
TARGET 0x47a67a
0047a62a mov dword ptr [edi + 0x26c], eax
0047a630 mov ecx, dword ptr [esi + 0x1c]
0047a633 mov dword ptr [edi + 0x24], ecx
0047a636 mov edx, dword ptr [esi + 0x20]
0047a639 mov dword ptr [edi + 0x68], edx
0047a63c call 0xd996b0
0047a641 mov ebx, dword ptr [eax + 0x18]
0047a644 mov ebp, dword ptr [eax + 0x1c]
0047a647 push 0
0047a649 push 0
0047a64b xorpd xmm0, xmm0
0047a64f movlpd qword ptr [esp + 0x20], xmm0
0047a655 push 0
0047a657 xorpd xmm0, xmm0
0047a65b movlpd qword ptr [esp + 0x2c], xmm0
0047a661 mov eax, dword ptr [esi + 0x34]
0047a664 mov ecx, dword ptr [esi + 0x30]
0047a667 mov edx, dword ptr [esi + 0x28]
0047a66a push eax
0047a66b mov eax, dword ptr [esi + 0x24]
0047a66e push ecx
0047a66f dec edx
0047a670 push edx
0047a671 mov edx, dword ptr [esi + 0x2c]
0047a674 dec eax
0047a675 push eax
0047a676 lea ecx, [esp + 0x34]
0047a67a call 0xdbf810
0047a67f mov ecx, dword ptr [esi + 0x48]
0047a682 mov edx, dword ptr [esi + 0x44]
0047a685 mov eax, dword ptr [esi + 0x3c]
0047a688 push 0
0047a68a push 0
0047a68c push 0
0047a68e push ecx
0047a68f mov ecx, dword ptr [esi + 0x38]
0047a692 push edx
0047a693 mov edx, dword ptr [esi + 0x40]
0047a696 dec eax
0047a697 dec ecx
0047a698 push eax
0047a699 push ecx
0047a69a lea ecx, [esp + 0x3c]
0047a69e call 0xdbf810
0047a6a3 cmp ebp, dword ptr [esp + 0x1c]
0047a6a7 jl 0x47a6be
0047a6a9 jg 0x47a6b1
0047a6ab cmp ebx, dword ptr [esp + 0x18]
0047a6af jb 0x47a6be
0047a6b1 cmp dword ptr [edi + 8], 0
0047a6b5 jne 0x47a6be
0047a6b7 mov dword ptr [edi + 8], 3
0047a6be cmp ebp, dword ptr [esp + 0x24]
0047a6c2 jl 0x47a6df
0047a6c4 jg 0x47a6cc
0047a6c6 cmp ebx, dword ptr [esp + 0x20]
0047a6ca jb 0x47a6df
0047a6cc mov eax, dword ptr [edi + 8]
0047a6cf test eax, eax
0047a6d1 je 0x47a6d8
0047a6d3 cmp eax, 3
0047a6d6 jne 0x47a6df
0047a6d8 mov dword ptr [edi + 8], 4
0047a6df mov ecx, dword ptr [esp + 0x14]
0047a6e3 mov eax, dword ptr [0x103bd30]
0047a6e8 add dword ptr [esp + 0x10], 0x50
0047a6ed inc ecx
0047a6ee mov dword ptr [esp + 0x14], ecx
0047a6f2 cmp ecx, dword ptr [eax]
0047a6f4 jl 0x47a53f
0047a6fa mov ecx, 0x103bd34
0047a6ff mov dword ptr [0x103bcc0], 1
0047a709 call 0xda1cb0
0047a70e push 0
0047a710 xor edx, edx
0047a712 mov ecx, 0x103bd58
0047a717 call 0xda1d60
0047a71c pop edi
0047a71d pop esi
0047a71e pop ebp
0047a71f pop ebx
0047a720 mov esp, ebp
0047a722 pop ebp
0047a723 ret 
0047a724 int3 
0047a725 int3 
0047a726 int3 
0047a727 int3 
0047a728 int3 
0047a729 int3 
0047a72a int3 
0047a72b int3 
0047a72c int3 
0047a72d int3 
0047a72e int3 
0047a72f int3 
0047a730 sub esp, 0x10
0047a733 cmp dword ptr [0x103bcb0], 1
0047a73a je 0x47a8d5
0047a740 push esi

TARGET 0x4f46ad
004f465d inc dword ptr [eax]
004f465f add cl, al
004f4661 call 0x1137076e
004f4666 or edi, ecx
004f4668 shl edi, 8
004f466b or eax, edi
004f466d mov ecx, eax
004f466f shr ecx, 0x10
004f4672 and ecx, 0xff
004f4678 push 0
004f467a push 0
004f467c push ecx
004f467d mov ecx, eax
004f467f shr ecx, 8
004f4682 and ecx, 0xff
004f4688 push ecx
004f4689 and eax, 0xff
004f468e push eax
004f468f mov eax, edx
004f4691 mov ecx, edx
004f4693 shr ecx, 0x10
004f4696 shr eax, 0x18
004f4699 and ecx, 0xff
004f469f dec eax
004f46a0 dec ecx
004f46a1 push eax
004f46a2 push ecx
004f46a3 and edx, 0xffff
004f46a9 lea ecx, [esp + 0x28]
004f46ad call 0xdbf810
004f46b2 lea edx, [esp + 0xc]
004f46b6 lea eax, [esp + 0x14]
004f46ba mov dword ptr [esp + 0x1c], edx
004f46be push eax
004f46bf lea edx, [esp + 0xc]
004f46c3 mov ecx, esi
004f46c5 mov dword ptr [esp + 0x18], 0
004f46cd mov dword ptr [esp + 0x1c], 1
004f46d5 mov dword ptr [esp + 0x24], 0x693bf0
004f46dd mov dword ptr [esp + 0xc], 0x25d2cb79
004f46e5 call 0x6943a0
004f46ea lea ecx, [esp + 8]
004f46ee call 0x694140
004f46f3 pop edi
004f46f4 mov eax, esi
004f46f6 pop esi
004f46f7 add esp, 0x1c
004f46fa ret 
004f46fb mov dh, 0xcc
004f46fd int3 
004f46fe int3 
004f46ff int3 
004f4700 push esi
004f4701 xor esi, esi
004f4703 cmp dword ptr [0x15dd428], esi
004f4709 je 0x4f472e
004f470b push edi
004f470c call 0x4dff60
004f4711 mov edi, dword ptr [eax]
004f4713 mov edx, dword ptr [0x15dd428]
004f4719 push 0x4c
004f471b mov ecx, eax
004f471d mov eax, dword ptr [edi + 0xc]
004f4720 push 0xcf4d04d3
004f4725 call eax
004f4727 mov dword ptr [0x15dd428], esi
004f472d pop edi
004f472e mov dword ptr [0x15dd41c], esi
004f4734 mov dword ptr [0x15dd424], esi
004f473a mov dword ptr [0x15dd420], esi
004f4740 mov dword ptr [0x15dd418], esi
004f4746 mov dword ptr [0x15dd414], esi
004f474c mov dword ptr [0x15dd410], esi
004f4752 pop esi
004f4753 ret 
004f4754 int3 
004f4755 int3 
004f4756 int3 
004f4757 int3 
004f4758 int3 
004f4759 int3 
004f475a int3 
004f475b int3 
004f475c int3 
004f475d int3 
004f475e int3 
004f475f int3 
004f4760 sub esp, 8
004f4763 xor eax, eax
004f4765 mov dword ptr [esp], eax
004f4768 mov dword ptr [esp + 4], eax
004f476c lea eax, [esp]
004f476f push eax
004f4770 mov edx, 0x476dbd74

TARGET 0x52d381
0052d331 cmpsb byte ptr [esi], byte ptr es:[edi]
0052d332 or eax, dword ptr [ecx]
0052d334 mov dword ptr [esp + 0x40], ebp
0052d338 mov dword ptr [esp + 0x34], 0x10ba5fc
0052d340 mov dword ptr [esp + 0x38], ebp
0052d344 call 0xd96350
0052d349 mov ebx, dword ptr [esp + 0x10]
0052d34d mov edi, eax
0052d34f mov edx, edi
0052d351 mov ecx, ebx
0052d353 call 0x654b60
0052d358 test eax, eax
0052d35a je 0x52d3bd
0052d35c push ebp
0052d35d mov edx, edi
0052d35f mov ecx, ebx
0052d361 call 0x654f20
0052d366 push edx
0052d367 push eax
0052d368 lea ecx, [esp + 0x18]
0052d36c call 0xdbf9a0
0052d371 push ebp
0052d372 push ebp
0052d373 push ebp
0052d374 push ebp
0052d375 push ebp
0052d376 push ebp
0052d377 push ebp
0052d378 mov edx, 0x7b2
0052d37d lea ecx, [esp + 0x38]
0052d381 call 0xdbf810
0052d386 mov ecx, dword ptr [esp + 0x10]
0052d38a add dword ptr [esp + 0x1c], ecx
0052d38e mov edx, dword ptr [esp + 0x14]
0052d392 adc dword ptr [esp + 0x20], edx
0052d396 call 0xd996b0
0052d39b mov esi, dword ptr [eax]
0052d39d mov ecx, eax
0052d39f mov eax, dword ptr [esi + 4]
0052d3a2 lea edx, [esp + 0x24]
0052d3a6 call eax
0052d3a8 mov ecx, dword ptr [esp + 0x24]
0052d3ac add dword ptr [esp + 0x1c], ecx
0052d3b0 mov edx, dword ptr [esp + 0x28]
0052d3b4 mov esi, 1
0052d3b9 adc dword ptr [esp + 0x20], edx
0052d3bd pop ebx
0052d3be mov edi, esi
0052d3c0 neg edi
0052d3c2 sbb edi, edi
0052d3c4 and edi, 0x155832af
0052d3ca add edi, 0x76a5c593
0052d3d0 mov dword ptr [esp + 0xc], ebp
0052d3d4 cmp dword ptr [0x10ba5f0], ebp
0052d3da je 0x52d412
0052d3dc lea eax, [esp + 0xc]
0052d3e0 push eax
0052d3e1 call 0x52c750
0052d3e6 test eax, eax
0052d3e8 je 0x52d412
0052d3ea cmp dword ptr [esp + 0xc], ebp
0052d3ee je 0x52d402
0052d3f0 neg esi
0052d3f2 sbb esi, esi
0052d3f4 and esi, 0x8e641543
0052d3fa lea edi, [esi - 0x995ab83]
0052d400 jmp 0x52d412
0052d402 neg esi
0052d404 sbb esi, esi
0052d406 and esi, 0xa955c450
0052d40c lea edi, [esi - 0x2b65809e]
0052d412 lea ecx, [esp + 0x18]
0052d416 lea edx, [esp + 0x28]
0052d41a mov dword ptr [esp + 0x30], ecx
0052d41e mov ecx, dword ptr [esp + 0x14]
0052d422 push edx
0052d423 mov edx, edi
0052d425 mov dword ptr [esp + 0x2c], ebp
0052d429 mov dword ptr [esp + 0x30], 1
0052d431 mov dword ptr [esp + 0x38], 0x686570
0052d439 call 0xdc09d0
0052d43e pop edi
0052d43f pop esi
0052d440 pop ebp
0052d441 add esp, 0x34
0052d444 ret 
0052d445 out dx, eax
0052d446 int3 
0052d447 int3 
0052d448 int3 

TARGET 0x597848
005977f8 stc 
005977f9 shl edi, 8
005977fc or eax, edi
005977fe mov ecx, eax
00597800 shr ecx, 0x10
00597803 and ecx, 0xff
00597809 push 0
0059780b push 0
0059780d push ecx
0059780e mov ecx, eax
00597810 shr ecx, 8
00597813 and ecx, 0xff
00597819 push ecx
0059781a and eax, 0xff
0059781f push eax
00597820 mov eax, edx
00597822 mov ecx, edx
00597824 shr ecx, 0x10
00597827 shr eax, 0x18
0059782a and ecx, 0xff
00597830 dec eax
00597831 dec ecx
00597832 push eax
00597833 push ecx
00597834 xorpd xmm0, xmm0
00597838 and edx, 0xffff
0059783e lea ecx, [esp + 0x28]
00597842 movlpd qword ptr [esp + 0x28], xmm0
00597848 call 0xdbf810
0059784d lea edx, [esp + 0xc]
00597851 lea eax, [esp + 0x14]
00597855 mov dword ptr [esp + 0x1c], edx
00597859 push eax
0059785a lea edx, [esp + 0xc]
0059785e mov ecx, esi
00597860 mov dword ptr [esp + 0x18], 0
00597868 mov dword ptr [esp + 0x1c], 1
00597870 mov dword ptr [esp + 0x24], 0x693bf0
00597878 mov dword ptr [esp + 0xc], 0xebebfcf9
00597880 call 0x6943a0
00597885 lea ecx, [esp + 8]
00597889 call 0x694140
0059788e pop edi
0059788f mov eax, esi
00597891 pop esi
00597892 add esp, 0x1c
00597895 ret 
00597896 mov dword ptr [esi], 0
0059789c mov eax, esi
0059789e pop esi
0059789f add esp, 0x1c
005978a2 ret 
005978a3 nop 
005978a4 int3 
005978a5 int3 
005978a6 int3 
005978a7 int3 
005978a8 int3 
005978a9 int3 
005978aa int3 
005978ab int3 
005978ac int3 
005978ad int3 
005978ae int3 
005978af int3 
005978b0 mov dword ptr [0x186a3b0], 3
005978ba mov dword ptr [0x186a3b4], 0
005978c4 ret 
005978c5 in al, 0xcc
005978c7 int3 
005978c8 int3 
005978c9 int3 
005978ca int3 
005978cb int3 
005978cc int3 
005978cd int3 
005978ce int3 
005978cf int3 
005978d0 mov edx, dword ptr [0x186a3b4]
005978d6 mov ecx, dword ptr [ecx + 0x14]
005978d9 jmp 0x467e40
005978de int3 
005978df int3 
005978e0 push esi
005978e1 push 0
005978e3 push 0
005978e5 push 0
005978e7 push 0x5c369069
005978ec push 0x894e3cbd
005978f1 mov esi, ecx
005978f3 push 0
005978f5 mov edx, 0xbb05a9c1
005978fa mov ecx, 0x20e3760
005978ff call 0xd94400
00597904 test eax, eax
00597906 jne 0x597914
00597908 mov eax, dword ptr [esi + 0xc]

TARGET 0x687875
00687825 and al, 0x10
00687827 mov ecx, eax
00687829 push 0
0068782b shr ecx, 0x10
0068782e mov edx, eax
00687830 and ecx, 0xff
00687836 push 0
00687838 push ecx
00687839 shr edx, 8
0068783c and edx, 0xff
00687842 push edx
00687843 mov edx, dword ptr [esp + 0x1c]
00687847 and eax, 0xff
0068784c push eax
0068784d mov eax, edx
0068784f mov ecx, edx
00687851 shr ecx, 0x10
00687854 shr eax, 0x18
00687857 and ecx, 0xff
0068785d dec eax
0068785e dec ecx
0068785f push eax
00687860 push ecx
00687861 xorpd xmm0, xmm0
00687865 and edx, 0xffff
0068786b lea ecx, [esp + 0x1c]
0068786f movlpd qword ptr [esp + 0x1c], xmm0
00687875 call 0xdbf810
0068787a lea ecx, [esp]
0068787d call 0x5f7cb0
00687882 add esp, 8
00687885 ret 8
00687888 int3 
00687889 int3 
0068788a int3 
0068788b int3 
0068788c int3 
0068788d int3 
0068788e int3 
0068788f int3 
00687890 sub esp, 0x28
00687893 mov eax, dword ptr [edx]
00687895 movss xmm0, dword ptr [eax]
00687899 addss xmm0, dword ptr [0xec7978]
006878a1 push esi
006878a2 mov esi, ecx
006878a4 movaps xmm1, xmm0
006878a7 mulss xmm1, dword ptr [0xf1f410]
006878af cvttss2si ecx, xmm1
006878b3 mov eax, 0x2aaaaaab
006878b8 imul ecx
006878ba sar edx, 1
006878bc mov eax, edx
006878be shr eax, 0x1f
006878c1 add eax, edx
006878c3 lea edx, [eax + eax*2]
006878c6 add edx, edx
006878c8 add edx, edx
006878ca push edi
006878cb mov dword ptr [esp + 0x14], ecx
006878cf sub ecx, edx
006878d1 xor edi, edi
006878d3 movss dword ptr [esp + 8], xmm0
006878d9 mov dword ptr [esp + 0x10], eax
006878dd mov dword ptr [esp + 0xc], ecx
006878e1 cmp dword ptr [0x1e85a90], edi
006878e7 je 0x6878f0
006878e9 mov eax, dword ptr [0x1e85e70]
006878ee jmp 0x6878fb
006878f0 call 0x4ab840
006878f5 movss xmm0, dword ptr [esp + 8]
006878fb cmp eax, 3
006878fe ja 0x6879e0
00687904 jmp dword ptr [eax*4 + 0x6879e8]
0068790b lea eax, [esp + 0xc]
0068790f lea edx, [esp + 0x18]
00687913 mov dword ptr [esp + 0x28], eax
00687917 mov eax, 0x686550
0068791c push edx
0068791d mov dword ptr [esp + 0x20], 2
00687925 mov dword ptr [esp + 0x30], eax
00687929 lea ecx, [esp + 0x14]
0068792d mov dword ptr [esp + 0x28], eax
00687931 mov edx, 0xd656da98
00687936 jmp 0x6879d1

TARGET 0x69469d


TARGET 0xa93ca6
00a93c56 add byte ptr [ebx - 0x76f3dbbc], cl
00a93c5c inc ecx
00a93c5d sbb byte ptr [eax + 1], bh
00a93c63 add esp, 8
00a93c66 ret 4
00a93c69 cmp edx, 0xc0b8fbdd
00a93c6f je 0xa93cc8
00a93c71 cmp edx, 0xc30b215a
00a93c77 je 0xa93c81
00a93c79 add esp, 8
00a93c7c jmp 0xa8eb20
00a93c81 push edi
00a93c82 mov edi, dword ptr [esp + 0x10]
00a93c86 test edi, edi
00a93c88 je 0xa93cc7
00a93c8a push esi
00a93c8b push 0
00a93c8d push 0
00a93c8f push 0
00a93c91 push 0
00a93c93 push 0
00a93c95 lea esi, [ecx + 0x90]
00a93c9b push 0
00a93c9d push 0
00a93c9f mov edx, 0x7b2
00a93ca4 mov ecx, esi
00a93ca6 call 0xdbf810
00a93cab mov eax, edi
00a93cad cdq 
00a93cae push edx
00a93caf push eax
00a93cb0 lea ecx, [esp + 0x10]
00a93cb4 call 0xdbf9a0
00a93cb9 mov ecx, dword ptr [esp + 8]
00a93cbd add dword ptr [esi], ecx
00a93cbf mov edx, dword ptr [esp + 0xc]
00a93cc3 adc dword ptr [esi + 4], edx
00a93cc6 pop esi
00a93cc7 pop edi
00a93cc8 mov eax, 1
00a93ccd add esp, 8
00a93cd0 ret 4
00a93cd3 int3 
00a93cd4 int3 
00a93cd5 int3 
00a93cd6 int3 
00a93cd7 int3 
00a93cd8 int3 
00a93cd9 int3 
00a93cda int3 
00a93cdb int3 
00a93cdc int3 
00a93cdd int3 
00a93cde int3 
00a93cdf int3 
00a93ce0 cmp edx, 0x4c9cb817
00a93ce6 jne 0xa93d04
00a93ce8 mov eax, dword ptr [ecx + 0x88]
00a93cee mov edx, dword ptr [esp + 4]
00a93cf2 mov dword ptr [ecx + eax*4 + 0x60], edx
00a93cf6 mov eax, 1
00a93cfb add dword ptr [ecx + 0x88], eax
00a93d01 ret 0x10
00a93d04 jmp 0xa8ec60
00a93d09 int3 
00a93d0a int3 
00a93d0b int3 
00a93d0c int3 
00a93d0d int3 
00a93d0e int3 
00a93d0f int3 
00a93d10 push esi
00a93d11 push edi
00a93d12 xor edi, edi
00a93d14 lea eax, [edi + 9]
00a93d17 lea esi, [ecx + 0x84]
00a93d1d lea ecx, [ecx]
00a93d20 mov edx, dword ptr [esi]
00a93d22 test edx, edx
00a93d24 je 0xa93d34
00a93d26 cmp edx, dword ptr [ecx + 0x18]
00a93d29 jne 0xa93d3f
00a93d2b test edi, edi
00a93d2d jne 0xa93d3f
00a93d2f mov edi, 1
00a93d34 sub esi, 4
00a93d37 dec eax
00a93d38 jns 0xa93d20
00a93d3a pop edi
00a93d3b xor eax, eax
00a93d3d pop esi
00a93d3e ret 
00a93d3f mov eax, dword ptr [ecx + eax*4 + 0x60]
00a93d43 pop edi
00a93d44 pop esi
00a93d45 ret 
00a93d46 int3 
00a93d47 int3 
00a93d48 int3 
00a93d49 int3 
00a93d4a int3 
00a93d4b int3 
00a93d4c int3 
00a93d4d int3 
00a93d4e int3 
00a93d4f int3 
00a93d50 push ebp
00a93d51 mov ebp, esp
00a93d53 and esp, 0xfffffff0
00a93d56 sub esp, 0x10
00a93d59 mov eax, ecx
00a93d5b xorpd xmm0, xmm0
00a93d5f movlpd qword ptr [esp + 8], xmm0
00a93d65 xor ecx, ecx
00a93d67 xorpd xmm0, xmm0

TARGET 0xa94a0b
00a949bb movsd dword ptr es:[edi], dword ptr [esi]
00a949bc cmp eax, 0xd6840f
00a949c1 add byte ptr [eax], al
00a949c3 cmp edx, 0x5575fd5a
00a949c9 je 0xa94a38
00a949cb cmp edx, 0x5e2fc596
00a949d1 jne 0xa94ad7
00a949d7 mov edi, dword ptr [esp + 0x14]
00a949db test edi, edi
00a949dd je 0xa94b0a
00a949e3 push 0
00a949e5 push 0
00a949e7 push 0
00a949e9 push 0
00a949eb push 0
00a949ed lea esi, [ecx + 0xb0]
00a949f3 push 0
00a949f5 push 0
00a949f7 mov edx, 0x7b2
00a949fc mov ecx, esi
00a949fe mov dword ptr [esi], 0
00a94a04 mov dword ptr [esi + 4], 0
00a94a0b call 0xdbf810
00a94a10 mov eax, edi
00a94a12 cdq 
00a94a13 push edx
00a94a14 push eax
00a94a15 lea ecx, [esp + 0x10]
00a94a19 call 0xdbf9a0
00a94a1e mov eax, dword ptr [esp + 8]
00a94a22 add dword ptr [esi], eax
00a94a24 mov ecx, dword ptr [esp + 0xc]
00a94a28 pop edi
00a94a29 adc dword ptr [esi + 4], ecx
00a94a2c mov eax, 1
00a94a31 pop esi
00a94a32 add esp, 8
00a94a35 ret 4
00a94a38 mov edi, dword ptr [esp + 0x14]
00a94a3c test edi, edi
00a94a3e je 0xa94b0a
00a94a44 push 0
00a94a46 push 0
00a94a48 push 0
00a94a4a push 0
00a94a4c push 0
00a94a4e lea esi, [ecx + 0xa8]
00a94a54 push 0
00a94a56 push 0
00a94a58 mov edx, 0x7b2
00a94a5d mov ecx, esi
00a94a5f mov dword ptr [esi], 0
00a94a65 mov dword ptr [esi + 4], 0
00a94a6c call 0xdbf810
00a94a71 mov eax, edi
00a94a73 cdq 
00a94a74 push edx
00a94a75 push eax
00a94a76 lea ecx, [esp + 0x10]
00a94a7a call 0xdbf9a0
00a94a7f mov edx, dword ptr [esp + 8]
00a94a83 add dword ptr [esi], edx
00a94a85 mov eax, dword ptr [esp + 0xc]
00a94a89 pop edi
00a94a8a adc dword ptr [esi + 4], eax
00a94a8d mov eax, 1
00a94a92 pop esi
00a94a93 add esp, 8
00a94a96 ret 4
00a94a99 mov edx, dword ptr [esp + 0x14]
00a94a9d pop edi
00a94a9e mov dword ptr [ecx + 0xc4], edx
00a94aa4 mov eax, 1
00a94aa9 pop esi
00a94aaa add esp, 8
00a94aad ret 4
00a94ab0 mov eax, dword ptr [esp + 0x14]
00a94ab4 pop edi
00a94ab5 mov dword ptr [ecx + 0xc8], eax
00a94abb mov eax, 1
00a94ac0 pop esi
00a94ac1 add esp, 8
00a94ac4 ret 4
00a94ac7 cmp edx, 0xc98e08b7
00a94acd je 0xa94b00

TARGET 0xb18401
00b183b1 sub byte ptr [ebp - 0x17cfdbb4], cl
00b183b7 and eax, 0x8b002a76
00b183bc dec esp
00b183bd and al, 0x10
00b183bf mov eax, 0x66666667
00b183c4 imul ecx
00b183c6 sar edx, 2
00b183c9 mov eax, edx
00b183cb shr eax, 0x1f
00b183ce add eax, edx
00b183d0 lea edx, [eax + eax*4]
00b183d3 add edx, edx
00b183d5 mov eax, ecx
00b183d7 sub eax, edx
00b183d9 mov edx, dword ptr [esp + 8]
00b183dd push 0
00b183df sub ecx, eax
00b183e1 push 0
00b183e3 cmp eax, 5
00b183e6 mov eax, dword ptr [esp + 8]
00b183ea push 0
00b183ec jl 0xb183f1
00b183ee add ecx, 5
00b183f1 push ecx
00b183f2 mov ecx, dword ptr [esp + 0x14]
00b183f6 push eax
00b183f7 push ecx
00b183f8 push edx
00b183f9 mov edx, dword ptr [esp + 0x28]
00b183fd lea ecx, [esp + 0x38]
00b18401 call 0xdbf810
00b18406 mov eax, dword ptr [0x1f98f28]
00b1840b add eax, dword ptr [esp + 0x1c]
00b1840f mov ecx, dword ptr [0x1f98f2c]
00b18415 adc ecx, dword ptr [esp + 0x20]
00b18419 push 0
00b1841b mov dword ptr [0x1f98f10], eax
00b18420 add eax, dword ptr [0x1f98f20]
00b18426 push 0
00b18428 mov dword ptr [0x1f98f14], ecx
00b1842e adc ecx, dword ptr [0x1f98f24]
00b18434 push 0
00b18436 mov dword ptr [0x1f98f18], eax
00b1843b mov dword ptr [0x1f98f1c], ecx
00b18441 lea eax, [esp + 0x1c]
00b18445 push eax
00b18446 lea ecx, [esp + 0x10]
00b1844a push ecx
00b1844b lea edx, [esp + 0x18]
00b1844f push edx
00b18450 lea eax, [esp + 0x20]
00b18454 push eax
00b18455 lea edx, [esp + 0x28]
00b18459 mov ecx, 0x1f98f18
00b1845e call 0xdbf9e0
00b18463 mov ecx, dword ptr [esp + 0x10]
00b18467 mov eax, 0x66666667
00b1846c imul ecx
00b1846e sar edx, 2
00b18471 mov eax, edx
00b18473 shr eax, 0x1f
00b18476 add eax, edx
00b18478 lea edx, [eax + eax*4]
00b1847b add edx, edx
00b1847d mov eax, ecx
00b1847f sub eax, edx
00b18481 push 0
00b18483 sub ecx, eax
00b18485 push 0
00b18487 push 0
00b18489 cmp eax, 5
00b1848c jge 0xb184c2
00b1848e mov eax, dword ptr [esp + 0xc]
00b18492 mov edx, dword ptr [esp + 0x14]
00b18496 push ecx
00b18497 mov ecx, dword ptr [esp + 0x14]
00b1849b push eax
00b1849c push ecx
00b1849d push edx
00b1849e mov edx, dword ptr [esp + 0x28]
00b184a2 lea ecx, [esp + 0x38]
00b184a6 call 0xdbf810
00b184ab mov eax, dword ptr [esp + 0x1c]
00b184af mov ecx, dword ptr [esp + 0x20]
00b184b3 mov dword ptr [0x1f98f18], eax
00b184b8 mov dword ptr [0x1f98f1c], ecx
00b184be add esp, 0x24
00b184c1 ret 
00b184c2 mov edx, dword ptr [esp + 0xc]

TARGET 0xb397e1
00b39791 mov dword ptr [esp + 0x30], edi
00b39795 call 0xb3c5b0
00b3979a mov ecx, dword ptr [esi + 0x14]
00b3979d mov edx, eax
00b3979f call 0xdc09d0
00b397a4 pop edi
00b397a5 pop esi
00b397a6 pop ebp
00b397a7 pop ebx
00b397a8 add esp, 0x30
00b397ab ret 
00b397ac mov ecx, ebx
00b397ae call 0xb3c560
00b397b3 mov ebp, eax
00b397b5 mov ecx, ebp
00b397b7 call 0xb3d080
00b397bc mov ebx, eax
00b397be cmp ebp, 0xe
00b397c1 je 0xb399b5
00b397c7 push edi
00b397c8 push edi
00b397c9 push edi
00b397ca push edi
00b397cb push edi
00b397cc push edi
00b397cd push edi
00b397ce lea edx, [ebx + 1]
00b397d1 lea ecx, [esp + 0x34]
00b397d5 mov dword ptr [esp + 0x44], edi
00b397d9 mov dword ptr [esp + 0x48], 2
00b397e1 call 0xdbf810
00b397e6 push edi
00b397e7 push edi
00b397e8 push edi
00b397e9 push edi
00b397ea push edi
00b397eb lea edx, [esp + 0x2c]
00b397ef push edi
00b397f0 mov dword ptr [esp + 0x50], edx
00b397f4 mov ebp, 0x686570
00b397f9 push edi
00b397fa mov edx, ebx
00b397fc lea ecx, [esp + 0x3c]
00b39800 mov dword ptr [esp + 0x58], ebp
00b39804 call 0xdbf810
00b39809 lea ecx, [esp + 0x28]
00b3980d lea eax, [esp + 0x20]
00b39811 push ecx
00b39812 mov ecx, dword ptr [esi + 0x14]
00b39815 mov edx, 0xb27c2cf3
00b3981a mov dword ptr [esp + 0x34], eax
00b3981e mov dword ptr [esp + 0x38], ebp
00b39822 call 0xdc09d0
00b39827 pop edi
00b39828 pop esi
00b39829 pop ebp
00b3982a pop ebx
00b3982b add esp, 0x30
00b3982e ret 
00b3982f cmp dword ptr [0x1378290], ebp
00b39835 jne 0xb399b5
00b3983b mov ecx, ebx
00b3983d call 0xb3c560
00b39842 mov ecx, eax
00b39844 call 0xb3c4c0
00b39849 mov ecx, dword ptr [esi + 0x14]
00b3984c mov dword ptr [esp + 0x28], edi
00b39850 mov dword ptr [esp + 0x2c], edi
00b39854 test eax, eax
00b39856 je 0xb3986f
00b39858 lea edx, [esp + 0x28]
00b3985c push edx
00b3985d mov edx, 0x8b61fc13
00b39862 call 0xdc09d0
00b39867 pop edi
00b39868 pop esi
00b39869 pop ebp
00b3986a pop ebx
00b3986b add esp, 0x30
00b3986e ret 
00b3986f lea eax, [esp + 0x28]
00b39873 push eax
00b39874 mov edx, 0xb7fe5b1
00b39879 call 0xdc09d0
00b3987e pop edi
00b3987f pop esi
00b39880 pop ebp
00b39881 pop ebx
00b39882 add esp, 0x30
00b39885 ret 
00b39886 mov ecx, dword ptr [0x1378290]
00b3988c mov dword ptr [esp + 0x10], edi
00b39890 mov dword ptr [esp + 0x14], edi
00b39894 cmp ecx, 0xe
00b39897 jne 0xb398e0
00b39899 call 0x67de30
00b3989e cmp eax, ebp
00b398a0 jne 0xb398d5
00b398a2 cmp dword ptr [0x13782dc], edi

TARGET 0xb5cacb
00b5ca7b push esp
00b5ca7c and al, 0x18
00b5ca7e push 0
00b5ca80 push 0
00b5ca82 push 0
00b5ca84 lea eax, [esp + 0x1c]
00b5ca88 push eax
00b5ca89 lea ecx, [esp + 0x10]
00b5ca8d push ecx
00b5ca8e lea edx, [esp + 0x18]
00b5ca92 push edx
00b5ca93 lea eax, [esp + 0x20]
00b5ca97 push eax
00b5ca98 lea edx, [esp + 0x28]
00b5ca9c lea ecx, [esp + 0x30]
00b5caa0 call 0xdbf9e0
00b5caa5 cmp dword ptr [esp + 0x10], 0x1e
00b5caaa push 0
00b5caac push 0
00b5caae push 0
00b5cab0 jge 0xb5cae6
00b5cab2 mov ecx, dword ptr [esp + 0xc]
00b5cab6 mov edx, dword ptr [esp + 0x10]
00b5caba mov eax, dword ptr [esp + 0x14]
00b5cabe push 0x1e
00b5cac0 push ecx
00b5cac1 push edx
00b5cac2 mov edx, dword ptr [esp + 0x24]
00b5cac6 push eax
00b5cac7 lea ecx, [esp + 0x38]
00b5cacb call 0xdbf810
00b5cad0 mov ecx, dword ptr [esp + 0x1c]
00b5cad4 mov edx, dword ptr [esp + 0x20]
00b5cad8 mov dword ptr [0x1ff8650], ecx
00b5cade mov dword ptr [0x1ff8654], edx
00b5cae4 jmp 0xb5cb3b
00b5cae6 mov eax, dword ptr [esp + 0xc]
00b5caea mov ecx, dword ptr [esp + 0x10]
00b5caee mov edx, dword ptr [esp + 0x14]
00b5caf2 push 0
00b5caf4 push eax
00b5caf5 push ecx
00b5caf6 push edx
00b5caf7 mov edx, dword ptr [esp + 0x28]
00b5cafb lea ecx, [esp + 0x38]
00b5caff call 0xdbf810
00b5cb04 mov ecx, dword ptr [esp + 0x20]
00b5cb08 mov eax, dword ptr [esp + 0x1c]
00b5cb0c push 0
00b5cb0e mov dword ptr [0x1ff8654], ecx
00b5cb14 push 0xe10
00b5cb19 lea ecx, [esp + 0x2c]
00b5cb1d mov dword ptr [0x1ff8650], eax
00b5cb22 call 0xdbf9a0
00b5cb27 mov edx, dword ptr [esp + 0x24]
00b5cb2b add dword ptr [0x1ff8650], edx
00b5cb31 mov eax, dword ptr [esp + 0x28]
00b5cb35 adc dword ptr [0x1ff8654], eax
00b5cb3b mov ecx, dword ptr [0x1ff8650]
00b5cb41 mov edx, dword ptr [0x1ff8654]
00b5cb47 xorpd xmm0, xmm0
00b5cb4b mov dword ptr [0x1ff8648], ecx
00b5cb51 mov dword ptr [0x1ff864c], edx
00b5cb57 movlpd qword ptr [0x1ff8658], xmm0
00b5cb5f add esp, 0x2c
00b5cb62 ret 
00b5cb63 int3 
00b5cb64 int3 
00b5cb65 int3 
00b5cb66 int3 
00b5cb67 int3 
00b5cb68 int3 
00b5cb69 int3 
00b5cb6a int3 
00b5cb6b int3 
00b5cb6c int3 
00b5cb6d int3 
00b5cb6e int3 
00b5cb6f int3 
00b5cb70 sub esp, 0x10
00b5cb73 push 0
00b5cb75 push 0x15180
00b5cb7a lea ecx, [esp + 0x10]
00b5cb7e call 0xdbf9a0
00b5cb83 mov eax, dword ptr [esp + 8]
00b5cb87 add dword ptr [0x1ff8648], eax
00b5cb8d mov ecx, dword ptr [esp + 0xc]
00b5cb91 push 0

TARGET 0xb6acdf
00b6ac8f mov ebp, 0xc0a10138
00b6ac94 mov ebp, 0x148b0138
00b6ac99 lea edx, [ebp + edi*4 - 0x72affec8]
00b6aca0 dec esp
00b6aca1 and al, 0x5c
00b6aca3 call 0xcf35d0
00b6aca8 mov edx, 0x2091f50
00b6acad lea ecx, [esp + 0x58]
00b6acb1 call 0x504520
00b6acb6 test eax, eax
00b6acb8 jne 0xb6b00a
00b6acbe lea edx, [esp + 0x30]
00b6acc2 lea ecx, [esp + 0x58]
00b6acc6 call 0xcf2370
00b6accb xor edi, edi
00b6accd push edi
00b6acce push edi
00b6accf push edi
00b6acd0 push edi
00b6acd1 push edi
00b6acd2 push 2
00b6acd4 push 7
00b6acd6 mov edx, 0x7db
00b6acdb lea ecx, [esp + 0x5c]
00b6acdf call 0xdbf810
00b6ace4 mov edx, dword ptr [esp + 0x34]
00b6ace8 cmp edx, dword ptr [esp + 0x44]
00b6acec jl 0xb6b00a
00b6acf2 jg 0xb6ad02
00b6acf4 mov eax, dword ptr [esp + 0x30]
00b6acf8 cmp eax, dword ptr [esp + 0x40]
00b6acfc jb 0xb6b00a
00b6ad02 push edi
00b6ad03 push edi
00b6ad04 push edi
00b6ad05 push edi
00b6ad06 push edi
00b6ad07 lea ecx, [esp + 0x50]
00b6ad0b push ecx
00b6ad0c lea edx, [esp + 0x68]
00b6ad10 push edx
00b6ad11 lea edx, [esp + 0x70]
00b6ad15 lea ecx, [esp + 0x4c]
00b6ad19 call 0xdbf9e0
00b6ad1e mov eax, dword ptr [esp + 0x3c]
00b6ad22 mov edx, dword ptr [esp + 0x50]
00b6ad26 mov ecx, dword ptr [esp + 0x54]
00b6ad2a mov ebx, 1
00b6ad2f push ebx
00b6ad30 push ebx
00b6ad31 inc eax
00b6ad32 push eax
00b6ad33 call 0x5f7c20
00b6ad38 mov dword ptr [esp + 0x4c], eax
00b6ad3c lea ecx, [esp + 0x4c]
00b6ad40 lea edx, [esp + 0x14]
00b6ad44 lea eax, [esp + 0x18]
00b6ad48 mov dword ptr [esp + 0x14], ecx
00b6ad4c mov ecx, dword ptr [esi + 0x14]
00b6ad4f mov dword ptr [esp + 0x20], edx
00b6ad53 mov edx, 0x1cef4c41
00b6ad58 push eax
00b6ad59 mov dword ptr [esp + 0x1c], edi
00b6ad5d mov dword ptr [esp + 0x20], ebx
00b6ad61 mov dword ptr [esp + 0x28], 0x68b5e0
00b6ad69 call 0xdc09d0
00b6ad6e pop edi
00b6ad6f pop esi
00b6ad70 pop ebx
00b6ad71 mov esp, ebp
00b6ad73 pop ebp
00b6ad74 ret 
00b6ad75 test byte ptr [0x138bdc4], 0x10
00b6ad7c jne 0xb6b00a
00b6ad82 lea ecx, [esp + 0x14]
00b6ad86 xor edi, edi
00b6ad88 push ecx
00b6ad89 mov ecx, dword ptr [esi + 0x14]
00b6ad8c mov edx, 0x91097629
00b6ad91 mov dword ptr [esp + 0x18], edi
00b6ad95 mov dword ptr [esp + 0x1c], edi
00b6ad99 call 0xdc09d0
00b6ad9e pop edi
00b6ad9f pop esi
00b6ada0 pop ebx
00b6ada1 mov esp, ebp
00b6ada3 pop ebp
00b6ada4 ret 

TARGET 0xcf238b
00cf233b int3 
00cf233c int3 
00cf233d int3 
00cf233e int3 
00cf233f int3 
00cf2340 push esi
00cf2341 mov esi, ecx
00cf2343 mov eax, dword ptr [esi]
00cf2345 mov edx, dword ptr [eax]
00cf2347 call edx
00cf2349 test eax, eax
00cf234b je 0xcf235d
00cf234d mov eax, dword ptr [esi]
00cf234f mov edx, dword ptr [eax]
00cf2351 mov ecx, esi
00cf2353 call edx
00cf2355 mov ecx, eax
00cf2357 pop esi
00cf2358 jmp 0xcf5ef0
00cf235d xor eax, eax
00cf235f pop esi
00cf2360 ret 
00cf2361 int3 
00cf2362 int3 
00cf2363 int3 
00cf2364 int3 
00cf2365 int3 
00cf2366 int3 
00cf2367 int3 
00cf2368 int3 
00cf2369 int3 
00cf236a int3 
00cf236b int3 
00cf236c int3 
00cf236d int3 
00cf236e int3 
00cf236f int3 
00cf2370 push esi
00cf2371 push edi
00cf2372 push 0
00cf2374 push 0
00cf2376 push 0
00cf2378 push 0
00cf237a push 0
00cf237c mov edi, edx
00cf237e push 0
00cf2380 mov esi, ecx
00cf2382 push 1
00cf2384 mov edx, 0x76c
00cf2389 mov ecx, edi
00cf238b call 0xdbf810
00cf2390 mov eax, dword ptr [esi]
00cf2392 mov edx, dword ptr [eax]
00cf2394 mov ecx, esi
00cf2396 call edx
00cf2398 test eax, eax
00cf239a je 0xcf23ad
00cf239c mov eax, dword ptr [esi]
00cf239e mov edx, dword ptr [eax]
00cf23a0 mov ecx, esi
00cf23a2 call edx
00cf23a4 mov edx, edi
00cf23a6 mov ecx, eax
00cf23a8 call 0xcf67a0
00cf23ad mov eax, edi
00cf23af pop edi
00cf23b0 pop esi
00cf23b1 ret 
00cf23b2 int3 
00cf23b3 int3 
00cf23b4 int3 
00cf23b5 int3 
00cf23b6 int3 
00cf23b7 int3 
00cf23b8 int3 
00cf23b9 int3 
00cf23ba int3 
00cf23bb int3 
00cf23bc int3 
00cf23bd int3 
00cf23be int3 
00cf23bf int3 
00cf23c0 push esi
00cf23c1 mov esi, ecx
00cf23c3 mov eax, dword ptr [esi]
00cf23c5 mov edx, dword ptr [eax]
00cf23c7 push edi
00cf23c8 xor edi, edi
00cf23ca call edx
00cf23cc test eax, eax
00cf23ce je 0xcf23e5
00cf23d0 mov eax, dword ptr [esi]
00cf23d2 mov edx, dword ptr [eax]
00cf23d4 mov ecx, esi
00cf23d6 call edx
00cf23d8 mov ecx, eax
00cf23da call 0xcf5f20
00cf23df mov eax, dword ptr [eax + 0x7c]
00cf23e2 pop edi
00cf23e3 pop esi
00cf23e4 ret 
00cf23e5 mov eax, edi
00cf23e7 pop edi
00cf23e8 pop esi
00cf23e9 ret 
00cf23ea int3 
00cf23eb int3 
00cf23ec int3 
00cf23ed int3 
00cf23ee int3 
00cf23ef int3 
00cf23f0 mov eax, ecx
00cf23f2 mov ecx, dword ptr [esp + 8]
00cf23f6 mov dword ptr [eax + 4], ecx
00cf23f9 mov dword ptr [eax], 0xeeabfc
00cf23ff ret 8
00cf2402 int3 
00cf2403 int3 
00cf2404 int3 
00cf2405 int3 
00cf2406 int3 
00cf2407 int3 
00cf2408 int3 
00cf2409 int3 
00cf240a int3 
00cf240b int3 
00cf240c int3 
00cf240d int3 
00cf240e int3 
00cf240f int3 
00cf2410 push esi
00cf2411 mov esi, ecx
00cf2413 mov eax, dword ptr [esi]
00cf2415 push edi
00cf2416 mov edi, edx
00cf2418 mov edx, dword ptr [eax + 4]
00cf241b call edx
00cf241d test eax, eax
00cf241f je 0xcf2435
00cf2421 mov eax, dword ptr [esi]
00cf2423 mov edx, dword ptr [eax + 4]
00cf2426 mov ecx, esi
00cf2428 call edx
00cf242a mov edx, edi
00cf242c pop edi
00cf242d mov ecx, eax
00cf242f pop esi
00cf2430 jmp 0xcf5f00
00cf2435 pop edi
00cf2436 pop esi
00cf2437 ret 
00cf2438 int3 
00cf2439 int3 
00cf243a int3 
00cf243b int3 
00cf243c int3 
00cf243d int3 
00cf243e int3 
00cf243f int3 
00cf2440 push esi
00cf2441 mov esi, ecx
00cf2443 mov eax, dword ptr [esi]
00cf2445 push edi
00cf2446 mov edi, edx
00cf2448 mov edx, dword ptr [eax + 4]
00cf244b call edx
00cf244d test eax, eax
00cf244f je 0xcf2465
00cf2451 mov eax, dword ptr [esi]

TARGET 0xcf9eb8
00cf9e68 int3 
00cf9e69 int3 
00cf9e6a int3 
00cf9e6b int3 
00cf9e6c int3 
00cf9e6d int3 
00cf9e6e int3 
00cf9e6f int3 
00cf9e70 mov eax, dword ptr [ecx + 0x50]
00cf9e73 ret 
00cf9e74 int3 
00cf9e75 int3 
00cf9e76 int3 
00cf9e77 int3 
00cf9e78 int3 
00cf9e79 int3 
00cf9e7a int3 
00cf9e7b int3 
00cf9e7c int3 
00cf9e7d int3 
00cf9e7e int3 
00cf9e7f int3 
00cf9e80 mov eax, edx
00cf9e82 test eax, eax
00cf9e84 je 0xcf9ebd
00cf9e86 mov edx, dword ptr [ecx + 0x1c]
00cf9e89 push 0
00cf9e8b push 0
00cf9e8d push 0
00cf9e8f mov ecx, edx
00cf9e91 shr ecx, 0x1a
00cf9e94 push ecx
00cf9e95 mov ecx, edx
00cf9e97 shr ecx, 0x15
00cf9e9a and ecx, 0x1f
00cf9e9d push ecx
00cf9e9e mov ecx, edx
00cf9ea0 shr ecx, 0x10
00cf9ea3 and ecx, 0x1f
00cf9ea6 push ecx
00cf9ea7 mov ecx, edx
00cf9ea9 shr ecx, 0xc
00cf9eac and ecx, 0xf
00cf9eaf push ecx
00cf9eb0 and edx, 0xfff
00cf9eb6 mov ecx, eax
00cf9eb8 call 0xdbf810
00cf9ebd ret 
00cf9ebe int3 
00cf9ebf int3 
00cf9ec0 mov eax, edx
00cf9ec2 test eax, eax
00cf9ec4 je 0xcf9efd
00cf9ec6 mov edx, dword ptr [ecx + 0x20]
00cf9ec9 push 0
00cf9ecb push 0
00cf9ecd push 0
00cf9ecf mov ecx, edx
00cf9ed1 shr ecx, 0x1a
00cf9ed4 push ecx
00cf9ed5 mov ecx, edx
00cf9ed7 shr ecx, 0x15
00cf9eda and ecx, 0x1f
00cf9edd push ecx
00cf9ede mov ecx, edx
00cf9ee0 shr ecx, 0x10
00cf9ee3 and ecx, 0x1f
00cf9ee6 push ecx
00cf9ee7 mov ecx, edx
00cf9ee9 shr ecx, 0xc
00cf9eec and ecx, 0xf
00cf9eef push ecx
00cf9ef0 and edx, 0xfff
00cf9ef6 mov ecx, eax
00cf9ef8 call 0xdbf810
00cf9efd ret 
00cf9efe int3 
00cf9eff int3 
00cf9f00 cmp edx, dword ptr [ecx + 0x50]
00cf9f03 jl 0xcf9f08
00cf9f05 xor eax, eax
00cf9f07 ret 
00cf9f08 mov ecx, dword ptr [ecx + 0x54]
00cf9f0b lea eax, [edx*8]
00cf9f12 sub eax, edx
00cf9f14 lea eax, [ecx + eax*4]
00cf9f17 ret 
00cf9f18 int3 
00cf9f19 int3 
00cf9f1a int3 
00cf9f1b int3 
00cf9f1c int3 
00cf9f1d int3 
00cf9f1e int3 
00cf9f1f int3 
00cf9f20 mov eax, dword ptr [ecx + 0x54]
00cf9f23 cmp edx, eax
00cf9f25 jb 0xcf9f54
00cf9f27 mov ecx, dword ptr [ecx + 0x50]
00cf9f2a push esi
00cf9f2b lea esi, [ecx*8]
00cf9f32 sub esi, ecx
00cf9f34 lea ecx, [eax + esi*4]
00cf9f37 pop esi
00cf9f38 cmp edx, ecx
00cf9f3a jae 0xcf9f54
00cf9f3c sub edx, eax
00cf9f3e mov ecx, edx
00cf9f40 mov eax, 0x92492493
00cf9f45 imul ecx
00cf9f47 add edx, ecx
00cf9f49 sar edx, 4
00cf9f4c mov eax, edx
00cf9f4e shr eax, 0x1f
00cf9f51 add eax, edx
00cf9f53 ret 
00cf9f54 or eax, 0xffffffff
00cf9f57 ret 
00cf9f58 int3 
00cf9f59 int3 
00cf9f5a int3 
00cf9f5b int3 
00cf9f5c int3 
00cf9f5d int3 
00cf9f5e int3 
00cf9f5f int3 
00cf9f60 push 0
00cf9f62 push 0
00cf9f64 push 0
00cf9f66 push 0xf2de008c
00cf9f6b push 0x2d5f6f5f
00cf9f70 push 0xcb6b0904
00cf9f75 mov edx, 0xbb05a9c1
00cf9f7a mov ecx, 0x20e3760

TARGET 0xd63570
00d63520 add dword ptr [eax], eax
00d63522 mov ecx, 0x20e31c8
00d63527 call 0xdbf9a0
00d6352c mov eax, 2
00d63531 test byte ptr [0x20e31d0], al
00d63537 jne 0xd6354c
00d63539 or dword ptr [0x20e31d0], eax
00d6353f push 0xec0ec0
00d63544 call 0xe2316c
00d63549 add esp, 4
00d6354c push 0
00d6354e push 0x93a80
00d63553 mov ecx, 0x20e31c0
00d63558 call 0xdbf9a0
00d6355d push 0
00d6355f push 0
00d63561 push 0
00d63563 push 0
00d63565 push 0
00d63567 push 0
00d63569 push ebx
00d6356a mov edx, ebp
00d6356c lea ecx, [esp + 0x28]
00d63570 call 0xdbf810
00d63575 lea ecx, [esp + 0xc]
00d63579 xor edi, edi
00d6357b call 0xdbf8c0
00d63580 cmp eax, dword ptr [esp + 0x20]
00d63584 je 0xd635ba
00d63586 jmp 0xd63590
00d63588 lea esp, [esp]
00d6358f nop 
00d63590 mov eax, dword ptr [0x20e31c8]
00d63595 add dword ptr [esp + 0xc], eax
00d63599 mov ecx, dword ptr [0x20e31cc]
00d6359f adc dword ptr [esp + 0x10], ecx
00d635a3 lea ecx, [esp + 0xc]
00d635a7 call 0xdbf8c0
00d635ac mov edx, edi
00d635ae inc edi
00d635af cmp edx, 0x23
00d635b2 jg 0xd635e2
00d635b4 cmp eax, dword ptr [esp + 0x20]
00d635b8 jne 0xd63590
00d635ba mov eax, dword ptr [esp + 0x1c]
00d635be xor edi, edi
00d635c0 sub eax, edi
00d635c2 je 0xd63698
00d635c8 dec eax
00d635c9 je 0xd63685
00d635cf dec eax
00d635d0 je 0xd635fa
00d635d2 mov dword ptr [esi], edi
00d635d4 mov dword ptr [esi + 4], edi
00d635d7 pop edi
00d635d8 pop ebp
00d635d9 mov eax, esi
00d635db pop ebx
00d635dc add esp, 8
00d635df ret 0x14
00d635e2 pop edi
00d635e3 pop ebp
00d635e4 mov dword ptr [esi], 0
00d635ea mov dword ptr [esi + 4], 0
00d635f1 mov eax, esi
00d635f3 pop ebx
00d635f4 add esp, 8
00d635f7 ret 0x14
00d635fa mov dword ptr [esp + 0x20], ebx
00d635fe mov edi, edi
00d63600 mov eax, dword ptr [0x20e31c0]
00d63605 add dword ptr [esp + 0xc], eax
00d63609 mov ecx, dword ptr [0x20e31c4]
00d6360f push 0
00d63611 adc dword ptr [esp + 0x14], ecx
00d63615 push 0
00d63617 push 0
00d63619 push 0
00d6361b push 0
00d6361d push 0
00d6361f lea edx, [esp + 0x38]
00d63623 push edx
00d63624 lea edx, [esp + 0x40]
00d63628 lea ecx, [esp + 0x28]
00d6362c call 0xdbf9e0
00d63631 mov eax, edi
00d63633 inc edi
00d63634 cmp eax, 7