ptr [edi+4] add ebx, eax push ecx ; lpString call ds:lstrlenA lea esi, [eax+esi+1] movzx ecx, word ptr [edi+4] movzx eax, word ptr [edi+6] add eax, ecx add eax, 8 add edi, eax cmp word ptr [edi], 0 jnz short loc_7F80EA72 loc_7F80EAAD: ; CODE XREF: sub_7F80EA57+19j ; sub_7F80EA57+23j ... mov ebx, [ebp+arg_10] lea eax, [ebx+8] push eax push [ebp+arg_C] push esi push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_8], eax test eax, eax jge short loc_7F80EADC mov eax, [ebx] mov ecx, [ebp+var_8] and eax, 0FFFF000Ah mov [ebx+8], ecx or al, 0Ah mov [ebx], eax mov eax, ecx jmp short loc_7F80EB54 ; --------------------------------------------------------------------------- loc_7F80EADC: ; CODE XREF: sub_7F80EA57+6Ej mov eax, [ebp+lp] mov edx, [ebx+8] mov ecx, [ebp+var_4] mov [ebp+var_C], eax dec [ebp+var_4] test ecx, ecx jz short loc_7F80EB38 loc_7F80EAEF: ; CODE XREF: sub_7F80EA57+DFj mov esi, [ebp+var_C] mov ecx, 0FFFFFFFFh add esi, 8 sub eax, eax mov edi, esi repne scasb not ecx mov edi, edx lea eax, [ecx-1] mov ecx, eax add edx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb mov eax, [ebp+var_C] mov byte ptr [edx], 3Bh movzx ecx, word ptr [eax+4] movzx esi, word ptr [eax+6] inc edx add ecx, esi add ecx, 8 mov eax, [ebp+var_4] add [ebp+var_C], ecx dec [ebp+var_4] test eax, eax jnz short loc_7F80EAEF loc_7F80EB38: ; CODE XREF: sub_7F80EA57+96j cmp [ebx+8], edx jnb short loc_7F80EB43 mov byte ptr [edx-1], 0 jmp short loc_7F80EB46 ; --------------------------------------------------------------------------- loc_7F80EB43: ; CODE XREF: sub_7F80EA57+E4j mov byte ptr [edx], 0 loc_7F80EB46: ; CODE XREF: sub_7F80EA57+EAj mov eax, [ebx] and eax, 0FFFF001Eh or al, 1Eh mov [ebx], eax mov eax, [ebp+var_8] loc_7F80EB54: ; CODE XREF: sub_7F80EA57+83j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EA57 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EB5D(int, void *lp, int, int, int) sub_7F80EB5D proc near ; CODE XREF: sub_7F80D7AB+197p ; DATA XREF: .text:7F801448o ... var_4 = dword ptr -4 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi mov ebx, [ebp+arg_C] push eax ; int push 0 ; int push 0 ; int push [ebp+lp] ; lp push ebx ; int push [ebp+arg_8] ; int call sub_7F80E7F6 mov esi, eax test esi, esi jge short loc_7F80EB99 test ebx, ebx jnz short loc_7F80EBC5 cmp [ebp+var_4], 0 jz short loc_7F80EBC5 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80EBC5 ; --------------------------------------------------------------------------- loc_7F80EB99: ; CODE XREF: sub_7F80EB5D+23j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80EBB5 and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80EBC5 ; --------------------------------------------------------------------------- loc_7F80EBB5: ; CODE XREF: sub_7F80EB5D+45j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80EBC5: ; CODE XREF: sub_7F80EB5D+27j ; sub_7F80EB5D+2Dj ... mov eax, esi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EB5D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EBCF(int, void *lp, int, int, int) sub_7F80EBCF proc near ; CODE XREF: sub_7F80D7AB+178p ; DATA XREF: .text:7F80143Co ... var_4 = dword ptr -4 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push edi mov ebx, [ebp+arg_C] push 0 ; int push eax ; int push 0 ; int push [ebp+lp] ; lp push ebx ; int push [ebp+arg_8] ; int call sub_7F80E7F6 mov edi, eax test edi, edi jge short loc_7F80EC0B test ebx, ebx jnz short loc_7F80EC37 cmp [ebp+var_4], 0 jz short loc_7F80EC37 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80EC37 ; --------------------------------------------------------------------------- loc_7F80EC0B: ; CODE XREF: sub_7F80EBCF+23j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80EC27 and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80EC37 ; --------------------------------------------------------------------------- loc_7F80EC27: ; CODE XREF: sub_7F80EBCF+45j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80EC37: ; CODE XREF: sub_7F80EBCF+27j ; sub_7F80EBCF+2Dj ... mov eax, edi pop edi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EBCF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EC41(int, void *lp, int, int, int) sub_7F80EC41 proc near ; CODE XREF: sub_7F80D7AB+159p ; DATA XREF: .text:7F801430o ... var_4 = dword ptr -4 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push edi mov ebx, [ebp+arg_C] push 0 ; int push 0 ; int push eax ; int push [ebp+lp] ; lp push ebx ; int push [ebp+arg_8] ; int call sub_7F80E7F6 mov edi, eax test edi, edi jge short loc_7F80EC7D test ebx, ebx jnz short loc_7F80ECA9 cmp [ebp+var_4], 0 jz short loc_7F80ECA9 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80ECA9 ; --------------------------------------------------------------------------- loc_7F80EC7D: ; CODE XREF: sub_7F80EC41+23j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80EC99 and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80ECA9 ; --------------------------------------------------------------------------- loc_7F80EC99: ; CODE XREF: sub_7F80EC41+45j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80ECA9: ; CODE XREF: sub_7F80EC41+27j ; sub_7F80EC41+2Dj ... mov eax, edi pop edi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EC41 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80ECB3(int, int, LPCSTR lpString, LPCSTR, LPCSTR, int, int, int) sub_7F80ECB3 proc near ; CODE XREF: sub_7F80EE72+56p ; sub_7F80F339+5Fp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpString = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 8 mov [ebp+var_4], 0 test [ebp+arg_14], 7FFFFFFFh push ebx push esi push edi jz short loc_7F80ECD6 mov eax, 80040106h jmp loc_7F80EE69 ; --------------------------------------------------------------------------- loc_7F80ECD6: ; CODE XREF: sub_7F80ECB3+17j ; sub_7F80ECB3+33j mov eax, [ebp+arg_C] mov al, [eax] cmp al, 20h jz short loc_7F80ECE3 cmp al, 9 jnz short loc_7F80ECE8 loc_7F80ECE3: ; CODE XREF: sub_7F80ECB3+2Aj inc [ebp+arg_C] jmp short loc_7F80ECD6 ; --------------------------------------------------------------------------- loc_7F80ECE8: ; CODE XREF: sub_7F80ECB3+2Ej ; sub_7F80ECB3+45j mov eax, [ebp+arg_10] mov al, [eax] cmp al, 20h jz short loc_7F80ECF5 cmp al, 9 jnz short loc_7F80ECFA loc_7F80ECF5: ; CODE XREF: sub_7F80ECB3+3Cj inc [ebp+arg_10] jmp short loc_7F80ECE8 ; --------------------------------------------------------------------------- loc_7F80ECFA: ; CODE XREF: sub_7F80ECB3+40j cmp [ebp+lpString], 0 jnz loc_7F80EE4E mov eax, [ebp+arg_10] mov [ebp+lpString], eax loc_7F80ED0A: ; CODE XREF: sub_7F80ECB3+1A6j xor ebx, ebx mov eax, [ebp+lpString] cmp [eax], bl jz loc_7F80EE64 mov eax, [ebp+arg_C] cmp [eax], bl jz loc_7F80EE64 mov eax, [ebp+arg_10] cmp [eax], bl jz loc_7F80EE64 push [ebp+lpString] ; lpString call ds:lstrlenA push [ebp+arg_10] ; lpString mov esi, eax call ds:lstrlenA push [ebp+arg_C] ; lpString add esi, eax call ds:lstrlenA lea ecx, [esi+eax+1Bh] lea eax, [ebp+var_4] push eax mov [ebp+var_8], ecx push [ebp+arg_4] push ecx push [ebp+arg_0] call sub_7F80FD4C test eax, eax jl loc_7F80EE69 mov edx, [ebp+var_8] mov edi, [ebp+var_4] xor eax, eax mov ecx, edx shr ecx, 2 rep stosd mov ecx, edx and ecx, 3 rep stosb mov eax, [ebp+var_4] mov esi, offset unk_7F835828 mov dword ptr [eax+14h], 0 mov edi, [ebp+var_4] add edi, 4 movsd movsd movsd movsd push [ebp+lpString] ; lpString mov ebx, [ebp+var_4] add ebx, 18h call ds:lstrlenA mov edi, ebx mov esi, [ebp+lpString] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb push [ebp+lpString] ; lpString call ds:lstrlenA add ebx, eax push [ebp+arg_C] ; lpString mov byte ptr [ebx], 0 inc ebx mov edi, ebx call ds:lstrlenA mov esi, [ebp+arg_C] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb mov esi, ebx cmp byte ptr [ebx], 20h jz short loc_7F80EDFE loc_7F80EDEE: ; CODE XREF: sub_7F80ECB3+149j mov al, [ebx] cmp al, 9 jz short loc_7F80EDFE test al, al jz short loc_7F80EDFE inc ebx cmp byte ptr [ebx], 20h jnz short loc_7F80EDEE loc_7F80EDFE: ; CODE XREF: sub_7F80ECB3+139j ; sub_7F80ECB3+13Fj ... push esi ; lpString mov byte ptr [ebx], 0 inc ebx call ds:lstrlenA push eax ; cchLength mov edi, ebx push esi ; lpsz call ds:CharUpperBuffA push [ebp+arg_10] ; lpString call ds:lstrlenA mov esi, [ebp+arg_10] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb push [ebp+arg_10] ; lpString call ds:lstrlenA mov edx, [ebp+arg_1C] mov byte ptr [ebx+eax], 0 mov ecx, [ebp+var_4] mov eax, [ebp+arg_18] mov [edx], ecx mov ecx, [ebp+var_8] mov [eax], ecx xor eax, eax jmp short loc_7F80EE69 ; --------------------------------------------------------------------------- loc_7F80EE4E: ; CODE XREF: sub_7F80ECB3+4Bj ; sub_7F80ECB3+1AFj mov eax, [ebp+lpString] mov al, [eax] cmp al, 20h jz short loc_7F80EE5F cmp al, 9 jnz loc_7F80ED0A loc_7F80EE5F: ; CODE XREF: sub_7F80ECB3+1A2j inc [ebp+lpString] jmp short loc_7F80EE4E ; --------------------------------------------------------------------------- loc_7F80EE64: ; CODE XREF: sub_7F80ECB3+5Ej ; sub_7F80ECB3+69j ... mov eax, 80070057h loc_7F80EE69: ; CODE XREF: sub_7F80ECB3+1Ej ; sub_7F80ECB3+B2j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F80ECB3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EE72(int, void *lp, int, int, int) sub_7F80EE72 proc near ; CODE XREF: sub_7F80D7AB+11Dp ; DATA XREF: .text:7F801460o ... lpString = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_4] push esi xor ebx, ebx push edi lea ecx, [ebp+var_8] mov edi, [ebp+arg_10] push eax ; int push ecx ; int lea edx, [ebp+lpString] push edx ; int mov [edi+8], ebx push [ebp+lp] ; lp push ebx ; int push [ebp+arg_8] ; int call sub_7F80E7F6 cmp eax, ebx mov esi, eax jl short loc_7F80EEF5 cmp [ebp+var_8], ebx jz short loc_7F80EEE3 cmp [ebp+var_4], ebx jz short loc_7F80EEE3 lea eax, [edi+0Ch] mov [edi+8], ebx push eax ; int mov [eax], ebx lea eax, [edi+8] push eax ; int push ebx ; int push [ebp+var_4] ; LPCSTR push [ebp+var_8] ; LPCSTR push [ebp+lpString] ; lpString push [ebp+arg_C] ; int push [ebp+arg_8] ; int call sub_7F80ECB3 cmp eax, ebx mov esi, eax jnz short loc_7F80EEF5 mov eax, [edi] and eax, 0FFFF0102h or eax, 102h mov [edi], eax jmp short loc_7F80EEF5 ; --------------------------------------------------------------------------- loc_7F80EEE3: ; CODE XREF: sub_7F80EE72+32j ; sub_7F80EE72+37j mov dword ptr [edi+8], 8004010Fh mov eax, [edi] and eax, 0FFFF000Ah or al, 0Ah mov [edi], eax loc_7F80EEF5: ; CODE XREF: sub_7F80EE72+2Dj ; sub_7F80EE72+5Fj ... push [ebp+lpString] push [ebp+arg_8] call sub_7F80FD78 push [ebp+var_8] push [ebp+arg_8] call sub_7F80FD78 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EE72 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80EF21(int, void *lp, int, int, int) sub_7F80EF21 proc near ; DATA XREF: .text:7F801454o ; .text:7F801490o ... var_10 = dword ptr -10h lpsz = dword ptr -0Ch var_8 = dword ptr -8 lpString = dword ptr -4 lp = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, [ebp+arg_10] xor edi, edi lea eax, [ebp+lpString] push eax ; int mov [ebp+lpsz], edi lea ecx, [ebp+var_8] mov [ebp+var_8], edi push ecx ; int mov [ebp+lpString], edi push edi ; int mov [esi+8], edi push [ebp+lp] ; lp push edi ; int push [ebp+arg_8] ; int call sub_7F80E7F6 mov [ebp+var_10], eax cmp eax, edi jl loc_7F80F001 cmp [ebp+var_8], edi jz loc_7F80EFEF cmp [ebp+lpString], edi jz loc_7F80EFEF mov [esi+8], edi mov [esi+0Ch], edi push [ebp+lpString] ; lpString call ds:lstrlenA push [ebp+var_8] ; lpString mov ebx, eax call ds:lstrlenA lea ebx, [ebx+eax+2] lea eax, [ebp+lpsz] push eax push [ebp+arg_C] push ebx push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_10], eax cmp eax, edi jl short loc_7F80F001 mov edi, [ebp+lpsz] xor eax, eax mov ecx, ebx shr ecx, 2 rep stosd mov ecx, ebx and ecx, 3 rep stosb push [ebp+lpString] push [ebp+var_8] push offset aSS_2 ; "%s:%s" push [ebp+lpsz] ; LPSTR call ds:wsprintfA add esp, 10h push ebx ; cchLength push [ebp+lpsz] ; lpsz call ds:CharUpperBuffA mov eax, [ebp+lpsz] mov [esi+8], ebx mov [esi+0Ch], eax mov eax, [esi] and eax, 0FFFF0102h or eax, 102h mov [esi], eax jmp short loc_7F80F001 ; --------------------------------------------------------------------------- loc_7F80EFEF: ; CODE XREF: sub_7F80EF21+3Dj ; sub_7F80EF21+46j mov dword ptr [esi+8], 8004010Fh mov eax, [esi] and eax, 0FFFF000Ah or al, 0Ah mov [esi], eax loc_7F80F001: ; CODE XREF: sub_7F80EF21+34j ; sub_7F80EF21+7Fj ... push [ebp+var_8] push [ebp+arg_8] call sub_7F80FD78 push [ebp+lpString] push [ebp+arg_8] call sub_7F80FD78 mov eax, [ebp+var_10] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80EF21 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F023(int, int, LPCSTR, int, int, int) sub_7F80F023 proc near ; CODE XREF: sub_7F80F1DB+1Ap ; sub_7F80F24D+1Ep ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 lpString = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 10h push ebx mov [ebp+var_C], eax push esi mov ebx, [ebp+arg_10] push edi cmp ebx, eax jnz short loc_7F80F046 cmp [ebp+arg_14], eax jnz short loc_7F80F046 cmp [ebp+arg_C], eax jz loc_7F80F1CF loc_7F80F046: ; CODE XREF: sub_7F80F023+13j ; sub_7F80F023+18j xor eax, eax test ebx, ebx jz short loc_7F80F04E mov [ebx], eax loc_7F80F04E: ; CODE XREF: sub_7F80F023+27j xor eax, eax cmp [ebp+arg_14], eax jz short loc_7F80F05A mov ecx, [ebp+arg_14] mov [ecx], eax loc_7F80F05A: ; CODE XREF: sub_7F80F023+30j xor eax, eax cmp [ebp+arg_C], eax jz short loc_7F80F066 mov ecx, [ebp+arg_C] mov [ecx], eax loc_7F80F066: ; CODE XREF: sub_7F80F023+3Cj mov eax, [ebp+arg_8] add [ebp+arg_8], 2 movzx ecx, word ptr [eax] cmp [ebp+arg_C], 0 mov [ebp+lpString], ecx jz short loc_7F80F0DE test ecx, ecx jz short loc_7F80F0DE mov esi, [ebp+arg_8] loc_7F80F080: ; CODE XREF: sub_7F80F023+68j mov al, [esi] cmp al, 20h jz short loc_7F80F08A cmp al, 9 jnz short loc_7F80F08D loc_7F80F08A: ; CODE XREF: sub_7F80F023+61j inc esi jmp short loc_7F80F080 ; --------------------------------------------------------------------------- loc_7F80F08D: ; CODE XREF: sub_7F80F023+65j cmp byte ptr [esi], 0 jz short loc_7F80F0DE mov ecx, [ebp+arg_8] mov eax, [ebp+lpString] push [ebp+arg_C] sub ecx, esi push [ebp+arg_4] lea edx, [ecx+eax+1] push edx mov [ebp+var_8], edx push [ebp+arg_0] call sub_7F80FD4C mov [ebp+var_C], eax test eax, eax jl loc_7F80F1CF mov eax, [ebp+var_8] mov ecx, [ebp+arg_C] mov edi, [ecx] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb mov ecx, [ebp+arg_C] mov edx, [ebp+var_8] mov eax, [ecx] mov byte ptr [eax+edx-1], 0 loc_7F80F0DE: ; CODE XREF: sub_7F80F023+54j ; sub_7F80F023+58j ... mov eax, [ebp+lpString] add [ebp+arg_8], eax mov ecx, [ebp+arg_8] cmp word ptr [ecx], 0 jz loc_7F80F1CF add [ebp+arg_8], 2 push 3Ah push [ebp+arg_8] call sub_7F82FE30 add esp, 8 mov [ebp+lpString], eax test eax, eax jz short loc_7F80F124 inc [ebp+lpString] push [ebp+lpString] ; lpString mov eax, [ebp+lpString] sub eax, [ebp+arg_8] mov [ebp+var_8], eax call ds:lstrlenA inc eax mov [ebp+var_10], eax jmp short loc_7F80F131 ; --------------------------------------------------------------------------- loc_7F80F124: ; CODE XREF: sub_7F80F023+E4j push [ebp+arg_8] ; lpString call ds:lstrlenA inc eax mov [ebp+var_8], eax loc_7F80F131: ; CODE XREF: sub_7F80F023+FFj test ebx, ebx jz short loc_7F80F175 mov eax, [ebp+arg_8] cmp byte ptr [eax], 0 jz short loc_7F80F175 push ebx push [ebp+arg_4] push [ebp+var_8] push [ebp+arg_0] call sub_7F80FD4C mov [ebp+var_C], eax test eax, eax jl short loc_7F80F1CF mov eax, [ebp+var_8] mov edi, [ebx] mov esi, [ebp+arg_8] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb mov edx, [ebx] mov eax, [ebp+var_8] mov byte ptr [edx+eax-1], 0 jmp short loc_7F80F17D ; --------------------------------------------------------------------------- loc_7F80F175: ; CODE XREF: sub_7F80F023+110j ; sub_7F80F023+118j xor eax, eax test ebx, ebx jz short loc_7F80F17D mov [ebx], eax loc_7F80F17D: ; CODE XREF: sub_7F80F023+150j ; sub_7F80F023+156j xor ebx, ebx cmp [ebp+arg_14], ebx jz short loc_7F80F1C3 cmp [ebp+lpString], ebx jz short loc_7F80F1C3 mov eax, [ebp+lpString] cmp [eax], bl jz short loc_7F80F1C3 push [ebp+arg_14] push [ebp+arg_4] push [ebp+var_10] push [ebp+arg_0] call sub_7F80FD4C mov [ebp+var_C], eax cmp eax, ebx jl short loc_7F80F1CF mov eax, [ebp+var_10] mov ecx, [ebp+arg_14] mov esi, [ebp+lpString] mov edi, [ecx] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb jmp short loc_7F80F1CF ; --------------------------------------------------------------------------- loc_7F80F1C3: ; CODE XREF: sub_7F80F023+15Fj ; sub_7F80F023+164j ... xor eax, eax cmp [ebp+arg_14], eax jz short loc_7F80F1CF mov ecx, [ebp+arg_14] mov [ecx], eax loc_7F80F1CF: ; CODE XREF: sub_7F80F023+1Dj ; sub_7F80F023+92j ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80F023 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F1DB(int, LPCSTR, int, int, int) sub_7F80F1DB proc near ; DATA XREF: .text:7F801544o ; .text:7F801580o ... var_4 = dword ptr -4 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push edi mov ebx, [ebp+arg_C] push 0 ; int push 0 ; int push eax ; int push [ebp+arg_4] ; LPCSTR push ebx ; int push [ebp+arg_8] ; int call sub_7F80F023 mov edi, eax test edi, edi jge short loc_7F80F217 test ebx, ebx jnz short loc_7F80F243 cmp [ebp+var_4], 0 jz short loc_7F80F243 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80F243 ; --------------------------------------------------------------------------- loc_7F80F217: ; CODE XREF: sub_7F80F1DB+23j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80F233 and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80F243 ; --------------------------------------------------------------------------- loc_7F80F233: ; CODE XREF: sub_7F80F1DB+45j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80F243: ; CODE XREF: sub_7F80F1DB+27j ; sub_7F80F1DB+2Dj ... mov eax, edi pop edi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F1DB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F24D(int, LPCSTR, int, int, int) sub_7F80F24D proc near ; DATA XREF: .text:7F80155Co ; .text:7F801598o ... var_4 = dword ptr -4 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi push edi xor esi, esi push eax ; int push esi ; int mov ebx, [ebp+arg_C] push esi ; int mov [ebp+var_4], esi push [ebp+arg_4] ; LPCSTR push ebx ; int push [ebp+arg_8] ; int call sub_7F80F023 cmp eax, esi mov edi, eax jge short loc_7F80F28C test ebx, ebx jnz short loc_7F80F2B8 cmp [ebp+var_4], esi jz short loc_7F80F2B8 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80F2B8 ; --------------------------------------------------------------------------- loc_7F80F28C: ; CODE XREF: sub_7F80F24D+27j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80F2A8 and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80F2B8 ; --------------------------------------------------------------------------- loc_7F80F2A8: ; CODE XREF: sub_7F80F24D+48j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80F2B8: ; CODE XREF: sub_7F80F24D+2Bj ; sub_7F80F24D+30j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F24D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F2C3(int, LPCSTR, int, int, int) sub_7F80F2C3 proc near ; DATA XREF: .text:7F801550o ; .text:7F80158Co ... var_4 = dword ptr -4 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi push edi xor esi, esi mov ebx, [ebp+arg_C] push esi ; int mov [ebp+var_4], esi push eax ; int push esi ; int push [ebp+arg_4] ; LPCSTR push ebx ; int push [ebp+arg_8] ; int call sub_7F80F023 cmp eax, esi mov edi, eax jge short loc_7F80F302 test ebx, ebx jnz short loc_7F80F32E cmp [ebp+var_4], esi jz short loc_7F80F32E push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 jmp short loc_7F80F32E ; --------------------------------------------------------------------------- loc_7F80F302: ; CODE XREF: sub_7F80F2C3+27j mov ecx, [ebp+arg_10] cmp [ebp+var_4], 0 mov eax, [ecx] jz short loc_7F80F31E and eax, 0FFFF001Eh mov edx, [ebp+var_4] or al, 1Eh mov [ecx+8], edx mov [ecx], eax jmp short loc_7F80F32E ; --------------------------------------------------------------------------- loc_7F80F31E: ; CODE XREF: sub_7F80F2C3+48j mov dword ptr [ecx+8], 8004010Fh and eax, 0FFFF000Ah or al, 0Ah mov [ecx], eax loc_7F80F32E: ; CODE XREF: sub_7F80F2C3+2Bj ; sub_7F80F2C3+30j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F2C3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F339(int, LPCSTR, int, int, int) sub_7F80F339 proc near ; DATA XREF: .text:7F801538o ; .text:7F801574o ... lpString = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx mov edi, [ebp+arg_10] lea eax, [ebp+var_4] push eax ; int mov [ebp+lpString], ebx lea ecx, [ebp+var_8] lea edx, [ebp+lpString] push ecx ; int mov [ebp+var_8], ebx push edx ; int mov [ebp+var_4], ebx push [ebp+arg_4] ; LPCSTR push ebx ; int push [ebp+arg_8] ; int mov [edi+8], ebx call sub_7F80F023 cmp eax, ebx mov esi, eax jl short loc_7F80F3C5 cmp [ebp+var_8], ebx jz short loc_7F80F3B3 cmp [ebp+var_4], ebx jz short loc_7F80F3B3 lea eax, [edi+0Ch] mov [edi+8], ebx push eax ; int mov [eax], ebx lea eax, [edi+8] push eax ; int push ebx ; int push [ebp+var_4] ; LPCSTR push [ebp+var_8] ; LPCSTR push [ebp+lpString] ; lpString push [ebp+arg_C] ; int push [ebp+arg_8] ; int call sub_7F80ECB3 cmp eax, ebx mov esi, eax jnz short loc_7F80F3C5 mov eax, [edi] and eax, 0FFFF0102h or eax, 102h mov [edi], eax jmp short loc_7F80F3C5 ; --------------------------------------------------------------------------- loc_7F80F3B3: ; CODE XREF: sub_7F80F339+3Bj ; sub_7F80F339+40j mov dword ptr [edi+8], 8004010Fh mov eax, [edi] and eax, 0FFFF000Ah or al, 0Ah mov [edi], eax loc_7F80F3C5: ; CODE XREF: sub_7F80F339+36j ; sub_7F80F339+68j ... push [ebp+lpString] push [ebp+arg_8] call sub_7F80FD78 push [ebp+var_8] push [ebp+arg_8] call sub_7F80FD78 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F339 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80F3F1(int, LPCSTR, int, int, int) sub_7F80F3F1 proc near ; DATA XREF: .text:7F801568o ; .text:7F8015A4o ... var_10 = dword ptr -10h lpsz = dword ptr -0Ch lpString = dword ptr -8 var_4 = dword ptr -4 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, [ebp+arg_10] xor edi, edi lea eax, [ebp+var_4] push eax ; int mov [ebp+lpsz], edi lea ecx, [ebp+lpString] mov [ebp+lpString], edi push ecx ; int mov [ebp+var_4], edi push edi ; int mov [esi+8], edi push [ebp+arg_4] ; LPCSTR push edi ; int push [ebp+arg_8] ; int call sub_7F80F023 mov [ebp+var_10], eax cmp eax, edi jl loc_7F80F4D1 cmp [ebp+lpString], edi jz loc_7F80F4BF cmp [ebp+var_4], edi jz loc_7F80F4BF mov [esi+8], edi mov [esi+0Ch], edi push [ebp+lpString] ; lpString call ds:lstrlenA push [ebp+var_4] ; lpString mov ebx, eax call ds:lstrlenA lea ebx, [ebx+eax+2] lea eax, [ebp+lpsz] push eax push [ebp+arg_C] push ebx push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_10], eax cmp eax, edi jl short loc_7F80F4D1 mov edi, [ebp+lpsz] xor eax, eax mov ecx, ebx shr ecx, 2 rep stosd mov ecx, ebx and ecx, 3 rep stosb push [ebp+var_4] push [ebp+lpString] push offset aSS_2 ; "%s:%s" push [ebp+lpsz] ; LPSTR call ds:wsprintfA add esp, 10h push ebx ; cchLength push [ebp+lpsz] ; lpsz call ds:CharUpperBuffA mov eax, [ebp+lpsz] mov [esi+8], ebx mov [esi+0Ch], eax mov eax, [esi] and eax, 0FFFF0102h or eax, 102h mov [esi], eax jmp short loc_7F80F4D1 ; --------------------------------------------------------------------------- loc_7F80F4BF: ; CODE XREF: sub_7F80F3F1+3Dj ; sub_7F80F3F1+46j mov dword ptr [esi+8], 8004010Fh mov eax, [esi] and eax, 0FFFF000Ah or al, 0Ah mov [esi], eax loc_7F80F4D1: ; CODE XREF: sub_7F80F3F1+34j ; sub_7F80F3F1+7Fj ... push [ebp+lpString] push [ebp+arg_8] call sub_7F80FD78 push [ebp+var_4] push [ebp+arg_8] call sub_7F80FD78 mov eax, [ebp+var_10] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F3F1 endp ; --------------------------------------------------------------------------- loc_7F80F4F3: ; DATA XREF: .text:7F801520o mov eax, [esp+8] mov ecx, [esp+14h] mov edx, [eax] mov eax, [ecx] and eax, 0FFFF0003h mov [ecx+8], edx or al, 3 mov [ecx], eax xor eax, eax retn 14h ; --------------------------------------------------------------------------- loc_7F80F510: ; DATA XREF: .text:7F801514o mov eax, [esp+8] mov ecx, [esp+14h] cmp word ptr [eax], 1 sbb eax, eax inc eax mov [ecx+8], ax mov eax, [ecx] and eax, 0FFFF000Bh or al, 0Bh mov [ecx], eax xor eax, eax retn 14h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80F533 proc near ; CODE XREF: sub_7F80D1F3+87p ; sub_7F80DDB5+9Cp lp = dword ptr -8 ucb = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 8 mov [ebp+lp], 0 push ebx push esi push edi mov ebx, ds:dword_7F801828[eax*4] test ebx, ebx jnz short loc_7F80F557 mov ebx, offset dword_7F801398 loc_7F80F557: ; CODE XREF: sub_7F80F533+1Dj mov esi, ebx loc_7F80F559: ; CODE XREF: sub_7F80F533+82j test esi, esi jz short loc_7F80F56E mov eax, [ebp+arg_10] push dword ptr [eax] push esi call sub_7F80E272 mov esi, eax test esi, esi jnz short loc_7F80F58C loc_7F80F56E: ; CODE XREF: sub_7F80F533+28j cmp ebx, offset dword_7F801398 jz short loc_7F80F588 mov ebx, offset dword_7F801398 mov eax, [ebp+arg_10] push dword ptr [eax] push ebx call sub_7F80E272 mov esi, eax loc_7F80F588: ; CODE XREF: sub_7F80F533+41j test esi, esi jz short loc_7F80F5B7 loc_7F80F58C: ; CODE XREF: sub_7F80F533+39j lea eax, [ebp+ucb] push eax push dword ptr [esi] push [ebp+arg_0] call sub_7F810E3F push eax call sub_7F80F8B4 mov edi, eax test edi, edi jge short loc_7F80F5C1 cmp edi, 8004010Fh jnz loc_7F80F642 add esi, 0Ch jmp short loc_7F80F559 ; --------------------------------------------------------------------------- loc_7F80F5B7: ; CODE XREF: sub_7F80F533+57j mov edi, 8004010Fh jmp loc_7F80F642 ; --------------------------------------------------------------------------- loc_7F80F5C1: ; CODE XREF: sub_7F80F533+71j cmp [ebp+ucb], 4000h jbe short loc_7F80F5D1 mov edi, 8007000Eh jmp short loc_7F80F642 ; --------------------------------------------------------------------------- loc_7F80F5D1: ; CODE XREF: sub_7F80F533+95j lea eax, [ebp+lp] push eax push 0 push [ebp+ucb] push [ebp+arg_8] call sub_7F80FD4C mov edi, eax test edi, edi jl short loc_7F80F646 lea eax, [ebp+ucb] push eax push [ebp+lp] push dword ptr [esi] push [ebp+arg_0] call sub_7F810E8D push eax call sub_7F80F8B4 mov edi, eax test edi, edi jl short loc_7F80F646 push [ebp+ucb] ; ucb push [ebp+lp] ; lp push dword ptr [esi] ; int call sub_7F80FC77 test eax, eax jnz short loc_7F80F62E mov eax, [ebp+arg_10] cmp dword ptr [eax], 37010102h jnz short loc_7F80F627 cmp [ebp+ucb], 0 jz short loc_7F80F62E loc_7F80F627: ; CODE XREF: sub_7F80F533+ECj mov edi, 8004010Fh jmp short loc_7F80F642 ; --------------------------------------------------------------------------- loc_7F80F62E: ; CODE XREF: sub_7F80F533+E1j ; sub_7F80F533+F2j push [ebp+arg_14] push [ebp+arg_C] push [ebp+arg_8] push [ebp+lp] push [ebp+ucb] call dword ptr [esi+8] mov edi, eax loc_7F80F642: ; CODE XREF: sub_7F80F533+79j ; sub_7F80F533+89j ... test edi, edi jge short loc_7F80F65E loc_7F80F646: ; CODE XREF: sub_7F80F533+B3j ; sub_7F80F533+D0j mov eax, [ebp+arg_14] mov ecx, [eax] mov [eax+8], edi and ecx, 0FFFF000Ah mov edi, 40380h or cl, 0Ah mov [eax], ecx loc_7F80F65E: ; CODE XREF: sub_7F80F533+111j push [ebp+lp] push [ebp+arg_8] call sub_7F80FD78 mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F80F533 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80F674 proc near ; CODE XREF: sub_7F8045B6+B8p ; sub_7F8045B6+1BAp var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor ebx, ebx mov [ebp+var_2], bx lea eax, [ebp+var_2] push eax mov [ebp+var_10], ebx push [ebp+arg_0] mov [ebp+var_C], ebx call sub_7F810EFE cmp [ebp+var_2], bx jz short loc_7F80F6DC lea eax, [ebp+var_10] push eax push ebx movsx eax, [ebp+var_2] shl eax, 2 push eax push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_8], eax cmp eax, ebx jl loc_7F80F7D7 lea eax, [ebp+var_2] push eax push [ebp+var_10] push ebx push [ebp+arg_0] call sub_7F810EE0 push eax call sub_7F80F8B4 mov [ebp+var_8], eax cmp eax, ebx jl loc_7F80F7D7 loc_7F80F6DC: ; CODE XREF: sub_7F80F674+25j mov ax, [ebp+var_2] mov esi, [ebp+var_10] mov [ebp+var_4], ax xor edi, edi cmp ax, di jz short loc_7F80F72B mov eax, [ebp+arg_4] mov ecx, ds:dword_7F801828[eax*4] mov [ebp+var_8], ecx loc_7F80F6FB: ; CODE XREF: sub_7F80F674+B5j cmp [ebp+var_8], 0 jz short loc_7F80F70F push dword ptr [esi] push [ebp+var_8] call sub_7F80E299 test eax, eax jnz short loc_7F80F71B loc_7F80F70F: ; CODE XREF: sub_7F80F674+8Bj push dword ptr [esi] push offset dword_7F801398 call sub_7F80E299 loc_7F80F71B: ; CODE XREF: sub_7F80F674+99j add esi, 4 dec [ebp+var_4] add edi, eax cmp [ebp+var_4], 0 jnz short loc_7F80F6FB loc_7F80F72B: ; CODE XREF: sub_7F80F674+78j mov esi, [ebp+arg_C] test esi, esi jz short loc_7F80F734 mov ebx, [esi] loc_7F80F734: ; CODE XREF: sub_7F80F674+BCj add edi, ebx lea eax, [ebp+var_C] push eax push 0 lea ecx, ds:4[edi*4] push ecx push [ebp+arg_8] call sub_7F80FD4C mov [ebp+var_8], eax test eax, eax jl loc_7F80F7D7 mov eax, [ebp+var_C] add eax, 4 test ebx, ebx mov [ebp+var_14], eax jz short loc_7F80F77E lea ecx, ds:0[ebx*4] add esi, 4 shr ecx, 2 mov edi, eax rep movsd mov ecx, [ebp+var_14] lea eax, [ecx+ebx*4] mov [ebp+var_14], eax loc_7F80F77E: ; CODE XREF: sub_7F80F674+EEj mov ax, [ebp+var_2] mov edi, [ebp+var_10] mov [ebp+var_4], ax xor esi, esi cmp ax, si jz short loc_7F80F7C8 loc_7F80F790: ; CODE XREF: sub_7F80F674+152j push [ebp+arg_4] push dword ptr [edi] call sub_7F80E226 test eax, eax jz short loc_7F80F7BA mov ecx, [eax] cmp [edi], ecx jnz short loc_7F80F7BA loc_7F80F7A4: ; CODE XREF: sub_7F80F674+144j mov edx, [eax+4] mov ecx, [ebp+var_14] add eax, 0Ch inc esi add [ebp+var_14], 4 mov [ecx], edx mov ecx, [eax] cmp [edi], ecx jz short loc_7F80F7A4 loc_7F80F7BA: ; CODE XREF: sub_7F80F674+128j ; sub_7F80F674+12Ej dec [ebp+var_4] add edi, 4 cmp [ebp+var_4], 0 jnz short loc_7F80F790 loc_7F80F7C8: ; CODE XREF: sub_7F80F674+11Aj add esi, ebx mov ecx, [ebp+var_C] mov eax, [ebp+arg_10] mov [ecx], esi mov ecx, [ebp+var_C] mov [eax], ecx loc_7F80F7D7: ; CODE XREF: sub_7F80F674+41j ; sub_7F80F674+62j ... push [ebp+var_10] push [ebp+arg_8] call sub_7F80FD78 cmp [ebp+var_8], 0 jge short loc_7F80F7F9 cmp [ebp+var_C], 0 jz short loc_7F80F7F9 push [ebp+var_C] push [ebp+arg_8] call sub_7F80FD78 loc_7F80F7F9: ; CODE XREF: sub_7F80F674+172j ; sub_7F80F674+178j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80F674 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80F805 proc near ; CODE XREF: sub_7F80493B+61p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ecx, 10h mov ebp, esp push esi push edi mov edi, offset dword_7F8019B0 mov esi, [ebp+arg_C] repe cmpsb jnz short loc_7F80F85E push [ebp+arg_8] push [ebp+arg_4] call sub_7F80FA8E test eax, eax jnz short loc_7F80F85E push [ebp+arg_4] push offset dword_7F801398 call sub_7F80E272 test eax, eax jz short loc_7F80F85E mov ecx, [eax] mov eax, ecx shr eax, 10h test ax, ax jz short loc_7F80F85E cmp ax, 3 jz short loc_7F80F85E push [ebp+arg_18] push [ebp+arg_14] push ecx push [ebp+arg_0] call sub_7F80DF67 jmp short loc_7F80F863 ; --------------------------------------------------------------------------- loc_7F80F85E: ; CODE XREF: sub_7F80F805+14j ; sub_7F80F805+23j ... mov eax, 80040102h loc_7F80F863: ; CODE XREF: sub_7F80F805+57j pop edi pop esi pop ebp retn 1Ch sub_7F80F805 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80F869 proc near ; CODE XREF: sub_7F80CBB5+18Cp ; sub_7F80D1F3:loc_7F80D381p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi mov esi, [ebp+arg_0] cmp dword ptr [esi+58h], 0 jnz short loc_7F80F87F mov eax, 80070057h jmp short loc_7F80F8AD ; --------------------------------------------------------------------------- loc_7F80F87F: ; CODE XREF: sub_7F80F869+Dj mov ebx, [ebp+arg_C] push ebx push [ebp+arg_4] push 1Ch push esi call sub_7F80FD4C test eax, eax jge short loc_7F80F899 mov eax, 8007000Eh jmp short loc_7F80F8AD ; --------------------------------------------------------------------------- loc_7F80F899: ; CODE XREF: sub_7F80F869+27j mov edi, [ebx] mov esi, [esi+58h] mov ecx, 7 rep movsd mov edx, [ebx] mov ecx, [ebp+arg_8] mov [edx+18h], ecx loc_7F80F8AD: ; CODE XREF: sub_7F80F869+14j ; sub_7F80F869+2Ej pop edi pop esi pop ebx pop ebp retn 10h sub_7F80F869 endp ; =============== S U B R O U T I N E ======================================= sub_7F80F8B4 proc near ; CODE XREF: sub_7F802896+35p ; sub_7F802C9E+2Fp ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] test eax, eax jnz short loc_7F80F8C0 xor eax, eax jmp short locret_7F80F919 ; --------------------------------------------------------------------------- loc_7F80F8C0: ; CODE XREF: sub_7F80F8B4+6j cmp eax, 1000h jl short loc_7F80F8D7 cmp eax, 101Eh jg short loc_7F80F8D7 mov eax, [eax*4+7F7FD850h] jmp short locret_7F80F919 ; --------------------------------------------------------------------------- loc_7F80F8D7: ; CODE XREF: sub_7F80F8B4+11j ; sub_7F80F8B4+18j cmp eax, 600h jl short loc_7F80F8EC cmp eax, 620h jg short loc_7F80F8EC mov eax, 80040115h jmp short locret_7F80F919 ; --------------------------------------------------------------------------- loc_7F80F8EC: ; CODE XREF: sub_7F80F8B4+28j ; sub_7F80F8B4+2Fj cmp eax, 200h jl short loc_7F80F901 cmp eax, 215h jg short loc_7F80F901 mov eax, 80040116h jmp short locret_7F80F919 ; --------------------------------------------------------------------------- loc_7F80F901: ; CODE XREF: sub_7F80F8B4+3Dj ; sub_7F80F8B4+44j cmp eax, 400h jl short loc_7F80F914 cmp eax, 40Bh mov eax, 8007000Eh jle short locret_7F80F919 loc_7F80F914: ; CODE XREF: sub_7F80F8B4+52j mov eax, 80004005h locret_7F80F919: ; CODE XREF: sub_7F80F8B4+Aj ; sub_7F80F8B4+21j ... retn 4 sub_7F80F8B4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80F91C proc near ; CODE XREF: sub_7F8028D4+46p ; sub_7F80B4E1+E8p var_20 = dword ptr -20h var_18 = byte ptr -18h var_10 = dword ptr -10h var_4 = byte ptr -4 lpString = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 20h push ebx push esi push edi mov esi, offset aTmp ; "TMP:" lea edi, [ebp+var_10] movsd movsb mov edi, [ebp+arg_4] test edi, edi jz short loc_7F80F96E mov edx, 0FFFFFFFFh sub eax, eax mov ecx, edx repne scasb not ecx sub edi, ecx mov ebx, ecx mov esi, edi mov ecx, edx lea edi, [ebp+var_10] sub eax, eax repne scasb add edi, edx mov ecx, ebx shr ecx, 2 rep movsd mov ecx, ebx and ecx, 3 rep movsb lea eax, [ebp+var_10] push eax call sub_7F82FE50 add esp, 4 loc_7F80F96E: ; CODE XREF: sub_7F80F91C+18j mov edi, [ebp+arg_8] test edi, edi jz short loc_7F80F9A3 mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov eax, ecx shr ecx, 2 mov esi, edi lea edi, [ebp+var_20] rep movsd mov ecx, eax and ecx, 3 rep movsb lea ecx, [ebp+var_20] push ecx call sub_7F82FE50 add esp, 4 jmp short loc_7F80F9A7 ; --------------------------------------------------------------------------- loc_7F80F9A3: ; CODE XREF: sub_7F80F91C+57j mov byte ptr [ebp+var_20], 0 loc_7F80F9A7: ; CODE XREF: sub_7F80F91C+85j mov si, [ebp+arg_C] push 0 ; int push 0 ; int lea ecx, [ebp+var_20] push [ebp+arg_18] ; int push esi ; __int16 push ecx ; int lea eax, [ebp+var_10] push eax ; int push [ebp+lpString] ; lpString call sub_7F8207A6 cmp eax, 202h jz short loc_7F80F9DA cmp eax, 60Eh jz short loc_7F80F9E0 cmp eax, 101Bh jz short loc_7F80F9E6 jmp short loc_7F80FA07 ; --------------------------------------------------------------------------- loc_7F80F9DA: ; CODE XREF: sub_7F80F91C+ACj mov [ebp+var_4], 0 jmp short loc_7F80F9EF ; --------------------------------------------------------------------------- loc_7F80F9E0: ; CODE XREF: sub_7F80F91C+B3j mov [ebp+var_18], 0 jmp short loc_7F80F9EF ; --------------------------------------------------------------------------- loc_7F80F9E6: ; CODE XREF: sub_7F80F91C+BAj and si, 0FFF9h or si, 8 loc_7F80F9EF: ; CODE XREF: sub_7F80F91C+C2j ; sub_7F80F91C+C8j push 0 ; int lea ecx, [ebp+var_20] push 0 ; int lea edx, [ebp+var_10] push [ebp+arg_18] ; int push esi ; __int16 push ecx ; int push edx ; int push [ebp+lpString] ; lpString call sub_7F8207A6 loc_7F80FA07: ; CODE XREF: sub_7F80F91C+BCj test eax, eax jz short loc_7F80FA34 cmp eax, 202h jz short loc_7F80FA3F cmp eax, 253h jz short loc_7F80FA53 mov ecx, [ebp+arg_14] cmp eax, 60Eh jz short loc_7F80FA67 mov edx, [ebp+arg_10] mov dword ptr [ecx], 17h mov dword ptr [edx], 82h jmp short loc_7F80FA76 ; --------------------------------------------------------------------------- loc_7F80FA34: ; CODE XREF: sub_7F80F91C+EDj mov ecx, [ebp+arg_10] mov dword ptr [ecx], 0 jmp short loc_7F80FA76 ; --------------------------------------------------------------------------- loc_7F80FA3F: ; CODE XREF: sub_7F80F91C+F4j mov ecx, [ebp+arg_14] mov edx, [ebp+arg_10] mov dword ptr [ecx], 16h mov dword ptr [edx], 84h jmp short loc_7F80FA76 ; --------------------------------------------------------------------------- loc_7F80FA53: ; CODE XREF: sub_7F80F91C+FBj mov ecx, [ebp+arg_14] mov edx, [ebp+arg_10] mov dword ptr [ecx], 16h mov dword ptr [edx], 83h jmp short loc_7F80FA76 ; --------------------------------------------------------------------------- loc_7F80FA67: ; CODE XREF: sub_7F80F91C+105j mov edx, [ebp+arg_10] mov dword ptr [ecx], 15h mov dword ptr [edx], 81h loc_7F80FA76: ; CODE XREF: sub_7F80F91C+116j ; sub_7F80F91C+121j ... push eax call sub_7F80F8B4 test eax, eax jge short loc_7F80FA85 mov eax, 80040111h loc_7F80FA85: ; CODE XREF: sub_7F80F91C+162j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch sub_7F80F91C endp ; =============== S U B R O U T I N E ======================================= sub_7F80FA8E proc near ; CODE XREF: sub_7F80F805+1Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_4] test ecx, ecx jz short loc_7F80FAB7 shr [esp+arg_0], 10h mov eax, [ecx] add ecx, 4 test eax, eax jz short loc_7F80FAB7 loc_7F80FAA4: ; CODE XREF: sub_7F80FA8E+27j mov edx, [ecx] shr edx, 10h cmp edx, [esp+arg_0] jz short loc_7F80FABC dec eax add ecx, 4 test eax, eax jnz short loc_7F80FAA4 loc_7F80FAB7: ; CODE XREF: sub_7F80FA8E+6j ; sub_7F80FA8E+14j xor eax, eax locret_7F80FAB9: ; CODE XREF: sub_7F80FA8E+33j retn 8 ; --------------------------------------------------------------------------- loc_7F80FABC: ; CODE XREF: sub_7F80FA8E+1Fj mov eax, 1 jmp short locret_7F80FAB9 sub_7F80FA8E endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FAC3(void *lp) sub_7F80FAC3 proc near ; CODE XREF: sub_7F80D991+A9p ; sub_7F80D991+154p ... lp = dword ptr 4 push esi push edi xor edi, edi push 8 ; ucb mov esi, [esp+0Ch+lp] push esi ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FB1D movzx eax, word ptr [esi+6] movzx ecx, word ptr [esi+4] add eax, ecx add eax, 8 push eax ; ucb push esi ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FB1D cmp word ptr [esi], 0Ah jnb short loc_7F80FB1D mov ax, [esi+4] lea ecx, [esi+8] test ax, ax jz short loc_7F80FB18 movzx esi, ax cmp byte ptr [esi+ecx-1], 0 jz short loc_7F80FB18 push ecx ; lpString call ds:lstrlenA cmp eax, esi ja short loc_7F80FB1D loc_7F80FB18: ; CODE XREF: sub_7F80FAC3+3Ej ; sub_7F80FAC3+48j mov edi, 1 loc_7F80FB1D: ; CODE XREF: sub_7F80FAC3+13j ; sub_7F80FAC3+2Cj ... mov eax, edi pop edi pop esi retn 4 sub_7F80FAC3 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FB24(int, void *lp, UINT_PTR ucb) sub_7F80FB24 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:off_7F835800o lp = dword ptr 8 ucb = dword ptr 0Ch push ebx push esi push edi xor ebx, ebx mov edi, [esp+0Ch+ucb] mov esi, [esp+0Ch+lp] push edi ; ucb push esi ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FB55 cmp edi, 8 jb short loc_7F80FB55 cmp word ptr [esi], 0Ah jnb short loc_7F80FB55 movzx eax, word ptr [esi+6] cmp eax, edi ja short loc_7F80FB55 mov ebx, 1 loc_7F80FB55: ; CODE XREF: sub_7F80FB24+17j ; sub_7F80FB24+1Cj ... mov eax, ebx pop edi pop esi pop ebx retn 0Ch sub_7F80FB24 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FB5D(int, void *lp, UINT_PTR ucb) sub_7F80FB5D proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835804o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr cmp eax, 1 sbb eax, eax neg eax retn 0Ch sub_7F80FB5D endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FB75(int, void *lp, UINT_PTR ucb) sub_7F80FB75 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835808o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr cmp eax, 1 sbb eax, eax neg eax retn 0Ch sub_7F80FB75 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FB8D(int, void *lp, UINT_PTR ucb) sub_7F80FB8D proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F83580Co lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FBAB cmp [esp+ucb], 0Eh mov eax, 1 jnb short locret_7F80FBAD loc_7F80FBAB: ; CODE XREF: sub_7F80FB8D+10j xor eax, eax locret_7F80FBAD: ; CODE XREF: sub_7F80FB8D+1Cj retn 0Ch sub_7F80FB8D endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FBB0(int, void *lp, UINT_PTR ucb) sub_7F80FBB0 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835810o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FBCE cmp [esp+ucb], 2 mov eax, 1 jnb short locret_7F80FBD0 loc_7F80FBCE: ; CODE XREF: sub_7F80FBB0+10j xor eax, eax locret_7F80FBD0: ; CODE XREF: sub_7F80FBB0+1Cj retn 0Ch sub_7F80FBB0 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FBD3(int, void *lp, UINT_PTR ucb) sub_7F80FBD3 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835814o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FBF1 cmp [esp+ucb], 4 mov eax, 1 jnb short locret_7F80FBF3 loc_7F80FBF1: ; CODE XREF: sub_7F80FBD3+10j xor eax, eax locret_7F80FBF3: ; CODE XREF: sub_7F80FBD3+1Cj retn 0Ch sub_7F80FBD3 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FBF6(int, void *lp, UINT_PTR ucb) sub_7F80FBF6 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835818o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FC14 cmp [esp+ucb], 1 mov eax, 1 jnb short locret_7F80FC16 loc_7F80FC14: ; CODE XREF: sub_7F80FBF6+10j xor eax, eax locret_7F80FC16: ; CODE XREF: sub_7F80FBF6+1Cj retn 0Ch sub_7F80FBF6 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FC19(int, void *lp, UINT_PTR ucb) sub_7F80FC19 proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F83581Co lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FC37 cmp [esp+ucb], 2 mov eax, 1 jnb short locret_7F80FC39 loc_7F80FC37: ; CODE XREF: sub_7F80FC19+10j xor eax, eax locret_7F80FC39: ; CODE XREF: sub_7F80FC19+1Cj retn 0Ch sub_7F80FC19 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FC3C(int, void *lp, UINT_PTR ucb) sub_7F80FC3C proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835820o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr test eax, eax jnz short loc_7F80FC5A cmp [esp+ucb], 4 mov eax, 1 jnb short locret_7F80FC5C loc_7F80FC5A: ; CODE XREF: sub_7F80FC3C+10j xor eax, eax locret_7F80FC5C: ; CODE XREF: sub_7F80FC3C+1Cj retn 0Ch sub_7F80FC3C endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F80FC5F(int, void *lp, UINT_PTR ucb) sub_7F80FC5F proc near ; CODE XREF: sub_7F80FC77+1Ep ; DATA XREF: .data:7F835824o lp = dword ptr 8 ucb = dword ptr 0Ch push [esp+ucb] ; ucb push [esp+4+lp] ; lp call ds:IsBadReadPtr cmp eax, 1 sbb eax, eax neg eax retn 0Ch sub_7F80FC5F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80FC77(int, void *lp, UINT_PTR ucb) sub_7F80FC77 proc near ; CODE XREF: sub_7F80D991+8Bp ; sub_7F80F533+DAp arg_0 = dword ptr 8 lp = dword ptr 0Ch ucb = dword ptr 10h push ebp xor eax, eax mov ebp, esp mov ecx, [esp+arg_0] shr ecx, 10h cmp cx, 0Bh jnb short loc_7F80FC9C push [ebp+ucb] ; ucb movzx eax, cx push [ebp+lp] ; lp push [ebp+arg_0] ; int call off_7F835800[eax*4] loc_7F80FC9C: ; CODE XREF: sub_7F80FC77+10j pop ebp retn 0Ch sub_7F80FC77 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80FCA0(CHAR) sub_7F80FCA0 proc near ; CODE XREF: sub_7F80E722+8Bp ; sub_7F80E722+9Dp arg_0 = byte ptr 8 push ebp mov ebp, esp push ebx xor bl, bl push dword ptr [ebp+arg_0] ; ch call ds:IsCharUpperA test eax, eax mov eax, offset a0123456789abcd ; "0123456789ABCDEF" jnz short loc_7F80FCBD mov eax, offset a0123456789ab_0 ; "0123456789abcdef" loc_7F80FCBD: ; CODE XREF: sub_7F80FCA0+16j mov dl, [ebp+arg_0] cmp [eax], dl jz short loc_7F80FCD6 loc_7F80FCC4: ; CODE XREF: sub_7F80FCA0+34j cmp bl, 10h jnb short loc_7F80FCDB inc bl mov dl, [ebp+arg_0] movzx ecx, bl cmp [ecx+eax], dl jnz short loc_7F80FCC4 loc_7F80FCD6: ; CODE XREF: sub_7F80FCA0+22j cmp bl, 10h jb short loc_7F80FCDD loc_7F80FCDB: ; CODE XREF: sub_7F80FCA0+27j xor bl, bl loc_7F80FCDD: ; CODE XREF: sub_7F80FCA0+39j mov al, bl pop ebx pop ebp retn 4 sub_7F80FCA0 endp ; =============== S U B R O U T I N E ======================================= sub_7F80FCE4 proc near ; CODE XREF: sub_7F802896+13p ; sub_7F80B4E1+89p arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx mov word ptr [eax], 3 mov [eax+6], ecx mov [eax+2], cx mov [eax+0Ah], ecx mov [eax+0Eh], ecx mov [eax+12h], ecx mov word ptr [eax+4], 0FA0h mov word ptr [eax+16h], 1 retn 4 sub_7F80FCE4 endp ; =============== S U B R O U T I N E ======================================= sub_7F80FD0E proc near ; CODE XREF: sub_7F802896+Ap ; sub_7F80B4E1+80p arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx mov word ptr [eax], 3 mov [eax+6], ecx mov [eax+2], cx mov [eax+0Ah], ecx mov [eax+0Eh], ecx mov [eax+12h], ecx mov word ptr [eax+4], 0FA6h mov word ptr [eax+16h], 1 retn 4 sub_7F80FD0E endp ; =============== S U B R O U T I N E ======================================= sub_7F80FD38 proc near ; CODE XREF: sub_7F80C96E+A3p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push [esp+arg_8] mov edx, [esp+4+arg_0] push [esp+4+arg_4] mov eax, [edx+2Ch] call dword ptr [eax] retn 0Ch sub_7F80FD38 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80FD4C proc near ; CODE XREF: sub_7F80CBB5+57p ; sub_7F80CBB5+2C4p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_8] mov ebp, esp test eax, eax push [ebp+arg_C] jz short loc_7F80FD69 push eax mov ecx, [ebp+arg_0] mov eax, [ecx+2Ch] push [ebp+arg_4] call dword ptr [eax+4] jmp short loc_7F80FD74 ; --------------------------------------------------------------------------- loc_7F80FD69: ; CODE XREF: sub_7F80FD4C+Cj mov edx, [ebp+arg_0] push [ebp+arg_4] mov eax, [edx+2Ch] call dword ptr [eax] loc_7F80FD74: ; CODE XREF: sub_7F80FD4C+1Bj pop ebp retn 10h sub_7F80FD4C endp ; =============== S U B R O U T I N E ======================================= sub_7F80FD78 proc near ; CODE XREF: sub_7F80CB32+49p ; sub_7F80CB32+52p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] test eax, eax jz short locret_7F80FD8B mov ecx, [esp+arg_0] push eax mov eax, [ecx+2Ch] call dword ptr [eax+8] locret_7F80FD8B: ; CODE XREF: sub_7F80FD78+6j retn 8 sub_7F80FD78 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F80FD8E proc near ; CODE XREF: sub_7F8207A6+242p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 lpString = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = byte ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 8 push ebx lea eax, [ebp+var_4] mov [ebp+var_8], 74634180h push esi lea ecx, [ebp+var_8] push edi xor esi, esi push eax mov [ebp+var_4], esi push 1 push ecx push [ebp+arg_0] call sub_7F817E9D test eax, eax jz short loc_7F80FE0D cmp eax, 1001h jnz short loc_7F80FE00 test [ebp+arg_C], 8 jz short loc_7F80FDD5 mov dword_7F83587C, 59h jmp loc_7F80FE87 ; --------------------------------------------------------------------------- loc_7F80FDD5: ; CODE XREF: sub_7F80FD8E+36j test [ebp+arg_C], 6 jz short loc_7F80FDEF lea eax, [ebp+var_4] lea ecx, [ebp+var_8] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D jmp short loc_7F80FDF9 ; --------------------------------------------------------------------------- loc_7F80FDEF: ; CODE XREF: sub_7F80FD8E+4Bj mov eax, dword_7F835864 xor eax, 1252h loc_7F80FDF9: ; CODE XREF: sub_7F80FD8E+5Fj cmp eax, 1 sbb esi, esi neg esi loc_7F80FE00: ; CODE XREF: sub_7F80FD8E+30j test eax, eax jz short loc_7F80FE0D xor al, 59h mov dword_7F83587C, eax jmp short loc_7F80FE87 ; --------------------------------------------------------------------------- loc_7F80FE0D: ; CODE XREF: sub_7F80FD8E+29j ; sub_7F80FD8E+74j mov ebx, [ebp+arg_10] push ebx ; int push [ebp+arg_8] ; LPCSTR push [ebp+lpString] ; lpString push [ebp+var_4] ; int call sub_7F80FE90 mov edi, eax test edi, edi jz short loc_7F80FE6E cmp edi, 60Eh jnz short loc_7F80FE4D push [ebp+arg_8] ; lpString push [ebp+var_4] ; int call sub_7F810181 test eax, eax jz short loc_7F80FE6E push ebx ; int push [ebp+arg_8] ; lpString push [ebp+lpString] ; lpString2 push [ebp+var_4] ; int call sub_7F80FFF8 jmp short loc_7F80FE65 ; --------------------------------------------------------------------------- loc_7F80FE4D: ; CODE XREF: sub_7F80FD8E+9Dj cmp edi, 619h jnz short loc_7F80FE6E push [ebp+arg_8] ; lpString push [ebp+lpString] ; lpString2 push dword ptr [ebx] ; int push [ebp+var_4] ; int call sub_7F810109 loc_7F80FE65: ; CODE XREF: sub_7F80FD8E+BDj cmp eax, 1 mov edi, eax sbb esi, esi neg esi loc_7F80FE6E: ; CODE XREF: sub_7F80FD8E+95j ; sub_7F80FD8E+ACj ... push esi lea eax, [ebp+var_4] push eax call sub_7F81813C test edi, edi jnz short loc_7F80FE7E mov edi, eax loc_7F80FE7E: ; CODE XREF: sub_7F80FD8E+ECj xor edi, 59h mov dword_7F83587C, edi loc_7F80FE87: ; CODE XREF: sub_7F80FD8E+42j ; sub_7F80FD8E+7Dj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F80FD8E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80FE90(int, LPCSTR lpString, LPCSTR, int) sub_7F80FE90 proc near ; CODE XREF: sub_7F80FD8E+8Cp var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 lpString = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [ebp+lpString] test esi, esi jz loc_7F80FFEA cmp [ebp+arg_8], 0 jz loc_7F80FFEA push esi ; lpString call ds:lstrlenA inc eax push 3Ah push esi mov [ebp+var_C], eax call sub_7F82FE30 add esp, 8 mov edi, eax test edi, edi jz loc_7F80FFEA lea eax, [ebp+var_2] push eax push 0 push 0 mov eax, edi sub eax, esi mov ebx, [ebp+arg_0] inc eax push eax push esi push ebx call sub_7F819536 test eax, eax jz short loc_7F80FF04 cmp eax, 1004h jnz loc_7F80FFEF mov eax, dword_7F835868 xor eax, 1252h jmp loc_7F80FFEF ; --------------------------------------------------------------------------- loc_7F80FF04: ; CODE XREF: sub_7F80FE90+58j push dword ptr [ebp+var_2] push ebx call sub_7F819508 mov ecx, [ebp+arg_C] mov [ebp+var_8], 220h mov [ecx], eax lea eax, [ebp+var_8] push eax push offset ReturnedString push 0 push dword ptr [ebp+var_2] push ebx call sub_7F818D47 mov ebx, eax test ebx, ebx jz short loc_7F80FF43 cmp ebx, 1014h jnz short loc_7F80FFA6 cmp [ebp+var_8], 0 jbe short loc_7F80FFA6 xor ebx, ebx loc_7F80FF43: ; CODE XREF: sub_7F80FE90+A1j push [ebp+arg_8] ; lpString call ds:lstrlenA inc eax push eax push [ebp+arg_8] push offset ReturnedString ; lpString call ds:lstrlenA add eax, (offset ReturnedString+1) push eax call sub_7F81AF66 test eax, eax jnz short loc_7F80FF77 mov ebx, dword_7F835860 xor ebx, 1252h loc_7F80FF77: ; CODE XREF: sub_7F80FE90+D9j cmp byte ptr [edi+1], 0 jz short loc_7F80FFD8 push [ebp+var_C] push esi push offset ReturnedString call sub_7F81AF66 test eax, eax jnz short loc_7F80FFD8 sub edi, esi cmp byte ptr (ReturnedString+1)[edi], 0 jnz short loc_7F80FFC0 test ebx, ebx jz short loc_7F80FFB8 mov ebx, dword_7F835878 jmp short loc_7F80FFD2 ; --------------------------------------------------------------------------- loc_7F80FFA6: ; CODE XREF: sub_7F80FE90+A9j ; sub_7F80FE90+AFj mov edi, offset ReturnedString xor eax, eax mov ecx, 88h rep stosd mov eax, ebx jmp short loc_7F80FFEF ; --------------------------------------------------------------------------- loc_7F80FFB8: ; CODE XREF: sub_7F80FE90+10Cj mov ebx, dword_7F83586C jmp short loc_7F80FFD2 ; --------------------------------------------------------------------------- loc_7F80FFC0: ; CODE XREF: sub_7F80FE90+108j test ebx, ebx jz short loc_7F80FFCC mov ebx, dword_7F835870 jmp short loc_7F80FFD2 ; --------------------------------------------------------------------------- loc_7F80FFCC: ; CODE XREF: sub_7F80FE90+132j mov ebx, dword_7F835874 loc_7F80FFD2: ; CODE XREF: sub_7F80FE90+114j ; sub_7F80FE90+12Ej ... xor ebx, 1252h loc_7F80FFD8: ; CODE XREF: sub_7F80FE90+EBj ; sub_7F80FE90+FDj mov edi, offset ReturnedString xor eax, eax mov ecx, 88h rep stosd mov eax, ebx jmp short loc_7F80FFEF ; --------------------------------------------------------------------------- loc_7F80FFEA: ; CODE XREF: sub_7F80FE90+Ej ; sub_7F80FE90+18j ... mov eax, 210h loc_7F80FFEF: ; CODE XREF: sub_7F80FE90+5Fj ; sub_7F80FE90+6Fj ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80FE90 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F80FFF8(int, LPCSTR lpString2, LPCSTR lpString, int) sub_7F80FFF8 proc near ; CODE XREF: sub_7F80FD8E+B8p var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 lpString2 = dword ptr 0Ch lpString = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov edi, [ebp+lpString] test edi, edi jz loc_7F8100FB mov esi, [ebp+lpString2] test esi, esi jz loc_7F8100FB push edi ; lpString call ds:lstrlenA cmp eax, 20h jnb loc_7F8100FB push esi ; lpString call ds:lstrlenA test eax, eax jz loc_7F8100FB cmp eax, 200h jnb loc_7F8100FB push 3Ah push esi call sub_7F82FE30 add esp, 8 test eax, eax jz loc_7F8100FB push 4 push offset aTmp_0 ; "TMP:" push esi call sub_7F81AF66 test eax, eax jz short loc_7F810075 mov ecx, [ebp+arg_C] xor eax, eax mov dword ptr [ecx], 0 jmp loc_7F810100 ; --------------------------------------------------------------------------- loc_7F810075: ; CODE XREF: sub_7F80FFF8+6Bj push edi ; lpString call ds:lstrlenA mov ebx, eax push edi ; lpString2 push esi ; lpString2 push offset ReturnedString ; lpString1 call ds:lstrcpyA mov edi, eax push esi ; lpString call ds:lstrlenA add edi, eax inc edi push edi ; lpString1 call ds:lstrcpyA add ebx, eax mov edi, [ebp+arg_0] sub ebx, offset unk_7F8367D7 push edi mov [ebp+var_8], ebx call sub_7F8198FC push [ebp+var_8] movsx esi, ax inc esi lea eax, [ebp+var_2] push esi push eax push edi call sub_7F818B75 mov edx, eax test edx, edx jnz short loc_7F8100E0 push [ebp+var_8] push offset ReturnedString push 0 lea ecx, [ebp+var_2] push ecx push edi call sub_7F818DC7 mov edx, eax loc_7F8100E0: ; CODE XREF: sub_7F80FFF8+D0j mov edi, offset ReturnedString xor eax, eax mov ecx, 88h test edx, edx rep stosd jnz short loc_7F8100F7 mov ecx, [ebp+arg_C] mov [ecx], esi loc_7F8100F7: ; CODE XREF: sub_7F80FFF8+F8j mov eax, edx jmp short loc_7F810100 ; --------------------------------------------------------------------------- loc_7F8100FB: ; CODE XREF: sub_7F80FFF8+Ej ; sub_7F80FFF8+19j ... mov eax, 210h loc_7F810100: ; CODE XREF: sub_7F80FFF8+78j ; sub_7F80FFF8+101j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F80FFF8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F810109(int, int, LPCSTR lpString2, LPCSTR lpString) sub_7F810109 proc near ; CODE XREF: sub_7F80FD8E+D2p var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpString2 = dword ptr 10h lpString = dword ptr 14h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F8194ED mov [ebp+var_2], ax push [ebp+lpString] ; lpString call ds:lstrlenA mov esi, eax mov edi, offset ReturnedString push [ebp+lpString] ; lpString2 push [ebp+lpString2] ; lpString call ds:lstrlenA push [ebp+lpString2] ; lpString2 push edi ; lpString1 mov ebx, eax call ds:lstrcpyA add ebx, eax inc ebx push ebx ; lpString1 call ds:lstrcpyA add esi, eax lea eax, [ebp+var_2] sub esi, offset unk_7F8367D7 push esi push edi push eax push [ebp+arg_0] call sub_7F818E95 mov edx, eax mov ecx, 88h xor eax, eax rep stosd mov eax, edx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F810109 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F810181(int, LPCSTR lpString) sub_7F810181 proc near ; CODE XREF: sub_7F80FD8E+A5p var_4 = dword ptr -4 arg_0 = dword ptr 8 lpString = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi push [ebp+lpString] ; lpString call ds:lstrlenA push [ebp+arg_0] lea edi, [eax+1] call sub_7F8198FC mov si, ax test si, si jg short loc_7F8101AD mov eax, 1 jmp short loc_7F810218 ; --------------------------------------------------------------------------- loc_7F8101AD: ; CODE XREF: sub_7F810181+23j mov ebx, offset ReturnedString loc_7F8101B2: ; CODE XREF: sub_7F810181+87j dec si lea eax, [ebp+var_4] mov [ebp+var_4], 220h push eax push ebx push 0 push esi push [ebp+arg_0] call sub_7F818D47 test eax, eax jz short loc_7F8101DC cmp eax, 1014h jnz short loc_7F81020A cmp [ebp+var_4], 0 jz short loc_7F81020A loc_7F8101DC: ; CODE XREF: sub_7F810181+4Cj push 0 push [ebp+var_4] push ebx call sub_7F82A3C9 test eax, eax jz short loc_7F81020A inc eax mov ecx, ebx sub ecx, eax add ecx, [ebp+var_4] cmp ecx, edi jnz short loc_7F810205 push edi push [ebp+lpString] push eax call sub_7F81AF66 test eax, eax jnz short loc_7F810221 loc_7F810205: ; CODE XREF: sub_7F810181+74j test si, si jg short loc_7F8101B2 loc_7F81020A: ; CODE XREF: sub_7F810181+53j ; sub_7F810181+59j ... mov edi, offset ReturnedString xor eax, eax mov ecx, 88h rep stosd loc_7F810218: ; CODE XREF: sub_7F810181+2Aj ; sub_7F810181+B3j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 ; --------------------------------------------------------------------------- loc_7F810221: ; CODE XREF: sub_7F810181+82j mov edi, offset ReturnedString xor eax, eax mov ecx, 88h rep stosd mov eax, 1 jmp short loc_7F810218 sub_7F810181 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810236 proc near ; CODE XREF: sub_7F810254+10p var_4 = byte ptr -4 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi mov eax, [ebp+arg_4] lea ecx, [ebp+var_4] sub eax, ecx mov word_7F835850, ax pop edi pop esi pop ebx leave retn 8 sub_7F810236 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810254 proc near ; CODE XREF: sub_7F8173E6+8Dp var_4 = byte ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi lea eax, [ebp+var_4] push eax push [ebp+arg_0] call sub_7F810236 lea eax, [ebp+arg_4] lea ecx, [ebp+var_4] sub eax, ecx mov word_7F835854, ax lea eax, [ebp+arg_0] lea ecx, [ebp+var_4] sub eax, ecx mov word_7F835858, ax pop edi pop esi pop ebx leave retn 8 sub_7F810254 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81028C proc near ; CODE XREF: sub_7F80B80E+31p ; sub_7F80D08D+4Ap var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 0Ch push ebx mov eax, [ebp+arg_10] push esi push edi mov si, 1002h mov edi, [ebp+arg_8] mov [ebp+var_2], si mov dword ptr [eax], 0 mov eax, [edi] cmp al, 87h jnz short loc_7F8102B9 mov eax, 1015h jmp loc_7F810396 ; --------------------------------------------------------------------------- loc_7F8102B9: ; CODE XREF: sub_7F81028C+21j and word ptr [ebp+arg_C], 100Fh mov bx, word ptr [ebp+arg_C] and bx, 2 jnz short loc_7F81030A push 0 lea ecx, [ebp+var_8] push 0 lea edx, [ebp+var_C] push ecx push edx push eax push [ebp+arg_0] call sub_7F82D114 test eax, eax jnz loc_7F810396 mov ecx, [ebp+arg_4] cmp ecx, [ebp+var_C] jz short loc_7F810302 mov eax, [ebp+var_8] push ecx and al, 88h or al, 88h push eax mov [ebp+var_8], eax push [ebp+arg_0] call sub_7F81AFB2 loc_7F810302: ; CODE XREF: sub_7F81028C+60j test eax, eax jnz loc_7F810396 loc_7F81030A: ; CODE XREF: sub_7F81028C+3Bj push 4 push 4 push [ebp+arg_4] push [ebp+arg_0] call sub_7F82CFC5 test eax, eax jz short loc_7F81032B cmp eax, 1001h jnz short loc_7F810396 mov eax, 1009h jmp short loc_7F810396 ; --------------------------------------------------------------------------- loc_7F81032B: ; CODE XREF: sub_7F81028C+8Fj test byte ptr [ebp+arg_C], 1 jnz short loc_7F810336 test bx, bx jz short loc_7F810343 loc_7F810336: ; CODE XREF: sub_7F81028C+A3j mov si, 3002h mov [ebp+var_2], si test bx, bx jnz short loc_7F810353 loc_7F810343: ; CODE XREF: sub_7F81028C+A8j push dword ptr [ebp+var_2] push esi push dword ptr [edi] push [ebp+arg_0] call sub_7F82CFC5 jmp short loc_7F810374 ; --------------------------------------------------------------------------- loc_7F810353: ; CODE XREF: sub_7F81028C+B5j mov cl, [edi] test cl, cl jge short loc_7F810370 cmp cl, 91h jb short loc_7F810363 xor si, si jmp short loc_7F810374 ; --------------------------------------------------------------------------- loc_7F810363: ; CODE XREF: sub_7F81028C+D0j movzx ecx, cl mov si, word_7F8358D0[ecx*2] jmp short loc_7F810374 ; --------------------------------------------------------------------------- loc_7F810370: ; CODE XREF: sub_7F81028C+CBj mov si, 0B002h loc_7F810374: ; CODE XREF: sub_7F81028C+C5j ; sub_7F81028C+D5j ... test eax, eax jnz short loc_7F810396 push [ebp+arg_18] push [ebp+arg_14] push [ebp+arg_10] push 7E0h push esi push [ebp+arg_C] push edi push [ebp+arg_4] push [ebp+arg_0] call sub_7F81039F loc_7F810396: ; CODE XREF: sub_7F81028C+28j ; sub_7F81028C+54j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch sub_7F81028C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81039F proc near ; CODE XREF: sub_7F81028C+105p ; sub_7F81121A+DCp var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_8] push esi push edi xor esi, esi push eax push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_0] mov [ebp+var_8], esi call sub_7F817E9D mov [ebp+var_4], eax cmp eax, esi jnz loc_7F81050E mov bx, word ptr [ebp+arg_C] and bx, 2 jz short loc_7F8103EF mov eax, [ebp+arg_8] push [ebp+arg_10] push dword ptr [eax] push [ebp+arg_0] call sub_7F82CF24 mov [ebp+var_4], eax cmp eax, esi jnz loc_7F81050E loc_7F8103EF: ; CODE XREF: sub_7F81039F+33j push 10h push 3Ch call sub_7F82F18D mov esi, eax test esi, esi jz loc_7F810507 mov edi, [esi] mov eax, [ebp+arg_0] mov edx, [ebp+arg_8] mov byte ptr [edi+20h], 0 mov [edi], eax mov ecx, [ebp+var_8] mov [edi+4], ecx mov ecx, [ebp+arg_4] test bx, bx mov eax, [edx] mov dx, word ptr [ebp+arg_C] mov [edi+8], eax mov [edi+18h], ecx mov [edi+14h], dx jz short loc_7F810439 mov ax, dx or ax, 801h mov [edi+14h], ax loc_7F810439: ; CODE XREF: sub_7F81039F+8Dj test ecx, ecx jz loc_7F8104DE mov byte ptr [edi+38h], 0 test bx, bx jnz short loc_7F8104A9 push 0 push 68007h push [ebp+var_8] call sub_7F8194ED test ax, ax jl short loc_7F810483 mov [ebp+var_C], 1 lea ecx, [ebp+var_C] push ecx lea ecx, [edi+38h] push ecx push 0 push eax push [ebp+var_8] call sub_7F818D47 mov [ebp+var_4], eax test eax, eax jnz loc_7F81050E loc_7F810483: ; CODE XREF: sub_7F81039F+BDj lea ebx, [edi+1Ch] push 0 push 0 mov eax, [ebp+arg_8] push ebx push 0 push dword ptr [eax] push [ebp+arg_0] call sub_7F82D114 mov [ebp+var_4], eax test eax, eax jnz short loc_7F81050E mov eax, [ebx] and al, 89h or al, 89h mov [ebx], eax loc_7F8104A9: ; CODE XREF: sub_7F81039F+A9j push [ebp+arg_C] push edi call sub_7F8110F6 mov [ebp+var_4], eax test eax, eax jnz short loc_7F81050E push esi push offset sub_7F811428 push 40000h push 80h push [ebp+arg_0] call sub_7F829F2E mov [edi+0Ch], eax test eax, eax jz short loc_7F810507 mov al, [edi+38h] mov [edi+39h], al loc_7F8104DE: ; CODE XREF: sub_7F81039F+9Cj mov eax, [ebp+arg_1C] test eax, eax jz short loc_7F81050E mov ecx, [ebp+arg_20] mov [edi+28h], eax push ecx mov [edi+24h], ecx push eax mov ecx, [ebp+arg_8] push [ebp+arg_14] push dword ptr [ecx] push [ebp+arg_0] call sub_7F829F2E mov [edi+10h], eax test eax, eax jnz short loc_7F81050E loc_7F810507: ; CODE XREF: sub_7F81039F+5Dj ; sub_7F81039F+137j mov [ebp+var_4], 400h loc_7F81050E: ; CODE XREF: sub_7F81039F+25j ; sub_7F81039F+4Aj ... xor eax, eax cmp [ebp+var_4], eax jz short loc_7F81054B cmp [ebp+var_8], eax jz short loc_7F810524 push eax lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F810524: ; CODE XREF: sub_7F81039F+179j test esi, esi jz short loc_7F81054B mov edi, [esi] push edi call sub_7F8111BB mov eax, [edi+0Ch] test eax, eax jz short loc_7F810545 push eax push 80h push [ebp+arg_0] call sub_7F829FD2 loc_7F810545: ; CODE XREF: sub_7F81039F+196j push esi call sub_7F82F1E1 loc_7F81054B: ; CODE XREF: sub_7F81039F+174j ; sub_7F81039F+187j xor ecx, ecx mov eax, [ebp+arg_18] cmp [ebp+var_4], ecx jz short loc_7F810559 mov [eax], ecx jmp short loc_7F81055B ; --------------------------------------------------------------------------- loc_7F810559: ; CODE XREF: sub_7F81039F+1B4j mov [eax], esi loc_7F81055B: ; CODE XREF: sub_7F81039F+1B8j mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 24h sub_7F81039F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810567 proc near ; CODE XREF: sub_7F81121A+A4p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor esi, esi push esi lea eax, [ebp+var_10] push esi mov [ebp+var_C], esi push eax mov [ebp+var_8], esi push esi push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 cmp eax, esi mov edi, eax jnz loc_7F81074F mov ecx, [ebp+arg_C] cmp [ecx], esi jnz short loc_7F8105A5 mov eax, [ebp+arg_4] and eax, 0FFh mov [ecx], eax loc_7F8105A5: ; CODE XREF: sub_7F810567+32j lea eax, [ebp+var_C] lea ecx, [ebp+arg_4] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F81074F push [ebp+arg_C] lea ecx, [ebp+var_8] push ecx push 1 push [ebp+var_C] call sub_7F819AFB mov edi, eax test edi, edi jnz loc_7F81074F mov ecx, [ebp+arg_C] push [ebp+arg_10] push dword ptr [ecx] push [ebp+arg_0] call sub_7F82CF24 mov edi, eax test edi, edi jnz loc_7F81074F push 10h push 3Ch call sub_7F82F18D mov esi, eax test esi, esi jnz short loc_7F81060F mov edi, 400h jmp loc_7F81074F ; --------------------------------------------------------------------------- loc_7F81060F: ; CODE XREF: sub_7F810567+9Cj mov ebx, [esi] mov eax, [ebp+arg_0] mov edx, [ebp+arg_C] mov byte ptr [ebx+20h], 0 mov [ebx], eax mov ecx, [ebp+var_8] mov [ebx+4], ecx mov ecx, [ebp+arg_8] mov eax, [edx] mov [ebx+8], eax mov eax, [ebp+arg_18] mov [ebx+18h], ecx test eax, eax mov word ptr [ebx+14h], 803h jz short loc_7F81065F push [ebp+arg_1C] push eax push 7E0h push dword ptr [edx] push [ebp+arg_0] call sub_7F829F2E mov [ebx+10h], eax test eax, eax jnz short loc_7F81065F mov edi, 400h jmp loc_7F81074F ; --------------------------------------------------------------------------- loc_7F81065F: ; CODE XREF: sub_7F810567+D2j ; sub_7F810567+ECj cmp [ebp+arg_8], 0 jz loc_7F81074F mov byte ptr [ebp+var_4+3], 0 push 0 push 68007h push [ebp+var_8] call sub_7F8194ED mov word ptr [ebp+var_4], ax test ax, ax jl short loc_7F8106D2 lea eax, [ebp+var_14] lea ecx, [ebp+var_4+3] mov [ebp+var_14], 1 push eax push ecx push 0 push [ebp+var_4] push [ebp+var_8] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F81074F mov al, byte ptr [ebp+var_4+3] and al, 42h cmp al, 42h jz short loc_7F8106D2 push 1 lea eax, [ebp+var_4+3] push eax lea ecx, [ebp+var_4] or byte ptr [ebp+var_4+3], 42h push 0 push ecx push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz short loc_7F81074F loc_7F8106D2: ; CODE XREF: sub_7F810567+11Cj ; sub_7F810567+14Bj mov al, byte ptr [ebp+var_4+3] push esi push offset sub_7F811428 mov [ebx+38h], al push 40000h mov [ebx+39h], al push 80h push [ebp+arg_0] call sub_7F829F2E mov [ebx+0Ch], eax test eax, eax jnz short loc_7F810701 mov edi, 400h jmp short loc_7F81074F ; --------------------------------------------------------------------------- loc_7F810701: ; CODE XREF: sub_7F810567+191j cmp [ebp+var_10], 0 jz short loc_7F810729 lea eax, [ebx+1Ch] mov ecx, [ebp+arg_C] push eax push dword ptr [ecx] push [ebp+arg_4] push [ebp+arg_0] call sub_7F811467 mov edi, eax test edi, edi jz short loc_7F810729 cmp edi, 1001h jnz short loc_7F81074F loc_7F810729: ; CODE XREF: sub_7F810567+19Ej ; sub_7F810567+1B8j mov ax, [ebx+14h] and ax, 0FFFDh push eax push ebx call sub_7F8110F6 mov edi, eax test edi, edi jnz short loc_7F81074F lea eax, [ebx+34h] push eax push dword ptr [ebx+2Ch] push [ebp+arg_0] call sub_7F8107B6 mov edi, eax loc_7F81074F: ; CODE XREF: sub_7F810567+27j ; sub_7F810567+54j ... cmp [ebp+var_C], 0 jz short loc_7F810760 push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C loc_7F810760: ; CODE XREF: sub_7F810567+1ECj test edi, edi jz short loc_7F81079C cmp [ebp+var_8], 0 jz short loc_7F810775 push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F810775: ; CODE XREF: sub_7F810567+201j test esi, esi jz short loc_7F81079C mov ebx, [esi] push ebx call sub_7F8111BB mov eax, [ebx+0Ch] test eax, eax jz short loc_7F810796 push eax push 80h push [ebp+arg_0] call sub_7F829FD2 loc_7F810796: ; CODE XREF: sub_7F810567+21Fj push esi call sub_7F82F1E1 loc_7F81079C: ; CODE XREF: sub_7F810567+1FBj ; sub_7F810567+210j xor ecx, ecx mov eax, [ebp+arg_14] test edi, edi jz short loc_7F8107A9 mov [eax], ecx jmp short loc_7F8107AB ; --------------------------------------------------------------------------- loc_7F8107A9: ; CODE XREF: sub_7F810567+23Cj mov [eax], esi loc_7F8107AB: ; CODE XREF: sub_7F810567+240j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F810567 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8107B6 proc near ; CODE XREF: sub_7F810567+1E1p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor esi, esi push [ebp+arg_4] mov [ebp+var_8], esi call sub_7F8198FC mov di, ax test di, di jnz short loc_7F8107DB xor eax, eax jmp loc_7F81086C ; --------------------------------------------------------------------------- loc_7F8107DB: ; CODE XREF: sub_7F8107B6+1Cj movsx eax, di shl eax, 2 push 0 push eax call sub_7F82F03B mov ebx, eax mov [ebp+var_4], eax test eax, eax jz short loc_7F81085B mov [ebp+var_C], 4 mov ax, di dec di test ax, ax jz short loc_7F810829 loc_7F810803: ; CODE XREF: sub_7F8107B6+71j lea eax, [ebp+var_C] push eax push ebx push 0 push edi push [ebp+arg_4] call sub_7F818D47 mov [ebp+var_8], eax test eax, eax jnz short loc_7F81085B inc si add ebx, 4 mov ax, di dec di test ax, ax jnz short loc_7F810803 loc_7F810829: ; CODE XREF: sub_7F8107B6+4Bj test si, si mov ebx, [ebp+var_4] lea edi, [esi-1] jz short loc_7F81085B loc_7F810834: ; CODE XREF: sub_7F8107B6+A3j push 1 push dword ptr [ebx] push [ebp+arg_0] call sub_7F82BFE4 push 0 push 0 push dword ptr [ebx] push [ebp+arg_8] call sub_7F81698C mov cx, di add ebx, 4 dec di test cx, cx jnz short loc_7F810834 loc_7F81085B: ; CODE XREF: sub_7F8107B6+3Aj ; sub_7F8107B6+62j ... cmp [ebp+var_4], 0 jz short loc_7F810869 push [ebp+var_4] call sub_7F82F149 loc_7F810869: ; CODE XREF: sub_7F8107B6+A9j mov eax, [ebp+var_8] loc_7F81086C: ; CODE XREF: sub_7F8107B6+20j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8107B6 endp ; =============== S U B R O U T I N E ======================================= sub_7F810875 proc near ; CODE XREF: sub_7F810955+1A1p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov eax, 253h cmp dword_7F838078, 0 push edi jnz short loc_7F8108B8 mov ecx, [esp+8+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F8108B8: ; CODE XREF: sub_7F810875+Ej test eax, eax jnz short loc_7F81091D mov eax, [esp+8+arg_4] mov eax, [eax] movzx ecx, word ptr [eax] mov si, [ecx+eax+6] lea edi, [ecx+eax] mov ax, si dec si test ax, ax jle short loc_7F8108EF loc_7F8108D7: ; CODE XREF: sub_7F810875+78j mov eax, edi push 0 sub edi, 6 push dword ptr [eax] call sub_7F81479E mov ax, si dec si test ax, ax jg short loc_7F8108D7 loc_7F8108EF: ; CODE XREF: sub_7F810875+60j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F810905 call sub_7F82A34F jmp short loc_7F810913 ; --------------------------------------------------------------------------- loc_7F810905: ; CODE XREF: sub_7F810875+87j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F810913: ; CODE XREF: sub_7F810875+8Ej mov dword_7F838078, 0 loc_7F81091D: ; CODE XREF: sub_7F810875+45j pop edi pop esi retn 8 sub_7F810875 endp ; =============== S U B R O U T I N E ======================================= sub_7F810922 proc near ; CODE XREF: sub_7F80B80E+1BAp ; sub_7F80D08D+FCp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov edx, offset sub_7F810955 mov ecx, [esp+arg_0] mov eax, [ecx] mov eax, [eax] movzx eax, byte ptr [eax+20h] cmp eax, 1 jz short loc_7F81093F cmp eax, 2 jz short loc_7F810946 jmp short loc_7F81094B ; --------------------------------------------------------------------------- loc_7F81093F: ; CODE XREF: sub_7F810922+14j mov edx, offset sub_7F811343 jmp short loc_7F81094B ; --------------------------------------------------------------------------- loc_7F810946: ; CODE XREF: sub_7F810922+19j mov edx, offset sub_7F825C1D loc_7F81094B: ; CODE XREF: sub_7F810922+1Bj ; sub_7F810922+22j push [esp+arg_4] push ecx call edx ; sub_7F810955 retn 8 sub_7F810922 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810955 proc near ; CODE XREF: sub_7F810922+2Ep ; sub_7F825C1D+133p ... var_34 = byte ptr -34h var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_2B = byte ptr -2Bh var_2A = dword ptr -2Ah var_24 = byte ptr -24h var_20 = word ptr -20h var_1E = dword ptr -1Eh var_17 = byte ptr -17h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp xor ecx, ecx inc word_7F838070 mov ebp, esp sub esp, 34h mov edx, [ebp+arg_0] mov [ebp+var_10], ecx push ebx push esi mov eax, [edx] push edi mov edi, [eax] mov ebx, [edi] mov eax, [edi+8] mov [ebp+var_8], eax xor eax, eax mov dx, [edi+14h] mov esi, [edi+18h] mov ax, dx mov [ebp+var_C], esi and eax, 2 mov esi, [ebp+arg_4] mov [ebp+var_14], eax cmp esi, ecx jz short loc_7F81099C test dl, 1 jnz short loc_7F81099C xor esi, esi loc_7F81099C: ; CODE XREF: sub_7F810955+3Ej ; sub_7F810955+43j test esi, esi jz short loc_7F8109C5 test dh, 0Ch jnz short loc_7F8109A7 xor esi, esi loc_7F8109A7: ; CODE XREF: sub_7F810955+4Ej test esi, esi jz loc_7F810A3A test dl, 80h jnz short loc_7F8109C5 push edi call sub_7F810C9B mov [ebp+var_10], eax test eax, eax jnz loc_7F810BCF loc_7F8109C5: ; CODE XREF: sub_7F810955+49j ; sub_7F810955+5Dj test esi, esi jz short loc_7F810A3E cmp [ebp+var_C], 0 jz short loc_7F810A3A cmp [ebp+var_14], 0 jz short loc_7F8109F4 lea eax, [ebp+var_4] push eax push dword ptr [edi+4] push [ebp+var_8] push [ebp+var_C] push ebx call sub_7F81B8F0 mov [ebp+var_10], eax test eax, eax jz short loc_7F810A3A jmp loc_7F810BCF ; --------------------------------------------------------------------------- loc_7F8109F4: ; CODE XREF: sub_7F810955+7Ej test byte ptr [edi+15h], 2 jz short loc_7F810A14 dec word_7F838070 push dword ptr [edi+4] push [ebp+var_8] push ebx call sub_7F81D22C inc word_7F838070 loc_7F810A14: ; CODE XREF: sub_7F810955+A3j mov cl, [edi+39h] mov al, [edi+38h] xor al, cl test al, 22h jz short loc_7F810A31 xor eax, eax mov al, cl and eax, 22h push eax push [ebp+var_8] push ebx call sub_7F82C46A loc_7F810A31: ; CODE XREF: sub_7F810955+C9j push [ebp+var_8] push ebx call sub_7F828F0F loc_7F810A3A: ; CODE XREF: sub_7F810955+54j ; sub_7F810955+78j ... test esi, esi jnz short loc_7F810A5A loc_7F810A3E: ; CODE XREF: sub_7F810955+72j mov eax, [edi+10h] test eax, eax jz short loc_7F810A56 push eax push [ebp+var_8] push ebx call sub_7F829FD2 mov dword ptr [edi+10h], 0 loc_7F810A56: ; CODE XREF: sub_7F810955+EEj test esi, esi jz short loc_7F810A65 loc_7F810A5A: ; CODE XREF: sub_7F810955+E7j test byte ptr [edi+15h], 8 mov eax, 1 jnz short loc_7F810A67 loc_7F810A65: ; CODE XREF: sub_7F810955+103j xor eax, eax loc_7F810A67: ; CODE XREF: sub_7F810955+10Ej push eax lea ecx, [edi+4] push ecx call sub_7F81813C lea ecx, [edi+2Ch] cmp dword ptr [ecx], 0 jz short loc_7F810A91 test esi, esi jz short loc_7F810A88 test byte ptr [edi+15h], 4 mov eax, 1 jnz short loc_7F810A8A loc_7F810A88: ; CODE XREF: sub_7F810955+126j xor eax, eax loc_7F810A8A: ; CODE XREF: sub_7F810955+131j push eax push ecx call sub_7F81813C loc_7F810A91: ; CODE XREF: sub_7F810955+122j xor eax, eax xor ecx, ecx mov cx, [edi+14h] mov [ebp+var_1], al and ecx, 0C00h mov [ebp+var_17], al mov [ebp+var_2A], ecx cmp [ebp+var_C], eax jz short loc_7F810AB9 mov al, [edi+38h] mov cl, [edi+39h] mov [ebp+var_1], al mov [ebp+var_17], cl loc_7F810AB9: ; CODE XREF: sub_7F810955+156j mov eax, [edi+34h] test esi, esi jz short loc_7F810ADE test eax, eax jz short loc_7F810AD4 push eax push ebx call sub_7F810C5D push dword ptr [edi+34h] push ebx call sub_7F82BF24 loc_7F810AD4: ; CODE XREF: sub_7F810955+16Dj mov eax, [edi+30h] test eax, eax jz short loc_7F810AFB push eax jmp short loc_7F810AF5 ; --------------------------------------------------------------------------- loc_7F810ADE: ; CODE XREF: sub_7F810955+169j test eax, eax jz short loc_7F810AFB push eax push ebx call sub_7F82BF24 push dword ptr [edi+34h] push ebx call sub_7F810C5D push dword ptr [edi+34h] loc_7F810AF5: ; CODE XREF: sub_7F810955+187j push ebx call sub_7F810875 loc_7F810AFB: ; CODE XREF: sub_7F810955+184j ; sub_7F810955+18Bj test esi, esi jz short loc_7F810B17 test byte ptr [edi+15h], 4 jz short loc_7F810B17 push 0 lea eax, [edi+1Ch] push 1 lea ecx, [ebp+var_8] push eax push ecx push ebx call sub_7F82D2BE loc_7F810B17: ; CODE XREF: sub_7F810955+1A8j ; sub_7F810955+1AEj mov eax, [edi+0Ch] test eax, eax jz short loc_7F810B2A push eax push 80h push ebx call sub_7F829FD2 loc_7F810B2A: ; CODE XREF: sub_7F810955+1C7j mov eax, [edi+10h] test eax, eax jz short loc_7F810B3B push eax push [ebp+var_8] push ebx call sub_7F829FD2 loc_7F810B3B: ; CODE XREF: sub_7F810955+1DAj push edi call sub_7F8111BB mov edx, [ebp+arg_0] push dword ptr [edx] call sub_7F82F1E1 xor eax, eax mov edx, [ebp+arg_0] test esi, esi mov [edx], eax jz short loc_7F810BCF cmp word_7F838070, 1 jnz short loc_7F810BB1 cmp [ebp+var_14], eax jz short loc_7F810B6D lea eax, [ebp+var_34] push eax push 1 jmp short loc_7F810B79 ; --------------------------------------------------------------------------- loc_7F810B6D: ; CODE XREF: sub_7F810955+20Ej cmp [ebp+var_2A], 0 jz short loc_7F810B82 lea eax, [ebp+var_34] push eax push 40h loc_7F810B79: ; CODE XREF: sub_7F810955+216j push [ebp+var_8] push ebx call sub_7F82A016 loc_7F810B82: ; CODE XREF: sub_7F810955+21Cj cmp [ebp+var_14], 0 jnz short loc_7F810BB1 mov al, [ebp+var_1] cmp [ebp+var_17], al jz short loc_7F810BB1 mov eax, [ebp+var_C] mov cl, [ebp+var_1] mov dl, [ebp+var_17] mov [ebp+var_30], eax lea eax, [ebp+var_34] mov [ebp+var_2C], cl push eax mov [ebp+var_2B], dl push 2 push [ebp+var_8] push ebx call sub_7F82A016 loc_7F810BB1: ; CODE XREF: sub_7F810955+209j ; sub_7F810955+231j ... test esi, esi jz short loc_7F810BCF cmp [ebp+var_C], 0 jz short loc_7F810BC9 cmp [ebp+var_14], 0 jz short loc_7F810BC9 push ebx call sub_7F82A2C4 jmp short loc_7F810BCF ; --------------------------------------------------------------------------- loc_7F810BC9: ; CODE XREF: sub_7F810955+264j ; sub_7F810955+26Aj push ebx call sub_7F82A1E7 loc_7F810BCF: ; CODE XREF: sub_7F810955+6Aj ; sub_7F810955+9Aj ... cmp [ebp+var_10], 0 jz short loc_7F810BDD and word ptr [edi+14h], 0FF7Fh jmp short loc_7F810C4A ; --------------------------------------------------------------------------- loc_7F810BDD: ; CODE XREF: sub_7F810955+27Ej test esi, esi jz short loc_7F810C4A cmp [ebp+var_C], 0 jz short loc_7F810C4A cmp [ebp+var_14], 0 jz short loc_7F810C4A cmp word_7F838070, 1 jnz short loc_7F810C4A mov ax, [ebp+var_4] mov ecx, [ebp+var_8] mov word_7F833C0A, ax lea edx, [ebp+var_24] push edx mov dword_7F833C0C, ecx mov [ebp+var_1E], offset word_7F833C08 mov word_7F833C08, 1 mov [ebp+var_20], 1 push 4000h push [ebp+var_C] push ebx call sub_7F82A016 mov ecx, [ebp+var_C] lea eax, [ebp+var_24] push eax mov [ebp+var_1E+2], ecx push 100h push [ebp+var_8] push ebx call sub_7F82A016 loc_7F810C4A: ; CODE XREF: sub_7F810955+286j ; sub_7F810955+28Aj ... dec word_7F838070 mov eax, [ebp+var_10] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F810955 endp ; =============== S U B R O U T I N E ======================================= sub_7F810C5D proc near ; CODE XREF: sub_7F810955+171p ; sub_7F810955+198p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push esi push edi mov eax, [eax] movzx ecx, word ptr [eax] mov si, [ecx+eax+6] lea edi, [ecx+eax] mov ax, si dec si test ax, ax jle short loc_7F810C96 loc_7F810C7A: ; CODE XREF: sub_7F810C5D+37j mov eax, edi push 0 sub edi, 6 push dword ptr [eax] push [esp+10h+arg_0] call sub_7F82BFE4 mov ax, si dec si test ax, ax jg short loc_7F810C7A loc_7F810C96: ; CODE XREF: sub_7F810C5D+1Bj pop edi pop esi retn 8 sub_7F810C5D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810C9B proc near ; CODE XREF: sub_7F810955+60p var_1C = byte ptr -1Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch push ebx push esi push edi xor ebx, ebx xor edi, edi mov esi, [ebp+arg_0] cmp [esi+18h], edi jz loc_7F810E01 xor eax, eax push edi mov ax, [esi+14h] push 68007h push dword ptr [esi+4] mov [ebp+var_C], 1 and eax, 1000h mov [ebp+var_8], eax call sub_7F8194ED mov word ptr [ebp+var_4], ax cmp ax, di jl short loc_7F810D06 lea eax, [ebp+var_C] lea ecx, [ebp+var_4+2] push eax push ecx push edi push [ebp+var_4] push dword ptr [esi+4] call sub_7F818D47 cmp eax, edi mov ebx, eax jnz loc_7F810E34 mov al, byte ptr [ebp+var_4+2] mov byte ptr [ebp+var_4+3], al jmp short loc_7F810D38 ; --------------------------------------------------------------------------- loc_7F810D06: ; CODE XREF: sub_7F810C9B+43j push [ebp+var_C] push 68007h lea ecx, [ebp+var_4] push ecx push dword ptr [esi+4] call sub_7F818B75 mov ebx, eax test ebx, ebx jnz loc_7F810E34 cmp [ebp+var_8], 1 sbb al, al and al, 42h mov byte ptr [ebp+var_4+3], al cmp al, 1 sbb al, al neg al mov byte ptr [ebp+var_4+2], al loc_7F810D38: ; CODE XREF: sub_7F810C9B+69j and byte ptr [ebp+var_4+3], 7Fh mov eax, [esi+2Ch] test eax, eax jz short loc_7F810D52 push eax call sub_7F8198FC test ax, ax jle short loc_7F810D52 or byte ptr [ebp+var_4+3], 80h loc_7F810D52: ; CODE XREF: sub_7F810C9B+A6j ; sub_7F810C9B+B1j cmp [ebp+var_8], 0 jnz short loc_7F810D78 mov ax, [esi+14h] test al, 20h jnz short loc_7F810D78 test al, 2 jz short loc_7F810D6A or byte ptr [ebp+var_4+3], 42h jmp short loc_7F810D78 ; --------------------------------------------------------------------------- loc_7F810D6A: ; CODE XREF: sub_7F810C9B+C7j test ah, 0Ch jz short loc_7F810D78 or byte ptr [ebp+var_4+3], 1 mov edi, 1 loc_7F810D78: ; CODE XREF: sub_7F810C9B+BBj ; sub_7F810C9B+C3j ... mov al, byte ptr [ebp+var_4+2] cmp byte ptr [ebp+var_4+3], al jz short loc_7F810DA9 push 1 lea eax, [ebp+var_4+3] push eax lea ecx, [ebp+var_4] or byte ptr [esi+15h], 0Ah mov [ebp+var_C], 1 push 0 push ecx push dword ptr [esi+4] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz loc_7F810E34 loc_7F810DA9: ; CODE XREF: sub_7F810C9B+E3j test edi, edi jz short loc_7F810E01 lea eax, [ebp+var_1C] mov edi, 38020h push eax call sub_7F817717 push 0Eh lea eax, [ebp+var_8+2] push edi push eax push dword ptr [esi+4] call sub_7F818B75 mov ebx, eax test ebx, ebx jz short loc_7F810DE7 cmp ebx, 1003h jnz short loc_7F810E34 push 0 push edi push dword ptr [esi+4] call sub_7F8194ED mov word ptr [ebp+var_8+2], ax loc_7F810DE7: ; CODE XREF: sub_7F810C9B+133j push 0Eh lea eax, [ebp+var_1C] push eax lea ecx, [ebp+var_8+2] push 0 push ecx push dword ptr [esi+4] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F810E34 loc_7F810E01: ; CODE XREF: sub_7F810C9B+13j ; sub_7F810C9B+110j lea edi, [esi+14h] test byte ptr [edi+1], 8 jz short loc_7F810E18 push dword ptr [esi+4] call sub_7F8178C4 mov ebx, eax test ebx, ebx jnz short loc_7F810E34 loc_7F810E18: ; CODE XREF: sub_7F810C9B+16Dj mov eax, [esi+2Ch] test eax, eax jz short loc_7F810E31 test byte ptr [edi+1], 4 jz short loc_7F810E31 push eax call sub_7F8178C4 mov ebx, eax test ebx, ebx jnz short loc_7F810E34 loc_7F810E31: ; CODE XREF: sub_7F810C9B+182j ; sub_7F810C9B+188j or byte ptr [edi], 80h loc_7F810E34: ; CODE XREF: sub_7F810C9B+5Dj ; sub_7F810C9B+83j ... mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F810C9B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810E3F proc near ; CODE XREF: sub_7F80B80E+53p ; sub_7F80D991+28p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp push esi push edi mov esi, [eax] push 0 push [ebp+arg_4] push dword ptr [esi+4] call sub_7F8194ED mov di, ax test di, di jl short loc_7F810E6F push edi push dword ptr [esi+4] call sub_7F81990D mov ecx, [ebp+arg_8] mov [ecx], eax jmp short loc_7F810E78 ; --------------------------------------------------------------------------- loc_7F810E6F: ; CODE XREF: sub_7F810E3F+1Ej mov ecx, [ebp+arg_8] mov dword ptr [ecx], 0 loc_7F810E78: ; CODE XREF: sub_7F810E3F+2Ej test di, di mov eax, 0 jge short loc_7F810E87 mov eax, 1004h loc_7F810E87: ; CODE XREF: sub_7F810E3F+41j pop edi pop esi pop ebp retn 0Ch sub_7F810E3F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810E8D proc near ; CODE XREF: sub_7F80B80E+8Cp ; sub_7F80B80E+233p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [eax] xor ebx, ebx push ebx push [ebp+arg_4] push dword ptr [esi+4] call sub_7F8194ED test ax, ax mov edi, [ebp+arg_C] jge short loc_7F810EBB mov eax, 1004h mov [edi], ebx jmp short loc_7F810ED7 ; --------------------------------------------------------------------------- loc_7F810EBB: ; CODE XREF: sub_7F810E8D+23j mov ecx, [edi] mov [ebp+var_4], ecx lea ecx, [ebp+var_4] push ecx push [ebp+arg_8] push 0 push eax push dword ptr [esi+4] call sub_7F818D47 mov ecx, [ebp+var_4] mov [edi], ecx loc_7F810ED7: ; CODE XREF: sub_7F810E8D+2Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F810E8D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810EE0 proc near ; CODE XREF: sub_7F80F674+52p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov edx, [esp+arg_0] mov ebp, esp mov eax, [edx] push [ebp+arg_8] push [ebp+arg_C] push [ebp+arg_4] push dword ptr [eax+4] call sub_7F819938 pop ebp retn 10h sub_7F810EE0 endp ; =============== S U B R O U T I N E ======================================= sub_7F810EFE proc near ; CODE XREF: sub_7F80F674+1Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] mov ecx, [eax] push dword ptr [ecx+4] call sub_7F8198FC mov ecx, [esp+arg_4] mov [ecx], ax retn 8 sub_7F810EFE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810F16 proc near ; CODE XREF: sub_7F810FCE+78p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 4 mov [ebp+var_4], 0 test byte ptr [ebp+arg_C], 3 push ebx push esi push edi mov edi, [ebp+arg_0] jz short loc_7F810F45 mov eax, [edi] mov ax, [eax+14h] and al, 81h cmp al, 1 jz short loc_7F810F45 mov ebx, 203h mov esi, [ebp+arg_14] jmp short loc_7F810FAF ; --------------------------------------------------------------------------- loc_7F810F45: ; CODE XREF: sub_7F810F16+17j ; sub_7F810F16+23j push 10h push 0Ah call sub_7F82F18D mov esi, [ebp+arg_14] test eax, eax mov [esi], eax jnz short loc_7F810F5E mov ebx, 400h jmp short loc_7F810FAF ; --------------------------------------------------------------------------- loc_7F810F5E: ; CODE XREF: sub_7F810F16+3Fj test byte ptr [ebp+arg_C], 2 jz short loc_7F810F7E or byte ptr [ebp+arg_C], 1 lea eax, [ebp+var_4] push eax mov eax, [edi] push [ebp+arg_10] push [ebp+arg_8] push dword ptr [eax+4] call sub_7F819BC5 jmp short loc_7F810F95 ; --------------------------------------------------------------------------- loc_7F810F7E: ; CODE XREF: sub_7F810F16+4Cj lea eax, [ebp+var_4] mov edx, [edi] push eax push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_4] push dword ptr [edx+4] call sub_7F819D64 loc_7F810F95: ; CODE XREF: sub_7F810F16+66j mov ebx, eax test ebx, ebx jnz short loc_7F810FAF mov eax, [esi] mov ecx, [eax] mov ax, word ptr [ebp+arg_C] mov [ecx], edi mov edx, [ebp+var_4] mov [ecx+4], edx mov [ecx+8], ax loc_7F810FAF: ; CODE XREF: sub_7F810F16+2Dj ; sub_7F810F16+46j ... xor edi, edi test ebx, ebx jz short loc_7F810FC3 mov eax, [esi] test eax, eax jz short loc_7F810FC3 push eax call sub_7F82F1E1 mov [esi], edi loc_7F810FC3: ; CODE XREF: sub_7F810F16+9Dj ; sub_7F810F16+A3j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F810F16 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F810FCE proc near ; CODE XREF: sub_7F80DF67+25p var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 cmp [ebp+arg_4], 68007h push ebx push esi push edi mov esi, [ebp+arg_0] mov edi, [ebp+arg_10] mov dword ptr [edi], 0 jnz short loc_7F810FFE mov eax, [esi] test byte ptr [eax+15h], 10h jnz short loc_7F810FFE mov eax, 210h jmp loc_7F81108C ; --------------------------------------------------------------------------- loc_7F810FFE: ; CODE XREF: sub_7F810FCE+1Cj ; sub_7F810FCE+24j mov bx, [ebp+arg_8] test bl, 1 jz short loc_7F811016 mov eax, [esi] test byte ptr [eax+14h], 80h jz short loc_7F811016 mov eax, 203h jmp short loc_7F81108C ; --------------------------------------------------------------------------- loc_7F811016: ; CODE XREF: sub_7F810FCE+37j ; sub_7F810FCE+3Fj test bl, 2 jnz short loc_7F81103A push 0 mov ecx, [esi] push [ebp+arg_4] push dword ptr [ecx+4] call sub_7F8194ED mov [ebp+var_2], ax test ax, ax jge short loc_7F81103A mov eax, 1004h jmp short loc_7F81108C ; --------------------------------------------------------------------------- loc_7F81103A: ; CODE XREF: sub_7F810FCE+4Bj ; sub_7F810FCE+63j push edi push [ebp+arg_C] push ebx push [ebp+arg_4] push dword ptr [ebp+var_2] push esi call sub_7F810F16 test eax, eax jnz short loc_7F81108C test bl, 3 jz short loc_7F81108C mov ecx, [esi] cmp dword ptr [ecx+18h], 0 jz short loc_7F811088 movzx edx, word ptr [ebp+arg_4] test edx, edx jz short loc_7F811084 cmp edx, 8000h jz short loc_7F811084 cmp edx, 8004h jl short loc_7F811088 cmp edx, 8008h jle short loc_7F811084 cmp edx, 800Dh jnz short loc_7F811088 loc_7F811084: ; CODE XREF: sub_7F810FCE+94j ; sub_7F810FCE+9Cj ... or byte ptr [ecx+15h], 2 loc_7F811088: ; CODE XREF: sub_7F810FCE+8Cj ; sub_7F810FCE+A4j ... or byte ptr [ecx+15h], 8 loc_7F81108C: ; CODE XREF: sub_7F810FCE+2Bj ; sub_7F810FCE+46j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F810FCE endp ; =============== S U B R O U T I N E ======================================= sub_7F811095 proc near ; CODE XREF: sub_7F80DF67+ACp ; sub_7F80E024+12p var_2 = byte ptr -2 arg_0 = dword ptr 4 sub esp, 4 lea ecx, [esp+4+var_2] push ebx push esi push edi mov esi, [esp+10h+arg_0] push ecx mov eax, [esi] mov ebx, [eax] lea eax, [ebx+4] push eax call sub_7F81A0C1 mov edi, eax test edi, edi jnz short loc_7F8110D2 test byte ptr [ebx+8], 1 jz short loc_7F8110C5 mov eax, [ebx] mov eax, [eax] or byte ptr [eax+15h], 8 loc_7F8110C5: ; CODE XREF: sub_7F811095+26j push dword ptr [esi] call sub_7F82F1E1 mov dword ptr [esi], 0 loc_7F8110D2: ; CODE XREF: sub_7F811095+20j mov eax, edi pop edi pop esi pop ebx add esp, 4 retn 4 sub_7F811095 endp ; =============== S U B R O U T I N E ======================================= sub_7F8110DD proc near ; CODE XREF: sub_7F80E173+74p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push [esp+arg_8] mov edx, [esp+4+arg_0] push [esp+4+arg_4] mov eax, [edx] push dword ptr [eax+4] call sub_7F819EC5 retn 0Ch sub_7F8110DD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8110F6 proc near ; CODE XREF: sub_7F81039F+10Ep ; sub_7F810567+1CCp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push ebx push esi mov bx, word ptr [ebp+arg_4] push edi and bx, 3 mov esi, [ebp+arg_0] mov edi, [esi] jz short loc_7F81113F push 0 push 0 call sub_7F816903 mov [esi+30h], eax test eax, eax jnz short loc_7F811128 mov eax, 400h jmp loc_7F8111B2 ; --------------------------------------------------------------------------- loc_7F811128: ; CODE XREF: sub_7F8110F6+26j push 0 push 0 call sub_7F816903 mov [esi+34h], eax test eax, eax jnz short loc_7F81113F mov eax, 400h jmp short loc_7F8111B2 ; --------------------------------------------------------------------------- loc_7F81113F: ; CODE XREF: sub_7F8110F6+16j ; sub_7F8110F6+40j mov eax, [esi+1Ch] and al, 89h or al, 89h mov [ebp+var_4], eax test eax, 0FFFFFF00h mov eax, 1001h jz short loc_7F811166 lea eax, [esi+2Ch] lea ecx, [ebp+var_4] push eax push [ebp+arg_4] push ecx push edi call sub_7F817E9D loc_7F811166: ; CODE XREF: sub_7F8110F6+5Dj cmp eax, 1001h jnz short loc_7F81119F test bx, bx jz short loc_7F811184 lea eax, [esi+2Ch] lea ecx, [ebp+var_4] push eax push 2 push ecx push edi call sub_7F817E9D jmp short loc_7F81119F ; --------------------------------------------------------------------------- loc_7F811184: ; CODE XREF: sub_7F8110F6+7Aj lea eax, [esi+2Ch] xor ebx, ebx push eax lea ecx, [ebp+var_4] mov [ebp+var_4], 444C4189h push ebx push ecx push edi call sub_7F817E9D mov [ebp+var_4], ebx loc_7F81119F: ; CODE XREF: sub_7F8110F6+75j ; sub_7F8110F6+8Cj test eax, eax jnz short loc_7F8111B2 test dword ptr [esi+1Ch], 0FFFFFF00h jnz short loc_7F8111B2 mov ecx, [ebp+var_4] mov [esi+1Ch], ecx loc_7F8111B2: ; CODE XREF: sub_7F8110F6+2Dj ; sub_7F8110F6+47j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8110F6 endp ; =============== S U B R O U T I N E ======================================= sub_7F8111BB proc near ; CODE XREF: sub_7F81039F+18Cp ; sub_7F810567+215p ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi+30h] test eax, eax jz short loc_7F8111CD push eax call sub_7F82F1E1 loc_7F8111CD: ; CODE XREF: sub_7F8111BB+Aj mov eax, [esi+34h] test eax, eax jz short loc_7F8111DA push eax call sub_7F82F1E1 loc_7F8111DA: ; CODE XREF: sub_7F8111BB+17j add esi, 2Ch cmp dword ptr [esi], 0 jz short loc_7F8111EA push 0 push esi call sub_7F81813C loc_7F8111EA: ; CODE XREF: sub_7F8111BB+25j pop esi retn 4 sub_7F8111BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8111EE proc near ; CODE XREF: sub_7F80D6D8+24p ; sub_7F80DC30+2Ap var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 mov edx, [eax] xor eax, eax push eax push eax push [ebp+arg_4] push eax mov ecx, [edx+1Ch] push eax lea eax, [ebp+var_4] mov [ebp+var_4], ecx push eax push dword ptr [edx] call sub_7F811A4F mov esp, ebp pop ebp retn 8 sub_7F8111EE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81121A proc near ; CODE XREF: sub_7F80D5D7+6Dp ; sub_7F80DC30+100p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 0Ch mov [ebp+var_4], 87h push ebx push esi push edi mov ebx, [eax] mov edi, [ebx+2Ch] mov esi, [ebp+arg_C] test byte ptr [ebp+arg_8], 1 mov dword ptr [esi], 0 jz short loc_7F811256 mov ax, [ebx+14h] and al, 81h cmp al, 1 jz short loc_7F811256 mov edi, 203h jmp loc_7F811327 ; --------------------------------------------------------------------------- loc_7F811256: ; CODE XREF: sub_7F81121A+26j ; sub_7F81121A+30j test edi, edi jnz short loc_7F811264 mov edi, 1015h jmp loc_7F811327 ; --------------------------------------------------------------------------- loc_7F811264: ; CODE XREF: sub_7F81121A+3Ej push 0 push [ebp+arg_4] push edi call sub_7F8194ED test ax, ax jge short loc_7F81127E mov edi, 1001h jmp loc_7F811327 ; --------------------------------------------------------------------------- loc_7F81127E: ; CODE XREF: sub_7F81121A+58j lea ecx, [ebp+var_C] lea edx, [ebp+var_8] mov [ebp+var_C], 4 push ecx push edx push 0 push eax push edi call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F81132B cmp [ebp+var_8], 0 jz short loc_7F8112D1 test byte ptr [ebp+arg_8], 3 jz short loc_7F8112C5 push 0 lea eax, [ebp+var_4] push 0 push esi push 2 push eax push 0 push [ebp+var_8] push dword ptr [ebx] call sub_7F810567 jmp short loc_7F8112FB ; --------------------------------------------------------------------------- loc_7F8112C5: ; CODE XREF: sub_7F81121A+90j cmp [ebp+var_8], 0 jz short loc_7F8112D1 mov eax, [ebp+var_8] mov [ebp+var_4], eax loc_7F8112D1: ; CODE XREF: sub_7F81121A+8Aj ; sub_7F81121A+AFj xor ecx, ecx mov eax, 0 cmp [ebp+arg_8], 1 adc eax, 0FFFFFFFFh push ecx and ax, 2 push ecx push esi lea edx, [ebp+var_4] push 7E0h push 2 push eax push edx push ecx push dword ptr [ebx] call sub_7F81039F loc_7F8112FB: ; CODE XREF: sub_7F81121A+A9j mov edi, eax test edi, edi jnz short loc_7F81132B test byte ptr [ebp+arg_8], 3 jz short loc_7F811313 push 1 push [ebp+var_4] push dword ptr [ebx] call sub_7F82BFE4 loc_7F811313: ; CODE XREF: sub_7F81121A+EBj mov eax, [esi] mov edx, [ebp+arg_0] mov ecx, [eax] mov eax, [ebp+arg_4] mov [ecx+24h], edx mov [ecx+2Ch], eax mov byte ptr [ecx+20h], 1 loc_7F811327: ; CODE XREF: sub_7F81121A+37j ; sub_7F81121A+45j ... test edi, edi jz short loc_7F811338 loc_7F81132B: ; CODE XREF: sub_7F81121A+80j ; sub_7F81121A+E5j cmp dword ptr [esi], 0 jz short loc_7F811338 push 0 push esi call sub_7F810922 loc_7F811338: ; CODE XREF: sub_7F81121A+10Fj ; sub_7F81121A+114j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81121A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811343 proc near ; DATA XREF: sub_7F810922:loc_7F81093Fo var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 18h push ebx mov ecx, [ebp+arg_0] push esi push edi xor edi, edi mov eax, [ecx] mov [ebp+var_8], edi mov ebx, [eax] cmp [ebp+arg_4], edi mov ecx, [ebx+24h] mov eax, [ebx+8] mov esi, [ecx] mov [ebp+var_10], eax mov ecx, [esi+2Ch] mov [ebp+var_C], ecx jz loc_7F8113FE push edi push dword ptr [ebx+2Ch] push ecx call sub_7F8194ED mov [ebp+var_2], ax lea ecx, [ebp+var_18] push ecx lea edx, [ebp+var_14] mov [ebp+var_18], 4 push edx push edi push dword ptr [ebp+var_2] push [ebp+var_C] call sub_7F818D47 mov [ebp+var_8], eax cmp eax, edi jnz short loc_7F81141C add ebx, 4 push dword ptr [ebx] call sub_7F8178C4 mov [ebp+var_8], eax cmp eax, edi jnz short loc_7F81141C push 4 lea eax, [ebp+var_10] push eax lea ecx, [ebp+var_2] push edi push ecx push [ebp+var_C] call sub_7F818DC7 mov [ebp+var_8], eax cmp eax, edi jnz short loc_7F81141C push 1 push ebx call sub_7F81813C or byte ptr [esi+15h], 4 cmp [ebp+var_14], edi jz short loc_7F8113EC push edi lea ecx, [esi+30h] push edi push [ebp+var_14] push ecx call sub_7F81698C loc_7F8113EC: ; CODE XREF: sub_7F811343+99j push 0 add esi, 34h push 0 push [ebp+var_10] push esi call sub_7F81698C jmp short loc_7F811409 ; --------------------------------------------------------------------------- loc_7F8113FE: ; CODE XREF: sub_7F811343+29j push 0 add ebx, 4 push ebx call sub_7F81813C loc_7F811409: ; CODE XREF: sub_7F811343+B9j mov ecx, [ebp+arg_0] push dword ptr [ecx] call sub_7F82F1E1 mov ecx, [ebp+arg_0] mov dword ptr [ecx], 0 loc_7F81141C: ; CODE XREF: sub_7F811343+5Dj ; sub_7F811343+6Ej ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F811343 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811428 proc near ; DATA XREF: sub_7F81039F+11Bo ; sub_7F810567+16Fo var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 mov ecx, [eax] push esi mov esi, [ebp+arg_8] mov edx, [ecx] cmp [esi+4], edx jnz short loc_7F81145E mov [ebp+var_4], eax mov eax, [ecx+24h] mov edx, [ecx+28h] test edx, edx jz short loc_7F811453 push esi push [ebp+arg_4] push eax call edx loc_7F811453: ; CODE XREF: sub_7F811428+22j push 0 lea eax, [ebp+var_4] push eax call sub_7F810922 loc_7F81145E: ; CODE XREF: sub_7F811428+15j xor eax, eax pop esi mov esp, ebp pop ebp retn 0Ch sub_7F811428 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811467 proc near ; CODE XREF: sub_7F810567+1AFp ; sub_7F81CCA0+C0p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push edi lea eax, [ebp+var_8] push 0 mov edi, [ebp+arg_0] push 0 push eax push 0 push [ebp+arg_4] push edi call sub_7F82D114 test eax, eax jnz short loc_7F8114F8 xor eax, eax cmp [ebp+var_8], eax jnz short loc_7F81149F mov edx, [ebp+arg_C] cmp edx, eax jz short loc_7F811498 mov [edx], eax loc_7F811498: ; CODE XREF: sub_7F811467+2Dj mov eax, 1001h jmp short loc_7F8114F8 ; --------------------------------------------------------------------------- loc_7F81149F: ; CODE XREF: sub_7F811467+26j mov eax, [ebp+var_8] push 0 and al, 89h or al, 89h push eax mov [ebp+var_8], eax push edi call sub_7F82BFE4 test eax, eax jnz short loc_7F8114F8 lea eax, [ebp+var_2] lea ecx, [ebp+var_C] push eax lea edx, [ebp+var_8] mov [ebp+var_2], 1 push ecx push edx push edi call sub_7F82BE56 test eax, eax jnz short loc_7F8114F8 push 0 lea eax, [ebp+var_C] push 1 lea ecx, [ebp+arg_8] push eax push ecx push edi call sub_7F82D2BE test eax, eax jnz short loc_7F8114F8 test eax, eax jnz short loc_7F8114F8 mov edx, [ebp+arg_C] test edx, edx jz short loc_7F8114F8 mov ecx, [ebp+var_C] mov [edx], ecx loc_7F8114F8: ; CODE XREF: sub_7F811467+1Fj ; sub_7F811467+36j ... pop edi mov esp, ebp pop ebp retn 10h sub_7F811467 endp ; =============== S U B R O U T I N E ======================================= sub_7F8114FF proc near ; CODE XREF: sub_7F8216EE+5Dp push esi push 30h push 0C8h call sub_7F82F18D xor ecx, ecx test eax, eax jz short loc_7F81154E mov edx, [eax] mov word ptr [edx], 0FFFFh add edx, 8 mov [edx-6], cx mov word ptr [edx-4], 8 mov word ptr [edx-2], 8 loc_7F81152C: ; CODE XREF: sub_7F8114FF+47j lea esi, [ecx-1] inc cx mov [edx+4], si mov [edx+6], cx mov dword ptr [edx], 0FFFFFFFFh add edx, 18h cmp cx, 8 jl short loc_7F81152C mov word ptr [edx-12h], 0FFFFh loc_7F81154E: ; CODE XREF: sub_7F8114FF+11j pop esi retn sub_7F8114FF endp ; =============== S U B R O U T I N E ======================================= sub_7F811550 proc near ; CODE XREF: sub_7F820EE1+12p arg_0 = dword ptr 4 push [esp+arg_0] call sub_7F82F1E1 retn 4 sub_7F811550 endp ; =============== S U B R O U T I N E ======================================= sub_7F81155C proc near ; CODE XREF: sub_7F817E9D+67p ; sub_7F817E9D+28Fp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch mov eax, [esp+arg_0] push esi push 0 mov ecx, [eax] mov edx, [ecx] push [esp+8+arg_4] mov eax, [edx+258h] mov esi, [eax] push esi call sub_7F81165C test ax, ax jl short loc_7F811591 movsx eax, ax movzx ecx, [esp+4+arg_8] imul eax, 6 add eax, ecx mov eax, [esi+eax*4+10h] jmp short loc_7F811593 ; --------------------------------------------------------------------------- loc_7F811591: ; CODE XREF: sub_7F81155C+20j xor eax, eax loc_7F811593: ; CODE XREF: sub_7F81155C+33j pop esi retn 0Ch sub_7F81155C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811597 proc near ; CODE XREF: sub_7F817E9D+132p ; sub_7F817E9D+1AEp ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor esi, esi mov edi, [ebp+arg_0] mov eax, [edi] mov ecx, [eax] lea eax, [ebp+var_4] push eax mov edx, [ecx+258h] push [ebp+arg_4] mov ebx, [edx] mov [ebp+var_8], edx push ebx call sub_7F81165C mov word ptr [ebp+var_4+2], ax cmp [ebp+arg_C], esi jz short loc_7F811607 cmp ax, si jge short loc_7F8115ED lea eax, [ebp+var_4+2] push eax push [ebp+var_4] push [ebp+arg_4] push edi call sub_7F8116DD mov esi, eax mov eax, [edi] mov ecx, [eax] mov edx, [ecx+258h] mov ebx, [edx] loc_7F8115ED: ; CODE XREF: sub_7F811597+36j test esi, esi jnz short loc_7F811651 movsx ecx, word ptr [ebp+var_4+2] movzx eax, word ptr [ebp+arg_8] imul ecx, 6 add ecx, eax mov edx, [ebp+arg_C] mov [ebx+ecx*4+10h], edx jmp short loc_7F811651 ; --------------------------------------------------------------------------- loc_7F811607: ; CODE XREF: sub_7F811597+31j xor ecx, ecx cmp word ptr [ebp+var_4+2], cx jl short loc_7F81164C movsx eax, word ptr [ebp+var_4+2] imul eax, 18h lea edx, [eax+ebx+8] mov eax, 3 movzx ebx, word ptr [ebp+arg_8] mov [edx+ebx*4+8], ecx add edx, 14h loc_7F81162A: ; CODE XREF: sub_7F811597+9Cj cmp dword ptr [edx], 0 jnz short loc_7F811635 sub edx, 4 dec eax jns short loc_7F81162A loc_7F811635: ; CODE XREF: sub_7F811597+96j test eax, eax jge short loc_7F811651 push [ebp+arg_8] push [ebp+var_4] push [ebp+var_4+2] push [ebp+var_8] call sub_7F81181C jmp short loc_7F811651 ; --------------------------------------------------------------------------- loc_7F81164C: ; CODE XREF: sub_7F811597+76j mov esi, 1001h loc_7F811651: ; CODE XREF: sub_7F811597+58j ; sub_7F811597+6Ej ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F811597 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81165C proc near ; CODE XREF: sub_7F81155C+18p ; sub_7F811597+25p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push esi push edi mov si, 0FFFFh mov edi, [ebp+arg_0] mov ax, [edi] mov edx, [ebp+arg_8] test edx, edx jnz short loc_7F811697 mov cx, word_7F835888 cmp [edi+6], cx jle short loc_7F811697 movsx ebx, cx imul ebx, 18h mov ecx, [ebp+arg_4] cmp [ebx+edi+8], ecx jnz short loc_7F811697 mov ax, word_7F835888 jmp short loc_7F8116D6 ; --------------------------------------------------------------------------- loc_7F811697: ; CODE XREF: sub_7F81165C+15j ; sub_7F81165C+22j ... test ax, ax jl short loc_7F8116C4 loc_7F81169C: ; CODE XREF: sub_7F81165C+66j movsx ecx, ax imul ecx, 18h lea ecx, [ecx+edi+8] mov ebx, [ecx] cmp [ebp+arg_4], ebx jbe short loc_7F8116B3 mov cx, [ecx+6] jmp short loc_7F8116B9 ; --------------------------------------------------------------------------- loc_7F8116B3: ; CODE XREF: sub_7F81165C+4Fj jnb short loc_7F8116C4 mov cx, [ecx+4] loc_7F8116B9: ; CODE XREF: sub_7F81165C+55j mov si, ax mov ax, cx test cx, cx jge short loc_7F81169C loc_7F8116C4: ; CODE XREF: sub_7F81165C+3Ej ; sub_7F81165C:loc_7F8116B3j test edx, edx jz short loc_7F8116CB mov [edx], si loc_7F8116CB: ; CODE XREF: sub_7F81165C+6Aj test ax, ax jl short loc_7F8116D6 mov word_7F835888, ax loc_7F8116D6: ; CODE XREF: sub_7F81165C+39j ; sub_7F81165C+72j pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F81165C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8116DD proc near ; CODE XREF: sub_7F811597+43p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_C] mov word ptr [eax], 0FFFFh mov ebp, esp sub esp, 8 mov ecx, [ebp+arg_0] mov [ebp+var_8], 0 push ebx mov edx, [ecx] push esi push edi mov edi, [edx] mov eax, [edi+258h] mov [ebp+var_4], eax mov ecx, [eax] cmp word ptr [ecx+2], 0 jge loc_7F811798 mov si, [ecx+6] push 30h lea eax, [esi+8] movsx ebx, ax imul ebx, 18h lea eax, [ebx+8] push eax push [ebp+var_4] call sub_7F82F24A test eax, eax jnz short loc_7F811742 mov [ebp+var_8], 400h mov dx, word ptr [ebp+var_4+2] jmp loc_7F8117FD ; --------------------------------------------------------------------------- loc_7F811742: ; CODE XREF: sub_7F8116DD+53j cmp eax, [ebp+var_4] jz short loc_7F811750 mov [edi+258h], eax mov [ebp+var_4], eax loc_7F811750: ; CODE XREF: sub_7F8116DD+68j mov dx, 7 mov eax, [ebp+var_4] mov ecx, [eax] lea edi, [ecx+ebx+8] loc_7F81175D: ; CODE XREF: sub_7F8116DD+9Bj sub edi, 18h lea eax, [esi+edx-1] mov [edi+4], ax lea ebx, [esi+edx+1] dec dx mov [edi+6], bx mov dword ptr [edi], 0FFFFFFFFh jns short loc_7F81175D mov word ptr [edi+0AEh], 0FFFFh mov word ptr [edi+4], 0FFFFh mov [ecx+2], si add word ptr [ecx+6], 8 mov word ptr [ecx+4], 8 loc_7F811798: ; CODE XREF: sub_7F8116DD+30j mov dx, [ecx+2] movsx eax, dx imul eax, 18h lea edi, [eax+ecx] mov ax, [edi+0Eh] mov [ecx+2], ax test ax, ax jl short loc_7F8117BF movsx eax, ax imul eax, 18h mov word ptr [eax+ecx+0Ch], 0FFFFh loc_7F8117BF: ; CODE XREF: sub_7F8116DD+D3j mov ax, [ebp+arg_8] add edi, 8 dec word ptr [ecx+4] mov esi, [ebp+arg_4] mov word ptr [edi+4], 0FFFFh mov word ptr [edi+6], 0FFFFh test ax, ax mov [edi], esi jge short loc_7F8117E5 mov [ecx], dx jmp short loc_7F8117FD ; --------------------------------------------------------------------------- loc_7F8117E5: ; CODE XREF: sub_7F8116DD+101j movsx eax, ax imul eax, 18h lea eax, [eax+ecx+8] cmp [eax], esi jnb short loc_7F8117F9 mov [eax+6], dx jmp short loc_7F8117FD ; --------------------------------------------------------------------------- loc_7F8117F9: ; CODE XREF: sub_7F8116DD+114j mov [eax+4], dx loc_7F8117FD: ; CODE XREF: sub_7F8116DD+60j ; sub_7F8116DD+106j ... cmp [ebp+var_8], 0 mov eax, [ebp+arg_C] jz short loc_7F81180D mov word ptr [eax], 0FFFFh jmp short loc_7F811810 ; --------------------------------------------------------------------------- loc_7F81180D: ; CODE XREF: sub_7F8116DD+127j mov [eax], dx loc_7F811810: ; CODE XREF: sub_7F8116DD+12Ej mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F8116DD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81181C proc near ; CODE XREF: sub_7F811597+AEp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 mov ecx, [eax] push ebx mov [ebp+var_4], 1 movsx eax, [ebp+arg_4] imul eax, 18h push esi push edi lea edx, [eax+ecx+8] cmp word ptr [edx+4], 0 jge short loc_7F81184C lea eax, [edx+6] mov esi, [ebp+var_4] jmp short loc_7F81188A ; --------------------------------------------------------------------------- loc_7F81184C: ; CODE XREF: sub_7F81181C+26j mov si, [edx+6] test si, si jge short loc_7F81185D lea eax, [edx+4] mov esi, [ebp+var_4] jmp short loc_7F81188A ; --------------------------------------------------------------------------- loc_7F81185D: ; CODE XREF: sub_7F81181C+37j movsx esi, si imul esi, 18h xor edi, edi lea eax, [edx+6] cmp [esi+ecx+0Ch], di mov [ebp+var_4], edi lea esi, [esi+ecx+8] jl short loc_7F81188A loc_7F811876: ; CODE XREF: sub_7F81181C+6Cj lea eax, [esi+4] movsx esi, word ptr [eax] imul esi, 18h lea esi, [esi+ecx+8] cmp word ptr [esi+4], 0 jge short loc_7F811876 loc_7F81188A: ; CODE XREF: sub_7F81181C+2Ej ; sub_7F81181C+3Fj ... cmp [ebp+arg_8], 0 jge short loc_7F811895 mov ebx, ecx jmp short loc_7F8118B4 ; --------------------------------------------------------------------------- loc_7F811895: ; CODE XREF: sub_7F81181C+73j movsx edi, [ebp+arg_8] imul edi, 18h lea ebx, [edi+ecx+0Eh] mov di, [ebp+arg_4] cmp [ebx], di jz short loc_7F8118B4 movsx edi, [ebp+arg_8] imul edi, 18h lea ebx, [edi+ecx+0Ch] loc_7F8118B4: ; CODE XREF: sub_7F81181C+77j ; sub_7F81181C+8Bj mov di, [eax] cmp [ebp+var_4], 0 mov [ebx], di jnz short loc_7F8118D7 mov di, [esi+6] mov [eax], di mov ax, [edx+4] mov [esi+4], ax mov bx, [edx+6] mov [esi+6], bx loc_7F8118D7: ; CODE XREF: sub_7F81181C+A2j lea esi, [ecx+2] mov ax, [esi] test ax, ax jl short loc_7F8118F1 movsx eax, ax imul eax, 18h mov di, [ebp+arg_4] mov [eax+ecx+0Ch], di loc_7F8118F1: ; CODE XREF: sub_7F81181C+C4j mov eax, 0FFFFFFFFh mov [edx+4], ax mov di, [esi] mov [edx+6], di pop edi mov [edx], eax mov dx, [ebp+arg_4] mov [esi], dx pop esi inc word ptr [ecx+4] pop ebx mov esp, ebp pop ebp retn 10h sub_7F81181C endp ; =============== S U B R O U T I N E ======================================= sub_7F811917 proc near ; CODE XREF: sub_7F825FA8+70p arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = dword ptr 0Ch push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esi] mov ecx, [eax] mov edi, [ecx+258h] mov eax, [edi] mov bx, [eax+6] movsx ecx, bx imul ecx, 18h lea ecx, [ecx+eax+8] mov ax, bx dec bx test ax, ax jle short loc_7F811976 loc_7F811942: ; CODE XREF: sub_7F811917+5Dj sub ecx, 18h mov edx, [ecx] cmp edx, 0FFFFFFFFh jz short loc_7F81196C movzx eax, [esp+0Ch+arg_4] mov eax, [ecx+eax*4+8] test eax, eax jz short loc_7F81196C push eax push edx push esi call [esp+18h+arg_8] movsx eax, bx mov ecx, [edi] imul eax, 18h lea ecx, [eax+ecx+8] loc_7F81196C: ; CODE XREF: sub_7F811917+33j ; sub_7F811917+40j mov ax, bx dec bx test ax, ax jg short loc_7F811942 loc_7F811976: ; CODE XREF: sub_7F811917+29j pop edi pop esi pop ebx retn 0Ch sub_7F811917 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81197C proc near ; CODE XREF: sub_7F802C9E+29p ; sub_7F802C9E+B7p ... var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 4 push ebx mov ecx, [ebp+arg_C] mov bx, [ebp+arg_8] push esi mov si, 1001h push edi mov di, si mov [ecx], eax and bx, 0Fh test bl, 3 jz short loc_7F8119A7 mov si, 3001h mov di, si loc_7F8119A7: ; CODE XREF: sub_7F81197C+22j test bl, 2 jnz short loc_7F8119E8 push 0 lea eax, [ebp+var_2] push eax mov ecx, [ebp+arg_4] push 0 push 0 push dword ptr [ecx] push [ebp+arg_0] call sub_7F82D114 test eax, eax jnz short loc_7F811A46 mov cx, [ebp+var_2] and cx, di and di, si cmp cx, di jz short loc_7F8119DD mov eax, 1015h jmp short loc_7F811A46 ; --------------------------------------------------------------------------- loc_7F8119DD: ; CODE XREF: sub_7F81197C+58j test byte ptr [ebp+var_2], 4 jz short loc_7F811A2C or bh, 1 jmp short loc_7F811A2C ; --------------------------------------------------------------------------- loc_7F8119E8: ; CODE XREF: sub_7F81197C+2Ej mov ecx, [ebp+arg_4] mov cl, [ecx] test cl, cl jge short loc_7F811A28 cmp cl, 91h jb short loc_7F8119FB xor cx, cx jmp short loc_7F811A06 ; --------------------------------------------------------------------------- loc_7F8119FB: ; CODE XREF: sub_7F81197C+78j movzx ecx, cl mov cx, word_7F8358D0[ecx*2] loc_7F811A06: ; CODE XREF: sub_7F81197C+7Dj mov dx, di and dx, cx and di, si cmp dx, di jz short loc_7F811A1B mov eax, 1015h jmp short loc_7F811A1E ; --------------------------------------------------------------------------- loc_7F811A1B: ; CODE XREF: sub_7F81197C+96j mov si, cx loc_7F811A1E: ; CODE XREF: sub_7F81197C+9Dj test cl, 4 jz short loc_7F811A2C or bh, 1 jmp short loc_7F811A2C ; --------------------------------------------------------------------------- loc_7F811A28: ; CODE XREF: sub_7F81197C+73j mov si, 0F001h loc_7F811A2C: ; CODE XREF: sub_7F81197C+65j ; sub_7F81197C+6Aj ... test eax, eax jnz short loc_7F811A46 push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_C] push esi push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F811A4F loc_7F811A46: ; CODE XREF: sub_7F81197C+49j ; sub_7F81197C+5Fj ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81197C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811A4F proc near ; CODE XREF: sub_7F8111EE+21p ; sub_7F81197C+C5p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp push ebx push esi push edi push 10h push 26h call sub_7F82F18D mov edi, eax test edi, edi jz loc_7F811B2C mov ebx, [edi] lea eax, [ebx+4] push eax push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F811B35 test byte ptr [ebp+arg_8], 2 jz short loc_7F811AB0 or byte ptr [ebp+arg_8], 1 test byte ptr [ebp+arg_8], 2 jz short loc_7F811AB0 mov eax, [ebp+arg_4] push [ebp+arg_C] push dword ptr [eax] push [ebp+arg_0] call sub_7F82CF24 mov esi, eax test esi, esi jnz loc_7F811B35 loc_7F811AB0: ; CODE XREF: sub_7F811A4F+3Bj ; sub_7F811A4F+45j push dword ptr [ebx+4] call sub_7F8198FC mov [ebx+20h], ax mov ecx, [ebp+arg_4] mov eax, [ebp+arg_0] push 0 mov [ebx], eax mov edx, [ecx] mov [ebx+8], edx push dword ptr [ebx+4] call sub_7F819508 mov ecx, [ebp+arg_14] mov edx, [ebp+arg_18] push edi mov [ebx+22h], eax mov ax, word ptr [ebp+arg_8] push offset sub_7F811EEF and ax, 0F7FFh push 40000h push 80h mov [ebx+16h], ecx mov [ebx+1Ah], edx push [ebp+arg_0] mov [ebx+14h], ax call sub_7F829F2E mov [ebx+0Ch], eax test eax, eax jz short loc_7F811B2C push edi mov eax, [ebp+arg_4] push offset sub_7F811EEF push 4002C0E0h push dword ptr [eax] push [ebp+arg_0] call sub_7F829F2E mov [ebx+10h], eax test eax, eax jnz short loc_7F811B31 loc_7F811B2C: ; CODE XREF: sub_7F811A4F+13j ; sub_7F811A4F+BCj mov esi, 400h loc_7F811B31: ; CODE XREF: sub_7F811A4F+DBj test esi, esi jz short loc_7F811B66 loc_7F811B35: ; CODE XREF: sub_7F811A4F+31j ; sub_7F811A4F+5Bj test edi, edi jz short loc_7F811B66 mov ebx, [edi] lea eax, [ebx+4] cmp dword ptr [eax], 0 jz short loc_7F811B4B push 0 push eax call sub_7F81813C loc_7F811B4B: ; CODE XREF: sub_7F811A4F+F2j mov eax, [ebx+0Ch] test eax, eax jz short loc_7F811B60 push eax push 80h push [ebp+arg_0] call sub_7F829FD2 loc_7F811B60: ; CODE XREF: sub_7F811A4F+101j push edi call sub_7F82F1E1 loc_7F811B66: ; CODE XREF: sub_7F811A4F+E4j ; sub_7F811A4F+E8j xor ecx, ecx mov eax, [ebp+arg_10] test esi, esi jz short loc_7F811B73 mov [eax], ecx jmp short loc_7F811B75 ; --------------------------------------------------------------------------- loc_7F811B73: ; CODE XREF: sub_7F811A4F+11Ej mov [eax], edi loc_7F811B75: ; CODE XREF: sub_7F811A4F+122j mov eax, esi pop edi pop esi pop ebx pop ebp retn 1Ch sub_7F811A4F endp ; =============== S U B R O U T I N E ======================================= sub_7F811B7E proc near ; CODE XREF: sub_7F802C9E+DEp ; sub_7F802C9E+109p ... var_10 = byte ptr -10h arg_0 = dword ptr 4 inc word_7F838070 sub esp, 10h push ebx push esi mov esi, [esp+18h+arg_0] push edi push ebp mov eax, [esi] mov ebx, [eax] xor eax, eax lea ebp, [ebx+14h] lea ecx, [ebx+4] mov ax, [ebp+0] and eax, 800h push eax push ecx call sub_7F81813C mov edi, eax test edi, edi jnz short loc_7F811C14 mov eax, [ebx+10h] test eax, eax jz short loc_7F811BC4 push eax push dword ptr [ebx+8] push dword ptr [ebx] call sub_7F829FD2 loc_7F811BC4: ; CODE XREF: sub_7F811B7E+39j push dword ptr [ebx+0Ch] push 80h push dword ptr [ebx] call sub_7F829FD2 test byte ptr [ebp+1], 8 jz short loc_7F811BE0 push dword ptr [ebx] call sub_7F82A1E7 loc_7F811BE0: ; CODE XREF: sub_7F811B7E+59j test edi, edi jnz short loc_7F811C14 mov edx, [ebx+8] mov ecx, [ebx] test byte ptr [ebp+1], 8 jz short loc_7F811C07 cmp word_7F838070, 1 jnz short loc_7F811C07 lea eax, [esp+20h+var_10] push eax push 40h push edx push ecx call sub_7F82A016 loc_7F811C07: ; CODE XREF: sub_7F811B7E+6Fj ; sub_7F811B7E+79j push dword ptr [esi] call sub_7F82F1E1 mov dword ptr [esi], 0 loc_7F811C14: ; CODE XREF: sub_7F811B7E+32j ; sub_7F811B7E+64j dec word_7F838070 mov eax, edi pop ebp pop edi pop esi pop ebx add esp, 10h retn 4 sub_7F811B7E endp ; =============== S U B R O U T I N E ======================================= sub_7F811C27 proc near ; CODE XREF: sub_7F80DC30+47p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov eax, 0 mov esi, [esp+4+arg_0] push edi cmp [esp+8+arg_8], 0 mov ecx, [esi] jnz short loc_7F811C3F movsx eax, word ptr [ecx+1Eh] loc_7F811C3F: ; CODE XREF: sub_7F811C27+12j mov edi, [esp+8+arg_4] push eax push edi push dword ptr [ecx+4] call sub_7F8194ED test ax, ax mov ecx, [esi] jl short loc_7F811C5E test ax, ax mov [ecx+22h], edi mov [ecx+1Eh], ax loc_7F811C5E: ; CODE XREF: sub_7F811C27+2Bj mov eax, 0 jge short loc_7F811C6A mov eax, 1004h loc_7F811C6A: ; CODE XREF: sub_7F811C27+3Cj pop edi pop esi retn 0Ch sub_7F811C27 endp ; =============== S U B R O U T I N E ======================================= sub_7F811C6F proc near ; CODE XREF: sub_7F802C9E+46p ; sub_7F802C9E+C8p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] mov edx, [eax] mov eax, [esp+arg_4] test eax, eax jz short loc_7F811C84 mov cx, [edx+1Eh] mov [eax], cx loc_7F811C84: ; CODE XREF: sub_7F811C6F+Cj mov eax, [esp+arg_8] test eax, eax jz short locret_7F811C93 mov cx, [edx+20h] mov [eax], cx locret_7F811C93: ; CODE XREF: sub_7F811C6F+1Bj retn 0Ch sub_7F811C6F endp ; =============== S U B R O U T I N E ======================================= sub_7F811C96 proc near ; CODE XREF: sub_7F802C9E+69p ; sub_7F802DB7+1F2p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi xor esi, esi mov edi, [esp+8+arg_0] mov ecx, [edi] mov ax, [ecx+1Eh] cmp [ecx+20h], ax jg short loc_7F811CB5 mov esi, 1005h mov ecx, [esp+8+arg_4] jmp short loc_7F811CC7 ; --------------------------------------------------------------------------- loc_7F811CB5: ; CODE XREF: sub_7F811C96+12j push eax push dword ptr [ecx+4] call sub_7F81990D add eax, 8 mov ecx, [esp+8+arg_4] mov [ecx], eax loc_7F811CC7: ; CODE XREF: sub_7F811C96+1Dj mov eax, [edi] cmp byte ptr [eax+8], 89h jnz short loc_7F811CD2 sub dword ptr [ecx], 4 loc_7F811CD2: ; CODE XREF: sub_7F811C96+37j mov eax, esi pop edi pop esi retn 8 sub_7F811C96 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811CD9 proc near ; CODE XREF: sub_7F802C9E+98p ; sub_7F802DB7+22Dp ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp xor edx, edx mov ebp, esp sub esp, 10h push ebx mov ecx, [ebp+arg_8] push esi mov [ebp+var_C], edx push edi mov eax, [ecx] cmp eax, 8 jb loc_7F811E90 cmp eax, 0FFFFh ja loc_7F811E90 sub eax, 8 mov [ecx], edx mov edx, [ebp+arg_0] mov [ebp+var_8], eax mov [ebp+var_10], eax mov esi, [edx] mov ax, [esi+1Eh] cmp [esi+20h], ax jg short loc_7F811D24 mov eax, 1005h jmp loc_7F811E9E ; --------------------------------------------------------------------------- loc_7F811D24: ; CODE XREF: sub_7F811CD9+3Fj mov eax, [esi+22h] mov edi, [ebp+arg_4] mov [edi], eax cmp byte ptr [esi+8], 89h jnz short loc_7F811D4B mov [ebp+var_C], 4 mov ax, [esi+1Eh] push eax push dword ptr [esi+4] call sub_7F81990D sub eax, 4 jmp short loc_7F811D58 ; --------------------------------------------------------------------------- loc_7F811D4B: ; CODE XREF: sub_7F811CD9+57j mov cx, [esi+1Eh] push ecx push dword ptr [esi+4] call sub_7F81990D loc_7F811D58: ; CODE XREF: sub_7F811CD9+70j lea ebx, [edi+8] mov [edi+4], eax lea eax, [ebp+var_8] push eax push ebx push [ebp+var_C] mov ax, [esi+1Eh] push eax push dword ptr [esi+4] call sub_7F818D47 mov [ebp+var_4], eax test eax, eax jz short loc_7F811D85 cmp eax, 1014h jnz loc_7F811E80 loc_7F811D85: ; CODE XREF: sub_7F811CD9+9Fj mov eax, [ebp+arg_0] mov esi, [eax] test byte ptr [esi+15h], 1 jz loc_7F811E6A cmp [ebp+var_8], 0Eh jb loc_7F811E6A push 0Eh push ebx push ebx call sub_7F82FF60 mov ax, [ebx] add esp, 0Ch cmp ax, 76Ch jl short loc_7F811DF5 cmp ax, 81Fh jge short loc_7F811DF5 mov ax, [edi+0Ah] test ax, ax jle short loc_7F811DF5 cmp ax, 0Ch jg short loc_7F811DF5 mov ax, [edi+0Ch] test ax, ax jle short loc_7F811DF5 cmp ax, 1Fh jg short loc_7F811DF5 mov ax, [edi+0Eh] test ax, ax jl short loc_7F811DF5 cmp ax, 18h jge short loc_7F811DF5 mov ax, [edi+10h] test ax, ax jl short loc_7F811DF5 cmp ax, 3Ch jl short loc_7F811E6A loc_7F811DF5: ; CODE XREF: sub_7F811CD9+D8j ; sub_7F811CD9+DEj ... xor edi, edi cmp dword_7F836778, edi jz short loc_7F811E6A cmp dword_7F836C60, edi jnz short loc_7F811E6A push 9015h push 9005h push dword ptr [esi+8] push dword ptr [esi] call sub_7F82CFC5 test eax, eax jnz short loc_7F811E30 push dword ptr [esi+8] push dword ptr [esi] call sub_7F81D598 mov [ebp+var_4], eax cmp eax, edi jnz short loc_7F811E80 loc_7F811E30: ; CODE XREF: sub_7F811CD9+144j mov eax, [ebp+arg_0] mov ecx, [ebp+var_10] mov [ebp+var_8], ecx mov esi, [eax] lea ecx, [ebp+var_8] push ecx push ebx push [ebp+var_C] mov cx, [esi+1Eh] push ecx push dword ptr [esi+4] call sub_7F818D47 mov [ebp+var_4], eax test eax, eax jz short loc_7F811E5E cmp eax, 1014h jnz short loc_7F811E80 loc_7F811E5E: ; CODE XREF: sub_7F811CD9+17Cj push 0Eh push ebx push ebx call sub_7F82FF60 add esp, 0Ch loc_7F811E6A: ; CODE XREF: sub_7F811CD9+B5j ; sub_7F811CD9+BFj ... mov ax, [esi+1Eh] inc ax mov [esi+1Eh], ax push eax push dword ptr [esi+4] call sub_7F819508 mov [esi+22h], eax loc_7F811E80: ; CODE XREF: sub_7F811CD9+A6j ; sub_7F811CD9+155j ... mov eax, [ebp+var_8] mov ecx, [ebp+arg_8] add eax, 8 mov [ecx], eax mov eax, [ebp+var_4] jmp short loc_7F811E9E ; --------------------------------------------------------------------------- loc_7F811E90: ; CODE XREF: sub_7F811CD9+16j ; sub_7F811CD9+21j mov ecx, [ebp+arg_8] mov eax, 400h mov dword ptr [ecx], 0 loc_7F811E9E: ; CODE XREF: sub_7F811CD9+46j ; sub_7F811CD9+1B5j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F811CD9 endp ; =============== S U B R O U T I N E ======================================= sub_7F811EA7 proc near ; CODE XREF: sub_7F80B766+6Bp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push ebx push esi push edi push ebp mov edi, [eax] mov eax, [esp+10h+arg_4] mov ebp, [esp+10h+arg_8] lea esi, [edi+1Eh] push eax mov ax, [esi] push ebp push eax push dword ptr [edi+4] call sub_7F819938 mov ebx, eax test ebx, ebx jnz short loc_7F811EE6 mov ax, [ebp+0] add ax, [esi] mov [esi], ax push eax push dword ptr [edi+4] call sub_7F819508 mov [edi+22h], eax loc_7F811EE6: ; CODE XREF: sub_7F811EA7+27j mov eax, ebx pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F811EA7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F811EEF proc near ; DATA XREF: sub_7F811A4F+92o ; sub_7F811A4F+C2o var_10 = dword ptr -10h var_C = word ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, [eax] mov [ebp+var_8], 0 mov edi, [esi+16h] mov eax, [esi+1Ah] mov [ebp+var_10], eax mov eax, [ebp+arg_4] test eax, eax jz loc_7F811F9C cmp eax, 40h jz loc_7F811FAB cmp eax, 4000h jz loc_7F81200E cmp eax, 8000h jz loc_7F81207F cmp eax, 20000h jz loc_7F8120EA cmp eax, 40000h jz loc_7F81210A cmp eax, 40000000h jz loc_7F81211F loc_7F811F59: ; CODE XREF: sub_7F811EEF+BAj ; sub_7F811EEF+E0j ... test edi, edi jz short loc_7F811F71 cmp [ebp+arg_4], 0 jz short loc_7F811F71 push [ebp+arg_8] push [ebp+arg_4] push [ebp+var_10] call edi mov [ebp+var_8], eax loc_7F811F71: ; CODE XREF: sub_7F811EEF+6Cj ; sub_7F811EEF+72j cmp [ebp+arg_4], 40000h jnz short loc_7F811F90 mov eax, [ebp+arg_0] mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax call sub_7F811B7E mov [ebp+var_8], 0 loc_7F811F90: ; CODE XREF: sub_7F811EEF+89j mov eax, [ebp+var_8] loc_7F811F93: ; CODE XREF: sub_7F811EEF+22Bj ; sub_7F811EEF+28Aj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F811F9C: ; CODE XREF: sub_7F811EEF+24j push dword ptr [esi+10h] call sub_7F8240DB xor edi, edi mov [esi+10h], edi jmp short loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F811FAB: ; CODE XREF: sub_7F811EEF+2Dj push dword ptr [esi+4] mov bx, [esi+1Eh] call sub_7F8198FC mov [esi+20h], ax push 0 push dword ptr [esi+22h] push dword ptr [esi+4] call sub_7F8194ED mov [esi+1Eh], ax test ax, ax jge short loc_7F811F59 mov [esi+1Eh], bx mov ax, [esi+20h] cmp bx, ax jl short loc_7F811FEE mov [esi+1Eh], ax mov dword ptr [esi+22h], 0FFFFFFFFh jmp loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F811FEE: ; CODE XREF: sub_7F811EEF+EDj test bx, bx jge short loc_7F811FF9 mov word ptr [esi+1Eh], 0 loc_7F811FF9: ; CODE XREF: sub_7F811EEF+102j mov ax, [esi+1Eh] push eax push dword ptr [esi+4] call sub_7F819508 mov [esi+22h], eax jmp loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F81200E: ; CODE XREF: sub_7F811EEF+38j mov edx, [ebp+arg_8] mov cx, [edx+4] mov edx, [edx+6] loc_7F812018: ; CODE XREF: sub_7F811EEF+164j movzx eax, word ptr [edx] cmp eax, 1 jz short loc_7F812027 cmp eax, 3 jz short loc_7F812035 jmp short loc_7F812045 ; --------------------------------------------------------------------------- loc_7F812027: ; CODE XREF: sub_7F811EEF+12Fj mov ax, [esi+1Eh] cmp [edx+2], ax jg short loc_7F812045 inc ax jmp short loc_7F812041 ; --------------------------------------------------------------------------- loc_7F812035: ; CODE XREF: sub_7F811EEF+134j mov ax, [esi+1Eh] cmp [edx+2], ax jge short loc_7F812045 dec ax loc_7F812041: ; CODE XREF: sub_7F811EEF+144j mov [esi+1Eh], ax loc_7F812045: ; CODE XREF: sub_7F811EEF+136j ; sub_7F811EEF+140j ... dec cx test cx, cx jle short loc_7F812055 mov eax, edx add edx, 8 test eax, eax jnz short loc_7F812018 loc_7F812055: ; CODE XREF: sub_7F811EEF+15Bj push dword ptr [esi+4] call sub_7F8198FC mov [esi+20h], ax mov ax, [esi+1Eh] push eax push dword ptr [esi+4] call sub_7F819508 cmp [esi+22h], eax jz loc_7F811F59 mov [esi+22h], eax jmp loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F81207F: ; CODE XREF: sub_7F811EEF+43j mov ecx, 1 mov edx, [ebp+arg_8] mov ax, [edx+6] add esi, 1Eh mov bx, [edx+4] mov [ebp+var_C], ax sub ax, bx add ax, cx mov word ptr [ebp+var_4+2], ax mov ax, [esi] cmp bx, ax jg short loc_7F8120C6 cmp [ebp+var_C], ax jl short loc_7F8120BF mov dx, [edx+8] xor ecx, ecx sub dx, bx add dx, ax mov [esi], dx jmp short loc_7F8120C6 ; --------------------------------------------------------------------------- loc_7F8120BF: ; CODE XREF: sub_7F811EEF+1BDj sub ax, word ptr [ebp+var_4+2] mov [esi], ax loc_7F8120C6: ; CODE XREF: sub_7F811EEF+1B7j ; sub_7F811EEF+1CEj test ecx, ecx jz loc_7F811F59 mov ax, [esi] mov edx, [ebp+arg_8] cmp [edx+8], ax jg loc_7F811F59 add ax, word ptr [ebp+var_4+2] mov [esi], ax jmp loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F8120EA: ; CODE XREF: sub_7F811EEF+4Ej mov eax, [esi+22h] cmp eax, 0FFFFFFFFh jz loc_7F811F59 push 0 push eax push dword ptr [esi+4] call sub_7F8194ED mov [esi+1Eh], ax jmp loc_7F811F59 ; --------------------------------------------------------------------------- loc_7F81210A: ; CODE XREF: sub_7F811EEF+59j mov eax, [esi] mov edx, [ebp+arg_8] cmp [edx+4], eax jz loc_7F811F59 xor eax, eax jmp loc_7F811F93 ; --------------------------------------------------------------------------- loc_7F81211F: ; CODE XREF: sub_7F811EEF+64j lea edi, [esi+1Eh] push dword ptr [esi+4] mov bx, [edi] call sub_7F8198FC mov [esi+20h], ax push 0 push dword ptr [esi+22h] push dword ptr [esi+4] call sub_7F8194ED mov [edi], ax test ax, ax jge short loc_7F812177 mov [edi], bx mov ax, [esi+20h] cmp bx, ax jl short loc_7F81215E mov [edi], ax mov dword ptr [esi+22h], 0FFFFFFFFh jmp short loc_7F812177 ; --------------------------------------------------------------------------- loc_7F81215E: ; CODE XREF: sub_7F811EEF+261j test bx, bx jge short loc_7F812168 mov word ptr [edi], 0 loc_7F812168: ; CODE XREF: sub_7F811EEF+272j mov ax, [edi] push eax push dword ptr [esi+4] call sub_7F819508 mov [esi+22h], eax loc_7F812177: ; CODE XREF: sub_7F811EEF+255j ; sub_7F811EEF+26Dj xor eax, eax jmp loc_7F811F93 sub_7F811EEF endp ; =============== S U B R O U T I N E ======================================= sub_7F81217E proc near ; CODE XREF: sub_7F8207A6+302p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_9 = byte ptr 0Dh push ebx push esi push edi xor ebx, ebx mov edi, [esp+0Ch+arg_0] push ebp mov esi, [edi] mov ebp, [esi] cmp [ebp+218h], ebx jnz short loc_7F8121AD call sub_7F823FB2 mov [ebp+218h], eax cmp eax, ebx jnz short loc_7F8121AD mov ebx, 400h jmp loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F8121AD: ; CODE XREF: sub_7F81217E+14j ; sub_7F81217E+23j push edi mov eax, [esi] push offset sub_7F812460 push 99800000h push dword ptr [eax+218h] call sub_7F824021 mov [esi+18h], eax test eax, eax jnz short loc_7F8121D6 mov ebx, 400h jmp loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F8121D6: ; CODE XREF: sub_7F81217E+4Cj cmp [esp+10h+arg_4], 0 jz short loc_7F8121ED push edi call sub_7F825DC6 mov ebx, eax test ebx, ebx jnz loc_7F8122D3 loc_7F8121ED: ; CODE XREF: sub_7F81217E+5Dj test [esp+10h+arg_9], 10h jz loc_7F8122CB cmp dword ptr [esi+24h], 0 jnz short loc_7F81222F cmp dword_7F83676C, 0 jz short loc_7F81222F push 2 mov eax, dword_7F836770 push eax push 0FFFFFFFDh push 0 push edi push offset sub_7F82A441 call sub_7F816044 mov [esi+24h], eax test eax, eax jnz short loc_7F81222F mov ebx, 400h jmp loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F81222F: ; CODE XREF: sub_7F81217E+7Ej ; sub_7F81217E+87j ... cmp dword ptr [esi+28h], 0 jnz short loc_7F812256 push 2 push 64h push 0FFFFFFFEh push 0 push edi push offset sub_7F82A802 call sub_7F816044 mov [esi+28h], eax test eax, eax jnz short loc_7F812256 mov ebx, 400h jmp short loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F812256: ; CODE XREF: sub_7F81217E+B5j ; sub_7F81217E+CFj cmp dword ptr [esi+20h], 0 jnz short loc_7F812281 push 2 mov eax, dword_7F838030 push eax push 0FFFFFFFBh push 0 push edi push offset sub_7F826027 call sub_7F816044 mov [esi+20h], eax test eax, eax jnz short loc_7F812281 mov ebx, 400h jmp short loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F812281: ; CODE XREF: sub_7F81217E+DCj ; sub_7F81217E+FAj lea ecx, [ebp+264h] mov ax, [ecx] or ah, 80h test ah, 10h mov [ecx], ax jnz short loc_7F8122BE cmp dword ptr [esi+1Ch], 0 jnz short loc_7F8122BE push 2 push 64h push 0FFFFFFFAh push 0 push edi push offset sub_7F81F20F call sub_7F816044 mov [esi+1Ch], eax cmp dword ptr [esi+1Ch], 0 jnz short loc_7F8122BE mov ebx, 400h jmp short loc_7F8122CB ; --------------------------------------------------------------------------- loc_7F8122BE: ; CODE XREF: sub_7F81217E+115j ; sub_7F81217E+11Bj ... push 0BF900000h push dword ptr [esi+18h] call sub_7F8241B0 loc_7F8122CB: ; CODE XREF: sub_7F81217E+2Aj ; sub_7F81217E+53j ... test ebx, ebx jz loc_7F812360 loc_7F8122D3: ; CODE XREF: sub_7F81217E+69j mov eax, [esi+1Ch] test eax, eax jz short loc_7F8122F2 push eax call sub_7F816255 mov dword ptr [esi+1Ch], 0 mov eax, [esi] and word ptr [eax+264h], 7FFFh loc_7F8122F2: ; CODE XREF: sub_7F81217E+15Aj mov eax, [esi+24h] test eax, eax jz short loc_7F812306 push eax call sub_7F816255 mov dword ptr [esi+24h], 0 loc_7F812306: ; CODE XREF: sub_7F81217E+179j mov eax, [esi+28h] test eax, eax jz short loc_7F81231A push eax call sub_7F816255 mov dword ptr [esi+28h], 0 loc_7F81231A: ; CODE XREF: sub_7F81217E+18Dj mov eax, [esi+20h] test eax, eax jz short loc_7F81232E push eax call sub_7F816255 mov dword ptr [esi+20h], 0 loc_7F81232E: ; CODE XREF: sub_7F81217E+1A1j push edi call sub_7F825FA8 mov eax, [esi+18h] test eax, eax jz short loc_7F812341 push eax call sub_7F8240DB loc_7F812341: ; CODE XREF: sub_7F81217E+1BBj xor edi, edi cmp [ebp+218h], edi jz short loc_7F812360 mov eax, [esi] push dword ptr [eax+218h] call sub_7F823FB7 mov ecx, [esi] mov [ecx+218h], edi loc_7F812360: ; CODE XREF: sub_7F81217E+14Fj ; sub_7F81217E+1CBj mov eax, ebx pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F81217E endp ; =============== S U B R O U T I N E ======================================= sub_7F812369 proc near ; CODE XREF: sub_7F820C0E+3Ep arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi xor ebx, ebx mov edi, [esi] mov eax, [edi+18h] test eax, eax jz short loc_7F812384 push eax call sub_7F8240DB mov [edi+18h], ebx loc_7F812384: ; CODE XREF: sub_7F812369+10j mov eax, [edi+1Ch] xor ebx, ebx test eax, eax jz short loc_7F812396 push eax call sub_7F816255 mov [edi+1Ch], ebx loc_7F812396: ; CODE XREF: sub_7F812369+22j mov eax, [edi+24h] xor ebx, ebx test eax, eax jz short loc_7F8123A8 push eax call sub_7F816255 mov [edi+24h], ebx loc_7F8123A8: ; CODE XREF: sub_7F812369+34j mov eax, [edi+28h] xor ebx, ebx test eax, eax jz short loc_7F8123BA push eax call sub_7F816255 mov [edi+28h], ebx loc_7F8123BA: ; CODE XREF: sub_7F812369+46j mov eax, [edi+20h] xor ebx, ebx test eax, eax jz short loc_7F8123F0 push eax call sub_7F816255 mov [edi+20h], ebx mov eax, [edi] and word ptr [eax+264h], 7FFFh cmp dword_7F838038, ebx jz short loc_7F8123F0 push ebx push offset dword_7F838038 call sub_7F81813C mov dword_7F838034, ebx loc_7F8123F0: ; CODE XREF: sub_7F812369+58j ; sub_7F812369+74j mov eax, [edi] cmp word ptr [eax+210h], 1 jg short loc_7F812402 push esi call sub_7F825FA8 loc_7F812402: ; CODE XREF: sub_7F812369+91j pop edi pop esi pop ebx retn 4 sub_7F812369 endp ; =============== S U B R O U T I N E ======================================= sub_7F812408 proc near ; CODE XREF: sub_7F82A1E7+Ap ; sub_7F82A588+15Ap arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi push edi mov ecx, [eax] mov edi, [ecx] test byte ptr [edi+265h], 10h jnz short loc_7F81245B call sub_7F8168ED mov ecx, [edi+270h] mov esi, [edi+200h] mov eax, ecx sub edx, edx imul eax, 64h div dword ptr [esi+4] cmp ax, [edi+274h] jg short loc_7F812447 cmp [edi+27Ch], ecx jnb short loc_7F81245B loc_7F812447: ; CODE XREF: sub_7F812408+35j push 0 push 0 push 100000h push dword ptr [edi+218h] call sub_7F824187 loc_7F81245B: ; CODE XREF: sub_7F812408+11j ; sub_7F812408+3Dj pop edi pop esi retn 4 sub_7F812408 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F812460(int, int, LPCSTR lpString2) sub_7F812460 proc near ; DATA XREF: sub_7F81217E+32o arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpString2 = dword ptr 10h push ebp mov eax, [esp+arg_4] mov ebp, esp cmp eax, 800000h push esi push edi ja short loc_7F812481 jz short loc_7F8124CA cmp eax, 100000h jz short loc_7F8124C0 loc_7F812479: ; CODE XREF: sub_7F812460+5Ej ; sub_7F812460+90j ... xor eax, eax loc_7F81247B: ; CODE XREF: sub_7F812460+68j ; sub_7F812460+83j ... pop edi pop esi pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F812481: ; CODE XREF: sub_7F812460+Ej cmp eax, 1000000h jz short loc_7F8124E5 cmp eax, 2000000h jz short loc_7F8124F2 cmp eax, 4000000h jz short loc_7F812506 cmp eax, 8000000h jz short loc_7F812513 cmp eax, 10000000h jz loc_7F812559 cmp eax, 20000000h jz loc_7F8125D8 cmp eax, 80000000h jz loc_7F812620 jmp short loc_7F812479 ; --------------------------------------------------------------------------- loc_7F8124C0: ; CODE XREF: sub_7F812460+17j push [ebp+arg_0] call sub_7F812632 jmp short loc_7F81247B ; --------------------------------------------------------------------------- loc_7F8124CA: ; CODE XREF: sub_7F812460+10j push [ebp+lpString2] ; lpString push [ebp+arg_0] ; int call sub_7F82A0AA cmp eax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 2 jmp short loc_7F81247B ; --------------------------------------------------------------------------- loc_7F8124E5: ; CODE XREF: sub_7F812460+26j push [ebp+lpString2] ; lpString2 push [ebp+arg_0] ; int call sub_7F82A12F jmp short loc_7F812479 ; --------------------------------------------------------------------------- loc_7F8124F2: ; CODE XREF: sub_7F812460+2Dj mov eax, [ebp+lpString2] movsx ecx, word ptr [eax] push ecx push [ebp+arg_0] call sub_7F8260F1 jmp loc_7F812479 ; --------------------------------------------------------------------------- loc_7F812506: ; CODE XREF: sub_7F812460+34j push [ebp+arg_0] call sub_7F82613E jmp loc_7F812479 ; --------------------------------------------------------------------------- loc_7F812513: ; CODE XREF: sub_7F812460+3Bj mov eax, [ebp+arg_0] xor edi, edi push edi mov esi, [eax] push dword ptr [esi] push esi call sub_7F821055 push dword ptr [esi+4] call sub_7F815991 mov [esi+4], edi mov dword_7F838080, edi mov cx, [esi+10h] test cx, cx jl short loc_7F81254E mov eax, [esi] mov edx, 1 shl edx, cl not edx and [eax+25Ch], edx loc_7F81254E: ; CODE XREF: sub_7F812460+DBj mov word ptr [esi+10h], 0FFFFh jmp loc_7F812479 ; --------------------------------------------------------------------------- loc_7F812559: ; CODE XREF: sub_7F812460+42j cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F812597 mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F812597: ; CODE XREF: sub_7F812460+105j test eax, eax jnz short loc_7F8125CE call sub_7F82A588 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F8125B6 call sub_7F82A34F jmp short loc_7F8125C4 ; --------------------------------------------------------------------------- loc_7F8125B6: ; CODE XREF: sub_7F812460+14Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8125C4: ; CODE XREF: sub_7F812460+154j mov dword_7F838078, 0 loc_7F8125CE: ; CODE XREF: sub_7F812460+139j mov eax, 2 jmp loc_7F81247B ; --------------------------------------------------------------------------- loc_7F8125D8: ; CODE XREF: sub_7F812460+4Dj mov eax, [ebp+arg_0] mov eax, [eax] mov ecx, [eax+28h] test ecx, ecx jz loc_7F812479 mov edi, [eax] push 1 push ecx call sub_7F8161D3 lea ecx, [edi+21Ch] mov ax, [ecx] cmp ax, 6 jz short loc_7F812616 mov [edi+23Ah], ax mov word ptr [ecx], 6 mov word ptr [edi+23Ch], 0 loc_7F812616: ; CODE XREF: sub_7F812460+19Fj mov eax, 2 jmp loc_7F81247B ; --------------------------------------------------------------------------- loc_7F812620: ; CODE XREF: sub_7F812460+58j mov eax, [ebp+lpString2] push dword ptr [eax] push [ebp+arg_0] call sub_7F823F46 jmp loc_7F81247B sub_7F812460 endp ; =============== S U B R O U T I N E ======================================= sub_7F812632 proc near ; CODE XREF: sub_7F812460+63p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax] mov eax, [ecx+1Ch] test eax, eax jz short loc_7F81264E push 1 push eax call sub_7F8161D3 mov eax, 2 jmp short locret_7F812650 ; --------------------------------------------------------------------------- loc_7F81264E: ; CODE XREF: sub_7F812632+Bj xor eax, eax locret_7F812650: ; CODE XREF: sub_7F812632+1Aj retn 4 sub_7F812632 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F812653(int, LONG lDistanceToMove, DWORD nNumberOfBytesToRead) sub_7F812653 proc near ; CODE XREF: sub_7F812D74+115p ; sub_7F812D74+134p ... NumberOfBytesWritten= dword ptr -4 arg_0 = dword ptr 8 lDistanceToMove = dword ptr 0Ch nNumberOfBytesToRead= dword ptr 10h push ebp mov ebp, esp sub esp, 4 cmp dword_7F836760, 0 push ebx push esi push edi jz short loc_7F81266C mov eax, dword_7F836760 inc byte ptr [eax] loc_7F81266C: ; CODE XREF: sub_7F812653+10j cmp dword_7F838080, 0 jnz short loc_7F812684 call sub_7F82A588 mov esi, eax test esi, esi jnz loc_7F81277F loc_7F812684: ; CODE XREF: sub_7F812653+20j mov edi, [ebp+nNumberOfBytesToRead] mov eax, 2000h cmp edi, eax mov ebx, edi jb short loc_7F812694 mov ebx, eax loc_7F812694: ; CODE XREF: sub_7F812653+3Dj mov eax, dword_7F838078 cmp word ptr [eax+126h], 0 jz short loc_7F8126B9 push 0 push [ebp+lDistanceToMove] push ebx push lpBuffer push [ebp+arg_0] call sub_7F812934 jmp short loc_7F8126CB ; --------------------------------------------------------------------------- loc_7F8126B9: ; CODE XREF: sub_7F812653+4Ej push [ebp+lDistanceToMove] push ebx push lpBuffer push [ebp+arg_0] call sub_7F8128E1 loc_7F8126CB: ; CODE XREF: sub_7F812653+64j mov eax, lpBuffer push eax ; lpBuffer push ebx ; nNumberOfBytesToRead push [ebp+lDistanceToMove] ; lDistanceToMove push 2 ; __int16 mov eax, dword_7F838080 push eax ; int call sub_7F815C9D mov esi, eax test esi, esi jnz loc_7F81277F add [ebp+arg_0], ebx add [ebp+lDistanceToMove], ebx sub edi, ebx jz loc_7F81277F loc_7F8126FA: ; CODE XREF: sub_7F812653+123j cmp edi, 2000h mov ebx, edi mov [ebp+NumberOfBytesWritten], 0 jb short loc_7F812710 mov ebx, 2000h loc_7F812710: ; CODE XREF: sub_7F812653+B6j mov eax, dword_7F838078 cmp word ptr [eax+126h], 0 jz short loc_7F812735 push 0 push [ebp+lDistanceToMove] push ebx push lpBuffer push [ebp+arg_0] call sub_7F812934 jmp short loc_7F812747 ; --------------------------------------------------------------------------- loc_7F812735: ; CODE XREF: sub_7F812653+CAj push [ebp+lDistanceToMove] push ebx push lpBuffer push [ebp+arg_0] call sub_7F8128E1 loc_7F812747: ; CODE XREF: sub_7F812653+E0j lea eax, [ebp+NumberOfBytesWritten] push eax ; lpNumberOfBytesWritten push ebx ; nNumberOfBytesToWrite push lpBuffer ; lpBuffer mov eax, dword_7F838080 push eax ; int call sub_7F815B4C mov esi, eax test esi, esi jnz short loc_7F81277F cmp [ebp+NumberOfBytesWritten], ebx jnz short loc_7F81277A sub edi, [ebp+NumberOfBytesWritten] mov eax, [ebp+NumberOfBytesWritten] add [ebp+arg_0], eax add [ebp+lDistanceToMove], eax test edi, edi jnz short loc_7F8126FA jmp short loc_7F81277F ; --------------------------------------------------------------------------- loc_7F81277A: ; CODE XREF: sub_7F812653+113j mov esi, 204h loc_7F81277F: ; CODE XREF: sub_7F812653+2Bj ; sub_7F812653+93j ... cmp dword_7F836760, 0 jz short loc_7F81278F mov eax, dword_7F836760 dec byte ptr [eax] loc_7F81278F: ; CODE XREF: sub_7F812653+133j test esi, esi jz short loc_7F8127C4 cmp esi, 200h jz short loc_7F8127C4 cmp esi, 204h jz short loc_7F8127C4 cmp esi, 215h jz short loc_7F8127BF mov eax, 611h cmp esi, eax jz short loc_7F8127C4 mov esi, eax push 1 call sub_7F82A514 jmp short loc_7F8127C4 ; --------------------------------------------------------------------------- loc_7F8127BF: ; CODE XREF: sub_7F812653+156j mov esi, 204h loc_7F8127C4: ; CODE XREF: sub_7F812653+13Ej ; sub_7F812653+146j ... cmp dword_7F838080, 0 jz short loc_7F8127DC push 3 ; __int16 mov eax, dword_7F838080 push 0 ; lDistanceToMove push eax ; int call sub_7F815C03 loc_7F8127DC: ; CODE XREF: sub_7F812653+178j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F812653 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8127E7(LPVOID lpBuffer, LONG lDistanceToMove, int) sub_7F8127E7 proc near ; CODE XREF: sub_7F814E39+7Dp ; sub_7F816F26+7Bp ... NumberOfBytesRead= dword ptr -4 lpBuffer = dword ptr 8 lDistanceToMove = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_8] mov ebp, esp sub esp, 4 cmp dword_7F838080, 0 push ebx push esi push edi mov edi, [eax] jnz short loc_7F81280E call sub_7F82A588 mov esi, eax test esi, esi jnz loc_7F812893 loc_7F81280E: ; CODE XREF: sub_7F8127E7+16j push 1 ; __int16 push [ebp+lDistanceToMove] ; lDistanceToMove push dword_7F838080 ; int call sub_7F815C03 mov esi, eax test esi, esi jnz short loc_7F812893 test edi, edi jz short loc_7F812893 mov ebx, [ebp+lpBuffer] loc_7F81282B: ; CODE XREF: sub_7F8127E7+A3j mov [ebp+NumberOfBytesRead], 0 lea eax, [ebp+NumberOfBytesRead] push eax ; lpNumberOfBytesRead push edi ; nNumberOfBytesToRead push ebx ; lpBuffer mov eax, dword_7F838080 push eax ; int call sub_7F815A66 mov esi, eax test esi, esi jnz short loc_7F812893 cmp [ebp+NumberOfBytesRead], 0 jz short loc_7F81288E mov eax, dword_7F838078 cmp word ptr [eax+126h], 0 jz short loc_7F81286F push 1 push [ebp+lDistanceToMove] push [ebp+NumberOfBytesRead] push ebx push ebx call sub_7F812934 jmp short loc_7F81287C ; --------------------------------------------------------------------------- loc_7F81286F: ; CODE XREF: sub_7F8127E7+75j push [ebp+lDistanceToMove] push [ebp+NumberOfBytesRead] push ebx push ebx call sub_7F8128E1 loc_7F81287C: ; CODE XREF: sub_7F8127E7+86j sub edi, [ebp+NumberOfBytesRead] add ebx, [ebp+NumberOfBytesRead] mov eax, [ebp+NumberOfBytesRead] add [ebp+lDistanceToMove], eax test edi, edi jnz short loc_7F81282B jmp short loc_7F812893 ; --------------------------------------------------------------------------- loc_7F81288E: ; CODE XREF: sub_7F8127E7+66j mov esi, 200h loc_7F812893: ; CODE XREF: sub_7F8127E7+21j ; sub_7F8127E7+3Bj ... mov eax, [ebp+arg_8] sub [eax], edi test esi, esi jz short loc_7F8128BE cmp esi, 200h jz short loc_7F8128BE cmp esi, 204h jz short loc_7F8128BE mov eax, 611h cmp esi, eax jz short loc_7F8128BE mov esi, eax push 1 call sub_7F82A514 loc_7F8128BE: ; CODE XREF: sub_7F8127E7+B3j ; sub_7F8127E7+BBj ... cmp dword_7F838080, 0 jz short loc_7F8128D6 push 3 ; __int16 mov eax, dword_7F838080 push 0 ; lDistanceToMove push eax ; int call sub_7F815C03 loc_7F8128D6: ; CODE XREF: sub_7F8127E7+DEj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8127E7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8128E1 proc near ; CODE XREF: sub_7F812653+73p ; sub_7F812653+EFp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi mov edi, [ebp+arg_8] mov eax, edi dec edi test eax, eax jz short loc_7F81292D mov eax, [ebp+arg_0] mov esi, [ebp+arg_4] mov edx, [ebp+arg_C] loc_7F8128FA: ; CODE XREF: sub_7F8128E1+4Aj mov cl, [eax] inc eax add cl, dl movzx ecx, cl mov bl, byte_7F835AE8[ecx] mov cl, dh add bl, cl movzx ebx, bl mov bl, byte_7F835CE8[ebx] sub bl, cl movzx ecx, bl mov cl, byte_7F835BE8[ecx] sub cl, dl inc edx mov [esi], cl inc esi mov ecx, edi dec edi test ecx, ecx jnz short loc_7F8128FA loc_7F81292D: ; CODE XREF: sub_7F8128E1+Ej pop edi pop esi pop ebx pop ebp retn 10h sub_7F8128E1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F812934 proc near ; CODE XREF: sub_7F812653+5Fp ; sub_7F812653+DBp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, dword_7F838078 mov ebp, esp push ebx push esi mov ecx, [eax+128h] push edi mov eax, [ebp+arg_8] cmp [ebp+arg_10], 0 jz short loc_7F81298B dec [ebp+arg_8] test eax, eax jz short loc_7F8129C6 mov esi, [ebp+arg_0] mov edi, [ebp+arg_4] loc_7F81295B: ; CODE XREF: sub_7F812934+53j mov al, [esi] inc esi movzx edx, al mov eax, [ebp+arg_C] mov bl, byte_7F835CE8[edx] sub edx, edx inc [ebp+arg_C] div ecx sub bl, al mov edx, [ebp+arg_8] movzx eax, bl dec [ebp+arg_8] mov al, byte_7F835AE8[eax] mov [edi], al inc edi test edx, edx jnz short loc_7F81295B jmp short loc_7F8129C6 ; --------------------------------------------------------------------------- loc_7F81298B: ; CODE XREF: sub_7F812934+18j dec [ebp+arg_8] test eax, eax jz short loc_7F8129C6 mov esi, [ebp+arg_0] mov edi, [ebp+arg_4] loc_7F812998: ; CODE XREF: sub_7F812934+90j mov al, [esi] inc esi movzx edx, al mov eax, [ebp+arg_C] mov bl, byte_7F835BE8[edx] sub edx, edx inc [ebp+arg_C] div ecx add bl, al mov edx, [ebp+arg_8] movzx eax, bl dec [ebp+arg_8] mov al, byte_7F835CE8[eax] mov [edi], al inc edi test edx, edx jnz short loc_7F812998 loc_7F8129C6: ; CODE XREF: sub_7F812934+1Fj ; sub_7F812934+55j ... pop edi pop esi pop ebx pop ebp retn 14h sub_7F812934 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8129CD(int, LPCVOID lpBuffer, __int16, __int16) sub_7F8129CD proc near ; CODE XREF: sub_7F813C77+1ABp ; sub_7F82159B+110p var_14 = dword ptr -14h NumberOfBytesWritten= dword ptr -10h var_C = word ptr -0Ch var_8 = word ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 lpBuffer = dword ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h push ebp xor ecx, ecx mov ebp, esp sub esp, 14h push ebx mov [ebp+NumberOfBytesWritten], ecx push esi mov [ebp+var_4], ecx push edi mov esi, [ebp+lpBuffer] add esi, 11Ch cmp dword_7F836760, ecx mov edx, [esi] mov [ebp+var_14], edx jz short loc_7F8129FB mov eax, dword_7F836760 inc byte ptr [eax] loc_7F8129FB: ; CODE XREF: sub_7F8129CD+25j mov ebx, [ebp+arg_0] cmp dword ptr [ebx], 0 jnz short loc_7F812A0D mov edi, 611h jmp loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812A0D: ; CODE XREF: sub_7F8129CD+34j mov ax, [ebp+arg_8] and ax, 4 mov [ebp+var_C], ax jz short loc_7F812A20 call nullsub_1 loc_7F812A20: ; CODE XREF: sub_7F8129CD+4Cj mov ax, [ebp+arg_8] and ax, 2 mov [ebp+var_8], ax jz short loc_7F812A59 push dword ptr [ebx] call sub_7F82A7F5 mov edi, eax test edi, edi jz short loc_7F812A59 mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz loc_7F812BB4 mov word ptr [eax], 4 jmp loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812A59: ; CODE XREF: sub_7F8129CD+5Fj ; sub_7F8129CD+6Cj lea eax, [ebp+var_4] push eax push dword ptr [ebx] call sub_7F8159EA mov edi, eax test edi, edi jz short loc_7F812A88 mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz loc_7F812BB4 mov word ptr [eax], 4 jmp loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812A88: ; CODE XREF: sub_7F8129CD+9Bj push dword ptr [ebx] call sub_7F815991 cmp [ebp+arg_C], 0 mov eax, [ebp+var_4] mov [ebx], eax jl short loc_7F812AAF movsx eax, [ebp+arg_C] push 1 ; nNumberOfBytesToLockLow add eax, 1E0h push eax ; dwFileOffsetLow push [ebp+var_4] ; int call sub_7F815E19 loc_7F812AAF: ; CODE XREF: sub_7F8129CD+CCj push 1 ; __int16 push 0 ; lDistanceToMove push [ebp+var_4] ; int call sub_7F815C03 mov edi, eax test edi, edi jz short loc_7F812ADF mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz loc_7F812BB4 mov word ptr [eax], 4 jmp loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812ADF: ; CODE XREF: sub_7F8129CD+F2j call ds:GetTickCount mov [esi], eax lea eax, [ebp+NumberOfBytesWritten] push eax ; lpNumberOfBytesWritten push 1DFh ; nNumberOfBytesToWrite push [ebp+lpBuffer] ; lpBuffer push [ebp+var_4] ; int call sub_7F815B4C cmp [ebp+NumberOfBytesWritten], 1DFh mov edi, eax jz short loc_7F812B0B mov edi, 200h loc_7F812B0B: ; CODE XREF: sub_7F8129CD+137j test edi, edi jz short loc_7F812B2D mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz loc_7F812BB4 mov word ptr [eax], 4 jmp loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812B2D: ; CODE XREF: sub_7F8129CD+140j cmp [ebp+var_C], 0 jz short loc_7F812B39 call nullsub_1 loc_7F812B39: ; CODE XREF: sub_7F8129CD+165j cmp [ebp+var_8], 0 jz short loc_7F812B65 push [ebp+var_4] call sub_7F82A7F5 mov edi, eax test edi, edi jz short loc_7F812B65 mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz short loc_7F812BB4 mov word ptr [eax], 4 jmp short loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812B65: ; CODE XREF: sub_7F8129CD+171j ; sub_7F8129CD+17Fj lea eax, [ebp+var_4] push eax push dword ptr [ebx] call sub_7F8159EA mov edi, eax test edi, edi jz short loc_7F812B8D mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz short loc_7F812BB4 mov word ptr [eax], 4 jmp short loc_7F812BB4 ; --------------------------------------------------------------------------- loc_7F812B8D: ; CODE XREF: sub_7F8129CD+1A7j push dword ptr [ebx] call sub_7F815991 cmp [ebp+arg_C], 0 mov eax, [ebp+var_4] mov [ebx], eax jl short loc_7F812BB4 movsx eax, [ebp+arg_C] push 1 ; nNumberOfBytesToLockLow add eax, 1E0h push eax ; dwFileOffsetLow push [ebp+var_4] ; int call sub_7F815E19 loc_7F812BB4: ; CODE XREF: sub_7F8129CD+3Bj ; sub_7F8129CD+7Cj ... cmp dword_7F836760, 0 jz short loc_7F812BC4 mov eax, dword_7F836760 dec byte ptr [eax] loc_7F812BC4: ; CODE XREF: sub_7F8129CD+1EEj cmp [ebp+var_4], 0 jz short loc_7F812BD6 push 3 ; __int16 push 0 ; lDistanceToMove push [ebp+var_4] ; int call sub_7F815C03 loc_7F812BD6: ; CODE XREF: sub_7F8129CD+1FBj test edi, edi jz short loc_7F812BDF mov eax, [ebp+var_14] mov [esi], eax loc_7F812BDF: ; CODE XREF: sub_7F8129CD+20Bj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F8129CD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F812BEA(int, LPVOID lpBuffer) sub_7F812BEA proc near ; CODE XREF: sub_7F821428+2Fp ; sub_7F8225B6+44p ... NumberOfBytesRead= dword ptr -8 Buffer = byte ptr -2 arg_0 = dword ptr 8 lpBuffer = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 mov [ebp+NumberOfBytesRead], 0 push ebx push esi push edi mov esi, [ebp+arg_0] test esi, esi jnz short loc_7F812C08 mov ebx, 611h jmp short loc_7F812C59 ; --------------------------------------------------------------------------- loc_7F812C08: ; CODE XREF: sub_7F812BEA+15j push 1 ; __int16 push 0 ; lDistanceToMove push esi ; int call sub_7F815C03 mov ebx, eax test ebx, ebx jnz short loc_7F812C59 lea eax, [ebp+NumberOfBytesRead] mov edi, 1DFh push eax ; lpNumberOfBytesRead push edi ; nNumberOfBytesToRead push [ebp+lpBuffer] ; lpBuffer push esi ; int call sub_7F815A66 mov ebx, eax test ebx, ebx jnz short loc_7F812C59 cmp [ebp+NumberOfBytesRead], edi jz short loc_7F812C3B mov ebx, 200h loc_7F812C3B: ; CODE XREF: sub_7F812BEA+4Aj test ebx, ebx jnz short loc_7F812C59 push 3 ; __int16 push 0FFFFFFFFh ; lDistanceToMove push esi ; int call sub_7F815C03 lea eax, [ebp+NumberOfBytesRead] lea ecx, [ebp+Buffer] push eax ; lpNumberOfBytesRead push 1 ; nNumberOfBytesToRead push ecx ; lpBuffer push esi ; int call sub_7F815A66 loc_7F812C59: ; CODE XREF: sub_7F812BEA+1Cj ; sub_7F812BEA+2Cj ... test esi, esi jz short loc_7F812C67 push 3 ; __int16 push 0 ; lDistanceToMove push esi ; int call sub_7F815C03 loc_7F812C67: ; CODE XREF: sub_7F812BEA+71j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F812BEA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F812C72 proc near ; CODE XREF: sub_7F813636+18Bp ; sub_7F81F699+62p ... NumberOfBytesWritten= dword ptr -8 Buffer = byte ptr -1 arg_0 = dword ptr 8 push ebp xor eax, eax mov ebp, esp sub esp, 8 cmp dword_7F836760, eax push esi mov [ebp+NumberOfBytesWritten], eax mov [ebp+Buffer], al jz short loc_7F812C90 mov eax, dword_7F836760 inc byte ptr [eax] loc_7F812C90: ; CODE XREF: sub_7F812C72+15j cmp dword_7F838080, 0 jnz short loc_7F812CA8 call sub_7F82A588 mov esi, eax test esi, esi jnz loc_7F812D2A loc_7F812CA8: ; CODE XREF: sub_7F812C72+25j push 1 ; __int16 mov eax, dword_7F838078 mov ecx, [eax+200h] mov eax, [ecx+4] add eax, [ebp+arg_0] push eax ; lDistanceToMove push dword_7F838080 ; int call sub_7F815C03 mov esi, eax test esi, esi jnz short loc_7F812D2A lea eax, [ebp+NumberOfBytesWritten] lea ecx, [ebp+Buffer] push eax ; lpNumberOfBytesWritten push 1 ; nNumberOfBytesToWrite push ecx ; lpBuffer push dword_7F838080 ; int call sub_7F815B4C mov esi, eax test esi, esi jz short loc_7F812CFF cmp esi, 203h jz short loc_7F812CF8 cmp esi, 215h jnz short loc_7F812D2A loc_7F812CF8: ; CODE XREF: sub_7F812C72+7Cj mov esi, 204h jmp short loc_7F812D2A ; --------------------------------------------------------------------------- loc_7F812CFF: ; CODE XREF: sub_7F812C72+74j cmp [ebp+NumberOfBytesWritten], 1 jz short loc_7F812D0C mov esi, 204h jmp short loc_7F812D2A ; --------------------------------------------------------------------------- loc_7F812D0C: ; CODE XREF: sub_7F812C72+91j mov eax, dword_7F838080 push eax call sub_7F815BCA mov esi, eax test esi, esi jnz short loc_7F812D2A mov eax, dword_7F838080 push eax call sub_7F82A7F5 mov esi, eax loc_7F812D2A: ; CODE XREF: sub_7F812C72+30j ; sub_7F812C72+59j ... cmp dword_7F836760, 0 jz short loc_7F812D3A mov eax, dword_7F836760 dec byte ptr [eax] loc_7F812D3A: ; CODE XREF: sub_7F812C72+BFj mov eax, dword_7F838080 push eax call sub_7F82A7F5 test esi, esi jz short loc_7F812D6B cmp esi, 200h jz short loc_7F812D6B cmp esi, 204h jz short loc_7F812D6B mov eax, 611h cmp esi, eax jz short loc_7F812D6B mov esi, eax push 1 call sub_7F82A514 loc_7F812D6B: ; CODE XREF: sub_7F812C72+D5j ; sub_7F812C72+DDj ... mov eax, esi pop esi mov esp, ebp pop ebp retn 4 sub_7F812C72 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F812D74 proc near ; CODE XREF: sub_7F81339D+199p ; sub_7F8139C6+D5p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, dword_7F838078 add esi, 250h cmp dword ptr [esi], 0 jz short loc_7F812D98 mov eax, 253h jmp loc_7F812F6A ; --------------------------------------------------------------------------- loc_7F812D98: ; CODE XREF: sub_7F812D74+18j call GetCurrentProcessId_0 cmp [ebp+arg_0], 0 mov [esi], eax mov eax, dword_7F838078 jz short loc_7F812DC3 mov ax, [eax+0Ch] lea ecx, [eax+100h] cmp cx, ax jnb short loc_7F812DCF mov esi, 1018h jmp loc_7F812F58 ; --------------------------------------------------------------------------- loc_7F812DC3: ; CODE XREF: sub_7F812D74+34j mov cx, [eax+208h] add cx, 100h loc_7F812DCF: ; CODE XREF: sub_7F812D74+43j mov eax, dword_7F838078 cmp [eax+208h], cx jbe short loc_7F812DE7 mov eax, 400h jmp loc_7F812F6A ; --------------------------------------------------------------------------- loc_7F812DE7: ; CODE XREF: sub_7F812D74+67j movzx ebx, cx shl ebx, 5 push 0 add ebx, 1FFh push 70616D80h and ebx, 0FFFFFE00h call sub_7F8144A4 mov edi, eax lea edx, [ebp+var_8] lea eax, [ebp+var_4] lea ecx, ds:1F8h[ebx*2] mov [ebp+var_8], 80h push eax push ecx push edx call sub_7F812FC1 mov esi, eax test esi, esi jnz loc_7F812F58 push [ebp+var_4] push edi xor esi, esi call sub_7F814AC2 push [ebp+var_4] call sub_7F8147DD and word ptr [edi+10h], 0DFFFh mov eax, [ebp+var_4] and word ptr [eax+10h], 0DFFFh mov eax, [edi+18h] mov ecx, dword_7F838078 add eax, 1FFh and eax, 0FFFFFE00h mov [ecx+10h], eax add eax, ebx mov ecx, dword_7F838078 mov [ecx+50h], eax mov ecx, [edi+18h] mov eax, dword_7F838078 mov eax, [eax+10h] cmp eax, ecx jz short loc_7F812E8E sub eax, ecx push eax ; nNumberOfBytesToRead push ecx ; lDistanceToMove push lpBuffer ; int call sub_7F812653 loc_7F812E8E: ; CODE XREF: sub_7F812D74+109j mov eax, dword_7F838078 mov ebx, 200h push ebx ; nNumberOfBytesToRead mov eax, [eax+50h] sub eax, 200h push eax ; lDistanceToMove push lpBuffer ; int call sub_7F812653 mov ecx, [edi+14h] mov edx, [edi+18h] push ebx ; nNumberOfBytesToRead lea eax, [ecx+edx-200h] push eax ; lDistanceToMove push lpBuffer ; int call sub_7F812653 mov ecx, dword_7F838078 mov ebx, [ecx+20Ch] mov edx, [ebx] mov eax, [edx] add edx, 4 mov [ebp+var_4], eax test eax, eax jz short loc_7F812F03 loc_7F812EE1: ; CODE XREF: sub_7F812D74+18Dj mov ax, 100h loc_7F812EE5: ; CODE XREF: sub_7F812D74+181j dec ax mov ecx, [ebp+var_4] or byte ptr [ecx+10h], 3 add [ebp+var_4], 20h test ax, ax jnz short loc_7F812EE5 mov eax, [edx] add edx, 4 mov [ebp+var_4], eax test eax, eax jnz short loc_7F812EE1 loc_7F812F03: ; CODE XREF: sub_7F812D74+16Bj mov eax, dword_7F838078 mov ecx, [eax+200h] mov dx, [ecx+8] mov [eax+214h], dx mov eax, dword_7F838078 mov word ptr [eax+23Ch], 0 mov eax, dword_7F838078 mov ecx, [eax+50h] sub ecx, [eax+10h] shr ecx, 5 mov [eax+0Ch], cx mov eax, dword_7F838078 add eax, 0Ch mov ecx, dword_7F838078 mov dx, [eax] cmp [ecx+208h], dx jbe short loc_7F812F58 mov word ptr [eax], 0FFFFh loc_7F812F58: ; CODE XREF: sub_7F812D74+4Aj ; sub_7F812D74+B3j ... mov ecx, dword_7F838078 mov eax, esi mov dword ptr [ecx+250h], 0 loc_7F812F6A: ; CODE XREF: sub_7F812D74+1Fj ; sub_7F812D74+6Ej pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F812D74 endp ; =============== S U B R O U T I N E ======================================= sub_7F812F73 proc near ; CODE XREF: sub_7F813059+Cp ; sub_7F813F0D+1B5p ... arg_0 = dword ptr 4 push esi mov eax, dword_7F838078 mov edx, [eax+20Ch] mov ecx, [edx] mov esi, ecx cmp dword ptr [ecx], 0 jz short loc_7F812FA3 mov edx, [esp+4+arg_0] loc_7F812F8C: ; CODE XREF: sub_7F812F73+2Ej mov eax, [esi] cmp edx, eax jb short loc_7F812F9B add eax, 2000h cmp eax, edx ja short loc_7F812FAA loc_7F812F9B: ; CODE XREF: sub_7F812F73+1Dj add esi, 4 cmp dword ptr [esi], 0 jnz short loc_7F812F8C loc_7F812FA3: ; CODE XREF: sub_7F812F73+13j xor ax, ax loc_7F812FA6: ; CODE XREF: sub_7F812F73+4Cj pop esi retn 4 ; --------------------------------------------------------------------------- loc_7F812FAA: ; CODE XREF: sub_7F812F73+26j mov eax, esi sub edx, [esi] sub ax, cx shr edx, 5 and ax, 0FFFCh shl ax, 6 add ax, dx jmp short loc_7F812FA6 sub_7F812F73 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F812FC1 proc near ; CODE XREF: sub_7F812D74+AAp ; sub_7F814988+19p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push esi lea eax, [ebp+var_8] push edi mov esi, [ebp+arg_0] push eax mov ecx, [esi] test ecx, 0FFFFFF00h jnz short loc_7F813036 push esi push ecx call sub_7F8142AB loc_7F812FE1: ; CODE XREF: sub_7F812FC1+7Dj push 1 lea ecx, [ebp+var_4] push [ebp+arg_4] push ecx call sub_7F813636 mov edi, eax xor ecx, ecx test edi, edi jnz short loc_7F81302C mov eax, [ebp+var_4] mov [eax+8], ecx mov eax, [ebp+var_4] mov [eax+0Ch], ecx mov eax, [ebp+var_4] mov [eax+1Ch], ecx mov eax, [ebp+var_4] and word ptr [eax+10h], 3 mov eax, [ebp+var_4] or byte ptr [eax+17h], 80h mov eax, [ebp+var_4] mov [eax+12h], cx push [ebp+var_8] push [ebp+var_4] push dword ptr [esi] call sub_7F81444D loc_7F81302C: ; CODE XREF: sub_7F812FC1+34j ; sub_7F812FC1+84j xor ecx, ecx test edi, edi jz short loc_7F813047 mov [esi], ecx jmp short loc_7F81304A ; --------------------------------------------------------------------------- loc_7F813036: ; CODE XREF: sub_7F812FC1+17j push ecx call sub_7F8144A4 test eax, eax jz short loc_7F812FE1 mov edi, 100Ah jmp short loc_7F81302C ; --------------------------------------------------------------------------- loc_7F813047: ; CODE XREF: sub_7F812FC1+6Fj mov ecx, [ebp+var_4] loc_7F81304A: ; CODE XREF: sub_7F812FC1+73j mov eax, [ebp+arg_8] mov [eax], ecx mov eax, edi pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F812FC1 endp ; =============== S U B R O U T I N E ======================================= sub_7F813059 proc near ; CODE XREF: sub_7F813636+16Cp ; sub_7F813F0D+1A9p ... var_6 = word ptr -6 var_4 = word ptr -4 arg_0 = dword ptr 4 arg_4 = word ptr 8 sub esp, 8 push ebx push esi mov esi, [esp+10h+arg_0] push edi push ebp push esi call sub_7F812F73 test byte ptr [esi+11h], 80h jnz short loc_7F81308A cmp byte ptr [esi+4], 8Ch jz short loc_7F81308A mov edx, [esi+14h] and edx, 7FFFFFFFh add edx, 87h and dl, 80h jmp short loc_7F81308D ; --------------------------------------------------------------------------- loc_7F81308A: ; CODE XREF: sub_7F813059+15j ; sub_7F813059+1Bj mov edx, [esi+14h] loc_7F81308D: ; CODE XREF: sub_7F813059+2Fj mov ecx, dword_7F838078 xor ebp, ebp mov [esp+18h+var_6], 0 mov edi, [ecx+200h] mov cx, [esi+10h] add edi, 0Ch mov bx, [edi] and cx, 3 mov [esi+1Ch], ebp mov dword ptr [esi+4], 8Fh mov [esi], bp mov [esi+2], bp mov [esi+14h], edx mov [esp+18h+var_4], cx mov [esi+10h], cx mov cx, [esp+18h+arg_4] or cx, [esp+18h+var_4] mov [esi+12h], bp or ch, 80h mov [esi+10h], cx mov ecx, dword_7F838078 add [ecx+270h], edx mov ecx, dword_7F838078 inc word ptr [ecx+212h] test bx, bx jz short loc_7F813163 loc_7F813100: ; CODE XREF: sub_7F813059+108j cmp bx, 1 jb short loc_7F81314C mov ecx, dword_7F838078 mov ebp, [ecx+200h] cmp [ebp+8], bx jbe short loc_7F81314C mov cx, bx mov ebp, dword_7F838078 shr cx, 6 mov ebp, [ebp+20Ch] movzx ecx, cx and ecx, 3FFFFFCh mov ebp, [ebp+0] mov ecx, [ecx+ebp] xor ebp, ebp mov bp, bx and ebp, 0FFh shl ebp, 5 add ebp, ecx jmp short loc_7F81314E ; --------------------------------------------------------------------------- loc_7F81314C: ; CODE XREF: sub_7F813059+ABj ; sub_7F813059+BDj xor ebp, ebp loc_7F81314E: ; CODE XREF: sub_7F813059+F1j cmp [ebp+14h], edx jnb short loc_7F813163 mov [esp+18h+var_6], bx lea edi, [ebp+2] mov bx, [edi] test bx, bx jnz short loc_7F813100 loc_7F813163: ; CODE XREF: sub_7F813059+A5j ; sub_7F813059+F8j test ebp, ebp jz short loc_7F81317A cmp [ebp+14h], edx jnz short loc_7F81317A mov cx, [ebp+0] push ebp mov [esi], cx mov [ebp+0], ax jmp short loc_7F8131E1 ; --------------------------------------------------------------------------- loc_7F81317A: ; CODE XREF: sub_7F813059+10Cj ; sub_7F813059+111j mov cx, [edi] cmp [esp+18h+var_6], 0 mov [esi+2], cx mov [edi], ax jz short loc_7F8131DE cmp [esp+18h+var_6], 1 jb short loc_7F8131DE mov dx, [esp+18h+var_6] mov eax, dword_7F838078 mov ecx, [eax+200h] cmp [ecx+8], dx jbe short loc_7F8131DE mov ax, dx shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov ebx, [edx] mov eax, [ecx+ebx] xor ecx, ecx mov cx, [esp+18h+var_6] and ecx, 0FFh shl ecx, 5 add eax, ecx jmp short loc_7F8131E0 ; --------------------------------------------------------------------------- loc_7F8131DE: ; CODE XREF: sub_7F813059+131j ; sub_7F813059+139j ... xor eax, eax loc_7F8131E0: ; CODE XREF: sub_7F813059+183j push eax loc_7F8131E1: ; CODE XREF: sub_7F813059+11Fj call sub_7F8148F7 push esi call sub_7F8148F7 pop ebp pop edi pop esi pop ebx add esp, 8 retn 8 sub_7F813059 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8131F6 proc near ; CODE XREF: sub_7F813636+131p ; sub_7F813F0D+188p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi push edi push eax mov edi, [ebp+arg_0] push edi call sub_7F813302 mov esi, eax test esi, esi jz loc_7F8132F7 cmp [ebp+var_4], 0 jz short loc_7F813243 mov eax, [ebp+var_4] mov ecx, [edi+14h] cmp [eax+14h], ecx jnz short loc_7F813235 mov ax, [edi] mov ecx, [ebp+var_4] mov [ecx], ax jmp loc_7F8132BE ; --------------------------------------------------------------------------- loc_7F813235: ; CODE XREF: sub_7F8131F6+2Fj cmp [ebp+var_4], 0 jz short loc_7F813243 mov ecx, [ebp+var_4] add ecx, 2 jmp short loc_7F813251 ; --------------------------------------------------------------------------- loc_7F813243: ; CODE XREF: sub_7F8131F6+24j ; sub_7F8131F6+43j mov eax, dword_7F838078 mov ecx, [eax+200h] add ecx, 0Ch loc_7F813251: ; CODE XREF: sub_7F8131F6+4Bj mov dx, [edi] test dx, dx jnz short loc_7F813262 mov ax, [edi+2] mov [ecx], ax jmp short loc_7F8132BE ; --------------------------------------------------------------------------- loc_7F813262: ; CODE XREF: sub_7F8131F6+61j cmp dx, 1 jb short loc_7F8132AB mov eax, dword_7F838078 mov ebx, [eax+200h] cmp [ebx+8], dx jbe short loc_7F8132AB mov ax, dx mov ebx, dword_7F838078 shr ax, 6 mov ebx, [ebx+20Ch] movzx eax, ax and eax, 3FFFFFCh mov ebx, [ebx] mov eax, [eax+ebx] xor ebx, ebx mov bx, dx and ebx, 0FFh shl ebx, 5 add ebx, eax jmp short loc_7F8132AD ; --------------------------------------------------------------------------- loc_7F8132AB: ; CODE XREF: sub_7F8131F6+70j ; sub_7F8131F6+81j xor ebx, ebx loc_7F8132AD: ; CODE XREF: sub_7F8131F6+B3j mov [ecx], dx push ebx mov ax, [edi+2] mov [ebx+2], ax call sub_7F8148F7 loc_7F8132BE: ; CODE XREF: sub_7F8131F6+3Aj ; sub_7F8131F6+6Aj push [ebp+var_4] call sub_7F8148F7 mov dword ptr [edi+4], 8Dh xor eax, eax mov [edi], ax test byte ptr [edi+11h], 80h mov [edi+2], ax mov eax, [edi+14h] mov ecx, dword_7F838078 jnz short loc_7F8132F1 and eax, 7FFFFFFFh add eax, 87h and al, 80h loc_7F8132F1: ; CODE XREF: sub_7F8131F6+EDj sub [ecx+270h], eax loc_7F8132F7: ; CODE XREF: sub_7F8131F6+1Aj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F8131F6 endp ; =============== S U B R O U T I N E ======================================= sub_7F813302 proc near ; CODE XREF: sub_7F8131F6+11p ; sub_7F813AA8+D7p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx mov eax, dword_7F838078 push esi push edi mov edi, [eax+200h] xor esi, esi mov dx, [edi+0Ch] test dx, dx jz short loc_7F81337B mov ecx, [esp+0Ch+arg_0] loc_7F81331F: ; CODE XREF: sub_7F813302+77j cmp dx, 1 jb short loc_7F81335D cmp [edi+8], dx jbe short loc_7F81335D mov ax, dx shr ax, 6 movzx ebx, ax and ebx, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [ebx+eax] xor ebx, ebx mov bx, dx and ebx, 0FFh shl ebx, 5 add ebx, eax jmp short loc_7F81335F ; --------------------------------------------------------------------------- loc_7F81335D: ; CODE XREF: sub_7F813302+21j ; sub_7F813302+27j xor ebx, ebx loc_7F81335F: ; CODE XREF: sub_7F813302+59j cmp ebx, ecx jz short loc_7F81337B mov esi, ebx mov eax, [ecx+14h] cmp [ebx+14h], eax jnz short loc_7F813372 mov dx, [ebx] jmp short loc_7F813376 ; --------------------------------------------------------------------------- loc_7F813372: ; CODE XREF: sub_7F813302+69j mov dx, [ebx+2] loc_7F813376: ; CODE XREF: sub_7F813302+6Ej test dx, dx jnz short loc_7F81331F loc_7F81337B: ; CODE XREF: sub_7F813302+17j ; sub_7F813302+5Fj mov eax, [esp+0Ch+arg_4] test eax, eax jz short loc_7F813390 test dx, dx mov [eax], esi jnz short loc_7F813390 mov dword ptr [eax], 0 loc_7F813390: ; CODE XREF: sub_7F813302+7Fj ; sub_7F813302+86j cmp dx, 1 pop edi sbb eax, eax pop esi inc eax pop ebx retn 8 sub_7F813302 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81339D proc near ; CODE XREF: sub_7F813636+21p ; sub_7F81453F+93p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ecx, dword_7F838078 mov ebp, esp add ecx, 20Ah sub esp, 8 mov [ebp+var_4], 0 push ebx push esi mov bx, [ecx] push edi test bx, bx jz short loc_7F813418 cmp bx, 1 jb short loc_7F81340A mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], bx jbe short loc_7F81340A mov ax, bx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov esi, [eax+20Ch] mov edi, [esi] mov eax, [edx+edi] xor edx, edx mov dx, bx and edx, 0FFh shl edx, 5 add edx, eax jmp short loc_7F81340C ; --------------------------------------------------------------------------- loc_7F81340A: ; CODE XREF: sub_7F81339D+28j ; sub_7F81339D+39j xor edx, edx loc_7F81340C: ; CODE XREF: sub_7F81339D+6Bj mov ax, [edx+2] mov [ecx], ax jmp loc_7F8135FC ; --------------------------------------------------------------------------- loc_7F813418: ; CODE XREF: sub_7F81339D+22j mov eax, dword_7F838078 mov eax, [eax+200h] add eax, 8 mov bx, [eax] cmp bx, 0FEC0h lea ecx, [ebx+1] mov [eax], cx jb short loc_7F81344B mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz short loc_7F81344B mov word ptr [eax], 100h loc_7F81344B: ; CODE XREF: sub_7F81339D+97j ; sub_7F81339D+A7j mov eax, dword_7F838078 mov cx, [eax+208h] cmp bx, cx jb loc_7F81358B mov dx, [eax+206h] mov esi, [eax+20Ch] movzx eax, cx lea ecx, [eax+100h] cmp ecx, eax jnb short loc_7F813489 mov [ebp+var_4], 1018h mov edx, [ebp+var_8] jmp loc_7F8135E7 ; --------------------------------------------------------------------------- loc_7F813489: ; CODE XREF: sub_7F81339D+DBj movzx edi, dx push esi call sub_7F82F1CA shr eax, 2 lea ecx, [edi+2] cmp eax, ecx jnb short loc_7F8134CC push 30h lea eax, ds:8[edi*4] push eax push esi call sub_7F82F24A mov esi, eax test esi, esi jnz short loc_7F8134C1 mov [ebp+var_4], 400h mov edx, [ebp+var_8] jmp loc_7F8135E7 ; --------------------------------------------------------------------------- loc_7F8134C1: ; CODE XREF: sub_7F81339D+113j mov eax, dword_7F838078 mov [eax+20Ch], esi loc_7F8134CC: ; CODE XREF: sub_7F81339D+FDj shl edi, 2 push 30h add edi, [esi] push 2000h call sub_7F82F03B mov [edi], eax test eax, eax jnz short loc_7F8134F2 mov [ebp+var_4], 400h mov edx, [ebp+var_8] jmp loc_7F8135E7 ; --------------------------------------------------------------------------- loc_7F8134F2: ; CODE XREF: sub_7F81339D+144j mov dword ptr [edi+4], 0 mov eax, dword_7F838078 inc word ptr [eax+206h] mov eax, dword_7F838078 inc word ptr [eax+204h] mov eax, dword_7F838078 add word ptr [eax+208h], 100h mov ecx, dword_7F838078 mov eax, ecx mov ax, [eax+0Ch] cmp [ecx+208h], ax jbe short loc_7F81359B push 1 call sub_7F812D74 mov [ebp+var_4], eax test eax, eax jz short loc_7F81359B mov eax, dword_7F838078 sub word ptr [eax+208h], 100h mov eax, dword_7F838078 dec word ptr [eax+204h] mov eax, dword_7F838078 dec word ptr [eax+206h] mov eax, dword_7F838078 movzx edi, word ptr [eax+206h] shl edi, 2 add edi, [esi] push dword ptr [edi] call sub_7F82F149 mov edx, [ebp+var_8] mov dword ptr [edi], 0 jmp short loc_7F8135E7 ; --------------------------------------------------------------------------- loc_7F81358B: ; CODE XREF: sub_7F81339D+BDj test bl, bl jnz short loc_7F81359B mov eax, dword_7F838078 inc word ptr [eax+204h] loc_7F81359B: ; CODE XREF: sub_7F81339D+195j ; sub_7F81339D+1A3j ... cmp bx, 1 jb short loc_7F8135E5 mov eax, dword_7F838078 mov ecx, [eax+200h] cmp [ecx+8], bx jbe short loc_7F8135E5 mov ax, bx shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov esi, [edx] mov eax, [ecx+esi] xor ecx, ecx mov cx, bx and ecx, 0FFh shl ecx, 5 lea edx, [eax+ecx] jmp short loc_7F8135E7 ; --------------------------------------------------------------------------- loc_7F8135E5: ; CODE XREF: sub_7F81339D+202j ; sub_7F81339D+213j xor edx, edx loc_7F8135E7: ; CODE XREF: sub_7F81339D+E7j ; sub_7F81339D+11Fj ... cmp [ebp+var_4], 0 jz short loc_7F8135FC mov eax, dword_7F838078 mov ecx, [eax+200h] dec word ptr [ecx+8] loc_7F8135FC: ; CODE XREF: sub_7F81339D+76j ; sub_7F81339D+24Ej xor ecx, ecx mov eax, [ebp+arg_0] cmp [ebp+var_4], ecx jz short loc_7F81361A cmp eax, ecx jz short loc_7F81360D mov [eax], cx loc_7F81360D: ; CODE XREF: sub_7F81339D+26Bj mov eax, [ebp+arg_4] xor ecx, ecx test eax, eax jz short loc_7F81362A mov [eax], ecx jmp short loc_7F81362A ; --------------------------------------------------------------------------- loc_7F81361A: ; CODE XREF: sub_7F81339D+267j test eax, eax jz short loc_7F813621 mov [eax], bx loc_7F813621: ; CODE XREF: sub_7F81339D+27Fj mov eax, [ebp+arg_4] test eax, eax jz short loc_7F81362A mov [eax], edx loc_7F81362A: ; CODE XREF: sub_7F81339D+277j ; sub_7F81339D+27Bj ... mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81339D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F813636 proc near ; CODE XREF: sub_7F812FC1+29p ; sub_7F82021B+41p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_4] mov ebp, esp add eax, 87h sub esp, 10h and al, 80h mov [ebp+var_10], eax push ebx push esi lea eax, [ebp+var_8] push edi lea ecx, [ebp+var_2] xor esi, esi push eax push ecx call sub_7F81339D mov [ebp+var_C], eax cmp eax, esi jnz loc_7F81382A mov eax, [ebp+var_8] mov dword ptr [eax+4], 8Ch mov eax, [ebp+var_8] mov [eax+8], esi mov eax, [ebp+var_8] mov [eax+0Ch], esi mov eax, [ebp+var_8] mov [eax], si mov eax, [ebp+var_8] mov [eax+2], si mov eax, [ebp+var_8] mov [eax+14h], esi mov eax, [ebp+var_8] mov [eax+18h], esi mov eax, [ebp+var_8] mov [eax+10h], si mov edx, dword_7F838078 mov ecx, [edx+200h] mov dx, [ecx+0Ch] test dx, dx jz loc_7F813762 loc_7F8136B6: ; CODE XREF: sub_7F813636+122j cmp dx, 1 jb short loc_7F8136F4 cmp [ecx+8], dx jbe short loc_7F8136F4 mov ax, dx shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov eax, [ebx] mov ebx, [edi+eax] xor edi, edi mov di, dx and edi, 0FFh shl edi, 5 add edi, ebx jmp short loc_7F8136F6 ; --------------------------------------------------------------------------- loc_7F8136F4: ; CODE XREF: sub_7F813636+84j ; sub_7F813636+8Aj xor edi, edi loc_7F8136F6: ; CODE XREF: sub_7F813636+BCj mov ebx, [ebp+var_10] cmp [edi+14h], ebx jb short loc_7F813751 test dx, dx jz short loc_7F813751 loc_7F813703: ; CODE XREF: sub_7F813636+119j cmp dx, 1 jb short loc_7F813741 cmp [ecx+8], dx jbe short loc_7F813741 mov ax, dx mov ebx, dword_7F838078 shr ax, 6 mov ebx, [ebx+20Ch] movzx eax, ax and eax, 3FFFFFCh mov ebx, [ebx] mov eax, [eax+ebx] xor ebx, ebx mov bx, dx and ebx, 0FFh shl ebx, 5 add eax, ebx jmp short loc_7F813743 ; --------------------------------------------------------------------------- loc_7F813741: ; CODE XREF: sub_7F813636+D1j ; sub_7F813636+D7j xor eax, eax loc_7F813743: ; CODE XREF: sub_7F813636+109j test byte ptr [eax+11h], 40h jz short loc_7F813760 mov dx, [eax] test dx, dx jnz short loc_7F813703 loc_7F813751: ; CODE XREF: sub_7F813636+C6j ; sub_7F813636+CBj mov dx, [edi+2] test dx, dx jnz loc_7F8136B6 jmp short loc_7F813762 ; --------------------------------------------------------------------------- loc_7F813760: ; CODE XREF: sub_7F813636+111j mov esi, eax loc_7F813762: ; CODE XREF: sub_7F813636+7Aj ; sub_7F813636+128j test esi, esi jz short loc_7F8137AF push esi call sub_7F8131F6 mov edx, [esi+14h] sub edx, [ebp+var_10] jz loc_7F813822 mov eax, [ebp+var_8] mov word ptr [eax+10h], 8000h mov eax, [esi+18h] mov ecx, [ebp+var_8] add eax, [ebp+var_10] push 0 mov [ecx+18h], eax mov ecx, [ebp+var_8] mov [ecx+14h], edx mov ecx, [ebp+var_8] mov dword ptr [ecx+4], 8Fh push [ebp+var_8] call sub_7F813059 mov ebx, [ebp+var_10] mov [esi+14h], ebx jmp short loc_7F81382A ; --------------------------------------------------------------------------- loc_7F8137AF: ; CODE XREF: sub_7F813636+12Ej cmp [ebp+arg_8], 0 jnz short loc_7F8137BE mov [ebp+var_C], 1001h jmp short loc_7F813822 ; --------------------------------------------------------------------------- loc_7F8137BE: ; CODE XREF: sub_7F813636+17Dj push [ebp+var_10] call sub_7F812C72 mov [ebp+var_C], eax test eax, eax jnz short loc_7F8137F5 mov esi, [ebp+var_8] mov eax, dword_7F838078 mov ebx, [ebp+var_10] mov ecx, [eax+200h] mov edx, [ecx+4] mov [esi+18h], edx mov ecx, dword_7F838078 mov edx, [ecx+200h] add [edx+4], ebx jmp short loc_7F81382A ; --------------------------------------------------------------------------- loc_7F8137F5: ; CODE XREF: sub_7F813636+195j mov eax, dword_7F838078 cmp dword ptr [eax+250h], 0 jz short loc_7F813822 mov ecx, [eax+200h] add ecx, 8 movzx edi, [ebp+var_2] mov ax, [ecx] movzx edx, ax dec edx cmp edx, edi jg short loc_7F813822 dec ax mov [ecx], ax jmp short loc_7F81382A ; --------------------------------------------------------------------------- loc_7F813822: ; CODE XREF: sub_7F813636+13Cj ; sub_7F813636+186j ... push dword ptr [ebp+var_2] call sub_7F813BE4 loc_7F81382A: ; CODE XREF: sub_7F813636+2Bj ; sub_7F813636+177j ... xor ecx, ecx cmp [ebp+var_C], ecx jz short loc_7F813838 mov eax, [ebp+arg_0] mov [eax], ecx jmp short loc_7F81384A ; --------------------------------------------------------------------------- loc_7F813838: ; CODE XREF: sub_7F813636+1F9j mov eax, [ebp+arg_4] mov ecx, [ebp+arg_0] mov dword ptr [esi+4], 8Dh mov [esi+14h], eax mov [ecx], esi loc_7F81384A: ; CODE XREF: sub_7F813636+200j mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F813636 endp ; =============== S U B R O U T I N E ======================================= sub_7F813856 proc near ; CODE XREF: sub_7F813C77+6Cp ; sub_7F82DD49+25p push ebx mov eax, dword_7F838078 mov cx, [eax+20Ah] push esi test cx, cx push edi push ebp jz loc_7F8139B3 mov esi, 3FFFFFCh loc_7F813874: ; CODE XREF: sub_7F813856+157j cmp cx, 1 jb short loc_7F8138B9 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F8138B9 mov ax, cx shr ax, 6 movzx edx, ax and edx, esi mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov ebp, [ebx] mov eax, [edx+ebp] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 add edx, eax jmp short loc_7F8138BB ; --------------------------------------------------------------------------- loc_7F8138B9: ; CODE XREF: sub_7F813856+22j ; sub_7F813856+33j xor edx, edx loc_7F8138BB: ; CODE XREF: sub_7F813856+61j mov eax, dword_7F838078 mov ebx, [eax+200h] mov di, [ebx+8] lea ebx, [edi-1] cmp bx, 1 jb short loc_7F813909 cmp bx, di jnb short loc_7F813909 mov ax, bx mov ebp, dword_7F838078 shr ax, 6 mov ebp, [ebp+20Ch] movzx eax, ax and eax, esi mov ebp, [ebp+0] mov eax, [eax+ebp] xor ebp, ebp mov bp, bx and ebp, 0FFh shl ebp, 5 lea ebx, [eax+ebp] jmp short loc_7F81390B ; --------------------------------------------------------------------------- loc_7F813909: ; CODE XREF: sub_7F813856+7Bj ; sub_7F813856+80j xor ebx, ebx loc_7F81390B: ; CODE XREF: sub_7F813856+B1j cmp ebx, edx jnz short loc_7F813922 mov ax, [edx+2] mov ecx, dword_7F838078 mov [ecx+20Ah], ax jmp short loc_7F813999 ; --------------------------------------------------------------------------- loc_7F813922: ; CODE XREF: sub_7F813856+B7j cmp byte ptr [ebx+4], 8Ch jnz short loc_7F813983 xor ecx, ecx cmp ebx, edx jz short loc_7F813979 loc_7F81392E: ; CODE XREF: sub_7F813856+121j mov ecx, edx mov dx, [edx+2] cmp dx, 1 jb short loc_7F813973 cmp di, dx jbe short loc_7F813973 mov ax, dx mov ebp, dword_7F838078 shr ax, 6 mov ebp, [ebp+20Ch] movzx eax, ax and eax, 3FFFFFCh mov ebp, [ebp+0] mov eax, [eax+ebp] xor ebp, ebp mov bp, dx and ebp, 0FFh shl ebp, 5 lea edx, [eax+ebp] jmp short loc_7F813975 ; --------------------------------------------------------------------------- loc_7F813973: ; CODE XREF: sub_7F813856+E2j ; sub_7F813856+E7j xor edx, edx loc_7F813975: ; CODE XREF: sub_7F813856+11Bj cmp edx, ebx jnz short loc_7F81392E loc_7F813979: ; CODE XREF: sub_7F813856+D6j mov ax, [ebx+2] mov [ecx+2], ax jmp short loc_7F813999 ; --------------------------------------------------------------------------- loc_7F813983: ; CODE XREF: sub_7F813856+D0j mov di, [edx+2] push ecx call sub_7F813AA8 mov eax, dword_7F838078 mov [eax+20Ah], di loc_7F813999: ; CODE XREF: sub_7F813856+CAj ; sub_7F813856+12Bj call sub_7F8139C6 mov eax, dword_7F838078 mov cx, [eax+20Ah] test cx, cx jnz loc_7F813874 loc_7F8139B3: ; CODE XREF: sub_7F813856+13j mov eax, dword_7F838078 pop ebp mov word ptr [eax+20Ah], 0 pop edi pop esi pop ebx retn sub_7F813856 endp ; =============== S U B R O U T I N E ======================================= sub_7F8139C6 proc near ; CODE XREF: sub_7F813856:loc_7F813999p push ebx mov eax, dword_7F838078 push esi push edi xor esi, esi mov ecx, [eax+200h] dec word ptr [ecx+8] push esi mov eax, dword_7F838078 mov ecx, [eax+200h] mov bx, [ecx+8] call sub_7F8148F7 test bl, bl jnz short loc_7F813A26 movzx eax, bx dec eax mov ecx, dword_7F838078 shr eax, 8 inc ax mov [ecx+204h], ax mov edx, dword_7F838078 mov cx, [edx+204h] lea eax, [edx+23Ch] cmp [eax], cx jb short loc_7F813A26 dec cx mov [eax], cx loc_7F813A26: ; CODE XREF: sub_7F8139C6+2Bj ; sub_7F8139C6+59j lea eax, [ebx+120h] mov ecx, dword_7F838078 cmp [ecx+208h], ax jb short loc_7F813AA2 cmp ax, bx jbe short loc_7F813AA2 dec word ptr [ecx+206h] mov eax, dword_7F838078 movzx edi, word ptr [eax+206h] shl edi, 2 mov ecx, [eax+20Ch] add edi, [ecx] sub word ptr [eax+208h], 100h mov eax, [edi] test eax, eax jz short loc_7F813A73 push eax call sub_7F82F149 loc_7F813A73: ; CODE XREF: sub_7F8139C6+A5j xor ebx, ebx mov [edi], ebx mov eax, dword_7F838078 mov edx, dword_7F838078 mov ax, [eax+208h] lea ecx, [eax+200h] cmp [edx+0Ch], cx jb short loc_7F813AA2 cmp ax, cx jnb short loc_7F813AA2 push ebx call sub_7F812D74 mov esi, eax loc_7F813AA2: ; CODE XREF: sub_7F8139C6+73j ; sub_7F8139C6+78j ... mov eax, esi pop edi pop esi pop ebx retn sub_7F8139C6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F813AA8 proc near ; CODE XREF: sub_7F813856+132p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = word ptr 8 push ebp mov eax, dword_7F838078 mov ebp, esp sub esp, 8 mov edx, [eax+200h] push ebx mov cx, [edx+8] push esi push edi lea esi, [ecx-1] cmp si, 1 jb short loc_7F813B01 cmp si, cx jnb short loc_7F813B01 mov ax, si shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov edi, [ebx] mov eax, [edx+edi] xor edx, edx mov dx, si and edx, 0FFh shl edx, 5 lea edi, [eax+edx] jmp short loc_7F813B03 ; --------------------------------------------------------------------------- loc_7F813B01: ; CODE XREF: sub_7F813AA8+1Fj ; sub_7F813AA8+24j xor edi, edi loc_7F813B03: ; CODE XREF: sub_7F813AA8+57j cmp [ebp+arg_0], 1 jb short loc_7F813B47 cmp [ebp+arg_0], cx jnb short loc_7F813B47 mov ax, [ebp+arg_0] shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov ebx, [edx] mov eax, [ecx+ebx] xor ecx, ecx mov cx, [ebp+arg_0] and ecx, 0FFh shl ecx, 5 add eax, ecx mov [ebp+var_8], eax jmp short loc_7F813B4E ; --------------------------------------------------------------------------- loc_7F813B47: ; CODE XREF: sub_7F813AA8+60j ; sub_7F813AA8+66j mov [ebp+var_8], 0 loc_7F813B4E: ; CODE XREF: sub_7F813AA8+9Dj cmp si, [ebp+arg_0] jnz short loc_7F813B58 push 0 jmp short loc_7F813BC9 ; --------------------------------------------------------------------------- loc_7F813B58: ; CODE XREF: sub_7F813AA8+AAj push 20h push edi push [ebp+var_8] call sub_7F82FCE0 add esp, 0Ch mov eax, dword_7F838078 test byte ptr [edi+11h], 80h mov ebx, [eax+200h] jz short loc_7F813B86 add ebx, 0Ch lea eax, [ebp+var_4] push eax push edi call sub_7F813302 jmp short loc_7F813B95 ; --------------------------------------------------------------------------- loc_7F813B86: ; CODE XREF: sub_7F813AA8+CDj add ebx, 0Ah lea eax, [ebp+var_4] push eax push dword ptr [edi+4] call sub_7F8144A4 loc_7F813B95: ; CODE XREF: sub_7F813AA8+DCj cmp [ebp+var_4], 0 jnz short loc_7F813BA9 cmp [ebx], si jnz short loc_7F813BBE mov cx, [ebp+arg_0] mov [ebx], cx jmp short loc_7F813BBE ; --------------------------------------------------------------------------- loc_7F813BA9: ; CODE XREF: sub_7F813AA8+F1j mov eax, [ebp+var_4] add eax, 2 cmp [eax], si jz short loc_7F813BB7 mov eax, [ebp+var_4] loc_7F813BB7: ; CODE XREF: sub_7F813AA8+10Aj mov cx, [ebp+arg_0] mov [eax], cx loc_7F813BBE: ; CODE XREF: sub_7F813AA8+F6j ; sub_7F813AA8+FFj push [ebp+var_4] call sub_7F8148F7 push [ebp+var_8] loc_7F813BC9: ; CODE XREF: sub_7F813AA8+AEj call sub_7F8148F7 mov dword ptr [edi+4], 8Ch mov word ptr [edi+10h], 0 pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F813AA8 endp ; =============== S U B R O U T I N E ======================================= sub_7F813BE4 proc near ; CODE XREF: sub_7F813636+1EFp ; sub_7F813F0D+1BBp ... arg_0 = word ptr 4 mov cx, [esp+arg_0] push esi cmp cx, 1 jb short loc_7F813C34 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F813C34 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov esi, [eax+20Ch] mov eax, [esi] mov eax, [edx+eax] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 lea esi, [eax+edx] jmp short loc_7F813C36 ; --------------------------------------------------------------------------- loc_7F813C34: ; CODE XREF: sub_7F813BE4+Aj ; sub_7F813BE4+1Bj xor esi, esi loc_7F813C36: ; CODE XREF: sub_7F813BE4+4Ej xor edx, edx mov [esi], dx mov eax, dword_7F838078 mov ax, [eax+20Ah] mov [esi+2], ax mov dword ptr [esi+4], 8Ch push esi mov [esi+1Ch], edx mov [esi+14h], edx mov [esi+18h], edx and word ptr [esi+10h], 3 mov edx, dword_7F838078 mov [edx+20Ah], cx call sub_7F8148F7 pop esi retn 4 sub_7F813BE4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F813C77 proc near ; CODE XREF: sub_7F81F3EF+55p ; sub_7F820C0E+DBp ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor esi, esi mov edi, dword_7F838078 add edi, 24Ch cmp [edi], esi jz short loc_7F813C9C mov eax, 203h jmp loc_7F813F04 ; --------------------------------------------------------------------------- loc_7F813C9C: ; CODE XREF: sub_7F813C77+19j call GetCurrentProcessId_0 mov [edi], eax mov eax, dword_7F838078 test byte ptr [eax+265h], 40h jz short loc_7F813CDF mov [ebp+var_8], 4F435380h push dword ptr [eax+244h] lea edx, [ebp+var_8] push edx call sub_7F816E51 mov esi, eax test esi, esi jnz loc_7F813EE3 mov eax, dword_7F838078 and word ptr [eax+264h], 0BFFFh loc_7F813CDF: ; CODE XREF: sub_7F813C77+38j mov bx, 0 call sub_7F813856 mov edi, [ebp+arg_0] test edi, edi jnz short loc_7F813CFB mov eax, dword_7F838078 mov bx, [eax+23Ch] loc_7F813CFB: ; CODE XREF: sub_7F813C77+76j mov [ebp+var_2], 0 mov eax, dword_7F838078 cmp [eax+204h], bx jbe short loc_7F813D3E loc_7F813D0F: ; CODE XREF: sub_7F813C77+C5j test edi, edi jnz short loc_7F813D1A cmp [ebp+var_2], 0 jnz short loc_7F813D3E loc_7F813D1A: ; CODE XREF: sub_7F813C77+9Aj lea eax, [ebp+var_2] push eax push ebx call sub_7F8140E0 mov esi, eax test esi, esi jnz loc_7F813DAF inc bx mov eax, dword_7F838078 cmp [eax+204h], bx ja short loc_7F813D0F loc_7F813D3E: ; CODE XREF: sub_7F813C77+96j ; sub_7F813C77+A1j test edi, edi jnz short loc_7F813D60 mov eax, dword_7F838078 mov [eax+23Ch], bx mov eax, dword_7F838078 cmp [eax+204h], bx ja loc_7F813EDF loc_7F813D60: ; CODE XREF: sub_7F813C77+C9j mov eax, dword_7F838078 mov di, [eax+0Eh] mov ebx, [eax+200h] xor di, 1 call sub_7F820691 mov esi, eax test esi, esi jz short loc_7F813DBB push 0 call sub_7F82A514 mov eax, dword_7F838078 or byte ptr [eax+265h], 1 mov eax, dword_7F838078 add eax, 254h cmp word ptr [eax], 0 jnz loc_7F813EDF mov word ptr [eax], 1 jmp loc_7F813EDF ; --------------------------------------------------------------------------- loc_7F813DAF: ; CODE XREF: sub_7F813C77+B1j push 0 call sub_7F814225 jmp loc_7F813EDF ; --------------------------------------------------------------------------- loc_7F813DBB: ; CODE XREF: sub_7F813C77+105j mov eax, dword_7F838078 mov [eax+0Eh], di movsx eax, di shl eax, 6 mov ecx, dword_7F838078 add eax, dword_7F838078 mov esi, ebx add eax, 10h mov [ecx+200h], eax mov eax, dword_7F838078 mov ecx, 10h mov edi, [eax+200h] mov edx, [edi] rep movsd mov eax, dword_7F838078 mov edi, [eax+200h] mov [edi], edx mov ecx, dword_7F83807C mov eax, [ecx] mov ax, [eax+10h] mov cx, word_7F838084 push eax ; __int16 push ecx ; __int16 push dword_7F838078 ; lpBuffer push offset dword_7F838080 ; int call sub_7F8129CD mov esi, eax test esi, esi jz short loc_7F813E46 mov eax, dword_7F838078 mov [eax+200h], ebx mov eax, dword_7F838078 xor byte ptr [eax+0Eh], 1 jmp loc_7F813EDF ; --------------------------------------------------------------------------- loc_7F813E46: ; CODE XREF: sub_7F813C77+1B4j mov ecx, dword_7F838080 mov eax, dword_7F83807C xor edi, edi mov edx, [eax] mov [edx+4], ecx mov ecx, dword_7F838078 mov [ecx+214h], di call sub_7F8141F1 call ds:GetTickCount mov ecx, dword_7F838078 cmp [ebp+arg_4], edi mov [ecx+268h], eax jnz short loc_7F813EA1 mov eax, dword_7F838078 cmp word ptr [eax+212h], 28h jbe short loc_7F813EA1 call sub_7F813F0D mov eax, dword_7F838078 mov [eax+212h], di loc_7F813EA1: ; CODE XREF: sub_7F813C77+208j ; sub_7F813C77+217j mov ecx, dword_7F838078 add ecx, 21Ch cmp word ptr [ecx], 6 jnz short loc_7F813ED1 mov eax, dword_7F838078 mov ax, [eax+23Ah] mov [ecx], ax mov ecx, dword_7F838078 mov word ptr [ecx+23Ah], 0 loc_7F813ED1: ; CODE XREF: sub_7F813C77+23Aj mov eax, dword_7F838078 mov word ptr [eax+23Ch], 0 loc_7F813EDF: ; CODE XREF: sub_7F813C77+E3j ; sub_7F813C77+128j ... test esi, esi jz short loc_7F813EF2 loc_7F813EE3: ; CODE XREF: sub_7F813C77+54j mov ecx, dword_7F838078 mov word ptr [ecx+23Ch], 0 loc_7F813EF2: ; CODE XREF: sub_7F813C77+26Aj mov ecx, dword_7F838078 mov eax, esi mov dword ptr [ecx+24Ch], 0 loc_7F813F04: ; CODE XREF: sub_7F813C77+20j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F813C77 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F813F0D proc near ; CODE XREF: sub_7F813C77+219p var_24 = byte ptr -24h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov eax, dword_7F838078 mov ebp, esp sub esp, 24h mov ecx, [eax+200h] xor edx, edx push ebx push esi mov si, [ecx+0Ch] push edi test si, si lea ecx, [ebp+var_24] mov [ebp+var_C], edx mov [ebp+var_8], edx jz loc_7F814027 loc_7F813F39: ; CODE XREF: sub_7F813F0D+114j cmp si, 1 jb short loc_7F813F82 mov eax, dword_7F838078 mov ebx, [eax+200h] cmp [ebx+8], si jbe short loc_7F813F82 mov ax, si shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov eax, [ebx] mov ebx, [edi+eax] xor edi, edi mov di, si and edi, 0FFh shl edi, 5 add edi, ebx jmp short loc_7F813F84 ; --------------------------------------------------------------------------- loc_7F813F82: ; CODE XREF: sub_7F813F0D+30j ; sub_7F813F0D+41j xor edi, edi loc_7F813F84: ; CODE XREF: sub_7F813F0D+73j test si, si jz loc_7F81401A loc_7F813F8D: ; CODE XREF: sub_7F813F0D+107j cmp si, 1 jb short loc_7F813FD7 mov eax, dword_7F838078 mov ebx, [eax+200h] cmp [ebx+8], si jbe short loc_7F813FD7 mov ax, si mov ebx, dword_7F838078 shr ax, 6 mov ebx, [ebx+20Ch] movzx eax, ax and eax, 3FFFFFCh mov ebx, [ebx] mov eax, [eax+ebx] xor ebx, ebx mov bx, si and ebx, 0FFh shl ebx, 5 lea esi, [eax+ebx] jmp short loc_7F813FD9 ; --------------------------------------------------------------------------- loc_7F813FD7: ; CODE XREF: sub_7F813F0D+84j ; sub_7F813F0D+95j xor esi, esi loc_7F813FD9: ; CODE XREF: sub_7F813F0D+C8j mov ax, [esi+10h] and ah, 0C0h cmp ah, 80h jnz short loc_7F81400E mov eax, [esi+18h] cmp [ecx+18h], eax jbe short loc_7F813FF0 lea ecx, [ebp+var_24] loc_7F813FF0: ; CODE XREF: sub_7F813F0D+DEj test ecx, ecx jz short loc_7F814003 loc_7F813FF4: ; CODE XREF: sub_7F813F0D+F4j cmp [ecx+18h], eax jnb short loc_7F814003 mov [ebp+var_4], ecx mov ecx, [ecx+1Ch] test ecx, ecx jnz short loc_7F813FF4 loc_7F814003: ; CODE XREF: sub_7F813F0D+E5j ; sub_7F813F0D+EAj mov eax, [ebp+var_4] mov [eax+1Ch], esi mov [esi+1Ch], ecx mov ecx, esi loc_7F81400E: ; CODE XREF: sub_7F813F0D+D6j mov si, [esi] test si, si jnz loc_7F813F8D loc_7F81401A: ; CODE XREF: sub_7F813F0D+7Aj mov si, [edi+2] test si, si jnz loc_7F813F39 loc_7F814027: ; CODE XREF: sub_7F813F0D+26j mov esi, [ebp+var_8] test esi, esi jz loc_7F8140D9 loc_7F814032: ; CODE XREF: sub_7F813F0D+1C6j test byte ptr [esi+11h], 80h mov edi, [esi+1Ch] jnz short loc_7F814052 cmp byte ptr [esi+4], 8Ch jz short loc_7F814052 mov eax, [esi+14h] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F814055 ; --------------------------------------------------------------------------- loc_7F814052: ; CODE XREF: sub_7F813F0D+12Cj ; sub_7F813F0D+132j mov eax, [esi+14h] loc_7F814055: ; CODE XREF: sub_7F813F0D+143j test edi, edi jz short loc_7F81407E test byte ptr [edi+11h], 80h jnz short loc_7F814079 cmp byte ptr [edi+4], 8Ch jz short loc_7F814079 mov ebx, [edi+14h] and ebx, 7FFFFFFFh add ebx, 87h and bl, 80h jmp short loc_7F814080 ; --------------------------------------------------------------------------- loc_7F814079: ; CODE XREF: sub_7F813F0D+150j ; sub_7F813F0D+156j mov ebx, [edi+14h] jmp short loc_7F814080 ; --------------------------------------------------------------------------- loc_7F81407E: ; CODE XREF: sub_7F813F0D+14Aj xor ebx, ebx loc_7F814080: ; CODE XREF: sub_7F813F0D+16Aj ; sub_7F813F0D+16Fj test edi, edi jz short loc_7F8140D9 mov ecx, [esi+18h] add ecx, eax cmp ecx, [edi+18h] jnz short loc_7F8140CF mov eax, [edi+1Ch] push esi mov [ebp+var_4], eax call sub_7F8131F6 test eax, eax jz short loc_7F8140D1 push edi call sub_7F8131F6 test eax, eax jnz short loc_7F8140AD xor ebx, ebx mov [ebp+var_4], edi loc_7F8140AD: ; CODE XREF: sub_7F813F0D+199j add [esi+14h], ebx mov ax, [esi+10h] push eax push esi call sub_7F813059 mov ecx, [ebp+var_4] push edi mov [esi+1Ch], ecx call sub_7F812F73 push eax call sub_7F813BE4 jmp short loc_7F8140D1 ; --------------------------------------------------------------------------- loc_7F8140CF: ; CODE XREF: sub_7F813F0D+17Fj mov esi, edi loc_7F8140D1: ; CODE XREF: sub_7F813F0D+18Fj ; sub_7F813F0D+1C0j test esi, esi jnz loc_7F814032 loc_7F8140D9: ; CODE XREF: sub_7F813F0D+11Fj ; sub_7F813F0D+175j pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F813F0D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8140E0 proc near ; CODE XREF: sub_7F813C77+A8p var_C = dword ptr -0Ch var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = word ptr 8 arg_4 = dword ptr 0Ch push ebp xor eax, eax mov ebp, esp mov ecx, dword_7F838078 mov cx, [ecx+0Eh] sub esp, 0Ch mov dx, 1 xor cl, 1 push ebx mov [ebp+var_C], eax push esi push edi mov si, 100h mov ebx, [ebp+arg_4] shl dx, cl mov [ebp+var_2], dx movsx edi, cx mov [ebx], ax shl edi, 6 mov ecx, dword_7F838078 movzx edx, [ebp+arg_0] mov ecx, [edi+ecx+10h] mov edi, edx shl edi, 0Dh lea ebx, [ecx+edi] mov ecx, dword_7F838078 mov edi, [ecx+20Ch] mov ecx, [edi] mov edi, [ecx+edx*4] mov ecx, dword_7F838078 movzx ecx, word ptr [ecx+204h] sub ecx, edx cmp ecx, 1 jnz short loc_7F81416C mov ecx, dword_7F838078 mov edx, [ecx+200h] mov si, [edx+8] and si, 0FFh jnz short loc_7F81416C mov si, 100h loc_7F81416C: ; CODE XREF: sub_7F8140E0+6Fj ; sub_7F8140E0+86j test si, si mov edx, edi jz short loc_7F8141BD loc_7F814173: ; CODE XREF: sub_7F8140E0+DBj mov cx, [edx+10h] test [ebp+var_2], cx jz short loc_7F8141AF cmp [ebp+var_C], 0 jnz short loc_7F814195 mov [ebp+var_C], 1 mov ecx, edx sub ecx, edi shr ecx, 9 mov [ebp+var_6], cx loc_7F814195: ; CODE XREF: sub_7F8140E0+A1j mov ecx, edx sub ecx, edi shr ecx, 9 mov [ebp+var_4], cx mov cx, [ebp+var_2] not cx and cx, [edx+10h] mov [edx+10h], cx loc_7F8141AF: ; CODE XREF: sub_7F8140E0+9Bj or byte ptr [edx+11h], 10h dec si add edx, 20h test si, si jnz short loc_7F814173 loc_7F8141BD: ; CODE XREF: sub_7F8140E0+91j cmp [ebp+var_C], 0 jz short loc_7F8141E8 movsx ecx, [ebp+var_6] movsx eax, [ebp+var_4] sub eax, ecx mov edx, [ebp+arg_4] mov word ptr [edx], 1 inc eax shl eax, 9 shl ecx, 9 push eax ; nNumberOfBytesToRead add ebx, ecx add ecx, edi push ebx ; lDistanceToMove push ecx ; int call sub_7F812653 loc_7F8141E8: ; CODE XREF: sub_7F8140E0+E1j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8140E0 endp ; =============== S U B R O U T I N E ======================================= sub_7F8141F1 proc near ; CODE XREF: sub_7F813C77+1EEp mov eax, dword_7F838078 mov ecx, [eax+20Ch] mov edx, [ecx] mov ecx, [edx] add edx, 4 test ecx, ecx jz short locret_7F814224 loc_7F814207: ; CODE XREF: sub_7F8141F1+31j mov ax, 100h loc_7F81420B: ; CODE XREF: sub_7F8141F1+28j dec ax add ecx, 20h and word ptr [ecx-10h], 0BFFFh test ax, ax jnz short loc_7F81420B mov ecx, [edx] add edx, 4 test ecx, ecx jnz short loc_7F814207 locret_7F814224: ; CODE XREF: sub_7F8141F1+14j retn sub_7F8141F1 endp ; =============== S U B R O U T I N E ======================================= sub_7F814225 proc near ; CODE XREF: sub_7F813C77+13Ap arg_0 = dword ptr 4 mov dx, 1 push esi mov eax, dword_7F838078 mov cx, [eax+0Eh] xor cl, dl shl dx, cl or dh, 40h mov ecx, [eax+20Ch] mov esi, [ecx] mov ecx, [esi] add esi, 4 test ecx, ecx jz short loc_7F814267 loc_7F81424C: ; CODE XREF: sub_7F814225+40j mov ax, 100h loc_7F814250: ; CODE XREF: sub_7F814225+37j dec ax or [ecx+10h], dx add ecx, 20h test ax, ax jnz short loc_7F814250 mov ecx, [esi] add esi, 4 test ecx, ecx jnz short loc_7F81424C loc_7F814267: ; CODE XREF: sub_7F814225+25j mov eax, dword_7F838078 mov ecx, [eax+200h] mov dx, [ecx+8] xor ecx, ecx mov [eax+214h], dx mov eax, dword_7F838078 mov [eax+23Ch], cx mov eax, dword_7F838078 add eax, 254h cmp [eax], cx jnz short loc_7F8142A7 cmp [esp+4+arg_0], 1 sbb ecx, ecx add ecx, 3 mov [eax], cx loc_7F8142A7: ; CODE XREF: sub_7F814225+73j pop esi retn 4 sub_7F814225 endp ; =============== S U B R O U T I N E ======================================= sub_7F8142AB proc near ; CODE XREF: sub_7F812FC1+1Bp ; sub_7F81453F+88p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi push edi mov esi, [esp+8+arg_0] and esi, 0FFh loc_7F8142B7: ; CODE XREF: sub_7F8142AB+23j call sub_7F82AC0C push [esp+8+arg_8] and al, 0 or eax, esi push eax mov edi, eax call sub_7F8144A4 test eax, eax jnz short loc_7F8142B7 mov eax, [esp+8+arg_4] mov [eax], edi pop edi pop esi retn 0Ch sub_7F8142AB endp ; =============== S U B R O U T I N E ======================================= sub_7F8142DB proc near ; CODE XREF: sub_7F8147DD+38p ; sub_7F814C1A+30p ... arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi push ebp push esi call sub_7F812F73 mov bx, ax mov di, [esi+2] mov cx, [esi] test cx, cx jz loc_7F8143B9 test di, di jnz short loc_7F814309 mov di, cx jmp loc_7F8143B9 ; --------------------------------------------------------------------------- loc_7F814309: ; CODE XREF: sub_7F8142DB+24j cmp di, 1 jb short loc_7F814353 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], di jbe short loc_7F814353 mov ax, di shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebp, [eax+20Ch] mov eax, [ebp+0] mov eax, [edx+eax] xor edx, edx mov dx, di and edx, 0FFh shl edx, 5 add eax, edx jmp short loc_7F814355 ; --------------------------------------------------------------------------- loc_7F814353: ; CODE XREF: sub_7F8142DB+32j ; sub_7F8142DB+43j xor eax, eax loc_7F814355: ; CODE XREF: sub_7F8142DB+76j cmp word ptr [eax], 0 jz short loc_7F8143B0 loc_7F81435B: ; CODE XREF: sub_7F8142DB+D3j mov dx, [eax] cmp dx, 1 jb short loc_7F8143A8 mov eax, dword_7F838078 mov ebp, [eax+200h] cmp [ebp+8], dx jbe short loc_7F8143A8 mov ax, dx mov ebp, dword_7F838078 shr ax, 6 mov ebp, [ebp+20Ch] movzx eax, ax and eax, 3FFFFFCh mov ebp, [ebp+0] mov eax, [eax+ebp] xor ebp, ebp mov bp, dx and ebp, 0FFh shl ebp, 5 add eax, ebp jmp short loc_7F8143AA ; --------------------------------------------------------------------------- loc_7F8143A8: ; CODE XREF: sub_7F8142DB+87j ; sub_7F8142DB+98j xor eax, eax loc_7F8143AA: ; CODE XREF: sub_7F8142DB+CBj cmp word ptr [eax], 0 jnz short loc_7F81435B loc_7F8143B0: ; CODE XREF: sub_7F8142DB+7Ej mov [eax], cx push eax call sub_7F8148F7 loc_7F8143B9: ; CODE XREF: sub_7F8142DB+1Bj ; sub_7F8142DB+29j mov eax, dword_7F838078 xor ecx, ecx mov edx, [eax+200h] mov bp, [edx+0Ah] cmp bx, bp jz short loc_7F814425 loc_7F8143CF: ; CODE XREF: sub_7F8142DB+148j cmp bp, 1 jb short loc_7F81440D cmp [edx+8], bp jbe short loc_7F81440D mov ax, bp shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [ecx+eax] xor ecx, ecx mov cx, bp and ecx, 0FFh shl ecx, 5 add ecx, eax jmp short loc_7F81440F ; --------------------------------------------------------------------------- loc_7F81440D: ; CODE XREF: sub_7F8142DB+F8j ; sub_7F8142DB+FEj xor ecx, ecx loc_7F81440F: ; CODE XREF: sub_7F8142DB+130j mov eax, [esi+4] cmp [ecx+4], eax ja short loc_7F81441D mov bp, [ecx+2] jmp short loc_7F814420 ; --------------------------------------------------------------------------- loc_7F81441D: ; CODE XREF: sub_7F8142DB+13Aj mov bp, [ecx] loc_7F814420: ; CODE XREF: sub_7F8142DB+140j cmp bx, bp jnz short loc_7F8143CF loc_7F814425: ; CODE XREF: sub_7F8142DB+F2j test ecx, ecx jnz short loc_7F81442F mov [edx+0Ah], di jmp short loc_7F814440 ; --------------------------------------------------------------------------- loc_7F81442F: ; CODE XREF: sub_7F8142DB+14Cj mov eax, [ecx+4] cmp [esi+4], eax jb short loc_7F81443D mov [ecx+2], di jmp short loc_7F814440 ; --------------------------------------------------------------------------- loc_7F81443D: ; CODE XREF: sub_7F8142DB+15Aj mov [ecx], di loc_7F814440: ; CODE XREF: sub_7F8142DB+152j ; sub_7F8142DB+160j push ecx call sub_7F8148F7 pop ebp pop edi pop esi pop ebx retn 4 sub_7F8142DB endp ; =============== S U B R O U T I N E ======================================= sub_7F81444D proc near ; CODE XREF: sub_7F812FC1+66p ; sub_7F81453F+103p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi push edi mov esi, [esp+8+arg_4] push esi call sub_7F812F73 xor edx, edx mov ecx, [esp+8+arg_0] mov [esi+2], dx mov edi, [esp+8+arg_8] mov [esi], dx mov [esi+4], ecx cmp edi, edx jnz short loc_7F814483 mov ecx, dword_7F838078 mov edx, [ecx+200h] mov [edx+0Ah], ax jmp short loc_7F814491 ; --------------------------------------------------------------------------- loc_7F814483: ; CODE XREF: sub_7F81444D+22j cmp [edi+4], ecx jnb short loc_7F81448E mov [edi+2], ax jmp short loc_7F814491 ; --------------------------------------------------------------------------- loc_7F81448E: ; CODE XREF: sub_7F81444D+39j mov [edi], ax loc_7F814491: ; CODE XREF: sub_7F81444D+34j ; sub_7F81444D+3Fj push edi call sub_7F8148F7 push esi call sub_7F8148F7 xor eax, eax pop edi pop esi retn 0Ch sub_7F81444D endp ; =============== S U B R O U T I N E ======================================= sub_7F8144A4 proc near ; CODE XREF: sub_7F812D74+8Cp ; sub_7F812FC1+76p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov eax, dword_7F838078 push edi xor edx, edx mov esi, [eax+200h] xor edi, edi mov cx, [esi+0Ah] test cx, cx jz short loc_7F814522 loc_7F8144BE: ; CODE XREF: sub_7F8144A4+77j cmp cx, 1 jb short loc_7F8144FC cmp [esi+8], cx jbe short loc_7F8144FC mov ax, cx shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [edi+eax] xor edi, edi mov di, cx and edi, 0FFh shl edi, 5 add edi, eax jmp short loc_7F8144FE ; --------------------------------------------------------------------------- loc_7F8144FC: ; CODE XREF: sub_7F8144A4+1Ej ; sub_7F8144A4+24j xor edi, edi loc_7F8144FE: ; CODE XREF: sub_7F8144A4+56j test edi, edi jz short loc_7F81451F mov eax, [edi+4] cmp [esp+8+arg_0], eax jbe short loc_7F814511 mov cx, [edi+2] jmp short loc_7F814516 ; --------------------------------------------------------------------------- loc_7F814511: ; CODE XREF: sub_7F8144A4+65j jnb short loc_7F814522 mov cx, [edi] loc_7F814516: ; CODE XREF: sub_7F8144A4+6Bj test cx, cx mov edx, edi jnz short loc_7F8144BE jmp short loc_7F814522 ; --------------------------------------------------------------------------- loc_7F81451F: ; CODE XREF: sub_7F8144A4+5Cj xor cx, cx loc_7F814522: ; CODE XREF: sub_7F8144A4+18j ; sub_7F8144A4:loc_7F814511j ... mov eax, [esp+8+arg_4] test eax, eax jz short loc_7F81452C mov [eax], edx loc_7F81452C: ; CODE XREF: sub_7F8144A4+84j cmp cx, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, edi pop edi pop esi retn 8 sub_7F8144A4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81453F proc near ; CODE XREF: sub_7F814687+22p ; sub_7F82BD62+85p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor edi, edi cmp [ebp+arg_4], edi jz short loc_7F814554 mov ecx, [ebp+arg_4] mov [ecx], edi loc_7F814554: ; CODE XREF: sub_7F81453F+Ej mov ebx, [ebp+arg_8] mov eax, [ebx] test eax, 0FFFFFF00h jz short loc_7F814576 push 0 push eax call sub_7F8144A4 test eax, eax jz short loc_7F814576 mov eax, 100Ah jmp loc_7F81467E ; --------------------------------------------------------------------------- loc_7F814576: ; CODE XREF: sub_7F81453F+1Fj ; sub_7F81453F+2Bj mov esi, [ebp+arg_0] mov ax, [esi+10h] test al, 10h jz short loc_7F81458B push esi call sub_7F81470D mov esi, eax jmp short loc_7F81459D ; --------------------------------------------------------------------------- loc_7F81458B: ; CODE XREF: sub_7F81453F+40j test al, 20h jnz short loc_7F81459B cmp word ptr [esi+1Eh], 0 mov edi, 1 ja short loc_7F81459D loc_7F81459B: ; CODE XREF: sub_7F81453F+4Ej xor edi, edi loc_7F81459D: ; CODE XREF: sub_7F81453F+4Aj ; sub_7F81453F+5Aj test edi, edi jz short loc_7F8145B9 push esi call sub_7F814687 mov edi, eax test edi, edi jnz loc_7F81467C push esi call sub_7F81470D mov esi, eax loc_7F8145B9: ; CODE XREF: sub_7F81453F+60j test dword ptr [ebx], 0FFFFFF00h jnz short loc_7F8145CC push 0 push ebx push dword ptr [esi+4] call sub_7F8142AB loc_7F8145CC: ; CODE XREF: sub_7F81453F+80j lea eax, [ebp+var_4] push eax push 0 call sub_7F81339D mov edi, eax test edi, edi jnz loc_7F81467C mov ax, [esi+12h] mov ecx, [ebp+var_4] mov [ecx+12h], ax mov ecx, [ebp+var_4] mov edx, [esi+8] push esi mov [ecx+8], edx mov ecx, [ebp+var_4] mov eax, [esi+0Ch] mov [ecx+0Ch], eax call sub_7F812F73 mov ecx, [ebp+var_4] mov [ecx+1Ch], ax mov ecx, [ebp+var_4] mov word ptr [ecx+1Eh], 1 mov ecx, [ebp+var_4] mov word ptr [ecx+10h], 10h mov eax, [esi+14h] mov ecx, [ebp+var_4] mov [ecx+14h], eax mov ecx, [ebp+var_4] mov edx, [esi+4] lea eax, [ebp+var_8] push eax mov [ecx+18h], edx push dword ptr [ebx] call sub_7F8144A4 push [ebp+var_8] push [ebp+var_4] push dword ptr [ebx] call sub_7F81444D mov edi, eax test edi, edi jnz short loc_7F81467C mov eax, [ebp+var_4] push esi and word ptr [eax+10h], 0DFFFh or byte ptr [esi+10h], 20h inc word ptr [esi+1Eh] call sub_7F8148F7 and word ptr [esi+10h], 0DFFFh test edi, edi jnz short loc_7F81467C cmp [ebp+arg_4], 0 jz short loc_7F81467C mov eax, [ebp+var_4] mov ecx, [ebp+arg_4] mov [ecx], eax loc_7F81467C: ; CODE XREF: sub_7F81453F+6Cj ; sub_7F81453F+9Cj ... mov eax, edi loc_7F81467E: ; CODE XREF: sub_7F81453F+32j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F81453F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F814687 proc near ; CODE XREF: sub_7F81453F+63p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_0] lea eax, [ebp+var_C] mov di, [esi+1Eh] push eax mov [esi+1Eh], bx lea ecx, [ebp+var_4] push ecx mov [ebp+var_C], ebx push esi call sub_7F81453F mov [ebp+var_8], eax cmp eax, ebx jnz short loc_7F814704 push [ebp+var_4] push esi mov [esi+1Eh], di call sub_7F814AC2 mov ecx, [ebp+var_4] mov eax, [ecx+14h] and eax, 7FFFFFFFh push eax push dword ptr [ecx+4] push ecx call sub_7F814ECA mov ecx, [ebp+var_4] and word ptr [esi+10h], 0FFDFh or byte ptr [ecx+10h], 20h mov dx, [esi+1Ch] mov ecx, [ebp+var_4] mov eax, [ecx+4] mov [esi+18h], eax mov [ecx+1Ch], dx push [ebp+var_4] call sub_7F812F73 mov [esi+1Ch], ax mov eax, [ebp+var_8] loc_7F814704: ; CODE XREF: sub_7F814687+2Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F814687 endp ; =============== S U B R O U T I N E ======================================= sub_7F81470D proc near ; CODE XREF: sub_7F81453F+43p ; sub_7F81453F+73p ... arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] test byte ptr [esi+10h], 10h jnz short loc_7F81471D mov eax, esi jmp short loc_7F814799 ; --------------------------------------------------------------------------- loc_7F81471D: ; CODE XREF: sub_7F81470D+Aj mov cx, [esi+1Ch] cmp cx, 1 jb short loc_7F814781 mov eax, dword_7F838078 mov edx, [eax+200h] mov ax, [edx+8] cmp ax, cx jbe short loc_7F814781 cmp cx, 1 jb short loc_7F814777 cmp ax, cx jbe short loc_7F814777 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov edi, [eax+20Ch] mov eax, [edi] mov edx, [edx+eax] xor eax, eax mov ax, cx and eax, 0FFh shl eax, 5 add eax, edx jmp short loc_7F814779 ; --------------------------------------------------------------------------- loc_7F814777: ; CODE XREF: sub_7F81470D+32j ; sub_7F81470D+37j xor eax, eax loc_7F814779: ; CODE XREF: sub_7F81470D+68j mov ecx, [esi+18h] cmp [eax+4], ecx jz short loc_7F814799 loc_7F814781: ; CODE XREF: sub_7F81470D+18j ; sub_7F81470D+2Cj push 0 push dword ptr [esi+18h] call sub_7F8144A4 push eax mov edi, eax call sub_7F812F73 mov [esi+1Ch], ax mov eax, edi loc_7F814799: ; CODE XREF: sub_7F81470D+Ej ; sub_7F81470D+72j pop edi pop esi retn 4 sub_7F81470D endp ; =============== S U B R O U T I N E ======================================= sub_7F81479E proc near ; CODE XREF: sub_7F810875+6Bp ; sub_7F81C33C+D5p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi xor esi, esi push esi push [esp+8+arg_0] call sub_7F8144A4 test eax, eax jz short loc_7F8147D2 cmp [eax+14h], esi jl short loc_7F8147CA cmp [esp+4+arg_4], esi jz short loc_7F8147CA mov word ptr [eax+1Eh], 1 test byte ptr [eax+10h], 10h jnz short loc_7F8147CA mov [eax+1Ch], si loc_7F8147CA: ; CODE XREF: sub_7F81479E+14j ; sub_7F81479E+1Aj ... push eax call sub_7F8147DD jmp short loc_7F8147D7 ; --------------------------------------------------------------------------- loc_7F8147D2: ; CODE XREF: sub_7F81479E+Fj mov esi, 1001h loc_7F8147D7: ; CODE XREF: sub_7F81479E+32j mov eax, esi pop esi retn 8 sub_7F81479E endp ; =============== S U B R O U T I N E ======================================= sub_7F8147DD proc near ; CODE XREF: sub_7F812D74+C7p ; sub_7F81479E+2Dp ... arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] loc_7F8147E3: ; CODE XREF: sub_7F8147DD+59j cmp dword ptr [esi+14h], 0 jl short loc_7F8147F0 cmp word ptr [esi+1Eh], 1 ja short loc_7F814838 loc_7F8147F0: ; CODE XREF: sub_7F8147DD+Aj mov ax, [esi+10h] and ax, 10h jnz short loc_7F814808 cmp word ptr [esi+1Ch], 0 jbe short loc_7F814808 cmp word ptr [esi+1Eh], 0 ja short loc_7F814838 loc_7F814808: ; CODE XREF: sub_7F8147DD+1Bj ; sub_7F8147DD+22j test ax, ax jnz short loc_7F814814 cmp word ptr [esi+1Ch], 1 jnb short loc_7F814863 loc_7F814814: ; CODE XREF: sub_7F8147DD+2Ej push esi call sub_7F8142DB test byte ptr [esi+10h], 10h jz short loc_7F814844 push esi call sub_7F81470D mov edi, eax push esi mov esi, edi call sub_7F812F73 push eax call sub_7F813BE4 jmp short loc_7F8147E3 ; --------------------------------------------------------------------------- loc_7F814838: ; CODE XREF: sub_7F8147DD+11j ; sub_7F8147DD+29j dec word ptr [esi+1Eh] push esi call sub_7F8148F7 jmp short loc_7F814863 ; --------------------------------------------------------------------------- loc_7F814844: ; CODE XREF: sub_7F8147DD+41j mov ax, [esi+10h] and ax, 1000h cmp ax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and ax, 4000h push eax push esi call sub_7F813059 loc_7F814863: ; CODE XREF: sub_7F8147DD+35j ; sub_7F8147DD+65j pop edi pop esi retn 4 sub_7F8147DD endp ; =============== S U B R O U T I N E ======================================= sub_7F814868 proc near ; CODE XREF: sub_7F824774+83p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi xor ebx, ebx push ebp mov edi, 1001h push ebx push [esp+14h+arg_0] call sub_7F8144A4 mov esi, eax push ebx push [esp+14h+arg_4] call sub_7F8144A4 mov ebp, eax test esi, esi jz short loc_7F8148EE test ebp, ebp jz short loc_7F8148EE mov eax, [ebp+14h] and eax, 7FFFFFFFh push eax push [esp+14h+arg_0] push ebp call sub_7F814ECA mov edi, eax test edi, edi jnz short loc_7F8148EE push ebp push esi call sub_7F814AC2 test byte ptr [ebp+10h], 10h jz short loc_7F8148C5 mov ax, [esi+1Ch] mov [ebp+1Ch], ax mov [esi+1Ch], bx loc_7F8148C5: ; CODE XREF: sub_7F814868+4Fj xor eax, eax cmp [ebp+14h], eax jl short loc_7F8148DC mov word ptr [ebp+1Eh], 1 test byte ptr [ebp+10h], 10h jnz short loc_7F8148DC mov [ebp+1Ch], ax loc_7F8148DC: ; CODE XREF: sub_7F814868+62j ; sub_7F814868+6Ej push ebp call sub_7F8147DD cmp dword ptr [esi+14h], 0 jge short loc_7F8148EE push esi call sub_7F814971 loc_7F8148EE: ; CODE XREF: sub_7F814868+25j ; sub_7F814868+29j ... mov eax, edi pop ebp pop edi pop esi pop ebx retn 8 sub_7F814868 endp ; =============== S U B R O U T I N E ======================================= sub_7F8148F7 proc near ; CODE XREF: sub_7F813059:loc_7F8131E1p ; sub_7F813059+18Ep ... arg_0 = dword ptr 4 mov edx, [esp+arg_0] push ebx test edx, edx jz short loc_7F814954 lea ecx, [edx+10h] mov ax, [ecx] mov bx, ax and bl, 3 cmp bl, 3 jz short loc_7F814923 or al, 3 mov [ecx], ax mov ebx, dword_7F838078 inc word ptr [ebx+214h] loc_7F814923: ; CODE XREF: sub_7F8148F7+18j and word ptr [ecx], 0DFFFh mov eax, dword_7F838078 cmp word ptr [eax+21Ch], 6 jnz short loc_7F81496D push edx call sub_7F812F73 shr ax, 8 mov ecx, dword_7F838078 add ecx, 23Ch cmp [ecx], ax jle short loc_7F81496D jmp short loc_7F81496A ; --------------------------------------------------------------------------- loc_7F814954: ; CODE XREF: sub_7F8148F7+7j mov ecx, dword_7F838078 add ecx, 214h mov ax, [ecx] test ax, ax jnz short loc_7F81496D inc ax loc_7F81496A: ; CODE XREF: sub_7F8148F7+5Bj mov [ecx], ax loc_7F81496D: ; CODE XREF: sub_7F8148F7+3Ej ; sub_7F8148F7+59j ... pop ebx retn 4 sub_7F8148F7 endp ; =============== S U B R O U T I N E ======================================= sub_7F814971 proc near ; CODE XREF: sub_7F814868+81p ; sub_7F816E51+C5p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov word ptr [eax+1Eh], 0 and byte ptr [eax+17h], 7Fh push eax call sub_7F8148F7 retn 4 sub_7F814971 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F814988(int, int, DWORD nNumberOfBytesToRead, int, int) sub_7F814988 proc near ; CODE XREF: sub_7F816E51+6Ap var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch nNumberOfBytesToRead= dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx lea eax, [ebp+var_4] push esi mov ebx, [ebp+arg_0] push edi push eax push [ebp+nNumberOfBytesToRead] push ebx xor edi, edi mov [ebp+var_4], edi call sub_7F812FC1 cmp eax, edi mov esi, eax jnz loc_7F814A57 mov edi, [ebp+nNumberOfBytesToRead] mov eax, 1FF8h cmp edi, eax jb short loc_7F8149BE mov edi, eax loc_7F8149BE: ; CODE XREF: sub_7F814988+32j mov ecx, [ebp+arg_C] test ecx, ecx jz short loc_7F8149CE mov eax, lpBuffer mov [eax], ecx jmp short loc_7F8149D8 ; --------------------------------------------------------------------------- loc_7F8149CE: ; CODE XREF: sub_7F814988+3Bj mov eax, [ebx] mov ecx, lpBuffer mov [ecx], eax loc_7F8149D8: ; CODE XREF: sub_7F814988+44j mov ecx, lpBuffer mov eax, [ebp+nNumberOfBytesToRead] push edi mov [ecx+4], eax push [ebp+arg_4] mov eax, lpBuffer add eax, 8 push eax call sub_7F82FCE0 add esp, 0Ch lea ecx, [edi+8] push ecx ; nNumberOfBytesToRead push lpBuffer ; int push 0FFFFFFF8h ; int push [ebp+var_4] ; int call sub_7F814D6E mov esi, eax test esi, esi jnz short loc_7F814A5B xor ebx, ebx loc_7F814A15: ; CODE XREF: sub_7F814988+CDj sub [ebp+nNumberOfBytesToRead], edi jz short loc_7F814A57 add ebx, edi add [ebp+arg_4], edi mov edi, [ebp+nNumberOfBytesToRead] cmp edi, 2000h jb short loc_7F814A2F mov edi, 2000h loc_7F814A2F: ; CODE XREF: sub_7F814988+A0j push edi push [ebp+arg_4] push lpBuffer call sub_7F82FCE0 add esp, 0Ch push edi ; nNumberOfBytesToRead push lpBuffer ; int push ebx ; int push [ebp+var_4] ; int call sub_7F814D6E mov esi, eax test esi, esi jz short loc_7F814A15 loc_7F814A57: ; CODE XREF: sub_7F814988+22j ; sub_7F814988+90j test esi, esi jz short loc_7F814A74 loc_7F814A5B: ; CODE XREF: sub_7F814988+89j cmp [ebp+var_4], 0 jz short loc_7F814A69 push [ebp+var_4] call sub_7F8147DD loc_7F814A69: ; CODE XREF: sub_7F814988+D7j mov ecx, [ebp+arg_10] xor eax, eax test ecx, ecx jz short loc_7F814A80 jmp short loc_7F814A7E ; --------------------------------------------------------------------------- loc_7F814A74: ; CODE XREF: sub_7F814988+D1j mov ecx, [ebp+arg_10] test ecx, ecx jz short loc_7F814A80 mov eax, [ebp+var_4] loc_7F814A7E: ; CODE XREF: sub_7F814988+EAj mov [ecx], eax loc_7F814A80: ; CODE XREF: sub_7F814988+E8j ; sub_7F814988+F1j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F814988 endp ; =============== S U B R O U T I N E ======================================= sub_7F814A8B proc near ; CODE XREF: sub_7F824774+67p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push 0 push [esp+4+arg_0] call sub_7F8144A4 test eax, eax jz short loc_7F814AAB mov ecx, [eax+14h] mov edx, [esp+arg_4] and ecx, 7FFFFFFFh mov [edx], ecx jmp short loc_7F814AB5 ; --------------------------------------------------------------------------- loc_7F814AAB: ; CODE XREF: sub_7F814A8B+Dj mov edx, [esp+arg_4] mov dword ptr [edx], 0 loc_7F814AB5: ; CODE XREF: sub_7F814A8B+1Ej cmp eax, 1 sbb eax, eax and eax, 1001h retn 8 sub_7F814A8B endp ; =============== S U B R O U T I N E ======================================= sub_7F814AC2 proc near ; CODE XREF: sub_7F812D74+BFp ; sub_7F814687+36p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_4] push edi mov edi, [esp+0Ch+arg_0] push ebp mov bx, [edi+10h] mov edx, [esi+14h] mov eax, [edi+14h] mov ecx, [edi+18h] xor edx, eax mov ebp, 7FFFFFFFh and edx, ebp xor edx, eax mov [edi+14h], edx mov edx, [esi+18h] mov [edi+18h], edx mov dx, [esi+10h] xor dx, bx and dx, 1010h xor dx, bx mov [edi+10h], dx mov edx, [esi+14h] xor eax, edx mov [esi+18h], ecx and eax, ebp xor eax, edx mov [esi+14h], eax mov ax, [esi+10h] push edi xor bx, ax and bx, 1010h xor bx, ax mov [esi+10h], bx and word ptr [edi+10h], 0DFFFh and word ptr [esi+10h], 0DFFFh call sub_7F8148F7 push esi call sub_7F8148F7 pop ebp pop edi pop esi pop ebx retn 8 sub_7F814AC2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F814B43(int, int, int, DWORD nNumberOfBytesToRead) sub_7F814B43 proc near ; CODE XREF: sub_7F8251BB+6Fp ; sub_7F825321+5Fp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h nNumberOfBytesToRead= dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi mov edi, [ebp+arg_4] mov esi, [ebp+nNumberOfBytesToRead] cmp edi, 0FFFFFFF8h jl short loc_7F814B63 test esi, esi jl short loc_7F814B63 lea eax, [edi+esi] test eax, eax jl short loc_7F814B63 xor eax, eax jmp short loc_7F814B68 ; --------------------------------------------------------------------------- loc_7F814B63: ; CODE XREF: sub_7F814B43+Fj ; sub_7F814B43+13j ... mov eax, 1017h loc_7F814B68: ; CODE XREF: sub_7F814B43+1Ej test eax, eax jnz short loc_7F814B9E push 0 push [ebp+arg_0] call sub_7F8144A4 mov ebx, eax test ebx, ebx jnz short loc_7F814B83 mov eax, 1001h jmp short loc_7F814B9E ; --------------------------------------------------------------------------- loc_7F814B83: ; CODE XREF: sub_7F814B43+37j test byte ptr [ebx+10h], 10h jz short loc_7F814B93 push ebx call sub_7F814BA5 test eax, eax jnz short loc_7F814B9E loc_7F814B93: ; CODE XREF: sub_7F814B43+44j push esi ; nNumberOfBytesToRead push [ebp+arg_8] ; int push edi ; int push ebx ; int call sub_7F814D6E loc_7F814B9E: ; CODE XREF: sub_7F814B43+27j ; sub_7F814B43+3Ej ... pop edi pop esi pop ebx pop ebp retn 10h sub_7F814B43 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F814BA5 proc near ; CODE XREF: sub_7F814B43+47p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov edi, [ebp+arg_0] push edi mov esi, [edi+14h] and esi, 7FFFFFFFh mov eax, [edi+4] and eax, 0FFh mov [ebp+var_8], eax call sub_7F81470D cmp word ptr [eax+1Eh], 1 mov ebx, eax ja short loc_7F814BDC push edi call sub_7F814C1A jmp short loc_7F814C11 ; --------------------------------------------------------------------------- loc_7F814BDC: ; CODE XREF: sub_7F814BA5+2Dj lea eax, [ebp+var_4] lea edx, [ebp+var_8] push eax push dword ptr [edi+4] push 0 push edx push esi push ebx call sub_7F814C62 mov esi, eax test esi, esi jnz short loc_7F814C11 push [ebp+var_4] push edi call sub_7F814AC2 mov cx, [ebx+1Ch] push [ebp+var_4] mov [edi+1Ch], cx call sub_7F8147DD mov eax, esi loc_7F814C11: ; CODE XREF: sub_7F814BA5+35j ; sub_7F814BA5+4Fj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F814BA5 endp ; =============== S U B R O U T I N E ======================================= sub_7F814C1A proc near ; CODE XREF: sub_7F814BA5+30p arg_0 = dword ptr 4 push esi push edi mov edi, [esp+8+arg_0] push edi call sub_7F81470D push eax mov esi, eax push edi call sub_7F814AC2 mov eax, [edi+14h] and eax, 7FFFFFFFh push eax push dword ptr [edi+4] push edi call sub_7F814ECA mov cx, [esi+1Ch] push esi mov [edi+1Ch], cx call sub_7F8142DB push esi call sub_7F812F73 push eax call sub_7F813BE4 xor eax, eax pop edi pop esi retn 4 sub_7F814C1A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F814C62 proc near ; CODE XREF: sub_7F814BA5+46p nNumberOfBytesToRead= dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 test byte ptr [eax+10h], 10h push ebx push esi push edi jz short loc_7F814C7E push eax call sub_7F81470D mov [ebp+arg_0], eax loc_7F814C7E: ; CODE XREF: sub_7F814C62+11j mov ebx, [ebp+arg_C] mov esi, [ebp+arg_4] push [ebp+arg_14] add ebx, esi push ebx push [ebp+arg_8] call sub_7F812FC1 test eax, eax jnz loc_7F814D5A mov edx, [ebp+arg_14] lea ecx, [esi+8] mov eax, 2000h mov edi, [edx] cmp ecx, eax jb short loc_7F814CAD mov ecx, eax loc_7F814CAD: ; CODE XREF: sub_7F814C62+47j mov eax, lpBuffer mov [ebp+nNumberOfBytesToRead], ecx lea ecx, [ebp+nNumberOfBytesToRead] push ecx ; int push eax ; lpBuffer push 0FFFFFFF8h ; int push [ebp+arg_0] ; int call sub_7F814E39 test eax, eax jnz loc_7F814D5A mov eax, [ebp+arg_10] test eax, eax jz short loc_7F814CDD mov ecx, lpBuffer mov [ecx], eax jmp short loc_7F814CEA ; --------------------------------------------------------------------------- loc_7F814CDD: ; CODE XREF: sub_7F814C62+6Fj mov eax, [ebp+arg_8] mov ecx, lpBuffer mov edx, [eax] mov [ecx], edx loc_7F814CEA: ; CODE XREF: sub_7F814C62+79j mov eax, lpBuffer mov [eax+4], ebx mov eax, lpBuffer push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push eax ; int push 0FFFFFFF8h ; int push edi ; int call sub_7F814D6E test eax, eax jnz short loc_7F814D5A sub [ebp+nNumberOfBytesToRead], 8 jns short loc_7F814D14 mov eax, 200h jmp short loc_7F814D5A ; --------------------------------------------------------------------------- loc_7F814D14: ; CODE XREF: sub_7F814C62+A9j xor ebx, ebx loc_7F814D16: ; CODE XREF: sub_7F814C62+F6j sub esi, [ebp+nNumberOfBytesToRead] jz short loc_7F814D5A add ebx, [ebp+nNumberOfBytesToRead] mov eax, esi cmp eax, 2000h jb short loc_7F814D2C mov eax, 2000h loc_7F814D2C: ; CODE XREF: sub_7F814C62+C3j mov [ebp+nNumberOfBytesToRead], eax lea eax, [ebp+nNumberOfBytesToRead] push eax ; int push lpBuffer ; lpBuffer push ebx ; int push [ebp+arg_0] ; int call sub_7F814E39 test eax, eax jnz short loc_7F814D5A push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push lpBuffer ; int push ebx ; int push edi ; int call sub_7F814D6E test eax, eax jz short loc_7F814D16 loc_7F814D5A: ; CODE XREF: sub_7F814C62+32j ; sub_7F814C62+64j ... xor ecx, ecx test eax, eax jz short loc_7F814D65 mov edx, [ebp+arg_14] mov [edx], ecx loc_7F814D65: ; CODE XREF: sub_7F814C62+FCj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F814C62 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F814D6E(int, int, int, DWORD nNumberOfBytesToRead) sub_7F814D6E proc near ; CODE XREF: sub_7F814988+80p ; sub_7F814988+C4p ... lDistanceToMove = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h nNumberOfBytesToRead= dword ptr 14h push ebp mov edx, [esp+nNumberOfBytesToRead] mov ebp, esp sub esp, 4 test edx, edx push esi push edi jnz short loc_7F814D82 xor eax, eax jmp short loc_7F814DD7 ; --------------------------------------------------------------------------- loc_7F814D82: ; CODE XREF: sub_7F814D6E+Ej cmp [ebp+arg_4], 0FFFFFFF8h jl short loc_7F814DB9 mov edi, [ebp+arg_4] mov ecx, [ebp+arg_0] mov eax, [ecx+14h] lea esi, [edx+edi] and eax, 7FFFFFFFh add eax, 87h and al, 80h cmp eax, esi jnb short loc_7F814DAB mov eax, 1002h jmp short loc_7F814DC1 ; --------------------------------------------------------------------------- loc_7F814DAB: ; CODE XREF: sub_7F814D6E+34j mov eax, [ecx+18h] lea esi, [eax+edi+8] xor eax, eax mov [ebp+lDistanceToMove], esi jmp short loc_7F814DC1 ; --------------------------------------------------------------------------- loc_7F814DB9: ; CODE XREF: sub_7F814D6E+18j mov eax, 210h mov ecx, [ebp+arg_0] loc_7F814DC1: ; CODE XREF: sub_7F814D6E+3Bj ; sub_7F814D6E+49j test eax, eax jnz short loc_7F814DD7 and word ptr [ecx+10h], 0DFFFh push edx ; nNumberOfBytesToRead push [ebp+lDistanceToMove] ; lDistanceToMove push [ebp+arg_8] ; int call sub_7F812653 loc_7F814DD7: ; CODE XREF: sub_7F814D6E+12j ; sub_7F814D6E+55j pop edi pop esi mov esp, ebp pop ebp retn 10h sub_7F814D6E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F814DDF(int, int, LPVOID lpBuffer, int) sub_7F814DDF proc near ; CODE XREF: sub_7F824E37+78p ; sub_7F825007+CBp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpBuffer = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push esi mov esi, [ebp+arg_4] cmp esi, 0FFFFFFF8h jl short loc_7F814DFD mov eax, [ebp+arg_C] mov eax, [eax] test eax, eax jl short loc_7F814DFD add eax, esi mov eax, 0 jns short loc_7F814E02 loc_7F814DFD: ; CODE XREF: sub_7F814DDF+Aj ; sub_7F814DDF+13j mov eax, 1017h loc_7F814E02: ; CODE XREF: sub_7F814DDF+1Cj test eax, eax jnz short loc_7F814E34 push 0 push [ebp+arg_0] call sub_7F8144A4 test eax, eax jnz short loc_7F814E1B mov eax, 1001h jmp short loc_7F814E34 ; --------------------------------------------------------------------------- loc_7F814E1B: ; CODE XREF: sub_7F814DDF+33j test byte ptr [eax+10h], 10h jz short loc_7F814E27 push eax call sub_7F81470D loc_7F814E27: ; CODE XREF: sub_7F814DDF+40j push [ebp+arg_C] ; int push [ebp+lpBuffer] ; lpBuffer push esi ; int push eax ; int call sub_7F814E39 loc_7F814E34: ; CODE XREF: sub_7F814DDF+25j ; sub_7F814DDF+3Aj pop esi pop ebp retn 10h sub_7F814DDF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F814E39(int, int, LPVOID lpBuffer, int) sub_7F814E39 proc near ; CODE XREF: sub_7F814C62+5Dp ; sub_7F814C62+DBp ... lDistanceToMove = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpBuffer = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp sub esp, 4 push ebx mov ecx, [ebp+arg_0] push esi push edi xor esi, esi mov edx, [ecx+14h] and edx, 7FFFFFFFh mov edi, [ebp+arg_4] mov [ebp+lDistanceToMove], edx mov edx, [ebp+arg_C] mov ebx, [edx] add ebx, edi cmp ebx, [ebp+lDistanceToMove] jbe short loc_7F814E70 mov esi, [ebp+lDistanceToMove] sub esi, edi mov [edx], esi mov esi, 1002h loc_7F814E70: ; CODE XREF: sub_7F814E39+29j mov ebx, [edx] test ebx, ebx jz short loc_7F814EBB cmp [ebp+arg_4], 0FFFFFFF8h jl short loc_7F814EA6 mov eax, [ecx+14h] add ebx, edi and eax, 7FFFFFFFh add eax, 87h and al, 80h cmp eax, ebx jnb short loc_7F814E98 mov eax, 1002h jmp short loc_7F814EAB ; --------------------------------------------------------------------------- loc_7F814E98: ; CODE XREF: sub_7F814E39+56j mov eax, [ecx+18h] lea ecx, [eax+edi+8] xor eax, eax mov [ebp+lDistanceToMove], ecx jmp short loc_7F814EAB ; --------------------------------------------------------------------------- loc_7F814EA6: ; CODE XREF: sub_7F814E39+41j mov eax, 210h loc_7F814EAB: ; CODE XREF: sub_7F814E39+5Dj ; sub_7F814E39+6Bj test eax, eax jnz short loc_7F814EC1 push edx ; int push [ebp+lDistanceToMove] ; lDistanceToMove push [ebp+lpBuffer] ; lpBuffer call sub_7F8127E7 loc_7F814EBB: ; CODE XREF: sub_7F814E39+3Bj test eax, eax jnz short loc_7F814EC1 mov eax, esi loc_7F814EC1: ; CODE XREF: sub_7F814E39+74j ; sub_7F814E39+84j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F814E39 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F814ECA proc near ; CODE XREF: sub_7F814687+4Bp ; sub_7F814868+39p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 8 mov ecx, [ebp+arg_8] push 8 ; nNumberOfBytesToRead mov [ebp+var_8], eax mov [ebp+var_4], ecx lea eax, [ebp+var_8] push eax ; int push 0FFFFFFF8h ; int push [ebp+arg_0] ; int call sub_7F814D6E mov esp, ebp pop ebp retn 0Ch sub_7F814ECA endp ; =============== S U B R O U T I N E ======================================= sub_7F814EF3 proc near ; CODE XREF: sub_7F8173E6+66p arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] push dword ptr [esi+4] push dword ptr [esi] call sub_7F82B9AC test eax, eax jnz loc_7F814F8F mov dword_7F8373D4, 0 call sub_7F824327 test eax, eax jz short loc_7F814F22 inc dword ptr [eax] jmp short loc_7F814F8D ; --------------------------------------------------------------------------- loc_7F814F22: ; CODE XREF: sub_7F814EF3+29j push 64h ; dwBytes call sub_7F8241ED mov edi, eax test edi, edi jnz short loc_7F814F36 mov eax, 400h jmp short loc_7F814F8F ; --------------------------------------------------------------------------- loc_7F814F36: ; CODE XREF: sub_7F814EF3+3Aj push edi call sub_7F82EEF2 test eax, eax jnz short loc_7F814F4C call sub_7F814F94 mov eax, 400h jmp short loc_7F814F8F ; --------------------------------------------------------------------------- loc_7F814F4C: ; CODE XREF: sub_7F814EF3+4Bj call sub_7F82435E cmp eax, 1 jnz short loc_7F814F5D push 1 call sub_7F8168AE loc_7F814F5D: ; CODE XREF: sub_7F814EF3+61j mov dword ptr [edi+60h], 0 mov word ptr [edi+40h], 10h mov ecx, [esi+8] push 8000h ; uMode mov [edi+4], ecx mov edx, [esi+0Ch] mov [edi+8], edx inc dword ptr [edi] call ds:SetErrorMode call sub_7F81EF87 call sub_7F815163 loc_7F814F8D: ; CODE XREF: sub_7F814EF3+2Dj xor eax, eax loc_7F814F8F: ; CODE XREF: sub_7F814EF3+12j ; sub_7F814EF3+41j ... pop edi pop esi retn 4 sub_7F814EF3 endp ; =============== S U B R O U T I N E ======================================= sub_7F814F94 proc near ; CODE XREF: sub_7F814EF3+4Dp ; sub_7F8173E6+1EEp ... push ebx push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F814FAC mov esi, dword_7F83709C jmp short loc_7F814FB3 ; --------------------------------------------------------------------------- loc_7F814FAC: ; CODE XREF: sub_7F814F94+Ej call sub_7F824327 mov esi, eax loc_7F814FB3: ; CODE XREF: sub_7F814F94+16j mov eax, [esi] mov edi, 0 dec eax mov [esi], eax jnz short loc_7F815033 mov eax, [esi+24h] test eax, eax jz short loc_7F814FD1 push eax ; uIDEvent push edi ; hWnd call ds:KillTimer mov [esi+24h], edi loc_7F814FD1: ; CODE XREF: sub_7F814F94+30j call sub_7F82435E cmp eax, 1 jnz short loc_7F815028 cmp dword_7F835F5C, 0 jz short loc_7F815028 mov edi, 0 jle short loc_7F815006 xor ebx, ebx loc_7F814FED: ; CODE XREF: sub_7F814F94+70j mov eax, dword_7F835F58 inc edi push dword ptr [eax+ebx] call sub_7F82F149 add ebx, 4 cmp dword_7F835F5C, edi jg short loc_7F814FED loc_7F815006: ; CODE XREF: sub_7F814F94+55j mov eax, dword_7F835F58 push eax call sub_7F82F149 xor eax, eax push eax mov dword_7F835F58, eax mov dword_7F835F5C, eax mov dword_7F835F54, eax call sub_7F8168AE loc_7F815028: ; CODE XREF: sub_7F814F94+45j ; sub_7F814F94+4Ej push esi call sub_7F82EEFA call sub_7F8242A1 loc_7F815033: ; CODE XREF: sub_7F814F94+29j pop edi pop esi pop ebx retn sub_7F814F94 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815037(LPCSTR lpCaption, int, int, char) sub_7F815037 proc near ; CODE XREF: sub_7F823870+133p ; sub_7F823870+272p ... lpCaption = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_D = byte ptr 15h push ebp mov ebp, esp push ebx push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F815052 mov edi, dword_7F83709C jmp short loc_7F815059 ; --------------------------------------------------------------------------- loc_7F815052: ; CODE XREF: sub_7F815037+11j call sub_7F824327 mov edi, eax loc_7F815059: ; CODE XREF: sub_7F815037+19j test [ebp+arg_D], 20h jnz short loc_7F81508E test edi, edi jz short loc_7F81506E mov eax, [edi+4] test eax, eax jz short loc_7F81506E mov esi, [eax] jmp short loc_7F815070 ; --------------------------------------------------------------------------- loc_7F81506E: ; CODE XREF: sub_7F815037+2Aj ; sub_7F815037+31j xor esi, esi loc_7F815070: ; CODE XREF: sub_7F815037+35j xor ebx, ebx test esi, esi jz short loc_7F815090 push esi ; hWnd call ds:IsWindow test eax, eax jnz short loc_7F815090 test edi, edi jz short loc_7F81508E mov eax, [edi+4] test eax, eax jz short loc_7F81508E mov [eax], ebx loc_7F81508E: ; CODE XREF: sub_7F815037+26j ; sub_7F815037+4Cj ... xor esi, esi loc_7F815090: ; CODE XREF: sub_7F815037+3Dj ; sub_7F815037+48j push dword ptr [ebp+14h] ; char push [ebp+arg_8] ; int push [ebp+arg_4] ; int push [ebp+lpCaption] ; lpCaption push esi ; hWnd call sub_7F8150A9 pop edi pop esi pop ebx pop ebp retn 10h sub_7F815037 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8150A9(HWND hWnd, LPCSTR lpCaption, int, int, char) sub_7F8150A9 proc near ; CODE XREF: sub_7F815037+66p var_140 = byte ptr -140h hWnd = dword ptr 8 lpCaption = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_11 = byte ptr 19h push ebp mov ebp, esp sub esp, 140h push esi push edi mov esi, [ebp+arg_8] test esi, esi jnz short loc_7F8150C2 mov esi, offset byte_7F835F50 jmp short loc_7F8150E7 ; --------------------------------------------------------------------------- loc_7F8150C2: ; CODE XREF: sub_7F8150A9+10j mov eax, [ebp+arg_C] test eax, eax jz short loc_7F8150E7 push eax lea ecx, [ebp+var_140] push esi push offset aSS_3 ; "%s %s" push 140h lea esi, [ebp+var_140] push ecx call sub_7F81AF07 loc_7F8150E7: ; CODE XREF: sub_7F8150A9+17j ; sub_7F8150A9+1Ej mov edi, [ebp+hWnd] test edi, edi jz short loc_7F8150FB push edi ; hWnd call ds:GetLastActivePopup mov edi, eax test edi, edi jnz short loc_7F815105 loc_7F8150FB: ; CODE XREF: sub_7F8150A9+43j test [ebp+arg_11], 30h jnz short loc_7F815105 or [ebp+arg_11], 20h loc_7F815105: ; CODE XREF: sub_7F8150A9+50j ; sub_7F8150A9+56j movzx eax, word ptr [ebp+18h] push eax ; uType push [ebp+lpCaption] ; lpCaption push esi ; lpText push edi ; hWnd call ds:MessageBoxA test ax, ax jnz short loc_7F81515B call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F81512E mov eax, dword_7F83709C jmp short loc_7F815133 ; --------------------------------------------------------------------------- loc_7F81512E: ; CODE XREF: sub_7F8150A9+7Cj call sub_7F824327 loc_7F815133: ; CODE XREF: sub_7F8150A9+83j test eax, eax jz short loc_7F815140 mov eax, [eax+0Ch] test eax, eax jz short loc_7F815140 mov esi, eax loc_7F815140: ; CODE XREF: sub_7F8150A9+8Cj ; sub_7F8150A9+93j mov ax, [ebp+18h] and ax, 0F0Fh or ax, 1010h movzx ecx, ax push ecx ; uType push [ebp+lpCaption] ; lpCaption push esi ; lpText push edi ; hWnd call ds:MessageBoxA loc_7F81515B: ; CODE XREF: sub_7F8150A9+6Fj pop edi pop esi mov esp, ebp pop ebp retn 14h sub_7F8150A9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F815163 proc near ; CODE XREF: sub_7F814EF3+95p var_72C = byte ptr -72Ch ReturnedString = byte ptr -42Ch sz = byte ptr -22Ch String1 = byte ptr -12Ch var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 lpKeyName = dword ptr -4 push ebp mov ebp, esp sub esp, 72Ch push ebx push esi push edi push offset aMsmail32_ini ; "msmail32.ini" push 0 ; nDefault push offset aMigrateini ; "MigrateIni" push offset aMicrosoftMail ; "Microsoft Mail" call ds:GetPrivateProfileIntA mov [ebp+var_1C], eax test eax, eax jz loc_7F81548B push offset aMsmail_ini ; "msmail.ini" lea eax, [ebp+ReturnedString] push 200h ; nSize lea esi, [ebp+ReturnedString] push eax ; lpReturnedString push offset byte_7F83D140 ; lpDefault push 0 ; lpKeyName push 0 ; lpAppName call ds:GetPrivateProfileStringA cmp [ebp+ReturnedString], 0 jz loc_7F815474 loc_7F8151C4: ; CODE XREF: sub_7F815163+30Bj push offset aCustomCommands ; "Custom Commands" push esi ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F8151FA push offset aCustomMessages ; "Custom Messages" push esi ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F8151FA push offset aProviders ; "Providers" push esi ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F8151FA mov [ebp+var_18], 0 jmp short loc_7F815201 ; --------------------------------------------------------------------------- loc_7F8151FA: ; CODE XREF: sub_7F815163+6Ej ; sub_7F815163+7Dj ... mov [ebp+var_18], 1 loc_7F815201: ; CODE XREF: sub_7F815163+95j push offset aMicrosoftMail ; "Microsoft Mail" push esi ; lpString1 call sub_7F8176C6 push offset aMsmail_ini ; "msmail.ini" lea ecx, [ebp+var_72C] push 300h ; nSize cmp eax, 1 sbb eax, eax push ecx ; lpReturnedString neg eax push offset byte_7F83D140 ; lpDefault mov [ebp+var_20], eax push 0 ; lpKeyName push esi ; lpAppName call ds:GetPrivateProfileStringA cmp [ebp+var_72C], 0 lea ecx, [ebp+var_72C] mov [ebp+lpKeyName], ecx jz loc_7F815460 loc_7F81524B: ; CODE XREF: sub_7F815163+2F7j xor edi, edi cmp [ebp+var_20], edi jz short loc_7F8152A5 push offset aMapihelp ; "MAPIHELP" push [ebp+lpKeyName] ; lpString1 call sub_7F8176C6 test eax, eax jnz short loc_7F81527A push offset aMsmail32_hlp ; "MSMAIL32.HLP" lea eax, [ebp+String1] push eax ; lpString1 call ds:lstrcpyA jmp loc_7F81542E ; --------------------------------------------------------------------------- loc_7F81527A: ; CODE XREF: sub_7F815163+FEj push offset aSpelling ; "Spelling" push [ebp+lpKeyName] ; lpString1 call sub_7F8176C6 test eax, eax jz loc_7F815444 push offset aMsgfilter ; "MsgFilter" push [ebp+lpKeyName] ; lpString1 call sub_7F8176C6 test eax, eax jnz short loc_7F8152A5 mov edi, 1 loc_7F8152A5: ; CODE XREF: sub_7F815163+EDj ; sub_7F815163+13Bj push offset aMsmail_ini ; "msmail.ini" lea eax, [ebp+String1] push 100h ; nSize push eax ; lpReturnedString push offset byte_7F83D140 ; lpDefault push [ebp+lpKeyName] ; lpKeyName push esi ; lpAppName call ds:GetPrivateProfileStringA cmp [ebp+var_1C], 65h mov [ebp+var_14], eax jz loc_7F81542E test edi, edi jz short loc_7F815302 push offset aFilter ; "filter" lea eax, [ebp+String1] push eax ; lpString1 call sub_7F8176C6 test eax, eax jnz short loc_7F815302 push offset aFilter32 ; "filter32" lea eax, [ebp+String1] push eax ; lpString1 call ds:lstrcpyA jmp loc_7F81542E ; --------------------------------------------------------------------------- loc_7F815302: ; CODE XREF: sub_7F815163+171j ; sub_7F815163+186j mov eax, [ebp+var_14] lea ecx, [ebp+sz] inc eax lea edx, [ebp+String1] push eax ; cchLength mov edi, offset off_7F835F68 push ecx ; lpsz push edx ; int call sub_7F8176EB mov [ebp+var_C], 0 cmp off_7F835F68, 0 jz loc_7F81542E loc_7F815333: ; CODE XREF: sub_7F815163+2C5j push dword ptr [edi] lea ecx, [ebp+sz] push ecx call sub_7F82FF90 add esp, 8 mov ebx, eax test ebx, ebx jz loc_7F815422 push dword ptr [edi] ; lpString call ds:lstrlenA push dword ptr [edi+4] ; lpString mov [ebp+var_10], eax call ds:lstrlenA mov [ebp+var_8], eax lea eax, [ebp+sz] sub ebx, eax add ebx, [ebp+var_C] cmp [ebp+var_C], 0 lea ebx, [ebp+ebx+String1] jz short loc_7F8153C6 push dword ptr [edi] ; lpString2 push ebx ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F8153C6 mov eax, [ebp+var_14] lea ecx, [ebp+sz] add eax, [ebp+var_C] lea edx, [ebp+String1] inc eax push eax ; cchLength push ecx ; lpsz push edx ; int call sub_7F8176EB push dword ptr [edi] lea edx, [ebp+sz] push edx call sub_7F82FF90 add esp, 8 lea ecx, [ebp+String1] lea edx, [ebp+sz] sub ecx, edx lea ebx, [ecx+eax] loc_7F8153C6: ; CODE XREF: sub_7F815163+218j ; sub_7F815163+224j mov eax, [ebp+var_8] cmp eax, [ebp+var_10] jz short loc_7F815407 lea ecx, [ebp+String1] mov edx, [ebp+var_10] sub ecx, ebx add ecx, [ebp+var_C] add ecx, [ebp+var_14] sub [ebp+var_C], edx add [ebp+var_C], eax test eax, eax jz short loc_7F8153F3 inc ecx sub eax, edx push ecx add eax, ebx push ebx push eax jmp short loc_7F8153FF ; --------------------------------------------------------------------------- loc_7F8153F3: ; CODE XREF: sub_7F815163+284j sub ecx, [ebp+var_10] mov eax, [ebp+var_10] inc ecx add eax, ebx push ecx push eax push ebx loc_7F8153FF: ; CODE XREF: sub_7F815163+28Ej call sub_7F82FCE0 add esp, 0Ch loc_7F815407: ; CODE XREF: sub_7F815163+269j cmp [ebp+var_8], 0 jz short loc_7F81541C push [ebp+var_8] push dword ptr [edi+4] push ebx call sub_7F82FCE0 add esp, 0Ch loc_7F81541C: ; CODE XREF: sub_7F815163+2A8j cmp [ebp+var_18], 0 jz short loc_7F81542E loc_7F815422: ; CODE XREF: sub_7F815163+1E5j add edi, 8 cmp dword ptr [edi], 0 jnz loc_7F815333 loc_7F81542E: ; CODE XREF: sub_7F815163+112j ; sub_7F815163+169j ... push offset aMsmail32_ini ; "msmail32.ini" lea eax, [ebp+String1] push eax ; lpString push [ebp+lpKeyName] ; lpKeyName push esi ; lpAppName call ds:WritePrivateProfileStringA loc_7F815444: ; CODE XREF: sub_7F815163+126j push [ebp+lpKeyName] ; lpString call ds:lstrlenA mov ecx, [ebp+lpKeyName] lea eax, [eax+ecx+1] mov [ebp+lpKeyName], eax cmp byte ptr [eax], 0 jnz loc_7F81524B loc_7F815460: ; CODE XREF: sub_7F815163+E2j push esi ; lpString call ds:lstrlenA lea esi, [eax+esi+1] cmp byte ptr [esi], 0 jnz loc_7F8151C4 loc_7F815474: ; CODE XREF: sub_7F815163+5Bj push offset aMsmail32_ini ; "msmail32.ini" push 0 ; lpString push offset aMigrateini ; "MigrateIni" push offset aMicrosoftMail ; "Microsoft Mail" call ds:WritePrivateProfileStringA loc_7F81548B: ; CODE XREF: sub_7F815163+28j mov eax, 1 pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F815163 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815497(int, LPCSTR lpString, int, int, int) sub_7F815497 proc near ; CODE XREF: sub_7F823D4A+54p arg_0 = dword ptr 8 lpString = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ebx push esi push edi push 5Ch mov ebx, [ebp+arg_0] push ebx call sub_7F82FCB0 add esp, 8 mov esi, eax test esi, esi jnz short loc_7F8154B8 mov eax, 205h jmp short loc_7F815504 ; --------------------------------------------------------------------------- loc_7F8154B8: ; CODE XREF: sub_7F815497+18j mov edi, [ebp+lpString] test edi, edi jz short loc_7F8154F0 mov eax, esi mov ecx, [ebp+arg_8] sub eax, ebx inc eax cmp eax, ecx jl short loc_7F8154CD mov eax, ecx loc_7F8154CD: ; CODE XREF: sub_7F815497+32j push eax push edi push ebx call sub_7F81ABAD sub ebx, esi cmp ebx, 0FFFFFFFEh jnz short loc_7F8154F0 cmp byte ptr [esi-1], 3Ah jnz short loc_7F8154F0 push [ebp+arg_8] ; int push edi ; lpString push offset unk_7F8360D0 ; int call sub_7F81ABD9 loc_7F8154F0: ; CODE XREF: sub_7F815497+26j ; sub_7F815497+43j ... mov eax, [ebp+arg_C] test eax, eax jz short loc_7F815502 push [ebp+arg_10] push eax inc esi push esi call sub_7F81ABAD loc_7F815502: ; CODE XREF: sub_7F815497+5Ej xor eax, eax loc_7F815504: ; CODE XREF: sub_7F815497+1Fj pop edi pop esi pop ebx pop ebp retn 14h sub_7F815497 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F81550B(LPCSTR pSrc) sub_7F81550B proc near ; CODE XREF: sub_7F8207A6+42Dp ; sub_7F823870+2A0p pDst = byte ptr -100h pSrc = dword ptr 4 sub esp, 100h lea eax, [esp+100h+pDst] push eax ; pDst push [esp+104h+pSrc] ; pSrc call ds:OemToCharA lea ecx, [esp+100h+pDst] push ecx ; lpFileName call sub_7F830070 add esp, 4 test eax, eax mov eax, 0 jz short loc_7F815545 call sub_7F830050 push dword ptr [eax] call sub_7F8156C0 loc_7F815545: ; CODE XREF: sub_7F81550B+2Cj add esp, 100h retn 4 sub_7F81550B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F81554E(LPCSTR pSrc, LPCSTR) sub_7F81554E proc near ; CODE XREF: sub_7F823870+23Bp ; sub_7F823870+24Ep NewFileName = byte ptr -200h pDst = byte ptr -100h pSrc = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 200h lea eax, [ebp+pDst] push eax ; pDst push [ebp+pSrc] ; pSrc call ds:OemToCharA lea ecx, [ebp+NewFileName] push ecx ; pDst push [ebp+arg_4] ; pSrc call ds:OemToCharA lea ecx, [ebp+NewFileName] lea edx, [ebp+pDst] push ecx ; lpNewFileName push edx ; lpExistingFileName call sub_7F8300A0 add esp, 8 test eax, eax mov eax, 0 jz short loc_7F8155A2 call sub_7F830050 push dword ptr [eax] call sub_7F8156C0 loc_7F8155A2: ; CODE XREF: sub_7F81554E+46j mov esp, ebp pop ebp retn 8 sub_7F81554E endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F8155A8(LPCSTR pSrc) sub_7F8155A8 proc near ; CODE XREF: sub_7F823870+1F4p ; sub_7F823D4A+FFp pDst = byte ptr -100h pSrc = dword ptr 4 sub esp, 100h lea eax, [esp+100h+pDst] push eax ; pDst push [esp+104h+pSrc] ; pSrc call ds:OemToCharA lea ecx, [esp+100h+pDst] push ecx ; lpFileName call ds:GetFileAttributesA cmp eax, 0FFFFFFFFh mov eax, 0 jnz short loc_7F8155E1 call ds:GetLastError push eax call sub_7F8156C0 loc_7F8155E1: ; CODE XREF: sub_7F8155A8+2Bj add esp, 100h retn 4 sub_7F8155A8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8155EA(LPCSTR pSrc, int) sub_7F8155EA proc near ; CODE XREF: sub_7F823870+F5p pDst = byte ptr -240h FindFileData = _WIN32_FIND_DATAA ptr -140h pSrc = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 240h push esi lea eax, [ebp+pDst] push eax ; pDst push [ebp+pSrc] ; pSrc call ds:OemToCharA lea ecx, [ebp+FindFileData] lea edx, [ebp+pDst] push ecx ; lpFindFileData push edx ; lpFileName call ds:FindFirstFileA test eax, eax mov eax, 0 jnz short loc_7F815627 call ds:GetLastError loc_7F815627: ; CODE XREF: sub_7F8155EA+35j test eax, eax jz short loc_7F815633 push eax call sub_7F8156C0 jmp short loc_7F81566A ; --------------------------------------------------------------------------- loc_7F815633: ; CODE XREF: sub_7F8155EA+3Fj mov esi, [ebp+arg_4] mov ecx, [ebp+FindFileData.nFileSizeLow] movzx eax, word ptr [ebp+FindFileData.dwFileAttributes] lea edx, [esi+8] mov [esi], eax lea eax, [esi+0Ah] mov [esi+0Ch], ecx push eax ; lpFatTime lea ecx, [ebp+FindFileData.ftLastWriteTime] push edx ; lpFatDate push ecx ; lpFileTime call ds:FileTimeToDosDateTime xor eax, eax mov [esi+4], ax mov [esi+10h], eax mov [esi+6], ax loc_7F81566A: ; CODE XREF: sub_7F8155EA+47j pop esi mov esp, ebp pop ebp retn 8 sub_7F8155EA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F815671 proc near ; CODE XREF: sub_7F823870+E8p TotalNumberOfClusters= dword ptr -14h NumberOfFreeClusters= dword ptr -10h BytesPerSector = dword ptr -0Ch SectorsPerCluster= dword ptr -8 RootPathName = byte ptr -4 var_3 = byte ptr -3 var_2 = byte ptr -2 var_1 = byte ptr -1 arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp add al, 40h sub esp, 14h lea ecx, [ebp+TotalNumberOfClusters] mov [ebp+var_3], 3Ah push ecx ; lpTotalNumberOfClusters lea edx, [ebp+NumberOfFreeClusters] push edx ; lpNumberOfFreeClusters lea ecx, [ebp+SectorsPerCluster] lea edx, [ebp+RootPathName] mov [ebp+RootPathName], al mov [ebp+var_2], 5Ch mov [ebp+var_1], 0 lea eax, [ebp+BytesPerSector] push eax ; lpBytesPerSector push ecx ; lpSectorsPerCluster push edx ; lpRootPathName call ds:GetDiskFreeSpaceA test eax, eax mov eax, 0 jz short loc_7F8156BA mov eax, [ebp+NumberOfFreeClusters] imul eax, [ebp+BytesPerSector] imul eax, [ebp+SectorsPerCluster] loc_7F8156BA: ; CODE XREF: sub_7F815671+3Cj mov esp, ebp pop ebp retn 4 sub_7F815671 endp ; =============== S U B R O U T I N E ======================================= sub_7F8156C0 proc near ; CODE XREF: sub_7F81550B+35p ; sub_7F81554E+4Fp ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] test eax, eax jz short loc_7F8156D6 cmp eax, 59h jnb short loc_7F8156D6 mov eax, dword_7F8360D8[eax*4] jmp short locret_7F8156DB ; --------------------------------------------------------------------------- loc_7F8156D6: ; CODE XREF: sub_7F8156C0+6j ; sub_7F8156C0+Bj mov eax, 200h locret_7F8156DB: ; CODE XREF: sub_7F8156C0+14j retn 4 sub_7F8156C0 endp ; =============== S U B R O U T I N E ======================================= sub_7F8156DE proc near ; CODE XREF: sub_7F815751+16Fp arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, 20h ja short loc_7F8156FC jz short loc_7F81572D test eax, eax jz short loc_7F81571B cmp eax, 2 jz short loc_7F81571F cmp eax, 3 jz short loc_7F815726 cmp eax, 5 jmp short loc_7F815717 ; --------------------------------------------------------------------------- loc_7F8156FC: ; CODE XREF: sub_7F8156DE+7j cmp eax, 35h jz short loc_7F815734 cmp eax, 41h jz short loc_7F81573B cmp eax, 70h jz short loc_7F815742 cmp eax, 0F0h jz short loc_7F815749 cmp eax, 52Eh loc_7F815717: ; CODE XREF: sub_7F8156DE+1Cj jz short loc_7F81572D jmp short loc_7F815749 ; --------------------------------------------------------------------------- loc_7F81571B: ; CODE XREF: sub_7F8156DE+Dj xor eax, eax jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F81571F: ; CODE XREF: sub_7F8156DE+12j mov eax, 202h jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F815726: ; CODE XREF: sub_7F8156DE+17j mov eax, 205h jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F81572D: ; CODE XREF: sub_7F8156DE+9j ; sub_7F8156DE:loc_7F815717j mov eax, 203h jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F815734: ; CODE XREF: sub_7F8156DE+21j mov eax, 207h jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F81573B: ; CODE XREF: sub_7F8156DE+26j mov eax, 20Dh jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F815742: ; CODE XREF: sub_7F8156DE+2Bj mov eax, 204h jmp short locret_7F81574E ; --------------------------------------------------------------------------- loc_7F815749: ; CODE XREF: sub_7F8156DE+32j ; sub_7F8156DE+3Bj mov eax, 200h locret_7F81574E: ; CODE XREF: sub_7F8156DE+3Fj ; sub_7F8156DE+46j ... retn 4 sub_7F8156DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815751(LPCSTR pSrc, __int16, int) sub_7F815751 proc near ; CODE XREF: sub_7F820E0E+44p ; sub_7F8225B6+2Bp pDst = byte ptr -10Ch var_10B = byte ptr -10Bh RootPathName = byte ptr -0Ch var_B = byte ptr -0Bh var_A = byte ptr -0Ah var_9 = byte ptr -9 dwCreationDisposition= dword ptr -4 pSrc = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10Ch push ebx push esi push edi mov esi, 80000000h mov edi, 3 mov ebx, 80h lea eax, [ebp+pDst] mov [ebp+dwCreationDisposition], edi push eax ; pDst push [ebp+pSrc] ; pSrc call ds:OemToCharA cmp [ebp+var_10B], 3Ah jnz short loc_7F8157AC mov al, [ebp+pDst] mov [ebp+var_B], 3Ah mov [ebp+var_A], 5Ch mov [ebp+var_9], 0 mov [ebp+RootPathName], al lea eax, [ebp+RootPathName] push eax ; lpRootPathName call ds:GetDriveTypeA cmp eax, 4 jmp short loc_7F8157BC ; --------------------------------------------------------------------------- loc_7F8157AC: ; CODE XREF: sub_7F815751+35j cmp [ebp+pDst], 5Ch jnz short loc_7F8157C3 cmp [ebp+var_10B], 5Ch loc_7F8157BC: ; CODE XREF: sub_7F815751+59j jnz short loc_7F8157C3 mov ebx, 80000080h loc_7F8157C3: ; CODE XREF: sub_7F815751+62j ; sub_7F815751:loc_7F8157BCj movsx eax, [ebp+arg_4] dec eax cmp eax, 11h ; switch 18 cases ja loc_7F815884 ; jumptable 7F8157D1 default case jmp ds:off_7F815949[eax*4] ; switch jump ; --------------------------------------------------------------------------- loc_7F8157D8: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o or ebx, 8000000h ; jumptable 7F8157D1 case 0 jmp loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F8157E3: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o or ebx, 8000000h ; jumptable 7F8157D1 case 1 jmp loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F8157EE: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov edi, 2 ; jumptable 7F8157D1 case 2 jmp loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F8157F8: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov edi, 1 ; jumptable 7F8157D1 case 3 or ebx, 8000000h jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815805: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o xor edi, edi ; jumptable 7F8157D1 case 4 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815809: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 40000000h ; jumptable 7F8157D1 case 5 jmp short loc_7F81587F ; --------------------------------------------------------------------------- loc_7F815810: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 40000000h ; jumptable 7F8157D1 case 6 jmp short loc_7F81587F ; --------------------------------------------------------------------------- loc_7F815817: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 40000000h ; jumptable 7F8157D1 case 7 mov edi, 2 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815823: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 40000000h ; jumptable 7F8157D1 case 8 mov edi, 1 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F81582F: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 40000000h ; jumptable 7F8157D1 case 9 xor edi, edi jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815838: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 case 12 mov edi, 2 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815844: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 case 13 mov edi, 1 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815850: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 case 14 xor edi, edi jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815859: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 case 15 xor edi, edi mov [ebp+dwCreationDisposition], 2 jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F815869: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 case 16 xor edi, edi mov ebx, 2 mov [ebp+dwCreationDisposition], ebx jmp short loc_7F815884 ; jumptable 7F8157D1 default case ; --------------------------------------------------------------------------- loc_7F81587A: ; CODE XREF: sub_7F815751+80j ; DATA XREF: .text:off_7F815949o mov esi, 0C0000000h ; jumptable 7F8157D1 cases 10,11,17 loc_7F81587F: ; CODE XREF: sub_7F815751+BDj ; sub_7F815751+C4j mov edi, 3 loc_7F815884: ; CODE XREF: sub_7F815751+7Aj ; sub_7F815751+8Dj ... push 1 ; jumptable 7F8157D1 default case call sub_7F82F323 push 0 ; hTemplateFile lea eax, [ebp+pDst] push ebx ; dwFlagsAndAttributes push [ebp+dwCreationDisposition] ; dwCreationDisposition push 0 ; lpSecurityAttributes push edi ; dwShareMode push esi ; dwDesiredAccess push eax ; lpFileName call ds:CreateFileA mov ebx, eax push 0 call sub_7F82F323 cmp ebx, 0FFFFFFFFh jnz short loc_7F8158C7 mov eax, [ebp+arg_8] mov dword ptr [eax], 0 call ds:GetLastError push eax call sub_7F8156DE jmp short loc_7F815940 ; --------------------------------------------------------------------------- loc_7F8158C7: ; CODE XREF: sub_7F815751+15Dj push 1 push 14h call sub_7F82F03B mov [eax], ebx mov esi, eax cmp [ebp+arg_4], 1 jz short loc_7F8158F7 cmp [ebp+arg_4], 2 jz short loc_7F8158F7 cmp [ebp+arg_4], 3 jz short loc_7F8158F7 cmp [ebp+arg_4], 4 jz short loc_7F8158F7 cmp [ebp+arg_4], 5 jnz short loc_7F815939 loc_7F8158F7: ; CODE XREF: sub_7F815751+188j ; sub_7F815751+18Fj ... xor edi, edi push edi ; lpName push edi ; dwMaximumSizeLow push edi ; dwMaximumSizeHigh push 2 ; flProtect push edi ; lpFileMappingAttributes push ebx ; hFile call ds:CreateFileMappingA mov [esi+4], eax test eax, eax jz short loc_7F81592C push edi ; dwNumberOfBytesToMap push edi ; dwFileOffsetLow push edi ; dwFileOffsetHigh push 4 ; dwDesiredAccess push eax ; hFileMappingObject call ds:MapViewOfFile mov [esi+8], eax cmp eax, edi jnz short loc_7F81592C push dword ptr [esi+4] ; hObject call ds:CloseHandle mov [esi+4], edi loc_7F81592C: ; CODE XREF: sub_7F815751+1BAj ; sub_7F815751+1CDj push 0 ; lpFileSizeHigh push dword ptr [esi] ; hFile call ds:GetFileSize mov [esi+0Ch], eax loc_7F815939: ; CODE XREF: sub_7F815751+1A4j mov eax, [ebp+arg_8] mov [eax], esi xor eax, eax loc_7F815940: ; CODE XREF: sub_7F815751+174j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F815751 endp ; --------------------------------------------------------------------------- off_7F815949 dd offset loc_7F8157D8 ; DATA XREF: sub_7F815751+80r dd offset loc_7F8157E3 ; jump table for switch statement dd offset loc_7F8157EE dd offset loc_7F8157F8 dd offset loc_7F815805 dd offset loc_7F815809 dd offset loc_7F815810 dd offset loc_7F815817 dd offset loc_7F815823 dd offset loc_7F81582F dd offset loc_7F81587A dd offset loc_7F81587A dd offset loc_7F815838 dd offset loc_7F815844 dd offset loc_7F815850 dd offset loc_7F815859 dd offset loc_7F815869 dd offset loc_7F81587A ; =============== S U B R O U T I N E ======================================= sub_7F815991 proc near ; CODE XREF: sub_7F812460+C6p ; sub_7F8129CD+BDp ... arg_0 = dword ptr 4 push ebx push esi mov ebx, [esp+8+arg_0] push edi push ebp mov edi, 0 push dword ptr [ebx] ; hObject call ds:CloseHandle test eax, eax jnz short loc_7F8159B2 call ds:GetLastError mov edi, eax loc_7F8159B2: ; CODE XREF: sub_7F815991+17j lea esi, [ebx+4] xor ebp, ebp cmp [esi], ebp jz short loc_7F8159CE push dword ptr [ebx+8] ; lpBaseAddress call ds:UnmapViewOfFile push dword ptr [esi] ; hObject call ds:CloseHandle mov [esi], ebp loc_7F8159CE: ; CODE XREF: sub_7F815991+28j push ebx call sub_7F82F149 mov eax, 0 test edi, edi jz short loc_7F8159E3 push edi call sub_7F8156C0 loc_7F8159E3: ; CODE XREF: sub_7F815991+4Aj pop ebp pop edi pop esi pop ebx retn 4 sub_7F815991 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8159EA proc near ; CODE XREF: sub_7F8129CD+92p ; sub_7F8129CD+19Ep TargetHandle = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push esi push edi mov edi, [ebp+arg_0] push dword ptr [edi] ; hFile call ds:FlushFileBuffers test eax, eax jnz short loc_7F815A18 mov ecx, [ebp+arg_4] mov dword ptr [ecx], 0 call ds:GetLastError push eax call sub_7F8156C0 jmp short loc_7F815A5E ; --------------------------------------------------------------------------- loc_7F815A18: ; CODE XREF: sub_7F8159EA+15j xor esi, esi call ds:GetCurrentProcess push 2 ; dwOptions lea ecx, [ebp+TargetHandle] push esi ; bInheritHandle push esi ; dwDesiredAccess push ecx ; lpTargetHandle push eax ; hTargetProcessHandle push dword ptr [edi] ; hSourceHandle push eax ; hSourceProcessHandle call ds:DuplicateHandle test eax, eax jnz short loc_7F815A49 mov ecx, [ebp+arg_4] mov [ecx], esi call ds:GetLastError push eax call sub_7F8156C0 jmp short loc_7F815A5E ; --------------------------------------------------------------------------- loc_7F815A49: ; CODE XREF: sub_7F8159EA+4Aj push 1 push 14h call sub_7F82F03B mov ecx, [ebp+TargetHandle] mov edx, [ebp+arg_4] mov [eax], ecx mov [edx], eax xor eax, eax loc_7F815A5E: ; CODE XREF: sub_7F8159EA+2Cj ; sub_7F8159EA+5Dj pop edi pop esi mov esp, ebp pop ebp retn 8 sub_7F8159EA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815A66(int, LPVOID lpBuffer, DWORD nNumberOfBytesToRead, LPDWORD lpNumberOfBytesRead) sub_7F815A66 proc near ; CODE XREF: sub_7F8127E7+57p ; sub_7F812BEA+3Cp ... ms_exc = CPPEH_RECORD ptr -18h arg_0 = dword ptr 8 lpBuffer = dword ptr 0Ch nNumberOfBytesToRead= dword ptr 10h lpNumberOfBytesRead= dword ptr 14h mov eax, large fs:0 push ebp mov ebp, esp push 0FFFFFFFFh push offset stru_7F8019D0 push offset sub_7F82FBD0 push eax mov large fs:0, esp sub esp, 0Ch push ebx push esi push edi mov [ebp+ms_exc.old_esp], esp xor eax, eax mov [ebp+ms_exc.registration.TryLevel], eax mov ebx, [ebp+arg_0] cmp [ebx+4], eax jz short loc_7F815AD7 mov esi, [ebx+10h] mov ecx, [ebx+0Ch] mov eax, [ebp+nNumberOfBytesToRead] lea edx, [esi+eax] cmp edx, ecx jbe short loc_7F815AB0 sub ecx, esi mov eax, ecx mov [ebp+nNumberOfBytesToRead], eax loc_7F815AB0: ; CODE XREF: sub_7F815A66+41j mov edi, [ebp+lpBuffer] add esi, [ebx+8] mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax and ecx, 3 rep movsb add [ebx+10h], eax mov esi, [ebp+lpNumberOfBytesRead] mov [esi], eax xor eax, eax mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh jmp short loc_7F815B39 ; --------------------------------------------------------------------------- loc_7F815AD7: ; CODE XREF: sub_7F815A66+31j mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh push 1 call sub_7F82F323 push 0 ; lpOverlapped mov esi, [ebp+lpNumberOfBytesRead] push esi ; lpNumberOfBytesRead mov edi, 0 push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+lpBuffer] ; lpBuffer push dword ptr [ebx] ; hFile call ds:ReadFile test eax, eax jnz short loc_7F815B0A call ds:GetLastError mov edi, eax loc_7F815B0A: ; CODE XREF: sub_7F815A66+9Aj xor ebx, ebx push ebx call sub_7F82F323 test edi, edi jz short loc_7F815B20 push edi mov [esi], ebx call sub_7F8156C0 jmp short loc_7F815B39 ; --------------------------------------------------------------------------- loc_7F815B20: ; CODE XREF: sub_7F815A66+AEj xor eax, eax jmp short loc_7F815B39 ; --------------------------------------------------------------------------- loc_7F815B24: ; DATA XREF: .text:stru_7F8019D0o mov eax, 1 ; Exception filter 0 for function 7F815A66 retn ; --------------------------------------------------------------------------- loc_7F815B2A: ; DATA XREF: .text:stru_7F8019D0o mov esp, [ebp+ms_exc.old_esp] ; Exception handler 0 for function 7F815A66 mov [ebp+ms_exc.registration.TryLevel], 0FFFFFFFFh mov eax, 200h loc_7F815B39: ; CODE XREF: sub_7F815A66+6Fj ; sub_7F815A66+B8j ... mov ecx, [ebp+ms_exc.registration.Next] pop edi mov large fs:0, ecx pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F815A66 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F815B4C(int, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten) sub_7F815B4C proc near ; CODE XREF: sub_7F812653+105p ; sub_7F8129CD+129p ... arg_0 = dword ptr 4 lpBuffer = dword ptr 8 nNumberOfBytesToWrite= dword ptr 0Ch lpNumberOfBytesWritten= dword ptr 10h push ebx push esi mov ebx, [esp+8+arg_0] push edi push ebp cmp dword ptr [ebx+4], 0 jz short loc_7F815B61 mov eax, 203h jmp short loc_7F815BC3 ; --------------------------------------------------------------------------- loc_7F815B61: ; CODE XREF: sub_7F815B4C+Cj mov esi, [esp+10h+nNumberOfBytesToWrite] test esi, esi jnz short loc_7F815B6D xor eax, eax jmp short loc_7F815BC3 ; --------------------------------------------------------------------------- loc_7F815B6D: ; CODE XREF: sub_7F815B4C+1Bj push 1 call sub_7F82F323 mov edi, [esp+10h+lpNumberOfBytesWritten] push 0 ; lpOverlapped push edi ; lpNumberOfBytesWritten push esi ; nNumberOfBytesToWrite push [esp+1Ch+lpBuffer] ; lpBuffer push dword ptr [ebx] ; hFile call ds:WriteFile mov ebx, 0 test eax, eax jnz short loc_7F815B99 call ds:GetLastError mov ebx, eax loc_7F815B99: ; CODE XREF: sub_7F815B4C+43j xor ebp, ebp push ebp call sub_7F82F323 test ebx, ebx jz short loc_7F815BAF push ebx mov [edi], ebp call sub_7F8156C0 jmp short loc_7F815BC3 ; --------------------------------------------------------------------------- loc_7F815BAF: ; CODE XREF: sub_7F815B4C+57j mov eax, [edi] sub eax, esi cmp eax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 215h loc_7F815BC3: ; CODE XREF: sub_7F815B4C+13j ; sub_7F815B4C+1Fj ... pop ebp pop edi pop esi pop ebx retn 10h sub_7F815B4C endp ; =============== S U B R O U T I N E ======================================= sub_7F815BCA proc near ; CODE XREF: sub_7F812C72+A0p arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp dword ptr [eax+4], 0 jz short loc_7F815BDB mov eax, 203h jmp short locret_7F815C00 ; --------------------------------------------------------------------------- loc_7F815BDB: ; CODE XREF: sub_7F815BCA+8j push dword ptr [eax] ; hFile call ds:SetEndOfFile test eax, eax mov eax, 0 jnz short loc_7F815BF2 call ds:GetLastError loc_7F815BF2: ; CODE XREF: sub_7F815BCA+20j test eax, eax jz short loc_7F815BFE push eax call sub_7F8156C0 jmp short locret_7F815C00 ; --------------------------------------------------------------------------- loc_7F815BFE: ; CODE XREF: sub_7F815BCA+2Aj xor eax, eax locret_7F815C00: ; CODE XREF: sub_7F815BCA+Fj ; sub_7F815BCA+32j retn 4 sub_7F815BCA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815C03(int, LONG lDistanceToMove, __int16) sub_7F815C03 proc near ; CODE XREF: sub_7F812653+184p ; sub_7F8127E7+32p ... dwMoveMethod = dword ptr -4 arg_0 = dword ptr 8 lDistanceToMove = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov ecx, [esp+arg_0] movsx eax, [esp+arg_8] mov ebp, esp sub esp, 4 cmp dword ptr [ecx+4], 0 jz short loc_7F815C50 cmp eax, 1 jz short loc_7F815C36 cmp eax, 2 jz short loc_7F815C3B cmp eax, 3 jz short loc_7F815C43 mov eax, [ebp+dwMoveMethod] loc_7F815C2A: ; CODE XREF: sub_7F815C03+36j ; sub_7F815C03+3Ej ... cmp [ecx+0Ch], eax jnb short loc_7F815C4B mov eax, 201h jmp short loc_7F815C97 ; --------------------------------------------------------------------------- loc_7F815C36: ; CODE XREF: sub_7F815C03+18j mov eax, [ebp+lDistanceToMove] jmp short loc_7F815C2A ; --------------------------------------------------------------------------- loc_7F815C3B: ; CODE XREF: sub_7F815C03+1Dj mov eax, [ecx+10h] add eax, [ebp+lDistanceToMove] jmp short loc_7F815C2A ; --------------------------------------------------------------------------- loc_7F815C43: ; CODE XREF: sub_7F815C03+22j mov eax, [ecx+0Ch] add eax, [ebp+lDistanceToMove] jmp short loc_7F815C2A ; --------------------------------------------------------------------------- loc_7F815C4B: ; CODE XREF: sub_7F815C03+2Aj mov [ecx+10h], eax jmp short loc_7F815C95 ; --------------------------------------------------------------------------- loc_7F815C50: ; CODE XREF: sub_7F815C03+13j cmp eax, 1 jz short loc_7F815C83 cmp eax, 2 jz short loc_7F815C87 cmp eax, 3 jz short loc_7F815C8E mov eax, [ebp+dwMoveMethod] loc_7F815C62: ; CODE XREF: sub_7F815C03+82j ; sub_7F815C03+89j ... push eax ; dwMoveMethod push 0 ; lpDistanceToMoveHigh push [ebp+lDistanceToMove] ; lDistanceToMove push dword ptr [ecx] ; hFile call ds:SetFilePointer cmp eax, 0FFFFFFFFh jnz short loc_7F815C95 call ds:GetLastError push eax call sub_7F8156C0 jmp short loc_7F815C97 ; --------------------------------------------------------------------------- loc_7F815C83: ; CODE XREF: sub_7F815C03+50j xor eax, eax jmp short loc_7F815C62 ; --------------------------------------------------------------------------- loc_7F815C87: ; CODE XREF: sub_7F815C03+55j mov eax, 1 jmp short loc_7F815C62 ; --------------------------------------------------------------------------- loc_7F815C8E: ; CODE XREF: sub_7F815C03+5Aj mov eax, 2 jmp short loc_7F815C62 ; --------------------------------------------------------------------------- loc_7F815C95: ; CODE XREF: sub_7F815C03+4Bj ; sub_7F815C03+70j xor eax, eax loc_7F815C97: ; CODE XREF: sub_7F815C03+31j ; sub_7F815C03+7Ej mov esp, ebp pop ebp retn 0Ch sub_7F815C03 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F815C9D(int, __int16, LONG lDistanceToMove, DWORD nNumberOfBytesToRead, LPVOID lpBuffer) sub_7F815C9D proc near ; CODE XREF: sub_7F812653+8Ap ; sub_7F823EA8+1Cp ... var_8 = dword ptr -8 NumberOfBytesRead= dword ptr -4 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch lDistanceToMove = dword ptr 10h nNumberOfBytesToRead= dword ptr 14h lpBuffer = dword ptr 18h push ebp xor eax, eax mov ebp, esp sub esp, 8 push esi mov [ebp+NumberOfBytesRead], eax mov esi, [ebp+arg_0] cmp [esi+4], eax jz short loc_7F815CEA cmp [ebp+arg_4], 2 jnz short loc_7F815CC2 mov eax, 203h jmp loc_7F815D9B ; --------------------------------------------------------------------------- loc_7F815CC2: ; CODE XREF: sub_7F815C9D+19j push 1 ; __int16 push [ebp+lDistanceToMove] ; lDistanceToMove push esi ; int call sub_7F815C03 test eax, eax jnz loc_7F815D9B lea eax, [ebp+var_8] push eax ; lpNumberOfBytesRead push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+lpBuffer] ; lpBuffer push esi ; int call sub_7F815A66 jmp loc_7F815D9B ; --------------------------------------------------------------------------- loc_7F815CEA: ; CODE XREF: sub_7F815C9D+12j push 0 ; dwMoveMethod push 0 ; lpDistanceToMoveHigh push [ebp+lDistanceToMove] ; lDistanceToMove push dword ptr [esi] ; hFile call ds:SetFilePointer cmp eax, 0FFFFFFFFh jnz short loc_7F815D0F call ds:GetLastError push eax call sub_7F8156C0 jmp loc_7F815D9B ; --------------------------------------------------------------------------- loc_7F815D0F: ; CODE XREF: sub_7F815C9D+5Fj cmp [ebp+arg_4], 1 push 1 jnz short loc_7F815D55 call sub_7F82F323 push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesRead] push eax ; lpNumberOfBytesRead push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+lpBuffer] ; lpBuffer push dword ptr [esi] ; hFile call ds:ReadFile mov esi, 0 test eax, eax jnz short loc_7F815D42 call ds:GetLastError mov esi, eax loc_7F815D42: ; CODE XREF: sub_7F815C9D+9Bj push 0 call sub_7F82F323 loc_7F815D49: ; CODE XREF: sub_7F815C9D+F3j test esi, esi jz short loc_7F815D99 loc_7F815D4D: ; CODE XREF: sub_7F815C9D+EBj push esi call sub_7F8156C0 jmp short loc_7F815D9B ; --------------------------------------------------------------------------- loc_7F815D55: ; CODE XREF: sub_7F815C9D+79j call sub_7F82F323 push 0 ; lpOverlapped lea eax, [ebp+NumberOfBytesRead] push eax ; lpNumberOfBytesWritten push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToWrite push [ebp+lpBuffer] ; lpBuffer push dword ptr [esi] ; hFile call ds:WriteFile mov esi, 0 test eax, eax jnz short loc_7F815D7F call ds:GetLastError mov esi, eax loc_7F815D7F: ; CODE XREF: sub_7F815C9D+D8j push 0 call sub_7F82F323 test esi, esi jnz short loc_7F815D4D mov eax, [ebp+nNumberOfBytesToRead] cmp eax, [ebp+NumberOfBytesRead] jz short loc_7F815D49 mov eax, 215h jmp short loc_7F815D9B ; --------------------------------------------------------------------------- loc_7F815D99: ; CODE XREF: sub_7F815C9D+AEj xor eax, eax loc_7F815D9B: ; CODE XREF: sub_7F815C9D+20j ; sub_7F815C9D+32j ... pop esi mov esp, ebp pop ebp retn 14h sub_7F815C9D endp ; =============== S U B R O U T I N E ======================================= sub_7F815DA2 proc near ; CODE XREF: sub_7F8225B6+A7p ; sub_7F822F66+2C7p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi cmp dword ptr [eax+4], 0 jz short loc_7F815DBA mov eax, [eax+0Ch] mov ecx, [esp+4+arg_4] mov [ecx], eax xor eax, eax jmp short loc_7F815DE3 ; --------------------------------------------------------------------------- loc_7F815DBA: ; CODE XREF: sub_7F815DA2+9j xor esi, esi push esi ; lpFileSizeHigh push dword ptr [eax] ; hFile call ds:GetFileSize mov ecx, [esp+4+arg_4] cmp eax, 0FFFFFFFFh mov [ecx], eax mov eax, 0 jnz short loc_7F815DE3 mov [ecx], esi call ds:GetLastError push eax call sub_7F8156C0 loc_7F815DE3: ; CODE XREF: sub_7F815DA2+16j ; sub_7F815DA2+31j pop esi retn 8 sub_7F815DA2 endp ; =============== S U B R O U T I N E ======================================= sub_7F815DE7 proc near ; CODE XREF: sub_7F82A7F5+4p arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp dword ptr [eax+4], 0 jnz short loc_7F815E14 push dword ptr [eax] ; hFile call ds:FlushFileBuffers test eax, eax mov eax, 0 jnz short loc_7F815E08 call ds:GetLastError loc_7F815E08: ; CODE XREF: sub_7F815DE7+19j test eax, eax jz short loc_7F815E14 push eax call sub_7F8156C0 jmp short locret_7F815E16 ; --------------------------------------------------------------------------- loc_7F815E14: ; CODE XREF: sub_7F815DE7+8j ; sub_7F815DE7+23j xor eax, eax locret_7F815E16: ; CODE XREF: sub_7F815DE7+2Bj retn 4 sub_7F815DE7 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F815E19(int, DWORD dwFileOffsetLow, DWORD nNumberOfBytesToLockLow) sub_7F815E19 proc near ; CODE XREF: sub_7F8129CD+DDp ; sub_7F8129CD+1E2p ... arg_0 = dword ptr 4 dwFileOffsetLow = dword ptr 8 nNumberOfBytesToLockLow= dword ptr 0Ch mov edx, [esp+arg_0] push 0 ; nNumberOfBytesToLockHigh push [esp+4+nNumberOfBytesToLockLow] ; nNumberOfBytesToLockLow push 0 ; dwFileOffsetHigh push [esp+0Ch+dwFileOffsetLow] ; dwFileOffsetLow push dword ptr [edx] ; hFile call ds:LockFile test eax, eax mov eax, 0 jnz short loc_7F815E40 call ds:GetLastError loc_7F815E40: ; CODE XREF: sub_7F815E19+1Fj test eax, eax jz short loc_7F815E4C push eax call sub_7F8156C0 jmp short locret_7F815E4E ; --------------------------------------------------------------------------- loc_7F815E4C: ; CODE XREF: sub_7F815E19+29j xor eax, eax locret_7F815E4E: ; CODE XREF: sub_7F815E19+31j retn 0Ch sub_7F815E19 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F815E51(int, DWORD dwFileOffsetLow, DWORD nNumberOfBytesToUnlockLow) sub_7F815E51 proc near ; CODE XREF: sub_7F820F2F+116p ; sub_7F821055+4Fp ... arg_0 = dword ptr 4 dwFileOffsetLow = dword ptr 8 nNumberOfBytesToUnlockLow= dword ptr 0Ch mov edx, [esp+arg_0] push 0 ; nNumberOfBytesToUnlockHigh push [esp+4+nNumberOfBytesToUnlockLow] ; nNumberOfBytesToUnlockLow push 0 ; dwFileOffsetHigh push [esp+0Ch+dwFileOffsetLow] ; dwFileOffsetLow push dword ptr [edx] ; hFile call ds:UnlockFile test eax, eax mov eax, 0 jnz short loc_7F815E78 call ds:GetLastError loc_7F815E78: ; CODE XREF: sub_7F815E51+1Fj test eax, eax jz short loc_7F815E84 push eax call sub_7F8156C0 jmp short locret_7F815E86 ; --------------------------------------------------------------------------- loc_7F815E84: ; CODE XREF: sub_7F815E51+29j xor eax, eax locret_7F815E86: ; CODE XREF: sub_7F815E51+31j retn 0Ch sub_7F815E51 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F815E89 proc near ; CODE XREF: sub_7F8207A6+395p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp push ebx push esi push edi xor edi, edi xor esi, esi cmp [ebp+arg_4], esi jz short loc_7F815EDF mov al, byte ptr [ebp+arg_4] test al, al jge short loc_7F815EBE cmp al, 91h jb short loc_7F815EA7 xor eax, eax jmp short loc_7F815EB2 ; --------------------------------------------------------------------------- loc_7F815EA7: ; CODE XREF: sub_7F815E89+18j movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F815EB2: ; CODE XREF: sub_7F815E89+1Cj test ah, 80h jnz short loc_7F815EDB mov edi, 1015h jmp short loc_7F815EDB ; --------------------------------------------------------------------------- loc_7F815EBE: ; CODE XREF: sub_7F815E89+14j test [ebp+arg_4], 0FFFFFF00h jz short loc_7F815EDB mov eax, 8000h push eax push eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F82CFC5 mov edi, eax loc_7F815EDB: ; CODE XREF: sub_7F815E89+2Cj ; sub_7F815E89+33j ... test edi, edi jnz short loc_7F815F4A loc_7F815EDF: ; CODE XREF: sub_7F815E89+Dj push 10h push 18h call sub_7F82F18D mov esi, eax test esi, esi jz short loc_7F815F41 mov ebx, [esi] mov eax, [ebp+arg_0] mov ecx, [ebp+arg_4] mov edx, [ebp+arg_10] push esi mov [ebx], eax mov eax, [ebp+arg_14] push offset sub_7F815FC3 push 40000h mov [ebx+4], ecx push 80h mov [ebx+10h], edx push [ebp+arg_0] mov [ebx+14h], eax call sub_7F829F2E mov [ebx+8], eax test eax, eax jz short loc_7F815F41 push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F829F2E mov [ebx+0Ch], eax test eax, eax jnz short loc_7F815F46 loc_7F815F41: ; CODE XREF: sub_7F815E89+63j ; sub_7F815E89+9Bj mov edi, 400h loc_7F815F46: ; CODE XREF: sub_7F815E89+B6j test edi, edi jz short loc_7F815F6B loc_7F815F4A: ; CODE XREF: sub_7F815E89+54j test esi, esi jz short loc_7F815F6B mov eax, [esi] mov eax, [eax+8] test eax, eax jz short loc_7F815F65 push eax push 80h push [ebp+arg_0] call sub_7F829FD2 loc_7F815F65: ; CODE XREF: sub_7F815E89+CCj push esi call sub_7F82F1E1 loc_7F815F6B: ; CODE XREF: sub_7F815E89+BFj ; sub_7F815E89+C3j xor ecx, ecx mov eax, [ebp+arg_C] test edi, edi jz short loc_7F815F78 mov [eax], ecx jmp short loc_7F815F7A ; --------------------------------------------------------------------------- loc_7F815F78: ; CODE XREF: sub_7F815E89+E9j mov [eax], esi loc_7F815F7A: ; CODE XREF: sub_7F815E89+EDj mov eax, edi pop edi pop esi pop ebx pop ebp retn 18h sub_7F815E89 endp ; =============== S U B R O U T I N E ======================================= sub_7F815F83 proc near ; CODE XREF: sub_7F815FC3+2Fp ; sub_7F8207A6+3AEp arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi mov edi, [esi] mov ebx, [edi] mov eax, [ebx+0Ch] test eax, eax jz short loc_7F815FA0 push eax push dword ptr [ebx+4] push dword ptr [ebx] call sub_7F829FD2 loc_7F815FA0: ; CODE XREF: sub_7F815F83+10j push dword ptr [ebx+8] push 80h push dword ptr [ebx] call sub_7F829FD2 push edi call sub_7F82F1E1 xor eax, eax pop edi mov dword ptr [esi], 0 pop esi pop ebx retn 4 sub_7F815F83 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F815FC3 proc near ; DATA XREF: sub_7F815E89+76o var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 mov ecx, [eax] push esi mov esi, [ebp+arg_8] mov edx, [ecx] cmp [esi+4], edx jnz short loc_7F815FF7 mov [ebp+var_4], eax mov eax, [ecx+14h] mov edx, [ecx+10h] test edx, edx jz short loc_7F815FEE push esi push [ebp+arg_4] push eax call edx loc_7F815FEE: ; CODE XREF: sub_7F815FC3+22j lea eax, [ebp+var_4] push eax call sub_7F815F83 loc_7F815FF7: ; CODE XREF: sub_7F815FC3+15j xor eax, eax pop esi mov esp, ebp pop ebp retn 0Ch sub_7F815FC3 endp ; =============== S U B R O U T I N E ======================================= sub_7F816000 proc near ; CODE XREF: sub_7F81F20F+Cp ; sub_7F826027+Fp ... call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F816014 mov eax, dword_7F83709C jmp short loc_7F816019 ; --------------------------------------------------------------------------- loc_7F816014: ; CODE XREF: sub_7F816000+Bj call sub_7F824327 loc_7F816019: ; CODE XREF: sub_7F816000+12j mov eax, [eax+14h] retn sub_7F816000 endp ; =============== S U B R O U T I N E ======================================= sub_7F81601D proc near ; DATA XREF: sub_7F816044+11Bo ; sub_7F81635D+A7o arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] mov edx, [eax] mov eax, [esp+arg_4] mov ecx, [edx+14h] mov edx, [eax] mov eax, [edx+14h] cmp eax, ecx jge short loc_7F81603A mov eax, 0FFFFFFFFh jmp short locret_7F816043 ; --------------------------------------------------------------------------- loc_7F81603A: ; CODE XREF: sub_7F81601D+14j mov eax, 1 jg short locret_7F816043 xor eax, eax locret_7F816043: ; CODE XREF: sub_7F81601D+1Bj ; sub_7F81601D+22j retn sub_7F81601D endp ; =============== S U B R O U T I N E ======================================= sub_7F816044 proc near ; CODE XREF: sub_7F81217E+9Bp ; sub_7F81217E+C5p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h arg_14 = dword ptr 18h push ebx push esi push edi push ebp call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F81605D mov esi, dword_7F83709C jmp short loc_7F816064 ; --------------------------------------------------------------------------- loc_7F81605D: ; CODE XREF: sub_7F816044+Fj call sub_7F824327 mov esi, eax loc_7F816064: ; CODE XREF: sub_7F816044+17j call sub_7F82EF02 test eax, eax jnz short loc_7F816074 xor eax, eax jmp loc_7F8161CC ; --------------------------------------------------------------------------- loc_7F816074: ; CODE XREF: sub_7F816044+27j mov eax, [esi+18h] push 0 test eax, eax jz short loc_7F8160CD mov ecx, [esi+20h] lea edx, ds:4[ecx*4] push edx push eax call sub_7F82F0CD test eax, eax jz short loc_7F8160C1 mov [esi+18h], eax loc_7F816095: ; CODE XREF: sub_7F816044+95j xor ebx, ebx push ebx push 20h call sub_7F82F03B cmp eax, ebx mov edi, eax jnz short loc_7F8160E7 cmp [esi+20h], ebx jnz short loc_7F8160B5 push dword ptr [esi+18h] call sub_7F82F149 mov [esi+18h], ebx loc_7F8160B5: ; CODE XREF: sub_7F816044+64j call sub_7F82EF31 xor eax, eax jmp loc_7F8161CC ; --------------------------------------------------------------------------- loc_7F8160C1: ; CODE XREF: sub_7F816044+4Cj call sub_7F82EF31 xor eax, eax jmp loc_7F8161CC ; --------------------------------------------------------------------------- loc_7F8160CD: ; CODE XREF: sub_7F816044+37j push 4 call sub_7F82F03B mov [esi+18h], eax test eax, eax jnz short loc_7F816095 call sub_7F82EF31 xor eax, eax jmp loc_7F8161CC ; --------------------------------------------------------------------------- loc_7F8160E7: ; CODE XREF: sub_7F816044+5Fj mov ax, [edi] mov ecx, [esp+10h+arg_14] and ax, 0FFFDh mov ebx, ecx mov [edi], ax and ebx, 20h and ax, 0FFFBh cmp ebx, 1 sbb edx, edx neg edx xor dx, ax mov ebp, [esp+10h+arg_4] and dx, 1 xor dx, ax mov [edi], ax mov eax, [esp+10h+arg_0] mov [edi], dx mov edx, [esp+10h+arg_8] mov [edi+4], eax mov eax, [esp+10h+arg_C] mov [edi+8], ebp mov [edi+0Ch], edx mov [edi+10h], ecx mov ecx, [esp+10h+arg_10] mov [edi+14h], eax mov [edi+18h], ecx call ds:GetTickCount mov [edi+1Ch], eax mov edx, [esi+20h] mov ecx, [esi+18h] mov [ecx+edx*4], edi mov edx, [esi+20h] inc edx mov [esi+20h], edx cmp edx, 1 jle short loc_7F816192 mov ecx, [esi+18h] mov eax, [esi+1Ch] push offset sub_7F81601D push 4 mov ebp, [ecx+eax*4] push edx push ecx call sub_7F8300E0 add esp, 10h xor ecx, ecx mov edx, [esi+20h] cmp edx, ecx jle short loc_7F816199 mov eax, [esi+18h] loc_7F81617F: ; CODE XREF: sub_7F816044+145j cmp [eax], ebp jz short loc_7F81618D add eax, 4 inc ecx cmp ecx, edx jl short loc_7F81617F jmp short loc_7F816199 ; --------------------------------------------------------------------------- loc_7F81618D: ; CODE XREF: sub_7F816044+13Dj mov [esi+1Ch], ecx jmp short loc_7F816199 ; --------------------------------------------------------------------------- loc_7F816192: ; CODE XREF: sub_7F816044+113j mov dword ptr [esi+1Ch], 0 loc_7F816199: ; CODE XREF: sub_7F816044+136j ; sub_7F816044+147j ... xor ebp, ebp test ebx, ebx jnz short loc_7F8161C5 add esi, 24h mov eax, [esi] test eax, eax jz short loc_7F8161B2 push eax ; uIDEvent push ebp ; hWnd call ds:KillTimer mov [esi], ebp loc_7F8161B2: ; CODE XREF: sub_7F816044+162j push offset TimerFunc ; lpTimerFunc push 1 ; uElapse push 0 ; nIDEvent push 0 ; hWnd call ds:SetTimer mov [esi], eax loc_7F8161C5: ; CODE XREF: sub_7F816044+159j call sub_7F82EF31 mov eax, edi loc_7F8161CC: ; CODE XREF: sub_7F816044+2Bj ; sub_7F816044+78j ... pop ebp pop edi pop esi pop ebx retn 18h sub_7F816044 endp ; =============== S U B R O U T I N E ======================================= sub_7F8161D3 proc near ; CODE XREF: sub_7F812460+18Dp ; sub_7F812632+10p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F8161EB mov edi, dword_7F83709C jmp short loc_7F8161F2 ; --------------------------------------------------------------------------- loc_7F8161EB: ; CODE XREF: sub_7F8161D3+Ej call sub_7F824327 mov edi, eax loc_7F8161F2: ; CODE XREF: sub_7F8161D3+16j call sub_7F82EF02 test eax, eax jz short loc_7F81624F mov esi, [esp+0Ch+arg_0] mov ebx, [esp+0Ch+arg_4] mov ax, [esi] mov ecx, ebx xor cx, ax and cx, 1 xor cx, ax mov [esi], cx call ds:GetTickCount mov [esi+1Ch], eax xor esi, esi test ebx, ebx jz short loc_7F81624A add edi, 24h mov eax, [edi] test eax, eax jz short loc_7F816237 push eax ; uIDEvent push esi ; hWnd call ds:KillTimer mov [edi], esi loc_7F816237: ; CODE XREF: sub_7F8161D3+58j push offset TimerFunc ; lpTimerFunc push 1 ; uElapse push 0 ; nIDEvent push 0 ; hWnd call ds:SetTimer mov [edi], eax loc_7F81624A: ; CODE XREF: sub_7F8161D3+4Fj call sub_7F82EF31 loc_7F81624F: ; CODE XREF: sub_7F8161D3+26j pop edi pop esi pop ebx retn 8 sub_7F8161D3 endp ; =============== S U B R O U T I N E ======================================= sub_7F816255 proc near ; CODE XREF: sub_7F81217E+15Dp ; sub_7F81217E+17Cp ... var_4 = dword ptr -4 arg_0 = dword ptr 4 sub esp, 4 push ebx push esi push edi push ebp call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F816271 mov edi, dword_7F83709C jmp short loc_7F816278 ; --------------------------------------------------------------------------- loc_7F816271: ; CODE XREF: sub_7F816255+12j call sub_7F824327 mov edi, eax loc_7F816278: ; CODE XREF: sub_7F816255+1Aj call sub_7F82EF02 test eax, eax jz loc_7F816353 xor esi, esi lea ebx, [edi+20h] mov ecx, [ebx] cmp ecx, esi jle short loc_7F8162A5 mov eax, [edi+18h] mov edx, [esp+14h+arg_0] loc_7F816297: ; CODE XREF: sub_7F816255+4Cj cmp [eax], edx jz short loc_7F8162AD add eax, 4 inc esi cmp ecx, esi jg short loc_7F816297 jmp short loc_7F8162A9 ; --------------------------------------------------------------------------- loc_7F8162A5: ; CODE XREF: sub_7F816255+39j mov edx, [esp+14h+arg_0] loc_7F8162A9: ; CODE XREF: sub_7F816255+4Ej mov esi, [esp+14h+var_4] loc_7F8162AD: ; CODE XREF: sub_7F816255+44j mov ax, [edx] test al, 2 jz short loc_7F8162C5 or al, 4 mov [edx], ax and ax, 0FFFEh mov [edx], ax jmp loc_7F81634E ; --------------------------------------------------------------------------- loc_7F8162C5: ; CODE XREF: sub_7F816255+5Dj push edx call sub_7F82F149 mov eax, [ebx] cmp eax, 1 jnz short loc_7F8162F3 push dword ptr [edi+18h] call sub_7F82F149 xor ebp, ebp mov [edi+18h], ebp mov eax, [edi+24h] test eax, eax jz short loc_7F81632D push eax ; uIDEvent push ebp ; hWnd call ds:KillTimer mov [edi+24h], ebp jmp short loc_7F81632D ; --------------------------------------------------------------------------- loc_7F8162F3: ; CODE XREF: sub_7F816255+7Bj mov ecx, esi dec eax cmp eax, esi jle short loc_7F816316 lea edx, ds:0[esi*4] loc_7F816301: ; CODE XREF: sub_7F816255+BFj mov eax, [edi+18h] inc ecx add eax, edx add edx, 4 mov ebp, [eax+4] mov [eax], ebp mov eax, [ebx] dec eax cmp eax, ecx jg short loc_7F816301 loc_7F816316: ; CODE XREF: sub_7F816255+A3j push 0 mov eax, [ebx] lea ecx, ds:0FFFFFFFCh[eax*4] push ecx push dword ptr [edi+18h] call sub_7F82F0CD mov [edi+18h], eax loc_7F81632D: ; CODE XREF: sub_7F816255+8Fj ; sub_7F816255+9Cj mov ecx, [ebx] add edi, 1Ch dec ecx mov [ebx], ecx mov eax, [edi] cmp eax, esi jnz short loc_7F816347 dec eax mov [edi], eax jns short loc_7F81634E mov eax, [ebx] dec eax mov [edi], eax jmp short loc_7F81634E ; --------------------------------------------------------------------------- loc_7F816347: ; CODE XREF: sub_7F816255+E4j cmp eax, ecx jl short loc_7F81634E dec ecx mov [edi], ecx loc_7F81634E: ; CODE XREF: sub_7F816255+6Bj ; sub_7F816255+E9j ... call sub_7F82EF31 loc_7F816353: ; CODE XREF: sub_7F816255+2Aj pop ebp pop edi pop esi pop ebx add esp, 4 retn 4 sub_7F816255 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81635D proc near ; CODE XREF: sub_7F81F20F+84p ; sub_7F81F20F+CBp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp push ebx push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F816378 mov esi, dword_7F83709C jmp short loc_7F81637F ; --------------------------------------------------------------------------- loc_7F816378: ; CODE XREF: sub_7F81635D+11j call sub_7F824327 mov esi, eax loc_7F81637F: ; CODE XREF: sub_7F81635D+19j call sub_7F82EF02 test eax, eax jz loc_7F816461 xor ecx, ecx lea ebx, [esi+20h] mov edx, [ebx] cmp edx, ecx jle short loc_7F8163AB mov eax, [esi+18h] mov edi, [ebp+arg_0] loc_7F81639D: ; CODE XREF: sub_7F81635D+4Aj cmp [eax], edi jz short loc_7F8163AE add eax, 4 inc ecx cmp ecx, edx jl short loc_7F81639D jmp short loc_7F8163AE ; --------------------------------------------------------------------------- loc_7F8163AB: ; CODE XREF: sub_7F81635D+38j mov edi, [ebp+arg_0] loc_7F8163AE: ; CODE XREF: sub_7F81635D+42j ; sub_7F81635D+4Cj call ds:GetTickCount mov ecx, [ebp+arg_18] mov [edi+1Ch], eax test cl, 1 jz short loc_7F8163C5 mov eax, [ebp+arg_4] mov [edi+4], eax loc_7F8163C5: ; CODE XREF: sub_7F81635D+60j test cl, 2 jz short loc_7F8163D0 mov eax, [ebp+arg_8] mov [edi+8], eax loc_7F8163D0: ; CODE XREF: sub_7F81635D+6Bj mov edx, ecx and edx, 4 jz short loc_7F8163DD mov eax, [ebp+arg_C] mov [edi+14h], eax loc_7F8163DD: ; CODE XREF: sub_7F81635D+78j test cl, 8 jz short loc_7F8163E8 mov eax, [ebp+arg_10] mov [edi+18h], eax loc_7F8163E8: ; CODE XREF: sub_7F81635D+83j test cl, 10h jz short loc_7F8163F3 mov eax, [ebp+arg_14] mov [edi+10h], eax loc_7F8163F3: ; CODE XREF: sub_7F81635D+8Ej test edx, edx jz short loc_7F816434 mov edx, [ebx] cmp edx, 1 jle short loc_7F816434 mov ecx, [esi+18h] mov eax, [esi+1Ch] push offset sub_7F81601D push 4 mov edi, [ecx+eax*4] push edx push ecx call sub_7F8300E0 add esp, 10h xor edx, edx mov ecx, [ebx] cmp ecx, edx jle short loc_7F816434 mov eax, [esi+18h] loc_7F816423: ; CODE XREF: sub_7F81635D+D0j cmp [eax], edi jz short loc_7F816431 add eax, 4 inc edx cmp edx, ecx jl short loc_7F816423 jmp short loc_7F816434 ; --------------------------------------------------------------------------- loc_7F816431: ; CODE XREF: sub_7F81635D+C8j mov [esi+1Ch], edx loc_7F816434: ; CODE XREF: sub_7F81635D+98j ; sub_7F81635D+9Fj ... add esi, 24h xor edi, edi mov eax, [esi] test eax, eax jz short loc_7F816449 push eax ; uIDEvent push edi ; hWnd call ds:KillTimer mov [esi], edi loc_7F816449: ; CODE XREF: sub_7F81635D+E0j push offset TimerFunc ; lpTimerFunc push 1 ; uElapse push 0 ; nIDEvent push 0 ; hWnd call ds:SetTimer mov [esi], eax call sub_7F82EF31 loc_7F816461: ; CODE XREF: sub_7F81635D+29j pop edi pop esi pop ebx pop ebp retn 1Ch sub_7F81635D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F816468 proc near ; CODE XREF: TimerFunc+19p var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch push ebx push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F816489 mov ecx, dword_7F83709C mov [ebp+var_8], ecx jmp short loc_7F816491 ; --------------------------------------------------------------------------- loc_7F816489: ; CODE XREF: sub_7F816468+14j call sub_7F824327 mov [ebp+var_8], eax loc_7F816491: ; CODE XREF: sub_7F816468+1Fj call ds:__imp_GetCurrentProcessId push eax call sub_7F82F311 mov dword_7F836274, 1 call sub_7F82EF02 test eax, eax jnz short loc_7F8164C1 mov dword_7F836274, 0 xor eax, eax jmp loc_7F8167E1 ; --------------------------------------------------------------------------- loc_7F8164C1: ; CODE XREF: sub_7F816468+46j mov esi, [ebp+arg_0] mov edi, 0 and esi, 8 jnz short loc_7F8164E6 mov ecx, [ebp+var_8] mov eax, [ecx+24h] test eax, eax jz short loc_7F8164E6 push eax ; uIDEvent push edi ; hWnd call ds:KillTimer mov ecx, [ebp+var_8] mov [ecx+24h], edi loc_7F8164E6: ; CODE XREF: sub_7F816468+64j ; sub_7F816468+6Ej mov ecx, [ebp+var_8] xor edi, edi add ecx, 20h mov [ebp+var_14], ecx cmp [ecx], edi jnz short loc_7F816507 call sub_7F82EF31 xor eax, eax mov dword_7F836274, edi jmp loc_7F8167E1 ; --------------------------------------------------------------------------- loc_7F816507: ; CODE XREF: sub_7F816468+8Bj mov eax, [ebp+arg_0] mov ecx, [ebp+var_8] test esi, esi mov [ecx+10h], eax jz short loc_7F816528 add ecx, 18h mov [ebp+var_4], ecx mov eax, [ecx] mov edx, [eax] cmp dword ptr [edx+14h], 0 jl loc_7F816629 loc_7F816528: ; CODE XREF: sub_7F816468+AAj xor edi, edi call ds:GetTickCount mov ecx, [ebp+var_8] mov edx, [ebp+var_8] add ecx, 1Ch add edx, 18h mov [ebp+var_1C], eax mov [ebp+var_C], ecx mov ecx, [ecx] mov eax, [edx] mov [ebp+var_4], edx mov ecx, [eax+ecx*4] mov eax, [ebp+var_14] mov edx, [ecx+14h] mov [ebp+var_18], edx mov eax, [eax] mov [ebp+var_10], eax cmp eax, edi jle short loc_7F8165AB loc_7F81655E: ; CODE XREF: sub_7F816468+141j test esi, esi jz short loc_7F816578 mov eax, [ebp+var_4] mov ecx, [eax] mov edx, [ecx+edi*4] cmp dword ptr [edx+14h], 0 jl loc_7F816629 test esi, esi jnz short loc_7F816586 loc_7F816578: ; CODE XREF: sub_7F816468+F8j mov eax, [ebp+var_4] mov ecx, [eax] mov edx, [ecx+edi*4] cmp dword ptr [edx+14h], 0 jg short loc_7F8165A3 loc_7F816586: ; CODE XREF: sub_7F816468+10Ej mov eax, [ebp+var_4] mov edx, [eax] mov eax, [ebp+var_18] mov ecx, [edx+edi*4] cmp [ecx+14h], eax jz short loc_7F8165C6 push edi push [ebp+arg_0] call sub_7F8167EA test eax, eax jnz short loc_7F8165CB loc_7F8165A3: ; CODE XREF: sub_7F816468+11Cj inc edi mov eax, [ebp+var_14] cmp [eax], edi jg short loc_7F81655E loc_7F8165AB: ; CODE XREF: sub_7F816468+F4j ; sub_7F816468+161j mov eax, [ebp+var_14] mov ebx, [eax] cmp ebx, [ebp+var_10] jz short loc_7F816629 mov eax, [ebp+var_C] mov ecx, [eax] lea edi, [ecx+1] cmp ebx, edi jg short loc_7F8165D5 mov edi, [ebp+var_10] jmp short loc_7F8165EA ; --------------------------------------------------------------------------- loc_7F8165C6: ; CODE XREF: sub_7F816468+12Cj mov [ebp+var_10], edi jmp short loc_7F8165AB ; --------------------------------------------------------------------------- loc_7F8165CB: ; CODE XREF: sub_7F816468+139j mov eax, [ebp+var_C] mov [eax], edi jmp loc_7F8166E9 ; --------------------------------------------------------------------------- loc_7F8165D5: ; CODE XREF: sub_7F816468+157j mov eax, [ebp+var_4] mov eax, [eax] mov edx, [eax+edi*4] mov eax, [ebp+var_18] cmp [edx+14h], eax jz short loc_7F8165EA mov edi, [ebp+var_10] mov ebx, edi loc_7F8165EA: ; CODE XREF: sub_7F816468+15Cj ; sub_7F816468+17Bj cmp ecx, edi jnz loc_7F8166B9 push ecx push [ebp+arg_0] call sub_7F8167EA test eax, eax jnz loc_7F8166E9 mov eax, [ebp+var_C] mov ebx, [eax] inc ebx loc_7F816609: ; CODE XREF: sub_7F816468+26Fj mov eax, [ebp+var_14] cmp [eax], ebx jle short loc_7F816629 loc_7F816610: ; CODE XREF: sub_7F816468+1BFj push ebx push [ebp+arg_0] call sub_7F8167EA test eax, eax jnz loc_7F8166E4 inc ebx mov eax, [ebp+var_14] cmp [eax], ebx jg short loc_7F816610 loc_7F816629: ; CODE XREF: sub_7F816468+BAj ; sub_7F816468+106j ... mov [ebp+var_C], 0 loc_7F816630: ; CODE XREF: sub_7F816468+2FEj test esi, esi jnz loc_7F8167CF mov esi, 0FFFFFFFFh mov eax, [ebp+var_4] mov ecx, [eax] xor edi, edi mov eax, [ebp+var_14] mov [ebp+var_4], ecx mov [ebp+var_10], 0 cmp [eax], edi jle loc_7F8167AD loc_7F816659: ; CODE XREF: sub_7F816468+33Bj mov eax, [ebp+var_4] mov ebx, [eax] test byte ptr [ebx], 1 jz loc_7F816799 mov [ebp+var_10], 1 cmp dword ptr [ebx+14h], 0 jg loc_7F8167AB mov eax, [ebx+10h] test al, 2 jz loc_7F81676B push edi push [ebp+arg_0] call sub_7F8167EA test eax, eax jnz loc_7F8167AB mov eax, [ebx+18h] cmp eax, esi jb short loc_7F81669D mov eax, esi loc_7F81669D: ; CODE XREF: sub_7F816468+231j mov esi, eax jmp loc_7F816799 ; --------------------------------------------------------------------------- loc_7F8166A4: ; CODE XREF: sub_7F816468+256j mov eax, [ebp+var_4] mov edx, [eax] mov eax, [ebp+var_18] mov ecx, [edx+edi*4] cmp [ecx+14h], eax jz short loc_7F8166C5 mov edi, [ebp+var_10] mov ebx, edi loc_7F8166B9: ; CODE XREF: sub_7F816468+184j ; sub_7F816468+25Bj ... mov eax, [ebp+var_14] cmp [eax], edi jg short loc_7F8166A4 mov edi, [ebp+var_10] jmp short loc_7F8166B9 ; --------------------------------------------------------------------------- loc_7F8166C5: ; CODE XREF: sub_7F816468+24Aj push edi push [ebp+arg_0] call sub_7F8167EA test eax, eax mov eax, [ebp+var_C] jnz short loc_7F8166E0 cmp [eax], edi jz loc_7F816609 inc edi jmp short loc_7F8166B9 ; --------------------------------------------------------------------------- loc_7F8166E0: ; CODE XREF: sub_7F816468+26Bj mov [eax], edi jmp short loc_7F8166E9 ; --------------------------------------------------------------------------- loc_7F8166E4: ; CODE XREF: sub_7F816468+1B3j mov eax, [ebp+var_C] mov [eax], ebx loc_7F8166E9: ; CODE XREF: sub_7F816468+168j ; sub_7F816468+195j ... mov eax, [ebp+var_C] mov edx, [ebp+var_4] mov ecx, [eax] mov eax, [edx] mov ebx, [eax+ecx*4] mov ecx, [ebp+var_1C] mov [ebx+1Ch], ecx or byte ptr [ebx], 2 call sub_7F82EF31 push dword ptr [ebx+0Ch] push dword ptr [ebx+8] call dword ptr [ebx+4] call sub_7F82EF02 test eax, eax jnz short loc_7F816727 mov dword_7F836274, 0 xor eax, eax jmp loc_7F8167E1 ; --------------------------------------------------------------------------- loc_7F816727: ; CODE XREF: sub_7F816468+2ACj xor edi, edi test esi, esi jnz short loc_7F816745 mov ecx, [ebp+var_8] mov eax, [ecx+24h] test eax, eax jz short loc_7F816745 push eax ; uIDEvent push edi ; hWnd call ds:KillTimer mov ecx, [ebp+var_8] mov [ecx+24h], edi loc_7F816745: ; CODE XREF: sub_7F816468+2C3j ; sub_7F816468+2CDj mov ax, [ebx] and ax, 0FFFDh mov [ebx], ax test byte ptr [ebx+10h], 40h jnz short loc_7F816759 test al, 4 jz short loc_7F81675F loc_7F816759: ; CODE XREF: sub_7F816468+2EBj push ebx call sub_7F816255 loc_7F81675F: ; CODE XREF: sub_7F816468+2EFj mov [ebp+var_C], 1 jmp loc_7F816630 ; --------------------------------------------------------------------------- loc_7F81676B: ; CODE XREF: sub_7F816468+215j test al, 1 jz short loc_7F81678F push [ebp+var_1C] push dword_7F83626C call sub_7F816895 cmp eax, [ebx+18h] jnb short loc_7F8167AB mov eax, [ebx+18h] cmp eax, esi jb short loc_7F81678B mov eax, esi loc_7F81678B: ; CODE XREF: sub_7F816468+31Fj mov esi, eax jmp short loc_7F816799 ; --------------------------------------------------------------------------- loc_7F81678F: ; CODE XREF: sub_7F816468+305j cmp esi, 5 jb short loc_7F816799 mov esi, 5 loc_7F816799: ; CODE XREF: sub_7F816468+1F9j ; sub_7F816468+237j ... inc edi mov eax, [ebp+var_14] add [ebp+var_4], 4 cmp [eax], edi jg loc_7F816659 jmp short loc_7F8167AD ; --------------------------------------------------------------------------- loc_7F8167AB: ; CODE XREF: sub_7F816468+20Aj ; sub_7F816468+226j ... xor esi, esi loc_7F8167AD: ; CODE XREF: sub_7F816468+1EBj ; sub_7F816468+341j xor ecx, ecx cmp [ebp+var_10], ecx jz short loc_7F8167CF imul si, 0Ah movzx eax, si push offset TimerFunc ; lpTimerFunc push eax ; uElapse push ecx ; nIDEvent push ecx ; hWnd call ds:SetTimer mov ecx, [ebp+var_8] mov [ecx+24h], eax loc_7F8167CF: ; CODE XREF: sub_7F816468+1CAj ; sub_7F816468+34Aj call sub_7F82EF31 mov dword_7F836274, 0 mov eax, [ebp+var_C] loc_7F8167E1: ; CODE XREF: sub_7F816468+54j ; sub_7F816468+9Aj ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F816468 endp ; =============== S U B R O U T I N E ======================================= sub_7F8167EA proc near ; CODE XREF: sub_7F816468+132p ; sub_7F816468+18Ep ... arg_4 = dword ptr 8 push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F816801 mov edi, dword_7F83709C jmp short loc_7F816808 ; --------------------------------------------------------------------------- loc_7F816801: ; CODE XREF: sub_7F8167EA+Dj call sub_7F824327 mov edi, eax loc_7F816808: ; CODE XREF: sub_7F8167EA+15j call ds:GetTickCount mov edx, [edi+18h] mov ecx, [esp+8+arg_4] cmp dword ptr [edi+14h], 0 mov esi, [edx+ecx*4] jz short loc_7F816822 xor eax, eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F816822: ; CODE XREF: sub_7F8167EA+32j mov cx, [esi] test cl, 2 jz short loc_7F81682E xor eax, eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F81682E: ; CODE XREF: sub_7F8167EA+3Ej test cl, 1 jnz short loc_7F816837 xor eax, eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F816837: ; CODE XREF: sub_7F8167EA+47j mov ecx, [esi+10h] test cl, 4 jz short loc_7F81685C mov edx, dword_7F83626C cmp [esi+1Ch], edx jb short loc_7F81684E xor eax, eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F81684E: ; CODE XREF: sub_7F8167EA+5Ej test cl, 1 jz short loc_7F81688B push eax push dword_7F83626C jmp short loc_7F81687E ; --------------------------------------------------------------------------- loc_7F81685C: ; CODE XREF: sub_7F8167EA+53j test cl, 1 jz short loc_7F816875 push eax push dword_7F83626C call sub_7F816895 cmp eax, [esi+18h] sbb eax, eax inc eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F816875: ; CODE XREF: sub_7F8167EA+75j test cl, 2 jz short loc_7F81688B push eax push dword ptr [esi+1Ch] loc_7F81687E: ; CODE XREF: sub_7F8167EA+70j call sub_7F816895 cmp eax, [esi+18h] sbb eax, eax inc eax jmp short loc_7F816890 ; --------------------------------------------------------------------------- loc_7F81688B: ; CODE XREF: sub_7F8167EA+67j ; sub_7F8167EA+8Ej mov eax, 1 loc_7F816890: ; CODE XREF: sub_7F8167EA+36j ; sub_7F8167EA+42j ... pop edi pop esi retn 8 sub_7F8167EA endp ; =============== S U B R O U T I N E ======================================= sub_7F816895 proc near ; CODE XREF: sub_7F816468+310p ; sub_7F8167EA+7Ep ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] mov ecx, 0Ah sub eax, [esp+arg_0] cdq xor eax, edx sub eax, edx sub edx, edx div ecx retn 8 sub_7F816895 endp ; =============== S U B R O U T I N E ======================================= sub_7F8168AE proc near ; CODE XREF: sub_7F814EF3+65p ; sub_7F814F94+8Fp call ds:GetTickCount mov dword_7F83626C, eax retn 4 sub_7F8168AE endp ; =============== S U B R O U T I N E ======================================= ; void __stdcall TimerFunc(HWND, UINT, UINT, DWORD) TimerFunc proc near ; DATA XREF: sub_7F816044:loc_7F8161B2o ; sub_7F8161D3:loc_7F816237o ... push esi call sub_7F82F30B mov esi, eax call ds:__imp_GetCurrentProcessId cmp eax, esi jz short loc_7F8168D3 call sub_7F82F26E loc_7F8168D3: ; CODE XREF: TimerFunc+10j push 0 call sub_7F816468 call ds:__imp_GetCurrentProcessId cmp eax, esi jz short loc_7F8168E9 call sub_7F82F2D1 loc_7F8168E9: ; CODE XREF: TimerFunc+26j pop esi retn 10h TimerFunc endp ; =============== S U B R O U T I N E ======================================= sub_7F8168ED proc near ; CODE XREF: sub_7F812408+13p ; sub_7F81F20F:loc_7F81F24Bp ... call ds:GetTickCount sub eax, dword_7F83626C mov ecx, 0Ah sub edx, edx div ecx retn sub_7F8168ED endp ; =============== S U B R O U T I N E ======================================= sub_7F816903 proc near ; CODE XREF: sub_7F8110F6+1Cp ; sub_7F8110F6+36p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov edi, [esp+8+arg_0] test edi, edi jnz short loc_7F816914 mov edi, 200h jmp short loc_7F816917 ; --------------------------------------------------------------------------- loc_7F816914: ; CODE XREF: sub_7F816903+8j add edi, 14h loc_7F816917: ; CODE XREF: sub_7F816903+Fj add edi, 87h mov esi, 0 and edi, 0FFFFFF80h sub edi, 8 cmp [esp+8+arg_4], 1 adc esi, 0FFFFFFFFh and esi, 20h push esi push edi call sub_7F82F18D test eax, eax jnz short loc_7F816953 mov edi, 0Eh push esi push 78h call sub_7F82F18D test eax, eax jnz short loc_7F816953 xor eax, eax jmp short loc_7F816987 ; --------------------------------------------------------------------------- loc_7F816953: ; CODE XREF: sub_7F816903+39j ; sub_7F816903+4Aj mov esi, [eax] lea ecx, [edi-8] sub di, 0Eh xor edx, edx mov [esi], cx mov [esi+2], dx mov [esi+4], di movzx ecx, word ptr [esi] mov [ecx+esi+6], dx movzx edx, word ptr [esi] mov dword ptr [edx+esi], 0FFFFFFFFh mov di, [esi+2] movzx ecx, word ptr [esi] mov [ecx+esi+4], di loc_7F816987: ; CODE XREF: sub_7F816903+4Ej pop edi pop esi retn 8 sub_7F816903 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81698C proc near ; CODE XREF: sub_7F8107B6+93p ; sub_7F811343+A4p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp push ebx push esi mov ecx, [eax] push edi xor esi, esi cmp [ebp+arg_4], 0FFFFFFFFh mov edi, [ecx] jnz short loc_7F8169B6 loc_7F8169A2: ; CODE XREF: sub_7F81698C+28j call sub_7F82AC0C push eax mov [ebp+arg_4], eax push edi call sub_7F816B29 test ax, ax jge short loc_7F8169A2 loc_7F8169B6: ; CODE XREF: sub_7F81698C+14j movzx ecx, word ptr [edi+4] mov ebx, [ebp+arg_C] add ebx, 6 cmp ebx, ecx jbe short loc_7F8169DE mov eax, ebx sub eax, ecx push eax push [ebp+arg_0] call sub_7F816B5F mov edi, eax test edi, edi jnz short loc_7F8169DE mov esi, 400h jmp short loc_7F816A39 ; --------------------------------------------------------------------------- loc_7F8169DE: ; CODE XREF: sub_7F81698C+36j ; sub_7F81698C+49j movzx eax, word ptr [edi] lea eax, [eax+edi+6] mov cx, [eax] lea edx, [ecx+1] mov [eax], dx movzx edx, word ptr [edi] movsx eax, cx imul eax, 6 sub edx, eax sub [edi+4], bx mov ax, [edi+2] lea ecx, [edx+edi] add ax, word ptr [ebp+arg_C] mov edx, [ebp+arg_4] mov [edi+2], ax mov [ecx-2], ax mov eax, [ebp+arg_8] mov dword ptr [ecx-6], 0FFFFFFFFh mov [ecx], edx test eax, eax jz short loc_7F816A39 push [ebp+arg_C] push eax movzx eax, word ptr [ecx+4] add eax, edi add eax, 6 push eax call sub_7F82FCE0 add esp, 0Ch loc_7F816A39: ; CODE XREF: sub_7F81698C+50j ; sub_7F81698C+95j mov eax, esi pop edi pop esi pop ebx pop ebp retn 10h sub_7F81698C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F816A42 proc near ; CODE XREF: sub_7F8261A0+ADp ; sub_7F8261A0+EAp ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, [ebp+arg_0] movzx eax, word ptr [esi] mov ax, [eax+esi+6] cmp [ebp+arg_4], 0 mov [ebp+var_2], ax jl loc_7F816B1B cmp ax, [ebp+arg_4] jle loc_7F816B1B movzx eax, word ptr [esi+2] mov [ebp+var_10], eax movsx ecx, [ebp+arg_4] movzx eax, word ptr [esi+4] add eax, [ebp+var_10] lea edi, [eax+esi+6] movsx eax, [ebp+var_2] sub eax, ecx mov [ebp+var_8], eax imul eax, 6 add eax, edi movzx ecx, word ptr [eax-2] mov ebx, ecx mov [ebp+var_C], eax movzx eax, word ptr [eax+4] sub ebx, eax cmp [ebp+var_8], 1 jnz short loc_7F816AB9 mov ax, [esi+2] sub ax, bx mov [esi+2], ax mov [edi+4], ax jmp short loc_7F816AF3 ; --------------------------------------------------------------------------- loc_7F816AB9: ; CODE XREF: sub_7F816A42+64j mov edx, [ebp+var_10] add eax, esi sub edx, ecx add eax, 6 push edx add ecx, esi add ecx, 6 push ecx push eax call sub_7F82FCE0 mov cx, [ebp+arg_4] add esp, 0Ch sub [esi+2], bx sub cx, [ebp+var_2] jns short loc_7F816AF3 loc_7F816AE1: ; CODE XREF: sub_7F816A42+AFj movsx edx, cx mov eax, [ebp+var_C] imul edx, 6 sub [edx+eax+4], bx inc cx jnz short loc_7F816AE1 loc_7F816AF3: ; CODE XREF: sub_7F816A42+75j ; sub_7F816A42+9Dj mov eax, [ebp+var_8] imul eax, 6 add bx, 6 push eax push edi add edi, 6 push edi call sub_7F82FCE0 movzx eax, word ptr [esi] add [esi+4], bx add esp, 0Ch dec word ptr [eax+esi+6] xor eax, eax jmp short loc_7F816B20 ; --------------------------------------------------------------------------- loc_7F816B1B: ; CODE XREF: sub_7F816A42+1Dj ; sub_7F816A42+27j mov eax, 1004h loc_7F816B20: ; CODE XREF: sub_7F816A42+D7j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F816A42 endp ; =============== S U B R O U T I N E ======================================= sub_7F816B29 proc near ; CODE XREF: sub_7F81698C+20p ; sub_7F8267D3+24p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi movzx ecx, word ptr [eax] lea esi, [ecx+eax] mov ax, [esi+6] mov dx, ax test dx, dx jle short loc_7F816B52 mov ecx, [esp+4+arg_4] loc_7F816B44: ; CODE XREF: sub_7F816B29+27j cmp [esi], ecx jz short loc_7F816B5A dec dx sub esi, 6 test dx, dx jg short loc_7F816B44 loc_7F816B52: ; CODE XREF: sub_7F816B29+15j mov ax, 0FFFFh loc_7F816B56: ; CODE XREF: sub_7F816B29+34j pop esi retn 8 ; --------------------------------------------------------------------------- loc_7F816B5A: ; CODE XREF: sub_7F816B29+1Dj sub ax, dx jmp short loc_7F816B56 sub_7F816B29 endp ; =============== S U B R O U T I N E ======================================= sub_7F816B5F proc near ; CODE XREF: sub_7F81698C+40p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push ebx push esi push edi push ebp mov edx, [eax] mov eax, [edx] movzx ecx, word ptr [eax] movzx esi, word ptr [eax+2] movzx eax, word ptr [eax+4] mov edi, ecx mov ebp, [esp+10h+arg_4] sub edi, esi sub edi, eax lea eax, [ecx+ebp+8] add edi, 2 cmp eax, ebp jnb short loc_7F816B8F xor eax, eax jmp short loc_7F816BF7 ; --------------------------------------------------------------------------- loc_7F816B8F: ; CODE XREF: sub_7F816B5F+2Aj mov esi, 200h cmp ebp, esi jnb short loc_7F816BA6 add ecx, 208h cmp ecx, esi jbe short loc_7F816BA6 mov ebp, esi mov eax, ecx loc_7F816BA6: ; CODE XREF: sub_7F816B5F+37j ; sub_7F816B5F+41j push 0 add eax, 87h and al, 80h sub eax, 8 push eax push edx call sub_7F82F24A mov ebx, eax mov eax, 0 test ebx, ebx jz short loc_7F816BF7 mov esi, [ebx] push edi movzx eax, word ptr [esi+2] movzx ecx, word ptr [esi+4] add eax, ecx lea ecx, [eax+esi] lea eax, [eax+esi+6] push eax lea eax, [ecx+ebp] add eax, 6 push eax call sub_7F82FCE0 add [esi+4], bp mov ecx, [esp+1Ch+arg_0] add [esi], bp add esp, 0Ch mov eax, esi mov [ecx], ebx loc_7F816BF7: ; CODE XREF: sub_7F816B5F+2Ej ; sub_7F816B5F+63j pop ebp pop edi pop esi pop ebx retn 8 sub_7F816B5F endp ; =============== S U B R O U T I N E ======================================= sub_7F816BFE proc near ; CODE XREF: sub_7F8261A0+410p ; sub_7F827B9E+162p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi push ebp mov edi, [esp+10h+arg_0] mov ebp, [edi] movzx ebx, word ptr [ebp+0] movzx ecx, word ptr [ebp+2] movzx eax, word ptr [ebp+4] add ebx, 8 mov esi, [esp+10h+arg_4] mov edx, ebx sub edx, ecx sub edx, eax sub edx, 6 cmp esi, eax jnb short loc_7F816C70 push edx lea edx, [ecx+ebp] add edx, eax lea eax, [esi+ebp] add edx, 6 add eax, ecx push edx add eax, 6 push eax call sub_7F82FCE0 mov cx, [ebp+4] add esp, 0Ch movzx edx, cx mov ax, si sub ebx, edx sub ax, cx add ebx, esi add [ebp+0], ax push 0 mov [ebp+4], si lea eax, [ebx+87h] and al, 80h sub eax, 8 push eax push edi call sub_7F82F1FF loc_7F816C70: ; CODE XREF: sub_7F816BFE+28j mov eax, ebx pop ebp pop edi pop esi pop ebx retn 8 sub_7F816BFE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F816C79 proc near ; CODE XREF: sub_7F825DC6+138p ; sub_7F825DC6+182p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, 253h mov ebp, esp sub esp, 4 push esi push edi xor esi, esi cmp dword_7F838078, esi jnz short loc_7F816CC2 mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov edi, [edx] mov dword_7F838078, edi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F816CC2: ; CODE XREF: sub_7F816C79+15j test eax, eax jnz loc_7F816DBF push 0 push [ebp+arg_4] call sub_7F8144A4 mov edi, eax test edi, edi jnz short loc_7F816CE1 mov edi, 1001h jmp short loc_7F816D43 ; --------------------------------------------------------------------------- loc_7F816CE1: ; CODE XREF: sub_7F816C79+5Fj test byte ptr [edi+13h], 8 jnz short loc_7F816CEE mov edi, 1015h jmp short loc_7F816D43 ; --------------------------------------------------------------------------- loc_7F816CEE: ; CODE XREF: sub_7F816C79+6Cj mov eax, [edi+14h] and eax, 7FFFFFFFh mov [ebp+var_4], eax cmp eax, 0FFFFh jb short loc_7F816D07 mov edi, 400h jmp short loc_7F816D43 ; --------------------------------------------------------------------------- loc_7F816D07: ; CODE XREF: sub_7F816C79+85j mov eax, [ebp+arg_C] mov eax, [eax] test eax, eax jz short loc_7F816D60 push 0 mov ecx, [ebp+var_4] add ecx, 87h and cl, 80h sub ecx, 8 push ecx push eax call sub_7F82F24A mov esi, eax test esi, esi jz short loc_7F816D59 mov eax, [ebp+arg_C] mov [eax], esi loc_7F816D33: ; CODE XREF: sub_7F816C79+10Ej lea eax, [ebp+var_4] push eax ; int push dword ptr [esi] ; lpBuffer push 0 ; int push edi ; int call sub_7F814E39 mov edi, eax loc_7F816D43: ; CODE XREF: sub_7F816C79+66j ; sub_7F816C79+73j ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F816D90 call sub_7F82A34F jmp short loc_7F816D9E ; --------------------------------------------------------------------------- loc_7F816D59: ; CODE XREF: sub_7F816C79+B3j mov edi, 400h jmp short loc_7F816D43 ; --------------------------------------------------------------------------- loc_7F816D60: ; CODE XREF: sub_7F816C79+95j cmp [ebp+arg_8], 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 20h push eax mov eax, [ebp+var_4] add eax, 87h and al, 80h sub eax, 8 push eax call sub_7F82F18D mov esi, eax test esi, esi jnz short loc_7F816D33 mov edi, 400h jmp short loc_7F816D43 ; --------------------------------------------------------------------------- loc_7F816D90: ; CODE XREF: sub_7F816C79+D7j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F816D9E: ; CODE XREF: sub_7F816C79+DEj mov dword_7F838078, 0 test edi, edi jnz short loc_7F816DB3 mov eax, [ebp+arg_C] mov [eax], esi jmp short loc_7F816DBD ; --------------------------------------------------------------------------- loc_7F816DB3: ; CODE XREF: sub_7F816C79+131j test esi, esi jz short loc_7F816DBD push esi call sub_7F82F1E1 loc_7F816DBD: ; CODE XREF: sub_7F816C79+138j ; sub_7F816C79+13Cj mov eax, edi loc_7F816DBF: ; CODE XREF: sub_7F816C79+4Bj pop edi pop esi mov esp, ebp pop ebp retn 10h sub_7F816C79 endp ; =============== S U B R O U T I N E ======================================= sub_7F816DC7 proc near ; CODE XREF: sub_7F825FA8+36p ; sub_7F8261A0+3F1p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov eax, 253h cmp dword_7F838078, 0 jnz short loc_7F816E09 mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F816E09: ; CODE XREF: sub_7F816DC7+Dj test eax, eax jnz short loc_7F816E4D push [esp+4+arg_8] push [esp+8+arg_4] call sub_7F816E51 mov esi, eax mov ecx, dword_7F838078 cmp word ptr [ecx+254h], 0 jz short loc_7F816E33 call sub_7F82A34F jmp short loc_7F816E41 ; --------------------------------------------------------------------------- loc_7F816E33: ; CODE XREF: sub_7F816DC7+63j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F816E41: ; CODE XREF: sub_7F816DC7+6Aj mov dword_7F838078, 0 mov eax, esi loc_7F816E4D: ; CODE XREF: sub_7F816DC7+44j pop esi retn 0Ch sub_7F816DC7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F816E51 proc near ; CODE XREF: sub_7F813C77+4Bp ; sub_7F816DC7+4Ep var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_4] mov ebp, esp sub esp, 8 mov [ebp+var_4], 0 push ebx push esi push edi mov esi, [eax] push 0 mov ebx, [ebp+arg_0] push dword ptr [ebx] call sub_7F8144A4 mov edi, eax test edi, edi jz short loc_7F816E93 test byte ptr [edi+13h], 8 jnz short loc_7F816E86 mov esi, 1015h jmp short loc_7F816EDC ; --------------------------------------------------------------------------- loc_7F816E86: ; CODE XREF: sub_7F816E51+2Cj test edi, edi jz short loc_7F816E93 mov [ebp+var_8], 80h jmp short loc_7F816E98 ; --------------------------------------------------------------------------- loc_7F816E93: ; CODE XREF: sub_7F816E51+26j ; sub_7F816E51+37j mov eax, [ebx] mov [ebp+var_8], eax loc_7F816E98: ; CODE XREF: sub_7F816E51+40j mov eax, 0 test edi, edi jz short loc_7F816EA3 mov eax, [ebx] loc_7F816EA3: ; CODE XREF: sub_7F816E51+4Ej lea ecx, [ebp+var_4] push ecx ; int push eax ; int movzx eax, word ptr [esi] add eax, 8Fh lea ecx, [ebp+var_8] and al, 80h sub eax, 8 push eax ; nNumberOfBytesToRead push esi ; int push ecx ; int call sub_7F814988 mov esi, eax test esi, esi jnz short loc_7F816F1B test edi, edi jz short loc_7F816ED5 mov ax, [edi+12h] mov ecx, [ebp+var_4] mov [ecx+12h], ax loc_7F816ED5: ; CODE XREF: sub_7F816E51+77j mov eax, [ebp+var_4] or byte ptr [eax+13h], 8 loc_7F816EDC: ; CODE XREF: sub_7F816E51+33j test esi, esi jnz short loc_7F816F1B test edi, edi jz short loc_7F816F0E push [ebp+var_4] push edi call sub_7F814AC2 mov ecx, [ebp+var_4] test byte ptr [ecx+10h], 10h jz short loc_7F816F04 mov ax, [edi+1Ch] mov [ecx+1Ch], ax mov word ptr [edi+1Ch], 0 loc_7F816F04: ; CODE XREF: sub_7F816E51+A3j push [ebp+var_4] call sub_7F8147DD jmp short loc_7F816F1B ; --------------------------------------------------------------------------- loc_7F816F0E: ; CODE XREF: sub_7F816E51+91j push [ebp+var_4] mov eax, [ebp+var_8] mov [ebx], eax call sub_7F814971 loc_7F816F1B: ; CODE XREF: sub_7F816E51+73j ; sub_7F816E51+8Dj ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F816E51 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F816F26 proc near ; CODE XREF: sub_7F822DB9+A7p ; sub_7F823594+BCp var_14 = dword ptr -14h var_10 = word ptr -10h var_C = dword ptr -0Ch Buffer = word ptr -8 var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp sub esp, 14h push ebx mov ecx, [ebp+arg_C] push esi mov ebx, [ebp+arg_4] push edi add ebx, 8 mov edi, [ebp+arg_0] mov [ecx], eax cmp edi, eax jz short loc_7F816F87 cmp dword_7F838078, eax mov eax, 253h jnz short loc_7F816F7F mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi xor eax, eax loc_7F816F7F: ; CODE XREF: sub_7F816F26+28j test eax, eax jnz loc_7F817103 loc_7F816F87: ; CODE XREF: sub_7F816F26+1Bj cmp [ebp+arg_8], 0Ch jb loc_7F8170CA lea eax, [ebp+var_C] lea ecx, [ebp+Buffer] mov [ebp+var_C], 6 push eax ; int push ebx ; lDistanceToMove push ecx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F8170CF movzx ecx, [ebp+Buffer] mov eax, [ebp+arg_8] sub eax, 4 cmp eax, ecx jb loc_7F8170CA movzx esi, [ebp+var_6] mov edx, [ebp+arg_8] sub edx, 0Eh cmp edx, esi jb loc_7F8170CA movzx eax, [ebp+var_4] cmp edx, eax jb loc_7F8170CA add eax, esi cmp eax, edx ja loc_7F8170CA mov [ebp+var_C], 2 lea eax, [ebp+var_C] push eax ; int lea eax, [ecx+ebx] add eax, 6 lea ecx, [ebp+var_2] push eax ; lDistanceToMove push ecx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F8170CF cmp [ebp+var_2], 0 jl loc_7F8170CA cmp [ebp+var_2], 2AA8h jg loc_7F8170CA mov ax, [ebp+Buffer] cmp [ebp+var_6], ax ja loc_7F8170CA movzx ecx, [ebp+Buffer] movsx eax, [ebp+var_2] imul eax, 6 mov edx, ecx sub edx, eax movzx esi, [ebp+var_6] movzx eax, [ebp+var_4] sub edx, esi sub edx, eax cmp edx, 6 jnz short loc_7F8170CA lea eax, [ebp+var_C] add ecx, ebx push eax ; int lea edx, [ebp+var_14] mov [ebp+var_C], 6 push ecx ; lDistanceToMove push edx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz short loc_7F8170CF cmp [ebp+var_10], 0 jnz short loc_7F8170CA mov [ebp+var_C], 6 lea eax, [ebp+var_C] push eax ; int movzx ecx, [ebp+var_4] movzx eax, [ebp+var_6] add eax, ecx lea ecx, [ebp+var_14] add eax, ebx add eax, 6 push eax ; lDistanceToMove push ecx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz short loc_7F8170CF mov ax, [ebp+var_6] cmp [ebp+var_10], ax jnz short loc_7F8170CA cmp [ebp+var_14], 0FFFFFFFFh jnz short loc_7F8170CA movzx eax, [ebp+Buffer] add eax, 8 mov ecx, [ebp+arg_C] cmp [ebp+arg_8], eax mov [ecx], eax jbe short loc_7F8170CF mov esi, 1017h jmp short loc_7F8170CF ; --------------------------------------------------------------------------- loc_7F8170CA: ; CODE XREF: sub_7F816F26+65j ; sub_7F816F26+96j ... mov esi, 1015h loc_7F8170CF: ; CODE XREF: sub_7F816F26+84j ; sub_7F816F26+E3j ... test edi, edi jz short loc_7F817101 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F8170E9 call sub_7F82A34F jmp short loc_7F8170F7 ; --------------------------------------------------------------------------- loc_7F8170E9: ; CODE XREF: sub_7F816F26+1BAj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8170F7: ; CODE XREF: sub_7F816F26+1C1j mov dword_7F838078, 0 loc_7F817101: ; CODE XREF: sub_7F816F26+1ABj mov eax, esi loc_7F817103: ; CODE XREF: sub_7F816F26+5Bj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F816F26 endp ; =============== S U B R O U T I N E ======================================= sub_7F81710C proc near ; CODE XREF: sub_7F8173E6+13Ap push ebx push esi push edi push ebp xor edi, edi call sub_7F81731C xor ebp, ebp test eax, eax jz short loc_7F817122 inc word ptr [eax] jmp short loc_7F817183 ; --------------------------------------------------------------------------- loc_7F817122: ; CODE XREF: sub_7F81710C+Fj call sub_7F81722B mov esi, eax test esi, esi jnz short loc_7F817134 mov edi, 709h jmp short loc_7F817183 ; --------------------------------------------------------------------------- loc_7F817134: ; CODE XREF: sub_7F81710C+1Fj mov eax, dword_7F833F18 xor ebx, ebx push eax ; hInstance call sub_7F8171B7 push ebx ; lpParam mov eax, dword_7F833F18 push eax ; hInstance push ebx ; hMenu push ebx ; hWndParent push ebx ; nHeight push ebx ; nWidth push ebx ; Y push ebx ; X push ebx ; dwStyle push offset WindowName ; "MS Mail32 Notification" push offset ClassName ; "MS Mail32 Notify" push ebx ; dwExStyle call ds:CreateWindowExA mov ebp, eax test ebp, ebp jnz short loc_7F81716D mov edi, 400h jmp short loc_7F817183 ; --------------------------------------------------------------------------- loc_7F81716D: ; CODE XREF: sub_7F81710C+58j call ds:__imp_GetCurrentProcessId push eax ; dwNewLong push 0 ; nIndex push ebp ; hWnd call ds:SetWindowLongA mov [esi+4], ebp inc word ptr [esi] loc_7F817183: ; CODE XREF: sub_7F81710C+14j ; sub_7F81710C+26j ... test edi, edi jz short loc_7F817192 test ebp, ebp jz short loc_7F817192 push ebp ; hWnd call ds:DestroyWindow loc_7F817192: ; CODE XREF: sub_7F81710C+79j ; sub_7F81710C+7Dj mov eax, edi pop ebp pop edi pop esi pop ebx retn sub_7F81710C endp ; =============== S U B R O U T I N E ======================================= sub_7F817199 proc near ; CODE XREF: sub_7F8173E6+1DAp ; sub_7F81762E+80p ; FUNCTION CHUNK AT 7F817395 SIZE 00000051 BYTES call sub_7F81731C mov cx, [eax] dec cx mov [eax], cx jnz short locret_7F8171B6 push dword ptr [eax+4] ; hWnd call ds:DestroyWindow jmp loc_7F817395 ; --------------------------------------------------------------------------- locret_7F8171B6: ; CODE XREF: sub_7F817199+Dj retn sub_7F817199 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8171B7(HINSTANCE hInstance) sub_7F8171B7 proc near ; CODE XREF: sub_7F81710C+30p WndClass = tagWNDCLASSA ptr -28h hInstance = dword ptr 8 push ebp mov ebp, esp sub esp, 28h push esi push 7F00h ; lpCursorName xor esi, esi push esi ; hInstance call ds:LoadCursorA mov ecx, offset ClassName ; "MS Mail32 Notify" mov [ebp+WndClass.hCursor], eax mov eax, [ebp+hInstance] mov [ebp+WndClass.hIcon], esi mov [ebp+WndClass.lpszMenuName], esi mov [ebp+WndClass.lpszClassName], ecx mov [ebp+WndClass.hInstance], eax mov [ebp+WndClass.cbClsExtra], esi mov [ebp+WndClass.hbrBackground], 6 mov [ebp+WndClass.style], 4000h mov [ebp+WndClass.lpfnWndProc], offset sub_7F82ACA6 mov [ebp+WndClass.cbWndExtra], 4 lea edx, [ebp+WndClass] push edx ; lpWndClass push ecx ; lpClassName push eax ; hInstance call ds:GetClassInfoA test eax, eax mov eax, 1 jnz short loc_7F817224 lea eax, [ebp+WndClass] push eax ; lpWndClass call ds:RegisterClassA movzx eax, ax loc_7F817224: ; CODE XREF: sub_7F8171B7+5Ej pop esi mov esp, ebp pop ebp retn 4 sub_7F8171B7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81722B proc near ; CODE XREF: sub_7F81710C:loc_7F817122p var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi call ds:__imp_GetCurrentProcessId mov [ebp+var_8], eax mov [ebp+var_4], 0 jmp loc_7F81724C ; --------------------------------------------------------------------------- loc_7F817249: ; CODE XREF: sub_7F81722B:loc_7F817274j inc [ebp+var_4] loc_7F81724C: ; CODE XREF: sub_7F81722B+19j movsx eax, word_7F836278 cmp eax, [ebp+var_4] jle loc_7F817279 mov eax, [ebp+var_4] mov ecx, [ebp+var_8] cmp dword_7F836280[eax*4], ecx jnz loc_7F817274 jmp loc_7F8172F7 ; --------------------------------------------------------------------------- loc_7F817274: ; CODE XREF: sub_7F81722B+3Ej jmp loc_7F817249 ; --------------------------------------------------------------------------- loc_7F817279: ; CODE XREF: sub_7F81722B+2Bj mov [ebp+var_4], 0 jmp loc_7F817288 ; --------------------------------------------------------------------------- loc_7F817285: ; CODE XREF: sub_7F81722B:loc_7F8172AEj inc [ebp+var_4] loc_7F817288: ; CODE XREF: sub_7F81722B+55j movsx eax, word_7F836278 cmp eax, [ebp+var_4] jle loc_7F8172B3 mov eax, [ebp+var_4] cmp dword_7F836280[eax*4], 0 jnz loc_7F8172AE jmp loc_7F8172DC ; --------------------------------------------------------------------------- loc_7F8172AE: ; CODE XREF: sub_7F81722B+78j jmp loc_7F817285 ; --------------------------------------------------------------------------- loc_7F8172B3: ; CODE XREF: sub_7F81722B+67j cmp [ebp+var_8], 0 jnz loc_7F8172C4 xor eax, eax jmp loc_7F817317 ; --------------------------------------------------------------------------- loc_7F8172C4: ; CODE XREF: sub_7F81722B+8Cj cmp [ebp+var_4], 64h jnz loc_7F8172D5 xor eax, eax jmp loc_7F817317 ; --------------------------------------------------------------------------- loc_7F8172D5: ; CODE XREF: sub_7F81722B+9Dj inc word_7F836278 loc_7F8172DC: ; CODE XREF: sub_7F81722B+7Ej mov eax, [ebp+var_8] mov ecx, [ebp+var_4] mov dword_7F836280[ecx*4], eax mov eax, [ebp+var_4] lea edi, unk_7F836410[eax*8] xor eax, eax stosd stosd loc_7F8172F7: ; CODE XREF: sub_7F81722B+44j cmp [ebp+var_8], 0 jnz loc_7F817308 xor eax, eax jmp loc_7F817317 ; --------------------------------------------------------------------------- loc_7F817308: ; CODE XREF: sub_7F81722B+D0j mov eax, [ebp+var_4] lea eax, unk_7F836410[eax*8] jmp $+5 ; --------------------------------------------------------------------------- loc_7F817317: ; CODE XREF: sub_7F81722B+94j ; sub_7F81722B+A5j ... pop edi pop esi pop ebx leave retn sub_7F81722B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81731C proc near ; CODE XREF: sub_7F81710C+6p ; sub_7F817199p ... var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi call ds:__imp_GetCurrentProcessId mov [ebp+var_8], eax mov [ebp+var_4], 0 jmp loc_7F81733D ; --------------------------------------------------------------------------- loc_7F81733A: ; CODE XREF: sub_7F81731C:loc_7F817365j inc [ebp+var_4] loc_7F81733D: ; CODE XREF: sub_7F81731C+19j movsx eax, word_7F836278 cmp eax, [ebp+var_4] jle loc_7F81736A mov eax, [ebp+var_4] mov ecx, [ebp+var_8] cmp dword_7F836280[eax*4], ecx jnz loc_7F817365 jmp loc_7F81736A ; --------------------------------------------------------------------------- loc_7F817365: ; CODE XREF: sub_7F81731C+3Ej jmp loc_7F81733A ; --------------------------------------------------------------------------- loc_7F81736A: ; CODE XREF: sub_7F81731C+2Bj ; sub_7F81731C+44j movsx eax, word_7F836278 cmp eax, [ebp+var_4] jg loc_7F817381 xor eax, eax jmp loc_7F817390 ; --------------------------------------------------------------------------- loc_7F817381: ; CODE XREF: sub_7F81731C+58j mov eax, [ebp+var_4] lea eax, unk_7F836410[eax*8] jmp $+5 ; --------------------------------------------------------------------------- loc_7F817390: ; CODE XREF: sub_7F81731C+60j ; sub_7F81731C+6Fj pop edi pop esi pop ebx leave retn sub_7F81731C endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7F817199 loc_7F817395: ; CODE XREF: sub_7F817199+18j push esi push edi call ds:__imp_GetCurrentProcessId test eax, eax jz short loc_7F8173E3 mov si, word_7F836278 xor edi, edi cmp si, di jle short loc_7F8173E3 mov ecx, offset dword_7F836280 loc_7F8173B4: ; CODE XREF: sub_7F817199+228j cmp [ecx], eax jz short loc_7F8173C5 add ecx, 4 inc edi movsx edx, si cmp edx, edi jg short loc_7F8173B4 jmp short loc_7F8173E3 ; --------------------------------------------------------------------------- loc_7F8173C5: ; CODE XREF: sub_7F817199+21Dj mov dword_7F836280[edi*4], 0 movsx eax, si sub eax, edi cmp eax, 1 jnz short loc_7F8173E3 dec si mov word_7F836278, si loc_7F8173E3: ; CODE XREF: sub_7F817199+206j ; sub_7F817199+214j ... pop edi pop esi retn ; END OF FUNCTION CHUNK FOR sub_7F817199 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8173E6 proc near ; CODE XREF: sub_7F802896+2Fp ; sub_7F80B4E1+A1p var_48 = byte ptr -48h var_30 = byte ptr -30h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 48h push ebx push esi push edi xor esi, esi xor edi, edi mov [ebp+var_8], esi mov [ebp+var_4], esi inc dword_7F836768 call sub_7F82449E test eax, eax jz short loc_7F817410 inc word ptr [eax] jmp loc_7F81758E ; --------------------------------------------------------------------------- loc_7F817410: ; CODE XREF: sub_7F8173E6+20j mov ecx, [ebp+arg_0] xor ebx, ebx push dword ptr [ecx+4] push dword ptr [ecx] call sub_7F82ED7C mov edi, eax test edi, edi jnz loc_7F81758E lea eax, [ebp+var_30] lea ecx, [ebp+var_48] push eax push ecx call sub_7F82EDCA lea ecx, [ebp+var_48] lea edx, [ebp+var_30] mov [ebp+var_10], ebx mov [ebp+var_C], ebx mov [ebp+var_18], ecx mov [ebp+var_14], edx lea ecx, [ebp+var_18] push ecx call sub_7F814EF3 mov edi, eax test edi, edi jnz loc_7F81758E mov esi, 1 cmp dword_7F836768, esi jnz loc_7F817503 call sub_7F820E5D push ebx push ebx call sub_7F810254 push ebx push 2000h call sub_7F82F03B mov lpBuffer, eax cmp eax, ebx jnz short loc_7F817496 mov edi, 400h jmp loc_7F81758E ; --------------------------------------------------------------------------- loc_7F817496: ; CODE XREF: sub_7F8173E6+A4j push 0 push 0FE00h call sub_7F82F03B mov lpsz, eax test eax, eax jnz short loc_7F8174B5 mov edi, 400h jmp loc_7F81758E ; --------------------------------------------------------------------------- loc_7F8174B5: ; CODE XREF: sub_7F8173E6+C3j mov edi, offset aMsmail32_ini_0 ; "msmail32.ini" call sub_7F8176BB push edi ; lpFileName mov ebx, offset aMmf ; "MMF" push 3Ch ; nDefault push offset aAutodisconnect ; "AutoDisconnectInterval" push ebx ; lpAppName call ds:GetPrivateProfileIntA movsx eax, ax mov ecx, 6 sub edx, edx imul eax, 1770h push edi ; lpFileName mov dword_7F83676C, eax div ecx push 1 ; nDefault mov dword_7F836770, eax push offset aAutorebuildfol ; "AutoRebuildFolders" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov dword_7F836778, eax loc_7F817503: ; CODE XREF: sub_7F8173E6+80j push 22Ch ; dwBytes call sub_7F824364 test eax, eax jnz short loc_7F817518 mov edi, 400h jmp short loc_7F81758E ; --------------------------------------------------------------------------- loc_7F817518: ; CODE XREF: sub_7F8173E6+129j mov ebx, 1 mov [ebp+var_4], ebx call sub_7F81710C mov edi, eax test edi, edi jnz short loc_7F81758E mov [ebp+var_8], ebx cmp dword_7F836768, ebx jnz short loc_7F81754B call sub_7F823FB2 mov dword_7F836764, eax test eax, eax jnz short loc_7F81754B mov edi, 400h jmp short loc_7F81758E ; --------------------------------------------------------------------------- loc_7F81754B: ; CODE XREF: sub_7F8173E6+14Ej ; sub_7F8173E6+15Cj call sub_7F82449E inc word ptr [eax] lea ecx, [eax+18h] mov edx, [ecx] or dl, 8 mov [ecx], edx and dl, 0FDh mov [ecx], edx or dl, 1 mov [ecx], edx xor edx, edx mov ecx, [ebp+arg_0] mov [eax+8], edx mov ecx, [ecx] cmp word ptr [ecx], 3 jg short loc_7F817585 cmp [ecx+2], dx jnz short loc_7F817585 cmp word ptr [ecx+4], 3E9h jle short loc_7F81758B loc_7F817585: ; CODE XREF: sub_7F8173E6+18Fj ; sub_7F8173E6+195j mov ecx, [ebp+arg_0] mov edx, [ecx+8] loc_7F81758B: ; CODE XREF: sub_7F8173E6+19Dj mov [eax+0Ch], edx loc_7F81758E: ; CODE XREF: sub_7F8173E6+25j ; sub_7F8173E6+3Dj ... xor ebx, ebx test edi, edi jz loc_7F817623 cmp dword_7F836768, 1 jnz short loc_7F8175BA cmp dword_7F836764, ebx jz short loc_7F8175BA mov eax, dword_7F836764 push eax call sub_7F823FB7 mov dword_7F836764, ebx loc_7F8175BA: ; CODE XREF: sub_7F8173E6+1B9j ; sub_7F8173E6+1C1j cmp [ebp+var_8], 0 jz short loc_7F8175C5 call sub_7F817199 loc_7F8175C5: ; CODE XREF: sub_7F8173E6+1D8j cmp [ebp+var_4], 0 jz short loc_7F8175D0 call sub_7F824418 loc_7F8175D0: ; CODE XREF: sub_7F8173E6+1E3j test esi, esi jz short loc_7F8175D9 call sub_7F814F94 loc_7F8175D9: ; CODE XREF: sub_7F8173E6+1ECj xor esi, esi dec dword_7F836768 cmp dword_7F836768, esi jg short loc_7F817623 mov dword_7F836768, esi cmp lpBuffer, esi jz short loc_7F817608 mov eax, lpBuffer push eax call sub_7F82F149 mov lpBuffer, esi loc_7F817608: ; CODE XREF: sub_7F8173E6+20Fj xor esi, esi cmp lpsz, esi jz short loc_7F817623 mov eax, lpsz push eax call sub_7F82F149 mov lpsz, esi loc_7F817623: ; CODE XREF: sub_7F8173E6+1ACj ; sub_7F8173E6+201j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F8173E6 endp ; =============== S U B R O U T I N E ======================================= sub_7F81762E proc near ; CODE XREF: ScMMFVerify@16:loc_7F80208Bp ; ScMMFMigrateToMDB@48:loc_7F802368p ... push esi push edi xor edi, edi call sub_7F82449E mov esi, eax dec dword_7F836768 cmp dword_7F836768, edi jg short loc_7F81769C cmp dword_7F836764, edi jz short loc_7F817660 mov eax, dword_7F836764 push eax call sub_7F823FB7 mov dword_7F836764, edi loc_7F817660: ; CODE XREF: sub_7F81762E+1Fj xor edi, edi mov dword_7F836768, edi cmp lpBuffer, edi jz short loc_7F817681 mov eax, lpBuffer push eax call sub_7F82F149 mov lpBuffer, edi loc_7F817681: ; CODE XREF: sub_7F81762E+40j xor edi, edi cmp lpsz, edi jz short loc_7F81769C mov eax, lpsz push eax call sub_7F82F149 mov lpsz, edi loc_7F81769C: ; CODE XREF: sub_7F81762E+17j ; sub_7F81762E+5Bj mov ax, [esi] dec ax mov [esi], ax test ax, ax jg short loc_7F8176B8 call sub_7F824418 call sub_7F817199 call sub_7F814F94 loc_7F8176B8: ; CODE XREF: sub_7F81762E+79j pop edi pop esi retn sub_7F81762E endp ; =============== S U B R O U T I N E ======================================= sub_7F8176BB proc near ; CODE XREF: sub_7F8173E6+D4p mov dword_7F836760, 0 retn sub_7F8176BB endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F8176C6(LPCSTR lpString1, LPCSTR lpString2) sub_7F8176C6 proc near ; CODE XREF: sub_7F815163+67p ; sub_7F815163+76p ... lpString1 = dword ptr 4 lpString2 = dword ptr 8 push [esp+lpString2] ; lpString2 push [esp+4+lpString1] ; lpString1 call ds:lstrcmpiA test eax, eax jnz short loc_7F8176DC xor eax, eax jmp short locret_7F8176E8 ; --------------------------------------------------------------------------- loc_7F8176DC: ; CODE XREF: sub_7F8176C6+10j mov eax, 0FFFFFFFFh jl short locret_7F8176E8 mov eax, 1 locret_7F8176E8: ; CODE XREF: sub_7F8176C6+14j ; sub_7F8176C6+1Bj retn 8 sub_7F8176C6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8176EB(int, LPSTR lpsz, DWORD cchLength) sub_7F8176EB proc near ; CODE XREF: sub_7F815163+1B7p ; sub_7F815163+23Cp ... arg_0 = dword ptr 8 lpsz = dword ptr 0Ch cchLength = dword ptr 10h push ebp mov ebp, esp push esi push edi mov edi, [ebp+cchLength] test edi, edi jz short loc_7F817711 mov esi, [ebp+lpsz] cmp esi, [ebp+arg_0] jz short loc_7F817709 push edi push esi push [ebp+arg_0] call sub_7F81ABAD loc_7F817709: ; CODE XREF: sub_7F8176EB+12j push edi ; cchLength push esi ; lpsz call ds:CharUpperBuffA loc_7F817711: ; CODE XREF: sub_7F8176EB+Aj pop edi pop esi pop ebp retn 0Ch sub_7F8176EB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F817717 proc near ; CODE XREF: sub_7F810C9B+11Bp SystemTime = _SYSTEMTIME ptr -10h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 10h lea eax, [ebp+SystemTime] push eax ; lpSystemTime call ds:GetLocalTime mov ax, [ebp+SystemTime.wHour] mov ecx, [ebp+arg_0] mov dx, [ebp+SystemTime.wMinute] mov [ecx+6], ax mov ax, [ebp+SystemTime.wSecond] mov [ecx+8], dx mov dx, [ebp+SystemTime.wDay] mov [ecx+0Ah], ax mov ax, [ebp+SystemTime.wMonth] mov [ecx+4], dx mov dx, [ebp+SystemTime.wYear] mov [ecx+2], ax mov ax, [ebp+SystemTime.wDayOfWeek] mov [ecx], dx mov [ecx+0Ch], ax mov esp, ebp pop ebp retn 4 sub_7F817717 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F817767 proc near ; CODE XREF: sub_7F828018+E9p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov dx, [esp+arg_8] mov ebp, esp sub esp, 8 test dl, 40h push esi push edi jz short loc_7F8177A0 mov esi, [ebp+arg_4] mov ecx, [ebp+arg_0] mov di, [esi] mov ax, [ecx] cmp di, ax jle short loc_7F817794 mov eax, 0FFFFFFFFh jmp loc_7F817828 ; --------------------------------------------------------------------------- loc_7F817794: ; CODE XREF: sub_7F817767+21j jge short loc_7F8177A6 mov eax, 1 jmp loc_7F817828 ; --------------------------------------------------------------------------- loc_7F8177A0: ; CODE XREF: sub_7F817767+10j mov ecx, [ebp+arg_0] mov esi, [ebp+arg_4] loc_7F8177A6: ; CODE XREF: sub_7F817767:loc_7F817794j test dl, 20h jz short loc_7F8177C8 mov di, [esi+2] mov ax, [ecx+2] cmp di, ax jle short loc_7F8177BF mov eax, 0FFFFFFFFh jmp short loc_7F817828 ; --------------------------------------------------------------------------- loc_7F8177BF: ; CODE XREF: sub_7F817767+4Fj jge short loc_7F8177C8 mov eax, 1 jmp short loc_7F817828 ; --------------------------------------------------------------------------- loc_7F8177C8: ; CODE XREF: sub_7F817767+42j ; sub_7F817767:loc_7F8177BFj test dl, 10h jz short loc_7F8177EA mov di, [esi+4] mov ax, [ecx+4] cmp di, ax jle short loc_7F8177E1 mov eax, 0FFFFFFFFh jmp short loc_7F817828 ; --------------------------------------------------------------------------- loc_7F8177E1: ; CODE XREF: sub_7F817767+71j jge short loc_7F8177EA mov eax, 1 jmp short loc_7F817828 ; --------------------------------------------------------------------------- loc_7F8177EA: ; CODE XREF: sub_7F817767+64j ; sub_7F817767:loc_7F8177E1j and dx, 0FFFEh test dl, 0Eh jz short loc_7F817826 mov al, [ecx+6] mov byte ptr [ebp+var_4+1], al mov al, [ecx+8] mov cl, [ecx+0Ah] mov byte ptr [ebp+var_4], al mov al, [esi+6] mov byte ptr [ebp+var_4+3], cl mov cl, [esi+8] push edx mov byte ptr [ebp+var_8+1], al mov byte ptr [ebp+var_8], cl mov al, [esi+0Ah] mov byte ptr [ebp+var_8+3], al push [ebp+var_8] push [ebp+var_4] call sub_7F817830 jmp short loc_7F817828 ; --------------------------------------------------------------------------- loc_7F817826: ; CODE XREF: sub_7F817767+8Bj xor eax, eax loc_7F817828: ; CODE XREF: sub_7F817767+28j ; sub_7F817767+34j ... pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F817767 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F817830 proc near ; CODE XREF: sub_7F817767+B8p arg_0 = byte ptr 8 arg_1 = byte ptr 9 arg_2 = byte ptr 0Ah arg_3 = byte ptr 0Bh arg_4 = byte ptr 0Ch arg_5 = byte ptr 0Dh arg_6 = byte ptr 0Eh arg_7 = byte ptr 0Fh arg_8 = word ptr 10h push ebp mov ax, [esp+arg_8] mov ebp, esp test al, 8 jz short loc_7F81785A mov cl, [ebp+arg_1] cmp [ebp+arg_5], cl jbe short loc_7F81784B mov eax, 0FFFFFFFFh jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81784B: ; CODE XREF: sub_7F817830+12j mov cl, [ebp+arg_1] cmp [ebp+arg_5], cl jnb short loc_7F81785A mov eax, 1 jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81785A: ; CODE XREF: sub_7F817830+Aj ; sub_7F817830+21j test al, 4 jz short loc_7F81787C mov cl, [ebp+arg_0] cmp [ebp+arg_4], cl jbe short loc_7F81786D mov eax, 0FFFFFFFFh jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81786D: ; CODE XREF: sub_7F817830+34j mov cl, [ebp+arg_0] cmp [ebp+arg_4], cl jnb short loc_7F81787C mov eax, 1 jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81787C: ; CODE XREF: sub_7F817830+2Cj ; sub_7F817830+43j test al, 2 jz short loc_7F81789E mov cl, [ebp+arg_3] cmp [ebp+arg_7], cl jbe short loc_7F81788F mov eax, 0FFFFFFFFh jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81788F: ; CODE XREF: sub_7F817830+56j mov cl, [ebp+arg_3] cmp [ebp+arg_7], cl jnb short loc_7F81789E mov eax, 1 jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F81789E: ; CODE XREF: sub_7F817830+4Ej ; sub_7F817830+65j test al, 1 jz short loc_7F8178BE mov al, [ebp+arg_2] cmp [ebp+arg_6], al jbe short loc_7F8178B1 mov eax, 0FFFFFFFFh jmp short loc_7F8178C0 ; --------------------------------------------------------------------------- loc_7F8178B1: ; CODE XREF: sub_7F817830+78j mov al, [ebp+arg_2] cmp [ebp+arg_6], al mov eax, 1 jb short loc_7F8178C0 loc_7F8178BE: ; CODE XREF: sub_7F817830+70j xor eax, eax loc_7F8178C0: ; CODE XREF: sub_7F817830+19j ; sub_7F817830+28j ... pop ebp retn 0Ch sub_7F817830 endp ; =============== S U B R O U T I N E ======================================= sub_7F8178C4 proc near ; CODE XREF: sub_7F810C9B+172p ; sub_7F810C9B+18Bp ... arg_0 = dword ptr 4 xor eax, eax mov ecx, [esp+arg_0] push eax push eax push eax push eax push dword ptr [ecx] call sub_7F8178D8 retn 4 sub_7F8178C4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8178D8 proc near ; CODE XREF: sub_7F8178C4+Cp ; sub_7F8181F1+4Ap ... var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1A = word ptr -1Ah var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ecx, [esp+arg_0] mov ebp, esp sub esp, 34h mov eax, [ecx+14h] push ebx push esi mov [ebp+var_34], eax push edi xor eax, eax mov [ebp+var_C], eax cmp [ebp+arg_8], eax jz short loc_7F8178FF mov eax, [ebp+arg_8] mov ecx, [eax] mov [ebp+var_14], ecx jmp short loc_7F817951 ; --------------------------------------------------------------------------- loc_7F8178FF: ; CODE XREF: sub_7F8178D8+1Bj mov ecx, [ebp+arg_0] push 30h mov eax, [ecx+18h] mov edx, [eax] movsx eax, word ptr [edx] imul eax, 0Ch add eax, 0Eh push eax call sub_7F82F18D mov [ebp+arg_8], eax test eax, eax jnz short loc_7F81792B mov [ebp+var_4], 400h jmp loc_7F817C7B ; --------------------------------------------------------------------------- loc_7F81792B: ; CODE XREF: sub_7F8178D8+45j mov eax, [ebp+arg_8] mov edx, [ebp+arg_0] mov ecx, [eax] mov eax, [edx+18h] mov [ebp+var_14], ecx mov eax, [eax] movsx ecx, word ptr [eax] imul ecx, 0Ch add ecx, 0Eh push ecx push eax push [ebp+var_14] call sub_7F82FCE0 add esp, 0Ch loc_7F817951: ; CODE XREF: sub_7F8178D8+25j mov ecx, [ebp+var_14] mov ax, [ecx] add ecx, 0Eh movsx esi, ax imul esi, 0Ch add esi, 12h test ax, ax jle short loc_7F817975 loc_7F817968: ; CODE XREF: sub_7F8178D8+9Bj dec ax add esi, [ecx+8] add ecx, 0Ch test ax, ax jnz short loc_7F817968 loc_7F817975: ; CODE XREF: sub_7F8178D8+8Ej cmp [ebp+arg_4], 0 mov edi, [ebp+arg_0] jz short loc_7F817986 add edi, 0Ch mov eax, [ebp+arg_4] jmp short loc_7F817994 ; --------------------------------------------------------------------------- loc_7F817986: ; CODE XREF: sub_7F8178D8+A4j add edi, 0Ch mov ecx, [ebp+arg_0] mov eax, [ecx+8] and eax, 0FFh loc_7F817994: ; CODE XREF: sub_7F8178D8+ACj push esi mov ecx, [ebp+arg_0] push 0A000h mov [edi], eax push edi lea eax, [ebp+var_C] push eax push dword ptr [ecx] call sub_7F824835 mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B mov [ebp+var_10], 0FFFFFFF8h cmp [ebp+arg_4], 0 mov ebx, lpsz jz short loc_7F8179CD mov eax, [edi] jmp short loc_7F8179D3 ; --------------------------------------------------------------------------- loc_7F8179CD: ; CODE XREF: sub_7F8178D8+EFj mov ecx, [ebp+arg_0] mov eax, [ecx+8] loc_7F8179D3: ; CODE XREF: sub_7F8178D8+F3j mov ecx, [ebp+var_14] mov [ebx], eax mov [ebx+4], esi add ebx, 8 movsx eax, word ptr [ecx] imul eax, 0Ch sub esi, eax mov eax, 4 sub esi, 0Eh xor edi, edi mov [ebx], esi mov [ebp+var_28], eax add ebx, eax mov esi, 0FDF4h mov [ebp+var_24], eax mov ax, [ecx] movsx edx, ax mov [ebp+var_1A], ax imul edx, 0Ch cmp ax, di lea edx, [edx+ecx+2] mov [ebp+var_2C], edx jle loc_7F817B67 loc_7F817A1C: ; CODE XREF: sub_7F8178D8+289j mov edx, [ebp+var_2C] mov ecx, [edx+4] mov eax, ecx mov [ebp+var_20], ecx and eax, 80000000h shr eax, 1Fh mov [ebp+var_30], eax test eax, eax jz short loc_7F817A3A and byte ptr [ebp+var_20+3], 7Fh loc_7F817A3A: ; CODE XREF: sub_7F8178D8+15Cj mov ecx, [ebp+var_28] mov edx, [ebp+var_2C] mov [edx+4], ecx mov eax, [edx+8] mov [ebp+var_18], eax add [ebp+var_28], eax cmp [ebp+var_30], 0 jnz short loc_7F817A64 mov ecx, [ebp+var_20] cmp ecx, [ebp+var_24] jnz short loc_7F817A64 add edi, eax add [ebp+var_24], eax jmp loc_7F817B54 ; --------------------------------------------------------------------------- loc_7F817A64: ; CODE XREF: sub_7F8178D8+178j ; sub_7F8178D8+180j test edi, edi jz short loc_7F817AD1 loc_7F817A68: ; CODE XREF: sub_7F8178D8+1F7j cmp edi, esi mov eax, edi jb short loc_7F817A70 mov eax, esi loc_7F817A70: ; CODE XREF: sub_7F8178D8+194j lea ecx, [ebp+var_8] mov [ebp+var_8], eax mov eax, [ebp+var_24] sub eax, edi push eax push ecx push ebx push [ebp+var_34] call sub_7F824CAB mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B add ebx, [ebp+var_8] sub esi, [ebp+var_8] jnz short loc_7F817ACC push [ebp+var_10] push 0FE00h push lpsz push [ebp+var_C] call sub_7F825278 mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B mov ebx, lpsz mov esi, 0FE00h add [ebp+var_10], 0FE00h loc_7F817ACC: ; CODE XREF: sub_7F8178D8+1BFj sub edi, [ebp+var_8] jnz short loc_7F817A68 loc_7F817AD1: ; CODE XREF: sub_7F8178D8+18Ej cmp [ebp+var_30], 0 jnz short loc_7F817AE5 mov eax, [ebp+var_18] mov edi, [ebp+var_18] add eax, [ebp+var_20] mov [ebp+var_24], eax jmp short loc_7F817B54 ; --------------------------------------------------------------------------- loc_7F817AE5: ; CODE XREF: sub_7F8178D8+1FDj cmp [ebp+var_18], 0 jz short loc_7F817B52 mov edi, 0FE00h loc_7F817AF0: ; CODE XREF: sub_7F8178D8+278j mov eax, [ebp+var_18] cmp eax, esi jb short loc_7F817AF9 mov eax, esi loc_7F817AF9: ; CODE XREF: sub_7F8178D8+21Dj lea ecx, [ebp+var_8] mov [ebp+var_8], eax push [ebp+var_20] push ecx push ebx push [ebp+arg_C] call sub_7F824CAB mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B add ebx, [ebp+var_8] sub esi, [ebp+var_8] jnz short loc_7F817B47 push [ebp+var_10] push edi push lpsz push [ebp+var_C] call sub_7F825278 mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B mov ebx, lpsz mov esi, edi add [ebp+var_10], edi loc_7F817B47: ; CODE XREF: sub_7F8178D8+245j mov ecx, [ebp+var_8] add [ebp+var_20], ecx sub [ebp+var_18], ecx jnz short loc_7F817AF0 loc_7F817B52: ; CODE XREF: sub_7F8178D8+211j xor edi, edi loc_7F817B54: ; CODE XREF: sub_7F8178D8+187j ; sub_7F8178D8+20Bj sub [ebp+var_2C], 0Ch dec [ebp+var_1A] cmp [ebp+var_1A], 0 jg loc_7F817A1C loc_7F817B67: ; CODE XREF: sub_7F8178D8+13Ej test edi, edi jz short loc_7F817BD4 loc_7F817B6B: ; CODE XREF: sub_7F8178D8+2FAj cmp edi, esi mov eax, edi jb short loc_7F817B73 mov eax, esi loc_7F817B73: ; CODE XREF: sub_7F8178D8+297j lea ecx, [ebp+var_8] mov [ebp+var_8], eax mov eax, [ebp+var_24] sub eax, edi push eax push ecx push ebx push [ebp+var_34] call sub_7F824CAB mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B add ebx, [ebp+var_8] sub esi, [ebp+var_8] jnz short loc_7F817BCF push [ebp+var_10] push 0FE00h push lpsz push [ebp+var_C] call sub_7F825278 mov [ebp+var_4], eax test eax, eax jnz loc_7F817C7B mov ebx, lpsz mov esi, 0FE00h add [ebp+var_10], 0FE00h loc_7F817BCF: ; CODE XREF: sub_7F8178D8+2C2j sub edi, [ebp+var_8] jnz short loc_7F817B6B loc_7F817BD4: ; CODE XREF: sub_7F8178D8+291j mov ecx, [ebp+var_14] movsx edi, word ptr [ecx] imul edi, 0Ch add edi, 0Eh mov [ebp-1Ch], ecx add [ebp+var_28], edi test edi, edi jz short loc_7F817C43 loc_7F817BEA: ; CODE XREF: sub_7F8178D8+369j cmp edi, esi mov eax, edi jb short loc_7F817BF2 mov eax, esi loc_7F817BF2: ; CODE XREF: sub_7F8178D8+316j push eax mov [ebp+var_8], eax push dword ptr [ebp-1Ch] push ebx call sub_7F82FCE0 add esp, 0Ch add ebx, [ebp+var_8] sub esi, [ebp+var_8] jnz short loc_7F817C39 push [ebp+var_10] push 0FE00h push lpsz push [ebp+var_C] call sub_7F825278 mov [ebp+var_4], eax test eax, eax jnz short loc_7F817C7B mov ebx, lpsz mov esi, 0FE00h add [ebp+var_10], 0FE00h loc_7F817C39: ; CODE XREF: sub_7F8178D8+330j mov eax, [ebp+var_8] add [ebp-1Ch], eax sub edi, eax jnz short loc_7F817BEA loc_7F817C43: ; CODE XREF: sub_7F8178D8+310j cmp esi, 0FE00h jz short loc_7F817C6D push [ebp+var_10] mov eax, 0FE7Fh sub eax, esi and al, 80h push eax push lpsz push [ebp+var_C] call sub_7F825278 mov [ebp+var_4], eax test eax, eax jnz short loc_7F817C7B loc_7F817C6D: ; CODE XREF: sub_7F8178D8+371j push 1 lea eax, [ebp+var_C] push eax call sub_7F824AF5 mov [ebp+var_4], eax loc_7F817C7B: ; CODE XREF: sub_7F8178D8+4Ej ; sub_7F8178D8+D8j ... xor ecx, ecx mov eax, [ebp+arg_10] cmp [ebp+var_4], ecx jz short loc_7F817CB6 cmp eax, ecx jz short loc_7F817C8B mov [eax], ecx loc_7F817C8B: ; CODE XREF: sub_7F8178D8+3AFj cmp [ebp+var_C], 0 jz short loc_7F817C9C push 2 lea eax, [ebp+var_C] push eax call sub_7F824AF5 loc_7F817C9C: ; CODE XREF: sub_7F8178D8+3B7j cmp [ebp+arg_8], 0 jz short loc_7F817CAA push [ebp+arg_8] call sub_7F82F1E1 loc_7F817CAA: ; CODE XREF: sub_7F8178D8+3C8j mov ecx, [ebp+arg_0] mov dword ptr [ecx+0Ch], 0 jmp short loc_7F817CC8 ; --------------------------------------------------------------------------- loc_7F817CB6: ; CODE XREF: sub_7F8178D8+3ABj test eax, eax jz short loc_7F817CBF mov ecx, [ebp+var_28] mov [eax], ecx loc_7F817CBF: ; CODE XREF: sub_7F8178D8+3E0j mov eax, [ebp+arg_8] mov ecx, [ebp+arg_0] mov [ecx+1Ch], eax loc_7F817CC8: ; CODE XREF: sub_7F8178D8+3DCj mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8178D8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F817CD4 proc near ; CODE XREF: sub_7F817E9D+CCp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_8], 0 push ebx push esi mov ax, [ebp+arg_8] push edi and ax, 3 mov esi, [ebp+arg_4] cmp ax, 1 mov edi, [ebp+arg_C] sbb ebx, ebx mov dword ptr [esi], 0 mov word ptr [edi], 1 and ebx, 20h push [ebp+arg_0] add bx, 10h call sub_7F82559E mov cx, [ebp+arg_8] and cx, 2 jnz loc_7F817E43 test eax, eax jz loc_7F817E43 push 0 lea eax, [ebp+var_C] push eax lea ecx, [ebp+var_10] mov [ebp+var_C], 4 push ecx push [ebp+arg_0] call sub_7F824CAB mov [ebp+var_8], eax test eax, eax jnz loc_7F817E7C lea ecx, [ebp+var_C] lea edx, [ebp+var_2] push [ebp+var_10] push ecx mov [ebp+var_C], 2 push edx push [ebp+arg_0] call sub_7F824CAB mov [ebp+var_8], eax test eax, eax jnz loc_7F817E7C cmp [ebp+var_2], 1519h jb short loc_7F817D85 mov [ebp+var_8], 1017h jmp loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817D85: ; CODE XREF: sub_7F817CD4+A3j movsx eax, [ebp+var_2] imul eax, 0Ch add eax, 0Eh cmp eax, 0FFFFh jbe short loc_7F817DA2 mov [ebp+var_8], 1002h jmp loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817DA2: ; CODE XREF: sub_7F817CD4+C0j mov ecx, eax mov [ebp+var_C], eax test byte ptr [ebp+arg_8], 1 jz short loc_7F817DC1 lea ecx, [eax+3Ch] cmp ecx, 0FFFFh jb short loc_7F817DBC mov ecx, eax jmp short loc_7F817DC1 ; --------------------------------------------------------------------------- loc_7F817DBC: ; CODE XREF: sub_7F817CD4+E2j mov word ptr [edi], 0 loc_7F817DC1: ; CODE XREF: sub_7F817CD4+D7j ; sub_7F817CD4+E6j movzx ebx, bx push ebx push ecx call sub_7F82F18D mov [esi], eax test eax, eax jnz short loc_7F817E00 cmp word ptr [edi], 0 jz short loc_7F817DE3 mov [ebp+var_8], 400h jmp loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817DE3: ; CODE XREF: sub_7F817CD4+101j mov word ptr [edi], 1 push ebx push [ebp+var_C] call sub_7F82F18D mov [esi], eax test eax, eax jnz short loc_7F817E00 mov [ebp+var_8], 400h jmp short loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817E00: ; CODE XREF: sub_7F817CD4+FBj ; sub_7F817CD4+121j mov eax, [esi] push [ebp+var_10] mov ebx, [eax] lea eax, [ebp+var_C] push eax push ebx push [ebp+arg_0] call sub_7F824CAB mov [ebp+var_8], eax test eax, eax jnz short loc_7F817E7C cmp word ptr [edi], 0 jnz short loc_7F817E3B movsx ecx, word ptr [ebx] imul ecx, 0Ch mov eax, [ebp+var_10] mov [ecx+ebx+12h], eax movsx eax, word ptr [ebx] imul eax, 0Ch lea ecx, [eax+0Eh] mov [eax+ebx+16h], ecx loc_7F817E3B: ; CODE XREF: sub_7F817CD4+14Bj mov word ptr [ebx+0Ch], 0 jmp short loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817E43: ; CODE XREF: sub_7F817CD4+46j ; sub_7F817CD4+4Ej test cx, cx mov eax, 0Eh jz short loc_7F817E57 mov word ptr [edi], 0 mov eax, 4Ah loc_7F817E57: ; CODE XREF: sub_7F817CD4+177j push 30h push eax call sub_7F82F18D mov [esi], eax test eax, eax jnz short loc_7F817E6E mov [ebp+var_8], 400h jmp short loc_7F817E7C ; --------------------------------------------------------------------------- loc_7F817E6E: ; CODE XREF: sub_7F817CD4+18Fj mov eax, [eax] and word ptr [eax+2], 0FFFCh mov word ptr [eax+4], 0FFFFh loc_7F817E7C: ; CODE XREF: sub_7F817CD4+72j ; sub_7F817CD4+97j ... xor edi, edi cmp [ebp+var_8], edi jz short loc_7F817E91 mov eax, [esi] test eax, eax jz short loc_7F817E91 push eax call sub_7F82F1E1 mov [esi], edi loc_7F817E91: ; CODE XREF: sub_7F817CD4+1ADj ; sub_7F817CD4+1B3j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F817CD4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F817E9D proc near ; CODE XREF: sub_7F80FD8E+22p ; sub_7F80FD8E+5Ap ... var_10 = dword ptr -10h var_C = word ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_2], 1 push ebx push esi push edi push 10h push 24h call sub_7F82F18D mov ecx, [ebp+arg_C] test eax, eax mov [ecx], eax jnz short loc_7F817ECE mov esi, 400h mov edi, [ebp+arg_4] mov ebx, [ebp-4] jmp loc_7F817FFF ; --------------------------------------------------------------------------- loc_7F817ECE: ; CODE XREF: sub_7F817E9D+1Fj mov ebx, [eax] push 0 push [ebp+arg_8] mov edi, [ebp+arg_4] lea eax, [ebx+14h] push edi push eax push [ebp+arg_0] call sub_7F824835 mov esi, eax test esi, esi jnz loc_7F818007 mov ax, word ptr [ebp+arg_8] and ax, 2 mov [ebp+var_C], ax jnz short loc_7F817F55 push 2 push dword ptr [edi] push [ebp+arg_0] call sub_7F81155C mov [ebx+18h], eax test eax, eax jz short loc_7F817F55 test byte ptr [ebp+arg_8], 1 jz short loc_7F817F55 push eax call sub_7F82F1CA push 0 mov [ebp+var_10], eax push eax call sub_7F82F18D mov [ebp+var_8], eax test eax, eax jz loc_7F817FFA mov ecx, [ebx+18h] mov eax, [ebp+var_8] push [ebp+var_10] push dword ptr [ecx] push dword ptr [eax] call sub_7F82FCE0 add esp, 0Ch mov ecx, [ebp+var_8] mov [ebx+18h], ecx mov eax, [ecx] mov word ptr [eax+0Ch], 0 loc_7F817F55: ; CODE XREF: sub_7F817E9D+5Ej ; sub_7F817E9D+71j ... cmp dword ptr [ebx+18h], 0 jnz short loc_7F817F78 lea eax, [ebp+var_2] push eax lea eax, [ebx+18h] push [ebp+arg_8] push eax push dword ptr [ebx+14h] call sub_7F817CD4 mov esi, eax test esi, esi jnz loc_7F818007 loc_7F817F78: ; CODE XREF: sub_7F817E9D+BCj cmp [ebp+var_C], 0 mov eax, [edi] mov [ebx+8], eax jz short loc_7F817F97 or byte ptr [ebp+arg_8], 1 cmp [ebp+var_2], 0 jnz short loc_7F817FAA mov word ptr [ebx+12h], 5 jmp short loc_7F817FAA ; --------------------------------------------------------------------------- loc_7F817F97: ; CODE XREF: sub_7F817E9D+E5j cmp [ebp+var_2], 0 jnz short loc_7F817FAA mov word ptr [ebx+12h], 4 mov word ptr [ebx+10h], 1 loc_7F817FAA: ; CODE XREF: sub_7F817E9D+F0j ; sub_7F817E9D+F8j ... mov ax, word ptr [ebp+arg_8] mov ecx, [ebp+arg_0] mov [ebx+4], ax test al, 1 mov [ebx], ecx jnz short loc_7F817FFF mov eax, [ebx+18h] mov ecx, [eax] cmp word ptr [ecx+0Ch], 0 jnz short loc_7F817FDA push eax push 2 push dword ptr [edi] push [ebp+arg_0] call sub_7F811597 mov esi, eax test esi, esi jnz short loc_7F818007 loc_7F817FDA: ; CODE XREF: sub_7F817E9D+128j mov ecx, [ebp+arg_C] push dword ptr [ecx] push offset loc_7F81811E push 200000h push dword ptr [edi] push [ebp+arg_0] call sub_7F829F2E mov [ebx+20h], eax test eax, eax jnz short loc_7F817FFF loc_7F817FFA: ; CODE XREF: sub_7F817E9D+8Fj mov esi, 400h loc_7F817FFF: ; CODE XREF: sub_7F817E9D+2Cj ; sub_7F817E9D+11Cj ... test esi, esi jz loc_7F81810A loc_7F818007: ; CODE XREF: sub_7F817E9D+4Cj ; sub_7F817E9D+D5j ... mov ecx, [ebp+arg_C] mov eax, [ecx] test eax, eax jz short loc_7F818075 test ebx, ebx jnz short loc_7F818016 mov ebx, [eax] loc_7F818016: ; CODE XREF: sub_7F817E9D+175j lea eax, [ebx+14h] cmp dword ptr [eax], 0 jz short loc_7F818026 push 2 push eax call sub_7F824AF5 loc_7F818026: ; CODE XREF: sub_7F817E9D+17Fj mov eax, [ebx+18h] test eax, eax jz short loc_7F818050 mov ecx, [eax] cmp word ptr [ecx+0Ch], 0 jnz short loc_7F818050 push eax call sub_7F82F1E1 test byte ptr [ebp+arg_8], 1 jnz short loc_7F818050 push 0 push 2 push dword ptr [edi] push [ebp+arg_0] call sub_7F811597 loc_7F818050: ; CODE XREF: sub_7F817E9D+18Ej ; sub_7F817E9D+197j ... mov eax, [ebx+20h] test eax, eax jz short loc_7F818062 push eax push dword ptr [edi] push [ebp+arg_0] call sub_7F829FD2 loc_7F818062: ; CODE XREF: sub_7F817E9D+1B8j mov ecx, [ebp+arg_C] push dword ptr [ecx] call sub_7F82F1E1 mov ecx, [ebp+arg_C] mov dword ptr [ecx], 0 loc_7F818075: ; CODE XREF: sub_7F817E9D+171j cmp esi, 1002h jz short loc_7F8180A1 cmp esi, 1005h jl loc_7F818113 cmp esi, 1006h jle short loc_7F8180A1 cmp esi, 1014h jz short loc_7F8180A1 cmp esi, 1017h jnz short loc_7F818113 loc_7F8180A1: ; CODE XREF: sub_7F817E9D+1DEj ; sub_7F817E9D+1F2j ... xor ebx, ebx cmp dword_7F836C60, ebx jnz short loc_7F818113 cmp dword_7F8367B4, ebx jnz short loc_7F818113 cmp dword_7F836778, ebx jz short loc_7F818113 push 9015h push 9005h push dword ptr [edi] push [ebp+arg_0] call sub_7F82CFC5 test eax, eax jnz short loc_7F818113 mov dword_7F8367B4, 1 push dword ptr [edi] push [ebp+arg_0] call sub_7F81D598 cmp eax, ebx mov esi, eax jnz short loc_7F8180FE push [ebp+arg_C] push [ebp+arg_8] push edi push [ebp+arg_0] call sub_7F817E9D mov esi, eax loc_7F8180FE: ; CODE XREF: sub_7F817E9D+24Ej mov dword_7F8367B4, 0 jmp short loc_7F818113 ; --------------------------------------------------------------------------- loc_7F81810A: ; CODE XREF: sub_7F817E9D+164j mov eax, [ebx+18h] mov eax, [eax] inc word ptr [eax+0Ch] loc_7F818113: ; CODE XREF: sub_7F817E9D+1E6j ; sub_7F817E9D+202j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F81811E: ; DATA XREF: sub_7F817E9D+142o push esi push 2 mov esi, [esp+4+arg_0] mov eax, [esi] push dword ptr [eax+8] push dword ptr [eax] call sub_7F81155C mov ecx, [esi] pop esi mov [ecx+18h], eax xor eax, eax retn 0Ch sub_7F817E9D endp ; =============== S U B R O U T I N E ======================================= sub_7F81813C proc near ; CODE XREF: sub_7F80FD8E+E5p ; sub_7F81039F+180p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi push ebp xor edi, edi mov eax, [esi] mov ebx, [eax] mov ax, [ebx+4] and ax, 1 jz short loc_7F818164 cmp [esp+10h+arg_4], edi jz short loc_7F818164 push ebx call sub_7F8181F1 mov edi, eax jmp short loc_7F8181D9 ; --------------------------------------------------------------------------- loc_7F818164: ; CODE XREF: sub_7F81813C+16j ; sub_7F81813C+1Cj test ax, ax jz short loc_7F818193 push dword ptr [ebx+18h] call sub_7F82F1E1 mov eax, [ebx+1Ch] test eax, eax jz short loc_7F81817E push eax call sub_7F82F1E1 loc_7F81817E: ; CODE XREF: sub_7F81813C+3Aj mov eax, [ebx+0Ch] test eax, eax jz short loc_7F8181CE push 0 push 1 push eax push dword ptr [ebx] call sub_7F82B9DE jmp short loc_7F8181CE ; --------------------------------------------------------------------------- loc_7F818193: ; CODE XREF: sub_7F81813C+2Bj push dword ptr [ebx+20h] push dword ptr [ebx+8] lea ebp, [ebx+18h] push dword ptr [ebx] call sub_7F829FD2 mov ecx, [ebp+0] mov eax, [ecx] dec word ptr [eax+0Ch] mov ecx, [ebp+0] mov edx, [ecx] cmp word ptr [edx+0Ch], 0 jg short loc_7F8181CE push 0 push 2 push dword ptr [ebx+8] push dword ptr [ebx] call sub_7F811597 push dword ptr [ebp+0] call sub_7F82F1E1 loc_7F8181CE: ; CODE XREF: sub_7F81813C+47j ; sub_7F81813C+55j ... push 2 add ebx, 14h push ebx call sub_7F824AF5 loc_7F8181D9: ; CODE XREF: sub_7F81813C+26j xor ebx, ebx test edi, edi jnz short loc_7F8181E8 push dword ptr [esi] call sub_7F82F1E1 mov [esi], ebx loc_7F8181E8: ; CODE XREF: sub_7F81813C+A1j mov eax, edi pop ebp pop edi pop esi pop ebx retn 8 sub_7F81813C endp ; =============== S U B R O U T I N E ======================================= sub_7F8181F1 proc near ; CODE XREF: sub_7F81813C+1Fp var_14 = dword ptr -14h var_10 = byte ptr -10h arg_0 = dword ptr 4 sub esp, 14h push ebx push esi push edi xor ebx, ebx mov esi, [esp+20h+arg_0] push ebp cmp [esi+0Ch], ebx jz short loc_7F818230 mov eax, [esi+1Ch] mov eax, [eax] cmp [eax], bx jle short loc_7F818219 mov ecx, [eax+16h] add ecx, [eax+12h] mov [esp+24h+var_14], ecx jmp short loc_7F818221 ; --------------------------------------------------------------------------- loc_7F818219: ; CODE XREF: sub_7F8181F1+1Aj mov [esp+24h+var_14], 4 loc_7F818221: ; CODE XREF: sub_7F8181F1+26j movsx eax, word ptr [eax] imul eax, 0Ch add eax, 0Eh add [esp+24h+var_14], eax jmp short loc_7F81824A ; --------------------------------------------------------------------------- loc_7F818230: ; CODE XREF: sub_7F8181F1+10j lea eax, [esp+24h+var_14] xor ebp, ebp push eax push ebp push ebp push ebp push esi call sub_7F8178D8 cmp eax, ebp mov edi, eax jnz loc_7F8183BA loc_7F81824A: ; CODE XREF: sub_7F8181F1+3Dj cmp dword_7F838078, 0 jz short loc_7F81825A mov edi, 253h jmp short loc_7F818288 ; --------------------------------------------------------------------------- loc_7F81825A: ; CODE XREF: sub_7F8181F1+60j mov eax, [esi] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [esi] mov dword_7F83807C, edx loc_7F818288: ; CODE XREF: sub_7F8181F1+67j test edi, edi jnz loc_7F8183D0 push 0 push dword ptr [esi+8] call sub_7F8144A4 mov ebx, eax push 0 push dword ptr [esi+0Ch] call sub_7F8144A4 push eax mov ebp, eax push ebx call sub_7F814AC2 cmp dword ptr [ebx+14h], 0 jge short loc_7F8182BB push ebx call sub_7F814971 loc_7F8182BB: ; CODE XREF: sub_7F8181F1+C2j cmp dword ptr [ebp+14h], 0 jl short loc_7F8182C7 mov word ptr [ebp+1Eh], 1 loc_7F8182C7: ; CODE XREF: sub_7F8181F1+CEj test byte ptr [ebp+10h], 10h jz short loc_7F8182DB mov ax, [ebx+1Ch] mov [ebp+1Ch], ax mov word ptr [ebx+1Ch], 0 loc_7F8182DB: ; CODE XREF: sub_7F8181F1+DAj push ebp call sub_7F8147DD mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F8182F7 call sub_7F82A34F jmp short loc_7F818305 ; --------------------------------------------------------------------------- loc_7F8182F7: ; CODE XREF: sub_7F8181F1+FDj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F818305: ; CODE XREF: sub_7F8181F1+104j xor ebp, ebp mov dword_7F838078, ebp push dword ptr [esi+14h] call sub_7F82472B mov eax, [esi+14h] push 2 mov ecx, [eax] mov edx, [ecx+6] mov ecx, [esp+28h+var_14] mov eax, [edx] mov [eax+0Ch], ecx mov [eax+10h], ecx push dword ptr [esi+8] push dword ptr [esi] call sub_7F81155C cmp eax, ebp mov ebx, eax jz short loc_7F8183A7 lea ebp, [esi+1Ch] mov edx, [ebx] push 20h mov eax, [ebp+0] mov ecx, [eax] mov ax, [edx+0Ch] mov [ecx+0Ch], ax movsx eax, word ptr [ecx] imul eax, 0Ch add eax, 0Eh push eax push ebx call sub_7F82F1FF test eax, eax jz short loc_7F818382 mov eax, [ebp+0] mov eax, [eax] movsx ecx, word ptr [eax] imul ecx, 0Ch add ecx, 0Eh push ecx push eax push dword ptr [ebx] call sub_7F82FCE0 add esp, 0Ch mov ebx, [ebp+0] jmp short loc_7F8183AF ; --------------------------------------------------------------------------- loc_7F818382: ; CODE XREF: sub_7F8181F1+170j push dword ptr [ebp+0] push 2 push dword ptr [esi+8] push dword ptr [esi] call sub_7F811597 lea ecx, [esp+24h+var_10] push ecx push 200000h push dword ptr [esi+8] push dword ptr [esi] call sub_7F82A016 jmp short loc_7F8183AF ; --------------------------------------------------------------------------- loc_7F8183A7: ; CODE XREF: sub_7F8181F1+148j push dword ptr [esi+1Ch] call sub_7F82F1E1 loc_7F8183AF: ; CODE XREF: sub_7F8181F1+18Fj ; sub_7F8181F1+1B4j push 0 lea eax, [esi+14h] push eax call sub_7F824AF5 loc_7F8183BA: ; CODE XREF: sub_7F8181F1+53j test edi, edi jnz short loc_7F8183D0 test ebx, ebx jz short loc_7F8183C8 push ebx call sub_7F82F1E1 loc_7F8183C8: ; CODE XREF: sub_7F8181F1+1CFj push dword ptr [esi+18h] call sub_7F82F1E1 loc_7F8183D0: ; CODE XREF: sub_7F8181F1+99j ; sub_7F8181F1+1CBj mov eax, edi pop ebp pop edi pop esi pop ebx add esp, 14h retn 4 sub_7F8181F1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8183DC proc near ; CODE XREF: sub_7F81D598+2F5p var_20 = byte ptr -20h var_16 = dword ptr -16h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 20h mov edx, [eax] push ebx push esi push edi mov ecx, [edx] xor esi, esi mov eax, [ecx+8] mov edx, [ecx] mov [ebp+var_10], eax mov [ebp+var_8], edx test byte ptr [ecx+4], 1 jnz short loc_7F81840C mov [ebp+var_4], 210h jmp loc_7F818502 ; --------------------------------------------------------------------------- loc_7F81840C: ; CODE XREF: sub_7F8183DC+22j push [ebp+arg_4] push [ebp+var_8] call sub_7F82BCCA test eax, eax jz short loc_7F818427 mov [ebp+var_4], 203h jmp loc_7F818502 ; --------------------------------------------------------------------------- loc_7F818427: ; CODE XREF: sub_7F8183DC+3Dj xor edi, edi push edi push edi push edi push edi push [ebp+arg_4] push [ebp+var_8] call sub_7F82D114 mov [ebp+var_4], eax cmp eax, edi jnz loc_7F818502 push 2 push [ebp+arg_4] push [ebp+var_8] call sub_7F81155C mov ecx, [ebp+arg_0] mov [ebp+var_C], eax mov edx, [ecx] mov ebx, [edx] cmp [ebx+0Ch], edi jnz short loc_7F818474 push edi push edi push edi push edi push ebx call sub_7F8178D8 mov [ebp+var_4], eax cmp eax, edi jnz loc_7F818502 loc_7F818474: ; CODE XREF: sub_7F8183DC+81j cmp [ebp+var_C], 0 mov edi, [ebx+1Ch] jz short loc_7F8184BA push edi call sub_7F82F1CA push 20h mov [ebp+var_16], eax push eax call sub_7F82F18D mov esi, eax test esi, esi jnz short loc_7F81849D mov [ebp+var_4], 400h jmp short loc_7F818502 ; --------------------------------------------------------------------------- loc_7F81849D: ; CODE XREF: sub_7F8183DC+B6j push [ebp+var_16] push dword ptr [edi] mov ebx, [esi] push ebx call sub_7F82FCE0 add esp, 0Ch mov ecx, [ebp+var_C] mov eax, [ecx] mov ax, [eax+0Ch] mov [ebx+0Ch], ax loc_7F8184BA: ; CODE XREF: sub_7F8183DC+9Fj push 1 push [ebp+arg_0] call sub_7F81813C push [ebp+var_10] push [ebp+arg_4] push [ebp+var_8] call sub_7F824774 cmp [ebp+var_C], 0 jz short loc_7F818502 push esi push 2 push [ebp+arg_4] push [ebp+var_8] call sub_7F811597 lea ecx, [ebp+var_20] push ecx push 200000h push [ebp+arg_4] push [ebp+var_8] call sub_7F82A016 push [ebp+var_C] call sub_7F82F1E1 loc_7F818502: ; CODE XREF: sub_7F8183DC+2Bj ; sub_7F8183DC+46j ... cmp [ebp+var_4], 0 jz short loc_7F818512 test esi, esi jz short loc_7F818512 push esi call sub_7F82F1E1 loc_7F818512: ; CODE XREF: sub_7F8183DC+12Aj ; sub_7F8183DC+12Ej mov eax, [ebp+var_4] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8183DC endp ; =============== S U B R O U T I N E ======================================= sub_7F81851E proc near ; CODE XREF: sub_7F8273AF+230p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov esi, [esp+4+arg_0] mov eax, [esi] test byte ptr [eax+5], 40h jz short loc_7F818532 mov eax, 253h jmp short loc_7F81854C ; --------------------------------------------------------------------------- loc_7F818532: ; CODE XREF: sub_7F81851E+Bj cmp dword ptr [eax+0Ch], 0 jz short loc_7F81853E push eax call sub_7F818550 loc_7F81853E: ; CODE XREF: sub_7F81851E+18j push [esp+4+arg_8] push [esp+8+arg_4] push esi call sub_7F818578 loc_7F81854C: ; CODE XREF: sub_7F81851E+12j pop esi retn 0Ch sub_7F81851E endp ; =============== S U B R O U T I N E ======================================= sub_7F818550 proc near ; CODE XREF: sub_7F81851E+1Bp ; sub_7F818AE7+1Ep ... arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] xor edi, edi push edi push 1 push dword ptr [esi+0Ch] push dword ptr [esi] call sub_7F82B9DE push dword ptr [esi+1Ch] mov [esi+0Ch], edi call sub_7F82F1E1 mov [esi+1Ch], edi pop edi pop esi retn 4 sub_7F818550 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818578 proc near ; CODE XREF: sub_7F81851E+29p ; sub_7F818E95+4Ap ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [eax] mov [ebp+var_8], 0 mov edx, [esi+18h] mov ecx, [edx] mov dx, [ebp+arg_4] test dx, dx jl loc_7F818623 mov ax, [ecx] cmp dx, ax jge short loc_7F818623 movsx edi, dx imul edi, 0Ch mov ebx, [ecx+edi+16h] cmp [ebp+arg_8], ebx jbe short loc_7F8185C6 push [ebp+arg_8] push edx push esi call sub_7F818786 mov [ebp+var_8], eax jmp short loc_7F81862A ; --------------------------------------------------------------------------- loc_7F8185C6: ; CODE XREF: sub_7F818578+3Dj jnb short loc_7F81862A mov dx, [esi+10h] add dx, ax cmp word ptr [esi+12h], 0 mov [ebp+var_2], dx jnz short loc_7F8185EE push 5 push esi call sub_7F818734 mov [ebp+var_8], eax test eax, eax jnz short loc_7F81862A mov eax, [esi+18h] mov ecx, [eax] loc_7F8185EE: ; CODE XREF: sub_7F818578+60j movsx eax, [ebp+var_2] imul eax, 0Ch sub ebx, [ebp+arg_8] lea edx, [eax+ecx] mov [eax+ecx+16h], ebx mov eax, [ecx+edi+12h] add eax, [ebp+arg_8] mov [edx+12h], eax mov edx, [ebp+arg_8] mov [ecx+edi+16h], edx push dword ptr [ebp+var_2] push esi inc word ptr [esi+10h] dec word ptr [esi+12h] call sub_7F818636 jmp short loc_7F81862A ; --------------------------------------------------------------------------- loc_7F818623: ; CODE XREF: sub_7F818578+22j ; sub_7F818578+2Ej mov [ebp+var_8], 1005h loc_7F81862A: ; CODE XREF: sub_7F818578+4Cj ; sub_7F818578:loc_7F8185C6j ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F818578 endp ; =============== S U B R O U T I N E ======================================= sub_7F818636 proc near ; CODE XREF: sub_7F818578+A4p ; sub_7F818786+80p ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = word ptr 8 mov eax, [esp+arg_0] sub esp, 10h add eax, 10h push ebx mov cx, [eax] push esi mov edx, [esp+18h+arg_0] push edi mov [esp+1Ch+var_8], eax push ebp mov eax, [edx+18h] mov edx, [eax] movsx eax, [esp+20h+arg_4] imul eax, 0Ch cmp cx, 1 lea esi, [eax+edx+0Eh] jle loc_7F81872A movsx eax, word ptr [edx] mov bx, cx imul eax, 0Ch dec cx lea edi, [eax+edx+0Eh] test bx, bx jle loc_7F81872A loc_7F818682: ; CODE XREF: sub_7F818636+EEj cmp edi, esi jnz short loc_7F81868E add edi, 0Ch jmp loc_7F81871C ; --------------------------------------------------------------------------- loc_7F81868E: ; CODE XREF: sub_7F818636+4Ej lea eax, [edi+4] lea ebp, [edi+8] mov [esp+20h+var_4], eax mov [esp+20h+var_C], ebp mov ebx, [eax] mov eax, [ebp+0] add eax, ebx sub eax, [esi+4] cmp eax, 1 sbb eax, eax neg eax mov [esp+20h+var_10], eax test eax, eax jnz short loc_7F8186C4 mov eax, [esi+8] add eax, [esi+4] cmp eax, ebx jz short loc_7F8186C4 add edi, 0Ch jmp short loc_7F81871C ; --------------------------------------------------------------------------- loc_7F8186C4: ; CODE XREF: sub_7F818636+7Dj ; sub_7F818636+87j mov eax, [esp+20h+var_8] mov bp, [eax] add bp, [edx] dec bp cmp [esp+20h+var_10], 0 jz short loc_7F8186DA mov [esi+4], ebx loc_7F8186DA: ; CODE XREF: sub_7F818636+9Fj mov eax, [esp+20h+var_C] mov ebx, [eax] mov eax, [esp+20h+var_4] add [esi+8], ebx movsx ebx, bp imul ebx, 0Ch mov ebp, [edx+ebx+12h] mov [eax], ebp mov ebp, [edx+ebx+16h] mov eax, [esp+20h+var_C] sub ebx, esi add ebx, edx mov [eax], ebp cmp ebx, 0FFFFFFF2h jnz short loc_7F81870D dec cx mov esi, edi add edi, 0Ch loc_7F81870D: ; CODE XREF: sub_7F818636+CEj mov eax, [esp+20h+var_8] mov ebx, [esp+20h+arg_0] dec word ptr [eax] inc word ptr [ebx+12h] loc_7F81871C: ; CODE XREF: sub_7F818636+53j ; sub_7F818636+8Cj mov ax, cx dec cx test ax, ax jg loc_7F818682 loc_7F81872A: ; CODE XREF: sub_7F818636+2Ej ; sub_7F818636+46j pop ebp pop edi pop esi pop ebx add esp, 10h retn 8 sub_7F818636 endp ; =============== S U B R O U T I N E ======================================= sub_7F818734 proc near ; CODE XREF: sub_7F818578+65p ; sub_7F818816+B5p ... arg_0 = dword ptr 4 arg_4 = word ptr 8 push esi push edi mov esi, [esp+8+arg_0] mov edx, [esi+18h] movsx ecx, word ptr [esi+10h] mov eax, [edx] movsx edi, word ptr [eax] add ecx, edi mov di, [esp+8+arg_4] movsx eax, di add ecx, eax imul ecx, 0Ch add ecx, 0Eh cmp ecx, 0FFFFh jb short loc_7F818767 mov eax, 400h jmp short loc_7F818781 ; --------------------------------------------------------------------------- loc_7F818767: ; CODE XREF: sub_7F818734+2Aj push 30h push ecx push edx call sub_7F82F1FF test eax, eax jnz short loc_7F81877B mov eax, 400h jmp short loc_7F818781 ; --------------------------------------------------------------------------- loc_7F81877B: ; CODE XREF: sub_7F818734+3Ej mov [esi+12h], di xor eax, eax loc_7F818781: ; CODE XREF: sub_7F818734+31j ; sub_7F818734+45j pop edi pop esi retn 8 sub_7F818734 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818786 proc near ; CODE XREF: sub_7F818578+44p ; sub_7F819D64+E5p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [ebp+arg_0] push [ebp+arg_8] push [ebp+arg_4] push esi xor edi, edi call sub_7F8189C2 test eax, eax jnz short loc_7F81880B mov eax, [esi+14h] lea ecx, [ebp+var_2] push ecx mov [ebp+var_8], eax push [ebp+arg_8] push esi call sub_7F818816 mov edi, eax test edi, edi jnz short loc_7F81880B mov eax, [esi+18h] mov ebx, [eax] movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch mov edx, [eax+ebx+16h] lea ecx, [eax+ebx] movsx eax, [ebp+var_2] imul eax, 0Ch mov [ebp+var_C], edx lea edx, [ebp+var_C] push edx push dword ptr [eax+ebx+12h] push [ebp+var_8] push dword ptr [ecx+12h] push [ebp+var_8] call sub_7F8255B9 mov edi, eax test edi, edi jnz short loc_7F81880B push dword ptr [ebp+var_2] push [ebp+arg_4] push ebx call sub_7F81897A push dword ptr [ebp+var_2] push esi call sub_7F818636 loc_7F81880B: ; CODE XREF: sub_7F818786+1Cj ; sub_7F818786+35j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F818786 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818816 proc near ; CODE XREF: sub_7F818786+2Cp ; sub_7F818B75+35p ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_C], 0 push ebx push esi push edi mov esi, [ebp+arg_0] mov cx, [esi+10h] mov eax, [esi+18h] mov [ebp+var_2], cx mov ebx, [eax] movsx eax, word ptr [ebx] imul eax, 0Ch mov dx, [ebp+var_2] mov ecx, [ebp+arg_8] lea edi, [eax+ebx+0Eh] mov eax, 0FFFFFFFFh mov word ptr [ebp+var_8+2], ax mov [ebp+var_10], eax mov [ecx], ax add [ebp+var_2], ax test dx, dx jle short loc_7F8188B4 loc_7F81885F: ; CODE XREF: sub_7F818816+82j mov eax, [edi+8] cmp [ebp+arg_4], eax jz short loc_7F81889C jnb short loc_7F81888A sub eax, [ebp+arg_4] cmp [ebp+var_10], eax jbe short loc_7F81888A sub edx, edx mov ecx, 0Ch mov [ebp+var_10], eax mov eax, 0FFFFFFF2h sub eax, ebx add eax, edi div ecx mov word ptr [ebp+var_8+2], ax loc_7F81888A: ; CODE XREF: sub_7F818816+51j ; sub_7F818816+59j mov ax, [ebp+var_2] add edi, 0Ch dec [ebp+var_2] test ax, ax jg short loc_7F81885F jmp short loc_7F8188B4 ; --------------------------------------------------------------------------- loc_7F81889C: ; CODE XREF: sub_7F818816+4Fj mov eax, 0FFFFFFF2h mov ecx, 0Ch sub eax, ebx sub edx, edx add eax, edi div ecx mov edx, [ebp+arg_8] mov [edx], ax loc_7F8188B4: ; CODE XREF: sub_7F818816+47j ; sub_7F818816+84j xor edi, edi mov ecx, [ebp+arg_8] cmp [ecx], di jge loc_7F81896E cmp [esi+12h], di jnz short loc_7F8188E0 push 5 push esi call sub_7F818734 mov [ebp+var_C], eax cmp eax, edi jnz loc_7F81896E mov eax, [esi+18h] mov ebx, [eax] loc_7F8188E0: ; CODE XREF: sub_7F818816+B0j mov di, [esi+10h] add di, [ebx] cmp word ptr [ebp+var_8+2], 0 jl short loc_7F818922 movsx eax, di imul eax, 0Ch lea ecx, [eax+ebx] movsx eax, word ptr [ebp+var_8+2] imul eax, 0Ch lea edx, [eax+ebx] mov ebx, [ebp+var_10] mov eax, [edx+12h] add eax, [ebp+arg_4] mov [ecx+12h], eax mov ax, word ptr [ebp+var_8+2] mov [ecx+16h], ebx mov ecx, [ebp+arg_4] mov [edx+16h], ecx mov edx, [ebp+arg_8] mov [edx], ax jmp short loc_7F818966 ; --------------------------------------------------------------------------- loc_7F818922: ; CODE XREF: sub_7F818816+D6j mov dword ptr [ebp-8], 0 lea eax, [ebp+var_8] push eax push 3 push dword ptr [esi+14h] call sub_7F8254CC push 1 push [ebp+arg_4] push dword ptr [esi+14h] call sub_7F825546 mov [ebp+var_C], eax test eax, eax jnz short loc_7F81896E movsx eax, di imul eax, 0Ch mov edx, [ebp+var_8] lea ecx, [eax+ebx] mov eax, [ebp+arg_4] mov [ecx+12h], edx mov [ecx+16h], eax mov ecx, [ebp+arg_8] mov [ecx], di loc_7F818966: ; CODE XREF: sub_7F818816+10Aj inc word ptr [esi+10h] dec word ptr [esi+12h] loc_7F81896E: ; CODE XREF: sub_7F818816+A6j ; sub_7F818816+BFj ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F818816 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81897A proc near ; CODE XREF: sub_7F818786+77p ; sub_7F818E95+84p ... arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h push ebp mov ecx, [esp+arg_0] movsx eax, [esp+arg_4] imul eax, 0Ch mov ebp, esp push esi push edi lea edx, [eax+ecx+0Eh] movsx eax, [ebp+arg_8] imul eax, 0Ch lea esi, [eax+ecx+0Eh] mov cx, [ebp+arg_4] cmp [ebp+arg_8], cx jz short loc_7F8189BC mov ecx, [edx+4] mov edi, [edx+8] mov eax, [esi+4] mov [edx+4], eax mov eax, [esi+8] mov [edx+8], eax mov [esi+4], ecx mov [esi+8], edi loc_7F8189BC: ; CODE XREF: sub_7F81897A+28j pop edi pop esi pop ebp retn 0Ch sub_7F81897A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8189C2 proc near ; CODE XREF: sub_7F818786+15p ; sub_7F818E95+5Ep ... var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 18h mov ecx, [eax+18h] push ebx push esi push edi mov esi, [ecx] movsx eax, word ptr [esi] imul eax, 0Ch lea edi, [eax+esi+0Eh] mov eax, [ebp+arg_0] add eax, 10h mov [ebp+var_C], eax mov ax, [eax] mov ebx, [ebp+arg_8] mov [ebp+var_2], ax movsx eax, [ebp+arg_4] imul eax, 0Ch add eax, esi mov [ebp+var_8], eax mov eax, [eax+16h] sub ebx, eax mov ecx, [ebp+var_8] mov [ebp+var_14], 0 mov ecx, [ecx+12h] add ecx, eax test ebx, ebx mov [ebp+var_18], ecx jge short loc_7F818A1A neg ebx loc_7F818A1A: ; CODE XREF: sub_7F8189C2+54j mov eax, [ebp+arg_0] add eax, 14h mov [ebp+var_10], eax push dword ptr [eax] call sub_7F82559E cmp [ebp+var_18], eax jnz short loc_7F818A49 push 1 mov eax, [ebp+var_10] push ebx push dword ptr [eax] call sub_7F825546 test eax, eax jnz loc_7F818ADB jmp loc_7F818ACB ; --------------------------------------------------------------------------- loc_7F818A49: ; CODE XREF: sub_7F8189C2+6Bj ; sub_7F8189C2+9Fj mov cx, [ebp+var_2] dec [ebp+var_2] test cx, cx jz short loc_7F818A63 mov edx, edi mov ecx, [ebp+var_18] add edi, 0Ch cmp [edx+4], ecx jnz short loc_7F818A49 loc_7F818A63: ; CODE XREF: sub_7F8189C2+92j sub edi, 0Ch cmp [ebp+var_2], 0 jl short loc_7F818ADB mov ecx, [edi+8] cmp ebx, ecx jbe short loc_7F818A95 mov edx, [edi+4] add edx, ecx cmp edx, eax jnz short loc_7F818ADB push 1 mov eax, ebx sub eax, ecx mov ecx, [ebp+var_10] push eax push dword ptr [ecx] call sub_7F825546 test eax, eax jnz short loc_7F818ADB mov [edi+8], ebx loc_7F818A95: ; CODE XREF: sub_7F8189C2+B0j mov eax, [edi+8] cmp ebx, eax jnz short loc_7F818AC3 mov eax, [ebp+var_C] mov ax, [eax] add ax, [esi] dec ax movsx eax, ax imul eax, 0Ch lea esi, [eax+esi+0Eh] movsd movsd movsd mov ecx, [ebp+var_C] mov edx, [ebp+arg_0] dec word ptr [ecx] inc word ptr [edx+12h] jmp short loc_7F818ACB ; --------------------------------------------------------------------------- loc_7F818AC3: ; CODE XREF: sub_7F8189C2+D8j sub eax, ebx mov [edi+8], eax add [edi+4], ebx loc_7F818ACB: ; CODE XREF: sub_7F8189C2+82j ; sub_7F8189C2+FFj mov eax, [ebp+arg_8] mov ecx, [ebp+var_8] mov [ebp+var_14], 1 mov [ecx+16h], eax loc_7F818ADB: ; CODE XREF: sub_7F8189C2+7Cj ; sub_7F8189C2+A9j ... mov eax, [ebp+var_14] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F8189C2 endp ; =============== S U B R O U T I N E ======================================= sub_7F818AE7 proc near ; CODE XREF: sub_7F81BF33+214p ; sub_7F81C461+64p ... arg_0 = dword ptr 4 arg_4 = word ptr 8 mov eax, [esp+arg_0] push esi push edi xor esi, esi mov edi, [eax] test byte ptr [edi+5], 40h jz short loc_7F818AFE mov esi, 253h jmp short loc_7F818B2C ; --------------------------------------------------------------------------- loc_7F818AFE: ; CODE XREF: sub_7F818AE7+Ej cmp dword ptr [edi+0Ch], 0 jz short loc_7F818B0A push edi call sub_7F818550 loc_7F818B0A: ; CODE XREF: sub_7F818AE7+1Bj mov cx, [esp+8+arg_4] test cx, cx jl short loc_7F818B27 mov eax, [edi+18h] mov edx, [eax] cmp [edx], cx jle short loc_7F818B27 push ecx push edi call sub_7F818B33 jmp short loc_7F818B2C ; --------------------------------------------------------------------------- loc_7F818B27: ; CODE XREF: sub_7F818AE7+2Bj ; sub_7F818AE7+35j mov esi, 1005h loc_7F818B2C: ; CODE XREF: sub_7F818AE7+15j ; sub_7F818AE7+3Ej mov eax, esi pop edi pop esi retn 8 sub_7F818AE7 endp ; =============== S U B R O U T I N E ======================================= sub_7F818B33 proc near ; CODE XREF: sub_7F818AE7+39p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esi+18h] movsx edx, word ptr [esp+0Ch+arg_4] mov eax, [eax] mov cx, [eax] movsx ebx, cx lea edi, [ecx-1] sub edx, ebx mov [eax], di cmp edx, 0FFFFFFFFh jz short loc_7F818B64 push ecx push 1 push [esp+14h+arg_4] push eax call sub_7F81A140 loc_7F818B64: ; CODE XREF: sub_7F818B33+22j inc word ptr [esi+10h] push edi push esi call sub_7F818636 pop edi pop esi pop ebx retn 8 sub_7F818B33 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818B75 proc near ; CODE XREF: sub_7F80FFF8+C7p ; sub_7F810C9B+7Ap ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [eax] test byte ptr [esi+5], 40h jz short loc_7F818B96 mov [ebp+var_8], 253h jmp loc_7F818CAA ; --------------------------------------------------------------------------- loc_7F818B96: ; CODE XREF: sub_7F818B75+13j cmp dword ptr [esi+0Ch], 0 jz short loc_7F818BA2 push esi call sub_7F818550 loc_7F818BA2: ; CODE XREF: sub_7F818B75+25j lea eax, [ebp+var_2] push eax push [ebp+arg_C] push esi call sub_7F818816 mov [ebp+var_8], eax test eax, eax jnz loc_7F818CAA mov eax, [esi+18h] mov edi, [eax] movzx eax, word ptr [edi] inc eax cmp eax, 1519h jl short loc_7F818BD6 mov [ebp+var_8], 1017h jmp loc_7F818CAA ; --------------------------------------------------------------------------- loc_7F818BD6: ; CODE XREF: sub_7F818B75+53j mov eax, [ebp+arg_8] inc eax cmp eax, 1 sbb eax, eax neg eax mov [ebp+var_C], eax test eax, eax jz short loc_7F818BFE loc_7F818BE8: ; CODE XREF: sub_7F818B75+87j call sub_7F82AC0C push 0 mov [ebp+arg_8], eax push eax push edi call sub_7F819486 test ax, ax jge short loc_7F818BE8 loc_7F818BFE: ; CODE XREF: sub_7F818B75+71j xor eax, eax mov ax, [edi+2] and eax, 3 jz short loc_7F818C1A cmp eax, 2 jz short loc_7F818C50 mov [ebp+var_8], 2004h jmp loc_7F818CAA ; --------------------------------------------------------------------------- loc_7F818C1A: ; CODE XREF: sub_7F818B75+92j mov ebx, [ebp+arg_4] mov ax, [ebx] test ax, ax jl short loc_7F818C2A cmp [edi], ax jg short loc_7F818C31 loc_7F818C2A: ; CODE XREF: sub_7F818B75+AEj mov ax, [edi+4] mov [ebx], ax loc_7F818C31: ; CODE XREF: sub_7F818B75+B3j ; sub_7F818B75+F3j cmp [ebp+var_C], 0 jnz short loc_7F818C73 push 0 push [ebp+arg_8] push edi call sub_7F819486 test ax, ax jl short loc_7F818C73 mov [ebp+var_8], 1003h jmp short loc_7F818CAA ; --------------------------------------------------------------------------- loc_7F818C50: ; CODE XREF: sub_7F818B75+97j mov ax, [edi] push eax push 0 push [ebp+arg_8] push edi call sub_7F818CB6 test ax, ax mov ebx, [ebp+arg_4] mov [ebx], ax jge short loc_7F818C31 mov [ebp+var_8], 1003h jmp short loc_7F818CAA ; --------------------------------------------------------------------------- loc_7F818C73: ; CODE XREF: sub_7F818B75+C0j ; sub_7F818B75+D0j mov ax, [ebx] test ax, ax jl short loc_7F818C80 cmp [edi], ax jg short loc_7F818C86 loc_7F818C80: ; CODE XREF: sub_7F818B75+104j mov ax, [edi] mov [ebx], ax loc_7F818C86: ; CODE XREF: sub_7F818B75+109j inc word ptr [edi] mov eax, [ebp+arg_8] dec word ptr [esi+10h] movsx ecx, [ebp+var_2] imul ecx, 0Ch mov [ecx+edi+0Eh], eax mov dx, [ebx] push edx push 1 push dword ptr [ebp+var_2] push edi call sub_7F81A140 loc_7F818CAA: ; CODE XREF: sub_7F818B75+1Cj ; sub_7F818B75+3Fj ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F818B75 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818CB6 proc near ; CODE XREF: sub_7F818B75+E5p ; sub_7F819A4E+4Ep ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h push ebp mov ecx, [esp+arg_0] mov ax, [ecx+2] mov ebp, esp and ax, 4 push esi shr ax, 2 push edi movzx esi, ax mov ax, [ebp+arg_C] mov di, [ebp+arg_8] cmp ax, di jz short loc_7F818D3B test esi, esi jz short loc_7F818CE5 movsx edx, ax dec edx jmp short loc_7F818CE8 ; --------------------------------------------------------------------------- loc_7F818CE5: ; CODE XREF: sub_7F818CB6+27j movsx edx, di loc_7F818CE8: ; CODE XREF: sub_7F818CB6+2Dj imul edx, 0Ch test esi, esi lea edx, [edx+ecx+0Eh] jz short loc_7F818CF9 movsx eax, di dec eax jmp short loc_7F818CFC ; --------------------------------------------------------------------------- loc_7F818CF9: ; CODE XREF: sub_7F818CB6+3Bj movsx eax, ax loc_7F818CFC: ; CODE XREF: sub_7F818CB6+41j imul eax, 0Ch lea edi, [eax+ecx+0Eh] cmp edi, edx jz short loc_7F818D20 loc_7F818D07: ; CODE XREF: sub_7F818CB6+68j mov eax, [edx] cmp [ebp+arg_4], eax jb short loc_7F818D20 jz short loc_7F818D41 test esi, esi jz short loc_7F818D19 sub edx, 0Ch jmp short loc_7F818D1C ; --------------------------------------------------------------------------- loc_7F818D19: ; CODE XREF: sub_7F818CB6+5Cj add edx, 0Ch loc_7F818D1C: ; CODE XREF: sub_7F818CB6+61j cmp edi, edx jnz short loc_7F818D07 loc_7F818D20: ; CODE XREF: sub_7F818CB6+4Fj ; sub_7F818CB6+56j mov eax, 0FFFFFFF2h sub eax, ecx mov ecx, 0Ch add eax, edx sub edx, edx div ecx cmp esi, 1 sbb edx, edx lea eax, [edx+eax+1] loc_7F818D3B: ; CODE XREF: sub_7F818CB6+23j ; sub_7F818CB6+8Fj pop edi pop esi pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F818D41: ; CODE XREF: sub_7F818CB6+58j mov ax, 0FFFFh jmp short loc_7F818D3B sub_7F818CB6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818D47 proc near ; CODE XREF: sub_7F80FE90+98p ; sub_7F810181+45p ... arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp push ebx push esi mov ecx, [eax] mov ax, [ebp+arg_4] push edi xor esi, esi mov ebx, [ecx+18h] cmp ax, si mov edx, [ebx] jl short loc_7F818DB2 cmp [edx], ax jle short loc_7F818DB2 movsx eax, ax imul eax, 0Ch add eax, edx mov edx, [ebp+arg_10] mov edi, [eax+16h] cmp [ebp+arg_8], edi jbe short loc_7F818D84 mov eax, 1014h mov [edx], esi jmp short loc_7F818DC0 ; --------------------------------------------------------------------------- loc_7F818D84: ; CODE XREF: sub_7F818D47+32j mov ebx, [edx] add ebx, [ebp+arg_8] cmp ebx, edi jbe short loc_7F818D97 mov esi, 1014h sub edi, [ebp+arg_8] mov [edx], edi loc_7F818D97: ; CODE XREF: sub_7F818D47+44j mov eax, [eax+12h] add eax, [ebp+arg_8] push eax push edx push [ebp+arg_C] push dword ptr [ecx+14h] call sub_7F824CAB test eax, eax jnz short loc_7F818DC0 mov eax, esi jmp short loc_7F818DC0 ; --------------------------------------------------------------------------- loc_7F818DB2: ; CODE XREF: sub_7F818D47+1Aj ; sub_7F818D47+1Fj mov edx, [ebp+arg_10] mov eax, 1005h mov dword ptr [edx], 0 loc_7F818DC0: ; CODE XREF: sub_7F818D47+3Bj ; sub_7F818D47+65j ... pop edi pop esi pop ebx pop ebp retn 14h sub_7F818D47 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818DC7 proc near ; CODE XREF: sub_7F80FFF8+E1p ; sub_7F810567+160p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ecx, [esp+arg_0] mov ebp, esp push esi mov eax, [ecx] test byte ptr [eax+5], 40h jz short loc_7F818DDE mov eax, 253h jmp short loc_7F818E0A ; --------------------------------------------------------------------------- loc_7F818DDE: ; CODE XREF: sub_7F818DC7+Ej mov edx, [ebp+arg_4] mov si, [edx] test si, si jl short loc_7F818E05 mov eax, [eax+18h] mov eax, [eax] cmp [eax], si jle short loc_7F818E05 push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push edx push ecx call sub_7F818E0F jmp short loc_7F818E0A ; --------------------------------------------------------------------------- loc_7F818E05: ; CODE XREF: sub_7F818DC7+20j ; sub_7F818DC7+2Aj mov eax, 1005h loc_7F818E0A: ; CODE XREF: sub_7F818DC7+15j ; sub_7F818DC7+3Cj pop esi pop ebp retn 14h sub_7F818DC7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818E0F proc near ; CODE XREF: sub_7F818DC7+37p ; sub_7F818E95+9Cp var_8 = dword ptr -8 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [eax] mov ecx, [esi+18h] mov edi, [ecx] mov ebx, [ebp+arg_4] movsx ecx, word ptr [ebx] mov ax, [edi+2] imul ecx, 0Ch and al, 3 mov [ebp+var_1], al mov eax, [ebp+arg_8] add eax, [ebp+arg_10] mov [ebp+var_8], eax cmp [ecx+edi+16h], eax jnb short loc_7F818E4B mov eax, 1014h jmp short loc_7F818E8C ; --------------------------------------------------------------------------- loc_7F818E4B: ; CODE XREF: sub_7F818E0F+33j cmp dword ptr [esi+0Ch], 0 jz short loc_7F818E57 push esi call sub_7F818550 loc_7F818E57: ; CODE XREF: sub_7F818E0F+40j movsx eax, word ptr [ebx] imul eax, 0Ch mov eax, [eax+edi+12h] add eax, [ebp+arg_8] push eax push [ebp+arg_10] push [ebp+arg_C] push dword ptr [esi+14h] call sub_7F825278 test eax, eax jnz short loc_7F818E8C test [ebp+var_1], 1 jz short loc_7F818E8C mov eax, [ebp+var_8] dec eax push eax push [ebp+arg_8] push ebx push esi call sub_7F818F46 loc_7F818E8C: ; CODE XREF: sub_7F818E0F+3Aj ; sub_7F818E0F+66j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F818E0F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818E95 proc near ; CODE XREF: sub_7F810109+5Dp ; sub_7F81C56F+36Cp ... var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [ebp+arg_0] mov edi, [ebp+arg_4] mov ecx, [esi] mov eax, [ecx+18h] mov ebx, [eax] mov ax, [edi] test ax, ax jl loc_7F818F38 cmp [ebx], ax jle short loc_7F818F38 cmp dword ptr [ecx+0Ch], 0 jz short loc_7F818EC8 push ecx call sub_7F818550 loc_7F818EC8: ; CODE XREF: sub_7F818E95+2Bj mov cx, [edi] movsx eax, cx imul eax, 0Ch mov eax, [eax+ebx+16h] cmp eax, [ebp+arg_C] jbe short loc_7F818EEA push [ebp+arg_C] push ecx push esi call sub_7F818578 test eax, eax jz short loc_7F818F27 jmp short loc_7F818F3D ; --------------------------------------------------------------------------- loc_7F818EEA: ; CODE XREF: sub_7F818E95+43j jnb short loc_7F818F27 push [ebp+arg_C] push ecx mov ebx, [esi] push ebx call sub_7F8189C2 test eax, eax jnz short loc_7F818F27 lea eax, [ebp+var_2] push eax push [ebp+arg_C] push ebx call sub_7F818816 test eax, eax jnz short loc_7F818F3D push dword ptr [ebp+var_2] mov ax, [edi] mov ecx, [ebx+18h] push eax push dword ptr [ecx] call sub_7F81897A push dword ptr [ebp+var_2] push ebx call sub_7F818636 loc_7F818F27: ; CODE XREF: sub_7F818E95+51j ; sub_7F818E95:loc_7F818EEAj ... push [ebp+arg_C] push [ebp+arg_8] push 0 push edi push esi call sub_7F818E0F jmp short loc_7F818F3D ; --------------------------------------------------------------------------- loc_7F818F38: ; CODE XREF: sub_7F818E95+1Cj ; sub_7F818E95+25j mov eax, 1005h loc_7F818F3D: ; CODE XREF: sub_7F818E95+53j ; sub_7F818E95+76j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F818E95 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F818F46 proc near ; CODE XREF: sub_7F818E0F+78p ; sub_7F81A0C1+50p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, 0FFFFFFFFh mov ebp, esp sub esp, 10h mov [ebp+var_2], ax push ebx push esi mov ecx, [ebp+arg_0] push edi xor esi, esi mov edx, [ecx+18h] mov [ebp+var_C], eax mov [ebp+var_10], eax mov ebx, [edx] mov ax, [ebx+2] and al, 3 cmp al, 1 jnz short loc_7F818F80 mov eax, [ebx+4] mov [ebp+var_C], eax mov ecx, [ebx+8] mov [ebp+var_10], ecx jmp short loc_7F818FC3 ; --------------------------------------------------------------------------- loc_7F818F80: ; CODE XREF: sub_7F818F46+2Aj mov eax, [ebp+arg_C] cmp [ebx+4], eax ja short loc_7F818FC3 mov edi, [ebp+arg_4] lea esi, [ebp+var_10] mov cx, [edi] push esi movsx eax, cx imul eax, 0Ch mov edx, [eax+ebx+12h] lea eax, [ebp+var_C] push eax mov [ebp+var_8], edx push ecx push 0 push [ebp+arg_0] call sub_7F8190B0 mov esi, eax test esi, esi jnz loc_7F8190A5 mov eax, [ebp+var_8] sub [ebp+var_C], eax sub [ebp+var_10], eax jmp short loc_7F818FC6 ; --------------------------------------------------------------------------- loc_7F818FC3: ; CODE XREF: sub_7F818F46+38j ; sub_7F818F46+40j mov edi, [ebp+arg_4] loc_7F818FC6: ; CODE XREF: sub_7F818F46+7Bj test esi, esi jnz loc_7F8190A5 mov eax, [ebp+arg_8] cmp [ebp+var_10], eax jb loc_7F8190A5 mov eax, [ebp+arg_C] cmp [ebp+var_C], eax ja loc_7F8190A5 mov cx, [edi] test cx, cx jle short loc_7F81901E lea eax, [ebp+var_8] push eax push ecx push [ebp+arg_0] dec cx push ecx push [ebp+arg_0] call sub_7F81917E mov esi, eax test esi, esi jnz short loc_7F81901E cmp [ebp+var_8], 1 jnz short loc_7F81901E mov cx, [edi] lea eax, [ebp+var_2] push eax mov ax, cx dec ax push eax push 0 jmp short loc_7F819063 ; --------------------------------------------------------------------------- loc_7F81901E: ; CODE XREF: sub_7F818F46+A6j ; sub_7F818F46+BFj ... movsx eax, word ptr [ebx] mov cx, [edi] dec eax movsx edx, cx cmp eax, edx jle short loc_7F819071 test esi, esi jnz short loc_7F8190A5 lea eax, [ebp+var_8] push eax mov ax, cx inc ax push eax push [ebp+arg_0] push ecx push [ebp+arg_0] call sub_7F81917E mov esi, eax test esi, esi jnz short loc_7F8190A5 cmp [ebp+var_8], 1 jnz short loc_7F819071 mov cx, [edi] lea eax, [ebp+var_2] mov dx, [ebx] push eax mov ax, cx push edx inc ax push eax loc_7F819063: ; CODE XREF: sub_7F818F46+D6j push [ebp+arg_0] push ecx push [ebp+arg_0] call sub_7F81942B mov esi, eax loc_7F819071: ; CODE XREF: sub_7F818F46+E4j ; sub_7F818F46+10Aj test esi, esi jnz short loc_7F8190A5 cmp [ebp+var_2], 0 jl short loc_7F8190A5 mov ax, [edi] cmp [ebp+var_2], ax jz short loc_7F8190A5 push dword ptr [ebp+var_2] push 1 push eax push ebx call sub_7F81A140 mov ax, [ebp+var_2] cmp [edi], ax jge short loc_7F81909E dec [ebp+var_2] loc_7F81909E: ; CODE XREF: sub_7F818F46+152j mov ax, [ebp+var_2] mov [edi], ax loc_7F8190A5: ; CODE XREF: sub_7F818F46+6Cj ; sub_7F818F46+82j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F818F46 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8190B0 proc near ; CODE XREF: sub_7F818F46+63p ; sub_7F81917E+4Ap ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp xor eax, eax mov ebp, esp sub esp, 8 push ebx mov ecx, [ebp+arg_0] push esi push edi mov edx, [ecx+14h] mov ebx, [ecx+18h] mov edi, [ebp+arg_4] mov [ebp+var_8], edx mov ecx, [ebx] cmp edi, eax jnz short loc_7F8190D3 lea edi, [ecx+2] loc_7F8190D3: ; CODE XREF: sub_7F8190B0+1Ej movsx edx, [ebp+arg_8] mov si, [edi+6] imul edx, 0Ch add ecx, edx mov edx, [edi+2] mov edi, [ebp+arg_C] add edx, [ecx+12h] mov [ebp+var_4], edx mov ebx, [ecx+16h] mov cx, si mov [edi], edx dec si test cx, cx jle short loc_7F819133 loc_7F8190FB: ; CODE XREF: sub_7F8190B0+81j test ebx, ebx jz short loc_7F819133 mov eax, [edi] push 0 push ebx mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push [ebp+var_8] call sub_7F82573F test eax, eax jnz short loc_7F819175 cmp [ebp+var_4], 0 jl short loc_7F819133 inc [ebp+var_4] mov ecx, [ebp+var_4] sub ebx, ecx add ebx, [edi] mov [edi], ecx mov cx, si dec si test cx, cx jg short loc_7F8190FB loc_7F819133: ; CODE XREF: sub_7F8190B0+49j ; sub_7F8190B0+4Dj ... mov esi, [ebp+arg_10] test esi, esi jz short loc_7F81916A cmp [ebp+var_4], 0 jl short loc_7F819170 test ebx, ebx jz short loc_7F819163 mov eax, [edi] push 0 push ebx mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push [ebp+var_8] call sub_7F82573F test eax, eax jnz short loc_7F819175 mov ecx, [ebp+var_4] mov [esi], ecx jmp short loc_7F81916A ; --------------------------------------------------------------------------- loc_7F819163: ; CODE XREF: sub_7F8190B0+92j mov [ebp+var_4], 0FFFFFFFFh loc_7F81916A: ; CODE XREF: sub_7F8190B0+88j ; sub_7F8190B0+B1j cmp [ebp+var_4], 0 jge short loc_7F819175 loc_7F819170: ; CODE XREF: sub_7F8190B0+8Ej mov eax, 2005h loc_7F819175: ; CODE XREF: sub_7F8190B0+65j ; sub_7F8190B0+AAj ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8190B0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81917E proc near ; CODE XREF: sub_7F818F46+B6p ; sub_7F818F46+FBp ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 18h push ebx mov ecx, [ebp+arg_8] push esi push edi mov esi, [ebp+arg_0] mov eax, [esi+18h] mov ebx, [eax] mov eax, [ecx+18h] mov edi, [eax] mov al, [esi+8] cmp al, 82h jz short loc_7F8191AB cmp al, 83h jz short loc_7F8191AB mov [ebp+var_14], 0 jmp short loc_7F8191B2 ; --------------------------------------------------------------------------- loc_7F8191AB: ; CODE XREF: sub_7F81917E+1Ej ; sub_7F81917E+22j mov [ebp+var_14], 1 loc_7F8191B2: ; CODE XREF: sub_7F81917E+2Bj mov ax, [ebx+2] and al, 3 cmp al, 3 jnz short loc_7F81923B push 0 lea eax, [ebp+var_8] push eax push [ebp+arg_4] push 0 push esi call sub_7F8190B0 test eax, eax jnz loc_7F819358 push 0 lea eax, [ebp+var_C] push eax lea eax, [ebx+2] push [ebp+arg_C] push eax push [ebp+arg_8] call sub_7F8190B0 test eax, eax jnz loc_7F819358 cmp [ebp+var_14], 0 jz short loc_7F819215 cmp word ptr [ebx+8], 1 jnz short loc_7F819215 lea eax, [ebp+var_C] mov ecx, [ebp+arg_8] push eax lea eax, [ebp+var_8] push dword ptr [ecx+14h] push eax push dword ptr [esi+14h] call sub_7F819369 loc_7F819215: ; CODE XREF: sub_7F81917E+78j ; sub_7F81917E+7Fj mov eax, [ebp+arg_8] lea ecx, [ebp+var_4] add eax, 14h push ecx push [ebp+var_C] push dword ptr [eax] push [ebp+var_8] push dword ptr [esi+14h] mov [ebp+var_10], eax call sub_7F8258A3 test eax, eax jz short loc_7F81928F jmp loc_7F819358 ; --------------------------------------------------------------------------- loc_7F81923B: ; CODE XREF: sub_7F81917E+3Cj mov eax, [ebx+4] mov ecx, [ebx+8] movsx edx, word ptr [ebp+arg_4] imul edx, 0Ch sub ecx, eax mov edx, [edx+ebx+12h] inc ecx add edx, eax movsx eax, word ptr [ebp+arg_C] imul eax, 0Ch mov [ebp+var_8], edx mov eax, [eax+edi+12h] add eax, [ebx+4] mov [ebp+var_C], eax mov eax, [ebp+arg_8] add eax, 14h mov [ebp+var_10], eax lea eax, [ebp+var_4] push eax push ecx mov eax, [ebp+var_10] push [ebp+var_C] push dword ptr [eax] push ecx push [ebp+var_8] push dword ptr [esi+14h] call sub_7F825A83 test eax, eax jnz loc_7F819358 loc_7F81928F: ; CODE XREF: sub_7F81917E+B6j test byte ptr [ebx+2], 4 jz short loc_7F81929D mov ecx, [ebp+var_4] neg ecx mov [ebp+var_4], ecx loc_7F81929D: ; CODE XREF: sub_7F81917E+115j cmp [ebp+var_4], 0 jnz loc_7F819358 cmp [ebp+var_14], 0 jz short loc_7F8192F6 mov [ebp+var_C], 0 mov [ebp+var_8], 0 movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch lea edx, [ebp+var_4] mov ecx, [eax+ebx+12h] push edx mov [ebp+var_8], ecx movsx eax, word ptr [ebp+arg_C] imul eax, 0Ch push 0Ah mov ecx, [eax+edi+12h] push ecx mov eax, [ebp+var_10] mov [ebp+var_C], ecx push dword ptr [eax] push 0Ah push [ebp+var_8] push dword ptr [esi+14h] call sub_7F825A83 test eax, eax jz short loc_7F819335 jmp short loc_7F819358 ; --------------------------------------------------------------------------- loc_7F8192F6: ; CODE XREF: sub_7F81917E+12Dj movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch add ebx, eax movsx eax, word ptr [ebp+arg_C] imul eax, 0Ch mov ecx, [ebx+16h] add edi, eax mov eax, [ebx+12h] mov edx, [edi+16h] mov [ebp+var_8], eax mov eax, [ebp+var_10] mov ebx, [edi+12h] lea edi, [ebp+var_4] push edi mov [ebp+var_C], ebx push edx push ebx push dword ptr [eax] push ecx push [ebp+var_8] push dword ptr [esi+14h] call sub_7F825A83 test eax, eax jnz short loc_7F819358 loc_7F819335: ; CODE XREF: sub_7F81917E+174j cmp [ebp+var_4], 0 jnz short loc_7F819358 cmp [ebp+arg_8], esi jnz short loc_7F819351 mov [ebp+var_4], 1 mov cx, word ptr [ebp+arg_4] cmp word ptr [ebp+arg_C], cx jl short loc_7F819358 loc_7F819351: ; CODE XREF: sub_7F81917E+1C0j mov [ebp+var_4], 0FFFFFFFFh loc_7F819358: ; CODE XREF: sub_7F81917E+51j ; sub_7F81917E+6Ej ... mov edx, [ebp+var_4] mov ecx, [ebp+arg_10] pop edi pop esi pop ebx mov [ecx], edx mov esp, ebp pop ebp retn 14h sub_7F81917E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819369 proc near ; CODE XREF: sub_7F81917E+92p var_8 = dword ptr -8 var_4 = byte ptr -4 var_3 = byte ptr -3 var_2 = byte ptr -2 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push esi lea ecx, [ebp+var_8] mov esi, [ebp+arg_4] lea edx, [ebp+var_4] mov [ebp+var_8], 4 push dword ptr [esi] push ecx push edx push [ebp+arg_0] call sub_7F824CAB test eax, eax jnz short loc_7F8193CA loc_7F819390: ; CODE XREF: sub_7F819369+5Fj cmp [ebp+var_8], 4 jnz short loc_7F8193CA cmp [ebp+var_4], 0 jz short loc_7F8193CA cmp [ebp+var_3], 0 jz short loc_7F8193CA cmp [ebp+var_2], 3Ah jnz short loc_7F8193CA cmp [ebp+var_1], 20h jnz short loc_7F8193CA mov eax, [esi] lea ecx, [ebp+var_8] add eax, 4 lea edx, [ebp+var_4] push eax mov [esi], eax push ecx push edx push [ebp+arg_0] call sub_7F824CAB test eax, eax jz short loc_7F819390 loc_7F8193CA: ; CODE XREF: sub_7F819369+25j ; sub_7F819369+2Bj ... mov esi, [ebp+arg_C] lea ecx, [ebp+var_8] mov [ebp+var_8], 4 push dword ptr [esi] push ecx lea edx, [ebp+var_4] push edx push [ebp+arg_8] call sub_7F824CAB test eax, eax jnz short loc_7F819424 loc_7F8193EA: ; CODE XREF: sub_7F819369+B9j cmp [ebp+var_8], 4 jnz short loc_7F819424 cmp [ebp+var_4], 0 jz short loc_7F819424 cmp [ebp+var_3], 0 jz short loc_7F819424 cmp [ebp+var_2], 3Ah jnz short loc_7F819424 cmp [ebp+var_1], 20h jnz short loc_7F819424 mov eax, [esi] lea ecx, [ebp+var_8] add eax, 4 lea edx, [ebp+var_4] push eax mov [esi], eax push ecx push edx push [ebp+arg_8] call sub_7F824CAB test eax, eax jz short loc_7F8193EA loc_7F819424: ; CODE XREF: sub_7F819369+7Fj ; sub_7F819369+85j ... pop esi mov esp, ebp pop ebp retn 10h sub_7F819369 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81942B proc near ; CODE XREF: sub_7F818F46+124p ; sub_7F819A4E+81p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = word ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 4 push ebx push esi mov si, [ebp+arg_10] push edi mov di, [ebp+arg_C] cmp si, di jle short loc_7F819477 loc_7F819443: ; CODE XREF: sub_7F81942B+4Aj movsx ebx, si movsx eax, di add ebx, eax lea eax, [ebp+var_4] sar ebx, 1 push eax push [ebp+arg_4] push [ebp+arg_0] push ebx push [ebp+arg_8] call sub_7F81917E test eax, eax jnz short loc_7F819477 cmp [ebp+var_4], 1 jnz short loc_7F81946F mov si, bx jmp short loc_7F819472 ; --------------------------------------------------------------------------- loc_7F81946F: ; CODE XREF: sub_7F81942B+3Dj lea edi, [ebx+1] loc_7F819472: ; CODE XREF: sub_7F81942B+42j cmp si, di jg short loc_7F819443 loc_7F819477: ; CODE XREF: sub_7F81942B+16j ; sub_7F81942B+37j mov ecx, [ebp+arg_14] mov [ecx], di pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81942B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819486 proc near ; CODE XREF: sub_7F818B75+7Fp ; sub_7F818B75+C8p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov edx, [esp+arg_0] mov ebp, esp push esi mov cx, [edx] push edi mov di, [ebp+arg_8] movsx eax, di sub cx, di imul eax, 0Ch test cx, cx lea esi, [eax+edx+0Eh] mov eax, [ebp+arg_4] jle short loc_7F8194B9 loc_7F8194AB: ; CODE XREF: sub_7F819486+31j cmp [esi], eax jz short loc_7F8194D9 dec cx add esi, 0Ch test cx, cx jg short loc_7F8194AB loc_7F8194B9: ; CODE XREF: sub_7F819486+23j test di, di lea esi, [edx+0Eh] jle short loc_7F8194CF loc_7F8194C1: ; CODE XREF: sub_7F819486+47j cmp [esi], eax jz short loc_7F8194D9 dec di add esi, 0Ch test di, di jg short loc_7F8194C1 loc_7F8194CF: ; CODE XREF: sub_7F819486+39j mov ax, 0FFFFh loc_7F8194D3: ; CODE XREF: sub_7F819486+65j pop edi pop esi pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F8194D9: ; CODE XREF: sub_7F819486+27j ; sub_7F819486+3Dj mov eax, 0FFFFFFF2h mov ecx, 0Ch sub eax, edx sub edx, edx add eax, esi div ecx jmp short loc_7F8194D3 sub_7F819486 endp ; =============== S U B R O U T I N E ======================================= sub_7F8194ED proc near ; CODE XREF: sub_7F810109+11p ; sub_7F81039F+B5p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push [esp+arg_8] mov ecx, [esp+4+arg_0] push [esp+4+arg_4] mov edx, [ecx] mov eax, [edx+18h] push dword ptr [eax] call sub_7F819486 retn 0Ch sub_7F8194ED endp ; =============== S U B R O U T I N E ======================================= sub_7F819508 proc near ; CODE XREF: sub_7F80FE90+78p ; sub_7F811A4F+7Fp ... arg_0 = dword ptr 4 arg_4 = word ptr 8 mov eax, [esp+arg_0] mov ecx, [eax] mov ax, [esp+arg_4] mov edx, [ecx+18h] test ax, ax mov ecx, [edx] jl short loc_7F81952E cmp [ecx], ax jle short loc_7F81952E movsx eax, ax imul eax, 0Ch mov eax, [eax+ecx+0Eh] jmp short locret_7F819533 ; --------------------------------------------------------------------------- loc_7F81952E: ; CODE XREF: sub_7F819508+13j ; sub_7F819508+18j mov eax, 0FFFFFFFFh locret_7F819533: ; CODE XREF: sub_7F819508+24j retn 8 sub_7F819508 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819536 proc near ; CODE XREF: sub_7F80FE90+51p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor esi, esi cmp [ebp+arg_C], 0FFFFFFFFh jnz short loc_7F819562 push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F819627 mov esi, eax jmp loc_7F81961C ; --------------------------------------------------------------------------- loc_7F819562: ; CODE XREF: sub_7F819536+Fj mov eax, [ebp+arg_0] push 0 mov ecx, [eax] push [ebp+arg_8] mov edx, [ecx+18h] mov eax, [ecx+14h] mov [ebp+var_8], eax mov edi, [edx] call sub_7F82F03B mov ebx, eax test ebx, ebx jnz short loc_7F819589 mov esi, 400h jmp short loc_7F8195FD ; --------------------------------------------------------------------------- loc_7F819589: ; CODE XREF: sub_7F819536+4Aj mov cx, word ptr [ebp+arg_10] cmp [edi], cx jle short loc_7F8195EF mov ecx, [ebp+arg_8] add ecx, [ebp+arg_C] mov [ebp+var_C], ecx loc_7F81959B: ; CODE XREF: sub_7F819536+B7j movsx eax, word ptr [ebp+arg_10] imul eax, 0Ch add eax, edi mov ecx, [ebp+var_C] cmp [eax+16h], ecx jb short loc_7F8195E2 mov ecx, [ebp+arg_8] mov [ebp+var_4], ecx lea ecx, [ebp+var_4] mov eax, [eax+12h] add eax, [ebp+arg_C] push eax push ecx push ebx push [ebp+var_8] call sub_7F824CAB mov esi, eax test esi, esi jnz short loc_7F8195FD mov ecx, [ebp+arg_8] cmp ecx, [ebp+var_4] jnz short loc_7F8195E2 push ecx push ebx push [ebp+arg_4] call sub_7F81AF66 test eax, eax jnz short loc_7F8195EF loc_7F8195E2: ; CODE XREF: sub_7F819536+74j ; sub_7F819536+9Cj inc word ptr [ebp+arg_10] mov cx, word ptr [ebp+arg_10] cmp [edi], cx jg short loc_7F81959B loc_7F8195EF: ; CODE XREF: sub_7F819536+5Aj ; sub_7F819536+AAj mov cx, word ptr [ebp+arg_10] cmp [edi], cx jg short loc_7F8195FD mov esi, 1004h loc_7F8195FD: ; CODE XREF: sub_7F819536+51j ; sub_7F819536+94j ... test ebx, ebx jz short loc_7F819607 push ebx call sub_7F82F149 loc_7F819607: ; CODE XREF: sub_7F819536+C9j mov eax, [ebp+arg_14] test esi, esi jz short loc_7F819615 mov word ptr [eax], 0FFFFh jmp short loc_7F81961C ; --------------------------------------------------------------------------- loc_7F819615: ; CODE XREF: sub_7F819536+D6j mov cx, word ptr [ebp+arg_10] mov [eax], cx loc_7F81961C: ; CODE XREF: sub_7F819536+27j ; sub_7F819536+DDj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F819536 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819627 proc near ; CODE XREF: sub_7F819536+20p var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h lpString1 = dword ptr -10h var_C = dword ptr -0Ch var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 34h mov ax, word ptr [ebp+arg_C] push ebx mov [ebp+var_6], ax push esi push edi xor esi, esi mov ecx, [ebp+arg_0] mov [ebp+var_24], esi mov edx, [ecx] mov [ebp+var_28], esi mov [ebp+var_18], edx mov eax, [edx+18h] mov [ebp+var_4], 0FFFFh mov edi, [eax] mov eax, [ebp+arg_8] mov cx, [edi] inc eax mov [ebp+var_2], cx cmp eax, 5 ja short loc_7F819668 mov eax, 5 loc_7F819668: ; CODE XREF: sub_7F819627+3Aj push 0 mov [ebp+lpString1], eax push eax call sub_7F82F03B mov ebx, eax push 0 push [ebp+lpString1] call sub_7F82F03B mov [ebp+lpString1], eax test ebx, ebx jz loc_7F8198B4 test eax, eax jz loc_7F8198B4 push [ebp+arg_8] push [ebp+arg_4] push eax call sub_7F82FCE0 mov ecx, [ebp+arg_8] add esp, 0Ch mov edx, [ebp+lpString1] mov byte ptr [ecx+edx], 0 mov cx, [edi+2] mov ax, cx and ax, 4 shr ax, 2 movzx edx, ax xor eax, eax mov [ebp+var_34], edx mov ax, cx and eax, 3 cmp eax, 1 jz short loc_7F8196DC cmp eax, 3 jz short loc_7F8196EA mov esi, 2004h jmp loc_7F8198B9 ; --------------------------------------------------------------------------- loc_7F8196DC: ; CODE XREF: sub_7F819627+A4j mov eax, [edi+4] mov [ebp+var_14], eax mov ecx, [edi+8] mov [ebp+var_20], ecx jmp short loc_7F819716 ; --------------------------------------------------------------------------- loc_7F8196EA: ; CODE XREF: sub_7F819627+A9j mov [ebp+var_24], 1 cmp word ptr [edi+8], 1 jnz short loc_7F81970F mov eax, [ebp+var_18] mov al, [eax+8] cmp al, 82h jz short loc_7F819706 cmp al, 83h jnz short loc_7F81970F loc_7F819706: ; CODE XREF: sub_7F819627+D9j mov [ebp+var_28], 1 jmp short loc_7F819716 ; --------------------------------------------------------------------------- loc_7F81970F: ; CODE XREF: sub_7F819627+CFj ; sub_7F819627+DDj mov [ebp+var_28], 0 loc_7F819716: ; CODE XREF: sub_7F819627+C1j ; sub_7F819627+E6j mov ax, word ptr [ebp+arg_C] cmp ax, [ebp+var_2] jge loc_7F81989E loc_7F819724: ; CODE XREF: sub_7F819627+271j movsx eax, [ebp+var_6] movsx ecx, [ebp+var_2] add eax, ecx sar eax, 1 mov word ptr [ebp+arg_C], ax movsx eax, ax imul eax, 0Ch cmp [ebp+var_24], 0 mov ecx, [eax+edi+12h] mov [ebp+var_1C], ecx jz short loc_7F81976F lea eax, [ebp+var_20] lea ecx, [ebp+var_14] push eax push ecx push [ebp+arg_C] push 0 push [ebp+var_18] call sub_7F8190B0 mov esi, eax test esi, esi jnz loc_7F8198B9 mov eax, [ebp+var_1C] sub [ebp+var_14], eax sub [ebp+var_20], eax loc_7F81976F: ; CODE XREF: sub_7F819627+11Ej mov eax, [ebp+arg_8] cmp eax, 5 ja short loc_7F81977C mov eax, 5 loc_7F81977C: ; CODE XREF: sub_7F819627+14Ej mov ecx, [ebp+var_20] mov [ebp+var_2C], eax sub ecx, [ebp+var_14] inc ecx cmp ecx, eax jb short loc_7F81978C mov ecx, eax loc_7F81978C: ; CODE XREF: sub_7F819627+161j mov eax, [ebp+var_14] mov [ebp+var_C], ecx add eax, [ebp+var_1C] lea ecx, [ebp+var_C] push eax push ecx push ebx mov eax, [ebp+var_18] push dword ptr [eax+14h] call sub_7F824CAB mov esi, eax test esi, esi jnz loc_7F8198B9 cmp [ebp+var_28], 0 jz short loc_7F819829 mov eax, [ebp+var_20] mov ecx, [ebp+var_C] sub eax, [ebp+var_14] inc eax mov byte ptr [ecx+ebx], 0 cmp [ebp+var_C], 4 mov [ebp+var_30], eax jbe short loc_7F819829 loc_7F8197CD: ; CODE XREF: sub_7F819627+200j cmp byte ptr [ebx], 0 jz short loc_7F819829 cmp byte ptr [ebx+1], 0 jz short loc_7F819829 cmp byte ptr [ebx+2], 3Ah jnz short loc_7F819829 cmp byte ptr [ebx+3], 20h jnz short loc_7F819829 add [ebp+var_14], 4 sub [ebp+var_30], 4 mov eax, [ebp+var_30] mov ecx, [ebp+var_2C] cmp eax, ecx jb short loc_7F8197F8 mov eax, ecx loc_7F8197F8: ; CODE XREF: sub_7F819627+1CDj lea ecx, [ebp+var_C] mov [ebp+var_C], eax mov eax, [ebp+var_14] add eax, [ebp+var_1C] push eax push ecx push ebx mov eax, [ebp+var_18] push dword ptr [eax+14h] call sub_7F824CAB mov esi, eax test esi, esi jnz loc_7F8198B9 mov eax, [ebp+var_C] mov byte ptr [eax+ebx], 0 cmp [ebp+var_C], 4 ja short loc_7F8197CD loc_7F819829: ; CODE XREF: sub_7F819627+18Dj ; sub_7F819627+1A4j ... mov ecx, [ebp+arg_8] cmp [ebp+var_C], ecx jbe short loc_7F819834 mov [ebp+var_C], ecx loc_7F819834: ; CODE XREF: sub_7F819627+208j mov eax, [ebp+var_C] cmp [ebp+var_24], 0 mov byte ptr [eax+ebx], 0 jz short loc_7F81984C push ebx ; lpString2 push [ebp+lpString1] ; lpString1 call sub_7F8176C6 jmp short loc_7F819858 ; --------------------------------------------------------------------------- loc_7F81984C: ; CODE XREF: sub_7F819627+218j push [ebp+var_C] push ebx push [ebp+lpString1] call sub_7F82A397 loc_7F819858: ; CODE XREF: sub_7F819627+223j cmp [ebp+var_34], 0 jz short loc_7F819860 neg eax loc_7F819860: ; CODE XREF: sub_7F819627+235j cmp eax, 0FFFFFFFFh jz short loc_7F819888 cmp eax, 1 jnz short loc_7F819876 mov ax, word ptr [ebp+arg_C] inc ax mov [ebp+var_6], ax jmp short loc_7F819890 ; --------------------------------------------------------------------------- loc_7F819876: ; CODE XREF: sub_7F819627+241j mov ecx, [ebp+arg_8] cmp [ebp+var_C], ecx jnz short loc_7F819888 mov ax, word ptr [ebp+arg_C] mov [ebp+var_4], ax jmp short loc_7F81988C ; --------------------------------------------------------------------------- loc_7F819888: ; CODE XREF: sub_7F819627+23Cj ; sub_7F819627+255j mov ax, word ptr [ebp+arg_C] loc_7F81988C: ; CODE XREF: sub_7F819627+25Fj mov [ebp+var_2], ax loc_7F819890: ; CODE XREF: sub_7F819627+24Dj mov ax, [ebp+var_2] cmp [ebp+var_6], ax jl loc_7F819724 loc_7F81989E: ; CODE XREF: sub_7F819627+F7j cmp [ebp+var_4], 0 jge short loc_7F8198B9 mov ax, word ptr [ebp+arg_C] mov esi, 1004h mov [ebp+var_4], ax jmp short loc_7F8198B9 ; --------------------------------------------------------------------------- loc_7F8198B4: ; CODE XREF: sub_7F819627+5Dj ; sub_7F819627+65j mov esi, 400h loc_7F8198B9: ; CODE XREF: sub_7F819627+B0j ; sub_7F819627+139j ... test ebx, ebx jz short loc_7F8198C3 push ebx call sub_7F82F149 loc_7F8198C3: ; CODE XREF: sub_7F819627+294j cmp [ebp+lpString1], 0 jz short loc_7F8198D1 push [ebp+lpString1] call sub_7F82F149 loc_7F8198D1: ; CODE XREF: sub_7F819627+2A0j test esi, esi jz short loc_7F8198E7 cmp esi, 1004h jz short loc_7F8198E7 mov eax, [ebp+arg_10] mov word ptr [eax], 0FFFFh jmp short loc_7F8198F1 ; --------------------------------------------------------------------------- loc_7F8198E7: ; CODE XREF: sub_7F819627+2ACj ; sub_7F819627+2B4j mov cx, [ebp+var_4] mov eax, [ebp+arg_10] mov [eax], cx loc_7F8198F1: ; CODE XREF: sub_7F819627+2BEj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F819627 endp ; =============== S U B R O U T I N E ======================================= sub_7F8198FC proc near ; CODE XREF: sub_7F80FFF8+B5p ; sub_7F810181+18p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax] mov edx, [ecx+18h] mov eax, [edx] mov ax, [eax] retn 4 sub_7F8198FC endp ; =============== S U B R O U T I N E ======================================= sub_7F81990D proc near ; CODE XREF: sub_7F810E3F+24p ; sub_7F811C96+23p ... arg_0 = dword ptr 4 arg_4 = word ptr 8 mov eax, [esp+arg_0] mov ecx, [eax] mov ax, [esp+arg_4] mov edx, [ecx+18h] test ax, ax mov ecx, [edx] jl short loc_7F819933 cmp [ecx], ax jle short loc_7F819933 movsx eax, ax imul eax, 0Ch mov eax, [eax+ecx+16h] jmp short locret_7F819935 ; --------------------------------------------------------------------------- loc_7F819933: ; CODE XREF: sub_7F81990D+13j ; sub_7F81990D+18j xor eax, eax locret_7F819935: ; CODE XREF: sub_7F81990D+24j retn 8 sub_7F81990D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819938 proc near ; CODE XREF: sub_7F810EE0+15p ; sub_7F811EA7+1Ep ... arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp push ebx push esi push edi mov ecx, [ebp+arg_0] mov edx, [ecx] mov ebx, [edx+18h] mov dx, [ebp+arg_4] mov esi, [ebx] cmp dx, ax jl short loc_7F8199AF mov cx, [esi] cmp cx, dx jle short loc_7F8199AF movsx edi, dx mov edx, [ebp+arg_8] movsx ecx, cx movsx ebx, word ptr [edx] add ebx, edi cmp ebx, ecx jle short loc_7F81997D mov eax, 1005h sub ecx, edi test ecx, ecx jg short loc_7F81997A xor ecx, ecx loc_7F81997A: ; CODE XREF: sub_7F819938+3Ej mov [edx], cx loc_7F81997D: ; CODE XREF: sub_7F819938+33j mov dx, [edx] test dx, dx jle short loc_7F8199BC imul edi, 0Ch mov cx, dx lea esi, [edi+esi+0Eh] dec dx test cx, cx jz short loc_7F8199BC mov edi, [ebp+arg_C] loc_7F819999: ; CODE XREF: sub_7F819938+73j mov ecx, [esi] add esi, 0Ch mov [edi], ecx add edi, 4 mov cx, dx dec dx test cx, cx jnz short loc_7F819999 jmp short loc_7F8199BC ; --------------------------------------------------------------------------- loc_7F8199AF: ; CODE XREF: sub_7F819938+19j ; sub_7F819938+21j mov edx, [ebp+arg_8] mov eax, 1005h mov word ptr [edx], 0 loc_7F8199BC: ; CODE XREF: sub_7F819938+4Bj ; sub_7F819938+5Cj ... pop edi pop esi pop ebx pop ebp retn 10h sub_7F819938 endp ; =============== S U B R O U T I N E ======================================= sub_7F8199C3 proc near ; CODE XREF: sub_7F82C0B0+5Dp ; sub_7F82C1D4+65p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi push edi mov ecx, [eax] mov edi, [esp+8+arg_4] mov edx, [ecx+18h] mov esi, [edx] add esi, 2 movsd movsd movsw pop edi pop esi retn 8 sub_7F8199C3 endp ; =============== S U B R O U T I N E ======================================= sub_7F8199E0 proc near ; CODE XREF: sub_7F81B01B+108p ; sub_7F81C56F+2BFp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push ebx push esi push edi push ebp xor edi, edi mov ebx, [eax] test byte ptr [ebx+4], 1 jz short loc_7F819A40 mov eax, [ebx+18h] cmp [ebx+0Ch], edi mov ebp, [eax] jz short loc_7F819A02 push ebx call sub_7F818550 loc_7F819A02: ; CODE XREF: sub_7F8199E0+1Aj add ebp, 2 push 0Ah mov esi, [esp+14h+arg_4] push esi push ebp call sub_7F81AF66 test eax, eax jz short loc_7F819A25 mov eax, [ebx] mov ecx, [eax] mov edx, [ecx] test byte ptr [edx+265h], 8 jz short loc_7F819A45 loc_7F819A25: ; CODE XREF: sub_7F8199E0+34j push 0Ah push esi push ebp call sub_7F82FCE0 add esp, 0Ch test byte ptr [esi], 3 jz short loc_7F819A45 push ebx call sub_7F819A4E mov edi, eax jmp short loc_7F819A45 ; --------------------------------------------------------------------------- loc_7F819A40: ; CODE XREF: sub_7F8199E0+10j mov edi, 203h loc_7F819A45: ; CODE XREF: sub_7F8199E0+43j ; sub_7F8199E0+54j ... mov eax, edi pop ebp pop edi pop esi pop ebx retn 8 sub_7F8199E0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819A4E proc near ; CODE XREF: sub_7F8199E0+57p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [ebp+arg_0] mov [ebp+var_8], 0 mov eax, [esi+18h] mov edi, [eax] mov cx, [edi] mov ax, [edi+2] and ax, 3 mov word ptr [ebp+var_4+2], cx jnz short loc_7F819A80 mov [ebp+var_8], 2004h jmp short loc_7F819AEF ; --------------------------------------------------------------------------- loc_7F819A80: ; CODE XREF: sub_7F819A4E+27j cmp ax, 2 jnz short loc_7F819ABB mov si, 1 lea ebx, [edi+0Eh] cmp word ptr [ebp+var_4+2], si jle short loc_7F819AEF loc_7F819A93: ; CODE XREF: sub_7F819A4E+69j push esi push 0 push dword ptr [ebx] push edi add ebx, 0Ch call sub_7F818CB6 mov word ptr [ebp+var_4], ax push [ebp+var_4] push 1 push esi push edi inc si call sub_7F81A140 cmp si, word ptr [ebp+var_4+2] jl short loc_7F819A93 jmp short loc_7F819AEF ; --------------------------------------------------------------------------- loc_7F819ABB: ; CODE XREF: sub_7F819A4E+36j mov bx, 1 cmp word ptr [ebp+var_4+2], bx jle short loc_7F819AEF loc_7F819AC5: ; CODE XREF: sub_7F819A4E+9Fj lea eax, [ebp+var_4] push eax push ebx push 0 push esi push ebx push esi call sub_7F81942B mov [ebp+var_8], eax test eax, eax jnz short loc_7F819AEF push [ebp+var_4] push 1 push ebx push edi inc bx call sub_7F81A140 cmp bx, word ptr [ebp+var_4+2] jl short loc_7F819AC5 loc_7F819AEF: ; CODE XREF: sub_7F819A4E+30j ; sub_7F819A4E+43j ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F819A4E endp ; =============== S U B R O U T I N E ======================================= sub_7F819AFB proc near ; CODE XREF: sub_7F810567+66p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h mov eax, [esp+arg_0] sub esp, 4 xor ecx, ecx push ebx push esi push edi push ebp mov edi, [eax] mov eax, [esp+14h+arg_8] mov [eax], ecx mov edx, [edi+1Ch] mov ebx, [edi+0Ch] mov [esp+14h+var_4], edx cmp ebx, ecx jz short loc_7F819B24 mov [edi+0Ch], ecx mov [edi+1Ch], ecx loc_7F819B24: ; CODE XREF: sub_7F819AFB+21j mov ebp, [esp+14h+arg_C] push 0 push 0 push 0 push dword ptr [ebp+0] push edi call sub_7F8178D8 mov esi, eax test esi, esi jnz short loc_7F819B96 push dword ptr [edi+1Ch] push 2 push dword ptr [edi+0Ch] push dword ptr [edi] call sub_7F811597 mov esi, eax test esi, esi jnz short loc_7F819B96 mov eax, [edi+0Ch] mov [ebp+0], eax push [esp+14h+arg_8] mov ax, [esp+18h+arg_4] and ax, 0FFFDh push eax push ebp push dword ptr [edi] call sub_7F817E9D mov esi, eax push 0 push 2 push dword ptr [edi+0Ch] push dword ptr [edi] call sub_7F811597 test esi, esi jnz short loc_7F819B96 mov eax, [esp+14h+arg_8] mov ecx, [eax] mov eax, [ecx] or byte ptr [eax+4], 2 mov edx, [eax+14h] mov ecx, [edx] or byte ptr [ecx], 2 loc_7F819B96: ; CODE XREF: sub_7F819AFB+40j ; sub_7F819AFB+55j ... xor eax, eax test esi, esi jnz short loc_7F819B9F mov eax, [edi+0Ch] loc_7F819B9F: ; CODE XREF: sub_7F819AFB+9Fj mov [ebp+0], eax mov eax, [edi+1Ch] test eax, eax jz short loc_7F819BAF push eax call sub_7F82F1E1 loc_7F819BAF: ; CODE XREF: sub_7F819AFB+ACj mov eax, [esp+14h+var_4] mov [edi+0Ch], ebx pop ebp mov [edi+1Ch], eax mov eax, esi pop edi pop esi pop ebx add esp, 4 retn 10h sub_7F819AFB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819BC5 proc near ; CODE XREF: sub_7F810F16+61p ; sub_7F81B8F0+60p ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [eax] mov ax, [esi+4] mov ecx, [esi+18h] test ah, 40h mov edi, [ecx] mov bx, [edi] jz short loc_7F819BF1 mov [ebp+var_8], 253h jmp loc_7F819D2F ; --------------------------------------------------------------------------- loc_7F819BF1: ; CODE XREF: sub_7F819BC5+1Ej test al, 1 jnz short loc_7F819C01 mov [ebp+var_8], 203h jmp loc_7F819D2F ; --------------------------------------------------------------------------- loc_7F819C01: ; CODE XREF: sub_7F819BC5+2Ej movzx eax, bx inc eax cmp eax, 1519h jl short loc_7F819C18 mov [ebp+var_8], 1017h jmp loc_7F819D2F ; --------------------------------------------------------------------------- loc_7F819C18: ; CODE XREF: sub_7F819BC5+45j cmp [ebp+arg_4], 0FFFFFFFFh jz short loc_7F819C3A push 0 push [ebp+arg_4] push edi call sub_7F819486 test ax, ax jl short loc_7F819C50 mov [ebp+var_8], 1003h jmp loc_7F819D2F ; --------------------------------------------------------------------------- loc_7F819C3A: ; CODE XREF: sub_7F819BC5+57j ; sub_7F819BC5+89j call sub_7F82AC0C push 0 mov [ebp+arg_4], eax push eax push edi call sub_7F819486 test ax, ax jge short loc_7F819C3A loc_7F819C50: ; CODE XREF: sub_7F819BC5+67j cmp dword ptr [esi+0Ch], 0 jz short loc_7F819C5C push esi call sub_7F818550 loc_7F819C5C: ; CODE XREF: sub_7F819BC5+8Fj push 10h push 14h call sub_7F82F18D mov ecx, [ebp+arg_C] test eax, eax mov [ecx], eax jnz short loc_7F819C7A mov [ebp+var_8], 400h jmp loc_7F819D2F ; --------------------------------------------------------------------------- loc_7F819C7A: ; CODE XREF: sub_7F819BC5+A7j cmp [ebp+arg_8], 0 jge short loc_7F819C87 mov [ebp+arg_8], 1000h loc_7F819C87: ; CODE XREF: sub_7F819BC5+B9j xor edi, edi lea eax, [ebp+var_2] push eax push [ebp+arg_8] push esi call sub_7F818816 mov [ebp+var_8], eax cmp eax, edi jnz loc_7F819D2F mov eax, [esi+18h] push ebx push dword ptr [ebp+var_2] mov edi, [eax] push edi call sub_7F81897A xor eax, eax mov ax, [edi+2] and eax, 3 jz short loc_7F819CC6 cmp eax, 2 jz short loc_7F819CDD mov [ebp+var_2], bx jmp short loc_7F819CF0 ; --------------------------------------------------------------------------- loc_7F819CC6: ; CODE XREF: sub_7F819BC5+F4j mov ax, [edi+4] mov [ebp+var_2], ax test ax, ax jl short loc_7F819CD8 cmp [edi], ax jg short loc_7F819CF0 loc_7F819CD8: ; CODE XREF: sub_7F819BC5+10Cj mov ax, [edi] jmp short loc_7F819CEC ; --------------------------------------------------------------------------- loc_7F819CDD: ; CODE XREF: sub_7F819BC5+F9j mov ax, [edi] push eax push 0 push [ebp+arg_4] push edi call sub_7F818CB6 loc_7F819CEC: ; CODE XREF: sub_7F819BC5+116j mov [ebp+var_2], ax loc_7F819CF0: ; CODE XREF: sub_7F819BC5+FFj ; sub_7F819BC5+111j movsx ecx, bx imul ecx, 0Ch mov eax, [ebp+arg_4] mov [ecx+edi+0Eh], eax cmp bx, [ebp+var_2] jz short loc_7F819D0F push dword ptr [ebp+var_2] push 1 push ebx push edi call sub_7F81A140 loc_7F819D0F: ; CODE XREF: sub_7F819BC5+13Cj mov dx, [ebp+var_2] mov ecx, [ebp+arg_C] mov ebx, [ebp+arg_8] mov eax, [ecx] mov ecx, [eax] mov eax, [ebp+arg_0] mov [ecx+4], dx mov [ecx], eax mov [ecx+0Eh], ebx mov word ptr [ecx+12h], 3 loc_7F819D2F: ; CODE XREF: sub_7F819BC5+27j ; sub_7F819BC5+37j ... cmp [ebp+var_8], 0 jnz short loc_7F819D42 inc word ptr [edi] dec word ptr [esi+10h] or byte ptr [esi+5], 40h jmp short loc_7F819D58 ; --------------------------------------------------------------------------- loc_7F819D42: ; CODE XREF: sub_7F819BC5+16Ej mov ecx, [ebp+arg_C] xor esi, esi mov eax, [ecx] test eax, eax jz short loc_7F819D58 push eax call sub_7F82F1E1 mov ecx, [ebp+arg_C] mov [ecx], esi loc_7F819D58: ; CODE XREF: sub_7F819BC5+17Bj ; sub_7F819BC5+186j mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F819BC5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819D64 proc near ; CODE XREF: sub_7F810F16+7Ap var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov edx, [esp+arg_0] mov ebp, esp sub esp, 8 push ebx push esi push edi mov ebx, [edx] xor edi, edi mov esi, [ebp+arg_10] cmp word ptr [ebp+arg_4], di mov eax, [ebx+18h] mov eax, [eax] mov [esi], edi jl loc_7F819E93 mov dx, word ptr [ebp+arg_4] cmp [eax], dx jle loc_7F819E93 mov ax, [ebx+4] test ah, 40h jz short loc_7F819DAF test byte ptr [ebp+arg_8], 3 jz short loc_7F819DAF mov edi, 253h jmp loc_7F819E98 ; --------------------------------------------------------------------------- loc_7F819DAF: ; CODE XREF: sub_7F819D64+39j ; sub_7F819D64+3Fj mov cx, [ebp+arg_8] and cx, 1 mov [ebp+var_4], cx jz short loc_7F819DD7 test al, 1 jnz short loc_7F819DCB mov edi, 203h jmp loc_7F819E98 ; --------------------------------------------------------------------------- loc_7F819DCB: ; CODE XREF: sub_7F819D64+5Bj cmp dword ptr [ebx+0Ch], 0 jz short loc_7F819DD7 push ebx call sub_7F818550 loc_7F819DD7: ; CODE XREF: sub_7F819D64+57j ; sub_7F819D64+6Bj push 10h push 14h call sub_7F82F18D mov ecx, eax mov [esi], eax test ecx, ecx jnz short loc_7F819DF2 mov edi, 400h jmp loc_7F819E98 ; --------------------------------------------------------------------------- loc_7F819DF2: ; CODE XREF: sub_7F819D64+82j movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch mov edx, [ebx+18h] mov [ebp+var_8], eax mov eax, [edx] mov edx, [ebp+var_8] mov edx, [eax+edx+16h] mov eax, [ecx] mov ecx, [ebp+arg_C] mov [eax+0Ah], edx cmp ecx, edx jbe short loc_7F819E54 cmp [ebp+var_4], 0 jz short loc_7F819E54 test byte ptr [ebp+arg_8+1], 20h jz short loc_7F819E44 lea eax, [ebp+var_2] push eax push ecx push ebx call sub_7F818816 mov edi, eax test edi, edi jnz short loc_7F819E9C push dword ptr [ebp+var_2] mov eax, [ebx+18h] push [ebp+arg_4] push dword ptr [eax] call sub_7F81897A jmp short loc_7F819E54 ; --------------------------------------------------------------------------- loc_7F819E44: ; CODE XREF: sub_7F819D64+BBj push ecx push [ebp+arg_4] push ebx call sub_7F818786 mov edi, eax test edi, edi jnz short loc_7F819E9C loc_7F819E54: ; CODE XREF: sub_7F819D64+AEj ; sub_7F819D64+B5j ... mov eax, [esi] mov edx, [ebx+18h] mov ecx, [eax] mov eax, [edx] test byte ptr [ebp+arg_8], 4 mov dx, word ptr [ebp+arg_4] mov [ecx+4], dx mov edx, [ebp+arg_0] mov [ecx], edx jz short loc_7F819E78 mov edx, [ecx+0Ah] mov [ecx+6], edx jmp short loc_7F819E7F ; --------------------------------------------------------------------------- loc_7F819E78: ; CODE XREF: sub_7F819D64+10Aj mov dword ptr [ecx+6], 0 loc_7F819E7F: ; CODE XREF: sub_7F819D64+112j mov edx, [ebp+var_8] mov eax, [edx+eax+16h] mov dx, [ebp+arg_8] mov [ecx+0Eh], eax mov [ecx+12h], dx jmp short loc_7F819E98 ; --------------------------------------------------------------------------- loc_7F819E93: ; CODE XREF: sub_7F819D64+1Fj ; sub_7F819D64+2Cj mov edi, 1005h loc_7F819E98: ; CODE XREF: sub_7F819D64+46j ; sub_7F819D64+62j ... test edi, edi jz short loc_7F819EB0 loc_7F819E9C: ; CODE XREF: sub_7F819D64+CCj ; sub_7F819D64+EEj mov eax, [esi] test eax, eax jz short loc_7F819EBA push eax call sub_7F82F1E1 mov dword ptr [esi], 0 jmp short loc_7F819EBA ; --------------------------------------------------------------------------- loc_7F819EB0: ; CODE XREF: sub_7F819D64+136j test byte ptr [ebp+arg_8], 1 jz short loc_7F819EBA or byte ptr [ebx+5], 40h loc_7F819EBA: ; CODE XREF: sub_7F819D64+13Cj ; sub_7F819D64+14Aj ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F819D64 endp ; =============== S U B R O U T I N E ======================================= sub_7F819EC5 proc near ; CODE XREF: sub_7F8110DD+11p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi mov esi, [esp+8+arg_0] push edi push ebp mov eax, [esi] mov cx, [eax+4] mov edi, [esp+10h+arg_8] mov edx, [eax] mov ebx, [eax+6] mov eax, [eax+0Ah] mov ebp, [edi] sub eax, ebx cmp eax, ebp jb short loc_7F819EE9 mov eax, ebp loc_7F819EE9: ; CODE XREF: sub_7F819EC5+20j push edi mov [edi], eax push [esp+14h+arg_4] push ebx push ecx push edx call sub_7F818D47 mov ecx, [esi] mov ebp, [edi] add [ecx+6], ebp pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F819EC5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F819F06 proc near ; CODE XREF: sub_7F81A03B+3Ep var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi mov esi, [ebp+arg_0] push [ebp+arg_8] push [ebp+arg_4] push esi xor edi, edi mov [ebp+var_8], edi call sub_7F8189C2 test eax, eax jnz loc_7F81A02F mov eax, [esi+18h] mov ecx, [esi+14h] mov [ebp+var_10], edi mov [ebp+var_14], ecx mov ebx, [eax] mov ax, [ebx] add ax, [esi+10h] mov [ebp+var_2], ax cmp [esi+12h], di jnz short loc_7F819F62 push 5 push esi call sub_7F818734 mov [ebp+var_8], eax cmp eax, edi jnz loc_7F81A02F mov eax, [esi+18h] mov ebx, [eax] loc_7F819F62: ; CODE XREF: sub_7F819F06+42j lea eax, [ebp+var_10] push eax push 3 push [ebp+var_14] call sub_7F8254CC push 1 push [ebp+arg_8] push [ebp+var_14] call sub_7F825546 mov [ebp+var_8], eax test eax, eax jnz loc_7F81A02F movsx eax, [ebp+var_2] imul eax, 0Ch lea edx, [eax+ebx] movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch mov edi, [eax+ebx+0Eh] lea ecx, [eax+ebx] mov [edx+0Eh], edi mov edi, [ebp+arg_8] mov eax, [ebp+var_10] mov [edx+12h], eax mov [edx+16h], edi mov edi, [ecx+16h] mov eax, [ecx+12h] test edi, edi mov [ebp+var_18], eax jz short loc_7F81A012 loc_7F819FBC: ; CODE XREF: sub_7F819F06+10Aj cmp edi, 0FE00h mov eax, edi jb short loc_7F819FCB mov eax, 0FE00h loc_7F819FCB: ; CODE XREF: sub_7F819F06+BEj lea ecx, [ebp+var_C] mov [ebp+var_C], eax push [ebp+var_18] push ecx push lpsz push [ebp+var_14] call sub_7F824CAB mov [ebp+var_8], eax test eax, eax jnz short loc_7F81A02F push [ebp+var_10] push [ebp+var_C] push lpsz push [ebp+var_14] call sub_7F825278 mov [ebp+var_8], eax test eax, eax jnz short loc_7F81A02F mov eax, [ebp+var_C] add [ebp+var_18], eax add [ebp+var_10], eax sub edi, eax jnz short loc_7F819FBC loc_7F81A012: ; CODE XREF: sub_7F819F06+B4j push [ebp+arg_4] inc word ptr [esi+10h] dec word ptr [esi+12h] push dword ptr [ebp+var_2] push ebx call sub_7F81897A push dword ptr [ebp+var_2] push esi call sub_7F818636 loc_7F81A02F: ; CODE XREF: sub_7F819F06+1Fj ; sub_7F819F06+51j ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F819F06 endp ; =============== S U B R O U T I N E ======================================= sub_7F81A03B proc near ; CODE XREF: sub_7F81B8F0+78p ; sub_7F81D598+2A6p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push ebx push esi push edi push ebp mov esi, [eax] mov ecx, [esi] test byte ptr [esi+12h], 1 mov ebx, [ecx] jnz short loc_7F81A056 mov eax, 203h jmp short loc_7F81A0BA ; --------------------------------------------------------------------------- loc_7F81A056: ; CODE XREF: sub_7F81A03B+12j mov eax, [esi+6] mov edi, [esp+10h+arg_8] add eax, edi mov ebp, [esi+0Eh] cmp eax, ebp jbe short loc_7F81A085 add ebp, 1000h cmp ebp, eax ja short loc_7F81A072 mov ebp, eax loc_7F81A072: ; CODE XREF: sub_7F81A03B+33j mov ax, [esi+4] push ebp push eax push ebx call sub_7F819F06 test eax, eax jnz short loc_7F81A0BA mov [esi+0Eh], ebp loc_7F81A085: ; CODE XREF: sub_7F81A03B+29j movsx edx, word ptr [esi+4] mov eax, [ebx+18h] imul edx, 0Ch mov ecx, [eax] mov eax, [esi+6] add eax, [edx+ecx+12h] push eax push edi push [esp+18h+arg_4] push dword ptr [ebx+14h] call sub_7F825278 test eax, eax jnz short loc_7F81A0BA mov ecx, [esi+6] add ecx, edi mov [esi+6], ecx cmp [esi+0Ah], ecx jnb short loc_7F81A0BA mov [esi+0Ah], ecx loc_7F81A0BA: ; CODE XREF: sub_7F81A03B+19j ; sub_7F81A03B+45j ... pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F81A03B endp ; =============== S U B R O U T I N E ======================================= sub_7F81A0C1 proc near ; CODE XREF: sub_7F811095+17p ; sub_7F81B8F0+8Bp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi push ebp xor edi, edi mov eax, [esi] mov ebx, [eax] mov ecx, [ebx] mov ebp, [ecx] mov eax, [ebp+18h] mov edx, [eax] mov eax, [ebx+0Ah] cmp [ebx+0Eh], eax jz short loc_7F81A0F7 mov dx, [ebx+4] push eax push edx push ecx call sub_7F818578 mov edi, eax mov ecx, [ebp+18h] test edi, edi mov edx, [ecx] jnz short loc_7F81A128 loc_7F81A0F7: ; CODE XREF: sub_7F81A0C1+1Dj mov ax, [ebx+4] mov ecx, [esp+10h+arg_4] mov [ecx], ax test byte ptr [edx+2], 1 jz short loc_7F81A118 mov eax, [ebx+0Ah] dec eax push eax push 0 push ecx push ebp call sub_7F818F46 mov edi, eax loc_7F81A118: ; CODE XREF: sub_7F81A0C1+45j test edi, edi jnz short loc_7F81A128 test byte ptr [ebx+12h], 3 jz short loc_7F81A128 and word ptr [ebp+4], 0BFFFh loc_7F81A128: ; CODE XREF: sub_7F81A0C1+34j ; sub_7F81A0C1+59j ... xor ebx, ebx test edi, edi jnz short loc_7F81A137 push dword ptr [esi] call sub_7F82F1E1 mov [esi], ebx loc_7F81A137: ; CODE XREF: sub_7F81A0C1+6Bj mov eax, edi pop ebp pop edi pop esi pop ebx retn 8 sub_7F81A0C1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A140 proc near ; CODE XREF: sub_7F818B33+2Cp ; sub_7F818B75+130p ... var_20 = byte ptr -20h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h push ebp mov ax, [esp+arg_C] mov ebp, esp sub esp, 20h cmp ax, [ebp+arg_4] push ebx mov [ebp+var_8], 0 push esi push edi jz loc_7F81A30D cmp [ebp+arg_8], 1 jle short loc_7F81A178 movsx eax, [ebp+arg_8] imul eax, 0Ch push 0 push eax call sub_7F82F03B mov [ebp+var_8], eax loc_7F81A178: ; CODE XREF: sub_7F81A140+24j cmp [ebp+var_8], 0 mov ax, [ebp+arg_4] jz loc_7F81A23F sub ax, [ebp+arg_C] mov [ebp+var_2], ax jns short loc_7F81A1C8 mov ax, [ebp+arg_8] movsx ecx, [ebp+arg_4] sub [ebp+arg_C], ax mov esi, [ebp+arg_0] mov ax, [ebp+var_2] movsx edi, [ebp+arg_8] add ax, [ebp+arg_8] neg ax mov [ebp+var_2], ax lea eax, [edi+ecx] imul eax, 0Ch imul ecx, 0Ch lea ebx, [eax+esi+0Eh] lea eax, [ecx+esi+0Eh] mov [ebp+var_C], eax jmp short loc_7F81A1E9 ; --------------------------------------------------------------------------- loc_7F81A1C8: ; CODE XREF: sub_7F81A140+4Ej movsx ecx, [ebp+arg_C] mov eax, ecx mov esi, [ebp+arg_0] imul eax, 0Ch movsx edi, [ebp+arg_8] lea ebx, [eax+esi+0Eh] lea eax, [ecx+edi] imul eax, 0Ch lea ecx, [eax+esi+0Eh] mov [ebp+var_C], ecx loc_7F81A1E9: ; CODE XREF: sub_7F81A140+86j imul edi, 0Ch movsx eax, [ebp+arg_4] imul eax, 0Ch push edi add eax, esi add eax, 0Eh push eax push [ebp+var_8] call sub_7F82FCE0 movsx eax, [ebp+var_2] add esp, 0Ch imul eax, 0Ch push eax push ebx push [ebp+var_C] call sub_7F82FCE0 movsx eax, [ebp+arg_C] imul eax, 0Ch add esp, 0Ch add eax, esi add eax, 0Eh push edi push [ebp+var_8] push eax call sub_7F82FCE0 add esp, 0Ch push [ebp+var_8] call sub_7F82F149 jmp loc_7F81A30D ; --------------------------------------------------------------------------- loc_7F81A23F: ; CODE XREF: sub_7F81A140+40j sub ax, [ebp+arg_C] mov [ebp+var_2], ax jns short loc_7F81A289 movsx edx, [ebp+arg_8] movsx ebx, [ebp+arg_4] mov cx, 0FFFFh add edx, ebx add ax, [ebp+arg_8] mov esi, [ebp+arg_0] neg ax imul edx, 0Ch mov [ebp+var_2], ax lea eax, [edx+esi+2] movsx edx, [ebp+var_2] imul edx, 0Ch mov [ebp+var_10], eax add eax, edx mov edx, [ebp+var_10] mov [ebp+var_8], eax mov [ebp+var_C], edx add edx, 0Ch mov [ebp+var_14], edx jmp short loc_7F81A2B9 ; --------------------------------------------------------------------------- loc_7F81A289: ; CODE XREF: sub_7F81A140+107j movsx eax, [ebp+arg_C] imul eax, 0Ch mov cx, 1 mov esi, [ebp+arg_0] lea edx, [eax+esi+0Eh] mov [ebp+var_8], edx movsx edx, [ebp+var_2] imul edx, 0Ch mov eax, [ebp+var_8] add eax, edx mov edx, [ebp+var_8] mov [ebp+var_10], eax mov [ebp+var_14], edx add edx, 0Ch mov [ebp+var_C], edx loc_7F81A2B9: ; CODE XREF: sub_7F81A140+147j mov ax, [ebp+arg_8] dec [ebp+arg_8] test ax, ax jle short loc_7F81A30D movsx ebx, cx imul ebx, 0Ch loc_7F81A2CC: ; CODE XREF: sub_7F81A140+1CBj lea edi, [ebp+var_20] mov esi, [ebp+var_10] movsd movsd movsd movsx eax, [ebp+var_2] imul eax, 0Ch push eax lea esi, [ebp+var_20] push [ebp+var_14] push [ebp+var_C] call sub_7F82FCE0 add esp, 0Ch mov edi, [ebp+var_8] movsd movsd movsd mov ax, [ebp+arg_8] add [ebp+var_10], ebx dec [ebp+arg_8] add [ebp+var_8], ebx add [ebp+var_14], ebx add [ebp+var_C], ebx test ax, ax jg short loc_7F81A2CC loc_7F81A30D: ; CODE XREF: sub_7F81A140+19j ; sub_7F81A140+FAj ... xor eax, eax pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81A140 endp ; =============== S U B R O U T I N E ======================================= sub_7F81A318 proc near ; CODE XREF: sub_7F81CCA0+119p arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push esi mov eax, [eax] mov ecx, [eax+18h] cmp dword ptr [eax+0Ch], 0 mov esi, [ecx] jz short loc_7F81A330 push eax call sub_7F818550 loc_7F81A330: ; CODE XREF: sub_7F81A318+10j movsx ecx, [esp+4+arg_4] imul ecx, 0Ch mov eax, [esp+4+arg_8] mov [ecx+esi+0Eh], eax pop esi retn 0Ch sub_7F81A318 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A344 proc near ; CODE XREF: sub_7F81BF33+126p ; sub_7F81C56F+21Cp var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 0Ch mov ecx, [eax] push ebx push esi push edi mov edx, [ecx+18h] mov ebx, [ebp+arg_C] mov [ebp+var_2], 0 mov eax, [edx] mov ecx, [ebp+arg_8] mov di, [ecx] mov [ebp+var_C], eax test di, di jle short loc_7F81A3D2 mov esi, [ebp+arg_4] loc_7F81A372: ; CODE XREF: sub_7F81A344+8Cj push dword ptr [ebp+var_2] push dword ptr [esi] push [ebp+var_C] call sub_7F819486 mov [ebx], ax test ax, ax jge short loc_7F81A3C1 mov eax, [ebp+arg_8] dec word ptr [eax] cmp di, 1 jle short loc_7F81A3C5 mov ecx, [esi] sub ebx, 2 movsx eax, di mov [ebp+var_8], ecx lea edx, ds:0FFFFFFFCh[eax*4] push edx lea ecx, [esi+4] push ecx push esi sub esi, 4 call sub_7F82FCE0 movsx edx, di add esp, 0Ch mov ecx, [ebp+var_8] mov [esi+edx*4], ecx jmp short loc_7F81A3C5 ; --------------------------------------------------------------------------- loc_7F81A3C1: ; CODE XREF: sub_7F81A344+41j mov [ebp+var_2], ax loc_7F81A3C5: ; CODE XREF: sub_7F81A344+4Dj ; sub_7F81A344+7Bj dec di add esi, 4 add ebx, 2 test di, di jnz short loc_7F81A372 loc_7F81A3D2: ; CODE XREF: sub_7F81A344+29j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81A344 endp ; =============== S U B R O U T I N E ======================================= sub_7F81A3DB proc near ; CODE XREF: sub_7F81BF33+14Cp ; sub_7F81C56F+3E3p arg_0 = dword ptr 4 arg_4 = word ptr 8 push ebx push esi mov si, [esp+8+arg_4] push edi dec si push ebp test si, si mov ebp, [esp+10h+arg_0] jle short loc_7F81A426 loc_7F81A3EF: ; CODE XREF: sub_7F81A3DB+49j mov ebx, ebp add ebp, 2 mov di, [ebp+0] loc_7F81A3F8: ; CODE XREF: sub_7F81A3DB+29j cmp [ebx], di jle short loc_7F81A406 sub ebx, 2 cmp ebx, [esp+10h+arg_0] jnb short loc_7F81A3F8 loc_7F81A406: ; CODE XREF: sub_7F81A3DB+20j add ebx, 2 cmp ebp, ebx jz short loc_7F81A422 mov eax, ebp lea ecx, [ebx+2] sub eax, ebx push eax push ebx push ecx call sub_7F82FCE0 mov [ebx], di add esp, 0Ch loc_7F81A422: ; CODE XREF: sub_7F81A3DB+30j dec si jnz short loc_7F81A3EF loc_7F81A426: ; CODE XREF: sub_7F81A3DB+12j pop ebp pop edi pop esi pop ebx retn 8 sub_7F81A3DB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A42D proc near ; CODE XREF: sub_7F81BF33+15Dp ; sub_7F81C56F+3F4p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 10h mov ecx, [eax] push ebx push esi mov [ebp+var_8], ecx push edi mov eax, [ecx+18h] cmp dword ptr [ecx+0Ch], 0 mov esi, [eax] jz short loc_7F81A450 push ecx call sub_7F818550 loc_7F81A450: ; CODE XREF: sub_7F81A42D+1Bj movsx eax, word ptr [esi] movsx ecx, [ebp+arg_C] push 20h sub eax, ecx imul eax, 0Ch add eax, 0Eh push eax call sub_7F82F18D mov [ebp+var_C], eax test eax, eax jnz short loc_7F81A478 mov eax, 400h jmp loc_7F81A576 ; --------------------------------------------------------------------------- loc_7F81A478: ; CODE XREF: sub_7F81A42D+3Fj mov eax, [ebp+var_C] push 0Eh push esi xor ebx, ebx mov edi, [eax] push edi call sub_7F82FCE0 mov cx, [ebp+arg_C] add esp, 0Ch mov [ebp+var_2], bx lea eax, [edi+0Eh] mov [ebp+var_4], cx mov [ebp+var_10], eax cmp cx, bx jle loc_7F81A537 loc_7F81A4A6: ; CODE XREF: sub_7F81A42D+104j mov eax, [ebp+arg_4] mov ax, [eax] cmp bx, ax jge short loc_7F81A4EB movsx eax, ax movsx ecx, bx sub eax, ecx imul eax, 0Ch push eax movsx eax, bx imul eax, 0Ch add eax, esi add eax, 0Eh push eax push [ebp+var_10] call sub_7F82FCE0 add esp, 0Ch mov ecx, [ebp+arg_4] mov ax, [ecx] movsx edx, ax movsx ecx, bx mov bx, ax sub edx, ecx imul edx, 0Ch add [ebp+var_10], edx loc_7F81A4EB: ; CODE XREF: sub_7F81A42D+82j ; sub_7F81A42D+FDj movsx eax, bx dec [ebp+var_4] mov ecx, [ebp+arg_8] imul eax, 0Ch mov edx, [eax+esi+0Eh] add [ebp+arg_8], 8 mov ax, bx mov [ecx+4], edx add [ebp+arg_4], 2 inc bx sub ax, [ebp+var_2] mov word ptr [ecx], 3 mov [ecx+2], ax inc [ebp+var_2] cmp [ebp+var_4], 0 jle short loc_7F81A537 mov eax, [ebp+arg_4] cmp [eax], bx jz short loc_7F81A4EB cmp [ebp+var_4], 0 jg loc_7F81A4A6 loc_7F81A537: ; CODE XREF: sub_7F81A42D+73j ; sub_7F81A42D+F5j mov cx, [esi] cmp bx, cx jge short loc_7F81A55F movsx eax, bx movsx ecx, cx sub ecx, eax imul ecx, 0Ch imul eax, 0Ch push ecx add eax, esi add eax, 0Eh push eax push [ebp+var_10] call sub_7F82FCE0 add esp, 0Ch loc_7F81A55F: ; CODE XREF: sub_7F81A42D+110j mov ax, [ebp+var_2] sub [edi], ax xor eax, eax push eax push eax push [ebp+var_C] push eax push [ebp+var_8] call sub_7F8178D8 loc_7F81A576: ; CODE XREF: sub_7F81A42D+46j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81A42D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A57F proc near ; CODE XREF: sub_7F81C56F+3AAp var_2C = byte ptr -2Ch var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor ecx, ecx mov ebp, esp sub esp, 2Ch mov [ebp+var_2], cx push ebx push esi mov eax, [ebp+arg_0] push edi mov ebx, [ebp+arg_4] mov edx, [eax] mov eax, [ebx] mov [ebp+var_1C], edx mov [ebp+var_18], eax mov ebx, [edx+18h] mov edx, [ebp+var_18] mov [ebp+var_10], ecx mov eax, [ebx] mov ebx, [edx+18h] mov [ebp+var_20], eax cmp [edx+0Ch], ecx mov eax, [ebx] mov [ebp+var_C], eax jz short loc_7F81A5BF push edx call sub_7F818550 loc_7F81A5BF: ; CODE XREF: sub_7F81A57F+38j mov di, word ptr [ebp+arg_14] test di, di jle loc_7F81A652 mov esi, [ebp+arg_8] mov ebx, [ebp+arg_10] loc_7F81A5D2: ; CODE XREF: sub_7F81A57F+CFj mov ax, [esi] lea ecx, [ebx+4] cmp [ebp+arg_C], 0 mov [ebx], ax jz short loc_7F81A5EE mov eax, [ebp+arg_C] add [ebp+arg_C], 4 mov edx, [eax] mov [ecx], edx jmp short loc_7F81A5FD ; --------------------------------------------------------------------------- loc_7F81A5EE: ; CODE XREF: sub_7F81A57F+60j movsx edx, word ptr [esi] mov eax, [ebp+var_20] imul edx, 0Ch mov edx, [edx+eax+0Eh] mov [ecx], edx loc_7F81A5FD: ; CODE XREF: sub_7F81A57F+6Dj push 0 push dword ptr [ecx] push [ebp+var_C] call sub_7F819486 test ax, ax jl short loc_7F81A61C mov [ebx+2], ax or byte ptr [ebx+1], 80h inc [ebp+var_2] jmp short loc_7F81A643 ; --------------------------------------------------------------------------- loc_7F81A61C: ; CODE XREF: sub_7F81A57F+8Dj lea eax, [ebx+2] mov ecx, [ebp+var_C] mov dx, [ecx] push eax mov cx, [esi] push edx push 0 push [ebp+var_18] push ecx push [ebp+var_1C] call sub_7F81A850 mov [ebp+var_8], eax test eax, eax jnz loc_7F81A836 loc_7F81A643: ; CODE XREF: sub_7F81A57F+9Bj dec di add esi, 2 add ebx, 8 test di, di jg short loc_7F81A5D2 jmp short loc_7F81A655 ; --------------------------------------------------------------------------- loc_7F81A652: ; CODE XREF: sub_7F81A57F+47j mov ebx, [ebp+arg_10] loc_7F81A655: ; CODE XREF: sub_7F81A57F+D1j movsx edx, word ptr [ebp+arg_14] lea eax, ds:0[edx*8] mov ecx, [ebp+var_C] sub ebx, eax movsx esi, [ebp+var_2] movsx eax, word ptr [ecx] sub eax, esi add eax, edx cmp eax, 1519h jl short loc_7F81A683 mov [ebp+var_8], 1017h jmp loc_7F81A836 ; --------------------------------------------------------------------------- loc_7F81A683: ; CODE XREF: sub_7F81A57F+F6j mov eax, [ebp+var_20] lea edi, [ebp+var_2C] add eax, 2 mov esi, eax mov [ebp+var_14], eax movsd movsd movsw mov esi, [ebp+var_C] mov edi, [ebp+var_14] add esi, 2 movsd movsd movsw push [ebp+arg_14] push ebx push [ebp+var_1C] call sub_7F81A8EA lea esi, [ebp+var_2C] mov edi, [ebp+var_14] mov [ebp+var_8], eax movsd movsd movsw cmp [ebp+var_8], 0 jnz loc_7F81A836 mov eax, [ebp+var_C] push 20h mov di, [eax] sub di, [ebp+var_2] add di, word ptr [ebp+arg_14] movsx eax, di imul eax, 0Ch add eax, 0Eh push eax call sub_7F82F18D mov [ebp+var_10], eax test eax, eax jnz short loc_7F81A6F7 mov [ebp+var_8], 400h jmp loc_7F81A836 ; --------------------------------------------------------------------------- loc_7F81A6F7: ; CODE XREF: sub_7F81A57F+16Aj mov eax, [ebp+var_10] push 0Eh push [ebp+var_C] mov esi, [eax] push esi call sub_7F82FCE0 mov ax, word ptr [ebp+arg_14] add esp, 0Ch mov word ptr [ebp+var_14+2], 0 mov [esi], di add esi, 0Eh xor di, di mov [ebp+var_2], ax cmp ax, di jle loc_7F81A7F1 loc_7F81A72A: ; CODE XREF: sub_7F81A57F+26Cj mov ax, [ebx+2] cmp di, ax jge short loc_7F81A769 movsx eax, ax movsx ecx, di sub eax, ecx imul eax, 0Ch push eax movsx eax, di imul eax, 0Ch add eax, [ebp+var_C] add eax, 0Eh push eax push esi call sub_7F82FCE0 mov ax, [ebx+2] add esp, 0Ch movsx edx, ax movsx ecx, di mov di, ax sub edx, ecx imul edx, 0Ch add esi, edx loc_7F81A769: ; CODE XREF: sub_7F81A57F+1B2j mov word ptr [ebp+var_8+2], 0 cmp [ebp+var_2], 0 jle short loc_7F81A7E2 loc_7F81A776: ; CODE XREF: sub_7F81A57F+261j mov ax, [ebx+2] cmp di, ax jnz short loc_7F81A7E2 add ax, word ptr [ebp+var_14+2] xor ecx, ecx mov [ebx+2], ax push 0Ch mov cx, [ebx] mov eax, [ebp+var_20] and ecx, 7FFFh imul ecx, 0Ch lea eax, [ecx+eax+0Eh] push eax push esi call sub_7F82FCE0 or byte ptr [esi+7], 80h add esp, 0Ch cmp [ebp+arg_C], 0 jz short loc_7F81A7B7 mov eax, [ebx+4] mov [esi], eax loc_7F81A7B7: ; CODE XREF: sub_7F81A57F+231j cmp word ptr [ebx], 0 jge short loc_7F81A7C8 inc word ptr [ebp+var_8+2] mov word ptr [ebx], 2 jmp short loc_7F81A7D1 ; --------------------------------------------------------------------------- loc_7F81A7C8: ; CODE XREF: sub_7F81A57F+23Cj mov word ptr [ebx], 1 inc word ptr [ebp+var_14+2] loc_7F81A7D1: ; CODE XREF: sub_7F81A57F+247j add ebx, 8 dec [ebp+var_2] add esi, 0Ch cmp [ebp+var_2], 0 jg short loc_7F81A776 loc_7F81A7E2: ; CODE XREF: sub_7F81A57F+1F5j ; sub_7F81A57F+1FEj add di, word ptr [ebp+var_8+2] cmp [ebp+var_2], 0 jg loc_7F81A72A loc_7F81A7F1: ; CODE XREF: sub_7F81A57F+1A5j mov eax, [ebp+var_C] mov cx, [eax] cmp di, cx jge short loc_7F81A81B movsx eax, di movsx ecx, cx sub ecx, eax imul ecx, 0Ch imul eax, 0Ch push ecx add eax, [ebp+var_C] add eax, 0Eh push eax push esi call sub_7F82FCE0 add esp, 0Ch loc_7F81A81B: ; CODE XREF: sub_7F81A57F+27Bj xor esi, esi mov eax, [ebp+var_1C] push esi push dword ptr [eax+14h] push [ebp+var_10] push esi push [ebp+var_18] call sub_7F8178D8 mov [ebp+var_8], eax mov [ebp+var_10], esi loc_7F81A836: ; CODE XREF: sub_7F81A57F+BEj ; sub_7F81A57F+FFj ... cmp [ebp+var_10], 0 jz short loc_7F81A844 push [ebp+var_10] call sub_7F82F1E1 loc_7F81A844: ; CODE XREF: sub_7F81A57F+2BBj mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81A57F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A850 proc near ; CODE XREF: sub_7F81A57F+B4p var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov edx, [esp+arg_0] mov ebp, esp sub esp, 4 mov eax, [edx+18h] push ebx push esi mov ecx, [ebp+arg_8] push edi xor esi, esi mov ebx, [eax] mov eax, [ecx+18h] mov edi, [eax] xor eax, eax mov ax, [edi+2] and eax, 3 jz short loc_7F81A894 cmp eax, 2 jz short loc_7F81A89A lea eax, [ebp+var_2] push eax push [ebp+arg_10] push [ebp+arg_C] push ecx push [ebp+arg_4] push edx call sub_7F81942B mov esi, eax jmp short loc_7F81A8B5 ; --------------------------------------------------------------------------- loc_7F81A894: ; CODE XREF: sub_7F81A850+25j mov ax, [edi+4] jmp short loc_7F81A8B1 ; --------------------------------------------------------------------------- loc_7F81A89A: ; CODE XREF: sub_7F81A850+2Aj push [ebp+arg_10] movsx eax, word ptr [ebp+arg_4] imul eax, 0Ch push [ebp+arg_C] push dword ptr [eax+ebx+0Eh] push edi call sub_7F818CB6 loc_7F81A8B1: ; CODE XREF: sub_7F81A850+48j mov [ebp+var_2], ax loc_7F81A8B5: ; CODE XREF: sub_7F81A850+42j test esi, esi jnz short loc_7F81A8D5 mov ax, word ptr [ebp+arg_C] cmp ax, [ebp+var_2] jg short loc_7F81A8CD mov ax, word ptr [ebp+arg_10] cmp [ebp+var_2], ax jle short loc_7F81A8D5 loc_7F81A8CD: ; CODE XREF: sub_7F81A850+71j mov ax, word ptr [ebp+arg_10] mov [ebp+var_2], ax loc_7F81A8D5: ; CODE XREF: sub_7F81A850+67j ; sub_7F81A850+7Bj mov cx, [ebp+var_2] mov eax, [ebp+arg_14] mov [eax], cx pop edi mov eax, esi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81A850 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A8EA proc near ; CODE XREF: sub_7F81A57F+12Ap var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov ebp, esp sub esp, 10h push ebx mov eax, [ebp+arg_0] push esi push edi xor esi, esi mov edi, [ebp+arg_4] mov ecx, [eax+18h] mov [ebp+var_4], esi mov edx, [ecx] test byte ptr [edx+2], 1 jz short loc_7F81A910 mov [ebp+var_4], 1 loc_7F81A910: ; CODE XREF: sub_7F81A8EA+1Dj dec [ebp+arg_8] cmp [ebp+arg_8], 0 jle loc_7F81A9AA loc_7F81A91F: ; CODE XREF: sub_7F81A8EA+BAj mov ebx, edi add edi, 8 loc_7F81A924: ; CODE XREF: sub_7F81A8EA+80j mov cx, [edi+2] mov ax, [ebx+2] cmp cx, ax jl short loc_7F81A964 jg short loc_7F81A96C cmp [ebp+var_4], 0 jz short loc_7F81A96C lea eax, [ebp+var_10] push eax mov ax, [ebx] and ax, 7FFFh push eax mov ax, [edi] push [ebp+arg_0] and ax, 7FFFh push eax push [ebp+arg_0] call sub_7F81917E mov esi, eax test esi, esi jnz short loc_7F81A9AA cmp [ebp+var_10], 0FFFFFFFFh jnz short loc_7F81A96C loc_7F81A964: ; CODE XREF: sub_7F81A8EA+45j sub ebx, 8 cmp ebx, [ebp+arg_4] jnb short loc_7F81A924 loc_7F81A96C: ; CODE XREF: sub_7F81A8EA+47j ; sub_7F81A8EA+4Dj ... add ebx, 8 cmp edi, ebx jz short loc_7F81A99B mov eax, [edi] mov ecx, [edi+4] mov [ebp+var_C], eax mov eax, edi sub eax, ebx mov [ebp+var_8], ecx push eax lea ecx, [ebx+8] push ebx push ecx call sub_7F82FCE0 add esp, 0Ch mov eax, [ebp+var_C] mov ecx, [ebp+var_8] mov [ebx], eax mov [ebx+4], ecx loc_7F81A99B: ; CODE XREF: sub_7F81A8EA+87j dec [ebp+arg_8] cmp [ebp+arg_8], 0 jg loc_7F81A91F loc_7F81A9AA: ; CODE XREF: sub_7F81A8EA+2Fj ; sub_7F81A8EA+72j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F81A8EA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81A9B5 proc near ; CODE XREF: sub_7F822DB9:loc_7F822E67p ; sub_7F823594+EDp var_C = dword ptr -0Ch Buffer = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ecx, [esp+arg_C] mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor ebx, ebx mov edi, [ebp+arg_4] mov [ecx], ebx add edi, 8 cmp [ebp+arg_0], ebx jz short loc_7F81AA16 mov eax, 253h cmp dword_7F838078, ebx jnz short loc_7F81AA0E mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F81AA0E: ; CODE XREF: sub_7F81A9B5+27j test eax, eax jnz loc_7F81ABA4 loc_7F81AA16: ; CODE XREF: sub_7F81A9B5+1Aj cmp [ebp+arg_8], 12h jnb short loc_7F81AA26 mov esi, 1015h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AA26: ; CODE XREF: sub_7F81A9B5+65j lea eax, [ebp+var_C] lea ecx, [ebp+Buffer] mov [ebp+var_C], 4 push eax ; int push edi ; lDistanceToMove push ecx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F81AB64 mov eax, [ebp+arg_8] sub eax, 0Eh cmp eax, [ebp+Buffer] jnb short loc_7F81AA5A mov esi, 1002h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AA5A: ; CODE XREF: sub_7F81A9B5+99j cmp [ebp+Buffer], 4 jnb short loc_7F81AA6A mov esi, 1015h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AA6A: ; CODE XREF: sub_7F81A9B5+A9j lea eax, [ebp+var_C] lea ecx, [ebp+var_2] mov [ebp+var_C], 2 push eax ; int mov eax, [ebp+Buffer] add eax, edi push eax ; lDistanceToMove push ecx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F81AB64 cmp [ebp+var_2], 1519h jb short loc_7F81AAA0 mov esi, 1015h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AAA0: ; CODE XREF: sub_7F81A9B5+DFj movsx eax, [ebp+var_2] imul eax, 0Ch add eax, 0Eh mov ecx, [ebp+arg_C] mov [ebp+var_C], eax add eax, [ebp+Buffer] mov [ecx], eax cmp [ebp+arg_8], eax jnb short loc_7F81AAC4 mov esi, 1002h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AAC4: ; CODE XREF: sub_7F81A9B5+103j push 0 push [ebp+var_C] call sub_7F82F03B mov ebx, eax test ebx, ebx jnz short loc_7F81AADE mov esi, 400h jmp loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AADE: ; CODE XREF: sub_7F81A9B5+11Dj lea eax, [ebp+var_C] push eax ; int mov eax, [ebp+Buffer] add eax, edi push eax ; lDistanceToMove push ebx ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz short loc_7F81AB64 movsx eax, [ebp+var_2] imul eax, 0Ch xor ecx, ecx mov edx, 4 lea edi, [eax+ebx+2] mov ax, [ebp+var_2] dec [ebp+var_2] test ax, ax jle short loc_7F81AB39 loc_7F81AB13: ; CODE XREF: sub_7F81A9B5+182j mov eax, [edi+4] add ecx, edx cmp ecx, eax jnz short loc_7F81AB47 mov edx, [edi+8] lea ecx, [edx+eax] cmp ecx, [ebp+Buffer] ja short loc_7F81AB4E mov ecx, eax sub edi, 0Ch mov ax, [ebp+var_2] dec [ebp+var_2] test ax, ax jg short loc_7F81AB13 loc_7F81AB39: ; CODE XREF: sub_7F81A9B5+15Cj add edx, ecx cmp edx, [ebp+Buffer] jz short loc_7F81AB55 mov esi, 1015h jmp short loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AB47: ; CODE XREF: sub_7F81A9B5+165j mov esi, 1015h jmp short loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AB4E: ; CODE XREF: sub_7F81A9B5+170j mov esi, 1015h jmp short loc_7F81AB64 ; --------------------------------------------------------------------------- loc_7F81AB55: ; CODE XREF: sub_7F81A9B5+189j mov ecx, [ebp+arg_C] mov eax, [ebp+arg_8] cmp [ecx], eax jnb short loc_7F81AB64 mov esi, 1017h loc_7F81AB64: ; CODE XREF: sub_7F81A9B5+6Cj ; sub_7F81A9B5+8Aj ... test ebx, ebx jz short loc_7F81AB6E push ebx call sub_7F82F149 loc_7F81AB6E: ; CODE XREF: sub_7F81A9B5+1B1j cmp [ebp+arg_0], 0 jz short loc_7F81ABA2 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81AB8A call sub_7F82A34F jmp short loc_7F81AB98 ; --------------------------------------------------------------------------- loc_7F81AB8A: ; CODE XREF: sub_7F81A9B5+1CCj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81AB98: ; CODE XREF: sub_7F81A9B5+1D3j mov dword_7F838078, 0 loc_7F81ABA2: ; CODE XREF: sub_7F81A9B5+1BDj mov eax, esi loc_7F81ABA4: ; CODE XREF: sub_7F81A9B5+5Bj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81A9B5 endp ; =============== S U B R O U T I N E ======================================= sub_7F81ABAD proc near ; CODE XREF: sub_7F815497+39p ; sub_7F815497+66p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov edx, [esp+arg_0] push ebx mov eax, [esp+4+arg_4] loc_7F81ABB6: ; CODE XREF: sub_7F81ABAD+20j mov ecx, [esp+4+arg_8] dec [esp+4+arg_8] cmp ecx, 1 jbe short loc_7F81ABD2 mov ecx, eax mov bl, [edx] inc eax inc edx mov [ecx], bl test bl, bl jnz short loc_7F81ABB6 dec eax jmp short loc_7F81ABD5 ; --------------------------------------------------------------------------- loc_7F81ABD2: ; CODE XREF: sub_7F81ABAD+14j mov byte ptr [eax], 0 loc_7F81ABD5: ; CODE XREF: sub_7F81ABAD+23j pop ebx retn 0Ch sub_7F81ABAD endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F81ABD9(int, LPCSTR lpString, int) sub_7F81ABD9 proc near ; CODE XREF: sub_7F815497+54p arg_0 = dword ptr 4 lpString = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov esi, [esp+4+lpString] push esi ; lpString call ds:lstrlenA mov ecx, [esp+4+arg_8] cmp eax, ecx jb short loc_7F81ABF8 lea esi, [ecx+esi-1] mov eax, esi mov byte ptr [esi], 0 jmp short loc_7F81AC07 ; --------------------------------------------------------------------------- loc_7F81ABF8: ; CODE XREF: sub_7F81ABD9+12j sub ecx, eax add eax, esi push ecx push eax push [esp+0Ch+arg_0] call sub_7F81ABAD loc_7F81AC07: ; CODE XREF: sub_7F81ABD9+1Dj pop esi retn 0Ch sub_7F81ABD9 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F81AC0B(LPCSTR lpString, int, int) sub_7F81AC0B proc near ; CODE XREF: sub_7F81B34C+34p lpString = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi mov esi, [esp+8+lpString] push edi mov ebx, esi mov edi, esi cmp [esp+0Ch+arg_4], 0 mov edx, esi jz short loc_7F81AC42 mov ecx, dword_7F833F1C movzx eax, byte ptr [esi] test byte ptr [eax+ecx], 8 jz short loc_7F81AC3E loc_7F81AC2E: ; CODE XREF: sub_7F81AC0B+31j inc edx mov ecx, dword_7F833F1C movzx eax, byte ptr [edx] test byte ptr [eax+ecx], 8 jnz short loc_7F81AC2E loc_7F81AC3E: ; CODE XREF: sub_7F81AC0B+21j mov ebx, edx mov edi, edx loc_7F81AC42: ; CODE XREF: sub_7F81AC0B+12j cmp [esp+0Ch+arg_8], 0 jnz short loc_7F81AC54 push edi ; lpString call ds:lstrlenA mov ebx, eax jmp short loc_7F81AC75 ; --------------------------------------------------------------------------- loc_7F81AC54: ; CODE XREF: sub_7F81AC0B+3Cj cmp byte ptr [edx], 0 jz short loc_7F81AC73 loc_7F81AC59: ; CODE XREF: sub_7F81AC0B+66j mov ecx, dword_7F833F1C movzx eax, byte ptr [edx] test byte ptr [eax+ecx], 8 jz short loc_7F81AC6B inc edx jmp short loc_7F81AC6E ; --------------------------------------------------------------------------- loc_7F81AC6B: ; CODE XREF: sub_7F81AC0B+5Bj inc edx mov ebx, edx loc_7F81AC6E: ; CODE XREF: sub_7F81AC0B+5Ej cmp byte ptr [edx], 0 jnz short loc_7F81AC59 loc_7F81AC73: ; CODE XREF: sub_7F81AC0B+4Cj sub ebx, edi loc_7F81AC75: ; CODE XREF: sub_7F81AC0B+47j cmp edi, esi jz short loc_7F81AC84 push ebx push edi push esi call sub_7F82FCE0 add esp, 0Ch loc_7F81AC84: ; CODE XREF: sub_7F81AC0B+6Cj mov eax, ebx pop edi mov byte ptr [ebx+esi], 0 pop esi pop ebx retn 0Ch sub_7F81AC0B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AC90 proc near ; CODE XREF: sub_7F81ADC3+C2p ; sub_7F81ADC3+D4p var_10 = byte ptr -10h var_F = byte ptr -0Fh var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi lea esi, [ebp+var_10] xor edi, edi xor ebx, ebx cmp [ebp+arg_8], ebx jnz short loc_7F81ACAD mov eax, [ebp+arg_4] jmp loc_7F81AD56 ; --------------------------------------------------------------------------- loc_7F81ACAD: ; CODE XREF: sub_7F81AC90+13j mov ecx, [ebp+arg_0] test ecx, ecx jge short loc_7F81ACEC mov ebx, 1 mov esi, 0Ah mov eax, ecx cdq idiv esi mov eax, edx lea esi, [ebp+var_F] cdq xor eax, edx mov edi, ebx sub eax, edx movzx eax, ax mov [ebp+var_4], 0Ah mov al, byte_7F8367B8[eax] mov [ebp+var_10], al mov eax, ecx cdq idiv [ebp+var_4] mov ecx, eax neg ecx loc_7F81ACEC: ; CODE XREF: sub_7F81AC90+22j test ebx, ebx jz short loc_7F81AD04 mov eax, [ebp+arg_8] dec [ebp+arg_8] cmp eax, 1 jbe short loc_7F81AD04 mov eax, [ebp+arg_4] inc [ebp+arg_4] mov byte ptr [eax], 2Dh loc_7F81AD04: ; CODE XREF: sub_7F81AC90+5Ej ; sub_7F81AC90+69j ... test ecx, ecx jg short loc_7F81AD0C test edi, edi jnz short loc_7F81AD2C loc_7F81AD0C: ; CODE XREF: sub_7F81AC90+76j mov eax, ecx mov ebx, 0Ah cdq idiv ebx movzx eax, dx inc edi mov al, byte_7F8367B8[eax] mov [esi], al inc esi mov eax, ecx cdq idiv ebx mov ecx, eax jmp short loc_7F81AD04 ; --------------------------------------------------------------------------- loc_7F81AD2C: ; CODE XREF: sub_7F81AC90+7Aj lea eax, [ebp+var_10] cmp esi, eax jbe short loc_7F81AD50 loc_7F81AD33: ; CODE XREF: sub_7F81AC90+BEj mov eax, [ebp+arg_8] dec [ebp+arg_8] cmp eax, 1 jbe short loc_7F81AD50 dec esi mov eax, [ebp+arg_4] lea edx, [ebp+var_10] inc [ebp+arg_4] mov cl, [esi] cmp esi, edx mov [eax], cl ja short loc_7F81AD33 loc_7F81AD50: ; CODE XREF: sub_7F81AC90+A1j ; sub_7F81AC90+ACj mov eax, [ebp+arg_4] mov byte ptr [eax], 0 loc_7F81AD56: ; CODE XREF: sub_7F81AC90+18j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F81AC90 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AD5F proc near ; CODE XREF: sub_7F81ADC3:loc_7F81AEBEp var_8 = byte ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov edx, [esp+arg_C] mov ebp, esp sub esp, 8 test edx, edx push ebx push esi push edi jnz short loc_7F81AD75 mov eax, [ebp+arg_8] jmp short loc_7F81ADBA ; --------------------------------------------------------------------------- loc_7F81AD75: ; CODE XREF: sub_7F81AD5F+Fj lea esi, [ebp+var_8] mov ecx, [ebp+arg_0] test ecx, ecx jle short loc_7F81AD9B mov edi, ecx loc_7F81AD81: ; CODE XREF: sub_7F81AD5F+3Aj mov eax, [ebp+arg_4] and ax, 0Fh shr [ebp+arg_4], 4 movzx ebx, ax mov al, byte_7F8367B8[ebx] mov [esi], al inc esi dec edi jnz short loc_7F81AD81 loc_7F81AD9B: ; CODE XREF: sub_7F81AD5F+1Ej xor edi, edi mov eax, [ebp+arg_8] test ecx, ecx jle short loc_7F81ADB7 loc_7F81ADA4: ; CODE XREF: sub_7F81AD5F+56j mov ebx, edx dec edx cmp ebx, 1 jbe short loc_7F81ADB7 dec esi inc edi mov bl, [esi] mov [eax], bl inc eax cmp ecx, edi jg short loc_7F81ADA4 loc_7F81ADB7: ; CODE XREF: sub_7F81AD5F+43j ; sub_7F81AD5F+4Bj mov byte ptr [eax], 0 loc_7F81ADBA: ; CODE XREF: sub_7F81AD5F+14j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81AD5F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81ADC3 proc near ; CODE XREF: sub_7F81AEE2+1Ap ; sub_7F81AF07+20p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 4 mov [ebp+var_4], 0 push ebx push esi push edi mov ebx, [ebp+arg_0] mov edi, [ebp+arg_8] mov al, [edi] inc edi test al, al jz loc_7F81AED6 mov esi, [ebp+arg_C] loc_7F81ADE7: ; CODE XREF: sub_7F81ADC3+10Dj cmp [ebp+arg_4], 1 jbe loc_7F81AED6 cmp al, 25h jz short loc_7F81AE00 mov [ebx], al dec [ebp+arg_4] inc ebx jmp loc_7F81AECB ; --------------------------------------------------------------------------- loc_7F81AE00: ; CODE XREF: sub_7F81ADC3+30j mov al, [edi] inc edi cmp al, 31h jb short loc_7F81AE16 cmp al, 34h ja short loc_7F81AE16 movzx ecx, al sub ecx, 31h mov al, [edi] inc edi jmp short loc_7F81AE19 ; --------------------------------------------------------------------------- loc_7F81AE16: ; CODE XREF: sub_7F81ADC3+42j ; sub_7F81ADC3+46j mov ecx, [ebp+var_4] loc_7F81AE19: ; CODE XREF: sub_7F81ADC3+51j movzx eax, al inc [ebp+var_4] cmp eax, 25h jz short loc_7F81AE52 cmp eax, 62h jz short loc_7F81AE60 cmp eax, 64h jz short loc_7F81AE6F cmp eax, 6Ch jz short loc_7F81AE7C cmp eax, 6Eh jz short loc_7F81AE8C cmp eax, 73h jz short loc_7F81AE9E push [ebp+arg_4] push ebx cmp eax, 77h jz short loc_7F81AEB5 push offset a?fmt ; "?fmt" call sub_7F81ABAD jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AE52: ; CODE XREF: sub_7F81ADC3+5Fj lea eax, [ebx+1] mov byte ptr [ebx], 25h dec [ebp+var_4] mov byte ptr [eax], 0 jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AE60: ; CODE XREF: sub_7F81ADC3+64j mov ecx, [esi+ecx*4] push [ebp+arg_4] push ebx movzx eax, word ptr [ecx] push eax push 2 jmp short loc_7F81AEBE ; --------------------------------------------------------------------------- loc_7F81AE6F: ; CODE XREF: sub_7F81ADC3+69j mov ecx, [esi+ecx*4] push [ebp+arg_4] push ebx push dword ptr [ecx] push 8 jmp short loc_7F81AEBE ; --------------------------------------------------------------------------- loc_7F81AE7C: ; CODE XREF: sub_7F81ADC3+6Ej mov ecx, [esi+ecx*4] push [ebp+arg_4] push ebx push dword ptr [ecx] call sub_7F81AC90 jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AE8C: ; CODE XREF: sub_7F81ADC3+73j mov ecx, [esi+ecx*4] push [ebp+arg_4] push ebx movsx eax, word ptr [ecx] push eax call sub_7F81AC90 jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AE9E: ; CODE XREF: sub_7F81ADC3+78j mov eax, [esi+ecx*4] test eax, eax jz short loc_7F81AEB1 push [ebp+arg_4] push ebx push eax call sub_7F81ABAD jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AEB1: ; CODE XREF: sub_7F81ADC3+E0j mov eax, ebx jmp short loc_7F81AEC3 ; --------------------------------------------------------------------------- loc_7F81AEB5: ; CODE XREF: sub_7F81ADC3+81j mov ecx, [esi+ecx*4] movzx eax, word ptr [ecx] push eax push 4 loc_7F81AEBE: ; CODE XREF: sub_7F81ADC3+AAj ; sub_7F81ADC3+B7j call sub_7F81AD5F loc_7F81AEC3: ; CODE XREF: sub_7F81ADC3+8Dj ; sub_7F81ADC3+9Bj ... sub [ebp+arg_4], eax add [ebp+arg_4], ebx mov ebx, eax loc_7F81AECB: ; CODE XREF: sub_7F81ADC3+38j mov al, [edi] inc edi test al, al jnz loc_7F81ADE7 loc_7F81AED6: ; CODE XREF: sub_7F81ADC3+1Bj ; sub_7F81ADC3+28j pop edi mov byte ptr [ebx], 0 pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81ADC3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AEE2 proc near ; CODE XREF: sub_7F81DCCA+12Ep ; sub_7F81E844+119p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_C] mov ebp, esp sub esp, 4 mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81ADC3 mov esp, ebp pop ebp retn 10h sub_7F81AEE2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AF07 proc near ; CODE XREF: sub_7F8150A9+39p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_C] mov ebp, esp sub esp, 8 mov ecx, [ebp+arg_10] mov [ebp+var_8], eax lea eax, [ebp+var_8] mov [ebp+var_4], ecx push eax push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81ADC3 mov esp, ebp pop ebp retn 14h sub_7F81AF07 endp ; =============== S U B R O U T I N E ======================================= sub_7F81AF32 proc near ; CODE XREF: sub_7F8237B9+18p arg_0 = dword ptr 4 push esi xor eax, eax mov esi, [esp+4+arg_0] mov dword ptr [esi], 0FF00h loc_7F81AF3F: ; CODE XREF: sub_7F81AF32+2Ej mov ecx, [esi] cmp ecx, 1000h jbe short loc_7F81AF62 push 0 push ecx call sub_7F82F03B mov ecx, [esi] mov edx, ecx shr edx, 2 shr ecx, 1 add edx, ecx test eax, eax mov [esi], edx jz short loc_7F81AF3F loc_7F81AF62: ; CODE XREF: sub_7F81AF32+15j pop esi retn 4 sub_7F81AF32 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AF66 proc near ; CODE XREF: sub_7F80FE90+D2p ; sub_7F80FE90+F6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp loc_7F81AF69: ; CODE XREF: sub_7F81AF66+1Dj mov eax, [ebp+arg_8] dec [ebp+arg_8] test eax, eax jz short loc_7F81AF89 mov ecx, [ebp+arg_0] mov eax, [ebp+arg_4] inc [ebp+arg_0] inc [ebp+arg_4] mov al, [eax] cmp [ecx], al jz short loc_7F81AF69 xor eax, eax jmp short loc_7F81AF8E ; --------------------------------------------------------------------------- loc_7F81AF89: ; CODE XREF: sub_7F81AF66+Bj mov eax, 1 loc_7F81AF8E: ; CODE XREF: sub_7F81AF66+21j pop ebp retn 0Ch sub_7F81AF66 endp ; =============== S U B R O U T I N E ======================================= sub_7F81AF92 proc near ; CODE XREF: sub_7F82B8D3+27p arg_0 = word ptr 4 push esi call ds:GetTickCount movzx ecx, [esp+4+arg_0] imul ecx, 0Ah lea esi, [ecx+eax] loc_7F81AFA4: ; CODE XREF: sub_7F81AF92+1Aj call ds:GetTickCount cmp eax, esi jb short loc_7F81AFA4 pop esi retn 4 sub_7F81AF92 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AFB2 proc near ; CODE XREF: sub_7F81028C+71p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h push ebp lea ecx, [esp+arg_4] mov ebp, esp sub esp, 4 push esi lea eax, [ebp+var_4] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz short loc_7F81AFF6 push 0 push [ebp+arg_8] push [ebp+var_4] call sub_7F8194ED test ax, ax jge short loc_7F81AFE9 mov esi, 1004h loc_7F81AFE9: ; CODE XREF: sub_7F81AFB2+30j push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C mov eax, esi loc_7F81AFF6: ; CODE XREF: sub_7F81AFB2+1Ej pop esi mov esp, ebp pop ebp retn 0Ch sub_7F81AFB2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81AFFD proc near ; CODE XREF: sub_7F81E844+EBp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push [esp+arg_C] push 9005h push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81B01B pop ebp retn 10h sub_7F81AFFD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B01B proc near ; CODE XREF: sub_7F81AFFD+15p var_28 = byte ptr -28h var_24 = word ptr -24h var_22 = dword ptr -22h var_1C = byte ptr -1Ch var_18 = word ptr -18h var_16 = dword ptr -16h var_12 = dword ptr -12h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp inc word_7F838070 mov ebp, esp sub esp, 28h mov [ebp+var_C], 0 push ebx push esi push edi mov edi, [ebp+arg_4] test edi, edi jz short loc_7F81B093 cmp edi, 82h jz short loc_7F81B093 cmp edi, 84h jnz short loc_7F81B052 mov [ebp+var_8], 64694881h jmp short loc_7F81B09A ; --------------------------------------------------------------------------- loc_7F81B052: ; CODE XREF: sub_7F81B01B+2Cj push 0 lea eax, [ebp+var_1C] push eax lea ecx, [ebp+var_8] push 0 push ecx push edi push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81B083 cmp esi, 1001h jnz loc_7F81B17C mov esi, 1009h jmp loc_7F81B17C ; --------------------------------------------------------------------------- loc_7F81B083: ; CODE XREF: sub_7F81B01B+50j test [ebp+var_1C], 4 jnz short loc_7F81B09A mov esi, 1015h jmp loc_7F81B17C ; --------------------------------------------------------------------------- loc_7F81B093: ; CODE XREF: sub_7F81B01B+1Cj ; sub_7F81B01B+24j mov [ebp+var_8], 4D504981h loc_7F81B09A: ; CODE XREF: sub_7F81B01B+35j ; sub_7F81B01B+6Cj mov ebx, [ebp+arg_8] mov al, [ebx] test al, al jge short loc_7F81B0CA cmp al, 91h jb short loc_7F81B0AB xor eax, eax jmp short loc_7F81B0B6 ; --------------------------------------------------------------------------- loc_7F81B0AB: ; CODE XREF: sub_7F81B01B+8Aj movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F81B0B6: ; CODE XREF: sub_7F81B01B+8Ej and ax, 9005h cmp ax, 9005h jz short loc_7F81B0CA mov esi, 1015h jmp loc_7F81B17F ; --------------------------------------------------------------------------- loc_7F81B0CA: ; CODE XREF: sub_7F81B01B+86j ; sub_7F81B01B+A3j lea eax, [ebp+var_C] push eax push 2 push ebx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81B17F push [ebp+arg_C] push dword ptr [ebx] push [ebp+arg_0] call sub_7F82CF24 mov esi, eax test esi, esi jnz loc_7F81B17F mov [ebp+var_16], 0 mov [ebp+var_12], 9 mov ax, [ebp+var_18] and ax, 0FFFDh or al, 1 mov [ebp+var_18], ax lea eax, [ebp+var_18] and [ebp+var_18], 0FFFBh push eax push [ebp+var_C] call sub_7F8199E0 mov esi, eax test esi, esi jnz short loc_7F81B17F push [ebp+var_C] call sub_7F8178C4 mov esi, eax test esi, esi jnz short loc_7F81B17F push dword ptr [ebx] push edi push [ebp+arg_0] call sub_7F828462 mov esi, eax test esi, esi jnz short loc_7F81B17F cmp word ptr [ebp+arg_C], 801Dh jz short loc_7F81B17F lea eax, [ebp+var_2] push eax push [ebp+arg_10] push dword ptr [ebx] push edi push [ebp+var_8] push [ebp+arg_0] call sub_7F81B21F mov esi, eax test esi, esi jz short loc_7F81B17F push dword ptr [ebx] push [ebp+arg_0] call sub_7F828680 jmp short loc_7F81B17F ; --------------------------------------------------------------------------- loc_7F81B17C: ; CODE XREF: sub_7F81B01B+58j ; sub_7F81B01B+63j ... mov ebx, [ebp+arg_8] loc_7F81B17F: ; CODE XREF: sub_7F81B01B+AAj ; sub_7F81B01B+C2j ... cmp [ebp+var_C], 0 jz short loc_7F81B196 lea ecx, [ebp+var_C] cmp esi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F81B196: ; CODE XREF: sub_7F81B01B+168j test esi, esi jnz short loc_7F81B20D push [ebp+arg_0] call sub_7F82A1E7 test esi, esi jnz short loc_7F81B20D cmp word ptr [ebp+arg_C], 801Dh jz short loc_7F81B20D cmp word_7F838070, 1 jnz short loc_7F81B20D mov [ebp+var_22], offset word_7F833C10 mov ax, [ebp+var_2] lea edx, [ebp+var_28] mov word_7F833C12, ax push edx mov word_7F833C10, 1 mov ecx, [ebx] push 4000h push [ebp+var_8] mov [ebp+var_24], 1 push [ebp+arg_0] mov dword_7F833C14, ecx call sub_7F82A016 mov ecx, [ebp+var_8] lea edx, [ebp+var_28] push edx mov [ebp+var_22+2], ecx push 100h push dword ptr [ebx] push [ebp+arg_0] call sub_7F82A016 loc_7F81B20D: ; CODE XREF: sub_7F81B01B+17Dj ; sub_7F81B01B+189j ... dec word_7F838070 mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81B01B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B21F proc near ; CODE XREF: sub_7F81B01B+14Ap ; sub_7F81DCCA+178p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 0Ch push ebx mov ecx, [ebp+arg_14] push esi lea eax, [ebp+var_C] push edi mov esi, [ebp+arg_10] xor edi, edi push eax ; int mov [ecx], di mov [ebp+var_8], edi lea ecx, [esi+2] push ecx ; lpString call sub_7F81B34C cmp eax, edi mov ebx, eax jnz loc_7F81B31C lea eax, [ebp+var_8] lea ecx, [ebp+arg_4] add [ebp+var_C], 2 push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, edi mov ebx, eax jnz loc_7F81B31C test [ebp+arg_8], 0FFFFFF00h jz short loc_7F81B2A6 push esi lea eax, [ebp+var_2] push edi push eax push [ebp+arg_8] push [ebp+var_8] call sub_7F81B5AF cmp eax, edi mov ebx, eax jnz loc_7F81B31C mov ax, [esi] inc ax mov [esi], ax cmp ax, 100h jb short loc_7F81B2B1 mov ebx, 1017h jmp short loc_7F81B31C ; --------------------------------------------------------------------------- loc_7F81B2A6: ; CODE XREF: sub_7F81B21F+55j mov [ebp+var_2], 0FFFFh mov word ptr [esi], 1 loc_7F81B2B1: ; CODE XREF: sub_7F81B21F+7Ej lea eax, [ebp+var_2] push eax push esi push 0FFFFFFFFh push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F81B4E9 mov ebx, eax test ebx, ebx jnz short loc_7F81B31C push [ebp+var_C] push [ebp+arg_C] lea edx, [ebp+var_2] push edx push [ebp+var_8] call sub_7F818B75 mov ebx, eax test ebx, ebx jnz short loc_7F81B31C push [ebp+var_C] push esi push 0 lea ecx, [ebp+var_2] push ecx push [ebp+var_8] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F81B31C push [ebp+var_8] call sub_7F8178C4 mov ebx, eax test ebx, ebx jnz short loc_7F81B31C push 1 lea ecx, [ebp+arg_C] push [ebp+arg_4] push 1 push ecx push [ebp+arg_0] call sub_7F82D1DF mov ebx, eax loc_7F81B31C: ; CODE XREF: sub_7F81B21F+28j ; sub_7F81B21F+48j ... cmp [ebp+var_8], 0 jz short loc_7F81B333 lea ecx, [ebp+var_8] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F81B333: ; CODE XREF: sub_7F81B21F+101j test ebx, ebx jnz short loc_7F81B341 mov ax, [ebp+var_2] mov ecx, [ebp+arg_14] mov [ecx], ax loc_7F81B341: ; CODE XREF: sub_7F81B21F+116j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81B21F endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F81B34C(LPCSTR lpString, int) sub_7F81B34C proc near ; CODE XREF: sub_7F81B21F+1Fp lpString = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push ebx push esi push edi push ebp mov dword ptr [eax], 0 push [esp+10h+lpString] ; lpString call ds:lstrlenA lea esi, [eax+1] mov ebx, [esp+10h+lpString] add ebx, esi push ebx ; lpString call ds:lstrlenA lea edi, [ebx+eax+1] push 1 ; int push 1 ; int push [esp+18h+lpString] ; lpString call sub_7F81AC0B lea ebp, [eax+1] cmp ebp, 1 ja short loc_7F81B394 mov eax, 100Eh jmp short loc_7F81B3DD ; --------------------------------------------------------------------------- loc_7F81B394: ; CODE XREF: sub_7F81B34C+3Fj cmp byte ptr [edi], 0 jnz short loc_7F81B3D8 lea eax, [ebp-1] mov ecx, 80h cmp eax, ecx jnb short loc_7F81B3D8 mov eax, edi sub eax, ebx dec eax cmp eax, ecx jnb short loc_7F81B3D8 inc edi cmp esi, ebp jz short loc_7F81B3CA mov eax, edi sub eax, ebx push eax push ebx sub ebx, esi sub edi, esi add ebx, ebp add edi, ebp push ebx call sub_7F82FCE0 add esp, 0Ch loc_7F81B3CA: ; CODE XREF: sub_7F81B34C+65j sub edi, [esp+10h+lpString] mov eax, [esp+10h+arg_4] mov [eax], edi xor eax, eax jmp short loc_7F81B3DD ; --------------------------------------------------------------------------- loc_7F81B3D8: ; CODE XREF: sub_7F81B34C+4Bj ; sub_7F81B34C+57j ... mov eax, 210h loc_7F81B3DD: ; CODE XREF: sub_7F81B34C+46j ; sub_7F81B34C+8Aj pop ebp pop edi pop esi pop ebx retn 8 sub_7F81B34C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B3E4 proc near ; CODE XREF: sub_7F80BD6C+6Bp var_10 = byte ptr -10h var_C = dword ptr -0Ch var_8 = byte ptr -8 var_6 = byte ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 10h push esi lea eax, [ebp+var_6] push edi lea ecx, [ebp+var_10] xor edi, edi push edi mov [ebp+var_C], edi push eax push edi push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 cmp eax, edi mov esi, eax jz short loc_7F81B422 cmp esi, 1001h jnz loc_7F81B4C3 mov esi, 1009h jmp loc_7F81B4C3 ; --------------------------------------------------------------------------- loc_7F81B422: ; CODE XREF: sub_7F81B3E4+26j test [ebp+var_6], 4 jnz short loc_7F81B432 mov esi, 1015h jmp loc_7F81B4C3 ; --------------------------------------------------------------------------- loc_7F81B432: ; CODE XREF: sub_7F81B3E4+42j lea eax, [ebp+var_C] lea ecx, [ebp+var_10] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz short loc_7F81B4C3 lea eax, [ebp+var_8] lea ecx, [ebp+var_4+2] push eax lea edx, [ebp+var_4] push ecx push edx push [ebp+arg_4] push [ebp+var_C] call sub_7F81B5AF mov esi, eax test esi, esi jz short loc_7F81B476 cmp esi, 1004h jnz short loc_7F81B4C3 mov esi, 1009h jmp short loc_7F81B4C3 ; --------------------------------------------------------------------------- loc_7F81B476: ; CODE XREF: sub_7F81B3E4+81j push [ebp+arg_C] push [ebp+arg_8] push 0 push [ebp+var_4] push [ebp+var_C] call sub_7F818D47 cmp eax, 1014h mov esi, eax jnz short loc_7F81B49C mov ecx, [ebp+arg_C] cmp dword ptr [ecx], 0 jbe short loc_7F81B49C xor esi, esi loc_7F81B49C: ; CODE XREF: sub_7F81B3E4+ACj ; sub_7F81B3E4+B4j test esi, esi jnz short loc_7F81B4C3 mov edi, [ebp+arg_10] test edi, edi jz short loc_7F81B4C3 cmp word ptr [ebp+var_4+2], 0 jl short loc_7F81B4BD push [ebp+var_4+2] push [ebp+var_C] call sub_7F819508 mov [edi], eax jmp short loc_7F81B4C3 ; --------------------------------------------------------------------------- loc_7F81B4BD: ; CODE XREF: sub_7F81B3E4+C8j mov dword ptr [edi], 0 loc_7F81B4C3: ; CODE XREF: sub_7F81B3E4+2Ej ; sub_7F81B3E4+39j ... cmp [ebp+var_C], 0 jz short loc_7F81B4D4 push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C loc_7F81B4D4: ; CODE XREF: sub_7F81B3E4+E3j xor eax, eax test esi, esi jz short loc_7F81B4DF mov ecx, [ebp+arg_C] mov [ecx], eax loc_7F81B4DF: ; CODE XREF: sub_7F81B3E4+F4j mov eax, esi pop edi pop esi mov esp, ebp pop ebp retn 14h sub_7F81B3E4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B4E9 proc near ; CODE XREF: sub_7F81B21F+9Fp ; sub_7F81B714+11Fp var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor esi, esi push [ebp+arg_0] call sub_7F8198FC mov di, [ebp+arg_4] mov ebx, [ebp+arg_C] mov [ebp+var_4], ax loc_7F81B507: ; CODE XREF: sub_7F81B4E9+53j ; sub_7F81B4E9+59j ... inc di cmp di, [ebp+var_4] jge loc_7F81B59E lea eax, [ebp+var_8] lea ecx, [ebp+var_2] mov [ebp+var_8], 2 push eax push ecx push 0 push edi push [ebp+arg_0] call sub_7F818D47 mov esi, eax test esi, esi jnz short loc_7F81B5A4 mov ax, [ebx] cmp [ebp+var_2], ax jb short loc_7F81B59E jnz short loc_7F81B507 cmp di, [ebp+arg_8] jz short loc_7F81B507 mov [ebp+var_8], 7Fh lea eax, [ebp+var_8] push eax push offset byte_7F8369F8 push 2 push edi push [ebp+arg_0] call sub_7F818D47 mov esi, eax test esi, esi jz short loc_7F81B575 cmp esi, 1014h jnz short loc_7F81B5A4 cmp [ebp+var_8], 0 jbe short loc_7F81B5A4 xor esi, esi loc_7F81B575: ; CODE XREF: sub_7F81B4E9+7Aj mov eax, [ebp+var_8] push offset byte_7F8369F8 ; lpString2 lea ecx, [ebx+2] mov byte_7F8369F8[eax], 0 push ecx ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F81B599 jge loc_7F81B507 jmp short loc_7F81B59E ; --------------------------------------------------------------------------- loc_7F81B599: ; CODE XREF: sub_7F81B4E9+A6j mov esi, 100Fh loc_7F81B59E: ; CODE XREF: sub_7F81B4E9+24j ; sub_7F81B4E9+51j ... mov eax, [ebp+arg_10] mov [eax], di loc_7F81B5A4: ; CODE XREF: sub_7F81B4E9+48j ; sub_7F81B4E9+82j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81B4E9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B5AF proc near ; CODE XREF: sub_7F81B21F+63p ; sub_7F81B3E4+78p ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 8 mov [ebp+var_8], 2 push ebx push esi push edi push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F8194ED mov cx, ax mov esi, [ebp+arg_8] mov [esi], ax test cx, cx jl short loc_7F81B63E lea eax, [ebp+var_8] mov edi, [ebp+arg_10] push eax push edi push 0 push ecx push [ebp+arg_0] call sub_7F818D47 test eax, eax jnz short loc_7F81B643 mov ebx, [ebp+arg_C] test ebx, ebx jz short loc_7F81B643 mov word ptr [ebx], 0FFFFh cmp word ptr [edi], 1 jz short loc_7F81B643 mov si, [esi] loc_7F81B606: ; CODE XREF: sub_7F81B5AF+85j dec si js short loc_7F81B639 lea eax, [ebp+var_8] lea ecx, [ebp+var_2] mov [ebp+var_8], 2 push eax push ecx push 0 push esi push [ebp+arg_0] call sub_7F818D47 test eax, eax jnz short loc_7F81B643 movzx ecx, word ptr [edi] movzx edx, [ebp+var_2] sub ecx, edx cmp ecx, 1 jnz short loc_7F81B606 mov [ebx], si loc_7F81B639: ; CODE XREF: sub_7F81B5AF+59j test si, si jge short loc_7F81B643 loc_7F81B63E: ; CODE XREF: sub_7F81B5AF+29j mov eax, 1004h loc_7F81B643: ; CODE XREF: sub_7F81B5AF+40j ; sub_7F81B5AF+47j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81B5AF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B64C proc near ; CODE XREF: sub_7F8273AF+D2p var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx push esi mov si, [ebp+arg_4] push edi mov di, [ebp+arg_8] mov ebx, [ebp+arg_C] mov [ebx], si loc_7F81B663: ; CODE XREF: sub_7F81B64C+3Bj inc si lea eax, [ebp+var_8] push eax lea ecx, [ebp+var_2] mov [ebp+var_8], 2 push ecx push 0 push esi push [ebp+arg_0] call sub_7F818D47 test eax, eax jnz short loc_7F81B68F cmp [ebp+var_2], di ja short loc_7F81B663 lea ecx, [esi-1] mov [ebx], cx loc_7F81B68F: ; CODE XREF: sub_7F81B64C+35j cmp eax, 1005h jnz short loc_7F81B69D dec si xor eax, eax mov [ebx], si loc_7F81B69D: ; CODE XREF: sub_7F81B64C+48j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81B64C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B6A6 proc near ; CODE XREF: sub_7F81C56F+2A3p ; sub_7F81CE7B+77p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push esi lea eax, [ebp+var_4] push eax lea ecx, [ebp+arg_8] mov [ebp+var_8], 80h push 0 push ecx push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz short loc_7F81B70D push 0 push [ebp+arg_4] push [ebp+var_4] call sub_7F8194ED test ax, ax jge short loc_7F81B6E3 mov esi, 1004h jmp short loc_7F81B700 ; --------------------------------------------------------------------------- loc_7F81B6E3: ; CODE XREF: sub_7F81B6A6+34j lea ecx, [ebp+var_8] push ecx push [ebp+arg_C] push 2 push eax push [ebp+var_4] call sub_7F818D47 cmp eax, 1014h mov esi, eax jnz short loc_7F81B700 xor esi, esi loc_7F81B700: ; CODE XREF: sub_7F81B6A6+3Bj ; sub_7F81B6A6+56j push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C mov eax, esi loc_7F81B70D: ; CODE XREF: sub_7F81B6A6+22j pop esi mov esp, ebp pop ebp retn 10h sub_7F81B6A6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B714 proc near ; CODE XREF: sub_7F8207A6+278p var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = word ptr -8 var_6 = dword ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 24h mov [ebp+var_8], 1 mov [ebp+var_18], 4D504981h mov [ebp+var_1C], 81h mov word ptr [ebp+var_6], 0FFFFh push ebx push esi push edi xor ebx, ebx push ebx mov edi, 400h push edi mov [ebp+var_10], ebx mov [ebp+var_C], ebx call sub_7F82F03B mov esi, eax test esi, esi jz loc_7F81B8BF lea eax, [ebp+var_10] lea ecx, [ebp+var_18] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F81B8B5 lea eax, [ebp+var_C] lea ecx, [ebp+var_1C] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F81B8B5 push [ebp+var_10] call sub_7F8198FC mov [ebp+var_2], ax mov dword ptr [esi+4], 0 dec [ebp+var_2] test ax, ax jle loc_7F81B889 loc_7F81B7AD: ; CODE XREF: sub_7F81B714+16Fj push ebx push [ebp+var_10] call sub_7F819508 push ebx mov [ebp+var_20], eax push [ebp+var_10] call sub_7F81990D lea ecx, [ebp+var_14] mov [ebp+var_14], eax mov ax, bx push ecx inc bx push offset ReturnedString push 0 push eax push [ebp+var_10] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F81B8B5 mov di, ReturnedString cmp [ebp+var_8], di jbe short loc_7F81B80B movzx eax, di push 0 push dword ptr [esi+eax*4] push [ebp+var_C] call sub_7F8194ED mov word ptr [ebp+var_6], ax jmp short loc_7F81B81E ; --------------------------------------------------------------------------- loc_7F81B80B: ; CODE XREF: sub_7F81B714+DFj jnb short loc_7F81B81E mov ax, word ptr [ebp+var_6+2] mov edx, [ebp+var_24] movzx ecx, di mov word ptr [ebp+var_6], ax mov [esi+ecx*4], edx loc_7F81B81E: ; CODE XREF: sub_7F81B714+F5j ; sub_7F81B714:loc_7F81B80Bj mov [ebp+var_8], di lea eax, [ebp+var_6+2] push eax push offset ReturnedString push 0FFFFFFFFh push [ebp+var_6] push [ebp+var_C] call sub_7F81B4E9 mov edi, eax test edi, edi jnz short loc_7F81B8B5 push [ebp+var_14] push [ebp+var_20] lea edx, [ebp+var_6+2] push edx push [ebp+var_C] call sub_7F818B75 mov edi, eax test edi, edi jnz short loc_7F81B8B5 push [ebp+var_14] push offset ReturnedString push 0 lea ecx, [ebp+var_6+2] push ecx push [ebp+var_C] call sub_7F818DC7 mov edi, eax test edi, edi jnz short loc_7F81B8B5 mov cx, [ebp+var_2] mov eax, [ebp+var_20] dec [ebp+var_2] mov [ebp+var_24], eax test cx, cx jg loc_7F81B7AD loc_7F81B889: ; CODE XREF: sub_7F81B714+93j push 1 lea eax, [ebp+var_C] push eax call sub_7F81813C mov edi, eax test edi, edi jnz short loc_7F81B8B5 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C push [ebp+var_1C] push [ebp+var_18] push [ebp+arg_0] call sub_7F824774 mov edi, eax loc_7F81B8B5: ; CODE XREF: sub_7F81B714+57j ; sub_7F81B714+73j ... test esi, esi jz short loc_7F81B8BF push esi call sub_7F82F149 loc_7F81B8BF: ; CODE XREF: sub_7F81B714+3Bj ; sub_7F81B714+1A3j test edi, edi jz short loc_7F81B8E5 cmp [ebp+var_10], 0 jz short loc_7F81B8D4 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F81B8D4: ; CODE XREF: sub_7F81B714+1B3j cmp [ebp+var_C], 0 jz short loc_7F81B8E5 push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C loc_7F81B8E5: ; CODE XREF: sub_7F81B714+1ADj ; sub_7F81B714+1C4j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F81B714 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81B8F0 proc near ; CODE XREF: sub_7F810955+8Ep ; sub_7F81E844+152p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi lea eax, [ebp+var_14] xor edi, edi push eax lea ecx, [ebp+var_10] mov [ebp+var_10], edi push ecx mov [ebp+var_C], edi push [ebp+arg_4] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_0] mov [ebp+var_8], edi call sub_7F81BA1F cmp eax, edi mov esi, eax jnz loc_7F81B9EA lea eax, [ebp+var_8] lea ecx, [ebp+arg_4] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, edi mov esi, eax jnz loc_7F81B9EA lea eax, [ebp+var_C] push eax push [ebp+var_14] push [ebp+arg_8] push [ebp+var_8] call sub_7F819BC5 cmp eax, edi mov esi, eax jnz loc_7F81B9EA push [ebp+var_14] push [ebp+var_10] push [ebp+var_C] call sub_7F81A03B cmp eax, edi mov esi, eax jnz short loc_7F81B9EA mov ebx, [ebp+arg_10] lea eax, [ebp+var_C] push ebx push eax call sub_7F81A0C1 cmp eax, edi mov esi, eax jnz short loc_7F81B9EA push [ebp+var_8] call sub_7F8178C4 cmp eax, edi mov esi, eax jnz short loc_7F81B9EA mov ax, [ebx] lea ecx, [ebp+arg_8] push eax push 1 push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F8290A9 cmp eax, edi mov esi, eax jnz short loc_7F81B9EA mov eax, [ebp+var_10] xor ebx, ebx mov bl, [eax+0Eh] and ebx, 22h push ebx push [ebp+arg_8] push [ebp+arg_0] call sub_7F82C46A test ebx, ebx jnz short loc_7F81B9D7 push 1 push [ebp+arg_4] push [ebp+arg_0] call sub_7F82C50A loc_7F81B9D7: ; CODE XREF: sub_7F81B8F0+D8j push 1 lea ecx, [ebp+arg_8] push [ebp+arg_4] push 1 push ecx push [ebp+arg_0] call sub_7F82D1DF loc_7F81B9EA: ; CODE XREF: sub_7F81B8F0+31j ; sub_7F81B8F0+4Dj ... cmp [ebp+var_8], 0 jz short loc_7F81BA14 cmp [ebp+var_C], 0 jz short loc_7F81BA03 lea eax, [ebp+var_2] lea ecx, [ebp+var_C] push eax push ecx call sub_7F81A0C1 loc_7F81BA03: ; CODE XREF: sub_7F81B8F0+104j lea ecx, [ebp+var_8] cmp esi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F81BA14: ; CODE XREF: sub_7F81B8F0+FEj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81B8F0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81BA1F proc near ; CODE XREF: sub_7F81B8F0+28p ; sub_7F81D22C+62p ... var_28 = dword ptr -28h var_24 = word ptr -24h var_22 = word ptr -22h var_20 = word ptr -20h var_1E = word ptr -1Eh var_1C = word ptr -1Ch var_1A = dword ptr -1Ah var_14 = dword ptr -14h var_E = dword ptr -0Eh var_A = dword ptr -0Ah var_6 = dword ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 28h push ebx push esi push edi xor esi, esi xor ebx, ebx mov ecx, [ebp+arg_10] cmp [ebp+arg_8], 1 sbb eax, eax mov edx, [ebp+arg_14] neg eax mov [ebp+var_28], eax mov [ecx], esi mov [edx], esi cmp eax, esi jz short loc_7F81BA72 lea eax, [ebp+arg_8] lea ecx, [ebp+arg_4] push eax push esi push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, esi mov ebx, eax jz short loc_7F81BA72 cmp ebx, 1001h jnz loc_7F81BDB6 mov ebx, 1008h jmp loc_7F81BDB6 ; --------------------------------------------------------------------------- loc_7F81BA72: ; CODE XREF: sub_7F81BA1F+24j ; sub_7F81BA1F+3Bj xor esi, esi push esi push 38006h push [ebp+arg_8] call sub_7F8194ED mov [ebp+var_2], ax cmp ax, si jge short loc_7F81BA9D push esi push 38005h push [ebp+arg_8] call sub_7F8194ED mov [ebp+var_2], ax loc_7F81BA9D: ; CODE XREF: sub_7F81BA1F+6Aj push 0 push 8000h push [ebp+arg_8] call sub_7F8194ED mov word ptr [ebp+var_6], ax push 0 push 18004h push [ebp+arg_8] call sub_7F8194ED mov word ptr [ebp+var_6+2], ax push 0 push 68007h push [ebp+arg_8] call sub_7F8194ED mov word ptr [ebp+var_E], ax push 0 push 78008h push [ebp+arg_8] call sub_7F8194ED mov word ptr [ebp+var_E+2], ax push 0 push 80000h push [ebp+arg_8] call sub_7F8194ED mov word ptr [ebp+var_A], ax push 0 push 4800Dh push [ebp+arg_8] call sub_7F8194ED mov word_7F8367E7, 0 mov byte_7F8367E6, 3 mov dword_7F8367EB, 0 mov word_7F8367E9, 2 mov [ebp+var_24], 7B0h mov word ptr [ebp+var_A+2], ax mov ecx, 1 mov [ebp+var_22], 0Ch lea esi, [ebp+var_24] mov edi, offset ReturnedString mov [ebp+var_20], 10h mov [ebp+var_1E], 0Eh mov [ebp+var_1C], 14h mov word ptr [ebp+var_1A], 0 mov word ptr [ebp+var_1A+2], cx movsd movsd movsd movsw cmp word ptr [ebp+var_E], 0 mov eax, [ebp+arg_C] mov dword_7F8367EF, eax jl short loc_7F81BBA5 lea eax, [ebp+var_1A+3] mov [ebp+var_14], ecx lea ecx, [ebp+var_14] push ecx push eax push 0 push [ebp+var_E] push [ebp+arg_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F81BDB6 mov al, byte ptr [ebp+var_1A+3] mov byte_7F8367E6, al loc_7F81BBA5: ; CODE XREF: sub_7F81BA1F+15Aj cmp word ptr [ebp+var_E+2], 0 jl short loc_7F81BBDC lea eax, [ebp+var_14] lea ecx, [ebp+var_1A+2] mov [ebp+var_14], 2 push eax push ecx push 0 push [ebp+var_E+2] push [ebp+arg_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F81BDB6 mov ax, word ptr [ebp+var_1A+2] mov word_7F8367E7, ax loc_7F81BBDC: ; CODE XREF: sub_7F81BA1F+18Bj cmp word ptr [ebp+var_A], 0 jl short loc_7F81BC11 lea eax, [ebp+var_14] lea ecx, [ebp+var_1A] mov [ebp+var_14], 4 push eax push ecx push 0 push [ebp+var_A] push [ebp+arg_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F81BDB6 mov eax, [ebp+var_1A] mov dword_7F8367EB, eax loc_7F81BC11: ; CODE XREF: sub_7F81BA1F+1C2j cmp word ptr [ebp+var_A+2], 0 jl short loc_7F81BC48 lea eax, [ebp+var_14] lea ecx, [ebp+var_1A+2] mov [ebp+var_14], 2 push eax push ecx push 0 push [ebp+var_A+2] push [ebp+arg_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F81BDB6 mov ax, word ptr [ebp+var_1A+2] mov word_7F8367E9, ax loc_7F81BC48: ; CODE XREF: sub_7F81BA1F+1F7j xor esi, esi cmp [ebp+var_2], si jl short loc_7F81BCC6 lea eax, [ebp+var_14] lea ecx, [ebp+var_24] mov [ebp+var_14], 0Eh push eax push ecx push esi push dword ptr [ebp+var_2] push [ebp+arg_8] call sub_7F818D47 cmp eax, esi mov ebx, eax jnz loc_7F81BDB6 cmp [ebp+var_24], 76Ch jl short loc_7F81BCC6 cmp [ebp+var_24], 81Fh jge short loc_7F81BCC6 cmp [ebp+var_22], si jle short loc_7F81BCC6 cmp [ebp+var_22], 0Ch jg short loc_7F81BCC6 cmp [ebp+var_20], si jle short loc_7F81BCC6 cmp [ebp+var_20], 1Fh jg short loc_7F81BCC6 cmp [ebp+var_1E], si jl short loc_7F81BCC6 cmp [ebp+var_1E], 18h jge short loc_7F81BCC6 cmp [ebp+var_1C], si jl short loc_7F81BCC6 cmp [ebp+var_1C], 3Ch jge short loc_7F81BCC6 lea esi, [ebp+var_24] mov edi, offset ReturnedString movsd movsd movsd movsw loc_7F81BCC6: ; CODE XREF: sub_7F81BA1F+22Fj ; sub_7F81BA1F+25Cj ... test byte_7F8367E6, 40h jz short loc_7F81BD09 xor esi, esi push esi push 8001h push [ebp+arg_8] call sub_7F8194ED test ax, ax jge short loc_7F81BD05 push esi push 8002h push [ebp+arg_8] call sub_7F8194ED test ax, ax jge short loc_7F81BD05 push esi push 8003h push [ebp+arg_8] call sub_7F8194ED loc_7F81BD05: ; CODE XREF: sub_7F81BA1F+2C3j ; sub_7F81BA1F+2D6j mov word ptr [ebp+var_6], ax loc_7F81BD09: ; CODE XREF: sub_7F81BA1F+2AEj cmp word ptr [ebp+var_6], 0 jl short loc_7F81BD3F push 80h ; int mov esi, offset sz push esi ; lpString push [ebp+var_6] ; int push [ebp+arg_8] ; int call sub_7F81BDE4 mov ebx, eax test ebx, ebx jnz loc_7F81BDB6 push esi ; lpString call ds:lstrlenA lea esi, unk_7F8367F4[eax] jmp short loc_7F81BD4B ; --------------------------------------------------------------------------- loc_7F81BD3F: ; CODE XREF: sub_7F81BA1F+2EFj mov sz, 0 mov esi, offset unk_7F8367F4 loc_7F81BD4B: ; CODE XREF: sub_7F81BA1F+31Ej cmp word ptr [ebp+var_6+2], 0 jl short loc_7F81BD92 push [ebp+var_6+2] push [ebp+arg_8] call sub_7F81990D dec eax cmp eax, 7Fh jb short loc_7F81BD68 mov eax, 7Fh loc_7F81BD68: ; CODE XREF: sub_7F81BA1F+342j mov [ebp+var_14], eax lea eax, [ebp+var_14] push eax push esi push 0 push [ebp+var_6+2] push [ebp+arg_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz short loc_7F81BDB6 mov eax, [ebp+var_14] mov byte ptr [eax+esi], 0 mov eax, [ebp+var_14] inc eax add esi, eax jmp short loc_7F81BD96 ; --------------------------------------------------------------------------- loc_7F81BD92: ; CODE XREF: sub_7F81BA1F+331j mov byte ptr [esi], 0 inc esi loc_7F81BD96: ; CODE XREF: sub_7F81BA1F+371j mov eax, offset ReturnedString mov ecx, [ebp+arg_14] push 0Eh mov byte ptr [esi], 0 inc esi push eax push eax mov byte ptr [esi], 0 inc esi sub esi, eax mov [ecx], esi call sub_7F82FF60 add esp, 0Ch loc_7F81BDB6: ; CODE XREF: sub_7F81BA1F+43j ; sub_7F81BA1F+4Ej ... xor eax, eax cmp [ebp+var_28], eax jz short loc_7F81BDCC cmp [ebp+arg_8], eax jz short loc_7F81BDCC push eax lea eax, [ebp+arg_8] push eax call sub_7F81813C loc_7F81BDCC: ; CODE XREF: sub_7F81BA1F+39Cj ; sub_7F81BA1F+3A1j test ebx, ebx jnz short loc_7F81BDD9 mov eax, [ebp+arg_10] mov dword ptr [eax], offset ReturnedString loc_7F81BDD9: ; CODE XREF: sub_7F81BA1F+3AFj mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81BA1F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F81BDE4(int, int, LPCSTR lpString, int) sub_7F81BDE4 proc near ; CODE XREF: sub_7F81BA1F+302p var_10 = word ptr -10h var_C = word ptr -0Ch var_A = word ptr -0Ah var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lpString = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_C] mov edi, [ebp+lpString] loc_7F81BDF5: ; CODE XREF: sub_7F81BDE4+11Bj lea eax, [ebp+var_4] lea ecx, [ebp+var_10] mov [ebp+var_4], 8 push eax push ecx push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F818D47 mov [ebp+var_8], eax test eax, eax jnz loc_7F81BF27 cmp [ebp+var_10], 0 jz loc_7F81BF07 cmp [ebp+var_10], 0Ah jnb loc_7F81BF0D cmp [ebp+var_C], 0 jbe short loc_7F81BE6A movzx eax, [ebp+var_C] dec eax mov [ebp+var_4], eax cmp eax, esi jb short loc_7F81BE4A lea eax, [esi-1] mov [ebp+var_4], eax loc_7F81BE4A: ; CODE XREF: sub_7F81BDE4+5Ej lea eax, [ebp+var_4] lea ecx, [ebx+8] push eax push edi push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F818D47 mov [ebp+var_8], eax test eax, eax jz short loc_7F81BECB jmp loc_7F81BF27 ; --------------------------------------------------------------------------- loc_7F81BE6A: ; CODE XREF: sub_7F81BDE4+52j cmp [ebp+var_A], 0 jbe short loc_7F81BEC4 cmp esi, 2 jbe short loc_7F81BEC4 sub esi, 2 mov byte ptr [edi], 5Bh movzx eax, [ebp+var_A] inc edi dec eax mov [ebp+var_4], eax cmp eax, esi jb short loc_7F81BE8F lea eax, [esi-1] mov [ebp+var_4], eax loc_7F81BE8F: ; CODE XREF: sub_7F81BDE4+A3j lea eax, [ebp+var_4] lea ecx, [ebx+8] push eax push edi push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F818D47 mov [ebp+var_8], eax test eax, eax jnz short loc_7F81BF27 mov eax, [ebp+var_4] push edi ; lpString mov byte ptr [eax+edi], 0 call ds:lstrlenA mov [ebp+var_4], eax mov byte ptr [eax+edi], 5Dh inc [ebp+var_4] jmp short loc_7F81BECB ; --------------------------------------------------------------------------- loc_7F81BEC4: ; CODE XREF: sub_7F81BDE4+8Bj ; sub_7F81BDE4+90j mov [ebp+var_4], 0 loc_7F81BECB: ; CODE XREF: sub_7F81BDE4+7Fj ; sub_7F81BDE4+DEj movzx eax, [ebp+var_C] movzx ecx, [ebp+var_A] add eax, ecx push edi ; lpString add eax, 8 mov ecx, [ebp+var_4] add ebx, eax mov byte ptr [ecx+edi], 0 call ds:lstrlenA add edi, eax sub esi, eax mov [ebp+var_4], eax cmp esi, 2 jb short loc_7F81BF20 mov byte ptr [edi], 3Bh inc edi mov byte ptr [edi], 20h inc edi sub esi, 2 jnz loc_7F81BDF5 jmp short loc_7F81BF23 ; --------------------------------------------------------------------------- loc_7F81BF07: ; CODE XREF: sub_7F81BDE4+3Cj test ebx, ebx jnz short loc_7F81BF23 jmp short loc_7F81BF20 ; --------------------------------------------------------------------------- loc_7F81BF0D: ; CODE XREF: sub_7F81BDE4+47j mov eax, 0 cmp ebx, 1 adc eax, 0FFFFFFFFh and al, 0FEh mov byte ptr [eax+edi], 0 jmp short loc_7F81BF23 ; --------------------------------------------------------------------------- loc_7F81BF20: ; CODE XREF: sub_7F81BDE4+10Ej ; sub_7F81BDE4+127j add edi, 2 loc_7F81BF23: ; CODE XREF: sub_7F81BDE4+121j ; sub_7F81BDE4+125j ... mov byte ptr [edi-2], 0 loc_7F81BF27: ; CODE XREF: sub_7F81BDE4+31j ; sub_7F81BDE4+81j ... mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81BDE4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81BF33 proc near ; CODE XREF: sub_7F81C56F+EAp ; sub_7F82729D+4Ap var_34 = dword ptr -34h var_30 = byte ptr -30h var_2C = word ptr -2Ch var_2A = dword ptr -2Ah var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = word ptr -8 var_6 = byte ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 34h push ebx push esi push edi xor edi, edi mov word ptr [ebp+var_24], di mov [ebp+var_18], edi mov [ebp+var_2], di mov ecx, [ebp+arg_C] mov bx, [ecx] mov [ebp+var_1C], edi mov [ecx], di mov [ebp+var_20], edi test bx, bx mov [ebp+var_10], edi jg short loc_7F81BF76 cmp bx, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 210h jmp loc_7F81C333 ; --------------------------------------------------------------------------- loc_7F81BF76: ; CODE XREF: sub_7F81BF33+2Bj inc word_7F838070 push 0 lea eax, [ebp+var_6] push eax push 0 push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81BFAE cmp esi, 1001h jnz loc_7F81C277 mov esi, 1009h jmp loc_7F81C277 ; --------------------------------------------------------------------------- loc_7F81BFAE: ; CODE XREF: sub_7F81BF33+63j test [ebp+var_6], 4 jnz short loc_7F81BFBE mov esi, 1015h jmp loc_7F81C277 ; --------------------------------------------------------------------------- loc_7F81BFBE: ; CODE XREF: sub_7F81BF33+7Fj lea eax, [ebp+var_20] lea ecx, [ebp+arg_4] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81C277 test [ebp+var_6], 10h mov [ebp+var_2], bx jnz short loc_7F81C002 lea eax, [ebp+var_2] push eax push [ebp+arg_8] push [ebp+arg_0] call sub_7F82BBAB cmp [ebp+var_2], bx jz short loc_7F81BFFE mov edi, 253h loc_7F81BFFE: ; CODE XREF: sub_7F81BF33+C4j mov bx, [ebp+var_2] loc_7F81C002: ; CODE XREF: sub_7F81BF33+AFj cmp [ebp+var_2], 0 jz loc_7F81C277 movsx eax, [ebp+var_2] shl eax, 3 push 20h push eax call sub_7F82F03B mov [ebp+var_18], eax test eax, eax jnz short loc_7F81C02D mov esi, 400h jmp loc_7F81C277 ; --------------------------------------------------------------------------- loc_7F81C02D: ; CODE XREF: sub_7F81BF33+EEj movsx eax, [ebp+var_2] push 0 add eax, eax push eax call sub_7F82F03B mov [ebp+var_1C], eax test eax, eax jnz short loc_7F81C04C mov esi, 400h jmp loc_7F81C277 ; --------------------------------------------------------------------------- loc_7F81C04C: ; CODE XREF: sub_7F81BF33+10Dj push [ebp+var_1C] lea ecx, [ebp+var_2] push ecx push [ebp+arg_8] push [ebp+var_20] call sub_7F81A344 cmp [ebp+var_2], bx jz short loc_7F81C06D test edi, edi jnz short loc_7F81C06D mov edi, 1004h loc_7F81C06D: ; CODE XREF: sub_7F81BF33+12Fj ; sub_7F81BF33+133j xor ebx, ebx cmp [ebp+var_2], bx jz loc_7F81C277 push dword ptr [ebp+var_2] push [ebp+var_1C] call sub_7F81A3DB push dword ptr [ebp+var_2] push [ebp+var_18] push [ebp+var_1C] push [ebp+var_20] call sub_7F81A42D cmp eax, ebx mov esi, eax jnz loc_7F81C277 mov [ebp+var_4], bx cmp [ebp+var_2], bx jle loc_7F81C277 loc_7F81C0AD: ; CODE XREF: sub_7F81BF33+33Ej mov eax, [ebp+arg_8] movsx ecx, [ebp+var_4] mov edx, [eax+ecx*4] lea ecx, [ebp+var_8] push ecx lea eax, [ebp+var_C] push eax mov [ebp+var_14], edx lea edx, [ebp+var_34] push edx push [ebp+var_14] push [ebp+arg_0] call sub_7F82C63C mov esi, eax test esi, esi jz short loc_7F81C0F1 test edi, edi jnz short loc_7F81C0EA mov edi, 1008h cmp esi, 1001h jz short loc_7F81C0EA mov edi, esi loc_7F81C0EA: ; CODE XREF: sub_7F81BF33+1A6j ; sub_7F81BF33+1B3j xor esi, esi jmp loc_7F81C265 ; --------------------------------------------------------------------------- loc_7F81C0F1: ; CODE XREF: sub_7F81BF33+1A2j cmp [ebp+var_8], bx jnz short loc_7F81C0FB dec word ptr [ebp+var_24] loc_7F81C0FB: ; CODE XREF: sub_7F81BF33+1C2j test [ebp+var_6], 10h jz loc_7F81C186 mov eax, [ebp+var_C] lea ecx, [ebp+var_10] and al, 88h push ecx or al, 88h push 1 mov [ebp+var_C], eax lea eax, [ebp+var_C] push eax push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz short loc_7F81C17F push [ebp+var_10] call sub_7F8198FC mov word ptr [ebp+var_14+2], ax cmp ax, 1 jle short loc_7F81C14E push ebx push [ebp+arg_4] push [ebp+var_10] call sub_7F8194ED push eax push [ebp+var_10] call sub_7F818AE7 mov esi, eax loc_7F81C14E: ; CODE XREF: sub_7F81BF33+202j cmp word ptr [ebp+var_14+2], 1 jle short loc_7F81C15E mov eax, 1 test esi, esi jz short loc_7F81C160 loc_7F81C15E: ; CODE XREF: sub_7F81BF33+220j xor eax, eax loc_7F81C160: ; CODE XREF: sub_7F81BF33+229j push eax lea ecx, [ebp+var_10] push ecx call sub_7F81813C cmp word ptr [ebp+var_14+2], 1 jg short loc_7F81C17F push ebx push 1 push [ebp+var_C] push [ebp+arg_0] call sub_7F82B9DE loc_7F81C17F: ; CODE XREF: sub_7F81BF33+1F0j ; sub_7F81BF33+23Cj xor esi, esi jmp loc_7F81C265 ; --------------------------------------------------------------------------- loc_7F81C186: ; CODE XREF: sub_7F81BF33+1CCj mov eax, [ebp+var_34] cmp [ebp+arg_4], eax jnz loc_7F81C265 dec word_7F838070 push ebx push ebx push [ebp+var_14] push [ebp+arg_0] call sub_7F82B9DE inc word_7F838070 mov esi, eax test esi, esi jz short loc_7F81C1C3 test edi, edi jnz short loc_7F81C1C1 cmp esi, 253h jnz short loc_7F81C1C1 mov edi, esi loc_7F81C1C1: ; CODE XREF: sub_7F81BF33+282j ; sub_7F81BF33+28Aj xor esi, esi loc_7F81C1C3: ; CODE XREF: sub_7F81BF33+27Ej cmp [ebp+var_C], ebx jz loc_7F81C265 mov eax, [ebp+var_C] lea ecx, [ebp+var_10] and al, 89h push ecx or al, 89h push ebx mov [ebp+var_C], eax lea eax, [ebp+var_C] push eax push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz short loc_7F81C20D push [ebp+var_10] push [ebp+arg_0] call sub_7F81C33C push ebx lea ecx, [ebp+var_10] push ecx call sub_7F81813C push ebx push ebx push [ebp+var_C] push [ebp+arg_0] call sub_7F82B9DE loc_7F81C20D: ; CODE XREF: sub_7F81BF33+2B6j mov eax, [ebp+var_C] lea ecx, [ebp+var_10] and al, 88h push ecx or al, 88h push ebx mov [ebp+var_C], eax lea eax, [ebp+var_C] push eax push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz short loc_7F81C265 movsx eax, [ebp+var_8] dec word_7F838070 push eax push [ebp+var_10] push [ebp+var_14] push [ebp+arg_0] call sub_7F81C461 inc word_7F838070 push ebx lea ecx, [ebp+var_10] push ecx call sub_7F81813C push ebx push 1 push [ebp+var_C] push [ebp+arg_0] call sub_7F82B9DE loc_7F81C265: ; CODE XREF: sub_7F81BF33+1B9j ; sub_7F81BF33+24Ej ... inc [ebp+var_4] mov ax, [ebp+var_4] cmp [ebp+var_2], ax jg loc_7F81C0AD loc_7F81C277: ; CODE XREF: sub_7F81BF33+6Bj ; sub_7F81BF33+76j ... cmp [ebp+var_20], 0 jz short loc_7F81C299 test esi, esi jnz short loc_7F81C28D cmp [ebp+var_2], 0 mov eax, 1 jg short loc_7F81C28F loc_7F81C28D: ; CODE XREF: sub_7F81BF33+34Cj xor eax, eax loc_7F81C28F: ; CODE XREF: sub_7F81BF33+358j push eax lea ecx, [ebp+var_20] push ecx call sub_7F81813C loc_7F81C299: ; CODE XREF: sub_7F81BF33+348j cmp [ebp+var_1C], 0 jz short loc_7F81C2A7 push [ebp+var_1C] call sub_7F82F149 loc_7F81C2A7: ; CODE XREF: sub_7F81BF33+36Aj test esi, esi jnz short loc_7F81C316 cmp word ptr [ebp+var_24], 0 jz short loc_7F81C2C0 push [ebp+var_24] push [ebp+arg_4] push [ebp+arg_0] call sub_7F82C50A loc_7F81C2C0: ; CODE XREF: sub_7F81BF33+37Dj mov ax, [ebp+var_2] mov ecx, [ebp+arg_C] push [ebp+arg_0] mov [ecx], ax call sub_7F82A1E7 cmp [ebp+var_2], 0 jle short loc_7F81C316 cmp word_7F838070, 1 jnz short loc_7F81C305 mov cx, [ebp+var_2] mov eax, [ebp+var_18] lea edx, [ebp+var_30] mov [ebp+var_2A], eax mov [ebp+var_2C], cx push edx push 4000h push [ebp+arg_4] push [ebp+arg_0] call sub_7F82A016 loc_7F81C305: ; CODE XREF: sub_7F81BF33+3AEj push dword ptr [ebp+var_2] push [ebp+var_18] push [ebp+arg_4] push [ebp+arg_0] call sub_7F828E7A loc_7F81C316: ; CODE XREF: sub_7F81BF33+376j ; sub_7F81BF33+3A4j cmp [ebp+var_18], 0 jz short loc_7F81C324 push [ebp+var_18] call sub_7F82F149 loc_7F81C324: ; CODE XREF: sub_7F81BF33+3E7j dec word_7F838070 mov eax, esi test esi, esi jnz short loc_7F81C333 mov eax, edi loc_7F81C333: ; CODE XREF: sub_7F81BF33+3Ej ; sub_7F81BF33+3FCj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81BF33 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81C33C proc near ; CODE XREF: sub_7F81BF33+2BEp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push ebx push esi xor bx, bx push edi push [ebp+arg_4] call sub_7F8198FC mov di, ax test di, di jz loc_7F81C458 movsx eax, di shl eax, 2 push 0 push eax call sub_7F82F03B mov [ebp+var_4], eax mov esi, eax test esi, esi jz loc_7F81C458 mov [ebp+var_8], 4 mov ax, di dec di test ax, ax jz short loc_7F81C3B7 loc_7F81C388: ; CODE XREF: sub_7F81C33C+79j lea eax, [ebp+var_8] push eax push [ebp+var_4] push 0 push edi push [ebp+arg_4] call sub_7F818D47 test eax, eax jnz short loc_7F81C3A6 add [ebp+var_4], 4 inc bx jmp short loc_7F81C3AD ; --------------------------------------------------------------------------- loc_7F81C3A6: ; CODE XREF: sub_7F81C33C+60j mov [ebp+var_8], 4 loc_7F81C3AD: ; CODE XREF: sub_7F81C33C+68j mov ax, di dec di test ax, ax jnz short loc_7F81C388 loc_7F81C3B7: ; CODE XREF: sub_7F81C33C+4Aj cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F81C3F7 mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov edi, [edx] mov dword_7F838078, edi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F81C3F7: ; CODE XREF: sub_7F81C33C+87j test eax, eax jnz short loc_7F81C44E test bx, bx lea edi, [ebx-1] mov [ebp+var_4], esi jle short loc_7F81C420 loc_7F81C406: ; CODE XREF: sub_7F81C33C+E2j mov eax, [ebp+var_4] push 0 add [ebp+var_4], 4 push dword ptr [eax] call sub_7F81479E mov ax, di dec di test ax, ax jg short loc_7F81C406 loc_7F81C420: ; CODE XREF: sub_7F81C33C+C8j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81C436 call sub_7F82A34F jmp short loc_7F81C444 ; --------------------------------------------------------------------------- loc_7F81C436: ; CODE XREF: sub_7F81C33C+F1j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81C444: ; CODE XREF: sub_7F81C33C+F8j mov dword_7F838078, 0 loc_7F81C44E: ; CODE XREF: sub_7F81C33C+BDj test esi, esi jz short loc_7F81C458 push esi call sub_7F82F149 loc_7F81C458: ; CODE XREF: sub_7F81C33C+1Aj ; sub_7F81C33C+35j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81C33C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81C461 proc near ; CODE XREF: sub_7F81BF33+30Ep var_18 = byte ptr -18h var_14 = word ptr -14h var_12 = dword ptr -12h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h inc word_7F838070 push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi push [ebp+arg_8] call sub_7F8198FC lea esi, [eax-1] test si, si jl loc_7F81C55F xor edi, edi loc_7F81C487: ; CODE XREF: sub_7F81C461+F8j push esi push [ebp+arg_8] call sub_7F819508 lea ecx, [ebp+var_8] mov [ebp+var_8], eax lea eax, [ebp+var_4] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz loc_7F81C557 push edi push [ebp+arg_4] push [ebp+var_4] call sub_7F8194ED mov bx, ax test bx, bx jl short loc_7F81C4D5 push ebx push [ebp+var_4] call sub_7F818AE7 test eax, eax jz short loc_7F81C4D2 mov bx, 0FFFFh loc_7F81C4D2: ; CODE XREF: sub_7F81C461+6Bj test bx, bx loc_7F81C4D5: ; CODE XREF: sub_7F81C461+5Ej mov eax, 1 jge short loc_7F81C4DE xor eax, eax loc_7F81C4DE: ; CODE XREF: sub_7F81C461+79j push eax lea eax, [ebp+var_4] push eax call sub_7F81813C test eax, eax jnz short loc_7F81C548 test bx, bx jl short loc_7F81C548 cmp [ebp+arg_C], edi jnz short loc_7F81C503 push 0FFFFFFFFh push [ebp+var_8] push [ebp+arg_0] call sub_7F82C50A loc_7F81C503: ; CODE XREF: sub_7F81C461+93j cmp word_7F838070, 1 jnz short loc_7F81C557 mov word_7F833C12, bx mov eax, [ebp+arg_4] lea ecx, [ebp+var_18] mov dword_7F833C14, eax mov [ebp+var_12], offset word_7F833C10 mov word_7F833C10, 3 mov [ebp+var_14], 1 push ecx push 4000h push [ebp+var_8] push [ebp+arg_0] call sub_7F82A016 jmp short loc_7F81C557 ; --------------------------------------------------------------------------- loc_7F81C548: ; CODE XREF: sub_7F81C461+89j ; sub_7F81C461+8Ej cmp [ebp+var_4], edi jz short loc_7F81C557 push edi lea eax, [ebp+var_4] push eax call sub_7F81813C loc_7F81C557: ; CODE XREF: sub_7F81C461+46j ; sub_7F81C461+AAj ... dec si jns loc_7F81C487 loc_7F81C55F: ; CODE XREF: sub_7F81C461+1Ej dec word_7F838070 pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81C461 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81C56F proc near ; CODE XREF: sub_7F82729D+C8p var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = word ptr -48h var_42 = dword ptr -42h var_3C = dword ptr -3Ch var_38 = byte ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = word ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = word ptr -8 var_6 = word ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 50h push ebx push esi xor bx, bx push edi xor edi, edi mov [ebp+var_6], di mov [ebp+var_C], edi mov [ebp+var_8], di mov [ebp+var_28], edi mov word ptr [ebp+var_4], di mov ecx, [ebp+arg_10] mov ax, [ecx] mov [ebp+var_10], edi mov word ptr [ebp+var_4+2], ax mov [ebp+var_18], edi mov [ecx], di mov [ebp+var_3C], edi cmp ax, di jg short loc_7F81C5C0 cmp ax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 210h jmp loc_7F81CC97 ; --------------------------------------------------------------------------- loc_7F81C5C0: ; CODE XREF: sub_7F81C56F+39j cmp [ebp+arg_14], 0 jz short loc_7F81C5D5 mov eax, [ebp+arg_4] cmp [ebp+arg_8], eax jnz short loc_7F81C5D5 xor eax, eax jmp loc_7F81CC97 ; --------------------------------------------------------------------------- loc_7F81C5D5: ; CODE XREF: sub_7F81C56F+55j ; sub_7F81C56F+5Dj inc word_7F838070 push 0 lea eax, [ebp+var_2C] lea ecx, [ebp+var_50] push eax push 0 push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81C60F cmp esi, 1001h jnz loc_7F81CAEF mov esi, 1009h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C60F: ; CODE XREF: sub_7F81C56F+88j test byte ptr [ebp+var_2C], 4 jnz short loc_7F81C61F mov esi, 1015h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C61F: ; CODE XREF: sub_7F81C56F+A4j xor eax, eax mov ax, [ebp+var_2C] and eax, 10h cmp [ebp+arg_14], 0 mov [ebp+var_24], eax jz short loc_7F81C66D test eax, eax jz short loc_7F81C66D cmp [ebp+arg_8], 74735782h jnz short loc_7F81C663 mov ax, word ptr [ebp+var_4+2] mov ecx, [ebp+arg_10] dec word_7F838070 push ecx mov [ecx], ax push [ebp+arg_C] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81BF33 jmp loc_7F81CC97 ; --------------------------------------------------------------------------- loc_7F81C663: ; CODE XREF: sub_7F81C56F+CDj mov esi, 1015h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C66D: ; CODE XREF: sub_7F81C56F+C0j ; sub_7F81C56F+C4j push 0 lea eax, [ebp+var_2C] push eax push 0 push 0 push [ebp+arg_8] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81C69E cmp esi, 1001h jnz loc_7F81CAEF mov esi, 1009h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C69E: ; CODE XREF: sub_7F81C56F+117j test byte ptr [ebp+var_2C], 4 jnz short loc_7F81C6AE mov esi, 1015h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C6AE: ; CODE XREF: sub_7F81C56F+133j xor eax, eax mov ax, [ebp+var_2C] and eax, 10h cmp [ebp+arg_14], 0 mov [ebp+var_14], eax jz short loc_7F81C6D4 test eax, eax jz short loc_7F81C6CE mov esi, 1015h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C6CE: ; CODE XREF: sub_7F81C56F+153j cmp [ebp+arg_14], 0 jnz short loc_7F81C6DF loc_7F81C6D4: ; CODE XREF: sub_7F81C56F+14Fj cmp [ebp+var_14], 0 mov eax, 0 jz short loc_7F81C6E4 loc_7F81C6DF: ; CODE XREF: sub_7F81C56F+163j mov eax, 1 loc_7F81C6E4: ; CODE XREF: sub_7F81C56F+16Ej lea ecx, [ebp+var_18] lea edx, [ebp+arg_4] push ecx push eax push edx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81CAF3 lea eax, [ebp+var_3C] lea ecx, [ebp+arg_8] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81CAF3 movsx eax, word ptr [ebp+var_4+2] shl eax, 3 push 20h push eax call sub_7F82F03B mov [ebp+var_28], eax test eax, eax jnz short loc_7F81C73B mov esi, 400h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C73B: ; CODE XREF: sub_7F81C56F+1C0j movsx eax, word ptr [ebp+var_4+2] shl eax, 3 push 20h push eax call sub_7F82F03B mov [ebp+var_C], eax test eax, eax jnz short loc_7F81C75B mov esi, 400h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C75B: ; CODE XREF: sub_7F81C56F+1E0j movsx eax, word ptr [ebp+var_4+2] push 0 add eax, eax push eax call sub_7F82F03B mov [ebp+var_10], eax test eax, eax jnz short loc_7F81C77A mov esi, 400h jmp loc_7F81CAEF ; --------------------------------------------------------------------------- loc_7F81C77A: ; CODE XREF: sub_7F81C56F+1FFj push [ebp+var_10] mov bx, word ptr [ebp+var_4+2] lea ecx, [ebp+var_4+2] push ecx push [ebp+arg_C] push [ebp+var_18] call sub_7F81A344 cmp word ptr [ebp+var_4+2], bx jz short loc_7F81C7A8 mov bx, word ptr [ebp+var_4+2] mov edi, 1004h test bx, bx jz loc_7F81CAEF loc_7F81C7A8: ; CODE XREF: sub_7F81C56F+225j lea eax, [ebp+var_8] push eax push [ebp+var_4+2] push [ebp+arg_C] push [ebp+arg_0] call sub_7F82C702 cmp [ebp+arg_14], 0 jnz short loc_7F81C7F0 cmp [ebp+var_14], 0 jnz short loc_7F81C7FA mov ax, word ptr [ebp+var_4+2] lea ecx, [ebp+var_4] mov [ebp+var_6], ax push ecx lea eax, [ebp+var_6] push eax push [ebp+arg_8] push [ebp+arg_C] push 0 push [ebp+arg_0] call sub_7F81CCA0 mov esi, eax test esi, esi jnz loc_7F81CAF3 loc_7F81C7F0: ; CODE XREF: sub_7F81C56F+24Fj cmp [ebp+var_14], 0 jz loc_7F81C8F4 loc_7F81C7FA: ; CODE XREF: sub_7F81C56F+255j cmp [ebp+var_24], 0 jnz loc_7F81C8F4 push offset byte_7F8369F8 push [ebp+var_50] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81B6A6 mov esi, eax test esi, esi jnz loc_7F81CAF3 and [ebp+var_48], 0FFFCh lea eax, [ebp+var_48] push eax push [ebp+var_18] call sub_7F8199E0 mov ax, word ptr [ebp+var_4+2] dec ax mov [ebp+var_2C], ax js loc_7F81C8F4 loc_7F81C843: ; CODE XREF: sub_7F81C56F+37Fj mov [ebp+var_24], 19Dh mov eax, [ebp+var_10] movsx ecx, [ebp+var_2C] lea edx, [eax+ecx*2] lea ecx, [ebp+var_24] mov ax, [edx] push ecx push offset ReturnedString mov [ebp+var_1C], edx push 0 push eax push [ebp+var_18] call sub_7F818D47 cmp eax, 1014h mov esi, eax jz short loc_7F81C87F test esi, esi jnz loc_7F81CAF3 loc_7F81C87F: ; CODE XREF: sub_7F81C56F+306j mov eax, [ebp+arg_4] push offset sz ; lpString mov dword_7F8367EF, eax call ds:lstrlenA lea esi, unk_7F8367F4[eax] push esi ; lpString call ds:lstrlenA lea esi, [eax+esi+1] push offset byte_7F8369F8 ; lpString call ds:lstrlenA push offset byte_7F8369F8 ; lpString2 mov [ebp+var_20], eax push esi ; lpString1 call ds:lstrcpyA mov ecx, [ebp+var_20] lea eax, [ecx+eax+1] mov byte ptr [eax], 0 sub eax, offset unk_7F8367D7 push eax mov [ebp+var_24], eax push offset ReturnedString push [ebp+var_1C] push [ebp+var_18] call sub_7F818E95 mov esi, eax test esi, esi jnz loc_7F81CAF3 dec [ebp+var_2C] jns loc_7F81C843 loc_7F81C8F4: ; CODE XREF: sub_7F81C56F+285j ; sub_7F81C56F+28Fj ... cmp [ebp+arg_14], 0 mov bx, word ptr [ebp+var_4+2] jnz short loc_7F81C909 cmp [ebp+var_14], 0 jnz short loc_7F81C909 mov eax, [ebp+arg_C] jmp short loc_7F81C90B ; --------------------------------------------------------------------------- loc_7F81C909: ; CODE XREF: sub_7F81C56F+38Dj ; sub_7F81C56F+393j xor eax, eax loc_7F81C90B: ; CODE XREF: sub_7F81C56F+398j push ebx push [ebp+var_C] push eax push [ebp+var_10] push [ebp+var_3C] push [ebp+var_18] call sub_7F81A57F mov esi, eax test esi, esi jnz loc_7F81CAF3 cmp [ebp+arg_14], 0 jnz short loc_7F81C934 cmp [ebp+var_14], 0 jz short loc_7F81C946 loc_7F81C934: ; CODE XREF: sub_7F81C56F+3BDj lea eax, [ebp+var_4] push eax push 1 push ebx push [ebp+var_C] push [ebp+arg_0] call sub_7F82C7BB loc_7F81C946: ; CODE XREF: sub_7F81C56F+3C3j cmp [ebp+arg_14], 0 jz short loc_7F81C97C push [ebp+var_4+2] push [ebp+var_10] call sub_7F81A3DB push [ebp+var_4+2] push [ebp+var_28] push [ebp+var_10] push [ebp+var_18] call sub_7F81A42D mov esi, eax test esi, esi jnz loc_7F81CAF3 cmp [ebp+arg_14], 0 jnz loc_7F81CA97 loc_7F81C97C: ; CODE XREF: sub_7F81C56F+3DBj cmp [ebp+var_14], 0 jz loc_7F81CA91 mov [ebp+var_1C], 0 lea eax, [ebx-1] mov [ebp+var_2C], ax test ax, ax jl loc_7F81CA7C loc_7F81C99D: ; CODE XREF: sub_7F81C56F+507j mov ecx, [ebp+arg_C] push 0 movsx eax, [ebp+var_2C] push 0 lea edx, [ecx+eax*4] lea eax, [ebp+var_20] mov [ebp+var_42], edx push eax push 0 push dword ptr [edx] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81C9D7 cmp esi, 1001h jnz loc_7F81CAEF xor esi, esi jmp loc_7F81CA72 ; --------------------------------------------------------------------------- loc_7F81C9D7: ; CODE XREF: sub_7F81C56F+453j cmp [ebp+var_20], 1 sbb eax, eax lea ecx, [ebp+var_1C] neg eax push ecx mov [ebp+var_4C], eax mov eax, [ebp+var_20] push 1 and al, 88h or al, 88h mov [ebp+var_20], eax lea eax, [ebp+var_20] push eax push [ebp+arg_0] call sub_7F817E9D cmp eax, 1001h mov esi, eax jnz short loc_7F81CA1B lea eax, [ebp+var_1C] lea ecx, [ebp+var_20] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax loc_7F81CA1B: ; CODE XREF: sub_7F81C56F+496j test esi, esi jnz loc_7F81CAF3 push 0 lea ecx, [ebp+var_24+2] push [ebp+arg_8] push ecx push [ebp+var_1C] call sub_7F818B75 mov esi, eax test esi, esi jz short loc_7F81CA42 cmp esi, 1003h jnz short loc_7F81CA7C loc_7F81CA42: ; CODE XREF: sub_7F81C56F+4C9j push 1 lea eax, [ebp+var_1C] push eax call sub_7F81813C mov esi, eax test esi, esi jnz short loc_7F81CA7C cmp [ebp+var_4C], 0 jz short loc_7F81CA72 push 0 lea eax, [ebp+var_20] push 1 push eax push [ebp+var_42] push [ebp+arg_0] call sub_7F82D2BE mov esi, eax test esi, esi jnz short loc_7F81CA7C loc_7F81CA72: ; CODE XREF: sub_7F81C56F+463j ; sub_7F81C56F+4E8j dec [ebp+var_2C] jns loc_7F81C99D loc_7F81CA7C: ; CODE XREF: sub_7F81C56F+428j ; sub_7F81C56F+4D1j ... cmp [ebp+var_1C], 0 jz short loc_7F81CA8D push 0 lea eax, [ebp+var_1C] push eax call sub_7F81813C loc_7F81CA8D: ; CODE XREF: sub_7F81C56F+511j test esi, esi jnz short loc_7F81CAF3 loc_7F81CA91: ; CODE XREF: sub_7F81C56F+411j cmp [ebp+arg_14], 0 jz short loc_7F81CAB9 loc_7F81CA97: ; CODE XREF: sub_7F81C56F+407j push ebx mov ecx, [ebp+var_C] push [ebp+var_28] mov dx, [ecx+2] push edx push [ebp+var_4+2] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F829147 jmp short loc_7F81CAD0 ; --------------------------------------------------------------------------- loc_7F81CAB9: ; CODE XREF: sub_7F81C56F+526j mov eax, [ebp+var_C] mov ax, [eax+2] push eax push ebx push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_0] call sub_7F8290A9 loc_7F81CAD0: ; CODE XREF: sub_7F81C56F+548j mov esi, eax test esi, esi jnz short loc_7F81CAF3 cmp [ebp+var_14], 0 jnz short loc_7F81CAEF push 0 push [ebp+arg_8] push [ebp+var_4+2] push [ebp+arg_C] push [ebp+arg_0] call sub_7F82D1DF loc_7F81CAEF: ; CODE XREF: sub_7F81C56F+90j ; sub_7F81C56F+9Bj ... test esi, esi jz short loc_7F81CB24 loc_7F81CAF3: ; CODE XREF: sub_7F81C56F+18Aj ; sub_7F81C56F+1A6j ... cmp [ebp+var_6], 0 jle short loc_7F81CB24 mov [ebp+var_2C], 0 loc_7F81CB00: ; CODE XREF: sub_7F81C56F+5B3j push 0 mov ecx, [ebp+arg_C] movsx eax, [ebp+var_2C] push 1 push dword ptr [ecx+eax*4] push [ebp+arg_0] call sub_7F82B9DE inc [ebp+var_2C] mov cx, [ebp+var_2C] cmp cx, [ebp+var_6] jl short loc_7F81CB00 loc_7F81CB24: ; CODE XREF: sub_7F81C56F+582j ; sub_7F81C56F+589j cmp [ebp+var_18], 0 jz short loc_7F81CB45 cmp [ebp+arg_14], 0 jz short loc_7F81CB39 mov eax, 1 test esi, esi jz short loc_7F81CB3B loc_7F81CB39: ; CODE XREF: sub_7F81C56F+5BFj xor eax, eax loc_7F81CB3B: ; CODE XREF: sub_7F81C56F+5C8j push eax lea ecx, [ebp+var_18] push ecx call sub_7F81813C loc_7F81CB45: ; CODE XREF: sub_7F81C56F+5B9j cmp [ebp+var_3C], 0 jz short loc_7F81CB5C lea ecx, [ebp+var_3C] cmp esi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F81CB5C: ; CODE XREF: sub_7F81C56F+5DAj test esi, esi jnz loc_7F81CC2C cmp [ebp+arg_14], 0 jz short loc_7F81CB84 cmp [ebp+var_8], 0 jz short loc_7F81CB84 mov ax, [ebp+var_8] neg ax push eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F82C50A loc_7F81CB84: ; CODE XREF: sub_7F81C56F+5F9j ; sub_7F81C56F+600j cmp word ptr [ebp+var_4], 0 jz short loc_7F81CB99 push [ebp+var_4] push [ebp+arg_8] push [ebp+arg_0] call sub_7F82C50A loc_7F81CB99: ; CODE XREF: sub_7F81C56F+61Aj push [ebp+arg_0] call sub_7F82A1E7 test esi, esi jnz loc_7F81CC3C cmp word_7F838070, 1 jnz short loc_7F81CC2C test bx, bx jle short loc_7F81CC2C mov eax, [ebp+var_C] lea ecx, [ebp+var_38] push ecx mov [ebp+var_34+2], eax mov word ptr [ebp+var_34], bx push 4000h push [ebp+arg_8] push [ebp+arg_0] call sub_7F82A016 cmp [ebp+arg_14], 0 jz short loc_7F81CC2C mov eax, [ebp+var_28] lea ecx, [ebp+var_38] push ecx mov [ebp+var_34+2], eax mov word ptr [ebp+var_34], bx push 4000h push [ebp+arg_4] push [ebp+arg_0] call sub_7F82A016 mov bx, word ptr [ebp+var_4+2] mov ecx, [ebp+arg_4] dec bx mov edx, [ebp+arg_8] mov [ebp+var_34], ecx mov [ebp+var_30], edx js short loc_7F81CC2C loc_7F81CC0E: ; CODE XREF: sub_7F81C56F+6BBj lea eax, [ebp+var_38] mov ecx, [ebp+arg_C] movsx edx, bx push eax push 400h push dword ptr [ecx+edx*4] push [ebp+arg_0] call sub_7F82A016 dec bx jns short loc_7F81CC0E loc_7F81CC2C: ; CODE XREF: sub_7F81C56F+5EFj ; sub_7F81C56F+642j ... test esi, esi jnz short loc_7F81CC3C mov ax, word ptr [ebp+var_4+2] mov ecx, [ebp+arg_10] mov [ecx], ax mov esi, edi loc_7F81CC3C: ; CODE XREF: sub_7F81C56F+634j ; sub_7F81C56F+6BFj mov ecx, [ebp+arg_10] dec word_7F838070 xor eax, eax cmp [ecx], ax jz short loc_7F81CC6B cmp [ebp+var_14], eax jnz short loc_7F81CC6B cmp [ebp+arg_14], eax jz short loc_7F81CC6B push [ebp+var_C] push [ebp+arg_8] push [ebp+var_4+2] push [ebp+arg_C] push [ebp+arg_0] call sub_7F81CE7B loc_7F81CC6B: ; CODE XREF: sub_7F81C56F+6DCj ; sub_7F81C56F+6E1j ... cmp [ebp+var_C], 0 jz short loc_7F81CC79 push [ebp+var_C] call sub_7F82F149 loc_7F81CC79: ; CODE XREF: sub_7F81C56F+700j cmp [ebp+var_28], 0 jz short loc_7F81CC87 push [ebp+var_28] call sub_7F82F149 loc_7F81CC87: ; CODE XREF: sub_7F81C56F+70Ej cmp [ebp+var_10], 0 jz short loc_7F81CC95 push [ebp+var_10] call sub_7F82F149 loc_7F81CC95: ; CODE XREF: sub_7F81C56F+71Cj mov eax, esi loc_7F81CC97: ; CODE XREF: sub_7F81C56F+4Cj ; sub_7F81C56F+61j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81C56F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81CCA0 proc near ; CODE XREF: sub_7F81C56F+272p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 14h push ebx push esi xor si, si push edi xor ebx, ebx cmp [ebp+arg_14], ebx jz short loc_7F81CCB9 mov eax, [ebp+arg_14] mov [eax], bx loc_7F81CCB9: ; CODE XREF: sub_7F81CCA0+11j mov eax, [ebp+arg_10] cmp word ptr [eax], 0 jle loc_7F81CDD8 xor edi, edi loc_7F81CCC8: ; CODE XREF: sub_7F81CCA0+132j cmp [ebp+arg_4], edi jz short loc_7F81CCDB push esi push [ebp+arg_4] call sub_7F819508 mov [ebp+var_10], eax jmp short loc_7F81CCE3 ; --------------------------------------------------------------------------- loc_7F81CCDB: ; CODE XREF: sub_7F81CCA0+2Bj mov eax, [ebp+arg_8] mov ecx, [eax] mov [ebp+var_10], ecx loc_7F81CCE3: ; CODE XREF: sub_7F81CCA0+39j lea eax, [ebp+var_2] lea edx, [ebp+var_C] push eax mov [ebp+var_8], edi push [ebp+arg_C] push edx lea eax, [ebp+var_8] push eax push [ebp+var_10] push [ebp+arg_0] call sub_7F82BD62 mov ebx, eax test ebx, ebx jz short loc_7F81CD3B cmp ebx, 1008h jnz loc_7F81CDD8 xor ebx, ebx mov eax, [ebp+arg_10] dec word ptr [eax] cmp [ebp+arg_4], edi jz loc_7F81CDCC push esi push [ebp+arg_4] call sub_7F818AE7 mov ebx, eax test ebx, ebx jz loc_7F81CDCC jmp loc_7F81CDD8 ; --------------------------------------------------------------------------- loc_7F81CD3B: ; CODE XREF: sub_7F81CCA0+64j cmp [ebp+var_2], di jnz short loc_7F81CD4C cmp [ebp+arg_14], edi jz short loc_7F81CD4C mov eax, [ebp+arg_14] inc word ptr [eax] loc_7F81CD4C: ; CODE XREF: sub_7F81CCA0+9Fj ; sub_7F81CCA0+A4j inc si cmp [ebp+var_C], edi jz short loc_7F81CDA7 lea eax, [ebp+var_14] push eax push [ebp+var_8] push [ebp+var_10] push [ebp+arg_0] call sub_7F811467 mov ebx, eax test ebx, ebx jz short loc_7F81CD91 cmp ebx, 1001h jnz short loc_7F81CD8B push edi lea eax, [ebp+var_C] push 1 lea ecx, [ebp+var_8] push eax mov [ebp+var_C], edi push ecx push [ebp+arg_0] call sub_7F82D2BE mov ebx, eax loc_7F81CD8B: ; CODE XREF: sub_7F81CCA0+D1j test ebx, ebx jz short loc_7F81CDA7 jmp short loc_7F81CDD8 ; --------------------------------------------------------------------------- loc_7F81CD91: ; CODE XREF: sub_7F81CCA0+C9j cmp [ebp+var_14], edi jz short loc_7F81CDA7 push [ebp+var_14] push [ebp+arg_0] call sub_7F81CDEE mov ebx, eax test ebx, ebx jnz short loc_7F81CDD8 loc_7F81CDA7: ; CODE XREF: sub_7F81CCA0+B1j ; sub_7F81CCA0+EDj ... cmp [ebp+arg_4], edi jz short loc_7F81CDC0 mov eax, [ebp+var_8] push eax mov ax, si dec ax push eax push [ebp+arg_4] call sub_7F81A318 jmp short loc_7F81CDCC ; --------------------------------------------------------------------------- loc_7F81CDC0: ; CODE XREF: sub_7F81CCA0+10Aj mov ecx, [ebp+var_8] mov eax, [ebp+arg_8] add [ebp+arg_8], 4 mov [eax], ecx loc_7F81CDCC: ; CODE XREF: sub_7F81CCA0+7Dj ; sub_7F81CCA0+90j ... mov eax, [ebp+arg_10] cmp [eax], si jg loc_7F81CCC8 loc_7F81CDD8: ; CODE XREF: sub_7F81CCA0+20j ; sub_7F81CCA0+6Cj ... mov eax, [ebp+arg_10] cmp [eax], si jle short loc_7F81CDE3 mov [eax], si loc_7F81CDE3: ; CODE XREF: sub_7F81CCA0+13Ej mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81CCA0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81CDEE proc near ; CODE XREF: sub_7F81CCA0+FCp var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_4] push esi lea ecx, [ebp+arg_4] push edi xor esi, esi push eax mov [ebp+var_4], esi push esi push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, esi mov edi, eax jnz short loc_7F81CE5F push [ebp+var_4] call sub_7F8198FC cmp ax, si mov bx, ax jz short loc_7F81CE5F mov [ebp+var_C], 4 dec bx test ax, ax jle short loc_7F81CE5F loc_7F81CE31: ; CODE XREF: sub_7F81CDEE+6Fj lea eax, [ebp+var_C] lea ecx, [ebp+var_8] push eax push ecx push esi push ebx push [ebp+var_4] call sub_7F818D47 mov edi, eax test edi, edi jnz short loc_7F81CE5F push esi push [ebp+var_8] push [ebp+arg_0] call sub_7F82BFE4 mov ax, bx dec bx test ax, ax jg short loc_7F81CE31 loc_7F81CE5F: ; CODE XREF: sub_7F81CDEE+23j ; sub_7F81CDEE+33j ... cmp [ebp+var_4], 0 jz short loc_7F81CE70 push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C loc_7F81CE70: ; CODE XREF: sub_7F81CDEE+75j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81CDEE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81CE7B proc near ; CODE XREF: sub_7F81C56F+6F7p var_38 = byte ptr -38h var_34 = word ptr -34h var_32 = dword ptr -32h var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_E = word ptr -0Eh var_C = dword ptr -0Ch var_8 = word ptr -8 var_6 = word ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 38h mov ax, [ebp+arg_8] push ebx mov [ebp+var_8], ax push esi push edi xor esi, esi push esi mov [ebp+var_14], esi push 20h mov [ebp+var_C], esi call sub_7F82F18D mov [ebp+var_18], eax cmp eax, esi jnz short loc_7F81CEAD mov eax, 400h jmp loc_7F81D223 ; --------------------------------------------------------------------------- loc_7F81CEAD: ; CODE XREF: sub_7F81CE7B+26j mov eax, [ebp+var_18] push 0 push 0 lea ecx, [ebp+var_20] mov edi, [eax] push 0 inc word_7F838070 push ecx mov [ebp+var_E], 8 push [ebp+arg_C] mov word ptr [ebp+var_4+2], 0 push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jnz loc_7F81D1FA push offset byte_7F8369F8 push [ebp+var_20] push [ebp+arg_C] push [ebp+arg_0] call sub_7F81B6A6 mov esi, eax test esi, esi jnz loc_7F81D1FA cmp [ebp+arg_8], 0 mov eax, [ebp+arg_4] mov [ebp+var_1C], eax jle loc_7F81D012 loc_7F81CF12: ; CODE XREF: sub_7F81CE7B+191j push 0 lea eax, [ebp+var_20] push 0 mov ecx, [ebp+var_1C] push eax push 0 push dword ptr [ecx] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F81CF37 mov [ebp+var_14], esi jmp loc_7F81CFFF ; --------------------------------------------------------------------------- loc_7F81CF37: ; CODE XREF: sub_7F81CE7B+B2j mov eax, [ebp+var_20] lea ecx, [ebp+var_C] and al, 88h push ecx or al, 88h push 0 mov [ebp+var_20], eax lea eax, [ebp+var_20] push eax push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F81CF70 cmp esi, 1001h jnz short loc_7F81CF68 xor esi, esi jmp loc_7F81CFFF ; --------------------------------------------------------------------------- loc_7F81CF68: ; CODE XREF: sub_7F81CE7B+E4j mov [ebp+var_14], esi jmp loc_7F81CFFF ; --------------------------------------------------------------------------- loc_7F81CF70: ; CODE XREF: sub_7F81CE7B+DCj mov eax, [ebp+var_C] mov ecx, [eax] mov edx, [ecx+18h] mov ebx, [edx] mov ax, [ebx] add ebx, 0Eh mov [ebp+var_6], ax test ax, ax jle short loc_7F81CFEC loc_7F81CF89: ; CODE XREF: sub_7F81CE7B+168j push dword ptr [ebx] movsx eax, word ptr [ebp+var_4+2] shl eax, 2 push eax push edi call sub_7F82A419 test eax, eax jnz short loc_7F81CFD7 inc word ptr [ebp+var_4+2] mov ax, word ptr [ebp+var_4+2] cmp [ebp+var_E], ax jg short loc_7F81CFCD add [ebp+var_E], 8 movsx eax, [ebp+var_E] shl eax, 2 push 0 push eax push [ebp+var_18] call sub_7F82F24A mov edi, eax test edi, edi jz short loc_7F81CFE7 mov [ebp+var_18], edi mov edi, [edi] loc_7F81CFCD: ; CODE XREF: sub_7F81CE7B+12Ej movsx ecx, word ptr [ebp+var_4+2] mov eax, [ebx] mov [edi+ecx*4-4], eax loc_7F81CFD7: ; CODE XREF: sub_7F81CE7B+120j dec [ebp+var_6] add ebx, 0Ch cmp [ebp+var_6], 0 jg short loc_7F81CF89 jmp short loc_7F81CFEC ; --------------------------------------------------------------------------- loc_7F81CFE7: ; CODE XREF: sub_7F81CE7B+14Bj mov esi, 400h loc_7F81CFEC: ; CODE XREF: sub_7F81CE7B+10Cj ; sub_7F81CE7B+16Aj push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C test esi, esi jnz loc_7F81D1FA loc_7F81CFFF: ; CODE XREF: sub_7F81CE7B+B7j ; sub_7F81CE7B+E8j ... add [ebp+var_1C], 4 dec [ebp+arg_8] cmp [ebp+arg_8], 0 jg loc_7F81CF12 loc_7F81D012: ; CODE XREF: sub_7F81CE7B+91j mov eax, [ebp+var_18] cmp word ptr [ebp+var_4+2], 0 mov ecx, [eax] mov [ebp-10h], ecx jle loc_7F81D1FA loc_7F81D025: ; CODE XREF: sub_7F81CE7B+379j lea eax, [ebp+var_C] push eax push 1 push dword ptr [ebp-10h] push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F81D053 cmp esi, 1001h jnz short loc_7F81D04B xor esi, esi jmp loc_7F81D1E7 ; --------------------------------------------------------------------------- loc_7F81D04B: ; CODE XREF: sub_7F81CE7B+1C7j mov [ebp+var_14], esi jmp loc_7F81D1E7 ; --------------------------------------------------------------------------- loc_7F81D053: ; CODE XREF: sub_7F81CE7B+1BFj mov eax, [ebp+var_C] mov ecx, [eax] mov edx, [ecx+18h] mov ebx, [edx] mov edi, [ebp+arg_10] mov ax, [ebx+2] mov cx, ax and cx, 3 and ax, 0FFFCh mov [ebp+var_6], cx mov cx, [ebp+var_8] mov [ebx+2], ax mov eax, [ebp+arg_4] mov [ebp+arg_8], cx mov [ebp+var_1C], eax test cx, cx jle loc_7F81D172 loc_7F81D08E: ; CODE XREF: sub_7F81CE7B+2F1j push 0 mov eax, [ebp+var_1C] mov edx, [ebp+var_C] push dword ptr [eax] mov eax, [edx] mov ecx, [eax+18h] push dword ptr [ecx] call sub_7F819486 mov word ptr [ebp+var_4], ax test ax, ax jl loc_7F81D15F mov [ebp+var_24], 19Dh lea eax, [ebp+var_24] push eax push offset ReturnedString push 0 push [ebp+var_4] push [ebp+var_C] call sub_7F818D47 cmp eax, 1014h mov esi, eax jz short loc_7F81D0DF test esi, esi jnz loc_7F81D172 loc_7F81D0DF: ; CODE XREF: sub_7F81CE7B+25Aj mov eax, [ebp+arg_C] push offset sz ; lpString mov dword_7F8367EF, eax call ds:lstrlenA lea esi, unk_7F8367F4[eax] push esi ; lpString call ds:lstrlenA lea esi, [eax+esi+1] push offset byte_7F8369F8 ; lpString call ds:lstrlenA push offset byte_7F8369F8 ; lpString2 mov [ebp+var_28], eax push esi ; lpString1 call ds:lstrcpyA mov ecx, [ebp+var_28] lea eax, [ecx+eax+1] lea ecx, [ebp+var_4] mov byte ptr [eax], 0 sub eax, offset unk_7F8367D7 push eax mov [ebp+var_24], eax push offset ReturnedString push ecx push [ebp+var_C] call sub_7F818E95 mov esi, eax test esi, esi jnz short loc_7F81D172 mov word ptr [edi], 2 mov ecx, [ebp+var_1C] mov ax, word ptr [ebp+var_4] add edi, 8 mov [edi-6], ax mov edx, [ecx] mov [edi-4], edx loc_7F81D15F: ; CODE XREF: sub_7F81CE7B+230j add [ebp+var_1C], 4 dec [ebp+arg_8] cmp [ebp+arg_8], 0 jg loc_7F81D08E loc_7F81D172: ; CODE XREF: sub_7F81CE7B+20Dj ; sub_7F81CE7B+25Ej ... mov ax, [ebx+2] mov cx, ax xor cx, [ebp+var_6] and cx, 3 xor cx, ax test esi, esi mov [ebx+2], cx jz short loc_7F81D19C push 0 lea eax, [ebp+var_C] push eax mov [ebp+var_14], esi call sub_7F81813C jmp short loc_7F81D1E7 ; --------------------------------------------------------------------------- loc_7F81D19C: ; CODE XREF: sub_7F81CE7B+30Fj push 1 lea eax, [ebp+var_C] push eax call sub_7F81813C mov esi, eax test esi, esi jz short loc_7F81D1B2 mov [ebp+var_14], esi jmp short loc_7F81D1E7 ; --------------------------------------------------------------------------- loc_7F81D1B2: ; CODE XREF: sub_7F81CE7B+330j cmp word_7F838070, 1 jnz short loc_7F81D1E7 cmp [ebp+arg_10], edi jz short loc_7F81D1E7 sub edi, [ebp+arg_10] mov eax, [ebp+arg_10] sar edi, 3 lea ecx, [ebp+var_38] mov [ebp+var_34], di push ecx push 4000h mov edx, [ebp-10h] mov [ebp+var_32], eax push dword ptr [edx] push [ebp+arg_0] call sub_7F82A016 loc_7F81D1E7: ; CODE XREF: sub_7F81CE7B+1CBj ; sub_7F81CE7B+1D3j ... add dword ptr [ebp-10h], 4 dec word ptr [ebp+var_4+2] cmp word ptr [ebp+var_4+2], 0 jnz loc_7F81D025 loc_7F81D1FA: ; CODE XREF: sub_7F81CE7B+63j ; sub_7F81CE7B+80j ... push [ebp+var_18] dec word_7F838070 call sub_7F82F1E1 cmp [ebp+var_C], 0 jz short loc_7F81D21A push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C loc_7F81D21A: ; CODE XREF: sub_7F81CE7B+392j mov eax, esi test esi, esi jnz short loc_7F81D223 mov eax, [ebp+var_14] loc_7F81D223: ; CODE XREF: sub_7F81CE7B+2Dj ; sub_7F81CE7B+3A3j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81CE7B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81D22C proc near ; CODE XREF: sub_7F810955+B3p var_40 = byte ptr -40h var_3C = word ptr -3Ch var_3A = dword ptr -3Ah var_30 = dword ptr -30h var_2C = dword ptr -2Ch lpString = dword ptr -28h var_24 = dword ptr -24h lpString1 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 40h push ebx push esi inc word_7F838070 push edi xor esi, esi lea eax, [ebp+var_4] push eax lea ecx, [ebp+var_C] push ecx lea edx, [ebp+var_2C] push edx mov [ebp+var_8], esi mov [ebp+var_14], esi mov [ebp+var_10], esi push [ebp+arg_4] push [ebp+arg_0] call sub_7F82C63C mov [ebp+var_24], eax cmp eax, esi jz short loc_7F81D271 mov [ebp+var_4], si mov [ebp+var_2C], esi mov [ebp+var_C], esi jmp short loc_7F81D27B ; --------------------------------------------------------------------------- loc_7F81D271: ; CODE XREF: sub_7F81D22C+37j mov eax, [ebp+var_C] and al, 88h or al, 88h mov [ebp+var_C], eax loc_7F81D27B: ; CODE XREF: sub_7F81D22C+43j lea eax, [ebp+var_30] lea ecx, [ebp+var_8] push eax push ecx push 0 push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81BA1F mov edi, eax test edi, edi jnz loc_7F81D560 mov eax, [ebp+var_8] movsx ecx, [ebp+var_4] mov al, [eax+0Eh] and al, 22h cmp al, 1 sbb eax, eax inc eax cmp eax, ecx jz short loc_7F81D2BE cmp [ebp+var_4], 1 sbb esi, esi and esi, 0FFFFFFFEh inc si loc_7F81D2BE: ; CODE XREF: sub_7F81D22C+84j push 0 push 19Dh call sub_7F82F03B mov [ebp+var_8], eax test eax, eax jnz short loc_7F81D2DB mov edi, 400h jmp loc_7F81D560 ; --------------------------------------------------------------------------- loc_7F81D2DB: ; CODE XREF: sub_7F81D22C+A3j push [ebp+var_30] push offset ReturnedString push [ebp+var_8] call sub_7F82FCE0 add esp, 0Ch cmp [ebp+var_C], 0 jz short loc_7F81D31A lea eax, [ebp+var_14] lea ecx, [ebp+var_C] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jz short loc_7F81D31A cmp edi, 1001h jnz loc_7F81D560 xor edi, edi loc_7F81D31A: ; CODE XREF: sub_7F81D22C+C6j ; sub_7F81D22C+DEj push 0 mov eax, [ebp+var_8] push [ebp+var_30] add eax, 1Bh push eax call sub_7F82A3C9 test eax, eax jnz short loc_7F81D339 mov edi, 1014h jmp loc_7F81D560 ; --------------------------------------------------------------------------- loc_7F81D339: ; CODE XREF: sub_7F81D22C+101j inc eax push 0 mov ecx, [ebp+var_8] sub ecx, eax add ecx, [ebp+var_30] add ecx, 1Bh push ecx push eax call sub_7F82A3C9 mov [ebp+lpString1], eax test eax, eax jnz short loc_7F81D35F mov edi, 1014h jmp loc_7F81D560 ; --------------------------------------------------------------------------- loc_7F81D35F: ; CODE XREF: sub_7F81D22C+127j inc [ebp+lpString1] cmp [ebp+var_14], 0 jz short loc_7F81D376 push [ebp+var_14] call sub_7F8198FC mov word ptr [ebp+var_C+2], ax jmp short loc_7F81D37C ; --------------------------------------------------------------------------- loc_7F81D376: ; CODE XREF: sub_7F81D22C+13Aj mov word ptr [ebp+var_C+2], 0 loc_7F81D37C: ; CODE XREF: sub_7F81D22C+148j cmp word ptr [ebp+var_C+2], 0 jl loc_7F81D560 loc_7F81D387: ; CODE XREF: sub_7F81D22C+32Ej cmp word ptr [ebp+var_C+2], 0 jnz short loc_7F81D39D mov eax, [ebp+var_2C] mov [ebp+var_18], eax test eax, eax jnz short loc_7F81D3AF jmp loc_7F81D556 ; --------------------------------------------------------------------------- loc_7F81D39D: ; CODE XREF: sub_7F81D22C+160j mov ax, word ptr [ebp+var_C+2] dec ax push eax push [ebp+var_14] call sub_7F819508 mov [ebp+var_18], eax loc_7F81D3AF: ; CODE XREF: sub_7F81D22C+16Aj lea eax, [ebp+var_10] lea ecx, [ebp+var_18] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jz short loc_7F81D3CF mov [ebp+var_24], edi jmp loc_7F81D556 ; --------------------------------------------------------------------------- loc_7F81D3CF: ; CODE XREF: sub_7F81D22C+199j push 0 push [ebp+arg_4] push [ebp+var_10] call sub_7F8194ED mov [ebp+var_2], ax mov bx, ax test bx, bx jge short loc_7F81D3F2 mov edi, 1004h jmp loc_7F81D4BD ; --------------------------------------------------------------------------- loc_7F81D3F2: ; CODE XREF: sub_7F81D22C+1BAj cmp word ptr [ebp+var_C+2], 0 jnz short loc_7F81D410 mov eax, [ebp+var_18] mov ecx, [ebp+var_8] mov edx, [ebp+lpString1] mov [ecx+17h], eax lea eax, [edx+1] mov byte ptr [edx], 0 jmp loc_7F81D4A1 ; --------------------------------------------------------------------------- loc_7F81D410: ; CODE XREF: sub_7F81D22C+1CBj push ebx push [ebp+var_10] call sub_7F81990D mov [ebp+var_1C], eax lea eax, [ebp+var_1C] push eax push offset ReturnedString push 0 push dword ptr [ebp+var_2] push [ebp+var_10] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F81D4CE mov eax, dword_7F8367EF mov ecx, [ebp+var_8] push 0 mov [ecx+17h], eax push [ebp+var_1C] push offset sz call sub_7F82A3C9 test eax, eax jnz short loc_7F81D461 mov edi, 1014h jmp short loc_7F81D4BD ; --------------------------------------------------------------------------- loc_7F81D461: ; CODE XREF: sub_7F81D22C+22Cj inc eax push 0 mov ecx, offset ReturnedString sub ecx, eax add ecx, [ebp+var_1C] add ecx, 1Bh push ecx push eax call sub_7F82A3C9 mov [ebp+lpString], eax test eax, eax jnz short loc_7F81D486 mov edi, 1014h jmp short loc_7F81D4BD ; --------------------------------------------------------------------------- loc_7F81D486: ; CODE XREF: sub_7F81D22C+251j push [ebp+lpString] ; lpString call ds:lstrlenA push [ebp+lpString] ; lpString2 push [ebp+lpString1] ; lpString1 mov edi, eax call ds:lstrcpyA lea eax, [edi+eax+1] loc_7F81D4A1: ; CODE XREF: sub_7F81D22C+1DFj lea edx, [ebp+var_2] mov byte ptr [eax], 0 inc eax sub eax, [ebp+var_8] push eax mov [ebp+var_1C], eax push [ebp+var_8] push edx push [ebp+var_10] call sub_7F818E95 mov edi, eax loc_7F81D4BD: ; CODE XREF: sub_7F81D22C+1C1j ; sub_7F81D22C+233j ... test edi, edi jnz short loc_7F81D4D2 push 1 lea eax, [ebp+var_10] push eax call sub_7F81813C mov edi, eax loc_7F81D4CE: ; CODE XREF: sub_7F81D22C+20Aj test edi, edi jz short loc_7F81D4E4 loc_7F81D4D2: ; CODE XREF: sub_7F81D22C+293j push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C mov [ebp+var_24], edi xor edi, edi jmp short loc_7F81D556 ; --------------------------------------------------------------------------- loc_7F81D4E4: ; CODE XREF: sub_7F81D22C+2A4j test si, si jz short loc_7F81D4F5 push esi push [ebp+var_18] push [ebp+arg_0] call sub_7F82C50A loc_7F81D4F5: ; CODE XREF: sub_7F81D22C+2BBj cmp word_7F838070, 1 jnz short loc_7F81D556 cmp bx, [ebp+var_2] jnz short loc_7F81D531 mov word_7F833C1A, bx mov ecx, 4000h mov [ebp+var_3A], offset word_7F833C18 mov word_7F833C18, 2 mov [ebp+var_3C], 1 mov eax, [ebp+arg_4] mov dword_7F833C1C, eax jmp short loc_7F81D546 ; --------------------------------------------------------------------------- loc_7F81D531: ; CODE XREF: sub_7F81D22C+2D7j mov ax, [ebp+var_2] mov ecx, 8000h mov [ebp+var_3C], bx mov word ptr [ebp+var_3A], bx mov word ptr [ebp+var_3A+2], ax loc_7F81D546: ; CODE XREF: sub_7F81D22C+303j lea eax, [ebp+var_40] push eax push ecx push [ebp+var_18] push [ebp+arg_0] call sub_7F82A016 loc_7F81D556: ; CODE XREF: sub_7F81D22C+16Cj ; sub_7F81D22C+19Ej ... dec word ptr [ebp+var_C+2] jns loc_7F81D387 loc_7F81D560: ; CODE XREF: sub_7F81D22C+6Bj ; sub_7F81D22C+AAj ... cmp [ebp+var_14], 0 jz short loc_7F81D571 push 0 lea eax, [ebp+var_14] push eax call sub_7F81813C loc_7F81D571: ; CODE XREF: sub_7F81D22C+338j cmp [ebp+var_8], 0 jz short loc_7F81D57F push [ebp+var_8] call sub_7F82F149 loc_7F81D57F: ; CODE XREF: sub_7F81D22C+349j dec word_7F838070 mov eax, edi test edi, edi jnz short loc_7F81D58F mov eax, [ebp+var_24] loc_7F81D58F: ; CODE XREF: sub_7F81D22C+35Ej pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F81D22C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81D598 proc near ; CODE XREF: sub_7F811CD9+14Bp ; sub_7F817E9D+245p var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = byte ptr -8 var_6 = dword ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 28h mov [ebp+var_2], 1 push ebx push esi push edi push 0Ah xor edi, edi mov ebx, [ebp+arg_0] push [ebp+arg_4] push ebx mov word ptr [ebp+var_6+2], di mov [ebp+var_14], edi mov [ebp+var_10], edi call sub_7F82A93C test eax, eax jnz short loc_7F81D5CF mov eax, 101Eh jmp loc_7F81D907 ; --------------------------------------------------------------------------- loc_7F81D5CF: ; CODE XREF: sub_7F81D598+2Bj inc word_7F838070 push 0 push 0 lea eax, [ebp+var_28] mov dword_7F836C60, 1 push 0 push eax push [ebp+arg_4] push ebx call sub_7F82D114 mov esi, eax test esi, esi jnz loc_7F81D8A4 push 0 push 8000h call sub_7F82F03B mov [ebp+var_14], eax test eax, eax jnz short loc_7F81D61A mov esi, 400h jmp loc_7F81D8A4 ; --------------------------------------------------------------------------- loc_7F81D61A: ; CODE XREF: sub_7F81D598+76j cmp dword_7F838078, 0 jz short loc_7F81D62A mov esi, 253h jmp short loc_7F81D659 ; --------------------------------------------------------------------------- loc_7F81D62A: ; CODE XREF: sub_7F81D598+89j mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx loc_7F81D659: ; CODE XREF: sub_7F81D598+90j test esi, esi jnz loc_7F81D8A4 mov cx, 1 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F81D6EE mov edx, [ebp+var_14] loc_7F81D679: ; CODE XREF: sub_7F81D598+154j cmp cx, 1 jb short loc_7F81D6C2 mov eax, dword_7F838078 mov esi, [eax+200h] cmp [esi+8], cx jbe short loc_7F81D6C2 mov ax, cx shr ax, 6 movzx esi, ax and esi, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [esi+eax] xor esi, esi mov si, cx and esi, 0FFh shl esi, 5 add esi, eax jmp short loc_7F81D6C4 ; --------------------------------------------------------------------------- loc_7F81D6C2: ; CODE XREF: sub_7F81D598+E5j ; sub_7F81D598+F6j xor esi, esi loc_7F81D6C4: ; CODE XREF: sub_7F81D598+128j mov eax, [ebp+arg_4] cmp [esi+8], eax jnz short loc_7F81D6DB test byte ptr [esi+10h], 20h jnz short loc_7F81D6DB mov eax, [esi+4] inc edi mov [edx], eax add edx, 4 loc_7F81D6DB: ; CODE XREF: sub_7F81D598+132j ; sub_7F81D598+138j inc cx mov eax, dword_7F838078 mov esi, [eax+200h] cmp [esi+8], cx ja short loc_7F81D679 loc_7F81D6EE: ; CODE XREF: sub_7F81D598+DCj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81D704 call sub_7F82A34F jmp short loc_7F81D712 ; --------------------------------------------------------------------------- loc_7F81D704: ; CODE XREF: sub_7F81D598+163j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81D712: ; CODE XREF: sub_7F81D598+16Aj xor esi, esi lea eax, [ebp+var_6+2] push eax lea ecx, [ebp+var_2] push ecx mov dword_7F838078, esi push [ebp+arg_4] push ebx call sub_7F82C0B0 test eax, eax jz short loc_7F81D739 mov [ebp+var_2], 1 mov word ptr [ebp+var_6+2], si loc_7F81D739: ; CODE XREF: sub_7F81D598+195j lea eax, [ebp+var_10] lea ecx, [ebp+var_C] mov [ebp+var_C], 82h push eax push 2 push ecx push ebx call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81D8A4 push 1 lea eax, [ebp+var_10] push eax call sub_7F81813C mov esi, eax test esi, esi jnz loc_7F81D8A4 mov al, byte ptr [ebp+var_C] cmp al, 91h jb short loc_7F81D77A xor eax, eax jmp short loc_7F81D785 ; --------------------------------------------------------------------------- loc_7F81D77A: ; CODE XREF: sub_7F81D598+1DCj movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F81D785: ; CODE XREF: sub_7F81D598+1E0j push eax push [ebp+var_C] push ebx call sub_7F82CF24 mov esi, eax test esi, esi jnz loc_7F81D8A4 push 0 lea ecx, [ebp+var_C] push [ebp+var_28] push 1 push ecx push ebx call sub_7F82D1DF mov esi, eax test esi, esi jnz loc_7F81D8A4 movsx eax, word ptr [ebp+var_6+2] push eax push dword ptr [ebp+var_2] push [ebp+var_C] push ebx call sub_7F82C1D4 mov esi, eax test esi, esi jnz loc_7F81D8A4 lea eax, [ebp+var_10] lea ecx, [ebp+var_C] push eax push 1 push ecx push ebx call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81D8A4 mov word ptr [ebp+var_6], 0 mov [ebp+var_24], edi loc_7F81D7F2: ; CODE XREF: sub_7F81D598+280j ; sub_7F81D598+2E1j mov eax, edi dec edi test eax, eax jle loc_7F81D886 lea eax, [ebp+var_20] lea ecx, [ebp+var_18] push eax push ecx mov eax, [ebp+var_14] push [ebp+arg_4] push 0 push dword ptr [eax+edi*4] push ebx call sub_7F81BA1F test eax, eax jnz short loc_7F81D7F2 lea eax, [ebp+var_1C] mov edx, [ebp+var_14] push eax push [ebp+var_20] push dword ptr [edx+edi*4] push [ebp+var_10] call sub_7F819BC5 mov esi, eax test esi, esi jnz short loc_7F81D8A4 push [ebp+var_20] push [ebp+var_18] push [ebp+var_1C] call sub_7F81A03B mov esi, eax test esi, esi jnz short loc_7F81D8A4 lea eax, [ebp+var_8] lea ecx, [ebp+var_1C] push eax push ecx call sub_7F81A0C1 mov esi, eax test esi, esi jnz short loc_7F81D8A4 mov eax, [ebp+var_18] test byte ptr [eax+0Eh], 22h jnz short loc_7F81D869 inc word ptr [ebp+var_6] loc_7F81D869: ; CODE XREF: sub_7F81D598+2CBj mov ax, word ptr [ebp+var_24] push eax sub ax, di push eax call sub_7F82A9CA test eax, eax jnz loc_7F81D7F2 mov esi, 101Eh jmp short loc_7F81D8A4 ; --------------------------------------------------------------------------- loc_7F81D886: ; CODE XREF: sub_7F81D598+25Fj push [ebp+arg_4] lea ecx, [ebp+var_10] push ecx call sub_7F8183DC mov esi, eax test esi, esi jnz short loc_7F81D8A4 push [ebp+var_6] push [ebp+arg_4] push ebx call sub_7F82C5AA loc_7F81D8A4: ; CODE XREF: sub_7F81D598+5Fj ; sub_7F81D598+7Dj ... cmp [ebp+var_14], 0 jz short loc_7F81D8B2 push [ebp+var_14] call sub_7F82F149 loc_7F81D8B2: ; CODE XREF: sub_7F81D598+310j test esi, esi jnz short loc_7F81D8C8 push 0 push 40000000h push [ebp+arg_4] push ebx call sub_7F82A016 jmp short loc_7F81D8EF ; --------------------------------------------------------------------------- loc_7F81D8C8: ; CODE XREF: sub_7F81D598+31Cj cmp [ebp+var_10], 0 jz short loc_7F81D8D9 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F81D8D9: ; CODE XREF: sub_7F81D598+334j test [ebp+var_C], 0FFFFFF00h jz short loc_7F81D8EF push 0 push 1 push [ebp+var_C] push ebx call sub_7F82B9DE loc_7F81D8EF: ; CODE XREF: sub_7F81D598+32Ej ; sub_7F81D598+348j mov dword_7F836C60, 0 dec word_7F838070 call sub_7F82AB0B mov eax, esi loc_7F81D907: ; CODE XREF: sub_7F81D598+32j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81D598 endp ; =============== S U B R O U T I N E ======================================= sub_7F81D910 proc near ; CODE XREF: sub_7F823452+19p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov dword_7F836C60, 1 cmp [esp+arg_8], 0 push ebx push esi push edi push ebp jz short loc_7F81D948 push 900Dh mov esi, 9005h mov edi, [esp+14h+arg_0] push esi push edi call sub_7F82D4F9 push esi push 0B002h push edi call sub_7F82D4F9 jmp short loc_7F81D94C ; --------------------------------------------------------------------------- loc_7F81D948: ; CODE XREF: sub_7F81D910+13j mov edi, [esp+10h+arg_0] loc_7F81D94C: ; CODE XREF: sub_7F81D910+36j push 0 mov esi, 0FEFFh push esi push 900Dh push 9005h push edi call sub_7F82D545 push 0 mov eax, 0B002h push esi push eax push eax push edi call sub_7F82D545 push 0 push esi push 89h push edi call sub_7F82D59C push 0 push esi push 87h push edi mov ebx, offset aBipmbhid ; "�IPM�Hid" call sub_7F82D59C push 0 push esi push 88h push edi call sub_7F82D59C cmp dword ptr aBipmbhid, 0 ; "�IPM�Hid" mov esi, [esp+10h+arg_4] jz short loc_7F81D9CB loc_7F81D9B0: ; CODE XREF: sub_7F81D910+B9j push [esp+10h+arg_8] push esi push dword ptr [ebx] push edi call sub_7F81DA66 mov ebp, eax test ebp, ebp jnz short loc_7F81DA08 add ebx, 4 cmp dword ptr [ebx], 0 jnz short loc_7F81D9B0 loc_7F81D9CB: ; CODE XREF: sub_7F81D910+9Ej push esi push edi call sub_7F81DCCA mov ebp, eax test ebp, ebp jnz short loc_7F81DA08 push esi push edi call sub_7F81E844 mov ebp, eax test ebp, ebp jnz short loc_7F81DA08 push esi push edi call sub_7F81E9D4 mov ebp, eax test ebp, ebp jnz short loc_7F81DA08 push esi push edi call sub_7F81EA21 mov ebp, eax test ebp, ebp jnz short loc_7F81DA08 push esi push edi call sub_7F81EABA mov ebp, eax loc_7F81DA08: ; CODE XREF: sub_7F81D910+B1j ; sub_7F81D910+C6j ... xor esi, esi mov ebx, 0FEFFh push esi push ebx push 900Dh push 9005h push edi call sub_7F82D545 push esi mov eax, 0B002h push ebx push eax push eax push edi call sub_7F82D545 push esi push ebx push 89h push edi call sub_7F82D59C push esi push ebx push 87h push edi call sub_7F82D59C push esi push ebx push 88h push edi call sub_7F82D59C mov eax, ebp mov dword_7F836C60, esi pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F81D910 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81DA66 proc near ; CODE XREF: sub_7F81D910+A8p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h push ebx lea eax, [ebp+var_8] push esi lea ecx, [ebp+arg_4] push edi push eax xor edi, edi push 1 push ecx mov [ebp+var_8], edi push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F81DAE5 cmp esi, 1001h jnz short loc_7F81DADD cmp [ebp+arg_8], edi jz loc_7F81DB53 lea eax, [ebp+var_8] lea ecx, [ebp+arg_4] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F81DC2F mov al, byte ptr [ebp+arg_4] cmp al, 91h jb short loc_7F81DAC4 xor eax, eax jmp short loc_7F81DACF ; --------------------------------------------------------------------------- loc_7F81DAC4: ; CODE XREF: sub_7F81DA66+58j movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F81DACF: ; CODE XREF: sub_7F81DA66+5Cj push eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F82CF24 mov esi, eax loc_7F81DADD: ; CODE XREF: sub_7F81DA66+2Cj test esi, esi jnz loc_7F81DC2F loc_7F81DAE5: ; CODE XREF: sub_7F81DA66+24j xor bx, bx push [ebp+var_8] call sub_7F8198FC mov [ebp+var_2], ax cmp ax, bx jle loc_7F81DC2F loc_7F81DAFD: ; CODE XREF: sub_7F81DA66+1C3j push ebx push [ebp+var_8] call sub_7F819508 mov [ebp+var_10], 104h mov [ebp+var_C], eax lea eax, [ebp+var_10] push eax push offset ReturnedString push 0 push ebx push [ebp+var_8] call sub_7F818D47 cmp eax, 1014h mov esi, eax jnz loc_7F81DC2F cmp [ebp+var_10], 0 jbe loc_7F81DC2F push [ebp+var_10] push offset ReturnedString call sub_7F81DC6C test eax, eax jnz short loc_7F81DB5A xor esi, esi jmp loc_7F81DC23 ; --------------------------------------------------------------------------- loc_7F81DB53: ; CODE XREF: sub_7F81DA66+31j xor esi, esi jmp loc_7F81DC2F ; --------------------------------------------------------------------------- loc_7F81DB5A: ; CODE XREF: sub_7F81DA66+E4j push [ebp+arg_C] push [ebp+arg_8] push [ebp+var_C] push offset ReturnedString push [ebp+arg_4] push [ebp+arg_0] call sub_7F81DE67 mov esi, eax test esi, esi jz short loc_7F81DBB0 cmp esi, 1003h jz short loc_7F81DB8D cmp esi, 1015h jnz loc_7F81DC2F loc_7F81DB8D: ; CODE XREF: sub_7F81DA66+119j cmp [ebp+arg_8], 0 jz short loc_7F81DBAE push ebx push [ebp+var_8] call sub_7F818AE7 mov esi, eax test esi, esi jnz loc_7F81DC2F dec bx dec [ebp+var_2] jmp short loc_7F81DBB0 ; --------------------------------------------------------------------------- loc_7F81DBAE: ; CODE XREF: sub_7F81DA66+12Bj xor esi, esi loc_7F81DBB0: ; CODE XREF: sub_7F81DA66+111j ; sub_7F81DA66+146j cmp [ebp+arg_4], 64694881h jnz short loc_7F81DC23 cmp [ebp+var_C], 42415070h jnz short loc_7F81DBC9 mov edi, 1 jmp short loc_7F81DC23 ; --------------------------------------------------------------------------- loc_7F81DBC9: ; CODE XREF: sub_7F81DA66+15Aj test edi, edi jz short loc_7F81DC23 mov ax, 1 mov edi, 1 cmp ax, ReturnedString adc edi, 0FFFFFFFFh jz short loc_7F81DC23 push 0 lea eax, [ebp+var_4] push eax push 0 push 0 push [ebp+var_C] push [ebp+arg_0] call sub_7F82D114 mov esi, eax mov ax, [ebp+var_4] and ax, 9015h cmp ax, 9015h jz short loc_7F81DC23 cmp [ebp+arg_8], 0 jz short loc_7F81DC23 push 9015h push [ebp+var_C] push [ebp+arg_0] call sub_7F82CF24 mov esi, eax test esi, esi jnz short loc_7F81DC2F loc_7F81DC23: ; CODE XREF: sub_7F81DA66+E8j ; sub_7F81DA66+151j ... inc bx cmp [ebp+var_2], bx jg loc_7F81DAFD loc_7F81DC2F: ; CODE XREF: sub_7F81DA66+4Dj ; sub_7F81DA66+79j ... cmp [ebp+var_8], 0 jz short loc_7F81DC61 cmp [ebp+arg_8], 0 jz short loc_7F81DC44 mov eax, 1 test esi, esi jz short loc_7F81DC46 loc_7F81DC44: ; CODE XREF: sub_7F81DA66+1D3j xor eax, eax loc_7F81DC46: ; CODE XREF: sub_7F81DA66+1DCj push eax lea ecx, [ebp+var_8] push ecx call sub_7F81813C test eax, eax jz short loc_7F81DC61 mov esi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81DC61: ; CODE XREF: sub_7F81DA66+1CDj ; sub_7F81DA66+1ECj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81DA66 endp ; =============== S U B R O U T I N E ======================================= sub_7F81DC6C proc near ; CODE XREF: sub_7F81DA66+DDp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov ebx, [esp+8+arg_0] push edi cmp word ptr [ebx], 100h jnb short loc_7F81DCC2 mov edi, [esp+0Ch+arg_4] cmp edi, 2 jbe short loc_7F81DCC2 sub edi, 2 add ebx, 2 push 0 push edi push ebx call sub_7F82A3C9 test eax, eax jz short loc_7F81DCC2 inc eax sub edi, eax mov esi, eax add edi, ebx jz short loc_7F81DCC2 push 0 push edi push eax call sub_7F82A3C9 test eax, eax jz short loc_7F81DCC2 inc eax sub edi, eax add edi, esi jz short loc_7F81DCC2 cmp byte ptr [eax], 0 jnz short loc_7F81DCC2 mov eax, 1 cmp edi, 1 jz short loc_7F81DCC4 loc_7F81DCC2: ; CODE XREF: sub_7F81DC6C+Cj ; sub_7F81DC6C+15j ... xor eax, eax loc_7F81DCC4: ; CODE XREF: sub_7F81DC6C+54j pop edi pop esi pop ebx retn 8 sub_7F81DC6C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81DCCA proc near ; CODE XREF: sub_7F81D910+BDp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = byte ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi xor esi, esi mov [ebp+var_2], si mov [ebp+var_4], si loc_7F81DCDD: ; CODE XREF: sub_7F81DCCA+3Cj ; sub_7F81DCCA+18Cj mov ax, [ebp+var_4] push 900Dh inc [ebp+var_4] push 9005h push eax push [ebp+arg_0] call sub_7F82D5EE mov ebx, eax test ebx, ebx jz loc_7F81DE5C cmp [ebp+arg_4], 0 jz short loc_7F81DCDD cmp dword_7F836A88, 0 mov eax, offset dword_7F836A88 jz short loc_7F81DD26 loc_7F81DD16: ; CODE XREF: sub_7F81DCCA+5Aj cmp [eax], ebx jz loc_7F81DDCB add eax, 8 cmp dword ptr [eax], 0 jnz short loc_7F81DD16 loc_7F81DD26: ; CODE XREF: sub_7F81DCCA+4Aj cmp byte_7F836A78, 0 mov eax, offset byte_7F836A78 jz short loc_7F81DD44 loc_7F81DD34: ; CODE XREF: sub_7F81DCCA+78j cmp [eax], bl jz loc_7F81DDD6 add eax, 5 cmp byte ptr [eax], 0 jnz short loc_7F81DD34 loc_7F81DD44: ; CODE XREF: sub_7F81DCCA+68j mov [ebp+var_C], 4D504981h loc_7F81DD4B: ; CODE XREF: sub_7F81DCCA+107j ; sub_7F81DCCA+112j cmp dword_7F836AC8, 0 mov edi, offset dword_7F836AC8 jz short loc_7F81DD65 loc_7F81DD59: ; CODE XREF: sub_7F81DCCA+99j cmp [edi], ebx jz short loc_7F81DD69 add edi, 0Ch cmp dword ptr [edi], 0 jnz short loc_7F81DD59 loc_7F81DD65: ; CODE XREF: sub_7F81DCCA+8Dj ; sub_7F81DCCA+184j cmp [edi], ebx jnz short loc_7F81DDE1 loc_7F81DD69: ; CODE XREF: sub_7F81DCCA+91j push dword ptr [edi+4] call sub_7F82AC7E push eax ; lpString call ds:lstrlenA push dword ptr [edi+4] mov esi, eax call sub_7F82AC7E push eax ; lpString2 push offset word_7F8367DA ; lpString1 call ds:lstrcpyA push dword ptr [edi+8] lea esi, [esi+eax+1] call sub_7F82AC7E push eax ; lpString call ds:lstrlenA push dword ptr [edi+8] mov [ebp+var_10], eax call sub_7F82AC7E push eax ; lpString2 push esi ; lpString1 call ds:lstrcpyA mov ecx, [ebp+var_10] mov byte ptr [ecx+eax+1], 0 cmp dword ptr [edi], 0 jz short loc_7F81DE30 loc_7F81DDC1: ; CODE XREF: sub_7F81DCCA+FDj add edi, 0Ch cmp dword ptr [edi], 0 jnz short loc_7F81DDC1 jmp short loc_7F81DE30 ; --------------------------------------------------------------------------- loc_7F81DDCB: ; CODE XREF: sub_7F81DCCA+4Ej mov eax, [eax+4] mov [ebp+var_C], eax jmp loc_7F81DD4B ; --------------------------------------------------------------------------- loc_7F81DDD6: ; CODE XREF: sub_7F81DCCA+6Cj mov eax, [eax+1] mov [ebp+var_C], eax jmp loc_7F81DD4B ; --------------------------------------------------------------------------- loc_7F81DDE1: ; CODE XREF: sub_7F81DCCA+9Dj inc [ebp+var_2] lea eax, [ebp+var_2] push eax push offset aOrphanFolderN ; "Orphan folder %n" push 80h push offset word_7F8367DA call sub_7F81AEE2 push offset word_7F8367DA ; lpString call ds:lstrlenA lea esi, (word_7F8367DA+1)[eax] push offset aAnOrphanedFold ; "An orphaned folder" call ds:lstrlenA push offset aAnOrphanedFold ; "An orphaned folder" mov [ebp+var_10], eax push esi ; lpString1 call ds:lstrcpyA mov ecx, [ebp+var_10] mov byte ptr [ecx+eax+1], 0 loc_7F81DE30: ; CODE XREF: sub_7F81DCCA+F5j ; sub_7F81DCCA+FFj lea eax, [ebp+var_6] push eax push offset ReturnedString push ebx push 0 push [ebp+var_C] push [ebp+arg_0] call sub_7F81B21F cmp eax, 100Fh mov esi, eax jz loc_7F81DD65 test esi, esi jz loc_7F81DCDD loc_7F81DE5C: ; CODE XREF: sub_7F81DCCA+32j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81DCCA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81DE67 proc near ; CODE XREF: sub_7F81DA66+108p var_14 = word ptr -14h var_12 = dword ptr -12h var_E = dword ptr -0Eh var_8 = dword ptr -8 var_4 = byte ptr -4 var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp xor eax, eax mov ebp, esp sub esp, 14h cmp dword_7F838078, eax push ebx push esi mov [ebp+var_8], eax push edi jz short loc_7F81DE87 mov esi, 253h mov edi, [ebp+arg_0] jmp short loc_7F81DEB9 ; --------------------------------------------------------------------------- loc_7F81DE87: ; CODE XREF: sub_7F81DE67+14j mov edi, [ebp+arg_0] mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81DEB9: ; CODE XREF: sub_7F81DE67+1Ej test esi, esi jnz loc_7F81E0A5 push 0 push [ebp+arg_C] call sub_7F8144A4 test eax, eax jnz loc_7F81DFF9 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81DEE9 call sub_7F82A34F jmp short loc_7F81DEF7 ; --------------------------------------------------------------------------- loc_7F81DEE9: ; CODE XREF: sub_7F81DE67+79j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81DEF7: ; CODE XREF: sub_7F81DE67+80j push [ebp+arg_C] xor ebx, ebx mov dword_7F838078, ebx call sub_7F82DB71 cmp ax, 0FFFFh jz loc_7F81DFEF and ax, 9005h cmp ax, 9005h jnz loc_7F81DFEF cmp [ebp+arg_10], ebx jz loc_7F81E0A5 lea eax, [ebp+var_8] lea ecx, [ebp+arg_C] push eax push 2 push ecx push edi call sub_7F817E9D cmp eax, ebx mov esi, eax jnz loc_7F81E0A5 mov ax, [ebp+var_14] mov [ebp+var_12], ebx mov [ebp+var_E], 9 and ax, 0FFFDh or al, 1 mov [ebp+var_14], ax lea eax, [ebp+var_14] and [ebp+var_14], 0FFFBh push eax push [ebp+var_8] call sub_7F8199E0 cmp eax, ebx mov esi, eax jnz loc_7F81E0A5 push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C cmp eax, ebx mov esi, eax jnz loc_7F81E0A5 cmp dword_7F838078, ebx jz short loc_7F81DF9A mov esi, 253h jmp short loc_7F81DFC9 ; --------------------------------------------------------------------------- loc_7F81DF9A: ; CODE XREF: sub_7F81DE67+12Aj mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81DFC9: ; CODE XREF: sub_7F81DE67+131j test esi, esi jnz loc_7F81E0A5 push 0 push [ebp+arg_C] call sub_7F8144A4 and word ptr [eax+10h], 0FEFFh mov word ptr [eax+12h], 9005h mov edx, [ebp+arg_4] mov [eax+8], edx jmp short loc_7F81DFFC ; --------------------------------------------------------------------------- loc_7F81DFEF: ; CODE XREF: sub_7F81DE67+A4j ; sub_7F81DE67+B2j mov esi, 1015h jmp loc_7F81E0A5 ; --------------------------------------------------------------------------- loc_7F81DFF9: ; CODE XREF: sub_7F81DE67+66j mov edx, [ebp+arg_4] loc_7F81DFFC: ; CODE XREF: sub_7F81DE67+186j mov cx, [eax+12h] and cx, 9005h cmp cx, 9005h jz short loc_7F81E016 mov esi, 1015h jmp loc_7F81E0A5 ; --------------------------------------------------------------------------- loc_7F81E016: ; CODE XREF: sub_7F81DE67+1A3j mov cx, [eax+10h] test ch, 1 jz short loc_7F81E026 mov esi, 1003h jmp short loc_7F81E0A5 ; --------------------------------------------------------------------------- loc_7F81E026: ; CODE XREF: sub_7F81DE67+1B6j or ch, 1 mov [eax+10h], cx cmp [eax+8], edx jz short loc_7F81E041 cmp [ebp+arg_10], 0 jz short loc_7F81E041 push eax mov [eax+8], edx call sub_7F8148F7 loc_7F81E041: ; CODE XREF: sub_7F81DE67+1C9j ; sub_7F81DE67+1CFj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E057 call sub_7F82A34F jmp short loc_7F81E065 ; --------------------------------------------------------------------------- loc_7F81E057: ; CODE XREF: sub_7F81DE67+1E7j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E065: ; CODE XREF: sub_7F81DE67+1EEj xor ebx, ebx lea eax, [ebp+var_2] push eax lea ecx, [ebp+var_4] push ecx mov dword_7F838078, ebx push [ebp+arg_C] push edi call sub_7F82C0B0 test eax, eax jz short loc_7F81E094 push ebx push 1 push [ebp+arg_C] push edi call sub_7F82C1D4 cmp eax, ebx mov esi, eax jnz short loc_7F81E0A5 loc_7F81E094: ; CODE XREF: sub_7F81DE67+219j push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_C] push edi call sub_7F81E10F mov esi, eax loc_7F81E0A5: ; CODE XREF: sub_7F81DE67+54j ; sub_7F81DE67+BBj ... cmp dword_7F838078, 0 jz short loc_7F81E0DC mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E0C4 call sub_7F82A34F jmp short loc_7F81E0D2 ; --------------------------------------------------------------------------- loc_7F81E0C4: ; CODE XREF: sub_7F81DE67+254j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E0D2: ; CODE XREF: sub_7F81DE67+25Bj mov dword_7F838078, 0 loc_7F81E0DC: ; CODE XREF: sub_7F81DE67+245j cmp [ebp+var_8], 0 jz short loc_7F81E104 lea ecx, [ebp+var_8] cmp esi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C test eax, eax jz short loc_7F81E104 mov esi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81E104: ; CODE XREF: sub_7F81DE67+279j ; sub_7F81DE67+28Ej mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81DE67 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81E10F proc near ; CODE XREF: sub_7F81DE67+237p var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx lea eax, [ebp+var_8] push esi lea ecx, [ebp+arg_4] push edi push eax xor edi, edi push 1 push ecx mov [ebp+var_8], edi push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F81E162 cmp esi, 1001h jnz short loc_7F81E15A cmp [ebp+arg_8], edi jz loc_7F81E203 lea eax, [ebp+var_8] lea ecx, [ebp+arg_4] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax loc_7F81E15A: ; CODE XREF: sub_7F81E10F+2Cj test esi, esi jnz loc_7F81E1EC loc_7F81E162: ; CODE XREF: sub_7F81E10F+24j xor edi, edi lea eax, [ebp+var_2] push edi push eax push edi push edi push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 cmp eax, edi mov esi, eax jnz short loc_7F81E1EC push [ebp+var_8] call sub_7F8198FC mov bx, ax dec bx test ax, ax jle short loc_7F81E1EC loc_7F81E18E: ; CODE XREF: sub_7F81E10F+DBj push ebx push [ebp+var_8] call sub_7F819508 push [ebp+arg_C] push [ebp+arg_8] push eax xor eax, eax mov ax, [ebp+var_2] and eax, 10h push eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F81E22F mov esi, eax test esi, esi jz short loc_7F81E1E2 cmp esi, 1001h jz short loc_7F81E1D1 cmp esi, 1003h jz short loc_7F81E1D1 cmp esi, 1015h jnz short loc_7F81E1EC loc_7F81E1D1: ; CODE XREF: sub_7F81E10F+B0j ; sub_7F81E10F+B8j cmp [ebp+arg_8], 0 jz short loc_7F81E1E2 push ebx push [ebp+var_8] call sub_7F818AE7 mov esi, eax loc_7F81E1E2: ; CODE XREF: sub_7F81E10F+A8j ; sub_7F81E10F+C6j mov ax, bx dec bx test ax, ax jg short loc_7F81E18E loc_7F81E1EC: ; CODE XREF: sub_7F81E10F+4Dj ; sub_7F81E10F+6Bj ... cmp [ebp+var_8], 0 jz short loc_7F81E224 cmp [ebp+arg_8], 0 jz short loc_7F81E207 test esi, esi jnz short loc_7F81E207 mov eax, 1 jmp short loc_7F81E209 ; --------------------------------------------------------------------------- loc_7F81E203: ; CODE XREF: sub_7F81E10F+31j xor esi, esi jmp short loc_7F81E1EC ; --------------------------------------------------------------------------- loc_7F81E207: ; CODE XREF: sub_7F81E10F+E7j ; sub_7F81E10F+EBj xor eax, eax loc_7F81E209: ; CODE XREF: sub_7F81E10F+F2j push eax lea ecx, [ebp+var_8] push ecx call sub_7F81813C test eax, eax jz short loc_7F81E224 mov esi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81E224: ; CODE XREF: sub_7F81E10F+E1j ; sub_7F81E10F+106j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F81E10F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81E22F proc near ; CODE XREF: sub_7F81E10F+9Fp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi xor esi, esi mov [ebp+var_10], esi mov [ebp+var_C], esi push [ebp+arg_C] mov [ebp+var_8], esi call sub_7F82DB71 cmp ax, 0FFFFh jz loc_7F81E5B0 and ax, 0B002h cmp ax, 0B002h jnz loc_7F81E5B0 cmp dword_7F838078, esi jz short loc_7F81E275 mov esi, 253h mov edi, [ebp+arg_0] jmp short loc_7F81E2A7 ; --------------------------------------------------------------------------- loc_7F81E275: ; CODE XREF: sub_7F81E22F+3Aj mov edi, [ebp+arg_0] mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81E2A7: ; CODE XREF: sub_7F81E22F+44j test esi, esi jnz loc_7F81E5B5 push 0 push [ebp+arg_C] call sub_7F8144A4 mov ebx, eax test ebx, ebx jnz loc_7F81E383 cmp [ebp+arg_10], 0 jz loc_7F81E5B5 cmp byte ptr [ebp+arg_C], 71h jnz short loc_7F81E2DD mov esi, 1001h jmp loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E2DD: ; CODE XREF: sub_7F81E22F+A2j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E2F3 call sub_7F82A34F jmp short loc_7F81E301 ; --------------------------------------------------------------------------- loc_7F81E2F3: ; CODE XREF: sub_7F81E22F+BBj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E301: ; CODE XREF: sub_7F81E22F+C2j push [ebp+arg_C] push [ebp+arg_4] push edi xor ebx, ebx mov dword_7F838078, ebx call sub_7F81EB89 cmp eax, ebx mov esi, eax jnz loc_7F81E5B5 cmp dword_7F838078, ebx jz short loc_7F81E32E mov esi, 253h jmp short loc_7F81E35D ; --------------------------------------------------------------------------- loc_7F81E32E: ; CODE XREF: sub_7F81E22F+F6j mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81E35D: ; CODE XREF: sub_7F81E22F+FDj test esi, esi jnz loc_7F81E5B5 push 0 push [ebp+arg_C] call sub_7F8144A4 mov ebx, eax mov eax, [ebp+arg_4] mov [ebx+8], eax mov word ptr [ebx+12h], 0B002h and word ptr [ebx+10h], 0FEFFh loc_7F81E383: ; CODE XREF: sub_7F81E22F+8Ej mov ax, [ebx+12h] and ax, 0B002h cmp ax, 0B002h jnz loc_7F81E5B0 cmp [ebp+arg_8], 0 jnz short loc_7F81E3DF test byte ptr [ebx+11h], 1 jz short loc_7F81E3AB mov esi, 1003h jmp loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E3AB: ; CODE XREF: sub_7F81E22F+170j cmp word ptr [ebx+1Eh], 1 jz short loc_7F81E3C4 cmp [ebp+arg_10], 0 jz short loc_7F81E3C4 mov word ptr [ebx+1Eh], 1 push ebx call sub_7F8148F7 loc_7F81E3C4: ; CODE XREF: sub_7F81E22F+181j ; sub_7F81E22F+187j or byte ptr [ebx+11h], 1 mov eax, [ebp+arg_4] cmp [ebx+8], eax jz short loc_7F81E3DF cmp [ebp+arg_10], 0 jz short loc_7F81E3DF push ebx mov [ebx+8], eax call sub_7F8148F7 loc_7F81E3DF: ; CODE XREF: sub_7F81E22F+16Aj ; sub_7F81E22F+19Fj ... mov eax, [ebx+0Ch] mov ecx, dword_7F838078 mov esi, eax and al, 88h and esi, 0FFFFFF89h or al, 88h or esi, 89h mov [ebp+var_C], eax cmp word ptr [ecx+254h], 0 jz short loc_7F81E40B call sub_7F82A34F jmp short loc_7F81E419 ; --------------------------------------------------------------------------- loc_7F81E40B: ; CODE XREF: sub_7F81E22F+1D3j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E419: ; CODE XREF: sub_7F81E22F+1DAj push [ebp+arg_14] push [ebp+arg_10] push esi push [ebp+arg_C] push edi xor ebx, ebx mov dword_7F838078, ebx call sub_7F81E629 mov esi, eax test esi, esi jnz loc_7F81E5B5 lea eax, [ebp+var_8] lea ecx, [ebp+var_C] cmp [ebp+arg_10], 1 push eax sbb eax, eax inc eax push eax push ecx push edi call sub_7F817E9D cmp eax, 1001h mov esi, eax jnz short loc_7F81E48D cmp [ebp+arg_8], ebx jz short loc_7F81E486 cmp [ebp+arg_10], ebx jz short loc_7F81E47F lea eax, [ebp+var_8] lea ecx, [ebp+var_C] push eax push 2 push ecx push edi call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F81E48D jmp loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E47F: ; CODE XREF: sub_7F81E22F+233j xor esi, esi jmp loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E486: ; CODE XREF: sub_7F81E22F+22Ej xor esi, esi jmp loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E48D: ; CODE XREF: sub_7F81E22F+229j ; sub_7F81E22F+249j xor ebx, ebx test esi, esi jnz loc_7F81E5B5 push ebx push [ebp+arg_4] push [ebp+var_8] call sub_7F8194ED mov [ebp+var_2], ax cmp ax, bx jge short loc_7F81E4CC cmp [ebp+arg_8], ebx jz short loc_7F81E4F4 cmp [ebp+arg_10], ebx jz short loc_7F81E4F4 push ebx lea ecx, [ebp+var_2] push [ebp+arg_4] push ecx push [ebp+var_8] call sub_7F818B75 cmp eax, ebx mov esi, eax jmp short loc_7F81E4E7 ; --------------------------------------------------------------------------- loc_7F81E4CC: ; CODE XREF: sub_7F81E22F+27Bj cmp [ebp+arg_8], 0 jnz short loc_7F81E4F4 cmp [ebp+arg_10], 0 jz short loc_7F81E4F4 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818AE7 mov esi, eax test esi, esi loc_7F81E4E7: ; CODE XREF: sub_7F81E22F+29Bj jnz loc_7F81E5B5 mov [ebp+var_10], 1 loc_7F81E4F4: ; CODE XREF: sub_7F81E22F+280j ; sub_7F81E22F+285j ... push [ebp+var_10] lea ecx, [ebp+var_8] push ecx call sub_7F81813C mov esi, eax test esi, esi jnz loc_7F81E5B5 cmp dword_7F838078, 0 jz short loc_7F81E51A mov esi, 253h jmp short loc_7F81E549 ; --------------------------------------------------------------------------- loc_7F81E51A: ; CODE XREF: sub_7F81E22F+2E2j mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81E549: ; CODE XREF: sub_7F81E22F+2E9j test esi, esi jnz short loc_7F81E5B5 push 0 push [ebp+var_C] call sub_7F8144A4 test eax, eax jz short loc_7F81E55F or byte ptr [eax+11h], 1 loc_7F81E55F: ; CODE XREF: sub_7F81E22F+32Aj xor edi, edi cmp [ebp+arg_10], edi jz short loc_7F81E580 push edi push [ebp+arg_C] call sub_7F8144A4 cmp [eax+0Ch], edi jnz short loc_7F81E580 mov ecx, [ebp+var_C] push eax mov [eax+0Ch], ecx call sub_7F8148F7 loc_7F81E580: ; CODE XREF: sub_7F81E22F+335j ; sub_7F81E22F+343j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E596 call sub_7F82A34F jmp short loc_7F81E5A4 ; --------------------------------------------------------------------------- loc_7F81E596: ; CODE XREF: sub_7F81E22F+35Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E5A4: ; CODE XREF: sub_7F81E22F+365j mov dword_7F838078, 0 jmp short loc_7F81E5B5 ; --------------------------------------------------------------------------- loc_7F81E5B0: ; CODE XREF: sub_7F81E22F+20j ; sub_7F81E22F+2Ej ... mov esi, 1015h loc_7F81E5B5: ; CODE XREF: sub_7F81E22F+7Aj ; sub_7F81E22F+98j ... cmp dword_7F838078, 0 jz short loc_7F81E5EC mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E5D4 call sub_7F82A34F jmp short loc_7F81E5E2 ; --------------------------------------------------------------------------- loc_7F81E5D4: ; CODE XREF: sub_7F81E22F+39Cj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E5E2: ; CODE XREF: sub_7F81E22F+3A3j mov dword_7F838078, 0 loc_7F81E5EC: ; CODE XREF: sub_7F81E22F+38Dj cmp [ebp+var_8], 0 jz short loc_7F81E61E cmp [ebp+arg_10], 0 jz short loc_7F81E601 mov eax, 1 test esi, esi jz short loc_7F81E603 loc_7F81E601: ; CODE XREF: sub_7F81E22F+3C7j xor eax, eax loc_7F81E603: ; CODE XREF: sub_7F81E22F+3D0j push eax lea ecx, [ebp+var_8] push ecx call sub_7F81813C test eax, eax jz short loc_7F81E61E mov esi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81E61E: ; CODE XREF: sub_7F81E22F+3C1j ; sub_7F81E22F+3E0j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F81E22F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81E629 proc near ; CODE XREF: sub_7F81E22F+1FDp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp sub esp, 10h cmp dword_7F838078, eax push ebx push esi mov [ebp+var_8], eax push edi jz short loc_7F81E649 mov esi, 253h mov edi, [ebp+arg_0] jmp short loc_7F81E67B ; --------------------------------------------------------------------------- loc_7F81E649: ; CODE XREF: sub_7F81E629+14j mov edi, [ebp+arg_0] mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81E67B: ; CODE XREF: sub_7F81E629+1Ej test esi, esi jnz loc_7F81E7D0 push 0 push [ebp+arg_8] call sub_7F8144A4 test eax, eax jz loc_7F81E7D0 or byte ptr [eax+11h], 1 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E6AF call sub_7F82A34F jmp short loc_7F81E6BD ; --------------------------------------------------------------------------- loc_7F81E6AF: ; CODE XREF: sub_7F81E629+7Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E6BD: ; CODE XREF: sub_7F81E629+84j xor ebx, ebx lea eax, [ebp+var_8] push eax lea ecx, [ebp+arg_8] cmp [ebp+arg_C], 1 sbb eax, eax mov dword_7F838078, ebx inc eax push eax push ecx push edi call sub_7F817E9D cmp eax, ebx mov esi, eax jnz loc_7F81E7D0 push [ebp+var_8] call sub_7F8198FC mov [ebp+var_2], ax dec [ebp+var_2] test ax, ax jle loc_7F81E7D0 loc_7F81E6FE: ; CODE XREF: sub_7F81E629+1A1j lea eax, [ebp+var_10] lea ecx, [ebp+var_C] mov [ebp+var_10], 4 push eax push ecx push ebx push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818D47 mov esi, eax test esi, esi jnz loc_7F81E7D0 cmp dword_7F838078, ebx jz short loc_7F81E732 mov esi, 253h jmp short loc_7F81E761 ; --------------------------------------------------------------------------- loc_7F81E732: ; CODE XREF: sub_7F81E629+100j mov eax, [edi] xor esi, esi mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81E761: ; CODE XREF: sub_7F81E629+107j test esi, esi jnz short loc_7F81E7D0 push ebx push [ebp+var_C] call sub_7F8144A4 test eax, eax jz short loc_7F81E784 test byte ptr [eax+11h], 1 jnz short loc_7F81E77F mov [eax+0Ch], ebx or byte ptr [eax+11h], 1 loc_7F81E77F: ; CODE XREF: sub_7F81E629+14Dj inc dword ptr [eax+0Ch] jmp short loc_7F81E796 ; --------------------------------------------------------------------------- loc_7F81E784: ; CODE XREF: sub_7F81E629+147j cmp [ebp+arg_C], ebx jz short loc_7F81E796 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818AE7 mov esi, eax loc_7F81E796: ; CODE XREF: sub_7F81E629+159j ; sub_7F81E629+15Ej mov eax, dword_7F838078 cmp [eax+254h], bx jz short loc_7F81E7AB call sub_7F82A34F jmp short loc_7F81E7B9 ; --------------------------------------------------------------------------- loc_7F81E7AB: ; CODE XREF: sub_7F81E629+179j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E7B9: ; CODE XREF: sub_7F81E629+180j mov ax, [ebp+var_2] mov dword_7F838078, ebx dec [ebp+var_2] test ax, ax jg loc_7F81E6FE loc_7F81E7D0: ; CODE XREF: sub_7F81E629+54j ; sub_7F81E629+66j ... cmp dword_7F838078, 0 jz short loc_7F81E807 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81E7EF call sub_7F82A34F jmp short loc_7F81E7FD ; --------------------------------------------------------------------------- loc_7F81E7EF: ; CODE XREF: sub_7F81E629+1BDj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81E7FD: ; CODE XREF: sub_7F81E629+1C4j mov dword_7F838078, 0 loc_7F81E807: ; CODE XREF: sub_7F81E629+1AEj cmp [ebp+var_8], 0 jz short loc_7F81E839 cmp [ebp+arg_C], 0 jz short loc_7F81E81C mov eax, 1 test esi, esi jz short loc_7F81E81E loc_7F81E81C: ; CODE XREF: sub_7F81E629+1E8j xor eax, eax loc_7F81E81E: ; CODE XREF: sub_7F81E629+1F1j push eax lea ecx, [ebp+var_8] push ecx call sub_7F81813C test eax, eax jz short loc_7F81E839 mov esi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81E839: ; CODE XREF: sub_7F81E629+1E2j ; sub_7F81E629+201j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F81E629 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81E844 proc near ; CODE XREF: sub_7F81D910+CAp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = byte ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, 82h xor edi, edi xor ebx, ebx mov [ebp+var_2], di mov [ebp+var_C], edi loc_7F81E85D: ; CODE XREF: sub_7F81E844+42j ; sub_7F81E844+161j ... mov ax, [ebp+var_2] push 0B002h inc [ebp+var_2] push 0B002h push eax push [ebp+arg_0] call sub_7F82D5EE mov [ebp+var_10], eax cmp eax, ebx jz loc_7F81E9C9 cmp [ebp+arg_4], ebx jz short loc_7F81E85D mov ecx, offset aJplcvbul ; "�PLC�Bul" cmp dword ptr aJplcvbul, ebx ; "�PLC�Bul" jz short loc_7F81E8A8 loc_7F81E895: ; CODE XREF: sub_7F81E844+62j mov eax, [ebp+var_10] cmp [ecx], eax jz loc_7F81E975 add ecx, 8 cmp dword ptr [ecx], 0 jnz short loc_7F81E895 loc_7F81E8A8: ; CODE XREF: sub_7F81E844+4Fj mov eax, offset aQppab ; "qpPAB" cmp byte ptr aQppab, bl ; "qpPAB" jz short loc_7F81E8C8 mov cl, byte ptr [ebp+var_10] loc_7F81E8B8: ; CODE XREF: sub_7F81E844+82j cmp [eax], cl jz loc_7F81E97D add eax, 5 cmp byte ptr [eax], 0 jnz short loc_7F81E8B8 loc_7F81E8C8: ; CODE XREF: sub_7F81E844+6Fj push ebx mov [ebp+var_C], esi push ebx push ebx push ebx push esi push [ebp+arg_0] call sub_7F82D114 test eax, eax jz loc_7F81E988 mov [ebp+var_4], bx push offset aLostAndFound ; "Lost and Found" call ds:lstrlenA mov esi, eax push offset aLostAndFound ; "Lost and Found" push offset word_7F8367DA ; lpString1 call ds:lstrcpyA lea esi, [esi+eax+1] loc_7F81E905: ; CODE XREF: sub_7F81E844+12Fj push offset aOrphanedMessag ; "Orphaned messages" call ds:lstrlenA mov edi, eax push offset aOrphanedMessag ; "Orphaned messages" push esi ; lpString1 call ds:lstrcpyA push offset ReturnedString mov [edi+eax+1], bl lea eax, [ebp+var_C] push eax push ebx push [ebp+arg_0] call sub_7F81AFFD mov edi, eax test edi, edi jz short loc_7F81E985 cmp edi, 100Fh jnz loc_7F81E9C9 inc [ebp+var_4] lea eax, [ebp+var_4] push eax push offset aLostAndFoundN ; "Lost and Found %n" push 80h push offset word_7F8367DA call sub_7F81AEE2 push offset word_7F8367DA ; lpString call ds:lstrlenA lea esi, (word_7F8367DA+1)[eax] jmp short loc_7F81E905 ; --------------------------------------------------------------------------- loc_7F81E975: ; CODE XREF: sub_7F81E844+56j mov eax, [ecx+4] mov [ebp+var_C], eax jmp short loc_7F81E988 ; --------------------------------------------------------------------------- loc_7F81E97D: ; CODE XREF: sub_7F81E844+76j mov eax, [eax+1] mov [ebp+var_C], eax jmp short loc_7F81E988 ; --------------------------------------------------------------------------- loc_7F81E985: ; CODE XREF: sub_7F81E844+F4j mov esi, [ebp+var_C] loc_7F81E988: ; CODE XREF: sub_7F81E844+96j ; sub_7F81E844+137j ... lea eax, [ebp+var_6] push eax push ebx push [ebp+var_10] push [ebp+var_C] push [ebp+arg_0] call sub_7F81B8F0 mov edi, eax test edi, edi jnz short loc_7F81E9B8 test byte ptr [ebp+var_2], 3Fh jnz loc_7F81E85D push [ebp+arg_0] call sub_7F82A1E7 jmp loc_7F81E85D ; --------------------------------------------------------------------------- loc_7F81E9B8: ; CODE XREF: sub_7F81E844+15Bj push 0 xor edi, edi push 1 push [ebp+var_10] push [ebp+arg_0] call sub_7F82B9DE loc_7F81E9C9: ; CODE XREF: sub_7F81E844+39j ; sub_7F81E844+FCj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F81E844 endp ; =============== S U B R O U T I N E ======================================= sub_7F81E9D4 proc near ; CODE XREF: sub_7F81D910+D7p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi xor ebx, ebx xor di, di mov esi, [esp+0Ch+arg_4] loc_7F81E9E0: ; CODE XREF: sub_7F81E9D4+43j mov eax, 0 test esi, esi jnz short loc_7F81E9EE loc_7F81E9E9: ; CODE XREF: sub_7F81E9D4+2Fj movzx eax, di inc di loc_7F81E9EE: ; CODE XREF: sub_7F81E9D4+13j push 88h push eax push [esp+14h+arg_0] call sub_7F82D73C test eax, eax jz short loc_7F81EA19 test esi, esi jz short loc_7F81E9E9 push 0 push 1 push eax push [esp+18h+arg_0] call sub_7F82B9DE mov ebx, eax test ebx, ebx jz short loc_7F81E9E0 loc_7F81EA19: ; CODE XREF: sub_7F81E9D4+2Bj mov eax, ebx pop edi pop esi pop ebx retn 8 sub_7F81E9D4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81EA21 proc near ; CODE XREF: sub_7F81D910+E4p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ebx push esi xor ebx, ebx push edi mov esi, [ebp+arg_4] xor di, di loc_7F81EA2F: ; CODE XREF: sub_7F81EA21+3Bj ; sub_7F81EA21+52j test esi, esi jz short loc_7F81EA38 movzx eax, di jmp short loc_7F81EA3D ; --------------------------------------------------------------------------- loc_7F81EA38: ; CODE XREF: sub_7F81EA21+10j ; sub_7F81EA21+37j ... movzx eax, di inc di loc_7F81EA3D: ; CODE XREF: sub_7F81EA21+15j push 89h push eax push [ebp+arg_0] call sub_7F82D73C test eax, eax jz short loc_7F81EA77 cmp eax, 444C4189h jnz short loc_7F81EA5E test esi, esi jz short loc_7F81EA38 inc di jmp short loc_7F81EA2F ; --------------------------------------------------------------------------- loc_7F81EA5E: ; CODE XREF: sub_7F81EA21+33j test esi, esi jz short loc_7F81EA38 push 0 push 1 push eax push [ebp+arg_0] call sub_7F82B9DE mov ebx, eax test ebx, ebx jz short loc_7F81EA2F jmp short loc_7F81EAB1 ; --------------------------------------------------------------------------- loc_7F81EA77: ; CODE XREF: sub_7F81EA21+2Cj xor di, di loc_7F81EA7A: ; CODE XREF: sub_7F81EA21+8Ej mov eax, 0 test esi, esi jnz short loc_7F81EA88 loc_7F81EA83: ; CODE XREF: sub_7F81EA21+7Bj movzx eax, di inc di loc_7F81EA88: ; CODE XREF: sub_7F81EA21+60j push 87h push eax push [ebp+arg_0] call sub_7F82D73C test eax, eax jz short loc_7F81EAB1 test esi, esi jz short loc_7F81EA83 push 0 push 1 push eax push [ebp+arg_0] call sub_7F82B9DE mov ebx, eax test ebx, ebx jz short loc_7F81EA7A loc_7F81EAB1: ; CODE XREF: sub_7F81EA21+54j ; sub_7F81EA21+77j mov eax, ebx pop edi pop esi pop ebx pop ebp retn 8 sub_7F81EA21 endp ; =============== S U B R O U T I N E ======================================= sub_7F81EABA proc near ; CODE XREF: sub_7F81D910+F1p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi xor bx, bx push edi cmp dword_7F838078, 0 push ebp jz short loc_7F81EAD5 mov esi, 253h mov edi, [esp+10h+arg_0] jmp short loc_7F81EB08 ; --------------------------------------------------------------------------- loc_7F81EAD5: ; CODE XREF: sub_7F81EABA+Ej mov edi, [esp+10h+arg_0] mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi loc_7F81EB08: ; CODE XREF: sub_7F81EABA+19j test esi, esi jnz short loc_7F81EB49 xor ebp, ebp loc_7F81EB0E: ; CODE XREF: sub_7F81EABA+8Dj mov ax, bx push 87h inc bx push eax push edi call sub_7F82D87F test eax, eax jz short loc_7F81EB49 push ebp push eax call sub_7F8144A4 mov cx, [eax+0Ch] cmp [eax+1Eh], cx jz short loc_7F81EB3E cmp [esp+10h+arg_4], ebp jz short loc_7F81EB3E mov [eax+1Eh], cx loc_7F81EB3E: ; CODE XREF: sub_7F81EABA+78j ; sub_7F81EABA+7Ej push eax mov [eax+0Ch], ebp call sub_7F8148F7 jmp short loc_7F81EB0E ; --------------------------------------------------------------------------- loc_7F81EB49: ; CODE XREF: sub_7F81EABA+50j ; sub_7F81EABA+67j cmp dword_7F838078, 0 jz short loc_7F81EB80 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81EB68 call sub_7F82A34F jmp short loc_7F81EB76 ; --------------------------------------------------------------------------- loc_7F81EB68: ; CODE XREF: sub_7F81EABA+A5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81EB76: ; CODE XREF: sub_7F81EABA+ACj mov dword_7F838078, 0 loc_7F81EB80: ; CODE XREF: sub_7F81EABA+96j mov eax, esi pop ebp pop edi pop esi pop ebx retn 8 sub_7F81EABA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81EB89 proc near ; CODE XREF: sub_7F81E22F+E1p var_14 = word ptr -14h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 14h push ebx lea eax, [ebp+var_8] push esi lea ecx, [ebp+arg_4] push edi xor esi, esi push eax mov [ebp+var_8], esi push esi push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, esi mov edi, eax jnz loc_7F81EF4E push esi push [ebp+arg_8] push [ebp+var_8] call sub_7F8194ED mov [ebp+var_2], ax cmp ax, si jge short loc_7F81EBD1 mov edi, 1004h jmp loc_7F81EF4E ; --------------------------------------------------------------------------- loc_7F81EBD1: ; CODE XREF: sub_7F81EB89+3Cj mov [ebp+var_C], 220h lea eax, [ebp+var_C] push eax push offset ReturnedString push 0 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818D47 cmp eax, 1014h mov edi, eax jnz short loc_7F81EBFD cmp [ebp+var_C], 1Bh jnb short loc_7F81EC05 loc_7F81EBFD: ; CODE XREF: sub_7F81EB89+6Cj test edi, edi jnz loc_7F81EF4E loc_7F81EC05: ; CODE XREF: sub_7F81EB89+72j xor esi, esi lea eax, [ebp+var_8] push esi push eax call sub_7F81813C lea eax, [ebp+var_8] lea ecx, [ebp+arg_8] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, esi mov edi, eax jnz loc_7F81EF4E push 0Eh mov ebx, offset ReturnedString push ebx push ebx call sub_7F82FF60 add esp, 0Ch cmp ReturnedString, 76Ch jl loc_7F81EF49 cmp ReturnedString, 81Fh jge loc_7F81EF49 cmp word_7F8367DA, si jle loc_7F81EF49 cmp word_7F8367DA, 0Ch jg loc_7F81EF49 cmp word_7F8367DC, si jle loc_7F81EF49 cmp word_7F8367DC, 1Fh jg loc_7F81EF49 cmp word_7F8367DE, si jl loc_7F81EF49 cmp word_7F8367DE, 18h jge loc_7F81EF49 cmp word_7F8367E0, si jl loc_7F81EF49 cmp word_7F8367E0, 3Ch jge loc_7F81EF49 push 0Eh lea eax, [ebp+var_2] push 38005h push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 0Eh lea eax, [ebp+var_2] push ebx push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E push 0Eh lea eax, [ebp+var_2] push 38006h push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 0Eh lea eax, [ebp+var_2] push ebx push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E push 1 lea eax, [ebp+var_2] push 68007h push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 1 lea eax, [ebp+var_2] push offset byte_7F8367E6 push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E push 2 lea eax, [ebp+var_2] push 78008h push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 2 lea eax, [ebp+var_2] push offset word_7F8367E7 push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E push 2 lea eax, [ebp+var_2] push 4800Dh push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 2 lea eax, [ebp+var_2] push offset word_7F8367E9 push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E push 4 lea eax, [ebp+var_2] push 80000h push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 4 lea eax, [ebp+var_2] push offset dword_7F8367EB push esi push eax push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz loc_7F81EF4E mov ebx, offset sz push ebx ; lpString call ds:lstrlenA mov [ebp+var_14], 3 inc eax mov [ebp+var_C], eax add ax, 3 and ax, 0FFFCh movzx ecx, ax mov [ebp+var_10], ax lea edx, ds:10h[ecx*2] mov [ebp+var_E], ax push edx push 8000h lea eax, [ebp+var_2] push eax push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz loc_7F81EF4E push 8 lea eax, [ebp+var_14] push eax lea ecx, [ebp+var_2] push esi push ecx push [ebp+var_8] call sub_7F818DC7 cmp eax, esi mov edi, eax jnz loc_7F81EF4E push [ebp+var_C] push ebx push 8 lea ecx, [ebp+var_2] push ecx push [ebp+var_8] call sub_7F818DC7 cmp eax, esi mov edi, eax jnz loc_7F81EF4E push [ebp+var_C] push ebx movzx eax, [ebp+var_10] add eax, 8 lea ecx, [ebp+var_2] push eax push ecx push [ebp+var_8] call sub_7F818DC7 cmp eax, esi mov edi, eax jnz loc_7F81EF4E mov ebx, [ebp+var_C] add ebx, offset sz push ebx ; lpString call ds:lstrlenA inc eax lea ecx, [ebp+var_2] push eax mov [ebp+var_C], eax push 18004h push ecx push [ebp+var_8] call sub_7F818B75 cmp eax, esi mov edi, eax jnz short loc_7F81EF4E push [ebp+var_C] push ebx push esi lea ecx, [ebp+var_2] push ecx push [ebp+var_8] call sub_7F818DC7 cmp eax, esi mov edi, eax jnz short loc_7F81EF4E mov ebx, offset aThisMessageCou ; "This message could not be fully recover"... push ebx ; lpString call ds:lstrlenA inc eax lea ecx, [ebp+var_2] push eax mov [ebp+var_C], eax push 2800Ch push ecx push [ebp+var_8] call sub_7F818B75 cmp eax, esi mov edi, eax jnz short loc_7F81EF4E push [ebp+var_C] push ebx push esi lea ecx, [ebp+var_2] push ecx push [ebp+var_8] call sub_7F818DC7 mov edi, eax jmp short loc_7F81EF4E ; --------------------------------------------------------------------------- loc_7F81EF49: ; CODE XREF: sub_7F81EB89+BEj ; sub_7F81EB89+CDj ... mov edi, 1001h loc_7F81EF4E: ; CODE XREF: sub_7F81EB89+23j ; sub_7F81EB89+43j ... cmp [ebp+var_8], 0 jz short loc_7F81EF76 lea ecx, [ebp+var_8] cmp edi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C test eax, eax jz short loc_7F81EF76 mov edi, eax push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F81EF76: ; CODE XREF: sub_7F81EB89+3C9j ; sub_7F81EB89+3DEj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F81EB89 endp ; =============== S U B R O U T I N E ======================================= sub_7F81EF81 proc near ; CODE XREF: sub_7F81EF87+3p mov eax, offset byte_7F836B58 retn sub_7F81EF81 endp ; =============== S U B R O U T I N E ======================================= sub_7F81EF87 proc near ; CODE XREF: sub_7F814EF3+90p push ebx push esi push edi call sub_7F81EF81 mov edi, offset byte_7F836B58 mov ecx, 40h mov dword_7F833F1C, eax xor eax, eax rep stosd or byte_7F836B61, 8 or byte_7F836B62, 8 or byte_7F836B65, 8 or byte_7F836B78, 8 or byte_7F836BF8, 8 xor ebx, ebx loc_7F81EFC7: ; CODE XREF: sub_7F81EF87+8Bj push ebx ; ch call ds:IsCharAlphaA test eax, eax jz short loc_7F81EFF9 lea esi, byte_7F836B58[ebx] push ebx ; ch or byte ptr [esi], 1 call ds:IsCharUpperA test eax, eax jz short loc_7F81EFE9 or byte ptr [esi], 20h loc_7F81EFE9: ; CODE XREF: sub_7F81EF87+5Dj push ebx ; ch call ds:IsCharLowerA test eax, eax jz short loc_7F81F00B or byte ptr [esi], 40h jmp short loc_7F81F00B ; --------------------------------------------------------------------------- loc_7F81EFF9: ; CODE XREF: sub_7F81EF87+49j push ebx ; ch call ds:IsCharAlphaNumericA test eax, eax jz short loc_7F81F00B or byte_7F836B58[ebx], 2 loc_7F81F00B: ; CODE XREF: sub_7F81EF87+6Bj ; sub_7F81EF87+70j ... inc ebx cmp ebx, 100h jl short loc_7F81EFC7 mov eax, 41h loc_7F81F019: ; CODE XREF: sub_7F81EF87+9Dj or byte_7F836B58[eax], 4 inc eax cmp eax, 46h jle short loc_7F81F019 mov eax, 61h loc_7F81F02B: ; CODE XREF: sub_7F81EF87+AFj or byte_7F836B58[eax], 4 inc eax cmp eax, 66h jle short loc_7F81F02B mov eax, 30h loc_7F81F03D: ; CODE XREF: sub_7F81EF87+C1j or byte_7F836B58[eax], 4 inc eax cmp eax, 39h jle short loc_7F81F03D xor eax, eax loc_7F81F04C: ; CODE XREF: sub_7F81EF87+D0j or byte_7F836B58[eax], 90h inc eax cmp eax, 20h jl short loc_7F81F04C or byte_7F836BD7, 90h mov eax, 21h loc_7F81F065: ; CODE XREF: sub_7F81EF87+E9j or byte_7F836B58[eax], 80h inc eax cmp eax, 30h jl short loc_7F81F065 mov eax, 3Ah loc_7F81F077: ; CODE XREF: sub_7F81EF87+FBj or byte_7F836B58[eax], 80h inc eax cmp eax, 41h jl short loc_7F81F077 mov eax, 5Bh loc_7F81F089: ; CODE XREF: sub_7F81EF87+10Dj or byte_7F836B58[eax], 80h inc eax cmp eax, 61h jl short loc_7F81F089 mov eax, 7Bh loc_7F81F09B: ; CODE XREF: sub_7F81EF87+11Fj or byte_7F836B58[eax], 80h inc eax cmp eax, 7Fh jl short loc_7F81F09B pop edi pop esi pop ebx retn sub_7F81EF87 endp ; =============== S U B R O U T I N E ======================================= sub_7F81F0AC proc near ; CODE XREF: sub_7F8207A6+39Bp arg_0 = dword ptr 4 push ebx push esi push edi call sub_7F82449E mov esi, eax push 1Bh ; vKey call ds:GetAsyncKeyState mov edi, [esp+0Ch+arg_0] push 9 push 0 push edi call sub_7F82A93C test eax, eax jnz short loc_7F81F0DA mov eax, 101Eh jmp loc_7F81F209 ; --------------------------------------------------------------------------- loc_7F81F0DA: ; CODE XREF: sub_7F81F0AC+22j mov dword_7F836C58, 0FFFFFFFFh cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F81F121 mov eax, [edi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edi xor eax, eax loc_7F81F121: ; CODE XREF: sub_7F81F0AC+44j test eax, eax jnz loc_7F81F209 mov eax, dword_7F838078 mov ebx, [eax+270h] mov dword_7F838098, 0 mov dword_7F83809C, ebx loc_7F81F144: ; CODE XREF: sub_7F81F0AC+11Aj push 1Bh ; vKey call ds:GetAsyncKeyState test ax, 8001h jz short loc_7F81F166 mov edi, 101Eh lea ecx, [esi+18h] mov eax, [ecx] or al, 2 mov [ecx], eax or al, 4 mov [ecx], eax jmp short loc_7F81F16D ; --------------------------------------------------------------------------- loc_7F81F166: ; CODE XREF: sub_7F81F0AC+A4j call sub_7F81F3EF mov edi, eax loc_7F81F16D: ; CODE XREF: sub_7F81F0AC+B8j test edi, edi jnz short loc_7F81F1CC mov eax, dword_7F838078 mov eax, [eax+270h] cmp ebx, eax jbe short loc_7F81F1C4 cmp dword_7F83809C, 0 jbe short loc_7F81F1AB sub ebx, eax push 64h sub edx, edx add dword_7F838098, ebx mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA jmp short loc_7F81F1B0 ; --------------------------------------------------------------------------- loc_7F81F1AB: ; CODE XREF: sub_7F81F0AC+DBj mov eax, 1 loc_7F81F1B0: ; CODE XREF: sub_7F81F0AC+FDj test eax, eax jnz short loc_7F81F1B9 mov edi, 101Eh loc_7F81F1B9: ; CODE XREF: sub_7F81F0AC+106j mov eax, dword_7F838078 mov ebx, [eax+270h] loc_7F81F1C4: ; CODE XREF: sub_7F81F0AC+D2j test edi, edi jz loc_7F81F144 loc_7F81F1CC: ; CODE XREF: sub_7F81F0AC+C3j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81F1E2 call sub_7F82A34F jmp short loc_7F81F1F0 ; --------------------------------------------------------------------------- loc_7F81F1E2: ; CODE XREF: sub_7F81F0AC+12Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81F1F0: ; CODE XREF: sub_7F81F0AC+134j xor esi, esi mov dword_7F838078, esi call sub_7F82AB0B cmp edi, 1019h jnz short loc_7F81F207 xor edi, edi loc_7F81F207: ; CODE XREF: sub_7F81F0AC+157j mov eax, edi loc_7F81F209: ; CODE XREF: sub_7F81F0AC+29j ; sub_7F81F0AC+77j pop edi pop esi pop ebx retn 4 sub_7F81F0AC endp ; =============== S U B R O U T I N E ======================================= sub_7F81F20F proc near ; DATA XREF: sub_7F81217E+126o arg_0 = dword ptr 4 push ebx push esi mov ebx, [esp+8+arg_0] push edi push ebp mov esi, [ebx] mov ebp, [esi] call sub_7F816000 test eax, eax jnz loc_7F81F3E3 lea edi, [ebp+264h] mov ax, [edi] test ah, 2 jz short loc_7F81F24B or ah, 20h push 0 mov [edi], ax push dword ptr [esi+1Ch] call sub_7F8161D3 jmp loc_7F81F3E3 ; --------------------------------------------------------------------------- loc_7F81F24B: ; CODE XREF: sub_7F81F20F+25j call sub_7F8168ED mov dword_7F836C58, eax test byte ptr [edi+1], 4 jz short loc_7F81F29F cmp [ebp+278h], eax ja short loc_7F81F286 cmp dword_7F83588C, 0 jz short loc_7F81F286 push 0 ; lpdwProcessId call ds:GetActiveWindow push eax ; hWnd call ds:GetWindowThreadProcessId push eax call dword_7F83588C test eax, eax jz short loc_7F81F2E3 loc_7F81F286: ; CODE XREF: sub_7F81F20F+52j ; sub_7F81F20F+5Bj push 8 xor eax, eax push eax push 64h push eax push eax push eax push dword ptr [esi+1Ch] call sub_7F81635D and word ptr [edi], 0FBFFh jmp short loc_7F81F2E3 ; --------------------------------------------------------------------------- loc_7F81F29F: ; CODE XREF: sub_7F81F20F+4Aj mov eax, dword_7F836C58 cmp [ebp+278h], eax ja short loc_7F81F2E3 xor ebp, ebp cmp dword_7F83588C, ebp jz short loc_7F81F2E3 push ebp ; lpdwProcessId call ds:GetActiveWindow push eax ; hWnd call ds:GetWindowThreadProcessId push eax call dword_7F83588C test eax, eax jnz short loc_7F81F2E3 push 8 push ebp push 0Ah push ebp push ebp push ebp push dword ptr [esi+1Ch] call sub_7F81635D or byte ptr [edi+1], 4 loc_7F81F2E3: ; CODE XREF: sub_7F81F20F+75j ; sub_7F81F20F+8Ej ... cmp dword_7F836C58, 0C8h jbe loc_7F81F3E3 cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F81F330 mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx xor eax, eax loc_7F81F330: ; CODE XREF: sub_7F81F20F+F0j test eax, eax jnz loc_7F81F3E3 call sub_7F81F3EF mov ebx, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F81F355 call sub_7F82A34F jmp short loc_7F81F363 ; --------------------------------------------------------------------------- loc_7F81F355: ; CODE XREF: sub_7F81F20F+13Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F81F363: ; CODE XREF: sub_7F81F20F+144j xor eax, eax test ebx, ebx mov dword_7F838078, eax jz short loc_7F81F3A6 cmp ebx, 1019h jnz short loc_7F81F385 or byte ptr [edi+1], 20h push eax push dword ptr [esi+1Ch] call sub_7F8161D3 jmp short loc_7F81F3E3 ; --------------------------------------------------------------------------- loc_7F81F385: ; CODE XREF: sub_7F81F20F+165j push 8 xor eax, eax push eax push 1770h push eax push eax push eax push dword ptr [esi+1Ch] call sub_7F81635D mov dword_7F836C5C, 1 jmp short loc_7F81F3E3 ; --------------------------------------------------------------------------- loc_7F81F3A6: ; CODE XREF: sub_7F81F20F+15Dj xor ebx, ebx cmp dword_7F836C5C, ebx jz short loc_7F81F3C6 push 8 push ebx push 64h push ebx push ebx push ebx push dword ptr [esi+1Ch] call sub_7F81635D mov dword_7F836C5C, ebx loc_7F81F3C6: ; CODE XREF: sub_7F81F20F+19Fj test byte ptr [edi+1], 20h jz short loc_7F81F3E3 push 8 xor eax, eax push eax push 64h push eax push eax push eax push dword ptr [esi+1Ch] call sub_7F81635D and word ptr [edi], 0DFFFh loc_7F81F3E3: ; CODE XREF: sub_7F81F20F+13j ; sub_7F81F20F+37j ... mov eax, 1 pop ebp pop edi pop esi pop ebx retn 8 sub_7F81F20F endp ; =============== S U B R O U T I N E ======================================= sub_7F81F3EF proc near ; CODE XREF: sub_7F81F0AC:loc_7F81F166p ; sub_7F81F20F+129p push esi mov eax, dword_7F838078 movzx eax, word ptr [eax+21Ch] xor esi, esi test eax, eax jz short loc_7F81F41D cmp eax, 1 jz short loc_7F81F424 cmp eax, 2 jz short loc_7F81F42B cmp eax, 3 jz short loc_7F81F432 cmp eax, 4 jz short loc_7F81F439 cmp eax, 6 jz short loc_7F81F440 jmp short loc_7F81F44B ; --------------------------------------------------------------------------- loc_7F81F41D: ; CODE XREF: sub_7F81F3EF+11j call sub_7F81F44F jmp short loc_7F81F449 ; --------------------------------------------------------------------------- loc_7F81F424: ; CODE XREF: sub_7F81F3EF+16j call sub_7F81F5A7 jmp short loc_7F81F449 ; --------------------------------------------------------------------------- loc_7F81F42B: ; CODE XREF: sub_7F81F3EF+1Bj call sub_7F81F71E jmp short loc_7F81F44B ; --------------------------------------------------------------------------- loc_7F81F432: ; CODE XREF: sub_7F81F3EF+20j call sub_7F81FA56 jmp short loc_7F81F449 ; --------------------------------------------------------------------------- loc_7F81F439: ; CODE XREF: sub_7F81F3EF+25j call sub_7F81F84F jmp short loc_7F81F449 ; --------------------------------------------------------------------------- loc_7F81F440: ; CODE XREF: sub_7F81F3EF+2Aj push 0 push 0 call sub_7F813C77 loc_7F81F449: ; CODE XREF: sub_7F81F3EF+33j ; sub_7F81F3EF+3Aj ... mov esi, eax loc_7F81F44B: ; CODE XREF: sub_7F81F3EF+2Cj ; sub_7F81F3EF+41j mov eax, esi pop esi retn sub_7F81F3EF endp ; =============== S U B R O U T I N E ======================================= sub_7F81F44F proc near ; CODE XREF: sub_7F81F3EF:loc_7F81F41Dp push ebx mov eax, dword_7F838078 push esi push edi xor esi, esi mov edi, [eax+270h] mov ebx, [eax+200h] sub edx, edx mov eax, edi mov ecx, dword_7F838078 imul eax, 64h div dword ptr [ebx+4] cmp ax, [ecx+276h] jge short loc_7F81F48A cmp [ecx+280h], edi ja loc_7F81F583 loc_7F81F48A: ; CODE XREF: sub_7F81F44F+2Dj cmp word ptr [ebx+0Ch], 0 jz loc_7F81F583 xor cx, cx loc_7F81F498: ; CODE XREF: sub_7F81F44F+11Cj mov eax, dword_7F838078 inc word ptr [eax+228h] mov edi, dword_7F838078 add edi, 228h mov dx, [edi] cmp dx, 1 jb short loc_7F81F4CA mov eax, dword_7F838078 mov ebx, [eax+200h] cmp [ebx+8], dx ja short loc_7F81F4CF loc_7F81F4CA: ; CODE XREF: sub_7F81F44F+68j mov word ptr [edi], 1 loc_7F81F4CF: ; CODE XREF: sub_7F81F44F+79j mov eax, dword_7F838078 mov dx, [eax+228h] cmp dx, 1 jb short loc_7F81F51F mov ebx, [eax+200h] cmp [ebx+8], dx jbe short loc_7F81F51F mov ax, dx shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov eax, [ebx] mov ebx, [edi+eax] xor edi, edi mov di, dx and edi, 0FFh shl edi, 5 add edi, ebx jmp short loc_7F81F521 ; --------------------------------------------------------------------------- loc_7F81F51F: ; CODE XREF: sub_7F81F44F+90j ; sub_7F81F44F+9Cj xor edi, edi loc_7F81F521: ; CODE XREF: sub_7F81F44F+CEj mov ax, [edi+10h] test al, 10h jnz short loc_7F81F564 mov dl, [edi+4] cmp dl, 8Ch jz short loc_7F81F564 test ah, 80h jnz short loc_7F81F54C cmp dl, 8Ch jz short loc_7F81F54C mov eax, [edi+14h] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F81F54F ; --------------------------------------------------------------------------- loc_7F81F54C: ; CODE XREF: sub_7F81F44F+E5j ; sub_7F81F44F+EAj mov eax, [edi+14h] loc_7F81F54F: ; CODE XREF: sub_7F81F44F+FBj mov edx, [edi+18h] add edx, eax mov eax, dword_7F838078 mov ebx, [eax+200h] cmp edx, [ebx+4] jz short loc_7F81F573 loc_7F81F564: ; CODE XREF: sub_7F81F44F+D8j ; sub_7F81F44F+E0j inc cx cmp cx, 400h jb loc_7F81F498 jmp short loc_7F81F5A1 ; --------------------------------------------------------------------------- loc_7F81F573: ; CODE XREF: sub_7F81F44F+113j mov eax, dword_7F838078 mov word ptr [eax+21Ch], 1 jmp short loc_7F81F5A1 ; --------------------------------------------------------------------------- loc_7F81F583: ; CODE XREF: sub_7F81F44F+35j ; sub_7F81F44F+40j mov eax, dword_7F838078 cmp word ptr [eax+214h], 0 jbe short loc_7F81F59C push 0 push eax call sub_7F82A8C1 jmp short loc_7F81F5A1 ; --------------------------------------------------------------------------- loc_7F81F59C: ; CODE XREF: sub_7F81F44F+141j mov esi, 1019h loc_7F81F5A1: ; CODE XREF: sub_7F81F44F+122j ; sub_7F81F44F+132j ... mov eax, esi pop edi pop esi pop ebx retn sub_7F81F44F endp ; =============== S U B R O U T I N E ======================================= sub_7F81F5A7 proc near ; CODE XREF: sub_7F81F3EF:loc_7F81F424p push ebx mov eax, dword_7F838078 mov cx, [eax+228h] push esi push edi xor esi, esi cmp cx, 1 push ebp jb loc_7F81F684 mov edx, [eax+200h] mov ax, [edx+8] cmp ax, cx jbe loc_7F81F684 cmp cx, 1 jb short loc_7F81F614 cmp ax, cx jbe short loc_7F81F614 mov ax, cx shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov ebp, [ebx] mov eax, [edi+ebp] xor edi, edi mov di, cx and edi, 0FFh shl edi, 5 lea ecx, [eax+edi] jmp short loc_7F81F616 ; --------------------------------------------------------------------------- loc_7F81F614: ; CODE XREF: sub_7F81F5A7+33j ; sub_7F81F5A7+38j xor ecx, ecx loc_7F81F616: ; CODE XREF: sub_7F81F5A7+6Bj test ecx, ecx jz short loc_7F81F684 mov di, [ecx+10h] test di, 10h jnz short loc_7F81F684 mov ax, di and ax, 8000h jnz short loc_7F81F648 cmp byte ptr [ecx+4], 8Ch jz short loc_7F81F648 mov ebx, [ecx+14h] and ebx, 7FFFFFFFh add ebx, 87h and bl, 80h jmp short loc_7F81F64B ; --------------------------------------------------------------------------- loc_7F81F648: ; CODE XREF: sub_7F81F5A7+85j ; sub_7F81F5A7+8Bj mov ebx, [ecx+14h] loc_7F81F64B: ; CODE XREF: sub_7F81F5A7+9Fj mov ebp, [ecx+18h] add ebp, ebx cmp ebp, [edx+4] jnz short loc_7F81F684 test ax, ax jnz short loc_7F81F666 push ecx push 0 call sub_7F82021B mov esi, eax jmp short loc_7F81F692 ; --------------------------------------------------------------------------- loc_7F81F666: ; CODE XREF: sub_7F81F5A7+B1j test di, 4000h jz short loc_7F81F67C push 0 mov eax, dword_7F838078 push eax call sub_7F82A8C1 jmp short loc_7F81F692 ; --------------------------------------------------------------------------- loc_7F81F67C: ; CODE XREF: sub_7F81F5A7+C4j push ecx call sub_7F81F699 jmp short loc_7F81F692 ; --------------------------------------------------------------------------- loc_7F81F684: ; CODE XREF: sub_7F81F5A7+16j ; sub_7F81F5A7+29j ... mov eax, dword_7F838078 mov word ptr [eax+21Ch], 0 loc_7F81F692: ; CODE XREF: sub_7F81F5A7+BDj ; sub_7F81F5A7+D3j ... mov eax, esi pop ebp pop edi pop esi pop ebx retn sub_7F81F5A7 endp ; =============== S U B R O U T I N E ======================================= sub_7F81F699 proc near ; CODE XREF: sub_7F81F5A7+D6p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push esi call sub_7F8131F6 test eax, eax jz short loc_7F81F700 test byte ptr [esi+11h], 80h jnz short loc_7F81F6D6 cmp byte ptr [esi+4], 8Ch jz short loc_7F81F6D6 mov eax, dword_7F838078 mov ecx, [esi+14h] and ecx, 7FFFFFFFh mov edx, [eax+200h] add ecx, 87h and cl, 80h sub [edx+4], ecx jmp short loc_7F81F6E7 ; --------------------------------------------------------------------------- loc_7F81F6D6: ; CODE XREF: sub_7F81F699+13j ; sub_7F81F699+19j mov eax, dword_7F838078 mov edx, [esi+14h] mov ecx, [eax+200h] sub [ecx+4], edx loc_7F81F6E7: ; CODE XREF: sub_7F81F699+3Bj mov eax, dword_7F838078 mov ax, [eax+228h] push eax call sub_7F813BE4 push 0 call sub_7F812C72 loc_7F81F700: ; CODE XREF: sub_7F81F699+Dj mov eax, dword_7F838078 xor ecx, ecx mov [eax+228h], cx pop esi mov eax, dword_7F838078 mov [eax+21Ch], cx retn 4 sub_7F81F699 endp ; =============== S U B R O U T I N E ======================================= sub_7F81F71E proc near ; CODE XREF: sub_7F81F3EF:loc_7F81F42Bp push ebx mov eax, dword_7F838078 cmp word ptr [eax+238h], 0 push esi push edi jnz loc_7F81F846 mov cx, [eax+228h] cmp cx, 1 jb loc_7F81F846 mov edx, [eax+200h] mov ax, [edx+8] cmp ax, cx jbe loc_7F81F846 cmp cx, 1 jb short loc_7F81F796 cmp ax, cx jbe short loc_7F81F796 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov esi, [ebx] mov eax, [edx+esi] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 lea esi, [eax+edx] jmp short loc_7F81F798 ; --------------------------------------------------------------------------- loc_7F81F796: ; CODE XREF: sub_7F81F71E+3Ej ; sub_7F81F71E+43j xor esi, esi loc_7F81F798: ; CODE XREF: sub_7F81F71E+76j xor edi, edi test esi, esi jz loc_7F81F846 mov ax, [esi+10h] test ah, 20h jz loc_7F81F846 test al, 10h jnz loc_7F81F846 mov ecx, dword_7F838078 mov edx, [ecx+230h] add [ecx+234h], edx mov ecx, [esi+14h] and ecx, 7FFFFFFFh mov eax, dword_7F838078 sub ecx, [eax+234h] mov [eax+230h], ecx mov edx, dword_7F838078 add edx, 230h mov ecx, [edx] test ecx, ecx jnz short loc_7F81F826 push edi mov eax, dword_7F838078 push dword ptr [eax+224h] call sub_7F8144A4 mov ebx, eax test ebx, ebx jz short loc_7F81F846 push ebx call sub_7F8142DB mov eax, dword_7F838078 push ebx push esi mov [eax+224h], edi call sub_7F820544 jmp short loc_7F81F84B ; --------------------------------------------------------------------------- loc_7F81F826: ; CODE XREF: sub_7F81F71E+D5j mov eax, 800h cmp ecx, eax jbe short loc_7F81F831 mov [edx], eax loc_7F81F831: ; CODE XREF: sub_7F81F71E+10Fj mov eax, dword_7F838078 mov word ptr [eax+21Ch], 5 call sub_7F81F8AE jmp short loc_7F81F84B ; --------------------------------------------------------------------------- loc_7F81F846: ; CODE XREF: sub_7F81F71E+10j ; sub_7F81F71E+21j ... call sub_7F82063C loc_7F81F84B: ; CODE XREF: sub_7F81F71E+106j ; sub_7F81F71E+126j pop edi pop esi pop ebx retn sub_7F81F71E endp ; =============== S U B R O U T I N E ======================================= sub_7F81F84F proc near ; CODE XREF: sub_7F81F3EF:loc_7F81F439p push esi mov eax, dword_7F838078 xor esi, esi push esi push dword ptr [eax+224h] call sub_7F8144A4 test eax, eax jnz short loc_7F81F882 mov eax, dword_7F838078 mov [eax+224h], esi mov eax, dword_7F838078 mov word ptr [eax+21Ch], 3 jmp short loc_7F81F8AA ; --------------------------------------------------------------------------- loc_7F81F882: ; CODE XREF: sub_7F81F84F+16j test byte ptr [eax+11h], 40h jnz short loc_7F81F89D mov eax, dword_7F838078 mov word ptr [eax+21Ch], 5 call sub_7F81F8AE jmp short loc_7F81F8AA ; --------------------------------------------------------------------------- loc_7F81F89D: ; CODE XREF: sub_7F81F84F+37j push 0 mov eax, dword_7F838078 push eax call sub_7F82A8C1 loc_7F81F8AA: ; CODE XREF: sub_7F81F84F+31j ; sub_7F81F84F+4Cj xor eax, eax pop esi retn sub_7F81F84F endp ; =============== S U B R O U T I N E ======================================= sub_7F81F8AE proc near ; CODE XREF: sub_7F81F71E+121p ; sub_7F81F84F+47p ... nNumberOfBytesToRead= dword ptr -4 sub esp, 4 mov eax, dword_7F838078 mov cx, [eax+228h] push ebx cmp cx, 1 push esi push edi push ebp jb loc_7F81FA2D mov edx, [eax+200h] mov ax, [edx+8] cmp ax, cx jbe loc_7F81FA2D cmp cx, 1 jb short loc_7F81F91C cmp ax, cx jbe short loc_7F81F91C mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov ebp, [ebx] mov eax, [edx+ebp] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 lea edi, [eax+edx] jmp short loc_7F81F91E ; --------------------------------------------------------------------------- loc_7F81F91C: ; CODE XREF: sub_7F81F8AE+34j ; sub_7F81F8AE+39j xor edi, edi loc_7F81F91E: ; CODE XREF: sub_7F81F8AE+6Cj mov eax, dword_7F838078 cmp word ptr [eax+21Ch], 5 jz short loc_7F81F94F mov ecx, eax mov eax, 2002h mov [ecx+238h], ax mov ecx, dword_7F838078 mov word ptr [ecx+21Ch], 2 jmp loc_7F81FA4E ; --------------------------------------------------------------------------- loc_7F81F94F: ; CODE XREF: sub_7F81F8AE+7Dj test byte ptr [edi+11h], 20h jz loc_7F81FA2D push 0 mov eax, dword_7F838078 push dword ptr [eax+224h] call sub_7F8144A4 mov ebp, eax test ebp, ebp jnz short loc_7F81F97B mov esi, 1001h jmp loc_7F81FA32 ; --------------------------------------------------------------------------- loc_7F81F97B: ; CODE XREF: sub_7F81F8AE+C1j mov eax, dword_7F838078 cmp dword_7F836760, 0 mov ecx, [eax+230h] mov [esp+14h+nNumberOfBytesToRead], ecx mov ebx, [eax+234h] jz short loc_7F81F9A0 mov eax, dword_7F836760 inc byte ptr [eax] loc_7F81F9A0: ; CODE XREF: sub_7F81F8AE+E9j lea eax, [esp+14h+nNumberOfBytesToRead] push eax ; int push lpBuffer ; lpBuffer push ebx ; int push edi ; int call sub_7F814E39 cmp eax, 1002h mov esi, eax jnz short loc_7F81F9C8 mov eax, [esp+14h+nNumberOfBytesToRead] add eax, ebx cmp eax, [edi+14h] jnz short loc_7F81F9C8 xor esi, esi loc_7F81F9C8: ; CODE XREF: sub_7F81F8AE+10Bj ; sub_7F81F8AE+116j test esi, esi jnz short loc_7F81F9DF push [esp+14h+nNumberOfBytesToRead] ; nNumberOfBytesToRead push lpBuffer ; int push ebx ; int push ebp ; int call sub_7F814D6E mov esi, eax loc_7F81F9DF: ; CODE XREF: sub_7F81F8AE+11Cj cmp dword_7F836760, 0 jz short loc_7F81F9EF mov eax, dword_7F836760 dec byte ptr [eax] loc_7F81F9EF: ; CODE XREF: sub_7F81F8AE+138j test esi, esi jnz short loc_7F81FA32 cmp dword_7F838080, 0 jnz short loc_7F81FA07 call sub_7F82A588 mov esi, eax test esi, esi jnz short loc_7F81FA32 loc_7F81FA07: ; CODE XREF: sub_7F81F8AE+14Cj test byte ptr word_7F838084, 4 jz short loc_7F81FA15 call nullsub_1 loc_7F81FA15: ; CODE XREF: sub_7F81F8AE+160j test byte ptr word_7F838084, 2 jz short loc_7F81FA32 mov eax, dword_7F838080 push eax call sub_7F82A7F5 mov esi, eax jmp short loc_7F81FA32 ; --------------------------------------------------------------------------- loc_7F81FA2D: ; CODE XREF: sub_7F81F8AE+17j ; sub_7F81F8AE+2Aj ... mov esi, 2003h loc_7F81FA32: ; CODE XREF: sub_7F81F8AE+C8j ; sub_7F81F8AE+143j ... mov eax, dword_7F838078 mov [eax+238h], si mov eax, dword_7F838078 mov word ptr [eax+21Ch], 2 mov eax, esi loc_7F81FA4E: ; CODE XREF: sub_7F81F8AE+9Cj pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F81F8AE endp ; =============== S U B R O U T I N E ======================================= sub_7F81FA56 proc near ; CODE XREF: sub_7F81F3EF:loc_7F81F432p var_4 = dword ptr -4 sub esp, 4 push ebx push esi push edi xor esi, esi push ebp xor edi, edi xor ebx, ebx call sub_7F81FC85 test eax, eax jnz short loc_7F81FA73 xor eax, eax jmp loc_7F81FC7D ; --------------------------------------------------------------------------- loc_7F81FA73: ; CODE XREF: sub_7F81FA56+14j mov eax, dword_7F838078 mov eax, [eax+220h] test eax, eax jz short loc_7F81FA96 push 0 push eax call sub_7F8144A4 mov esi, eax test esi, esi jz short loc_7F81FA96 push esi call sub_7F8142DB loc_7F81FA96: ; CODE XREF: sub_7F81FA56+2Aj ; sub_7F81FA56+38j mov eax, dword_7F838078 xor ebp, ebp test esi, esi mov [eax+220h], ebp jnz short loc_7F81FAB9 call sub_7F81FEB2 mov esi, eax test esi, esi jnz short loc_7F81FAB9 push ebp push ebp jmp loc_7F81FC76 ; --------------------------------------------------------------------------- loc_7F81FAB9: ; CODE XREF: sub_7F81FA56+4Fj ; sub_7F81FA56+5Aj mov ecx, dword_7F838078 mov eax, dword_7F836C58 cmp [ecx+278h], eax jbe short loc_7F81FAD3 push 0 jmp loc_7F81FC75 ; --------------------------------------------------------------------------- loc_7F81FAD3: ; CODE XREF: sub_7F81FA56+74j mov eax, dword_7F838078 mov cx, [eax+228h] test cx, cx jnz short loc_7F81FB1E test byte ptr [esi+11h], 80h jnz short loc_7F81FB01 cmp byte ptr [esi+4], 8Ch jz short loc_7F81FB01 mov eax, [esi+14h] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F81FB04 ; --------------------------------------------------------------------------- loc_7F81FB01: ; CODE XREF: sub_7F81FA56+92j ; sub_7F81FA56+98j mov eax, [esi+14h] loc_7F81FB04: ; CODE XREF: sub_7F81FA56+A9j mov edx, dword_7F838078 cmp [edx+22Ch], eax ja short loc_7F81FB19 push 0 jmp loc_7F81FC75 ; --------------------------------------------------------------------------- loc_7F81FB19: ; CODE XREF: sub_7F81FA56+BAj test cx, cx jz short loc_7F81FB93 loc_7F81FB1E: ; CODE XREF: sub_7F81FA56+8Cj cmp cx, 1 jb short loc_7F81FB8C mov eax, dword_7F838078 mov edx, [eax+200h] mov ax, [edx+8] cmp ax, cx jbe short loc_7F81FB8C cmp cx, 1 jb short loc_7F81FB76 cmp ax, cx jbe short loc_7F81FB76 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov ebp, [ebx] mov eax, [edx+ebp] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 lea ebx, [eax+edx] jmp short loc_7F81FB78 ; --------------------------------------------------------------------------- loc_7F81FB76: ; CODE XREF: sub_7F81FA56+E6j ; sub_7F81FA56+EBj xor ebx, ebx loc_7F81FB78: ; CODE XREF: sub_7F81FA56+11Ej mov ax, [ebx+10h] test ah, 20h jz short loc_7F81FB85 test al, 10h jz short loc_7F81FB93 loc_7F81FB85: ; CODE XREF: sub_7F81FA56+129j push 0 jmp loc_7F81FC75 ; --------------------------------------------------------------------------- loc_7F81FB8C: ; CODE XREF: sub_7F81FA56+CCj ; sub_7F81FA56+E0j push 0 jmp loc_7F81FC75 ; --------------------------------------------------------------------------- loc_7F81FB93: ; CODE XREF: sub_7F81FA56+C6j ; sub_7F81FA56+12Dj test ebx, ebx jnz short loc_7F81FC14 push esi call sub_7F81FF95 mov ebx, eax test ebx, ebx jnz short loc_7F81FBC3 push 1 push esi call sub_7F8204F5 push esi call sub_7F812F73 mov ecx, dword_7F838078 mov [ecx+228h], ax jmp loc_7F81FC7B ; --------------------------------------------------------------------------- loc_7F81FBC3: ; CODE XREF: sub_7F81FA56+14Bj cmp byte ptr [ebx+4], 8Fh jnz short loc_7F81FC14 mov eax, dword_7F838078 xor ebp, ebp add eax, 220h push eax push ebp push ebp push ebp push esi call sub_7F82046B push ebx call sub_7F8131F6 sub dword ptr [ebx+14h], 8 and word ptr [ebx+10h], 7FFFh mov eax, dword_7F838078 add eax, 224h push eax push ebp push ebp push ebp push ebx call sub_7F82046B mov ecx, dword_7F838078 mov word ptr [ecx+21Ch], 3 jmp short loc_7F81FC7B ; --------------------------------------------------------------------------- loc_7F81FC14: ; CODE XREF: sub_7F81FA56+13Fj ; sub_7F81FA56+171j lea eax, [esp+14h+var_4] push eax push ebx push esi call sub_7F82011E mov edi, eax test edi, edi jnz short loc_7F81FC43 push ebx mov edi, 0 push [esp+18h+var_4] call sub_7F82021B cmp eax, 1 adc edi, 0FFFFFFFFh and edi, 1019h jz short loc_7F81FC7B loc_7F81FC43: ; CODE XREF: sub_7F81FA56+1CEj mov eax, dword_7F838078 mov eax, [eax+220h] test eax, eax jz short loc_7F81FC66 push 0 push eax call sub_7F8144A4 mov esi, eax test esi, esi jz short loc_7F81FC66 push esi call sub_7F8142DB loc_7F81FC66: ; CODE XREF: sub_7F81FA56+1FAj ; sub_7F81FA56+208j mov ecx, dword_7F838078 xor eax, eax push eax mov [ecx+220h], eax loc_7F81FC75: ; CODE XREF: sub_7F81FA56+78j ; sub_7F81FA56+BEj ... push esi loc_7F81FC76: ; CODE XREF: sub_7F81FA56+5Ej call sub_7F8204F5 loc_7F81FC7B: ; CODE XREF: sub_7F81FA56+168j ; sub_7F81FA56+1BCj ... mov eax, edi loc_7F81FC7D: ; CODE XREF: sub_7F81FA56+18j pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F81FA56 endp ; =============== S U B R O U T I N E ======================================= sub_7F81FC85 proc near ; CODE XREF: sub_7F81FA56+Dp push ebx mov eax, dword_7F838078 push esi push edi xor edi, edi xor esi, esi mov eax, [eax+220h] test eax, eax jz short loc_7F81FCB3 push esi push eax call sub_7F8144A4 cmp eax, esi mov edi, eax jnz short loc_7F81FCB3 mov eax, dword_7F838078 mov [eax+220h], esi loc_7F81FCB3: ; CODE XREF: sub_7F81FC85+14j ; sub_7F81FC85+21j mov eax, dword_7F838078 xor ebx, ebx mov eax, [eax+224h] test eax, eax jz short loc_7F81FCDC push ebx push eax call sub_7F8144A4 cmp eax, ebx mov esi, eax jnz short loc_7F81FCDC mov eax, dword_7F838078 mov [eax+224h], ebx loc_7F81FCDC: ; CODE XREF: sub_7F81FC85+3Dj ; sub_7F81FC85+4Aj test edi, edi jz loc_7F81FD78 test esi, esi jz loc_7F81FE86 mov ax, [edi+10h] test ah, 80h jnz short loc_7F81FD11 cmp byte ptr [edi+4], 8Ch jz short loc_7F81FD11 lea ecx, [edi+14h] mov edx, [ecx] and edx, 7FFFFFFFh add edx, 87h and dl, 80h jmp short loc_7F81FD16 ; --------------------------------------------------------------------------- loc_7F81FD11: ; CODE XREF: sub_7F81FC85+6Ej ; sub_7F81FC85+74j lea ecx, [edi+14h] mov edx, [ecx] loc_7F81FD16: ; CODE XREF: sub_7F81FC85+8Aj mov ebx, [edi+18h] add ebx, edx cmp ebx, [esi+18h] jnz short loc_7F81FD78 test ah, 40h jnz short loc_7F81FDA2 mov ax, [esi+10h] test ah, 40h jnz short loc_7F81FDA2 test ah, 80h jnz short loc_7F81FD4A cmp byte ptr [esi+4], 8Ch jz short loc_7F81FD4A mov eax, [esi+14h] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F81FD4D ; --------------------------------------------------------------------------- loc_7F81FD4A: ; CODE XREF: sub_7F81FC85+ACj ; sub_7F81FC85+B2j mov eax, [esi+14h] loc_7F81FD4D: ; CODE XREF: sub_7F81FC85+C3j push edi add [ecx], eax call sub_7F8148F7 mov eax, dword_7F838078 push esi mov dword ptr [eax+224h], 0 call sub_7F8142DB push esi call sub_7F812F73 push eax xor esi, esi call sub_7F813BE4 loc_7F81FD78: ; CODE XREF: sub_7F81FC85+59j ; sub_7F81FC85+99j test esi, esi jz loc_7F81FE86 mov cx, [esi+10h] test ch, 80h jnz short loc_7F81FDC4 cmp byte ptr [esi+4], 8Ch jz short loc_7F81FDC4 lea edi, [esi+14h] mov eax, [edi] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F81FDC9 ; --------------------------------------------------------------------------- loc_7F81FDA2: ; CODE XREF: sub_7F81FC85+9Ej ; sub_7F81FC85+A7j mov eax, dword_7F838078 push 0 mov word ptr [eax+21Ch], 3 mov eax, dword_7F838078 push eax call sub_7F82A8C1 xor eax, eax jmp loc_7F81FEAE ; --------------------------------------------------------------------------- loc_7F81FDC4: ; CODE XREF: sub_7F81FC85+102j ; sub_7F81FC85+108j lea edi, [esi+14h] mov eax, [edi] loc_7F81FDC9: ; CODE XREF: sub_7F81FC85+11Bj mov edx, [esi+18h] add edx, eax mov eax, dword_7F838078 mov ebx, [eax+200h] cmp edx, [ebx+4] jnz loc_7F81FE86 test ch, 40h jz short loc_7F81FE04 mov word ptr [eax+21Ch], 3 push 0 mov eax, dword_7F838078 push eax call sub_7F82A8C1 xor eax, eax jmp loc_7F81FEAE ; --------------------------------------------------------------------------- loc_7F81FE04: ; CODE XREF: sub_7F81FC85+160j mov ecx, dword_7F838078 push esi mov dword ptr [ecx+224h], 0 call sub_7F8142DB test byte ptr [esi+11h], 80h jnz short loc_7F81FE44 cmp byte ptr [esi+4], 8Ch jz short loc_7F81FE44 mov eax, dword_7F838078 mov ecx, [eax+200h] mov eax, [edi] and eax, 7FFFFFFFh add eax, 87h and al, 80h sub [ecx+4], eax jmp short loc_7F81FE54 ; --------------------------------------------------------------------------- loc_7F81FE44: ; CODE XREF: sub_7F81FC85+199j ; sub_7F81FC85+19Fj mov eax, dword_7F838078 mov edx, [edi] mov ecx, [eax+200h] sub [ecx+4], edx loc_7F81FE54: ; CODE XREF: sub_7F81FC85+1BDj push esi call sub_7F812F73 push eax xor esi, esi call sub_7F813BE4 push esi call sub_7F812C72 mov eax, dword_7F838078 mov [eax+228h], si mov eax, dword_7F838078 mov word ptr [eax+21Ch], 3 xor eax, eax jmp short loc_7F81FEAE ; --------------------------------------------------------------------------- loc_7F81FE86: ; CODE XREF: sub_7F81FC85+61j ; sub_7F81FC85+F5j ... xor edi, edi test esi, esi jz short loc_7F81FEA9 push esi call sub_7F8142DB mov ax, [esi+10h] push eax push esi call sub_7F813059 mov ecx, dword_7F838078 mov [ecx+224h], edi loc_7F81FEA9: ; CODE XREF: sub_7F81FC85+205j mov eax, 1 loc_7F81FEAE: ; CODE XREF: sub_7F81FC85+13Aj ; sub_7F81FC85+17Aj ... pop edi pop esi pop ebx retn sub_7F81FC85 endp ; =============== S U B R O U T I N E ======================================= sub_7F81FEB2 proc near ; CODE XREF: sub_7F81FA56+51p push ebx mov eax, dword_7F838078 push esi push edi mov ecx, [eax+200h] xor esi, esi mov dx, [ecx+0Ch] test dx, dx jz loc_7F81FF77 loc_7F81FECF: ; CODE XREF: sub_7F81FEB2+BFj cmp dx, 1 jb short loc_7F81FF0D cmp [ecx+8], dx jbe short loc_7F81FF0D mov ax, dx shr ax, 6 movzx edi, ax and edi, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov eax, [ebx] mov ebx, [edi+eax] xor edi, edi mov di, dx and edi, 0FFh shl edi, 5 add edi, ebx jmp short loc_7F81FF0F ; --------------------------------------------------------------------------- loc_7F81FF0D: ; CODE XREF: sub_7F81FEB2+21j ; sub_7F81FEB2+27j xor edi, edi loc_7F81FF0F: ; CODE XREF: sub_7F81FEB2+59j test dx, dx jz short loc_7F81FF6A loc_7F81FF14: ; CODE XREF: sub_7F81FEB2+B6j cmp dx, 1 jb short loc_7F81FF52 cmp [ecx+8], dx jbe short loc_7F81FF52 mov ax, dx shr ax, 6 movzx ebx, ax and ebx, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [ebx+eax] xor ebx, ebx mov bx, dx and ebx, 0FFh shl ebx, 5 add eax, ebx jmp short loc_7F81FF54 ; --------------------------------------------------------------------------- loc_7F81FF52: ; CODE XREF: sub_7F81FEB2+66j ; sub_7F81FEB2+6Cj xor eax, eax loc_7F81FF54: ; CODE XREF: sub_7F81FEB2+9Ej test esi, esi jz short loc_7F81FF60 mov edx, [esi+18h] cmp [eax+18h], edx jnb short loc_7F81FF62 loc_7F81FF60: ; CODE XREF: sub_7F81FEB2+A4j mov esi, eax loc_7F81FF62: ; CODE XREF: sub_7F81FEB2+ACj mov dx, [eax] test dx, dx jnz short loc_7F81FF14 loc_7F81FF6A: ; CODE XREF: sub_7F81FEB2+60j mov dx, [edi+2] test dx, dx jnz loc_7F81FECF loc_7F81FF77: ; CODE XREF: sub_7F81FEB2+17j test esi, esi jz short loc_7F81FF8F push esi call sub_7F8131F6 test eax, eax jz short loc_7F81FF8F sub dword ptr [esi+14h], 8 and word ptr [esi+10h], 7FFFh loc_7F81FF8F: ; CODE XREF: sub_7F81FEB2+C7j ; sub_7F81FEB2+D1j mov eax, esi pop edi pop esi pop ebx retn sub_7F81FEB2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F81FF95 proc near ; CODE XREF: sub_7F81FA56+142p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov eax, dword_7F838078 mov ebp, esp sub esp, 10h mov edx, [eax+20Ch] push ebx push esi xor eax, eax push edi mov ecx, [edx] xor edx, edx mov [ebp+var_8], ecx mov ecx, dword_7F838078 mov ebx, [ebp+var_8] mov cx, [ecx+204h] mov edi, [ebx] add [ebp+var_8], 4 mov [ebp+var_4], cx mov esi, [ebp+arg_0] mov [ebp+var_10], 1 cmp cx, ax jle loc_7F8200C8 loc_7F81FFDF: ; CODE XREF: sub_7F81FF95+12Dj cmp [ebp+var_4], 1 jle short loc_7F81FFEE mov [ebp+var_2], 100h jmp short loc_7F82000B ; --------------------------------------------------------------------------- loc_7F81FFEE: ; CODE XREF: sub_7F81FF95+4Fj mov ecx, dword_7F838078 mov ebx, [ecx+200h] mov cx, [ebx+8] dec cx and cx, 0FFh inc cx mov [ebp+var_2], cx loc_7F82000B: ; CODE XREF: sub_7F81FF95+57j cmp [ebp+var_10], 0 jz short loc_7F82001F dec [ebp+var_2] add edi, 20h mov [ebp+var_10], 0 loc_7F82001F: ; CODE XREF: sub_7F81FF95+7Aj cmp [ebp+var_2], 0 jz loc_7F8200B0 loc_7F82002A: ; CODE XREF: sub_7F81FF95+115j test byte ptr [edi+10h], 10h jnz short loc_7F82009E mov ecx, [edi+18h] cmp [esi+18h], ecx jnb short loc_7F82009E test edx, edx jz short loc_7F820041 cmp [edx+18h], ecx jbe short loc_7F820043 loc_7F820041: ; CODE XREF: sub_7F81FF95+A5j mov edx, edi loc_7F820043: ; CODE XREF: sub_7F81FF95+AAj mov ecx, [edi+14h] test ecx, ecx jge short loc_7F82009E test byte ptr [edi+11h], 80h jnz short loc_7F82009E cmp byte ptr [edi+4], 8Ch jz short loc_7F820065 and ecx, 7FFFFFFFh add ecx, 87h and cl, 80h loc_7F820065: ; CODE XREF: sub_7F81FF95+BFj test byte ptr [esi+11h], 80h jnz short loc_7F820085 cmp byte ptr [esi+4], 8Ch jz short loc_7F820085 mov ebx, [esi+14h] and ebx, 7FFFFFFFh add ebx, 87h and bl, 80h jmp short loc_7F820088 ; --------------------------------------------------------------------------- loc_7F820085: ; CODE XREF: sub_7F81FF95+D4j ; sub_7F81FF95+DAj mov ebx, [esi+14h] loc_7F820088: ; CODE XREF: sub_7F81FF95+EEj mov [ebp+var_C], ebx cmp ecx, [ebp+var_C] jnz short loc_7F82009E test eax, eax jz short loc_7F82009C mov ecx, [edi+18h] cmp [eax+18h], ecx jnb short loc_7F82009E loc_7F82009C: ; CODE XREF: sub_7F81FF95+FDj mov eax, edi loc_7F82009E: ; CODE XREF: sub_7F81FF95+99j ; sub_7F81FF95+A1j ... dec [ebp+var_2] add edi, 20h cmp [ebp+var_2], 0 jnz loc_7F82002A loc_7F8200B0: ; CODE XREF: sub_7F81FF95+8Fj dec [ebp+var_4] mov ecx, [ebp+var_8] add [ebp+var_8], 4 cmp [ebp+var_4], 0 mov edi, [ecx] jnz loc_7F81FFDF loc_7F8200C8: ; CODE XREF: sub_7F81FF95+44j test edx, edx jz short loc_7F82010F test byte ptr [esi+11h], 80h jnz short loc_7F8200EC cmp byte ptr [esi+4], 8Ch jz short loc_7F8200EC mov edi, [esi+14h] and edi, 7FFFFFFFh add edi, 87h and edi, 0FFFFFF80h jmp short loc_7F8200EF ; --------------------------------------------------------------------------- loc_7F8200EC: ; CODE XREF: sub_7F81FF95+13Bj ; sub_7F81FF95+141j mov edi, [esi+14h] loc_7F8200EF: ; CODE XREF: sub_7F81FF95+155j mov ecx, [esi+18h] add ecx, edi cmp ecx, [edx+18h] jz short loc_7F8200FB xor edx, edx loc_7F8200FB: ; CODE XREF: sub_7F81FF95+162j test edx, edx jz short loc_7F82010F cmp byte ptr [edx+4], 8Fh jnz short loc_7F82010F test byte ptr [edx+11h], 80h jz short loc_7F82010F mov eax, edx jmp short loc_7F820115 ; --------------------------------------------------------------------------- loc_7F82010F: ; CODE XREF: sub_7F81FF95+135j ; sub_7F81FF95+168j ... test eax, eax jnz short loc_7F820115 mov eax, edx loc_7F820115: ; CODE XREF: sub_7F81FF95+178j ; sub_7F81FF95+17Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F81FF95 endp ; =============== S U B R O U T I N E ======================================= sub_7F82011E proc near ; CODE XREF: sub_7F81FA56+1C5p var_8 = dword ptr -8 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch sub esp, 8 push ebx push esi push edi push ebp xor edi, edi mov ebp, [esp+18h+arg_4] test byte ptr [ebp+11h], 80h jnz short loc_7F82014E cmp byte ptr [ebp+4], 8Ch jz short loc_7F82014E add ebp, 14h mov ecx, [ebp+0] and ecx, 7FFFFFFFh add ecx, 87h and cl, 80h jmp short loc_7F820154 ; --------------------------------------------------------------------------- loc_7F82014E: ; CODE XREF: sub_7F82011E+11j ; sub_7F82011E+17j add ebp, 14h mov ecx, [ebp+0] loc_7F820154: ; CODE XREF: sub_7F82011E+2Ej mov esi, [esp+18h+arg_0] mov ax, [esi+10h] test ah, 80h mov word ptr [esp+18h+var_8], ax jnz short loc_7F82017D cmp byte ptr [esi+4], 8Ch jz short loc_7F82017D mov eax, [esi+14h] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F820180 ; --------------------------------------------------------------------------- loc_7F82017D: ; CODE XREF: sub_7F82011E+46j ; sub_7F82011E+4Cj mov eax, [esi+14h] loc_7F820180: ; CODE XREF: sub_7F82011E+5Dj sub eax, ecx mov ebx, 0 jnz short loc_7F82019E mov ebx, esi mov eax, [ebp+0] and eax, 7FFFFFFFh push esi mov [esi+14h], eax call sub_7F8148F7 jmp short loc_7F820205 ; --------------------------------------------------------------------------- loc_7F82019E: ; CODE XREF: sub_7F82011E+69j test eax, eax jle short loc_7F8201DD mov ebx, esi mov edx, dword_7F838078 add edx, 220h sub eax, 8 push edx mov edx, [esi+18h] push [esp+1Ch+var_8] add edx, ecx push edx push eax push 0 call sub_7F82046B test eax, eax jnz short loc_7F820200 mov eax, [ebp+0] push esi and eax, 7FFFFFFFh mov [esi+14h], eax call sub_7F8148F7 jmp short loc_7F820205 ; --------------------------------------------------------------------------- loc_7F8201DD: ; CODE XREF: sub_7F82011E+82j mov eax, dword_7F838078 xor ebp, ebp cmp [eax+228h], bp jnz short loc_7F820200 add eax, 220h xor ebx, ebx push eax push ebp push ebp push ebp push esi call sub_7F82046B jmp short loc_7F820205 ; --------------------------------------------------------------------------- loc_7F820200: ; CODE XREF: sub_7F82011E+AAj ; sub_7F82011E+CDj mov edi, 2003h loc_7F820205: ; CODE XREF: sub_7F82011E+7Ej ; sub_7F82011E+BDj ... test edi, edi jnz short loc_7F82020F mov eax, [esp+18h+arg_8] mov [eax], ebx loc_7F82020F: ; CODE XREF: sub_7F82011E+E9j mov eax, edi pop ebp pop edi pop esi pop ebx add esp, 8 retn 0Ch sub_7F82011E endp ; =============== S U B R O U T I N E ======================================= sub_7F82021B proc near ; CODE XREF: sub_7F81F5A7+B6p ; sub_7F81FA56+1DAp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov ebx, [esp+8+arg_4] push edi push ebp mov eax, [ebx+4] sub eax, 70616D80h cmp eax, 1 mov eax, dword_7F838078 sbb edi, edi mov esi, [ebx+14h] neg edi cmp dword ptr [eax+22Ch], 1 sbb ebp, ebp and esi, 7FFFFFFFh inc ebp cmp [esp+10h+arg_0], 0 jnz loc_7F8202DD lea eax, [esp+10h+arg_0] push ebp push esi push eax call sub_7F813636 test eax, eax jz short loc_7F8202DD test ebp, ebp jz short loc_7F820281 mov eax, dword_7F838078 mov word ptr [eax+212h], 29h mov eax, 204h jmp loc_7F820464 ; --------------------------------------------------------------------------- loc_7F820281: ; CODE XREF: sub_7F82021B+4Cj mov ecx, dword_7F838078 mov word ptr [ecx+228h], 0 mov ecx, dword_7F838078 mov eax, dword_7F836C58 cmp [ecx+278h], eax ja short loc_7F8202C5 add esi, 87h and esi, 0FFFFFF80h mov [ecx+22Ch], esi mov eax, dword_7F838078 mov word ptr [eax+21Ch], 3 jmp loc_7F820462 ; --------------------------------------------------------------------------- loc_7F8202C5: ; CODE XREF: sub_7F82021B+86j mov eax, dword_7F838078 mov word ptr [eax+21Ch], 0 mov eax, 1000h jmp loc_7F820464 ; --------------------------------------------------------------------------- loc_7F8202DD: ; CODE XREF: sub_7F82021B+34j ; sub_7F82021B+48j test edi, edi jz loc_7F8203AC mov eax, [esp+10h+arg_0] mov word ptr [eax+10h], 0 mov eax, [esp+10h+arg_0] movzx edx, word ptr [eax+10h] mov edi, 0FFFFFE00h mov [eax+1Ch], edx mov ecx, dword_7F838078 mov eax, [esp+10h+arg_0] movzx edx, word ptr [ecx+0Ch] shl edx, 5 mov ecx, 1FFh add edx, ecx mov eax, [eax+18h] and edx, edi add eax, ecx and eax, edi mov ecx, dword_7F838078 push ebx mov [ecx+10h], eax add eax, edx mov ecx, dword_7F838078 mov [ecx+50h], eax call sub_7F812F73 mov ecx, dword_7F838078 mov [ecx+228h], ax push [esp+10h+arg_0] push ebx call sub_7F820544 mov ecx, dword_7F838078 mov eax, [ecx+20Ch] mov ecx, [eax] mov edx, [ecx] add ecx, 4 test edx, edx jz short loc_7F820383 loc_7F820368: ; CODE XREF: sub_7F82021B+166j mov ax, 100h loc_7F82036C: ; CODE XREF: sub_7F82021B+15Dj or byte ptr [edx+10h], 3 dec ax add edx, 20h test ax, ax jnz short loc_7F82036C mov edx, [ecx] add ecx, 4 test edx, edx jnz short loc_7F820368 loc_7F820383: ; CODE XREF: sub_7F82021B+14Bj mov eax, dword_7F838078 mov ecx, [eax+200h] mov dx, [ecx+8] mov [eax+214h], dx mov eax, dword_7F838078 mov word ptr [eax+23Ch], 0 jmp loc_7F820462 ; --------------------------------------------------------------------------- loc_7F8203AC: ; CODE XREF: sub_7F82021B+C4j mov eax, dword_7F838078 add eax, 224h push eax xor eax, eax push eax push eax push eax push [esp+20h+arg_0] call sub_7F82046B or byte ptr [ebx+11h], 20h push ebx call sub_7F812F73 mov ecx, dword_7F838078 mov [ecx+228h], ax mov ecx, dword_7F838078 mov dword ptr [ecx+234h], 0FFFFFFF8h mov eax, [ebx+14h] mov ecx, dword_7F838078 and eax, 7FFFFFFFh mov edx, 800h add eax, 8 mov [ecx+230h], eax mov ecx, dword_7F838078 add ecx, 230h cmp [ecx], edx jbe short loc_7F820424 mov eax, [ebx+18h] and eax, 1FFh sub edx, eax mov [ecx], edx loc_7F820424: ; CODE XREF: sub_7F82021B+1FBj test ebp, ebp jz short loc_7F82044F mov eax, [esp+10h+arg_0] test byte ptr [eax+11h], 40h jz short loc_7F82044F mov eax, dword_7F838078 push 0 mov word ptr [eax+21Ch], 4 mov eax, dword_7F838078 push eax call sub_7F82A8C1 jmp short loc_7F820462 ; --------------------------------------------------------------------------- loc_7F82044F: ; CODE XREF: sub_7F82021B+20Bj ; sub_7F82021B+215j mov eax, dword_7F838078 mov word ptr [eax+21Ch], 5 call sub_7F81F8AE loc_7F820462: ; CODE XREF: sub_7F82021B+A5j ; sub_7F82021B+18Cj ... xor eax, eax loc_7F820464: ; CODE XREF: sub_7F82021B+61j ; sub_7F82021B+BDj pop ebp pop edi pop esi pop ebx retn 8 sub_7F82021B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82046B proc near ; CODE XREF: sub_7F81FA56+184p ; sub_7F81FA56+1A8p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 test eax, eax push esi jz short loc_7F82047F mov [ebp+var_4], eax jmp short loc_7F8204AB ; --------------------------------------------------------------------------- loc_7F82047F: ; CODE XREF: sub_7F82046B+Dj lea eax, [ebp+var_4] push eax push 0 call sub_7F81339D test eax, eax jnz short loc_7F8204EE mov ecx, [ebp+var_4] mov eax, [ebp+arg_8] mov edx, [ebp+arg_4] mov [ecx+18h], eax mov ax, [ebp+arg_C] mov ecx, [ebp+var_4] mov [ecx+14h], edx mov ecx, [ebp+var_4] mov [ecx+10h], ax loc_7F8204AB: ; CODE XREF: sub_7F82046B+12j mov eax, [ebp+var_4] xor ecx, ecx and word ptr [eax+10h], 7FFFh mov eax, [ebp+var_4] mov esi, [ebp+arg_10] mov [eax+1Ch], ecx mov eax, [ebp+var_4] or byte ptr [eax+17h], 80h mov [esi], ecx lea ecx, [ebp+var_8] push ecx push esi push 8Eh call sub_7F8142AB mov edx, [esi] mov ecx, [ebp+var_4] mov [ecx+4], edx push [ebp+var_8] push [ebp+var_4] push dword ptr [esi] call sub_7F81444D xor eax, eax loc_7F8204EE: ; CODE XREF: sub_7F82046B+21j pop esi mov esp, ebp pop ebp retn 14h sub_7F82046B endp ; =============== S U B R O U T I N E ======================================= sub_7F8204F5 proc near ; CODE XREF: sub_7F81FA56+150p ; sub_7F81FA56:loc_7F81FC76p arg_0 = dword ptr 4 arg_4 = word ptr 8 push esi mov eax, dword_7F838078 push edi xor esi, esi mov [eax+22Ch], esi mov ax, [esp+8+arg_4] mov ecx, dword_7F838078 mov [ecx+21Ch], ax mov eax, [esp+8+arg_0] cmp eax, esi jz short loc_7F82053F mov di, [eax+10h] and di, 4000h push edi push eax call sub_7F813059 test di, di jz short loc_7F82053F push esi mov eax, dword_7F838078 push eax call sub_7F82A8C1 loc_7F82053F: ; CODE XREF: sub_7F8204F5+27j ; sub_7F8204F5+3Cj pop edi pop esi retn 8 sub_7F8204F5 endp ; =============== S U B R O U T I N E ======================================= sub_7F820544 proc near ; CODE XREF: sub_7F81F71E+101p ; sub_7F82021B+131p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov esi, [esp+8+arg_4] mov edi, [esp+8+arg_0] push esi push edi call sub_7F814AC2 mov eax, dword_7F838078 cmp dword ptr [eax+22Ch], 0 jnz short loc_7F8205A9 push esi call sub_7F812F73 mov ecx, dword_7F838078 mov [ecx+228h], ax mov ax, [esi+10h] and ax, 1000h cmp ax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and ax, 4000h push eax push esi call sub_7F813059 mov ecx, dword_7F838078 mov word ptr [ecx+21Ch], 1 jmp loc_7F820637 ; --------------------------------------------------------------------------- loc_7F8205A9: ; CODE XREF: sub_7F820544+1Dj mov eax, [edi+18h] cmp [esi+18h], eax jbe short loc_7F8205C1 mov eax, dword_7F838078 mov word ptr [eax+228h], 0 jmp short loc_7F8205C5 ; --------------------------------------------------------------------------- loc_7F8205C1: ; CODE XREF: sub_7F820544+6Bj or byte ptr [edi+11h], 20h loc_7F8205C5: ; CODE XREF: sub_7F820544+7Bj test byte ptr [edi+11h], 80h jnz short loc_7F8205E5 cmp byte ptr [edi+4], 8Ch jz short loc_7F8205E5 mov ecx, [edi+14h] and ecx, 7FFFFFFFh add ecx, 87h and cl, 80h jmp short loc_7F8205E8 ; --------------------------------------------------------------------------- loc_7F8205E5: ; CODE XREF: sub_7F820544+85j ; sub_7F820544+8Bj mov ecx, [edi+14h] loc_7F8205E8: ; CODE XREF: sub_7F820544+9Fj mov eax, [edi+18h] add eax, ecx cmp eax, [esi+18h] mov eax, dword_7F838078 jnz short loc_7F82060E add eax, 220h mov edx, dword_7F838078 mov dword ptr [edx+224h], 0 jmp short loc_7F820613 ; --------------------------------------------------------------------------- loc_7F82060E: ; CODE XREF: sub_7F820544+B1j add eax, 224h loc_7F820613: ; CODE XREF: sub_7F820544+C8j push eax xor eax, eax push eax push eax push eax push esi call sub_7F82046B push esi call sub_7F8148F7 or byte ptr [esi+11h], 40h mov eax, dword_7F838078 mov word ptr [eax+21Ch], 3 loc_7F820637: ; CODE XREF: sub_7F820544+60j pop edi pop esi retn 8 sub_7F820544 endp ; =============== S U B R O U T I N E ======================================= sub_7F82063C proc near ; CODE XREF: sub_7F81F71E:loc_7F81F846p push esi mov eax, dword_7F838078 xor esi, esi mov [eax+238h], si mov eax, dword_7F838078 cmp [eax+22Ch], esi jnz short loc_7F820673 push esi push dword ptr [eax+224h] call sub_7F81479E mov ecx, dword_7F838078 mov [ecx+21Ch], si jmp short loc_7F82068F ; --------------------------------------------------------------------------- loc_7F820673: ; CODE XREF: sub_7F82063C+1Aj mov eax, dword_7F838078 mov word ptr [eax+228h], 0 mov eax, dword_7F838078 mov word ptr [eax+21Ch], 3 loc_7F82068F: ; CODE XREF: sub_7F82063C+35j pop esi retn sub_7F82063C endp ; =============== S U B R O U T I N E ======================================= sub_7F820691 proc near ; CODE XREF: sub_7F813C77+FCp ; sub_7F821A34+116p var_4 = dword ptr -4 sub esp, 4 lea eax, [esp+4+var_4] push esi xor esi, esi push eax mov [esp+0Ch+var_4], 200h call sub_7F8206CD test eax, eax jz short loc_7F8206C1 mov eax, dword_7F838078 mov ecx, [esp+8+var_4] mov edx, [eax+200h] cmp [edx+4], ecx jz short loc_7F8206C6 loc_7F8206C1: ; CODE XREF: sub_7F820691+1Aj mov esi, 100Bh loc_7F8206C6: ; CODE XREF: sub_7F820691+2Ej mov eax, esi pop esi add esp, 4 retn sub_7F820691 endp ; =============== S U B R O U T I N E ======================================= sub_7F8206CD proc near ; CODE XREF: sub_7F820691+13p arg_0 = dword ptr 4 push ebx mov ecx, 1 push esi mov eax, dword_7F838078 push edi push ebp mov edx, [eax+20Ch] mov esi, [edx] mov dx, [eax+204h] mov edi, [esi] add esi, 4 test dx, dx jle loc_7F820796 loc_7F8206F8: ; CODE XREF: sub_7F8206CD+C3j mov bx, 100h cmp dx, 1 jg short loc_7F82071A mov eax, dword_7F838078 mov ebp, [eax+200h] mov bx, [ebp+8] dec bx and bx, 0FFh inc bx loc_7F82071A: ; CODE XREF: sub_7F8206CD+33j test ecx, ecx jz short loc_7F820725 dec bx xor ecx, ecx add edi, 20h loc_7F820725: ; CODE XREF: sub_7F8206CD+4Fj test bx, bx jz short loc_7F820786 loc_7F82072A: ; CODE XREF: sub_7F8206CD+B7j mov ax, [edi+10h] test al, 10h jnz short loc_7F82077C test ah, 80h jnz short loc_7F820751 cmp byte ptr [edi+4], 8Ch jz short loc_7F820751 mov ebp, [edi+14h] and ebp, 7FFFFFFFh add ebp, 87h and ebp, 0FFFFFF80h jmp short loc_7F820754 ; --------------------------------------------------------------------------- loc_7F820751: ; CODE XREF: sub_7F8206CD+68j ; sub_7F8206CD+6Ej mov ebp, [edi+14h] loc_7F820754: ; CODE XREF: sub_7F8206CD+82j mov eax, [esp+10h+arg_0] add [eax], ebp cmp byte ptr [edi+4], 8Ch jz short loc_7F82077C cmp dword ptr [edi+18h], 200h jb short loc_7F8207A2 mov eax, dword_7F838078 mov ebp, [eax+200h] mov eax, [edi+18h] cmp [ebp+4], eax jb short loc_7F8207A2 loc_7F82077C: ; CODE XREF: sub_7F8206CD+63j ; sub_7F8206CD+91j dec bx add edi, 20h test bx, bx jnz short loc_7F82072A loc_7F820786: ; CODE XREF: sub_7F8206CD+5Bj dec dx mov edi, [esi] add esi, 4 test dx, dx jg loc_7F8206F8 loc_7F820796: ; CODE XREF: sub_7F8206CD+25j mov eax, 1 loc_7F82079B: ; CODE XREF: sub_7F8206CD+D7j pop ebp pop edi pop esi pop ebx retn 4 ; --------------------------------------------------------------------------- loc_7F8207A2: ; CODE XREF: sub_7F8206CD+9Aj ; sub_7F8206CD+ADj xor eax, eax jmp short loc_7F82079B sub_7F8206CD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8207A6(LPCSTR lpString, int, int, __int16, int, int, int) sub_7F8207A6 proc near ; CODE XREF: sub_7F80F91C+A2p ; sub_7F80F91C+E6p ... var_20 = word ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = word ptr -14h var_10 = dword ptr -10h hCursor = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 lpString = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 20h push ebx push esi push edi push [ebp+lpString] ; lpString call ds:lstrlenA mov esi, eax mov ax, [ebp+arg_C] mov edi, 1 and ax, 2 movzx ecx, ax mov [ebp+var_14], ax mov [ebp+hCursor], ecx mov [ebp+var_2], di xor eax, eax mov [ebp+var_10], eax mov [ebp+var_1C], eax call sub_7F82449E test byte ptr [ebp+arg_C+1], 2 mov [ebp+var_18], eax jz short loc_7F8207F1 mov dword_7F836C68, edi loc_7F8207F1: ; CODE XREF: sub_7F8207A6+43j push 10h add esi, 39h push esi call sub_7F82F18D mov esi, eax test esi, esi jnz short loc_7F82080C mov edi, 400h jmp loc_7F820B74 ; --------------------------------------------------------------------------- loc_7F82080C: ; CODE XREF: sub_7F8207A6+5Aj mov ebx, [esi] push [ebp+lpString] ; lpString2 mov word ptr [ebx+10h], 0FFFFh mov word ptr [ebx+12h], 0FFFFh lea eax, [ebx+38h] push eax ; lpString1 call ds:lstrcpyA lea ecx, [ebx+4] push ecx ; int push dword ptr [ebp+arg_C] ; __int16 push [ebp+lpString] ; pSrc call sub_7F820E0E mov edi, eax test edi, edi jnz loc_7F820B78 mov [ebp+var_10], 1 lea eax, [ebx+38h] push eax ; lpRootPathName call sub_7F82A7AB mov word ptr [ebx+2Ch], 3 test eax, eax jnz short loc_7F820860 mov word ptr [ebx+2Ch], 2 loc_7F820860: ; CODE XREF: sub_7F8207A6+B2j cmp [ebp+hCursor], 0 jz short loc_7F820871 push esi ; int push [ebp+lpString] ; pSrc call sub_7F821C4E jmp short loc_7F820885 ; --------------------------------------------------------------------------- loc_7F820871: ; CODE XREF: sub_7F8207A6+BEj lea eax, [ebp+var_2] push eax xor eax, eax mov ax, [ebp+arg_C] and eax, 40h push eax push esi call sub_7F821428 loc_7F820885: ; CODE XREF: sub_7F8207A6+C9j mov edi, eax mov ax, [ebp+arg_C] and ax, 20h mov [ebp+var_20], ax xor eax, eax cmp [ebp+var_20], ax jnz loc_7F8209C3 mov cx, [ebp+arg_C] and cx, 10h mov word ptr [ebp+var_8], cx cmp cx, ax jnz short loc_7F8208DC cmp edi, 100Bh jz short loc_7F8208DC cmp [ebp+var_2], ax jz loc_7F8209C3 cmp [ebp+hCursor], eax jnz loc_7F8209C3 push 10h ; vKey call ds:GetAsyncKeyState test ah, 80h jz loc_7F8209C3 loc_7F8208DC: ; CODE XREF: sub_7F8207A6+108j ; sub_7F8207A6+110j mov ebx, [esi] xor eax, eax cmp [ebx+4], eax jz short loc_7F820904 cmp [ebx+10h], ax jl short loc_7F8208F4 push eax push dword ptr [ebx] push ebx call sub_7F821055 loc_7F8208F4: ; CODE XREF: sub_7F8207A6+143j push dword ptr [ebx+4] call sub_7F815991 xor eax, eax mov [ebx+4], eax mov [ebp+var_10], eax loc_7F820904: ; CODE XREF: sub_7F8207A6+13Dj mov eax, [ebx] test eax, eax jz short loc_7F820916 push eax call sub_7F820E74 mov dword ptr [ebx], 0 loc_7F820916: ; CODE XREF: sub_7F8207A6+162j mov cx, 3 cmp edi, 100Bh jz short loc_7F820930 cmp word ptr [ebp+var_8], 1 sbb ecx, ecx and ecx, 5 add cx, 4 loc_7F820930: ; CODE XREF: sub_7F8207A6+17Aj mov eax, [ebp+var_18] sub edi, 100Bh add eax, 18h cmp edi, 1 sbb edx, edx mov [ebp+hCursor], eax mov eax, [eax] lea edx, ds:8[edx*8] xor edx, eax push ecx ; __int16 and edx, 8 xor edx, eax mov eax, [ebp+hCursor] push [ebp+lpString] ; lpString mov [eax], edx call sub_7F823870 mov [ebp+var_8], eax cmp eax, 101Eh jz short loc_7F820974 test eax, eax jz short loc_7F820974 mov edi, eax jmp short loc_7F8209BD ; --------------------------------------------------------------------------- loc_7F820974: ; CODE XREF: sub_7F8207A6+1C4j ; sub_7F8207A6+1C8j add ebx, 4 push ebx ; int push dword ptr [ebp+arg_C] ; __int16 push [ebp+lpString] ; pSrc call sub_7F820E0E mov edi, eax test edi, edi jnz loc_7F820B78 mov [ebp+var_10], 1 lea eax, [ebp+var_2] push eax xor eax, eax mov ax, [ebp+arg_C] and eax, 40h push eax push esi call sub_7F821428 mov edi, eax test edi, edi jnz loc_7F820B78 cmp [ebp+var_8], 1 sbb eax, eax neg eax mov [ebp+var_1C], eax loc_7F8209BD: ; CODE XREF: sub_7F8207A6+1CCj mov eax, [ebp+hCursor] or byte ptr [eax], 8 loc_7F8209C3: ; CODE XREF: sub_7F8207A6+F3j ; sub_7F8207A6+116j ... test edi, edi jz short loc_7F8209D8 mov eax, [esi] cmp dword ptr [eax+4], 1 sbb eax, eax inc eax mov [ebp+var_10], eax jmp loc_7F820B74 ; --------------------------------------------------------------------------- loc_7F8209D8: ; CODE XREF: sub_7F8207A6+21Fj mov ebx, [esi] lea eax, [ebx+0Ch] push eax push dword ptr [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push esi call sub_7F80FD8E mov edi, dword_7F83587C xor edi, 59h jnz loc_7F820B74 cmp [ebp+var_2], 0 jz short loc_7F820A25 push esi call sub_7F82110E mov edi, eax test edi, edi jnz loc_7F820B74 push esi call sub_7F821FF1 test eax, eax jz short loc_7F820A25 push esi call sub_7F81B714 mov edi, eax loc_7F820A25: ; CODE XREF: sub_7F8207A6+25Bj ; sub_7F8207A6+275j test edi, edi jnz loc_7F820B78 mov eax, [ebp+arg_14] test eax, eax jz short loc_7F820A56 push [ebp+arg_18] push eax push 80008h push 0 push esi call sub_7F829F2E mov [ebx+14h], eax test eax, eax jnz short loc_7F820A5D mov edi, 400h jmp loc_7F820B74 ; --------------------------------------------------------------------------- loc_7F820A56: ; CODE XREF: sub_7F8207A6+28Cj mov dword ptr [ebx+14h], 0 loc_7F820A5D: ; CODE XREF: sub_7F8207A6+2A4j lea eax, [ebx+30h] lea ecx, [ebp+var_8] mov [ebp+var_8], 53464180h push eax push 0 push ecx push esi call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F820B78 add ebx, 34h lea eax, [ebp+var_8] mov [ebp+var_8], 46534180h push ebx push 0 push eax push esi call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F820B78 push dword ptr [ebp+arg_C] movsx eax, [ebp+var_2] push eax push esi call sub_7F81217E mov edi, eax test edi, edi jnz loc_7F820B78 cmp [ebp+var_2], 0 jz short loc_7F820AC4 push esi call sub_7F82A1E7 loc_7F820AC4: ; CODE XREF: sub_7F8207A6+316j cmp [ebp+var_20], 0 jnz loc_7F820B74 cmp [ebp+var_1C], 0 jnz short loc_7F820AE6 push 74h ; vKey call ds:GetAsyncKeyState test ah, 80h jz loc_7F820B74 loc_7F820AE6: ; CODE XREF: sub_7F8207A6+32Dj xor ebx, ebx push 7F02h ; lpCursorName push ebx ; hInstance mov [ebp+var_8], ebx call ds:LoadCursorA push eax ; hCursor call ds:SetCursor mov [ebp+hCursor], eax mov eax, [ebp+var_18] mov eax, [eax+0Ch] test eax, eax jz short loc_7F820B0F mov eax, [eax] jmp short loc_7F820B11 ; --------------------------------------------------------------------------- loc_7F820B0F: ; CODE XREF: sub_7F8207A6+363j xor eax, eax loc_7F820B11: ; CODE XREF: sub_7F8207A6+367j push 1 ; int push 1Bh ; __int16 push offset aPressEscToCanc ; "Press ESC to cancel." push offset aValidatingRepa ; "Validating/repairing message file" push eax ; HWND call sub_7F82B14A mov ebx, eax test ebx, ebx jz short loc_7F820B40 push 0 lea ecx, [ebp+var_8] push offset sub_7F823C13 push ecx push 4 push 0 push esi call sub_7F815E89 loc_7F820B40: ; CODE XREF: sub_7F8207A6+383j push esi call sub_7F81F0AC test ebx, ebx jz short loc_7F820B6B cmp [ebp+var_8], 0 jz short loc_7F820B59 lea eax, [ebp+var_8] push eax call sub_7F815F83 loc_7F820B59: ; CODE XREF: sub_7F8207A6+3A8j call sub_7F82B8C4 cmp eax, 1 sbb eax, eax neg eax push eax call sub_7F82B8D3 loc_7F820B6B: ; CODE XREF: sub_7F8207A6+3A2j push [ebp+hCursor] ; hCursor call ds:SetCursor loc_7F820B74: ; CODE XREF: sub_7F8207A6+61j ; sub_7F8207A6+22Dj ... test edi, edi jz short loc_7F820BEA loc_7F820B78: ; CODE XREF: sub_7F8207A6+94j ; sub_7F8207A6+1E1j ... test esi, esi jz short loc_7F820BEA mov ebx, [esi] lea eax, [ebx+30h] cmp dword ptr [eax], 0 jz short loc_7F820B8E push 0 push eax call sub_7F81813C loc_7F820B8E: ; CODE XREF: sub_7F8207A6+3DEj lea eax, [ebx+34h] cmp dword ptr [eax], 0 jz short loc_7F820B9E push 0 push eax call sub_7F81813C loc_7F820B9E: ; CODE XREF: sub_7F8207A6+3EEj mov eax, [ebx+14h] test eax, eax jz short loc_7F820BAB push eax call sub_7F8240DB loc_7F820BAB: ; CODE XREF: sub_7F8207A6+3FDj xor eax, eax cmp [ebp+var_10], eax jz short loc_7F820BD8 cmp [ebx+10h], ax jl short loc_7F820BC1 push eax push dword ptr [ebx] push ebx call sub_7F821055 loc_7F820BC1: ; CODE XREF: sub_7F8207A6+410j push dword ptr [ebx+4] call sub_7F815991 cmp [ebp+var_14], 0 jz short loc_7F820BD8 push [ebp+lpString] ; pSrc call sub_7F81550B loc_7F820BD8: ; CODE XREF: sub_7F8207A6+40Aj ; sub_7F8207A6+428j mov eax, [ebx] test eax, eax jz short loc_7F820BE4 push eax call sub_7F820E74 loc_7F820BE4: ; CODE XREF: sub_7F8207A6+436j push esi call sub_7F82F1E1 loc_7F820BEA: ; CODE XREF: sub_7F8207A6+3D0j ; sub_7F8207A6+3D4j xor ecx, ecx mov eax, [ebp+arg_10] test edi, edi jz short loc_7F820BF7 mov [eax], ecx jmp short loc_7F820BF9 ; --------------------------------------------------------------------------- loc_7F820BF7: ; CODE XREF: sub_7F8207A6+44Bj mov [eax], esi loc_7F820BF9: ; CODE XREF: sub_7F8207A6+44Fj mov eax, edi pop edi pop esi pop ebx mov esp, ebp mov dword_7F836C68, 0 pop ebp retn 1Ch sub_7F8207A6 endp ; =============== S U B R O U T I N E ======================================= sub_7F820C0E proc near ; CODE XREF: sub_7F80B5DE+12p ; sub_7F80CB32+1Cp ... var_14 = dword ptr -14h var_10 = byte ptr -10h var_C = dword ptr -0Ch arg_0 = dword ptr 4 sub esp, 14h push ebx push esi mov esi, [esp+1Ch+arg_0] push edi lea ecx, [esp+20h+var_10] push ebp mov eax, [esi] push ecx mov [esp+28h+var_C], eax push 40000h push 80h push eax call sub_7F82A016 mov ecx, [esi] mov ebx, [ecx] mov ebp, [ebx] mov eax, [ebx+14h] test eax, eax jz short loc_7F820C4A push eax push 0 push ecx call sub_7F829FD2 loc_7F820C4A: ; CODE XREF: sub_7F820C0E+31j push dword ptr [esi] call sub_7F812369 lea eax, [ebx+30h] cmp dword ptr [eax], 0 jz short loc_7F820C61 push 0 push eax call sub_7F81813C loc_7F820C61: ; CODE XREF: sub_7F820C0E+49j lea eax, [ebx+34h] cmp dword ptr [eax], 0 jz short loc_7F820C71 push 0 push eax call sub_7F81813C loc_7F820C71: ; CODE XREF: sub_7F820C0E+59j cmp word ptr [ebp+210h], 1 jg loc_7F820D47 cmp dword_7F838078, 0 jz short loc_7F820C8F mov edi, 253h jmp short loc_7F820CBD ; --------------------------------------------------------------------------- loc_7F820C8F: ; CODE XREF: sub_7F820C0E+78j mov eax, [esi] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [esi] mov dword_7F83807C, edx loc_7F820CBD: ; CODE XREF: sub_7F820C0E+7Fj test edi, edi jnz short loc_7F820D24 mov eax, [ebp+8] push 0 mov [esp+28h+var_14], eax push 1 mov dword ptr [ebp+8], 0 mov ecx, [ebp+200h] mov eax, dword_7F838078 mov dx, [ecx+8] mov [eax+214h], dx call sub_7F813C77 mov ecx, [esp+24h+var_14] mov [ebp+8], ecx mov edx, dword_7F838078 cmp word ptr [edx+254h], 0 jz short loc_7F820D0C call sub_7F82A34F jmp short loc_7F820D1A ; --------------------------------------------------------------------------- loc_7F820D0C: ; CODE XREF: sub_7F820C0E+F5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F820D1A: ; CODE XREF: sub_7F820C0E+FCj mov dword_7F838078, 0 loc_7F820D24: ; CODE XREF: sub_7F820C0E+B1j mov eax, [ebp+218h] test eax, eax jz loc_7F820DD0 push eax call sub_7F823FB7 mov dword ptr [ebp+218h], 0 jmp loc_7F820DD0 ; --------------------------------------------------------------------------- loc_7F820D47: ; CODE XREF: sub_7F820C0E+6Bj cmp dword_7F838078, 0 jz short loc_7F820D57 mov edi, 253h jmp short loc_7F820D85 ; --------------------------------------------------------------------------- loc_7F820D57: ; CODE XREF: sub_7F820C0E+140j mov eax, [esi] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [esi] mov dword_7F83807C, edx loc_7F820D85: ; CODE XREF: sub_7F820C0E+147j test edi, edi jnz short loc_7F820DD0 mov ecx, dword_7F838078 cmp word ptr [ecx+214h], 0 jbe short loc_7F820DA2 push 0 push 1 call sub_7F813C77 loc_7F820DA2: ; CODE XREF: sub_7F820C0E+189j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F820DB8 call sub_7F82A34F jmp short loc_7F820DC6 ; --------------------------------------------------------------------------- loc_7F820DB8: ; CODE XREF: sub_7F820C0E+1A1j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F820DC6: ; CODE XREF: sub_7F820C0E+1A8j mov dword_7F838078, 0 loc_7F820DD0: ; CODE XREF: sub_7F820C0E+11Ej ; sub_7F820C0E+134j ... cmp word ptr [ebx+10h], 0 jl short loc_7F820DE0 push 0 push ebp push ebx call sub_7F821055 loc_7F820DE0: ; CODE XREF: sub_7F820C0E+1C7j push ebp call sub_7F820E74 mov eax, [ebx+4] test eax, eax jz short loc_7F820DF5 push eax call sub_7F815991 mov edi, eax loc_7F820DF5: ; CODE XREF: sub_7F820C0E+1DDj push dword ptr [esi] call sub_7F82F1E1 mov eax, edi pop ebp pop edi mov dword ptr [esi], 0 pop esi pop ebx add esp, 14h retn 4 sub_7F820C0E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F820E0E(LPCSTR pSrc, __int16, int) sub_7F820E0E proc near ; CODE XREF: sub_7F8207A6+8Bp ; sub_7F8207A6+1D8p ... pDst = byte ptr -100h pSrc = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 100h lea eax, [ebp+pDst] push eax ; pDst push [ebp+pSrc] ; pSrc call ds:CharToOemA test byte ptr [ebp+arg_4], 2 jz short loc_7F820E34 mov eax, 10h jmp short loc_7F820E47 ; --------------------------------------------------------------------------- loc_7F820E34: ; CODE XREF: sub_7F820E0E+1Dj mov ax, [ebp+arg_4] and ax, 40h cmp ax, 1 sbb eax, eax and al, 0FDh add eax, 0Fh loc_7F820E47: ; CODE XREF: sub_7F820E0E+24j push [ebp+arg_8] ; int push eax ; __int16 lea edx, [ebp+pDst] push edx ; pSrc call sub_7F815751 mov esp, ebp pop ebp retn 0Ch sub_7F820E0E endp ; =============== S U B R O U T I N E ======================================= sub_7F820E5D proc near ; CODE XREF: sub_7F8173E6+86p push edi xor eax, eax mov edi, offset dword_7F833C20 mov ecx, 3Ch rep stosd mov word_7F836C74, ax pop edi retn sub_7F820E5D endp ; =============== S U B R O U T I N E ======================================= sub_7F820E74 proc near ; CODE XREF: sub_7F8207A6+165p ; sub_7F8207A6+439p ... arg_0 = dword ptr 4 mov edx, [esp+arg_0] lea ecx, [edx+210h] mov ax, [ecx] dec ax mov [ecx], ax test ax, ax jg short locret_7F820EDE xor ax, ax cmp word_7F836C74, ax jle short locret_7F820EDE loc_7F820E97: ; CODE XREF: sub_7F820E74+38j movsx ecx, ax cmp dword_7F833C24[ecx*8], edx jz short loc_7F820EB0 inc ax cmp ax, word_7F836C74 jl short loc_7F820E97 jmp short locret_7F820EDE ; --------------------------------------------------------------------------- loc_7F820EB0: ; CODE XREF: sub_7F820E74+2Dj movsx ecx, ax xor eax, eax mov dword_7F833C24[ecx*8], eax mov dword_7F833C20[ecx*8], eax movsx eax, word_7F836C74 sub eax, ecx cmp eax, 1 jnz short loc_7F820ED8 dec word_7F836C74 loc_7F820ED8: ; CODE XREF: sub_7F820E74+5Bj push edx call sub_7F820EE1 locret_7F820EDE: ; CODE XREF: sub_7F820E74+15j ; sub_7F820E74+21j ... retn 4 sub_7F820E74 endp ; =============== S U B R O U T I N E ======================================= sub_7F820EE1 proc near ; CODE XREF: sub_7F820E74+65p ; sub_7F82159B+C3p ... arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esi+258h] test eax, eax jz short loc_7F820EF8 push eax call sub_7F811550 loc_7F820EF8: ; CODE XREF: sub_7F820EE1+Fj lea edi, [esi+20Ch] mov eax, [edi] test eax, eax jz short loc_7F820F23 mov ebx, [eax] cmp dword ptr [ebx], 0 jz short loc_7F820F1C loc_7F820F0B: ; CODE XREF: sub_7F820EE1+39j push dword ptr [ebx] mov eax, ebx add ebx, 4 call sub_7F82F149 cmp dword ptr [ebx], 0 jnz short loc_7F820F0B loc_7F820F1C: ; CODE XREF: sub_7F820EE1+28j push dword ptr [edi] call sub_7F82F1E1 loc_7F820F23: ; CODE XREF: sub_7F820EE1+21j push esi call sub_7F82F149 pop edi pop esi pop ebx retn 4 sub_7F820EE1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F820F2F proc near ; CODE XREF: sub_7F82159B+DDp ; sub_7F821C4E+F7p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor esi, esi mov ebx, 1 mov eax, [ebp+arg_4] mov [ebp+var_8], esi cmp [ebp+arg_8], esi jz short loc_7F820F52 mov ecx, [eax+260h] jmp short loc_7F820F58 ; --------------------------------------------------------------------------- loc_7F820F52: ; CODE XREF: sub_7F820F2F+19j mov ecx, [eax+25Ch] loc_7F820F58: ; CODE XREF: sub_7F820F2F+21j cmp [ebp+arg_8], 0 mov eax, [ebp+arg_0] jz short loc_7F820F66 mov edx, [eax+8] jmp short loc_7F820F69 ; --------------------------------------------------------------------------- loc_7F820F66: ; CODE XREF: sub_7F820F2F+30j mov edx, [eax+4] loc_7F820F69: ; CODE XREF: sub_7F820F2F+35j mov [ebp+var_4], edx cmp [ebp+var_4], 0 jnz short loc_7F820F7C mov edi, 611h jmp loc_7F821035 ; --------------------------------------------------------------------------- loc_7F820F7C: ; CODE XREF: sub_7F820F2F+41j cmp ecx, 0FFFFFFFFh jnz short loc_7F820F8B mov edi, 1016h jmp loc_7F821035 ; --------------------------------------------------------------------------- loc_7F820F8B: ; CODE XREF: sub_7F820F2F+50j test ecx, ecx jnz short loc_7F820FD1 push 1 ; nNumberOfBytesToLockLow push 1DFh ; dwFileOffsetLow push [ebp+var_4] ; int call sub_7F815E19 test eax, eax jz short loc_7F820FBA sub eax, 242h cmp eax, 1 sbb edi, edi and edi, 0DBFh add edi, 253h jmp short loc_7F821035 ; --------------------------------------------------------------------------- loc_7F820FBA: ; CODE XREF: sub_7F820F2F+71j push [ebp+var_4] mov [ebp+var_8], 1 call sub_7F8210D7 mov edi, eax test edi, edi jz short loc_7F820FDE jmp short loc_7F821035 ; --------------------------------------------------------------------------- loc_7F820FD1: ; CODE XREF: sub_7F820F2F+5Ej test cl, 1 jz short loc_7F820FDE loc_7F820FD6: ; CODE XREF: sub_7F820F2F+ADj inc si add ebx, ebx test ebx, ecx jnz short loc_7F820FD6 loc_7F820FDE: ; CODE XREF: sub_7F820F2F+9Ej ; sub_7F820F2F+A5j movsx eax, si push 1 ; nNumberOfBytesToLockLow add eax, 1E0h push eax ; dwFileOffsetLow push [ebp+var_4] ; int call sub_7F815E19 mov edi, eax test edi, edi jz short loc_7F821010 sub edi, 242h cmp edi, 1 sbb edi, edi and edi, 0DBFh add edi, 253h jmp short loc_7F821035 ; --------------------------------------------------------------------------- loc_7F821010: ; CODE XREF: sub_7F820F2F+C6j cmp [ebp+arg_8], 0 mov eax, [ebp+arg_0] jz short loc_7F821028 mov [eax+12h], si mov ecx, [ebp+arg_4] or [ecx+260h], ebx jmp short loc_7F821035 ; --------------------------------------------------------------------------- loc_7F821028: ; CODE XREF: sub_7F820F2F+E8j mov [eax+10h], si mov ecx, [ebp+arg_4] or [ecx+25Ch], ebx loc_7F821035: ; CODE XREF: sub_7F820F2F+48j ; sub_7F820F2F+57j ... cmp [ebp+var_8], 0 jz short loc_7F82104A push 1 ; nNumberOfBytesToUnlockLow push 1DFh ; dwFileOffsetLow push [ebp+var_4] ; int call sub_7F815E51 loc_7F82104A: ; CODE XREF: sub_7F820F2F+10Aj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F820F2F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F821055 proc near ; CODE XREF: sub_7F812460+BEp ; sub_7F8207A6+149p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push esi push edi mov ebx, [ebp+arg_8] mov esi, [ebp+arg_0] test ebx, ebx jz short loc_7F82106B movsx ecx, word ptr [esi+12h] jmp short loc_7F82106F ; --------------------------------------------------------------------------- loc_7F82106B: ; CODE XREF: sub_7F821055+Ej movsx ecx, word ptr [esi+10h] loc_7F82106F: ; CODE XREF: sub_7F821055+14j mov edi, 1 shl edi, cl test ebx, ebx jz short loc_7F82107F mov ecx, [esi+8] jmp short loc_7F821082 ; --------------------------------------------------------------------------- loc_7F82107F: ; CODE XREF: sub_7F821055+23j mov ecx, [esi+4] loc_7F821082: ; CODE XREF: sub_7F821055+28j test ecx, ecx jnz short loc_7F82108D mov eax, 611h jmp short loc_7F8210D0 ; --------------------------------------------------------------------------- loc_7F82108D: ; CODE XREF: sub_7F821055+2Fj test ebx, ebx jz short loc_7F821097 movsx eax, word ptr [esi+12h] jmp short loc_7F82109B ; --------------------------------------------------------------------------- loc_7F821097: ; CODE XREF: sub_7F821055+3Aj movsx eax, word ptr [esi+10h] loc_7F82109B: ; CODE XREF: sub_7F821055+40j push 1 ; nNumberOfBytesToUnlockLow add eax, 1E0h push eax ; dwFileOffsetLow push ecx ; int call sub_7F815E51 test eax, eax jnz short loc_7F8210D0 mov ecx, [ebp+arg_4] test ebx, ebx not edi jz short loc_7F8210C4 and [ecx+260h], edi mov word ptr [esi+12h], 0FFFFh jmp short loc_7F8210D0 ; --------------------------------------------------------------------------- loc_7F8210C4: ; CODE XREF: sub_7F821055+5Fj and [ecx+25Ch], edi mov word ptr [esi+10h], 0FFFFh loc_7F8210D0: ; CODE XREF: sub_7F821055+36j ; sub_7F821055+56j ... pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F821055 endp ; =============== S U B R O U T I N E ======================================= sub_7F8210D7 proc near ; CODE XREF: sub_7F820F2F+95p ; sub_7F82159B+5Bp arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jnz short loc_7F8210E7 mov eax, 611h jmp short loc_7F82110A ; --------------------------------------------------------------------------- loc_7F8210E7: ; CODE XREF: sub_7F8210D7+7j push 20h ; nNumberOfBytesToLockLow push 1E0h ; dwFileOffsetLow push esi ; int call sub_7F815E19 test eax, eax mov eax, 253h jnz short loc_7F82110A push 20h ; nNumberOfBytesToUnlockLow push 1E0h ; dwFileOffsetLow push esi ; int call sub_7F815E51 loc_7F82110A: ; CODE XREF: sub_7F8210D7+Ej ; sub_7F8210D7+24j pop esi retn 4 sub_7F8210D7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82110E proc near ; CODE XREF: sub_7F8207A6+25Ep var_14 = word ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 14h and [ebp+var_14], 0FFFBh mov ax, [ebp+var_14] push ebx and ax, 0FFFEh push esi push edi or al, 2 mov [ebp+var_14], ax xor edi, edi push edi mov esi, [ebp+arg_0] push edi mov [ebp+var_8], edi push edi push edi push 20634D80h push esi call sub_7F82D114 test eax, eax jnz short loc_7F821156 push esi call sub_7F82CCD1 cmp eax, edi mov ebx, eax jnz loc_7F82140C loc_7F821156: ; CODE XREF: sub_7F82110E+36j lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 4D504981h push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F821183 cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F8211C2 loc_7F821183: ; CODE XREF: sub_7F82110E+63j push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz loc_7F82140C mov al, byte ptr [ebp+var_4] cmp al, 91h jb short loc_7F8211A3 xor eax, eax jmp short loc_7F8211AE ; --------------------------------------------------------------------------- loc_7F8211A3: ; CODE XREF: sub_7F82110E+8Fj movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F8211AE: ; CODE XREF: sub_7F82110E+93j push eax push [ebp+var_4] push esi call sub_7F82CF24 mov ebx, eax test ebx, ebx jnz loc_7F82140C loc_7F8211C2: ; CODE XREF: sub_7F82110E+73j lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 64694881h push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F8211EF cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F82122E loc_7F8211EF: ; CODE XREF: sub_7F82110E+CFj push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz loc_7F82140C mov al, byte ptr [ebp+var_4] cmp al, 91h jb short loc_7F82120F xor eax, eax jmp short loc_7F82121A ; --------------------------------------------------------------------------- loc_7F82120F: ; CODE XREF: sub_7F82110E+FBj movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F82121A: ; CODE XREF: sub_7F82110E+FFj push eax push [ebp+var_4] push esi call sub_7F82CF24 mov ebx, eax test ebx, ebx jnz loc_7F82140C loc_7F82122E: ; CODE XREF: sub_7F82110E+DFj lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 74754F8Bh push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F82125B cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F821270 loc_7F82125B: ; CODE XREF: sub_7F82110E+13Bj push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz loc_7F82140C loc_7F821270: ; CODE XREF: sub_7F82110E+14Bj lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 46534180h push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F82129D cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F8212DC loc_7F82129D: ; CODE XREF: sub_7F82110E+17Dj push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz loc_7F82140C mov al, byte ptr [ebp+var_4] cmp al, 91h jb short loc_7F8212BD xor eax, eax jmp short loc_7F8212C8 ; --------------------------------------------------------------------------- loc_7F8212BD: ; CODE XREF: sub_7F82110E+1A9j movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F8212C8: ; CODE XREF: sub_7F82110E+1ADj push eax push [ebp+var_4] push esi call sub_7F82CF24 mov ebx, eax test ebx, ebx jnz loc_7F82140C loc_7F8212DC: ; CODE XREF: sub_7F82110E+18Dj lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 53464180h push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F821309 cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F82135E loc_7F821309: ; CODE XREF: sub_7F82110E+1E9j lea eax, [ebp+var_14] push eax push [ebp+var_8] call sub_7F8199E0 mov ebx, eax test ebx, ebx jnz loc_7F82140C push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz loc_7F82140C mov al, byte ptr [ebp+var_4] cmp al, 91h jb short loc_7F82133F xor eax, eax jmp short loc_7F82134A ; --------------------------------------------------------------------------- loc_7F82133F: ; CODE XREF: sub_7F82110E+22Bj movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F82134A: ; CODE XREF: sub_7F82110E+22Fj push eax push [ebp+var_4] push esi call sub_7F82CF24 mov ebx, eax test ebx, ebx jnz loc_7F82140C loc_7F82135E: ; CODE XREF: sub_7F82110E+1F9j lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 444C4189h push eax push 2 push ecx push esi call sub_7F817E9D mov ebx, eax test ebx, ebx jz short loc_7F82138B cmp ebx, 100Ah jnz loc_7F82140C test ebx, ebx jnz short loc_7F8213C2 loc_7F82138B: ; CODE XREF: sub_7F82110E+26Bj push 1 lea eax, [ebp+var_8] push eax call sub_7F81813C mov ebx, eax test ebx, ebx jnz short loc_7F82140C mov al, byte ptr [ebp+var_4] cmp al, 91h jb short loc_7F8213A7 xor eax, eax jmp short loc_7F8213B2 ; --------------------------------------------------------------------------- loc_7F8213A7: ; CODE XREF: sub_7F82110E+293j movzx eax, al movzx eax, word_7F8358D0[eax*2] loc_7F8213B2: ; CODE XREF: sub_7F82110E+297j push eax push [ebp+var_4] push esi call sub_7F82CF24 mov ebx, eax test ebx, ebx jnz short loc_7F82140C loc_7F8213C2: ; CODE XREF: sub_7F82110E+27Bj push esi call sub_7F82C9EF mov ebx, eax test ebx, ebx jz short loc_7F8213D6 cmp ebx, 100Ah jnz short loc_7F82140C loc_7F8213D6: ; CODE XREF: sub_7F82110E+2BEj push esi call sub_7F82CE3B mov ebx, eax test ebx, ebx jz short loc_7F8213EC cmp ebx, 100Ah jnz short loc_7F82140C xor ebx, ebx loc_7F8213EC: ; CODE XREF: sub_7F82110E+2D2j cmp dword_7F836C70, 0 jz short loc_7F82140C push esi call sub_7F82207F mov ebx, eax test ebx, ebx jnz short loc_7F82140C mov eax, [esi] mov ecx, [eax] mov dword ptr [ecx+4], 0F00C00Fh loc_7F82140C: ; CODE XREF: sub_7F82110E+42j ; sub_7F82110E+6Bj ... cmp [ebp+var_8], 0 jz short loc_7F82141D push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F82141D: ; CODE XREF: sub_7F82110E+302j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82110E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F821428 proc near ; CODE XREF: sub_7F8207A6+DAp ; sub_7F8207A6+1FDp var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [eax] push 0 push 200h call sub_7F82F03B mov edi, eax test edi, edi jnz short loc_7F821453 mov ebx, 400h jmp loc_7F82155F ; --------------------------------------------------------------------------- loc_7F821453: ; CODE XREF: sub_7F821428+1Fj push edi ; lpBuffer push dword ptr [esi+4] ; int call sub_7F812BEA mov ebx, eax test ebx, ebx jnz loc_7F821563 push edi call sub_7F8219A0 mov ebx, eax test ebx, ebx jnz loc_7F821563 push edi call sub_7F821961 mov ebx, eax test ebx, ebx jnz loc_7F821563 push [ebp+arg_8] push [ebp+arg_4] push edi push esi call sub_7F82159B mov ebx, eax test ebx, ebx jnz loc_7F821563 push edi call sub_7F82F149 xor edi, edi mov eax, [ebp+arg_8] cmp [eax], di jz loc_7F82155F cmp dword_7F838078, edi jz short loc_7F8214C0 mov ebx, 253h jmp short loc_7F8214F0 ; --------------------------------------------------------------------------- loc_7F8214C0: ; CODE XREF: sub_7F821428+8Fj mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor ebx, ebx mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F8214F0: ; CODE XREF: sub_7F821428+96j test ebx, ebx jnz short loc_7F821563 lea eax, [ebp+var_2] push eax call sub_7F821A34 cmp eax, 100Bh mov ebx, eax jnz short loc_7F821521 mov eax, [esi] lea ecx, [ebp+var_2] push ecx xor byte ptr [eax+0Eh], 1 call sub_7F821A34 mov ebx, eax test ebx, ebx jz short loc_7F821521 mov eax, [esi] xor byte ptr [eax+0Eh], 1 loc_7F821521: ; CODE XREF: sub_7F821428+DCj ; sub_7F821428+F1j cmp [ebp+var_2], 0 jz short loc_7F821531 mov eax, [esi] or byte ptr [eax+265h], 10h loc_7F821531: ; CODE XREF: sub_7F821428+FEj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F821547 call sub_7F82A34F jmp short loc_7F821555 ; --------------------------------------------------------------------------- loc_7F821547: ; CODE XREF: sub_7F821428+116j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F821555: ; CODE XREF: sub_7F821428+11Dj mov dword_7F838078, 0 loc_7F82155F: ; CODE XREF: sub_7F821428+26j ; sub_7F821428+83j test ebx, ebx jz short loc_7F821590 loc_7F821563: ; CODE XREF: sub_7F821428+38j ; sub_7F821428+48j ... test edi, edi jz short loc_7F82156D push edi call sub_7F82F149 loc_7F82156D: ; CODE XREF: sub_7F821428+13Dj mov eax, [esi] test eax, eax jz short loc_7F821590 cmp word ptr [esi+10h], 0 jl short loc_7F821583 push 0 push eax push esi call sub_7F821055 loc_7F821583: ; CODE XREF: sub_7F821428+150j push dword ptr [esi] call sub_7F820E74 mov dword ptr [esi], 0 loc_7F821590: ; CODE XREF: sub_7F821428+139j ; sub_7F821428+149j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F821428 endp ; =============== S U B R O U T I N E ======================================= sub_7F82159B proc near ; CODE XREF: sub_7F821428+66p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h sub esp, 4 push ebx push esi push edi xor esi, esi push ebp xor ebx, ebx mov edi, [esp+14h+arg_C] mov eax, [esp+14h+arg_4] mov word ptr [edi], 1 mov [esp+14h+var_4], esi mov eax, [eax+8] test eax, eax jz short loc_7F821627 cmp [esp+14h+arg_8], esi jnz short loc_7F821627 push eax call sub_7F821928 mov ebx, eax test ebx, ebx jz short loc_7F821627 mov ax, [ebx+264h] and ah, 3 cmp ah, 2 jnz short loc_7F8215EB push ebx call sub_7F82A7C2 test eax, eax jnz short loc_7F8215EB xor ebx, ebx loc_7F8215EB: ; CODE XREF: sub_7F82159B+42j ; sub_7F82159B+4Cj test ebx, ebx jz short loc_7F821627 mov esi, [esp+14h+arg_0] push dword ptr [esi+4] call sub_7F8210D7 mov ebp, eax test ebp, ebp jnz short loc_7F821610 push ebx push esi call sub_7F823EA8 test eax, eax jnz short loc_7F821620 xor ebx, ebx jmp short loc_7F82162B ; --------------------------------------------------------------------------- loc_7F821610: ; CODE XREF: sub_7F82159B+64j cmp ebp, 253h jz short loc_7F821620 cmp ebp, 254h jnz short loc_7F821643 loc_7F821620: ; CODE XREF: sub_7F82159B+6Fj ; sub_7F82159B+7Bj mov word ptr [edi], 0 jmp short loc_7F82162B ; --------------------------------------------------------------------------- loc_7F821627: ; CODE XREF: sub_7F82159B+21j ; sub_7F82159B+27j ... mov esi, [esp+14h+arg_0] loc_7F82162B: ; CODE XREF: sub_7F82159B+73j ; sub_7F82159B+8Aj test ebx, ebx jnz short loc_7F82166D push [esp+14h+arg_4] call sub_7F8216EE mov ebx, eax test ebx, ebx jnz short loc_7F82166D mov ebp, 400h loc_7F821643: ; CODE XREF: sub_7F82159B+83j ; sub_7F82159B+E6j ... cmp [esp+14h+var_4], 0 jz short loc_7F821653 push 0 push ebx push esi call sub_7F821055 loc_7F821653: ; CODE XREF: sub_7F82159B+ADj cmp word ptr [edi], 0 jz short loc_7F821663 test ebx, ebx jz short loc_7F821663 push ebx call sub_7F820EE1 loc_7F821663: ; CODE XREF: sub_7F82159B+BCj ; sub_7F82159B+C0j mov eax, ebp mov dword ptr [esi], 0 jmp short loc_7F8216E4 ; --------------------------------------------------------------------------- loc_7F82166D: ; CODE XREF: sub_7F82159B+92j ; sub_7F82159B+A1j cmp [esp+14h+arg_8], 0 jnz short loc_7F821683 push 0 push ebx push esi call sub_7F820F2F mov ebp, eax test ebp, ebp jnz short loc_7F821643 loc_7F821683: ; CODE XREF: sub_7F82159B+D7j cmp [esp+14h+arg_8], 1 sbb eax, eax neg eax cmp word ptr [edi], 0 mov [esp+14h+var_4], eax jz short loc_7F8216D9 mov dword_7F838078, ebx mov ax, [esi+10h] mov cx, [esi+2Ch] push eax ; __int16 push ecx ; __int16 lea eax, [esi+4] push ebx ; lpBuffer push eax ; int call sub_7F8129CD mov dword_7F838078, 0 mov ebp, eax test ebp, ebp jnz short loc_7F821643 push ebx call sub_7F8218C5 mov ebp, eax test ebp, ebp jnz loc_7F821643 mov word ptr [ebx+210h], 0 loc_7F8216D9: ; CODE XREF: sub_7F82159B+F9j inc word ptr [ebx+210h] xor eax, eax mov [esi], ebx loc_7F8216E4: ; CODE XREF: sub_7F82159B+D0j pop ebp pop edi pop esi pop ebx add esp, 4 retn 10h sub_7F82159B endp ; =============== S U B R O U T I N E ======================================= sub_7F8216EE proc near ; CODE XREF: sub_7F82159B+98p ; sub_7F821C4E+23p ... var_18 = word ptr -18h var_16 = word ptr -16h var_14 = word ptr -14h arg_0 = dword ptr 4 sub esp, 18h push ebx push esi push edi push ebp push 30h push 284h call sub_7F82F03B mov esi, eax test esi, esi jz loc_7F8218B9 push 200h push [esp+2Ch+arg_0] push esi call sub_7F82FCE0 lea ecx, [esp+34h+var_18] add esp, 0Ch push ecx call sub_7F82ED4B mov ax, [esp+28h+var_18] mov [esi+110h], ax mov cx, [esp+28h+var_16] mov [esi+112h], cx mov dx, [esp+28h+var_14] mov [esi+114h], dx call sub_7F8114FF mov [esi+258h], eax test eax, eax jz loc_7F8218AF lea edi, [esi+274h] mov ebp, offset aMsmail32_ini_1 ; "msmail32.ini" movsx eax, word ptr [esi+0Eh] shl eax, 6 push ebp ; lpFileName add eax, esi push 0Ah ; nDefault add eax, 10h push offset aPercent_free_s ; "Percent_Free_Start_Compress" push offset aMmf_0 ; "MMF" mov ebx, ds:GetPrivateProfileIntA mov [esi+200h], eax call ebx ; GetPrivateProfileIntA mov [edi], ax push ebp ; lpFileName push 5 ; nDefault push offset aPercent_free_0 ; "Percent_Free_Stop_Compress" push offset aMmf_0 ; "MMF" call ebx ; GetPrivateProfileIntA mov [esi+276h], ax cmp [edi], ax jge short loc_7F8217B3 inc ax mov [edi], ax loc_7F8217B3: ; CODE XREF: sub_7F8216EE+BEj mov edi, offset aMsmail32_ini_1 ; "msmail32.ini" mov ebp, offset aMmf_0 ; "MMF" push edi ; lpFileName push 258h ; nDefault push offset aSecs_till_fast ; "Secs_Till_Fast_Compress" push ebp ; lpAppName call ebx ; GetPrivateProfileIntA imul eax, 64h push edi ; lpFileName mov [esi+278h], eax push 0 ; nDefault push offset aNo_compress ; "No_Compress" push ebp ; lpAppName call ebx ; GetPrivateProfileIntA test eax, eax jz short loc_7F8217EA or byte ptr [esi+265h], 10h loc_7F8217EA: ; CODE XREF: sub_7F8216EE+F3j mov edi, offset aMsmail32_ini_1 ; "msmail32.ini" mov ebp, offset aMmf_0 ; "MMF" push edi ; lpFileName push 12Ch ; nDefault push offset aKb_free_start_ ; "Kb_Free_Start_Compress" push ebp ; lpAppName call ebx ; GetPrivateProfileIntA imul eax, 3E8h push edi ; lpFileName mov [esi+27Ch], eax push 64h ; nDefault lea edi, [esi+206h] push offset aKb_free_stop_c ; "Kb_Free_Stop_Compress" push ebp ; lpAppName call ebx ; GetPrivateProfileIntA imul eax, 3E8h mov [esi+280h], eax mov ecx, [esi+200h] movzx eax, word ptr [ecx+8] dec eax shr eax, 8 push 30h inc ax mov [edi], ax mov [esi+204h], ax mov ax, [edi] shl ax, 8 mov [esi+208h], ax movzx ecx, word ptr [edi] lea eax, ds:4[ecx*4] push eax call sub_7F82F18D mov [esi+20Ch], eax test eax, eax jz short loc_7F8218AF mov di, [edi] mov ebx, [eax] test di, di jle short loc_7F821895 loc_7F821879: ; CODE XREF: sub_7F8216EE+1A5j push 30h push 2000h call sub_7F82F03B mov [ebx], eax test eax, eax jz short loc_7F8218AF dec di add ebx, 4 test di, di jg short loc_7F821879 loc_7F821895: ; CODE XREF: sub_7F8216EE+189j xor edi, edi mov [ebx], edi loc_7F821899: ; CODE XREF: sub_7F8216EE+1BBj call sub_7F82AC0C push eax mov [esi+8], eax call sub_7F821928 test eax, eax jnz short loc_7F821899 mov eax, esi jmp short loc_7F8218BB ; --------------------------------------------------------------------------- loc_7F8218AF: ; CODE XREF: sub_7F8216EE+6Aj ; sub_7F8216EE+17Fj ... test esi, esi jz short loc_7F8218B9 push esi call sub_7F820EE1 loc_7F8218B9: ; CODE XREF: sub_7F8216EE+17j ; sub_7F8216EE+1C3j xor eax, eax loc_7F8218BB: ; CODE XREF: sub_7F8216EE+1BFj pop ebp pop edi pop esi pop ebx add esp, 18h retn 4 sub_7F8216EE endp ; =============== S U B R O U T I N E ======================================= sub_7F8218C5 proc near ; CODE XREF: sub_7F82159B+126p ; sub_7F821C4E+103p arg_0 = dword ptr 4 xor dx, dx cmp word_7F836C74, dx jle short loc_7F8218E9 loc_7F8218D1: ; CODE XREF: sub_7F8218C5+22j movsx eax, dx cmp dword_7F833C24[eax*8], 0 jz short loc_7F8218E9 inc dx cmp dx, word_7F836C74 jl short loc_7F8218D1 loc_7F8218E9: ; CODE XREF: sub_7F8218C5+Aj ; sub_7F8218C5+17j cmp dx, 1Eh jl short loc_7F8218F6 mov eax, 1011h jmp short locret_7F821925 ; --------------------------------------------------------------------------- loc_7F8218F6: ; CODE XREF: sub_7F8218C5+28j movsx eax, dx cmp dx, word_7F836C74 lea ecx, ds:0[eax*8] mov eax, [esp+arg_0] mov dword_7F833C24[ecx], eax mov eax, [eax+8] mov dword_7F833C20[ecx], eax jnz short loc_7F821923 inc word_7F836C74 loc_7F821923: ; CODE XREF: sub_7F8218C5+55j xor eax, eax locret_7F821925: ; CODE XREF: sub_7F8218C5+2Fj retn 4 sub_7F8218C5 endp ; =============== S U B R O U T I N E ======================================= sub_7F821928 proc near ; CODE XREF: sub_7F82159B+2Ap ; sub_7F8216EE+1B4p arg_0 = dword ptr 4 xor cx, cx push esi mov dx, word_7F836C74 cmp dx, cx jle short loc_7F82194F mov eax, [esp+4+arg_0] loc_7F82193C: ; CODE XREF: sub_7F821928+25j movsx esi, cx cmp dword_7F833C20[esi*8], eax jz short loc_7F821955 inc cx cmp cx, dx jl short loc_7F82193C loc_7F82194F: ; CODE XREF: sub_7F821928+Ej xor eax, eax loc_7F821951: ; CODE XREF: sub_7F821928+37j pop esi retn 4 ; --------------------------------------------------------------------------- loc_7F821955: ; CODE XREF: sub_7F821928+1Ej movsx eax, cx mov eax, dword_7F833C24[eax*8] jmp short loc_7F821951 sub_7F821928 endp ; =============== S U B R O U T I N E ======================================= sub_7F821961 proc near ; CODE XREF: sub_7F821428+4Fp arg_0 = dword ptr 4 mov ecx, [esp+arg_0] push esi movsx eax, word ptr [ecx+0Eh] shl eax, 6 mov si, [ecx+0Ch] lea edx, [eax+ecx+10h] mov eax, [ecx+50h] sub eax, [ecx+10h] shr eax, 5 cmp ax, si jb short loc_7F821997 mov ax, [edx+8] cmp ax, si ja short loc_7F821997 cmp [edx+0Ah], ax mov eax, 0 jbe short loc_7F82199C loc_7F821997: ; CODE XREF: sub_7F821961+20j ; sub_7F821961+29j mov eax, 100Bh loc_7F82199C: ; CODE XREF: sub_7F821961+34j pop esi retn 4 sub_7F821961 endp ; =============== S U B R O U T I N E ======================================= sub_7F8219A0 proc near ; CODE XREF: sub_7F821428+3Fp ; sub_7F8225B6+63p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dword_7F836C70, 0 cmp dword ptr [eax], 1AFDEADh jz short loc_7F8219BD mov eax, 100Bh jmp short locret_7F821A31 ; --------------------------------------------------------------------------- loc_7F8219BD: ; CODE XREF: sub_7F8219A0+14j mov ecx, [eax+4] cmp ecx, 0F00C00Fh jnz short loc_7F8219D9 xor ecx, ecx mov [eax+126h], cx mov [eax+128h], ecx jmp short loc_7F821A1F ; --------------------------------------------------------------------------- loc_7F8219D9: ; CODE XREF: sub_7F8219A0+26j cmp ecx, 0F00C010h jz short loc_7F821A1F cmp ecx, 0F00C00Dh jz short loc_7F821A15 cmp ecx, 0F00C00Eh jz short loc_7F821A15 mov eax, ecx and eax, 0FFFF0000h cmp eax, 0F000000h jz short loc_7F821A06 mov eax, 100Bh jmp short locret_7F821A31 ; --------------------------------------------------------------------------- loc_7F821A06: ; CODE XREF: sub_7F8219A0+5Dj cmp ecx, 0F00C00Fh sbb eax, eax add eax, 100Dh jmp short locret_7F821A31 ; --------------------------------------------------------------------------- loc_7F821A15: ; CODE XREF: sub_7F8219A0+47j ; sub_7F8219A0+4Fj mov dword_7F836C70, 1 loc_7F821A1F: ; CODE XREF: sub_7F8219A0+37j ; sub_7F8219A0+3Fj cmp dword_7F836C68, 0 jz short loc_7F821A2F mov dword ptr [eax+4], 0F00C00Dh loc_7F821A2F: ; CODE XREF: sub_7F8219A0+86j xor eax, eax locret_7F821A31: ; CODE XREF: sub_7F8219A0+1Bj ; sub_7F8219A0+64j ... retn 4 sub_7F8219A0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F821A34 proc near ; CODE XREF: sub_7F821428+D0p ; sub_7F821428+E8p ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 mov dx, 1 push ebp mov ebp, esp mov eax, dword_7F838078 mov cx, [eax+0Eh] sub esp, 10h mov [ebp+var_C], 2000h push ebx xor cl, dl push esi push edi shl dx, cl mov bx, [eax+204h] mov ecx, [eax+200h] dec bx mov esi, [ecx] mov [ebp+var_4], dx mov ecx, [eax+20Ch] mov edi, [ecx] jz short loc_7F821AA9 loc_7F821A75: ; CODE XREF: sub_7F821A34+73j lea eax, [ebp+var_C] push eax ; int push esi ; lDistanceToMove push dword ptr [edi] ; lpBuffer call sub_7F8127E7 mov [ebp+var_8], eax test eax, eax jnz loc_7F821C30 cmp [ebp+var_C], 2000h jnz loc_7F821B23 dec bx add esi, 2000h add edi, 4 test bx, bx jnz short loc_7F821A75 loc_7F821AA9: ; CODE XREF: sub_7F821A34+3Fj mov eax, dword_7F838078 mov ecx, [eax+200h] mov ax, [ecx+8] and ax, 0FFh mov [ebp+var_2], ax jnz short loc_7F821AC8 mov [ebp+var_2], 100h loc_7F821AC8: ; CODE XREF: sub_7F821A34+8Cj mov [ebp+var_C], 2000h mov ebx, [ebp+arg_0] test ebx, ebx jz short loc_7F821ADF call ds:GetTickCount mov [ebp+var_10], eax loc_7F821ADF: ; CODE XREF: sub_7F821A34+A0j lea eax, [ebp+var_C] push eax ; int push esi ; lDistanceToMove push dword ptr [edi] ; lpBuffer call sub_7F8127E7 mov [ebp+var_8], eax test eax, eax jnz loc_7F821C30 test ebx, ebx jz short loc_7F821B0E call ds:GetTickCount sub eax, [ebp+var_10] cmp eax, 3E8h sbb eax, eax inc eax mov [ebx], ax loc_7F821B0E: ; CODE XREF: sub_7F821A34+C4j cmp [ebp+var_C], 2000h jz short loc_7F821B2F mov [ebp+var_8], 200h jmp loc_7F821C30 ; --------------------------------------------------------------------------- loc_7F821B23: ; CODE XREF: sub_7F821A34+5Fj mov [ebp+var_8], 200h jmp loc_7F821C30 ; --------------------------------------------------------------------------- loc_7F821B2F: ; CODE XREF: sub_7F821A34+E1j xor esi, esi cmp dword_7F836C64, esi jnz short loc_7F821B5A push esi call sub_7F812C72 mov [ebp+var_8], eax cmp eax, esi jnz loc_7F821C30 call sub_7F820691 mov [ebp+var_8], eax cmp eax, esi jnz loc_7F821C30 loc_7F821B5A: ; CODE XREF: sub_7F821A34+103j mov eax, dword_7F838078 mov si, [eax+204h] test si, si jz loc_7F821C08 loc_7F821B6F: ; CODE XREF: sub_7F821A34+1CEj cmp [ebp+var_2], 0 mov ebx, [edi] jz short loc_7F821BF4 loc_7F821B78: ; CODE XREF: sub_7F821A34+1BEj lea ecx, [ebx+10h] mov ax, [ecx] or ax, [ebp+var_4] or ah, 10h mov [ecx], ax and ax, 9FF7h mov [ecx], ax cmp dword_7F836C64, 0 jnz short loc_7F821BE6 mov ecx, [ebx+14h] test ecx, ecx jl short loc_7F821BD0 mov al, [ebx+4] cmp al, 8Eh jz short loc_7F821BD0 cmp al, 8Fh jnz short loc_7F821BB5 mov eax, dword_7F838078 add [eax+270h], ecx loc_7F821BB5: ; CODE XREF: sub_7F821A34+174j cmp word ptr [ebx+1Eh], 0 jnz short loc_7F821BE6 movzx eax, byte ptr [ebx+4] cmp eax, 86h jz short loc_7F821BE0 cmp eax, 87h jnz short loc_7F821BE6 jmp short loc_7F821BDA ; --------------------------------------------------------------------------- loc_7F821BD0: ; CODE XREF: sub_7F821A34+169j ; sub_7F821A34+170j cmp si, 1 jnz short loc_7F821BDA cmp [edi], ebx jz short loc_7F821BE6 loc_7F821BDA: ; CODE XREF: sub_7F821A34+19Aj ; sub_7F821A34+1A0j mov word ptr [ebx+1Ch], 0 loc_7F821BE0: ; CODE XREF: sub_7F821A34+191j push ebx call sub_7F8147DD loc_7F821BE6: ; CODE XREF: sub_7F821A34+162j ; sub_7F821A34+186j ... dec [ebp+var_2] add ebx, 20h cmp [ebp+var_2], 0 jnz short loc_7F821B78 loc_7F821BF4: ; CODE XREF: sub_7F821A34+142j dec si sub edi, 4 mov [ebp+var_2], 100h test si, si jnz loc_7F821B6F loc_7F821C08: ; CODE XREF: sub_7F821A34+135j cmp dword_7F836C64, 0 jnz short loc_7F821C30 mov ecx, dword_7F838078 mov eax, ecx mov ax, [eax+0Ch] cmp [ecx+208h], ax jbe short loc_7F821C30 push 1 call sub_7F812D74 mov [ebp+var_8], eax loc_7F821C30: ; CODE XREF: sub_7F821A34+52j ; sub_7F821A34+BCj ... call ds:GetTickCount mov ecx, dword_7F838078 pop edi pop esi pop ebx mov [ecx+268h], eax mov eax, [ebp+var_8] mov esp, ebp pop ebp retn 4 sub_7F821A34 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F821C4E(LPCSTR pSrc, int) sub_7F821C4E proc near ; CODE XREF: sub_7F8207A6+C4p pSrc = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi push ebp mov ebp, [esp+10h+arg_4] xor edi, edi mov esi, [ebp+0] call sub_7F821D9A mov ebx, eax test ebx, ebx jnz short loc_7F821C70 mov ebp, 400h jmp loc_7F821D65 ; --------------------------------------------------------------------------- loc_7F821C70: ; CODE XREF: sub_7F821C4E+16j push ebx call sub_7F8216EE mov edi, eax test edi, edi jnz short loc_7F821C86 mov ebp, 400h jmp loc_7F821D65 ; --------------------------------------------------------------------------- loc_7F821C86: ; CODE XREF: sub_7F821C4E+2Cj mov [esi], edi cmp dword_7F838078, 0 jz short loc_7F821C98 mov ebp, 253h jmp short loc_7F821CC8 ; --------------------------------------------------------------------------- loc_7F821C98: ; CODE XREF: sub_7F821C4E+41j mov eax, [ebp+0] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebp xor ebp, ebp loc_7F821CC8: ; CODE XREF: sub_7F821C4E+48j test ebp, ebp jnz loc_7F821D65 call sub_7F821E82 mov ebp, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F821CED call sub_7F82A34F jmp short loc_7F821CFB ; --------------------------------------------------------------------------- loc_7F821CED: ; CODE XREF: sub_7F821C4E+96j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F821CFB: ; CODE XREF: sub_7F821C4E+9Dj mov dword_7F838078, 0 test ebp, ebp jnz short loc_7F821D69 mov eax, [esi+4] test eax, eax jz short loc_7F821D16 push eax call sub_7F815991 loc_7F821D16: ; CODE XREF: sub_7F821C4E+C0j lea eax, [esi+4] push eax ; int push 0 ; __int16 push [esp+18h+pSrc] ; pSrc call sub_7F820E0E mov ebp, eax test ebp, ebp jz short loc_7F821D41 cmp ebp, 203h jnz short loc_7F821D38 mov ebp, 253h loc_7F821D38: ; CODE XREF: sub_7F821C4E+E3j mov dword ptr [esi+4], 0 jmp short loc_7F821D65 ; --------------------------------------------------------------------------- loc_7F821D41: ; CODE XREF: sub_7F821C4E+DBj push 0 push edi push esi call sub_7F820F2F mov ebp, eax test ebp, ebp jnz short loc_7F821D69 push edi call sub_7F8218C5 mov ebp, eax test ebp, ebp jnz short loc_7F821D69 mov word ptr [edi+210h], 1 loc_7F821D65: ; CODE XREF: sub_7F821C4E+1Dj ; sub_7F821C4E+33j ... test ebp, ebp jz short loc_7F821D85 loc_7F821D69: ; CODE XREF: sub_7F821C4E+B9j ; sub_7F821C4E+100j ... test edi, edi jz short loc_7F821D85 cmp word ptr [esi+10h], 0 jl short loc_7F821D7D push 0 push edi push esi call sub_7F821055 loc_7F821D7D: ; CODE XREF: sub_7F821C4E+124j push edi call sub_7F820EE1 xor edi, edi loc_7F821D85: ; CODE XREF: sub_7F821C4E+119j ; sub_7F821C4E+11Dj test ebx, ebx jz short loc_7F821D8F push ebx call sub_7F82F149 loc_7F821D8F: ; CODE XREF: sub_7F821C4E+139j mov eax, ebp mov [esi], edi pop ebp pop edi pop esi pop ebx retn 8 sub_7F821C4E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F821D9A proc near ; CODE XREF: sub_7F821C4E+Dp var_18 = word ptr -18h var_16 = word ptr -16h var_14 = word ptr -14h push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi push 10h push 200h call sub_7F82F03B mov ebx, eax mov eax, 0 test ebx, ebx jz loc_7F821E7B mov dword ptr [ebx], 1AFDEADh lea ecx, [ebp+var_18] cmp dword_7F836C68, 1 sbb eax, eax push ecx and eax, 2 add eax, 0F00C00Dh mov [ebx+4], eax mov word ptr [ebx+0Ch], 200h call sub_7F82ED4B mov ax, [ebp+var_18] mov [ebx+110h], ax mov [ebx+116h], ax lea esi, [ebx+10h] mov ax, [ebp+var_16] mov [ebx+112h], ax mov [ebx+118h], ax mov ax, [ebp+var_14] mov [ebx+114h], ax mov [ebx+11Ah], ax lea eax, [esi+40h] mov edi, eax mov ecx, 10h mov word ptr [esi+8], 2 mov word ptr [esi+0Ah], 1 push offset aSystem_ini ; "system.ini" mov dword ptr [esi], 200h mov dword ptr [esi+4], 8200h rep movsd push 80h ; nSize lea ecx, [ebx+90h] push ecx ; lpReturnedString mov dword ptr [eax], 4200h push offset Default ; lpDefault push offset aLanguage_dll ; "language.dll" push offset aBoot_descripti ; "boot.description" call ds:GetPrivateProfileStringA mov byte ptr [eax+ebx+90h], 0 mov eax, ebx loc_7F821E7B: ; CODE XREF: sub_7F821D9A+1Ej pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F821D9A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F821E82 proc near ; CODE XREF: sub_7F821C4E+82p nNumberOfBytesToWrite= dword ptr -4 push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi push 0 call sub_7F812C72 test eax, eax jnz loc_7F821FEA cmp dword_7F838080, 0 jnz short loc_7F821EB0 call sub_7F82A588 test eax, eax jnz loc_7F821FEA loc_7F821EB0: ; CODE XREF: sub_7F821E82+1Fj push 1 ; __int16 mov eax, dword_7F838080 push 0 ; lDistanceToMove push eax ; int call sub_7F815C03 test eax, eax jnz loc_7F821FEA mov eax, dword_7F838078 cmp dword_7F836760, 0 mov ecx, [eax+200h] mov esi, [ecx+4] jz short loc_7F821EE5 mov eax, dword_7F836760 inc byte ptr [eax] loc_7F821EE5: ; CODE XREF: sub_7F821E82+5Aj mov edi, lpBuffer xor eax, eax mov ecx, 800h rep stosd test esi, esi jz short loc_7F821F29 mov edi, 2000h loc_7F821EFD: ; CODE XREF: sub_7F821E82+A5j cmp esi, edi mov eax, esi jb short loc_7F821F05 mov eax, edi loc_7F821F05: ; CODE XREF: sub_7F821E82+7Fj mov [ebp+nNumberOfBytesToWrite], eax lea eax, [ebp+nNumberOfBytesToWrite] push eax ; lpNumberOfBytesWritten mov eax, dword_7F838080 push [ebp+nNumberOfBytesToWrite] ; nNumberOfBytesToWrite push lpBuffer ; lpBuffer push eax ; int call sub_7F815B4C test eax, eax jnz short loc_7F821F87 sub esi, [ebp+nNumberOfBytesToWrite] jnz short loc_7F821EFD loc_7F821F29: ; CODE XREF: sub_7F821E82+74j cmp dword_7F836760, 0 jz short loc_7F821F39 mov eax, dword_7F836760 dec byte ptr [eax] loc_7F821F39: ; CODE XREF: sub_7F821E82+AEj mov eax, dword_7F838078 mov eax, [eax+200h] mov cx, [eax+0Ah] cmp cx, 1 jb short loc_7F821F9A cmp [eax+8], cx jbe short loc_7F821F9A mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov esi, [ebx] mov eax, [edx+esi] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 lea ebx, [eax+edx] jmp short loc_7F821F9C ; --------------------------------------------------------------------------- loc_7F821F87: ; CODE XREF: sub_7F821E82+A0j cmp dword_7F836760, 0 jz short loc_7F821FEA mov ecx, dword_7F836760 dec byte ptr [ecx] jmp short loc_7F821FEA ; --------------------------------------------------------------------------- loc_7F821F9A: ; CODE XREF: sub_7F821E82+CAj ; sub_7F821E82+D0j xor ebx, ebx loc_7F821F9C: ; CODE XREF: sub_7F821E82+103j mov edi, ebx xor eax, eax mov ecx, 8 push ebx rep stosd mov dword ptr [ebx+4], 70616D80h mov dword ptr [ebx+18h], 200h mov dword ptr [ebx+14h], 7FF8h xor esi, esi call sub_7F8148F7 push esi call sub_7F8148F7 push esi push 1 call sub_7F813C77 test eax, eax jnz short loc_7F821FEA push ebx call sub_7F8148F7 push esi call sub_7F8148F7 push esi push 1 call sub_7F813C77 loc_7F821FEA: ; CODE XREF: sub_7F821E82+12j ; sub_7F821E82+28j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F821E82 endp ; =============== S U B R O U T I N E ======================================= sub_7F821FF1 proc near ; CODE XREF: sub_7F8207A6+26Ep arg_0 = dword ptr 4 push esi push edi push offset aSystem_ini ; "system.ini" push 220h ; nSize push offset ReturnedString ; lpReturnedString push offset Default ; lpDefault push offset aLanguage_dll ; "language.dll" push offset aBoot_descripti ; "boot.description" call ds:GetPrivateProfileStringA cmp eax, 7Fh jb short loc_7F822021 mov eax, 7Fh loc_7F822021: ; CODE XREF: sub_7F821FF1+29j mov esi, offset ReturnedString mov edi, [esp+8+arg_0] mov byte ptr ReturnedString[eax], 0 push esi ; lpString2 mov eax, [edi] mov eax, [eax] add eax, 90h push eax ; lpString1 call sub_7F8176C6 test eax, eax jz short loc_7F822078 mov eax, [edi] push esi ; lpString2 mov edi, [eax] lea ecx, [edi+90h] push ecx ; lpString1 call ds:lstrcpyA lea ecx, [edi+214h] mov ax, [ecx] test ax, ax jnz short loc_7F82206A inc ax mov [ecx], ax loc_7F82206A: ; CODE XREF: sub_7F821FF1+72j or byte ptr [edi+265h], 8 mov eax, 1 jmp short loc_7F82207A ; --------------------------------------------------------------------------- loc_7F822078: ; CODE XREF: sub_7F821FF1+52j xor eax, eax loc_7F82207A: ; CODE XREF: sub_7F821FF1+85j pop edi pop esi retn 4 sub_7F821FF1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82207F proc near ; CODE XREF: sub_7F82110E+2E8p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp xor eax, eax mov ebp, esp sub esp, 10h push esi mov [ebp+var_4], eax mov [ebp+var_10], 4D504981h mov [ebp+var_C], 64694881h mov [ebp+var_8], 46534180h lea esi, [ebp+var_10] loc_7F8220A3: ; CODE XREF: sub_7F82207F+41j push dword ptr [esi] push [ebp+arg_0] call sub_7F8220C9 test eax, eax jz short loc_7F8220BA cmp eax, 1001h jnz short loc_7F8220C2 xor eax, eax loc_7F8220BA: ; CODE XREF: sub_7F82207F+30j add esi, 4 cmp dword ptr [esi], 0 jnz short loc_7F8220A3 loc_7F8220C2: ; CODE XREF: sub_7F82207F+37j pop esi mov esp, ebp pop ebp retn 4 sub_7F82207F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8220C9 proc near ; CODE XREF: sub_7F82207F+29p var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = word ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 28h push ebx push esi push edi xor esi, esi mov eax, [ebp+arg_4] mov [ebp+var_14], esi sub eax, 46534180h mov [ebp+var_10], esi lea ecx, [ebp+var_14] mov [ebp+var_1C], esi push ecx lea edx, [ebp+arg_4] push esi mov ebx, [ebp+arg_0] push edx cmp eax, 1 sbb eax, eax push ebx neg eax mov [ebp+var_28], eax call sub_7F817E9D cmp eax, esi mov edi, eax jnz loc_7F822375 push [ebp+var_14] call sub_7F8198FC dec ax mov word ptr [ebp+var_4], ax cmp ax, si jl loc_7F822375 loc_7F822122: ; CODE XREF: sub_7F8220C9+2A6j push [ebp+var_4] push [ebp+var_14] call sub_7F819508 mov [ebp+var_18], eax cmp [ebp+var_28], esi jz loc_7F8221C7 cmp dword_7F838078, esi jz short loc_7F822148 mov edi, 253h jmp short loc_7F822177 ; --------------------------------------------------------------------------- loc_7F822148: ; CODE XREF: sub_7F8220C9+76j mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx loc_7F822177: ; CODE XREF: sub_7F8220C9+7Dj test edi, edi jnz loc_7F822375 push esi push [ebp+var_18] call sub_7F8144A4 mov [ebp+var_C], eax cmp eax, esi jz short loc_7F822195 mov ecx, [eax+8] mov [ebp+var_18], ecx loc_7F822195: ; CODE XREF: sub_7F8220C9+C4j mov eax, dword_7F838078 cmp [eax+254h], si jz short loc_7F8221AA call sub_7F82A34F jmp short loc_7F8221B8 ; --------------------------------------------------------------------------- loc_7F8221AA: ; CODE XREF: sub_7F8220C9+D8j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8221B8: ; CODE XREF: sub_7F8220C9+DFj mov dword_7F838078, esi cmp [ebp+var_C], esi jz loc_7F82236B loc_7F8221C7: ; CODE XREF: sub_7F8220C9+6Aj lea eax, [ebp+var_10] lea ecx, [ebp+var_18] push eax push esi push ecx push ebx call sub_7F817E9D mov edi, eax test edi, edi jz short loc_7F8221EF cmp edi, 1001h jnz loc_7F822375 xor edi, edi jmp loc_7F82236B ; --------------------------------------------------------------------------- loc_7F8221EF: ; CODE XREF: sub_7F8220C9+111j push [ebp+var_10] mov [ebp+var_6], si call sub_7F8198FC dec ax mov word ptr [ebp+var_C+2], ax cmp ax, si jl loc_7F8222DC loc_7F82220A: ; CODE XREF: sub_7F8220C9+20Dj push [ebp+var_C+2] push [ebp+var_10] call sub_7F819508 lea ecx, [ebp+var_4+3] mov [ebp+var_20], eax mov [ebp+var_24], 1 lea eax, [ebp+var_24] push eax push ecx push 0Eh push [ebp+var_C+2] push [ebp+var_10] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F822375 test byte ptr [ebp+var_4+3], 22h jnz loc_7F8222D2 cmp dword_7F838078, esi jz short loc_7F822257 mov edi, 253h jmp short loc_7F822286 ; --------------------------------------------------------------------------- loc_7F822257: ; CODE XREF: sub_7F8220C9+185j mov eax, [ebx] xor edi, edi mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx loc_7F822286: ; CODE XREF: sub_7F8220C9+18Cj test edi, edi jnz loc_7F822375 push esi push [ebp+var_20] call sub_7F8144A4 test eax, eax jz short loc_7F8222A9 or byte ptr [eax+11h], 8 inc [ebp+var_6] push eax call sub_7F8148F7 loc_7F8222A9: ; CODE XREF: sub_7F8220C9+1D0j mov eax, dword_7F838078 cmp [eax+254h], si jz short loc_7F8222BE call sub_7F82A34F jmp short loc_7F8222CC ; --------------------------------------------------------------------------- loc_7F8222BE: ; CODE XREF: sub_7F8220C9+1ECj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8222CC: ; CODE XREF: sub_7F8220C9+1F3j mov dword_7F838078, esi loc_7F8222D2: ; CODE XREF: sub_7F8220C9+179j dec word ptr [ebp+var_C+2] jns loc_7F82220A loc_7F8222DC: ; CODE XREF: sub_7F8220C9+13Bj push esi lea eax, [ebp+var_10] push eax call sub_7F81813C cmp dword_7F838078, esi jz short loc_7F8222F5 mov edi, 253h jmp short loc_7F822324 ; --------------------------------------------------------------------------- loc_7F8222F5: ; CODE XREF: sub_7F8220C9+223j mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx loc_7F822324: ; CODE XREF: sub_7F8220C9+22Aj test edi, edi jnz short loc_7F822375 push esi push [ebp+var_18] call sub_7F8144A4 test eax, eax jz short loc_7F822342 movsx ecx, [ebp+var_6] push eax mov [eax+0Ch], ecx call sub_7F8148F7 loc_7F822342: ; CODE XREF: sub_7F8220C9+26Aj mov eax, dword_7F838078 cmp [eax+254h], si jz short loc_7F822357 call sub_7F82A34F jmp short loc_7F822365 ; --------------------------------------------------------------------------- loc_7F822357: ; CODE XREF: sub_7F8220C9+285j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F822365: ; CODE XREF: sub_7F8220C9+28Cj mov dword_7F838078, esi loc_7F82236B: ; CODE XREF: sub_7F8220C9+F8j ; sub_7F8220C9+121j dec word ptr [ebp+var_4] jns loc_7F822122 loc_7F822375: ; CODE XREF: sub_7F8220C9+3Cj ; sub_7F8220C9+53j ... cmp [ebp+var_14], 0 jz short loc_7F822386 push 0 lea eax, [ebp+var_14] push eax call sub_7F81813C loc_7F822386: ; CODE XREF: sub_7F8220C9+2B0j cmp [ebp+var_10], 0 jz short loc_7F822397 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F822397: ; CODE XREF: sub_7F8220C9+2C1j cmp [ebp+var_1C], 0 jz short loc_7F8223A8 push 0 lea eax, [ebp+var_1C] push eax call sub_7F81813C loc_7F8223A8: ; CODE XREF: sub_7F8220C9+2D2j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8220C9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8223B3(int, LPCSTR lpString) sub_7F8223B3 proc near ; CODE XREF: sub_7F823870+1DEp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 pSrc = dword ptr 8 lpString = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi xor esi, esi mov [ebp+var_C], esi mov [ebp+var_8], esi lea eax, [ebp+var_8] lea ecx, [ebp+var_C] push eax mov [ebp+var_10], esi push ecx mov [ebp+var_4], esi mov dword_7F836C60, 1 push 1 push esi push [ebp+pSrc] call sub_7F822552 mov edi, eax test edi, edi jz short loc_7F822461 cmp edi, 400h jnz short loc_7F8223FA mov edi, 100Bh loc_7F8223FA: ; CODE XREF: sub_7F8223B3+40j cmp edi, 100Bh jnz loc_7F8224E3 xor edi, edi cmp [ebp+var_C], edi jz short loc_7F822418 push [ebp+var_C] call sub_7F824500 mov [ebp+var_C], edi loc_7F822418: ; CODE XREF: sub_7F8223B3+58j xor edi, edi cmp [ebp+var_8], edi jz short loc_7F82242A push [ebp+var_8] call sub_7F824500 mov [ebp+var_8], edi loc_7F82242A: ; CODE XREF: sub_7F8223B3+6Aj lea eax, [ebp+var_8] lea ecx, [ebp+var_C] push eax push ecx push 1 push 1 push [ebp+pSrc] call sub_7F822552 mov edi, eax test edi, edi jz short loc_7F82245C cmp edi, 400h jnz short loc_7F822451 mov edi, 100Bh loc_7F822451: ; CODE XREF: sub_7F8223B3+97j cmp edi, 100Bh jmp loc_7F8224E3 ; --------------------------------------------------------------------------- loc_7F82245C: ; CODE XREF: sub_7F8223B3+8Fj mov esi, 1 loc_7F822461: ; CODE XREF: sub_7F8223B3+38j lea eax, [ebp+var_10] xor ebx, ebx push eax ; int push esi ; int push ebx ; int push [ebp+pSrc] ; pSrc call sub_7F8225B6 cmp eax, ebx mov edi, eax jnz short loc_7F8224E3 push ebx ; int lea eax, [ebp+var_4] push ebx ; int push eax ; int push 20Ah ; __int16 push ebx ; int push ebx ; int push [ebp+lpString] ; lpString call sub_7F8207A6 mov edi, eax test edi, edi jnz short loc_7F8224E3 mov eax, [ebp+var_4] mov ecx, [eax] mov edx, [ecx] and word ptr [edx+264h], 0BFFFh push [ebp+var_4] push [ebp+var_8] push [ebp+var_C] push [ebp+var_10] call sub_7F822F66 cmp eax, ebx mov edi, eax jnz short loc_7F8224E3 push [ebp+var_4] call sub_7F82DBC2 cmp eax, ebx mov edi, eax jnz short loc_7F8224E3 push 1 push [ebp+var_4] call sub_7F823452 cmp eax, ebx mov edi, eax jnz short loc_7F8224E3 push 1 push [ebp+var_4] call sub_7F82D9BE mov edi, eax loc_7F8224E3: ; CODE XREF: sub_7F8223B3+4Dj ; sub_7F8223B3+A4j ... cmp [ebp+var_C], 0 jz short loc_7F8224F1 push [ebp+var_C] call sub_7F824500 loc_7F8224F1: ; CODE XREF: sub_7F8223B3+134j cmp [ebp+var_8], 0 jz short loc_7F8224FF push [ebp+var_8] call sub_7F824500 loc_7F8224FF: ; CODE XREF: sub_7F8223B3+142j cmp [ebp+var_10], 0 jz short loc_7F82250E lea eax, [ebp+var_10] push eax call sub_7F82285E loc_7F82250E: ; CODE XREF: sub_7F8223B3+150j cmp [ebp+var_4], 0 jz short loc_7F822527 lea eax, [ebp+var_4] push eax call sub_7F820C0E test eax, eax jz short loc_7F822527 test edi, edi jnz short loc_7F822527 mov edi, eax loc_7F822527: ; CODE XREF: sub_7F8223B3+15Fj ; sub_7F8223B3+16Cj ... cmp edi, 100Bh jnz short loc_7F82253D push esi ; int push [ebp+lpString] ; lpString push [ebp+pSrc] ; pSrc call sub_7F823484 mov edi, eax loc_7F82253D: ; CODE XREF: sub_7F8223B3+17Aj mov eax, edi pop edi pop esi pop ebx mov esp, ebp mov dword_7F836C60, 0 pop ebp retn 8 sub_7F8223B3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F822552 proc near ; CODE XREF: sub_7F8223B3+2Fp ; sub_7F8223B3+86p var_4 = dword ptr -4 pSrc = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push esi lea eax, [ebp+var_4] push eax ; int push [ebp+arg_4] ; int push 0 ; int push [ebp+pSrc] ; pSrc call sub_7F8225B6 test eax, eax jnz short loc_7F8225AF push [ebp+arg_10] push [ebp+arg_C] push [ebp+var_4] call sub_7F822894 mov esi, eax test esi, esi jnz short loc_7F8225A4 cmp [ebp+arg_8], 0 jnz short loc_7F8225A4 push 0 push [ebp+var_4] call sub_7F823452 mov esi, eax test esi, esi jnz short loc_7F8225A4 push 0 push [ebp+var_4] call sub_7F82D9BE mov esi, eax loc_7F8225A4: ; CODE XREF: sub_7F822552+2Ej ; sub_7F822552+34j ... lea eax, [ebp+var_4] push eax call sub_7F82285E mov eax, esi loc_7F8225AF: ; CODE XREF: sub_7F822552+1Aj pop esi mov esp, ebp pop ebp retn 14h sub_7F822552 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8225B6(LPCSTR pSrc, int, int, int) sub_7F8225B6 proc near ; CODE XREF: sub_7F8223B3+B9p ; sub_7F822552+13p ... Buffer = byte ptr -20Ch var_200 = word ptr -200h var_1FE = word ptr -1FEh var_1FC = dword ptr -1FCh var_1F4 = word ptr -1F4h var_1F2 = word ptr -1F2h var_1BC = dword ptr -1BCh var_1B8 = dword ptr -1B8h var_1B4 = word ptr -1B4h var_1B2 = word ptr -1B2h var_C = byte ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 pSrc = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 20Ch push ebx mov eax, [ebp+arg_C] push esi xor ebx, ebx push edi xor esi, esi lea ecx, [ebp+var_8] mov [ebp+var_8], esi push ecx ; int mov [eax], esi mov dword_7F836C64, 1 push 5 ; __int16 push [ebp+pSrc] ; pSrc call sub_7F815751 mov edi, eax test edi, edi jnz loc_7F8227E5 lea eax, [ebp+Buffer] push eax ; lpBuffer push [ebp+var_8] ; int call sub_7F812BEA mov edi, eax test edi, edi jnz loc_7F8227E5 cmp [ebp+arg_4], esi jnz loc_7F82270C lea eax, [ebp+Buffer] push eax call sub_7F8219A0 mov edi, eax test edi, edi jnz loc_7F8227E5 mov ax, [ebp+var_1FE] and ax, 1 cmp [ebp+arg_8], esi mov [ebp+var_2], ax jz short loc_7F82264B mov ax, 1 sub ax, [ebp+var_1FE] mov [ebp+var_2], ax loc_7F82264B: ; CODE XREF: sub_7F8225B6+84j mov ax, [ebp+var_2] lea ecx, [ebp+var_C] mov [ebp+var_1FE], ax push ecx push [ebp+var_8] call sub_7F815DA2 mov edi, eax test edi, edi jnz loc_7F8227E5 mov ax, [ebp+var_200] mov ecx, [ebp+var_1BC] sub ecx, [ebp+var_1FC] shr ecx, 5 cmp [ebp+var_2], 0 jnz short loc_7F8226BF cmp [ebp+var_1F4], ax ja short loc_7F8226F5 cmp cx, ax jb short loc_7F8226F5 mov ax, [ebp+var_1F2] cmp [ebp+var_1F4], ax jb short loc_7F8226F5 movzx eax, [ebp+var_200] shl eax, 5 add eax, [ebp+var_1FC] cmp eax, [ebp+var_1BC] jmp short loc_7F8226F3 ; --------------------------------------------------------------------------- loc_7F8226BF: ; CODE XREF: sub_7F8225B6+D1j cmp [ebp+var_1B4], ax ja short loc_7F8226F5 cmp cx, ax jb short loc_7F8226F5 mov ax, [ebp+var_1B2] cmp [ebp+var_1B4], ax jb short loc_7F8226F5 movzx eax, [ebp+var_200] shl eax, 5 add eax, [ebp+var_1BC] cmp eax, [ebp+var_1B8] loc_7F8226F3: ; CODE XREF: sub_7F8225B6+107j jbe short loc_7F8226FC loc_7F8226F5: ; CODE XREF: sub_7F8225B6+DAj ; sub_7F8225B6+DFj ... mov [ebp+arg_4], 1 loc_7F8226FC: ; CODE XREF: sub_7F8225B6:loc_7F8226F3j cmp [ebp+arg_4], 0 jz short loc_7F82270C mov edi, 100Bh jmp loc_7F8227E5 ; --------------------------------------------------------------------------- loc_7F82270C: ; CODE XREF: sub_7F8225B6+56j ; sub_7F8225B6+14Aj push 10h push 4 call sub_7F82F18D mov ebx, eax test ebx, ebx jnz short loc_7F822725 mov edi, 400h jmp loc_7F8227E5 ; --------------------------------------------------------------------------- loc_7F822725: ; CODE XREF: sub_7F8225B6+163j cmp [ebp+arg_4], 0 jnz short loc_7F822747 lea eax, [ebp+Buffer] push eax call sub_7F8216EE mov esi, eax test esi, esi jnz short loc_7F822747 mov edi, 400h jmp loc_7F8227E5 ; --------------------------------------------------------------------------- loc_7F822747: ; CODE XREF: sub_7F8225B6+173j ; sub_7F8225B6+185j mov eax, [ebx] mov ecx, [ebp+var_8] cmp [ebp+arg_4], 0 mov [eax+4], ecx mov [eax], esi jnz loc_7F8227E5 cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F822798 mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx xor eax, eax loc_7F822798: ; CODE XREF: sub_7F8225B6+1B1j test eax, eax jz short loc_7F8227A3 mov edi, 100Bh jmp short loc_7F8227E5 ; --------------------------------------------------------------------------- loc_7F8227A3: ; CODE XREF: sub_7F8225B6+1E4j push 0 call sub_7F821A34 mov edi, eax test edi, edi jz short loc_7F8227B7 mov edi, 100Bh jmp short loc_7F8227E5 ; --------------------------------------------------------------------------- loc_7F8227B7: ; CODE XREF: sub_7F8225B6+1F8j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F8227CD call sub_7F82A34F jmp short loc_7F8227DB ; --------------------------------------------------------------------------- loc_7F8227CD: ; CODE XREF: sub_7F8225B6+20Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8227DB: ; CODE XREF: sub_7F8225B6+215j mov dword_7F838078, 0 loc_7F8227E5: ; CODE XREF: sub_7F8225B6+34j ; sub_7F8225B6+4Dj ... cmp dword_7F838078, 0 jz short loc_7F82281C mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F822804 call sub_7F82A34F jmp short loc_7F822812 ; --------------------------------------------------------------------------- loc_7F822804: ; CODE XREF: sub_7F8225B6+245j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F822812: ; CODE XREF: sub_7F8225B6+24Cj mov dword_7F838078, 0 loc_7F82281C: ; CODE XREF: sub_7F8225B6+236j test edi, edi jz short loc_7F822844 cmp [ebp+var_8], 0 jz short loc_7F82282E push [ebp+var_8] call sub_7F815991 loc_7F82282E: ; CODE XREF: sub_7F8225B6+26Ej test ebx, ebx jz short loc_7F822838 push ebx call sub_7F82F1E1 loc_7F822838: ; CODE XREF: sub_7F8225B6+27Aj test esi, esi jz short loc_7F822849 push esi call sub_7F820EE1 jmp short loc_7F822849 ; --------------------------------------------------------------------------- loc_7F822844: ; CODE XREF: sub_7F8225B6+268j mov eax, [ebp+arg_C] mov [eax], ebx loc_7F822849: ; CODE XREF: sub_7F8225B6+284j ; sub_7F8225B6+28Cj mov eax, edi pop edi pop esi pop ebx mov esp, ebp mov dword_7F836C64, 0 pop ebp retn 10h sub_7F8225B6 endp ; =============== S U B R O U T I N E ======================================= sub_7F82285E proc near ; CODE XREF: sub_7F8223B3+156p ; sub_7F822552+56p ... arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esi] mov eax, [eax] push dword ptr [eax+4] mov edi, [eax] call sub_7F815991 mov ebx, eax test edi, edi jz short loc_7F82287F push edi call sub_7F820EE1 loc_7F82287F: ; CODE XREF: sub_7F82285E+19j push dword ptr [esi] call sub_7F82F1E1 mov eax, ebx pop edi mov dword ptr [esi], 0 pop esi pop ebx retn 4 sub_7F82285E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F822894 proc near ; CODE XREF: sub_7F822552+25p var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = word ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp xor ecx, ecx mov ebp, esp sub esp, 18h push ebx mov [ebp+var_18], ecx push esi mov ebx, [ebp+arg_0] push edi mov [ebp+var_C], ecx mov eax, [ebx] mov edx, [eax] mov word_7F836C6C, cx mov [ebp+var_14], edx add edx, 200h push 32h push ecx mov [ebp+var_10], edx mov eax, [edx] push ecx mov ax, [eax+8] mov [ebp+var_6], ax call sub_7F82A93C test eax, eax jnz short loc_7F8228E0 mov edi, 101Eh jmp loc_7F822BA5 ; --------------------------------------------------------------------------- loc_7F8228E0: ; CODE XREF: sub_7F822894+40j movzx eax, [ebp+var_6] movzx edi, [ebp+var_6] xor esi, esi push edi mov dword_7F838098, esi mov dword_7F83809C, eax call sub_7F8244CF mov ecx, [ebp+arg_8] cmp eax, esi mov [ecx], eax jnz short loc_7F82290E mov edi, 400h jmp loc_7F822BA5 ; --------------------------------------------------------------------------- loc_7F82290E: ; CODE XREF: sub_7F822894+6Ej mov eax, [ebp+var_10] mov ecx, [eax] mov eax, [ecx+4] shr eax, 7 inc eax push eax call sub_7F8244CF mov ecx, [ebp+arg_4] test eax, eax mov [ecx], eax jnz short loc_7F822933 mov edi, 400h jmp loc_7F822BA5 ; --------------------------------------------------------------------------- loc_7F822933: ; CODE XREF: sub_7F822894+93j push edi call sub_7F8244CF mov [ebp+var_C], eax test eax, eax jnz short loc_7F82294A mov edi, 400h jmp loc_7F822BA5 ; --------------------------------------------------------------------------- loc_7F82294A: ; CODE XREF: sub_7F822894+AAj mov eax, [ebp+var_10] mov ecx, [eax] movzx edx, word ptr [ecx+0Ah] push edx push [ebp+var_C] call sub_7F8245A4 mov edi, eax test edi, edi jnz loc_7F822BA5 mov eax, [ebp+var_10] mov ecx, [eax] movzx edx, word ptr [ecx+0Ch] push edx push [ebp+var_C] call sub_7F8245A4 mov edi, eax test edi, edi jnz loc_7F822BA5 xor esi, esi loc_7F822984: ; CODE XREF: sub_7F822894+109j push esi mov ecx, [ebp+arg_4] push dword ptr [ecx] call sub_7F8245A4 mov edi, eax test edi, edi jnz loc_7F822BA5 inc esi cmp esi, 4 jb short loc_7F822984 cmp dword_7F838078, 0 jz short loc_7F8229AF mov edi, 253h jmp short loc_7F8229DE ; --------------------------------------------------------------------------- loc_7F8229AF: ; CODE XREF: sub_7F822894+112j mov eax, [ebx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, ebx loc_7F8229DE: ; CODE XREF: sub_7F822894+119j test edi, edi jnz loc_7F822BA5 mov bx, 1 mov ax, [ebp+var_6] cmp ax, 100h jb short loc_7F8229F8 mov ax, 100h loc_7F8229F8: ; CODE XREF: sub_7F822894+15Ej dec ax mov ecx, [ebp+var_14] mov [ebp+var_2], ax mov ax, [ecx+204h] dec ax mov word ptr [ebp+var_14+2], ax js loc_7F822AF8 loc_7F822A14: ; CODE XREF: sub_7F822894+25Ej cmp bx, 1 jb short loc_7F822A5E mov eax, dword_7F838078 mov ecx, [eax+200h] cmp [ecx+8], bx jbe short loc_7F822A5E mov ax, bx shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov esi, [edx] mov eax, [ecx+esi] xor ecx, ecx mov cx, bx and ecx, 0FFh shl ecx, 5 lea esi, [eax+ecx] jmp short loc_7F822A60 ; --------------------------------------------------------------------------- loc_7F822A5E: ; CODE XREF: sub_7F822894+184j ; sub_7F822894+195j xor esi, esi loc_7F822A60: ; CODE XREF: sub_7F822894+1C8j cmp [ebp+var_2], 0 jle short loc_7F822AD4 loc_7F822A67: ; CODE XREF: sub_7F822894+23Ej push esi push ebx push [ebp+var_C] call sub_7F822C2A push esi mov ecx, [ebp+arg_8] push ebx mov edx, [ebp+arg_4] push dword ptr [ecx] push dword ptr [edx] call sub_7F822DB9 mov edi, eax test edi, edi jz short loc_7F822A94 cmp edi, 100Bh jnz loc_7F822BA5 loc_7F822A94: ; CODE XREF: sub_7F822894+1F2j cmp dword_7F83809C, 0 mov eax, 1 jbe short loc_7F822AC0 push 64h sub edx, edx inc dword_7F838098 mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F822AC0: ; CODE XREF: sub_7F822894+20Cj test eax, eax jz short loc_7F822B0E inc bx add esi, 20h dec [ebp+var_2] cmp [ebp+var_2], 0 jg short loc_7F822A67 loc_7F822AD4: ; CODE XREF: sub_7F822894+1D1j movzx ecx, [ebp+var_6] movzx eax, bx sub ecx, eax cmp ecx, 100h jb short loc_7F822AEA mov ecx, 100h loc_7F822AEA: ; CODE XREF: sub_7F822894+24Fj mov [ebp+var_2], cx dec word ptr [ebp+var_14+2] jns loc_7F822A14 loc_7F822AF8: ; CODE XREF: sub_7F822894+17Aj mov ax, [ebp+var_6] shr ax, 2 cmp ax, word_7F836C6C jnb short loc_7F822B18 jmp loc_7F822BA0 ; --------------------------------------------------------------------------- loc_7F822B0E: ; CODE XREF: sub_7F822894+22Ej mov edi, 101Eh jmp loc_7F822BA5 ; --------------------------------------------------------------------------- loc_7F822B18: ; CODE XREF: sub_7F822894+273j mov esi, 0FFFFFFFEh push 0 push 0 mov ecx, [ebp+arg_4] push dword ptr [ecx] call sub_7F824640 mov ecx, eax test ecx, ecx jl short loc_7F822B76 loc_7F822B31: ; CODE XREF: sub_7F822894+2E0j mov eax, [ebp+var_10] mov edx, [eax] mov eax, [edx+4] cdq and edx, 7Fh add eax, edx sar eax, 7 cmp eax, ecx jle short loc_7F822B76 mov eax, esi sub eax, ecx cmp eax, 0FFFFFFFFh jnz short loc_7F822B52 inc esi jmp short loc_7F822B62 ; --------------------------------------------------------------------------- loc_7F822B52: ; CODE XREF: sub_7F822894+2B9j test esi, esi jle short loc_7F822B5D sub esi, [ebp-8] inc esi add [ebp+var_18], esi loc_7F822B5D: ; CODE XREF: sub_7F822894+2C0j mov esi, ecx mov [ebp-8], ecx loc_7F822B62: ; CODE XREF: sub_7F822894+2BCj push 0 inc ecx push ecx mov edx, [ebp+arg_4] push dword ptr [edx] call sub_7F824640 mov ecx, eax test ecx, ecx jge short loc_7F822B31 loc_7F822B76: ; CODE XREF: sub_7F822894+29Bj ; sub_7F822894+2B0j test esi, esi jle short loc_7F822B81 sub esi, [ebp-8] inc esi add [ebp+var_18], esi loc_7F822B81: ; CODE XREF: sub_7F822894+2E4j mov eax, [ebp+var_10] mov ecx, [eax] mov eax, [ecx+4] cdq and edx, 7Fh add eax, edx sar eax, 7 cdq and edx, 3 add eax, edx sar eax, 2 cmp eax, [ebp+var_18] jge short loc_7F822BA5 loc_7F822BA0: ; CODE XREF: sub_7F822894+275j mov edi, 100Bh loc_7F822BA5: ; CODE XREF: sub_7F822894+47j ; sub_7F822894+75j ... cmp dword_7F838078, 0 jz short loc_7F822BDC mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F822BC4 call sub_7F82A34F jmp short loc_7F822BD2 ; --------------------------------------------------------------------------- loc_7F822BC4: ; CODE XREF: sub_7F822894+327j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F822BD2: ; CODE XREF: sub_7F822894+32Ej mov dword_7F838078, 0 loc_7F822BDC: ; CODE XREF: sub_7F822894+318j call sub_7F82AB0B cmp [ebp+var_C], 0 jz short loc_7F822BEF push [ebp+var_C] call sub_7F824500 loc_7F822BEF: ; CODE XREF: sub_7F822894+351j xor esi, esi test edi, edi jz short loc_7F822C1F mov ecx, [ebp+arg_4] mov eax, [ecx] test eax, eax jz short loc_7F822C09 push eax call sub_7F824500 mov ecx, [ebp+arg_4] mov [ecx], esi loc_7F822C09: ; CODE XREF: sub_7F822894+368j mov ecx, [ebp+arg_8] xor esi, esi mov eax, [ecx] test eax, eax jz short loc_7F822C1F push eax call sub_7F824500 mov ecx, [ebp+arg_8] mov [ecx], esi loc_7F822C1F: ; CODE XREF: sub_7F822894+35Fj ; sub_7F822894+37Ej mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F822894 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F822C2A proc near ; CODE XREF: sub_7F822894+1D8p arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, dword_7F838078 mov ebp, esp push ebx push esi mov ecx, [eax+200h] mov bx, [ecx+8] push edi mov edi, [ebp+arg_8] mov eax, [edi+4] push eax lea ecx, [eax-8Fh] cmp cl, 1 sbb esi, esi call sub_7F82E30B neg esi mov eax, [edi+4] cmp al, 8Ch jz loc_7F822DB2 test byte ptr [edi+10h], 10h jz short loc_7F822C7B push dword ptr [edi+18h] call sub_7F82E30B push 0 push dword ptr [edi+18h] call sub_7F8144A4 loc_7F822C7B: ; CODE XREF: sub_7F822C2A+3Dj mov cx, [edi] cmp bx, cx jb short loc_7F822D01 cmp cx, [ebp+arg_4] jz short loc_7F822D01 test cx, cx jz short loc_7F822D01 cmp cx, 1 jb short loc_7F822CD7 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F822CD7 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov eax, [eax+20Ch] mov eax, [eax] mov eax, [edx+eax] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 add eax, edx jmp short loc_7F822CD9 ; --------------------------------------------------------------------------- loc_7F822CD7: ; CODE XREF: sub_7F822C2A+68j ; sub_7F822C2A+79j xor eax, eax loc_7F822CD9: ; CODE XREF: sub_7F822C2A+ABj test eax, eax jz short loc_7F822D01 movzx eax, cx push eax push [ebp+arg_0] call sub_7F8245F2 test eax, eax jnz short loc_7F822D01 movzx eax, word ptr [edi] push eax push [ebp+arg_0] call sub_7F8245A4 test eax, eax jnz loc_7F822DB2 loc_7F822D01: ; CODE XREF: sub_7F822C2A+57j ; sub_7F822C2A+5Dj ... mov cx, [edi+2] cmp bx, cx jb short loc_7F822D85 cmp cx, [ebp+arg_4] jz short loc_7F822D85 test cx, cx jz short loc_7F822D85 cmp cx, 1 jb short loc_7F822D5E mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F822D5E mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov eax, [ebx] mov eax, [edx+eax] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 add eax, edx jmp short loc_7F822D60 ; --------------------------------------------------------------------------- loc_7F822D5E: ; CODE XREF: sub_7F822C2A+EFj ; sub_7F822C2A+100j xor eax, eax loc_7F822D60: ; CODE XREF: sub_7F822C2A+132j test eax, eax jz short loc_7F822D85 movzx eax, cx push eax push [ebp+arg_0] call sub_7F8245F2 test eax, eax jnz short loc_7F822D85 movzx eax, word ptr [edi+2] push eax push [ebp+arg_0] call sub_7F8245A4 test eax, eax jnz short loc_7F822DB2 loc_7F822D85: ; CODE XREF: sub_7F822C2A+DEj ; sub_7F822C2A+E4j ... mov eax, [edi+8] test eax, eax jz short loc_7F822D92 push eax call sub_7F82E30B loc_7F822D92: ; CODE XREF: sub_7F822C2A+160j cmp byte ptr [edi+4], 90h jz short loc_7F822DA5 mov eax, [edi+0Ch] test eax, eax jz short loc_7F822DA5 push eax call sub_7F82E30B loc_7F822DA5: ; CODE XREF: sub_7F822C2A+16Cj ; sub_7F822C2A+173j push dword ptr [edi+4] mov cx, [edi+12h] push ecx call sub_7F82E35A loc_7F822DB2: ; CODE XREF: sub_7F822C2A+33j ; sub_7F822C2A+D1j ... pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F822C2A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F822DB9 proc near ; CODE XREF: sub_7F822894+1E9p Buffer = dword ptr -0Ch var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [ebp+arg_C] test byte ptr [esi+10h], 10h jnz loc_7F822F5B lea ebx, [esi+4] mov eax, [ebx] cmp al, 8Ch jz loc_7F822F54 lea edi, [esi+18h] mov ecx, [edi] test cl, 7Fh jnz loc_7F822F54 cmp eax, 8Fh jz loc_7F822E9A cmp eax, 70616D80h jz loc_7F822E9A lea eax, [ebp+var_4] lea edx, [ebp+Buffer] mov [ebp+var_4], 8 push eax ; int push ecx ; lDistanceToMove push edx ; lpBuffer call sub_7F8127E7 test eax, eax jz short loc_7F822E2E cmp eax, 200h jnz short loc_7F822E22 xor eax, eax loc_7F822E22: ; CODE XREF: sub_7F822DB9+65j inc word_7F836C6C jmp loc_7F822F5D ; --------------------------------------------------------------------------- loc_7F822E2E: ; CODE XREF: sub_7F822DB9+5Ej mov ecx, [ebx] cmp ecx, [ebp+Buffer] jz short loc_7F822E41 inc word_7F836C6C jmp loc_7F822F5D ; --------------------------------------------------------------------------- loc_7F822E41: ; CODE XREF: sub_7F822DB9+7Aj push ecx call sub_7F82DB71 cmp ax, 0FFFFh jnz short loc_7F822E51 mov ax, [esi+12h] loc_7F822E51: ; CODE XREF: sub_7F822DB9+92j test ah, 8 lea eax, [esi+14h] push eax push dword ptr [eax] push dword ptr [edi] push 0 jz short loc_7F822E67 call sub_7F816F26 jmp short loc_7F822E6C ; --------------------------------------------------------------------------- loc_7F822E67: ; CODE XREF: sub_7F822DB9+A5j call sub_7F81A9B5 loc_7F822E6C: ; CODE XREF: sub_7F822DB9+ACj test eax, eax jz short loc_7F822E9A cmp eax, 1017h jz short loc_7F822E9A cmp eax, 1015h jz short loc_7F822E8C cmp eax, 1002h jz short loc_7F822E8C cmp eax, 200h jnz short loc_7F822E8E loc_7F822E8C: ; CODE XREF: sub_7F822DB9+C3j ; sub_7F822DB9+CAj xor eax, eax loc_7F822E8E: ; CODE XREF: sub_7F822DB9+D1j inc word_7F836C6C jmp loc_7F822F5D ; --------------------------------------------------------------------------- loc_7F822E9A: ; CODE XREF: sub_7F822DB9+36j ; sub_7F822DB9+41j ... test byte ptr [esi+11h], 80h mov edi, [edi] jnz short loc_7F822EBA cmp byte ptr [ebx], 8Ch jz short loc_7F822EBA add esi, 14h mov eax, [esi] and eax, 7FFFFFFFh add eax, 87h and al, 80h jmp short loc_7F822EBF ; --------------------------------------------------------------------------- loc_7F822EBA: ; CODE XREF: sub_7F822DB9+E7j ; sub_7F822DB9+ECj add esi, 14h mov eax, [esi] loc_7F822EBF: ; CODE XREF: sub_7F822DB9+FFj mov [ebp+var_4], eax cmp [ebp+var_4], 0 jbe short loc_7F822EFA loc_7F822EC8: ; CODE XREF: sub_7F822DB9+13Fj mov ebx, edi shr ebx, 7 push ebx push [ebp+arg_0] call sub_7F8245F2 test eax, eax jnz short loc_7F822F09 push ebx push [ebp+arg_0] call sub_7F8245A4 test eax, eax jnz short loc_7F822F5D sub [ebp+var_4], 80h add edi, 80h cmp [ebp+var_4], 0 ja short loc_7F822EC8 loc_7F822EFA: ; CODE XREF: sub_7F822DB9+10Dj movzx eax, [ebp+arg_8] push eax push [ebp+arg_4] call sub_7F8245A4 jmp short loc_7F822F5D ; --------------------------------------------------------------------------- loc_7F822F09: ; CODE XREF: sub_7F822DB9+11Fj sub edi, 80h mov eax, [esi] add [ebp+var_4], 80h add eax, 87h and al, 80h cmp eax, [ebp+var_4] jbe short loc_7F822F4D loc_7F822F24: ; CODE XREF: sub_7F822DB9+192j mov eax, edi sub edi, 80h shr eax, 7 push eax push [ebp+arg_0] call sub_7F8245A4 add [ebp+var_4], 80h mov eax, [esi] add eax, 87h and al, 80h cmp eax, [ebp+var_4] ja short loc_7F822F24 loc_7F822F4D: ; CODE XREF: sub_7F822DB9+169j mov eax, 100Bh jmp short loc_7F822F5D ; --------------------------------------------------------------------------- loc_7F822F54: ; CODE XREF: sub_7F822DB9+1Dj ; sub_7F822DB9+2Bj inc word_7F836C6C loc_7F822F5B: ; CODE XREF: sub_7F822DB9+10j xor eax, eax loc_7F822F5D: ; CODE XREF: sub_7F822DB9+70j ; sub_7F822DB9+83j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F822DB9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F822F66 proc near ; CODE XREF: sub_7F8223B3+FBp var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_A = word ptr -0Ah var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi xor edi, edi push [ebp+arg_C] mov [ebp+var_8], edi call sub_7F8233BC push 33h push edi push edi call sub_7F82A93C test eax, eax jnz short loc_7F822F93 mov esi, 101Eh jmp loc_7F823367 ; --------------------------------------------------------------------------- loc_7F822F93: ; CODE XREF: sub_7F822F66+21j push 0 push 4000h call sub_7F82F03B mov [ebp+var_8], eax test eax, eax jnz short loc_7F822FB0 mov esi, 400h jmp loc_7F823367 ; --------------------------------------------------------------------------- loc_7F822FB0: ; CODE XREF: sub_7F822F66+3Ej cmp dword_7F838078, 0 mov [ebp+var_2], 2000h mov eax, [ebp+var_8] mov [ebp+var_18], eax jz short loc_7F822FCC mov esi, 253h jmp short loc_7F822FFC ; --------------------------------------------------------------------------- loc_7F822FCC: ; CODE XREF: sub_7F822F66+5Dj mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F822FFC: ; CODE XREF: sub_7F822F66+64j xor ebx, ebx test esi, esi jnz loc_7F823367 mov ecx, dword_7F838078 add ecx, 200h mov eax, [ecx] mov ax, [eax+8] mov [ebp+var_A], ax mov dword_7F838098, ebx movzx edx, ax mov dword_7F83809C, edx mov ecx, [ecx] mov eax, [ecx+4] mov [ebp+var_10], eax loc_7F823033: ; CODE XREF: sub_7F822F66+184j ; sub_7F822F66+21Dj ... push 1 inc edi push edi push [ebp+arg_8] call sub_7F824640 mov edi, eax test edi, edi jl loc_7F8231CB movzx eax, [ebp+var_A] cmp edi, eax jge loc_7F8231CB cmp di, 1 mov cx, di jb short loc_7F8230A1 mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F8230A1 mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov esi, [eax+20Ch] mov eax, [esi] mov eax, [edx+eax] xor edx, edx mov dx, di and edx, 0FFh shl edx, 5 add eax, edx jmp short loc_7F8230A3 ; --------------------------------------------------------------------------- loc_7F8230A1: ; CODE XREF: sub_7F822F66+F6j ; sub_7F822F66+107j xor eax, eax loc_7F8230A3: ; CODE XREF: sub_7F822F66+139j mov eax, [eax+4] movzx edx, al cmp edx, 80h jz short loc_7F8230CD cmp edx, 8Ch jl short loc_7F8230D8 cmp edx, 8Dh jle loc_7F82318E cmp edx, 8Fh jmp short loc_7F8230D2 ; --------------------------------------------------------------------------- loc_7F8230CD: ; CODE XREF: sub_7F822F66+149j cmp eax, 70616D80h loc_7F8230D2: ; CODE XREF: sub_7F822F66+165j jz loc_7F82318E loc_7F8230D8: ; CODE XREF: sub_7F822F66+151j dec [ebp+var_2] mov eax, [ebp+var_18] mov [eax], cx add [ebp+var_18], 2 cmp [ebp+var_2], bx jg loc_7F823033 mov eax, dword_7F838078 cmp [eax+254h], bx jz short loc_7F823105 call sub_7F82A34F jmp short loc_7F823113 ; --------------------------------------------------------------------------- loc_7F823105: ; CODE XREF: sub_7F822F66+196j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F823113: ; CODE XREF: sub_7F822F66+19Dj push [ebp+arg_C] push 2000h push [ebp+var_8] push [ebp+arg_0] mov dword_7F838078, ebx call sub_7F82E3D3 mov esi, eax test esi, esi jnz loc_7F823367 mov eax, [ebp+var_8] cmp dword_7F838078, ebx mov [ebp+var_2], 2000h mov [ebp+var_18], eax jz short loc_7F823151 mov esi, 253h jmp short loc_7F823181 ; --------------------------------------------------------------------------- loc_7F823151: ; CODE XREF: sub_7F822F66+1E2j mov eax, [ebp+arg_0] xor esi, esi mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F823181: ; CODE XREF: sub_7F822F66+1E9j test esi, esi jz loc_7F823033 jmp loc_7F823367 ; --------------------------------------------------------------------------- loc_7F82318E: ; CODE XREF: sub_7F822F66+159j ; sub_7F822F66:loc_7F8230D2j mov eax, 1 cmp dword_7F83809C, ebx jbe short loc_7F8231B9 push 64h sub edx, edx inc dword_7F838098 mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F8231B9: ; CODE XREF: sub_7F822F66+233j test eax, eax jnz loc_7F823033 mov esi, 101Eh jmp loc_7F823367 ; --------------------------------------------------------------------------- loc_7F8231CB: ; CODE XREF: sub_7F822F66+DDj ; sub_7F822F66+E9j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F8231E1 call sub_7F82A34F jmp short loc_7F8231EF ; --------------------------------------------------------------------------- loc_7F8231E1: ; CODE XREF: sub_7F822F66+272j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8231EF: ; CODE XREF: sub_7F822F66+279j xor edi, edi cmp [ebp+var_2], 2000h mov dword_7F838078, edi jz short loc_7F823221 mov eax, [ebp+arg_C] push eax mov ax, 2000h sub ax, [ebp+var_2] push eax push [ebp+var_8] push [ebp+arg_0] call sub_7F82E3D3 mov esi, eax test esi, esi jnz loc_7F823367 loc_7F823221: ; CODE XREF: sub_7F822F66+297j lea eax, [ebp+var_14] mov ecx, [ebp+arg_0] push eax mov edx, [ecx] push dword ptr [edx+4] call sub_7F815DA2 mov esi, eax test esi, esi jnz loc_7F823367 mov eax, [ebp+var_14] and al, 7Fh cmp al, 1 jnz short loc_7F823248 dec [ebp+var_14] loc_7F823248: ; CODE XREF: sub_7F822F66+2DDj mov eax, [ebp+var_10] cmp [ebp+var_14], eax jnb short loc_7F823256 mov eax, [ebp+var_14] mov [ebp+var_10], eax loc_7F823256: ; CODE XREF: sub_7F822F66+2E8j call sub_7F82AB0B push 34h push 0 push 0 call sub_7F82A93C test eax, eax jnz short loc_7F823274 mov esi, 101Eh jmp loc_7F823367 ; --------------------------------------------------------------------------- loc_7F823274: ; CODE XREF: sub_7F822F66+302j xor edi, edi push edi push edi push [ebp+arg_4] call sub_7F824640 cmp eax, edi mov ecx, eax jl short loc_7F8232AB mov eax, [ebp+var_10] cdq and edx, 7Fh add eax, edx sar eax, 7 mov ebx, eax loc_7F823294: ; CODE XREF: sub_7F822F66+343j cmp ecx, ebx jge short loc_7F8232AB inc edi push 0 inc ecx push ecx push [ebp+arg_4] call sub_7F824640 mov ecx, eax test ecx, ecx jge short loc_7F823294 loc_7F8232AB: ; CODE XREF: sub_7F822F66+31Ej ; sub_7F822F66+330j mov ebx, 0FFFFFFFEh push 0 push 0 mov dword_7F83809C, edi push [ebp+arg_4] mov dword_7F838098, 0 call sub_7F824640 mov edi, eax test edi, edi jl short loc_7F823338 mov eax, [ebp+var_10] cdq and edx, 7Fh add eax, edx sar eax, 7 mov [ebp-0Ch], eax loc_7F8232E1: ; CODE XREF: sub_7F822F66+3D0j cmp edi, [ebp-0Ch] jge short loc_7F823338 mov eax, ebx sub eax, edi cmp eax, 0FFFFFFFFh jnz short loc_7F8232F2 inc ebx jmp short loc_7F823326 ; --------------------------------------------------------------------------- loc_7F8232F2: ; CODE XREF: sub_7F822F66+387j test ebx, ebx jle short loc_7F823321 push 1 ; int inc ebx shl ebx, 7 push 1 ; int push ebx ; int mov eax, [ebp-4] shl eax, 7 push eax ; lDistanceToMove push [ebp+arg_C] ; int push [ebp+arg_0] ; int call sub_7F823594 mov esi, eax test esi, esi jz short loc_7F823321 cmp esi, 200h jnz short loc_7F823367 xor esi, esi loc_7F823321: ; CODE XREF: sub_7F822F66+38Ej ; sub_7F822F66+3AFj mov ebx, edi mov [ebp-4], edi loc_7F823326: ; CODE XREF: sub_7F822F66+38Aj push 0 inc edi push edi push [ebp+arg_4] call sub_7F824640 mov edi, eax test edi, edi jge short loc_7F8232E1 loc_7F823338: ; CODE XREF: sub_7F822F66+36Aj ; sub_7F822F66+37Ej test ebx, ebx jle short loc_7F823367 push 1 ; int inc ebx shl ebx, 7 push 1 ; int push ebx ; int mov eax, [ebp-4] shl eax, 7 push eax ; lDistanceToMove push [ebp+arg_C] ; int push [ebp+arg_0] ; int call sub_7F823594 mov esi, eax test esi, esi jz short loc_7F823367 cmp esi, 200h jnz short loc_7F823367 xor esi, esi loc_7F823367: ; CODE XREF: sub_7F822F66+28j ; sub_7F822F66+45j ... cmp dword_7F838078, 0 jz short loc_7F82339E mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F823386 call sub_7F82A34F jmp short loc_7F823394 ; --------------------------------------------------------------------------- loc_7F823386: ; CODE XREF: sub_7F822F66+417j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F823394: ; CODE XREF: sub_7F822F66+41Ej mov dword_7F838078, 0 loc_7F82339E: ; CODE XREF: sub_7F822F66+408j call sub_7F82AB0B cmp [ebp+var_8], 0 jz short loc_7F8233B1 push [ebp+var_8] call sub_7F82F149 loc_7F8233B1: ; CODE XREF: sub_7F822F66+441j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F822F66 endp ; =============== S U B R O U T I N E ======================================= sub_7F8233BC proc near ; CODE XREF: sub_7F822F66+11p arg_0 = dword ptr 4 push ebx push esi push edi mov ebx, 1 xor edi, edi mov esi, [esp+0Ch+arg_0] push edi push ebx push 4D504981h push esi call sub_7F82B9DE push edi push ebx push 64694881h push esi call sub_7F82B9DE push edi push ebx push 74754F8Bh push esi call sub_7F82B9DE push edi push ebx push 46534180h push esi call sub_7F82B9DE push edi push ebx push 53464180h push esi call sub_7F82B9DE push edi push ebx push 444C4189h push esi call sub_7F82B9DE push edi push ebx push 0FF00008Ah push esi call sub_7F82B9DE push edi push ebx push 74634180h push esi call sub_7F82B9DE push edi push ebx push 20634D80h push esi call sub_7F82B9DE push edi push ebx push 73434D80h push esi call sub_7F82B9DE pop edi pop esi pop ebx retn 4 sub_7F8233BC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F823452 proc near ; CODE XREF: sub_7F8223B3+119p ; sub_7F822552+3Bp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push esi mov esi, [ebp+arg_4] test esi, esi jz short loc_7F823465 push [ebp+arg_0] call sub_7F82DA9A loc_7F823465: ; CODE XREF: sub_7F823452+9j push 0 push esi push [ebp+arg_0] call sub_7F81D910 test eax, eax jnz short loc_7F82347F push 0 push esi push [ebp+arg_0] call sub_7F829880 loc_7F82347F: ; CODE XREF: sub_7F823452+20j pop esi pop ebp retn 8 sub_7F823452 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F823484(LPCSTR pSrc, LPCSTR lpString, int) sub_7F823484 proc near ; CODE XREF: sub_7F8223B3+183p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 pSrc = dword ptr 8 lpString = dword ptr 0Ch arg_8 = dword ptr 10h push ebp xor eax, eax mov ebp, esp sub esp, 0Ch push esi mov [ebp+var_8], eax push edi mov [ebp+var_4], eax push 34h push eax push eax call sub_7F82A93C test eax, eax jnz short loc_7F8234AB mov edi, 101Eh jmp loc_7F82355B ; --------------------------------------------------------------------------- loc_7F8234AB: ; CODE XREF: sub_7F823484+1Bj lea eax, [ebp+var_8] push eax ; int push [ebp+arg_8] ; int push 1 ; int push [ebp+pSrc] ; pSrc call sub_7F8225B6 mov edi, eax test edi, edi jnz loc_7F82355B lea eax, [ebp+var_C] mov ecx, [ebp+var_8] push eax mov edx, [ecx] push dword ptr [edx+4] call sub_7F815DA2 mov edi, eax test edi, edi jnz short loc_7F82355B mov eax, [ebp+var_C] and al, 7Fh cmp al, 1 jnz short loc_7F8234E9 dec [ebp+var_C] loc_7F8234E9: ; CODE XREF: sub_7F823484+60j xor esi, esi lea eax, [ebp+var_4] push esi ; int push esi ; int push eax ; int push 20Ah ; __int16 push esi ; int push esi ; int push [ebp+lpString] ; lpString call sub_7F8207A6 mov edi, eax test edi, edi jnz short loc_7F82355B mov eax, [ebp+var_4] mov ecx, [eax] push esi ; int push esi ; int mov edx, [ecx] and word ptr [edx+264h], 0BFFFh mov eax, [ebp+var_C] mov dword_7F838098, esi push [ebp+var_C] ; int push 200h ; lDistanceToMove push [ebp+var_4] ; int push [ebp+var_8] ; int shr eax, 7 mov dword_7F83809C, eax call sub_7F823594 call sub_7F82AB0B push [ebp+var_4] call sub_7F82DBC2 cmp eax, esi mov edi, eax jnz short loc_7F82355B push 1 push [ebp+var_4] call sub_7F823452 mov edi, eax loc_7F82355B: ; CODE XREF: sub_7F823484+22j ; sub_7F823484+3Cj ... call sub_7F82AB0B cmp [ebp+var_8], 0 jz short loc_7F823575 lea eax, [ebp+var_8] push eax call sub_7F82285E test edi, edi jnz short loc_7F823575 mov edi, eax loc_7F823575: ; CODE XREF: sub_7F823484+E0j ; sub_7F823484+EDj cmp [ebp+var_4], 0 jz short loc_7F82358A lea eax, [ebp+var_4] push eax call sub_7F820C0E test edi, edi jnz short loc_7F82358A mov edi, eax loc_7F82358A: ; CODE XREF: sub_7F823484+F5j ; sub_7F823484+102j mov eax, edi pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F823484 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F823594(int, int, LONG lDistanceToMove, int, int, int) sub_7F823594 proc near ; CODE XREF: sub_7F822F66+3A6p ; sub_7F822F66+3ECp ... Buffer = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = word ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch lDistanceToMove = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 20h mov ecx, [eax] push ebx push esi push edi xor esi, esi mov edx, [ecx+4] mov [ebp+var_14], edx mov dword_7F838080, edx mov ebx, [eax] cmp [ebp+arg_14], esi mov ecx, [ebx] mov [ebp+var_10], ecx jz short loc_7F8235CA mov eax, [ecx+50h] sub eax, [ecx+10h] shr eax, 5 mov [ebp+var_6], ax loc_7F8235CA: ; CODE XREF: sub_7F823594+27j ; sub_7F823594+1FFj mov eax, [ebp+lDistanceToMove] cmp [ebp+arg_C], eax jbe loc_7F82379E mov eax, [ebp+arg_C] sub eax, [ebp+lDistanceToMove] cmp eax, 8 jb short loc_7F8235E6 mov eax, 8 loc_7F8235E6: ; CODE XREF: sub_7F823594+4Bj mov edi, eax lea ecx, [ebp+var_18] push ecx ; int mov [ebp+var_18], eax push [ebp+lDistanceToMove] ; lDistanceToMove mov eax, [ebp+var_14] mov dword_7F838080, eax lea eax, [ebp+Buffer] push eax ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F82379E cmp [ebp+var_18], edi jnz loc_7F82379E mov ebx, [ebp+Buffer] mov edi, [ebp+var_1C] push ebx call sub_7F82DB71 mov [ebp+var_2], ax cmp ax, 0FFFFh jnz short loc_7F823632 mov [ebp+var_2], 0 loc_7F823632: ; CODE XREF: sub_7F823594+96j test byte ptr [ebp+var_2+1], 8 jz short loc_7F823657 mov ecx, 0 lea eax, [ebp+var_C] cmp [ebp+arg_14], 1 adc ecx, 0FFFFFFFFh push eax and ecx, [ebp+arg_0] push edi push [ebp+lDistanceToMove] push ecx call sub_7F816F26 jmp short loc_7F823686 ; --------------------------------------------------------------------------- loc_7F823657: ; CODE XREF: sub_7F823594+A2j cmp bl, 8Fh jz loc_7F823753 cmp bl, 8Ch jz loc_7F823753 mov ecx, 0 lea eax, [ebp+var_C] cmp [ebp+arg_14], 1 adc ecx, 0FFFFFFFFh push eax and ecx, [ebp+arg_0] push edi push [ebp+lDistanceToMove] push ecx call sub_7F81A9B5 loc_7F823686: ; CODE XREF: sub_7F823594+C1j mov esi, eax test esi, esi jz short loc_7F82369D cmp esi, 1017h jnz loc_7F823723 xor esi, esi mov edi, [ebp+var_C] loc_7F82369D: ; CODE XREF: sub_7F823594+F6j test bl, bl jz loc_7F823753 test ebx, 0FFFFFF00h jz loc_7F823753 lea eax, [ebp+var_C] push eax push 0 push 0 push 0 push ebx push [ebp+arg_4] call sub_7F82D114 cmp eax, 1001h mov esi, eax jz short loc_7F8236F5 test esi, esi jnz loc_7F82379E cmp [ebp+arg_10], 0 jnz short loc_7F823755 cmp [ebp+var_C], edi jnb short loc_7F823755 push 0 ; int push 0 ; nNumberOfBytesToRead push 0 ; int push ebx ; int push [ebp+arg_4] ; int call sub_7F82D39F mov esi, eax test esi, esi jnz short loc_7F823755 loc_7F8236F5: ; CODE XREF: sub_7F823594+137j push edi ; int push [ebp+lDistanceToMove] ; lDistanceToMove push [ebp+var_14] ; int push ebx ; int push [ebp+arg_4] ; int call sub_7F8237B9 mov esi, eax test esi, esi jnz loc_7F8237A9 push dword ptr [ebp+var_2] push ebx push [ebp+arg_4] call sub_7F82CF24 mov esi, eax test esi, esi jnz short loc_7F82379E jmp short loc_7F823755 ; --------------------------------------------------------------------------- loc_7F823723: ; CODE XREF: sub_7F823594+FEj xor esi, esi cmp [ebp+arg_14], esi jz short loc_7F823753 mov eax, [ebp+lDistanceToMove] mov ecx, [ebp+var_10] cmp [ecx+10h], eax ja short loc_7F823753 movzx edx, [ebp+var_6] mov eax, [ecx+50h] mov ecx, edx shl ecx, 5 add ecx, eax cmp ecx, [ebp+lDistanceToMove] jbe short loc_7F823753 sub edx, 4 shl edx, 5 add eax, edx mov [ebp+lDistanceToMove], eax loc_7F823753: ; CODE XREF: sub_7F823594+C6j ; sub_7F823594+CFj ... xor edi, edi loc_7F823755: ; CODE XREF: sub_7F823594+145j ; sub_7F823594+14Aj ... add edi, 87h mov eax, edi and al, 80h add [ebp+lDistanceToMove], eax mov eax, 1 cmp dword_7F83809C, 0 jbe short loc_7F823791 shr edi, 7 push 64h sub edx, edx add dword_7F838098, edi mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F823791: ; CODE XREF: sub_7F823594+1DAj test eax, eax jnz loc_7F8235CA mov esi, 101Eh loc_7F82379E: ; CODE XREF: sub_7F823594+3Cj ; sub_7F823594+73j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h ; --------------------------------------------------------------------------- loc_7F8237A9: ; CODE XREF: sub_7F823594+175j xor eax, eax push eax ; int push eax ; nNumberOfBytesToRead push eax ; int push ebx ; int push [ebp+arg_4] ; int call sub_7F82D39F jmp short loc_7F82379E sub_7F823594 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F8237B9(int, int, int, LONG lDistanceToMove, int) sub_7F8237B9 proc near ; CODE XREF: sub_7F823594+16Cp var_C = dword ptr -0Ch var_8 = dword ptr -8 lpBuffer = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h lDistanceToMove = dword ptr 14h nNumberOfBytesToRead= dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_C] push esi xor ebx, ebx mov [ebp+var_C], 0F000h push edi push eax xor edi, edi call sub_7F81AF32 mov [ebp+lpBuffer], eax cmp eax, ebx jnz short loc_7F8237E4 mov edi, 400h jmp short loc_7F823857 ; --------------------------------------------------------------------------- loc_7F8237E4: ; CODE XREF: sub_7F8237B9+22j mov esi, [ebp+nNumberOfBytesToRead] cmp [ebp+var_C], esi jnb short loc_7F823802 push 0 ; int push esi ; nNumberOfBytesToRead push 0 ; int push [ebp+arg_4] ; int push [ebp+arg_0] ; int call sub_7F82D39F mov edi, eax test edi, edi jnz short loc_7F823857 loc_7F823802: ; CODE XREF: sub_7F8237B9+31j add [ebp+lDistanceToMove], 8 test esi, esi jz short loc_7F823857 loc_7F82380A: ; CODE XREF: sub_7F8237B9+9Cj mov eax, [ebp+arg_8] mov dword_7F838080, eax mov eax, [ebp+var_C] cmp eax, esi jb short loc_7F82381B mov eax, esi loc_7F82381B: ; CODE XREF: sub_7F8237B9+5Ej mov [ebp+var_8], eax lea eax, [ebp+var_8] push eax ; int push [ebp+lDistanceToMove] ; lDistanceToMove push [ebp+lpBuffer] ; lpBuffer call sub_7F8127E7 mov edi, eax test edi, edi jnz short loc_7F823857 push [ebp+lpBuffer] ; int push [ebp+var_8] ; nNumberOfBytesToRead push ebx ; int push [ebp+arg_4] ; int push [ebp+arg_0] ; int call sub_7F82D39F mov edi, eax test edi, edi jnz short loc_7F823857 mov eax, [ebp+var_8] add ebx, eax add [ebp+lDistanceToMove], eax sub esi, eax jnz short loc_7F82380A loc_7F823857: ; CODE XREF: sub_7F8237B9+29j ; sub_7F8237B9+47j ... cmp [ebp+lpBuffer], 0 jz short loc_7F823865 push [ebp+lpBuffer] call sub_7F82F149 loc_7F823865: ; CODE XREF: sub_7F8237B9+A2j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8237B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F823870(LPCSTR lpString, __int16) sub_7F823870 proc near ; CODE XREF: sub_7F8207A6+1B7p pSrc = byte ptr -224h var_223 = byte ptr -223h TempFileName = byte ptr -124h var_123 = byte ptr -123h var_24 = dword ptr -24h var_18 = dword ptr -18h var_10 = dword ptr -10h hCursor = dword ptr -0Ch hWndParent = dword ptr -8 var_4 = dword ptr -4 lpString = dword ptr 8 arg_4 = word ptr 0Ch push ebp mov ebp, esp sub esp, 224h push ebx push esi push edi xor ebx, ebx push 7F02h ; lpCursorName push ebx ; hInstance lea edi, [ebp+var_223] call ds:LoadCursorA push eax ; hCursor call ds:SetCursor mov edx, 3Fh mov [ebp+hCursor], eax xor eax, eax mov ecx, edx mov [ebp+pSrc], bl rep stosd stosw stosb lea edi, [ebp+var_123] mov ecx, edx mov [ebp+TempFileName], bl rep stosd stosw stosb mov [ebp+var_4], ebx call sub_7F82449E mov eax, [eax+0Ch] test eax, eax jz short loc_7F8238D7 mov eax, [eax] mov [ebp+hWndParent], eax jmp short loc_7F8238DE ; --------------------------------------------------------------------------- loc_7F8238D7: ; CODE XREF: sub_7F823870+5Ej mov [ebp+hWndParent], 0 loc_7F8238DE: ; CODE XREF: sub_7F823870+65j test byte ptr [ebp+arg_4], 1 jz short loc_7F823934 push 20h ; uType call ds:MessageBeep movzx eax, [ebp+arg_4] mov si, [ebp+arg_4] push eax ; dwInitParam and si, 2 push offset sub_7F823B75 ; lpDialogFunc push [ebp+hWndParent] ; hWndParent jz short loc_7F82390A push 1FA4h jmp short loc_7F82390F ; --------------------------------------------------------------------------- loc_7F82390A: ; CODE XREF: sub_7F823870+91j push 1F40h ; lpTemplateName loc_7F82390F: ; CODE XREF: sub_7F823870+98j push dword_7F833F18 ; hInstance call ds:DialogBoxParamA cmp ax, 1 jz short loc_7F823934 cmp si, 1 sbb eax, eax and eax, 13h add eax, 100Bh jmp loc_7F823B6C ; --------------------------------------------------------------------------- loc_7F823934: ; CODE XREF: sub_7F823870+72j ; sub_7F823870+AFj mov edi, [ebp+lpString] push edi ; lpString call ds:lstrlenA push eax ; cchLength push edi ; lpsz push edi ; int call sub_7F8176EB mov al, [edi] cmp al, 5Ch jz short loc_7F8239CA movzx ax, al sub ax, 40h movsx ecx, ax push ecx call sub_7F815671 lea ecx, [ebp+var_24] mov [ebp+var_10], eax push ecx ; int push edi ; pSrc call sub_7F8155EA mov esi, eax test esi, esi jnz loc_7F823B15 mov ecx, 3 mov eax, [ebp+var_18] sub edx, edx div ecx mov ecx, [ebp+var_18] add ecx, eax cmp ecx, [ebp+var_10] jbe short loc_7F8239CA push 40h ; uType call ds:MessageBeep push 41h ; char push offset aToContinueWith ; "To continue with the verification/repai"... push offset aMessageFileVer ; "Message file verification/repair may re"... push offset aMicrosoftMai_0 ; "Microsoft Mail" call sub_7F815037 cmp ax, 2 jnz short loc_7F8239CA mov ax, [ebp+arg_4] and ax, 2 cmp ax, 1 sbb esi, esi and esi, 13h add esi, 100Bh jmp loc_7F823B15 ; --------------------------------------------------------------------------- loc_7F8239CA: ; CODE XREF: sub_7F823870+DAj ; sub_7F823870+118j ... push 1 ; int push 1Bh ; __int16 push offset aPressEscToCanc ; "Press ESC to cancel." push offset aValidatingRepa ; "Validating/repairing message file" push [ebp+hWndParent] ; HWND call sub_7F82B14A mov ebx, eax lea ecx, [ebp+pSrc] mov eax, 100h lea edx, [ebp+TempFileName] push eax ; int push ecx ; lpString push eax ; int push edx ; lpTempFileName push edi ; int call sub_7F823D4A test eax, eax jnz short loc_7F823A1D mov ax, [ebp+arg_4] and ax, 2 cmp ax, 1 sbb esi, esi and esi, 13h add esi, 100Bh jmp loc_7F823B15 ; --------------------------------------------------------------------------- loc_7F823A1D: ; CODE XREF: sub_7F823870+18Fj test ebx, ebx jz short loc_7F823A46 push 0 mov eax, dword_7F836764 push offset sub_7F823C13 push 4 push eax call sub_7F824021 mov [ebp+var_4], eax test eax, eax jnz short loc_7F823A46 mov esi, 400h jmp loc_7F823B15 ; --------------------------------------------------------------------------- loc_7F823A46: ; CODE XREF: sub_7F823870+1AFj ; sub_7F823870+1CAj lea eax, [ebp+TempFileName] push eax ; lpString push edi ; int call sub_7F8223B3 mov esi, eax test esi, esi jnz loc_7F823B09 lea eax, [ebp+pSrc] push eax ; pSrc call sub_7F8155A8 cmp eax, 202h jz short loc_7F823AA3 push 100h ; int lea eax, [ebp+pSrc] push eax ; lpString push 0 ; int push 0 ; lpTempFileName push edi ; int call sub_7F823D4A test eax, eax jnz short loc_7F823AA3 mov ax, [ebp+arg_4] and ax, 2 cmp ax, 1 sbb esi, esi and esi, 13h add esi, 100Bh jmp short loc_7F823B09 ; --------------------------------------------------------------------------- loc_7F823AA3: ; CODE XREF: sub_7F823870+1FEj ; sub_7F823870+218j lea eax, [ebp+pSrc] push eax ; LPCSTR push edi ; pSrc call sub_7F81554E mov esi, eax test esi, esi jnz short loc_7F823AE9 push edi ; LPCSTR lea eax, [ebp+TempFileName] push eax ; pSrc call sub_7F81554E mov esi, eax test esi, esi jz short loc_7F823B15 push 10h ; uType call ds:MessageBeep push 10h ; char push offset aPleaseContactY ; "Please contact your system administrato"... push offset aMailCouldNotSu ; "Mail could not successfully backup your"... push offset aMicrosoftMai_0 ; "Microsoft Mail" call sub_7F815037 jmp short loc_7F823B15 ; --------------------------------------------------------------------------- loc_7F823AE9: ; CODE XREF: sub_7F823870+244j push 10h ; uType call ds:MessageBeep push 10h ; char push offset aPleaseExitAndR ; "Please Exit and restart Mail. If mail "... push offset aMailCouldNotSu ; "Mail could not successfully backup your"... push offset aMicrosoftMai_0 ; "Microsoft Mail" call sub_7F815037 jmp short loc_7F823B15 ; --------------------------------------------------------------------------- loc_7F823B09: ; CODE XREF: sub_7F823870+1E7j ; sub_7F823870+231j lea eax, [ebp+TempFileName] push eax ; pSrc call sub_7F81550B loc_7F823B15: ; CODE XREF: sub_7F823870+FEj ; sub_7F823870+155j ... test ebx, ebx jz short loc_7F823B39 cmp [ebp+var_4], 0 jz short loc_7F823B27 push [ebp+var_4] call sub_7F8240DB loc_7F823B27: ; CODE XREF: sub_7F823870+2ADj call sub_7F82B8C4 cmp eax, 1 sbb eax, eax neg eax push eax call sub_7F82B8D3 loc_7F823B39: ; CODE XREF: sub_7F823870+2A7j test esi, esi jz short loc_7F823B61 test byte ptr [ebp+arg_4], 2 jz short loc_7F823B61 push 10h ; uType call ds:MessageBeep push 10h ; char push offset aPleaseContactY ; "Please contact your system administrato"... push offset aInconsistancie ; "Inconsistancies in your message file co"... push offset aMicrosoftMai_0 ; "Microsoft Mail" call sub_7F815037 loc_7F823B61: ; CODE XREF: sub_7F823870+2CBj ; sub_7F823870+2D1j push [ebp+hCursor] ; hCursor call ds:SetCursor mov eax, esi loc_7F823B6C: ; CODE XREF: sub_7F823870+BFj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F823870 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; BOOL __stdcall sub_7F823B75(HWND, UINT, WPARAM, LPARAM) sub_7F823B75 proc near ; DATA XREF: sub_7F823870+89o hWnd = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_4] mov ebp, esp cmp eax, 110h push esi jz short loc_7F823B8F cmp eax, 111h jz short loc_7F823BEB xor eax, eax jmp short loc_7F823C0E ; --------------------------------------------------------------------------- loc_7F823B8F: ; CODE XREF: sub_7F823B75+Dj push offset aMicrosoftMai_0 ; "Microsoft Mail" mov esi, [ebp+hWnd] push esi ; hWnd call ds:SetWindowTextA test byte ptr [ebp+arg_C], 2 jz short loc_7F823BBC push offset aAnInconsistenc ; "An inconsistency has been detected in t"... push 1FA6h ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push offset aRepairNow ; "&Repair Now" jmp short loc_7F823BD2 ; --------------------------------------------------------------------------- loc_7F823BBC: ; CODE XREF: sub_7F823B75+2Dj push offset aDoYouWantToHav ; "Do you want to have your message file c"... push 1FA6h ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push offset aCheckFile ; "&Check File" loc_7F823BD2: ; CODE XREF: sub_7F823B75+45j push 1 ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA push offset aCancel ; "Cancel" push 2 ; nIDDlgItem push esi ; hDlg call ds:SetDlgItemTextA jmp short loc_7F823C09 ; --------------------------------------------------------------------------- loc_7F823BEB: ; CODE XREF: sub_7F823B75+14j movzx eax, word ptr [ebp+arg_8] cmp eax, 1 jl short loc_7F823BF9 cmp eax, 2 jle short loc_7F823BFD loc_7F823BF9: ; CODE XREF: sub_7F823B75+7Dj xor eax, eax jmp short loc_7F823C0E ; --------------------------------------------------------------------------- loc_7F823BFD: ; CODE XREF: sub_7F823B75+82j push [ebp+arg_8] ; nResult push [ebp+hWnd] ; hDlg call ds:EndDialog loc_7F823C09: ; CODE XREF: sub_7F823B75+74j mov eax, 1 loc_7F823C0E: ; CODE XREF: sub_7F823B75+18j ; sub_7F823B75+86j pop esi pop ebp retn 10h sub_7F823B75 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F823C13 proc near ; DATA XREF: sub_7F8207A6+38Ao ; sub_7F823870+1B8o String1 = byte ptr -104h var_103 = byte ptr -103h var_4 = dword ptr -4 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 104h push ebx push esi push edi call sub_7F82449E test [ebp+arg_4], 4 mov [ebp+var_4], eax jz loc_7F823D3F mov esi, [ebp+arg_8] movzx eax, word ptr [esi+6] cmp eax, 1 jz short loc_7F823C54 cmp eax, 2 jz loc_7F823D1B cmp eax, 3 jz loc_7F823D12 jmp loc_7F823D2A ; --------------------------------------------------------------------------- loc_7F823C54: ; CODE XREF: sub_7F823C13+28j lea edi, [ebp+var_103] xor eax, eax mov [ebp+String1], 0 mov ecx, 3Fh rep stosd stosw mov di, [esi+4] mov ecx, 1 mov ax, 0Bh cmp ax, di adc ecx, 0FFFFFFFFh cmp ecx, 1 sbb eax, eax and al, 0CFh add eax, 32h sub di, ax cmp ecx, 1 sbb ebx, ebx and ebx, 3 movzx eax, di add bx, 7 cmp ecx, 1 sbb ecx, ecx and ecx, 7 add ecx, 41Eh add ecx, eax push ecx call sub_7F82AC7E movzx ecx, bx push eax push ecx movzx eax, di inc eax mov ecx, [ebp+var_4] push eax mov eax, [ecx+18h] and eax, 8 cmp eax, 1 sbb eax, eax and eax, 2 add eax, 41Ah push eax call sub_7F82AC7E push eax push 41Dh call sub_7F82AC7E push eax ; LPCSTR lea ecx, [ebp+String1] push ecx ; LPSTR call ds:wsprintfA movsx ecx, word ptr [esi+0Ah] add esp, 18h movsx edx, word ptr [esi+8] push ecx push edx call sub_7F82B72B push 0 ; LPCSTR lea ecx, [ebp+String1] push ecx ; lpString1 call sub_7F82B7B5 jmp short loc_7F823D2A ; --------------------------------------------------------------------------- loc_7F823D12: ; CODE XREF: sub_7F823C13+36j call sub_7F82B8C4 test eax, eax jnz short loc_7F823D3F loc_7F823D1B: ; CODE XREF: sub_7F823C13+2Dj movsx eax, word ptr [esi+0Ah] movsx ecx, word ptr [esi+8] push eax push ecx call sub_7F82B72B loc_7F823D2A: ; CODE XREF: sub_7F823C13+3Cj ; sub_7F823C13+FDj call sub_7F82B8C4 cmp eax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 2 jmp short loc_7F823D41 ; --------------------------------------------------------------------------- loc_7F823D3F: ; CODE XREF: sub_7F823C13+18j ; sub_7F823C13+106j xor eax, eax loc_7F823D41: ; CODE XREF: sub_7F823C13+12Aj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F823C13 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F823D4A(int, LPSTR lpTempFileName, int, LPCSTR lpString, int) sub_7F823D4A proc near ; CODE XREF: sub_7F823870+188p ; sub_7F823870+211p String = byte ptr -118h var_117 = byte ptr -117h String1 = byte ptr -18h var_17 = byte ptr -17h String2 = byte ptr -8 var_7 = byte ptr -7 var_2 = word ptr -2 arg_0 = dword ptr 8 lpTempFileName = dword ptr 0Ch arg_8 = dword ptr 10h lpString = dword ptr 14h arg_10 = dword ptr 18h push ebp xor edx, edx mov ebp, esp sub esp, 118h xor eax, eax push ebx push esi mov [ebp+String2], dl push edi mov esi, 202h lea edi, [ebp+var_7] stosd lea edi, [ebp+var_17] mov [ebp+String1], dl stosd stosd stosd lea edi, [ebp+var_117] mov ecx, 3Fh mov [ebp+String], dl rep stosd stosw push 0Dh ; int lea ecx, [ebp+String] stosb mov [ebp+var_2], dx lea edi, [ebp+String1] push edi ; int push 100h ; int push ecx ; lpString push [ebp+arg_0] ; int call sub_7F815497 test eax, eax jz short loc_7F823DAE xor eax, eax jmp loc_7F823E9F ; --------------------------------------------------------------------------- loc_7F823DAE: ; CODE XREF: sub_7F823D4A+5Bj mov eax, [ebp+arg_8] test eax, eax jz short loc_7F823DD8 push eax lea edx, [ebp+String] push [ebp+lpTempFileName] push edx call sub_7F81ABAD push [ebp+lpTempFileName] ; lpTempFileName call sub_7F82AB76 test eax, eax jnz short loc_7F823DD8 xor eax, eax jmp loc_7F823E9F ; --------------------------------------------------------------------------- loc_7F823DD8: ; CODE XREF: sub_7F823D4A+69j ; sub_7F823D4A+85j mov eax, [ebp+arg_10] test eax, eax jz loc_7F823E92 push eax mov ebx, [ebp+lpString] push ebx lea eax, [ebp+String] push eax call sub_7F81ABAD cmp [ebp+String1], 0 jz short loc_7F823E05 loc_7F823DFA: ; CODE XREF: sub_7F823D4A+B9j cmp byte ptr [edi], 2Eh jz short loc_7F823E05 inc edi cmp byte ptr [edi], 0 jnz short loc_7F823DFA loc_7F823E05: ; CODE XREF: sub_7F823D4A+AEj ; sub_7F823D4A+B3j push offset a_bak ; ".BAK" push edi ; lpString1 call ds:lstrcpyA push ebx ; lpString mov esi, ds:lstrlenA call esi ; lstrlenA add eax, ebx cmp ebx, eax jnb short loc_7F823E2A cmp byte ptr [eax-1], 5Ch jz short loc_7F823E2A mov byte ptr [eax], 5Ch inc eax loc_7F823E2A: ; CODE XREF: sub_7F823D4A+D4j ; sub_7F823D4A+DAj lea ecx, [ebp+String1] push ecx ; lpString2 push eax ; lpString1 call ds:lstrcpyA mov edi, eax push offset a_bak ; ".BAK" call esi ; lstrlenA sub edi, eax lea eax, [ebp+String1] push eax ; lpString call esi ; lstrlenA add edi, eax loc_7F823E48: ; CODE XREF: sub_7F823D4A+13Bj push ebx ; pSrc call sub_7F8155A8 cmp eax, 202h mov esi, eax jz short loc_7F823E92 cmp [ebp+var_2], 3E7h jge short loc_7F823E87 inc [ebp+var_2] lea ecx, [ebp+String2] movsx eax, [ebp+var_2] push eax push offset a_03_3d ; ".%03.3d" push ecx ; LPSTR call ds:wsprintfA add esp, 0Ch lea ecx, [ebp+String2] push ecx ; lpString2 push edi ; lpString1 call ds:lstrcpyA jmp short loc_7F823E48 ; --------------------------------------------------------------------------- loc_7F823E87: ; CODE XREF: sub_7F823D4A+113j cmp esi, 202h jz short loc_7F823E92 mov byte ptr [ebx], 0 loc_7F823E92: ; CODE XREF: sub_7F823D4A+93j ; sub_7F823D4A+10Bj ... sub esi, 202h cmp esi, 1 sbb eax, eax neg eax loc_7F823E9F: ; CODE XREF: sub_7F823D4A+5Fj ; sub_7F823D4A+89j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F823D4A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F823EA8 proc near ; CODE XREF: sub_7F82159B+68p Buffer = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push esi lea eax, [ebp+Buffer] mov esi, [ebp+arg_0] push eax ; lpBuffer add esi, 4 push 4 ; nNumberOfBytesToRead push 122h ; lDistanceToMove push 1 ; __int16 push dword ptr [esi] ; int call sub_7F815C9D test eax, eax jz short loc_7F823ED1 xor eax, eax jmp short loc_7F823F3F ; --------------------------------------------------------------------------- loc_7F823ED1: ; CODE XREF: sub_7F823EA8+23j ; sub_7F823EA8+37j call sub_7F82AC0C mov [ebp+var_4], eax mov eax, [ebp+Buffer] cmp [ebp+var_4], eax jz short loc_7F823ED1 lea eax, [ebp+var_4] push eax ; lpBuffer push 4 ; nNumberOfBytesToRead push 122h ; lDistanceToMove push 2 ; __int16 push dword ptr [esi] ; int call sub_7F815C9D test eax, eax jz short loc_7F823EFD xor eax, eax jmp short loc_7F823F3F ; --------------------------------------------------------------------------- loc_7F823EFD: ; CODE XREF: sub_7F823EA8+4Fj push 4 lea eax, [ebp+var_4] push eax mov ecx, [ebp+arg_4] push 80000000h push dword ptr [ecx+218h] call sub_7F824187 lea ecx, [ebp+Buffer] push ecx ; lpBuffer push 4 ; nNumberOfBytesToRead push 122h ; lDistanceToMove push 1 ; __int16 push dword ptr [esi] ; int call sub_7F815C9D test eax, eax mov eax, 0 jnz short loc_7F823F3F mov eax, [ebp+var_4] sub eax, [ebp+Buffer] cmp eax, 1 sbb eax, eax inc eax loc_7F823F3F: ; CODE XREF: sub_7F823EA8+27j ; sub_7F823EA8+53j ... pop esi mov esp, ebp pop ebp retn 8 sub_7F823EA8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F823F46 proc near ; CODE XREF: sub_7F812460+1C8p Buffer = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 push esi lea ecx, [ebp+Buffer] mov esi, [eax] push ecx ; lpBuffer push 4 ; nNumberOfBytesToRead push 122h ; lDistanceToMove push 1 ; __int16 push dword ptr [esi+4] ; int call sub_7F815C9D test eax, eax jz short loc_7F823F70 xor eax, eax jmp short loc_7F823FAB ; --------------------------------------------------------------------------- loc_7F823F70: ; CODE XREF: sub_7F823F46+24j mov eax, [ebp+arg_4] cmp eax, [ebp+Buffer] jnz short loc_7F823FA6 loc_7F823F78: ; CODE XREF: sub_7F823F46+40j call sub_7F82AC0C mov [ebp+var_4], eax mov eax, [ebp+Buffer] cmp [ebp+var_4], eax jz short loc_7F823F78 lea eax, [ebp+var_4] push eax ; lpBuffer push 4 ; nNumberOfBytesToRead push 122h ; lDistanceToMove push 2 ; __int16 push dword ptr [esi+4] ; int call sub_7F815C9D test eax, eax mov eax, 0 jnz short loc_7F823FAB loc_7F823FA6: ; CODE XREF: sub_7F823F46+30j mov eax, 2 loc_7F823FAB: ; CODE XREF: sub_7F823F46+28j ; sub_7F823F46+5Ej pop esi mov esp, ebp pop ebp retn 8 sub_7F823F46 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_7F823FB2 proc near ; CODE XREF: sub_7F81217E+16p ; sub_7F8173E6+150p ... jmp sub_7F82E967 sub_7F823FB2 endp ; =============== S U B R O U T I N E ======================================= sub_7F823FB7 proc near ; CODE XREF: sub_7F81217E+1D5p ; sub_7F8173E6+1C9p ... var_2 = word ptr -2 arg_0 = dword ptr 4 sub esp, 4 xor eax, eax mov [esp+4+var_2], 1 push esi mov esi, [esp+8+arg_0] mov ecx, [esi] cmp [ecx+6], ax jle short loc_7F823FD6 or byte ptr [ecx+9], 80h jmp short loc_7F824003 ; --------------------------------------------------------------------------- loc_7F823FD6: ; CODE XREF: sub_7F823FB7+17j cmp word ptr [ecx+2], 0 jg short loc_7F823FE4 mov eax, 1 jmp short loc_7F824003 ; --------------------------------------------------------------------------- loc_7F823FE4: ; CODE XREF: sub_7F823FB7+24j lea eax, [esp+8+var_2] push 2 push eax push 0 push 8001h push esi call sub_7F82ADFE cmp eax, 2 jnz short loc_7F824003 mov ecx, [esi] or byte ptr [ecx+9], 40h loc_7F824003: ; CODE XREF: sub_7F823FB7+1Dj ; sub_7F823FB7+2Bj ... cmp eax, 1 jnz short loc_7F82400E push esi call sub_7F82F1E1 loc_7F82400E: ; CODE XREF: sub_7F823FB7+4Fj pop esi add esp, 4 retn 4 sub_7F823FB7 endp ; =============== S U B R O U T I N E ======================================= sub_7F824015 proc near ; CODE XREF: sub_7F829FD2+20p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax] mov ax, [ecx] retn 4 sub_7F824015 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824021 proc near ; CODE XREF: sub_7F81217E+42p ; sub_7F823870+1C0p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi xor esi, esi call sub_7F81731C push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] mov [ebp+var_4], 0 mov [ebp+var_8], eax call sub_7F82EBA7 cmp eax, esi mov ebx, eax jnz short loc_7F824056 mov eax, 400h jmp short loc_7F8240B4 ; --------------------------------------------------------------------------- loc_7F824056: ; CODE XREF: sub_7F824021+2Cj mov edi, [ebp+arg_0] push edi call sub_7F82EC63 test ax, ax jge short loc_7F824093 call sub_7F82EA6B mov esi, eax test esi, esi jnz short loc_7F824076 mov eax, 400h jmp short loc_7F8240B4 ; --------------------------------------------------------------------------- loc_7F824076: ; CODE XREF: sub_7F824021+4Cj push esi ; int mov ecx, [ebp+var_8] push [ebp+arg_4] ; int push dword ptr [ecx+4] ; hWnd push edi ; int mov [ebp+var_4], 1 call sub_7F82E97D test eax, eax jz short loc_7F8240A4 jmp short loc_7F8240B4 ; --------------------------------------------------------------------------- loc_7F824093: ; CODE XREF: sub_7F824021+41j movsx eax, ax shl eax, 4 mov ecx, [ebp+arg_4] add eax, [edi] mov esi, [eax+18h] or [eax+14h], ecx loc_7F8240A4: ; CODE XREF: sub_7F824021+6Ej push ebx push esi call sub_7F82EABB test eax, eax jnz short loc_7F8240B8 mov ecx, [edi] inc word ptr [ecx] loc_7F8240B4: ; CODE XREF: sub_7F824021+33j ; sub_7F824021+53j ... test eax, eax jz short loc_7F8240D0 loc_7F8240B8: ; CODE XREF: sub_7F824021+8Cj test ebx, ebx jz short loc_7F8240C2 push ebx call sub_7F82F1E1 loc_7F8240C2: ; CODE XREF: sub_7F824021+99j cmp [ebp+var_4], 0 jz short loc_7F8240CE push esi call sub_7F82EA8A loc_7F8240CE: ; CODE XREF: sub_7F824021+A5j xor ebx, ebx loc_7F8240D0: ; CODE XREF: sub_7F824021+95j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F824021 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8240DB proc near ; CODE XREF: sub_7F811EEF+B0p ; sub_7F81217E+1BEp ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [eax] cmp word ptr [esi+0Eh], 0 mov ebx, [esi+8] jle short loc_7F824104 or byte ptr [esi+0Dh], 80h mov eax, [ebx] mov ecx, [eax+4] mov edx, [ecx] dec word ptr [edx] jmp short loc_7F82417E ; --------------------------------------------------------------------------- loc_7F824104: ; CODE XREF: sub_7F8240DB+17j test ebx, ebx jz short loc_7F824176 push [ebp+arg_0] push ebx call sub_7F82EB11 mov ecx, [ebx] mov [ebp+var_8], ecx mov edi, [ecx+4] push edi call sub_7F82EC63 mov [ebp+var_2], ax mov eax, [ebp+var_8] cmp word ptr [eax], 0 jnz short loc_7F82413D push ebx call sub_7F82EA8A push dword ptr [ebp+var_2] push edi call sub_7F82E9F9 jmp short loc_7F824156 ; --------------------------------------------------------------------------- loc_7F82413D: ; CODE XREF: sub_7F8240DB+4Fj mov edx, [edi] push ebx mov [ebp+var_8], edx call sub_7F82EC98 movsx ecx, [ebp+var_2] shl ecx, 4 mov edx, [ebp+var_8] mov [ecx+edx+14h], eax loc_7F824156: ; CODE XREF: sub_7F8240DB+60j mov eax, [edi] cmp word ptr [eax+2], 0 jnz short loc_7F82416D test byte ptr [eax+9], 40h jz short loc_7F82416D push edi call sub_7F82F1E1 jmp short loc_7F824176 ; --------------------------------------------------------------------------- loc_7F82416D: ; CODE XREF: sub_7F8240DB+82j ; sub_7F8240DB+88j test byte ptr [esi+0Dh], 80h jnz short loc_7F824176 dec word ptr [eax] loc_7F824176: ; CODE XREF: sub_7F8240DB+2Bj ; sub_7F8240DB+90j ... push [ebp+arg_0] call sub_7F82F1E1 loc_7F82417E: ; CODE XREF: sub_7F8240DB+27j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F8240DB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824187 proc near ; CODE XREF: sub_7F812408+4Ep ; sub_7F823EA8+69p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push [esp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push 1 push [ebp+arg_0] call sub_7F82ADFE dec eax pop ebp cmp eax, 1 sbb eax, eax neg eax retn 10h sub_7F824187 endp ; =============== S U B R O U T I N E ======================================= sub_7F8241AA proc near ; CODE XREF: sub_7F82ACA6+58p mov eax, dword_7F839014 retn sub_7F8241AA endp ; =============== S U B R O U T I N E ======================================= sub_7F8241B0 proc near ; CODE XREF: sub_7F81217E+148p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push ebx mov edx, [esp+4+arg_4] push esi push edi mov ecx, [eax] mov [ecx+10h], edx mov edi, [ecx+8] test edi, edi jz short loc_7F8241E7 mov eax, [edi] mov ebx, [eax+4] push ebx call sub_7F82EC63 mov si, ax push edi call sub_7F82EC98 movsx ecx, si shl ecx, 4 mov edx, [ebx] mov [ecx+edx+14h], eax loc_7F8241E7: ; CODE XREF: sub_7F8241B0+15j pop edi pop esi pop ebx retn 8 sub_7F8241B0 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F8241ED(SIZE_T dwBytes) sub_7F8241ED proc near ; CODE XREF: sub_7F814EF3+31p dwBytes = dword ptr 4 push ebx push esi push edi xor esi, esi call ds:__imp_GetCurrentProcessId mov edi, eax mov eax, dword_7F8370A0 cmp eax, esi jle short loc_7F824217 mov ecx, offset dword_7F8370A8 loc_7F824208: ; CODE XREF: sub_7F8241ED+26j cmp dword ptr [ecx], 0 jz short loc_7F824215 add ecx, 4 inc esi cmp eax, esi jg short loc_7F824208 loc_7F824215: ; CODE XREF: sub_7F8241ED+1Ej cmp eax, esi loc_7F824217: ; CODE XREF: sub_7F8241ED+14j jnz short loc_7F824228 cmp esi, 64h jnz short loc_7F824222 xor eax, eax jmp short loc_7F82429B ; --------------------------------------------------------------------------- loc_7F824222: ; CODE XREF: sub_7F8241ED+2Fj inc eax mov dword_7F8370A0, eax loc_7F824228: ; CODE XREF: sub_7F8241ED:loc_7F824217j xor ebx, ebx inc dword_7F8373D0 mov dword_7F837098, ebx mov dword_7F83709C, ebx cmp dword_7F8373D4, ebx jz short loc_7F824267 push 10h push [esp+10h+dwBytes] call sub_7F82F03B test eax, eax jz short loc_7F824294 mov dword_7F837098, edi mov dword_7F83709C, eax mov dword_7F8370A8[esi*4], edi jmp short loc_7F824294 ; --------------------------------------------------------------------------- loc_7F824267: ; CODE XREF: sub_7F8241ED+55j push [esp+0Ch+dwBytes] ; dwBytes push 42h ; uFlags call ds:GlobalAlloc test eax, eax jnz short loc_7F82427B xor eax, eax jmp short loc_7F82429B ; --------------------------------------------------------------------------- loc_7F82427B: ; CODE XREF: sub_7F8241ED+88j push eax ; hMem mov dword_7F8370A8[esi*4], edi mov dword_7F837098, edi call ds:GlobalLock mov dword_7F83709C, eax loc_7F824294: ; CODE XREF: sub_7F8241ED+64j ; sub_7F8241ED+78j mov pMem[esi*4], eax loc_7F82429B: ; CODE XREF: sub_7F8241ED+33j ; sub_7F8241ED+8Cj pop edi pop esi pop ebx retn 4 sub_7F8241ED endp ; =============== S U B R O U T I N E ======================================= sub_7F8242A1 proc near ; CODE XREF: sub_7F814F94+9Ap push esi push edi xor esi, esi call ds:__imp_GetCurrentProcessId mov ecx, dword_7F8370A0 cmp ecx, esi jle short loc_7F824324 mov edx, offset dword_7F8370A8 loc_7F8242BA: ; CODE XREF: sub_7F8242A1+23j cmp [edx], eax jz short loc_7F8242C8 add edx, 4 inc esi cmp ecx, esi jg short loc_7F8242BA jmp short loc_7F824324 ; --------------------------------------------------------------------------- loc_7F8242C8: ; CODE XREF: sub_7F8242A1+1Bj push pMem[esi*4] ; pMem cmp dword_7F8373D4, 0 jz short loc_7F8242DF call sub_7F82F149 jmp short loc_7F8242F5 ; --------------------------------------------------------------------------- loc_7F8242DF: ; CODE XREF: sub_7F8242A1+35j call ds:GlobalHandle push eax ; hMem mov edi, eax call ds:GlobalUnlock push edi ; hMem call ds:GlobalFree loc_7F8242F5: ; CODE XREF: sub_7F8242A1+3Cj mov dword_7F8370A8[esi*4], 0 mov eax, dword_7F8370A0 sub eax, esi cmp eax, 1 jnz short loc_7F824312 dec dword_7F8370A0 loc_7F824312: ; CODE XREF: sub_7F8242A1+69j xor eax, eax dec dword_7F8373D0 mov dword_7F837098, eax mov dword_7F83709C, eax loc_7F824324: ; CODE XREF: sub_7F8242A1+12j ; sub_7F8242A1+25j pop edi pop esi retn sub_7F8242A1 endp ; =============== S U B R O U T I N E ======================================= sub_7F824327 proc near ; CODE XREF: sub_7F814EF3+22p ; sub_7F814F94:loc_7F814FACp ... push esi call ds:__imp_GetCurrentProcessId xor edx, edx mov ecx, dword_7F8370A0 cmp ecx, edx jle short loc_7F82434B mov esi, offset dword_7F8370A8 loc_7F82433F: ; CODE XREF: sub_7F824327+22j cmp [esi], eax jz short loc_7F82434F add esi, 4 inc edx cmp edx, ecx jl short loc_7F82433F loc_7F82434B: ; CODE XREF: sub_7F824327+11j xor eax, eax loc_7F82434D: ; CODE XREF: sub_7F824327+2Fj pop esi retn ; --------------------------------------------------------------------------- loc_7F82434F: ; CODE XREF: sub_7F824327+1Aj mov eax, pMem[edx*4] jmp short loc_7F82434D sub_7F824327 endp ; [00000006 BYTES: COLLAPSED FUNCTION GetCurrentProcessId. PRESS CTRL-NUMPAD+ TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7F82435E proc near ; CODE XREF: sub_7F814EF3:loc_7F814F4Cp ; sub_7F814F94:loc_7F814FD1p mov eax, dword_7F8373D0 retn sub_7F82435E endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F824364(SIZE_T dwBytes) sub_7F824364 proc near ; CODE XREF: sub_7F8173E6+122p dwBytes = dword ptr 4 push ebx push esi push edi xor esi, esi call ds:__imp_GetCurrentProcessId mov edi, eax mov eax, dword_7F8373E0 cmp esi, eax jge short loc_7F82438E mov ecx, offset dword_7F8373E8 loc_7F82437F: ; CODE XREF: sub_7F824364+26j cmp dword ptr [ecx], 0 jz short loc_7F82438C add ecx, 4 inc esi cmp esi, eax jl short loc_7F82437F loc_7F82438C: ; CODE XREF: sub_7F824364+1Ej cmp esi, eax loc_7F82438E: ; CODE XREF: sub_7F824364+14j jnz short loc_7F82439F cmp esi, 64h jnz short loc_7F824399 xor eax, eax jmp short loc_7F824412 ; --------------------------------------------------------------------------- loc_7F824399: ; CODE XREF: sub_7F824364+2Fj inc eax mov dword_7F8373E0, eax loc_7F82439F: ; CODE XREF: sub_7F824364:loc_7F82438Ej xor ebx, ebx inc dword_7F837710 mov dword_7F8373D8, ebx mov dword_7F8373DC, ebx cmp dword_7F837714, ebx jz short loc_7F8243DE push 10h push [esp+10h+dwBytes] call sub_7F82F03B test eax, eax jz short loc_7F82440B mov dword_7F8373D8, edi mov dword_7F8373DC, eax mov dword_7F8373E8[esi*4], edi jmp short loc_7F82440B ; --------------------------------------------------------------------------- loc_7F8243DE: ; CODE XREF: sub_7F824364+55j push [esp+0Ch+dwBytes] ; dwBytes push 42h ; uFlags call ds:GlobalAlloc test eax, eax jnz short loc_7F8243F2 xor eax, eax jmp short loc_7F824412 ; --------------------------------------------------------------------------- loc_7F8243F2: ; CODE XREF: sub_7F824364+88j push eax ; hMem mov dword_7F8373E8[esi*4], edi mov dword_7F8373D8, edi call ds:GlobalLock mov dword_7F8373DC, eax loc_7F82440B: ; CODE XREF: sub_7F824364+64j ; sub_7F824364+78j mov dword_7F837580[esi*4], eax loc_7F824412: ; CODE XREF: sub_7F824364+33j ; sub_7F824364+8Cj pop edi pop esi pop ebx retn 4 sub_7F824364 endp ; =============== S U B R O U T I N E ======================================= sub_7F824418 proc near ; CODE XREF: sub_7F8173E6+1E5p ; sub_7F81762E+7Bp push esi push edi xor esi, esi call ds:__imp_GetCurrentProcessId mov ecx, dword_7F8373E0 cmp ecx, esi jle short loc_7F82449B mov edx, offset dword_7F8373E8 loc_7F824431: ; CODE XREF: sub_7F824418+23j cmp [edx], eax jz short loc_7F82443F add edx, 4 inc esi cmp esi, ecx jl short loc_7F824431 jmp short loc_7F82449B ; --------------------------------------------------------------------------- loc_7F82443F: ; CODE XREF: sub_7F824418+1Bj push dword_7F837580[esi*4] ; pMem cmp dword_7F837714, 0 jz short loc_7F824456 call sub_7F82F149 jmp short loc_7F82446C ; --------------------------------------------------------------------------- loc_7F824456: ; CODE XREF: sub_7F824418+35j call ds:GlobalHandle push eax ; hMem mov edi, eax call ds:GlobalUnlock push edi ; hMem call ds:GlobalFree loc_7F82446C: ; CODE XREF: sub_7F824418+3Cj mov dword_7F8373E8[esi*4], 0 mov eax, dword_7F8373E0 sub eax, esi cmp eax, 1 jnz short loc_7F824489 dec dword_7F8373E0 loc_7F824489: ; CODE XREF: sub_7F824418+69j xor eax, eax dec dword_7F837710 mov dword_7F8373D8, eax mov dword_7F8373DC, eax loc_7F82449B: ; CODE XREF: sub_7F824418+12j ; sub_7F824418+25j pop edi pop esi retn sub_7F824418 endp ; =============== S U B R O U T I N E ======================================= sub_7F82449E proc near ; CODE XREF: sub_7F8173E6+19p ; sub_7F8173E6:loc_7F81754Bp ... push esi call ds:__imp_GetCurrentProcessId xor edx, edx mov ecx, dword_7F8373E0 cmp ecx, edx jle short loc_7F8244C2 mov esi, offset dword_7F8373E8 loc_7F8244B6: ; CODE XREF: sub_7F82449E+22j cmp [esi], eax jz short loc_7F8244C6 add esi, 4 inc edx cmp ecx, edx jg short loc_7F8244B6 loc_7F8244C2: ; CODE XREF: sub_7F82449E+11j xor eax, eax loc_7F8244C4: ; CODE XREF: sub_7F82449E+2Fj pop esi retn ; --------------------------------------------------------------------------- loc_7F8244C6: ; CODE XREF: sub_7F82449E+1Aj mov eax, dword_7F837580[edx*4] jmp short loc_7F8244C4 sub_7F82449E endp ; =============== S U B R O U T I N E ======================================= sub_7F8244CF proc near ; CODE XREF: sub_7F822894+62p ; sub_7F822894+87p ... arg_0 = dword ptr 4 push esi push 10h push 4 call sub_7F82F18D mov esi, eax test esi, esi jz short loc_7F8244FA mov eax, [esp+4+arg_0] test eax, eax jz short loc_7F8244FA push eax push esi call sub_7F82451D test eax, eax jz short loc_7F8244FA push esi call sub_7F824500 xor esi, esi loc_7F8244FA: ; CODE XREF: sub_7F8244CF+Ej ; sub_7F8244CF+16j ... mov eax, esi pop esi retn 4 sub_7F8244CF endp ; =============== S U B R O U T I N E ======================================= sub_7F824500 proc near ; CODE XREF: sub_7F8223B3+5Dp ; sub_7F8223B3+6Fp ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi] mov eax, [eax] test eax, eax jz short loc_7F824513 push eax call sub_7F82F1E1 loc_7F824513: ; CODE XREF: sub_7F824500+Bj push esi call sub_7F82F1E1 pop esi retn 4 sub_7F824500 endp ; =============== S U B R O U T I N E ======================================= sub_7F82451D proc near ; CODE XREF: sub_7F8244CF+1Ap ; sub_7F8245A4+14p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi mov edi, [esp+0Ch+arg_4] push ebp mov ebx, [esi] cmp edi, 7FFF8h jle short loc_7F82453A mov eax, 400h jmp short loc_7F82459D ; --------------------------------------------------------------------------- loc_7F82453A: ; CODE XREF: sub_7F82451D+14j mov ecx, [ebx+4] test ecx, ecx jz short loc_7F82455D mov eax, edi cdq and edx, 7 add eax, edx sar eax, 3 mov ebp, eax mov eax, ecx cdq and edx, 7 add eax, edx sar eax, 3 cmp ebp, eax jz short loc_7F824598 loc_7F82455D: ; CODE XREF: sub_7F82451D+22j mov ecx, [ebx] push 10h mov eax, edi test ecx, ecx cdq jz short loc_7F82457A and edx, 7 add eax, edx sar eax, 3 inc eax push eax push ecx call sub_7F82F24A jmp short loc_7F824589 ; --------------------------------------------------------------------------- loc_7F82457A: ; CODE XREF: sub_7F82451D+49j and edx, 7 add eax, edx sar eax, 3 inc eax push eax call sub_7F82F18D loc_7F824589: ; CODE XREF: sub_7F82451D+5Bj test eax, eax jnz short loc_7F824594 mov eax, 400h jmp short loc_7F82459D ; --------------------------------------------------------------------------- loc_7F824594: ; CODE XREF: sub_7F82451D+6Ej mov ebx, [esi] mov [ebx], eax loc_7F824598: ; CODE XREF: sub_7F82451D+3Ej xor eax, eax mov [ebx+4], edi loc_7F82459D: ; CODE XREF: sub_7F82451D+1Bj ; sub_7F82451D+75j pop ebp pop edi pop esi pop ebx retn 8 sub_7F82451D endp ; =============== S U B R O U T I N E ======================================= sub_7F8245A4 proc near ; CODE XREF: sub_7F822894+C3p ; sub_7F822894+DFp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_4] push edi mov edi, [esp+0Ch+arg_0] mov ecx, [edi] cmp [ecx+4], esi jg short loc_7F8245C3 push esi push edi call sub_7F82451D test eax, eax jnz short loc_7F8245EC mov ecx, [edi] loc_7F8245C3: ; CODE XREF: sub_7F8245A4+10j mov eax, esi mov ecx, [ecx] cdq and edx, 7 mov edi, [ecx] add eax, edx mov bl, 1 sar eax, 3 add edi, eax mov eax, esi cdq xor eax, edx sub eax, edx and eax, 7 xor eax, edx sub eax, edx mov cl, al xor eax, eax shl bl, cl or [edi], bl loc_7F8245EC: ; CODE XREF: sub_7F8245A4+1Bj pop edi pop esi pop ebx retn 8 sub_7F8245A4 endp ; =============== S U B R O U T I N E ======================================= sub_7F8245F2 proc near ; CODE XREF: sub_7F822C2A+BAp ; sub_7F822C2A+141p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push ebx push esi push edi mov eax, [eax] mov edi, [esp+0Ch+arg_4] cmp [eax+4], edi jg short loc_7F824608 xor eax, eax jmp short loc_7F82463A ; --------------------------------------------------------------------------- loc_7F824608: ; CODE XREF: sub_7F8245F2+10j mov eax, [eax] mov ecx, [eax] mov eax, edi cdq and edx, 7 mov ebx, 1 add eax, edx sar eax, 3 movzx esi, byte ptr [ecx+eax] mov eax, edi cdq xor eax, edx sub eax, edx and eax, 7 xor eax, edx sub eax, edx mov cl, al shl ebx, cl and esi, ebx cmp esi, 1 sbb eax, eax inc eax loc_7F82463A: ; CODE XREF: sub_7F8245F2+14j pop edi pop esi pop ebx retn 8 sub_7F8245F2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824640 proc near ; CODE XREF: sub_7F822894+292p ; sub_7F822894+2D7p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp push ebx push esi mov ecx, [eax] push edi mov esi, [ecx+4] cmp [ebp+arg_4], esi jl short loc_7F82465E mov eax, 0FFFFFFFFh jmp loc_7F824724 ; --------------------------------------------------------------------------- loc_7F82465E: ; CODE XREF: sub_7F824640+12j mov eax, [ebp+arg_4] cdq and edx, 7 add eax, edx sar eax, 3 mov ebx, eax mov eax, [ecx] mov edi, [eax] mov eax, [ebp+arg_4] cdq add edi, ebx xor eax, edx sub eax, edx and eax, 7 xor eax, edx sub eax, edx mov ecx, eax test ecx, ecx jz short loc_7F8246D2 mov al, 0FFh shl al, cl cmp [ebp+arg_8], 1 sbb dl, dl and dl, al and al, [edi] cmp al, dl jz short loc_7F8246C7 cmp [ebp+arg_8], 1 sbb dl, dl mov al, 1 shl al, cl inc dl shl dl, cl test al, al jz short loc_7F8246D1 mov cl, [edi] loc_7F8246AD: ; CODE XREF: sub_7F824640+7Ej mov bl, al and bl, cl cmp bl, dl jz short loc_7F8246C2 add al, al add dl, dl inc [ebp+arg_4] test al, al jnz short loc_7F8246AD jmp short loc_7F8246D1 ; --------------------------------------------------------------------------- loc_7F8246C2: ; CODE XREF: sub_7F824640+73j mov eax, [ebp+arg_4] jmp short loc_7F824724 ; --------------------------------------------------------------------------- loc_7F8246C7: ; CODE XREF: sub_7F824640+57j lea eax, ds:8[ebx*8] mov [ebp+arg_4], eax loc_7F8246D1: ; CODE XREF: sub_7F824640+69j ; sub_7F824640+80j inc edi loc_7F8246D2: ; CODE XREF: sub_7F824640+45j cmp [ebp+arg_8], 1 sbb al, al mov edx, esi sub edx, [ebp+arg_4] cmp edx, 8 jl short loc_7F8246EF loc_7F8246E2: ; CODE XREF: sub_7F824640+ADj cmp [edi], al jnz short loc_7F8246EF sub edx, 8 inc edi cmp edx, 8 jge short loc_7F8246E2 loc_7F8246EF: ; CODE XREF: sub_7F824640+A0j ; sub_7F824640+A4j test edx, edx jge short loc_7F8246FA mov eax, 0FFFFFFFFh jmp short loc_7F824724 ; --------------------------------------------------------------------------- loc_7F8246FA: ; CODE XREF: sub_7F824640+B1j mov cl, 1 mov ebx, esi sub ebx, edx cmp [ebp+arg_8], 1 sbb al, al add al, cl loc_7F824708: ; CODE XREF: sub_7F824640+D7j mov dl, cl and dl, [edi] cmp dl, al jz short loc_7F824719 add cl, cl add al, al inc ebx test cl, cl jnz short loc_7F824708 loc_7F824719: ; CODE XREF: sub_7F824640+CEj mov eax, 0FFFFFFFFh cmp ebx, esi jge short loc_7F824724 mov eax, ebx loc_7F824724: ; CODE XREF: sub_7F824640+19j ; sub_7F824640+85j ... pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F824640 endp ; =============== S U B R O U T I N E ======================================= sub_7F82472B proc near ; CODE XREF: sub_7F8181F1+11Fp arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax] mov edx, [ecx+6] push dword ptr [edx] call sub_7F82473E retn 4 sub_7F82472B endp ; =============== S U B R O U T I N E ======================================= sub_7F82473E proc near ; CODE XREF: sub_7F82472B+Bp ; sub_7F824774+78p ... arg_0 = dword ptr 4 push ebx push esi mov si, 8 push edi mov edi, [esp+0Ch+arg_0] add edi, 14h mov ebx, edi loc_7F82474E: ; CODE XREF: sub_7F82473E+25j mov eax, [ebx+3] test eax, eax jz short loc_7F82475B push eax call sub_7F82F1E1 loc_7F82475B: ; CODE XREF: sub_7F82473E+15j dec si add ebx, 7 test si, si jnz short loc_7F82474E xor eax, eax mov ecx, 0Eh rep stosd pop edi pop esi pop ebx retn 4 sub_7F82473E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824774 proc near ; CODE XREF: sub_7F8183DC+F1p ; sub_7F81B714+19Ap arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h cmp dword_7F838078, 0 push ebp mov ebp, esp push ebx push esi push edi jz short loc_7F82478D mov eax, 253h mov ecx, [ebp+arg_0] jmp short loc_7F8247BF ; --------------------------------------------------------------------------- loc_7F82478D: ; CODE XREF: sub_7F824774+Dj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F8247BF: ; CODE XREF: sub_7F824774+17j test eax, eax jnz short loc_7F82482E push 1 push [ebp+arg_4] push ecx call sub_7F81155C test eax, eax jz short loc_7F8247F1 mov edi, [eax] lea ebx, [edi+10h] push ebx push [ebp+arg_8] call sub_7F814A8B mov esi, eax test esi, esi jnz short loc_7F8247FE mov eax, [ebx] push edi mov [edi+0Ch], eax call sub_7F82473E loc_7F8247F1: ; CODE XREF: sub_7F824774+5Cj push [ebp+arg_8] push [ebp+arg_4] call sub_7F814868 mov esi, eax loc_7F8247FE: ; CODE XREF: sub_7F824774+70j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F824814 call sub_7F82A34F jmp short loc_7F824822 ; --------------------------------------------------------------------------- loc_7F824814: ; CODE XREF: sub_7F824774+97j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F824822: ; CODE XREF: sub_7F824774+9Ej mov dword_7F838078, 0 mov eax, esi loc_7F82482E: ; CODE XREF: sub_7F824774+4Dj pop edi pop esi pop ebx pop ebp retn 0Ch sub_7F824774 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824835 proc near ; CODE XREF: sub_7F8178D8+CEp ; sub_7F817E9D+43p ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor ebx, ebx xor edi, edi mov [ebp+var_14], edi mov [ebp+var_10], edi mov [ebp+var_4], edi mov [ebp+var_8], edi test byte ptr [ebp+arg_C+1], 20h jz short loc_7F82485A or word ptr [ebp+14h], 8003h loc_7F82485A: ; CODE XREF: sub_7F824835+1Dj xor eax, eax mov ecx, [ebp+arg_4] mov [ecx], eax cmp dword_7F838078, eax jz short loc_7F824870 mov esi, 253h jmp short loc_7F8248A0 ; --------------------------------------------------------------------------- loc_7F824870: ; CODE XREF: sub_7F824835+32j mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F8248A0: ; CODE XREF: sub_7F824835+39j test esi, esi jnz loc_7F824AEA test byte ptr [ebp+arg_C], 2 jz short loc_7F8248D9 lea eax, [ebp+var_4] push eax push [ebp+arg_10] push [ebp+arg_8] call sub_7F812FC1 mov esi, eax test esi, esi jnz loc_7F824A34 mov eax, [ebp+var_4] mov edi, 1 or byte ptr [eax+10h], 8 or [ebp+arg_C], di jmp short loc_7F82491D ; --------------------------------------------------------------------------- loc_7F8248D9: ; CODE XREF: sub_7F824835+77j push 0 mov eax, [ebp+arg_8] push dword ptr [eax] call sub_7F8144A4 mov [ebp+var_4], eax test eax, eax jnz short loc_7F8248F6 mov esi, 1001h jmp loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F8248F6: ; CODE XREF: sub_7F824835+B5j test byte ptr [ebp+arg_C], 1 jz short loc_7F82491D mov ecx, [ebp+var_4] add ecx, 10h mov ax, [ecx] test al, 8 jz short loc_7F824913 mov esi, 253h jmp loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F824913: ; CODE XREF: sub_7F824835+D2j or al, 8 mov edi, 1 mov [ecx], ax loc_7F82491D: ; CODE XREF: sub_7F824835+A2j ; sub_7F824835+C5j mov eax, [ebp+var_4] test byte ptr [eax+10h], 10h jz short loc_7F82492F push eax call sub_7F81470D mov [ebp+var_4], eax loc_7F82492F: ; CODE XREF: sub_7F824835+EFj push 10h push 0Eh call sub_7F82F18D mov ecx, [ebp+arg_4] test eax, eax mov [ecx], eax jnz short loc_7F82494B mov esi, 400h jmp loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F82494B: ; CODE XREF: sub_7F824835+10Aj mov ecx, [eax] mov edx, [ebp+arg_0] mov ax, [ebp+arg_C] push 1 mov [ecx], ax mov [ebp+var_C], ecx mov eax, [ebp+arg_8] mov [ecx+0Ah], edx push dword ptr [eax] push edx call sub_7F81155C mov [ebp+var_8], eax test eax, eax jz short loc_7F824988 test byte ptr [ebp+arg_C], 2 jz short loc_7F824981 mov esi, 253h jmp loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F824981: ; CODE XREF: sub_7F824835+140j mov eax, [ebp+var_8] mov ebx, [eax] jmp short loc_7F8249D7 ; --------------------------------------------------------------------------- loc_7F824988: ; CODE XREF: sub_7F824835+13Aj push 30h push 4Ch call sub_7F82F18D mov [ebp+var_8], eax test eax, eax jnz short loc_7F8249A2 mov esi, 400h jmp loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F8249A2: ; CODE XREF: sub_7F824835+161j mov eax, [ebp+var_8] test byte ptr [ebp+arg_C], 2 mov ebx, [eax] jz short loc_7F8249B8 mov eax, [ebp+arg_10] mov [ebx+0Ch], eax mov [ebx+10h], eax jmp short loc_7F8249C9 ; --------------------------------------------------------------------------- loc_7F8249B8: ; CODE XREF: sub_7F824835+176j mov eax, [ebp+var_4] mov eax, [eax+14h] and eax, 7FFFFFFFh mov [ebx+10h], eax mov [ebx+0Ch], eax loc_7F8249C9: ; CODE XREF: sub_7F824835+181j mov eax, [ebp+arg_8] mov [ebp+var_14], 1 mov ecx, [eax] mov [ebx], ecx loc_7F8249D7: ; CODE XREF: sub_7F824835+151j mov ax, [ebp+arg_C] and ax, 8001h cmp ax, 1 jnz short loc_7F824A16 mov eax, [ebx+0Ch] push 30h shr eax, 0Dh add ax, 5 mov [ebx+6], ax movzx eax, ax shl eax, 2 push eax call sub_7F82F03B mov [ebx+8], eax test eax, eax jnz short loc_7F824A0F mov esi, 400h jmp short loc_7F824A30 ; --------------------------------------------------------------------------- loc_7F824A0F: ; CODE XREF: sub_7F824835+1D1j mov [ebp+var_10], 1 loc_7F824A16: ; CODE XREF: sub_7F824835+1AEj cmp [ebp+var_14], 0 jz short loc_7F824A30 mov ecx, [ebp+arg_8] push [ebp+var_8] push 1 push dword ptr [ecx] push [ebp+arg_0] call sub_7F811597 mov esi, eax loc_7F824A30: ; CODE XREF: sub_7F824835+BCj ; sub_7F824835+D9j ... test esi, esi jz short loc_7F824AAF loc_7F824A34: ; CODE XREF: sub_7F824835+8Cj cmp [ebp+var_4], 0 jz short loc_7F824A5D test edi, edi jz short loc_7F824A47 mov eax, [ebp+var_4] and word ptr [eax+10h], 0FFF7h loc_7F824A47: ; CODE XREF: sub_7F824835+207j test byte ptr [ebp+arg_C], 2 jz short loc_7F824A5D cmp esi, 100Ah jz short loc_7F824A5D push [ebp+var_4] call sub_7F8147DD loc_7F824A5D: ; CODE XREF: sub_7F824835+203j ; sub_7F824835+216j ... xor edi, edi test ebx, ebx jz short loc_7F824A97 cmp [ebp+var_10], edi jz short loc_7F824A77 push dword ptr [ebx+8] call sub_7F82F149 mov [ebx+8], edi mov [ebx+6], di loc_7F824A77: ; CODE XREF: sub_7F824835+231j cmp word ptr [ebx+4], 0 jg short loc_7F824A97 push [ebp+var_8] call sub_7F82F1E1 push 0 mov eax, [ebp+arg_8] push 1 push dword ptr [eax] push [ebp+arg_0] call sub_7F811597 loc_7F824A97: ; CODE XREF: sub_7F824835+22Cj ; sub_7F824835+247j mov ecx, [ebp+arg_4] xor edi, edi mov eax, [ecx] test eax, eax jz short loc_7F824ABC push eax call sub_7F82F1E1 mov ecx, [ebp+arg_4] mov [ecx], edi jmp short loc_7F824ABC ; --------------------------------------------------------------------------- loc_7F824AAF: ; CODE XREF: sub_7F824835+1FDj mov ecx, [ebp+var_C] mov eax, [ebp+var_8] mov [ecx+6], eax inc word ptr [ebx+4] loc_7F824ABC: ; CODE XREF: sub_7F824835+26Bj ; sub_7F824835+278j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F824AD2 call sub_7F82A34F jmp short loc_7F824AE0 ; --------------------------------------------------------------------------- loc_7F824AD2: ; CODE XREF: sub_7F824835+294j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F824AE0: ; CODE XREF: sub_7F824835+29Bj mov dword_7F838078, 0 loc_7F824AEA: ; CODE XREF: sub_7F824835+6Dj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F824835 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824AF5 proc near ; CODE XREF: sub_7F8178D8+39Bp ; sub_7F8178D8+3BFp ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 8 push ebx mov eax, [ebp+arg_0] push esi push edi xor esi, esi mov ecx, [eax] mov [ebp+var_8], esi mov edi, [ecx] mov eax, [edi+6] mov ebx, [eax] xor eax, eax mov ax, [edi] and eax, 1 mov [ebp+var_4], eax cmp eax, esi jz short loc_7F824B8F cmp dword_7F838078, esi jz short loc_7F824B2D mov esi, 253h jmp short loc_7F824B5D ; --------------------------------------------------------------------------- loc_7F824B2D: ; CODE XREF: sub_7F824AF5+2Fj mov eax, [edi+0Ah] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [edi+0Ah] mov dword_7F83807C, edx loc_7F824B5D: ; CODE XREF: sub_7F824AF5+36j test esi, esi jnz loc_7F824C04 mov [ebp+var_8], 1 test byte ptr [edi+1], 80h jnz short loc_7F824B7C push [ebp+arg_4] push ebx push edi call sub_7F824C43 loc_7F824B7C: ; CODE XREF: sub_7F824AF5+7Bj push 0 push dword ptr [ebx] call sub_7F8144A4 test eax, eax jz short loc_7F824B8F and word ptr [eax+10h], 0FFF7h loc_7F824B8F: ; CODE XREF: sub_7F824AF5+27j ; sub_7F824AF5+92j test esi, esi jnz short loc_7F824C04 mov ax, [ebx+4] dec ax mov [ebx+4], ax test ax, ax jle short loc_7F824BAE cmp [ebp+var_4], 0 jz short loc_7F824BD4 test byte ptr [edi+1], 80h jnz short loc_7F824BB4 loc_7F824BAE: ; CODE XREF: sub_7F824AF5+ABj push ebx call sub_7F82473E loc_7F824BB4: ; CODE XREF: sub_7F824AF5+B7j cmp [ebp+var_4], 0 jz short loc_7F824BD4 mov eax, [ebx+8] test eax, eax jz short loc_7F824BD4 push eax call sub_7F82F149 mov dword ptr [ebx+8], 0 mov word ptr [ebx+6], 0 loc_7F824BD4: ; CODE XREF: sub_7F824AF5+B1j ; sub_7F824AF5+C3j ... cmp word ptr [ebx+4], 0 jg short loc_7F824BF1 push 0 push 1 push dword ptr [ebx] push dword ptr [edi+0Ah] call sub_7F811597 push dword ptr [edi+6] call sub_7F82F1E1 loc_7F824BF1: ; CODE XREF: sub_7F824AF5+E4j mov eax, [ebp+arg_0] push dword ptr [eax] call sub_7F82F1E1 mov edx, [ebp+arg_0] mov dword ptr [edx], 0 loc_7F824C04: ; CODE XREF: sub_7F824AF5+6Aj ; sub_7F824AF5+9Cj cmp [ebp+var_8], 0 jz short loc_7F824C38 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F824C20 call sub_7F82A34F jmp short loc_7F824C2E ; --------------------------------------------------------------------------- loc_7F824C20: ; CODE XREF: sub_7F824AF5+122j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F824C2E: ; CODE XREF: sub_7F824AF5+129j mov dword_7F838078, 0 loc_7F824C38: ; CODE XREF: sub_7F824AF5+113j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F824AF5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824C43 proc near ; CODE XREF: sub_7F824AF5+82p var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h push ebp mov ebp, esp sub esp, 4 push ebx push esi mov [ebp+var_2], 1 push edi mov edi, [ebp+arg_4] mov si, [edi+6] mov ebx, [edi+8] test si, si mov eax, [edi+10h] mov [edi+0Ch], eax jz short loc_7F824C8B loc_7F824C67: ; CODE XREF: sub_7F824C43+46j mov eax, [ebx] test eax, eax jz short loc_7F824C7B push 0 push eax call sub_7F81479E mov dword ptr [ebx], 0 loc_7F824C7B: ; CODE XREF: sub_7F824C43+28j mov ax, [ebp+var_2] add ebx, 4 inc [ebp+var_2] cmp si, ax ja short loc_7F824C67 loc_7F824C8B: ; CODE XREF: sub_7F824C43+22j mov eax, [ebp+arg_0] test byte ptr [eax], 2 jz short loc_7F824CA2 test [ebp+arg_8], 2 jz short loc_7F824CA2 push 0 push dword ptr [edi] call sub_7F81479E loc_7F824CA2: ; CODE XREF: sub_7F824C43+4Ej ; sub_7F824C43+54j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F824C43 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824CAB proc near ; CODE XREF: sub_7F8178D8+1A9p ; sub_7F8178D8+22Fp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp push esi mov ecx, [ebp+arg_0] mov edx, [ebp+arg_8] mov ecx, [ecx] cmp [edx], eax jz loc_7F824D42 cmp dword_7F838078, eax mov eax, 253h jnz short loc_7F824CFD mov eax, [ecx+0Ah] mov esi, [eax] mov dword_7F83807C, esi mov ax, [esi+2Ch] mov word_7F838084, ax mov eax, [esi] mov dword_7F838078, eax mov eax, [esi+4] mov dword_7F838080, eax xor eax, eax mov esi, [ecx+0Ah] mov dword_7F83807C, esi loc_7F824CFD: ; CODE XREF: sub_7F824CAB+21j test eax, eax jnz short loc_7F824D42 push [ebp+arg_C] push edx push [ebp+arg_4] push ecx call sub_7F824D4D mov esi, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F824D26 call sub_7F82A34F jmp short loc_7F824D34 ; --------------------------------------------------------------------------- loc_7F824D26: ; CODE XREF: sub_7F824CAB+72j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F824D34: ; CODE XREF: sub_7F824CAB+79j mov dword_7F838078, 0 mov eax, esi jmp short loc_7F824D48 ; --------------------------------------------------------------------------- loc_7F824D42: ; CODE XREF: sub_7F824CAB+10j ; sub_7F824CAB+54j mov dword ptr [edx], 0 loc_7F824D48: ; CODE XREF: sub_7F824CAB+95j pop esi pop ebp retn 10h sub_7F824CAB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F824D4D proc near ; CODE XREF: sub_7F824CAB+5Ep ; sub_7F8255B9+F5p ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = dword ptr -2 arg_0 = dword ptr 8 lpBuffer = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, [ebp+arg_0] mov [ebp+var_C], 0 mov eax, [esi+6] test byte ptr [esi], 1 mov ecx, [eax] jz short loc_7F824D6F mov eax, [ecx+0Ch] jmp short loc_7F824D72 ; --------------------------------------------------------------------------- loc_7F824D6F: ; CODE XREF: sub_7F824D4D+1Bj mov eax, [ecx+10h] loc_7F824D72: ; CODE XREF: sub_7F824D4D+20j cmp [ebp+arg_C], 0FFFFFFFFh jnz short loc_7F824D7D mov ecx, [esi+2] jmp short loc_7F824D80 ; --------------------------------------------------------------------------- loc_7F824D7D: ; CODE XREF: sub_7F824D4D+29j mov ecx, [ebp+arg_C] loc_7F824D80: ; CODE XREF: sub_7F824D4D+2Ej sub eax, ecx mov edi, [ebp+arg_8] cmp [edi], eax jbe short loc_7F824D92 mov [ebp+var_C], 1002h mov [edi], eax loc_7F824D92: ; CODE XREF: sub_7F824D4D+3Aj mov ebx, [edi] mov eax, ecx shr eax, 0Dh and cx, 1FFFh movzx edx, cx mov word ptr [ebp+var_2], ax mov eax, 2000h sub eax, edx cmp eax, ebx jb short loc_7F824DB2 mov eax, ebx loc_7F824DB2: ; CODE XREF: sub_7F824D4D+61j lea edx, [ebp+var_8] mov [ebp+var_8], eax mov ax, word ptr [ebp+var_2] push edx ; int push [ebp+lpBuffer] ; lpBuffer push ecx ; __int16 inc word ptr [ebp+var_2] push eax ; int push esi ; int call sub_7F824E37 mov ecx, [ebp+lpBuffer] sub ebx, [ebp+var_8] mov edx, [ebp+var_8] lea ecx, [edx+ecx] mov [ebp+var_10], ecx jz short loc_7F824E18 loc_7F824DDD: ; CODE XREF: sub_7F824D4D+C9j test eax, eax jnz short loc_7F824E18 cmp ebx, 2000h mov eax, ebx jb short loc_7F824DF0 mov eax, 2000h loc_7F824DF0: ; CODE XREF: sub_7F824D4D+9Cj mov cx, word ptr [ebp+var_2] mov [ebp+var_8], eax inc word ptr [ebp+var_2] lea eax, [ebp+var_8] push eax ; int push [ebp+var_10] ; lpBuffer push 0 ; __int16 push ecx ; int push esi ; int call sub_7F824E37 sub ebx, [ebp+var_8] mov ecx, [ebp+var_8] add [ebp+var_10], ecx test ebx, ebx jnz short loc_7F824DDD loc_7F824E18: ; CODE XREF: sub_7F824D4D+8Ej ; sub_7F824D4D+92j mov ecx, [edi] sub ecx, ebx cmp [ebp+arg_C], 0FFFFFFFFh mov [edi], ecx jnz short loc_7F824E27 add [esi+2], ecx loc_7F824E27: ; CODE XREF: sub_7F824D4D+D5j test eax, eax jnz short loc_7F824E2E mov eax, [ebp+var_C] loc_7F824E2E: ; CODE XREF: sub_7F824D4D+DCj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F824D4D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F824E37(int, int, __int16, LPVOID lpBuffer, int) sub_7F824E37 proc near ; CODE XREF: sub_7F824D4D+7Ap ; sub_7F824D4D+B9p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h lpBuffer = dword ptr 14h arg_10 = dword ptr 18h push ebp movzx eax, word ptr [esp+arg_4] shl eax, 0Dh mov ebp, esp movzx ecx, [ebp+arg_8] sub esp, 0Ch add eax, ecx mov [ebp+var_8], eax push ebx push esi push edi xor esi, esi mov edi, [ebp+arg_0] mov ecx, [edi+6] test byte ptr [edi], 1 mov ebx, [ecx] jz short loc_7F824E65 mov eax, [ebx+0Ch] jmp short loc_7F824E68 ; --------------------------------------------------------------------------- loc_7F824E65: ; CODE XREF: sub_7F824E37+27j mov eax, [ebx+10h] loc_7F824E68: ; CODE XREF: sub_7F824E37+2Cj mov [ebp+var_4], eax mov eax, [ebp+var_4] cmp eax, [ebp+var_8] ja short loc_7F824E86 mov edi, [ebp+arg_10] mov esi, 1014h mov dword ptr [edi], 0 jmp loc_7F824F18 ; --------------------------------------------------------------------------- loc_7F824E86: ; CODE XREF: sub_7F824E37+3Aj push [ebp+arg_4] push edi call sub_7F824F23 mov [ebp+var_C], eax test eax, eax jnz short loc_7F824EE5 test byte ptr [edi], 40h jz short loc_7F824EC9 mov edi, [ebp+arg_10] mov eax, [edi] mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax ; int push [ebp+lpBuffer] ; lpBuffer push [ebp+var_8] ; int push dword ptr [ebx] ; int call sub_7F814DDF cmp eax, 1002h mov esi, eax jnz short loc_7F824EC2 mov esi, 1014h loc_7F824EC2: ; CODE XREF: sub_7F824E37+84j mov eax, [ebp+var_4] mov [edi], eax jmp short loc_7F824F18 ; --------------------------------------------------------------------------- loc_7F824EC9: ; CODE XREF: sub_7F824E37+62j lea eax, [ebp+var_C] push eax push [ebp+arg_4] push edi call sub_7F825007 mov esi, eax xor eax, eax test esi, esi jz short loc_7F824EE5 mov edi, [ebp+arg_10] mov [edi], eax jmp short loc_7F824F18 ; --------------------------------------------------------------------------- loc_7F824EE5: ; CODE XREF: sub_7F824E37+5Dj ; sub_7F824E37+A5j mov edi, [ebp+arg_10] mov eax, [edi] add eax, [ebp+var_8] cmp eax, [ebp+var_4] jbe short loc_7F824EFF mov esi, 1014h mov eax, [ebp+var_4] sub eax, [ebp+var_8] mov [edi], eax loc_7F824EFF: ; CODE XREF: sub_7F824E37+B9j push dword ptr [edi] mov ecx, [ebp+var_C] movzx edx, [ebp+arg_8] mov eax, [ecx] add eax, edx push eax push [ebp+lpBuffer] call sub_7F82FCE0 add esp, 0Ch loc_7F824F18: ; CODE XREF: sub_7F824E37+4Aj ; sub_7F824E37+90j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F824E37 endp ; =============== S U B R O U T I N E ======================================= sub_7F824F23 proc near ; CODE XREF: sub_7F824E37+53p ; sub_7F825462+12p ... var_8 = dword ptr -8 arg_0 = dword ptr 4 arg_4 = word ptr 8 sub esp, 8 push ebx push esi xor cx, cx push edi mov si, 0FFFFh push ebp mov ebx, [esp+18h+arg_0] xor edi, edi mov eax, [ebx+6] mov ebp, [eax] xor eax, eax lea edx, [ebp+14h] loc_7F824F41: ; CODE XREF: sub_7F824F23+61j cmp dword ptr [edx+3], 0 jz short loc_7F824F8C mov bx, [esp+18h+arg_4] cmp [edx+1], bx jnz short loc_7F824F7B xor ebx, ebx mov bl, [edx] and ebx, 2 mov [esp+18h+var_8], ebx mov ebx, [esp+18h+arg_0] test byte ptr [ebx], 1 jz short loc_7F824F74 cmp [esp+18h+var_8], 0 jnz short loc_7F824F88 mov si, cx mov edi, edx jmp short loc_7F824F7B ; --------------------------------------------------------------------------- loc_7F824F74: ; CODE XREF: sub_7F824F23+41j cmp [esp+18h+var_8], 0 jz short loc_7F824F8C loc_7F824F7B: ; CODE XREF: sub_7F824F23+2Dj ; sub_7F824F23+4Fj inc cx add edx, 7 cmp cx, 8 jl short loc_7F824F41 jmp short loc_7F824F8C ; --------------------------------------------------------------------------- loc_7F824F88: ; CODE XREF: sub_7F824F23+48j mov si, 0FFFFh loc_7F824F8C: ; CODE XREF: sub_7F824F23+22j ; sub_7F824F23+56j ... test si, si jl short loc_7F824FC2 mov edx, [ebp+8] test edx, edx jz short loc_7F824FB0 mov bx, [esp+18h+arg_4] cmp [ebp+6], bx jbe short loc_7F824FB0 movzx ecx, bx cmp dword ptr [edx+ecx*4], 0 jz short loc_7F824FB0 xor eax, eax jmp short loc_7F824FFD ; --------------------------------------------------------------------------- loc_7F824FB0: ; CODE XREF: sub_7F824F23+73j ; sub_7F824F23+7Ej ... mov ebx, [esp+18h+arg_0] mov cx, si mov edx, edi test byte ptr [ebx+1], 80h jnz short loc_7F824FC2 or byte ptr [edi], 2 loc_7F824FC2: ; CODE XREF: sub_7F824F23+6Cj ; sub_7F824F23+9Aj cmp cx, 8 jge short loc_7F824FFD cmp dword ptr [edx+3], 0 jz short loc_7F824FFD test cx, cx jz short loc_7F824FFA lea edi, [esp+18h+var_8] mov esi, edx movsd movsw movsb jle short loc_7F824FF0 loc_7F824FDF: ; CODE XREF: sub_7F824F23+CBj dec cx lea eax, [edx-7] mov edi, edx mov esi, eax movsd movsw movsb mov edx, eax jnz short loc_7F824FDF loc_7F824FF0: ; CODE XREF: sub_7F824F23+BAj lea esi, [esp+18h+var_8] mov edi, edx movsd movsw movsb loc_7F824FFA: ; CODE XREF: sub_7F824F23+AEj mov eax, [edx+3] loc_7F824FFD: ; CODE XREF: sub_7F824F23+8Bj ; sub_7F824F23+A3j ... pop ebp pop edi pop esi pop ebx add esp, 8 retn 8 sub_7F824F23 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825007 proc near ; CODE XREF: sub_7F824E37+9Ap ; sub_7F825462+2Bp ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx mov eax, [ebp+arg_0] push esi xor ebx, ebx push edi mov ecx, [eax+6] mov [ebp+var_C], 2000h mov edi, [ecx] mov [ebp+var_8], 0 cmp [edi+48h], ebx lea esi, [edi+45h] jz short loc_7F825067 test byte ptr [esi], 1 mov [ebp+var_2], 7 jz short loc_7F82504D push esi push eax call sub_7F8251BB mov [ebp+var_8], eax cmp eax, ebx jnz loc_7F825190 loc_7F82504D: ; CODE XREF: sub_7F825007+32j mov ebx, [esi+3] xor eax, eax mov [esi+3], eax mov [esi], al loc_7F825057: ; CODE XREF: sub_7F825007+95j mov eax, [ebp+arg_0] mov ax, [eax] test ah, 20h jz short loc_7F8250AA jmp loc_7F82512D ; --------------------------------------------------------------------------- loc_7F825067: ; CODE XREF: sub_7F825007+27j sub esi, 31h cmp dword ptr [esi+3], 0 jz short loc_7F825079 loc_7F825070: ; CODE XREF: sub_7F825007+70j add esi, 7 cmp dword ptr [esi+3], 0 jnz short loc_7F825070 loc_7F825079: ; CODE XREF: sub_7F825007+67j mov eax, esi mov ecx, 7 sub eax, edi push 20h sub eax, 14h push 2000h cdq idiv ecx mov [ebp+var_2], ax call sub_7F82F18D mov ebx, eax test ebx, ebx jnz short loc_7F825057 mov [ebp+var_8], 400h jmp loc_7F825190 ; --------------------------------------------------------------------------- loc_7F8250AA: ; CODE XREF: sub_7F825007+59j test al, 1 jz short loc_7F8250DC mov ecx, [edi+8] test ecx, ecx jz short loc_7F8250DC mov ax, [ebp+arg_4] cmp [edi+6], ax jbe short loc_7F8250DC movzx eax, ax mov ecx, [ecx+eax*4] test ecx, ecx jz short loc_7F8250DC lea eax, [ebp+var_C] push eax ; int push dword ptr [ebx] ; lpBuffer push 0FFFFFFF8h ; int push ecx ; int call sub_7F814DDF mov [ebp+var_8], eax jmp short loc_7F825138 ; --------------------------------------------------------------------------- loc_7F8250DC: ; CODE XREF: sub_7F825007+A5j ; sub_7F825007+ACj ... movzx ecx, [ebp+arg_4] shl ecx, 0Dh mov eax, [edi+10h] cmp ecx, eax jnb short loc_7F82512D mov edx, [ebp+var_C] add edx, ecx cmp edx, eax jbe short loc_7F8250F8 sub eax, ecx mov [ebp+var_C], eax loc_7F8250F8: ; CODE XREF: sub_7F825007+EAj lea eax, [ebp+var_C] push eax ; int push dword ptr [ebx] ; lpBuffer push ecx ; int push dword ptr [edi] ; int call sub_7F814DDF mov edx, 2000h mov [ebp+var_8], eax cmp [ebp+var_C], edx jz short loc_7F825138 sub edx, [ebp+var_C] mov edi, [ebx] add edi, [ebp+var_C] xor eax, eax mov ecx, edx shr ecx, 2 rep stosd mov ecx, edx and ecx, 3 rep stosb jmp short loc_7F825138 ; --------------------------------------------------------------------------- loc_7F82512D: ; CODE XREF: sub_7F825007+5Bj ; sub_7F825007+E1j mov edi, [ebx] xor eax, eax mov ecx, 800h rep stosd loc_7F825138: ; CODE XREF: sub_7F825007+D3j ; sub_7F825007+10Aj ... cmp [ebp+var_8], 1002h jnz short loc_7F82514A mov [ebp+var_8], 0 jmp short loc_7F825150 ; --------------------------------------------------------------------------- loc_7F82514A: ; CODE XREF: sub_7F825007+138j cmp [ebp+var_8], 0 jnz short loc_7F825196 loc_7F825150: ; CODE XREF: sub_7F825007+141j cmp [ebp+var_2], 0 jle short loc_7F82516A loc_7F825157: ; CODE XREF: sub_7F825007+161j lea eax, [esi-7] mov edi, esi mov esi, eax movsd movsw movsb dec [ebp+var_2] mov esi, eax jnz short loc_7F825157 loc_7F82516A: ; CODE XREF: sub_7F825007+14Ej mov ax, [ebp+arg_4] mov ecx, [ebp+arg_0] mov [esi+3], ebx mov [esi+1], ax mov ax, [ecx] and ax, 8001h mov byte ptr [esi], 2 cmp ax, 1 jz short loc_7F82518B mov byte ptr [esi], 0 loc_7F82518B: ; CODE XREF: sub_7F825007+17Fj mov ecx, [ebp+arg_8] mov [ecx], ebx loc_7F825190: ; CODE XREF: sub_7F825007+40j ; sub_7F825007+9Ej cmp [ebp+var_8], 0 jz short loc_7F8251AF loc_7F825196: ; CODE XREF: sub_7F825007+147j test ebx, ebx jz short loc_7F8251A6 cmp dword ptr [esi+3], 0 jnz short loc_7F8251A6 push ebx call sub_7F82F1E1 loc_7F8251A6: ; CODE XREF: sub_7F825007+191j ; sub_7F825007+197j mov ecx, [ebp+arg_8] mov dword ptr [ecx], 0 loc_7F8251AF: ; CODE XREF: sub_7F825007+18Dj mov eax, [ebp+var_8] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F825007 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8251BB proc near ; CODE XREF: sub_7F825007+36p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 8 mov ecx, [eax+6] push ebx push esi mov ebx, [ebp+arg_4] mov si, [ebx+1] push edi mov edi, [ecx] cmp [edi+6], si ja short loc_7F825204 movzx eax, si push 30h lea ecx, ds:14h[eax*4] push ecx push dword ptr [edi+8] call sub_7F82F0CD test eax, eax jnz short loc_7F8251FA mov eax, 400h jmp short loc_7F82526F ; --------------------------------------------------------------------------- loc_7F8251FA: ; CODE XREF: sub_7F8251BB+36j mov [edi+8], eax lea eax, [esi+5] mov [edi+6], ax loc_7F825204: ; CODE XREF: sub_7F8251BB+1Dj movzx eax, si mov ecx, [edi+8] lea esi, ds:0[eax*4] mov eax, [ecx+esi] mov [ebp+var_4], eax test eax, eax jz short loc_7F825231 push 2000h ; nNumberOfBytesToRead mov eax, [ebx+3] push dword ptr [eax] ; int push 0FFFFFFF8h ; int push [ebp+var_4] ; int call sub_7F814B43 jmp short loc_7F82526F ; --------------------------------------------------------------------------- loc_7F825231: ; CODE XREF: sub_7F8251BB+5Ej lea eax, [ebp+var_8] lea ecx, [ebp+var_4] mov [ebp+var_4], 8Eh push eax push 1FF8h push ecx call sub_7F812FC1 test eax, eax jnz short loc_7F82526F push 2000h ; nNumberOfBytesToRead mov eax, [ebx+3] push dword ptr [eax] ; int push 0FFFFFFF8h ; int push [ebp+var_8] ; int call sub_7F814D6E test eax, eax jnz short loc_7F82526F mov edx, [ebp+var_4] mov ecx, [edi+8] mov [ecx+esi], edx loc_7F82526F: ; CODE XREF: sub_7F8251BB+3Dj ; sub_7F8251BB+74j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8251BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825278 proc near ; CODE XREF: sub_7F8178D8+1D2p ; sub_7F8178D8+254p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch nNumberOfBytesToRead= dword ptr 10h arg_C = dword ptr 14h push ebp mov ecx, [esp+nNumberOfBytesToRead] mov ebp, esp test ecx, ecx push esi jnz short loc_7F82528B xor eax, eax jmp loc_7F82531C ; --------------------------------------------------------------------------- loc_7F82528B: ; CODE XREF: sub_7F825278+Aj mov eax, [ebp+arg_0] mov edx, [eax] test byte ptr [edx], 1 jnz short loc_7F82529C mov esi, 203h jmp short loc_7F82531A ; --------------------------------------------------------------------------- loc_7F82529C: ; CODE XREF: sub_7F825278+1Bj cmp dword_7F838078, 0 mov esi, 253h jnz short loc_7F8252D9 mov eax, [edx+0Ah] mov esi, [eax] mov dword_7F83807C, esi mov ax, [esi+2Ch] mov word_7F838084, ax mov eax, [esi] mov dword_7F838078, eax mov eax, [esi+4] mov dword_7F838080, eax mov esi, [edx+0Ah] mov dword_7F83807C, esi xor esi, esi loc_7F8252D9: ; CODE XREF: sub_7F825278+30j test esi, esi jnz short loc_7F82531A push [ebp+arg_C] ; int push ecx ; nNumberOfBytesToRead push [ebp+arg_4] ; int push edx ; int call sub_7F825321 mov esi, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F825302 call sub_7F82A34F jmp short loc_7F825310 ; --------------------------------------------------------------------------- loc_7F825302: ; CODE XREF: sub_7F825278+81j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F825310: ; CODE XREF: sub_7F825278+88j mov dword_7F838078, 0 loc_7F82531A: ; CODE XREF: sub_7F825278+22j ; sub_7F825278+63j mov eax, esi loc_7F82531C: ; CODE XREF: sub_7F825278+Ej pop esi pop ebp retn 10h sub_7F825278 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F825321(int, int, DWORD nNumberOfBytesToRead, int) sub_7F825321 proc near ; CODE XREF: sub_7F825278+6Dp ; sub_7F8255B9+118p var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch nNumberOfBytesToRead= dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp sub esp, 8 cmp [ebp+arg_C], 0FFFFFFFFh push ebx push esi push edi jnz short loc_7F82533A mov ecx, [ebp+arg_0] mov edi, [ecx+2] jmp short loc_7F82533D ; --------------------------------------------------------------------------- loc_7F82533A: ; CODE XREF: sub_7F825321+Fj mov edi, [ebp+arg_C] loc_7F82533D: ; CODE XREF: sub_7F825321+17j mov esi, [ebp+arg_4] mov ecx, [ebp+arg_0] test byte ptr [ecx+1], 80h jz short loc_7F82539E mov edx, [ecx+6] mov ebx, [ebp+nNumberOfBytesToRead] add ebx, [ebp+arg_C] mov ecx, [edx] mov edx, [ecx+10h] add edx, 87h and dl, 80h cmp ebx, edx jbe loc_7F825451 cmp [ebp+arg_C], edx jnb loc_7F825448 sub edx, [ebp+arg_C] mov [ebp+nNumberOfBytesToRead], edx loc_7F825377: ; CODE XREF: sub_7F825321+134j push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push esi ; int push [ebp+arg_C] ; int push dword ptr [ecx] ; int call sub_7F814B43 test eax, eax jnz loc_7F825448 cmp [ebp+arg_C], 0 jge short loc_7F82539E movsx eax, word ptr [ebp+arg_C] sub esi, eax xor edi, edi add [ebp+nNumberOfBytesToRead], eax loc_7F82539E: ; CODE XREF: sub_7F825321+26j ; sub_7F825321+70j mov eax, edi mov ecx, edi and cx, 1FFFh mov edx, 2000h shr eax, 0Dh mov [ebp+var_2], ax movzx eax, cx sub edx, eax mov eax, [ebp+nNumberOfBytesToRead] cmp edx, eax jb short loc_7F8253C1 mov edx, eax loc_7F8253C1: ; CODE XREF: sub_7F825321+9Cj mov ax, [ebp+var_2] mov [ebp+var_8], edx inc [ebp+var_2] lea edx, [ebp+var_8] push edx push esi push ecx push eax push [ebp+arg_0] call sub_7F825462 test eax, eax jnz short loc_7F825448 mov ebx, [ebp+nNumberOfBytesToRead] add esi, [ebp+var_8] sub ebx, [ebp+var_8] test ebx, ebx jz short loc_7F825424 loc_7F8253EC: ; CODE XREF: sub_7F825321+101j cmp ebx, 2000h mov eax, ebx jb short loc_7F8253FB mov eax, 2000h loc_7F8253FB: ; CODE XREF: sub_7F825321+D3j lea ecx, [ebp+var_8] mov [ebp+var_8], eax mov ax, [ebp+var_2] push ecx inc [ebp+var_2] push esi push 0 push eax push [ebp+arg_0] call sub_7F825462 test eax, eax jnz short loc_7F825448 sub ebx, [ebp+var_8] add esi, [ebp+var_8] test ebx, ebx jnz short loc_7F8253EC loc_7F825424: ; CODE XREF: sub_7F825321+C9j mov ecx, [ebp+arg_0] sub [ebp+nNumberOfBytesToRead], ebx mov esi, [ecx+6] cmp [ebp+arg_C], 0FFFFFFFFh mov edx, [esi] jnz short loc_7F82543B mov esi, [ebp+nNumberOfBytesToRead] add [ecx+2], esi loc_7F82543B: ; CODE XREF: sub_7F825321+112j mov ecx, [ebp+nNumberOfBytesToRead] add ecx, edi cmp [edx+0Ch], ecx jnb short loc_7F825448 mov [edx+0Ch], ecx loc_7F825448: ; CODE XREF: sub_7F825321+4Aj ; sub_7F825321+66j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F825451: ; CODE XREF: sub_7F825321+41j cmp [ebp+arg_C], 0FFFFFFF8h jge loc_7F825377 mov eax, 400h jmp short loc_7F825448 sub_7F825321 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825462 proc near ; CODE XREF: sub_7F825321+B5p ; sub_7F825321+F0p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [ebp+arg_0] push [ebp+arg_4] push esi xor edi, edi call sub_7F824F23 mov [ebp+var_4], eax cmp eax, edi jnz short loc_7F825498 test byte ptr [esi], 40h jnz short loc_7F8254C1 lea eax, [ebp+var_4] push eax push [ebp+arg_4] push esi call sub_7F825007 mov edi, eax test edi, edi jnz short loc_7F8254C1 loc_7F825498: ; CODE XREF: sub_7F825462+1Cj mov eax, [esi+6] mov ecx, [ebp+arg_10] push dword ptr [ecx] mov ebx, [eax] mov ecx, [ebp+var_4] push [ebp+arg_C] movzx eax, [ebp+arg_8] add eax, [ecx] push eax call sub_7F82FCE0 add esp, 0Ch test byte ptr [esi+1], 80h jnz short loc_7F8254C1 or byte ptr [ebx+14h], 1 loc_7F8254C1: ; CODE XREF: sub_7F825462+21j ; sub_7F825462+34j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F825462 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8254CC proc near ; CODE XREF: sub_7F818816+11Cp ; sub_7F819F06+65p arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h push ebp xor eax, eax mov ebp, esp push ebx push esi push edi mov ecx, [ebp+arg_0] mov edx, [ecx] mov ecx, [edx+6] test byte ptr [edx], 1 mov ebx, [ecx] jz short loc_7F8254E8 mov edi, [ebx+0Ch] jmp short loc_7F8254EB ; --------------------------------------------------------------------------- loc_7F8254E8: ; CODE XREF: sub_7F8254CC+15j mov edi, [ebx+10h] loc_7F8254EB: ; CODE XREF: sub_7F8254CC+1Aj movsx ecx, [ebp+arg_4] cmp ecx, 1 jz short loc_7F825510 cmp ecx, 2 jz short loc_7F82551A cmp ecx, 3 jz short loc_7F825524 mov esi, [ebp+arg_8] loc_7F825501: ; CODE XREF: sub_7F8254CC+4Cj ; sub_7F8254CC+56j ... add edx, 2 xor ebx, ebx mov ecx, [edx] test ecx, ecx jge short loc_7F825530 mov [edx], ebx jmp short loc_7F82553B ; --------------------------------------------------------------------------- loc_7F825510: ; CODE XREF: sub_7F8254CC+26j mov esi, [ebp+arg_8] mov ecx, [esi] mov [edx+2], ecx jmp short loc_7F825501 ; --------------------------------------------------------------------------- loc_7F82551A: ; CODE XREF: sub_7F8254CC+2Bj mov esi, [ebp+arg_8] mov ecx, [esi] add [edx+2], ecx jmp short loc_7F825501 ; --------------------------------------------------------------------------- loc_7F825524: ; CODE XREF: sub_7F8254CC+30j mov ecx, edi mov esi, [ebp+arg_8] sub ecx, [esi] mov [edx+2], ecx jmp short loc_7F825501 ; --------------------------------------------------------------------------- loc_7F825530: ; CODE XREF: sub_7F8254CC+3Ej cmp edi, ecx jnb short loc_7F82553B mov eax, 1002h mov [edx], edi loc_7F82553B: ; CODE XREF: sub_7F8254CC+42j ; sub_7F8254CC+66j mov ecx, [edx] pop edi mov [esi], ecx pop esi pop ebx pop ebp retn 0Ch sub_7F8254CC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825546 proc near ; CODE XREF: sub_7F818816+129p ; sub_7F8189C2+75p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp xor eax, eax mov ebp, esp mov ecx, [esp+arg_0] mov ecx, [ecx] mov edx, [ecx+6] mov cx, [ecx] mov edx, [edx] test ch, 80h jz short loc_7F825565 mov eax, 1015h jmp short loc_7F82559A ; --------------------------------------------------------------------------- loc_7F825565: ; CODE XREF: sub_7F825546+16j test cl, 1 jnz short loc_7F825571 mov eax, 203h jmp short loc_7F82559A ; --------------------------------------------------------------------------- loc_7F825571: ; CODE XREF: sub_7F825546+22j mov ecx, [ebp+arg_8] test ecx, ecx jz short loc_7F825584 cmp ecx, 1 jz short loc_7F82558C cmp ecx, 2 jz short loc_7F825594 jmp short loc_7F82559A ; --------------------------------------------------------------------------- loc_7F825584: ; CODE XREF: sub_7F825546+30j mov ecx, [ebp+arg_4] mov [edx+0Ch], ecx jmp short loc_7F82559A ; --------------------------------------------------------------------------- loc_7F82558C: ; CODE XREF: sub_7F825546+35j mov ecx, [ebp+arg_4] add [edx+0Ch], ecx jmp short loc_7F82559A ; --------------------------------------------------------------------------- loc_7F825594: ; CODE XREF: sub_7F825546+3Aj mov ecx, [ebp+arg_4] sub [edx+0Ch], ecx loc_7F82559A: ; CODE XREF: sub_7F825546+1Dj ; sub_7F825546+29j ... pop ebp retn 0Ch sub_7F825546 endp ; =============== S U B R O U T I N E ======================================= sub_7F82559E proc near ; CODE XREF: sub_7F817CD4+39p ; sub_7F8189C2+63p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, [eax] mov edx, [ecx+6] test byte ptr [ecx], 1 mov eax, [edx] jz short loc_7F8255B3 mov eax, [eax+0Ch] jmp short locret_7F8255B6 ; --------------------------------------------------------------------------- loc_7F8255B3: ; CODE XREF: sub_7F82559E+Ej mov eax, [eax+10h] locret_7F8255B6: ; CODE XREF: sub_7F82559E+13j retn 4 sub_7F82559E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8255B9 proc near ; CODE XREF: sub_7F818786+65p var_14 = dword ptr -14h var_10 = dword ptr -10h nNumberOfBytesToRead= dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ecx, [esp+arg_10] mov ebp, esp sub esp, 14h push ebx mov eax, [ebp+arg_0] mov [ebp+var_10], 0 push esi mov ebx, [eax] push edi mov edi, [ecx] mov ecx, [ebp+arg_8] mov eax, [ecx] mov ecx, edi mov [ebp+var_14], eax mov eax, 0C000h cmp ecx, eax jb short loc_7F8255E9 mov ecx, eax loc_7F8255E9: ; CODE XREF: sub_7F8255B9+2Cj push 0 mov [ebp+var_8], ecx push ecx call sub_7F82F03B mov [ebp+var_4], eax test eax, eax jnz short loc_7F825643 mov ecx, edi mov eax, 2000h cmp ecx, eax jb short loc_7F825608 mov ecx, eax loc_7F825608: ; CODE XREF: sub_7F8255B9+4Bj push 0 mov [ebp+var_8], ecx push ecx call sub_7F82F03B mov [ebp+var_4], eax test eax, eax jnz short loc_7F825643 mov ecx, edi mov eax, 400h cmp ecx, eax jb short loc_7F825627 mov ecx, eax loc_7F825627: ; CODE XREF: sub_7F8255B9+6Aj push 0 mov [ebp+var_8], ecx push ecx call sub_7F82F03B mov [ebp+var_4], eax test eax, eax jnz short loc_7F825643 mov esi, 400h jmp loc_7F82571A ; --------------------------------------------------------------------------- loc_7F825643: ; CODE XREF: sub_7F8255B9+40j ; sub_7F8255B9+5Fj ... cmp dword_7F838078, 0 jz short loc_7F825653 mov esi, 253h jmp short loc_7F825683 ; --------------------------------------------------------------------------- loc_7F825653: ; CODE XREF: sub_7F8255B9+91j mov eax, [ebx+0Ah] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [ebx+0Ah] mov dword_7F83807C, edx loc_7F825683: ; CODE XREF: sub_7F8255B9+98j test esi, esi jnz loc_7F82571A test edi, edi jz short loc_7F8256EC loc_7F82568F: ; CODE XREF: sub_7F8255B9+131j cmp [ebp+var_10], 0 jnz short loc_7F8256EC mov eax, edi mov ecx, [ebp+var_8] cmp eax, ecx jb short loc_7F8256A0 mov eax, ecx loc_7F8256A0: ; CODE XREF: sub_7F8255B9+E3j lea ecx, [ebp+nNumberOfBytesToRead] mov [ebp+nNumberOfBytesToRead], eax push [ebp+arg_4] push ecx push [ebp+var_4] push ebx call sub_7F824D4D cmp eax, 1002h mov esi, eax jnz short loc_7F8256C1 mov [ebp+var_10], esi jmp short loc_7F8256C5 ; --------------------------------------------------------------------------- loc_7F8256C1: ; CODE XREF: sub_7F8255B9+101j test esi, esi jnz short loc_7F8256EC loc_7F8256C5: ; CODE XREF: sub_7F8255B9+106j push [ebp+arg_C] ; int push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+var_4] ; int push [ebp+var_14] ; int call sub_7F825321 mov esi, eax test esi, esi jnz short loc_7F8256EC sub edi, [ebp+nNumberOfBytesToRead] mov eax, [ebp+nNumberOfBytesToRead] add [ebp+arg_4], eax add [ebp+arg_C], eax test edi, edi jnz short loc_7F82568F loc_7F8256EC: ; CODE XREF: sub_7F8255B9+D4j ; sub_7F8255B9+DAj ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F825702 call sub_7F82A34F jmp short loc_7F825710 ; --------------------------------------------------------------------------- loc_7F825702: ; CODE XREF: sub_7F8255B9+140j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F825710: ; CODE XREF: sub_7F8255B9+147j mov dword_7F838078, 0 loc_7F82571A: ; CODE XREF: sub_7F8255B9+85j ; sub_7F8255B9+CCj mov eax, [ebp+arg_10] sub [eax], edi cmp [ebp+var_4], 0 jz short loc_7F82572D push [ebp+var_4] call sub_7F82F149 loc_7F82572D: ; CODE XREF: sub_7F8255B9+16Aj mov eax, esi test esi, esi jnz short loc_7F825736 mov eax, [ebp+var_10] loc_7F825736: ; CODE XREF: sub_7F8255B9+178j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8255B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82573F proc near ; CODE XREF: sub_7F8190B0+5Ep ; sub_7F8190B0+A3p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h cmp dword_7F838078, 0 push ebp mov eax, [esp+arg_0] mov ebp, esp push esi mov ecx, [eax] jz short loc_7F825759 mov esi, 253h jmp short loc_7F825789 ; --------------------------------------------------------------------------- loc_7F825759: ; CODE XREF: sub_7F82573F+11j mov eax, [ecx+0Ah] mov edx, [eax] mov dword_7F83807C, edx mov ax, [edx+2Ch] mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov esi, [ecx+0Ah] mov dword_7F83807C, esi xor esi, esi loc_7F825789: ; CODE XREF: sub_7F82573F+18j test esi, esi jnz short loc_7F8257CD push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push ecx call sub_7F8257D4 mov esi, eax mov ecx, dword_7F838078 cmp word ptr [ecx+254h], 0 jz short loc_7F8257B5 call sub_7F82A34F jmp short loc_7F8257C3 ; --------------------------------------------------------------------------- loc_7F8257B5: ; CODE XREF: sub_7F82573F+6Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8257C3: ; CODE XREF: sub_7F82573F+74j mov dword_7F838078, 0 loc_7F8257CD: ; CODE XREF: sub_7F82573F+4Cj mov eax, esi pop esi pop ebp retn 10h sub_7F82573F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8257D4 proc near ; CODE XREF: sub_7F82573F+58p ; sub_7F8258A3+74p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = byte ptr 14h push ebp mov ecx, [esp+arg_4] mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [ecx] mov eax, esi mov ebx, [ebp+arg_0] shr eax, 0Dh mov word ptr [ebp+var_4], ax mov eax, esi and ax, 1FFFh mov word ptr [ebp+var_4+2], ax mov eax, [ebx+6] test byte ptr [ebx], 1 mov ecx, [eax] jz short loc_7F825808 mov edi, [ecx+0Ch] jmp short loc_7F82580B ; --------------------------------------------------------------------------- loc_7F825808: ; CODE XREF: sub_7F8257D4+2Dj mov edi, [ecx+10h] loc_7F82580B: ; CODE XREF: sub_7F8257D4+32j sub edi, esi mov eax, [ebp+arg_8] cmp edi, eax jb short loc_7F825816 mov edi, eax loc_7F825816: ; CODE XREF: sub_7F8257D4+3Ej ; sub_7F8257D4+AAj push [ebp+var_4] push ebx call sub_7F824F23 mov [ebp+var_8], eax test eax, eax mov eax, 0 jnz short loc_7F825838 lea eax, [ebp+var_8] push eax push [ebp+var_4] push ebx call sub_7F825007 loc_7F825838: ; CODE XREF: sub_7F8257D4+55j test eax, eax jnz short loc_7F825895 mov edx, [ebp+var_8] movzx ecx, word ptr [ebp+var_4+2] add ecx, [edx] mov [ebp+var_C], ecx loc_7F825848: ; CODE XREF: sub_7F8257D4+92j mov ecx, edi dec edi test ecx, ecx jle short loc_7F825868 mov edx, [ebp+var_C] mov cl, [ebp+arg_C] inc [ebp+var_C] cmp [edx], cl jz short loc_7F825868 inc word ptr [ebp+var_4+2] cmp word ptr [ebp+var_4+2], 2000h jb short loc_7F825848 loc_7F825868: ; CODE XREF: sub_7F8257D4+79j ; sub_7F8257D4+86j test edi, edi jl short loc_7F825880 cmp word ptr [ebp+var_4+2], 2000h jb short loc_7F825887 mov word ptr [ebp+var_4+2], 0 inc word ptr [ebp+var_4] jmp short loc_7F825816 ; --------------------------------------------------------------------------- loc_7F825880: ; CODE XREF: sub_7F8257D4+96j mov esi, 0FFFFFFFFh jmp short loc_7F825895 ; --------------------------------------------------------------------------- loc_7F825887: ; CODE XREF: sub_7F8257D4+9Ej movzx edx, word ptr [ebp+var_4] shl edx, 0Dh movzx ecx, word ptr [ebp+var_4+2] lea esi, [edx+ecx] loc_7F825895: ; CODE XREF: sub_7F8257D4+66j ; sub_7F8257D4+B1j mov ecx, [ebp+arg_4] pop edi mov [ecx], esi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F8257D4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8258A3 proc near ; CODE XREF: sub_7F81917E+AFp var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h lpString1 = dword ptr -0Ch lpString2 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 1Ch push ebx mov ecx, [ebp+arg_8] push esi push edi mov edi, [eax] mov ebx, [ecx] xor eax, eax mov [ebp+var_14], eax mov [ebp+var_10], eax mov [ebp+lpString1], eax mov [ebp+lpString2], eax cmp dword_7F838078, eax jz short loc_7F8258D4 mov esi, 253h jmp short loc_7F825904 ; --------------------------------------------------------------------------- loc_7F8258D4: ; CODE XREF: sub_7F8258A3+28j mov eax, [edi+0Ah] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov edx, [edi+0Ah] mov dword_7F83807C, edx loc_7F825904: ; CODE XREF: sub_7F8258A3+2Fj test esi, esi jnz short loc_7F825980 mov eax, [ebp+arg_4] push 0 push 0FFFFFFFFh mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push edi call sub_7F8257D4 mov esi, eax test esi, esi jnz short loc_7F825980 mov eax, [ebp+var_4] mov ecx, [ebp+arg_C] sub eax, [ebp+arg_4] push 0 inc eax push 0FFFFFFFFh mov [ebp+var_1C], eax mov [ebp+var_4], ecx lea ecx, [ebp+var_4] push ecx push ebx call sub_7F8257D4 mov esi, eax test esi, esi jnz short loc_7F825980 mov eax, [ebp+var_4] lea ecx, [ebp+var_14] sub eax, [ebp+arg_C] push ecx inc eax lea edx, [ebp+lpString1] push edx mov [ebp+var_18], eax push [ebp+var_1C] push [ebp+arg_4] push edi call sub_7F8259F5 mov esi, eax test esi, esi jnz short loc_7F825980 lea eax, [ebp+var_10] lea ecx, [ebp+lpString2] push eax push ecx push [ebp+var_18] push [ebp+arg_C] push ebx call sub_7F8259F5 mov esi, eax loc_7F825980: ; CODE XREF: sub_7F8258A3+63j ; sub_7F8258A3+7Dj ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F825996 call sub_7F82A34F jmp short loc_7F8259A4 ; --------------------------------------------------------------------------- loc_7F825996: ; CODE XREF: sub_7F8258A3+EAj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F8259A4: ; CODE XREF: sub_7F8258A3+F1j mov dword_7F838078, 0 test esi, esi jnz short loc_7F8259C2 push [ebp+lpString2] ; lpString2 push [ebp+lpString1] ; lpString1 call sub_7F8176C6 mov ecx, [ebp+arg_10] mov [ecx], eax loc_7F8259C2: ; CODE XREF: sub_7F8258A3+10Dj cmp [ebp+var_14], 0 jnz short loc_7F8259D6 cmp [ebp+lpString1], 0 jz short loc_7F8259D6 push [ebp+lpString1] call sub_7F82F149 loc_7F8259D6: ; CODE XREF: sub_7F8258A3+123j ; sub_7F8258A3+129j cmp [ebp+var_10], 0 jnz short loc_7F8259EA cmp [ebp+lpString2], 0 jz short loc_7F8259EA push [ebp+lpString2] call sub_7F82F149 loc_7F8259EA: ; CODE XREF: sub_7F8258A3+137j ; sub_7F8258A3+13Dj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8258A3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8259F5 proc near ; CODE XREF: sub_7F8258A3+BCp ; sub_7F8258A3+D6p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx mov ecx, [ebp+arg_8] push esi push edi mov esi, [ebp+arg_4] mov edi, esi and edi, 1FFFh lea eax, [ecx+edi] cmp eax, 2000h jnb short loc_7F825A4B shr esi, 0Dh push esi push [ebp+arg_0] call sub_7F824F23 mov ebx, [ebp+arg_10] test eax, eax mov [ebx], eax mov eax, 0 jnz short loc_7F825A3A push ebx push esi push [ebp+arg_0] call sub_7F825007 loc_7F825A3A: ; CODE XREF: sub_7F8259F5+39j test eax, eax jnz short loc_7F825A7A mov ecx, [ebx] mov edx, [ebp+arg_C] mov ecx, [ecx] add ecx, edi mov [edx], ecx jmp short loc_7F825A7A ; --------------------------------------------------------------------------- loc_7F825A4B: ; CODE XREF: sub_7F8259F5+1Fj mov ebx, [ebp+arg_10] xor edi, edi push edi mov [ebp+var_4], ecx push ecx mov [ebx], edi call sub_7F82F03B mov edx, [ebp+arg_C] mov ecx, eax test ecx, ecx mov [edx], eax mov eax, 400h jz short loc_7F825A7A push esi lea eax, [ebp+var_4] push eax push ecx push [ebp+arg_0] call sub_7F824D4D loc_7F825A7A: ; CODE XREF: sub_7F8259F5+47j ; sub_7F8259F5+54j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8259F5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825A83 proc near ; CODE XREF: sub_7F81917E+104p ; sub_7F81917E+16Dp ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 10h mov ecx, [eax] push ebx push esi mov edx, [ebp+arg_C] push edi xor eax, eax mov edi, [edx] mov [ebp+var_10], eax mov ebx, [ebp+arg_8] mov [ebp+var_C], eax mov [ebp+var_8], eax mov [ebp+var_4], eax mov eax, [ebp+arg_14] cmp ebx, eax jb short loc_7F825AB1 mov ebx, eax loc_7F825AB1: ; CODE XREF: sub_7F825A83+2Aj cmp dword_7F838078, 0 jz short loc_7F825AC1 mov esi, 253h jmp short loc_7F825AF1 ; --------------------------------------------------------------------------- loc_7F825AC1: ; CODE XREF: sub_7F825A83+35j mov eax, [ecx+0Ah] mov edx, [eax] mov dword_7F83807C, edx mov ax, [edx+2Ch] mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov esi, [ecx+0Ah] mov dword_7F83807C, esi xor esi, esi loc_7F825AF1: ; CODE XREF: sub_7F825A83+3Cj test esi, esi jnz loc_7F825BEA lea eax, [ebp+var_10] lea edx, [ebp+var_8] push eax push edx push ebx push [ebp+arg_4] push ecx call sub_7F8259F5 mov esi, eax mov ecx, dword_7F838078 cmp word ptr [ecx+254h], 0 jz short loc_7F825B24 call sub_7F82A34F jmp short loc_7F825B32 ; --------------------------------------------------------------------------- loc_7F825B24: ; CODE XREF: sub_7F825A83+98j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F825B32: ; CODE XREF: sub_7F825A83+9Fj mov dword_7F838078, 0 test esi, esi jnz loc_7F825BEA mov eax, [edi+0Ah] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] lea ecx, [ebp+var_4] mov dword_7F838080, eax lea eax, [ebp+var_C] mov edx, [edi+0Ah] push eax push ecx mov dword_7F83807C, edx push ebx push [ebp+arg_10] push edi call sub_7F8259F5 mov esi, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F825B9C call sub_7F82A34F jmp short loc_7F825BAA ; --------------------------------------------------------------------------- loc_7F825B9C: ; CODE XREF: sub_7F825A83+110j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F825BAA: ; CODE XREF: sub_7F825A83+117j mov dword_7F838078, 0 test esi, esi jnz short loc_7F825BEA push ebx push [ebp+var_4] push [ebp+var_8] call sub_7F82A397 mov ecx, [ebp+arg_18] test eax, eax mov [ecx], eax jnz short loc_7F825BEA mov eax, [ebp+arg_8] cmp eax, [ebp+arg_14] jb short loc_7F825BE4 cmp [ebp+arg_14], eax mov eax, 1 adc eax, 0FFFFFFFFh mov [ecx], eax jmp short loc_7F825BEA ; --------------------------------------------------------------------------- loc_7F825BE4: ; CODE XREF: sub_7F825A83+150j mov dword ptr [ecx], 0FFFFFFFFh loc_7F825BEA: ; CODE XREF: sub_7F825A83+70j ; sub_7F825A83+BBj ... cmp [ebp+var_10], 0 jnz short loc_7F825BFE cmp [ebp+var_8], 0 jz short loc_7F825BFE push [ebp+var_8] call sub_7F82F149 loc_7F825BFE: ; CODE XREF: sub_7F825A83+16Bj ; sub_7F825A83+171j cmp [ebp+var_C], 0 jnz short loc_7F825C12 cmp [ebp+var_4], 0 jz short loc_7F825C12 push [ebp+var_4] call sub_7F82F149 loc_7F825C12: ; CODE XREF: sub_7F825A83+17Fj ; sub_7F825A83+185j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 1Ch sub_7F825A83 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F825C1D proc near ; DATA XREF: sub_7F810922:loc_7F810946o var_20 = byte ptr -20h var_1C = byte ptr -1Ch var_18 = word ptr -18h var_14 = byte ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 20h push ebx push esi push edi xor ebx, ebx mov esi, [ebp+arg_0] mov [ebp+var_8], ebx cmp [ebp+arg_4], ebx mov eax, [esi] mov edx, [eax] mov ecx, [edx+4] jz loc_7F825D14 lea eax, [ebp+var_C] lea edx, [ebp+var_8] push eax push edx push ecx call sub_7F827B9E cmp eax, ebx mov edi, eax jnz loc_7F825DAD cmp [ebp+var_C], ebx jz short loc_7F825C89 push ebx mov ecx, [esi] push ebx push ebx push ebx mov edx, [ecx] push [ebp+var_C] push dword ptr [edx] call sub_7F82D114 mov edi, eax test edi, edi jz short loc_7F825C89 cmp edi, 1001h jnz loc_7F825DAD mov edi, 1009h jmp loc_7F825DAD ; --------------------------------------------------------------------------- loc_7F825C89: ; CODE XREF: sub_7F825C1D+3Cj ; sub_7F825C1D+54j mov eax, [esi] mov eax, [eax] mov cx, [eax+14h] test ch, 8 jnz short loc_7F825C9F mov [ebp+arg_4], 0 jmp short loc_7F825D14 ; --------------------------------------------------------------------------- loc_7F825C9F: ; CODE XREF: sub_7F825C1D+77j mov ebx, [eax+8] mov edx, [eax] test cl, 2 mov [ebp+var_4], edx jz short loc_7F825CBD push ebx push edx call sub_7F826884 mov edi, eax test edi, edi jnz loc_7F825DAD loc_7F825CBD: ; CODE XREF: sub_7F825C1D+8Dj lea eax, [ebp+var_18] push eax push ebx push [ebp+var_4] call sub_7F8267D3 mov edi, eax test edi, edi jnz loc_7F825DAD test byte ptr [ebp+var_18+1], 80h jnz short loc_7F825D14 push 0 lea eax, [ebp+var_14] or byte ptr [ebp+var_18+1], 80h and [ebp+var_18], 0FFFEh push 0 push 0 push eax push ebx push [ebp+var_4] call sub_7F82D114 mov edi, eax test edi, edi jnz loc_7F825DAD mov word ptr [ebp+var_10], 0 lea eax, [ebp+var_18] push eax push ebx push [ebp+var_4] call sub_7F826833 loc_7F825D14: ; CODE XREF: sub_7F825C1D+1Bj ; sub_7F825C1D+80j ... mov eax, [esi] cmp [ebp+arg_4], 0 mov eax, [eax] jz short loc_7F825D92 mov ebx, [eax+8] mov ecx, [eax] push 3 mov [ebp+var_4], ecx push ebx push ecx call sub_7F81155C lea ecx, [ebp+var_20] mov [ebp+var_10], eax lea eax, [ebp+var_1C] push eax push ecx push [ebp+var_C] push ebx push [ebp+var_4] call sub_7F8273AF mov edi, eax test edi, edi jnz short loc_7F825DAD push [ebp+arg_4] push esi call sub_7F810955 cmp eax, 1 mov edi, eax sbb esi, esi lea eax, [ebp+var_20] neg esi push esi push eax call sub_7F81813C push esi lea eax, [ebp+var_1C] push eax call sub_7F81813C test edi, edi jnz short loc_7F825DAD push [ebp+var_8] push 3 push ebx push [ebp+var_4] call sub_7F811597 mov edi, eax test edi, edi jnz short loc_7F825DAD mov eax, [ebp+var_10] mov [ebp+var_8], eax jmp short loc_7F825DAD ; --------------------------------------------------------------------------- loc_7F825D92: ; CODE XREF: sub_7F825C1D+FFj test byte ptr [eax+14h], 2 jz short loc_7F825DA2 push dword ptr [eax+8] push dword ptr [eax] call sub_7F8268FD loc_7F825DA2: ; CODE XREF: sub_7F825C1D+179j push [ebp+arg_4] push esi call sub_7F810955 mov edi, eax loc_7F825DAD: ; CODE XREF: sub_7F825C1D+33j ; sub_7F825C1D+5Cj ... cmp [ebp+var_8], 0 jz short loc_7F825DBB push [ebp+var_8] call sub_7F82F1E1 loc_7F825DBB: ; CODE XREF: sub_7F825C1D+194j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F825C1D endp ; =============== S U B R O U T I N E ======================================= sub_7F825DC6 proc near ; CODE XREF: sub_7F81217E+60p arg_0 = dword ptr 4 mov eax, [esp+arg_0] push ebx push esi push edi push ebp xor esi, esi mov ecx, [eax] mov ebp, offset aMsmail32_ini_2 ; "msmail32.ini" push ebp ; lpFileName mov ebx, offset aMessageFinders ; "Message Finders" movsx eax, word_7F8377F8 mov edi, [ecx] push eax ; nDefault push offset aPointsperstep ; "PointsPerStep" push ebx ; lpAppName call ds:GetPrivateProfileIntA movsx ecx, word_7F8377FC mov word_7F8377F8, ax push ebp ; lpFileName push ecx ; nDefault push offset aPointsperaddfl ; "PointsPerAddFlush" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F8377FC, ax push ebp ; lpFileName movsx eax, word_7F837800 push eax ; nDefault push offset aPointsperdelfl ; "PointsPerDelFlush" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F837800, ax push ebp ; lpFileName movsx eax, word_7F837804 push eax ; nDefault push offset aPointsperfolde ; "PointsPerFolder" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F837804, ax push ebp ; lpFileName movsx eax, word_7F837808 push eax ; nDefault push offset aPointspermessa ; "PointsPerMessage" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F837808, ax push ebp ; lpFileName movsx eax, word_7F83780C push eax ; nDefault push offset aPointsopenmess ; "PointsOpenMessage" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F83780C, ax push ebp ; lpFileName movsx eax, word_7F837810 push eax ; nDefault push offset aPointsfoldermi ; "PointsFolderMismatch" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F837810, ax push ebp ; lpFileName movsx eax, word_7F837814 push eax ; nDefault push offset aMatchesperstep ; "MatchesPerStep" push ebx ; lpAppName call ds:GetPrivateProfileIntA mov word_7F837814, ax push ebp ; lpFileName movsx eax, word ptr dword_7F837818 push eax ; nDefault push offset aInterval ; "Interval" push ebx ; lpAppName call ds:GetPrivateProfileIntA push ebp ; lpFileName mov dword_7F837818, eax mov eax, nDefault push eax ; nDefault push offset aBoost ; "Boost" push ebx ; lpAppName call ds:GetPrivateProfileIntA lea ebx, [edi+244h] mov nDefault, eax cmp [ebx], esi jnz short loc_7F825F31 push ebx push 1 push 4F435380h push [esp+1Ch+arg_0] call sub_7F816C79 cmp eax, 1001h mov esi, eax jnz short loc_7F825F2D push 1 push 0 call sub_7F816903 mov [ebx], eax test eax, eax jnz short loc_7F825F22 mov esi, 400h jmp short loc_7F825F9F ; --------------------------------------------------------------------------- loc_7F825F22: ; CODE XREF: sub_7F825DC6+153j or byte ptr [edi+265h], 40h xor esi, esi jmp short loc_7F825F31 ; --------------------------------------------------------------------------- loc_7F825F2D: ; CODE XREF: sub_7F825DC6+144j test esi, esi jnz short loc_7F825F9F loc_7F825F31: ; CODE XREF: sub_7F825DC6+12Aj ; sub_7F825DC6+165j lea eax, [edi+248h] cmp dword ptr [eax], 0 jnz short loc_7F825F5E push eax push 1 push 4C435380h push [esp+1Ch+arg_0] call sub_7F816C79 cmp eax, 1001h mov esi, eax jnz short loc_7F825F5A xor esi, esi jmp short loc_7F825F5E ; --------------------------------------------------------------------------- loc_7F825F5A: ; CODE XREF: sub_7F825DC6+18Ej test esi, esi jnz short loc_7F825F9F loc_7F825F5E: ; CODE XREF: sub_7F825DC6+174j ; sub_7F825DC6+192j mov eax, [ebx] test eax, eax jz short loc_7F825F9F mov edx, [eax] movzx eax, word ptr [edx] mov bx, [eax+edx+6] movzx ecx, word ptr [edx+4] movzx eax, word ptr [edx+2] dec bx add eax, ecx test bx, bx lea eax, [eax+edx+0Ch] jl short loc_7F825F9F loc_7F825F83: ; CODE XREF: sub_7F825DC6+1D7j movzx ecx, word ptr [eax+4] test byte ptr [ecx+edx+6], 2 jnz short loc_7F825F95 inc word ptr [edi+240h] loc_7F825F95: ; CODE XREF: sub_7F825DC6+1C6j dec bx add eax, 6 test bx, bx jge short loc_7F825F83 loc_7F825F9F: ; CODE XREF: sub_7F825DC6+15Aj ; sub_7F825DC6+169j ... mov eax, esi pop ebp pop edi pop esi pop ebx retn 4 sub_7F825DC6 endp ; =============== S U B R O U T I N E ======================================= sub_7F825FA8 proc near ; CODE XREF: sub_7F81217E+1B1p ; sub_7F812369+94p var_4 = dword ptr -4 arg_0 = dword ptr 4 sub esp, 4 push ebx push esi mov esi, [esp+0Ch+arg_0] push edi push ebp mov eax, [esi] mov edi, [eax] lea ebx, [edi+244h] cmp dword ptr [ebx], 0 jz short loc_7F825FFA lea ebp, [edi+264h] test byte ptr [ebp+1], 40h jz short loc_7F825FED push dword ptr [ebx] mov [esp+18h+var_4], 4F435380h lea ecx, [esp+18h+var_4] push ecx push esi call sub_7F816DC7 test eax, eax jnz short loc_7F826010 and word ptr [ebp+0], 0BFFFh loc_7F825FED: ; CODE XREF: sub_7F825FA8+24j push dword ptr [ebx] call sub_7F82F1E1 mov dword ptr [ebx], 0 loc_7F825FFA: ; CODE XREF: sub_7F825FA8+18j add edi, 248h xor ebx, ebx mov eax, [edi] test eax, eax jz short loc_7F826010 push eax call sub_7F82F1E1 mov [edi], ebx loc_7F826010: ; CODE XREF: sub_7F825FA8+3Dj ; sub_7F825FA8+5Ej push offset sub_7F826941 push 3 push esi call sub_7F811917 pop ebp pop edi pop esi pop ebx add esp, 4 retn 4 sub_7F825FA8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F826027 proc near ; DATA XREF: sub_7F81217E+EBo var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 4 push esi push edi mov esi, [ebp+arg_0] mov eax, [esi] mov edi, [eax] call sub_7F816000 test eax, eax jnz loc_7F8260E4 test byte ptr [edi+265h], 2 jz short loc_7F826053 push 0 jmp loc_7F8260DE ; --------------------------------------------------------------------------- loc_7F826053: ; CODE XREF: sub_7F826027+23j mov ax, word_7F83802C cmp dword_7F838024, 0 mov word_7F838028, ax jz short loc_7F826089 cmp word_7F8377F8, ax jnz short loc_7F826089 movsx eax, word_7F8377F8 imul eax, 1Eh cdq mov ecx, 14h idiv ecx mov word_7F838028, ax loc_7F826089: ; CODE XREF: sub_7F826027+3Fj ; sub_7F826027+48j xor edi, edi loc_7F82608B: ; CODE XREF: sub_7F826027+9Cj lea eax, [ebp+var_4] push eax push esi call sub_7F8261A0 test eax, eax jnz short loc_7F8260AC cmp word_7F838028, di jle short loc_7F8260C5 lea eax, [ebp+var_2] push eax push esi call sub_7F8265CF loc_7F8260AC: ; CODE XREF: sub_7F826027+70j cmp word_7F838028, di jle short loc_7F8260C5 cmp [ebp+var_2], di jg short loc_7F8260C1 cmp [ebp+var_4], di jle short loc_7F8260C5 loc_7F8260C1: ; CODE XREF: sub_7F826027+92j test eax, eax jz short loc_7F82608B loc_7F8260C5: ; CODE XREF: sub_7F826027+79j ; sub_7F826027+8Cj ... xor ecx, ecx test eax, eax mov dword_7F838024, ecx jnz short loc_7F8260E4 cmp [ebp+var_4], cx jnz short loc_7F8260E4 cmp [ebp+var_2], cx jnz short loc_7F8260E4 push ecx loc_7F8260DE: ; CODE XREF: sub_7F826027+27j push esi call sub_7F8260F1 loc_7F8260E4: ; CODE XREF: sub_7F826027+16j ; sub_7F826027+A8j ... mov eax, 1 pop edi pop esi mov esp, ebp pop ebp retn 8 sub_7F826027 endp ; =============== S U B R O U T I N E ======================================= sub_7F8260F1 proc near ; CODE XREF: sub_7F812460+9Cp ; sub_7F826027+B8p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi mov esi, [esp+4+arg_4] push edi mov eax, [eax] push esi push dword ptr [eax+20h] mov edi, [eax] call sub_7F8161D3 test esi, esi jz short loc_7F826115 or byte ptr [edi+265h], 80h jmp short loc_7F826139 ; --------------------------------------------------------------------------- loc_7F826115: ; CODE XREF: sub_7F8260F1+19j xor esi, esi cmp dword_7F838038, esi jz short loc_7F826130 push esi push offset dword_7F838038 call sub_7F81813C mov dword_7F838034, esi loc_7F826130: ; CODE XREF: sub_7F8260F1+2Cj and word ptr [edi+264h], 7FFFh loc_7F826139: ; CODE XREF: sub_7F8260F1+22j pop edi pop esi retn 8 sub_7F8260F1 endp ; =============== S U B R O U T I N E ======================================= sub_7F82613E proc near ; CODE XREF: sub_7F812460+A9p arg_0 = dword ptr 4 push 8 xor eax, eax mov edx, [esp+4+arg_0] push eax push dword_7F838030 push eax push eax push eax mov eax, [edx] push dword ptr [eax+20h] call sub_7F81635D retn 4 sub_7F82613E endp ; =============== S U B R O U T I N E ======================================= sub_7F82615D proc near ; CODE XREF: sub_7F828A3E+133p ; sub_7F82A588+14Fp arg_0 = dword ptr 4 arg_4 = word ptr 8 mov eax, [esp+arg_0] mov ecx, [eax] mov edx, [ecx] mov ax, [edx+264h] and ax, 8000h cmp ax, 1 sbb eax, eax neg eax cmp [esp+arg_4], 1 sbb ecx, ecx neg ecx cmp eax, ecx jz short locret_7F82619D lea eax, [esp+arg_4] push 2 push eax push 2000000h push dword ptr [edx+218h] call sub_7F824187 locret_7F82619D: ; CODE XREF: sub_7F82615D+27j retn 8 sub_7F82615D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8261A0 proc near ; CODE XREF: sub_7F826027+69p var_40 = byte ptr -40h var_3C = dword ptr -3Ch var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = word ptr -28h var_26 = word ptr -26h var_24 = word ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_16 = word ptr -16h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 40h push ebx mov eax, [ebp+arg_0] push esi push edi xor esi, esi mov ecx, [eax] mov edx, [ecx] mov [ebp+var_30], esi mov [ebp+var_34], esi mov eax, [edx+248h] mov [ebp+var_2C], eax mov [ebp+var_8], esi cmp eax, esi jnz short loc_7F8261D5 mov eax, [ebp+arg_4] mov [eax], si xor eax, eax jmp loc_7F8265C6 ; --------------------------------------------------------------------------- loc_7F8261D5: ; CODE XREF: sub_7F8261A0+26j mov eax, [ebp+var_2C] mov ecx, [eax] mov [ebp+var_10], ecx movzx eax, word ptr [ecx] mov cx, [eax+ecx+6] mov eax, [ebp+arg_4] mov [ebp+var_16], cx mov [eax], cx cmp word_7F838028, 0 jle loc_7F82656C mov edi, [ebp-18h] xor ebx, ebx loc_7F826202: ; CODE XREF: sub_7F8261A0+3C6j cmp [ebp+var_16], bx jle loc_7F82656C mov word_7F838020, bx cmp [ebp+var_8], ebx jnz loc_7F8262A4 mov ecx, [ebp+var_10] movzx eax, word ptr [ecx] mov edx, [eax+ecx] lea eax, [ebp+var_28] push eax mov [ebp+var_C], edx push edx push [ebp+arg_0] call sub_7F8288BF mov esi, eax test esi, esi jz short loc_7F826262 cmp esi, 1001h jnz loc_7F82656C push ebx xor esi, esi push [ebp+var_10] call sub_7F816A42 dec [ebp+var_16] mov [ebp+var_30], 1 jmp loc_7F82655F ; --------------------------------------------------------------------------- loc_7F826262: ; CODE XREF: sub_7F8261A0+99j lea eax, [ebp+var_8] push eax push ebx push [ebp+var_C] push [ebp+arg_0] call sub_7F816C79 mov esi, eax test esi, esi jz short loc_7F82629F cmp esi, 1015h jnz loc_7F82656C push ebx xor esi, esi push [ebp+var_10] call sub_7F816A42 dec [ebp+var_16] mov [ebp+var_30], 1 jmp loc_7F82655F ; --------------------------------------------------------------------------- loc_7F82629F: ; CODE XREF: sub_7F8261A0+D6j mov eax, [ebp+var_8] mov edi, [eax] loc_7F8262A4: ; CODE XREF: sub_7F8261A0+76j cmp [ebp+var_24], bx jle loc_7F82636F movzx eax, word ptr [edi+2] movzx ecx, word ptr [edi+4] add eax, ecx mov edx, [eax+edi+0Ch] movzx eax, [ebp+var_28] mov [ebp+var_14], edx test eax, eax jz short loc_7F8262E7 cmp eax, 1 jl loc_7F82636F cmp eax, 2 jle short loc_7F82634B cmp eax, 3 jl loc_7F82636F cmp eax, 4 jg loc_7F82636F loc_7F8262E7: ; CODE XREF: sub_7F8261A0+125j mov eax, [ebp+var_20] mov [ebp+var_3C], eax loc_7F8262ED: ; CODE XREF: sub_7F8261A0+1C1j movsx ecx, [ebp+var_22] mov ax, [ebp+var_26] sub ax, [ebp+var_22] mov [ebp+var_4], ax imul ecx, 6 movzx eax, word ptr [edi] sub eax, ecx add eax, edi cmp word_7F838028, bx mov [ebp+var_1C], eax jle loc_7F8264B9 loc_7F826317: ; CODE XREF: sub_7F8261A0+313j mov ax, [ebp+var_4] dec [ebp+var_4] test ax, ax jle loc_7F8264B9 movzx eax, [ebp+var_28] test eax, eax jz loc_7F8263BD cmp eax, 1 jz loc_7F826402 cmp eax, 2 jz loc_7F826424 jmp loc_7F826476 ; --------------------------------------------------------------------------- loc_7F82634B: ; CODE XREF: sub_7F8261A0+133j push ebx lea eax, [ebp+var_3C] push ebx push ebx push eax push [ebp+var_14] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F8262ED cmp esi, 1001h jnz loc_7F82656C loc_7F82636F: ; CODE XREF: sub_7F8261A0+108j ; sub_7F8261A0+12Aj ... mov [ebp+var_22], bx dec [ebp+var_24] cmp [ebp+var_24], bx jg loc_7F826541 push ebx push [ebp+var_10] call sub_7F816A42 mov esi, eax test esi, esi jnz loc_7F82656C dec [ebp+var_16] push ebx mov [ebp+var_30], 1 push 1 push [ebp+var_C] push [ebp+arg_0] call sub_7F82B9DE push [ebp+var_8] call sub_7F82F1E1 mov [ebp+var_8], ebx jmp loc_7F82655F ; --------------------------------------------------------------------------- loc_7F8263BD: ; CODE XREF: sub_7F8261A0+18Ej lea eax, [ebp+var_2] mov edx, [ebp+var_1C] push eax push [ebp+var_14] push dword ptr [edx] push [ebp+arg_0] call sub_7F82959B mov esi, eax test esi, esi jz short loc_7F8263E5 cmp esi, 1008h jnz short loc_7F8263F1 mov [ebp+var_2], bx xor esi, esi loc_7F8263E5: ; CODE XREF: sub_7F8261A0+235j cmp [ebp+var_2], bx jz loc_7F826476 jmp short loc_7F82645C ; --------------------------------------------------------------------------- loc_7F8263F1: ; CODE XREF: sub_7F8261A0+23Dj cmp esi, 1001h jnz loc_7F8264A8 jmp loc_7F82636F ; --------------------------------------------------------------------------- loc_7F826402: ; CODE XREF: sub_7F8261A0+197j mov ax, word_7F837808 mov ecx, [ebp+var_1C] sub word_7F838028, ax movsx eax, word_7F838020 mov edx, [ecx] mov dword_7F837820[eax*4], edx jmp short loc_7F82646F ; --------------------------------------------------------------------------- loc_7F826424: ; CODE XREF: sub_7F8261A0+1A0j lea eax, [ebp+var_2] mov edx, [ebp+var_1C] push eax push [ebp+var_14] push dword ptr [edx] push [ebp+arg_0] call sub_7F82959B mov esi, eax test esi, esi jz short loc_7F826450 cmp esi, 1008h jnz loc_7F8264D2 mov [ebp+var_2], bx xor esi, esi loc_7F826450: ; CODE XREF: sub_7F8261A0+29Cj cmp [ebp+var_2], bx jz short loc_7F82645C mov eax, [ebp+var_20] mov [ebp+var_3C], eax loc_7F82645C: ; CODE XREF: sub_7F8261A0+24Fj ; sub_7F8261A0+2B4j mov eax, [ebp+var_1C] movsx ecx, word_7F838020 mov edx, [eax] mov dword_7F837820[ecx*4], edx loc_7F82646F: ; CODE XREF: sub_7F8261A0+282j inc word_7F838020 loc_7F826476: ; CODE XREF: sub_7F8261A0+1A6j ; sub_7F8261A0+249j mov ax, word_7F837814 cmp word_7F838020, ax jl short loc_7F8264A8 lea eax, [ebp+var_40] push eax push [ebp+var_14] push [ebp+arg_0] call sub_7F82729D mov esi, eax test esi, esi jz short loc_7F8264A8 cmp esi, 1017h jnz loc_7F82656C xor esi, esi loc_7F8264A8: ; CODE XREF: sub_7F8261A0+257j ; sub_7F8261A0+2E3j ... sub [ebp+var_1C], 6 cmp word_7F838028, bx jg loc_7F826317 loc_7F8264B9: ; CODE XREF: sub_7F8261A0+171j ; sub_7F8261A0+182j movzx eax, [ebp+var_28] test eax, eax jl short loc_7F826529 cmp eax, 2 jle short loc_7F8264DF cmp eax, 3 jz short loc_7F826505 cmp eax, 4 jz short loc_7F826509 jmp short loc_7F826529 ; --------------------------------------------------------------------------- loc_7F8264D2: ; CODE XREF: sub_7F8261A0+2A4j cmp esi, 1001h jnz short loc_7F8264A8 jmp loc_7F82636F ; --------------------------------------------------------------------------- loc_7F8264DF: ; CODE XREF: sub_7F8261A0+324j cmp word_7F838020, bx jle short loc_7F826529 lea eax, [ebp+var_40] push eax push [ebp+var_14] push [ebp+arg_0] call sub_7F82729D mov esi, eax test esi, esi jz short loc_7F826529 cmp esi, 1017h jmp short loc_7F826525 ; --------------------------------------------------------------------------- loc_7F826505: ; CODE XREF: sub_7F8261A0+329j push 3 jmp short loc_7F82650B ; --------------------------------------------------------------------------- loc_7F826509: ; CODE XREF: sub_7F8261A0+32Ej push 4 loc_7F82650B: ; CODE XREF: sub_7F8261A0+367j push [ebp+var_14] push [ebp+var_20] push [ebp+arg_0] call sub_7F82929F mov esi, eax test esi, esi jz short loc_7F826529 cmp esi, 1001h loc_7F826525: ; CODE XREF: sub_7F8261A0+363j jnz short loc_7F82656C xor esi, esi loc_7F826529: ; CODE XREF: sub_7F8261A0+31Fj ; sub_7F8261A0+330j ... cmp [ebp+var_4], bx jle loc_7F82636F mov ax, [ebp+var_26] sub ax, [ebp+var_4] mov [ebp+var_22], ax jmp short loc_7F82655F ; --------------------------------------------------------------------------- loc_7F826541: ; CODE XREF: sub_7F8261A0+1DBj movzx eax, word ptr [edi] mov ax, [eax+edi+6] dec ax push eax push edi call sub_7F816A42 mov esi, eax test esi, esi jnz short loc_7F82656C mov [ebp+var_34], 1 loc_7F82655F: ; CODE XREF: sub_7F8261A0+BDj ; sub_7F8261A0+FAj ... cmp word_7F838028, bx jg loc_7F826202 loc_7F82656C: ; CODE XREF: sub_7F8261A0+57j ; sub_7F8261A0+66j ... cmp [ebp+var_8], 0 jz short loc_7F82659E lea eax, [ebp+var_28] push eax push [ebp+var_C] push [ebp+arg_0] call sub_7F82897B cmp [ebp+var_34], 0 jz short loc_7F826596 push [ebp+var_8] lea ecx, [ebp+var_C] push ecx push [ebp+arg_0] call sub_7F816DC7 loc_7F826596: ; CODE XREF: sub_7F8261A0+3E5j push [ebp+var_8] call sub_7F82F1E1 loc_7F82659E: ; CODE XREF: sub_7F8261A0+3D0j cmp [ebp+var_30], 0 jz short loc_7F8265C4 mov [ebp+var_C], 4C435380h push 0 push [ebp+var_2C] call sub_7F816BFE push [ebp+var_2C] lea ecx, [ebp+var_C] push ecx push [ebp+arg_0] call sub_7F816DC7 loc_7F8265C4: ; CODE XREF: sub_7F8261A0+402j mov eax, esi loc_7F8265C6: ; CODE XREF: sub_7F8261A0+30j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8261A0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8265CF proc near ; CODE XREF: sub_7F826027+80p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 10h mov ecx, [eax] push ebx push esi mov eax, [ebp+arg_4] push edi xor esi, esi mov ebx, [ecx] mov edx, [ebx+244h] mov [eax], si test edx, edx jz short loc_7F8265FC mov eax, [edx] movzx ecx, word ptr [eax] mov si, [ecx+eax+6] loc_7F8265FC: ; CODE XREF: sub_7F8265CF+21j test si, si jg short loc_7F826608 xor eax, eax jmp loc_7F82672B ; --------------------------------------------------------------------------- loc_7F826608: ; CODE XREF: sub_7F8265CF+30j xor ecx, ecx mov edi, [edx] movzx eax, word ptr [edi] add eax, edi mov [ebp+var_4], ecx cmp si, word_7F838048 mov [ebp+var_10], eax jge short loc_7F826627 mov word_7F838048, cx loc_7F826627: ; CODE XREF: sub_7F8265CF+4Fj xor bx, bx cmp word_7F838028, bx jle loc_7F8266FF loc_7F826637: ; CODE XREF: sub_7F8265CF+12Aj cmp si, bx jle loc_7F8266FF cmp [ebp+var_4], 0 jnz loc_7F8266FF mov eax, [ebp+var_10] mov [ebp+var_8], eax movsx ecx, bx movsx eax, word_7F838048 add eax, ecx cdq movsx ecx, si idiv ecx imul edx, 6 sub [ebp+var_8], edx mov eax, [ebp+var_8] movzx ecx, word ptr [eax+4] mov [ebp+var_8], eax lea edx, [ecx+edi+6] mov ax, [edx] mov [ebp+var_C], edx test ah, 40h jnz short loc_7F826685 test al, 3 jnz short loc_7F8266EF loc_7F826685: ; CODE XREF: sub_7F8265CF+B0j mov eax, [ebp+arg_4] mov edx, [ebp+var_8] push [ebp+var_C] inc word ptr [eax] push dword ptr [edx] push [ebp+arg_0] call sub_7F82695E mov [ebp+var_4], eax test eax, eax jnz short loc_7F8266B4 mov ecx, [ebp+var_8] push [ebp+var_C] push dword ptr [ecx] push [ebp+arg_0] call sub_7F826833 jmp short loc_7F8266EF ; --------------------------------------------------------------------------- loc_7F8266B4: ; CODE XREF: sub_7F8265CF+D1j cmp [ebp+var_4], 1001h jnz short loc_7F8266EF movsx eax, word_7F838048 movsx ecx, bx add eax, ecx cdq movsx ecx, si idiv ecx push edx push edi call sub_7F816A42 mov [ebp+var_4], eax test eax, eax jnz short loc_7F8266EF dec si mov eax, [ebp+arg_0] dec bx mov ecx, [eax] mov edx, [ecx] or byte ptr [edx+265h], 40h loc_7F8266EF: ; CODE XREF: sub_7F8265CF+B4j ; sub_7F8265CF+E3j ... inc bx cmp word_7F838028, 0 jg loc_7F826637 loc_7F8266FF: ; CODE XREF: sub_7F8265CF+62j ; sub_7F8265CF+6Bj ... add word_7F838048, bx test si, si jz short loc_7F82671F mov ax, word_7F838048 cwd idiv si mov word_7F838048, dx jmp short loc_7F826728 ; --------------------------------------------------------------------------- loc_7F82671F: ; CODE XREF: sub_7F8265CF+13Aj mov word_7F838048, 0 loc_7F826728: ; CODE XREF: sub_7F8265CF+14Ej mov eax, [ebp+var_4] loc_7F82672B: ; CODE XREF: sub_7F8265CF+34j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F8265CF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F826734 proc near ; CODE XREF: sub_7F82695E+38p ; sub_7F82959B+39p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx lea eax, [ebp+var_4] push esi push edi xor edi, edi mov esi, [ebp+arg_8] push eax lea ecx, [ebp+arg_4] push edi mov [esi], edi push ecx push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz short loc_7F8267CA push 0 push 69100h push [ebp+var_4] call sub_7F8194ED mov bx, ax test bx, bx jge short loc_7F826777 mov ebx, 1004h jmp short loc_7F8267AB ; --------------------------------------------------------------------------- loc_7F826777: ; CODE XREF: sub_7F826734+3Aj push ebx push [ebp+var_4] call sub_7F81990D push 20h mov [ebp+var_8], eax push eax call sub_7F82F18D mov edi, eax test edi, edi jnz short loc_7F826798 mov ebx, 400h jmp short loc_7F8267AB ; --------------------------------------------------------------------------- loc_7F826798: ; CODE XREF: sub_7F826734+5Bj lea eax, [ebp+var_8] push eax push dword ptr [edi] push 0 push ebx push [ebp+var_4] call sub_7F818D47 mov ebx, eax loc_7F8267AB: ; CODE XREF: sub_7F826734+41j ; sub_7F826734+62j push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C test ebx, ebx jnz short loc_7F8267BE mov [esi], edi jmp short loc_7F8267C8 ; --------------------------------------------------------------------------- loc_7F8267BE: ; CODE XREF: sub_7F826734+84j test edi, edi jz short loc_7F8267C8 push edi call sub_7F82F1E1 loc_7F8267C8: ; CODE XREF: sub_7F826734+88j ; sub_7F826734+8Cj mov eax, ebx loc_7F8267CA: ; CODE XREF: sub_7F826734+23j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F826734 endp ; =============== S U B R O U T I N E ======================================= sub_7F8267D3 proc near ; CODE XREF: sub_7F825C1D+A8p ; sub_7F828BB2+117p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push esi push edi xor esi, esi mov ecx, [eax] mov edx, [ecx] mov eax, [edx+244h] test eax, eax jnz short loc_7F8267F0 mov esi, 1001h jmp short loc_7F82682C ; --------------------------------------------------------------------------- loc_7F8267F0: ; CODE XREF: sub_7F8267D3+14j push [esp+8+arg_4] mov edi, [eax] push edi call sub_7F816B29 test ax, ax jge short loc_7F826808 mov esi, 1001h jmp short loc_7F82682C ; --------------------------------------------------------------------------- loc_7F826808: ; CODE XREF: sub_7F8267D3+2Cj movzx ecx, word ptr [edi] movsx eax, ax imul eax, 6 sub ecx, eax push 0Ch movzx eax, word ptr [ecx+edi+4] add eax, edi add eax, 6 push eax push [esp+10h+arg_8] call sub_7F82FCE0 add esp, 0Ch loc_7F82682C: ; CODE XREF: sub_7F8267D3+1Bj ; sub_7F8267D3+33j mov eax, esi pop edi pop esi retn 0Ch sub_7F8267D3 endp ; =============== S U B R O U T I N E ======================================= sub_7F826833 proc near ; CODE XREF: sub_7F825C1D+F2p ; sub_7F8265CF+DEp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push esi push edi mov ecx, [eax] mov esi, [ecx] push [esp+8+arg_4] mov eax, [esi+244h] mov edi, [eax] push edi call sub_7F816B29 test ax, ax jl short loc_7F82687F movzx ecx, word ptr [edi] movsx eax, ax imul eax, 6 sub ecx, eax push 0Ch push [esp+0Ch+arg_8] movzx eax, word ptr [ecx+edi+4] add eax, edi add eax, 6 push eax call sub_7F82FCE0 or byte ptr [esi+265h], 40h add esp, 0Ch loc_7F82687F: ; CODE XREF: sub_7F826833+1Fj pop edi pop esi retn 0Ch sub_7F826833 endp ; =============== S U B R O U T I N E ======================================= sub_7F826884 proc near ; CODE XREF: sub_7F825C1D+91p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push ebx push esi push edi mov ecx, [eax] mov edi, [ecx] lea esi, [edi+244h] cmp dword ptr [esi], 0 jnz short loc_7F8268CB push esi push 1 push 4F435380h push eax call sub_7F816C79 cmp eax, 1001h mov ebx, eax jnz short loc_7F8268C7 xor ebx, ebx push 1 push 48h call sub_7F816903 mov [esi], eax cmp eax, ebx jnz short loc_7F8268C7 mov ebx, 400h loc_7F8268C7: ; CODE XREF: sub_7F826884+2Bj ; sub_7F826884+3Cj test ebx, ebx jnz short loc_7F8268F5 loc_7F8268CB: ; CODE XREF: sub_7F826884+14j push 0Ch push offset unk_7F835DE8 push [esp+14h+arg_4] push esi call sub_7F81698C mov ebx, eax test ebx, ebx jnz short loc_7F8268EB or byte ptr [edi+265h], 40h jmp short loc_7F8268F5 ; --------------------------------------------------------------------------- loc_7F8268EB: ; CODE XREF: sub_7F826884+5Cj cmp ebx, 1003h jnz short loc_7F8268F5 xor ebx, ebx loc_7F8268F5: ; CODE XREF: sub_7F826884+45j ; sub_7F826884+65j ... mov eax, ebx pop edi pop esi pop ebx retn 8 sub_7F826884 endp ; =============== S U B R O U T I N E ======================================= sub_7F8268FD proc near ; CODE XREF: sub_7F825C1D+180p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi xor eax, eax mov ecx, [esp+4+arg_0] push edi mov edx, [ecx] mov edi, [edx] mov ecx, [edi+244h] test ecx, ecx jz short loc_7F82693C push [esp+8+arg_4] mov esi, [ecx] push esi call sub_7F816B29 push eax push esi call sub_7F816A42 test eax, eax jnz short loc_7F826933 or byte ptr [edi+265h], 40h jmp short loc_7F82693C ; --------------------------------------------------------------------------- loc_7F826933: ; CODE XREF: sub_7F8268FD+2Bj cmp eax, 1004h jnz short loc_7F82693C xor eax, eax loc_7F82693C: ; CODE XREF: sub_7F8268FD+14j ; sub_7F8268FD+34j ... pop edi pop esi retn 8 sub_7F8268FD endp ; =============== S U B R O U T I N E ======================================= sub_7F826941 proc near ; DATA XREF: sub_7F825FA8:loc_7F826010o arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push [esp+arg_8] call sub_7F82F1E1 push 0 push 3 push [esp+8+arg_4] push [esp+0Ch+arg_0] call sub_7F811597 retn 0Ch sub_7F826941 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82695E proc near ; CODE XREF: sub_7F8265CF+C7p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 14h push ebx push esi push edi xor esi, esi xor edi, edi push 3 push [ebp+arg_4] mov word_7F838020, di mov [ebp+var_8], edi push [ebp+arg_0] call sub_7F81155C mov dword_7F83803C, eax cmp eax, edi jnz short loc_7F8269C3 push offset dword_7F83803C push [ebp+arg_4] push [ebp+arg_0] call sub_7F826734 mov esi, eax test esi, esi jnz loc_7F826C1E mov eax, dword_7F83803C push eax push 3 push [ebp+arg_4] push [ebp+arg_0] call sub_7F811597 test eax, eax jz short loc_7F8269C3 mov [ebp+var_8], 1 loc_7F8269C3: ; CODE XREF: sub_7F82695E+2Bj ; sub_7F82695E+5Cj mov ebx, [ebp+arg_8] cmp byte ptr [ebx+4], 83h jnz loc_7F826A76 lea eax, [ebp+var_C] lea ecx, [ebp+var_14] mov [ebp+var_14], 46534180h push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F826C1E push 0 push [ebp+arg_4] push [ebp+var_C] call sub_7F8194ED mov [ebp+var_2], ax test ax, ax jge short loc_7F826A15 mov dword_7F838044, 0 jmp short loc_7F826A63 ; --------------------------------------------------------------------------- loc_7F826A15: ; CODE XREF: sub_7F82695E+A9j push dword ptr [ebp+var_2] push [ebp+var_C] call sub_7F81990D push 0 mov [ebp+var_10], eax push eax call sub_7F82F03B mov dword_7F838040, eax test eax, eax jnz short loc_7F826A3B mov esi, 400h jmp short loc_7F826A63 ; --------------------------------------------------------------------------- loc_7F826A3B: ; CODE XREF: sub_7F82695E+D4j lea eax, [ebp+var_10] push eax push dword_7F838040 push 0 push dword ptr [ebp+var_2] push [ebp+var_C] call sub_7F818D47 mov esi, eax test esi, esi jnz short loc_7F826A63 mov eax, [ebp+var_10] shr eax, 2 mov dword_7F838044, eax loc_7F826A63: ; CODE XREF: sub_7F82695E+B5j ; sub_7F82695E+DBj ... push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C test esi, esi jnz loc_7F826C1E loc_7F826A76: ; CODE XREF: sub_7F82695E+6Cj cmp dword_7F838034, 0 jz short loc_7F826A9F mov eax, dword_7F838034 cmp [ebx+4], eax jz short loc_7F826A9F push 0 push offset dword_7F838038 call sub_7F81813C mov dword_7F838034, 0 loc_7F826A9F: ; CODE XREF: sub_7F82695E+11Fj ; sub_7F82695E+129j test esi, esi jnz loc_7F826B91 loc_7F826AA7: ; CODE XREF: sub_7F82695E+18Cj ; sub_7F82695E+20Ej ... cmp word_7F838028, 0 jle loc_7F826B91 cmp dword_7F838038, 0 jnz short loc_7F826B08 push offset dword_7F838038 lea eax, [ebx+4] push 0 push eax push [ebp+arg_0] call sub_7F817E9D cmp eax, 1001h mov esi, eax jnz short loc_7F826AF8 push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F826C68 mov esi, eax test esi, esi jz short loc_7F826AA7 cmp esi, 1009h jz loc_7F826B8A loc_7F826AF8: ; CODE XREF: sub_7F82695E+17Aj test esi, esi jnz loc_7F826B91 mov eax, [ebx+4] mov dword_7F838034, eax loc_7F826B08: ; CODE XREF: sub_7F82695E+15Ej push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F826D5C cmp eax, 1005h mov esi, eax jnz short loc_7F826B7A cmp word_7F838020, 0 jle short loc_7F826B46 push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F82729D mov esi, eax test esi, esi jz short loc_7F826B46 cmp esi, 1017h jnz short loc_7F826B91 mov edi, 1 loc_7F826B46: ; CODE XREF: sub_7F82695E+1C7j ; sub_7F82695E+1D9j push 0 push offset dword_7F838038 call sub_7F81813C mov dword_7F838034, 0 push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F826C68 mov esi, eax test esi, esi jz loc_7F826AA7 cmp esi, 1009h jz short loc_7F826B8A loc_7F826B7A: ; CODE XREF: sub_7F82695E+1BDj test esi, esi jz loc_7F826AA7 cmp esi, 1017h jnz short loc_7F826B91 loc_7F826B8A: ; CODE XREF: sub_7F82695E+194j ; sub_7F82695E+21Aj mov edi, 1 xor esi, esi loc_7F826B91: ; CODE XREF: sub_7F82695E+143j ; sub_7F82695E+151j ... cmp word_7F838020, 0 jle short loc_7F826BBB push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F82729D test esi, esi jnz short loc_7F826BBB mov esi, eax cmp eax, 1017h jnz short loc_7F826BBB xor esi, esi mov edi, 1 loc_7F826BBB: ; CODE XREF: sub_7F82695E+23Bj ; sub_7F82695E+24Bj ... xor ecx, ecx test edi, edi jz short loc_7F826C1E mov eax, [ebp+arg_0] mov edx, [eax] mov edi, [edx] dec word ptr [edi+240h] mov ax, [ebx] mov [ebx+4], ecx mov [ebx+8], cx or al, 3 test ah, 40h mov [ebx], ax jz short loc_7F826BEC and ax, 0BFFFh mov [ebx], ax jmp short loc_7F826BFE ; --------------------------------------------------------------------------- loc_7F826BEC: ; CODE XREF: sub_7F82695E+283j push 0 push 10000h push [ebp+arg_4] push [ebp+arg_0] call sub_7F82A016 loc_7F826BFE: ; CODE XREF: sub_7F82695E+28Cj cmp [ebp+var_8], 0 jnz short loc_7F826C1E push 0 push 3 push [ebp+arg_4] push [ebp+arg_0] call sub_7F811597 test eax, eax jnz short loc_7F826C1E mov [ebp+var_8], 1 loc_7F826C1E: ; CODE XREF: sub_7F82695E+41j ; sub_7F82695E+8Fj ... xor edi, edi cmp dword_7F838040, edi jz short loc_7F826C39 mov eax, dword_7F838040 push eax call sub_7F82F149 mov dword_7F838040, edi loc_7F826C39: ; CODE XREF: sub_7F82695E+2C8j cmp [ebp+var_8], 0 jz short loc_7F826C53 cmp dword_7F83803C, 0 jz short loc_7F826C53 mov eax, dword_7F83803C push eax call sub_7F82F1E1 loc_7F826C53: ; CODE XREF: sub_7F82695E+2DFj ; sub_7F82695E+2E8j mov eax, esi pop edi pop esi pop ebx mov esp, ebp mov dword_7F83803C, 0 pop ebp retn 0Ch sub_7F82695E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F826C68 proc near ; CODE XREF: sub_7F82695E+183p ; sub_7F82695E+205p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h push ebx lea eax, [ebp+var_4] mov [ebp+var_8], 46534180h push esi lea ecx, [ebp+var_8] push edi push eax xor edi, edi push edi mov [ebp+var_C], edi push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, edi mov esi, eax jnz loc_7F826D1E push edi push [ebp+arg_4] push [ebp+var_4] call sub_7F8194ED mov ebx, [ebp+arg_8] mov ecx, [ebx+4] cmp cl, 83h jnz short loc_7F826CB6 and word ptr [ebx], 7FFFh jmp short loc_7F826CC4 ; --------------------------------------------------------------------------- loc_7F826CB6: ; CODE XREF: sub_7F826C68+45j test ecx, 0FFFFFF00h mov di, [ebx+0Ah] jz short loc_7F826CC4 inc di loc_7F826CC4: ; CODE XREF: sub_7F826C68+4Cj ; sub_7F826C68+58j lea ecx, [ebp+var_10] lea edx, [ebp+var_8] mov [ebp+var_10], 4 push ecx push edx movsx ecx, di shl ecx, 2 push ecx push eax push [ebp+var_4] call sub_7F818D47 mov esi, eax xor eax, eax test esi, esi jz short loc_7F826D02 cmp esi, 1014h jnz short loc_7F826D1E xor esi, esi mov [ebp+var_8], eax mov [ebp+var_C], 1 or byte ptr [ebx], 3 loc_7F826D02: ; CODE XREF: sub_7F826C68+81j mov [ebx+0Ah], di mov eax, [ebp+var_8] push ebx mov [ebx+4], eax push [ebp+arg_4] mov word ptr [ebx+8], 0 push [ebp+arg_0] call sub_7F826833 loc_7F826D1E: ; CODE XREF: sub_7F826C68+2Aj ; sub_7F826C68+89j cmp [ebp+var_4], 0 jz short loc_7F826D2F push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C loc_7F826D2F: ; CODE XREF: sub_7F826C68+BAj mov ax, word_7F837804 sub word_7F838028, ax mov eax, esi test esi, esi jnz short loc_7F826D53 cmp [ebp+var_C], 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, 1009h loc_7F826D53: ; CODE XREF: sub_7F826C68+D8j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F826C68 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F826D5C proc near ; CODE XREF: sub_7F82695E+1B1p var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, dword_7F83803C mov ebp, esp sub esp, 24h mov word ptr [ebp+var_4+2], 1 push ebx push esi push edi xor ebx, ebx mov edi, [eax] lea ecx, [ebp+var_C] mov eax, [ebp+arg_8] push ecx add eax, 8 push offset ReturnedString push ebx mov [ebp+var_8], ebx mov [ebp+var_C], 220h mov [ebp+var_1C], eax mov ax, [eax] push eax push dword_7F838038 call sub_7F818D47 cmp eax, 1014h mov esi, eax jnz short loc_7F826DB2 cmp [ebp+var_C], ebx jbe short loc_7F826DB2 xor esi, esi jmp short loc_7F826DBA ; --------------------------------------------------------------------------- loc_7F826DB2: ; CODE XREF: sub_7F826D5C+4Bj ; sub_7F826D5C+50j test esi, esi jnz loc_7F82722C loc_7F826DBA: ; CODE XREF: sub_7F826D5C+54j mov eax, [ebp+var_C] sub eax, 1Bh push eax ; cchLength mov eax, offset sz push eax ; lpsz push eax ; int call sub_7F8176EB mov ecx, [ebp+arg_8] cmp byte ptr [ecx+4], 83h jnz short loc_7F826E13 mov eax, dword_7F8367EF push eax mov eax, dword_7F838044 shl eax, 2 push eax push dword_7F838040 call sub_7F82A419 test eax, eax jnz short loc_7F826E13 mov word ptr [ebp+var_4+2], 0 mov ax, word_7F837810 sub ax, word_7F837808 add word_7F838028, ax jmp loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F826E13: ; CODE XREF: sub_7F826D5C+78j ; sub_7F826D5C+96j movzx eax, word ptr [edi] add eax, edi mov [ebp+var_18], eax mov ecx, [eax] mov [ebp+var_14], ecx cmp ecx, 0FFFFFFFFh jz loc_7F8271C8 loc_7F826E29: ; CODE XREF: sub_7F826D5C+44Ej mov eax, [ebp+var_18] movzx ecx, word ptr [eax+4] movzx eax, word ptr [eax-2] lea ebx, [edi+ecx+6] sub eax, ecx mov [ebp+var_C], eax movzx eax, word ptr [ebp+var_14] test eax, eax jz loc_7F826F0F cmp eax, 8000h jz loc_7F826F2B cmp eax, 8004h jz loc_7F826F6B cmp eax, 8007h jz loc_7F826FAB cmp eax, 8008h jz loc_7F826FC7 cmp eax, 800Dh jz loc_7F826FE4 loc_7F826E80: ; CODE XREF: sub_7F826D5C+1D6j ; sub_7F826D5C+204j ... cmp [ebp+var_8], 0 jnz loc_7F827001 mov eax, [ebp+var_1C] mov ax, [eax] push eax push dword_7F838038 call sub_7F819508 lea ecx, [ebp+var_8] mov [ebp+var_24], eax push ecx lea eax, [ebp+var_24] push 0 push eax push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F8271B2 mov ax, word_7F83780C sub word_7F838028, ax movzx eax, word ptr [edi+2] movzx ecx, word ptr [edi+4] add eax, ecx lea edx, [eax+edi+0Ch] mov [ebp+var_10], edx cmp [ebp+var_18], edx jb loc_7F827012 loc_7F826EE2: ; CODE XREF: sub_7F826D5C+1ACj push 0 mov eax, [ebp+var_10] push dword ptr [eax] push [ebp+var_8] call sub_7F8194ED mov word ptr [ebp+var_4], ax test ax, ax jl loc_7F8271C2 add [ebp+var_10], 6 mov eax, [ebp+var_18] cmp eax, [ebp+var_10] jnb short loc_7F826EE2 jmp loc_7F827012 ; --------------------------------------------------------------------------- loc_7F826F0F: ; CODE XREF: sub_7F826D5C+E7j mov eax, dword_7F8367EB push eax push [ebp+var_C] push ebx call sub_7F82A419 test eax, eax jnz loc_7F82719B jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F826F2B: ; CODE XREF: sub_7F826D5C+F2j test byte_7F8367E6, 40h jnz loc_7F826E80 push offset sz ; lpString call ds:lstrlenA push 0 ; int mov [ebp+var_10], eax push eax ; __int16 push offset sz ; int push ebx ; lpString call sub_7F827EC0 test eax, eax jnz loc_7F82719B cmp [ebp+var_10], 7Fh jnb loc_7F826E80 jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F826F6B: ; CODE XREF: sub_7F826D5C+FDj push offset sz ; lpString call ds:lstrlenA add eax, offset unk_7F8367F4 push eax ; lpString mov [ebp+var_20], eax call ds:lstrlenA push 0 ; int mov [ebp+var_10], eax push eax ; __int16 push [ebp+var_20] ; int push ebx ; lpString call sub_7F827EC0 test eax, eax jnz loc_7F82719B cmp [ebp+var_10], 7Fh jnb loc_7F826E80 jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F826FAB: ; CODE XREF: sub_7F826D5C+108j mov al, byte_7F8367E6 push eax push [ebp+var_C] push ebx call sub_7F82A3C9 test eax, eax jnz loc_7F82719B jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F826FC7: ; CODE XREF: sub_7F826D5C+113j mov ax, word_7F8367E7 push eax push [ebp+var_C] push ebx call sub_7F82A3EF test eax, eax jnz loc_7F82719B jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F826FE4: ; CODE XREF: sub_7F826D5C+11Ej mov ax, word_7F8367E9 push eax push [ebp+var_C] push ebx call sub_7F82A3EF test eax, eax jnz loc_7F82719B jmp loc_7F8271C2 ; --------------------------------------------------------------------------- loc_7F827001: ; CODE XREF: sub_7F826D5C+128j push 0 push [ebp+var_14] push [ebp+var_8] call sub_7F8194ED mov word ptr [ebp+var_4], ax loc_7F827012: ; CODE XREF: sub_7F826D5C+180j ; sub_7F826D5C+1AEj mov eax, [ebp+var_14] shr eax, 10h movzx eax, ax cmp eax, 8 ; switch 9 cases ja short loc_7F827027 ; jumptable 7F827020 default case jmp ds:off_7F827279[eax*4] ; switch jump ; --------------------------------------------------------------------------- loc_7F827027: ; CODE XREF: sub_7F826D5C+2C2j ; sub_7F826D5C+2C4j ; DATA XREF: ... lea eax, [ebp+var_4+2] ; jumptable 7F827020 default case push eax push [ebp+var_4] push [ebp+var_8] push [ebp+var_C] push ebx call sub_7F8283BC mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jnz loc_7F82719B jmp loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F827054: ; CODE XREF: sub_7F826D5C+2C4j ; DATA XREF: .text:off_7F827279o lea eax, [ebp+var_4+2] ; jumptable 7F827020 case 0 push eax ; int push [ebp+var_4] ; int push [ebp+var_8] ; int push ebx ; lpString call sub_7F82826A mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jnz loc_7F82719B cmp [ebp+var_14], 8001h jnz short loc_7F8270F1 push 0 push 8002h push [ebp+var_8] call sub_7F8194ED mov word ptr [ebp+var_4], ax test ax, ax jl short loc_7F8270B4 lea eax, [ebp+var_4+2] push eax ; int push [ebp+var_4] ; int push [ebp+var_8] ; int push ebx ; lpString call sub_7F82826A mov esi, eax test esi, esi jnz loc_7F82722C loc_7F8270B4: ; CODE XREF: sub_7F826D5C+33Cj cmp word ptr [ebp+var_4+2], 0 jnz loc_7F82719B push 0 push 8003h push [ebp+var_8] call sub_7F8194ED mov word ptr [ebp+var_4], ax test ax, ax jl short loc_7F8270F1 lea eax, [ebp+var_4+2] push eax ; int push [ebp+var_4] ; int push [ebp+var_8] ; int push ebx ; lpString call sub_7F82826A mov esi, eax test esi, esi jnz loc_7F82722C loc_7F8270F1: ; CODE XREF: sub_7F826D5C+324j ; sub_7F826D5C+379j cmp word ptr [ebp+var_4+2], 0 jnz loc_7F82719B jmp loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F827101: ; CODE XREF: sub_7F826D5C+2C4j ; DATA XREF: .text:off_7F827279o lea eax, [ebp+var_4+2] ; jumptable 7F827020 cases 1,2 push eax ; int push 0 ; int push 0 ; int push [ebp+var_4] ; int push [ebp+var_8] ; int push ebx ; lpString call sub_7F827F63 mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jnz short loc_7F82719B jmp loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F82712B: ; CODE XREF: sub_7F826D5C+2C4j ; DATA XREF: .text:off_7F827279o lea eax, [ebp+var_4+2] ; jumptable 7F827020 case 3 push eax push [ebp+var_4] push [ebp+var_8] push [ebp+var_C] push ebx call sub_7F828018 mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jnz short loc_7F82719B jmp short loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F827151: ; CODE XREF: sub_7F826D5C+2C4j ; DATA XREF: .text:off_7F827279o lea eax, [ebp+var_4+2] ; jumptable 7F827020 cases 4,7 push eax push [ebp+var_4] push [ebp+var_8] push [ebp+var_C] push ebx call sub_7F828107 mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jnz short loc_7F82719B jmp short loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F827177: ; CODE XREF: sub_7F826D5C+2C4j ; DATA XREF: .text:off_7F827279o lea eax, [ebp+var_4+2] ; jumptable 7F827020 cases 5,8 push eax push [ebp+var_4] push [ebp+var_8] push [ebp+var_C] push ebx call sub_7F8281B9 mov esi, eax test esi, esi jnz loc_7F82722C cmp word ptr [ebp+var_4+2], 0 jz short loc_7F8271C8 loc_7F82719B: ; CODE XREF: sub_7F826D5C+1C4j ; sub_7F826D5C+1FAj ... sub [ebp+var_18], 6 mov eax, [ebp+var_18] mov ecx, [eax] mov [ebp+var_14], ecx cmp ecx, 0FFFFFFFFh jnz loc_7F826E29 jmp short loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F8271B2: ; CODE XREF: sub_7F826D5C+159j cmp esi, 1001h jnz short loc_7F82722C xor esi, esi mov word ptr [ebp+var_4+2], si jmp short loc_7F8271C8 ; --------------------------------------------------------------------------- loc_7F8271C2: ; CODE XREF: sub_7F826D5C+19Cj ; sub_7F826D5C+1CAj ... mov word ptr [ebp+var_4+2], 0 loc_7F8271C8: ; CODE XREF: sub_7F826D5C+B2j ; sub_7F826D5C+C7j ... mov eax, [ebp+arg_8] cmp byte ptr [eax+4], 83h jnz short loc_7F8271DE cmp word ptr [ebp+var_4+2], 1 sbb eax, eax neg eax mov word ptr [ebp+var_4+2], ax loc_7F8271DE: ; CODE XREF: sub_7F826D5C+473j cmp word ptr [ebp+var_4+2], 0 jz short loc_7F82722C mov eax, [ebp+var_1C] mov ax, [eax] push eax push dword_7F838038 call sub_7F819508 movsx ecx, word_7F838020 mov dx, word_7F837814 mov dword_7F837820[ecx*4], eax inc word_7F838020 cmp word_7F838020, dx jl short loc_7F82722C push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F82729D mov esi, eax loc_7F82722C: ; CODE XREF: sub_7F826D5C+58j ; sub_7F826D5C+2E2j ... mov eax, [ebp+var_1C] mov di, [eax] inc di mov [eax], di push dword_7F838038 call sub_7F8198FC cmp ax, di jg short loc_7F827250 test esi, esi jnz short loc_7F827250 mov esi, 1005h loc_7F827250: ; CODE XREF: sub_7F826D5C+4E9j ; sub_7F826D5C+4EDj cmp [ebp+var_8], 0 jz short loc_7F827261 push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F827261: ; CODE XREF: sub_7F826D5C+4F8j mov ax, word_7F837808 pop edi sub word_7F838028, ax mov eax, esi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F826D5C endp ; --------------------------------------------------------------------------- off_7F827279 dd offset loc_7F827054 ; DATA XREF: sub_7F826D5C+2C4r dd offset loc_7F827101 ; jump table for switch statement dd offset loc_7F827101 dd offset loc_7F82712B dd offset loc_7F827151 dd offset loc_7F827177 dd offset loc_7F827027 dd offset loc_7F827151 dd offset loc_7F827177 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82729D proc near ; CODE XREF: sub_7F8261A0+2EFp ; sub_7F8261A0+352p ... var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 cmp word_7F838020, 0 push esi push edi mov edi, offset dword_7F837820 jg short loc_7F8272BB xor eax, eax jmp loc_7F8273A7 ; --------------------------------------------------------------------------- loc_7F8272BB: ; CODE XREF: sub_7F82729D+15j mov esi, [ebp+arg_8] add esi, 4 cmp byte ptr [esi], 83h jnz short loc_7F827326 mov ax, word_7F837800 sub word_7F838028, ax loc_7F8272D3: ; CODE XREF: sub_7F82729D+85j mov ax, word_7F838020 mov [ebp+var_2], ax lea eax, [ebp+var_2] push eax push edi push dword ptr [esi] push [ebp+arg_0] call sub_7F81BF33 test eax, eax jz short loc_7F82730F cmp eax, 1004h jz short loc_7F827302 cmp eax, 1008h jnz loc_7F82739E loc_7F827302: ; CODE XREF: sub_7F82729D+58j inc [ebp+var_2] xor eax, eax movsx ecx, [ebp+var_2] lea edi, [edi+ecx*4] loc_7F82730F: ; CODE XREF: sub_7F82729D+51j mov cx, [ebp+var_2] sub word_7F838020, cx cmp word_7F838020, 0 jg short loc_7F8272D3 jmp short loc_7F82739E ; --------------------------------------------------------------------------- loc_7F827326: ; CODE XREF: sub_7F82729D+27j mov ax, word_7F8377FC push 0 sub word_7F838028, ax push 0 push 0 lea ecx, [ebp+var_8] push ecx push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 test eax, eax jnz short loc_7F82739E loc_7F82734C: ; CODE XREF: sub_7F82729D+FFj mov ax, word_7F838020 push 0 mov [ebp+var_2], ax lea eax, [ebp+var_2] push eax push edi push [ebp+var_8] push dword ptr [esi] push [ebp+arg_0] call sub_7F81C56F test eax, eax jz short loc_7F827389 cmp eax, 1004h jz short loc_7F82737C cmp eax, 1008h jnz short loc_7F82739E loc_7F82737C: ; CODE XREF: sub_7F82729D+D6j inc [ebp+var_2] xor eax, eax movsx ecx, [ebp+var_2] lea edi, [edi+ecx*4] loc_7F827389: ; CODE XREF: sub_7F82729D+CFj mov cx, [ebp+var_2] sub word_7F838020, cx cmp word_7F838020, 0 jg short loc_7F82734C loc_7F82739E: ; CODE XREF: sub_7F82729D+5Fj ; sub_7F82729D+87j ... mov word_7F838020, 0 loc_7F8273A7: ; CODE XREF: sub_7F82729D+19j pop edi pop esi mov esp, ebp pop ebp retn 0Ch sub_7F82729D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8273AF proc near ; CODE XREF: sub_7F825C1D+124p var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_A = dword ptr -0Ah var_6 = dword ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 20h push ebx push esi push edi xor ebx, ebx xor edi, edi lea eax, [ebp+var_1C] push eax mov [ebp+var_1C], edi push edi lea ecx, [ebp+var_20] push ecx mov [ebp+var_18], edi push [ebp+arg_0] mov [ebp+var_20], 4D504981h mov [ebp+var_10], edi call sub_7F817E9D cmp eax, ebx mov esi, eax jnz loc_7F8276D1 lea eax, [ebp+var_18] lea ecx, [ebp+var_20] mov [ebp+var_20], 53464180h push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, ebx mov esi, eax jnz loc_7F8276D1 lea eax, [ebp+var_10] lea ecx, [ebp+var_20] mov [ebp+var_20], 46534180h push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, ebx mov esi, eax jnz loc_7F8276D1 cmp [ebp+arg_8], 0FFFFFFFFh jnz short loc_7F82743D mov word ptr [ebp+var_6+2], di mov [ebp+var_2], di jmp short loc_7F8274AE ; --------------------------------------------------------------------------- loc_7F82743D: ; CODE XREF: sub_7F8273AF+82j cmp [ebp+arg_8], 0 jz short loc_7F82749C lea eax, [ebp+var_A] lea ecx, [ebp+var_6+2] push eax push 0 push ecx push [ebp+arg_8] push [ebp+var_1C] call sub_7F81B5AF mov esi, eax test esi, esi jz short loc_7F827474 cmp esi, 1004h jnz loc_7F8276D1 mov esi, 1009h jmp loc_7F8276D1 ; --------------------------------------------------------------------------- loc_7F827474: ; CODE XREF: sub_7F8273AF+ADj lea eax, [ebp+var_A+2] push eax push [ebp+var_A] push [ebp+var_6+2] push [ebp+var_1C] call sub_7F81B64C mov esi, eax test esi, esi jnz loc_7F8276D1 mov ax, word ptr [ebp+var_A+2] sub ax, word ptr [ebp+var_6+2] inc ax jmp short loc_7F8274AA ; --------------------------------------------------------------------------- loc_7F82749C: ; CODE XREF: sub_7F8273AF+92j push [ebp+var_1C] mov word ptr [ebp+var_6+2], 0 call sub_7F8198FC loc_7F8274AA: ; CODE XREF: sub_7F8273AF+EBj mov [ebp+var_2], ax loc_7F8274AE: ; CODE XREF: sub_7F8273AF+8Cj cmp [ebp+var_2], 0 jle short loc_7F82752F movsx eax, [ebp+var_2] shl eax, 2 push 0 push eax call sub_7F82F03B mov edi, eax test edi, edi jnz short loc_7F8274D4 mov esi, 400h jmp loc_7F8276D1 ; --------------------------------------------------------------------------- loc_7F8274D4: ; CODE XREF: sub_7F8273AF+119j push edi lea eax, [ebp+var_2] push eax push [ebp+var_6+2] push [ebp+var_1C] call sub_7F819938 mov esi, eax test esi, esi jnz loc_7F8276D1 cmp [ebp+arg_8], 0 jnz short loc_7F82752F movsx eax, [ebp+var_2] shl eax, 2 push 74735782h push eax push edi call sub_7F82A419 test eax, eax jz short loc_7F82752F dec [ebp+var_2] mov ecx, edi sub ecx, eax movsx edx, [ebp+var_2] lea ecx, [ecx+edx*4] mov [ebp+var_14], ecx test ecx, ecx jz short loc_7F82752F push ecx lea edx, [eax+4] push edx push eax call sub_7F82FCE0 add esp, 0Ch loc_7F82752F: ; CODE XREF: sub_7F8273AF+104j ; sub_7F8273AF+143j ... push 0 push [ebp+arg_4] push [ebp+var_10] call sub_7F8194ED mov word ptr [ebp+var_6+2], ax test ax, ax jl short loc_7F827591 push [ebp+var_6+2] push [ebp+var_10] call sub_7F81990D push 0 mov [ebp+var_14], eax shr eax, 2 push [ebp+var_14] mov word ptr [ebp+var_6], ax call sub_7F82F03B mov ebx, eax test ebx, ebx jnz short loc_7F827574 mov esi, 400h jmp loc_7F8276D1 ; --------------------------------------------------------------------------- loc_7F827574: ; CODE XREF: sub_7F8273AF+1B9j lea eax, [ebp+var_14] push eax push ebx push 0 push [ebp+var_6+2] push [ebp+var_10] call sub_7F818D47 mov esi, eax test esi, esi jz short loc_7F8275C2 jmp loc_7F8276D1 ; --------------------------------------------------------------------------- loc_7F827591: ; CODE XREF: sub_7F8273AF+194j mov word ptr [ebp+var_6], 0 cmp [ebp+var_2], 0 jle short loc_7F82760B movsx eax, [ebp+var_2] shl eax, 2 lea edx, [ebp+var_6+2] push eax mov [ebp+var_14], eax push [ebp+arg_4] push edx push [ebp+var_10] call sub_7F818B75 mov esi, eax test esi, esi jnz loc_7F8276D1 loc_7F8275C2: ; CODE XREF: sub_7F8273AF+1DBj cmp [ebp+var_2], 0 jle short loc_7F82760B movsx eax, [ebp+var_2] shl eax, 2 cmp eax, [ebp+var_14] jz short loc_7F8275EE push eax mov [ebp+var_14], eax push [ebp+var_6+2] push [ebp+var_10] call sub_7F81851E mov esi, eax test esi, esi jnz loc_7F8276D1 loc_7F8275EE: ; CODE XREF: sub_7F8273AF+224j push [ebp+var_14] push edi push 0 lea ecx, [ebp+var_6+2] push ecx push [ebp+var_10] call sub_7F818DC7 mov esi, eax test esi, esi jz short loc_7F827627 jmp loc_7F8276D1 ; --------------------------------------------------------------------------- loc_7F82760B: ; CODE XREF: sub_7F8273AF+1EDj ; sub_7F8273AF+218j cmp word ptr [ebp+var_6+2], 0 jl short loc_7F82761F push [ebp+var_6+2] push [ebp+var_10] call sub_7F818AE7 mov esi, eax loc_7F82761F: ; CODE XREF: sub_7F8273AF+261j test esi, esi jnz loc_7F8276D1 loc_7F827627: ; CODE XREF: sub_7F8273AF+255j cmp [ebp+var_2], 0 jz short loc_7F827637 push dword ptr [ebp+var_2] push edi call sub_7F827737 loc_7F827637: ; CODE XREF: sub_7F8273AF+27Dj cmp word ptr [ebp+var_6], 0 jz short loc_7F827647 push [ebp+var_6] push ebx call sub_7F827737 loc_7F827647: ; CODE XREF: sub_7F8273AF+28Dj lea eax, [ebp+var_2] lea ecx, [ebp+var_6] push eax push edi push ecx push ebx call sub_7F8277C1 cmp word ptr [ebp+var_6], 0 jle short loc_7F827676 push 0 push 1 push [ebp+var_18] push [ebp+var_6] push ebx push [ebp+arg_4] call sub_7F82786A mov esi, eax test esi, esi jnz short loc_7F8276D1 loc_7F827676: ; CODE XREF: sub_7F8273AF+2ACj cmp [ebp+var_2], 0 jle short loc_7F827697 push 1 lea ecx, [ebp+arg_4] push [ebp+var_18] push dword ptr [ebp+var_2] push edi push 1 push ecx call sub_7F8279C8 mov esi, eax test esi, esi jnz short loc_7F8276D1 loc_7F827697: ; CODE XREF: sub_7F8273AF+2CCj cmp [ebp+arg_8], 0 jnz short loc_7F8276B9 push 1 lea ecx, [ebp+arg_8] push [ebp+var_18] push 1 push ecx lea edx, [ebp+arg_4] push 1 push edx call sub_7F8279C8 mov esi, eax test esi, esi jnz short loc_7F8276D1 loc_7F8276B9: ; CODE XREF: sub_7F8273AF+2ECj push [ebp+var_18] call sub_7F8178C4 mov esi, eax test esi, esi jnz short loc_7F8276D1 push [ebp+var_10] call sub_7F8178C4 mov esi, eax loc_7F8276D1: ; CODE XREF: sub_7F8273AF+32j ; sub_7F8273AF+55j ... cmp [ebp+var_1C], 0 jz short loc_7F8276E2 push 0 lea eax, [ebp+var_1C] push eax call sub_7F81813C loc_7F8276E2: ; CODE XREF: sub_7F8273AF+326j test edi, edi jz short loc_7F8276EC push edi call sub_7F82F149 loc_7F8276EC: ; CODE XREF: sub_7F8273AF+335j test ebx, ebx jz short loc_7F8276F6 push ebx call sub_7F82F149 loc_7F8276F6: ; CODE XREF: sub_7F8273AF+33Fj test esi, esi jz short loc_7F82771C cmp [ebp+var_18], 0 jz short loc_7F82770B push 0 lea eax, [ebp+var_18] push eax call sub_7F81813C loc_7F82770B: ; CODE XREF: sub_7F8273AF+34Fj cmp [ebp+var_10], 0 jz short loc_7F82771C push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F82771C: ; CODE XREF: sub_7F8273AF+349j ; sub_7F8273AF+360j mov ecx, [ebp+var_18] mov eax, [ebp+arg_C] mov edx, [ebp+var_10] pop edi mov [eax], ecx mov ecx, [ebp+arg_10] mov eax, esi pop esi pop ebx mov [ecx], edx mov esp, ebp pop ebp retn 14h sub_7F8273AF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F827737 proc near ; CODE XREF: sub_7F8273AF+283p ; sub_7F8273AF+293p var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch push ebp dec [esp+arg_4] mov ebp, esp sub esp, 8 mov [ebp+var_2], 1 cmp [ebp+arg_4], 0 push ebx push esi push edi jle short loc_7F8277B8 mov esi, [ebp+arg_0] loc_7F827755: ; CODE XREF: sub_7F827737+7Fj movsx eax, [ebp+var_2] mov cx, [ebp+var_2] mov edi, [esi+eax*4] xor ax, ax cmp cx, ax jle short loc_7F827787 loc_7F827768: ; CODE XREF: sub_7F827737+4Ej movsx edx, cx movsx ebx, ax add edx, ebx sar edx, 1 movsx ebx, dx cmp [esi+ebx*4], edi jbe short loc_7F82777F mov cx, dx jmp short loc_7F827782 ; --------------------------------------------------------------------------- loc_7F82777F: ; CODE XREF: sub_7F827737+41j lea eax, [edx+1] loc_7F827782: ; CODE XREF: sub_7F827737+46j cmp cx, ax jg short loc_7F827768 loc_7F827787: ; CODE XREF: sub_7F827737+2Fj cmp ax, [ebp+var_2] jz short loc_7F8277AE movsx ebx, ax movsx eax, [ebp+var_2] sub eax, ebx lea ecx, [esi+ebx*4+4] shl eax, 2 push eax lea eax, [esi+ebx*4] push eax push ecx call sub_7F82FCE0 add esp, 0Ch mov [esi+ebx*4], edi loc_7F8277AE: ; CODE XREF: sub_7F827737+54j inc [ebp+var_2] dec [ebp+arg_4] jnz short loc_7F827755 loc_7F8277B8: ; CODE XREF: sub_7F827737+19j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F827737 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8277C1 proc near ; CODE XREF: sub_7F8273AF+2A2p ; sub_7F829147+BCp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ecx, [esp+arg_C] mov cx, [ecx] mov ebp, esp push ebx push esi test cx, cx push edi mov edi, [ebp+arg_0] mov esi, [ebp+arg_8] mov eax, [ebp+arg_4] mov dx, [eax] jle short loc_7F82782F loc_7F8277DF: ; CODE XREF: sub_7F8277C1+5Aj test dx, dx jle short loc_7F82781D mov eax, [ebp+arg_8] mov ebx, [eax] mov eax, [ebp+arg_0] mov eax, [eax] cmp ebx, eax jbe short loc_7F8277FF add [ebp+arg_0], 4 dec dx mov [edi], eax add edi, 4 jmp short loc_7F827818 ; --------------------------------------------------------------------------- loc_7F8277FF: ; CODE XREF: sub_7F8277C1+2Fj jnb short loc_7F82780C add [ebp+arg_8], 4 mov [esi], ebx add esi, 4 jmp short loc_7F827816 ; --------------------------------------------------------------------------- loc_7F82780C: ; CODE XREF: sub_7F8277C1:loc_7F8277FFj add [ebp+arg_0], 4 dec dx add [ebp+arg_8], 4 loc_7F827816: ; CODE XREF: sub_7F8277C1+49j dec cx loc_7F827818: ; CODE XREF: sub_7F8277C1+3Cj test cx, cx jg short loc_7F8277DF loc_7F82781D: ; CODE XREF: sub_7F8277C1+21j test cx, cx jle short loc_7F82782F movsx eax, cx shl eax, 2 push eax push [ebp+arg_8] push esi jmp short loc_7F82783F ; --------------------------------------------------------------------------- loc_7F82782F: ; CODE XREF: sub_7F8277C1+1Cj ; sub_7F8277C1+5Fj test dx, dx jle short loc_7F827847 movsx eax, dx shl eax, 2 push eax push [ebp+arg_0] push edi loc_7F82783F: ; CODE XREF: sub_7F8277C1+6Cj call sub_7F82FCE0 add esp, 0Ch loc_7F827847: ; CODE XREF: sub_7F8277C1+71j mov ecx, [ebp+arg_0] mov eax, [ebp+arg_4] sub ecx, edi sar ecx, 2 pop edi sub [eax], cx mov eax, [ebp+arg_8] sub eax, esi mov ecx, [ebp+arg_C] sar eax, 2 pop esi sub [ecx], ax pop ebx pop ebp retn 10h sub_7F8277C1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82786A proc near ; CODE XREF: sub_7F8273AF+2BCp ; sub_7F828680+12Ep var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = byte ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 0Ch mov [ebp+var_C], 20h push ebx push esi push edi xor ebx, ebx push ebx push 20h call sub_7F82F18D cmp eax, ebx mov esi, eax jnz short loc_7F827894 mov eax, 400h jmp loc_7F8279BF ; --------------------------------------------------------------------------- loc_7F827894: ; CODE XREF: sub_7F82786A+1Ej mov ax, [ebp+arg_8] mov edi, [esi] dec [ebp+arg_8] test ax, ax jle loc_7F8279B3 loc_7F8278A7: ; CODE XREF: sub_7F82786A+13Cj push 0 mov eax, [ebp+arg_4] push dword ptr [eax] push [ebp+arg_C] call sub_7F8194ED mov word ptr [ebp+var_4], ax test ax, ax jl loc_7F82799B push [ebp+var_4] push [ebp+arg_C] call sub_7F81990D and al, 0FCh mov [ebp+var_8], eax cmp eax, [ebp+var_C] jbe short loc_7F8278F0 push 0 mov [ebp+var_C], eax push eax push esi call sub_7F82F24A test eax, eax jz loc_7F8279AE mov esi, eax mov edi, [eax] loc_7F8278F0: ; CODE XREF: sub_7F82786A+6Cj lea eax, [ebp+var_8] push eax push edi push 0 push [ebp+var_4] push [ebp+arg_C] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F8279B3 mov eax, [ebp+var_8] shr eax, 2 dec ax mov word ptr [ebp+var_4+2], ax js short loc_7F827983 loc_7F82791A: ; CODE XREF: sub_7F82786A+C0j movsx ecx, word ptr [ebp+var_4+2] mov eax, [ebp+arg_0] cmp [edi+ecx*4], eax jz short loc_7F82792E dec word ptr [ebp+var_4+2] jns short loc_7F82791A jmp short loc_7F827983 ; --------------------------------------------------------------------------- loc_7F82792E: ; CODE XREF: sub_7F82786A+BAj sub [ebp+var_8], 4 movsx eax, word ptr [ebp+var_4+2] shl eax, 2 cmp eax, [ebp+var_8] jz short loc_7F827954 lea edx, [edi+eax] mov ecx, [ebp+var_8] sub ecx, eax lea eax, [edx+4] push ecx push eax push edx call sub_7F82FCE0 add esp, 0Ch loc_7F827954: ; CODE XREF: sub_7F82786A+D2j cmp [ebp+var_8], 0 jnz short loc_7F82796D test [ebp+arg_10], 1 jz short loc_7F82796D push [ebp+var_4] push [ebp+arg_C] call sub_7F818AE7 jmp short loc_7F82797D ; --------------------------------------------------------------------------- loc_7F82796D: ; CODE XREF: sub_7F82786A+EEj ; sub_7F82786A+F4j push [ebp+var_8] push edi lea ecx, [ebp+var_4] push ecx push [ebp+arg_C] call sub_7F818E95 loc_7F82797D: ; CODE XREF: sub_7F82786A+101j mov ebx, eax test ebx, ebx jnz short loc_7F8279B3 loc_7F827983: ; CODE XREF: sub_7F82786A+AEj ; sub_7F82786A+C2j cmp [ebp+arg_14], 0 jz short loc_7F827997 mov cx, word ptr [ebp+var_4+2] mov eax, [ebp+arg_14] add [ebp+arg_14], 2 mov [eax], cx loc_7F827997: ; CODE XREF: sub_7F82786A+11Dj add [ebp+arg_4], 4 loc_7F82799B: ; CODE XREF: sub_7F82786A+53j mov ax, [ebp+arg_8] dec [ebp+arg_8] test ax, ax jg loc_7F8278A7 jmp short loc_7F8279B3 ; --------------------------------------------------------------------------- loc_7F8279AE: ; CODE XREF: sub_7F82786A+7Cj mov ebx, 400h loc_7F8279B3: ; CODE XREF: sub_7F82786A+37j ; sub_7F82786A+9Cj ... test esi, esi jz short loc_7F8279BD push esi call sub_7F82F1E1 loc_7F8279BD: ; CODE XREF: sub_7F82786A+14Bj mov eax, ebx loc_7F8279BF: ; CODE XREF: sub_7F82786A+25j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F82786A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8279C8 proc near ; CODE XREF: sub_7F8273AF+2DDp ; sub_7F8273AF+2FFp ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h arg_14 = byte ptr 1Ch push ebp mov ebp, esp sub esp, 14h mov [ebp+var_14], 20h push ebx push esi push edi xor esi, esi push esi mov [ebp+var_C], esi push 20h call sub_7F82F18D mov [ebp+var_10], eax cmp eax, esi jnz short loc_7F8279F6 mov eax, 400h jmp loc_7F827B95 ; --------------------------------------------------------------------------- loc_7F8279F6: ; CODE XREF: sub_7F8279C8+22j mov cx, [ebp+arg_C] mov eax, [ebp+var_10] dec [ebp+arg_C] mov esi, [eax] test cx, cx jle loc_7F827B84 loc_7F827A0C: ; CODE XREF: sub_7F8279C8+1ADj push 0 mov eax, [ebp+arg_8] push dword ptr [eax] push [ebp+arg_10] call sub_7F8194ED mov [ebp+var_2], ax test ax, ax jge short loc_7F827A51 movsx eax, [ebp+arg_4] shl eax, 2 mov ecx, [ebp+arg_8] push eax lea eax, [ebp+var_2] push dword ptr [ecx] push eax push [ebp+arg_10] call sub_7F818B75 mov [ebp+var_C], eax test eax, eax jnz loc_7F827B84 mov [ebp+var_8], 0 jmp short loc_7F827A61 ; --------------------------------------------------------------------------- loc_7F827A51: ; CODE XREF: sub_7F8279C8+5Aj push dword ptr [ebp+var_2] push [ebp+arg_10] call sub_7F81990D and al, 0FCh mov [ebp+var_8], eax loc_7F827A61: ; CODE XREF: sub_7F8279C8+87j movsx eax, [ebp+arg_4] lea edi, ds:0[eax*4] mov eax, [ebp+var_8] add eax, edi cmp eax, [ebp+var_14] jbe short loc_7F827A91 push 0 mov [ebp+var_14], eax push eax push [ebp+var_10] call sub_7F82F24A test eax, eax jz loc_7F827B7D mov esi, [eax] mov [ebp+var_10], eax loc_7F827A91: ; CODE XREF: sub_7F8279C8+ACj cmp [ebp+var_8], 0 jz short loc_7F827AB4 lea eax, [ebp+var_8] push eax push esi push 0 push dword ptr [ebp+var_2] push [ebp+arg_10] call sub_7F818D47 mov [ebp+var_C], eax test eax, eax jnz loc_7F827B84 loc_7F827AB4: ; CODE XREF: sub_7F8279C8+CDj test [ebp+arg_14], 1 jz short loc_7F827B20 mov ax, [ebp+arg_4] mov edi, [ebp+arg_0] mov [ebp+var_4], ax test ax, ax jle loc_7F827B4F loc_7F827ACE: ; CODE XREF: sub_7F8279C8+154j mov ecx, [ebp+var_8] mov ebx, esi shr ecx, 2 test cx, cx jle short loc_7F827B08 mov eax, [edi] loc_7F827ADD: ; CODE XREF: sub_7F8279C8+121j cmp [ebx], eax jnb short loc_7F827AED dec cx add ebx, 4 test cx, cx jg short loc_7F827ADD jmp short loc_7F827AEF ; --------------------------------------------------------------------------- loc_7F827AED: ; CODE XREF: sub_7F8279C8+117j jbe short loc_7F827B66 loc_7F827AEF: ; CODE XREF: sub_7F8279C8+123j test cx, cx jle short loc_7F827B08 movsx eax, cx shl eax, 2 lea ecx, [ebx+4] push eax push ebx push ecx call sub_7F82FCE0 add esp, 0Ch loc_7F827B08: ; CODE XREF: sub_7F8279C8+111j ; sub_7F8279C8+12Aj dec [ebp+var_4] mov eax, [edi] add edi, 4 mov [ebx], eax add [ebp+var_8], 4 cmp [ebp+var_4], 0 jg short loc_7F827ACE jmp short loc_7F827B4F ; --------------------------------------------------------------------------- loc_7F827B20: ; CODE XREF: sub_7F8279C8+F0j test [ebp+arg_14], 2 jz short loc_7F827B2D mov ebx, [ebp+var_8] add ebx, esi jmp short loc_7F827B3F ; --------------------------------------------------------------------------- loc_7F827B2D: ; CODE XREF: sub_7F8279C8+15Cj mov ebx, esi lea ecx, [edi+esi] push [ebp+var_8] push esi push ecx call sub_7F82FCE0 add esp, 0Ch loc_7F827B3F: ; CODE XREF: sub_7F8279C8+163j push edi add [ebp+var_8], edi push [ebp+arg_0] push ebx call sub_7F82FCE0 add esp, 0Ch loc_7F827B4F: ; CODE XREF: sub_7F8279C8+100j ; sub_7F8279C8+156j push [ebp+var_8] push esi lea ecx, [ebp+var_2] push ecx push [ebp+arg_10] call sub_7F818E95 mov [ebp+var_C], eax test eax, eax jnz short loc_7F827B84 loc_7F827B66: ; CODE XREF: sub_7F8279C8:loc_7F827AEDj mov ax, [ebp+arg_C] add [ebp+arg_8], 4 dec [ebp+arg_C] test ax, ax jg loc_7F827A0C jmp short loc_7F827B84 ; --------------------------------------------------------------------------- loc_7F827B7D: ; CODE XREF: sub_7F8279C8+BEj mov [ebp+var_C], 400h loc_7F827B84: ; CODE XREF: sub_7F8279C8+3Ej ; sub_7F8279C8+7Aj ... cmp [ebp+var_10], 0 jz short loc_7F827B92 push [ebp+var_10] call sub_7F82F1E1 loc_7F827B92: ; CODE XREF: sub_7F8279C8+1C0j mov eax, [ebp+var_C] loc_7F827B95: ; CODE XREF: sub_7F8279C8+29j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F8279C8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F827B9E proc near ; CODE XREF: sub_7F825C1D+2Ap var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, 400h mov di, 0FFFFh push 1 push esi call sub_7F816903 mov [ebp+var_8], eax test eax, eax jnz short loc_7F827BC6 mov eax, esi jmp loc_7F827D30 ; --------------------------------------------------------------------------- loc_7F827BC6: ; CODE XREF: sub_7F827B9E+1Fj xor ebx, ebx mov esi, [ebp+arg_0] push ebx push 88FFFh push esi call sub_7F8194ED mov [ebp+var_2], ax cmp ax, bx jge short loc_7F827BE7 mov eax, [ebp+arg_8] mov [eax], ebx jmp short loc_7F827C08 ; --------------------------------------------------------------------------- loc_7F827BE7: ; CODE XREF: sub_7F827B9E+40j mov [ebp+var_C], 4 lea eax, [ebp+var_C] push eax push [ebp+arg_8] push 0 push dword ptr [ebp+var_2] push esi call sub_7F818D47 test eax, eax jnz loc_7F827D30 loc_7F827C08: ; CODE XREF: sub_7F827B9E+47j mov ebx, 0FFFFFFFFh lea eax, [ebp+var_8] push ebx push 80000h push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push ebx lea eax, [ebp+var_8] push 68007h push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push ebx lea eax, [ebp+var_8] push 78008h push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push ebx lea eax, [ebp+var_8] push 4800Dh push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push ebx lea eax, [ebp+var_8] push 18004h push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push ebx lea eax, [ebp+var_8] push 8000h push esi push eax call sub_7F827DE1 test eax, eax jnz loc_7F827D30 push esi call sub_7F8198FC add ax, bx mov [ebp+var_2], ax js short loc_7F827CE2 loc_7F827CAC: ; CODE XREF: sub_7F827B9E+142j push dword ptr [ebp+var_2] push esi call sub_7F819508 movzx ecx, ax cmp ecx, 8000h jg short loc_7F827D3F jz short loc_7F827CDC test ecx, ecx jz loc_7F827D88 loc_7F827CCA: ; CODE XREF: sub_7F827B9E+1AFj ; sub_7F827B9E+1E5j ... push dword ptr [ebp+var_2] push eax push esi lea ecx, [ebp+var_8] push ecx call sub_7F827DE1 test eax, eax jnz short loc_7F827D30 loc_7F827CDC: ; CODE XREF: sub_7F827B9E+122j ; sub_7F827B9E+1A7j ... dec [ebp+var_2] jns short loc_7F827CAC loc_7F827CE2: ; CODE XREF: sub_7F827B9E+10Cj test di, di jl short loc_7F827CFB push edi lea eax, [ebp+var_8] push 2800Ch push esi push eax call sub_7F827DE1 test eax, eax jnz short loc_7F827D30 loc_7F827CFB: ; CODE XREF: sub_7F827B9E+147j push 0 push [ebp+var_8] call sub_7F816BFE push eax lea ecx, [ebp+var_2] push 69100h mov [ebp+var_C], eax push ecx push esi call sub_7F818B75 test eax, eax jnz short loc_7F827D30 mov ecx, [ebp+var_8] lea eax, [ebp+var_2] push [ebp+var_C] push dword ptr [ecx] push 0 push eax push esi call sub_7F818DC7 loc_7F827D30: ; CODE XREF: sub_7F827B9E+23j ; sub_7F827B9E+64j ... xor ecx, ecx test eax, eax jz loc_7F827DD0 jmp loc_7F827DD3 ; --------------------------------------------------------------------------- loc_7F827D3F: ; CODE XREF: sub_7F827B9E+120j cmp ecx, 8004h jz short loc_7F827CDC cmp ecx, 8007h jl loc_7F827CCA cmp ecx, 8008h jle short loc_7F827CDC cmp ecx, 800Ch jz short loc_7F827D9C cmp ecx, 800Dh jz loc_7F827CDC cmp ecx, 8FFFh jz loc_7F827CDC cmp ecx, 9100h jz short loc_7F827DA5 jmp loc_7F827CCA ; --------------------------------------------------------------------------- loc_7F827D88: ; CODE XREF: sub_7F827B9E+126j mov ecx, eax shr ecx, 10h cmp cx, 8 jnz loc_7F827CCA jmp loc_7F827CDC ; --------------------------------------------------------------------------- loc_7F827D9C: ; CODE XREF: sub_7F827B9E+1C3j mov di, [ebp+var_2] jmp loc_7F827CDC ; --------------------------------------------------------------------------- loc_7F827DA5: ; CODE XREF: sub_7F827B9E+1E3j push dword ptr [ebp+var_2] push esi call sub_7F818AE7 test eax, eax jnz loc_7F827D30 test di, di jl loc_7F827CDC cmp di, [ebp+var_2] jle loc_7F827CDC dec di jmp loc_7F827CDC ; --------------------------------------------------------------------------- loc_7F827DD0: ; CODE XREF: sub_7F827B9E+196j mov ecx, [ebp+var_8] loc_7F827DD3: ; CODE XREF: sub_7F827B9E+19Cj mov edx, [ebp+arg_4] pop edi pop esi pop ebx mov [edx], ecx mov esp, ebp pop ebp retn 0Ch sub_7F827B9E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F827DE1 proc near ; CODE XREF: sub_7F827B9E+7Ap ; sub_7F827B9E+92p ... var_C = dword ptr -0Ch cchLength = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov esi, [ebp+arg_8] xor edi, edi mov eax, esi shr eax, 10h movzx eax, ax test eax, eax jl short loc_7F827E05 cmp eax, 2 jg short loc_7F827E05 mov edi, 1 loc_7F827E05: ; CODE XREF: sub_7F827DE1+18j ; sub_7F827DE1+1Dj cmp word ptr [ebp+arg_C], 0 jge short loc_7F827E27 push 0 push esi push [ebp+arg_4] call sub_7F8194ED mov word ptr [ebp+arg_C], ax test ax, ax jge short loc_7F827E27 xor eax, eax jmp loc_7F827EB7 ; --------------------------------------------------------------------------- loc_7F827E27: ; CODE XREF: sub_7F827DE1+29j ; sub_7F827DE1+3Dj push [ebp+arg_C] push [ebp+arg_4] call sub_7F81990D mov [ebp+cchLength], eax cmp edi, 1 sbb eax, eax mov ebx, [ebp+arg_0] inc eax add eax, [ebp+cchLength] push eax push 0 push esi push ebx call sub_7F81698C test eax, eax jnz short loc_7F827EB7 mov eax, [ebx] push esi mov ebx, [eax] push ebx call sub_7F816B29 mov [ebp+var_2], ax movzx eax, word ptr [ebx] movsx ecx, [ebp+var_2] imul ecx, 6 sub eax, ecx movzx edx, word ptr [eax+ebx+4] lea eax, [ebp+cchLength] lea esi, [edx+ebx+6] push eax push esi push 0 push [ebp+arg_C] push [ebp+arg_4] call sub_7F818D47 mov [ebp+var_C], eax test eax, eax jnz short loc_7F827EA5 test edi, edi jz short loc_7F827EA5 mov eax, [ebp+cchLength] test edi, edi mov byte ptr [esi+eax], 0 jz short loc_7F827EA5 push [ebp+cchLength] ; cchLength push esi ; lpsz push esi ; int call sub_7F8176EB loc_7F827EA5: ; CODE XREF: sub_7F827DE1+A9j ; sub_7F827DE1+ADj ... cmp [ebp+var_C], 0 jz short loc_7F827EB4 push dword ptr [ebp+var_2] push ebx call sub_7F816A42 loc_7F827EB4: ; CODE XREF: sub_7F827DE1+C8j mov eax, [ebp+var_C] loc_7F827EB7: ; CODE XREF: sub_7F827DE1+41j ; sub_7F827DE1+6Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F827DE1 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F827EC0(LPCSTR lpString, int, __int16, int) sub_7F827EC0 proc near ; CODE XREF: sub_7F826D5C+1F3p ; sub_7F826D5C+233p ... var_4 = dword ptr -4 lpString = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch arg_C = dword ptr 10h sub esp, 4 xor eax, eax push ebx push esi mov esi, [esp+0Ch+arg_C] push edi push ebp test esi, esi jz short loc_7F827ED3 mov [esi], eax loc_7F827ED3: ; CODE XREF: sub_7F827EC0+Fj mov edi, [esp+14h+lpString] cmp byte ptr [edi], 0 jz short loc_7F827F48 loc_7F827EDC: ; CODE XREF: sub_7F827EC0+86j mov dx, [esp+14h+arg_8] mov ebx, [esp+14h+arg_4] loc_7F827EE5: ; CODE XREF: sub_7F827EC0+69j test dx, dx jle short loc_7F827EFB mov al, [edi] loc_7F827EEC: ; CODE XREF: sub_7F827EC0+36j cmp [ebx], al jz short loc_7F827EF8 dec dx inc ebx test dx, dx jg short loc_7F827EEC loc_7F827EF8: ; CODE XREF: sub_7F827EC0+2Ej test dx, dx loc_7F827EFB: ; CODE XREF: sub_7F827EC0+28j jz short loc_7F827F38 mov ax, dx mov ebp, edi mov [esp+14h+var_4], ebx loc_7F827F06: ; CODE XREF: sub_7F827EC0+5Aj inc ebp dec dx inc ebx cmp byte ptr [ebp+0], 0 jz short loc_7F827F54 test dx, dx jle short loc_7F827F1F mov cl, [ebp+0] cmp [ebx], cl jz short loc_7F827F06 test dx, dx loc_7F827F1F: ; CODE XREF: sub_7F827EC0+53j jz short loc_7F827F2B lea edx, [eax-1] mov ebx, [esp+14h+var_4] inc ebx jmp short loc_7F827EE5 ; --------------------------------------------------------------------------- loc_7F827F2B: ; CODE XREF: sub_7F827EC0:loc_7F827F1Fj test esi, esi jz short loc_7F827F38 movsx eax, ax cmp [esi], eax jnb short loc_7F827F38 mov [esi], eax loc_7F827F38: ; CODE XREF: sub_7F827EC0:loc_7F827EFBj ; sub_7F827EC0+6Dj ... push edi ; lpString call ds:lstrlenA lea edi, [eax+edi+1] cmp byte ptr [edi], 0 jnz short loc_7F827EDC loc_7F827F48: ; CODE XREF: sub_7F827EC0+1Aj xor eax, eax loc_7F827F4A: ; CODE XREF: sub_7F827EC0+A1j pop ebp pop edi pop esi pop ebx add esp, 4 retn 10h ; --------------------------------------------------------------------------- loc_7F827F54: ; CODE XREF: sub_7F827EC0+4Ej xor eax, eax test esi, esi jz short loc_7F827F5C mov [esi], eax loc_7F827F5C: ; CODE XREF: sub_7F827EC0+98j mov eax, 1 jmp short loc_7F827F4A sub_7F827EC0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F827F63(LPCSTR lpString, int, int, int, int, int) sub_7F827F63 proc near ; CODE XREF: sub_7F826D5C+3B4p ; sub_7F82826A+108p ... var_8 = dword ptr -8 cchLength = dword ptr -4 lpString = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi mov esi, [ebp+arg_14] xor edi, edi mov ebx, [ebp+arg_10] mov [esi], di cmp ebx, edi jnz short loc_7F827F88 push [ebp+arg_8] push [ebp+arg_4] call sub_7F81990D mov ebx, eax loc_7F827F88: ; CODE XREF: sub_7F827F63+16j mov [ebp+var_8], 0 test ebx, ebx jz short loc_7F82800D loc_7F827F93: ; CODE XREF: sub_7F827F63+A1j cmp ebx, 0FDF8h mov eax, ebx jb short loc_7F827FA2 mov eax, 0FDF8h loc_7F827FA2: ; CODE XREF: sub_7F827F63+38j mov [ebp+cchLength], eax lea eax, [ebp+cchLength] push eax push lpsz push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] call sub_7F818D47 mov edi, eax test edi, edi jnz short loc_7F82800D push [ebp+cchLength] ; cchLength push lpsz ; lpsz push lpsz ; int call sub_7F8176EB lea ecx, [ebp+var_8] mov eax, lpsz push ecx ; int push [ebp+cchLength] ; __int16 push eax ; int push [ebp+lpString] ; lpString call sub_7F827EC0 test eax, eax jnz short loc_7F828008 mov eax, [ebp+var_8] sub [ebp+cchLength], eax jz short loc_7F828008 sub ebx, [ebp+cchLength] mov eax, [ebp+cchLength] add [ebp+arg_C], eax cmp [ebp+var_8], ebx jb short loc_7F827F93 jmp short loc_7F82800D ; --------------------------------------------------------------------------- loc_7F828008: ; CODE XREF: sub_7F827F63+8Bj ; sub_7F827F63+93j mov word ptr [esi], 1 loc_7F82800D: ; CODE XREF: sub_7F827F63+2Ej ; sub_7F827F63+5Ej ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 18h sub_7F827F63 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828018 proc near ; CODE XREF: sub_7F826D5C+3DDp ; sub_7F82959B+219p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_10] mov word ptr [eax], 0 mov ebp, esp sub esp, 10h sub edx, edx mov eax, [ebp+arg_4] mov ecx, 0Eh mov [ebp+var_C], 0 push ebx push esi push edi xor esi, esi div ecx push [ebp+arg_C] push [ebp+arg_8] mov [ebp+arg_4], eax call sub_7F81990D mov edi, eax test edi, edi jz loc_7F8280E8 loc_7F828057: ; CODE XREF: sub_7F828018+C0j cmp edi, 0FDF8h mov eax, edi jb short loc_7F828066 mov eax, 0FDF8h loc_7F828066: ; CODE XREF: sub_7F828018+47j mov [ebp+var_8], eax lea eax, [ebp+var_8] push eax push lpsz push esi push [ebp+arg_C] push [ebp+arg_8] call sub_7F818D47 mov [ebp+var_C], eax test eax, eax jnz short loc_7F8280E8 mov ax, word ptr [ebp+arg_4] mov ebx, [ebp+arg_0] mov [ebp+var_2], ax test ax, ax jle short loc_7F8280D0 loc_7F828096: ; CODE XREF: sub_7F828018+B6j mov ecx, 0Eh mov eax, [ebp+var_8] sub edx, edx push offset loc_7F8280F4 div ecx push ecx mov [ebp+var_10], eax lea eax, [ebp+var_10] push eax push lpsz push ebx call sub_7F8302D0 add esp, 14h test eax, eax jnz short loc_7F8280E0 dec [ebp+var_2] add ebx, 0Eh cmp [ebp+var_2], 0 jg short loc_7F828096 loc_7F8280D0: ; CODE XREF: sub_7F828018+7Cj sub edi, [ebp+var_8] add esi, [ebp+var_8] test edi, edi jnz loc_7F828057 jmp short loc_7F8280E8 ; --------------------------------------------------------------------------- loc_7F8280E0: ; CODE XREF: sub_7F828018+A8j mov eax, [ebp+arg_10] mov word ptr [eax], 1 loc_7F8280E8: ; CODE XREF: sub_7F828018+39j ; sub_7F828018+6Cj ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h ; --------------------------------------------------------------------------- loc_7F8280F4: ; DATA XREF: sub_7F828018+88o push 0FEFFh push [esp+arg_4] push [esp+4+arg_0] call sub_7F817767 retn sub_7F828018 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828107 proc near ; CODE XREF: sub_7F826D5C+403p ; sub_7F82959B+235p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_10] mov word ptr [eax], 0 mov ebp, esp sub esp, 0Ch mov [ebp+var_C], 0 shr [ebp+arg_4], 1 push ebx push esi push edi xor esi, esi push [ebp+arg_C] push [ebp+arg_8] call sub_7F81990D mov edi, eax test edi, edi jz short loc_7F8281AD loc_7F828136: ; CODE XREF: sub_7F828107+9Aj cmp edi, 0FDF8h mov eax, edi jb short loc_7F828145 mov eax, 0FDF8h loc_7F828145: ; CODE XREF: sub_7F828107+37j mov [ebp+var_8], eax lea eax, [ebp+var_8] push eax push lpsz push esi push [ebp+arg_C] push [ebp+arg_8] call sub_7F818D47 mov [ebp+var_C], eax test eax, eax jnz short loc_7F8281AD mov ax, word ptr [ebp+arg_4] mov ebx, [ebp+arg_0] mov [ebp+var_2], ax test ax, ax jle short loc_7F828199 loc_7F828175: ; CODE XREF: sub_7F828107+90j mov ax, [ebx] push eax push [ebp+var_8] push lpsz call sub_7F82A3EF test eax, eax jnz short loc_7F8281A5 dec [ebp+var_2] add ebx, 2 cmp [ebp+var_2], 0 jg short loc_7F828175 loc_7F828199: ; CODE XREF: sub_7F828107+6Cj sub edi, [ebp+var_8] add esi, [ebp+var_8] test edi, edi jnz short loc_7F828136 jmp short loc_7F8281AD ; --------------------------------------------------------------------------- loc_7F8281A5: ; CODE XREF: sub_7F828107+82j mov eax, [ebp+arg_10] mov word ptr [eax], 1 loc_7F8281AD: ; CODE XREF: sub_7F828107+2Dj ; sub_7F828107+5Cj ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F828107 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8281B9 proc near ; CODE XREF: sub_7F826D5C+429p ; sub_7F82959B+251p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_10] mov word ptr [eax], 0 mov ebp, esp sub esp, 0Ch mov [ebp+var_C], 0 shr [ebp+arg_4], 2 push ebx push esi push edi xor esi, esi push [ebp+arg_C] push [ebp+arg_8] call sub_7F81990D mov edi, eax test edi, edi jz short loc_7F82825E loc_7F8281E9: ; CODE XREF: sub_7F8281B9+99j cmp edi, 0FDF8h mov eax, edi jb short loc_7F8281F8 mov eax, 0FDF8h loc_7F8281F8: ; CODE XREF: sub_7F8281B9+38j mov [ebp+var_8], eax lea eax, [ebp+var_8] push eax push lpsz push esi push [ebp+arg_C] push [ebp+arg_8] call sub_7F818D47 mov [ebp+var_C], eax test eax, eax jnz short loc_7F82825E mov ax, word ptr [ebp+arg_4] mov ebx, [ebp+arg_0] mov [ebp+var_2], ax test ax, ax jle short loc_7F82824A loc_7F828228: ; CODE XREF: sub_7F8281B9+8Fj push dword ptr [ebx] push [ebp+var_8] push lpsz call sub_7F82A419 test eax, eax jnz short loc_7F828256 dec [ebp+var_2] add ebx, 4 cmp [ebp+var_2], 0 jg short loc_7F828228 loc_7F82824A: ; CODE XREF: sub_7F8281B9+6Dj sub edi, [ebp+var_8] add esi, [ebp+var_8] test edi, edi jnz short loc_7F8281E9 jmp short loc_7F82825E ; --------------------------------------------------------------------------- loc_7F828256: ; CODE XREF: sub_7F8281B9+81j mov eax, [ebp+arg_10] mov word ptr [eax], 1 loc_7F82825E: ; CODE XREF: sub_7F8281B9+2Ej ; sub_7F8281B9+5Dj ... mov eax, [ebp+var_C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8281B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82826A(LPCSTR lpString, int, int, int) sub_7F82826A proc near ; CODE XREF: sub_7F826D5C+303p ; sub_7F826D5C+349p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 lpString = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_C] mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor edi, edi push [ebp+arg_8] mov [eax], di push [ebp+arg_4] call sub_7F81990D mov esi, eax mov [ebp+var_C], edi test esi, esi jz loc_7F8283B1 loc_7F828294: ; CODE XREF: sub_7F82826A+130j cmp esi, 0FDF8h mov eax, esi jb short loc_7F8282A3 mov eax, 0FDF8h loc_7F8282A3: ; CODE XREF: sub_7F82826A+32j mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push lpsz push [ebp+var_C] push [ebp+arg_8] push [ebp+arg_4] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F8283B1 cmp [ebp+var_4], 8 jb loc_7F8283B1 mov eax, [ebp+var_4] mov ebx, lpsz mov [ebp+var_8], eax loc_7F8282DE: ; CODE XREF: sub_7F82826A+D2j cmp word ptr [ebx], 0 jz loc_7F8283B1 movzx eax, word ptr [ebx+6] movzx ecx, word ptr [ebx+4] lea edx, [eax+ecx] add edx, 8 cmp edx, [ebp+var_8] ja short loc_7F828340 add eax, ecx push ecx ; cchLength add eax, 8 sub [ebp+var_8], eax lea eax, [ebx+8] push eax ; lpsz push eax ; int call sub_7F8176EB push 0 ; int lea eax, [ebx+8] movzx ecx, word ptr [ebx+4] push ecx ; __int16 push eax ; int push [ebp+lpString] ; lpString call sub_7F827EC0 test eax, eax jnz loc_7F8283A9 movzx ecx, word ptr [ebx+4] movzx eax, word ptr [ebx+6] add ecx, eax add ecx, 8 add ebx, ecx cmp [ebp+var_8], 8 jnb short loc_7F8282DE jmp short loc_7F828389 ; --------------------------------------------------------------------------- loc_7F828340: ; CODE XREF: sub_7F82826A+8Fj movzx eax, word ptr [ebx+6] movzx ecx, word ptr [ebx+4] lea ebx, [eax+ecx+8] cmp esi, ebx jb short loc_7F8283A2 cmp ebx, 0FDF8h jbe short loc_7F828389 push [ebp+arg_C] ; int push ecx ; int mov eax, [ebp+var_C] sub eax, [ebp+var_8] add eax, [ebp+var_4] add eax, 8 push eax ; int push [ebp+arg_8] ; int push [ebp+arg_4] ; int push [ebp+lpString] ; lpString call sub_7F827F63 mov edi, eax mov ecx, [ebp+arg_C] cmp word ptr [ecx], 0 jnz short loc_7F8283B1 test edi, edi jnz short loc_7F8283B1 add [ebp+var_4], ebx loc_7F828389: ; CODE XREF: sub_7F82826A+D4j ; sub_7F82826A+ECj mov eax, [ebp+var_8] sub [ebp+var_4], eax sub esi, [ebp+var_4] mov ecx, [ebp+var_4] add [ebp+var_C], ecx test esi, esi jnz loc_7F828294 jmp short loc_7F8283B1 ; --------------------------------------------------------------------------- loc_7F8283A2: ; CODE XREF: sub_7F82826A+E4j mov edi, 1014h jmp short loc_7F8283B1 ; --------------------------------------------------------------------------- loc_7F8283A9: ; CODE XREF: sub_7F82826A+B9j mov eax, [ebp+arg_C] mov word ptr [eax], 1 loc_7F8283B1: ; CODE XREF: sub_7F82826A+24j ; sub_7F82826A+58j ... mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82826A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8283BC proc near ; CODE XREF: sub_7F826D5C+2D9p ; sub_7F82959B+143p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_10] mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor esi, esi push [ebp+arg_C] mov [eax], si xor edi, edi push [ebp+arg_8] call sub_7F81990D mov ebx, eax test ebx, ebx jz short loc_7F828457 loc_7F8283E1: ; CODE XREF: sub_7F8283BC+8Fj cmp ebx, 0FDF8h mov eax, ebx jb short loc_7F8283F0 mov eax, 0FDF8h loc_7F8283F0: ; CODE XREF: sub_7F8283BC+2Dj mov [ebp+var_4], eax lea eax, [ebp+var_4] push eax push lpsz push edi push [ebp+arg_C] push [ebp+arg_8] call sub_7F818D47 mov esi, eax test esi, esi jnz short loc_7F828457 mov eax, [ebp+arg_0] mov ecx, [ebp+arg_4] mov [ebp+var_C], eax mov [ebp+var_8], ecx test ecx, ecx jz short loc_7F828443 loc_7F82841F: ; CODE XREF: sub_7F8283BC+85j mov eax, [ebp+var_C] mov al, [eax] push eax push [ebp+var_4] push lpsz call sub_7F82A3C9 test eax, eax jnz short loc_7F82844F dec [ebp+var_8] inc [ebp+var_C] cmp [ebp+var_8], 0 jnz short loc_7F82841F loc_7F828443: ; CODE XREF: sub_7F8283BC+61j sub ebx, [ebp+var_4] add edi, [ebp+var_4] test ebx, ebx jnz short loc_7F8283E1 jmp short loc_7F828457 ; --------------------------------------------------------------------------- loc_7F82844F: ; CODE XREF: sub_7F8283BC+79j mov eax, [ebp+arg_10] mov word ptr [eax], 1 loc_7F828457: ; CODE XREF: sub_7F8283BC+23j ; sub_7F8283BC+51j ... mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8283BC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828462 proc near ; CODE XREF: sub_7F81B01B+127p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 14h xor ecx, ecx push ebx push esi push edi mov esi, [ebp+arg_0] mov eax, [esi] mov eax, [eax] mov [ebp+var_10], ecx test eax, eax jz short loc_7F828491 mov eax, [eax+244h] test eax, eax jz short loc_7F828491 mov eax, [eax] movzx ecx, word ptr [eax] movsx eax, word ptr [ecx+eax+6] jmp short loc_7F828493 ; --------------------------------------------------------------------------- loc_7F828491: ; CODE XREF: sub_7F828462+17j ; sub_7F828462+21j xor eax, eax loc_7F828493: ; CODE XREF: sub_7F828462+2Dj test eax, eax jle loc_7F82860B mov al, byte ptr [ebp+arg_8] cmp al, 69h jz loc_7F82860B cmp al, 70h jz loc_7F82860B mov edi, [ebp+arg_4] cmp edi, 82h jnz short loc_7F8284BB xor edi, edi loc_7F8284BB: ; CODE XREF: sub_7F828462+55j lea eax, [ebp+var_8] lea ecx, [ebp+var_14] mov [ebp+var_14], 53464180h push eax push 1 push ecx push esi call sub_7F817E9D test eax, eax jnz loc_7F82860D xor ebx, ebx push ebx push edi push [ebp+var_8] call sub_7F8194ED mov [ebp+var_2], ax cmp ax, bx jge short loc_7F8284FE push ebx lea eax, [ebp+var_8] push eax call sub_7F81813C jmp loc_7F82860B ; --------------------------------------------------------------------------- loc_7F8284FE: ; CODE XREF: sub_7F828462+8Bj push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F81990D push 0 mov [ebp+var_C], eax push eax call sub_7F82F03B mov ebx, eax test ebx, ebx jnz short loc_7F828524 mov edi, 400h jmp loc_7F8285D5 ; --------------------------------------------------------------------------- loc_7F828524: ; CODE XREF: sub_7F828462+B6j lea eax, [ebp+var_C] push eax push ebx push 0 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818D47 mov edi, eax test edi, edi jnz loc_7F8285D5 push [ebp+var_C] push [ebp+arg_8] lea edx, [ebp+var_2] push edx push [ebp+var_8] call sub_7F818B75 mov edi, eax test edi, edi jnz short loc_7F8285D5 push [ebp+var_C] push ebx push 0 lea ecx, [ebp+var_2] push ecx push [ebp+var_8] call sub_7F818DC7 mov edi, eax test edi, edi jnz short loc_7F8285D5 lea eax, [ebp+var_10] lea ecx, [ebp+var_14] mov [ebp+var_14], 46534180h push eax push 1 push ecx push esi call sub_7F817E9D mov edi, eax test edi, edi jnz short loc_7F8285D5 push 0 mov eax, [ebp+var_C] shr eax, 2 lea ecx, [ebp+arg_8] push [ebp+var_10] push eax push ebx push 1 push ecx call sub_7F8279C8 mov edi, eax test edi, edi jnz short loc_7F8285D5 push [ebp+var_10] call sub_7F8178C4 mov edi, eax test edi, edi jnz short loc_7F8285D5 push [ebp+var_8] call sub_7F8178C4 mov edi, eax test edi, edi jnz short loc_7F8285D5 mov eax, [ebp+var_C] shr eax, 2 push eax push ebx push esi call sub_7F828616 loc_7F8285D5: ; CODE XREF: sub_7F828462+BDj ; sub_7F828462+D8j ... test ebx, ebx jz short loc_7F8285DF push ebx call sub_7F82F149 loc_7F8285DF: ; CODE XREF: sub_7F828462+175j cmp [ebp+var_10], 0 jz short loc_7F8285F6 lea ecx, [ebp+var_10] cmp edi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F8285F6: ; CODE XREF: sub_7F828462+181j lea ecx, [ebp+var_8] cmp edi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C mov eax, edi jmp short loc_7F82860D ; --------------------------------------------------------------------------- loc_7F82860B: ; CODE XREF: sub_7F828462+33j ; sub_7F828462+3Ej ... xor eax, eax loc_7F82860D: ; CODE XREF: sub_7F828462+72j ; sub_7F828462+1A7j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F828462 endp ; =============== S U B R O U T I N E ======================================= sub_7F828616 proc near ; CODE XREF: sub_7F828462+16Ep arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch mov eax, [esp+arg_0] push ebx push esi push edi push ebp mov ecx, [eax] mov si, [esp+10h+arg_8] mov edi, [ecx] mov eax, [edi+244h] mov ebx, [eax] movzx ecx, word ptr [ebx] mov ax, si lea ebp, [ecx+ebx] dec si test ax, ax jle short loc_7F828672 loc_7F82863F: ; CODE XREF: sub_7F828616+5Aj mov eax, [esp+10h+arg_4] add [esp+10h+arg_4], 4 push dword ptr [eax] push ebx call sub_7F816B29 test ax, ax jl short loc_7F828668 movsx eax, ax imul eax, 6 mov ecx, ebp sub ecx, eax movzx edx, word ptr [ecx+4] inc word ptr [edx+ebx+10h] loc_7F828668: ; CODE XREF: sub_7F828616+3Dj mov ax, si dec si test ax, ax jg short loc_7F82863F loc_7F828672: ; CODE XREF: sub_7F828616+27j or byte ptr [edi+265h], 40h pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F828616 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828680 proc near ; CODE XREF: sub_7F81B01B+15Ap var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 14h mov ecx, [eax] push ebx push esi push edi xor esi, esi mov eax, [ecx] mov [ebp+var_C], esi test eax, eax jz short loc_7F8286B0 mov eax, [eax+244h] test eax, eax jz short loc_7F8286B0 mov eax, [eax] movzx ecx, word ptr [eax] movsx eax, word ptr [ecx+eax+6] jmp short loc_7F8286B2 ; --------------------------------------------------------------------------- loc_7F8286B0: ; CODE XREF: sub_7F828680+18j ; sub_7F828680+22j xor eax, eax loc_7F8286B2: ; CODE XREF: sub_7F828680+2Ej test eax, eax jle loc_7F828826 mov al, byte ptr [ebp+arg_4] cmp al, 69h jz loc_7F828826 cmp al, 70h jz loc_7F828826 lea eax, [ebp+var_8] lea ecx, [ebp+var_14] mov [ebp+var_14], 53464180h push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D test eax, eax jnz loc_7F828828 xor edi, edi push edi push [ebp+arg_4] push [ebp+var_8] call sub_7F8194ED mov [ebp+var_2], ax cmp ax, di jge short loc_7F828714 push edi lea eax, [ebp+var_8] push eax call sub_7F81813C jmp loc_7F828826 ; --------------------------------------------------------------------------- loc_7F828714: ; CODE XREF: sub_7F828680+83j push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F81990D push 0 mov [ebp+var_10], eax push eax call sub_7F82F03B mov edi, eax test edi, edi jnz short loc_7F82873A mov ebx, 400h jmp loc_7F8287E6 ; --------------------------------------------------------------------------- loc_7F82873A: ; CODE XREF: sub_7F828680+AEj lea eax, [ebp+var_10] push eax push edi push 0 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818D47 mov ebx, eax test ebx, ebx jnz loc_7F8287E6 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818AE7 mov ebx, eax test ebx, ebx jnz short loc_7F8287E6 push 0 push [ebp+var_10] call sub_7F82F03B mov esi, eax test esi, esi jnz short loc_7F82877E mov ebx, 400h jmp short loc_7F8287E6 ; --------------------------------------------------------------------------- loc_7F82877E: ; CODE XREF: sub_7F828680+F5j lea eax, [ebp+var_C] lea ecx, [ebp+var_14] mov [ebp+var_14], 46534180h push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov ebx, eax test ebx, ebx jnz short loc_7F8287E6 push esi mov eax, [ebp+var_10] shr eax, 2 push 0 push [ebp+var_C] push eax push edi push [ebp+arg_4] call sub_7F82786A mov ebx, eax test ebx, ebx jnz short loc_7F8287E6 push [ebp+var_C] call sub_7F8178C4 mov ebx, eax test ebx, ebx jnz short loc_7F8287E6 push [ebp+var_8] call sub_7F8178C4 mov ebx, eax test ebx, ebx jnz short loc_7F8287E6 mov eax, [ebp+var_10] shr eax, 2 push eax push esi push edi push [ebp+arg_0] call sub_7F828831 loc_7F8287E6: ; CODE XREF: sub_7F828680+B5j ; sub_7F828680+D0j ... test edi, edi jz short loc_7F8287F0 push edi call sub_7F82F149 loc_7F8287F0: ; CODE XREF: sub_7F828680+168j test esi, esi jz short loc_7F8287FA push esi call sub_7F82F149 loc_7F8287FA: ; CODE XREF: sub_7F828680+172j cmp [ebp+var_C], 0 jz short loc_7F828811 lea ecx, [ebp+var_C] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C loc_7F828811: ; CODE XREF: sub_7F828680+17Ej lea ecx, [ebp+var_8] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C mov eax, ebx jmp short loc_7F828828 ; --------------------------------------------------------------------------- loc_7F828826: ; CODE XREF: sub_7F828680+34j ; sub_7F828680+3Fj ... xor eax, eax loc_7F828828: ; CODE XREF: sub_7F828680+68j ; sub_7F828680+1A4j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F828680 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828831 proc near ; CODE XREF: sub_7F828680+161p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp mov eax, [esp+arg_0] mov ebp, esp sub esp, 4 mov ecx, [eax] push ebx push esi push edi mov esi, [ecx] mov cx, [ebp+arg_C] mov eax, [esi+244h] dec [ebp+arg_C] mov edi, [eax] movzx eax, word ptr [edi] add eax, edi test cx, cx mov [ebp+var_4], eax jle short loc_7F8288AF mov ebx, [ebp+arg_8] loc_7F828862: ; CODE XREF: sub_7F828831+7Cj cmp word ptr [ebx], 0 jl short loc_7F82889F mov eax, [ebp+arg_4] add [ebp+arg_4], 4 push dword ptr [eax] push edi call sub_7F816B29 test ax, ax jl short loc_7F82889F movsx eax, ax imul eax, 6 mov ecx, [ebp+var_4] sub ecx, eax movzx edx, word ptr [ecx+4] mov cx, [edx+edi+10h] lea eax, [edx+edi+6] cmp [ebx], cx jge short loc_7F82889F dec cx mov [eax+0Ah], cx loc_7F82889F: ; CODE XREF: sub_7F828831+35j ; sub_7F828831+49j ... mov ax, [ebp+arg_C] add ebx, 2 dec [ebp+arg_C] test ax, ax jg short loc_7F828862 loc_7F8288AF: ; CODE XREF: sub_7F828831+2Cj or byte ptr [esi+265h], 40h pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F828831 endp ; =============== S U B R O U T I N E ======================================= sub_7F8288BF proc near ; CODE XREF: sub_7F8261A0+90p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch cmp dword_7F838078, 0 push esi jz short loc_7F8288D0 mov esi, 253h jmp short loc_7F828903 ; --------------------------------------------------------------------------- loc_7F8288D0: ; CODE XREF: sub_7F8288BF+8j mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F828903: ; CODE XREF: sub_7F8288BF+Fj test esi, esi jnz short loc_7F828975 push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F82891D mov esi, 1001h jmp short loc_7F828947 ; --------------------------------------------------------------------------- loc_7F82891D: ; CODE XREF: sub_7F8288BF+55j mov ecx, [eax+0Ch] mov edx, [esp+4+arg_8] mov [edx], cx mov ecx, [eax+0Ch] shr ecx, 10h mov [edx+2], cx mov cx, [eax+1Eh] mov [edx+4], cx mov cx, [eax+1Ch] mov [edx+6], cx mov eax, [eax+8] mov [edx+8], eax loc_7F828947: ; CODE XREF: sub_7F8288BF+5Cj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82895D call sub_7F82A34F jmp short loc_7F82896B ; --------------------------------------------------------------------------- loc_7F82895D: ; CODE XREF: sub_7F8288BF+95j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82896B: ; CODE XREF: sub_7F8288BF+9Cj mov dword_7F838078, 0 loc_7F828975: ; CODE XREF: sub_7F8288BF+46j mov eax, esi pop esi retn 0Ch sub_7F8288BF endp ; =============== S U B R O U T I N E ======================================= sub_7F82897B proc near ; CODE XREF: sub_7F8261A0+3DCp ; sub_7F828A3E+EAp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch cmp dword_7F838078, 0 push esi push edi jz short loc_7F82898D mov esi, 253h jmp short loc_7F8289C0 ; --------------------------------------------------------------------------- loc_7F82898D: ; CODE XREF: sub_7F82897B+9j mov ecx, [esp+8+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F8289C0: ; CODE XREF: sub_7F82897B+10j test esi, esi jnz short loc_7F828A37 push 0 push [esp+0Ch+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F8289DA mov esi, 1001h jmp short loc_7F828A09 ; --------------------------------------------------------------------------- loc_7F8289DA: ; CODE XREF: sub_7F82897B+56j mov edi, [esp+8+arg_8] movsx ecx, word ptr [edi+2] movzx edx, word ptr [edi] shl ecx, 10h or ecx, edx mov [eax+0Ch], ecx push eax mov dx, [edi+4] mov [eax+1Eh], dx mov cx, [edi+6] mov [eax+1Ch], cx mov edi, [edi+8] mov [eax+8], edi call sub_7F8148F7 loc_7F828A09: ; CODE XREF: sub_7F82897B+5Dj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F828A1F call sub_7F82A34F jmp short loc_7F828A2D ; --------------------------------------------------------------------------- loc_7F828A1F: ; CODE XREF: sub_7F82897B+9Bj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F828A2D: ; CODE XREF: sub_7F82897B+A2j mov dword_7F838078, 0 loc_7F828A37: ; CODE XREF: sub_7F82897B+47j mov eax, esi pop edi pop esi retn 0Ch sub_7F82897B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828A3E proc near ; CODE XREF: sub_7F828F0F+D8p ; sub_7F8290A9+81p ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h push ebx mov eax, [ebp+arg_0] mov [ebp+var_10], 4C435380h push esi mov ecx, [eax] push edi xor esi, esi mov [ebp+var_C], 90h mov edx, [ecx] mov edi, [ebp+arg_4] mov eax, [edx+248h] mov [edi+6], si mov [ebp+var_8], eax mov [ebp+var_4], esi cmp eax, esi jnz short loc_7F828A8F push 1 push 30h call sub_7F816903 mov [ebp+var_8], eax cmp eax, esi jnz short loc_7F828A8F mov eax, 400h jmp loc_7F828BA9 ; --------------------------------------------------------------------------- loc_7F828A8F: ; CODE XREF: sub_7F828A3E+35j ; sub_7F828A3E+45j movsx eax, word ptr [edi+4] movsx ecx, word ptr [edi+2] push 0 add eax, ecx imul eax, 6 push eax call sub_7F816903 mov [ebp+var_4], eax test eax, eax jz loc_7F828B89 mov bx, [edi+2] loc_7F828AB3: ; CODE XREF: sub_7F828A3E+99j mov ax, bx dec bx test ax, ax jle short loc_7F828ADE mov eax, [ebp+arg_8] push 0 push 0 lea edx, [ebp+var_4] push dword ptr [eax] push edx add [ebp+arg_8], 4 call sub_7F81698C mov esi, eax test esi, esi jz short loc_7F828AB3 jmp loc_7F828B89 ; --------------------------------------------------------------------------- loc_7F828ADE: ; CODE XREF: sub_7F828A3E+7Dj mov bx, [edi+4] loc_7F828AE2: ; CODE XREF: sub_7F828A3E+C8j mov ax, bx dec bx test ax, ax jle short loc_7F828B0A mov eax, [ebp+arg_C] push 0 push 0 lea edx, [ebp+var_4] push dword ptr [eax] push edx add [ebp+arg_C], 4 call sub_7F81698C mov esi, eax test esi, esi jz short loc_7F828AE2 jmp short loc_7F828B89 ; --------------------------------------------------------------------------- loc_7F828B0A: ; CODE XREF: sub_7F828A3E+ACj lea ecx, [ebp+var_C] xor ebx, ebx push [ebp+var_4] push ecx push [ebp+arg_0] call sub_7F816DC7 mov esi, eax test esi, esi jnz short loc_7F828B89 push edi push [ebp+var_C] push [ebp+arg_0] call sub_7F82897B cmp eax, ebx mov esi, eax jnz short loc_7F828B89 push ebx lea ecx, [ebp+var_8] push ebx push [ebp+var_C] push ecx call sub_7F81698C cmp eax, ebx mov esi, eax jnz short loc_7F828B89 push [ebp+var_8] lea ecx, [ebp+var_10] push ecx push [ebp+arg_0] call sub_7F816DC7 cmp eax, ebx mov esi, eax jz short loc_7F828B6C push ebx push 1 push [ebp+var_C] push [ebp+arg_0] call sub_7F82B9DE jmp short loc_7F828B89 ; --------------------------------------------------------------------------- loc_7F828B6C: ; CODE XREF: sub_7F828A3E+11Cj push 1 push [ebp+arg_0] call sub_7F82615D cmp nDefault, 0 jz short loc_7F828B89 mov dword_7F838024, 1 loc_7F828B89: ; CODE XREF: sub_7F828A3E+6Bj ; sub_7F828A3E+9Bj ... cmp [ebp+var_4], 0 jz short loc_7F828B97 push [ebp+var_4] call sub_7F82F1E1 loc_7F828B97: ; CODE XREF: sub_7F828A3E+14Fj mov ecx, [ebp+var_8] mov eax, [ebp+arg_0] mov edx, [eax] mov eax, esi mov ebx, [edx] mov [ebx+248h], ecx loc_7F828BA9: ; CODE XREF: sub_7F828A3E+4Cj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F828A3E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828BB2 proc near ; CODE XREF: sub_7F828F0F+ACp ; sub_7F8290A9+55p ... var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_28 = dword ptr -28h var_24 = word ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov eax, [esp+arg_C] mov ebp, esp sub esp, 30h push ebx push esi push edi xor esi, esi mov edi, [eax] mov [ebp+var_14], esi cmp edi, 1 mov [ebp+var_C], esi sbb eax, eax neg eax mov [ebp+var_20], eax cmp eax, esi jz short loc_7F828C4C mov eax, [ebp+arg_0] mov ebx, [ebp+arg_10] push esi mov ecx, [eax] mov edx, [ecx+30h] push [ebp+arg_4] mov [ebx], si push edx mov [ebp+var_8], edx call sub_7F8194ED mov [ebp+var_2], ax cmp ax, si jl loc_7F828DB7 push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F81990D mov [ebp+var_10], eax cmp eax, esi jz loc_7F828DB7 push esi push eax call sub_7F82F03B cmp eax, esi mov edi, eax jz loc_7F828DB2 mov eax, [ebp+arg_C] lea ecx, [ebp+var_10] push ecx push edi push 0 mov [eax], edi push dword ptr [ebp+var_2] push [ebp+var_8] call sub_7F818D47 test eax, eax jnz short loc_7F828C4F mov eax, [ebp+var_10] shr eax, 2 mov [ebx], ax jmp short loc_7F828C4F ; --------------------------------------------------------------------------- loc_7F828C4C: ; CODE XREF: sub_7F828BB2+23j mov ebx, [ebp+arg_10] loc_7F828C4F: ; CODE XREF: sub_7F828BB2+8Dj ; sub_7F828BB2+98j lea eax, [ebp+var_14] lea ecx, [ebp+var_30] mov [ebp+var_30], 46534180h push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F828DBB mov [ebp+var_4], 8 push 0 push 20h call sub_7F82F18D mov [ebp+var_C], eax test eax, eax jz loc_7F828DB2 mov dx, [ebx] mov eax, [ebp+var_C] mov word ptr [ebp+var_8+2], dx mov [ebp+var_18], edi test dx, dx mov ecx, [eax] mov [ebp+var_1C], ecx jle loc_7F828DB7 loc_7F828CA7: ; CODE XREF: sub_7F828BB2+1F8j push 0 push dword ptr [edi] push [ebp+var_14] call sub_7F8194ED mov [ebp+var_2], ax test ax, ax jl loc_7F828D9B lea eax, [ebp+var_2C] push eax push dword ptr [edi] push [ebp+arg_0] call sub_7F8267D3 mov esi, eax test esi, esi jz short loc_7F828CEA cmp esi, 1001h jnz loc_7F828DB7 dec word ptr [ebx] xor esi, esi jmp loc_7F828D9E ; --------------------------------------------------------------------------- loc_7F828CEA: ; CODE XREF: sub_7F828BB2+120j push dword ptr [ebp+var_2] push [ebp+var_14] call sub_7F81990D shr eax, 2 cmp ax, [ebp+var_22] jg short loc_7F828D0E mov eax, [edi] mov ecx, [ebp+var_18] add [ebp+var_18], 4 mov [ecx], eax jmp loc_7F828D9E ; --------------------------------------------------------------------------- loc_7F828D0E: ; CODE XREF: sub_7F828BB2+14Aj mov eax, [ebp+arg_4] cmp [ebp+var_28], eax jnz short loc_7F828D22 mov ax, [ebp+arg_8] cmp ax, [ebp+var_24] jge short loc_7F828D9B jmp short loc_7F828D8E ; --------------------------------------------------------------------------- loc_7F828D22: ; CODE XREF: sub_7F828BB2+162j cmp [ebp+var_22], 0 jle short loc_7F828D9B mov ax, [ebp+var_4] cmp ax, [ebp+var_22] jge short loc_7F828D58 mov ax, [ebp+var_22] push 0 mov [ebp+var_4], ax movsx eax, ax shl eax, 2 push eax push [ebp+var_C] call sub_7F82F1FF test eax, eax jz short loc_7F828DB2 mov eax, [ebp+var_C] mov ecx, [eax] mov [ebp+var_1C], ecx loc_7F828D58: ; CODE XREF: sub_7F828BB2+17Fj movsx eax, [ebp+var_22] shl eax, 2 mov [ebp+var_10], eax lea eax, [ebp+var_10] push eax push [ebp+var_1C] push 0 push dword ptr [ebp+var_2] push [ebp+var_14] call sub_7F818D47 mov esi, eax test esi, esi jnz short loc_7F828DBB push [ebp+arg_4] push [ebp+var_10] push [ebp+var_1C] call sub_7F82A419 test eax, eax jz short loc_7F828D9B loc_7F828D8E: ; CODE XREF: sub_7F828BB2+16Ej mov eax, [edi] mov ecx, [ebp+var_18] add [ebp+var_18], 4 mov [ecx], eax jmp short loc_7F828D9E ; --------------------------------------------------------------------------- loc_7F828D9B: ; CODE XREF: sub_7F828BB2+108j ; sub_7F828BB2+16Cj ... dec word ptr [ebx] loc_7F828D9E: ; CODE XREF: sub_7F828BB2+133j ; sub_7F828BB2+157j ... dec word ptr [ebp+var_8+2] add edi, 4 cmp word ptr [ebp+var_8+2], 0 jg loc_7F828CA7 jmp short loc_7F828DB7 ; --------------------------------------------------------------------------- loc_7F828DB2: ; CODE XREF: sub_7F828BB2+6Ej ; sub_7F828BB2+D4j ... mov esi, 400h loc_7F828DB7: ; CODE XREF: sub_7F828BB2+47j ; sub_7F828BB2+5Dj ... test esi, esi jz short loc_7F828DC0 loc_7F828DBB: ; CODE XREF: sub_7F828BB2+BAj ; sub_7F828BB2+1C8j mov word ptr [ebx], 0 loc_7F828DC0: ; CODE XREF: sub_7F828BB2+207j cmp word ptr [ebx], 0 jnz short loc_7F828DE3 cmp [ebp+var_20], 0 jz short loc_7F828DE3 test edi, edi jz short loc_7F828DE3 mov eax, [ebp+arg_C] push dword ptr [eax] call sub_7F82F149 mov ecx, [ebp+arg_C] mov dword ptr [ecx], 0 loc_7F828DE3: ; CODE XREF: sub_7F828BB2+212j ; sub_7F828BB2+218j ... cmp [ebp+var_C], 0 jz short loc_7F828DF1 push [ebp+var_C] call sub_7F82F1E1 loc_7F828DF1: ; CODE XREF: sub_7F828BB2+235j cmp [ebp+var_14], 0 jz short loc_7F828E02 push 0 lea eax, [ebp+var_14] push eax call sub_7F81813C loc_7F828E02: ; CODE XREF: sub_7F828BB2+243j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F828BB2 endp ; =============== S U B R O U T I N E ======================================= sub_7F828E0D proc near ; CODE XREF: sub_7F82C1D4+1AFp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx xor edx, edx mov ecx, [esp+4+arg_0] push esi push edi mov eax, [ecx] mov ebx, [eax] mov edi, [ebx+244h] mov esi, [edi] movzx eax, word ptr [esi] add eax, esi mov di, [eax+6] test di, di jle short loc_7F828E74 mov ebx, [esp+0Ch+arg_4] cmp bl, 69h jz short loc_7F828E74 cmp bl, 70h jz short loc_7F828E74 movzx eax, word ptr [eax+4] test di, di lea eax, [eax+esi+6] jle short loc_7F828E65 loc_7F828E4B: ; CODE XREF: sub_7F828E0D+56j cmp [eax+4], ebx jnz short loc_7F828E5B mov word ptr [eax+8], 0 mov edx, 1 loc_7F828E5B: ; CODE XREF: sub_7F828E0D+41j dec di add eax, 0Ch test di, di jnz short loc_7F828E4B loc_7F828E65: ; CODE XREF: sub_7F828E0D+3Cj test edx, edx jz short loc_7F828E74 mov eax, [ecx] mov ecx, [eax] or byte ptr [ecx+265h], 40h loc_7F828E74: ; CODE XREF: sub_7F828E0D+21j ; sub_7F828E0D+2Aj ... pop edi pop esi pop ebx retn 8 sub_7F828E0D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828E7A proc near ; CODE XREF: sub_7F81BF33+3DEp ; sub_7F829147+A9p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp xor ecx, ecx mov ebp, esp push ebx push esi push edi mov eax, [ebp+arg_0] mov edx, [eax] mov ebx, [edx] mov eax, [ebx+244h] mov edx, [eax] movzx ebx, word ptr [edx] mov si, [ebx+edx+6] lea edi, [ebx+edx] test si, si jle short loc_7F828F08 mov al, byte ptr [ebp+arg_4] cmp al, 69h jz short loc_7F828F08 cmp al, 70h jz short loc_7F828F08 movzx eax, word ptr [edi+4] test si, si lea edi, [eax+edx+6] jle short loc_7F828EF6 loc_7F828EB9: ; CODE XREF: sub_7F828E7A+7Aj mov eax, [ebp+arg_4] cmp [edi+4], eax jnz short loc_7F828EEC mov ax, [ebp+arg_C] mov edx, [ebp+arg_8] test ax, ax jle short loc_7F828EEC loc_7F828ECD: ; CODE XREF: sub_7F828E7A+70j mov bx, [edi+8] cmp [edx+2], bx jge short loc_7F828EE2 dec bx mov ecx, 1 mov [edi+8], bx loc_7F828EE2: ; CODE XREF: sub_7F828E7A+5Bj dec ax add edx, 8 test ax, ax jnz short loc_7F828ECD loc_7F828EEC: ; CODE XREF: sub_7F828E7A+45j ; sub_7F828E7A+51j dec si add edi, 0Ch test si, si jg short loc_7F828EB9 loc_7F828EF6: ; CODE XREF: sub_7F828E7A+3Dj test ecx, ecx jz short loc_7F828F08 mov eax, [ebp+arg_0] mov ecx, [eax] mov edx, [ecx] or byte ptr [edx+265h], 40h loc_7F828F08: ; CODE XREF: sub_7F828E7A+25j ; sub_7F828E7A+2Cj ... pop edi pop esi pop ebx pop ebp retn 10h sub_7F828E7A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F828F0F proc near ; CODE XREF: sub_7F810955+E0p var_14 = dword ptr -14h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp xor ecx, ecx mov ebp, esp sub esp, 14h push ebx mov [ebp+var_4], ecx push esi push edi mov esi, [ebp+arg_0] mov eax, [esi] mov eax, [eax] test eax, eax jz short loc_7F828F3E mov eax, [eax+244h] test eax, eax jz short loc_7F828F3E mov eax, [eax] movzx ecx, word ptr [eax] movsx eax, word ptr [ecx+eax+6] jmp short loc_7F828F40 ; --------------------------------------------------------------------------- loc_7F828F3E: ; CODE XREF: sub_7F828F0F+17j ; sub_7F828F0F+21j xor eax, eax loc_7F828F40: ; CODE XREF: sub_7F828F0F+2Dj test eax, eax jg short loc_7F828F4B xor eax, eax jmp loc_7F82900C ; --------------------------------------------------------------------------- loc_7F828F4B: ; CODE XREF: sub_7F828F0F+33j cmp byte ptr [ebp+arg_4], 71h jnz short loc_7F828F58 xor eax, eax jmp loc_7F82900C ; --------------------------------------------------------------------------- loc_7F828F58: ; CODE XREF: sub_7F828F0F+40j xor edi, edi lea eax, [ebp+var_8] push edi push edi push edi push eax push [ebp+arg_4] push esi call sub_7F82D114 test eax, eax jnz loc_7F82900C lea eax, [ebp+var_14] lea ecx, [ebp+var_8] push eax push 0 push ecx push esi call sub_7F817E9D test eax, eax jnz loc_7F82900C push 0 push [ebp+arg_4] push [ebp+var_14] call sub_7F8194ED mov bx, ax push 0 lea ecx, [ebp+var_14] push ecx call sub_7F81813C test bx, bx jge short loc_7F828FAE xor eax, eax jmp short loc_7F82900C ; --------------------------------------------------------------------------- loc_7F828FAE: ; CODE XREF: sub_7F828F0F+99j lea eax, [ebp+var_C] lea ecx, [ebp+var_4] push eax push ecx push ebx push [ebp+var_8] push esi call sub_7F828BB2 test eax, eax jnz short loc_7F82900C cmp word ptr [ebp+var_C], 0 jg short loc_7F828FCF xor eax, eax jmp short loc_7F82900C ; --------------------------------------------------------------------------- loc_7F828FCF: ; CODE XREF: sub_7F828F0F+BAj mov [ebp+var_10], 2 lea ecx, [ebp+arg_4] lea edx, [ebp+var_10] push [ebp+var_4] mov [ebp+var_E], 1 push ecx push edx push esi call sub_7F828A3E mov edi, eax test edi, edi jnz short loc_7F829002 push ebx push [ebp+var_8] push [ebp+var_C] push [ebp+var_4] push esi call sub_7F829015 loc_7F829002: ; CODE XREF: sub_7F828F0F+E1j push [ebp+var_4] call sub_7F82F149 mov eax, edi loc_7F82900C: ; CODE XREF: sub_7F828F0F+37j ; sub_7F828F0F+44j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F828F0F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829015 proc near ; CODE XREF: sub_7F828F0F+EEp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = word ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp push ebx push esi mov ecx, [eax] push edi xor esi, esi mov edx, [ecx] mov eax, [edx+244h] mov edi, [eax] movzx ecx, word ptr [edi] mov ax, [ebp+arg_8] lea ebx, [ecx+edi] dec [ebp+arg_8] test ax, ax jle short loc_7F829090 loc_7F829040: ; CODE XREF: sub_7F829015+79j mov eax, [ebp+arg_4] add [ebp+arg_4], 4 push dword ptr [eax] push edi call sub_7F816B29 test ax, ax jl short loc_7F829083 movsx eax, ax imul eax, 6 mov ecx, ebx sub ecx, eax mov eax, [ebp+arg_C] movzx edx, word ptr [ecx+4] cmp [edx+edi+0Ah], eax lea ecx, [edx+edi] jnz short loc_7F829083 mov ax, [ecx+0Eh] cmp [ebp+arg_10], ax jge short loc_7F829083 dec ax mov esi, 1 mov [ecx+0Eh], ax loc_7F829083: ; CODE XREF: sub_7F829015+3Dj ; sub_7F829015+57j ... mov ax, [ebp+arg_8] dec [ebp+arg_8] test ax, ax jg short loc_7F829040 loc_7F829090: ; CODE XREF: sub_7F829015+29j test esi, esi jz short loc_7F8290A2 mov eax, [ebp+arg_0] mov ecx, [eax] mov edx, [ecx] or byte ptr [edx+265h], 40h loc_7F8290A2: ; CODE XREF: sub_7F829015+7Dj pop edi pop esi pop ebx pop ebp retn 14h sub_7F829015 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8290A9 proc near ; CODE XREF: sub_7F81B8F0+B4p ; sub_7F81C56F+55Cp var_10 = word ptr -10h var_E = word ptr -0Eh var_C = word ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_4], 0 push ebx push esi mov esi, [ebp+arg_0] mov ebx, [ebp+arg_4] cmp bl, 83h mov ecx, [esi] mov eax, [ecx] jz short loc_7F82913D test eax, eax jz short loc_7F8290E1 mov eax, [eax+244h] test eax, eax jz short loc_7F8290E1 mov eax, [eax] movzx ecx, word ptr [eax] movsx eax, word ptr [ecx+eax+6] jmp short loc_7F8290E3 ; --------------------------------------------------------------------------- loc_7F8290E1: ; CODE XREF: sub_7F8290A9+20j ; sub_7F8290A9+2Aj xor eax, eax loc_7F8290E3: ; CODE XREF: sub_7F8290A9+36j test eax, eax jle short loc_7F82913D cmp bl, 69h jz short loc_7F82913D cmp bl, 70h jz short loc_7F82913D lea eax, [ebp+var_C] lea ecx, [ebp+var_4] push eax push ecx push [ebp+arg_10] push ebx push esi call sub_7F828BB2 test eax, eax jnz short loc_7F82913F cmp [ebp+var_C], 0 jle short loc_7F82913D push [ebp+var_4] mov [ebp+var_10], 0 mov ax, [ebp+arg_C] mov [ebp+var_8], ebx push [ebp+arg_8] mov [ebp+var_E], ax lea eax, [ebp+var_10] push eax push esi call sub_7F828A3E push [ebp+var_4] mov ebx, eax call sub_7F82F149 mov eax, ebx jmp short loc_7F82913F ; --------------------------------------------------------------------------- loc_7F82913D: ; CODE XREF: sub_7F8290A9+1Cj ; sub_7F8290A9+3Cj ... xor eax, eax loc_7F82913F: ; CODE XREF: sub_7F8290A9+5Cj ; sub_7F8290A9+92j pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F8290A9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829147 proc near ; CODE XREF: sub_7F81C56F+543p var_18 = word ptr -18h var_16 = word ptr -16h var_14 = word ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = word ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp xor ecx, ecx mov ebp, esp sub esp, 18h push ebx mov [ebp+var_C], ecx push esi mov [ebp+var_8], ecx push edi mov esi, [ebp+arg_0] mov eax, [esi] mov eax, [eax] test eax, eax jz short loc_7F829179 mov eax, [eax+244h] test eax, eax jz short loc_7F829179 mov eax, [eax] movzx ecx, word ptr [eax] movsx eax, word ptr [ecx+eax+6] jmp short loc_7F82917B ; --------------------------------------------------------------------------- loc_7F829179: ; CODE XREF: sub_7F829147+1Aj ; sub_7F829147+24j xor eax, eax loc_7F82917B: ; CODE XREF: sub_7F829147+30j test eax, eax jle loc_7F829294 mov ebx, [ebp+arg_4] cmp bl, 69h jz loc_7F829294 cmp bl, 70h jz loc_7F829294 lea eax, [ebp+var_2] lea ecx, [ebp+var_C] push eax push ecx push 0 push ebx push esi call sub_7F828BB2 test eax, eax jnz loc_7F829296 lea eax, [ebp+var_4] lea ecx, [ebp+var_8] push eax push ecx push [ebp+arg_14] push [ebp+arg_8] push esi call sub_7F828BB2 mov edi, eax test edi, edi jnz loc_7F829274 cmp [ebp+var_2], 0 jg short loc_7F8291E8 cmp [ebp+var_4], 0 jle loc_7F829294 cmp [ebp+var_2], 0 jle short loc_7F8291F5 loc_7F8291E8: ; CODE XREF: sub_7F829147+8Dj push [ebp+arg_1C] push [ebp+arg_18] push ebx push esi call sub_7F828E7A loc_7F8291F5: ; CODE XREF: sub_7F829147+9Fj lea eax, [ebp+var_4] lea edx, [ebp+var_2] push eax push [ebp+var_8] push edx push [ebp+var_C] call sub_7F8277C1 cmp [ebp+var_2], 0 jle short loc_7F829240 push [ebp+var_C] mov [ebp+var_18], 1 mov ax, [ebp+var_2] mov [ebp+var_10], ebx push [ebp+arg_C] mov bx, [ebp+arg_10] mov [ebp+var_16], bx mov [ebp+var_14], ax lea eax, [ebp+var_18] push eax push esi call sub_7F828A3E mov edi, eax test edi, edi jnz short loc_7F829274 jmp short loc_7F829244 ; --------------------------------------------------------------------------- loc_7F829240: ; CODE XREF: sub_7F829147+C6j mov bx, [ebp+arg_10] loc_7F829244: ; CODE XREF: sub_7F829147+F7j xor ecx, ecx cmp [ebp+var_4], cx jle short loc_7F829274 push [ebp+var_8] mov [ebp+var_18], cx mov eax, [ebp+arg_8] mov cx, [ebp+var_4] mov [ebp+var_10], eax push [ebp+arg_C] mov [ebp+var_16], bx mov [ebp+var_14], cx lea ecx, [ebp+var_18] push ecx push esi call sub_7F828A3E mov edi, eax loc_7F829274: ; CODE XREF: sub_7F829147+82j ; sub_7F829147+F5j ... cmp [ebp+var_C], 0 jz short loc_7F829282 push [ebp+var_C] call sub_7F82F149 loc_7F829282: ; CODE XREF: sub_7F829147+131j cmp [ebp+var_8], 0 jz short loc_7F829290 push [ebp+var_8] call sub_7F82F149 loc_7F829290: ; CODE XREF: sub_7F829147+13Fj mov eax, edi jmp short loc_7F829296 ; --------------------------------------------------------------------------- loc_7F829294: ; CODE XREF: sub_7F829147+36j ; sub_7F829147+42j ... xor eax, eax loc_7F829296: ; CODE XREF: sub_7F829147+64j ; sub_7F829147+14Bj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 20h sub_7F829147 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82929F proc near ; CODE XREF: sub_7F8261A0+374p var_30 = byte ptr -30h var_2C = dword ptr -2Ch var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h push ebp mov ebp, esp sub esp, 30h mov [ebp+var_2], 0FFFFh movsx eax, word_7F837814 shl eax, 3 push ebx push esi push edi xor edi, edi push 20h push eax mov [ebp+var_10], edi call sub_7F82F03B mov esi, eax test esi, esi jnz short loc_7F8292D5 mov eax, 400h jmp loc_7F829592 ; --------------------------------------------------------------------------- loc_7F8292D5: ; CODE XREF: sub_7F82929F+2Aj push 0 lea eax, [ebp+arg_8] push 0 mov [ebp+var_2C+2], esi push 0 push eax push [ebp+arg_8] push [ebp+arg_0] call sub_7F82D114 mov [ebp+var_C], eax test eax, eax jnz loc_7F82955A push 0 lea eax, [ebp+var_18] push 0 push 0 push eax push [ebp+arg_4] push [ebp+arg_0] call sub_7F82D114 mov [ebp+var_C], eax test eax, eax jnz loc_7F82955A push offset byte_7F8369F8 push [ebp+var_18] push [ebp+arg_4] push [ebp+arg_0] call sub_7F81B6A6 mov [ebp+var_C], eax test eax, eax jnz loc_7F82955A loc_7F829336: ; CODE XREF: sub_7F82929F+2B6j lea eax, [ebp+var_10] lea ecx, [ebp+arg_8] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov [ebp+var_C], eax test eax, eax jnz loc_7F82955A mov eax, [ebp+var_10] mov ecx, [eax] cmp [ebp+var_2], 0 mov edx, [ecx+14h] mov eax, [ecx+18h] mov [ebp+var_20], edx mov [ebp+var_1C], eax mov edi, [eax] jge short loc_7F829380 mov ax, [edi] mov [ebp+var_2], ax mov ax, [edi+2] and ax, 3 mov [ebp+var_4], ax loc_7F829380: ; CODE XREF: sub_7F82929F+CCj and word ptr [edi+2], 0FFFCh mov word ptr [ebp+var_2C], 0 movsx ecx, [ebp+var_2] movsx eax, word ptr [edi] sub eax, ecx imul eax, 0Ch cmp [ebp+var_2], 0 lea ebx, [eax+edi+0Eh] jle loc_7F8294D9 loc_7F8293A7: ; CODE XREF: sub_7F82929F+234j lea ecx, [ebp+var_14] lea edx, [ebp+var_18] mov [ebp+var_14], 4 mov eax, [ebx+4] add eax, 17h push eax push ecx push edx push [ebp+var_20] call sub_7F824CAB mov [ebp+var_C], eax test eax, eax jnz loc_7F8294C7 mov eax, [ebp+arg_4] cmp eax, [ebp+var_18] jnz loc_7F8294C7 mov eax, [ebx] mov [esi+4], eax mov ax, [edi] sub ax, [ebp+var_2] cmp [ebp+arg_C], 3 mov [esi+2], ax jnz short loc_7F82940A mov word ptr [esi], 3 mov ax, [esi+2] push eax push [ebp+var_10] call sub_7F818AE7 jmp loc_7F829496 ; --------------------------------------------------------------------------- loc_7F82940A: ; CODE XREF: sub_7F82929F+152j mov word ptr [esi], 2 mov eax, [ebx+8] cmp eax, 19Dh jb short loc_7F82941E mov eax, 19Dh loc_7F82941E: ; CODE XREF: sub_7F82929F+178j lea ecx, [ebp+var_14] mov [ebp+var_14], eax push dword ptr [ebx+4] push ecx push offset ReturnedString push [ebp+var_20] call sub_7F824CAB mov [ebp+var_C], eax test eax, eax jnz loc_7F8294C7 push offset sz ; lpString call ds:lstrlenA lea edi, unk_7F8367F4[eax] push edi ; lpString call ds:lstrlenA lea edi, [eax+edi+1] push offset byte_7F8369F8 ; lpString call ds:lstrlenA mov ebx, eax push offset byte_7F8369F8 ; lpString2 push edi ; lpString1 call ds:lstrcpyA lea eax, [ebx+eax+1] mov byte ptr [eax], 0 sub eax, offset unk_7F8367D7 push eax mov [ebp+var_14], eax push offset ReturnedString lea eax, [esi+2] push eax push [ebp+var_10] call sub_7F818E95 loc_7F829496: ; CODE XREF: sub_7F82929F+166j mov [ebp+var_C], eax mov eax, [ebp+var_1C] movsx ecx, [ebp+var_2] mov edi, [eax] movsx eax, word ptr [edi] sub eax, ecx imul eax, 0Ch cmp [ebp+var_C], 0 lea ebx, [eax+edi+0Eh] jnz short loc_7F8294C7 mov ax, word_7F837814 add esi, 8 inc word ptr [ebp+var_2C] cmp word ptr [ebp+var_2C], ax jge short loc_7F8294D9 loc_7F8294C7: ; CODE XREF: sub_7F82929F+12Bj ; sub_7F82929F+137j ... dec [ebp+var_2] add ebx, 0Ch cmp [ebp+var_2], 0 jg loc_7F8293A7 loc_7F8294D9: ; CODE XREF: sub_7F82929F+102j ; sub_7F82929F+226j cmp word ptr [ebp+var_2C], 0 jle short loc_7F82955A mov ax, [edi+2] push 1 mov cx, [ebp+var_4] xor cx, ax and cx, 3 xor cx, ax lea eax, [ebp+var_10] mov [edi+2], cx push eax xor edi, edi call sub_7F81813C mov [ebp+var_C], eax cmp eax, edi jnz short loc_7F82955A cmp [ebp+arg_C], 3 jnz short loc_7F82953E lea eax, [ebp+var_6] push eax push 3 push [ebp+var_2C] push [ebp+var_2C+2] push [ebp+arg_0] call sub_7F82C7BB cmp [ebp+var_6], di jz short loc_7F82953E mov ax, [ebp+var_6] neg ax push eax push [ebp+arg_8] push [ebp+arg_0] call sub_7F82C50A loc_7F82953E: ; CODE XREF: sub_7F82929F+270j ; sub_7F82929F+28Aj lea eax, [ebp+var_30] push eax push 4000h push [ebp+arg_8] push [ebp+arg_0] call sub_7F82A016 mov esi, [ebp+var_2C+2] jmp loc_7F829336 ; --------------------------------------------------------------------------- loc_7F82955A: ; CODE XREF: sub_7F82929F+53j ; sub_7F82929F+73j ... test edi, edi jz short loc_7F829574 mov ax, [edi+2] mov cx, [ebp+var_4] xor cx, ax and cx, 3 xor cx, ax mov [edi+2], cx loc_7F829574: ; CODE XREF: sub_7F82929F+2BDj cmp [ebp+var_10], 0 jz short loc_7F829585 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F829585: ; CODE XREF: sub_7F82929F+2D9j test esi, esi jz short loc_7F82958F push esi call sub_7F82F149 loc_7F82958F: ; CODE XREF: sub_7F82929F+2E8j mov eax, [ebp+var_C] loc_7F829592: ; CODE XREF: sub_7F82929F+31j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82929F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82959B proc near ; CODE XREF: sub_7F8261A0+22Cp ; sub_7F8261A0+293p var_18 = dword ptr -18h var_14 = dword ptr -14h lpString = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi mov esi, [ebp+arg_C] mov word ptr [esi], 1 xor edi, edi push 3 mov ebx, [ebp+arg_0] mov [ebp+var_18], edi mov [ebp+var_C], edi push [ebp+arg_8] push ebx call sub_7F81155C mov dword_7F83803C, eax cmp eax, edi jnz short loc_7F829600 push offset dword_7F83803C push [ebp+arg_8] push ebx call sub_7F826734 mov [ebp+var_8], eax cmp eax, edi jnz loc_7F82980E mov eax, dword_7F83803C push eax push 3 push [ebp+arg_8] push ebx call sub_7F811597 test eax, eax jz short loc_7F829600 mov [ebp+var_18], 1 loc_7F829600: ; CODE XREF: sub_7F82959B+2Ej ; sub_7F82959B+5Cj lea eax, [ebp+var_C] lea ecx, [ebp+arg_4] push eax push 0 push ecx push ebx call sub_7F817E9D mov [ebp+var_8], eax test eax, eax jz short loc_7F82962E cmp eax, 1001h jnz loc_7F82980E mov [ebp+var_8], 1008h jmp loc_7F82980E ; --------------------------------------------------------------------------- loc_7F82962E: ; CODE XREF: sub_7F82959B+7Aj mov ax, word_7F83780C mov edx, dword_7F83803C sub word_7F838028, ax mov ecx, [edx] movzx eax, word ptr [ecx] mov di, [eax+ecx+6] mov [ebp+var_14], ecx movzx edx, word ptr [ecx+2] movzx eax, word ptr [ecx+4] add edx, eax test di, di lea ebx, [edx+ecx+0Ch] jle short loc_7F82967C loc_7F829661: ; CODE XREF: sub_7F82959B+DFj push 0 push dword ptr [ebx] push [ebp+var_C] call sub_7F8194ED test ax, ax jl short loc_7F8296CB dec di add ebx, 6 test di, di jg short loc_7F829661 loc_7F82967C: ; CODE XREF: sub_7F82959B+C4j mov ecx, [ebp+var_14] movzx eax, word ptr [ecx] lea edi, [eax+ecx] mov ax, [edi+6] mov [ebp+var_2], ax test ax, ax jle loc_7F82980E xor ebx, ebx loc_7F829698: ; CODE XREF: sub_7F82959B+26Dj push ebx push dword ptr [edi] push [ebp+var_C] call sub_7F8194ED mov ecx, [ebp+var_14] movzx edx, word ptr [edi+4] lea ecx, [ecx+edx+6] mov [ebp+lpString], ecx movzx ecx, word ptr [edi-2] sub ecx, edx mov edx, [edi] shr edx, 10h movzx edx, dx cmp edx, 8 ; switch 9 cases ja short loc_7F8296D5 ; jumptable 7F8296C4 default case jmp ds:off_7F82985C[edx*4] ; switch jump ; --------------------------------------------------------------------------- loc_7F8296CB: ; CODE XREF: sub_7F82959B+D5j mov word ptr [esi], 0 jmp loc_7F82980E ; --------------------------------------------------------------------------- loc_7F8296D5: ; CODE XREF: sub_7F82959B+127j ; sub_7F82959B+129j ; DATA XREF: ... push esi ; jumptable 7F8296C4 default case push eax push [ebp+var_C] push ecx push [ebp+lpString] call sub_7F8283BC mov [ebp+var_8], eax cmp eax, ebx jnz loc_7F82980E cmp [esi], bx jnz loc_7F8297FD jmp loc_7F82980E ; --------------------------------------------------------------------------- loc_7F8296FC: ; CODE XREF: sub_7F82959B+129j ; DATA XREF: .text:off_7F82985Co push esi ; jumptable 7F8296C4 case 0 push eax ; int push [ebp+var_C] ; int push [ebp+lpString] ; lpString call sub_7F82826A mov [ebp+var_8], eax cmp eax, ebx jnz loc_7F82980E cmp [esi], bx jnz loc_7F8297FD cmp dword ptr [edi], 8001h jnz short loc_7F829784 push ebx push 8002h push [ebp+var_C] call sub_7F8194ED test ax, ax jl short loc_7F829750 push esi ; int push eax ; int push [ebp+var_C] ; int push [ebp+lpString] ; lpString call sub_7F82826A mov [ebp+var_8], eax cmp eax, ebx jnz loc_7F82980E loc_7F829750: ; CODE XREF: sub_7F82959B+19Bj cmp [esi], bx jnz loc_7F8297FD push ebx push 8003h push [ebp+var_C] call sub_7F8194ED test ax, ax jl short loc_7F829784 push esi ; int push eax ; int push [ebp+var_C] ; int push [ebp+lpString] ; lpString call sub_7F82826A mov [ebp+var_8], eax cmp eax, ebx jnz loc_7F82980E loc_7F829784: ; CODE XREF: sub_7F82959B+188j ; sub_7F82959B+1CFj cmp [esi], bx jnz short loc_7F8297FD jmp loc_7F82980E ; --------------------------------------------------------------------------- loc_7F82978E: ; CODE XREF: sub_7F82959B+129j ; DATA XREF: .text:off_7F82985Co push esi ; jumptable 7F8296C4 cases 1,2 push ebx ; int push ebx ; int push eax ; int push [ebp+var_C] ; int push [ebp+lpString] ; lpString call sub_7F827F63 mov [ebp+var_8], eax cmp eax, ebx jnz short loc_7F82980E cmp [esi], bx jnz short loc_7F8297FD jmp short loc_7F82980E ; --------------------------------------------------------------------------- loc_7F8297AB: ; CODE XREF: sub_7F82959B+129j ; DATA XREF: .text:off_7F82985Co push esi ; jumptable 7F8296C4 case 3 push eax push [ebp+var_C] push ecx push [ebp+lpString] call sub_7F828018 mov [ebp+var_8], eax cmp eax, ebx jnz short loc_7F82980E cmp [esi], bx jnz short loc_7F8297FD jmp short loc_7F82980E ; --------------------------------------------------------------------------- loc_7F8297C7: ; CODE XREF: sub_7F82959B+129j ; DATA XREF: .text:off_7F82985Co push esi ; jumptable 7F8296C4 cases 4,7 push eax push [ebp+var_C] push ecx push [ebp+lpString] call sub_7F828107 mov [ebp+var_8], eax cmp eax, ebx jnz short loc_7F82980E cmp [esi], bx jnz short loc_7F8297FD jmp short loc_7F82980E ; --------------------------------------------------------------------------- loc_7F8297E3: ; CODE XREF: sub_7F82959B+129j ; DATA XREF: .text:off_7F82985Co push esi ; jumptable 7F8296C4 cases 5,8 push eax push [ebp+var_C] push ecx push [ebp+lpString] call sub_7F8281B9 mov [ebp+var_8], eax cmp eax, ebx jnz short loc_7F82980E cmp [esi], bx jz short loc_7F82980E loc_7F8297FD: ; CODE XREF: sub_7F82959B+156j ; sub_7F82959B+17Cj ... dec [ebp+var_2] sub edi, 6 cmp [ebp+var_2], bx jg loc_7F829698 loc_7F82980E: ; CODE XREF: sub_7F82959B+43j ; sub_7F82959B+81j ... cmp dword_7F83803C, 0 jz short loc_7F829832 cmp [ebp+var_18], 0 jz short loc_7F829828 mov eax, dword_7F83803C push eax call sub_7F82F1E1 loc_7F829828: ; CODE XREF: sub_7F82959B+280j mov dword_7F83803C, 0 loc_7F829832: ; CODE XREF: sub_7F82959B+27Aj cmp [ebp+var_C], 0 jz short loc_7F829843 push 0 lea eax, [ebp+var_C] push eax call sub_7F81813C loc_7F829843: ; CODE XREF: sub_7F82959B+29Bj mov ax, word_7F837808 pop edi sub word_7F838028, ax pop esi mov eax, [ebp+var_8] pop ebx mov esp, ebp pop ebp retn 10h sub_7F82959B endp ; --------------------------------------------------------------------------- off_7F82985C dd offset loc_7F8296FC ; DATA XREF: sub_7F82959B+129r dd offset loc_7F82978E ; jump table for switch statement dd offset loc_7F82978E dd offset loc_7F8297AB dd offset loc_7F8297C7 dd offset loc_7F8297E3 dd offset loc_7F8296D5 dd offset loc_7F8297C7 dd offset loc_7F8297E3 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829880 proc near ; CODE XREF: sub_7F823452+28p var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi mov esi, [ebp+arg_0] push 37h push 0 push esi call sub_7F82A93C test eax, eax jnz short loc_7F8298A4 mov ebx, 101Eh jmp loc_7F82993C ; --------------------------------------------------------------------------- loc_7F8298A4: ; CODE XREF: sub_7F829880+18j mov dword_7F836C60, 1 lea eax, [ebp+var_2] push eax push 4F435380h push esi call sub_7F82C87F lea ecx, [ebp+var_4] xor edi, edi push ecx push 4C435380h push esi call sub_7F82C87F push edi mov ebx, 0FEFFh push ebx mov dword_7F838098, edi movsx eax, [ebp+var_4] movsx ecx, [ebp+var_2] add eax, ecx push 8 push 8 mov dword_7F83809C, eax push esi call sub_7F82D545 push edi push ebx push 90h push esi call sub_7F82D59C push [ebp+arg_8] push [ebp+arg_4] push esi call sub_7F829975 cmp eax, edi mov ebx, eax jnz short loc_7F82993C push [ebp+arg_4] push esi call sub_7F829C7D cmp eax, edi mov ebx, eax jnz short loc_7F82993C push [ebp+arg_4] push esi call sub_7F829E5C cmp eax, edi mov ebx, eax jnz short loc_7F82993C push [ebp+arg_4] push esi call sub_7F829EE1 mov ebx, eax loc_7F82993C: ; CODE XREF: sub_7F829880+1Fj ; sub_7F829880+91j ... xor edi, edi push edi push 0FEFFh push 8 push 8 push esi call sub_7F82D545 push edi push 0FEFFh push 90h push esi call sub_7F82D59C call sub_7F82AB0B mov eax, ebx mov dword_7F836C60, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F829880 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829975 proc near ; CODE XREF: sub_7F829880+88p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 14h push ebx lea eax, [ebp+var_C] push esi push edi xor edi, edi push eax push edi mov [ebp+var_C], edi push 4F435380h mov [ebp+var_14], edi push [ebp+arg_0] call sub_7F816C79 cmp eax, edi mov esi, eax jz short loc_7F8299B1 cmp esi, 1001h jnz loc_7F829C2D xor esi, esi jmp loc_7F829C2D ; --------------------------------------------------------------------------- loc_7F8299B1: ; CODE XREF: sub_7F829975+27j cmp dword_7F838078, 0 jz short loc_7F8299C1 mov esi, 253h jmp short loc_7F8299F1 ; --------------------------------------------------------------------------- loc_7F8299C1: ; CODE XREF: sub_7F829975+43j mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F8299F1: ; CODE XREF: sub_7F829975+4Aj test esi, esi jnz loc_7F829C2D mov eax, [ebp+var_C] mov ebx, [eax] movzx eax, word ptr [ebx] add eax, ebx mov [ebp+var_4], eax cmp dword ptr [eax], 0FFFFFFFFh jz loc_7F829BCF loc_7F829A0F: ; CODE XREF: sub_7F829975+254j mov eax, [ebp+var_4] push 0 mov ecx, [eax] push ecx mov [ebp+var_10], ecx call sub_7F8144A4 test eax, eax jz loc_7F829B8F test byte ptr [eax+11h], 1 jz short loc_7F829A62 cmp [ebp+arg_4], 0 jz short loc_7F829A62 movzx eax, word ptr [ebx] sub eax, [ebp+var_4] mov ecx, 6 add eax, ebx cdq idiv ecx push eax push ebx call sub_7F816A42 mov esi, eax test esi, esi jnz loc_7F829C2D add [ebp+var_4], 6 mov edi, 1 jmp loc_7F829B8F ; --------------------------------------------------------------------------- loc_7F829A62: ; CODE XREF: sub_7F829975+B6j ; sub_7F829975+BCj mov ecx, [eax+8] mov [ebp+var_8], ecx or byte ptr [eax+11h], 1 cmp byte ptr [ebp+var_8], 83h jz short loc_7F829A90 cmp [ebp+arg_4], 0 jz loc_7F829B8F mov [ebp+var_8], 83h mov dword ptr [eax+8], 83h push eax call sub_7F8148F7 loc_7F829A90: ; CODE XREF: sub_7F829975+FBj push 0 push [ebp+var_8] call sub_7F8144A4 test eax, eax jnz loc_7F829B8B cmp [ebp+arg_4], 0 jz loc_7F829B8F mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F829AC2 call sub_7F82A34F jmp short loc_7F829AD0 ; --------------------------------------------------------------------------- loc_7F829AC2: ; CODE XREF: sub_7F829975+144j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F829AD0: ; CODE XREF: sub_7F829975+14Bj lea eax, [ebp+var_14] lea ecx, [ebp+var_8] mov dword_7F838078, 0 push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F829C2D push 1 lea eax, [ebp+var_14] push eax call sub_7F81813C mov esi, eax test esi, esi jnz loc_7F829BE5 cmp dword_7F838078, 0 jz short loc_7F829B1B mov esi, 253h jmp short loc_7F829B4B ; --------------------------------------------------------------------------- loc_7F829B1B: ; CODE XREF: sub_7F829975+19Dj mov eax, [ebp+arg_0] xor esi, esi mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F829B4B: ; CODE XREF: sub_7F829975+1A4j test esi, esi jnz loc_7F829C2D push 0 push [ebp+var_10] call sub_7F8144A4 mov ecx, [ebp+var_8] push eax mov [eax+8], ecx call sub_7F8148F7 push 0 push [ebp+var_8] call sub_7F8144A4 mov ecx, [ebp+var_10] push eax mov [eax+8], ecx mov word ptr [eax+12h], 801Dh or byte ptr [eax+11h], 1 call sub_7F8148F7 jmp short loc_7F829B8F ; --------------------------------------------------------------------------- loc_7F829B8B: ; CODE XREF: sub_7F829975+127j or byte ptr [eax+11h], 1 loc_7F829B8F: ; CODE XREF: sub_7F829975+ACj ; sub_7F829975+E8j ... cmp dword_7F83809C, 0 mov eax, 1 jbe short loc_7F829BBB push 64h sub edx, edx inc dword_7F838098 mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F829BBB: ; CODE XREF: sub_7F829975+226j test eax, eax jz short loc_7F829BF2 sub [ebp+var_4], 6 mov eax, [ebp+var_4] cmp dword ptr [eax], 0FFFFFFFFh jnz loc_7F829A0F loc_7F829BCF: ; CODE XREF: sub_7F829975+94j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F829BF9 call sub_7F82A34F jmp short loc_7F829C07 ; --------------------------------------------------------------------------- loc_7F829BE5: ; CODE XREF: sub_7F829975+190j push 0 lea eax, [ebp+var_14] push eax call sub_7F81813C jmp short loc_7F829C2D ; --------------------------------------------------------------------------- loc_7F829BF2: ; CODE XREF: sub_7F829975+248j mov esi, 101Eh jmp short loc_7F829C2D ; --------------------------------------------------------------------------- loc_7F829BF9: ; CODE XREF: sub_7F829975+267j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F829C07: ; CODE XREF: sub_7F829975+26Ej mov dword_7F838078, 0 test edi, edi jz short loc_7F829C2D push [ebp+var_C] mov [ebp+var_10], 4F435380h lea ecx, [ebp+var_10] push ecx push [ebp+arg_0] call sub_7F816DC7 mov esi, eax loc_7F829C2D: ; CODE XREF: sub_7F829975+2Fj ; sub_7F829975+37j ... cmp dword_7F838078, 0 jz short loc_7F829C64 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F829C4C call sub_7F82A34F jmp short loc_7F829C5A ; --------------------------------------------------------------------------- loc_7F829C4C: ; CODE XREF: sub_7F829975+2CEj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F829C5A: ; CODE XREF: sub_7F829975+2D5j mov dword_7F838078, 0 loc_7F829C64: ; CODE XREF: sub_7F829975+2BFj cmp [ebp+var_C], 0 jz short loc_7F829C72 push [ebp+var_C] call sub_7F82F1E1 loc_7F829C72: ; CODE XREF: sub_7F829975+2F3j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F829975 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829C7D proc near ; CODE XREF: sub_7F829880+97p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch push ebx lea eax, [ebp+var_4] push esi push edi xor edi, edi push eax push edi mov [ebp+var_C], edi push 4C435380h mov [ebp+var_4], edi push [ebp+arg_0] call sub_7F816C79 cmp eax, edi mov esi, eax jz short loc_7F829CB9 cmp esi, 1001h jnz loc_7F829E0C xor esi, esi jmp loc_7F829E0C ; --------------------------------------------------------------------------- loc_7F829CB9: ; CODE XREF: sub_7F829C7D+27j cmp dword_7F838078, 0 jz short loc_7F829CC9 mov esi, 253h jmp short loc_7F829CF9 ; --------------------------------------------------------------------------- loc_7F829CC9: ; CODE XREF: sub_7F829C7D+43j mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax xor esi, esi mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F829CF9: ; CODE XREF: sub_7F829C7D+4Aj test esi, esi jnz loc_7F829E0C mov eax, [ebp+var_4] mov edi, [eax] movzx ecx, word ptr [edi] lea ebx, [ecx+edi] cmp dword ptr [ebx], 0FFFFFFFFh jz loc_7F829DB1 loc_7F829D15: ; CODE XREF: sub_7F829C7D+12Ej mov eax, [ebx] mov [ebp+var_8], eax cmp al, 90h jz short loc_7F829D25 mov [ebp+var_8], 90h loc_7F829D25: ; CODE XREF: sub_7F829C7D+9Fj push 0 push [ebp+var_8] call sub_7F8144A4 test eax, eax jz short loc_7F829D45 mov cx, [eax+10h] test ch, 1 jnz short loc_7F829D75 or ch, 1 mov [eax+10h], cx jmp short loc_7F829D75 ; --------------------------------------------------------------------------- loc_7F829D45: ; CODE XREF: sub_7F829C7D+B4j cmp [ebp+arg_4], 0 jz short loc_7F829D75 movzx eax, word ptr [edi] sub eax, ebx mov ecx, 6 add eax, edi cdq idiv ecx push eax push edi call sub_7F816A42 mov esi, eax test esi, esi jnz loc_7F829E0C mov [ebp+var_C], 1 add ebx, 6 loc_7F829D75: ; CODE XREF: sub_7F829C7D+BDj ; sub_7F829C7D+C6j ... cmp dword_7F83809C, 0 mov eax, 1 jbe short loc_7F829DA1 push 64h sub edx, edx inc dword_7F838098 mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F829DA1: ; CODE XREF: sub_7F829C7D+104j test eax, eax jz short loc_7F829DDC sub ebx, 6 cmp dword ptr [ebx], 0FFFFFFFFh jnz loc_7F829D15 loc_7F829DB1: ; CODE XREF: sub_7F829C7D+92j xor ecx, ecx cmp [ebp+var_C], ecx jz short loc_7F829E0C mov [ebp+var_8], 4C435380h cmp dword_7F838078, ecx jz short loc_7F829DFB mov eax, dword_7F838078 cmp [eax+254h], cx jz short loc_7F829DE3 call sub_7F82A34F jmp short loc_7F829DF1 ; --------------------------------------------------------------------------- loc_7F829DDC: ; CODE XREF: sub_7F829C7D+126j mov esi, 101Eh jmp short loc_7F829E0C ; --------------------------------------------------------------------------- loc_7F829DE3: ; CODE XREF: sub_7F829C7D+156j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F829DF1: ; CODE XREF: sub_7F829C7D+15Dj mov dword_7F838078, 0 loc_7F829DFB: ; CODE XREF: sub_7F829C7D+148j push [ebp+var_4] lea ecx, [ebp+var_8] push ecx push [ebp+arg_0] call sub_7F816DC7 mov esi, eax loc_7F829E0C: ; CODE XREF: sub_7F829C7D+2Fj ; sub_7F829C7D+37j ... cmp dword_7F838078, 0 jz short loc_7F829E43 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F829E2B call sub_7F82A34F jmp short loc_7F829E39 ; --------------------------------------------------------------------------- loc_7F829E2B: ; CODE XREF: sub_7F829C7D+1A5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F829E39: ; CODE XREF: sub_7F829C7D+1ACj mov dword_7F838078, 0 loc_7F829E43: ; CODE XREF: sub_7F829C7D+196j cmp [ebp+var_4], 0 jz short loc_7F829E51 push [ebp+var_4] call sub_7F82F1E1 loc_7F829E51: ; CODE XREF: sub_7F829C7D+1CAj mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 8 sub_7F829C7D endp ; =============== S U B R O U T I N E ======================================= sub_7F829E5C proc near ; CODE XREF: sub_7F829880+A6p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi xor esi, esi xor di, di push ebp mov ebx, [esp+10h+arg_0] mov ebp, [esp+10h+arg_4] loc_7F829E6D: ; CODE XREF: sub_7F829E5C+42j mov eax, 0 test ebp, ebp jnz short loc_7F829E7B loc_7F829E76: ; CODE XREF: sub_7F829E5C+31j movzx eax, di inc di loc_7F829E7B: ; CODE XREF: sub_7F829E5C+18j push 85h push eax push ebx call sub_7F82D73C test eax, eax jz short loc_7F829EA2 test ebp, ebp jz short loc_7F829E76 push 0 push 1 push eax push ebx call sub_7F82B9DE mov esi, eax test esi, esi jz short loc_7F829E6D jmp short loc_7F829ED8 ; --------------------------------------------------------------------------- loc_7F829EA2: ; CODE XREF: sub_7F829E5C+2Dj xor di, di loc_7F829EA5: ; CODE XREF: sub_7F829E5C+7Aj mov eax, 0 test ebp, ebp jnz short loc_7F829EB3 loc_7F829EAE: ; CODE XREF: sub_7F829E5C+69j movzx eax, di inc di loc_7F829EB3: ; CODE XREF: sub_7F829E5C+50j push 83h push eax push ebx call sub_7F82D73C test eax, eax jz short loc_7F829ED8 test ebp, ebp jz short loc_7F829EAE push 0 push 1 push eax push ebx call sub_7F82B9DE mov esi, eax test esi, esi jz short loc_7F829EA5 loc_7F829ED8: ; CODE XREF: sub_7F829E5C+44j ; sub_7F829E5C+65j mov eax, esi pop ebp pop edi pop esi pop ebx retn 8 sub_7F829E5C endp ; =============== S U B R O U T I N E ======================================= sub_7F829EE1 proc near ; CODE XREF: sub_7F829880+B5p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi xor ebx, ebx xor di, di mov esi, [esp+0Ch+arg_4] loc_7F829EED: ; CODE XREF: sub_7F829EE1+43j mov eax, 0 test esi, esi jnz short loc_7F829EFB loc_7F829EF6: ; CODE XREF: sub_7F829EE1+2Fj movzx eax, di inc di loc_7F829EFB: ; CODE XREF: sub_7F829EE1+13j push 90h push eax push [esp+14h+arg_0] call sub_7F82D73C test eax, eax jz short loc_7F829F26 test esi, esi jz short loc_7F829EF6 push 0 push 1 push eax push [esp+18h+arg_0] call sub_7F82B9DE mov ebx, eax test ebx, ebx jz short loc_7F829EED loc_7F829F26: ; CODE XREF: sub_7F829EE1+2Bj mov eax, ebx pop edi pop esi pop ebx retn 8 sub_7F829EE1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829F2E proc near ; CODE XREF: sub_7F81039F+12Dp ; sub_7F81039F+15Cp ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi xor esi, esi xor edi, edi xor ebx, ebx push ebx push [ebp+arg_4] push [ebp+arg_0] call sub_7F81155C mov [ebp+var_4], eax cmp eax, ebx jnz short loc_7F829F68 call sub_7F823FB2 mov [ebp+var_4], eax cmp eax, ebx jnz short loc_7F829F63 mov esi, 400h jmp short loc_7F829F9C ; --------------------------------------------------------------------------- loc_7F829F63: ; CODE XREF: sub_7F829F2E+2Cj mov edi, 1 loc_7F829F68: ; CODE XREF: sub_7F829F2E+20j push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+var_4] call sub_7F824021 mov ebx, eax test ebx, ebx jnz short loc_7F829F86 mov esi, 400h jmp short loc_7F829F9C ; --------------------------------------------------------------------------- loc_7F829F86: ; CODE XREF: sub_7F829F2E+4Fj test edi, edi jz short loc_7F829F9C push [ebp+var_4] push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F811597 mov esi, eax loc_7F829F9C: ; CODE XREF: sub_7F829F2E+33j ; sub_7F829F2E+56j ... test esi, esi jz short loc_7F829FC7 test ebx, ebx jz short loc_7F829FAA push ebx call sub_7F8240DB loc_7F829FAA: ; CODE XREF: sub_7F829F2E+74j test edi, edi jz short loc_7F829FC5 push [ebp+var_4] call sub_7F823FB7 push 0 push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F811597 loc_7F829FC5: ; CODE XREF: sub_7F829F2E+7Ej xor ebx, ebx loc_7F829FC7: ; CODE XREF: sub_7F829F2E+70j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F829F2E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F829FD2 proc near ; CODE XREF: sub_7F81039F+1A1p ; sub_7F810567+22Ap ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F81155C mov edi, eax test edi, edi jz short loc_7F82A011 push [ebp+arg_8] call sub_7F8240DB push edi call sub_7F824015 test ax, ax jg short loc_7F82A011 push edi call sub_7F823FB7 push 0 push 0 push [ebp+arg_4] push [ebp+arg_0] call sub_7F811597 loc_7F82A011: ; CODE XREF: sub_7F829FD2+15j ; sub_7F829FD2+28j pop edi pop ebp retn 0Ch sub_7F829FD2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82A016 proc near ; CODE XREF: sub_7F810955+228p ; sub_7F810955+257p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi mov edi, 1 mov esi, [ebp+arg_C] test esi, esi jnz short loc_7F82A02D mov esi, offset unk_7F833D10 loc_7F82A02D: ; CODE XREF: sub_7F82A016+10j mov ebx, [ebp+arg_4] push 0 push ebx mov [esi], ebx push [ebp+arg_0] call sub_7F81155C test eax, eax jz short loc_7F82A04F push 0Eh push esi push [ebp+arg_8] push eax call sub_7F824187 mov edi, eax loc_7F82A04F: ; CODE XREF: sub_7F82A016+29j test edi, edi jz short loc_7F82A0A1 test ebx, 0FFFFFF00h jz short loc_7F82A07B movzx eax, bl push 0 push eax push [ebp+arg_0] call sub_7F81155C test eax, eax jz short loc_7F82A07B push 0Eh push esi push [ebp+arg_8] push eax call sub_7F824187 mov edi, eax loc_7F82A07B: ; CODE XREF: sub_7F82A016+43j ; sub_7F82A016+55j test edi, edi jz short loc_7F82A0A1 test ebx, ebx jz short loc_7F82A0A1 push 0 push 0 push [ebp+arg_0] call sub_7F81155C test eax, eax jz short loc_7F82A0A1 push 0Eh push esi push [ebp+arg_8] push eax call sub_7F824187 mov edi, eax loc_7F82A0A1: ; CODE XREF: sub_7F82A016+3Bj ; sub_7F82A016+67j ... mov eax, edi pop edi pop esi pop ebx pop ebp retn 10h sub_7F82A016 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82A0AA(int, LPCSTR lpString) sub_7F82A0AA proc near ; CODE XREF: sub_7F812460+70p arg_0 = dword ptr 4 lpString = dword ptr 8 push ebx push esi push edi mov edi, [esp+0Ch+arg_0] mov esi, [edi] lea eax, [esi+38h] push eax ; lpString call ds:lstrlenA push [esp+0Ch+lpString] ; lpString mov ebx, eax call ds:lstrlenA cmp eax, ebx jbe short loc_7F82A0E6 push 0 add eax, 39h push eax push edi call sub_7F82F1FF test eax, eax jnz short loc_7F82A0E4 mov eax, 400h jmp short loc_7F82A103 ; --------------------------------------------------------------------------- loc_7F82A0E4: ; CODE XREF: sub_7F82A0AA+31j mov esi, [edi] loc_7F82A0E6: ; CODE XREF: sub_7F82A0AA+21j lea eax, [esi+8] push eax ; int push 0 ; __int16 push [esp+14h+lpString] ; pSrc call sub_7F820E0E test eax, eax jnz short loc_7F82A103 push 1 push dword ptr [esi] push esi call sub_7F820F2F loc_7F82A103: ; CODE XREF: sub_7F82A0AA+38j ; sub_7F82A0AA+4Dj cmp eax, 253h jz short loc_7F82A111 cmp eax, 202h jnz short loc_7F82A129 loc_7F82A111: ; CODE XREF: sub_7F82A0AA+5Ej mov ecx, [esi] test byte ptr [ecx+265h], 2 jz short loc_7F82A129 mov ecx, dword_7F838078 or byte ptr [ecx+265h], 1 loc_7F82A129: ; CODE XREF: sub_7F82A0AA+65j ; sub_7F82A0AA+70j pop edi pop esi pop ebx retn 8 sub_7F82A0AA endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82A12F(int, LPCSTR lpString2) sub_7F82A12F proc near ; CODE XREF: sub_7F812460+8Bp arg_0 = dword ptr 4 lpString2 = dword ptr 8 mov eax, [esp+arg_0] push ebx mov ebx, [esp+4+lpString2] push esi push edi mov esi, [eax] push ebp xor eax, eax cmp [ebx], al jz short loc_7F82A1B2 cmp [esi+10h], ax jl short loc_7F82A152 push eax push dword ptr [esi] push esi call sub_7F821055 loc_7F82A152: ; CODE XREF: sub_7F82A12F+18j mov eax, [esi+4] test eax, eax jz short loc_7F82A15F push eax call sub_7F815991 loc_7F82A15F: ; CODE XREF: sub_7F82A12F+28j lea edi, [esi+8] lea ebp, [esi+38h] push ebx ; lpString2 push ebp ; lpString1 mov eax, [edi] mov [esi+4], eax mov cx, [esi+12h] mov [esi+10h], cx call ds:lstrcpyA push ebp ; lpRootPathName call sub_7F82A7AB test eax, eax jz short loc_7F82A19B mov word ptr [esi+2Ch], 3 mov eax, [esi+24h] test eax, eax jz short loc_7F82A1D2 push 1 push eax call sub_7F8161D3 jmp short loc_7F82A1D2 ; --------------------------------------------------------------------------- loc_7F82A19B: ; CODE XREF: sub_7F82A12F+53j mov word ptr [esi+2Ch], 2 mov eax, [esi+24h] test eax, eax jz short loc_7F82A1D2 push 0 push eax call sub_7F8161D3 jmp short loc_7F82A1D2 ; --------------------------------------------------------------------------- loc_7F82A1B2: ; CODE XREF: sub_7F82A12F+12j lea edi, [esi+8] cmp dword ptr [edi], 0 jz short loc_7F82A1D2 cmp word ptr [esi+12h], 0 jl short loc_7F82A1CB push 1 push dword ptr [esi] push esi call sub_7F821055 loc_7F82A1CB: ; CODE XREF: sub_7F82A12F+90j push dword ptr [edi] call sub_7F815991 loc_7F82A1D2: ; CODE XREF: sub_7F82A12F+60j ; sub_7F82A12F+6Aj ... xor eax, eax pop ebp mov dword ptr [edi], 0 pop edi mov word ptr [esi+12h], 0FFFFh pop esi pop ebx retn 8 sub_7F82A12F endp ; =============== S U B R O U T I N E ======================================= sub_7F82A1E7 proc near ; CODE XREF: sub_7F810955+275p ; sub_7F811B7E+5Dp ... arg_0 = dword ptr 4 push ebx push esi push edi xor ebx, ebx mov esi, [esp+0Ch+arg_0] push esi call sub_7F812408 mov eax, [esi] mov edi, [eax] cmp [edi+214h], bx jbe loc_7F82A2BE cmp word ptr [edi+21Ch], 6 jz short loc_7F82A228 push 1 push edi call sub_7F82A8C1 cmp eax, 1 sbb ebx, ebx neg ebx test ebx, ebx jz loc_7F82A2BE loc_7F82A228: ; CODE XREF: sub_7F82A1E7+28j test ebx, ebx jnz short loc_7F82A246 call ds:GetTickCount mov ecx, [edi+268h] lea edx, [ecx+0EA60h] cmp edx, eax jb short loc_7F82A246 cmp eax, ecx jnb short loc_7F82A2BE loc_7F82A246: ; CODE XREF: sub_7F82A1E7+43j ; sub_7F82A1E7+59j cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F82A283 mov eax, [esi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, esi xor eax, eax loc_7F82A283: ; CODE XREF: sub_7F82A1E7+6Bj test eax, eax jnz short loc_7F82A2BE push 0 push 1 call sub_7F813C77 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82A2A6 call sub_7F82A34F jmp short loc_7F82A2B4 ; --------------------------------------------------------------------------- loc_7F82A2A6: ; CODE XREF: sub_7F82A1E7+B6j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82A2B4: ; CODE XREF: sub_7F82A1E7+BDj mov dword_7F838078, 0 loc_7F82A2BE: ; CODE XREF: sub_7F82A1E7+1Aj ; sub_7F82A1E7+3Bj ... pop edi pop esi pop ebx retn 4 sub_7F82A1E7 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A2C4 proc near ; CODE XREF: sub_7F810955+26Dp arg_0 = dword ptr 4 push esi mov eax, 253h cmp dword_7F838078, 0 jnz short loc_7F82A306 mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82A306: ; CODE XREF: sub_7F82A2C4+Dj test eax, eax jnz short loc_7F82A345 push 0 push 1 call sub_7F813C77 mov esi, eax mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82A32B call sub_7F82A34F jmp short loc_7F82A339 ; --------------------------------------------------------------------------- loc_7F82A32B: ; CODE XREF: sub_7F82A2C4+5Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82A339: ; CODE XREF: sub_7F82A2C4+65j mov dword_7F838078, 0 mov eax, esi loc_7F82A345: ; CODE XREF: sub_7F82A2C4+44j pop esi retn 4 sub_7F82A2C4 endp ; [00000006 BYTES: COLLAPSED FUNCTION GetCurrentProcessId_0. PRESS CTRL-NUMPAD+ TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7F82A34F proc near ; CODE XREF: sub_7F810875+89p ; sub_7F812460+14Fp ... var_10 = byte ptr -10h var_C = word ptr -0Ch sub esp, 10h mov edx, dword_7F838078 push esi lea ecx, [edx+264h] xor esi, esi mov dword_7F838078, esi mov ax, [ecx] test al, 2 jnz short loc_7F82A392 or al, 2 mov [ecx], ax mov eax, dword_7F83807C mov cx, [edx+254h] lea edx, [esp+14h+var_10] mov [esp+14h+var_C], cx push edx push 8 push esi push eax call sub_7F82A016 loc_7F82A392: ; CODE XREF: sub_7F82A34F+1Dj pop esi add esp, 10h retn sub_7F82A34F endp ; =============== S U B R O U T I N E ======================================= sub_7F82A397 proc near ; CODE XREF: sub_7F819627+22Cp ; sub_7F825A83+13Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] push esi mov esi, [esp+4+arg_0] push edi mov edi, [esp+8+arg_4] sub eax, eax repe cmpsb jz short loc_7F82A3B0 sbb eax, eax sbb eax, 0FFFFFFFFh loc_7F82A3B0: ; CODE XREF: sub_7F82A397+12j test eax, eax jle short loc_7F82A3BB mov eax, 1 jmp short loc_7F82A3C4 ; --------------------------------------------------------------------------- loc_7F82A3BB: ; CODE XREF: sub_7F82A397+1Bj mov eax, 0FFFFFFFFh jl short loc_7F82A3C4 xor eax, eax loc_7F82A3C4: ; CODE XREF: sub_7F82A397+22j ; sub_7F82A397+29j pop edi pop esi retn 0Ch sub_7F82A397 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A3C9 proc near ; CODE XREF: sub_7F810181+61p ; sub_7F81D22C+FAp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = byte ptr 0Ch mov edx, [esp+arg_4] push ebx mov eax, edx dec edx test eax, eax jz short loc_7F82A3E9 mov eax, [esp+4+arg_0] mov bl, [esp+4+arg_8] loc_7F82A3DD: ; CODE XREF: sub_7F82A3C9+1Ej cmp [eax], bl jz short loc_7F82A3EB inc eax mov ecx, edx dec edx test ecx, ecx jnz short loc_7F82A3DD loc_7F82A3E9: ; CODE XREF: sub_7F82A3C9+Aj xor eax, eax loc_7F82A3EB: ; CODE XREF: sub_7F82A3C9+16j pop ebx retn 0Ch sub_7F82A3C9 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A3EF proc near ; CODE XREF: sub_7F826D5C+276p ; sub_7F826D5C+293p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch push esi mov esi, [esp+4+arg_4] mov eax, esi dec esi test eax, eax jz short loc_7F82A413 mov cx, [esp+4+arg_8] mov eax, [esp+4+arg_0] loc_7F82A404: ; CODE XREF: sub_7F82A3EF+22j cmp [eax], cx jz short loc_7F82A415 add eax, 2 mov edx, esi dec esi test edx, edx jnz short loc_7F82A404 loc_7F82A413: ; CODE XREF: sub_7F82A3EF+Aj xor eax, eax loc_7F82A415: ; CODE XREF: sub_7F82A3EF+18j pop esi retn 0Ch sub_7F82A3EF endp ; =============== S U B R O U T I N E ======================================= sub_7F82A419 proc near ; CODE XREF: sub_7F81CE7B+119p ; sub_7F826D5C+8Fp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov esi, [esp+4+arg_4] mov eax, esi dec esi test eax, eax jz short loc_7F82A43B mov eax, [esp+4+arg_0] mov ecx, [esp+4+arg_8] loc_7F82A42D: ; CODE XREF: sub_7F82A419+20j cmp [eax], ecx jz short loc_7F82A43D add eax, 4 mov edx, esi dec esi test edx, edx jnz short loc_7F82A42D loc_7F82A43B: ; CODE XREF: sub_7F82A419+Aj xor eax, eax loc_7F82A43D: ; CODE XREF: sub_7F82A419+16j pop esi retn 0Ch sub_7F82A419 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A441 proc near ; DATA XREF: sub_7F81217E+96o arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esi] mov edi, [eax+4] call sub_7F8168ED mov ebx, eax call sub_7F816000 test eax, eax jnz loc_7F82A509 mov ecx, [esi] lea eax, [ecx+2Ch] test byte ptr [eax], 1 jnz short loc_7F82A47A push 0 push dword ptr [ecx+24h] call sub_7F8161D3 jmp loc_7F82A509 ; --------------------------------------------------------------------------- loc_7F82A47A: ; CODE XREF: sub_7F82A441+28j cmp ebx, dword_7F83676C jb loc_7F82A509 test edi, edi jz short loc_7F82A509 cmp dword_7F838078, 0 jz short loc_7F82A49A mov eax, 253h jmp short loc_7F82A4C1 ; --------------------------------------------------------------------------- loc_7F82A49A: ; CODE XREF: sub_7F82A441+50j mov dword_7F83807C, ecx mov ax, [eax] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, esi xor eax, eax loc_7F82A4C1: ; CODE XREF: sub_7F82A441+57j test eax, eax jnz short loc_7F82A509 push 0 push 1 call sub_7F813C77 test eax, eax jnz short loc_7F82A4D9 push 0 call sub_7F82A514 loc_7F82A4D9: ; CODE XREF: sub_7F82A441+8Fj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82A4EF call sub_7F82A34F jmp short loc_7F82A4FD ; --------------------------------------------------------------------------- loc_7F82A4EF: ; CODE XREF: sub_7F82A441+A5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82A4FD: ; CODE XREF: sub_7F82A441+ACj mov dword_7F838078, 0 jmp short loc_7F82A50E ; --------------------------------------------------------------------------- loc_7F82A509: ; CODE XREF: sub_7F82A441+1Aj ; sub_7F82A441+34j ... mov eax, 1 loc_7F82A50E: ; CODE XREF: sub_7F82A441+C6j pop edi pop esi pop ebx retn 8 sub_7F82A441 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A514 proc near ; CODE XREF: sub_7F812653+165p ; sub_7F8127E7+D2p ... arg_0 = dword ptr 4 xor ecx, ecx cmp dword_7F836C60, ecx jnz short locret_7F82A585 mov eax, dword_7F838078 mov eax, [eax+218h] test eax, eax jz short loc_7F82A53A push ecx push ecx push 8000000h push eax call sub_7F824187 loc_7F82A53A: ; CODE XREF: sub_7F82A514+17j call ds:GetTickCount mov ecx, dword_7F838078 mov [ecx+26Ch], eax mov ecx, dword_7F838078 or byte ptr [ecx+265h], 2 mov eax, dword_7F83807C xor ecx, ecx cmp [esp+arg_0], ecx mov edx, [eax] mov [edx+4], ecx mov dword_7F838080, ecx jz short locret_7F82A585 mov eax, dword_7F838078 add eax, 254h cmp [eax], cx jnz short locret_7F82A585 mov word ptr [eax], 7 locret_7F82A585: ; CODE XREF: sub_7F82A514+8j ; sub_7F82A514+5Bj ... retn 4 sub_7F82A514 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82A588 proc near ; CODE XREF: sub_7F812460+13Bp ; sub_7F812653+22p ... Buffer = byte ptr -200h var_1F8 = dword ptr -1F8h var_1F2 = word ptr -1F2h var_1F0 = byte ptr -1F0h var_E4 = dword ptr -0E4h push ebp mov eax, dword_7F838078 mov ebp, esp sub esp, 200h push esi push edi xor esi, esi test byte ptr [eax+265h], 1 jz short loc_7F82A5AD mov eax, 611h jmp loc_7F82A7A5 ; --------------------------------------------------------------------------- loc_7F82A5AD: ; CODE XREF: sub_7F82A588+19j call ds:GetTickCount mov ecx, dword_7F838078 mov edi, eax mov edx, 1F4h mov ecx, [ecx+26Ch] sub edi, ecx cmp edi, edx ja short loc_7F82A5DE cmp ecx, eax jbe short loc_7F82A5D4 cmp eax, edx ja short loc_7F82A5DE loc_7F82A5D4: ; CODE XREF: sub_7F82A588+46j mov eax, 611h jmp loc_7F82A7A5 ; --------------------------------------------------------------------------- loc_7F82A5DE: ; CODE XREF: sub_7F82A588+42j ; sub_7F82A588+4Aj mov eax, dword_7F83807C mov edi, [eax] cmp dword ptr [edi+18h], 0 jz short loc_7F82A610 add edi, 38h push edi ; lpString call ds:lstrlenA inc eax mov ecx, dword_7F838078 push eax push edi push 800000h push dword ptr [ecx+218h] call sub_7F824187 mov esi, eax loc_7F82A610: ; CODE XREF: sub_7F82A588+61j test esi, esi jnz short loc_7F82A63A mov eax, dword_7F838078 test byte ptr [eax+265h], 1 jz short loc_7F82A632 add eax, 254h cmp word ptr [eax], 0 jnz short loc_7F82A632 mov word ptr [eax], 7 loc_7F82A632: ; CODE XREF: sub_7F82A588+98j ; sub_7F82A588+A3j test esi, esi jz loc_7F82A70B loc_7F82A63A: ; CODE XREF: sub_7F82A588+8Aj mov eax, dword_7F83807C mov ecx, [eax] lea eax, [ebp+Buffer] push eax ; lpBuffer mov edi, [ecx+8] push edi ; int call sub_7F812BEA test eax, eax jz short loc_7F82A65C xor esi, esi jmp loc_7F82A6F7 ; --------------------------------------------------------------------------- loc_7F82A65C: ; CODE XREF: sub_7F82A588+CBj mov eax, dword_7F838078 mov ecx, [ebp+var_1F8] cmp [eax+8], ecx jnz short loc_7F82A6E9 mov ecx, [ebp+var_E4] cmp [eax+11Ch], ecx jnz short loc_7F82A6E9 mov ax, [eax+0Eh] cmp [ebp+var_1F2], ax jnz short loc_7F82A6E9 push 40h xor al, 1 movsx eax, ax shl eax, 6 add eax, dword_7F838078 add eax, 10h push eax mov ax, [ebp+var_1F2] xor al, 1 movsx eax, ax shl eax, 6 lea ecx, [ebp+eax+var_1F0] push ecx call sub_7F81AF66 test eax, eax jz short loc_7F82A6E9 mov eax, dword_7F838078 push 1 mov dword_7F838080, edi and word ptr [eax+264h], 0FDFFh push dword_7F83807C call sub_7F82615D push dword_7F83807C call sub_7F812408 jmp short loc_7F82A70B ; --------------------------------------------------------------------------- loc_7F82A6E9: ; CODE XREF: sub_7F82A588+E2j ; sub_7F82A588+F0j ... xor esi, esi mov eax, dword_7F838078 or byte ptr [eax+265h], 1 loc_7F82A6F7: ; CODE XREF: sub_7F82A588+CFj mov eax, dword_7F838078 add eax, 254h cmp [eax], si jnz short loc_7F82A70B mov word ptr [eax], 7 loc_7F82A70B: ; CODE XREF: sub_7F82A588+ACj ; sub_7F82A588+15Fj ... call ds:GetTickCount mov ecx, dword_7F838078 mov [ecx+26Ch], eax mov eax, dword_7F83807C mov edi, [eax] cmp dword ptr [edi+18h], 0 jz short loc_7F82A764 mov eax, 1 test esi, esi jz short loc_7F82A73E lea eax, [edi+38h] push eax ; lpString call ds:lstrlenA inc eax loc_7F82A73E: ; CODE XREF: sub_7F82A588+1A9j test esi, esi jz short loc_7F82A747 add edi, 38h jmp short loc_7F82A74C ; --------------------------------------------------------------------------- loc_7F82A747: ; CODE XREF: sub_7F82A588+1B8j mov edi, offset Default loc_7F82A74C: ; CODE XREF: sub_7F82A588+1BDj push eax mov ecx, dword_7F838078 push edi push 1000000h push dword ptr [ecx+218h] call sub_7F824187 loc_7F82A764: ; CODE XREF: sub_7F82A588+1A0j test esi, esi jz short loc_7F82A77B mov eax, dword_7F838078 mov edx, [eax+260h] mov [eax+25Ch], edx jmp short loc_7F82A78B ; --------------------------------------------------------------------------- loc_7F82A77B: ; CODE XREF: sub_7F82A588+1DEj mov ecx, dword_7F838078 mov dword ptr [ecx+25Ch], 0 loc_7F82A78B: ; CODE XREF: sub_7F82A588+1F1j mov ecx, dword_7F838078 cmp esi, 1 sbb eax, eax mov dword ptr [ecx+260h], 0 and eax, 611h loc_7F82A7A5: ; CODE XREF: sub_7F82A588+20j ; sub_7F82A588+51j pop edi pop esi mov esp, ebp pop ebp retn sub_7F82A588 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82A7AB(LPCSTR lpRootPathName) sub_7F82A7AB proc near ; CODE XREF: sub_7F8207A6+A5p ; sub_7F82A12F+4Cp lpRootPathName = dword ptr 4 push [esp+lpRootPathName] ; lpRootPathName call ds:GetDriveTypeA sub eax, 4 cmp eax, 1 sbb eax, eax neg eax retn 4 sub_7F82A7AB endp ; =============== S U B R O U T I N E ======================================= sub_7F82A7C2 proc near ; CODE XREF: sub_7F82159B+45p arg_0 = dword ptr 4 push esi push 1 mov esi, [esp+8+arg_0] push offset Default push 10000000h push dword ptr [esi+218h] call sub_7F824187 mov ax, [esi+264h] pop esi and ax, 200h cmp ax, 1 sbb eax, eax neg eax retn 4 sub_7F82A7C2 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A7F5 proc near ; CODE XREF: sub_7F8129CD+63p ; sub_7F8129CD+176p ... arg_0 = dword ptr 4 push [esp+arg_0] call sub_7F815DE7 retn 4 sub_7F82A7F5 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS CTRL-NUMPAD+ TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7F82A802 proc near ; DATA XREF: sub_7F81217E+C0o arg_0 = dword ptr 4 call sub_7F816000 test eax, eax jnz loc_7F82A8B9 cmp dword_7F838078, 0 jz short loc_7F82A823 mov eax, 253h mov ecx, [esp+arg_0] jmp short loc_7F82A855 ; --------------------------------------------------------------------------- loc_7F82A823: ; CODE XREF: sub_7F82A802+14j mov ecx, [esp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov eax, [edx] mov dword_7F838078, eax mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82A855: ; CODE XREF: sub_7F82A802+1Fj test eax, eax jnz short loc_7F82A8B9 mov eax, dword_7F838078 cmp word ptr [eax+21Ch], 6 jnz short loc_7F82A87F call sub_7F8168ED cmp eax, 0C8h jb short loc_7F82A88B push 0 push 0 call sub_7F813C77 jmp short loc_7F82A88B ; --------------------------------------------------------------------------- loc_7F82A87F: ; CODE XREF: sub_7F82A802+64j push 0 mov eax, [ecx] push dword ptr [eax+28h] call sub_7F8161D3 loc_7F82A88B: ; CODE XREF: sub_7F82A802+70j ; sub_7F82A802+7Bj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82A8A1 call sub_7F82A34F jmp short loc_7F82A8AF ; --------------------------------------------------------------------------- loc_7F82A8A1: ; CODE XREF: sub_7F82A802+96j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82A8AF: ; CODE XREF: sub_7F82A802+9Dj mov dword_7F838078, 0 loc_7F82A8B9: ; CODE XREF: sub_7F82A802+7j ; sub_7F82A802+55j mov eax, 1 retn 8 sub_7F82A802 endp ; =============== S U B R O U T I N E ======================================= sub_7F82A8C1 proc near ; CODE XREF: sub_7F81F44F+146p ; sub_7F81F5A7+CEp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi mov ebx, 1 mov esi, [esp+0Ch+arg_0] lea edi, [esi+21Ch] cmp word ptr [edi], 6 jz short loc_7F82A934 xor eax, eax cmp [esp+0Ch+arg_4], eax jz short loc_7F82A903 push eax push eax push 20000000h push dword ptr [esi+218h] call sub_7F824187 mov ax, [edi] sub ax, 6 cmp ax, bx sbb ebx, ebx neg ebx jmp short loc_7F82A924 ; --------------------------------------------------------------------------- loc_7F82A903: ; CODE XREF: sub_7F82A8C1+1Ej mov eax, dword_7F838078 mov ax, [eax+21Ch] mov word ptr [esi+23Ch], 0 mov [esi+23Ah], ax mov word ptr [edi], 6 loc_7F82A924: ; CODE XREF: sub_7F82A8C1+40j test ebx, ebx jz short loc_7F82A934 call ds:GetTickCount mov [esi+268h], eax loc_7F82A934: ; CODE XREF: sub_7F82A8C1+16j ; sub_7F82A8C1+65j mov eax, ebx pop edi pop esi pop ebx retn 8 sub_7F82A8C1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82A93C proc near ; CODE XREF: sub_7F81D598+24p ; sub_7F81F0AC+1Bp ... var_10 = byte ptr -10h var_C = word ptr -0Ch var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h push ebp mov ebp, esp sub esp, 10h cmp word_7F838088, 0 push esi jnz short loc_7F82A9C1 mov eax, [ebp+arg_0] mov ecx, [ebp+arg_4] xor esi, esi mov dword_7F838090, eax mov ax, [ebp+arg_8] mov dword_7F83808C, ecx mov [ebp+var_A], 1 mov [ebp+var_6], 64h mov word_7F838088, ax push 0Eh mov word_7F838094, si lea ecx, [ebp+var_10] mov [ebp+var_C], ax push ecx mov [ebp+var_8], si push 4 mov eax, dword_7F836764 push eax call sub_7F824187 test eax, eax jz short loc_7F82A9C1 mov ecx, dword_7F838090 cmp ecx, esi jz short loc_7F82A9BA lea eax, [ebp+var_10] push eax push 4 push dword_7F83808C push ecx call sub_7F82A016 jmp short loc_7F82A9C3 ; --------------------------------------------------------------------------- loc_7F82A9BA: ; CODE XREF: sub_7F82A93C+68j mov eax, 1 jmp short loc_7F82A9C3 ; --------------------------------------------------------------------------- loc_7F82A9C1: ; CODE XREF: sub_7F82A93C+Fj ; sub_7F82A93C+5Ej xor eax, eax loc_7F82A9C3: ; CODE XREF: sub_7F82A93C+7Cj ; sub_7F82A93C+83j pop esi mov esp, ebp pop ebp retn 0Ch sub_7F82A93C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82A9CA proc near ; CODE XREF: sub_7F81D598+2DAp ; sub_7F81F0AC+F8p ... var_10 = byte ptr -10h var_C = word ptr -0Ch var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 arg_0 = word ptr 8 arg_4 = word ptr 0Ch push ebp mov cx, [esp+arg_4] mov ebp, esp mov ax, [ebp+arg_0] sub esp, 10h cmp cx, ax push esi jge short loc_7F82A9E2 mov ax, cx loc_7F82A9E2: ; CODE XREF: sub_7F82A9CA+13j cmp word_7F838088, 0 jnz short loc_7F82A9F3 xor eax, eax jmp loc_7F82AB04 ; --------------------------------------------------------------------------- loc_7F82A9F3: ; CODE XREF: sub_7F82A9CA+20j movsx esi, cx movsx eax, ax movsx ecx, word_7F838094 inc ecx imul eax, 64h imul ecx, esi cmp ecx, eax jle short loc_7F82AA15 mov eax, 1 jmp loc_7F82AB04 ; --------------------------------------------------------------------------- loc_7F82AA15: ; CODE XREF: sub_7F82A9CA+3Fj cdq mov [ebp+var_A], 2 idiv esi mov [ebp+var_6], 64h mov word_7F838094, ax mov esi, 0 cmp dword_7F838078, 0 mov ax, word_7F838088 mov cx, word_7F838094 mov [ebp+var_C], ax mov [ebp+var_8], cx jz short loc_7F82AA53 mov esi, dword_7F83807C loc_7F82AA53: ; CODE XREF: sub_7F82A9CA+81j test esi, esi jz short loc_7F82AA85 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82AA6D call sub_7F82A34F jmp short loc_7F82AA7B ; --------------------------------------------------------------------------- loc_7F82AA6D: ; CODE XREF: sub_7F82A9CA+9Aj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82AA7B: ; CODE XREF: sub_7F82A9CA+A1j mov dword_7F838078, 0 loc_7F82AA85: ; CODE XREF: sub_7F82A9CA+8Bj push 0Eh lea eax, [ebp+var_10] push eax push 4 push dword_7F836764 call sub_7F824187 test eax, eax jz short loc_7F82AAC5 cmp dword_7F838090, 0 jz short loc_7F82AABE lea eax, [ebp+var_10] push eax push 4 push dword_7F83808C push dword_7F838090 call sub_7F82A016 jmp short loc_7F82AAC7 ; --------------------------------------------------------------------------- loc_7F82AABE: ; CODE XREF: sub_7F82A9CA+D9j mov eax, 1 jmp short loc_7F82AAC7 ; --------------------------------------------------------------------------- loc_7F82AAC5: ; CODE XREF: sub_7F82A9CA+D0j xor eax, eax loc_7F82AAC7: ; CODE XREF: sub_7F82A9CA+F2j ; sub_7F82A9CA+F9j test esi, esi jz short loc_7F82AB04 cmp dword_7F838078, 0 jnz short loc_7F82AB04 mov ecx, [esi] mov dword_7F83807C, ecx mov cx, [ecx+2Ch] mov edx, dword_7F83807C mov word_7F838084, cx mov ecx, [edx] mov dword_7F838078, ecx mov ecx, [edx+4] mov dword_7F838080, ecx mov dword_7F83807C, esi loc_7F82AB04: ; CODE XREF: sub_7F82A9CA+24j ; sub_7F82A9CA+46j ... pop esi mov esp, ebp pop ebp retn 8 sub_7F82A9CA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82AB0B proc near ; CODE XREF: sub_7F81D598+368p ; sub_7F81F0AC+14Cp ... var_10 = byte ptr -10h var_C = word ptr -0Ch var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 mov ax, word_7F838088 push ebp mov ebp, esp sub esp, 10h test ax, ax jz short loc_7F82AB72 mov [ebp+var_C], ax push 0Eh mov [ebp+var_A], 3 mov [ebp+var_8], 64h mov [ebp+var_6], 64h lea eax, [ebp+var_10] push eax push 4 push dword_7F836764 call sub_7F824187 test eax, eax jz short loc_7F82AB65 mov ecx, dword_7F838090 test ecx, ecx jz short loc_7F82AB65 lea eax, [ebp+var_10] push eax push 4 push dword_7F83808C push ecx call sub_7F82A016 loc_7F82AB65: ; CODE XREF: sub_7F82AB0B+3Cj ; sub_7F82AB0B+46j xor eax, eax mov word_7F838088, ax mov dword_7F83809C, eax loc_7F82AB72: ; CODE XREF: sub_7F82AB0B+Fj mov esp, ebp pop ebp retn sub_7F82AB0B endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82AB76(LPSTR lpTempFileName) sub_7F82AB76 proc near ; CODE XREF: sub_7F823D4A+7Ep Buffer = byte ptr -104h lpTempFileName = dword ptr 4 sub esp, 104h lea eax, [esp+104h+Buffer] push eax ; lpBuffer push 104h ; nBufferLength call ds:GetTempPathA push [esp+104h+lpTempFileName] ; lpTempFileName push 0 ; uUnique lea ecx, [esp+10Ch+Buffer] push offset PrefixString ; "msm" push ecx ; lpPathName call ds:GetTempFileNameA cmp eax, 1 sbb eax, eax add esp, 104h inc eax retn 4 sub_7F82AB76 endp ; =============== S U B R O U T I N E ======================================= sub_7F82ABB4 proc near ; CODE XREF: sub_7F82AC0C+2Bp arg_0 = word ptr 4 arg_4 = word ptr 8 arg_8 = word ptr 0Ch mov dword_7F838184, 1 mov dword_7F83817C, 17h mov dword_7F838180, 36h movzx ecx, [esp+arg_4] movzx eax, [esp+arg_8] movzx edx, [esp+arg_0] shl ecx, 8 shl eax, 10h xor ecx, eax mov eax, offset unk_7F8380A4 xor ecx, edx mov dword_7F8380A0, ecx loc_7F82ABF6: ; CODE XREF: sub_7F82ABB4+53j mov ecx, [eax-4] imul ecx, 1Fh inc ecx mov [eax], ecx add eax, 4 cmp eax, offset dword_7F83817C jb short loc_7F82ABF6 retn 0Ch sub_7F82ABB4 endp ; =============== S U B R O U T I N E ======================================= sub_7F82AC0C proc near ; CODE XREF: sub_7F8142AB:loc_7F8142B7p ; sub_7F81698C:loc_7F8169A2p ... cmp dword_7F838184, 0 jnz short loc_7F82AC3C call ds:GetTickCount mov dx, ax mov ecx, eax shr ecx, 14h xor cx, dx push ecx mov ecx, eax shr ecx, 0Ch shr eax, 4 xor cx, dx xor ax, dx push ecx push eax call sub_7F82ABB4 loc_7F82AC3C: ; CODE XREF: sub_7F82AC0C+7j mov eax, dword_7F838180 mov edx, dword_7F83817C lea ecx, dword_7F8380A0[eax*4] mov eax, dword_7F8380A0[edx*4] add eax, [ecx] mov [ecx], eax dec dword_7F83817C jnz short loc_7F82AC6B mov dword_7F83817C, 36h loc_7F82AC6B: ; CODE XREF: sub_7F82AC0C+53j dec dword_7F838180 jnz short locret_7F82AC7D mov dword_7F838180, 36h locret_7F82AC7D: ; CODE XREF: sub_7F82AC0C+65j retn sub_7F82AC0C endp ; =============== S U B R O U T I N E ======================================= sub_7F82AC7E proc near ; CODE XREF: sub_7F81DCCA+A2p ; sub_7F81DCCA+B3p ... arg_0 = dword ptr 4 mov ecx, offset unk_7F838FA8 mov eax, [esp+arg_0] loc_7F82AC87: ; CODE XREF: sub_7F82AC7E+15j cmp [ecx], eax jg short loc_7F82AC90 cmp [ecx+4], eax jg short loc_7F82AC95 loc_7F82AC90: ; CODE XREF: sub_7F82AC7E+Bj add ecx, 0Ch jmp short loc_7F82AC87 ; --------------------------------------------------------------------------- loc_7F82AC95: ; CODE XREF: sub_7F82AC7E+10j mov edx, [ecx+8] sub edx, [ecx] add edx, eax mov eax, dword_7F838E30[edx*4] retn 4 sub_7F82AC7E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82ACA6(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) sub_7F82ACA6 proc near ; CODE XREF: sub_7F82AF09+68p ; DATA XREF: sub_7F8171B7+3Do hWnd = dword ptr 8 Msg = dword ptr 0Ch wParam = dword ptr 10h lParam = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi xor esi, esi cmp [ebp+Msg], 400h jz short loc_7F82ACCB push [ebp+lParam] ; lParam push [ebp+wParam] ; wParam push [ebp+Msg] ; Msg push [ebp+hWnd] ; hWnd call ds:DefWindowProcA jmp short loc_7F82AD18 ; --------------------------------------------------------------------------- loc_7F82ACCB: ; CODE XREF: sub_7F82ACA6+Fj mov bx, word ptr [ebp+wParam] mov edi, [ebp+lParam] test bl, 1 jz short loc_7F82ACEB lea eax, [edi+0Ch] push eax push dword ptr [edi] push dword ptr [edi+4] call sub_7F82AD1F cmp eax, 1 sbb esi, esi inc esi loc_7F82ACEB: ; CODE XREF: sub_7F82ACA6+2Fj test bh, 80h jz short loc_7F82AD16 cmp dword ptr [edi], 0 jnz short loc_7F82AD16 movzx eax, word ptr [edi+0Ch] cmp eax, 1 jnz short loc_7F82AD16 call sub_7F8241AA push eax call sub_7F82EC63 test ax, ax jl short loc_7F82AD16 push dword ptr [edi+4] call sub_7F82EA8A loc_7F82AD16: ; CODE XREF: sub_7F82ACA6+48j ; sub_7F82ACA6+4Dj ... mov eax, esi loc_7F82AD18: ; CODE XREF: sub_7F82ACA6+23j pop edi pop esi pop ebx pop ebp retn 10h sub_7F82ACA6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82AD1F proc near ; CODE XREF: sub_7F82ACA6+3Ap arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov eax, [esp+arg_0] mov ebp, esp push ebx push esi xor ebx, ebx push edi mov edx, [eax] mov si, [edx] mov edi, dword_7F839018 dec si js loc_7F82ADE8 loc_7F82AD3E: ; CODE XREF: sub_7F82AD1F+C3j test ebx, ebx jnz loc_7F82ADE8 movsx ecx, si mov eax, [edx+ecx*4+8] mov dword_7F839018, eax mov ecx, [eax] test byte ptr [ecx+0Ch], 1 jz loc_7F82ADE0 mov eax, [ebp+arg_4] test [ecx+10h], eax jnz short loc_7F82AD6A test eax, eax jnz short loc_7F82ADE0 loc_7F82AD6A: ; CODE XREF: sub_7F82AD1F+45j test byte ptr [ecx+0Ch], 2 jz short loc_7F82AD77 cmp word ptr [ecx+0Eh], 0 jg short loc_7F82ADE0 loc_7F82AD77: ; CODE XREF: sub_7F82AD1F+4Fj push [ebp+arg_8] inc word ptr [ecx+0Eh] push [ebp+arg_4] push dword ptr [ecx] call dword ptr [ecx+4] mov ebx, eax mov eax, dword_7F839018 mov ecx, [eax] mov eax, [ebp+arg_0] dec word ptr [ecx+0Eh] mov edx, [eax] mov eax, dword_7F839018 movsx ecx, si cmp [edx+ecx*4+8], eax jz short loc_7F82ADB7 loc_7F82ADA6: ; CODE XREF: sub_7F82AD1F+96j dec si mov ecx, dword_7F839018 movsx eax, si cmp [edx+eax*4+8], ecx jnz short loc_7F82ADA6 loc_7F82ADB7: ; CODE XREF: sub_7F82AD1F+85j mov eax, dword_7F839018 mov eax, [eax] cmp word ptr [eax+0Eh], 0 jg short loc_7F82ADE0 test byte ptr [eax+0Dh], 80h jz short loc_7F82ADE0 mov eax, dword_7F839018 push eax call sub_7F8240DB test si, si jz short loc_7F82ADE8 mov eax, [ebp+arg_0] mov edx, [eax] loc_7F82ADE0: ; CODE XREF: sub_7F82AD1F+39j ; sub_7F82AD1F+49j ... dec si jns loc_7F82AD3E loc_7F82ADE8: ; CODE XREF: sub_7F82AD1F+19j ; sub_7F82AD1F+21j ... sub ebx, 2 mov dword_7F839018, edi pop edi cmp ebx, 1 sbb eax, eax pop esi inc eax pop ebx pop ebp retn 0Ch sub_7F82AD1F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82ADFE proc near ; CODE XREF: sub_7F823FB7+3Cp ; sub_7F824187+12p var_10 = dword ptr -10h lParam = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 10h mov eax, dword_7F839014 push ebx push esi mov ebx, [ebp+arg_0] push edi xor esi, esi mov edi, dword_7F83901C mov [ebp+var_10], eax mov [ebp+var_8], 1 mov dword_7F839014, ebx call ds:__imp_GetCurrentProcessId push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] mov dword_7F83901C, eax call sub_7F82EBDD mov [ebp+lParam], eax cmp eax, esi jnz short loc_7F82AE51 mov esi, 400h jmp loc_7F82AED8 ; --------------------------------------------------------------------------- loc_7F82AE51: ; CODE XREF: sub_7F82ADFE+47j mov ecx, [ebx] inc word ptr [ecx+6] mov ax, [ecx+2] dec ax mov [ebp+var_2], ax js short loc_7F82AEBA loc_7F82AE63: ; CODE XREF: sub_7F82ADFE+BAj cmp [ebp+var_8], 1 jnz short loc_7F82AEBA movsx eax, [ebp+var_2] movzx edx, [ebp+arg_4] shl eax, 4 test edx, 0FFFFFFFEh lea ecx, [eax+ecx+0Ch] jnz short loc_7F82AE88 mov eax, [ebp+arg_8] test [ecx+8], eax jz short loc_7F82AE9A loc_7F82AE88: ; CODE XREF: sub_7F82ADFE+80j push [ebp+lParam] ; lParam push dword ptr [ebp+arg_4] ; __int16 push dword ptr [ebp+var_2] ; __int16 push ebx ; int call sub_7F82AF09 mov [ebp+var_8], eax loc_7F82AE9A: ; CODE XREF: sub_7F82ADFE+88j cmp [ebp+var_8], 3 mov ecx, [ebx] jnz short loc_7F82AEB4 push dword ptr [ebp+var_2] push ebx call sub_7F82E9F9 mov [ebp+var_8], 1 mov ecx, [ebx] loc_7F82AEB4: ; CODE XREF: sub_7F82ADFE+A2j dec [ebp+var_2] jns short loc_7F82AE63 loc_7F82AEBA: ; CODE XREF: sub_7F82ADFE+63j ; sub_7F82ADFE+69j mov ax, [ecx+6] dec ax mov [ecx+6], ax test ax, ax jg short loc_7F82AED8 mov ax, [ecx+8] test ah, 0C0h jz short loc_7F82AED8 push ebx call sub_7F82F1E1 loc_7F82AED8: ; CODE XREF: sub_7F82ADFE+4Ej ; sub_7F82ADFE+C9j ... mov eax, [ebp+var_10] mov dword_7F83901C, edi cmp [ebp+lParam], 0 mov dword_7F839014, eax jz short loc_7F82AEF4 push [ebp+lParam] call sub_7F82EC41 loc_7F82AEF4: ; CODE XREF: sub_7F82ADFE+ECj mov eax, 2 test esi, esi jnz short loc_7F82AF00 mov eax, [ebp+var_8] loc_7F82AF00: ; CODE XREF: sub_7F82ADFE+FDj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F82ADFE endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82AF09(int, __int16, __int16, LPARAM lParam) sub_7F82AF09 proc near ; CODE XREF: sub_7F82ADFE+94p arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = word ptr 0Ch lParam = dword ptr 10h push ebx push esi push edi push ebp call ds:__imp_GetCurrentProcessId movsx ecx, [esp+10h+arg_4] shl ecx, 4 mov esi, eax mov eax, [esp+10h+arg_0] mov ebx, [esp+10h+lParam] mov edx, [eax] mov eax, [ecx+edx+18h] lea edi, [ecx+edx+10h] lea ebp, [ecx+edx+0Ch] mov [ebx+4], eax push dword ptr [edi] ; hWnd call ds:IsWindow test eax, eax jnz short loc_7F82AF49 mov eax, 3 jmp short loc_7F82AF7E ; --------------------------------------------------------------------------- loc_7F82AF49: ; CODE XREF: sub_7F82AF09+37j push 0 ; nIndex push dword ptr [edi] ; hWnd call ds:GetWindowLongA cmp [ebp+0], eax jz short loc_7F82AF5F mov eax, 3 jmp short loc_7F82AF7E ; --------------------------------------------------------------------------- loc_7F82AF5F: ; CODE XREF: sub_7F82AF09+4Dj push ebx ; lParam cmp esi, eax movzx eax, [esp+14h+arg_8] push eax ; wParam push 400h ; Msg push dword ptr [edi] ; hWnd jnz short loc_7F82AF78 call sub_7F82ACA6 jmp short loc_7F82AF7E ; --------------------------------------------------------------------------- loc_7F82AF78: ; CODE XREF: sub_7F82AF09+66j call ds:SendMessageA loc_7F82AF7E: ; CODE XREF: sub_7F82AF09+3Ej ; sub_7F82AF09+54j ... pop ebp pop edi pop esi pop ebx retn 10h sub_7F82AF09 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82AF85 proc near ; CODE XREF: sub_7F82B14A+47p WndClass = WNDCLASSA ptr -28h push ebp mov ebp, esp sub esp, 28h push esi xor esi, esi cmp dword_7F839020, esi jnz short loc_7F82AFE8 push 7F00h ; lpCursorName push esi ; hInstance call ds:LoadCursorA mov [ebp+WndClass.hCursor], eax mov [ebp+WndClass.hIcon], esi mov eax, dword_7F833F18 mov [ebp+WndClass.lpszMenuName], esi mov [ebp+WndClass.lpszClassName], offset aStoreprogressi ; "StoreProgressIndicatorClass32" mov [ebp+WndClass.hInstance], eax mov [ebp+WndClass.cbClsExtra], esi lea ecx, [ebp+WndClass] mov [ebp+WndClass.cbWndExtra], esi mov [ebp+WndClass.hbrBackground], 10h mov [ebp+WndClass.style], 4000h mov [ebp+WndClass.lpfnWndProc], offset sub_7F82AFF2 push ecx ; lpWndClass call ds:RegisterClassA movzx ecx, ax mov dword_7F839020, ecx loc_7F82AFE8: ; CODE XREF: sub_7F82AF85+Fj mov eax, dword_7F839020 pop esi mov esp, ebp pop ebp retn sub_7F82AF85 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82AFF2(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) sub_7F82AFF2 proc near ; DATA XREF: sub_7F82AF85+4Co Paint = tagPAINTSTRUCT ptr -50h Rect = tagRECT ptr -10h hWnd = dword ptr 8 Msg = dword ptr 0Ch wParam = dword ptr 10h lParam = dword ptr 14h push ebp mov ebp, esp sub esp, 50h push ebx push esi push edi call sub_7F82449E mov esi, eax mov eax, [ebp+Msg] cmp eax, 0Fh jz short loc_7F82B04F cmp eax, 10h jz loc_7F82B11E cmp eax, 100h movzx eax, word ptr [esi+20h] jz loc_7F82B143 push eax ; vKey call ds:GetAsyncKeyState test ax, 8001h jz short loc_7F82B038 or byte ptr [esi+18h], 4 call sub_7F82B86D loc_7F82B038: ; CODE XREF: sub_7F82AFF2+3Bj push [ebp+lParam] ; lParam push [ebp+wParam] ; wParam push [ebp+Msg] ; Msg push [ebp+hWnd] ; hWnd call ds:DefWindowProcA jmp loc_7F82B13A ; --------------------------------------------------------------------------- loc_7F82B04F: ; CODE XREF: sub_7F82AFF2+16j lea eax, [ebp+Paint] push eax ; lpPaint push [ebp+hWnd] ; hWnd call ds:BeginPaint push 0Fh ; nIndex call ds:GetSysColor push eax ; color push [ebp+Paint.hdc] ; hdc call ds:SetBkColor push 0Ch ; i call ds:GetStockObject push eax ; h push [ebp+Paint.hdc] ; hdc call ds:SelectObject mov edi, eax lea ecx, [ebp+Rect] push ecx ; lpRect push [ebp+hWnd] ; hWnd call ds:GetClientRect push 4 ; i call ds:GetStockObject push eax ; hbr lea ecx, [ebp+Rect] push ecx ; lprc xor ebx, ebx push [ebp+Paint.hdc] ; hDC call ds:FrameRect push 1 ; int lea ecx, [ebp+Rect] push ebx ; int dec [ebp+Rect.right] push ecx ; int dec [ebp+Rect.bottom] push [ebp+Paint.hdc] ; hdc call sub_7F82B4DE push ebx ; int push 1 ; int push offset dword_7F839050 ; int push [ebp+Paint.hdc] ; hdc call sub_7F82B4DE push 11h ; format lea ecx, [esi+2Ch] push offset stru_7F839060 ; lprc push 0FFFFFFFFh ; cchText push ecx ; lpchText push [ebp+Paint.hdc] ; hdc call ds:DrawTextA push 11h ; format lea ecx, [esi+12Bh] push offset stru_7F839070 ; lprc push 0FFFFFFFFh ; cchText push ecx ; lpchText push [ebp+Paint.hdc] ; hdc call ds:DrawTextA mov [esi+22h], bx push [ebp+Paint.hdc] ; hDC call sub_7F82B644 push edi ; h push [ebp+Paint.hdc] ; hdc call ds:SelectObject lea eax, [ebp+Paint] push eax ; lpPaint push [ebp+hWnd] ; hWnd call ds:EndPaint loc_7F82B11E: ; CODE XREF: sub_7F82AFF2+1Bj movzx eax, word ptr [esi+20h] push eax ; vKey call ds:GetAsyncKeyState test ax, 8001h jz short loc_7F82B138 or byte ptr [esi+18h], 4 loc_7F82B133: ; CODE XREF: sub_7F82AFF2+156j call sub_7F82B86D loc_7F82B138: ; CODE XREF: sub_7F82AFF2+13Bj ; sub_7F82AFF2+154j xor eax, eax loc_7F82B13A: ; CODE XREF: sub_7F82AFF2+58j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F82B143: ; CODE XREF: sub_7F82AFF2+2Aj cmp eax, [ebp+wParam] jnz short loc_7F82B138 jmp short loc_7F82B133 sub_7F82AFF2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82B14A(HWND, int, int, __int16, int) sub_7F82B14A proc near ; CODE XREF: sub_7F8207A6+37Ap ; sub_7F823870+16Bp tm = tagTEXTMETRICA ptr -60h var_28 = tagRECT ptr -28h h = dword ptr -18h Rect = tagRECT ptr -14h hWnd = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 60h push ebx push esi push edi call sub_7F82449E mov esi, eax call ds:GetDesktopWindow mov [ebp+hWnd], eax xor eax, eax cmp [esi+4], eax jnz loc_7F82B451 cmp [ebp+hWnd], eax jz loc_7F82B451 cmp [ebp+arg_4], eax jz loc_7F82B451 cmp [ebp+arg_8], eax jz loc_7F82B451 cmp dword_7F839020, eax jnz short loc_7F82B19E call sub_7F82AF85 test eax, eax jz loc_7F82B451 loc_7F82B19E: ; CODE XREF: sub_7F82B14A+45j cmp word_7F839024, 0 jnz loc_7F82B31F push [ebp+hWnd] ; hWnd call ds:GetDC mov edi, eax test edi, edi jz loc_7F82B31F push 0Ch ; i call ds:GetStockObject push eax ; h push edi ; hdc call ds:SelectObject lea ecx, [ebp+tm] mov [ebp+h], eax push ecx ; lptm push edi ; hdc call ds:GetTextMetricsA mov ax, word ptr [ebp+tm.tmHeight] mov ecx, [ebp+tm.tmAveCharWidth] mov word_7F839024, cx mov ecx, [ebp+tm.tmExternalLeading] add cx, ax mov word_7F839028, ax mov eax, [ebp+tm.tmMaxCharWidth] mov word_7F83902C, cx mov cx, ax imul cx, 14h add cx, 19h mov dx, word_7F83902C lea ebx, [ecx+32h] add dx, 2 mov word_7F839030, ax mov ax, word_7F83902C shl ax, 2 movzx eax, ax mov word_7F839034, bx mov dword_7F839054, eax mov dword_7F839050, 19h movzx ecx, cx mov bx, word_7F83902C add ecx, 19h imul bx, 5 add bx, dx mov dword_7F839058, ecx mov Rect.left, 1Bh movzx ecx, dx mov word_7F839038, bx add ecx, eax add eax, 3 mov dword_7F83905C, ecx mov Rect.top, eax mov eax, dword_7F839058 sub eax, 2 mov Rect.right, eax lea eax, [ecx-2] movzx ecx, word_7F83902C mov edx, ecx mov Rect.bottom, eax mov ax, word_7F83902C shr ax, 1 movzx ebx, ax movzx eax, word_7F839034 sub edx, ebx sub eax, 0Ah mov stru_7F839060.top, edx mov edx, 0Ah mov stru_7F839060.left, edx mov stru_7F839060.right, eax lea eax, ds:0[ecx*2] mov stru_7F839070.left, edx add eax, stru_7F839060.top mov edx, stru_7F839060.right mov stru_7F839060.bottom, eax mov stru_7F839070.right, edx push [ebp+h] ; h push edi ; hdc inc eax mov stru_7F839070.top, eax add eax, ecx mov stru_7F839070.bottom, eax call ds:SelectObject push edi ; hDC push [ebp+arg_0] ; hWnd call ds:ReleaseDC push 6 ; i call ds:GetStockObject mov h, eax loc_7F82B31F: ; CODE XREF: sub_7F82B14A+5Cj ; sub_7F82B14A+6Fj push 10h ; nIndex xor edi, edi mov ebx, 0FFh call ds:GetSysColor push eax ; color push 1 ; cWidth push edi ; iStyle call ds:CreatePen push ebx mov [esi+10h], eax lea eax, [esi+2Ch] push eax push [ebp+arg_4] call sub_7F81ABAD push ebx lea ecx, [esi+12Bh] push ecx lea ebx, [esi+18h] push [ebp+arg_8] call sub_7F81ABAD mov [esi+24h], edi mov dword ptr [esi+28h], 1 mov eax, [ebx] and al, 0FDh mov [ebx], eax and al, 0FBh mov [ebx], eax mov ax, [ebp+arg_C] movzx ecx, ax mov [esi+20h], ax push ecx ; vKey mov [esi+1Ch], edi call ds:GetAsyncKeyState mov [esi+22h], di mov eax, [ebx] mov ecx, eax xor ecx, [ebp+arg_10] and ecx, 1 xor ecx, eax lea eax, [ebp+Rect] push eax ; lpRect mov [ebx], ecx push [ebp+hWnd] ; hWnd call ds:GetClientRect lea ecx, [ebp+var_28] push ecx ; lpRect push [ebp+hWnd] ; hWnd call ds:GetWindowRect mov eax, [ebp+var_28.bottom] sub eax, [ebp+Rect.bottom] mov [ebp+Rect.top], eax mov eax, [ebp+var_28.right] sub eax, [ebp+Rect.right] mov ecx, [ebp+Rect.top] movzx edx, word_7F839038 push edi ; lpParam mov [ebp+Rect.left], eax add [ebp+Rect.right], eax add [ebp+Rect.bottom], ecx movzx ecx, word_7F839034 mov eax, dword_7F833F18 push eax ; hInstance push edi ; hMenu push [ebp+hWnd] ; hWndParent push edx ; nHeight push ecx ; nWidth mov eax, [ebp+Rect.bottom] sub eax, edx sub eax, [ebp+Rect.top] cdq sub eax, edx mov edx, [ebp+Rect.top] sar eax, 1 add edx, eax mov eax, [ebp+Rect.right] push edx ; Y sub eax, ecx sub eax, [ebp+Rect.left] mov ecx, [ebp+Rect.left] cdq sub eax, edx sar eax, 1 add ecx, eax push ecx ; X push 90000000h ; dwStyle push edi ; lpWindowName push offset aStoreprogressi ; "StoreProgressIndicatorClass32" push edi ; dwExStyle call ds:CreateWindowExA mov [esi+4], eax test eax, eax jz short loc_7F82B448 push eax ; hWnd call ds:SetFocus push edi ; lParam push offset fn ; lpfn call ds:GetCurrentThreadId push eax ; dwThreadId call ds:EnumThreadWindows push dword ptr [esi+4] ; hWnd call ds:UpdateWindow loc_7F82B448: ; CODE XREF: sub_7F82B14A+2D9j cmp dword ptr [esi+4], 1 sbb eax, eax inc eax jmp short loc_7F82B453 ; --------------------------------------------------------------------------- loc_7F82B451: ; CODE XREF: sub_7F82B14A+1Ej ; sub_7F82B14A+27j ... xor eax, eax loc_7F82B453: ; CODE XREF: sub_7F82B14A+305j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F82B14A endp ; =============== S U B R O U T I N E ======================================= ; BOOL __stdcall fn(HWND, LPARAM) fn proc near ; DATA XREF: sub_7F82B14A+2E3o hWnd = dword ptr 4 push ebx push esi push edi call sub_7F82449E mov ebx, eax push 10h push 8 call sub_7F82F03B mov edi, eax test edi, edi jz short loc_7F82B496 mov esi, [esp+0Ch+hWnd] cmp [ebx+4], esi jz short loc_7F82B4A1 push 0 ; bEnable push esi ; hWnd call ds:EnableWindow test eax, eax jnz short loc_7F82B4A1 mov [edi], esi mov eax, [ebx+8] mov [edi+4], eax mov [ebx+8], edi loc_7F82B496: ; CODE XREF: fn+17j fn+4Bj mov eax, 1 pop edi pop esi pop ebx retn 8 ; --------------------------------------------------------------------------- loc_7F82B4A1: ; CODE XREF: fn+20j fn+2Dj push edi call sub_7F82F149 jmp short loc_7F82B496 fn endp ; =============== S U B R O U T I N E ======================================= sub_7F82B4A9 proc near ; CODE XREF: sub_7F82B8D3+66p push ebx push esi push edi call sub_7F82449E mov esi, [eax+8] mov edi, eax test esi, esi jz short loc_7F82B4D3 loc_7F82B4BA: ; CODE XREF: sub_7F82B4A9+28j mov ebx, [esi+4] push 1 ; bEnable push dword ptr [esi] ; hWnd call ds:EnableWindow push esi call sub_7F82F149 mov esi, ebx test ebx, ebx jnz short loc_7F82B4BA loc_7F82B4D3: ; CODE XREF: sub_7F82B4A9+Fj mov dword ptr [edi+8], 0 pop edi pop esi pop ebx retn sub_7F82B4A9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82B4DE(HDC hdc, int, int, int) sub_7F82B4DE proc near ; CODE XREF: sub_7F82AFF2+C5p ; sub_7F82AFF2+D5p h = dword ptr -4 hdc = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi call sub_7F82449E mov ebx, eax mov esi, [ebp+hdc] test esi, esi jz loc_7F82B63B mov edi, [ebp+arg_4] test edi, edi jz loc_7F82B63B cmp [ebp+arg_8], 0 jz short loc_7F82B511 mov eax, h jmp short loc_7F82B514 ; --------------------------------------------------------------------------- loc_7F82B511: ; CODE XREF: sub_7F82B4DE+2Aj mov eax, [ebx+10h] loc_7F82B514: ; CODE XREF: sub_7F82B4DE+31j push eax ; h push esi ; hdc call ds:SelectObject mov [ebp+h], eax test eax, eax jz loc_7F82B63B push 0 ; lppt mov eax, [edi+4] inc eax push eax ; y mov eax, [edi+8] dec eax push eax ; x push esi ; hdc call ds:MoveToEx mov eax, [edi+0Ch] dec eax push eax ; y mov eax, [edi+8] dec eax push eax ; x push esi ; hdc call ds:LineTo mov eax, [edi+0Ch] dec eax push eax ; y mov eax, [edi] inc eax push eax ; x push esi ; hdc call ds:LineTo cmp [ebp+arg_C], 0 jz short loc_7F82B5B3 push 0 ; lppt mov eax, [edi+4] add eax, 2 push eax ; y mov eax, [edi+8] sub eax, 2 push eax ; x push esi ; hdc call ds:MoveToEx mov eax, [edi+0Ch] sub eax, 2 push eax ; y mov eax, [edi+8] sub eax, 2 push eax ; x push esi ; hdc call ds:LineTo mov eax, [edi+0Ch] sub eax, 2 push eax ; y mov eax, [edi] add eax, 2 push eax ; x push esi ; hdc call ds:LineTo push 0 ; lppt mov eax, [edi+0Ch] dec eax push eax ; y mov eax, [edi] inc eax push eax ; x push esi ; hdc call ds:MoveToEx loc_7F82B5B3: ; CODE XREF: sub_7F82B4DE+81j cmp [ebp+arg_8], 0 jz short loc_7F82B5BE mov eax, [ebx+10h] jmp short loc_7F82B5C3 ; --------------------------------------------------------------------------- loc_7F82B5BE: ; CODE XREF: sub_7F82B4DE+D9j mov eax, h loc_7F82B5C3: ; CODE XREF: sub_7F82B4DE+DEj push eax ; h push esi ; hdc call ds:SelectObject mov eax, [edi+4] inc eax push eax ; y mov eax, [edi] inc eax push eax ; x push esi ; hdc call ds:LineTo mov eax, [edi+4] inc eax push eax ; y mov eax, [edi+8] dec eax push eax ; x push esi ; hdc call ds:LineTo cmp [ebp+arg_C], 0 jz short loc_7F82B631 push 0 ; lppt mov eax, [edi+0Ch] sub eax, 2 push eax ; y mov eax, [edi] add eax, 2 push eax ; x push esi ; hdc call ds:MoveToEx mov eax, [edi+4] add eax, 2 push eax ; y mov eax, [edi] add eax, 2 push eax ; x push esi ; hdc call ds:LineTo mov eax, [edi+4] add eax, 2 push eax ; y mov eax, [edi+8] sub eax, 2 push eax ; x push esi ; hdc call ds:LineTo loc_7F82B631: ; CODE XREF: sub_7F82B4DE+112j push [ebp+h] ; h push esi ; hdc call ds:SelectObject loc_7F82B63B: ; CODE XREF: sub_7F82B4DE+15j ; sub_7F82B4DE+20j ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82B4DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82B644(HDC hDC) sub_7F82B644 proc near ; CODE XREF: sub_7F82AFF2+110p ; sub_7F82B72B+3Bp rc = RECT ptr -10h hDC = dword ptr 8 push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi mov esi, offset Rect lea edi, [ebp+rc] movsd movsd movsd movsd call sub_7F82449E cmp [ebp+hDC], 0 mov edi, eax jz loc_7F82B722 mov eax, [edi+24h] test eax, eax jz loc_7F82B722 imul eax, 14h sub edx, edx div dword ptr [edi+28h] cmp ax, 14h mov si, ax jle short loc_7F82B68A mov si, 14h loc_7F82B68A: ; CODE XREF: sub_7F82B644+40j cmp dword ptr [edi+14h], 0 jnz short loc_7F82B6B4 mov ebx, 800000h push 0Fh ; nIndex call ds:GetSysColor cmp eax, ebx jnz short loc_7F82B6A6 mov ebx, 0FFFFh loc_7F82B6A6: ; CODE XREF: sub_7F82B644+5Bj push ebx ; color call ds:CreateSolidBrush mov [edi+14h], eax test eax, eax jz short loc_7F82B722 loc_7F82B6B4: ; CODE XREF: sub_7F82B644+4Aj test byte ptr [edi+18h], 1 jz short loc_7F82B6FB mov bx, [edi+22h] cmp bx, si jge short loc_7F82B6F5 loc_7F82B6C3: ; CODE XREF: sub_7F82B644+AFj movzx eax, word_7F839030 movsx ecx, bx inc bx lea edx, [eax+1] imul ecx, edx add ecx, 1Ch lea edx, [ebp+rc] add eax, ecx mov [ebp+rc.left], ecx mov [ebp+rc.right], eax push dword ptr [edi+14h] ; hbr push edx ; lprc push [ebp+hDC] ; hDC call ds:FillRect cmp bx, si jl short loc_7F82B6C3 loc_7F82B6F5: ; CODE XREF: sub_7F82B644+7Dj mov [edi+22h], bx jmp short loc_7F82B722 ; --------------------------------------------------------------------------- loc_7F82B6FB: ; CODE XREF: sub_7F82B644+74j movzx ecx, word_7F839030 inc ecx lea edx, [ebp+rc] movsx eax, si imul ecx, eax inc [ebp+rc.left] add ecx, [ebp+rc.left] mov [ebp+rc.right], ecx push dword ptr [edi+14h] ; hbr push edx ; lprc push [ebp+hDC] ; hDC call ds:FillRect loc_7F82B722: ; CODE XREF: sub_7F82B644+20j ; sub_7F82B644+2Bj ... pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82B644 endp ; =============== S U B R O U T I N E ======================================= sub_7F82B72B proc near ; CODE XREF: sub_7F823C13+EAp ; sub_7F823C13+112p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi call sub_7F82449E lea edi, [eax+4] mov esi, eax mov eax, [edi] test eax, eax jz short loc_7F82B7AF push eax ; hWnd call ds:UpdateWindow mov eax, [esp+0Ch+arg_4] mov [esi+28h], eax mov eax, [esp+0Ch+arg_0] mov [esi+24h], eax test eax, eax jz short loc_7F82B798 push dword ptr [edi] ; hWnd call ds:GetDC mov ebx, eax test ebx, ebx jz short loc_7F82B774 push ebx ; hDC call sub_7F82B644 push ebx ; hDC push dword ptr [edi] ; hWnd call ds:ReleaseDC loc_7F82B774: ; CODE XREF: sub_7F82B72B+38j mov eax, [esi+28h] cmp [esi+24h], eax jnb short loc_7F82B7AF movzx eax, word ptr [esi+20h] push eax ; vKey call ds:GetAsyncKeyState test ax, 8001h jz short loc_7F82B7AF or byte ptr [esi+18h], 4 call sub_7F82B86D jmp short loc_7F82B7AF ; --------------------------------------------------------------------------- loc_7F82B798: ; CODE XREF: sub_7F82B72B+2Aj push 1 ; bErase push offset Rect ; lpRect push dword ptr [edi] ; hWnd call ds:InvalidateRect push dword ptr [edi] ; hWnd call ds:UpdateWindow loc_7F82B7AF: ; CODE XREF: sub_7F82B72B+11j ; sub_7F82B72B+4Fj ... pop edi pop esi pop ebx retn 8 sub_7F82B72B endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82B7B5(LPCSTR lpString1, LPCSTR) sub_7F82B7B5 proc near ; CODE XREF: sub_7F823C13+F8p lpString1 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi push ebp call sub_7F82449E mov esi, eax mov eax, [eax+4] test eax, eax jz loc_7F82B866 push eax ; hWnd call ds:UpdateWindow mov edi, [esp+10h+lpString1] test edi, edi jz short loc_7F82B805 lea ebx, [esi+2Ch] push ebx ; lpString2 push edi ; lpString1 call ds:lstrcmpA test eax, eax jz short loc_7F82B805 push 0FFh push ebx push edi call sub_7F81ABAD push 1 ; bErase push offset stru_7F839060 ; lpRect push dword ptr [esi+4] ; hWnd call ds:InvalidateRect loc_7F82B805: ; CODE XREF: sub_7F82B7B5+23j ; sub_7F82B7B5+32j mov ebx, [esp+10h+arg_4] test ebx, ebx jz short loc_7F82B83B lea ebp, [esi+12Bh] push ebp ; lpString2 push ebx ; lpString1 call ds:lstrcmpA test eax, eax jz short loc_7F82B83B push 0FFh push ebp push ebx call sub_7F81ABAD push 1 ; bErase push offset stru_7F839070 ; lpRect push dword ptr [esi+4] ; hWnd call ds:InvalidateRect loc_7F82B83B: ; CODE XREF: sub_7F82B7B5+56j ; sub_7F82B7B5+68j test edi, edi jnz short loc_7F82B843 test ebx, ebx jz short loc_7F82B84C loc_7F82B843: ; CODE XREF: sub_7F82B7B5+88j push dword ptr [esi+4] ; hWnd call ds:UpdateWindow loc_7F82B84C: ; CODE XREF: sub_7F82B7B5+8Cj movzx eax, word ptr [esi+20h] push eax ; vKey call ds:GetAsyncKeyState test ax, 8001h jz short loc_7F82B866 or byte ptr [esi+18h], 4 call sub_7F82B86D loc_7F82B866: ; CODE XREF: sub_7F82B7B5+10j ; sub_7F82B7B5+A6j pop ebp pop edi pop esi pop ebx retn 8 sub_7F82B7B5 endp ; =============== S U B R O U T I N E ======================================= sub_7F82B86D proc near ; CODE XREF: sub_7F82AFF2+41p ; sub_7F82AFF2:loc_7F82B133p ... push esi push edi call sub_7F82449E cmp dword ptr [eax+4], 0 mov esi, eax jz short loc_7F82B8B8 cmp word ptr [esi+20h], 0 jz short loc_7F82B8B8 lea edi, [esi+18h] mov ecx, [edi] test cl, 2 jnz short loc_7F82B8B8 mov eax, [esi+1Ch] test eax, eax jz short loc_7F82B8A5 call eax mov ecx, [edi] add eax, eax xor eax, ecx and eax, 2 xor eax, ecx mov [edi], eax jmp short loc_7F82B8AA ; --------------------------------------------------------------------------- loc_7F82B8A5: ; CODE XREF: sub_7F82B86D+25j or cl, 2 mov [edi], ecx loc_7F82B8AA: ; CODE XREF: sub_7F82B86D+36j test byte ptr [edi], 2 jz short loc_7F82B8B8 push dword ptr [esi+4] ; hWnd call ds:UpdateWindow loc_7F82B8B8: ; CODE XREF: sub_7F82B86D+Dj ; sub_7F82B86D+14j ... mov eax, [esi+18h] pop edi shl eax, 1Eh pop esi sar eax, 1Fh retn sub_7F82B86D endp ; =============== S U B R O U T I N E ======================================= sub_7F82B8C4 proc near ; CODE XREF: sub_7F8207A6:loc_7F820B59p ; sub_7F823870:loc_7F823B27p ... call sub_7F82449E mov eax, [eax+18h] shl eax, 1Eh sar eax, 1Fh retn sub_7F82B8C4 endp ; =============== S U B R O U T I N E ======================================= sub_7F82B8D3 proc near ; CODE XREF: sub_7F8207A6+3C0p ; sub_7F823870+2C4p Msg = tagMSG ptr -1Ch arg_0 = dword ptr 4 sub esp, 1Ch push ebx push esi push edi call sub_7F82449E lea edi, [eax+4] mov esi, eax cmp dword ptr [edi], 0 jz short loc_7F82B94C cmp [esp+28h+arg_0], 0 jz short loc_7F82B8FF push 64h push 64h call sub_7F82B72B push 1Eh call sub_7F81AF92 loc_7F82B8FF: ; CODE XREF: sub_7F82B8D3+1Aj test byte ptr [esi+18h], 4 jz short loc_7F82B933 mov ebx, 100h call sub_7F82F2D1 loc_7F82B90F: ; CODE XREF: sub_7F82B8D3+59j lea ecx, [esp+28h+Msg] push 3 ; wRemoveMsg push ebx ; wMsgFilterMax push ebx ; wMsgFilterMin push dword ptr [edi] ; hWnd push ecx ; lpMsg call ds:PeekMessageA test eax, eax jz short loc_7F82B92E movzx eax, word ptr [esi+20h] cmp eax, [esp+28h+Msg.wParam] jnz short loc_7F82B90F loc_7F82B92E: ; CODE XREF: sub_7F82B8D3+4Fj call sub_7F82F26E loc_7F82B933: ; CODE XREF: sub_7F82B8D3+30j cmp dword ptr [esi+8], 0 jz short loc_7F82B93E call sub_7F82B4A9 loc_7F82B93E: ; CODE XREF: sub_7F82B8D3+64j push dword ptr [edi] ; hWnd call ds:DestroyWindow mov dword ptr [edi], 0 loc_7F82B94C: ; CODE XREF: sub_7F82B8D3+13j mov eax, [esi+10h] xor edi, edi test eax, eax jz short loc_7F82B95F push eax ; ho call ds:DeleteObject mov [esi+10h], edi loc_7F82B95F: ; CODE XREF: sub_7F82B8D3+80j mov eax, [esi+14h] xor edi, edi test eax, eax jz short loc_7F82B972 push eax ; ho call ds:DeleteObject mov [esi+14h], edi loc_7F82B972: ; CODE XREF: sub_7F82B8D3+93j pop edi pop esi pop ebx add esp, 1Ch retn 4 sub_7F82B8D3 endp ; =============== S U B R O U T I N E ======================================= sub_7F82B97B proc near ; CODE XREF: sub_7F82B9AC+Ap arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx mov word ptr [eax], 3 mov [eax+6], ecx mov [eax+2], cx mov [eax+0Ah], ecx mov [eax+0Eh], ecx mov [eax+12h], ecx mov dword ptr [eax+6], offset aDemilayr ; "demilayr" mov word ptr [eax+4], 0FA3h mov word ptr [eax+16h], 1 retn 4 sub_7F82B97B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82B9AC proc near ; CODE XREF: sub_7F814EF3+Bp var_18 = byte ptr -18h var_12 = dword ptr -12h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 18h lea eax, [ebp+var_18] push eax call sub_7F82B97B mov eax, [ebp+var_12] mov ecx, [ebp+arg_4] push 0BBBh lea edx, [ebp+var_18] push 0 mov [ecx+6], eax push edx push ecx push [ebp+arg_0] call sub_7F82ECC1 mov esp, ebp pop ebp retn 8 sub_7F82B9AC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82B9DE proc near ; CODE XREF: sub_7F81813C+50p ; sub_7F818550+10p ... var_10 = byte ptr -10h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp inc word_7F838070 mov ebp, esp sub esp, 10h push ebx push esi xor bx, bx push edi cmp [ebp+arg_C], 0 jz loc_7F82BADB cmp dword_7F838078, 0 jz short loc_7F82BA0E mov edi, 253h mov esi, [ebp+arg_0] jmp short loc_7F82BA40 ; --------------------------------------------------------------------------- loc_7F82BA0E: ; CODE XREF: sub_7F82B9DE+24j mov esi, [ebp+arg_0] mov eax, [esi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, esi loc_7F82BA40: ; CODE XREF: sub_7F82B9DE+2Ej test edi, edi jnz loc_7F82BB7C push 0 push [ebp+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82BA71 xor ecx, ecx mov cx, [eax+12h] and ecx, 8000h cmp dword ptr [eax+14h], 0 mov [ebp+arg_C], ecx jl short loc_7F82BA76 mov bx, [eax+1Eh] jmp short loc_7F82BA76 ; --------------------------------------------------------------------------- loc_7F82BA71: ; CODE XREF: sub_7F82B9DE+76j mov edi, 1001h loc_7F82BA76: ; CODE XREF: sub_7F82B9DE+8Bj ; sub_7F82B9DE+91j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BA8C call sub_7F82A34F jmp short loc_7F82BA9A ; --------------------------------------------------------------------------- loc_7F82BA8C: ; CODE XREF: sub_7F82B9DE+A5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BA9A: ; CODE XREF: sub_7F82B9DE+ACj mov dword_7F838078, 0 test edi, edi jnz loc_7F82BB99 cmp bx, 1 jg short loc_7F82BAFD cmp [ebp+arg_C], 0 jz short loc_7F82BADE push 0 push 80h push [ebp+arg_4] push esi call sub_7F82A016 cmp eax, 1 sbb edi, edi and edi, 253h jnz loc_7F82BB7C jmp short loc_7F82BADE ; --------------------------------------------------------------------------- loc_7F82BADB: ; CODE XREF: sub_7F82B9DE+17j mov esi, [ebp+arg_0] loc_7F82BADE: ; CODE XREF: sub_7F82B9DE+D8j ; sub_7F82B9DE+FBj cmp bx, 1 jg short loc_7F82BAFD cmp [ebp+arg_8], 0 jnz short loc_7F82BAFD push [ebp+arg_4] push esi call sub_7F82BC21 mov edi, eax test edi, edi jnz loc_7F82BB99 loc_7F82BAFD: ; CODE XREF: sub_7F82B9DE+D2j ; sub_7F82B9DE+104j ... cmp dword_7F838078, 0 jz short loc_7F82BB0D mov edi, 253h jmp short loc_7F82BB3C ; --------------------------------------------------------------------------- loc_7F82BB0D: ; CODE XREF: sub_7F82B9DE+126j mov eax, [esi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, esi loc_7F82BB3C: ; CODE XREF: sub_7F82B9DE+12Dj test edi, edi jnz short loc_7F82BB99 push [ebp+arg_8] push [ebp+arg_4] call sub_7F81479E mov edi, eax mov ecx, dword_7F838078 cmp word ptr [ecx+254h], 0 jz short loc_7F82BB64 call sub_7F82A34F jmp short loc_7F82BB72 ; --------------------------------------------------------------------------- loc_7F82BB64: ; CODE XREF: sub_7F82B9DE+17Dj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BB72: ; CODE XREF: sub_7F82B9DE+184j mov dword_7F838078, 0 loc_7F82BB7C: ; CODE XREF: sub_7F82B9DE+64j ; sub_7F82B9DE+F5j test edi, edi jnz short loc_7F82BB99 cmp word_7F838070, 1 jnz short loc_7F82BB99 lea eax, [ebp+var_10] push eax push 20h push [ebp+arg_4] push esi call sub_7F82A016 loc_7F82BB99: ; CODE XREF: sub_7F82B9DE+C8j ; sub_7F82B9DE+119j ... dec word_7F838070 mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82B9DE endp ; =============== S U B R O U T I N E ======================================= sub_7F82BBAB proc near ; CODE XREF: sub_7F81BF33+BBp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi push edi push ebp mov edi, [esp+10h+arg_8] mov bx, [edi] test bx, bx jle short loc_7F82BC1A mov esi, [esp+10h+arg_4] loc_7F82BBBF: ; CODE XREF: sub_7F82BBAB+6Dj push 0 push 80h push dword ptr [esi] push [esp+1Ch+arg_0] call sub_7F82A016 test eax, eax jz short loc_7F82BBE4 push dword ptr [esi] push [esp+14h+arg_0] call sub_7F82BCCA test eax, eax jz short loc_7F82BC10 loc_7F82BBE4: ; CODE XREF: sub_7F82BBAB+28j dec word ptr [edi] cmp bx, 1 jle short loc_7F82BC10 movsx eax, bx mov ebp, [esi] lea edx, [esi+4] lea ecx, ds:0FFFFFFFCh[eax*4] push ecx push edx push esi call sub_7F82FCE0 movsx ecx, bx add esp, 0Ch sub esi, 4 mov [esi+ecx*4], ebp loc_7F82BC10: ; CODE XREF: sub_7F82BBAB+37j ; sub_7F82BBAB+40j dec bx add esi, 4 test bx, bx jnz short loc_7F82BBBF loc_7F82BC1A: ; CODE XREF: sub_7F82BBAB+Ej pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82BBAB endp ; =============== S U B R O U T I N E ======================================= sub_7F82BC21 proc near ; CODE XREF: sub_7F82B9DE+110p arg_0 = dword ptr 4 arg_4 = dword ptr 8 cmp dword_7F838078, 0 push esi jz short loc_7F82BC32 mov esi, 253h jmp short loc_7F82BC65 ; --------------------------------------------------------------------------- loc_7F82BC32: ; CODE XREF: sub_7F82BC21+8j mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82BC65: ; CODE XREF: sub_7F82BC21+Fj test esi, esi jnz short loc_7F82BCC4 push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F82BC7F mov esi, 1001h jmp short loc_7F82BC96 ; --------------------------------------------------------------------------- loc_7F82BC7F: ; CODE XREF: sub_7F82BC21+55j mov cx, [eax+10h] test cl, 8 jz short loc_7F82BC8F mov esi, 253h jmp short loc_7F82BC96 ; --------------------------------------------------------------------------- loc_7F82BC8F: ; CODE XREF: sub_7F82BC21+65j or cl, 8 mov [eax+10h], cx loc_7F82BC96: ; CODE XREF: sub_7F82BC21+5Cj ; sub_7F82BC21+6Cj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BCAC call sub_7F82A34F jmp short loc_7F82BCBA ; --------------------------------------------------------------------------- loc_7F82BCAC: ; CODE XREF: sub_7F82BC21+82j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BCBA: ; CODE XREF: sub_7F82BC21+89j mov dword_7F838078, 0 loc_7F82BCC4: ; CODE XREF: sub_7F82BC21+46j mov eax, esi pop esi retn 8 sub_7F82BC21 endp ; =============== S U B R O U T I N E ======================================= sub_7F82BCCA proc near ; CODE XREF: sub_7F8183DC+36p ; sub_7F82BBAB+30p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov eax, 253h xor esi, esi cmp dword_7F838078, esi jnz short loc_7F82BD0C mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov eax, [edx] mov dword_7F838078, eax mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82BD0C: ; CODE XREF: sub_7F82BCCA+Ej test eax, eax jnz short loc_7F82BD5C push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82BD2E mov ax, [eax+10h] and ax, 8 cmp ax, 1 sbb esi, esi inc esi loc_7F82BD2E: ; CODE XREF: sub_7F82BCCA+53j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BD44 call sub_7F82A34F jmp short loc_7F82BD52 ; --------------------------------------------------------------------------- loc_7F82BD44: ; CODE XREF: sub_7F82BCCA+71j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BD52: ; CODE XREF: sub_7F82BCCA+78j mov dword_7F838078, 0 loc_7F82BD5C: ; CODE XREF: sub_7F82BCCA+44j mov eax, esi pop esi retn 8 sub_7F82BCCA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82BD62 proc near ; CODE XREF: sub_7F81CCA0+5Bp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov eax, 253h cmp dword_7F838078, 0 mov ebp, esp push ebx push esi push edi jnz short loc_7F82BDA8 mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82BDA8: ; CODE XREF: sub_7F82BD62+12j test eax, eax jnz loc_7F82BE4F push 0 push [ebp+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F82BDC5 mov esi, 1008h jmp short loc_7F82BE1F ; --------------------------------------------------------------------------- loc_7F82BDC5: ; CODE XREF: sub_7F82BD62+5Aj mov cx, [eax+10h] and cx, 800h cmp cx, 1 mov ecx, [ebp+arg_14] sbb edi, edi neg edi test ecx, ecx jz short loc_7F82BDE0 mov [ecx], di loc_7F82BDE0: ; CODE XREF: sub_7F82BD62+79j mov ebx, [ebp+arg_8] push ebx push 0 push eax call sub_7F81453F mov esi, eax test esi, esi jnz short loc_7F82BE1F push 0 push dword ptr [ebx] call sub_7F8144A4 mov edx, [eax+0Ch] mov ecx, [ebp+arg_C] mov ebx, [ebp+arg_10] test edi, edi mov [ecx], edx mov [eax+8], ebx jz short loc_7F82BE15 and word ptr [eax+10h], 0F7FFh jmp short loc_7F82BE19 ; --------------------------------------------------------------------------- loc_7F82BE15: ; CODE XREF: sub_7F82BD62+A9j or byte ptr [eax+11h], 8 loc_7F82BE19: ; CODE XREF: sub_7F82BD62+B1j push eax call sub_7F8148F7 loc_7F82BE1F: ; CODE XREF: sub_7F82BD62+61j ; sub_7F82BD62+8Ej mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BE35 call sub_7F82A34F jmp short loc_7F82BE43 ; --------------------------------------------------------------------------- loc_7F82BE35: ; CODE XREF: sub_7F82BD62+CAj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BE43: ; CODE XREF: sub_7F82BD62+D1j mov dword_7F838078, 0 mov eax, esi loc_7F82BE4F: ; CODE XREF: sub_7F82BD62+48j pop edi pop esi pop ebx pop ebp retn 18h sub_7F82BD62 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82BE56 proc near ; CODE XREF: sub_7F811467+62p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov eax, [esp+arg_C] mov ebp, esp push ebx push esi push edi cmp dword_7F838078, 0 movsx esi, word ptr [eax] jz short loc_7F82BE73 mov ebx, 253h jmp short loc_7F82BEA5 ; --------------------------------------------------------------------------- loc_7F82BE73: ; CODE XREF: sub_7F82BE56+14j mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx xor ebx, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82BEA5: ; CODE XREF: sub_7F82BE56+1Bj test ebx, ebx jnz short loc_7F82BF13 xor edi, edi loc_7F82BEAB: ; CODE XREF: sub_7F82BE56+8Dj mov eax, esi dec esi test eax, eax jle short loc_7F82BEE5 mov eax, [ebp+arg_4] mov ecx, [ebp+arg_8] push edi mov ebx, 1001h add [ebp+arg_4], 4 mov eax, [eax] push eax mov [ecx], edi call sub_7F8144A4 test eax, eax jz short loc_7F82BEE1 mov ecx, [ebp+arg_8] add [ebp+arg_8], 4 push ecx push edi push eax call sub_7F81453F mov ebx, eax loc_7F82BEE1: ; CODE XREF: sub_7F82BE56+78j test ebx, ebx jz short loc_7F82BEAB loc_7F82BEE5: ; CODE XREF: sub_7F82BE56+5Aj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BEFB call sub_7F82A34F jmp short loc_7F82BF09 ; --------------------------------------------------------------------------- loc_7F82BEFB: ; CODE XREF: sub_7F82BE56+9Cj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BF09: ; CODE XREF: sub_7F82BE56+A3j mov dword_7F838078, 0 loc_7F82BF13: ; CODE XREF: sub_7F82BE56+51j inc si mov eax, [ebp+arg_C] sub [eax], si pop edi mov eax, ebx pop esi pop ebx pop ebp retn 10h sub_7F82BE56 endp ; =============== S U B R O U T I N E ======================================= sub_7F82BF24 proc near ; CODE XREF: sub_7F810955+17Ap ; sub_7F810955+18Fp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov eax, 253h cmp dword_7F838078, 0 push edi jnz short loc_7F82BF67 mov ecx, [esp+8+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82BF67: ; CODE XREF: sub_7F82BF24+Ej test eax, eax jnz short loc_7F82BFDF mov eax, [esp+8+arg_4] mov eax, [eax] movzx ecx, word ptr [eax] mov si, [ecx+eax+6] lea edi, [ecx+eax] mov ax, si dec si test ax, ax jle short loc_7F82BFB1 loc_7F82BF86: ; CODE XREF: sub_7F82BF24+8Bj mov eax, edi push 0 sub edi, 6 push dword ptr [eax] call sub_7F8144A4 test eax, eax jz short loc_7F82BFA7 mov cx, [eax+1Ch] test cx, cx jz short loc_7F82BFA7 dec cx mov [eax+1Ch], cx loc_7F82BFA7: ; CODE XREF: sub_7F82BF24+72j ; sub_7F82BF24+7Bj mov ax, si dec si test ax, ax jg short loc_7F82BF86 loc_7F82BFB1: ; CODE XREF: sub_7F82BF24+60j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82BFC7 call sub_7F82A34F jmp short loc_7F82BFD5 ; --------------------------------------------------------------------------- loc_7F82BFC7: ; CODE XREF: sub_7F82BF24+9Aj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82BFD5: ; CODE XREF: sub_7F82BF24+A1j mov dword_7F838078, 0 loc_7F82BFDF: ; CODE XREF: sub_7F82BF24+45j pop edi pop esi retn 8 sub_7F82BF24 endp ; =============== S U B R O U T I N E ======================================= sub_7F82BFE4 proc near ; CODE XREF: sub_7F8107B6+85p ; sub_7F810C5D+2Ap ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch cmp dword_7F838078, 0 push esi push edi jz short loc_7F82BFF6 mov esi, 253h jmp short loc_7F82C029 ; --------------------------------------------------------------------------- loc_7F82BFF6: ; CODE XREF: sub_7F82BFE4+9j mov ecx, [esp+8+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82C029: ; CODE XREF: sub_7F82BFE4+10j test esi, esi jnz short loc_7F82C0A9 push 0 push [esp+0Ch+arg_4] call sub_7F8144A4 mov edi, eax test edi, edi jz short loc_7F82C076 test byte ptr [edi+10h], 20h jz short loc_7F82C04B mov esi, 203h jmp short loc_7F82C07B ; --------------------------------------------------------------------------- loc_7F82C04B: ; CODE XREF: sub_7F82BFE4+5Ej cmp [esp+8+arg_8], 0 jz short loc_7F82C05E inc word ptr [edi+1Ch] push edi call sub_7F8148F7 jmp short loc_7F82C07B ; --------------------------------------------------------------------------- loc_7F82C05E: ; CODE XREF: sub_7F82BFE4+6Cj cmp dword ptr [edi+14h], 0 jge short loc_7F82C06A push edi call sub_7F814971 loc_7F82C06A: ; CODE XREF: sub_7F82BFE4+7Ej inc word ptr [edi+1Eh] push edi call sub_7F8148F7 jmp short loc_7F82C07B ; --------------------------------------------------------------------------- loc_7F82C076: ; CODE XREF: sub_7F82BFE4+58j mov esi, 1001h loc_7F82C07B: ; CODE XREF: sub_7F82BFE4+65j ; sub_7F82BFE4+78j ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C091 call sub_7F82A34F jmp short loc_7F82C09F ; --------------------------------------------------------------------------- loc_7F82C091: ; CODE XREF: sub_7F82BFE4+A4j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C09F: ; CODE XREF: sub_7F82BFE4+ABj mov dword_7F838078, 0 loc_7F82C0A9: ; CODE XREF: sub_7F82BFE4+47j mov eax, esi pop edi pop esi retn 0Ch sub_7F82BFE4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C0B0 proc near ; CODE XREF: sub_7F81D598+18Ep ; sub_7F81DE67+212p var_10 = word ptr -10h var_E = dword ptr -0Eh var_A = dword ptr -0Ah var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 10h mov [ebp+var_4], 0 push esi push edi push 4 push 4 push [ebp+arg_4] push [ebp+arg_0] call sub_7F82CFC5 mov esi, eax test esi, esi jz short loc_7F82C0EA cmp esi, 1001h jnz loc_7F82C1B9 mov esi, 1009h jmp loc_7F82C1B9 ; --------------------------------------------------------------------------- loc_7F82C0EA: ; CODE XREF: sub_7F82C0B0+22j lea eax, [ebp+var_4] lea ecx, [ebp+arg_4] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jnz loc_7F82C1B9 lea eax, [ebp+var_10] push eax push [ebp+var_4] call sub_7F8199C3 xor eax, eax mov ax, [ebp+var_10] and eax, 3 cmp eax, 1 jz short loc_7F82C12C cmp eax, 3 jz short loc_7F82C16E mov esi, 1013h jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C12C: ; CODE XREF: sub_7F82C0B0+6Ej cmp [ebp+var_E], 0 jnz short loc_7F82C14C mov eax, [ebp+var_A] sub eax, [ebp+var_E] cmp eax, 0Dh jz short loc_7F82C142 cmp eax, 9 jnz short loc_7F82C14C loc_7F82C142: ; CODE XREF: sub_7F82C0B0+8Bj mov eax, [ebp+arg_8] mov word ptr [eax], 1 jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C14C: ; CODE XREF: sub_7F82C0B0+80j ; sub_7F82C0B0+90j cmp [ebp+var_E], 11h jnz short loc_7F82C167 mov eax, [ebp+var_A] sub eax, [ebp+var_E] cmp eax, 1 jnz short loc_7F82C167 mov eax, [ebp+arg_8] mov word ptr [eax], 2 jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C167: ; CODE XREF: sub_7F82C0B0+A0j ; sub_7F82C0B0+ABj mov esi, 1013h jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C16E: ; CODE XREF: sub_7F82C0B0+73j movzx eax, word ptr [ebp+var_A] test eax, eax jz short loc_7F82C187 cmp eax, 1 jz short loc_7F82C191 cmp eax, 2 jz short loc_7F82C19B mov esi, 1013h jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C187: ; CODE XREF: sub_7F82C0B0+C4j mov eax, [ebp+arg_8] mov word ptr [eax], 3 jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C191: ; CODE XREF: sub_7F82C0B0+C9j mov eax, [ebp+arg_8] mov word ptr [eax], 4 jmp short loc_7F82C1A3 ; --------------------------------------------------------------------------- loc_7F82C19B: ; CODE XREF: sub_7F82C0B0+CEj mov eax, [ebp+arg_8] mov word ptr [eax], 5 loc_7F82C1A3: ; CODE XREF: sub_7F82C0B0+7Aj ; sub_7F82C0B0+9Aj ... test esi, esi jnz short loc_7F82C1B9 mov cx, [ebp+var_10] mov eax, [ebp+arg_C] and cx, 4 shr cx, 2 mov [eax], cx loc_7F82C1B9: ; CODE XREF: sub_7F82C0B0+2Aj ; sub_7F82C0B0+35j ... cmp [ebp+var_4], 0 jz short loc_7F82C1CA push 0 lea eax, [ebp+var_4] push eax call sub_7F81813C loc_7F82C1CA: ; CODE XREF: sub_7F82C0B0+10Dj mov eax, esi pop edi pop esi mov esp, ebp pop ebp retn 10h sub_7F82C0B0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C1D4 proc near ; CODE XREF: sub_7F81D598+228p ; sub_7F81DE67+222p var_2C = byte ptr -2Ch var_28 = byte ptr -28h var_1C = byte ptr -1Ch var_10 = dword ptr -10h var_C = word ptr -0Ch var_A = dword ptr -0Ah var_6 = dword ptr -6 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp inc word_7F838070 mov ebp, esp sub esp, 2Ch mov [ebp+var_10], 0 push ebx push esi push edi push 4 push 4 push [ebp+arg_4] push [ebp+arg_0] call sub_7F82CFC5 mov ebx, eax test ebx, ebx jz short loc_7F82C216 cmp ebx, 1001h jnz loc_7F82C334 mov ebx, 1009h jmp loc_7F82C334 ; --------------------------------------------------------------------------- loc_7F82C216: ; CODE XREF: sub_7F82C1D4+2Aj lea eax, [ebp+var_10] lea ecx, [ebp+arg_4] push eax push 1 push ecx push [ebp+arg_0] call sub_7F817E9D mov ebx, eax test ebx, ebx jnz loc_7F82C334 lea eax, [ebp+var_C] push eax push [ebp+var_10] call sub_7F8199C3 push 0Ah lea ecx, [ebp+var_C] push ecx lea edx, [ebp+var_1C] push edx call sub_7F82FCE0 movzx eax, [ebp+arg_8] add esp, 0Ch cmp eax, 1 jz short loc_7F82C274 cmp eax, 2 jz short loc_7F82C292 cmp eax, 3 jz short loc_7F82C2B0 cmp eax, 4 jz short loc_7F82C2C3 cmp eax, 5 jz short loc_7F82C2D6 mov ebx, 1013h jmp short loc_7F82C2E7 ; --------------------------------------------------------------------------- loc_7F82C274: ; CODE XREF: sub_7F82C1D4+83j mov [ebp+var_A], 0 mov [ebp+var_6], 9 mov ax, [ebp+var_C] and ax, 0FFFDh or al, 1 mov [ebp+var_C], ax jmp short loc_7F82C2E7 ; --------------------------------------------------------------------------- loc_7F82C292: ; CODE XREF: sub_7F82C1D4+88j mov [ebp+var_A], 11h mov [ebp+var_6], 12h mov ax, [ebp+var_C] and ax, 0FFFDh or al, 1 mov [ebp+var_C], ax jmp short loc_7F82C2E7 ; --------------------------------------------------------------------------- loc_7F82C2B0: ; CODE XREF: sub_7F82C1D4+8Dj or byte ptr [ebp+var_C], 3 mov word ptr [ebp+var_6], 0 mov [ebp+var_A], 1Bh jmp short loc_7F82C2E7 ; --------------------------------------------------------------------------- loc_7F82C2C3: ; CODE XREF: sub_7F82C1D4+92j or byte ptr [ebp+var_C], 3 mov word ptr [ebp+var_6], 1 mov [ebp+var_A], 1Bh jmp short loc_7F82C2E7 ; --------------------------------------------------------------------------- loc_7F82C2D6: ; CODE XREF: sub_7F82C1D4+97j or byte ptr [ebp+var_C], 3 mov word ptr [ebp+var_6], 2 mov [ebp+var_A], 1Bh loc_7F82C2E7: ; CODE XREF: sub_7F82C1D4+9Ej ; sub_7F82C1D4+BCj ... test ebx, ebx jnz short loc_7F82C334 mov eax, [ebp+arg_C] push 0Ah shl ax, 2 lea ecx, [ebp+var_1C] xor ax, [ebp+var_C] push ecx and ax, 4 lea edx, [ebp+var_C] xor [ebp+var_C], ax push edx call sub_7F81AF66 test eax, eax jz short loc_7F82C326 mov eax, [ebp+arg_0] mov ebx, 1 mov ecx, [eax] mov edx, [ecx] test byte ptr [edx+265h], 8 jz short loc_7F82C334 loc_7F82C326: ; CODE XREF: sub_7F82C1D4+13Bj lea eax, [ebp+var_C] push eax push [ebp+var_10] call sub_7F8199E0 mov ebx, eax loc_7F82C334: ; CODE XREF: sub_7F82C1D4+32j ; sub_7F82C1D4+3Dj ... cmp [ebp+var_10], 0 jz short loc_7F82C351 lea ecx, [ebp+var_10] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C test ebx, ebx jnz short loc_7F82C388 mov ebx, eax loc_7F82C351: ; CODE XREF: sub_7F82C1D4+164j test ebx, ebx jnz short loc_7F82C388 cmp word_7F838070, 1 jnz short loc_7F82C37D lea esi, [ebp+var_C] lea edi, [ebp+var_28] movsd movsd movsw lea eax, [ebp+var_2C] push eax push 20000h push [ebp+arg_4] push [ebp+arg_0] call sub_7F82A016 loc_7F82C37D: ; CODE XREF: sub_7F82C1D4+189j push [ebp+arg_4] push [ebp+arg_0] call sub_7F828E0D loc_7F82C388: ; CODE XREF: sub_7F82C1D4+179j ; sub_7F82C1D4+17Fj dec word_7F838070 lea eax, [ebx-1] pop edi cmp eax, 1 mov eax, 0 pop esi adc eax, 0FFFFFFFFh and eax, ebx pop ebx mov esp, ebp pop ebp retn 10h sub_7F82C1D4 endp ; =============== S U B R O U T I N E ======================================= sub_7F82C3A8 proc near ; CODE XREF: sub_7F80CBB5+452p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx xor eax, eax push esi push edi mov esi, [esp+0Ch+arg_8] mov [esi], ax cmp dword_7F838078, eax jz short loc_7F82C3C3 mov edi, 253h jmp short loc_7F82C3F6 ; --------------------------------------------------------------------------- loc_7F82C3C3: ; CODE XREF: sub_7F82C3A8+12j mov ecx, [esp+0Ch+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82C3F6: ; CODE XREF: sub_7F82C3A8+19j test edi, edi jnz short loc_7F82C462 push 0 push [esp+10h+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82C42F mov cx, [eax+12h] and cx, 800Ah cmp cx, 800Ah jnz short loc_7F82C423 push 0 push dword ptr [eax+8] call sub_7F8144A4 loc_7F82C423: ; CODE XREF: sub_7F82C3A8+6Fj test eax, eax jz short loc_7F82C42F mov eax, [eax+0Ch] mov [esi], ax jmp short loc_7F82C434 ; --------------------------------------------------------------------------- loc_7F82C42F: ; CODE XREF: sub_7F82C3A8+5Fj ; sub_7F82C3A8+7Dj mov edi, 1009h loc_7F82C434: ; CODE XREF: sub_7F82C3A8+85j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C44A call sub_7F82A34F jmp short loc_7F82C458 ; --------------------------------------------------------------------------- loc_7F82C44A: ; CODE XREF: sub_7F82C3A8+99j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C458: ; CODE XREF: sub_7F82C3A8+A0j mov dword_7F838078, 0 loc_7F82C462: ; CODE XREF: sub_7F82C3A8+50j mov eax, edi pop edi pop esi pop ebx retn 0Ch sub_7F82C3A8 endp ; =============== S U B R O U T I N E ======================================= sub_7F82C46A proc near ; CODE XREF: sub_7F810955+D7p ; sub_7F81B8F0+D1p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov eax, 253h cmp dword_7F838078, 0 jnz short loc_7F82C4AC mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82C4AC: ; CODE XREF: sub_7F82C46A+Dj test eax, eax jnz short loc_7F82C506 push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82C4D8 cmp [esp+4+arg_8], 0 jz short loc_7F82C4CE and word ptr [eax+10h], 0F7FFh jmp short loc_7F82C4D2 ; --------------------------------------------------------------------------- loc_7F82C4CE: ; CODE XREF: sub_7F82C46A+5Aj or byte ptr [eax+11h], 8 loc_7F82C4D2: ; CODE XREF: sub_7F82C46A+62j push eax call sub_7F8148F7 loc_7F82C4D8: ; CODE XREF: sub_7F82C46A+53j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C4EE call sub_7F82A34F jmp short loc_7F82C4FC ; --------------------------------------------------------------------------- loc_7F82C4EE: ; CODE XREF: sub_7F82C46A+7Bj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C4FC: ; CODE XREF: sub_7F82C46A+82j mov dword_7F838078, 0 loc_7F82C506: ; CODE XREF: sub_7F82C46A+44j pop esi retn 0Ch sub_7F82C46A endp ; =============== S U B R O U T I N E ======================================= sub_7F82C50A proc near ; CODE XREF: sub_7F81B8F0+E2p ; sub_7F81BF33+388p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F82C54A mov ecx, [esp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov eax, [edx] mov dword_7F838078, eax mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82C54A: ; CODE XREF: sub_7F82C50A+Cj test eax, eax jnz short locret_7F82C5A7 push 0 push [esp+4+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82C579 mov ecx, [eax+0Ch] add cx, [esp+arg_8] test cx, cx jg short loc_7F82C56D xor cx, cx loc_7F82C56D: ; CODE XREF: sub_7F82C50A+5Ej movsx ecx, cx push eax mov [eax+0Ch], ecx call sub_7F8148F7 loc_7F82C579: ; CODE XREF: sub_7F82C50A+51j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C58F call sub_7F82A34F jmp short loc_7F82C59D ; --------------------------------------------------------------------------- loc_7F82C58F: ; CODE XREF: sub_7F82C50A+7Cj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C59D: ; CODE XREF: sub_7F82C50A+83j mov dword_7F838078, 0 locret_7F82C5A7: ; CODE XREF: sub_7F82C50A+42j retn 0Ch sub_7F82C50A endp ; =============== S U B R O U T I N E ======================================= sub_7F82C5AA proc near ; CODE XREF: sub_7F81D598+307p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F82C5EA mov ecx, [esp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov eax, [edx] mov dword_7F838078, eax mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82C5EA: ; CODE XREF: sub_7F82C5AA+Cj test eax, eax jnz short locret_7F82C639 push 0 push [esp+4+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82C60B movsx ecx, [esp+arg_8] push eax mov [eax+0Ch], ecx call sub_7F8148F7 loc_7F82C60B: ; CODE XREF: sub_7F82C5AA+51j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C621 call sub_7F82A34F jmp short loc_7F82C62F ; --------------------------------------------------------------------------- loc_7F82C621: ; CODE XREF: sub_7F82C5AA+6Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C62F: ; CODE XREF: sub_7F82C5AA+75j mov dword_7F838078, 0 locret_7F82C639: ; CODE XREF: sub_7F82C5AA+42j retn 0Ch sub_7F82C5AA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C63C proc near ; CODE XREF: sub_7F81BF33+199p ; sub_7F81D22C+2Dp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h cmp dword_7F838078, 0 push ebp mov ebp, esp push esi jz short loc_7F82C650 mov esi, 253h jmp short loc_7F82C682 ; --------------------------------------------------------------------------- loc_7F82C650: ; CODE XREF: sub_7F82C63C+Bj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82C682: ; CODE XREF: sub_7F82C63C+12j test esi, esi jnz short loc_7F82C6FB push 0 push [ebp+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82C6C8 mov ecx, [ebp+arg_8] test ecx, ecx jz short loc_7F82C6A0 mov edx, [eax+8] mov [ecx], edx loc_7F82C6A0: ; CODE XREF: sub_7F82C63C+5Dj mov ecx, [ebp+arg_C] test ecx, ecx jz short loc_7F82C6AC mov edx, [eax+0Ch] mov [ecx], edx loc_7F82C6AC: ; CODE XREF: sub_7F82C63C+69j mov ecx, [ebp+arg_10] test ecx, ecx jz short loc_7F82C6CD mov ax, [eax+10h] and ax, 800h cmp ax, 1 sbb eax, eax neg eax mov [ecx], ax jmp short loc_7F82C6CD ; --------------------------------------------------------------------------- loc_7F82C6C8: ; CODE XREF: sub_7F82C63C+56j mov esi, 1008h loc_7F82C6CD: ; CODE XREF: sub_7F82C63C+75j ; sub_7F82C63C+8Aj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C6E3 call sub_7F82A34F jmp short loc_7F82C6F1 ; --------------------------------------------------------------------------- loc_7F82C6E3: ; CODE XREF: sub_7F82C63C+9Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C6F1: ; CODE XREF: sub_7F82C63C+A5j mov dword_7F838078, 0 loc_7F82C6FB: ; CODE XREF: sub_7F82C63C+48j mov eax, esi pop esi pop ebp retn 14h sub_7F82C63C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C702 proc near ; CODE XREF: sub_7F81C56F+246p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp push esi push edi mov esi, [ebp+arg_C] mov [esi], ax cmp dword_7F838078, eax mov eax, 253h jnz short loc_7F82C74E mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov edi, [edx] mov dword_7F838078, edi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82C74E: ; CODE XREF: sub_7F82C702+18j test eax, eax jnz short loc_7F82C7B5 mov di, [ebp+arg_8] mov ax, di dec di test ax, ax jle short loc_7F82C787 loc_7F82C760: ; CODE XREF: sub_7F82C702+83j mov eax, [ebp+arg_4] push 0 add [ebp+arg_4], 4 push dword ptr [eax] call sub_7F8144A4 test eax, eax jz short loc_7F82C77D test byte ptr [eax+11h], 8 jz short loc_7F82C77D inc word ptr [esi] loc_7F82C77D: ; CODE XREF: sub_7F82C702+70j ; sub_7F82C702+76j mov ax, di dec di test ax, ax jg short loc_7F82C760 loc_7F82C787: ; CODE XREF: sub_7F82C702+5Cj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C79D call sub_7F82A34F jmp short loc_7F82C7AB ; --------------------------------------------------------------------------- loc_7F82C79D: ; CODE XREF: sub_7F82C702+92j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C7AB: ; CODE XREF: sub_7F82C702+99j mov dword_7F838078, 0 loc_7F82C7B5: ; CODE XREF: sub_7F82C702+4Ej pop edi pop esi pop ebp retn 10h sub_7F82C702 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C7BB proc near ; CODE XREF: sub_7F81C56F+3D2p ; sub_7F82929F+281p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp xor eax, eax mov ebp, esp push ebx push esi push edi mov esi, [ebp+arg_10] mov [esi], ax cmp dword_7F838078, eax mov eax, 253h jnz short loc_7F82C808 mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82C808: ; CODE XREF: sub_7F82C7BB+19j test eax, eax jnz short loc_7F82C878 mov di, [ebp+arg_8] mov ax, di dec di test ax, ax jle short loc_7F82C84A mov ebx, [ebp+arg_4] loc_7F82C81D: ; CODE XREF: sub_7F82C7BB+8Dj mov ax, [ebp+arg_C] cmp [ebx], ax jnz short loc_7F82C83D push 0 push dword ptr [ebx+4] call sub_7F8144A4 test eax, eax jz short loc_7F82C83D test byte ptr [eax+11h], 8 jz short loc_7F82C83D inc word ptr [esi] loc_7F82C83D: ; CODE XREF: sub_7F82C7BB+69j ; sub_7F82C7BB+77j ... mov ax, di add ebx, 8 dec di test ax, ax jg short loc_7F82C81D loc_7F82C84A: ; CODE XREF: sub_7F82C7BB+5Dj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82C860 call sub_7F82A34F jmp short loc_7F82C86E ; --------------------------------------------------------------------------- loc_7F82C860: ; CODE XREF: sub_7F82C7BB+9Cj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82C86E: ; CODE XREF: sub_7F82C7BB+A3j mov dword_7F838078, 0 loc_7F82C878: ; CODE XREF: sub_7F82C7BB+4Fj pop edi pop esi pop ebx pop ebp retn 14h sub_7F82C7BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C87F proc near ; CODE XREF: sub_7F829880+38p ; sub_7F829880+49p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h push ebx lea eax, [ebp+var_2] push esi push edi xor edi, edi mov ebx, [ebp+arg_0] push edi push eax push edi push edi push [ebp+arg_4] push ebx call sub_7F82D114 cmp eax, edi mov esi, eax jnz loc_7F82C96D test [ebp+var_1], 8 jz short loc_7F82C8E8 lea eax, [ebp+var_8] mov [ebp+var_8], edi push eax push edi push [ebp+arg_4] push ebx call sub_7F816C79 cmp eax, edi mov esi, eax jnz loc_7F82C96D mov eax, [ebp+var_8] mov edx, [ebp+arg_8] mov eax, [eax] push [ebp+var_8] movzx ecx, word ptr [eax] mov ax, [ecx+eax+6] mov [edx], ax call sub_7F82F1E1 jmp loc_7F82C96D ; --------------------------------------------------------------------------- loc_7F82C8E8: ; CODE XREF: sub_7F82C87F+2Cj push 2 push [ebp+arg_4] push ebx call sub_7F81155C test eax, eax jz short loc_7F82C904 mov eax, [eax] mov ecx, [ebp+arg_8] mov ax, [eax] mov [ecx], ax jmp short loc_7F82C96D ; --------------------------------------------------------------------------- loc_7F82C904: ; CODE XREF: sub_7F82C87F+76j xor edi, edi lea eax, [ebp+arg_4] push edi lea ecx, [ebp+var_8] push 8040h mov [ebp+var_8], edi push eax push ecx push ebx call sub_7F824835 cmp eax, edi mov esi, eax jnz short loc_7F82C95C push edi lea eax, [ebp+var_C] push eax lea ecx, [ebp+var_10] mov [ebp+var_C], 4 push ecx push [ebp+var_8] call sub_7F824CAB cmp eax, edi mov esi, eax jnz short loc_7F82C95C push [ebp+var_10] mov [ebp+var_C], 2 lea ecx, [ebp+var_C] push ecx push [ebp+arg_8] push [ebp+var_8] call sub_7F824CAB mov esi, eax loc_7F82C95C: ; CODE XREF: sub_7F82C87F+A2j ; sub_7F82C87F+C0j cmp [ebp+var_8], 0 jz short loc_7F82C96D push 0 lea eax, [ebp+var_8] push eax call sub_7F824AF5 loc_7F82C96D: ; CODE XREF: sub_7F82C87F+22j ; sub_7F82C87F+43j ... test esi, esi jz short loc_7F82C979 mov ecx, [ebp+arg_8] mov word ptr [ecx], 0 loc_7F82C979: ; CODE XREF: sub_7F82C87F+F0j mov eax, esi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F82C87F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C984 proc near ; CODE XREF: sub_7F82CB67+64p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi xor edi, edi push [ebp+arg_4] push [ebp+arg_0] call sub_7F81990D mov esi, [ebp+arg_C] push edi push eax mov [esi], eax call sub_7F82F03B mov ebx, eax mov eax, [ebp+arg_8] test ebx, ebx mov [eax], ebx jnz short loc_7F82C9BA mov eax, 400h mov [esi], edi jmp short loc_7F82C9E6 ; --------------------------------------------------------------------------- loc_7F82C9BA: ; CODE XREF: sub_7F82C984+2Bj push esi xor edi, edi push ebx push edi push [ebp+arg_4] push [ebp+arg_0] call sub_7F818D47 mov [ebp+var_4], eax cmp eax, edi mov eax, 0 jz short loc_7F82C9E6 push ebx call sub_7F82F149 mov eax, [ebp+arg_8] mov [eax], edi mov eax, [ebp+var_4] mov [esi], edi loc_7F82C9E6: ; CODE XREF: sub_7F82C984+34j ; sub_7F82C984+50j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82C984 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82C9EF proc near ; CODE XREF: sub_7F82110E+2B5p var_24 = word ptr -24h var_22 = word ptr -22h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 24h push ebx lea eax, [ebp+var_8] push esi lea ecx, [ebp+var_18] mov [ebp+var_18], 73434D80h mov [ebp+var_8], 0 push edi push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D mov ebx, eax test ebx, ebx jnz loc_7F82CB32 and [ebp+var_24], 0FFFBh and [ebp+var_24], 0FFFCh mov [ebp+var_22], 0FFFFh lea eax, [ebp+var_24] push eax push [ebp+var_8] call sub_7F8199E0 mov ebx, eax test ebx, ebx jnz loc_7F82CB32 mov si, 1 mov edi, offset word_7F835938 cmp word_7F835938, 0 jz loc_7F82CB32 loc_7F82CA61: ; CODE XREF: sub_7F82C9EF+13Dj movsx eax, word ptr [edi] push eax call sub_7F82AC7E push eax ; lpString mov [ebp+var_14], eax call ds:lstrlenA inc eax mov [ebp+var_C], eax mov eax, [edi+2] movzx ecx, byte ptr [eax] movzx edx, byte ptr [eax+1] shl ecx, 8 mov eax, [ebp+var_C] add ecx, edx lea edx, [ebp+var_2] add eax, ecx mov [ebp+var_10], ecx movzx ecx, si add eax, 4 push eax push ecx push edx push [ebp+var_8] call sub_7F818B75 mov ebx, eax test ebx, ebx jnz loc_7F82CB32 push 2 lea eax, [ebp+var_C] push eax lea ecx, [ebp+var_2] push 0 push ecx push [ebp+var_8] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F82CB32 push [ebp+var_C] push [ebp+var_14] push 2 lea edx, [ebp+var_2] push edx push [ebp+var_8] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F82CB32 push 2 lea eax, [ebp+var_10] push eax lea ecx, [ebp+var_2] mov eax, [ebp+var_C] add eax, 2 push eax push ecx push [ebp+var_8] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F82CB32 mov eax, [edi+2] lea ecx, [ebp+var_2] push [ebp+var_10] add eax, 2 push eax mov eax, [ebp+var_C] add eax, 4 push eax push ecx push [ebp+var_8] call sub_7F818DC7 mov ebx, eax test ebx, ebx jnz short loc_7F82CB32 inc si add edi, 6 cmp word ptr [edi], 0 jnz loc_7F82CA61 loc_7F82CB32: ; CODE XREF: sub_7F82C9EF+2Dj ; sub_7F82C9EF+55j ... cmp [ebp+var_8], 0 jz short loc_7F82CB5C lea ecx, [ebp+var_8] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C mov esi, eax test esi, esi jz short loc_7F82CB5C push 0 lea eax, [ebp+var_8] push eax mov ebx, esi call sub_7F81813C loc_7F82CB5C: ; CODE XREF: sub_7F82C9EF+147j ; sub_7F82C9EF+15Ej mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82C9EF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82CB67 proc near ; CODE XREF: sub_7F80E2BF+6Fp var_10 = byte ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp xor eax, eax mov ebp, esp sub esp, 10h push ebx mov [ebp+var_4], eax push esi mov [ebp+var_8], eax push edi mov esi, [ebp+arg_10] mov [ebp+var_C], 73434D80h cmp esi, eax jz short loc_7F82CB88 mov [esi], eax loc_7F82CB88: ; CODE XREF: sub_7F82CB67+1Dj lea eax, [ebp+var_8] lea ecx, [ebp+var_C] push eax push 0 push ecx push [ebp+arg_0] call sub_7F817E9D mov edi, eax test edi, edi jnz loc_7F82CC24 movzx eax, [ebp+arg_4] push 0 push eax push [ebp+var_8] call sub_7F8194ED test ax, ax jge short loc_7F82CBBF mov edi, 1004h jmp short loc_7F82CC24 ; --------------------------------------------------------------------------- loc_7F82CBBF: ; CODE XREF: sub_7F82CB67+4Fj lea ecx, [ebp+var_10] lea edx, [ebp+var_4] push ecx push edx push eax push [ebp+var_8] call sub_7F82C984 mov edi, eax test edi, edi jnz short loc_7F82CC24 cmp [ebp+arg_8], 0 jz short loc_7F82CC15 mov ebx, [ebp+arg_C] test ebx, ebx jz short loc_7F82CC15 mov ecx, [ebx] test ecx, ecx jz short loc_7F82CC15 mov eax, [ebp+var_4] movzx eax, word ptr [eax] cmp eax, ecx jb short loc_7F82CBF5 mov eax, ecx loc_7F82CBF5: ; CODE XREF: sub_7F82CB67+8Aj mov [ebx], eax dec eax push eax mov eax, [ebp+var_4] add eax, 2 push eax push [ebp+arg_8] call sub_7F82FCE0 mov edx, [ebp+arg_8] add esp, 0Ch mov ecx, [ebx] mov byte ptr [ecx+edx-1], 0 loc_7F82CC15: ; CODE XREF: sub_7F82CB67+73j ; sub_7F82CB67+7Aj ... test esi, esi jz short loc_7F82CC24 push esi push [ebp+var_4] call sub_7F82CC4E mov edi, eax loc_7F82CC24: ; CODE XREF: sub_7F82CB67+37j ; sub_7F82CB67+56j ... cmp [ebp+var_4], 0 jz short loc_7F82CC32 push [ebp+var_4] call sub_7F82F149 loc_7F82CC32: ; CODE XREF: sub_7F82CB67+C1j cmp [ebp+var_8], 0 jz short loc_7F82CC43 push 0 lea eax, [ebp+var_8] push eax call sub_7F81813C loc_7F82CC43: ; CODE XREF: sub_7F82CB67+CFj mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F82CB67 endp ; =============== S U B R O U T I N E ======================================= sub_7F82CC4E proc near ; CODE XREF: sub_7F82CB67+B6p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi movzx eax, word ptr [esi] push ebp add eax, 2 add esi, eax xor eax, eax cmp [esi], ax jnz short loc_7F82CC6D mov edi, [esp+10h+arg_4] mov [edi], eax jmp short loc_7F82CCCA ; --------------------------------------------------------------------------- loc_7F82CC6D: ; CODE XREF: sub_7F82CC4E+15j push 0 push 6 call sub_7F82F18D mov edi, [esp+10h+arg_4] test eax, eax mov [edi], eax jnz short loc_7F82CC87 mov eax, 400h jmp short loc_7F82CCCA ; --------------------------------------------------------------------------- loc_7F82CC87: ; CODE XREF: sub_7F82CC4E+30j mov ebp, [eax] xor ebx, ebx mov ax, [esi] push ebx mov [ebp+0], ax add esi, 2 movzx eax, ax push eax call sub_7F82F18D mov ecx, eax mov [ebp+2], eax test ecx, ecx jnz short loc_7F82CCB8 push dword ptr [edi] call sub_7F82F1E1 mov eax, 400h mov [edi], ebx jmp short loc_7F82CCCA ; --------------------------------------------------------------------------- loc_7F82CCB8: ; CODE XREF: sub_7F82CC4E+58j movzx eax, word ptr [ebp+0] push eax push esi push dword ptr [ecx] call sub_7F82FCE0 add esp, 0Ch xor eax, eax loc_7F82CCCA: ; CODE XREF: sub_7F82CC4E+1Dj ; sub_7F82CC4E+37j ... pop ebp pop edi pop esi pop ebx retn 8 sub_7F82CC4E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82CCD1 proc near ; CODE XREF: sub_7F82110E+39p var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 18h mov [ebp+var_18], 20634D80h mov [ebp+var_14], 73434D80h push ebx lea eax, [ebp+var_10] push esi push edi xor esi, esi push eax push esi lea ecx, [ebp+var_18] push ecx mov [ebp+var_10], esi push [ebp+arg_0] mov [ebp+var_C], esi call sub_7F817E9D cmp eax, esi mov edi, eax jnz loc_7F82CDF5 lea eax, [ebp+var_C] lea ecx, [ebp+var_14] push eax push 2 push ecx push [ebp+arg_0] call sub_7F817E9D cmp eax, esi mov edi, eax jz short loc_7F82CD36 cmp edi, 100Ah jnz loc_7F82CDF5 xor edi, edi jmp loc_7F82CDF5 ; --------------------------------------------------------------------------- loc_7F82CD36: ; CODE XREF: sub_7F82CCD1+50j push [ebp+var_10] call sub_7F8198FC mov bx, ax xor si, si test bx, bx jle loc_7F82CDF5 loc_7F82CD4D: ; CODE XREF: sub_7F82CCD1+11Ej mov [ebp+var_8], 21Bh lea eax, [ebp+var_8] push eax push offset word_7F8367DA push 0 push esi push [ebp+var_10] call sub_7F818D47 mov edi, eax test edi, edi jz short loc_7F82CD7C cmp edi, 1014h jnz short loc_7F82CDF5 cmp [ebp+var_8], 0 jbe short loc_7F82CDF5 loc_7F82CD7C: ; CODE XREF: sub_7F82CCD1+9Bj mov eax, [ebp+var_8] push offset word_7F8367DA ; lpString mov byte ptr word_7F8367DA[eax], 0 call ds:lstrlenA inc eax push esi push [ebp+var_10] mov ReturnedString, ax mov [ebp+var_8], eax call sub_7F819508 mov ecx, [ebp+var_8] lea edx, [ebp+var_2] mov word_7F8367DA[ecx], 0 movzx eax, ax add ecx, 4 push ecx push eax push edx push [ebp+var_C] call sub_7F818B75 mov edi, eax test edi, edi jnz short loc_7F82CDF5 mov eax, [ebp+var_8] lea ecx, [ebp+var_2] add eax, 4 push eax push offset ReturnedString push 0 push ecx push [ebp+var_C] call sub_7F818DC7 mov edi, eax test edi, edi jnz short loc_7F82CDF5 inc si cmp bx, si jg loc_7F82CD4D loc_7F82CDF5: ; CODE XREF: sub_7F82CCD1+34j ; sub_7F82CCD1+58j ... cmp [ebp+var_10], 0 jz short loc_7F82CE06 push 0 lea eax, [ebp+var_10] push eax call sub_7F81813C loc_7F82CE06: ; CODE XREF: sub_7F82CCD1+128j cmp [ebp+var_C], 0 jz short loc_7F82CE30 lea ecx, [ebp+var_C] cmp edi, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C mov esi, eax test esi, esi jz short loc_7F82CE30 push 0 lea eax, [ebp+var_C] push eax mov edi, esi call sub_7F81813C loc_7F82CE30: ; CODE XREF: sub_7F82CCD1+139j ; sub_7F82CCD1+150j mov eax, edi pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82CCD1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82CE3B proc near ; CODE XREF: sub_7F82110E+2C9p var_1C = dword ptr -1Ch var_18 = word ptr -18h var_16 = dword ptr -16h var_12 = word ptr -12h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = byte ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch mov [ebp+var_1C], 0FF00008Ah push ebx lea eax, [ebp+var_8] push esi push edi xor esi, esi push eax push 2 lea ecx, [ebp+var_1C] push ecx mov [ebp+var_8], esi push [ebp+arg_0] mov [ebp+var_C], esi call sub_7F817E9D cmp eax, esi mov ebx, eax jnz short loc_7F82CEE9 mov [ebp+var_12], si lea eax, [ebp+var_18] push eax mov [ebp+var_16], esi push [ebp+var_8] and [ebp+var_18], 0FFFBh or byte ptr [ebp+var_18], 3 call sub_7F8199E0 cmp eax, esi mov ebx, eax jnz short loc_7F82CEE9 mov edi, offset dword_7F835950 cmp dword_7F835950, esi jz short loc_7F82CEE9 loc_7F82CE9B: ; CODE XREF: sub_7F82CE3B+ACj push dword ptr [edi+4] ; lpString call ds:lstrlenA lea esi, [eax+1] lea eax, [ebp+var_C] push eax push esi push dword ptr [edi] push [ebp+var_8] call sub_7F819BC5 mov ebx, eax test ebx, ebx jnz short loc_7F82CEE9 push esi push dword ptr [edi+4] push [ebp+var_C] call sub_7F81A03B mov ebx, eax test ebx, ebx jnz short loc_7F82CEE9 lea eax, [ebp+var_2] lea ecx, [ebp+var_C] push eax push ecx call sub_7F81A0C1 mov ebx, eax test ebx, ebx jnz short loc_7F82CEE9 add edi, 8 cmp dword ptr [edi], 0 jnz short loc_7F82CE9B loc_7F82CEE9: ; CODE XREF: sub_7F82CE3B+2Ej ; sub_7F82CE3B+51j ... cmp [ebp+var_C], 0 jz short loc_7F82CEFC lea eax, [ebp+var_2] lea ecx, [ebp+var_C] push eax push ecx call sub_7F81A0C1 loc_7F82CEFC: ; CODE XREF: sub_7F82CE3B+B2j cmp [ebp+var_8], 0 jz short loc_7F82CF19 lea ecx, [ebp+var_8] cmp ebx, 1 sbb eax, eax neg eax push eax push ecx call sub_7F81813C test ebx, ebx jnz short loc_7F82CF19 mov ebx, eax loc_7F82CF19: ; CODE XREF: sub_7F82CE3B+C5j ; sub_7F82CE3B+DAj mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82CE3B endp ; =============== S U B R O U T I N E ======================================= sub_7F82CF24 proc near ; CODE XREF: sub_7F81039F+40p ; sub_7F810567+80p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = word ptr 0Ch cmp dword_7F838078, 0 push esi jz short loc_7F82CF35 mov esi, 253h jmp short loc_7F82CF68 ; --------------------------------------------------------------------------- loc_7F82CF35: ; CODE XREF: sub_7F82CF24+8j mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82CF68: ; CODE XREF: sub_7F82CF24+Fj test esi, esi jnz short loc_7F82CFBF push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F82CF82 mov esi, 1001h jmp short loc_7F82CF91 ; --------------------------------------------------------------------------- loc_7F82CF82: ; CODE XREF: sub_7F82CF24+55j mov cx, [esp+4+arg_8] push eax mov [eax+12h], cx call sub_7F8148F7 loc_7F82CF91: ; CODE XREF: sub_7F82CF24+5Cj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82CFA7 call sub_7F82A34F jmp short loc_7F82CFB5 ; --------------------------------------------------------------------------- loc_7F82CFA7: ; CODE XREF: sub_7F82CF24+7Aj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82CFB5: ; CODE XREF: sub_7F82CF24+81j mov dword_7F838078, 0 loc_7F82CFBF: ; CODE XREF: sub_7F82CF24+46j mov eax, esi pop esi retn 0Ch sub_7F82CF24 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82CFC5 proc near ; CODE XREF: sub_7F81028C+88p ; sub_7F81028C+C0p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h cmp dword_7F838078, 0 push ebp mov ebp, esp push esi jz short loc_7F82CFD9 mov esi, 253h jmp short loc_7F82D00B ; --------------------------------------------------------------------------- loc_7F82CFD9: ; CODE XREF: sub_7F82CFC5+Bj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D00B: ; CODE XREF: sub_7F82CFC5+12j test esi, esi jnz short loc_7F82D06C push 0 push [ebp+arg_4] call sub_7F8144A4 test eax, eax jnz short loc_7F82D024 mov esi, 1001h jmp short loc_7F82D03E ; --------------------------------------------------------------------------- loc_7F82D024: ; CODE XREF: sub_7F82CFC5+56j mov ax, [eax+12h] mov cx, [ebp+arg_C] and ax, [ebp+arg_C] and cx, [ebp+arg_8] cmp ax, cx jz short loc_7F82D03E mov esi, 1015h loc_7F82D03E: ; CODE XREF: sub_7F82CFC5+5Dj ; sub_7F82CFC5+72j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D054 call sub_7F82A34F jmp short loc_7F82D062 ; --------------------------------------------------------------------------- loc_7F82D054: ; CODE XREF: sub_7F82CFC5+86j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D062: ; CODE XREF: sub_7F82CFC5+8Dj mov dword_7F838078, 0 loc_7F82D06C: ; CODE XREF: sub_7F82CFC5+48j mov eax, esi pop esi pop ebp retn 10h sub_7F82CFC5 endp ; =============== S U B R O U T I N E ======================================= sub_7F82D073 proc near ; CODE XREF: sub_7F80D08D+23p ; sub_7F80D1F3+151p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch cmp dword_7F838078, 0 push esi jz short loc_7F82D084 mov esi, 253h jmp short loc_7F82D0B7 ; --------------------------------------------------------------------------- loc_7F82D084: ; CODE XREF: sub_7F82D073+8j mov ecx, [esp+4+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D0B7: ; CODE XREF: sub_7F82D073+Fj test esi, esi jnz short loc_7F82D10E push 0 push [esp+8+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82D0DB test byte ptr [eax+13h], 80h jz short loc_7F82D0DB mov ecx, [eax+8] mov eax, [esp+4+arg_8] mov [eax], ecx jmp short loc_7F82D0E0 ; --------------------------------------------------------------------------- loc_7F82D0DB: ; CODE XREF: sub_7F82D073+55j ; sub_7F82D073+5Bj mov esi, 1001h loc_7F82D0E0: ; CODE XREF: sub_7F82D073+66j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D0F6 call sub_7F82A34F jmp short loc_7F82D104 ; --------------------------------------------------------------------------- loc_7F82D0F6: ; CODE XREF: sub_7F82D073+7Aj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D104: ; CODE XREF: sub_7F82D073+81j mov dword_7F838078, 0 loc_7F82D10E: ; CODE XREF: sub_7F82D073+46j mov eax, esi pop esi retn 0Ch sub_7F82D073 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82D114 proc near ; CODE XREF: sub_7F81028C+4Dp ; sub_7F81039F+F6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch cmp dword_7F838078, 0 push ebp mov ebp, esp push esi jz short loc_7F82D128 mov esi, 253h jmp short loc_7F82D15A ; --------------------------------------------------------------------------- loc_7F82D128: ; CODE XREF: sub_7F82D114+Bj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov esi, [edx] mov dword_7F838078, esi xor esi, esi mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D15A: ; CODE XREF: sub_7F82D114+12j test esi, esi jnz short loc_7F82D1D8 push 0 push [ebp+arg_4] call sub_7F8144A4 test eax, eax jz short loc_7F82D1A5 mov ecx, [ebp+arg_8] test ecx, ecx jz short loc_7F82D178 mov edx, [eax+8] mov [ecx], edx loc_7F82D178: ; CODE XREF: sub_7F82D114+5Dj mov ecx, [ebp+arg_C] test ecx, ecx jz short loc_7F82D184 mov edx, [eax+0Ch] mov [ecx], edx loc_7F82D184: ; CODE XREF: sub_7F82D114+69j mov ecx, [ebp+arg_10] test ecx, ecx jz short loc_7F82D192 mov dx, [eax+12h] mov [ecx], dx loc_7F82D192: ; CODE XREF: sub_7F82D114+75j mov ecx, [ebp+arg_14] test ecx, ecx jz short loc_7F82D1AA mov eax, [eax+14h] and eax, 7FFFFFFFh mov [ecx], eax jmp short loc_7F82D1AA ; --------------------------------------------------------------------------- loc_7F82D1A5: ; CODE XREF: sub_7F82D114+56j mov esi, 1001h loc_7F82D1AA: ; CODE XREF: sub_7F82D114+83j ; sub_7F82D114+8Fj mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D1C0 call sub_7F82A34F jmp short loc_7F82D1CE ; --------------------------------------------------------------------------- loc_7F82D1C0: ; CODE XREF: sub_7F82D114+A3j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D1CE: ; CODE XREF: sub_7F82D114+AAj mov dword_7F838078, 0 loc_7F82D1D8: ; CODE XREF: sub_7F82D114+48j mov eax, esi pop esi pop ebp retn 18h sub_7F82D114 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82D1DF proc near ; CODE XREF: sub_7F81B21F+F6p ; sub_7F81B8F0+F5p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ebx push esi push edi mov si, [ebp+arg_8] test si, si jg short loc_7F82D1F5 xor eax, eax jmp loc_7F82D2B7 ; --------------------------------------------------------------------------- loc_7F82D1F5: ; CODE XREF: sub_7F82D1DF+Dj cmp dword_7F838078, 0 jz short loc_7F82D205 mov edi, 253h jmp short loc_7F82D237 ; --------------------------------------------------------------------------- loc_7F82D205: ; CODE XREF: sub_7F82D1DF+1Dj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D237: ; CODE XREF: sub_7F82D1DF+24j test edi, edi jnz short loc_7F82D2B5 mov ax, si dec si test ax, ax jle short loc_7F82D287 loc_7F82D245: ; CODE XREF: sub_7F82D1DF+A6j mov eax, [ebp+arg_4] push 0 add [ebp+arg_4], 4 push dword ptr [eax] call sub_7F8144A4 mov ebx, eax test ebx, ebx jz short loc_7F82D27D cmp [ebp+arg_10], 0 mov eax, [ebp+arg_C] mov [ebx+8], eax jz short loc_7F82D277 cmp dword ptr [ebx+14h], 0 jge short loc_7F82D273 push ebx call sub_7F814971 loc_7F82D273: ; CODE XREF: sub_7F82D1DF+8Cj inc word ptr [ebx+1Eh] loc_7F82D277: ; CODE XREF: sub_7F82D1DF+86j push ebx call sub_7F8148F7 loc_7F82D27D: ; CODE XREF: sub_7F82D1DF+7Aj mov ax, si dec si test ax, ax jg short loc_7F82D245 loc_7F82D287: ; CODE XREF: sub_7F82D1DF+64j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D29D call sub_7F82A34F jmp short loc_7F82D2AB ; --------------------------------------------------------------------------- loc_7F82D29D: ; CODE XREF: sub_7F82D1DF+B5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D2AB: ; CODE XREF: sub_7F82D1DF+BCj mov dword_7F838078, 0 loc_7F82D2B5: ; CODE XREF: sub_7F82D1DF+5Aj mov eax, edi loc_7F82D2B7: ; CODE XREF: sub_7F82D1DF+11j pop edi pop esi pop ebx pop ebp retn 14h sub_7F82D1DF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82D2BE proc near ; CODE XREF: sub_7F810955+1BDp ; sub_7F811467+78p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = word ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ebx push esi push edi mov si, [ebp+arg_C] test si, si jg short loc_7F82D2D4 xor eax, eax jmp loc_7F82D398 ; --------------------------------------------------------------------------- loc_7F82D2D4: ; CODE XREF: sub_7F82D2BE+Dj cmp dword_7F838078, 0 jz short loc_7F82D2E4 mov edi, 253h jmp short loc_7F82D316 ; --------------------------------------------------------------------------- loc_7F82D2E4: ; CODE XREF: sub_7F82D2BE+1Dj mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax xor edi, edi mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D316: ; CODE XREF: sub_7F82D2BE+24j test edi, edi jnz short loc_7F82D396 mov ax, si dec si test ax, ax jle short loc_7F82D368 loc_7F82D324: ; CODE XREF: sub_7F82D2BE+A8j mov eax, [ebp+arg_4] push 0 add [ebp+arg_4], 4 push dword ptr [eax] call sub_7F8144A4 mov ebx, eax mov ecx, [ebp+arg_8] add [ebp+arg_8], 4 cmp [ebp+arg_10], 0 mov eax, [ecx] mov [ebx+0Ch], eax jz short loc_7F82D358 cmp dword ptr [ebx+14h], 0 jge short loc_7F82D354 push ebx call sub_7F814971 loc_7F82D354: ; CODE XREF: sub_7F82D2BE+8Ej inc word ptr [ebx+1Eh] loc_7F82D358: ; CODE XREF: sub_7F82D2BE+88j push ebx call sub_7F8148F7 mov ax, si dec si test ax, ax jg short loc_7F82D324 loc_7F82D368: ; CODE XREF: sub_7F82D2BE+64j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D37E call sub_7F82A34F jmp short loc_7F82D38C ; --------------------------------------------------------------------------- loc_7F82D37E: ; CODE XREF: sub_7F82D2BE+B7j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D38C: ; CODE XREF: sub_7F82D2BE+BEj mov dword_7F838078, 0 loc_7F82D396: ; CODE XREF: sub_7F82D2BE+5Aj mov eax, edi loc_7F82D398: ; CODE XREF: sub_7F82D2BE+11j pop edi pop esi pop ebx pop ebp retn 14h sub_7F82D2BE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82D39F(int, int, int, DWORD nNumberOfBytesToRead, int) sub_7F82D39F proc near ; CODE XREF: sub_7F823594+156p ; sub_7F823594+21Ep ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h nNumberOfBytesToRead= dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi xor esi, esi mov [ebp+var_4], esi cmp dword_7F838078, esi jz short loc_7F82D3BC mov ebx, 253h jmp short loc_7F82D3EE ; --------------------------------------------------------------------------- loc_7F82D3BC: ; CODE XREF: sub_7F82D39F+14j mov ecx, [ebp+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx xor ebx, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx loc_7F82D3EE: ; CODE XREF: sub_7F82D39F+1Bj test ebx, ebx jnz loc_7F82D4EE xor edi, edi push edi push [ebp+arg_4] call sub_7F8144A4 mov [ebp+var_4], eax cmp [ebp+arg_10], edi jnz short loc_7F82D426 cmp [ebp+nNumberOfBytesToRead], edi jnz short loc_7F82D426 cmp [ebp+arg_8], edi jnz short loc_7F82D426 cmp eax, edi jz loc_7F82D4AA push eax call sub_7F8147DD jmp loc_7F82D4AA ; --------------------------------------------------------------------------- loc_7F82D426: ; CODE XREF: sub_7F82D39F+68j ; sub_7F82D39F+6Dj ... xor edi, edi cmp [ebp+var_4], edi jnz short loc_7F82D491 lea eax, [ebp+var_4] lea edx, [ebp+arg_4] push eax push [ebp+nNumberOfBytesToRead] push edx call sub_7F812FC1 cmp eax, edi mov ebx, eax jnz short loc_7F82D4AA push [ebp+arg_4] call sub_7F82DB71 mov ecx, [ebp+var_4] mov [ecx+12h], ax mov eax, [ebp+var_4] add eax, 12h cmp word ptr [eax], 0FFFFh jnz short loc_7F82D462 mov [eax], di loc_7F82D462: ; CODE XREF: sub_7F82D39F+BEj mov esi, 1 mov eax, [ebp+arg_4] mov ecx, [ebp+nNumberOfBytesToRead] push 8 ; nNumberOfBytesToRead mov [ebp+var_C], eax mov [ebp+var_8], ecx lea eax, [ebp+var_C] push eax ; int push 0FFFFFFF8h ; int push [ebp+var_4] ; int call sub_7F814D6E mov ebx, eax test ebx, ebx jnz short loc_7F82D4AE push [ebp+var_4] call sub_7F814971 loc_7F82D491: ; CODE XREF: sub_7F82D39F+8Cj cmp [ebp+arg_10], 0 jz short loc_7F82D4AA push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+arg_10] ; int push [ebp+arg_8] ; int push [ebp+var_4] ; int call sub_7F814D6E mov ebx, eax loc_7F82D4AA: ; CODE XREF: sub_7F82D39F+76j ; sub_7F82D39F+82j ... test ebx, ebx jz short loc_7F82D4C0 loc_7F82D4AE: ; CODE XREF: sub_7F82D39F+E8j test esi, esi jz short loc_7F82D4C0 cmp [ebp+var_4], 0 jz short loc_7F82D4C0 push [ebp+var_4] call sub_7F8147DD loc_7F82D4C0: ; CODE XREF: sub_7F82D39F+10Dj ; sub_7F82D39F+111j ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D4D6 call sub_7F82A34F jmp short loc_7F82D4E4 ; --------------------------------------------------------------------------- loc_7F82D4D6: ; CODE XREF: sub_7F82D39F+12Ej mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D4E4: ; CODE XREF: sub_7F82D39F+135j mov dword_7F838078, 0 loc_7F82D4EE: ; CODE XREF: sub_7F82D39F+51j mov eax, ebx pop edi pop esi pop ebx mov esp, ebp pop ebp retn 14h sub_7F82D39F endp ; =============== S U B R O U T I N E ======================================= sub_7F82D4F9 proc near ; CODE XREF: sub_7F81D910+25p ; sub_7F81D910+31p arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = word ptr 0Ch mov eax, [esp+arg_0] push esi push edi mov ecx, [eax] mov edx, [ecx] mov eax, [edx+20Ch] mov ecx, [eax] mov edx, [ecx] add ecx, 4 test edx, edx jz short loc_7F82D540 loc_7F82D514: ; CODE XREF: sub_7F82D4F9+45j mov ax, 100h xor esi, esi loc_7F82D51A: ; CODE XREF: sub_7F82D4F9+3Cj mov di, [edx+12h] and di, [esp+8+arg_8] cmp di, [esp+8+arg_4] jnz short loc_7F82D52D mov [edx+8], esi loc_7F82D52D: ; CODE XREF: sub_7F82D4F9+2Fj dec ax add edx, 20h test ax, ax jnz short loc_7F82D51A mov edx, [ecx] add ecx, 4 test edx, edx jnz short loc_7F82D514 loc_7F82D540: ; CODE XREF: sub_7F82D4F9+19j pop edi pop esi retn 0Ch sub_7F82D4F9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82D545 proc near ; CODE XREF: sub_7F81D910+4Fp ; sub_7F81D910+5Fp ... arg_0 = dword ptr 8 arg_4 = word ptr 0Ch arg_8 = word ptr 10h arg_C = word ptr 14h arg_10 = word ptr 18h push ebp mov eax, [esp+arg_0] mov ebp, esp push esi mov ecx, [eax] mov edx, [ecx] mov eax, [edx+20Ch] mov edx, [eax] mov esi, [edx] add edx, 4 test esi, esi jz short loc_7F82D597 loc_7F82D562: ; CODE XREF: sub_7F82D545+50j mov cx, 100h loc_7F82D566: ; CODE XREF: sub_7F82D545+47j mov ax, [esi+12h] and ax, [ebp+arg_8] cmp ax, [ebp+arg_4] jnz short loc_7F82D584 mov ax, [esi+10h] and ax, [ebp+arg_C] or ax, [ebp+arg_10] mov [esi+10h], ax loc_7F82D584: ; CODE XREF: sub_7F82D545+2Dj dec cx add esi, 20h test cx, cx jnz short loc_7F82D566 mov esi, [edx] add edx, 4 test esi, esi jnz short loc_7F82D562 loc_7F82D597: ; CODE XREF: sub_7F82D545+1Bj pop esi pop ebp retn 14h sub_7F82D545 endp ; =============== S U B R O U T I N E ======================================= sub_7F82D59C proc near ; CODE XREF: sub_7F81D910+6Dp ; sub_7F81D910+80p ... arg_0 = dword ptr 4 arg_4 = byte ptr 8 arg_8 = word ptr 0Ch arg_C = word ptr 10h mov eax, [esp+arg_0] push ebx push esi mov ecx, [eax] mov edx, [ecx] mov eax, [edx+20Ch] mov ecx, [eax] mov edx, [ecx] add ecx, 4 test edx, edx jz short loc_7F82D5E9 mov bl, [esp+8+arg_4] loc_7F82D5BB: ; CODE XREF: sub_7F82D59C+4Bj mov ax, 100h loc_7F82D5BF: ; CODE XREF: sub_7F82D59C+42j cmp [edx+4], bl jnz short loc_7F82D5D6 mov si, [edx+10h] and si, [esp+8+arg_8] or si, [esp+8+arg_C] mov [edx+10h], si loc_7F82D5D6: ; CODE XREF: sub_7F82D59C+26j dec ax add edx, 20h test ax, ax jnz short loc_7F82D5BF mov edx, [ecx] add ecx, 4 test edx, edx jnz short loc_7F82D5BB loc_7F82D5E9: ; CODE XREF: sub_7F82D59C+19j pop esi pop ebx retn 10h sub_7F82D59C endp ; =============== S U B R O U T I N E ======================================= sub_7F82D5EE proc near ; CODE XREF: sub_7F81DCCA+29p ; sub_7F81E844+2Fp arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = word ptr 0Ch arg_C = word ptr 10h push ebx mov ecx, 1 push esi cmp dword_7F838078, ecx push edi push ebp sbb edi, edi xor esi, esi neg edi test edi, edi jz short loc_7F82D652 mov eax, 253h cmp dword_7F838078, esi jnz short loc_7F82D647 mov edx, [esp+10h+arg_0] mov eax, [edx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ebx, dword_7F83807C mov word_7F838084, ax mov ebp, [ebx] mov dword_7F838078, ebp mov eax, [ebx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F82D647: ; CODE XREF: sub_7F82D5EE+24j test eax, eax jz short loc_7F82D652 xor eax, eax jmp loc_7F82D735 ; --------------------------------------------------------------------------- loc_7F82D652: ; CODE XREF: sub_7F82D5EE+17j ; sub_7F82D5EE+5Bj mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov edx, [ebx] mov ebx, [edx] add edx, 4 test ebx, ebx jz loc_7F82D701 loc_7F82D66C: ; CODE XREF: sub_7F82D5EE+EFj test ecx, ecx mov cx, 0 jz short loc_7F82D67B mov cx, 1 add ebx, 20h loc_7F82D67B: ; CODE XREF: sub_7F82D5EE+84j movsx eax, cx cmp eax, 100h jnb short loc_7F82D6D4 mov ebp, 100h loc_7F82D68A: ; CODE XREF: sub_7F82D5EE+E4j movzx eax, byte ptr [ebx+4] cmp eax, 8Ch jl short loc_7F82D69C cmp eax, 8Fh jle short loc_7F82D6C8 loc_7F82D69C: ; CODE XREF: sub_7F82D5EE+A5j mov ax, [ebx+12h] and ax, [esp+10h+arg_C] cmp ax, [esp+10h+arg_8] jnz short loc_7F82D6C8 mov ax, [ebx+10h] test bp, ax jnz short loc_7F82D6C8 test al, 20h jnz short loc_7F82D6C8 mov ax, [esp+10h+arg_4] dec [esp+10h+arg_4] test ax, ax jle short loc_7F82D6E1 loc_7F82D6C8: ; CODE XREF: sub_7F82D5EE+ACj ; sub_7F82D5EE+BCj ... inc cx add ebx, 20h movsx eax, cx cmp eax, ebp jb short loc_7F82D68A loc_7F82D6D4: ; CODE XREF: sub_7F82D5EE+95j xor ecx, ecx mov ebx, [edx] add edx, 4 test ebx, ebx jnz short loc_7F82D66C jmp short loc_7F82D701 ; --------------------------------------------------------------------------- loc_7F82D6E1: ; CODE XREF: sub_7F82D5EE+D8j push ebx mov esi, 0 call sub_7F812F73 mov ecx, dword_7F838078 mov edx, [ecx+200h] cmp ax, [edx+8] jnb short loc_7F82D701 mov esi, [ebx+4] loc_7F82D701: ; CODE XREF: sub_7F82D5EE+78j ; sub_7F82D5EE+F1j ... test edi, edi jz short loc_7F82D733 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D71B call sub_7F82A34F jmp short loc_7F82D729 ; --------------------------------------------------------------------------- loc_7F82D71B: ; CODE XREF: sub_7F82D5EE+124j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D729: ; CODE XREF: sub_7F82D5EE+12Bj mov dword_7F838078, 0 loc_7F82D733: ; CODE XREF: sub_7F82D5EE+115j mov eax, esi loc_7F82D735: ; CODE XREF: sub_7F82D5EE+5Fj pop ebp pop edi pop esi pop ebx retn 10h sub_7F82D5EE endp ; =============== S U B R O U T I N E ======================================= sub_7F82D73C proc near ; CODE XREF: sub_7F81E9D4+24p ; sub_7F81EA21+25p ... arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = byte ptr 0Ch push ebx mov ecx, 1 push esi cmp dword_7F838078, ecx push edi push ebp sbb edi, edi xor esi, esi neg edi test edi, edi jz short loc_7F82D7A0 mov eax, 253h cmp dword_7F838078, esi jnz short loc_7F82D795 mov edx, [esp+10h+arg_0] mov eax, [edx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ebx, dword_7F83807C mov word_7F838084, ax mov ebp, [ebx] mov dword_7F838078, ebp mov eax, [ebx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F82D795: ; CODE XREF: sub_7F82D73C+24j test eax, eax jz short loc_7F82D7A0 xor eax, eax jmp loc_7F82D878 ; --------------------------------------------------------------------------- loc_7F82D7A0: ; CODE XREF: sub_7F82D73C+17j ; sub_7F82D73C+5Bj mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov edx, [ebx] mov ebx, [edx] add edx, 4 test ebx, ebx jz loc_7F82D844 loc_7F82D7BA: ; CODE XREF: sub_7F82D73C+E4j test ecx, ecx mov cx, 0 jz short loc_7F82D7C9 mov cx, 1 add ebx, 20h loc_7F82D7C9: ; CODE XREF: sub_7F82D73C+84j movsx eax, cx cmp eax, 100h jnb short loc_7F82D817 loc_7F82D7D3: ; CODE XREF: sub_7F82D73C+D9j mov al, [ebx+4] movzx ebp, al cmp ebp, 8Ch jl short loc_7F82D7E9 cmp ebp, 8Fh jle short loc_7F82D808 loc_7F82D7E9: ; CODE XREF: sub_7F82D73C+A3j cmp [esp+10h+arg_8], al jnz short loc_7F82D808 mov ax, [ebx+10h] test ax, 120h jnz short loc_7F82D808 mov ax, [esp+10h+arg_4] dec [esp+10h+arg_4] test ax, ax jle short loc_7F82D824 loc_7F82D808: ; CODE XREF: sub_7F82D73C+ABj ; sub_7F82D73C+B1j ... inc cx add ebx, 20h movsx eax, cx cmp eax, 100h jb short loc_7F82D7D3 loc_7F82D817: ; CODE XREF: sub_7F82D73C+95j xor ecx, ecx mov ebx, [edx] add edx, 4 test ebx, ebx jnz short loc_7F82D7BA jmp short loc_7F82D844 ; --------------------------------------------------------------------------- loc_7F82D824: ; CODE XREF: sub_7F82D73C+CAj push ebx mov esi, 0 call sub_7F812F73 mov ecx, dword_7F838078 mov edx, [ecx+200h] cmp ax, [edx+8] jnb short loc_7F82D844 mov esi, [ebx+4] loc_7F82D844: ; CODE XREF: sub_7F82D73C+78j ; sub_7F82D73C+E6j ... test edi, edi jz short loc_7F82D876 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D85E call sub_7F82A34F jmp short loc_7F82D86C ; --------------------------------------------------------------------------- loc_7F82D85E: ; CODE XREF: sub_7F82D73C+119j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D86C: ; CODE XREF: sub_7F82D73C+120j mov dword_7F838078, 0 loc_7F82D876: ; CODE XREF: sub_7F82D73C+10Aj mov eax, esi loc_7F82D878: ; CODE XREF: sub_7F82D73C+5Fj pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82D73C endp ; =============== S U B R O U T I N E ======================================= sub_7F82D87F proc near ; CODE XREF: sub_7F81EABA+60p arg_0 = dword ptr 4 arg_4 = word ptr 8 arg_8 = byte ptr 0Ch push ebx mov ecx, 1 push esi cmp dword_7F838078, ecx push edi push ebp sbb edi, edi xor esi, esi neg edi test edi, edi jz short loc_7F82D8E3 mov eax, 253h cmp dword_7F838078, esi jnz short loc_7F82D8D8 mov edx, [esp+10h+arg_0] mov eax, [edx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ebx, dword_7F83807C mov word_7F838084, ax mov ebp, [ebx] mov dword_7F838078, ebp mov eax, [ebx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F82D8D8: ; CODE XREF: sub_7F82D87F+24j test eax, eax jz short loc_7F82D8E3 xor eax, eax jmp loc_7F82D9B7 ; --------------------------------------------------------------------------- loc_7F82D8E3: ; CODE XREF: sub_7F82D87F+17j ; sub_7F82D87F+5Bj mov eax, dword_7F838078 mov ebx, [eax+20Ch] mov edx, [ebx] mov ebx, [edx] add edx, 4 test ebx, ebx jz loc_7F82D983 loc_7F82D8FD: ; CODE XREF: sub_7F82D87F+E0j test ecx, ecx mov cx, 0 jz short loc_7F82D90C mov cx, 1 add ebx, 20h loc_7F82D90C: ; CODE XREF: sub_7F82D87F+84j movsx eax, cx cmp eax, 100h jnb short loc_7F82D956 loc_7F82D916: ; CODE XREF: sub_7F82D87F+D5j mov al, [ebx+4] movzx ebp, al cmp ebp, 8Ch jl short loc_7F82D92C cmp ebp, 8Fh jle short loc_7F82D947 loc_7F82D92C: ; CODE XREF: sub_7F82D87F+A3j cmp al, [esp+10h+arg_8] jnz short loc_7F82D947 test byte ptr [ebx+10h], 20h jnz short loc_7F82D947 mov ax, [esp+10h+arg_4] dec [esp+10h+arg_4] test ax, ax jle short loc_7F82D963 loc_7F82D947: ; CODE XREF: sub_7F82D87F+ABj ; sub_7F82D87F+B1j ... inc cx add ebx, 20h movsx eax, cx cmp eax, 100h jb short loc_7F82D916 loc_7F82D956: ; CODE XREF: sub_7F82D87F+95j xor ecx, ecx mov ebx, [edx] add edx, 4 test ebx, ebx jnz short loc_7F82D8FD jmp short loc_7F82D983 ; --------------------------------------------------------------------------- loc_7F82D963: ; CODE XREF: sub_7F82D87F+C6j push ebx mov esi, 0 call sub_7F812F73 mov ecx, dword_7F838078 mov edx, [ecx+200h] cmp ax, [edx+8] jnb short loc_7F82D983 mov esi, [ebx+4] loc_7F82D983: ; CODE XREF: sub_7F82D87F+78j ; sub_7F82D87F+E2j ... test edi, edi jz short loc_7F82D9B5 mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82D99D call sub_7F82A34F jmp short loc_7F82D9AB ; --------------------------------------------------------------------------- loc_7F82D99D: ; CODE XREF: sub_7F82D87F+115j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82D9AB: ; CODE XREF: sub_7F82D87F+11Cj mov dword_7F838078, 0 loc_7F82D9B5: ; CODE XREF: sub_7F82D87F+106j mov eax, esi loc_7F82D9B7: ; CODE XREF: sub_7F82D87F+5Fj pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82D87F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82D9BE proc near ; CODE XREF: sub_7F8223B3+129p ; sub_7F822552+4Bp var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch mov dword_7F836C60, 1 push ebx lea eax, [ebp+var_4] mov [ebp+var_8], 64765356h push esi push edi xor edi, edi push eax lea ecx, [ebp+var_8] mov [ebp+var_4], edi cmp [ebp+arg_4], 1 sbb eax, eax inc eax push eax push ecx push [ebp+arg_0] call sub_7F817E9D mov esi, eax test esi, esi jz short loc_7F82D9FF xor esi, esi jmp short loc_7F82DA64 ; --------------------------------------------------------------------------- loc_7F82D9FF: ; CODE XREF: sub_7F82D9BE+3Bj push [ebp+var_4] call sub_7F8198FC mov di, ax xor ebx, ebx loc_7F82DA0C: ; CODE XREF: sub_7F82D9BE+8Bj ; sub_7F82D9BE+95j ... mov ax, di dec di test ax, ax jle short loc_7F82DA64 lea eax, [ebp+var_C] lea ecx, [ebp+var_8] mov [ebp+var_C], 4 push eax push ecx push 12h push edi push [ebp+var_4] call sub_7F818D47 mov esi, eax test esi, esi jnz short loc_7F82DA64 push ebx push ebx push ebx push ebx push [ebp+var_8] push [ebp+arg_0] call sub_7F82D114 mov esi, eax test esi, esi jz short loc_7F82DA0C mov esi, 1001h cmp [ebp+arg_4], ebx jz short loc_7F82DA0C push edi push [ebp+var_4] call sub_7F818AE7 mov esi, eax test esi, esi jz short loc_7F82DA0C loc_7F82DA64: ; CODE XREF: sub_7F82D9BE+3Fj ; sub_7F82D9BE+56j ... cmp [ebp+var_4], 0 jz short loc_7F82DA85 cmp [ebp+arg_4], 0 jz short loc_7F82DA79 mov eax, 1 test esi, esi jz short loc_7F82DA7B loc_7F82DA79: ; CODE XREF: sub_7F82D9BE+B0j xor eax, eax loc_7F82DA7B: ; CODE XREF: sub_7F82D9BE+B9j push eax lea ecx, [ebp+var_4] push ecx call sub_7F81813C loc_7F82DA85: ; CODE XREF: sub_7F82D9BE+AAj mov eax, esi pop edi pop esi pop ebx mov esp, ebp mov dword_7F836C60, 0 pop ebp retn 8 sub_7F82D9BE endp ; =============== S U B R O U T I N E ======================================= sub_7F82DA9A proc near ; CODE XREF: sub_7F823452+Ep arg_0 = dword ptr 4 push ebx mov eax, 253h mov dword_7F836C60, 1 cmp dword_7F838078, 0 push esi push edi jnz short loc_7F82DAE8 mov ecx, [esp+0Ch+arg_0] mov eax, [ecx] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov edx, dword_7F83807C mov word_7F838084, ax mov ebx, [edx] mov dword_7F838078, ebx mov eax, [edx+4] mov dword_7F838080, eax mov dword_7F83807C, ecx xor eax, eax loc_7F82DAE8: ; CODE XREF: sub_7F82DA9A+19j xor ecx, ecx test eax, eax jz short loc_7F82DAF6 mov dword_7F836C60, ecx jmp short loc_7F82DB6B ; --------------------------------------------------------------------------- loc_7F82DAF6: ; CODE XREF: sub_7F82DA9A+52j mov eax, dword_7F838078 mov ecx, [eax+20Ch] mov ebx, [ecx] mov edi, [ebx] add ebx, 4 test edi, edi jz short loc_7F82DB3B loc_7F82DB0C: ; CODE XREF: sub_7F82DA9A+9Fj mov si, 100h loc_7F82DB10: ; CODE XREF: sub_7F82DA9A+96j push dword ptr [edi+4] call sub_7F82DB71 cmp ax, 0FFFFh jz short loc_7F82DB22 mov [edi+12h], ax loc_7F82DB22: ; CODE XREF: sub_7F82DA9A+82j dec si push edi add edi, 20h call sub_7F8148F7 test si, si jnz short loc_7F82DB10 mov edi, [ebx] add ebx, 4 test edi, edi jnz short loc_7F82DB0C loc_7F82DB3B: ; CODE XREF: sub_7F82DA9A+70j mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82DB51 call sub_7F82A34F jmp short loc_7F82DB5F ; --------------------------------------------------------------------------- loc_7F82DB51: ; CODE XREF: sub_7F82DA9A+AEj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82DB5F: ; CODE XREF: sub_7F82DA9A+B5j xor eax, eax mov dword_7F838078, eax mov dword_7F836C60, eax loc_7F82DB6B: ; CODE XREF: sub_7F82DA9A+5Aj pop edi pop esi pop ebx retn 4 sub_7F82DA9A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82DB71 proc near ; CODE XREF: sub_7F81DE67+9Bp ; sub_7F81E22F+17p ... arg_0 = dword ptr 8 push ebp mov eax, offset aAsco ; "�SCO" cmp dword ptr aAsco, 0 ; "�SCO" mov ebp, esp jz short loc_7F82DB91 loc_7F82DB82: ; CODE XREF: sub_7F82DB71+1Ej mov ecx, [ebp+arg_0] cmp [eax], ecx jz short loc_7F82DBB6 add eax, 6 cmp dword ptr [eax], 0 jnz short loc_7F82DB82 loc_7F82DB91: ; CODE XREF: sub_7F82DB71+Fj cmp byte_7F835A78, 0 mov eax, offset byte_7F835A78 jz short loc_7F82DBAE mov cl, byte ptr [ebp+arg_0] loc_7F82DBA2: ; CODE XREF: sub_7F82DB71+3Bj cmp [eax], cl jz short loc_7F82DBBC add eax, 3 cmp byte ptr [eax], 0 jnz short loc_7F82DBA2 loc_7F82DBAE: ; CODE XREF: sub_7F82DB71+2Cj mov ax, 0FFFFh loc_7F82DBB2: ; CODE XREF: sub_7F82DB71+49j ; sub_7F82DB71+4Fj pop ebp retn 4 ; --------------------------------------------------------------------------- loc_7F82DBB6: ; CODE XREF: sub_7F82DB71+16j mov ax, [eax+4] jmp short loc_7F82DBB2 ; --------------------------------------------------------------------------- loc_7F82DBBC: ; CODE XREF: sub_7F82DB71+33j mov ax, [eax+1] jmp short loc_7F82DBB2 sub_7F82DB71 endp ; =============== S U B R O U T I N E ======================================= sub_7F82DBC2 proc near ; CODE XREF: sub_7F8223B3+109p ; sub_7F823484+C0p arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi push 38h push 0 mov eax, [esi] push esi mov edi, [eax] call sub_7F82A93C test eax, eax jnz short loc_7F82DBE5 mov eax, 101Eh jmp loc_7F82DD43 ; --------------------------------------------------------------------------- loc_7F82DBE5: ; CODE XREF: sub_7F82DBC2+17j mov dword_7F836C60, 1 cmp dword_7F838078, 0 mov eax, 253h jnz short loc_7F82DC2C mov eax, [esi] mov dword_7F83807C, eax mov ax, [eax+2Ch] mov ecx, dword_7F83807C mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, esi xor eax, eax loc_7F82DC2C: ; CODE XREF: sub_7F82DBC2+39j xor ecx, ecx test eax, eax jz short loc_7F82DC3D mov dword_7F836C60, ecx jmp loc_7F82DD43 ; --------------------------------------------------------------------------- loc_7F82DC3D: ; CODE XREF: sub_7F82DBC2+6Ej xor ebx, ebx push edi mov dword_7F83809C, 64h mov dword_7F838098, ebx call sub_7F82DD49 cmp eax, ebx mov esi, eax jz short loc_7F82DC66 mov [edi+20Ch], ebx jmp loc_7F82DD0A ; --------------------------------------------------------------------------- loc_7F82DC66: ; CODE XREF: sub_7F82DBC2+97j cmp dword_7F83809C, 0 jbe short loc_7F82DC8E push 64h sub edx, edx add dword_7F838098, 50h mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F82DC8E: ; CODE XREF: sub_7F82DBC2+ABj push edi call sub_7F82E169 mov esi, eax xor eax, eax test esi, esi jz short loc_7F82DCA4 mov [edi+20Ch], eax jmp short loc_7F82DD0A ; --------------------------------------------------------------------------- loc_7F82DCA4: ; CODE XREF: sub_7F82DBC2+D8j cmp dword_7F83809C, 0 jbe short loc_7F82DCCC push 64h sub edx, edx add dword_7F838098, 0Ah mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F82DCCC: ; CODE XREF: sub_7F82DBC2+E9j push edi call sub_7F82E283 mov esi, eax xor eax, eax test esi, esi jz short loc_7F82DCE2 mov [edi+20Ch], eax jmp short loc_7F82DD0A ; --------------------------------------------------------------------------- loc_7F82DCE2: ; CODE XREF: sub_7F82DBC2+116j cmp dword_7F83809C, 0 jbe short loc_7F82DD0A push 64h sub edx, edx add dword_7F838098, 0Ah mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F82DD0A: ; CODE XREF: sub_7F82DBC2+9Fj ; sub_7F82DBC2+E0j ... mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82DD20 call sub_7F82A34F jmp short loc_7F82DD2E ; --------------------------------------------------------------------------- loc_7F82DD20: ; CODE XREF: sub_7F82DBC2+155j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82DD2E: ; CODE XREF: sub_7F82DBC2+15Cj xor edi, edi mov dword_7F838078, edi call sub_7F82AB0B mov eax, esi mov dword_7F836C60, edi loc_7F82DD43: ; CODE XREF: sub_7F82DBC2+1Ej ; sub_7F82DBC2+76j pop edi pop esi pop ebx retn 4 sub_7F82DBC2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82DD49 proc near ; CODE XREF: sub_7F82DBC2+8Ep var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = word ptr -8 var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 24h push ebx push esi push edi xor esi, esi mov [ebp+var_1C], esi mov [ebp+var_C], esi mov [ebp+var_10], esi call GetCurrentProcessId_0 mov ecx, dword_7F838078 mov [ecx+24Ch], eax call sub_7F813856 mov eax, dword_7F838078 mov ecx, [ebp+arg_0] mov [eax+24Ch], esi mov edx, [ecx+20Ch] mov ecx, 8 push 10h mov eax, [edx] mov [ebp+var_18], eax mov edi, [eax] xor eax, eax rep stosd mov ecx, [ebp+arg_0] movzx eax, word ptr [ecx+204h] add eax, eax push eax call sub_7F82F03B mov ebx, eax test ebx, ebx jnz short loc_7F82DDBD mov [ebp+var_1C], 400h jmp loc_7F82E0E3 ; --------------------------------------------------------------------------- loc_7F82DDBD: ; CODE XREF: sub_7F82DD49+66j push 10h mov eax, [ebp+arg_0] movzx eax, word ptr [eax+204h] shl eax, 2 push eax call sub_7F82F03B mov [ebp+var_C], eax test eax, eax jnz short loc_7F82DDE5 mov [ebp+var_1C], 400h jmp loc_7F82E0E3 ; --------------------------------------------------------------------------- loc_7F82DDE5: ; CODE XREF: sub_7F82DD49+8Ej push 10h mov eax, [ebp+arg_0] movzx eax, word ptr [eax+204h] shl eax, 2 push eax call sub_7F82F03B mov [ebp+var_10], eax test eax, eax jnz short loc_7F82DE0D mov [ebp+var_1C], 400h jmp loc_7F82E0E3 ; --------------------------------------------------------------------------- loc_7F82DE0D: ; CODE XREF: sub_7F82DD49+B6j xor si, si mov eax, [ebp+arg_0] cmp [eax+204h], si jle short loc_7F82DE72 mov edi, 2000h loc_7F82DE21: ; CODE XREF: sub_7F82DD49+127j push 30h push edi call sub_7F82F03B mov ecx, [ebp+var_C] mov [ecx], eax mov ecx, eax test ecx, ecx jz loc_7F82DFF8 inc si mov eax, [ebp+var_10] push edi mov [eax], ecx mov word ptr [ebx], 100h mov ecx, [ebp+var_18] push dword ptr [ecx] mov ecx, [ebp+var_C] add ebx, 2 push dword ptr [ecx] call sub_7F82FCE0 add esp, 0Ch mov eax, [ebp+arg_0] add [ebp+var_18], 4 add [ebp+var_C], 4 add [ebp+var_10], 4 cmp [eax+204h], si jg short loc_7F82DE21 loc_7F82DE72: ; CODE XREF: sub_7F82DD49+D1j movsx ecx, si sub ebx, 2 mov edx, [ebp+arg_0] lea eax, ds:0[ecx*4] sub [ebp+var_18], eax sub [ebp+var_C], eax sub [ebp+var_10], eax mov eax, [edx+200h] mov ax, [eax+8] and ax, 0FFh mov [ebx], ax jnz short loc_7F82DEA3 mov word ptr [ebx], 100h loc_7F82DEA3: ; CODE XREF: sub_7F82DD49+153j xor si, si mov eax, 1 sub eax, ecx lea ebx, [ebx+eax*2] mov eax, [ebp+arg_0] cmp [eax+204h], si jle short loc_7F82DEE9 loc_7F82DEBC: ; CODE XREF: sub_7F82DD49+19Ej inc si push offset sub_7F82E147 push 20h mov ecx, [ebp+var_C] movsx eax, word ptr [ebx] push eax add ebx, 2 push dword ptr [ecx] call sub_7F8300E0 add esp, 10h mov eax, [ebp+arg_0] add [ebp+var_C], 4 cmp [eax+204h], si jg short loc_7F82DEBC loc_7F82DEE9: ; CODE XREF: sub_7F82DD49+171j movsx eax, si lea ecx, ds:0[eax*4] add eax, eax sub ebx, eax sub [ebp+var_C], ecx mov ecx, [ebp+arg_0] mov eax, [ecx+200h] mov ax, [eax+8] movsx ecx, ax mov [ebp+var_2], ax and cl, 3Fh shr ecx, 6 mov eax, [ebp+var_18] mov eax, [ecx+eax] xor ecx, ecx mov [ebp+var_6], 0 mov cx, [ebp+var_2] and ecx, 0FFh shl ecx, 5 add eax, ecx cmp [ebp+var_2], 0 mov [ebp+var_20], eax jle loc_7F82E0C6 loc_7F82DF3F: ; CODE XREF: sub_7F82DD49+377j cmp byte ptr [ebp+var_6], 0 jnz short loc_7F82DF58 movsx ecx, [ebp+var_6] and cl, 3Fh mov eax, [ebp+var_18] shr ecx, 6 mov edx, [ecx+eax] mov [ebp+var_24], edx loc_7F82DF58: ; CODE XREF: sub_7F82DD49+1FAj mov [ebp+var_14], 0 mov [ebp+var_8], 0FFFFh mov [ebp+var_4], 0 loc_7F82DF6B: ; CODE XREF: sub_7F82DD49+321j mov cx, [ebp+var_4] mov eax, [ebp+arg_0] cmp [eax+204h], cx jle loc_7F82E06F cmp word ptr [ebx], 0 jle loc_7F82E05F xor edx, edx loc_7F82DF8B: ; CODE XREF: sub_7F82DD49+29Fj mov eax, [ebp+var_10] mov eax, [eax] cmp byte ptr [eax+4], 8Fh jnz short loc_7F82DFEA mov [eax], dx mov eax, [ebp+var_10] sub [ebp+var_20], 20h dec [ebp+var_2] mov ecx, [eax] cmp byte ptr [ebp+var_2], 0FFh mov [ecx+2], dx jnz short loc_7F82DFC8 movsx ecx, [ebp+var_2] and cl, 3Fh mov eax, [ebp+var_18] shr ecx, 6 mov eax, [ecx+eax] add eax, 1FE0h mov [ebp+var_20], eax loc_7F82DFC8: ; CODE XREF: sub_7F82DD49+265j mov edi, [ebp+var_20] mov eax, [ebp+var_10] mov ecx, 8 mov esi, [eax] rep movsd mov eax, [ebp+var_10] add dword ptr [eax], 20h mov ax, [ebx] dec ax mov [ebx], ax test ax, ax jg short loc_7F82DF8B loc_7F82DFEA: ; CODE XREF: sub_7F82DD49+24Bj cmp word ptr [ebx], 0 jle short loc_7F82E05F cmp [ebp+var_14], 0 jnz short loc_7F82E03A jmp short loc_7F82E04F ; --------------------------------------------------------------------------- loc_7F82DFF8: ; CODE XREF: sub_7F82DD49+E9j movsx eax, si mov [ebp+var_1C], 400h lea ecx, ds:0[eax*4] add eax, eax sub ebx, eax sub [ebp+var_C], ecx dec si js short loc_7F82E026 loc_7F82E014: ; CODE XREF: sub_7F82DD49+2DBj sub [ebp+var_C], 4 mov ecx, [ebp+var_C] push dword ptr [ecx] call sub_7F82F149 dec si jns short loc_7F82E014 loc_7F82E026: ; CODE XREF: sub_7F82DD49+2C9j push [ebp+var_C] call sub_7F82F149 mov [ebp+var_C], 0 jmp loc_7F82E0E3 ; --------------------------------------------------------------------------- loc_7F82E03A: ; CODE XREF: sub_7F82DD49+2ABj mov ecx, [ebp+var_10] push [ebp+var_14] push dword ptr [ecx] call sub_7F82E147 add esp, 8 cmp eax, 0FFFFFFFFh jnz short loc_7F82E05F loc_7F82E04F: ; CODE XREF: sub_7F82DD49+2ADj mov dx, [ebp+var_4] mov eax, [ebp+var_10] mov [ebp+var_8], dx mov ecx, [eax] mov [ebp+var_14], ecx loc_7F82E05F: ; CODE XREF: sub_7F82DD49+23Aj ; sub_7F82DD49+2A5j ... add [ebp+var_10], 4 inc [ebp+var_4] add ebx, 2 jmp loc_7F82DF6B ; --------------------------------------------------------------------------- loc_7F82E06F: ; CODE XREF: sub_7F82DD49+230j movsx eax, [ebp+var_4] lea ecx, ds:0[eax*4] add eax, eax sub ebx, eax sub [ebp+var_10], ecx cmp [ebp+var_14], 0 jz short loc_7F82E0C6 mov eax, [ebp+var_14] mov edx, [ebp+var_10] mov word ptr [eax], 0 mov edi, [ebp+var_24] mov word ptr [eax+2], 0 movsx ecx, [ebp+var_8] dec word ptr [ebx+ecx*2] mov esi, eax add dword ptr [edx+ecx*4], 20h mov ecx, 8 rep movsd mov ax, [ebp+var_2] add [ebp+var_24], 20h inc [ebp+var_6] cmp ax, [ebp+var_6] jg loc_7F82DF3F loc_7F82E0C6: ; CODE XREF: sub_7F82DD49+1F0j ; sub_7F82DD49+33Cj mov dx, [ebp+var_2] mov eax, [ebp+arg_0] mov ecx, [eax+200h] mov [ecx+0Ch], dx mov ecx, [eax+200h] mov word ptr [ecx+0Ah], 0 loc_7F82E0E3: ; CODE XREF: sub_7F82DD49+6Fj ; sub_7F82DD49+97j ... xor esi, esi cmp [ebp+var_C], esi jz short loc_7F82E123 mov eax, [ebp+arg_0] cmp [eax+204h], si jle short loc_7F82E112 loc_7F82E0F6: ; CODE XREF: sub_7F82DD49+3C7j inc si mov ecx, [ebp+var_C] push dword ptr [ecx] call sub_7F82F149 mov ecx, [ebp+arg_0] add [ebp+var_C], 4 cmp [ecx+204h], si jg short loc_7F82E0F6 loc_7F82E112: ; CODE XREF: sub_7F82DD49+3ABj movsx eax, si shl eax, 2 sub [ebp+var_C], eax push [ebp+var_C] call sub_7F82F149 loc_7F82E123: ; CODE XREF: sub_7F82DD49+39Fj cmp [ebp+var_10], 0 jz short loc_7F82E131 push [ebp+var_10] call sub_7F82F149 loc_7F82E131: ; CODE XREF: sub_7F82DD49+3DEj test ebx, ebx jz short loc_7F82E13B push ebx call sub_7F82F149 loc_7F82E13B: ; CODE XREF: sub_7F82DD49+3EAj mov eax, [ebp+var_1C] pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82DD49 endp ; =============== S U B R O U T I N E ======================================= sub_7F82E147 proc near ; CODE XREF: sub_7F82DD49+2F9p ; DATA XREF: sub_7F82DD49+175o arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] mov edx, [esp+arg_0] mov ecx, [eax+4] mov eax, [edx+4] cmp ecx, eax jbe short loc_7F82E160 mov eax, 0FFFFFFFFh jmp short locret_7F82E168 ; --------------------------------------------------------------------------- loc_7F82E160: ; CODE XREF: sub_7F82E147+10j mov eax, 1 adc eax, 0FFFFFFFFh locret_7F82E168: ; CODE XREF: sub_7F82E147+17j retn sub_7F82E147 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82E169 proc near ; CODE XREF: sub_7F82DBC2+CDp var_8C = word ptr -8Ch var_8A = word ptr -8Ah var_88 = byte ptr -88h var_C = dword ptr -0Ch var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp add eax, 200h sub esp, 8Ch mov ecx, [eax] mov word ptr [ecx+0Ah], 0 mov [ebp+var_8C], 1 push ebx push esi push edi mov ecx, [eax] mov ax, [ecx+0Ch] lea esi, [ebp+var_88] mov [ebp+var_2], 1 mov [ebp+var_8A], ax loc_7F82E1A8: ; CODE XREF: sub_7F82E169+10Bj mov ax, [esi-2] sub esi, 4 mov cx, [esi] mov [ebp+var_6], cx dec [ebp+var_2] mov [ebp+var_4], ax movzx eax, cx movzx edx, [ebp+var_4] add eax, edx cdq sub eax, edx sar eax, 1 cmp ax, 1 mov di, ax jb short loc_7F82E219 mov eax, dword_7F838078 mov ecx, [eax+200h] cmp [ecx+8], di jbe short loc_7F82E219 mov ax, di shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov ebx, [edx] mov eax, [ecx+ebx] xor ecx, ecx mov cx, di and ecx, 0FFh shl ecx, 5 lea ebx, [eax+ecx] jmp short loc_7F82E21B ; --------------------------------------------------------------------------- loc_7F82E219: ; CODE XREF: sub_7F82E169+6Aj ; sub_7F82E169+7Bj xor ebx, ebx loc_7F82E21B: ; CODE XREF: sub_7F82E169+AEj lea eax, [ebp+var_C] push eax push dword ptr [ebx+4] call sub_7F8144A4 push [ebp+var_C] push ebx push dword ptr [ebx+4] call sub_7F81444D test eax, eax jnz short loc_7F82E27A cmp [ebp+var_6], di jnb short loc_7F82E24F mov cx, [ebp+var_6] mov [esi], cx add esi, 4 mov [esi-2], di inc [ebp+var_2] loc_7F82E24F: ; CODE XREF: sub_7F82E169+D2j movzx ecx, di movzx edx, [ebp+var_4] inc ecx cmp ecx, edx jge short loc_7F82E26F inc di mov cx, [ebp+var_4] mov [esi], di add esi, 4 mov [esi-2], cx inc [ebp+var_2] loc_7F82E26F: ; CODE XREF: sub_7F82E169+F0j cmp [ebp+var_2], 0 jg loc_7F82E1A8 loc_7F82E27A: ; CODE XREF: sub_7F82E169+CCj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 4 sub_7F82E169 endp ; =============== S U B R O U T I N E ======================================= sub_7F82E283 proc near ; CODE XREF: sub_7F82DBC2+10Bp arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] add esi, 200h mov eax, [esi] add eax, 0Ch mov di, [eax] mov word ptr [eax], 0 mov ecx, [esi] cmp [ecx+8], di jbe short loc_7F82E304 loc_7F82E2A4: ; CODE XREF: sub_7F82E283+7Fj cmp di, 1 jb short loc_7F82E2ED mov eax, dword_7F838078 mov ecx, [eax+200h] cmp [ecx+8], di jbe short loc_7F82E2ED mov ax, di shr ax, 6 movzx ecx, ax and ecx, 3FFFFFCh mov eax, dword_7F838078 mov edx, [eax+20Ch] mov eax, [edx] mov eax, [ecx+eax] xor ecx, ecx mov cx, di and ecx, 0FFh shl ecx, 5 add eax, ecx jmp short loc_7F82E2EF ; --------------------------------------------------------------------------- loc_7F82E2ED: ; CODE XREF: sub_7F82E283+25j ; sub_7F82E283+36j xor eax, eax loc_7F82E2EF: ; CODE XREF: sub_7F82E283+68j mov cx, [eax+10h] inc di push ecx push eax call sub_7F813059 mov ecx, [esi] cmp [ecx+8], di ja short loc_7F82E2A4 loc_7F82E304: ; CODE XREF: sub_7F82E283+1Fj xor eax, eax pop edi pop esi retn 4 sub_7F82E283 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82E30B proc near ; CODE XREF: sub_7F822C2A+27p ; sub_7F822C2A+42p ... arg_0 = dword ptr 8 push ebp mov ecx, offset dword_7F8359F8 cmp dword_7F8359F8, 0 mov ebp, esp jz short loc_7F82E32B loc_7F82E31C: ; CODE XREF: sub_7F82E30B+1Ej mov eax, [ebp+arg_0] cmp [ecx], eax jz short loc_7F82E34C add ecx, 4 cmp dword ptr [ecx], 0 jnz short loc_7F82E31C loc_7F82E32B: ; CODE XREF: sub_7F82E30B+Fj cmp byte_7F835A68, 0 mov eax, offset byte_7F835A68 jz short loc_7F82E346 mov cl, byte ptr [ebp+arg_0] loc_7F82E33C: ; CODE XREF: sub_7F82E30B+39j cmp [eax], cl jz short loc_7F82E353 inc eax cmp byte ptr [eax], 0 jnz short loc_7F82E33C loc_7F82E346: ; CODE XREF: sub_7F82E30B+2Cj xor eax, eax loc_7F82E348: ; CODE XREF: sub_7F82E30B+46j ; sub_7F82E30B+4Dj pop ebp retn 4 ; --------------------------------------------------------------------------- loc_7F82E34C: ; CODE XREF: sub_7F82E30B+16j mov eax, 1 jmp short loc_7F82E348 ; --------------------------------------------------------------------------- loc_7F82E353: ; CODE XREF: sub_7F82E30B+33j mov eax, 1 jmp short loc_7F82E348 sub_7F82E30B endp ; =============== S U B R O U T I N E ======================================= sub_7F82E35A proc near ; CODE XREF: sub_7F822C2A+183p arg_0 = word ptr 4 arg_4 = dword ptr 8 push [esp+arg_4] call sub_7F82DB71 mov dx, ax mov cx, [esp+arg_0] and dx, cx cmp dx, ax jz short loc_7F82E377 xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E377: ; CODE XREF: sub_7F82E35A+17j test ch, 80h jz short loc_7F82E385 test ah, 80h jnz short loc_7F82E385 xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E385: ; CODE XREF: sub_7F82E35A+20j ; sub_7F82E35A+25j test ch, 10h jz short loc_7F82E393 test ah, 10h jnz short loc_7F82E393 xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E393: ; CODE XREF: sub_7F82E35A+2Ej ; sub_7F82E35A+33j test ch, 20h jz short loc_7F82E3A1 test ah, 20h jnz short loc_7F82E3A1 xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E3A1: ; CODE XREF: sub_7F82E35A+3Cj ; sub_7F82E35A+41j test ch, 40h jz short loc_7F82E3AF test ah, 40h jnz short loc_7F82E3AF xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E3AF: ; CODE XREF: sub_7F82E35A+4Aj ; sub_7F82E35A+4Fj mov ax, cx and al, 6 cmp al, 6 jnz short loc_7F82E3BC xor eax, eax jmp short locret_7F82E3D0 ; --------------------------------------------------------------------------- loc_7F82E3BC: ; CODE XREF: sub_7F82E35A+5Cj test ch, 8 jz short loc_7F82E3CB test ch, 0F0h mov eax, 0 jnz short locret_7F82E3D0 loc_7F82E3CB: ; CODE XREF: sub_7F82E35A+65j mov eax, 1 locret_7F82E3D0: ; CODE XREF: sub_7F82E35A+1Bj ; sub_7F82E35A+29j ... retn 8 sub_7F82E35A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82E3D3 proc near ; CODE XREF: sub_7F822F66+1C1p ; sub_7F822F66+2ACp var_3C = byte ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = word ptr -2Ch var_2A = word ptr -2Ah var_1E = word ptr -1Eh var_1C = dword ptr -1Ch var_18 = dword ptr -18h lDistanceToMove = dword ptr -14h nNumberOfBytesToRead= dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = word ptr 10h arg_C = dword ptr 14h push ebp mov ax, [esp+arg_8] mov ebp, esp sub esp, 3Ch mov [ebp+var_2], ax push ebx push esi xor ebx, ebx push edi xor esi, esi loc_7F82E3E9: ; CODE XREF: sub_7F82E3D3+375j cmp [ebp+var_2], bx jz loc_7F82E753 mov eax, 253h cmp dword_7F838078, ebx jnz short loc_7F82E430 mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F82E430: ; CODE XREF: sub_7F82E3D3+2Bj test eax, eax jnz loc_7F82E95E mov eax, [ebp+arg_4] mov cx, [eax] cmp cx, 1 jb short loc_7F82E48A mov eax, dword_7F838078 mov edx, [eax+200h] cmp [edx+8], cx jbe short loc_7F82E48A mov ax, cx shr ax, 6 movzx edx, ax and edx, 3FFFFFCh mov eax, dword_7F838078 mov esi, [eax+20Ch] mov edi, [esi] mov eax, [edx+edi] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 add eax, edx mov [ebp+var_8], eax jmp short loc_7F82E48D ; --------------------------------------------------------------------------- loc_7F82E48A: ; CODE XREF: sub_7F82E3D3+6Fj ; sub_7F82E3D3+80j mov [ebp+var_8], ebx loc_7F82E48D: ; CODE XREF: sub_7F82E3D3+B5j cmp [ebp+var_8], ebx jz loc_7F82E7A0 lea edi, [ebp+var_3C] mov esi, [ebp+var_8] mov ecx, 8 rep movsd mov eax, [ebp+var_8] mov edi, [eax+14h] mov ecx, [eax+18h] and edi, 7FFFFFFFh mov edx, [eax+4] mov [ebp+var_18], ecx mov [ebp+var_C], edx mov ecx, dword_7F838078 cmp [ecx+254h], bx jz short loc_7F82E4D1 call sub_7F82A34F jmp short loc_7F82E4DF ; --------------------------------------------------------------------------- loc_7F82E4D1: ; CODE XREF: sub_7F82E3D3+F5j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E4DF: ; CODE XREF: sub_7F82E3D3+FCj mov eax, [ebp+arg_C] mov dword_7F838078, ebx mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_C] mov eax, [ecx+4] lea ecx, [ebp+var_C] mov dword_7F838080, eax mov dword_7F83807C, edx lea eax, [ebp+var_8] push eax push edi push ecx call sub_7F812FC1 mov esi, eax test esi, esi jz short loc_7F82E555 cmp esi, 100Ah jnz short loc_7F82E54D mov eax, [ebp+var_38] push 1 push eax mov [ebp+var_C], eax call sub_7F81479E lea ecx, [ebp+var_8] lea eax, [ebp+var_C] push ecx push edi push eax call sub_7F812FC1 mov esi, eax loc_7F82E54D: ; CODE XREF: sub_7F82E3D3+15Aj test esi, esi jnz loc_7F82E753 loc_7F82E555: ; CODE XREF: sub_7F82E3D3+152j mov ecx, [ebp+var_8] mov edx, [ebp+var_30] dec [ebp+var_2] mov eax, [ebp+var_34] mov [ecx+8], eax mov ecx, [ebp+var_8] add [ebp+arg_4], 2 mov ax, [ebp+var_2A] mov [ecx+0Ch], edx mov ecx, [ebp+var_8] mov [ecx+12h], ax mov cx, [ebp+var_2C] mov edx, [ebp+var_8] and cx, 0F00h or [edx+10h], cx push [ebp+var_8] call sub_7F814971 mov dx, [ebp+var_1E] mov ecx, [ebp+var_8] mov [ecx+1Eh], dx mov ecx, [ebp+var_8] mov edx, dword_7F838078 mov eax, [ecx+18h] cmp [edx+254h], bx mov [ebp+lDistanceToMove], eax jz short loc_7F82E5BC call sub_7F82A34F jmp short loc_7F82E5CA ; --------------------------------------------------------------------------- loc_7F82E5BC: ; CODE XREF: sub_7F82E3D3+1E0j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E5CA: ; CODE XREF: sub_7F82E3D3+1E7j add edi, 87h mov esi, 0 and edi, 0FFFFFF80h mov dword_7F838078, ebx mov [ebp+var_1C], 1 jz loc_7F82E71B loc_7F82E5EB: ; CODE XREF: sub_7F82E3D3+342j cmp edi, 2000h mov eax, edi jb short loc_7F82E5FA mov eax, 2000h loc_7F82E5FA: ; CODE XREF: sub_7F82E3D3+220j mov [ebp+nNumberOfBytesToRead], eax cmp dword_7F838078, ebx jz short loc_7F82E60C mov esi, 253h jmp short loc_7F82E63C ; --------------------------------------------------------------------------- loc_7F82E60C: ; CODE XREF: sub_7F82E3D3+230j mov eax, [ebp+arg_0] xor esi, esi mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx loc_7F82E63C: ; CODE XREF: sub_7F82E3D3+237j test esi, esi jnz loc_7F82E71B lea eax, [ebp+nNumberOfBytesToRead] push eax ; int push [ebp+var_18] ; lDistanceToMove push lpBuffer ; lpBuffer call sub_7F8127E7 mov esi, eax test esi, esi jnz loc_7F82E71B cmp [ebp+var_1C], ebx jz short loc_7F82E673 mov eax, [ebp+var_C] mov ecx, lpBuffer mov [ebp+var_1C], ebx mov [ecx], eax loc_7F82E673: ; CODE XREF: sub_7F82E3D3+290j mov eax, dword_7F838078 cmp [eax+254h], bx jz short loc_7F82E688 call sub_7F82A34F jmp short loc_7F82E696 ; --------------------------------------------------------------------------- loc_7F82E688: ; CODE XREF: sub_7F82E3D3+2ACj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E696: ; CODE XREF: sub_7F82E3D3+2B3j mov eax, [ebp+arg_C] mov dword_7F838078, ebx push [ebp+nNumberOfBytesToRead] ; nNumberOfBytesToRead push [ebp+lDistanceToMove] ; lDistanceToMove mov ecx, [eax] mov dword_7F83807C, ecx push lpBuffer ; int mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_C] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx call sub_7F812653 mov esi, eax test esi, esi jnz short loc_7F82E71B mov eax, dword_7F838078 cmp [eax+254h], bx jz short loc_7F82E6F6 call sub_7F82A34F jmp short loc_7F82E704 ; --------------------------------------------------------------------------- loc_7F82E6F6: ; CODE XREF: sub_7F82E3D3+31Aj mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E704: ; CODE XREF: sub_7F82E3D3+321j mov eax, [ebp+nNumberOfBytesToRead] mov dword_7F838078, ebx add [ebp+var_18], eax add [ebp+lDistanceToMove], eax sub edi, eax jnz loc_7F82E5EB loc_7F82E71B: ; CODE XREF: sub_7F82E3D3+212j ; sub_7F82E3D3+26Bj ... mov eax, 1 cmp dword_7F83809C, ebx jbe short loc_7F82E746 push 64h sub edx, edx inc dword_7F838098 mov eax, dword_7F838098 imul eax, 64h div dword_7F83809C push eax call sub_7F82A9CA loc_7F82E746: ; CODE XREF: sub_7F82E3D3+353j test eax, eax jnz loc_7F82E3E9 mov esi, 101Eh loc_7F82E753: ; CODE XREF: sub_7F82E3D3+1Aj ; sub_7F82E3D3+17Cj ... xor ecx, ecx test esi, esi jz loc_7F82E925 cmp esi, 101Eh jz loc_7F82E925 cmp [ebp+var_2], cx jz loc_7F82E925 mov di, [ebp+arg_8] sub di, [ebp+var_2] movzx eax, di add eax, eax sub [ebp+arg_4], eax cmp dword_7F838078, ecx jz short loc_7F82E7BF mov eax, dword_7F838078 cmp [eax+254h], cx jz short loc_7F82E7A7 call sub_7F82A34F jmp short loc_7F82E7B5 ; --------------------------------------------------------------------------- loc_7F82E7A0: ; CODE XREF: sub_7F82E3D3+BDj mov esi, 1001h jmp short loc_7F82E753 ; --------------------------------------------------------------------------- loc_7F82E7A7: ; CODE XREF: sub_7F82E3D3+3C4j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E7B5: ; CODE XREF: sub_7F82E3D3+3CBj mov dword_7F838078, 0 loc_7F82E7BF: ; CODE XREF: sub_7F82E3D3+3B6j mov ax, di dec di test ax, ax jz loc_7F82E925 xor ebx, ebx loc_7F82E7CF: ; CODE XREF: sub_7F82E3D3+54Cj mov eax, 253h cmp dword_7F838078, ebx jnz short loc_7F82E80C mov eax, [ebp+arg_0] mov ecx, [eax] mov dword_7F83807C, ecx mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_0] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx xor eax, eax loc_7F82E80C: ; CODE XREF: sub_7F82E3D3+407j test eax, eax jnz loc_7F82E925 mov eax, [ebp+arg_4] add [ebp+arg_4], 2 cmp word ptr [eax], 1 jb short loc_7F82E87C mov eax, [ebp+arg_4] mov ecx, dword_7F838078 mov ax, [eax] mov edx, [ecx+200h] add [ebp+arg_4], 2 cmp [edx+8], ax jbe short loc_7F82E87C mov eax, [ebp+arg_4] mov edx, dword_7F838078 mov cx, [eax] mov edx, [edx+20Ch] add [ebp+arg_4], 4 mov ax, cx mov edx, [edx] shr ax, 6 movzx eax, ax and eax, 3FFFFFCh mov eax, [eax+edx] xor edx, edx mov dx, cx and edx, 0FFh shl edx, 5 add eax, edx mov [ebp+var_8], eax jmp short loc_7F82E87F ; --------------------------------------------------------------------------- loc_7F82E87C: ; CODE XREF: sub_7F82E3D3+44Cj ; sub_7F82E3D3+468j mov [ebp+var_8], ebx loc_7F82E87F: ; CODE XREF: sub_7F82E3D3+4A7j mov eax, [ebp+var_8] mov edx, dword_7F838078 mov ecx, [eax+4] mov [ebp+var_C], ecx cmp [edx+254h], bx jz short loc_7F82E89E call sub_7F82A34F jmp short loc_7F82E8AC ; --------------------------------------------------------------------------- loc_7F82E89E: ; CODE XREF: sub_7F82E3D3+4C2j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E8AC: ; CODE XREF: sub_7F82E3D3+4C9j mov eax, [ebp+arg_C] push 1 mov dword_7F838078, ebx mov ecx, [eax] mov dword_7F83807C, ecx push [ebp+var_C] mov ax, [ecx+2Ch] mov word_7F838084, ax mov edx, [ecx] mov dword_7F838078, edx mov edx, [ebp+arg_C] mov eax, [ecx+4] mov dword_7F838080, eax mov dword_7F83807C, edx call sub_7F81479E test eax, eax jnz short loc_7F82E925 mov eax, dword_7F838078 cmp [eax+254h], bx jz short loc_7F82E903 call sub_7F82A34F jmp short loc_7F82E911 ; --------------------------------------------------------------------------- loc_7F82E903: ; CODE XREF: sub_7F82E3D3+527j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E911: ; CODE XREF: sub_7F82E3D3+52Ej mov ax, di mov dword_7F838078, ebx dec di test ax, ax jnz loc_7F82E7CF loc_7F82E925: ; CODE XREF: sub_7F82E3D3+384j ; sub_7F82E3D3+390j ... cmp dword_7F838078, 0 jz short loc_7F82E95C mov eax, dword_7F838078 cmp word ptr [eax+254h], 0 jz short loc_7F82E944 call sub_7F82A34F jmp short loc_7F82E952 ; --------------------------------------------------------------------------- loc_7F82E944: ; CODE XREF: sub_7F82E3D3+568j mov eax, dword_7F838078 and word ptr [eax+264h], 0FFFDh loc_7F82E952: ; CODE XREF: sub_7F82E3D3+56Fj mov dword_7F838078, 0 loc_7F82E95C: ; CODE XREF: sub_7F82E3D3+559j mov eax, esi loc_7F82E95E: ; CODE XREF: sub_7F82E3D3+5Fj pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h sub_7F82E3D3 endp ; =============== S U B R O U T I N E ======================================= sub_7F82E967 proc near ; CODE XREF: sub_7F823FB2j push 30h push 2Ch call sub_7F82F18D test eax, eax jz short locret_7F82E97C mov ecx, [eax] mov word ptr [ecx+4], 2 locret_7F82E97C: ; CODE XREF: sub_7F82E967+Bj retn sub_7F82E967 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82E97D(int, HWND hWnd, int, int) sub_7F82E97D proc near ; CODE XREF: sub_7F824021+67p arg_0 = dword ptr 8 hWnd = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi xor edi, edi mov esi, [ebp+arg_0] mov ecx, [esi] mov bx, [ecx+2] cmp [ecx+4], bx jg short loc_7F82E9BA add bx, 2 push edi movsx eax, bx shl eax, 4 add eax, 0Ch push eax push esi call sub_7F82F1FF test eax, eax jnz short loc_7F82E9B4 mov edi, 400h jmp short loc_7F82E9F0 ; --------------------------------------------------------------------------- loc_7F82E9B4: ; CODE XREF: sub_7F82E97D+2Ej mov ecx, [esi] mov [ecx+4], bx loc_7F82E9BA: ; CODE XREF: sub_7F82E97D+15j mov dx, [ecx+2] movsx eax, dx inc dx push 0 ; nIndex shl eax, 4 mov [ecx+2], dx lea ebx, [eax+ecx+0Ch] mov eax, [ebp+hWnd] push eax ; hWnd mov [ebx+4], eax call ds:GetWindowLongA mov ecx, [ebp+arg_8] mov [ebx], eax mov eax, [ebp+arg_C] mov [ebx+8], ecx mov [ebx+0Ch], eax mov edx, [eax] mov [edx+4], esi loc_7F82E9F0: ; CODE XREF: sub_7F82E97D+35j mov eax, edi pop edi pop esi pop ebx pop ebp retn 10h sub_7F82E97D endp ; =============== S U B R O U T I N E ======================================= sub_7F82E9F9 proc near ; CODE XREF: sub_7F8240DB+5Bp ; sub_7F82ADFE+A8p arg_0 = dword ptr 4 arg_4 = word ptr 8 push ebx push esi movsx eax, [esp+8+arg_4] push edi push ebp mov edi, [esp+10h+arg_0] mov ebp, [edi] lea ebx, [ebp+2] movsx ecx, word ptr [ebx] sub ecx, eax dec ecx shl ecx, 4 test ecx, ecx jz short loc_7F82EA2E shl eax, 4 push ecx add eax, ebp lea edx, [eax+1Ch] add eax, 0Ch push edx push eax call sub_7F82FCE0 add esp, 0Ch loc_7F82EA2E: ; CODE XREF: sub_7F82E9F9+1Dj mov si, [ebx] dec si mov [ebx], si movsx eax, si movsx ecx, word ptr [ebp+4] sub ecx, eax cmp ecx, 8 jl short loc_7F82EA64 add si, 2 push 0 movsx eax, si shl eax, 4 add eax, 0Ch push eax push edi call sub_7F82F1FF test eax, eax jz short loc_7F82EA64 mov eax, [edi] mov [eax+4], si loc_7F82EA64: ; CODE XREF: sub_7F82E9F9+49j ; sub_7F82E9F9+63j pop ebp pop edi pop esi pop ebx retn 8 sub_7F82E9F9 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EA6B proc near ; CODE XREF: sub_7F824021+43p push esi xor esi, esi push esi push 18h call sub_7F82F18D test eax, eax jz short loc_7F82EA88 mov ecx, [eax] mov [ecx], si mov word ptr [ecx+2], 4 mov [ecx+4], esi loc_7F82EA88: ; CODE XREF: sub_7F82EA6B+Dj pop esi retn sub_7F82EA6B endp ; =============== S U B R O U T I N E ======================================= sub_7F82EA8A proc near ; CODE XREF: sub_7F824021+A8p ; sub_7F8240DB+52p ... arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] mov edx, [esi] mov cx, [edx] add edx, 8 test cx, cx jle short loc_7F82EAB0 xor edi, edi loc_7F82EA9F: ; CODE XREF: sub_7F82EA8A+24j dec cx mov eax, [edx] add edx, 4 mov eax, [eax] test cx, cx mov [eax+8], edi jnz short loc_7F82EA9F loc_7F82EAB0: ; CODE XREF: sub_7F82EA8A+11j push esi call sub_7F82F1E1 pop edi pop esi retn 4 sub_7F82EA8A endp ; =============== S U B R O U T I N E ======================================= sub_7F82EABB proc near ; CODE XREF: sub_7F824021+85p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi xor edi, edi mov edx, [esi] mov bx, [edx] cmp [edx+2], bx jg short loc_7F82EAF6 add bx, 4 push edi movsx eax, bx lea ecx, ds:8[eax*4] push ecx push esi call sub_7F82F1FF test eax, eax jnz short loc_7F82EAF0 mov edi, 400h jmp short loc_7F82EB09 ; --------------------------------------------------------------------------- loc_7F82EAF0: ; CODE XREF: sub_7F82EABB+2Cj mov edx, [esi] mov [edx+2], bx loc_7F82EAF6: ; CODE XREF: sub_7F82EABB+12j movsx ecx, word ptr [edx] mov eax, [esp+0Ch+arg_4] mov [edx+ecx*4+8], eax inc word ptr [edx] mov edx, [eax] mov [edx+8], esi loc_7F82EB09: ; CODE XREF: sub_7F82EABB+33j mov eax, edi pop edi pop esi pop ebx retn 8 sub_7F82EABB endp ; =============== S U B R O U T I N E ======================================= sub_7F82EB11 proc near ; CODE XREF: sub_7F8240DB+31p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi mov eax, [esp+0Ch+arg_4] mov edi, [esi] mov bx, [edi] lea ecx, [edi+8] test bx, bx jle short loc_7F82EB37 loc_7F82EB29: ; CODE XREF: sub_7F82EB11+24j cmp [ecx], eax jz short loc_7F82EB37 dec bx add ecx, 4 test bx, bx jg short loc_7F82EB29 loc_7F82EB37: ; CODE XREF: sub_7F82EB11+16j ; sub_7F82EB11+1Aj xor edx, edx test bx, bx jle short loc_7F82EBA1 mov eax, [eax] movsx ebx, bx mov [eax+8], edx lea eax, ds:0FFFFFFFCh[ebx*4] test eax, eax jz short loc_7F82EB5F push eax lea edx, [ecx+4] push edx push ecx call sub_7F82FCE0 add esp, 0Ch loc_7F82EB5F: ; CODE XREF: sub_7F82EB11+3Ej mov ax, [edi] xor edx, edx dec ax movsx ecx, ax mov [edi], ax mov [edi+ecx*4+8], edx mov bx, [edi] movsx eax, word ptr [edi+2] movsx ecx, bx sub eax, ecx cmp eax, 10h jl short loc_7F82EBA1 add bx, 4 push edx movsx eax, bx lea ecx, ds:8[eax*4] push ecx push esi call sub_7F82F1FF test eax, eax jz short loc_7F82EBA1 mov eax, [esi] mov [eax+2], bx loc_7F82EBA1: ; CODE XREF: sub_7F82EB11+2Bj ; sub_7F82EB11+6Ej ... pop edi pop esi pop ebx retn 8 sub_7F82EB11 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EBA7 proc near ; CODE XREF: sub_7F824021+23p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi xor esi, esi push esi push 14h call sub_7F82F18D test eax, eax jz short loc_7F82EBD9 mov edx, [eax] mov ecx, [esp+4+arg_8] mov [edx], ecx mov ecx, [esp+4+arg_4] mov [edx+4], ecx mov [edx+8], esi mov [edx+0Eh], si mov esi, [esp+4+arg_0] mov word ptr [edx+0Ch], 1 mov [edx+10h], esi loc_7F82EBD9: ; CODE XREF: sub_7F82EBA7+Dj pop esi retn 0Ch sub_7F82EBA7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82EBDD proc near ; CODE XREF: sub_7F82ADFE+3Dp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h cmp dword_7F839098, 0 push ebp mov ebp, esp push esi push edi mov edi, [ebp+arg_8] jnz short loc_7F82EC07 cmp edi, 80h ja short loc_7F82EC07 mov dword_7F839098, 1 mov esi, offset unk_7F833D30 jmp short loc_7F82EC14 ; --------------------------------------------------------------------------- loc_7F82EC07: ; CODE XREF: sub_7F82EBDD+Fj ; sub_7F82EBDD+17j push 20h lea eax, [edi+0Ch] push eax call sub_7F82F03B mov esi, eax loc_7F82EC14: ; CODE XREF: sub_7F82EBDD+28j xor ecx, ecx test esi, esi jz short loc_7F82EC39 mov eax, [ebp+arg_0] test edi, edi mov [esi], eax mov [esi+4], ecx mov [esi+8], edi jz short loc_7F82EC39 push edi lea ecx, [esi+0Ch] push [ebp+arg_4] push ecx call sub_7F82FCE0 add esp, 0Ch loc_7F82EC39: ; CODE XREF: sub_7F82EBDD+3Bj ; sub_7F82EBDD+4Aj mov eax, esi pop edi pop esi pop ebp retn 0Ch sub_7F82EBDD endp ; =============== S U B R O U T I N E ======================================= sub_7F82EC41 proc near ; CODE XREF: sub_7F82ADFE+F1p arg_0 = dword ptr 4 cmp [esp+arg_0], offset unk_7F833D30 jnz short loc_7F82EC57 mov dword_7F839098, 0 jmp short locret_7F82EC60 ; --------------------------------------------------------------------------- loc_7F82EC57: ; CODE XREF: sub_7F82EC41+8j push [esp+arg_0] call sub_7F82F149 locret_7F82EC60: ; CODE XREF: sub_7F82EC41+14j retn 4 sub_7F82EC41 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EC63 proc near ; CODE XREF: sub_7F824021+39p ; sub_7F8240DB+3Fp ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi mov esi, [eax] call ds:__imp_GetCurrentProcessId mov dx, [esi+2] movsx ecx, dx shl ecx, 4 test dx, dx lea ecx, [ecx+esi-4] jle short loc_7F82EC91 loc_7F82EC83: ; CODE XREF: sub_7F82EC63+2Cj cmp [ecx], eax jz short loc_7F82EC91 dec dx sub ecx, 10h test dx, dx jg short loc_7F82EC83 loc_7F82EC91: ; CODE XREF: sub_7F82EC63+1Ej ; sub_7F82EC63+22j lea eax, [edx-1] pop esi retn 4 sub_7F82EC63 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EC98 proc near ; CODE XREF: sub_7F8240DB+68p ; sub_7F8241B0+26p arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi mov esi, [eax] xor eax, eax mov dx, [esi] add esi, 8 test dx, dx jle short loc_7F82ECBD loc_7F82ECAC: ; CODE XREF: sub_7F82EC98+23j dec dx mov ecx, [esi] add esi, 4 mov ecx, [ecx] or eax, [ecx+10h] test dx, dx jnz short loc_7F82ECAC loc_7F82ECBD: ; CODE XREF: sub_7F82EC98+12j pop esi retn 4 sub_7F82EC98 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82ECC1 proc near ; CODE XREF: sub_7F82B9AC+27p ; sub_7F82ED7C+43p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ecx, [esp+arg_0] mov ax, [ecx] mov ebp, esp push ebx push esi push edi mov esi, [ebp+arg_8] cmp [esi], ax jg short loc_7F82ED34 mov edi, 0FFFFFFFFh loc_7F82ECDB: ; CODE XREF: sub_7F82ECC1+71j mov dx, [esi] cmp [ecx], dx jnz short loc_7F82ED17 mov ax, [ecx+2] movsx ebx, ax cmp ebx, [ebp+arg_C] jl short loc_7F82ED34 cmp [ebp+arg_C], edi jnz short loc_7F82ECFA cmp [esi+2], ax jg short loc_7F82ED34 loc_7F82ECFA: ; CODE XREF: sub_7F82ECC1+31j cmp [esi+2], ax jnz short loc_7F82ED17 mov ax, [ecx+4] movsx ecx, ax cmp ecx, [ebp+arg_10] jl short loc_7F82ED34 cmp [ebp+arg_10], edi jnz short loc_7F82ED17 cmp [esi+4], ax jg short loc_7F82ED34 loc_7F82ED17: ; CODE XREF: sub_7F82ECC1+20j ; sub_7F82ECC1+3Dj ... cmp [ebp+arg_4], 0 jz short loc_7F82ED47 mov ecx, esi mov [ebp+arg_10], edi mov esi, [ebp+arg_4] mov [ebp+arg_C], edi mov [ebp+arg_4], 0 cmp [esi], dx jle short loc_7F82ECDB loc_7F82ED34: ; CODE XREF: sub_7F82ECC1+13j ; sub_7F82ECC1+2Cj ... cmp [ebp+arg_4], 1 mov eax, 70Bh adc eax, 0FFFFFFFFh loc_7F82ED40: ; CODE XREF: sub_7F82ECC1+88j pop edi pop esi pop ebx pop ebp retn 14h ; --------------------------------------------------------------------------- loc_7F82ED47: ; CODE XREF: sub_7F82ECC1+5Aj xor eax, eax jmp short loc_7F82ED40 sub_7F82ECC1 endp ; =============== S U B R O U T I N E ======================================= sub_7F82ED4B proc near ; CODE XREF: sub_7F8216EE+34p ; sub_7F821D9A+48p arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx mov word ptr [eax], 3 mov [eax+6], ecx mov [eax+2], cx mov [eax+0Ah], ecx mov [eax+0Eh], ecx mov [eax+12h], ecx mov dword ptr [eax+6], offset aDemilayr ; "demilayr" mov word ptr [eax+4], 0FA6h mov word ptr [eax+16h], 1 retn 4 sub_7F82ED4B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82ED7C proc near ; CODE XREF: sub_7F8173E6+34p var_18 = word ptr -18h var_16 = word ptr -16h var_14 = word ptr -14h var_12 = dword ptr -12h var_E = dword ptr -0Eh var_A = dword ptr -0Ah var_6 = dword ptr -6 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp xor eax, eax mov ebp, esp sub esp, 18h mov [ebp+var_16], ax mov [ebp+var_E], eax mov [ebp+var_A], eax mov [ebp+var_6], eax mov ecx, offset aDemilayr ; "demilayr" mov edx, [ebp+arg_4] mov [ebp+var_18], 3 push 0BBBh mov [ebp+var_12], ecx push eax mov [edx+6], ecx mov [ebp+var_14], 0FA6h mov [ebp+var_2], 1 lea eax, [ebp+var_18] push eax push edx push [ebp+arg_0] call sub_7F82ECC1 mov esp, ebp pop ebp retn 8 sub_7F82ED7C endp ; =============== S U B R O U T I N E ======================================= sub_7F82EDCA proc near ; CODE XREF: sub_7F8173E6+4Bp arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] xor edx, edx mov word ptr [eax], 3 mov [eax+6], edx mov [eax+2], dx mov [eax+0Ah], edx mov ecx, [esp+arg_4] mov [eax+0Eh], edx mov word ptr [eax+4], 0FA3h mov word ptr [eax+16h], 1 mov [eax+12h], edx mov word ptr [ecx], 3 mov eax, dword_7F83909C mov [ecx+2], ax mov eax, dword_7F8390A0 mov [ecx+4], ax mov [ecx+6], edx mov [ecx+0Ah], edx mov [ecx+0Eh], edx mov word ptr [ecx+16h], 1 mov [ecx+12h], edx retn 8 sub_7F82EDCA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; BOOL __stdcall DllEntryPoint(HINSTANCE hinstDLL, DWORD fdwReason, LPVOID lpReserved) public DllEntryPoint DllEntryPoint proc near hMutex = dword ptr -4 hinstDLL = dword ptr 8 fdwReason = dword ptr 0Ch lpReserved = dword ptr 10h push ebp mov ebp, esp sub esp, 4 push esi mov esi, [ebp+fdwReason] cmp esi, 1 jz short loc_7F82EE41 cmp esi, 2 jz short loc_7F82EE76 loc_7F82EE35: ; CODE XREF: DllEntryPoint+4Fj ; DllEntryPoint+7Cj mov eax, 1 loc_7F82EE3A: ; CODE XREF: DllEntryPoint+37j ; DllEntryPoint+53j ... pop esi mov esp, ebp pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F82EE41: ; CODE XREF: DllEntryPoint+Dj mov eax, [ebp+hinstDLL] lea ecx, [ebp+hMutex] push ecx mov dword_7F833F18, eax call sub_7F82EEA3 test eax, eax jnz short loc_7F82EE5A xor eax, eax jmp short loc_7F82EE3A ; --------------------------------------------------------------------------- loc_7F82EE5A: ; CODE XREF: DllEntryPoint+33j push [ebp+lpReserved] push esi push [ebp+hinstDLL] call sub_7F830310 push [ebp+hMutex] ; hMutex call sub_7F82EED6 test eax, eax jnz short loc_7F82EE35 xor eax, eax jmp short loc_7F82EE3A ; --------------------------------------------------------------------------- loc_7F82EE76: ; CODE XREF: DllEntryPoint+12j lea eax, [ebp+hMutex] push eax call sub_7F82EEA3 test eax, eax jnz short loc_7F82EE87 xor eax, eax jmp short loc_7F82EE3A ; --------------------------------------------------------------------------- loc_7F82EE87: ; CODE XREF: DllEntryPoint+60j push [ebp+lpReserved] push esi push [ebp+hinstDLL] call sub_7F830310 push [ebp+hMutex] ; hMutex call sub_7F82EED6 test eax, eax jnz short loc_7F82EE35 xor eax, eax jmp short loc_7F82EE3A DllEntryPoint endp ; =============== S U B R O U T I N E ======================================= sub_7F82EEA3 proc near ; CODE XREF: DllEntryPoint+2Cp ; DllEntryPoint+59p arg_0 = dword ptr 4 push offset Name ; "MsMail32.CrtInit" push 0 ; bInitialOwner push 0 ; lpMutexAttributes call ds:CreateMutexA mov ecx, [esp+arg_0] test eax, eax mov [ecx], eax jnz short loc_7F82EEC0 xor eax, eax jmp short locret_7F82EED3 ; --------------------------------------------------------------------------- loc_7F82EEC0: ; CODE XREF: sub_7F82EEA3+17j push 493E0h ; dwMilliseconds push eax ; hHandle call ds:WaitForSingleObject cmp eax, 1 sbb eax, eax neg eax locret_7F82EED3: ; CODE XREF: sub_7F82EEA3+1Bj retn 4 sub_7F82EEA3 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82EED6(HANDLE hMutex) sub_7F82EED6 proc near ; CODE XREF: DllEntryPoint+48p ; DllEntryPoint+75p hMutex = dword ptr 4 push [esp+hMutex] ; hMutex call ds:ReleaseMutex push [esp+hMutex] ; hObject call ds:CloseHandle mov eax, 1 retn 4 sub_7F82EED6 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EEF2 proc near ; CODE XREF: sub_7F814EF3+44p mov eax, 1 retn 4 sub_7F82EEF2 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EEFA proc near ; CODE XREF: sub_7F814F94+95p mov eax, 1 retn 4 sub_7F82EEFA endp ; =============== S U B R O U T I N E ======================================= sub_7F82EF02 proc near ; CODE XREF: sub_7F816044:loc_7F816064p ; sub_7F8161D3:loc_7F8161F2p ... call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F82EF16 mov eax, dword_7F83709C jmp short loc_7F82EF1B ; --------------------------------------------------------------------------- loc_7F82EF16: ; CODE XREF: sub_7F82EF02+Bj call sub_7F824327 loc_7F82EF1B: ; CODE XREF: sub_7F82EF02+12j push 493E0h ; dwMilliseconds push dword ptr [eax+28h] ; hHandle call ds:WaitForSingleObject cmp eax, 1 sbb eax, eax neg eax retn sub_7F82EF02 endp ; =============== S U B R O U T I N E ======================================= sub_7F82EF31 proc near ; CODE XREF: sub_7F816044:loc_7F8160B5p ; sub_7F816044:loc_7F8160C1p ... call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F82EF45 mov eax, dword_7F83709C jmp short loc_7F82EF4A ; --------------------------------------------------------------------------- loc_7F82EF45: ; CODE XREF: sub_7F82EF31+Bj call sub_7F824327 loc_7F82EF4A: ; CODE XREF: sub_7F82EF31+12j push dword ptr [eax+28h] ; hMutex call ds:ReleaseMutex cmp eax, 1 sbb eax, eax inc eax retn sub_7F82EF31 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82EF5A proc near ; CODE XREF: sub_7F82EFBB+1Dp ; sub_7F82F03B+61p var_4 = dword ptr -4 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 4 push esi push edi mov esi, [ebp+arg_4] lea edi, [esi+10h] cmp edi, 10000h jbe short loc_7F82EF74 xor eax, eax jmp short loc_7F82EFB3 ; --------------------------------------------------------------------------- loc_7F82EF74: ; CODE XREF: sub_7F82EF5A+14j mov [ebp+var_4], 0 lea eax, [ebp+var_4] push eax push edi call MAPIAllocateBuffer@8 test eax, eax mov eax, 0 jnz short loc_7F82EFB3 mov eax, [ebp+var_4] mov dword ptr [eax+4], 0FFFFFFFFh mov ecx, [ebp+var_4] mov dword ptr [ecx], 0 mov eax, [ebp+var_4] mov [eax+8], edi mov eax, [ebp+var_4] mov [eax+0Ch], esi mov eax, [ebp+var_4] add eax, 10h loc_7F82EFB3: ; CODE XREF: sub_7F82EF5A+18j ; sub_7F82EF5A+32j pop edi pop esi mov esp, ebp pop ebp retn 8 sub_7F82EF5A endp ; =============== S U B R O U T I N E ======================================= sub_7F82EFBB proc near ; CODE XREF: sub_7F82F0CD+45p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_8] push ebx mov ebx, [esp+4+arg_4] push esi push edi push ebp cmp [ebx-4], eax lea esi, [ebx-10h] jnz short loc_7F82EFD3 mov eax, ebx jmp short loc_7F82F009 ; --------------------------------------------------------------------------- loc_7F82EFD3: ; CODE XREF: sub_7F82EFBB+12j push eax push [esp+14h+arg_0] call sub_7F82EF5A mov ebp, eax mov eax, 0 test ebp, ebp jz short loc_7F82F009 mov eax, [esi+0Ch] mov edi, ebp mov esi, ebx mov ecx, eax shr ecx, 2 rep movsd mov ecx, eax push ebx and ecx, 3 rep movsb push [esp+14h+arg_0] call sub_7F82F010 mov eax, ebp loc_7F82F009: ; CODE XREF: sub_7F82EFBB+16j ; sub_7F82EFBB+2Bj pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82EFBB endp ; =============== S U B R O U T I N E ======================================= sub_7F82F010 proc near ; CODE XREF: sub_7F82EFBB+47p ; sub_7F82F149+1Ep arg_4 = dword ptr 8 mov eax, [esp+arg_4] sub eax, 10h cmp dword ptr [eax+4], 0FFFFFFFFh jnz short loc_7F82F02C push eax call MAPIFreeBuffer@4 test eax, eax mov eax, 1 jz short locret_7F82F02E loc_7F82F02C: ; CODE XREF: sub_7F82F010+Bj xor eax, eax locret_7F82F02E: ; CODE XREF: sub_7F82F010+1Aj retn 8 sub_7F82F010 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F031 proc near ; CODE XREF: sub_7F82F0CD+33p ; sub_7F82F16F+16p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov eax, [eax-4] retn 4 sub_7F82F031 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82F03B proc near ; CODE XREF: sub_7F8107B6+2Ep ; sub_7F81339D+13Bp ... Text = byte ptr -64h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 64h push esi push edi call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F82F058 mov edi, dword_7F83709C jmp short loc_7F82F05F ; --------------------------------------------------------------------------- loc_7F82F058: ; CODE XREF: sub_7F82F03B+13j call sub_7F824327 mov edi, eax loc_7F82F05F: ; CODE XREF: sub_7F82F03B+1Bj mov esi, [ebp+arg_0] cmp esi, 0FFFFh jbe short loc_7F82F090 push esi lea eax, [ebp+Text] push offset aCbmaxallocD ; "cbMaxAlloc %d" push eax ; LPSTR call ds:wsprintfA add esp, 0Ch lea eax, [ebp+Text] push 0 ; uType push offset aMemory ; "Memory" push eax ; lpText push 0 ; hWnd call ds:MessageBoxA loc_7F82F090: ; CODE XREF: sub_7F82F03B+2Dj cmp esi, 30h jnb short loc_7F82F09A mov esi, 30h loc_7F82F09A: ; CODE XREF: sub_7F82F03B+58j push esi push edi call sub_7F82EF5A mov edx, eax test edx, edx jnz short loc_7F82F0AB xor eax, eax jmp short loc_7F82F0C5 ; --------------------------------------------------------------------------- loc_7F82F0AB: ; CODE XREF: sub_7F82F03B+6Aj cmp [ebp+arg_4], 0 jz short loc_7F82F0C3 mov edi, edx xor eax, eax mov ecx, esi shr ecx, 2 rep stosd mov ecx, esi and ecx, 3 rep stosb loc_7F82F0C3: ; CODE XREF: sub_7F82F03B+74j mov eax, edx loc_7F82F0C5: ; CODE XREF: sub_7F82F03B+6Ej pop edi pop esi mov esp, ebp pop ebp retn 8 sub_7F82F03B endp ; =============== S U B R O U T I N E ======================================= sub_7F82F0CD proc near ; CODE XREF: sub_7F816044+45p ; sub_7F816255+D0p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi push edi push ebp call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F82F0E6 mov esi, dword_7F83709C jmp short loc_7F82F0ED ; --------------------------------------------------------------------------- loc_7F82F0E6: ; CODE XREF: sub_7F82F0CD+Fj call sub_7F824327 mov esi, eax loc_7F82F0ED: ; CODE XREF: sub_7F82F0CD+17j mov ebx, [esp+10h+arg_4] cmp ebx, 30h jnb short loc_7F82F0FB mov ebx, 30h loc_7F82F0FB: ; CODE XREF: sub_7F82F0CD+27j mov ebp, [esp+10h+arg_0] push ebp call sub_7F82F031 cmp ebx, eax mov edi, eax jnz short loc_7F82F10F mov eax, ebp jmp short loc_7F82F142 ; --------------------------------------------------------------------------- loc_7F82F10F: ; CODE XREF: sub_7F82F0CD+3Cj push ebx push ebp push esi call sub_7F82EFBB mov edx, eax test edx, edx jnz short loc_7F82F121 xor eax, eax jmp short loc_7F82F142 ; --------------------------------------------------------------------------- loc_7F82F121: ; CODE XREF: sub_7F82F0CD+4Ej cmp [esp+10h+arg_8], 0 jz short loc_7F82F140 cmp ebx, edi jbe short loc_7F82F140 sub ebx, edi xor eax, eax add edi, edx mov ecx, ebx shr ecx, 2 rep stosd mov ecx, ebx and ecx, 3 rep stosb loc_7F82F140: ; CODE XREF: sub_7F82F0CD+59j ; sub_7F82F0CD+5Dj mov eax, edx loc_7F82F142: ; CODE XREF: sub_7F82F0CD+40j ; sub_7F82F0CD+52j pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82F0CD endp ; =============== S U B R O U T I N E ======================================= sub_7F82F149 proc near ; CODE XREF: sub_7F8107B6+AEp ; sub_7F81339D+1DEp ... arg_0 = dword ptr 4 call GetCurrentProcessId cmp eax, dword_7F837098 jnz short loc_7F82F15D mov eax, dword_7F83709C jmp short loc_7F82F162 ; --------------------------------------------------------------------------- loc_7F82F15D: ; CODE XREF: sub_7F82F149+Bj call sub_7F824327 loc_7F82F162: ; CODE XREF: sub_7F82F149+12j push [esp+arg_0] push eax call sub_7F82F010 retn 4 sub_7F82F149 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F16F proc near ; CODE XREF: sub_7F82F1CA+Fp arg_0 = dword ptr 4 call GetCurrentProcessId cmp eax, dword_7F837098 jz short loc_7F82F181 call sub_7F824327 loc_7F82F181: ; CODE XREF: sub_7F82F16F+Bj push [esp+arg_0] call sub_7F82F031 retn 4 sub_7F82F16F endp ; =============== S U B R O U T I N E ======================================= sub_7F82F18D proc near ; CODE XREF: sub_7F81039F+54p ; sub_7F810567+93p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push 1 push 8 call sub_7F82F03B test eax, eax jnz short loc_7F82F19F xor eax, eax jmp short loc_7F82F1C6 ; --------------------------------------------------------------------------- loc_7F82F19F: ; CODE XREF: sub_7F82F18D+Cj mov ecx, [esp+4+arg_0] lea esi, [eax+4] test ecx, ecx jz short loc_7F82F1BE push [esp+4+arg_4] push ecx call sub_7F82F03B mov [esi], eax test eax, eax jnz short loc_7F82F1C4 xor eax, eax jmp short loc_7F82F1C6 ; --------------------------------------------------------------------------- loc_7F82F1BE: ; CODE XREF: sub_7F82F18D+1Bj mov dword ptr [esi], 0 loc_7F82F1C4: ; CODE XREF: sub_7F82F18D+2Bj mov eax, esi loc_7F82F1C6: ; CODE XREF: sub_7F82F18D+10j ; sub_7F82F18D+2Fj pop esi retn 8 sub_7F82F18D endp ; =============== S U B R O U T I N E ======================================= sub_7F82F1CA proc near ; CODE XREF: sub_7F81339D+F0p ; sub_7F817E9D+7Ap ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov eax, [eax] test eax, eax jnz short loc_7F82F1D8 xor eax, eax jmp short locret_7F82F1DE ; --------------------------------------------------------------------------- loc_7F82F1D8: ; CODE XREF: sub_7F82F1CA+8j push eax call sub_7F82F16F locret_7F82F1DE: ; CODE XREF: sub_7F82F1CA+Cj retn 4 sub_7F82F1CA endp ; =============== S U B R O U T I N E ======================================= sub_7F82F1E1 proc near ; CODE XREF: sub_7F81039F+1A7p ; sub_7F810567+230p ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi] test eax, eax jz short loc_7F82F1F2 push eax call sub_7F82F149 loc_7F82F1F2: ; CODE XREF: sub_7F82F1E1+9j sub esi, 4 push esi call sub_7F82F149 pop esi retn 4 sub_7F82F1E1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82F1FF proc near ; CODE XREF: sub_7F816BFE+6Dp ; sub_7F8181F1+169p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov edx, [esp+arg_4] mov ebp, esp test edx, edx push esi mov esi, [ebp+arg_0] mov eax, [esi] jnz short loc_7F82F22A test eax, eax jz short loc_7F82F21A push eax call sub_7F82F149 loc_7F82F21A: ; CODE XREF: sub_7F82F1FF+13j mov dword ptr [esi], 0 loc_7F82F220: ; CODE XREF: sub_7F82F1FF+45j mov eax, 1 loc_7F82F225: ; CODE XREF: sub_7F82F1FF+49j pop esi pop ebp retn 0Ch ; --------------------------------------------------------------------------- loc_7F82F22A: ; CODE XREF: sub_7F82F1FF+Fj push [ebp+arg_8] push edx test eax, eax jz short loc_7F82F23A push eax call sub_7F82F0CD jmp short loc_7F82F23F ; --------------------------------------------------------------------------- loc_7F82F23A: ; CODE XREF: sub_7F82F1FF+31j call sub_7F82F03B loc_7F82F23F: ; CODE XREF: sub_7F82F1FF+39j mov [esi], eax cmp dword ptr [esi], 0 jnz short loc_7F82F220 xor eax, eax jmp short loc_7F82F225 sub_7F82F1FF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82F24A proc near ; CODE XREF: sub_7F8116DD+4Cp ; sub_7F81339D+10Ap ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push [esp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_7F82F1FF cmp eax, 1 mov eax, 0 adc eax, 0FFFFFFFFh and eax, [ebp+arg_0] pop ebp retn 0Ch sub_7F82F24A endp ; =============== S U B R O U T I N E ======================================= sub_7F82F26E proc near ; CODE XREF: TimerFunc+12p ; sub_7F82B8D3:loc_7F82B92Ep Msg = tagMSG ptr -1Ch sub esp, 1Ch push esi push edi mov esi, offset Addend call ds:GetTickCount xor edi, edi loc_7F82F280: ; CODE XREF: sub_7F82F26E+4Bj push esi ; lpAddend call ds:InterlockedIncrement test eax, eax jz short loc_7F82F2BB push esi ; lpAddend call ds:InterlockedDecrement lea eax, [esp+24h+Msg] push edi ; wRemoveMsg push edi ; wMsgFilterMax push edi ; wMsgFilterMin push edi ; hWnd push eax ; lpMsg call ds:PeekMessageA cmp dword_7F8393C4, edi jz short loc_7F82F2B1 push 46h ; uExitCode call ds:ExitProcess ; --------------------------------------------------------------------------- loc_7F82F2B1: ; CODE XREF: sub_7F82F26E+39j push 0Ah ; dwMilliseconds call ds:Sleep jmp short loc_7F82F280 ; --------------------------------------------------------------------------- loc_7F82F2BB: ; CODE XREF: sub_7F82F26E+1Bj call ds:__imp_GetCurrentProcessId pop edi mov dword_7F8393BC, eax mov eax, 1 pop esi add esp, 1Ch retn sub_7F82F26E endp ; =============== S U B R O U T I N E ======================================= sub_7F82F2D1 proc near ; CODE XREF: TimerFunc+28p ; sub_7F82B8D3+37p cmp dword_7F8393C4, 0 jz short loc_7F82F2E2 push 46h ; uExitCode call ds:ExitProcess ; --------------------------------------------------------------------------- loc_7F82F2E2: ; CODE XREF: sub_7F82F2D1+7j cmp Addend, 0FFFFFFFFh mov eax, 0 jz short locret_7F82F30A mov dword_7F8393BC, 0 push offset Addend ; lpAddend call ds:InterlockedDecrement mov eax, 1 locret_7F82F30A: ; CODE XREF: sub_7F82F2D1+1Dj retn sub_7F82F2D1 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F30B proc near ; CODE XREF: TimerFunc+1p mov eax, dword_7F8393BC retn sub_7F82F30B endp ; =============== S U B R O U T I N E ======================================= sub_7F82F311 proc near ; CODE XREF: sub_7F816468+30p arg_0 = dword ptr 4 mov eax, dword_7F8393BC mov ecx, [esp+arg_0] mov dword_7F8393BC, ecx retn 4 sub_7F82F311 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F323 proc near ; CODE XREF: sub_7F815751+135p ; sub_7F815751+155p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dword_7F8393C8, eax retn 4 sub_7F82F323 endp ; --------------------------------------------------------------------------- align 10h ; [00000006 BYTES: COLLAPSED FUNCTION UlRelease@4. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION HrSetOneProp@8. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION HrGetOneProp@12. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIFreeBuffer@4. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION FreeProws@4. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION HrQueryAllRows@24. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIUninitialize@0. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIAllocateBuffer@8. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIAllocateMore@12. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIGetDefaultMalloc@0. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIInitialize@4. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION HrValidateIPMSubtree@20. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION PpropFindProp@12. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION SzFindCh@8. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPIAdminProfiles@8. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION MAPILogonEx@20. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION HrAllocAdviseSink@12. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION CreateIProp@24. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION CreateTable@36. PRESS CTRL-NUMPAD+ TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7F82F3A2 proc near ; CODE XREF: sub_7F82F462+30p ; sub_7F82F462+ACp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = byte ptr 0Ch mov ecx, [esp+arg_0] mov eax, 30303030h mov dl, [esp+arg_8] mov dword ptr [ecx], 4950414Dh mov dword ptr [ecx+4], 2A50482Dh mov [ecx+8], eax mov [ecx+0Ch], eax add ecx, 0Fh mov eax, [esp+arg_4] mov byte ptr [ecx+1], 0 mov [ecx-8], dl test eax, eax jz short locret_7F82F3F0 loc_7F82F3D4: ; CODE XREF: sub_7F82F3A2+4Cj mov edx, eax and edx, 0Fh cmp edx, 0Ah jl short loc_7F82F3E3 add dl, 37h jmp short loc_7F82F3E6 ; --------------------------------------------------------------------------- loc_7F82F3E3: ; CODE XREF: sub_7F82F3A2+3Aj add dl, 30h loc_7F82F3E6: ; CODE XREF: sub_7F82F3A2+3Fj shr eax, 4 mov [ecx], dl dec ecx test eax, eax jnz short loc_7F82F3D4 locret_7F82F3F0: ; CODE XREF: sub_7F82F3A2+30j retn 0Ch sub_7F82F3A2 endp ; =============== S U B R O U T I N E ======================================= ; int __stdcall sub_7F82F3F3(HANDLE hHandle, DWORD dwMilliseconds) sub_7F82F3F3 proc near ; CODE XREF: sub_7F801AF7+39p ; sub_7F801B61+D8p ... hHandle = dword ptr 4 dwMilliseconds = dword ptr 8 push [esp+dwMilliseconds] ; dwMilliseconds push [esp+4+hHandle] ; hHandle call ds:WaitForSingleObject mov ecx, eax test ecx, ecx jz short loc_7F82F414 mov eax, 0 cmp ecx, 80h jnz short locret_7F82F419 loc_7F82F414: ; CODE XREF: sub_7F82F3F3+12j mov eax, 1 locret_7F82F419: ; CODE XREF: sub_7F82F3F3+1Fj retn 8 sub_7F82F3F3 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F41C proc near ; CODE XREF: sub_7F82F462+1Ap arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] push 1 ; dwRevision lea edi, [esi+0Ch] push edi ; pSecurityDescriptor call ds:InitializeSecurityDescriptor test eax, eax jnz short loc_7F82F436 xor eax, eax jmp short loc_7F82F45D ; --------------------------------------------------------------------------- loc_7F82F436: ; CODE XREF: sub_7F82F41C+14j push 0 ; bDaclDefaulted push 0 ; pDacl push 1 ; bDaclPresent push edi ; pSecurityDescriptor call ds:SetSecurityDescriptorDacl test eax, eax mov eax, 0 jz short loc_7F82F45D mov eax, 1 mov dword ptr [esi], 0Ch mov [esi+4], edi mov [esi+8], eax loc_7F82F45D: ; CODE XREF: sub_7F82F41C+18j ; sub_7F82F41C+2Ej pop edi pop esi retn 4 sub_7F82F41C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82F462(int, int, DWORD dwMaximumSizeLow) sub_7F82F462 proc near ; CODE XREF: sub_7F82F6AD+5Ap ; sub_7F82F6AD+71p Buffer = _MEMORY_BASIC_INFORMATION ptr -6Ch FileMappingAttributes= _SECURITY_ATTRIBUTES ptr -50h Name = byte ptr -30h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 hObject = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch dwMaximumSizeLow= dword ptr 10h push ebp mov ebp, esp sub esp, 6Ch push ebx push esi push edi xor esi, esi xor edi, edi lea eax, [ebp+FileMappingAttributes] push eax mov [ebp+var_8], esi mov [ebp+hObject], esi mov [ebp+var_C], esi call sub_7F82F41C test eax, eax jz loc_7F82F65D push 21h lea ecx, [ebp+Name] push [ebp+arg_4] push ecx call sub_7F82F3A2 lea ecx, [ebp+Name] lea eax, [ebp+FileMappingAttributes] push ecx ; lpName push [ebp+dwMaximumSizeLow] ; dwMaximumSizeLow push esi ; dwMaximumSizeHigh push 4000004h ; flProtect push eax ; lpFileMappingAttributes push 0FFFFFFFFh ; hFile call ds:CreateFileMappingA mov [ebp+hObject], eax cmp eax, esi jz loc_7F82F65D call ds:GetLastError cmp eax, 0B7h jnz short loc_7F82F4E1 cmp [ebp+arg_0], 2 jnz short loc_7F82F4EB push [ebp+hObject] ; hObject call ds:CloseHandle mov eax, 0FFFFFFFFh jmp loc_7F82F6A4 ; --------------------------------------------------------------------------- loc_7F82F4E1: ; CODE XREF: sub_7F82F462+64j cmp [ebp+arg_0], 0 jz loc_7F82F65D loc_7F82F4EB: ; CODE XREF: sub_7F82F462+6Aj xor ebx, ebx push ebx ; dwNumberOfBytesToMap push ebx ; dwFileOffsetLow push ebx ; dwFileOffsetHigh push 2 ; dwDesiredAccess push [ebp+hObject] ; hFileMappingObject call ds:MapViewOfFile mov edi, eax test edi, edi jz loc_7F82F668 push 2Ah lea ecx, [ebp+Name] push [ebp+arg_4] push ecx call sub_7F82F3A2 lea ecx, [ebp+Name] lea edx, [ebp+FileMappingAttributes] push ecx ; lpName push ebx ; bInitialOwner push edx ; lpMutexAttributes call ds:CreateMutexA mov [ebp+var_8], eax cmp eax, ebx jz loc_7F82F65D push 2Bh lea ecx, [ebp+Name] push [ebp+arg_4] push ecx call sub_7F82F3A2 lea ecx, [ebp+Name] lea edx, [ebp+FileMappingAttributes] push ecx ; lpName push ebx ; bInitialOwner push edx ; lpMutexAttributes call ds:CreateMutexA mov esi, eax test esi, esi jz loc_7F82F65D push 0FFFFFFFFh ; dwMilliseconds push esi ; hHandle call sub_7F82F3F3 test eax, eax jz loc_7F82F65D mov eax, [ebp+var_8] mov ecx, [ebp+hObject] mov [ebp+var_1C], edi mov [ebp+var_18], esi push 1Ch ; dwLength lea edx, [ebp+Buffer] push edx ; lpBuffer mov [ebp+var_14], eax push edi ; lpAddress mov [ebp+var_10], ecx mov [ebp+var_C], 1 call ds:VirtualQuery cmp [ebp+Buffer.State], 2000h jnz loc_7F82F628 push 4 ; flProtect push 1000h ; flAllocationType push 10000h ; dwSize push edi ; lpAddress call ds:VirtualAlloc test eax, eax jz loc_7F82F65D mov ecx, [ebp+dwMaximumSizeLow] mov edx, 0FFF0h shr ecx, 10h mov [edi+0Ch], ebx add ecx, ecx mov eax, [ebp+dwMaximumSizeLow] mov dword ptr [edi+10h], 10000h add ecx, 1Bh mov [edi+14h], eax and cl, 0FCh sub edx, ecx lea eax, [ecx-5] and ax, 0FFFCh mov [edi+18h], dx mov [edi+6], bx or dl, 1 mov [edi+4], ax mov dword ptr [edi], 0FC1E01CDh movzx eax, word ptr [edi+4] and al, 0FCh mov [eax+edi+0Eh], bx lea eax, [eax+edi+8] mov [eax+4], dx mov dword ptr [eax], 0FEE1CD01h lea eax, [edi+0FFF8h] mov [eax+6], cx mov ecx, [ebp+arg_4] mov [eax+4], bx mov dword ptr [eax], 0FC1E01CDh mov [edi+8], ecx jmp short loc_7F82F640 ; --------------------------------------------------------------------------- loc_7F82F628: ; CODE XREF: sub_7F82F462+12Fj push 10000h ; ucb push edi ; lp call ds:IsBadWritePtr test eax, eax jnz short loc_7F82F65D mov eax, [ebp+arg_4] cmp [edi+8], eax jnz short loc_7F82F65D loc_7F82F640: ; CODE XREF: sub_7F82F462+1C4j push 10h lea eax, [ebp+var_1C] push eax call sub_7F82F76F test eax, eax jz short loc_7F82F65D add eax, [ebp+var_1C] lea esi, [ebp+var_1C] mov edi, eax movsd movsd movsd movsd jmp short loc_7F82F6A4 ; --------------------------------------------------------------------------- loc_7F82F65D: ; CODE XREF: sub_7F82F462+21j ; sub_7F82F462+53j ... test edi, edi jz short loc_7F82F668 push edi ; lpBaseAddress call ds:UnmapViewOfFile loc_7F82F668: ; CODE XREF: sub_7F82F462+9Dj ; sub_7F82F462+1FDj test esi, esi jz short loc_7F82F684 cmp [ebp+var_C], 0 jz short loc_7F82F679 push esi ; hMutex call ds:ReleaseMutex loc_7F82F679: ; CODE XREF: sub_7F82F462+20Ej test esi, esi jz short loc_7F82F684 push esi ; hObject call ds:CloseHandle loc_7F82F684: ; CODE XREF: sub_7F82F462+208j ; sub_7F82F462+219j cmp [ebp+var_8], 0 jz short loc_7F82F693 push [ebp+var_8] ; hObject call ds:CloseHandle loc_7F82F693: ; CODE XREF: sub_7F82F462+226j cmp [ebp+hObject], 0 jz short loc_7F82F6A2 push [ebp+hObject] ; hObject call ds:CloseHandle loc_7F82F6A2: ; CODE XREF: sub_7F82F462+235j xor eax, eax loc_7F82F6A4: ; CODE XREF: sub_7F82F462+7Aj ; sub_7F82F462+1F9j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 0Ch sub_7F82F462 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __stdcall sub_7F82F6AD(int, int, DWORD dwMaximumSizeLow) sub_7F82F6AD proc near ; CODE XREF: sub_7F801D78+16p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch dwMaximumSizeLow= dword ptr 10h push ebp mov ecx, [esp+arg_0] mov ebp, esp test ecx, ecx push esi push edi jz short loc_7F82F6C4 cmp [ebp+arg_4], 0 jge short loc_7F82F6C4 xor eax, eax jmp short loc_7F82F723 ; --------------------------------------------------------------------------- loc_7F82F6C4: ; CODE XREF: sub_7F82F6AD+Bj ; sub_7F82F6AD+11j mov esi, [ebp+dwMaximumSizeLow] test esi, esi jnz short loc_7F82F6D0 mov esi, 100000h loc_7F82F6D0: ; CODE XREF: sub_7F82F6AD+1Cj mov eax, 10000h cmp esi, eax jnb short loc_7F82F6DB mov esi, eax loc_7F82F6DB: ; CODE XREF: sub_7F82F6AD+2Aj mov eax, 800000h cmp esi, eax jbe short loc_7F82F6E6 mov esi, eax loc_7F82F6E6: ; CODE XREF: sub_7F82F6AD+35j test ecx, ecx jz short loc_7F82F713 cmp [ebp+arg_4], 0 jnz short loc_7F82F713 call ds:GetTickCount and eax, 3FFFFFFFh or eax, 80000000h mov edi, eax loc_7F82F702: ; CODE XREF: sub_7F82F6AD+62j inc edi push esi ; dwMaximumSizeLow push edi ; int push 2 ; int call sub_7F82F462 cmp eax, 0FFFFFFFFh jz short loc_7F82F702 jmp short loc_7F82F723 ; --------------------------------------------------------------------------- loc_7F82F713: ; CODE XREF: sub_7F82F6AD+3Bj ; sub_7F82F6AD+41j push esi ; dwMaximumSizeLow cmp ecx, 1 push [ebp+arg_4] ; int sbb eax, eax inc eax push eax ; int call sub_7F82F462 loc_7F82F723: ; CODE XREF: sub_7F82F6AD+15j ; sub_7F82F6AD+64j pop edi pop esi pop ebp retn 0Ch sub_7F82F6AD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82F729 proc near ; CODE XREF: sub_7F801AF7+59p lpBaseAddress = dword ptr -10h hObject = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ecx, [esp+arg_0] mov ebp, esp sub esp, 10h push esi push edi lea edi, [ebp+lpBaseAddress] mov esi, ecx movsd movsd movsd movsd mov eax, ecx sub eax, [ecx] push eax push ecx call sub_7F82FA86 push [ebp+lpBaseAddress] ; lpBaseAddress call ds:UnmapViewOfFile push [ebp+hObject] ; hObject mov esi, ds:CloseHandle call esi ; CloseHandle push [ebp+var_8] ; hObject call esi ; CloseHandle push [ebp+var_4] ; hObject call esi ; CloseHandle pop edi pop esi mov esp, ebp pop ebp retn 4 sub_7F82F729 endp ; =============== S U B R O U T I N E ======================================= sub_7F82F76F proc near ; CODE XREF: sub_7F82F462+1E4p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] sub esp, 4 cmp eax, 0FFF0h push ebx push esi push edi push ebp jbe short loc_7F82F788 xor eax, eax jmp loc_7F82F885 ; --------------------------------------------------------------------------- loc_7F82F788: ; CODE XREF: sub_7F82F76F+10j add eax, 3 push 0FFFFFFFFh ; dwMilliseconds and al, 0FCh mov ecx, [esp+18h+arg_0] mov [esp+18h+arg_4], eax push dword ptr [ecx+8] ; hHandle call sub_7F82F3F3 test eax, eax jnz short loc_7F82F7AA xor eax, eax jmp loc_7F82F885 ; --------------------------------------------------------------------------- loc_7F82F7AA: ; CODE XREF: sub_7F82F76F+32j xor edi, edi mov eax, [esp+14h+arg_0] mov esi, [eax] mov ebx, esi lea ebp, [esi+18h] mov eax, [esi+10h] add eax, esi mov [esp+14h+var_4], eax cmp eax, esi jbe short loc_7F82F7F3 loc_7F82F7C4: ; CODE XREF: sub_7F82F76F+82j movzx eax, word ptr [ebp+0] cmp eax, [esp+14h+arg_4] jb short loc_7F82F7E4 push [esp+14h+arg_4] push ebx push ebp push esi call sub_7F82F88F mov edi, eax test edi, edi jnz loc_7F82F876 loc_7F82F7E4: ; CODE XREF: sub_7F82F76F+5Dj add ebx, 10000h add ebp, 2 cmp [esp+14h+var_4], ebx ja short loc_7F82F7C4 loc_7F82F7F3: ; CODE XREF: sub_7F82F76F+53j mov eax, [esi+10h] cmp [esi+14h], eax jbe short loc_7F82F876 push 4 ; flProtect push 1000h ; flAllocationType push 10000h ; dwSize push ebx ; lpAddress call ds:VirtualAlloc test eax, eax jz short loc_7F82F876 mov cx, word ptr [esp+14h+arg_4] xor edx, edx add dword ptr [esi+10h], 10000h mov [ebx+6], dx mov eax, [esp+14h+arg_4] mov di, 0FFE8h and al, 0FCh sub di, cx lea eax, [eax+ebx+8] or di, 1 mov [ebx+4], cx mov dword ptr [ebx], 0FC1E01CDh add cx, 8 mov [eax+6], dx mov [eax+4], di mov dword ptr [eax], 0FEE1CD01h mov ax, [eax+4] mov [ebp+0], ax lea eax, [ebx+0FFF8h] mov [eax+6], cx sub ebx, esi mov [eax+4], dx lea edi, [ebx+8] mov dword ptr [eax], 0FC1E01CDh loc_7F82F876: ; CODE XREF: sub_7F82F76F+6Fj ; sub_7F82F76F+8Aj ... mov eax, [esp+14h+arg_0] push dword ptr [eax+8] ; hMutex call ds:ReleaseMutex mov eax, edi loc_7F82F885: ; CODE XREF: sub_7F82F76F+14j ; sub_7F82F76F+36j pop ebp pop edi pop esi pop ebx add esp, 4 retn 8 sub_7F82F76F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82F88F proc near ; CODE XREF: sub_7F82F76F+66p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp xor eax, eax mov ebp, esp sub esp, 8 push ebx mov ecx, [ebp+arg_8] push esi mov edx, ecx push edi lea esi, [ecx+0FFF8h] xor edi, edi mov [ebp+var_8], eax mov [ebp+var_4], esi cmp esi, ecx jbe short loc_7F82F8FC loc_7F82F8B1: ; CODE XREF: sub_7F82F88F+6Bj mov bx, [edx+4] mov si, bx and si, 1 jz short loc_7F82F8D6 cmp dword ptr [edx], 0FEE1CD01h jnz short loc_7F82F8D6 movzx esi, bx cmp [ebp+arg_C], esi jb short loc_7F82F90B cmp edi, esi jnb short loc_7F82F8EC mov edi, esi jmp short loc_7F82F8EC ; --------------------------------------------------------------------------- loc_7F82F8D6: ; CODE XREF: sub_7F82F88F+2Dj ; sub_7F82F88F+35j test si, si jnz short loc_7F82F8E3 cmp dword ptr [edx], 0FC1E01CDh jz short loc_7F82F8EC loc_7F82F8E3: ; CODE XREF: sub_7F82F88F+4Aj inc [ebp+var_8] cmp [ebp+var_8], 2 ja short loc_7F82F902 loc_7F82F8EC: ; CODE XREF: sub_7F82F88F+41j ; sub_7F82F88F+45j ... movzx esi, bx and esi, 0FFFFFFFCh add esi, 8 add edx, esi cmp [ebp+var_4], edx ja short loc_7F82F8B1 loc_7F82F8FC: ; CODE XREF: sub_7F82F88F+20j mov ecx, [ebp+arg_4] mov [ecx], di loc_7F82F902: ; CODE XREF: sub_7F82F88F+5Bj ; sub_7F82F88F+F2j pop edi pop esi pop ebx mov esp, ebp pop ebp retn 10h ; --------------------------------------------------------------------------- loc_7F82F90B: ; CODE XREF: sub_7F82F88F+3Dj lea esi, [edx+4] mov ax, [esi] and ax, 0FFFEh mov [esi], ax movzx eax, ax mov edi, eax sub edi, [ebp+arg_C] cmp edi, 10h jbe short loc_7F82F972 and al, 0FCh lea edi, [eax+edx+8] movzx eax, word ptr [edi+6] add eax, ecx cmp eax, edx jnz short loc_7F82F972 mov eax, [ebp+arg_C] and al, 0FCh sub eax, ecx add eax, edx add ax, 8 movzx ebx, ax mov [edi+6], ax lea edi, [ebx+ecx] mov eax, edx sub eax, ecx mov [edi+6], ax mov ax, word ptr [ebp+arg_C] mov bx, [esi] sub bx, ax sub bx, 8 or bl, 1 mov [edi+4], bx mov [esi], ax mov dword ptr [edi], 0FEE1CD01h loc_7F82F972: ; CODE XREF: sub_7F82F88F+94j ; sub_7F82F88F+A4j mov dword ptr [edx], 0FC1E01CDh sub edx, ecx sub edx, [ebp+arg_0] lea eax, [edx+ecx+8] jmp loc_7F82F902 sub_7F82F88F endp ; =============== S U B R O U T I N E ======================================= sub_7F82F986 proc near ; CODE XREF: sub_7F82FA86+2Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] push ebx push esi and ecx, 0FFFF0000h add ecx, [esp+8+arg_0] push edi mov eax, [esp+0Ch+arg_8] push ebp and eax, 0FFFFh mov ebx, 0FC1E01CDh lea edx, [eax+ecx-8] cmp [edx], ebx jnz loc_7F82FA7F movzx eax, word ptr [edx+4] and al, 0FCh lea esi, [eax+edx+8] mov ax, [esi+4] test al, 1 jz short loc_7F82FA14 mov ebp, 0FEE1CD01h cmp [esi], ebp jnz short loc_7F82FA14 movzx edi, word ptr [esi+6] add edi, ecx cmp edi, edx jnz short loc_7F82FA14 movzx eax, ax and al, 0FCh lea edi, [eax+esi+8] mov eax, [edi] cmp eax, ebx jz short loc_7F82F9EA cmp eax, ebp jnz short loc_7F82FA14 loc_7F82F9EA: ; CODE XREF: sub_7F82F986+5Ej movzx eax, word ptr [edi+6] add eax, ecx cmp eax, esi jnz short loc_7F82FA14 mov dword ptr [esi], 0FDD0EF10h mov ax, [esi+4] mov esi, edi and ax, 0FFFEh add ax, 8 add [edx+4], ax mov eax, edx sub eax, ecx mov [edi+6], ax loc_7F82FA14: ; CODE XREF: sub_7F82F986+3Cj ; sub_7F82F986+45j ... or byte ptr [edx+4], 1 mov ebx, 0FEE1CD01h cmp ecx, edx mov [edx], ebx jz short loc_7F82FA6B movzx eax, word ptr [edx+6] lea edi, [eax+ecx] test byte ptr [edi+4], 1 jz short loc_7F82FA6B cmp [edi], ebx jnz short loc_7F82FA6B mov eax, [esi] cmp eax, 0FC1E01CDh jz short loc_7F82FA41 cmp eax, ebx jnz short loc_7F82FA6B loc_7F82FA41: ; CODE XREF: sub_7F82F986+B5j movzx eax, word ptr [esi+6] add eax, ecx cmp eax, edx jnz short loc_7F82FA6B mov dword ptr [edx], 0FDD0EF10h mov ax, [edx+4] mov edx, edi and ax, 0FFFEh add ax, 8 add [edi+4], ax mov eax, edi sub eax, ecx mov [esi+6], ax loc_7F82FA6B: ; CODE XREF: sub_7F82F986+9Bj ; sub_7F82F986+A8j ... mov ax, [edx+4] mov ecx, [esp+10h+arg_4] cmp [ecx], ax jnb short loc_7F82FA7F and ax, 0FFFEh mov [ecx], ax loc_7F82FA7F: ; CODE XREF: sub_7F82F986+26j ; sub_7F82F986+F0j pop ebp pop edi pop esi pop ebx retn 0Ch sub_7F82F986 endp ; =============== S U B R O U T I N E ======================================= sub_7F82FA86 proc near ; CODE XREF: sub_7F82F729+1Bp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov ebx, [esp+8+arg_0] push edi mov esi, [esp+0Ch+arg_4] mov edi, [ebx+8] test esi, esi jz short loc_7F82FABE push 0FFFFFFFFh ; dwMilliseconds push edi ; hHandle call sub_7F82F3F3 test eax, eax jz short loc_7F82FABE mov ecx, [ebx] mov eax, esi shr eax, 10h push esi lea eax, [ecx+eax*2+18h] push eax push ecx call sub_7F82F986 push edi ; hMutex call ds:ReleaseMutex loc_7F82FABE: ; CODE XREF: sub_7F82FA86+10j ; sub_7F82FA86+1Cj pop edi pop esi pop ebx retn 8 sub_7F82FA86 endp ; [00000006 BYTES: COLLAPSED FUNCTION GetFileTitleA. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION GetSaveFileNameA. PRESS CTRL-NUMPAD+ TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION GetOpenFileNameA. PRESS CTRL-NUMPAD+ TO EXPAND] align 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_7F82FAD8(PVOID TargetFrame) sub_7F82FAD8 proc near ; CODE XREF: sub_7F82FBD0+5Ap TargetFrame = dword ptr 8 push ebp mov ebp, esp push ebx push esi push edi push ebp push 0 ; ReturnValue push 0 ; ExceptionRecord push offset loc_7F82FAF0 ; TargetIp push [ebp+TargetFrame] ; TargetFrame call RtlUnwind loc_7F82FAF0: ; DATA XREF: sub_7F82FAD8+Bo pop ebp pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F82FAD8 endp ; =============== S U B R O U T I N E ======================================= sub_7F82FAF8 proc near ; DATA XREF: sub_7F82FB1A+Ao ; .text:7F82FB8Bo arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_C = dword ptr 10h mov ecx, [esp+arg_0] test dword ptr [ecx+4], 6 mov eax, 1 jz short locret_7F82FB19 mov eax, [esp+arg_4] mov edx, [esp+arg_C] mov [edx], eax mov eax, 3 locret_7F82FB19: ; CODE XREF: sub_7F82FAF8+10j retn sub_7F82FAF8 endp ; =============== S U B R O U T I N E ======================================= sub_7F82FB1A proc near ; CODE XREF: sub_7F82FBD0+67p ; sub_7F82FBD0+A7p ... var_14 = dword ptr -14h arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi mov eax, [esp+0Ch+arg_0] push eax push 0FFFFFFFEh push offset sub_7F82FAF8 push large dword ptr fs:0 mov large fs:0, esp loc_7F82FB37: ; CODE XREF: sub_7F82FB1A:loc_7F82FB72j mov eax, [esp+1Ch+arg_0] mov ebx, [eax+8] mov esi, [eax+0Ch] cmp esi, 0FFFFFFFFh jz short loc_7F82FB74 cmp esi, [esp+1Ch+arg_4] jz short loc_7F82FB74 lea esi, [esi+esi*2] mov ecx, [ebx+esi*4] mov [esp+1Ch+var_14], ecx mov [eax+0Ch], ecx cmp dword ptr [ebx+esi*4+4], 0 jnz short loc_7F82FB72 push 101h mov eax, [ebx+esi*4+8] call sub_7F82FBAE call dword ptr [ebx+esi*4+8] loc_7F82FB72: ; CODE XREF: sub_7F82FB1A+44j jmp short loc_7F82FB37 ; --------------------------------------------------------------------------- loc_7F82FB74: ; CODE XREF: sub_7F82FB1A+2Aj ; sub_7F82FB1A+30j pop large dword ptr fs:0 add esp, 0Ch pop edi pop esi pop ebx retn sub_7F82FB1A endp ; --------------------------------------------------------------------------- xor eax, eax mov ecx, large fs:0 cmp dword ptr [ecx+4], offset sub_7F82FAF8 jnz short locret_7F82FBA4 mov edx, [ecx+0Ch] mov edx, [edx+0Ch] cmp [ecx+8], edx jnz short locret_7F82FBA4 mov eax, 1 locret_7F82FBA4: ; CODE XREF: .text:7F82FB92j ; .text:7F82FB9Dj retn ; --------------------------------------------------------------------------- push ebx push ecx mov ebx, offset unk_7F839740 jmp short loc_7F82FBB8 ; =============== S U B R O U T I N E ======================================= sub_7F82FBAE proc near ; CODE XREF: sub_7F82FB1A+4Fp ; sub_7F82FBD0+78p push ebx push ecx mov ebx, offset unk_7F839740 mov ecx, [ebp+8] loc_7F82FBB8: ; CODE XREF: .text:7F82FBACj mov [ebx+8], ecx mov [ebx+4], eax mov [ebx+0Ch], ebp pop ecx pop ebx retn 4 sub_7F82FBAE endp ; --------------------------------------------------------------------------- align 4 push esi inc ebx xor dh, [eax] pop eax inc ebx xor [eax], dh ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_7F82FBD0(int, PVOID TargetFrame, int) sub_7F82FBD0 proc near ; DATA XREF: ScMMFVerify@16+10o ; ScMMFMigrateToMDB@48+10o ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 TargetFrame = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi push ebp cld mov ebx, [ebp+TargetFrame] mov eax, [ebp+arg_0] test dword ptr [eax+4], 6 jnz loc_7F82FC70 mov [ebp+var_8], eax mov eax, [ebp+arg_8] mov [ebp+var_4], eax lea eax, [ebp+var_8] mov [ebx-4], eax mov esi, [ebx+0Ch] mov edi, [ebx+8] loc_7F82FC03: ; CODE XREF: sub_7F82FBD0+90j cmp esi, 0FFFFFFFFh jz short loc_7F82FC69 lea ecx, [esi+esi*2] cmp dword ptr [edi+ecx*4+4], 0 jz short loc_7F82FC57 push esi push ebp lea ebp, [ebx+10h] call dword ptr [edi+ecx*4+4] pop ebp pop esi mov ebx, [ebp+TargetFrame] or eax, eax jz short loc_7F82FC57 js short loc_7F82FC62 mov edi, [ebx+8] push ebx ; TargetFrame call sub_7F82FAD8 add esp, 4 lea ebp, [ebx+10h] push esi push ebx call sub_7F82FB1A add esp, 8 lea ecx, [esi+esi*2] push 1 mov eax, [edi+ecx*4+8] call sub_7F82FBAE mov eax, [edi+ecx*4] mov [ebx+0Ch], eax call dword ptr [edi+ecx*4+8] loc_7F82FC57: ; CODE XREF: sub_7F82FBD0+40j ; sub_7F82FBD0+52j mov edi, [ebx+8] lea ecx, [esi+esi*2] mov esi, [edi+ecx*4] jmp short loc_7F82FC03 ; --------------------------------------------------------------------------- loc_7F82FC62: ; CODE XREF: sub_7F82FBD0+54j mov eax, 0 jmp short loc_7F82FC85 ; --------------------------------------------------------------------------- loc_7F82FC69: ; CODE XREF: sub_7F82FBD0+36j mov eax, 1 jmp short loc_7F82FC85 ; --------------------------------------------------------------------------- loc_7F82FC70: ; CODE XREF: sub_7F82FBD0+18j push ebp lea ebp, [ebx+10h] push 0FFFFFFFFh push ebx call sub_7F82FB1A add esp, 8 pop ebp mov eax, 1 loc_7F82FC85: ; CODE XREF: sub_7F82FBD0+97j ; sub_7F82FBD0+9Ej pop ebp pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_7F82FBD0 endp ; --------------------------------------------------------------------------- push ebp mov ecx, [esp+8] mov ebp, [ecx] mov eax, [ecx+1Ch] push eax mov eax, [ecx+18h] push eax call sub_7F82FB1A add esp, 8 pop ebp retn 4 ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82FCB0 proc near ; CODE XREF: sub_7F80530D+4Bp ; sub_7F80530D+77p ... arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp push edi mov edi, [ebp+arg_0] xor eax, eax or ecx, 0FFFFFFFFh repne scasb inc ecx neg ecx dec edi mov al, [ebp+arg_4] std repne scasb inc edi cmp [edi], al jz short loc_7F82FCD1 xor eax, eax jmp short loc_7F82FCD3 ; --------------------------------------------------------------------------- loc_7F82FCD1: ; CODE XREF: sub_7F82FCB0+1Bj mov eax, edi loc_7F82FCD3: ; CODE XREF: sub_7F82FCB0+1Fj cld pop edi leave retn sub_7F82FCB0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82FCE0 proc near ; CODE XREF: sub_7F80AB5D+1FFp ; sub_7F813AA8+B6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push esi mov esi, [ebp+arg_4] mov edi, [ebp+arg_0] mov ecx, [ebp+arg_8] cmp edi, esi jbe short loc_7F82FCFE mov eax, esi add eax, ecx cmp edi, eax jb loc_7F82FD8C loc_7F82FCFE: ; CODE XREF: sub_7F82FCE0+10j test edi, 3 jnz short loc_7F82FD58 mov edx, ecx and edx, 3 shr ecx, 2 rep movsd jmp ds:off_7F82FD18[edx*4] ; --------------------------------------------------------------------------- align 4 off_7F82FD18 dd offset loc_7F82FD50 ; DATA XREF: sub_7F82FCE0+30r ; sub_7F82FCE0+96r dd offset loc_7F82FD4C dd offset loc_7F82FD3C dd offset loc_7F82FD28 ; --------------------------------------------------------------------------- loc_7F82FD28: ; CODE XREF: sub_7F82FCE0+30j ; sub_7F82FCE0+96j ; DATA XREF: ... mov ax, [esi] mov [edi], ax mov al, [esi+2] mov [edi+2], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FD3C: ; CODE XREF: sub_7F82FCE0+30j ; sub_7F82FCE0+96j ; DATA XREF: ... mov ax, [esi] mov [edi], ax mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FD4C: ; CODE XREF: sub_7F82FCE0+30j ; sub_7F82FCE0+96j ; DATA XREF: ... mov al, [esi] mov [edi], al loc_7F82FD50: ; CODE XREF: sub_7F82FCE0+30j ; sub_7F82FCE0+96j ; DATA XREF: ... mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FD58: ; CODE XREF: sub_7F82FCE0+24j cmp ecx, 0Ch jbe short loc_7F82FD80 mov edx, edi neg edx and edx, 3 sub ecx, edx mov eax, ecx mov ecx, edx rep movsb mov ecx, eax and eax, 3 shr ecx, 2 rep movsd jmp ds:off_7F82FD18[eax*4] ; --------------------------------------------------------------------------- align 10h loc_7F82FD80: ; CODE XREF: sub_7F82FCE0+7Bj rep movsb mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FD8C: ; CODE XREF: sub_7F82FCE0+18j std add esi, ecx add edi, ecx test edi, 3 jnz short loc_7F82FDF8 mov edx, ecx and edx, 3 sub esi, 4 sub edi, 4 shr ecx, 2 rep movsd jmp ds:off_7F82FDB0[edx*4] ; --------------------------------------------------------------------------- off_7F82FDB0 dd offset loc_7F82FDEE ; DATA XREF: sub_7F82FCE0+C9r ; sub_7F82FCE0+13Cr dd offset loc_7F82FDE8 dd offset loc_7F82FDD8 dd offset loc_7F82FDC0 ; --------------------------------------------------------------------------- loc_7F82FDC0: ; CODE XREF: sub_7F82FCE0+C9j ; sub_7F82FCE0+13Cj ; DATA XREF: ... mov ax, [esi+2] mov [edi+2], ax mov al, [esi+1] mov [edi+1], al cld mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FDD8: ; CODE XREF: sub_7F82FCE0+C9j ; sub_7F82FCE0+13Cj ; DATA XREF: ... mov ax, [esi+2] mov [edi+2], ax cld mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- loc_7F82FDE8: ; CODE XREF: sub_7F82FCE0+C9j ; sub_7F82FCE0+13Cj ; DATA XREF: ... mov al, [esi+3] mov [edi+3], al loc_7F82FDEE: ; CODE XREF: sub_7F82FCE0+C9j ; sub_7F82FCE0+13Cj ; DATA XREF: ... cld mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_7F82FDF8: ; CODE XREF: sub_7F82FCE0+B7j dec esi dec edi cmp ecx, 0Ch jbe short loc_7F82FE24 neg edx and edx, 3 sub ecx, edx mov eax, ecx mov ecx, edx rep movsb mov ecx, eax and eax, 3 sub esi, 3 sub edi, 3 shr ecx, 2 rep movsd jmp ds:off_7F82FDB0[eax*4] ; --------------------------------------------------------------------------- align 4 loc_7F82FE24: ; CODE XREF: sub_7F82FCE0+11Dj rep movsb cld mov eax, [ebp+arg_0] pop esi pop edi leave retn sub_7F82FCE0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F82FE30 proc near ; CODE XREF: sub_7F80E7F6+126p ; sub_7F80F023+D7p ... arg_0 = dword ptr 4 arg_4 = byte ptr 8 mov eax, [esp+arg_0] mov cl, [esp+arg_4] loc_7F82FE38: ; CODE XREF: sub_7F82FE30+13j mov dl, [eax] cmp cl, dl jz short locret_7F82FE47 or dl, dl jz short loc_7F82FE45 inc eax jmp short loc_7F82FE38 ; --------------------------------------------------------------------------- loc_7F82FE45: ; CODE XREF: sub_7F82FE30+10j xor eax, eax locret_7F82FE47: ; CODE XREF: sub_7F82FE30+Cj retn sub_7F82FE30 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F82FE50 proc near ; CODE XREF: sub_7F80F91C+4Ap ; sub_7F80F91C+7Dp lpSrcStr = dword ptr 4 push ebx push esi push edi push ebp xor ebp, ebp cmp Locale, ebp jnz short loc_7F82FE87 mov ebx, [esp+10h+lpSrcStr] mov eax, ebx cmp byte ptr [ebx], 0 jz short loc_7F82FE80 loc_7F82FE69: ; CODE XREF: sub_7F82FE50+2Ej mov cl, [eax] cmp cl, 61h jl short loc_7F82FE7A cmp cl, 7Ah jg short loc_7F82FE7A sub cl, 20h mov [eax], cl loc_7F82FE7A: ; CODE XREF: sub_7F82FE50+1Ej ; sub_7F82FE50+23j inc eax cmp byte ptr [eax], 0 jnz short loc_7F82FE69 loc_7F82FE80: ; CODE XREF: sub_7F82FE50+17j mov eax, ebx pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F82FE87: ; CODE XREF: sub_7F82FE50+Cj push 15h call sub_7F830560 add esp, 4 cmp Locale, 0 jnz short loc_7F82FECD push 15h call sub_7F8305D0 mov ebx, [esp+14h+lpSrcStr] add esp, 4 mov eax, ebx cmp byte ptr [ebx], 0 jz short loc_7F82FEC6 loc_7F82FEAF: ; CODE XREF: sub_7F82FE50+74j mov cl, [eax] cmp cl, 61h jl short loc_7F82FEC0 cmp cl, 7Ah jg short loc_7F82FEC0 sub cl, 20h mov [eax], cl loc_7F82FEC0: ; CODE XREF: sub_7F82FE50+64j ; sub_7F82FE50+69j inc eax cmp byte ptr [eax], 0 jnz short loc_7F82FEAF loc_7F82FEC6: ; CODE XREF: sub_7F82FE50+5Dj mov eax, ebx pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F82FECD: ; CODE XREF: sub_7F82FE50+48j mov ebx, [esp+10h+lpSrcStr] push 0 ; CodePage push 0 ; cchDest mov eax, Locale push 0 ; lpDestStr push 0FFFFFFFFh ; cchSrc push ebx ; lpSrcStr push 200h ; dwMapFlags push eax ; Locale call sub_7F8306D0 add esp, 1Ch mov esi, eax test esi, esi jz short loc_7F82FF41 push esi call sub_7F830930 add esp, 4 mov ebp, eax test ebp, ebp jz short loc_7F82FF41 push 0 ; CodePage mov eax, Locale push esi ; cchDest push ebp ; lpDestStr push 0FFFFFFFFh ; cchSrc push ebx ; lpSrcStr push 200h ; dwMapFlags push eax ; Locale call sub_7F8306D0 add esp, 1Ch test eax, eax jz short loc_7F82FF41 mov edi, ebp mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov eax, ecx shr ecx, 2 mov esi, edi mov edi, ebx rep movsd mov ecx, eax and ecx, 3 rep movsb loc_7F82FF41: ; CODE XREF: sub_7F82FE50+A1j ; sub_7F82FE50+B0j ... push 15h call sub_7F8305D0 add esp, 4 push ebp ; lpMem call sub_7F8304A0 add esp, 4 mov eax, ebx pop ebp pop edi pop esi pop ebx retn sub_7F82FE50 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F82FF60 proc near ; CODE XREF: sub_7F811CD9+C9p ; sub_7F811CD9+189p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_8] push ebx push esi cmp eax, 1 jle short loc_7F82FF87 shr eax, 1 mov ecx, [esp+8+arg_0] mov esi, [esp+8+arg_4] loc_7F82FF76: ; CODE XREF: sub_7F82FF60+25j mov dl, [ecx] mov bl, [ecx+1] mov [esi], bl inc ecx mov [esi+1], dl inc ecx inc esi inc esi dec eax jnz short loc_7F82FF76 loc_7F82FF87: ; CODE XREF: sub_7F82FF60+9j pop esi pop ebx retn sub_7F82FF60 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F82FF90 proc near ; CODE XREF: sub_7F815163+1D9p ; sub_7F815163+24Ap arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push esi push edi push ebx mov esi, [ebp+arg_0] mov ecx, esi mov edi, [ebp+arg_4] mov edx, edi loc_7F82FFA0: ; CODE XREF: sub_7F82FF90+25j ; sub_7F82FF90+29j mov al, [edi] or al, al jz short loc_7F82FFBB mov ah, [esi] or ah, ah jz short loc_7F82FFBF cmp al, ah jz short loc_7F82FFB7 mov edi, edx inc ecx mov esi, ecx jmp short loc_7F82FFA0 ; --------------------------------------------------------------------------- loc_7F82FFB7: ; CODE XREF: sub_7F82FF90+1Ej inc edi inc esi jmp short loc_7F82FFA0 ; --------------------------------------------------------------------------- loc_7F82FFBB: ; CODE XREF: sub_7F82FF90+14j mov eax, ecx jmp short loc_7F82FFC1 ; --------------------------------------------------------------------------- loc_7F82FFBF: ; CODE XREF: sub_7F82FF90+1Aj xor eax, eax loc_7F82FFC1: ; CODE XREF: sub_7F82FF90+2Dj pop ebx pop edi pop esi leave retn sub_7F82FF90 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F82FFD0 proc near ; CODE XREF: sub_7F830070+1Fp ; sub_7F8300A0+24p ... arg_0 = dword ptr 4 push esi call sub_7F830060 mov ecx, [esp+4+arg_0] xor esi, esi mov [eax], ecx mov eax, offset unk_7F839750 loc_7F82FFE3: ; CODE XREF: sub_7F82FFD0+20j cmp [eax], ecx jz short loc_7F830009 add eax, 8 inc esi cmp eax, offset dword_7F8398B8 jb short loc_7F82FFE3 cmp ecx, 13h jb short loc_7F830019 cmp ecx, 24h ja short loc_7F830019 call sub_7F830050 pop esi mov dword ptr [eax], 0Dh retn ; --------------------------------------------------------------------------- loc_7F830009: ; CODE XREF: sub_7F82FFD0+15j call sub_7F830050 mov ecx, dword_7F839754[esi*8] pop esi mov [eax], ecx retn ; --------------------------------------------------------------------------- loc_7F830019: ; CODE XREF: sub_7F82FFD0+25j ; sub_7F82FFD0+2Aj cmp ecx, 0BCh jb short loc_7F830036 cmp ecx, 0CAh ja short loc_7F830036 call sub_7F830050 pop esi mov dword ptr [eax], 8 retn ; --------------------------------------------------------------------------- loc_7F830036: ; CODE XREF: sub_7F82FFD0+4Fj ; sub_7F82FFD0+57j call sub_7F830050 pop esi mov dword ptr [eax], 16h retn sub_7F82FFD0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830050 proc near ; CODE XREF: sub_7F81550B+2Ep ; sub_7F81554E+48p ... call sub_7F830A60 add eax, 8 retn sub_7F830050 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830060 proc near ; CODE XREF: sub_7F82FFD0+1p ; sub_7F831EA0+68p ... call sub_7F830A60 add eax, 0Ch retn sub_7F830060 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F830070(LPCSTR lpFileName) sub_7F830070 proc near ; CODE XREF: sub_7F81550B+1Dp lpFileName = dword ptr 4 mov eax, [esp+lpFileName] push eax ; lpFileName call ds:DeleteFileA test eax, eax mov eax, 0 jnz short loc_7F83008A call ds:GetLastError loc_7F83008A: ; CODE XREF: sub_7F830070+12j test eax, eax jz short loc_7F83009D push eax call sub_7F82FFD0 add esp, 4 mov eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_7F83009D: ; CODE XREF: sub_7F830070+1Cj xor eax, eax retn sub_7F830070 endp ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F8300A0(LPCSTR lpExistingFileName, LPCSTR lpNewFileName) sub_7F8300A0 proc near ; CODE XREF: sub_7F81554E+37p lpExistingFileName= dword ptr 4 lpNewFileName = dword ptr 8 mov eax, [esp+lpNewFileName] mov ecx, [esp+lpExistingFileName] push eax ; lpNewFileName push ecx ; lpExistingFileName call ds:MoveFileA test eax, eax mov eax, 0 jnz short loc_7F8300BF call ds:GetLastError loc_7F8300BF: ; CODE XREF: sub_7F8300A0+17j test eax, eax jz short loc_7F8300D2 push eax call sub_7F82FFD0 add esp, 4 mov eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_7F8300D2: ; CODE XREF: sub_7F8300A0+21j xor eax, eax retn sub_7F8300A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8300E0 proc near ; CODE XREF: sub_7F816044+127p ; sub_7F81635D+B3p ... var_F8 = dword ptr -0F8h var_F4 = dword ptr -0F4h var_F0 = dword ptr -0F0h var_78 = dword ptr -78h arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h mov eax, [esp+arg_4] sub esp, 0F8h cmp eax, 2 push ebx push esi push edi push ebp jb loc_7F830233 mov esi, [esp+108h+arg_8] test esi, esi jz loc_7F830233 mov edi, [esp+108h+arg_0] dec eax mov [esp+108h+var_F4], 0 imul eax, esi add eax, edi loc_7F83011B: ; CODE XREF: sub_7F8300E0+7Fj mov [esp+108h+var_F8], eax loc_7F83011F: ; CODE XREF: sub_7F8300E0+11Bj ; sub_7F8300E0+14Ej mov eax, [esp+108h+var_F8] sub edx, edx sub eax, edi div esi inc eax cmp eax, 8 ja short loc_7F830161 mov eax, [esp+108h+arg_C] mov ecx, [esp+108h+var_F8] push eax push esi push ecx push edi call sub_7F830240 add esp, 10h loc_7F830146: ; CODE XREF: sub_7F8300E0+113j ; sub_7F8300E0+142j dec [esp+108h+var_F4] js loc_7F830233 mov ecx, [esp+108h+var_F4] mov edi, [esp+ecx*4+108h+var_F0] mov eax, [esp+ecx*4+108h+var_78] jmp short loc_7F83011B ; --------------------------------------------------------------------------- loc_7F830161: ; CODE XREF: sub_7F8300E0+4Dj shr eax, 1 push esi push edi mov ebp, edi imul eax, esi add eax, edi push eax call sub_7F8302A0 mov ebx, [esp+114h+var_F8] add esp, 0Ch add ebx, esi loc_7F83017C: ; CODE XREF: sub_7F8300E0+B2j ; sub_7F8300E0+D9j add ebp, esi cmp ebp, [esp+108h+var_F8] ja short loc_7F830194 push edi push ebp call [esp+110h+arg_C] add esp, 8 test eax, eax jle short loc_7F83017C loc_7F830194: ; CODE XREF: sub_7F8300E0+A2j ; sub_7F8300E0+C8j sub ebx, esi cmp ebx, edi jbe short loc_7F8301AA push edi push ebx call [esp+110h+arg_C] add esp, 8 test eax, eax jge short loc_7F830194 loc_7F8301AA: ; CODE XREF: sub_7F8300E0+B8j push esi cmp ebx, ebp push ebx jb short loc_7F8301BB push ebp call sub_7F8302A0 add esp, 0Ch jmp short loc_7F83017C ; --------------------------------------------------------------------------- loc_7F8301BB: ; CODE XREF: sub_7F8300E0+CEj push edi call sub_7F8302A0 mov ecx, [esp+114h+var_F8] add esp, 0Ch mov eax, ebx sub ecx, ebp sub eax, edi dec eax cmp eax, ecx jl short loc_7F830200 lea eax, [edi+esi] cmp eax, ebx jnb short loc_7F8301EF mov ecx, [esp+108h+var_F4] sub ebx, esi inc [esp+108h+var_F4] mov [esp+ecx*4+108h+var_F0], edi mov [esp+ecx*4+108h+var_78], ebx loc_7F8301EF: ; CODE XREF: sub_7F8300E0+F8j cmp ebp, [esp+108h+var_F8] jnb loc_7F830146 mov edi, ebp jmp loc_7F83011F ; --------------------------------------------------------------------------- loc_7F830200: ; CODE XREF: sub_7F8300E0+F1j cmp ebp, [esp+108h+var_F8] jnb short loc_7F83021D mov ecx, [esp+108h+var_F4] mov eax, [esp+108h+var_F8] inc [esp+108h+var_F4] mov [esp+ecx*4+108h+var_F0], ebp mov [esp+ecx*4+108h+var_78], eax loc_7F83021D: ; CODE XREF: sub_7F8300E0+124j lea eax, [edi+esi] cmp eax, ebx jnb loc_7F830146 sub ebx, esi mov [esp+108h+var_F8], ebx jmp loc_7F83011F ; --------------------------------------------------------------------------- loc_7F830233: ; CODE XREF: sub_7F8300E0+11j ; sub_7F8300E0+20j ... pop ebp pop edi pop esi pop ebx add esp, 0F8h retn sub_7F8300E0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830240 proc near ; CODE XREF: sub_7F8300E0+5Ep var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h sub esp, 4 push ebx push esi mov esi, [esp+0Ch+arg_4] push edi cmp esi, [esp+10h+arg_0] push ebp jbe short loc_7F830293 mov edi, [esp+14h+arg_8] mov eax, [esp+14h+arg_0] add eax, edi mov [esp+14h+var_4], eax loc_7F83025F: ; CODE XREF: sub_7F830240+51j mov ebp, [esp+14h+arg_0] mov ebx, [esp+14h+var_4] cmp ebx, esi ja short loc_7F830280 loc_7F83026B: ; CODE XREF: sub_7F830240+3Ej push ebp push ebx call [esp+1Ch+arg_C] add esp, 8 test eax, eax jle short loc_7F83027A mov ebp, ebx loc_7F83027A: ; CODE XREF: sub_7F830240+36j add ebx, edi cmp ebx, esi jbe short loc_7F83026B loc_7F830280: ; CODE XREF: sub_7F830240+29j push edi push esi push ebp sub esi, edi call sub_7F8302A0 add esp, 0Ch cmp esi, [esp+14h+arg_0] ja short loc_7F83025F loc_7F830293: ; CODE XREF: sub_7F830240+Fj pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F830240 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8302A0 proc near ; CODE XREF: sub_7F8300E0+8Ep ; sub_7F8300E0+D1p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov edx, [esp+arg_4] push ebx mov ecx, [esp+4+arg_0] push esi cmp edx, ecx jz short loc_7F8302CA mov esi, [esp+8+arg_8] mov eax, esi dec esi test eax, eax jz short loc_7F8302CA loc_7F8302B9: ; CODE XREF: sub_7F8302A0+28j mov al, [ecx] mov bl, [edx] mov [ecx], bl inc ecx mov [edx], al inc edx mov eax, esi dec esi test eax, eax jnz short loc_7F8302B9 loc_7F8302CA: ; CODE XREF: sub_7F8302A0+Cj ; sub_7F8302A0+17j pop esi pop ebx retn sub_7F8302A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8302D0 proc near ; CODE XREF: sub_7F828018+9Ep arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h push ebx push esi mov ebx, [esp+8+arg_8] push edi push ebp xor ebp, ebp cmp [ebx], ebp jbe short loc_7F8302FC mov esi, [esp+10h+arg_0] mov edi, [esp+10h+arg_4] loc_7F8302E6: ; CODE XREF: sub_7F8302D0+2Aj push edi push esi call [esp+18h+arg_10] add esp, 8 test eax, eax jz short loc_7F830303 add edi, [esp+10h+arg_C] inc ebp cmp [ebx], ebp ja short loc_7F8302E6 loc_7F8302FC: ; CODE XREF: sub_7F8302D0+Cj xor eax, eax pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F830303: ; CODE XREF: sub_7F8302D0+21j mov eax, edi pop ebp pop edi pop esi pop ebx retn sub_7F8302D0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830310 proc near ; CODE XREF: DllEntryPoint+40p ; DllEntryPoint+6Dp arg_4 = dword ptr 8 mov eax, [esp+arg_4] cmp eax, 1 jnz loc_7F830409 call ds:GetVersion cmp dword_7F8398CC, 0 mov dword_7F8399DC, eax jnz short loc_7F83036F cmp al, 3 jnz short loc_7F830346 test eax, 80000000h jz short loc_7F830346 push 2 call sub_7F831740 add esp, 4 loc_7F830346: ; CODE XREF: sub_7F830310+23j ; sub_7F830310+2Aj push offset aKernel32_dll ; "kernel32.dll" call ds:GetModuleHandleA test eax, eax jz short loc_7F83036F push offset aIstnt ; "IsTNT" push eax ; hModule call ds:GetProcAddress test eax, eax jz short loc_7F83036F push 1 call sub_7F831740 add esp, 4 loc_7F83036F: ; CODE XREF: sub_7F830310+1Fj ; sub_7F830310+43j ... call sub_7F830CB0 xor ecx, ecx mov edx, dword_7F8399DC mov cl, dh mov eax, edx and eax, 0FFh inc dword_7F8398B8 shr edx, 10h mov dword_7F8399E8, ecx mov dword_7F8399E4, eax mov dword_7F8399DC, edx shl eax, 8 add eax, ecx mov dword_7F8399E0, eax call sub_7F8309B0 test eax, eax jnz short loc_7F8303BC call sub_7F830CD0 xor eax, eax retn 0Ch ; --------------------------------------------------------------------------- loc_7F8303BC: ; CODE XREF: sub_7F830310+A0j call ds:GetCommandLineA mov dword_7F835130, eax call sub_7F8315A0 cmp dword_7F835130, 0 mov lpMem, eax jz short loc_7F8303FF test eax, eax jz short loc_7F8303FF call sub_7F830CE0 call sub_7F831590 call sub_7F831000 call sub_7F830F20 call sub_7F830B80 mov eax, 1 retn 0Ch ; --------------------------------------------------------------------------- loc_7F8303FF: ; CODE XREF: sub_7F830310+C8j ; sub_7F830310+CCj call sub_7F830CD0 xor eax, eax retn 0Ch ; --------------------------------------------------------------------------- loc_7F830409: ; CODE XREF: sub_7F830310+7j test eax, eax jnz short loc_7F830446 mov eax, dword_7F8398B8 test eax, eax jle short loc_7F830441 dec eax cmp dword_7F839A14, 0 mov dword_7F8398B8, eax jnz short loc_7F83042A call sub_7F830BD0 loc_7F83042A: ; CODE XREF: sub_7F830310+113j call sub_7F830EC0 call sub_7F830A10 call sub_7F830CD0 mov eax, 1 retn 0Ch ; --------------------------------------------------------------------------- loc_7F830441: ; CODE XREF: sub_7F830310+104j xor eax, eax retn 0Ch ; --------------------------------------------------------------------------- loc_7F830446: ; CODE XREF: sub_7F830310+FBj cmp eax, 3 jnz short loc_7F830455 push 0 ; lpMem call sub_7F830AD0 add esp, 4 loc_7F830455: ; CODE XREF: sub_7F830310+139j mov eax, 1 retn 0Ch sub_7F830310 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830460 proc near ; CODE XREF: sub_7F830560+27p ; sub_7F830A60+5Bp ... arg_0 = dword ptr 4 mov eax, dword_7F8398C8 cmp eax, 1 jz short loc_7F830477 test eax, eax jnz short loc_7F83047C cmp dword_7F8398CC, 1 jnz short loc_7F83047C loc_7F830477: ; CODE XREF: sub_7F830460+8j call sub_7F831750 loc_7F83047C: ; CODE XREF: sub_7F830460+Cj ; sub_7F830460+15j mov eax, [esp+arg_0] push eax call sub_7F831790 add esp, 4 push 0FFh call off_7F8398C4 add esp, 4 retn sub_7F830460 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F8304A0(LPVOID lpMem) sub_7F8304A0 proc near ; CODE XREF: sub_7F82FE50+FCp ; sub_7F8304F0+32p ... lpMem = dword ptr 4 mov eax, [esp+lpMem] test eax, eax jz short locret_7F8304B7 push eax ; lpMem push 0 ; dwFlags mov eax, hHeap push eax ; hHeap call ds:HeapFree locret_7F8304B7: ; CODE XREF: sub_7F8304A0+6j retn sub_7F8304A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8304C0 proc near ; CODE XREF: sub_7F8309B0+1p push esi mov eax, lpCriticalSection push eax ; lpCriticalSection mov esi, ds:InitializeCriticalSection call esi ; InitializeCriticalSection mov ecx, off_7F83991C push ecx ; lpCriticalSection call esi ; InitializeCriticalSection mov eax, off_7F83990C push eax ; lpCriticalSection call esi ; InitializeCriticalSection mov eax, off_7F8398EC push eax ; lpCriticalSection call esi ; InitializeCriticalSection pop esi retn sub_7F8304C0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8304F0 proc near ; CODE XREF: sub_7F830A10p push ebx push esi push edi mov esi, ds:DeleteCriticalSection xor edi, edi loc_7F8304FB: ; CODE XREF: sub_7F8304F0+3Ej lea ebx, dword_7F8398E8[edi*4] mov eax, [ebx] test eax, eax jz short loc_7F83052A cmp edi, 11h jz short loc_7F83052A cmp edi, 0Dh jz short loc_7F83052A cmp edi, 9 jz short loc_7F83052A cmp edi, 1 jz short loc_7F83052A push eax ; lpCriticalSection call esi ; DeleteCriticalSection mov eax, [ebx] push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F83052A: ; CODE XREF: sub_7F8304F0+16j ; sub_7F8304F0+1Bj ... inc edi cmp edi, 30h jl short loc_7F8304FB mov eax, off_7F83990C push eax ; lpCriticalSection call esi ; DeleteCriticalSection mov eax, off_7F83991C push eax ; lpCriticalSection call esi ; DeleteCriticalSection mov eax, lpCriticalSection push eax ; lpCriticalSection call esi ; DeleteCriticalSection mov eax, off_7F8398EC push eax ; lpCriticalSection call esi ; DeleteCriticalSection pop edi pop esi pop ebx retn sub_7F8304F0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F830560 proc near ; CODE XREF: sub_7F82FE50+39p ; sub_7F830560+31p ... arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp push esi push edi lea edi, dword_7F8398E8[eax*4] cmp dword ptr [edi], 0 jnz short loc_7F8305BB push 18h call sub_7F830930 add esp, 4 mov esi, eax test esi, esi jnz short loc_7F83058F push 11h call sub_7F830460 add esp, 4 loc_7F83058F: ; CODE XREF: sub_7F830560+23j push 11h call sub_7F830560 add esp, 4 cmp dword ptr [edi], 0 push esi ; lpMem jnz short loc_7F8305A9 call ds:InitializeCriticalSection mov [edi], esi jmp short loc_7F8305B1 ; --------------------------------------------------------------------------- loc_7F8305A9: ; CODE XREF: sub_7F830560+3Dj call sub_7F8304A0 add esp, 4 loc_7F8305B1: ; CODE XREF: sub_7F830560+47j push 11h call sub_7F8305D0 add esp, 4 loc_7F8305BB: ; CODE XREF: sub_7F830560+13j mov eax, [edi] push eax ; lpCriticalSection call ds:EnterCriticalSection pop edi pop esi pop ebp retn sub_7F830560 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8305D0 proc near ; CODE XREF: sub_7F82FE50+4Cp ; sub_7F82FE50+F3p ... arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp mov ecx, dword_7F8398E8[eax*4] push ecx ; lpCriticalSection call ds:LeaveCriticalSection pop ebp retn sub_7F8305D0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8305F0 proc near ; CODE XREF: sub_7F831E00+1Ep arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp cmp eax, offset off_7F839FC0 jb short loc_7F83061A cmp eax, offset unk_7F83A220 ja short loc_7F83061A sub eax, offset off_7F839FC0 sar eax, 5 add eax, 1Ch push eax call sub_7F830560 mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_7F83061A: ; CODE XREF: sub_7F8305F0+Cj ; sub_7F8305F0+13j add eax, 20h push eax ; lpCriticalSection call ds:EnterCriticalSection pop ebp retn sub_7F8305F0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F830630 proc near ; CODE XREF: sub_7F831D40+33p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp cmp eax, 14h jge short loc_7F830649 add eax, 1Ch push eax call sub_7F830560 mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_7F830649: ; CODE XREF: sub_7F830630+Aj mov eax, [ebp+arg_4] add eax, 20h push eax ; lpCriticalSection call ds:EnterCriticalSection pop ebp retn sub_7F830630 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F830660 proc near ; CODE XREF: sub_7F831E00+32p arg_0 = dword ptr 8 push ebp mov eax, [esp+arg_0] mov ebp, esp cmp eax, offset off_7F839FC0 jb short loc_7F83068A cmp eax, offset unk_7F83A220 ja short loc_7F83068A sub eax, offset off_7F839FC0 sar eax, 5 add eax, 1Ch push eax call sub_7F8305D0 mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_7F83068A: ; CODE XREF: sub_7F830660+Cj ; sub_7F830660+13j add eax, 20h push eax ; lpCriticalSection call ds:LeaveCriticalSection pop ebp retn sub_7F830660 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F8306A0 proc near ; CODE XREF: sub_7F831D40+88p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov eax, [esp+arg_0] mov ebp, esp cmp eax, 14h jge short loc_7F8306B9 add eax, 1Ch push eax call sub_7F8305D0 mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_7F8306B9: ; CODE XREF: sub_7F8306A0+Aj mov eax, [ebp+arg_4] add eax, 20h push eax ; lpCriticalSection call ds:LeaveCriticalSection pop ebp retn sub_7F8306A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F8306D0(LCID Locale, DWORD dwMapFlags, LPCSTR lpSrcStr, int cchSrc, LPSTR lpDestStr, int cchDest, UINT CodePage) sub_7F8306D0 proc near ; CODE XREF: sub_7F82FE50+95p ; sub_7F82FE50+C4p Locale = dword ptr 4 dwMapFlags = dword ptr 8 lpSrcStr = dword ptr 0Ch cchSrc = dword ptr 10h lpDestStr = dword ptr 14h cchDest = dword ptr 18h CodePage = dword ptr 1Ch push ebx mov eax, dword_7F8399AC push esi test eax, eax push edi push ebp jnz short loc_7F83072C push 0 ; cchDest mov esi, ds:LCMapStringA push 0 ; lpDestStr push 1 ; cchSrc push offset SrcStr ; lpSrcStr push 100h ; dwMapFlags push 0 ; Locale call esi ; LCMapStringA test eax, eax jz short loc_7F830702 mov eax, 2 jmp short loc_7F830732 ; --------------------------------------------------------------------------- loc_7F830702: ; CODE XREF: sub_7F8306D0+29j push 0 ; cchDest push 0 ; lpDestStr push 1 ; cchSrc push offset word_7F8399B4 ; lpSrcStr push 100h ; dwMapFlags push 0 ; Locale call ds:LCMapStringW test eax, eax jz short loc_7F830725 mov eax, 1 jmp short loc_7F830732 ; --------------------------------------------------------------------------- loc_7F830725: ; CODE XREF: sub_7F8306D0+4Cj xor eax, eax pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F83072C: ; CODE XREF: sub_7F8306D0+Bj mov esi, ds:LCMapStringA loc_7F830732: ; CODE XREF: sub_7F8306D0+30j ; sub_7F8306D0+53j mov edi, [esp+10h+cchSrc] mov dword_7F8399AC, eax test edi, edi jle short loc_7F830754 mov eax, [esp+10h+lpSrcStr] push edi push eax call sub_7F830900 add esp, 8 mov edi, eax mov eax, dword_7F8399AC loc_7F830754: ; CODE XREF: sub_7F8306D0+6Dj mov dword_7F8399AC, eax cmp eax, 2 jnz short loc_7F83077F mov eax, [esp+10h+cchDest] mov ecx, [esp+10h+lpDestStr] mov edx, [esp+10h+lpSrcStr] push eax ; cchDest mov eax, [esp+14h+dwMapFlags] push ecx ; lpDestStr mov ecx, [esp+18h+Locale] push edi ; cchSrc push edx ; lpSrcStr push eax ; dwMapFlags push ecx ; Locale call esi ; LCMapStringA pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F83077F: ; CODE XREF: sub_7F8306D0+8Cj mov dword_7F8399AC, eax cmp eax, 1 jnz loc_7F83085F xor esi, esi cmp [esp+10h+CodePage], esi jnz short loc_7F83079E mov eax, dword_7F8399D0 mov [esp+10h+CodePage], eax loc_7F83079E: ; CODE XREF: sub_7F8306D0+C3j mov eax, [esp+10h+lpSrcStr] push 0 ; cchWideChar mov ecx, [esp+14h+CodePage] push 0 ; lpWideCharStr push edi ; cbMultiByte push eax ; lpMultiByteStr push 9 ; dwFlags push ecx ; CodePage call ds:MultiByteToWideChar mov ebp, eax test ebp, ebp jnz short loc_7F8307C2 xor eax, eax pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F8307C2: ; CODE XREF: sub_7F8306D0+E9j lea eax, ds:0[ebp*2] push eax call sub_7F830930 add esp, 4 mov ebx, eax test ebx, ebx jnz short loc_7F8307DF xor eax, eax pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F8307DF: ; CODE XREF: sub_7F8306D0+106j mov eax, [esp+10h+lpSrcStr] push ebp ; cchWideChar mov ecx, [esp+14h+CodePage] push ebx ; lpWideCharStr push edi ; cbMultiByte push eax ; lpMultiByteStr push 1 ; dwFlags push ecx ; CodePage call ds:MultiByteToWideChar test eax, eax jz short loc_7F83084B mov eax, [esp+10h+dwMapFlags] push 0 ; cchDest mov ecx, [esp+14h+Locale] push 0 ; lpDestStr push ebp ; cchSrc push ebx ; lpSrcStr push eax ; dwMapFlags push ecx ; Locale call ds:LCMapStringW mov edi, eax test edi, edi jz short loc_7F83084B test byte ptr [esp+10h+dwMapFlags+1], 4 jz short loc_7F830864 mov eax, [esp+10h+cchDest] test eax, eax jz loc_7F8308E2 cmp edi, eax jg short loc_7F83084B mov ecx, [esp+10h+dwMapFlags] push eax ; cchDest mov eax, [esp+14h+lpDestStr] mov edx, [esp+14h+Locale] push eax ; lpDestStr push ebp ; cchSrc push ebx ; lpSrcStr push ecx ; dwMapFlags push edx ; Locale call ds:LCMapStringW test eax, eax jnz loc_7F8308E2 loc_7F83084B: ; CODE XREF: sub_7F8306D0+126j ; sub_7F8306D0+142j ... push ebx ; lpMem call sub_7F8304A0 add esp, 4 push esi ; lpMem call sub_7F8304A0 add esp, 4 xor eax, eax loc_7F83085F: ; CODE XREF: sub_7F8306D0+B7j pop ebp pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F830864: ; CODE XREF: sub_7F8306D0+149j lea eax, ds:0[edi*2] push eax call sub_7F830930 add esp, 4 mov esi, eax test esi, esi jz short loc_7F83084B mov eax, [esp+10h+dwMapFlags] push edi ; cchDest mov ecx, [esp+14h+Locale] push esi ; lpDestStr push ebp ; cchSrc push ebx ; lpSrcStr push eax ; dwMapFlags push ecx ; Locale call ds:LCMapStringW test eax, eax jz short loc_7F83084B mov eax, [esp+10h+cchDest] push 0 ; lpUsedDefaultChar push 0 ; lpDefaultChar test eax, eax jnz short loc_7F8308BE mov eax, [esp+18h+CodePage] push 0 ; cbMultiByte push 0 ; lpMultiByteStr mov ebp, ds:WideCharToMultiByte push edi ; cchWideChar push esi ; lpWideCharStr push 220h ; dwFlags push eax ; CodePage call ebp ; WideCharToMultiByte mov edi, eax test edi, edi jnz short loc_7F8308E2 jmp short loc_7F83084B ; --------------------------------------------------------------------------- loc_7F8308BE: ; CODE XREF: sub_7F8306D0+1CCj mov ecx, [esp+18h+CodePage] push eax ; cbMultiByte mov eax, [esp+1Ch+lpDestStr] mov ebp, ds:WideCharToMultiByte push eax ; lpMultiByteStr push edi ; cchWideChar push esi ; lpWideCharStr push 220h ; dwFlags push ecx ; CodePage call ebp ; WideCharToMultiByte mov edi, eax test edi, edi jz loc_7F83084B loc_7F8308E2: ; CODE XREF: sub_7F8306D0+151j ; sub_7F8306D0+175j ... push ebx ; lpMem call sub_7F8304A0 add esp, 4 push esi ; lpMem call sub_7F8304A0 add esp, 4 mov eax, edi pop ebp pop edi pop esi pop ebx retn sub_7F8306D0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830900 proc near ; CODE XREF: sub_7F8306D0+75p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_0] push esi mov eax, [esp+4+arg_4] push edi mov edi, ecx test eax, eax lea esi, [eax-1] jz short loc_7F830920 loc_7F830913: ; CODE XREF: sub_7F830900+1Ej cmp byte ptr [edi], 0 jz short loc_7F830925 inc edi mov edx, esi dec esi test edx, edx jnz short loc_7F830913 loc_7F830920: ; CODE XREF: sub_7F830900+11j cmp byte ptr [edi], 0 jnz short loc_7F830929 loc_7F830925: ; CODE XREF: sub_7F830900+16j sub edi, ecx mov eax, edi loc_7F830929: ; CODE XREF: sub_7F830900+23j pop edi pop esi retn sub_7F830900 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830930 proc near ; CODE XREF: sub_7F82FE50+A4p ; sub_7F830560+17p ... dwBytes = dword ptr 4 mov eax, dword_7F83A244 mov ecx, [esp+dwBytes] push eax ; int push ecx ; dwBytes call sub_7F830950 add esp, 8 retn sub_7F830930 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F830950(SIZE_T dwBytes, int) sub_7F830950 proc near ; CODE XREF: sub_7F830930+Bp dwBytes = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov edi, [esp+8+dwBytes] cmp edi, 0FFFFFFE0h jbe short loc_7F830960 xor eax, eax pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F830960: ; CODE XREF: sub_7F830950+9j test edi, edi jnz short loc_7F830969 mov edi, 1 loc_7F830969: ; CODE XREF: sub_7F830950+12j mov esi, [esp+8+arg_4] loc_7F83096D: ; CODE XREF: sub_7F830950+39j push edi ; dwBytes call sub_7F830990 add esp, 4 test eax, eax jnz short loc_7F83098D test esi, esi jz short loc_7F83098D push edi call sub_7F831AA0 add esp, 4 test eax, eax jnz short loc_7F83096D xor eax, eax loc_7F83098D: ; CODE XREF: sub_7F830950+28j ; sub_7F830950+2Cj pop edi pop esi retn sub_7F830950 endp ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F830990(SIZE_T dwBytes) sub_7F830990 proc near ; CODE XREF: sub_7F830950+1Ep dwBytes = dword ptr 4 mov eax, [esp+dwBytes] mov ecx, hHeap push eax ; dwBytes push 0 ; dwFlags push ecx ; hHeap call ds:HeapAlloc retn sub_7F830990 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8309B0 proc near ; CODE XREF: sub_7F830310+99p push esi call sub_7F8304C0 call ds:TlsAlloc mov dwTlsIndex, eax cmp eax, 0FFFFFFFFh jnz short loc_7F8309CA xor eax, eax pop esi retn ; --------------------------------------------------------------------------- loc_7F8309CA: ; CODE XREF: sub_7F8309B0+14j push 74h push 1 call sub_7F831AE0 add esp, 8 mov esi, eax test esi, esi jz short loc_7F830A0C push esi ; lpTlsValue mov eax, dwTlsIndex push eax ; dwTlsIndex call ds:TlsSetValue test eax, eax jz short loc_7F830A0C push esi call sub_7F830A40 add esp, 4 call ds:GetCurrentThreadId mov [esi], eax mov eax, 1 mov dword ptr [esi+4], 0FFFFFFFFh pop esi retn ; --------------------------------------------------------------------------- loc_7F830A0C: ; CODE XREF: sub_7F8309B0+2Aj ; sub_7F8309B0+3Bj xor eax, eax pop esi retn sub_7F8309B0 endp ; =============== S U B R O U T I N E ======================================= sub_7F830A10 proc near ; CODE XREF: sub_7F830310+11Fp call sub_7F8304F0 mov eax, dwTlsIndex cmp eax, 0FFFFFFFFh jz short locret_7F830A30 push eax ; dwTlsIndex call ds:TlsFree mov dwTlsIndex, 0FFFFFFFFh locret_7F830A30: ; CODE XREF: sub_7F830A10+Dj retn sub_7F830A10 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830A40 proc near ; CODE XREF: sub_7F8309B0+3Ep ; sub_7F830A60+40p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dword ptr [eax+50h], offset unk_7F83A248 mov dword ptr [eax+14h], 1 retn sub_7F830A40 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830A60 proc near ; CODE XREF: sub_7F830050p ; sub_7F830060p push esi push edi call ds:GetLastError mov esi, eax mov eax, dwTlsIndex push eax ; dwTlsIndex call ds:TlsGetValue mov edi, eax test edi, edi jnz short loc_7F830AC3 push 74h push 1 call sub_7F831AE0 add esp, 8 mov edi, eax test edi, edi jz short loc_7F830AB9 push edi ; lpTlsValue mov eax, dwTlsIndex push eax ; dwTlsIndex call ds:TlsSetValue test eax, eax jz short loc_7F830AB9 push edi call sub_7F830A40 add esp, 4 call ds:GetCurrentThreadId mov [edi], eax mov dword ptr [edi+4], 0FFFFFFFFh jmp short loc_7F830AC3 ; --------------------------------------------------------------------------- loc_7F830AB9: ; CODE XREF: sub_7F830A60+2Cj ; sub_7F830A60+3Dj push 10h call sub_7F830460 add esp, 4 loc_7F830AC3: ; CODE XREF: sub_7F830A60+1Aj ; sub_7F830A60+57j push esi ; dwErrCode call ds:SetLastError mov eax, edi pop edi pop esi retn sub_7F830A60 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F830AD0(LPVOID lpMem) sub_7F830AD0 proc near ; CODE XREF: sub_7F830310+13Dp lpMem = dword ptr 4 cmp dwTlsIndex, 0FFFFFFFFh push esi jz loc_7F830B6F mov esi, [esp+4+lpMem] test esi, esi jnz short loc_7F830AF8 mov eax, dwTlsIndex push eax ; dwTlsIndex call ds:TlsGetValue mov esi, eax test esi, esi jz short loc_7F830B61 loc_7F830AF8: ; CODE XREF: sub_7F830AD0+14j mov eax, [esi+24h] test eax, eax jz short loc_7F830B08 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B08: ; CODE XREF: sub_7F830AD0+2Dj mov eax, [esi+28h] test eax, eax jz short loc_7F830B18 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B18: ; CODE XREF: sub_7F830AD0+3Dj mov eax, [esi+30h] test eax, eax jz short loc_7F830B28 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B28: ; CODE XREF: sub_7F830AD0+4Dj mov eax, [esi+38h] test eax, eax jz short loc_7F830B38 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B38: ; CODE XREF: sub_7F830AD0+5Dj mov eax, [esi+40h] test eax, eax jz short loc_7F830B48 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B48: ; CODE XREF: sub_7F830AD0+6Dj mov eax, [esi+44h] test eax, eax jz short loc_7F830B58 push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B58: ; CODE XREF: sub_7F830AD0+7Dj push esi ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830B61: ; CODE XREF: sub_7F830AD0+26j push 0 ; lpTlsValue mov eax, dwTlsIndex push eax ; dwTlsIndex call ds:TlsSetValue loc_7F830B6F: ; CODE XREF: sub_7F830AD0+8j pop esi retn sub_7F830AD0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830B80 proc near ; CODE XREF: sub_7F830310+E2p mov eax, dword_7F835128 test eax, eax jz short loc_7F830B8B call eax ; dword_7F835128 loc_7F830B8B: ; CODE XREF: sub_7F830B80+7j push offset unk_7F833010 push offset unk_7F833008 call sub_7F830C90 add esp, 8 push offset unk_7F833004 push offset unk_7F833000 call sub_7F830C90 add esp, 8 retn sub_7F830B80 endp ; =============== S U B R O U T I N E ======================================= sub_7F830BB0 proc near ; CODE XREF: sub_7F830460+2Ep ; DATA XREF: .data:off_7F8398C4o uExitCode = dword ptr 4 mov eax, [esp+uExitCode] push 0 ; int push 1 ; int push eax ; uExitCode call sub_7F830BE0 add esp, 0Ch retn sub_7F830BB0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830BD0 proc near ; CODE XREF: sub_7F830310+115p push 1 ; int push 0 ; int push 0 ; uExitCode call sub_7F830BE0 add esp, 0Ch retn sub_7F830BD0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F830BE0(UINT uExitCode, int, int) sub_7F830BE0 proc near ; CODE XREF: sub_7F830BB0+9p ; sub_7F830BD0+6p uExitCode = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi call sub_7F830C70 mov dword_7F839A14, 1 cmp [esp+8+arg_4], 0 mov ebx, [esp+8+arg_8] mov byte_7F839A10, bl jnz short loc_7F830C41 cmp dword_7F83512C, 0 jz short loc_7F830C2F mov esi, dword_7F835124 sub esi, 4 cmp esi, dword_7F83512C jb short loc_7F830C2F loc_7F830C1C: ; CODE XREF: sub_7F830BE0+4Dj mov eax, [esi] test eax, eax jz short loc_7F830C24 call eax loc_7F830C24: ; CODE XREF: sub_7F830BE0+40j sub esi, 4 cmp esi, dword_7F83512C jnb short loc_7F830C1C loc_7F830C2F: ; CODE XREF: sub_7F830BE0+29j ; sub_7F830BE0+3Aj push offset unk_7F83301C push offset unk_7F833014 call sub_7F830C90 add esp, 8 loc_7F830C41: ; CODE XREF: sub_7F830BE0+20j push offset unk_7F833024 push offset unk_7F833020 call sub_7F830C90 add esp, 8 test ebx, ebx jz short loc_7F830C5F call sub_7F830C80 pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F830C5F: ; CODE XREF: sub_7F830BE0+75j mov eax, [esp+8+uExitCode] push eax ; uExitCode call ds:ExitProcess sub_7F830BE0 endp ; --------------------------------------------------------------------------- pop esi pop ebx retn ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830C70 proc near ; CODE XREF: sub_7F830BE0+2p push 0Dh call sub_7F830560 add esp, 4 retn sub_7F830C70 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830C80 proc near ; CODE XREF: sub_7F830BE0+77p push 0Dh call sub_7F8305D0 add esp, 4 retn sub_7F830C80 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830C90 proc near ; CODE XREF: sub_7F830B80+15p ; sub_7F830B80+27p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov edi, [esp+8+arg_4] mov esi, [esp+8+arg_0] cmp edi, esi jbe short loc_7F830CAD loc_7F830C9E: ; CODE XREF: sub_7F830C90+1Bj mov eax, [esi] test eax, eax jz short loc_7F830CA6 call eax loc_7F830CA6: ; CODE XREF: sub_7F830C90+12j add esi, 4 cmp edi, esi ja short loc_7F830C9E loc_7F830CAD: ; CODE XREF: sub_7F830C90+Cj pop edi pop esi retn sub_7F830C90 endp ; =============== S U B R O U T I N E ======================================= sub_7F830CB0 proc near ; CODE XREF: sub_7F830310:loc_7F83036Fp push 0 ; dwMaximumSize push 1000h ; dwInitialSize push 0 ; flOptions call ds:HeapCreate mov hHeap, eax retn sub_7F830CB0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830CD0 proc near ; CODE XREF: sub_7F830310+A2p ; sub_7F830310:loc_7F8303FFp ... mov eax, hHeap push eax ; hHeap call ds:HeapDestroy retn sub_7F830CD0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830CE0 proc near ; CODE XREF: sub_7F830310+CEp StartupInfo = _STARTUPINFOA ptr -44h sub esp, 44h push ebx push esi push edi push ebp push 480h call sub_7F830930 add esp, 4 mov esi, eax test esi, esi jnz short loc_7F830D04 push 1Bh call sub_7F830460 add esp, 4 loc_7F830D04: ; CODE XREF: sub_7F830CE0+18j lea eax, [esi+480h] mov dword_7F835020, esi mov uNumber, 20h cmp eax, esi jbe short loc_7F830D46 xor ecx, ecx mov edx, 0Ah loc_7F830D25: ; CODE XREF: sub_7F830CE0+64j mov [esi+4], cl add esi, 24h mov dword ptr [esi-24h], 0FFFFFFFFh mov [esi-1Fh], dl mov [esi-1Ch], ecx mov eax, dword_7F835020 add eax, 480h cmp eax, esi ja short loc_7F830D25 loc_7F830D46: ; CODE XREF: sub_7F830CE0+3Cj lea eax, [esp+54h+StartupInfo] push eax ; lpStartupInfo call ds:GetStartupInfoA cmp [esp+54h+StartupInfo.cbReserved2], 0 jz loc_7F830E32 cmp [esp+54h+StartupInfo.lpReserved2], 0 jz loc_7F830E32 mov eax, [esp+54h+StartupInfo.lpReserved2] mov ebp, [eax] lea edi, [eax+4] cmp ebp, 800h lea ebx, [ebp+edi+0] jl short loc_7F830D82 mov ebp, 800h loc_7F830D82: ; CODE XREF: sub_7F830CE0+9Bj cmp uNumber, ebp jge short loc_7F830DE8 mov esi, offset unk_7F835024 loc_7F830D8F: ; CODE XREF: sub_7F830CE0+FEj push 480h call sub_7F830930 add esp, 4 test eax, eax jz short loc_7F830DE2 lea ecx, [eax+480h] mov [esi], eax add uNumber, 20h cmp ecx, eax jbe short loc_7F830DD5 xor ecx, ecx loc_7F830DB5: ; CODE XREF: sub_7F830CE0+F3j mov [eax+4], cl add eax, 24h mov dword ptr [eax-24h], 0FFFFFFFFh mov byte ptr [eax-1Fh], 0Ah mov [eax-1Ch], ecx mov edx, [esi] add edx, 480h cmp edx, eax ja short loc_7F830DB5 loc_7F830DD5: ; CODE XREF: sub_7F830CE0+D1j add esi, 4 cmp uNumber, ebp jl short loc_7F830D8F jmp short loc_7F830DE8 ; --------------------------------------------------------------------------- loc_7F830DE2: ; CODE XREF: sub_7F830CE0+BEj mov ebp, uNumber loc_7F830DE8: ; CODE XREF: sub_7F830CE0+A8j ; sub_7F830CE0+100j xor esi, esi test ebp, ebp jle short loc_7F830E32 loc_7F830DEE: ; CODE XREF: sub_7F830CE0+150j mov eax, [ebx] cmp eax, 0FFFFFFFFh jz short loc_7F830E29 test byte ptr [edi], 1 jz short loc_7F830E29 push eax ; hFile call ds:GetFileType test eax, eax jz short loc_7F830E29 mov eax, esi mov ecx, esi and eax, 0FFFFFFE7h and ecx, 1Fh sar eax, 3 shl ecx, 2 mov edx, dword_7F835020[eax] mov eax, [ebx] lea ecx, [ecx+ecx*8] add ecx, edx mov [ecx], eax mov dl, [edi] mov [ecx+4], dl loc_7F830E29: ; CODE XREF: sub_7F830CE0+113j ; sub_7F830CE0+118j ... inc esi inc edi add ebx, 4 cmp esi, ebp jl short loc_7F830DEE loc_7F830E32: ; CODE XREF: sub_7F830CE0+77j ; sub_7F830CE0+82j ... xor esi, esi xor edi, edi loc_7F830E36: ; CODE XREF: sub_7F830CE0+1C5j mov ebx, dword_7F835020 add ebx, esi cmp dword ptr [ebx], 0FFFFFFFFh jnz short loc_7F830E9A mov eax, 0FFFFFFF6h test esi, esi mov byte ptr [ebx+4], 81h jz short loc_7F830E5E lea eax, [edi-1] cmp eax, 1 mov eax, 0FFFFFFF5h adc eax, 0FFFFFFFFh loc_7F830E5E: ; CODE XREF: sub_7F830CE0+16Ej push eax ; nStdHandle call ds:GetStdHandle cmp eax, 0FFFFFFFFh mov ebp, eax jz short loc_7F830E94 push ebp ; hFile call ds:GetFileType test eax, eax jz short loc_7F830E94 and eax, 0FFh mov [ebx], ebp cmp eax, 2 jnz short loc_7F830E89 or byte ptr [ebx+4], 40h jmp short loc_7F830E9E ; --------------------------------------------------------------------------- loc_7F830E89: ; CODE XREF: sub_7F830CE0+1A1j cmp eax, 3 jnz short loc_7F830E9E or byte ptr [ebx+4], 8 jmp short loc_7F830E9E ; --------------------------------------------------------------------------- loc_7F830E94: ; CODE XREF: sub_7F830CE0+18Aj ; sub_7F830CE0+195j or byte ptr [ebx+4], 40h jmp short loc_7F830E9E ; --------------------------------------------------------------------------- loc_7F830E9A: ; CODE XREF: sub_7F830CE0+161j or byte ptr [ebx+4], 80h loc_7F830E9E: ; CODE XREF: sub_7F830CE0+1A7j ; sub_7F830CE0+1ACj ... add esi, 24h inc edi cmp esi, 6Ch jl short loc_7F830E36 mov eax, uNumber push eax ; uNumber call ds:SetHandleCount pop ebp pop edi pop esi pop ebx add esp, 44h retn sub_7F830CE0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830EC0 proc near ; CODE XREF: sub_7F830310:loc_7F83042Ap push ebx push esi push edi mov esi, offset dword_7F835020 push ebp mov edi, ds:DeleteCriticalSection loc_7F830ECF: ; CODE XREF: sub_7F830EC0+4Ej mov ebx, [esi] test ebx, ebx jz short loc_7F830F05 lea eax, [ebx+480h] cmp eax, ebx jbe short loc_7F830EFA xor ebp, ebp loc_7F830EE1: ; CODE XREF: sub_7F830EC0+38j cmp [ebx+8], ebp jz short loc_7F830EEC lea eax, [ebx+0Ch] push eax ; lpCriticalSection call edi ; DeleteCriticalSection loc_7F830EEC: ; CODE XREF: sub_7F830EC0+24j add ebx, 24h mov eax, [esi] add eax, 480h cmp eax, ebx ja short loc_7F830EE1 loc_7F830EFA: ; CODE XREF: sub_7F830EC0+1Dj mov eax, [esi] push eax ; lpMem call sub_7F8304A0 add esp, 4 loc_7F830F05: ; CODE XREF: sub_7F830EC0+13j add esi, 4 cmp esi, offset hHeap jb short loc_7F830ECF pop ebp pop edi pop esi pop ebx retn sub_7F830EC0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F830F20 proc near ; CODE XREF: sub_7F830310+DDp var_4 = dword ptr -4 sub esp, 4 mov edx, lpMem push ebx push esi push edi xor esi, esi push ebp cmp byte ptr [edx], 0 jz short loc_7F830F4E loc_7F830F34: ; CODE XREF: sub_7F830F20+2Cj cmp byte ptr [edx], 3Dh jz short loc_7F830F3A inc esi loc_7F830F3A: ; CODE XREF: sub_7F830F20+17j mov edi, edx mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx add edx, ecx cmp byte ptr [edx], 0 jnz short loc_7F830F34 loc_7F830F4E: ; CODE XREF: sub_7F830F20+12j lea eax, ds:4[esi*4] push eax call sub_7F830930 mov dword_7F8399F8, eax add esp, 4 mov ebx, eax test ebx, ebx jnz short loc_7F830F73 push 9 call sub_7F830460 add esp, 4 loc_7F830F73: ; CODE XREF: sub_7F830F20+47j mov ebp, lpMem mov eax, ebp cmp byte ptr [ebp+0], 0 jz short loc_7F830FDF loc_7F830F81: ; CODE XREF: sub_7F830F20+BDj mov edi, ebp mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx mov [esp+14h+var_4], ecx cmp byte ptr [ebp+0], 3Dh jz short loc_7F830FD5 push ecx call sub_7F830930 add esp, 4 mov [ebx], eax test eax, eax jnz short loc_7F830FB1 push 9 call sub_7F830460 add esp, 4 loc_7F830FB1: ; CODE XREF: sub_7F830F20+85j mov edi, ebp mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov eax, ecx shr ecx, 2 mov esi, edi mov edi, [ebx] add ebx, 4 rep movsd mov ecx, eax and ecx, 3 rep movsb loc_7F830FD5: ; CODE XREF: sub_7F830F20+76j add ebp, [esp+14h+var_4] cmp byte ptr [ebp+0], 0 jnz short loc_7F830F81 loc_7F830FDF: ; CODE XREF: sub_7F830F20+5Fj mov eax, lpMem push eax ; lpMem call sub_7F8304A0 add esp, 4 mov dword ptr [ebx], 0 pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F830F20 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831000 proc near ; CODE XREF: sub_7F830310+D8p var_8 = dword ptr -8 var_4 = dword ptr -4 sub esp, 8 push esi push edi push 104h ; nSize mov esi, offset Filename push esi ; lpFilename push 0 ; hModule call ds:GetModuleFileNameA mov eax, dword_7F835130 mov dword_7F839A08, esi cmp byte ptr [eax], 0 jz short loc_7F83102E mov esi, dword_7F835130 loc_7F83102E: ; CODE XREF: sub_7F831000+26j lea eax, [esp+10h+var_4] lea ecx, [esp+10h+var_8] push eax push ecx push 0 push 0 push esi call sub_7F8310A0 mov eax, [esp+24h+var_8] add esp, 14h shl eax, 2 add eax, [esp+10h+var_4] push eax call sub_7F830930 add esp, 4 mov edi, eax test edi, edi jnz short loc_7F831069 push 8 call sub_7F830460 add esp, 4 loc_7F831069: ; CODE XREF: sub_7F831000+5Dj lea eax, [esp+10h+var_4] lea ecx, [esp+10h+var_8] mov edx, [esp+10h+var_8] push eax push ecx lea eax, [edi+edx*4] push eax push edi push esi call sub_7F8310A0 mov eax, [esp+24h+var_8] add esp, 14h dec eax mov dword_7F8399F0, edi pop edi mov dword_7F8399EC, eax pop esi add esp, 8 retn sub_7F831000 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8310A0 proc near ; CODE XREF: sub_7F831000+3Dp ; sub_7F831000+7Dp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h arg_10 = dword ptr 14h mov ecx, [esp+arg_10] push ebx mov edx, [esp+4+arg_C] push esi mov esi, [esp+8+arg_0] push edi mov eax, [esp+0Ch+arg_8] push ebp cmp [esp+10h+arg_4], 0 mov dword ptr [ecx], 0 mov dword ptr [edx], 1 jz short loc_7F8310D2 mov edx, [esp+10h+arg_4] add [esp+10h+arg_4], 4 mov [edx], eax loc_7F8310D2: ; CODE XREF: sub_7F8310A0+25j cmp byte ptr [esi], 22h jz short loc_7F83111D loc_7F8310D7: ; CODE XREF: sub_7F8310A0+6Aj inc dword ptr [ecx] test eax, eax jz short loc_7F8310E2 mov dl, [esi] mov [eax], dl inc eax loc_7F8310E2: ; CODE XREF: sub_7F8310A0+3Bj mov dl, [esi] inc esi xor ebx, ebx mov bl, dl test byte_7F839A49[ebx], 4 jz short loc_7F8310FE inc dword ptr [ecx] test eax, eax jz short loc_7F8310FD mov bl, [esi] mov [eax], bl inc eax loc_7F8310FD: ; CODE XREF: sub_7F8310A0+56j inc esi loc_7F8310FE: ; CODE XREF: sub_7F8310A0+50j cmp dl, 20h jz short loc_7F83110C test dl, dl jz short loc_7F831110 cmp dl, 9 jnz short loc_7F8310D7 loc_7F83110C: ; CODE XREF: sub_7F8310A0+61j test dl, dl jnz short loc_7F831113 loc_7F831110: ; CODE XREF: sub_7F8310A0+65j dec esi jmp short loc_7F831163 ; --------------------------------------------------------------------------- loc_7F831113: ; CODE XREF: sub_7F8310A0+6Ej test eax, eax jz short loc_7F831163 mov byte ptr [eax-1], 0 jmp short loc_7F831163 ; --------------------------------------------------------------------------- loc_7F83111D: ; CODE XREF: sub_7F8310A0+35j inc esi cmp byte ptr [esi], 22h jz short loc_7F831153 loc_7F831123: ; CODE XREF: sub_7F8310A0+B1j mov bl, [esi] test bl, bl jz short loc_7F831153 xor edx, edx mov dl, bl test byte_7F839A49[edx], 4 jz short loc_7F831142 inc dword ptr [ecx] test eax, eax jz short loc_7F831142 mov dl, [esi] inc esi mov [eax], dl inc eax loc_7F831142: ; CODE XREF: sub_7F8310A0+94j ; sub_7F8310A0+9Aj inc dword ptr [ecx] test eax, eax jz short loc_7F83114D mov dl, [esi] mov [eax], dl inc eax loc_7F83114D: ; CODE XREF: sub_7F8310A0+A6j inc esi cmp byte ptr [esi], 22h jnz short loc_7F831123 loc_7F831153: ; CODE XREF: sub_7F8310A0+81j ; sub_7F8310A0+87j inc dword ptr [ecx] test eax, eax jz short loc_7F83115D mov byte ptr [eax], 0 inc eax loc_7F83115D: ; CODE XREF: sub_7F8310A0+B7j cmp byte ptr [esi], 22h jnz short loc_7F831163 inc esi loc_7F831163: ; CODE XREF: sub_7F8310A0+71j ; sub_7F8310A0+75j ... xor edi, edi loc_7F831165: ; CODE XREF: sub_7F8310A0+1B1j cmp byte ptr [esi], 0 jz loc_7F831256 loc_7F83116E: ; CODE XREF: sub_7F8310A0+DBj mov dl, [esi] cmp dl, 20h jz short loc_7F83117A cmp dl, 9 jnz short loc_7F83117D loc_7F83117A: ; CODE XREF: sub_7F8310A0+D3j inc esi jmp short loc_7F83116E ; --------------------------------------------------------------------------- loc_7F83117D: ; CODE XREF: sub_7F8310A0+D8j cmp byte ptr [esi], 0 jz loc_7F831256 cmp [esp+10h+arg_4], 0 jz short loc_7F831198 mov edx, [esp+10h+arg_4] add [esp+10h+arg_4], 4 mov [edx], eax loc_7F831198: ; CODE XREF: sub_7F8310A0+EBj mov edx, [esp+10h+arg_C] inc dword ptr [edx] loc_7F83119E: ; CODE XREF: sub_7F8310A0+18Aj ; sub_7F8310A0+1A2j mov ebx, 1 xor ebp, ebp cmp byte ptr [esi], 5Ch jnz short loc_7F8311B1 loc_7F8311AA: ; CODE XREF: sub_7F8310A0+10Fj inc esi inc ebp cmp byte ptr [esi], 5Ch jz short loc_7F8311AA loc_7F8311B1: ; CODE XREF: sub_7F8310A0+108j cmp byte ptr [esi], 22h jnz short loc_7F8311DA test ebp, 1 jnz short loc_7F8311D7 test edi, edi jz short loc_7F8311CE lea edx, [esi+1] cmp byte ptr [edx], 22h jnz short loc_7F8311CE mov esi, edx jmp short loc_7F8311D0 ; --------------------------------------------------------------------------- loc_7F8311CE: ; CODE XREF: sub_7F8310A0+120j ; sub_7F8310A0+128j xor ebx, ebx loc_7F8311D0: ; CODE XREF: sub_7F8310A0+12Cj cmp edi, 1 sbb edi, edi neg edi loc_7F8311D7: ; CODE XREF: sub_7F8310A0+11Cj shr ebp, 1 loc_7F8311DA: ; CODE XREF: sub_7F8310A0+114j mov edx, ebp dec ebp test edx, edx jz short loc_7F8311F2 loc_7F8311E1: ; CODE XREF: sub_7F8310A0+150j test eax, eax jz short loc_7F8311E9 mov byte ptr [eax], 5Ch inc eax loc_7F8311E9: ; CODE XREF: sub_7F8310A0+143j mov edx, ebp inc dword ptr [ecx] dec ebp test edx, edx jnz short loc_7F8311E1 loc_7F8311F2: ; CODE XREF: sub_7F8310A0+13Fj mov dl, [esi] test dl, dl jz short loc_7F831247 test edi, edi jnz short loc_7F831206 cmp dl, 20h jz short loc_7F831247 cmp dl, 9 jz short loc_7F831247 loc_7F831206: ; CODE XREF: sub_7F8310A0+15Aj test ebx, ebx jz short loc_7F831241 test eax, eax jz short loc_7F83122F xor ebx, ebx mov bl, dl test byte_7F839A49[ebx], 4 jz short loc_7F831221 mov [eax], dl inc esi inc eax inc dword ptr [ecx] loc_7F831221: ; CODE XREF: sub_7F8310A0+179j mov dl, [esi] inc eax inc esi mov [eax-1], dl inc dword ptr [ecx] jmp loc_7F83119E ; --------------------------------------------------------------------------- loc_7F83122F: ; CODE XREF: sub_7F8310A0+16Cj xor ebx, ebx mov bl, dl test byte_7F839A49[ebx], 4 jz short loc_7F83123F inc esi inc dword ptr [ecx] loc_7F83123F: ; CODE XREF: sub_7F8310A0+19Aj inc dword ptr [ecx] loc_7F831241: ; CODE XREF: sub_7F8310A0+168j inc esi jmp loc_7F83119E ; --------------------------------------------------------------------------- loc_7F831247: ; CODE XREF: sub_7F8310A0+156j ; sub_7F8310A0+15Fj ... test eax, eax jz short loc_7F83124F mov byte ptr [eax], 0 inc eax loc_7F83124F: ; CODE XREF: sub_7F8310A0+1A9j inc dword ptr [ecx] jmp loc_7F831165 ; --------------------------------------------------------------------------- loc_7F831256: ; CODE XREF: sub_7F8310A0+C8j ; sub_7F8310A0+E0j cmp [esp+10h+arg_4], 0 jz short loc_7F831267 mov edx, [esp+10h+arg_4] mov dword ptr [edx], 0 loc_7F831267: ; CODE XREF: sub_7F8310A0+1BBj mov edx, [esp+10h+arg_C] pop ebp pop edi pop esi pop ebx inc dword ptr [edx] retn sub_7F8310A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831280 proc near ; CODE XREF: sub_7F831590+2p var_18 = dword ptr -18h CPInfo = _cpinfo ptr -14h arg_0 = dword ptr 4 sub esp, 18h push ebx push esi push edi push ebp push 19h call sub_7F830560 mov eax, [esp+2Ch+arg_0] add esp, 4 push eax call sub_7F8314B0 add esp, 4 mov ebp, eax cmp ebp, dword_7F839B4C jnz short loc_7F8312BC push 19h call sub_7F8305D0 add esp, 4 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 18h retn ; --------------------------------------------------------------------------- loc_7F8312BC: ; CODE XREF: sub_7F831280+26j test ebp, ebp jnz short loc_7F8312D9 call sub_7F831560 push 19h call sub_7F8305D0 add esp, 4 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 18h retn ; --------------------------------------------------------------------------- loc_7F8312D9: ; CODE XREF: sub_7F831280+3Ej mov [esp+28h+var_18], 0 mov eax, offset unk_7F839B70 loc_7F8312E6: ; CODE XREF: sub_7F831280+7Aj cmp [eax], ebp jz loc_7F831389 add eax, 30h inc [esp+28h+var_18] cmp eax, offset unk_7F839C60 jb short loc_7F8312E6 lea eax, [esp+28h+CPInfo] push eax ; lpCPInfo push ebp ; CodePage call ds:GetCPInfo cmp eax, 1 jnz loc_7F83146A mov edi, offset unk_7F839A48 xor eax, eax mov ecx, 40h rep stosd stosb cmp [esp+28h+CPInfo.MaxCharSize], 1 jbe loc_7F83143B lea esi, [esp+28h+CPInfo.LeadByte] cmp [esp+28h+CPInfo.LeadByte], al jz short loc_7F831361 loc_7F831335: ; CODE XREF: sub_7F831280+DFj mov al, [esi+1] test al, al jz short loc_7F831361 xor ecx, ecx xor edx, edx mov cl, [esi] mov dl, al cmp edx, ecx jb short loc_7F831359 loc_7F831348: ; CODE XREF: sub_7F831280+D7j or byte_7F839A49[ecx], 4 inc ecx xor eax, eax mov al, [esi+1] cmp eax, ecx jnb short loc_7F831348 loc_7F831359: ; CODE XREF: sub_7F831280+C6j add esi, 2 cmp byte ptr [esi], 0 jnz short loc_7F831335 loc_7F831361: ; CODE XREF: sub_7F831280+B3j ; sub_7F831280+BAj mov eax, 1 loc_7F831366: ; CODE XREF: sub_7F831280+F3j or byte_7F839A49[eax], 8 inc eax cmp eax, 0FFh jb short loc_7F831366 push ebp mov dword_7F839B4C, ebp call sub_7F831500 add esp, 4 jmp loc_7F831442 ; --------------------------------------------------------------------------- loc_7F831389: ; CODE XREF: sub_7F831280+68j mov edi, offset unk_7F839A48 xor eax, eax mov ecx, 40h rep stosd stosb mov ecx, [esp+28h+var_18] lea edx, [ecx+ecx*2] lea edi, ds:0[edx*2] loc_7F8313A6: ; CODE XREF: sub_7F831280+16Aj lea ecx, [edi+eax] lea esi, unk_7F839B80[ecx*8] cmp byte ptr [esi], 0 jz short loc_7F8313E6 loc_7F8313B5: ; CODE XREF: sub_7F831280+164j mov cl, [esi+1] test cl, cl jz short loc_7F8313E6 xor edx, edx xor ebx, ebx mov dl, [esi] mov bl, cl cmp ebx, edx jb short loc_7F8313DE mov cl, byte_7F839B68[eax] loc_7F8313CE: ; CODE XREF: sub_7F831280+15Cj or byte_7F839A49[edx], cl inc edx xor ebx, ebx mov bl, [esi+1] cmp ebx, edx jnb short loc_7F8313CE loc_7F8313DE: ; CODE XREF: sub_7F831280+146j add esi, 2 cmp byte ptr [esi], 0 jnz short loc_7F8313B5 loc_7F8313E6: ; CODE XREF: sub_7F831280+133j ; sub_7F831280+13Aj inc eax cmp eax, 4 jb short loc_7F8313A6 push ebp mov dword_7F839B4C, ebp call sub_7F831500 add esp, 4 mov edx, offset dword_7F839B58 mov dword_7F839B50, eax mov eax, [esp+28h+var_18] shl eax, 4 mov ebx, dword_7F839B78[eax+eax*2] push 19h lea ecx, unk_7F839B74[eax+eax*2] mov eax, [ecx] mov ecx, [ecx+8] mov [edx], eax mov [edx+4], ebx mov [edx+8], ecx call sub_7F8305D0 add esp, 4 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 18h retn ; --------------------------------------------------------------------------- loc_7F83143B: ; CODE XREF: sub_7F831280+A5j xor eax, eax mov dword_7F839B4C, eax loc_7F831442: ; CODE XREF: sub_7F831280+104j mov ecx, offset dword_7F839B58 push 19h mov dword_7F839B50, eax xor eax, eax mov [ecx], eax mov [ecx+4], eax mov [ecx+8], eax call sub_7F8305D0 add esp, 4 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 18h retn ; --------------------------------------------------------------------------- loc_7F83146A: ; CODE XREF: sub_7F831280+8Bj cmp dword_7F839B64, 0 jz short loc_7F83148C call sub_7F831560 push 19h call sub_7F8305D0 add esp, 4 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 18h retn ; --------------------------------------------------------------------------- loc_7F83148C: ; CODE XREF: sub_7F831280+1F1j push 19h call sub_7F8305D0 add esp, 4 mov eax, 0FFFFFFFFh pop ebp pop edi pop esi pop ebx add esp, 18h retn sub_7F831280 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8314B0 proc near ; CODE XREF: sub_7F831280+16p arg_0 = dword ptr 4 mov dword_7F839B64, 0 mov eax, [esp+arg_0] cmp eax, 0FFFFFFFEh jnz short loc_7F8314D3 mov dword_7F839B64, 1 jmp ds:GetOEMCP ; --------------------------------------------------------------------------- loc_7F8314D3: ; CODE XREF: sub_7F8314B0+11j cmp eax, 0FFFFFFFDh jnz short loc_7F8314E8 mov dword_7F839B64, 1 jmp ds:GetACP ; --------------------------------------------------------------------------- loc_7F8314E8: ; CODE XREF: sub_7F8314B0+26j cmp eax, 0FFFFFFFCh jnz short locret_7F8314FC mov dword_7F839B64, 1 mov eax, dword_7F8399D0 locret_7F8314FC: ; CODE XREF: sub_7F8314B0+3Bj retn sub_7F8314B0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831500 proc near ; CODE XREF: sub_7F831280+FCp ; sub_7F831280+173p arg_0 = dword ptr 4 mov eax, [esp+arg_0] sub eax, 3A4h ; switch 19 cases cmp eax, 12h ja short loc_7F83151D ; jumptable 7F831516 default case xor ecx, ecx mov cl, ds:byte_7F83154C[eax] jmp ds:off_7F831538[ecx*4] ; switch jump ; --------------------------------------------------------------------------- loc_7F83151D: ; CODE XREF: sub_7F831500+Cj ; sub_7F831500+16j ; DATA XREF: ... xor eax, eax ; jumptable 7F831516 default case retn ; --------------------------------------------------------------------------- loc_7F831520: ; CODE XREF: sub_7F831500+16j ; DATA XREF: .text:off_7F831538o mov eax, 411h ; jumptable 7F831516 case 932 retn ; --------------------------------------------------------------------------- loc_7F831526: ; CODE XREF: sub_7F831500+16j ; DATA XREF: .text:off_7F831538o mov eax, 804h ; jumptable 7F831516 case 936 retn ; --------------------------------------------------------------------------- loc_7F83152C: ; CODE XREF: sub_7F831500+16j ; DATA XREF: .text:off_7F831538o mov eax, 412h ; jumptable 7F831516 case 949 retn ; --------------------------------------------------------------------------- loc_7F831532: ; CODE XREF: sub_7F831500+16j ; DATA XREF: .text:off_7F831538o mov eax, 404h ; jumptable 7F831516 case 950 retn sub_7F831500 endp ; --------------------------------------------------------------------------- off_7F831538 dd offset loc_7F831520 ; DATA XREF: sub_7F831500+16r dd offset loc_7F831526 ; jump table for switch statement dd offset loc_7F83152C dd offset loc_7F831532 dd offset loc_7F83151D byte_7F83154C db 0, 4, 4, 4 ; DATA XREF: sub_7F831500+10r db 1, 4, 4, 4 ; indirect table for switch statement db 4, 4, 4, 4 db 4, 4, 4, 4 db 4, 2, 3 align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831560 proc near ; CODE XREF: sub_7F831280+40p ; sub_7F831280+1F3p push edi xor eax, eax mov edi, offset unk_7F839A48 mov ecx, 40h rep stosd stosb mov dword_7F839B58, eax mov ecx, offset dword_7F839B58 pop edi mov dword_7F839B4C, eax mov dword_7F839B50, eax mov [ecx+4], eax mov [ecx+8], eax retn sub_7F831560 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831590 proc near ; CODE XREF: sub_7F830310+D3p push 0FFFFFFFDh call sub_7F831280 add esp, 4 retn sub_7F831590 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8315A0 proc near ; CODE XREF: sub_7F830310+B7p var_4 = dword ptr -4 sub esp, 4 cmp dword_7F839C64, 0 push ebx push esi push edi push ebp jnz short loc_7F8315F0 mov esi, ds:GetEnvironmentStringsW call esi ; GetEnvironmentStringsW mov edi, eax test edi, edi jz short loc_7F8315CE mov dword_7F839C64, 1 mov ebx, [esp+14h+var_4] jmp short loc_7F8315FE ; --------------------------------------------------------------------------- loc_7F8315CE: ; CODE XREF: sub_7F8315A0+1Cj call ds:GetEnvironmentStrings mov ebx, eax test ebx, ebx jz short loc_7F8315E6 mov dword_7F839C64, 2 jmp short loc_7F8315FE ; --------------------------------------------------------------------------- loc_7F8315E6: ; CODE XREF: sub_7F8315A0+38j xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F8315F0: ; CODE XREF: sub_7F8315A0+Ej mov edi, [esp+14h+var_4] mov ebx, [esp+14h+var_4] mov esi, ds:GetEnvironmentStringsW loc_7F8315FE: ; CODE XREF: sub_7F8315A0+2Cj ; sub_7F8315A0+44j cmp dword_7F839C64, 1 jnz loc_7F8316AD test edi, edi jnz short loc_7F831621 call esi ; GetEnvironmentStringsW mov edi, eax test edi, edi jnz short loc_7F831621 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F831621: ; CODE XREF: sub_7F8315A0+6Dj ; sub_7F8315A0+75j cmp word ptr [edi], 0 mov esi, edi jz short loc_7F83163B loc_7F831629: ; CODE XREF: sub_7F8315A0+90j ; sub_7F8315A0+99j add esi, 2 cmp word ptr [esi], 0 jnz short loc_7F831629 add esi, 2 cmp word ptr [esi], 0 jnz short loc_7F831629 loc_7F83163B: ; CODE XREF: sub_7F8315A0+87j sub esi, edi push 0 ; lpUsedDefaultChar sar esi, 1 push 0 ; lpDefaultChar inc esi push 0 ; cbMultiByte push 0 ; lpMultiByteStr push esi ; cchWideChar push edi ; lpWideCharStr push 0 ; dwFlags push 0 ; CodePage call ds:WideCharToMultiByte mov ebp, eax test ebp, ebp jz short loc_7F83169C push ebp call sub_7F830930 add esp, 4 mov ebx, eax test ebx, ebx jz short loc_7F83169C push 0 ; lpUsedDefaultChar push 0 ; lpDefaultChar push ebp ; cbMultiByte push ebx ; lpMultiByteStr push esi ; cchWideChar push edi ; lpWideCharStr push 0 ; dwFlags push 0 ; CodePage call ds:WideCharToMultiByte test eax, eax jnz short loc_7F83168B push ebx ; lpMem call sub_7F8304A0 add esp, 4 xor ebx, ebx loc_7F83168B: ; CODE XREF: sub_7F8315A0+DEj push edi ; LPWCH call ds:FreeEnvironmentStringsW mov eax, ebx pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F83169C: ; CODE XREF: sub_7F8315A0+B9j ; sub_7F8315A0+C8j push edi ; LPWCH call ds:FreeEnvironmentStringsW xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F8316AD: ; CODE XREF: sub_7F8315A0+65j cmp dword_7F839C64, 2 jnz short loc_7F831731 test ebx, ebx jnz short loc_7F8316D0 call ds:GetEnvironmentStrings mov ebx, eax test ebx, ebx jnz short loc_7F8316D0 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F8316D0: ; CODE XREF: sub_7F8315A0+118j ; sub_7F8315A0+124j mov ebp, ebx cmp byte ptr [ebx], 0 jz short loc_7F8316E5 loc_7F8316D7: ; CODE XREF: sub_7F8315A0+13Cj ; sub_7F8315A0+143j inc ebp cmp byte ptr [ebp+0], 0 jnz short loc_7F8316D7 inc ebp cmp byte ptr [ebp+0], 0 jnz short loc_7F8316D7 loc_7F8316E5: ; CODE XREF: sub_7F8315A0+135j sub ebp, ebx inc ebp push ebp call sub_7F830930 mov [esp+18h+var_4], eax add esp, 4 test eax, eax jnz short loc_7F83170A push ebx ; LPCH call ds:FreeEnvironmentStringsA xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F83170A: ; CODE XREF: sub_7F8315A0+157j mov edi, [esp+14h+var_4] mov esi, ebx mov ecx, ebp shr ecx, 2 rep movsd mov ecx, ebp push ebx ; LPCH and ecx, 3 rep movsb call ds:FreeEnvironmentStringsA mov eax, [esp+14h+var_4] pop ebp pop edi pop esi pop ebx add esp, 4 retn ; --------------------------------------------------------------------------- loc_7F831731: ; CODE XREF: sub_7F8315A0+114j xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F8315A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831740 proc near ; CODE XREF: sub_7F830310+2Ep ; sub_7F830310+57p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dword_7F8398CC, eax retn sub_7F831740 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831750 proc near ; CODE XREF: sub_7F830460:loc_7F830477p mov eax, dword_7F8398C8 cmp eax, 1 jz short loc_7F831767 test eax, eax jnz short locret_7F83178C cmp dword_7F8398CC, 1 jnz short locret_7F83178C loc_7F831767: ; CODE XREF: sub_7F831750+8j push 0FCh call sub_7F831790 add esp, 4 mov eax, dword_7F839F58 test eax, eax jz short loc_7F83177F call eax ; dword_7F839F58 loc_7F83177F: ; CODE XREF: sub_7F831750+2Bj push 0FFh call sub_7F831790 add esp, 4 locret_7F83178C: ; CODE XREF: sub_7F831750+Cj ; sub_7F831750+15j retn sub_7F831750 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831790 proc near ; CODE XREF: sub_7F830460+21p ; sub_7F831750+1Cp ... NumberOfBytesWritten= dword ptr -1A8h var_1A4 = byte ptr -1A4h var_140 = byte ptr -140h Filename = byte ptr -104h arg_0 = dword ptr 4 sub esp, 1A8h xor eax, eax mov ecx, offset dword_7F839ED0 push ebx mov edx, [esp+1ACh+arg_0] push esi push edi push ebp loc_7F8317A8: ; CODE XREF: sub_7F831790+26j cmp [ecx], edx jz short loc_7F8317B8 add ecx, 8 inc eax cmp ecx, offset dword_7F839F58 jb short loc_7F8317A8 loc_7F8317B8: ; CODE XREF: sub_7F831790+1Aj cmp dword_7F839ED0[eax*8], edx lea ebx, ds:0[eax*8] jnz loc_7F831973 cmp dword_7F8398C8, 1 jz loc_7F831938 cmp dword_7F8398C8, 0 jnz short loc_7F8317EF cmp dword_7F8398CC, 1 jz loc_7F831938 loc_7F8317EF: ; CODE XREF: sub_7F831790+50j cmp edx, 0FCh jz loc_7F831973 lea eax, [esp+1B8h+Filename] push 104h ; nSize push eax ; lpFilename mov ebp, ds:GetModuleFileNameA push 0 ; hModule call ebp ; GetModuleFileNameA test eax, eax jnz short loc_7F83182C mov esi, offset aProgramNameUnk ; "" lea edi, [esp+1B8h+Filename] mov ecx, 5 rep movsd movsw movsb loc_7F83182C: ; CODE XREF: sub_7F831790+84j lea ebp, [esp+1B8h+Filename] lea edi, [esp+1B8h+Filename] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx cmp ecx, 3Ch jbe short loc_7F831870 lea edi, [esp+1B8h+Filename] mov ecx, 0FFFFFFFFh sub eax, eax push 3 repne scasb not ecx lea ebp, [esp+ecx+1BCh+var_140] push offset a___ ; "..." push ebp call sub_7F831A70 add esp, 0Ch loc_7F831870: ; CODE XREF: sub_7F831790+B8j mov esi, offset aRuntimeErrorPr ; "Runtime Error!\n\nProgram: " lea edi, [esp+1B8h+var_1A4] mov ecx, 6 rep movsd movsw mov edi, ebp mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov edx, ecx mov esi, edi mov ecx, 0FFFFFFFFh lea edi, [esp+1B8h+var_1A4] sub eax, eax repne scasb dec edi mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb mov edi, offset asc_7F839F84 ; "\n\n" mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov edx, ecx mov esi, edi mov ecx, 0FFFFFFFFh lea edi, [esp+1B8h+var_1A4] sub eax, eax repne scasb dec edi mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb mov edi, off_7F839ED4[ebx] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx sub edi, ecx mov esi, edi mov edx, ecx lea edi, [esp+1B8h+var_1A4] mov ecx, 0FFFFFFFFh sub eax, eax repne scasb dec edi mov ecx, edx shr ecx, 2 rep movsd mov ecx, edx push 12010h and ecx, 3 push offset aMicrosoftVisua ; "Microsoft Visual C++ Runtime Library" rep movsb lea eax, [esp+1C0h+var_1A4] push eax call sub_7F831B40 add esp, 0Ch pop ebp pop edi pop esi pop ebx add esp, 1A8h retn ; --------------------------------------------------------------------------- loc_7F831938: ; CODE XREF: sub_7F831790+43j ; sub_7F831790+59j mov eax, dword_7F835020 mov esi, [eax+48h] cmp esi, 0FFFFFFFFh jnz short loc_7F83194F push 0FFFFFFF4h ; nStdHandle call ds:GetStdHandle mov esi, eax loc_7F83194F: ; CODE XREF: sub_7F831790+1B3j mov edx, off_7F839ED4[ebx] push 0 ; lpOverlapped lea eax, [esp+1BCh+NumberOfBytesWritten] mov edi, edx push eax ; lpNumberOfBytesWritten mov ecx, 0FFFFFFFFh sub eax, eax repne scasb not ecx dec ecx push ecx ; nNumberOfBytesToWrite push edx ; lpBuffer push esi ; hFile call ds:WriteFile loc_7F831973: ; CODE XREF: sub_7F831790+36j ; sub_7F831790+65j pop ebp pop edi pop esi pop ebx add esp, 1A8h retn sub_7F831790 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831980 proc near ; DATA XREF: .data:7F83300Co cmp dword ptr Caption+40h, 0 push esi jnz short loc_7F831996 mov dword ptr Caption+40h, 200h jmp short loc_7F8319A9 ; --------------------------------------------------------------------------- loc_7F831996: ; CODE XREF: sub_7F831980+8j cmp dword ptr Caption+40h, 14h jge short loc_7F8319A9 mov dword ptr Caption+40h, 14h loc_7F8319A9: ; CODE XREF: sub_7F831980+14j ; sub_7F831980+1Dj push 4 mov eax, dword ptr Caption+40h push eax call sub_7F831AE0 add esp, 8 mov dword ptr Caption+44h, eax test eax, eax jnz short loc_7F8319EB mov dword ptr Caption+40h, 14h push 4 push 14h call sub_7F831AE0 add esp, 8 mov dword ptr Caption+44h, eax test eax, eax jnz short loc_7F8319EB push 1Ah call sub_7F830460 add esp, 4 loc_7F8319EB: ; CODE XREF: sub_7F831980+40j ; sub_7F831980+5Fj mov ecx, offset off_7F839FC0 xor eax, eax loc_7F8319F2: ; CODE XREF: sub_7F831980+85j mov edx, dword ptr Caption+44h add eax, 4 mov [edx+eax-4], ecx add ecx, 20h cmp eax, 50h jl short loc_7F8319F2 xor edx, edx mov esi, offset unk_7F839FD0 loc_7F831A0E: ; CODE XREF: sub_7F831980+C3j mov eax, edx mov ecx, edx and eax, 0FFFFFFE7h and ecx, 1Fh sar eax, 3 shl ecx, 2 mov eax, dword_7F835020[eax] lea ecx, [ecx+ecx*8] mov eax, [eax+ecx] cmp eax, 0FFFFFFFFh jz short loc_7F831A33 test eax, eax jnz short loc_7F831A39 loc_7F831A33: ; CODE XREF: sub_7F831980+ADj mov dword ptr [esi], 0FFFFFFFFh loc_7F831A39: ; CODE XREF: sub_7F831980+B1j add esi, 20h inc edx cmp esi, offset unk_7F83A030 jb short loc_7F831A0E pop esi retn sub_7F831980 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831A50 proc near ; DATA XREF: .data:7F833018o call sub_7F831D30 cmp byte_7F839A10, 0 jz short locret_7F831A63 jmp sub_7F831BE0 ; --------------------------------------------------------------------------- locret_7F831A63: ; CODE XREF: sub_7F831A50+Cj retn sub_7F831A50 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7F831A70 proc near ; CODE XREF: sub_7F831790+D8p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push esi mov edi, [ebp+arg_0] mov esi, [ebp+arg_4] mov edx, edi mov ecx, [ebp+arg_8] jecxz short loc_7F831A8E loc_7F831A82: ; CODE XREF: sub_7F831A70+18j lodsb or al, al jz short loc_7F831A8A stosb loop loc_7F831A82 loc_7F831A8A: ; CODE XREF: sub_7F831A70+15j xor al, al rep stosb loc_7F831A8E: ; CODE XREF: sub_7F831A70+10j mov eax, edx pop esi pop edi leave retn sub_7F831A70 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831AA0 proc near ; CODE XREF: sub_7F830950+2Fp ; sub_7F831AE0+3Cp arg_0 = dword ptr 4 push 9 call sub_7F830560 add esp, 4 mov eax, dword_7F833F14 test eax, eax jz short loc_7F831AD1 mov ecx, [esp+arg_0] push ecx call eax ; dword_7F833F14 add esp, 4 test eax, eax jz short loc_7F831AD1 push 9 call sub_7F8305D0 add esp, 4 mov eax, 1 retn ; --------------------------------------------------------------------------- loc_7F831AD1: ; CODE XREF: sub_7F831AA0+11j ; sub_7F831AA0+1Fj push 9 call sub_7F8305D0 add esp, 4 xor eax, eax retn sub_7F831AA0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831AE0 proc near ; CODE XREF: sub_7F8309B0+1Ep ; sub_7F830A60+20p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov edi, [esp+8+arg_4] imul edi, [esp+8+arg_0] test edi, edi jnz short loc_7F831AF4 mov edi, 1 loc_7F831AF4: ; CODE XREF: sub_7F831AE0+Dj mov esi, ds:HeapAlloc mov eax, hHeap loc_7F831AFF: ; CODE XREF: sub_7F831AE0+4Bj cmp edi, 0FFFFFFE0h jbe short loc_7F831B08 xor eax, eax jmp short loc_7F831B0E ; --------------------------------------------------------------------------- loc_7F831B08: ; CODE XREF: sub_7F831AE0+22j push edi ; dwBytes push 8 ; dwFlags push eax ; hHeap call esi ; HeapAlloc loc_7F831B0E: ; CODE XREF: sub_7F831AE0+26j test eax, eax jnz short loc_7F831B2F cmp dword_7F83A244, 0 jz short loc_7F831B2F push edi call sub_7F831AA0 add esp, 4 test eax, eax mov eax, hHeap jnz short loc_7F831AFF xor eax, eax loc_7F831B2F: ; CODE XREF: sub_7F831AE0+30j ; sub_7F831AE0+39j pop edi pop esi retn sub_7F831AE0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831B40 proc near ; CODE XREF: sub_7F831790+195p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi push edi xor esi, esi cmp dword_7F83A4E8, esi jnz short loc_7F831B8F push offset aUser32_dll ; "user32.dll" call ds:LoadLibraryA mov edi, eax test edi, edi jz short loc_7F831BCC push offset aMessageboxa ; "MessageBoxA" mov ebx, ds:GetProcAddress push edi ; hModule call ebx ; GetProcAddress mov dword_7F83A4E8, eax test eax, eax jz short loc_7F831BCC push offset aGetactivewindo ; "GetActiveWindow" push edi ; hModule call ebx ; GetProcAddress push offset aGetlastactivep ; "GetLastActivePopup" mov dword_7F83A4EC, eax push edi ; hModule call ebx ; GetProcAddress mov dword_7F83A4F0, eax loc_7F831B8F: ; CODE XREF: sub_7F831B40+Bj mov eax, dword_7F83A4EC test eax, eax jz short loc_7F831B9C call eax ; dword_7F83A4EC mov esi, eax loc_7F831B9C: ; CODE XREF: sub_7F831B40+56j test esi, esi jz short loc_7F831BB2 cmp dword_7F83A4F0, 0 jz short loc_7F831BB2 push esi call dword_7F83A4F0 mov esi, eax loc_7F831BB2: ; CODE XREF: sub_7F831B40+5Ej ; sub_7F831B40+67j mov eax, [esp+0Ch+arg_8] mov ecx, [esp+0Ch+arg_4] mov edx, [esp+0Ch+arg_0] push eax push ecx push edx push esi call dword_7F83A4E8 pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F831BCC: ; CODE XREF: sub_7F831B40+1Cj ; sub_7F831B40+33j xor eax, eax pop edi pop esi pop ebx retn sub_7F831B40 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831BE0 proc near ; CODE XREF: sub_7F831A50+Ej push ebx push esi push edi xor esi, esi push ebp mov edi, 3 push 2 call sub_7F830560 add esp, 4 cmp dword ptr Caption+40h, edi jle short loc_7F831C67 mov ebp, 0Ch mov ebx, ds:DeleteCriticalSection loc_7F831C08: ; CODE XREF: sub_7F831BE0+85j mov eax, dword ptr Caption+44h mov eax, [eax+ebp] test eax, eax jz short loc_7F831C5B test byte ptr [eax+0Ch], 83h jz short loc_7F831C29 push eax call sub_7F831E00 add esp, 4 cmp eax, 0FFFFFFFFh jz short loc_7F831C29 inc esi loc_7F831C29: ; CODE XREF: sub_7F831BE0+38j ; sub_7F831BE0+46j cmp ebp, 50h jl short loc_7F831C5B mov eax, dword ptr Caption+44h mov eax, [eax+ebp] add eax, 20h push eax ; lpCriticalSection call ebx ; DeleteCriticalSection mov ecx, dword ptr Caption+44h mov edx, [ecx+ebp] push edx ; lpMem call sub_7F8304A0 add esp, 4 mov ecx, dword ptr Caption+44h mov dword ptr [ecx+ebp], 0 loc_7F831C5B: ; CODE XREF: sub_7F831BE0+32j ; sub_7F831BE0+4Cj add ebp, 4 inc edi cmp edi, dword ptr Caption+40h jl short loc_7F831C08 loc_7F831C67: ; CODE XREF: sub_7F831BE0+1Bj push 2 call sub_7F8305D0 add esp, 4 mov eax, esi pop ebp pop edi pop esi pop ebx retn sub_7F831BE0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831C80 proc near ; CODE XREF: sub_7F831D40+50p ; sub_7F831D40+69p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push esi call sub_7F831CC0 add esp, 4 test eax, eax jz short loc_7F831C99 mov eax, 0FFFFFFFFh pop esi retn ; --------------------------------------------------------------------------- loc_7F831C99: ; CODE XREF: sub_7F831C80+10j test byte ptr [esi+0Dh], 40h jz short loc_7F831CB8 mov eax, [esi+10h] push eax call sub_7F831EA0 add esp, 4 cmp eax, 1 mov eax, 0 pop esi adc eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_7F831CB8: ; CODE XREF: sub_7F831C80+1Dj xor eax, eax pop esi retn sub_7F831C80 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831CC0 proc near ; CODE XREF: sub_7F831C80+6p ; sub_7F831E40+12p arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi xor edi, edi mov eax, [esi+0Ch] mov ecx, eax and cl, 3 cmp cl, 2 jnz short loc_7F831D12 test eax, 108h jz short loc_7F831D12 mov eax, [esi+8] mov ebx, [esi] sub ebx, eax test ebx, ebx jle short loc_7F831D12 push ebx push eax mov eax, [esi+10h] push eax call sub_7F831F50 add esp, 0Ch cmp eax, ebx jnz short loc_7F831D09 mov eax, [esi+0Ch] test al, 80h jz short loc_7F831D12 and eax, 0FFFFFFFDh mov [esi+0Ch], eax jmp short loc_7F831D12 ; --------------------------------------------------------------------------- loc_7F831D09: ; CODE XREF: sub_7F831CC0+38j or dword ptr [esi+0Ch], 20h mov edi, 0FFFFFFFFh loc_7F831D12: ; CODE XREF: sub_7F831CC0+14j ; sub_7F831CC0+1Bj ... mov eax, [esi+8] mov [esi], eax mov eax, edi mov dword ptr [esi+4], 0 pop edi pop esi pop ebx retn sub_7F831CC0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831D30 proc near ; CODE XREF: sub_7F831A50p push 1 call sub_7F831D40 add esp, 4 retn sub_7F831D30 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831D40 proc near ; CODE XREF: sub_7F831D30+2p var_4 = dword ptr -4 arg_0 = dword ptr 4 sub esp, 4 push ebx push esi push edi push ebp xor edi, edi push 2 xor esi, esi xor ebx, ebx mov [esp+18h+var_4], edi call sub_7F830560 mov ebp, [esp+18h+arg_0] add esp, 4 loc_7F831D5F: ; CODE XREF: sub_7F831D40+9Aj mov eax, dword ptr Caption+44h mov eax, [eax+ebx] test eax, eax jz short loc_7F831DD0 test byte ptr [eax+0Ch], 83h jz short loc_7F831DD0 push eax push esi call sub_7F830630 add esp, 8 mov eax, dword ptr Caption+44h mov ecx, [eax+ebx] mov eax, [ecx+0Ch] test al, 83h jz short loc_7F831DBE cmp ebp, 1 jnz short loc_7F831DA0 push ecx call sub_7F831C80 add esp, 4 cmp eax, 0FFFFFFFFh jz short loc_7F831DBE inc edi jmp short loc_7F831DBE ; --------------------------------------------------------------------------- loc_7F831DA0: ; CODE XREF: sub_7F831D40+4Dj test ebp, ebp jnz short loc_7F831DBE test al, 2 jz short loc_7F831DBE push ecx call sub_7F831C80 add esp, 4 cmp eax, 0FFFFFFFFh jnz short loc_7F831DBE mov [esp+14h+var_4], 0FFFFFFFFh loc_7F831DBE: ; CODE XREF: sub_7F831D40+48j ; sub_7F831D40+5Bj ... mov eax, dword ptr Caption+44h mov ecx, [eax+ebx] push ecx push esi call sub_7F8306A0 add esp, 8 loc_7F831DD0: ; CODE XREF: sub_7F831D40+29j ; sub_7F831D40+2Fj add ebx, 4 inc esi cmp ebx, 800h jl short loc_7F831D5F push 2 call sub_7F8305D0 add esp, 4 mov eax, edi cmp ebp, 1 jz short loc_7F831DF1 mov eax, [esp+14h+var_4] loc_7F831DF1: ; CODE XREF: sub_7F831D40+ABj pop ebp pop edi pop esi pop ebx add esp, 4 retn sub_7F831D40 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831E00 proc near ; CODE XREF: sub_7F831BE0+3Bp arg_0 = dword ptr 4 push esi push edi mov edi, 0FFFFFFFFh mov esi, [esp+8+arg_0] test byte ptr [esi+0Ch], 40h jz short loc_7F831E1D mov dword ptr [esi+0Ch], 0 mov eax, edi pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F831E1D: ; CODE XREF: sub_7F831E00+Fj push esi call sub_7F8305F0 add esp, 4 push esi call sub_7F831E40 add esp, 4 mov edi, eax push esi call sub_7F830660 add esp, 4 mov eax, edi pop edi pop esi retn sub_7F831E00 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831E40 proc near ; CODE XREF: sub_7F831E00+27p arg_0 = dword ptr 4 push esi push edi mov edi, 0FFFFFFFFh mov esi, [esp+8+arg_0] test byte ptr [esi+0Ch], 83h jz short loc_7F831E93 push esi call sub_7F831CC0 add esp, 4 mov edi, eax push esi call sub_7F832310 add esp, 4 mov eax, [esi+10h] push eax call sub_7F832210 add esp, 4 test eax, eax jge short loc_7F831E7C mov edi, 0FFFFFFFFh jmp short loc_7F831E93 ; --------------------------------------------------------------------------- loc_7F831E7C: ; CODE XREF: sub_7F831E40+33j mov eax, [esi+1Ch] test eax, eax jz short loc_7F831E93 push eax ; lpMem call sub_7F8304A0 mov dword ptr [esi+1Ch], 0 add esp, 4 loc_7F831E93: ; CODE XREF: sub_7F831E40+Fj ; sub_7F831E40+3Aj ... mov dword ptr [esi+0Ch], 0 mov eax, edi pop edi pop esi retn sub_7F831E40 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831EA0 proc near ; CODE XREF: sub_7F831C80+23p arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] push edi cmp uNumber, esi jbe short loc_7F831F2E mov eax, esi and eax, 0FFFFFFE7h sar eax, 3 lea ebx, dword_7F835020[eax] mov eax, esi and eax, 1Fh mov ecx, [ebx] shl eax, 2 lea edi, [eax+eax*8] test byte ptr [ecx+edi+4], 1 jz short loc_7F831F2E push esi call sub_7F832440 add esp, 4 mov eax, [ebx] test byte ptr [eax+edi+4], 1 jz short loc_7F831F0F push esi mov edi, 0 call sub_7F8323F0 add esp, 4 push eax ; hFile call ds:FlushFileBuffers test eax, eax jnz short loc_7F831F04 call ds:GetLastError mov edi, eax loc_7F831F04: ; CODE XREF: sub_7F831EA0+5Aj test edi, edi jz short loc_7F831F1F call sub_7F830060 mov [eax], edi loc_7F831F0F: ; CODE XREF: sub_7F831EA0+41j mov edi, 0FFFFFFFFh call sub_7F830050 mov dword ptr [eax], 9 loc_7F831F1F: ; CODE XREF: sub_7F831EA0+66j push esi call sub_7F8324B0 add esp, 4 mov eax, edi pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_7F831F2E: ; CODE XREF: sub_7F831EA0+Dj ; sub_7F831EA0+2Fj call sub_7F830050 pop edi mov dword ptr [eax], 9 mov eax, 0FFFFFFFFh pop esi pop ebx retn sub_7F831EA0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F831F50 proc near ; CODE XREF: sub_7F831CC0+2Ep arg_0 = dword ptr 4 lpBuffer = dword ptr 8 nNumberOfBytesToWrite= dword ptr 0Ch push esi push edi mov esi, [esp+8+arg_0] cmp uNumber, esi jbe short loc_7F831FAA mov eax, esi mov ecx, esi and eax, 0FFFFFFE7h and ecx, 1Fh sar eax, 3 shl ecx, 2 mov edx, dword_7F835020[eax] lea eax, [ecx+ecx*8] test byte ptr [edx+eax+4], 1 jz short loc_7F831FAA push esi call sub_7F832440 mov eax, [esp+0Ch+nNumberOfBytesToWrite] mov ecx, [esp+0Ch+lpBuffer] add esp, 4 push eax ; nNumberOfBytesToWrite push ecx ; lpBuffer push esi ; int call sub_7F831FD0 add esp, 0Ch mov edi, eax push esi call sub_7F8324B0 add esp, 4 mov eax, edi pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F831FAA: ; CODE XREF: sub_7F831F50+Cj ; sub_7F831F50+2Cj call sub_7F830050 mov dword ptr [eax], 9 call sub_7F830060 pop edi mov dword ptr [eax], 0 mov eax, 0FFFFFFFFh pop esi retn sub_7F831F50 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F831FD0(int, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite) sub_7F831FD0 proc near ; CODE XREF: sub_7F831F50+42p var_418 = dword ptr -418h NumberOfBytesWritten= dword ptr -414h var_410 = dword ptr -410h var_40C = dword ptr -40Ch var_408 = dword ptr -408h Buffer = byte ptr -404h arg_0 = dword ptr 4 lpBuffer = dword ptr 8 nNumberOfBytesToWrite= dword ptr 0Ch sub esp, 418h push ebx push esi push edi push ebp xor edi, edi mov ebp, [esp+428h+nNumberOfBytesToWrite] mov [esp+428h+var_408], edi cmp ebp, edi jnz short loc_7F831FF8 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 418h retn ; --------------------------------------------------------------------------- loc_7F831FF8: ; CODE XREF: sub_7F831FD0+19j mov edx, [esp+428h+arg_0] mov eax, edx and eax, 0FFFFFFE7h sar eax, 3 add eax, offset dword_7F835020 mov [esp+428h+var_410], eax mov eax, edx and eax, 1Fh mov ebx, [esp+428h+var_410] shl eax, 2 lea ecx, [eax+eax*8] mov eax, [ebx] mov [esp+428h+var_40C], ecx test byte ptr [eax+ecx+4], 20h jz short loc_7F832039 push 2 ; dwMoveMethod push 0 ; lDistanceToMove push edx ; int call sub_7F8324E0 add esp, 0Ch loc_7F832039: ; CODE XREF: sub_7F831FD0+5Aj mov eax, [esp+428h+var_410] mov ecx, [esp+428h+var_40C] add ecx, [eax] test byte ptr [ecx+4], 80h jz loc_7F8320D5 mov [esp+428h+var_418], 0 mov ebx, [esp+428h+lpBuffer] loc_7F83205C: ; CODE XREF: sub_7F831FD0+101j mov eax, ebx sub eax, [esp+428h+lpBuffer] cmp eax, ebp jnb loc_7F83210E lea esi, [esp+428h+Buffer] loc_7F832071: ; CODE XREF: sub_7F831FD0+CAj mov eax, ebx sub eax, [esp+428h+lpBuffer] cmp eax, ebp jnb short loc_7F83209C mov al, [ebx] inc ebx cmp al, 0Ah jnz short loc_7F83208A mov byte ptr [esi], 0Dh inc edi inc esi loc_7F83208A: ; CODE XREF: sub_7F831FD0+B3j mov [esi], al inc esi mov eax, esi lea ecx, [esp+428h+Buffer] sub eax, ecx cmp eax, 400h jl short loc_7F832071 loc_7F83209C: ; CODE XREF: sub_7F831FD0+ACj lea eax, [esp+428h+Buffer] push 0 ; lpOverlapped sub esi, eax lea ecx, [esp+42Ch+Buffer] lea eax, [esp+42Ch+NumberOfBytesWritten] mov edx, [esp+42Ch+var_410] push eax ; lpNumberOfBytesWritten push esi ; nNumberOfBytesToWrite push ecx ; lpBuffer mov eax, [edx] mov ecx, [esp+438h+var_40C] mov edx, [eax+ecx] push edx ; hFile call ds:WriteFile test eax, eax jz short loc_7F832104 mov eax, [esp+428h+NumberOfBytesWritten] add [esp+428h+var_408], eax cmp eax, esi jge short loc_7F83205C jmp short loc_7F83210E ; --------------------------------------------------------------------------- loc_7F8320D5: ; CODE XREF: sub_7F831FD0+77j lea eax, [esp+428h+NumberOfBytesWritten] push 0 ; lpOverlapped mov edx, [esp+42Ch+lpBuffer] push eax ; lpNumberOfBytesWritten push ebp ; nNumberOfBytesToWrite mov ecx, [ecx] push edx ; lpBuffer push ecx ; hFile call ds:WriteFile test eax, eax jz short loc_7F832104 mov [esp+428h+var_418], 0 mov eax, [esp+428h+NumberOfBytesWritten] mov [esp+428h+var_408], eax jmp short loc_7F83210E ; --------------------------------------------------------------------------- loc_7F832104: ; CODE XREF: sub_7F831FD0+F5j ; sub_7F831FD0+120j call ds:GetLastError mov [esp+428h+var_418], eax loc_7F83210E: ; CODE XREF: sub_7F831FD0+97j ; sub_7F831FD0+103j ... cmp [esp+428h+var_408], 0 jnz loc_7F8321BA cmp [esp+428h+var_418], 0 jz short loc_7F83216A cmp [esp+428h+var_418], 5 jnz short loc_7F83214D call sub_7F830050 mov dword ptr [eax], 9 call sub_7F830060 mov ecx, [esp+428h+var_418] pop ebp pop edi mov [eax], ecx mov eax, 0FFFFFFFFh pop esi pop ebx add esp, 418h retn ; --------------------------------------------------------------------------- loc_7F83214D: ; CODE XREF: sub_7F831FD0+155j mov ecx, [esp+428h+var_418] push ecx call sub_7F82FFD0 add esp, 4 mov eax, 0FFFFFFFFh pop ebp pop edi pop esi pop ebx add esp, 418h retn ; --------------------------------------------------------------------------- loc_7F83216A: ; CODE XREF: sub_7F831FD0+14Ej mov eax, [esp+428h+var_410] mov ecx, [esp+428h+var_40C] mov edx, [eax] test byte ptr [edx+ecx+4], 40h jz short loc_7F832194 mov eax, [esp+428h+lpBuffer] cmp byte ptr [eax], 1Ah jnz short loc_7F832194 xor eax, eax pop ebp pop edi pop esi pop ebx add esp, 418h retn ; --------------------------------------------------------------------------- loc_7F832194: ; CODE XREF: sub_7F831FD0+1A9j ; sub_7F831FD0+1B5j call sub_7F830050 mov dword ptr [eax], 1Ch call sub_7F830060 pop ebp mov dword ptr [eax], 0 mov eax, 0FFFFFFFFh pop edi pop esi pop ebx add esp, 418h retn ; --------------------------------------------------------------------------- loc_7F8321BA: ; CODE XREF: sub_7F831FD0+143j mov eax, [esp+428h+var_408] pop ebp sub eax, edi pop edi pop esi pop ebx add esp, 418h retn sub_7F831FD0 endp ; --------------------------------------------------------------------------- align 10h push ebp mov ebp, esp push edi push esi mov edi, [ebp+8] mov edx, edi xor eax, eax or ecx, 0FFFFFFFFh repne scasb dec edi mov esi, edi mov edi, [ebp+0Ch] push edi mov ecx, [ebp+10h] repne scasb jnz short loc_7F8321F0 inc ecx loc_7F8321F0: ; CODE XREF: .text:7F8321EDj sub ecx, [ebp+10h] neg ecx mov edi, esi pop esi rep movsb stosb mov eax, edx pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832210 proc near ; CODE XREF: sub_7F831E40+29p arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] cmp uNumber, esi jbe short loc_7F832260 mov eax, esi mov ecx, esi and eax, 0FFFFFFE7h and ecx, 1Fh sar eax, 3 shl ecx, 2 mov edx, dword_7F835020[eax] lea eax, [ecx+ecx*8] test byte ptr [edx+eax+4], 1 jz short loc_7F832260 push esi call sub_7F832440 add esp, 4 push esi call sub_7F832280 add esp, 4 mov edi, eax push esi call sub_7F8324B0 add esp, 4 mov eax, edi pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F832260: ; CODE XREF: sub_7F832210+Cj ; sub_7F832210+2Cj call sub_7F830050 mov dword ptr [eax], 9 call sub_7F830060 pop edi mov dword ptr [eax], 0 mov eax, 0FFFFFFFFh pop esi retn sub_7F832210 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832280 proc near ; CODE XREF: sub_7F832210+38p arg_0 = dword ptr 4 push esi push edi mov esi, [esp+8+arg_0] cmp esi, 1 jz short loc_7F832290 cmp esi, 2 jnz short loc_7F8322AA loc_7F832290: ; CODE XREF: sub_7F832280+9j push 2 call sub_7F8323F0 add esp, 4 mov edi, eax push 1 call sub_7F8323F0 add esp, 4 cmp edi, eax jz short loc_7F8322C8 loc_7F8322AA: ; CODE XREF: sub_7F832280+Ej push esi call sub_7F8323F0 add esp, 4 push eax ; hObject call ds:CloseHandle test eax, eax jnz short loc_7F8322C8 call ds:GetLastError mov edi, eax jmp short loc_7F8322CA ; --------------------------------------------------------------------------- loc_7F8322C8: ; CODE XREF: sub_7F832280+28j ; sub_7F832280+3Cj xor edi, edi loc_7F8322CA: ; CODE XREF: sub_7F832280+46j push esi call sub_7F832350 add esp, 4 test edi, edi jz short loc_7F8322E8 push edi call sub_7F82FFD0 add esp, 4 mov eax, 0FFFFFFFFh pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F8322E8: ; CODE XREF: sub_7F832280+55j mov eax, esi and esi, 1Fh shl esi, 2 and eax, 0FFFFFFE7h sar eax, 3 pop edi mov ecx, dword_7F835020[eax] lea eax, [esi+esi*8] pop esi mov byte ptr [ecx+eax+4], 0 xor eax, eax retn sub_7F832280 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832310 proc near ; CODE XREF: sub_7F831E40+1Dp arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi+0Ch] test al, 83h jz short loc_7F832347 test al, 8 jz short loc_7F832347 mov eax, [esi+8] push eax ; lpMem call sub_7F8304A0 add esp, 4 mov dword ptr [esi], 0 and dword ptr [esi+0Ch], 0FFFFFBF7h mov dword ptr [esi+8], 0 mov dword ptr [esi+4], 0 loc_7F832347: ; CODE XREF: sub_7F832310+Aj ; sub_7F832310+Ej pop esi retn sub_7F832310 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832350 proc near ; CODE XREF: sub_7F832280+4Bp arg_0 = dword ptr 4 mov ecx, [esp+arg_0] push esi push edi cmp uNumber, ecx jbe short loc_7F8323C3 mov eax, ecx and eax, 0FFFFFFE7h sar eax, 3 lea edi, dword_7F835020[eax] mov eax, ecx and eax, 1Fh shl eax, 2 lea esi, [eax+eax*8] mov eax, [edi] add eax, esi test byte ptr [eax+4], 1 jz short loc_7F8323C3 cmp dword ptr [eax], 0FFFFFFFFh jz short loc_7F8323C3 cmp dword_7F8398CC, 1 jnz short loc_7F8323B5 test ecx, ecx jz short loc_7F83239F cmp ecx, 1 jz short loc_7F8323A5 cmp ecx, 2 jz short loc_7F8323AB jmp short loc_7F8323B5 ; --------------------------------------------------------------------------- loc_7F83239F: ; CODE XREF: sub_7F832350+41j push 0 push 0FFFFFFF6h jmp short loc_7F8323AF ; --------------------------------------------------------------------------- loc_7F8323A5: ; CODE XREF: sub_7F832350+46j push 0 push 0FFFFFFF5h jmp short loc_7F8323AF ; --------------------------------------------------------------------------- loc_7F8323AB: ; CODE XREF: sub_7F832350+4Bj push 0 ; hHandle push 0FFFFFFF4h ; nStdHandle loc_7F8323AF: ; CODE XREF: sub_7F832350+53j ; sub_7F832350+59j call ds:SetStdHandle loc_7F8323B5: ; CODE XREF: sub_7F832350+3Dj ; sub_7F832350+4Dj mov eax, [edi] pop edi mov dword ptr [eax+esi], 0FFFFFFFFh xor eax, eax pop esi retn ; --------------------------------------------------------------------------- loc_7F8323C3: ; CODE XREF: sub_7F832350+Cj ; sub_7F832350+2Fj ... call sub_7F830050 mov dword ptr [eax], 9 call sub_7F830060 pop edi mov dword ptr [eax], 0 mov eax, 0FFFFFFFFh pop esi retn sub_7F832350 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8323F0 proc near ; CODE XREF: sub_7F831EA0+49p ; sub_7F832280+12p ... arg_0 = dword ptr 4 mov ecx, [esp+arg_0] cmp uNumber, ecx jbe short loc_7F83241E mov eax, ecx and ecx, 1Fh shl ecx, 2 and eax, 0FFFFFFE7h sar eax, 3 lea edx, [ecx+ecx*8] mov eax, dword_7F835020[eax] add eax, edx test byte ptr [eax+4], 1 jz short loc_7F83241E mov eax, [eax] retn ; --------------------------------------------------------------------------- loc_7F83241E: ; CODE XREF: sub_7F8323F0+Aj ; sub_7F8323F0+29j call sub_7F830050 mov dword ptr [eax], 9 call sub_7F830060 mov dword ptr [eax], 0 mov eax, 0FFFFFFFFh retn sub_7F8323F0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832440 proc near ; CODE XREF: sub_7F831EA0+32p ; sub_7F831F50+2Fp ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] push ebx push esi mov ecx, eax push edi and ecx, 0FFFFFFE7h sar ecx, 3 and eax, 1Fh shl eax, 2 lea edi, dword_7F835020[ecx] lea esi, [eax+eax*8] mov ebx, [edi] add ebx, esi cmp dword ptr [ebx+8], 0 jnz short loc_7F83248F push 11h call sub_7F830560 add esp, 4 cmp dword ptr [ebx+8], 0 jnz short loc_7F832485 lea eax, [ebx+0Ch] push eax ; lpCriticalSection call ds:InitializeCriticalSection inc dword ptr [ebx+8] loc_7F832485: ; CODE XREF: sub_7F832440+36j push 11h call sub_7F8305D0 add esp, 4 loc_7F83248F: ; CODE XREF: sub_7F832440+26j mov eax, [edi] add eax, esi add eax, 0Ch push eax ; lpCriticalSection call ds:EnterCriticalSection pop edi pop esi pop ebx retn sub_7F832440 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F8324B0 proc near ; CODE XREF: sub_7F831EA0+80p ; sub_7F831F50+4Dp ... arg_0 = dword ptr 4 mov ecx, [esp+arg_0] mov eax, ecx and ecx, 1Fh shl ecx, 2 and eax, 0FFFFFFE7h sar eax, 3 lea edx, [ecx+ecx*8] mov eax, dword_7F835020[eax] add eax, edx add eax, 0Ch push eax ; lpCriticalSection call ds:LeaveCriticalSection retn sub_7F8324B0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; int __cdecl sub_7F8324E0(int, LONG lDistanceToMove, DWORD dwMoveMethod) sub_7F8324E0 proc near ; CODE XREF: sub_7F831FD0+61p arg_0 = dword ptr 4 lDistanceToMove = dword ptr 8 dwMoveMethod = dword ptr 0Ch push esi push edi mov esi, [esp+8+arg_0] push esi call sub_7F8323F0 add esp, 4 cmp eax, 0FFFFFFFFh jnz short loc_7F832507 call sub_7F830050 pop edi mov dword ptr [eax], 9 mov eax, 0FFFFFFFFh pop esi retn ; --------------------------------------------------------------------------- loc_7F832507: ; CODE XREF: sub_7F8324E0+12j mov ecx, [esp+8+dwMoveMethod] mov edx, [esp+8+lDistanceToMove] push ecx ; dwMoveMethod push 0 ; lpDistanceToMoveHigh push edx ; lDistanceToMove push eax ; hFile call ds:SetFilePointer cmp eax, 0FFFFFFFFh mov edi, eax mov eax, 0 jnz short loc_7F83252C call ds:GetLastError loc_7F83252C: ; CODE XREF: sub_7F8324E0+44j test eax, eax jz short loc_7F832541 push eax call sub_7F82FFD0 add esp, 4 mov eax, 0FFFFFFFFh pop edi pop esi retn ; --------------------------------------------------------------------------- loc_7F832541: ; CODE XREF: sub_7F8324E0+4Ej mov eax, esi and esi, 1Fh shl esi, 2 and eax, 0FFFFFFE7h sar eax, 3 mov ecx, dword_7F835020[eax] lea eax, [esi+esi*8] and byte ptr [ecx+eax+4], 0FDh mov eax, edi pop edi pop esi retn sub_7F8324E0 endp ; --------------------------------------------------------------------------- align 10h push ebx push esi mov eax, [esp+18h] or eax, eax jnz short loc_7F832592 mov ecx, [esp+14h] mov eax, [esp+10h] xor edx, edx div ecx mov ebx, eax mov eax, [esp+0Ch] div ecx mov edx, ebx jmp short loc_7F8325D3 ; --------------------------------------------------------------------------- loc_7F832592: ; CODE XREF: .text:7F832578j mov ecx, eax mov ebx, [esp+14h] mov edx, [esp+10h] mov eax, [esp+0Ch] loc_7F8325A0: ; CODE XREF: .text:7F8325AAj shr ecx, 1 rcr ebx, 1 shr edx, 1 rcr eax, 1 or ecx, ecx jnz short loc_7F8325A0 div ebx mov esi, eax mul dword ptr [esp+18h] mov ecx, eax mov eax, [esp+14h] mul esi add edx, ecx jb short loc_7F8325CE cmp edx, [esp+10h] ja short loc_7F8325CE jb short loc_7F8325CF cmp eax, [esp+0Ch] jbe short loc_7F8325CF loc_7F8325CE: ; CODE XREF: .text:7F8325BEj ; .text:7F8325C4j dec esi loc_7F8325CF: ; CODE XREF: .text:7F8325C6j ; .text:7F8325CCj xor edx, edx mov eax, esi loc_7F8325D3: ; CODE XREF: .text:7F832590j pop esi pop ebx retn 10h ; --------------------------------------------------------------------------- align 10h push ebx mov eax, [esp+14h] or eax, eax jnz short loc_7F832601 mov ecx, [esp+10h] mov eax, [esp+0Ch] xor edx, edx div ecx mov eax, [esp+8] div ecx mov eax, edx xor edx, edx jmp short loc_7F832651 ; --------------------------------------------------------------------------- loc_7F832601: ; CODE XREF: .text:7F8325E7j mov ecx, eax mov ebx, [esp+10h] mov edx, [esp+0Ch] mov eax, [esp+8] loc_7F83260F: ; CODE XREF: .text:7F832619j shr ecx, 1 rcr ebx, 1 shr edx, 1 rcr eax, 1 or ecx, ecx jnz short loc_7F83260F div ebx mov ecx, eax mul dword ptr [esp+14h] xchg eax, ecx mul dword ptr [esp+10h] add edx, ecx jb short loc_7F83263A cmp edx, [esp+0Ch] ja short loc_7F83263A jb short loc_7F832642 cmp eax, [esp+8] jbe short loc_7F832642 loc_7F83263A: ; CODE XREF: .text:7F83262Aj ; .text:7F832630j sub eax, [esp+10h] sbb edx, [esp+14h] loc_7F832642: ; CODE XREF: .text:7F832632j ; .text:7F832638j sub eax, [esp+8] sbb edx, [esp+0Ch] neg edx neg eax sbb edx, 0 loc_7F832651: ; CODE XREF: .text:7F8325FFj pop ebx retn 10h ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_7F832660 proc near ; DATA XREF: .data:7F83A5B0o ; .data:7F83A5B4o ... push 2 call sub_7F830460 add esp, 4 retn sub_7F832660 endp ; --------------------------------------------------------------------------- align 4 ; [00000006 BYTES: COLLAPSED FUNCTION RtlUnwind. PRESS CTRL-NUMPAD+ TO EXPAND] align 10h ; ; Export directory for MMFMIG32.dll ; dd 0 ; Characteristics dd 319D07CAh ; TimeDateStamp: Fri May 17 23:12:10 1996 dw 0 ; MajorVersion dw 0 ; MinorVersion dd rva aMmfmig32_dll ; Name dd 1 ; Base dd 8 ; NumberOfFunctions dd 8 ; NumberOfNames dd rva off_7F8326A8 ; AddressOfFunctions dd rva off_7F8326C8 ; AddressOfNames dd rva word_7F8326E8 ; AddressOfNameOrdinals ; ; Export Address Table for MMFMIG32.dll ; off_7F8326A8 dd rva MMFMIG_ProcessMMF@4, rva HPProviderInit, rva FOutsideDateRange@12 ; DATA XREF: .text:7F83269Co dd rva HrModifyNamesInMsg@4, rva ScGetPABMigrationContext@52 dd rva ScMMFMigrateToMDB@48, rva ScMMFVerify@16, rva ScMigrateMMFPAB@32 ; ; Export Names Table for MMFMIG32.dll ; off_7F8326C8 dd rva aFoutsidedatera, rva aHpproviderinit, rva aHrmodifynamesi ; DATA XREF: .text:7F8326A0o dd rva aMmfmig_process, rva aScgetpabmigrat, rva aScmmfmigrateto ; "FOutsideDateRange@12" dd rva aScmmfverify@16, rva aScmigratemmfpa ; ; Export Ordinals Table for MMFMIG32.dll ; word_7F8326E8 dw 2, 1, 3, 0, 4, 5, 6, 7 ; DATA XREF: .text:7F8326A4o aMmfmig32_dll db 'MMFMIG32.dll',0 ; DATA XREF: .text:7F83268Co aFoutsidedatera db 'FOutsideDateRange@12',0 ; DATA XREF: .text:off_7F8326C8o aHpproviderinit db 'HPProviderInit',0 ; DATA XREF: .text:off_7F8326C8o aHrmodifynamesi db 'HrModifyNamesInMsg@4',0 ; DATA XREF: .text:off_7F8326C8o aMmfmig_process db 'MMFMIG_ProcessMMF@4',0 ; DATA XREF: .text:off_7F8326C8o aScgetpabmigrat db 'ScGetPABMigrationContext@52',0 ; DATA XREF: .text:off_7F8326C8o aScmmfmigrateto db 'ScMMFMigrateToMDB@48',0 ; DATA XREF: .text:off_7F8326C8o aScmmfverify@16 db 'ScMMFVerify@16',0 ; DATA XREF: .text:off_7F8326C8o aScmigratemmfpa db 'ScMigrateMMFPAB@32',0 ; DATA XREF: .text:off_7F8326C8o align 80h dd 200h dup(?) _text ends ; Section 2. (virtual address 00033000) ; Virtual size : 000075C8 ( 30152.) ; Section size in file : 00007600 ( 30208.) ; Offset to raw data for section: 00031C00 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _data segment para public 'DATA' use32 assume cs:_data ;org 7F833000h unk_7F833000 db 0 ; DATA XREF: sub_7F830B80+22o db 0 db 0 db 0 unk_7F833004 db 0 ; DATA XREF: sub_7F830B80+1Do db 0 db 0 db 0 unk_7F833008 db 0 ; DATA XREF: sub_7F830B80+10o db 0 db 0 db 0 dd offset sub_7F831980 unk_7F833010 db 0 ; DATA XREF: sub_7F830B80:loc_7F830B8Bo db 0 db 0 db 0 unk_7F833014 db 0 ; DATA XREF: sub_7F830BE0+54o db 0 db 0 db 0 dd offset sub_7F831A50 unk_7F83301C db 0 ; DATA XREF: sub_7F830BE0:loc_7F830C2Fo db 0 db 0 db 0 unk_7F833020 db 0 ; DATA XREF: sub_7F830BE0+66o db 0 db 0 db 0 unk_7F833024 db 0 ; DATA XREF: sub_7F830BE0:loc_7F830C41o db 0 db 0 db 0 ; CHAR SourceName[32] SourceName db 20h dup(0) ; DATA XREF: sub_7F805583:loc_7F8055C7o ; sub_7F80560A+58o ; CHAR FileName[264] FileName db 108h dup(0) ; DATA XREF: sub_7F80530D+68o ; sub_7F80530D+99o ... dword_7F833150 dd 0 ; DATA XREF: sub_7F805851+18Ew ; .data:off_7F835350o ... dword_7F833154 dd 0 ; DATA XREF: sub_7F805851+1BCw align 10h ; CHAR Buf Buf db 0 ; DATA XREF: sub_7F808498+B4w ; sub_7F808498+D3o ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; int dword_7F833264 dword_7F833264 dd 0 ; DATA XREF: sub_7F805FDE+B6o ; sub_7F807D9C+C1r ... dword_7F833268 dd 0 ; DATA XREF: sub_7F805851+149w ; sub_7F80725C+17Ew ... align 10h dword_7F833270 dd 0 ; DATA XREF: sub_7F805851+209w ; .data:7F835390o dword_7F833274 dd 0 ; DATA XREF: sub_7F805851+220w dword_7F833278 dd 0 ; DATA XREF: sub_7F805851+23Bw ; .data:7F8353A0o dword_7F83327C dd 0 ; DATA XREF: sub_7F805851+252w ; UINT uValue uValue dd 0 ; DATA XREF: sub_7F807D9C+230w ; sub_7F808184+Bw ... align 8 ; CHAR byte_7F833288[1024] byte_7F833288 db 400h dup(0) ; DATA XREF: sub_7F808359+9o ; sub_7F808359+34o dword_7F833688 dd 0 ; DATA XREF: sub_7F805851+294w ; .data:7F8353C0o dword_7F83368C dd 0 ; DATA XREF: sub_7F805851+2A1w unk_7F833690 db 0 ; DATA XREF: .data:7F835370o db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F833698 dd 0 ; DATA XREF: sub_7F80722E+17w ; sub_7F807D9C+242w ; LONG lpPrevWndFunc lpPrevWndFunc dd 0 ; DATA XREF: sub_7F807D9C+1EBw ; sub_7F807D9C:loc_7F8080D3r ... dword_7F8336A0 dd 0 ; DATA XREF: sub_7F80795B+E0r ; sub_7F807D9C+248w ... align 8 ; CHAR byte_7F8336A8[512] byte_7F8336A8 db 200h dup(0) ; DATA XREF: sub_7F806352+1D9o ; sub_7F80725C+38Do ... dword_7F8338A8 dd 0 ; DATA XREF: sub_7F805851+193w dword_7F8338AC dd 0 ; DATA XREF: sub_7F805851+19Cw dword_7F8338B0 dd 0 ; DATA XREF: sub_7F805851+1D7w ; .data:7F835360o dword_7F8338B4 dd 0 ; DATA XREF: sub_7F805851+1EEw dword_7F8338B8 dd 0 ; DATA XREF: sub_7F805851+43Bw ; sub_7F805851+452w ... align 10h ; CHAR String1 String1 db 0 ; DATA XREF: sub_7F805EBF+C2o ; sub_7F805EBF+100w ... unk_7F8338C1 db 0 ; DATA XREF: sub_7F808498+226o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F8339C8 dd 0 ; DATA XREF: sub_7F805851+26Dw ; .data:7F835380o dword_7F8339CC dd 0 ; DATA XREF: sub_7F805851+284w ; CHAR Text[512] Text db 200h dup(0) ; DATA XREF: sub_7F806352+1F9o ; sub_7F80725C+3ADo ... dword_7F833BD0 dd 0 ; DATA XREF: sub_7F80A115+4Fw align 8 ; RECT rc rc RECT <0> ; DATA XREF: sub_7F80A115+1B5w ; sub_7F80A47A+101o ... ; RECT stru_7F833BE8 stru_7F833BE8 RECT <0> ; DATA XREF: sub_7F80A115+237w ; sub_7F80A47A:loc_7F80A582o ... dword_7F833BF8 dd 0 ; DATA XREF: sub_7F80A115+24w ; WNDPROC dword_7F833BFC dword_7F833BFC dd 0 ; DATA XREF: sub_7F80C426+73w ; sub_7F80C77D+41r ; HINSTANCE dword_7F833C00 dword_7F833C00 dd 0 ; DATA XREF: sub_7F80C426+3Fr ; sub_7F80C5C0+7w ... align 8 word_7F833C08 dw 0 ; DATA XREF: sub_7F810955+2B9o ; sub_7F810955+2C0w word_7F833C0A dw 0 ; DATA XREF: sub_7F810955+2A9w dword_7F833C0C dd 0 ; DATA XREF: sub_7F810955+2B3w word_7F833C10 dw 0 ; DATA XREF: sub_7F81B01B+19Do ; sub_7F81B01B+1B2w ... word_7F833C12 dw 0 ; DATA XREF: sub_7F81B01B+1ABw ; sub_7F81C461+ACw dword_7F833C14 dd 0 ; DATA XREF: sub_7F81B01B+1CEw ; sub_7F81C461+B9w word_7F833C18 dw 0 ; DATA XREF: sub_7F81D22C+2E5o ; sub_7F81D22C+2ECw word_7F833C1A dw 0 ; DATA XREF: sub_7F81D22C+2D9w dword_7F833C1C dd 0 ; DATA XREF: sub_7F81D22C+2FEw dword_7F833C20 dd 0 ; DATA XREF: sub_7F820E5D+3o ; sub_7F820E74+48w ... dword_7F833C24 dd 0 ; DATA XREF: sub_7F820E74+26r ; sub_7F820E74+41w ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833D10 db 0 ; DATA XREF: sub_7F82A016+12o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833D30 db 0 ; DATA XREF: sub_7F82EBDD+23o ; sub_7F82EC41o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833DB0 db 0 ; DATA XREF: .data:off_7F83990Co db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833DC8 db 0 ; DATA XREF: .data:off_7F8398ECo db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833DE0 db 0 ; DATA XREF: .data:off_7F83991Co db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F833DF8 db 0 ; DATA XREF: .data:lpCriticalSectiono db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; CHAR Filename[260] Filename db 104h dup(0) ; DATA XREF: sub_7F831000+Ao dword_7F833F14 dd 0 ; DATA XREF: sub_7F831AA0+Ar ; HINSTANCE dword_7F833F18 dword_7F833F18 dd 0 ; DATA XREF: sub_7F81710C:loc_7F817134r ; sub_7F81710C+36r ... dword_7F833F1C dd 0 ; DATA XREF: sub_7F81AC0B+14r ; sub_7F81AC0B+24r ... ; HWND hDlg hDlg dd 0 ; DATA XREF: sub_7F805851+5Ar ; sub_7F805851+A1w ... align 10h ; CHAR byte_7F833F30[128] byte_7F833F30 db 80h dup(0) ; DATA XREF: sub_7F80577A+5Fo ; sub_7F805851+B6o ... dword_7F833FB0 dd 0 ; DATA XREF: sub_7F804EC7+17Bw ; sub_7F80795B+12Ar ... ; HINSTANCE hInstance hInstance dd 0 ; DATA XREF: sub_7F8026ED+123r ; sub_7F8026ED+12Cr ... align 10h ; CHAR Caption[4176] Caption db 1050h dup(0) ; DATA XREF: ScMMFMigrateToMDB@48+B8o ; sub_7F8035B3+2A2o ... ; UINT uNumber uNumber dd 0 ; DATA XREF: sub_7F830CE0+30w ; sub_7F830CE0:loc_7F830D82r ... align 10h dword_7F835020 dd 0 ; DATA XREF: sub_7F830CE0+2Aw ; sub_7F830CE0+58r ... unk_7F835024 db 0 ; DATA XREF: sub_7F830CE0+AAo db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; HANDLE hHeap hHeap dd 0 ; DATA XREF: sub_7F8304A0+Br ; sub_7F830990+4r ... dword_7F835124 dd 0 ; DATA XREF: sub_7F830BE0+2Br dword_7F835128 dd 0 ; DATA XREF: sub_7F830B80r dword_7F83512C dd 0 ; DATA XREF: sub_7F830BE0+22r ; sub_7F830BE0+34r ... dword_7F835130 dd 0 ; DATA XREF: sub_7F830310+B2w ; sub_7F830310+BCr ... align 10h unk_7F835140 db 0Ch ; DATA XREF: HrModifyNamesInMsg@4+90o db 0 db 0 db 0 db 2 db 1 db 43h ; C db 0 db 2 db 1 db 52h ; R db 0 db 2 db 1 db 3Fh ; ? db 0 db 2 db 1 db 51h ; Q db 0 db 1Eh db 0 db 1Eh db 0Ch db 1Eh db 0 db 1Fh db 0Ch db 2 db 1 db 19h db 0Ch db 2 db 1 db 1Dh db 0Ch db 1Eh db 0 db 64h ; d db 0 db 1Eh db 0 db 65h ; e db 0 db 2 db 1 db 41h ; A db 0 db 2 db 1 db 3Bh ; ; db 0 db 0 db 0 db 0 db 0 unk_7F835178 db 5 ; DATA XREF: HrModifyNamesInMsg@4+C1o db 0 db 0 db 0 db 3 db 0 db 0 db 30h ; 0 db 1Eh db 0 db 1 db 30h ; 0 db 3 db 0 db 15h db 0Ch db 1Eh db 0 db 2 db 30h ; 0 db 2 db 1 db 0FFh db 0Fh unk_7F835190 db 2 ; DATA XREF: HrModifyNamesInMsg@4+1Do db 0 db 0 db 0 db 1Eh db 0 db 1Ah db 0 db 1Eh db 0 db 1Eh db 0Ch ; CHAR aX400[] aX400 db 'X400',0 ; DATA XREF: HrModifyNamesInMsg@4+78o ; HrModifyNamesInMsg@4+10Bo align 4 ; CHAR aSmtp[] aSmtp db 'SMTP',0 ; DATA XREF: HrModifyNamesInMsg@4+66o ; HrModifyNamesInMsg@4+F9o ... align 4 ; CHAR String2[] String2 db 'IPM.Note',0 ; DATA XREF: .text:off_7F8017E0o ; HrModifyNamesInMsg@4+44o align 10h dword_7F8351C0 dd 0 ; DATA XREF: sub_7F802DB7+C3w ; sub_7F802DB7:loc_7F802EAFw ... align 8 unk_7F8351C8 db 81h ; � ; DATA XREF: ScMMFVerify@16+AAo ; ScMMFMigrateToMDB@48+1AAo ... db 49h ; I db 50h ; P db 4Dh ; M db 2 db 1 db 0E0h ; � db 35h ; 5 db 0 db 0 db 0 db 0 dd offset sub_7F8034C3 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 3 db 0 db 21h ; ! db 0Eh db 3 db 0 db 0Bh db 37h ; 7 db 0 db 0 db 0 db 0 unk_7F8351F8 db 2 ; DATA XREF: sub_7F8042DA+B6o db 0 db 0 db 0 db 3 db 0 db 21h ; ! db 0Eh db 3 db 0 db 0Bh db 37h ; 7 unk_7F835204 db 49h ; I ; DATA XREF: sub_7F802DB7+408o db 50h ; P db 4Dh ; M db 0 ; CHAR Default[4] Default db 4 dup(0) ; DATA XREF: .text:7F801824o ; sub_7F804058+1CAo ... ; CHAR aSS_0[] aSS_0 db '%s%s',0Dh,0Ah,0 ; DATA XREF: sub_7F804EC7+E6o ; sub_7F80B343+61o ... align 4 ; CHAR aSSS_0[] aSSS_0 db '%s%s: %s',0Dh,0Ah,0 ; DATA XREF: sub_7F804EC7+CDo align 10h ; CHAR aSSS[] aSSS db '%s%s: %s',0Dh,0Ah,0 ; DATA XREF: sub_7F804EC7+94o ; sub_7F808F95+F3o ; CHAR aSS[] aSS db '%s: %s',0Dh,0Ah,0 ; DATA XREF: sub_7F804EC7+4Bo align 4 ; CHAR aMapiError08lx[] aMapiError08lx db 'MAPI Error: %08lX',0 ; DATA XREF: sub_7F805168+A1o ; sub_7F808F95+78o align 4 ; HANDLE hFile hFile dd 0FFFFFFFFh ; DATA XREF: sub_7F80530D+C0w ; sub_7F805403+2Dr ... ; CHAR Buffer[] Buffer db 0Dh,0Ah ; DATA XREF: sub_7F80549A:loc_7F805519o db 0Dh,0Ah,0 align 4 ; CHAR a_log_0[] a_log_0 db '.LOG',0 ; DATA XREF: sub_7F80530D:loc_7F8053A1o align 10h ; CHAR a_log[] a_log db '.log',0 ; DATA XREF: sub_7F80530D+86o align 4 ; CHAR aTypessupported[] aTypessupported db 'TypesSupported',0 ; DATA XREF: sub_7F80560A+F4o align 4 ; CHAR ValueName[] ValueName db 'EventMessageFile',0 ; DATA XREF: sub_7F80560A+CFo align 10h ; int dword_7F835290 dword_7F835290 dd 0 ; DATA XREF: ScMMFMigrateToMDB@48:loc_7F802126r ; ScMMFMigrateToMDB@48+6Do ... dword_7F835294 dd 0 ; DATA XREF: sub_7F805851:loc_7F805C04r ; sub_7F805851+3CAr ... dword_7F835298 dd 0 ; DATA XREF: sub_7F805851:loc_7F805E90r ; sub_7F805EBF+18w ... dword_7F83529C dd 0 ; DATA XREF: sub_7F808949+9Br ; sub_7F808949+A3r ... dword_7F8352A0 dd 0 ; DATA XREF: sub_7F805851+4Ar ; sub_7F805851+2A6r ... align 8 unk_7F8352A8 db 4 ; DATA XREF: sub_7F808C12+75o db 0 db 0 db 0 db 2 db 1 db 0FFh db 0Fh db 1Eh db 0 db 1 db 30h ; 0 db 0Bh db 0 db 0 db 34h ; 4 db 3 db 0 db 9 db 30h ; 0 db 0 db 0 db 0 db 0 unk_7F8352C0 db 1 ; DATA XREF: sub_7F8091A3+A0o ; sub_7F8091A3+298o db 0 db 0 db 0 db 2 db 1 db 0Ch db 3Dh ; = unk_7F8352C8 db 2 ; DATA XREF: sub_7F808A6D+79o db 0 db 0 db 0 db 0Bh db 0 db 4 db 3Dh ; = db 1Eh db 0 db 1 db 30h ; 0 dword_7F8352D4 dd 0 ; DATA XREF: sub_7F808C12+27Cw ; sub_7F808C12+2A8r dword_7F8352D8 dd 0 ; DATA XREF: sub_7F805851+496w ; sub_7F805851+526w ... dword_7F8352DC dd 0 ; DATA XREF: sub_7F805851+5A6r ; sub_7F805851+5AEr ... dword_7F8352E0 dd 0 ; DATA XREF: sub_7F80725C+B1o ; sub_7F80725C+D4r ... dword_7F8352E4 dd 0 ; DATA XREF: sub_7F80725C+2Ao ; sub_7F80725C+3Dw ... dword_7F8352E8 dd 0 ; DATA XREF: sub_7F805851:loc_7F805E35r ; sub_7F806861+330w ... align 10h dword_7F8352F0 dd 0FFFFFFFFh ; DATA XREF: sub_7F8087A7+4Ar ; sub_7F80887Dr ... unk_7F8352F4 db 0FFh ; DATA XREF: sub_7F8087A7+52o db 0FFh db 0FFh db 0FFh db 6Ch ; l db 2 db 0 db 0 db 73h ; s db 2 db 0 db 0 db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0C6h ; � db 2 db 0 db 0 db 0C8h ; � db 2 db 0 db 0 db 0D0h ; � db 2 db 0 db 0 db 0D2h ; � db 2 db 0 db 0 db 62h ; b db 2 db 0 db 0 db 69h ; i db 2 db 0 db 0 db 20h db 3 db 0 db 0 db 20h db 3 db 0 db 0 db 3Eh ; > db 3 db 0 db 0 db 42h ; B db 3 db 0 db 0 db 2Bh ; + db 3 db 0 db 0 db 2Eh ; . db 3 db 0 db 0 db 35h ; 5 db 3 db 0 db 0 db 38h ; 8 db 3 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F835348 dd 0C8h ; DATA XREF: sub_7F805851+482r ; sub_7F805851+512r unk_7F83534C db 1 ; DATA XREF: sub_7F805851+445o ; sub_7F805851+458o ... db 0 db 0 db 0 off_7F835350 dd offset dword_7F833150 ; DATA XREF: sub_7F805EBF+57r ; sub_7F807D9C+93r ... dword_7F835354 dd 0BB8h ; DATA XREF: sub_7F805851+5FAr db 0CAh ; � db 0 db 0 db 0 dword_7F83535C dd 0 ; DATA XREF: sub_7F805EBF+6Co ; sub_7F806352+15Aw ... dd offset dword_7F8338B0 db 0B9h ; � db 0Bh db 0 db 0 db 0CBh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 0 dd offset unk_7F833690 align 8 db 0CCh ; � db 0 db 0 db 0 dword_7F83537C dd 0 ; DATA XREF: sub_7F807D9C+3Cr ; sub_7F807D9C+31Er ... dd offset dword_7F8339C8 db 0BCh ; � db 0Bh db 0 db 0 db 0CDh ; � db 0 db 0 db 0 dword_7F83538C dd 0 ; DATA XREF: sub_7F806352+17Bw ; sub_7F8071B1:loc_7F807202w ... dd offset dword_7F833270 db 0BBh ; � db 0Bh db 0 db 0 db 0C9h ; � db 0 db 0 db 0 ; BOOL bEnable bEnable dd 0 ; DATA XREF: sub_7F806352+171w ; sub_7F80725C+454r ... dd offset dword_7F833278 db 0BAh ; � db 0Bh db 0 db 0 db 0CEh ; � db 0 db 0 db 0 dword_7F8353AC dd 0 ; DATA XREF: sub_7F806861+43Bw ; sub_7F806861:loc_7F806E7Bw ... dd offset dword_7F833150 align 8 db 0CFh ; � db 0 db 0 db 0 dword_7F8353BC dd 0 ; DATA XREF: sub_7F805851+4E8o ; sub_7F805EBF+76o ... dd offset dword_7F833688 db 0BDh ; � db 0Bh db 0 db 0 dword_7F8353C8 dd 0 ; DATA XREF: sub_7F805851:loc_7F805C69r ; sub_7F805851:loc_7F805C86r ... dword_7F8353CC dd 1 ; DATA XREF: sub_7F8081B3+25r ; WPARAM wParam wParam dd 0FFFFFFFFh ; DATA XREF: sub_7F806861+177r ; sub_7F806861+19Dr ... ; UINT_PTR uIDEvent uIDEvent dd 0 ; DATA XREF: DialogFunc:loc_7F80A039r ; DialogFunc+5Fw ... ; CHAR String[] String db 'commdlg_help',0 ; DATA XREF: sub_7F805851+2AEo align 4 ; CHAR a_[] a_ db '.',0 ; DATA XREF: sub_7F806FF2+5Do align 4 ; CHAR asc_7F8353EC[] asc_7F8353EC db ' ',0 ; DATA XREF: sub_7F80795B+18Co align 10h ; CHAR aSLu[] aSLu db '%s %lu',0 ; DATA XREF: sub_7F80795B+8Eo align 4 ; CHAR aCouldNotFindSt[] aCouldNotFindSt db 'Could not find string resource in file.',0 ; DATA XREF: sub_7F808359+22o ; CHAR a_[] a@ db '@',0 ; DATA XREF: sub_7F808498+111o align 4 ; CHAR aS[] aS db '%s',0Dh,0Ah,0 ; DATA XREF: sub_7F808F95+AEo align 4 aMspstMs db 'MSPST MS',0 ; DATA XREF: sub_7F8091A3+1BCo align 4 unk_7F835438 db 1 ; DATA XREF: sub_7F80B1CB+49o db 0 db 0 db 0 db 2 db 1 db 0FFh db 0Fh aMapipdl db 'MAPIPDL',0 ; DATA XREF: sub_7F80B0EB+8Bo ; CHAR aSS_1[] aSS_1 db '%s: %s',0Dh,0Ah,0 ; DATA XREF: sub_7F80B3E3+4Bo align 4 ; CHAR aMtp[] aMtp db 'MTP',0 ; DATA XREF: sub_7F80B80E+1ECo ; CHAR KeyName[] KeyName db 'PABID',0 ; DATA XREF: sub_7F80BBF6+F8o align 10h ; CHAR aMsmailSFiles_i[] aMsmailSFiles_i db 'MSMAIL\%s\FILES.INI',0 ; DATA XREF: sub_7F80BBF6+D5o ; CHAR AppName[] AppName db 'Transport',0 ; DATA XREF: sub_7F80BBF6+A9o ; sub_7F80BBF6+FDo align 10h ; CHAR aMsmailpv_ini[] aMsmailpv_ini db 'MSMAILPV.INI',0 ; DATA XREF: sub_7F80BBF6:loc_7F80BC54o align 10h ; CHAR aFax[] aFax db 'FAX',0 ; DATA XREF: sub_7F80BE69+23o ; CHAR aMs[] aMs db 'MS',0 ; DATA XREF: sub_7F80BF60+1Do align 4 ; CHAR aScgetpabimport[] aScgetpabimport db 'ScGetPABImporter',0 ; DATA XREF: sub_7F80C275:loc_7F80C2C1o align 4 ; CHAR aMspst32_dll_0[] aMspst32_dll_0 db 'MSPST32.DLL',0 ; DATA XREF: sub_7F80C275+19o ; CHAR aD[] aD db '%d%%',0 ; DATA XREF: sub_7F80C62C+3Eo align 10h ; struct _OSVERSIONINFOA VersionInformation VersionInformation _OSVERSIONINFOA <0> ; DATA XREF: sub_7F80C7F1w ; sub_7F80C7F1+Bo ... dword_7F835554 dd 0 ; DATA XREF: sub_7F80C7CEr ; sub_7F80C7F1+21w ... ; CHAR aCtl3dcolorchan[] aCtl3dcolorchan db 'Ctl3dColorChange',0 ; DATA XREF: sub_7F80C828+A2o align 4 ; CHAR aCtl3dunregiste[] aCtl3dunregiste db 'Ctl3dUnregister',0 ; DATA XREF: sub_7F80C828+97o ; CHAR aCtl3dsubclassd[] aCtl3dsubclassd db 'Ctl3dSubclassDlgEx',0 ; DATA XREF: sub_7F80C828+8Co align 10h ; CHAR aCtl3dunautosub[] aCtl3dunautosub db 'Ctl3dUnAutoSubclass',0 ; DATA XREF: sub_7F80C828+81o ; CHAR aCtl3dautosubcl[] aCtl3dautosubcl db 'Ctl3dAutoSubclass',0 ; DATA XREF: sub_7F80C828+76o align 4 ; CHAR aCtl3dregister[] aCtl3dregister db 'Ctl3dRegister',0 ; DATA XREF: sub_7F80C828+6Bo align 4 ; CHAR aCtl3denabled[] aCtl3denabled db 'Ctl3dEnabled',0 ; DATA XREF: sub_7F80C828+60o align 4 ; CHAR aCtl3dgetver[] aCtl3dgetver db 'Ctl3dGetVer',0 ; DATA XREF: sub_7F80C828+42o ; CHAR aCtl3d32_dll[] aCtl3d32_dll db 'ctl3d32.dll',0 ; DATA XREF: sub_7F80C828+2Bo unk_7F8355F0 db 6 ; DATA XREF: sub_7F80D991+DEo ; sub_7F80DB1E+24o db 0 db 0 db 0 db 3 db 0 db 0 db 30h ; 0 db 1Eh db 0 db 1 db 30h ; 0 db 3 db 0 db 15h db 0Ch db 2 db 1 db 0FFh db 0Fh db 1Eh db 0 db 2 db 30h ; 0 db 1Eh db 0 db 3 db 30h ; 0 db 0 db 0 db 0 db 0 unk_7F835610 db 2 ; DATA XREF: sub_7F80D5D7+96o ; sub_7F80D6D8+75o db 0 db 0 db 0 db 3 db 0 db 21h ; ! db 0Eh db 3 db 0 db 0Bh db 37h ; 7 aPlaceHolderNdr db 'Place holder NDR Original Msg',0 ; DATA XREF: .text:7F801820o align 4 aIpm_microsof_5 db 'IPM.Microsoft Schedule.MtgCncl',0 ; DATA XREF: .text:7F80181Co align 4 aIpm_schedule_3 db 'IPM.Schedule.Meeting.Canceled',0 ; DATA XREF: .text:7F801818o align 4 aIpm_microsof_4 db 'IPM.Microsoft Schedule.MtgReq',0 ; DATA XREF: .text:7F801814o align 4 aIpm_schedule_2 db 'IPM.Schedule.Meeting.Request',0 ; DATA XREF: .text:7F801810o align 4 aIpm_microsof_3 db 'IPM.Microsoft Schedule.MtgRespA',0 ; DATA XREF: .text:7F80180Co aIpm_schedule_1 db 'IPM.Schedule.Meeting.Resp.Tent',0 ; DATA XREF: .text:7F801808o align 4 aIpm_microsof_2 db 'IPM.Microsoft Schedule.MtgRespN',0 ; DATA XREF: .text:7F801804o aIpm_schedule_0 db 'IPM.Schedule.Meeting.Resp.Neg',0 ; DATA XREF: .text:7F801800o align 4 aIpm_microsoftS db 'IPM.Microsoft Schedule.MtgRespP',0 ; DATA XREF: .text:7F8017FCo aIpm_schedule_m db 'IPM.Schedule.Meeting.Resp.Pos',0 ; DATA XREF: .text:7F8017F8o align 4 aIpm_microsof_1 db 'IPM.Microsoft Mail.Non-Delivery',0 ; DATA XREF: .text:7F8017F4o aReport_ipm_n_0 db 'Report.IPM.Note.NDR',0 ; DATA XREF: .text:7F8017F0o aIpm_microsof_0 db 'IPM.Microsoft Mail.Read Receipt',0 ; DATA XREF: .text:7F8017ECo aReport_ipm_not db 'Report.IPM.Note.IPNRN',0 ; DATA XREF: .text:7F8017E8o align 4 aIpm_microsoftM db 'IPM.Microsoft Mail.Note',0 ; DATA XREF: .text:7F8017E4o ; sub_7F80E2BF:loc_7F80E33Do off_7F835800 dd offset sub_7F80FB24 ; DATA XREF: sub_7F80FC77+1Er dd offset sub_7F80FB5D dd offset sub_7F80FB75 dd offset sub_7F80FB8D dd offset sub_7F80FBB0 dd offset sub_7F80FBD3 dd offset sub_7F80FBF6 dd offset sub_7F80FC19 dd offset sub_7F80FC3C dd offset sub_7F80FC5F unk_7F835828 db 81h ; � ; DATA XREF: sub_7F80ECB3+D1o db 2Bh ; + db 1Fh db 0A4h ; � db 0BEh ; � db 0A3h ; � db 10h db 19h db 9Dh ; � db 6Eh ; n db 0 db 0DDh ; � db 1 db 0Fh db 54h ; T db 2 ; CHAR aInvalid[] aInvalid db 'Invalid',0 ; DATA XREF: sub_7F80E7F6:loc_7F80E9F9o ; CHAR aSS_2[] aSS_2 db '%s:%s',0 ; DATA XREF: sub_7F80EF21+9Ao ; sub_7F80F3F1+9Ao align 4 aTmp db 'TMP:',0 ; DATA XREF: sub_7F80F91C+9o align 10h word_7F835850 dw 0 ; DATA XREF: sub_7F810236+11w align 4 word_7F835854 dw 0 ; DATA XREF: sub_7F810254+1Dw align 4 word_7F835858 dw 0 ; DATA XREF: sub_7F810254+2Bw align 10h dword_7F835860 dd 1009h ; DATA XREF: sub_7F80FE90+DBr dword_7F835864 dd 249h ; DATA XREF: sub_7F80FD8E:loc_7F80FDEFr dword_7F835868 dd 145Ch ; DATA XREF: sub_7F80FE90+65r dword_7F83586C dd 144Bh ; DATA XREF: sub_7F80FE90:loc_7F80FFB8r dword_7F835870 dd 24Eh ; DATA XREF: sub_7F80FE90+134r dword_7F835874 dd 145Fh ; DATA XREF: sub_7F80FE90:loc_7F80FFCCr dword_7F835878 dd 1447h ; DATA XREF: sub_7F80FE90+10Er dword_7F83587C dd 59h ; DATA XREF: sub_7F80FD8E+38w ; sub_7F80FD8E+78w ... aTmp_0 db 'TMP:',0 ; DATA XREF: sub_7F80FFF8+5Eo align 4 word_7F835888 dw 0 ; DATA XREF: sub_7F81165C+17r ; sub_7F81165C+33r ... align 4 dword_7F83588C dd 0 ; DATA XREF: sub_7F81F20F+54r ; sub_7F81F20F+6Dr ... db 0 db 0 db 0 db 0 aShadowId db 'Shadow-ID',0 ; DATA XREF: .data:7F8359C4o db 0 db 0 aPriority db 'Priority',0 ; DATA XREF: .data:7F8359BCo db 0 db 0 db 0 aBody db 'Body',0 ; DATA XREF: .data:7F8359B4o db 0 db 0 db 0 aConversationId db 'Conversation-ID',0 ; DATA XREF: .data:7F8359ACo aParentId db 'Parent-ID',0 ; DATA XREF: .data:7F8359A4o db 0 db 0 word_7F8358D0 dw 654Dh ; DATA XREF: sub_7F81028C+DAr ; sub_7F81197C+82r ... aSsageId db 'ssage-ID',0 align 4 aMessageClass db 'Message-Class',0 ; DATA XREF: .data:7F835994o align 4 aMessageStatus db 'Message-Status',0 ; DATA XREF: .data:7F83598Co align 4 aDateReceived db 'Date-Received',0 ; DATA XREF: .data:7F835984o align 4 aDateSent db 'Date-Sent',0 ; DATA XREF: .data:7F83597Co align 4 aSubject db 'Subject',0 ; DATA XREF: .data:7F835974o aBcc db 'Bcc',0 ; DATA XREF: .data:7F83596Co aCc db 'Cc',0 ; DATA XREF: .data:7F835964o align 4 aTo db 'To',0 ; DATA XREF: .data:7F83595Co align 4 aFrom db 'From',0 ; DATA XREF: .data:7F835954o align 8 word_7F835938 dw 2522h ; DATA XREF: sub_7F82C9EF+5Fo ; sub_7F82C9EF+64r dd offset unk_7F839510 db 26h ; & db 25h ; % dd offset unk_7F8395E0 db 25h ; % db 25h ; % dd offset unk_7F8393F0 align 10h dword_7F835950 dd 8000h ; DATA XREF: sub_7F82CE3B+53o ; sub_7F82CE3B+58r dd offset aFrom ; "From" db 1 db 80h ; � db 0 db 0 dd offset aTo ; "To" db 2 db 80h ; � db 0 db 0 dd offset aCc ; "Cc" db 3 db 80h ; � db 0 db 0 dd offset aBcc ; "Bcc" db 4 db 80h ; � db 1 db 0 dd offset aSubject ; "Subject" db 5 db 80h ; � db 3 db 0 dd offset aDateSent ; "Date-Sent" db 6 db 80h ; � db 3 db 0 dd offset aDateReceived ; "Date-Received" db 7 db 80h ; � db 6 db 0 dd offset aMessageStatus ; "Message-Status" db 8 db 80h ; � db 7 db 0 dd offset aMessageClass ; "Message-Class" db 9 db 80h ; � db 1 db 0 dd offset word_7F8358D0 db 0Ah db 80h ; � db 1 db 0 dd offset aParentId ; "Parent-ID" db 0Bh db 80h ; � db 1 db 0 dd offset aConversationId ; "Conversation-ID" db 0Ch db 80h ; � db 2 db 0 dd offset aBody ; "Body" db 0Dh db 80h ; � db 4 db 0 dd offset aPriority ; "Priority" db 0Eh db 80h ; � db 6 db 0 dd offset aShadowId ; "Shadow-ID" db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 1 db 90h ; � db 5 db 90h ; � db 1Dh db 80h ; � db 5 db 90h ; � db 0Ah db 80h ; � db 2 db 0B0h ; � db 2 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 8 db 0 db 0 db 0 db 0 dword_7F8359F8 dd 64765356h ; DATA XREF: sub_7F82E30B+1o ; sub_7F82E30B+6r db 66h ; f db 65h ; e db 72h ; r db 50h ; P db 70h ; p db 50h ; P db 41h ; A db 42h ; B db 72h ; r db 11h db 11h db 11h db 72h ; r db 11h db 11h db 21h ; ! db 72h ; r db 11h db 11h db 31h ; 1 db 80h ; � db 4Dh ; M db 63h ; c db 20h db 80h ; � db 41h ; A db 53h ; S db 46h ; F db 80h ; � db 53h ; S db 43h ; C db 4Ch ; L db 80h ; � db 53h ; S db 43h ; C db 4Fh ; O db 80h ; � db 41h ; A db 46h ; F db 53h ; S db 80h ; � db 6Dh ; m db 61h ; a db 70h ; p db 80h ; � db 41h ; A db 63h ; c db 74h ; t db 80h ; � db 4Dh ; M db 43h ; C db 73h ; s db 81h ; � db 49h ; I db 50h ; P db 4Dh ; M db 81h ; � db 48h ; H db 69h ; i db 64h ; d db 82h ; � db 53h ; S db 68h ; h db 61h ; a db 82h ; � db 49h ; I db 6Eh ; n db 62h ; b db 82h ; � db 42h ; B db 75h ; u db 6Ch ; l db 82h ; � db 53h ; S db 68h ; h db 74h ; t db 82h ; � db 57h ; W db 73h ; s db 74h ; t db 82h ; � db 4Fh ; O db 75h ; u db 74h ; t db 86h ; � db 50h ; P db 4Ch ; L db 43h ; C db 89h ; � db 41h ; A db 4Ch ; L db 44h ; D db 8Ah ; � db 0 db 0 db 0FFh db 8Bh ; � db 4Fh ; O db 75h ; u db 74h ; t db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F835A68 db 69h ; DATA XREF: sub_7F82E30B:loc_7F82E32Br ; sub_7F82E30B+27o aQvgdejziiknor db 'q������������',0 align 4 byte_7F835A78 db 81h ; DATA XREF: sub_7F82DB71:loc_7F82DB91r ; sub_7F82DB71+27o db 1 db 90h ; � db 82h ; � db 5 db 90h ; � db 88h ; � db 0 db 0 db 86h ; � db 2 db 0B0h ; � db 87h ; � db 2 db 0 db 83h ; � db 1Dh db 80h ; � db 85h ; � db 0Ah db 80h ; � db 84h ; � db 5 db 90h ; � db 89h ; � db 0 db 0 db 80h ; � db 0 db 0 db 8Fh ; � db 0 db 0 db 8Dh ; � db 0 db 0 db 8Ch ; � db 0 db 0 db 8Eh ; � db 0 db 0 db 8Bh ; � db 0 db 0 db 8Ah ; � db 0 db 0 db 90h ; � db 0 db 8 db 71h ; q db 2 db 0B0h ; � db 70h ; p db 5 db 90h ; � db 69h ; i db 15h db 90h ; � db 0 db 0 db 0 db 0 aAsco db '�SCO',0 ; DATA XREF: sub_7F82DB71+1o ; sub_7F82DB71+6r aAscl db 8,'�SCL',0 db 8 db 56h ; V db 53h ; S db 76h ; v db 64h ; d db 1 db 0F0h ; � db 72h ; r db 11h db 11h db 11h db 1 db 0F0h ; � db 72h ; r db 11h db 11h db 21h ; ! db 1 db 0F0h ; � db 72h ; r db 11h db 11h db 31h ; 1 db 1 db 0F0h ; � db 66h ; f db 65h ; e db 72h ; r db 50h ; P db 1 db 0F0h ; � db 0 db 0 db 0 db 0 db 0 db 0 byte_7F835AE8 db 41h ; DATA XREF: sub_7F8128E1+21r ; sub_7F812934+48r db 36h ; 6 db 13h db 62h ; b db 0A8h ; � db 21h ; ! db 6Eh ; n db 0BBh ; � db 0F4h ; � db 16h db 0CCh ; � db 4 db 7Fh ;  db 64h ; d db 0E8h ; � db 5Dh ; ] db 1Eh db 0F2h ; � db 0CBh ; � db 2Ah ; * db 74h ; t db 0C5h ; � db 5Eh ; ^ db 35h ; 5 db 0D2h ; � db 95h ; � db 47h ; G db 9Eh ; � db 96h ; � db 2Dh ; - db 9Ah ; � db 88h ; � db 4Ch ; L db 7Dh ; } db 84h ; � db 3Fh ; ? db 0DBh ; � db 0ACh ; � db 31h ; 1 db 0B6h ; � db 48h ; H db 5Fh ; _ db 0F6h ; � db 0C4h ; � db 0D8h ; � db 39h ; 9 db 8Bh ; � db 0E7h ; � db 23h ; # db 3Bh ; ; db 38h ; 8 db 8Eh ; � db 0C8h ; � db 0C1h ; � db 0DFh ; � db 25h ; % db 0B1h ; � db 20h db 0A5h ; � db 46h ; F db 60h ; ` db 4Eh ; N db 9Ch ; � db 0FBh ; � db 0AAh ; � db 0D3h ; � db 56h ; V db 51h ; Q db 45h ; E db 7Ch ; | db 55h ; U db 0 db 7 db 0C9h ; � db 2Bh ; + db 9Dh ; � db 85h ; � db 9Bh ; � db 9 db 0A0h ; � db 8Fh ; � db 0ADh ; � db 0B3h ; � db 0Fh db 63h ; c db 0ABh ; � db 89h ; � db 4Bh ; K db 0D7h ; � db 0A7h ; � db 15h db 5Ah ; Z db 71h ; q db 66h ; f db 42h ; B db 0BFh ; � db 26h ; & db 4Ah ; J db 6Bh ; k db 98h ; � db 0FAh ; � db 0EAh ; � db 77h ; w db 53h ; S db 0B2h ; � db 70h ; p db 5 db 2Ch ; , db 0FDh ; � db 59h ; Y db 3Ah ; : db 86h ; � db 7Eh ; ~ db 0CEh ; � db 6 db 0EBh ; � db 82h ; � db 78h ; x db 57h ; W db 0C7h ; � db 8Dh ; � db 43h ; C db 0AFh ; � db 0B4h ; � db 1Ch db 0D4h ; � db 5Bh ; [ db 0CDh ; � db 0E2h ; � db 0E9h ; � db 27h ; ' db 4Fh ; O db 0C3h ; � db 8 db 72h ; r db 80h ; � db 0CFh ; � db 0B0h ; � db 0EFh ; � db 0F5h ; � db 28h ; ( db 6Dh ; m db 0BEh ; � db 30h ; 0 db 4Dh ; M db 34h ; 4 db 92h ; � db 0D5h ; � db 0Eh db 3Ch ; < db 22h ; " db 32h ; 2 db 0E5h ; � db 0E4h ; � db 0F9h ; � db 9Fh ; � db 0C2h ; � db 0D1h ; � db 0Ah db 81h ; � db 12h db 0E1h ; � db 0EEh ; � db 91h ; � db 83h ; � db 76h ; v db 0E3h ; � db 97h ; � db 0E6h ; � db 61h ; a db 8Ah ; � db 17h db 79h ; y db 0A4h ; � db 0B7h ; � db 0DCh ; � db 90h ; � db 7Ah ; z db 5Ch ; \ db 8Ch ; � db 2 db 0A6h ; � db 0CAh ; � db 69h ; i db 0DEh ; � db 50h ; P db 1Ah db 11h db 93h ; � db 0B9h ; � db 52h ; R db 87h ; � db 58h ; X db 0FCh ; � db 0EDh ; � db 1Dh db 37h ; 7 db 49h ; I db 1Bh db 6Ah ; j db 0E0h ; � db 29h ; ) db 33h ; 3 db 99h ; � db 0BDh ; � db 6Ch ; l db 0D9h ; � db 94h ; � db 0F3h ; � db 40h ; @ db 54h ; T db 6Fh ; o db 0F0h ; � db 0C6h ; � db 73h ; s db 0B8h ; � db 0D6h ; � db 3Eh ; > db 65h ; e db 18h db 44h ; D db 1Fh db 0DDh ; � db 67h ; g db 10h db 0F1h ; � db 0Ch db 19h db 0ECh ; � db 0AEh ; � db 3 db 0A1h ; � db 14h db 7Bh ; { db 0A9h ; � db 0Bh db 0FFh db 0F8h ; � db 0A3h ; � db 0C0h ; � db 0A2h ; � db 1 db 0F7h ; � db 2Eh ; . db 0BCh ; � db 24h ; $ db 68h ; h db 75h ; u db 0Dh db 0FEh ; � db 0BAh ; � db 2Fh ; / db 0B5h ; � db 0D0h ; � db 0DAh ; � db 3Dh ; = byte_7F835BE8 db 47h ; DATA XREF: sub_7F8128E1+39r ; sub_7F812934+6Dr db 0F1h ; � db 0B4h ; � db 0E6h ; � db 0Bh db 6Ah ; j db 72h ; r db 48h ; H db 85h ; � db 4Eh ; N db 9Eh ; � db 0EBh ; � db 0E2h ; � db 0F8h ; � db 94h ; � db 53h ; S db 0E0h ; � db 0BBh ; � db 0A0h ; � db 2 db 0E8h ; � db 5Ah ; Z db 9 db 0ABh ; � db 0DBh ; � db 0E3h ; � db 0BAh ; � db 0C6h ; � db 7Ch ; | db 0C3h ; � db 10h db 0DDh ; � db 39h ; 9 db 5 db 96h ; � db 30h ; 0 db 0F5h ; � db 37h ; 7 db 60h ; ` db 82h ; � db 8Ch ; � db 0C9h ; � db 13h db 4Ah ; J db 6Bh ; k db 1Dh db 0F3h ; � db 0FBh ; � db 8Fh ; � db 26h ; & db 97h ; � db 0CAh ; � db 91h ; � db 17h db 1 db 0C4h ; � db 32h ; 2 db 2Dh ; - db 6Eh ; n db 31h ; 1 db 95h ; � db 0FFh db 0D9h ; � db 23h ; # db 0D1h ; � db 0 db 5Eh ; ^ db 79h ; y db 0DCh ; � db 44h ; D db 3Bh ; ; db 1Ah db 28h ; ( db 0C5h ; � db 61h ; a db 57h ; W db 20h db 90h ; � db 3Dh ; = db 83h ; � db 0B9h ; � db 43h ; C db 0BEh ; � db 67h ; g db 0D2h ; � db 46h ; F db 42h ; B db 76h ; v db 0C0h ; � db 6Dh ; m db 5Bh ; [ db 7Eh ; ~ db 0B2h ; � db 0Fh db 16h db 29h ; ) db 3Ch ; < db 0A9h ; � db 3 db 54h ; T db 0Dh db 0DAh ; � db 5Dh ; ] db 0DFh ; � db 0F6h ; � db 0B7h ; � db 0C7h ; � db 62h ; b db 0CDh ; � db 8Dh ; � db 6 db 0D3h ; � db 69h ; i db 5Ch ; \ db 86h ; � db 0D6h ; � db 14h db 0F7h ; � db 0A5h ; � db 66h ; f db 75h ; u db 0ACh ; � db 0B1h ; � db 0E9h ; � db 45h ; E db 21h ; ! db 70h ; p db 0Ch db 87h ; � db 9Fh ; � db 74h ; t db 0A4h ; � db 22h ; " db 4Ch ; L db 6Fh ; o db 0BFh ; � db 1Fh db 56h ; V db 0AAh ; � db 2Eh ; . db 0B3h ; � db 78h ; x db 33h ; 3 db 50h ; P db 0B0h ; � db 0A3h ; � db 92h ; � db 0BCh ; � db 0CFh ; � db 19h db 1Ch db 0A7h ; � db 63h ; c db 0CBh ; � db 1Eh db 4Dh ; M db 3Eh ; > db 4Bh ; K db 1Bh db 9Bh ; � db 4Fh ; O db 0E7h ; � db 0F0h ; � db 0EEh ; � db 0ADh ; � db 3Ah ; : db 0B5h ; � db 59h ; Y db 4 db 0EAh ; � db 40h ; @ db 55h ; U db 25h ; % db 51h ; Q db 0E5h ; � db 7Ah ; z db 89h ; � db 38h ; 8 db 68h ; h db 52h ; R db 7Bh ; { db 0FCh ; � db 27h ; ' db 0AEh ; � db 0D7h ; � db 0BDh ; � db 0FAh ; � db 7 db 0F4h ; � db 0CCh ; � db 8Eh ; � db 5Fh ; _ db 0EFh ; � db 35h ; 5 db 9Ch ; � db 84h ; � db 2Bh ; + db 15h db 0D5h ; � db 77h ; w db 34h ; 4 db 49h ; I db 0B6h ; � db 12h db 0Ah db 7Fh ;  db 71h ; q db 88h ; � db 0FDh ; � db 9Dh ; � db 18h db 41h ; A db 7Dh ; } db 93h ; � db 0D8h ; � db 58h ; X db 2Ch ; , db 0CEh ; � db 0FEh ; � db 24h ; $ db 0AFh ; � db 0DEh ; � db 0B8h ; � db 36h ; 6 db 0C8h ; � db 0A1h ; � db 80h ; � db 0A6h ; � db 99h ; � db 98h ; � db 0A8h ; � db 2Fh ; / db 0Eh db 81h ; � db 65h ; e db 73h ; s db 0E4h ; � db 0C2h ; � db 0A2h ; � db 8Ah ; � db 0D4h ; � db 0E1h ; � db 11h db 0D0h ; � db 8 db 8Bh ; � db 2Ah ; * db 0F2h ; � db 0EDh ; � db 9Ah ; � db 64h ; d db 3Fh ; ? db 0C1h ; � db 6Ch ; l db 0F9h ; � db 0ECh ; � byte_7F835CE8 db 14h ; DATA XREF: sub_7F8128E1+2Er ; sub_7F812934+30r ... db 53h ; S db 0Fh db 56h ; V db 0B3h ; � db 0C8h ; � db 7Ah ; z db 9Ch ; � db 0EBh ; � db 65h ; e db 48h ; H db 17h db 16h db 15h db 9Fh ; � db 2 db 0CCh ; � db 54h ; T db 7Ch ; | db 83h ; � db 0 db 0Dh db 0Ch db 0Bh db 0A2h ; � db 62h ; b db 0A8h ; � db 76h ; v db 0DBh ; � db 0D9h ; � db 0EDh ; � db 0C7h ; � db 0C5h ; � db 0A4h ; � db 0DCh ; � db 0ACh ; � db 85h ; � db 74h ; t db 0D6h ; � db 0D0h ; � db 0A7h ; � db 9Bh ; � db 0AEh ; � db 9Ah ; � db 96h ; � db 71h ; q db 66h ; f db 0C3h ; � db 63h ; c db 99h ; � db 0B8h ; � db 0DDh ; � db 73h ; s db 92h ; � db 8Eh ; � db 84h ; � db 7Dh ; } db 0A5h ; � db 5Eh ; ^ db 0D1h ; � db 5Dh ; ] db 93h ; � db 0B1h ; � db 57h ; W db 51h ; Q db 50h ; P db 80h ; � db 89h ; � db 52h ; R db 94h ; � db 4Fh ; O db 4Eh ; N db 0Ah db 6Bh ; k db 0BCh ; � db 8Dh ; � db 7Fh ;  db 6Eh ; n db 47h ; G db 46h ; F db 41h ; A db 40h ; @ db 44h ; D db 1 db 11h db 0CBh ; � db 3 db 3Fh ; ? db 0F7h ; � db 0F4h ; � db 0E1h ; � db 0A9h ; � db 8Fh ; � db 3Ch ; < db 3Ah ; : db 0F9h ; � db 0FBh ; � db 0F0h ; � db 19h db 30h ; 0 db 82h ; � db 9 db 2Eh ; . db 0C9h ; � db 9Dh ; � db 0A0h ; � db 86h ; � db 49h ; I db 0EEh ; � db 6Fh ; o db 4Dh ; M db 6Dh ; m db 0C4h ; � db 2Dh ; - db 81h ; � db 34h ; 4 db 25h ; % db 87h ; � db 1Bh db 88h ; � db 0AAh ; � db 0FCh ; � db 6 db 0A1h ; � db 12h db 38h ; 8 db 0FDh ; � db 4Ch ; L db 42h ; B db 72h ; r db 64h ; d db 13h db 37h ; 7 db 24h ; $ db 6Ah ; j db 75h ; u db 77h ; w db 43h ; C db 0FFh db 0E6h ; � db 0B4h ; � db 4Bh ; K db 36h ; 6 db 5Ch ; \ db 0E4h ; � db 0D8h ; � db 35h ; 5 db 3Dh ; = db 45h ; E db 0B9h ; � db 2Ch ; , db 0ECh ; � db 0B7h ; � db 31h ; 1 db 2Bh ; + db 29h ; ) db 7 db 68h ; h db 0A3h ; � db 0Eh db 69h ; i db 7Bh ; { db 18h db 9Eh ; � db 21h ; ! db 39h ; 9 db 0BEh ; � db 28h ; ( db 1Ah db 5Bh ; [ db 78h ; x db 0F5h ; � db 23h ; # db 0CAh ; � db 2Ah ; * db 0B0h ; � db 0AFh ; � db 3Eh ; > db 0FEh ; � db 4 db 8Ch ; � db 0E7h ; � db 0E5h ; � db 98h ; � db 32h ; 2 db 95h ; � db 0D3h ; � db 0F6h ; � db 4Ah ; J db 0E8h ; � db 0A6h ; � db 0EAh ; � db 0E9h ; � db 0F3h ; � db 0D5h ; � db 2Fh ; / db 70h ; p db 20h db 0F2h ; � db 1Fh db 5 db 67h ; g db 0ADh ; � db 55h ; U db 10h db 0CEh ; � db 0CDh ; � db 0E3h ; � db 27h ; ' db 3Bh ; ; db 0DAh ; � db 0BAh ; � db 0D7h ; � db 0C2h ; � db 26h ; & db 0D4h ; � db 91h ; � db 1Dh db 0D2h ; � db 1Ch db 22h ; " db 33h ; 3 db 0F8h ; � db 0FAh ; � db 0F1h ; � db 5Ah ; Z db 0EFh ; � db 0CFh ; � db 90h ; � db 0B6h ; � db 8Bh ; � db 0B5h ; � db 0BDh ; � db 0C0h ; � db 0BFh ; � db 8 db 97h ; � db 1Eh db 6Ch ; l db 0E2h ; � db 61h ; a db 0E0h ; � db 0C6h ; � db 0C1h ; � db 59h ; Y db 0ABh ; � db 0BBh ; � db 58h ; X db 0DEh ; � db 5Fh ; _ db 0DFh ; � db 60h ; ` db 79h ; y db 7Eh ; ~ db 0B2h ; � db 8Ah ; � unk_7F835DE8 db 2 ; DATA XREF: sub_7F826884+49o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0FFh db 0FFh db 0 db 0 ; LPCVOID lpBuffer lpBuffer dd 0 ; DATA XREF: sub_7F812653+56r ; sub_7F812653+6Ar ... aFilter32_dll db 'FILTER32.DLL',0 ; DATA XREF: .data:7F835FD4o align 4 aFilter_dll db 'FILTER.DLL',0 ; DATA XREF: .data:7F835FD0o align 4 aEmptyw32_dll db 'EMPTYW32.DLL',0 ; DATA XREF: .data:7F835FCCo align 4 aEmptywb_dll db 'EMPTYWB.DLL',0 ; DATA XREF: .data:7F835FC8o aBcc32_dll db 'BCC32.DLL',0 ; DATA XREF: .data:7F835FC4o align 4 aBcc_dll db 'BCC.DLL',0 ; DATA XREF: .data:7F835FC0o aAppxec32_dll db 'APPXEC32.DLL',0 ; DATA XREF: .data:7F835FBCo align 4 aAppexec_dll db 'APPEXEC.DLL',0 ; DATA XREF: .data:7F835FB8o aXenix32_dll db 'XENIX32.DLL',0 ; DATA XREF: .data:7F835FB4o aXenix_dll db 'XENIX.DLL',0 ; DATA XREF: .data:7F835FB0o align 4 aBuildflavor db '',0 ; DATA XREF: .data:7F835FA8o align 4 aXimail32 db 'XIMAIL32',0 ; DATA XREF: .data:7F835FA4o align 4 aXimail db 'XIMAIL',0 ; DATA XREF: .data:7F835FA0o align 4 aWinhlp32_exe db 'WINHLP32.EXE',0 ; DATA XREF: .data:7F835F9Co align 4 aWinhelp_exe db 'WINHELP.EXE',0 ; DATA XREF: .data:7F835F98o ; CHAR aMsmail32_hlp[] aMsmail32_hlp db 'MSMAIL32.HLP',0 ; DATA XREF: sub_7F815163+100o ; .data:7F835F94o align 4 aMsmail_hlp db 'MSMAIL.HLP',0 ; DATA XREF: .data:7F835F90o align 4 aSchmsg32_dll db 'SCHMSG32.DLL',0 ; DATA XREF: .data:7F835F8Co align 4 aSchedmsg_dll db 'SCHEDMSG.DLL',0 ; DATA XREF: .data:7F835F88o align 4 aImpexp32_dll db 'IMPEXP32.DLL',0 ; DATA XREF: .data:7F835F84o align 4 aImpexp_dll db 'IMPEXP.DLL',0 ; DATA XREF: .data:7F835F80o align 10h aWgpomg32_dll db 'WGPOMG32.DLL',0 ; DATA XREF: .data:7F835F7Co align 10h aWgpomgr_dll db 'WGPOMGR.DLL',0 ; DATA XREF: .data:7F835F78o aPabnsp32 db 'PABNSP32',0 ; DATA XREF: .data:7F835F74o align 4 aPabnsp db 'PABNSP',0 ; DATA XREF: .data:7F835F70o align 10h aMssfs32 db 'MSSFS32',0 ; DATA XREF: .data:7F835F6Co aMssfs db 'MSSFS',0 ; DATA XREF: .data:off_7F835F68o align 10h ; CHAR byte_7F835F50[4] byte_7F835F50 db 4 dup(0) ; DATA XREF: sub_7F8150A9+12o dword_7F835F54 dd 0 ; DATA XREF: sub_7F814F94+8Aw dword_7F835F58 dd 0 ; DATA XREF: sub_7F814F94:loc_7F814FEDr ; sub_7F814F94:loc_7F815006r ... dword_7F835F5C dd 0 ; DATA XREF: sub_7F814F94+47r ; sub_7F814F94+6Ar ... aSS_3 db '%s %s',0 ; DATA XREF: sub_7F8150A9+28o align 4 off_7F835F68 dd offset aMssfs ; DATA XREF: sub_7F815163+1B0o ; sub_7F815163+1C3r ; "MSSFS" dd offset aMssfs32 ; "MSSFS32" dd offset aPabnsp ; "PABNSP" dd offset aPabnsp32 ; "PABNSP32" dd offset aWgpomgr_dll ; "WGPOMGR.DLL" dd offset aWgpomg32_dll ; "WGPOMG32.DLL" dd offset aImpexp_dll ; "IMPEXP.DLL" dd offset aImpexp32_dll ; "IMPEXP32.DLL" dd offset aSchedmsg_dll ; "SCHEDMSG.DLL" dd offset aSchmsg32_dll ; "SCHMSG32.DLL" dd offset aMsmail_hlp ; "MSMAIL.HLP" dd offset aMsmail32_hlp ; "MSMAIL32.HLP" dd offset aWinhelp_exe ; "WINHELP.EXE" dd offset aWinhlp32_exe ; "WINHLP32.EXE" dd offset aXimail ; "XIMAIL" dd offset aXimail32 ; "XIMAIL32" dd offset aBuildflavor ; "" dd offset Default dd offset aXenix_dll ; "XENIX.DLL" dd offset aXenix32_dll ; "XENIX32.DLL" dd offset aAppexec_dll ; "APPEXEC.DLL" dd offset aAppxec32_dll ; "APPXEC32.DLL" dd offset aBcc_dll ; "BCC.DLL" dd offset aBcc32_dll ; "BCC32.DLL" dd offset aEmptywb_dll ; "EMPTYWB.DLL" dd offset aEmptyw32_dll ; "EMPTYW32.DLL" dd offset aFilter_dll ; "FILTER.DLL" dd offset aFilter32_dll ; "FILTER32.DLL" align 10h ; CHAR aFilter32[] aFilter32 db 'filter32',0 ; DATA XREF: sub_7F815163+188o align 4 ; CHAR aFilter[] aFilter db 'filter',0 ; DATA XREF: sub_7F815163+173o align 4 ; CHAR aMsgfilter[] aMsgfilter db 'MsgFilter',0 ; DATA XREF: sub_7F815163+12Co align 10h ; CHAR aSpelling[] aSpelling db 'Spelling',0 ; DATA XREF: sub_7F815163:loc_7F81527Ao align 4 ; CHAR aMapihelp[] aMapihelp db 'MAPIHELP',0 ; DATA XREF: sub_7F815163+EFo align 4 ; CHAR aProviders[] aProviders db 'Providers',0 ; DATA XREF: sub_7F815163+7Fo align 4 ; CHAR aCustomMessages[] aCustomMessages db 'Custom Messages',0 ; DATA XREF: sub_7F815163+70o ; CHAR aCustomCommands[] aCustomCommands db 'Custom Commands',0 ; DATA XREF: sub_7F815163:loc_7F8151C4o align 8 a_tmp db '.TMP',0 align 10h aAux db 'AUX',0 ; DATA XREF: .data:7F8360A0o aClock db 'CLOCK$',0 ; DATA XREF: .data:7F8360A4o align 4 aCom1 db 'COM1',0 ; DATA XREF: .data:7F8360A8o align 4 aCom2 db 'COM2',0 ; DATA XREF: .data:7F8360ACo align 4 aCom3 db 'COM3',0 ; DATA XREF: .data:7F8360B0o align 4 aCom4 db 'COM4',0 ; DATA XREF: .data:7F8360B4o align 4 aCon db 'CON',0 ; DATA XREF: .data:7F8360B8o aLpt1 db 'LPT1',0 ; DATA XREF: .data:7F8360BCo align 4 aLpt2 db 'LPT2',0 ; DATA XREF: .data:7F8360C0o align 10h aLpt3 db 'LPT3',0 ; DATA XREF: .data:7F8360C4o align 4 aNul db 'NUL',0 ; DATA XREF: .data:7F8360C8o aPrn db 'PRN',0 ; DATA XREF: .data:7F8360CCo dd offset aAux ; "AUX" dd offset aClock ; "CLOCK$" dd offset aCom1 ; "COM1" dd offset aCom2 ; "COM2" dd offset aCom3 ; "COM3" dd offset aCom4 ; "COM4" dd offset aCon ; "CON" dd offset aLpt1 ; "LPT1" dd offset aLpt2 ; "LPT2" dd offset aLpt3 ; "LPT3" dd offset aNul ; "NUL" dd offset aPrn ; "PRN" unk_7F8360D0 db 5Ch ; \ ; DATA XREF: sub_7F815497+4Fo db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F8360D8 dd 200h ; DATA XREF: sub_7F8156C0+Dr db 42h ; B db 2 db 0 db 0 db 2 db 2 db 0 db 0 db 5 db 2 db 0 db 0 db 0Fh db 2 db 0 db 0 db 3 db 2 db 0 db 0 db 43h ; C db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 4 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 44h ; D db 2 db 0 db 0 db 45h ; E db 2 db 0 db 0 db 46h ; F db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 47h ; G db 2 db 0 db 0 db 48h ; H db 2 db 0 db 0 db 49h ; I db 2 db 0 db 0 db 12h db 2 db 0 db 0 db 4Ah ; J db 2 db 0 db 0 db 4Bh ; K db 2 db 0 db 0 db 8 db 2 db 0 db 0 db 4Ch ; L db 2 db 0 db 0 db 4Dh ; M db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 4Eh ; N db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 9 db 2 db 0 db 0 db 50h ; P db 2 db 0 db 0 db 51h ; Q db 2 db 0 db 0 db 52h ; R db 2 db 0 db 0 db 0Ch db 2 db 0 db 0 db 53h ; S db 2 db 0 db 0 db 54h ; T db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 53h ; S db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 55h ; U db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 4Fh ; O db 2 db 0 db 0 db 7 db 2 db 0 db 0 db 57h ; W db 2 db 0 db 0 db 7 db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 6 db 2 db 0 db 0 db 6 db 2 db 0 db 0 db 6 db 2 db 0 db 0 db 7 db 2 db 0 db 0 db 3 db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 7 db 2 db 0 db 0 db 7 db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 5Ah ; Z db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 58h ; X db 2 db 0 db 0 db 0Ch db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 5Bh ; [ db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 56h ; V db 2 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 40h ; @ db 0 db 30h ; 0 db 0 db 20h db 0 db 10h db 0 db 1 db 0 db 41h ; A db 0 db 31h ; 1 db 0 db 21h ; ! db 0 db 11h db 0 db 2 db 0 db 42h ; B db 0 db 32h ; 2 db 0 db 22h ; " db 0 db 12h db 0 db 0 db 0 db 2 db 0 db 42h ; B db 40h ; @ db 0 db 0 db 0 db 0 db 0 db 0 dword_7F83626C dd 0 ; DATA XREF: sub_7F816468+30Ar ; sub_7F8167EA+55r ... db 0 db 0 db 0 db 0 dword_7F836274 dd 0 ; DATA XREF: sub_7F816468+35w ; sub_7F816468+48w ... word_7F836278 dw 0 ; DATA XREF: sub_7F81722B:loc_7F81724Cr ; sub_7F81722B:loc_7F817288r ... align 10h dword_7F836280 dd 0 ; DATA XREF: sub_7F81722B+37r ; sub_7F81722B+70r ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F836410 db 0 ; DATA XREF: sub_7F81722B+C1o ; sub_7F81722B+E0o ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; CHAR ClassName[] ClassName db 'MS Mail32 Notify',0 ; DATA XREF: sub_7F81710C+48o ; sub_7F8171B7+15o align 8 ; CHAR WindowName[] WindowName db 'MS Mail32 Notification',0 ; DATA XREF: sub_7F81710C+43o align 10h dword_7F836760 dd 0 ; DATA XREF: sub_7F812653+6r ; sub_7F812653+12r ... dword_7F836764 dd 0 ; DATA XREF: sub_7F8173E6+155w ; sub_7F8173E6+1BBr ... dword_7F836768 dd 0 ; DATA XREF: sub_7F8173E6+13w ; sub_7F8173E6+7Ar ... dword_7F83676C dd 57E40h ; DATA XREF: sub_7F81217E+80r ; sub_7F8173E6+FEw ... dword_7F836770 dd 0EA60h ; DATA XREF: sub_7F81217E+8Br ; sub_7F8173E6+107w ; LPSTR lpsz lpsz dd 0 ; DATA XREF: sub_7F8173E6+BCw ; sub_7F8173E6+224r ... dword_7F836778 dd 1 ; DATA XREF: sub_7F811CD9+11Er ; sub_7F8173E6+118w ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 1Fh db 0 db 0 db 0 db 3Bh ; ; db 0 db 0 db 0 db 5Ah ; Z db 0 db 0 db 0 db 78h ; x db 0 db 0 db 0 db 97h ; � db 0 db 0 db 0 db 0B5h ; � db 0 db 0 db 0 db 0D4h ; � db 0 db 0 db 0 db 0F3h ; � db 0 db 0 db 0 db 11h db 1 db 0 db 0 db 30h ; 0 db 1 db 0 db 0 db 4Eh ; N db 1 db 0 db 0 db 6Dh ; m db 1 db 0 db 0 dword_7F8367B4 dd 0 ; DATA XREF: sub_7F817E9D+20Er ; sub_7F817E9D+236w ... byte_7F8367B8 db 30h ; DATA XREF: sub_7F81AC90+49r ; sub_7F81AC90+8Ar ... a123456789abcde db '123456789ABCDEF',0 align 4 a?fmt db '?fmt',0 ; DATA XREF: sub_7F81ADC3+83o db 0 db 0 db 0 db 0 db 0 db 0 unk_7F8367D7 db 0 ; DATA XREF: sub_7F80FFF8+ABo ; sub_7F810109+51o ... ; CHAR ReturnedString[] ReturnedString dw 0 ; DATA XREF: sub_7F80FE90+8Do ; sub_7F80FE90+C1o ... ; CHAR word_7F8367DA[] word_7F8367DA dw 0 ; DATA XREF: sub_7F81DCCA+B9o ; sub_7F81DCCA+129o ... word_7F8367DC dw 0 ; DATA XREF: sub_7F81EB89+EEr ; sub_7F81EB89+FBr word_7F8367DE dw 0 ; DATA XREF: sub_7F81EB89+109r ; sub_7F81EB89+116r word_7F8367E0 dw 0 ; DATA XREF: sub_7F81EB89+124r ; sub_7F81EB89+131r db 0 db 0 db 0 db 0 byte_7F8367E6 db 0 ; DATA XREF: sub_7F81BA1F+F5w ; sub_7F81BA1F+181w ... word_7F8367E7 dw 0 ; DATA XREF: sub_7F81BA1F+ECw ; sub_7F81BA1F+1B7w ... word_7F8367E9 dw 0 ; DATA XREF: sub_7F81BA1F+106w ; sub_7F81BA1F+223w ... dword_7F8367EB dd 0 ; DATA XREF: sub_7F81BA1F+FCw ; sub_7F81BA1F+1EDw ... dword_7F8367EF dd 0 ; DATA XREF: sub_7F81BA1F+155w ; sub_7F81C56F+318w ... ; const CHAR sz sz db 0 ; DATA XREF: sub_7F81BA1F+2F6o ; sub_7F81BA1F:loc_7F81BD3Fw ... unk_7F8367F4 db 0 ; DATA XREF: sub_7F81BA1F+318o ; sub_7F81BA1F+327o ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; const CHAR byte_7F8369F8 byte_7F8369F8 db 0 ; DATA XREF: sub_7F81B4E9+66o ; sub_7F81B4E9+8Fo ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F836A78 db 69h ; DATA XREF: sub_7F81DCCA:loc_7F81DD26r ; sub_7F81DCCA+63o aBhidvbipm db '�Hid��IPM',0 align 8 dword_7F836A88 dd 74685382h ; DATA XREF: sub_7F81DCCA+3Er ; sub_7F81DCCA+45o aBipmvinbbipmvw db '�IPM�Inb�IPM�Wst�IPM�Out�Hid�Bul�Hid�Sha�HidpPAB�Hid',0 align 8 dword_7F836AC8 dd 74685382h ; DATA XREF: sub_7F81DCCA:loc_7F81DD4Br ; sub_7F81DCCA+88o db 4Bh ; K db 26h ; & db 0 db 0 db 4Fh ; O db 26h ; & db 0 db 0 db 82h ; � db 49h ; I db 6Eh ; n db 62h ; b db 4Ah ; J db 26h ; & db 0 db 0 db 4Eh ; N db 26h ; & db 0 db 0 db 82h ; � db 57h ; W db 73h ; s db 74h ; t db 4Dh ; M db 26h ; & db 0 db 0 db 51h ; Q db 26h ; & db 0 db 0 db 82h ; � db 4Fh ; O db 75h ; u db 74h ; t db 4Ch ; L db 26h ; & db 0 db 0 db 50h ; P db 26h ; & db 0 db 0 db 82h ; � db 42h ; B db 75h ; u db 6Ch ; l db 0E2h ; � db 5 db 0 db 0 db 0E5h ; � db 5 db 0 db 0 db 82h ; � db 53h ; S db 68h ; h db 61h ; a db 0E3h ; � db 5 db 0 db 0 db 0E6h ; � db 5 db 0 db 0 db 70h ; p db 50h ; P db 41h ; A db 42h ; B db 0E4h ; � db 5 db 0 db 0 db 0E7h ; � db 5 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 aQppab db 'qpPAB',0 ; DATA XREF: sub_7F81E844:loc_7F81E8A8o ; sub_7F81E844+69r db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 aJplcvbul db '�PLC�Bul',0 ; DATA XREF: sub_7F81E844+44o ; sub_7F81E844+49r align 8 aBipmbhid db '�IPM�Hid',0 ; DATA XREF: sub_7F81D910+7Bo ; sub_7F81D910+93r align 8 byte_7F836B58 db 0 ; DATA XREF: sub_7F81EF81o ; sub_7F81EF87+8o ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F836B61 db 0 ; DATA XREF: sub_7F81EF87+1Bw byte_7F836B62 db 0 ; DATA XREF: sub_7F81EF87+22w db 0 db 0 byte_7F836B65 db 0 ; DATA XREF: sub_7F81EF87+29w db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F836B78 db 0 ; DATA XREF: sub_7F81EF87+30w db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F836BD7 db 0 ; DATA XREF: sub_7F81EF87+D2w db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 byte_7F836BF8 db 0 ; DATA XREF: sub_7F81EF87+37w db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F836C58 dd 0 ; DATA XREF: sub_7F81F0AC:loc_7F81F0DAw ; sub_7F81F20F+41w ... dword_7F836C5C dd 0 ; DATA XREF: sub_7F81F20F+18Bw ; sub_7F81F20F+199r ... dword_7F836C60 dd 0 ; DATA XREF: sub_7F811CD9+126r ; sub_7F817E9D+206r ... dword_7F836C64 dd 0 ; DATA XREF: sub_7F821A34+FDr ; sub_7F821A34+15Br ... dword_7F836C68 dd 0 ; DATA XREF: sub_7F8207A6+45w ; sub_7F8207A6+45Aw ... word_7F836C6C dw 0 ; DATA XREF: sub_7F822894+18w ; sub_7F822894+26Cr ... align 10h dword_7F836C70 dd 0 ; DATA XREF: sub_7F82110E:loc_7F8213ECr ; sub_7F8219A0+4w ... word_7F836C74 dw 0 ; DATA XREF: sub_7F820E5D+Fw ; sub_7F820E74+1Ar ... align 10h ; CHAR aKb_free_stop_c[] aKb_free_stop_c db 'Kb_Free_Stop_Compress',0 ; DATA XREF: sub_7F8216EE+129o align 4 ; CHAR aKb_free_start_[] aKb_free_start_ db 'Kb_Free_Start_Compress',0 ; DATA XREF: sub_7F8216EE+10Co align 10h ; CHAR aNo_compress[] aNo_compress db 'No_Compress',0 ; DATA XREF: sub_7F8216EE+E9o ; CHAR aSecs_till_fast[] aSecs_till_fast db 'Secs_Till_Fast_Compress',0 ; DATA XREF: sub_7F8216EE+D5o ; CHAR aPercent_free_0[] aPercent_free_0 db 'Percent_Free_Stop_Compress',0 ; DATA XREF: sub_7F8216EE+A8o align 10h ; CHAR aMmf_0[] aMmf_0 db 'MMF',0 ; DATA XREF: sub_7F8216EE+8Fo ; sub_7F8216EE+ADo ... ; CHAR aPercent_free_s[] aPercent_free_s db 'Percent_Free_Start_Compress',0 ; DATA XREF: sub_7F8216EE+8Ao ; CHAR aMsmail32_ini_1[] aMsmail32_ini_1 db 'msmail32.ini',0 ; DATA XREF: sub_7F8216EE+76o ; sub_7F8216EE:loc_7F8217B3o ... align 10h ; CHAR aBoot_descripti[] aBoot_descripti db 'boot.description',0 ; DATA XREF: sub_7F821D9A+CCo ; sub_7F821FF1+1Bo align 4 ; CHAR aLanguage_dll[] aLanguage_dll db 'language.dll',0 ; DATA XREF: sub_7F821D9A+C7o ; sub_7F821FF1+16o align 4 ; CHAR aSystem_ini[] aSystem_ini db 'system.ini',0 ; DATA XREF: sub_7F821D9A+9Co ; sub_7F821FF1+2o align 10h ; CHAR a_03_3d[] a_03_3d db '.%03.3d',0 ; DATA XREF: sub_7F823D4A+121o align 10h a12345678901234 db '123456789012345678901234',0 align 10h aC850sort db 'C850SORT',0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 1 db 2 db 3 db 4 db 5 db 6 db 7 db 8 db 9 db 0Ah db 0Bh db 0Ch db 0Dh db 0Eh db 0Fh db 10h db 11h db 12h db 13h db 14h db 15h db 16h db 17h db 18h db 19h db 1Ah db 1Bh db 1Ch db 1Dh db 1Eh db 1Fh db 20h db 21h ; ! db 22h ; " db 23h ; # db 24h ; $ db 25h ; % db 26h ; & db 27h ; ' db 28h ; ( db 29h ; ) db 2Ah ; * db 2Bh ; + db 2Ch ; , db 2Dh ; - db 2Eh ; . db 2Fh ; / db 4Fh ; O db 50h ; P db 51h ; Q db 52h ; R db 53h ; S db 54h ; T db 55h ; U db 56h ; V db 57h ; W db 58h ; X db 30h ; 0 db 31h ; 1 db 32h ; 2 db 33h ; 3 db 34h ; 4 db 35h ; 5 db 36h ; 6 db 59h ; Y db 6Ah ; j db 6Ch ; l db 70h ; p db 74h ; t db 7Eh ; ~ db 80h ; � db 82h ; � db 84h ; � db 8Fh ; � db 91h ; � db 93h ; � db 95h ; � db 98h ; � db 9Ch ; � db 0ABh ; � db 0AFh ; � db 0B1h ; � db 0B3h ; � db 0B6h ; � db 0B8h ; � db 0C2h ; � db 0C4h ; � db 0C6h ; � db 0C8h ; � db 0CDh ; � db 37h ; 7 db 38h ; 8 db 39h ; 9 db 3Ah ; : db 3Bh ; ; db 3Ch ; < db 59h ; Y db 6Ah ; j db 6Ch ; l db 70h ; p db 74h ; t db 7Eh ; ~ db 80h ; � db 82h ; � db 84h ; � db 8Fh ; � db 91h ; � db 93h ; � db 95h ; � db 98h ; � db 9Ch ; � db 0ABh ; � db 0AFh ; � db 0B1h ; � db 0B3h ; � db 0B6h ; � db 0B8h ; � db 0C2h ; � db 0C4h ; � db 0C6h ; � db 0C8h ; � db 0CDh ; � db 3Dh ; = db 3Eh ; > db 3Fh ; ? db 40h ; @ db 41h ; A db 6Ch ; l db 0B8h ; � db 74h ; t db 59h ; Y db 59h ; Y db 59h ; Y db 59h ; Y db 6Ch ; l db 74h ; t db 74h ; t db 74h ; t db 84h ; � db 84h ; � db 84h ; � db 59h ; Y db 59h ; Y db 74h ; t db 68h ; h db 68h ; h db 9Ch ; � db 9Ch ; � db 9Ch ; � db 0B8h ; � db 0B8h ; � db 0C8h ; � db 9Ch ; � db 0B8h ; � db 9Ch ; � db 42h ; B db 9Ch ; � db 43h ; C db 44h ; D db 59h ; Y db 84h ; � db 9Ch ; � db 0B8h ; � db 98h ; � db 98h ; � db 67h ; g db 0AAh ; � db 45h ; E db 46h ; F db 0CFh ; � db 47h ; G db 48h ; H db 49h ; I db 4Ah ; J db 4Bh ; K db 0D0h ; � db 0D1h ; � db 0D2h ; � db 0D3h ; � db 0D4h ; � db 59h ; Y db 59h ; Y db 59h ; Y db 4Ch ; L db 0D5h ; � db 0D6h ; � db 0D7h ; � db 0D8h ; � db 4Dh ; M db 4Eh ; N db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DDh ; � db 0DEh ; � db 0DFh ; � db 59h ; Y db 59h ; Y db 0E0h ; � db 0E1h ; � db 0E2h ; � db 0E3h ; � db 0E4h ; � db 0E5h ; � db 0E6h ; � db 0E7h ; � db 72h ; r db 72h ; r db 74h ; t db 74h ; t db 74h ; t db 84h ; � db 84h ; � db 84h ; � db 84h ; � db 0E8h ; � db 0E9h ; � db 0EAh ; � db 0EBh ; � db 0ECh ; � db 84h ; � db 0EDh ; � db 9Ch ; � db 0B5h ; � db 9Ch ; � db 9Ch ; � db 9Ch ; � db 9Ch ; � db 97h ; � db 0ADh ; � db 0ADh ; � db 0B8h ; � db 0B8h ; � db 0B8h ; � db 0C8h ; � db 0C8h ; � db 0EEh ; � db 0EFh ; � db 0F0h ; � db 0F1h ; � db 0F2h ; � db 0F3h ; � db 0F4h ; � db 0F5h ; � db 0F6h ; � db 0F7h ; � db 0F8h ; � db 0F9h ; � db 0FAh ; � db 0FBh ; � db 0FDh ; � db 0FCh ; � db 0FEh ; � db 0FFh db 0 db 1 db 2 db 3 db 4 db 5 db 6 db 7 db 8 db 9 db 0Ah db 0Bh db 0Ch db 0Dh db 0Eh db 0Fh db 10h db 11h db 12h db 13h db 14h db 15h db 16h db 17h db 18h db 19h db 1Ah db 1Bh db 1Ch db 1Dh db 1Eh db 1Fh db 20h db 21h ; ! db 22h ; " db 23h ; # db 24h ; $ db 25h ; % db 26h ; & db 27h ; ' db 28h ; ( db 29h ; ) db 2Ah ; * db 2Bh ; + db 2Ch ; , db 2Dh ; - db 2Eh ; . db 2Fh ; / db 4Fh ; O db 50h ; P db 51h ; Q db 52h ; R db 53h ; S db 54h ; T db 55h ; U db 56h ; V db 57h ; W db 58h ; X db 30h ; 0 db 31h ; 1 db 32h ; 2 db 33h ; 3 db 34h ; 4 db 35h ; 5 db 36h ; 6 db 5Ah ; Z db 6Bh ; k db 6Dh ; m db 71h ; q db 75h ; u db 7Fh ;  db 81h ; � db 83h ; � db 85h ; � db 90h ; � db 92h ; � db 94h ; � db 96h ; � db 99h ; � db 9Dh ; � db 0ACh ; � db 0B0h ; � db 0B2h ; � db 0B4h ; � db 0B7h ; � db 0B9h ; � db 0C3h ; � db 0C5h ; � db 0C7h ; � db 0C9h ; � db 0CEh ; � db 37h ; 7 db 38h ; 8 db 39h ; 9 db 3Ah ; : db 3Bh ; ; db 3Ch ; < db 59h ; Y db 6Ah ; j db 6Ch ; l db 70h ; p db 74h ; t db 7Eh ; ~ db 80h ; � db 82h ; � db 84h ; � db 8Fh ; � db 91h ; � db 93h ; � db 95h ; � db 98h ; � db 9Ch ; � db 0ABh ; � db 0AFh ; � db 0B1h ; � db 0B3h ; � db 0B6h ; � db 0B8h ; � db 0C2h ; � db 0C4h ; � db 0C6h ; � db 0C8h ; � db 0CDh ; � db 3Dh ; = db 3Eh ; > db 3Fh ; ? db 40h ; @ db 41h ; A db 6Fh ; o db 0BEh ; � db 76h ; v db 61h ; a db 5Fh ; _ db 5Dh ; ] db 63h ; c db 6Eh ; n db 7Ch ; | db 7Ah ; z db 78h ; x db 8Bh ; � db 8Dh ; � db 89h ; � db 60h ; ` db 64h ; d db 77h ; w db 68h ; h db 69h ; i db 0A4h ; � db 0A2h ; � db 0A0h ; � db 0C0h ; � db 0BCh ; � db 0CCh ; � db 0A3h ; � db 0BFh ; � db 0A8h ; � db 42h ; B db 0A9h ; � db 43h ; C db 44h ; D db 5Bh ; [ db 87h ; � db 9Eh ; � db 0BAh ; � db 9Ah ; � db 9Bh ; � db 67h ; g db 0AAh ; � db 45h ; E db 46h ; F db 0CFh ; � db 47h ; G db 48h ; H db 49h ; I db 4Ah ; J db 4Bh ; K db 0D0h ; � db 0D1h ; � db 0D2h ; � db 0D3h ; � db 0D4h ; � db 5Ch ; \ db 62h ; b db 5Eh ; ^ db 4Ch ; L db 0D5h ; � db 0D6h ; � db 0D7h ; � db 0D8h ; � db 4Dh ; M db 4Eh ; N db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DDh ; � db 0DEh ; � db 0DFh ; � db 65h ; e db 66h ; f db 0E0h ; � db 0E1h ; � db 0E2h ; � db 0E3h ; � db 0E4h ; � db 0E5h ; � db 0E6h ; � db 0E7h ; � db 72h ; r db 73h ; s db 7Dh ; } db 7Bh ; { db 79h ; y db 86h ; � db 88h ; � db 8Eh ; � db 8Ch ; � db 0E8h ; � db 0E9h ; � db 0EAh ; � db 0EBh ; � db 0ECh ; � db 8Ah ; � db 0EDh ; � db 9Fh ; � db 0B5h ; � db 0A5h ; � db 0A1h ; � db 0A6h ; � db 0A7h ; � db 97h ; � db 0ADh ; � db 0AEh ; � db 0BBh ; � db 0C1h ; � db 0BDh ; � db 0CAh ; � db 0CBh ; � db 0EEh ; � db 0EFh ; � db 0F0h ; � db 0F1h ; � db 0F2h ; � db 0F3h ; � db 0F4h ; � db 0F5h ; � db 0F6h ; � db 0F7h ; � db 0F8h ; � db 0F9h ; � db 0FAh ; � db 0FBh ; � db 0FCh ; � db 0FDh ; � db 0FEh ; � db 0FFh db 0 db 1 db 2 db 3 db 4 db 5 db 6 db 7 db 8 db 9 db 0Ah db 0Bh db 0Ch db 0Dh db 0Eh db 0Fh db 10h db 11h db 12h db 13h db 14h db 15h db 16h db 17h db 18h db 19h db 1Ah db 1Bh db 1Ch db 1Dh db 1Eh db 1Fh db 20h db 21h ; ! db 22h ; " db 23h ; # db 24h ; $ db 25h ; % db 26h ; & db 27h ; ' db 28h ; ( db 29h ; ) db 2Ah ; * db 2Bh ; + db 2Ch ; , db 2Dh ; - db 2Eh ; . db 2Fh ; / db 4Fh ; O db 50h ; P db 51h ; Q db 52h ; R db 53h ; S db 54h ; T db 55h ; U db 56h ; V db 57h ; W db 58h ; X db 30h ; 0 db 31h ; 1 db 32h ; 2 db 33h ; 3 db 34h ; 4 db 35h ; 5 db 36h ; 6 db 59h ; Y db 6Ah ; j db 6Ch ; l db 70h ; p db 74h ; t db 7Eh ; ~ db 80h ; � db 82h ; � db 84h ; � db 8Fh ; � db 91h ; � db 93h ; � db 95h ; � db 98h ; � db 9Ch ; � db 0ABh ; � db 0AFh ; � db 0B1h ; � db 0B3h ; � db 0B6h ; � db 0B8h ; � db 0C2h ; � db 0C4h ; � db 0C6h ; � db 0C8h ; � db 0CDh ; � db 37h ; 7 db 38h ; 8 db 39h ; 9 db 3Ah ; : db 3Bh ; ; db 3Ch ; < db 59h ; Y db 6Ah ; j db 6Ch ; l db 70h ; p db 74h ; t db 7Eh ; ~ db 80h ; � db 82h ; � db 84h ; � db 8Fh ; � db 91h ; � db 93h ; � db 95h ; � db 98h ; � db 9Ch ; � db 0ABh ; � db 0AFh ; � db 0B1h ; � db 0B3h ; � db 0B6h ; � db 0B8h ; � db 0C2h ; � db 0C4h ; � db 0C6h ; � db 0C8h ; � db 0CDh ; � db 3Dh ; = db 3Eh ; > db 3Fh ; ? db 40h ; @ db 41h ; A db 6Eh ; n db 0BEh ; � db 76h ; v db 61h ; a db 5Fh ; _ db 5Dh ; ] db 63h ; c db 6Eh ; n db 7Ch ; | db 7Ah ; z db 78h ; x db 8Bh ; � db 8Dh ; � db 89h ; � db 5Fh ; _ db 63h ; c db 76h ; v db 68h ; h db 68h ; h db 0A4h ; � db 0A2h ; � db 0A0h ; � db 0C0h ; � db 0BCh ; � db 0CCh ; � db 0A2h ; � db 0BEh ; � db 0A8h ; � db 42h ; B db 0A8h ; � db 43h ; C db 44h ; D db 5Bh ; [ db 87h ; � db 9Eh ; � db 0BAh ; � db 9Ah ; � db 9Ah ; � db 67h ; g db 0AAh ; � db 45h ; E db 46h ; F db 0CFh ; � db 47h ; G db 48h ; H db 49h ; I db 4Ah ; J db 4Bh ; K db 0D0h ; � db 0D1h ; � db 0D2h ; � db 0D3h ; � db 0D4h ; � db 5Bh ; [ db 61h ; a db 5Dh ; ] db 4Ch ; L db 0D5h ; � db 0D6h ; � db 0D7h ; � db 0D8h ; � db 4Dh ; M db 4Eh ; N db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DDh ; � db 0DEh ; � db 0DFh ; � db 65h ; e db 65h ; e db 0E0h ; � db 0E1h ; � db 0E2h ; � db 0E3h ; � db 0E4h ; � db 0E5h ; � db 0E6h ; � db 0E7h ; � db 72h ; r db 72h ; r db 7Ch ; | db 7Ah ; z db 78h ; x db 86h ; � db 87h ; � db 8Dh ; � db 8Bh ; � db 0E8h ; � db 0E9h ; � db 0EAh ; � db 0EBh ; � db 0ECh ; � db 89h ; � db 0EDh ; � db 9Eh ; � db 0B5h ; � db 0A4h ; � db 0A0h ; � db 0A6h ; � db 0A6h ; � db 97h ; � db 0ADh ; � db 0ADh ; � db 0BAh ; � db 0C0h ; � db 0BCh ; � db 0CAh ; � db 0CAh ; � db 0EEh ; � db 0EFh ; � db 0F0h ; � db 0F1h ; � db 0F2h ; � db 0F3h ; � db 0F4h ; � db 0F5h ; � db 0F6h ; � db 0F7h ; � db 0F8h ; � db 0F9h ; � db 0FAh ; � db 0FBh ; � db 0FDh ; � db 0FCh ; � db 0FEh ; � db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0 db 0 db 0 db 0 dword_7F837098 dd 0 ; DATA XREF: sub_7F814F94+8r ; sub_7F815037+Br ... dword_7F83709C dd 0 ; DATA XREF: sub_7F814F94+10r ; sub_7F815037+13r ... dword_7F8370A0 dd 0 ; DATA XREF: sub_7F8241ED+Dr ; sub_7F8241ED+36w ... align 8 dword_7F8370A8 dd 0 ; DATA XREF: sub_7F8241ED+16o ; sub_7F8241ED+71w ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; LPCVOID pMem pMem dd 0 ; DATA XREF: sub_7F8241ED:loc_7F824294w ; sub_7F8242A1:loc_7F8242C8r ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F8373D0 dd 0 ; DATA XREF: sub_7F8241ED+3Dw ; sub_7F8242A1+73w ... dword_7F8373D4 dd 1 ; DATA XREF: sub_7F814EF3+18w ; sub_7F8241ED+4Fr ... dword_7F8373D8 dd 0 ; DATA XREF: sub_7F824364+43w ; sub_7F824364+66w ... dword_7F8373DC dd 0 ; DATA XREF: sub_7F824364+49w ; sub_7F824364+6Cw ... dword_7F8373E0 dd 0 ; DATA XREF: sub_7F824364+Dr ; sub_7F824364+36w ... align 8 dword_7F8373E8 dd 0 ; DATA XREF: sub_7F824364+16o ; sub_7F824364+71w ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; LPCVOID dword_7F837580 dword_7F837580 dd 0 ; DATA XREF: sub_7F824364:loc_7F82440Bw ; sub_7F824418:loc_7F82443Fr ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F837710 dd 0 ; DATA XREF: sub_7F824364+3Dw ; sub_7F824418+73w dword_7F837714 dd 1 ; DATA XREF: sub_7F824364+4Fr ; sub_7F824418+2Er ; CHAR aMessageFinders[] aMessageFinders db 'Message Finders',0 ; DATA XREF: sub_7F825DC6+12o ; CHAR aMsmail32_ini_2[] aMsmail32_ini_2 db 'msmail32.ini',0 ; DATA XREF: sub_7F825DC6+Co align 4 ; CHAR aPointsperstep[] aPointsperstep db 'PointsPerStep',0 ; DATA XREF: sub_7F825DC6+21o align 4 ; CHAR aPointsperaddfl[] aPointsperaddfl db 'PointsPerAddFlush',0 ; DATA XREF: sub_7F825DC6+3Co align 10h ; CHAR aPointsperdelfl[] aPointsperdelfl db 'PointsPerDelFlush',0 ; DATA XREF: sub_7F825DC6+57o align 8 ; CHAR aPointsperfolde[] aPointsperfolde db 'PointsPerFolder',0 ; DATA XREF: sub_7F825DC6+72o ; CHAR aPointspermessa[] aPointspermessa db 'PointsPerMessage',0 ; DATA XREF: sub_7F825DC6+8Do align 10h ; CHAR aPointsopenmess[] aPointsopenmess db 'PointsOpenMessage',0 ; DATA XREF: sub_7F825DC6+A8o align 8 ; CHAR aPointsfoldermi[] aPointsfoldermi db 'PointsFolderMismatch',0 ; DATA XREF: sub_7F825DC6+C3o align 10h ; CHAR aMatchesperstep[] aMatchesperstep db 'MatchesPerStep',0 ; DATA XREF: sub_7F825DC6+DEo align 10h ; CHAR aInterval[] aInterval db 'Interval',0 ; DATA XREF: sub_7F825DC6+F9o align 10h ; CHAR aBoost[] aBoost db 'Boost',0 ; DATA XREF: sub_7F825DC6+111o align 4 word_7F8377F8 dw 28h ; DATA XREF: sub_7F825DC6+17r ; sub_7F825DC6+34w ... align 4 word_7F8377FC dw 28h ; DATA XREF: sub_7F825DC6+2Dr ; sub_7F825DC6+48w ... align 10h word_7F837800 dw 1Eh ; DATA XREF: sub_7F825DC6+4Fr ; sub_7F825DC6+63w ... align 4 word_7F837804 dw 0Ah ; DATA XREF: sub_7F825DC6+6Ar ; sub_7F825DC6+7Ew ... align 4 word_7F837808 dw 2 ; DATA XREF: sub_7F825DC6+85r ; sub_7F825DC6+99w ... align 4 word_7F83780C dw 5 ; DATA XREF: sub_7F825DC6+A0r ; sub_7F825DC6+B4w ... align 10h word_7F837810 dw 1 ; DATA XREF: sub_7F825DC6+BBr ; sub_7F825DC6+CFw ... align 4 word_7F837814 dw 200h ; DATA XREF: sub_7F825DC6+D6r ; sub_7F825DC6+EAw ... align 4 dword_7F837818 dd 1 ; DATA XREF: sub_7F825DC6+F1r ; sub_7F825DC6+106w ; INT nDefault nDefault dd 1 ; DATA XREF: sub_7F825DC6+10Br ; sub_7F825DC6+123w ... dword_7F837820 dd 0 ; DATA XREF: sub_7F8261A0+27Bw ; sub_7F8261A0+2C8w ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 word_7F838020 dw 0 ; DATA XREF: sub_7F8261A0+6Cw ; sub_7F8261A0+272r ... align 4 dword_7F838024 dd 0 ; DATA XREF: sub_7F826027+32r ; sub_7F826027+A2w ... word_7F838028 dw 0 ; DATA XREF: sub_7F826027+39w ; sub_7F826027+5Cw ... align 4 word_7F83802C dw 28h ; DATA XREF: sub_7F826027:loc_7F826053r align 10h dword_7F838030 dd 64h ; DATA XREF: sub_7F81217E+E0r ; sub_7F82613E+9r dword_7F838034 dd 0 ; DATA XREF: sub_7F812369+81w ; sub_7F8260F1+39w ... dword_7F838038 dd 0 ; DATA XREF: sub_7F812369+6Er ; sub_7F812369+77o ... dword_7F83803C dd 0 ; DATA XREF: sub_7F82695E+24w ; sub_7F82695E+2Do ... dword_7F838040 dd 0 ; DATA XREF: sub_7F82695E+CDw ; sub_7F82695E+E1r ... dword_7F838044 dd 0 ; DATA XREF: sub_7F82695E+ABw ; sub_7F82695E+100w ... word_7F838048 dw 0 ; DATA XREF: sub_7F8265CF+45r ; sub_7F8265CF+51w ... align 10h db 19h db 29h ; ) db 1Fh db 4 db 23h ; # db 13h db 32h ; 2 db 2Eh ; . db 3Fh ; ? db 7 db 39h ; 9 db 2Ah ; * db 5 db 3Dh ; = db 14h db 0 db 24h ; $ db 14h db 22h ; " db 39h ; 9 db 1Eh db 2Eh ; . db 0Fh db 13h db 2 db 3Ah ; : db 4 db 17h db 38h ; 8 db 0 db 29h ; ) db 3Dh ; = word_7F838070 dw 0 ; DATA XREF: sub_7F810955+3w ; sub_7F810955+A5w ... align 8 ; LPCVOID dword_7F838078 dword_7F838078 dd 0 ; DATA XREF: sub_7F810875+6r ; sub_7F810875+2Dw ... dword_7F83807C dd 0 ; DATA XREF: sub_7F810875+16w ; sub_7F810875+1Fr ... ; int dword_7F838080 dword_7F838080 dd 0 ; DATA XREF: sub_7F810875+36w ; sub_7F812460+CEw ... ; __int16 word_7F838084 word_7F838084 dw 0 ; DATA XREF: sub_7F810875+25w ; sub_7F812460+116w ... align 4 word_7F838088 dw 0 ; DATA XREF: sub_7F82A93C+6r ; sub_7F82A93C+34w ... align 4 dword_7F83808C dd 0 ; DATA XREF: sub_7F82A93C+22w ; sub_7F82A93C+70r ... dword_7F838090 dd 0 ; DATA XREF: sub_7F82A93C+19w ; sub_7F82A93C+60r ... word_7F838094 dw 0 ; DATA XREF: sub_7F82A93C+3Cw ; sub_7F82A9CA+2Fr ... align 4 dword_7F838098 dd 0 ; DATA XREF: sub_7F81F0AC+88w ; sub_7F81F0AC+E3w ... dword_7F83809C dd 0 ; DATA XREF: sub_7F81F0AC+92w ; sub_7F81F0AC+D4r ... dword_7F8380A0 dd 0 ; DATA XREF: sub_7F82ABB4+3Cw ; sub_7F82AC0C+3Bo ... unk_7F8380A4 db 0 ; DATA XREF: sub_7F82ABB4+35o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F83817C dd 0 ; DATA XREF: sub_7F82ABB4+Aw ; sub_7F82ABB4+4Eo ... dword_7F838180 dd 0 ; DATA XREF: sub_7F82ABB4+14w ; sub_7F82AC0C:loc_7F82AC3Cr ... dword_7F838184 dd 0 ; DATA XREF: sub_7F82ABB4w ; sub_7F82AC0Cr ; CHAR PrefixString[4] PrefixString db 'msm',0 ; DATA XREF: sub_7F82AB76+23o align 10h ; CHAR a_bak[] a_bak db '.BAK',0 ; DATA XREF: sub_7F823D4A:loc_7F823E05o ; sub_7F823D4A+EDo ... align 4 ; CHAR aStoreprogressi[] aStoreprogressi db 'StoreProgressIndicatorClass32',0 ; DATA XREF: sub_7F82AF85+2Bo ; sub_7F82B14A+2C8o ... align 4 aPressEscToCanc db 'Press ESC to cancel.',0 ; DATA XREF: sub_7F8207A6+36Fo ; sub_7F823870+15Eo ... align 10h aValidatingRepa db 'Validating/repairing message file',0 ; DATA XREF: sub_7F8207A6+374o ; sub_7F823870+163o ... align 8 aMessageFileV_0 db 'Message file verification/repair has been canceled.',0 ; DATA XREF: .data:7F838E44o align 10h aCheckingThisMa db 'Checking this mail file may require several hours. The computer ' ; DATA XREF: .data:7F838E48o db 'will not be available for other work while the file is being vali' db 'dated. Do you want to proceed?',0 align 8 aRepairingThisM db 'Repairing this mail file may require several hours. The computer' ; DATA XREF: .data:7F838E4Co db ' will not be available for other work while the file is being rep' db 'aired. Do you want to proceed?',0 align 10h ; CHAR aDoYouWantToHav[] aDoYouWantToHav db 'Do you want to have your message file checked for possible incons' ; DATA XREF: sub_7F823B75:loc_7F823BBCo ; .data:7F838E50o db 'istencies? Any problems found in the message file will be correc' db 'ted. Verification may take up to several hours depending on the ' db 'number of messages you have in your message file.',0 align 4 ; CHAR aAnInconsistenc[] aAnInconsistenc db 'An inconsistency has been detected in the mail message file. Thi' ; DATA XREF: sub_7F823B75+2Fo ; .data:7F838E54o db 's problem must be repaired before the mail file can continue to b' db 'e used. Repairs may take up to several hours depending on the nu' db 'mber of messages you have in your message file.',0 align 10h ; CHAR aCancel[] aCancel db 'Cancel',0 ; DATA XREF: sub_7F823B75+66o ; .data:7F838E58o align 4 ; CHAR aCheckFile[] aCheckFile db '&Check File',0 ; DATA XREF: sub_7F823B75+58o ; .data:7F838E5Co align 8 aRepairNow db '&Repair Now',0 ; DATA XREF: sub_7F823B75+40o ; .data:7F838E60o align 8 aMailCouldNotSu db 'Mail could not successfully backup your current message file.',0 ; DATA XREF: sub_7F823870+268o ; sub_7F823870+288o ... align 4 aPleaseContactY db 'Please contact your system administrator to restore your current ' ; DATA XREF: sub_7F823870+263o ; sub_7F823870+2DDo ... db 'message file.',0 align 4 aPleaseExitAndR db 'Please Exit and restart Mail. If mail fails to start, contact yo' ; DATA XREF: sub_7F823870+283o ; .data:7F838E6Co db 'ur system administrator.',0 align 8 aMessageFileVer db 'Message file verification/repair may require more disk space than' ; DATA XREF: sub_7F823870+129o ; .data:7F838E70o db ' is currently available.',0 align 8 aToContinueWith db 'To continue with the verification/repair process, choose OK.',0 ; DATA XREF: sub_7F823870+124o ; .data:7F838E74o align 4 aInconsistancie db 'Inconsistancies in your message file could not be repaired.',0 ; DATA XREF: sub_7F823870+2E2o ; .data:7F838E78o align 8 aValidating db 'Validating',0 ; DATA XREF: .data:7F838E7Co align 8 aCompressing db 'Compressing',0 ; DATA XREF: .data:7F838E80o align 8 aRepairing db 'Repairing',0 ; DATA XREF: .data:7F838E84o align 8 aSMessageFileSt db '%s message file: Stage %d of %d possible stages',0Ah ; DATA XREF: .data:7F838E88o db '%s',0 align 10h aCheckingMessag db 'Checking message file map...',0 ; DATA XREF: .data:7F838E8Co align 10h aBackingUpValid db 'Backing up validated messages and folders...',0 ; DATA XREF: .data:7F838E90o align 10h aSearchingUnuse db 'Searching unused space for items...',0 ; DATA XREF: .data:7F838E94o align 8 aValidatingAllM db 'Validating all messages, attachments and folders...',0 ; DATA XREF: .data:7F838E98o align 10h aSearchingForLo db 'Searching for lost messages, attachments and folders...',0 ; DATA XREF: .data:7F838E9Co aUpdatingAllMes db 'Updating all message finder views...',0 ; DATA XREF: .data:7F838EA0o align 10h aWritingMessage db 'Writing message file map changes...',0 ; DATA XREF: .data:7F838EA4o align 8 aDeletingUnrefe db 'Deleting unreferenced messages...',0 ; DATA XREF: .data:7F838EA8o align 10h aCopyingMovingV db 'Copying/Moving validated messages...',0 ; DATA XREF: .data:7F838EACo align 4 aExportingMessa db 'Exporting messages to backup message file...',0 ; DATA XREF: .data:7F838EB0o align 4 aResortingFolde db 'Resorting folder...',0 ; DATA XREF: .data:7F838EB4o align 10h aSavingAttachme db 'Saving attachments...',0 ; DATA XREF: .data:7F838EB8o align 4 aRebuildingMess db 'Rebuilding message finder...',0 ; DATA XREF: .data:7F838EBCo align 4 aBackingUpMessa db 'Backing up message file...',0 ; DATA XREF: .data:7F838EC0o align 8 aMovingMessageF db 'Moving message file...',0 ; DATA XREF: .data:7F838EC4o align 10h aCompleteMessag db 'Complete message file compression...',0 ; DATA XREF: .data:7F838EC8o align 4 aRebuildingMe_0 db 'Rebuilding message folder...',0 ; DATA XREF: .data:7F838ECCo align 4 ; CHAR aLostAndFound[] aLostAndFound db 'Lost and Found',0 ; DATA XREF: sub_7F81E844+A0o ; sub_7F81E844+ADo ... align 4 aLostAndFoundN db 'Lost and Found %n',0 ; DATA XREF: sub_7F81E844+10Ao ; .data:7F838ED4o align 10h ; CHAR aOrphanedMessag[] aOrphanedMessag db 'Orphaned messages',0 ; DATA XREF: sub_7F81E844:loc_7F81E905o ; sub_7F81E844+CEo ... align 8 ; CHAR aThisMessageCou[] aThisMessageCou db 'This message could not be fully recovered.',0 ; DATA XREF: sub_7F81EB89+383o ; .data:7F838EDCo align 8 aOrphanFolderN db 'Orphan folder %n',0 ; DATA XREF: sub_7F81DCCA+11Fo ; .data:7F838EE0o align 10h ; CHAR aAnOrphanedFold[] aAnOrphanedFold db 'An orphaned folder',0 ; DATA XREF: sub_7F81DCCA+144o ; sub_7F81DCCA+14Fo ... align 8 ; CHAR aMicrosoftMai_0[] aMicrosoftMai_0 db 'Microsoft Mail',0 ; DATA XREF: sub_7F823870+12Eo ; sub_7F823870+26Do ... align 4 aMsMail32Appfra db 'MS Mail32 Appframe',0 ; DATA XREF: .data:7F838EECo align 10h aInbox db 'Inbox',0 ; DATA XREF: .data:7F838EF0o align 4 aSentMail db 'Sent mail',0 ; DATA XREF: .data:7F838EF4o align 8 aOutbox db 'Outbox',0 ; DATA XREF: .data:7F838EF8o align 10h aWastebasket db 'Wastebasket',0 ; DATA XREF: .data:7F838EFCo align 10h aMailThatHasBee db 'Mail that has been received.',0 ; DATA XREF: .data:7F838F00o align 10h aMailThatHasB_0 db 'Mail that has been sent.',0 ; DATA XREF: .data:7F838F04o align 10h aMailThatWillBe db 'Mail that will be sent.',0 ; DATA XREF: .data:7F838F08o aMailThatHasB_1 db 'Mail that has been deleted.',0 ; DATA XREF: .data:7F838F0Co align 8 aRe db 'RE: ',0 ; DATA XREF: .data:7F838F10o align 10h aFw db 'FW: ',0 ; DATA XREF: .data:7F838F14o align 4 asc_7F838BD8 db '----------',0 ; DATA XREF: .data:7F838F18o align 4 asc_7F838BE4 db 0Dh,0Ah,0 ; DATA XREF: .data:7F838F1Co align 4 aHigh db 'High',0 ; DATA XREF: .data:7F838F20o db 0 db 0 db 0 unk_7F838BF0 db 0 ; DATA XREF: .data:7F838F24o db 0 db 0 db 0 aLow db 'Low',0 ; DATA XREF: .data:7F838F28o aSystemAdminist db 'System Administrator',0 ; DATA XREF: .data:7F838F2Co db 0 db 0 db 0 aUndeliverableM db 'Undeliverable Mail',0 ; DATA XREF: .data:7F838F30o db 0 asc_7F838C24 db ': ',0 ; DATA XREF: .data:7F838F34o db 0 unk_7F838C28 db 0 ; DATA XREF: .data:7F838F38o db 0 db 0 db 0 asc_7F838C2C db ' ',0 ; DATA XREF: .data:7F838F3Co db 0 db 0 aMsmail32_ini_3 db 'MSMAIL32.INI',0 ; DATA XREF: .data:7F838F40o db 0 db 0 db 0 aMicrosoftMai_1 db 'Microsoft Mail',0 ; DATA XREF: .data:7F838F44o db 0 aPollinginterva db 'PollingInterval',0 ; DATA XREF: .data:7F838F48o aMapihelp_0 db 'MAPIHELP',0 ; DATA XREF: .data:7F838F4Co db 0 db 0 db 0 db 0 db 0 db 0 db 0 aIpm_microsof_6 db 'IPM.Microsoft Mail.Note',0 ; DATA XREF: .data:7F838F50o aIpm_microsof_7 db 'IPM.Microsoft Mail.Phone',0 ; DATA XREF: .data:7F838F54o db 0 db 0 db 0 db 0 db 0 db 0 db 0 aIpm_microsof_8 db 'IPM.Microsoft Mail.80Col',0 ; DATA XREF: .data:7F838F58o db 0 db 0 db 0 db 0 db 0 db 0 db 0 aIpm_microsof_9 db 'IPM.Microsoft Mail.Non-Delivery',0 ; DATA XREF: .data:7F838F5Co aIpm_microso_10 db 'IPM.Microsoft Mail.Read Receipt',0 ; DATA XREF: .data:7F838F60o aMsmail_prt db 'MSMAIL.PRT',0 ; DATA XREF: .data:7F838F64o db 0 db 0 db 0 db 0 db 0 ; CHAR aMsmail32_ini_0[] aMsmail32_ini_0 db 'msmail32.ini',0 ; DATA XREF: sub_7F8173E6:loc_7F8174B5o ; .data:7F838F68o align 4 ; CHAR aMmf[] aMmf db 'MMF',0 ; DATA XREF: sub_7F8173E6+DAo ; .data:7F838F6Co align 10h aRemoveaccounts db 'RemoveAccountsOnBackup',0 ; DATA XREF: .data:7F838F70o align 4 ; CHAR aAutodisconnect[] aAutodisconnect db 'AutoDisconnectInterval',0 ; DATA XREF: sub_7F8173E6+E1o ; .data:7F838F74o align 10h ; CHAR aAutorebuildfol[] aAutorebuildfol db 'AutoRebuildFolders',0 ; DATA XREF: sub_7F8173E6+10Co ; .data:7F838F78o align 8 a_tmp_0 db '.TMP',0 ; DATA XREF: .data:7F838F7Co align 10h aHiddenbullet db '�HiddenBullet',0 ; DATA XREF: .data:7F838F80o align 10h aHiddenshared db '�HiddenShared',0 ; DATA XREF: .data:7F838F84o align 10h aMicrosoftPerso db 'Microsoft Personal Address Book',0 ; DATA XREF: .data:7F838F88o unk_7F838DC0 db 0 ; DATA XREF: .data:7F838F8Co db 0 db 0 db 0 unk_7F838DC4 db 0 ; DATA XREF: .data:7F838F90o db 0 db 0 db 0 a44 db '44',0 ; DATA XREF: .data:7F838F94o db 0 db 0 db 0 db 0 db 0 aSharedfolders db 'SharedFolders',0 ; DATA XREF: .data:7F838F98o db 0 db 0 aSfoldersPubFol db '%sfolders\pub\foldroot.idx',0 ; DATA XREF: .data:7F838F9Co db 0 db 0 db 0 db 0 db 0 aSfoldersPubD_f db '%sfolders\pub\%d.fld',0 ; DATA XREF: .data:7F838FA0o db 0 db 0 db 0 aSfoldersSerial db '%sfolders\serialno.idx',0 ; DATA XREF: .data:7F838FA4o db 0 dword_7F838E30 dd 0 ; DATA XREF: sub_7F82AC7E+1Er dd offset a_bak ; ".BAK" dd offset aStoreprogressi ; "StoreProgressIndicatorClass32" dd offset aPressEscToCanc ; "Press ESC to cancel." dd offset aValidatingRepa ; "Validating/repairing message file" dd offset aMessageFileV_0 ; "Message file verification/repair has be"... dd offset aCheckingThisMa ; "Checking this mail file may require sev"... dd offset aRepairingThisM ; "Repairing this mail file may require se"... dd offset aDoYouWantToHav ; "Do you want to have your message file c"... dd offset aAnInconsistenc ; "An inconsistency has been detected in t"... dd offset aCancel ; "Cancel" dd offset aCheckFile ; "&Check File" dd offset aRepairNow ; "&Repair Now" dd offset aMailCouldNotSu ; "Mail could not successfully backup your"... dd offset aPleaseContactY ; "Please contact your system administrato"... dd offset aPleaseExitAndR ; "Please Exit and restart Mail. If mail "... dd offset aMessageFileVer ; "Message file verification/repair may re"... dd offset aToContinueWith ; "To continue with the verification/repai"... dd offset aInconsistancie ; "Inconsistancies in your message file co"... dd offset aValidating ; "Validating" dd offset aCompressing ; "Compressing" dd offset aRepairing ; "Repairing" dd offset aSMessageFileSt ; "%s message file: Stage %d of %d possibl"... dd offset aCheckingMessag ; "Checking message file map..." dd offset aBackingUpValid ; "Backing up validated messages and folde"... dd offset aSearchingUnuse ; "Searching unused space for items..." dd offset aValidatingAllM ; "Validating all messages, attachments an"... dd offset aSearchingForLo ; "Searching for lost messages, attachment"... dd offset aUpdatingAllMes ; "Updating all message finder views..." dd offset aWritingMessage ; "Writing message file map changes..." dd offset aDeletingUnrefe ; "Deleting unreferenced messages..." dd offset aCopyingMovingV ; "Copying/Moving validated messages..." dd offset aExportingMessa ; "Exporting messages to backup message fi"... dd offset aResortingFolde ; "Resorting folder..." dd offset aSavingAttachme ; "Saving attachments..." dd offset aRebuildingMess ; "Rebuilding message finder..." dd offset aBackingUpMessa ; "Backing up message file..." dd offset aMovingMessageF ; "Moving message file..." dd offset aCompleteMessag ; "Complete message file compression..." dd offset aRebuildingMe_0 ; "Rebuilding message folder..." dd offset aLostAndFound ; "Lost and Found" dd offset aLostAndFoundN ; "Lost and Found %n" dd offset aOrphanedMessag ; "Orphaned messages" dd offset aThisMessageCou ; "This message could not be fully recover"... dd offset aOrphanFolderN ; "Orphan folder %n" dd offset aAnOrphanedFold ; "An orphaned folder" dd offset aMicrosoftMai_0 ; "Microsoft Mail" dd offset aMsMail32Appfra ; "MS Mail32 Appframe" dd offset aInbox ; "Inbox" dd offset aSentMail ; "Sent mail" dd offset aOutbox ; "Outbox" dd offset aWastebasket ; "Wastebasket" dd offset aMailThatHasBee ; "Mail that has been received." dd offset aMailThatHasB_0 ; "Mail that has been sent." dd offset aMailThatWillBe ; "Mail that will be sent." dd offset aMailThatHasB_1 ; "Mail that has been deleted." dd offset aRe ; "RE: " dd offset aFw ; "FW: " dd offset asc_7F838BD8 ; "----------" dd offset asc_7F838BE4 ; "\r\n" dd offset aHigh ; "High" dd offset unk_7F838BF0 dd offset aLow ; "Low" dd offset aSystemAdminist ; "System Administrator" dd offset aUndeliverableM ; "Undeliverable Mail" dd offset asc_7F838C24 ; ": " dd offset unk_7F838C28 dd offset asc_7F838C2C ; " " dd offset aMsmail32_ini_3 ; "MSMAIL32.INI" dd offset aMicrosoftMai_1 ; "Microsoft Mail" dd offset aPollinginterva ; "PollingInterval" dd offset aMapihelp_0 ; "MAPIHELP" dd offset aIpm_microsof_6 ; "IPM.Microsoft Mail.Note" dd offset aIpm_microsof_7 ; "IPM.Microsoft Mail.Phone" dd offset aIpm_microsof_8 ; "IPM.Microsoft Mail.80Col" dd offset aIpm_microsof_9 ; "IPM.Microsoft Mail.Non-Delivery" dd offset aIpm_microso_10 ; "IPM.Microsoft Mail.Read Receipt" dd offset aMsmail_prt ; "MSMAIL.PRT" dd offset aMsmail32_ini_0 ; "msmail32.ini" dd offset aMmf ; "MMF" dd offset aRemoveaccounts ; "RemoveAccountsOnBackup" dd offset aAutodisconnect ; "AutoDisconnectInterval" dd offset aAutorebuildfol ; "AutoRebuildFolders" dd offset a_tmp_0 ; ".TMP" dd offset aHiddenbullet ; "�HiddenBullet" dd offset aHiddenshared ; "�HiddenShared" dd offset aMicrosoftPerso ; "Microsoft Personal Address Book" dd offset unk_7F838DC0 dd offset unk_7F838DC4 dd offset a44 ; "44" dd offset aSharedfolders ; "SharedFolders" dd offset aSfoldersPubFol ; "%sfolders\\pub\\foldroot.idx" dd offset aSfoldersPubD_f ; "%sfolders\\pub\\%d.fld" dd offset aSfoldersSerial ; "%sfolders\\serialno.idx" unk_7F838FA8 db 0E8h ; � ; DATA XREF: sub_7F82AC7Eo db 3 db 0 db 0 db 0FBh ; � db 3 db 0 db 0 db 1 db 0 db 0 db 0 db 0FCh ; � db 3 db 0 db 0 db 19h db 4 db 0 db 0 db 3 db 0 db 0 db 0 db 1Ah db 4 db 0 db 0 db 4Bh ; K db 4 db 0 db 0 db 13h db 0 db 0 db 0 db 4Ch ; L db 4 db 0 db 0 db 7Dh ; } db 4 db 0 db 0 db 28h ; ( db 0 db 0 db 0 db 48h ; H db 26h ; & db 0 db 0 db 0Fh db 27h ; ' db 0 db 0 db 2Eh ; . db 0 db 0 db 0 db 1Ch db 25h ; % db 0 db 0 db 47h ; G db 26h ; & db 0 db 0 db 42h ; B db 0 db 0 db 0 db 0DCh ; � db 5 db 0 db 0 db 0CFh ; � db 7 db 0 db 0 db 4Eh ; N db 0 db 0 db 0 db 0D8h ; � db 0Eh db 0 db 0 db 3Bh ; ; db 0Fh db 0 db 0 db 5Ah ; Z db 0 db 0 db 0 db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0FFh db 0 db 0 db 0 db 0 dword_7F839014 dd 0 ; DATA XREF: sub_7F8241AAr ; sub_7F82ADFE+6r ... dword_7F839018 dd 0 ; DATA XREF: sub_7F82AD1F+11r ; sub_7F82AD1F+2Ew ... dword_7F83901C dd 0 ; DATA XREF: sub_7F82ADFE+13r ; sub_7F82ADFE+38w ... dword_7F839020 dd 0 ; DATA XREF: sub_7F82AF85+9r ; sub_7F82AF85+5Dw ... word_7F839024 dw 0 ; DATA XREF: sub_7F82B14A:loc_7F82B19Er ; sub_7F82B14A+9Aw align 4 word_7F839028 dw 0 ; DATA XREF: sub_7F82B14A+A7w align 4 word_7F83902C dw 0 ; DATA XREF: sub_7F82B14A+B0w ; sub_7F82B14A+C2r ... align 10h word_7F839030 dw 0 ; DATA XREF: sub_7F82B14A+D0w ; sub_7F82B644:loc_7F82B6C3r ... align 4 word_7F839034 dw 0 ; DATA XREF: sub_7F82B14A+E3w ; sub_7F82B14A+161r ... align 4 word_7F839038 dw 0 ; DATA XREF: sub_7F82B14A+120w ; sub_7F82B14A+278r align 10h ; RECT Rect Rect RECT <0> ; DATA XREF: sub_7F82B14A+113w ; sub_7F82B644+9o ... dword_7F839050 dd 0 ; DATA XREF: sub_7F82AFF2+CDo ; sub_7F82B14A+EFw dword_7F839054 dd 0 ; DATA XREF: sub_7F82B14A+EAw dword_7F839058 dd 0 ; DATA XREF: sub_7F82B14A+10Dw ; sub_7F82B14A+137r dword_7F83905C dd 0 ; DATA XREF: sub_7F82B14A+12Cw ; RECT stru_7F839060 stru_7F839060 RECT <0> ; DATA XREF: sub_7F82AFF2+DFo ; sub_7F82B14A+178w ... ; RECT stru_7F839070 stru_7F839070 RECT <0> ; DATA XREF: sub_7F82AFF2+F8o ; sub_7F82B14A+18Aw ... ; HGDIOBJ h h dd 0 ; DATA XREF: sub_7F82B14A+1D0w ; sub_7F82B4DE+2Cr ... aDemilayr db 'demilayr',0 ; DATA XREF: sub_7F82B97B+1Bo ; sub_7F82ED4B+1Bo ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F839098 dd 0 ; DATA XREF: sub_7F82EBDDr ; sub_7F82EBDD+19w ... dword_7F83909C dd 0 ; DATA XREF: sub_7F82EDCA+30r dword_7F8390A0 dd 0BBBh ; DATA XREF: sub_7F82EDCA+39r align 8 db 0C7h ; � db 0FCh ; � db 0E9h ; � db 0E2h ; � db 0E4h ; � db 0E0h ; � db 0E5h ; � db 0E7h ; � db 0EAh ; � db 0EBh ; � db 0E8h ; � db 0EFh ; � db 0EEh ; � db 0ECh ; � db 0C4h ; � db 0C5h ; � db 0C9h ; � db 0E6h ; � db 0C6h ; � db 0F4h ; � db 0F6h ; � db 0F2h ; � db 0FBh ; � db 0F9h ; � db 0FFh db 0D6h ; � db 0DCh ; � db 0F8h ; � db 0A3h ; � db 0D8h ; � db 0D7h ; � db 80h ; � db 0E1h ; � db 0EDh ; � db 0F3h ; � db 0FAh ; � db 0F1h ; � db 0D1h ; � db 0AAh ; � db 0BAh ; � db 0BFh ; � db 0AEh ; � db 0ACh ; � db 0BDh ; � db 0BCh ; � db 0A1h ; � db 0ABh ; � db 0BBh ; � db 81h ; � db 82h ; � db 83h ; � db 84h ; � db 85h ; � db 0C1h ; � db 0C2h ; � db 0C0h ; � db 0A9h ; � db 86h ; � db 87h ; � db 88h ; � db 89h ; � db 0A2h ; � db 0A5h ; � db 8Ah ; � db 8Bh ; � db 8Ch ; � db 8Dh ; � db 8Eh ; � db 8Fh ; � db 90h ; � db 0E3h ; � db 0C3h ; � db 91h ; � db 92h ; � db 93h ; � db 94h ; � db 95h ; � db 96h ; � db 97h ; � db 0A4h ; � db 0F0h ; � db 0D0h ; � db 0CAh ; � db 0CBh ; � db 0C8h ; � db 98h ; � db 0CDh ; � db 0CEh ; � db 0CFh ; � db 99h ; � db 9Ah ; � db 9Bh ; � db 9Ch ; � db 0A6h ; � db 0CCh ; � db 9Dh ; � db 0D3h ; � db 0DFh ; � db 0D4h ; � db 0D2h ; � db 0F5h ; � db 0D5h ; � db 0B5h ; � db 0FEh ; � db 0DEh ; � db 0DAh ; � db 0DBh ; � db 0D9h ; � db 0FDh ; � db 0DDh ; � db 0AFh ; � db 0B4h ; � db 0ADh ; � db 0B1h ; � db 9Eh ; � db 0BEh ; � db 0B6h ; � db 0A7h ; � db 0F7h ; � db 0B8h ; � db 0B0h ; � db 0A8h ; � db 0B7h ; � db 0B9h ; � db 0B3h ; � db 0B2h ; � db 9Fh ; � db 0A0h ; � db 9Fh ; � db 0B0h ; � db 0B1h ; � db 0B2h ; � db 0B3h ; � db 0B4h ; � db 0B9h ; � db 0BAh ; � db 0BBh ; � db 0BCh ; � db 0BFh ; � db 0C0h ; � db 0C1h ; � db 0C2h ; � db 0C3h ; � db 0C4h ; � db 0C5h ; � db 0C8h ; � db 0C9h ; � db 0CAh ; � db 0CBh ; � db 0CCh ; � db 0CDh ; � db 0CEh ; � db 0D5h ; � db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DFh ; � db 0F2h ; � db 0FEh ; � db 0FFh db 0ADh ; � db 0BDh ; � db 9Ch ; � db 0CFh ; � db 0BEh ; � db 0DDh ; � db 0F5h ; � db 0F9h ; � db 0B8h ; � db 0A6h ; � db 0AEh ; � db 0AAh ; � db 0F0h ; � db 0A9h ; � db 0EEh ; � db 0F8h ; � db 0F1h ; � db 0FDh ; � db 0FCh ; � db 0EFh ; � db 0E6h ; � db 0F4h ; � db 0FAh ; � db 0F7h ; � db 0FBh ; � db 0A7h ; � db 0AFh ; � db 0ACh ; � db 0ABh ; � db 0F3h ; � db 0A8h ; � db 0B7h ; � db 0B5h ; � db 0B6h ; � db 0C7h ; � db 8Eh ; � db 8Fh ; � db 92h ; � db 80h ; � db 0D4h ; � db 90h ; � db 0D2h ; � db 0D3h ; � db 0DEh ; � db 0D6h ; � db 0D7h ; � db 0D8h ; � db 0D1h ; � db 0A5h ; � db 0E3h ; � db 0E0h ; � db 0E2h ; � db 0E5h ; � db 99h ; � db 9Eh ; � db 9Dh ; � db 0EBh ; � db 0E9h ; � db 0EAh ; � db 9Ah ; � db 0EDh ; � db 0E8h ; � db 0E1h ; � db 85h ; � db 0A0h ; � db 83h ; � db 0C6h ; � db 84h ; � db 86h ; � db 91h ; � db 87h ; � db 8Ah ; � db 82h ; � db 88h ; � db 89h ; � db 8Dh ; � db 0A1h ; � db 8Ch ; � db 8Bh ; � db 0D0h ; � db 0A4h ; � db 95h ; � db 0A2h ; � db 93h ; � db 0E4h ; � db 94h ; � db 0F6h ; � db 9Bh ; � db 97h ; � db 0A3h ; � db 96h ; � db 81h ; � db 0ECh ; � db 0E7h ; � db 98h ; � db 80h ; � db 9Ah ; � db 90h ; � db 0B6h ; � db 8Eh ; � db 0B7h ; � db 8Fh ; � db 80h ; � db 0D2h ; � db 0D3h ; � db 0D4h ; � db 0D8h ; � db 0D7h ; � db 0DEh ; � db 8Eh ; � db 8Fh ; � db 90h ; � db 92h ; � db 92h ; � db 0E2h ; � db 99h ; � db 0E3h ; � db 0EAh ; � db 0EBh ; � db 59h ; Y db 99h ; � db 9Ah ; � db 9Dh ; � db 9Ch ; � db 9Dh ; � db 9Eh ; � db 9Fh ; � db 0B5h ; � db 0D6h ; � db 0E0h ; � db 0E9h ; � db 0A5h ; � db 0A5h ; � db 41h ; A db 4Fh ; O db 0A8h ; � db 0A9h ; � db 0AAh ; � db 0ABh ; � db 0ACh ; � db 0ADh ; � db 0AEh ; � db 0AFh ; � db 0B0h ; � db 0B1h ; � db 0B2h ; � db 0B3h ; � db 0B4h ; � db 0B5h ; � db 0B6h ; � db 0B7h ; � db 0B8h ; � db 0B9h ; � db 0BAh ; � db 0BBh ; � db 0BCh ; � db 0BDh ; � db 0BEh ; � db 0BFh ; � db 0C0h ; � db 0C1h ; � db 0C2h ; � db 0C3h ; � db 0C4h ; � db 0C5h ; � db 0C7h ; � db 0C7h ; � db 0C8h ; � db 0C9h ; � db 0CAh ; � db 0CBh ; � db 0CCh ; � db 0CDh ; � db 0CEh ; � db 0CFh ; � db 0D1h ; � db 0D1h ; � db 0D2h ; � db 0D3h ; � db 0D4h ; � db 49h ; I db 0D6h ; � db 0D7h ; � db 0D8h ; � db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DDh ; � db 0DEh ; � db 0DFh ; � db 0E0h ; � db 0E1h ; � db 0E2h ; � db 0E3h ; � db 0E5h ; � db 0E5h ; � db 0E6h ; � db 0E8h ; � db 0E8h ; � db 0E9h ; � db 0EAh ; � db 0EBh ; � db 0EDh ; � db 0EDh ; � db 0EEh ; � db 0EFh ; � db 0F0h ; � db 0F1h ; � db 0F2h ; � db 0F3h ; � db 0F4h ; � db 0F5h ; � db 0F6h ; � db 0F7h ; � db 0F8h ; � db 0F9h ; � db 0FAh ; � db 0FBh ; � db 0FCh ; � db 0FDh ; � db 0FEh ; � db 0FFh db 87h ; � db 81h ; � db 82h ; � db 83h ; � db 84h ; � db 85h ; � db 86h ; � db 87h ; � db 88h ; � db 89h ; � db 8Ah ; � db 8Bh ; � db 8Ch ; � db 8Dh ; � db 84h ; � db 86h ; � db 82h ; � db 91h ; � db 91h ; � db 93h ; � db 94h ; � db 95h ; � db 96h ; � db 97h ; � db 98h ; � db 94h ; � db 81h ; � db 9Bh ; � db 9Ch ; � db 9Bh ; � db 9Eh ; � db 9Fh ; � db 0A0h ; � db 0A1h ; � db 0A2h ; � db 0A3h ; � db 0A4h ; � db 0A4h ; � db 0A6h ; � db 0A7h ; � db 0A8h ; � db 0A9h ; � db 0AAh ; � db 0ABh ; � db 0ACh ; � db 0ADh ; � db 0AEh ; � db 0AFh ; � db 0B0h ; � db 0B1h ; � db 0B2h ; � db 0B3h ; � db 0B4h ; � db 0A0h ; � db 83h ; � db 85h ; � db 0B8h ; � db 0B9h ; � db 0BAh ; � db 0BBh ; � db 0BCh ; � db 0BDh ; � db 0BEh ; � db 0BFh ; � db 0C0h ; � db 0C1h ; � db 0C2h ; � db 0C3h ; � db 0C4h ; � db 0C5h ; � db 0C6h ; � db 0C6h ; � db 0C8h ; � db 0C9h ; � db 0CAh ; � db 0CBh ; � db 0CCh ; � db 0CDh ; � db 0CEh ; � db 0CFh ; � db 0D0h ; � db 0D0h ; � db 88h ; � db 89h ; � db 8Ah ; � db 49h ; I db 0A1h ; � db 8Ch ; � db 8Bh ; � db 0D9h ; � db 0DAh ; � db 0DBh ; � db 0DCh ; � db 0DDh ; � db 8Dh ; � db 0DFh ; � db 0A2h ; � db 0E1h ; � db 93h ; � db 95h ; � db 0E4h ; � db 0E4h ; � db 0E6h ; � db 0E7h ; � db 0E7h ; � db 0A3h ; � db 96h ; � db 97h ; � db 0ECh ; � db 0ECh ; � db 0EEh ; � db 0EFh ; � db 0F0h ; � db 0F1h ; � db 0F2h ; � db 0F3h ; � db 0F4h ; � db 0F5h ; � db 0F6h ; � db 0F7h ; � db 0F8h ; � db 0F9h ; � db 0FAh ; � db 0FBh ; � db 0FCh ; � db 0FDh ; � db 0FEh ; � db 0FFh db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 7 db 6 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 3 db 3 db 3 db 3 db 3 db 3 db 3 db 3 db 3 db 3 db 4 db 4 db 4 db 4 db 4 db 4 db 4 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 1 db 4 db 4 db 4 db 4 db 4 db 4 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 4 db 4 db 4 db 4 db 5 db 1 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 2 db 1 db 1 db 1 db 2 db 1 db 2 db 2 db 2 db 2 db 2 db 2 db 1 db 1 db 2 db 4 db 1 db 4 db 5 db 2 db 2 db 2 db 2 db 2 db 1 db 2 db 2 db 4 db 5 db 4 db 5 db 5 db 4 db 4 db 4 db 5 db 5 db 5 db 5 db 5 db 1 db 1 db 1 db 5 db 5 db 5 db 5 db 5 db 4 db 4 db 5 db 5 db 5 db 5 db 5 db 5 db 5 db 2 db 1 db 5 db 5 db 5 db 5 db 5 db 5 db 5 db 5 db 2 db 1 db 1 db 1 db 1 db 2 db 1 db 1 db 1 db 5 db 5 db 5 db 5 db 4 db 1 db 5 db 1 db 2 db 1 db 1 db 2 db 1 db 2 db 2 db 1 db 1 db 1 db 1 db 2 db 1 db 5 db 4 db 5 db 4 db 4 db 5 db 5 db 5 db 4 db 4 db 4 db 4 db 4 db 5 db 5 db 5 db 5 db 6 ; CHAR Name[] Name db 'MsMail32.CrtInit',0 ; DATA XREF: sub_7F82EEA3o align 4 dword_7F8393BC dd 0 ; DATA XREF: sub_7F82F26E+54w ; sub_7F82F2D1+1Fw ... ; volatile LONG Addend Addend dd 0FFFFFFFFh ; DATA XREF: sub_7F82F26E+5o ; sub_7F82F2D1:loc_7F82F2E2r ... dword_7F8393C4 dd 0 ; DATA XREF: sub_7F82F26E+33r ; sub_7F82F2D1r dword_7F8393C8 dd 0 ; DATA XREF: sub_7F82F323+4w align 10h db 0FFh db 0FFh db 0FFh db 0FFh ; CHAR aMemory[] aMemory db 'Memory',0 ; DATA XREF: sub_7F82F03B+47o align 4 ; CHAR aCbmaxallocD[] aCbmaxallocD db 'cbMaxAlloc %d',0 ; DATA XREF: sub_7F82F03B+33o align 10h unk_7F8393F0 db 1 ; DATA XREF: .data:7F835946o db 1Dh db 9 db 0 db 8 db 80h ; � db 7 db 0 db 81h ; � db 0 db 0 db 0Dh db 0 db 0 db 80h ; � db 0 db 0 db 93h ; � db 34h ; 4 db 46h ; F db 72h ; r db 6Fh ; o db 6Dh ; m db 0 db 0Bh db 0 db 1 db 80h ; � db 0 db 0 db 93h ; � db 34h ; 4 db 54h ; T db 6Fh ; o db 0 db 0Bh db 0 db 2 db 80h ; � db 0 db 0 db 93h ; � db 34h ; 4 db 43h ; C db 63h ; c db 0 db 10h db 0 db 4 db 80h ; � db 1 db 0 db 93h ; � db 34h ; 4 db 53h ; S db 75h ; u db 62h ; b db 6Ah ; j db 65h ; e db 63h ; c db 74h ; t db 0 db 12h db 0 db 5 db 80h ; � db 3 db 0 db 93h ; � db 34h ; 4 db 44h ; D db 61h ; a db 74h ; t db 65h ; e db 20h db 53h ; S db 65h ; e db 6Eh ; n db 74h ; t db 0 db 21h ; ! db 0 db 0Dh db 80h ; � db 4 db 0 db 0D3h ; � db 35h ; 5 db 50h ; P db 72h ; r db 69h ; i db 6Fh ; o db 72h ; r db 69h ; i db 74h ; t db 79h ; y db 0 db 2 db 0 db 0 db 1 db 0 db 48h ; H db 69h ; i db 67h ; g db 68h ; h db 0 db 3 db 0 db 4Ch ; L db 6Fh ; o db 77h ; w db 0 db 21h ; ! db 0 db 5 db 0 db 2 db 0 db 13h db 34h ; 4 db 4Eh ; N db 6Fh ; o db 6Eh ; n db 2Dh ; - db 64h ; d db 65h ; e db 6Ch ; l db 69h ; i db 76h ; v db 65h ; e db 72h ; r db 79h ; y db 20h db 65h ; e db 78h ; x db 70h ; p db 6Ch ; l db 61h ; a db 6Eh ; n db 61h ; a db 74h ; t db 69h ; i db 6Fh ; o db 6Eh ; n db 0 db 18h db 0 db 1 db 0 db 0 db 0 db 1 db 0 db 4Fh ; O db 72h ; r db 69h ; i db 67h ; g db 69h ; i db 6Eh ; n db 61h ; a db 6Ch ; l db 6Ch ; l db 79h ; y db 20h db 46h ; F db 72h ; r db 6Fh ; o db 6Dh ; m db 0 db 16h db 0 db 2 db 0 db 0 db 0 db 1 db 0 db 4Fh ; O db 72h ; r db 69h ; i db 67h ; g db 69h ; i db 6Eh ; n db 61h ; a db 6Ch ; l db 6Ch ; l db 79h ; y db 20h db 54h ; T db 6Fh ; o db 0 db 19h db 0 db 4 db 0 db 1 db 0 db 1 db 0 db 4Fh ; O db 72h ; r db 69h ; i db 67h ; g db 69h ; i db 6Eh ; n db 61h ; a db 6Ch ; l db 20h db 53h ; S db 75h ; u db 62h ; b db 6Ah ; j db 65h ; e db 63h ; c db 74h ; t db 0 db 1Bh db 0 db 3 db 0 db 3 db 0 db 1 db 0 db 4Fh ; O db 72h ; r db 69h ; i db 67h ; g db 69h ; i db 6Eh ; n db 61h ; a db 6Ch ; l db 6Ch ; l db 79h ; y db 20h db 53h ; S db 65h ; e db 6Eh ; n db 74h ; t db 20h db 4Fh ; O db 6Eh ; n db 0 db 1Eh db 0 db 6 db 0 db 7 db 0 db 1 db 0 db 4Fh ; O db 72h ; r db 69h ; i db 67h ; g db 69h ; i db 6Eh ; n db 61h ; a db 6Ch ; l db 20h db 4Dh ; M db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 20h db 54h ; T db 79h ; y db 70h ; p db 65h ; e db 0 db 0Dh db 0 db 0Ch db 80h ; � db 2 db 0 db 1 db 0 db 42h ; B db 6Fh ; o db 64h ; d db 79h ; y db 0 db 0 unk_7F839510 db 0 ; DATA XREF: .data:7F83593Ao db 0CBh ; � db 9 db 0 db 8 db 80h ; � db 7 db 0 db 81h ; � db 0 db 0 db 0Dh db 0 db 0 db 80h ; � db 0 db 0 db 9Fh ; � db 34h ; 4 db 46h ; F db 72h ; r db 6Fh ; o db 6Dh ; m db 0 db 0Bh db 0 db 1 db 80h ; � db 0 db 0 db 9Fh ; � db 34h ; 4 db 54h ; T db 6Fh ; o db 0 db 0Bh db 0 db 2 db 80h ; � db 0 db 0 db 9Fh ; � db 34h ; 4 db 43h ; C db 63h ; c db 0 db 10h db 0 db 4 db 80h ; � db 1 db 0 db 9Fh ; � db 34h ; 4 db 53h ; S db 75h ; u db 62h ; b db 6Ah ; j db 65h ; e db 63h ; c db 74h ; t db 0 db 0Dh db 0 db 5 db 80h ; � db 3 db 0 db 9Fh ; � db 34h ; 4 db 44h ; D db 61h ; a db 74h ; t db 65h ; e db 0 db 21h ; ! db 0 db 0Dh db 80h ; � db 4 db 0 db 0DFh ; � db 35h ; 5 db 50h ; P db 72h ; r db 69h ; i db 6Fh ; o db 72h ; r db 69h ; i db 74h ; t db 79h ; y db 0 db 2 db 0 db 0 db 1 db 0 db 48h ; H db 69h ; i db 67h ; g db 68h ; h db 0 db 3 db 0 db 4Ch ; L db 6Fh ; o db 77h ; w db 0 db 9 db 0 db 0Ch db 80h ; � db 2 db 0 db 1Fh db 2 db 0 db 13h db 0 db 10h db 0 db 4 db 0 db 81h ; � db 34h ; 4 db 46h ; F db 69h ; i db 78h ; x db 65h ; e db 64h ; d db 20h db 46h ; F db 6Fh ; o db 6Eh ; n db 74h ; t db 0 db 13h db 0 db 9 db 80h ; � db 1 db 0 db 81h ; � db 20h db 4Dh ; M db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 20h db 49h ; I db 44h ; D db 0 db 1Ah db 0 db 0Ah db 80h ; � db 1 db 0 db 81h ; � db 20h db 50h ; P db 61h ; a db 72h ; r db 65h ; e db 6Eh ; n db 74h ; t db 20h db 6Dh ; m db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 20h db 49h ; I db 44h ; D db 0 db 18h db 0 db 0Bh db 80h ; � db 1 db 0 db 81h ; � db 20h db 43h ; C db 6Fh ; o db 6Eh ; n db 76h ; v db 65h ; e db 72h ; r db 73h ; s db 61h ; a db 74h ; t db 69h ; i db 6Fh ; o db 6Eh ; n db 20h db 49h ; I db 44h ; D db 0 db 0 db 0 db 0 unk_7F8395E0 db 1 ; DATA XREF: .data:7F835940o db 54h ; T db 9 db 0 db 8 db 80h ; � db 7 db 0 db 81h ; � db 0 db 0 db 0Dh db 0 db 0 db 80h ; � db 0 db 0 db 93h ; � db 34h ; 4 db 46h ; F db 72h ; r db 6Fh ; o db 6Dh ; m db 0 db 12h db 0 db 5 db 80h ; � db 3 db 0 db 93h ; � db 34h ; 4 db 44h ; D db 61h ; a db 74h ; t db 65h ; e db 20h db 73h ; s db 65h ; e db 6Eh ; n db 74h ; t db 0 db 0Bh db 0 db 1 db 80h ; � db 0 db 0 db 93h ; � db 34h ; 4 db 54h ; T db 6Fh ; o db 0 db 10h db 0 db 4 db 80h ; � db 1 db 0 db 93h ; � db 34h ; 4 db 53h ; S db 75h ; u db 62h ; b db 6Ah ; j db 65h ; e db 63h ; c db 74h ; t db 0 db 13h db 0 db 9 db 80h ; � db 1 db 0 db 81h ; � db 0 db 4Dh ; M db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 20h db 49h ; I db 44h ; D db 0 db 12h db 0 db 0Ah db 80h ; � db 1 db 0 db 81h ; � db 0 db 50h ; P db 61h ; a db 72h ; r db 65h ; e db 6Eh ; n db 74h ; t db 20h db 49h ; I db 44h ; D db 0 db 18h db 0 db 0Bh db 80h ; � db 1 db 0 db 81h ; � db 0 db 43h ; C db 6Fh ; o db 6Eh ; n db 76h ; v db 65h ; e db 72h ; r db 73h ; s db 61h ; a db 74h ; t db 69h ; i db 6Fh ; o db 6Eh ; n db 20h db 49h ; I db 44h ; D db 0 db 15h db 0 db 0 db 0 db 0 db 0 db 92h ; � db 16h db 59h ; Y db 6Fh ; o db 75h ; u db 72h ; r db 20h db 6Dh ; m db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 0 db 0Bh db 0 db 2 db 0 db 0 db 0 db 92h ; � db 34h ; 4 db 54h ; T db 6Fh ; o db 0 db 18h db 0 db 2 db 0 db 0 db 0 db 81h ; � db 34h ; 4 db 59h ; Y db 6Fh ; o db 75h ; u db 72h ; r db 20h db 4Dh ; M db 65h ; e db 73h ; s db 73h ; s db 61h ; a db 67h ; g db 65h ; e db 20h db 54h ; T db 6Fh ; o db 0 db 10h db 0 db 4 db 0 db 1 db 0 db 92h ; � db 34h ; 4 db 53h ; S db 75h ; u db 62h ; b db 6Ah ; j db 65h ; e db 63h ; c db 74h ; t db 0 db 11h db 0 db 4 db 0 db 1 db 0 db 81h ; � db 34h ; 4 db 45h ; E db 6Eh ; n db 74h ; t db 69h ; i db 74h ; t db 6Ch ; l db 65h ; e db 64h ; d db 0 db 0Dh db 0 db 3 db 0 db 3 db 0 db 92h ; � db 34h ; 4 db 44h ; D db 61h ; a db 74h ; t db 65h ; e db 0 db 14h db 0 db 3 db 0 db 3 db 0 db 81h ; � db 34h ; 4 db 41h ; A db 6Eh ; n db 64h ; d db 20h db 53h ; S db 65h ; e db 6Eh ; n db 74h ; t db 20h db 4Fh ; O db 6Eh ; n db 0 db 18h db 0 db 0 db 0 db 0 db 0 db 92h ; � db 14h db 77h ; w db 61h ; a db 73h ; s db 20h db 61h ; a db 63h ; c db 63h ; c db 65h ; e db 73h ; s db 73h ; s db 65h ; e db 64h ; d db 20h db 6Fh ; o db 6Eh ; n db 0 db 0Dh db 0 db 7 db 0 db 3 db 0 db 92h ; � db 34h ; 4 db 44h ; D db 61h ; a db 74h ; t db 65h ; e db 0 db 14h db 0 db 7 db 0 db 3 db 0 db 81h ; � db 34h ; 4 db 57h ; W db 61h ; a db 73h ; s db 20h db 52h ; R db 65h ; e db 61h ; a db 64h ; d db 20h db 41h ; A db 74h ; t db 0 db 21h ; ! db 0 db 0Dh db 80h ; � db 4 db 0 db 0D3h ; � db 35h ; 5 db 50h ; P db 72h ; r db 69h ; i db 6Fh ; o db 72h ; r db 69h ; i db 74h ; t db 79h ; y db 0 db 2 db 0 db 0 db 1 db 0 db 48h ; H db 69h ; i db 67h ; g db 68h ; h db 0 db 3 db 0 db 4Ch ; L db 6Fh ; o db 77h ; w db 0 db 0 db 0 db 0 db 0 db 8 db 0 db 0 db 0 db 0 db 0 unk_7F839740 db 20h ; DATA XREF: .text:7F82FBA7o ; sub_7F82FBAE+2o db 5 db 93h ; � db 19h db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F839750 db 1 ; DATA XREF: sub_7F82FFD0+Eo db 0 db 0 db 0 dword_7F839754 dd 16h ; DATA XREF: sub_7F82FFD0+3Er db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 3 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 4 db 0 db 0 db 0 db 18h db 0 db 0 db 0 db 5 db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 6 db 0 db 0 db 0 db 9 db 0 db 0 db 0 db 7 db 0 db 0 db 0 db 0Ch db 0 db 0 db 0 db 8 db 0 db 0 db 0 db 0Ch db 0 db 0 db 0 db 9 db 0 db 0 db 0 db 0Ch db 0 db 0 db 0 db 0Ah db 0 db 0 db 0 db 7 db 0 db 0 db 0 db 0Bh db 0 db 0 db 0 db 8 db 0 db 0 db 0 db 0Ch db 0 db 0 db 0 db 16h db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 16h db 0 db 0 db 0 db 0Fh db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 10h db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 11h db 0 db 0 db 0 db 12h db 0 db 0 db 0 db 12h db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 21h ; ! db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 35h ; 5 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 41h ; A db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 43h ; C db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 50h ; P db 0 db 0 db 0 db 11h db 0 db 0 db 0 db 52h ; R db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 53h ; S db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 57h ; W db 0 db 0 db 0 db 16h db 0 db 0 db 0 db 59h ; Y db 0 db 0 db 0 db 0Bh db 0 db 0 db 0 db 6Ch ; l db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 6Dh ; m db 0 db 0 db 0 db 20h db 0 db 0 db 0 db 70h ; p db 0 db 0 db 0 db 1Ch db 0 db 0 db 0 db 72h ; r db 0 db 0 db 0 db 9 db 0 db 0 db 0 db 6 db 0 db 0 db 0 db 16h db 0 db 0 db 0 db 80h ; � db 0 db 0 db 0 db 0Ah db 0 db 0 db 0 db 81h ; � db 0 db 0 db 0 db 0Ah db 0 db 0 db 0 db 82h ; � db 0 db 0 db 0 db 9 db 0 db 0 db 0 db 83h ; � db 0 db 0 db 0 db 16h db 0 db 0 db 0 db 84h ; � db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 91h ; � db 0 db 0 db 0 db 29h ; ) db 0 db 0 db 0 db 9Eh ; � db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 0A1h ; � db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 0A4h ; � db 0 db 0 db 0 db 0Bh db 0 db 0 db 0 db 0A7h ; � db 0 db 0 db 0 db 0Dh db 0 db 0 db 0 db 0B7h ; � db 0 db 0 db 0 db 11h db 0 db 0 db 0 db 0CEh ; � db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 0D7h ; � db 0 db 0 db 0 db 0Bh db 0 db 0 db 0 db 18h db 7 db 0 db 0 db 0Ch db 0 db 0 db 0 dword_7F8398B8 dd 0 ; DATA XREF: sub_7F82FFD0+1Bo ; sub_7F830310+75w ... ; LPVOID lpMem lpMem dd 0 ; DATA XREF: sub_7F830310+C3w ; sub_7F830F20+3r ... db 0 db 0 db 0 db 0 off_7F8398C4 dd offset sub_7F830BB0 ; DATA XREF: sub_7F830460+2Er dword_7F8398C8 dd 0 ; DATA XREF: sub_7F830460r ; sub_7F831750r ... dword_7F8398CC dd 0 ; DATA XREF: sub_7F830310+13r ; sub_7F830460+Er ... ; CHAR aIstnt[] aIstnt db 'IsTNT',0 ; DATA XREF: sub_7F830310+45o align 4 ; CHAR aKernel32_dll[] aKernel32_dll db 'kernel32.dll',0 ; DATA XREF: sub_7F830310:loc_7F830346o align 4 ; LPCRITICAL_SECTION dword_7F8398E8 dword_7F8398E8 dd 0 ; DATA XREF: sub_7F8304F0:loc_7F8304FBo ; sub_7F830560+9o ... ; LPCRITICAL_SECTION off_7F8398EC off_7F8398EC dd offset unk_7F833DC8 ; DATA XREF: sub_7F8304C0+20r ; sub_7F8304F0+58r db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; LPCRITICAL_SECTION off_7F83990C off_7F83990C dd offset unk_7F833DB0 ; DATA XREF: sub_7F8304C0+18r ; sub_7F8304F0+40r db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; LPCRITICAL_SECTION off_7F83991C off_7F83991C dd offset unk_7F833DE0 ; DATA XREF: sub_7F8304C0+Fr ; sub_7F8304F0+48r db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; LPCRITICAL_SECTION lpCriticalSection lpCriticalSection dd offset unk_7F833DF8 ; DATA XREF: sub_7F8304C0+1r ; sub_7F8304F0+50r db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F8399AC dd 0 ; DATA XREF: sub_7F8306D0+1r ; sub_7F8306D0+66w ... ; CHAR SrcStr[4] SrcStr db 4 dup(0) ; DATA XREF: sub_7F8306D0+19o ; const WCHAR word_7F8399B4 word_7F8399B4 dw 0 ; DATA XREF: sub_7F8306D0+38o align 10h ; LCID Locale Locale dd 0 ; DATA XREF: sub_7F82FE50+6r ; sub_7F82FE50+41r ... align 10h dword_7F8399D0 dd 0 ; DATA XREF: sub_7F8306D0+C5r ; sub_7F8314B0+47r ; DWORD dwTlsIndex dwTlsIndex dd 0FFFFFFFFh ; DATA XREF: sub_7F8309B0+Cw ; sub_7F8309B0+2Dr ... db 0 db 0 db 0 db 0 dword_7F8399DC dd 0 ; DATA XREF: sub_7F830310+1Aw ; sub_7F830310+66r ... dword_7F8399E0 dd 0 ; DATA XREF: sub_7F830310+94w dword_7F8399E4 dd 0 ; DATA XREF: sub_7F830310+84w dword_7F8399E8 dd 0 ; DATA XREF: sub_7F830310+7Ew dword_7F8399EC dd 0 ; DATA XREF: sub_7F831000+91w dword_7F8399F0 dd 0 ; DATA XREF: sub_7F831000+8Aw align 8 dword_7F8399F8 dd 0 ; DATA XREF: sub_7F830F20+3Bw db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F839A08 dd 0 ; DATA XREF: sub_7F831000+1Dw align 10h byte_7F839A10 db 0 ; DATA XREF: sub_7F830BE0+1Aw ; sub_7F831A50+5r align 4 dword_7F839A14 dd 0 ; DATA XREF: sub_7F830310+107r ; sub_7F830BE0+7w db 0 db 10h db 0 db 0 db 0 db 0 db 0 db 0 db 0FFh db 0FFh db 0FFh db 0FFh db 0 db 0Ah db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F839A48 db 0 ; DATA XREF: sub_7F831280+91o ; sub_7F831280:loc_7F831389o ... byte_7F839A49 db 0 ; DATA XREF: sub_7F8310A0+49r ; sub_7F8310A0+8Dr ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F839B4C dd 0 ; DATA XREF: sub_7F831280+20r ; sub_7F831280+F6w ... dword_7F839B50 dd 0 ; DATA XREF: sub_7F831280+180w ; sub_7F831280+1C9w ... align 8 dword_7F839B58 dd 0 ; DATA XREF: sub_7F831280+17Bo ; sub_7F831280:loc_7F831442o ... db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 dword_7F839B64 dd 0 ; DATA XREF: sub_7F831280:loc_7F83146Ar ; sub_7F8314B0w ... byte_7F839B68 db 1 ; DATA XREF: sub_7F831280+148r db 2 db 4 db 8 db 0 db 0 db 0 db 0 unk_7F839B70 db 0A4h ; � ; DATA XREF: sub_7F831280+61o db 3 db 0 db 0 unk_7F839B74 db 60h ; ` ; DATA XREF: sub_7F831280+195o db 82h ; � db 79h ; y db 82h ; � dword_7F839B78 dd 21h ; DATA XREF: sub_7F831280+18Cr align 10h unk_7F839B80 db 0A6h ; � ; DATA XREF: sub_7F831280+129o db 0DFh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 0A1h ; � db 0A5h ; � db 0 db 0 db 0 db 0 db 0 db 0 db 81h ; � db 9Fh ; � db 0E0h ; � db 0FCh ; � db 0 db 0 db 0 db 0 db 40h ; @ db 7Eh ; ~ db 80h ; � db 0FCh ; � db 0 db 0 db 0 db 0 db 0A8h ; � db 3 db 0 db 0 db 0C1h ; � db 0A3h ; � db 0DAh ; � db 0A3h ; � db 20h db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 81h ; � db 0FEh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 40h ; @ db 0FEh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 0B5h ; � db 3 db 0 db 0 db 0C1h ; � db 0A3h ; � db 0DAh ; � db 0A3h ; � db 20h db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 81h ; � db 0FEh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 41h ; A db 0FEh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 0B6h ; � db 3 db 0 db 0 db 0CFh ; � db 0A2h ; � db 0E4h ; � db 0A2h ; � db 1Ah db 0 db 0E5h ; � db 0A2h ; � db 0E8h ; � db 0A2h ; � db 5Bh ; [ db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 81h ; � db 0FEh ; � db 0 db 0 db 0 db 0 db 0 db 0 db 40h ; @ db 7Eh ; ~ db 0A1h ; � db 0FEh ; � db 0 db 0 db 0 db 0 db 51h ; Q db 5 db 0 db 0 db 51h ; Q db 0DAh ; � db 5Eh ; ^ db 0DAh ; � db 20h db 0 db 5Fh ; _ db 0DAh ; � db 6Ah ; j db 0DAh ; � db 32h ; 2 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 81h ; � db 0D3h ; � db 0D8h ; � db 0DEh ; � db 0E0h ; � db 0F9h ; � db 0 db 0 db 31h ; 1 db 7Eh ; ~ db 81h ; � db 0FEh ; � db 0 db 0 db 0 db 0 unk_7F839C60 db 0 ; DATA XREF: sub_7F831280+75o db 0 db 0 db 0 dword_7F839C64 dd 0 ; DATA XREF: sub_7F8315A0+3r ; sub_7F8315A0+1Ew ... aRuntimeError db 'runtime error ',0 ; DATA XREF: .data:7F839F54o align 4 asc_7F839C78 db 0Dh,0Ah,0 ; DATA XREF: .data:7F839F4Co align 4 aTlossError db 'TLOSS error',0Dh,0Ah,0 ; DATA XREF: .data:7F839F44o align 4 aSingError db 'SING error',0Dh,0Ah,0 ; DATA XREF: .data:7F839F3Co align 4 aDomainError db 'DOMAIN error',0Dh,0Ah,0 ; DATA XREF: .data:7F839F34o align 4 aR6027NotEnough db 'R6027',0Dh,0Ah ; DATA XREF: .data:7F839F2Co db '- not enough space for lowio initialization',0Dh,0Ah,0 align 4 aR6026NotEnough db 'R6026',0Dh,0Ah ; DATA XREF: .data:7F839F24o db '- not enough space for stdio initialization',0Dh,0Ah,0 align 4 aR6025PureVirtu db 'R6025',0Dh,0Ah ; DATA XREF: .data:7F839F1Co db '- pure virtual function call',0Dh,0Ah,0 align 4 aR6024NotEnough db 'R6024',0Dh,0Ah ; DATA XREF: .data:7F839F14o db '- not enough space for _onexit/atexit table',0Dh,0Ah,0 align 4 aR6019UnableToO db 'R6019',0Dh,0Ah ; DATA XREF: .data:7F839F0Co db '- unable to open console device',0Dh,0Ah,0 align 4 aR6018Unexpecte db 'R6018',0Dh,0Ah ; DATA XREF: .data:7F839F04o db '- unexpected heap error',0Dh,0Ah,0 align 4 aR6017Unexpecte db 'R6017',0Dh,0Ah ; DATA XREF: .data:7F839EFCo db '- unexpected multithread lock error',0Dh,0Ah,0 align 4 aR6016NotEnough db 'R6016',0Dh,0Ah ; DATA XREF: .data:7F839EF4o db '- not enough space for thread data',0Dh,0Ah,0 aAbnormalProgra db 0Dh,0Ah ; DATA XREF: .data:7F839EECo db 'abnormal program termination',0Dh,0Ah,0 align 4 aR6009NotEnough db 'R6009',0Dh,0Ah ; DATA XREF: .data:7F839EE4o db '- not enough space for environment',0Dh,0Ah,0 aR6008NotEnough db 'R6008',0Dh,0Ah ; DATA XREF: .data:7F839EDCo db '- not enough space for arguments',0Dh,0Ah,0 align 4 aR6002FloatingP db 'R6002',0Dh,0Ah ; DATA XREF: .data:off_7F839ED4o db '- floating point not loaded',0Dh,0Ah,0 align 10h dword_7F839ED0 dd 2 ; DATA XREF: sub_7F831790+8o ; sub_7F831790:loc_7F8317B8r off_7F839ED4 dd offset aR6002FloatingP ; DATA XREF: sub_7F831790+153r ; sub_7F831790:loc_7F83194Fr ; "R6002\r\n- floating point not loaded\r\"... db 8 db 0 db 0 db 0 dd offset aR6008NotEnough ; "R6008\r\n- not enough space for argumen"... db 9 db 0 db 0 db 0 dd offset aR6009NotEnough ; "R6009\r\n- not enough space for environ"... db 0Ah db 0 db 0 db 0 dd offset aAbnormalProgra ; "\r\nabnormal program termination\r\n" db 10h db 0 db 0 db 0 dd offset aR6016NotEnough ; "R6016\r\n- not enough space for thread "... db 11h db 0 db 0 db 0 dd offset aR6017Unexpecte ; "R6017\r\n- unexpected multithread lock "... db 12h db 0 db 0 db 0 dd offset aR6018Unexpecte ; "R6018\r\n- unexpected heap error\r\n" db 13h db 0 db 0 db 0 dd offset aR6019UnableToO ; "R6019\r\n- unable to open console devic"... db 18h db 0 db 0 db 0 dd offset aR6024NotEnough ; "R6024\r\n- not enough space for _onexit"... db 19h db 0 db 0 db 0 dd offset aR6025PureVirtu ; "R6025\r\n- pure virtual function call\r"... db 1Ah db 0 db 0 db 0 dd offset aR6026NotEnough ; "R6026\r\n- not enough space for stdio i"... db 1Bh db 0 db 0 db 0 dd offset aR6027NotEnough ; "R6027\r\n- not enough space for lowio i"... db 78h ; x db 0 db 0 db 0 dd offset aDomainError ; "DOMAIN error\r\n" db 79h ; y db 0 db 0 db 0 dd offset aSingError ; "SING error\r\n" db 7Ah ; z db 0 db 0 db 0 dd offset aTlossError ; "TLOSS error\r\n" db 0FCh ; � db 0 db 0 db 0 dd offset asc_7F839C78 ; "\r\n" db 0FFh db 0 db 0 db 0 dd offset aRuntimeError ; "runtime error " dword_7F839F58 dd 0 ; DATA XREF: sub_7F831750+24r ; sub_7F831790+20o aMicrosoftVisua db 'Microsoft Visual C++ Runtime Library',0 ; DATA XREF: sub_7F831790+189o align 4 asc_7F839F84 db 0Ah ; DATA XREF: sub_7F831790+121o ; .data:7F83A568o db 0Ah,0 align 4 aRuntimeErrorPr db 'Runtime Error!',0Ah ; DATA XREF: sub_7F831790:loc_7F831870o db 0Ah db 'Program: ',0 align 4 a___ db '...',0 ; DATA XREF: sub_7F831790+D2o ; .data:7F83A560o aProgramNameUnk db '',0 ; DATA XREF: sub_7F831790+86o align 10h off_7F839FC0 dd offset Caption+50h ; DATA XREF: sub_7F8305F0+7o ; sub_7F8305F0+15o ... align 8 dd offset Caption+50h db 1 db 1 db 0 db 0 unk_7F839FD0 db 0 ; DATA XREF: sub_7F831980+89o db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 10h db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 1 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 2 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F83A030 db 0 ; DATA XREF: sub_7F831980+BDo db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 unk_7F83A220 db 0 ; DATA XREF: sub_7F8305F0+Eo ; sub_7F830660+Eo db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 ; int dword_7F83A244 dword_7F83A244 dd 0 ; DATA XREF: sub_7F830930r ; sub_7F831AE0+32r unk_7F83A248 db 5 ; DATA XREF: sub_7F830A40+4o db 0 db 0 db 0C0h ; � db 0Bh db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 1Dh db 0 db 0 db 0C0h ; � db 4 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 96h ; � db 0 db 0 db 0C0h ; � db 4 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 8Dh ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 8Eh ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 8Fh ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 90h ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 91h ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 92h ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 93h ; � db 0 db 0 db 0C0h ; � db 8 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 3 db 0 db 0 db 0 db 7 db 0 db 0 db 0 db 78h ; x db 0 db 0 db 0 db 0Ah db 0 db 0 db 0 dd offset unk_7F83A2DA dd offset unk_7F83A2DA db 0 db 0 unk_7F83A2DA db 20h ; DATA XREF: .data:7F83A2D0o ; .data:7F83A2D4o db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 28h ; ( db 0 db 28h ; ( db 0 db 28h ; ( db 0 db 28h ; ( db 0 db 28h ; ( db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 20h db 0 db 48h ; H db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 84h ; � db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 81h ; � db 0 db 81h ; � db 0 db 81h ; � db 0 db 81h ; � db 0 db 81h ; � db 0 db 81h ; � db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 1 db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 82h ; � db 0 db 82h ; � db 0 db 82h ; � db 0 db 82h ; � db 0 db 82h ; � db 0 db 82h ; � db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 2 db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 10h db 0 db 20h db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 1 db 0 db 0 db 0 db 2Eh ; . db 0 db 0 db 0 db 1 db 0 db 0 db 0 dword_7F83A4E8 dd 0 ; DATA XREF: sub_7F831B40+5r ; sub_7F831B40+2Cw ... dword_7F83A4EC dd 0 ; DATA XREF: sub_7F831B40+42w ; sub_7F831B40:loc_7F831B8Fr dword_7F83A4F0 dd 0 ; DATA XREF: sub_7F831B40+4Aw ; sub_7F831B40+60r ... ; CHAR aGetlastactivep[] aGetlastactivep db 'GetLastActivePopup',0 ; DATA XREF: sub_7F831B40+3Do align 4 ; CHAR aGetactivewindo[] aGetactivewindo db 'GetActiveWindow',0 ; DATA XREF: sub_7F831B40+35o ; CHAR aMessageboxa[] aMessageboxa db 'MessageBoxA',0 ; DATA XREF: sub_7F831B40+1Eo ; CHAR aUser32_dll[] aUser32_dll db 'user32.dll',0 ; DATA XREF: sub_7F831B40+Do align 10h asc_7F83A530 db 0Ah,0 ; DATA XREF: .data:7F83A564o align 8 aAssertionFaile db 'Assertion failed: %s, file %s, line %d',0Ah,0 dd offset a___ ; "..." dd offset asc_7F83A530 ; "\n" dd offset asc_7F839F84 ; "\n\n" db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 aNull_0: ; DATA XREF: .data:7F83A5ACo unicode 0, <(null)>,0 db 0 db 0 aNull db '(null)',0 ; DATA XREF: .data:7F83A5A8o db 0 dd offset aNull ; "(null)" dd offset aNull_0 ; "(null)" dd offset sub_7F832660 dd offset sub_7F832660 dd offset sub_7F832660 dd offset sub_7F832660 dd offset sub_7F832660 dd offset sub_7F832660 align 1000h _data ends ; ; Imports from ADVAPI32.dll ; ; Section 3. (virtual address 0003B000) ; Virtual size : 000015CA ( 5578.) ; Section size in file : 00001600 ( 5632.) ; Offset to raw data for section: 00039200 ; Flags 40000040: Data Readable ; Alignment : default ; =========================================================================== ; Segment type: Externs ; _idata ; LSTATUS __stdcall RegCreateKeyA(HKEY hKey, LPCSTR lpSubKey, PHKEY phkResult) extrn RegCreateKeyA:dword ; CODE XREF: sub_7F80560A+8Ap ; DATA XREF: sub_7F80560A+8Ar ; BOOL __stdcall InitializeSecurityDescriptor(PSECURITY_DESCRIPTOR pSecurityDescriptor, DWORD dwRevision) extrn InitializeSecurityDescriptor:dword ; CODE XREF: sub_7F82F41C+Cp ; DATA XREF: sub_7F82F41C+Cr ; BOOL __stdcall SetSecurityDescriptorDacl(PSECURITY_DESCRIPTOR pSecurityDescriptor, BOOL bDaclPresent, PACL pDacl, BOOL bDaclDefaulted) extrn SetSecurityDescriptorDacl:dword ; CODE XREF: sub_7F82F41C+21p ; DATA XREF: sub_7F82F41C+21r ; BOOL __stdcall DeregisterEventSource(HANDLE hEventLog) extrn DeregisterEventSource:dword ; CODE XREF: sub_7F805583+76p ; DATA XREF: sub_7F805583+76r ; LSTATUS __stdcall RegSetValueExA(HKEY hKey, LPCSTR lpValueName, DWORD Reserved, DWORD dwType, const BYTE *lpData, DWORD cbData) extrn RegSetValueExA:dword ; CODE XREF: sub_7F80560A+D7p ; sub_7F80560A+FCp ; DATA XREF: ... ; LSTATUS __stdcall RegCloseKey(HKEY hKey) extrn RegCloseKey:dword ; CODE XREF: sub_7F80560A+124p ; DATA XREF: sub_7F80560A+124r ; HANDLE __stdcall RegisterEventSourceA(LPCSTR lpUNCServerName, LPCSTR lpSourceName) extrn RegisterEventSourceA:dword ; CODE XREF: sub_7F805583+4Cp ; DATA XREF: sub_7F805583+4Cr ; BOOL __stdcall ReportEventA(HANDLE hEventLog, WORD wType, WORD wCategory, DWORD dwEventID, PSID lpUserSid, WORD wNumStrings, DWORD dwDataSize, LPCSTR *lpStrings, LPVOID lpRawData) extrn ReportEventA:dword ; CODE XREF: sub_7F805583+6Bp ; DATA XREF: sub_7F805583+6Br ; ; Imports from GDI32.dll ; ; BOOL __stdcall DeleteObject(HGDIOBJ ho) extrn DeleteObject:dword ; CODE XREF: sub_7F8097FF+125p ; sub_7F8097FF+12Ep ... ; BOOL __stdcall GetTextMetricsA(HDC hdc, LPTEXTMETRICA lptm) extrn GetTextMetricsA:dword ; CODE XREF: sub_7F82B14A+8Dp ; DATA XREF: sub_7F82B14A+8Dr ; COLORREF __stdcall SetBkColor(HDC hdc, COLORREF color) extrn SetBkColor:dword ; CODE XREF: sub_7F82AFF2+76p ; DATA XREF: sub_7F82AFF2+76r ; HGDIOBJ __stdcall GetStockObject(int i) extrn GetStockObject:dword ; CODE XREF: sub_7F82AFF2+7Ep ; sub_7F82AFF2+9Fp ... ; HBRUSH __stdcall CreateSolidBrush(COLORREF color) extrn CreateSolidBrush:dword ; CODE XREF: sub_7F80A689+1Dp ; sub_7F80C4B4+2Cp ... ; BOOL __stdcall MoveToEx(HDC hdc, int x, int y, LPPOINT lppt) extrn MoveToEx:dword ; CODE XREF: sub_7F8097FF+CCp ; sub_7F8097FF+F4p ... ; HPEN __stdcall CreatePen(int iStyle, int cWidth, COLORREF color) extrn CreatePen:dword ; CODE XREF: sub_7F8097FF+96p ; sub_7F8097FF+ACp ... ; BOOL __stdcall LineTo(HDC hdc, int x, int y) extrn LineTo:dword ; CODE XREF: sub_7F8097FF+DEp ; sub_7F8097FF+103p ... ; HGDIOBJ __stdcall SelectObject(HDC hdc, HGDIOBJ h) extrn SelectObject:dword ; CODE XREF: sub_7F8097FF+BDp ; sub_7F8097FF+E8p ... ; ; Imports from KERNEL32.dll ; ; int __stdcall lstrcmpiA(LPCSTR lpString1, LPCSTR lpString2) extrn lstrcmpiA:dword ; CODE XREF: HrModifyNamesInMsg@4+4Cp ; HrModifyNamesInMsg@4+6Ep ... ; LONG __stdcall CompareFileTime(const FILETIME *lpFileTime1, const FILETIME *lpFileTime2) extrn CompareFileTime:dword ; CODE XREF: FOutsideDateRange@12+Ap ; FOutsideDateRange@12+18p ; DATA XREF: ... ; HMODULE __stdcall GetModuleHandleA(LPCSTR lpModuleName) extrn GetModuleHandleA:dword ; CODE XREF: sub_7F8026ED+10Cp ; MMFMIG_ProcessMMF@4+6p ... ; HANDLE __stdcall CreateThread(LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter, DWORD dwCreationFlags, LPDWORD lpThreadId) extrn CreateThread:dword ; CODE XREF: sub_7F802962+14Dp ; DATA XREF: sub_7F802962+14Dr ; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState, LPCSTR lpName) extrn CreateEventA:dword ; CODE XREF: sub_7F802962+74p ; sub_7F802962+136p ; DATA XREF: ... ; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection) extrn InitializeCriticalSection:dword ; CODE XREF: sub_7F802962+66p ; sub_7F8304C0+Dp ... ; BOOL __stdcall ReleaseMutex(HANDLE hMutex) extrn ReleaseMutex:dword ; CODE XREF: sub_7F801AF7+51p ; sub_7F801B61+F1p ... ; void __stdcall GetSystemInfo(LPSYSTEM_INFO lpSystemInfo) extrn GetSystemInfo:dword ; CODE XREF: sub_7F802962+50p ; DATA XREF: sub_7F802962+50r ; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection) extrn DeleteCriticalSection:dword ; CODE XREF: sub_7F802B1B+117p ; sub_7F8304F0+2Dp ... ; BOOL __stdcall CloseHandle(HANDLE hObject) extrn CloseHandle:dword ; CODE XREF: sub_7F802B1B+C7p ; sub_7F802B1B+F0p ... ; BOOL __stdcall SetEvent(HANDLE hEvent) extrn SetEvent:dword ; CODE XREF: sub_7F802B1B+7Bp ; sub_7F803AA5+123p ... ; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection) extrn LeaveCriticalSection:dword ; CODE XREF: sub_7F802DB7+61Ap ; sub_7F803AA5+103p ... ; BOOL __stdcall ResetEvent(HANDLE hEvent) extrn ResetEvent:dword ; CODE XREF: sub_7F802DB7+613p ; sub_7F803AA5+E8p ... ; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection) extrn EnterCriticalSection:dword ; CODE XREF: sub_7F802DB7+5E8p ; sub_7F803AA5+54p ... ; DWORD __stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds) extrn WaitForSingleObject:dword ; CODE XREF: StartAddress+184p ; sub_7F82EEA3+23p ... ; int __stdcall lstrlenA(LPCSTR lpString) extrn lstrlenA:dword ; CODE XREF: sub_7F80549A:loc_7F8054E2p ; sub_7F80549A+85p ... ; LPSTR __stdcall lstrcatA(LPSTR lpString1, LPCSTR lpString2) extrn lstrcatA:dword ; CODE XREF: sub_7F804EC7+14Ep ; sub_7F80530D+9Ep ... ; void __stdcall Sleep(DWORD dwMilliseconds) extrn Sleep:dword ; CODE XREF: sub_7F80504F+9Dp ; sub_7F805168+127p ... ; HANDLE __stdcall CreateFileA(LPCSTR lpFileName, DWORD dwDesiredAccess, DWORD dwShareMode, LPSECURITY_ATTRIBUTES lpSecurityAttributes, DWORD dwCreationDisposition, DWORD dwFlagsAndAttributes, HANDLE hTemplateFile) extrn CreateFileA:dword ; CODE XREF: sub_7F80530D+BAp ; sub_7F806FAC+1Cp ... ; LPSTR __stdcall lstrcpyA(LPSTR lpString1, LPCSTR lpString2) extrn lstrcpyA:dword ; CODE XREF: sub_7F80530D+6Ep ; sub_7F80530D+8Cp ... ; BOOL __stdcall DeleteFileA(LPCSTR lpFileName) extrn DeleteFileA:dword ; CODE XREF: sub_7F805403+5Ap ; sub_7F806FAC+3Cp ... ; DWORD __stdcall GetFileSize(HANDLE hFile, LPDWORD lpFileSizeHigh) extrn GetFileSize:dword ; CODE XREF: sub_7F805403+3Dp ; sub_7F815751+1DFp ... ; BOOL __stdcall WriteFile(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) extrn WriteFile:dword ; CODE XREF: sub_7F80549A+60p ; sub_7F80549A+A1p ... ; DWORD __stdcall GetLastError() extrn GetLastError:dword ; CODE XREF: sub_7F80560A+ACp ; sub_7F806FAC+27p ... ; DWORD __stdcall GetModuleFileNameA(HMODULE hModule, LPSTR lpFilename, DWORD nSize) extrn GetModuleFileNameA:dword ; CODE XREF: sub_7F80560A+A2p ; sub_7F831000+12p ... ; BOOL __stdcall FreeLibrary(HMODULE hLibModule) extrn FreeLibrary:dword ; CODE XREF: sub_7F8060C1+DCp ; sub_7F80A95F+37p ... ; FARPROC __stdcall GetProcAddress(HMODULE hModule, LPCSTR lpProcName) extrn GetProcAddress:dword ; CODE XREF: sub_7F8060C1+C3p ; sub_7F80C275+54p ... ; HMODULE __stdcall LoadLibraryA(LPCSTR lpLibFileName) extrn LoadLibraryA:dword ; CODE XREF: sub_7F8060C1+B1p ; sub_7F80C30F+1Fp ... ; DWORD __stdcall GetFileAttributesA(LPCSTR lpFileName) extrn GetFileAttributesA:dword ; CODE XREF: sub_7F806861+560p ; sub_7F809A3F+AFp ... ; int __stdcall GetTimeFormatA(LCID Locale, DWORD dwFlags, const SYSTEMTIME *lpTime, LPCSTR lpFormat, LPSTR lpTimeStr, int cchTime) extrn GetTimeFormatA:dword ; CODE XREF: sub_7F80795B+16Dp ; DATA XREF: sub_7F80795B+16Dr ; void __stdcall GetSystemTime(LPSYSTEMTIME lpSystemTime) extrn GetSystemTime:dword ; CODE XREF: sub_7F807D9C+272p ; sub_7F807D9C+3AAp ... ; UINT __stdcall SetErrorMode(UINT uMode) extrn SetErrorMode:dword ; CODE XREF: sub_7F8081B3+1Cp ; sub_7F8081B3+AAp ... ; BOOL __stdcall IsBadWritePtr(LPVOID lp, UINT_PTR ucb) extrn IsBadWritePtr:dword ; CODE XREF: sub_7F801A60+Cp ; sub_7F801A60+2Ap ... ; DWORD __stdcall SetFilePointer(HANDLE hFile, LONG lDistanceToMove, PLONG lpDistanceToMoveHigh, DWORD dwMoveMethod) extrn SetFilePointer:dword ; CODE XREF: sub_7F8083A0+9Dp ; sub_7F815C03+67p ... ; BOOL __stdcall ReadFile(HANDLE hFile, LPVOID lpBuffer, DWORD nNumberOfBytesToRead, LPDWORD lpNumberOfBytesRead, LPOVERLAPPED lpOverlapped) extrn ReadFile:dword ; CODE XREF: sub_7F8083A0+7Dp ; sub_7F80AA5A+51p ... ; BOOL __stdcall FindClose(HANDLE hFindFile) extrn FindClose:dword ; CODE XREF: sub_7F8083A0+3Ap ; sub_7F808498+1CFp ... ; HANDLE __stdcall FindFirstFileA(LPCSTR lpFileName, LPWIN32_FIND_DATAA lpFindFileData) extrn FindFirstFileA:dword ; CODE XREF: sub_7F8083A0+22p ; sub_7F808498+1C1p ... ; DWORD __stdcall GetTickCount() extrn GetTickCount:dword ; CODE XREF: sub_7F8091A3+1EFp ; sub_7F8091A3+1F3p ... ; BOOL __stdcall FileTimeToSystemTime(const FILETIME *lpFileTime, LPSYSTEMTIME lpSystemTime) extrn FileTimeToSystemTime:dword ; CODE XREF: sub_7F809DFE+68p ; DATA XREF: sub_7F809DFE+68r ; BOOL __stdcall SystemTimeToFileTime(const SYSTEMTIME *lpSystemTime, LPFILETIME lpFileTime) extrn SystemTimeToFileTime:dword ; CODE XREF: sub_7F809DFE+35p ; sub_7F809DFE+46p ... ; DWORD __stdcall GetPrivateProfileStringA(LPCSTR lpAppName, LPCSTR lpKeyName, LPCSTR lpDefault, LPSTR lpReturnedString, DWORD nSize, LPCSTR lpFileName) extrn GetPrivateProfileStringA:dword ; CODE XREF: sub_7F80BBF6+102p ; sub_7F815163+4Ep ... ; BOOL __stdcall IsBadReadPtr(const void *lp, UINT_PTR ucb) extrn IsBadReadPtr:dword ; CODE XREF: sub_7F801A60+1Bp ; sub_7F8023F1+17p ... ; BOOL __stdcall GetVersionExA(LPOSVERSIONINFOA lpVersionInformation) extrn GetVersionExA:dword ; CODE XREF: sub_7F80C7F1+12p ; DATA XREF: sub_7F80C7F1+12r ; BOOL __stdcall IsBadHugeReadPtr(const void *lp, UINT_PTR ucb) extrn IsBadHugeReadPtr:dword ; CODE XREF: sub_7F80E173+2Ap ; DATA XREF: sub_7F80E173+2Ar ; BOOL __stdcall LocalFileTimeToFileTime(const FILETIME *lpLocalFileTime, LPFILETIME lpFileTime) extrn LocalFileTimeToFileTime:dword ; CODE XREF: sub_7F80E471+65p ; sub_7F80E471+8Fp ; DATA XREF: ... ; HGLOBAL __stdcall GlobalFree(HGLOBAL hMem) extrn GlobalFree:dword ; CODE XREF: sub_7F8242A1+4Ep ; sub_7F824418+4Ep ; DATA XREF: ... ; HGLOBAL __stdcall GlobalAlloc(UINT uFlags, SIZE_T dwBytes) extrn GlobalAlloc:dword ; CODE XREF: sub_7F8241ED+80p ; sub_7F824364+80p ; DATA XREF: ... ; BOOL __stdcall GlobalUnlock(HGLOBAL hMem) extrn GlobalUnlock:dword ; CODE XREF: sub_7F8242A1+47p ; sub_7F824418+47p ; DATA XREF: ... ; LPVOID __stdcall GlobalLock(HGLOBAL hMem) extrn GlobalLock:dword ; CODE XREF: sub_7F8241ED+9Cp ; sub_7F824364+9Cp ; DATA XREF: ... ; BOOL __stdcall WritePrivateProfileStringA(LPCSTR lpAppName, LPCSTR lpKeyName, LPCSTR lpString, LPCSTR lpFileName) extrn WritePrivateProfileStringA:dword ; CODE XREF: sub_7F815163+2DBp ; sub_7F815163+322p ; DATA XREF: ... ; UINT __stdcall GetPrivateProfileIntA(LPCSTR lpAppName, LPCSTR lpKeyName, INT nDefault, LPCSTR lpFileName) extrn GetPrivateProfileIntA:dword ; CODE XREF: sub_7F815163+1Dp ; sub_7F8173E6+E7p ... ; UINT __stdcall GetDriveTypeA(LPCSTR lpRootPathName) extrn GetDriveTypeA:dword ; CODE XREF: sub_7F815751+50p ; sub_7F82A7AB+4p ; DATA XREF: ... ; BOOL __stdcall FileTimeToDosDateTime(const FILETIME *lpFileTime, LPWORD lpFatDate, LPWORD lpFatTime) extrn FileTimeToDosDateTime:dword ; CODE XREF: sub_7F8155EA+6Dp ; DATA XREF: sub_7F8155EA+6Dr ; BOOL __stdcall GetDiskFreeSpaceA(LPCSTR lpRootPathName, LPDWORD lpSectorsPerCluster, LPDWORD lpBytesPerSector, LPDWORD lpNumberOfFreeClusters, LPDWORD lpTotalNumberOfClusters) extrn GetDiskFreeSpaceA:dword ; CODE XREF: sub_7F815671+2Fp ; DATA XREF: sub_7F815671+2Fr ; LPVOID __stdcall MapViewOfFile(HANDLE hFileMappingObject, DWORD dwDesiredAccess, DWORD dwFileOffsetHigh, DWORD dwFileOffsetLow, SIZE_T dwNumberOfBytesToMap) extrn MapViewOfFile:dword ; CODE XREF: sub_7F815751+1C2p ; sub_7F82F462+93p ; DATA XREF: ... ; HANDLE __stdcall CreateFileMappingA(HANDLE hFile, LPSECURITY_ATTRIBUTES lpFileMappingAttributes, DWORD flProtect, DWORD dwMaximumSizeHigh, DWORD dwMaximumSizeLow, LPCSTR lpName) extrn CreateFileMappingA:dword ; CODE XREF: sub_7F815751+1AFp ; sub_7F82F462+48p ; DATA XREF: ... ; BOOL __stdcall UnmapViewOfFile(LPCVOID lpBaseAddress) extrn UnmapViewOfFile:dword ; CODE XREF: sub_7F815991+2Dp ; sub_7F82F462+200p ... ; BOOL __stdcall DuplicateHandle(HANDLE hSourceProcessHandle, HANDLE hSourceHandle, HANDLE hTargetProcessHandle, LPHANDLE lpTargetHandle, DWORD dwDesiredAccess, BOOL bInheritHandle, DWORD dwOptions) extrn DuplicateHandle:dword ; CODE XREF: sub_7F8159EA+42p ; DATA XREF: sub_7F8159EA+42r ; HANDLE __stdcall GetCurrentProcess() extrn GetCurrentProcess:dword ; CODE XREF: sub_7F8159EA+30p ; DATA XREF: sub_7F8159EA+30r ; BOOL __stdcall SetEndOfFile(HANDLE hFile) extrn SetEndOfFile:dword ; CODE XREF: sub_7F815BCA+13p ; DATA XREF: sub_7F815BCA+13r ; BOOL __stdcall LockFile(HANDLE hFile, DWORD dwFileOffsetLow, DWORD dwFileOffsetHigh, DWORD nNumberOfBytesToLockLow, DWORD nNumberOfBytesToLockHigh) extrn LockFile:dword ; CODE XREF: sub_7F815E19+12p ; DATA XREF: sub_7F815E19+12r ; BOOL __stdcall UnlockFile(HANDLE hFile, DWORD dwFileOffsetLow, DWORD dwFileOffsetHigh, DWORD nNumberOfBytesToUnlockLow, DWORD nNumberOfBytesToUnlockHigh) extrn UnlockFile:dword ; CODE XREF: sub_7F815E51+12p ; DATA XREF: sub_7F815E51+12r ; DWORD __stdcall GetCurrentProcessId() extrn __imp_GetCurrentProcessId:dword ; CODE XREF: sub_7F816468:loc_7F816491p ; TimerFunc+8p ... ; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime) extrn GetLocalTime:dword ; CODE XREF: sub_7F817717+Ap ; DATA XREF: sub_7F817717+Ar ; HGLOBAL __stdcall GlobalHandle(LPCVOID pMem) extrn GlobalHandle:dword ; CODE XREF: sub_7F8242A1:loc_7F8242DFp ; sub_7F824418:loc_7F824456p ; DATA XREF: ... ; UINT __stdcall GetTempFileNameA(LPCSTR lpPathName, LPCSTR lpPrefixString, UINT uUnique, LPSTR lpTempFileName) extrn GetTempFileNameA:dword ; CODE XREF: sub_7F82AB76+29p ; DATA XREF: sub_7F82AB76+29r ; DWORD __stdcall GetTempPathA(DWORD nBufferLength, LPSTR lpBuffer) extrn GetTempPathA:dword ; CODE XREF: sub_7F82AB76+10p ; DATA XREF: sub_7F82AB76+10r ; DWORD __stdcall GetCurrentThreadId() extrn GetCurrentThreadId:dword ; CODE XREF: sub_7F82B14A+2E8p ; sub_7F8309B0+46p ... ; int __stdcall lstrcmpA(LPCSTR lpString1, LPCSTR lpString2) extrn lstrcmpA:dword ; CODE XREF: sub_7F82B7B5+2Ap ; sub_7F82B7B5+60p ; DATA XREF: ... ; HANDLE __stdcall CreateMutexA(LPSECURITY_ATTRIBUTES lpMutexAttributes, BOOL bInitialOwner, LPCSTR lpName) extrn CreateMutexA:dword ; CODE XREF: sub_7F82EEA3+9p ; sub_7F82F462+BAp ... ; void __stdcall __noreturn ExitProcess(UINT uExitCode) extrn ExitProcess:dword ; CODE XREF: sub_7F82F26E+3Dp ; sub_7F82F2D1+Bp ... ; LONG __stdcall InterlockedDecrement(volatile LONG *lpAddend) extrn InterlockedDecrement:dword ; CODE XREF: sub_7F82F26E+1Ep ; sub_7F82F2D1+2Ep ; DATA XREF: ... ; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend) extrn InterlockedIncrement:dword ; CODE XREF: sub_7F82F26E+13p ; DATA XREF: sub_7F82F26E+13r ; LPVOID __stdcall VirtualAlloc(LPVOID lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect) extrn VirtualAlloc:dword ; CODE XREF: sub_7F82F462+142p ; sub_7F82F76F+99p ; DATA XREF: ... ; SIZE_T __stdcall VirtualQuery(LPCVOID lpAddress, PMEMORY_BASIC_INFORMATION lpBuffer, SIZE_T dwLength) extrn VirtualQuery:dword ; CODE XREF: sub_7F82F462+122p ; DATA XREF: sub_7F82F462+122r ; DWORD __stdcall GetPrivateProfileSectionA(LPCSTR lpAppName, LPSTR lpReturnedString, DWORD nSize, LPCSTR lpFileName) extrn GetPrivateProfileSectionA:dword ; CODE XREF: sub_7F80BBF6+AEp ; DATA XREF: sub_7F80BBF6+AEr ; BOOL __stdcall SetStdHandle(DWORD nStdHandle, HANDLE hHandle) extrn SetStdHandle:dword ; CODE XREF: sub_7F832350:loc_7F8323AFp ; DATA XREF: sub_7F832350:loc_7F8323AFr ; UINT __stdcall GetWindowsDirectoryA(LPSTR lpBuffer, UINT uSize) extrn GetWindowsDirectoryA:dword ; CODE XREF: sub_7F80BBF6+2Dp ; DATA XREF: sub_7F80BBF6+2Dr ; BOOL __stdcall FlushFileBuffers(HANDLE hFile) extrn FlushFileBuffers:dword ; CODE XREF: sub_7F8083A0+D3p ; sub_7F8159EA+Dp ... ; BOOL __stdcall FreeEnvironmentStringsW(LPWCH) extrn FreeEnvironmentStringsW:dword ; CODE XREF: sub_7F8315A0+ECp ; sub_7F8315A0+FDp ; DATA XREF: ... ; BOOL __stdcall FreeEnvironmentStringsA(LPCH) extrn FreeEnvironmentStringsA:dword ; CODE XREF: sub_7F8315A0+15Ap ; sub_7F8315A0+17Fp ; DATA XREF: ... ; UINT __stdcall GetOEMCP() extrn GetOEMCP:dword ; DATA XREF: sub_7F8314B0+1Dr ; UINT __stdcall GetACP() extrn GetACP:dword ; DATA XREF: sub_7F8314B0+32r ; BOOL __stdcall GetCPInfo(UINT CodePage, LPCPINFO lpCPInfo) extrn GetCPInfo:dword ; CODE XREF: sub_7F831280+82p ; DATA XREF: sub_7F831280+82r ; void __stdcall GetStartupInfoA(LPSTARTUPINFOA lpStartupInfo) extrn GetStartupInfoA:dword ; CODE XREF: sub_7F830CE0+6Bp ; DATA XREF: sub_7F830CE0+6Br ; HANDLE __stdcall GetStdHandle(DWORD nStdHandle) extrn GetStdHandle:dword ; CODE XREF: sub_7F830CE0+17Fp ; sub_7F831790+1B7p ; DATA XREF: ... ; DWORD __stdcall GetFileType(HANDLE hFile) extrn GetFileType:dword ; CODE XREF: sub_7F830CE0+11Bp ; sub_7F830CE0+18Dp ; DATA XREF: ... ; UINT __stdcall SetHandleCount(UINT uNumber) extrn SetHandleCount:dword ; CODE XREF: sub_7F830CE0+1CDp ; DATA XREF: sub_7F830CE0+1CDr ; BOOL __stdcall HeapDestroy(HANDLE hHeap) extrn HeapDestroy:dword ; CODE XREF: sub_7F830CD0+6p ; DATA XREF: sub_7F830CD0+6r ; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize) extrn HeapCreate:dword ; CODE XREF: sub_7F830CB0+9p ; DATA XREF: sub_7F830CB0+9r ; LPCH __stdcall GetEnvironmentStrings() extrn GetEnvironmentStrings:dword ; CODE XREF: sub_7F8315A0:loc_7F8315CEp ; sub_7F8315A0+11Ap ; DATA XREF: ... ; LPVOID __stdcall TlsGetValue(DWORD dwTlsIndex) extrn TlsGetValue:dword ; CODE XREF: sub_7F830A60+10p ; sub_7F830AD0+1Cp ; DATA XREF: ... ; void __stdcall SetLastError(DWORD dwErrCode) extrn SetLastError:dword ; CODE XREF: sub_7F830A60+64p ; DATA XREF: sub_7F830A60+64r ; BOOL __stdcall TlsFree(DWORD dwTlsIndex) extrn TlsFree:dword ; CODE XREF: sub_7F830A10+10p ; DATA XREF: sub_7F830A10+10r ; DWORD __stdcall TlsAlloc() extrn TlsAlloc:dword ; CODE XREF: sub_7F8309B0+6p ; DATA XREF: sub_7F8309B0+6r ; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes) extrn HeapAlloc:dword ; CODE XREF: sub_7F830990+Ep ; sub_7F831AE0+2Cp ; DATA XREF: ... ; int __stdcall LCMapStringW(LCID Locale, DWORD dwMapFlags, LPCWSTR lpSrcStr, int cchSrc, LPWSTR lpDestStr, int cchDest) extrn LCMapStringW:dword ; CODE XREF: sub_7F8306D0+44p ; sub_7F8306D0+138p ... ; int __stdcall WideCharToMultiByte(UINT CodePage, DWORD dwFlags, LPCWSTR lpWideCharStr, int cchWideChar, LPSTR lpMultiByteStr, int cbMultiByte, LPCSTR lpDefaultChar, LPBOOL lpUsedDefaultChar) extrn WideCharToMultiByte:dword ; CODE XREF: sub_7F8306D0+1E4p ; sub_7F8306D0+206p ... ; int __stdcall LCMapStringA(LCID Locale, DWORD dwMapFlags, LPCSTR lpSrcStr, int cchSrc, LPSTR lpDestStr, int cchDest) extrn LCMapStringA:dword ; CODE XREF: sub_7F8306D0+25p ; sub_7F8306D0+A8p ; DATA XREF: ... ; int __stdcall MultiByteToWideChar(UINT CodePage, DWORD dwFlags, LPCSTR lpMultiByteStr, int cbMultiByte, LPWSTR lpWideCharStr, int cchWideChar) extrn MultiByteToWideChar:dword ; CODE XREF: sub_7F8306D0+DFp ; sub_7F8306D0+11Ep ; DATA XREF: ... ; BOOL __stdcall HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem) extrn HeapFree:dword ; CODE XREF: sub_7F8304A0+11p ; DATA XREF: sub_7F8304A0+11r ; DWORD __stdcall GetVersion() extrn GetVersion:dword ; CODE XREF: sub_7F830310+Dp ; DATA XREF: sub_7F830310+Dr ; LPSTR __stdcall GetCommandLineA() extrn GetCommandLineA:dword ; CODE XREF: sub_7F830310:loc_7F8303BCp ; DATA XREF: sub_7F830310:loc_7F8303BCr ; BOOL __stdcall TlsSetValue(DWORD dwTlsIndex, LPVOID lpTlsValue) extrn TlsSetValue:dword ; CODE XREF: sub_7F8309B0+33p ; sub_7F830A60+35p ... ; BOOL __stdcall MoveFileA(LPCSTR lpExistingFileName, LPCSTR lpNewFileName) extrn MoveFileA:dword ; CODE XREF: sub_7F8300A0+Ap ; DATA XREF: sub_7F8300A0+Ar ; void __stdcall RtlUnwind(PVOID TargetFrame, PVOID TargetIp, PEXCEPTION_RECORD ExceptionRecord, PVOID ReturnValue) extrn __imp_RtlUnwind:dword ; DATA XREF: RtlUnwindr ; LPWCH __stdcall GetEnvironmentStringsW() extrn GetEnvironmentStringsW:dword ; CODE XREF: sub_7F8315A0+16p ; sub_7F8315A0+6Fp ; DATA XREF: ... ; ; Imports from MAPI32.dll ; extrn __imp_UlRelease@4:dword ; DATA XREF: UlRelease@4r extrn __imp_HrSetOneProp@8:dword ; DATA XREF: HrSetOneProp@8r extrn __imp_HrGetOneProp@12:dword ; DATA XREF: HrGetOneProp@12r extrn __imp_MAPIFreeBuffer@4:dword ; DATA XREF: MAPIFreeBuffer@4r extrn __imp_FreeProws@4:dword ; DATA XREF: FreeProws@4r extrn __imp_HrQueryAllRows@24:dword ; DATA XREF: HrQueryAllRows@24r extrn __imp_MAPIUninitialize@0:dword ; DATA XREF: MAPIUninitialize@0r extrn __imp_MAPIAllocateBuffer@8:dword ; DATA XREF: MAPIAllocateBuffer@8r extrn __imp_MAPIAllocateMore@12:dword ; DATA XREF: MAPIAllocateMore@12r extrn __imp_MAPIGetDefaultMalloc@0:dword ; DATA XREF: MAPIGetDefaultMalloc@0r extrn __imp_MAPIInitialize@4:dword ; DATA XREF: MAPIInitialize@4r extrn __imp_HrValidateIPMSubtree@20:dword ; DATA XREF: HrValidateIPMSubtree@20r extrn __imp_PpropFindProp@12:dword ; DATA XREF: PpropFindProp@12r extrn __imp_SzFindCh@8:dword ; DATA XREF: SzFindCh@8r extrn __imp_MAPIAdminProfiles@8:dword ; DATA XREF: MAPIAdminProfiles@8r extrn __imp_MAPILogonEx@20:dword ; DATA XREF: MAPILogonEx@20r extrn __imp_HrAllocAdviseSink@12:dword ; DATA XREF: HrAllocAdviseSink@12r extrn __imp_CreateIProp@24:dword ; DATA XREF: CreateIProp@24r extrn __imp_CreateTable@36:dword ; DATA XREF: CreateTable@36r ; ; Imports from USER32.dll ; ; HWND __stdcall GetLastActivePopup(HWND hWnd) extrn GetLastActivePopup:dword ; CODE XREF: sub_7F8150A9+46p ; DATA XREF: sub_7F8150A9+46r ; HWND __stdcall CreateWindowExA(DWORD dwExStyle, LPCSTR lpClassName, LPCSTR lpWindowName, DWORD dwStyle, int X, int Y, int nWidth, int nHeight, HWND hWndParent, HMENU hMenu, HINSTANCE hInstance, LPVOID lpParam) extrn CreateWindowExA:dword ; CODE XREF: sub_7F81710C+4Ep ; sub_7F82B14A+2CEp ; DATA XREF: ... ; ATOM __stdcall RegisterClassA(const WNDCLASSA *lpWndClass) extrn RegisterClassA:dword ; CODE XREF: sub_7F8171B7+64p ; sub_7F82AF85+54p ; DATA XREF: ... ; BOOL __stdcall GetClassInfoA(HINSTANCE hInstance, LPCSTR lpClassName, LPWNDCLASSA lpWndClass) extrn GetClassInfoA:dword ; CODE XREF: sub_7F8171B7+51p ; DATA XREF: sub_7F8171B7+51r ; BOOL __stdcall IsCharAlphaNumericA(CHAR ch) extrn IsCharAlphaNumericA:dword ; CODE XREF: sub_7F81EF87+73p ; DATA XREF: sub_7F81EF87+73r ; BOOL __stdcall IsCharLowerA(CHAR ch) extrn IsCharLowerA:dword ; CODE XREF: sub_7F81EF87+63p ; DATA XREF: sub_7F81EF87+63r ; BOOL __stdcall IsCharAlphaA(CHAR ch) extrn IsCharAlphaA:dword ; CODE XREF: sub_7F81EF87+41p ; DATA XREF: sub_7F81EF87+41r ; SHORT __stdcall GetAsyncKeyState(int vKey) extrn GetAsyncKeyState:dword ; CODE XREF: sub_7F81F0AC+Cp ; sub_7F81F0AC+9Ap ... ; DWORD __stdcall GetWindowThreadProcessId(HWND hWnd, LPDWORD lpdwProcessId) extrn GetWindowThreadProcessId:dword ; CODE XREF: sub_7F81F20F+66p ; sub_7F81F20F+AFp ; DATA XREF: ... ; BOOL __stdcall EndPaint(HWND hWnd, const PAINTSTRUCT *lpPaint) extrn EndPaint:dword ; CODE XREF: sub_7F8097B9+38p ; sub_7F80C4B4+56p ... ; BOOL __stdcall CharToOemA(LPCSTR pSrc, LPSTR pDst) extrn CharToOemA:dword ; CODE XREF: sub_7F820E0E+13p ; DATA XREF: sub_7F820E0E+13r ; BOOL __stdcall OemToCharA(LPCSTR pSrc, LPSTR pDst) extrn OemToCharA:dword ; CODE XREF: sub_7F81550B+12p ; sub_7F81554E+13p ... ; BOOL __stdcall BringWindowToTop(HWND hWnd) extrn BringWindowToTop:dword ; CODE XREF: sub_7F80C519+61p ; DATA XREF: sub_7F80C519+61r ; HWND __stdcall CreateDialogParamA(HINSTANCE hInstance, LPCSTR lpTemplateName, HWND hWndParent, DLGPROC lpDialogFunc, LPARAM dwInitParam) extrn CreateDialogParamA:dword ; CODE XREF: sub_7F80C5C0+4Bp ; DATA XREF: sub_7F80C5C0+4Br ; int __stdcall ReleaseDC(HWND hWnd, HDC hDC) extrn ReleaseDC:dword ; CODE XREF: sub_7F82B14A+1C2p ; sub_7F82B72B+43p ; DATA XREF: ... ; HDC __stdcall GetDC(HWND hWnd) extrn GetDC:dword ; CODE XREF: sub_7F82B14A+65p ; sub_7F82B72B+2Ep ; DATA XREF: ... ; HWND __stdcall GetDesktopWindow() extrn GetDesktopWindow:dword ; CODE XREF: sub_7F82B14A+10p ; DATA XREF: sub_7F82B14A+10r ; LRESULT __stdcall DispatchMessageA(const MSG *lpMsg) extrn DispatchMessageA:dword ; CODE XREF: sub_7F8035B3+253p ; sub_7F803A19+5Dp ... ; BOOL __stdcall PeekMessageA(LPMSG lpMsg, HWND hWnd, UINT wMsgFilterMin, UINT wMsgFilterMax, UINT wRemoveMsg) extrn PeekMessageA:dword ; CODE XREF: sub_7F8035B3+22Ep ; sub_7F8035B3+261p ... ; int __stdcall MessageBoxA(HWND hWnd, LPCSTR lpText, LPCSTR lpCaption, UINT uType) extrn MessageBoxA:dword ; CODE XREF: sub_7F8023F1+81p ; sub_7F8035B3+2AAp ... ; HDC __stdcall BeginPaint(HWND hWnd, LPPAINTSTRUCT lpPaint) extrn BeginPaint:dword ; CODE XREF: sub_7F8097B9+Fp ; sub_7F80C4B4+15p ... ; int __stdcall LoadStringA(HINSTANCE hInstance, UINT uID, LPSTR lpBuffer, int cchBufferMax) extrn LoadStringA:dword ; CODE XREF: ScMMFMigrateToMDB@48+C8p ; ScMMFMigrateToMDB@48+1F9p ... ; BOOL __stdcall IsCharUpperA(CHAR ch) extrn IsCharUpperA:dword ; CODE XREF: sub_7F80FCA0+9p ; sub_7F81EF87+55p ; DATA XREF: ... ; DWORD __stdcall CharUpperBuffA(LPSTR lpsz, DWORD cchLength) extrn CharUpperBuffA:dword ; CODE XREF: sub_7F80E7F6+164p ; sub_7F80ECB3+15Ap ... ; BOOL __stdcall DestroyWindow(HWND hWnd) extrn DestroyWindow:dword ; CODE XREF: sub_7F80C75D+16p ; sub_7F81710C+80p ... ; int __stdcall DrawTextA(HDC hdc, LPCSTR lpchText, int cchText, LPRECT lprc, UINT format) extrn DrawTextA:dword ; CODE XREF: sub_7F82AFF2+EAp ; sub_7F82AFF2+103p ; DATA XREF: ... ; BOOL __stdcall SetWindowPos(HWND hWnd, HWND hWndInsertAfter, int X, int Y, int cx, int cy, UINT uFlags) extrn SetWindowPos:dword ; CODE XREF: sub_7F805EBF+66p ; sub_7F807D9C+A2p ... ; int __stdcall FillRect(HDC hDC, const RECT *lprc, HBRUSH hbr) extrn FillRect:dword ; CODE XREF: sub_7F80A689+33p ; sub_7F80A689+43p ... ; HWND __stdcall GetParent(HWND hWnd) extrn GetParent:dword ; CODE XREF: sub_7F8087A7+Cp ; sub_7F809A3F+8Fp ... ; HWND __stdcall SetActiveWindow(HWND hWnd) extrn SetActiveWindow:dword ; CODE XREF: sub_7F8087A7+13p ; DATA XREF: sub_7F8087A7+13r ; BOOL __stdcall InvalidateRect(HWND hWnd, const RECT *lpRect, BOOL bErase) extrn InvalidateRect:dword ; CODE XREF: sub_7F807D9C+1C8p ; sub_7F80A115+21Cp ... ; LONG __stdcall GetWindowLongA(HWND hWnd, int nIndex) extrn GetWindowLongA:dword ; CODE XREF: sub_7F807D9C+1E0p ; sub_7F80A115+1Ep ... ; BOOL __stdcall SetDlgItemInt(HWND hDlg, int nIDDlgItem, UINT uValue, BOOL bSigned) extrn SetDlgItemInt:dword ; CODE XREF: sub_7F80A115+136p ; sub_7F80A47A+F2p ; DATA XREF: ... ; BOOL __stdcall KillTimer(HWND hWnd, UINT_PTR uIDEvent) extrn KillTimer:dword ; CODE XREF: DialogFunc+59p ; sub_7F814F94+34p ... ; UINT_PTR __stdcall SetTimer(HWND hWnd, UINT_PTR nIDEvent, UINT uElapse, TIMERPROC lpTimerFunc) extrn SetTimer:dword ; CODE XREF: DialogFunc+ABp ; sub_7F816044+179p ... ; LRESULT __stdcall CallWindowProcA(WNDPROC lpPrevWndFunc, HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) extrn CallWindowProcA:dword ; CODE XREF: sub_7F809FA2+43p ; sub_7F80C77D+47p ; DATA XREF: ... ; __int32 __stdcall GetDialogBaseUnits() extrn GetDialogBaseUnits:dword ; CODE XREF: sub_7F8097FF+9p ; sub_7F8097FF+Fp ; DATA XREF: ... ; BOOL __stdcall ScreenToClient(HWND hWnd, LPPOINT lpPoint) extrn ScreenToClient:dword ; CODE XREF: sub_7F8097FF+5Ep ; DATA XREF: sub_7F8097FF+5Er ; DWORD __stdcall GetSysColor(int nIndex) extrn GetSysColor:dword ; CODE XREF: sub_7F8097FF+87p ; sub_7F8097FF+A1p ... ; BOOL __stdcall EnumThreadWindows(DWORD dwThreadId, WNDENUMPROC lpfn, LPARAM lParam) extrn EnumThreadWindows:dword ; CODE XREF: sub_7F82B14A+2EFp ; DATA XREF: sub_7F82B14A+2EFr ; int __stdcall FrameRect(HDC hDC, const RECT *lprc, HBRUSH hbr) extrn FrameRect:dword ; CODE XREF: sub_7F82AFF2+AFp ; DATA XREF: sub_7F82AFF2+AFr ; BOOL __stdcall IsWindow(HWND hWnd) extrn IsWindow:dword ; CODE XREF: ScMMFMigrateToMDB@48+53p ; ScMMFMigrateToMDB@48+105p ... ; BOOL __stdcall UpdateWindow(HWND hWnd) extrn UpdateWindow:dword ; CODE XREF: sub_7F807D9C+1CFp ; sub_7F807D9C+229p ... ; LONG __stdcall SetWindowLongA(HWND hWnd, int nIndex, LONG dwNewLong) extrn SetWindowLongA:dword ; CODE XREF: sub_7F807D9C+1FBp ; sub_7F807D9C+352p ... ; UINT __stdcall GetDlgItemTextA(HWND hDlg, int nIDDlgItem, LPSTR lpString, int cchMax) extrn GetDlgItemTextA:dword ; CODE XREF: sub_7F80795B+2A5p ; sub_7F808498+89p ... ; int __stdcall MapWindowPoints(HWND hWndFrom, HWND hWndTo, LPPOINT lpPoints, UINT cPoints) extrn MapWindowPoints:dword ; CODE XREF: sub_7F80725C+203p ; sub_7F807D9C+129p ; DATA XREF: ... ; LRESULT __stdcall SendMessageA(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) extrn SendMessageA:dword ; CODE XREF: sub_7F806F59+17p ; sub_7F806F59+39p ... ; HCURSOR __stdcall LoadCursorA(HINSTANCE hInstance, LPCSTR lpCursorName) extrn LoadCursorA:dword ; CODE XREF: sub_7F806861+38Ap ; sub_7F80725C+5Cp ... ; HCURSOR __stdcall SetCursor(HCURSOR hCursor) extrn SetCursor:dword ; CODE XREF: sub_7F806861+391p ; sub_7F806861+4FAp ... ; UINT __stdcall IsDlgButtonChecked(HWND hDlg, int nIDButton) extrn IsDlgButtonChecked:dword ; CODE XREF: sub_7F806352+93p ; sub_7F806352+9Fp ... ; LPSTR __stdcall CharUpperA(LPSTR lpsz) extrn CharUpperA:dword ; CODE XREF: sub_7F806352+137p ; DATA XREF: sub_7F806352+137r ; BOOL __stdcall SetDlgItemTextA(HWND hDlg, int nIDDlgItem, LPCSTR lpString) extrn SetDlgItemTextA:dword ; CODE XREF: sub_7F806352+1B9p ; sub_7F806FF2+96p ... ; BOOL __stdcall GetClientRect(HWND hWnd, LPRECT lpRect) extrn GetClientRect:dword ; CODE XREF: sub_7F8061C8+5Cp ; sub_7F8065A0+19p ... ; BOOL __stdcall GetWindowRect(HWND hWnd, LPRECT lpRect) extrn GetWindowRect:dword ; CODE XREF: sub_7F8061C8+6Fp ; sub_7F8065A0+32p ... ; BOOL __stdcall MoveWindow(HWND hWnd, int X, int Y, int nWidth, int nHeight, BOOL bRepaint) extrn MoveWindow:dword ; CODE XREF: sub_7F8061C8+BCp ; sub_7F8061C8+EFp ... ; HWND __stdcall GetDlgItem(HWND hDlg, int nIDDlgItem) extrn GetDlgItem:dword ; CODE XREF: sub_7F805EBF+20p ; sub_7F805EBF+30p ... ; BOOL __stdcall EnableWindow(HWND hWnd, BOOL bEnable) extrn EnableWindow:dword ; CODE XREF: sub_7F805EBF+37p ; sub_7F8061C8+27p ... ; BOOL __stdcall ShowWindow(HWND hWnd, int nCmdShow) extrn ShowWindow:dword ; CODE XREF: sub_7F805EBF+27p ; sub_7F805EBF+3Fp ... ; int __stdcall GetSystemMetrics(int nIndex) extrn GetSystemMetrics:dword ; CODE XREF: sub_7F805851+14Fp ; sub_7F805851+156p ... ; BOOL __stdcall MapDialogRect(HWND hDlg, LPRECT lpRect) extrn MapDialogRect:dword ; CODE XREF: sub_7F805851+17Ep ; sub_7F805851+1C1p ... ; UINT __stdcall RegisterWindowMessageA(LPCSTR lpString) extrn RegisterWindowMessageA:dword ; CODE XREF: sub_7F805851+2B3p ; DATA XREF: sub_7F805851+2B3r ; BOOL __stdcall EndDialog(HWND hDlg, INT_PTR nResult) extrn EndDialog:dword ; CODE XREF: sub_7F805851+80p ; sub_7F805851+5CCp ... ; BOOL __stdcall WinHelpA(HWND hWndMain, LPCSTR lpszHelp, UINT uCommand, ULONG_PTR dwData) extrn WinHelpA:dword ; CODE XREF: sub_7F805851+613p ; DATA XREF: sub_7F805851+613r ; BOOL __stdcall PostMessageA(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) extrn PostMessageA:dword ; CODE XREF: sub_7F805851:loc_7F8058B1p ; sub_7F805851+D7p ... ; HWND __stdcall GetFocus() extrn GetFocus:dword ; CODE XREF: sub_7F80577A+70p ; DATA XREF: sub_7F80577A+70r ; HWND __stdcall GetActiveWindow() extrn GetActiveWindow:dword ; CODE XREF: sub_7F80577A+7Fp ; sub_7F81F20F+5Fp ... ; HWND __stdcall SetFocus(HWND hWnd) extrn SetFocus:dword ; CODE XREF: sub_7F80577A+98p ; sub_7F8061C8+17Bp ... ; INT_PTR __stdcall DialogBoxParamA(HINSTANCE hInstance, LPCSTR lpTemplateName, HWND hWndParent, DLGPROC lpDialogFunc, LPARAM dwInitParam) extrn DialogBoxParamA:dword ; CODE XREF: sub_7F80504F+DFp ; sub_7F805168+16Bp ... ; int wsprintfA(LPSTR, LPCSTR, ...) extrn wsprintfA:dword ; CODE XREF: sub_7F804EC7+57p ; sub_7F804EC7+9Ap ... ; DWORD __stdcall MsgWaitForMultipleObjects(DWORD nCount, const HANDLE *pHandles, BOOL fWaitAll, DWORD dwMilliseconds, DWORD dwWakeMask) extrn MsgWaitForMultipleObjects:dword ; CODE XREF: sub_7F803A19+1Cp ; DATA XREF: sub_7F803A19+1Cr ; BOOL __stdcall GetMessageA(LPMSG lpMsg, HWND hWnd, UINT wMsgFilterMin, UINT wMsgFilterMax) extrn GetMessageA:dword ; CODE XREF: sub_7F8035B3+23Fp ; sub_7F803A19+49p ... ; BOOL __stdcall TranslateMessage(const MSG *lpMsg) extrn TranslateMessage:dword ; CODE XREF: sub_7F8035B3+249p ; sub_7F803A19+53p ... ; BOOL __stdcall MessageBeep(UINT uType) extrn MessageBeep:dword ; CODE XREF: sub_7F823870+76p ; sub_7F823870+11Cp ... ; LRESULT __stdcall DefWindowProcA(HWND hWnd, UINT Msg, WPARAM wParam, LPARAM lParam) extrn DefWindowProcA:dword ; CODE XREF: sub_7F82ACA6+1Dp ; sub_7F82AFF2+52p ; DATA XREF: ... ; BOOL __stdcall SetWindowTextA(HWND hWnd, LPCSTR lpString) extrn SetWindowTextA:dword ; CODE XREF: sub_7F805851+3F3p ; sub_7F80725C+1ADp ... ; LRESULT __stdcall SendDlgItemMessageA(HWND hDlg, int nIDDlgItem, UINT Msg, WPARAM wParam, LPARAM lParam) extrn SendDlgItemMessageA:dword ; CODE XREF: sub_7F805851+123p ; sub_7F805851+131p ... ; ; Imports from comdlg32.dll ; ; BOOL __stdcall GetOpenFileNameA(LPOPENFILENAMEA) extrn __imp_GetOpenFileNameA:dword ; DATA XREF: GetOpenFileNameAr ; BOOL __stdcall GetSaveFileNameA(LPOPENFILENAMEA) extrn __imp_GetSaveFileNameA:dword ; DATA XREF: GetSaveFileNameAr ; __int16 __stdcall GetFileTitleA(LPCSTR, LPSTR Buf, WORD cchSize) extrn __imp_GetFileTitleA:dword ; DATA XREF: GetFileTitleAr ; ; Imports from ole32.dll ; ; HRESULT __stdcall CoCreateGuid(GUID *pguid) extrn CoCreateGuid:dword ; CODE XREF: sub_7F8045B6+149p ; DATA XREF: sub_7F8045B6+149r ; Section 4. (virtual address 0003D000) ; Virtual size : 00000141 ( 321.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 0003A800 ; Flags 50000040: Data Shareable Readable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read _SHARED segment para public 'DATA' use32 assume cs:_SHARED ;org 7F83D000h ; CHAR ModuleName[] ModuleName db 'mmfmig32.dll',0 ; DATA XREF: sub_7F8026ED+107o ; MMFMIG_ProcessMMF@4+1o ... align 10h db 1 db 0 db 0 db 0 db 2 db 1 db 0FFh db 0Fh db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 0 db 49h ; I db 50h ; P db 4Dh ; M db 5Fh ; _ db 53h ; S db 55h ; U db 42h ; B db 54h ; T db 52h ; R db 45h ; E db 45h ; E db 0 db 49h ; I db 50h ; P db 4Dh ; M db 0 db 52h ; R db 45h ; E db 50h ; P db 4Fh ; O db 52h ; R db 54h ; T db 2Eh ; . db 49h ; I db 50h ; P db 4Dh ; M db 0 db 0 db 0 db 0 db 0 db 0 unk_7F83D040 db 4 ; DATA XREF: sub_7F802DB7+33Do db 0 db 0 db 0 db 1Eh db 0 db 1 db 30h ; 0 db 1Eh db 0 db 4 db 30h ; 0 db 3 db 0 db 1 db 36h ; 6 db 3 db 0 db 0Bh db 36h ; 6 db 0 db 0 db 0 db 0 unk_7F83D058 db 2 ; DATA XREF: sub_7F8035B3+14Bo db 0 db 0 db 0 db 1Eh db 0 db 37h ; 7 db 0 db 3 db 0 db 7 db 0Eh db 0 db 0 db 0 db 0 unk_7F83D068 db 3 ; DATA XREF: sub_7F8045B6+1ADo db 0 db 0 db 0 db 3 db 0 db 5 db 37h ; 7 db 2 db 1 db 0Ah db 37h ; 7 db 3 db 0 db 0Bh db 37h ; 7 unk_7F83D078 db 1 ; DATA XREF: sub_7F8045B6:loc_7F804695o db 0 db 0 db 0 db 0Bh db 0 db 1Bh db 0Eh unk_7F83D080 db 2 ; DATA XREF: sub_7F802DB7+291o ; sub_7F804A93+3Co db 0 db 0 db 0 db 2 db 1 db 0FFh db 0Fh db 1Eh db 0 db 1 db 30h ; 0 db 0 db 0 db 0 db 0 unk_7F83D090 db 1 ; DATA XREF: sub_7F8045B6+AAo db 0 db 0 db 0 db 1Eh db 0 db 1Ah db 0 ; CHAR ProcName[] ProcName db 'NDBGetFileInfo',0 ; DATA XREF: sub_7F8060C1+BDo align 4 ; CHAR a_mmf[] a_mmf db '.MMF',0 ; DATA XREF: sub_7F805FDE+7Fo ; sub_7F809A3F+14Eo ... align 10h ; CHAR a_pst[] a_pst db '.pst',0 ; DATA XREF: sub_7F806861+5C8o align 4 ; CHAR a_pab[] a_pab db '.PAB',0 ; DATA XREF: sub_7F8060C1+7Ao ; sub_7F809A3F:loc_7F809BA4o align 10h aMmfMigrationTa db 'MMF MIGRATION Target Store',0 ; DATA XREF: sub_7F8091A3+1B7o align 10h ; CHAR szHelp[] szHelp db 'EXCHNG.HLP',0 ; DATA XREF: sub_7F805851+60Bo align 10h ; CHAR LibFileName[] LibFileName db 'mspst32.dll',0 ; DATA XREF: sub_7F8060C1:loc_7F80616Do align 10h ; CHAR aMigrateini[] aMigrateini db 'MigrateIni',0 ; DATA XREF: sub_7F815163+13o ; sub_7F815163+318o align 10h ; CHAR aMsmail_ini[] aMsmail_ini db 'msmail.ini',0 ; DATA XREF: sub_7F815163+2Eo ; sub_7F815163+A9o ... align 10h ; CHAR aMsmail32_ini[] aMsmail32_ini db 'msmail32.ini',0 ; DATA XREF: sub_7F815163+Co ; sub_7F815163:loc_7F81542Eo ... align 10h ; CHAR aMicrosoftMail[] aMicrosoftMail db 'Microsoft Mail',0 ; DATA XREF: sub_7F815163+18o ; sub_7F815163:loc_7F815201o ... align 10h ; CHAR byte_7F83D140[3776] byte_7F83D140 db 0C0h dup(0), 0E00h dup(?) ; DATA XREF: sub_7F815163+45o ; sub_7F815163+C1o ... _SHARED ends end DllEntryPoint