00401000 /$ 55 PUSHITGOOD EBP 00401001 |. 8BEC MOV EBP,ESP 00401003 |. 56 PUSH ESI 00401004 |. 57 PUSH EDI 00401005 |. 51 PUSH ECX 00401006 |. 53 PUSH EBX 00401007 |. 52 PUSH EDX 00401008 |. 8B75 0C MOV ESI,DWORD PTR SS:[EBP+C] 0040100B |. 66:813E 4D5A CMP WORD PTR DS:[ESI],5A4D 00401010 |. 75 7D JNZ SHORT demoalph.0040108F 00401012 |. 0376 3C ADD ESI,DWORD PTR DS:[ESI+3C] 00401015 |. 813E 50450000 CMP DWORD PTR DS:[ESI],4550 0040101B |. 75 72 JNZ SHORT demoalph.0040108F 0040101D |. 8B7D 08 MOV EDI,DWORD PTR SS:[EBP+8] 00401020 |. B9 C8000000 MOV ECX,0C8 00401025 |. 32C0 XOR AL,AL 00401027 |. F2:AE REPNE SCAS BYTE PTR ES:[EDI] 00401029 |. 8BCF MOV ECX,EDI 0040102B |. 2B4D 08 SUB ECX,DWORD PTR SS:[EBP+8] 0040102E |. 8B56 78 MOV EDX,DWORD PTR DS:[ESI+78] 00401031 |. 0355 0C ADD EDX,DWORD PTR SS:[EBP+C] 00401034 |. 8B5A 20 MOV EBX,DWORD PTR DS:[EDX+20] 00401037 |. 035D 0C ADD EBX,DWORD PTR SS:[EBP+C] 0040103A |. 33C0 XOR EAX,EAX 0040103C |> 8B3B /MOV EDI,DWORD PTR DS:[EBX] 0040103E |. 037D 0C |ADD EDI,DWORD PTR SS:[EBP+C] 00401041 |. 8B75 08 |MOV ESI,DWORD PTR SS:[EBP+8] 00401044 |. 51 |PUSH ECX 00401045 |. F3:A6 |REPE CMPS BYTE PTR ES:[EDI],BYTE PTR DS> 00401047 |. 74 0C |JE SHORT demoalph.00401055 00401049 |. 59 |POP ECX 0040104A |. 83C3 04 |ADD EBX,4 0040104D |. 40 |INC EAX 0040104E |. 3B42 18 |CMP EAX,DWORD PTR DS:[EDX+18] 00401051 |.^75 E9 \JNZ SHORT demoalph.0040103C 00401053 |. EB 03 JMP SHORT demoalph.00401058 00401055 |> 83C4 04 ADD ESP,4 00401058 |> 3B42 18 CMP EAX,DWORD PTR DS:[EDX+18] 0040105B |. 74 32 JE SHORT demoalph.0040108F 0040105D |. 8B72 24 MOV ESI,DWORD PTR DS:[EDX+24] 00401060 |. 0375 0C ADD ESI,DWORD PTR SS:[EBP+C] 00401063 |. 52 PUSH EDX 00401064 |. BB 02000000 MOV EBX,2 00401069 |. 33D2 XOR EDX,EDX 0040106B |. F7E3 MUL EBX 0040106D |. 5A POP EDX 0040106E |. 03C6 ADD EAX,ESI 00401070 |. 33C9 XOR ECX,ECX 00401072 |. 66:8B08 MOV CX,WORD PTR DS:[EAX] 00401075 |. 8B7A 1C MOV EDI,DWORD PTR DS:[EDX+1C] 00401078 |. 33D2 XOR EDX,EDX 0040107A |. BB 04000000 MOV EBX,4 0040107F |. 8BC1 MOV EAX,ECX 00401081 |. F7E3 MUL EBX 00401083 |. 0345 0C ADD EAX,DWORD PTR SS:[EBP+C] 00401086 |. 03C7 ADD EAX,EDI 00401088 |. 8B00 MOV EAX,DWORD PTR DS:[EAX] 0040108A |. 0345 0C ADD EAX,DWORD PTR SS:[EBP+C] 0040108D |. EB 02 JMP SHORT demoalph.00401091 0040108F |> 33C0 XOR EAX,EAX 00401091 |> 5A POP EDX 00401092 |. 5B POP EBX 00401093 |. 59 POP ECX 00401094 |. 5F POP EDI 00401095 |. 5E POP ESI 00401096 |. C9 LEAVE 00401097 \. C2 0800 RETN 8 0040109A > $ E8 00000000 CALL demoalph.0040109F ; ENTRY POINT 0040109F $ 5B POP EBX 004010A0 . 83EB 05 SUB EBX,5 004010A3 . 58 POP EAX 004010A4 . 25 0000FFFF AND EAX,FFFF0000 004010A9 > 2D 00100000 SUB EAX,1000 004010AE . 66:8138 4D5A CMP WORD PTR DS:[EAX],5A4D 004010B3 .^75 F4 JNZ SHORT demoalph.004010A9 004010B5 . 50 PUSH EAX 004010B6 . 33C9 XOR ECX,ECX 004010B8 . EB 0D JMP SHORT demoalph.004010C7 004010BA D6 DB D6 004010BB 90 NOP 004010BC 9E DB 9E 004010BD 9A DB 9A 004010BE 98 DB 98 004010BF 80 DB 80 004010C0 8AC0 MOV AL,AL 004010C2 8A DB 8A 004010C3 8A DB 8A 004010C4 84 DB 84 004010C5 . 7C 00 JL SHORT demoalph.004010C7 004010C7 > 8BF3 MOV ESI,EBX 004010C9 . 83C6 20 ADD ESI,20 004010CC . 8BFE MOV EDI,ESI 004010CE > AC LODS BYTE PTR DS:[ESI] 004010CF . C0C8 02 ROR AL,2 004010D2 . 04 03 ADD AL,3 004010D4 . D0C0 ROL AL,1 004010D6 . 34 27 XOR AL,27 004010D8 . AA STOS BYTE PTR ES:[EDI] 004010D9 . 803E 00 CMP BYTE PTR DS:[ESI],0 004010DC .^75 F0 JNZ SHORT demoalph.004010CE 004010DE . 57 PUSH EDI 004010DF . 832C24 0C SUB DWORD PTR SS:[ESP],0C 004010E3 . E8 18FFFFFF CALL demoalph.00401000 004010E8 . 50 PUSH EAX 004010E9 . 6A 40 PUSH 40 004010EB . 68 00300000 PUSH 3000 004010F0 . 68 00000100 PUSH 10000 ; UNICODE "=G:=G:\" 004010F5 . 6A 00 PUSH 0 004010F7 . FFD0 CALL EAX 004010F9 . 85C0 TEST EAX,EAX 004010FB . 75 01 JNZ SHORT demoalph.004010FE 004010FD . C3 RETN 004010FE > 90 NOP 004010FF . 64:C705 080000>MOV DWORD PTR FS:[8],0 0040110A . 64:C705 040000>MOV DWORD PTR FS:[4],7FFF0000 00401115 . 94 XCHG EAX,ESP 00401116 . 81C4 00F00000 ADD ESP,0F000 0040111C . 8BEC MOV EBP,ESP 0040111E . 83ED 04 SUB EBP,4 00401121 . 90 NOP 00401122 . 90 NOP 00401123 . 90 NOP 00401124 . 90 NOP 00401125 . 90 NOP 00401126 . 90 NOP