0042b6a0 lea eax, [ecx + ecx*2]
0042b6a3 shl eax, 4
0042b6a6 add eax, 0x102a498
0042b6ab ret 
0042b6ac int3 
0042b6ad int3 
0042b6ae int3 
0042b6af int3 
0042b6b0 jmp 0x216f200
0042b6b5 int3 
0042b6b6 pop ss
0042b6b7 int1 
0042b6b8 push es
0042b6b9 add ecx, esp
0042b6bb int3 
0042b6bc int3 
0042b6bd int3 
0042b6be int3 
0042b6bf int3 
0042b6c0 int3 
0042b6c1 int3 
0042b6c2 int3 
0042b6c3 int3 
0042b6c4 int3 
0042b6c5 int3 
0042b6c6 sbb al, 0xf1
0042b6c8 push es
0042b6c9 add ecx, esp
0042b6cb int3 
0042b6cc int3 
0042b6cd int3 
0042b6ce int3 
0042b6cf int3 
0042b6d0 int3 
0042b6d1 int3 
0042b6d2 int3 
0042b6d3 int3 
0042b6d4 int3 
0042b6d5 int3 
0042b6d6 mov ecx, esp
0042b6d8 int3 
0042b6d9 int3 
0042b6da int3 
0042b6db int3 
0042b6dc int3 
0042b6dd int3 
0042b6de int3 
0042b6df int3 
0042b6e0 lea eax, [ecx + ecx*2]
0042b6e3 shl eax, 4
0042b6e6 mov eax, dword ptr [eax + 0x102a488]
0042b6ec ret 
0042b6ed sbb ecx, esp
0042b6ef int3 
0042b6f0 lea eax, [ecx + ecx*2]
0042b6f3 shl eax, 4
0042b6f6 mov eax, dword ptr [eax + 0x102a490]
0042b6fc ret 
0042b6fd test esp, ecx
0042b6ff int3 
0042b700 movsx eax, word ptr [ecx + 0x10e]
0042b707 cmp edx, eax
0042b709 je 0x42b735
0042b70b xorps xmm0, xmm0
0042b70e mov word ptr [ecx + 0x10e], dx
0042b715 movss dword ptr [ecx + 0x110], xmm0
0042b71d movss dword ptr [ecx + 0x114], xmm0
0042b725 movss dword ptr [ecx + 0x118], xmm0
0042b72d movss dword ptr [ecx + 0x11c], xmm0
0042b735 ret 
0042b736 push ebp
0042b737 int3 
0042b738 int3 
0042b739 int3 
0042b73a int3 
0042b73b int3 
0042b73c int3 
0042b73d int3 
0042b73e int3 
0042b73f int3 
00430990 jmp 0x217a6b0
00430995 int3 
00430996 movsd dword ptr es:[edi], dword ptr [esi]
00430997 push es
00430999 add ecx, esp
0043099b int3 
0043099c int3 
0043099d int3 
0043099e int3 
0043099f int3 
004309a0 int3 
004309a1 int3 
004309a2 int3 
004309a3 int3 
004309a4 int3 
004309a5 int3 
004309a6 outsb dx, byte ptr [esi]
004309a7 and ah, byte ptr [eax - 0x80]
004309aa push edx
004309ab int3 
004309ad int3 
004309ae int3 
004309af int3 
004309b0 jmp 0x2148210
004309b5 int3 
004309b6 stosb byte ptr es:[edi], al
004309b7 push es
004309b9 add ecx, esp
004309bb int3 
004309bc int3 
004309bd int3 
004309be int3 
004309bf int3 
004309c0 int3 
004309c1 int3 
004309c2 int3 
004309c3 int3 
004309c4 int3 
004309c5 int3 
004309c6 clc 
004309c7 jmp 0x403596
004309cc jmp 0x4309e6
004309ce test eax, 0x335756cc
004309d3 push dword ptr [ebx]
004309d5 test byte ptr [ebx - 0x506c1732], -1
0091c200 push esi
0091c201 mov esi, ecx
0091c203 push edi
0091c204 mov edi, edx
0091c206 test esi, esi
0091c208 js 0x91c23a
0091c20a mov eax, dword ptr [esi*4 + 0x1e20054]
0091c211 cmp eax, edi
0091c213 je 0x91c23a
0091c215 cmp eax, 7
0091c218 jne 0x91c229
0091c21a call 0x91f4d0
0091c21f mov dword ptr [esi*4 + 0x1e20054], edi
0091c226 pop edi
0091c227 pop esi
0091c228 ret 
0091c229 cmp edi, 7
0091c22c jne 0x91c233
0091c22e call 0x91f4a0
0091c233 mov dword ptr [esi*4 + 0x1e20054], edi
0091c23a pop edi
0091c23b pop esi
0091c23c ret 
0091c23d mov ecx, esp
0091c23f int3 
0091c240 test ecx, ecx
0091c242 jns 0x91c247
0091c244 xor eax, eax
0091c246 ret 
0091c247 mov eax, dword ptr [ecx*4 + 0x1e20054]
0091c24e ret 
0091c24f int3 
0091c250 cmp dword ptr [0x1e20020], 1
0091c257 jne 0x91c25f
0091c259 mov dword ptr [0x1e20024], ecx
0091c25f ret 
0091c260 mov dword ptr [0x1e20024], 0
0091c26a ret 
0091c26b sbb ecx, esp
0091c26d int3 
0091c26e int3 
0091c26f int3 
0091c270 push esi
0091c271 mov esi, ecx
0091c273 call 0x42c430
0091c278 test eax, eax
0091c27a je 0x91c2d3
0091c27c call 0x42c2f0
0091c281 cmp dword ptr [eax + 0xb0], 2
0091c288 jne 0x91c2d3
0091c28a call 0x9f0f40
0091c28f test eax, eax
0091c291 jne 0x91c2d3
0091c293 call 0x951660
0091c298 test eax, eax
0091c29a jne 0x91c2d3
0091c29c mov ecx, esi
0091c29e call 0x4a80c0
0091c2a3 jmp dword ptr [eax*4 + 0x91c2d8]
0091c2aa xor ecx, ecx
0091c2ac mov edx, esi
0091c1b0 push esi
0091c1b1 push edi
0091c1b2 mov edi, edx
0091c1b4 mov esi, ecx
0091c1b6 call 0x9f0f50
0091c1bb test eax, eax
0091c1bd jne 0x91c1c8
0091c1bf call 0x9f0f40
0091c1c4 test eax, eax
0091c1c6 je 0x91c1ea
0091c1c8 call 0x9f41a0
0091c1cd test eax, eax
0091c1cf je 0x91c1d9
0091c1d1 mov dword ptr [0x1e2001c], esi
0091c1d7 jmp 0x91c1df
0091c1d9 mov dword ptr [0x1e20018], esi
0091c1df test edi, edi
0091c1e1 je 0x91c1ea
0091c1e3 pop edi
0091c1e4 pop esi
0091c1e5 jmp 0x42c4a0
0091c1ea pop edi
0091c1eb pop esi
0091c1ec ret 
0091c1ed adc cl, ah
0091c1ef int3 
0091c1f0 mov eax, dword ptr [0x1e20018]
0091c1f5 ret 
0091c1f6 jecxz 0x91c1c4
0091c1f8 int3 
0091c1f9 int3 
0091c1fa int3 
0091c1fb int3 
0091c1fc int3 
0091c1fd int3 
0091c1fe int3 
0091c1ff int3 
0091d4e0 push esi
0091d4e1 mov esi, ecx
0091d4e3 call 0x9f0f50
0091d4e8 test eax, eax
0091d4ea jne 0x91d4fd
0091d4ec call 0x9f0f40
0091d4f1 test eax, eax
0091d4f3 jne 0x91d4fd
0091d4f5 mov dword ptr [0x1e1ffe0], esi
0091d4fb pop esi
0091d4fc ret 
0091d4fd call 0x91cc70
0091d502 movzx ecx, byte ptr [eax + 0x91d524]
0091d509 jmp dword ptr [ecx*4 + 0x91d51c]
0091d510 mov dword ptr [eax*4 + 0x1e1ffe0], esi
0091d517 pop esi
0091d518 ret 
0091d519 lea ecx, [ecx]
0091d51c adc ch, dl
0091d51e xchg ecx, eax
0091d51f add byte ptr [edi], dl
0091d521 aad 0x91
0091d523 add byte ptr [eax], al
0091d525 add byte ptr [eax], al
0091d527 add byte ptr [eax], al
0091d529 add byte ptr [eax], al
0091d52b add byte ptr [eax], al
0091d52d add dword ptr [eax], eax
0091d52f int3 
0091d530 call 0x9f41a0
0091d535 test eax, eax
0091d537 mov eax, dword ptr [0x1e2001c]
0091d53c jne 0x91d543
0091d53e mov eax, dword ptr [0x1e20018]
0091d543 ret 
0091d544 int3 
0091d545 int3 
0091d546 int3 
0091d547 int3 
0091d548 int3 
0091d549 int3 
0091d54a int3 
0091d54b int3 
0091d54c int3 
0091d54d int3 
0091d54e int3 
0091d54f int3 
0091d550 jmp 0x91c610
0091d555 int3 
0091d556 int3 
0091d557 int3 
0091d558 int3 
0091d559 int3 
0091d55a int3 
0091d55b int3 
0091d55c int3 
0091d55d int3 
0091d55e int3 
0091d55f int3 
00951a00 call 0x587500
00951a05 test eax, eax
00951a07 je 0x951b44
00951a0d mov eax, dword ptr [0x1e43c58]
00951a12 push esi
00951a13 mov esi, dword ptr [0x1e43c54]
00951a19 push edi
00951a1a mov edi, dword ptr [0x1e43c50]
00951a20 cmp eax, 5
00951a23 ja 0x951b42
00951a29 jmp dword ptr [eax*4 + 0x951b48]
00951a30 mov ecx, dword ptr [0x1e43c4c]
00951a36 call 0x42b6f0
00951a3b mov ecx, dword ptr [eax + 8]
00951a3e cmp ecx, dword ptr [eax + 0xc]
00951a41 je 0x951b42
00951a47 mov eax, dword ptr [esi]
00951a49 cmp eax, dword ptr [edi + 0xc]
00951a4c jl 0x951a55
00951a4e mov edx, dword ptr [edi + 8]
00951a51 mov dword ptr [esi], edx
00951a53 jmp 0x951a58
00951a55 inc eax
00951a56 mov dword ptr [esi], eax
00951a58 push 0
00951a5a xor edx, edx
00951a5c mov ecx, 0x140165d2
00951a61 call 0x55fc00
00951a66 pop edi
00951a67 mov dword ptr [0x1e43c5c], 1
00951a71 pop esi
00951a72 jmp 0x9515c0
00951a77 mov ecx, dword ptr [0x1e43c4c]
00951a7d call 0x42b6f0
00951a82 mov ecx, dword ptr [eax + 0x10]
00951a85 cmp ecx, dword ptr [eax + 0x14]
00951a88 je 0x951b42
00951a8e mov eax, dword ptr [esi + 4]
00951a91 cmp eax, dword ptr [edi + 0x14]
00951a94 jl 0x951a9e
00951a96 mov edx, dword ptr [edi + 0x10]
00951a99 mov dword ptr [esi + 4], edx
00951a9c jmp 0x951a58
00951a9e inc eax
00951a9f mov dword ptr [esi + 4], eax
00951aa2 jmp 0x951a58
00951aa4 mov ecx, dword ptr [0x1e43c4c]
00951aaa call 0x42b6f0
00951aaf cmp dword ptr [eax + 0x1c], 0
00951ab3 je 0x951b42
00951ab9 xor eax, eax
00951abb cmp dword ptr [esi + 0xc], eax
00951abe sete al
00951ac1 mov dword ptr [esi + 0xc], eax
00951ac4 push 0
00951ac6 xor edx, edx
00951ac8 mov ecx, 0x140165d2
00951acd call 0x55fc00
00951ad2 mov dword ptr [0x1e43c5c], 1
00951adc call 0x42c3f0
00951ae1 pop edi
00951ae2 pop esi
00951ae3 jmp 0x9515c0
00951ae8 mov ecx, dword ptr [0x1e43c4c]
00951aee call 0x42b6f0
00951af3 cmp dword ptr [eax + 0x24], 0
00951af7 je 0x951b42
00951af9 xor ecx, ecx
00951afb cmp dword ptr [esi + 0x14], ecx
00951afe sete cl
00951b01 mov dword ptr [esi + 0x14], ecx
00951b04 jmp 0x951ac4
00951b06 mov ecx, dword ptr [0x1e43c4c]
00951b0c call 0x42b6f0
00951b11 cmp dword ptr [eax + 0x20], 0
00951b15 je 0x951b42
00951b17 xor edx, edx
00951b19 cmp dword ptr [esi + 0x10], edx
00951b1c sete dl
00951b1f mov dword ptr [esi + 0x10], edx
00951b22 jmp 0x951ac4
00951b24 mov ecx, dword ptr [0x1e43c4c]
00951b2a call 0x42b6f0
00951b2f cmp dword ptr [eax + 0x18], 0
00951b33 je 0x951b42
00951b35 xor eax, eax
00951b37 cmp dword ptr [esi + 8], eax
00951b3a sete al
00951b3d mov dword ptr [esi + 8], eax
00951b40 jmp 0x951ac4
00951b42 pop edi
00951b43 pop esi
00951b44 ret 
00951b45 lea ecx, [ecx]
00951b48 xor byte ptr [edx], bl
00951b4a xchg ebp, eax
00951b4b add byte ptr [edi + 0x1a], dh
00951b4e xchg ebp, eax
00951b4f add byte ptr [edx + ebx + 0x1ae80095], ah
00951b56 xchg ebp, eax
00951b57 add byte ptr [esi], al
00951b59 sbb edx, dword ptr [ebp - 0x6ae4dc00]
00951b5f add al, ch
00951b61 wait 
00951b62 pop ecx
00951b63 ret 
00951b64 inc dword ptr [ebp + 0x37840fc0]
00951b6a add dword ptr [eax], eax
00951b6c add byte ptr [ecx + 0x1e43c58], ah
00951b72 push esi
00951b73 mov esi, dword ptr [0x1e43c54]
00951b79 push edi
00951b7a mov edi, dword ptr [0x1e43c50]
00951b80 cmp eax, 5
00951b83 ja 0x951ca2
00951b89 jmp dword ptr [eax*4 + 0x951ca8]
00951b90 mov ecx, dword ptr [0x1e43c4c]
00951b96 call 0x42b6f0
00951b9b mov ecx, dword ptr [eax + 8]
00951b9e cmp ecx, dword ptr [eax + 0xc]
00951ba1 je 0x951ca2
00951ba7 mov eax, dword ptr [esi]
00951ba9 cmp eax, dword ptr [edi + 8]
00951bac jg 0x951bb5
00951bae mov edx, dword ptr [edi + 0xc]
00951bb1 mov dword ptr [esi], edx
00951bb3 jmp 0x951bb8
00951bb5 dec eax
00951bb6 mov dword ptr [esi], eax
00951bb8 push 0
00951bba xor edx, edx
00951bbc mov ecx, 0x140165d2
00951bc1 call 0x55fc00
00951bc6 pop edi
00951bc7 mov dword ptr [0x1e43c5c], 1
00951bd1 pop esi
00951bd2 jmp 0x951610
00951bd7 mov ecx, dword ptr [0x1e43c4c]
00951bdd call 0x42b6f0
00951be2 mov ecx, dword ptr [eax + 0x10]
00951be5 cmp ecx, dword ptr [eax + 0x14]
00951be8 je 0x951ca2
00951bee mov eax, dword ptr [esi + 4]
00951bf1 cmp eax, dword ptr [edi + 0x10]
00951bf4 jg 0x951bfe
00951bf6 mov edx, dword ptr [edi + 0x14]
00951bf9 mov dword ptr [esi + 4], edx
00951bfc jmp 0x951bb8
00951bfe dec eax
00951bff mov dword ptr [esi + 4], eax
00951c02 jmp 0x951bb8
00951c04 mov ecx, dword ptr [0x1e43c4c]
00951c0a call 0x42b6f0
00951c0f cmp dword ptr [eax + 0x1c], 0
00951c13 je 0x951ca2
00951c19 xor eax, eax
00951c1b cmp dword ptr [esi + 0xc], eax
00951c1e sete al
00951c21 mov dword ptr [esi + 0xc], eax
00951c24 push 0
00951c26 xor edx, edx
00951c28 mov ecx, 0x140165d2
00951c2d call 0x55fc00
00951c32 mov dword ptr [0x1e43c5c], 1
00951c3c call 0x42c3f0
00951c41 pop edi
00951c42 pop esi
00951c43 jmp 0x951610
00951c48 mov ecx, dword ptr [0x1e43c4c]
00951c4e call 0x42b6f0
00951c53 cmp dword ptr [eax + 0x24], 0
00951c57 je 0x951ca2
00951c59 xor ecx, ecx
00951c5b cmp dword ptr [esi + 0x14], ecx
00951c5e sete cl
00951c61 mov dword ptr [esi + 0x14], ecx
00951c64 jmp 0x951c24
00951c66 mov ecx, dword ptr [0x1e43c4c]
00951c6c call 0x42b6f0
00951c71 cmp dword ptr [eax + 0x20], 0
00951c75 je 0x951ca2
00951c77 xor edx, edx
00951c79 cmp dword ptr [esi + 0x10], edx
00951c7c sete dl
00951c7f mov dword ptr [esi + 0x10], edx
00951c82 jmp 0x951c24
00951c84 mov ecx, dword ptr [0x1e43c4c]
00951c8a call 0x42b6f0
00951c8f cmp dword ptr [eax + 0x18], 0
00951c93 je 0x951ca2
00951c95 xor eax, eax
00951c97 cmp dword ptr [esi + 8], eax
00951c9a sete al
00951c9d mov dword ptr [esi + 8], eax
00951ca0 jmp 0x951c24
00951ca2 pop edi
00951ca3 pop esi
00951ca4 ret 
00951ca5 lea ecx, [ecx]
00951ca8 nop 
00951ca9 sbb edx, dword ptr [ebp - 0x6ae42900]
00951caf add byte ptr [esp + ebx], al
00951cb2 xchg ebp, eax
00951cb3 add byte ptr [eax + 0x1c], cl
00951cb6 xchg ebp, eax
00951cb7 add byte ptr [esi + 0x1c], ah
00951cba xchg ebp, eax
0042d580 mov dword ptr [0x14c5510], edx
0042d586 ret 
0042d587 mov ah, 0xcc
0042d589 int3 
0042d58a int3 
0042d58b int3 
0042d58c int3 
0042d58d int3 
0042d58e int3 
0042d58f int3 
0042d590 mov eax, dword ptr [0x14c5514]
0042d595 xorps xmm0, xmm0
0042d598 imul eax, eax, 0x6b0
0042d59e movss dword ptr [eax + 0x14c5528], xmm0
0042d5a6 ret 
0042d5a7 dec ebx
0042d5a8 int3 
0042d5a9 int3 
0042d5aa int3 
0042d5ab int3 
0042d5ac int3 
0042d5ad int3 
0042d5ae int3 
0042d5af int3 
0042d5b0 mov eax, dword ptr [0x14c5514]
0042d5b5 imul eax, eax, 0x6b0
0042d5bb mov dword ptr [eax + 0x14c5520], 1
0042d5c5 ret 
0042d5c6 je 0x42d594
0042d5c8 int3 
0042d5c9 int3 
0042d5ca int3 
0042d5cb int3 
0042d5cc int3 
0042d5cd int3 
0042d5ce int3 
0042d5cf int3 
0042d5d0 mov eax, dword ptr [0x14c550c]
0042d5d5 ret 
0042d5d6 popfd 
0042d5d7 int3 
0042d5d8 int3 
0042d5d9 int3 
0042d5da int3 
0042d5db int3 
0042d5dc int3 
0042d5dd int3 
0042d5de int3 
0042d5df int3 
0042d5e0 mov eax, dword ptr [0x14c5514]
0042d5e5 ret 
0042d5e6 lcall 0xcccc, 0xcccccccc
0042d5ed int3 
0042d5ee int3 
0042d5ef int3 
0042d5f0 mov eax, dword ptr [0x14c5514]
0042d5f5 imul eax, eax, 0x6b0
0042d5fb mov eax, dword ptr [eax + 0x14c5518]
0042d601 ret 
0042d602 iretd 
0042d603 int3 
0042d604 int3 
0042d605 int3 
0042d606 int3 
0042d607 int3 
0042d608 int3 
0042d609 int3 
0042d60a int3 
0042d60b int3 
0042d60c int3 
0042d60d int3 
0042d60e int3 
0042d60f int3 
0042d610 jmp 0x558cc0
0042d615 int3 
0042d616 jnp 0x42d609
0042d618 push es
0042d619 add ecx, esp
0042d61b int3 
0042d61c int3 
0042d61d int3 
0042d61e int3 
0042d61f int3 
0042c370 cmp dword ptr [0x14f42e0], 0
0042c377 je 0x42c3d2
0042c379 mov ecx, dword ptr [0x14f4310]
0042c37f imul ecx, ecx, 0xd0d0
0042c385 add ecx, 0x14f4550
0042c38b mov edx, dword ptr [ecx]
0042c38d inc edx
0042c38e cmp edx, 4
0042c391 jge 0x42c3d2
0042c393 mov dword ptr [ecx], edx
0042c395 imul edx, edx, 0x3430
0042c39b mov eax, dword ptr [0x14f4310]
0042c3a0 imul eax, eax, 0xd0d0
0042c3a6 push esi
0042c3a7 add eax, 0x14f4550
0042c3ac mov esi, dword ptr [eax]
0042c3ae imul esi, esi, 0x3430
0042c3b4 lea esi, [esi + eax + 0x10]
0042c3b8 lea edx, [edx + ecx - 0x3420]
0042c3bf lea ecx, [esi + 0x3160]
0042c3c5 call 0x43ba40
0042c3ca xorps xmm0, xmm0
0042c3cd movss dword ptr [esi], xmm0
0042c3d1 pop esi
0042c3d2 ret 
0042c3d3 or cl, ah
0042c3d5 int3 
0042c3d6 int3 
0042c3d7 int3 
0042c3d8 int3 
0042c3d9 int3 
0042c3da int3 
0042c3db int3 
0042c3dc int3 
0042c3dd int3 
0042c3de int3 
0042c3df int3 
0042c3e0 jmp 0x42c370
0042c3e5 int3 
0042c3e6 int3 
0042c3e7 int3 
0042c3e8 int3 
0042c3e9 int3 
0042c3ea int3 
0042c3eb int3 
0042c3ec int3 
0042c3ed int3 
0042c3ee int3 
0042c3ef int3 
0091cc70 call 0x5d41d0
0091cc75 test eax, eax
0091cc77 jne 0x91cd72
0091cc7d call 0x48ef10
0091cc82 cmp eax, 3
0091cc85 jne 0x91ccb6
0091cc87 cmp dword ptr [0x1e85a90], 0
0091cc8e je 0x91cc99
0091cc90 cmp dword ptr [0x1e85d0c], 0
0091cc97 jne 0x91ccb0
0091cc99 call 0x6c5400
0091cc9e test eax, eax
0091cca0 je 0x91ccb6
0091cca2 mov ecx, 0x100
0091cca7 call 0x6c5420
0091ccac test eax, eax
0091ccae je 0x91ccb6
0091ccb0 mov eax, 0xa
0091ccb5 ret 
0091ccb6 cmp dword ptr [0x1e85a90], 0
0091ccbd je 0x91cce0
0091ccbf call 0x6c5400
0091ccc4 test eax, eax
0091ccc6 je 0x91cce0
0091ccc8 call 0x8d72c0
0091cccd test eax, eax
009514b0 push esi
009514b1 mov esi, eax
009514b3 call 0x4dfc00
009514b8 xor edx, edx
009514ba mov ecx, eax
009514bc call 0x567f80
009514c1 mov eax, dword ptr [eax + 0x2c]
009514c4 test eax, eax
009514c6 je 0x9514f8
009514c8 cmp esi, 6
009514cb ja 0x9514f8
009514cd mov edx, dword ptr [esi*4 + 0xf45bb0]
009514d4 mov ecx, eax
009514d6 call 0x55e180
009514db mov esi, eax
009514dd test esi, esi
009514df je 0x9514f8
009514e1 mov ecx, esi
009514e3 call 0x5666a0
009514e8 xorps xmm0, xmm0
009514eb push ecx
009514ec mov ecx, esi
009514ee movss dword ptr [esp], xmm0
009514f3 call 0x566460
009514f8 pop esi
009514f9 ret 
009514fa ja 0x9514c8
009514fc int3 
009514fd int3 
009514fe int3 
009514ff int3 
00951500 push ecx
00951501 push esi
00951502 mov ecx, 0xa
00951507 mov esi, eax
00951509 call 0x55e240
0095150e fstp dword ptr [esp + 4]
00951512 call 0x4dfc00
00951517 xor edx, edx
00951519 mov ecx, eax
0095151b call 0x567f80
00951520 mov eax, dword ptr [eax + 0x2c]
00951523 test eax, eax
00951525 je 0x95155a
00951527 cmp esi, 6
0095152a ja 0x95155a
0095152c mov edx, dword ptr [esi*4 + 0xf45bb0]
00951533 mov ecx, eax
00951535 call 0x55e180
0095153a mov esi, eax
0095153c test esi, esi
0095153e je 0x95155a
00951540 mov ecx, esi
00951542 call 0x5666a0
00951547 movss xmm0, dword ptr [esp + 4]
0095154d push ecx
0095154e mov ecx, esi
00951550 movss dword ptr [esp], xmm0
00951555 call 0x566460
0095155a pop esi
0095155b pop ecx
0095155c ret 
0095155d enter -0x3334, 0x56
00951561 push edi
00951562 xor esi, esi
00951564 call 0x4dfc00
00951569 xor edx, edx
0095156b mov ecx, eax
0095156d call 0x567f80
00951572 mov eax, dword ptr [eax + 0x2c]
00951575 test eax, eax
00951577 je 0x9515a9
00951579 cmp esi, 6
0095157c ja 0x9515a9
0095157e mov edx, dword ptr [esi*4 + 0xf45bb0]
00951585 mov ecx, eax
00951587 call 0x55e180
0095158c mov edi, eax
0095158e test edi, edi
00951590 je 0x9515a9
00951592 mov ecx, edi
00951594 call 0x5666a0
00951599 xorps xmm0, xmm0
0095159c push ecx
0095159d mov ecx, edi
0095159f movss dword ptr [esp], xmm0
009515a4 call 0x566460
009515a9 inc esi
009515aa cmp esi, 7
009515ad jl 0x951564
009515af pop edi
009515b0 pop esi
009515b1 ret 
009515b2 test al, 0xcc
009515b4 int3 
009515b5 int3 
009515b6 int3 
009515b7 int3 
009515b8 int3 
009515b9 int3 
009515ba int3 
009515bb int3 
009515bc int3 
009515bd int3 
009515be int3 
009515bf int3 
00951660 mov eax, dword ptr [0x1e43c40]
00951665 ret 
00951666 pop ss
00951667 int3 
00951668 int3 
00951669 int3 
0095166a int3 
0095166b int3 
0095166c int3 
0095166d int3 
0095166e int3 
0095166f int3 
00951cc0 mov ecx, esi
00951cc2 call 0x587500
00951cc7 test eax, eax
00951cc9 je 0x951d12
00951ccb mov eax, dword ptr [0x1e43c58]
00951cd0 cmp eax, 6
00951cd3 ja 0x951d12
00951cd5 movzx eax, byte ptr [eax + 0x951d1c]
00951cdc jmp dword ptr [eax*4 + 0x951d14]
00951ce3 mov ecx, esi
00951ce5 jmp 0x951a00
00951cea mov ecx, dword ptr [0x1e43c4c]
00951cf0 call 0x42b6b0
00951cf5 push 0
00951cf7 xor edx, edx
00951cf9 mov ecx, 0x6573d2d1
00951cfe call 0x55fc00
00951d03 mov dword ptr [0x1e43c5c], 1
00951d0d jmp 0x42c3f0
00951d12 ret 
00951d13 nop 
00951d14 jecxz 0x951d32
00951d16 xchg ebp, eax
00951d17 add dl, ch
00951d19 sbb al, 0x95
00951d1b add byte ptr [eax], al
00951d1d add byte ptr [eax], al
00951d1f add byte ptr [eax], al
00951d21 add byte ptr [ecx], al
00951d23 int3 
00951d24 int3 
00951d25 int3 
00951d26 int3 
00951d27 int3 
00951d28 int3 
00951d29 int3 
00951d2a int3 
00951d2b int3 
00951d2c int3 
00951d2d int3 
00951d2e int3 
00951d2f int3 
0042c3f0 mov dword ptr [0x14f42e4], 1
0042c3fa jmp 0x468fa0
0042c3ff int3 
0042c400 movss xmm0, dword ptr [esp + 4]
0042c406 movss dword ptr [0x14f42ec], xmm0
0042c40e ret 4
0042c411 lcall 0xcccc, 0xcccccccc
0042c418 int3 
0042c419 int3 
0042c41a int3 
0042c41b int3 
0042c41c int3 
0042c41d int3 
0042c41e int3 
0042c41f int3 
0042c420 mov eax, dword ptr [0x14f4308]
0042c425 ret 
0042c4a0 mov eax, dword ptr [0x14f4310]
0042c4a5 xorps xmm0, xmm0
0042c4a8 imul eax, eax, 0xd0d0
0042c4ae add eax, 0x14f4550
0042c4b3 mov ecx, dword ptr [eax]
0042c4b5 imul ecx, ecx, 0x3430
0042c4bb lea eax, [ecx + eax + 0x10]
0042c4bf push esi
0042c4c0 lea ecx, [eax + 0x3160]
0042c4c6 movss dword ptr [eax], xmm0
0042c4ca call 0x43ba00
0042c4cf mov eax, dword ptr [0x14f4310]
0042c4d4 imul eax, eax, 0xd0d0
0042c4da add eax, 0x14f4550
0042c4df mov edx, dword ptr [eax]
0042c4e1 imul edx, edx, 0x3430
0042c4e7 lea esi, [edx + eax + 0x10]
0042c4eb call 0x91d530
0042c4f0 push esi
0042c4f1 lea ecx, [esi + 0xee0]
0042c4f7 mov edx, eax
0042c4f9 call 0x454d10
0042c4fe mov eax, dword ptr [0x14f4310]
0042c503 imul eax, eax, 0xd0d0
0042c509 add eax, 0x14f4550
0042c50e mov ecx, dword ptr [eax]
0042c510 imul ecx, ecx, 0x3430
0042c516 lea esi, [ecx + eax + 0x10]
0042c51a lea ecx, [esi + 0x10]
0042c51d mov edx, 2
0042c522 call 0x455170
0042c527 push esi
0042c528 lea ecx, [esi + 0xee0]
0042c52e mov edx, 3
0042c533 call 0x454ba0
0042c538 movss xmm0, dword ptr [0xec6e14]
0042c540 movss dword ptr [esi + 0x1b90], xmm0
0042c548 xorps xmm0, xmm0
0042c54b mov dword ptr [esi + 0x1b80], 3
0042c555 lea ecx, [esi + 0x3160]
0042c55b movss dword ptr [esi], xmm0
0042c55f call 0x43ba00
0042c564 mov dword ptr [0x14f42e4], 1
0042c56e pop esi
0042c56f jmp 0x468fa0
0042c574 int3 
0042c575 int3 
0042c576 int3 
0042c577 int3 
0042c578 int3 
0042c579 int3 
0042c57a int3 
0042c57b int3 
0042c57c int3 
0042c57d int3 
0042c57e int3 
0042c57f int3 
0042c580 mov dword ptr [0x14f4308], 1
0042c58a call 0x42c4a0
0042c58f mov dword ptr [0x14f4308], 0
0042c599 ret 
0042c59a jb 0x42c568
0042c59c int3 
0042c59d int3 
0042c59e int3 
0042c59f int3 
